@payloadcms/plugin-stripe 4.0.0-canary.35 → 4.0.0-canary.37

package/dist/webhooks/handleCreatedOrUpdated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handleCreatedOrUpdated.d.ts","sourceRoot":"","sources":["../../src/webhooks/handleCreatedOrUpdated.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAIpF,KAAK,sBAAsB,GAAG,CAC5B,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;CACnD,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KACpC,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB,eAAO,MAAM,sBAAsB,EAAE,sBAqMpC,CAAA"}
+{"version":3,"file":"handleCreatedOrUpdated.d.ts","sourceRoot":"","sources":["../../src/webhooks/handleCreatedOrUpdated.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAIpF,KAAK,sBAAsB,GAAG,CAC5B,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;CACnD,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KACpC,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB,eAAO,MAAM,sBAAsB,EAAE,sBA0MpC,CAAA"}

package/dist/webhooks/handleCreatedOrUpdated.js

@@ -28,6 +28,7 @@ export const handleCreatedOrUpdated = async (args)=>{
         const payloadQuery = await payload.find({
             collection: collectionSlug,
             limit: 1,
+            overrideAccess: true,
             pagination: false,
             where: {
                 stripeID: {
@@ -59,6 +60,7 @@ export const handleCreatedOrUpdated = async (args)=>{
                         const authQuery = await payload.find({
                             collection: collectionSlug,
                             limit: 1,
+                            overrideAccess: true,
                             pagination: false,
                             where: {
                                 email: {
@@ -76,7 +78,8 @@ export const handleCreatedOrUpdated = async (args)=>{
                                 await payload.update({
                                     id: authDoc.id,
                                     collection: collectionSlug,
-                                    data: syncedData
+                                    data: syncedData,
+                                    overrideAccess: true
                                 });
                                 if (logs) {
                                     payload.logger.info(`✅ Successfully updated '${collectionSlug}' document in Payload with ID: '${authDoc.id}.'`);
@@ -114,7 +117,8 @@ export const handleCreatedOrUpdated = async (args)=>{
                             password,
                             passwordConfirm: password
                         },
-                        disableVerificationEmail: isAuthCollection ? true : undefined
+                        disableVerificationEmail: isAuthCollection ? true : undefined,
+                        overrideAccess: true
                     });
                     if (logs) {
                         payload.logger.info(`✅ Successfully created new '${collectionSlug}' document in Payload with Stripe ID: '${stripeID}'.`);
@@ -134,7 +138,8 @@ export const handleCreatedOrUpdated = async (args)=>{
                 await payload.update({
                     id: foundDoc.id,
                     collection: collectionSlug,
-                    data: syncedData
+                    data: syncedData,
+                    overrideAccess: true
                 });
                 if (logs) {
                     payload.logger.info(`✅ Successfully updated '${collectionSlug}' document in Payload from Stripe ID: '${stripeID}'.`);

