@volter/twin-stripe 2.0.38 → 3.0.1

package/src/index.ts

@@ -1,118 +1,12 @@
-// @volter/twin-stripe — the Stripe twin (one vendor, one package), built on the
-// shared @volter/world-core kernel. REST transport, spec-correct shapes, event/webhook
-// emission, and a React dashboard UI mirror. (Conformance tooling lives in
-// @volter/world-tooling, a dev dependency — not shipped in the runtime API.)
-export { handleStripeTwinRequest } from './stripe-twin.ts';
-export type { StripeRequest, StripeResponse } from './stripe-twin.ts';
-// The serverless-ready surface: the whole serve path as a plain fetch, plus the one-line
-// Bun.serve wrapper the CLI/standalone lane uses (jira/slack are the reference packs).
-export { createStripeTwinFetch, createStripeTwinServer } from './stripe-server.ts';
-export type { StripeTwinOptions } from './stripe-server.ts';
-export {
-  clearStripeWebhooks,
-  computeStripeSignature,
-  constructEvent,
-  emitStripeEvent,
-  eventTypeFor,
-  generateTestHeaderString,
-  listStripeWebhooks,
-  registerStripeWebhook,
-  StripeSignatureVerificationError,
-} from './stripe-events.ts';
-export type { StripeEvent, StripeEventDelivery } from './stripe-events.ts';
-// The DELIVER verb's pack side (kernel seam: @volter/world-core emit.ts) — `world-stripe emit`.
-export { stripeEmitter } from './stripe-emit.ts';
-export {
-  fullSyncStripe,
-  liveStripeExecute,
-  mapCustomer,
-  mapScalarResource,
-  mapSubscription,
-  pullStripeAll,
-  pullStripeCustomers,
-  pullStripeSubscriptions,
-  pullStripeWebhookEndpoints,
-  pushStripeAction,
-  stripeRequestForAction,
-  syncStripeFromReal,
-} from './stripe-connector.ts';
-export type { StripeExecute, LiveStripeOptions } from './stripe-connector.ts';
-// The client-side rate budget — the fail-closed backstop `liveStripeExecute` routes every live
-// request through. The MECHANISM is the kernel's shared, vendor-agnostic `RateBudget`; what lives
-// here is Stripe's DECLARATION (window/ceiling/per-endpoint weights) plus the vendor-bound
-// bindings. Exported so an operator can inspect spend (`snapshot`) and so a caller can catch
-// `StripeBudgetError` by type; there is deliberately no export that disables the guard.
-export {
-  STRIPE_BUDGET_CEILING,
-  STRIPE_BUDGET_MAX_RETRY_AFTER_S,
-  STRIPE_BUDGET_WINDOW_MS,
-  STRIPE_CALL_WEIGHTS,
-  STRIPE_RATE_BUDGET,
-  StripeBudget,
-  StripeBudgetError,
-  stripeBudgetPath,
-  stripeCallWeight,
-} from './stripe-budget.ts';
-export type { StripeBudgetErrorKind, StripeBudgetOptions, StripeBudgetReservation, StripeBudgetSnapshot } from './stripe-budget.ts';
-export { buildStripeMirrorClient, createStripeMirrorServer, stripeMirrorHtml } from './stripe-mirror-ui.ts';
+// @volter/twin-stripe — the stripe twin (Protocol 3). A fixed file (create-pack): the descriptor is the manifest's, and the
+// kernel derives the vendor-backed half from the generated surface, unless the manifest declares none (vendorBacked.none;
+// architecture, "The real-system adapters").
+import { packOf, registerPack, type DerivedSurface } from '@volter/world-core';
+import { manifest } from './manifest.ts';
+import surface from './generated/surface.gen.json' with { type: 'json' };
 
-// Registry descriptor (#1): the pack self-describes so tooling can discover it.
-// A consumer does `registerPack(pack)` after importing this package.
-import type { TwinPack } from '@volter/world-core';
-import { STRIPE_RATE_BUDGET as RATE_BUDGET } from './stripe-budget.ts';
-import { stripeEmitter } from './stripe-emit.ts';
-import { performStripeAction, syncStripeFromRemote } from './stripe-connector.ts';
+export { createStripeFetch } from './fetch.ts';
+export { createStripeTwinServer } from './server.ts';
+export { manifest };
 
