@pome-sh/cli 0.14.0 → 0.16.0

package/node_modules/@pome-sh/twin-stripe/dist/src/check-params.d.ts

@@ -0,0 +1,8 @@
+import { type CheckParamType } from "@pome-sh/sdk/checks";
+export declare const chargeId: CheckParamType;
+export declare const minorUnitAmount: CheckParamType;
+export declare const rowCount: CheckParamType;
+export declare const paymentIntentStatus: CheckParamType;
+export declare const chargeStatus: CheckParamType;
+export declare const stripeEventType: CheckParamType;
+export declare const stripeErrorType: CheckParamType;

package/node_modules/@pome-sh/twin-stripe/dist/src/check-params.js

@@ -0,0 +1,123 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// The typed slots Stripe's declared checks fill (F-1127).
+//
+// They live in the twin, not the sdk, for the same reason the declarations do:
+// the twin owns what a Stripe charge id, PaymentIntent status or event type may
+// look like. Every pattern is NARROW on purpose — a slot type is what turns "the
+// author picked something impossible" into a corrupted instance reported by
+// name, rather than a lookup that quietly finds nothing.
+//
+// ── The closed sets are TYPE-CHECKED against the twin's own unions ───────────
+//
+// `oneOf` needs a runtime array and a union is not one, so the members are
+// written out — but each array carries `satisfies readonly <Union>[]`, so a
+// member that is not a real value of that column fails `tsc` here rather than
+// binding a sentence nothing can satisfy. That is the half of the drift that
+// actually bites: adding a value to the union without adding it here narrows
+// what an author may say (visible, and someone complains), while inventing a
+// value here would ship a pickable status the twin can never reach (invisible,
+// and the criterion just never passes).
+//
+// All patterns are capture-group-free; `defineCheck` throws otherwise, because
+// every consumer reads capture group i+1 as slot i and one smuggled group hands
+// each predicate its neighbour's argument.
+import { oneOf } from "@pome-sh/sdk/checks";
+// A charge id, as the twin mints it (`ids.ts` → `ch_<random>`) or as a seed
+// hand-writes it (`ch_test_200`).
+//
+// Deliberately WIDER than `ch_[A-Za-z0-9]+`, and the reason is the vacuity
+// probe rather than tolerance: `stripe.no-refund-on-charge`'s mutant substitutes
+// `VACUITY_SENTINEL` (`pome-vacuity-never`) into this slot, and a mutant that
+// does not re-bind measures nothing — it reads as "the verdict moved" and
+// blesses the very criterion the probe exists to catch. The hyphen and the
+// absent `ch_` prefix are both there for that.
+export const chargeId = {
+    name: "charge",
+    pattern: "[A-Za-z0-9_-]+",
+    example: "ch_test_200",
+    render: (value) => value,
+    parse: (raw) => raw,
+};
+// `PIRow.amount` is an integer minor unit — cents for USD. Digits only, no
+// separators and no currency symbol: the state carries a number, and a slot that
+// accepted "$100.00" would have to decide how to parse it, which is a second
+// place for the same fact to live.
+//
+// Accepts `VACUITY_SENTINEL_NUMBER` (987654321) by construction.
+export const minorUnitAmount = {
+    name: "amount",
+    pattern: "\\d+",
+    example: "10000",
+    render: (value) => value,
+    parse: (raw) => raw,
+};
+// A refund row count. Digits, including zero — "the number of refunds … is 0"
+// is a legitimate assertion an author may want, and excluding it would push
+// them back to prose.
+export const rowCount = {
+    name: "count",
+    pattern: "\\d+",
+    example: "1",
+    render: (value) => value,
+    parse: (raw) => raw,
+};
+// `PIStatus` (`types.ts`) — the seven states the payment_intents column can
+// hold, which are also upstream Stripe's seven.
+const PAYMENT_INTENT_STATUSES = [
+    "requires_payment_method",
+    "requires_confirmation",
+    "requires_action",
+    "processing",
+    "requires_capture",
+    "canceled",
+    "succeeded",
+];
+export const paymentIntentStatus = oneOf("status", PAYMENT_INTENT_STATUSES, "succeeded");
+// `ChargeRow["status"]` (`types.ts`). Three, not the PI's seven — a charge is
+// created already settled or already declined.
+const CHARGE_STATUSES = [
+    "pending",
+    "succeeded",
+    "failed",
+];
+export const chargeStatus = oneOf("status", CHARGE_STATUSES, "succeeded");
+// `EventType` (`domain/events.ts`) — every event the twin can append. v1
+// delivers no webhooks, so this is also the whole set an examinee can observe by
+// polling `GET /v1/events`.
