@volter/twin-stripe 2.0.37 → 3.0.0

package/dist/src/screens/billing-portal.d.ts

@@ -0,0 +1,3 @@
+import type { HandlerContext } from '@volter/world-core';
+/** billing.stripe.com's portal pages, or undefined for any other request. */
+export declare function screen(ctx: HandlerContext): Promise<Response>;

package/dist/src/screens/{portal.js → billing-portal.js}

@@ -1,35 +1,11 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// STRIPE'S CUSTOMER PORTAL — a hosted flow (docs/contributing/architecture.md, "Screens"): an application creates
-// a portal session for its customer and sends them to the session's `url` at billing.stripe.com/p/session/{id};
-// there the customer sees their plans, payment method, billing details and invoices, and makes the moves the
-// portal configuration allows, then returns to return_url (docs.stripe.com/customer-management). Canceling is the
-// customer's own move (the subscription machine's external actor): at the period's end by default, or at once
-// when the configuration's subscription_cancel.mode says immediately, and a plan set to cancel can be renewed.
-// Each move goes through the same handler context the API's handlers use, so the application sees it as it
-// would from Stripe: on the subscription, and in its events. Authored from @volter/world-ui's portal piece under
-// Stripe's skin; nothing of Stripe's page is copied.
-//
-// The customer also replaces their card, which becomes the default for their invoices and subscriptions, and pays
-// an open invoice with it, which makes a subscription waiting on it (past_due) active again
-// (docs.stripe.com/customer-management/configure-portal: payment_method_update, invoice_history).
-//
-// Where the documentation stops and the twin decides: a session's configuration that the World never created
-// (the account's default) enables cancellation at period end, updating the payment method and invoice history;
-// changing the plan from the portal is not offered yet. A new card is saved without a charge, so a card that
-// declines only when charged (4000000000000341) is saved and declines when the invoice is paid.
-import { semanticsContext } from '@volter/world-core';
 import { flowPage, Portal, PORTAL_CSS } from '@volter/world-ui';
-import surface from '../generated/surface.gen.json' with { type: 'json' };
-import { manifest } from "../manifest.js";
-import { payerOf, payOpenInvoice } from "../semantics/renewals.js";
-import { afterSuccessOf } from "../semantics/after-payment.js";
-import { created } from "../semantics/shared.js";
-import { publicBusinessName } from "../stripe-shared.js";
-import { declineFor, paymentMethodSubObject, PLATFORM_ACCOUNT_ID } from "../stripe-twin.js";
-import { cardAnswer, COUNTRIES, money } from "./checkout.js";
-import { formOf } from "./consent-skin.js";
+import { publicBusinessName } from "../engine/display.js";
+import { declineFor, nowUnix, paymentMethodSubObject, PLATFORM_ACCOUNT_ID } from "../engine/stripe.js";
+import { cardAnswer, COUNTRIES, formOf, money, notFound } from "./shared.js";
+import { afterSuccessOf, created, payerOf, payOpenInvoice } from "../semantics/shared.js";
 const SUB = 'subscription';
-const PORTAL_OPERATION = surface.operations.find((o) => o.id === 'PostBillingPortalSessions');
+const PORTAL_OPERATION = { id: 'PostBillingPortalSessions' };
 // Stripe's skin: its type, its purple accent, the merchant's side tinted.
