@pome-sh/cli 0.20.0 → 0.21.0

package/node_modules/@pome-sh/twin-stripe/dist/src/twin.js

@@ -1,286 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-//
-// The Stripe twin as a thin `@pome-sh/sdk` plugin (F-684). This manifest is
-// pure declaration: domain factory, seed schema, tools, routes, and the
-// wire-frozen Stripe shapes (FDRS-711 / F-712) — errors.ts envelopes, the
-// liberal-bearer + 403-sid-mismatch + root-/v1/*-mount auth pins, healthz
-// extras (fidelity + tthw_seconds), the 501 unsupported envelope, the
-// admin-gate 403 body. All mechanism (HTTP mount, auth, recorder +
-// redaction, MCP dispatch, /_pome/*, admin gate, db driver, failure
-// injection) lives in the engine.
-//
-// Unlike slack/github the definition is built by a FACTORY: the manifest
-// closes over the database (api_keys credential lookup, idempotency cache,
-// admin reset/seed) and a per-app failure-injection store, so each app gets
-// its own. Always pass the same `db` here and to `createApp`/`serve`.
-import { z, ZodError } from "zod";
-import { defineTwin, } from "@pome-sh/sdk";
-import { UnknownToolError, createFailureInjectionStore, failureInjectionMiddleware, twinBuildInfo, } from "@pome-sh/sdk/server";
-import { createApp } from "@pome-sh/sdk/server";
-import { resolveSidFromKey } from "./api-keys.js";
-import { openTwinStripeDatabase, resetDatabase } from "./db.js";
-import { StripeDomain } from "./domain/index.js";
-import { TwinError, forbidden, stripeError, unauthorized, unsupported } from "./errors.js";
-import { looksLikeApiKey } from "./api-keys.js";
-import { idempotencyMiddleware } from "./idempotency.js";
-import { registerStripeRoutes } from "./routes/index.js";
-import { applySeed, defaultSeed, seedSchema } from "./seed.js";
-import { registerX402Routes } from "./session.js";
-import { executeTool, isMutatingTool, listTools, toolDefinitions } from "./tools.js";
-// Stripe admin/seed is tolerant: an absent body falls back to the default
-// seed (frozen: garbage object → 200 {ok:true, ...}; seedSchema defaults
-// every collection). Malformed collections still fail loudly via zod.
-const stripeSeedSchema = z.preprocess((value) => (value === null || value === undefined ? defaultSeed() : value), seedSchema);
-/** `tthw_seconds` (Time To Hello World) per D-DX-4 / §22 — wall clock from process start. */
-export function tthwSeconds(startedAtMs, nowMs = Date.now) {
-    const ms = Math.max(0, nowMs() - startedAtMs);
-    return Number((ms / 1000).toFixed(3));
-}
-function accountIdFrom(session) {
-    return typeof session?.account_id === "string" ? session.account_id : "acct_default";
-}
-// The engine parses tool args / mcp bodies with its own zod instance, so a
-// bare `instanceof ZodError` can miss; fall back to the duck check on `name`.
-function zodIssues(err) {
-    if (err instanceof ZodError)
-        return err.issues;
-    if (err instanceof Error && err.name === "ZodError" && Array.isArray(err.issues)) {
-        return err.issues;
-    }
-    return undefined;
-}
-/**
- * Wire-frozen Stripe error projection (D-ENG-8): every error renders as the
- * nested `{error: {type, code, message, ...}}` envelope from errors.ts.
- */
-function stripeErrorEnvelope(err) {
-    // Engine tool dispatch throws UnknownToolError; frozen stripe wire is
-    // 400 `tool_unknown` (github 422, slack 404 — per-twin, FDRS-711).
-    if (err instanceof UnknownToolError) {
-        return stripeError("invalid_request_error", "tool_unknown", `No such MCP tool: '${err.tool}'.`, {
-            param: "tool",
-            statusCode: 400,
-        });
-    }
-    if (err instanceof TwinError) {
-        return { status: err.status, body: err.toEnvelope() };
-    }
-    const issues = zodIssues(err);
-    if (issues) {
-        const first = issues[0];
-        return stripeError("invalid_request_error", "parameter_invalid", first?.message ?? "Invalid request parameters.", {
-            param: first?.path?.join("."),
-        });
-    }
-    if (err instanceof SyntaxError) {
-        return stripeError("invalid_request_error", "invalid_json", "Could not parse request body as JSON.");
-    }
-    return stripeError("api_error", "internal_error", err instanceof Error ? err.message : "Internal Server Error", { statusCode: 500 });
-}
-// listTools() carries the frozen tool-list wire shape (z.toJSONSchema with
-// the {} fallback for optional schemas).
