@strimz/shared-types 0.6.0 → 0.8.0

package/dist/merchants.d.ts

@@ -32,14 +32,14 @@ declare const merchantSchema: z.ZodObject<{
     updatedAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     status: "active" | "suspended" | "closed";
+    businessName: string;
+    email: string;
     id: string;
-    walletAddress: string | null;
     createdAt: string;
-    email: string;
-    metadata: Record<string, string | number | boolean | null>;
     updatedAt: string;
+    metadata: Record<string, string | number | boolean | null>;
+    walletAddress: string | null;
     onchainMerchantId: number | null;
-    businessName: string;
     tier: "free" | "growth" | "business" | "enterprise";
     payoutAddress: string | null;
     onboardingCompleted: boolean;
@@ -50,13 +50,13 @@ declare const merchantSchema: z.ZodObject<{
     whitelabelEnabled: boolean;
 }, {
     status: "active" | "suspended" | "closed";
+    businessName: string;
+    email: string;
     id: string;
-    walletAddress: string | null;
     createdAt: string;
-    email: string;
     updatedAt: string;
+    walletAddress: string | null;
     onchainMerchantId: number | null;
-    businessName: string;
     tier: "free" | "growth" | "business" | "enterprise";
     payoutAddress: string | null;
     onboardingCompleted: boolean;
@@ -75,19 +75,20 @@ declare const createMerchantInputSchema: z.ZodObject<{
     countryCode: z.ZodOptional<z.ZodString>;
     websiteUrl: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    email: string;
     businessName: string;
+    email: string;
     password: string;
     countryCode?: string | undefined;
     websiteUrl?: string | undefined;
 }, {
-    email: string;
     businessName: string;
+    email: string;
     password: string;
     countryCode?: string | undefined;
     websiteUrl?: string | undefined;
 }>;
-type CreateMerchantInput = z.infer<typeof createMerchantInputSchema>;
+type CreateMerchantInput = z.input<typeof createMerchantInputSchema>;
+type CreateMerchantParsed = z.output<typeof createMerchantInputSchema>;
 /**
  * Merchant email opt-outs, persisted at `Merchant.metadata.emailPrefs`.
  * Both default to true. Welcome, refunds, and admin broadcasts always send.
@@ -125,8 +126,8 @@ declare const updateMerchantInputSchema: z.ZodObject<{
         subscriptionCharged?: boolean | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    metadata?: Record<string, string | number | boolean | null> | undefined;
     businessName?: string | undefined;
+    metadata?: Record<string, string | number | boolean | null> | undefined;
     payoutAddress?: string | undefined;
     defaultCurrency?: "USDC" | "EURC" | undefined;
     countryCode?: string | null | undefined;
@@ -137,8 +138,8 @@ declare const updateMerchantInputSchema: z.ZodObject<{
         subscriptionCharged?: boolean | undefined;
     } | undefined;
 }, {
-    metadata?: Record<string, string | number | boolean | null> | undefined;
     businessName?: string | undefined;
+    metadata?: Record<string, string | number | boolean | null> | undefined;
     payoutAddress?: string | undefined;
     defaultCurrency?: "USDC" | "EURC" | undefined;
     countryCode?: string | null | undefined;
@@ -149,7 +150,8 @@ declare const updateMerchantInputSchema: z.ZodObject<{
         subscriptionCharged?: boolean | undefined;
     } | undefined;
 }>;
-type UpdateMerchantInput = z.infer<typeof updateMerchantInputSchema>;
+type UpdateMerchantInput = z.input<typeof updateMerchantInputSchema>;
+type UpdateMerchantParsed = z.output<typeof updateMerchantInputSchema>;
 declare const changeTierInputSchema: z.ZodObject<{
     tier: z.ZodEnum<["free", "growth", "business", "enterprise"]>;
 }, "strip", z.ZodTypeAny, {
@@ -157,7 +159,8 @@ declare const changeTierInputSchema: z.ZodObject<{
 }, {
     tier: "free" | "growth" | "business" | "enterprise";
 }>;
-type ChangeTierInput = z.infer<typeof changeTierInputSchema>;
+type ChangeTierInput = z.input<typeof changeTierInputSchema>;
+type ChangeTierParsed = z.output<typeof changeTierInputSchema>;
 /**
  * Self-attested onboarding form the dashboard collects after a
  * merchant first logs in via Privy. On success the API stamps
@@ -193,21 +196,22 @@ declare const onboardMerchantInputSchema: z.ZodObject<{
     logoUrl?: string | undefined;
     phone?: string | undefined;
 }>;
-type OnboardMerchantInput = z.infer<typeof onboardMerchantInputSchema>;
+type OnboardMerchantInput = z.input<typeof onboardMerchantInputSchema>;
+type OnboardMerchantParsed = z.output<typeof onboardMerchantInputSchema>;
 declare const merchantPublicBrandSchema: z.ZodObject<{
     id: z.ZodString;
     businessName: z.ZodString;
     logoUrl: z.ZodNullable<z.ZodString>;
     walletAddress: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
 }, "strip", z.ZodTypeAny, {
+    businessName: string;
     id: string;
     walletAddress: string | null;
-    businessName: string;
     logoUrl: string | null;
 }, {
+    businessName: string;
     id: string;
     walletAddress: string | null;
-    businessName: string;
     logoUrl: string | null;
 }>;
 type MerchantPublicBrand = z.infer<typeof merchantPublicBrandSchema>;
@@ -284,16 +288,16 @@ declare const merchantMemberSchema: z.ZodObject<{
     invitedAt: z.ZodString;
     acceptedAt: z.ZodNullable<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    id: string;
     merchantId: string;
     email: string;
+    id: string;
     role: "owner" | "admin" | "developer" | "read_only";
     invitedAt: string;
     acceptedAt: string | null;
 }, {
-    id: string;
     merchantId: string;
     email: string;
+    id: string;
     role: "owner" | "admin" | "developer" | "read_only";
     invitedAt: string;
     acceptedAt: string | null;
@@ -309,7 +313,8 @@ declare const inviteMemberInputSchema: z.ZodObject<{
     email: string;
     role: "owner" | "admin" | "developer" | "read_only";
 }>;
-type InviteMemberInput = z.infer<typeof inviteMemberInputSchema>;
+type InviteMemberInput = z.input<typeof inviteMemberInputSchema>;
+type InviteMemberParsed = z.output<typeof inviteMemberInputSchema>;
 declare const loginInputSchema: z.ZodObject<{
     email: z.ZodString;
     password: z.ZodString;
@@ -320,7 +325,8 @@ declare const loginInputSchema: z.ZodObject<{
     email: string;
     password: string;
 }>;
-type LoginInput = z.infer<typeof loginInputSchema>;
+type LoginInput = z.input<typeof loginInputSchema>;
+type LoginParsed = z.output<typeof loginInputSchema>;
 declare const loginOutputSchema: z.ZodObject<{
     accessToken: z.ZodString;
     refreshToken: z.ZodString;
@@ -344,14 +350,14 @@ declare const loginOutputSchema: z.ZodObject<{
         updatedAt: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         status: "active" | "suspended" | "closed";
+        businessName: string;
+        email: string;
         id: string;
-        walletAddress: string | null;
         createdAt: string;
-        email: string;
-        metadata: Record<string, string | number | boolean | null>;
         updatedAt: string;
+        metadata: Record<string, string | number | boolean | null>;
+        walletAddress: string | null;
         onchainMerchantId: number | null;
-        businessName: string;
         tier: "free" | "growth" | "business" | "enterprise";
         payoutAddress: string | null;
         onboardingCompleted: boolean;
@@ -362,13 +368,13 @@ declare const loginOutputSchema: z.ZodObject<{
         whitelabelEnabled: boolean;
     }, {
         status: "active" | "suspended" | "closed";
+        businessName: string;
+        email: string;
         id: string;
-        walletAddress: string | null;
         createdAt: string;
-        email: string;
         updatedAt: string;
+        walletAddress: string | null;
         onchainMerchantId: number | null;
-        businessName: string;
         tier: "free" | "growth" | "business" | "enterprise";
         payoutAddress: string | null;
         onboardingCompleted: boolean;
@@ -384,14 +390,14 @@ declare const loginOutputSchema: z.ZodObject<{
     refreshToken: string;
     merchant: {
         status: "active" | "suspended" | "closed";
+        businessName: string;
+        email: string;
         id: string;
-        walletAddress: string | null;
         createdAt: string;
-        email: string;
-        metadata: Record<string, string | number | boolean | null>;
         updatedAt: string;
+        metadata: Record<string, string | number | boolean | null>;
+        walletAddress: string | null;
         onchainMerchantId: number | null;
-        businessName: string;
         tier: "free" | "growth" | "business" | "enterprise";
         payoutAddress: string | null;
         onboardingCompleted: boolean;
@@ -406,13 +412,13 @@ declare const loginOutputSchema: z.ZodObject<{
     refreshToken: string;
     merchant: {
         status: "active" | "suspended" | "closed";
+        businessName: string;
+        email: string;
         id: string;
-        walletAddress: string | null;
         createdAt: string;
-        email: string;
         updatedAt: string;
+        walletAddress: string | null;
         onchainMerchantId: number | null;
-        businessName: string;
         tier: "free" | "growth" | "business" | "enterprise";
         payoutAddress: string | null;
         onboardingCompleted: boolean;
@@ -426,4 +432,4 @@ declare const loginOutputSchema: z.ZodObject<{
 }>;
 type LoginOutput = z.infer<typeof loginOutputSchema>;
 
-export { type ChangeTierInput, type CreateMerchantInput, DEFAULT_MERCHANT_EMAIL_PREFS, type InviteMemberInput, type LoginInput, type LoginOutput, type Merchant, type MerchantBalanceView, type MerchantEmailPrefs, type MerchantMember, type MerchantPublicBrand, type MerchantRole, type MerchantStatus, type OnboardMerchantInput, type UpdateMerchantInput, changeTierInputSchema, createMerchantInputSchema, inviteMemberInputSchema, loginInputSchema, loginOutputSchema, merchantBalanceSchema, merchantEmailPrefsSchema, merchantMemberSchema, merchantPublicBrandSchema, merchantRoleSchema, merchantSchema, merchantStatusSchema, onboardMerchantInputSchema, updateMerchantInputSchema };
+export { type ChangeTierInput, type ChangeTierParsed, type CreateMerchantInput, type CreateMerchantParsed, DEFAULT_MERCHANT_EMAIL_PREFS, type InviteMemberInput, type InviteMemberParsed, type LoginInput, type LoginOutput, type LoginParsed, type Merchant, type MerchantBalanceView, type MerchantEmailPrefs, type MerchantMember, type MerchantPublicBrand, type MerchantRole, type MerchantStatus, type OnboardMerchantInput, type OnboardMerchantParsed, type UpdateMerchantInput, type UpdateMerchantParsed, changeTierInputSchema, createMerchantInputSchema, inviteMemberInputSchema, loginInputSchema, loginOutputSchema, merchantBalanceSchema, merchantEmailPrefsSchema, merchantMemberSchema, merchantPublicBrandSchema, merchantRoleSchema, merchantSchema, merchantStatusSchema, onboardMerchantInputSchema, updateMerchantInputSchema };

