@pome-sh/cli 0.1.0 → 0.2.0

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/customers.js

@@ -0,0 +1,103 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// Customers domain — F-732 (M5 customer-management hot path).
+//
+// Stripe semantics carried here: metadata updates merge per-key (an empty
+// or null value unsets the key), DELETE is a soft delete that keeps the row
+// so retrieve can serve the `{deleted: true}` stub exactly like real
+// Stripe, and deleting a customer detaches its payment methods in the same
+// better-sqlite3 transaction.
+import { TwinError } from "../errors.js";
+import { newId } from "../ids.js";
+import { nowUnix } from "../util.js";
+import { ensureStripeTables } from "./schema.js";
+import { listPaginated } from "./payment-intents.js";
+export class CustomersDomain {
+    db;
+    constructor(db) {
+        this.db = db;
+        ensureStripeTables(db);
+    }
+    create(accountId, input) {
+        const id = newId("customer");
+        const metadata = {};
+        for (const [key, value] of Object.entries(input.metadata ?? {})) {
+            if (value !== null && value !== "")
+                metadata[key] = value;
+        }
+        this.db
+            .prepare(`INSERT INTO customers (
+          id, account_id, name, email, description, phone, metadata_json, deleted, created
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, 0, ?)`)
+            .run(id, accountId, input.name ?? null, input.email ?? null, input.description ?? null, input.phone ?? null, JSON.stringify(metadata), nowUnix());
+        return this.requireById(accountId, id);
+    }
+    getById(accountId, id) {
+        return (this.db
+            .prepare("SELECT * FROM customers WHERE id = ? AND account_id = ?")
+            .get(id, accountId) ?? null);
+    }
+    /** Any row, deleted or live. Missing id → Stripe's 404 resource_missing. */
+    requireById(accountId, id) {
+        const row = this.getById(accountId, id);
+        if (!row)
+            throw noSuchCustomer(id);
+        return row;
+    }
+    /** Live row only. Deleted customers 404 for writes and sub-resources. */
+    requireLive(accountId, id) {
+        const row = this.requireById(accountId, id);
+        if (row.deleted)
+            throw noSuchCustomer(id);
+        return row;
+    }
+    /**
+     * Update fields; metadata merges per-key, an empty/null value unsets the
+     * key (real Stripe's metadata contract).
+     */
+    update(accountId, id, input) {
+        const existing = this.requireLive(accountId, id);
+        const metadata = JSON.parse(existing.metadata_json);
+        for (const [key, value] of Object.entries(input.metadata ?? {})) {
+            if (value === null || value === "")
+                delete metadata[key];
+            else
+                metadata[key] = value;
+        }
+        this.db
+            .prepare(`UPDATE customers SET name = ?, email = ?, description = ?, phone = ?, metadata_json = ?
+          WHERE id = ? AND account_id = ?`)
+            .run(input.name !== undefined ? input.name : existing.name, input.email !== undefined ? input.email : existing.email, input.description !== undefined ? input.description : existing.description, input.phone !== undefined ? input.phone : existing.phone, JSON.stringify(metadata), id, accountId);
+        return this.requireById(accountId, id);
+    }
+    /**
+     * Soft-delete. Detaches the customer's payment methods in the same
+     * transaction (real Stripe invalidates them on customer deletion).
+     * Idempotent: deleting an already-deleted customer returns the row.
+     */
+    delete(accountId, id) {
+        const tx = this.db.transaction(() => {
+            const existing = this.requireById(accountId, id);
+            if (existing.deleted)
+                return { row: existing, alreadyDeleted: true };
+            this.db
+                .prepare("UPDATE customers SET deleted = 1 WHERE id = ? AND account_id = ?")
+                .run(id, accountId);
+            this.db
+                .prepare("UPDATE payment_methods SET customer_id = NULL, detached = 1 WHERE customer_id = ? AND account_id = ?")