-const toolListing = new Map(listTools().map((tool) => [tool.name, tool]));
-export function createStripeTwinDefinition(opts) {
-    const { db } = opts;
-    const startedAtMs = opts.startedAtMs ?? Date.now();
-    // Per-app rule store: /admin/seed installs `failure_injection` rules into
-    // the same store the session middleware reads (FDRS-369).
-    const failureInjection = createFailureInjectionStore();
-    return defineTwin({
-        id: "stripe",
-        version: process.env.POME_TWIN_VERSION ?? "0.1.0",
-        implementation: "stripe_clone",
-        packageName: "@pome-sh/twin-stripe",
-        fidelity: { default: "semantic" },
-        // Pre-port: `payload === null ? defaultSeed() : parseSeed(payload)` —
-        // an absent/unparseable seed body applies the default world.
-        seed: z.preprocess((value) => (value === null || value === undefined ? defaultSeed() : value), stripeSeedSchema),
-        domain: ({ db: injected, seed }) => {
-            if (injected && injected !== db) {
-                throw new Error("twin-stripe: the db passed to createApp/serve must be the db the definition was created with");
-            }
-            const domain = new StripeDomain(db);
-            if (seed !== undefined)
-                applySeed(db, seed, failureInjection);
-            return domain;
-        },
-        // Session-wide middleware (the pre-port `session.use("*")` position):
-        // mounted by the engine BEFORE its MCP routes, so failure injection and
-        // idempotency cover /mcp, /mcp/call, /mcp/tools/:name exactly as the
-        // pre-port chassis did (F-684 review pin: an Idempotency-Key'd MCP
-        // create must replay, and injected rules on MCP paths must fire).
-        middleware: (app, ctx) => {
-            // Failure injection MUST run before idempotency so a configured
-            // failure response isn't cached by the idempotency layer (a retry
-            // under the same key would replay the synthetic 4xx instead of
-            // re-invoking the handler). That argument is about `before_handler`,
-            // whose envelope is produced out here and never reaches the cache.
-            // `after_handler` is the other half and needs no reordering: it
-            // substitutes inside the handler, so the idempotency layer reads the
-            // HANDLER's status + body off the context (`setHandlerResult`) and caches
-            // the real 200 — which is the record real Stripe writes when response
-            // delivery fails, and dropping it double-refunded the retry (F-1138).
-            app.use("*", failureInjectionMiddleware(failureInjection, {
-                recorder: ctx.recorder,
-                runId: ctx.runId,
-                twin: "stripe",
-            }));
-            app.use("*", idempotencyMiddleware(db, ctx.recorder, ctx.runId));
-        },
-        // Frozen pre-port body parsing on the engine-owned surfaces (F-684
-        // review pin). Two pre-port readers existed: /admin/seed was strict
-        // JSON with a null fallback (null → default seed via the schema
-        // preprocess below), while the MCP dispatch surfaces used
-        // routes/index.ts's form-or-JSON reader ({} fallback).
-        bodyReader: async (c) => {
-            if (new URL(c.req.url).pathname.endsWith("/admin/seed")) {
-                try {
-                    return await c.req.json();
-                }
-                catch {
-                    return null;
-                }
-            }
-            const contentType = c.req.header("content-type") ?? "";
-            if (contentType.includes("application/x-www-form-urlencoded")) {
-                try {
-                    return await c.req.parseBody();
-                }
-                catch {
-                    return {};
-                }
-            }
-            try {
-                return await c.req.json();
-            }
-            catch {
-                return {};
-            }
-        },
-        routes: (app, ctx) => {
-            opts.extendRoutes?.(app, ctx);
-            registerStripeRoutes(app, ctx.domain, ctx.recorder, ctx.runId);
-            if (opts.twinBaseUrl) {
-                registerX402Routes(app, {
-                    twinBaseUrl: opts.twinBaseUrl,
-                    recorder: ctx.recorder,
-                    runId: ctx.runId,
-                });
-            }
-        },
-        // Account-scoped state export (F1): two sessions sharing a DB see
-        // disjoint `/_pome/state` views.
