@vonpay/checkout-cli 0.12.0 → 0.14.0

package/dist/commands/sessions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/commands/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAItC;;;;;GAKG;AACH,SAAS,YAAY,CAAC,OAAoB;IACxC,MAAM,WAAW,GACf,OAAO,CAAC,MAAM,KAAK,WAAW;QAC5B,CAAC,CAAC,KAAK,CAAC,KAAK;QACb,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ;YAC3B,CAAC,CAAC,KAAK,CAAC,GAAG;YACX,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;gBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IACvB,MAAM,KAAK,GAAG;QACZ,kBAAkB,OAAO,CAAC,EAAE,EAAE;QAC9B,kBAAkB,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QAC/C,kBAAkB,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;KACvE,CAAC;IACF,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,YAAY,GAChB,OAAO,CAAC,aAAa,KAAK,MAAM;YAC9B,CAAC,CAAC,KAAK,CAAC,KAAK;YACb,CAAC,CAAC,OAAO,CAAC,aAAa,KAAK,MAAM;gBAChC,CAAC,CAAC,KAAK,CAAC,MAAM;gBACd,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,kBAAkB,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,MAAM,CACV,wGAAwG,CACzG,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,0EAA0E;IAC1E,2EAA2E;IAC3E,qCAAqC;IACrC,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CACR,KAAK,CAAC,GAAG,CACP,eAAe,OAAO,CAAC,WAAW,wGAAwG,CAC3I,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,CAAC;AAE5C,MAAM,UAAU,eAAe;IAC7B,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAClD,qCAAqC,CACtC,CAAC;IAEF,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,cAAc,CAAC,kBAAkB,EAAE,4CAA4C,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SACxG,cAAc,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;SAC/D,MAAM,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;SACpD,MAAM,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;SACrD,MAAM,CAAC,qBAAqB,EAAE,yBAAyB,CAAC;SACxD,MAAM,CAAC,oBAAoB,EAAE,wBAAwB,CAAC;SACtD,MAAM,CAAC,yBAAyB,EAAE,kCAAkC,CAAC;SACrE,MAAM,CAAC,WAAW,EAAE,qCAAqC,CAAC;SAC1D,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACnC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACrC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE;gBACpC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,GAAG,eAAe,CAAC;gBAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACtD,OAAO,CAAC,IAAI,EAAE,CAAC;gBAEf,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;qBAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;oBAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;4BAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;wBACxC,CAAC;oBACH,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAC9C,CAAC;gBACD,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAC1C,MAAM,EACN,IAAI,CAAC,cAAc;gBACjB,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;gBACzC,CAAC,CAAC,SAAS,CACd,CAAC;YACF,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,oBAAoB,CAAC;SACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;SAC9B,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACnC,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,IAAwB,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,OAAO,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/commands/tokens.d.ts

@@ -1,3 +0,0 @@
-import { Command } from "commander";
-export declare function tokensCommand(): Command;
-//# sourceMappingURL=tokens.d.ts.map

package/dist/commands/tokens.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/commands/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC,wBAAgB,aAAa,IAAI,OAAO,CA+EvC"}

