@volter/twin-stripe 2.0.38 → 3.0.1

package/dist/src/screens/{onboarding.js → connect-onboarding.js}

@@ -1,44 +1,16 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-// STRIPE CONNECT HOSTED ONBOARDING — a hosted flow (docs/contributing/architecture.md, "Screens"): a platform
-// creates an Account Link for a connected account and sends the account's owner to its `url`. The link is a
-// single-use entry point: visiting it takes the owner to their onboarding session, and visiting it again, or after it
-// expires, sends them to refresh_url, where the platform makes a new one (docs.stripe.com/connect/hosted-onboarding).
-// At the session's own address they give Stripe what it requires, and Stripe sends them to return_url. Submitting is
-// the owner's move, not an API call. Authored from @volter/world-ui's payment piece; nothing of Stripe's page is copied.
-//
-// The page asks for exactly what Stripe requires before a US Express account with card_payments and transfers can
-// take card payments (docs.stripe.com/connect/required-verification-information; the set is the one Stripe's
-// requirements endpoint answers, docs.stripe.com/_endpoint/get-requirements-for-setups with apiVersion=v1,
-// platformCountry=US, accountCountry=US, dashboardType=express, tosType=full, capabilities card_payments and transfers):
-// thirty requirements for a company (the business profile, the statement descriptor, the company with its tax id,
-// phone and address, its owners, its representative with their title and address, the agreement and the payout bank
-// account) and eighteen for an individual. A submit that leaves any out is refused with what is missing. The account's
-// requirements.currently_due lists what is still missing, and charges and payouts are enabled, and its requested
-// capabilities become active (Stripe's move on the capability machine), only once none is. The agreement is the
-// page's own checkbox, recorded as tos_acceptance with the request's address and the time.
-//
-// Where the documentation stops and the twin decides: only these two US sets are modelled; an account elsewhere, or
-// of another business type, is told its requirements are not modelled. Test mode verifies at once whatever is
-// submitted (docs.stripe.com/connect/testing lists the values that pass: date of birth 1901-01-01, SSN last four
-// 0000, tax id 000000000, routing 110000000, account 000123456789); the industries offered are Stripe's supported
-// merchant category codes as its list gives them (./industries.ts), and an industry the page does not offer leaves
-// business_profile.mcc due; the states are the fifty and the District of Columbia; a request with no forwarded address
-// records 127.0.0.1. An update link (account_update) shows the same page.
-import { semanticsContext } from '@volter/world-core';
 import { CONSENT_CSS, flowPage, Payment, PAYMENT_CSS } from '@volter/world-ui';
-import surface from '../generated/surface.gen.json' with { type: 'json' };
-import { manifest } from "../manifest.js";
+import { nowUnix } from "../engine/stripe.js";
+import { formOf, notFound, seeOther, STRIPE_CONSENT_SKIN } from "./shared.js";
+import { INDUSTRIES as MCCS } from "../engine/industries.js";
+import { currentlyDue, kindOf, OFFERED } from "../engine/onboarding.js";
 import { created, syncExternals } from "../semantics/shared.js";
-import { formOf, seeOther, STRIPE_CONSENT_SKIN } from "./consent-skin.js";
-import { INDUSTRIES as MCCS } from "./industries.js";
 const LINK = 'account_link';
-const OPERATION = surface.operations.find((o) => o.id === 'PostAccountsAccount');
 const gone = () => flowPage({ title: 'Stripe', status: 404, css: [CONSENT_CSS, STRIPE_CONSENT_SKIN], body: _jsx("main", { className: "consent", children: _jsx("h1", { className: "consent-heading", children: "This link is invalid." }) }) });
 /** A link that can still be used: not used and not past its expiry. */
-const usable = (ctx, link) => link.used !== true && Number(link.expires_at) > Number(ctx.now());
+const usable = (ctx, link) => link.used !== true && Number(link.expires_at) > nowUnix(ctx.occurredAt);
 // the field asks, with no industry chosen until the person chooses one (an unanswered field leaves the MCC due)
 const INDUSTRIES = [{ value: '', label: 'Select your industry' }, ...MCCS.map(([value, label]) => ({ value, label }))];
-const OFFERED = new Set(MCCS.map(([mcc]) => mcc));
 // the fifty states and the District of Columbia, by their USPS codes (the address's `state`, ISO 3166-2 without its
 // country, docs.stripe.com/api/accounts/object)
 const STATES = [
@@ -51,43 +23,6 @@ const STATES = [
