@molecule/api-payments-stripe 1.0.0

package/dist/provider.d.ts

@@ -0,0 +1,204 @@
+/**
+ * Stripe payment provider implementation.
+ *
+ * @see https://www.npmjs.com/package/stripe
+ *
+ * @module
+ */
+import Stripe from 'stripe';
+import './secrets.js';
+import type { NormalizedSubscription, SubscriptionStatus } from '@molecule/api-payments';
+import type { CheckoutSessionResult, SubscriptionResult, SubscriptionUpdateParams, WebhookEventResult } from './types.js';
+/**
+ * Returns the lazily-initialized Stripe client. Throws if `STRIPE_SECRET_KEY` is not set.
+ *
+ * @returns The shared `Stripe` SDK instance.
+ */
+export declare const getClient: () => Stripe;
+/**
+ * Creates a Stripe Checkout session for a new subscription.
+ *
+ * @param options - Checkout configuration.
+ * @param options.priceId - The Stripe Price ID for the subscription line item.
+ * @param options.successUrl - URL to redirect to after successful payment.
+ * @param options.cancelUrl - URL to redirect to if the user cancels.
+ * @param options.customerId - Optional existing Stripe Customer ID.
+ * @param options.metadata - Optional key-value metadata to attach to the session.
+ * @param options.idempotencyKey - Optional idempotency key for safe request retries.
+ * @returns The checkout session ID and URL.
+ */
+export declare const createCheckoutSession: (options: {
+    priceId: string;
+    successUrl: string;
+    cancelUrl: string;
+    customerId?: string;
+    metadata?: Record<string, string>;
+    idempotencyKey?: string;
+}) => Promise<CheckoutSessionResult>;
+/**
+ * Creates a Stripe Billing Portal session so the user can manage their
+ * subscription (update payment method, cancel, view invoices) in Stripe's
+ * hosted portal.
+ *
+ * @param options - Portal configuration.
+ * @param options.customerId - The Stripe Customer ID to open the portal for.
+ * @param options.returnUrl - URL Stripe returns the user to when they exit
+ *   the portal. Falls back to APP_ORIGIN/ORIGIN when omitted.
+ * @returns The portal session ID and URL, or `null` when Stripe rejects the
+ *   request (e.g. unknown customer).
+ */
+export declare const createPortalSession: (options: {
+    customerId: string;
+    returnUrl?: string;
+}) => Promise<{
+    id: string;
+    url: string;
+} | null>;
+/**
+ * Retrieves a Stripe Checkout session by ID, including the associated subscription.
+ *
+ * @param sessionId - The Stripe Checkout session ID.
+ * @returns The session ID, URL, and subscription ID (if a subscription was created).
+ */
+export declare const getCheckoutSession: (sessionId: string) => Promise<CheckoutSessionResult>;
+/**
+ * Retrieves a Stripe subscription by ID with expanded item data.
+ *
+ * @param subscriptionId - The Stripe subscription ID.
+ * @returns The normalized subscription result.
+ */
+export declare const getSubscription: (subscriptionId: string) => Promise<SubscriptionResult>;
+/**
+ * Immediately cancels a Stripe subscription.
+ *
+ * @param subscriptionId - The Stripe subscription ID to cancel.
+ * @returns The canceled subscription result.
+ */
+export declare const cancelSubscription: (subscriptionId: string) => Promise<SubscriptionResult>;
+/**
+ * Updates a Stripe subscription (e.g. changes plan, sets cancel_at_period_end).
+ *
+ * @param subscriptionId - The Stripe subscription ID to update.
+ * @param params - The Stripe subscription update parameters.
+ * @returns The updated subscription result.
+ */
+export declare const updateSubscription: (subscriptionId: string, params: SubscriptionUpdateParams) => Promise<SubscriptionResult>;
+/**
+ * Verifies a Stripe webhook signature and parses the event payload.
+ * Requires `STRIPE_WEBHOOK_SECRET` env var.
+ *
+ * @param payload - The raw request body (string or Buffer).
+ * @param signature - The `stripe-signature` header value.
+ * @returns The verified webhook event with type and data.
+ */
+export declare const verifyWebhookSignature: (payload: string | Buffer, signature: string) => WebhookEventResult;
+/**
+ * Creates a Stripe SetupIntent for the saved-card flow.
