@noodleseed/one 0.54.0 → 0.56.0

package/node_modules/stripe/esm/Webhooks.js

@@ -0,0 +1,261 @@
+import { StripeError, StripeSignatureVerificationError } from './Error.js';
+import { CryptoProviderOnlySupportsAsyncError, } from './crypto/CryptoProvider.js';
+export function createWebhooks(platformFunctions) {
+    const Webhook = {
+        DEFAULT_TOLERANCE: 300,
+        signature: null,
+        constructEvent(payload, header, secret, tolerance, cryptoProvider, receivedAt) {
+            try {
+                if (!this.signature) {
+                    throw new Error('ERR: missing signature helper, unable to verify');
+                }
+                cryptoProvider = cryptoProvider || getCryptoProvider();
+                this.signature.verifyHeader(payload, header, secret, tolerance || Webhook.DEFAULT_TOLERANCE, cryptoProvider, receivedAt);
+            }
+            catch (e) {
+                if (e instanceof CryptoProviderOnlySupportsAsyncError) {
+                    e.message +=
+                        '\nUse `await constructEventAsync(...)` instead of `constructEvent(...)`';
+                }
+                throw e;
+            }
+            const jsonPayload = payload instanceof Uint8Array
+                ? JSON.parse(new TextDecoder('utf8').decode(payload))
+                : JSON.parse(payload);
+            if (jsonPayload && jsonPayload.object === 'v2.core.event') {
+                throw new Error('You passed an event notification to stripe.webhooks.constructEvent, which expects a webhook payload. Use stripe.parseEventNotification instead.');
+            }
+            return jsonPayload;
+        },
+        async constructEventAsync(payload, header, secret, tolerance, cryptoProvider, receivedAt) {
+            if (!this.signature) {
+                throw new Error('ERR: missing signature helper, unable to verify');
+            }
+            cryptoProvider = cryptoProvider || getCryptoProvider();
+            await this.signature.verifyHeaderAsync(payload, header, secret, tolerance || Webhook.DEFAULT_TOLERANCE, cryptoProvider, receivedAt);
+            const jsonPayload = payload instanceof Uint8Array
+                ? JSON.parse(new TextDecoder('utf8').decode(payload))
+                : JSON.parse(payload);
+            if (jsonPayload && jsonPayload.object === 'v2.core.event') {
+                throw new Error('You passed an event notification to stripe.webhooks.constructEvent, which expects a webhook payload. Use stripe.parseEventNotificationAsync instead.');
+            }
+            return jsonPayload;
+        },
+        /**
+         * Generates a header to be used for webhook mocking
+         *
+         * @typedef {object} opts
+         * @property {number} timestamp - Timestamp of the header. Defaults to Date.now()
+         * @property {string} payload - JSON stringified payload object, containing the 'id' and 'object' parameters
+         * @property {string} secret - Stripe webhook secret 'whsec_...'
+         * @property {string} scheme - Version of API to hit. Defaults to 'v1'.
+         * @property {string} signature - Computed webhook signature
+         * @property {CryptoProvider} cryptoProvider - Crypto provider to use for computing the signature if none was provided. Defaults to NodeCryptoProvider.
+         */
+        generateTestHeaderString: function (opts) {
+            const preparedOpts = prepareOptions(opts);
+            const signature = preparedOpts.signature ||
+                preparedOpts.cryptoProvider.computeHMACSignature(preparedOpts.payloadString, preparedOpts.secret);
+            return preparedOpts.generateHeaderString(signature);
+        },
+        generateTestHeaderStringAsync: async function (opts) {
+            const preparedOpts = prepareOptions(opts);
+            const signature = preparedOpts.signature ||
+                (await preparedOpts.cryptoProvider.computeHMACSignatureAsync(preparedOpts.payloadString, preparedOpts.secret));
+            return preparedOpts.generateHeaderString(signature);
+        },
+    };
+    const signature = {
+        EXPECTED_SCHEME: 'v1',
+        verifyHeader(encodedPayload, encodedHeader, secret, tolerance, cryptoProvider, receivedAt) {
+            const { decodedHeader: header, decodedPayload: payload, details, suspectPayloadType, } = parseEventDetails(encodedPayload, encodedHeader, this.EXPECTED_SCHEME);
+            const secretContainsWhitespace = /\s/.test(secret);
+            cryptoProvider = cryptoProvider || getCryptoProvider();
+            const expectedSignature = cryptoProvider.computeHMACSignature(makeHMACContent(payload, details), secret);
+            /**
+             * TODO(MAJOR): https://go/j/DEVSDK-3087
+             * Passing in 0 by default skips timestamp tolerance verifications. Although it is mostly used in test,
+             * we should change the default behavior to pass DEFAULT_TOLERANCE instead of 0 in the next major.