+                .run(id, accountId);
+            return { row: this.requireById(accountId, id), alreadyDeleted: false };
+        });
+        return tx();
+    }
+    list(accountId, input) {
+        const extra = [{ sql: "deleted = 0", args: [] }];
+        if (input.email)
+            extra.push({ sql: "email = ?", args: [input.email] });
+        return listPaginated(this.db, "customers", accountId, input, extra);
+    }
+}
+function noSuchCustomer(id) {
+    return new TwinError("invalid_request_error", "resource_missing", `No such customer: '${id}'.`, { param: "customer", statusCode: 404 });
+}
+//# sourceMappingURL=customers.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/customers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customers.js","sourceRoot":"","sources":["../../../src/domain/customers.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,8DAA8D;AAC9D,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,2EAA2E;AAC3E,8BAA8B;AAG9B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAqBrD,MAAM,OAAO,eAAe;IACL;IAArB,YAAqB,EAAsB;QAAtB,OAAE,GAAF,EAAE,CAAoB;QACzC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,KAA0B;QAClD,MAAM,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YAChE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;6CAEqC,CACtC;aACA,GAAG,CACF,EAAE,EACF,SAAS,EACT,KAAK,CAAC,IAAI,IAAI,IAAI,EAClB,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,WAAW,IAAI,IAAI,EACzB,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,OAAO,EAAE,CACV,CAAC;QACJ,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,EAAU;QACnC,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CAAC,yDAAyD,CAAC;aAClE,GAAG,CAAC,EAAE,EAAE,SAAS,CAA6B,IAAI,IAAI,CAC1D,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,WAAW,CAAC,SAAiB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG;YAAE,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,yEAAyE;IACzE,WAAW,CAAC,SAAiB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,OAAO;YAAE,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,SAAiB,EAAE,EAAU,EAAE,KAA0B;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAA2B,CAAC;QAC9E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YAChE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;gBAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;;gBACpD,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;0CACkC,CACnC;aACA,GAAG,CACF,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EACrD,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EACxD,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAC1E,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EACxD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,EAAE,EACF,SAAS,CACV,CAAC;QACJ,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,SAAiB,EAAE,EAAU;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAkD,EAAE;YACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,QAAQ,CAAC,OAAO;gBAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YACrE,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,kEAAkE,CAAC;iBAC3E,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACtB,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN,sGAAsG,CACvG;iBACA,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACtB,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QACzE,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAED,IAAI,CACF,SAAiB,EACjB,KAAyB;QAEzB,MAAM,KAAK,GAA4C,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,OAAO,aAAa,CAAc,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACnF,CAAC;CACF;AAED,SAAS,cAAc,CAAC,EAAU;IAChC,OAAO,IAAI,SAAS,CAClB,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,EAAE,IAAI,EAC5B,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,CACvC,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/events.d.ts

@@ -1,5 +1,5 @@
 import type { TwinStripeDatabase, EventRow } from "../types.js";
-export type EventType = "payment_intent.created" | "payment_intent.requires_action" | "payment_intent.processing" | "payment_intent.succeeded" | "payment_intent.canceled" | "charge.succeeded" | "charge.refunded";
+export type EventType = "payment_intent.created" | "payment_intent.requires_action" | "payment_intent.processing" | "payment_intent.succeeded" | "payment_intent.payment_failed" | "payment_intent.canceled" | "charge.succeeded" | "charge.failed" | "charge.refunded" | "refund.created" | "customer.created" | "customer.updated" | "customer.deleted" | "payment_method.attached" | "payment_method.detached";
 export type CreateEventInput = {
     type: EventType;
     object: unknown;