+ *
+ * If `customerId` is not provided, a new Stripe customer is created and its
+ * ID is returned alongside the SetupIntent so the resource layer can persist
+ * the customer ID for future SetupIntents and detachments.
+ *
+ * @param options - SetupIntent creation options.
+ * @param options.customerId - Optional existing Stripe customer ID (`cus_...`).
+ * @param options.metadata - Optional metadata to attach to the SetupIntent.
+ * @param options.idempotencyKey - Optional idempotency key for safe retries.
+ * @returns The SetupIntent ID, client secret, and customer ID.
+ */
+export declare const createSetupIntent: (options: {
+    customerId?: string;
+    metadata?: Record<string, string>;
+    idempotencyKey?: string;
+}) => Promise<{
+    id: string;
+    clientSecret: string;
+    customerId: string;
+}>;
+/**
+ * Retrieves a saved Stripe payment method (card) and returns normalized metadata.
+ *
+ * @param paymentMethodId - The Stripe payment method ID (`pm_...`).
+ * @returns Brand, last4, and expiry, or `null` if the lookup fails.
+ */
+export declare const retrievePaymentMethod: (paymentMethodId: string) => Promise<{
+    id: string;
+    brand: string;
+    last4: string;
+    expMonth: number;
+    expYear: number;
+} | null>;
+/**
+ * Detaches a saved Stripe payment method from its customer.
+ *
+ * @param paymentMethodId - The Stripe payment method ID (`pm_...`).
+ * @returns `true` if Stripe acknowledged the detach, `false` otherwise.
+ */
+export declare const detachPaymentMethod: (paymentMethodId: string) => Promise<boolean>;
+/**
+ * Reports a usage-based OVERAGE charge to Stripe as a one-off invoice item
+ * against an existing customer (and, when given, attached to the open invoice
+ * of a specific subscription so it lands on the next cycle invoice).
+ *
+ * This is the supported, type-safe path on the installed Stripe SDK (v22):
+ * the legacy `subscriptionItems.createUsageRecord` API was removed in favor of
+ * metered-price meter events / invoice items. A positive-amount invoice item
+ * is the simplest cost-plus overage mechanism — Stripe aggregates open invoice
+ * items and bills them at the customer's cycle close, so repeated incremental
+ * calls accrete onto the same upcoming invoice.
+ *
+ * IDEMPOTENCY: the caller MUST pass a stable `idempotencyKey` derived from
+ * `(user, period, amount)` so a retry or a double-run within the same Stripe
+ * idempotency window (24h) is collapsed to a single invoice item and never
+ * double-charges (broker safety invariant 4).
+ *
+ * This function performs NO gating of its own — it charges whatever it is
+ * told to. The decision of WHETHER to charge (configured? opted-in? paid?
+ * over budget?) lives entirely in the molecule-dev billing module, which is
+ * the single inert/opt-in gate (safety invariants 1 + 2).
+ *
+ * @param options - Overage reporting options.
+ * @param options.customerId - The Stripe customer to bill (`cus_...`).
+ * @param options.amountCents - The overage amount in cents (must be `> 0`).
+ * @param options.currency - ISO currency (defaults to `usd`).
+ * @param options.priceId - The metered/overage Price id this reports against;
+ *   recorded in metadata for reconciliation (the invoice item carries an
+ *   explicit `amount`, so the price's unit amount is not used here).
+ * @param options.subscriptionId - Optional subscription to attach the item to
+ *   so it bills on that subscription's cycle invoice.
+ * @param options.description - Human-readable line description.
+ * @param options.metadata - Extra reconciliation metadata (e.g. period).
+ * @param options.idempotencyKey - REQUIRED stable key (see IDEMPOTENCY above).
+ * @returns The created invoice item id + the amount actually reported.
+ */
+export declare const reportUsageOverage: (options: {
+    customerId: string;
+    amountCents: number;
+    currency?: string;
+    priceId: string;
+    subscriptionId?: string;
+    description?: string;
+    metadata?: Record<string, string>;
+    idempotencyKey: string;
+}) => Promise<{
+    id: string;
+    amountCents: number;
+}>;
+/**
+ * Maps a raw Stripe subscription status string (e.g. `past_due`, `incomplete`)
+ * to the provider-agnostic `SubscriptionStatus`.
+ *
+ * Shared between `normalizeSubscription` (verify path) and the webhook adapter so
+ * both paths derive status identically.
+ * @param rawStatus - The raw Stripe `status` string, or `undefined` if absent.
