@molecule/api-payments-stripe 1.0.0

package/LICENSE

@@ -0,0 +1,115 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work.
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship.
+
+      "Contribution" shall mean any work of authorship, including the
+      original version of the Work and any modifications or additions
+      to that Work, that is intentionally submitted to the Licensor for
+      inclusion in the Work by the copyright owner or by an individual or
+      Legal Entity authorized to submit on behalf of the copyright owner.
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      patent license to make, have made, use, offer to sell, sell, import,
+      and otherwise transfer the Work.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file.
+
+   5. Submission of Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND.
+
+   8. Limitation of Liability. In no event and under no legal theory shall
+      any Contributor be liable to You for damages.
+
+   9. Accepting Warranty or Additional Liability.
+
+   Copyright 2026 Molecule Dev, Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/bondAdapter.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Bond adapter for the Stripe payment provider.
+ *
+ * Wraps the Stripe SDK functions into a PaymentProvider-compatible interface
+ * for use with the molecule.dev bond system.
+ *
+ * @module
+ */
+import { type PaymentProvider } from '@molecule/api-payments';
+/**
+ * PaymentProvider-compatible adapter for Stripe.
+ *
+ * Wraps the Stripe SDK functions into a `PaymentProvider`-compatible object
+ * for use with the molecule bond system. Supports subscription verification,
+ * webhook handling, plan upgrades/downgrades, and cancellation.
+ */
+export declare const paymentProvider: PaymentProvider;
+//# sourceMappingURL=bondAdapter.d.ts.map

package/dist/bondAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bondAdapter.d.ts","sourceRoot":"","sources":["../src/bondAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAGL,KAAK,eAAe,EAOrB,MAAM,wBAAwB,CAAA;AA6C/B;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,EAAE,eA8Z7B,CAAA"}

package/dist/bondAdapter.js

@@ -0,0 +1,406 @@
+/**
+ * Bond adapter for the Stripe payment provider.
+ *
+ * Wraps the Stripe SDK functions into a PaymentProvider-compatible interface
+ * for use with the molecule.dev bond system.
+ *
+ * @module
+ */
+import crypto from 'crypto';
+import { getLogger } from '@molecule/api-bond';
+const logger = getLogger();
+import { get } from '@molecule/api-bond';
+import { isConfigNotConfiguredError, } from '@molecule/api-payments';
+import { createCheckoutSession, createPortalSession as stripeCreatePortalSession, createSetupIntent as stripeCreateSetupIntent, detachPaymentMethod as stripeDetachPaymentMethod, getCheckoutSession, getSubscription, normalizeSubscription, normalizeSubscriptionStatus, retrievePaymentMethod as stripeRetrievePaymentMethod, updateSubscription as stripeUpdateSubscription, verifyWebhookSignature, } from './provider.js';
+/**
+ * Maps Stripe webhook event types (e.g. `customer.subscription.created`) to
+ * simplified event type strings (e.g. `created`, `renewed`, `canceled`).
+ * @param eventType - The raw Stripe webhook event type string.
+ * @returns A simplified event type like `'created'`, `'renewed'`, `'canceled'`, `'paused'`, `'expired'`, or `'trial_ending'`. Falls through to the raw type for unrecognized events.
+ */
+const mapStripeEventType = (eventType) => {
+    switch (eventType) {
+        case 'customer.subscription.created':
+            return 'created';
+        case 'customer.subscription.updated':
+            return 'renewed';
+        case 'customer.subscription.deleted':
+            return 'canceled';
+        case 'customer.subscription.paused':
+            return 'paused';
+        case 'customer.subscription.resumed':
+            return 'renewed';
+        case 'customer.subscription.pending_update_applied':
+            return 'renewed';
+        case 'customer.subscription.pending_update_expired':
+            return 'expired';
+        case 'customer.subscription.trial_will_end':
+            return 'trial_ending';
+        default:
+            return eventType;
+    }
+};
+/**
+ * PaymentProvider-compatible adapter for Stripe.
+ *
+ * Wraps the Stripe SDK functions into a `PaymentProvider`-compatible object
+ * for use with the molecule bond system. Supports subscription verification,
+ * webhook handling, plan upgrades/downgrades, and cancellation.
