@volter/twin-stripe 3.0.3 → 3.0.5

package/dist/src/screens/dashboard.js

@@ -5,7 +5,7 @@ import { nowUnix } from "../engine/stripe.js";
 import { platformAccountDefault } from "../engine/connect.js";
 import { publicBusinessName } from "../engine/display.js";
 import { PLATFORM_ACCOUNT_ID } from "../engine/stripe.js";
-import { formOf, notFound } from "./shared.js";
+import { formOf, money, notFound } from "./shared.js";
 import { created } from "../semantics/shared.js";
 const redirect = (path) => new Response(null, { status: 303, headers: { location: path } });
 const invalid = (message) => flowPage({ css: [], title: 'Stripe', status: 400, body: _jsx("main", { children: _jsx("p", { role: "alert", children: message }) }) });
@@ -55,6 +55,19 @@ a { color: #635bff; text-decoration: none; }
 .sd-table th { font-size: 12px; font-weight: 600; color: #697386; background: #f6f8fa; }
 .sd-empty { color: #697386; padding: 40px; text-align: center; }
 .sd-code { font-family: ui-monospace,SFMono-Regular,monospace; font-size: 12px; }
+.sd-customer-grid { display: grid; grid-template-columns: minmax(0,1fr) 300px; gap: 32px; align-items: start; }
+.sd-customer-grid > * { min-width: 0; }
+.sd-module { border-bottom: 1px solid #e3e8ee; padding: 0 0 24px; margin-bottom: 24px; overflow-x: auto; }
+.sd-module h2 { font-size: 18px; margin: 0 0 16px; }
+.sd-customer-details { border-left: 1px solid #e3e8ee; padding-left: 24px; overflow-wrap: anywhere; }
+.sd-customer-details dl { margin: 0; }
+.sd-customer-details dt { color: #697386; font-size: 12px; margin-top: 16px; }
+.sd-customer-details dd { margin: 3px 0 0; }
+.sd-customer-filter { display: flex; gap: 8px; margin-bottom: 20px; }
+.sd-customer-filter input { min-width: 0; width: 320px; border: 1px solid #c1c9d2; border-radius: 6px; padding: 8px 10px; }
+.sd-customer-tabs { display: flex; border-bottom: 1px solid #e3e8ee; margin-bottom: 28px; }
+.sd-customer-tabs span { border-bottom: 2px solid #635bff; padding: 0 0 12px; color: #635bff; font-weight: 600; }
+@media(max-width:1000px) { .sd-customer-grid { grid-template-columns: minmax(0,1fr); } .sd-customer-details { border-left: 0; padding: 0; } }
 .sd-dialog { width: min(480px,calc(100vw - 32px)); max-height: calc(100vh - 48px); overflow: auto; border: 1px solid #e3e8ee; border-radius: 8px; padding: 24px; color: #1a1f36; }
 .sd-dialog::backdrop { background: rgba(26,31,54,.4); }
 .sd-dialog h2 { font-size: 20px; margin: 0 0 20px; }
@@ -69,7 +82,50 @@ a { color: #635bff; text-decoration: none; }
 function dashboardPage(ctx, opts) {
     const account = ctx.get('account', PLATFORM_ACCOUNT_ID);
     const links = [['Public details', PUBLIC_DETAILS_PATH], ['Radar lists', '/radar/lists'], ['Issuing balance', '/test/issuing/balance']];
-    return flowPage({ title: `${opts.title} – Stripe`, css: [DETAILS_CSS], status: opts.status ?? 200, body: _jsxs("div", { className: "sd", children: [_jsxs("aside", { className: "sd-side", children: [_jsxs("div", { className: "sd-account", children: [publicBusinessName(account), _jsx("span", { className: "sd-mode", children: "Test mode" })] }), _jsxs("nav", { className: "sd-nav", "aria-label": "Dashboard", children: [['Home', 'Balances', 'Transactions', 'Customers', 'Product catalog'].map(label => _jsx("button", { type: "button", disabled: true, title: "Not available in this twin's Dashboard", children: label }, label)), _jsx("p", { className: "sd-nav-title", children: "Shortcuts" }), links.map(([label, path]) => _jsx("a", { href: `${ctx.publicBase}${path}`, "aria-current": opts.path === path ? 'page' : undefined, children: label }, path)), _jsx("p", { className: "sd-nav-title", children: "Products" }), ['Payments', 'Billing', 'Reporting', 'Connect', 'More'].map(label => _jsx("button", { type: "button", disabled: true, title: "Not available in this twin's Dashboard", children: label }, label))] })] }), _jsxs("div", { className: "sd-body", children: [_jsxs("header", { className: "sd-top", children: [_jsx("input", { className: "sd-search", "aria-label": "Search Dashboard", placeholder: "Search", disabled: true, title: "Dashboard search is not available in this twin" }), _jsx("button", { type: "button", disabled: true, title: "Not available in this twin's Dashboard", children: "Create" }), _jsx("button", { type: "button", disabled: true, children: "Help" }), _jsx("a", { href: `${ctx.publicBase}${PUBLIC_DETAILS_PATH}`, children: "Settings" })] }), _jsxs("main", { className: "sd-content", children: [_jsxs("nav", { className: "sd-crumbs", "aria-label": "Breadcrumb", children: [_jsx("span", { children: opts.section }), _jsx("span", { "aria-hidden": "true", children: "/" }), _jsx("span", { children: opts.title })] }), _jsxs("div", { className: "sd-title", children: [_jsx("h1", { children: opts.title }), opts.action] }), opts.body] })] }), _jsx("script", { dangerouslySetInnerHTML: { __html: "document.querySelectorAll('[data-open-dialog]').forEach(b=>b.addEventListener('click',()=>document.getElementById(b.dataset.openDialog).showModal()));document.querySelectorAll('[data-close-dialog]').forEach(b=>b.addEventListener('click',()=>b.closest('dialog').close()));" } })] }) });
+    return flowPage({ title: `${opts.title} – Stripe`, css: [DETAILS_CSS], status: opts.status ?? 200, body: _jsxs("div", { className: "sd", children: [_jsxs("aside", { className: "sd-side", children: [_jsxs("div", { className: "sd-account", children: [publicBusinessName(account), _jsx("span", { className: "sd-mode", children: "Test mode" })] }), _jsxs("nav", { className: "sd-nav", "aria-label": "Dashboard", children: [['Home', 'Balances', 'Transactions', 'Customers', 'Product catalog'].map(label => label === 'Customers'
+                                    ? _jsx("a", { href: `${ctx.publicBase}/customers`, "aria-current": opts.path === '/customers' ? 'page' : undefined, children: "Customers" }, label)
+                                    : _jsx("button", { type: "button", disabled: true, title: "Not available in this twin's Dashboard", children: label }, label)), _jsx("p", { className: "sd-nav-title", children: "Shortcuts" }), links.map(([label, path]) => _jsx("a", { href: `${ctx.publicBase}${path}`, "aria-current": opts.path === path ? 'page' : undefined, children: label }, path)), _jsx("p", { className: "sd-nav-title", children: "Products" }), ['Payments', 'Billing', 'Reporting', 'Connect', 'More'].map(label => _jsx("button", { type: "button", disabled: true, title: "Not available in this twin's Dashboard", children: label }, label))] })] }), _jsxs("div", { className: "sd-body", children: [_jsxs("header", { className: "sd-top", children: [_jsx("input", { className: "sd-search", "aria-label": "Search Dashboard", placeholder: "Search", disabled: true, title: "Dashboard search is not available in this twin" }), _jsx("button", { type: "button", disabled: true, title: "Not available in this twin's Dashboard", children: "Create" }), _jsx("button", { type: "button", disabled: true, children: "Help" }), _jsx("a", { href: `${ctx.publicBase}${PUBLIC_DETAILS_PATH}`, children: "Settings" })] }), _jsxs("main", { className: "sd-content", children: [_jsxs("nav", { className: "sd-crumbs", "aria-label": "Breadcrumb", children: [_jsx("span", { children: opts.section }), _jsx("span", { "aria-hidden": "true", children: "/" }), _jsx("span", { children: opts.title })] }), _jsxs("div", { className: "sd-title", children: [_jsx("h1", { children: opts.title }), opts.action] }), opts.body] })] }), _jsx("script", { dangerouslySetInnerHTML: { __html: "document.querySelectorAll('[data-open-dialog]').forEach(b=>b.addEventListener('click',()=>document.getElementById(b.dataset.openDialog).showModal()));document.querySelectorAll('[data-close-dialog]').forEach(b=>b.addEventListener('click',()=>b.closest('dialog').close()));" } })] }) });
+}
+const customerName = (row) => String(row.name || row.email || row.id);
+const resourceId = (value) => typeof value === 'string' ? value : value && typeof value === 'object' ? String(value.id ?? '') : '';
+const newest = (rows) => rows.slice().reverse().sort((a, b) => Number(b.created ?? 0) - Number(a.created ?? 0));
+const customerDate = (value) => typeof value === 'number' && Number.isFinite(value)
+    ? new Intl.DateTimeFormat('en-US', { year: 'numeric', month: 'short', day: 'numeric', timeZone: 'UTC' }).format(new Date(value * 1000)) : '—';
+// source: https://support.stripe.com/questions/export-customer-data-without-the-payment-details
+// source: https://support.stripe.com/questions/updates-to-the-customer-detail-page
+// These public support articles render their body in JavaScript; the source reader gets their shell.
+// Their public rendered body supplies Customers and the dynamic-left/static-right layout (spec/SOURCE.md).
+// Where public references stop: q is an authored name/email/id/description substring filter, not Stripe's
