@conto_finance/sdk 0.6.0 → 0.6.2-beta.1

package/dist/link-wallet.d.mts

@@ -0,0 +1,120 @@
+/**
+ * Stripe Link agent wallet adapters for conto.checkout.getLinkCard().
+ *
+ * The wallet runs in the builder's environment with the builder's own Link
+ * access. Card data stays in this process: it is never sent to Conto, written
+ * to a log, or placed in an error.
+ */
+/** Statuses a Link spend request reports. `unknown` stands for any status this SDK does not know. */
+type LinkSpendRequestStatus = 'created' | 'pending_approval' | 'requires_action' | 'approved' | 'submitted' | 'succeeded' | 'denied' | 'expired' | 'canceled' | 'failed' | 'unknown';
+/** One Link card request, built by Conto from the approved checkpoint. */
+interface LinkCardRequestInput {
+    /** The Conto-approved amount in cents. The card is limited to it. */
+    amountMinor: number;
+    currency: 'USD';
+    merchantName: string;
+    /** The store's origin, such as https://shop.example. */
+    merchantUrl: string;
+    /** What the person reads in Link before approving. At least 100 characters. */
+    context: string;
+    lineItems: ReadonlyArray<{
+        name: string;
+        quantity: number;
+        unitAmountMinor: number;
+    }>;
+    totals: ReadonlyArray<{
+        type: string;
+        label: string;
+        amountMinor: number;
+    }>;
+    /** Opaque key. Reusing it retries the same request instead of creating another. */
+    idempotencyKey: string;
+    metadata?: Readonly<Record<string, string>>;
+}
+/** A Link spend request as the wallet last read it. Never contains card data. */
+interface LinkSpendRequest {
+    id: string;
+    status: LinkSpendRequestStatus;
+    amountMinor?: number;
+    merchantName?: string;
+    merchantUrl?: string;
+    /** Link page where the person can review the request. */
+    approvalUrl?: string;
+    /** Set with requires_action. `auto_resume` means Link continues once the person finishes the step. */
+    actionResolution?: string;
+    /** Set with requires_action when Link gives the person a page to finish the step. */
+    actionUrl?: string;
+}
+/**
+ * The single-use virtual card Link issued for an approved request. Live card
+ * data: use it only in the store's card form for the approved purchase. Never
+ * log, print, persist, or send it anywhere else.
+ */
+interface LinkCardCredential {
+    number: string;
+    /** The card's CVC. */
+    securityValue: string;
+    expMonth: number;
+    expYear: number;
+    /** When Link stops accepting the card, as an ISO 8601 time. */
+    validUntil?: string;
+    last4: string;
+    brand?: string;
+}
+interface LinkCallOptions {
+    signal?: AbortSignal;
+}
+interface LinkWaitOptions extends LinkCallOptions {
+    /** How long to wait for the person to decide. 0 reads the request once. */
+    timeoutSeconds?: number;
+}
+/** The four Link operations Conto needs. Implement it to use another Link client. */
+interface LinkWallet {
+    /** Ask Link for a card for this exact purchase. Link sends the person an approval request. */
+    createCardRequest(input: LinkCardRequestInput, options?: LinkCallOptions): Promise<LinkSpendRequest>;
+    /**
+     * Wait while the request is created or pending approval, up to the timeout,
+     * and resolve with its latest state. A waiting status after the timeout means
+     * the person has not decided yet.
+     */
+    waitForApproval(id: string, options?: LinkWaitOptions): Promise<LinkSpendRequest>;
+    /** Read the card of an approved request. */
+    retrieveCard(id: string, options?: LinkCallOptions): Promise<LinkCardCredential>;
+    /** Cancel a request that is created, pending approval, or approved. */
+    cancel(id: string, options?: LinkCallOptions): Promise<void>;
+}
+type LinkWalletErrorReason = 'not_installed' | 'not_logged_in' | 'not_found' | 'not_approved' | 'invalid_input' | 'invalid_response' | 'timed_out' | 'aborted' | 'cli_failed';
+/**
+ * A Link wallet call failed. The message is fixed text: it never repeats
+ * link-cli output, so it can never carry card data.