 const SKIN = `
 body { color: #1a1a1a; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Ubuntu, sans-serif; }
@@ -100,7 +76,7 @@ function page(ctx, id, session, problem) {
         }))
         : [];
     const back = typeof session.return_url === 'string' ? session.return_url : undefined;
-    // the portal shows the public business name (stripe-shared.ts, publicBusinessName) of the session's on_behalf_of
+    // the portal shows the public business name (../engine/display.ts, publicBusinessName) of the session's on_behalf_of
     // account ("Use the Accounts API to modify the on_behalf_of account's branding settings, which the portal displays",
     // docs.stripe.com/api/customer_portal/sessions/object), else of the account it was made on (Stripe-Account), else the
     // platform's
@@ -140,7 +116,7 @@ async function move(ctx, id, session, subscription, kind) {
     const features = featuresOf(ctx, session);
     if (!features.cancel.enabled)
         return gone();
-    const now = Number(ctx.now());
+    const now = nowUnix(ctx.occurredAt);
     const details = { comment: null, feedback: null, reason: 'cancellation_requested' };
     if (features.cancel.mode === 'at_period_end') {
         await ctx.write(SUB, subscription, { cancel_at_period_end: true, cancel_at: sub.current_period_end ?? null, canceled_at: now, cancellation_details: details }, 'subscription.update');
@@ -156,7 +132,7 @@ async function move(ctx, id, session, subscription, kind) {
 async function updatePaymentMethod(ctx, id, session, v) {
     if (!featuresOf(ctx, session).paymentMethod)
         return gone();
-    const refused = cardAnswer(v, Number(ctx.now()), false);
+    const refused = cardAnswer(v, nowUnix(ctx.occurredAt), false);
     if (refused)
         return page(ctx, id, session, { error: refused, values: v });
     const customer = String(session.customer);
@@ -191,26 +167,24 @@ async function payInvoice(ctx, id, session, invoiceId) {
     return new Response(null, { status: 303, headers: { location: `/p/session/${id}` } });
 }
 /** billing.stripe.com's portal pages, or undefined for any other request. */
-export function stripePortalFlow(scope) {
-    return async (request) => {
-        const m = /^\/p\/session\/(bps_[A-Za-z0-9_]+)(?:\/(cancel|renew|payment_method|pay))?\/?$/.exec(new URL(request.url).pathname);
-        if (!m)
-            return undefined;
-        const [, id, kind] = m;
-        if ((kind && request.method !== 'POST') || (!kind && request.method !== 'GET'))
-            return undefined;
-        // the form is read before the context, which reads the request's body itself
-        const form = kind ? await formOf(request.clone()) : {};
-        const ctx = await semanticsContext(manifest, request, PORTAL_OPERATION, scope);
-        const session = ctx.get('billing_portal.session', id);
-        if (!session)
-            return gone();
-        if (!kind)
-            return page(ctx, id, session);
-        if (kind === 'payment_method')
-            return updatePaymentMethod(ctx, id, session, form);
-        if (kind === 'pay')
-            return payInvoice(ctx, id, session, form.invoice ?? '');
-        return move(ctx, id, session, form.subscription ?? '', kind);
-    };
+export async function screen(ctx) {
+    const request = ctx.call.request;
+    const m = /^\/p\/session\/(bps_[A-Za-z0-9_]+)(?:\/(cancel|renew|payment_method|pay))?\/?$/.exec(new URL(request.url).pathname);
+    if (!m)
+        return notFound();
+    const [, id, kind] = m;
+    if ((kind && request.method !== 'POST') || (!kind && request.method !== 'GET'))
+        return notFound();
+    // the form is read before the context, which reads the request's body itself
+    const form = kind ? await formOf(request.clone()) : {};
+    const session = ctx.get('billing_portal.session', id);
+    if (!session)
+        return gone();
+    if (!kind)
+        return page(ctx, id, session);
+    if (kind === 'payment_method')
+        return updatePaymentMethod(ctx, id, session, form);
+    if (kind === 'pay')
+        return payInvoice(ctx, id, session, form.invoice ?? '');
+    return move(ctx, id, session, form.subscription ?? '', kind);
 }

package/dist/src/screens/checkout.d.ts

@@ -1,31 +1,2 @@
-import { type SemanticsContext } from '@volter/world-core';
-import { type Row } from '../semantics/shared.js';
-export declare const money: (minor: unknown, currency: unknown) => string;
-export declare const COUNTRIES: {
-    value: string;
-    label: string;
-}[];
-/** The expiry as the customer typed it. Stripe's field formats itself as it is typed: the digits `1230` read `12 / 30`,
- *  and a first digit above 1 is a month on its own (`5` reads `05 / `), so a person types the digits straight through
- *  (Checkout's own field, seen on checkout.stripe.com; docs.stripe.com/payments/checkout names no format to type). The
- *  page's script (@volter/world-ui Payment, `format: 'card-expiry'`) shows it formatted; this reads what is posted either
- *  way: `MM / YY`, `MM/YYYY`, or the bare digits `MMYY`, `MYY` (`530`) and `MMYYYY`; a month past 12 is read, and refused
- *  as invalid by cardAnswer. */
-export declare function parseExpiry(raw: string): {
-    month: number;
-    year: number;
