@volter/twin-stripe 3.0.0 → 3.0.2

package/src/screens/billing-portal.tsx

@@ -22,8 +22,7 @@ import type { Row } from '../engine/common.ts';
 import { publicBusinessName } from '../engine/display.ts';
 import { declineFor, nowUnix, paymentMethodSubObject, PLATFORM_ACCOUNT_ID } from '../engine/stripe.ts';
 import { cardAnswer, COUNTRIES, formOf, money, notFound } from './shared.tsx';
-import { afterSuccessOf, created, payerOf, payOpenInvoice } from '../semantics/shared.ts';
-
+import { resourceView, afterSuccessOf, created, payerOf, payOpenInvoice } from '../semantics/shared.ts';
 const SUB = 'subscription';
 const PORTAL_OPERATION = { id: 'PostBillingPortalSessions' };
 
@@ -72,7 +71,7 @@ function planOf(ctx: HandlerContext, sub: Row): { name: string; price: string }
 function page(ctx: HandlerContext, id: string, session: Row, problem?: { error: string; values: Record<string, string> }): Response {
   const features = featuresOf(ctx, session);
   const customer = ctx.get('customer', String(session.customer)) ?? {};
-  const subs = ctx.rows(SUB).filter((s) => s.customer === session.customer && s.status !== 'canceled' && s.status !== 'incomplete_expired');
+  const subs = ctx.rows(SUB).map((s) => ctx.expand(SUB, s)).filter((s) => s.customer === session.customer && s.status !== 'canceled' && s.status !== 'incomplete_expired');
   const plans: PortalItem[] = subs.map((s) => {
     const plan = planOf(ctx, s);
     const ending = s.cancel_at_period_end === true;
@@ -140,7 +139,7 @@ function page(ctx: HandlerContext, id: string, session: Row, problem?: { error:
 
 /** The customer's move on one of their subscriptions, then back to the portal. */
 async function move(ctx: HandlerContext, id: string, session: Row, subscription: string, kind: 'cancel' | 'renew'): Promise<Response> {
-  const sub = ctx.get(SUB, subscription);
+  const sub = resourceView(ctx, SUB, subscription);
   if (!sub || sub.customer !== session.customer || sub.status === 'canceled') return gone();
   const back = new Response(null, { status: 303, headers: { location: `/p/session/${id}` } });
   if (kind === 'renew') {
@@ -177,7 +176,7 @@ async function updatePaymentMethod(ctx: HandlerContext, id: string, session: Row
   });
   const holder = ctx.get('customer', customer) ?? {};
   await ctx.write('customer', customer, { invoice_settings: { ...((holder.invoice_settings as Row | undefined) ?? {}), default_payment_method: pm.id } }, 'customer.update');
-  for (const sub of ctx.rows(SUB).filter((s) => s.customer === customer && s.status !== 'canceled' && s.status !== 'incomplete_expired')) {
+  for (const sub of ctx.rows(SUB).map((s) => ctx.expand(SUB, s)).filter((s) => s.customer === customer && s.status !== 'canceled' && s.status !== 'incomplete_expired')) {
     await ctx.write(SUB, String(sub.id), { default_payment_method: pm.id }, 'subscription.update');
   }
   return new Response(null, { status: 303, headers: { location: `/p/session/${id}` } });
@@ -187,7 +186,7 @@ async function updatePaymentMethod(ctx: HandlerContext, id: string, session: Row
 async function payInvoice(ctx: HandlerContext, id: string, session: Row, invoiceId: string): Promise<Response> {
   const inv = ctx.get('invoice', invoiceId);
   if (!inv || inv.customer !== session.customer || inv.status !== 'open') return gone();
-  const sub = typeof inv.subscription === 'string' ? ctx.get(SUB, inv.subscription) : undefined;
+  const sub = typeof inv.subscription === 'string' ? resourceView(ctx, SUB, inv.subscription) : undefined;
   const holder = ctx.get('customer', String(session.customer)) ?? {};
   const pm = (sub ? payerOf(ctx, sub) : undefined) ?? ((holder.invoice_settings as Row | undefined)?.default_payment_method as string | undefined);
   if (!pm) return page(ctx, id, session, { error: 'Add a payment method to pay this invoice.', values: {} });
@@ -212,4 +211,3 @@ export async function screen(ctx: HandlerContext): Promise<Response> {
   if (kind === 'pay') return payInvoice(ctx, id, session, form.invoice ?? '');
   return move(ctx, id, session, form.subscription ?? '', kind);
 }
-