+// private Dashboard search wire. Dates are shown in UTC; browser actions here are read-only. The declared
+// page addresses preserve the customer's returned API id. There is no invented payment history or total.
+function customersPage(ctx, path) {
+    if (ctx.call.request.method !== 'GET')
+        return notFound();
+    if (path === '/customers') {
+        const query = new URL(ctx.call.request.url).searchParams.get('q') ?? '';
+        const needle = query.trim().toLowerCase();
+        const customers = newest(ctx.rows('customer')).filter(row => !needle ||
+            [row.name, row.email, row.id, row.description].some(value => typeof value === 'string' && value.toLowerCase().includes(needle)));
+        return dashboardPage(ctx, { title: 'Customers', section: 'Customers', path: '/customers',
+            body: _jsxs(_Fragment, { children: [_jsxs("form", { className: "sd-customer-filter", method: "get", action: `${ctx.publicBase}/customers`, children: [_jsx("input", { name: "q", "aria-label": "Search customers", placeholder: "Search customers", defaultValue: query }), _jsx("button", { className: "sd-cancel", type: "submit", children: "Search" }), query ? _jsx("a", { href: `${ctx.publicBase}/customers`, children: "Clear" }) : null] }), _jsxs("table", { className: "sd-table", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Name" }), _jsx("th", { scope: "col", children: "Email" }), _jsx("th", { scope: "col", children: "Description" }), _jsx("th", { scope: "col", children: "Created (UTC)" })] }) }), _jsx("tbody", { children: customers.map(row => _jsxs("tr", { children: [_jsx("td", { children: _jsx("a", { href: `${ctx.publicBase}/customers/${encodeURIComponent(String(row.id))}`, children: customerName(row) }) }), _jsx("td", { children: String(row.email ?? '—') }), _jsx("td", { children: String(row.description ?? '—') }), _jsx("td", { children: customerDate(row.created) })] }, String(row.id))) })] }), !customers.length ? _jsx("p", { className: "sd-empty", children: needle ? 'No customers match your search.' : 'No customers yet.' }) : null] }) });
+    }
+    let id;
+    try {
+        id = decodeURIComponent(path.slice('/customers/'.length));
+    }
+    catch {
+        return notFound();
+    }
+    const customer = ctx.get('customer', id);
+    if (!customer || customer.deleted === true)
+        return notFound();
+    const related = (type) => newest(ctx.rows(type)).filter(row => resourceId(row.customer) === id);
+    const payments = related('charge'), subscriptions = related('subscription'), invoices = related('invoice'), methods = related('payment_method');
+    const metadata = customer.metadata && typeof customer.metadata === 'object' ? Object.entries(customer.metadata) : [];
+    const address = customer.address && typeof customer.address === 'object' ? customer.address : undefined;
+    const addressText = address ? ['line1', 'line2', 'city', 'state', 'postal_code', 'country'].map(key => address[key]).filter(Boolean).join(', ') : '—';
+    return dashboardPage(ctx, { title: customerName(customer), section: 'Customers', path: '/customers',
+        body: _jsxs(_Fragment, { children: [_jsx("a", { href: `${ctx.publicBase}/customers`, children: "\u2190 Customers" }), _jsx("p", { className: "pd-lead sd-code", children: id }), _jsx("div", { className: "sd-customer-tabs", children: _jsx("span", { children: "Overview" }) }), _jsxs("div", { className: "sd-customer-grid", children: [_jsxs("div", { children: [_jsxs("section", { className: "sd-module", children: [_jsx("h2", { children: "Subscriptions" }), subscriptions.length ? _jsxs("table", { className: "sd-table", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Subscription" }), _jsx("th", { scope: "col", children: "Status" }), _jsx("th", { scope: "col", children: "Created (UTC)" })] }) }), _jsx("tbody", { children: subscriptions.map(row => _jsxs("tr", { children: [_jsx("td", { className: "sd-code", children: String(row.id) }), _jsx("td", { children: String(row.status ?? '—') }), _jsx("td", { children: customerDate(row.created) })] }, String(row.id))) })] }) : _jsx("p", { className: "pd-lead", children: "No subscriptions" })] }), _jsxs("section", { className: "sd-module", children: [_jsx("h2", { children: "Payments" }), payments.length ? _jsxs("table", { className: "sd-table", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Amount" }), _jsx("th", { scope: "col", children: "Status" }), _jsx("th", { scope: "col", children: "Description" }), _jsx("th", { scope: "col", children: "Created (UTC)" })] }) }), _jsx("tbody", { children: payments.map(row => _jsxs("tr", { children: [_jsx("td", { children: money(row.amount, row.currency) }), _jsx("td", { children: row.refunded === true ? 