@plumbus/payments-stripe 0.2.0

package/dist/diagnose.js

@@ -0,0 +1,237 @@
+// ── Environment checks and webhook setup ──
+// `plumbus payments doctor --live` and `plumbus payments webhooks setup`.
+import Stripe from 'stripe';
+import { reconcileCatalog } from './catalog.js';
+import { STRIPE_SNAPSHOT_EVENTS, STRIPE_SNAPSHOT_SOURCES, STRIPE_THIN_EVENTS } from './events.js';
+import { keyMode } from './secrets.js';
+export const STRIPE_API_VERSION = Stripe.API_VERSION;
+export const STRIPE_DESTINATION_NAMES = {
+    snapshot: 'plumbus-payments-sellers',
+    thin: 'plumbus-payments-accounts',
+};
+const PLANS = [
+    {
+        name: STRIPE_DESTINATION_NAMES.snapshot,
+        format: 'snapshot',
+        events: STRIPE_SNAPSHOT_EVENTS,
+        sources: STRIPE_SNAPSHOT_SOURCES,
+    },
+    {
+        name: STRIPE_DESTINATION_NAMES.thin,
+        format: 'thin',
+        events: STRIPE_THIN_EVENTS,
+        sources: ['@self'],
+    },
+];
+const hasSources = (destination, sources) => sources.every((source) => destination.events_from?.includes(source));
+/** The destination doctor and setup look at: at the URL, with every source, when there is one. */
+function pick(named, plan, url) {
+    const atUrl = url ? named.filter((d) => d.webhook_endpoint?.url === url) : named;
+    const pool = atUrl.length > 0 ? atUrl : named;
+    return pool.find((d) => hasSources(d, plan.sources)) ?? pool[0];
+}
+export async function diagnoseStripe(input) {
+    const findings = [];
+    let key;
+    try {
+        key = await input.secretKey();
+        const mode = keyMode(key);
+        const production = process.env.NODE_ENV === 'production';
+        if (production && mode === 'test') {
+            findings.push({
+                level: 'error',
+                code: 'stripe_test_key_in_production',
+                message: 'NODE_ENV is production but the Stripe key is a test key',
+            });
+        }
+        if (!production && mode === 'live') {
+            findings.push({
+                level: 'warning',
+                code: 'stripe_live_key_outside_production',
+                message: 'A live Stripe key is configured outside production',
+            });
+        }
+        if (key.startsWith('sk_')) {
+            findings.push({
+                level: 'info',
+                code: 'stripe_use_restricted_key',
+                message: 'Consider a restricted key (rk_…) with only the permissions listed in docs/payments/stripe.md',
+            });
+        }
+    }
+    catch (err) {
+        findings.push({ level: 'error', code: 'stripe_key_invalid', message: messageOf(err) });
+        return findings;
+    }
+    try {
+        const secrets = await input.webhookSecrets();
+        if (secrets.length < 2) {
+            findings.push({
+                level: 'warning',
+                code: 'stripe_webhook_secrets_incomplete',
+                message: `Two event destinations sign with separate secrets; ${secrets.length} configured`,
+            });
+        }
+    }
+    catch (err) {
+        findings.push({
+            level: 'error',
+            code: 'stripe_webhook_secrets_missing',
+            message: messageOf(err),
+        });
+    }
+    const stripe = await input.client();
+    try {
+        await stripe.v2.core.accounts.list({ limit: 1 });
+    }
+    catch (err) {
+        findings.push({
+            level: 'error',
+            code: 'stripe_accounts_v2_unavailable',
+            message: `Accounts v2 is not usable with this key: ${messageOf(err)}. Finish Connect onboarding (platform profile) and use a key with Connect access.`,
+        });
+    }
+    try {
+        const destinations = (await stripe.v2.core.eventDestinations.list({ include: ['webhook_endpoint.url'], limit: 20 })).data;
+        for (const plan of PLANS) {
+            const { format, name } = plan;
+            const named = destinations.filter((d) => d.event_payload === format && d.name === name);
+            const found = pick(named, plan, input.webhookUrl);
+            if (found && named.length > 1) {
+                findings.push({
+                    level: 'warning',
+                    code: `stripe_${format}_destination_duplicate`,
+                    message: `${named.length} event destinations are named "${name}"; Stripe sends events to each. Keep ${found.id} and delete ${named
