@volter/twin-stripe 2.0.0 → 2.0.2

package/dist/test-fixtures/stripe-schemas.json

@@ -297,6 +297,10 @@
    "status"
   ],
   "properties": {
+   "allowed_payment_method_types": {
+    "type": "array",
+    "nullable": true
+   },
    "amount": {
     "type": "integer"
    },
@@ -419,6 +423,9 @@
    "payment_method_types": {
     "type": "array"
    },
+   "payment_record": {
+    "nullable": true
+   },
    "presentment_details": {},
    "processing": {
     "nullable": true
@@ -495,6 +502,13 @@
    "currency": {
     "type": "string"
    },
+   "customer": {
+    "nullable": true
+   },
+   "customer_account": {
+    "type": "string",
+    "nullable": true
+   },
    "description": {
     "type": "string"
    },
@@ -523,6 +537,9 @@
    "payment_intent": {
     "nullable": true
    },
+   "payment_method": {
+    "nullable": true
+   },
    "pending_reason": {
     "enum": [
      "charge_pending",
@@ -726,6 +743,7 @@
     ],
     "type": "string"
    },
+   "status_details": {},
    "test_clock": {
     "nullable": true
    },
@@ -757,6 +775,10 @@
    "usage"
   ],
   "properties": {
+   "allowed_payment_method_types": {
+    "type": "array",
+    "nullable": true
+   },
    "application": {
     "nullable": true
    },
@@ -953,6 +975,7 @@
    "payco": {},
    "paynow": {},
    "paypal": {},
+   "paypay": {},
    "payto": {},
    "pix": {},
    "promptpay": {},
@@ -962,6 +985,7 @@
    "satispay": {},
    "scalapay": {},
    "sepa_debit": {},
+   "sequra": {},
    "sofort": {},
    "sunbit": {},
    "swish": {},
@@ -1204,6 +1228,9 @@
    "tax_code": {
     "nullable": true
    },
+   "tax_details": {
+    "nullable": true
+   },
    "unit_label": {
     "type": "string",
     "nullable": true
@@ -1500,6 +1527,7 @@
     "type": "string",
     "nullable": true
    },
+   "status_details": {},
    "status_transitions": {},
    "subtotal": {
     "type": "integer"
@@ -1579,12 +1607,18 @@
     "type": "array",
     "nullable": true
    },
+   "frozen_fields": {
+    "type": "array"
+   },
    "id": {
     "type": "string"
    },
    "invoice": {
     "nullable": true
    },
+   "invoicing_rules": {
+    "type": "array"
+   },
    "livemode": {
     "type": "boolean"
    },
@@ -2045,6 +2079,10 @@
     "type": "boolean",
     "nullable": true
    },
+   "allowed_payment_method_types": {
+    "type": "array",
+    "nullable": true
+   },
    "amount_subtotal": {
     "type": "integer",
     "nullable": true
@@ -2575,7 +2613,12 @@
    },
    "livemode": {
     "type": "boolean"
-   }
+   },
+   "company": {},
+   "groups": {
+    "nullable": true
+   },
+   "individual": {}
   }
  },
  "transfer": {
@@ -2583,7 +2626,6 @@
   "required": [
    "amount",
    "amount_reversed",
-   "balance_transaction",
    "created",
    "currency",
    "id",
@@ -2645,13 +2687,13 @@
  "tax_rate": {
   "type": "object",
   "required": [
-   "id",
-   "object",
    "active",
    "created",
    "display_name",
+   "id",
    "inclusive",
    "livemode",
+   "object",
    "percentage"
   ],
   "properties": {
@@ -2709,20 +2751,36 @@
    "tax_type": {
     "type": "string",
     "nullable": true
+   },
+   "effective_percentage": {
+    "type": "number",
+    "nullable": true
+   },
+   "flat_amount": {
+    "nullable": true
+   },
+   "rate_type": {
+    "enum": [
+     "flat_amount",
+     "percentage"
+    ],
+    "type": "string",
+    "nullable": true
    }
   }
  },
  "tax.calculation": {
   "type": "object",
   "required": [
-   "object",
    "amount_total",
    "currency",
    "customer_details",
-   "line_items",
+   "livemode",
+   "object",
    "tax_amount_exclusive",
    "tax_amount_inclusive",
-   "tax_breakdown"
+   "tax_breakdown",
+   "tax_date"
   ],
   "properties": {
    "id": {
@@ -2772,18 +2830,24 @@
    },
    "tax_date": {
     "type": "integer"
+   },
+   "ship_from_details": {
+    "nullable": true
    }
   }
  },
  "tax.calculation_line_item": {
   "type": "object",
   "required": [
-   "id",
-   "object",
    "amount",
    "amount_tax",
+   "id",
    "livemode",
-   "tax_behavior"
+   "object",
+   "quantity",
+   "reference",
+   "tax_behavior",
+   "tax_code"
   ],
   "properties": {
    "id": {
@@ -2827,18 +2891,27 @@
    },
    "tax_code": {
     "type": "string"
+   },
+   "metadata": {
+    "type": "object",
+    "nullable": true
+   },
+   "performance_location": {
+    "type": "string",
+    "nullable": true
    }
   }
  },
  "tax.registration": {
   "type": "object",
   "required": [
-   "id",
-   "object",
    "active_from",
    "country",
    "country_options",
+   "created",
+   "id",
    "livemode",
+   "object",
    "status"
   ],
   "properties": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/twin-stripe",
-  "version": "2.0.0",
+  "version": "2.0.2",
   "description": "Local Stripe twin — a faithful, stateful local Stripe API your real `stripe` SDK talks to unmodified. Mirror, simulate, and fork. Built on @volter/world-core.",
   "keywords": [
     "twin",
@@ -56,15 +56,15 @@
     "postpack": "node ../../../scripts/publish/prepare-publish.mjs postpack"
   },
   "dependencies": {
-    "@volter/world-ui": "0.1.0",
+    "@volter/world-ui": "0.1.2",
     "react": "^19.2.7",
     "react-dom": "^19.2.7"
   },
   "peerDependencies": {
-    "@volter/world-core": "2.0.0"
+    "@volter/world-core": "2.0.2"
   },
   "devDependencies": {
-    "@volter/world-core": "2.0.0",
+    "@volter/world-core": "2.0.2",
     "@volter/world-tooling": "0.1.0",
     "@types/bun": "^1.2.20",
     "@types/node": "^24.0.0",