+const EVENT_TYPES = [
+    "payment_intent.created",
+    "payment_intent.requires_action",
+    "payment_intent.processing",
+    "payment_intent.succeeded",
+    "payment_intent.payment_failed",
+    "payment_intent.canceled",
+    "charge.succeeded",
+    "charge.failed",
+    "charge.refunded",
+    "refund.created",
+    "customer.created",
+    "customer.updated",
+    "customer.deleted",
+    "payment_method.attached",
+    "payment_method.detached",
+];
+// The one slot whose rendered form carries no quotes, because the corpus
+// already says `payment_intent.succeeded is emitted` and a migration that
+// re-renders an existing criterion differently rewrites it. The dot is inside
+// the member literals, which `oneOf` escapes — so it matches a dot and not
+// "any character".
+export const stripeEventType = oneOf("event_type", EVENT_TYPES, "payment_intent.succeeded");
+// `StripeErrorType` (`errors.ts`) — the five `error.type` values the twin's
+// envelope can carry. Named as a set rather than scanned as free text because
+// `type` is the field a Stripe SDK branches on, and an author asserting about a
+// value the twin never emits should be stopped at the picker.
+const ERROR_TYPES = [
+    "invalid_request_error",
+    "api_error",
+    "card_error",
+    "idempotency_error",
+    "rate_limit_error",
+];
+export const stripeErrorType = oneOf("error_type", ERROR_TYPES, "invalid_request_error");
+//# sourceMappingURL=check-params.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/check-params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-params.js","sourceRoot":"","sources":["../../src/check-params.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,0DAA0D;AAC1D,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,iFAAiF;AACjF,4EAA4E;AAC5E,yDAAyD;AACzD,EAAE;AACF,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,wCAAwC;AACxC,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,2CAA2C;AAE3C,OAAO,EAAE,KAAK,EAAuB,MAAM,qBAAqB,CAAC;AAKjE,4EAA4E;AAC5E,kCAAkC;AAClC,EAAE;AACF,2EAA2E;AAC3E,iFAAiF;AACjF,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,+CAA+C;AAC/C,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,gBAAgB;IACzB,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACxB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;CACpB,CAAC;AAEF,2EAA2E;AAC3E,iFAAiF;AACjF,6EAA6E;AAC7E,mCAAmC;AACnC,EAAE;AACF,iEAAiE;AACjE,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,OAAO;IAChB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACxB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;CACpB,CAAC;AAEF,8EAA8E;AAC9E,4EAA4E;AAC5E,sBAAsB;AACtB,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,MAAM;IACf,OAAO,EAAE,GAAG;IACZ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IACxB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG;CACpB,CAAC;AAEF,4EAA4E;AAC5E,gDAAgD;AAChD,MAAM,uBAAuB,GAAG;IAC9B,yBAAyB;IACzB,uBAAuB;IACvB,iBAAiB;IACjB,YAAY;IACZ,kBAAkB;IAClB,UAAU;IACV,WAAW;CAC2B,CAAC;AAEzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC,QAAQ,EAAE,uBAAuB,EAAE,WAAW,CAAC,CAAC;AAEzF,8EAA8E;AAC9E,+CAA+C;AAC/C,MAAM,eAAe,GAAG;IACtB,SAAS;IACT,WAAW;IACX,QAAQ;CACyC,CAAC;AAEpD,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;AAE1E,yEAAyE;AACzE,iFAAiF;AACjF,4BAA4B;AAC5B,MAAM,WAAW,GAAG;IAClB,wBAAwB;IACxB,gCAAgC;IAChC,2BAA2B;IAC3B,0BAA0B;IAC1B,+BAA+B;IAC/B,yBAAyB;IACzB,kBAAkB;IAClB,eAAe;IACf,iBAAiB;IACjB,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,yBAAyB;IACzB,yBAAyB;CACc,CAAC;AAE1C,yEAAyE;AACzE,0EAA0E;AAC1E,8EAA8E;AAC9E,2EAA2E;AAC3E,mBAAmB;AACnB,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAC;AAE5F,4EAA4E;AAC5E,8EAA8E;AAC9E,gFAAgF;AAChF,8DAA8D;AAC9D,MAAM,WAAW,GAAG;IAClB,uBAAuB;IACvB,WAAW;IACX,YAAY;IACZ,mBAAmB;IACnB,kBAAkB;CAC2B,CAAC;AAEhD,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/check-payments.d.ts

@@ -0,0 +1,18 @@
+import type { Check } from "./check-kind.js";
+import type { StripeCheckState } from "./check-state.js";
+export declare const paymentIntentAmount: Check<{
+    amount: string;
+}>;
+export declare const paymentIntentStatusIs: Check<{
+    status: string;
+}>;
+export declare const paymentIntentWithStatusExists: Check<{
+    status: string;
+}>;
+export declare const chargeWithStatusExists: Check<{
+    status: string;
+}>;
+export declare const eventEmitted: Check<{
+    event_type: string;
+}>;
+export type { StripeCheckState };

package/node_modules/@pome-sh/twin-stripe/dist/src/check-payments.js

@@ -0,0 +1,264 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// What Stripe's declared checks can assert about PAYMENT INTENTS, CHARGES and
+// EVENTS (F-1127).