-        state: ({ domain, session }) => session
-            ? domain.exportState(accountIdFrom(session))
-            : { payment_intents: [], charges: [], balance_transactions: [], events: [] },
-        admin: {
-            reset: () => {
-                resetDatabase(db);
-                applySeed(db, defaultSeed(), failureInjection);
-                return { ok: true, message: "Stripe twin state reset to default seed." };
-            },
-            seed: ({ seed }) => {
-                resetDatabase(db);
-                applySeed(db, seed, failureInjection);
-                return {
-                    ok: true,
-                    api_keys: (seed.api_keys ?? []).length,
-                    failure_injection: (seed.failure_injection ?? []).length,
-                };
-            },
-            // Frozen tape shape: stripe's pre-port recorder never saw admin
-            // traffic — /admin/reset|seed emit no events (F-684 review pin).
-            recorded: false,
-            // Frozen stripe admin-gate 403 body.
-            forbidden: () => forbidden("Forbidden"),
-        },
-        tools: toolDefinitions.map((def) => ({
-            name: def.name,
-            description: def.description,
-            schema: def.schema,
-            mutation: isMutatingTool(def.name),
-            inputSchema: toolListing.get(def.name)?.input_schema,
-            handler: (domain, args, ctx) => executeTool(domain, accountIdFrom(ctx.session), def.name, args),
-        })),
-        // Frozen healthz extras: fidelity + tthw_seconds on top of the contract
-        // core {ok, twin, implementation, tools, runtime}.
-        healthz: () => ({ fidelity: "semantic", tthw_seconds: tthwSeconds(startedAtMs) }),
-        // Frozen per-session health shape: implementation/fidelity/tthw/runtime
-        // plus recorder counters (bounded store: real dropped count, D-ENG-10).
-        pomeHealth: ({ recorder }) => ({
-            implementation: "stripe_clone",
-            fidelity: "semantic",
-            tthw_seconds: tthwSeconds(startedAtMs),
-            runtime: twinBuildInfo("@pome-sh/twin-stripe"),
-            recorder: { events: recorder.count(), dropped: recorder.dropped() },
-        }),
-        // Frozen per-twin difference: stripe has NO per-session /healthz (501).
-        sessionHealthz: false,
-        // F3 SDK-compat root mount: stripe-node/stripe-python URLs (/v1/*) hit
-        // the same session router; the bearer alone resolves the sid.
-        mountSessionAtRoot: true,
-        unsupported: () => unsupported(),
-        errorEnvelope: stripeErrorEnvelope,
-        auth: {
-            // F-712 pins: liberal bearer parsing ON (raw token + case-insensitive
-            // "bearer"); sid mismatch → 403; api_keys table lookup ahead of
-            // provider-shaped verify + JWT; no path sid required (root mount);
-            // expired-vs-invalid classified by the engine and rendered through
-            // the frozen unauthorized envelope.
-            providerToken: { provider: "stripe", prefixes: ["sk_test_pome_"] },
-            providerSession: (sid) => ({ account_id: `acct_${sid}`, via: "api_key" }),
-            allowRawBearer: true,
-            requirePathSid: false,
-            resolveCredential: (token) => {
-                // Perf + pre-port parity: only api-key-shaped tokens hit the DB.
-                // A table miss falls through to provider verify; if that also
-                // fails, the unauthorized hook renders the frozen
-                // "Invalid API Key provided." for this shape.
-                if (!looksLikeApiKey(token))
-                    return undefined;
-                const row = resolveSidFromKey(db, token);
-                return row ? { sid: row.sid, account_id: row.account_id, via: "api_key" } : undefined;
-            },
-            unauthorized: (kind, info) => {
-                // Frozen wire messages: api-key-shaped tokens that resolve nowhere
-                // answer "Invalid API Key provided." (pre-port terminal branch);
-                // JWT-shaped failures answer "Bad credentials" / "Token expired".
-                const message = kind === "expired"
-                    ? "Token expired"
-                    : info?.token && looksLikeApiKey(info.token)
-                        ? "Invalid API Key provided."