package/src/screens/checkout-js.ts

@@ -0,0 +1,80 @@
+import type { HandlerContext } from '@volter/world-core';
+import type { Row } from '../engine/common.ts';
+import { newCustomer } from '../engine/customers.ts';
+import { CS } from '../engine/checkout.ts';
+import { applyCouponDiscount, nowUnix, resolveTrial } from '../engine/stripe.ts';
+import { cardAnswer, parseExpiry } from './shared.tsx';
+import { completeSession, discountOf, created } from '../semantics/shared.ts';
+
+function amount(value: number, currency: string): Row {
+  return { amount: new Intl.NumberFormat('en-US', { style: 'currency', currency }).format(value / 100), minorUnitsAmount: value };
+}
+
+// source: archive:https://registry.npmjs.org/@stripe/stripe-js/-/stripe-js-8.6.0.tgz#sha256=13e61419e9076ab440cc636e34d3ea5df3fc62bbf2d6a80d3fd718e8cd47f0a2!/package/dist/stripe-js/checkout.d.ts "export interface StripeCheckoutSession"
+// The SDK publishes its contract, not its private HTTP wire. This authored payment_pages wire uses the same session store and completion as hosted Checkout.
+function view(ctx: HandlerContext, session: Row): Row {
+  const currency = String(session.currency ?? 'usd');
+  const lines = ((session.line_items as Row)?.data ?? []) as Row[];
+  const stored = ctx.row(CS, String(session.id)) ?? session;
+  const trial = session.mode === 'subscription' ? resolveTrial((stored._subscription_data as Row) ?? {}, nowUnix(ctx.occurredAt)) : undefined;
+  const customer = typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined;
+  const discount = stored._discount as Row | undefined;
+  const promotion = typeof discount?.promotion_code === 'string' ? ctx.get('promotion_code', discount.promotion_code) : undefined;
+  const zero = amount(0, currency);
+  return {
+    id: session.id, billingAddress: null, businessName: null, canConfirm: session.status === 'open', currency,
+    currencyOptions: null, discountAmounts: promotion ? [{ ...amount(Number((session.total_details as Row)?.amount_discount ?? 0), currency), promotionCode: promotion.code }] : [],
+    email: customer?.email ?? session.customer_email ?? null, lastPaymentError: null,
+    lineItems: lines.map(line => ({ id: line.id, name: line.description, quantity: line.quantity, unitAmount: amount(Number(line.amount_subtotal) / Number(line.quantity || 1), currency), total: amount(Number(line.amount_total), currency) })),
+    livemode: false, minorUnitsAmountDivisor: 100, phoneNumber: null,
+    recurring: session.mode === 'subscription' ? { trial: trial ? { trialEnd: trial.end, trialPeriodDays: Math.ceil((trial.end - trial.start) / 86400) } : null } : null,
+    savedPaymentMethods: [], shipping: null, shippingAddress: null, shippingOptions: [],
+    status: session.status === 'complete' ? { type: 'complete', paymentStatus: session.payment_status } : { type: session.status },
+    tax: { status: 'ready' }, taxAmounts: [], taxIdInfo: null,
+    total: { appliedBalance: zero, balanceAppliedToNextInvoice: false, discount: amount(Number((session.total_details as Row)?.amount_discount ?? 0), currency), shippingRate: zero, subtotal: amount(Number(session.amount_subtotal ?? 0), currency), taxExclusive: zero, taxInclusive: zero, total: amount(trial ? 0 : Number(session.amount_total ?? 0), currency) },
+  };
+}
+
+const failed = (message: string, code: string | null = null): Response => Response.json({ type: 'error', error: { message, code } });
+
+export async function screen(ctx: HandlerContext): Promise<Response> {
+  const path = new URL(ctx.call.request.url).pathname;
+  const id = path.split('/')[3]!;
+  const action = path.split('/')[4];
+  const params = ctx.params;
+  const session = ctx.get(CS, id);
+  // The private client secret is the browser's authority for this session; it never accepts a secret API key.
+  if (!session || session.ui_mode !== 'custom' || params.client_secret !== session.client_secret) return failed('Invalid Checkout Session client secret.');
+  if (action === 'init') return Response.json({ type: 'success', session: view(ctx, session) });
+  if (session.status !== 'open') return failed('This Checkout Session is no longer active.');
+  if (action === 'apply_promotion_code' || action === 'remove_promotion_code') {
+    if (action === 'apply_promotion_code' && session.allow_promotion_codes !== true) return failed('Promotion codes are not enabled for this Checkout Session.');
+    const promotion = action === 'apply_promotion_code' ? ctx.rows('promotion_code').find(p => p.code === params.promotion_code && p.active === true) : undefined;
+    if (action === 'apply_promotion_code' && !promotion) return failed('This promotion code is invalid.', 'invalidPromotionCode');
+    const discount = promotion ? discountOf(ctx, { discounts: [{ promotion_code: promotion.id }] }, nowUnix(ctx.occurredAt)) : undefined;
+    if (discount instanceof Response) return failed('This promotion code is invalid.', 'invalidPromotionCode');
+    const off = discount ? applyCouponDiscount(Number(session.amount_subtotal), discount.coupon) : 0;
+    const fields = { amount_total: Number(session.amount_subtotal) - off, total_details: { ...(session.total_details as Row), amount_discount: off }, discounts: discount ? [{ coupon: discount.coupon.id, promotion_code: promotion!.id }] : [], _discount: discount ? { coupon: discount.coupon.id, promotion_code: promotion!.id } : null };
+    const updated = await ctx.write(CS, id, fields, 'checkout.session.update');
+    return Response.json({ type: 'success', session: view(ctx, updated) });
+  }
+  if (action !== 'confirm') return failed('Unrecognized Checkout action.');
+  const values = (params.payment_details ?? {}) as Record<string, string>;
+  const stored = ctx.row(CS, id) ?? session;
+  const trial = session.mode === 'subscription' ? resolveTrial((stored._subscription_data as Row) ?? {}, nowUnix(ctx.occurredAt)) : undefined;
+  const refusal = cardAnswer(values, nowUnix(ctx.occurredAt), !trial);
+  if (refusal) return failed(refusal, 'paymentFailed');
+  const customer = typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined;
+  const email = String(customer?.email ?? params.email ?? session.customer_email ?? '');
+  if (!/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email)) return failed('Your email address is incomplete.');
+  let existing = session;
+  if (!customer && session.mode === 'subscription') {
+    const cid = ctx.mint('customer');
+    const made = await created(ctx, 'customer', { id: cid, email }, { livemode: false, ...newCustomer(cid) });
+    existing = { ...session, customer: made.id };
+  }
+  const expiry = parseExpiry(values.cardExpiry)!;
+  const completed = await completeSession(ctx, id, existing, { customer: existing.customer, customer_details: { email, name: values.billingName ?? null, address: null, phone: null, tax_exempt: 'none', tax_ids: [] } }, { number: values.cardNumber.replace(/\D/g, ''), exp_month: expiry.month, exp_year: expiry.year });
+  if (completed instanceof Response) return failed('This Checkout Session is no longer active.');
+  return Response.json({ type: 'success', session: view(ctx, completed), return_url: session.return_url });
+}

package/src/screens/checkout.tsx

@@ -24,7 +24,6 @@ import { publicBusinessName } from '../engine/display.ts';
 import { applyCouponDiscount, nowUnix, PLATFORM_ACCOUNT_ID, resolveTrial } from '../engine/stripe.ts';
 import { cardAnswer, COUNTRIES, formOf, money, notFound, parseExpiry } from './shared.tsx';
 import { completeSession, created } from '../semantics/shared.ts';
-
 const CS = 'checkout.session';
 const COMPLETE_OPERATION = { id: 'PostCheckoutSessionsSession' };
 