+                        .filter((d) => d !== found)
+                        .map((d) => `${d.id} (${d.webhook_endpoint?.url ?? 'no url'})`)
+                        .join(', ')}`,
+                });
+            }
+            if (!found) {
+                findings.push({
+                    level: 'error',
+                    code: `stripe_${format}_destination_missing`,
+                    message: `No ${format} event destination "${name}"; run plumbus payments webhooks setup --url <your webhook URL>`,
+                });
+                continue;
+            }
+            if (found.status !== 'enabled') {
+                findings.push({
+                    level: 'error',
+                    code: `stripe_${format}_destination_disabled`,
+                    message: `Event destination "${name}" is disabled`,
+                });
+            }
+            if (input.webhookUrl && found.webhook_endpoint?.url !== input.webhookUrl) {
+                findings.push({
+                    level: 'error',
+                    code: `stripe_${format}_destination_url`,
+                    message: `Event destination "${name}" points at ${found.webhook_endpoint?.url ?? '(none)'}, not ${input.webhookUrl}`,
+                });
+            }
+            if (!hasSources(found, plan.sources)) {
+                findings.push({
+                    level: 'error',
+                    code: `stripe_${format}_destination_sources`,
+                    message: `Event destination "${name}" takes events from ${(found.events_from ?? []).join(', ') || '(nothing)'}, not ${plan.sources.join(' and ')}; run plumbus payments webhooks setup again (Stripe cannot change the sources of a destination, so it makes a new one)`,
+                });
+            }
+            const missing = plan.events.filter((type) => !found.enabled_events.includes(type));
+            if (missing.length > 0) {
+                findings.push({
+                    level: 'error',
+                    code: `stripe_${format}_destination_events`,
+                    message: `Event destination "${name}" is missing: ${missing.join(', ')}; run plumbus payments webhooks setup again`,
+                });
+            }
+            if (format === 'snapshot' &&
+                found.snapshot_api_version &&
+                found.snapshot_api_version !== STRIPE_API_VERSION) {
+                findings.push({
+                    level: 'error',
+                    code: 'stripe_snapshot_version_mismatch',
+                    message: `Event destination "${name}" renders events as ${found.snapshot_api_version}; this package expects ${STRIPE_API_VERSION}`,
+                });
+            }
+        }
+    }
+    catch (err) {
+        findings.push({
+            level: 'error',
+            code: 'stripe_destinations_unreadable',
+            message: `Could not list event destinations: ${messageOf(err)}`,
+        });
+    }
+    if (input.catalog) {
+        try {
+            const { changes } = await reconcileCatalog(stripe, input.catalog, false);
+            if (changes.length > 0) {
+                findings.push({
+                    level: 'error',
+                    code: 'stripe_catalog_out_of_date',
+                    message: `The billing catalog at Stripe differs from billing in the config; run plumbus payments catalog sync. Differences: ${changes.join('; ')}`,
+                });
+            }
+        }
+        catch (err) {
+            findings.push({
+                level: 'error',
+                code: 'stripe_catalog_unreadable',
+                message: `Could not read the billing catalog: ${messageOf(err)}`,
+            });
+        }
+    }
+    return findings;
+}
+export async function setupStripeDestinations(stripe, url) {
+    const existing = (await stripe.v2.core.eventDestinations.list({ include: ['webhook_endpoint.url'], limit: 20 })).data;
+    const result = { destinations: [] };
+    for (const plan of PLANS) {
+        const found = existing.find((d) => d.name === plan.name &&
+            d.event_payload === plan.format &&
+            d.webhook_endpoint?.url === url &&
+            hasSources(d, plan.sources));
+        if (found) {
+            // Newer releases act on more events: add them to the destination in place.