+ * @returns The normalized `SubscriptionStatus` (`'unknown'` for unrecognized/missing).
+ */
+export declare const normalizeSubscriptionStatus: (rawStatus: string | undefined) => SubscriptionStatus;
+/**
+ * Normalizes a Stripe-specific `SubscriptionResult` to the common
+ * `NormalizedSubscription` interface used across all payment providers.
+ *
+ * @param subscription - The Stripe subscription result to normalize.
+ * @returns A `NormalizedSubscription` with provider-agnostic fields.
+ */
+export declare const normalizeSubscription: (subscription: SubscriptionResult) => NormalizedSubscription;
+//# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAA;AAO3B,OAAO,cAAc,CAAA;AAErB,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAGxF,OAAO,KAAK,EACV,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,YAAY,CAAA;AASnB;;;;GAIG;AACH,eAAO,MAAM,SAAS,QAAO,MAkB5B,CAAA;AAmCD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB,GAAU,SAAS;IACnD,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,KAAG,OAAO,CAAC,qBAAqB,CAyBhC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,GAAU,SAAS;IACjD,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,KAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAY7C,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAU,WAAW,MAAM,KAAG,OAAO,CAAC,qBAAqB,CAYzF,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAU,gBAAgB,MAAM,KAAG,OAAO,CAAC,kBAAkB,CAUxF,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAU,gBAAgB,MAAM,KAAG,OAAO,CAAC,kBAAkB,CAQ3F,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,GAC7B,gBAAgB,MAAM,EACtB,QAAQ,wBAAwB,KAC/B,OAAO,CAAC,kBAAkB,CAW5B,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GACjC,SAAS,MAAM,GAAG,MAAM,EACxB,WAAW,MAAM,KAChB,kBAeF,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,GAAU,SAAS;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,KAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAkCnE,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAChC,iBAAiB,MAAM,KACtB,OAAO,CAAC;IACT,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB,GAAG,IAAI,CAeP,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAAU,iBAAiB,MAAM,KAAG,OAAO,CAAC,OAAO,CAQlF,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,kBAAkB,GAAU,SAAS;IAChD,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,cAAc,EAAE,MAAM,CAAA;CACvB,KAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAmB9C,CAAA;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,GAAI,WAAW,MAAM,GAAG,SAAS,KAAG,kBAa3E,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,GAAI,cAAc,kBAAkB,KAAG,sBAaxE,CAAA"}

package/dist/provider.js

@@ -0,0 +1,413 @@
+/**
+ * Stripe payment provider implementation.
+ *
+ * @see https://www.npmjs.com/package/stripe
+ *
+ * @module
+ */
+import Stripe from 'stripe';
+import { getLogger } from '@molecule/api-bond';
+const logger = getLogger();
+// Side-effect import: registers this bond's secret definitions so the
+// runtime registry is populated even when provider.js is imported directly
+// (not through the package barrel).
+import './secrets.js';
+import { configNotConfiguredError } from '@molecule/api-secrets';
+/**
+ * The lazily-initialized `Stripe` instance.
+ *
+ * @see http://npmjs.com/package/stripe
+ */
+let _client = null;
+/**
+ * Returns the lazily-initialized Stripe client. Throws if `STRIPE_SECRET_KEY` is not set.
+ *
+ * @returns The shared `Stripe` SDK instance.
+ */
+export const getClient = () => {
+    if (!_client) {
+        const key = process.env.STRIPE_SECRET_KEY;
+        if (!key) {
+            // Tag as a config-missing condition (not an internal error): the API error
+            // middleware maps `statusCode` + `errorKey` to a clean 503, and the message
+            // carries the registered definition's description + setup URL — the user
+            // sees exactly which key to set and where to get it, at the exact moment
+            // they're trying to upgrade to a paid plan.
+            throw configNotConfiguredError('STRIPE_SECRET_KEY', 'payments');
+        }
+        // Bound each request: Stripe's SDK default is an 80s timeout with automatic
+        // retries, so a Stripe slowdown during a signup/upgrade surge would pin
+        // request workers for over a minute each and cascade into a pool/worker
+        // exhaustion outage. Cap at 15s with two retries.
+        _client = new Stripe(key, { timeout: 15_000, maxNetworkRetries: 2 });
+    }
+    return _client;
+};
+/**
+ * Normalizes a Stripe `Subscription` object to the molecule `SubscriptionResult` type.