package/dist/webhooks/handleCreatedOrUpdated.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/webhooks/handleCreatedOrUpdated.ts"],"sourcesContent":["import { v4 as uuid } from 'uuid'\n\nimport type { SanitizedStripePluginConfig, StripeWebhookHandler } from '../types.js'\n\nimport { deepen, getSyncedFields } from '../utilities/deepen.js'\n\ntype HandleCreatedOrUpdated = (\n  args: {\n    resourceType: string\n    syncConfig: SanitizedStripePluginConfig['sync'][0]\n  } & Parameters<StripeWebhookHandler>[0],\n) => Promise<void>\n\nexport const handleCreatedOrUpdated: HandleCreatedOrUpdated = async (args) => {\n  const { config: payloadConfig, event, payload, pluginConfig, resourceType, syncConfig } = args\n\n  const { logs } = pluginConfig || {}\n\n  const stripeDoc: any = event?.data?.object || {}\n\n  const { id: stripeID, object: eventObject } = stripeDoc\n\n  // NOTE: the Stripe API does not nest fields, everything is an object at the top level\n  // if the event object and resource type don't match, this change was not top-level\n  const isNestedChange = eventObject !== resourceType\n\n  // let stripeID = docID;\n  // if (isNestedChange) {\n  //   const parentResource = stripeDoc[resourceType];\n  //   stripeID = parentResource;\n  // }\n\n  if (isNestedChange) {\n    if (logs) {\n      payload.logger.info(\n        `- This change occurred on a nested field of ${resourceType}. Nested fields are not yet supported in auto-sync but can be manually setup.`,\n      )\n    }\n  }\n\n  if (!isNestedChange) {\n    if (logs) {\n      payload.logger.info(\n        `- A new document was created or updated in Stripe, now syncing to Payload...`,\n      )\n    }\n\n    const collectionSlug = syncConfig?.collection\n\n    const isAuthCollection = Boolean(\n      payloadConfig?.collections?.find((collection) => collection.slug === collectionSlug)?.auth,\n    )\n\n    // First, search for an existing document in Payload\n    const payloadQuery = await payload.find({\n      collection: collectionSlug,\n      limit: 1,\n      pagination: false,\n      where: {\n        stripeID: {\n          equals: stripeID,\n        },\n      },\n    })\n\n    const foundDoc = payloadQuery.docs[0] as any\n\n    // combine all properties of the Stripe doc and match their respective fields within the document\n    let syncedData = getSyncedFields({\n      data: stripeDoc,\n      fields: syncConfig.fields,\n      source: 'stripe',\n    })\n\n    syncedData = deepen({\n      ...syncedData,\n      skipSync: true,\n      stripeID,\n    })\n\n    if (!foundDoc) {\n      if (logs) {\n        payload.logger.info(\n          `- No existing '${collectionSlug}' document found with Stripe ID: '${stripeID}', creating new...`,\n        )\n      }\n\n      // auth docs must use unique emails\n      let authDoc = null\n\n      if (isAuthCollection) {\n        try {\n          if (stripeDoc?.email) {\n            const authQuery = await payload.find({\n              collection: collectionSlug,\n              limit: 1,\n              pagination: false,\n              where: {\n                email: {\n                  equals: stripeDoc.email,\n                },\n              },\n            })\n\n            authDoc = authQuery.docs[0] as any\n\n            if (authDoc) {\n              if (logs) {\n                payload.logger.info(\n                  `- Account already exists with e-mail: ${stripeDoc.email}, updating now...`,\n                )\n              }\n\n              // account exists by email, so update it instead\n              try {\n                await payload.update({\n                  id: authDoc.id,\n                  collection: collectionSlug,\n                  data: syncedData,\n                })\n\n                if (logs) {\n                  payload.logger.info(\n                    `✅ Successfully updated '${collectionSlug}' document in Payload with ID: '${authDoc.id}.'`,\n                  )\n                }\n              } catch (err: unknown) {\n                const msg = err instanceof Error ? err.message : err\n                if (logs) {\n                  payload.logger.error(\n                    `- Error updating existing '${collectionSlug}' document: ${msg}`,\n                  )\n                }\n              }\n            }\n          } else {\n            if (logs) {\n              payload.logger.error(\n                `No email was provided from Stripe, cannot create new '${collectionSlug}' document.`,\n              )\n            }\n          }\n        } catch (error: unknown) {\n          const msg = error instanceof Error ? error.message : error\n          if (logs) {\n            payload.logger.error(`Error looking up '${collectionSlug}' document in Payload: ${msg}`)\n          }\n        }\n      }\n\n      if (!isAuthCollection || (isAuthCollection && !authDoc)) {\n        try {\n          if (logs) {\n            payload.logger.info(\n              `- Creating new '${collectionSlug}' document in Payload with Stripe ID: '${stripeID}'.`,\n            )\n          }\n\n          // generate a strong, unique password for the new user\n          const password: string = uuid()\n\n          await payload.create({\n            collection: collectionSlug,\n            data: {\n              ...syncedData,\n              password,\n              passwordConfirm: password,\n            },\n            disableVerificationEmail: isAuthCollection ? true : undefined,\n          })\n\n          if (logs) {\n            payload.logger.info(\n              `✅ Successfully created new '${collectionSlug}' document in Payload with Stripe ID: '${stripeID}'.`,\n            )\n          }\n        } catch (error: unknown) {\n          const msg = error instanceof Error ? error.message : error\n          if (logs) {\n            payload.logger.error(`Error creating new document in Payload: ${msg}`)\n          }\n        }\n      }\n    } else {\n      if (logs) {\n        payload.logger.info(\n          `- Existing '${collectionSlug}' document found in Payload with Stripe ID: '${stripeID}', updating now...`,\n        )\n      }\n\n      try {\n        await payload.update({\n          id: foundDoc.id,\n          collection: collectionSlug,\n          data: syncedData,\n        })\n\n        if (logs) {\n          payload.logger.info(\n            `✅ Successfully updated '${collectionSlug}' document in Payload from Stripe ID: '${stripeID}'.`,\n          )\n        }\n      } catch (error: unknown) {\n        const msg = error instanceof Error ? error.message : error\n        if (logs) {\n          payload.logger.error(`Error updating '${collectionSlug}' document in Payload: ${msg}`)\n        }\n      }\n    }\n  }\n}\n"],"names":["v4","uuid","deepen","getSyncedFields","handleCreatedOrUpdated","args","config","payloadConfig","event","payload","pluginConfig","resourceType","syncConfig","logs","stripeDoc","data","object","id","stripeID","eventObject","isNestedChange","logger","info","collectionSlug","collection","isAuthCollection","Boolean","collections","find","slug","auth","payloadQuery","limit","pagination","where","equals","foundDoc","docs","syncedData","fields","source","skipSync","authDoc","email","authQuery","update","err","msg","Error","message","error","password","create","passwordConfirm","disableVerificationEmail","undefined"],"mappings":"AAAA,SAASA,MAAMC,IAAI,QAAQ,OAAM;AAIjC,SAASC,MAAM,EAAEC,eAAe,QAAQ,yBAAwB;AAShE,OAAO,MAAMC,yBAAiD,OAAOC;IACnE,MAAM,EAAEC,QAAQC,aAAa,EAAEC,KAAK,EAAEC,OAAO,EAAEC,YAAY,EAAEC,YAAY,EAAEC,UAAU,EAAE,GAAGP;IAE1F,MAAM,EAAEQ,IAAI,EAAE,GAAGH,gBAAgB,CAAC;IAElC,MAAMI,YAAiBN,OAAOO,MAAMC,UAAU,CAAC;IAE/C,MAAM,EAAEC,IAAIC,QAAQ,EAAEF,QAAQG,WAAW,EAAE,GAAGL;IAE9C,sFAAsF;IACtF,mFAAmF;IACnF,MAAMM,iBAAiBD,gBAAgBR;IAEvC,wBAAwB;IACxB,wBAAwB;IACxB,oDAAoD;IACpD,+BAA+B;IAC/B,IAAI;IAEJ,IAAIS,gBAAgB;QAClB,IAAIP,MAAM;YACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,4CAA4C,EAAEX,aAAa,6EAA6E,CAAC;QAE9I;IACF;IAEA,IAAI,CAACS,gBAAgB;QACnB,IAAIP,MAAM;YACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,4EAA4E,CAAC;QAElF;QAEA,MAAMC,iBAAiBX,YAAYY;QAEnC,MAAMC,mBAAmBC,QACvBnB,eAAeoB,aAAaC,KAAK,CAACJ,aAAeA,WAAWK,IAAI,KAAKN,iBAAiBO;QAGxF,oDAAoD;QACpD,MAAMC,eAAe,MAAMtB,QAAQmB,IAAI,CAAC;YACtCJ,YAAYD;YACZS,OAAO;YACPC,YAAY;YACZC,OAAO;gBACLhB,UAAU;oBACRiB,QAAQjB;gBACV;YACF;QACF;QAEA,MAAMkB,WAAWL,aAAaM,IAAI,CAAC,EAAE;QAErC,iGAAiG;QACjG,IAAIC,aAAanC,gBAAgB;YAC/BY,MAAMD;YACNyB,QAAQ3B,WAAW2B,MAAM;YACzBC,QAAQ;QACV;QAEAF,aAAapC,OAAO;YAClB,GAAGoC,UAAU;YACbG,UAAU;YACVvB;QACF;QAEA,IAAI,CAACkB,UAAU;YACb,IAAIvB,MAAM;gBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,eAAe,EAAEC,eAAe,kCAAkC,EAAEL,SAAS,kBAAkB,CAAC;YAErG;YAEA,mCAAmC;YACnC,IAAIwB,UAAU;YAEd,IAAIjB,kBAAkB;gBACpB,IAAI;oBACF,IAAIX,WAAW6B,OAAO;wBACpB,MAAMC,YAAY,MAAMnC,QAAQmB,IAAI,CAAC;4BACnCJ,YAAYD;4BACZS,OAAO;4BACPC,YAAY;4BACZC,OAAO;gCACLS,OAAO;oCACLR,QAAQrB,UAAU6B,KAAK;gCACzB;4BACF;wBACF;wBAEAD,UAAUE,UAAUP,IAAI,CAAC,EAAE;wBAE3B,IAAIK,SAAS;4BACX,IAAI7B,MAAM;gCACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,sCAAsC,EAAER,UAAU6B,KAAK,CAAC,iBAAiB,CAAC;4BAE/E;4BAEA,gDAAgD;4BAChD,IAAI;gCACF,MAAMlC,QAAQoC,MAAM,CAAC;oCACnB5B,IAAIyB,QAAQzB,EAAE;oCACdO,YAAYD;oCACZR,MAAMuB;gCACR;gCAEA,IAAIzB,MAAM;oCACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,wBAAwB,EAAEC,eAAe,gCAAgC,EAAEmB,QAAQzB,EAAE,CAAC,EAAE,CAAC;gCAE9F;4BACF,EAAE,OAAO6B,KAAc;gCACrB,MAAMC,MAAMD,eAAeE,QAAQF,IAAIG,OAAO,GAAGH;gCACjD,IAAIjC,MAAM;oCACRJ,QAAQY,MAAM,CAAC6B,KAAK,CAClB,CAAC,2BAA2B,EAAE3B,eAAe,YAAY,EAAEwB,KAAK;gCAEpE;4BACF;wBACF;oBACF,OAAO;wBACL,IAAIlC,MAAM;4BACRJ,QAAQY,MAAM,CAAC6B,KAAK,CAClB,CAAC,sDAAsD,EAAE3B,eAAe,WAAW,CAAC;wBAExF;oBACF;gBACF,EAAE,OAAO2B,OAAgB;oBACvB,MAAMH,MAAMG,iBAAiBF,QAAQE,MAAMD,OAAO,GAAGC;oBACrD,IAAIrC,MAAM;wBACRJ,QAAQY,MAAM,CAAC6B,KAAK,CAAC,CAAC,kBAAkB,EAAE3B,eAAe,uBAAuB,EAAEwB,KAAK;oBACzF;gBACF;YACF;YAEA,IAAI,CAACtB,oBAAqBA,oBAAoB,CAACiB,SAAU;gBACvD,IAAI;oBACF,IAAI7B,MAAM;wBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,gBAAgB,EAAEC,eAAe,uCAAuC,EAAEL,SAAS,EAAE,CAAC;oBAE3F;oBAEA,sDAAsD;oBACtD,MAAMiC,WAAmBlD;oBAEzB,MAAMQ,QAAQ2C,MAAM,CAAC;wBACnB5B,YAAYD;wBACZR,MAAM;4BACJ,GAAGuB,UAAU;4BACba;4BACAE,iBAAiBF;wBACnB;wBACAG,0BAA0B7B,mBAAmB,OAAO8B;oBACtD;oBAEA,IAAI1C,MAAM;wBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,4BAA4B,EAAEC,eAAe,uCAAuC,EAAEL,SAAS,EAAE,CAAC;oBAEvG;gBACF,EAAE,OAAOgC,OAAgB;oBACvB,MAAMH,MAAMG,iBAAiBF,QAAQE,MAAMD,OAAO,GAAGC;oBACrD,IAAIrC,MAAM;wBACRJ,QAAQY,MAAM,CAAC6B,KAAK,CAAC,CAAC,wCAAwC,EAAEH,KAAK;oBACvE;gBACF;YACF;QACF,OAAO;YACL,IAAIlC,MAAM;gBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,YAAY,EAAEC,eAAe,6CAA6C,EAAEL,SAAS,kBAAkB,CAAC;YAE7G;YAEA,IAAI;gBACF,MAAMT,QAAQoC,MAAM,CAAC;oBACnB5B,IAAImB,SAASnB,EAAE;oBACfO,YAAYD;oBACZR,MAAMuB;gBACR;gBAEA,IAAIzB,MAAM;oBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,wBAAwB,EAAEC,eAAe,uCAAuC,EAAEL,SAAS,EAAE,CAAC;gBAEnG;YACF,EAAE,OAAOgC,OAAgB;gBACvB,MAAMH,MAAMG,iBAAiBF,QAAQE,MAAMD,OAAO,GAAGC;gBACrD,IAAIrC,MAAM;oBACRJ,QAAQY,MAAM,CAAC6B,KAAK,CAAC,CAAC,gBAAgB,EAAE3B,eAAe,uBAAuB,EAAEwB,KAAK;gBACvF;YACF;QACF;IACF;AACF,EAAC"}
+{"version":3,"sources":["../../src/webhooks/handleCreatedOrUpdated.ts"],"sourcesContent":["import { v4 as uuid } from 'uuid'\n\nimport type { SanitizedStripePluginConfig, StripeWebhookHandler } from '../types.js'\n\nimport { deepen, getSyncedFields } from '../utilities/deepen.js'\n\ntype HandleCreatedOrUpdated = (\n  args: {\n    resourceType: string\n    syncConfig: SanitizedStripePluginConfig['sync'][0]\n  } & Parameters<StripeWebhookHandler>[0],\n) => Promise<void>\n\nexport const handleCreatedOrUpdated: HandleCreatedOrUpdated = async (args) => {\n  const { config: payloadConfig, event, payload, pluginConfig, resourceType, syncConfig } = args\n\n  const { logs } = pluginConfig || {}\n\n  const stripeDoc: any = event?.data?.object || {}\n\n  const { id: stripeID, object: eventObject } = stripeDoc\n\n  // NOTE: the Stripe API does not nest fields, everything is an object at the top level\n  // if the event object and resource type don't match, this change was not top-level\n  const isNestedChange = eventObject !== resourceType\n\n  // let stripeID = docID;\n  // if (isNestedChange) {\n  //   const parentResource = stripeDoc[resourceType];\n  //   stripeID = parentResource;\n  // }\n\n  if (isNestedChange) {\n    if (logs) {\n      payload.logger.info(\n        `- This change occurred on a nested field of ${resourceType}. Nested fields are not yet supported in auto-sync but can be manually setup.`,\n      )\n    }\n  }\n\n  if (!isNestedChange) {\n    if (logs) {\n      payload.logger.info(\n        `- A new document was created or updated in Stripe, now syncing to Payload...`,\n      )\n    }\n\n    const collectionSlug = syncConfig?.collection\n\n    const isAuthCollection = Boolean(\n      payloadConfig?.collections?.find((collection) => collection.slug === collectionSlug)?.auth,\n    )\n\n    // First, search for an existing document in Payload\n    const payloadQuery = await payload.find({\n      collection: collectionSlug,\n      limit: 1,\n      overrideAccess: true,\n      pagination: false,\n      where: {\n        stripeID: {\n          equals: stripeID,\n        },\n      },\n    })\n\n    const foundDoc = payloadQuery.docs[0] as any\n\n    // combine all properties of the Stripe doc and match their respective fields within the document\n    let syncedData = getSyncedFields({\n      data: stripeDoc,\n      fields: syncConfig.fields,\n      source: 'stripe',\n    })\n\n    syncedData = deepen({\n      ...syncedData,\n      skipSync: true,\n      stripeID,\n    })\n\n    if (!foundDoc) {\n      if (logs) {\n        payload.logger.info(\n          `- No existing '${collectionSlug}' document found with Stripe ID: '${stripeID}', creating new...`,\n        )\n      }\n\n      // auth docs must use unique emails\n      let authDoc = null\n\n      if (isAuthCollection) {\n        try {\n          if (stripeDoc?.email) {\n            const authQuery = await payload.find({\n              collection: collectionSlug,\n              limit: 1,\n              overrideAccess: true,\n              pagination: false,\n              where: {\n                email: {\n                  equals: stripeDoc.email,\n                },\n              },\n            })\n\n            authDoc = authQuery.docs[0] as any\n\n            if (authDoc) {\n              if (logs) {\n                payload.logger.info(\n                  `- Account already exists with e-mail: ${stripeDoc.email}, updating now...`,\n                )\n              }\n\n              // account exists by email, so update it instead\n              try {\n                await payload.update({\n                  id: authDoc.id,\n                  collection: collectionSlug,\n                  data: syncedData,\n                  overrideAccess: true,\n                })\n\n                if (logs) {\n                  payload.logger.info(\n                    `✅ Successfully updated '${collectionSlug}' document in Payload with ID: '${authDoc.id}.'`,\n                  )\n                }\n              } catch (err: unknown) {\n                const msg = err instanceof Error ? err.message : err\n                if (logs) {\n                  payload.logger.error(\n                    `- Error updating existing '${collectionSlug}' document: ${msg}`,\n                  )\n                }\n              }\n            }\n          } else {\n            if (logs) {\n              payload.logger.error(\n                `No email was provided from Stripe, cannot create new '${collectionSlug}' document.`,\n              )\n            }\n          }\n        } catch (error: unknown) {\n          const msg = error instanceof Error ? error.message : error\n          if (logs) {\n            payload.logger.error(`Error looking up '${collectionSlug}' document in Payload: ${msg}`)\n          }\n        }\n      }\n\n      if (!isAuthCollection || (isAuthCollection && !authDoc)) {\n        try {\n          if (logs) {\n            payload.logger.info(\n              `- Creating new '${collectionSlug}' document in Payload with Stripe ID: '${stripeID}'.`,\n            )\n          }\n\n          // generate a strong, unique password for the new user\n          const password: string = uuid()\n\n          await payload.create({\n            collection: collectionSlug,\n            data: {\n              ...syncedData,\n              password,\n              passwordConfirm: password,\n            },\n            disableVerificationEmail: isAuthCollection ? true : undefined,\n            overrideAccess: true,\n          })\n\n          if (logs) {\n            payload.logger.info(\n              `✅ Successfully created new '${collectionSlug}' document in Payload with Stripe ID: '${stripeID}'.`,\n            )\n          }\n        } catch (error: unknown) {\n          const msg = error instanceof Error ? error.message : error\n          if (logs) {\n            payload.logger.error(`Error creating new document in Payload: ${msg}`)\n          }\n        }\n      }\n    } else {\n      if (logs) {\n        payload.logger.info(\n          `- Existing '${collectionSlug}' document found in Payload with Stripe ID: '${stripeID}', updating now...`,\n        )\n      }\n\n      try {\n        await payload.update({\n          id: foundDoc.id,\n          collection: collectionSlug,\n          data: syncedData,\n          overrideAccess: true,\n        })\n\n        if (logs) {\n          payload.logger.info(\n            `✅ Successfully updated '${collectionSlug}' document in Payload from Stripe ID: '${stripeID}'.`,\n          )\n        }\n      } catch (error: unknown) {\n        const msg = error instanceof Error ? error.message : error\n        if (logs) {\n          payload.logger.error(`Error updating '${collectionSlug}' document in Payload: ${msg}`)\n        }\n      }\n    }\n  }\n}\n"],"names":["v4","uuid","deepen","getSyncedFields","handleCreatedOrUpdated","args","config","payloadConfig","event","payload","pluginConfig","resourceType","syncConfig","logs","stripeDoc","data","object","id","stripeID","eventObject","isNestedChange","logger","info","collectionSlug","collection","isAuthCollection","Boolean","collections","find","slug","auth","payloadQuery","limit","overrideAccess","pagination","where","equals","foundDoc","docs","syncedData","fields","source","skipSync","authDoc","email","authQuery","update","err","msg","Error","message","error","password","create","passwordConfirm","disableVerificationEmail","undefined"],"mappings":"AAAA,SAASA,MAAMC,IAAI,QAAQ,OAAM;AAIjC,SAASC,MAAM,EAAEC,eAAe,QAAQ,yBAAwB;AAShE,OAAO,MAAMC,yBAAiD,OAAOC;IACnE,MAAM,EAAEC,QAAQC,aAAa,EAAEC,KAAK,EAAEC,OAAO,EAAEC,YAAY,EAAEC,YAAY,EAAEC,UAAU,EAAE,GAAGP;IAE1F,MAAM,EAAEQ,IAAI,EAAE,GAAGH,gBAAgB,CAAC;IAElC,MAAMI,YAAiBN,OAAOO,MAAMC,UAAU,CAAC;IAE/C,MAAM,EAAEC,IAAIC,QAAQ,EAAEF,QAAQG,WAAW,EAAE,GAAGL;IAE9C,sFAAsF;IACtF,mFAAmF;IACnF,MAAMM,iBAAiBD,gBAAgBR;IAEvC,wBAAwB;IACxB,wBAAwB;IACxB,oDAAoD;IACpD,+BAA+B;IAC/B,IAAI;IAEJ,IAAIS,gBAAgB;QAClB,IAAIP,MAAM;YACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,4CAA4C,EAAEX,aAAa,6EAA6E,CAAC;QAE9I;IACF;IAEA,IAAI,CAACS,gBAAgB;QACnB,IAAIP,MAAM;YACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,4EAA4E,CAAC;QAElF;QAEA,MAAMC,iBAAiBX,YAAYY;QAEnC,MAAMC,mBAAmBC,QACvBnB,eAAeoB,aAAaC,KAAK,CAACJ,aAAeA,WAAWK,IAAI,KAAKN,iBAAiBO;QAGxF,oDAAoD;QACpD,MAAMC,eAAe,MAAMtB,QAAQmB,IAAI,CAAC;YACtCJ,YAAYD;YACZS,OAAO;YACPC,gBAAgB;YAChBC,YAAY;YACZC,OAAO;gBACLjB,UAAU;oBACRkB,QAAQlB;gBACV;YACF;QACF;QAEA,MAAMmB,WAAWN,aAAaO,IAAI,CAAC,EAAE;QAErC,iGAAiG;QACjG,IAAIC,aAAapC,gBAAgB;YAC/BY,MAAMD;YACN0B,QAAQ5B,WAAW4B,MAAM;YACzBC,QAAQ;QACV;QAEAF,aAAarC,OAAO;YAClB,GAAGqC,UAAU;YACbG,UAAU;YACVxB;QACF;QAEA,IAAI,CAACmB,UAAU;YACb,IAAIxB,MAAM;gBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,eAAe,EAAEC,eAAe,kCAAkC,EAAEL,SAAS,kBAAkB,CAAC;YAErG;YAEA,mCAAmC;YACnC,IAAIyB,UAAU;YAEd,IAAIlB,kBAAkB;gBACpB,IAAI;oBACF,IAAIX,WAAW8B,OAAO;wBACpB,MAAMC,YAAY,MAAMpC,QAAQmB,IAAI,CAAC;4BACnCJ,YAAYD;4BACZS,OAAO;4BACPC,gBAAgB;4BAChBC,YAAY;4BACZC,OAAO;gCACLS,OAAO;oCACLR,QAAQtB,UAAU8B,KAAK;gCACzB;4BACF;wBACF;wBAEAD,UAAUE,UAAUP,IAAI,CAAC,EAAE;wBAE3B,IAAIK,SAAS;4BACX,IAAI9B,MAAM;gCACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,sCAAsC,EAAER,UAAU8B,KAAK,CAAC,iBAAiB,CAAC;4BAE/E;4BAEA,gDAAgD;4BAChD,IAAI;gCACF,MAAMnC,QAAQqC,MAAM,CAAC;oCACnB7B,IAAI0B,QAAQ1B,EAAE;oCACdO,YAAYD;oCACZR,MAAMwB;oCACNN,gBAAgB;gCAClB;gCAEA,IAAIpB,MAAM;oCACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,wBAAwB,EAAEC,eAAe,gCAAgC,EAAEoB,QAAQ1B,EAAE,CAAC,EAAE,CAAC;gCAE9F;4BACF,EAAE,OAAO8B,KAAc;gCACrB,MAAMC,MAAMD,eAAeE,QAAQF,IAAIG,OAAO,GAAGH;gCACjD,IAAIlC,MAAM;oCACRJ,QAAQY,MAAM,CAAC8B,KAAK,CAClB,CAAC,2BAA2B,EAAE5B,eAAe,YAAY,EAAEyB,KAAK;gCAEpE;4BACF;wBACF;oBACF,OAAO;wBACL,IAAInC,MAAM;4BACRJ,QAAQY,MAAM,CAAC8B,KAAK,CAClB,CAAC,sDAAsD,EAAE5B,eAAe,WAAW,CAAC;wBAExF;oBACF;gBACF,EAAE,OAAO4B,OAAgB;oBACvB,MAAMH,MAAMG,iBAAiBF,QAAQE,MAAMD,OAAO,GAAGC;oBACrD,IAAItC,MAAM;wBACRJ,QAAQY,MAAM,CAAC8B,KAAK,CAAC,CAAC,kBAAkB,EAAE5B,eAAe,uBAAuB,EAAEyB,KAAK;oBACzF;gBACF;YACF;YAEA,IAAI,CAACvB,oBAAqBA,oBAAoB,CAACkB,SAAU;gBACvD,IAAI;oBACF,IAAI9B,MAAM;wBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,gBAAgB,EAAEC,eAAe,uCAAuC,EAAEL,SAAS,EAAE,CAAC;oBAE3F;oBAEA,sDAAsD;oBACtD,MAAMkC,WAAmBnD;oBAEzB,MAAMQ,QAAQ4C,MAAM,CAAC;wBACnB7B,YAAYD;wBACZR,MAAM;4BACJ,GAAGwB,UAAU;4BACba;4BACAE,iBAAiBF;wBACnB;wBACAG,0BAA0B9B,mBAAmB,OAAO+B;wBACpDvB,gBAAgB;oBAClB;oBAEA,IAAIpB,MAAM;wBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,4BAA4B,EAAEC,eAAe,uCAAuC,EAAEL,SAAS,EAAE,CAAC;oBAEvG;gBACF,EAAE,OAAOiC,OAAgB;oBACvB,MAAMH,MAAMG,iBAAiBF,QAAQE,MAAMD,OAAO,GAAGC;oBACrD,IAAItC,MAAM;wBACRJ,QAAQY,MAAM,CAAC8B,KAAK,CAAC,CAAC,wCAAwC,EAAEH,KAAK;oBACvE;gBACF;YACF;QACF,OAAO;YACL,IAAInC,MAAM;gBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,YAAY,EAAEC,eAAe,6CAA6C,EAAEL,SAAS,kBAAkB,CAAC;YAE7G;YAEA,IAAI;gBACF,MAAMT,QAAQqC,MAAM,CAAC;oBACnB7B,IAAIoB,SAASpB,EAAE;oBACfO,YAAYD;oBACZR,MAAMwB;oBACNN,gBAAgB;gBAClB;gBAEA,IAAIpB,MAAM;oBACRJ,QAAQY,MAAM,CAACC,IAAI,CACjB,CAAC,wBAAwB,EAAEC,eAAe,uCAAuC,EAAEL,SAAS,EAAE,CAAC;gBAEnG;YACF,EAAE,OAAOiC,OAAgB;gBACvB,MAAMH,MAAMG,iBAAiBF,QAAQE,MAAMD,OAAO,GAAGC;gBACrD,IAAItC,MAAM;oBACRJ,QAAQY,MAAM,CAAC8B,KAAK,CAAC,CAAC,gBAAgB,EAAE5B,eAAe,uBAAuB,EAAEyB,KAAK;gBACvF;YACF;QACF;IACF;AACF,EAAC"}

