@vonpay/checkout-cli 0.13.0 → 0.14.0

package/dist/utils/errors.js

@@ -1,179 +0,0 @@
-import chalk from "chalk";
-import { VonPayError, } from "@vonpay/checkout-node";
-import { emitCliError, jsonErrorsEnabled, printJsonError } from "./json-errors.js";
-/**
- * Secret shapes redacted from anything this CLI prints about an error.
- *
- * ⛔ Until 0.8.0 this matched `vp_sk_*` only, so a webhook signing secret, a
- * session-signing secret or a Stripe key inside an error message (a failed
- * config read, a proxy echoing a header) was printed in the clear — and CLI
- * output lands in CI logs and pasted support threads.
- *
- * One of the lists `tests/scripts/secret-shape-parity.test.mjs` holds to the
- * same definition of "a secret" as the SDK telemetry blocklists, the commit
- * gate and the scrubbers. Add a shape there and here together.
- *
- * Publishable keys (`vp_pk_*`, `pk_*`) are deliberately NOT redacted: they are
- * public by design (the commit gate does not block them either), and an error
- * naming the publishable key that was rejected is useful.
- *
- * `vp_sk_live_…` contains `sk_live_…`. The Vonpay pattern runs first so the
- * key is redacted as a Vonpay key; the output (`vp_sk_***`) is the same either
- * way, and the Stripe pattern does not match it again.
- */
-export const SECRET_PATTERNS = [
-    [/vp_sk_(?:test|live)_[A-Za-z0-9_-]+/g, "vp_sk_***"],
-    [/ss_(?:test|live)_[A-Za-z0-9_-]+/g, "ss_***"],
-    [/whsec_[A-Za-z0-9_-]+/g, "whsec_***"],
-    [/sk_(?:test|live)_[A-Za-z0-9_-]+/g, "sk_***"],
-    [/rk_(?:test|live)_[A-Za-z0-9_-]+/g, "rk_***"],
-];
-export function scrubSecrets(s) {
-    let out = s;
-    for (const [re, replacement] of SECRET_PATTERNS)
-        out = out.replace(re, replacement);
-    return out;
-}
-const str = (v) => (v === undefined || v === null ? null : String(v));
-const FIELD_PRINTERS = {
-    code: (e) => `Code: ${str(e.code)}`,
-    fix: (e) => `Fix:  ${str(e.fix)}`,
-    nextAction: (e) => (e.nextAction ? `Next action: ${str(e.nextAction)}` : null),
-    retryable: (e) => typeof e.retryable === "boolean"
-        ? `Retryable: ${e.retryable ? "yes" : "no — do not re-run this command as-is"}`
-        : null,
-    retryWithheld: (e) => e.retryWithheld === true
-        ? "Retry withheld: the outcome was unclear and no idempotency key was sent, so the CLI did not retry. Check whether it went through before running it again; with --idempotency-key, re-running the SAME key is safe."
-        : null,
-    captureOutcome: (e) => e.captureOutcome
-        ? `Capture outcome: ${str(e.captureOutcome)} — the provider accepted the capture but it could not be recorded, so money may have moved. Do NOT capture again; read the payment intent back first.`
-        : null,
-    voidOutcome: (e) => e.voidOutcome
-        ? `Void outcome: ${str(e.voidOutcome)} — the provider accepted the void but it could not be recorded. Do NOT void again or tell the buyer the hold was released until a read-back confirms it.`
-        : null,
-    currentStatus: (e) => (e.currentStatus ? `Current status: ${str(e.currentStatus)}` : null),
-    rejectReason: (e) => (e.rejectReason ? `Reject reason: ${str(e.rejectReason)}` : null),
-    paymentIntent: (e) => (e.paymentIntent ? `Payment intent: ${str(e.paymentIntent)}` : null),
-    // refund_target_is_duplicate: the SDK has already checked this is a
-    // transaction id (vp_tx_*), so it is safe to echo as a command.
-    refundInstead: (e) => e.refundInstead
-        ? `Refund instead: vonpay checkout refunds create --transaction ${str(e.refundInstead)}`
-        : null,
-    reason: (e) => (e.reason ? `Reason: ${str(e.reason)}` : null),
-    // An unrecognised expire reason reads "unknown"; show what the API sent.
-    rawReason: (e) => e.rawReason && e.rawReason !== e.reason ? `Reason as sent: ${str(e.rawReason)}` : null,
-    retryAfterSeconds: (e) => typeof e.retryAfterSeconds === "number"
-        ? `Retry after: ${e.retryAfterSeconds} seconds — then ask again`
-        : null,
-    session: (e) => (e.session ? `Session: ${JSON.stringify(e.session)}` : null),
-    llmHint: (e) => (e.llmHint ? `Hint: ${str(e.llmHint)}` : null),
-    docs: (e) => (e.docs ? `Docs: ${str(e.docs)}` : null),
-    status: (e) => (typeof e.status === "number" ? `HTTP status: ${e.status}` : null),
-    rateLimit: (e) => (e.rateLimit ? `Rate limit: ${JSON.stringify(e.rateLimit)}` : null),
-    requestId: (e) => (e.requestId ? `Request ID: ${str(e.requestId)}` : null),