+ */
+export const paymentProvider = {
+    providerName: 'stripe',
+    verifyFlow: 'subscription',
+    notificationFlow: 'webhook',
+    /**
+     * Verifies a Stripe subscription by ID and returns a VerifiedSubscription.
+     *
+     * Accepts either a Subscription ID (`sub_xxx`) or a Checkout Session ID (`cs_xxx`).
+     * If a Checkout Session ID is provided, it retrieves the session first to extract
+     * the associated subscription ID.
+     * @param subscriptionId - The Stripe subscription ID (`sub_xxx`) or checkout session ID (`cs_xxx`).
+     * @returns The verified subscription with product, expiry, and renewal info, or `null` on failure.
+     */
+    async verifySubscription(subscriptionId) {
+        try {
+            // A Checkout Session ID (`cs_...`) only arrives via the per-user
+            // post-checkout redirect (success_url), which is unguessable and bound to
+            // the user who started checkout. A bare `sub_...` id, by contrast, can be
+            // a value the caller merely learned, so the handler requires an ownership
+            // match for it. Surface which path this was so `verifyPayment` can enforce
+            // that distinction.
+            const viaCheckoutSession = subscriptionId.startsWith('cs_');
+            // If this is a Checkout Session ID (from post-checkout redirect), resolve to subscription
+            let resolvedSubscriptionId = subscriptionId;
+            if (viaCheckoutSession) {
+                const session = await getCheckoutSession(subscriptionId);
+                if (!session.subscription) {
+                    logger.error('Stripe checkout session has no subscription', { sessionId: subscriptionId });
+                    return null;
+                }
+                resolvedSubscriptionId = session.subscription;
+            }
+            const subscription = await getSubscription(resolvedSubscriptionId);
+            if (!subscription) {
+                return null;
+            }
+            const normalized = normalizeSubscription(subscription);
+            // Gate the grant on subscription status: only an active/trialing
+            // subscription confers entitlement. A past_due/unpaid/canceled/incomplete
+            // subscription must NOT re-grant the plan on demand.
+            if (!normalized.isActive) {
+                logger.info(`Stripe verifySubscription: subscription ${normalized.subscriptionId} is not active (status=${normalized.status}) — rejecting`);
+                return null;
+            }
+            // Defense in depth: also reject if the current period has already elapsed
+            // (when known). `isActive` already covers Stripe's authoritative status,
+            // but an out-of-date period end is never a valid grant.
+            if (normalized.currentPeriodEnd && normalized.currentPeriodEnd <= Date.now()) {
+                logger.info(`Stripe verifySubscription: subscription ${normalized.subscriptionId} period has ended — rejecting`);
+                return null;
+            }
+            // Apps register their plan catalogue with PRICE ids (the env-configured
+            // `STRIPE_<APP>_…` values checkout is started with), while the
+            // subscription reports the parent PRODUCT id — surface both so plan
+            // resolution can match either.
+            const rawItems = normalized.rawData?.items;
+            const verifiedPriceId = rawItems?.data?.[0]?.price?.id;
+            return {
+                productId: normalized.productId,
+                priceId: verifiedPriceId ? String(verifiedPriceId) : undefined,
+                transactionId: normalized.subscriptionId,
+                expiresAt: normalized.currentPeriodEnd
+                    ? new Date(normalized.currentPeriodEnd).toISOString()
+                    : undefined,
+                autoRenews: normalized.willRenew,
+                data: {
+                    customerId: typeof normalized.rawData?.customer === 'string'
+                        ? normalized.rawData.customer
+                        : undefined,
+                    viaCheckoutSession,
+                },
+            };
+        }
+        catch (error) {
+            // A missing STRIPE_SECRET_KEY (getClient()) is a DIFFERENT failure than
+            // "no active subscription" — rethrow so the resource handler's catch can
+            // surface the actionable 503 instead of a generic 400. Swallowing it into
+            // the same `null` a genuine verification failure returns makes an
+            // operator's forgotten env var indistinguishable from "this subscription
+            // isn't valid."
