@volter/twin-stripe 0.1.2 → 2.0.0

package/dist/src/screens/industries.js

@@ -0,0 +1,267 @@
+// The industries the twin's hosted onboarding offers, as merchant category codes. What Stripe documents: "Generally,
+// the industry listed in the Stripe Dashboard for the connected account determines its MCC. For connected accounts ...
+// that use Stripe-hosted onboarding, the MCC is set during onboarding", and its "Merchant category code list" of
+// supported MCCs, of which "You must contact Stripe to use a restricted MCC" (docs.stripe.com/connect/setting-mcc; the
+// page's table, read 2026-09-27, has 292 entries: 3 prohibited, 33 restricted, one of those also internal only).
+// Where the documentation stops and the twin decides: Stripe does not publish the industry picker its onboarding shows,
+// so the twin offers that list's supported codes as the industries, leaving out the prohibited and restricted ones (a
+// person cannot choose a code Stripe must first be asked for), 256 in the page's order with its names; and the page does
+// not group them, so neither does the twin.
+export const INDUSTRIES = [
+    ['7623', "A/C, Refrigeration Repair"],
+    ['8931', "Accounting/Bookkeeping Services"],
+    ['7311', "Advertising Services"],
+    ['0763', "Agricultural Cooperative"],
+    ['4582', "Airports, Flying Fields"],
+    ['4119', "Ambulance Services"],
+    ['5937', "Antique Reproductions"],
+    ['5932', "Antique Shops"],
+    ['7998', "Aquariums"],
+    ['8911', "Architectural/Surveying Services"],
+    ['5971', "Art Dealers and Galleries"],
+    ['5970', "Artists Supply and Craft Shops"],
+    ['7531', "Auto Body Repair Shops"],
+    ['7535', "Auto Paint Shops"],
+    ['7538', "Auto Service Shops"],
+    ['5531', "Auto and Home Supply Stores"],
+    ['5542', "Automated Fuel Dispensers"],
+    ['8675', "Automobile Associations"],
+    ['5533', "Automotive Parts and Accessories Stores"],
+    ['5532', "Automotive Tire Stores"],
+    ['5462', "Bakeries"],
+    ['7929', "Bands, Orchestras"],
+    ['7230', "Barber and Beauty Shops"],
+    ['5940', "Bicycle Shops"],
+    ['7932', "Billiard/Pool Establishments"],
+    ['5551', "Boat Dealers"],
+    ['4457', "Boat Rentals and Leases"],
+    ['5942', "Book Stores"],
+    ['5192', "Books, Periodicals, and Newspapers"],
+    ['7933', "Bowling Alleys"],
+    ['4131', "Bus Lines"],
+    ['8244', "Business/Secretarial Schools"],
+    ['7278', "Buying/Shopping Services"],
+    ['4899', "Cable, Satellite, and Other Pay Television and Radio"],
+    ['5946', "Camera and Photographic Supply Stores"],
+    ['5441', "Candy, Nut, and Confectionery Stores"],
+    ['7512', "Car Rental Agencies"],
+    ['7542', "Car Washes"],
+    ['5511', "Car and Truck Dealers (New & Used) Sales, Service, Repairs Parts and Leasing"],
+    ['5521', "Car and Truck Dealers (Used Only) Sales, Service, Repairs Parts and Leasing"],
+    ['1750', "Carpentry Services"],
+    ['7217', "Carpet/Upholstery Cleaning"],
+    ['5811', "Caterers"],
+    ['5169', "Chemicals and Allied Products (Not Elsewhere Classified)"],
+    ['8351', "Child Care Services"],
+    ['5641', "Childrens and Infants Wear Stores"],
+    ['8049', "Chiropodists, Podiatrists"],
+    ['8041', "Chiropractors"],
+    ['8641', "Civic, Social, Fraternal Associations"],
+    ['7349', "Cleaning and Maintenance"],
+    ['7296', "Clothing Rental"],
+    ['8220', "Colleges, Universities"],
+    ['5046', "Commercial Equipment (Not Elsewhere Classified)"],
+    ['5139', "Commercial Footwear"],
+    ['7333', "Commercial Photography, Art and Graphics"],
+    ['4111', "Commuter Transport, Ferries"],
+    ['4816', "Computer Network Services"],
+    ['7372', "Computer Programming"],
+    ['7379', "Computer Repair"],
+    ['5734', "Computer Software Stores"],
+    ['5045', "Computers, Peripherals, and Software"],
+    ['1771', "Concrete Work Services"],
+    ['5039', "Construction Materials (Not Elsewhere Classified)"],