-};
-/**
- * The structured fields, in print order. ONE list, read by both output
- * formats: the text lines below and the `--json` object. It is the key list of
- * `FIELD_PRINTERS`, whose mapped type makes `tsc` fail when `VonPayError` gains
- * a field the CLI does not handle — so the JSON cannot silently drop a field
- * the text prints, or the reverse.
- *
- * The MCP server's error envelope (`ERROR_ENVELOPE_FIELDS` in
- * `@vonpay/checkout-mcp`) is held to the same set by
- * `tests/integration/cli-mcp-error-field-parity.test.ts`. The two packages are
- * published separately, so neither imports the other.
- */
-export const ERROR_FIELDS = Object.keys(FIELD_PRINTERS);
-/** The detail lines printed under `Error: <message>`, already scrubbed. */
-function errorDetailLines(err) {
-    const source = err;
-    const lines = [];
-    for (const print of Object.values(FIELD_PRINTERS)) {
-        const line = print(source);
-        if (line !== null)
-            lines.push(`  ${scrubSecrets(line)}`);
-    }
-    return lines;
-}
-/** Scrub every string inside a JSON-able value (the `session` object, for one). */
-function scrubDeep(value) {
-    if (typeof value === "string")
-        return scrubSecrets(value);
-    if (Array.isArray(value))
-        return value.map(scrubDeep);
-    if (value !== null && typeof value === "object") {
-        const out = {};
-        for (const [k, v] of Object.entries(value))
-            out[k] = scrubDeep(v);
-        return out;
-    }
-    return value;
-}
-/**
- * The one JSON object printed for an error under `--json`.
- *
- * Every error has:
- *   - `error` — the message (always a string)
- *   - `code`  — the API error code, or `null` when no API response was
- *               involved (a network failure, or a problem the CLI caught
- *               before sending anything)
- * and an API error adds every structured field the SDK's error carries that is
- * not `undefined` — the same fields, under the same names, as the MCP server's
- * error envelope: `status`, `nextAction`, `retryable`, `retryWithheld`,
- * `captureOutcome`, `voidOutcome`, … Unlike the text output, `false` values are
- * kept: `"retryWithheld": false` is an answer.
- *
- * ⚠️ `code: null` on `payment-intents capture` / `void` / `create` or
- * `refunds create` does NOT mean nothing happened: a network failure leaves
- * the outcome unknown. Read the resource back before running it again.
- *
- * Nothing here can carry the API key, the idempotency key or the request body:
- * `VonPayError` holds none of them, and any other error contributes only its
- * message. Every string still goes through the same redaction as the text
- * output.
- */
-export function errorJson(err) {
-    if (err instanceof VonPayError) {
-        const out = { error: err.message };
-        const source = err;
-        for (const field of ERROR_FIELDS) {
-            const value = source[field];
-            if (value !== undefined)
-                out[field] = value;
-        }
-        return scrubDeep(out);
-    }
-    const message = err instanceof Error ? err.message : String(err);
-    return { error: scrubSecrets(message), code: null };
-}
-/**
- * Exit 1 on a problem the CLI caught itself, before calling the API (a live
- * key without --confirm-live, a bad flag value). In text mode `text` is
- * printed exactly as given; under `--json` the output is
- * `{"error": <message>, "code": null}`, redacted like everything else.
- */
-export function exitWithCliError(message, text) {
-    return emitCliError({ error: scrubSecrets(message), code: null }, text);
-}
-export function handleError(err) {
-    if (jsonErrorsEnabled()) {
-        printJsonError(errorJson(err));
-        process.exit(1);
-    }
-    if (err instanceof VonPayError) {
-        // Server-supplied text is scrubbed too: it is echoed to a terminal and
-        // from there into logs, and nothing guarantees it never quotes a secret.
-        console.error(chalk.red(`Error: ${scrubSecrets(err.message)}`));
-        for (const line of errorDetailLines(err))
-            console.error(chalk.dim(line));
-        process.exit(1);
-    }
-    const message = err instanceof Error ? err.message : String(err);
-    console.error(chalk.red(`Error: ${scrubSecrets(message)}`));
-    process.exit(1);
-}
-export const __testing__ = {
-    scrubSecrets,
-};
-//# sourceMappingURL=errors.js.map

