better-ship 0.16.0 → 0.18.0

package/dist/sentry/server.js

@@ -20,15 +20,15 @@ function createSentryOptions(options) {
 }
 /** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */
 function createSentryLoggerErrorHook() {
-	return ({ error, distinctId, context }) => {
-		if (distinctId !== void 0) {
+	return ({ error, userId, attributes }) => {
+		if (userId !== void 0) {
 			Sentry.captureException(error, {
-				extra: context,
-				user: { id: distinctId }
+				extra: attributes,
+				user: { id: userId }
 			});
 			return;
 		}
-		Sentry.captureException(error, { extra: context });
+		Sentry.captureException(error, { extra: attributes });
 	};
 }
 /** Identity and scope adapter from Typist and Porte; call inside Sentry's instrumented runtime. */

package/dist/sentry/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","names":[],"sources":["../../src/infrastructure/sentry/server.ts"],"sourcesContent":["import * as Sentry from '@sentry/cloudflare'\n\nimport type { ObservabilityScope, ObservabilityService, ObservabilityUser } from '@/application'\nimport type { LoggerErrorHook } from '@/core'\n\n/** Application-owned deployment settings with the full Cloudflare SDK option contract. */\nexport type SentryServerOptions = Sentry.CloudflareOptions & {\n  readonly dsn: string\n  readonly environment: string\n  readonly enabled: boolean\n}\n\n/** Options for Workers, Durable Objects, and Workflows, ported from Typist and Porte. */\nexport function createSentryOptions(options: SentryServerOptions): Sentry.CloudflareOptions {\n  return {\n    enableLogs: true,\n    ...options,\n    dataCollection: {\n      userInfo: false,\n      httpBodies: [],\n      ...options.dataCollection,\n      genAI: { inputs: false, outputs: false, ...options.dataCollection?.genAI },\n    },\n  }\n}\n\n/** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */\nexport function createSentryLoggerErrorHook(): LoggerErrorHook {\n  return ({ error, distinctId, context }) => {\n    if (distinctId !== undefined) {\n      Sentry.captureException(error, { extra: context, user: { id: distinctId } })\n      return\n    }\n    Sentry.captureException(error, { extra: context })\n  }\n}\n\n/** Identity and scope adapter from Typist and Porte; call inside Sentry's instrumented runtime. */\nexport class SentryObservabilityService implements ObservabilityService {\n  /** Attribute subsequent reports in the current isolation scope. */\n  setUser(user: ObservabilityUser): void {\n    Sentry.setUser(user)\n  }\n\n  /** Await work in a separate scope for each queue message or concurrent operation. */\n  async withIsolationScope<T>(callback: (scope: ObservabilityScope) => T | Promise<T>): Promise<T> {\n    return await Sentry.withIsolationScope(callback)\n  }\n}\n\nexport { Sentry }\n"],"mappings":";;;;AAaA,SAAgB,oBAAoB,SAAwD;CAC1F,OAAO;EACL,YAAY;EACZ,GAAG;EACH,gBAAgB;GACd,UAAU;GACV,YAAY,CAAC;GACb,GAAG,QAAQ;GACX,OAAO;IAAE,QAAQ;IAAO,SAAS;IAAO,GAAG,QAAQ,gBAAgB;GAAM;EAC3E;CACF;AACF;;AAGA,SAAgB,8BAA+C;CAC7D,QAAQ,EAAE,OAAO,YAAY,cAAc;EACzC,IAAI,eAAe,QAAW;GAC5B,OAAO,iBAAiB,OAAO;IAAE,OAAO;IAAS,MAAM,EAAE,IAAI,WAAW;GAAE,CAAC;GAC3E;EACF;EACA,OAAO,iBAAiB,OAAO,EAAE,OAAO,QAAQ,CAAC;CACnD;AACF;;AAGA,IAAa,6BAAb,MAAwE;;CAEtE,QAAQ,MAA+B;EACrC,OAAO,QAAQ,IAAI;CACrB;;CAGA,MAAM,mBAAsB,UAAqE;EAC/F,OAAO,MAAM,OAAO,mBAAmB,QAAQ;CACjD;AACF"}
+{"version":3,"file":"server.js","names":[],"sources":["../../src/infrastructure/sentry/server.ts"],"sourcesContent":["import * as Sentry from '@sentry/cloudflare'\n\nimport type { ObservabilityScope, ObservabilityService, ObservabilityUser } from '@/application'\nimport type { LoggerErrorHook } from '@/core'\n\n/** Application-owned deployment settings with the full Cloudflare SDK option contract. */\nexport type SentryServerOptions = Sentry.CloudflareOptions & {\n  readonly dsn: string\n  readonly environment: string\n  readonly enabled: boolean\n}\n\n/** Options for Workers, Durable Objects, and Workflows, ported from Typist and Porte. */\nexport function createSentryOptions(options: SentryServerOptions): Sentry.CloudflareOptions {\n  return {\n    enableLogs: true,\n    ...options,\n    dataCollection: {\n      userInfo: false,\n      httpBodies: [],\n      ...options.dataCollection,\n      genAI: { inputs: false, outputs: false, ...options.dataCollection?.genAI },\n    },\n  }\n}\n\n/** Register with setLoggerErrorHook once at startup; an explicit user applies only to this report. */\nexport function createSentryLoggerErrorHook(): LoggerErrorHook {\n  return ({ error, userId, attributes }) => {\n    if (userId !== undefined) {\n      Sentry.captureException(error, { extra: attributes, user: { id: userId } })\n      return\n    }\n    Sentry.captureException(error, { extra: attributes })\n  }\n}\n\n/** Identity and scope adapter from Typist and Porte; call inside Sentry's instrumented runtime. */\nexport class SentryObservabilityService implements ObservabilityService {\n  /** Attribute subsequent reports in the current isolation scope. */\n  setUser(user: ObservabilityUser): void {\n    Sentry.setUser(user)\n  }\n\n  /** Await work in a separate scope for each queue message or concurrent operation. */\n  async withIsolationScope<T>(callback: (scope: ObservabilityScope) => T | Promise<T>): Promise<T> {\n    return await Sentry.withIsolationScope(callback)\n  }\n}\n\nexport { Sentry }\n"],"mappings":";;;;AAaA,SAAgB,oBAAoB,SAAwD;CAC1F,OAAO;EACL,YAAY;EACZ,GAAG;EACH,gBAAgB;GACd,UAAU;GACV,YAAY,CAAC;GACb,GAAG,QAAQ;GACX,OAAO;IAAE,QAAQ;IAAO,SAAS;IAAO,GAAG,QAAQ,gBAAgB;GAAM;EAC3E;CACF;AACF;;AAGA,SAAgB,8BAA+C;CAC7D,QAAQ,EAAE,OAAO,QAAQ,iBAAiB;EACxC,IAAI,WAAW,QAAW;GACxB,OAAO,iBAAiB,OAAO;IAAE,OAAO;IAAY,MAAM,EAAE,IAAI,OAAO;GAAE,CAAC;GAC1E;EACF;EACA,OAAO,iBAAiB,OAAO,EAAE,OAAO,WAAW,CAAC;CACtD;AACF;;AAGA,IAAa,6BAAb,MAAwE;;CAEtE,QAAQ,MAA+B;EACrC,OAAO,QAAQ,IAAI;CACrB;;CAGA,MAAM,mBAAsB,UAAqE;EAC/F,OAAO,MAAM,OAAO,mBAAmB,QAAQ;CACjD;AACF"}

package/dist/stripe/payment-service.d.ts

@@ -0,0 +1,52 @@
+import Stripe from "stripe";
+//#region src/infrastructure/stripe/payment-service.d.ts
+/** Supply the same key and parameters when repeating one durable payment attempt. */
+export type PaymentRequestOptions = Stripe.RequestOptions & Required<Pick<Stripe.RequestOptions, 'idempotencyKey'>>;
+/** Native Checkout parameters; the service selects payment or setup mode. */
+export type CheckoutInput = Omit<Stripe.Checkout.SessionCreateParams, 'mode'>;
+/** A saved customer method; the service confirms the payment off-session. */
+export type SavedMethodCharge = Omit<Stripe.PaymentIntentCreateParams, 'confirm' | 'off_session'> & Required<Pick<Stripe.PaymentIntentCreateParams, 'customer' | 'payment_method'>>;
+/** Native customer response, including Stripe request metadata. */
+export type CustomerResult = Awaited<ReturnType<Stripe['customers']['create']>>;
+/** Native Checkout response. Its URL can be null; this does not confirm payment. */
+export type CheckoutResult = Awaited<ReturnType<Stripe['checkout']['sessions']['create']>>;
+/** Native PaymentIntent response. Applications decide what each status permits. */
+export type PaymentResult = Awaited<ReturnType<Stripe['paymentIntents']['create']>>;
+/**
+ * Stripe payment operations, with native types and stable keys for mutations.
+ * Rejects with PaymentServiceError or native StripeCardError; unexpected defects propagate.
+ */
+export interface IPaymentService {
+  /** Create a customer; the application owns persistence and reuse of the customer link. */
+  createCustomer(input: Stripe.CustomerCreateParams, options: PaymentRequestOptions): Promise<CustomerResult>;
+  /** Create one-time payment checkout; application fulfillment requires verified payment confirmation. */
+  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Create checkout in setup mode. The application records consent and verifies the saved method's owner. */
+  setupPaymentMethod(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Confirm a saved method off-session. Native card errors can require customer authentication. */
+  chargeSavedMethod(input: SavedMethodCharge, options: PaymentRequestOptions): Promise<PaymentResult>;
+  /** Retrieve an existing payment without starting another payment attempt. */
+  getPayment(paymentId: string, params?: Stripe.PaymentIntentRetrieveParams, options?: Stripe.RequestOptions): Promise<PaymentResult>;
+}
+/**
+ * Ported from Typist's StripeClient request boundary; the native SDK now owns retries.
+ * Each request defaults to two SDK retries. Native request options can override retries and timeout.
+ */
+export declare class StripePaymentService implements IPaymentService {
+  private readonly stripe;
+  /** Inject a native SDK instance; its transport, credentials, and API version remain caller-owned. */
+  constructor(stripe: Stripe);
+  /** Create a customer with a stable application key and preserve the native response. */
+  createCustomer(input: Stripe.CustomerCreateParams, options: PaymentRequestOptions): Promise<CustomerResult>;
+  /** Force payment mode after caller parameters; return the native Checkout Session. */
+  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Force setup mode after caller parameters; this operation does not charge the customer. */
+  setupPaymentMethod(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>;
+  /** Force confirmation and off-session use; preserve native card failures for application handling. */
+  chargeSavedMethod(input: SavedMethodCharge, options: PaymentRequestOptions): Promise<PaymentResult>;
+  /** Preserve every native status and response field when reconciling an existing payment. */
+  getPayment(paymentId: string, params?: Stripe.PaymentIntentRetrieveParams, options?: Stripe.RequestOptions): Promise<PaymentResult>;
+  private request;
+}
+//#endregion
+//# sourceMappingURL=payment-service.d.ts.map