package/dist/merchants.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/common.ts","../src/merchants.ts"],"names":["z"],"mappings":";;;AAQO,IAAM,QAAA,GAAW,CAAA,CACrB,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,kBAAA,EAAoB,qBAAqB,CAAA;AAG3C,IAAM,gBAAA,GAAmB,CAAA,CAC7B,MAAA,EAAO,CACP,KAAA,CAAM,qBAAA,EAAuB,oDAAoD,CAAA,CACjF,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AAGJ,CAAA,CAC5B,MAAA,EAAO,CACP,KAAA,CAAM,uBAAuB,6DAA6D;AAGtF,IAAM,WAAA,GAAc,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAM,CAAE,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,GAAA,CAAI,GAAG,CAAA;AAG5C,CAAA,CAC3B,MAAA,EAAO,CACP,GAAA,EAAI,CACJ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,UAAU,CAAA,EAAG;AAAA,EACvC,OAAA,EAAS;AACX,CAAC;AAG0B,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA;AAOP,CAAA,CAC9B,MAAA,EAAO,CACP,MAAM,UAAA,EAAY,iDAAiD,CAAA,CACnE,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,IAAK,IAAI,cAAc;AAGtB,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,gBAAgB;AAGtE,IAAM,kBAAA,GAAqB,CAAA,CAC/B,MAAA,EAAO,CACP,QAAA,CAAS,EAAE,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,+BAAA,EAAiC,CAAA;AAGrC,EAC9B,MAAA,EAAO,CACP,OAAO,CAAC,CAAA,CACR,KAAA,CAAM,YAAA,EAAc,0CAA0C;AAG5B,EAAE,MAAA,CAAO;AAAA,EAC5C,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAQ,EAAE,CAAA;AAAA,EAClD,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,OAAA;AACrC,CAAC;AAYM,IAAM,iBAAiB,CAAA,CAC3B,MAAA;AAAA,EACC,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EACxB,EAAE,KAAA,CAAM,CAAC,EAAE,MAAA,EAAO,CAAE,IAAI,GAAG,CAAA,EAAG,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,IAAW,CAAA,CAAE,IAAA,EAAM,CAAC;AAClE,CAAA,CACC,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,MAAA,IAAU,EAAA,EAAI,0BAA0B,CAAA,CACrE,OAAA,CAAQ,EAAE,CAAA;AAGa,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC;AAIZ,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC;AAI3B,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAC;AAIzD,IAAM,kBAAA,GAAqB,EAAE,IAAA,CAAK,CAAC,QAAQ,QAAA,EAAU,UAAA,EAAY,YAAY,CAAC,CAAA;AAIjD,CAAA,CAAE,IAAA,CAAK,CAAC,SAAA,EAAW,SAAS,CAAC;;;ACtF1D,IAAM,uBAAuBA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,WAAA,EAAa,QAAQ,CAAC;AAGrE,IAAM,kBAAA,GAAqBA,EAAE,IAAA,CAAK,CAAC,SAAS,OAAA,EAAS,WAAA,EAAa,WAAW,CAAC;AAG9E,IAAM,cAAA,GAAiBA,EAAE,MAAA,CAAO;AAAA,EACrC,EAAA,EAAI,QAAA;AAAA,EACJ,iBAAA,EAAmBA,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,WAAA,GAAc,QAAA,EAAS;AAAA,EAC3D,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,KAAA,EAAO,WAAA;AAAA,EACP,IAAA,EAAM,kBAAA;AAAA,EACN,MAAA,EAAQ,oBAAA;AAAA,EACR,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA,EACzC,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA,EACzC,mBAAA,EAAqBA,EAAE,OAAA,EAAQ;AAAA,EAC/B,iBAAiBA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,EACxC,aAAaA,CAAAA,CAAE,MAAA,GAAS,MAAA,CAAO,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3C,YAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACtC,SAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACnC,iBAAA,EAAmBA,EAAE,OAAA,EAAQ;AAAA,EAC7B,QAAA,EAAU,cAAA;AAAA,EACV,SAAA,EAAW,kBAAA;AAAA,EACX,SAAA,EAAW;AACb,CAAC;AAKM,IAAM,yBAAA,GAA4BA,EAAE,MAAA,CAAO;AAAA,EAChD,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,KAAA,EAAO,WAAA;AAAA,EACP,QAAA,EAAUA,EAAE,MAAA,EAAO,CAAE,IAAI,EAAE,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACpC,aAAaA,CAAAA,CAAE,MAAA,GAAS,MAAA,CAAO,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3C,YAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA;AAC/B,CAAC;AAOM,IAAM,wBAAA,GAA2BA,EAAE,MAAA,CAAO;AAAA;AAAA,EAE/C,eAAA,EAAiBA,EAAE,OAAA,EAAQ;AAAA;AAAA,EAE3B,mBAAA,EAAqBA,EAAE,OAAA;AACzB,CAAC;AAGM,IAAM,4BAAA,GAAmD;AAAA,EAC9D,eAAA,EAAiB,IAAA;AAAA,EACjB,mBAAA,EAAqB;AACvB;AAEO,IAAM,yBAAA,GAA4BA,EACtC,MAAA,CAAO;AAAA,EACN,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,aAAA,EAAe,gBAAA;AAAA,EACf,iBAAiBA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,EACxC,YAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACtC,SAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACnC,aAAaA,CAAAA,CAAE,MAAA,GAAS,MAAA,CAAO,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3C,QAAA,EAAU,cAAA;AAAA,EACV,UAAA,EAAY,yBAAyB,OAAA;AACvC,CAAC,EACA,OAAA;AAGI,IAAM,qBAAA,GAAwBA,EAAE,MAAA,CAAO;AAAA,EAC5C,IAAA,EAAM;AACR,CAAC;AAUM,IAAM,0BAAA,GAA6BA,EAAE,MAAA,CAAO;AAAA,EACjD,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,cAAA,EAAgBA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EACxC,WAAA,EAAaA,EACV,MAAA,EAAO,CACP,OAAO,CAAC,CAAA,CACR,KAAA,CAAM,YAAA,EAAc,qCAAqC,CAAA;AAAA,EAC5D,YAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACtC,SAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACnC,KAAA,EAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,CAAE,QAAA,EAAS;AAAA,EAC1C,aAAA,EAAe,gBAAA;AAAA,EACf,eAAA,EAAiBA,EAAE,IAAA,CAAK,CAAC,QAAQ,MAAM,CAAC,EAAE,QAAA;AAC5C,CAAC;AAGM,IAAM,yBAAA,GAA4BA,EAAE,MAAA,CAAO;AAAA,EAChD,EAAA,EAAI,QAAA;AAAA,EACJ,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,SAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACnC,aAAA,EAAe,iBAAiB,QAAA;AAClC,CAAC;AAWM,IAAM,qBAAA,GAAwBA,EAAE,MAAA,CAAO;AAAA;AAAA,EAE5C,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA;AAAA,EAEzC,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOzC,oBAAA,EAAsBA,EAAE,OAAA,EAAQ;AAAA,EAChC,UAAUA,CAAAA,CAAE,KAAA;AAAA,IACVA,EAAE,MAAA,CAAO;AAAA,MACP,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,MACjC,eAAA,EAAiB,gBAAA;AAAA;AAAA,MAEjB,GAAA,EAAKA,EAAE,MAAA,EAAO;AAAA;AAAA,MAEd,SAAA,EAAWA,EAAE,MAAA,EAAO;AAAA,MACpB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE;AAAA,KACzC;AAAA;AAEL,CAAC;AAKM,IAAM,oBAAA,GAAuBA,EAAE,MAAA,CAAO;AAAA,EAC3C,EAAA,EAAI,QAAA;AAAA,EACJ,UAAA,EAAY,QAAA;AAAA,EACZ,KAAA,EAAO,WAAA;AAAA,EACP,IAAA,EAAM,kBAAA;AAAA,EACN,SAAA,EAAW,kBAAA;AAAA,EACX,UAAA,EAAY,mBAAmB,QAAA;AACjC,CAAC;AAGM,IAAM,uBAAA,GAA0BA,EAAE,MAAA,CAAO;AAAA,EAC9C,KAAA,EAAO,WAAA;AAAA,EACP,IAAA,EAAM;AACR,CAAC;AAKM,IAAM,gBAAA,GAAmBA,EAAE,MAAA,CAAO;AAAA,EACvC,KAAA,EAAO,WAAA;AAAA,EACP,QAAA,EAAUA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG;AACrC,CAAC;AAGM,IAAM,iBAAA,GAAoBA,EAAE,MAAA,CAAO;AAAA,EACxC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,EACtB,YAAA,EAAcA,EAAE,MAAA,EAAO;AAAA,EACvB,QAAA,EAAU;AACZ,CAAC","file":"merchants.js","sourcesContent":["/**\n * Primitive schemas shared across every entity.\n * Every higher-level schema builds on these so validation is consistent.\n */\n\nimport { z } from 'zod'\n\n/** CUID2 or UUID-style opaque identifier. */\nexport const idSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(/^[a-zA-Z0-9_-]+$/, 'id must be URL-safe')\n\n/** EVM address. Hex-encoded, 0x-prefixed, 20 bytes. Normalised to lowercase. */\nexport const evmAddressSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{40}$/, 'must be a 0x-prefixed 40-character hex EVM address')\n  .transform((v) => v.toLowerCase())\n\n/** EVM transaction hash. 32-byte hex. */\nexport const evmTxHashSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{64}$/, 'must be a 0x-prefixed 64-character hex EVM transaction hash')\n\n/** Email address, trimmed and lower-cased. */\nexport const emailSchema = z.string().email().trim().toLowerCase().max(320)\n\n/** HTTPS URL. No http:// allowed outside dev. */\nexport const httpsUrlSchema = z\n  .string()\n  .url()\n  .refine((v) => v.startsWith('https://'), {\n    message: 'must be an https:// URL',\n  })\n\n/** URL permitting http and https (dev + prod). */\nexport const httpUrlSchema = z.string().url()\n\n/**\n * Amount expressed in the token's smallest unit, serialised as a string to\n * preserve precision beyond `Number.MAX_SAFE_INTEGER`. For USDC (6 decimals),\n * 1 USDC is the string \"1000000\".\n */\nexport const tokenAmountSchema = z\n  .string()\n  .regex(/^[0-9]+$/, 'must be a non-negative integer string (base-10)')\n  .refine((v) => BigInt(v) >= 0n, 'must be >= 0')\n\n/** Unsigned integer up to 2^53 - 1; validated and returned as number. */\nexport const uintSchema = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER)\n\n/** ISO-8601 timestamp string (`.toISOString()`-compatible). */\nexport const isoTimestampSchema = z\n  .string()\n  .datetime({ offset: true, message: 'must be an ISO-8601 timestamp' })\n\n/** Two-letter ISO-3166 country code. */\nexport const countryCodeSchema = z\n  .string()\n  .length(2)\n  .regex(/^[A-Z]{2}$/, 'must be an ISO-3166 alpha-2 country code')\n\n/** Pagination inputs used by every list endpoint. */\nexport const paginationInputSchema = z.object({\n  limit: z.number().int().min(1).max(100).default(25),\n  cursor: z.string().min(1).max(200).nullish(),\n})\nexport type PaginationInput = z.infer<typeof paginationInputSchema>\n\n/** Pagination envelope used by every list response. */\nexport const makePaginatedSchema = <T extends z.ZodTypeAny>(item: T) =>\n  z.object({\n    data: z.array(item),\n    nextCursor: z.string().nullable(),\n    hasMore: z.boolean(),\n  })\n\n/** Free-form metadata bag the API round-trips for merchants. */\nexport const metadataSchema = z\n  .record(\n    z.string().min(1).max(40),\n    z.union([z.string().max(500), z.number(), z.boolean(), z.null()]),\n  )\n  .refine((m) => Object.keys(m).length <= 50, 'at most 50 metadata keys')\n  .default({})\n\n/** Environment mode carried on every mode-scoped resource. */\nexport const modeSchema = z.enum(['test', 'live'])\nexport type Mode = z.infer<typeof modeSchema>\n\n/** Payment token enum. */\nexport const paymentCurrencySchema = z.enum(['USDC', 'EURC'])\nexport type PaymentCurrency = z.infer<typeof paymentCurrencySchema>\n\n/** Every display-level currency (payment + treasury). */\nexport const tokenSymbolSchema = z.enum(['USDC', 'EURC', 'USYC'])\nexport type TokenSymbol = z.infer<typeof tokenSymbolSchema>\n\n/** Merchant tier enum. */\nexport const merchantTierSchema = z.enum(['free', 'growth', 'business', 'enterprise'])\nexport type MerchantTier = z.infer<typeof merchantTierSchema>\n\n/** Arc environment enum. */\nexport const arcEnvironmentSchema = z.enum(['testnet', 'mainnet'])\nexport type ArcEnvironment = z.infer<typeof arcEnvironmentSchema>\n\nexport type Id = z.infer<typeof idSchema>\nexport type EvmAddress = z.infer<typeof evmAddressSchema>\nexport type EvmTxHash = z.infer<typeof evmTxHashSchema>\nexport type TokenAmount = z.infer<typeof tokenAmountSchema>\nexport type IsoTimestamp = z.infer<typeof isoTimestampSchema>\nexport type Metadata = z.infer<typeof metadataSchema>\n","/**\n * Merchant entity and lifecycle DTOs.