+    ['7392', "Consulting, Public Relations"],
+    ['8241', "Correspondence Schools"],
+    ['5977', "Cosmetic Stores"],
+    ['7277', "Counseling Services"],
+    ['7997', "Country Clubs"],
+    ['4215', "Courier Services"],
+    ['7321', "Credit Reporting Agencies"],
+    ['5451', "Dairy Products Stores"],
+    ['7911', "Dance Hall, Studios, Schools"],
+    ['8021', "Dentists, Orthodontists"],
+    ['5311', "Department Stores"],
+    ['7393', "Detective Agencies"],
+    ['5815', "Digital Goods Media – Books, Movies, Music"],
+    ['5817', "Digital Goods – Applications (Excludes Games)"],
+    ['5816', "Digital Goods – Games"],
+    ['5818', "Digital Goods – Large Digital Goods Merchant"],
+    ['5964', "Direct Marketing - Catalog Merchant"],
+    ['5965', "Direct Marketing - Combination Catalog and Retail Merchant"],
+    ['5960', "Direct Marketing - Insurance Services"],
+    ['5969', "Direct Marketing - Other"],
+    ['5968', "Direct Marketing - Subscription"],
+    ['5310', "Discount Stores"],
+    ['8011', "Doctors"],
+    ['5714', "Drapery, Window Covering, and Upholstery Stores"],
+    ['5813', "Drinking Places"],
+    ['7216', "Dry Cleaners"],
+    ['5099', "Durable Goods (Not Elsewhere Classified)"],
+    ['5309', "Duty Free Stores"],
+    ['5812', "Eating Places, Restaurants"],
+    ['8299', "Educational Services"],
+    ['5997', "Electric Razor Stores"],
+    ['5552', "Electric Vehicle Charging"],
+    ['5065', "Electrical Parts and Equipment"],
+    ['1731', "Electrical Services"],
+    ['7622', "Electronics Repair Shops"],
+    ['5732', "Electronics Stores"],
+    ['8211', "Elementary, Secondary Schools"],
+    ['9702', "Emergency Services (GCAS) (Visa use only)"],
+    ['7361', "Employment/Temp Agencies"],
+    ['7394', "Equipment Rental"],
+    ['7342', "Exterminating Services"],
+    ['5651', "Family Clothing Stores"],
+    ['5814', "Fast Food Restaurants"],
+    ['5718', "Fireplace, Fireplace Screens, and Accessories Stores"],
+    ['5713', "Floor Covering Stores"],
+    ['5992', "Florists"],
+    ['5193', "Florists Supplies, Nursery Stock, and Flowers"],
+    ['5422', "Freezer and Locker Meat Provisioners"],
+    ['5983', "Fuel Dealers (Non Automotive)"],
+    ['7261', "Funeral Services, Crematories"],
+    ['7641', "Furniture Repair, Refinishing"],
+    ['5712', "Furniture, Home Furnishings, and Equipment Stores, Except Appliances"],
+    ['5681', "Furriers and Fur Shops"],
+    ['1520', "General Services"],
+    ['5947', "Gift, Card, Novelty, and Souvenir Shops"],
+    ['5231', "Glass, Paint, and Wallpaper Stores"],
+    ['5950', "Glassware, Crystal Stores"],
+    ['7992', "Golf Courses - Public"],
+    ['9406', "Government-Owned Lotteries (Non-US region)"],
+    ['5411', "Grocery Stores, Supermarkets"],
+    ['5251', "Hardware Stores"],
+    ['5072', "Hardware, Equipment, and Supplies"],
+    ['7298', "Health and Beauty Spas"],
+    ['5975', "Hearing Aids Sales and Supplies"],
+    ['1711', "Heating, Plumbing, A/C"],
+    ['5945', "Hobby, Toy, and Game Shops"],
+    ['5200', "Home Supply Warehouse Stores"],
+    ['8062', "Hospitals"],
+    ['7011', "Hotels, Motels, and Resorts"],
+    ['5722', "Household Appliance Stores"],
+    ['5085', "Industrial Supplies (Not Elsewhere Classified)"],
+    ['7375', "Information Retrieval Services"],
+    ['9950', "Intra-Company Purchases"],
+    ['5944', "Jewelry Stores, Watches, Clocks, and Silverware Stores"],
+    ['0780', "Landscaping Services"],
+    ['7211', "Laundries"],
+    ['7210', "Laundry, Cleaning Services"],
+    ['8111', "Legal Services, Attorneys"],
+    ['5948', "Luggage and Leather Goods Stores"],
+    ['5211', "Lumber, Building Materials Stores"],
+    ['4468', "Marinas, Service and Supplies"],
+    ['1740', "Masonry, Stonework, and Plaster"],
+    ['7297', "Massage Parlors"],
+    ['8099', "Medical Services"],
+    ['8071', "Medical and Dental Labs"],
+    ['5047', "Medical, Dental, Ophthalmic, and Hospital Equipment and Supplies"],
