@volter/twin-stripe 2.0.0 → 2.0.1

package/dist/src/stripe-conformance.d.ts

@@ -13,6 +13,8 @@ export type StripeConformanceReport = {
     fieldsChecked: number;
     violations: StripeViolation[];
     knownIgnored: number;
+    /** fields checked per twin resource type: a type the check skipped (no schema) is absent */
+    fieldsByType: Record<string, number>;
 };
 /** Load the vendored per-object Stripe JSON Schemas (type+required+enum from OpenAPI). */
 export declare function loadStripeSchemas(): Promise<StripeSchemas>;

package/dist/src/stripe-conformance.js

@@ -14,6 +14,7 @@ import { readFile } from 'node:fs/promises';
 import { twinResources } from '@volter/world-core';
 import { specConformance } from '@volter/world-tooling';
 import { OBJECT_NAME } from "./stripe-twin.js";
+import { INCLUDABLE_FIELDS, render } from "./stripe-version.js";
 // twin resource type -> Stripe OpenAPI object name (the resources the twin serves)
 const TYPE_TO_OBJECT = {
     charge: 'charge', customer: 'customer', payment_intent: 'payment_intent', refund: 'refund',
@@ -33,12 +34,18 @@ const fixturePath = (name) => new URL(`../test-fixtures/${name}`, import.meta.ur
 // The emitted REST body == the twin's view(): strip internal fields, add object + id.
 // Mirrors stripe-twin.ts view(): a vendor `type` field collides with the kernel
 // discriminator, so it is stored under `_stripe_type` and restored to `type` on emit.
+// ...and then rendered in the version a caller that pins none is served (stripe-version.ts render): since 24e757f60
+// the twin KEEPS objects in the 2024-06-20 shape its rules were written against and answers them in the served
+// version's (basil onward moved an invoice's subscription and charge, a charge's source, ...), so the stored row is
+// not what any client receives. The schemas are projected from a post-basil spec, so the answer is what is checked.
 function emitted(r) {
     const { type, updatedAt, _stripe_type, ...rest } = r;
     const out = { object: OBJECT_NAME[type] ?? type, ...rest, id: r.id };
     if (_stripe_type !== undefined)
         out.type = _stripe_type;
-    return out;
+    // expanded: an includable field (a session's line_items, a charge's refunds) is answered only when a request asks, and
+    // the check reads the answer that carries it so its shape is still checked
+    return render(out, undefined, INCLUDABLE_FIELDS);
 }
 /** Load the vendored per-object Stripe JSON Schemas (type+required+enum from OpenAPI). */
 export async function loadStripeSchemas() {
@@ -59,6 +66,7 @@ export function checkStripeConformance(schemas, opts = {}) {
     const violations = [];
     let fieldsChecked = 0;
     let knownIgnored = 0;
+    const fieldsByType = {};
     for (const r of resources) {
         const objectName = TYPE_TO_OBJECT[r.type];
         if (!objectName)
@@ -68,11 +76,12 @@ export function checkStripeConformance(schemas, opts = {}) {
             continue;
         const rep = specConformance.checkSpecConformance(emitted(r), schema, { exemptKey: isTwinExtra, known: opts.known ?? [] });
         fieldsChecked += rep.fieldsChecked;
+        fieldsByType[r.type] = (fieldsByType[r.type] ?? 0) + rep.fieldsChecked;
         knownIgnored += rep.knownIgnored;
         for (const v of rep.violations)
             violations.push({ ...v, object: objectName, id: r.id });
     }
-    return { ok: violations.length === 0, resourcesChecked: resources.length, fieldsChecked, violations, knownIgnored };
+    return { ok: violations.length === 0, resourcesChecked: resources.length, fieldsChecked, violations, knownIgnored, fieldsByType };
 }
 /**
  * Per-object coverage: of the fields each Stripe object declares, which does the