'Refunded' : String(row.status ?? '—') }), _jsx("td", { children: String(row.description ?? row.id) }), _jsx("td", { children: customerDate(row.created) })] }, String(row.id))) })] }) : _jsx("p", { className: "pd-lead", children: "No payments" })] }), _jsxs("section", { className: "sd-module", children: [_jsx("h2", { children: "Payment methods" }), methods.length ? _jsx("ul", { children: methods.map(row => { const card = row.card && typeof row.card === 'object' ? row.card : undefined; return _jsxs("li", { children: [card ? `${String(card.brand ?? 'Card')} •••• ${String(card.last4 ?? '')}` : String(row.type ?? 'Payment method'), " ", _jsx("span", { className: "sd-code", children: String(row.id) })] }, String(row.id)); }) }) : _jsx("p", { className: "pd-lead", children: "No payment methods" })] }), _jsxs("section", { className: "sd-module", children: [_jsx("h2", { children: "Invoices" }), invoices.length ? _jsxs("table", { className: "sd-table", children: [_jsx("thead", { children: _jsxs("tr", { children: [_jsx("th", { scope: "col", children: "Invoice" }), _jsx("th", { scope: "col", children: "Amount due" }), _jsx("th", { scope: "col", children: "Status" })] }) }), _jsx("tbody", { children: invoices.map(row => _jsxs("tr", { children: [_jsx("td", { children: String(row.number ?? row.id) }), _jsx("td", { children: money(row.amount_due, row.currency) }), _jsx("td", { children: String(row.status ?? '—') })] }, String(row.id))) })] }) : _jsx("p", { className: "pd-lead", children: "No invoices" })] })] }), _jsxs("aside", { className: "sd-customer-details", "aria-label": "Customer details", children: [_jsxs("section", { className: "sd-module", children: [_jsx("h2", { children: "Details" }), _jsxs("dl", { children: [_jsx("dt", { children: "Customer ID" }), _jsx("dd", { className: "sd-code", children: id }), _jsx("dt", { children: "Name" }), _jsx("dd", { children: String(customer.name ?? '—') }), _jsx("dt", { children: "Email" }), _jsx("dd", { children: String(customer.email ?? '—') }), _jsx("dt", { children: "Phone" }), _jsx("dd", { children: String(customer.phone ?? '—') }), _jsx("dt", { children: "Description" }), _jsx("dd", { children: String(customer.description ?? '—') }), _jsx("dt", { children: "Billing address" }), _jsx("dd", { children: addressText }), _jsx("dt", { children: "Created (UTC)" }), _jsx("dd", { children: customerDate(customer.created) })] })] }), _jsxs("section", { className: "sd-module", children: [_jsx("h2", { children: "Metadata" }), metadata.length ? _jsx("dl", { children: metadata.map(([key, value]) => _jsxs("div", { children: [_jsx("dt", { children: key }), _jsx("dd", { children: typeof value === 'string' ? value : JSON.stringify(value) })] }, key)) }) : _jsx("p", { className: "pd-lead", children: "No metadata" })] })] })] })] }) });
 }
 function detailsPage(ctx, account, opts = {}) {
     const named = account?.business_profile?.name;
@@ -107,12 +163,14 @@ async function publicDetails(ctx) {
     // a query-only reference: the page's own path, wherever it is mounted and with or without its trailing slash
     return new Response(null, { status: 303, headers: { location: '?saved=1' } });
 }
-/** Dashboard settings, Radar list creation and test Issuing funding; other pages answer Stripe's 404. */
+/** Dashboard customer inspection, settings, Radar lists and test Issuing funding. */
 export async function screen(ctx) {
     const path = new URL(ctx.call.request.url).pathname.replace(/\/+$/, '');
     // The declared workspace opens a served setting, not a fabricated analytics home.
     if (!path && ctx.call.request.method === 'GET')
         return redirect(`${ctx.publicBase}${PUBLIC_DETAILS_PATH}`);
+    if (path === '/customers' || /^\/customers\/[^/]+$/.test(path))
+        return customersPage(ctx, path);
     // source: https://docs.stripe.com/radar/lists "Use the Dashboard or the API to create lists."
     // source: https://docs.stripe.com/radar/lists "Enter a name for the list"
     // source: https://docs.stripe.com/radar/lists "Select the type of list to create."