+    ['8699', "Membership Organizations"],
+    ['5611', "Mens and Boys Clothing and Accessories Stores"],
+    ['5691', "Mens, Womens Clothing Stores"],
+    ['5051', "Metal Service Centers"],
+    ['5699', "Miscellaneous Apparel and Accessory Shops"],
+    ['5599', "Miscellaneous Auto Dealers"],
+    ['7399', "Miscellaneous Business Services"],
+    ['5499', "Miscellaneous Food Stores - Convenience Stores and Specialty Markets"],
+    ['5399', "Miscellaneous General Merchandise"],
+    ['7299', "Miscellaneous General Services"],
+    ['5719', "Miscellaneous Home Furnishing Specialty Stores"],
+    ['2741', "Miscellaneous Publishing and Printing"],
+    ['7999', "Miscellaneous Recreation Services"],
+    ['7699', "Miscellaneous Repair Shops"],
+    ['5999', "Miscellaneous Specialty Retail"],
+    ['5271', "Mobile Home Dealers"],
+    ['7832', "Motion Picture Theaters"],
+    ['4214', "Motor Freight Carriers and Trucking - Local and Long Distance, Moving and Storage Companies, and Local Delivery Services"],
+    ['5592', "Motor Homes Dealers"],
+    ['5013', "Motor Vehicle Supplies and New Parts"],
+    ['5571', "Motorcycle Shops and Dealers"],
+    ['5561', "Motorcycle Shops, Dealers"],
+    ['5733', "Music Stores-Musical Instruments, Pianos, and Sheet Music"],
+    ['5994', "News Dealers and Newsstands"],
+    ['5199', "Nondurable Goods (Not Elsewhere Classified)"],
+    ['5261', "Nurseries, Lawn and Garden Supply Stores"],
+    ['8050', "Nursing/Personal Care"],
+    ['5021', "Office and Commercial Furniture"],
+    ['8043', "Opticians, Eyeglasses"],
+    ['8042', "Optometrists, Ophthalmologist"],
+    ['5976', "Orthopedic Goods - Prosthetic Devices"],
+    ['8031', "Osteopaths"],
+    ['5921', "Package Stores-Beer, Wine, and Liquor"],
+    ['5198', "Paints, Varnishes, and Supplies"],
+    ['7523', "Parking Lots, Garages"],
+    ['4112', "Passenger Railways"],
+    ['5933', "Pawn Shops"],
+    ['5995', "Pet Shops, Pet Food, and Supplies"],
+    ['5172', "Petroleum and Petroleum Products"],
+    ['7395', "Photo Developing"],
+    ['7221', "Photographic Studios"],
+    ['5044', "Photographic, Photocopy, Microfilm Equipment, and Supplies"],
+    ['7829', "Picture/Video Production"],
+    ['5131', "Piece Goods, Notions, and Other Dry Goods"],
+    ['5074', "Plumbing, Heating Equipment, and Supplies"],
+    ['5094', "Precious Stones and Metals, Watches and Jewelry"],
+    ['8999', "Professional Services"],
+    ['4225', "Public Warehousing and Storage - Farm Products, Refrigerated Goods, Household Goods, and Storage"],
+    ['7338', "Quick Copy, Repro, and Blueprint"],
+    ['4011', "Railroads"],
+    ['6513', "Real Estate Agents and Managers - Rentals"],
+    ['5735', "Record Stores"],
+    ['7519', "Recreational Vehicle Rentals"],
+    ['5973', "Religious Goods Stores"],
+    ['1761', "Roofing/Siding, Sheet Metal"],
+    ['7339', "Secretarial Support Services"],
+    ['5541', "Service Stations"],
+    ['5949', "Sewing, Needlework, Fabric, and Piece Goods Stores"],
+    ['7251', "Shoe Repair/Hat Cleaning"],
+    ['5661', "Shoe Stores"],
+    ['7629', "Small Appliance Repair"],
+    ['5598', "Snowmobile Dealers"],
+    ['1799', "Special Trade Services"],
+    ['2842', "Specialty Cleaning"],
+    ['5941', "Sporting Goods Stores"],
+    ['7032', "Sporting/Recreation Camps"],
+    ['7941', "Sports Clubs/Fields"],
+    ['5655', "Sports and Riding Apparel Stores"],
+    ['5972', "Stamp and Coin Stores"],
+    ['5943', "Stationery Stores, Office, and School Supply Stores"],
+    ['5111', "Stationery, Office Supplies, Printing and Writing Paper"],
+    ['5996', "Swimming Pools Sales"],
+    ['4723', "TUI Travel - Germany"],
+    ['5697', "Tailors, Alterations"],
+    ['7276', "Tax Preparation Services"],
+    ['4121', "Taxicabs/Limousines"],
+    ['4812', "Telecommunication Equipment and Telephone Sales"],
+    ['4821', "Telegraph Services"],
+    ['5998', "Tent and Awning Shops"],