@@ -202,4 +201,3 @@ export async function screen(ctx: HandlerContext): Promise<Response> {
   const full = { ...session, _subscription_data: stored._subscription_data, _price_data: stored._price_data, _merchant: merchantOf(ctx, stored), _coupon: typeof coupon === 'string' ? ctx.get('coupon', coupon) : undefined, _customer: typeof session.customer === 'string' ? ctx.get('customer', session.customer) : undefined };
   return request.method === 'GET' ? page(full, id, nowUnix(ctx.occurredAt)) : pay(ctx, id, full, values);
 }
-

package/src/screens/connect-onboarding.tsx

@@ -31,9 +31,7 @@ import { formOf, notFound, seeOther, STRIPE_CONSENT_SKIN } from './shared.tsx';
 import { INDUSTRIES as MCCS } from '../engine/industries.ts';
 import { currentlyDue, type Form, type Kind, kindOf, OFFERED } from '../engine/onboarding.ts';
 import { created, syncExternals } from '../semantics/shared.ts';
-
 const LINK = 'account_link';
-const OPERATION = { id: 'PostAccountsAccount' };
 
 const gone = (): Response => flowPage({ title: 'Stripe', status: 404, css: [CONSENT_CSS, STRIPE_CONSENT_SKIN], body: <main className="consent"><h1 className="consent-heading">This link is invalid.</h1></main> });
 
@@ -126,7 +124,7 @@ async function submit(ctx: HandlerContext, link: Row, kind: Kind, v: Form, ip: s
   if (!account) return;
   const caps: Row = { ...((account.capabilities as Row | undefined) ?? {}) };
   for (const [cap, status] of Object.entries(caps)) {
-    if (status !== 'active' && !ctx.legal('capability', 'status', OPERATION.id, String(status), 'active', cap, 'vendor')) caps[cap] = 'active';
+    if (status !== 'active') caps[cap] = 'active';
   }
   const due = currentlyDue(kind, v);
   const requirements = { ...((account.requirements as Row | undefined) ?? {}), currently_due: due, eventually_due: due, past_due: [], disabled_reason: null, current_deadline: null };
@@ -135,6 +133,7 @@ async function submit(ctx: HandlerContext, link: Row, kind: Kind, v: Form, ip: s
   const person = { first_name: v.first_name, last_name: v.last_name, email: v.email, phone: v.phone, dob: { day, month, year }, address: addressOf(''), ssn_last_4_provided: true, id_number_provided: false };
   const company = kind === 'company';
   const settings = (account.settings as Row | undefined) ?? {};
+  const individual = company ? null : await created(ctx, 'person', { ...person, account: id }, { relationship: { representative: true }, metadata: {} });
   await ctx.write('account', id, {
     details_submitted: true, charges_enabled: due.length === 0, payouts_enabled: due.length === 0, capabilities: caps, requirements,
     business_type: kind,
@@ -142,7 +141,7 @@ async function submit(ctx: HandlerContext, link: Row, kind: Kind, v: Form, ip: s
     settings: { ...settings, payments: { ...((settings.payments as Row | undefined) ?? {}), statement_descriptor: v.statement_descriptor } },
     ...(company
       ? { company: { name: v.company_name, phone: v.company_phone, address: addressOf('company_'), tax_id_provided: true, owners_provided: true, directors_provided: false, executives_provided: false } }
-      : { individual: { ...person, id: `person_${id}` } }),
+      : { individual: individual!.id }),
     tos_acceptance: { date: nowUnix(ctx.occurredAt), ip, user_agent: null },
   }, 'account.updated');
   if (company) {
@@ -196,4 +195,3 @@ export async function screen(ctx: HandlerContext): Promise<Response> {
   await submit(ctx, link, kind, form, request.headers.get('x-forwarded-for')?.split(',')[0]?.trim() || '127.0.0.1');
   return seeOther(String(link.return_url));
 }
-

package/src/screens/dashboard.tsx

@@ -1,6 +1,7 @@
 // THE DASHBOARD — dashboard.stripe.com's pages an operator sets what Stripe's API cannot (docs/contributing/architecture.md,
 // "Screens": a workspace): Public details (/settings/public) and the Connect OAuth settings
-// (/settings/connect/onboarding-options/oauth). Stripe's other Dashboard pages answer Stripe's 404 here.
+// (/settings/connect/onboarding-options/oauth), Radar lists and test Issuing funding.
+// The operator controls prepare the cited real application calls; other Dashboard pages answer Stripe's 404.
 //
 // THE DASHBOARD'S PUBLIC DETAILS — a workspace page (docs/contributing/architecture.md, "Screens") of the Dashboard
 // (manifest screen `dashboard`), at dashboard.stripe.com/settings/public: Settings → Business → Public details, where
@@ -44,69 +45,20 @@
 // page's own address and the save redirects to it.
 import type { HandlerContext } from '@volter/world-core';
 import { flowPage } from '@volter/world-ui';
+import { VL } from '../engine/radar.ts';
+import { nowUnix } from '../engine/stripe.ts';
 import type { Row } from '../engine/common.ts';
 import { platformAccountDefault } from '../engine/connect.ts';
-import { CONNECT_SETTINGS_PATH, type ConnectOAuthSettings, PLATFORM_CLIENT_ID, redirectUris, SETTINGS } from '../engine/connect-settings.ts';
 import { publicBusinessName } from '../engine/display.ts';
 import { PLATFORM_ACCOUNT_ID } from '../engine/stripe.ts';
 import { formOf, notFound } from './shared.tsx';
-import { connectOAuthSettings, created } from '../semantics/shared.ts';
+import { created } from '../semantics/shared.ts';
+const redirect = (path: string): Response => new Response(null, { status: 303, headers: { location: path } });
+const invalid = (message: string): Response => flowPage({ css: [], title: 'Stripe', status: 400, body: <main><p role="alert">{message}</p></main> });
 
