@volter/twin-stripe 2.0.38 → 3.0.1

package/dist/src/screens/billing-portal.d.ts

@@ -0,0 +1,3 @@
+import type { HandlerContext } from '@volter/world-core';
+/** billing.stripe.com's portal pages, or undefined for any other request. */
+export declare function screen(ctx: HandlerContext): Promise<Response>;

package/dist/src/screens/{portal.js → billing-portal.js}

@@ -1,35 +1,11 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// STRIPE'S CUSTOMER PORTAL — a hosted flow (docs/contributing/architecture.md, "Screens"): an application creates
-// a portal session for its customer and sends them to the session's `url` at billing.stripe.com/p/session/{id};
-// there the customer sees their plans, payment method, billing details and invoices, and makes the moves the
-// portal configuration allows, then returns to return_url (docs.stripe.com/customer-management). Canceling is the
-// customer's own move (the subscription machine's external actor): at the period's end by default, or at once
-// when the configuration's subscription_cancel.mode says immediately, and a plan set to cancel can be renewed.
-// Each move goes through the same handler context the API's handlers use, so the application sees it as it
-// would from Stripe: on the subscription, and in its events. Authored from @volter/world-ui's portal piece under
-// Stripe's skin; nothing of Stripe's page is copied.
-//
-// The customer also replaces their card, which becomes the default for their invoices and subscriptions, and pays
-// an open invoice with it, which makes a subscription waiting on it (past_due) active again
-// (docs.stripe.com/customer-management/configure-portal: payment_method_update, invoice_history).
-//
-// Where the documentation stops and the twin decides: a session's configuration that the World never created
-// (the account's default) enables cancellation at period end, updating the payment method and invoice history;
-// changing the plan from the portal is not offered yet. A new card is saved without a charge, so a card that
-// declines only when charged (4000000000000341) is saved and declines when the invoice is paid.
-import { semanticsContext } from '@volter/world-core';
 import { flowPage, Portal, PORTAL_CSS } from '@volter/world-ui';
-import surface from '../generated/surface.gen.json' with { type: 'json' };
-import { manifest } from "../manifest.js";
-import { payerOf, payOpenInvoice } from "../semantics/renewals.js";
-import { afterSuccessOf } from "../semantics/after-payment.js";
-import { created } from "../semantics/shared.js";
-import { publicBusinessName } from "../stripe-shared.js";
-import { declineFor, paymentMethodSubObject, PLATFORM_ACCOUNT_ID } from "../stripe-twin.js";
-import { cardAnswer, COUNTRIES, money } from "./checkout.js";
-import { formOf } from "./consent-skin.js";
+import { publicBusinessName } from "../engine/display.js";
+import { declineFor, nowUnix, paymentMethodSubObject, PLATFORM_ACCOUNT_ID } from "../engine/stripe.js";
+import { cardAnswer, COUNTRIES, formOf, money, notFound } from "./shared.js";
+import { resourceView, afterSuccessOf, created, payerOf, payOpenInvoice } from "../semantics/shared.js";
 const SUB = 'subscription';
-const PORTAL_OPERATION = surface.operations.find((o) => o.id === 'PostBillingPortalSessions');
+const PORTAL_OPERATION = { id: 'PostBillingPortalSessions' };
 // Stripe's skin: its type, its purple accent, the merchant's side tinted.