package/dist/webhooks/handleDeleted.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handleDeleted.d.ts","sourceRoot":"","sources":["../../src/webhooks/handleDeleted.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAEpF,KAAK,aAAa,GAAG,CACnB,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;CACnD,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KACpC,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB,eAAO,MAAM,aAAa,EAAE,aAqF3B,CAAA"}
+{"version":3,"file":"handleDeleted.d.ts","sourceRoot":"","sources":["../../src/webhooks/handleDeleted.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAEpF,KAAK,aAAa,GAAG,CACnB,IAAI,EAAE;IACJ,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;CACnD,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KACpC,OAAO,CAAC,IAAI,CAAC,CAAA;AAElB,eAAO,MAAM,aAAa,EAAE,aAuF3B,CAAA"}

package/dist/webhooks/handleDeleted.js

@@ -18,6 +18,7 @@ export const handleDeleted = async (args)=>{
             const payloadQuery = await payload.find({
                 collection: collectionSlug,
                 limit: 1,
+                overrideAccess: true,
                 pagination: false,
                 where: {
                     stripeID: {
@@ -39,7 +40,8 @@ export const handleDeleted = async (args)=>{
                     // eslint-disable-next-line @typescript-eslint/no-floating-promises
                     payload.delete({
                         id: foundDoc.id,
-                        collection: collectionSlug
+                        collection: collectionSlug,
+                        overrideAccess: true
                     });
                     // NOTE: the `afterDelete` hook will trigger, which will attempt to delete the document from Stripe and safely error out
                     // There is no known way of preventing this from happening. In other hooks we use the `skipSync` field, but here the document is already deleted.