+ *
+ * @param sub - The raw Stripe subscription object.
+ * @returns A simplified `SubscriptionResult`.
+ */
+const toSubscriptionResult = (sub) => {
+    const firstItem = sub.items.data[0];
+    return {
+        id: sub.id,
+        status: sub.status,
+        customer: typeof sub.customer === 'string' ? sub.customer : sub.customer?.id,
+        items: {
+            data: sub.items.data.map((item) => ({
+                id: item.id,
+                price: item.price
+                    ? {
+                        // The PRICE id is load-bearing for plan resolution: apps
+                        // register their catalogue by the env-configured price ids,
+                        // while `product` is the parent product — keep both.
+                        id: item.price.id,
+                        product: typeof item.price.product === 'string' ? item.price.product : undefined,
+                    }
+                    : undefined,
+            })),
+        },
+        current_period_start: firstItem?.current_period_start ?? 0,
+        current_period_end: firstItem?.current_period_end ?? 0,
+        cancel_at_period_end: sub.cancel_at_period_end,
+        canceled_at: sub.canceled_at,
+    };
+};
+/**
+ * Creates a Stripe Checkout session for a new subscription.
+ *
+ * @param options - Checkout configuration.
+ * @param options.priceId - The Stripe Price ID for the subscription line item.
+ * @param options.successUrl - URL to redirect to after successful payment.
+ * @param options.cancelUrl - URL to redirect to if the user cancels.
+ * @param options.customerId - Optional existing Stripe Customer ID.
+ * @param options.metadata - Optional key-value metadata to attach to the session.
+ * @param options.idempotencyKey - Optional idempotency key for safe request retries.
+ * @returns The checkout session ID and URL.
+ */
+export const createCheckoutSession = async (options) => {
+    try {
+        const session = await getClient().checkout.sessions.create({
+            mode: 'subscription',
+            payment_method_types: ['card'],
+            line_items: [
+                {
+                    price: options.priceId,
+                    quantity: 1,
+                },
+            ],
+            success_url: options.successUrl,
+            cancel_url: options.cancelUrl,
+            customer: options.customerId,
+            metadata: options.metadata,
+        }, options.idempotencyKey ? { idempotencyKey: options.idempotencyKey } : undefined);
+        return { id: session.id, url: session.url };
+    }
+    catch (error) {
+        logger.error(`Error creating Stripe checkout session:`, error);
+        throw error;
+    }
+};
+/**
+ * Creates a Stripe Billing Portal session so the user can manage their
+ * subscription (update payment method, cancel, view invoices) in Stripe's
+ * hosted portal.
+ *
+ * @param options - Portal configuration.
+ * @param options.customerId - The Stripe Customer ID to open the portal for.
+ * @param options.returnUrl - URL Stripe returns the user to when they exit
+ *   the portal. Falls back to APP_ORIGIN/ORIGIN when omitted.
+ * @returns The portal session ID and URL, or `null` when Stripe rejects the
+ *   request (e.g. unknown customer).
+ */
+export const createPortalSession = async (options) => {
+    try {
+        const returnUrl = options.returnUrl ?? process.env.APP_ORIGIN ?? process.env.ORIGIN ?? undefined;
+        const session = await getClient().billingPortal.sessions.create({
+            customer: options.customerId,
+            return_url: returnUrl,
+        });
+        return { id: session.id, url: session.url };
+    }
+    catch (error) {
+        logger.error(`Error creating Stripe billing portal session:`, error);
+        return null;
+    }
+};
+/**
+ * Retrieves a Stripe Checkout session by ID, including the associated subscription.
+ *
+ * @param sessionId - The Stripe Checkout session ID.
+ * @returns The session ID, URL, and subscription ID (if a subscription was created).
+ */
+export const getCheckoutSession = async (sessionId) => {
+    try {
+        const session = await getClient().checkout.sessions.retrieve(sessionId);
+        const subscription = typeof session.subscription === 'string'
+            ? session.subscription
+            : session.subscription?.id;
+        return { id: session.id, url: session.url, subscription };
+    }
+    catch (error) {
+        logger.error(`Error retrieving Stripe checkout session:`, error);
+        throw error;
+    }
+};
+/**
+ * Retrieves a Stripe subscription by ID with expanded item data.
+ *
+ * @param subscriptionId - The Stripe subscription ID.
+ * @returns The normalized subscription result.