+            const missing = plan.events.filter((type) => !found.enabled_events.includes(type));
+            if (missing.length > 0) {
+                await stripe.v2.core.eventDestinations.update(found.id, {
+                    enabled_events: [...new Set([...found.enabled_events, ...plan.events])],
+                });
+            }
+            result.destinations.push({
+                id: found.id,
+                name: plan.name,
+                format: plan.format,
+                url,
+                secret: null,
+                created: false,
+            });
+            continue;
+        }
+        const created = await stripe.v2.core.eventDestinations.create({
+            name: plan.name,
+            description: 'Created by @plumbus/payments-stripe',
+            type: 'webhook_endpoint',
+            event_payload: plan.format,
+            events_from: [...plan.sources],
+            enabled_events: [...plan.events],
+            ...(plan.format === 'snapshot' ? { snapshot_api_version: STRIPE_API_VERSION } : {}),
+            webhook_endpoint: { url },
+            include: ['webhook_endpoint.signing_secret', 'webhook_endpoint.url'],
+        });
+        result.destinations.push({
+            id: created.id,
+            name: plan.name,
+            format: plan.format,
+            url,
+            secret: created.webhook_endpoint?.signing_secret ?? null,
+            created: true,
+        });
+    }
+    return result;
+}
+export function messageOf(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=diagnose.js.map

package/dist/diagnose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../src/diagnose.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,0EAA0E;AAG1E,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAClG,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,WAAW,CAAC;AAErD,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,QAAQ,EAAE,0BAA0B;IACpC,IAAI,EAAE,2BAA2B;CACzB,CAAC;AASX,MAAM,KAAK,GAA+B;IACxC;QACE,IAAI,EAAE,wBAAwB,CAAC,QAAQ;QACvC,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,sBAAsB;QAC9B,OAAO,EAAE,uBAAuB;KACjC;IACD;QACE,IAAI,EAAE,wBAAwB,CAAC,IAAI;QACnC,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,CAAC,OAAO,CAAC;KACnB;CACF,CAAC;AAIF,MAAM,UAAU,GAAG,CAAC,WAAwB,EAAE,OAA0B,EAAE,EAAE,CAC1E,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAEvE,kGAAkG;AAClG,SAAS,IAAI,CACX,KAAoB,EACpB,IAAqB,EACrB,GAAuB;IAEvB,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAMpC;IACC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;QACzD,IAAI,UAAU,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,+BAA+B;gBACrC,OAAO,EAAE,yDAAyD;aACnE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,oCAAoC;gBAC1C,OAAO,EAAE,oDAAoD;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EACL,8FAA8F;aACjG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,mCAAmC;gBACzC,OAAO,EAAE,sDAAsD,OAAO,CAAC,MAAM,aAAa;aAC3F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,gCAAgC;YACtC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,gCAAgC;YACtC,OAAO,EAAE,4CAA4C,SAAS,CAAC,GAAG,CAAC,mFAAmF;SACvJ,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,CACnB,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAC9F,CAAC,IAAI,CAAC;QACP,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YACxF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,UAAU,MAAM,wBAAwB;oBAC9C,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,kCAAkC,IAAI,wCAAwC,KAAK,CAAC,EAAE,eAAe,KAAK;yBAC/H,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC;yBAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,gBAAgB,EAAE,GAAG,IAAI,QAAQ,GAAG,CAAC;yBAC9D,IAAI,CAAC,IAAI,CAAC,EAAE;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,UAAU,MAAM,sBAAsB;oBAC5C,OAAO,EAAE,MAAM,MAAM,uBAAuB,IAAI,iEAAiE;iBAClH,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,UAAU,MAAM,uBAAuB;oBAC7C,OAAO,EAAE,sBAAsB,IAAI,eAAe;iBACnD,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,gBAAgB,EAAE,GAAG,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBACzE,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,UAAU,MAAM,kBAAkB;oBACxC,OAAO,EAAE,sBAAsB,IAAI,eAAe,KAAK,CAAC,gBAAgB,EAAE,GAAG,IAAI,QAAQ,SAAS,KAAK,CAAC,UAAU,EAAE;iBACrH,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,UAAU,MAAM,sBAAsB;oBAC5C,OAAO,EAAE,sBAAsB,IAAI,uBAAuB,