-                        : "Bad credentials";
-                const envelope = unauthorized(message);
-                return { status: envelope.status, body: envelope.body };
-            },
-            sidMismatch: () => {
-                const envelope = forbidden("Session id mismatch.");
-                return { status: envelope.status, body: envelope.body };
-            },
-            sessionExtras: (claims) => ({
-                account_id: typeof claims.account_id === "string" ? claims.account_id : `acct_${claims.sid}`,
-                via: "jwt",
-            }),
-        },
-    });
-}
-/** Assemble the Stripe twin app on the engine (in-process; no port bind). */
-export function createTwinStripeApp(opts = {}) {
-    const db = opts.db ?? openTwinStripeDatabase(":memory:");
-    const definition = createStripeTwinDefinition({
-        db,
-        twinBaseUrl: opts.twinBaseUrl,
-        startedAtMs: opts.startedAtMs,
-        extendRoutes: opts.extendRoutes,
-    });
-    // Pre-port semantics: the default seed applies only when the factory
-    // opened the db itself (callers passing a db manage their own seed).
-    const seed = opts.noSeed ? undefined : opts.seed ?? (opts.db ? undefined : defaultSeed());
-    return createApp(definition, {
-        db,
-        recorder: opts.recorder,
-        runId: opts.runId ?? "local",
-        seed,
-    });
-}
-//# sourceMappingURL=twin.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/twin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"twin.js","sourceRoot":"","sources":["../../src/twin.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,mEAAmE;AACnE,oEAAoE;AACpE,kCAAkC;AAClC,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AAEtE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAClC,OAAO,EACL,UAAU,GAGX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,0BAA0B,EAC1B,aAAa,GAGd,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGrF,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,MAAM,gBAAgB,GAAG,CAAC,CAAC,UAAU,CACnC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAC1E,UAAU,CACwB,CAAC;AAErC,6FAA6F;AAC7F,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,QAAsB,IAAI,CAAC,GAAG;IAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,OAAiC;IACtD,OAAO,OAAO,OAAO,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;AACvF,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,GAAG,YAAY,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IAC/C,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAE,GAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3G,OAAQ,GAA2B,CAAC,MAAM,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAY;IACvC,sEAAsE;IACtE,mEAAmE;IACnE,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;QACpC,OAAO,WAAW,CAAC,uBAAuB,EAAE,cAAc,EAAE,sBAAsB,GAAG,CAAC,IAAI,IAAI,EAAE;YAC9F,KAAK,EAAE,MAAM;YACb,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,WAAW,CAAC,uBAAuB,EAAE,mBAAmB,EAAE,KAAK,EAAE,OAAO,IAAI,6BAA6B,EAAE;YAChH,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,OAAO,WAAW,CAAC,uBAAuB,EAAE,cAAc,EAAE,uCAAuC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,WAAW,CAChB,WAAW,EACX,gBAAgB,EAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,EAC5D,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,yCAAyC;AACzC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAsB1E,MAAM,UAAU,0BAA0B,CACxC,IAAuC;IAEvC,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IACpB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACnD,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,gBAAgB,GAAG,2BAA2B,EAAE,CAAC;IAEvD,OAAO,UAAU,CAA8C;QAC7D,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO;QACjD,cAAc,EAAE,cAAc;QAC9B,WAAW,EAAE,sBAAsB;QACnC,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;QACjC,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,EAAE,CAAC,CAAC,UAAU,CAChB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAC1E,gBAAgB,CACqB;QACvC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;YACjC,IAAI,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACvB,gEAAgE;YAChE,kEAAkE;YAClE,+DAA+D;YAC/D,qEAAqE;YACrE,mEAAmE;YACnE,gEAAgE;YAChE,qEAAqE;YACrE,0EAA0E;YAC1E,sEAAsE;YACtE,sEAAsE;YACtE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,0BAA0B,CAAC,gBAAgB,EAAE;gBACxD,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC,CAAC;YACJ,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,mEAAmE;QACnE,oEAAoE;QACpE,gEAAgE;QAChE,0DAA0D;QAC1D,uDAAuD;QACvD,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACtB,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC;oBACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC;oBACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACnB,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9B,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,kBAAkB,CAAC,GAAG,EAAE;oBACtB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,kEAAkE;QAClE,iCAAiC;QACjC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAC7B,OAAO;YACL,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAChF,KAAK,EAAE;YACL,KAAK,EAAE,GAAG,EAAE;gBACV,aAAa,CAAC,EAAE,CAAC,CAAC;gBAClB,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,gBAAgB,CAAC,CAAC;gBAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;YAC3E,CAAC;YACD,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;gBACjB,aAAa,CAAC,EAAE,CAAC,CAAC;gBAClB,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtC,OAAO;oBACL,EAAE,EAAE,IAAI;oBACR,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM;oBACtC,iBAAiB,EAAE,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM;iBACzD,CAAC;YACJ,CAAC;YACD,gEAAgE;YAChE,iEAAiE;YACjE,QAAQ,EAAE,KAAK;YACf,qCAAqC;YACrC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC;SACxC;QACD,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,GAAG,CAAC,MAAuC;YACnD,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;YAClC,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,YAAuC;YAC/E,OAAO,EAAE,CAAC,MAAoB,EAAE,IAAa,EAAE,GAAoB,EAAE,EAAE,CACrE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;SAClE,CAAC,CAAC;QACH,wEAAwE;QACxE,mDAAmD;QACnD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,wEAAwE;QACxE,wEAAwE;QACxE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7B,cAAc,EAAE,cAAc;YAC9B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,WAAW,CAAC,WAAW,CAAC;YACtC,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC;YAC9C,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE;SACpE,CAAC;QACF,wEAAwE;QACxE,cAAc,EAAE,KAAK;QACrB,uEAAuE;QACvE,8DAA8D;QAC9D,kBAAkB,EAAE,IAAI;QACxB,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QAChC,aAAa,EAAE,mBAAmB;QAClC,IAAI,EAAE;YACJ,sEAAsE;YACtE,gEAAgE;YAChE,mEAAmE;YACnE,mEAAmE;YACnE,oCAAoC;YACpC,aAAa,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,eAAe,CAAC,EAAE;YAClE,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YACzE,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,KAAK;YACrB,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,iEAAiE;gBACjE,8DAA8D;gBAC9D,kDAAkD;gBAClD,8CAA8C;gBAC9C,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;oBAAE,OAAO,SAAS,CAAC;gBAC9C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBACzC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,CAAC;YACD,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;gBAC3B,mEAAmE;gBACnE,iEAAiE;gBACjE,kEAAkE;gBAClE,MAAM,OAAO,GACX,IAAI,KAAK,SAAS;oBAChB,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;wBAC1C,CAAC,CAAC,2BAA2B;wBAC7B,CAAC,CAAC,iBAAiB,CAAC;gBAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1D,CAAC;YACD,WAAW,EAAE,GAAG,EAAE;gBAChB,MAAM,QAAQ,GAAG,SAAS,CAAC,sBAAsB,CAAC,CAAC;gBACnD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1D,CAAC;YACD,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC1B,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,GAAG,EAAE;gBAC5F,GAAG,EAAE,KAAK;aACX,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC;AAeD,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,OAAmC,EAAE;IACvE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,0BAA0B,CAAC;QAC5C,EAAE;QACF,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IACH,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1F,OAAO,SAAS,CAAC,UAAU,EAAE;QAC3B,EAAE;QACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO;QAC5B,IAAI;KACL,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/types.d.ts

@@ -1,252 +0,0 @@
-import type { TwinDatabase } from "@pome-sh/sdk";
-import type { FailureInjectionRule } from "@pome-sh/sdk/server";
-import type { RecorderEvent } from "@pome-sh/shared-types";
-export type TwinStripeDatabase = TwinDatabase;
-export type { RecorderEvent, StateDelta } from "@pome-sh/shared-types";
-export type Recorder = {
-    record(event: RecorderEvent): void;
-};
-export type StripeFidelity = "semantic" | "unsupported";
-export type { FailureInjectionMode, FailureInjectionRule } from "@pome-sh/sdk/server";
-export type SeedPaymentIntent = {
-    id: string;
-    account_id: string;
-    amount: number;
-    currency: string;
-    status: PIStatus;
-    payment_method_types: string[];