 const SKIN = `
 body { color: #1a1a1a; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Ubuntu, sans-serif; }
@@ -70,7 +46,7 @@ function planOf(ctx, sub) {
 function page(ctx, id, session, problem) {
     const features = featuresOf(ctx, session);
     const customer = ctx.get('customer', String(session.customer)) ?? {};
-    const subs = ctx.rows(SUB).filter((s) => s.customer === session.customer && s.status !== 'canceled' && s.status !== 'incomplete_expired');
+    const subs = ctx.rows(SUB).map((s) => ctx.expand(SUB, s)).filter((s) => s.customer === session.customer && s.status !== 'canceled' && s.status !== 'incomplete_expired');
     const plans = subs.map((s) => {
         const plan = planOf(ctx, s);
         const ending = s.cancel_at_period_end === true;
@@ -100,7 +76,7 @@ function page(ctx, id, session, problem) {
         }))
         : [];
     const back = typeof session.return_url === 'string' ? session.return_url : undefined;
-    // the portal shows the public business name (stripe-shared.ts, publicBusinessName) of the session's on_behalf_of
+    // the portal shows the public business name (../engine/display.ts, publicBusinessName) of the session's on_behalf_of
     // account ("Use the Accounts API to modify the on_behalf_of account's branding settings, which the portal displays",
     // docs.stripe.com/api/customer_portal/sessions/object), else of the account it was made on (Stripe-Account), else the
     // platform's
@@ -129,7 +105,7 @@ function page(ctx, id, session, problem) {
 }
 /** The customer's move on one of their subscriptions, then back to the portal. */
 async function move(ctx, id, session, subscription, kind) {
-    const sub = ctx.get(SUB, subscription);
+    const sub = resourceView(ctx, SUB, subscription);
     if (!sub || sub.customer !== session.customer || sub.status === 'canceled')
         return gone();
     const back = new Response(null, { status: 303, headers: { location: `/p/session/${id}` } });
@@ -140,7 +116,7 @@ async function move(ctx, id, session, subscription, kind) {
     const features = featuresOf(ctx, session);
     if (!features.cancel.enabled)
         return gone();
-    const now = Number(ctx.now());
+    const now = nowUnix(ctx.occurredAt);
     const details = { comment: null, feedback: null, reason: 'cancellation_requested' };
     if (features.cancel.mode === 'at_period_end') {
         await ctx.write(SUB, subscription, { cancel_at_period_end: true, cancel_at: sub.current_period_end ?? null, canceled_at: now, cancellation_details: details }, 'subscription.update');
@@ -156,7 +132,7 @@ async function move(ctx, id, session, subscription, kind) {
 async function updatePaymentMethod(ctx, id, session, v) {
     if (!featuresOf(ctx, session).paymentMethod)
         return gone();
-    const refused = cardAnswer(v, Number(ctx.now()), false);
+    const refused = cardAnswer(v, nowUnix(ctx.occurredAt), false);
     if (refused)
         return page(ctx, id, session, { error: refused, values: v });
     const customer = String(session.customer);
@@ -170,7 +146,7 @@ async function updatePaymentMethod(ctx, id, session, v) {
     });
     const holder = ctx.get('customer', customer) ?? {};
     await ctx.write('customer', customer, { invoice_settings: { ...(holder.invoice_settings ?? {}), default_payment_method: pm.id } }, 'customer.update');
-    for (const sub of ctx.rows(SUB).filter((s) => s.customer === customer && s.status !== 'canceled' && s.status !== 'incomplete_expired')) {
+    for (const sub of ctx.rows(SUB).map((s) => ctx.expand(SUB, s)).filter((s) => s.customer === customer && s.status !== 'canceled' && s.status !== 'incomplete_expired')) {
         await ctx.write(SUB, String(sub.id), { default_payment_method: pm.id }, 'subscription.update');
     }
     return new Response(null, { status: 303, headers: { location: `/p/session/${id}` } });
@@ -180,7 +156,7 @@ async function payInvoice(ctx, id, session, invoiceId) {
     const inv = ctx.get('invoice', invoiceId);
     if (!inv || inv.customer !== session.customer || inv.status !== 'open')
         return gone();
-    const sub = typeof inv.subscription === 'string' ? ctx.get(SUB, inv.subscription) : undefined;
+    const sub = typeof inv.subscription === 'string' ? resourceView(ctx, SUB, inv.subscription) : undefined;
     const holder = ctx.get('customer', String(session.customer)) ?? {};
     const pm = (sub ? payerOf(ctx, sub) : undefined) ?? holder.invoice_settings?.default_payment_method;
     if (!pm)
@@ -191,26 +167,24 @@ async function payInvoice(ctx, id, session, invoiceId) {
     return new Response(null, { status: 303, headers: { location: `/p/session/${id}` } });
 }
 /** billing.stripe.com's portal pages, or undefined for any other request. */
-export function stripePortalFlow(scope) {
-    return async (request) => {
-        const m = /^\/p\/session\/(bps_[A-Za-z0-9_]+)(?:\/(cancel|renew|payment_method|pay))?\/?$/.exec(new URL(request.url).pathname);
-        if (!m)
-            return undefined;
-        const [, id, kind] = m;
-        if ((kind && request.method !== 'POST') || (!kind && request.method !== 'GET'))
-            return undefined;
-        // the form is read before the context, which reads the request's body itself
-        const form = kind ? await formOf(request.clone()) : {};
