@pome-sh/cli 0.1.1 → 0.2.0

package/node_modules/@pome-sh/twin-stripe/dist/src/errors.js

@@ -18,6 +18,10 @@ export class TwinError extends Error {
     doc_url;
     fidelity;
     supported_surfaces;
+    decline_code;
+    payment_intent;
+    state_mutation;
+    state_delta;
     constructor(type, code, message, opts = {}) {
         super(message);
         this.type = type;
@@ -27,13 +31,19 @@ export class TwinError extends Error {
         this.doc_url = opts.doc_url;
         this.fidelity = opts.fidelity;
         this.supported_surfaces = opts.supported_surfaces;
+        this.decline_code = opts.decline_code;
+        this.payment_intent = opts.payment_intent;
+        this.state_mutation = opts.state_mutation;
+        this.state_delta = opts.state_delta;
     }
     toEnvelope() {
         return stripeError(this.type, this.code, this.message, {
             param: this.param,
             doc_url: this.doc_url,
             fidelity: this.fidelity,
-            supported_surfaces: this.supported_surfaces
+            supported_surfaces: this.supported_surfaces,
+            decline_code: this.decline_code,
+            payment_intent: this.payment_intent
         }).body;
     }
 }
@@ -49,6 +59,10 @@ export function stripeError(type, code, message, opts = {}) {
     if (opts.supported_surfaces !== undefined) {
         error.supported_surfaces = opts.supported_surfaces;
     }
+    if (opts.decline_code !== undefined)
+        error.decline_code = opts.decline_code;
+    if (opts.payment_intent !== undefined)
+        error.payment_intent = opts.payment_intent;
     return {
         status: opts.statusCode ?? 400,
         body: { error }

package/node_modules/@pome-sh/twin-stripe/dist/src/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,0EAA0E;AAC1E,mCAAmC;AAkCnC;;;;GAIG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,MAAM,CAAS;IACf,IAAI,CAAkB;IACtB,IAAI,CAAS;IACb,KAAK,CAAU;IACf,OAAO,CAAU;IACjB,QAAQ,CAAuB;IAC/B,kBAAkB,CAAY;IAEvC,YACE,IAAqB,EACrB,IAAY,EACZ,OAAe,EACf,OAAwB,EAAE;QAE1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACpD,CAAC;IAED,UAAU;QACR,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE;YACrD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC,IAAI,CAAC;IACV,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CACzB,IAAqB,EACrB,IAAY,EACZ,OAAe,EACf,OAAwB,EAAE;IAE1B,MAAM,KAAK,GAAiC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACpE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChE,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACrD,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,UAAU,IAAI,GAAG;QAC9B,IAAI,EAAE,EAAE,KAAK,EAAE;KAChB,CAAC;AACJ,CAAC;AAED,kDAAkD;AAElD,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,2BAA2B;IAChE,OAAO,WAAW,CAAC,uBAAuB,EAAE,cAAc,EAAE,OAAO,EAAE;QACnE,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAO,GAAG,WAAW;IAC7C,OAAO,WAAW,CAAC,uBAAuB,EAAE,WAAW,EAAE,OAAO,EAAE;QAChE,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAO,GAAG,qBAAqB;IACtD,OAAO,WAAW,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,OAAO,EAAE;QACvE,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,WAAW,CAChB,uBAAuB,EACvB,wBAAwB,EACxB,2DAA2D,EAC3D;QACE,UAAU,EAAE,GAAG;QACf,QAAQ,EAAE,aAAa;QACvB,kBAAkB,EAAE;YAClB,gCAAgC;YAChC,uBAAuB;YACvB,uBAAuB;YACvB,8BAA8B;SAC/B;KACF,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,0EAA0E;AAC1E,mCAAmC;AAkDnC;;;;GAIG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,MAAM,CAAS;IACf,IAAI,CAAkB;IACtB,IAAI,CAAS;IACb,KAAK,CAAU;IACf,OAAO,CAAU;IACjB,QAAQ,CAAuB;IAC/B,kBAAkB,CAAY;IAC9B,YAAY,CAAU;IACtB,cAAc,CAAW;IACzB,cAAc,CAAW;IACzB,WAAW,CAAc;IAElC,YACE,IAAqB,EACrB,IAAY,EACZ,OAAe,EACf,OAAwB,EAAE;QAE1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;IAED,UAAU;QACR,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE;YACrD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;YAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CAAC,IAAI,CAAC;IACV,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CACzB,IAAqB,EACrB,IAAY,EACZ,OAAe,EACf,OAAwB,EAAE;IAE1B,MAAM,KAAK,GAAiC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACpE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChE,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAC5E,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;QAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;IAClF,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,UAAU,IAAI,GAAG;QAC9B,IAAI,EAAE,EAAE,KAAK,EAAE;KAChB,CAAC;AACJ,CAAC;AAED,kDAAkD;AAElD,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,2BAA2B;IAChE,OAAO,WAAW,CAAC,uBAAuB,EAAE,cAAc,EAAE,OAAO,EAAE;QACnE,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAO,GAAG,WAAW;IAC7C,OAAO,WAAW,CAAC,uBAAuB,EAAE,WAAW,EAAE,OAAO,EAAE;QAChE,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAO,GAAG,qBAAqB;IACtD,OAAO,WAAW,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,OAAO,EAAE;QACvE,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,WAAW,CAChB,uBAAuB,EACvB,wBAAwB,EACxB,2DAA2D,EAC3D;QACE,UAAU,EAAE,GAAG;QACf,QAAQ,EAAE,aAAa;QACvB,kBAAkB,EAAE;YAClB,gCAAgC;YAChC,uBAAuB;YACvB,uBAAuB;YACvB,8BAA8B;SAC/B;KACF,CACF,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/ids.d.ts