package/dist/src/stripe-emit.js

@@ -11,7 +11,7 @@
 // DELIVER does not transition state: it snapshots the subject AS IT IS in the twin and fires
 // the named event about it. Completing a checkout session / paying an invoice is the twin
 // API's job; this verb answers "my app's webhook handler needs to SEE the event, now."
-import { projectResources } from '@volter/world-core';
+import { projectResources, worldNow } from '@volter/world-core';
 import { OBJECT_NAME, PLATFORM_ACCOUNT_ID, TWIN_API_VERSION, view } from "./stripe-twin.js";
 import { STRIPE_WEBHOOK_FALLBACK_SECRET, generateTestHeaderString } from "./stripe-events.js";
 import { render } from "./stripe-version.js";
@@ -115,7 +115,7 @@ export const stripeEmitter = {
         // The endpoint's own signing secret, from its state row (real Stripe signs per-endpoint).
         const endpointRow = liveEndpointRows(root).find((w) => String(w.id) === endpoint.id || String(w.url) === endpoint.url);
         const secret = typeof endpointRow?.secret === 'string' && endpointRow.secret ? endpointRow.secret : STRIPE_WEBHOOK_FALLBACK_SECRET;
-        const created = occurredAt ? Math.floor(Date.parse(occurredAt) / 1000) : Math.floor(Date.now() / 1000);
+        const created = occurredAt ? Math.floor(Date.parse(occurredAt) / 1000) : Math.floor(Date.parse(worldNow()) / 1000);
         // a connected account's object is its event's, as the write path scopes it (stripe-twin.ts afterStripeWrite): the
         // account itself, or a row kept on its books (`_account`). "Each event for a connected account contains a top-level
         // `account` property that identifies the connected account" (docs.stripe.com/connect/webhooks).

package/dist/src/stripe-events.js

@@ -1,4 +1,5 @@
-import { nodeBuiltin } from '@volter/world-core';
+import { nodeBuiltin, worldNow } from '@volter/world-core';
+import { appDestination, appFetch } from '@volter/world-core/app-route';
 import { worldEgressRefusal } from '@volter/world-core/network-policy';
 import vendorEvents from './generated/events.gen.json' with { type: 'json' };
 import { render } from "./stripe-version.js";
@@ -12,7 +13,8 @@ export function computeStripeSignature(payload, secret, timestamp) {
 }
 /** Build a `Stripe-Signature` header value for `payload` (mirrors generateTestHeaderString). */
 export function generateTestHeaderString(opts) {
-    const timestamp = opts.timestamp ?? Math.floor(Date.now() / 1000);
+    // signed at the World's time, as its application reads the time (a moved World clock; the app keeps it too)
+    const timestamp = opts.timestamp ?? Math.floor(Date.parse(worldNow()) / 1000);
     const scheme = opts.scheme ?? 'v1';
     const signature = computeStripeSignature(opts.payload, opts.secret, timestamp);
     return `t=${timestamp},${scheme}=${signature}`;
@@ -63,7 +65,7 @@ export function constructEvent(payload, header, secret, opts = {}) {
         throw new StripeSignatureVerificationError('No signatures found matching the expected signature for payload.');