package/dist/webhooks/handleDeleted.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/webhooks/handleDeleted.ts"],"sourcesContent":["import type { SanitizedStripePluginConfig, StripeWebhookHandler } from '../types.js'\n\ntype HandleDeleted = (\n  args: {\n    resourceType: string\n    syncConfig: SanitizedStripePluginConfig['sync'][0]\n  } & Parameters<StripeWebhookHandler>[0],\n) => Promise<void>\n\nexport const handleDeleted: HandleDeleted = async (args) => {\n  const { event, payload, pluginConfig, resourceType, syncConfig } = args\n\n  const { logs } = pluginConfig || {}\n\n  const collectionSlug = syncConfig?.collection\n\n  const {\n    id: stripeID,\n    object: eventObject, // use this to determine if this is a nested field\n  }: any = event?.data?.object || {}\n\n  // if the event object and resource type don't match, this deletion was not top-level\n  const isNestedDelete = eventObject !== resourceType\n\n  if (isNestedDelete) {\n    if (logs) {\n      payload.logger.info(\n        `- This deletion occurred on a nested field of ${resourceType}. Nested fields are not yet supported.`,\n      )\n    }\n  }\n\n  if (!isNestedDelete) {\n    if (logs) {\n      payload.logger.info(\n        `- A '${resourceType}' resource was deleted in Stripe, now deleting '${collectionSlug}' document in Payload with Stripe ID: '${stripeID}'...`,\n      )\n    }\n\n    try {\n      const payloadQuery = await payload.find({\n        collection: collectionSlug,\n        limit: 1,\n        pagination: false,\n        where: {\n          stripeID: {\n            equals: stripeID,\n          },\n        },\n      })\n\n      const foundDoc = payloadQuery.docs[0] as any\n\n      if (!foundDoc) {\n        if (logs) {\n          payload.logger.info(\n            `- Nothing to delete, no existing document found with Stripe ID: '${stripeID}'.`,\n          )\n        }\n      }\n\n      if (foundDoc) {\n        if (logs) {\n          payload.logger.info(`- Deleting Payload document with ID: '${foundDoc.id}'...`)\n        }\n\n        try {\n          // eslint-disable-next-line @typescript-eslint/no-floating-promises\n          payload.delete({\n            id: foundDoc.id,\n            collection: collectionSlug,\n          })\n\n          // NOTE: the `afterDelete` hook will trigger, which will attempt to delete the document from Stripe and safely error out\n          // There is no known way of preventing this from happening. In other hooks we use the `skipSync` field, but here the document is already deleted.\n          if (logs) {\n            payload.logger.info(\n              `- ✅ Successfully deleted Payload document with ID: '${foundDoc.id}'.`,\n            )\n          }\n        } catch (error: unknown) {\n          const msg = error instanceof Error ? error.message : error\n          if (logs) {\n            payload.logger.error(`Error deleting document: ${msg}`)\n          }\n        }\n      }\n    } catch (error: unknown) {\n      const msg = error instanceof Error ? error.message : error\n      if (logs) {\n        payload.logger.error(`Error deleting document: ${msg}`)\n      }\n    }\n  }\n}\n"],"names":["handleDeleted","args","event","payload","pluginConfig","resourceType","syncConfig","logs","collectionSlug","collection","id","stripeID","object","eventObject","data","isNestedDelete","logger","info","payloadQuery","find","limit","pagination","where","equals","foundDoc","docs","delete","error","msg","Error","message"],"mappings":"AASA,OAAO,MAAMA,gBAA+B,OAAOC;IACjD,MAAM,EAAEC,KAAK,EAAEC,OAAO,EAAEC,YAAY,EAAEC,YAAY,EAAEC,UAAU,EAAE,GAAGL;IAEnE,MAAM,EAAEM,IAAI,EAAE,GAAGH,gBAAgB,CAAC;IAElC,MAAMI,iBAAiBF,YAAYG;IAEnC,MAAM,EACJC,IAAIC,QAAQ,EACZC,QAAQC,WAAW,EACpB,GAAQX,OAAOY,MAAMF,UAAU,CAAC;IAEjC,qFAAqF;IACrF,MAAMG,iBAAiBF,gBAAgBR;IAEvC,IAAIU,gBAAgB;QAClB,IAAIR,MAAM;YACRJ,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,8CAA8C,EAAEZ,aAAa,sCAAsC,CAAC;QAEzG;IACF;IAEA,IAAI,CAACU,gBAAgB;QACnB,IAAIR,MAAM;YACRJ,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,KAAK,EAAEZ,aAAa,gDAAgD,EAAEG,eAAe,uCAAuC,EAAEG,SAAS,IAAI,CAAC;QAEjJ;QAEA,IAAI;YACF,MAAMO,eAAe,MAAMf,QAAQgB,IAAI,CAAC;gBACtCV,YAAYD;gBACZY,OAAO;gBACPC,YAAY;gBACZC,OAAO;oBACLX,UAAU;wBACRY,QAAQZ;oBACV;gBACF;YACF;YAEA,MAAMa,WAAWN,aAAaO,IAAI,CAAC,EAAE;YAErC,IAAI,CAACD,UAAU;gBACb,IAAIjB,MAAM;oBACRJ,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,iEAAiE,EAAEN,SAAS,EAAE,CAAC;gBAEpF;YACF;YAEA,IAAIa,UAAU;gBACZ,IAAIjB,MAAM;oBACRJ,QAAQa,MAAM,CAACC,IAAI,CAAC,CAAC,sCAAsC,EAAEO,SAASd,EAAE,CAAC,IAAI,CAAC;gBAChF;gBAEA,IAAI;oBACF,mEAAmE;oBACnEP,QAAQuB,MAAM,CAAC;wBACbhB,IAAIc,SAASd,EAAE;wBACfD,YAAYD;oBACd;oBAEA,wHAAwH;oBACxH,iJAAiJ;oBACjJ,IAAID,MAAM;wBACRJ,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,oDAAoD,EAAEO,SAASd,EAAE,CAAC,EAAE,CAAC;oBAE1E;gBACF,EAAE,OAAOiB,OAAgB;oBACvB,MAAMC,MAAMD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAGH;oBACrD,IAAIpB,MAAM;wBACRJ,QAAQa,MAAM,CAACW,KAAK,CAAC,CAAC,yBAAyB,EAAEC,KAAK;oBACxD;gBACF;YACF;QACF,EAAE,OAAOD,OAAgB;YACvB,MAAMC,MAAMD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAGH;YACrD,IAAIpB,MAAM;gBACRJ,QAAQa,MAAM,CAACW,KAAK,CAAC,CAAC,yBAAyB,EAAEC,KAAK;YACxD;QACF;IACF;AACF,EAAC"}
+{"version":3,"sources":["../../src/webhooks/handleDeleted.ts"],"sourcesContent":["import type { SanitizedStripePluginConfig, StripeWebhookHandler } from '../types.js'\n\ntype HandleDeleted = (\n  args: {\n    resourceType: string\n    syncConfig: SanitizedStripePluginConfig['sync'][0]\n  } & Parameters<StripeWebhookHandler>[0],\n) => Promise<void>\n\nexport const handleDeleted: HandleDeleted = async (args) => {\n  const { event, payload, pluginConfig, resourceType, syncConfig } = args\n\n  const { logs } = pluginConfig || {}\n\n  const collectionSlug = syncConfig?.collection\n\n  const {\n    id: stripeID,\n    object: eventObject, // use this to determine if this is a nested field\n  }: any = event?.data?.object || {}\n\n  // if the event object and resource type don't match, this deletion was not top-level\n  const isNestedDelete = eventObject !== resourceType\n\n  if (isNestedDelete) {\n    if (logs) {\n      payload.logger.info(\n        `- This deletion occurred on a nested field of ${resourceType}. Nested fields are not yet supported.`,\n      )\n    }\n  }\n\n  if (!isNestedDelete) {\n    if (logs) {\n      payload.logger.info(\n        `- A '${resourceType}' resource was deleted in Stripe, now deleting '${collectionSlug}' document in Payload with Stripe ID: '${stripeID}'...`,\n      )\n    }\n\n    try {\n      const payloadQuery = await payload.find({\n        collection: collectionSlug,\n        limit: 1,\n        overrideAccess: true,\n        pagination: false,\n        where: {\n          stripeID: {\n            equals: stripeID,\n          },\n        },\n      })\n\n      const foundDoc = payloadQuery.docs[0] as any\n\n      if (!foundDoc) {\n        if (logs) {\n          payload.logger.info(\n            `- Nothing to delete, no existing document found with Stripe ID: '${stripeID}'.`,\n          )\n        }\n      }\n\n      if (foundDoc) {\n        if (logs) {\n          payload.logger.info(`- Deleting Payload document with ID: '${foundDoc.id}'...`)\n        }\n\n        try {\n          // eslint-disable-next-line @typescript-eslint/no-floating-promises\n          payload.delete({\n            id: foundDoc.id,\n            collection: collectionSlug,\n            overrideAccess: true,\n          })\n\n          // NOTE: the `afterDelete` hook will trigger, which will attempt to delete the document from Stripe and safely error out\n          // There is no known way of preventing this from happening. In other hooks we use the `skipSync` field, but here the document is already deleted.\n          if (logs) {\n            payload.logger.info(\n              `- ✅ Successfully deleted Payload document with ID: '${foundDoc.id}'.`,\n            )\n          }\n        } catch (error: unknown) {\n          const msg = error instanceof Error ? error.message : error\n          if (logs) {\n            payload.logger.error(`Error deleting document: ${msg}`)\n          }\n        }\n      }\n    } catch (error: unknown) {\n      const msg = error instanceof Error ? error.message : error\n      if (logs) {\n        payload.logger.error(`Error deleting document: ${msg}`)\n      }\n    }\n  }\n}\n"],"names":["handleDeleted","args","event","payload","pluginConfig","resourceType","syncConfig","logs","collectionSlug","collection","id","stripeID","object","eventObject","data","isNestedDelete","logger","info","payloadQuery","find","limit","overrideAccess","pagination","where","equals","foundDoc","docs","delete","error","msg","Error","message"],"mappings":"AASA,OAAO,MAAMA,gBAA+B,OAAOC;IACjD,MAAM,EAAEC,KAAK,EAAEC,OAAO,EAAEC,YAAY,EAAEC,YAAY,EAAEC,UAAU,EAAE,GAAGL;IAEnE,MAAM,EAAEM,IAAI,EAAE,GAAGH,gBAAgB,CAAC;IAElC,MAAMI,iBAAiBF,YAAYG;IAEnC,MAAM,EACJC,IAAIC,QAAQ,EACZC,QAAQC,WAAW,EACpB,GAAQX,OAAOY,MAAMF,UAAU,CAAC;IAEjC,qFAAqF;IACrF,MAAMG,iBAAiBF,gBAAgBR;IAEvC,IAAIU,gBAAgB;QAClB,IAAIR,MAAM;YACRJ,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,8CAA8C,EAAEZ,aAAa,sCAAsC,CAAC;QAEzG;IACF;IAEA,IAAI,CAACU,gBAAgB;QACnB,IAAIR,MAAM;YACRJ,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,KAAK,EAAEZ,aAAa,gDAAgD,EAAEG,eAAe,uCAAuC,EAAEG,SAAS,IAAI,CAAC;QAEjJ;QAEA,IAAI;YACF,MAAMO,eAAe,MAAMf,QAAQgB,IAAI,CAAC;gBACtCV,YAAYD;gBACZY,OAAO;gBACPC,gBAAgB;gBAChBC,YAAY;gBACZC,OAAO;oBACLZ,UAAU;wBACRa,QAAQb;oBACV;gBACF;YACF;YAEA,MAAMc,WAAWP,aAAaQ,IAAI,CAAC,EAAE;YAErC,IAAI,CAACD,UAAU;gBACb,IAAIlB,MAAM;oBACRJ,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,iEAAiE,EAAEN,SAAS,EAAE,CAAC;gBAEpF;YACF;YAEA,IAAIc,UAAU;gBACZ,IAAIlB,MAAM;oBACRJ,QAAQa,MAAM,CAACC,IAAI,CAAC,CAAC,sCAAsC,EAAEQ,SAASf,EAAE,CAAC,IAAI,CAAC;gBAChF;gBAEA,IAAI;oBACF,mEAAmE;oBACnEP,QAAQwB,MAAM,CAAC;wBACbjB,IAAIe,SAASf,EAAE;wBACfD,YAAYD;wBACZa,gBAAgB;oBAClB;oBAEA,wHAAwH;oBACxH,iJAAiJ;oBACjJ,IAAId,MAAM;wBACRJ,QAAQa,MAAM,CAACC,IAAI,CACjB,CAAC,oDAAoD,EAAEQ,SAASf,EAAE,CAAC,EAAE,CAAC;oBAE1E;gBACF,EAAE,OAAOkB,OAAgB;oBACvB,MAAMC,MAAMD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAGH;oBACrD,IAAIrB,MAAM;wBACRJ,QAAQa,MAAM,CAACY,KAAK,CAAC,CAAC,yBAAyB,EAAEC,KAAK;oBACxD;gBACF;YACF;QACF,EAAE,OAAOD,OAAgB;YACvB,MAAMC,MAAMD,iBAAiBE,QAAQF,MAAMG,OAAO,GAAGH;YACrD,IAAIrB,MAAM;gBACRJ,QAAQa,MAAM,CAACY,KAAK,CAAC,CAAC,yBAAyB,EAAEC,KAAK;YACxD;QACF;IACF;AACF,EAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@payloadcms/plugin-stripe",
-  "version": "4.0.0-canary.35",
+  "version": "4.0.0-canary.37",
   "description": "Stripe plugin for Payload",
   "keywords": [
     "payload",
@@ -55,19 +55,19 @@
     "lodash.get": "^4.4.2",
     "stripe": "^10.2.0",
     "uuid": "14.0.0",
-    "@payloadcms/translations": "4.0.0-canary.35",
-    "@payloadcms/ui": "4.0.0-canary.35"
+    "@payloadcms/translations": "4.0.0-canary.37",
+    "@payloadcms/ui": "4.0.0-canary.37"
   },
   "devDependencies": {
     "@types/lodash.get": "^4.4.7",
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "@payloadcms/eslint-config": "3.28.0",
-    "@payloadcms/next": "4.0.0-canary.35",
-    "payload": "4.0.0-canary.35"
+    "@payloadcms/next": "4.0.0-canary.37",
+    "payload": "4.0.0-canary.37"
   },
   "peerDependencies": {
-    "payload": "4.0.0-canary.35"
+    "payload": "4.0.0-canary.37"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/"
@@ -79,7 +79,7 @@
     "build:swc": "swc ./src -d ./dist --config-file .swcrc --strip-leading-paths",
     "build:types": "tsc --emitDeclarationOnly --outDir dist",
     "clean": "rimraf -g {dist,*.tsbuildinfo}",
-    "copyfiles": "copyfiles -u 1 \"src/**/*.{html,css,scss,ttf,woff,woff2,eot,svg,jpg,png,json}\" dist/",
+    "copyfiles": "copyfiles -u 1 -e \"**/*.spec.*\" \"src/**/*.{html,css,scss,ttf,woff,woff2,eot,svg,jpg,png,json}\" dist/",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix"
   }

package/dist/index.spec.js

@@ -1,73 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { stripePlugin } from './index.js';
-const createBaseConfig = ()=>({
-        collections: []
-    });
-const getStripeRESTEndpoints = async (pluginConfig)=>{
-    const transformedConfig = await stripePlugin(pluginConfig)(createBaseConfig());
-    return transformedConfig.endpoints?.filter(({ path })=>path === '/stripe/rest') ?? [];
-};
-describe('stripePlugin REST endpoint registration', ()=>{
-    it('should not register the REST endpoint when the option is absent', async ()=>{
-        const endpoints = await getStripeRESTEndpoints({
-            stripeSecretKey: 'sk_test_example'
-        });
-        expect(endpoints).toHaveLength(0);
-    });
-    it('should treat false from an untyped configuration as disabled', async ()=>{
-        const endpoints = await getStripeRESTEndpoints({
-            // @ts-expect-error -- omission is the supported way to disable the endpoint.
-            rest: false,
-            stripeSecretKey: 'sk_test_example'
-        });
-        expect(endpoints).toHaveLength(0);
-    });
-    it('should register exactly one POST endpoint for a valid REST configuration', async ()=>{
-        const endpoints = await getStripeRESTEndpoints({
-            rest: {
-                allowedMethods: [
-                    'subscriptions.list'
-                ]
-            },
-            stripeSecretKey: 'sk_test_example'
-        });
-        expect(endpoints).toHaveLength(1);
-        expect(endpoints[0]?.method).toBe('post');
-    });
-    it.each([
-        [
-            'the legacy boolean form',
-            true
-        ],
-        [
-            'an empty allowlist',
-            {
-                allowedMethods: []
-            }
-        ],
-        [
-            'a wildcard method',
-            {
-                allowedMethods: [
-                    'subscriptions.*'
-                ]
-            }
-        ],
-        [
-            'a non-string method',
-            {
-                allowedMethods: [
-                    123
-                ]
-            }
-        ]
-    ])('should reject %s during plugin transformation', async (_description, rest)=>{
-        const invalidConfig = {
-            rest,
-            stripeSecretKey: 'sk_test_example'
-        };
-        expect(()=>stripePlugin(invalidConfig)(createBaseConfig())).toThrow('The Stripe REST endpoint now requires an object with a non-empty allowedMethods array');
-    });
-});
-
-//# sourceMappingURL=index.spec.js.map