package/generated/pack-facts.json

@@ -32,7 +32,7 @@
         },
         {
           "host": "dashboard.stripe.com",
-          "pathPattern": "^/radar/lists(?:/[^/]+)?/?$|^/test/issuing/balance/?$|^/settings/public/?$"
+          "pathPattern": "^/customers(?:/[^/]+)?/?$|^/radar/lists(?:/[^/]+)?/?$|^/test/issuing/balance/?$|^/settings/public/?$"
         },
         {
           "host": "verify.stripe.com",

package/journeys/customer-life.json

@@ -646,6 +646,51 @@
       ],
       "evidence": "Dub: apps/web/app/api/workspaces/[idOrSlug]/billing/payment-methods/route.ts:66"
     },
+    {
+      "name": "Femke finds the SDK-created customer in the Dashboard",
+      "method": "GET",
+      "path": "https://dashboard.stripe.com/customers?q=billing%40ravel.test",
+      "status": 200,
+      "expect": [
+        {
+          "path": "",
+          "contains": "billing@ravel.test"
+        },
+        {
+          "path": "",
+          "contains": "/customers/{ravel}"
+        }
+      ],
+      "evidence": "World first-use customer inspection; https://support.stripe.com/questions/export-customer-data-without-the-payment-details"
+    },
+    {
+      "name": "Femke opens Ravel's stored customer profile",
+      "method": "GET",
+      "path": "https://dashboard.stripe.com/customers/{ravel}",
+      "status": 200,
+      "expect": [
+        {
+          "path": "",
+          "contains": "billing@ravel.test"
+        },
+        {
+          "path": "",
+          "contains": "Subscriptions"
+        },
+        {
+          "path": "",
+          "contains": "Metadata"
+        }
+      ],
+      "evidence": "World first-use customer inspection; https://support.stripe.com/questions/updates-to-the-customer-detail-page"
+    },
+    {
+      "name": "A missing customer profile stays missing",
+      "method": "GET",
+      "path": "https://dashboard.stripe.com/customers/cus_missing",
+      "status": 404,
+      "evidence": "The Dashboard reads an existing customer only"
+    },
     {
       "name": "Twenty\u2019s app health check reads its Stripe account with the user-supplied key",
       "method": "GET",
@@ -3583,6 +3628,53 @@
       },
       "evidence": "Stripe: spec:GetCheckoutSessionsSession"
     },
+    {
+      "name": "The app reads the saved lifetime payment with its secret key",
+      "method": "GET",
+      "path": "/v1/payment_intents/{lifetime_pi}",
+      "headers": {
+        "authorization": "Bearer {sk}"
+      },
+      "status": 200,
+      "expect": [
+        {
+          "path": "id",
+          "equals": "{lifetime_pi}"
+        },
+        {
+          "path": "object",
+          "equals": "payment_intent"
+        },
+        {
+          "path": "status",
+          "equals": "succeeded"
+        },
+        {
+          "path": "amount",
+          "equals": 14900
+        },
+        {
+          "path": "amount_received",
+          "equals": 14900
+        },
+        {
+          "path": "currency",
+          "equals": "usd"
+        },
+        {
+          "path": "customer",
+          "equals": "{ravel}"
+        },
+        {
+          "path": "latest_charge",
+          "exists": true
+        }
+      ],