+            if (isConfigNotConfiguredError(error)) {
+                throw error;
+            }
+            logger.error('Stripe bondAdapter verifySubscription error:', error);
+            return null;
+        }
+    },
+    /**
+     * Handles a Stripe webhook event by verifying the signature and parsing the payload.
+     *
+     * Expects an express-like request object with `body` (raw body as Buffer or string)
+     * and `headers` containing `stripe-signature`.
+     * @param req - An Express-like request object with `body` (or `rawBody`) and `headers['stripe-signature']`.
+     * @returns A parsed webhook event with simplified type and subscription details, or `null` on failure.
+     */
+    async handleWebhookEvent(req) {
+        try {
+            const request = req;
+            const rawBody = request.rawBody || request.body;
+            const signature = request.headers['stripe-signature'];
+            if (!rawBody || !signature) {
+                logger.error('Stripe bondAdapter handleWebhookEvent: missing body or stripe-signature.');
+                return null;
+            }
+            const event = verifyWebhookSignature(rawBody, Array.isArray(signature) ? signature[0] : signature);
+            // Only process subscription-related events.
+            if (!event.type.startsWith('customer.subscription.')) {
+                return {
+                    type: event.type,
+                };
+            }
+            const subscriptionData = event.data.object;
+            // Extract the product AND price IDs from the subscription items — apps
+            // register plans by PRICE id (env-configured), so plan resolution needs
+            // both candidates.
+            const items = subscriptionData.items;
+            const productId = items?.data?.[0]?.price?.product
+                ? String(items.data[0].price.product)
+                : undefined;
+            const priceId = items?.data?.[0]?.price?.id ? String(items.data[0].price.id) : undefined;
+            // Get period end from the subscription item (Stripe API 2025+ moved it
+            // there). Webhook payload shape follows the API version PINNED ON THE
+            // WEBHOOK ENDPOINT — older endpoints still send it top-level on the
+            // subscription, so fall back to that rather than silently dropping the
+            // expiry (a missing expiresAt reads downstream as "never expires").
+            const subscriptionItem = (items?.data?.[0] ?? {});
+            const periodEnd = (subscriptionItem.current_period_end ??
+                subscriptionData.current_period_end);
+            const expiresAt = periodEnd ? new Date(periodEnd * 1000).toISOString() : undefined;
+            const autoRenews = event.type !== 'customer.subscription.deleted' &&
+                !subscriptionData.canceled_at &&
+                !subscriptionData.cancel_at_period_end;
+            // Surface the subscription status so the notification handler can enforce
+            // the SAME entitlement gate as `verifySubscription`. `isActive` is derived
+            // with the identical rule used by `normalizeSubscription` (active/trialing
+            // only). Without this, a renewal-payment failure (Stripe fires a signed
+            // `customer.subscription.updated` with status=past_due and an advanced
+            // current_period_end) would extend premium for an unpaid cycle.
+            const rawStatus = typeof subscriptionData.status === 'string' ? subscriptionData.status : undefined;
+            const status = normalizeSubscriptionStatus(rawStatus);
+            const isActive = rawStatus === 'active' || rawStatus === 'trialing';
+            return {
+                type: mapStripeEventType(event.type),
+                subscription: {
+                    customerId: subscriptionData.customer ? String(subscriptionData.customer) : undefined,
+                    productId,
+                    priceId,
+                    expiresAt,
+                    autoRenews,
+                    status,
+                    isActive,
+                },
+            };
+        }
+        catch (error) {
+            logger.error('Stripe bondAdapter handleWebhookEvent error:', error);
+            return null;
+        }
+    },
+    /**
+     * Updates or creates a Stripe subscription for a user.
+     *
+     * 1. Looks up the user's existing Stripe subscription via PaymentRecordService.
+     * 2. If found, updates the subscription to the new product/price.
+     * 3. If not found, creates a Stripe Checkout session and returns the checkout URL.
+     *
+     * Handles subscription updates and new checkout session creation.
+     * @param params - The update parameters.
+     * @param params.userId - The molecule user ID to update the subscription for.
+     * @param params.newProductId - The Stripe Price ID of the new plan to switch to.
+     * @param params.previousProductId - The Stripe Price ID of the current plan (unused, for logging context).