+ */
+declare class LinkWalletError extends Error {
+    readonly code: 'LINK_WALLET_UNAVAILABLE' | 'LINK_WALLET_FAILED';
+    readonly reason: LinkWalletErrorReason;
+    /** The error code link-cli reported, when it reported a safe one. */
+    readonly linkCode?: string;
+    constructor(reason: LinkWalletErrorReason, message: string, linkCode?: string);
+}
+interface LinkCliWalletOptions {
+    /** The link-cli executable. Defaults to `link-cli` on PATH. */
+    binary?: string;
+    /** Create test-mode requests. Link returns test card data and charges nothing. */
+    test?: boolean;
+    /** Link payment method to fund the card. Defaults to the person's default method. */
+    paymentMethodId?: string;
+    /** Default time waitForApproval waits, in seconds. Defaults to 300. */
+    timeoutSeconds?: number;
+    /** Environment for link-cli. Defaults to this process's environment. */
+    env?: Readonly<Record<string, string | undefined>>;
+}
+/** Link spend request ids look like lsrq_ followed by letters and digits. */
+declare function isLinkRequestId(value: unknown): value is string;
+/**
+ * A LinkWallet that runs Stripe's link-cli (`npm i -g @stripe/link-cli`,
+ * then `link-cli auth login`) on this machine. Each call is one link-cli
+ * process run without a shell. Card data is read from a private temporary file
+ * that is deleted before the call returns.
+ */
+declare function linkCliWallet(options?: LinkCliWalletOptions): LinkWallet;
+
+export { type LinkCallOptions, type LinkCardCredential, type LinkCardRequestInput, type LinkCliWalletOptions, type LinkSpendRequest, type LinkSpendRequestStatus, type LinkWaitOptions, type LinkWallet, LinkWalletError, type LinkWalletErrorReason, isLinkRequestId, linkCliWallet };

package/dist/link-wallet.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Stripe Link agent wallet adapters for conto.checkout.getLinkCard().
+ *
+ * The wallet runs in the builder's environment with the builder's own Link
+ * access. Card data stays in this process: it is never sent to Conto, written
+ * to a log, or placed in an error.
+ */
+/** Statuses a Link spend request reports. `unknown` stands for any status this SDK does not know. */
+type LinkSpendRequestStatus = 'created' | 'pending_approval' | 'requires_action' | 'approved' | 'submitted' | 'succeeded' | 'denied' | 'expired' | 'canceled' | 'failed' | 'unknown';
+/** One Link card request, built by Conto from the approved checkpoint. */
+interface LinkCardRequestInput {
+    /** The Conto-approved amount in cents. The card is limited to it. */
+    amountMinor: number;
+    currency: 'USD';
+    merchantName: string;
+    /** The store's origin, such as https://shop.example. */
+    merchantUrl: string;
+    /** What the person reads in Link before approving. At least 100 characters. */
+    context: string;
+    lineItems: ReadonlyArray<{
+        name: string;
+        quantity: number;
+        unitAmountMinor: number;
+    }>;
+    totals: ReadonlyArray<{
+        type: string;
+        label: string;
+        amountMinor: number;
+    }>;
+    /** Opaque key. Reusing it retries the same request instead of creating another. */
+    idempotencyKey: string;
+    metadata?: Readonly<Record<string, string>>;
+}
+/** A Link spend request as the wallet last read it. Never contains card data. */
+interface LinkSpendRequest {
+    id: string;
+    status: LinkSpendRequestStatus;
+    amountMinor?: number;
+    merchantName?: string;
+    merchantUrl?: string;
+    /** Link page where the person can review the request. */
+    approvalUrl?: string;
+    /** Set with requires_action. `auto_resume` means Link continues once the person finishes the step. */
+    actionResolution?: string;
+    /** Set with requires_action when Link gives the person a page to finish the step. */
+    actionUrl?: string;
+}
+/**
+ * The single-use virtual card Link issued for an approved request. Live card
+ * data: use it only in the store's card form for the approved purchase. Never
+ * log, print, persist, or send it anywhere else.
+ */
+interface LinkCardCredential {
+    number: string;
+    /** The card's CVC. */
+    securityValue: string;
+    expMonth: number;
+    expYear: number;
+    /** When Link stops accepting the card, as an ISO 8601 time. */
+    validUntil?: string;
+    last4: string;
+    brand?: string;
+}
+interface LinkCallOptions {
+    signal?: AbortSignal;
+}
+interface LinkWaitOptions extends LinkCallOptions {
+    /** How long to wait for the person to decide. 0 reads the request once. */
+    timeoutSeconds?: number;
+}
+/** The four Link operations Conto needs. Implement it to use another Link client. */
+interface LinkWallet {
+    /** Ask Link for a card for this exact purchase. Link sends the person an approval request. */
+    createCardRequest(input: LinkCardRequestInput, options?: LinkCallOptions): Promise<LinkSpendRequest>;
+    /**
+     * Wait while the request is created or pending approval, up to the timeout,
+     * and resolve with its latest state. A waiting status after the timeout means
+     * the person has not decided yet.