@@ -6,6 +6,8 @@ export declare const ID_PREFIXES: {
     readonly refund: "re_";
     readonly product: "prod_";
     readonly price: "price_";
+    readonly subscription: "sub_";
+    readonly subscription_item: "si_";
     readonly setup_intent: "seti_";
     readonly checkout_session: "cs_test_";
     readonly webhook_endpoint: "we_";

package/node_modules/@pome-sh/twin-stripe/dist/src/ids.js

@@ -10,6 +10,8 @@ export const ID_PREFIXES = {
     refund: "re_",
     product: "prod_",
     price: "price_",
+    subscription: "sub_",
+    subscription_item: "si_",
     setup_intent: "seti_",
     checkout_session: "cs_test_",
     webhook_endpoint: "we_",

package/node_modules/@pome-sh/twin-stripe/dist/src/ids.js.map

@@ -1 +1 @@
-{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/ids.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,4DAA4D;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,MAAM,GAAG,gEAAgE,CAAC;AAEhF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,KAAK;IACrB,cAAc,EAAE,KAAK;IACrB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,QAAQ;IACf,YAAY,EAAE,OAAO;IACrB,gBAAgB,EAAE,UAAU;IAC5B,gBAAgB,EAAE,KAAK;IACvB,KAAK,EAAE,MAAM;IACb,qBAAqB,EAAE,MAAM;IAC7B,sBAAsB,EAAE,MAAM;IAC9B,OAAO,EAAE,UAAU;IACnB,mBAAmB,EAAE,MAAM;IAC3B,4EAA4E;IAC5E,OAAO,EAAE,eAAe;IACxB,kBAAkB,EAAE,eAAe;CAC3B,CAAC;AAIX,wDAAwD;AACxD,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,sEAAsE;IACtE,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAE,CAAC;QACvB,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;YACf,wCAAwC;YACxC,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACvB,gDAAgD;QAChD,GAAG,IAAI,YAAY,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,GAAG,IAAI,WAAW,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/ids.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,4DAA4D;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,MAAM,GAAG,gEAAgE,CAAC;AAEhF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,KAAK;IACrB,cAAc,EAAE,KAAK;IACrB,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,QAAQ;IACf,YAAY,EAAE,MAAM;IACpB,iBAAiB,EAAE,KAAK;IACxB,YAAY,EAAE,OAAO;IACrB,gBAAgB,EAAE,UAAU;IAC5B,gBAAgB,EAAE,KAAK;IACvB,KAAK,EAAE,MAAM;IACb,qBAAqB,EAAE,MAAM;IAC7B,sBAAsB,EAAE,MAAM;IAC9B,OAAO,EAAE,UAAU;IACnB,mBAAmB,EAAE,MAAM;IAC3B,4EAA4E;IAC5E,OAAO,EAAE,eAAe;IACxB,kBAAkB,EAAE,eAAe;CAC3B,CAAC;AAIX,wDAAwD;AACxD,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,sEAAsE;IACtE,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAE,CAAC;QACvB,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;YACf,wCAAwC;YACxC,GAAG,IAAI,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACvB,gDAAgD;QAChD,GAAG,IAAI,YAAY,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,GAAG,IAAI,WAAW,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;AAC1B,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/_helpers.d.ts

@@ -27,3 +27,11 @@ export declare function handle(c: Context, recorder: Recorder | undefined, runId
 export declare function respond(c: Context, recorder: Recorder | undefined, runId: string, started: number, requestBody: unknown, status: number, responseBody: unknown, stateMutation: boolean, fidelity?: StripeFidelity, stateDelta?: StateDelta): Response & import("hono").TypedResponse<never, never, "json">;
 /** Pull standard list-query params off the Hono Context. */
 export declare function parseListQuery(c: Context): Record<string, unknown>;
+/**
+ * Stripe accepts both JSON and form-urlencoded bodies. Real Stripe bills
+ * itself as form-only on POST; the SDKs tend to send form. For agent-friendly
+ * v1 we accept JSON too. Return whichever parses; empty-body POSTs return
+ * `{}`. (Moved here from routes/payment-intents.ts when F-732 gave it a
+ * second and third consumer.)
+ */
+export declare function readBodyForm(c: Context): Promise<unknown>;