+    ['8734', "Testing Laboratories"],
+    ['7922', "Theatrical Ticket Agencies"],
+    ['7534', "Tire Retreading and Repair"],
+    ['4784', "Tolls/Bridge Fees"],
+    ['7991', "Tourist Attractions and Exhibits"],
+    ['7549', "Towing Services"],
+    ['7033', "Trailer Parks, Campgrounds"],
+    ['4789', "Transportation Services (Not Elsewhere Classified)"],
+    ['4722', "Travel Agencies, Tour Operators"],
+    ['7513', "Truck/Utility Trailer Rentals"],
+    ['2791', "Typesetting, Plate Making, and Related Services"],
+    ['5978', "Typewriter Stores"],
+    ['5137', "Uniforms, Commercial Clothing"],
+    ['5931', "Used Merchandise and Secondhand Stores"],
+    ['4900', "Utilities"],
+    ['5331', "Variety Stores"],
+    ['0742', "Veterinary Services"],
+    ['7993', "Video Amusement Game Supplies"],
+    ['7994', "Video Game Arcades"],
+    ['7841', "Video Tape Rental Stores"],
+    ['8249', "Vocational/Trade Schools"],
+    ['7631', "Watch/Jewelry Repair"],
+    ['7692', "Welding Repair"],
+    ['5300', "Wholesale Clubs"],
+    ['5698', "Wig and Toupee Stores"],
+    ['5631', "Womens Accessory and Specialty Shops"],
+    ['5621', "Womens Ready-To-Wear Stores"],
+    ['5935', "Wrecking and Salvage Yards"],
+];

package/dist/src/screens/onboarding.d.ts

@@ -0,0 +1,13 @@
+import { type Row } from '../semantics/shared.js';
+type Form = Record<string, string>;
+type Kind = 'company' | 'individual';
+/** The set an account onboards against: the two US sets the twin models, or none. */
+export declare function kindOf(account: Row): Kind | undefined;
+/** What an account of this kind still owes, given the form's answers (none: all of it). */
+export declare function currentlyDue(kind: Kind, v?: Form): string[];
+/** connect.stripe.com's onboarding pages, or undefined for any other request. */
+export declare function stripeOnboardingFlow(scope: {
+    root?: string;
+    clock?: () => string;
+}): (request: Request) => Promise<Response | undefined>;
+export {};

package/dist/src/screens/onboarding.js

@@ -0,0 +1,225 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+// STRIPE CONNECT HOSTED ONBOARDING — a hosted flow (docs/contributing/architecture.md, "Screens"): a platform
+// creates an Account Link for a connected account and sends the account's owner to its `url`. The link is a
+// single-use entry point: visiting it takes the owner to their onboarding session, and visiting it again, or after it
+// expires, sends them to refresh_url, where the platform makes a new one (docs.stripe.com/connect/hosted-onboarding).
+// At the session's own address they give Stripe what it requires, and Stripe sends them to return_url. Submitting is
+// the owner's move, not an API call. Authored from @volter/world-ui's payment piece; nothing of Stripe's page is copied.
+//
+// The page asks for exactly what Stripe requires before a US Express account with card_payments and transfers can
+// take card payments (docs.stripe.com/connect/required-verification-information; the set is the one Stripe's
+// requirements endpoint answers, docs.stripe.com/_endpoint/get-requirements-for-setups with apiVersion=v1,
+// platformCountry=US, accountCountry=US, dashboardType=express, tosType=full, capabilities card_payments and transfers):
+// thirty requirements for a company (the business profile, the statement descriptor, the company with its tax id,
+// phone and address, its owners, its representative with their title and address, the agreement and the payout bank
+// account) and eighteen for an individual. A submit that leaves any out is refused with what is missing. The account's
+// requirements.currently_due lists what is still missing, and charges and payouts are enabled, and its requested
+// capabilities become active (Stripe's move on the capability machine), only once none is. The agreement is the
+// page's own checkbox, recorded as tos_acceptance with the request's address and the time.
