@nymbalhq/payments-stripe 1.5.0 → 1.6.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 nymbal contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,10 @@
+# @nymbalhq/payments-stripe
+
+Stripe payments for Nymbal: the `stripe` payments provider.
+
+```bash
+npx nymbal add stripe
+```
+
+`nymbal add` installs it, sets it in `nymbal.config.ts` and lists the variables it needs in `.env.example`.
+See [Adapters](https://github.com/nymbalhq/nymbal/blob/main/apps/docs/src/content/docs/adapters.md).

package/dist/index.d.ts

@@ -13,6 +13,11 @@ interface StripePaymentsConfig {
     /** Override the Stripe API protocol. Defaults to https when omitted. */
     protocol?: 'http' | 'https';
 }
+/**
+ * The Stripe API version a Shared Payment Token is charged under: SPTs exist only in preview versions, so this call
+ * alone sends it, and every other call keeps the client's version.
+ */
+declare const STRIPE_SPT_API_VERSION = "2026-10-28.preview";
 declare function createStripePaymentsAdapter(deps: {
     logger: Logger;
     config: StripePaymentsConfig;
@@ -27,5 +32,5 @@ declare const settings: AdapterSetting[];
 /** The kernel's entry: `payments: { provider: 'stripe', config: StripePaymentsConfig }`. */
 declare function createAdapter(ctx: AdapterContext): PaymentsAdapter;
 
-export { createAdapter, createStripePaymentsAdapter, provider, settings, slot };
+export { STRIPE_SPT_API_VERSION, createAdapter, createStripePaymentsAdapter, provider, settings, slot };
 export type { StripePaymentsConfig };

package/dist/index.js

@@ -11,6 +11,12 @@ import {
   EVT_PAYMENT_REFUNDED,
   PaymentError
 } from "@nymbalhq/types";
+var STRIPE_SPT_API_VERSION = "2026-10-28.preview";
+function delegatedPaymentMethod(token) {
+  return {
+    shared_payment_granted_token: token
+  };
+}
 function toIsoCurrency(currency) {
   return currency.toUpperCase();
 }
@@ -69,7 +75,7 @@ function createStripePaymentsAdapter(deps) {
   return {
     kind: "payments",
     providerName: "stripe",
-    capabilities: () => ["intent", "capture", "refund", "webhook"],
+    capabilities: () => ["intent", "capture", "refund", "webhook", "delegated"],
     // Without a key the storefront's stripe driver reports it cannot mount, which keeps Place Order disabled.
     client: () => ({
       driver: "stripe",
@@ -92,7 +98,7 @@ function createStripePaymentsAdapter(deps) {
     },
     async createPaymentIntent(params) {
       try {
-        const intent = await stripeClient.paymentIntents.create({
+        const create = {
           amount: params.amountMinor,
           currency: params.currency.toLowerCase(),
           automatic_payment_methods: { enabled: true },
@@ -102,7 +108,18 @@ function createStripePaymentsAdapter(deps) {
             ...params.orderRef !== void 0 ? { orderRef: params.orderRef } : {},
             ...params.customerId !== void 0 ? { customerId: params.customerId } : {}
           }
-        });
+        };
+        const token = params.delegatedToken;
+        if (token === void 0) return toIntent(await stripeClient.paymentIntents.create(create));
+        const intent = await stripeClient.paymentIntents.create(
+          {
+            ...create,
+            confirm: true,
+            payment_method_data: delegatedPaymentMethod(token),
+            automatic_payment_methods: { enabled: true, allow_redirects: "never" }
+          },
+          { apiVersion: STRIPE_SPT_API_VERSION }
+        );
         return toIntent(intent);
       } catch (err) {
         throw new PaymentError("intent_failed", "Stripe createPaymentIntent failed", { cause: err });
@@ -251,6 +268,7 @@ function createAdapter(ctx) {
   });
 }
 export {
+  STRIPE_SPT_API_VERSION,
   createAdapter,
   createStripePaymentsAdapter,
   provider,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/stripe-adapter.ts"],"sourcesContent":["import {\n  ConfigError,\n  type AdapterContext,\n  type AdapterSetting,\n  type PaymentsAdapter,\n} from '@nymbalhq/types'\nimport { createStripePaymentsAdapter, type StripePaymentsConfig } from './stripe-adapter.js'\n\n/** What this package serves: the kernel refuses it on any other slot or provider. */\nexport const slot = 'payments'\nexport const provider = 'stripe'\n\nexport { createStripePaymentsAdapter, type StripePaymentsConfig }\n\n/** The fields the admin's Settings may fill when the config and these variables leave them unset. */\nexport const settings: AdapterSetting[] = [\n  { path: 'secretKey', label: 'Secret key', secret: true, env: 'STRIPE_SECRET_KEY' },\n  {\n    path: 'webhookSecret',\n    label: 'Webhook signing secret',\n    secret: true,\n    env: 'STRIPE_WEBHOOK_SECRET',\n  },\n  {\n    path: 'publishableKey',\n    label: 'Publishable key',\n    secret: false,\n    env: 'STRIPE_PUBLISHABLE_KEY',\n  },\n]\n\n/** The kernel's entry: `payments: { provider: 'stripe', config: StripePaymentsConfig }`. */\nexport function createAdapter(ctx: AdapterContext): PaymentsAdapter {\n  if (ctx.slot !== 'payments') {\n    throw new ConfigError(`@nymbalhq/payments-stripe serves payments, not ${ctx.slot}`, {\n      code: 'adapter.wrong_slot',\n      context: { slot: ctx.slot },\n    })\n  }\n  const config = ctx.config as unknown as StripePaymentsConfig\n  const publishableKey = config.publishableKey ?? ctx.env['STRIPE_PUBLISHABLE_KEY']\n  return createStripePaymentsAdapter({\n    logger: ctx.logger,\n    config: { ...config, ...