package/dist/utils/errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,WAAW,GAGZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,eAAe,GAA6C;IACvE,CAAC,qCAAqC,EAAE,WAAW,CAAC;IACpD,CAAC,kCAAkC,EAAE,QAAQ,CAAC;IAC9C,CAAC,uBAAuB,EAAE,WAAW,CAAC;IACtC,CAAC,kCAAkC,EAAE,QAAQ,CAAC;IAC9C,CAAC,kCAAkC,EAAE,QAAQ,CAAC;CAC/C,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,IAAI,eAAe;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACpF,OAAO,GAAG,CAAC;AACb,CAAC;AAkCD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,cAAc,GAAkB;IACpC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CACf,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS;QAC9B,CAAC,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,uCAAuC,EAAE;QAC/E,CAAC,CAAC,IAAI;IACV,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CACnB,CAAC,CAAC,aAAa,KAAK,IAAI;QACtB,CAAC,CAAC,oNAAoN;QACtN,CAAC,CAAC,IAAI;IACV,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CACpB,CAAC,CAAC,cAAc;QACd,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,uJAAuJ;QAClM,CAAC,CAAC,IAAI;IACV,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CACjB,CAAC,CAAC,WAAW;QACX,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,0JAA0J;QAC/L,CAAC,CAAC,IAAI;IACV,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,oEAAoE;IACpE,gEAAgE;IAChE,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CACnB,CAAC,CAAC,aAAa;QACb,CAAC,CAAC,gEAAgE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE;QACxF,CAAC,CAAC,IAAI;IACV,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,yEAAyE;IACzE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;IACxF,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CACvB,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ;QACrC,CAAC,CAAC,gBAAgB,CAAC,CAAC,iBAAiB,2BAA2B;QAChE,CAAC,CAAC,IAAI;IACV,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;CAC3E,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAmC,CAAC;AAE1F,2EAA2E;AAC3E,SAAS,gBAAgB,CAAC,GAAgB;IACxC,MAAM,MAAM,GAAG,GAAyC,CAAC;IACzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAA4B,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,GAAyC,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC,GAAG,CAA4B,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAY;IAC5D,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACxB,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,uEAAuE;QACvE,yEAAyE;QACzE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;CACb,CAAC"}

package/dist/utils/forward-to.d.ts

@@ -1,38 +0,0 @@
-/**
- * URL validation for `vonpay checkout listen --forward-to` and
- * `vonpay checkout trigger --url` (same policy since 0.8.1; the flag names in
- * messages are passed in).
- *
- * Default posture: loopback-only. Refuses any URL whose hostname is not
- * one of the IPv4/IPv6 loopback aliases. This protects against the
- * "I typed the prod URL by mistake" class of incident, where a dev
- * starts forwarding production webhook attempts at their staging
- * endpoint or a public colleague's URL.
- *
- * The opt-in --forward-to-tunnel flag allows non-loopback hosts for
- * ngrok / Cloudflare Tunnel workflows. When set, only `https://` is
- * additionally rejected for non-loopback — http on a public host is
- * a stronger anti-pattern than tunneled https.
- *
- * Scheme: http and https accepted on loopback; non-loopback requires
- * the tunnel flag.
- */
-export type ForwardToVerdict = {
-    ok: true;
-    url: URL;
-    isLoopback: boolean;
-    warning?: string;
-} | {
-    ok: false;
-    reason: string;
-};
-/**
- * Pure validator. No I/O. Caller decides what to do with the verdict
- * (the CLI surfaces `reason` to stderr and exits non-zero).
- */
-export declare function validateForwardTo(raw: string, opts: {
-    allowTunnel: boolean;
-    flag?: string;
-    tunnelFlag?: string;
-}): ForwardToVerdict;
-//# sourceMappingURL=forward-to.d.ts.map