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/domain/events.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,mCAAmC;AACnC,EAAE;AACF,8DAA8D;AAC9D,2DAA2D;AAG3D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA4BrD,MAAM,OAAO,YAAY;IACF;IAArB,YAAqB,EAAsB;QAAtB,OAAE,GAAF,EAAE,CAAoB;QACzC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,KAAuB;QAC/C,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;0CAGkC,CACnC;aACA,GAAG,CACF,EAAE,EACF,SAAS,EACT,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EACxC,KAAK,CAAC,uBAAuB,IAAI,IAAI,EACrC,kBAAkB,EAClB,GAAG,CACJ,CAAC;QACJ,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,EAAU;QACnC,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CAAC,sDAAsD,CAAC;aAC/D,GAAG,CAAC,EAAE,EAAE,SAAS,CAA0B,IAAI,IAAI,CACvD,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CACjB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EAAE,IAAI,EACzB,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CACpC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,SAAiB,EAAE,KAAsB;QAC5C,OAAO,aAAa,CAAW,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;CACF"}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/domain/events.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,mCAAmC;AACnC,EAAE;AACF,8DAA8D;AAC9D,2DAA2D;AAG3D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAoCrD,MAAM,OAAO,YAAY;IACF;IAArB,YAAqB,EAAsB;QAAtB,OAAE,GAAF,EAAE,CAAoB;QACzC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,KAAuB;QAC/C,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;0CAGkC,CACnC;aACA,GAAG,CACF,EAAE,EACF,SAAS,EACT,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EACxC,KAAK,CAAC,uBAAuB,IAAI,IAAI,EACrC,kBAAkB,EAClB,GAAG,CACJ,CAAC;QACJ,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,EAAU;QACnC,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CAAC,sDAAsD,CAAC;aAC/D,GAAG,CAAC,EAAE,EAAE,SAAS,CAA0B,IAAI,IAAI,CACvD,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CACjB,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,EAAE,IAAI,EACzB,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CACpC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,SAAiB,EAAE,KAAsB;QAC5C,OAAO,aAAa,CAAW,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;CACF"}

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/index.d.ts

@@ -9,4 +9,10 @@ export { EventsDomain } from "./events.js";
 export type { ListEventsInput } from "./events.js";
 export { RefundsDomain } from "./refunds.js";
 export type { CreateRefundInput, ListRefundsInput } from "./refunds.js";
+export { CustomersDomain } from "./customers.js";
+export type { CustomerFieldsInput, ListCustomersInput } from "./customers.js";
+export { PaymentMethodsDomain } from "./payment-methods.js";
+export type { CreatePaymentMethodInput, ListCustomerPaymentMethodsInput, } from "./payment-methods.js";
+export { BillingDomain } from "./billing.js";
+export type { CreatePriceInput, CreateSubscriptionInput, ListBillingInput, ProductFieldsInput, UpdateSubscriptionInput, } from "./billing.js";
 export { ensureStripeTables, resetStripeTables } from "./schema.js";

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/index.js

@@ -9,5 +9,8 @@ export { ChargesDomain } from "./charges.js";
 export { BalanceDomain } from "./balance.js";
 export { EventsDomain } from "./events.js";
 export { RefundsDomain } from "./refunds.js";
+export { CustomersDomain } from "./customers.js";
+export { PaymentMethodsDomain } from "./payment-methods.js";
+export { BillingDomain } from "./billing.js";
 export { ensureStripeTables, resetStripeTables } from "./schema.js";
 //# sourceMappingURL=index.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/domain/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,qEAAqE;AACrE,wEAAwE;AACxE,iEAAiE;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/domain/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,qEAAqE;AACrE,wEAAwE;AACxE,iEAAiE;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAK5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAQ7C,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/payment-intents.d.ts

@@ -13,11 +13,20 @@ export type CreatePIInput = {
     payment_method_options?: {
         crypto?: PaymentMethodOptionsCrypto;
     };
+    payment_method?: string;
+    customer?: string;
+    confirm?: boolean;
     metadata?: Record<string, string>;
     capture_method?: string;
     confirmation_method?: string;
     idempotency_key?: string | null;
 };
+export type UpdatePIInput = {
+    amount?: number;
+    metadata?: Record<string, string | null>;
+    payment_method?: string;
+    customer?: string;
+};
 export type ListPIsInput = {
     limit?: number;
     starting_after?: string;
@@ -31,13 +40,48 @@ declare const TERMINAL_STATES: ReadonlySet<PIStatus>;
 export declare class PaymentIntentsDomain {
     readonly db: TwinStripeDatabase;
     constructor(db: TwinStripeDatabase);
-    create(accountId: string, input: CreatePIInput): PIRow;
+    /**
+     * Insert a fresh PI. The caller (StripeDomain) has already resolved and
+     * cross-validated `payment_method` / `customer` for the card rail —
+     * `resolved` carries the validated ids so this module stays free of the
+     * sibling domains.
+     */
+    create(accountId: string, input: CreatePIInput, resolved: {
+        paymentMethodId: string | null;
+        customerId: string | null;
+    }): PIRow;
     /**
      * Crypto-deposit confirm is idempotent. If the PI is already in
      * `requires_action`, return it unchanged. If it's mid- or post-flight
      * (`processing` / `succeeded`), return it. Only `canceled` is rejected.
      */
     confirm(accountId: string, id: string): PIRow;
+    /**
+     * Card confirm leg 1: CAS the observed pre-confirm status
+     * (`requires_confirmation` or `requires_payment_method`) → `processing`,
+     * stamping the PM being attempted. Exactly one of N parallel confirms
+     * wins this CAS; losers see `payment_intent_unexpected_state`.