     ['SC', 'South Carolina'], ['SD', 'South Dakota'], ['TN', 'Tennessee'], ['TX', 'Texas'], ['UT', 'Utah'], ['VT', 'Vermont'], ['VA', 'Virginia'],
     ['WA', 'Washington'], ['WV', 'West Virginia'], ['WI', 'Wisconsin'], ['WY', 'Wyoming'],
 ].map(([value, label]) => ({ value, label }));
-const has = (v, k) => (v[k] ?? '').trim() !== '';
-const dobPart = (v, i) => /^\d{4}-\d{2}-\d{2}$/.test(v.dob ?? '') && Number((v.dob ?? '').split('-')[i]) > 0;
-/** Each requirement Stripe names, the form's answer that meets it, and which of the two sets it belongs to. */
-const REQUIREMENTS = [
-    ['business_profile.mcc', (v) => OFFERED.has((v.mcc ?? '').trim()), ['company', 'individual']],
-    ['business_profile.url', (v) => has(v, 'url'), ['company', 'individual']],
-    ['settings.payments.statement_descriptor', (v) => has(v, 'statement_descriptor'), ['company', 'individual']],
-    ['company.name', (v) => has(v, 'company_name'), ['company']],
-    ['company.tax_id', (v) => has(v, 'company_tax_id'), ['company']],
-    ['company.phone', (v) => has(v, 'company_phone'), ['company']],
-    ['company.address.line1', (v) => has(v, 'company_line1'), ['company']],
-    ['company.address.city', (v) => has(v, 'company_city'), ['company']],
-    ['company.address.state', (v) => has(v, 'company_state'), ['company']],
-    ['company.address.postal_code', (v) => has(v, 'company_postal_code'), ['company']],
-    ['company.owners_provided', (v) => v.owners_provided === 'provided', ['company']],
-    ['owners.first_name', (v) => has(v, 'owner_first_name'), ['company']],
-    ['owners.last_name', (v) => has(v, 'owner_last_name'), ['company']],
-    ['owners.email', (v) => has(v, 'owner_email'), ['company']],
-    ...['first_name', 'last_name', 'email', 'phone'].flatMap((f) => [[`representative.${f}`, (v) => has(v, f), ['company']], [`individual.${f}`, (v) => has(v, f), ['individual']]]),
-    ...['day', 'month', 'year'].flatMap((f, i) => [[`representative.dob.${f}`, (v) => dobPart(v, 2 - i), ['company']], [`individual.dob.${f}`, (v) => dobPart(v, 2 - i), ['individual']]]),
-    ...['line1', 'city', 'state', 'postal_code'].flatMap((f) => [[`representative.address.${f}`, (v) => has(v, f), ['company']], [`individual.address.${f}`, (v) => has(v, f), ['individual']]]),
-    ['representative.relationship.title', (v) => has(v, 'title'), ['company']],
-    ['representative.ssn_last_4', (v) => /^\d{4}$/.test(v.ssn_last_4 ?? ''), ['company']],
-    ['individual.ssn_last_4', (v) => /^\d{4}$/.test(v.ssn_last_4 ?? ''), ['individual']],
-    ['tos_acceptance.date', (v) => v.tos === 'accepted', ['company', 'individual']],
-    ['tos_acceptance.ip', (v) => v.tos === 'accepted', ['company', 'individual']],
-    ['external_account', (v) => has(v, 'routing_number') && has(v, 'account_number'), ['company', 'individual']],
-];
-/** The set an account onboards against: the two US sets the twin models, or none. */
-export function kindOf(account) {
-    const type = account.business_type ?? 'individual';
-    return (account.country ?? 'US') === 'US' && (type === 'company' || type === 'individual') ? type : undefined;
-}
-/** What an account of this kind still owes, given the form's answers (none: all of it). */
-export function currentlyDue(kind, v = {}) {
-    return REQUIREMENTS.filter(([, met, kinds]) => kinds.includes(kind) && !met(v)).map(([req]) => req);
-}
 const field = (id, label, v, extra = {}) => ({ id, label, value: v[id] ?? '', ...extra });
 const addressFields = (prefix, v) => [
     field(`${prefix}line1`, 'Address', v, { autoComplete: 'address-line1' }), field(`${prefix}city`, 'City', v),
@@ -145,7 +80,7 @@ async function submit(ctx, link, kind, v, ip) {
         return;
     const caps = { ...(account.capabilities ?? {}) };
     for (const [cap, status] of Object.entries(caps)) {
-        if (status !== 'active' && !ctx.legal('capability', 'status', OPERATION.id, String(status), 'active', cap, 'vendor'))
+        if (status !== 'active')
             caps[cap] = 'active';
     }
     const due = currentlyDue(kind, v);
@@ -155,6 +90,7 @@ async function submit(ctx, link, kind, v, ip) {
     const person = { first_name: v.first_name, last_name: v.last_name, email: v.email, phone: v.phone, dob: { day, month, year }, address: addressOf(''), ssn_last_4_provided: true, id_number_provided: false };
     const company = kind === 'company';
     const settings = account.settings ?? {};
+    const individual = company ? null : await created(ctx, 'person', { ...person, account: id }, { relationship: { representative: true }, metadata: {} });
     await ctx.write('account', id, {