package/dist/stripe/payment-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service.d.ts","names":[],"sources":["../../src/infrastructure/stripe/payment-service.ts"],"mappings":";;;YAKY,wBAAwB,OAAO,iBACzC,SAAS,KAAK,OAAO;;YAGX,gBAAgB,KAAK,OAAO,SAAS;;YAGrC,oBAAoB,KAAK,OAAO,wDAC1C,SAAS,KAAK,OAAO;;YAGX,iBAAiB,QAAQ,WAAW;;YAGpC,iBAAiB,QAAQ,WAAW;;YAGpC,gBAAgB,QAAQ,WAAW;;;;;iBAM9B;;EAEf,eACE,OAAO,OAAO,sBACd,SAAS,wBACR,QAAQ;;EAEX,eAAe,OAAO,eAAe,SAAS,wBAAwB,QAAQ;;EAE9E,mBAAmB,OAAO,eAAe,SAAS,wBAAwB,QAAQ;;EAElF,kBACE,OAAO,mBACP,SAAS,wBACR,QAAQ;;EAEX,WACE,mBACA,SAAS,OAAO,6BAChB,UAAU,OAAO,iBAChB,QAAQ;;;;;;qBAOA,gCAAgC;mBAEd;;EAA7B,YAA6B,QAAQ;;EAGrC,eACE,OAAO,OAAO,sBACd,SAAS,wBACR,QAAQ;;EAOX,eAAe,OAAO,eAAe,SAAS,wBAAwB,QAAQ;;EAU9E,mBACE,OAAO,eACP,SAAS,wBACR,QAAQ;;EAUX,kBACE,OAAO,mBACP,SAAS,wBACR,QAAQ;;EAUX,WACE,mBACA,SAAS,OAAO,6BAChB,UAAU,OAAO,iBAChB,QAAQ;UAMG"}

package/dist/stripe/payment-service.error.d.ts

@@ -0,0 +1,13 @@
+import { Xt as AppError, Zt as FailureClassification } from "../index-DUFS0SJ_.js";
+import Stripe from "stripe";
+//#region src/infrastructure/stripe/payment-service.error.d.ts
+/** A final Stripe request failure. The caller logs once; native details remain in cause. */
+export declare class PaymentServiceError extends AppError {
+  readonly operation: string;
+  readonly _tag = "PaymentServiceError";
+  readonly classification: FailureClassification;
+  /** Classify the final SDK error without scheduling another payment attempt. */
+  constructor(operation: string, cause: Stripe.errors.StripeError);
+}
+//#endregion
+//# sourceMappingURL=payment-service.error.d.ts.map

package/dist/stripe/payment-service.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service.error.d.ts","names":[],"sources":["../../src/infrastructure/stripe/payment-service.error.ts"],"mappings":";;;;qBAKa,4BAA4B;WAM5B;WALF;WACA,gBAAgB;;EAGzB,YACW,mBACT,OAAO,OAAO,OAAO"}

package/dist/stripe/payment-service.error.js

@@ -0,0 +1,30 @@
+import { nt as AppError } from "../core-UUW2unJd.js";
+import Stripe from "stripe";
+
+//#region src/infrastructure/stripe/payment-service.error.ts
+/** A final Stripe request failure. The caller logs once; native details remain in cause. */
+var PaymentServiceError = class extends AppError {
+	operation;
+	_tag = "PaymentServiceError";
+	classification;
+	/** Classify the final SDK error without scheduling another payment attempt. */
+	constructor(operation, cause) {
+		super(`Stripe request failed: ${operation}`, { cause });
+		this.operation = operation;
+		this.classification = classifyStripeError(cause);
+	}
+};
+function classifyStripeError(error) {
+	if (error.headers?.["stripe-should-retry"] === "false") return "terminal";
+	const status = error.statusCode;
+	if (status !== void 0 && status >= 400 && status < 500 && status !== 409 && status !== 429) return "terminal";
+	if (error instanceof Stripe.errors.StripeAuthenticationError || error instanceof Stripe.errors.StripePermissionError || error instanceof Stripe.errors.StripeInvalidRequestError || error instanceof Stripe.errors.StripeIdempotencyError) return "terminal";
+	if (error.headers?.["stripe-should-retry"] === "true") return "transient";
+	if (status === 409 || status === 429 || status !== void 0 && status >= 500) return "transient";
+	if (error instanceof Stripe.errors.StripeConnectionError || error instanceof Stripe.errors.StripeAPIError || error instanceof Stripe.errors.StripeRateLimitError) return "transient";
+	return "unknown";
+}
+
+//#endregion
+export { PaymentServiceError };
+//# sourceMappingURL=payment-service.error.js.map

package/dist/stripe/payment-service.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service.error.js","names":[],"sources":["../../src/infrastructure/stripe/payment-service.error.ts"],"sourcesContent":["import Stripe from 'stripe'\n\nimport { AppError, type FailureClassification } from '@/core'\n\n/** A final Stripe request failure. The caller logs once; native details remain in cause. */\nexport class PaymentServiceError extends AppError {\n  readonly _tag = 'PaymentServiceError'\n  readonly classification: FailureClassification\n\n  /** Classify the final SDK error without scheduling another payment attempt. */\n  constructor(\n    readonly operation: string,\n    cause: Stripe.errors.StripeError,\n  ) {\n    super(`Stripe request failed: ${operation}`, { cause })\n    this.classification = classifyStripeError(cause)\n  }\n}\n\nfunction classifyStripeError(error: Stripe.errors.StripeError): FailureClassification {\n  if (error.headers?.['stripe-should-retry'] === 'false') return 'terminal'\n  const status = error.statusCode\n  if (status !== undefined && status >= 400 && status < 500 && status !== 409 && status !== 429)\n    return 'terminal'\n  if (\n    error instanceof Stripe.errors.StripeAuthenticationError ||\n    error instanceof Stripe.errors.StripePermissionError ||\n    error instanceof Stripe.errors.StripeInvalidRequestError ||\n    error instanceof Stripe.errors.StripeIdempotencyError\n  )\n    return 'terminal'\n  if (error.headers?.['stripe-should-retry'] === 'true') return 'transient'\n  if (status === 409 || status === 429 || (status !== undefined && status >= 500))\n    return 'transient'\n  if (\n    error instanceof Stripe.errors.StripeConnectionError ||\n    error instanceof Stripe.errors.StripeAPIError ||\n    error instanceof Stripe.errors.StripeRateLimitError\n  )\n    return 'transient'\n  return 'unknown'\n}\n"],"mappings":";;;;;AAKA,IAAa,sBAAb,cAAyC,SAAS;CAMrC;CALX,AAAS,OAAO;CAChB,AAAS;;CAGT,YACE,AAAS,WACT,OACA;EACA,MAAM,0BAA0B,aAAa,EAAE,MAAM,CAAC;EAH7C;EAIT,KAAK,iBAAiB,oBAAoB,KAAK;CACjD;AACF;AAEA,SAAS,oBAAoB,OAAyD;CACpF,IAAI,MAAM,UAAU,2BAA2B,SAAS,OAAO;CAC/D,MAAM,SAAS,MAAM;CACrB,IAAI,WAAW,UAAa,UAAU,OAAO,SAAS,OAAO,WAAW,OAAO,WAAW,KACxF,OAAO;CACT,IACE,iBAAiB,OAAO,OAAO,6BAC/B,iBAAiB,OAAO,OAAO,yBAC/B,iBAAiB,OAAO,OAAO,6BAC/B,iBAAiB,OAAO,OAAO,wBAE/B,OAAO;CACT,IAAI,MAAM,UAAU,2BAA2B,QAAQ,OAAO;CAC9D,IAAI,WAAW,OAAO,WAAW,OAAQ,WAAW,UAAa,UAAU,KACzE,OAAO;CACT,IACE,iBAAiB,OAAO,OAAO,yBAC/B,iBAAiB,OAAO,OAAO,kBAC/B,iBAAiB,OAAO,OAAO,sBAE/B,OAAO;CACT,OAAO;AACT"}

package/dist/stripe/payment-service.js

@@ -0,0 +1,72 @@
+import { PaymentServiceError } from "./payment-service.error.js";
+import Stripe from "stripe";
+
+//#region src/infrastructure/stripe/payment-service.ts
+/**
+* Ported from Typist's StripeClient request boundary; the native SDK now owns retries.
+* Each request defaults to two SDK retries. Native request options can override retries and timeout.
+*/
+var StripePaymentService = class {
+	stripe;
+	/** Inject a native SDK instance; its transport, credentials, and API version remain caller-owned. */
+	constructor(stripe) {
+		this.stripe = stripe;
+	}
+	/** Create a customer with a stable application key and preserve the native response. */
+	createCustomer(input, options) {
+		return this.request("customers.create", () => this.stripe.customers.create(input, {
+			maxNetworkRetries: 2,
+			...options
+		}));
+	}
+	/** Force payment mode after caller parameters; return the native Checkout Session. */
+	createCheckout(input, options) {
+		return this.request("checkout.sessions.create", () => this.stripe.checkout.sessions.create({
+			...input,
+			mode: "payment"
+		}, {
+			maxNetworkRetries: 2,
+			...options
+		}));
+	}
+	/** Force setup mode after caller parameters; this operation does not charge the customer. */
+	setupPaymentMethod(input, options) {
+		return this.request("checkout.sessions.create", () => this.stripe.checkout.sessions.create({
+			...input,
+			mode: "setup"
+		}, {
+			maxNetworkRetries: 2,
+			...options
+		}));
+	}
+	/** Force confirmation and off-session use; preserve native card failures for application handling. */
+	chargeSavedMethod(input, options) {
+		return this.request("paymentIntents.create", () => this.stripe.paymentIntents.create({
+			...input,
+			confirm: true,
+			off_session: true
+		}, {
+			maxNetworkRetries: 2,
+			...options
+		}));
+	}
+	/** Preserve every native status and response field when reconciling an existing payment. */
+	getPayment(paymentId, params, options) {
+		return this.request("paymentIntents.retrieve", () => this.stripe.paymentIntents.retrieve(paymentId, params, {
+			maxNetworkRetries: 2,
+			...options
+		}));
+	}
+	async request(operation, work) {
+		try {
+			return await work();
+		} catch (cause) {
+			if (!(cause instanceof Stripe.errors.StripeError) || cause instanceof Stripe.errors.StripeCardError) throw cause;
+			throw new PaymentServiceError(operation, cause);
+		}
+	}
+};
+
+//#endregion
+export { StripePaymentService };
+//# sourceMappingURL=payment-service.js.map