+ */
+export const getSubscription = async (subscriptionId) => {
+    try {
+        const subscription = await getClient().subscriptions.retrieve(subscriptionId, {
+            expand: ['items.data'],
+        });
+        return toSubscriptionResult(subscription);
+    }
+    catch (error) {
+        logger.error(`Error retrieving Stripe subscription:`, error);
+        throw error;
+    }
+};
+/**
+ * Immediately cancels a Stripe subscription.
+ *
+ * @param subscriptionId - The Stripe subscription ID to cancel.
+ * @returns The canceled subscription result.
+ */
+export const cancelSubscription = async (subscriptionId) => {
+    try {
+        const subscription = await getClient().subscriptions.cancel(subscriptionId);
+        return toSubscriptionResult(subscription);
+    }
+    catch (error) {
+        logger.error(`Error canceling Stripe subscription:`, error);
+        throw error;
+    }
+};
+/**
+ * Updates a Stripe subscription (e.g. changes plan, sets cancel_at_period_end).
+ *
+ * @param subscriptionId - The Stripe subscription ID to update.
+ * @param params - The Stripe subscription update parameters.
+ * @returns The updated subscription result.
+ */
+export const updateSubscription = async (subscriptionId, params) => {
+    try {
+        const subscription = await getClient().subscriptions.update(subscriptionId, params);
+        return toSubscriptionResult(subscription);
+    }
+    catch (error) {
+        logger.error(`Error updating Stripe subscription:`, error);
+        throw error;
+    }
+};
+/**
+ * Verifies a Stripe webhook signature and parses the event payload.
+ * Requires `STRIPE_WEBHOOK_SECRET` env var.
+ *
+ * @param payload - The raw request body (string or Buffer).
+ * @param signature - The `stripe-signature` header value.
+ * @returns The verified webhook event with type and data.
+ */
+export const verifyWebhookSignature = (payload, signature) => {
+    const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET;
+    if (!webhookSecret) {
+        // Same actionable config-missing treatment as getClient(): the error names
+        // the exact key + setup URL (from the registered secret definition) so a
+        // misconfigured server is distinguishable from a forged/bad signature —
+        // "Missing Stripe webhook secret" read like a request-parsing bug and sent
+        // integrators debugging their webhook wiring instead of their .env.
+        throw configNotConfiguredError('STRIPE_WEBHOOK_SECRET', 'payment webhook verification');
+    }
+    const event = getClient().webhooks.constructEvent(payload, signature, webhookSecret);
+    return {
+        type: event.type,
+        data: { object: event.data.object },
+    };
+};
+/**
+ * Creates a Stripe SetupIntent for the saved-card flow.
+ *
+ * If `customerId` is not provided, a new Stripe customer is created and its
+ * ID is returned alongside the SetupIntent so the resource layer can persist
+ * the customer ID for future SetupIntents and detachments.
+ *
+ * @param options - SetupIntent creation options.
+ * @param options.customerId - Optional existing Stripe customer ID (`cus_...`).
+ * @param options.metadata - Optional metadata to attach to the SetupIntent.
+ * @param options.idempotencyKey - Optional idempotency key for safe retries.
+ * @returns The SetupIntent ID, client secret, and customer ID.
+ */
+export const createSetupIntent = async (options) => {
+    try {
+        const client = getClient();
+        let customerId = options.customerId;
+        if (!customerId) {
+            const customer = await client.customers.create({ metadata: options.metadata }, options.idempotencyKey
+                ? { idempotencyKey: `${options.idempotencyKey}:customer` }
+                : undefined);
+            customerId = customer.id;
+        }
+        const setupIntent = await client.setupIntents.create({
+            customer: customerId,
+            payment_method_types: ['card'],
+            usage: 'off_session',
+            metadata: options.metadata,
+        }, options.idempotencyKey ? { idempotencyKey: options.idempotencyKey } : undefined);
+        if (!setupIntent.client_secret) {
+            throw new Error('Stripe SetupIntent missing client_secret');
+        }
+        return {
+            id: setupIntent.id,
+            clientSecret: setupIntent.client_secret,
+            customerId,
+        };
+    }
+    catch (error) {
+        logger.error('Error creating Stripe SetupIntent:', error);
+        throw error;
+    }
+};
+/**
+ * Retrieves a saved Stripe payment method (card) and returns normalized metadata.
+ *
+ * @param paymentMethodId - The Stripe payment method ID (`pm_...`).