         details_submitted: true, charges_enabled: due.length === 0, payouts_enabled: due.length === 0, capabilities: caps, requirements,
         business_type: kind,
@@ -162,8 +98,8 @@ async function submit(ctx, link, kind, v, ip) {
         settings: { ...settings, payments: { ...(settings.payments ?? {}), statement_descriptor: v.statement_descriptor } },
         ...(company
             ? { company: { name: v.company_name, phone: v.company_phone, address: addressOf('company_'), tax_id_provided: true, owners_provided: true, directors_provided: false, executives_provided: false } }
-            : { individual: { ...person, id: `person_${id}` } }),
-        tos_acceptance: { date: Number(ctx.now()), ip, user_agent: null },
+            : { individual: individual.id }),
+        tos_acceptance: { date: nowUnix(ctx.occurredAt), ip, user_agent: null },
     }, 'account.updated');
     if (company) {
         await created(ctx, 'person', { account: id }, { ...person, relationship: { representative: true, executive: true, director: false, owner: false, percent_ownership: null, title: v.title }, metadata: {} });
@@ -191,35 +127,33 @@ async function visit(ctx, id) {
     return seeOther(`${SESSIONS}${session}`);
 }
 /** connect.stripe.com's onboarding pages, or undefined for any other request. */
-export function stripeOnboardingFlow(scope) {
-    return async (request) => {
-        const path = new URL(request.url).pathname;
-        const entry = /^\/setup\/(acctlink_[A-Za-z0-9_]+)\/?$/.exec(path);
-        const at = /^\/setup\/s\/(onbs_[A-Za-z0-9_]+)\/?$/.exec(path);
-        if (entry && request.method === 'GET')
-            return visit(await semanticsContext(manifest, request, OPERATION, scope), entry[1]);
-        if (!at || (request.method !== 'GET' && request.method !== 'POST'))
-            return undefined;
-        const sid = at[1];
-        const form = request.method === 'POST' ? await formOf(request.clone()) : {};
-        const ctx = await semanticsContext(manifest, request, OPERATION, scope);
-        // the session the visited link opened, until it is submitted
-        const stored = ctx.rowsRaw(LINK).find((l) => l._session === sid && l._submitted !== true);
-        const link = stored ? ctx.get(LINK, String(stored.id)) : undefined;
-        if (!stored || !link)
-            return gone();
-        const sessionUrl = `${SESSIONS}${sid}`;
-        const account = ctx.get('account', String(link.account)) ?? {};
-        const kind = kindOf(account);
-        if (!kind)
-            return unmodelled(account);
-        if (request.method === 'GET')
-            return page(ctx, sessionUrl, link, kind);
-        const missing = currentlyDue(kind, form);
-        if (missing.length)
-            return incomplete(ctx, sessionUrl, link, kind, form, missing);
-        await ctx.write(LINK, String(stored.id), { _submitted: true }, 'account_link.submitted');
-        await submit(ctx, link, kind, form, request.headers.get('x-forwarded-for')?.split(',')[0]?.trim() || '127.0.0.1');
-        return seeOther(String(link.return_url));
-    };
+export async function screen(ctx) {
+    const request = ctx.call.request;
+    const path = new URL(request.url).pathname;
+    const entry = /^\/setup\/(acctlink_[A-Za-z0-9_]+)\/?$/.exec(path);
+    const at = /^\/setup\/s\/(onbs_[A-Za-z0-9_]+)\/?$/.exec(path);
+    if (entry && request.method === 'GET')
+        return visit(ctx, entry[1]);
+    if (!at || (request.method !== 'GET' && request.method !== 'POST'))
+        return notFound();
+    const sid = at[1];
+    const form = request.method === 'POST' ? await formOf(request.clone()) : {};
+    // the session the visited link opened, until it is submitted
+    const stored = ctx.rowsRaw(LINK).find((l) => l._session === sid && l._submitted !== true);
+    const link = stored ? ctx.get(LINK, String(stored.id)) : undefined;
+    if (!stored || !link)
+        return gone();
+    const sessionUrl = `${SESSIONS}${sid}`;
+    const account = ctx.get('account', String(link.account)) ?? {};
+    const kind = kindOf(account);
+    if (!kind)
+        return unmodelled(account);
+    if (request.method === 'GET')
+        return page(ctx, sessionUrl, link, kind);
+    const missing = currentlyDue(kind, form);
+    if (missing.length)
+        return incomplete(ctx, sessionUrl, link, kind, form, missing);
+    await ctx.write(LINK, String(stored.id), { _submitted: true }, 'account_link.submitted');
+    await submit(ctx, link, kind, form, request.headers.get('x-forwarded-for')?.split(',')[0]?.trim() || '127.0.0.1');
+    return seeOther(String(link.return_url));
 }