(publishableKey !== undefined && { publishableKey }) },\n  })\n}\n","import Stripe from 'stripe'\nimport {\n  EVT_PAYMENT_CAPTURED,\n  EVT_PAYMENT_FAILED,\n  EVT_PAYMENT_REFUNDED,\n  PaymentError,\n  type Logger,\n  type PaymentCapture,\n  type PaymentIntent,\n  type PaymentIntentParams,\n  type PaymentStatus,\n  type PaymentsAdapter,\n  type Refund,\n  type WebhookResult,\n} from '@nymbalhq/types'\n\nexport interface StripePaymentsConfig {\n  secretKey: string\n  webhookSecret: string\n  /** The public key the storefront's Stripe.js uses; served by GET /api/capabilities. */\n  publishableKey?: string\n  apiVersion?: string\n  /** Override the Stripe API host (for stripe-mock style test servers). Omit in production. */\n  host?: string\n  /** Override the Stripe API port. Only used together with `host`. */\n  port?: number\n  /** Override the Stripe API protocol. Defaults to https when omitted. */\n  protocol?: 'http' | 'https'\n}\n\n/**\n * Stripe returns lowercase ISO currency codes (e.g. \"gbp\"); Nymbal's canonical\n * currency format is uppercase ISO 4217 (e.g. \"GBP\") everywhere else in the\n * domain, so adapter results are normalised on the way out.\n */\nfunction toIsoCurrency(currency: string): string {\n  return currency.toUpperCase()\n}\n\nfunction mapStatus(status: Stripe.PaymentIntent.Status): PaymentStatus {\n  switch (status) {\n    case 'requires_payment_method':\n    case 'requires_confirmation':\n    case 'requires_action':\n    case 'processing':\n    case 'requires_capture':\n    case 'succeeded':\n    case 'canceled':\n      return status === 'canceled' ? 'cancelled' : (status as PaymentStatus)\n    default:\n      return 'failed'\n  }\n}\n\nfunction refundStatus(status: string | null): Refund['status'] {\n  if (status === 'succeeded') return 'succeeded'\n  if (status === 'failed' || status === 'canceled') return 'failed'\n  return 'pending'\n}\n\n/**\n * Stripe refused the refund outright (a card error, an invalid request): no money moved. Anything else (an API error,\n * a timeout, a dropped connection) leaves the outcome unknown.\n */\nfunction isDefiniteRefusal(err: unknown): boolean {\n  const e = err as { rawType?: unknown; statusCode?: unknown } | null\n  // A refused key (401, 403) says nothing about the refund, though its body's type is invalid_request_error: the\n  // status decides first, as it does in stripe-node.\n  if (e?.statusCode === 401 || e?.statusCode === 403) return false\n  // The API's error type (`raw.type`), which does not depend on the SDK's class names.\n  return e?.rawType === 'card_error' || e?.rawType === 'invalid_request_error'\n}\n\nfunction toIntent(intent: Stripe.PaymentIntent): PaymentIntent {\n  return {\n    id: intent.id,\n    clientSecret: intent.client_secret ?? '',\n    amountMinor: intent.amount,\n    currency: toIsoCurrency(intent.currency),\n    status: mapStatus(intent.status),\n  }\n}\n\nexport function createStripePaymentsAdapter(deps: {\n  logger: Logger\n  config: StripePaymentsConfig\n}): PaymentsAdapter {\n  const { logger } = deps\n  const cfg = deps.config\n  if (!cfg.secretKey) throw new PaymentError('not_configured', 'Stripe secretKey missing')\n  if (!cfg.webhookSecret) throw new PaymentError('not_configured', 'Stripe webhookSecret missing')\n  // The publishable key is served to every shopper: a secret or restricted key pasted there must never be.\n  if (cfg.publishableKey !== undefined && /^(sk|rk)_/.test(cfg.publishableKey)) {\n    throw new PaymentError(\n      'not_configured',\n      'Stripe publishableKey holds a secret key; use the pk_ key',\n    )\n  }\n  const stripeClient = new Stripe(cfg.secretKey, {\n    ...(cfg.apiVersion !== undefined && {\n      apiVersion: cfg.apiVersion as Stripe.LatestApiVersion,\n    }),\n    ...(cfg.host !== undefined && { host: cfg.host }),\n    ...(cfg.port !== undefined && { port: cfg.port }),\n    ...(cfg.protocol !== undefined && { protocol: cfg.protocol }),\n  })\n  return {\n    kind: 'payments',\n    providerName: 'stripe',\n    capabilities: () => ['intent', 'capture', 'refund', 'webhook'],\n    // Without a key the storefront's stripe driver reports it cannot mount, which keeps Place Order disabled.\n    client: () => ({\n      driver: 'stripe',\n      options: cfg.publishableKey ? { publishableKey: cfg.publishableKey } : {},\n    }),\n    producesEvents: [EVT_PAYMENT_CAPTURED, EVT_PAYMENT_FAILED, EVT_PAYMENT_REFUNDED],\n    consumesEvents: [],\n    async initialize() {\n      // no-op: Stripe client already constructed\n    },\n    async healthCheck() {\n      try {\n        await stripeClient.balance.retrieve()\n        return { status: 'healthy' }\n      } catch (err) {\n        return {\n          status: 'down',\n          detail: err instanceof Error ? err.message : String(err),\n        }\n      }\n    },\n    async createPaymentIntent(params: PaymentIntentParams): Promise<PaymentIntent> {\n      try {\n        const intent = await stripeClient.paymentIntents.create({\n          amount: params.amountMinor,\n          currency: params.currency.toLowerCase(),\n          automatic_payment_methods: { enabled: true },\n          ...