@crvouga/mockingbird-service-stripe 1.3.0 → 1.3.1

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog — @crvouga/mockingbird-service-stripe
 
+## 1.3.1 (2026-09-29)
+
+### Fixes and improvements
+
+- say 'No such configuration' for a missing portal configuration ([6fad72a](https://github.com/crvouga/mockingbird/commit/6fad72a676b359672653508d9dd654e656ac6aa1))
+- upper-case only two-letter country codes like the live API ([4ee5121](https://github.com/crvouga/mockingbird/commit/4ee5121cf2254fd75eef34bbeefee496cd16964a))
+- leave portal configuration listing out of live parity walks ([20d715a](https://github.com/crvouga/mockingbird/commit/20d715a548e60dd933fab52e7ba661870607049e))
+- keep the shipping address country verbatim like the live API ([052e285](https://github.com/crvouga/mockingbird/commit/052e285a0ae9bcc26050f1c50ed635085438c3d1))
+- use --all-snapshot so the Stripe CLI webhook oracle starts ([09809bf](https://github.com/crvouga/mockingbird/commit/09809bfcd106cc4570d74e781ab0619efb191e05))
+- listen for all events so newer Stripe CLIs start the webhook oracle ([278e364](https://github.com/crvouga/mockingbird/commit/278e364c77263d8cff65fb6d03fde9e89a1010ca))
+- surface redacted stripe listen output when the webhook oracle fails to start ([dd179bb](https://github.com/crvouga/mockingbird/commit/dd179bbdf7a0d38ba097f79041ec818eaf69dfc5))
+- sign and retry webhooks on the injected clock ([1091bde](https://github.com/crvouga/mockingbird/commit/1091bde0df69d9cc3eba2062d8523755e6caca14))
+
 ## 1.3.0 (2026-09-29)
 
 ### Features

package/README.md

@@ -118,7 +118,7 @@ holds, ancestors included); Stripe's own rules are enforced: a non-expandable fi
 
 Every state change records an event in the account's log (`GET /v1/events`, filterable by
 `types[]` and `created`) and publishes it through the shared webhook hub, signed
-`Stripe-Signature: t=<wall-clock unix>,v1=<hex HMAC-SHA256(secret, "t.body")>` over the exact bytes —
+`Stripe-Signature: t=<unix seconds>,v1=<hex HMAC-SHA256(secret, "t.body")>` over the exact bytes —
 `stripe.webhooks.constructEvent` verifies them.
 
 - Endpoints: `PUT /__admin/webhook-endpoints [{account, url, secret, enabledEvents: ["*"|…]}]`
@@ -126,6 +126,11 @@ Every state change records an event in the account's log (`GET /v1/events`, filt
   `serve --webhook-url/--webhook-secret`, accounts' `webhookSecrets`, and endpoints created through
   `POST /v1/webhook_endpoints` (signed with the `whsec_` returned at creation). One event fans out to
   every matching endpoint, as on Stripe. Retries follow the hub's schedule.
+- `t` is the wall clock, unless the runtime's `clock` is injected (`createRuntime({ clock })`):
+  then `t`, retries and the attempt timeout run on that clock, so a virtual-time suite verifies with
+  `constructEventAsync(body, sig, secret, tolerance, undefined, clock.now())` and sees a retry when it
+  advances the clock (`runtime.clock.advance`, or `runtime.tick()` after moving its own clock).
+  `webhooks: { now, schedule, cancel, id }` override the hub's sources directly.
 - `GET /__admin/webhooks`, `/webhooks/events`, `POST /__admin/webhooks/:id/replay`, `/webhooks/flush`.
 - Delivery faults: presets `webhook_duplicate` (same event id twice — our receiver's in-flight
   dedupe answers 500), `webhook_reorder` (the next two swapped), `webhook_drop` (never delivered,

package/dist/{chunk-2WP3EV2W.js → chunk-E54EAWQ7.js}

@@ -1559,7 +1559,7 @@ var restoreNamespace = (sqlite, namespace, snapshot) => {
 };
 
 // ../core/dist/version.js
-var PACKAGE_VERSION = true ? "1.3.0" : UNRELEASED_VERSION;
+var PACKAGE_VERSION = true ? "1.3.1" : UNRELEASED_VERSION;
 