+ * @returns Brand, last4, and expiry, or `null` if the lookup fails.
+ */
+export const retrievePaymentMethod = async (paymentMethodId) => {
+    try {
+        const pm = await getClient().paymentMethods.retrieve(paymentMethodId);
+        if (!pm.card)
+            return null;
+        return {
+            id: pm.id,
+            brand: pm.card.brand,
+            last4: pm.card.last4,
+            expMonth: pm.card.exp_month,
+            expYear: pm.card.exp_year,
+        };
+    }
+    catch (error) {
+        logger.error('Error retrieving Stripe payment method:', error);
+        return null;
+    }
+};
+/**
+ * Detaches a saved Stripe payment method from its customer.
+ *
+ * @param paymentMethodId - The Stripe payment method ID (`pm_...`).
+ * @returns `true` if Stripe acknowledged the detach, `false` otherwise.
+ */
+export const detachPaymentMethod = async (paymentMethodId) => {
+    try {
+        await getClient().paymentMethods.detach(paymentMethodId);
+        return true;
+    }
+    catch (error) {
+        logger.error('Error detaching Stripe payment method:', error);
+        return false;
+    }
+};
+/**
+ * Reports a usage-based OVERAGE charge to Stripe as a one-off invoice item
+ * against an existing customer (and, when given, attached to the open invoice
+ * of a specific subscription so it lands on the next cycle invoice).
+ *
+ * This is the supported, type-safe path on the installed Stripe SDK (v22):
+ * the legacy `subscriptionItems.createUsageRecord` API was removed in favor of
+ * metered-price meter events / invoice items. A positive-amount invoice item
+ * is the simplest cost-plus overage mechanism — Stripe aggregates open invoice
+ * items and bills them at the customer's cycle close, so repeated incremental
+ * calls accrete onto the same upcoming invoice.
+ *
+ * IDEMPOTENCY: the caller MUST pass a stable `idempotencyKey` derived from
+ * `(user, period, amount)` so a retry or a double-run within the same Stripe
+ * idempotency window (24h) is collapsed to a single invoice item and never
+ * double-charges (broker safety invariant 4).
+ *
+ * This function performs NO gating of its own — it charges whatever it is
+ * told to. The decision of WHETHER to charge (configured? opted-in? paid?
+ * over budget?) lives entirely in the molecule-dev billing module, which is
+ * the single inert/opt-in gate (safety invariants 1 + 2).
+ *
+ * @param options - Overage reporting options.
+ * @param options.customerId - The Stripe customer to bill (`cus_...`).
+ * @param options.amountCents - The overage amount in cents (must be `> 0`).
+ * @param options.currency - ISO currency (defaults to `usd`).
+ * @param options.priceId - The metered/overage Price id this reports against;
+ *   recorded in metadata for reconciliation (the invoice item carries an
+ *   explicit `amount`, so the price's unit amount is not used here).
+ * @param options.subscriptionId - Optional subscription to attach the item to
+ *   so it bills on that subscription's cycle invoice.
+ * @param options.description - Human-readable line description.
+ * @param options.metadata - Extra reconciliation metadata (e.g. period).
+ * @param options.idempotencyKey - REQUIRED stable key (see IDEMPOTENCY above).
+ * @returns The created invoice item id + the amount actually reported.
+ */
+export const reportUsageOverage = async (options) => {
+    try {
+        const invoiceItem = await getClient().invoiceItems.create({
+            customer: options.customerId,
+            amount: Math.round(options.amountCents),
+            currency: options.currency ?? 'usd',
+            description: options.description,
+            ...(options.subscriptionId ? { subscription: options.subscriptionId } : {}),
+            metadata: { ...options.metadata, overagePriceId: options.priceId },
+        }, { idempotencyKey: options.idempotencyKey });
+        return { id: invoiceItem.id, amountCents: invoiceItem.amount };
+    }
+    catch (error) {
+        // Never log the customer id or amounts at error level beyond the bare fact.
+        logger.error('Error reporting Stripe usage overage:', error);
+        throw error;
+    }
+};
+/**
+ * Maps a raw Stripe subscription status string (e.g. `past_due`, `incomplete`)
+ * to the provider-agnostic `SubscriptionStatus`.
+ *
+ * Shared between `normalizeSubscription` (verify path) and the webhook adapter so
+ * both paths derive status identically.