\n *\n * A merchant is the platform's first-class tenant. Merchants have a tier,\n * a payout wallet address, and an on-chain merchantId registered in the\n * StrimzRegistry contract.\n */\n\nimport { z } from 'zod'\nimport {\n  emailSchema,\n  evmAddressSchema,\n  idSchema,\n  isoTimestampSchema,\n  merchantTierSchema,\n  metadataSchema,\n} from './common.js'\n\nexport const merchantStatusSchema = z.enum(['active', 'suspended', 'closed'])\nexport type MerchantStatus = z.infer<typeof merchantStatusSchema>\n\nexport const merchantRoleSchema = z.enum(['owner', 'admin', 'developer', 'read_only'])\nexport type MerchantRole = z.infer<typeof merchantRoleSchema>\n\nexport const merchantSchema = z.object({\n  id: idSchema,\n  onchainMerchantId: z.number().int().nonnegative().nullable(),\n  businessName: z.string().min(2).max(120),\n  email: emailSchema,\n  tier: merchantTierSchema,\n  status: merchantStatusSchema,\n  payoutAddress: evmAddressSchema.nullable(),\n  walletAddress: evmAddressSchema.nullable(),\n  onboardingCompleted: z.boolean(),\n  defaultCurrency: z.enum(['USDC', 'EURC']),\n  countryCode: z.string().length(2).nullable(),\n  websiteUrl: z.string().url().nullable(),\n  logoUrl: z.string().url().nullable(),\n  whitelabelEnabled: z.boolean(),\n  metadata: metadataSchema,\n  createdAt: isoTimestampSchema,\n  updatedAt: isoTimestampSchema,\n})\nexport type Merchant = z.infer<typeof merchantSchema>\n\n// ---------- DTOs ----------\n\nexport const createMerchantInputSchema = z.object({\n  businessName: z.string().min(2).max(120),\n  email: emailSchema,\n  password: z.string().min(12).max(128),\n  countryCode: z.string().length(2).optional(),\n  websiteUrl: z.string().url().optional(),\n})\nexport type CreateMerchantInput = z.infer<typeof createMerchantInputSchema>\n\n/**\n * Merchant email opt-outs, persisted at `Merchant.metadata.emailPrefs`.\n * Both default to true. Welcome, refunds, and admin broadcasts always send.\n */\nexport const merchantEmailPrefsSchema = z.object({\n  /** \"You received X USDC\" one-off payment notifications. */\n  paymentReceived: z.boolean(),\n  /** \"You were paid X for subscription Y\" per-charge notifications. */\n  subscriptionCharged: z.boolean(),\n})\nexport type MerchantEmailPrefs = z.infer<typeof merchantEmailPrefsSchema>\n\nexport const DEFAULT_MERCHANT_EMAIL_PREFS: MerchantEmailPrefs = {\n  paymentReceived: true,\n  subscriptionCharged: true,\n}\n\nexport const updateMerchantInputSchema = z\n  .object({\n    businessName: z.string().min(2).max(120),\n    payoutAddress: evmAddressSchema,\n    defaultCurrency: z.enum(['USDC', 'EURC']),\n    websiteUrl: z.string().url().nullable(),\n    logoUrl: z.string().url().nullable(),\n    countryCode: z.string().length(2).nullable(),\n    metadata: metadataSchema,\n    emailPrefs: merchantEmailPrefsSchema.partial(),\n  })\n  .partial()\nexport type UpdateMerchantInput = z.infer<typeof updateMerchantInputSchema>\n\nexport const changeTierInputSchema = z.object({\n  tier: merchantTierSchema,\n})\nexport type ChangeTierInput = z.infer<typeof changeTierInputSchema>\n\n/**\n * Self-attested onboarding form the dashboard collects after a\n * merchant first logs in via Privy. On success the API stamps\n * `onboardingCompleted: true` on the row, and the dashboard exits\n * the wizard. Shared here so the API's DTO and the web client's\n * hook can enforce the same shape.\n */\nexport const onboardMerchantInputSchema = z.object({\n  businessName: z.string().min(2).max(120),\n  businessSector: z.string().min(2).max(80),\n  countryCode: z\n    .string()\n    .length(2)\n    .regex(/^[A-Z]{2}$/, 'must be a 2-letter ISO country code'),\n  websiteUrl: z.string().url().optional(),\n  logoUrl: z.string().url().optional(),\n  phone: z.string().min(6).max(20).optional(),\n  payoutAddress: evmAddressSchema,\n  defaultCurrency: z.enum(['USDC', 'EURC']).optional(),\n})\nexport type OnboardMerchantInput = z.infer<typeof onboardMerchantInputSchema>\n\nexport const merchantPublicBrandSchema = z.object({\n  id: idSchema,\n  businessName: z.string().min(2).max(120),\n  logoUrl: z.string().url().nullable(),\n  walletAddress: evmAddressSchema.nullable(),\n})\nexport type MerchantPublicBrand = z.infer<typeof merchantPublicBrandSchema>\n\n/**\n * On-chain balance view for the withdraw page. Strimz is\n * non-custodial: payments settle directly into the merchant's\n * `payoutAddress`, and \"withdrawal\" means the merchant transferring\n * out with their own wallet. This shape reports current on-chain\n * state so the dashboard renders live balances + decides whether to\n * offer the signing UI.\n */\nexport const merchantBalanceSchema = z.object({\n  /** Payout wallet, checksummed; null when the merchant hasn't set one. */\n  payoutAddress: evmAddressSchema.nullable(),\n  /** Privy embedded wallet, checksummed if resolvable. */\n  walletAddress: evmAddressSchema.nullable(),\n  /**\n   * True when `payoutAddress === walletAddress`, i.e. the merchant\n   * can sign a transfer from the dashboard via Privy. False for\n   * merchants using an external wallet as payout — the UI falls back\n   * to \"copy the address, transfer with your wallet.\"\n   */\n  canSignFromDashboard: z.boolean(),\n  balances: z.array(\n    z.object({\n      currency: z.enum(['USDC', 'EURC']),\n      contractAddress: evmAddressSchema,\n      /** Base-6 integer as string. */\n      raw: z.string(),\n      /** Human-formatted, e.g. `1234.56`. */\n      formatted: z.string(),\n      decimals: z.number().int().min(0).max(30),\n    }),\n  ),\n})\nexport type MerchantBalanceView = z.infer<typeof merchantBalanceSchema>\n\n// ---------- Team members ----------\n\nexport const merchantMemberSchema = z.object({\n  id: idSchema,\n  merchantId: idSchema,\n  email: emailSchema,\n  role: merchantRoleSchema,\n  invitedAt: isoTimestampSchema,\n  acceptedAt: isoTimestampSchema.nullable(),\n})\nexport type MerchantMember = z.infer<typeof merchantMemberSchema>\n\nexport const inviteMemberInputSchema = z.object({\n  email: emailSchema,\n  role: merchantRoleSchema,\n})\nexport type InviteMemberInput = z.infer<typeof inviteMemberInputSchema>\n\n// ---------- Auth ----------\n\nexport const loginInputSchema = z.object({\n  email: emailSchema,\n  password: z.string().min(1).max(128),\n})\nexport type LoginInput = z.infer<typeof loginInputSchema>\n\nexport const loginOutputSchema = z.object({\n  accessToken: z.string(),\n  refreshToken: z.string(),\n  merchant: merchantSchema,\n})\nexport type LoginOutput = z.infer<typeof loginOutputSchema>\n"]}
+{"version":3,"sources":["../src/common.ts","../src/merchants.ts"],"names":["z"],"mappings":";;;AAQO,IAAM,QAAA,GAAW,CAAA,CACrB,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,kBAAA,EAAoB,qBAAqB,CAAA;AAG3C,IAAM,gBAAA,GAAmB,CAAA,CAC7B,MAAA,EAAO,CACP,KAAA,CAAM,qBAAA,EAAuB,oDAAoD,CAAA,CACjF,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AAGJ,CAAA,CAC5B,MAAA,EAAO,CACP,KAAA,CAAM,uBAAuB,6DAA6D;AAGtF,IAAM,WAAA,GAAc,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAM,CAAE,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,GAAA,CAAI,GAAG,CAAA;AAG5C,CAAA,CAC3B,MAAA,EAAO,CACP,GAAA,EAAI,CACJ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,UAAU,CAAA,EAAG;AAAA,EACvC,OAAA,EAAS;AACX,CAAC;AAG0B,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA;AAOP,CAAA,CAC9B,MAAA,EAAO,CACP,MAAM,UAAA,EAAY,iDAAiD,CAAA,CACnE,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,IAAK,IAAI,cAAc;AAGtB,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,gBAAgB;AAGtE,IAAM,kBAAA,GAAqB,CAAA,CAC/B,MAAA,EAAO,CACP,QAAA,CAAS,EAAE,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,+BAAA,EAAiC,CAAA;AAGrC,EAC9B,MAAA,EAAO,CACP,OAAO,CAAC,CAAA,CACR,KAAA,CAAM,YAAA,EAAc,0CAA0C;AAG5B,EAAE,MAAA,CAAO;AAAA,EAC5C,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAQ,EAAE,CAAA;AAAA,EAClD,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,OAAA;AACrC,CAAC;AAaM,IAAM,iBAAiB,CAAA,CAC3B,MAAA;AAAA,EACC,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EACxB,EAAE,KAAA,CAAM,CAAC,EAAE,MAAA,EAAO,CAAE,IAAI,GAAG,CAAA,EAAG,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,IAAW,CAAA,CAAE,IAAA,EAAM,CAAC;AAClE,CAAA,CACC,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,MAAA,IAAU,EAAA,EAAI,0BAA0B,CAAA,CACrE,OAAA,CAAQ,EAAE,CAAA;AAGa,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC;AAIZ,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC;AAI3B,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAC;AAIzD,IAAM,kBAAA,GAAqB,EAAE,IAAA,CAAK,CAAC,QAAQ,QAAA,EAAU,UAAA,EAAY,YAAY,CAAC,CAAA;AAIjD,CAAA,CAAE,IAAA,CAAK,CAAC,SAAA,EAAW,SAAS,CAAC;;;ACvF1D,IAAM,uBAAuBA,CAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,WAAA,EAAa,QAAQ,CAAC;AAGrE,IAAM,kBAAA,GAAqBA,EAAE,IAAA,CAAK,CAAC,SAAS,OAAA,EAAS,WAAA,EAAa,WAAW,CAAC;AAG9E,IAAM,cAAA,GAAiBA,EAAE,MAAA,CAAO;AAAA,EACrC,EAAA,EAAI,QAAA;AAAA,EACJ,iBAAA,EAAmBA,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,WAAA,GAAc,QAAA,EAAS;AAAA,EAC3D,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,KAAA,EAAO,WAAA;AAAA,EACP,IAAA,EAAM,kBAAA;AAAA,EACN,MAAA,EAAQ,oBAAA;AAAA,EACR,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA,EACzC,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA,EACzC,mBAAA,EAAqBA,EAAE,OAAA,EAAQ;AAAA,EAC/B,iBAAiBA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,EACxC,aAAaA,CAAAA,CAAE,MAAA,GAAS,MAAA,CAAO,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3C,YAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACtC,SAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACnC,iBAAA,EAAmBA,EAAE,OAAA,EAAQ;AAAA,EAC7B,QAAA,EAAU,cAAA;AAAA,EACV,SAAA,EAAW,kBAAA;AAAA,EACX,SAAA,EAAW;AACb,CAAC;AAKM,IAAM,yBAAA,GAA4BA,EAAE,MAAA,CAAO;AAAA,EAChD,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,KAAA,EAAO,WAAA;AAAA,EACP,QAAA,EAAUA,EAAE,MAAA,EAAO,CAAE,IAAI,EAAE,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACpC,aAAaA,CAAAA,CAAE,MAAA,GAAS,MAAA,CAAO,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3C,YAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA;AAC/B,CAAC;AAQM,IAAM,wBAAA,GAA2BA,EAAE,MAAA,CAAO;AAAA;AAAA,EAE/C,eAAA,EAAiBA,EAAE,OAAA,EAAQ;AAAA;AAAA,EAE3B,mBAAA,EAAqBA,EAAE,OAAA;AACzB,CAAC;AAGM,IAAM,4BAAA,GAAmD;AAAA,EAC9D,eAAA,EAAiB,IAAA;AAAA,EACjB,mBAAA,EAAqB;AACvB;AAEO,IAAM,yBAAA,GAA4BA,EACtC,MAAA,CAAO;AAAA,EACN,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,aAAA,EAAe,gBAAA;AAAA,EACf,iBAAiBA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,EACxC,YAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACtC,SAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACnC,aAAaA,CAAAA,CAAE,MAAA,GAAS,MAAA,CAAO,CAAC,EAAE,QAAA,EAAS;AAAA,EAC3C,QAAA,EAAU,cAAA;AAAA,EACV,UAAA,EAAY,yBAAyB,OAAA;AACvC,CAAC,EACA,OAAA;AAII,IAAM,qBAAA,GAAwBA,EAAE,MAAA,CAAO;AAAA,EAC5C,IAAA,EAAM;AACR,CAAC;AAWM,IAAM,0BAAA,GAA6BA,EAAE,MAAA,CAAO;AAAA,EACjD,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,cAAA,EAAgBA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EACxC,WAAA,EAAaA,EACV,MAAA,EAAO,CACP,OAAO,CAAC,CAAA,CACR,KAAA,CAAM,YAAA,EAAc,qCAAqC,CAAA;AAAA,EAC5D,YAAYA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACtC,SAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACnC,KAAA,EAAOA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE,CAAA,CAAE,QAAA,EAAS;AAAA,EAC1C,aAAA,EAAe,gBAAA;AAAA,EACf,eAAA,EAAiBA,EAAE,IAAA,CAAK,CAAC,QAAQ,MAAM,CAAC,EAAE,QAAA;AAC5C,CAAC;AAIM,IAAM,yBAAA,GAA4BA,EAAE,MAAA,CAAO;AAAA,EAChD,EAAA,EAAI,QAAA;AAAA,EACJ,YAAA,EAAcA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EACvC,SAASA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACnC,aAAA,EAAe,iBAAiB,QAAA;AAClC,CAAC;AAWM,IAAM,qBAAA,GAAwBA,EAAE,MAAA,CAAO;AAAA;AAAA,EAE5C,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA;AAAA,EAEzC,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOzC,oBAAA,EAAsBA,EAAE,OAAA,EAAQ;AAAA,EAChC,UAAUA,CAAAA,CAAE,KAAA;AAAA,IACVA,EAAE,MAAA,CAAO;AAAA,MACP,UAAUA,CAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,MACjC,eAAA,EAAiB,gBAAA;AAAA;AAAA,MAEjB,GAAA,EAAKA,EAAE,MAAA,EAAO;AAAA;AAAA,MAEd,SAAA,EAAWA,EAAE,MAAA,EAAO;AAAA,MACpB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,EAAE;AAAA,KACzC;AAAA;AAEL,CAAC;AAKM,IAAM,oBAAA,GAAuBA,EAAE,MAAA,CAAO;AAAA,EAC3C,EAAA,EAAI,QAAA;AAAA,EACJ,UAAA,EAAY,QAAA;AAAA,EACZ,KAAA,EAAO,WAAA;AAAA,EACP,IAAA,EAAM,kBAAA;AAAA,EACN,SAAA,EAAW,kBAAA;AAAA,EACX,UAAA,EAAY,mBAAmB,QAAA;AACjC,CAAC;AAGM,IAAM,uBAAA,GAA0BA,EAAE,MAAA,CAAO;AAAA,EAC9C,KAAA,EAAO,WAAA;AAAA,EACP,IAAA,EAAM;AACR,CAAC;AAMM,IAAM,gBAAA,GAAmBA,EAAE,MAAA,CAAO;AAAA,EACvC,KAAA,EAAO,WAAA;AAAA,EACP,QAAA,EAAUA,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG;AACrC,CAAC;AAIM,IAAM,iBAAA,GAAoBA,EAAE,MAAA,CAAO;AAAA,EACxC,WAAA,EAAaA,EAAE,MAAA,EAAO;AAAA,EACtB,YAAA,EAAcA,EAAE,MAAA,EAAO;AAAA,EACvB,QAAA,EAAU;AACZ,CAAC","file":"merchants.js","sourcesContent":["/**\n * Primitive schemas shared across every entity.\n * Every higher-level schema builds on these so validation is consistent.\n */\n\nimport { z } from 'zod'\n\n/** CUID2 or UUID-style opaque identifier. */\nexport const idSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(/^[a-zA-Z0-9_-]+$/, 'id must be URL-safe')\n\n/** EVM address. Hex-encoded, 0x-prefixed, 20 bytes. Normalised to lowercase. */\nexport const evmAddressSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{40}$/, 'must be a 0x-prefixed 40-character hex EVM address')\n  .transform((v) => v.toLowerCase())\n\n/** EVM transaction hash. 32-byte hex. */\nexport const evmTxHashSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{64}$/, 'must be a 0x-prefixed 64-character hex EVM transaction hash')\n\n/** Email address, trimmed and lower-cased. */\nexport const emailSchema = z.string().email().trim().toLowerCase().max(320)\n\n/** HTTPS URL. No http:// allowed outside dev. */\nexport const httpsUrlSchema = z\n  .string()\n  .url()\n  .refine((v) => v.startsWith('https://'), {\n    message: 'must be an https:// URL',\n  })\n\n/** URL permitting http and https (dev + prod). */\nexport const httpUrlSchema = z.string().url()\n\n/**\n * Amount expressed in the token's smallest unit, serialised as a string to\n * preserve precision beyond `Number.MAX_SAFE_INTEGER`. For USDC (6 decimals),\n * 1 USDC is the string \"1000000\".\n */\nexport const tokenAmountSchema = z\n  .string()\n  .regex(/^[0-9]+$/, 'must be a non-negative integer string (base-10)')\n  .refine((v) => BigInt(v) >= 0n, 'must be >= 0')\n\n/** Unsigned integer up to 2^53 - 1; validated and returned as number. */\nexport const uintSchema = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER)\n\n/** ISO-8601 timestamp string (`.toISOString()`-compatible). */\nexport const isoTimestampSchema = z\n  .string()\n  .datetime({ offset: true, message: 'must be an ISO-8601 timestamp' })\n\n/** Two-letter ISO-3166 country code. */\nexport const countryCodeSchema = z\n  .string()\n  .length(2)\n  .regex(/^[A-Z]{2}$/, 'must be an ISO-3166 alpha-2 country code')\n\n/** Pagination inputs used by every list endpoint. */\nexport const paginationInputSchema = z.object({\n  limit: z.number().int().min(1).max(100).default(25),\n  cursor: z.string().min(1).max(200).nullish(),\n})\nexport type PaginationInput = z.input<typeof paginationInputSchema>\nexport type PaginationParsed = z.output<typeof paginationInputSchema>\n\n/** Pagination envelope used by every list response. */\nexport const makePaginatedSchema = <T extends z.ZodTypeAny>(item: T) =>\n  z.object({\n    data: z.array(item),\n    nextCursor: z.string().nullable(),\n    hasMore: z.boolean(),\n  })\n\n/** Free-form metadata bag the API round-trips for merchants. */\nexport const metadataSchema = z\n  .record(\n    z.string().min(1).max(40),\n    z.union([z.string().max(500), z.number(), z.boolean(), z.null()]),\n  )\n  .refine((m) => Object.keys(m).length <= 50, 'at most 50 metadata keys')\n  .default({})\n\n/** Environment mode carried on every mode-scoped resource. */\nexport const modeSchema = z.enum(['test', 'live'])\nexport type Mode = z.infer<typeof modeSchema>\n\n/** Payment token enum. */\nexport const paymentCurrencySchema = z.enum(['USDC', 'EURC'])\nexport type PaymentCurrency = z.infer<typeof paymentCurrencySchema>\n\n/** Every display-level currency (payment + treasury). */\nexport const tokenSymbolSchema = z.enum(['USDC', 'EURC', 'USYC'])\nexport type TokenSymbol = z.infer<typeof tokenSymbolSchema>\n\n/** Merchant tier enum. */\nexport const merchantTierSchema = z.enum(['free', 'growth', 'business', 'enterprise'])\nexport type MerchantTier = z.infer<typeof merchantTierSchema>\n\n/** Arc environment enum. */\nexport const arcEnvironmentSchema = z.enum(['testnet', 'mainnet'])\nexport type ArcEnvironment = z.infer<typeof arcEnvironmentSchema>\n\nexport type Id = z.infer<typeof idSchema>\nexport type EvmAddress = z.infer<typeof evmAddressSchema>\nexport type EvmTxHash = z.infer<typeof evmTxHashSchema>\nexport type TokenAmount = z.infer<typeof tokenAmountSchema>\nexport type IsoTimestamp = z.infer<typeof isoTimestampSchema>\nexport type Metadata = z.infer<typeof metadataSchema>\n","/**\n * Merchant entity and lifecycle DTOs.\n *\n * A merchant is the platform's first-class tenant. Merchants have a tier,\n * a payout wallet address, and an on-chain merchantId registered in the\n * StrimzRegistry contract.\n */\n\nimport { z } from 'zod'\nimport {\n  emailSchema,\n  evmAddressSchema,\n  idSchema,\n  isoTimestampSchema,\n  merchantTierSchema,\n  metadataSchema,\n} from './common.js'\n\nexport const merchantStatusSchema = z.enum(['active', 'suspended', 'closed'])\nexport type MerchantStatus = z.infer<typeof merchantStatusSchema>\n\nexport const merchantRoleSchema = z.enum(['owner', 'admin', 'developer', 'read_only'])\nexport type MerchantRole = z.infer<typeof merchantRoleSchema>\n\nexport const merchantSchema = z.object({\n  id: idSchema,\n  onchainMerchantId: z.number().int().nonnegative().nullable(),\n  businessName: z.string().min(2).max(120),\n  email: emailSchema,\n  tier: merchantTierSchema,\n  status: merchantStatusSchema,\n  payoutAddress: evmAddressSchema.nullable(),\n  walletAddress: evmAddressSchema.nullable(),\n  onboardingCompleted: z.boolean(),\n  defaultCurrency: z.enum(['USDC', 'EURC']),\n  countryCode: z.string().length(2).nullable(),\n  websiteUrl: z.string().url().nullable(),\n  logoUrl: z.string().url().nullable(),\n  whitelabelEnabled: z.boolean(),\n  metadata: metadataSchema,\n  createdAt: isoTimestampSchema,\n  updatedAt: isoTimestampSchema,\n})\nexport type Merchant = z.infer<typeof merchantSchema>\n\n// ---------- DTOs ----------\n\nexport const createMerchantInputSchema = z.object({\n  businessName: z.string().min(2).max(120),\n  email: emailSchema,\n  password: z.string().min(12).max(128),\n  countryCode: z.string().length(2).optional(),\n  websiteUrl: z.string().url().optional(),\n})\nexport type CreateMerchantInput = z.input<typeof createMerchantInputSchema>\nexport type CreateMerchantParsed = z.output<typeof createMerchantInputSchema>\n\n/**\n * Merchant email opt-outs, persisted at `Merchant.metadata.emailPrefs`.\n * Both default to true. Welcome, refunds, and admin broadcasts always send.\n */\nexport const merchantEmailPrefsSchema = z.object({\n  /** \"You received X USDC\" one-off payment notifications. */\n  paymentReceived: z.boolean(),\n  /** \"You were paid X for subscription Y\" per-charge notifications. */\n  subscriptionCharged: z.boolean(),\n})\nexport type MerchantEmailPrefs = z.infer<typeof merchantEmailPrefsSchema>\n\nexport const DEFAULT_MERCHANT_EMAIL_PREFS: MerchantEmailPrefs = {\n  paymentReceived: true,\n  subscriptionCharged: true,\n}\n\nexport const updateMerchantInputSchema = z\n  .object({\n    businessName: z.string().min(2).max(120),\n    payoutAddress: evmAddressSchema,\n    defaultCurrency: z.enum(['USDC', 'EURC']),\n    websiteUrl: z.string().url().nullable(),\n    logoUrl: z.string().url().nullable(),\n    countryCode: z.string().length(2).nullable(),\n    metadata: metadataSchema,\n    emailPrefs: merchantEmailPrefsSchema.partial(),\n  })\n  .partial()\nexport type UpdateMerchantInput = z.input<typeof updateMerchantInputSchema>\nexport type UpdateMerchantParsed = z.output<typeof updateMerchantInputSchema>\n\nexport const changeTierInputSchema = z.object({\n  tier: merchantTierSchema,\n})\nexport type ChangeTierInput = z.input<typeof changeTierInputSchema>\nexport type ChangeTierParsed = z.output<typeof changeTierInputSchema>\n\n/**\n * Self-attested onboarding form the dashboard collects after a\n * merchant first logs in via Privy. On success the API stamps\n * `onboardingCompleted: true` on the row, and the dashboard exits\n * the wizard. Shared here so the API's DTO and the web client's\n * hook can enforce the same shape.\n */\nexport const onboardMerchantInputSchema = z.object({\n  businessName: z.string().min(2).max(120),\n  businessSector: z.string().min(2).max(80),\n  countryCode: z\n    .string()\n    .length(2)\n    .regex(/^[A-Z]{2}$/, 'must be a 2-letter ISO country code'),\n  websiteUrl: z.string().url().optional(),\n  logoUrl: z.string().url().optional(),\n  phone: z.string().min(6).max(20).optional(),\n  payoutAddress: evmAddressSchema,\n  defaultCurrency: z.enum(['USDC', 'EURC']).optional(),\n})\nexport type OnboardMerchantInput = z.input<typeof onboardMerchantInputSchema>\nexport type OnboardMerchantParsed = z.output<typeof onboardMerchantInputSchema>\n\nexport const merchantPublicBrandSchema = z.object({\n  id: idSchema,\n  businessName: z.string().min(2).max(120),\n  logoUrl: z.string().url().nullable(),\n  walletAddress: evmAddressSchema.nullable(),\n})\nexport type MerchantPublicBrand = z.infer<typeof merchantPublicBrandSchema>\n\n/**\n * On-chain balance view for the withdraw page. Strimz is\n * non-custodial: payments settle directly into the merchant's\n * `payoutAddress`, and \"withdrawal\" means the merchant transferring\n * out with their own wallet. This shape reports current on-chain\n * state so the dashboard renders live balances + decides whether to\n * offer the signing UI.