+     */
+    confirmCardLeg1(accountId: string, id: string, expected: PIStatus, paymentMethodId: string): PIRow;
+    /** Card confirm leg 2, success: processing → succeeded with the charge. */
+    finalizeCardSuccess(accountId: string, id: string, latestChargeId: string): PIRow;
+    /**
+     * Card confirm leg 2, decline: processing → requires_payment_method with
+     * the failed charge and `last_payment_error` on the record. The declined
+     * PM is dropped from the PI, like real Stripe.
+     */
+    finalizeCardDecline(accountId: string, id: string, failedChargeId: string, lastPaymentErrorJson: string): PIRow;
+    /**
+     * Update a non-terminal PI. Metadata merges per-key (empty/null unsets,
+     * Stripe's metadata contract). `payment_method` / `customer` are only
+     * valid on the card rail and have been resolved by the caller;
+     * attaching a PM moves requires_payment_method → requires_confirmation.
+     * The UPDATE is guarded on the observed status so a racing confirm wins.
+     */
+    update(accountId: string, id: string, input: UpdatePIInput, resolved?: {
+        paymentMethodId?: string | null;
+        customerId?: string | null;
+    }): PIRow;
     cancel(accountId: string, id: string): PIRow;
     /**
      * Drive a PI from requires_action → processing → succeeded.
@@ -57,12 +101,20 @@ export declare class PaymentIntentsDomain {
         hasMore: boolean;
         limit: number;
     };
+    /**
+     * casStatus + the shared lost-the-race contract: re-read the fresh row
+     * so the loser's `payment_intent_unexpected_state` names the status that
+     * actually beat it. Every CAS leg on both rails goes through here.
+     */
+    private casStatusOrThrow;
     /**
      * Compare-and-swap on `status`. Returns the new row, or `null` if no row
      * matched the predicate. The predicate is `(id = ? AND account_id = ? AND status = ?)`.
      */
     private casStatus;
 }
+/** Parsed payment_method_types for a PI row (["crypto"] fallback, pre-F-731 rows). */
+export declare function piTypes(pi: PIRow): string[];
 export declare function piUnexpectedState(currentStatus: string, message?: string): TwinError;
 /**
  * Deterministic 0x address (40 hex chars) derived from the PI ID. Stable
@@ -75,6 +127,10 @@ export declare function depositAddressFromId(id: string): string;
  *
  * `accountId` scopes results to the calling session's account so two
  * sessions sharing a DB file cannot see each other's rows.
+ *
+ * `extraWheres` lets a caller inject table-specific predicates (e.g. the
+ * customers table's `deleted = 0`, payment_methods' `customer_id = ?`)
+ * without teaching this generic helper every column name.
  */
 export declare function listPaginated<T extends {
     id: string;
@@ -83,7 +139,10 @@ export declare function listPaginated<T extends {
     type?: string;
     payment_intent?: string;
     customer?: string;
-}): {
+}, extraWheres?: Array<{
+    sql: string;
+    args: unknown[];
+}>): {
     rows: T[];
     hasMore: boolean;
     limit: number;

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/payment-intents.js

@@ -1,11 +1,12 @@
+// file-size: the PI state machine intentionally keeps both rails (x402 crypto + F-731 card) on one CAS core, plus the listPaginated helper every sibling domain imports.
 // SPDX-License-Identifier: Apache-2.0
 //
 // PaymentIntent state machine + CAS, owned by AGENT-B.
-// v1 scope: x402 crypto-deposit PIs only.
+// Two rails: x402 crypto-deposit PIs (v1) and card PIs (F-731).
 //
-// State machine (v1, crypto-deposit only):
+// Crypto rail (x402):
 //
-//      create (with payment_method_types: ["crypto"])
+//      create (payment_method_types: ["crypto"])
 //         │
 //         ▼
 //   requires_action  ◀──── confirm (idempotent no-op for crypto)
@@ -19,11 +20,25 @@
 //         ▼  (simulate_crypto_deposit, leg 2 — synchronous)
 //      succeeded                  ← terminal
 //
+// Card rail (F-731):
+//
+//      create (payment_method_types: ["card"])
+//         │ no payment_method            │ payment_method
+//         ▼                              ▼
+//   requires_payment_method  ──update──▶ requires_confirmation
+//         ▲                              │ confirm (leg 1 CAS → processing)
+//         │ decline (magic test PM;      ▼
+//         │  failed charge +          processing
+//         │  last_payment_error)         │ leg 2 (synchronous outcome)
+//         └──────────────────────────────┤
+//                                        ▼
+//                                    succeeded                ← terminal
+//
 // All status transitions go through `casStatus()`, a SQL UPDATE with a
 // `WHERE status = ?` predicate. Zero rows updated ⇒ another writer beat us
-// ⇒ 409 with `payment_intent_unexpected_state`. This is the
+// ⇒ 400 with `payment_intent_unexpected_state`. This is the
 // "exactly one of N parallel confirms wins" guarantee that the
-// concurrency test depends on.