+     * @returns An object with `updated: true` if the existing subscription was changed, or `checkoutUrl` if a new Checkout session was created.
+     */
+    async updateSubscription(params) {
+        try {
+            const records = get('paymentRecords');
+            // Try to find an existing Stripe subscription for this user.
+            if (records) {
+                const payment = await records.findByUserId(params.userId, 'stripe');
+                const subscriptionId = payment?.data?.subscriptionId;
+                if (subscriptionId) {
+                    // Existing subscription found — update it with the new price.
+                    const subscription = await getSubscription(subscriptionId);
+                    if (subscription?.items?.data?.[0]?.id) {
+                        const updatedSubscription = await stripeUpdateSubscription(subscriptionId, {
+                            items: [
+                                {
+                                    id: subscription.items.data[0].id,
+                                    price: params.newProductId,
+                                },
+                            ],
+                        });
+                        if (updatedSubscription) {
+                            const subscriptionItem = updatedSubscription.items?.data?.[0];
+                            const periodEnd = subscriptionItem
+                                ?.current_period_end;
+                            const expiresAt = periodEnd ? new Date(periodEnd * 1000).toISOString() : undefined;
+                            return {
+                                updated: true,
+                                subscription: {
+                                    expiresAt,
+                                    autoRenews: !updatedSubscription.cancel_at_period_end,
+                                },
+                            };
+                        }
+                    }
+                }
+            }
+            // No existing subscription — create a Stripe Checkout session.
+            // Stripe rejects empty/relative success_url and cancel_url with
+            // `code: 'url_invalid'`. When neither API_ORIGIN/APP_ORIGIN nor
+            // ORIGIN is set (typical in dev / smoke-app spin-ups), fall back to
+            // `http://localhost:${PORT}` so checkout still works locally.
+            const apiPort = Number(process.env.PORT) || 4000;
+            const fallbackApiOrigin = `http://localhost:${apiPort}`;
+            // Conventional dev frontend lives on apiPort - 1000 (e.g. 4030 → 3030).
+            // Mirrors the polish-v2 dispatcher's port pairing.
+            const fallbackAppOrigin = `http://localhost:${apiPort - 1000}`;
+            const apiOrigin = process.env.API_ORIGIN || process.env.ORIGIN || fallbackApiOrigin;
+            const appOrigin = process.env.APP_ORIGIN || process.env.ORIGIN || fallbackAppOrigin;
+            if (apiOrigin === fallbackApiOrigin || appOrigin === fallbackAppOrigin) {
+                // Silent localhost redirect URLs in a deployed app strand the user on
+                // localhost after paying — make the fallback visible.
+                logger.warn(`Stripe checkout: API_ORIGIN/APP_ORIGIN/ORIGIN not set — falling back to ${fallbackApiOrigin} / ${fallbackAppOrigin} for redirect URLs (fine in dev, wrong in production).`);
+            }
+            // Generate idempotency key from userId + priceId + timestamp window (5-min buckets)
+            // This prevents duplicate checkout sessions if the user double-clicks or retries
+            const timeWindow = Math.floor(Date.now() / (5 * 60 * 1000));
+            const idempotencyKey = crypto
+                .createHash('sha256')
+                .update(`checkout:${params.userId}:${params.newProductId}:${timeWindow}`)
+                .digest('hex');
+            const session = await createCheckoutSession({
+                priceId: params.newProductId,
+                successUrl: `${apiOrigin}/api/users/${params.userId}/verify-payment/stripe?subscriptionId={CHECKOUT_SESSION_ID}`,
+                cancelUrl: appOrigin,
+                idempotencyKey,
+            });
+            if (session?.id && session?.url) {
+                return { updated: false, checkoutUrl: session.url };
+            }
+            return { updated: false };
+        }
+        catch (error) {
+            // See the matching comment in verifySubscription: a missing secret must
+            // reach the caller as its real 503, not be flattened into the same
+            // `{ updated: false }` a genuine update failure (e.g. Stripe declining
+            // the card) returns.
+            if (isConfigNotConfiguredError(error)) {
+                throw error;
+            }
+            logger.error('Stripe bondAdapter updateSubscription error:', error);
+            return { updated: false };
+        }
+    },
+    /**
+     * Creates a Stripe SetupIntent so the frontend can confirm a card off-session.