(params.receiptEmail !== undefined && { receipt_email: params.receiptEmail }),\n          metadata: {\n            ...(params.metadata ?? {}),\n            ...(params.orderRef !== undefined ? { orderRef: params.orderRef } : {}),\n            ...(params.customerId !== undefined ? { customerId: params.customerId } : {}),\n          },\n        })\n        return toIntent(intent)\n      } catch (err) {\n        throw new PaymentError('intent_failed', 'Stripe createPaymentIntent failed', { cause: err })\n      }\n    },\n    async capturePayment(intentId, amountMinor): Promise<PaymentCapture> {\n      try {\n        const captured = await stripeClient.paymentIntents.capture(intentId, {\n          ...(amountMinor !== undefined && { amount_to_capture: amountMinor }),\n        })\n        return {\n          paymentId: captured.id,\n          capturedAmountMinor: captured.amount_received ?? captured.amount,\n          currency: toIsoCurrency(captured.currency),\n          status: mapStatus(captured.status),\n        }\n      } catch (err) {\n        throw new PaymentError('capture_failed', 'Stripe capturePayment failed', { cause: err })\n      }\n    },\n    async refund(paymentId, amountMinor, reason, opts): Promise<Refund> {\n      const params: Stripe.RefundCreateParams = {\n        payment_intent: paymentId,\n        ...(amountMinor !== undefined && { amount: amountMinor }),\n        ...(reason !== undefined && { reason: reason as Stripe.RefundCreateParams.Reason }),\n      }\n      try {\n        const refund =\n          opts?.idempotencyKey === undefined\n            ? await stripeClient.refunds.create(params)\n            : await stripeClient.refunds.create(params, { idempotencyKey: opts.idempotencyKey })\n        return {\n          refundId: refund.id,\n          paymentId,\n          amountMinor: refund.amount,\n          currency: toIsoCurrency(refund.currency),\n          reason: refund.reason ?? null,\n          status: refundStatus(refund.status),\n        }\n      } catch (err) {\n        if (isDefiniteRefusal(err)) {\n          throw new PaymentError('refund_rejected', 'Stripe refused the refund', { cause: err })\n        }\n        throw new PaymentError('refund_unknown', 'Stripe refund outcome unknown', { cause: err })\n      }\n    },\n    async getPaymentStatus(intentId): Promise<PaymentStatus> {\n      const intent = await stripeClient.paymentIntents.retrieve(intentId)\n      return mapStatus(intent.status)\n    },\n    async getPaymentIntent(intentId): Promise<PaymentIntent> {\n      try {\n        return toIntent(await stripeClient.paymentIntents.retrieve(intentId))\n      } catch (err) {\n        throw new PaymentError('intent_failed', 'Stripe getPaymentIntent failed', { cause: err })\n      }\n    },\n    async cancelPaymentIntent(intentId): Promise<void> {\n      try {\n        await stripeClient.paymentIntents.cancel(intentId)\n      } catch (err) {\n        // A cancel that lost a race with an earlier one of ours is done; anything else (processing, captured) stays.\n        const status = await stripeClient.paymentIntents\n          .retrieve(intentId)\n          .then((intent) => intent.status)\n          .catch(() => undefined)\n        if (status === 'canceled') return\n        throw new PaymentError('cancel_refused', `Stripe would not cancel ${intentId}`, {\n          cause: err,\n        })\n      }\n    },\n    async parseWebhook(rawBody, signature): Promise<WebhookResult> {\n      let event: Stripe.Event\n      try {\n        event = stripeClient.webhooks.constructEvent(rawBody, signature, cfg.webhookSecret)\n      } catch (err) {\n        throw new PaymentError('webhook_invalid', 'Stripe webhook signature invalid', {\n          cause: err,\n        })\n      }\n      const baseResult = { verified: true, eventId: event.id } as const\n      switch (event.type) {\n        case 'payment_intent.succeeded': {\n          const intent = event.data.object as Stripe.PaymentIntent\n          return {\n            ...baseResult,\n            kind: 'payment.captured',\n            paymentIntentId: intent.id,\n            amountMinor: intent.amount_received ?? intent.amount,\n            currency: toIsoCurrency(intent.currency),\n            raw: { ...intent } as unknown as Record<string, unknown>,\n          }\n        }\n        case 'payment_intent.payment_failed': {\n          const intent = event.data.object as Stripe.PaymentIntent\n          return {\n            ...baseResult,\n            kind: 'payment.failed',\n            paymentIntentId: intent.id,\n            reason: intent.last_payment_error?.message ?? 'payment failed',\n          }\n        }\n        case 'charge.refunded': {\n          const charge = event.data.object as Stripe.Charge\n          const pi =\n            typeof charge.payment_intent === 'string'\n              ? charge.payment_intent\n              : charge.payment_intent?.id\n          return {\n            ...baseResult,\n            kind: 'payment.refunded',\n            ...(pi !