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/_helpers.js

@@ -50,7 +50,11 @@ export async function handle(c, recorder, runId, fn) {
     }
     catch (error) {
         if (error instanceof TwinError) {
-            return respond(c, recorder, runId, started, requestBody, error.status, error.toEnvelope(), false, error.fidelity ?? "semantic", null);
+            // Almost every TwinError is thrown before any write. The card
+            // decline (F-731) is the exception: it commits a failed charge +
+            // events + PI transition and then throws the 402, carrying the
+            // committed delta so the recorder logs the mutation truthfully.
+            return respond(c, recorder, runId, started, requestBody, error.status, error.toEnvelope(), error.state_mutation ?? false, error.fidelity ?? "semantic", error.state_delta ?? null);
         }
         if (error instanceof z.ZodError) {
             const first = error.issues[0];
@@ -123,6 +127,106 @@ export function parseListQuery(c) {
         ...created,
     };
 }
+/**
+ * Stripe accepts both JSON and form-urlencoded bodies. Real Stripe bills
+ * itself as form-only on POST; the SDKs tend to send form. For agent-friendly
+ * v1 we accept JSON too. Return whichever parses; empty-body POSTs return
+ * `{}`. (Moved here from routes/payment-intents.ts when F-732 gave it a
+ * second and third consumer.)
+ */
+export async function readBodyForm(c) {
+    const contentType = c.req.header("content-type") ?? "";
+    if (contentType.includes("application/json")) {
+        try {
+            return await c.req.json();
+        }
+        catch {
+            return {};
+        }
+    }
+    if (contentType.includes("application/x-www-form-urlencoded") || contentType.includes("multipart/form-data")) {
+        try {
+            const form = await c.req.parseBody({ all: true });
+            return formToObject(form);
+        }
+        catch {
+            return {};
+        }
+    }
+    // No content-type or unknown: try JSON, fall back to form, fall back to {}.
+    try {
+        return await c.req.json();
+    }
+    catch {
+        try {
+            const form = await c.req.parseBody({ all: true });
+            return formToObject(form);
+        }
+        catch {
+            return {};
+        }
+    }
+}
+/**
+ * Stripe's bracket-form encoding: `payment_method_types[0]=crypto&
+ * payment_method_options[crypto][mode]=deposit`. Convert to nested object.
+ */
+function formToObject(form) {
+    const out = {};
+    for (const [rawKey, value] of Object.entries(form)) {
+        const path = parseBracketPath(rawKey);
+        setDeep(out, path, value);
+    }
+    return out;
+}
+/** Keys that walk Object.prototype and would let a request pollute every
+ *  other object in the same JS process. Real Stripe form-encoding never
+ *  uses these names; rejecting them costs nothing and closes the
+ *  prototype-pollution primitive. */
+const POLLUTION_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+function parseBracketPath(key) {
+    const parts = [];
+    const regex = /([^\[\]]+)|\[([^\[\]]*)\]/g;
+    let match;
+    while ((match = regex.exec(key)) !== null) {
+        const piece = match[1] ?? match[2] ?? "";
+        if (/^\d+$/.test(piece))
+            parts.push(Number(piece));
+        else
+            parts.push(piece);
+    }
+    return parts;
+}
+function setDeep(target, path, value) {
+    // Reject any path that walks through __proto__, constructor, or
+    // prototype. A malicious form body with `__proto__[polluted]=pwned`
+    // would otherwise mutate Object.prototype and corrupt every other
+    // object in this process for the rest of the sandbox's lifetime.
+    for (const key of path) {
+        if (typeof key === "string" && POLLUTION_KEYS.has(key)) {
+            // Drop the assignment silently — the field would not be a real
+            // Stripe parameter anyway. Real Stripe returns 400 for unknown
+            // params; v1 deliberately accepts unknowns to keep the agent
+            // surface flexible, so silent drop is the closest fidelity.
+            return;
+        }
+    }
+    let cursor = target;
+    for (let i = 0; i < path.length; i++) {
+        const key = path[i];
+        const isLast = i === path.length - 1;
+        if (isLast) {
+            cursor[key] = value;
+        }
+        else {
+            const nextKey = path[i + 1];
+            if (cursor[key] === undefined) {
+                cursor[key] = typeof nextKey === "number" ? [] : {};
+            }
+            cursor = cursor[key];
+        }
+    }
+}
 function createdRangeFromQuery(c) {
     const out = {};
     const flat = c.req.query("created");