package/dist/stripe/payment-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service.js","names":[],"sources":["../../src/infrastructure/stripe/payment-service.ts"],"sourcesContent":["import Stripe from 'stripe'\n\nimport { PaymentServiceError } from './payment-service.error.ts'\n\n/** Supply the same key and parameters when repeating one durable payment attempt. */\nexport type PaymentRequestOptions = Stripe.RequestOptions &\n  Required<Pick<Stripe.RequestOptions, 'idempotencyKey'>>\n\n/** Native Checkout parameters; the service selects payment or setup mode. */\nexport type CheckoutInput = Omit<Stripe.Checkout.SessionCreateParams, 'mode'>\n\n/** A saved customer method; the service confirms the payment off-session. */\nexport type SavedMethodCharge = Omit<Stripe.PaymentIntentCreateParams, 'confirm' | 'off_session'> &\n  Required<Pick<Stripe.PaymentIntentCreateParams, 'customer' | 'payment_method'>>\n\n/** Native customer response, including Stripe request metadata. */\nexport type CustomerResult = Awaited<ReturnType<Stripe['customers']['create']>>\n\n/** Native Checkout response. Its URL can be null; this does not confirm payment. */\nexport type CheckoutResult = Awaited<ReturnType<Stripe['checkout']['sessions']['create']>>\n\n/** Native PaymentIntent response. Applications decide what each status permits. */\nexport type PaymentResult = Awaited<ReturnType<Stripe['paymentIntents']['create']>>\n\n/**\n * Stripe payment operations, with native types and stable keys for mutations.\n * Rejects with PaymentServiceError or native StripeCardError; unexpected defects propagate.\n */\nexport interface IPaymentService {\n  /** Create a customer; the application owns persistence and reuse of the customer link. */\n  createCustomer(\n    input: Stripe.CustomerCreateParams,\n    options: PaymentRequestOptions,\n  ): Promise<CustomerResult>\n  /** Create one-time payment checkout; application fulfillment requires verified payment confirmation. */\n  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>\n  /** Create checkout in setup mode. The application records consent and verifies the saved method's owner. */\n  setupPaymentMethod(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult>\n  /** Confirm a saved method off-session. Native card errors can require customer authentication. */\n  chargeSavedMethod(\n    input: SavedMethodCharge,\n    options: PaymentRequestOptions,\n  ): Promise<PaymentResult>\n  /** Retrieve an existing payment without starting another payment attempt. */\n  getPayment(\n    paymentId: string,\n    params?: Stripe.PaymentIntentRetrieveParams,\n    options?: Stripe.RequestOptions,\n  ): Promise<PaymentResult>\n}\n\n/**\n * Ported from Typist's StripeClient request boundary; the native SDK now owns retries.\n * Each request defaults to two SDK retries. Native request options can override retries and timeout.\n */\nexport class StripePaymentService implements IPaymentService {\n  /** Inject a native SDK instance; its transport, credentials, and API version remain caller-owned. */\n  constructor(private readonly stripe: Stripe) {}\n\n  /** Create a customer with a stable application key and preserve the native response. */\n  createCustomer(\n    input: Stripe.CustomerCreateParams,\n    options: PaymentRequestOptions,\n  ): Promise<CustomerResult> {\n    return this.request('customers.create', () =>\n      this.stripe.customers.create(input, { maxNetworkRetries: 2, ...options }),\n    )\n  }\n\n  /** Force payment mode after caller parameters; return the native Checkout Session. */\n  createCheckout(input: CheckoutInput, options: PaymentRequestOptions): Promise<CheckoutResult> {\n    return this.request('checkout.sessions.create', () =>\n      this.stripe.checkout.sessions.create(\n        { ...input, mode: 'payment' },\n        { maxNetworkRetries: 2, ...options },\n      ),\n    )\n  }\n\n  /** Force setup mode after caller parameters; this operation does not charge the customer. */\n  setupPaymentMethod(\n    input: CheckoutInput,\n    options: PaymentRequestOptions,\n  ): Promise<CheckoutResult> {\n    return this.request('checkout.sessions.create', () =>\n      this.stripe.checkout.sessions.create(\n        { ...input, mode: 'setup' },\n        { maxNetworkRetries: 2, ...options },\n      ),\n    )\n  }\n\n  /** Force confirmation and off-session use; preserve native card failures for application handling. */\n  chargeSavedMethod(\n    input: SavedMethodCharge,\n    options: PaymentRequestOptions,\n  ): Promise<PaymentResult> {\n    return this.request('paymentIntents.create', () =>\n      this.stripe.paymentIntents.create(\n        { ...input, confirm: true, off_session: true },\n        { maxNetworkRetries: 2, ...options },\n      ),\n    )\n  }\n\n  /** Preserve every native status and response field when reconciling an existing payment. */\n  getPayment(\n    paymentId: string,\n    params?: Stripe.PaymentIntentRetrieveParams,\n    options?: Stripe.RequestOptions,\n  ): Promise<PaymentResult> {\n    return this.request('paymentIntents.retrieve', () =>\n      this.stripe.paymentIntents.retrieve(paymentId, params, { maxNetworkRetries: 2, ...options }),\n    )\n  }\n\n  private async request<T>(operation: string, work: () => Promise<T>): Promise<T> {\n    try {\n      return await work()\n    } catch (cause) {\n      if (\n        !(cause instanceof Stripe.errors.StripeError) ||\n        cause instanceof Stripe.errors.StripeCardError\n      )\n        throw cause\n      throw new PaymentServiceError(operation, cause)\n    }\n  }\n}\n"],"mappings":";;;;;;;;AAuDA,IAAa,uBAAb,MAA6D;CAE9B;;CAA7B,YAAY,AAAiB,QAAgB;EAAhB;CAAiB;;CAG9C,eACE,OACA,SACyB;EACzB,OAAO,KAAK,QAAQ,0BAClB,KAAK,OAAO,UAAU,OAAO,OAAO;GAAE,mBAAmB;GAAG,GAAG;EAAQ,CAAC,CAC1E;CACF;;CAGA,eAAe,OAAsB,SAAyD;EAC5F,OAAO,KAAK,QAAQ,kCAClB,KAAK,OAAO,SAAS,SAAS,OAC5B;GAAE,GAAG;GAAO,MAAM;EAAU,GAC5B;GAAE,mBAAmB;GAAG,GAAG;EAAQ,CACrC,CACF;CACF;;CAGA,mBACE,OACA,SACyB;EACzB,OAAO,KAAK,QAAQ,kCAClB,KAAK,OAAO,SAAS,SAAS,OAC5B;GAAE,GAAG;GAAO,MAAM;EAAQ,GAC1B;GAAE,mBAAmB;GAAG,GAAG;EAAQ,CACrC,CACF;CACF;;CAGA,kBACE,OACA,SACwB;EACxB,OAAO,KAAK,QAAQ,+BAClB,KAAK,OAAO,eAAe,OACzB;GAAE,GAAG;GAAO,SAAS;GAAM,aAAa;EAAK,GAC7C;GAAE,mBAAmB;GAAG,GAAG;EAAQ,CACrC,CACF;CACF;;CAGA,WACE,WACA,QACA,SACwB;EACxB,OAAO,KAAK,QAAQ,iCAClB,KAAK,OAAO,eAAe,SAAS,WAAW,QAAQ;GAAE,mBAAmB;GAAG,GAAG;EAAQ,CAAC,CAC7F;CACF;CAEA,MAAc,QAAW,WAAmB,MAAoC;EAC9E,IAAI;GACF,OAAO,MAAM,KAAK;EACpB,SAAS,OAAO;GACd,IACE,EAAE,iBAAiB,OAAO,OAAO,gBACjC,iBAAiB,OAAO,OAAO,iBAE/B,MAAM;GACR,MAAM,IAAI,oBAAoB,WAAW,KAAK;EAChD;CACF;AACF"}

package/dist/stripe/payment-webhook.d.ts

@@ -0,0 +1,18 @@
+import { r as WebhookVerifier, t as WebhookVerification } from "../webhook-verification-BuxPzdr4.js";
+import Stripe from "stripe";
+//#region src/infrastructure/stripe/payment-webhook.d.ts
+/**
+ * Authenticate raw Stripe webhook bodies with the SDK's timestamp tolerance and Web Crypto.
+ * Returns native events; application conversion owns event selection and payload validation.
+ */
+export declare class StripeWebhookVerifier implements WebhookVerifier<Stripe.Event> {
+  private readonly stripe;
+  private readonly signingSecret;
+  private readonly tolerance?;
+  /** Supply the endpoint's signing secret. Tolerance defaults to Stripe's five-minute window. */
+  constructor(stripe: Stripe, signingSecret: string, tolerance?: number | undefined);
+  /** Reject signature and JSON failures. Operational failures propagate without logging. */
+  verify(body: string, headers: Headers): Promise<WebhookVerification<Stripe.Event>>;
+}
+//#endregion
+//# sourceMappingURL=payment-webhook.d.ts.map

package/dist/stripe/payment-webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-webhook.d.ts","names":[],"sources":["../../src/infrastructure/stripe/payment-webhook.ts"],"mappings":";;;;;;;qBAYa,iCAAiC,gBAAgB,OAAO;mBAGhD;mBACA;mBACA;;EAHnB,YACmB,QAAQ,QACR,uBACA;;EAIb,OAAO,cAAc,SAAS,UAAU,QAAQ,oBAAoB,OAAO"}

