The webhook dead-letter queue you wish you had deployed yesterday.

// app/api/webhooks/stripe/route.ts
// HookSentinel forwards raw byte streams untouched. Signature verification never breaks:
import { headers } from 'next/headers';
import Stripe from 'stripe';

const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);

export async function POST(req: Request) {
  const body = await req.text(); // Raw buffer preserved
  const signature = (await headers()).get('stripe-signature')!;

  try {
    const event = stripe.webhooks.constructEvent(
      body,
      signature,
      process.env.STRIPE_WEBHOOK_SECRET!
    );
    // Process payment safely in your background queue...
    return new Response('ok', { status: 200 });
  } catch (err: any) {
    // If your DB or worker fails here with 500, HookSentinel DLQ catches it!
    return new Response(err.message, { status: 400 });
  }
}