package/src/index.ts

@@ -93,7 +93,7 @@ export const pack: TwinPack = {
   // one live API host — declared HERE, not in the central maps (descriptor-first exemplar (adding-a-twin.md §3);
   // the pack-facts artifact carries them to covers/inspect-project and inject.cjs).
   // NEXT_PRIVATE_STRIPE_* joined the stem list in the adoption-facts sweep 2026-08-31.
-  // `stripeconnect` is deliberately NOT claimed: the Connect area is unmodeled, so a repo
+  // `stripeconnect` is deliberately NOT claimed: no Connect-only credential stem is modeled, so a repo
   // holding only that credential is build-surface, not coverage this twin can honor.
   adoption: {
     // Stripe's official Python bindings.
@@ -101,15 +101,17 @@ export const pack: TwinPack = {
     sdks: ['stripe'], envStems: ['STRIPE', 'NEXTPRIVATESTRIPE'],
   },
   // The API and the hosted flows (src/screens): checkout.stripe.com's payment page, billing.stripe.com's customer
-  // portal, connect.stripe.com's onboarding, verify.stripe.com's identity check and the bank-linking flow Stripe.js
+  // portal, connect.stripe.com's onboarding and its OAuth endpoints (/oauth/authorize, /oauth/token, /oauth/deauthorize:
+  // src/screens/connect-oauth.tsx), verify.stripe.com's identity check and the bank-linking flow Stripe.js
   // opens: an application that sends a person to one of their urls lands in the World. dashboard.stripe.com serves the
-  // Dashboard's Public details page (src/screens/public-details.tsx), where the operator sets the name customers see;
+  // Dashboard's Public details page (src/screens/public-details.tsx), where the operator sets the name customers see,
+  // and its Connect OAuth settings (src/screens/connect-settings.tsx: the client_id, OAuth on, the redirect URIs);
   // claiming the host makes every other dashboard.stripe.com path an unclaimed path on a twinned host, refused in a
   // World rather than sent to the real Dashboard. js.stripe.com also serves
   // Stripe.js itself, the client library an application's page loads (stripe-js.ts): /v3/, /v3/stripe.js and /<release train>/stripe.js.
   hosts: [
     { host: 'api.stripe.com' }, { host: 'checkout.stripe.com', pathPattern: '^/c/pay/' }, { host: 'billing.stripe.com', pathPattern: '^/p/session/' },
-    { host: 'connect.stripe.com', pathPattern: '^/setup/' }, { host: 'dashboard.stripe.com', pathPattern: '^/settings/public/?$' }, { host: 'verify.stripe.com', pathPattern: '^/start/' }, { host: 'js.stripe.com', pathPattern: '^/v3/financial-connections/|^/v3/?$|^/(v3|[a-z]+)/stripe\\.js$' },
+    { host: 'connect.stripe.com', pathPattern: '^/setup/|^/oauth/(authorize|token|deauthorize)/?$' }, { host: 'dashboard.stripe.com', pathPattern: '^/settings/public/?$|^/(test/)?settings/connect(/onboarding-options/oauth)?/?$' }, { host: 'verify.stripe.com', pathPattern: '^/start/' }, { host: 'js.stripe.com', pathPattern: '^/v3/financial-connections/|^/v3/?$|^/(v3|[a-z]+)/stripe\\.js$' },
   ],
   // DELIVER support: signed event synthesis from twin state (`world-stripe emit`).
   emitter: stripeEmitter,