package/dist/src/screens/dashboard.d.ts

@@ -0,0 +1,3 @@
+import type { HandlerContext } from '@volter/world-core';
+/** Dashboard settings, Radar list creation and test Issuing funding; other pages answer Stripe's 404. */
+export declare function screen(ctx: HandlerContext): Promise<Response>;

package/dist/src/screens/dashboard.js

@@ -0,0 +1,116 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { flowPage } from '@volter/world-ui';
+import { VL } from "../engine/radar.js";
+import { nowUnix } from "../engine/stripe.js";
+import { platformAccountDefault } from "../engine/connect.js";
+import { publicBusinessName } from "../engine/display.js";
+import { PLATFORM_ACCOUNT_ID } from "../engine/stripe.js";
+import { formOf, notFound } from "./shared.js";
+import { created } from "../semantics/shared.js";
+const redirect = (path) => new Response(null, { status: 303, headers: { location: path } });
+const invalid = (message) => flowPage({ css: [], title: 'Stripe', status: 400, body: _jsx("main", { children: _jsx("p", { role: "alert", children: message }) }) });
+const PUBLIC_DETAILS_PATH = '/settings/public';
+const MAX_NAME = 5000;
+const DETAILS_CSS = `
+* { box-sizing: border-box; }
+body { margin: 0; background: #f6f8fa; color: #1a1f36; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Ubuntu, sans-serif; font-size: 14px; }
+.pd { max-width: 640px; margin: 48px auto; padding: 0 16px; }
+.pd h1 { font-size: 28px; margin: 16px 0 4px; }
+.pd-lead { color: #697386; margin: 0 0 24px; }
+.pd-card { background: #ffffff; border: 1px solid #e3e8ee; border-radius: 8px; padding: 24px; }
+.pd-card label { display: block; font-weight: 600; margin-bottom: 6px; }
+.pd-card small { display: block; color: #697386; margin-bottom: 8px; }
+.pd-card input { width: 100%; padding: 8px 10px; border: 1px solid #c1c9d2; border-radius: 6px; font: inherit; }
+.pd-actions { margin-top: 20px; display: flex; justify-content: flex-end; }
+.pd-actions button { background: #635bff; color: #ffffff; border: 0; border-radius: 6px; padding: 8px 16px; font: inherit; font-weight: 600; cursor: pointer; }
+.pd-notice { padding: 10px 12px; border-radius: 6px; margin-bottom: 16px; }
+.pd-error { background: #fff0f3; color: #df1b41; }
+.pd-saved { background: #e7f8ef; color: #0e6245; }
+`;
+function detailsPage(account, opts = {}) {
+    const named = account?.business_profile?.name;
+    const value = opts.value ?? (typeof named === 'string' ? named : '');
+    return flowPage({
+        title: 'Public details – Stripe',
+        css: [DETAILS_CSS],
+        ...(opts.error ? { status: 400 } : {}),
+        body: (_jsxs("main", { className: "pd", children: [_jsx("h1", { children: "Public details" }), _jsxs("p", { className: "pd-lead", children: ["What your customers see on Checkout, the customer portal, receipts and invoices. Currently shown: ", _jsx("strong", { "data-testid": "public-business-name", children: publicBusinessName(account) })] }), opts.error ? _jsx("p", { className: "pd-notice pd-error", role: "alert", children: opts.error }) : null, opts.saved ? _jsx("p", { className: "pd-notice pd-saved", role: "status", children: "Your public details were saved." }) : null, _jsxs("form", { className: "pd-card", method: "post", children: [_jsx("label", { htmlFor: "business_name", children: "Business name" }), _jsx("small", { children: "The name customers see when they pay you." }), _jsx("input", { id: "business_name", name: "business_name", autoComplete: "organization", defaultValue: value, required: true, maxLength: MAX_NAME }), _jsx("div", { className: "pd-actions", children: _jsx("button", { type: "submit", children: "Save" }) })] })] })),
+    });
+}
+/** Save the business name on the platform's own account: the stored record, made from Stripe's default the first
+ *  time anything is saved, and otherwise changed in place (its other public details kept). */
+async function save(ctx, name) {
+    const held = ctx.get('account', PLATFORM_ACCOUNT_ID);
+    const profile = { business_profile: { ...((held ?? platformAccountDefault()).business_profile ?? {}), name } };
+    await (held ? ctx.write('account', PLATFORM_ACCOUNT_ID, profile, 'account.update') : created(ctx, 'account', { ...platformAccountDefault(), ...profile }, {}, { operation: 'account.update' }));
+}
+/** What the page says of a name no browser sends (the field is required and bounded), for a client that sends it. */
+function nameRefused(name) {
+    return !name ? 'Enter your business name.' : name.length > MAX_NAME ? `Your business name must be at most ${MAX_NAME} characters.` : undefined;
+}
+async function publicDetails(ctx) {
+    const request = ctx.call.request;
+    const url = new URL(request.url);
+    if (request.method !== 'GET' && request.method !== 'POST')
+        return notFound();
+    const form = request.method === 'POST' ? await formOf(request.clone()) : {};
+    if (request.method === 'GET')
+        return detailsPage(ctx.get('account', PLATFORM_ACCOUNT_ID), { saved: url.searchParams.has('saved') });
+    const name = (form.business_name ?? '').trim();
+    const refused = nameRefused(name);
+    if (refused)
+        return detailsPage(ctx.get('account', PLATFORM_ACCOUNT_ID), { value: form.business_name ?? '', error: refused });
+    await save(ctx, name);
+    // a query-only reference: the page's own path, wherever it is mounted and with or without its trailing slash
+    return new Response(null, { status: 303, headers: { location: '?saved=1' } });
+}