-    next_action?: unknown | null;
-    latest_charge_id?: string | null;
-    capture_method: string;
-    confirmation_method: string;
-    idempotency_key?: string | null;
-    metadata: Record<string, string>;
-    crypto_deposit?: unknown | null;
-    client_secret: string;
-    created: number;
-    updated: number;
-    canceled_at?: number | null;
-    captured_at?: number | null;
-};
-export type SeedCharge = {
-    id: string;
-    account_id: string;
-    payment_intent_id: string;
-    amount: number;
-    amount_captured: number;
-    amount_refunded: number;
-    status: "pending" | "succeeded" | "failed";
-    balance_transaction_id?: string | null;
-    captured: boolean;
-    currency: string;
-    created: number;
-};
-export type SeedRefund = {
-    id: string;
-    account_id: string;
-    charge_id: string;
-    payment_intent_id: string;
-    amount: number;
-    currency: string;
-    status: RefundStatus;
-    reason?: string | null;
-    balance_transaction_id?: string | null;
-    idempotency_key?: string | null;
-    created: number;
-};
-export type SeedBalanceTransaction = {
-    id: string;
-    account_id: string;
-    type: string;
-    amount: number;
-    fee: number;
-    net: number;
-    currency: string;
-    source_id?: string | null;
-    source_type?: string | null;
-    available_on: number;
-    status: "pending" | "available";
-    created: number;
-};
-export type SeedState = {
-    api_keys?: Array<{
-        key: string;
-        sid: string;
-        account_id?: string;
-    }>;
-    failure_injection?: FailureInjectionRule[];
-    payment_intents?: SeedPaymentIntent[];
-    charges?: SeedCharge[];
-    refunds?: SeedRefund[];
-    balance_transactions?: SeedBalanceTransaction[];
-};
-export type ApiKeyRow = {
-    key: string;
-    sid: string;
-    account_id: string;
-    created_at: string;
-    revoked_at: string | null;
-};
-export type IdempotencyKeyRow = {
-    key: string;
-    account_id: string;
-    method: string;
-    path: string;
-    request_hash: string;
-    response_status: number;
-    response_body_json: string;
-    created_at: string;
-};
-/**
- * v1 PaymentIntent row. Stub — AGENT-B owns domain operations.
- * Schema for v1 x402 crypto-deposit PIs
- * (`crypto_deposit_json` carries deposit address + supported tokens).
- */
-export type PIStatus = "requires_payment_method" | "requires_confirmation" | "requires_action" | "processing" | "requires_capture" | "canceled" | "succeeded";
-export type PIRow = {
-    id: string;
-    account_id: string;
-    amount: number;
-    currency: string;
-    status: PIStatus;
-    payment_method_types_json: string;
-    next_action_json: string | null;
-    latest_charge_id: string | null;
-    capture_method: string;
-    confirmation_method: string;
-    idempotency_key: string | null;
-    metadata_json: string;
-    crypto_deposit_json: string | null;
-    client_secret: string;
-    created: number;
-    updated: number;
-    canceled_at: number | null;
-    captured_at: number | null;
-    payment_method_id: string | null;
-    customer_id: string | null;
-    last_payment_error_json: string | null;
-};
-export type ChargeRow = {
-    id: string;
-    account_id: string;
-    payment_intent_id: string;
-    amount: number;
-    amount_captured: number;
-    amount_refunded: number;
-    status: "pending" | "succeeded" | "failed";
-    balance_transaction_id: string | null;
-    captured: 0 | 1;
-    created: number;
-    currency: string;
-    payment_method_id: string | null;
-    payment_method_details_json: string | null;
-    failure_code: string | null;
-    failure_decline_code: string | null;
-    failure_message: string | null;
-    customer_id: string | null;
-};
-export type BalanceTxRow = {
-    id: string;
-    account_id: string;
-    type: string;
-    amount: number;
-    fee: number;
-    net: number;
-    currency: string;
-    source_id: string | null;
-    source_type: string | null;
-    available_on: number;
-    created: number;
-    status: "pending" | "available";
-};
-export type EventRow = {
-    id: string;
-    account_id: string;
-    type: string;
-    data_json: string;
-    request_idempotency_key: string | null;
-    livemode: 0 | 1;
-    created: number;
-    api_version: string;
-};
-export type CustomerRow = {
-    id: string;
-    account_id: string;
-    name: string | null;
-    email: string | null;
-    description: string | null;
-    phone: string | null;