-        const ctx = await semanticsContext(manifest, request, PORTAL_OPERATION, scope);
-        const session = ctx.get('billing_portal.session', id);
-        if (!session)
-            return gone();
-        if (!kind)
-            return page(ctx, id, session);
-        if (kind === 'payment_method')
-            return updatePaymentMethod(ctx, id, session, form);
-        if (kind === 'pay')
-            return payInvoice(ctx, id, session, form.invoice ?? '');
-        return move(ctx, id, session, form.subscription ?? '', kind);
-    };
+export async function screen(ctx) {
+    const request = ctx.call.request;
+    const m = /^\/p\/session\/(bps_[A-Za-z0-9_]+)(?:\/(cancel|renew|payment_method|pay))?\/?$/.exec(new URL(request.url).pathname);
+    if (!m)
+        return notFound();
+    const [, id, kind] = m;
+    if ((kind && request.method !== 'POST') || (!kind && request.method !== 'GET'))
+        return notFound();
+    // the form is read before the context, which reads the request's body itself
+    const form = kind ? await formOf(request.clone()) : {};
+    const session = ctx.get('billing_portal.session', id);
+    if (!session)
+        return gone();
+    if (!kind)
+        return page(ctx, id, session);
+    if (kind === 'payment_method')
+        return updatePaymentMethod(ctx, id, session, form);
+    if (kind === 'pay')
+        return payInvoice(ctx, id, session, form.invoice ?? '');
+    return move(ctx, id, session, form.subscription ?? '', kind);
 }

package/dist/src/screens/checkout-js.d.ts

@@ -0,0 +1,2 @@
+import type { HandlerContext } from '@volter/world-core';
+export declare function screen(ctx: HandlerContext): Promise<Response>;

package/dist/src/screens/checkout-js.js

@@ -0,0 +1,84 @@
+import { newCustomer } from "../engine/customers.js";
+import { CS } from "../engine/checkout.js";
+import { applyCouponDiscount, nowUnix, resolveTrial } from "../engine/stripe.js";
+import { cardAnswer, parseExpiry } from "./shared.js";
+import { completeSession, discountOf, created } from "../semantics/shared.js";
+function amount(value, currency) {
+    return { amount: new Intl.NumberFormat('en-US', { style: 'currency', currency }).format(value / 100), minorUnitsAmount: value };
+}
+// source: archive:https://registry.npmjs.org/@stripe/stripe-js/-/stripe-js-8.6.0.tgz#sha256=13e61419e9076ab440cc636e34d3ea5df3fc62bbf2d6a80d3fd718e8cd47f0a2!/package/dist/stripe-js/checkout.d.ts "export interface StripeCheckoutSession"
+// The SDK publishes its contract, not its private HTTP wire. This authored payment_pages wire uses the same session store and completion as hosted Checkout.
+function view(ctx, session) {
+    const currency = String(session.currency ?? 'usd');
+    const lines = (session.line_items?.data ?? []);
+    const stored = ctx.row(CS, String(session.id)) ?? session;
+    const trial = session.mode === 'subscription' ? resolveTrial(stored._subscription_data ?? {}, nowUnix(ctx.occurredAt)) : undefined;
+    const customer = typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined;
+    const discount = stored._discount;
+    const promotion = typeof discount?.promotion_code === 'string' ? ctx.get('promotion_code', discount.promotion_code) : undefined;
+    const zero = amount(0, currency);
+    return {
+        id: session.id, billingAddress: null, businessName: null, canConfirm: session.status === 'open', currency,
+        currencyOptions: null, discountAmounts: promotion ? [{ ...amount(Number(session.total_details?.amount_discount ?? 0), currency), promotionCode: promotion.code }] : [],
+        email: customer?.email ?? session.customer_email ?? null, lastPaymentError: null,
+        lineItems: lines.map(line => ({ id: line.id, name: line.description, quantity: line.quantity, unitAmount: amount(Number(line.amount_subtotal) / Number(line.quantity || 1), currency), total: amount(Number(line.amount_total), currency) })),
+        livemode: false, minorUnitsAmountDivisor: 100, phoneNumber: null,
+        recurring: session.mode === 'subscription' ? { trial: trial ? { trialEnd: trial.end, trialPeriodDays: Math.ceil((trial.end - trial.start) / 86400) } : null } : null,
+        savedPaymentMethods: [], shipping: null, shippingAddress: null, shippingOptions: [],
+        status: session.status === 'complete' ? { type: 'complete', paymentStatus: session.payment_status } : { type: session.status },
+        tax: { status: 'ready' }, taxAmounts: [], taxIdInfo: null,
+        total: { appliedBalance: zero, balanceAppliedToNextInvoice: false, discount: amount(Number(session.total_details?.amount_discount ?? 0), currency), shippingRate: zero, subtotal: amount(Number(session.amount_subtotal ?? 0), currency), taxExclusive: zero, taxInclusive: zero, total: amount(trial ? 0 : Number(session.amount_total ?? 0), currency) },
+    };
+}
+const failed = (message, code = null) => Response.json({ type: 'error', error: { message, code } });
+export async function screen(ctx) {
+    const path = new URL(ctx.call.request.url).pathname;
+    const id = path.split('/')[3];
+    const action = path.split('/')[4];
+    const params = ctx.params;
+    const session = ctx.get(CS, id);
+    // The private client secret is the browser's authority for this session; it never accepts a secret API key.