     }
     if (opts.tolerance !== undefined) {
-        const now = opts.now ?? Math.floor(Date.now() / 1000);
+        const now = opts.now ?? Math.floor(Date.parse(worldNow()) / 1000);
         if (now - timestamp > opts.tolerance) {
             throw new StripeSignatureVerificationError('Timestamp outside the tolerance zone');
         }
@@ -225,8 +227,9 @@ const httpDelivery = async (url, event, endpointSecret) => {
     // the event as its API version renders it (stripe-version.ts)
     const payload = JSON.stringify(render(event, event.api_version));
     const secret = endpointSecret ?? secrets.get(url) ?? STRIPE_WEBHOOK_FALLBACK_SECRET;
-    // the World's egress rule: an endpoint it refuses is not delivered to, and says so
-    const refusal = worldEgressRefusal(url);
+    // the World's egress rule: an endpoint it refuses is not delivered to, and says so; the application's own hostnames
+    // reach it inside the World
+    const refusal = appDestination(url) ? null : worldEgressRefusal(url);
     if (refusal !== null)
         console.error(`[twin:stripe] webhook delivery DROPPED — ${event.type} ${event.id} -> ${url}: ${refusal}`);
     return refusal !== null ? undefined : postEvent(url, event, payload, secret);
@@ -237,7 +240,7 @@ async function postEvent(url, event, payload, secret) {
     for (let attempt = 1; attempt <= DELIVERY_ATTEMPTS; attempt += 1) {
         try {
             const header = generateTestHeaderString({ payload, secret });
-            await fetch(url, { method: 'POST', headers: { 'content-type': 'application/json', 'stripe-signature': header }, body: payload });
+            await appFetch(url, { method: 'POST', headers: { 'content-type': 'application/json', 'stripe-signature': header }, body: payload });
             return;
         }
         catch (error) {
@@ -284,13 +287,14 @@ async function httpAuthRequestDelivery(url, event, secret) {
     // the event as its API version renders it (stripe-version.ts)
     const payload = JSON.stringify(render(event, event.api_version));
     const header = generateTestHeaderString({ payload, secret });
-    // the World's egress rule: a refused endpoint is an unreachable one (the caller's timeout fallback)
-    const refusal = worldEgressRefusal(url);
+    // the World's egress rule: a refused endpoint is an unreachable one (the caller's timeout fallback); the
+    // application's own hostnames reach it inside the World
+    const refusal = appDestination(url) ? null : worldEgressRefusal(url);
     return refusal !== null ? Promise.reject(new Error(refusal)) : postAuthRequest(url, payload, header);
 }
 /** The HTTP POST of a real-time authorization request, cut off at the window, and the endpoint's answer. */
 async function postAuthRequest(url, payload, header) {
-    const res = await fetch(url, {
+    const res = await appFetch(url, {
         method: 'POST',
         headers: { 'content-type': 'application/json', 'stripe-signature': header },
         body: payload,