+// concurrency tests depend on.
 import { createHash } from "node:crypto";
 import { TwinError } from "../errors.js";
 import { newId, newClientSecret } from "../ids.js";
@@ -41,7 +56,13 @@ export class PaymentIntentsDomain {
         ensureStripeTables(db);
     }
     // ---------- create ----------
-    create(accountId, input) {
+    /**
+     * Insert a fresh PI. The caller (StripeDomain) has already resolved and
+     * cross-validated `payment_method` / `customer` for the card rail —
+     * `resolved` carries the validated ids so this module stays free of the
+     * sibling domains.
+     */
+    create(accountId, input, resolved) {
         if (!Number.isInteger(input.amount) || input.amount <= 0) {
             throw new TwinError("invalid_request_error", "parameter_invalid_integer", "Amount must be a positive integer.", { param: "amount", statusCode: 400 });
         }
@@ -53,49 +74,70 @@ export class PaymentIntentsDomain {
             throw new TwinError("invalid_request_error", "currency_not_supported", `Currency '${currency}' is not supported by this twin (v1 supports: ${CRYPTO_CURRENCIES.join(", ")}).`, { param: "currency", statusCode: 400 });
         }
         const pmTypes = input.payment_method_types ?? [];
-        if (!Array.isArray(pmTypes) || pmTypes.length !== 1 || pmTypes[0] !== "crypto") {
-            throw new TwinError("invalid_request_error", "parameter_invalid_string", "payment_method_types must be exactly [\"crypto\"] for v1 of this twin.", { param: "payment_method_types", statusCode: 400 });
-        }
-        const cryptoOpts = input.payment_method_options?.crypto;
-        if (!cryptoOpts || cryptoOpts.mode !== "deposit") {
-            throw new TwinError("invalid_request_error", "parameter_invalid_string", "payment_method_options.crypto.mode must be \"deposit\" for v1 of this twin.", { param: "payment_method_options[crypto][mode]", statusCode: 400 });
-        }
-        const networks = cryptoOpts.deposit_options?.networks ?? [];
-        const network = networks[0];
-        if (!network || !SUPPORTED_NETWORKS.includes(network)) {
-            throw new TwinError("invalid_request_error", "parameter_invalid_string", `payment_method_options.crypto.deposit_options.networks must include one of: ${SUPPORTED_NETWORKS.join(", ")}.`, { param: "payment_method_options[crypto][deposit_options][networks]", statusCode: 400 });
+        const pmType = pmTypes.length === 1 ? pmTypes[0] : undefined;
+        if (pmType !== "crypto" && pmType !== "card") {
+            throw new TwinError("invalid_request_error", "parameter_invalid_string", "payment_method_types must be exactly [\"crypto\"] or [\"card\"] for this twin.", { param: "payment_method_types", statusCode: 400 });
         }
         const id = newId("payment_intent");
         const clientSecret = newClientSecret(id);
         const now = nowUnix();
-        // Deterministic 0x deposit address derived from the PI ID. 40 hex chars.
-        const address = depositAddressFromId(id);
-        const cryptoDeposit = {
-            deposit_addresses: {
-                [network]: {
-                    address,
-                    supported_tokens: [
-                        {
-                            token_currency: "usdc",
-                            token_contract_address: BASE_USDC_CONTRACT_ADDRESS,
-                        },
-                    ],
+        let status;
+        let nextActionJson = null;
+        let cryptoDepositJson = null;
+        if (pmType === "crypto") {
+            // Mirror image of the card rail's crypto-options rejection: the
+            // card-only params fail loudly instead of being silently dropped.