+//
+// Where the documentation stops and the twin decides: only these two US sets are modelled; an account elsewhere, or
+// of another business type, is told its requirements are not modelled. Test mode verifies at once whatever is
+// submitted (docs.stripe.com/connect/testing lists the values that pass: date of birth 1901-01-01, SSN last four
+// 0000, tax id 000000000, routing 110000000, account 000123456789); the industries offered are Stripe's supported
+// merchant category codes as its list gives them (./industries.ts), and an industry the page does not offer leaves
+// business_profile.mcc due; the states are the fifty and the District of Columbia; a request with no forwarded address
+// records 127.0.0.1. An update link (account_update) shows the same page.
+import { semanticsContext } from '@volter/world-core';
+import { CONSENT_CSS, flowPage, Payment, PAYMENT_CSS } from '@volter/world-ui';
+import surface from '../generated/surface.gen.json' with { type: 'json' };
+import { manifest } from "../manifest.js";
+import { created, syncExternals } from "../semantics/shared.js";
+import { formOf, seeOther, STRIPE_CONSENT_SKIN } from "./consent-skin.js";
+import { INDUSTRIES as MCCS } from "./industries.js";
+const LINK = 'account_link';
+const OPERATION = surface.operations.find((o) => o.id === 'PostAccountsAccount');
+const gone = () => flowPage({ title: 'Stripe', status: 404, css: [CONSENT_CSS, STRIPE_CONSENT_SKIN], body: _jsx("main", { className: "consent", children: _jsx("h1", { className: "consent-heading", children: "This link is invalid." }) }) });
+/** A link that can still be used: not used and not past its expiry. */
+const usable = (ctx, link) => link.used !== true && Number(link.expires_at) > Number(ctx.now());
+// the field asks, with no industry chosen until the person chooses one (an unanswered field leaves the MCC due)
+const INDUSTRIES = [{ value: '', label: 'Select your industry' }, ...MCCS.map(([value, label]) => ({ value, label }))];
+const OFFERED = new Set(MCCS.map(([mcc]) => mcc));
+// the fifty states and the District of Columbia, by their USPS codes (the address's `state`, ISO 3166-2 without its
+// country, docs.stripe.com/api/accounts/object)
+const STATES = [
+    ['AL', 'Alabama'], ['AK', 'Alaska'], ['AZ', 'Arizona'], ['AR', 'Arkansas'], ['CA', 'California'], ['CO', 'Colorado'], ['CT', 'Connecticut'],
+    ['DE', 'Delaware'], ['DC', 'District of Columbia'], ['FL', 'Florida'], ['GA', 'Georgia'], ['HI', 'Hawaii'], ['ID', 'Idaho'], ['IL', 'Illinois'],
+    ['IN', 'Indiana'], ['IA', 'Iowa'], ['KS', 'Kansas'], ['KY', 'Kentucky'], ['LA', 'Louisiana'], ['ME', 'Maine'], ['MD', 'Maryland'],
+    ['MA', 'Massachusetts'], ['MI', 'Michigan'], ['MN', 'Minnesota'], ['MS', 'Mississippi'], ['MO', 'Missouri'], ['MT', 'Montana'], ['NE', 'Nebraska'],
+    ['NV', 'Nevada'], ['NH', 'New Hampshire'], ['NJ', 'New Jersey'], ['NM', 'New Mexico'], ['NY', 'New York'], ['NC', 'North Carolina'],
+    ['ND', 'North Dakota'], ['OH', 'Ohio'], ['OK', 'Oklahoma'], ['OR', 'Oregon'], ['PA', 'Pennsylvania'], ['RI', 'Rhode Island'],
+    ['SC', 'South Carolina'], ['SD', 'South Dakota'], ['TN', 'Tennessee'], ['TX', 'Texas'], ['UT', 'Utah'], ['VT', 'Vermont'], ['VA', 'Virginia'],
+    ['WA', 'Washington'], ['WV', 'West Virginia'], ['WI', 'Wisconsin'], ['WY', 'Wyoming'],
+].map(([value, label]) => ({ value, label }));
+const has = (v, k) => (v[k] ?? '').trim() !== '';
+const dobPart = (v, i) => /^\d{4}-\d{2}-\d{2}$/.test(v.dob ?? '') && Number((v.dob ?? '').split('-')[i]) > 0;
+/** Each requirement Stripe names, the form's answer that meets it, and which of the two sets it belongs to. */
+const REQUIREMENTS = [
+    ['business_profile.mcc', (v) => OFFERED.has((v.mcc ?? '').trim()), ['company', 'individual']],
+    ['business_profile.url', (v) => has(v, 'url'), ['company', 'individual']],
+    ['settings.payments.statement_descriptor', (v) => has(v, 'statement_descriptor'), ['company', 'individual']],
+    ['company.name', (v) => has(v, 'company_name'), ['company']],
+    ['company.tax_id', (v) => has(v, 'company_tax_id'), ['company']],
+    ['company.phone', (v) => has(v, 'company_phone'), ['company']],
+    ['company.address.line1', (v) => has(v, 'company_line1'), ['company']],