\n */\nexport const merchantBalanceSchema = z.object({\n  /** Payout wallet, checksummed; null when the merchant hasn't set one. */\n  payoutAddress: evmAddressSchema.nullable(),\n  /** Privy embedded wallet, checksummed if resolvable. */\n  walletAddress: evmAddressSchema.nullable(),\n  /**\n   * True when `payoutAddress === walletAddress`, i.e. the merchant\n   * can sign a transfer from the dashboard via Privy. False for\n   * merchants using an external wallet as payout — the UI falls back\n   * to \"copy the address, transfer with your wallet.\"\n   */\n  canSignFromDashboard: z.boolean(),\n  balances: z.array(\n    z.object({\n      currency: z.enum(['USDC', 'EURC']),\n      contractAddress: evmAddressSchema,\n      /** Base-6 integer as string. */\n      raw: z.string(),\n      /** Human-formatted, e.g. `1234.56`. */\n      formatted: z.string(),\n      decimals: z.number().int().min(0).max(30),\n    }),\n  ),\n})\nexport type MerchantBalanceView = z.infer<typeof merchantBalanceSchema>\n\n// ---------- Team members ----------\n\nexport const merchantMemberSchema = z.object({\n  id: idSchema,\n  merchantId: idSchema,\n  email: emailSchema,\n  role: merchantRoleSchema,\n  invitedAt: isoTimestampSchema,\n  acceptedAt: isoTimestampSchema.nullable(),\n})\nexport type MerchantMember = z.infer<typeof merchantMemberSchema>\n\nexport const inviteMemberInputSchema = z.object({\n  email: emailSchema,\n  role: merchantRoleSchema,\n})\nexport type InviteMemberInput = z.input<typeof inviteMemberInputSchema>\nexport type InviteMemberParsed = z.output<typeof inviteMemberInputSchema>\n\n// ---------- Auth ----------\n\nexport const loginInputSchema = z.object({\n  email: emailSchema,\n  password: z.string().min(1).max(128),\n})\nexport type LoginInput = z.input<typeof loginInputSchema>\nexport type LoginParsed = z.output<typeof loginInputSchema>\n\nexport const loginOutputSchema = z.object({\n  accessToken: z.string(),\n  refreshToken: z.string(),\n  merchant: merchantSchema,\n})\nexport type LoginOutput = z.infer<typeof loginOutputSchema>\n"]}

package/dist/payment-sessions.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/common.ts","../src/payment-sessions.ts"],"names":["z"],"mappings":";;;;;AAQO,IAAM,QAAA,GAAWA,KAAA,CACrB,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,kBAAA,EAAoB,qBAAqB,CAAA;AAG3C,IAAM,gBAAA,GAAmBA,KAAA,CAC7B,MAAA,EAAO,CACP,KAAA,CAAM,qBAAA,EAAuB,oDAAoD,CAAA,CACjF,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AAG5B,IAAM,kBAAkBA,KAAA,CAC5B,MAAA,EAAO,CACP,KAAA,CAAM,uBAAuB,6DAA6D,CAAA;AAGlEA,KAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAM,CAAE,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,GAAA,CAAI,GAAG;AAG5CA,KAAA,CAC3B,MAAA,EAAO,CACP,GAAA,EAAI,CACJ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,UAAU,CAAA,EAAG;AAAA,EACvC,OAAA,EAAS;AACX,CAAC;AAG0BA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA;AAOjC,IAAM,iBAAA,GAAoBA,KAAA,CAC9B,MAAA,EAAO,CACP,MAAM,UAAA,EAAY,iDAAiD,CAAA,CACnE,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,IAAK,IAAI,cAAc,CAAA;AAGtBA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,gBAAgB;AAGtE,IAAM,kBAAA,GAAqBA,KAAA,CAC/B,MAAA,EAAO,CACP,QAAA,CAAS,EAAE,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,+BAAA,EAAiC,CAAA;AAGrCA,MAC9B,MAAA,EAAO,CACP,OAAO,CAAC,CAAA,CACR,KAAA,CAAM,YAAA,EAAc,0CAA0C;AAG5BA,MAAE,MAAA,CAAO;AAAA,EAC5C,KAAA,EAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAQ,EAAE,CAAA;AAAA,EAClD,MAAA,EAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,OAAA;AACrC,CAAC;AAYM,IAAM,iBAAiBA,KAAA,CAC3B,MAAA;AAAA,EACCA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EACxBA,MAAE,KAAA,CAAM,CAACA,MAAE,MAAA,EAAO,CAAE,IAAI,GAAG,CAAA,EAAGA,KAAA,CAAE,MAAA,IAAUA,KAAA,CAAE,OAAA,IAAWA,KAAA,CAAE,IAAA,EAAM,CAAC;AAClE,CAAA,CACC,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,MAAA,IAAU,EAAA,EAAI,0BAA0B,CAAA,CACrE,OAAA,CAAQ,EAAE,CAAA;AAGaA,KAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC;AAI1C,IAAM,wBAAwBA,KAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAI3BA,KAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAC;AAI9BA,MAAE,IAAA,CAAK,CAAC,QAAQ,QAAA,EAAU,UAAA,EAAY,YAAY,CAAC;AAIjDA,KAAA,CAAE,IAAA,CAAK,CAAC,SAAA,EAAW,SAAS,CAAC;;;AClF1D,IAAM,0BAAA,GAA6BA,MAAE,IAAA,CAAK;AAAA,EAC/C,SAAA;AAAA,EACA,kBAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAC;AAkBM,IAAM,oBAAoBA,KAAAA,CAC9B,MAAA,EAAO,CACP,GAAA,GACA,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,UAAU,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,SAAS,CAAA,EAAG;AAAA,EAClE,OAAA,EAAS;AACX,CAAC;AAEI,IAAM,oBAAA,GAAuBA,MAAE,MAAA,CAAO;AAAA,EAC3C,EAAA,EAAI,QAAA;AAAA,EACJ,UAAA,EAAY,QAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASZ,eAAA,EAAiBA,MACd,MAAA,EAAO,CACP,MAAM,WAAA,EAAa,+CAA+C,EAClE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQZ,YAAA,EAAc,iBAAiB,QAAA,EAAS;AAAA,EACxC,UAAA,EAAY,SAAS,QAAA,EAAS;AAAA,EAC9B,MAAA,EAAQ,0BAAA;AAAA,EACR,MAAA,EAAQ,iBAAA;AAAA,EACR,QAAA,EAAU,qBAAA;AAAA,EACV,SAAA,EAAW,iBAAA;AAAA,EACX,SAAA,EAAW,iBAAA;AAAA,EACX,aAAaA,KAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA,EAC1C,kBAAA,EAAoB,iBAAiB,QAAA,EAAS;AAAA,EAC9C,YAAYA,KAAAA,CAAE,MAAA,EAAO,CAAE,KAAA,GAAQ,QAAA,EAAS;AAAA,EACxC,UAAA,EAAY,kBAAkB,QAAA,EAAS;AAAA,EACvC,SAAA,EAAW,kBAAkB,QAAA,EAAS;AAAA,EACtC,WAAA,EAAaA,KAAAA,CACV,IAAA,CAAK,CAAC,OAAO,UAAA,EAAY,MAAA,EAAQ,SAAA,EAAW,UAAA,EAAY,UAAA,EAAY,WAAA,EAAa,QAAQ,CAAC,EAC1F,QAAA,EAAS;AAAA,EACZ,YAAA,EAAc,gBAAgB,QAAA,EAAS;AAAA,EACvC,aAAA,EAAe,gBAAgB,QAAA,EAAS;AAAA,EACxC,WAAA,EAAaA,KAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI;AAAA,EAC5B,QAAA,EAAU,cAAA;AAAA,EACV,SAAA,EAAW,kBAAA;AAAA,EACX,SAAA,EAAW,kBAAA;AAAA,EACX,SAAA,EAAW;AACb,CAAC;AAKM,IAAM,+BAAA,GAAkCA,MAAE,MAAA,CAAO;AAAA,EACtD,MAAA,EAAQ,iBAAA;AAAA,EACR,QAAA,EAAU,qBAAA;AAAA,EACV,aAAaA,KAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA,EAC1C,QAAA,EAAUA,MACP,MAAA,CAAO;AAAA,IACN,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA,IACzC,OAAOA,KAAAA,CAAE,MAAA,EAAO,CAAE,KAAA,GAAQ,QAAA,EAAS;AAAA,IACnC,aAAaA,KAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA;AAAS,GAC3C,EACA,QAAA,EAAS;AAAA,EACZ,YAAYA,KAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACtC,WAAWA,KAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA;AAAA,EAErC,gBAAA,EAAkBA,KAAAA,CACf,MAAA,EAAO,CACP,KAAI,CACJ,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAA,GAAK,EAAE,CAAA,CACX,QAAQ,EAAE,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKb,uBAAuBA,KAAAA,CACpB,KAAA;AAAA,IACCA,KAAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,SAAA,EAAW,UAAA,EAAY,UAAA,EAAY,WAAA,EAAa,QAAQ,CAAC;AAAA,IAE7F,QAAA,EAAS;AAAA,EACZ,QAAA,EAAU,eAAe,QAAA;AAC3B,CAAC;AAGM,IAAM,+BAAA,GAAkCA,MAAE,MAAA,CAAO;AAAA,EACtD,WAAA,EAAaA,MAAE,IAAA,CAAK;AAAA,IAClB,KAAA;AAAA,IACA,UAAA;AAAA,IACA,MAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACD,CAAA;AAAA,EACD,aAAA,EAAe,eAAA;AAAA,EACf,YAAA,EAAc,gBAAgB,QAAA,EAAS;AAAA,EACvC,kBAAA,EAAoB;AACtB,CAAC","file":"payment-sessions.cjs","sourcesContent":["/**\n * Primitive schemas shared across every entity.\n * Every higher-level schema builds on these so validation is consistent.\n */\n\nimport { z } from 'zod'\n\n/** CUID2 or UUID-style opaque identifier. */\nexport const idSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(/^[a-zA-Z0-9_-]+$/, 'id must be URL-safe')\n\n/** EVM address. Hex-encoded, 0x-prefixed, 20 bytes. Normalised to lowercase. */\nexport const evmAddressSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{40}$/, 'must be a 0x-prefixed 40-character hex EVM address')\n  .transform((v) => v.toLowerCase())\n\n/** EVM transaction hash. 32-byte hex. */\nexport const evmTxHashSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{64}$/, 'must be a 0x-prefixed 64-character hex EVM transaction hash')\n\n/** Email address, trimmed and lower-cased. */\nexport const emailSchema = z.string().email().trim().toLowerCase().max(320)\n\n/** HTTPS URL. No http:// allowed outside dev. */\nexport const httpsUrlSchema = z\n  .string()\n  .url()\n  .refine((v) => v.startsWith('https://'), {\n    message: 'must be an https:// URL',\n  })\n\n/** URL permitting http and https (dev + prod). */\nexport const httpUrlSchema = z.string().url()\n\n/**\n * Amount expressed in the token's smallest unit, serialised as a string to\n * preserve precision beyond `Number.MAX_SAFE_INTEGER`. For USDC (6 decimals),\n * 1 USDC is the string \"1000000\".\n */\nexport const tokenAmountSchema = z\n  .string()\n  .regex(/^[0-9]+$/, 'must be a non-negative integer string (base-10)')\n  .refine((v) => BigInt(v) >= 0n, 'must be >= 0')\n\n/** Unsigned integer up to 2^53 - 1; validated and returned as number. */\nexport const uintSchema = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER)\n\n/** ISO-8601 timestamp string (`.toISOString()`-compatible). */\nexport const isoTimestampSchema = z\n  .string()\n  .datetime({ offset: true, message: 'must be an ISO-8601 timestamp' })\n\n/** Two-letter ISO-3166 country code. */\nexport const countryCodeSchema = z\n  .string()\n  .length(2)\n  .regex(/^[A-Z]{2}$/, 'must be an ISO-3166 alpha-2 country code')\n\n/** Pagination inputs used by every list endpoint. */\nexport const paginationInputSchema = z.object({\n  limit: z.number().int().min(1).max(100).default(25),\n  cursor: z.string().min(1).max(200).nullish(),\n})\nexport type PaginationInput = z.infer<typeof paginationInputSchema>\n\n/** Pagination envelope used by every list response. */\nexport const makePaginatedSchema = <T extends z.ZodTypeAny>(item: T) =>\n  z.object({\n    data: z.array(item),\n    nextCursor: z.string().nullable(),\n    hasMore: z.boolean(),\n  })\n\n/** Free-form metadata bag the API round-trips for merchants. */\nexport const metadataSchema = z\n  .record(\n    z.string().min(1).max(40),\n    z.union([z.string().max(500), z.number(), z.boolean(), z.null()]),\n  )\n  .refine((m) => Object.keys(m).length <= 50, 'at most 50 metadata keys')\n  .default({})\n\n/** Environment mode carried on every mode-scoped resource. */\nexport const modeSchema = z.enum(['test', 'live'])\nexport type Mode = z.infer<typeof modeSchema>\n\n/** Payment token enum. */\nexport const paymentCurrencySchema = z.enum(['USDC', 'EURC'])\nexport type PaymentCurrency = z.infer<typeof paymentCurrencySchema>\n\n/** Every display-level currency (payment + treasury). */\nexport const tokenSymbolSchema = z.enum(['USDC', 'EURC', 'USYC'])\nexport type TokenSymbol = z.infer<typeof tokenSymbolSchema>\n\n/** Merchant tier enum. */\nexport const merchantTierSchema = z.enum(['free', 'growth', 'business', 'enterprise'])\nexport type MerchantTier = z.infer<typeof merchantTierSchema>\n\n/** Arc environment enum. */\nexport const arcEnvironmentSchema = z.enum(['testnet', 'mainnet'])\nexport type ArcEnvironment = z.infer<typeof arcEnvironmentSchema>\n\nexport type Id = z.infer<typeof idSchema>\nexport type EvmAddress = z.infer<typeof evmAddressSchema>\nexport type EvmTxHash = z.infer<typeof evmTxHashSchema>\nexport type TokenAmount = z.infer<typeof tokenAmountSchema>\nexport type IsoTimestamp = z.infer<typeof isoTimestampSchema>\nexport type Metadata = z.infer<typeof metadataSchema>\n","/**\n * Payment session. A one-shot checkout intent.