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,wHAAwH;iBACzQ,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACnF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,UAAU,MAAM,qBAAqB;oBAC3C,OAAO,EAAE,sBAAsB,IAAI,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C;iBACpH,CAAC,CAAC;YACL,CAAC;YACD,IACE,MAAM,KAAK,UAAU;gBACrB,KAAK,CAAC,oBAAoB;gBAC1B,KAAK,CAAC,oBAAoB,KAAK,kBAAkB,EACjD,CAAC;gBACD,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,kCAAkC;oBACxC,OAAO,EAAE,sBAAsB,IAAI,uBAAuB,KAAK,CAAC,oBAAoB,0BAA0B,kBAAkB,EAAE;iBACnI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,gCAAgC;YACtC,OAAO,EAAE,sCAAsC,SAAS,CAAC,GAAG,CAAC,EAAE;SAChE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,4BAA4B;oBAClC,OAAO,EAAE,qHAAqH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACnJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,uCAAuC,SAAS,CAAC,GAAG,CAAC,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,GAAW;IAEX,MAAM,QAAQ,GAAG,CACf,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAC9F,CAAC,IAAI,CAAC;IACP,MAAM,MAAM,GAAuB,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YACpB,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,MAAM;YAC/B,CAAC,CAAC,gBAAgB,EAAE,GAAG,KAAK,GAAG;YAC/B,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAC9B,CAAC;QACF,IAAI,KAAK,EAAE,CAAC;YACV,2EAA2E;YAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACnF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE;oBACtD,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;gBACvB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG;gBACH,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAC5D,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,qCAAqC;YAClD,IAAI,EAAE,kBAAkB;YACxB,aAAa,EAAE,IAAI,CAAC,MAAM;YAC1B,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAC9B,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,gBAAgB,EAAE,EAAE,GAAG,EAAE;YACzB,OAAO,EAAE,CAAC,iCAAiC,EAAE,sBAAsB,CAAC;SACrE,CAAC,CAAC;QACH,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;YACvB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG;YACH,MAAM,EAAE,OAAO,CAAC,gBAAgB,EAAE,cAAc,IAAI,IAAI;YACxD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,4 @@
+export declare function translateStripeError(err: unknown): unknown;
+/** Wrap an async provider method so Stripe errors come out as PlumbusErrors. */
+export declare function withStripeErrors<A extends unknown[], R>(fn: (...args: A) => Promise<R>): (...args: A) => Promise<R>;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAQA,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CA6B1D;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,OAAO,EAAE,EAAE,CAAC,EACrD,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAC7B,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAQ5B"}

package/dist/errors.js

@@ -0,0 +1,45 @@
+// ── Stripe errors → Plumbus errors ──
+// Capabilities surface provider failures to sellers, so Stripe's message and
+// codes are kept (e.g. "Amount must be at least $0.50 usd") while the error
+// becomes a structured PlumbusError the HTTP layer maps to a status.
+import { ErrorCode, PlumbusError } from '@plumbus/core';
+import Stripe from 'stripe';
+export function translateStripeError(err) {
+    if (!(err instanceof Stripe.errors.StripeError))
+        return err;
+    const metadata = {
+        reason: 'stripe_error',
+        stripeType: err.type,
+        ...(err.code ? { stripeCode: err.code } : {}),
+        ...(err.param ? { param: err.param } : {}),
+        ...(err.requestId ? { requestId: err.requestId } : {}),
+        ...(err.statusCode ? { statusCode: err.statusCode } : {}),
+    };
+    switch (err.type) {
+        case 'StripeInvalidRequestError':
+        case 'StripeCardError':
+            return new PlumbusError(ErrorCode.Validation, err.message, metadata);
+        case 'StripeIdempotencyError':
+            return new PlumbusError(ErrorCode.Conflict, err.message, metadata);
+        case 'StripeAuthenticationError':
+        case 'StripePermissionError':
+            return new PlumbusError(ErrorCode.Internal, `Stripe rejected the platform credentials: ${err.message}`, metadata);
+        default:
+            return new PlumbusError(ErrorCode.Internal, `Stripe request failed: ${err.message}`, {
+                ...metadata,
+                retryable: true,