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/_helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../../src/routes/_helpers.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,wEAAwE;AAGxE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,8BAA8B,GAE/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAOtD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAgC,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CACjB,WAAW,EACX,gBAAgB,EAChB,wDAAwD,EACxD,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,CAAC;AAC5B,CAAC;AAcD,MAAM,UAAU,EAAE,CAChB,IAAa,EACb,QAAQ,GAAG,KAAK,EAChB,UAAuB;IAEvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAa,EAAE,UAAuB;IAC5D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACzD,sEAAsE;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,CAAU,EACV,QAA8B,EAC9B,KAAa,EACb,EAA4C;IAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAY,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACtD,mEAAmE;YACnE,gCAAgC;YAChC,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,QAAQ,EACf,UAAU,EACV,MAAM,CAAC,UAAU,IAAI,IAAI,CAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAAE,EAClB,KAAK,EACL,KAAK,CAAC,QAAQ,IAAI,UAAU,EAC5B,IAAI,CACL,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,WAAW,CAC1B,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,EAAE,OAAO,IAAI,6BAA6B,EAC/C,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAClC,CAAC;YACF,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,UAAU,EACV,IAAI,CACL,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,WAAW,CAC1B,uBAAuB,EACvB,cAAc,EACd,uCAAuC,CACxC,CAAC;YACF,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,UAAU,EACV,IAAI,CACL,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAC1B,WAAW,EACX,gBAAgB,EAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAChE,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;QACF,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,UAAU,EACV,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,CAAU,EACV,QAA8B,EAC9B,KAAa,EACb,OAAe,EACf,WAAoB,EACpB,MAAc,EACd,YAAqB,EACrB,aAAsB,EACtB,WAA2B,UAAU,EACrC,aAAyB,IAAI;IAE7B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,QAAQ,GAAI,CAAC,CAAC,GAAG,CAAC,8BAAuC,CAEjD,IAAI,IAAI,CAAC;IACvB,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1D,sEAAsE;IACtE,oEAAoE;IACpE,kEAAkE;IAClE,qDAAqD;IACrD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC;IAC/D,QAAQ,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,IAAI,KAAK;QAC9D,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,MAAM;QACxB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;QACpB,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;QACjC,YAAY,EAAE,WAAW;QACzB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;QAChC,QAAQ;QACR,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,UAAU;QACvB,KAAK,EAAE,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;KAC3D,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC,SAAkB,EAAE,WAAoB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACxD,MAAM,GAAG,GAAI,IAAyC,CAAC,KAAK,CAAC;QAC7D,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IACjE,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc,CAAC,CAAU;IACvC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,OAAO,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAC/D,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC7C,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;QAC3C,GAAG,OAAO;KACgB,CAAC;AAC/B,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAU;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../../src/routes/_helpers.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,wEAAwE;AAGxE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,8BAA8B,GAE/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAOtD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAgC,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CACjB,WAAW,EACX,gBAAgB,EAChB,wDAAwD,EACxD,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,CAAC;AAC5B,CAAC;AAcD,MAAM,UAAU,EAAE,CAChB,IAAa,EACb,QAAQ,GAAG,KAAK,EAChB,UAAuB;IAEvB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAa,EAAE,UAAuB;IAC5D,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACzD,sEAAsE;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,CAAU,EACV,QAA8B,EAC9B,KAAa,EACb,EAA4C;IAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAY,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACtD,mEAAmE;YACnE,gCAAgC;YAChC,IAAI,CAAC;gBACH,WAAW,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,QAAQ,EACf,UAAU,EACV,MAAM,CAAC,UAAU,IAAI,IAAI,CAC1B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,8DAA8D;YAC9D,iEAAiE;YACjE,+DAA+D;YAC/D,gEAAgE;YAChE,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,UAAU,EAAE,EAClB,KAAK,CAAC,cAAc,IAAI,KAAK,EAC7B,KAAK,CAAC,QAAQ,IAAI,UAAU,EAC5B,KAAK,CAAC,WAAW,IAAI,IAAI,CAC1B,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,QAAQ,GAAG,WAAW,CAC1B,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,EAAE,OAAO,IAAI,6BAA6B,EAC/C,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAClC,CAAC;YACF,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,UAAU,EACV,IAAI,CACL,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,WAAW,CAC1B,uBAAuB,EACvB,cAAc,EACd,uCAAuC,CACxC,CAAC;YACF,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,UAAU,EACV,IAAI,CACL,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,CAC1B,WAAW,EACX,gBAAgB,EAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAChE,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;QACF,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,OAAO,EACP,WAAW,EACX,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,UAAU,EACV,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,CAAU,EACV,QAA8B,EAC9B,KAAa,EACb,OAAe,EACf,WAAoB,EACpB,MAAc,EACd,YAAqB,EACrB,aAAsB,EACtB,WAA2B,UAAU,EACrC,aAAyB,IAAI;IAE7B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,QAAQ,GAAI,CAAC,CAAC,GAAG,CAAC,8BAAuC,CAEjD,IAAI,IAAI,CAAC;IACvB,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IAC1D,sEAAsE;IACtE,oEAAoE;IACpE,kEAAkE;IAClE,qDAAqD;IACrD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC;IAC/D,QAAQ,EAAE,MAAM,CAAC;QACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,KAAK;QACjB,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,IAAI,KAAK;QAC9D,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,MAAM;QACxB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;QACpB,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;QACjC,YAAY,EAAE,WAAW;QACzB,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;QAChC,QAAQ;QACR,cAAc,EAAE,aAAa;QAC7B,WAAW,EAAE,UAAU;QACvB,KAAK,EAAE,WAAW,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;KAC3D,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,CAAC,SAAkB,EAAE,WAAoB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACxD,MAAM,GAAG,GAAI,IAAyC,CAAC,KAAK,CAAC;QAC7D,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IACjE,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc,CAAC,CAAU;IACvC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,OAAO,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QAC/D,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC7C,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC;QAC3C,GAAG,OAAO;KACgB,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,CAAU;IAC3C,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC7G,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,YAAY,CAAC,IAA+B,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,4EAA4E;IAC5E,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,OAAO,YAAY,CAAC,IAA+B,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,IAA6B;IACjD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;qCAGqC;AACrC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAE1E,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,4BAA4B,CAAC;IAC3C,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;;YAC9C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,MAA+B,EAAE,IAA4B,EAAE,KAAc;IAC5F,gEAAgE;IAChE,oEAAoE;IACpE,kEAAkE;IAClE,iEAAiE;IACjE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,+DAA+D;YAC/D,+DAA+D;YAC/D,6DAA6D;YAC7D,4DAA4D;YAC5D,OAAO;QACT,CAAC;IACH,CAAC;IACD,IAAI,MAAM,GAAqC,MAAM,CAAC;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,CAAC;YACD,MAAM,GAAG,MAAM,CAAC,GAAG,CAAqC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAU;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/billing.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from "hono";
+import type { StripeDomain } from "../domain/index.js";
+import type { Recorder } from "../types.js";
+export declare function registerBillingRoutes(router: Hono, domain: StripeDomain, recorder: Recorder | undefined, runId: string): void;

