@pome-sh/cli 0.1.0

package/node_modules/@pome-sh/twin-stripe/dist/src/twin.js

@@ -0,0 +1,276 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// The Stripe twin as a thin `@pome-sh/sdk` plugin (F-684). This manifest is
+// pure declaration: domain factory, seed schema, tools, routes, and the
+// wire-frozen Stripe shapes (FDRS-711 / F-712) — errors.ts envelopes, the
+// liberal-bearer + 403-sid-mismatch + root-/v1/*-mount auth pins, healthz
+// extras (fidelity + tthw_seconds), the 501 unsupported envelope, the
+// admin-gate 403 body. All mechanism (HTTP mount, auth, recorder +
+// redaction, MCP dispatch, /_pome/*, admin gate, db driver, failure
+// injection) lives in the engine.
+//
+// Unlike slack/github the definition is built by a FACTORY: the manifest
+// closes over the database (api_keys credential lookup, idempotency cache,
+// admin reset/seed) and a per-app failure-injection store, so each app gets
+// its own. Always pass the same `db` here and to `createApp`/`serve`.
+import { z, ZodError } from "zod";
+import { defineTwin, } from "@pome-sh/sdk";
+import { UnknownToolError, createFailureInjectionStore, failureInjectionMiddleware, twinBuildInfo, } from "@pome-sh/sdk/server";
+import { createApp } from "@pome-sh/sdk/server";
+import { resolveSidFromKey } from "./api-keys.js";
+import { openTwinStripeDatabase, resetDatabase } from "./db.js";
+import { StripeDomain } from "./domain/index.js";
+import { TwinError, forbidden, stripeError, unauthorized, unsupported } from "./errors.js";
+import { looksLikeApiKey } from "./api-keys.js";
+import { idempotencyMiddleware } from "./idempotency.js";
+import { registerStripeRoutes } from "./routes/index.js";
+import { applySeed, defaultSeed, seedSchema } from "./seed.js";
+import { registerX402Routes } from "./session.js";
+import { executeTool, isMutatingTool, listTools, toolDefinitions } from "./tools.js";
+// Stripe admin/seed is tolerant: an absent body falls back to the default
+// seed (frozen: garbage object → 200 {ok:true, ...}; seedSchema defaults
+// every collection). Malformed collections still fail loudly via zod.
+const stripeSeedSchema = z.preprocess((value) => (value === null || value === undefined ? defaultSeed() : value), seedSchema);
+/** `tthw_seconds` (Time To Hello World) per D-DX-4 / §22 — wall clock from process start. */
+export function tthwSeconds(startedAtMs, nowMs = Date.now) {
+    const ms = Math.max(0, nowMs() - startedAtMs);
+    return Number((ms / 1000).toFixed(3));
+}
+function accountIdFrom(session) {
+    return typeof session?.account_id === "string" ? session.account_id : "acct_default";
+}
+// The engine parses tool args / mcp bodies with its own zod instance, so a
+// bare `instanceof ZodError` can miss; fall back to the duck check on `name`.
+function zodIssues(err) {
+    if (err instanceof ZodError)
+        return err.issues;
+    if (err instanceof Error && err.name === "ZodError" && Array.isArray(err.issues)) {
+        return err.issues;
+    }
+    return undefined;
+}
+/**
+ * Wire-frozen Stripe error projection (D-ENG-8): every error renders as the
+ * nested `{error: {type, code, message, ...}}` envelope from errors.ts.
+ */
+function stripeErrorEnvelope(err) {
+    // Engine tool dispatch throws UnknownToolError; frozen stripe wire is
+    // 400 `tool_unknown` (github 422, slack 404 — per-twin, FDRS-711).
+    if (err instanceof UnknownToolError) {
+        return stripeError("invalid_request_error", "tool_unknown", `No such MCP tool: '${err.tool}'.`, {
+            param: "tool",
+            statusCode: 400,
+        });
+    }
+    if (err instanceof TwinError) {
+        return { status: err.status, body: err.toEnvelope() };
+    }
+    const issues = zodIssues(err);
+    if (issues) {
+        const first = issues[0];
+        return stripeError("invalid_request_error", "parameter_invalid", first?.message ?? "Invalid request parameters.", {
+            param: first?.path?.join("."),
+        });
+    }
+    if (err instanceof SyntaxError) {
+        return stripeError("invalid_request_error", "invalid_json", "Could not parse request body as JSON.");
+    }
+    return stripeError("api_error", "internal_error", err instanceof Error ? err.message : "Internal Server Error", { statusCode: 500 });
+}
+// listTools() carries the frozen tool-list wire shape (z.toJSONSchema with
+// the {} fallback for optional schemas).
+const toolListing = new Map(listTools().map((tool) => [tool.name, tool]));
+export function createStripeTwinDefinition(opts) {
+    const { db } = opts;
+    const startedAtMs = opts.startedAtMs ?? Date.now();
+    // Per-app rule store: /admin/seed installs `failure_injection` rules into
+    // the same store the session middleware reads (FDRS-369).
+    const failureInjection = createFailureInjectionStore();
+    return defineTwin({
+        id: "stripe",
+        version: process.env.POME_TWIN_VERSION ?? "0.1.0",
+        implementation: "stripe_clone",
+        packageName: "@pome-sh/twin-stripe",
+        fidelity: { default: "semantic" },
+        // Pre-port: `payload === null ? defaultSeed() : parseSeed(payload)` —