== undefined && { paymentIntentId: pi }),\n            amountMinor: charge.amount_refunded,\n            currency: toIsoCurrency(charge.currency),\n          }\n        }\n        default:\n          logger.debug({ type: event.type }, 'stripe webhook ignored')\n          return { ...baseResult, kind: 'ignored' }\n      }\n    },\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,OAIK;;;ACLP,OAAO,YAAY;AACnB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OASK;AAqBP,SAAS,cAAc,UAA0B;AAC/C,SAAO,SAAS,YAAY;AAC9B;AAEA,SAAS,UAAU,QAAoD;AACrE,UAAQ,QAAQ;AAAA,IACd,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO,WAAW,aAAa,cAAe;AAAA,IAChD;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,aAAa,QAAyC;AAC7D,MAAI,WAAW,YAAa,QAAO;AACnC,MAAI,WAAW,YAAY,WAAW,WAAY,QAAO;AACzD,SAAO;AACT;AAMA,SAAS,kBAAkB,KAAuB;AAChD,QAAM,IAAI;AAGV,MAAI,GAAG,eAAe,OAAO,GAAG,eAAe,IAAK,QAAO;AAE3D,SAAO,GAAG,YAAY,gBAAgB,GAAG,YAAY;AACvD;AAEA,SAAS,SAAS,QAA6C;AAC7D,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,cAAc,OAAO,iBAAiB;AAAA,IACtC,aAAa,OAAO;AAAA,IACpB,UAAU,cAAc,OAAO,QAAQ;AAAA,IACvC,QAAQ,UAAU,OAAO,MAAM;AAAA,EACjC;AACF;AAEO,SAAS,4BAA4B,MAGxB;AAClB,QAAM,EAAE,OAAO,IAAI;AACnB,QAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,UAAW,OAAM,IAAI,aAAa,kBAAkB,0BAA0B;AACvF,MAAI,CAAC,IAAI,cAAe,OAAM,IAAI,aAAa,kBAAkB,8BAA8B;AAE/F,MAAI,IAAI,mBAAmB,UAAa,YAAY,KAAK,IAAI,cAAc,GAAG;AAC5E,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,eAAe,IAAI,OAAO,IAAI,WAAW;AAAA,IAC7C,GAAI,IAAI,eAAe,UAAa;AAAA,MAClC,YAAY,IAAI;AAAA,IAClB;AAAA,IACA,GAAI,IAAI,SAAS,UAAa,EAAE,MAAM,IAAI,KAAK;AAAA,IAC/C,GAAI,IAAI,SAAS,UAAa,EAAE,MAAM,IAAI,KAAK;AAAA,IAC/C,GAAI,IAAI,aAAa,UAAa,EAAE,UAAU,IAAI,SAAS;AAAA,EAC7D,CAAC;AACD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,cAAc;AAAA,IACd,cAAc,MAAM,CAAC,UAAU,WAAW,UAAU,SAAS;AAAA;AAAA,IAE7D,QAAQ,OAAO;AAAA,MACb,QAAQ;AAAA,MACR,SAAS,IAAI,iBAAiB,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,IAC1E;AAAA,IACA,gBAAgB,CAAC,sBAAsB,oBAAoB,oBAAoB;AAAA,IAC/E,gBAAgB,CAAC;AAAA,IACjB,MAAM,aAAa;AAAA,IAEnB;AAAA,IACA,MAAM,cAAc;AAClB,UAAI;AACF,cAAM,aAAa,QAAQ,SAAS;AACpC,eAAO,EAAE,QAAQ,UAAU;AAAA,MAC7B,SAAS,KAAK;AACZ,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,oBAAoB,QAAqD;AAC7E,UAAI;AACF,cAAM,SAAS,MAAM,aAAa,eAAe,OAAO;AAAA,UACtD,QAAQ,OAAO;AAAA,UACf,UAAU,OAAO,SAAS,YAAY;AAAA,UACtC,2BAA2B,EAAE,SAAS,KAAK;AAAA,UAC3C,GAAI,OAAO,iBAAiB,UAAa,EAAE,eAAe,OAAO,aAAa;AAAA,UAC9E,UAAU;AAAA,YACR,GAAI,OAAO,YAAY,CAAC;AAAA,YACxB,GAAI,OAAO,aAAa,SAAY,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,YACrE,GAAI,OAAO,eAAe,SAAY,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;AAAA,UAC7E;AAAA,QACF,CAAC;AACD,eAAO,SAAS,MAAM;AAAA,MACxB,SAAS,KAAK;AACZ,cAAM,IAAI,aAAa,iBAAiB,qCAAqC,EAAE,OAAO,IAAI,CAAC;AAAA,MAC7F;AAAA,IACF;AAAA,IACA,MAAM,eAAe,UAAU,aAAsC;AACnE,UAAI;AACF,cAAM,WAAW,MAAM,aAAa,eAAe,QAAQ,UAAU;AAAA,UACnE,GAAI,gBAAgB,UAAa,EAAE,mBAAmB,YAAY;AAAA,QACpE,CAAC;AACD,eAAO;AAAA,UACL,WAAW,SAAS;AAAA,UACpB,qBAAqB,SAAS,mBAAmB,SAAS;AAAA,UAC1D,UAAU,cAAc,SAAS,QAAQ;AAAA,UACzC,QAAQ,UAAU,SAAS,MAAM;AAAA,QACnC;AAAA,MACF,SAAS,KAAK;AACZ,cAAM,IAAI,aAAa,kBAAkB,gCAAgC,EAAE,OAAO,IAAI,CAAC;AAAA,MACzF;AAAA,IACF;AAAA,IACA,MAAM,OAAO,WAAW,aAAa,QAAQ,MAAuB;AAClE,YAAM,SAAoC;AAAA,QACxC,gBAAgB;AAAA,QAChB,GAAI,gBAAgB,UAAa,EAAE,QAAQ,YAAY;AAAA,QACvD,GAAI,WAAW,UAAa,EAAE,OAAmD;AAAA,MACnF;AACA,UAAI;AACF,cAAM,SACJ,MAAM,mBAAmB,SACrB,MAAM,aAAa,QAAQ,OAAO,MAAM,IACxC,MAAM,aAAa,QAAQ,OAAO,QAAQ,EAAE,gBAAgB,KAAK,eAAe,CAAC;AACvF,eAAO;AAAA,UACL,UAAU,OAAO;AAAA,UACjB;AAAA,UACA,aAAa,OAAO;AAAA,UACpB,UAAU,cAAc,OAAO,QAAQ;AAAA,UACvC,QAAQ,OAAO,UAAU;AAAA,UACzB,QAAQ,aAAa,OAAO,MAAM;AAAA,QACpC;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,kBAAkB,GAAG,GAAG;AAC1B,gBAAM,IAAI,aAAa,mBAAmB,6BAA6B,EAAE,OAAO,IAAI,CAAC;AAAA,QACvF;AACA,cAAM,IAAI,aAAa,kBAAkB,iCAAiC,EAAE,OAAO,IAAI,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,IACA,MAAM,iBAAiB,UAAkC;AACvD,YAAM,SAAS,MAAM,aAAa,eAAe,SAAS,QAAQ;AAClE,aAAO,UAAU,OAAO,MAAM;AAAA,IAChC;AAAA,IACA,MAAM,iBAAiB,UAAkC;AACvD,UAAI;AACF,eAAO,SAAS,MAAM,aAAa,eAAe,SAAS,QAAQ,CAAC;AAAA,MACtE,SAAS,KAAK;AACZ,cAAM,IAAI,aAAa,iBAAiB,kCAAkC,EAAE,OAAO,IAAI,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,IACA,MAAM,oBAAoB,UAAyB;AACjD,UAAI;AACF,cAAM,aAAa,eAAe,OAAO,QAAQ;AAAA,MACnD,SAAS,KAAK;AAEZ,cAAM,SAAS,MAAM,aAAa,eAC/B,SAAS,QAAQ,EACjB,KAAK,CAAC,WAAW,OAAO,MAAM,EAC9B,MAAM,MAAM,MAAS;AACxB,YAAI,WAAW,WAAY;AAC3B,cAAM,IAAI,aAAa,kBAAkB,2BAA2B,QAAQ,IAAI;AAAA,UAC9E,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IACA,MAAM,aAAa,SAAS,WAAmC;AAC7D,UAAI;AACJ,UAAI;AACF,gBAAQ,aAAa,SAAS,eAAe,SAAS,WAAW,IAAI,aAAa;AAAA,MACpF,SAAS,KAAK;AACZ,cAAM,IAAI,aAAa,mBAAmB,oCAAoC;AAAA,UAC5E,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AACA,YAAM,aAAa,EAAE,UAAU,MAAM,SAAS,MAAM,GAAG;AACvD,cAAQ,MAAM,MAAM;AAAA,QAClB,KAAK,4BAA4B;AAC/B,gBAAM,SAAS,MAAM,KAAK;AAC1B,iBAAO;AAAA,YACL,GAAG;AAAA,YACH,MAAM;AAAA,YACN,iBAAiB,OAAO;AAAA,YACxB,aAAa,OAAO,mBAAmB,OAAO;AAAA,YAC9C,UAAU,cAAc,OAAO,QAAQ;AAAA,YACvC,KAAK,EAAE,GAAG,OAAO;AAAA,UACnB;AAAA,QACF;AAAA,QACA,KAAK,iCAAiC;AACpC,gBAAM,SAAS,MAAM,KAAK;AAC1B,iBAAO;AAAA,YACL,GAAG;AAAA,YACH,MAAM;AAAA,YACN,iBAAiB,OAAO;AAAA,YACxB,QAAQ,OAAO,oBAAoB,WAAW;AAAA,UAChD;AAAA,QACF;AAAA,QACA,KAAK,mBAAmB;AACtB,gBAAM,SAAS,MAAM,KAAK;AAC1B,gBAAM,KACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,gBAAgB;AAC7B,iBAAO;AAAA,YACL,GAAG;AAAA,YACH,MAAM;