+//
+// Two migrate from pome-cloud's `services/evaluators/deterministic/stripe.ts`,
+// where they were hand-written regexes over a cloud-side mirror of the state
+// shape. Three are new, and each one exists because a shipped criterion asked
+// for it and bound nothing:
+//
+//   A PaymentIntent exists with status "…"   ← task 13, `A backing PaymentIntent
+//                                              reaches succeeded`
+//   A charge exists with status "…"          ← task 12
+//   {event_type} is emitted                  ← task 12, and the one sentence in
+//                                              this file that re-renders the
+//                                              corpus BYTE-IDENTICALLY
+//
+// ── The definite and the indefinite are different checks ────────────────────
+//
+// `The PaymentIntent status is …` asserts about THE PaymentIntent and refuses
+// (`unmatched`) when a world holds more than one — the legacy rule's rule, kept
+// because it is right: `.some()` over every PI would let a wrong agent pass by
+// leaving an unrelated seed PI in the wanted status (D4).
+//
+// `A PaymentIntent exists with status …` asserts that SOME PI reached it. That
+// is a weaker claim and the corpus needs it: task 13's x402 middleware mints a
+// fresh PaymentIntent on every challenge leg, so a real run of that task holds
+// several and the definite form would refuse every time. Two readings, two
+// checks, and D6's collision arm keeps them from claiming one sentence.
+//
+// ── What was dropped in the migration, and why it is not a silent loss ──────
+//
+// The legacy `payment-intent-status` pattern carried an OPTIONAL qualifier —
+// `The PaymentIntent with amount 10000 status is …` / `… with id pi_123 …`. A
+// template has no optional slot, and the qualifier existed only to disambiguate
+// a multi-PI world, which the indefinite check above now answers directly. It
+// has zero corpus users, so nothing re-renders differently. An author who needs
+// to name ONE PaymentIntent by id wants a check whose template carries that id;
+// nothing asks for one yet, and inventing it here would ship a fourth
+// PaymentIntent template for the near-miss patterns to shadow each other with.
+import { defineCheck, VACUITY_SENTINEL_NUMBER } from "@pome-sh/sdk/checks";
+import { chargeStatus, minorUnitAmount, paymentIntentStatus, stripeEventType, } from "./check-params.js";
+import { charge, event, finalWorld, paymentIntent, stripeState } from "./check-worlds.js";
+const STATE_INCOMPLETE = { passed: false, status: "skipped", reason: "state_incomplete" };
+// Every collection this file reads is absent-able, and every absence is the
+// same verdict: we were handed no `payment_intents` / `charges` / `events` key
+// at all, so nothing can be attested. Named once so the three checks cannot
+// drift on it — and so arm 3 of the discrimination gate has ONE degenerate
+// reason to compare against rather than three near-identical ones.
+function requireList(list) {
+    return list == null ? null : list;
+}
+export const paymentIntentAmount = defineCheck({
+    id: "stripe.payment-intent-amount",
+    description: "Asserts SOME PaymentIntent in the account carries this exact amount, in the currency's " +
+        "minor unit (cents for USD) — the integer the `amount` field holds, never a formatted " +
+        "figure. It asserts nothing about that intent's status, its currency, or how many others " +
+        "exist. An absent `payment_intents` key is a SKIP: a positive criterion must not fail a " +
+        "correct agent over state nobody uploaded.",
+    template: "A PaymentIntent exists with amount {amount}",
+    params: { amount: minorUnitAmount },
+    substrate: "final",
+    polarity: () => "positive",
+    // The amount is COMPARED to a numeric field, not hunted for inside prose, so
+    // no redactor can silently delete it. `subject` is omitted rather than
+    // returning null for the same reason twin-github omits it on structural
+    // checks: absent means "nothing a redactor could reach", which is the truth.
+    vacuityMutant: (args) => ({ ...args, amount: String(VACUITY_SENTINEL_NUMBER) }),
+    discriminatingWorlds: ({ amount }) => ({
+        passing: finalWorld(stripeState({ payment_intents: [paymentIntent({ amount: Number(amount) })] })),
+        // A PaymentIntent that EXISTS and holds a different amount, not an empty
+        // list: the reason then names the amounts it scanned and cannot be confused
+        // with the one an absent collection produces.