+    if (!session || session.ui_mode !== 'custom' || params.client_secret !== session.client_secret)
+        return failed('Invalid Checkout Session client secret.');
+    if (action === 'init')
+        return Response.json({ type: 'success', session: view(ctx, session) });
+    if (session.status !== 'open')
+        return failed('This Checkout Session is no longer active.');
+    if (action === 'apply_promotion_code' || action === 'remove_promotion_code') {
+        if (action === 'apply_promotion_code' && session.allow_promotion_codes !== true)
+            return failed('Promotion codes are not enabled for this Checkout Session.');
+        const promotion = action === 'apply_promotion_code' ? ctx.rows('promotion_code').find(p => p.code === params.promotion_code && p.active === true) : undefined;
+        if (action === 'apply_promotion_code' && !promotion)
+            return failed('This promotion code is invalid.', 'invalidPromotionCode');
+        const discount = promotion ? discountOf(ctx, { discounts: [{ promotion_code: promotion.id }] }, nowUnix(ctx.occurredAt)) : undefined;
+        if (discount instanceof Response)
+            return failed('This promotion code is invalid.', 'invalidPromotionCode');
+        const off = discount ? applyCouponDiscount(Number(session.amount_subtotal), discount.coupon) : 0;
+        const fields = { amount_total: Number(session.amount_subtotal) - off, total_details: { ...session.total_details, amount_discount: off }, discounts: discount ? [{ coupon: discount.coupon.id, promotion_code: promotion.id }] : [], _discount: discount ? { coupon: discount.coupon.id, promotion_code: promotion.id } : null };
+        const updated = await ctx.write(CS, id, fields, 'checkout.session.update');
+        return Response.json({ type: 'success', session: view(ctx, updated) });
+    }
+    if (action !== 'confirm')
+        return failed('Unrecognized Checkout action.');
+    const values = (params.payment_details ?? {});
+    const stored = ctx.row(CS, id) ?? session;
+    const trial = session.mode === 'subscription' ? resolveTrial(stored._subscription_data ?? {}, nowUnix(ctx.occurredAt)) : undefined;
+    const refusal = cardAnswer(values, nowUnix(ctx.occurredAt), !trial);
+    if (refusal)
+        return failed(refusal, 'paymentFailed');
+    const customer = typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined;
+    const email = String(customer?.email ?? params.email ?? session.customer_email ?? '');
+    if (!/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email))
+        return failed('Your email address is incomplete.');
+    let existing = session;
+    if (!customer && session.mode === 'subscription') {
+        const cid = ctx.mint('customer');
+        const made = await created(ctx, 'customer', { id: cid, email }, { livemode: false, ...newCustomer(cid) });
+        existing = { ...session, customer: made.id };
+    }
+    const expiry = parseExpiry(values.cardExpiry);
+    const completed = await completeSession(ctx, id, existing, { customer: existing.customer, customer_details: { email, name: values.billingName ?? null, address: null, phone: null, tax_exempt: 'none', tax_ids: [] } }, { number: values.cardNumber.replace(/\D/g, ''), exp_month: expiry.month, exp_year: expiry.year });
+    if (completed instanceof Response)
+        return failed('This Checkout Session is no longer active.');
+    return Response.json({ type: 'success', session: view(ctx, completed), return_url: session.return_url });
+}

package/dist/src/screens/checkout.d.ts

@@ -1,31 +1,2 @@
-import { type SemanticsContext } from '@volter/world-core';
-import { type Row } from '../semantics/shared.js';
-export declare const money: (minor: unknown, currency: unknown) => string;
-export declare const COUNTRIES: {