+             */
+            validateComputedSignature(payload, header, details, expectedSignature, tolerance || 0, suspectPayloadType, secretContainsWhitespace, receivedAt);
+            return true;
+        },
+        async verifyHeaderAsync(encodedPayload, encodedHeader, secret, tolerance, cryptoProvider, receivedAt) {
+            const { decodedHeader: header, decodedPayload: payload, details, suspectPayloadType, } = parseEventDetails(encodedPayload, encodedHeader, this.EXPECTED_SCHEME);
+            const secretContainsWhitespace = /\s/.test(secret);
+            cryptoProvider = cryptoProvider || getCryptoProvider();
+            const expectedSignature = await cryptoProvider.computeHMACSignatureAsync(makeHMACContent(payload, details), secret);
+            /**
+             * TODO(MAJOR): https://go/j/DEVSDK-3087
+             * Passing in 0 by default skips timestamp tolerance verifications. Although it is mostly used in test,
+             * we should change the default behavior to pass DEFAULT_TOLERANCE instead of 0 in the next major.
+             */
+            return validateComputedSignature(payload, header, details, expectedSignature, tolerance || 0, suspectPayloadType, secretContainsWhitespace, receivedAt);
+        },
+    };
+    function makeHMACContent(payload, details) {
+        return `${details.timestamp}.${payload}`;
+    }
+    function parseEventDetails(encodedPayload, encodedHeader, expectedScheme) {
+        // Express's type for `Request#headers` is `string | []string`
+        // which is because the `set-cookie` header is an array,
+        // but no other headers are an array (docs: https://nodejs.org/api/http.html#http_message_headers)
+        // (Express's Request class is an extension of http.IncomingMessage, and doesn't appear to be relevantly modified: https://github.com/expressjs/express/blob/master/lib/request.js#L31)
+        if (Array.isArray(encodedHeader)) {
+            throw new Error('Unexpected: An array was passed as a header, which should not be possible for the stripe-signature header.');
+        }
+        if (!encodedPayload) {
+            throw new StripeSignatureVerificationError(encodedHeader, encodedPayload, {
+                message: 'No webhook payload was provided.',
+            });
+        }
+        const suspectPayloadType = typeof encodedPayload != 'string' &&
+            !(encodedPayload instanceof Uint8Array);
+        const textDecoder = new TextDecoder('utf8');
+        const decodedPayload = encodedPayload instanceof Uint8Array
+            ? textDecoder.decode(encodedPayload)
+            : encodedPayload;
+        if (encodedHeader == null || encodedHeader == '') {
+            throw new StripeSignatureVerificationError(encodedHeader, encodedPayload, {
+                message: 'No stripe-signature header value was provided.',
+            });
+        }
+        const decodedHeader = encodedHeader instanceof Uint8Array
+            ? textDecoder.decode(encodedHeader)
+            : encodedHeader;
+        const details = parseHeader(decodedHeader, expectedScheme);
+        if (!details || details.timestamp === -1) {
+            throw new StripeSignatureVerificationError(decodedHeader, decodedPayload, {
+                message: 'Unable to extract timestamp and signatures from header',
+            });
+        }
+        if (!details.signatures.length) {
+            throw new StripeSignatureVerificationError(decodedHeader, decodedPayload, {
+                message: 'No signatures found with expected scheme',
+            });
+        }
+        return {
+            decodedPayload,
+            decodedHeader,
+            details,
+            suspectPayloadType,
+        };
+    }
+    /**
+     * Validates that at least one signature in the parsed header matches the
+     * expected signature, and that the event timestamp is within the allowed
+     * {@link tolerance} window (in seconds). Set `tolerance` to `0` to skip
+     * timestamp verification.
+     *
+     * TODO(MAJOR): https://go/j/DEVSDK-3087 - Change this default behavior to use DEFAULT_TOLERANCE instead of 0.
+     * By default, validateComputedSignature doesn't perform timestamp verification.
+     *
+     * This method is mostly meant for tests or offline processing where the delivery time
+     * of the event isn't important.
+     * Integrations that process webhooks as they come in should use constructEvent method instead.
+     *
+     * @param payload The decoded webhook payload string.
+     * @param header  The decoded `stripe-signature` header value.
+     * @param details Parsed header containing timestamp and signatures.
+     * @param expectedSignature HMAC signature computed from the payload and secret.
+     * @param tolerance Maximum allowed age of the event in seconds. Use 0 to skip timestamp tolerance verification.
+     * @param suspectPayloadType Whether the payload was not a string or Buffer.
+     * @param secretContainsWhitespace Whether the signing secret contains whitespace.
+     * @param receivedAt - Timestamp for age calculation
+     * @returns `true` if the signature and timestamp are valid.
+     *
+     * @throws {StripeSignatureVerificationError} If verification fails.