AAAA,YACN,GAAI,OAAO,UAAa,EAAE,iBAAiB,GAAG;AAAA,YAC9C,aAAa,OAAO;AAAA,YACpB,UAAU,cAAc,OAAO,QAAQ;AAAA,UACzC;AAAA,QACF;AAAA,QACA;AACE,iBAAO,MAAM,EAAE,MAAM,MAAM,KAAK,GAAG,wBAAwB;AAC3D,iBAAO,EAAE,GAAG,YAAY,MAAM,UAAU;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;;;ADlQO,IAAM,OAAO;AACb,IAAM,WAAW;AAKjB,IAAM,WAA6B;AAAA,EACxC,EAAE,MAAM,aAAa,OAAO,cAAc,QAAQ,MAAM,KAAK,oBAAoB;AAAA,EACjF;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,KAAK;AAAA,EACP;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,KAAK;AAAA,EACP;AACF;AAGO,SAAS,cAAc,KAAsC;AAClE,MAAI,IAAI,SAAS,YAAY;AAC3B,UAAM,IAAI,YAAY,kDAAkD,IAAI,IAAI,IAAI;AAAA,MAClF,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,IAAI,KAAK;AAAA,IAC5B,CAAC;AAAA,EACH;AACA,QAAM,SAAS,IAAI;AACnB,QAAM,iBAAiB,OAAO,kBAAkB,IAAI,IAAI,wBAAwB;AAChF,SAAO,4BAA4B;AAAA,IACjC,QAAQ,IAAI;AAAA,IACZ,QAAQ,EAAE,GAAG,QAAQ,GAAI,mBAAmB,UAAa,EAAE,eAAe,EAAG;AAAA,EAC/E,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/stripe-adapter.ts"],"sourcesContent":["import {\n  ConfigError,\n  type AdapterContext,\n  type AdapterSetting,\n  type PaymentsAdapter,\n} from '@nymbalhq/types'\nimport {\n  createStripePaymentsAdapter,\n  STRIPE_SPT_API_VERSION,\n  type StripePaymentsConfig,\n} from './stripe-adapter.js'\n\n/** What this package serves: the kernel refuses it on any other slot or provider. */\nexport const slot = 'payments'\nexport const provider = 'stripe'\n\nexport { createStripePaymentsAdapter, STRIPE_SPT_API_VERSION, type StripePaymentsConfig }\n\n/** The fields the admin's Settings may fill when the config and these variables leave them unset. */\nexport const settings: AdapterSetting[] = [\n  { path: 'secretKey', label: 'Secret key', secret: true, env: 'STRIPE_SECRET_KEY' },\n  {\n    path: 'webhookSecret',\n    label: 'Webhook signing secret',\n    secret: true,\n    env: 'STRIPE_WEBHOOK_SECRET',\n  },\n  {\n    path: 'publishableKey',\n    label: 'Publishable key',\n    secret: false,\n    env: 'STRIPE_PUBLISHABLE_KEY',\n  },\n]\n\n/** The kernel's entry: `payments: { provider: 'stripe', config: StripePaymentsConfig }`. */\nexport function createAdapter(ctx: AdapterContext): PaymentsAdapter {\n  if (ctx.slot !== 'payments') {\n    throw new ConfigError(`@nymbalhq/payments-stripe serves payments, not ${ctx.slot}`, {\n      code: 'adapter.wrong_slot',\n      context: { slot: ctx.slot },\n    })\n  }\n  const config = ctx.config as unknown as StripePaymentsConfig\n  const publishableKey = config.publishableKey ?? ctx.env['STRIPE_PUBLISHABLE_KEY']\n  return createStripePaymentsAdapter({\n    logger: ctx.logger,\n    config: { ...config, ...(publishableKey !== undefined && { publishableKey }) },\n  })\n}\n","import Stripe from 'stripe'\nimport {\n  EVT_PAYMENT_CAPTURED,\n  EVT_PAYMENT_FAILED,\n  EVT_PAYMENT_REFUNDED,\n  PaymentError,\n  type Logger,\n  type PaymentCapture,\n  type PaymentIntent,\n  type PaymentIntentParams,\n  type PaymentStatus,\n  type PaymentsAdapter,\n  type Refund,\n  type WebhookResult,\n} from '@nymbalhq/types'\n\nexport interface StripePaymentsConfig {\n  secretKey: string\n  webhookSecret: string\n  /** The public key the storefront's Stripe.js uses; served by GET /api/capabilities. */\n  publishableKey?: string\n  apiVersion?: string\n  /** Override the Stripe API host (for stripe-mock style test servers). Omit in production. */\n  host?: string\n  /** Override the Stripe API port. Only used together with `host`. */\n  port?: number\n  /** Override the Stripe API protocol. Defaults to https when omitted. */\n  protocol?: 'http' | 'https'\n}\n\n/**\n * The Stripe API version a Shared Payment Token is charged under: SPTs exist only in preview versions, so this call\n * alone sends it, and every other call keeps the client's version.\n */\nexport const STRIPE_SPT_API_VERSION = '2026-10-28.preview'\n\n/**\n * stripe-node 17 predates SPTs: `payment_method_data` carrying only the token, which its type (requiring `type`) does\n * not describe.\n */\nfunction delegatedPaymentMethod(token: string): Stripe.PaymentIntentCreateParams.PaymentMethodData {\n  return {\n    shared_payment_granted_token: token,\n  } as unknown as Stripe.PaymentIntentCreateParams.PaymentMethodData\n}\n\n/**\n * Stripe returns lowercase ISO currency codes (e.g. \"gbp\"); Nymbal's canonical\n * currency format is uppercase ISO 4217 (e.g. \"GBP\") everywhere else in the\n * domain, so adapter results are normalised on the way out.\n */\nfunction toIsoCurrency(currency: string): string {\n  return currency.toUpperCase()\n}\n\nfunction mapStatus(status: Stripe.PaymentIntent.Status): PaymentStatus {\n  switch (status) {\n    case 'requires_payment_method':\n    case 'requires_confirmation':\n    case 'requires_action':\n    case 'processing':\n    case 'requires_capture':\n    case 'succeeded':\n    case 'canceled':\n      return status === 'canceled' ? 'cancelled' : (status as PaymentStatus)\n    default:\n      return 'failed'\n  }\n}\n\nfunction refundStatus(status: string | null): Refund['status'] {\n  if (status === 'succeeded') return 'succeeded'\n  if (status === 'failed' || status === 'canceled') return 'failed'\n  return 'pending'\n}\n\n/**\n * Stripe refused the refund outright (a card error, an invalid request): no money moved. Anything else (an API error,\n * a timeout, a dropped connection) leaves the outcome unknown.