package/dist/stripe/payment-webhook.js

@@ -0,0 +1,47 @@
+import { t as WebhookVerificationError } from "../webhook-verification-BBmjkHgI.js";
+import Stripe from "stripe";
+
+//#region src/infrastructure/stripe/payment-webhook.ts
+/**
+* Authenticate raw Stripe webhook bodies with the SDK's timestamp tolerance and Web Crypto.
+* Returns native events; application conversion owns event selection and payload validation.
+*/
+var StripeWebhookVerifier = class {
+	stripe;
+	signingSecret;
+	tolerance;
+	/** Supply the endpoint's signing secret. Tolerance defaults to Stripe's five-minute window. */
+	constructor(stripe, signingSecret, tolerance) {
+		this.stripe = stripe;
+		this.signingSecret = signingSecret;
+		this.tolerance = tolerance;
+	}
+	/** Reject signature and JSON failures. Operational failures propagate without logging. */
+	async verify(body, headers) {
+		const signature = headers.get("stripe-signature");
+		if (!signature) return {
+			outcome: "rejected",
+			error: new WebhookVerificationError("missing_headers")
+		};
+		try {
+			return {
+				outcome: "event",
+				event: await this.stripe.webhooks.constructEventAsync(body, signature, this.signingSecret, this.tolerance, Stripe.createSubtleCryptoProvider())
+			};
+		} catch (cause) {
+			if (cause instanceof Stripe.errors.StripeSignatureVerificationError) return {
+				outcome: "rejected",
+				error: new WebhookVerificationError("invalid_signature", cause)
+			};
+			if (cause instanceof SyntaxError) return {
+				outcome: "rejected",
+				error: new WebhookVerificationError("invalid_payload", cause)
+			};
+			throw cause;
+		}
+	}
+};
+
+//#endregion
+export { StripeWebhookVerifier };
+//# sourceMappingURL=payment-webhook.js.map

package/dist/stripe/payment-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-webhook.js","names":[],"sources":["../../src/infrastructure/stripe/payment-webhook.ts"],"sourcesContent":["import Stripe from 'stripe'\n\nimport {\n  WebhookVerificationError,\n  type WebhookVerification,\n  type WebhookVerifier,\n} from '../http/webhook-verification.ts'\n\n/**\n * Authenticate raw Stripe webhook bodies with the SDK's timestamp tolerance and Web Crypto.\n * Returns native events; application conversion owns event selection and payload validation.\n */\nexport class StripeWebhookVerifier implements WebhookVerifier<Stripe.Event> {\n  /** Supply the endpoint's signing secret. Tolerance defaults to Stripe's five-minute window. */\n  constructor(\n    private readonly stripe: Stripe,\n    private readonly signingSecret: string,\n    private readonly tolerance?: number,\n  ) {}\n\n  /** Reject signature and JSON failures. Operational failures propagate without logging. */\n  async verify(body: string, headers: Headers): Promise<WebhookVerification<Stripe.Event>> {\n    const signature = headers.get('stripe-signature')\n    if (!signature)\n      return { outcome: 'rejected', error: new WebhookVerificationError('missing_headers') }\n    try {\n      const event = await this.stripe.webhooks.constructEventAsync(\n        body,\n        signature,\n        this.signingSecret,\n        this.tolerance,\n        Stripe.createSubtleCryptoProvider(),\n      )\n      return { outcome: 'event', event }\n    } catch (cause) {\n      if (cause instanceof Stripe.errors.StripeSignatureVerificationError)\n        return {\n          outcome: 'rejected',\n          error: new WebhookVerificationError('invalid_signature', cause),\n        }\n      if (cause instanceof SyntaxError)\n        return {\n          outcome: 'rejected',\n          error: new WebhookVerificationError('invalid_payload', cause),\n        }\n      throw cause\n    }\n  }\n}\n"],"mappings":";;;;;;;;AAYA,IAAa,wBAAb,MAA4E;CAGvD;CACA;CACA;;CAHnB,YACE,AAAiB,QACjB,AAAiB,eACjB,AAAiB,WACjB;EAHiB;EACA;EACA;CAChB;;CAGH,MAAM,OAAO,MAAc,SAA8D;EACvF,MAAM,YAAY,QAAQ,IAAI,kBAAkB;EAChD,IAAI,CAAC,WACH,OAAO;GAAE,SAAS;GAAY,OAAO,IAAI,yBAAyB,iBAAiB;EAAE;EACvF,IAAI;GAQF,OAAO;IAAE,SAAS;IAAS,aAPP,KAAK,OAAO,SAAS,oBACvC,MACA,WACA,KAAK,eACL,KAAK,WACL,OAAO,2BAA2B,CACpC;GACiC;EACnC,SAAS,OAAO;GACd,IAAI,iBAAiB,OAAO,OAAO,kCACjC,OAAO;IACL,SAAS;IACT,OAAO,IAAI,yBAAyB,qBAAqB,KAAK;GAChE;GACF,IAAI,iBAAiB,aACnB,OAAO;IACL,SAAS;IACT,OAAO,IAAI,yBAAyB,mBAAmB,KAAK;GAC9D;GACF,MAAM;EACR;CACF;AACF"}

package/dist/tanstack.d.ts

@@ -1,4 +1,4 @@
-import { lt as ErrorTable } from "./index-DvJUcSW1.js";
+import { ot as ErrorTable } from "./index-DUFS0SJ_.js";
 import { Register } from "@tanstack/react-start";
 import { BetterAuthCookies } from "better-auth";
 //#region src/infrastructure/tanstack/request-context.d.ts

package/dist/tanstack.js

@@ -1,4 +1,4 @@
-import { G as AuthenticationError, U as StaleSessionError, a as createLogger, rt as AppError, z as ValidationError } from "./core-ClSP5-V9.js";
+import { H as StaleSessionError, R as ValidationError, W as AuthenticationError, nt as AppError, r as createLogger } from "./core-UUW2unJd.js";
 import { z } from "zod";
 import { getReasonPhrase } from "http-status-codes";
 import { isNotFound, isRedirect, redirect } from "@tanstack/react-router";
@@ -71,16 +71,16 @@ const logger = createLogger("error-boundary");
 function resolveFailure(table, cause) {
 	const resolved = table.resolve(cause);
 	if (resolved !== null) {
-		logger.warn("handled_error", { details: {
+		logger.warn("handled_error", {
 			tag: resolved.payload._tag,
 			status: resolved.status
-		} });
+		});
 		return resolved;
 	}
 	const classification = cause instanceof AppError ? cause.classification : "unknown";
 	logger.error("unexpected_error", {
 		error: cause,
-		details: { classification }
+		classification
 	});
 	return table.fallback(cause);
 }