+            });
+    }
+}
+/** Wrap an async provider method so Stripe errors come out as PlumbusErrors. */
+export function withStripeErrors(fn) {
+    return async (...args) => {
+        try {
+            return await fn(...args);
+        }
+        catch (err) {
+            throw translateStripeError(err);
+        }
+    };
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,6EAA6E;AAC7E,4EAA4E;AAC5E,qEAAqE;AAErE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,IAAI,CAAC,CAAC,GAAG,YAAY,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,OAAO,GAAG,CAAC;IAC5D,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,cAAc;QACtB,UAAU,EAAE,GAAG,CAAC,IAAI;QACpB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;IACF,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,2BAA2B,CAAC;QACjC,KAAK,iBAAiB;YACpB,OAAO,IAAI,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvE,KAAK,wBAAwB;YAC3B,OAAO,IAAI,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrE,KAAK,2BAA2B,CAAC;QACjC,KAAK,uBAAuB;YAC1B,OAAO,IAAI,YAAY,CACrB,SAAS,CAAC,QAAQ,EAClB,6CAA6C,GAAG,CAAC,OAAO,EAAE,EAC1D,QAAQ,CACT,CAAC;QACJ;YACE,OAAO,IAAI,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,0BAA0B,GAAG,CAAC,OAAO,EAAE,EAAE;gBACnF,GAAG,QAAQ;gBACX,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAC9B,EAA8B;IAE9B,OAAO,KAAK,EAAE,GAAG,IAAO,EAAE,EAAE;QAC1B,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/events.d.ts

@@ -0,0 +1,38 @@
+import type { ProviderEventRouting, VerifiedProviderEvent } from '@plumbus/payments';
+/** Snapshot (v1) event types the adapter acts on, from the platform and from sellers' accounts. */
+export declare const STRIPE_SNAPSHOT_EVENTS: readonly ["checkout.session.completed", "checkout.session.async_payment_succeeded", "checkout.session.async_payment_failed", "checkout.session.expired", "payment_intent.succeeded", "payment_intent.amount_capturable_updated", "payment_intent.payment_failed", "payment_intent.processing", "payment_intent.requires_action", "payment_intent.canceled", "charge.refunded", "charge.refund.updated", "refund.created", "refund.updated", "refund.failed", "charge.dispute.created", "charge.dispute.updated", "charge.dispute.closed", "charge.dispute.funds_withdrawn", "charge.dispute.funds_reinstated", "payment_method.attached", "payment_method.updated", "payment_method.detached", "customer.subscription.created", "customer.subscription.updated", "customer.subscription.deleted", "customer.subscription.paused", "customer.subscription.resumed", "invoice.finalized", "invoice.paid", "invoice.payment_failed", "invoice.voided", "invoice.marked_uncollectible", "transfer.created", "transfer.updated", "transfer.reversed", "payout.created", "payout.updated", "payout.paid", "payout.failed", "payout.canceled", "entitlements.active_entitlement_summary.updated"];
+/** Thin (v2) event types about sellers' v2 Accounts. */
+export declare const STRIPE_THIN_EVENTS: readonly ["v2.core.account.created", "v2.core.account.updated", "v2.core.account.closed", "v2.core.account[requirements].updated", "v2.core.account[configuration.merchant].updated", "v2.core.account[configuration.merchant].capability_status_updated", "v2.core.account[configuration.recipient].updated", "v2.core.account[configuration.recipient].capability_status_updated", "v2.core.account[defaults].updated", "v2.core.account[identity].updated"];
+/** Where the snapshot destination takes events from: the platform itself and every seller. */
+export declare const STRIPE_SNAPSHOT_SOURCES: readonly ["@self", "@accounts"];
+export declare function isRelevantStripeEvent(type: string): boolean;
+type Ref = string | {
+    id?: string;
+} | null | undefined;
+interface SnapshotObject {
+    id?: string;
+    object?: string;
+    metadata?: Record<string, string> | null;
+    customer?: Ref;
+    payment_intent?: Ref;
+    subscription?: Ref;
+    parent?: {
+        subscription_details?: {
+            subscription?: Ref;
+        } | null;
+    } | null;
+}
+/** Hints for finding the tenant of a platform-account event, read from the object itself. */
+export declare function routingOf(object: SnapshotObject | undefined): ProviderEventRouting;
+/**
+ * Verify `Stripe-Signature` against any of the configured secrets (one per
+ * destination, plus old secrets during a rotation), then normalize the body.