+     */
+    function validateComputedSignature(payload, header, details, expectedSignature, tolerance, suspectPayloadType, secretContainsWhitespace, receivedAt) {
+        const signatureFound = !!details.signatures.filter(platformFunctions.secureCompare.bind(platformFunctions, expectedSignature)).length;
+        const docsLocation = '\nLearn more about webhook signing and explore webhook integration examples for various frameworks at ' +
+            'https://docs.stripe.com/webhooks/signature';
+        const whitespaceMessage = secretContainsWhitespace
+            ? '\n\nNote: The provided signing secret contains whitespace. This often indicates an extra newline or space is in the value'
+            : '';
+        if (!signatureFound) {
+            if (suspectPayloadType) {
+                throw new StripeSignatureVerificationError(header, payload, {
+                    message: 'Webhook payload must be provided as a string or a Buffer (https://nodejs.org/api/buffer.html) instance representing the _raw_ request body.' +
+                        'Payload was provided as a parsed JavaScript object instead. \n' +
+                        'Signature verification is impossible without access to the original signed material. \n' +
+                        docsLocation +
+                        '\n' +
+                        whitespaceMessage,
+                });
+            }
+            throw new StripeSignatureVerificationError(header, payload, {
+                message: 'No signatures found matching the expected signature for payload.' +
+                    ' Are you passing the raw request body you received from Stripe? \n' +
+                    ' If a webhook request is being forwarded by a third-party tool,' +
+                    ' ensure that the exact request body, including JSON formatting and new line style, is preserved.\n' +
+                    docsLocation +
+                    '\n' +
+                    whitespaceMessage,
+            });
+        }
+        const timestampAge = Math.floor((typeof receivedAt === 'number' ? receivedAt : Date.now()) / 1000) - details.timestamp;
+        if (tolerance > 0 && timestampAge > tolerance) {
+            throw new StripeSignatureVerificationError(header, payload, {
+                message: 'Timestamp outside the tolerance zone',
+            });
+        }
+        return true;
+    }
+    function parseHeader(header, scheme) {
+        if (typeof header !== 'string') {
+            return null;
+        }
+        scheme = scheme || signature.EXPECTED_SCHEME;
+        return header.split(',').reduce((accum, item) => {
+            const kv = item.split('=');
+            if (kv[0] === 't') {
+                accum.timestamp = parseInt(kv[1], 10);
+            }
+            if (kv[0] === scheme) {
+                accum.signatures.push(kv[1]);
+            }
+            return accum;
+        }, {
+            timestamp: -1,
+            signatures: [],
+        });
+    }
+    let webhooksCryptoProviderInstance = null;
+    /**
+     * Lazily instantiate a CryptoProvider instance. This is a stateless object
+     * so a singleton can be used here.
+     */
+    function getCryptoProvider() {
+        if (!webhooksCryptoProviderInstance) {
+            webhooksCryptoProviderInstance = platformFunctions.createDefaultCryptoProvider();
+        }
+        return webhooksCryptoProviderInstance;
+    }
+    function prepareOptions(opts) {
+        if (!opts) {
+            throw new StripeError({
+                message: 'Options are required',
+            });
+        }
+        const timestamp = (opts.timestamp && Math.floor(opts.timestamp)) ||
+            Math.floor(Date.now() / 1000);
+        const scheme = opts.scheme || signature.EXPECTED_SCHEME;
+        const cryptoProvider = opts.cryptoProvider || getCryptoProvider();
+        const payloadString = `${timestamp}.${opts.payload}`;
+        const generateHeaderString = (signature) => {
+            return `t=${timestamp},${scheme}=${signature}`;
+        };