package/dist/tanstack.js.map

@@ -1 +1 @@
-{"version":3,"file":"tanstack.js","names":["logger"],"sources":["../src/infrastructure/tanstack/auth.middleware.ts","../src/infrastructure/tanstack/resolve-failure.ts","../src/infrastructure/tanstack/http-error-response.ts","../src/infrastructure/tanstack/session-cookies.ts","../src/infrastructure/tanstack/to-error-payload.ts","../src/infrastructure/tanstack/error.middleware.ts"],"sourcesContent":["import { createMiddleware } from '@tanstack/react-start'\nimport { getSessionCookie } from 'better-auth/cookies'\n\nimport { AuthenticationError, StaleSessionError, createLogger } from '@/core'\n\nimport type { RequestContext } from './request-context.ts'\n\nconst logger = createLogger('auth-middleware')\n\n/** The fields middleware reads; generic callers retain every additional session and user field. */\nexport type AuthSession = {\n  readonly user: { readonly id: string }\n  readonly session: { readonly id: string }\n}\n\n/** Authenticated context retains the application's complete user and session types. */\nexport type RequiredAuthContext<Session extends AuthSession> = {\n  readonly user: Session['user']\n  readonly session: Session['session']\n}\n\n/** Optional authentication supplies both fields together or neither field. */\nexport type AuthContext<Session extends AuthSession> =\n  | RequiredAuthContext<Session>\n  | {\n      readonly user: undefined\n      readonly session: undefined\n    }\n\n/** Select the current request's Better Auth instance from TanStack's registered context. */\nexport type AuthMiddlewareOptions<Session extends AuthSession> = {\n  readonly getAuth: (context: RequestContext) => {\n    readonly api: {\n      readonly getSession: (options: { headers: Headers }) => Promise<Session | null>\n    }\n  }\n}\n\n// The server entry loads react-dom/server; the browser evaluates this module, so it loads lazily inside `.server()`.\nconst requestHeaders = async () => {\n  const { getRequestHeaders } = await import('@tanstack/react-start/server')\n  return getRequestHeaders()\n}\n\n/**\n * Preserve Porte's function and request middleware contracts with application-owned services.\n * Optional lookup failures log once and continue as guests. Required lookup failures propagate.\n */\nexport function createAuthMiddleware<Session extends AuthSession>(\n  options: AuthMiddlewareOptions<Session>,\n) {\n  const extractAuth = createMiddleware({ type: 'function' }).server<AuthContext<Session>>(\n    async ({ next, context }) => {\n      let resolved: Session | null\n      try {\n        const headers = await requestHeaders()\n        resolved = await options.getAuth(context).api.getSession({ headers })\n      } catch (error) {\n        logger.error('get_session_failed', { error })\n        resolved = null\n      }\n      if (resolved === null)\n        return next<AuthContext<Session>>({ context: { user: undefined, session: undefined } })\n      return next<AuthContext<Session>>({\n        context: { user: resolved.user, session: resolved.session },\n      })\n    },\n  )\n\n  async function resolveRequiredSession(\n    context: RequestContext,\n    headers: Headers,\n  ): Promise<Session> {\n    const resolved = await options.getAuth(context).api.getSession({ headers })\n    if (resolved === null) {\n      if (getSessionCookie(headers)) throw new StaleSessionError()\n      throw new AuthenticationError()\n    }\n    return resolved\n  }\n\n  const requireAuth = createMiddleware({ type: 'function' }).server(async ({ next, context }) => {\n    const resolved = await resolveRequiredSession(context, await requestHeaders())\n    return next<RequiredAuthContext<Session>>({\n      context: { user: resolved.user, session: resolved.session },\n    })\n  })\n  const requireAuthRequest = createMiddleware({ type: 'request' }).server(\n    async ({ request, next, context }) => {\n      const resolved = await resolveRequiredSession(context, request.headers)\n      return next<RequiredAuthContext<Session>>({\n        context: { user: resolved.user, session: resolved.session },\n      })\n    },\n  )\n  return { extractAuth, requireAuth, requireAuthRequest }\n}\n","import { AppError, createLogger, type ErrorTable, type ResolvedError } from '@/core'\nimport type { ErrorPayloadOf } from '@/core'\n\nconst logger = createLogger('error-boundary')\n\n/**\n * Resolve one failure through the table or fall back to the generic replacement, and log it once.\n * Both transport converters call this, so one rule decides the log level: mapped is a warning, unmapped is an error with the cause.\n */\nexport function resolveFailure<Entries>(\n  table: ErrorTable<Entries>,\n  cause: unknown,\n): ResolvedError<ErrorPayloadOf<ErrorTable<Entries>>> {\n  const resolved = table.resolve(cause)\n  if (resolved !== null) {\n    logger.warn('handled_error', {\n      details: { tag: resolved.payload._tag, status: resolved.status },\n    })\n    return resolved\n  }\n  const classification = cause instanceof AppError ? cause.classification : 'unknown'\n  logger.error('unexpected_error', { error: cause, details: { classification } })\n  return table.fallback(cause)\n}\n","import { getReasonPhrase } from 'http-status-codes'\nimport { z } from 'zod'\n\nimport type { ErrorTable, ProblemDetails } from '@/core'\n\nimport { resolveFailure } from './resolve-failure.ts'\n\n// A known delay becomes the header; a null delay sends no header.\nconst RetryAfterSchema = z.object({ retryAfter: z.number() })\n\n/**\n * Build the API route converter for one error table.\n * The body is RFC 9457 problem details; public fields become extension members.\n */\nexport function createHttpErrorResponseConverter<Entries>(table: ErrorTable<Entries>) {\n  return function toHttpErrorResponse(cause: unknown): Response {\n    const { status, payload } = resolveFailure(table, cause)\n    const { _tag, message, ...fields } = payload\n    const body: ProblemDetails = {\n      type: 'about:blank',\n      title: getReasonPhrase(status),\n      detail: message,\n      ...fields,\n    }\n    const headers = new Headers({ 'Content-Type': 'application/problem+json' })\n    const retry = RetryAfterSchema.safeParse(payload)\n    if (retry.success) headers.set('Retry-After', String(retry.data.retryAfter))\n    return Response.json(body, { status, headers })\n  }\n}\n","import type { deleteCookie } from '@tanstack/react-start/server'\nimport type { BetterAuthCookies } from 'better-auth'\nimport { parseCookies } from 'better-auth/cookies'\n\ntype AuthCookie = BetterAuthCookies['sessionToken']\ntype DeleteCookieOptions = NonNullable<Parameters<typeof deleteCookie>[1]>\n\n/**\n * Delete the session, session cache, account cache, and remember-me cookies of one instance.\n * Chunks present on the request go too. Names and attributes come from the instance, so custom prefixes and domain cookies clear.\n */\nexport async function clearStaleSessionCookies(cookies: BetterAuthCookies): Promise<void> {\n  // The server entry loads react-dom/server; the browser evaluates this module, so it loads lazily here.\n  const server = await import('@tanstack/react-start/server')\n  const present = [...parseCookies(server.getRequestHeaders().get('cookie') ?? '').keys()]\n  const definitions = [\n    cookies.sessionToken,\n    cookies.sessionData,\n    cookies.accountData,\n    cookies.dontRememberToken,\n  ]\n  for (const cookie of definitions) {\n    // Better Auth names a chunk `${name}.${index}`, so a missed chunk would resurrect the value.\n    const chunks = present.filter((name) => name.startsWith(`${cookie.name}.`))\n    for (const name of new Set([cookie.name, ...chunks]))\n      server.deleteCookie(name, deletionOf(cookie.attributes))\n  }\n}\n\nfunction deletionOf(attributes: AuthCookie['attributes']): DeleteCookieOptions {\n  // Better Auth sets `/` and the secure flag at runtime; the types leave both optional.\n  const options: DeleteCookieOptions = {\n    path: attributes.path ?? '/',\n    secure: attributes.secure ?? false,\n  }\n  if (attributes.domain !== undefined) options.domain = attributes.domain\n  return options\n}\n","import { z } from 'zod'\n\nimport { ValidationError, type ErrorPayloadOf, type ErrorTable } from '@/core'\n\nimport { resolveFailure } from './resolve-failure.ts'\n\n// TanStack serializes a validator's issues into `Error.message` as JSON.\nconst SerializedIssuesSchema = z\n  .array(z.object({ message: z.string(), path: z.array(z.union([z.string(), z.number()])) }))\n  .min(1)\n\nfunction reconstructValidationError(cause: unknown): ValidationError | null {\n  if (!(cause instanceof Error)) return null\n  let message: unknown\n  try {\n    message = JSON.parse(cause.message)\n  } catch {\n    return null\n  }\n  const parsed = SerializedIssuesSchema.safeParse(message)\n  return parsed.success ? ValidationError.fromIssues(parsed.data) : null\n}\n\n/**\n * Build the server-function converter for one error table.\n * The result is a plain object, because only own data survives serialization.\n */\nexport function createErrorPayloadConverter<Entries>(table: ErrorTable<Entries>) {\n  return function toErrorPayload(cause: unknown): ErrorPayloadOf<ErrorTable<Entries>> {\n    return resolveFailure(table, reconstructValidationError(cause) ?? cause).payload\n  }\n}\n","import { isNotFound, isRedirect, redirect } from '@tanstack/react-router'\nimport { createMiddleware } from '@tanstack/react-start'\nimport type { BetterAuthCookies } from 'better-auth'\n\nimport { StaleSessionError, type ErrorTable } from '@/core'\n\nimport { createHttpErrorResponseConverter } from './http-error-response.ts'\nimport type { RequestContext } from './request-context.ts'\nimport { clearStaleSessionCookies } from './session-cookies.ts'\nimport { createErrorPayloadConverter } from './to-error-payload.ts'\n\n/** The part of a Better Auth instance the boundary reads: its computed cookie definitions. */\nexport type AuthCookieSource = {\n  readonly $context: Promise<{ readonly authCookies: BetterAuthCookies }>\n}\n\n/** The application's error table, its stale-session redirect, and its Better Auth instance. */\nexport type ErrorMiddlewareOptions<Entries> = {\n  readonly errors: ErrorTable<Entries>\n  /** The path a server function redirects to for a stale session, with any search string. */\n  readonly signIn: string\n  /** Select the request's Better Auth instance; its cookie definitions say what to clear. */\n  readonly getAuth: (context: RequestContext) => AuthCookieSource\n}\n\n/**\n * Build both transport boundaries from one error table.\n * Register `functionErrorMiddleware` globally. Put `routeErrorMiddleware` first in an API route's `server.middleware`.\n */\nexport function createErrorMiddleware<Entries>(options: ErrorMiddlewareOptions<Entries>) {\n  const toErrorPayload = createErrorPayloadConverter(options.errors)\n  const toHttpErrorResponse = createHttpErrorResponseConverter(options.errors)\n\n  async function clearSession(context: RequestContext): Promise<void> {\n    const { authCookies } = await options.getAuth(context).$context\n    await clearStaleSessionCookies(authCookies)\n  }\n\n  async function handleFunctionError(cause: unknown, context: RequestContext): Promise<never> {\n    // oxlint-disable-next-line typescript/only-throw-error -- TanStack uses throwable control-flow objects.