+    ['company.address.city', (v) => has(v, 'company_city'), ['company']],
+    ['company.address.state', (v) => has(v, 'company_state'), ['company']],
+    ['company.address.postal_code', (v) => has(v, 'company_postal_code'), ['company']],
+    ['company.owners_provided', (v) => v.owners_provided === 'provided', ['company']],
+    ['owners.first_name', (v) => has(v, 'owner_first_name'), ['company']],
+    ['owners.last_name', (v) => has(v, 'owner_last_name'), ['company']],
+    ['owners.email', (v) => has(v, 'owner_email'), ['company']],
+    ...['first_name', 'last_name', 'email', 'phone'].flatMap((f) => [[`representative.${f}`, (v) => has(v, f), ['company']], [`individual.${f}`, (v) => has(v, f), ['individual']]]),
+    ...['day', 'month', 'year'].flatMap((f, i) => [[`representative.dob.${f}`, (v) => dobPart(v, 2 - i), ['company']], [`individual.dob.${f}`, (v) => dobPart(v, 2 - i), ['individual']]]),
+    ...['line1', 'city', 'state', 'postal_code'].flatMap((f) => [[`representative.address.${f}`, (v) => has(v, f), ['company']], [`individual.address.${f}`, (v) => has(v, f), ['individual']]]),
+    ['representative.relationship.title', (v) => has(v, 'title'), ['company']],
+    ['representative.ssn_last_4', (v) => /^\d{4}$/.test(v.ssn_last_4 ?? ''), ['company']],
+    ['individual.ssn_last_4', (v) => /^\d{4}$/.test(v.ssn_last_4 ?? ''), ['individual']],
+    ['tos_acceptance.date', (v) => v.tos === 'accepted', ['company', 'individual']],
+    ['tos_acceptance.ip', (v) => v.tos === 'accepted', ['company', 'individual']],
+    ['external_account', (v) => has(v, 'routing_number') && has(v, 'account_number'), ['company', 'individual']],
+];
+/** The set an account onboards against: the two US sets the twin models, or none. */
+export function kindOf(account) {
+    const type = account.business_type ?? 'individual';
+    return (account.country ?? 'US') === 'US' && (type === 'company' || type === 'individual') ? type : undefined;
+}
+/** What an account of this kind still owes, given the form's answers (none: all of it). */
+export function currentlyDue(kind, v = {}) {
+    return REQUIREMENTS.filter(([, met, kinds]) => kinds.includes(kind) && !met(v)).map(([req]) => req);
+}
+const field = (id, label, v, extra = {}) => ({ id, label, value: v[id] ?? '', ...extra });
+const addressFields = (prefix, v) => [
+    field(`${prefix}line1`, 'Address', v, { autoComplete: 'address-line1' }), field(`${prefix}city`, 'City', v),
+    field(`${prefix}state`, 'State', v, { options: STATES, value: v[`${prefix}state`] ?? 'OR' }), field(`${prefix}postal_code`, 'ZIP', v, { autoComplete: 'postal-code' }),
+];
+/** The industry the field shows: what the form sent, else what the account already holds, when the page offers it. */
+const industryOf = (mcc) => (typeof mcc === 'string' && OFFERED.has(mcc.trim()) ? mcc.trim() : '');
+function page(ctx, sessionUrl, link, kind, values = {}, error) {
+    const v = values;
+    const business = [
+        field('mcc', 'Industry', v, { options: INDUSTRIES, value: industryOf(v.mcc ?? ctx.get('account', String(link.account))?.business_profile?.mcc) }),
+        field('url', 'Business website', v, { placeholder: 'https://' }),
+        field('statement_descriptor', 'Statement descriptor (what customers see on their card statements)', v),
+    ];
+    const company = [
+        field('company_name', 'Legal business name', v), field('company_tax_id', 'Employer Identification Number (EIN)', v), field('company_phone', 'Business phone', v, { type: 'tel' }),
+        ...addressFields('company_', v),
+    ];
+    const owners = [
+        field('owner_first_name', 'Owner first name', v), field('owner_last_name', 'Owner last name', v), field('owner_email', 'Owner email', v, { type: 'email' }),
+        field('owners_provided', 'All owners of 25% or more are listed', v, { type: 'checkbox', value: 'provided' }),
+    ];
+    const person = [
+        field('first_name', 'First name', v, { autoComplete: 'given-name' }), field('last_name', 'Last name', v, { autoComplete: 'family-name' }),
+        field('email', 'Email', v, { type: 'email' }), field('phone', 'Phone', v, { type: 'tel' }), field('dob', 'Date of birth', v, { type: 'date' }),