+        // an absent/unparseable seed body applies the default world.
+        seed: z.preprocess((value) => (value === null || value === undefined ? defaultSeed() : value), stripeSeedSchema),
+        domain: ({ db: injected, seed }) => {
+            if (injected && injected !== db) {
+                throw new Error("twin-stripe: the db passed to createApp/serve must be the db the definition was created with");
+            }
+            const domain = new StripeDomain(db);
+            if (seed !== undefined)
+                applySeed(db, seed, failureInjection);
+            return domain;
+        },
+        // Session-wide middleware (the pre-port `session.use("*")` position):
+        // mounted by the engine BEFORE its MCP routes, so failure injection and
+        // idempotency cover /mcp, /mcp/call, /mcp/tools/:name exactly as the
+        // pre-port chassis did (F-684 review pin: an Idempotency-Key'd MCP
+        // create must replay, and injected rules on MCP paths must fire).
+        middleware: (app, ctx) => {
+            // Failure injection MUST run before idempotency so a configured
+            // failure response isn't cached by the idempotency layer (a retry
+            // under the same key would replay the synthetic 4xx instead of
+            // re-invoking the handler).
+            app.use("*", failureInjectionMiddleware(failureInjection, {
+                recorder: ctx.recorder,
+                runId: ctx.runId,
+                twin: "stripe",
+            }));
+            app.use("*", idempotencyMiddleware(db, ctx.recorder, ctx.runId));
+        },
+        // Frozen pre-port body parsing on the engine-owned surfaces (F-684
+        // review pin). Two pre-port readers existed: /admin/seed was strict
+        // JSON with a null fallback (null → default seed via the schema
+        // preprocess below), while the MCP dispatch surfaces used
+        // routes/index.ts's form-or-JSON reader ({} fallback).
+        bodyReader: async (c) => {
+            if (new URL(c.req.url).pathname.endsWith("/admin/seed")) {
+                try {
+                    return await c.req.json();
+                }
+                catch {
+                    return null;
+                }
+            }
+            const contentType = c.req.header("content-type") ?? "";
+            if (contentType.includes("application/x-www-form-urlencoded")) {
+                try {
+                    return await c.req.parseBody();
+                }
+                catch {
+                    return {};
+                }
+            }
+            try {
+                return await c.req.json();
+            }
+            catch {
+                return {};
+            }
+        },
+        routes: (app, ctx) => {
+            opts.extendRoutes?.(app, ctx);
+            registerStripeRoutes(app, ctx.domain, ctx.recorder, ctx.runId);
+            if (opts.twinBaseUrl) {
+                registerX402Routes(app, { twinBaseUrl: opts.twinBaseUrl });
+            }
+        },
+        // Account-scoped state export (F1): two sessions sharing a DB see
+        // disjoint `/_pome/state` views.
+        state: ({ domain, session }) => session
+            ? domain.exportState(accountIdFrom(session))
+            : { payment_intents: [], charges: [], balance_transactions: [], events: [] },
+        admin: {
+            reset: () => {
+                resetDatabase(db);
+                applySeed(db, defaultSeed(), failureInjection);
+                return { ok: true, message: "Stripe twin state reset to default seed." };
+            },
+            seed: ({ seed }) => {
+                resetDatabase(db);
+                applySeed(db, seed, failureInjection);
+                return {
+                    ok: true,
+                    api_keys: (seed.api_keys ?? []).length,
+                    failure_injection: (seed.failure_injection ?? []).length,
+                };
+            },
+            // Frozen tape shape: stripe's pre-port recorder never saw admin
+            // traffic — /admin/reset|seed emit no events (F-684 review pin).
+            recorded: false,
+            // Frozen stripe admin-gate 403 body.
+            forbidden: () => forbidden("Forbidden"),
+        },
+        tools: toolDefinitions.map((def) => ({
+            name: def.name,
+            description: def.description,
+            schema: def.schema,
+            mutation: isMutatingTool(def.name),
+            inputSchema: toolListing.get(def.name)?.input_schema,
+            handler: (domain, args, ctx) => executeTool(domain, accountIdFrom(ctx.session), def.name, args),
+        })),
+        // Frozen healthz extras: fidelity + tthw_seconds on top of the contract
+        // core {ok, twin, implementation, tools, runtime}.
+        healthz: () => ({ fidelity: "semantic", tthw_seconds: tthwSeconds(startedAtMs) }),
+        // Frozen per-session health shape: implementation/fidelity/tthw/runtime
+        // plus recorder counters (bounded store: real dropped count, D-ENG-10).
+        pomeHealth: ({ recorder }) => ({
+            implementation: "stripe_clone",