-    value: string;
-    label: string;
-}[];
-/** The expiry as the customer typed it. Stripe's field formats itself as it is typed: the digits `1230` read `12 / 30`,
- *  and a first digit above 1 is a month on its own (`5` reads `05 / `), so a person types the digits straight through
- *  (Checkout's own field, seen on checkout.stripe.com; docs.stripe.com/payments/checkout names no format to type). The
- *  page's script (@volter/world-ui Payment, `format: 'card-expiry'`) shows it formatted; this reads what is posted either
- *  way: `MM / YY`, `MM/YYYY`, or the bare digits `MMYY`, `MYY` (`530`) and `MMYYYY`; a month past 12 is read, and refused
- *  as invalid by cardAnswer. */
-export declare function parseExpiry(raw: string): {
-    month: number;
-    year: number;
-} | undefined;
-/** The card's answer: undefined when it pays, else what Checkout says under the button. */
-export declare function cardAnswer(v: Record<string, string>, nowSeconds: number, chargesNow: boolean): string | undefined;
-/** checkout.stripe.com's pages, or undefined for any other request. */
-/** The name the page shows: the session's own `branding_settings.display_name` where the create set one, else the
- *  public business name (stripe-shared.ts, publicBusinessName) of the account whose brand Checkout uses: "Checkout uses
- *  the brand settings of the connected account for destination charges with on_behalf_of and for platforms performing
- *  direct charges" (a session made with Stripe-Account), and otherwise the platform's; "If you omit a field in
- *  branding_settings, Checkout applies the default value from the Dashboard"
- *  (docs.stripe.com/payments/checkout/customization/appearance). */
-export declare function merchantOf(ctx: SemanticsContext, stored: Row): string;
-export declare function stripeCheckoutFlow(scope: {
-    root?: string;
-    clock?: () => string;
-}): (request: Request) => Promise<Response | undefined>;
+import type { HandlerContext } from '@volter/world-core';
+export declare function screen(ctx: HandlerContext): Promise<Response>;

package/dist/src/screens/checkout.js

@@ -1,57 +1,13 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// STRIPE CHECKOUT — a hosted flow (docs/contributing/architecture.md, "Screens"): an application creates a
-// Checkout Session and sends its customer to the session's `url` at checkout.stripe.com/c/pay/{id}; the
-// customer pays there, the session completes (what the payment made is linked on it and
-// checkout.session.completed is delivered), and Checkout redirects to success_url with
-// {CHECKOUT_SESSION_ID} filled in, or the customer goes back to cancel_url
-// (docs.stripe.com/payments/checkout/how-checkout-works). Paying is a move no API call makes: the external
-// actor's move on the session's machine, taken here through the same handler context the API's handlers use.
-// The page is authored from @volter/world-ui's payment piece under Stripe's skin, nothing of Stripe's page
-// copied; its fields carry the ids tests of Checkout fill (email, cardNumber, cardExpiry, cardCvc,
-// billingName, billingCountry, billingPostalCode) and its button the test id Stripe gives it.
-//
-// Where the documentation stops and the twin decides: test cards answer as docs.stripe.com/testing lists
-// (4242… pays; 4000000000000002 declines; …9995 insufficient funds; …0069 expired; …0127 incorrect CVC;
-// …0341 is saved but declines when charged, so it declines on a page that charges now and is saved on one that
-// only sets the card up: setup mode, or a subscription's trial);
-// any other number that passes the Luhn check pays, and a card that asks for authentication pays without
-// the challenge. A subscription session with no customer makes one from the email, as Stripe does.