+        ...(kind === 'company' ? [field('title', 'Job title', v)] : []),
+        ...addressFields('', v), field('ssn_last_4', 'Last 4 digits of SSN', v),
+    ];
+    const payout = [field('routing_number', 'Routing number', v), field('account_number', 'Account number', v)];
+    const agreement = [field('tos', 'I agree to the Stripe Connected Account Agreement', v, { type: 'checkbox', value: 'accepted' })];
+    const sections = kind === 'company'
+        ? [{ heading: 'Business details', fields: business }, { heading: 'Company', fields: company }, { heading: 'Owners', fields: owners }, { heading: 'Representative', fields: person }, { heading: 'Payout account', fields: payout }, { heading: 'Agreement', fields: agreement }]
+        : [{ heading: 'Business details', fields: business }, { heading: 'About you', fields: person }, { heading: 'Payout account', fields: payout }, { heading: 'Agreement', fields: agreement }];
+    return flowPage({
+        title: 'Stripe · Account onboarding',
+        css: [PAYMENT_CSS],
+        ...(error ? { status: 400 } : {}),
+        body: (_jsx(Payment, { merchant: `Verify your ${kind === 'company' ? 'company' : 'business'} with Stripe · ${String(link.account)} · test mode`, lines: [], action: sessionUrl, sections: sections, submit: { label: 'Submit' }, back: { href: String(link.return_url), label: '← Return to platform' }, ...(error ? { error } : {}) })),
+    });
+}
+/** An account whose requirements the twin does not model: outside the US, or of another business type. */
+function unmodelled(account) {
+    return flowPage({ title: 'Stripe', status: 501, css: [CONSENT_CSS, STRIPE_CONSENT_SKIN], body: _jsx("main", { className: "consent", children: _jsx("h1", { className: "consent-heading", children: `Onboarding requirements for a ${String(account.business_type ?? 'business')} account in ${String(account.country ?? 'this country')} are not modelled by this twin.` }) }) });
+}
+/** A submit that leaves something out is refused on the page with what is missing, the owner's answers kept. */
+function incomplete(ctx, sessionUrl, link, kind, v, missing) {
+    return page(ctx, sessionUrl, link, kind, v, `Still required: ${missing.join(', ')}.`);
+}
+/** The owner submits everything: it is stored on the account, nothing is due, and charges, payouts and the requested
+ *  capabilities are enabled. */
+async function submit(ctx, link, kind, v, ip) {
+    const id = String(link.account);
+    const account = ctx.get('account', id);
+    if (!account)
+        return;
+    const caps = { ...(account.capabilities ?? {}) };
+    for (const [cap, status] of Object.entries(caps)) {
+        if (status !== 'active' && !ctx.legal('capability', 'status', OPERATION.id, String(status), 'active', cap, 'vendor'))
+            caps[cap] = 'active';
+    }
+    const due = currentlyDue(kind, v);
+    const requirements = { ...(account.requirements ?? {}), currently_due: due, eventually_due: due, past_due: [], disabled_reason: null, current_deadline: null };
+    const addressOf = (p) => ({ line1: v[`${p}line1`], line2: null, city: v[`${p}city`], state: v[`${p}state`], postal_code: v[`${p}postal_code`], country: 'US' });
+    const [year, month, day] = (v.dob ?? '').split('-').map(Number);
+    const person = { first_name: v.first_name, last_name: v.last_name, email: v.email, phone: v.phone, dob: { day, month, year }, address: addressOf(''), ssn_last_4_provided: true, id_number_provided: false };
+    const company = kind === 'company';
+    const settings = account.settings ?? {};
+    await ctx.write('account', id, {
+        details_submitted: true, charges_enabled: due.length === 0, payouts_enabled: due.length === 0, capabilities: caps, requirements,
+        business_type: kind,
+        business_profile: { ...(account.business_profile ?? {}), name: company ? v.company_name : `${String(v.first_name)} ${String(v.last_name)}`, mcc: (v.mcc ?? '').trim(), url: v.url },
+        settings: { ...settings, payments: { ...(settings.payments ?? {}), statement_descriptor: v.statement_descriptor } },
+        ...(company
+            ? { company: { name: v.company_name, phone: v.company_phone, address: addressOf('company_'), tax_id_provided: true, owners_provided: true, directors_provided: false, executives_provided: false } }