-} | undefined;
-/** The card's answer: undefined when it pays, else what Checkout says under the button. */
-export declare function cardAnswer(v: Record<string, string>, nowSeconds: number, chargesNow: boolean): string | undefined;
-/** checkout.stripe.com's pages, or undefined for any other request. */
-/** The name the page shows: the session's own `branding_settings.display_name` where the create set one, else the
- *  public business name (stripe-shared.ts, publicBusinessName) of the account whose brand Checkout uses: "Checkout uses
- *  the brand settings of the connected account for destination charges with on_behalf_of and for platforms performing
- *  direct charges" (a session made with Stripe-Account), and otherwise the platform's; "If you omit a field in
- *  branding_settings, Checkout applies the default value from the Dashboard"
- *  (docs.stripe.com/payments/checkout/customization/appearance). */
-export declare function merchantOf(ctx: SemanticsContext, stored: Row): string;
-export declare function stripeCheckoutFlow(scope: {
-    root?: string;
-    clock?: () => string;
-}): (request: Request) => Promise<Response | undefined>;
+import type { HandlerContext } from '@volter/world-core';
+export declare function screen(ctx: HandlerContext): Promise<Response>;

package/dist/src/screens/checkout.js

@@ -1,57 +1,13 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// STRIPE CHECKOUT — a hosted flow (docs/contributing/architecture.md, "Screens"): an application creates a
-// Checkout Session and sends its customer to the session's `url` at checkout.stripe.com/c/pay/{id}; the
-// customer pays there, the session completes (what the payment made is linked on it and
-// checkout.session.completed is delivered), and Checkout redirects to success_url with
-// {CHECKOUT_SESSION_ID} filled in, or the customer goes back to cancel_url
-// (docs.stripe.com/payments/checkout/how-checkout-works). Paying is a move no API call makes: the external
-// actor's move on the session's machine, taken here through the same handler context the API's handlers use.
-// The page is authored from @volter/world-ui's payment piece under Stripe's skin, nothing of Stripe's page
-// copied; its fields carry the ids tests of Checkout fill (email, cardNumber, cardExpiry, cardCvc,
-// billingName, billingCountry, billingPostalCode) and its button the test id Stripe gives it.
-//
-// Where the documentation stops and the twin decides: test cards answer as docs.stripe.com/testing lists
-// (4242… pays; 4000000000000002 declines; …9995 insufficient funds; …0069 expired; …0127 incorrect CVC;
-// …0341 is saved but declines when charged, so it declines on a page that charges now and is saved on one that
-// only sets the card up: setup mode, or a subscription's trial);
-// any other number that passes the Luhn check pays, and a card that asks for authentication pays without
-// the challenge. A subscription session with no customer makes one from the email, as Stripe does.
-import { semanticsContext } from '@volter/world-core';
 import { flowPage, Payment, PAYMENT_CSS } from '@volter/world-ui';
-import surface from '../generated/surface.gen.json' with { type: 'json' };
-import { manifest } from "../manifest.js";
-import { completeSession, isOneTime } from "../semantics/checkout.js";
-import { newCustomer } from "../semantics/customers.js";
-import { created } from "../semantics/shared.js";
-import { publicBusinessName } from "../stripe-shared.js";
-import { applyCouponDiscount, PLATFORM_ACCOUNT_ID, resolveTrial } from "../stripe-twin.js";
-import { formOf } from "./consent-skin.js";
+import { isOneTime } from "../engine/checkout.js";
+import { newCustomer } from "../engine/customers.js";
+import { publicBusinessName } from "../engine/display.js";
+import { applyCouponDiscount, nowUnix, PLATFORM_ACCOUNT_ID, resolveTrial } from "../engine/stripe.js";
+import { cardAnswer, COUNTRIES, formOf, money, notFound, parseExpiry } from "./shared.js";
+import { completeSession, created } from "../semantics/shared.js";
 const CS = 'checkout.session';
-const COMPLETE_OPERATION = surface.operations.find((o) => o.id === 'PostCheckoutSessionsSession');
-const DECLINES = {
-    '4000000000000002': 'Your card was declined.',
-    '4000000000009995': 'Your card has insufficient funds.',
-    '4000000000000069': 'Your card has expired.',
-    '4000000000000127': "Your card's security code is incorrect.",
-};
-const luhn = (digits) => {
-    let sum = 0;
-    for (let i = 0; i < digits.length; i++) {
-        let d = Number(digits[digits.length - 1 - i]);
-        if (i % 2 === 1) {
-            d *= 2;
-            if (d > 9)
-                d -= 9;
-        }
-        sum += d;
-    }
-    return digits.length >= 12 && sum % 10 === 0;
-};
-export const money = (minor, currency) => {
-    const c = typeof currency === 'string' ? currency.toUpperCase() : 'USD';
-    const zeroDecimal = ['JPY', 'KRW', 'VND', 'CLP', 'ISK', 'UGX', 'XAF', 'XOF'].includes(c);
-    return new Intl.NumberFormat('en-US', { style: 'currency', currency: c }).format((Number(minor) || 0) / (zeroDecimal ? 1 : 100));
-};
+const COMPLETE_OPERATION = { id: 'PostCheckoutSessionsSession' };
 // Stripe's skin: its type, its blue submit, the summary on a tinted half.