+            fidelity: "semantic",
+            tthw_seconds: tthwSeconds(startedAtMs),
+            runtime: twinBuildInfo("@pome-sh/twin-stripe"),
+            recorder: { events: recorder.count(), dropped: recorder.dropped() },
+        }),
+        // Frozen per-twin difference: stripe has NO per-session /healthz (501).
+        sessionHealthz: false,
+        // F3 SDK-compat root mount: stripe-node/stripe-python URLs (/v1/*) hit
+        // the same session router; the bearer alone resolves the sid.
+        mountSessionAtRoot: true,
+        unsupported: () => unsupported(),
+        errorEnvelope: stripeErrorEnvelope,
+        auth: {
+            // F-712 pins: liberal bearer parsing ON (raw token + case-insensitive
+            // "bearer"); sid mismatch → 403; api_keys table lookup ahead of
+            // provider-shaped verify + JWT; no path sid required (root mount);
+            // expired-vs-invalid classified by the engine and rendered through
+            // the frozen unauthorized envelope.
+            providerToken: { provider: "stripe", prefixes: ["sk_test_pome_"] },
+            providerSession: (sid) => ({ account_id: `acct_${sid}`, via: "api_key" }),
+            allowRawBearer: true,
+            requirePathSid: false,
+            resolveCredential: (token) => {
+                // Perf + pre-port parity: only api-key-shaped tokens hit the DB.
+                // A table miss falls through to provider verify; if that also
+                // fails, the unauthorized hook renders the frozen
+                // "Invalid API Key provided." for this shape.
+                if (!looksLikeApiKey(token))
+                    return undefined;
+                const row = resolveSidFromKey(db, token);
+                return row ? { sid: row.sid, account_id: row.account_id, via: "api_key" } : undefined;
+            },
+            unauthorized: (kind, info) => {
+                // Frozen wire messages: api-key-shaped tokens that resolve nowhere
+                // answer "Invalid API Key provided." (pre-port terminal branch);
+                // JWT-shaped failures answer "Bad credentials" / "Token expired".
+                const message = kind === "expired"
+                    ? "Token expired"
+                    : info?.token && looksLikeApiKey(info.token)
+                        ? "Invalid API Key provided."
+                        : "Bad credentials";
+                const envelope = unauthorized(message);
+                return { status: envelope.status, body: envelope.body };
+            },
+            sidMismatch: () => {
+                const envelope = forbidden("Session id mismatch.");
+                return { status: envelope.status, body: envelope.body };
+            },
+            sessionExtras: (claims) => ({
+                account_id: typeof claims.account_id === "string" ? claims.account_id : `acct_${claims.sid}`,
+                via: "jwt",
+            }),
+        },
+    });
+}
+/** Assemble the Stripe twin app on the engine (in-process; no port bind). */
+export function createTwinStripeApp(opts = {}) {
+    const db = opts.db ?? openTwinStripeDatabase(":memory:");
+    const definition = createStripeTwinDefinition({
+        db,
+        twinBaseUrl: opts.twinBaseUrl,
+        startedAtMs: opts.startedAtMs,
+        extendRoutes: opts.extendRoutes,
+    });
+    // Pre-port semantics: the default seed applies only when the factory
+    // opened the db itself (callers passing a db manage their own seed).
+    const seed = opts.noSeed ? undefined : opts.seed ?? (opts.db ? undefined : defaultSeed());
+    return createApp(definition, {
+        db,
+        recorder: opts.recorder,
+        runId: opts.runId ?? "local",
+        seed,
+    });
+}
+//# sourceMappingURL=twin.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/twin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"twin.js","sourceRoot":"","sources":["../../src/twin.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,mEAAmE;AACnE,oEAAoE;AACpE,kCAAkC;AAClC,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AAEtE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAClC,OAAO,EACL,UAAU,GAGX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,0BAA0B,EAC1B,aAAa,GAGd,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGrF,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,MAAM,gBAAgB,GAAG,CAAC,CAAC,UAAU,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAC1E,UAAU,CACwB,CAAC;AAErC,6FAA6F;AAC7F,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,QAAsB,IAAI,CAAC,GAAG;IAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,OAAiC;IACtD,OAAO,OAAO,OAAO,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;AACvF,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,GAAG,YAAY,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IAC/C,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAE,GAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3G,OAAQ,GAA2B,CAAC,MAAM,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAY;IACvC,sEAAsE;IACtE,mEAAmE;IACnE,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;QACpC,OAAO,WAAW,CAAC,uBAAuB,EAAE,cAAc,EAAE,sBAAsB,GAAG,CAAC,IAAI,IAAI,EAAE;YAC9F,KAAK,EAAE,MAAM;YACb,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,WAAW,CAAC,uBAAuB,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,IAAI,6BAA6B,EAAE;YAChH,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,OAAO,WAAW,CAAC,uBAAuB,EAAE,cAAc,EAAE,uCAAuC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,WAAW,CAChB,WAAW,EACX,gBAAgB,EAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAC5D,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,yCAAyC;AACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAsB1E,MAAM,UAAU,0BAA0B,CACxC,IAAuC;IAEvC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnD,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IAEvD,OAAO,UAAU,CAA8C;QAC7D,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO;QACjD,cAAc,EAAE,cAAc;QAC9B,WAAW,EAAE,sBAAsB;QACnC,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;QACjC,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,EAAE,CAAC,CAAC,UAAU,CAChB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAC1E,gBAAgB,CACqB;QACvC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;YACjC,IAAI,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACvB,gEAAgE;YAChE,kEAAkE;YAClE,+DAA+D;YAC/D,4BAA4B;YAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,0BAA0B,CAAC,gBAAgB,EAAE;gBACxD,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC,CAAC;YACJ,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,mEAAmE;QACnE,oEAAoE;QACpE,gEAAgE;QAChE,0DAA0D;QAC1D,uDAAuD;QACvD,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACtB,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC;oBACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACnB,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9B,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,kBAAkB,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,kEAAkE;QAClE,iCAAiC;QACjC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAC7B,OAAO;YACL,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAChF,KAAK,EAAE;YACL,KAAK,EAAE,GAAG,EAAE;gBACV,aAAa,CAAC,EAAE,CAAC,CAAC;gBAClB,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;YAC3E,CAAC;YACD,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;gBACjB,aAAa,CAAC,EAAE,CAAC,CAAC;gBAClB,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtC,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM;oBACtC,iBAAiB,EAAE,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM;iBACzD,CAAC;YACJ,CAAC;YACD,gEAAgE;YAChE,iEAAiE;YACjE,QAAQ,EAAE,KAAK;YACf,qCAAqC;YACrC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC;SACxC;QACD,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,GAAG,CAAC,MAAuC;YACnD,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAClC,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,YAAuC;YAC/E,OAAO,EAAE,CAAC,MAAoB,EAAE,IAAa,EAAE,GAAoB,EAAE,EAAE,CACrE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;SAClE,CAAC,CAAC;QACH,wEAAwE;QACxE,mDAAmD;QACnD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,wEAAwE;QACxE,wEAAwE;QACxE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7B,cAAc,EAAE,cAAc;YAC9B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,WAAW,CAAC,WAAW,CAAC;YACtC,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC;YAC9C,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE;SACpE,CAAC;QACF,wEAAwE;QACxE,cAAc,EAAE,KAAK;QACrB,uEAAuE;QACvE,8DAA8D;QAC9D,kBAAkB,EAAE,IAAI;QACxB,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QAChC,aAAa,EAAE,mBAAmB;QAClC,IAAI,EAAE;YACJ,sEAAsE;YACtE,gEAAgE;YAChE,mEAAmE;YACnE,mEAAmE;YACnE,oCAAoC;YACpC,aAAa,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,eAAe,CAAC,EAAE;YAClE,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YACzE,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,KAAK;YACrB,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,iEAAiE;gBACjE,8DAA8D;gBAC9D,kDAAkD;gBAClD,8CAA8C;gBAC9C,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAC9C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBACzC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,CAAC;YACD,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;gBAC3B,mEAAmE;gBACnE,iEAAiE;gBACjE,kEAAkE;gBAClE,MAAM,OAAO,GACX,IAAI,KAAK,SAAS;oBAChB,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;wBAC1C,CAAC,CAAC,2BAA2B;wBAC7B,CAAC,CAAC,iBAAiB,CAAC;gBAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1D,CAAC;YACD,WAAW,EAAE,GAAG,EAAE;gBAChB,MAAM,QAAQ,GAAG,SAAS,CAAC,sBAAsB,CAAC,CAAC;gBACnD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1D,CAAC;YACD,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC1B,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,GAAG,EAAE;gBAC5F,GAAG,EAAE,KAAK;aACX,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC;AAeD,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,OAAmC,EAAE;IACvE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,0BAA0B,CAAC;QAC5C,EAAE;QACF,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IACH,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1F,OAAO,SAAS,CAAC,UAAU,EAAE;QAC3B,EAAE;QACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO;QAC5B,IAAI;KACL,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/types.d.ts