package/src/manifest.ts

@@ -567,6 +567,11 @@ export const manifest: DerivedManifest = {
       demand: '3 of 85 applications onboard connected accounts with Account Links', controls: ['Agree and submit', '← Return to platform'],
       source: 'https://docs.stripe.com/connect/hosted-onboarding',
     },
+    {
+      id: 'connect-oauth', kind: 'flow', host: 'connect.stripe.com', path: '/oauth/authorize', status: 'done',
+      demand: "Cal.com's Stripe app connects each organizer's Standard account through Connect OAuth", controls: ['Skip this form', 'Deny access'],
+      source: 'https://docs.stripe.com/connect/oauth-reference',
+    },
     {
       id: 'identity-verification', kind: 'flow', host: 'verify.stripe.com', path: '/start/{verification_session}', status: 'done',
       demand: 'a verification report is written only when a person completes this page', controls: ['Verify', 'Fail verification'],
@@ -578,9 +583,9 @@ export const manifest: DerivedManifest = {
       source: 'https://docs.stripe.com/js/financial_connections/collect_financial_connections_accounts',
     },
     {
-      id: 'dashboard', kind: 'workspace', host: 'dashboard.stripe.com', path: '/test/{section}; /settings/public', status: 'done',
-      demand: 'testers and agents inspect payments, customers and subscriptions; an operator sets the business name Checkout shows (Public details)',
-      controls: ['Business name', 'Save'], source: 'https://docs.stripe.com/dashboard/basics',
+      id: 'dashboard', kind: 'workspace', host: 'dashboard.stripe.com', path: '/test/{section}; /settings/public; /settings/connect/onboarding-options/oauth', status: 'done',
+      demand: 'testers and agents inspect payments, customers and subscriptions; an operator sets the business name Checkout shows (Public details) and a Connect platform its OAuth client_id and redirect URIs',
+      controls: ['Business name', 'Save', 'Enable OAuth for Standard accounts', 'Redirect URIs'], source: 'https://docs.stripe.com/dashboard/basics',
     },
   ],
   resources: {

package/src/screens/checkout.tsx

@@ -111,6 +111,15 @@ function afterTrial(session: Row): number {
   return subtotal - (coupon && coupon.duration !== 'once' ? applyCouponDiscount(subtotal, coupon) : 0);
 }
 