+        failing: finalWorld(stripeState({ payment_intents: [paymentIntent({ amount: Number(amount) + 1 })] })),
+    }),
+    evaluate({ amount }, { final }) {
+        const pis = requireList(final.payment_intents);
+        if (pis === null)
+            return STATE_INCOMPLETE;
+        const wanted = Number(amount);
+        const found = pis.some((pi) => pi.amount === wanted);
+        return {
+            passed: found,
+            reason: found
+                ? `a PaymentIntent exists with amount ${wanted}`
+                : `no PaymentIntent has amount ${wanted} (amounts: [${pis.map((pi) => pi.amount ?? "?").join(", ")}])`,
+        };
+    },
+});
+export const paymentIntentStatusIs = defineCheck({
+    id: "stripe.payment-intent-status",
+    description: "Asserts THE PaymentIntent — singular — is in this status. When the account holds more " +
+        "than one it returns `unmatched` rather than a verdict, because scanning all of them " +
+        "would let a wrong agent pass on an unrelated intent the seed left in the wanted state. " +
+        "Use `A PaymentIntent exists with status …` when several are expected. An absent " +
+        "`payment_intents` key is a SKIP.",
+    template: "The PaymentIntent status is {status}",
+    params: { status: paymentIntentStatus },
+    substrate: "final",
+    polarity: () => "positive",
+    // Null, and admitted in `HONEST_NULL_MUTANTS`. The only slot is a closed set,
+    // so no member is guaranteed false — a mutant naming a different status
+    // asserts something that may also be true — and a value outside the set does
+    // not re-bind at all, which reads as "the verdict moved" and blesses the very
+    // criterion the probe exists to catch. Task 10 carries this criterion AND
+    // `payment-intent-amount`, whose numeric slot keeps a real mutant, so the twin
+    // does not go dark in the probe.
+    vacuityMutant: () => null,
+    discriminatingWorlds: ({ status }) => ({
+        // Exactly ONE intent in both worlds. Two would return `unmatched`, which is
+        // neither a real pass nor a real fail, and would break arms 1 and 2.
+        passing: finalWorld(stripeState({ payment_intents: [paymentIntent({ status })] })),
+        failing: finalWorld(stripeState({
+            payment_intents: [paymentIntent({ status: status === "canceled" ? "processing" : "canceled" })],
+        })),
+    }),
+    evaluate({ status }, { final }) {
+        const pis = requireList(final.payment_intents);
+        if (pis === null)
+            return STATE_INCOMPLETE;
+        if (pis.length > 1) {
+            return {
+                passed: false,
+                status: "unmatched",
+                reason: `ambiguous: ${pis.length} payment_intents and this sentence names one`,
+            };
+        }
+        const found = pis.some((pi) => pi.status === status);
+        return {
+            passed: found,
+            reason: found
+                ? `the PaymentIntent has status "${status}"`
+                : `the PaymentIntent does not have status "${status}" ` +
+                    `(statuses: [${pis.map((pi) => pi.status ?? "?").join(", ")}])`,
+        };
+    },
+});
+export const paymentIntentWithStatusExists = defineCheck({
+    id: "stripe.payment-intent-with-status-exists",
+    description: "Asserts AT LEAST ONE PaymentIntent in the account reached this status, whichever one and " +
+        "however many others exist. This is the check for a flow that mints intents the author " +
+        "cannot name in advance — x402 creates a fresh one per challenge leg — where naming `the` " +
+        "PaymentIntent would be ambiguous by construction. An absent `payment_intents` key is a SKIP.",
+    template: 'A PaymentIntent exists with status "{status}"',
+    params: { status: paymentIntentStatus },
+    substrate: "final",
+    polarity: () => "positive",
+    // Closed set — see `stripe.payment-intent-status` above, same argument.
+    vacuityMutant: () => null,
+    discriminatingWorlds: ({ status }) => {
+        const other = status === "canceled" ? "processing" : "canceled";
+        return {
+            // Two intents in each world, because that plurality is the whole reason
+            // this check exists beside the definite one: a fixture with a single
+            // intent would pass identically under both and prove nothing about the
+            // difference.
+            passing: finalWorld(stripeState({
+                payment_intents: [
+                    paymentIntent({ id: "pi_a", status: other }),
+                    paymentIntent({ id: "pi_b", status }),
+                ],
+            })),
+            failing: finalWorld(stripeState({
+                payment_intents: [
+                    paymentIntent({ id: "pi_a", status: other }),
+                    paymentIntent({ id: "pi_b", status: other }),
+                ],
+            })),
+        };
+    },
+    evaluate({ status }, { final }) {
+        const pis = requireList(final.payment_intents);
+        if (pis === null)
+            return STATE_INCOMPLETE;
+        const hits = pis.filter((pi) => pi.status === status);
+        return {
+            passed: hits.length > 0,
+            reason: hits.length > 0
+                ? `${hits.length} of ${pis.length} PaymentIntent(s) have status "${status}"`
+                : `no PaymentIntent has status "${status}" ` +
+                    `(statuses: [${pis.map((pi) => pi.status ?? "?").join(", ")}])`,
+        };
+    },
+});
+export const chargeWithStatusExists = defineCheck({
+    id: "stripe.charge-exists-with-status",
+    description: "Asserts AT LEAST ONE charge in the account is in this status. A charge is created already " +
+        "settled or already declined, so `succeeded` here means money moved — the twin writes the " +
+        "charge and its balance transaction inside one SQLite transaction, on both the card and the " +
+        "x402 crypto rails, so a charge in this state always has its ledger entry and asserting the " +
+        "balance transaction separately would assert a twin invariant rather than anything an " +
+        "examinee did. An absent `charges` key is a SKIP.",
+    template: 'A charge exists with status "{status}"',
+    params: { status: chargeStatus },
+    substrate: "final",
+    polarity: () => "positive",
+    // Closed set of three — same argument as the PaymentIntent status slots.
