Nextjs Payment Webhook¶
Resolve a Next.js SaaS public API and payment webhook from repository and request evidence.
Generated example
This page is generated from evaluations/scenarios/nextjs-payment-webhook.yaml. The scenario YAML remains the executable source of truth.
Request¶
Implement a public API payment webhook for this full-stack SaaS.
Repository evidence¶
package.json¶
app/page.tsx¶
Expected resolution¶
| Resolution layer | Expected |
|---|---|
| Profile | fullstack-web-application |
| Modifiers | public-api, security-sensitive |
| Language adapters | typescript |
| Framework adapters | nextjs, react |
Normalized context¶
artifact_type: fullstack-application
architecture_authority: incremental-improvement
exposure:
- external-integration
constraints:
security: high
Skill modes¶
| Item | Expected |
|---|---|
api-and-compatibility |
external-api |
contracts-and-errors |
safety-critical |
Conflict decisions¶
| Item | Expected |
|---|---|
static-types-vs-runtime-validation |
require-runtime-validation |
Significant decisions¶
preserve-public-contractsenforce-trust-boundaries
Principles under test¶
Forbidden outcomes¶
- trust client declarations
Scenario source¶
schema_version: 0.10.0
id: nextjs-payment-webhook
description: Resolve a Next.js SaaS public API and payment webhook from repository
and request evidence.
input:
request: Implement a public API payment webhook for this full-stack SaaS.
repository_signals:
package.json: '{"private": true, "dependencies": {"next": "15", "react": "19"}}
'
app/page.tsx: export default function Page() {}
expected:
context:
artifact_type: fullstack-application
architecture_authority: incremental-improvement
exposure:
- external-integration
constraints:
security: high
profile: fullstack-web-application
modifiers:
- public-api
- security-sensitive
language_adapters:
- typescript
framework_adapters:
- nextjs
- react
significant_decisions:
- preserve-public-contracts
- enforce-trust-boundaries
skill_modes:
api-and-compatibility: external-api
contracts-and-errors: safety-critical
conflicts:
static-types-vs-runtime-validation: require-runtime-validation
forbidden:
- trust client declarations
principles_under_test:
- parse-dont-validate
- idempotency
- cqrs
- yagni