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/billing.js

@@ -0,0 +1,117 @@
+// SPDX-License-Identifier: Apache-2.0
+// Billing REST — F-734 (M5 warm surfaces, shape tier per the F-729 ruling).
+//
+// Products: POST/GET /v1/products(/:id) · Prices: POST/GET /v1/prices(/:id) ·
+// Subscriptions: POST/GET /v1/subscriptions(/:id), POST/DELETE
+// /v1/subscriptions/:id · Invoices: GET /v1/invoices(/:id) READS ONLY.
+// Everything else in these families (product/price updates, invoice
+// create/finalize/pay) stays unlisted-cold on the /v1/* 501 catch-all.
+import { z } from "zod";
+import { accountId, created, handle, ok, parseListQuery, readBodyForm } from "./_helpers.js";
+// Stripe's form encoding surfaces booleans as "true"/"false" strings
+// (same shape as routes/payment-intents.ts).
+const formBool = z
+    .union([z.boolean(), z.enum(["true", "false"]).transform((v) => v === "true")])
+    .optional();
+// Metadata values keep "" and null so the domain can apply Stripe's per-key
+// unset semantics on update (same as the customers surface).
+const metadataSchema = z.record(z.string(), z.string().nullable()).optional();
+const productFieldsSchema = z.object({
+    name: z.string().min(1).optional(),
+    description: z.string().nullish(),
+    active: formBool,
+    metadata: metadataSchema,
+});
+const createPriceSchema = z.object({
+    currency: z.string().min(1).optional(),
+    product: z.string().min(1).optional(),
+    unit_amount: z.coerce.number().int().nonnegative().optional(),
+    recurring: z
+        .object({
+        interval: z.string().min(1),
+        interval_count: z.coerce.number().int().positive().optional(),
+    })
+        .optional(),
+    nickname: z.string().nullish(),
+    lookup_key: z.string().nullish(),
+    active: formBool,
+    metadata: metadataSchema,
+});
+const createSubscriptionSchema = z.object({
+    customer: z.string().min(1).optional(),
+    items: z
+        .array(z.object({
+        price: z.string().min(1).optional(),
+        quantity: z.coerce.number().int().positive().optional(),
+    }))
+        .optional(),
+    cancel_at_period_end: formBool,
+    metadata: metadataSchema,
+});
+const updateSubscriptionSchema = z.object({
+    cancel_at_period_end: formBool,
+    metadata: metadataSchema,
+});
+export function registerBillingRoutes(router, domain, recorder, runId) {
+    // ---------- Products ----------
+    router.post("/v1/products", (c) => handle(c, recorder, runId, async () => {
+        const input = productFieldsSchema.parse(await readBodyForm(c));
+        const { body, delta } = domain.createProduct(accountId(c), input);
+        return created(body, delta);
+    }));
+    router.get("/v1/products/:id", (c) => handle(c, recorder, runId, () => ok(domain.retrieveProduct(accountId(c), c.req.param("id")))));
+    router.get("/v1/products", (c) => handle(c, recorder, runId, () => {
+        const list = parseListQuery(c);
+        return ok(domain.listProducts(accountId(c), { ...list, active: queryBool(c.req.query("active")) }));
+    }));
+    // ---------- Prices ----------
+    router.post("/v1/prices", (c) => handle(c, recorder, runId, async () => {
+        const input = createPriceSchema.parse(await readBodyForm(c));
+        const { body, delta } = domain.createPrice(accountId(c), input);
+        return created(body, delta);
+    }));
+    router.get("/v1/prices/:id", (c) => handle(c, recorder, runId, () => ok(domain.retrievePrice(accountId(c), c.req.param("id")))));
+    router.get("/v1/prices", (c) => handle(c, recorder, runId, () => {
+        const list = parseListQuery(c);
+        return ok(domain.listPrices(accountId(c), {
+            ...list,
+            product: c.req.query("product"),
+            active: queryBool(c.req.query("active")),
+        }));
+    }));
+    // ---------- Subscriptions ----------
+    router.post("/v1/subscriptions", (c) => handle(c, recorder, runId, async () => {
+        const input = createSubscriptionSchema.parse(await readBodyForm(c));
+        const { body, delta } = domain.createSubscription(accountId(c), input);
+        return created(body, delta);
+    }));
+    router.get("/v1/subscriptions/:id", (c) => handle(c, recorder, runId, () => ok(domain.retrieveSubscription(accountId(c), c.req.param("id")))));
+    router.post("/v1/subscriptions/:id", (c) => handle(c, recorder, runId, async () => {
+        const input = updateSubscriptionSchema.parse(await readBodyForm(c));
+        const { body, delta } = domain.updateSubscription(accountId(c), c.req.param("id"), input);
+        return ok(body, true, delta);
+    }));
+    router.delete("/v1/subscriptions/:id", (c) => handle(c, recorder, runId, () => {
+        const { body, delta } = domain.cancelSubscription(accountId(c), c.req.param("id"));
+        return ok(body, true, delta);
+    }));
+    router.get("/v1/subscriptions", (c) => handle(c, recorder, runId, () => {
+        const list = parseListQuery(c);
+        return ok(domain.listSubscriptions(accountId(c), {
+            ...list,
+            customer: c.req.query("customer"),
+            status: c.req.query("status"),
+        }));
+    }));
+    // ---------- Invoices (reads only) ----------
+    router.get("/v1/invoices/:id", (c) => handle(c, recorder, runId, () => ok(domain.retrieveInvoice(accountId(c), c.req.param("id")))));
+    router.get("/v1/invoices", (c) => handle(c, recorder, runId, () => ok(domain.listInvoices(accountId(c), parseListQuery(c)))));
+}
+function queryBool(value) {
+    if (value === "true")
+        return true;
+    if (value === "false")
+        return false;
+    return undefined;
+}
+//# sourceMappingURL=billing.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../../src/routes/billing.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,4EAA4E;AAC5E,EAAE;AACF,8EAA8E;AAC9E,+DAA+D;AAC/D,uEAAuE;AACvE,oEAAoE;AACpE,uEAAuE;AAGvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7F,qEAAqE;AACrE,6CAA6C;AAC7C,MAAM,QAAQ,GAAG,CAAC;KACf,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;KAC9E,QAAQ,EAAE,CAAC;AAEd,4EAA4E;AAC5E,6DAA6D;AAC7D,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAE9E,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC7D,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC9D,CAAC;SACD,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAChC,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC;SACL,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KACxD,CAAC,CACH;SACA,QAAQ,EAAE;IACb,oBAAoB,EAAE,QAAQ;IAC9B,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,oBAAoB,EAAE,QAAQ;IAC9B,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CACnC,MAAY,EACZ,MAAoB,EACpB,QAA8B,EAC9B,KAAa;IAEb,iCAAiC;IAEjC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAChC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CACnC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAC9B,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC,CAC7D,CACF,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,EAAE,CACP,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CACzF,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,+BAA+B;IAE/B,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAC9B,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CACjC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAC9B,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC,CAC3D,CACF,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAC7B,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,EAAE,CACP,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YAC9B,GAAG,IAAI;YACP,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;YAC/B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SACzC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,sCAAsC;IAEtC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CACrC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvE,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE,CACxC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAC9B,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC,CAClE,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE,CACzC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,KAAK,CAAC,CAAC;QAC3F,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3C,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QAC9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;QACpF,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CACpC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,EAAE,CACP,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACrC,GAAG,IAAI;YACP,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YACjC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC9B,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,8CAA8C;IAE9C,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CACnC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAC9B,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC,CAC7D,CACF,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAC9B,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CACzD,CACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/customers.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from "hono";
+import type { StripeDomain } from "../domain/index.js";
+import type { Recorder } from "../types.js";
+export declare function registerCustomersRoutes(router: Hono, domain: StripeDomain, recorder: Recorder | undefined, runId: string): void;