+    vacuityMutant: () => null,
+    discriminatingWorlds: ({ status }) => {
+        const other = status === "failed" ? "succeeded" : "failed";
+        return {
+            passing: finalWorld(stripeState({ charges: [charge({ status })] })),
+            failing: finalWorld(stripeState({ charges: [charge({ status: other })] })),
+        };
+    },
+    evaluate({ status }, { final }) {
+        const charges = requireList(final.charges);
+        if (charges === null)
+            return STATE_INCOMPLETE;
+        const hits = charges.filter((row) => row.status === status);
+        return {
+            passed: hits.length > 0,
+            reason: hits.length > 0
+                ? `${hits.length} of ${charges.length} charge(s) have status "${status}"`
+                : `no charge has status "${status}" ` +
+                    `(statuses: [${charges.map((row) => row.status ?? "?").join(", ")}])`,
+        };
+    },
+});
+export const eventEmitted = defineCheck({
+    id: "stripe.event-emitted",
+    description: "Asserts the account's event log contains at least one event of this type. The twin delivers " +
+        "no webhooks in v1 — an examinee observes events by polling `GET /v1/events` — so this reads " +
+        "the log the twin appended, not anything the examinee received. It asserts nothing about " +
+        "WHICH resource the event names: `payment_intent.succeeded` is emitted by both the card " +
+        "confirm path and the x402 crypto-deposit settlement, and this check deliberately does not " +
+        "distinguish them, because the criterion asking for it is about the outcome rather than the " +
+        "rail. An absent `events` key is a SKIP.",
+    // No quotes, and that is load-bearing: the corpus already says
+    // `payment_intent.succeeded is emitted`, so this template re-renders task 12's
+    // existing criterion byte-identically and the migration rewrites it not at
+    // all. The dot lives inside the closed set's members, which `oneOf` escapes,
+    // so it matches a dot rather than any character.
+    template: "{event_type} is emitted",
+    params: { event_type: stripeEventType },
+    substrate: "final",
+    polarity: () => "positive",
+    // Closed set of fifteen — the twin's own `EventType` union — so no member is
+    // guaranteed false. Admitted in `HONEST_NULL_MUTANTS`.
+    vacuityMutant: () => null,
+    discriminatingWorlds: ({ event_type }) => {
+        const other = event_type === "payment_intent.created" ? "payment_intent.canceled" : "payment_intent.created";
+        return {
+            passing: finalWorld(stripeState({ events: [event(other), event(event_type)] })),
+            // A log that EXISTS and holds a different event, so the reason names what
+            // was emitted instead and cannot be confused with an absent log.
+            failing: finalWorld(stripeState({ events: [event(other)] })),
+        };
+    },
+    evaluate({ event_type }, { final }) {
+        const events = requireList(final.events);
+        if (events === null)
+            return STATE_INCOMPLETE;
+        const hits = events.filter((row) => row.type === event_type);
+        return {
+            passed: hits.length > 0,
+            reason: hits.length > 0
+                ? `${hits.length} \`${event_type}\` event(s) among ${events.length} emitted`
+                : `no \`${event_type}\` event among ${events.length} emitted ` +
+                    `([${events.map((row) => row.type ?? "?").join(", ")}])`,
+        };
+    },
+});
+//# sourceMappingURL=check-payments.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/check-payments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-payments.js","sourceRoot":"","sources":["../../src/check-payments.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,8EAA8E;AAC9E,mBAAmB;AACnB,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,4BAA4B;AAC5B,EAAE;AACF,iFAAiF;AACjF,kEAAkE;AAClE,uDAAuD;AACvD,gFAAgF;AAChF,6EAA6E;AAC7E,uEAAuE;AACvE,EAAE;AACF,+EAA+E;AAC/E,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,0DAA0D;AAC1D,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,2EAA2E;AAC3E,wEAAwE;AACxE,EAAE;AACF,+EAA+E;AAC/E,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,sEAAsE;AACtE,+EAA+E;AAE/E,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EACL,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE1F,MAAM,gBAAgB,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;AAEnG,4EAA4E;AAC5E,+EAA+E;AAC/E,4EAA4E;AAC5E,2EAA2E;AAC3E,mEAAmE;AACnE,SAAS,WAAW,CAAI,IAA4B;IAClD,OAAO,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAA8B,WAAW,CAAC;IACxE,EAAE,EAAE,8BAA8B;IAClC,WAAW,EACT,yFAAyF;QACzF,uFAAuF;QACvF,0FAA0F;QAC1F,yFAAyF;QACzF,2CAA2C;IAC7C,QAAQ,EAAE,6CAA6C;IACvD,MAAM,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE;IACnC,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,6EAA6E;IAC7E,uEAAuE;IACvE,wEAAwE;IACxE,6EAA6E;IAC7E,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,uBAAuB,CAAC,EAAE,CAAC;IAC/E,oBAAoB,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAClG,yEAAyE;QACzE,4EAA4E;QAC5E,8CAA8C;QAC9C,OAAO,EAAE,UAAU,CACjB,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAClF;KACF,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE;QAC5B,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,gBAAgB,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACrD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