Payments & Ledgers · 2026
Yasmin’s Kitchen
Live commerce: payment links, signature-verified webhooks, and a reconciler for the callback that never lands.
What it is
A kitchen taking real money. Each order raises a Stripe payment link against the REST API directly, restricted to one completed session so a forwarded URL cannot be paid twice, with the amount recomputed server-side from the order’s own lines and the discount clamped at the food total so a promo code can never go negative or eat into the courier’s charge — integer pence end to end. The webhook is verified by hand against node:crypto: HMAC-SHA256 over timestamp.payload on the raw bytes, a replay tolerance window, and a constant-time compare. Behind it a bounded reconciler asks Stripe about any link still marked unpaid when a customer returns, because the worst state this system can be in is showing a Pay button to somebody who already paid. It only ever moves an order forward.
Who built it
Yasmin’s Kitchen was designed and built by Sahib Bharaj, afull-stack engineer based in Nairobi, Kenya, working in Next.js, TypeScript, Stripe, MongoDB, Node.js.