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/customers.js

@@ -0,0 +1,47 @@
+// SPDX-License-Identifier: Apache-2.0
+// Customers REST — F-732 (M5 customer-management hot path).
+//
+// POST /v1/customers · GET /v1/customers(/:id) · POST /v1/customers/:id ·
+// DELETE /v1/customers/:id · GET /v1/customers/:id/payment_methods.
+// Idempotency is handled upstream by idempotencyMiddleware; every mutation
+// carries the canonical state_delta through to respond().
+import { z } from "zod";
+import { accountId, created, handle, ok, parseListQuery, readBodyForm } from "./_helpers.js";
+// Every field optional, like real Stripe. Metadata values keep "" and null
+// so the domain can apply Stripe's per-key unset semantics on update.
+const customerFieldsSchema = z.object({
+    name: z.string().nullish(),
+    email: z.string().nullish(),
+    description: z.string().nullish(),
+    phone: z.string().nullish(),
+    metadata: z.record(z.string(), z.string().nullable()).optional(),
+});
+export function registerCustomersRoutes(router, domain, recorder, runId) {
+    router.post("/v1/customers", (c) => handle(c, recorder, runId, async () => {
+        const input = customerFieldsSchema.parse(await readBodyForm(c));
+        const { body, delta } = domain.createCustomer(accountId(c), input);
+        return created(body, delta);
+    }));
+    router.get("/v1/customers/:id/payment_methods", (c) => handle(c, recorder, runId, () => {
+        const list = parseListQuery(c);
+        return ok(domain.listCustomerPaymentMethods(accountId(c), c.req.param("id"), {
+            ...list,
+            type: c.req.query("type"),
+        }));
+    }));
+    router.get("/v1/customers/:id", (c) => handle(c, recorder, runId, () => ok(domain.retrieveCustomer(accountId(c), c.req.param("id")))));
+    router.post("/v1/customers/:id", (c) => handle(c, recorder, runId, async () => {
+        const input = customerFieldsSchema.parse(await readBodyForm(c));
+        const { body, delta } = domain.updateCustomer(accountId(c), c.req.param("id"), input);
+        return ok(body, true, delta);
+    }));
+    router.delete("/v1/customers/:id", (c) => handle(c, recorder, runId, () => {
+        const { body, delta } = domain.deleteCustomer(accountId(c), c.req.param("id"));
+        return ok(body, true, delta);
+    }));
+    router.get("/v1/customers", (c) => handle(c, recorder, runId, () => {
+        const list = parseListQuery(c);
+        return ok(domain.listCustomers(accountId(c), { ...list, email: c.req.query("email") }));
+    }));
+}
+//# sourceMappingURL=customers.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/customers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customers.js","sourceRoot":"","sources":["../../../src/routes/customers.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,4DAA4D;AAC5D,EAAE;AACF,0EAA0E;AAC1E,oEAAoE;AACpE,2EAA2E;AAC3E,0DAA0D;AAG1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7F,2EAA2E;AAC3E,sEAAsE;AACtE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC,CAAC;AAEH,MAAM,UAAU,uBAAuB,CACrC,MAAY,EACZ,MAAoB,EACpB,QAA8B,EAC9B,KAAa;IAEb,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CACjC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnE,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,mCAAmC,EAAE,CAAC,CAAC,EAAE,EAAE,CACpD,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,EAAE,CACP,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE;YAClE,GAAG,IAAI;YACP,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;SAC1B,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CACpC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAC9B,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC,CAC9D,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CACrC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,KAAK,CAAC,CAAC;QACvF,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE,CACvC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QAC9B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAE,CAAC,CAAC;QAChF,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAChC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,EAAE,CACP,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAC7E,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/index.js