;gBACX,CAAC,CAAC,sCAAsC,MAAM,EAAE;gBAChD,CAAC,CAAC,+BAA+B,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACzG,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAA8B,WAAW,CAAC;IAC1E,EAAE,EAAE,8BAA8B;IAClC,WAAW,EACT,wFAAwF;QACxF,sFAAsF;QACtF,yFAAyF;QACzF,kFAAkF;QAClF,kCAAkC;IACpC,QAAQ,EAAE,sCAAsC;IAChD,MAAM,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;IACvC,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,8EAA8E;IAC9E,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,+EAA+E;IAC/E,iCAAiC;IACjC,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,oBAAoB,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACrC,4EAA4E;QAC5E,qEAAqE;QACrE,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,UAAU,CACjB,WAAW,CAAC;YACV,eAAe,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;SAChG,CAAC,CACH;KACF,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE;QAC5B,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,gBAAgB,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,cAAc,GAAG,CAAC,MAAM,8CAA8C;aAC/E,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACrD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,KAAK;gBACX,CAAC,CAAC,iCAAiC,MAAM,GAAG;gBAC5C,CAAC,CAAC,2CAA2C,MAAM,IAAI;oBACrD,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACpE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAA8B,WAAW,CAAC;IAClF,EAAE,EAAE,0CAA0C;IAC9C,WAAW,EACT,2FAA2F;QAC3F,wFAAwF;QACxF,2FAA2F;QAC3F,8FAA8F;IAChG,QAAQ,EAAE,+CAA+C;IACzD,MAAM,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;IACvC,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,wEAAwE;IACxE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,oBAAoB,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;QAChE,OAAO;YACL,wEAAwE;YACxE,qEAAqE;YACrE,uEAAuE;YACvE,cAAc;YACd,OAAO,EAAE,UAAU,CACjB,WAAW,CAAC;gBACV,eAAe,EAAE;oBACf,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;oBAC5C,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;iBACtC;aACF,CAAC,CACH;YACD,OAAO,EAAE,UAAU,CACjB,WAAW,CAAC;gBACV,eAAe,EAAE;oBACf,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;oBAC5C,aAAa,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;iBAC7C;aACF,CAAC,CACH;SACF,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE;QAC5B,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,gBAAgB,CAAC;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACtD,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC;YACvB,MAAM,EACJ,IAAI,CAAC,MAAM,GAAG,CAAC;gBACb,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,OAAO,GAAG,CAAC,MAAM,kCAAkC,MAAM,GAAG;gBAC5E,CAAC,CAAC,gCAAgC,MAAM,IAAI;oBAC1C,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SACtE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAA8B,WAAW,CAAC;IAC3E,EAAE,EAAE,kCAAkC;IACtC,WAAW,EACT,4FAA4F;QAC5F,2FAA2F;QAC3F,6FAA6F;QAC7F,6FAA6F;QAC7F,uFAAuF;QACvF,kDAAkD;IACpD,QAAQ,EAAE,wCAAwC;IAClD,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE;IAChC,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,yEAAyE;IACzE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,oBAAoB,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3D,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACnE,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;SAC3E,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE;QAC5B,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,gBAAgB,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC5D,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC;YACvB,MAAM,EACJ,IAAI,CAAC,MAAM,GAAG,CAAC;gBACb,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,2BAA2B,MAAM,GAAG;gBACzE,CAAC,CAAC,yBAAyB,MAAM,IAAI;oBACnC,eAAe,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SAC5E,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAkC,WAAW,CAAC;IACrE,EAAE,EAAE,sBAAsB;IAC1B,WAAW,EACT,8FAA8F;QAC9F,8FAA8F;QAC9F,0FAA0F;QAC1F,yFAAyF;QACzF,4FAA4F;QAC5F,6FAA6F;QAC7F,yCAAyC;IAC3C,+DAA+D;IAC/D,+EAA+E;IAC/E,2EAA2E;IAC3E,6EAA6E;IAC7E,iDAAiD;IACjD,QAAQ,EAAE,yBAAyB;IACnC,MAAM,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;IACvC,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,6EAA6E;IAC7E,uDAAuD;IACvD,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,oBAAoB,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;QACvC,MAAM,KAAK,GACT,UAAU,KAAK,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,wBAAwB,CAAC;QACjG,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/E,0EAA0E;YAC1E,iEAAiE;YACjE,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SAC7D,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,gBAAgB,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QAC7D,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC;YACvB,MAAM,EACJ,IAAI,CAAC,MAAM,GAAG,CAAC;gBACb,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,MAAM,UAAU,qBAAqB,MAAM,CAAC,MAAM,UAAU;gBAC5E,CAAC,CAAC,QAAQ,UAAU,kBAAkB,MAAM,CAAC,MAAM,WAAW;oBAC5D,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;SAC/D,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/check-refunds.d.ts

@@ -0,0 +1,8 @@
+import type { Check } from "./check-kind.js";
+export declare const refundExists: Check<{
+    charge: string;
+}>;
+export declare const refundCount: Check<{
+    charge: string;
+    count: string;
+}>;

package/node_modules/@pome-sh/twin-stripe/dist/src/check-refunds.js

@@ -0,0 +1,122 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// What Stripe's declared checks can assert about REFUNDS in the final state
+// (F-1127).