-export const pack: TwinPack = {
-  // PROTOCOL 2 (docs/contributing/architecture.md#protocol-2-the-pack-is-a-plugin): the pack is a plugin — its wire, its tree, and its half of the real
-  // state system: perform one entry against Stripe, refresh the root from it. Moved 2026-09-08.
-  protocol: '2',
-  refresh: { every: '5m', webhook: true, onDemand: { atMost: '30s' } },
-  stateSystem: { perform: performStripeAction, refresh: syncStripeFromRemote },
-  // the round trip: a customer, then a product — two independent creates, both of which Stripe mints an id
-  // for, so the last one repeats cleanly on a branch
-  roundTrip: [
-    { method: 'POST', path: '/v1/customers', body: { email: 'round@trip.test', name: 'Round Trip' }, headers: { authorization: 'Bearer sk_test_round_trip' } },
-    { method: 'POST', path: '/v1/products', body: { name: 'Round Trip' }, headers: { authorization: 'Bearer sk_test_round_trip' } },
-  ],
-  parityOrigin: 'http://twin',
-  vendor: 'stripe',
-  // The SAME object stripe-budget.ts declares at module load — one source of truth, so registering
-  // the pack and importing the connector can never arm two different ceilings.
-  rateBudget: RATE_BUDGET,
-  transport: 'rest',
-  archetype: 'crud',
-  bin: 'world-stripe',
-  resources: ['charge', 'customer', 'payment_intent', 'setup_intent', 'payment_method', 'subscription', 'price', 'product', 'invoice', 'invoiceitem', 'refund', 'event'],
-  specSource: 'test-fixtures/stripe-schemas.json (per-object JSON Schemas from Stripe OpenAPI)',
-  description: 'Stripe REST twin — spec-correct shapes, events, dashUI mirror.',
-  // Stripe.js calls the same-origin '/v1/…' and loads from api.stripe.com — the dev proxy
-  // forwards '/v1/' to the twin and strips the absolute host so calls come back same-origin.
-  browserRouting: { apiPathPrefix: '/v1/', loaderHost: 'https://api.stripe.com' },
-  // Adoption + interception: the official server SDK, the STRIPE_* credential stem, and the
-  // one live API host — declared HERE, not in the central maps (descriptor-first exemplar (adding-a-twin.md §3);
-  // the pack-facts artifact carries them to covers/inspect-project and inject.cjs).
-  // NEXT_PRIVATE_STRIPE_* joined the stem list in the adoption-facts sweep 2026-08-31.
-  // `stripeconnect` is deliberately NOT claimed: no Connect-only credential stem is modeled, so a repo
-  // holding only that credential is build-surface, not coverage this twin can honor.
-  adoption: {
-    // Stripe's official Python bindings.
-    pypi: ['stripe'],
-    sdks: ['stripe'], envStems: ['STRIPE', 'NEXTPRIVATESTRIPE'],
-  },
-  // The API and the hosted flows (src/screens): checkout.stripe.com's payment page, billing.stripe.com's customer
-  // portal, connect.stripe.com's onboarding and its OAuth endpoints (/oauth/authorize, /oauth/token, /oauth/deauthorize:
-  // src/screens/connect-oauth.tsx), verify.stripe.com's identity check and the bank-linking flow Stripe.js
-  // opens: an application that sends a person to one of their urls lands in the World. dashboard.stripe.com serves the
-  // Dashboard's Public details page (src/screens/public-details.tsx), where the operator sets the name customers see,
-  // and its Connect OAuth settings (src/screens/connect-settings.tsx: the client_id, OAuth on, the redirect URIs);
-  // claiming the host makes every other dashboard.stripe.com path an unclaimed path on a twinned host, refused in a
-  // World rather than sent to the real Dashboard. js.stripe.com also serves
-  // Stripe.js itself, the client library an application's page loads (stripe-js.ts): /v3/, /v3/stripe.js and /<release train>/stripe.js.
-  hosts: [
-    { host: 'api.stripe.com' }, { host: 'checkout.stripe.com', pathPattern: '^/c/pay/' }, { host: 'billing.stripe.com', pathPattern: '^/p/session/' },
-    { host: 'connect.stripe.com', pathPattern: '^/setup/|^/oauth/(authorize|token|deauthorize)/?$' }, { host: 'dashboard.stripe.com', pathPattern: '^/settings/public/?$|^/(test/)?settings/connect(/onboarding-options/oauth)?/?$' }, { host: 'verify.stripe.com', pathPattern: '^/start/' }, { host: 'js.stripe.com', pathPattern: '^/v3/financial-connections/|^/v3/?$|^/(v3|[a-z]+)/stripe\\.js$' },
-  ],
-  // DELIVER support: signed event synthesis from twin state (`world-stripe emit`).
-  emitter: stripeEmitter,
-};
+export const pack = registerPack(packOf(manifest, surface as unknown as DerivedSurface));