package/dist/commands/tokens.js

@@ -1,73 +0,0 @@
-import { Command } from "commander";
-import chalk from "chalk";
-import { startSpinner } from "../utils/spinner.js";
-import { requireApiKey } from "../config.js";
-import { makeCheckoutClient } from "../client-factory.js";
-import { parseMetadata } from "../utils/metadata.js";
-import { handleError } from "../utils/errors.js";
-import { warnLiveSecretFlag } from "../utils/live-key.js";
-function printToken(token) {
-    const statusColor = token.status === "active"
-        ? chalk.green
-        : token.status === "expired"
-            ? chalk.yellow
-            : chalk.red;
-    console.log(`  ID:        ${token.id}`);
-    console.log(`  Status:    ${statusColor(token.status)}`);
-    console.log(`  Card:      ${token.card.brand} •••• ${token.card.last4}`);
-    console.log(`  Expires:   ${String(token.card.expMonth).padStart(2, "0")}/${token.card.expYear}`);
-}
-export function tokensCommand() {
-    const tokens = new Command("tokens").description("Create payment-method tokens for saved-card / MIT flows");
-    tokens
-        .command("create")
-        .description("Create a payment-method token")
-        .option("--buyer-id <id>", "Buyer ID to attach the token to")
-        .option("--provider-reference <ref>", "Provider tokenization handle (required for live keys with iframe-vault providers)")
-        .option("--metadata <pair...>", "Metadata key=value (repeat flag for multiple pairs)")
-        .option("--idempotency-key <key>", "Idempotency key for safe retries")
-        .option("--json", "Output raw JSON")
-        .action(async (opts) => {
-        const apiKey = requireApiKey();
-        // Nothing is auto-minted any more: a sandbox account tokenizes on its
-        // payment provider's test environment and needs what that provider
-        // needs, just like live. A test key on a live account, or on a sandbox
-        // with no provider, gets 422 sandbox_account_required.
-        if (!opts.buyerId && !opts.providerReference) {
-            console.warn(chalk.yellow("Warning: no --buyer-id or --provider-reference supplied. Providers with an iframe vault (sandbox and live alike) will fail with a 422 validation_error."));
-        }
-        if (opts.providerReference !== undefined) {
-            warnLiveSecretFlag(apiKey, "--provider-reference");
-        }
-        const client = makeCheckoutClient();
-        const spinner = startSpinner("Creating token...");
-        try {
-            const metadata = parseMetadata(opts.metadata);
-            const params = {};
-            if (opts.buyerId !== undefined)
-                params.buyerId = opts.buyerId;
-            if (opts.providerReference !== undefined) {
-                params.providerReference = opts.providerReference;
-            }
-            if (metadata !== undefined)
-                params.metadata = metadata;
-            const token = await client.tokens.create(params, opts.idempotencyKey
-                ? { idempotencyKey: opts.idempotencyKey }
-                : undefined);
-            spinner.stop();
-            if (opts.json) {
-                console.log(JSON.stringify(token, null, 2));
-            }
-            else {
-                console.log(chalk.green("✓ Token created"));
-                printToken(token);
-            }
-        }
-        catch (err) {
-            spinner.stop();
-            handleError(err);
-        }
-    });
-    return tokens;
-}
-//# sourceMappingURL=tokens.js.map

package/dist/commands/tokens.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/commands/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,SAAS,UAAU,CAAC,KAAY;IAC9B,MAAM,WAAW,GACf,KAAK,CAAC,MAAM,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK,CAAC,KAAK;QACb,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,CAAC,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAElB,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,gBAAgB,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CACT,gBAAgB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CACrF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAC9C,yDAAyD,CAC1D,CAAC;IAEF,MAAM;SACH,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;SAC5D,MAAM,CACL,4BAA4B,EAC5B,mFAAmF,CACpF;SACA,MAAM,CACL,sBAAsB,EACtB,qDAAqD,CACtD;SACA,MAAM,CAAC,yBAAyB,EAAE,kCAAkC,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;SACnC,MAAM,CACL,KAAK,EAAE,IAMN,EAAE,EAAE;QACH,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAE/B,sEAAsE;QACtE,mEAAmE;QACnE,uEAAuE;QACvE,uDAAuD;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,yJAAyJ,CAC1J,CACF,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACzC,kBAAkB,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAsB,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC9D,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACpD,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAEvD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACtC,MAAM,EACN,IAAI,CAAC,cAAc;gBACjB,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;gBACzC,CAAC,CAAC,SAAS,CACd,CAAC;YACF,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBAC5C,UAAU,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CACF,CAAC;IAEJ,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/commands/trigger.d.ts

@@ -1,38 +0,0 @@
-import { Command } from "commander";
-export declare const SUPPORTED_EVENTS: readonly ["charge.succeeded", "charge.failed", "charge.refunded", "refund.failed", "payment_intent.succeeded", "payment_intent.failed", "payment_intent.cancelled", "mirror.order.created", "session.succeeded", "session.failed"];
-/**
- * Event keys the server emits but no merchant can subscribe to. Triggering one
- * locally works, but an endpoint will never receive it in staging or
- * production, so a handler tested only against these is untested.
- */
-export declare const UNSUBSCRIBABLE_EVENTS: readonly SupportedEvent[];
-/**
- * Print a warning when the developer triggers an event they will never receive
- * in a real environment. Returns whether a warning was emitted so this stays
- * testable without capturing stdout.
- */
-export declare function warnIfUnsubscribable(event: SupportedEvent, write?: (msg: string) => void): boolean;
-type SupportedEvent = (typeof SUPPORTED_EVENTS)[number];
-interface WebhookEnvelope {
-    id: string;
-    type: SupportedEvent;
-    created: number;
-    livemode: boolean;
-    merchant_id: string;
-    /**
-     * Always `true` here: this is a synthesized event, exactly like the server's
-     * "Send test event", which sets the same marker. A receiver that skips on it
-     * must skip these too — otherwise `trigger` would exercise a code path the
-     * real test button never reaches.
-     */
-    test_event: true;
-    data: Record<string, unknown>;
-}
-export declare function buildPayload(event: SupportedEvent, opts: {
-    sessionId?: string;
-    amount?: number;
-    currency?: string;
-}): WebhookEnvelope;
-export declare function triggerCommand(): Command;
-export {};
-//# sourceMappingURL=trigger.d.ts.map