+//
+// Both are new, and both replace prose. Task 14 shipped these two lines:
+//
+//   At least one refund was successfully issued (a `refund_id` appears in
+//     state.refunds or in events.jsonl)
+//   state.refunds.length === 1 — exactly one refund row per logical
+//     transaction. CRITICAL: this is expected to FAIL on current behavior …
+//
+// Neither is a sentence. The first names two substrates and an internal field;
+// the second is a JavaScript expression followed by a prediction about the
+// examinee. Under position 2 there is nothing there to render, so they are
+// re-expressed as two typed checks rather than pattern-matched.
+//
+// The prediction went with them, and deliberately: it asserted that an
+// `Idempotency-Key` on the retry is what separates one refund row from two, and
+// that is FALSE in this twin as measured (F-1138). Leaving a false causal claim
+// in a criterion is worse than leaving it in prose, because the criterion is
+// what a report quotes back.
+//
+// ── Why the charge is not a `subject`, and why the mutant is null ───────────
+//
+// Both checks RESOLVE the charge before asserting, so a charge id nobody minted
+// skips (`charge_not_found`) rather than reaching the assertion. That makes it a
+// selector: falsifying it moves the verdict for a reason that never touches what
+// the check is about, which is a clean bill the check did not earn.
+//
+// The same literal plays a different role one substrate over.
+// `stripe.no-refund-on-charge` hunts this id inside recorded request BODIES —
+// there is nothing to resolve, so it is genuinely scanned, and it keeps both a
+// real `subject` and a real mutant. One id, two roles, decided by whether the
+// substrate can look it up.
+import { defineCheck } from "@pome-sh/sdk/checks";
+import { chargeId, rowCount } from "./check-params.js";
+import { refundsOnCharge } from "./check-state.js";
+import { charge, finalWorld, refund, stripeState } from "./check-worlds.js";
+export const refundExists = defineCheck({
+    id: "stripe.refund-exists",
+    description: "Resolves the named charge, then asserts at least one row in the account's `refunds` " +
+        "collection references it. It reads refund ROWS, not the charge's `amount_refunded`, and " +
+        "not `charge.refunded` — that flag is true only when a charge is FULLY refunded, so a " +
+        "partial refund leaves it false and a check reading it would miss every partial. It asserts " +
+        "nothing about the refunded amount or the refund's own status. A charge the account does " +
+        "not hold is a SKIP, not a fail: we cannot attest a positive over state we do not have.",
+    template: 'A refund exists on charge "{charge}"',
+    params: { charge: chargeId },
+    substrate: "final",
+    polarity: () => "positive",
+    // Selector, not a scanned literal — see the header.
+    subject: () => null,
+    vacuityMutant: () => null,
+    discriminatingWorlds: (args) => ({
+        passing: finalWorld(stripeState({
+            charges: [charge({ id: args.charge })],
+            refunds: [refund({ charge: args.charge })],
+        })),
+        // The charge RESOLVES in both worlds and only the refund list moves. A world
+        // without the charge would skip the way an empty one does.
+        failing: finalWorld(stripeState({ charges: [charge({ id: args.charge })], refunds: [] })),
+    }),
+    evaluate(args, { final }) {
+        const rows = refundsOnCharge(final, args.charge);
+        if ("missing" in rows)
+            return { passed: false, status: "skipped", reason: rows.missing };
+        return {
+            passed: rows.found.length > 0,
+            reason: rows.found.length > 0
+                ? `charge "${args.charge}" has ${rows.found.length} refund row(s)`
+                : `charge "${args.charge}" has no refund rows`,
+        };
+    },
+});
+export const refundCount = defineCheck({
+    id: "stripe.refund-count",
+    description: "Resolves the named charge and asserts the account holds EXACTLY this many refund rows " +
+        "against it. This is the over-refund assertion: a lost-response retry that re-issues the " +
+        "same logical refund lands a second row, and only a count can see it — the amount is right " +
+        "on each row individually and wrong in aggregate. It asserts nothing about the amounts, so " +
+        "two rows fail it whether they total the intended refund or double it. A charge the account " +
+        "does not hold is a SKIP.",
+    template: 'The number of refunds on charge "{charge}" is {count}',
+    params: { charge: chargeId, count: rowCount },
+    substrate: "final",
+    // A function of the args, the way the GitHub PR check's is: `… is 0` is a
+    // prohibition the seed already satisfies and only the examinee can break,
+    // while any other count is something that must come to exist.