 const PUBLIC_DETAILS_PATH = '/settings/public';
 const MAX_NAME = 5000;
 
-const SETTINGS_CSS = `
-* { box-sizing: border-box; }
-body { margin: 0; background: #f6f8fa; color: #1a1f36; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Ubuntu, sans-serif; font-size: 14px; }
-.co { max-width: 680px; margin: 48px auto; padding: 0 16px; }
-.co h1 { font-size: 28px; margin: 16px 0 4px; }
-.co-lead { color: #697386; margin: 0 0 24px; }
-.co-card { background: #ffffff; border: 1px solid #e3e8ee; border-radius: 8px; padding: 24px; margin-bottom: 16px; }
-.co-card h2 { font-size: 16px; margin: 0 0 12px; }
-.co-card label { display: block; font-weight: 600; margin-bottom: 6px; }
-.co-card small { display: block; color: #697386; margin-bottom: 8px; }
-.co-card textarea { width: 100%; min-height: 96px; padding: 8px 10px; border: 1px solid #c1c9d2; border-radius: 6px; font: 13px ui-monospace, Menlo, monospace; }
-.co-id { font: 14px ui-monospace, Menlo, monospace; background: #f6f8fa; border: 1px solid #e3e8ee; border-radius: 6px; padding: 6px 10px; display: inline-block; }
-.co-toggle { display: flex; gap: 8px; align-items: center; font-weight: 600; }
-.co-actions { display: flex; justify-content: flex-end; }
-.co-actions button { background: #635bff; color: #ffffff; border: 0; border-radius: 6px; padding: 8px 16px; font: inherit; font-weight: 600; cursor: pointer; }
-.co-notice { padding: 10px 12px; border-radius: 6px; margin-bottom: 16px; }
-.co-error { background: #fff0f3; color: #df1b41; }
-.co-saved { background: #e7f8ef; color: #0e6245; }
-.co-uris { margin: 0; padding-left: 18px; }
-`;
-
-function settingsPage(s: ConnectOAuthSettings, opts: { value?: string; enabled?: boolean; error?: string; saved?: boolean } = {}): Response {
-  const enabled = opts.enabled ?? s.oauth_enabled;
-  return flowPage({
-    title: 'OAuth – Connect settings – Stripe',
-    css: [SETTINGS_CSS],
-    ...(opts.error ? { status: 400 } : {}),
-    body: (
-      <main className="co">
-        <h1>OAuth</h1>
-        <p className="co-lead">Onboard Standard accounts by sending them to Stripe's OAuth flow. Test mode.</p>
-        {opts.error ? <p className="co-notice co-error" role="alert">{opts.error}</p> : null}
-        {opts.saved ? <p className="co-notice co-saved" role="status">Your OAuth settings were saved.</p> : null}
-        <section className="co-card">
-          <h2>Test mode client ID</h2>
-          <small>The client_id your platform sends to connect.stripe.com/oauth/authorize.</small>
-          <code className="co-id" data-testid="connect-client-id">{PLATFORM_CLIENT_ID}</code>
-          <p data-testid="connect-oauth-status">{s.oauth_enabled ? 'OAuth is enabled.' : 'OAuth is disabled.'}</p>
-          {s.redirect_uris.length ? <ul className="co-uris">{s.redirect_uris.map((u) => <li key={u} data-testid="connect-redirect-uri">{u}</li>)}</ul> : <p>No redirect URIs.</p>}
-        </section>
-        <form className="co-card" method="post">
-          <label className="co-toggle" htmlFor="oauth_enabled"><input type="checkbox" id="oauth_enabled" name="oauth_enabled" value="on" defaultChecked={enabled} /> Enable OAuth for Standard accounts</label>
-          <label htmlFor="redirect_uris">Redirect URIs</label>
-          <small>One per line. The first is used when a request names none. http and localhost are allowed in test mode.</small>
-          <textarea id="redirect_uris" name="redirect_uris" defaultValue={opts.value ?? s.redirect_uris.join('\n')} />
-          <div className="co-actions"><button type="submit">Save</button></div>
-        </form>
-      </main>
-    ),
-  });
-}
-
 const DETAILS_CSS = `
 * { box-sizing: border-box; }
 body { margin: 0; background: #f6f8fa; color: #1a1f36; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Ubuntu, sans-serif; font-size: 14px; }
@@ -161,20 +113,6 @@ function nameRefused(name: string): string | undefined {
   return !name ? 'Enter your business name.' : name.length > MAX_NAME ? `Your business name must be at most ${MAX_NAME} characters.` : undefined;
 }
 