+/** Dashboard settings, Radar list creation and test Issuing funding; other pages answer Stripe's 404. */
+export async function screen(ctx) {
+    const path = new URL(ctx.call.request.url).pathname.replace(/\/+$/, '');
+    // source: https://docs.stripe.com/radar/lists "Use the Dashboard or the API to create lists."
+    // source: https://docs.stripe.com/radar/lists "Enter a name for the list"
+    // source: https://docs.stripe.com/radar/lists "Select the type of list to create."
+    // source: https://docs.stripe.com/radar/lists "Click Add to save your new list."
+    // Where the documentation stops: it names Dashboard controls, not their browser request routes or form wire.
+    // This authored page uses /radar/lists for GET and POST, /radar/lists/{id} for its redirect/detail address,
+    // and a 303 redirect after saving. The HTML field names name, alias and item_type are the twin's choices;
+    // item_type values are the pinned API's enums, not published Dashboard form values. The alias fallback's
+    // lowercase/underscore algorithm is also authored; Stripe says it generates an alias but gives no algorithm.
+    if (/^\/radar\/lists(?:\/[^/]+)?$/.test(path)) {
+        if (ctx.call.request.method === 'POST') {
+            const form = await formOf(ctx.call.request);
+            const types = ['string', 'case_sensitive_string', 'card_fingerprint', 'card_bin', 'customer_id', 'email', 'ip_address', 'country', 'sepa_debit_fingerprint', 'us_bank_account_fingerprint'];
+            if (!form.name?.trim() || !types.includes(form.item_type ?? ''))
+                return invalid('Enter a name and select a list type.');
+            const alias = form.alias?.trim() || form.name.toLowerCase().replace(/[^a-z0-9]+/g, '_');
+            // Where the page stops: an operator has no login identity in the World; created_by is its synthetic operator.
+            const list = await created(ctx, VL, { name: form.name.trim(), alias, item_type: form.item_type }, {
+                created_by: 'twin', livemode: false, metadata: {},
+                list_items: { object: 'list', data: [], has_more: false, url: '/v1/radar/value_list_items' },
+            });
+            await ctx.write(VL, String(list.id), { list_items: { object: 'list', data: [], has_more: false, url: `/v1/radar/value_list_items?value_list=${list.id}` } }, 'radar.value_list.updated');
+            return redirect(`/radar/lists/${list.id}`);
+        }
+        return flowPage({ css: [], title: 'Lists – Radar – Stripe', body: _jsxs("main", { children: [_jsx("h1", { children: "Radar Lists" }), _jsxs("form", { method: "post", action: "/radar/lists", children: [_jsx("h2", { children: "New list" }), _jsxs("label", { children: ["Name", _jsx("input", { name: "name", required: true })] }), _jsxs("label", { children: ["Alias", _jsx("input", { name: "alias" })] }), _jsxs("label", { children: ["List type", _jsxs("select", { name: "item_type", children: [_jsx("option", { value: "customer_id", children: "Customer ID" }), _jsx("option", { value: "email", children: "Email" }), _jsx("option", { value: "card_fingerprint", children: "Card fingerprint" }), _jsx("option", { value: "ip_address", children: "IP address" }), _jsx("option", { value: "string", children: "String" })] })] }), _jsx("button", { children: "Add" })] }), _jsx("ul", { children: ctx.rows(VL).map(row => _jsxs("li", { children: [String(row.name), " (", String(row.alias), ")"] }, String(row.id))) })] }) });
+    }
+    // source: https://docs.stripe.com/issuing/testing "Before you create test transactions, you must add test funds to the Issuing balance on your account."
+    // source: https://docs.stripe.com/issuing/testing "You can create test top-ups in the Dashboard, or with the Top-ups API"
+    // Where the documentation stops: it states the Dashboard funding act, not a browser request path or form wire.
+    // The authored GET/POST address and 303 redirect are /test/issuing/balance. The form name amount, its positive
+    // integer validation and its units (USD cents for this US sandbox) are the twin's choices, not published form
+    // fields. Its POST records the balance change in the vendor ledger, with source=null (permitted by the pinned
+    // schema) and immediate availability for this sandbox control; the page states neither that source nor timing.
+    // No private Topup object is seeded or answered, and the uncalled Top-ups API remains the gap.
+    if (path === '/test/issuing/balance') {
+        if (ctx.call.request.method === 'POST') {
+            const form = await formOf(ctx.call.request);
+            const amount = Number(form.amount);
+            if (!Number.isInteger(amount) || amount <= 0)
+                return invalid('Enter a positive amount in cents.');
+            await created(ctx, 'balance_transaction', {}, { amount, currency: 'usd', fee: 0, net: amount, type: 'topup', reporting_category: 'topup', source: null, status: 'available', balance_type: 'issuing', available_on: Number(nowUnix(ctx.occurredAt)), fee_details: [] });
+            return redirect('/test/issuing/balance');
+        }
+        return flowPage({ css: [], title: 'Test Issuing balance – Stripe', body: _jsxs("main", { children: [_jsx("h1", { children: "Test Issuing balance" }), _jsxs("form", { method: "post", children: [_jsxs("label", { children: ["Amount", _jsx("input", { name: "amount", type: "number", min: "1", required: true })] }), _jsx("button", { children: "Add test funds" })] })] }) });
+    }
+    return path === PUBLIC_DETAILS_PATH ? publicDetails(ctx) : notFound();
+}