-import { semanticsContext } from '@volter/world-core';
 import { flowPage, Payment, PAYMENT_CSS } from '@volter/world-ui';
-import surface from '../generated/surface.gen.json' with { type: 'json' };
-import { manifest } from "../manifest.js";
-import { completeSession, isOneTime } from "../semantics/checkout.js";
-import { newCustomer } from "../semantics/customers.js";
-import { created } from "../semantics/shared.js";
-import { publicBusinessName } from "../stripe-shared.js";
-import { applyCouponDiscount, PLATFORM_ACCOUNT_ID, resolveTrial } from "../stripe-twin.js";
-import { formOf } from "./consent-skin.js";
+import { isOneTime } from "../engine/checkout.js";
+import { newCustomer } from "../engine/customers.js";
+import { publicBusinessName } from "../engine/display.js";
+import { applyCouponDiscount, nowUnix, PLATFORM_ACCOUNT_ID, resolveTrial } from "../engine/stripe.js";
+import { cardAnswer, COUNTRIES, formOf, money, notFound, parseExpiry } from "./shared.js";
+import { completeSession, created } from "../semantics/shared.js";
 const CS = 'checkout.session';
-const COMPLETE_OPERATION = surface.operations.find((o) => o.id === 'PostCheckoutSessionsSession');
-const DECLINES = {
-    '4000000000000002': 'Your card was declined.',
-    '4000000000009995': 'Your card has insufficient funds.',
-    '4000000000000069': 'Your card has expired.',
-    '4000000000000127': "Your card's security code is incorrect.",
-};
-const luhn = (digits) => {
-    let sum = 0;
-    for (let i = 0; i < digits.length; i++) {
-        let d = Number(digits[digits.length - 1 - i]);
-        if (i % 2 === 1) {
-            d *= 2;
-            if (d > 9)
-                d -= 9;
-        }
-        sum += d;
-    }
-    return digits.length >= 12 && sum % 10 === 0;
-};
-export const money = (minor, currency) => {
-    const c = typeof currency === 'string' ? currency.toUpperCase() : 'USD';
-    const zeroDecimal = ['JPY', 'KRW', 'VND', 'CLP', 'ISK', 'UGX', 'XAF', 'XOF'].includes(c);
-    return new Intl.NumberFormat('en-US', { style: 'currency', currency: c }).format((Number(minor) || 0) / (zeroDecimal ? 1 : 100));
-};
+const COMPLETE_OPERATION = { id: 'PostCheckoutSessionsSession' };
 // Stripe's skin: its type, its blue submit, the summary on a tinted half.
 const SKIN = `
 body { color: #1a1a1a; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Ubuntu, sans-serif; }
@@ -61,7 +17,6 @@ body { color: #1a1a1a; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI
 .pay-error { color: #df1b41; }
 .pay-submit { background: #0074d4; color: #ffffff; }
 `;
-export const COUNTRIES = [['US', 'United States'], ['GB', 'United Kingdom'], ['CA', 'Canada'], ['DE', 'Germany'], ['FR', 'France'], ['AU', 'Australia'], ['JP', 'Japan']].map(([value, label]) => ({ value: value, label: label }));
 /** A subscription session's trial, when its subscription_data gives one: `trial_period_days`, or `trial_end`
  *  (docs.stripe.com/payments/checkout/free-trials), as resolveTrial makes the subscription's at completion. */
 function trialOf(session, now) {
@@ -97,7 +52,7 @@ function trialSummary(session, trial) {
 }
 /** What each period after the trial charges, as the subscription's invoices will: its recurring line items (a one-time
  *  item is on the first invoice only, semantics/checkout.ts isOneTime), under the session's coupon unless the coupon is `once`, which the trial's own $0
- *  invoice takes (semantics/renewals.ts draftSubscriptionInvoice). */
+ *  invoice takes (../engine/renewals.ts draftSubscriptionInvoice). */
 function afterTrial(session) {
     const items = ((session.line_items?.data) ?? []).filter((it, i) => !isOneTime(it, inlineOf(session, i)));
     const subtotal = items.reduce((sum, it) => sum + (Number(it.amount_subtotal) || 0), 0);
@@ -144,60 +99,19 @@ function page(session, id, now, values = {}, error) {
     });
 }
 const gone = () => flowPage({ title: 'Checkout', status: 404, css: [PAYMENT_CSS, SKIN], body: _jsx("main", { className: "pay-form", children: _jsx("h1", { children: "This Checkout Session is no longer active." }) }) });
-/** Cards that are saved but decline when charged. */
-const DECLINES_WHEN_CHARGED = { '4000000000000341': 'Your card was declined.' };