-async function settings(ctx: HandlerContext): Promise<Response> {
-  const request = ctx.call.request;
-  const url = new URL(request.url);
-  if (request.method !== 'GET' && request.method !== 'POST') return notFound();
-  const form = request.method === 'POST' ? await formOf(request.clone()) : {};
-  const held = connectOAuthSettings(ctx);
-  if (request.method === 'GET') return settingsPage(held, { saved: url.searchParams.has('saved') });
-  const enabled = form.oauth_enabled === 'on' || form.oauth_enabled === 'true';
-  const parsed = redirectUris(form.redirect_uris ?? '');
-  if ('refused' in parsed) return settingsPage(held, { value: form.redirect_uris ?? '', enabled, error: parsed.refused });
-  await ctx.record(SETTINGS, { oauth_enabled: enabled, redirect_uris: parsed.uris }, PLATFORM_CLIENT_ID);
-  return new Response(null, { status: 303, headers: { location: '?saved=1' } });
-}
-
 async function publicDetails(ctx: HandlerContext): Promise<Response> {
   const request = ctx.call.request;
   const url = new URL(request.url);
@@ -189,10 +127,54 @@ async function publicDetails(ctx: HandlerContext): Promise<Response> {
   return new Response(null, { status: 303, headers: { location: '?saved=1' } });
 }
 
-/** dashboard.stripe.com's pages: Public details and the Connect OAuth settings; Stripe's 404 for any other. */
+/** Dashboard settings, Radar list creation and test Issuing funding; other pages answer Stripe's 404. */
 export async function screen(ctx: HandlerContext): Promise<Response> {
   const path = new URL(ctx.call.request.url).pathname.replace(/\/+$/, '');
-  if (path === PUBLIC_DETAILS_PATH) return publicDetails(ctx);
-  if (CONNECT_SETTINGS_PATH.test(path)) return settings(ctx);
-  return notFound();
+  // The twin's declared workspace entry opens its implemented Public details page; this authored choice does not
+  // reproduce Stripe's Dashboard home. The request's public base retains the World mount when the console frames it.
+  if (path === '' && ['GET', 'HEAD'].includes(ctx.call.request.method)) return redirect(`${ctx.publicBase}${PUBLIC_DETAILS_PATH}`);
+  // source: https://docs.stripe.com/radar/lists "Use the Dashboard or the API to create lists."
+  // source: https://docs.stripe.com/radar/lists "Enter a name for the list"
+  // source: https://docs.stripe.com/radar/lists "Select the type of list to create."
+  // source: https://docs.stripe.com/radar/lists "Click Add to save your new list."
+  // Where the documentation stops: it names Dashboard controls, not their browser request routes or form wire.
+  // This authored page uses /radar/lists for GET and POST, /radar/lists/{id} for its redirect/detail address,
+  // and a 303 redirect after saving. The HTML field names name, alias and item_type are the twin's choices;
+  // item_type values are the pinned API's enums, not published Dashboard form values. The alias fallback's
+  // lowercase/underscore algorithm is also authored; Stripe says it generates an alias but gives no algorithm.
+  if (/^\/radar\/lists(?:\/[^/]+)?$/.test(path)) {
+    if (ctx.call.request.method === 'POST') {
+      const form = await formOf(ctx.call.request);
+      const types = ['string', 'case_sensitive_string', 'card_fingerprint', 'card_bin', 'customer_id', 'email', 'ip_address', 'country', 'sepa_debit_fingerprint', 'us_bank_account_fingerprint'];
+      if (!form.name?.trim() || !types.includes(form.item_type ?? '')) return invalid('Enter a name and select a list type.');
+      const alias = form.alias?.trim() || form.name.toLowerCase().replace(/[^a-z0-9]+/g, '_');
+      // Where the page stops: an operator has no login identity in the World; created_by is its synthetic operator.
+      const list = await created(ctx, VL, { name: form.name.trim(), alias, item_type: form.item_type }, {
+        created_by: 'twin', livemode: false, metadata: {},
+        list_items: { object: 'list', data: [], has_more: false, url: '/v1/radar/value_list_items' },
+      });
+      await ctx.write(VL, String(list.id), { list_items: { object: 'list', data: [], has_more: false, url: `/v1/radar/value_list_items?value_list=${list.id}` } }, 'radar.value_list.updated');
+      return redirect(`/radar/lists/${list.id}`);
+    }
+    return flowPage({ css: [], title: 'Lists – Radar – Stripe', body: <main><h1>Radar Lists</h1><form method="post" action="/radar/lists"><h2>New list</h2><label>Name<input name="name" required /></label><label>Alias<input name="alias" /></label><label>List type<select name="item_type"><option value="customer_id">Customer ID</option><option value="email">Email</option><option value="card_fingerprint">Card fingerprint</option><option value="ip_address">IP address</option><option value="string">String</option></select></label><button>Add</button></form><ul>{ctx.rows(VL).map(row => <li key={String(row.id)}>{String(row.name)} ({String(row.alias)})</li>)}</ul></main> });
+  }
+  // source: https://docs.stripe.com/issuing/testing "Before you create test transactions, you must add test funds to the Issuing balance on your account."
+  // source: https://docs.stripe.com/issuing/testing "You can create test top-ups in the Dashboard, or with the Top-ups API"
+  // Where the documentation stops: it states the Dashboard funding act, not a browser request path or form wire.
+  // The authored GET/POST address and 303 redirect are /test/issuing/balance. The form name amount, its positive
+  // integer validation and its units (USD cents for this US sandbox) are the twin's choices, not published form
+  // fields. Its POST records the balance change in the vendor ledger, with source=null (permitted by the pinned
+  // schema) and immediate availability for this sandbox control; the page states neither that source nor timing.
+  // No private Topup object is seeded or answered, and the uncalled Top-ups API remains the gap.
+  if (path === '/test/issuing/balance') {
+    if (ctx.call.request.method === 'POST') {
+      const form = await formOf(ctx.call.request);
+      const amount = Number(form.amount);
+      if (!Number.isInteger(amount) || amount <= 0) return invalid('Enter a positive amount in cents.');
+      await created(ctx, 'balance_transaction', {}, { amount, currency: 'usd', fee: 0, net: amount, type: 'topup', reporting_category: 'topup', source: null, status: 'available', balance_type: 'issuing', available_on: Number(nowUnix(ctx.occurredAt)), fee_details: [] });
+      return redirect('/test/issuing/balance');
+    }
+    return flowPage({ css: [], title: 'Test Issuing balance – Stripe', body: <main><h1>Test Issuing balance</h1><form method="post"><label>Amount<input name="amount" type="number" min="1" required /></label><button>Add test funds</button></form></main> });
+  }
+  return path === PUBLIC_DETAILS_PATH ? publicDetails(ctx) : notFound();
 }