package/dist/commands/trigger.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"trigger.d.ts","sourceRoot":"","sources":["../../src/commands/trigger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC,eAAO,MAAM,gBAAgB,oOAWnB,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,cAAc,EAG1D,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,cAAc,EACrB,KAAK,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAA6B,GACpD,OAAO,CAYT;AACD,KAAK,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAMxD,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,UAAU,EAAE,IAAI,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AA2FD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D,eAAe,CAiBjB;AAED,wBAAgB,cAAc,IAAI,OAAO,CA6HxC"}

package/dist/commands/trigger.js

@@ -1,246 +0,0 @@
-import { Command } from "commander";
-import { createHmac, randomUUID } from "node:crypto";
-import chalk from "chalk";
-import ora from "ora";
-import { requireApiKey } from "../config.js";
-import { requireLiveConfirmation } from "../utils/live-key.js";
-import { validateForwardTo } from "../utils/forward-to.js";
-import { safeDisplay } from "../utils/sanitize.js";
-// Real server-emitted event keys this local trigger can synthesize. The
-// fictional `refund.created` was removed — the server emits `charge.refunded`.
-//
-// ⚠️ ORDER MATTERS: `charge.*` first, because those are the keys a merchant can
-// actually SUBSCRIBE to, and this list is what `--help` prints. `session.*` are
-// emitted internally but are absent from the merchant subscription catalog,
-// which accepts an unknown key, stores nothing and returns success — so an
-// endpoint subscribed to one receives nothing, forever. They stay triggerable
-// (removing them would break anyone scripting against this command) but
-// `warnIfUnsubscribable` below says so at the point of use. Until 0.5.2 this
-// list offered `session.succeeded` and NOT `charge.succeeded`, so the only
-// fulfilment event a merchant can receive was the one event this tool could not
-// synthesize.
-export const SUPPORTED_EVENTS = [
-    "charge.succeeded",
-    "charge.failed",
-    "charge.refunded",
-    "refund.failed",
-    "payment_intent.succeeded",
-    "payment_intent.failed",
-    "payment_intent.cancelled",
-    "mirror.order.created",
-    "session.succeeded",
-    "session.failed",
-];
-/**
- * Event keys the server emits but no merchant can subscribe to. Triggering one
- * locally works, but an endpoint will never receive it in staging or
- * production, so a handler tested only against these is untested.
- */
-export const UNSUBSCRIBABLE_EVENTS = [
-    "session.succeeded",
-    "session.failed",
-];
-/**
- * Print a warning when the developer triggers an event they will never receive
- * in a real environment. Returns whether a warning was emitted so this stays
- * testable without capturing stdout.
- */
-export function warnIfUnsubscribable(event, write = (m) => console.warn(m)) {
-    if (!UNSUBSCRIBABLE_EVENTS.includes(event))
-        return false;
-    const suggestion = event === "session.succeeded" ? "charge.succeeded" : "charge.failed";
-    write(chalk.yellow(`⚠  ${event} is emitted internally but is NOT subscribable.\n` +
-        `   The subscription API accepts the key, stores nothing and returns success, so a\n` +
-        `   real endpoint receives this event NEVER — a handler tested only against it is\n` +
-        `   untested. Use ${suggestion} instead.`));
-    return true;
-}
-// Per-event `data` shapes matching the server's buildEventData() for the
-// events this trigger supports. Synthetic-but-realistic values; the failure
-// fixtures use codes already on the normalized allowlist.
-function buildEventData(event, ids, amount, currency) {
-    const base = {
-        session_id: ids.sessionId,
-        payment_intent_id: ids.paymentIntentId,
-        transaction_id: ids.transactionId,
-        amount,
-        currency,
-    };
-    switch (event) {
-        case "session.succeeded":
-        case "payment_intent.succeeded":
-            return base;
-        case "charge.succeeded":
-            // Von transaction id — the one to reconcile on (server sends it).
-            return { ...base, vp_tx_id: ids.transactionId, card: null };