\n    if (isNotFound(cause) || isRedirect(cause)) throw cause\n    if (cause instanceof StaleSessionError) {\n      await clearSession(context)\n      // oxlint-disable-next-line typescript/only-throw-error -- Router redirects by throwing this.\n      throw redirect({ href: options.signIn })\n    }\n    // oxlint-disable-next-line typescript/only-throw-error -- The client rejects with this and reads its tag.\n    throw toErrorPayload(cause)\n  }\n\n  // A route answers 401 instead of a redirect because fetch would follow it into the HTML shell.\n  async function handleRouteError(cause: unknown, context: RequestContext): Promise<Response> {\n    // oxlint-disable-next-line typescript/only-throw-error -- TanStack uses throwable control-flow objects.\n    if (isNotFound(cause) || isRedirect(cause)) throw cause\n    if (cause instanceof StaleSessionError) await clearSession(context)\n    return toHttpErrorResponse(cause)\n  }\n\n  const functionErrorMiddleware = createMiddleware({ type: 'function' }).server(\n    async ({ next, context }) => {\n      try {\n        return await next()\n      } catch (cause) {\n        return handleFunctionError(cause, context)\n      }\n    },\n  )\n\n  const routeErrorMiddleware = createMiddleware({ type: 'request' }).server(\n    async ({ next, context }) => {\n      try {\n        return await next()\n      } catch (cause) {\n        return handleRouteError(cause, context)\n      }\n    },\n  )\n\n  return { functionErrorMiddleware, routeErrorMiddleware, toErrorPayload, toHttpErrorResponse }\n}\n"],"mappings":";;;;;;;;AAOA,MAAMA,WAAS,aAAa,iBAAiB;AAgC7C,MAAM,iBAAiB,YAAY;CACjC,MAAM,EAAE,sBAAsB,MAAM,OAAO;CAC3C,OAAO,kBAAkB;AAC3B;;;;;AAMA,SAAgB,qBACd,SACA;CACA,MAAM,cAAc,iBAAiB,EAAE,MAAM,WAAW,CAAC,CAAC,CAAC,OACzD,OAAO,EAAE,MAAM,cAAc;EAC3B,IAAI;EACJ,IAAI;GACF,MAAM,UAAU,MAAM,eAAe;GACrC,WAAW,MAAM,QAAQ,QAAQ,OAAO,CAAC,CAAC,IAAI,WAAW,EAAE,QAAQ,CAAC;EACtE,SAAS,OAAO;GACd,SAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC;GAC5C,WAAW;EACb;EACA,IAAI,aAAa,MACf,OAAO,KAA2B,EAAE,SAAS;GAAE,MAAM;GAAW,SAAS;EAAU,EAAE,CAAC;EACxF,OAAO,KAA2B,EAChC,SAAS;GAAE,MAAM,SAAS;GAAM,SAAS,SAAS;EAAQ,EAC5D,CAAC;CACH,CACF;CAEA,eAAe,uBACb,SACA,SACkB;EAClB,MAAM,WAAW,MAAM,QAAQ,QAAQ,OAAO,CAAC,CAAC,IAAI,WAAW,EAAE,QAAQ,CAAC;EAC1E,IAAI,aAAa,MAAM;GACrB,IAAI,iBAAiB,OAAO,GAAG,MAAM,IAAI,kBAAkB;GAC3D,MAAM,IAAI,oBAAoB;EAChC;EACA,OAAO;CACT;CAgBA,OAAO;EAAE;EAAa,aAdF,iBAAiB,EAAE,MAAM,WAAW,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE,MAAM,cAAc;GAC7F,MAAM,WAAW,MAAM,uBAAuB,SAAS,MAAM,eAAe,CAAC;GAC7E,OAAO,KAAmC,EACxC,SAAS;IAAE,MAAM,SAAS;IAAM,SAAS,SAAS;GAAQ,EAC5D,CAAC;EACH,CASgC;EAAG,oBARR,iBAAiB,EAAE,MAAM,UAAU,CAAC,CAAC,CAAC,OAC/D,OAAO,EAAE,SAAS,MAAM,cAAc;GACpC,MAAM,WAAW,MAAM,uBAAuB,SAAS,QAAQ,OAAO;GACtE,OAAO,KAAmC,EACxC,SAAS;IAAE,MAAM,SAAS;IAAM,SAAS,SAAS;GAAQ,EAC5D,CAAC;EACH,CAEkD;CAAE;AACxD;;;;AC7FA,MAAM,SAAS,aAAa,gBAAgB;;;;;AAM5C,SAAgB,eACd,OACA,OACoD;CACpD,MAAM,WAAW,MAAM,QAAQ,KAAK;CACpC,IAAI,aAAa,MAAM;EACrB,OAAO,KAAK,iBAAiB,EAC3B,SAAS;GAAE,KAAK,SAAS,QAAQ;GAAM,QAAQ,SAAS;EAAO,EACjE,CAAC;EACD,OAAO;CACT;CACA,MAAM,iBAAiB,iBAAiB,WAAW,MAAM,iBAAiB;CAC1E,OAAO,MAAM,oBAAoB;EAAE,OAAO;EAAO,SAAS,EAAE,eAAe;CAAE,CAAC;CAC9E,OAAO,MAAM,SAAS,KAAK;AAC7B;;;;ACfA,MAAM,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;;;;;AAM5D,SAAgB,iCAA0C,OAA4B;CACpF,OAAO,SAAS,oBAAoB,OAA0B;EAC5D,MAAM,EAAE,QAAQ,YAAY,eAAe,OAAO,KAAK;EACvD,MAAM,EAAE,MAAM,SAAS,GAAG,WAAW;EACrC,MAAM,OAAuB;GAC3B,MAAM;GACN,OAAO,gBAAgB,MAAM;GAC7B,QAAQ;GACR,GAAG;EACL;EACA,MAAM,UAAU,IAAI,QAAQ,EAAE,gBAAgB,2BAA2B,CAAC;EAC1E,MAAM,QAAQ,iBAAiB,UAAU,OAAO;EAChD,IAAI,MAAM,SAAS,QAAQ,IAAI,eAAe,OAAO,MAAM,KAAK,UAAU,CAAC;EAC3E,OAAO,SAAS,KAAK,MAAM;GAAE;GAAQ;EAAQ,CAAC;CAChD;AACF;;;;;;;;AClBA,eAAsB,yBAAyB,SAA2C;CAExF,MAAM,SAAS,MAAM,OAAO;CAC5B,MAAM,UAAU,CAAC,GAAG,aAAa,OAAO,kBAAkB,CAAC,CAAC,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;CACvF,MAAM,cAAc;EAClB,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;CACV;CACA,KAAK,MAAM,UAAU,aAAa;EAEhC,MAAM,SAAS,QAAQ,QAAQ,SAAS,KAAK,WAAW,GAAG,OAAO,KAAK,EAAE,CAAC;EAC1E,KAAK,MAAM,wBAAQ,IAAI,IAAI,CAAC,OAAO,MAAM,GAAG,MAAM,CAAC,GACjD,OAAO,aAAa,MAAM,WAAW,OAAO,UAAU,CAAC;CAC3D;AACF;AAEA,SAAS,WAAW,YAA2D;CAE7E,MAAM,UAA+B;EACnC,MAAM,WAAW,QAAQ;EACzB,QAAQ,WAAW,UAAU;CAC/B;CACA,IAAI,WAAW,WAAW,QAAW,QAAQ,SAAS,WAAW;CACjE,OAAO;AACT;;;;AC9BA,MAAM,yBAAyB,EAC5B,MAAM,EAAE,OAAO;CAAE,SAAS,EAAE,OAAO;CAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAAE,CAAC,CAAC,CAAC,CAC1F,IAAI,CAAC;AAER,SAAS,2BAA2B,OAAwC;CAC1E,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,IAAI;CACJ,IAAI;EACF,UAAU,KAAK,MAAM,MAAM,OAAO;CACpC,QAAQ;EACN,OAAO;CACT;CACA,MAAM,SAAS,uBAAuB,UAAU,OAAO;CACvD,OAAO,OAAO,UAAU,gBAAgB,WAAW,OAAO,IAAI,IAAI;AACpE;;;;;AAMA,SAAgB,4BAAqC,OAA4B;CAC/E,OAAO,SAAS,eAAe,OAAqD;EAClF,OAAO,eAAe,OAAO,2BAA2B,KAAK,KAAK,KAAK,CAAC,CAAC;CAC3E;AACF;;;;;;;;ACFA,SAAgB,sBAA+B,SAA0C;CACvF,MAAM,iBAAiB,4BAA4B,QAAQ,MAAM;CACjE,MAAM,sBAAsB,iCAAiC,QAAQ,MAAM;CAE3E,eAAe,aAAa,SAAwC;EAClE,MAAM,EAAE,gBAAgB,MAAM,QAAQ,QAAQ,OAAO,CAAC,CAAC;EACvD,MAAM,yBAAyB,WAAW;CAC5C;CAEA,eAAe,oBAAoB,OAAgB,SAAyC;EAE1F,IAAI,WAAW,KAAK,KAAK,WAAW,KAAK,GAAG,MAAM;EAClD,IAAI,iBAAiB,mBAAmB;GACtC,MAAM,aAAa,OAAO;GAE1B,MAAM,SAAS,EAAE,MAAM,QAAQ,OAAO,CAAC;EACzC;EAEA,MAAM,eAAe,KAAK;CAC5B;CAGA,eAAe,iBAAiB,OAAgB,SAA4C;EAE1F,IAAI,WAAW,KAAK,KAAK,WAAW,KAAK,GAAG,MAAM;EAClD,IAAI,iBAAiB,mBAAmB,MAAM,aAAa,OAAO;EAClE,OAAO,oBAAoB,KAAK;CAClC;CAsBA,OAAO;EAAE,yBApBuB,iBAAiB,EAAE,MAAM,WAAW,CAAC,CAAC,CAAC,OACrE,OAAO,EAAE,MAAM,cAAc;GAC3B,IAAI;IACF,OAAO,MAAM,KAAK;GACpB,SAAS,OAAO;IACd,OAAO,oBAAoB,OAAO,OAAO;GAC3C;EACF,CAa6B;EAAG,sBAVL,iBAAiB,EAAE,MAAM,UAAU,CAAC,CAAC,CAAC,OACjE,OAAO,EAAE,MAAM,cAAc;GAC3B,IAAI;IACF,OAAO,MAAM,KAAK;GACpB,SAAS,OAAO;IACd,OAAO,iBAAiB,OAAO,OAAO;GACxC;EACF,CAGmD;EAAG;EAAgB;CAAoB;AAC9F"}
+{"version":3,"file":"tanstack.js","names":["logger"],"sources":["../src/infrastructure/tanstack/auth.middleware.ts","../src/infrastructure/tanstack/resolve-failure.ts","../src/infrastructure/tanstack/http-error-response.ts","../src/infrastructure/tanstack/session-cookies.ts","../src/infrastructure/tanstack/to-error-payload.ts","../src/infrastructure/tanstack/error.middleware.ts"],"sourcesContent":["import { createMiddleware } from '@tanstack/react-start'\nimport { getSessionCookie } from 'better-auth/cookies'\n\nimport { AuthenticationError, StaleSessionError, createLogger } from '@/core'\n\nimport type { RequestContext } from './request-context.ts'\n\nconst logger = createLogger('auth-middleware')\n\n/** The fields middleware reads; generic callers retain every additional session and user field. */\nexport type AuthSession = {\n  readonly user: { readonly id: string }\n  readonly session: { readonly id: string }\n}\n\n/** Authenticated context retains the application's complete user and session types. */\nexport type RequiredAuthContext<Session extends AuthSession> = {\n  readonly user: Session['user']\n  readonly session: Session['session']\n}\n\n/** Optional authentication supplies both fields together or neither field. */\nexport type AuthContext<Session extends AuthSession> =\n  | RequiredAuthContext<Session>\n  | {\n      readonly user: undefined\n      readonly session: undefined\n    }\n\n/** Select the current request's Better Auth instance from TanStack's registered context. */\nexport type AuthMiddlewareOptions<Session extends AuthSession> = {\n  readonly getAuth: (context: RequestContext) => {\n    readonly api: {\n      readonly getSession: (options: { headers: Headers }) => Promise<Session | null>\n    }\n  }\n}\n\n// The server entry loads react-dom/server; the browser evaluates this module, so it loads lazily inside `.server()`.\nconst requestHeaders = async () => {\n  const { getRequestHeaders } = await import('@tanstack/react-start/server')\n  return getRequestHeaders()\n}\n\n/**\n * Preserve Porte's function and request middleware contracts with application-owned services.\n * Optional lookup failures log once and continue as guests. Required lookup failures propagate.\n */\nexport function createAuthMiddleware<Session extends AuthSession>(\n  options: AuthMiddlewareOptions<Session>,\n) {\n  const extractAuth = createMiddleware({ type: 'function' }).server<AuthContext<Session>>(\n    async ({ next, context }) => {\n      let resolved: Session | null\n      try {\n        const headers = await requestHeaders()\n        resolved = await options.getAuth(context).api.getSession({ headers })\n      } catch (error) {\n        logger.error('get_session_failed', { error })\n        resolved = null\n      }\n      if (resolved === null)\n        return next<AuthContext<Session>>({ context: { user: undefined, session: undefined } })\n      return next<AuthContext<Session>>({\n        context: { user: resolved.user, session: resolved.session },\n      })\n    },\n  )\n\n  async function resolveRequiredSession(\n    context: RequestContext,\n    headers: Headers,\n  ): Promise<Session> {\n    const resolved = await options.getAuth(context).api.getSession({ headers })\n    if (resolved === null) {\n      if (getSessionCookie(headers)) throw new StaleSessionError()\n      throw new AuthenticationError()\n    }\n    return resolved\n  }\n\n  const requireAuth = createMiddleware({ type: 'function' }).server(async ({ next, context }) => {\n    const resolved = await resolveRequiredSession(context, await requestHeaders())\n    return next<RequiredAuthContext<Session>>({\n      context: { user: resolved.user, session: resolved.session },\n    })\n  })\n  const requireAuthRequest = createMiddleware({ type: 'request' }).server(\n    async ({ request, next, context }) => {\n      const resolved = await resolveRequiredSession(context, request.headers)\n      return next<RequiredAuthContext<Session>>({\n        context: { user: resolved.user, session: resolved.session },\n      })\n    },\n  )\n  return { extractAuth, requireAuth, requireAuthRequest }\n}\n","import { AppError, createLogger, type ErrorTable, type ResolvedError } from '@/core'\nimport type { ErrorPayloadOf } from '@/core'\n\nconst logger = createLogger('error-boundary')\n\n/**\n * Resolve one failure through the table or fall back to the generic replacement, and log it once.\n * Both transport converters call this, so one rule decides the log level: mapped is a warning, unmapped is an error with the cause.\n */\nexport function resolveFailure<Entries>(\n  table: ErrorTable<Entries>,\n  cause: unknown,\n): ResolvedError<ErrorPayloadOf<ErrorTable<Entries>>> {\n  const resolved = table.resolve(cause)\n  if (resolved !== null) {\n    logger.warn('handled_error', {\n      tag: resolved.payload._tag,\n      status: resolved.status,\n    })\n    return resolved\n  }\n  const classification = cause instanceof AppError ? cause.classification : 'unknown'\n  logger.error('unexpected_error', { error: cause, classification })\n  return table.fallback(cause)\n}\n","import { getReasonPhrase } from 'http-status-codes'\nimport { z } from 'zod'\n\nimport type { ErrorTable, ProblemDetails } from '@/core'\n\nimport { resolveFailure } from './resolve-failure.ts'\n\n// A known delay becomes the header; a null delay sends no header.\nconst RetryAfterSchema = z.object({ retryAfter: z.number() })\n\n/**\n * Build the API route converter for one error table.\n * The body is RFC 9457 problem details; public fields become extension members.