package/src/screens/stripe-js.ts

@@ -1,150 +1,82 @@
-// STRIPE.JS — the client library an application's page loads from js.stripe.com, served as a content screen
-// (docs/contributing/architecture.md, "Screens": a widget the vendor ships into the application's own page "is not a screen: it is a client library,
-// twinned from its published types as an SDK surface is"). Written from @stripe/stripe-js's published loader and types
-// (7.x: dist/index.mjs, dist/stripe-js/stripe.d.ts, dist/stripe-js/hosted-checkout.d.ts), nothing of Stripe's script
-// copied:
-//   - the loader injects https://js.stripe.com/<release train>/stripe.js (or /v3/), and accepts a script already on the
-//     page whose src matches `/^https:\/\/js\.stripe\.com\/(v3|[a-z]+)\/stripe\.js(\?.*)?$/` (so /v3/stripe.js too);
-//     it resolves `window.Stripe`, reads `Stripe.version` (3 is the v3 URL, otherwise the train's name) and calls the
-//     instance's `_registerWrapper` when it has one;
-//   - `stripe.redirectToCheckout({ sessionId })` sends the customer to that Checkout Session's page (hosted-checkout.d.ts,
-//     RedirectToCheckoutServerOptions), which this twin serves at checkout.stripe.com/c/pay/{id} (screens/checkout.tsx),
-//     and its promise settles only on failure (`Promise<never | {error}>`);
-//   - `stripe.collectFinancialConnectionsAccounts({ clientSecret })` loads the Financial Connections authentication
-//     flow for the session whose client_secret it is (stripe.d.ts; docs.stripe.com/js/financial_connections/
-//     collect_financial_connections_accounts: "it will load the Authentication Flow, an on-page modal UI"). Where the
-//     twin decides: it navigates to the flow's page, js.stripe.com/v3/financial-connections/{client_secret}
-//     (screens/financial-connections.tsx), instead of a modal, so its promise does not settle; the flow returns the
-//     holder to the session's return_url, where the application reads the session's accounts.
-//   - `stripe.elements({ clientSecret?, ... })` groups elements; `elements.create('payment' | 'card')` makes one, which
-//     `mount`s into the page and emits `ready` and `change` ({ complete, empty }); `elements.submit()` checks the fields
-//     (stripe.d.ts: StripeElements, StripePaymentElement). Where the twin decides: an element is the page's own card
-//     fields (number, expiry, CVC), not Stripe's iframe;
-//   - `stripe.confirmPayment({ elements, clientSecret?, confirmParams: { return_url }, redirect? })` and
-//     `stripe.confirmSetup(...)` confirm the intent whose client secret it is with the card the element holds
-//     (`POST /v1/payment_intents/{id}/confirm`, `/v1/setup_intents/{id}/confirm`, with the publishable key), then send
-//     the customer to `return_url` with `payment_intent` (or `setup_intent`), its client secret and `redirect_status`,
-//     or, with `redirect: 'if_required'`, resolve `{ paymentIntent }` (`{ setupIntent }`); a refusal resolves
-//     `{ error }` (docs.stripe.com/js/payment_intents/confirm_payment).
-// Demand: Dub's upgrade button (apps/web/ui/workspaces/upgrade-plan-button.tsx) and cal.com's sign-up call
-// redirectToCheckout; cal.com's booking payment form (packages/platform/atoms/event-types/payments/StripePaymentForm.tsx)
-// and Twenty's billing forms (AddPaymentMethodForm.tsx, useSubmitSubscriptionPayment.ts) confirm intents through
-// Elements. Every other member of the library throws, naming itself, when called: an application reaching one finds the
-// gap instead of a silent no-op.
+// Stripe.js 7.3.1 is Dub’s pinned browser SDK (apps/web/package.json:49 and pnpm-lock.yaml).
+// Its loader requests a release-train script, reads window.Stripe and registers its wrapper.
+// The shipped upgrade button calls redirectToCheckout({ sessionId }); hosted-checkout.d.ts declares that
+// navigation and its promise that settles only on failure. Other SDK flows have no demanded caller.
 import type { HandlerContext } from '@volter/world-core';
 import { notFound } from './shared.tsx';
 
 /** The release train a script path names: `/v3`, `/v3/` or `/v3/stripe.js` → 3, `/<train>/stripe.js` → the train. */
 function stripeJsTrain(pathname: string): 3 | string | undefined {
-  if (/^\/v3(\/|\/stripe\.js)?$/.test(pathname)) return 3;
-  return /^\/([a-z]+)\/stripe\.js$/.exec(pathname)?.[1];
+  return /^\/v3(\/|\/stripe\.js)?$/.test(pathname) ? 3 : /^\/([a-z]+)\/stripe\.js$/.exec(pathname)?.[1];
 }
 