 const SKIN = `
 body { color: #1a1a1a; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Ubuntu, sans-serif; }
@@ -61,7 +17,6 @@ body { color: #1a1a1a; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI
 .pay-error { color: #df1b41; }
 .pay-submit { background: #0074d4; color: #ffffff; }
 `;
-export const COUNTRIES = [['US', 'United States'], ['GB', 'United Kingdom'], ['CA', 'Canada'], ['DE', 'Germany'], ['FR', 'France'], ['AU', 'Australia'], ['JP', 'Japan']].map(([value, label]) => ({ value: value, label: label }));
 /** A subscription session's trial, when its subscription_data gives one: `trial_period_days`, or `trial_end`
  *  (docs.stripe.com/payments/checkout/free-trials), as resolveTrial makes the subscription's at completion. */
 function trialOf(session, now) {
@@ -97,7 +52,7 @@ function trialSummary(session, trial) {
 }
 /** What each period after the trial charges, as the subscription's invoices will: its recurring line items (a one-time
  *  item is on the first invoice only, semantics/checkout.ts isOneTime), under the session's coupon unless the coupon is `once`, which the trial's own $0
- *  invoice takes (semantics/renewals.ts draftSubscriptionInvoice). */
+ *  invoice takes (../engine/renewals.ts draftSubscriptionInvoice). */
 function afterTrial(session) {
     const items = ((session.line_items?.data) ?? []).filter((it, i) => !isOneTime(it, inlineOf(session, i)));
     const subtotal = items.reduce((sum, it) => sum + (Number(it.amount_subtotal) || 0), 0);
@@ -144,60 +99,19 @@ function page(session, id, now, values = {}, error) {
     });
 }
 const gone = () => flowPage({ title: 'Checkout', status: 404, css: [PAYMENT_CSS, SKIN], body: _jsx("main", { className: "pay-form", children: _jsx("h1", { children: "This Checkout Session is no longer active." }) }) });
-/** Cards that are saved but decline when charged. */
-const DECLINES_WHEN_CHARGED = { '4000000000000341': 'Your card was declined.' };
-/** The expiry as the customer typed it. Stripe's field formats itself as it is typed: the digits `1230` read `12 / 30`,
- *  and a first digit above 1 is a month on its own (`5` reads `05 / `), so a person types the digits straight through
- *  (Checkout's own field, seen on checkout.stripe.com; docs.stripe.com/payments/checkout names no format to type). The
- *  page's script (@volter/world-ui Payment, `format: 'card-expiry'`) shows it formatted; this reads what is posted either
- *  way: `MM / YY`, `MM/YYYY`, or the bare digits `MMYY`, `MYY` (`530`) and `MMYYYY`; a month past 12 is read, and refused
- *  as invalid by cardAnswer. */
-export function parseExpiry(raw) {
-    const split = /^\s*(\d{1,2})\s*\/\s*(\d{2}|\d{4})\s*$/.exec(raw);
-    const digits = raw.replace(/\s/g, '');
-    const bare = split ? undefined : /^(\d{2})(\d{2}|\d{4})$/.exec(digits) ?? /^([2-9])(\d{2})$/.exec(digits);
-    const m = split ?? bare;
-    if (!m)
-        return undefined;
-    return { month: Number(m[1]), year: m[2].length === 2 ? 2000 + Number(m[2]) : Number(m[2]) };
-}
-/** The card's answer: undefined when it pays, else what Checkout says under the button. */
-export function cardAnswer(v, nowSeconds, chargesNow) {
-    const digits = (v.cardNumber ?? '').replace(/\D/g, '');
-    if (!digits)
-        return 'Your card number is incomplete.';
-    if (DECLINES[digits])
-        return DECLINES[digits];
-    if (chargesNow && DECLINES_WHEN_CHARGED[digits])
-        return DECLINES_WHEN_CHARGED[digits];
-    if (!luhn(digits))
-        return 'Your card number is invalid.';
-    const exp = parseExpiry(v.cardExpiry ?? '');
-    if (!exp)
-        return "Your card's expiration date is incomplete.";
-    const { month, year } = exp;
-    if (month < 1 || month > 12)
-        return "Your card's expiration date is invalid.";
-    const now = new Date(nowSeconds * 1000);
-    if (year < now.getUTCFullYear() || (year === now.getUTCFullYear() && month < now.getUTCMonth() + 1))
-        return "Your card's expiration year is in the past.";
-    if (!/^\d{3,4}$/.test(v.cardCvc ?? ''))