\n */\nexport function createHttpErrorResponseConverter<Entries>(table: ErrorTable<Entries>) {\n  return function toHttpErrorResponse(cause: unknown): Response {\n    const { status, payload } = resolveFailure(table, cause)\n    const { _tag, message, ...fields } = payload\n    const body: ProblemDetails = {\n      type: 'about:blank',\n      title: getReasonPhrase(status),\n      detail: message,\n      ...fields,\n    }\n    const headers = new Headers({ 'Content-Type': 'application/problem+json' })\n    const retry = RetryAfterSchema.safeParse(payload)\n    if (retry.success) headers.set('Retry-After', String(retry.data.retryAfter))\n    return Response.json(body, { status, headers })\n  }\n}\n","import type { deleteCookie } from '@tanstack/react-start/server'\nimport type { BetterAuthCookies } from 'better-auth'\nimport { parseCookies } from 'better-auth/cookies'\n\ntype AuthCookie = BetterAuthCookies['sessionToken']\ntype DeleteCookieOptions = NonNullable<Parameters<typeof deleteCookie>[1]>\n\n/**\n * Delete the session, session cache, account cache, and remember-me cookies of one instance.\n * Chunks present on the request go too. Names and attributes come from the instance, so custom prefixes and domain cookies clear.\n */\nexport async function clearStaleSessionCookies(cookies: BetterAuthCookies): Promise<void> {\n  // The server entry loads react-dom/server; the browser evaluates this module, so it loads lazily here.\n  const server = await import('@tanstack/react-start/server')\n  const present = [...parseCookies(server.getRequestHeaders().get('cookie') ?? '').keys()]\n  const definitions = [\n    cookies.sessionToken,\n    cookies.sessionData,\n    cookies.accountData,\n    cookies.dontRememberToken,\n  ]\n  for (const cookie of definitions) {\n    // Better Auth names a chunk `${name}.${index}`, so a missed chunk would resurrect the value.\n    const chunks = present.filter((name) => name.startsWith(`${cookie.name}.`))\n    for (const name of new Set([cookie.name, ...chunks]))\n      server.deleteCookie(name, deletionOf(cookie.attributes))\n  }\n}\n\nfunction deletionOf(attributes: AuthCookie['attributes']): DeleteCookieOptions {\n  // Better Auth sets `/` and the secure flag at runtime; the types leave both optional.\n  const options: DeleteCookieOptions = {\n    path: attributes.path ?? '/',\n    secure: attributes.secure ?? false,\n  }\n  if (attributes.domain !== undefined) options.domain = attributes.domain\n  return options\n}\n","import { z } from 'zod'\n\nimport { ValidationError, type ErrorPayloadOf, type ErrorTable } from '@/core'\n\nimport { resolveFailure } from './resolve-failure.ts'\n\n// TanStack serializes a validator's issues into `Error.message` as JSON.\nconst SerializedIssuesSchema = z\n  .array(z.object({ message: z.string(), path: z.array(z.union([z.string(), z.number()])) }))\n  .min(1)\n\nfunction reconstructValidationError(cause: unknown): ValidationError | null {\n  if (!(cause instanceof Error)) return null\n  let message: unknown\n  try {\n    message = JSON.parse(cause.message)\n  } catch {\n    return null\n  }\n  const parsed = SerializedIssuesSchema.safeParse(message)\n  return parsed.success ? ValidationError.fromIssues(parsed.data) : null\n}\n\n/**\n * Build the server-function converter for one error table.\n * The result is a plain object, because only own data survives serialization.\n */\nexport function createErrorPayloadConverter<Entries>(table: ErrorTable<Entries>) {\n  return function toErrorPayload(cause: unknown): ErrorPayloadOf<ErrorTable<Entries>> {\n    return resolveFailure(table, reconstructValidationError(cause) ?? cause).payload\n  }\n}\n","import { isNotFound, isRedirect, redirect } from '@tanstack/react-router'\nimport { createMiddleware } from '@tanstack/react-start'\nimport type { BetterAuthCookies } from 'better-auth'\n\nimport { StaleSessionError, type ErrorTable } from '@/core'\n\nimport { createHttpErrorResponseConverter } from './http-error-response.ts'\nimport type { RequestContext } from './request-context.ts'\nimport { clearStaleSessionCookies } from './session-cookies.ts'\nimport { createErrorPayloadConverter } from './to-error-payload.ts'\n\n/** The part of a Better Auth instance the boundary reads: its computed cookie definitions. */\nexport type AuthCookieSource = {\n  readonly $context: Promise<{ readonly authCookies: BetterAuthCookies }>\n}\n\n/** The application's error table, its stale-session redirect, and its Better Auth instance. */\nexport type ErrorMiddlewareOptions<Entries> = {\n  readonly errors: ErrorTable<Entries>\n  /** The path a server function redirects to for a stale session, with any search string. */\n  readonly signIn: string\n  /** Select the request's Better Auth instance; its cookie definitions say what to clear. */\n  readonly getAuth: (context: RequestContext) => AuthCookieSource\n}\n\n/**\n * Build both transport boundaries from one error table.\n * Register `functionErrorMiddleware` globally. Put `routeErrorMiddleware` first in an API route's `server.middleware`.\n */\nexport function createErrorMiddleware<Entries>(options: ErrorMiddlewareOptions<Entries>) {\n  const toErrorPayload = createErrorPayloadConverter(options.errors)\n  const toHttpErrorResponse = createHttpErrorResponseConverter(options.errors)\n\n  async function clearSession(context: RequestContext): Promise<void> {\n    const { authCookies } = await options.getAuth(context).$context\n    await clearStaleSessionCookies(authCookies)\n  }\n\n  async function handleFunctionError(cause: unknown, context: RequestContext): Promise<never> {\n    // oxlint-disable-next-line typescript/only-throw-error -- TanStack uses throwable control-flow objects.\n    if (isNotFound(cause) || isRedirect(cause)) throw cause\n    if (cause instanceof StaleSessionError) {\n      await clearSession(context)\n      // oxlint-disable-next-line typescript/only-throw-error -- Router redirects by throwing this.\n      throw redirect({ href: options.signIn })\n    }\n    // oxlint-disable-next-line typescript/only-throw-error -- The client rejects with this and reads its tag.\n    throw toErrorPayload(cause)\n  }\n\n  // A route answers 401 instead of a redirect because fetch would follow it into the HTML shell.\n  async function handleRouteError(cause: unknown, context: RequestContext): Promise<Response> {\n    // oxlint-disable-next-line typescript/only-throw-error -- TanStack uses throwable control-flow objects.\n    if (isNotFound(cause) || isRedirect(cause)) throw cause\n    if (cause instanceof StaleSessionError) await clearSession(context)\n    return toHttpErrorResponse(cause)\n  }\n\n  const functionErrorMiddleware = createMiddleware({ type: 'function' }).server(\n    async ({ next, context }) => {\n      try {\n        return await next()\n      } catch (cause) {\n        return handleFunctionError(cause, context)\n      }\n    },\n  )\n\n  const routeErrorMiddleware = createMiddleware({ type: 'request' }).server(\n    async ({ next, context }) => {\n      try {\n        return await next()\n      } catch (cause) {\n        return handleRouteError(cause, context)\n      }\n    },\n  )\n\n  return { functionErrorMiddleware, routeErrorMiddleware, toErrorPayload, toHttpErrorResponse }\n}\n"],"mappings":";;;;;;;;AAOA,MAAMA,WAAS,aAAa,iBAAiB;AAgC7C,MAAM,iBAAiB,YAAY;CACjC,MAAM,EAAE,sBAAsB,MAAM,OAAO;CAC3C,OAAO,kBAAkB;AAC3B;;;;;AAMA,SAAgB,qBACd,SACA;CACA,MAAM,cAAc,iBAAiB,EAAE,MAAM,WAAW,CAAC,CAAC,CAAC,OACzD,OAAO,EAAE,MAAM,cAAc;EAC3B,IAAI;EACJ,IAAI;GACF,MAAM,UAAU,MAAM,eAAe;GACrC,WAAW,MAAM,QAAQ,QAAQ,OAAO,CAAC,CAAC,IAAI,WAAW,EAAE,QAAQ,CAAC;EACtE,SAAS,OAAO;GACd,SAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC;GAC5C,WAAW;EACb;EACA,IAAI,aAAa,MACf,OAAO,KAA2B,EAAE,SAAS;GAAE,MAAM;GAAW,SAAS;EAAU,EAAE,CAAC;EACxF,OAAO,KAA2B,EAChC,SAAS;GAAE,MAAM,SAAS;GAAM,SAAS,SAAS;EAAQ,EAC5D,CAAC;CACH,CACF;CAEA,eAAe,uBACb,SACA,SACkB;EAClB,MAAM,WAAW,MAAM,QAAQ,QAAQ,OAAO,CAAC,CAAC,IAAI,WAAW,EAAE,QAAQ,CAAC;EAC1E,IAAI,aAAa,MAAM;GACrB,IAAI,iBAAiB,OAAO,GAAG,MAAM,IAAI,kBAAkB;GAC3D,MAAM,IAAI,oBAAoB;EAChC;EACA,OAAO;CACT;CAgBA,OAAO;EAAE;EAAa,aAdF,iBAAiB,EAAE,MAAM,WAAW,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE,MAAM,cAAc;GAC7F,MAAM,WAAW,MAAM,uBAAuB,SAAS,MAAM,eAAe,CAAC;GAC7E,OAAO,KAAmC,EACxC,SAAS;IAAE,MAAM,SAAS;IAAM,SAAS,SAAS;GAAQ,EAC5D,CAAC;EACH,CASgC;EAAG,oBARR,iBAAiB,EAAE,MAAM,UAAU,CAAC,CAAC,CAAC,OAC/D,OAAO,EAAE,SAAS,MAAM,cAAc;GACpC,MAAM,WAAW,MAAM,uBAAuB,SAAS,QAAQ,OAAO;GACtE,OAAO,KAAmC,EACxC,SAAS;IAAE,MAAM,SAAS;IAAM,SAAS,SAAS;GAAQ,EAC5D,CAAC;EACH,CAEkD;CAAE;AACxD;;;;AC7FA,MAAM,SAAS,aAAa,gBAAgB;;;;;AAM5C,SAAgB,eACd,OACA,OACoD;CACpD,MAAM,WAAW,MAAM,QAAQ,KAAK;CACpC,IAAI,aAAa,MAAM;EACrB,OAAO,KAAK,iBAAiB;GAC3B,KAAK,SAAS,QAAQ;GACtB,QAAQ,SAAS;EACnB,CAAC;EACD,OAAO;CACT;CACA,MAAM,iBAAiB,iBAAiB,WAAW,MAAM,iBAAiB;CAC1E,OAAO,MAAM,oBAAoB;EAAE,OAAO;EAAO;CAAe,CAAC;CACjE,OAAO,MAAM,SAAS,KAAK;AAC7B;;;;AChBA,MAAM,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;;;;;AAM5D,SAAgB,iCAA0C,OAA4B;CACpF,OAAO,SAAS,oBAAoB,OAA0B;EAC5D,MAAM,EAAE,QAAQ,YAAY,eAAe,OAAO,KAAK;EACvD,MAAM,EAAE,MAAM,SAAS,GAAG,WAAW;EACrC,MAAM,OAAuB;GAC3B,MAAM;GACN,OAAO,gBAAgB,MAAM;GAC7B,QAAQ;GACR,GAAG;EACL;EACA,MAAM,UAAU,IAAI,QAAQ,EAAE,gBAAgB,2BAA2B,CAAC;EAC1E,MAAM,QAAQ,iBAAiB,UAAU,OAAO;EAChD,IAAI,MAAM,SAAS,QAAQ,IAAI,eAAe,OAAO,MAAM,KAAK,UAAU,CAAC;EAC3E,OAAO,SAAS,KAAK,MAAM;GAAE;GAAQ;EAAQ,CAAC;CAChD;AACF;;;;;;;;AClBA,eAAsB,yBAAyB,SAA2C;CAExF,MAAM,SAAS,MAAM,OAAO;CAC5B,MAAM,UAAU,CAAC,GAAG,aAAa,OAAO,kBAAkB,CAAC,CAAC,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;CACvF,MAAM,cAAc;EAClB,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;CACV;CACA,KAAK,MAAM,UAAU,aAAa;EAEhC,MAAM,SAAS,QAAQ,QAAQ,SAAS,KAAK,WAAW,GAAG,OAAO,KAAK,EAAE,CAAC;EAC1E,KAAK,MAAM,wBAAQ,IAAI,IAAI,CAAC,OAAO,MAAM,GAAG,MAAM,CAAC,GACjD,OAAO,aAAa,MAAM,WAAW,OAAO,UAAU,CAAC;CAC3D;AACF;AAEA,SAAS,WAAW,YAA2D;CAE7E,MAAM,UAA+B;EACnC,MAAM,WAAW,QAAQ;EACzB,QAAQ,WAAW,UAAU;CAC/B;CACA,IAAI,WAAW,WAAW,QAAW,QAAQ,SAAS,WAAW;CACjE,OAAO;AACT;;;;AC9BA,MAAM,yBAAyB,EAC5B,MAAM,EAAE,OAAO;CAAE,SAAS,EAAE,OAAO;CAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAAE,CAAC,CAAC,CAAC,CAC1F,IAAI,CAAC;AAER,SAAS,2BAA2B,OAAwC;CAC1E,IAAI,EAAE,iBAAiB,QAAQ,OAAO;CACtC,IAAI;CACJ,IAAI;EACF,UAAU,KAAK,MAAM,MAAM,OAAO;CACpC,QAAQ;EACN,OAAO;CACT;CACA,MAAM,SAAS,uBAAuB,UAAU,OAAO;CACvD,OAAO,OAAO,UAAU,gBAAgB,WAAW,OAAO,IAAI,IAAI;AACpE;;;;;AAMA,SAAgB,4BAAqC,OAA4B;CAC/E,OAAO,SAAS,eAAe,OAAqD;EAClF,OAAO,eAAe,OAAO,2BAA2B,KAAK,KAAK,KAAK,CAAC,CAAC;CAC3E;AACF;;;;;;;;ACFA,SAAgB,sBAA+B,SAA0C;CACvF,MAAM,iBAAiB,4BAA4B,QAAQ,MAAM;CACjE,MAAM,sBAAsB,iCAAiC,QAAQ,MAAM;CAE3E,eAAe,aAAa,SAAwC;EAClE,MAAM,EAAE,gBAAgB,MAAM,QAAQ,QAAQ,OAAO,CAAC,CAAC;EACvD,MAAM,yBAAyB,WAAW;CAC5C;CAEA,eAAe,oBAAoB,OAAgB,SAAyC;EAE1F,IAAI,WAAW,KAAK,KAAK,WAAW,KAAK,GAAG,MAAM;EAClD,IAAI,iBAAiB,mBAAmB;GACtC,MAAM,aAAa,OAAO;GAE1B,MAAM,SAAS,EAAE,MAAM,QAAQ,OAAO,CAAC;EACzC;EAEA,MAAM,eAAe,KAAK;CAC5B;CAGA,eAAe,iBAAiB,OAAgB,SAA4C;EAE1F,IAAI,WAAW,KAAK,KAAK,WAAW,KAAK,GAAG,MAAM;EAClD,IAAI,iBAAiB,mBAAmB,MAAM,aAAa,OAAO;EAClE,OAAO,oBAAoB,KAAK;CAClC;CAsBA,OAAO;EAAE,yBApBuB,iBAAiB,EAAE,MAAM,WAAW,CAAC,CAAC,CAAC,OACrE,OAAO,EAAE,MAAM,cAAc;GAC3B,IAAI;IACF,OAAO,MAAM,KAAK;GACpB,SAAS,OAAO;IACd,OAAO,oBAAoB,OAAO,OAAO;GAC3C;EACF,CAa6B;EAAG,sBAVL,iBAAiB,EAAE,MAAM,UAAU,CAAC,CAAC,CAAC,OACjE,OAAO,EAAE,MAAM,cAAc;GAC3B,IAAI;IACF,OAAO,MAAM,KAAK;GACpB,SAAS,OAAO;IACd,OAAO,iBAAiB,OAAO,OAAO;GACxC;EACF,CAGmD;EAAG;EAAgB;CAAoB;AAC9F"}