\n */\nfunction isDefiniteRefusal(err: unknown): boolean {\n  const e = err as { rawType?: unknown; statusCode?: unknown } | null\n  // A refused key (401, 403) says nothing about the refund, though its body's type is invalid_request_error: the\n  // status decides first, as it does in stripe-node.\n  if (e?.statusCode === 401 || e?.statusCode === 403) return false\n  // The API's error type (`raw.type`), which does not depend on the SDK's class names.\n  return e?.rawType === 'card_error' || e?.rawType === 'invalid_request_error'\n}\n\nfunction toIntent(intent: Stripe.PaymentIntent): PaymentIntent {\n  return {\n    id: intent.id,\n    clientSecret: intent.client_secret ?? '',\n    amountMinor: intent.amount,\n    currency: toIsoCurrency(intent.currency),\n    status: mapStatus(intent.status),\n  }\n}\n\nexport function createStripePaymentsAdapter(deps: {\n  logger: Logger\n  config: StripePaymentsConfig\n}): PaymentsAdapter {\n  const { logger } = deps\n  const cfg = deps.config\n  if (!cfg.secretKey) throw new PaymentError('not_configured', 'Stripe secretKey missing')\n  if (!cfg.webhookSecret) throw new PaymentError('not_configured', 'Stripe webhookSecret missing')\n  // The publishable key is served to every shopper: a secret or restricted key pasted there must never be.\n  if (cfg.publishableKey !== undefined && /^(sk|rk)_/.test(cfg.publishableKey)) {\n    throw new PaymentError(\n      'not_configured',\n      'Stripe publishableKey holds a secret key; use the pk_ key',\n    )\n  }\n  const stripeClient = new Stripe(cfg.secretKey, {\n    ...(cfg.apiVersion !== undefined && {\n      apiVersion: cfg.apiVersion as Stripe.LatestApiVersion,\n    }),\n    ...(cfg.host !== undefined && { host: cfg.host }),\n    ...(cfg.port !== undefined && { port: cfg.port }),\n    ...(cfg.protocol !== undefined && { protocol: cfg.protocol }),\n  })\n  return {\n    kind: 'payments',\n    providerName: 'stripe',\n    capabilities: () => ['intent', 'capture', 'refund', 'webhook', 'delegated'],\n    // Without a key the storefront's stripe driver reports it cannot mount, which keeps Place Order disabled.\n    client: () => ({\n      driver: 'stripe',\n      options: cfg.publishableKey ? { publishableKey: cfg.publishableKey } : {},\n    }),\n    producesEvents: [EVT_PAYMENT_CAPTURED, EVT_PAYMENT_FAILED, EVT_PAYMENT_REFUNDED],\n    consumesEvents: [],\n    async initialize() {\n      // no-op: Stripe client already constructed\n    },\n    async healthCheck() {\n      try {\n        await stripeClient.balance.retrieve()\n        return { status: 'healthy' }\n      } catch (err) {\n        return {\n          status: 'down',\n          detail: err instanceof Error ? err.message : String(err),\n        }\n      }\n    },\n    async createPaymentIntent(params: PaymentIntentParams): Promise<PaymentIntent> {\n      try {\n        const create: Stripe.PaymentIntentCreateParams = {\n          amount: params.amountMinor,\n          currency: params.currency.toLowerCase(),\n          automatic_payment_methods: { enabled: true },\n          ...(params.receiptEmail !== undefined && { receipt_email: params.receiptEmail }),\n          metadata: {\n            ...(params.metadata ?? {}),\n            ...(params.orderRef !== undefined ? { orderRef: params.orderRef } : {}),\n            ...(params.customerId !== undefined ? { customerId: params.customerId } : {}),\n          },\n        }\n        const token = params.delegatedToken\n        if (token === undefined) return toIntent(await stripeClient.paymentIntents.create(create))\n        // Confirmed server-side with no return_url, so a method that redirects the buyer cannot be offered.\n        const intent = await stripeClient.paymentIntents.create(\n          {\n            ...create,\n            confirm: true,\n            payment_method_data: delegatedPaymentMethod(token),\n            automatic_payment_methods: { enabled: true, allow_redirects: 'never' },\n          },\n          { apiVersion: STRIPE_SPT_API_VERSION },\n        )\n        return toIntent(intent)\n      } catch (err) {\n        throw new PaymentError('intent_failed', 'Stripe createPaymentIntent failed', { cause: err })\n      }\n    },\n    async capturePayment(intentId, amountMinor): Promise<PaymentCapture> {\n      try {\n        const captured = await stripeClient.paymentIntents.capture(intentId, {\n          ...(amountMinor !== undefined && { amount_to_capture: amountMinor }),\n        })\n        return {\n          paymentId: captured.id,\n          capturedAmountMinor: captured.amount_received ?? captured.amount,\n          currency: toIsoCurrency(captured.currency),\n          status: mapStatus(captured.status),\n        }\n      } catch (err) {\n        throw new PaymentError('capture_failed', 'Stripe capturePayment failed', { cause: err })\n      }\n    },\n    async refund(paymentId, amountMinor, reason, opts): Promise<Refund> {\n      const params: Stripe.RefundCreateParams = {\n        payment_intent: paymentId,\n        ...(amountMinor !== undefined && { amount: amountMinor }),\n        ...