+            if (input.payment_method || input.customer || input.confirm) {
+                throw new TwinError("invalid_request_error", "parameter_invalid_string", "payment_method, customer, and confirm are only valid with payment_method_types [\"card\"].", { param: "payment_method", statusCode: 400 });
+            }
+            const cryptoOpts = input.payment_method_options?.crypto;
+            if (!cryptoOpts || cryptoOpts.mode !== "deposit") {
+                throw new TwinError("invalid_request_error", "parameter_invalid_string", "payment_method_options.crypto.mode must be \"deposit\" for crypto PaymentIntents.", { param: "payment_method_options[crypto][mode]", statusCode: 400 });
+            }
+            const networks = cryptoOpts.deposit_options?.networks ?? [];
+            const network = networks[0];
+            if (!network || !SUPPORTED_NETWORKS.includes(network)) {
+                throw new TwinError("invalid_request_error", "parameter_invalid_string", `payment_method_options.crypto.deposit_options.networks must include one of: ${SUPPORTED_NETWORKS.join(", ")}.`, { param: "payment_method_options[crypto][deposit_options][networks]", statusCode: 400 });
+            }
+            // Deterministic 0x deposit address derived from the PI ID. 40 hex chars.
+            const address = depositAddressFromId(id);
+            const cryptoDeposit = {
+                deposit_addresses: {
+                    [network]: {
+                        address,
+                        supported_tokens: [
+                            {
+                                token_currency: "usdc",
+                                token_contract_address: BASE_USDC_CONTRACT_ADDRESS,
+                            },
+                        ],
+                    },
                 },
-            },
-        };
-        const nextAction = {
-            type: "display_crypto_deposit_information",
-            crypto_display_details: cryptoDeposit,
-        };
+            };
+            status = "requires_action";
+            nextActionJson = JSON.stringify({
+                type: "display_crypto_deposit_information",
+                crypto_display_details: cryptoDeposit,
+            });
+            cryptoDepositJson = JSON.stringify(cryptoDeposit);
+        }
+        else {
+            // Card rail: the crypto deposit options are the x402 rail only.
+            if (input.payment_method_options?.crypto) {
+                throw new TwinError("invalid_request_error", "parameter_invalid_string", "payment_method_options.crypto is only valid with payment_method_types [\"crypto\"].", { param: "payment_method_options[crypto]", statusCode: 400 });
+            }
+            status = resolved.paymentMethodId ? "requires_confirmation" : "requires_payment_method";
+        }
         this.db
             .prepare(`INSERT INTO payment_intents (
           id, account_id, amount, currency, status,
           payment_method_types_json, next_action_json,
           latest_charge_id, capture_method, confirmation_method,
           idempotency_key, metadata_json, crypto_deposit_json,
-          client_secret, created, updated, canceled_at, captured_at
-        ) VALUES (?, ?, ?, ?, 'requires_action', ?, ?, NULL, ?, ?, ?, ?, ?, ?, ?, ?, NULL, NULL)`)
-            .run(id, accountId, input.amount, currency, JSON.stringify(pmTypes), JSON.stringify(nextAction), input.capture_method ?? DEFAULT_CAPTURE_METHOD, input.confirmation_method ?? DEFAULT_CONFIRMATION_METHOD, input.idempotency_key ?? null, JSON.stringify(input.metadata ?? {}), JSON.stringify(cryptoDeposit), clientSecret, now, now);
+          client_secret, created, updated, canceled_at, captured_at,
+          payment_method_id, customer_id, last_payment_error_json
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, ?, ?, ?, ?, NULL, NULL, ?, ?, NULL)`)
+            .run(id, accountId, input.amount, currency, status, JSON.stringify(pmTypes), nextActionJson, input.capture_method ?? DEFAULT_CAPTURE_METHOD, input.confirmation_method ?? DEFAULT_CONFIRMATION_METHOD, input.idempotency_key ?? null, JSON.stringify(input.metadata ?? {}), cryptoDepositJson, clientSecret, now, now, resolved.paymentMethodId, resolved.customerId);
         return this.requireById(accountId, id);
     }
     // ---------- confirm ----------
@@ -111,6 +153,98 @@ export class PaymentIntentsDomain {
         }
         return pi;
     }
+    /**
+     * Card confirm leg 1: CAS the observed pre-confirm status
+     * (`requires_confirmation` or `requires_payment_method`) → `processing`,
+     * stamping the PM being attempted. Exactly one of N parallel confirms
+     * wins this CAS; losers see `payment_intent_unexpected_state`.