-        case "session.failed":
-        case "payment_intent.failed":
-            return {
-                ...base,
-                failure_reason: "Card declined",
-                failure_code: "card_declined",
-                network_decline_code: "05",
-            };
-        case "charge.failed":
-            return {
-                ...base,
-                failure_reason: "Card declined",
-                failure_code: "card_declined",
-                // Non-null ONLY when failure_code is `blocked_by_rule`; this fixture is
-                // an ordinary decline, so a consumer must see the null.
-                rule_code: null,
-                // Always null on a decline: no money moved, no settlement row.
-                vp_tx_id: null,
-                network_decline_code: "05",
-            };
-        case "mirror.order.created":
-            // Connector-neutral, like the server: the merchant's own order number and
-            // the customer's order page. No session/transaction ids on this event.
-            return {
-                payment_intent_id: ids.paymentIntentId,
-                order_number: `TEST-${randomUUID().slice(0, 6).toUpperCase()}`,
-                order_status_url: null,
-            };
-        case "payment_intent.cancelled":
-            return { ...base, cancellation_reason: "buyer_abandoned" };
-        case "charge.refunded":
-            return {
-                ...base,
-                refund_id: `vpr_test_${randomUUID().slice(0, 8)}`,
-                vp_tx_id: ids.transactionId,
-                // The two unambiguous companions to `amount`. The server has emitted
-                // both for some time; omitting them here made a handler that reads them
-                // look broken against a synthetic event.
-                refund_amount: amount,
-                amount_refunded_total: amount,
-                reason: "customer_request",
-                is_partial: false,
-                original_charge_amount: amount,
-                card: null,
-            };
-        case "refund.failed":
-            return {
-                ...base,
-                refund_id: `vpr_test_${randomUUID().slice(0, 8)}`,
-                // Mirrors charge.refunded: the Von transaction id of the refunded charge.
-                vp_tx_id: ids.transactionId,
-                // No money moved: this is the reversal amount that FAILED to move.
-                refund_amount: amount,
-                amount_refunded_total: 0,
-                reason: "customer_request",
-                // LOCKED two-value refund vocabulary — `refund_declined` (terminal) or
-                // `refund_unresolved` (no provider response, true state unknown).
-                reason_code: "refund_declined",
-                is_partial: false,
-                original_charge_amount: amount,
-                retry_available: true,
-                card: null,
-            };
-    }
-}
-export function buildPayload(event, opts) {
-    const amount = opts.amount ?? 1499;
-    const currency = opts.currency ?? "USD";
-    const ids = {
-        sessionId: opts.sessionId ?? `vp_cs_test_${randomUUID().slice(0, 8)}`,
-        transactionId: `vp_tx_test_${randomUUID().slice(0, 8)}`,
-        paymentIntentId: `vpi_test_${randomUUID().slice(0, 8)}`,
-    };
-    return {
-        id: `vp_evt_test_${randomUUID().slice(0, 8)}`,
-        type: event,
-        created: Math.floor(Date.now() / 1000),
-        livemode: false,
-        merchant_id: `vp_mer_test_${randomUUID().slice(0, 8)}`,
-        test_event: true,
-        data: buildEventData(event, ids, amount, currency),
-    };
-}
-export function triggerCommand() {
-    return new Command("trigger")
-        .description("Send a test webhook event to a local URL")
-        .argument("<event>", `Event type (${SUPPORTED_EVENTS.join(", ")})`)
-        .requiredOption("--url <url>", "Local webhook URL (e.g. http://localhost:3000/webhooks)")
-        .option("--session-id <id>", "Custom session ID")
-        .option("--amount <cents>", "Amount in minor units", (v) => parseInt(v, 10))
-        .option("--currency <code>", "Currency code")
-        .option("--url-tunnel", "Allow a non-loopback --url (ngrok / Cloudflare Tunnel). Without it, --url must be this machine")