-        return "Your card's security code is incomplete.";
-    return undefined;
-}
 async function pay(ctx, id, session, v) {
     const onFile = customerEmailOf(session);
     const email = onFile ?? (typeof session.customer_email === 'string' ? session.customer_email : (v.email ?? '').trim());
     if (session.mode !== 'setup' || !session.customer) {
         if (!EMAIL.test(email))
-            return page(session, id, Number(ctx.now()), v, 'Your email address is incomplete.');
+            return page(session, id, nowUnix(ctx.occurredAt), v, 'Your email address is incomplete.');
     }
     // a trial charges nothing now unless a one-time price is on the first invoice
     const oneTimeDue = ((session.line_items?.data) ?? []).some((it, i) => isOneTime(it, inlineOf(session, i)));
-    const chargesNow = session.mode === 'payment' || (session.mode === 'subscription' && (!trialOf(session, Number(ctx.now())) || oneTimeDue));
-    const refused = cardAnswer(v, Number(ctx.now()), chargesNow);
+    const chargesNow = session.mode === 'payment' || (session.mode === 'subscription' && (!trialOf(session, nowUnix(ctx.occurredAt)) || oneTimeDue));
+    const refused = cardAnswer(v, nowUnix(ctx.occurredAt), chargesNow);
     if (refused)
-        return page(session, id, Number(ctx.now()), v, refused);
+        return page(session, id, nowUnix(ctx.occurredAt), v, refused);
     let existing = session;
     // Checkout always makes a customer for a subscription; a payment makes one only when the session asks
     if (!session.customer && (session.mode === 'subscription' || session.customer_creation === 'always')) {
@@ -219,37 +133,34 @@ async function pay(ctx, id, session, v) {
     const to = String(session.success_url).replaceAll('{CHECKOUT_SESSION_ID}', id);
     return new Response(null, { status: 303, headers: { location: to } });
 }
-/** checkout.stripe.com's pages, or undefined for any other request. */
 /** The name the page shows: the session's own `branding_settings.display_name` where the create set one, else the
- *  public business name (stripe-shared.ts, publicBusinessName) of the account whose brand Checkout uses: "Checkout uses
+ *  public business name (../engine/display.ts, publicBusinessName) of the account whose brand Checkout uses: "Checkout uses
  *  the brand settings of the connected account for destination charges with on_behalf_of and for platforms performing
  *  direct charges" (a session made with Stripe-Account), and otherwise the platform's; "If you omit a field in
  *  branding_settings, Checkout applies the default value from the Dashboard"
  *  (docs.stripe.com/payments/checkout/customization/appearance). */
-export function merchantOf(ctx, stored) {
+function merchantOf(ctx, stored) {
     const brand = stored._branding_settings?.display_name;
     const behalf = stored._payment_intent_data?.on_behalf_of ?? stored._subscription_data?.on_behalf_of;
     const account = typeof behalf === 'string' ? behalf : typeof stored._brand_account === 'string' ? stored._brand_account : PLATFORM_ACCOUNT_ID;
     return typeof brand === 'string' && brand.trim() ? brand : publicBusinessName(ctx.get('account', account));
 }
-export function stripeCheckoutFlow(scope) {
-    return async (request) => {
-        const m = /^\/c\/pay\/(cs_[A-Za-z0-9_]+)\/?$/.exec(new URL(request.url).pathname);
-        if (!m || (request.method !== 'GET' && request.method !== 'POST'))
-            return undefined;
-        const id = m[1];
-        // the form is read before the context, which reads the request's body itself
-        const values = request.method === 'POST' ? await formOf(request.clone()) : {};
-        const ctx = await semanticsContext(manifest, request, COMPLETE_OPERATION, scope);
-        const session = ctx.get(CS, id);
-        if (!session)
-            return gone();
-        // an ended session's page is gone; paying on one is the customer's move the machine refuses
-        if (session.status !== 'open' && (request.method === 'GET' || ctx.legal(CS, 'status', COMPLETE_OPERATION.id, String(session.status), 'complete', id, 'external')))