\n *\n * State machine:\n *   created → awaiting_payment → submitted → confirmed\n *                                       \\\n *                                        → failed\n *                               → expired\n *                               → cancelled\n */\n\nimport { z } from 'zod'\nimport {\n  evmAddressSchema,\n  evmTxHashSchema,\n  idSchema,\n  isoTimestampSchema,\n  metadataSchema,\n  paymentCurrencySchema,\n  tokenAmountSchema,\n} from './common.js'\n\nexport const paymentSessionStatusSchema = z.enum([\n  'created',\n  'awaiting_payment',\n  'submitted',\n  'confirmed',\n  'failed',\n  'expired',\n  'cancelled',\n])\nexport type PaymentSessionStatus = z.infer<typeof paymentSessionStatusSchema>\n\n/**\n * Merchant-supplied callback URL. The hosted checkout dispatches with\n * `window.location.href = redirectUrl` on completion / cancellation,\n * so we MUST reject anything other than `http://` and `https://`.\n *\n * Why this is a real risk: Zod's `.url()` validates RFC syntax, which\n * accepts `javascript:`, `data:`, `vbscript:`, `file:`, blob:`, etc.\n * A compromised merchant integration or an XSS upstream could ship a\n * session whose redirect URL executes script (or exfiltrates session\n * tokens) on every payer's browser. The damage is per-payer, but the\n * blast radius is \"every checkout the merchant runs.\"\n *\n * Mailto / tel and other handler protocols are also rejected — there\n * is no legitimate flow on a payment checkout that would benefit.\n */\nexport const callbackUrlSchema = z\n  .string()\n  .url()\n  .refine((v) => v.startsWith('https://') || v.startsWith('http://'), {\n    message: 'must be an http:// or https:// URL',\n  })\n\nexport const paymentSessionSchema = z.object({\n  id: idSchema,\n  merchantId: idSchema,\n  /**\n   * On-chain StrimzRegistry merchant id (uint96) as a decimal string.\n   * Set when the merchant has been registered on-chain; null when the\n   * merchant exists in our DB but the registry transaction hasn't\n   * been broadcast yet. Hosted checkout uses this to populate the\n   * meta-tx calldata; if null, the checkout refuses to accept\n   * payments.\n   */\n  chainMerchantId: z\n    .string()\n    .regex(/^[0-9]+$/u, 'must be a non-negative decimal integer string')\n    .nullable(),\n  /**\n   * ERC-20 token contract address resolved from `currency` on the\n   * active chain (Arc Testnet / Mainnet). Used as the `verifyingContract`\n   * in the EIP-712 domain for both EIP-3009 and EIP-2612 signing.\n   * Null on the (vanishingly unlikely) path where the API has no\n   * configured address for the session's currency.\n   */\n  tokenAddress: evmAddressSchema.nullable(),\n  customerId: idSchema.nullable(),\n  status: paymentSessionStatusSchema,\n  amount: tokenAmountSchema,\n  currency: paymentCurrencySchema,\n  feeAmount: tokenAmountSchema,\n  netAmount: tokenAmountSchema,\n  description: z.string().max(500).nullable(),\n  payerWalletAddress: evmAddressSchema.nullable(),\n  payerEmail: z.string().email().nullable(),\n  successUrl: callbackUrlSchema.nullable(),\n  cancelUrl: callbackUrlSchema.nullable(),\n  sourceChain: z\n    .enum(['arc', 'ethereum', 'base', 'polygon', 'arbitrum', 'optimism', 'avalanche', 'solana'])\n    .nullable(),\n  bridgeTxHash: evmTxHashSchema.nullable(),\n  onchainTxHash: evmTxHashSchema.nullable(),\n  checkoutUrl: z.string().url(),\n  metadata: metadataSchema,\n  expiresAt: isoTimestampSchema,\n  createdAt: isoTimestampSchema,\n  updatedAt: isoTimestampSchema,\n})\nexport type PaymentSession = z.infer<typeof paymentSessionSchema>\n\n// ---------- DTOs ----------\n\nexport const createPaymentSessionInputSchema = z.object({\n  amount: tokenAmountSchema,\n  currency: paymentCurrencySchema,\n  description: z.string().max(500).optional(),\n  customer: z\n    .object({\n      walletAddress: evmAddressSchema.optional(),\n      email: z.string().email().optional(),\n      externalRef: z.string().max(120).optional(),\n    })\n    .optional(),\n  successUrl: z.string().url().optional(),\n  cancelUrl: z.string().url().optional(),\n  /** Minutes until the session expires. Default 30, max 60*24 (one day). */\n  expiresInMinutes: z\n    .number()\n    .int()\n    .min(1)\n    .max(60 * 24)\n    .default(30),\n  /**\n   * Allowed source chains a payer can bridge USDC from via CCTP. Omit to\n   * accept every CCTP-supported chain.\n   */\n  supportedSourceChains: z\n    .array(\n      z.enum(['arc', 'ethereum', 'base', 'polygon', 'arbitrum', 'optimism', 'avalanche', 'solana']),\n    )\n    .optional(),\n  metadata: metadataSchema.optional(),\n})\nexport type CreatePaymentSessionInput = z.infer<typeof createPaymentSessionInputSchema>\n\nexport const submitPaymentSessionInputSchema = z.object({\n  sourceChain: z.enum([\n    'arc',\n    'ethereum',\n    'base',\n    'polygon',\n    'arbitrum',\n    'optimism',\n    'avalanche',\n    'solana',\n  ]),\n  onchainTxHash: evmTxHashSchema,\n  bridgeTxHash: evmTxHashSchema.optional(),\n  payerWalletAddress: evmAddressSchema,\n})\nexport type SubmitPaymentSessionInput = z.infer<typeof submitPaymentSessionInputSchema>\n"]}
+{"version":3,"sources":["../src/common.ts","../src/payment-sessions.ts"],"names":["z"],"mappings":";;;;;AAQO,IAAM,QAAA,GAAWA,KAAA,CACrB,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,kBAAA,EAAoB,qBAAqB,CAAA;AAG3C,IAAM,gBAAA,GAAmBA,KAAA,CAC7B,MAAA,EAAO,CACP,KAAA,CAAM,qBAAA,EAAuB,oDAAoD,CAAA,CACjF,SAAA,CAAU,CAAC,CAAA,KAAM,CAAA,CAAE,aAAa,CAAA;AAG5B,IAAM,kBAAkBA,KAAA,CAC5B,MAAA,EAAO,CACP,KAAA,CAAM,uBAAuB,6DAA6D,CAAA;AAGlEA,KAAA,CAAE,MAAA,EAAO,CAAE,KAAA,EAAM,CAAE,IAAA,EAAK,CAAE,WAAA,EAAY,CAAE,GAAA,CAAI,GAAG;AAG5CA,KAAA,CAC3B,MAAA,EAAO,CACP,GAAA,EAAI,CACJ,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,UAAA,CAAW,UAAU,CAAA,EAAG;AAAA,EACvC,OAAA,EAAS;AACX,CAAC;AAG0BA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA;AAOjC,IAAM,iBAAA,GAAoBA,KAAA,CAC9B,MAAA,EAAO,CACP,MAAM,UAAA,EAAY,iDAAiD,CAAA,CACnE,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,IAAK,IAAI,cAAc,CAAA;AAGtBA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,MAAA,CAAO,gBAAgB;AAGtE,IAAM,kBAAA,GAAqBA,KAAA,CAC/B,MAAA,EAAO,CACP,QAAA,CAAS,EAAE,MAAA,EAAQ,IAAA,EAAM,OAAA,EAAS,+BAAA,EAAiC,CAAA;AAGrCA,MAC9B,MAAA,EAAO,CACP,OAAO,CAAC,CAAA,CACR,KAAA,CAAM,YAAA,EAAc,0CAA0C;AAG5BA,MAAE,MAAA,CAAO;AAAA,EAC5C,KAAA,EAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAQ,EAAE,CAAA;AAAA,EAClD,MAAA,EAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,OAAA;AACrC,CAAC;AAaM,IAAM,iBAAiBA,KAAA,CAC3B,MAAA;AAAA,EACCA,MAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EACxBA,MAAE,KAAA,CAAM,CAACA,MAAE,MAAA,EAAO,CAAE,IAAI,GAAG,CAAA,EAAGA,KAAA,CAAE,MAAA,IAAUA,KAAA,CAAE,OAAA,IAAWA,KAAA,CAAE,IAAA,EAAM,CAAC;AAClE,CAAA,CACC,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,MAAA,IAAU,EAAA,EAAI,0BAA0B,CAAA,CACrE,OAAA,CAAQ,EAAE,CAAA;AAGaA,KAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC;AAI1C,IAAM,wBAAwBA,KAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAM,CAAC,CAAA;AAI3BA,KAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAC;AAI9BA,MAAE,IAAA,CAAK,CAAC,QAAQ,QAAA,EAAU,UAAA,EAAY,YAAY,CAAC;AAIjDA,KAAA,CAAE,IAAA,CAAK,CAAC,SAAA,EAAW,SAAS,CAAC;;;ACnF1D,IAAM,0BAAA,GAA6BA,MAAE,IAAA,CAAK;AAAA,EAC/C,SAAA;AAAA,EACA,kBAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAC;AAkBM,IAAM,oBAAoBA,KAAAA,CAC9B,MAAA,EAAO,CACP,GAAA,GACA,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,UAAU,CAAA,IAAK,CAAA,CAAE,UAAA,CAAW,SAAS,CAAA,EAAG;AAAA,EAClE,OAAA,EAAS;AACX,CAAC;AAEI,IAAM,oBAAA,GAAuBA,MAAE,MAAA,CAAO;AAAA,EAC3C,EAAA,EAAI,QAAA;AAAA,EACJ,UAAA,EAAY,QAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASZ,eAAA,EAAiBA,MACd,MAAA,EAAO,CACP,MAAM,WAAA,EAAa,+CAA+C,EAClE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQZ,YAAA,EAAc,iBAAiB,QAAA,EAAS;AAAA,EACxC,UAAA,EAAY,SAAS,QAAA,EAAS;AAAA,EAC9B,MAAA,EAAQ,0BAAA;AAAA,EACR,MAAA,EAAQ,iBAAA;AAAA,EACR,QAAA,EAAU,qBAAA;AAAA,EACV,SAAA,EAAW,iBAAA;AAAA,EACX,SAAA,EAAW,iBAAA;AAAA,EACX,aAAaA,KAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA,EAC1C,kBAAA,EAAoB,iBAAiB,QAAA,EAAS;AAAA,EAC9C,YAAYA,KAAAA,CAAE,MAAA,EAAO,CAAE,KAAA,GAAQ,QAAA,EAAS;AAAA,EACxC,UAAA,EAAY,kBAAkB,QAAA,EAAS;AAAA,EACvC,SAAA,EAAW,kBAAkB,QAAA,EAAS;AAAA,EACtC,WAAA,EAAaA,KAAAA,CACV,IAAA,CAAK,CAAC,OAAO,UAAA,EAAY,MAAA,EAAQ,SAAA,EAAW,UAAA,EAAY,UAAA,EAAY,WAAA,EAAa,QAAQ,CAAC,EAC1F,QAAA,EAAS;AAAA,EACZ,YAAA,EAAc,gBAAgB,QAAA,EAAS;AAAA,EACvC,aAAA,EAAe,gBAAgB,QAAA,EAAS;AAAA,EACxC,WAAA,EAAaA,KAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI;AAAA,EAC5B,QAAA,EAAU,cAAA;AAAA,EACV,SAAA,EAAW,kBAAA;AAAA,EACX,SAAA,EAAW,kBAAA;AAAA,EACX,SAAA,EAAW;AACb,CAAC;AAKM,IAAM,+BAAA,GAAkCA,MAAE,MAAA,CAAO;AAAA,EACtD,MAAA,EAAQ,iBAAA;AAAA,EACR,QAAA,EAAU,qBAAA;AAAA,EACV,aAAaA,KAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA,EAC1C,QAAA,EAAUA,MACP,MAAA,CAAO;AAAA,IACN,aAAA,EAAe,iBAAiB,QAAA,EAAS;AAAA,IACzC,OAAOA,KAAAA,CAAE,MAAA,EAAO,CAAE,KAAA,GAAQ,QAAA,EAAS;AAAA,IACnC,aAAaA,KAAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA;AAAS,GAC3C,EACA,QAAA,EAAS;AAAA,EACZ,YAAYA,KAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA,EACtC,WAAWA,KAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,GAAM,QAAA,EAAS;AAAA;AAAA,EAErC,gBAAA,EAAkBA,KAAAA,CACf,MAAA,EAAO,CACP,KAAI,CACJ,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAA,GAAK,EAAE,CAAA,CACX,QAAQ,EAAE,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKb,uBAAuBA,KAAAA,CACpB,KAAA;AAAA,IACCA,KAAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,SAAA,EAAW,UAAA,EAAY,UAAA,EAAY,WAAA,EAAa,QAAQ,CAAC;AAAA,IAE7F,QAAA,EAAS;AAAA,EACZ,QAAA,EAAU,eAAe,QAAA;AAC3B,CAAC;AAIM,IAAM,+BAAA,GAAkCA,MAAE,MAAA,CAAO;AAAA,EACtD,WAAA,EAAaA,MAAE,IAAA,CAAK;AAAA,IAClB,KAAA;AAAA,IACA,UAAA;AAAA,IACA,MAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACD,CAAA;AAAA,EACD,aAAA,EAAe,eAAA;AAAA,EACf,YAAA,EAAc,gBAAgB,QAAA,EAAS;AAAA,EACvC,kBAAA,EAAoB;AACtB,CAAC","file":"payment-sessions.cjs","sourcesContent":["/**\n * Primitive schemas shared across every entity.