+// source: archive:https://registry.npmjs.org/@stripe/stripe-js/-/stripe-js-8.6.0.tgz#sha256=13e61419e9076ab440cc636e34d3ea5df3fc62bbf2d6a80d3fd718e8cd47f0a2!/package/dist/stripe-js/checkout.d.ts "loadActions: () => Promise<StripeCheckoutLoadActionsResult>"
 function script(version: 3 | string): string {
   return `(function () {
   var version = ${JSON.stringify(version)};
   function gap(name) {
     return function () { throw new Error("Stripe.js (Volter twin): stripe." + name + " is not modelled by this twin yet"); };
   }
-  function Stripe(publishableKey) {
-    if (typeof publishableKey !== "string" || !publishableKey) throw new Error("Stripe.js (Volter twin): Stripe() needs a publishable key");
-    var api = "https://api.stripe.com/v1";
-    // the card fields every mounted element holds, the last mounted first
-    var mounted = [];
-    function cardOf(elements) {
-      var el = (elements && elements._mounted && elements._mounted[elements._mounted.length - 1]) || mounted[mounted.length - 1];
-      if (!el) return null;
-      var exp = String(el.expiry.value || "").split("/");
-      return { number: String(el.number.value || "").replace(/\s+/g, ""), exp_month: exp[0] ? String(Number(exp[0])) : "", exp_year: exp[1] ? String(2000 + Number(exp[1]) % 100) : "", cvc: String(el.cvc.value || "") };
-    }
-    function form(fields) {
-      return Object.keys(fields).filter(function (k) { return fields[k] !== undefined && fields[k] !== ""; }).map(function (k) { return encodeURIComponent(k) + "=" + encodeURIComponent(fields[k]); }).join("&");
-    }
-    function confirm(kind, options) {
-      options = options || {};
-      var elements = options.elements;
-      var secret = options.clientSecret || (elements && elements._options && elements._options.clientSecret);
-      if (typeof secret !== "string" || secret.indexOf("_secret_") < 0) return Promise.resolve({ error: { type: "invalid_request_error", message: "A clientSecret is required." } });
+  function initCheckout(options) {
+    var session, root, fields = {}, listeners = {};
+    function emit(name, value) { (listeners[name] || []).forEach(function (fn) { fn(value); }); }
+    function call(action, values) {
+      var secret = options.clientSecret;
       var id = secret.split("_secret_")[0];
-      var card = cardOf(elements);
-      var params = options.confirmParams || {};
-      var fields = { client_secret: secret };
-      if (card) { fields["payment_method_data[type]"] = "card"; fields["payment_method_data[card][number]"] = card.number; fields["payment_method_data[card][exp_month]"] = card.exp_month; fields["payment_method_data[card][exp_year]"] = card.exp_year; fields["payment_method_data[card][cvc]"] = card.cvc; }
-      if (params.return_url) fields.return_url = params.return_url;
-      var path = kind === "payment" ? "/payment_intents/" : "/setup_intents/";
-      return fetch(api + path + encodeURIComponent(id) + "/confirm", { method: "POST", headers: { authorization: "Bearer " + publishableKey, "content-type": "application/x-www-form-urlencoded" }, body: form(fields) })
-        .then(function (res) { return res.json().then(function (body) { return { ok: res.ok, body: body }; }); })
-        .then(function (r) {
-          if (!r.ok) return { error: r.body.error || { type: "api_error", message: "The confirmation failed." } };
-          var key = kind === "payment" ? "paymentIntent" : "setupIntent";
-          var out = {}; out[key] = r.body;
-          if (options.redirect === "if_required" || !params.return_url) return out;
-          var q = kind === "payment" ? "payment_intent" : "setup_intent";
-          var target = new URL(params.return_url);
-          target.searchParams.set(q, r.body.id);
-          target.searchParams.set(q + "_client_secret", secret);
-          target.searchParams.set("redirect_status", r.body.status === "succeeded" ? "succeeded" : r.body.status === "processing" ? "processing" : "failed");
-          window.location.assign(target.toString());
-          return new Promise(function () {});
-        });
+      return fetch("https://api.stripe.com/v1/payment_pages/" + encodeURIComponent(id) + "/" + action, {
+        method: "POST", headers: { "content-type": "application/json" },
+        body: JSON.stringify(Object.assign({ client_secret: secret }, values || {}))
+      }).then(function (r) { return r.json(); }).then(function (result) {
+        if (result.type === "success") { session = result.session; emit("change", session); }
+        return result;
+      });
     }
-    function element(type, group) {
-      var handlers = {};
-      function emit(name, event) { (handlers[name] || []).forEach(function (h) { h(event); }); }
-      var el = {
-        _type: type,
-        mount: function (target) {
-          var node = typeof target === "string" ? document.querySelector(target) : target;
-          if (!node) throw new Error("Stripe.js (Volter twin): mount() found no element " + String(target));
-          node.innerHTML = "";
-          var wrap = document.createElement("div");
-          wrap.setAttribute("data-volter-twin-element", type);
-          function input(name, placeholder) { var i = document.createElement("input"); i.name = name; i.placeholder = placeholder; i.autocomplete = "off"; i.addEventListener("input", change); wrap.appendChild(i); return i; }
-          el.number = input("cardnumber", "Card number");
-          el.expiry = input("exp-date", "MM / YY");
-          el.cvc = input("cvc", "CVC");
-          node.appendChild(wrap);
-          mounted.push(el); group._mounted.push(el);
-          setTimeout(function () { emit("ready", { elementType: type }); }, 0);
-        },
-        on: function (name, handler) { (handlers[name] = handlers[name] || []).push(handler); return el; },
-        off: function (name, handler) { handlers[name] = (handlers[name] || []).filter(function (h) { return h !== handler; }); return el; },
-        update: function () {}, focus: function () { if (el.number) el.number.focus(); }, blur: function () {},
-        clear: function () { [el.number, el.expiry, el.cvc].forEach(function (i) { if (i) i.value = ""; }); change(); },