+ */
+export declare function verifyStripeWebhook(input: {
+    rawBody: Buffer;
+    headers: Record<string, string | string[] | undefined>;
+    secrets: readonly string[];
+    toleranceSeconds: number;
+}): VerifiedProviderEvent;
+export {};
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAGrF,mGAAmG;AACnG,eAAO,MAAM,sBAAsB,4nCA2CzB,CAAC;AAEX,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,gcAWrB,CAAC;AAEX,8FAA8F;AAC9F,eAAO,MAAM,uBAAuB,iCAAkC,CAAC;AAIvE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,KAAK,GAAG,GAAG,MAAM,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,CAAC;AAEvD,UAAU,cAAc;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,cAAc,CAAC,EAAE,GAAG,CAAC;IACrB,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,oBAAoB,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,GAAG,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1E;AAgCD,6FAA6F;AAC7F,wBAAgB,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,oBAAoB,CAYlF;AAaD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACvD,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,qBAAqB,CAyDxB"}

package/dist/events.js

@@ -0,0 +1,167 @@
+// ── Stripe webhook events ──
+// Two destinations feed one route:
+//  • snapshot events from the platform account (`@self`) and from sellers'
+//    accounts (`@accounts`): checkout, payments, refunds, disputes, saved
+//    methods, subscriptions, invoices, transfers, payouts, entitlements
+//  • thin v2 events about the sellers' v2 Accounts (`@self`): onboarding progress
+// Both use the same `Stripe-Signature` scheme, so the route verifies first and
+// only then looks at the body to tell the formats apart.
+import { ErrorCode, PlumbusError } from '@plumbus/core';
+import Stripe from 'stripe';
+/** Snapshot (v1) event types the adapter acts on, from the platform and from sellers' accounts. */
+export const STRIPE_SNAPSHOT_EVENTS = [
+    'checkout.session.completed',
+    'checkout.session.async_payment_succeeded',
+    'checkout.session.async_payment_failed',
+    'checkout.session.expired',
+    'payment_intent.succeeded',
+    'payment_intent.amount_capturable_updated',
+    'payment_intent.payment_failed',
+    'payment_intent.processing',
+    'payment_intent.requires_action',
+    'payment_intent.canceled',
+    'charge.refunded',
+    'charge.refund.updated',
+    'refund.created',
+    'refund.updated',
+    'refund.failed',
+    'charge.dispute.created',
+    'charge.dispute.updated',
+    'charge.dispute.closed',
+    'charge.dispute.funds_withdrawn',
+    'charge.dispute.funds_reinstated',
+    'payment_method.attached',
+    'payment_method.updated',
+    'payment_method.detached',
+    'customer.subscription.created',
+    'customer.subscription.updated',
+    'customer.subscription.deleted',
+    'customer.subscription.paused',
+    'customer.subscription.resumed',
+    'invoice.finalized',
+    'invoice.paid',
+    'invoice.payment_failed',
+    'invoice.voided',
+    'invoice.marked_uncollectible',
+    'transfer.created',
+    'transfer.updated',
+    'transfer.reversed',
+    'payout.created',
+    'payout.updated',
+    'payout.paid',
+    'payout.failed',
+    'payout.canceled',
+    'entitlements.active_entitlement_summary.updated',
+];
+/** Thin (v2) event types about sellers' v2 Accounts. */
+export const STRIPE_THIN_EVENTS = [
+    'v2.core.account.created',
+    'v2.core.account.updated',
+    'v2.core.account.closed',
+    'v2.core.account[requirements].updated',
+    'v2.core.account[configuration.merchant].updated',
+    'v2.core.account[configuration.merchant].capability_status_updated',
+    'v2.core.account[configuration.recipient].updated',
+    'v2.core.account[configuration.recipient].capability_status_updated',
+    'v2.core.account[defaults].updated',
+    'v2.core.account[identity].updated',
+];
+/** Where the snapshot destination takes events from: the platform itself and every seller. */
+export const STRIPE_SNAPSHOT_SOURCES = ['@self', '@accounts'];
+const RELEVANT = new Set([...STRIPE_SNAPSHOT_EVENTS, ...STRIPE_THIN_EVENTS]);
+export function isRelevantStripeEvent(type) {
+    return RELEVANT.has(type);
+}
+const refId = (value) => value == null ? null : typeof value === 'string' ? value : (value.id ?? null);
+const NO_ROUTING = {
+    tenantId: null,
+    customerId: null,
+    paymentId: null,
+    subscriptionId: null,
+};
+/** Hints for finding the tenant of a platform-account event, read from the object itself. */
+export function routingOf(object) {
+    if (!object)
+        return NO_ROUTING;
+    const kind = object.object;
+    return {
+        tenantId: object.metadata?.plumbus_tenant_id ?? null,
+        customerId: kind === 'customer' ? (object.id ?? null) : refId(object.customer),
+        paymentId: kind === 'payment_intent' ? (object.id ?? null) : refId(object.payment_intent),
+        subscriptionId: kind === 'subscription'
+            ? (object.id ?? null)
+            : (refId(object.subscription) ?? refId(object.parent?.subscription_details?.subscription)),
+    };
+}
+/** The object an event is about; entitlement summaries have no id of their own, only a customer. */
+function objectIdOf(object) {
+    if (!object)
+        return null;
+    if (object.object === 'entitlements.active_entitlement_summary')
+        return refId(object.customer);
+    return object.id ?? null;
+}
+function headerValue(value) {
+    return Array.isArray(value) ? value[0] : value;
+}
+/**
+ * Verify `Stripe-Signature` against any of the configured secrets (one per
+ * destination, plus old secrets during a rotation), then normalize the body.