\n * Every higher-level schema builds on these so validation is consistent.\n */\n\nimport { z } from 'zod'\n\n/** CUID2 or UUID-style opaque identifier. */\nexport const idSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(/^[a-zA-Z0-9_-]+$/, 'id must be URL-safe')\n\n/** EVM address. Hex-encoded, 0x-prefixed, 20 bytes. Normalised to lowercase. */\nexport const evmAddressSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{40}$/, 'must be a 0x-prefixed 40-character hex EVM address')\n  .transform((v) => v.toLowerCase())\n\n/** EVM transaction hash. 32-byte hex. */\nexport const evmTxHashSchema = z\n  .string()\n  .regex(/^0x[a-fA-F0-9]{64}$/, 'must be a 0x-prefixed 64-character hex EVM transaction hash')\n\n/** Email address, trimmed and lower-cased. */\nexport const emailSchema = z.string().email().trim().toLowerCase().max(320)\n\n/** HTTPS URL. No http:// allowed outside dev. */\nexport const httpsUrlSchema = z\n  .string()\n  .url()\n  .refine((v) => v.startsWith('https://'), {\n    message: 'must be an https:// URL',\n  })\n\n/** URL permitting http and https (dev + prod). */\nexport const httpUrlSchema = z.string().url()\n\n/**\n * Amount expressed in the token's smallest unit, serialised as a string to\n * preserve precision beyond `Number.MAX_SAFE_INTEGER`. For USDC (6 decimals),\n * 1 USDC is the string \"1000000\".\n */\nexport const tokenAmountSchema = z\n  .string()\n  .regex(/^[0-9]+$/, 'must be a non-negative integer string (base-10)')\n  .refine((v) => BigInt(v) >= 0n, 'must be >= 0')\n\n/** Unsigned integer up to 2^53 - 1; validated and returned as number. */\nexport const uintSchema = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER)\n\n/** ISO-8601 timestamp string (`.toISOString()`-compatible). */\nexport const isoTimestampSchema = z\n  .string()\n  .datetime({ offset: true, message: 'must be an ISO-8601 timestamp' })\n\n/** Two-letter ISO-3166 country code. */\nexport const countryCodeSchema = z\n  .string()\n  .length(2)\n  .regex(/^[A-Z]{2}$/, 'must be an ISO-3166 alpha-2 country code')\n\n/** Pagination inputs used by every list endpoint. */\nexport const paginationInputSchema = z.object({\n  limit: z.number().int().min(1).max(100).default(25),\n  cursor: z.string().min(1).max(200).nullish(),\n})\nexport type PaginationInput = z.input<typeof paginationInputSchema>\nexport type PaginationParsed = z.output<typeof paginationInputSchema>\n\n/** Pagination envelope used by every list response. */\nexport const makePaginatedSchema = <T extends z.ZodTypeAny>(item: T) =>\n  z.object({\n    data: z.array(item),\n    nextCursor: z.string().nullable(),\n    hasMore: z.boolean(),\n  })\n\n/** Free-form metadata bag the API round-trips for merchants. */\nexport const metadataSchema = z\n  .record(\n    z.string().min(1).max(40),\n    z.union([z.string().max(500), z.number(), z.boolean(), z.null()]),\n  )\n  .refine((m) => Object.keys(m).length <= 50, 'at most 50 metadata keys')\n  .default({})\n\n/** Environment mode carried on every mode-scoped resource. */\nexport const modeSchema = z.enum(['test', 'live'])\nexport type Mode = z.infer<typeof modeSchema>\n\n/** Payment token enum. */\nexport const paymentCurrencySchema = z.enum(['USDC', 'EURC'])\nexport type PaymentCurrency = z.infer<typeof paymentCurrencySchema>\n\n/** Every display-level currency (payment + treasury). */\nexport const tokenSymbolSchema = z.enum(['USDC', 'EURC', 'USYC'])\nexport type TokenSymbol = z.infer<typeof tokenSymbolSchema>\n\n/** Merchant tier enum. */\nexport const merchantTierSchema = z.enum(['free', 'growth', 'business', 'enterprise'])\nexport type MerchantTier = z.infer<typeof merchantTierSchema>\n\n/** Arc environment enum. */\nexport const arcEnvironmentSchema = z.enum(['testnet', 'mainnet'])\nexport type ArcEnvironment = z.infer<typeof arcEnvironmentSchema>\n\nexport type Id = z.infer<typeof idSchema>\nexport type EvmAddress = z.infer<typeof evmAddressSchema>\nexport type EvmTxHash = z.infer<typeof evmTxHashSchema>\nexport type TokenAmount = z.infer<typeof tokenAmountSchema>\nexport type IsoTimestamp = z.infer<typeof isoTimestampSchema>\nexport type Metadata = z.infer<typeof metadataSchema>\n","/**\n * Payment session. A one-shot checkout intent.\n *\n * State machine:\n *   created → awaiting_payment → submitted → confirmed\n *                                       \\\n *                                        → failed\n *                               → expired\n *                               → cancelled\n */\n\nimport { z } from 'zod'\nimport {\n  evmAddressSchema,\n  evmTxHashSchema,\n  idSchema,\n  isoTimestampSchema,\n  metadataSchema,\n  paymentCurrencySchema,\n  tokenAmountSchema,\n} from './common.js'\n\nexport const paymentSessionStatusSchema = z.enum([\n  'created',\n  'awaiting_payment',\n  'submitted',\n  'confirmed',\n  'failed',\n  'expired',\n  'cancelled',\n])\nexport type PaymentSessionStatus = z.infer<typeof paymentSessionStatusSchema>\n\n/**\n * Merchant-supplied callback URL. The hosted checkout dispatches with\n * `window.location.href = redirectUrl` on completion / cancellation,\n * so we MUST reject anything other than `http://` and `https://`.\n *\n * Why this is a real risk: Zod's `.url()` validates RFC syntax, which\n * accepts `javascript:`, `data:`, `vbscript:`, `file:`, blob:`, etc.\n * A compromised merchant integration or an XSS upstream could ship a\n * session whose redirect URL executes script (or exfiltrates session\n * tokens) on every payer's browser. The damage is per-payer, but the\n * blast radius is \"every checkout the merchant runs.\"\n *\n * Mailto / tel and other handler protocols are also rejected — there\n * is no legitimate flow on a payment checkout that would benefit.\n */\nexport const callbackUrlSchema = z\n  .string()\n  .url()\n  .refine((v) => v.startsWith('https://') || v.startsWith('http://'), {\n    message: 'must be an http:// or https:// URL',\n  })\n\nexport const paymentSessionSchema = z.object({\n  id: idSchema,\n  merchantId: idSchema,\n  /**\n   * On-chain StrimzRegistry merchant id (uint96) as a decimal string.\n   * Set when the merchant has been registered on-chain; null when the\n   * merchant exists in our DB but the registry transaction hasn't\n   * been broadcast yet. Hosted checkout uses this to populate the\n   * meta-tx calldata; if null, the checkout refuses to accept\n   * payments.\n   */\n  chainMerchantId: z\n    .string()\n    .regex(/^[0-9]+$/u, 'must be a non-negative decimal integer string')\n    .nullable(),\n  /**\n   * ERC-20 token contract address resolved from `currency` on the\n   * active chain (Arc Testnet / Mainnet). Used as the `verifyingContract`\n   * in the EIP-712 domain for both EIP-3009 and EIP-2612 signing.\n   * Null on the (vanishingly unlikely) path where the API has no\n   * configured address for the session's currency.\n   */\n  tokenAddress: evmAddressSchema.nullable(),\n  customerId: idSchema.nullable(),\n  status: paymentSessionStatusSchema,\n  amount: tokenAmountSchema,\n  currency: paymentCurrencySchema,\n  feeAmount: tokenAmountSchema,\n  netAmount: tokenAmountSchema,\n  description: z.string().max(500).nullable(),\n  payerWalletAddress: evmAddressSchema.nullable(),\n  payerEmail: z.string().email().nullable(),\n  successUrl: callbackUrlSchema.nullable(),\n  cancelUrl: callbackUrlSchema.nullable(),\n  sourceChain: z\n    .enum(['arc', 'ethereum', 'base', 'polygon', 'arbitrum', 'optimism', 'avalanche', 'solana'])\n    .nullable(),\n  bridgeTxHash: evmTxHashSchema.nullable(),\n  onchainTxHash: evmTxHashSchema.nullable(),\n  checkoutUrl: z.string().url(),\n  metadata: metadataSchema,\n  expiresAt: isoTimestampSchema,\n  createdAt: isoTimestampSchema,\n  updatedAt: isoTimestampSchema,\n})\nexport type PaymentSession = z.infer<typeof paymentSessionSchema>\n\n// ---------- DTOs ----------\n\nexport const createPaymentSessionInputSchema = z.object({\n  amount: tokenAmountSchema,\n  currency: paymentCurrencySchema,\n  description: z.string().max(500).optional(),\n  customer: z\n    .object({\n      walletAddress: evmAddressSchema.optional(),\n      email: z.string().email().optional(),\n      externalRef: z.string().max(120).optional(),\n    })\n    .optional(),\n  successUrl: z.string().url().optional(),\n  cancelUrl: z.string().url().optional(),\n  /** Minutes until the session expires. Default 30, max 60*24 (one day). */\n  expiresInMinutes: z\n    .number()\n    .int()\n    .min(1)\n    .max(60 * 24)\n    .default(30),\n  /**\n   * Allowed source chains a payer can bridge USDC from via CCTP. Omit to\n   * accept every CCTP-supported chain.\n   */\n  supportedSourceChains: z\n    .array(\n      z.enum(['arc', 'ethereum', 'base', 'polygon', 'arbitrum', 'optimism', 'avalanche', 'solana']),\n    )\n    .optional(),\n  metadata: metadataSchema.optional(),\n})\nexport type CreatePaymentSessionInput = z.input<typeof createPaymentSessionInputSchema>\nexport type CreatePaymentSessionParsed = z.output<typeof createPaymentSessionInputSchema>\n\nexport const submitPaymentSessionInputSchema = z.object({\n  sourceChain: z.enum([\n    'arc',\n    'ethereum',\n    'base',\n    'polygon',\n    'arbitrum',\n    'optimism',\n    'avalanche',\n    'solana',\n  ]),\n  onchainTxHash: evmTxHashSchema,\n  bridgeTxHash: evmTxHashSchema.optional(),\n  payerWalletAddress: evmAddressSchema,\n})\nexport type SubmitPaymentSessionInput = z.input<typeof submitPaymentSessionInputSchema>\nexport type SubmitPaymentSessionParsed = z.output<typeof submitPaymentSessionInputSchema>\n"]}

package/dist/payment-sessions.d.cts

@@ -70,18 +70,18 @@ declare const paymentSessionSchema: z.ZodObject<{
     updatedAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     status: "created" | "awaiting_payment" | "submitted" | "confirmed" | "failed" | "expired" | "cancelled";
-    id: string;
+    amount: string;
+    currency: "USDC" | "EURC";
+    customerId: string | null;
     merchantId: string;
+    description: string | null;
+    id: string;
     createdAt: string;
-    metadata: Record<string, string | number | boolean | null>;
+    updatedAt: string;
     chainMerchantId: string | null;
     tokenAddress: string | null;
-    customerId: string | null;
-    amount: string;
-    currency: "USDC" | "EURC";
     feeAmount: string;
     netAmount: string;
-    description: string | null;
