Payments
Stripe webhook processing
Two webhook implementations exist: SDK-based arcana.stripe.endpoint.php and lightweight webhook.php.
Partially implemented Verified from source System
In one sentence
Webhook handlers verify Stripe signatures and grant credits or update subscriptions depending on event type.
Dual paths
arcana.stripe.endpoint.php→stripe_process_webhook()(SDK, broader event set).webhook.php→ manual HMAC verification for checkout.session.* only.
Which URL is configured in the live Stripe dashboard is not evidenced in-repo.