package/dist/src/stripe-server.js

@@ -15,6 +15,8 @@ import { stripeIdentityFlow } from "./screens/identity.js";
 import { stripeOnboardingFlow } from "./screens/onboarding.js";
 import { stripePortalFlow } from "./screens/portal.js";
 import { stripePublicDetailsFlow } from "./screens/public-details.js";
+import { connectionRevoked, oauthKeyAccount, redactKey, stripeConnectOAuthFlow } from "./screens/connect-oauth.js";
+import { stripeConnectSettingsFlow } from "./screens/connect-settings.js";
 import surface from './generated/surface.gen.json' with { type: 'json' };
 import { manifest } from "./manifest.js";
 import { appsSecrets } from "./semantics/apps-secrets.js";
@@ -108,6 +110,42 @@ async function publishableKeyRefused(call, scope) {
     const ctx = await semanticsContext(manifest, call.request.clone(), call.operation, scope);
     return ctx.get(scoped.type, id)?.client_secret === secret ? undefined : wrongClientSecret(scoped, id);
 }
+// ── an account whose OAuth connection was revoked ──
+// "After revocation, the account can't be accessed by your platform in the Dashboard or through the API"
+// (docs.stripe.com/connect/oauth-reference, deauthorize; so too a connection revoked by a reused code). A call made as it
+// (the Stripe-Account header) or naming it (/v1/accounts/{account}…) is refused with the error Stripe documents for a
+// Stripe-Account the key cannot use: "account_invalid | The account ID provided as a value for the Stripe-Account header
+// is invalid" (docs.stripe.com/error-codes), as 403, "The API key doesn't have permissions to perform the request"
+// (docs.stripe.com/api/errors). Where the documentation stops and the twin decides: the message's wording; an account
+// the platform created itself, or never connected by OAuth, is not affected.
+async function revokedAccountRefused(call, scope) {
+    const named = [call.request.headers.get('stripe-account') ?? undefined, call.operation.path.startsWith('/v1/accounts/{account}') ? call.params.account : undefined].filter((a) => !!a);
+    if (!named.length)
+        return undefined;
+    const ctx = await semanticsContext(manifest, new Request(call.request.url), call.operation, scope); // the rows only: no body read
+    const revoked = named.find((a) => connectionRevoked(ctx, a));
+    if (!revoked)
+        return undefined;
+    const key = requestKey(call.request);
+    return vendorError(manifest, { status: 403, code: 'account_invalid', message: `The provided key '${redactKey(key)}' does not have access to account '${revoked}' (or that account does not exist). Application access may have been revoked.` });
+}
+/** The API key a request carries: Bearer, or Basic's user (`curl -u sk_…:`, docs.stripe.com/api/authentication). */
+function requestKey(request) {
+    const header = request.headers.get('authorization') ?? '';
+    const bearer = /^bearer\s+(\S+)/i.exec(header)?.[1];
+    if (bearer)
+        return bearer;
+    const basic = /^basic\s+(\S+)/i.exec(header)?.[1];
+    if (basic) {
+        try {
+            return atob(basic).split(':')[0] ?? '';
+        }
+        catch {
+            return '';
+        }
+    }
+    return '';
+}
 /** A client-secret call whose secret is not the object's: answered as though the key could not see it (the twin's
  *  decision, above). */
 function wrongClientSecret(scoped, id) {
@@ -146,14 +184,16 @@ export function createStripeTwinFetch(options) {
         core,
         // after the credential and the version, a publishable key is held to the client-side calls, then a request's
         // parameters are checked against the operation's (stripe-params.ts)
-        around: (call, next) => guard(call, async () => (await publishableKeyRefused(call, scope)) ?? (await refuseParameters(call)) ?? next()),
+        around: (call, next) => guard(call, async () => (await publishableKeyRefused(call, scope)) ?? (await revokedAccountRefused(call, scope)) ?? (await refuseParameters(call)) ?? next()),
         gap: (request) => vendorError(manifest, { status: 404, message: `Unrecognized request URL (${request.method}: ${new URL(request.url).pathname}).` }),
     });
     // the hosted flows sit beside the API: checkout.stripe.com's payment page, billing.stripe.com's customer portal,
-    // connect.stripe.com's onboarding, verify.stripe.com's identity check and the bank-linking flow Stripe.js opens, and