+     */
+    waitForApproval(id: string, options?: LinkWaitOptions): Promise<LinkSpendRequest>;
+    /** Read the card of an approved request. */
+    retrieveCard(id: string, options?: LinkCallOptions): Promise<LinkCardCredential>;
+    /** Cancel a request that is created, pending approval, or approved. */
+    cancel(id: string, options?: LinkCallOptions): Promise<void>;
+}
+type LinkWalletErrorReason = 'not_installed' | 'not_logged_in' | 'not_found' | 'not_approved' | 'invalid_input' | 'invalid_response' | 'timed_out' | 'aborted' | 'cli_failed';
+/**
+ * A Link wallet call failed. The message is fixed text: it never repeats
+ * link-cli output, so it can never carry card data.
+ */
+declare class LinkWalletError extends Error {
+    readonly code: 'LINK_WALLET_UNAVAILABLE' | 'LINK_WALLET_FAILED';
+    readonly reason: LinkWalletErrorReason;
+    /** The error code link-cli reported, when it reported a safe one. */
+    readonly linkCode?: string;
+    constructor(reason: LinkWalletErrorReason, message: string, linkCode?: string);
+}
+interface LinkCliWalletOptions {
+    /** The link-cli executable. Defaults to `link-cli` on PATH. */
+    binary?: string;
+    /** Create test-mode requests. Link returns test card data and charges nothing. */
+    test?: boolean;
+    /** Link payment method to fund the card. Defaults to the person's default method. */
+    paymentMethodId?: string;
+    /** Default time waitForApproval waits, in seconds. Defaults to 300. */
+    timeoutSeconds?: number;
+    /** Environment for link-cli. Defaults to this process's environment. */
+    env?: Readonly<Record<string, string | undefined>>;
+}
+/** Link spend request ids look like lsrq_ followed by letters and digits. */
+declare function isLinkRequestId(value: unknown): value is string;
+/**
+ * A LinkWallet that runs Stripe's link-cli (`npm i -g @stripe/link-cli`,
+ * then `link-cli auth login`) on this machine. Each call is one link-cli
+ * process run without a shell. Card data is read from a private temporary file
+ * that is deleted before the call returns.
+ */
+declare function linkCliWallet(options?: LinkCliWalletOptions): LinkWallet;
+
+export { type LinkCallOptions, type LinkCardCredential, type LinkCardRequestInput, type LinkCliWalletOptions, type LinkSpendRequest, type LinkSpendRequestStatus, type LinkWaitOptions, type LinkWallet, LinkWalletError, type LinkWalletErrorReason, isLinkRequestId, linkCliWallet };

package/dist/link-wallet.js

@@ -0,0 +1,400 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/link-wallet.ts
+var link_wallet_exports = {};
+__export(link_wallet_exports, {
+  LinkWalletError: () => LinkWalletError,
+  isLinkRequestId: () => isLinkRequestId,
+  linkCliWallet: () => linkCliWallet
+});
+module.exports = __toCommonJS(link_wallet_exports);
+var import_node_child_process = require("child_process");
+var import_node_fs = require("fs");
+var import_promises = require("fs/promises");
+var import_node_os = require("os");
+var import_node_path = __toESM(require("path"));
+var LinkWalletError = class extends Error {
+  constructor(reason, message, linkCode) {
+    super(message);
+    this.name = "LinkWalletError";
+    this.reason = reason;
+    this.code = reason === "not_installed" || reason === "not_logged_in" ? "LINK_WALLET_UNAVAILABLE" : "LINK_WALLET_FAILED";
+    if (linkCode) this.linkCode = linkCode;
+  }
+};
+var LINK_REQUEST_ID = /^lsrq_[A-Za-z0-9]{1,64}$/;
+var SAFE_LINK_CODE = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;
+var KNOWN_STATUSES = /* @__PURE__ */ new Set([
+  "created",
+  "pending_approval",
+  "requires_action",
+  "approved",
+  "submitted",
+  "succeeded",
+  "denied",
+  "expired",
+  "canceled",
+  "failed"
+]);
+var MAX_OUTPUT_BYTES = 1024 * 1024;
+var COMMAND_TIMEOUT_MS = 6e4;
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function text(value) {
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function httpsUrl(value) {
+  if (typeof value !== "string" || value.length > 2048) return void 0;
+  try {
+    return new URL(value).protocol === "https:" ? value : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function isLinkRequestId(value) {
+  return typeof value === "string" && LINK_REQUEST_ID.test(value);