package/dist/src/screens/shared.d.ts

@@ -0,0 +1,27 @@
+export declare const STRIPE_CONSENT_SKIN = "\nbody { background: #f6f9fc; color: #1a1f36; font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, \"Helvetica Neue\", Ubuntu, sans-serif; }\n.consent-badge { background: #ffffff; border: 1px solid #e3e8ee; color: #1a1f36; }\n.consent-vendor { background: #635bff; border-color: #635bff; }\n.consent-link { border-color: #c1c9d2; }\n.consent-box { background: #ffffff; border-color: #e3e8ee; }\n.consent-who small, .consent-permission summary small, .consent-note { color: #697386; }\n.consent-actions { border-color: #e3e8ee; }\n.consent-deny { background: #ffffff; border-color: #c1c9d2; color: #1a1f36; }\n.consent-allow { background: #635bff; border-color: #635bff; color: #ffffff; }\n";
+/** The form fields a page's POST carries, as a browser posts them. */
+export declare function formOf(request: Request): Promise<Record<string, string>>;
+export declare const seeOther: (location: string) => Response;
+export declare const DECLINES: Record<string, string>;
+export declare const luhn: (digits: string) => boolean;
+export declare const money: (minor: unknown, currency: unknown) => string;
+export declare const COUNTRIES: {
+    value: string;
+    label: string;
+}[];
+/** Cards that are saved but decline when charged. */
+export declare const DECLINES_WHEN_CHARGED: Record<string, string>;
+/** The expiry as the customer typed it. Stripe's field formats itself as it is typed: the digits `1230` read `12 / 30`,
+ *  and a first digit above 1 is a month on its own (`5` reads `05 / `), so a person types the digits straight through
+ *  (Checkout's own field, seen on checkout.stripe.com; docs.stripe.com/payments/checkout names no format to type). The
+ *  page's script (@volter/world-ui Payment, `format: 'card-expiry'`) shows it formatted; this reads what is posted either
+ *  way: `MM / YY`, `MM/YYYY`, or the bare digits `MMYY`, `MYY` (`530`) and `MMYYYY`; a month past 12 is read, and refused
+ *  as invalid by cardAnswer. */
+export declare function parseExpiry(raw: string): {
+    month: number;
+    year: number;
+} | undefined;
+/** The card's answer: undefined when it pays, else what Checkout says under the button. */
+export declare function cardAnswer(v: Record<string, string>, nowSeconds: number, chargesNow: boolean): string | undefined;
+/** Stripe's answer for a page of one of its hosts the twin does not serve. */
+export declare const notFound: () => Response;

package/dist/src/screens/shared.js

@@ -0,0 +1,87 @@
+// What Stripe's screens share (docs/contributing/architecture.md, "Pack layout": screens/shared.tsx): the skin over
+// @volter/world-ui's consent piece for the flows where a person agrees to something (connected-account onboarding,
+// identity verification, linking a bank), a page's form, and the card a customer types on Checkout and the portal.
+export const STRIPE_CONSENT_SKIN = `
+body { background: #f6f9fc; color: #1a1f36; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Ubuntu, sans-serif; }
+.consent-badge { background: #ffffff; border: 1px solid #e3e8ee; color: #1a1f36; }
+.consent-vendor { background: #635bff; border-color: #635bff; }
+.consent-link { border-color: #c1c9d2; }
+.consent-box { background: #ffffff; border-color: #e3e8ee; }
+.consent-who small, .consent-permission summary small, .consent-note { color: #697386; }
+.consent-actions { border-color: #e3e8ee; }
+.consent-deny { background: #ffffff; border-color: #c1c9d2; color: #1a1f36; }
+.consent-allow { background: #635bff; border-color: #635bff; color: #ffffff; }
+`;
+/** The form fields a page's POST carries, as a browser posts them. */
+export async function formOf(request) {
+    return Object.fromEntries(new URLSearchParams(await request.text()));
+}
+export const seeOther = (location) => new Response(null, { status: 302, headers: { location } });
+export const DECLINES = {
+    '4000000000000002': 'Your card was declined.',
+    '4000000000009995': 'Your card has insufficient funds.',
+    '4000000000000069': 'Your card has expired.',
+    '4000000000000127': "Your card's security code is incorrect.",
+};
+export const luhn = (digits) => {
+    let sum = 0;
+    for (let i = 0; i < digits.length; i++) {
+        let d = Number(digits[digits.length - 1 - i]);
+        if (i % 2 === 1) {
+            d *= 2;
+            if (d > 9)
+                d -= 9;
+        }
+        sum += d;
+    }
+    return digits.length >= 12 && sum % 10 === 0;
+};
+export const money = (minor, currency) => {
+    const c = typeof currency === 'string' ? currency.toUpperCase() : 'USD';
+    const zeroDecimal = ['JPY', 'KRW', 'VND', 'CLP', 'ISK', 'UGX', 'XAF', 'XOF'].includes(c);
+    return new Intl.NumberFormat('en-US', { style: 'currency', currency: c }).format((Number(minor) || 0) / (zeroDecimal ? 1 : 100));
+};
+export const COUNTRIES = [['US', 'United States'], ['GB', 'United Kingdom'], ['CA', 'Canada'], ['DE', 'Germany'], ['FR', 'France'], ['AU', 'Australia'], ['JP', 'Japan']].map(([value, label]) => ({ value: value, label: label }));
+/** Cards that are saved but decline when charged. */
+export const DECLINES_WHEN_CHARGED = { '4000000000000341': 'Your card was declined.' };
+/** The expiry as the customer typed it. Stripe's field formats itself as it is typed: the digits `1230` read `12 / 30`,
+ *  and a first digit above 1 is a month on its own (`5` reads `05 / `), so a person types the digits straight through
+ *  (Checkout's own field, seen on checkout.stripe.com; docs.stripe.com/payments/checkout names no format to type). The
+ *  page's script (@volter/world-ui Payment, `format: 'card-expiry'`) shows it formatted; this reads what is posted either
+ *  way: `MM / YY`, `MM/YYYY`, or the bare digits `MMYY`, `MYY` (`530`) and `MMYYYY`; a month past 12 is read, and refused
+ *  as invalid by cardAnswer. */
+export function parseExpiry(raw) {
+    const split = /^\s*(\d{1,2})\s*\/\s*(\d{2}|\d{4})\s*$/.exec(raw);
+    const digits = raw.replace(/\s/g, '');
+    const bare = split ? undefined : /^(\d{2})(\d{2}|\d{4})$/.exec(digits) ?? /^([2-9])(\d{2})$/.exec(digits);
+    const m = split ?? bare;
+    if (!m)
+        return undefined;
+    return { month: Number(m[1]), year: m[2].length === 2 ? 2000 + Number(m[2]) : Number(m[2]) };
+}
+/** The card's answer: undefined when it pays, else what Checkout says under the button. */
+export function cardAnswer(v, nowSeconds, chargesNow) {
+    const digits = (v.cardNumber ?? '').replace(/\D/g, '');
+    if (!digits)
+        return 'Your card number is incomplete.';
+    if (DECLINES[digits])
+        return DECLINES[digits];
+    if (chargesNow && DECLINES_WHEN_CHARGED[digits])
+        return DECLINES_WHEN_CHARGED[digits];
+    if (!luhn(digits))
+        return 'Your card number is invalid.';
+    const exp = parseExpiry(v.cardExpiry ?? '');
+    if (!exp)
+        return "Your card's expiration date is incomplete.";
+    const { month, year } = exp;
+    if (month < 1 || month > 12)
+        return "Your card's expiration date is invalid.";
+    const now = new Date(nowSeconds * 1000);
+    if (year < now.getUTCFullYear() || (year === now.getUTCFullYear() && month < now.getUTCMonth() + 1))
+        return "Your card's expiration year is in the past.";
+    if (!/^\d{3,4}$/.test(v.cardCvc ?? ''))
+        return "Your card's security code is incomplete.";
+    return undefined;
+}
+/** Stripe's answer for a page of one of its hosts the twin does not serve. */
+export const notFound = () => new Response('Not Found', { status: 404, headers: { 'content-type': 'text/plain; charset=utf-8' } });