+      "capture": {
+        "lifetime_charge": "latest_charge"
+      },
+      "evidence": "Stripe: spec:GetPaymentIntentsIntent; spec:/components/schemas/payment_intent"
+    },
     {
       "name": "Femke reopens the launch promotion for an alumni webinar",
       "method": "POST",

package/journeys/customer-life.outline.md

@@ -55,6 +55,9 @@ Elapsed: 120m.
 - and every customer — GET /v1/customers?limit=100. Volter Harness: container/retake/stack/app/src/app.py:116
 - The sample shop's seeder looks its first customer up by email before seeding — GET /v1/customers?email=billing%40ravel.test. Twin: apps/platform/src/sample.ts:40
 - Dub reads Ravel’s billing customer — GET /v1/customers/{ravel}. Dub: apps/web/app/api/workspaces/[idOrSlug]/billing/payment-methods/route.ts:66
+- Femke opens Customers to inspect the SDK-created billing customer — GET https://dashboard.stripe.com/customers?q=billing%40ravel.test. World first-use customer inspection; Stripe: https://support.stripe.com/questions/export-customer-data-without-the-payment-details
+- Femke opens Ravel's profile and sees the stored subscriptions and billing details — GET https://dashboard.stripe.com/customers/{ravel}. World first-use customer inspection; Stripe: https://support.stripe.com/questions/updates-to-the-customer-detail-page
+- A missing customer profile is not an invented customer — GET https://dashboard.stripe.com/customers/cus_missing. The profile reads the existing customer view only.
 - Twenty’s app health check reads its Stripe account with the user-supplied key — GET /v1/account. Twenty: packages/twenty-docs/developers/extend/apps/logic/logic-functions.mdx:850 (GET, Authorization only)
 - Twenty’s invoice workflow creates the quote invoice for Ravel — POST /v1/invoices. Twenty: packages/twenty-docs/user-guide/workflows/how-tos/connect-to-other-tools/generate-quote-or-invoice-from-twenty.mdx:101; packages/twenty-server/src/modules/workflow/workflow-executor/workflow-actions/http-request/http-request.workflow-action.ts:28
 - The invoice workflow reads the saved draft — GET /v1/invoices/{workflow_invoice}. Postiz: libraries/nestjs-libraries/src/services/stripe.service.ts; Stripe: pinned API and Stripe.js Checkout contract
@@ -236,6 +239,7 @@ Elapsed: 32d.
 - Ravel buys a lifetime upgrade in Checkout — POST /v1/checkout/sessions. Stripe: spec:PostCheckoutSessions
 - The subscriber enters a card — POST {lifetime_cs_url}. Stripe hosted continuation: https://docs.stripe.com/payments/checkout/how-checkout-works
 - The completed lifetime checkout names its payment — GET /v1/checkout/sessions/{lifetime_cs}. Stripe: spec:GetCheckoutSessionsSession
+- The app reads the saved lifetime payment with its secret key — GET /v1/payment_intents/{lifetime_pi}. Stripe: spec:GetPaymentIntentsIntent
 - Femke reopens the launch promotion for an alumni webinar — POST /v1/promotion_codes/{promo}. Dub: apps/web/lib/discounts/discount-provider-stripe.ts:294
 - Ravel buys a third workspace with the reopened promotion — POST /v1/checkout/sessions. Stripe: spec:PostCheckoutSessions
 - The subscriber enters a card — POST {promo_cs_url}. Stripe hosted continuation: https://docs.stripe.com/payments/checkout/how-checkout-works