+ * @param rawStatus - The raw Stripe `status` string, or `undefined` if absent.
+ * @returns The normalized `SubscriptionStatus` (`'unknown'` for unrecognized/missing).
+ */
+export const normalizeSubscriptionStatus = (rawStatus) => {
+    const statusMap = {
+        active: 'active',
+        canceled: 'canceled',
+        incomplete: 'pending',
+        incomplete_expired: 'expired',
+        past_due: 'past_due',
+        paused: 'paused',
+        trialing: 'trialing',
+        unpaid: 'past_due',
+    };
+    return (rawStatus && statusMap[rawStatus]) || 'unknown';
+};
+/**
+ * Normalizes a Stripe-specific `SubscriptionResult` to the common
+ * `NormalizedSubscription` interface used across all payment providers.
+ *
+ * @param subscription - The Stripe subscription result to normalize.
+ * @returns A `NormalizedSubscription` with provider-agnostic fields.
+ */
+export const normalizeSubscription = (subscription) => {
+    return {
+        provider: 'stripe',
+        subscriptionId: subscription.id,
+        productId: subscription.items.data[0]?.price?.product || '',
+        status: normalizeSubscriptionStatus(subscription.status),
+        isActive: subscription.status === 'active' || subscription.status === 'trialing',
+        currentPeriodStart: subscription.current_period_start * 1000,
+        currentPeriodEnd: subscription.current_period_end * 1000,
+        willRenew: !subscription.cancel_at_period_end,
+        canceledAt: subscription.canceled_at ? subscription.canceled_at * 1000 : undefined,
+        rawData: subscription,
+    };
+};
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;AAC1B,sEAAsE;AACtE,2EAA2E;AAC3E,oCAAoC;AACpC,OAAO,cAAc,CAAA;AAGrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAShE;;;;GAIG;AACH,IAAI,OAAO,GAAkB,IAAI,CAAA;AAEjC;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAW,EAAE;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;QACzC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,2EAA2E;YAC3E,4EAA4E;YAC5E,yEAAyE;YACzE,yEAAyE;YACzE,4CAA4C;YAC5C,MAAM,wBAAwB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAA;QACjE,CAAC;QACD,4EAA4E;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,kDAAkD;QAClD,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAAC,GAAwB,EAAsB,EAAE;IAC5E,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QAC5E,KAAK,EAAE;YACL,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAClC,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;oBACf,CAAC,CAAC;wBACE,yDAAyD;wBACzD,4DAA4D;wBAC5D,qDAAqD;wBACrD,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;wBACjB,OAAO,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;qBACjF;oBACH,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;SACJ;QACD,oBAAoB,EAAE,SAAS,EAAE,oBAAoB,IAAI,CAAC;QAC1D,kBAAkB,EAAE,SAAS,EAAE,kBAAkB,IAAI,CAAC;QACtD,oBAAoB,EAAE,GAAG,CAAC,oBAAoB;QAC9C,WAAW,EAAE,GAAG,CAAC,WAAW;KAC7B,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EAAE,OAO3C,EAAkC,EAAE;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,SAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CACxD;YACE,IAAI,EAAE,cAAc;YACpB,oBAAoB,EAAE,CAAC,MAAM,CAAC;YAC9B,UAAU,EAAE;gBACV;oBACE,KAAK,EAAE,OAAO,CAAC,OAAO;oBACtB,QAAQ,EAAE,CAAC;iBACZ;aACF;YACD,WAAW,EAAE,OAAO,CAAC,UAAU;YAC/B,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,QAAQ,EAAE,OAAO,CAAC,UAAU;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,EACD,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAChF,CAAA;QAED,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAA;QAC9D,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,OAGzC,EAA+C,EAAE;IAChD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,SAAS,CAAA;QAChG,MAAM,OAAO,GAAG,MAAM,SAAS,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9D,QAAQ,EAAE,OAAO,CAAC,UAAU;YAC5B,UAAU,EAAE,SAAS;SACtB,CAAC,CAAA;QACF,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAA;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAA;QACpE,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,SAAiB,EAAkC,EAAE;IAC5F,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,SAAS,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACvE,MAAM,YAAY,GAChB,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;YACtC,CAAC,CAAC,OAAO,CAAC,YAAY;YACtB,CAAC,CAAE,OAAO,CAAC,YAAuC,EAAE,EAAE,CAAA;QAC1D,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,CAAA;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAA;QAChE,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,cAAsB,EAA+B,EAAE;IAC3F,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,SAAS,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,EAAE;YAC5E,MAAM,EAAE,CAAC,YAAY,CAAC;SACvB,CAAC,CAAA;QACF,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC5D,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,cAAsB,EAA+B,EAAE;IAC9F,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,SAAS,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