-        .option("--confirm-live", "Required when the loaded key is vp_sk_live_*: the event is signed with that LIVE key and sent to --url")
-        .action(async (event, opts) => {
-        if (!SUPPORTED_EVENTS.includes(event)) {
-            console.error(chalk.red(`Unknown event: ${event}\nSupported: ${SUPPORTED_EVENTS.join(", ")}`));
-            process.exit(1);
-        }
-        warnIfUnsubscribable(event);
-        // Same destination policy as `listen --forward-to`: this machine only,
-        // unless --url-tunnel. A signed synthetic event is a local-dev tool; a
-        // production endpoint that verifies with the API key would accept it as
-        // a genuine paid-order event.
-        const destination = validateForwardTo(String(opts.url ?? ""), {
-            allowTunnel: opts.urlTunnel === true,
-            flag: "--url",
-            tunnelFlag: "--url-tunnel",
-        });
-        if (!destination.ok) {
-            console.error(chalk.red(destination.reason));
-            process.exit(1);
-        }
-        if (destination.warning)
-            console.warn(chalk.yellow(destination.warning));
-        const apiKey = requireApiKey();
-        // A synthetic event signed with a LIVE key is a real signature from a
-        // real secret, sent to whatever --url says (any host, not only
-        // localhost). A receiver that verifies with that key — the documented
-        // local-dev stand-in — accepts it as genuine, so a live-key trigger
-        // aimed at a production endpoint forges a paid-order event. Same gate as
-        // the money commands, before anything is signed or sent.
-        requireLiveConfirmation(apiKey, opts, "trigger a test webhook event", `signs a synthetic event with your LIVE key and sends it to ${safeDisplay(String(opts.url))}`);
-        const payload = buildPayload(event, opts);
-        const body = JSON.stringify(payload);
-        // v1 webhook signature contract: ONE `x-vonpay-signature` header of
-        // shape `t=<unix-seconds>,v1=<hex>`, HMAC-SHA256 over `${t}.${body}`.
-        // There is no separate timestamp header. For this local trigger the
-        // signing secret is your API key (verify with
-        // `constructEvent(rawBody, signatureHeader, apiKey)`).
-        const t = Math.floor(Date.now() / 1000);
-        const v1 = createHmac("sha256", apiKey)
-            .update(`${t}.${body}`)
-            .digest("hex");
-        const signatureHeader = `t=${t},v1=${v1}`;
-        const spinner = ora(`Sending ${event} to ${opts.url}...`).start();
-        try {
-            const response = await fetch(opts.url, {
-                method: "POST",
-                headers: {
-                    "Content-Type": "application/json",
-                    "x-vonpay-signature": signatureHeader,
-                    "User-Agent": "VonPay-Webhook/1.0 (CLI trigger)",
-                },
-                body,
-                signal: AbortSignal.timeout(10_000),
-            });
-            spinner.stop();
-            if (response.ok) {
-                console.log(chalk.green(`✓ ${event} delivered → ${response.status}`));
-            }
-            else {
-                console.log(chalk.yellow(`⚠ ${event} delivered but got ${response.status} response`));
-            }
-            console.log(chalk.dim(`  Event:   ${payload.id} (${payload.type})`));
-            console.log(chalk.dim(`  Amount:  ${payload.data.amount} ${payload.data.currency}`));
-            console.log(chalk.dim(`\n  Verify with: vonpay.webhooks.constructEvent(rawBody, signatureHeader, secret)`));
-            console.log(chalk.dim(`  (local dev: 'secret' is your API key here — production webhooks are signed with your endpoint's whsec_… secret, NOT your API key)`));
-        }
-        catch (err) {
-            spinner.stop();
-            if (err instanceof Error && err.name === "TimeoutError") {
-                console.error(chalk.red(`Timeout: ${opts.url} did not respond within 10s`));
-            }
-            else {
-                console.error(chalk.red(`Failed to deliver: ${err instanceof Error ? err.message : err}`));
-            }
-            process.exit(1);
-        }
-    });
-}
-//# sourceMappingURL=trigger.js.map

