Add Stripe stablecoin webhook for v2 thin events

- New /api/stripe/stablecoin/webhook endpoint with STRIPE_STABLECOIN_WEBHOOK_SECRET
- Move v2 handlers (recipient account, outbound payment) from connect to stablecoin

Author: devkiran

apps/web/.env.example

@@ -184,4 +184,5 @@ HUBSPOT_CLIENT_SECRET=
 
 # Stablecoin payout
 STRIPE_FINANCIAL_ACCOUNT_ID=
-STRIPE_PAYMENT_METHOD_ID=
+STRIPE_PAYMENT_METHOD_ID=
+STRIPE_STABLECOIN_WEBHOOK_SECRET=

…nnect/webhook/outbound-payment-failed.ts …ecoin/webhook/outbound-payment-failed.tsapps/web/app/(ee)/api/stripe/connect/webhook/outbound-payment-failed.ts renamed to apps/web/app/(ee)/api/stripe/stablecoin/webhook/outbound-payment-failed.ts apps/web/app/(ee)/api/stripe/connect/webhook/outbound-payment-failed.ts renamed to apps/web/app/(ee)/api/stripe/stablecoin/webhook/outbound-payment-failed.ts

@@ -0,0 +1,89 @@
+import { stripe } from "@/lib/stripe";
+import { log } from "@dub/utils";
+import { logAndRespond } from "app/(ee)/api/cron/utils";
+import Stripe from "stripe";
+import { outboundPaymentFailed } from "./outbound-payment-failed";
+import { outboundPaymentPosted } from "./outbound-payment-posted";
+import { outboundPaymentReturned } from "./outbound-payment-returned";
+import { recipientAccountClosed } from "./recipient-account-closed";
+import { recipientConfigurationUpdated } from "./recipient-configuration-updated";
+
+const relevantEvents = new Set([
+  "v2.core.account.closed",
+  "v2.core.account[configuration.recipient].updated",
+  "v2.money_management.outbound_payment.posted",
+  "v2.money_management.outbound_payment.returned",
+  "v2.money_management.outbound_payment.failed",
+]);
+
+const webhookSecret = process.env.STRIPE_STABLECOIN_WEBHOOK_SECRET;
+
+// POST /api/stripe/stablecoin/webhook – Stripe Stablecoin webhooks
+export const POST = async (req: Request) => {
+  const body = await req.text();
+  const signature = req.headers.get("Stripe-Signature");
+
+  if (!signature) {
+    return logAndRespond("Missing Stripe-Signature header.");
+  }
+
+  if (!webhookSecret) {
+    return logAndRespond(
+      "STRIPE_STABLECOIN_WEBHOOK_SECRET environment variable is not set.",
+      {
+        status: 500,
+      },
+    );
+  }
+
+  let event: Stripe.Event;
+
+  try {
+    event = stripe.webhooks.constructEvent(body, signature, webhookSecret);
+  } catch (error) {
+    return logAndRespond(`[Webhook error]:${error.message}`, {
+      status: 400,
+    });
+  }
+
+  if (!relevantEvents.has(event.type)) {
+    return logAndRespond(`Unsupported event ${event.type}, skipping...`);
+  }
+
+  let response = "OK";
+  try {
+    switch (event.type) {
+      // @ts-ignore
+      case "v2.core.account.closed":
+        response = await recipientAccountClosed(event);
+        break;
+      // @ts-ignore
+      case "v2.core.account[configuration.recipient].updated":
+        response = await recipientConfigurationUpdated(event);
+        break;
+      // @ts-ignore
+      case "v2.money_management.outbound_payment.posted":
+        response = await outboundPaymentPosted(event);
+        break;
+      // @ts-ignore
+      case "v2.money_management.outbound_payment.returned":
+        response = await outboundPaymentReturned(event);
+        break;
+      // @ts-ignore
+      case "v2.money_management.outbound_payment.failed":
+        response = await outboundPaymentFailed(event);
+        break;
+    }
+  } catch (error) {
+    await log({
+      message: `/api/stripe/stablecoin/webhook webhook failed (${event.type}). Error: ${error.message}`,
+      type: "errors",
+    });
+
+    return logAndRespond(`[Webhook error]: ${error.message}`, {
+      status: 400,
+    });
+  }
+
+  return logAndRespond(`[${event.type}]: ${response}`);
+};