+}
+function requireRequestId(id) {
+  if (!isLinkRequestId(id)) {
+    throw new LinkWalletError("invalid_input", "The Link request id is not valid.");
+  }
+  return id;
+}
+function flagText(value, maxLength) {
+  const cleaned = value.replace(/[\r\n\t,]+/g, " ").replace(/\s+/g, " ").trim().slice(0, maxLength).trim();
+  return cleaned || "Item";
+}
+function parseSpendRequest(value) {
+  const latest = Array.isArray(value) ? value[value.length - 1] : value;
+  const data = record(latest);
+  const id = data.id;
+  if (!isLinkRequestId(id)) {
+    throw new LinkWalletError("invalid_response", "link-cli returned an unexpected response.");
+  }
+  const status = typeof data.status === "string" && KNOWN_STATUSES.has(data.status) ? data.status : "unknown";
+  const nextAction = record(record(record(data.status_details).requires_action).next_action);
+  const amount = data.amount;
+  return {
+    id,
+    status,
+    ...Number.isSafeInteger(amount) ? { amountMinor: amount } : {},
+    ...text(data.merchant_name) ? { merchantName: text(data.merchant_name) } : {},
+    ...httpsUrl(data.merchant_url) ? { merchantUrl: httpsUrl(data.merchant_url) } : {},
+    ...httpsUrl(data.approval_url) ? { approvalUrl: httpsUrl(data.approval_url) } : {},
+    ...text(nextAction.resolution) ? { actionResolution: text(nextAction.resolution) } : {},
+    ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {}
+  };
+}
+function invalidCard() {
+  return new LinkWalletError("invalid_response", "Link returned card data this SDK cannot read.");
+}
+function validUntil(value) {
+  if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+    return new Date(value < 1e12 ? value * 1e3 : value).toISOString();
+  }
+  if (typeof value === "string" && !Number.isNaN(Date.parse(value))) {
+    return new Date(value).toISOString();
+  }
+  return void 0;
+}
+function parseCard(value) {
+  const card = record(value);
+  const number = typeof card.number === "string" ? card.number.replace(/[\s-]/g, "") : "";
+  const rawSecurityValue = card["cvc"];
+  const securityValue = typeof rawSecurityValue === "string" ? rawSecurityValue.trim() : "";
+  const expMonth = Number(card.exp_month);
+  let expYear = Number(card.exp_year);
+  if (Number.isInteger(expYear) && expYear >= 0 && expYear < 100) expYear += 2e3;
+  if (!/^\d{12,19}$/.test(number) || !/^\d{3,4}$/.test(securityValue) || !Number.isInteger(expMonth) || expMonth < 1 || expMonth > 12 || !Number.isInteger(expYear) || expYear < 2e3) {
+    throw invalidCard();
+  }
+  const until = validUntil(card.valid_until);
+  const brand = text(card.brand);
+  return {
+    number,
+    securityValue,
+    expMonth,
+    expYear,
+    ...until ? { validUntil: until } : {},
+    last4: number.slice(-4),
+    ...brand ? { brand } : {}
+  };
+}
+function failureFromOutput(value) {
+  const data = record(value);
+  const code = typeof data.code === "string" && SAFE_LINK_CODE.test(data.code) ? data.code : void 0;
+  const message = typeof data.message === "string" ? data.message.toLowerCase() : "";
+  if (code === "NOT_AUTHENTICATED" || message.includes("auth login") || message.includes("not authenticated")) {
+    return new LinkWalletError(
+      "not_logged_in",
+      'link-cli is not logged in. Run "link-cli auth login" on this machine.',
+      code
+    );
+  }
+  if (code === "NOT_FOUND") {
+    return new LinkWalletError("not_found", "Link has no spend request with this id.", code);
+  }
+  if (code === "POLLING_TIMEOUT") {
+    return new LinkWalletError("timed_out", "The person has not decided in Link yet.", code);
+  }
+  return new LinkWalletError("cli_failed", "link-cli could not complete the request.", code);
+}
+function linkCliWallet(options = {}) {
+  const binary = options.binary ?? "link-cli";
+  const defaultTimeoutSeconds = options.timeoutSeconds ?? 300;
+  if (!Number.isFinite(defaultTimeoutSeconds) || defaultTimeoutSeconds < 0) {
+    throw new LinkWalletError("invalid_input", "timeoutSeconds must be zero or more.");
+  }
+  if (options.paymentMethodId !== void 0 && !/^[A-Za-z0-9_]{1,128}$/.test(options.paymentMethodId)) {
+    throw new LinkWalletError(
+      "invalid_input",
+      "paymentMethodId is not a valid Link payment method id."