package/dist/commands/trigger.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trigger.js","sourceRoot":"","sources":["../../src/commands/trigger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,wEAAwE;AACxE,+EAA+E;AAC/E,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,8EAA8E;AAC9E,wEAAwE;AACxE,6EAA6E;AAC7E,2EAA2E;AAC3E,gFAAgF;AAChF,cAAc;AACd,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,kBAAkB;IAClB,eAAe;IACf,iBAAiB;IACjB,eAAe;IACf,0BAA0B;IAC1B,uBAAuB;IACvB,0BAA0B;IAC1B,sBAAsB;IACtB,mBAAmB;IACnB,gBAAgB;CACR,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAA8B;IAC9D,mBAAmB;IACnB,gBAAgB;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAqB,EACrB,QAA+B,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAErD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,UAAU,GAAG,KAAK,KAAK,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAC;IACxF,KAAK,CACH,KAAK,CAAC,MAAM,CACV,MAAM,KAAK,mDAAmD;QAC5D,qFAAqF;QACrF,oFAAoF;QACpF,oBAAoB,UAAU,WAAW,CAC5C,CACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAuBD,yEAAyE;AACzE,4EAA4E;AAC5E,0DAA0D;AAC1D,SAAS,cAAc,CACrB,KAAqB,EACrB,GAA0E,EAC1E,MAAc,EACd,QAAgB;IAEhB,MAAM,IAAI,GAAG;QACX,UAAU,EAAE,GAAG,CAAC,SAAS;QACzB,iBAAiB,EAAE,GAAG,CAAC,eAAe;QACtC,cAAc,EAAE,GAAG,CAAC,aAAa;QACjC,MAAM;QACN,QAAQ;KACT,CAAC;IACF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,mBAAmB,CAAC;QACzB,KAAK,0BAA0B;YAC7B,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB;YACrB,kEAAkE;YAClE,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9D,KAAK,gBAAgB,CAAC;QACtB,KAAK,uBAAuB;YAC1B,OAAO;gBACL,GAAG,IAAI;gBACP,cAAc,EAAE,eAAe;gBAC/B,YAAY,EAAE,eAAe;gBAC7B,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO;gBACL,GAAG,IAAI;gBACP,cAAc,EAAE,eAAe;gBAC/B,YAAY,EAAE,eAAe;gBAC7B,wEAAwE;gBACxE,wDAAwD;gBACxD,SAAS,EAAE,IAAI;gBACf,+DAA+D;gBAC/D,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,IAAI;aAC3B,CAAC;QACJ,KAAK,sBAAsB;YACzB,0EAA0E;YAC1E,uEAAuE;YACvE,OAAO;gBACL,iBAAiB,EAAE,GAAG,CAAC,eAAe;gBACtC,YAAY,EAAE,QAAQ,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE;gBAC9D,gBAAgB,EAAE,IAAI;aACvB,CAAC;QACJ,KAAK,0BAA0B;YAC7B,OAAO,EAAE,GAAG,IAAI,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,CAAC;QAC7D,KAAK,iBAAiB;YACpB,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,YAAY,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACjD,QAAQ,EAAE,GAAG,CAAC,aAAa;gBAC3B,qEAAqE;gBACrE,wEAAwE;gBACxE,yCAAyC;gBACzC,aAAa,EAAE,MAAM;gBACrB,qBAAqB,EAAE,MAAM;gBAC7B,MAAM,EAAE,kBAAkB;gBAC1B,UAAU,EAAE,KAAK;gBACjB,sBAAsB,EAAE,MAAM;gBAC9B,IAAI,EAAE,IAAI;aACX,CAAC;QACJ,KAAK,eAAe;YAClB,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,YAAY,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACjD,0EAA0E;gBAC1E,QAAQ,EAAE,GAAG,CAAC,aAAa;gBAC3B,mEAAmE;gBACnE,aAAa,EAAE,MAAM;gBACrB,qBAAqB,EAAE,CAAC;gBACxB,MAAM,EAAE,kBAAkB;gBAC1B,uEAAuE;gBACvE,kEAAkE;gBAClE,WAAW,EAAE,iBAAiB;gBAC9B,UAAU,EAAE,KAAK;gBACjB,sBAAsB,EAAE,MAAM;gBAC9B,eAAe,EAAE,IAAI;gBACrB,IAAI,EAAE,IAAI;aACX,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAqB,EACrB,IAAgE;IAEhE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG;QACV,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,cAAc,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QACrE,aAAa,EAAE,cAAc,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QACvD,eAAe,EAAE,YAAY,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;KACxD,CAAC;IACF,OAAO;QACL,EAAE,EAAE,eAAe,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAC7C,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACtC,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,eAAe,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QACtD,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;SAC1B,WAAW,CAAC,0CAA0C,CAAC;SACvD,QAAQ,CAAC,SAAS,EAAE,eAAe,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;SAClE,cAAc,CAAC,aAAa,EAAE,yDAAyD,CAAC;SACxF,MAAM,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;SAChD,MAAM,CAAC,kBAAkB,EAAE,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SAC3E,MAAM,CAAC,mBAAmB,EAAE,eAAe,CAAC;SAC5C,MAAM,CACL,cAAc,EACd,gGAAgG,CACjG;SACA,MAAM,CACL,gBAAgB,EAChB,wGAAwG,CACzG;SACA,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,IAAI,EAAE,EAAE;QACpC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAuB,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,kBAAkB,KAAK,gBAAgB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrE,CACF,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,oBAAoB,CAAC,KAAuB,CAAC,CAAC;QAE9C,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,8BAA8B;QAC9B,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;YAC5D,WAAW,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;YACpC,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,cAAc;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,WAAW,CAAC,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,sEAAsE;QACtE,+DAA+D;QAC/D,sEAAsE;QACtE,oEAAoE;QACpE,yEAAyE;QACzE,yDAAyD;QACzD,uBAAuB,CACrB,MAAM,EACN,IAAI,EACJ,8BAA8B,EAC9B,8DAA8D,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAC9F,CAAC;QACF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAuB,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,oEAAoE;QACpE,sEAAsE;QACtE,oEAAoE;QACpE,8CAA8C;QAC9C,uDAAuD;QACvD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;aACpC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;aACtB,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAE1C,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,oBAAoB,EAAE,eAAe;oBACrC,YAAY,EAAE,kCAAkC;iBACjD;gBACD,IAAI;gBACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,OAAO,CAAC,IAAI,EAAE,CAAC;YAEf,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,gBAAgB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,KAAK,KAAK,sBAAsB,QAAQ,CAAC,MAAM,WAAW,CAC3D,CACF,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,cAAc,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAC7D,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,mFAAmF,CACpF,CACF,CAAC;YACF,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,qIAAqI,CACtI,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,EAAE,CAAC;YACf,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACxD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,6BAA6B,CAAC,CAAC,CAAC;YAC9E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CACjE,CACF,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/config.d.ts