;QAC3E,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAA;QAC3D,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,cAAsB,EACtB,MAAgC,EACH,EAAE;IAC/B,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,SAAS,EAAE,CAAC,aAAa,CAAC,MAAM,CACzD,cAAc,EACd,MAAyC,CAC1C,CAAA;QACD,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAA;QAC1D,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,OAAwB,EACxB,SAAiB,EACG,EAAE;IACtB,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAA;IACvD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,wBAAwB,CAAC,uBAAuB,EAAE,8BAA8B,CAAC,CAAA;IACzF,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;IACpF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAA4C,EAAE;KAC1E,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,OAIvC,EAAqE,EAAE;IACtE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;QAC1B,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACnC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAC5C,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAC9B,OAAO,CAAC,cAAc;gBACpB,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,cAAc,WAAW,EAAE;gBAC1D,CAAC,CAAC,SAAS,CACd,CAAA;YACD,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAA;QAC1B,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAClD;YACE,QAAQ,EAAE,UAAU;YACpB,oBAAoB,EAAE,CAAC,MAAM,CAAC;YAC9B,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,EACD,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS,CAChF,CAAA;QACD,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC7D,CAAC;QACD,OAAO;YACL,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,YAAY,EAAE,WAAW,CAAC,aAAa;YACvC,UAAU;SACX,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAA;QACzD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,eAAuB,EAOf,EAAE;IACV,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAA;QACrE,IAAI,CAAC,EAAE,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACzB,OAAO;YACL,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK;YACpB,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK;YACpB,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS;YAC3B,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ;SAC1B,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAA;QAC9D,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,eAAuB,EAAoB,EAAE;IACrF,IAAI,CAAC;QACH,MAAM,SAAS,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;QACxD,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAA;QAC7D,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,OASxC,EAAgD,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,SAAS,EAAE,CAAC,YAAY,CAAC,MAAM,CACvD;YACE,QAAQ,EAAE,OAAO,CAAC,UAAU;YAC5B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;YACnC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE;SACnE,EACD,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAC3C,CAAA;QACD,OAAO,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,CAAA;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4EAA4E;QAC5E,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC5D,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,SAA6B,EAAsB,EAAE;IAC/F,MAAM,SAAS,GAAuC;QACpD,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,SAAS;QACrB,kBAAkB,EAAE,SAAS;QAC7B,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,UAAU;KACnB,CAAA;IAED,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,SAAS,CAAA;AACzD,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,YAAgC,EAA0B,EAAE;IAChG,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,cAAc,EAAE,YAAY,CAAC,EAAE;QAC/B,SAAS,EAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAkB,IAAI,EAAE;QACvE,MAAM,EAAE,2BAA2B,CAAC,YAAY,CAAC,MAAM,CAAC;QACxD,QAAQ,EAAE,YAAY,CAAC,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,UAAU;QAChF,kBAAkB,EAAE,YAAY,CAAC,oBAAoB,GAAG,IAAI;QAC5D,gBAAgB,EAAE,YAAY,CAAC,kBAAkB,GAAG,IAAI;QACxD,SAAS,EAAE,CAAC,YAAY,CAAC,oBAAoB;QAC7C,UAAU,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;QAClF,OAAO,EAAE,YAAkD;KAC5D,CAAA;AACH,CAAC,CAAA"}

package/dist/secrets.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Stripe secret definitions — self-registered at import time so the
+ * runtime secrets registry (`@molecule/api-secrets`) can drive boot-time
+ * configuration reports and actionable "not configured" errors.
+ *
+ * Content is derived MECHANICALLY from this package's mlcl registry secrets
+ * entry (label/instructions/setupUrl/example) via the fleet formula, so
+ * packages sharing a key register byte-identical definitions and
+ * registration order never matters.
+ *
+ * @module
+ */
+import type { SecretDefinition } from '@molecule/api-secrets';
+/** Secret definitions required by the Stripe payments bond. */
+export declare const stripeSecretDefinitions: SecretDefinition[];
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAG7D,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,EAAE,gBAAgB,EAiBrD,CAAA"}