-    // the Dashboard's Public details page (dashboard.stripe.com/settings/public, the platform's customer-facing name);
+    // connect.stripe.com's onboarding and its OAuth endpoints (screens/connect-oauth.tsx), verify.stripe.com's identity
+    // check and the bank-linking flow Stripe.js opens, and the Dashboard's Public details page
+    // (dashboard.stripe.com/settings/public, the platform's customer-facing name) and Connect OAuth settings
+    // (dashboard.stripe.com/settings/connect/onboarding-options/oauth: the client_id, OAuth on, the redirect URIs);
     // a read-only twin takes no payments and moves nothing
-    const flows = [stripeCheckoutFlow(scope), stripePortalFlow(scope), stripeOnboardingFlow(scope), stripeIdentityFlow(scope), stripeFinancialConnectionsFlow(scope), stripePublicDetailsFlow(scope)];
+    const flows = [stripeCheckoutFlow(scope), stripePortalFlow(scope), stripeOnboardingFlow(scope), stripeIdentityFlow(scope), stripeFinancialConnectionsFlow(scope), stripePublicDetailsFlow(scope), stripeConnectOAuthFlow(scope), stripeConnectSettingsFlow(scope)];
     // the twin's own doors sit in front of the API: discovery, and what stands in for an act Stripe's API
     // does not have (stripe-twin.ts)
     // GET /twin: what this twin is (not Stripe's; a host reads it)
@@ -245,8 +285,35 @@ export function createStripeTwinFetch(options) {
                 if (page)
                     return page;
             }
+        const acting = await actingAsOAuthKey(request);
+        if (acting instanceof Response)
+            return acting;
         // an update's metadata is merged into what the object holds before the handler or the core serves it (mergeMetadata)
-        return derived(readOnly ? request : await mergeMetadata(request, (op) => !(op.id in handlerMap) && core.owns(op), scope));
+        return derived(readOnly ? acting : await mergeMetadata(acting, (op) => !(op.id in handlerMap) && core.owns(op), scope));
+    };
+    // A connected account's OAuth keys (screens/connect-oauth.tsx): the token endpoint's access_token is "Use the
+    // Stripe-Account header with your platform's secret key (that can make requests on behalf of this Stripe account)" and
+    // its stripe_publishable_key the same with the publishable key (docs.stripe.com/connect/oauth-reference): a request made
+    // with one acts as that account, as a request with the Stripe-Account header does. A key no live connection holds (its
+    // connection revoked, or replaced by a refresh: "Any existing access token with the same scope and mode ... is
+    // revoked") is Stripe's unknown key, 401 "Invalid API Key provided" (docs.stripe.com/api/authentication, docs.stripe.com
+    // /error-codes); one sent with a Stripe-Account header naming another account cannot act as it (account_invalid).
+    // Where the documentation stops and the twin decides: the messages' wording; a read_only key is not held to reads
+    // (manifest todo stripe.connect.oauth_scope_enforcement).
+    const actingAsOAuthKey = async (request) => {
+        const key = requestKey(request);
+        if (!/^(sk|pk)_test_oauth_/.test(key))
+            return request;
+        const held = oauthKeyAccount(await semanticsContext(manifest, new Request(request.url), billingClock, scope), key);
+        if (!held)
+            return vendorError(manifest, { status: 401, message: `Invalid API Key provided: ${redactKey(key)}` });
+        const named = request.headers.get('stripe-account');
+        if (named && named !== held.account)
+            return vendorError(manifest, { status: 403, code: 'account_invalid', message: `The provided key '${redactKey(key)}' does not have access to account '${named}' (or that account does not exist). Application access may have been revoked.` });
+        const headers = new Headers(request.headers);
+        headers.set('stripe-account', held.account);
+        const bodied = request.method !== 'GET' && request.method !== 'HEAD';
+        return new Request(request.url, { method: request.method, headers, ...(bodied ? { body: await request.arrayBuffer() } : {}) });
     };
     // every answer in the shape of the API version the caller is served (stripe-version.ts)
     const rendered = async (request) => {