package/dist/utils/forward-to.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"forward-to.d.ts","sourceRoot":"","sources":["../../src/utils/forward-to.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAmBH,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACjE,gBAAgB,CA+ClB"}

package/dist/utils/forward-to.js

@@ -1,92 +0,0 @@
-/**
- * URL validation for `vonpay checkout listen --forward-to` and
- * `vonpay checkout trigger --url` (same policy since 0.8.1; the flag names in
- * messages are passed in).
- *
- * Default posture: loopback-only. Refuses any URL whose hostname is not
- * one of the IPv4/IPv6 loopback aliases. This protects against the
- * "I typed the prod URL by mistake" class of incident, where a dev
- * starts forwarding production webhook attempts at their staging
- * endpoint or a public colleague's URL.
- *
- * The opt-in --forward-to-tunnel flag allows non-loopback hosts for
- * ngrok / Cloudflare Tunnel workflows. When set, only `https://` is
- * additionally rejected for non-loopback — http on a public host is
- * a stronger anti-pattern than tunneled https.
- *
- * Scheme: http and https accepted on loopback; non-loopback requires
- * the tunnel flag.
- */
-const LOOPBACK_HOSTS = new Set([
-    "localhost",
-    "127.0.0.1",
-    "0.0.0.0", // kernel-wildcard often routes to loopback on Linux / macOS dev hosts
-    "::1",
-    // URL.hostname surrounds IPv6 with brackets, but the bracket-stripping
-    // happens before this set is consulted (see normalizeHost). Both forms
-    // listed for defensiveness.
-    "[::1]",
-    // IPv6-mapped IPv4 loopback. Node's URL parser normalizes
-    // `[::ffff:127.0.0.1]` to either form depending on version — both
-    // are functionally loopback so we list every variant we have
-    // observed in the wild.
-    "::ffff:127.0.0.1",
-    "::ffff:7f00:1",
-]);
-/**
- * Pure validator. No I/O. Caller decides what to do with the verdict
- * (the CLI surfaces `reason` to stderr and exits non-zero).
- */
-export function validateForwardTo(raw, opts) {
-    const flag = opts.flag ?? "--forward-to";
-    const tunnelFlag = opts.tunnelFlag ?? "--forward-to-tunnel";
-    if (typeof raw !== "string" || raw.length === 0) {
-        return { ok: false, reason: `${flag} URL is required` };
-    }
-    let url;
-    try {
-        url = new URL(raw);
-    }
-    catch {
-        return {
-            ok: false,
-            reason: `${flag} is not a parseable URL: ${truncate(raw)}`,
-        };
-    }
-    if (url.protocol !== "http:" && url.protocol !== "https:") {
-        return {
-            ok: false,
-            reason: `${flag} scheme must be http or https; got ${url.protocol}`,
-        };
-    }
-    const host = normalizeHost(url.hostname);
-    const isLoopback = LOOPBACK_HOSTS.has(host);
-    if (!isLoopback && !opts.allowTunnel) {
-        return {
-            ok: false,
-            reason: `${flag} refuses non-loopback hosts by default (got ${url.hostname}). ` +
-                `Re-run with ${tunnelFlag} if forwarding through ngrok / Cloudflare Tunnel / etc.`,
-        };
-    }
-    // `0.0.0.0` is treated as loopback for dev convenience, but it's a
-    // bind-wildcard, not a guaranteed destination — in some container /
-    // network configs an outbound connection to 0.0.0.0 routes off-host.
-    // Accept it (non-breaking) but warn so a dev who meant "localhost"
-    // isn't silently forwarding off-loopback.
-    const warning = host === "0.0.0.0"
-        ? "forwarding to 0.0.0.0 — that's a bind-wildcard, not a guaranteed loopback destination (it can route off-host in some container/network setups). Prefer 127.0.0.1 or localhost if you meant your local machine."
-        : undefined;
-    return { ok: true, url, isLoopback, warning };
-}
-function normalizeHost(hostname) {
-    // URL.hostname returns IPv6 addresses unwrapped (no brackets), but
-    // dual-coverage doesn't hurt.
-    if (hostname.startsWith("[") && hostname.endsWith("]")) {
-        return hostname.slice(1, -1);
-    }
-    return hostname.toLowerCase();
-}
-function truncate(s) {
-    return s.length <= 120 ? s : `${s.slice(0, 117)}...`;
-}
-//# sourceMappingURL=forward-to.js.map