@@ -0,0 +1,179 @@
+import type { TwinDatabase } from "@pome-sh/sdk";
+import type { FailureInjectionRule } from "@pome-sh/sdk/server";
+import type { RecorderEvent } from "@pome-sh/shared-types";
+export type TwinStripeDatabase = TwinDatabase;
+export type { RecorderEvent, StateDelta } from "@pome-sh/shared-types";
+export type Recorder = {
+    record(event: RecorderEvent): void;
+};
+export type StripeFidelity = "semantic" | "unsupported";
+export type { FailureInjectionMode, FailureInjectionRule } from "@pome-sh/sdk/server";
+export type SeedPaymentIntent = {
+    id: string;
+    account_id: string;
+    amount: number;
+    currency: string;
+    status: PIStatus;
+    payment_method_types: string[];
+    next_action?: unknown | null;
+    latest_charge_id?: string | null;
+    capture_method: string;
+    confirmation_method: string;
+    idempotency_key?: string | null;
+    metadata: Record<string, string>;
+    crypto_deposit?: unknown | null;
+    client_secret: string;
+    created: number;
+    updated: number;
+    canceled_at?: number | null;
+    captured_at?: number | null;
+};
+export type SeedCharge = {
+    id: string;
+    account_id: string;
+    payment_intent_id: string;
+    amount: number;
+    amount_captured: number;
+    amount_refunded: number;
+    status: "pending" | "succeeded" | "failed";
+    balance_transaction_id?: string | null;
+    captured: boolean;
+    currency: string;
+    created: number;
+};
+export type SeedRefund = {
+    id: string;
+    account_id: string;
+    charge_id: string;
+    payment_intent_id: string;
+    amount: number;
+    currency: string;
+    status: RefundStatus;
+    reason?: string | null;
+    idempotency_key?: string | null;
+    created: number;
+};
+export type SeedBalanceTransaction = {
+    id: string;
+    account_id: string;
+    type: string;
+    amount: number;
+    fee: number;
+    net: number;
+    currency: string;
+    source_id?: string | null;
+    source_type?: string | null;
+    available_on: number;
+    status: "pending" | "available";
+    created: number;
+};
+export type SeedState = {
+    api_keys?: Array<{
+        key: string;
+        sid: string;
+        account_id?: string;
+    }>;
+    failure_injection?: FailureInjectionRule[];
+    payment_intents?: SeedPaymentIntent[];
+    charges?: SeedCharge[];
+    refunds?: SeedRefund[];
+    balance_transactions?: SeedBalanceTransaction[];
+};
+export type ApiKeyRow = {
+    key: string;
+    sid: string;
+    account_id: string;
+    created_at: string;
+    revoked_at: string | null;
+};
+export type IdempotencyKeyRow = {
+    key: string;
+    account_id: string;
+    method: string;
+    path: string;
+    request_hash: string;
+    response_status: number;
+    response_body_json: string;
+    created_at: string;
+};
+/**
+ * v1 PaymentIntent row. Stub — AGENT-B owns domain operations.
+ * Schema for v1 x402 crypto-deposit PIs
+ * (`crypto_deposit_json` carries deposit address + supported tokens).
+ */
+export type PIStatus = "requires_payment_method" | "requires_confirmation" | "requires_action" | "processing" | "requires_capture" | "canceled" | "succeeded";
+export type PIRow = {
+    id: string;
+    account_id: string;
+    amount: number;
+    currency: string;
+    status: PIStatus;
+    payment_method_types_json: string;
+    next_action_json: string | null;
+    latest_charge_id: string | null;
+    capture_method: string;
+    confirmation_method: string;
+    idempotency_key: string | null;
+    metadata_json: string;
+    crypto_deposit_json: string | null;
+    client_secret: string;
+    created: number;
+    updated: number;
+    canceled_at: number | null;
+    captured_at: number | null;
+};
+export type ChargeRow = {
+    id: string;
+    account_id: string;
+    payment_intent_id: string;
+    amount: number;
+    amount_captured: number;
+    amount_refunded: number;
+    status: "pending" | "succeeded" | "failed";
+    balance_transaction_id: string | null;
+    captured: 0 | 1;
+    created: number;
+    currency: string;
+};
+export type BalanceTxRow = {
+    id: string;
+    account_id: string;
+    type: string;
+    amount: number;
+    fee: number;
+    net: number;
+    currency: string;
+    source_id: string | null;
+    source_type: string | null;
+    available_on: number;
+    created: number;
+    status: "pending" | "available";
+};
+export type EventRow = {
+    id: string;
+    account_id: string;
+    type: string;
+    data_json: string;
+    request_idempotency_key: string | null;
+    livemode: 0 | 1;
+    created: number;
+    api_version: string;
+};
+export type RefundStatus = "succeeded" | "pending" | "failed" | "canceled";
+export type RefundRow = {
+    id: string;
+    account_id: string;
+    charge_id: string;
+    payment_intent_id: string;
+    amount: number;
+    currency: string;
+    status: RefundStatus;
+    reason: string | null;
+    idempotency_key: string | null;
+    created: number;
+};
+export type ResolvedSession = {
+    sid: string;
+    account_id: string;
+    via?: "jwt" | "api_key";
+};