@@ -13,11 +13,17 @@ import { registerChargesRoutes } from "./charges.js";
 import { registerBalanceRoutes } from "./balance.js";
 import { registerEventsRoutes } from "./events.js";
 import { registerRefundsRoutes } from "./refunds.js";
+import { registerCustomersRoutes } from "./customers.js";
+import { registerPaymentMethodsRoutes } from "./payment-methods.js";
+import { registerBillingRoutes } from "./billing.js";
 export function registerStripeRoutes(router, domain, recorder, runId) {
     // Stripe REST
     registerPaymentIntentRoutes(router, domain, recorder, runId);
     registerChargesRoutes(router, domain, recorder, runId);
     registerRefundsRoutes(router, domain, recorder, runId);
+    registerCustomersRoutes(router, domain, recorder, runId);
+    registerPaymentMethodsRoutes(router, domain, recorder, runId);
+    registerBillingRoutes(router, domain, recorder, runId);
     registerBalanceRoutes(router, domain, recorder, runId);
     registerEventsRoutes(router, domain, recorder, runId);
     // Loud 501 for any /v1/* that isn't implemented. Scoped to /v1/* so the

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,qEAAqE;AACrE,wEAAwE;AACxE,kEAAkE;AAClE,2EAA2E;AAC3E,4EAA4E;AAC5E,8CAA8C;AAK9C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,UAAU,oBAAoB,CAClC,MAAY,EACZ,MAAoB,EACpB,QAA8B,EAC9B,KAAa;IAEb,cAAc;IACd,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7D,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEtD,wEAAwE;IACxE,oDAAoD;IACpD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,IAAI,CAAC,GAAG,EAAE,EACV,IAAI,EACJ,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,aAAa,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,qEAAqE;AACrE,wEAAwE;AACxE,kEAAkE;AAClE,2EAA2E;AAC3E,4EAA4E;AAC5E,8CAA8C;AAK9C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,UAAU,oBAAoB,CAClC,MAAY,EACZ,MAAoB,EACpB,QAA8B,EAC9B,KAAa;IAEb,cAAc;IACd,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7D,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACzD,4BAA4B,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9D,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAEtD,wEAAwE;IACxE,oDAAoD;IACpD,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,OAAO,OAAO,CACZ,CAAC,EACD,QAAQ,EACR,KAAK,EACL,IAAI,CAAC,GAAG,EAAE,EACV,IAAI,EACJ,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,IAAI,EACb,KAAK,EACL,aAAa,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/routes/payment-intents.js