(reason !== undefined && { reason: reason as Stripe.RefundCreateParams.Reason }),\n      }\n      try {\n        const refund =\n          opts?.idempotencyKey === undefined\n            ? await stripeClient.refunds.create(params)\n            : await stripeClient.refunds.create(params, { idempotencyKey: opts.idempotencyKey })\n        return {\n          refundId: refund.id,\n          paymentId,\n          amountMinor: refund.amount,\n          currency: toIsoCurrency(refund.currency),\n          reason: refund.reason ?? null,\n          status: refundStatus(refund.status),\n        }\n      } catch (err) {\n        if (isDefiniteRefusal(err)) {\n          throw new PaymentError('refund_rejected', 'Stripe refused the refund', { cause: err })\n        }\n        throw new PaymentError('refund_unknown', 'Stripe refund outcome unknown', { cause: err })\n      }\n    },\n    async getPaymentStatus(intentId): Promise<PaymentStatus> {\n      const intent = await stripeClient.paymentIntents.retrieve(intentId)\n      return mapStatus(intent.status)\n    },\n    async getPaymentIntent(intentId): Promise<PaymentIntent> {\n      try {\n        return toIntent(await stripeClient.paymentIntents.retrieve(intentId))\n      } catch (err) {\n        throw new PaymentError('intent_failed', 'Stripe getPaymentIntent failed', { cause: err })\n      }\n    },\n    async cancelPaymentIntent(intentId): Promise<void> {\n      try {\n        await stripeClient.paymentIntents.cancel(intentId)\n      } catch (err) {\n        // A cancel that lost a race with an earlier one of ours is done; anything else (processing, captured) stays.\n        const status = await stripeClient.paymentIntents\n          .retrieve(intentId)\n          .then((intent) => intent.status)\n          .catch(() => undefined)\n        if (status === 'canceled') return\n        throw new PaymentError('cancel_refused', `Stripe would not cancel ${intentId}`, {\n          cause: err,\n        })\n      }\n    },\n    async parseWebhook(rawBody, signature): Promise<WebhookResult> {\n      let event: Stripe.Event\n      try {\n        event = stripeClient.webhooks.constructEvent(rawBody, signature, cfg.webhookSecret)\n      } catch (err) {\n        throw new PaymentError('webhook_invalid', 'Stripe webhook signature invalid', {\n          cause: err,\n        })\n      }\n      const baseResult = { verified: true, eventId: event.id } as const\n      switch (event.type) {\n        case 'payment_intent.succeeded': {\n          const intent = event.data.object as Stripe.PaymentIntent\n          return {\n            ...baseResult,\n            kind: 'payment.captured',\n            paymentIntentId: intent.id,\n            amountMinor: intent.amount_received ?? intent.amount,\n            currency: toIsoCurrency(intent.currency),\n            raw: { ...intent } as unknown as Record<string, unknown>,\n          }\n        }\n        case 'payment_intent.payment_failed': {\n          const intent = event.data.object as Stripe.PaymentIntent\n          return {\n            ...baseResult,\n            kind: 'payment.failed',\n            paymentIntentId: intent.id,\n            reason: intent.last_payment_error?.message ?? 'payment failed',\n          }\n        }\n        case 'charge.refunded': {\n          const charge = event.data.object as Stripe.Charge\n          const pi =\n            typeof charge.payment_intent === 'string'\n              ? charge.payment_intent\n              : charge.payment_intent?.id\n          return {\n            ...baseResult,\n            kind: 'payment.refunded',\n            ...(pi !== undefined && { paymentIntentId: pi }),\n            amountMinor: charge.amount_refunded,\n            currency: toIsoCurrency(charge.currency),\n          }\n        }\n        default:\n          logger.debug({ type: event.type }, 'stripe webhook ignored')\n          return { ...baseResult, kind: 'ignored' }\n      }\n    },\n  }\n}\n"],"mappings":";AAAA;AAAA,EACE;AAAA,OAIK;;;ACLP,OAAO,YAAY;AACnB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OASK;AAoBA,IAAM,yBAAyB;AAMtC,SAAS,uBAAuB,OAAmE;AACjG,SAAO;AAAA,IACL,8BAA8B;AAAA,EAChC;AACF;AAOA,SAAS,cAAc,UAA0B;AAC/C,SAAO,SAAS,YAAY;AAC9B;AAEA,SAAS,UAAU,QAAoD;AACrE,UAAQ,QAAQ;AAAA,IACd,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO,WAAW,aAAa,cAAe;AAAA,IAChD;AACE,aAAO;AAAA,EACX;AACF;AAEA,SAAS,aAAa,QAAyC;AAC7D,MAAI,WAAW,YAAa,QAAO;AACnC,MAAI,WAAW,YAAY,WAAW,WAAY,QAAO;AACzD,SAAO;AACT;AAMA,SAAS,kBAAkB,KAAuB;AAChD,QAAM,IAAI;AAGV,MAAI,GAAG,eAAe,OAAO,GAAG,eAAe,IAAK,QAAO;AAE3D,SAAO,GAAG,YAAY,gBAAgB,GAAG,YAAY;AACvD;AAEA,SAAS,SAAS,QAA6C;AAC7D,SAAO;AAAA,IACL,IAAI,OAAO;AAAA,IACX,cAAc,OAAO,iBAAiB;AAAA,IACtC,aAAa,OAAO;AAAA,IACpB,UAAU,cAAc,OAAO,QAAQ;AAAA,IACvC,QAAQ,UAAU,OAAO,MAAM;AAAA,EACjC;AACF;AAEO,SAAS,4BAA4B,MAGxB;AAClB,QAAM,EAAE,OAAO,IAAI;AACnB,QAAM,MAAM,KAAK;AACjB,MAAI,CAAC,IAAI,UAAW,OAAM,IAAI,aAAa,kBAAkB,0BAA0B;AACvF,MAAI,CAAC,IAAI,cAAe,OAAM,IAAI,aAAa,kBAAkB,8BAA8B;AAE/F,MAAI,IAAI,mBAAmB,UAAa,YAAY,KAAK,IAAI,cAAc,GAAG;AAC5E,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,eAAe,IAAI,OAAO,IAAI,WAAW;AAAA,IAC7C,GAAI,IAAI,eAAe,UAAa;AAAA,MAClC,YAAY,IAAI;AAAA,IAClB;AAAA,IACA,GAAI,IAAI,SAAS,UAAa,EAAE,MAAM,IAAI,KAAK;AAAA,IAC/C,GAAI