package/dist/utils/forward-to.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"forward-to.js","sourceRoot":"","sources":["../../src/utils/forward-to.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,WAAW;IACX,SAAS,EAAE,sEAAsE;IACjF,KAAK;IACL,uEAAuE;IACvE,uEAAuE;IACvE,4BAA4B;IAC5B,OAAO;IACP,0DAA0D;IAC1D,kEAAkE;IAClE,6DAA6D;IAC7D,wBAAwB;IACxB,kBAAkB;IAClB,eAAe;CAChB,CAAC,CAAC;AAMH;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,IAAkE;IAElE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,qBAAqB,CAAC;IAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,IAAI,4BAA4B,QAAQ,CAAC,GAAG,CAAC,EAAE;SAC3D,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,IAAI,sCAAsC,GAAG,CAAC,QAAQ,EAAE;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE5C,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,GAAG,IAAI,+CAA+C,GAAG,CAAC,QAAQ,KAAK;gBACvE,eAAe,UAAU,yDAAyD;SACrF,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,0CAA0C;IAC1C,MAAM,OAAO,GACX,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,gNAAgN;QAClN,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,mEAAmE;IACnE,8BAA8B;IAC9B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;AACvD,CAAC"}

package/dist/utils/json-errors.d.ts

@@ -1,16 +0,0 @@
-export declare function setJsonErrors(enabled: boolean): void;
-export declare function jsonErrorsEnabled(): boolean;
-/**
- * One error, as one JSON line, on stderr. stdout is left alone: under
- * `--json` it carries the command's RESULT, and a script reading stdout must
- * never be handed an error it could parse as a result. The exit code (1) is
- * what says the command failed.
- */
-export declare function printJsonError(obj: Record<string, unknown>): void;
-/**
- * Print an error the CLI caught itself and exit 1: `json` under `--json`,
- * otherwise `text` exactly as given. Callers pass already-redacted values;
- * `exitWithCliError` in `errors.ts` does that for a message.
- */
-export declare function emitCliError(json: Record<string, unknown>, text: string): never;
-//# sourceMappingURL=json-errors.d.ts.map

package/dist/utils/json-errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"json-errors.d.ts","sourceRoot":"","sources":["../../src/utils/json-errors.ts"],"names":[],"mappings":"AAcA,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAEpD;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAEjE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,CAI/E"}

package/dist/utils/json-errors.js

@@ -1,41 +0,0 @@
-/**
- * Whether errors in this run are printed as JSON, and the one place they are
- * written. Deliberately a leaf module (no imports) so the lowest-level code —
- * `config.ts`'s `requireApiKey` — can use it without pulling in the SDK. The
- * error formatting itself lives in `errors.ts`.
- *
- * Set once per run, before the command's action, from that command's own
- * `--json` flag — by the `preAction` hook in `commands/checkout.ts`. A process
- * runs one command, so a process-wide setting is the honest scope, and it
- * reaches the checks that fail before any request is sent (no key, the
- * live-key gate) without threading the flag through each of them.
- */
-let jsonErrors = false;
-export function setJsonErrors(enabled) {
-    jsonErrors = enabled;
-}
-export function jsonErrorsEnabled() {
-    return jsonErrors;
-}
-/**
- * One error, as one JSON line, on stderr. stdout is left alone: under
- * `--json` it carries the command's RESULT, and a script reading stdout must
- * never be handed an error it could parse as a result. The exit code (1) is
- * what says the command failed.
- */
-export function printJsonError(obj) {
-    console.error(JSON.stringify(obj));
-}
-/**
- * Print an error the CLI caught itself and exit 1: `json` under `--json`,
- * otherwise `text` exactly as given. Callers pass already-redacted values;
- * `exitWithCliError` in `errors.ts` does that for a message.
- */
-export function emitCliError(json, text) {
-    if (jsonErrors)
-        printJsonError(json);
-    else
-        console.error(text);
-    return process.exit(1);
-}
-//# sourceMappingURL=json-errors.js.map