package/dist/src/stripe-shared.d.ts

@@ -7,6 +7,9 @@ export type StripeRow = Record<string, any>;
  *  Dashboard to differentiate between accounts", the same object page), and with neither to "Twin Inc.", the name the
  *  Dashboard mirror has always given the World's own account. */
 export declare const PLATFORM_DEFAULT_NAME = "Twin Inc.";
+/** The bookkeeping type of a connected account's Connect OAuth connection (screens/connect-oauth.tsx): one row per
+ *  account, `revoked: true` once deauthorized or its code reused. Read by the account list and the event path too. */
+export declare const OAUTH_CONNECTIONS = "_oauth_connection";
 export declare function publicBusinessName(account: StripeRow | undefined): string;
 /**
  * Format a Stripe minor-unit amount (cents) as a localized currency string.

package/dist/src/stripe-shared.js

@@ -10,6 +10,9 @@
  *  Dashboard to differentiate between accounts", the same object page), and with neither to "Twin Inc.", the name the
  *  Dashboard mirror has always given the World's own account. */
 export const PLATFORM_DEFAULT_NAME = 'Twin Inc.';
+/** The bookkeeping type of a connected account's Connect OAuth connection (screens/connect-oauth.tsx): one row per
+ *  account, `revoked: true` once deauthorized or its code reused. Read by the account list and the event path too. */
+export const OAUTH_CONNECTIONS = '_oauth_connection';
 export function publicBusinessName(account) {
     const named = (v) => (typeof v === 'string' && v.trim() ? v : undefined);
     return named(account?.business_profile?.name) ?? named(account?.settings?.dashboard?.display_name) ?? PLATFORM_DEFAULT_NAME;

package/dist/src/stripe-twin.js

@@ -15,6 +15,7 @@ import { emitStripeEvent, eventTypeFor } from "./stripe-events.js";
 import { SERVED_VERSION } from "./stripe-version.js";
 import { planOf } from "./semantics/plans.js";
 import { platformAccountDefault } from "./semantics/connect.js";
+import { OAUTH_CONNECTIONS } from "./stripe-shared.js";
 const SERVICE = 'stripe';
 // The Stripe API version a request that pins none is served in: the vendored spec's (stripe-version.ts renders
 // every answer in it). A request may override it via the `Stripe-Version` header (apiVersion);
@@ -440,6 +441,11 @@ export async function afterStripeWrite(type, op, out, root, occurredAt, apiVersi
     // stored before it is delivered: a consumer that looks its webhook's event up finds it
     if (eventType)
         await persistStripeEvent(eventType, object, root, occurredAt, apiVersion, account, id);
+    // a connected account whose OAuth connection was revoked "can't be accessed by your platform" (docs.stripe.com/connect/
+    // oauth-reference): its events (a payout time makes, a renewal) are its own and no longer reach the platform's Connect
+    // endpoints, except the account.application.deauthorized that says so (screens/connect-oauth.tsx)
+    if (account && eventType !== 'account.application.deauthorized' && rows(OAUTH_CONNECTIONS, root).some((c) => c.id === account && c.revoked === true))
+        return;
     await emitStripeEvent(op, object, { occurredAt: occurredAt ?? '1970-01-01T00:00:00.000Z', endpoints: webhookTargets(root), ...(account ? { account } : {}), ...(id ? { id } : {}) });
 }
 /** Event numbers taken in this process, per root, before their events are stored: two writes whose events overlap
@@ -1170,7 +1176,7 @@ export async function handleStripeTwinRequest(req) {
     let path = req.path.startsWith('/') ? req.path : `/${req.path}`;
     if ((method === 'GET' || method === 'HEAD') && req.body)
         path += (path.includes('?') ? '&' : '?') + req.body;
-    const response = await twin(new Request(`https://api.stripe.com${path}`, { method, headers, ...(method !== 'GET' && method !== 'HEAD' && req.body ? { body: req.body } : {}) }));
+    const response = await twin(new Request(`http://stripe.test${path}`, { method, headers, ...(method !== 'GET' && method !== 'HEAD' && req.body ? { body: req.body } : {}) }));
     const text = await response.text();
     return { status: response.status, body: text ? JSON.parse(text) : null };
 }

package/dist/src/stripe-version.d.ts

@@ -2,6 +2,8 @@
 export declare const SERVED_VERSION: string;
 /** Whether a request is answered in the served version's shape. */
 export declare const servesCurrent: (pinned?: string | null) => boolean;
+/** Every includable field name, as `expand` paths on a top-level object: what a check of an object's FULL answer expands. */
+export declare const INCLUDABLE_FIELDS: string[];
 /** The `expand[]` paths a request names, in its query or its body (JSON or form). */
 export declare function expandOf(request: Request): Promise<string[]>;
 /** An answer with every webhook endpoint's `secret` left out: Stripe answers it only when the endpoint is created. */

package/dist/src/stripe-version.js

@@ -221,6 +221,8 @@ const INCLUDABLE = {
     // request it with the `expand` request parameter))"
     invoice: ['confirmation_secret'],
 };
+/** Every includable field name, as `expand` paths on a top-level object: what a check of an object's FULL answer expands. */
+export const INCLUDABLE_FIELDS = [...new Set(Object.values(INCLUDABLE).flat())];
 /** The `expand[]` paths a request names, in its query or its body (JSON or form). */
 export async function expandOf(request) {
     const url = new URL(request.url);