package/journeys/decisions.json

@@ -1,5 +1,5 @@
 {
-  "about": "Stripe operations served for the application calls at the cited lines in demand.json and for the resource refresh reads declared in src/manifest.ts. All other operations answer the gap. Each decision names its caller or refresh and its implementation.",
+  "about": "Stripe operations served for the application calls at the cited lines in demand.json, for the resource refresh reads declared in src/manifest.ts, and for the completed Checkout payment readback in customer-life.json. The Dashboard customer pages read those same resource views, as declared in src/manifest.ts and customer-life.outline.md. All other operations answer the gap. Each decision names its caller or refresh and its implementation.",
   "decisions": [
     {
       "operation": "DeleteAccountsAccount",
@@ -247,6 +247,12 @@
       "mechanism": "core",
       "why": "the derived core's list of payment_intent: a plain list the manifest's declaration serves"
     },
+    {
+      "operation": "GetPaymentIntentsIntent",
+      "demand": "Completed Checkout payment readback (journeys/customer-life.json)",
+      "mechanism": "core",
+      "why": "Stripe SDK paymentIntents.retrieve reads the PaymentIntent named by the completed Checkout session: id, succeeded status, collected amount, currency and latest_charge come from the existing stored payment_intent through the derived core, as spec:GetPaymentIntentsIntent retrieves a PaymentIntent previously created. This life uses the secret key; client-side publishable-key retrieval remains outside this act and the existing credential refusal is unchanged."
+    },
     {
       "operation": "GetPaymentMethods",
       "demand": "Dub, Postiz (journeys/demand.json)",