@@ -1,22 +0,0 @@
-export interface CliConfig {
-    checkout?: {
-        apiKey?: string;
-        baseUrl?: string;
-    };
-}
-export declare function loadConfig(): CliConfig;
-export declare function saveConfig(config: CliConfig): void;
-/**
- * Remove the stored API key from `~/.vonpay/config.json` (the `logout` flow).
- * Drops only the secret — any non-secret config (e.g. `baseUrl`) is preserved —
- * and deletes the file entirely if nothing else remains, so a clean logout
- * leaves no plaintext-key husk on disk. Does NOT touch `VON_PAY_SECRET_KEY` in
- * the environment (the caller surfaces that, since it still takes precedence).
- * Returns whether a stored key was actually present.
- */
-export declare function clearStoredApiKey(): {
-    removed: boolean;
-};
-export declare function getApiKey(): string | undefined;
-export declare function requireApiKey(): string;
-//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,wBAAgB,UAAU,IAAI,SAAS,CAUtC;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAQlD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAkBxD;AAED,wBAAgB,SAAS,IAAI,MAAM,GAAG,SAAS,CAO9C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAStC"}

package/dist/config.js

@@ -1,72 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { emitCliError } from "./utils/json-errors.js";
-const CONFIG_DIR = join(homedir(), ".vonpay");
-const CONFIG_FILE = join(CONFIG_DIR, "config.json");
-export function loadConfig() {
-    if (!existsSync(CONFIG_FILE))
-        return {};
-    try {
-        return JSON.parse(readFileSync(CONFIG_FILE, "utf-8"));
-    }
-    catch {
-        console.error("Warning: ~/.vonpay/config.json is malformed. Run `vonpay checkout login` to reset it.");
-        return {};
-    }
-}
-export function saveConfig(config) {
-    if (!existsSync(CONFIG_DIR)) {
-        mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
-    }
-    writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2) + "\n", {
-        encoding: "utf-8",
-        mode: 0o600,
-    });
-}
-/**
- * Remove the stored API key from `~/.vonpay/config.json` (the `logout` flow).
- * Drops only the secret — any non-secret config (e.g. `baseUrl`) is preserved —
- * and deletes the file entirely if nothing else remains, so a clean logout
- * leaves no plaintext-key husk on disk. Does NOT touch `VON_PAY_SECRET_KEY` in
- * the environment (the caller surfaces that, since it still takes precedence).
- * Returns whether a stored key was actually present.
- */
-export function clearStoredApiKey() {
-    const config = loadConfig();
-    // Nothing to remove → touch nothing on disk (no redundant rewrite, and a
-    // malformed/parse-failed config is left alone rather than silently deleted).
-    if (!config.checkout?.apiKey)
-        return { removed: false };
-    delete config.checkout.apiKey;
-    // Drop an emptied `checkout` block so we don't persist a bare `{}` husk.
-    if (Object.keys(config.checkout).length === 0)
-        delete config.checkout;
-    if (Object.keys(config).length === 0) {
-        // Nothing left to persist — remove the file so logout leaves no trace.
-        // `force` tolerates a concurrent delete (no uncaught ENOENT on a TOCTOU race).
-        rmSync(CONFIG_FILE, { force: true });
-    }
-    else {
-        saveConfig(config);
-    }
-    return { removed: true };
-}
-export function getApiKey() {
-    // Env var takes precedence
-    const envKey = process.env.VON_PAY_SECRET_KEY;
-    if (envKey)
-        return envKey;
-    const config = loadConfig();
-    return config.checkout?.apiKey;
-}
-export function requireApiKey() {
-    const key = getApiKey();
-    if (!key) {
-        // Fixed text, nothing to redact.
-        const message = "No API key found. Run `vonpay checkout login` or set VON_PAY_SECRET_KEY.";
-        emitCliError({ error: message, code: null }, message);
-    }
-    return key;
-}
-//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AASpD,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAc,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CACX,uFAAuF,CACxF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAiB;IAC1C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QACjE,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,yEAAyE;IACzE,6EAA6E;IAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAExD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,yEAAyE;IACzE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAEtE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,uEAAuE;QACvE,+EAA+E;QAC/E,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,2BAA2B;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,iCAAiC;QACjC,MAAM,OAAO,GACX,0EAA0E,CAAC;QAC7E,YAAY,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAC7D,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,8BAA8B,CAAC;KAC3C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAExB,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAE1B,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/utils/errors.d.ts