package/dist/test-fixtures/stripe-known-deviations.json

@@ -100,6 +100,11 @@
    "path": "price",
    "kind": "extra",
    "reason": "PEAK-3102 round 2: POST /v1/invoiceitems now stores the caller-supplied `price` id on the invoiceitem (needed to resolve amount = unit_amount * quantity for PeakHealth's catalog-product order path). Real Stripe replaced the top-level InvoiceItem.price field with a `pricing.price_details` object in a later API-version migration — stripe-schemas.json (LATEST published shape) reflects the post-migration object and has no price property, hence 'extra' under the harness's single-snapshot schema, same mechanism as current_period_start/_end and payment_intent above. This twin's default-served TWIN_API_VERSION ('2024-06-20') pre-dates that migration, where real Stripe DOES emit invoiceitem.price top-level, so emitting it here is faithful to what this twin actually serves by default."
+  },
+  {
+   "path": "net_amount",
+   "kind": "type",
+   "reason": "invoiceitem.net_amount is typed a non-nullable integer in the served spec, but its own description says \"This field is `null` for `discountable=true` items\" (served spec, invoiceitem.net_amount). The twin follows the description: a discountable item answers null. The spec's type and its description disagree; this declares the twin's side."
   }
- ]
+]
 }

package/dist/test-fixtures/stripe-schemas.json

@@ -297,6 +297,10 @@
    "status"
   ],
   "properties": {
+   "allowed_payment_method_types": {
+    "type": "array",
+    "nullable": true
+   },
    "amount": {
     "type": "integer"
    },
@@ -419,6 +423,9 @@
    "payment_method_types": {
     "type": "array"
    },
+   "payment_record": {
+    "nullable": true
+   },
    "presentment_details": {},
    "processing": {
     "nullable": true
@@ -495,6 +502,13 @@
    "currency": {
     "type": "string"
    },
+   "customer": {
+    "nullable": true
+   },
+   "customer_account": {
+    "type": "string",
+    "nullable": true
+   },
    "description": {
     "type": "string"
    },
@@ -523,6 +537,9 @@
    "payment_intent": {
     "nullable": true
    },
+   "payment_method": {
+    "nullable": true
+   },
    "pending_reason": {
     "enum": [
      "charge_pending",
@@ -726,6 +743,7 @@
     ],
     "type": "string"
    },
+   "status_details": {},
    "test_clock": {
     "nullable": true
    },
@@ -757,6 +775,10 @@
    "usage"
   ],
   "properties": {
+   "allowed_payment_method_types": {
+    "type": "array",
+    "nullable": true
+   },
    "application": {
     "nullable": true
    },
@@ -953,6 +975,7 @@
    "payco": {},
    "paynow": {},
    "paypal": {},
+   "paypay": {},
    "payto": {},
    "pix": {},
    "promptpay": {},
@@ -962,6 +985,7 @@
    "satispay": {},
    "scalapay": {},
    "sepa_debit": {},
+   "sequra": {},
    "sofort": {},
    "sunbit": {},
    "swish": {},
@@ -1204,6 +1228,9 @@
    "tax_code": {
     "nullable": true
    },
+   "tax_details": {
+    "nullable": true
+   },
    "unit_label": {
     "type": "string",
     "nullable": true
@@ -1500,6 +1527,7 @@
     "type": "string",
     "nullable": true
    },
+   "status_details": {},
    "status_transitions": {},
    "subtotal": {
     "type": "integer"
@@ -1579,12 +1607,18 @@
     "type": "array",
     "nullable": true
    },
+   "frozen_fields": {
+    "type": "array"
+   },
    "id": {
     "type": "string"
    },
    "invoice": {
