Orbit Store

export async function POST(req: Request) {
  const cart = CartSchema.parse(await req.json());
  const items = await priceServerSide(cart);   // never trust client prices

  const intent = await stripe.paymentIntents.create({
    amount: items.reduce((s, i) => s + i.unitAmount * i.qty, 0),
    currency: "usd",
    automatic_payment_methods: { enabled: true },
    metadata: { cartId: cart.id },
  });

  await reserveStock(items, { expiresInMinutes: 15 });
  return Response.json({ clientSecret: intent.client_secret });
}

switch (event.type) {
  case "payment_intent.succeeded":
    await db.order.update({
      where: { intentId: event.data.object.id },
      data: { status: "PAID", paidAt: new Date() },
    });
    await sendReceipt(event.data.object);
    break;
  case "payment_intent.payment_failed":
    await releaseStock(event.data.object.metadata.cartId);
    break;
}