+            : { individual: { ...person, id: `person_${id}` } }),
+        tos_acceptance: { date: Number(ctx.now()), ip, user_agent: null },
+    }, 'account.updated');
+    if (company) {
+        await created(ctx, 'person', { account: id }, { ...person, relationship: { representative: true, executive: true, director: false, owner: false, percent_ownership: null, title: v.title }, metadata: {} });
+        await created(ctx, 'person', { account: id }, { first_name: v.owner_first_name, last_name: v.owner_last_name, email: v.owner_email, relationship: { owner: true, representative: false, executive: false, director: false, percent_ownership: null, title: null }, metadata: {} });
+    }
+    const digits = (v.account_number ?? '').replace(/\D/g, '');
+    await created(ctx, 'external_account', { account: id }, {
+        object: 'bank_account', account_holder_name: company ? v.company_name : `${String(v.first_name)} ${String(v.last_name)}`, account_holder_type: company ? 'company' : 'individual', bank_name: 'STRIPE TEST BANK', country: 'US', currency: 'usd',
+        default_for_currency: true, fingerprint: `twin_ext_${digits.slice(-4)}`, last4: digits.slice(-4), routing_number: v.routing_number, status: 'new', metadata: {},
+    });
+    await syncExternals(ctx, id);
+}
+/** Where an onboarding session lives, on connect.stripe.com. */
+const SESSIONS = 'https://connect.stripe.com/setup/s/';
+/** Visiting an Account Link consumes it and sends the owner to their onboarding session; a used or expired one sends
+ *  them to refresh_url for a fresh link. */
+async function visit(ctx, id) {
+    const link = ctx.get(LINK, id);
+    if (!link)
+        return gone();
+    if (!usable(ctx, link))
+        return seeOther(String(link.refresh_url));
+    const session = `onbs_${id.replace(/^acctlink_/, '')}`;
+    await ctx.write(LINK, id, { used: true, _session: session }, 'account_link.used');
+    return seeOther(`${SESSIONS}${session}`);
+}
+/** connect.stripe.com's onboarding pages, or undefined for any other request. */
+export function stripeOnboardingFlow(scope) {
+    return async (request) => {
+        const path = new URL(request.url).pathname;
+        const entry = /^\/setup\/(acctlink_[A-Za-z0-9_]+)\/?$/.exec(path);
+        const at = /^\/setup\/s\/(onbs_[A-Za-z0-9_]+)\/?$/.exec(path);
+        if (entry && request.method === 'GET')
+            return visit(await semanticsContext(manifest, request, OPERATION, scope), entry[1]);
+        if (!at || (request.method !== 'GET' && request.method !== 'POST'))
+            return undefined;
+        const sid = at[1];
+        const form = request.method === 'POST' ? await formOf(request.clone()) : {};
+        const ctx = await semanticsContext(manifest, request, OPERATION, scope);
+        // the session the visited link opened, until it is submitted
+        const stored = ctx.rowsRaw(LINK).find((l) => l._session === sid && l._submitted !== true);
+        const link = stored ? ctx.get(LINK, String(stored.id)) : undefined;
+        if (!stored || !link)
+            return gone();
+        const sessionUrl = `${SESSIONS}${sid}`;
+        const account = ctx.get('account', String(link.account)) ?? {};
+        const kind = kindOf(account);
+        if (!kind)
+            return unmodelled(account);
+        if (request.method === 'GET')
+            return page(ctx, sessionUrl, link, kind);
+        const missing = currentlyDue(kind, form);
+        if (missing.length)
+            return incomplete(ctx, sessionUrl, link, kind, form, missing);
+        await ctx.write(LINK, String(stored.id), { _submitted: true }, 'account_link.submitted');
+        await submit(ctx, link, kind, form, request.headers.get('x-forwarded-for')?.split(',')[0]?.trim() || '127.0.0.1');
+        return seeOther(String(link.return_url));
+    };
+}

package/dist/src/screens/portal.d.ts

@@ -0,0 +1,5 @@
+/** billing.stripe.com's portal pages, or undefined for any other request. */
+export declare function stripePortalFlow(scope: {
+    root?: string;
+    clock?: () => string;
+}): (request: Request) => Promise<Response | undefined>;