package/journeys/demand.json

@@ -1,5 +1,5 @@
 {
-  "measured": "Applications are read at the scanned commits below. Demand includes SDK methods, delegated Stripe.js calls, raw URLs and API-path strings, and shipped guides that use a shipped feature. Credentials authorize a feature; they do not opt into it. Postiz ships Stripe as its web billing provider. Twenty workflow HTTP actions and enterprise website billing are independent of the server billing flag (which defaults false). Cal payment/OAuth needs an app-store install; its metadata installed flag makes the catalog entry available, while the user install requires a credential created by the install callback. All products in generated/DEMAND.md’s Volter column were searched, including their own World scenarios and seeds; none calls a removed operation. The launch does not name Stripe. Separately invoked Rallly billing CLI and Dub maintenance scripts are outside the running products. Dub’s raw GET /v1/mandates, POST /v1/fx_quotes and v2 calls remain outside the pinned v1 document and answer the vendor gap; their demand is retained, not classified optional.",
+  "measured": "Applications are read at the scanned commits below. Demand includes SDK methods, delegated Stripe.js calls, raw URLs and API-path strings, and shipped guides that use a shipped feature. Credentials authorize a feature; they do not opt into it. Postiz ships Stripe as its web billing provider. Twenty workflow HTTP actions and enterprise website billing are independent of the server billing flag (which defaults false). Cal payment/OAuth needs an app-store install; its metadata installed flag makes the catalog entry available, while the user install requires a credential created by the install callback. All products in generated/DEMAND.md\u2019s Volter column were searched, including their own World scenarios and seeds; none calls a removed operation. The launch does not name Stripe. Separately invoked Rallly billing CLI and Dub maintenance scripts are outside the running products. Dub\u2019s raw GET /v1/mandates, POST /v1/fx_quotes and v2 calls remain outside the pinned v1 document and answer the vendor gap; their demand is retained, not classified optional.",
   "applications": [
     {
       "name": "Open Autonomy",
@@ -65,7 +65,7 @@
       "client": "fetch (the platform's sample World seeder)",
       "backend": [
         {
-          "call": "call('stripe', '/v1/customers?email=…')",
+          "call": "call('stripe', '/v1/customers?email=\u2026')",
           "operation": "GetCustomers",
           "evidence": "apps/platform/src/sample.ts:40"
         },
@@ -687,6 +687,18 @@
         }
       ],
       "gate": "The shipped website enterprise checkout directly uses Stripe independently of the server IS_BILLING_ENABLED=false switch (packages/twenty-website/src/app/api/enterprise/checkout/route.ts:7-19,51)."
+    },
+    {
+      "name": "World first-use",
+      "commit": "7638d09b23a3bb36067a607e0fd19898b0a5b624",
+      "client": "Real Stripe SDK customer workflow and normal browser inspection",
+      "frontend": [
+        {
+          "call": "Customers sidebar \u2192 SDK-created customer profile",
+          "operation": "GET https://dashboard.stripe.com/customers; GET https://dashboard.stripe.com/customers/{customer}",
+          "evidence": "twin-world/docs/contributing/first-use.md:39; twin-world/docs/getting-started.md:158"
+        }
+      ]
     }
   ],
   "optional": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/twin-stripe",
-  "version": "3.0.3",
+  "version": "3.0.5",
   "description": "Local Stripe customer, checkout and billing workflows with synthetic state and the real Stripe SDK. Supported operations and hosted-page limits are documented in the README.",
   "keywords": [
     "twin",
@@ -46,12 +46,12 @@
     "world-stripe": "dist/src/cli.js"
   },
   "dependencies": {
-    "@volter/world-ui": "^1.0.65",
+    "@volter/world-ui": "^1.0.155",
     "react": "^19.2.7",
     "react-dom": "^19.2.7"
   },
   "peerDependencies": {
-    "@volter/world-core": "^3.0.68"
+    "@volter/world-core": "^3.0.155"
   },
   "devDependencies": {
     "@types/bun": "^1.2.20",

package/spec/SOURCE.md

@@ -8,6 +8,15 @@
 
 The pack serves this document's version (`SERVED_VERSION` in `src/engine/version.ts`).
 
+Customer Dashboard references, read 2026-10-09: [Export customer data](https://support.stripe.com/questions/export-customer-data-without-the-payment-details)
+establishes the Customers section at `/customers`. [Updates to the Customer details page](https://support.stripe.com/questions/updates-to-the-customer-detail-page)
+establishes dynamic payments, invoices and subscriptions in the primary column, with details and metadata on the right.
+[Manage customer information](https://support.stripe.com/questions/manage-a-customer-s-information-and-payments)
+names the customer profile and payment-method modules; its older left-details layout is superseded by the update article.
+The pages publish no version date. The authored list and read-only detail use stored API views, UTC dates and an explicitly
+limited name/email/id/description search. Dashboard create/edit actions, exports and guest-customer grouping are outside this scope.
+Only public documentation was read; no vendor sign-in, upstream DOM, script or image is shipped.
+
 - **Published examples:** `fixtures3.json.gz`, gzip of Stripe's `openapi/fixtures3.json` (one sample object per resource,
   the objects Stripe's API reference shows), from commit `0d98342fc985dc7710a44be25e8528dd8e099bc2` (2026-09-23).
   SHA-256 of the uncompressed file: `e6822f7ee6fd71bdde6228537368aafcfb7191109340fe119d9aca27c6e9396d`.

package/spec/sources.json

@@ -302,5 +302,13 @@
     "quotes": {
       "Unrecognized request URL (GET: /v1/test).": true
     }
+  },
+  "https://support.stripe.com/questions/export-customer-data-without-the-payment-details": {
+    "status": 200,
+    "checked": "2026-10-09"
+  },
+  "https://support.stripe.com/questions/updates-to-the-customer-detail-page": {
+    "status": 200,
+    "checked": "2026-10-09"
   }
 }