+        return {
+            ...opts,
+            timestamp,
+            scheme,
+            cryptoProvider,
+            payloadString,
+            generateHeaderString,
+        };
+    }
+    Webhook.signature = signature;
+    return Webhook;
+}
+//# sourceMappingURL=Webhooks.js.map

package/node_modules/stripe/esm/Webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Webhooks.js","sourceRoot":"","sources":["../src/Webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAE,gCAAgC,EAAC,MAAM,YAAY,CAAC;AACzE,OAAO,EAEL,oCAAoC,GACrC,MAAM,4BAA4B,CAAC;AA+EpC,MAAM,UAAU,cAAc,CAC5B,iBAAoC;IAEpC,MAAM,OAAO,GAAkB;QAC7B,iBAAiB,EAAE,GAAG;QACtB,SAAS,EAAE,IAAI;QACf,cAAc,CACZ,OAAuB,EACvB,MAAqB,EACrB,MAAc,EACd,SAAkB,EAClB,cAA+B,EAC/B,UAAmB;YAEnB,IAAI;gBACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;oBACnB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;iBACpE;gBAED,cAAc,GAAG,cAAc,IAAI,iBAAiB,EAAE,CAAC;gBAEvD,IAAI,CAAC,SAAS,CAAC,YAAY,CACzB,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,IAAI,OAAO,CAAC,iBAAiB,EACtC,cAAc,EACd,UAAU,CACX,CAAC;aACH;YAAC,OAAO,CAAC,EAAE;gBACV,IAAI,CAAC,YAAY,oCAAoC,EAAE;oBACrD,CAAC,CAAC,OAAO;wBACP,yEAAyE,CAAC;iBAC7E;gBACD,MAAM,CAAC,CAAC;aACT;YAED,MAAM,WAAW,GACf,OAAO,YAAY,UAAU;gBAC3B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACrD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,eAAe,EAAE;gBACzD,MAAM,IAAI,KAAK,CACb,iJAAiJ,CAClJ,CAAC;aACH;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,mBAAmB,CACvB,OAAuB,EACvB,MAAqB,EACrB,MAAc,EACd,SAAkB,EAClB,cAA+B,EAC/B,UAAmB;YAEnB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;gBACnB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;aACpE;YAED,cAAc,GAAG,cAAc,IAAI,iBAAiB,EAAE,CAAC;YAEvD,MAAM,IAAI,CAAC,SAAS,CAAC,iBAAiB,CACpC,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,IAAI,OAAO,CAAC,iBAAiB,EACtC,cAAc,EACd,UAAU,CACX,CAAC;YAEF,MAAM,WAAW,GACf,OAAO,YAAY,UAAU;gBAC3B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACrD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,eAAe,EAAE;gBACzD,MAAM,IAAI,KAAK,CACb,sJAAsJ,CACvJ,CAAC;aACH;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;QAED;;;;;;;;;;WAUG;QACH,wBAAwB,EAAE,UAAS,IAA8B;YAC/D,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAE1C,MAAM,SAAS,GACb,YAAY,CAAC,SAAS;gBACtB,YAAY,CAAC,cAAc,CAAC,oBAAoB,CAC9C,YAAY,CAAC,aAAa,EAC1B,YAAY,CAAC,MAAM,CACpB,CAAC;YAEJ,OAAO,YAAY,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC;QACD,6BAA6B,EAAE,KAAK,WAClC,IAA8B;YAE9B,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YAE1C,MAAM,SAAS,GACb,YAAY,CAAC,SAAS;gBACtB,CAAC,MAAM,YAAY,CAAC,cAAc,CAAC,yBAAyB,CAC1D,YAAY,CAAC,aAAa,EAC1B,YAAY,CAAC,MAAM,CACpB,CAAC,CAAC;YAEL,OAAO,YAAY,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,eAAe,EAAE,IAAI;QAErB,YAAY,CACV,cAA8B,EAC9B,aAA4B,EAC5B,MAAc,EACd,SAAkB,EAClB,cAA+B,EAC/B,UAAmB;YAEnB,MAAM,EACJ,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,OAAO,EACvB,OAAO,EACP,kBAAkB,GACnB,GAAG,iBAAiB,CACnB,cAAc,EACd,aAAa,EACb,IAAI,CAAC,eAAe,CACrB,CAAC;YACF,MAAM,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEnD,cAAc,GAAG,cAAc,IAAI,iBAAiB,EAAE,CAAC;YACvD,MAAM,iBAAiB,GAAG,cAAc,CAAC,oBAAoB,CAC3D,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EACjC,MAAM,CACP,CAAC;YAEF;;;;eAIG;YACH,yBAAyB,CACvB,OAAO,EACP,MAAM,EACN,OAAO,EACP,iBAAiB,EACjB,SAAS,IAAI,CAAC,EACd,kBAAkB,EAClB,wBAAwB,EACxB,UAAU,CACX,CAAC;YAEF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,iBAAiB,CACrB,cAA8B,EAC9B,aAA4B,EAC5B,MAAc,EACd,SAAkB,EAClB,cAA+B,EAC/B,UAAmB;YAEnB,MAAM,EACJ,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,OAAO,EACvB,OAAO,EACP,kBAAkB,GACnB,GAAG,iBAAiB,CACnB,cAAc,EACd,aAAa,EACb,IAAI,CAAC,eAAe,CACrB,CAAC;YACF,MAAM,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEnD,cAAc,GAAG,cAAc,IAAI,iBAAiB,EAAE,CAAC;YAEvD,MAAM,iBAAiB,GAAG,MAAM,cAAc,CAAC,yBAAyB,CACtE,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,EACjC,MAAM,CACP,CAAC;YAEF;;;;eAIG;YACH,OAAO,yBAAyB,CAC9B,OAAO,EACP,MAAM,EACN,OAAO,EACP,iBAAiB,EACjB,SAAS,IAAI,CAAC,EACd,kBAAkB,EAClB,wBAAwB,EACxB,UAAU,CACX,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,SAAS,eAAe,CACtB,OAAuB,EACvB,OAA4B;QAE5B,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC;IAC3C,CAAC;IAED,SAAS,iBAAiB,CACxB,cAA8B,EAC9B,aAA4B,EAC5B,cAAsB;QAEtB,8DAA8D;QAC9D,wDAAwD;QACxD,kGAAkG;QAClG,uLAAuL;QACvL,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE;YAChC,MAAM,IAAI,KAAK,CACb,4GAA4G,CAC7G,CAAC;SACH;QAED,IAAI,CAAC,cAAc,EAAE;YACnB,MAAM,IAAI,gCAAgC,CACxC,aAAa,EACb,cAAc,EACd;gBACE,OAAO,EAAE,kCAAkC;aAC5C,CACF,CAAC;SACH;QAED,MAAM,kBAAkB,GACtB,OAAO,cAAc,IAAI,QAAQ;YACjC,CAAC,CAAC,cAAc,YAAY,UAAU,CAAC,CAAC;QAE1C,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,cAAc,GAClB,cAAc,YAAY,UAAU;YAClC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,cAAc,CAAC;YACpC,CAAC,CAAC,cAAc,CAAC;QAErB,IAAI,aAAa,IAAI,IAAI,IAAI,aAAa,IAAI,EAAE,EAAE;YAChD,MAAM,IAAI,gCAAgC,CACxC,aAAa,EACb,cAAc,EACd;gBACE,OAAO,EAAE,gDAAgD;aAC1D,CACF,CAAC;SACH;QAED,MAAM,aAAa,GACjB,aAAa,YAAY,UAAU;YACjC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC;YACnC,CAAC,CAAC,aAAa,CAAC;QAEpB,MAAM,OAAO,GAAG,WAAW,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QAE3D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,CAAC,CAAC,EAAE;YACxC,MAAM,IAAI,gCAAgC,CACxC,aAAa,EACb,cAAc,EACd;gBACE,OAAO,EAAE,wDAAwD;aAClE,CACF,CAAC;SACH;QAED,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE;YAC9B,MAAM,IAAI,gCAAgC,CACxC,aAAa,EACb,cAAc,EACd;gBACE,OAAO,EAAE,0CAA0C;aACpD,CACF,CAAC;SACH;QAED,OAAO;YACL,cAAc;YACd,aAAa;YACb,OAAO;YACP,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,SAAS,yBAAyB,CAChC,OAAe,EACf,MAAc,EACd,OAA4B,EAC5B,iBAAyB,EACzB,SAAiB,EACjB,kBAA2B,EAC3B,wBAAiC,EACjC,UAAmB;QAEnB,MAAM,cAAc,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAChD,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAC3E,CAAC,MAAM,CAAC;QAET,MAAM,YAAY,GAChB,wGAAwG;YACxG,4CAA4C,CAAC;QAE/C,MAAM,iBAAiB,GAAG,wBAAwB;YAChD,CAAC,CAAC,2HAA2H;YAC7H,CAAC,CAAC,EAAE,CAAC;QAEP,IAAI,CAAC,cAAc,EAAE;YACnB,IAAI,kBAAkB,EAAE;gBACtB,MAAM,IAAI,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE;oBAC1D,OAAO,EACL,6IAA6I;wBAC7I,gEAAgE;wBAChE,yFAAyF;wBACzF,YAAY;wBACZ,IAAI;wBACJ,iBAAiB;iBACpB,CAAC,CAAC;aACJ;YACD,MAAM,IAAI,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE;gBAC1D,OAAO,EACL,kEAAkE;oBAClE,oEAAoE;oBACpE,iEAAiE;oBACjE,oGAAoG;oBACpG,YAAY;oBACZ,IAAI;oBACJ,iBAAiB;aACpB,CAAC,CAAC;SACJ;QAED,MAAM,YAAY,GAChB,IAAI,CAAC,KAAK,CACR,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAClE,GAAG,OAAO,CAAC,SAAS,CAAC;QAExB,IAAI,SAAS,GAAG,CAAC,IAAI,YAAY,GAAG,SAAS,EAAE;YAC7C,MAAM,IAAI,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE;gBAC1D,OAAO,EAAE,sCAAsC;aAChD,CAAC,CAAC;SACJ;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,WAAW,CAClB,MAAqB,EACrB,MAAe;QAEf,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE;YAC9B,OAAO,IAAI,CAAC;SACb;QACD,MAAM,GAAG,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC;QAE7C,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACd,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE3B,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;gBACjB,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;aACvC;YAED,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE;gBACpB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;aAC9B;YAED,OAAO,KAAK,CAAC;QACf,CAAC,EACD;YACE,SAAS,EAAE,CAAC,CAAC;YACb,UAAU,EAAE,EAAE;SACf,CACF,CAAC;IACJ,CAAC;IAED,IAAI,8BAA8B,GAA0B,IAAI,CAAC;IAEjE;;;OAGG;IACH,SAAS,iBAAiB;QACxB,IAAI,CAAC,8BAA8B,EAAE;YACnC,8BAA8B,GAAG,iBAAiB,CAAC,2BAA2B,EAAE,CAAC;SAClF;QACD,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,SAAS,cAAc,CACrB,IAA8B;QAW9B,IAAI,CAAC,IAAI,EAAE;YACT,MAAM,IAAI,WAAW,CAAC;gBACpB,OAAO,EAAE,sBAAsB;aAChC,CAAC,CAAC;SACJ;QAED,MAAM,SAAS,GACb,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC;QACxD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,iBAAiB,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAErD,MAAM,oBAAoB,GAAG,CAAC,SAAiB,EAAU,EAAE;YACzD,OAAO,KAAK,SAAS,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;QACjD,CAAC,CAAC;QAEF,OAAO;YACL,GAAG,IAAI;YACP,SAAS;YACT,MAAM;YACN,cAAc;YACd,aAAa;YACb,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAE9B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/node_modules/stripe/esm/apiVersion.d.ts