+    );
+  }
+  const env = {
+    ...options.env ?? process.env,
+    NO_UPDATE_NOTIFIER: "1",
+    NO_COLOR: "1"
+  };
+  function run(args, call = {}) {
+    return new Promise((resolve, reject) => {
+      if (call.signal?.aborted) {
+        reject(new LinkWalletError("aborted", "The Link request was stopped."));
+        return;
+      }
+      let child;
+      try {
+        child = (0, import_node_child_process.spawn)(binary, [...args, "--format", "json"], {
+          env,
+          shell: false,
+          stdio: ["ignore", "pipe", "pipe"],
+          windowsHide: true,
+          ...call.signal ? { signal: call.signal } : {}
+        });
+      } catch {
+        reject(new LinkWalletError("cli_failed", "link-cli could not be started."));
+        return;
+      }
+      const chunks = [];
+      let size = 0;
+      let overflow = false;
+      let timedOut = false;
+      const timer = setTimeout(() => {
+        timedOut = true;
+        child.kill("SIGTERM");
+      }, call.timeoutMs ?? COMMAND_TIMEOUT_MS);
+      child.stdout?.on("data", (chunk) => {
+        size += chunk.length;
+        if (size > MAX_OUTPUT_BYTES) {
+          overflow = true;
+          child.kill("SIGTERM");
+          return;
+        }
+        chunks.push(chunk);
+      });
+      child.stderr?.resume();
+      child.on("error", (error) => {
+        clearTimeout(timer);
+        if (error.code === "ENOENT") {
+          reject(
+            new LinkWalletError(
+              "not_installed",
+              'link-cli is not installed. Run "npm i -g @stripe/link-cli", then "link-cli auth login".'
+            )
+          );
+        } else if (error.name === "AbortError") {
+          reject(new LinkWalletError("aborted", "The Link request was stopped."));
+        } else {
+          reject(new LinkWalletError("cli_failed", "link-cli could not be started."));
+        }
+      });
+      child.on("close", (exitCode) => {
+        clearTimeout(timer);
+        if (call.signal?.aborted) {
+          reject(new LinkWalletError("aborted", "The Link request was stopped."));
+          return;
+        }
+        if (timedOut) {
+          reject(new LinkWalletError("cli_failed", "link-cli did not finish in time."));
+          return;
+        }
+        if (overflow) {
+          reject(
+            new LinkWalletError("invalid_response", "link-cli returned an unexpected response.")
+          );
+          return;
+        }
+        let value;
+        try {
+          value = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+        } catch {
+          reject(
+            exitCode === 0 ? new LinkWalletError("invalid_response", "link-cli returned an unexpected response.") : new LinkWalletError("cli_failed", "link-cli could not complete the request.")
+          );
+          return;
+        }
+        resolve({ exitCode, value });
+      });
+    });
+  }
+  async function runOrThrow(args, call) {
+    const result = await run(args, call);
+    if (result.exitCode !== 0) throw failureFromOutput(result.value);
+    return result.value;
+  }
+  async function readOnce(id, call) {
+    return parseSpendRequest(await runOrThrow(["spend-request", "retrieve", id], call));
+  }
+  return {
+    async createCardRequest(input, call) {
+      if (!Number.isSafeInteger(input.amountMinor) || input.amountMinor <= 0) {
+        throw new LinkWalletError(
+          "invalid_input",
+          "amountMinor must be a positive number of cents."