+     *
+     * @param params - SetupIntent parameters (optional Stripe customer ID, metadata, idempotency key).
+     * @returns The SetupIntent ID, client secret, and customer ID.
+     */
+    async createSetupIntent(params) {
+        return stripeCreateSetupIntent({
+            customerId: params.customerId,
+            metadata: params.metadata,
+            idempotencyKey: params.idempotencyKey,
+        });
+    },
+    /**
+     * Retrieves a saved Stripe payment method and returns normalized card metadata.
+     *
+     * @param providerPaymentMethodId - The Stripe payment method ID (`pm_...`).
+     * @returns Card brand/last4/exp, or `null` on failure.
+     */
+    async getPaymentMethod(providerPaymentMethodId) {
+        return stripeRetrievePaymentMethod(providerPaymentMethodId);
+    },
+    /**
+     * Detaches a Stripe saved payment method from its customer.
+     *
+     * @param providerPaymentMethodId - The Stripe payment method ID (`pm_...`).
+     * @returns `true` on success, `false` on provider error.
+     */
+    async detachPaymentMethod(providerPaymentMethodId) {
+        return stripeDetachPaymentMethod(providerPaymentMethodId);
+    },
+    /**
+     * Cancels an existing Stripe subscription for a user.
+     *
+     * Looks up the subscription via PaymentRecordService, then sets
+     * `cancel_at_period_end` to `true` so it expires at the end of the current billing cycle.
+     * @param params - The cancellation parameters.
+     * @param params.userId - The molecule user ID whose subscription should be canceled.
+     * @returns `true` if the subscription was successfully set to cancel at period end, `false` otherwise.
+     */
+    async cancelSubscription(params) {
+        try {
+            const records = get('paymentRecords');
+            if (!records)
+                return false;
+            const payment = await records.findByUserId(params.userId, 'stripe');
+            const subscriptionId = payment?.data?.subscriptionId;
+            if (!subscriptionId)
+                return false;
+            const subscription = await getSubscription(subscriptionId);
+            if (!subscription)
+                return false;
+            const updated = await stripeUpdateSubscription(subscriptionId, {
+                cancel_at_period_end: true,
+            });
+            return !!updated;
+        }
+        catch (error) {
+            // See the matching comment in verifySubscription.
+            if (isConfigNotConfiguredError(error)) {
+                throw error;
+            }
+            logger.error('Stripe bondAdapter cancelSubscription error:', error);
+            return false;
+        }
+    },
+    /**
+     * Creates a Stripe Billing Portal session for the user so they can manage
+     * payment methods, cancel, and view invoices in Stripe's hosted portal.
+     * Resolves the user's Stripe customer ID from their payment record (stored
+     * at checkout/verify time).
+     *
+     * @param params - The portal parameters.
+     * @param params.userId - The molecule user ID to open the portal for.
+     * @param params.returnUrl - URL Stripe returns the user to on exit.
+     * @returns The portal session `{ id, url }`, or `null` when the user has no
+     *   Stripe customer record or Stripe rejects the request.