package/dist/src/screens/stripe-js.d.ts

@@ -0,0 +1,3 @@
+import type { HandlerContext } from '@volter/world-core';
+/** js.stripe.com's script for a GET of its path; Stripe's 404 for anything else there. */
+export declare function screen(ctx: HandlerContext): Promise<Response>;

package/dist/src/screens/stripe-js.js

@@ -0,0 +1,95 @@
+import { notFound } from "./shared.js";
+/** The release train a script path names: `/v3`, `/v3/` or `/v3/stripe.js` → 3, `/<train>/stripe.js` → the train. */
+function stripeJsTrain(pathname) {
+    return /^\/v3(\/|\/stripe\.js)?$/.test(pathname) ? 3 : /^\/([a-z]+)\/stripe\.js$/.exec(pathname)?.[1];
+}
+// source: archive:https://registry.npmjs.org/@stripe/stripe-js/-/stripe-js-8.6.0.tgz#sha256=13e61419e9076ab440cc636e34d3ea5df3fc62bbf2d6a80d3fd718e8cd47f0a2!/package/dist/stripe-js/checkout.d.ts "loadActions: () => Promise<StripeCheckoutLoadActionsResult>"
+function script(version) {
+    return `(function () {
+  var version = ${JSON.stringify(version)};
+  function gap(name) {
+    return function () { throw new Error("Stripe.js (Volter twin): stripe." + name + " is not modelled by this twin yet"); };
+  }
+  function initCheckout(options) {
+    var session, root, fields = {}, listeners = {};
+    function emit(name, value) { (listeners[name] || []).forEach(function (fn) { fn(value); }); }
+    function call(action, values) {
+      var secret = options.clientSecret;
+      var id = secret.split("_secret_")[0];
+      return fetch("https://api.stripe.com/v1/payment_pages/" + encodeURIComponent(id) + "/" + action, {
+        method: "POST", headers: { "content-type": "application/json" },
+        body: JSON.stringify(Object.assign({ client_secret: secret }, values || {}))
+      }).then(function (r) { return r.json(); }).then(function (result) {
+        if (result.type === "success") { session = result.session; emit("change", session); }
+        return result;
+      });
+    }
+    var actions = {
+      getSession: function () { return session; },
+      applyPromotionCode: function (code) { return call("apply_promotion_code", { promotion_code: code }); },
+      removePromotionCode: function () { return call("remove_promotion_code"); },
+      confirm: function (params) {
+        return call("confirm", Object.assign({}, params || {}, { payment_details: fields })).then(function (result) {
+          if (result.type === "success" && (!params || params.redirect !== "if_required") && result.return_url) window.location.assign((params && params.returnUrl) || result.return_url);
+          return result;
+        });
+      }
+    };
+    var elementListeners = {};
+    function elementEmit(name, value) { (elementListeners[name] || []).forEach(function (fn) { fn(value); }); }
+    var element = {
+      on: function (name, fn) { (elementListeners[name] || (elementListeners[name] = [])).push(fn); return element; },
+      off: function (name, fn) { elementListeners[name] = (elementListeners[name] || []).filter(function (f) { return f !== fn; }); return element; },
+      mount: function (target) {
+        root = typeof target === "string" ? document.querySelector(target) : target;
+        [["cardNumber", "Card number", "cc-number"], ["cardExpiry", "Expiration", "cc-exp"], ["cardCvc", "CVC", "cc-csc"], ["billingName", "Cardholder name", "cc-name"]].forEach(function (field) {
+          var label = document.createElement("label"), input = document.createElement("input");
+          label.textContent = field[1]; input.name = field[0]; input.autocomplete = field[2];
+          input.addEventListener("input", function () { fields[field[0]] = input.value; elementEmit("change", { empty: !fields.cardNumber, complete: !!(fields.cardNumber && fields.cardExpiry && fields.cardCvc), value: { type: "card" } }); });
+          label.appendChild(input); root.appendChild(label);
+        });
+        Promise.resolve().then(function () { elementEmit("ready", element); });
+      },
+      unmount: function () { if (root) root.replaceChildren(); root = null; },
+      destroy: function () { element.unmount(); elementListeners = {}; },
+      update: function () {}
+    };
+    return {
+      on: function (name, fn) { (listeners[name] || (listeners[name] = [])).push(fn); },
+      loadActions: function () { return call("init").then(function (r) { return r.type === "success" ? { type: "success", actions: actions } : r; }); },
+      createPaymentElement: function () { return element; }, getPaymentElement: function () { return element; },
+      changeAppearance: function () {}, loadFonts: function () {}
+    };
+  }
+  function Stripe(publishableKey) {
+    if (typeof publishableKey !== "string" || !publishableKey) throw new Error("Stripe.js (Volter twin): Stripe() needs a publishable key");
+    var known = {
+      initCheckout: initCheckout,
+      _registerWrapper: function () {},
+      redirectToCheckout: function (options) {
+        if (!options || typeof options.sessionId !== "string" || !options.sessionId) return gap("redirectToCheckout without a sessionId")();
+        window.location.assign("https://checkout.stripe.com/c/pay/" + encodeURIComponent(options.sessionId));
+        return new Promise(function () {});
+      }
+    };
+    return new Proxy(known, {
+      get: function (target, name) {
+        if (name in target) return target[name];
+        if (typeof name === "symbol" || name === "then") return undefined;
+        return gap(String(name));
+      }
+    });
+  }
+  Stripe.version = version;
+  window.Stripe = Stripe;
+})();
+`;
+}
+/** js.stripe.com's script for a GET of its path; Stripe's 404 for anything else there. */
+export async function screen(ctx) {
+    const request = ctx.call.request;
+    const train = request.method === 'GET' || request.method === 'HEAD' ? stripeJsTrain(new URL(request.url).pathname) : undefined;
+    if (train === undefined)
+        return notFound();
+    return new Response(script(train), { headers: { 'content-type': 'application/javascript; charset=utf-8', 'access-control-allow-origin': '*' } });
+}