+    polarity: ({ count }) => (Number(count) === 0 ? "negative" : "positive"),
+    subject: () => null,
+    // The charge SELECTS and the count IS the assertion. Neither is a literal
+    // hunted for in the state, so no substitution falsifies a trigger clause:
+    // mutating the charge skips, and mutating the count asserts a different thing
+    // rather than falsifying this one. Admitted in `HONEST_NULL_MUTANTS`.
+    vacuityMutant: () => null,
+    discriminatingWorlds: (args) => {
+        const wanted = Number(args.count);
+        const rows = (n) => Array.from({ length: n }, (_unused, index) => refund({ id: `re_${index}`, charge: args.charge }));
+        return {
+            passing: finalWorld(stripeState({ charges: [charge({ id: args.charge })], refunds: rows(wanted) })),
+            // One MORE, never one fewer: the double-refund is the failure this check
+            // exists for, and a fixture that under-shot would demonstrate the
+            // uninteresting half.
+            failing: finalWorld(stripeState({ charges: [charge({ id: args.charge })], refunds: rows(wanted + 1) })),
+        };
+    },
+    evaluate(args, { final }) {
+        const rows = refundsOnCharge(final, args.charge);
+        if ("missing" in rows)
+            return { passed: false, status: "skipped", reason: rows.missing };
+        const wanted = Number(args.count);
+        return {
+            passed: rows.found.length === wanted,
+            reason: `charge "${args.charge}" has ${rows.found.length} refund row(s), wanted ${wanted}` +
+                (rows.found.length > wanted
+                    ? ` — ${rows.found.length - wanted} more than one refund per logical transaction`
+                    : ""),
+        };
+    },
+});
+//# sourceMappingURL=check-refunds.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/check-refunds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-refunds.js","sourceRoot":"","sources":["../../src/check-refunds.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,YAAY;AACZ,EAAE;AACF,yEAAyE;AACzE,EAAE;AACF,0EAA0E;AAC1E,wCAAwC;AACxC,oEAAoE;AACpE,4EAA4E;AAC5E,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,gEAAgE;AAChE,EAAE;AACF,uEAAuE;AACvE,gFAAgF;AAChF,gFAAgF;AAChF,6EAA6E;AAC7E,6BAA6B;AAC7B,EAAE;AACF,+EAA+E;AAC/E,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,oEAAoE;AACpE,EAAE;AACF,8DAA8D;AAC9D,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,4BAA4B;AAE5B,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,CAAC,MAAM,YAAY,GAA8B,WAAW,CAAC;IACjE,EAAE,EAAE,sBAAsB;IAC1B,WAAW,EACT,sFAAsF;QACtF,0FAA0F;QAC1F,uFAAuF;QACvF,6FAA6F;QAC7F,0FAA0F;QAC1F,wFAAwF;IAC1F,QAAQ,EAAE,sCAAsC;IAChD,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC5B,SAAS,EAAE,OAAO;IAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;IAC1B,oDAAoD;IACpD,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,EAAE,UAAU,CACjB,WAAW,CAAC;YACV,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACtC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;SAC3C,CAAC,CACH;QACD,6EAA6E;QAC7E,2DAA2D;QAC3D,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;KAC1F,CAAC;IACF,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE;QACtB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACzF,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAC7B,MAAM,EACJ,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACnB,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,gBAAgB;gBAClE,CAAC,CAAC,WAAW,IAAI,CAAC,MAAM,sBAAsB;SACnD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAA6C,WAAW,CAAC;IAC/E,EAAE,EAAE,qBAAqB;IACzB,WAAW,EACT,wFAAwF;QACxF,0FAA0F;QAC1F,4FAA4F;QAC5F,4FAA4F;QAC5F,6FAA6F;QAC7F,0BAA0B;IAC5B,QAAQ,EAAE,uDAAuD;IACjE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;IAC7C,SAAS,EAAE,OAAO;IAClB,0EAA0E;IAC1E,0EAA0E;IAC1E,8DAA8D;IAC9D,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IACxE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;IACnB,0EAA0E;IAC1E,0EAA0E;IAC1E,8EAA8E;IAC9E,sEAAsE;IACtE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI;IACzB,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CACzB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC3C,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CACnD,CAAC;QACJ,OAAO;YACL,OAAO,EAAE,UAAU,CACjB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAC/E;YACD,yEAAyE;YACzE,kEAAkE;YAClE,sBAAsB;YACtB,OAAO,EAAE,UAAU,CACjB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CACnF;SACF,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE;QACtB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM;YACpC,MAAM,EACJ,WAAW,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,0BAA0B,MAAM,EAAE;gBAClF,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM;oBACzB,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,+CAA+C;oBACjF,CAAC,CAAC,EAAE,CAAC;SACV,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}