@@ -0,0 +1,2 @@
+export declare const ApiVersion = "2026-06-24.dahlia";
+export declare const ApiMajorVersion = "dahlia";

package/node_modules/stripe/esm/apiVersion.js

@@ -0,0 +1,4 @@
+// File generated from our OpenAPI spec
+export const ApiVersion = '2026-06-24.dahlia';
+export const ApiMajorVersion = 'dahlia';
+//# sourceMappingURL=apiVersion.js.map

package/node_modules/stripe/esm/apiVersion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiVersion.js","sourceRoot":"","sources":["../src/apiVersion.ts"],"names":[],"mappings":"AAAA,uCAAuC;AAEvC,MAAM,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAC9C,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC"}

package/node_modules/stripe/esm/autoPagination.d.ts

@@ -0,0 +1,25 @@
+import { RequestData, StripeResourceObject, MakeRequestSpec } from './Types.js';
+import { RequestOptions } from './lib.js';
+type IterationDoneCallback = (err?: any, result?: any) => void;
+type IterationItemCallback<T> = (item: T, next: any) => void | boolean | Promise<void | boolean>;
+type AutoPagingEach<T> = (onItem: IterationItemCallback<T>, onDone?: IterationDoneCallback) => Promise<void>;
+type AutoPagingToArrayOptions = {
+    limit?: number;
+};
+type AutoPagingToArray<T> = (opts: AutoPagingToArrayOptions, onDone: IterationDoneCallback) => Promise<Array<T>>;
+type AutoPaginationMethods<T> = {
+    autoPagingEach: AutoPagingEach<T>;
+    autoPagingToArray: AutoPagingToArray<T>;
+    next: () => Promise<IteratorResult<T>>;
+    return: () => void;
+};
+type PageResult<T> = {
+    data: Array<T>;
+    has_more: boolean;
+    next_page?: string | null;
+    next_page_url?: string | null;
+};
+export declare const makeAutoPaginationMethods: <TItem extends {
+    id: string;
+}>(stripeResource: StripeResourceObject, params: RequestData, options: RequestOptions | undefined, method: string, path: string, spec: MakeRequestSpec | undefined, firstPagePromise: Promise<PageResult<TItem>>) => AutoPaginationMethods<TItem> | null;
+export {};

package/node_modules/stripe/esm/autoPagination.js

@@ -0,0 +1,335 @@
+import { attachCallSiteToError, getAPIMode } from './utils.js';
+class V1Iterator {
+    constructor(firstPagePromise, params, options, method, path, spec, stripeResource) {
+        this.index = 0;
+        this.pagePromise = firstPagePromise;
+        this.promiseCache = { currentPromise: null };
+        this.params = params;
+        this.options = options;
+        this.method = method;
+        this.path = path;
+        this.spec = spec;
+        this.stripeResource = stripeResource;
+    }
+    async iterate(pageResult) {
+        if (!(pageResult &&
+            pageResult.data &&
+            typeof pageResult.data.length === 'number')) {
+            throw Error('Unexpected: Stripe API response does not have a well-formed `data` array.');
+        }
+        const reverseIteration = !!this.params.ending_before;
+        if (this.index < pageResult.data.length) {
+            const idx = reverseIteration
+                ? pageResult.data.length - 1 - this.index
+                : this.index;
+            const value = pageResult.data[idx];
+            this.index += 1;
+            return { value, done: false };
+        }
+        else if (pageResult.has_more) {
+            // Reset counter, request next page, and recurse.
+            this.index = 0;
+            this.pagePromise = this.getNextPage(pageResult);
+            const nextPageResult = await this.pagePromise;
+            return this.iterate(nextPageResult);
+        }
+        return { done: true, value: undefined };
+    }
+    /** @abstract */
+    getNextPage(_pageResult) {
+        throw new Error('Unimplemented');
+    }
+    async _next() {
+        return this.iterate(await this.pagePromise);
+    }
+    next() {
+        /**
+         * If a user calls `.next()` multiple times in parallel,
+         * return the same result until something has resolved
+         * to prevent page-turning race conditions.