package/dist/utils/json-errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"json-errors.js","sourceRoot":"","sources":["../../src/utils/json-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,UAAU,GAAG,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAA4B;IACzD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAA6B,EAAE,IAAY;IACtE,IAAI,UAAU;QAAE,cAAc,CAAC,IAAI,CAAC,CAAC;;QAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC"}

package/dist/utils/listen-forward.d.ts

@@ -1,49 +0,0 @@
-import type { ForwardOutcome } from "./listen-output.js";
-/**
- * Shadow-forward a webhook event to a local URL.
- *
- * The CLI receives a delivery-attempt TRANSCRIPT over SSE — not the
- * payload itself. To replay the same delivery against a local URL,
- * the CLI:
- *
- *   1. Fetches the full event record via GET /v1/webhook_events/:id
- *      (the public webhook-event read endpoint)
- *   2. Signs it with the v1 webhook contract — a single
- *      `x-vonpay-signature: t=<unix-seconds>,v1=<hex>` header whose
- *      HMAC-SHA256 is computed over `${t}.${body}` (the same shape the
- *      SDK's `webhooks.constructEvent` verifies). For this local dev loop
- *      the signing secret is your API key, so verify with
- *      `webhooks.constructEvent(rawBody, signatureHeader, yourApiKey)`.
- *   3. POSTs to the local URL with that single header, matching the live
- *      delivery shape. The `t` is stamped HERE, at forward time — see the
- *      `forwardPayload` body for the fresh-timestamp rationale.
- *
- * Bounded by a per-forward timeout (default 5s) and never retries —
- * shadow-forward is best-effort; if the local URL is down, the
- * transcript line shows the failure and the dev moves on.
- *
- * This re-delivers from the SSE delivery transcript, which differs from
- * Stripe CLI's `stripe listen --forward-to` pre-empt model.
- */
-interface ForwardOptions {
-    /** Local URL to POST the payload to. */
-    url: URL;
-    /** Secret used to key the v1 HMAC. The listen stream exposes no
-     *  per-endpoint signing secret, so for this local forward loop the API
-     *  key (vp_sk_*) is used as a stand-in — verify the forwarded delivery
-     *  with `constructEvent(rawBody, signatureHeader, sameKey)`. Production
-     *  deliveries are keyed by the per-endpoint signing secret (whsec_…). */
-    signingSecret: string;
-    /** Per-forward timeout. Default 5_000. */
-    timeoutMs?: number;
-    /** AbortSignal for graceful shutdown. */
-    signal: AbortSignal;
-}
-/**
- * Sign + POST a JSON payload to the local URL. Returns an outcome
- * shape that the output formatters render — never throws (errors
- * surface via `outcome.error`).
- */
-export declare function forwardPayload(payload: Record<string, unknown>, opts: ForwardOptions): Promise<ForwardOutcome>;
-export {};
-//# sourceMappingURL=listen-forward.d.ts.map

package/dist/utils/listen-forward.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"listen-forward.d.ts","sourceRoot":"","sources":["../../src/utils/listen-forward.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,UAAU,cAAc;IACtB,wCAAwC;IACxC,GAAG,EAAE,GAAG,CAAC;IACT;;;;6EAIyE;IACzE,aAAa,EAAE,MAAM,CAAC;IACtB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,cAAc,CAAC,CAsEzB"}