@@ -1,7 +1,11 @@
 // SPDX-License-Identifier: Apache-2.0
 // REST routes #1-6 from FDRS-270.
 import { z } from "zod";
-import { handle, ok, created, parseListQuery, accountId } from "./_helpers.js";
+import { handle, ok, created, parseListQuery, accountId, readBodyForm } from "./_helpers.js";
+// Stripe's form encoding surfaces booleans as "true"/"false" strings.
+const formBool = z
+    .union([z.boolean(), z.enum(["true", "false"]).transform((v) => v === "true")])
+    .optional();
 const createPISchema = z.object({
     amount: z.coerce.number().int().positive(),
     currency: z.string().min(1),
@@ -18,10 +22,24 @@ const createPISchema = z.object({
         }),
     })
         .optional(),
+    payment_method: z.string().optional(),
+    customer: z.string().optional(),
+    confirm: formBool,
     metadata: z.record(z.string(), z.string()).optional(),
     capture_method: z.string().optional(),
     confirmation_method: z.string().optional(),
 });
+const confirmPISchema = z.object({
+    payment_method: z.string().optional(),
+});
+// Metadata values keep "" and null so the domain can apply Stripe's
+// per-key unset semantics, same as the customers update surface.
+const updatePISchema = z.object({
+    amount: z.coerce.number().int().optional(),
+    metadata: z.record(z.string(), z.string().nullable()).optional(),
+    payment_method: z.string().optional(),
+    customer: z.string().optional(),
+});
 export function registerPaymentIntentRoutes(router, domain, recorder, runId) {
     // 1. POST /v1/payment_intents
     router.post("/v1/payment_intents", (c) => handle(c, recorder, runId, async () => {
@@ -38,8 +56,15 @@ export function registerPaymentIntentRoutes(router, domain, recorder, runId) {
         return ok(domain.listPaymentIntents(accountId(c), list));
     }));
     // 4. POST /v1/payment_intents/:id/confirm
-    router.post("/v1/payment_intents/:id/confirm", (c) => handle(c, recorder, runId, () => {
-        const { body, delta } = domain.confirmPaymentIntent(accountId(c), c.req.param("id"));
+    router.post("/v1/payment_intents/:id/confirm", (c) => handle(c, recorder, runId, async () => {
+        const input = confirmPISchema.parse(await readBodyForm(c));
+        const { body, delta } = domain.confirmPaymentIntent(accountId(c), c.req.param("id"), input);
+        return ok(body, true, delta);
+    }));
+    // 4b. POST /v1/payment_intents/:id — update (F-731, the retry-with-new-PM step)
+    router.post("/v1/payment_intents/:id", (c) => handle(c, recorder, runId, async () => {
+        const input = updatePISchema.parse(await readBodyForm(c));
+        const { body, delta } = domain.updatePaymentIntent(accountId(c), c.req.param("id"), input);
         return ok(body, true, delta);
     }));
     // 5. POST /v1/payment_intents/:id/cancel
@@ -53,103 +78,4 @@ export function registerPaymentIntentRoutes(router, domain, recorder, runId) {
         return ok(body, true, delta);
     }));
 }
-/**
- * Stripe accepts both JSON and form-urlencoded bodies. Real Stripe bills
- * itself as form-only on POST; the SDKs tend to send form. For agent-friendly
- * v1 we accept JSON too. Return whichever parses; empty-body POSTs return
- * `{}`.
- */
-async function readBodyForm(c) {
-    const contentType = c.req.header("content-type") ?? "";
-    if (contentType.includes("application/json")) {
-        try {
-            return await c.req.json();
-        }
-        catch {
-            return {};
-        }
-    }
-    if (contentType.includes("application/x-www-form-urlencoded") || contentType.includes("multipart/form-data")) {
-        try {
-            const form = await c.req.parseBody({ all: true });
-            return formToObject(form);
-        }
-        catch {
-            return {};
-        }
-    }
-    // No content-type or unknown: try JSON, fall back to form, fall back to {}.
-    try {
-        return await c.req.json();
-    }
-    catch {
-        try {
-            const form = await c.req.parseBody({ all: true });
-            return formToObject(form);
-        }
-        catch {
-            return {};
-        }
-    }
-}
-/**
- * Stripe's bracket-form encoding: `payment_method_types[0]=crypto&
- * payment_method_options[crypto][mode]=deposit`. Convert to nested object.
- */
-function formToObject(form) {
-    const out = {};
-    for (const [rawKey, value] of Object.entries(form)) {
-        const path = parseBracketPath(rawKey);
-        setDeep(out, path, value);
-    }
-    return out;
-}
-/** Keys that walk Object.prototype and would let a request pollute every
- *  other object in the same JS process. Real Stripe form-encoding never
- *  uses these names; rejecting them costs nothing and closes the
- *  prototype-pollution primitive. */
-const POLLUTION_KEYS = new Set(["__proto__", "constructor", "prototype"]);
-function parseBracketPath(key) {
-    const parts = [];
-    const regex = /([^\[\]]+)|\[([^\[\]]*)\]/g;
-    let match;
-    while ((match = regex.exec(key)) !== null) {
-        const piece = match[1] ?? match[2] ?? "";
-        if (/^\d+$/.test(piece))
-            parts.push(Number(piece));
-        else
-            parts.push(piece);
-    }
-    return parts;
-}
-function setDeep(target, path, value) {
-    // Reject any path that walks through __proto__, constructor, or
-    // prototype. A malicious form body with `__proto__[polluted]=pwned`
-    // would otherwise mutate Object.prototype and corrupt every other
-    // object in this process for the rest of the sandbox's lifetime.
-    for (const key of path) {
-        if (typeof key === "string" && POLLUTION_KEYS.has(key)) {
-            // Drop the assignment silently — the field would not be a real
-            // Stripe parameter anyway. Real Stripe returns 400 for unknown
-            // params; v1 deliberately accepts unknowns to keep the agent
-            // surface flexible, so silent drop is the closest fidelity.
-            return;
-        }
-    }
-    let cursor = target;
-    for (let i = 0; i < path.length; i++) {
-        const key = path[i];
-        const isLast = i === path.length - 1;
-        if (isLast) {
-            cursor[key] = value;
-        }
-        else {
-            const nextKey = path[i + 1];
-            if (cursor[key] === undefined) {
-                cursor[key] = typeof nextKey === "number" ? [] : {};
-            }
-            cursor = cursor[key];
-        }
-    }
-}
 //# sourceMappingURL=payment-intents.js.map