+     */
+    confirmCardLeg1(accountId, id, expected, paymentMethodId) {
+        return this.casStatusOrThrow(accountId, id, expected, "processing", {
+            payment_method_id: paymentMethodId,
+        });
+    }
+    /** Card confirm leg 2, success: processing → succeeded with the charge. */
+    finalizeCardSuccess(accountId, id, latestChargeId) {
+        return this.casStatusOrThrow(accountId, id, "processing", "succeeded", {
+            latest_charge_id: latestChargeId,
+            captured_at: nowUnix(),
+            last_payment_error_json: null,
+        });
+    }
+    /**
+     * Card confirm leg 2, decline: processing → requires_payment_method with
+     * the failed charge and `last_payment_error` on the record. The declined
+     * PM is dropped from the PI, like real Stripe.
+     */
+    finalizeCardDecline(accountId, id, failedChargeId, lastPaymentErrorJson) {
+        return this.casStatusOrThrow(accountId, id, "processing", "requires_payment_method", {
+            latest_charge_id: failedChargeId,
+            payment_method_id: null,
+            last_payment_error_json: lastPaymentErrorJson,
+        });
+    }
+    // ---------- update (POST /v1/payment_intents/:id, F-731) ----------
+    /**
+     * Update a non-terminal PI. Metadata merges per-key (empty/null unsets,
+     * Stripe's metadata contract). `payment_method` / `customer` are only
+     * valid on the card rail and have been resolved by the caller;
+     * attaching a PM moves requires_payment_method → requires_confirmation.
+     * The UPDATE is guarded on the observed status so a racing confirm wins.
+     */
+    update(accountId, id, input, resolved = {}) {
+        const pi = this.requireById(accountId, id);
+        const updatable = new Set([
+            "requires_payment_method",
+            "requires_confirmation",
+            "requires_action",
+        ]);
+        if (!updatable.has(pi.status)) {
+            throw piUnexpectedState(pi.status);
+        }
+        const isCard = piTypes(pi).includes("card");
+        // Crypto PIs accept metadata-only updates: the x402 challenge (amount,
+        // deposit address) is minted at create time and must stay consistent
+        // with the middleware's cached challenge.
+        if (!isCard &&
+            (input.amount !== undefined ||
+                input.payment_method !== undefined ||
+                input.customer !== undefined)) {
+            throw new TwinError("invalid_request_error", "parameter_invalid_string", "Only metadata can be updated on crypto PaymentIntents.", { param: "payment_method", statusCode: 400 });
+        }
+        if (input.amount !== undefined && (!Number.isInteger(input.amount) || input.amount <= 0)) {
+            throw new TwinError("invalid_request_error", "parameter_invalid_integer", "Amount must be a positive integer.", { param: "amount", statusCode: 400 });
+        }
+        const metadata = JSON.parse(pi.metadata_json);
+        for (const [key, value] of Object.entries(input.metadata ?? {})) {
+            if (value === null || value === "")
+                delete metadata[key];
+            else
+                metadata[key] = value;
+        }
+        const nextPaymentMethodId = input.payment_method !== undefined ? (resolved.paymentMethodId ?? null) : pi.payment_method_id;
+        const nextCustomerId = input.customer !== undefined ? (resolved.customerId ?? null) : pi.customer_id;
+        let nextStatus = pi.status;
+        if (isCard) {
+            if (nextPaymentMethodId && pi.status === "requires_payment_method") {
+                nextStatus = "requires_confirmation";
+            }
+            else if (!nextPaymentMethodId && pi.status === "requires_confirmation") {
+                nextStatus = "requires_payment_method";
+            }
+        }
+        const updated = this.db
+            .prepare(`UPDATE payment_intents SET
+           amount = ?, metadata_json = ?, payment_method_id = ?, customer_id = ?,
+           status = ?, updated = ?
+         WHERE id = ? AND account_id = ? AND status = ? RETURNING *`)
+            .get(input.amount ?? pi.amount, JSON.stringify(metadata), nextPaymentMethodId, nextCustomerId, nextStatus, nowUnix(), id, accountId, pi.status);
+        if (!updated) {
+            const fresh = this.requireById(accountId, id);
+            throw piUnexpectedState(fresh.status);
+        }
+        return updated;
+    }
     // ---------- cancel ----------
     cancel(accountId, id) {
         const pi = this.requireById(accountId, id);
@@ -144,25 +278,14 @@ export class PaymentIntentsDomain {
         if (pi.status !== "requires_action") {
             throw piUnexpectedState(pi.status);
         }
-        const updated = this.casStatus(accountId, id, "requires_action", "processing");
-        if (!updated) {
-            // Lost the race. Read fresh state for the error message.