@@ -1,80 +0,0 @@
-import { VonPayError, type SessionNotExpirableError, type SessionNotModifiableError } from "@vonpay/checkout-node";
-/**
- * Secret shapes redacted from anything this CLI prints about an error.
- *
- * ⛔ Until 0.8.0 this matched `vp_sk_*` only, so a webhook signing secret, a
- * session-signing secret or a Stripe key inside an error message (a failed
- * config read, a proxy echoing a header) was printed in the clear — and CLI
- * output lands in CI logs and pasted support threads.
- *
- * One of the lists `tests/scripts/secret-shape-parity.test.mjs` holds to the
- * same definition of "a secret" as the SDK telemetry blocklists, the commit
- * gate and the scrubbers. Add a shape there and here together.
- *
- * Publishable keys (`vp_pk_*`, `pk_*`) are deliberately NOT redacted: they are
- * public by design (the commit gate does not block them either), and an error
- * naming the publishable key that was rejected is useful.
- *
- * `vp_sk_live_…` contains `sk_live_…`. The Vonpay pattern runs first so the
- * key is redacted as a Vonpay key; the output (`vp_sk_***`) is the same either
- * way, and the Stripe pattern does not match it again.
- */
-export declare const SECRET_PATTERNS: ReadonlyArray<readonly [RegExp, string]>;
-export declare function scrubSecrets(s: string): string;
-/** Own data fields of a class instance (methods excluded). */
-type DataKeys<T> = {
-    [K in keyof T]-?: T[K] extends (...args: never[]) => unknown ? never : K;
-}[keyof T];
-/** `Error`'s own fields. `message` is printed as the first line; the rest are not structured data. */
-type ErrorBaseKeys = "name" | "message" | "stack" | "cause";
-type StructuredField = Exclude<DataKeys<VonPayError>, ErrorBaseKeys> | Exclude<DataKeys<SessionNotExpirableError>, ErrorBaseKeys> | Exclude<DataKeys<SessionNotModifiableError>, ErrorBaseKeys>;
-/**
- * The structured fields, in print order. ONE list, read by both output
- * formats: the text lines below and the `--json` object. It is the key list of
- * `FIELD_PRINTERS`, whose mapped type makes `tsc` fail when `VonPayError` gains
- * a field the CLI does not handle — so the JSON cannot silently drop a field
- * the text prints, or the reverse.
- *
- * The MCP server's error envelope (`ERROR_ENVELOPE_FIELDS` in
- * `@vonpay/checkout-mcp`) is held to the same set by
- * `tests/integration/cli-mcp-error-field-parity.test.ts`. The two packages are
- * published separately, so neither imports the other.
- */
-export declare const ERROR_FIELDS: ReadonlyArray<StructuredField>;
-/**
- * The one JSON object printed for an error under `--json`.
- *
- * Every error has:
- *   - `error` — the message (always a string)
- *   - `code`  — the API error code, or `null` when no API response was
- *               involved (a network failure, or a problem the CLI caught
- *               before sending anything)
- * and an API error adds every structured field the SDK's error carries that is
- * not `undefined` — the same fields, under the same names, as the MCP server's
- * error envelope: `status`, `nextAction`, `retryable`, `retryWithheld`,
- * `captureOutcome`, `voidOutcome`, … Unlike the text output, `false` values are
- * kept: `"retryWithheld": false` is an answer.
- *
- * ⚠️ `code: null` on `payment-intents capture` / `void` / `create` or
- * `refunds create` does NOT mean nothing happened: a network failure leaves
- * the outcome unknown. Read the resource back before running it again.
- *
- * Nothing here can carry the API key, the idempotency key or the request body:
- * `VonPayError` holds none of them, and any other error contributes only its
- * message. Every string still goes through the same redaction as the text
- * output.
- */
-export declare function errorJson(err: unknown): Record<string, unknown>;
-/**
- * Exit 1 on a problem the CLI caught itself, before calling the API (a live
- * key without --confirm-live, a bad flag value). In text mode `text` is
- * printed exactly as given; under `--json` the output is
- * `{"error": <message>, "code": null}`, redacted like everything else.
- */
-export declare function exitWithCliError(message: string, text: string): never;
-export declare function handleError(err: unknown): never;
-export declare const __testing__: {
-    scrubSecrets: typeof scrubSecrets;
-};
-export {};
-//# sourceMappingURL=errors.d.ts.map

package/dist/utils/errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AACA,OAAO,EACL,WAAW,EACX,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAG/B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAMpE,CAAC;AAEF,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED,8DAA8D;AAC9D,KAAK,QAAQ,CAAC,CAAC,IAAI;KAChB,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,GAAG,KAAK,GAAG,CAAC;CACzE,CAAC,MAAM,CAAC,CAAC,CAAC;AAEX,sGAAsG;AACtG,KAAK,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAE5D,KAAK,eAAe,GAChB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,GAC7C,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,aAAa,CAAC,GAC1D,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,aAAa,CAAC,CAAC;AAoEhE;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY,EAAkC,aAAa,CAAC,eAAe,CAAC,CAAC;AAyB1F;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAY/D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,CAErE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAe/C;AAED,eAAO,MAAM,WAAW;;CAEvB,CAAC"}