-        unmount: function () {}, destroy: function () { mounted = mounted.filter(function (m) { return m !== el; }); }
-      };
-      function change() {
-        var c = { number: el.number && el.number.value, expiry: el.expiry && el.expiry.value, cvc: el.cvc && el.cvc.value };
-        emit("change", { elementType: type, empty: !c.number && !c.expiry && !c.cvc, complete: !!(c.number && c.expiry && c.cvc), value: { type: "card" } });
+    var actions = {
+      getSession: function () { return session; },
+      applyPromotionCode: function (code) { return call("apply_promotion_code", { promotion_code: code }); },
+      removePromotionCode: function () { return call("remove_promotion_code"); },
+      confirm: function (params) {
+        return call("confirm", Object.assign({}, params || {}, { payment_details: fields })).then(function (result) {
+          if (result.type === "success" && (!params || params.redirect !== "if_required") && result.return_url) window.location.assign((params && params.returnUrl) || result.return_url);
+          return result;
+        });
       }
-      return el;
-    }
+    };
+    var elementListeners = {};
+    function elementEmit(name, value) { (elementListeners[name] || []).forEach(function (fn) { fn(value); }); }
+    var element = {
+      on: function (name, fn) { (elementListeners[name] || (elementListeners[name] = [])).push(fn); return element; },
+      off: function (name, fn) { elementListeners[name] = (elementListeners[name] || []).filter(function (f) { return f !== fn; }); return element; },
+      mount: function (target) {
+        root = typeof target === "string" ? document.querySelector(target) : target;
+        [["cardNumber", "Card number", "cc-number"], ["cardExpiry", "Expiration", "cc-exp"], ["cardCvc", "CVC", "cc-csc"], ["billingName", "Cardholder name", "cc-name"]].forEach(function (field) {
+          var label = document.createElement("label"), input = document.createElement("input");
+          label.textContent = field[1]; input.name = field[0]; input.autocomplete = field[2];
+          input.addEventListener("input", function () { fields[field[0]] = input.value; elementEmit("change", { empty: !fields.cardNumber, complete: !!(fields.cardNumber && fields.cardExpiry && fields.cardCvc), value: { type: "card" } }); });
+          label.appendChild(input); root.appendChild(label);
+        });
+        Promise.resolve().then(function () { elementEmit("ready", element); });
+      },
+      unmount: function () { if (root) root.replaceChildren(); root = null; },
+      destroy: function () { element.unmount(); elementListeners = {}; },
+      update: function () {}
+    };
+    return {
+      on: function (name, fn) { (listeners[name] || (listeners[name] = [])).push(fn); },
+      loadActions: function () { return call("init").then(function (r) { return r.type === "success" ? { type: "success", actions: actions } : r; }); },
+      createPaymentElement: function () { return element; }, getPaymentElement: function () { return element; },
+      changeAppearance: function () {}, loadFonts: function () {}
+    };
+  }
+  function Stripe(publishableKey) {
+    if (typeof publishableKey !== "string" || !publishableKey) throw new Error("Stripe.js (Volter twin): Stripe() needs a publishable key");
     var known = {
+      initCheckout: initCheckout,
       _registerWrapper: function () {},
-      elements: function (options) {
-        var group = { _options: options || {}, _mounted: [], _created: {} };
-        group.create = function (type) { var e = element(type, group); group._created[type] = e; return e; };
-        group.getElement = function (type) { return group._created[typeof type === "string" ? type : "card"] || null; };
-        group.update = function (next) { group._options = Object.assign({}, group._options, next || {}); };
-        group.fetchUpdates = function () { return Promise.resolve({}); };
-        group.submit = function () {
-          var card = cardOf(group);
-          if (!card || !card.number || !card.exp_month || !card.cvc) return Promise.resolve({ error: { type: "validation_error", message: "Your card details are incomplete." } });
-          return Promise.resolve({});
-        };
-        return group;
-      },
-      confirmPayment: function (options) { return confirm("payment", options); },
-      confirmSetup: function (options) { return confirm("setup", options); },
       redirectToCheckout: function (options) {
         if (!options || typeof options.sessionId !== "string" || !options.sessionId) return gap("redirectToCheckout without a sessionId")();
         window.location.assign("https://checkout.stripe.com/c/pay/" + encodeURIComponent(options.sessionId));
         return new Promise(function () {});
-      },
-      collectFinancialConnectionsAccounts: function (options) {
-        if (!options || typeof options.clientSecret !== "string" || !options.clientSecret) return gap("collectFinancialConnectionsAccounts without a clientSecret")();
-        window.location.assign("https://js.stripe.com/v3/financial-connections/" + encodeURIComponent(options.clientSecret));
-        return new Promise(function () {});
       }
     };
     return new Proxy(known, {

package/src/semantics/account.ts

@@ -0,0 +1,10 @@
+import type { HandlerContext } from '@volter/world-core';
+import { PLATFORM_ACCOUNT_ID } from '../engine/stripe.ts';
+import { actingAccount, accountMissing } from './shared.ts';
+
+// source: spec:GetAccount "Retrieves the details of an account."
+export async function GetAccount(ctx: HandlerContext): Promise<Response> {
+  const id = actingAccount(ctx) ?? PLATFORM_ACCOUNT_ID;
+  const account = ctx.get('account', id);
+  return account ? ctx.reply(ctx.expand('account', account)) : accountMissing(ctx, id);
+}

package/src/semantics/account_links.ts

@@ -3,7 +3,6 @@
 import type { HandlerContext } from '@volter/world-core';
 import { nowUnix } from '../engine/stripe.ts';
 import { accountMissing, fail } from './shared.ts';
-
 // ── hosted onboarding links and embedded-component sessions ──
 export async function PostAccountLinks(ctx: HandlerContext): Promise<Response> {
   const account = typeof ctx.params.account === 'string' ? ctx.params.account : '';