-            return gone();
-        const stored = ctx.row(CS, id) ?? {};
-        const coupon = stored._discount?.coupon;
-        const full = { ...session, _subscription_data: stored._subscription_data, _price_data: stored._price_data, _merchant: merchantOf(ctx, stored), _coupon: typeof coupon === 'string' ? ctx.get('coupon', coupon) : undefined, _customer: typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined };
-        return request.method === 'GET' ? page(full, id, Number(ctx.now())) : pay(ctx, id, full, values);
-    };
+export async function screen(ctx) {
+    const request = ctx.call.request;
+    const m = /^\/c\/pay\/(cs_[A-Za-z0-9_]+)\/?$/.exec(new URL(request.url).pathname);
+    if (!m || (request.method !== 'GET' && request.method !== 'POST'))
+        return notFound();
+    const id = m[1];
+    // the form is read before the context, which reads the request's body itself
+    const values = request.method === 'POST' ? await formOf(request.clone()) : {};
+    const session = ctx.get(CS, id);
+    if (!session)
+        return gone();
+    // an ended session's page is gone; paying on one is the customer's move the machine refuses
+    if (session.status !== 'open' && (request.method === 'GET' || ctx.legal(CS, 'status', COMPLETE_OPERATION.id, String(session.status), 'complete', id, 'external')))
+        return gone();
+    const stored = ctx.row(CS, id) ?? {};
+    const coupon = stored._discount?.coupon;
+    const full = { ...session, _subscription_data: stored._subscription_data, _price_data: stored._price_data, _merchant: merchantOf(ctx, stored), _coupon: typeof coupon === 'string' ? ctx.get('coupon', coupon) : undefined, _customer: typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined };
+    return request.method === 'GET' ? page(full, id, nowUnix(ctx.occurredAt)) : pay(ctx, id, full, values);
 }

package/dist/src/screens/connect-oauth.d.ts

@@ -1,27 +1,3 @@
-import { type SemanticsContext } from '@volter/world-core';
-/** A code "expires in 5 minutes". */
-export declare const CODE_TTL_SECONDS = 300;
-/** One connection per connected account (the twin's one platform): its scope, tokens, and whether it was revoked. */
-export declare const CONNECTIONS = "_oauth_connection";
-type Scoped = {
-    root?: string;
-    clock?: () => string;
-};
-/** Whether a connected account's OAuth connection to the platform was revoked (deauthorized, or its code reused). */
-export declare function connectionRevoked(ctx: SemanticsContext, account: string): boolean;
-/** The connected account an OAuth key acts as — the connection's current access_token (sk_test_oauth_…) or its
- *  stripe_publishable_key (pk_test_oauth_…) — with the scope it was issued; undefined for any other key, and null for an
- *  OAuth-shaped key no live connection holds (revoked, replaced by a refresh, or never issued). */
-export declare function oauthKeyAccount(ctx: SemanticsContext, key: string): {
-    account: string;
-    scope: string;
-} | null | undefined;
-/** The prefill the request carries, invalid values silently dropped (docs.stripe.com/connect/oauth-reference). Only
- *  what the new account's object shows the platform, or the page shows the person, is read: the person's birth date and
- *  the business address are the account application's, which the twin does not model (the test-mode skip). */
-export declare function prefill(q: URLSearchParams): Record<string, string>;
-/** A key shown the way Stripe's errors show one: its prefix and its last four. */
-export declare const redactKey: (key: string) => string;
-/** connect.stripe.com's OAuth endpoints, or undefined for any other request. */
-export declare function stripeConnectOAuthFlow(scope: Scoped): (request: Request) => Promise<Response | undefined>;
-export {};
+import type { HandlerContext } from '@volter/world-core';
+/** connect.stripe.com's OAuth endpoints; Stripe's 404 for anything else there. */
+export declare function screen(ctx: HandlerContext): Promise<Response>;