-/** The expiry as the customer typed it. Stripe's field formats itself as it is typed: the digits `1230` read `12 / 30`,
- *  and a first digit above 1 is a month on its own (`5` reads `05 / `), so a person types the digits straight through
- *  (Checkout's own field, seen on checkout.stripe.com; docs.stripe.com/payments/checkout names no format to type). The
- *  page's script (@volter/world-ui Payment, `format: 'card-expiry'`) shows it formatted; this reads what is posted either
- *  way: `MM / YY`, `MM/YYYY`, or the bare digits `MMYY`, `MYY` (`530`) and `MMYYYY`; a month past 12 is read, and refused
- *  as invalid by cardAnswer. */
-export function parseExpiry(raw) {
-    const split = /^\s*(\d{1,2})\s*\/\s*(\d{2}|\d{4})\s*$/.exec(raw);
-    const digits = raw.replace(/\s/g, '');
-    const bare = split ? undefined : /^(\d{2})(\d{2}|\d{4})$/.exec(digits) ?? /^([2-9])(\d{2})$/.exec(digits);
-    const m = split ?? bare;
-    if (!m)
-        return undefined;
-    return { month: Number(m[1]), year: m[2].length === 2 ? 2000 + Number(m[2]) : Number(m[2]) };
-}
-/** The card's answer: undefined when it pays, else what Checkout says under the button. */
-export function cardAnswer(v, nowSeconds, chargesNow) {
-    const digits = (v.cardNumber ?? '').replace(/\D/g, '');
-    if (!digits)
-        return 'Your card number is incomplete.';
-    if (DECLINES[digits])
-        return DECLINES[digits];
-    if (chargesNow && DECLINES_WHEN_CHARGED[digits])
-        return DECLINES_WHEN_CHARGED[digits];
-    if (!luhn(digits))
-        return 'Your card number is invalid.';
-    const exp = parseExpiry(v.cardExpiry ?? '');
-    if (!exp)
-        return "Your card's expiration date is incomplete.";
-    const { month, year } = exp;
-    if (month < 1 || month > 12)
-        return "Your card's expiration date is invalid.";
-    const now = new Date(nowSeconds * 1000);
-    if (year < now.getUTCFullYear() || (year === now.getUTCFullYear() && month < now.getUTCMonth() + 1))
-        return "Your card's expiration year is in the past.";
-    if (!/^\d{3,4}$/.test(v.cardCvc ?? ''))
-        return "Your card's security code is incomplete.";
-    return undefined;
-}
 async function pay(ctx, id, session, v) {
     const onFile = customerEmailOf(session);
     const email = onFile ?? (typeof session.customer_email === 'string' ? session.customer_email : (v.email ?? '').trim());
     if (session.mode !== 'setup' || !session.customer) {
         if (!EMAIL.test(email))
-            return page(session, id, Number(ctx.now()), v, 'Your email address is incomplete.');
+            return page(session, id, nowUnix(ctx.occurredAt), v, 'Your email address is incomplete.');
     }
     // a trial charges nothing now unless a one-time price is on the first invoice
     const oneTimeDue = ((session.line_items?.data) ?? []).some((it, i) => isOneTime(it, inlineOf(session, i)));
-    const chargesNow = session.mode === 'payment' || (session.mode === 'subscription' && (!trialOf(session, Number(ctx.now())) || oneTimeDue));
-    const refused = cardAnswer(v, Number(ctx.now()), chargesNow);
+    const chargesNow = session.mode === 'payment' || (session.mode === 'subscription' && (!trialOf(session, nowUnix(ctx.occurredAt)) || oneTimeDue));
+    const refused = cardAnswer(v, nowUnix(ctx.occurredAt), chargesNow);
     if (refused)
-        return page(session, id, Number(ctx.now()), v, refused);
+        return page(session, id, nowUnix(ctx.occurredAt), v, refused);
     let existing = session;
     // Checkout always makes a customer for a subscription; a payment makes one only when the session asks
     if (!session.customer && (session.mode === 'subscription' || session.customer_creation === 'always')) {
@@ -219,37 +133,34 @@ async function pay(ctx, id, session, v) {
     const to = String(session.success_url).replaceAll('{CHECKOUT_SESSION_ID}', id);
     return new Response(null, { status: 303, headers: { location: to } });
 }
-/** checkout.stripe.com's pages, or undefined for any other request. */
 /** The name the page shows: the session's own `branding_settings.display_name` where the create set one, else the