-    metadata_json: string;
-    deleted: 0 | 1;
-    created: number;
-};
-export type PaymentMethodRow = {
-    id: string;
-    account_id: string;
-    type: string;
-    card_brand: string;
-    card_last4: string;
-    card_exp_month: number;
-    card_exp_year: number;
-    card_fingerprint: string;
-    customer_id: string | null;
-    detached: 0 | 1;
-    created: number;
-};
-export type RefundStatus = "succeeded" | "pending" | "failed" | "canceled";
-export type RefundRow = {
-    id: string;
-    account_id: string;
-    charge_id: string;
-    payment_intent_id: string;
-    amount: number;
-    currency: string;
-    status: RefundStatus;
-    reason: string | null;
-    balance_transaction_id: string | null;
-    idempotency_key: string | null;
-    created: number;
-};
-export type ProductRow = {
-    id: string;
-    account_id: string;
-    name: string;
-    description: string | null;
-    active: 0 | 1;
-    metadata_json: string;
-    created: number;
-    updated: number;
-};
-export type PriceRow = {
-    id: string;
-    account_id: string;
-    product_id: string;
-    currency: string;
-    unit_amount: number | null;
-    recurring_interval: string | null;
-    recurring_interval_count: number | null;
-    active: 0 | 1;
-    nickname: string | null;
-    lookup_key: string | null;
-    metadata_json: string;
-    created: number;
-};
-export type SubscriptionStatus = "active" | "canceled";
-export type SubscriptionRow = {
-    id: string;
-    account_id: string;
-    customer_id: string;
-    status: SubscriptionStatus;
-    /** JSON array of {id, price, quantity} subscription items. */
-    items_json: string;
-    cancel_at_period_end: 0 | 1;
-    canceled_at: number | null;
-    ended_at: number | null;
-    metadata_json: string;
-    created: number;
-};
-export type ResolvedSession = {
-    sid: string;
-    account_id: string;
-    via?: "jwt" | "api_key";
-};

package/node_modules/@pome-sh/twin-stripe/dist/src/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":""}

package/node_modules/@pome-sh/twin-stripe/dist/src/upstream-types.d.ts

@@ -1,22 +0,0 @@
-import type Stripe from "stripe";
-export type PaymentIntent = Stripe.PaymentIntent;
-export type Charge = Stripe.Charge;
-export type Refund = Stripe.Refund;
-export type BalanceTransaction = Stripe.BalanceTransaction;
-export type Balance = Stripe.Balance;
-export type Customer = Stripe.Customer;
-export type DeletedCustomer = Stripe.DeletedCustomer;
-export type PaymentMethod = Stripe.PaymentMethod;
-export type Product = Stripe.Product;
-export type Price = Stripe.Price;
-export type PriceRecurring = Stripe.Price.Recurring;
-export type Subscription = Stripe.Subscription;
-export type SubscriptionItem = Stripe.SubscriptionItem;
-export type ApiList<T> = Stripe.ApiList<T>;
-export type StripeEvent = Stripe.EventBase;
-export type DeepPartial<T> = T extends (infer U)[] ? Array<DeepPartial<U>> : T extends object ? {
-    [K in keyof T]?: DeepPartial<T[K]>;
-} : T;
-export type AssertNoUncovered<Upstream, Emitted, Allow extends PropertyKey> = Exclude<keyof Upstream, keyof Emitted | Allow> extends never ? true : {
-    __UNCOVERED_UPSTREAM_FIELDS__: Exclude<keyof Upstream, keyof Emitted | Allow>;
-};

package/node_modules/@pome-sh/twin-stripe/dist/src/upstream-types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=upstream-types.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/upstream-types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"upstream-types.js","sourceRoot":"","sources":["../../src/upstream-types.ts"],"names":[],"mappings":""}

package/node_modules/@pome-sh/twin-stripe/dist/src/util.d.ts

@@ -1,3 +0,0 @@
-export declare function nowIso(): string;
-export declare function nowUnix(): number;
-export declare function requestId(): string;

package/node_modules/@pome-sh/twin-stripe/dist/src/util.js

@@ -1,12 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-import { randomUUID } from "node:crypto";
-export function nowIso() {
-    return new Date().toISOString();
-}
-export function nowUnix() {
-    return Math.floor(Date.now() / 1000);
-}
-export function requestId() {
-    return `req_${randomUUID()}`;
-}
-//# sourceMappingURL=util.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/util.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../../src/util.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,MAAM;IACpB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,UAAU,EAAE,EAAE,CAAC;AAC/B,CAAC"}