package/dist/index.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.spec.ts"],"sourcesContent":["import type { Config } from 'payload'\n\nimport { describe, expect, it } from 'vitest'\n\nimport type { StripePluginConfig } from './types.js'\n\nimport { stripePlugin } from './index.js'\n\nconst createBaseConfig = (): Config => ({ collections: [] })\n\nconst getStripeRESTEndpoints = async (pluginConfig: StripePluginConfig) => {\n  const transformedConfig = await stripePlugin(pluginConfig)(createBaseConfig())\n\n  return transformedConfig.endpoints?.filter(({ path }) => path === '/stripe/rest') ?? []\n}\n\ndescribe('stripePlugin REST endpoint registration', () => {\n  it('should not register the REST endpoint when the option is absent', async () => {\n    const endpoints = await getStripeRESTEndpoints({ stripeSecretKey: 'sk_test_example' })\n\n    expect(endpoints).toHaveLength(0)\n  })\n\n  it('should treat false from an untyped configuration as disabled', async () => {\n    const endpoints = await getStripeRESTEndpoints({\n      // @ts-expect-error -- omission is the supported way to disable the endpoint.\n      rest: false,\n      stripeSecretKey: 'sk_test_example',\n    })\n\n    expect(endpoints).toHaveLength(0)\n  })\n\n  it('should register exactly one POST endpoint for a valid REST configuration', async () => {\n    const endpoints = await getStripeRESTEndpoints({\n      rest: { allowedMethods: ['subscriptions.list'] },\n      stripeSecretKey: 'sk_test_example',\n    })\n\n    expect(endpoints).toHaveLength(1)\n    expect(endpoints[0]?.method).toBe('post')\n  })\n\n  it.each([\n    ['the legacy boolean form', true],\n    ['an empty allowlist', { allowedMethods: [] }],\n    ['a wildcard method', { allowedMethods: ['subscriptions.*'] }],\n    ['a non-string method', { allowedMethods: [123] }],\n  ])('should reject %s during plugin transformation', async (_description, rest) => {\n    const invalidConfig = {\n      rest,\n      stripeSecretKey: 'sk_test_example',\n    } as unknown as StripePluginConfig\n\n    expect(() => stripePlugin(invalidConfig)(createBaseConfig())).toThrow(\n      'The Stripe REST endpoint now requires an object with a non-empty allowedMethods array',\n    )\n  })\n})\n"],"names":["describe","expect","it","stripePlugin","createBaseConfig","collections","getStripeRESTEndpoints","pluginConfig","transformedConfig","endpoints","filter","path","stripeSecretKey","toHaveLength","rest","allowedMethods","method","toBe","each","_description","invalidConfig","toThrow"],"mappings":"AAEA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAI7C,SAASC,YAAY,QAAQ,aAAY;AAEzC,MAAMC,mBAAmB,IAAe,CAAA;QAAEC,aAAa,EAAE;IAAC,CAAA;AAE1D,MAAMC,yBAAyB,OAAOC;IACpC,MAAMC,oBAAoB,MAAML,aAAaI,cAAcH;IAE3D,OAAOI,kBAAkBC,SAAS,EAAEC,OAAO,CAAC,EAAEC,IAAI,EAAE,GAAKA,SAAS,mBAAmB,EAAE;AACzF;AAEAX,SAAS,2CAA2C;IAClDE,GAAG,mEAAmE;QACpE,MAAMO,YAAY,MAAMH,uBAAuB;YAAEM,iBAAiB;QAAkB;QAEpFX,OAAOQ,WAAWI,YAAY,CAAC;IACjC;IAEAX,GAAG,gEAAgE;QACjE,MAAMO,YAAY,MAAMH,uBAAuB;YAC7C,6EAA6E;YAC7EQ,MAAM;YACNF,iBAAiB;QACnB;QAEAX,OAAOQ,WAAWI,YAAY,CAAC;IACjC;IAEAX,GAAG,4EAA4E;QAC7E,MAAMO,YAAY,MAAMH,uBAAuB;YAC7CQ,MAAM;gBAAEC,gBAAgB;oBAAC;iBAAqB;YAAC;YAC/CH,iBAAiB;QACnB;QAEAX,OAAOQ,WAAWI,YAAY,CAAC;QAC/BZ,OAAOQ,SAAS,CAAC,EAAE,EAAEO,QAAQC,IAAI,CAAC;IACpC;IAEAf,GAAGgB,IAAI,CAAC;QACN;YAAC;YAA2B;SAAK;QACjC;YAAC;YAAsB;gBAAEH,gBAAgB,EAAE;YAAC;SAAE;QAC9C;YAAC;YAAqB;gBAAEA,gBAAgB;oBAAC;iBAAkB;YAAC;SAAE;QAC9D;YAAC;YAAuB;gBAAEA,gBAAgB;oBAAC;iBAAI;YAAC;SAAE;KACnD,EAAE,iDAAiD,OAAOI,cAAcL;QACvE,MAAMM,gBAAgB;YACpBN;YACAF,iBAAiB;QACnB;QAEAX,OAAO,IAAME,aAAaiB,eAAehB,qBAAqBiB,OAAO,CACnE;IAEJ;AACF"}

package/dist/routes/rest.spec.js

@@ -1,275 +0,0 @@
-import { UnauthorizedError } from 'payload';
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-const mocks = vi.hoisted(()=>({
-        addDataAndFileToRequest: vi.fn(),
-        canAccessAdmin: vi.fn(),
-        stripeProxy: vi.fn()
-    }));
-vi.mock('payload', async (importOriginal)=>{
-    const payload = await importOriginal();
-    return {
-        ...payload,
-        addDataAndFileToRequest: mocks.addDataAndFileToRequest,
-        canAccessAdmin: mocks.canAccessAdmin
-    };
-});
-vi.mock('../utilities/stripeProxy.js', ()=>({
-        stripeProxy: mocks.stripeProxy
-    }));
-import { stripeREST } from './rest.js';
-const loggerError = vi.fn();
-const createPluginConfig = ({ access } = {})=>({
-        rest: {
-            access,
-            allowedMethods: [
-                'subscriptions.list'
-            ]
-        },
-        stripeSecretKey: 'sk_test_example',
-        sync: []
-    });
-const createRequest = ({ stripeArgs = [], stripeMethod = 'subscriptions.list', user = {
-    collection: 'users',
-    id: 'user-1'
-} } = {})=>({
-        data: {
-            stripeArgs,
-            stripeMethod
-        },
-        payload: {
-            logger: {
-                error: loggerError
-            }
-        },
-        user
-    });
-describe('stripeREST', ()=>{
-    beforeEach(()=>{
-        vi.clearAllMocks();
-        mocks.addDataAndFileToRequest.mockResolvedValue(undefined);
-        mocks.canAccessAdmin.mockResolvedValue(undefined);
-        mocks.stripeProxy.mockResolvedValue({
-            data: {
-                id: 'sub_123'
-            },
-            status: 200
-        });
-    });
-    it('should return 401 for an anonymous request without invoking Stripe', async ()=>{
-        const req = createRequest({
-            user: null
-        });
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        expect(response.status).toBe(401);
-        expect(mocks.addDataAndFileToRequest).toHaveBeenCalledWith(req);
-        expect(mocks.canAccessAdmin).not.toHaveBeenCalled();
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it('should return 403 when default admin access denies the user', async ()=>{
-        mocks.canAccessAdmin.mockRejectedValue(new UnauthorizedError());
-        const req = createRequest();
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        expect(response.status).toBe(403);
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it('should return a generic 500 when default admin access throws unexpectedly', async ()=>{
-        const adminAccessError = new Error('sensitive admin access detail');
-        mocks.canAccessAdmin.mockRejectedValue(adminAccessError);
-        const req = createRequest();
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        const body = await response.json();
-        expect(response.status).toBe(500);
-        expect(body).toEqual({
-            message: 'Internal server error'
-        });
-        expect(JSON.stringify(body)).not.toContain('sensitive admin access detail');
-        expect(loggerError).toHaveBeenCalledWith({
-            err: adminAccessError,
-            msg: 'An unexpected error occurred in the Stripe plugin REST handler.'
-        });
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it('should invoke an exactly listed method for an admin user', async ()=>{
-        const req = createRequest({
-            stripeArgs: [
-                {
-                    limit: 10
-                }
-            ]
-        });
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        expect(response.status).toBe(200);
-        expect(mocks.stripeProxy).toHaveBeenCalledWith({
-            stripeArgs: [
-                {
-                    limit: 10
-                }
-            ],
-            stripeMethod: 'subscriptions.list',
-            stripeSecretKey: 'sk_test_example'
-        });
-    });
-    it('should allow a non-admin when an asynchronous custom access callback permits it', async ()=>{
-        const access = vi.fn(async ()=>true);
-        const req = createRequest();
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig({
-                access
-            }),
-            req
-        });
-        expect(response.status).toBe(200);
-        expect(access).toHaveBeenCalledWith({
-            req
-        });
-        expect(mocks.canAccessAdmin).not.toHaveBeenCalled();
-    });
-    it('should return 403 when custom access denies the user', async ()=>{
-        const access = vi.fn(async ()=>false);
-        const req = createRequest();
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig({
-                access
-            }),
-            req
-        });
-        expect(response.status).toBe(403);
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it('should return a generic 500 when custom access throws', async ()=>{
-        const access = vi.fn(async ()=>{
-            throw new Error('sensitive access detail');
-        });
-        const req = createRequest();
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig({
-                access
-            }),
-            req
-        });
-        const body = await response.text();
-        expect(response.status).toBe(500);
-        expect(body).not.toContain('sensitive access detail');
-        expect(loggerError).toHaveBeenCalledWith({
-            err: expect.any(Error),
-            msg: 'An unexpected error occurred in the Stripe plugin REST handler.'
-        });
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it.each([
-        'customers.list',
-        'subscriptions.cancel',
-        'subscriptions.*'
-    ])('should return 400 for unlisted method %s without invoking Stripe', async (stripeMethod)=>{
-        const req = createRequest({
-            stripeMethod
-        });
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        expect(response.status).toBe(400);
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it.each([
-        [
-            ''
-        ],
-        [
-            '   '
-        ],
-        [
-            123
-        ],
-        [
-            null
-        ]
-    ])('should return 400 for malformed method %s without invoking Stripe', async (stripeMethod)=>{
-        const req = createRequest({
-            stripeMethod
-        });
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        expect(response.status).toBe(400);
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it('should return 400 for a missing method without invoking Stripe', async ()=>{
-        const req = createRequest();
-        delete req.data?.stripeMethod;
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        expect(response.status).toBe(400);
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it('should return 400 for non-array Stripe arguments without invoking Stripe', async ()=>{
-        const req = createRequest({
-            stripeArgs: {
-                limit: 10
-            }
-        });
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        expect(response.status).toBe(400);
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it('should evaluate access before revealing whether a method is listed', async ()=>{
-        mocks.canAccessAdmin.mockRejectedValue(new UnauthorizedError());
-        const req = createRequest({
-            stripeMethod: 'customers.delete'
-        });
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        expect(response.status).toBe(403);
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-    it('should preserve the Stripe proxy response status and body after all guards pass', async ()=>{
-        mocks.stripeProxy.mockResolvedValue({
-            message: 'Stripe request failed',
-            status: 404
-        });
-        const req = createRequest();
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        expect(response.status).toBe(404);
-        expect(await response.json()).toEqual({
-            message: 'Stripe request failed',
-            status: 404
-        });
-    });
-    it('should return a generic 500 when request parsing fails', async ()=>{
-        mocks.addDataAndFileToRequest.mockRejectedValue(new Error('sensitive parser detail'));
-        const req = createRequest();
-        const response = await stripeREST({
-            pluginConfig: createPluginConfig(),
-            req
-        });
-        const body = await response.text();
-        expect(response.status).toBe(500);
-        expect(body).not.toContain('sensitive parser detail');
-        expect(mocks.stripeProxy).not.toHaveBeenCalled();
-    });
-});
-
-//# sourceMappingURL=rest.spec.js.map