+     */
+    async createPortalSession(params) {
+        try {
+            const records = get('paymentRecords');
+            if (!records)
+                return null;
+            const payment = await records.findByUserId(params.userId, 'stripe');
+            const customerId = payment?.data?.customerId;
+            if (!customerId)
+                return null;
+            return await stripeCreatePortalSession({
+                customerId,
+                returnUrl: params.returnUrl,
+            });
+        }
+        catch (error) {
+            if (isConfigNotConfiguredError(error)) {
+                throw error;
+            }
+            logger.error('Stripe bondAdapter createPortalSession error:', error);
+            return null;
+        }
+    },
+};
+//# sourceMappingURL=bondAdapter.js.map

package/dist/bondAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bondAdapter.js","sourceRoot":"","sources":["../src/bondAdapter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAA;AACxC,OAAO,EAEL,0BAA0B,GAQ3B,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EACL,qBAAqB,EACrB,mBAAmB,IAAI,yBAAyB,EAChD,iBAAiB,IAAI,uBAAuB,EAC5C,mBAAmB,IAAI,yBAAyB,EAChD,kBAAkB,EAClB,eAAe,EACf,qBAAqB,EACrB,2BAA2B,EAC3B,qBAAqB,IAAI,2BAA2B,EACpD,kBAAkB,IAAI,wBAAwB,EAC9C,sBAAsB,GACvB,MAAM,eAAe,CAAA;AAEtB;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAU,EAAE;IACvD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,+BAA+B;YAClC,OAAO,SAAS,CAAA;QAClB,KAAK,+BAA+B;YAClC,OAAO,SAAS,CAAA;QAClB,KAAK,+BAA+B;YAClC,OAAO,UAAU,CAAA;QACnB,KAAK,8BAA8B;YACjC,OAAO,QAAQ,CAAA;QACjB,KAAK,+BAA+B;YAClC,OAAO,SAAS,CAAA;QAClB,KAAK,8CAA8C;YACjD,OAAO,SAAS,CAAA;QAClB,KAAK,8CAA8C;YACjD,OAAO,SAAS,CAAA;QAClB,KAAK,sCAAsC;YACzC,OAAO,cAAc,CAAA;QACvB;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C,YAAY,EAAE,QAAQ;IACtB,UAAU,EAAE,cAAc;IAC1B,gBAAgB,EAAE,SAAS;IAE3B;;;;;;;;OAQG;IACH,KAAK,CAAC,kBAAkB,CAAC,cAAsB;QAC7C,IAAI,CAAC;YACH,iEAAiE;YACjE,0EAA0E;YAC1E,0EAA0E;YAC1E,0EAA0E;YAC1E,2EAA2E;YAC3E,oBAAoB;YACpB,MAAM,kBAAkB,GAAG,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;YAE3D,0FAA0F;YAC1F,IAAI,sBAAsB,GAAG,cAAc,CAAA;YAC3C,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,CAAA;gBACxD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;oBAC1B,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAA;oBAC1F,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAA;YAC/C,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC,CAAA;YAElE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAA;YACb,CAAC;YAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAA;YAEtD,iEAAiE;YACjE,0EAA0E;YAC1E,qDAAqD;YACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CACT,2CAA2C,UAAU,CAAC,cAAc,0BAA0B,UAAU,CAAC,MAAM,eAAe,CAC/H,CAAA;gBACD,OAAO,IAAI,CAAA;YACb,CAAC;YAED,0EAA0E;YAC1E,yEAAyE;YACzE,wDAAwD;YACxD,IAAI,UAAU,CAAC,gBAAgB,IAAI,UAAU,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC7E,MAAM,CAAC,IAAI,CACT,2CAA2C,UAAU,CAAC,cAAc,+BAA+B,CACpG,CAAA;gBACD,OAAO,IAAI,CAAA;YACb,CAAC;YAED,wEAAwE;YACxE,+DAA+D;YAC/D,oEAAoE;YACpE,+BAA+B;YAC/B,MAAM,QAAQ,GAAI,UAAU,CAAC,OAAmC,EAAE,KACP,CAAA;YAC3D,MAAM,eAAe,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAA;YAEtD,OAAO;gBACL,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC9D,aAAa,EAAE,UAAU,CAAC,cAAc;gBACxC,SAAS,EAAE,UAAU,CAAC,gBAAgB;oBACpC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE;oBACrD,CAAC,CAAC,SAAS;gBACb,UAAU,EAAE,UAAU,CAAC,SAAS;gBAChC,IAAI,EAAE;oBACJ,UAAU,EACR,OAAQ,UAAU,CAAC,OAAmC,EAAE,QAAQ,KAAK,QAAQ;wBAC3E,CAAC,CAAE,UAAU,CAAC,OAAmC,CAAC,QAAQ;wBAC1D,CAAC,CAAC,SAAS;oBACf,kBAAkB;iBACnB;aACF,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,yEAAyE;YACzE,0EAA0E;YAC1E,kEAAkE;YAClE,yEAAyE;YACzE,gBAAgB;YAChB,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAA;YACnE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB,CAAC,GAAY;