- *  public business name (stripe-shared.ts, publicBusinessName) of the account whose brand Checkout uses: "Checkout uses
+ *  public business name (../engine/display.ts, publicBusinessName) of the account whose brand Checkout uses: "Checkout uses
  *  the brand settings of the connected account for destination charges with on_behalf_of and for platforms performing
  *  direct charges" (a session made with Stripe-Account), and otherwise the platform's; "If you omit a field in
  *  branding_settings, Checkout applies the default value from the Dashboard"
  *  (docs.stripe.com/payments/checkout/customization/appearance). */
-export function merchantOf(ctx, stored) {
+function merchantOf(ctx, stored) {
     const brand = stored._branding_settings?.display_name;
     const behalf = stored._payment_intent_data?.on_behalf_of ?? stored._subscription_data?.on_behalf_of;
     const account = typeof behalf === 'string' ? behalf : typeof stored._brand_account === 'string' ? stored._brand_account : PLATFORM_ACCOUNT_ID;
     return typeof brand === 'string' && brand.trim() ? brand : publicBusinessName(ctx.get('account', account));
 }
-export function stripeCheckoutFlow(scope) {
-    return async (request) => {
-        const m = /^\/c\/pay\/(cs_[A-Za-z0-9_]+)\/?$/.exec(new URL(request.url).pathname);
-        if (!m || (request.method !== 'GET' && request.method !== 'POST'))
-            return undefined;
-        const id = m[1];
-        // the form is read before the context, which reads the request's body itself
-        const values = request.method === 'POST' ? await formOf(request.clone()) : {};
-        const ctx = await semanticsContext(manifest, request, COMPLETE_OPERATION, scope);
-        const session = ctx.get(CS, id);
-        if (!session)
-            return gone();
-        // an ended session's page is gone; paying on one is the customer's move the machine refuses
-        if (session.status !== 'open' && (request.method === 'GET' || ctx.legal(CS, 'status', COMPLETE_OPERATION.id, String(session.status), 'complete', id, 'external')))
-            return gone();
-        const stored = ctx.row(CS, id) ?? {};
-        const coupon = stored._discount?.coupon;
-        const full = { ...session, _subscription_data: stored._subscription_data, _price_data: stored._price_data, _merchant: merchantOf(ctx, stored), _coupon: typeof coupon === 'string' ? ctx.get('coupon', coupon) : undefined, _customer: typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined };
-        return request.method === 'GET' ? page(full, id, Number(ctx.now())) : pay(ctx, id, full, values);
-    };
+export async function screen(ctx) {
+    const request = ctx.call.request;
+    const m = /^\/c\/pay\/(cs_[A-Za-z0-9_]+)\/?$/.exec(new URL(request.url).pathname);
+    if (!m || (request.method !== 'GET' && request.method !== 'POST'))
+        return notFound();
+    const id = m[1];
+    // the form is read before the context, which reads the request's body itself
+    const values = request.method === 'POST' ? await formOf(request.clone()) : {};
+    const session = ctx.get(CS, id);
+    if (!session)
+        return gone();
+    // an ended session's page is gone; paying on one is the customer's move the machine refuses
+    if (session.status !== 'open' && (request.method === 'GET' || ctx.legal(CS, 'status', COMPLETE_OPERATION.id, String(session.status), 'complete', id, 'external')))
+        return gone();
+    const stored = ctx.row(CS, id) ?? {};
+    const coupon = stored._discount?.coupon;
+    const full = { ...session, _subscription_data: stored._subscription_data, _price_data: stored._price_data, _merchant: merchantOf(ctx, stored), _coupon: typeof coupon === 'string' ? ctx.get('coupon', coupon) : undefined, _customer: typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined };
+    return request.method === 'GET' ? page(full, id, nowUnix(ctx.occurredAt)) : pay(ctx, id, full, values);
 }

package/dist/src/screens/connect-onboarding.d.ts

@@ -0,0 +1,3 @@
+import type { HandlerContext } from '@volter/world-core';
+/** connect.stripe.com's onboarding pages, or undefined for any other request. */
+export declare function screen(ctx: HandlerContext): Promise<Response>;