package/dist/routes/rest.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/routes/rest.spec.ts"],"sourcesContent":["import type { PayloadRequest } from 'payload'\n\nimport { UnauthorizedError } from 'payload'\nimport { beforeEach, describe, expect, it, vi } from 'vitest'\n\nimport type { SanitizedStripePluginConfig, StripeRESTAccess } from '../types.js'\n\nconst mocks = vi.hoisted(() => ({\n  addDataAndFileToRequest: vi.fn(),\n  canAccessAdmin: vi.fn(),\n  stripeProxy: vi.fn(),\n}))\n\nvi.mock('payload', async (importOriginal) => {\n  const payload = await importOriginal<typeof import('payload')>()\n\n  return {\n    ...payload,\n    addDataAndFileToRequest: mocks.addDataAndFileToRequest,\n    canAccessAdmin: mocks.canAccessAdmin,\n  }\n})\n\nvi.mock('../utilities/stripeProxy.js', () => ({\n  stripeProxy: mocks.stripeProxy,\n}))\n\nimport { stripeREST } from './rest.js'\n\nconst loggerError = vi.fn()\n\nconst createPluginConfig = ({\n  access,\n}: {\n  access?: StripeRESTAccess\n} = {}): SanitizedStripePluginConfig => ({\n  rest: {\n    access,\n    allowedMethods: ['subscriptions.list'],\n  },\n  stripeSecretKey: 'sk_test_example',\n  sync: [],\n})\n\nconst createRequest = ({\n  stripeArgs = [],\n  stripeMethod = 'subscriptions.list',\n  user = { collection: 'users', id: 'user-1' },\n}: {\n  stripeArgs?: unknown\n  stripeMethod?: unknown\n  user?: null | { collection: string; id: string }\n} = {}): PayloadRequest =>\n  ({\n    data: { stripeArgs, stripeMethod },\n    payload: {\n      logger: { error: loggerError },\n    },\n    user,\n  }) as unknown as PayloadRequest\n\ndescribe('stripeREST', () => {\n  beforeEach(() => {\n    vi.clearAllMocks()\n    mocks.addDataAndFileToRequest.mockResolvedValue(undefined)\n    mocks.canAccessAdmin.mockResolvedValue(undefined)\n    mocks.stripeProxy.mockResolvedValue({ data: { id: 'sub_123' }, status: 200 })\n  })\n\n  it('should return 401 for an anonymous request without invoking Stripe', async () => {\n    const req = createRequest({ user: null })\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n\n    expect(response.status).toBe(401)\n    expect(mocks.addDataAndFileToRequest).toHaveBeenCalledWith(req)\n    expect(mocks.canAccessAdmin).not.toHaveBeenCalled()\n    expect(mocks.stripeProxy).not.toHaveBeenCalled()\n  })\n\n  it('should return 403 when default admin access denies the user', async () => {\n    mocks.canAccessAdmin.mockRejectedValue(new UnauthorizedError())\n    const req = createRequest()\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n\n    expect(response.status).toBe(403)\n    expect(mocks.stripeProxy).not.toHaveBeenCalled()\n  })\n\n  it('should return a generic 500 when default admin access throws unexpectedly', async () => {\n    const adminAccessError = new Error('sensitive admin access detail')\n\n    mocks.canAccessAdmin.mockRejectedValue(adminAccessError)\n    const req = createRequest()\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n    const body = await response.json()\n\n    expect(response.status).toBe(500)\n    expect(body).toEqual({ message: 'Internal server error' })\n    expect(JSON.stringify(body)).not.toContain('sensitive admin access detail')\n    expect(loggerError).toHaveBeenCalledWith({\n      err: adminAccessError,\n      msg: 'An unexpected error occurred in the Stripe plugin REST handler.',\n    })\n    expect(mocks.stripeProxy).not.toHaveBeenCalled()\n  })\n\n  it('should invoke an exactly listed method for an admin user', async () => {\n    const req = createRequest({ stripeArgs: [{ limit: 10 }] })\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n\n    expect(response.status).toBe(200)\n    expect(mocks.stripeProxy).toHaveBeenCalledWith({\n      stripeArgs: [{ limit: 10 }],\n      stripeMethod: 'subscriptions.list',\n      stripeSecretKey: 'sk_test_example',\n    })\n  })\n\n  it('should allow a non-admin when an asynchronous custom access callback permits it', async () => {\n    const access = vi.fn(async () => true)\n    const req = createRequest()\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig({ access }), req })\n\n    expect(response.status).toBe(200)\n    expect(access).toHaveBeenCalledWith({ req })\n    expect(mocks.canAccessAdmin).not.toHaveBeenCalled()\n  })\n\n  it('should return 403 when custom access denies the user', async () => {\n    const access = vi.fn(async () => false)\n    const req = createRequest()\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig({ access }), req })\n\n    expect(response.status).toBe(403)\n    expect(mocks.stripeProxy).not.toHaveBeenCalled()\n  })\n\n  it('should return a generic 500 when custom access throws', async () => {\n    const access = vi.fn(async () => {\n      throw new Error('sensitive access detail')\n    })\n    const req = createRequest()\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig({ access }), req })\n    const body = await response.text()\n\n    expect(response.status).toBe(500)\n    expect(body).not.toContain('sensitive access detail')\n    expect(loggerError).toHaveBeenCalledWith({\n      err: expect.any(Error),\n      msg: 'An unexpected error occurred in the Stripe plugin REST handler.',\n    })\n    expect(mocks.stripeProxy).not.toHaveBeenCalled()\n  })\n\n  it.each(['customers.list', 'subscriptions.cancel', 'subscriptions.*'])(\n    'should return 400 for unlisted method %s without invoking Stripe',\n    async (stripeMethod) => {\n      const req = createRequest({ stripeMethod })\n\n      const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n\n      expect(response.status).toBe(400)\n      expect(mocks.stripeProxy).not.toHaveBeenCalled()\n    },\n  )\n\n  it.each([[''], ['   '], [123], [null]])(\n    'should return 400 for malformed method %s without invoking Stripe',\n    async (stripeMethod) => {\n      const req = createRequest({ stripeMethod })\n\n      const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n\n      expect(response.status).toBe(400)\n      expect(mocks.stripeProxy).not.toHaveBeenCalled()\n    },\n  )\n\n  it('should return 400 for a missing method without invoking Stripe', async () => {\n    const req = createRequest()\n\n    delete req.data?.stripeMethod\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n\n    expect(response.status).toBe(400)\n    expect(mocks.stripeProxy).not.toHaveBeenCalled()\n  })\n\n  it('should return 400 for non-array Stripe arguments without invoking Stripe', async () => {\n    const req = createRequest({ stripeArgs: { limit: 10 } })\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n\n    expect(response.status).toBe(400)\n    expect(mocks.stripeProxy).not.toHaveBeenCalled()\n  })\n\n  it('should evaluate access before revealing whether a method is listed', async () => {\n    mocks.canAccessAdmin.mockRejectedValue(new UnauthorizedError())\n    const req = createRequest({ stripeMethod: 'customers.delete' })\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n\n    expect(response.status).toBe(403)\n    expect(mocks.stripeProxy).not.toHaveBeenCalled()\n  })\n\n  it('should preserve the Stripe proxy response status and body after all guards pass', async () => {\n    mocks.stripeProxy.mockResolvedValue({ message: 'Stripe request failed', status: 404 })\n    const req = createRequest()\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n\n    expect(response.status).toBe(404)\n    expect(await response.json()).toEqual({ message: 'Stripe request failed', status: 404 })\n  })\n\n  it('should return a generic 500 when request parsing fails', async () => {\n    mocks.addDataAndFileToRequest.mockRejectedValue(new Error('sensitive parser detail'))\n    const req = createRequest()\n\n    const response = await stripeREST({ pluginConfig: createPluginConfig(), req })\n    const body = await response.text()\n\n    expect(response.status).toBe(500)\n    expect(body).not.toContain('sensitive parser detail')\n    expect(mocks.stripeProxy).not.toHaveBeenCalled()\n  })\n})\n"],"names":["UnauthorizedError","beforeEach","describe","expect","it","vi","mocks","hoisted","addDataAndFileToRequest","fn","canAccessAdmin","stripeProxy","mock","importOriginal","payload","stripeREST","loggerError","createPluginConfig","access","rest","allowedMethods","stripeSecretKey","sync","createRequest","stripeArgs","stripeMethod","user","collection","id","data","logger","error","clearAllMocks","mockResolvedValue","undefined","status","req","response","pluginConfig","toBe","toHaveBeenCalledWith","not","toHaveBeenCalled","mockRejectedValue","adminAccessError","Error","body","json","toEqual","message","JSON","stringify","toContain","err","msg","limit","text","any","each"],"mappings":"AAEA,SAASA,iBAAiB,QAAQ,UAAS;AAC3C,SAASC,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAI7D,MAAMC,QAAQD,GAAGE,OAAO,CAAC,IAAO,CAAA;QAC9BC,yBAAyBH,GAAGI,EAAE;QAC9BC,gBAAgBL,GAAGI,EAAE;QACrBE,aAAaN,GAAGI,EAAE;IACpB,CAAA;AAEAJ,GAAGO,IAAI,CAAC,WAAW,OAAOC;IACxB,MAAMC,UAAU,MAAMD;IAEtB,OAAO;QACL,GAAGC,OAAO;QACVN,yBAAyBF,MAAME,uBAAuB;QACtDE,gBAAgBJ,MAAMI,cAAc;IACtC;AACF;AAEAL,GAAGO,IAAI,CAAC,+BAA+B,IAAO,CAAA;QAC5CD,aAAaL,MAAMK,WAAW;IAChC,CAAA;AAEA,SAASI,UAAU,QAAQ,YAAW;AAEtC,MAAMC,cAAcX,GAAGI,EAAE;AAEzB,MAAMQ,qBAAqB,CAAC,EAC1BC,MAAM,EAGP,GAAG,CAAC,CAAC,GAAmC,CAAA;QACvCC,MAAM;YACJD;YACAE,gBAAgB;gBAAC;aAAqB;QACxC;QACAC,iBAAiB;QACjBC,MAAM,EAAE;IACV,CAAA;AAEA,MAAMC,gBAAgB,CAAC,EACrBC,aAAa,EAAE,EACfC,eAAe,oBAAoB,EACnCC,OAAO;IAAEC,YAAY;IAASC,IAAI;AAAS,CAAC,EAK7C,GAAG,CAAC,CAAC,GACH,CAAA;QACCC,MAAM;YAAEL;YAAYC;QAAa;QACjCX,SAAS;YACPgB,QAAQ;gBAAEC,OAAOf;YAAY;QAC/B;QACAU;IACF,CAAA;AAEFxB,SAAS,cAAc;IACrBD,WAAW;QACTI,GAAG2B,aAAa;QAChB1B,MAAME,uBAAuB,CAACyB,iBAAiB,CAACC;QAChD5B,MAAMI,cAAc,CAACuB,iBAAiB,CAACC;QACvC5B,MAAMK,WAAW,CAACsB,iBAAiB,CAAC;YAAEJ,MAAM;gBAAED,IAAI;YAAU;YAAGO,QAAQ;QAAI;IAC7E;IAEA/B,GAAG,sEAAsE;QACvE,MAAMgC,MAAMb,cAAc;YAAEG,MAAM;QAAK;QAEvC,MAAMW,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAE5EjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOG,MAAME,uBAAuB,EAAEgC,oBAAoB,CAACJ;QAC3DjC,OAAOG,MAAMI,cAAc,EAAE+B,GAAG,CAACC,gBAAgB;QACjDvC,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAEAtC,GAAG,+DAA+D;QAChEE,MAAMI,cAAc,CAACiC,iBAAiB,CAAC,IAAI3C;QAC3C,MAAMoC,MAAMb;QAEZ,MAAMc,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAE5EjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAEAtC,GAAG,6EAA6E;QAC9E,MAAMwC,mBAAmB,IAAIC,MAAM;QAEnCvC,MAAMI,cAAc,CAACiC,iBAAiB,CAACC;QACvC,MAAMR,MAAMb;QAEZ,MAAMc,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAC5E,MAAMU,OAAO,MAAMT,SAASU,IAAI;QAEhC5C,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAO2C,MAAME,OAAO,CAAC;YAAEC,SAAS;QAAwB;QACxD9C,OAAO+C,KAAKC,SAAS,CAACL,OAAOL,GAAG,CAACW,SAAS,CAAC;QAC3CjD,OAAOa,aAAawB,oBAAoB,CAAC;YACvCa,KAAKT;YACLU,KAAK;QACP;QACAnD,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAEAtC,GAAG,4DAA4D;QAC7D,MAAMgC,MAAMb,cAAc;YAAEC,YAAY;gBAAC;oBAAE+B,OAAO;gBAAG;aAAE;QAAC;QAExD,MAAMlB,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAE5EjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOG,MAAMK,WAAW,EAAE6B,oBAAoB,CAAC;YAC7ChB,YAAY;gBAAC;oBAAE+B,OAAO;gBAAG;aAAE;YAC3B9B,cAAc;YACdJ,iBAAiB;QACnB;IACF;IAEAjB,GAAG,mFAAmF;QACpF,MAAMc,SAASb,GAAGI,EAAE,CAAC,UAAY;QACjC,MAAM2B,MAAMb;QAEZ,MAAMc,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB,mBAAmB;gBAAEC;YAAO;YAAIkB;QAAI;QAEtFjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOe,QAAQsB,oBAAoB,CAAC;YAAEJ;QAAI;QAC1CjC,OAAOG,MAAMI,cAAc,EAAE+B,GAAG,CAACC,gBAAgB;IACnD;IAEAtC,GAAG,wDAAwD;QACzD,MAAMc,SAASb,GAAGI,EAAE,CAAC,UAAY;QACjC,MAAM2B,MAAMb;QAEZ,MAAMc,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB,mBAAmB;gBAAEC;YAAO;YAAIkB;QAAI;QAEtFjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAEAtC,GAAG,yDAAyD;QAC1D,MAAMc,SAASb,GAAGI,EAAE,CAAC;YACnB,MAAM,IAAIoC,MAAM;QAClB;QACA,MAAMT,MAAMb;QAEZ,MAAMc,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB,mBAAmB;gBAAEC;YAAO;YAAIkB;QAAI;QACtF,MAAMU,OAAO,MAAMT,SAASmB,IAAI;QAEhCrD,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAO2C,MAAML,GAAG,CAACW,SAAS,CAAC;QAC3BjD,OAAOa,aAAawB,oBAAoB,CAAC;YACvCa,KAAKlD,OAAOsD,GAAG,CAACZ;YAChBS,KAAK;QACP;QACAnD,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAEAtC,GAAGsD,IAAI,CAAC;QAAC;QAAkB;QAAwB;KAAkB,EACnE,oEACA,OAAOjC;QACL,MAAMW,MAAMb,cAAc;YAAEE;QAAa;QAEzC,MAAMY,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAE5EjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAGFtC,GAAGsD,IAAI,CAAC;QAAC;YAAC;SAAG;QAAE;YAAC;SAAM;QAAE;YAAC;SAAI;QAAE;YAAC;SAAK;KAAC,EACpC,qEACA,OAAOjC;QACL,MAAMW,MAAMb,cAAc;YAAEE;QAAa;QAEzC,MAAMY,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAE5EjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAGFtC,GAAG,kEAAkE;QACnE,MAAMgC,MAAMb;QAEZ,OAAOa,IAAIP,IAAI,EAAEJ;QAEjB,MAAMY,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAE5EjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAEAtC,GAAG,4EAA4E;QAC7E,MAAMgC,MAAMb,cAAc;YAAEC,YAAY;gBAAE+B,OAAO;YAAG;QAAE;QAEtD,MAAMlB,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAE5EjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAEAtC,GAAG,sEAAsE;QACvEE,MAAMI,cAAc,CAACiC,iBAAiB,CAAC,IAAI3C;QAC3C,MAAMoC,MAAMb,cAAc;YAAEE,cAAc;QAAmB;QAE7D,MAAMY,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAE5EjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;IAEAtC,GAAG,mFAAmF;QACpFE,MAAMK,WAAW,CAACsB,iBAAiB,CAAC;YAAEgB,SAAS;YAAyBd,QAAQ;QAAI;QACpF,MAAMC,MAAMb;QAEZ,MAAMc,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAE5EjC,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAO,MAAMkC,SAASU,IAAI,IAAIC,OAAO,CAAC;YAAEC,SAAS;YAAyBd,QAAQ;QAAI;IACxF;IAEA/B,GAAG,0DAA0D;QAC3DE,MAAME,uBAAuB,CAACmC,iBAAiB,CAAC,IAAIE,MAAM;QAC1D,MAAMT,MAAMb;QAEZ,MAAMc,WAAW,MAAMtB,WAAW;YAAEuB,cAAcrB;YAAsBmB;QAAI;QAC5E,MAAMU,OAAO,MAAMT,SAASmB,IAAI;QAEhCrD,OAAOkC,SAASF,MAAM,EAAEI,IAAI,CAAC;QAC7BpC,OAAO2C,MAAML,GAAG,CAACW,SAAS,CAAC;QAC3BjD,OAAOG,MAAMK,WAAW,EAAE8B,GAAG,CAACC,gBAAgB;IAChD;AACF"}