     "nullable": true
    },
+   "invoicing_rules": {
+    "type": "array"
+   },
    "livemode": {
     "type": "boolean"
    },
@@ -2045,6 +2079,10 @@
     "type": "boolean",
     "nullable": true
    },
+   "allowed_payment_method_types": {
+    "type": "array",
+    "nullable": true
+   },
    "amount_subtotal": {
     "type": "integer",
     "nullable": true
@@ -2575,7 +2613,12 @@
    },
    "livemode": {
     "type": "boolean"
-   }
+   },
+   "company": {},
+   "groups": {
+    "nullable": true
+   },
+   "individual": {}
   }
  },
  "transfer": {
@@ -2583,7 +2626,6 @@
   "required": [
    "amount",
    "amount_reversed",
-   "balance_transaction",
    "created",
    "currency",
    "id",
@@ -2645,13 +2687,13 @@
  "tax_rate": {
   "type": "object",
   "required": [
-   "id",
-   "object",
    "active",
    "created",
    "display_name",
+   "id",
    "inclusive",
    "livemode",
+   "object",
    "percentage"
   ],
   "properties": {
@@ -2709,20 +2751,36 @@
    "tax_type": {
     "type": "string",
     "nullable": true
+   },
+   "effective_percentage": {
+    "type": "number",
+    "nullable": true
+   },
+   "flat_amount": {
+    "nullable": true
+   },
+   "rate_type": {
+    "enum": [
+     "flat_amount",
+     "percentage"
+    ],
+    "type": "string",
+    "nullable": true
    }
   }
  },
  "tax.calculation": {
   "type": "object",
   "required": [
-   "object",
    "amount_total",
    "currency",
    "customer_details",
-   "line_items",
+   "livemode",
+   "object",
    "tax_amount_exclusive",
    "tax_amount_inclusive",
-   "tax_breakdown"
+   "tax_breakdown",
+   "tax_date"
   ],
   "properties": {
    "id": {
@@ -2772,18 +2830,24 @@
    },
    "tax_date": {
     "type": "integer"
+   },
+   "ship_from_details": {
+    "nullable": true
    }
   }
  },
  "tax.calculation_line_item": {
   "type": "object",
   "required": [
-   "id",
-   "object",
    "amount",
    "amount_tax",
+   "id",
    "livemode",
-   "tax_behavior"
+   "object",
+   "quantity",
+   "reference",
+   "tax_behavior",
+   "tax_code"
   ],
   "properties": {
    "id": {
@@ -2827,18 +2891,27 @@
    },
    "tax_code": {
     "type": "string"
+   },
+   "metadata": {
+    "type": "object",
+    "nullable": true
+   },
+   "performance_location": {
+    "type": "string",
+    "nullable": true
    }
   }
  },
  "tax.registration": {
   "type": "object",
   "required": [
-   "id",
-   "object",
    "active_from",
    "country",
    "country_options",
+   "created",
+   "id",
    "livemode",
+   "object",
    "status"
   ],
   "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/twin-stripe",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "Local Stripe twin — a faithful, stateful local Stripe API your real `stripe` SDK talks to unmodified. Mirror, simulate, and fork. Built on @volter/world-core.",
   "keywords": [
     "twin",
@@ -56,15 +56,15 @@
     "postpack": "node ../../../scripts/publish/prepare-publish.mjs postpack"
   },
   "dependencies": {
-    "@volter/world-ui": "0.1.0",
+    "@volter/world-ui": "0.1.1",
     "react": "^19.2.7",
     "react-dom": "^19.2.7"
   },
   "peerDependencies": {
-    "@volter/world-core": "2.0.0"
+    "@volter/world-core": "2.0.1"
   },
   "devDependencies": {
-    "@volter/world-core": "2.0.0",
+    "@volter/world-core": "2.0.1",
     "@volter/world-tooling": "0.1.0",
     "@types/bun": "^1.2.20",
     "@types/node": "^24.0.0",