 // ../core/dist/signing.js
 var encoder = new TextEncoder();
@@ -7184,7 +7184,7 @@ var loginPageOf = (scope, raw, base2, id) => {
 var requireConfiguration = (scope, id, param = "configuration") => {
   if (!scope.account.portalConfigurations.get(id)) ensureDefaultConfiguration(scope);
   const config = scope.account.portalConfigurations.get(id);
-  if (!config) throw resourceMissing("billing portal configuration", id, param);
+  if (!config) throw resourceMissing("configuration", id, param);
   return config;
 };
 var flowSubscription = (scope, customer, id, param) => {
@@ -7314,14 +7314,13 @@ var billingPortalHandlers = (services) => ({
   GetBillingPortalConfigurations: async (context) => {
     const scope = requestScope(services, context);
     const params = queryParams(context);
-    ensureDefaultConfiguration(scope);
     const active = booleanOf(params.active);
     const isDefault = booleanOf(params.is_default);
     return jsonRes(
       200,
       await paginate(scope.account.portalConfigurations, params, {
         url: "/v1/billing_portal/configurations",
-        kind: "billing portal configuration",
+        kind: "configuration",
         where: (config) => (active === void 0 || config.active === active) && (isDefault === void 0 || config.is_default === isDefault),
         render: (config) => renderConfiguration(scope, config)
       })
@@ -10891,7 +10890,7 @@ var toAddress = (raw) => {
   const out = {};
   for (const key of ADDRESS_KEYS) {
     const value = input[key];
-    out[key] = value === void 0 ? null : key === "country" ? value.replace(/[a-z]/g, (letter) => letter.toUpperCase()) : value;
+    out[key] = value === void 0 ? null : key === "country" && /^[A-Za-z]{2}$/.test(value) ? value.toUpperCase() : value;
   }
   return out;
 };
@@ -16428,6 +16427,29 @@ var reshapeQaCommand = (command, _state, rng) => {
   return withBody(command, next);
 };
 
+// src/webhook-timers.ts
+var createClockTimers = (clock) => {
+  const timers = /* @__PURE__ */ new Set();
+  return {
+    schedule(callback, delayMs) {
+      const timer = { due: clock.now() + delayMs, callback };
+      timers.add(timer);
+      return timer;
+    },
+    cancel(handle) {
+      timers.delete(handle);
+    },
+    run() {
+      const now = clock.now();
+      const due = [...timers].filter((timer) => timer.due <= now).sort((a, b) => a.due - b.due);
+      for (const timer of due) {
+        if (!timers.delete(timer)) continue;
+        timer.callback();
+      }
+    }
+  };
+};
+
 // src/runtime.ts
 var RATE_LIMITED = {
   error: {
@@ -16542,10 +16564,18 @@ var guard = (run) => {
 };
 var createRuntime2 = (options = {}) => {
   const accounts = new AccountDirectory(options.accounts ?? []);
+  const baseClock = options.clock ?? createClock();
+  const timers = options.clock ? createClockTimers(options.clock) : void 0;
   const hub = createWebhookHub({
     signer: signers.timestamped("Stripe-Signature"),
     ...options.webhooks?.retryDelaysMs ? { retryDelaysMs: options.webhooks.retryDelaysMs } : {},
     ...options.webhooks?.fetch ? { fetch: options.webhooks.fetch } : {},
+    ...options.clock ? { now: () => baseClock.now() } : {},
+    ...options.webhooks?.now ? { now: options.webhooks.now } : {},
+    ...timers ? { schedule: timers.schedule, cancel: timers.cancel } : {},
+    ...options.webhooks?.schedule ? { schedule: options.webhooks.schedule } : {},
+    ...options.webhooks?.cancel ? { cancel: options.webhooks.cancel } : {},
+    ...options.webhooks?.id ? { id: options.webhooks.id } : {},
     endpoints: options.webhooks?.endpoints ?? []
   });
   let runtimeRef;
@@ -16607,8 +16637,8 @@ var createRuntime2 = (options = {}) => {
       else syncEndpoints(namespace);
     }
   };
-  const baseClock = options.clock ?? createClock();
   const tickAll = () => {
+    timers?.run();
     if (!runtimeRef) return;
     for (const name of runtimeRef.namespaces()) runtimeRef.instance(name).tick(true);
   };
@@ -17214,4 +17244,4 @@ export {
   createRuntime2 as createRuntime,
   StripeAPI
 };
-//# sourceMappingURL=chunk-2WP3EV2W.js.map
+//# sourceMappingURL=chunk-E54EAWQ7.js.map