package/dist/utilities/deepen.spec.js

@@ -1,110 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { deepen, getSyncedFields } from './deepen.js';
-describe('Stripe field mappings', ()=>{
-    it('should build constrained mappings from owned values', ()=>{
-        const marker = 'constrainedStripeMapping';
-        const inheritedSource = 'constrainedStripeSource';
-        const originalDescriptor = Object.getOwnPropertyDescriptor(Object.prototype, marker);
-        let inheritedGetterCalls = 0;
-        let processStateChanged = false;
-        let nestedMapping;
-        let syncedMapping;
-        let webhookMapping;
-        try {
-            expect(()=>deepen({
-                    [`__proto__.${marker}`]: 'value'
-                })).toThrow('Invalid field path.');
-            nestedMapping = deepen(Object.assign(Object.create({
-                'ignored.value': 'inherited'
-            }), {
-                [`constructor.prototype.${marker}`]: 'local',
-                'profile.displayName': 'Ada'
-            }));
-            const data = Object.create({
-                get [inheritedSource] () {
-                    inheritedGetterCalls += 1;
-                    return 'inherited';
-                }
-            });
-            data.displayName = 'Ada';
-            syncedMapping = getSyncedFields({
-                data,
-                fields: [
-                    {
-                        fieldPath: inheritedSource,
-                        stripeProperty: 'metadata.inherited'
-                    },
-                    {
-                        fieldPath: 'constructor',
-                        stripeProperty: 'constructor'
-                    },
-                    {
-                        fieldPath: 'displayName',
-                        stripeProperty: `constructor.prototype.${marker}`
-                    }
-                ],
-                source: 'payload'
-            });
-            const stripeData = Object.create({
-                get [inheritedSource] () {
-                    inheritedGetterCalls += 1;
-                    return 'inherited';
-                }
-            });
-            stripeData.name = 'Ada';
-            webhookMapping = getSyncedFields({
-                data: stripeData,
-                fields: [
-                    {
-                        fieldPath: 'profile.inherited',
-                        stripeProperty: inheritedSource
-                    },
-                    {
-                        fieldPath: 'profile.displayName',
-                        stripeProperty: 'name'
-                    }
-                ],
-                source: 'stripe'
-            });
-            processStateChanged = Object.hasOwn(Object.prototype, marker);
-        } finally{
-            if (originalDescriptor) {
-                Object.defineProperty(Object.prototype, marker, originalDescriptor);
-            } else {
-                delete Object.prototype[marker];
-            }
-        }
-        expect(processStateChanged).toBe(false);
-        expect(inheritedGetterCalls).toBe(0);
-        expect(Object.getOwnPropertyDescriptor(Object.prototype, marker)).toEqual(originalDescriptor);
-        expect(nestedMapping).toEqual({
-            constructor: {
-                prototype: {
-                    [marker]: 'local'
-                }
-            },
-            profile: {
-                displayName: 'Ada'
-            }
-        });
-        expect(Object.hasOwn(nestedMapping, 'ignored')).toBe(false);
-        expect(syncedMapping).toEqual({
-            constructor: {
-                prototype: {
-                    [marker]: 'Ada'
-                }
-            },
-            metadata: {
-                inherited: undefined
-            }
-        });
-        expect(webhookMapping).toEqual({
-            profile: {
-                displayName: 'Ada',
-                inherited: undefined
-            }
-        });
-    });
-});
-
-//# sourceMappingURL=deepen.spec.js.map