package/dist/src/semantics/account.d.ts

@@ -0,0 +1,2 @@
+import type { HandlerContext } from '@volter/world-core';
+export declare function GetAccount(ctx: HandlerContext): Promise<Response>;

package/dist/src/semantics/account.js

@@ -0,0 +1,8 @@
+import { PLATFORM_ACCOUNT_ID } from "../engine/stripe.js";
+import { actingAccount, accountMissing } from "./shared.js";
+// source: spec:GetAccount "Retrieves the details of an account."
+export async function GetAccount(ctx) {
+    const id = actingAccount(ctx) ?? PLATFORM_ACCOUNT_ID;
+    const account = ctx.get('account', id);
+    return account ? ctx.reply(ctx.expand('account', account)) : accountMissing(ctx, id);
+}

package/dist/src/semantics/account_links.d.ts

@@ -0,0 +1,2 @@
+import type { HandlerContext } from '@volter/world-core';
+export declare function PostAccountLinks(ctx: HandlerContext): Promise<Response>;

package/dist/src/semantics/account_links.js

@@ -0,0 +1,22 @@
+import { nowUnix } from "../engine/stripe.js";
+import { accountMissing, fail } from "./shared.js";
+// ── hosted onboarding links and embedded-component sessions ──
+export async function PostAccountLinks(ctx) {
+    const account = typeof ctx.params.account === 'string' ? ctx.params.account : '';
+    if (!account)
+        return fail(ctx, 'Missing required param: account.', 400, 'parameter_missing');
+    if (!ctx.get('account', account))
+        return accountMissing(ctx, account, 400);
+    const linkType = typeof ctx.params.type === 'string' ? ctx.params.type : '';
+    if (linkType !== 'account_onboarding' && linkType !== 'account_update')
+        return fail(ctx, 'Invalid account link type: must be account_onboarding or account_update.', 400, 'parameter_invalid_string_enum');
+    // the owner is sent back to return_url when done, and to refresh_url for a new link once this one is used or expired
+    for (const k of ['refresh_url', 'return_url'])
+        if (typeof ctx.params[k] !== 'string' || !ctx.params[k])
+            return fail(ctx, `Missing required param: ${k}.`, 400, 'parameter_missing');
+    const now = Number(nowUnix(ctx.occurredAt));
+    const id = ctx.mint('account_link');
+    const link = { object: 'account_link', created: now, expires_at: now + 300, url: `https://connect.stripe.com/setup/${id}` };
+    await ctx.write('account_link', id, { ...link, account, type: linkType, refresh_url: ctx.params.refresh_url, return_url: ctx.params.return_url, used: false }, 'account_link.create');
+    return ctx.reply(link);
+}

package/dist/src/semantics/accounts.d.ts

@@ -0,0 +1,4 @@
+import type { HandlerContext } from '@volter/world-core';
+export declare function GetAccountsAccountExternalAccounts(ctx: HandlerContext): Promise<Response>;
+export declare function PostAccounts(ctx: HandlerContext): Promise<Response>;
+export declare function PostAccountsAccountLoginLinks(ctx: HandlerContext): Promise<Response>;