+ */
+export function verifyStripeWebhook(input) {
+    const header = headerValue(input.headers['stripe-signature']);
+    if (!header) {
+        throw new PlumbusError(ErrorCode.Unauthorized, 'Missing Stripe-Signature header', {
+            reason: 'stripe_signature_missing',
+        });
+    }
+    const signature = Stripe.webhooks.signature;
+    const verified = input.secrets.some((secret) => {
+        try {
+            return (signature?.verifyHeader(input.rawBody, header, secret, input.toleranceSeconds) === true);
+        }
+        catch {
+            return false;
+        }
+    });
+    if (!verified) {
+        throw new PlumbusError(ErrorCode.Unauthorized, 'Stripe signature did not verify', {
+            reason: 'stripe_signature_invalid',
+        });
+    }
+    const body = JSON.parse(input.rawBody.toString('utf8'));
+    if (body.object === 'event') {
+        return {
+            eventId: body.id,
+            type: body.type,
+            format: 'snapshot',
+            livemode: body.livemode,
+            occurredAt: new Date(body.created * 1000),
+            accountId: body.account ?? null,
+            objectId: objectIdOf(body.data?.object),
+            objectType: body.data?.object?.object ?? null,
+            routing: routingOf(body.data?.object),
+            payload: body,
+        };
+    }
+    if (body.object === 'v2.core.event') {
+        const related = body.related_object ?? null;
+        const isAccount = related?.type === 'v2.core.account';
+        return {
+            eventId: body.id,
+            type: body.type,
+            format: 'thin',
+            livemode: body.livemode,
+            occurredAt: new Date(body.created),
+            accountId: isAccount ? (related?.id ?? null) : (body.context ?? null),
+            objectId: related?.id ?? null,
+            objectType: related?.type ?? null,
+            routing: NO_ROUTING,
+            payload: body,
+        };
+    }
+    throw new PlumbusError(ErrorCode.Validation, 'Unrecognized Stripe webhook body', {
+        reason: 'stripe_webhook_unrecognized',
+    });
+}
+//# sourceMappingURL=events.js.map

package/dist/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAC9B,mCAAmC;AACnC,2EAA2E;AAC3E,0EAA0E;AAC1E,wEAAwE;AACxE,kFAAkF;AAClF,+EAA+E;AAC/E,yDAAyD;AAEzD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,mGAAmG;AACnG,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,4BAA4B;IAC5B,0CAA0C;IAC1C,uCAAuC;IACvC,0BAA0B;IAC1B,0BAA0B;IAC1B,0CAA0C;IAC1C,+BAA+B;IAC/B,2BAA2B;IAC3B,gCAAgC;IAChC,yBAAyB;IACzB,iBAAiB;IACjB,uBAAuB;IACvB,gBAAgB;IAChB,gBAAgB;IAChB,eAAe;IACf,wBAAwB;IACxB,wBAAwB;IACxB,uBAAuB;IACvB,gCAAgC;IAChC,iCAAiC;IACjC,yBAAyB;IACzB,wBAAwB;IACxB,yBAAyB;IACzB,+BAA+B;IAC/B,+BAA+B;IAC/B,+BAA+B;IAC/B,8BAA8B;IAC9B,+BAA+B;IAC/B,mBAAmB;IACnB,cAAc;IACd,wBAAwB;IACxB,gBAAgB;IAChB,8BAA8B;IAC9B,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,iDAAiD;CACzC,CAAC;AAEX,wDAAwD;AACxD,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,yBAAyB;IACzB,yBAAyB;IACzB,wBAAwB;IACxB,uCAAuC;IACvC,iDAAiD;IACjD,mEAAmE;IACnE,kDAAkD;IAClD,oEAAoE;IACpE,mCAAmC;IACnC,mCAAmC;CAC3B,CAAC;AAEX,8FAA8F;AAC9F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE,WAAW,CAAU,CAAC;AAEvE,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;AAElG,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAkCD,MAAM,KAAK,GAAG,CAAC,KAAU,EAAiB,EAAE,CAC1C,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;AAEhF,MAAM,UAAU,GAAyB;IACvC,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,IAAI;IACf,cAAc,EAAE,IAAI;CACrB,CAAC;AAEF,6FAA6F;AAC7F,MAAM,UAAU,SAAS,CAAC,MAAkC;IAC1D,IAAI,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3B,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,iBAAiB,IAAI,IAAI;QACpD,UAAU,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC9E,SAAS,EAAE,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC;QACzF,cAAc,EACZ,IAAI,KAAK,cAAc;YACrB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC;YACrB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,SAAS,UAAU,CAAC,MAAkC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,MAAM,KAAK,yCAAyC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,KAAoC;IACvD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,iCAAiC,EAAE;YAChF,MAAM,EAAE,0BAA0B;SACnC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,OAAO,CACL,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,gBAAgB,CAAC,KAAK,IAAI,CACxF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,iCAAiC,EAAE;YAChF,MAAM,EAAE,0BAA0B;SACnC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;IACnF,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;YAC/B,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YACvC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;YAC7C,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YACrC,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;QAC5C,MAAM,SAAS,GAAG,OAAO,EAAE,IAAI,KAAK,iBAAiB,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;YACrE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,IAAI;YAC7B,UAAU,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI;YACjC,OAAO,EAAE,UAAU;YACnB,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,kCAAkC,EAAE;QAC/E,MAAM,EAAE,6BAA6B;KACtC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { STRIPE_API_VERSION, STRIPE_DESTINATION_NAMES, stripeProvider, type StripePaymentProvider, type StripeProviderOptions, } from './provider.js';
+export { isRelevantStripeEvent, routingOf, STRIPE_SNAPSHOT_EVENTS, STRIPE_SNAPSHOT_SOURCES, STRIPE_THIN_EVENTS, verifyStripeWebhook, } from './events.js';
+export { stripeDefaultResponsibilities, validateStripeConfig } from './config-rules.js';
+export { mapAccount, mapDispute, mapIntent, mapInvoice, mapInvoiceCharge, mapPaymentMethod, mapPayout, mapPayoutSchedule, mapRefund, mapSession, mapSubscription, mapTransfer, toDisputeStatus, } from './mapping.js';
+export { catalogProductId, featureLookupKey } from './catalog.js';
+export { keyMode, type SecretSource } from './secrets.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EACL,UAAU,EACV,UAAU,EACV,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,SAAS,EACT,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,eAAe,EACf,WAAW,EACX,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+// ── @plumbus/payments-stripe ──
+// Stripe Connect provider for @plumbus/payments on Stripe's newest APIs
+// (Accounts v2 sellers, Checkout, Billing, snapshot + thin webhooks).
+export { STRIPE_API_VERSION, STRIPE_DESTINATION_NAMES, stripeProvider, } from './provider.js';
+export { isRelevantStripeEvent, routingOf, STRIPE_SNAPSHOT_EVENTS, STRIPE_SNAPSHOT_SOURCES, STRIPE_THIN_EVENTS, verifyStripeWebhook, } from './events.js';
+export { stripeDefaultResponsibilities, validateStripeConfig } from './config-rules.js';
+export { mapAccount, mapDispute, mapIntent, mapInvoice, mapInvoiceCharge, mapPaymentMethod, mapPayout, mapPayoutSchedule, mapRefund, mapSession, mapSubscription, mapTransfer, toDisputeStatus, } from './mapping.js';
+export { catalogProductId, featureLookupKey } from './catalog.js';
+export { keyMode } from './secrets.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,wEAAwE;AACxE,sEAAsE;AAEtE,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,cAAc,GAGf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACxF,OAAO,EACL,UAAU,EACV,UAAU,EACV,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,SAAS,EACT,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,eAAe,EACf,WAAW,EACX,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,OAAO,EAAqB,MAAM,cAAc,CAAC"}