package/dist/utilities/deepen.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/utilities/deepen.spec.ts"],"sourcesContent":["import { describe, expect, it } from 'vitest'\n\nimport { deepen, getSyncedFields } from './deepen.js'\n\ndescribe('Stripe field mappings', () => {\n  it('should build constrained mappings from owned values', () => {\n    const marker = 'constrainedStripeMapping'\n    const inheritedSource = 'constrainedStripeSource'\n    const originalDescriptor = Object.getOwnPropertyDescriptor(Object.prototype, marker)\n    let inheritedGetterCalls = 0\n    let processStateChanged = false\n    let nestedMapping: Record<string, unknown> | undefined\n    let syncedMapping: Record<string, unknown> | undefined\n    let webhookMapping: Record<string, unknown> | undefined\n\n    try {\n      expect(() => deepen({ [`__proto__.${marker}`]: 'value' })).toThrow('Invalid field path.')\n\n      nestedMapping = deepen(\n        Object.assign(Object.create({ 'ignored.value': 'inherited' }), {\n          [`constructor.prototype.${marker}`]: 'local',\n          'profile.displayName': 'Ada',\n        }),\n      )\n\n      const data = Object.create({\n        get [inheritedSource]() {\n          inheritedGetterCalls += 1\n          return 'inherited'\n        },\n      }) as Record<string, unknown>\n      data.displayName = 'Ada'\n\n      syncedMapping = getSyncedFields({\n        data,\n        fields: [\n          { fieldPath: inheritedSource, stripeProperty: 'metadata.inherited' },\n          { fieldPath: 'constructor', stripeProperty: 'constructor' },\n          {\n            fieldPath: 'displayName',\n            stripeProperty: `constructor.prototype.${marker}`,\n          },\n        ],\n        source: 'payload',\n      })\n\n      const stripeData = Object.create({\n        get [inheritedSource]() {\n          inheritedGetterCalls += 1\n          return 'inherited'\n        },\n      }) as Record<string, unknown>\n      stripeData.name = 'Ada'\n\n      webhookMapping = getSyncedFields({\n        data: stripeData,\n        fields: [\n          { fieldPath: 'profile.inherited', stripeProperty: inheritedSource },\n          { fieldPath: 'profile.displayName', stripeProperty: 'name' },\n        ],\n        source: 'stripe',\n      })\n      processStateChanged = Object.hasOwn(Object.prototype, marker)\n    } finally {\n      if (originalDescriptor) {\n        Object.defineProperty(Object.prototype, marker, originalDescriptor)\n      } else {\n        delete (Object.prototype as Record<string, unknown>)[marker]\n      }\n    }\n\n    expect(processStateChanged).toBe(false)\n    expect(inheritedGetterCalls).toBe(0)\n    expect(Object.getOwnPropertyDescriptor(Object.prototype, marker)).toEqual(originalDescriptor)\n    expect(nestedMapping).toEqual({\n      constructor: {\n        prototype: {\n          [marker]: 'local',\n        },\n      },\n      profile: {\n        displayName: 'Ada',\n      },\n    })\n    expect(Object.hasOwn(nestedMapping as object, 'ignored')).toBe(false)\n    expect(syncedMapping).toEqual({\n      constructor: {\n        prototype: {\n          [marker]: 'Ada',\n        },\n      },\n      metadata: {\n        inherited: undefined,\n      },\n    })\n    expect(webhookMapping).toEqual({\n      profile: {\n        displayName: 'Ada',\n        inherited: undefined,\n      },\n    })\n  })\n})\n"],"names":["describe","expect","it","deepen","getSyncedFields","marker","inheritedSource","originalDescriptor","Object","getOwnPropertyDescriptor","prototype","inheritedGetterCalls","processStateChanged","nestedMapping","syncedMapping","webhookMapping","toThrow","assign","create","data","displayName","fields","fieldPath","stripeProperty","source","stripeData","name","hasOwn","defineProperty","toBe","toEqual","profile","metadata","inherited","undefined"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,SAAQ;AAE7C,SAASC,MAAM,EAAEC,eAAe,QAAQ,cAAa;AAErDJ,SAAS,yBAAyB;IAChCE,GAAG,uDAAuD;QACxD,MAAMG,SAAS;QACf,MAAMC,kBAAkB;QACxB,MAAMC,qBAAqBC,OAAOC,wBAAwB,CAACD,OAAOE,SAAS,EAAEL;QAC7E,IAAIM,uBAAuB;QAC3B,IAAIC,sBAAsB;QAC1B,IAAIC;QACJ,IAAIC;QACJ,IAAIC;QAEJ,IAAI;YACFd,OAAO,IAAME,OAAO;oBAAE,CAAC,CAAC,UAAU,EAAEE,QAAQ,CAAC,EAAE;gBAAQ,IAAIW,OAAO,CAAC;YAEnEH,gBAAgBV,OACdK,OAAOS,MAAM,CAACT,OAAOU,MAAM,CAAC;gBAAE,iBAAiB;YAAY,IAAI;gBAC7D,CAAC,CAAC,sBAAsB,EAAEb,QAAQ,CAAC,EAAE;gBACrC,uBAAuB;YACzB;YAGF,MAAMc,OAAOX,OAAOU,MAAM,CAAC;gBACzB,IAAI,CAACZ,gBAAgB,IAAG;oBACtBK,wBAAwB;oBACxB,OAAO;gBACT;YACF;YACAQ,KAAKC,WAAW,GAAG;YAEnBN,gBAAgBV,gBAAgB;gBAC9Be;gBACAE,QAAQ;oBACN;wBAAEC,WAAWhB;wBAAiBiB,gBAAgB;oBAAqB;oBACnE;wBAAED,WAAW;wBAAeC,gBAAgB;oBAAc;oBAC1D;wBACED,WAAW;wBACXC,gBAAgB,CAAC,sBAAsB,EAAElB,QAAQ;oBACnD;iBACD;gBACDmB,QAAQ;YACV;YAEA,MAAMC,aAAajB,OAAOU,MAAM,CAAC;gBAC/B,IAAI,CAACZ,gBAAgB,IAAG;oBACtBK,wBAAwB;oBACxB,OAAO;gBACT;YACF;YACAc,WAAWC,IAAI,GAAG;YAElBX,iBAAiBX,gBAAgB;gBAC/Be,MAAMM;gBACNJ,QAAQ;oBACN;wBAAEC,WAAW;wBAAqBC,gBAAgBjB;oBAAgB;oBAClE;wBAAEgB,WAAW;wBAAuBC,gBAAgB;oBAAO;iBAC5D;gBACDC,QAAQ;YACV;YACAZ,sBAAsBJ,OAAOmB,MAAM,CAACnB,OAAOE,SAAS,EAAEL;QACxD,SAAU;YACR,IAAIE,oBAAoB;gBACtBC,OAAOoB,cAAc,CAACpB,OAAOE,SAAS,EAAEL,QAAQE;YAClD,OAAO;gBACL,OAAO,AAACC,OAAOE,SAAS,AAA4B,CAACL,OAAO;YAC9D;QACF;QAEAJ,OAAOW,qBAAqBiB,IAAI,CAAC;QACjC5B,OAAOU,sBAAsBkB,IAAI,CAAC;QAClC5B,OAAOO,OAAOC,wBAAwB,CAACD,OAAOE,SAAS,EAAEL,SAASyB,OAAO,CAACvB;QAC1EN,OAAOY,eAAeiB,OAAO,CAAC;YAC5B,aAAa;gBACXpB,WAAW;oBACT,CAACL,OAAO,EAAE;gBACZ;YACF;YACA0B,SAAS;gBACPX,aAAa;YACf;QACF;QACAnB,OAAOO,OAAOmB,MAAM,CAACd,eAAyB,YAAYgB,IAAI,CAAC;QAC/D5B,OAAOa,eAAegB,OAAO,CAAC;YAC5B,aAAa;gBACXpB,WAAW;oBACT,CAACL,OAAO,EAAE;gBACZ;YACF;YACA2B,UAAU;gBACRC,WAAWC;YACb;QACF;QACAjC,OAAOc,gBAAgBe,OAAO,CAAC;YAC7BC,SAAS;gBACPX,aAAa;gBACba,WAAWC;YACb;QACF;IACF;AACF"}

package/dist/utilities/sanitizeStripeRESTConfig.spec.js

@@ -1,116 +0,0 @@
-import { describe, expect, it, vi } from 'vitest';
-import { sanitizeStripeRESTConfig } from './sanitizeStripeRESTConfig.js';
-describe('sanitizeStripeRESTConfig', ()=>{
-    it('should disable the REST endpoint when configuration is absent', ()=>{
-        expect(sanitizeStripeRESTConfig({
-            rest: undefined
-        })).toBeUndefined();
-    });
-    it('should treat false from an untyped configuration as disabled', ()=>{
-        expect(sanitizeStripeRESTConfig({
-            rest: false
-        })).toBeUndefined();
-    });
-    it('should return a new configuration with exact, de-duplicated, frozen methods', ()=>{
-        const access = vi.fn(()=>true);
-        const rest = {
-            access,
-            allowedMethods: [
-                'subscriptions.list',
-                ' paymentIntents.retrieve ',
-                'subscriptions.list'
-            ]
-        };
-        const sanitized = sanitizeStripeRESTConfig({
-            rest
-        });
-        expect(sanitized).not.toBe(rest);
-        expect(sanitized).toEqual({
-            access,
-            allowedMethods: [
-                'subscriptions.list',
-                ' paymentIntents.retrieve '
-            ]
-        });
-        expect(Object.isFrozen(sanitized.allowedMethods)).toBe(true);
-    });
-    it.each([
-        [
-            'the legacy boolean form',
-            true
-        ],
-        [
-            'an array',
-            [
-                {
-                    allowedMethods: [
-                        'subscriptions.list'
-                    ]
-                }
-            ]
-        ],
-        [
-            'a missing allowlist',
-            {}
-        ],
-        [
-            'a non-array allowlist',
-            {
-                allowedMethods: 'subscriptions.list'
-            }
-        ],
-        [
-            'an empty allowlist',
-            {
-                allowedMethods: []
-            }
-        ],
-        [
-            'an empty method',
-            {
-                allowedMethods: [
-                    ''
-                ]
-            }
-        ],
-        [
-            'a whitespace-only method',
-            {
-                allowedMethods: [
-                    '   '
-                ]
-            }
-        ],
-        [
-            'a non-string method',
-            {
-                allowedMethods: [
-                    123
-                ]
-            }
-        ],
-        [
-            'a wildcard method',
-            {
-                allowedMethods: [
-                    'subscriptions.*'
-                ]
-            }
-        ],
-        [
-            'a non-function access value',
-            {
-                access: true,
-                allowedMethods: [
-                    'subscriptions.list'
-                ]
-            }
-        ]
-    ])('should reject %s', (_description, rest)=>{
-        expect(()=>sanitizeStripeRESTConfig({
-                rest
-            })).toThrow('The Stripe REST endpoint now requires an object with a non-empty allowedMethods array');
-    });
-});
-
-//# sourceMappingURL=sanitizeStripeRESTConfig.spec.js.map

package/dist/utilities/sanitizeStripeRESTConfig.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/utilities/sanitizeStripeRESTConfig.spec.ts"],"sourcesContent":["import { describe, expect, it, vi } from 'vitest'\n\nimport { sanitizeStripeRESTConfig } from './sanitizeStripeRESTConfig.js'\n\ndescribe('sanitizeStripeRESTConfig', () => {\n  it('should disable the REST endpoint when configuration is absent', () => {\n    expect(sanitizeStripeRESTConfig({ rest: undefined })).toBeUndefined()\n  })\n\n  it('should treat false from an untyped configuration as disabled', () => {\n    expect(sanitizeStripeRESTConfig({ rest: false })).toBeUndefined()\n  })\n\n  it('should return a new configuration with exact, de-duplicated, frozen methods', () => {\n    const access = vi.fn(() => true)\n    const rest = {\n      access,\n      allowedMethods: ['subscriptions.list', ' paymentIntents.retrieve ', 'subscriptions.list'],\n    } as const\n\n    const sanitized = sanitizeStripeRESTConfig({ rest })\n\n    expect(sanitized).not.toBe(rest)\n    expect(sanitized).toEqual({\n      access,\n      allowedMethods: ['subscriptions.list', ' paymentIntents.retrieve '],\n    })\n    expect(Object.isFrozen(sanitized.allowedMethods)).toBe(true)\n  })\n\n  it.each([\n    ['the legacy boolean form', true],\n    ['an array', [{ allowedMethods: ['subscriptions.list'] }]],\n    ['a missing allowlist', {}],\n    ['a non-array allowlist', { allowedMethods: 'subscriptions.list' }],\n    ['an empty allowlist', { allowedMethods: [] }],\n    ['an empty method', { allowedMethods: [''] }],\n    ['a whitespace-only method', { allowedMethods: ['   '] }],\n    ['a non-string method', { allowedMethods: [123] }],\n    ['a wildcard method', { allowedMethods: ['subscriptions.*'] }],\n    ['a non-function access value', { access: true, allowedMethods: ['subscriptions.list'] }],\n  ])('should reject %s', (_description, rest) => {\n    expect(() => sanitizeStripeRESTConfig({ rest })).toThrow(\n      'The Stripe REST endpoint now requires an object with a non-empty allowedMethods array',\n    )\n  })\n})\n"],"names":["describe","expect","it","vi","sanitizeStripeRESTConfig","rest","undefined","toBeUndefined","access","fn","allowedMethods","sanitized","not","toBe","toEqual","Object","isFrozen","each","_description","toThrow"],"mappings":"AAAA,SAASA,QAAQ,EAAEC,MAAM,EAAEC,EAAE,EAAEC,EAAE,QAAQ,SAAQ;AAEjD,SAASC,wBAAwB,QAAQ,gCAA+B;AAExEJ,SAAS,4BAA4B;IACnCE,GAAG,iEAAiE;QAClED,OAAOG,yBAAyB;YAAEC,MAAMC;QAAU,IAAIC,aAAa;IACrE;IAEAL,GAAG,gEAAgE;QACjED,OAAOG,yBAAyB;YAAEC,MAAM;QAAM,IAAIE,aAAa;IACjE;IAEAL,GAAG,+EAA+E;QAChF,MAAMM,SAASL,GAAGM,EAAE,CAAC,IAAM;QAC3B,MAAMJ,OAAO;YACXG;YACAE,gBAAgB;gBAAC;gBAAsB;gBAA6B;aAAqB;QAC3F;QAEA,MAAMC,YAAYP,yBAAyB;YAAEC;QAAK;QAElDJ,OAAOU,WAAWC,GAAG,CAACC,IAAI,CAACR;QAC3BJ,OAAOU,WAAWG,OAAO,CAAC;YACxBN;YACAE,gBAAgB;gBAAC;gBAAsB;aAA4B;QACrE;QACAT,OAAOc,OAAOC,QAAQ,CAACL,UAAUD,cAAc,GAAGG,IAAI,CAAC;IACzD;IAEAX,GAAGe,IAAI,CAAC;QACN;YAAC;YAA2B;SAAK;QACjC;YAAC;YAAY;gBAAC;oBAAEP,gBAAgB;wBAAC;qBAAqB;gBAAC;aAAE;SAAC;QAC1D;YAAC;YAAuB,CAAC;SAAE;QAC3B;YAAC;YAAyB;gBAAEA,gBAAgB;YAAqB;SAAE;QACnE;YAAC;YAAsB;gBAAEA,gBAAgB,EAAE;YAAC;SAAE;QAC9C;YAAC;YAAmB;gBAAEA,gBAAgB;oBAAC;iBAAG;YAAC;SAAE;QAC7C;YAAC;YAA4B;gBAAEA,gBAAgB;oBAAC;iBAAM;YAAC;SAAE;QACzD;YAAC;YAAuB;gBAAEA,gBAAgB;oBAAC;iBAAI;YAAC;SAAE;QAClD;YAAC;YAAqB;gBAAEA,gBAAgB;oBAAC;iBAAkB;YAAC;SAAE;QAC9D;YAAC;YAA+B;gBAAEF,QAAQ;gBAAME,gBAAgB;oBAAC;iBAAqB;YAAC;SAAE;KAC1F,EAAE,oBAAoB,CAACQ,cAAcb;QACpCJ,OAAO,IAAMG,yBAAyB;gBAAEC;YAAK,IAAIc,OAAO,CACtD;IAEJ;AACF"}