package/dist/utils/listen-forward.js

@@ -1,113 +0,0 @@
-import { createHmac } from "node:crypto";
-/**
- * Sign + POST a JSON payload to the local URL. Returns an outcome
- * shape that the output formatters render — never throws (errors
- * surface via `outcome.error`).
- */
-export async function forwardPayload(payload, opts) {
-    const body = JSON.stringify(payload);
-    // Stamp `t` at the moment we forward — NOT the server's original
-    // delivery-attempt time. The CLI is the *re-sender* for this local
-    // delivery: the dev's handler calls `webhooks.constructEvent`, which
-    // rejects any `t` outside the freshness window (>5 min old / >30 sec
-    // future). The server's original timestamp (carried on the SSE
-    // `webhook.attempt` frame) is routinely minutes old — retries,
-    // processing lag, a transcript the dev scrolled back through — so
-    // replaying it would trip the window. A fresh `t` here matches Stripe
-    // CLI's re-sign posture. Unlike the old bare-hex shape, `t` IS folded
-    // into the HMAC per the v1 contract (`${t}.${body}`).
-    const t = Math.floor(Date.now() / 1000);
-    // v1 signature contract (https://docs.vonpay.com/integration/webhook-verification):
-    // ONE header `x-vonpay-signature: t=<unix-seconds>,v1=<hex>`, HMAC-SHA256
-    // over `${t}.${body}`. There is NO separate timestamp header. Rotation
-    // (multiple `v1=` entries) does not apply to this synthetic local loop —
-    // we sign with a single secret (the API key). When the server ships a
-    // per-subscription signing secret on the SSE `webhook.attempt` frame,
-    // sign with that here instead of the API key. (The 0.0.0.0 loopback
-    // warning already shipped in forward-to.ts.)
-    const v1 = createHmac("sha256", opts.signingSecret)
-        .update(`${t}.${body}`)
-        .digest("hex");
-    const signatureHeader = `t=${t},v1=${v1}`;
-    const timeoutMs = opts.timeoutMs ?? 5_000;
-    const localController = new AbortController();
-    const timeoutId = setTimeout(() => localController.abort(), timeoutMs);
-    const combinedSignal = anySignal([opts.signal, localController.signal]);
-    const start = Date.now();
-    try {
-        const res = await fetch(opts.url.toString(), {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json",
-                "x-vonpay-signature": signatureHeader,
-                "User-Agent": "vonpay-cli-listen",
-            },
-            body,
-            signal: combinedSignal,
-        });
-        // Drain response body so the connection can be reused — best practice
-        // for repeated POSTs to the same local endpoint.
-        try {
-            await res.arrayBuffer();
-        }
-        catch {
-            // ignore drain errors; not relevant to forward semantics
-        }
-        return {
-            attempted: true,
-            status: res.status,
-            latencyMs: Date.now() - start,
-            error: null,
-        };
-    }
-    catch (err) {
-        if (opts.signal.aborted) {
-            return { attempted: true, status: null, latencyMs: null, error: "aborted" };
-        }
-        if (localController.signal.aborted) {
-            return { attempted: true, status: null, latencyMs: null, error: `timeout after ${timeoutMs}ms` };
-        }
-        const message = err instanceof Error ? err.message : String(err);
-        return { attempted: true, status: null, latencyMs: null, error: message };
-    }
-    finally {
-        clearTimeout(timeoutId);
-    }
-}
-/**
- * Combine multiple AbortSignals into one. The returned signal is
- * aborted when any input signal aborts. Polyfill for `AbortSignal.any`
- * which is Node 20.5+ only — guard for older 20.x deployments.
- *
- * The polyfill tracks every listener it registers and removes them all
- * once any input fires — without this, the long-lived parent
- * `opts.signal` accumulates one orphaned listener per forward call,
- * which on a busy listen stream is a measurable leak.
- */
-function anySignal(signals) {
-    if (typeof AbortSignal.any === "function") {
-        return AbortSignal.any(signals);
-    }
-    const controller = new AbortController();
-    const tracked = [];
-    const onAbort = () => {
-        for (const sig of tracked) {
-            sig.removeEventListener("abort", onAbort);
-        }
-        controller.abort();
-    };
-    for (const signal of signals) {
-        if (signal.aborted) {
-            controller.abort();
-            // Remove already-added listeners — none yet, but defensive.
-            for (const sig of tracked) {
-                sig.removeEventListener("abort", onAbort);
-            }
-            return controller.signal;
-        }
-        signal.addEventListener("abort", onAbort);
-        tracked.push(signal);
-    }
-    return controller.signal;
-}
-//# sourceMappingURL=listen-forward.js.map