+         */
+        if (this.promiseCache.currentPromise) {
+            return this.promiseCache.currentPromise;
+        }
+        const nextPromise = (async () => {
+            const ret = await this._next();
+            this.promiseCache.currentPromise = null;
+            return ret;
+        })();
+        this.promiseCache.currentPromise = nextPromise;
+        return nextPromise;
+    }
+}
+class V1ListIterator extends V1Iterator {
+    getNextPage(pageResult) {
+        const reverseIteration = !!this.params.ending_before;
+        const lastId = getLastId(pageResult, reverseIteration);
+        const nextParams = {
+            ...this.params,
+            [reverseIteration ? 'ending_before' : 'starting_after']: lastId,
+        };
+        return this.stripeResource._makeRequest(this.method, this.path, nextParams, this.options, this.spec);
+    }
+}
+class V1SearchIterator extends V1Iterator {
+    getNextPage(pageResult) {
+        if (!pageResult.next_page) {
+            throw Error('Unexpected: Stripe API response does not have a well-formed `next_page` field, but `has_more` was true.');
+        }
+        const nextParams = {
+            ...this.params,
+            page: pageResult.next_page,
+        };
+        return this.stripeResource._makeRequest(this.method, this.path, nextParams, this.options, this.spec);
+    }
+}
+class V2ListIterator {
+    constructor(firstPagePromise, options, spec, stripeResource) {
+        this.firstPagePromise = firstPagePromise;
+        this.currentPageIterator = null;
+        this.nextPageUrl = null;
+        this.promiseCache = { currentPromise: null };
+        this.options = options;
+        this.spec = spec;
+        this.stripeResource = stripeResource;
+    }
+    async initFirstPage() {
+        if (this.firstPagePromise) {
+            const page = await this.firstPagePromise;
+            this.firstPagePromise = null;
+            this.currentPageIterator = page.data[Symbol.iterator]();
+            this.nextPageUrl = page.next_page_url || null;
+        }
+    }
+    async turnPage() {
+        if (!this.nextPageUrl)
+            return null;
+        const page = await this.stripeResource._makeRequest('GET', this.nextPageUrl, undefined, this.options, this.spec);
+        this.nextPageUrl = page.next_page_url || null;
+        this.currentPageIterator = page.data[Symbol.iterator]();
+        return this.currentPageIterator;
+    }
+    async _next() {
+        await this.initFirstPage();
+        if (this.currentPageIterator) {
+            const result = this.currentPageIterator.next();
+            if (!result.done)
+                return { done: false, value: result.value };
+        }
+        return this.nextFromNewPage();
+    }
+    async nextFromNewPage() {
+        const nextPageIterator = await this.turnPage();
+        if (!nextPageIterator) {
+            return { done: true, value: undefined };
+        }
+        const result = nextPageIterator.next();
+        if (!result.done)
+            return { done: false, value: result.value };
+        // Empty intermediate page — recurse to try the next page.
+        return this.nextFromNewPage();
+    }
+    next() {
+        /**
+         * If a user calls `.next()` multiple times in parallel,
+         * return the same result until something has resolved
+         * to prevent page-turning race conditions.
+         */
+        if (this.promiseCache.currentPromise) {
+            return this.promiseCache.currentPromise;
+        }
+        const nextPromise = (async () => {
+            try {
+                return await this._next();
+            }
+            finally {
+                this.promiseCache.currentPromise = null;
+            }
+        })();
+        this.promiseCache.currentPromise = nextPromise;
+        return nextPromise;
+    }
+}
+export const makeAutoPaginationMethods = (stripeResource, params, options, method, path, spec, firstPagePromise) => {
+    const apiMode = getAPIMode(path);
+    const methodType = spec?.methodType;
+    if (apiMode !== 'v2' && methodType === 'search') {
+        return makeAutoPaginationMethodsFromIterator(new V1SearchIterator(firstPagePromise, params, options, method, path, spec, stripeResource));
+    }
+    if (apiMode !== 'v2' && methodType === 'list') {
+        return makeAutoPaginationMethodsFromIterator(new V1ListIterator(firstPagePromise, params, options, method, path, spec, stripeResource));
+    }
+    if (apiMode === 'v2' && methodType === 'list') {
+        return makeAutoPaginationMethodsFromIterator(new V2ListIterator(firstPagePromise, options, spec, stripeResource));
+    }
+    return null;
+};
+const makeAutoPaginationMethodsFromIterator = (iterator) => {
+    const autoPagingEach = makeAutoPagingEach((...args) => iterator.next(...args));
+    const autoPagingToArray = makeAutoPagingToArray(autoPagingEach);
+    const autoPaginationMethods = {
+        autoPagingEach,
+        autoPagingToArray,
+        // Async iterator functions:
+        next: () => iterator.next(),
+        return: () => {
+            // This is required for `break`.
+            return {};
+        },
+        [getAsyncIteratorSymbol()]: () => {
+            return autoPaginationMethods;
+        },
+    };
+    return autoPaginationMethods;
+};
+/**
+ * ----------------
+ * Private Helpers:
+ * ----------------
+ */
+function getAsyncIteratorSymbol() {
+    if (typeof Symbol !== 'undefined' && Symbol.asyncIterator) {
+        return Symbol.asyncIterator;
+    }
+    // Follow the convention from libraries like iterall: https://github.com/leebyron/iterall#asynciterator-1
+    return '@@asyncIterator';
+}
+function getDoneCallback(args) {
+    if (args.length < 2) {
+        return null;
+    }
+    const onDone = args[1];
+    if (typeof onDone !== 'function') {
+        throw Error(`The second argument to autoPagingEach, if present, must be a callback function; received ${typeof onDone}`);
+    }
+    return onDone;
+}
+/**
+ * We allow four forms of the `onItem` callback (the middle two being equivalent),
+ *
+ *   1. `.autoPagingEach((item) => { doSomething(item); return false; });`
+ *   2. `.autoPagingEach(async (item) => { await doSomething(item); return false; });`
+ *   3. `.autoPagingEach((item) => doSomething(item).then(() => false));`
+ *   4. `.autoPagingEach((item, next) => { doSomething(item); next(false); });`
+ *
+ * In addition to standard validation, this helper
+ * coalesces the former forms into the latter form.