,IAAI,SAAS,UAAa,EAAE,MAAM,IAAI,KAAK;AAAA,IAC/C,GAAI,IAAI,aAAa,UAAa,EAAE,UAAU,IAAI,SAAS;AAAA,EAC7D,CAAC;AACD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,cAAc;AAAA,IACd,cAAc,MAAM,CAAC,UAAU,WAAW,UAAU,WAAW,WAAW;AAAA;AAAA,IAE1E,QAAQ,OAAO;AAAA,MACb,QAAQ;AAAA,MACR,SAAS,IAAI,iBAAiB,EAAE,gBAAgB,IAAI,eAAe,IAAI,CAAC;AAAA,IAC1E;AAAA,IACA,gBAAgB,CAAC,sBAAsB,oBAAoB,oBAAoB;AAAA,IAC/E,gBAAgB,CAAC;AAAA,IACjB,MAAM,aAAa;AAAA,IAEnB;AAAA,IACA,MAAM,cAAc;AAClB,UAAI;AACF,cAAM,aAAa,QAAQ,SAAS;AACpC,eAAO,EAAE,QAAQ,UAAU;AAAA,MAC7B,SAAS,KAAK;AACZ,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,oBAAoB,QAAqD;AAC7E,UAAI;AACF,cAAM,SAA2C;AAAA,UAC/C,QAAQ,OAAO;AAAA,UACf,UAAU,OAAO,SAAS,YAAY;AAAA,UACtC,2BAA2B,EAAE,SAAS,KAAK;AAAA,UAC3C,GAAI,OAAO,iBAAiB,UAAa,EAAE,eAAe,OAAO,aAAa;AAAA,UAC9E,UAAU;AAAA,YACR,GAAI,OAAO,YAAY,CAAC;AAAA,YACxB,GAAI,OAAO,aAAa,SAAY,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,YACrE,GAAI,OAAO,eAAe,SAAY,EAAE,YAAY,OAAO,WAAW,IAAI,CAAC;AAAA,UAC7E;AAAA,QACF;AACA,cAAM,QAAQ,OAAO;AACrB,YAAI,UAAU,OAAW,QAAO,SAAS,MAAM,aAAa,eAAe,OAAO,MAAM,CAAC;AAEzF,cAAM,SAAS,MAAM,aAAa,eAAe;AAAA,UAC/C;AAAA,YACE,GAAG;AAAA,YACH,SAAS;AAAA,YACT,qBAAqB,uBAAuB,KAAK;AAAA,YACjD,2BAA2B,EAAE,SAAS,MAAM,iBAAiB,QAAQ;AAAA,UACvE;AAAA,UACA,EAAE,YAAY,uBAAuB;AAAA,QACvC;AACA,eAAO,SAAS,MAAM;AAAA,MACxB,SAAS,KAAK;AACZ,cAAM,IAAI,aAAa,iBAAiB,qCAAqC,EAAE,OAAO,IAAI,CAAC;AAAA,MAC7F;AAAA,IACF;AAAA,IACA,MAAM,eAAe,UAAU,aAAsC;AACnE,UAAI;AACF,cAAM,WAAW,MAAM,aAAa,eAAe,QAAQ,UAAU;AAAA,UACnE,GAAI,gBAAgB,UAAa,EAAE,mBAAmB,YAAY;AAAA,QACpE,CAAC;AACD,eAAO;AAAA,UACL,WAAW,SAAS;AAAA,UACpB,qBAAqB,SAAS,mBAAmB,SAAS;AAAA,UAC1D,UAAU,cAAc,SAAS,QAAQ;AAAA,UACzC,QAAQ,UAAU,SAAS,MAAM;AAAA,QACnC;AAAA,MACF,SAAS,KAAK;AACZ,cAAM,IAAI,aAAa,kBAAkB,gCAAgC,EAAE,OAAO,IAAI,CAAC;AAAA,MACzF;AAAA,IACF;AAAA,IACA,MAAM,OAAO,WAAW,aAAa,QAAQ,MAAuB;AAClE,YAAM,SAAoC;AAAA,QACxC,gBAAgB;AAAA,QAChB,GAAI,gBAAgB,UAAa,EAAE,QAAQ,YAAY;AAAA,QACvD,GAAI,WAAW,UAAa,EAAE,OAAmD;AAAA,MACnF;AACA,UAAI;AACF,cAAM,SACJ,MAAM,mBAAmB,SACrB,MAAM,aAAa,QAAQ,OAAO,MAAM,IACxC,MAAM,aAAa,QAAQ,OAAO,QAAQ,EAAE,gBAAgB,KAAK,eAAe,CAAC;AACvF,eAAO;AAAA,UACL,UAAU,OAAO;AAAA,UACjB;AAAA,UACA,aAAa,OAAO;AAAA,UACpB,UAAU,cAAc,OAAO,QAAQ;AAAA,UACvC,QAAQ,OAAO,UAAU;AAAA,UACzB,QAAQ,aAAa,OAAO,MAAM;AAAA,QACpC;AAAA,MACF,SAAS,KAAK;AACZ,YAAI,kBAAkB,GAAG,GAAG;AAC1B,gBAAM,IAAI,aAAa,mBAAmB,6BAA6B,EAAE,OAAO,IAAI,CAAC;AAAA,QACvF;AACA,cAAM,IAAI,aAAa,kBAAkB,iCAAiC,EAAE,OAAO,IAAI,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,IACA,MAAM,iBAAiB,UAAkC;AACvD,YAAM,SAAS,MAAM,aAAa,eAAe,SAAS,QAAQ;AAClE,aAAO,UAAU,OAAO,MAAM;AAAA,IAChC;AAAA,IACA,MAAM,iBAAiB,UAAkC;AACvD,UAAI;AACF,eAAO,SAAS,MAAM,aAAa,eAAe,SAAS,QAAQ,CAAC;AAAA,MACtE,SAAS,KAAK;AACZ,cAAM,IAAI,aAAa,iBAAiB,kCAAkC,EAAE,OAAO,IAAI,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,IACA,MAAM,oBAAoB,UAAyB;AACjD,UAAI;AACF,cAAM,aAAa,eAAe,OAAO,QAAQ;AAAA,MACnD,SAAS,KAAK;AAEZ,cAAM,SAAS,MAAM,aAAa,eAC/B,SAAS,QAAQ,EACjB,KAAK,CAAC,WAAW,OAAO,MAAM,EAC9B,MAAM,MAAM,MAAS;AACxB,YAAI,WAAW,WAAY;AAC3B,cAAM,IAAI,aAAa,kBAAkB,2BAA2B,QAAQ,IAAI;AAAA,UAC9E,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IACA,MAAM,aAAa,SAAS,WAAmC;AAC7D,UAAI;AACJ,UAAI;AACF,gBAAQ,aAAa,SAAS,eAAe,SAAS,WAAW,IAAI,aAAa;AAAA,MACpF,SAAS,KAAK;AACZ,cAAM,IAAI,aAAa,mBAAmB,oCAAoC;AAAA,UAC5E,OAAO;AAAA,QACT,CAAC;AAAA,MACH;AACA,YAAM,aAAa,EAAE,UAAU,MAAM,SAAS,MAAM,GAAG;AACvD,cAAQ,MAAM,MAAM;AAAA,QAClB,KAAK,4BAA4B;AAC/B,gBAAM,SAAS,MAAM,KAAK;AAC1B,iBAAO;AAAA,YACL,GAAG;AAAA,YACH,MAAM;AAAA,YACN,iBAAiB,OAAO;AAAA,YACxB,aAAa,OAAO,mBAAmB,OAAO;AAAA,YAC9C,UAAU,cAAc,OAAO,QAAQ;AAAA,YACvC,KAAK,EAAE,GAAG,OAAO;AAAA,UACnB;AAAA,QACF;AAAA,QACA,KAAK,iCAAiC;AACpC,gBAAM,SAAS,MAAM,KAAK;AAC1B,iBAAO;AAAA,YACL,GAAG;AAAA,YACH,MAAM;AAAA,YACN,iBAAiB,OAAO;AAAA,YACxB,QAAQ,OAAO,oBAAoB,WAAW;AAAA,UAChD;AAAA,QACF;AAAA,QACA,KAAK,mBAAmB;AACtB,gBAAM,SAAS,MAAM,KAAK;AAC1B,gBAAM,KACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,OAAO,gBAAgB;AAC7B,iBAAO;AAAA,YACL,GAAG;AAAA,YACH,MAAM;AAAA,YACN,GAAI,OAAO,UAAa,EAAE,iBAAiB,GAAG;AAAA,YAC9C,aAAa,OAAO;AAAA,YACpB,UAAU,cAAc,OAAO,QAAQ;AAAA,UACzC;AAAA,QACF;AAAA,QACA;AACE,iBAAO,MAAM,EAAE,MAAM,MAAM,KAAK,GAAG,wBAAwB;AAC3D,iBAAO,EAAE,GAAG,YAAY,MAAM,UAAU;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;;;AD1RO,IAAM,OAAO;AACb,IAAM,WAAW;AAKjB,IAAM,WAA6B;AAAA,EACxC,EAAE,MAAM,aAAa,OAAO,cAAc,QAAQ,MAAM,KAAK,oBAAoB;AAAA,EACjF;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,KAAK;AAAA,EACP;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,KAAK;AAAA,EACP;AACF;AAGO,SAAS,cAAc,KAAsC;AAClE,MAAI,IAAI,SAAS,YAAY;AAC3B,UAAM,IAAI,YAAY,kDAAkD,IAAI,IAAI,IAAI;AAAA,MAClF,MAAM;AAAA,MACN,SAAS,EAAE,MAAM,IAAI,KAAK;AAAA,IAC5B,CAAC;AAAA,EACH;AACA,QAAM,SAAS,IAAI;AACnB,QAAM,iBAAiB,OAAO,kBAAkB,IAAI,IAAI,wBAAwB;AAChF,SAAO,4BAA4B;AAAA,IACjC,QAAQ,IAAI;AAAA,IACZ,QAAQ,EAAE,GAAG,QAAQ,GAAI,mBAAmB,UAAa,EAAE,eAAe,EAAG;AAAA,EAC/E,CAAC;AACH;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nymbalhq/payments-stripe",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "Stripe payments for Nymbal: the `stripe` payments provider",
   "license": "MIT",
   "repository": {
@@ -33,7 +33,7 @@
     "stripe": "^17.4.0"
   },
   "devDependencies": {
-    "@nymbalhq/types": "1.5.0",
+    "@nymbalhq/types": "1.6.0",
     "@typescript/native": "npm:typescript@^7.0.2",
     "fast-check": "^4.10.2",
     "stripe": "^17.4.0",