package/dist/utils/listen-forward.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"listen-forward.js","sourceRoot":"","sources":["../../src/utils/listen-forward.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6CzC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgC,EAChC,IAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAErC,iEAAiE;IACjE,mEAAmE;IACnE,qEAAqE;IACrE,qEAAqE;IACrE,+DAA+D;IAC/D,+DAA+D;IAC/D,kEAAkE;IAClE,sEAAsE;IACtE,sEAAsE;IACtE,sDAAsD;IACtD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAExC,oFAAoF;IACpF,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,oEAAoE;IACpE,6CAA6C;IAC7C,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC;SAChD,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IACvE,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAExE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,oBAAoB,EAAE,eAAe;gBACrC,YAAY,EAAE,mBAAmB;aAClC;YACD,IAAI;YACJ,MAAM,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,sEAAsE;QACtE,iDAAiD;QACjD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;QACD,OAAO;YACL,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC7B,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,SAAS,IAAI,EAAE,CAAC;QACnG,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5E,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,SAAS,CAAC,OAAsB;IACvC,IAAI,OAAQ,WAA4C,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC5E,OAAQ,WAAqE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,GAAG,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,4DAA4D;YAC5D,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,GAAG,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,UAAU,CAAC,MAAM,CAAC;QAC3B,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC"}

package/dist/utils/listen-output.d.ts

@@ -1,52 +0,0 @@
-/**
- * Output formatters for `vonpay checkout listen`.
- *
- * Two modes:
- *   - "human" (default) — colored transcript, one line per attempt.
- *     Optimized for the dev sitting at a terminal watching events
- *     flow in real time.
- *   - "json" — one JSON object per line on stdout. Optimized for
- *     piping to `jq`, `grep`, or log aggregators.
- *
- * Lifecycle messages (connecting, reconnecting, etc.) ALWAYS go to
- * stderr in human mode so stdout stays parseable in `--json` mode
- * even when interleaved with reconnects.
- */
-export type OutputMode = "human" | "json";
-/**
- * Wire shape of the SSE `webhook.attempt` payload. Mirrors
- * vonpay-checkout's WebhookListenAttempt (snake_case on the wire).
- *
- * Duplicated here rather than importing from @vonpay/checkout-node
- * because the SDK does not currently export an SSE-event type — the
- * listen surface is CLI-only. If the SDK adds a streaming consumer in
- * a future minor, this type should move to the SDK and be re-imported.
- */
-export interface WebhookAttemptPayload {
-    type: "webhook.attempt";
-    subscription_id: string;
-    event_id: string;
-    event_type: string;
-    attempt: number;
-    succeeded: boolean;
-    response_status: number | null;
-    latency_ms: number;
-    timestamp: string;
-    livemode: boolean;
-}
-export interface ForwardOutcome {
-    attempted: boolean;
-    /** Local-URL response status, or null when no attempt was made (no --forward-to). */
-    status: number | null;
-    /** Latency ms of the local-URL POST. */
-    latencyMs: number | null;
-    /** Error message if the forward attempt failed at the network layer. */
-    error: string | null;
-}
-export declare function formatAttemptHuman(payload: WebhookAttemptPayload, forward: ForwardOutcome | null): string;
-export declare function formatAttemptJson(payload: WebhookAttemptPayload, forward: ForwardOutcome | null): string;
-/** Lifecycle line for human mode (stderr). */
-export declare function formatLifecycleHuman(message: string, kind: "info" | "warn" | "error"): string;
-/** Lifecycle line for JSON mode (stderr). */
-export declare function formatLifecycleJson(kind: "connecting" | "connected" | "disconnected" | "auth_failed" | "fatal" | "ready" | "shutdown" | "warning", extra?: Record<string, unknown>): string;
-//# sourceMappingURL=listen-output.d.ts.map

package/dist/utils/listen-output.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"listen-output.d.ts","sourceRoot":"","sources":["../../src/utils/listen-output.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AAEH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,iBAAiB,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,qFAAqF;IACrF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wCAAwC;IACxC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wEAAwE;IACxE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,cAAc,GAAG,IAAI,GAC7B,MAAM,CAwBR;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,cAAc,GAAG,IAAI,GAC7B,MAAM,CAqBR;AAED,8CAA8C;AAC9C,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAQ7F;AAED,6CAA6C;AAC7C,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,cAAc,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,EAC9G,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAClC,MAAM,CAER"}