+        );
+      }
+      if (input.currency !== "USD") {
+        throw new LinkWalletError("invalid_input", "Only USD card requests are supported.");
+      }
+      if (typeof input.context !== "string" || input.context.length < 100) {
+        throw new LinkWalletError("invalid_input", "context must contain at least 100 characters.");
+      }
+      if (!/^[A-Za-z0-9_:.-]{8,255}$/.test(input.idempotencyKey)) {
+        throw new LinkWalletError("invalid_input", "idempotencyKey is not valid.");
+      }
+      if (!httpsUrl(input.merchantUrl)) {
+        throw new LinkWalletError("invalid_input", "merchantUrl must be an HTTPS URL.");
+      }
+      const args = [
+        "spend-request",
+        "create",
+        `--amount=${input.amountMinor}`,
+        "--currency=usd",
+        `--merchant-name=${input.merchantName}`,
+        `--merchant-url=${input.merchantUrl}`,
+        `--context=${input.context}`,
+        `--idempotency-key=${input.idempotencyKey}`,
+        ...input.lineItems.map(
+          (item) => `--line-item=name:${flagText(item.name, 200)},unit_amount:${item.unitAmountMinor},quantity:${item.quantity}`
+        ),
+        ...input.totals.map(
+          (total) => `--total=type:${total.type},display_text:${flagText(total.label, 120)},amount:${total.amountMinor}`
+        ),
+        ...Object.entries(input.metadata ?? {}).map(
+          ([key, value]) => `--metadata=${flagText(key, 40)}:${flagText(value, 500)}`
+        ),
+        ...options.paymentMethodId ? [`--payment-method-id=${options.paymentMethodId}`] : [],
+        ...options.test ? ["--test"] : []
+      ];
+      const result = await run(args, call);
+      if (result.exitCode !== 0) {
+        const message = record(result.value).message;
+        const existing = typeof message === "string" ? /matching spend request already exists: (lsrq_[A-Za-z0-9]{1,64})/.exec(message)?.[1] : void 0;
+        if (existing) {
+          const current = await readOnce(existing, call);
+          if (current.amountMinor === input.amountMinor && (current.merchantUrl === void 0 || new URL(current.merchantUrl).origin === new URL(input.merchantUrl).origin)) {
+            return current;
+          }
+        }
+        throw failureFromOutput(result.value);
+      }
+      return parseSpendRequest(result.value);
+    },
+    async waitForApproval(id, call = {}) {
+      requireRequestId(id);
+      const timeoutSeconds = Math.max(0, Math.floor(call.timeoutSeconds ?? defaultTimeoutSeconds));
+      if (timeoutSeconds === 0) return readOnce(id, call);
+      const result = await run(
+        ["spend-request", "retrieve", id, "--interval=2", `--timeout=${timeoutSeconds}`],
+        { signal: call.signal, timeoutMs: (timeoutSeconds + 30) * 1e3 }
+      );
+      if (result.exitCode === 0) return parseSpendRequest(result.value);
+      const failure = failureFromOutput(result.value);
+      if (failure.reason === "timed_out") return readOnce(id, call);
+      throw failure;
+    },
+    async retrieveCard(id, call) {
+      requireRequestId(id);
+      const directory = await (0, import_promises.mkdtemp)(import_node_path.default.join((0, import_node_os.tmpdir)(), "conto-link-"));
+      try {
+        await (0, import_promises.chmod)(directory, 448);
+        const file = import_node_path.default.join(directory, "card.json");
+        const request = parseSpendRequest(
+          await runOrThrow(
+            ["spend-request", "retrieve", id, "--include=card", `--output-file=${file}`],
+            call
+          )
+        );
+        if (!["approved", "submitted", "succeeded"].includes(request.status)) {
+          throw new LinkWalletError(
+            "not_approved",
+            "The person has not approved this request in Link."
+          );
+        }
+        const handle = await (0, import_promises.open)(
+          file,
+          import_node_fs.constants.O_RDONLY | (import_node_fs.constants.O_NOFOLLOW ?? 0) | (import_node_fs.constants.O_NONBLOCK ?? 0)
+        ).catch((error) => {
+          if (error.code === "ENOENT") return void 0;
+          throw new LinkWalletError("invalid_response", "The card file was not private.");
+        });
+        if (!handle) throw new LinkWalletError("invalid_response", "Link did not return a card.");
+        try {
+          const stats = await handle.stat();
+          if (!stats.isFile() || (stats.mode & 63) !== 0) {
+            throw new LinkWalletError("invalid_response", "The card file was not private.");
+          }
+          let contents;
+          try {
+            contents = JSON.parse(await handle.readFile("utf8"));
+          } catch {
+            throw invalidCard();
+          }
+          return parseCard(record(contents).card);
+        } finally {
+          await handle.close();
+        }
+      } finally {
+        await (0, import_promises.rm)(directory, { recursive: true, force: true });
+      }
+    },
+    async cancel(id, call) {
+      requireRequestId(id);
+      await runOrThrow(["spend-request", "cancel", id], call);
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  LinkWalletError,
+  isLinkRequestId,
+  linkCliWallet
+});