package/node_modules/@pome-sh/twin-stripe/dist/src/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":""}

package/node_modules/@pome-sh/twin-stripe/dist/src/upstream-types.d.ts

@@ -0,0 +1,14 @@
+import type Stripe from "stripe";
+export type PaymentIntent = Stripe.PaymentIntent;
+export type Charge = Stripe.Charge;
+export type Refund = Stripe.Refund;
+export type BalanceTransaction = Stripe.BalanceTransaction;
+export type Balance = Stripe.Balance;
+export type ApiList<T> = Stripe.ApiList<T>;
+export type StripeEvent = Stripe.EventBase;
+export type DeepPartial<T> = T extends (infer U)[] ? Array<DeepPartial<U>> : T extends object ? {
+    [K in keyof T]?: DeepPartial<T[K]>;
+} : T;
+export type AssertNoUncovered<Upstream, Emitted, Allow extends PropertyKey> = Exclude<keyof Upstream, keyof Emitted | Allow> extends never ? true : {
+    __UNCOVERED_UPSTREAM_FIELDS__: Exclude<keyof Upstream, keyof Emitted | Allow>;
+};

package/node_modules/@pome-sh/twin-stripe/dist/src/upstream-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=upstream-types.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/upstream-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-types.js","sourceRoot":"","sources":["../../src/upstream-types.ts"],"names":[],"mappings":""}

package/node_modules/@pome-sh/twin-stripe/dist/src/util.d.ts

@@ -0,0 +1,3 @@
+export declare function nowIso(): string;
+export declare function nowUnix(): number;
+export declare function requestId(): string;

package/node_modules/@pome-sh/twin-stripe/dist/src/util.js

@@ -0,0 +1,12 @@
+// SPDX-License-Identifier: Apache-2.0
+import { randomUUID } from "node:crypto";
+export function nowIso() {
+    return new Date().toISOString();
+}
+export function nowUnix() {
+    return Math.floor(Date.now() / 1000);
+}
+export function requestId() {
+    return `req_${randomUUID()}`;
+}
+//# sourceMappingURL=util.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../src/util.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,MAAM;IACpB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,UAAU,EAAE,EAAE,CAAC;AAC/B,CAAC"}