-            const fresh = this.requireById(accountId, id);
-            throw piUnexpectedState(fresh.status);
-        }
-        return updated;
+        return this.casStatusOrThrow(accountId, id, "requires_action", "processing");
     }
     /** Second CAS leg: processing → succeeded. */
     simulateCryptoDepositLeg2(accountId, id, latestChargeId) {
-        const updated = this.casStatus(accountId, id, "processing", "succeeded", {
+        return this.casStatusOrThrow(accountId, id, "processing", "succeeded", {
             latest_charge_id: latestChargeId,
             captured_at: nowUnix(),
         });
-        if (!updated) {
-            const fresh = this.requireById(accountId, id);
-            throw piUnexpectedState(fresh.status);
-        }
-        return updated;
     }
     // ---------- read ----------
     getById(accountId, id) {
@@ -181,6 +304,19 @@ export class PaymentIntentsDomain {
         return listPaginated(this.db, "payment_intents", accountId, input);
     }
     // ---------- internals ----------
+    /**
+     * casStatus + the shared lost-the-race contract: re-read the fresh row
+     * so the loser's `payment_intent_unexpected_state` names the status that
+     * actually beat it. Every CAS leg on both rails goes through here.
+     */
+    casStatusOrThrow(accountId, id, expected, next, extras = {}) {
+        const updated = this.casStatus(accountId, id, expected, next, extras);
+        if (!updated) {
+            const fresh = this.requireById(accountId, id);
+            throw piUnexpectedState(fresh.status);
+        }
+        return updated;
+    }
     /**
      * Compare-and-swap on `status`. Returns the new row, or `null` if no row
      * matched the predicate. The predicate is `(id = ? AND account_id = ? AND status = ?)`.
@@ -200,6 +336,14 @@ export class PaymentIntentsDomain {
             sets.push("captured_at = ?");
             values.push(extras.captured_at ?? null);
         }
+        if ("payment_method_id" in extras) {
+            sets.push("payment_method_id = ?");
+            values.push(extras.payment_method_id ?? null);
+        }
+        if ("last_payment_error_json" in extras) {
+            sets.push("last_payment_error_json = ?");
+            values.push(extras.last_payment_error_json ?? null);
+        }
         const sql = `UPDATE payment_intents SET ${sets.join(", ")} WHERE id = ? AND account_id = ? AND status = ? RETURNING *`;
         values.push(id, accountId, expected);
         return (this.db.prepare(sql).get(...values) ??
@@ -207,6 +351,16 @@ export class PaymentIntentsDomain {
     }
 }
 // ---------- helpers used by routes/serializers too ----------
+/** Parsed payment_method_types for a PI row (["crypto"] fallback, pre-F-731 rows). */
+export function piTypes(pi) {
+    try {
+        const parsed = JSON.parse(pi.payment_method_types_json);
+        return Array.isArray(parsed) ? parsed : ["crypto"];
+    }
+    catch {
+        return ["crypto"];
+    }
+}
 export function piUnexpectedState(currentStatus, message) {
     return new TwinError("invalid_request_error", "payment_intent_unexpected_state", message ??
         `The PaymentIntent has a status of '${currentStatus}'. The requested action could not be performed.`, { statusCode: 400 });
@@ -227,8 +381,12 @@ export function depositAddressFromId(id) {
  *
  * `accountId` scopes results to the calling session's account so two
  * sessions sharing a DB file cannot see each other's rows.
+ *
+ * `extraWheres` lets a caller inject table-specific predicates (e.g. the
+ * customers table's `deleted = 0`, payment_methods' `customer_id = ?`)
+ * without teaching this generic helper every column name.
  */
-export function listPaginated(db, table, accountId, input) {
+export function listPaginated(db, table, accountId, input, extraWheres = []) {
     const limitRaw = input.limit ?? 10;
     const limit = Math.min(100, Math.max(1, Math.floor(limitRaw)));
     const wheres = ["account_id = ?"];
@@ -271,6 +429,10 @@ export function listPaginated(db, table, accountId, input) {
         wheres.push("payment_intent_id = ?");
         args.push(input.payment_intent);
     }
+    for (const extra of extraWheres) {
+        wheres.push(extra.sql);
+        args.push(...extra.args);
+    }
     const where = `WHERE ${wheres.join(" AND ")}`;
     const sql = `SELECT * FROM ${table} ${where} ORDER BY created DESC, id DESC LIMIT ?`;
     // Fetch limit + 1 to compute `has_more`.