Feed it a diff; get a review grouped by severity, plus a drop-in commit message that follows Conventional Commits. Optimized for short feedback loops during squash merges.
LGTM — no substantive changes.
- Output must be valid Markdown, ≤ max_words words total.
<<<
{{diff}}
>>>
``+ export async function handleWebhook(req: Request) { + const sig = req.headers.get("stripe-signature") + if (!sig) return new Response("no sig", { status: 400 }) + const event = stripe.webhooks.constructEvent( + await req.text(), sig, process.env.STRIPE_SECRET + ) + return new Response("ok") + }
Blockers
STRIPE_WEBHOOK_SECRET, not the API secret, for signature verification.constructEvent in try/catch — it throws on replay.Nits
Suggested commit
feat(webhooks): add stripe handler scaffold