+const EMAIL = /^[^@\s]+@[^@\s]+\.[^@\s]+$/;
+
+/** The email of the session's customer when it has a valid one: "If the Customer already has a valid email set, the email
+ *  will be prefilled and not editable in Checkout" (docs.stripe.com/api/checkout/sessions/create#create_checkout_session-customer). */
+function customerEmailOf(session: Row): string | undefined {
+  const email = (session._customer as Row | undefined)?.email;
+  return typeof email === 'string' && EMAIL.test(email) ? email : undefined;
+}
+
 function page(session: Row, id: string, now: number, values: Record<string, string> = {}, error?: string): Response {
   const lines = (((session.line_items as { data?: Row[] } | undefined)?.data) ?? []).map((item) => ({
     name: String(item.description ?? 'Item'),
@@ -122,9 +131,12 @@ function page(session: Row, id: string, now: number, values: Record<string, stri
   const trial = trialOf(session, now);
   const submit = mode === 'setup' ? 'Save card' : mode === 'subscription' ? (trial ? 'Start trial' : 'Subscribe') : 'Pay';
   const trialText = trial ? trialSummary(session, trial) : undefined;
-  const contact: PaymentField[] = typeof session.customer_email === 'string'
-    ? [{ id: 'email', label: 'Email', type: 'email', autoComplete: 'email', value: session.customer_email }]
-    : [{ id: 'email', label: 'Email', type: 'email', autoComplete: 'email', placeholder: 'email@example.com', value: values.email ?? '' }];
+  const onFile = customerEmailOf(session);
+  const contact: PaymentField[] = onFile
+    ? [{ id: 'email', label: 'Email', type: 'email', autoComplete: 'email', value: onFile, readOnly: true }]
+    : typeof session.customer_email === 'string'
+      ? [{ id: 'email', label: 'Email', type: 'email', autoComplete: 'email', value: session.customer_email }]
+      : [{ id: 'email', label: 'Email', type: 'email', autoComplete: 'email', placeholder: 'email@example.com', value: values.email ?? '' }];
   const card: PaymentField[] = [
     { id: 'cardNumber', label: 'Card number', autoComplete: 'cc-number', placeholder: '1234 1234 1234 1234', value: values.cardNumber ?? '' },
     { id: 'cardExpiry', label: 'Expiration', autoComplete: 'cc-exp', placeholder: 'MM / YY', value: values.cardExpiry ?? '', format: 'card-expiry' },
@@ -191,9 +203,10 @@ export function cardAnswer(v: Record<string, string>, nowSeconds: number, charge
 }
 
 async function pay(ctx: SemanticsContext, id: string, session: Row, v: Record<string, string>): Promise<Response> {
-  const email = typeof session.customer_email === 'string' ? session.customer_email : (v.email ?? '').trim();
+  const onFile = customerEmailOf(session);
+  const email = onFile ?? (typeof session.customer_email === 'string' ? session.customer_email : (v.email ?? '').trim());
   if (session.mode !== 'setup' || !session.customer) {
-    if (!/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email)) return page(session, id, Number(ctx.now()), v, 'Your email address is incomplete.');
+    if (!EMAIL.test(email)) return page(session, id, Number(ctx.now()), v, 'Your email address is incomplete.');
   }
   // a trial charges nothing now unless a one-time price is on the first invoice
   const oneTimeDue = (((session.line_items as { data?: Row[] } | undefined)?.data) ?? []).some((it, i) => isOneTime(it, inlineOf(session, i)));
@@ -207,6 +220,8 @@ async function pay(ctx: SemanticsContext, id: string, session: Row, v: Record<st
     const customer = await created(ctx, 'customer', { id: cid, email, ...(v.billingName ? { name: v.billingName } : {}) }, { livemode: false, ...newCustomer(cid) });
     existing = { ...session, customer: customer.id };
   }
+  // "If the Customer does not have a valid email, Checkout will set the email entered during the session on the Customer" (the same page)
+  if (typeof session.customer === 'string' && !onFile && EMAIL.test(email)) await ctx.write('customer', session.customer, { email }, 'customer.update');
   const details: Row = {
     customer_details: { email, name: v.billingName || null, address: { country: v.billingCountry || null, postal_code: v.billingPostalCode || null, city: null, line1: null, line2: null, state: null }, phone: null, tax_exempt: 'none', tax_ids: [] },
     ...(existing.customer !== session.customer ? { customer: existing.customer } : {}),
@@ -246,7 +261,7 @@ export function stripeCheckoutFlow(scope: { root?: string; clock?: () => string
     if (session.status !== 'open' && (request.method === 'GET' || ctx.legal(CS, 'status', COMPLETE_OPERATION.id, String(session.status), 'complete', id, 'external'))) return gone();
     const stored = ctx.row(CS, id) ?? {};
     const coupon = (stored._discount as Row | undefined)?.coupon;
-    const full = { ...session, _subscription_data: stored._subscription_data, _price_data: stored._price_data, _merchant: merchantOf(ctx, stored), _coupon: typeof coupon === 'string' ? ctx.get('coupon', coupon) : undefined };
+    const full = { ...session, _subscription_data: stored._subscription_data, _price_data: stored._price_data, _merchant: merchantOf(ctx, stored), _coupon: typeof coupon === 'string' ? ctx.get('coupon', coupon) : undefined, _customer: typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined };
     return request.method === 'GET' ? page(full, id, Number(ctx.now())) : pay(ctx, id, full, values);
   };
 }