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAIf,CAAA;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAA;YAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;YAErD,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,0EAA0E,CAAC,CAAA;gBACxF,OAAO,IAAI,CAAA;YACb,CAAC;YAED,MAAM,KAAK,GAAG,sBAAsB,CAClC,OAAO,EACP,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CACpD,CAAA;YAED,4CAA4C;YAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACrD,OAAO;oBACL,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAA;YACH,CAAC;YAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAiC,CAAA;YAErE,uEAAuE;YACvE,wEAAwE;YACxE,mBAAmB;YACnB,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAE9B,CAAA;YACD,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO;gBAChD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;gBACrC,CAAC,CAAC,SAAS,CAAA;YACb,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YAExF,uEAAuE;YACvE,sEAAsE;YACtE,oEAAoE;YACpE,uEAAuE;YACvE,oEAAoE;YACpE,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAA;YAC5E,MAAM,SAAS,GAAG,CAAC,gBAAgB,CAAC,kBAAkB;gBACpD,gBAAgB,CAAC,kBAAkB,CAAuB,CAAA;YAC5D,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YAElF,MAAM,UAAU,GACd,KAAK,CAAC,IAAI,KAAK,+BAA+B;gBAC9C,CAAC,gBAAgB,CAAC,WAAW;gBAC7B,CAAC,gBAAgB,CAAC,oBAAoB,CAAA;YAExC,0EAA0E;YAC1E,2EAA2E;YAC3E,2EAA2E;YAC3E,wEAAwE;YACxE,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,SAAS,GACb,OAAO,gBAAgB,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;YACnF,MAAM,MAAM,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAA;YACrD,MAAM,QAAQ,GAAG,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,UAAU,CAAA;YAEnE,OAAO;gBACL,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC;gBACpC,YAAY,EAAE;oBACZ,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;oBACrF,SAAS;oBACT,OAAO;oBACP,SAAS;oBACT,UAAU;oBACV,MAAM;oBACN,QAAQ;iBACT;aACF,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAA;YACnE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAIxB;QACC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAuB,gBAAgB,CAAC,CAAA;YAE3D,6DAA6D;YAC7D,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;gBACnE,MAAM,cAAc,GAAI,OAAO,EAAE,IAAgC,EAAE,cAAwB,CAAA;gBAE3F,IAAI,cAAc,EAAE,CAAC;oBACnB,8DAA8D;oBAC9D,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,CAAA;oBAE1D,IAAI,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;wBACvC,MAAM,mBAAmB,GAAG,MAAM,wBAAwB,CAAC,cAAc,EAAE;4BACzE,KAAK,EAAE;gCACL;oCACE,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;oCACjC,KAAK,EAAE,MAAM,CAAC,YAAY;iCAC3B;6BACF;yBACF,CAAC,CAAA;wBAEF,IAAI,mBAAmB,EAAE,CAAC;4BACxB,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;4BAC7D,MAAM,SAAS,GAAI,gBAAuD;gCACxE,EAAE,kBAAwC,CAAA;4BAC5C,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;4BAElF,OAAO;gCACL,OAAO,EAAE,IAAI;gCACb,YAAY,EAAE;oCACZ,SAAS;oCACT,UAAU,EAAE,CAAC,mBAAmB,CAAC,oBAAoB;iCACtD;6BACF,CAAA;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,gEAAgE;YAChE,gEAAgE;YAChE,oEAAoE;YACpE,8DAA8D;YAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;YAChD,MAAM,iBAAiB,GAAG,oBAAoB,OAAO,EAAE,CAAA;YACvD,wEAAwE;YACxE,mDAAmD;YACnD,MAAM,iBAAiB,GAAG,oBAAoB,OAAO,GAAG,IAAI,EAAE,CAAA;YAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,iBAAiB,CAAA;YACnF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,iBAAiB,CAAA;YACnF,IAAI,SAAS,KAAK,iBAAiB,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;gBACvE,sEAAsE;gBACtE,sDAAsD;gBACtD,MAAM,CAAC,IAAI,CACT,2EAA2E,iBAAiB,MAAM,iBAAiB,wDAAwD,CAC5K,CAAA;YACH,CAAC;YAED,oFAAoF;YACpF,iFAAiF;YACjF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;YAC3D,MAAM,cAAc,GAAG,MAAM;iBAC1B,UAAU,CAAC,QAAQ,CAAC;iBACpB,MAAM,CAAC,YAAY,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,IAAI,UAAU,EAAE,CAAC;iBACxE,MAAM,CAAC,KAAK,CAAC,CAAA;YAEhB,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;gBAC1C,OAAO,EAAE,MAAM,CAAC,YAAY;gBAC5B,UAAU,EAAE,GAAG,SAAS,cAAc,MAAM,CAAC,MAAM,6DAA6D;gBAChH,SAAS,EAAE,SAAS;gBACpB,cAAc;aACf,CAAC,CAAA;YAEF,IAAI,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;gBAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;YACrD,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,mEAAmE;YACnE,uEAAuE;YACvE,qBAAqB;YACrB,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAA;YACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAC3B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAA+B;QACrD,OAAO,uBAAuB,CAAC;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,uBAA+B;QACpD,OAAO,2BAA2B,CAAC,uBAAuB,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,mBAAmB,CAAC,uBAA+B;QACvD,OAAO,yBAAyB,CAAC,uBAAuB,CAAC,CAAA;IAC3D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAA0B;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAuB,gBAAgB,CAAC,CAAA;YAC3D,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAA;YAE1B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACnE,MAAM,cAAc,GAAI,OAAO,EAAE,IAAgC,EAAE,cAAwB,CAAA;YAE3F,IAAI,CAAC,cAAc;gBAAE,OAAO,KAAK,CAAA;YAEjC,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,CAAA;YAC1D,IAAI,CAAC,YAAY;gBAAE,OAAO,KAAK,CAAA;YAE/B,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,cAAc,EAAE;gBAC7D,oBAAoB,EAAE,IAAI;aAC3B,CAAC,CAAA;YAEF,OAAO,CAAC,CAAC,OAAO,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,kDAAkD;YAClD,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE,KAAK,CAAC,CAAA;YACnE,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,mBAAmB,CAAC,MAGzB;QACC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAuB,gBAAgB,CAAC,CAAA;YAC3D,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YAEzB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACnE,MAAM,UAAU,GAAI,OAAO,EAAE,IAAgC,EAAE,UAAoB,CAAA;YACnF,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAA;YAE5B,OAAO,MAAM,yBAAyB,CAAC;gBACrC,UAAU;gBACV,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAA;YACpE,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;CACF,CAAA"}

package/dist/browser-guard.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=browser-guard.d.ts.map

package/dist/browser-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-guard.d.ts","sourceRoot":"","sources":["../src/browser-guard.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,CAAA"}

package/dist/browser-guard.js

@@ -0,0 +1,19 @@
+/**
+ * Browser guard — `@molecule/api-payments-stripe` is SERVER-ONLY.
+ *
+ * Generated by scripts/gen-browser-guards.mjs (workspace root) — edit THAT, not this.
+ * Evaluating a server package in a browser bundle is always an import-graph mistake
+ * (node APIs, secrets); without this guard it surfaces as a cryptic downstream crash
+ * ("Buffer is not defined") far from the culprit. Throwing here names the package and
+ * the fix at the exact moment the client bundle evaluates it. jsdom tests and SSR are
+ * unaffected: the throw requires browser globals AND the absence of a node runtime.
+ */
+const g = globalThis;
+if (g.window !== undefined && g.document !== undefined && !g.process?.versions?.node) {
+    throw new Error('@molecule/api-payments-stripe is SERVER-ONLY: it was bundled into browser/client code. Import it only ' +
+        'from server code (a server route/function or your API), or dynamic-import it inside ' +
+        'the server handler — never from components or shared client modules, and never ' +
+        'polyfill Buffer/process to silence this.');
+}
+export {};
+//# sourceMappingURL=browser-guard.js.map

package/dist/browser-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-guard.js","sourceRoot":"","sources":["../src/browser-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,CAAC,GAAG,UAIT,CAAA;AACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACrF,MAAM,IAAI,KAAK,CACb,wGAAwG;QACtG,sFAAsF;QACtF,iFAAiF;QACjF,0CAA0C,CAC7C,CAAA;AACH,CAAC"}