+ */
+function getItemCallback(args) {
+    if (args.length === 0) {
+        return undefined;
+    }
+    const onItem = args[0];
+    if (typeof onItem !== 'function') {
+        throw Error(`The first argument to autoPagingEach, if present, must be a callback function; received ${typeof onItem}`);
+    }
+    // 4. `.autoPagingEach((item, next) => { doSomething(item); next(false); });`
+    if (onItem.length === 2) {
+        return onItem;
+    }
+    if (onItem.length > 2) {
+        throw Error(`The \`onItem\` callback function passed to autoPagingEach must accept at most two arguments; got ${onItem}`);
+    }
+    // This magically handles all three of these usecases (the latter two being functionally identical):
+    // 1. `.autoPagingEach((item) => { doSomething(item); return false; });`
+    // 2. `.autoPagingEach(async (item) => { await doSomething(item); return false; });`
+    // 3. `.autoPagingEach((item) => doSomething(item).then(() => false));`
+    return function _onItem(item, next) {
+        const shouldContinue = onItem(item);
+        next(shouldContinue);
+    };
+}
+function getLastId(listResult, reverseIteration) {
+    const lastIdx = reverseIteration ? 0 : listResult.data.length - 1;
+    const lastItem = listResult.data[lastIdx];
+    const lastId = lastItem && lastItem.id;
+    if (!lastId) {
+        throw Error('Unexpected: No `id` found on the last item while auto-paging a list.');
+    }
+    return lastId;
+}
+function makeAutoPagingEach(asyncIteratorNext) {
+    return function autoPagingEach( /* onItem?, onDone? */) {
+        // Capture the caller's stack before the async boundary. For paginated
+        // requests, _makeRequest is called from autopagination internals, so the
+        // stack it captures only contains SDK frames. We replace that here with
+        // the true user call site.
+        const callSiteStack = new Error().stack;
+        const args = [].slice.call(arguments);
+        const onItem = getItemCallback(args);
+        const onDone = getDoneCallback(args);
+        if (args.length > 2) {
+            throw Error(`autoPagingEach takes up to two arguments; received ${args}`);
+        }
+        const autoPagePromise = wrapAsyncIteratorWithCallback(asyncIteratorNext, 
+        // @ts-ignore we might need a null check
+        onItem).catch((err) => {
+            attachCallSiteToError(err, callSiteStack);
+            throw err;
+        });
+        if (onDone) {
+            autoPagePromise.then(() => onDone(), (err) => onDone(err));
+        }
+        return autoPagePromise;
+    };
+}
+function makeAutoPagingToArray(autoPagingEach) {
+    return function autoPagingToArray(opts, onDone) {
+        const callSiteStack = new Error().stack;
+        const limit = opts && opts.limit;
+        if (!limit) {
+            throw Error('You must pass a `limit` option to autoPagingToArray, e.g., `autoPagingToArray({limit: 1000});`.');
+        }
+        if (limit > 10000) {
+            throw Error('You cannot specify a limit of more than 10,000 items to fetch in `autoPagingToArray`; use `autoPagingEach` to iterate through longer lists.');
+        }
+        const promise = new Promise((resolve, reject) => {
+            const items = [];
+            autoPagingEach((item) => {
+                items.push(item);
+                if (items.length >= limit) {
+                    return false;
+                }
+            })
+                .then(() => {
+                resolve(items);
+            })
+                .catch((err) => {
+                attachCallSiteToError(err, callSiteStack);
+                reject(err);
+            });
+        });
+        if (onDone) {
+            promise.then((items) => onDone(null, items), (err) => onDone(err));
+        }
+        return promise;
+    };
+}
+function wrapAsyncIteratorWithCallback(asyncIteratorNext, onItem) {
+    return new Promise((resolve, reject) => {
+        function handleIteration(iterResult) {
+            if (iterResult.done) {
+                resolve();
+                return;
+            }
+            const item = iterResult.value;
+            return new Promise((next) => {
+                // Bit confusing, perhaps; we pass a `resolve` fn
+                // to the user, so they can decide when and if to continue.
+                // They can return false, or a promise which resolves to false, to break.
+                onItem(item, next);
+            }).then((shouldContinue) => {
+                if (shouldContinue === false) {
+                    return handleIteration({ done: true, value: undefined });
+                }
+                else {
+                    return asyncIteratorNext().then(handleIteration);
+                }
+            });
+        }
+        asyncIteratorNext()
+            .then(handleIteration)
+            .catch(reject);
+    });
+}
+//# sourceMappingURL=autoPagination.js.map