     payerWalletAddress: string | null;
     payerEmail: string | null;
     successUrl: string | null;
@@ -90,21 +90,22 @@ declare const paymentSessionSchema: z.ZodObject<{
     bridgeTxHash: string | null;
     onchainTxHash: string | null;
     checkoutUrl: string;
+    metadata: Record<string, string | number | boolean | null>;
     expiresAt: string;
-    updatedAt: string;
 }, {
     status: "created" | "awaiting_payment" | "submitted" | "confirmed" | "failed" | "expired" | "cancelled";
-    id: string;
+    amount: string;
+    currency: "USDC" | "EURC";
+    customerId: string | null;
     merchantId: string;
+    description: string | null;
+    id: string;
     createdAt: string;
+    updatedAt: string;
     chainMerchantId: string | null;
     tokenAddress: string | null;
-    customerId: string | null;
-    amount: string;
-    currency: "USDC" | "EURC";
     feeAmount: string;
     netAmount: string;
-    description: string | null;
     payerWalletAddress: string | null;
     payerEmail: string | null;
     successUrl: string | null;
@@ -114,7 +115,6 @@ declare const paymentSessionSchema: z.ZodObject<{
     onchainTxHash: string | null;
     checkoutUrl: string;
     expiresAt: string;
-    updatedAt: string;
     metadata?: Record<string, string | number | boolean | null> | undefined;
 }>;
 type PaymentSession = z.infer<typeof paymentSessionSchema>;
@@ -127,12 +127,12 @@ declare const createPaymentSessionInputSchema: z.ZodObject<{
         email: z.ZodOptional<z.ZodString>;
         externalRef: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        walletAddress?: string | undefined;
         email?: string | undefined;
+        walletAddress?: string | undefined;
         externalRef?: string | undefined;
     }, {
-        walletAddress?: string | undefined;
         email?: string | undefined;
+        walletAddress?: string | undefined;
         externalRef?: string | undefined;
     }>>;
     successUrl: z.ZodOptional<z.ZodString>;
@@ -149,32 +149,33 @@ declare const createPaymentSessionInputSchema: z.ZodObject<{
     amount: string;
     currency: "USDC" | "EURC";
     expiresInMinutes: number;
-    metadata?: Record<string, string | number | boolean | null> | undefined;
     description?: string | undefined;
     successUrl?: string | undefined;
     cancelUrl?: string | undefined;
+    metadata?: Record<string, string | number | boolean | null> | undefined;
     customer?: {
-        walletAddress?: string | undefined;
         email?: string | undefined;
+        walletAddress?: string | undefined;
         externalRef?: string | undefined;
     } | undefined;
     supportedSourceChains?: ("arc" | "ethereum" | "base" | "polygon" | "arbitrum" | "optimism" | "avalanche" | "solana")[] | undefined;
 }, {
     amount: string;
     currency: "USDC" | "EURC";
-    metadata?: Record<string, string | number | boolean | null> | undefined;
     description?: string | undefined;
     successUrl?: string | undefined;
     cancelUrl?: string | undefined;
+    metadata?: Record<string, string | number | boolean | null> | undefined;
     customer?: {
-        walletAddress?: string | undefined;
         email?: string | undefined;
+        walletAddress?: string | undefined;
         externalRef?: string | undefined;
     } | undefined;
     expiresInMinutes?: number | undefined;
     supportedSourceChains?: ("arc" | "ethereum" | "base" | "polygon" | "arbitrum" | "optimism" | "avalanche" | "solana")[] | undefined;
 }>;
-type CreatePaymentSessionInput = z.infer<typeof createPaymentSessionInputSchema>;
+type CreatePaymentSessionInput = z.input<typeof createPaymentSessionInputSchema>;
+type CreatePaymentSessionParsed = z.output<typeof createPaymentSessionInputSchema>;
 declare const submitPaymentSessionInputSchema: z.ZodObject<{
     sourceChain: z.ZodEnum<["arc", "ethereum", "base", "polygon", "arbitrum", "optimism", "avalanche", "solana"]>;
     onchainTxHash: z.ZodString;
@@ -191,6 +192,7 @@ declare const submitPaymentSessionInputSchema: z.ZodObject<{
     onchainTxHash: string;
     bridgeTxHash?: string | undefined;
 }>;
-type SubmitPaymentSessionInput = z.infer<typeof submitPaymentSessionInputSchema>;
+type SubmitPaymentSessionInput = z.input<typeof submitPaymentSessionInputSchema>;
+type SubmitPaymentSessionParsed = z.output<typeof submitPaymentSessionInputSchema>;
 
-export { type CreatePaymentSessionInput, type PaymentSession, type PaymentSessionStatus, type SubmitPaymentSessionInput, callbackUrlSchema, createPaymentSessionInputSchema, paymentSessionSchema, paymentSessionStatusSchema, submitPaymentSessionInputSchema };
+export { type CreatePaymentSessionInput, type CreatePaymentSessionParsed, type PaymentSession, type PaymentSessionStatus, type SubmitPaymentSessionInput, type SubmitPaymentSessionParsed, callbackUrlSchema, createPaymentSessionInputSchema, paymentSessionSchema, paymentSessionStatusSchema, submitPaymentSessionInputSchema };

package/dist/payment-sessions.d.ts

@@ -70,18 +70,18 @@ declare const paymentSessionSchema: z.ZodObject<{
     updatedAt: z.ZodString;
 }, "strip", z.ZodTypeAny, {
     status: "created" | "awaiting_payment" | "submitted" | "confirmed" | "failed" | "expired" | "cancelled";
-    id: string;
+    amount: string;
+    currency: "USDC" | "EURC";
+    customerId: string | null;
     merchantId: string;
+    description: string | null;
+    id: string;
     createdAt: string;
-    metadata: Record<string, string | number | boolean | null>;
+    updatedAt: string;
     chainMerchantId: string | null;
     tokenAddress: string | null;
-    customerId: string | null;
-    amount: string;
-    currency: "USDC" | "EURC";
     feeAmount: string;
     netAmount: string;
-    description: string | null;
     payerWalletAddress: string | null;
     payerEmail: string | null;
     successUrl: string | null;
@@ -90,21 +90,22 @@ declare const paymentSessionSchema: z.ZodObject<{
     bridgeTxHash: string | null;
     onchainTxHash: string | null;
     checkoutUrl: string;
+    metadata: Record<string, string | number | boolean | null>;
     expiresAt: string;
-    updatedAt: string;
 }, {
     status: "created" | "awaiting_payment" | "submitted" | "confirmed" | "failed" | "expired" | "cancelled";
-    id: string;
+    amount: string;
+    currency: "USDC" | "EURC";
+    customerId: string | null;
     merchantId: string;
+    description: string | null;
+    id: string;
     createdAt: string;
+    updatedAt: string;
     chainMerchantId: string | null;
     tokenAddress: string | null;
-    customerId: string | null;
-    amount: string;
-    currency: "USDC" | "EURC";
     feeAmount: string;
     netAmount: string;
-    description: string | null;
     payerWalletAddress: string | null;
     payerEmail: string | null;
     successUrl: string | null;
@@ -114,7 +115,6 @@ declare const paymentSessionSchema: z.ZodObject<{
     onchainTxHash: string | null;
     checkoutUrl: string;
     expiresAt: string;
-    updatedAt: string;
     metadata?: Record<string, string | number | boolean | null> | undefined;
 }>;
 type PaymentSession = z.infer<typeof paymentSessionSchema>;
@@ -127,12 +127,12 @@ declare const createPaymentSessionInputSchema: z.ZodObject<{
         email: z.ZodOptional<z.ZodString>;
         externalRef: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        walletAddress?: string | undefined;
         email?: string | undefined;
+        walletAddress?: string | undefined;
         externalRef?: string | undefined;
     }, {
-        walletAddress?: string | undefined;
         email?: string | undefined;
+        walletAddress?: string | undefined;
         externalRef?: string | undefined;
     }>>;
     successUrl: z.ZodOptional<z.ZodString>;
@@ -149,32 +149,33 @@ declare const createPaymentSessionInputSchema: z.ZodObject<{
     amount: string;
     currency: "USDC" | "EURC";
     expiresInMinutes: number;
-    metadata?: Record<string, string | number | boolean | null> | undefined;
     description?: string | undefined;
     successUrl?: string | undefined;
     cancelUrl?: string | undefined;
+    metadata?: Record<string, string | number | boolean | null> | undefined;
     customer?: {
-        walletAddress?: string | undefined;
         email?: string | undefined;
+        walletAddress?: string | undefined;
         externalRef?: string | undefined;
     } | undefined;
     supportedSourceChains?: ("arc" | "ethereum" | "base" | "polygon" | "arbitrum" | "optimism" | "avalanche" | "solana")[] | undefined;
 }, {
     amount: string;
     currency: "USDC" | "EURC";
-    metadata?: Record<string, string | number | boolean | null> | undefined;
     description?: string | undefined;
     successUrl?: string | undefined;
     cancelUrl?: string | undefined;
+    metadata?: Record<string, string | number | boolean | null> | undefined;
     customer?: {
-        walletAddress?: string | undefined;
         email?: string | undefined;
+        walletAddress?: string | undefined;
         externalRef?: string | undefined;
     } | undefined;
     expiresInMinutes?: number | undefined;
     supportedSourceChains?: ("arc" | "ethereum" | "base" | "polygon" | "arbitrum" | "optimism" | "avalanche" | "solana")[] | undefined;
 }>;
-type CreatePaymentSessionInput = z.infer<typeof createPaymentSessionInputSchema>;
+type CreatePaymentSessionInput = z.input<typeof createPaymentSessionInputSchema>;
+type CreatePaymentSessionParsed = z.output<typeof createPaymentSessionInputSchema>;
 declare const submitPaymentSessionInputSchema: z.ZodObject<{
     sourceChain: z.ZodEnum<["arc", "ethereum", "base", "polygon", "arbitrum", "optimism", "avalanche", "solana"]>;
     onchainTxHash: z.ZodString;
@@ -191,6 +192,7 @@ declare const submitPaymentSessionInputSchema: z.ZodObject<{
     onchainTxHash: string;
     bridgeTxHash?: string | undefined;
 }>;
-type SubmitPaymentSessionInput = z.infer<typeof submitPaymentSessionInputSchema>;
+type SubmitPaymentSessionInput = z.input<typeof submitPaymentSessionInputSchema>;
+type SubmitPaymentSessionParsed = z.output<typeof submitPaymentSessionInputSchema>;
 
-export { type CreatePaymentSessionInput, type PaymentSession, type PaymentSessionStatus, type SubmitPaymentSessionInput, callbackUrlSchema, createPaymentSessionInputSchema, paymentSessionSchema, paymentSessionStatusSchema, submitPaymentSessionInputSchema };
+export { type CreatePaymentSessionInput, type CreatePaymentSessionParsed, type PaymentSession, type PaymentSessionStatus, type SubmitPaymentSessionInput, type SubmitPaymentSessionParsed, callbackUrlSchema, createPaymentSessionInputSchema, paymentSessionSchema, paymentSessionStatusSchema, submitPaymentSessionInputSchema };