package/dist/testing/outbox-repository.d.ts

@@ -1,5 +1,5 @@
-import { q as DomainEvent } from "../index-DvJUcSW1.js";
-import { A as IOutboxRepository } from "../index-Cchdg2aQ.js";
+import { W as DomainEvent } from "../index-DUFS0SJ_.js";
+import { A as IOutboxRepository } from "../index-CYHXOH08.js";
 //#region src/infrastructure/testing/outbox-repository-contract.d.ts
 /** Stored fields observed by the adapter contract, independent of a database library. */
 export type OutboxContractRow = {

package/dist/testing/payment-service.d.ts

@@ -0,0 +1,10 @@
+import { IPaymentService } from "../stripe/payment-service.js";
+import Stripe from "stripe";
+//#region src/infrastructure/testing/payment-service-contract.d.ts
+/**
+ * Test a Stripe payment adapter through native fetch injection without live payments.
+ * Each case constructs a fresh SDK instance and adapter; no Vitest dependency is required.
+ */
+export declare function paymentServiceContract(test: (name: string, run: () => Promise<void>) => void, create: (stripe: Stripe) => IPaymentService): void;
+//#endregion
+//# sourceMappingURL=payment-service.d.ts.map

package/dist/testing/payment-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service.d.ts","names":[],"sources":["../../src/infrastructure/testing/payment-service-contract.ts"],"mappings":";;;;;;;wBAUgB,uBACd,OAAO,cAAc,WAAW,wBAChC,SAAS,QAAQ,WAAW"}

package/dist/testing/payment-service.js

@@ -0,0 +1,76 @@
+import Stripe from "stripe";
+import { deepStrictEqual, equal, rejects } from "node:assert/strict";
+
+//#region src/infrastructure/testing/payment-service-contract.ts
+/**
+* Test a Stripe payment adapter through native fetch injection without live payments.
+* Each case constructs a fresh SDK instance and adapter; no Vitest dependency is required.
+*/
+function paymentServiceContract(test, create) {
+	test("payment checkout selects payment mode and retains the supplied key", async () => {
+		const fixture = paymentFixture(create);
+		await fixture.service.createCheckout({ customer: "cus_contract" }, { idempotencyKey: "checkout:contract" });
+		equal(fixture.requests[0]?.body.get("mode"), "payment");
+		equal(fixture.requests[0]?.headers.get("idempotency-key"), "checkout:contract");
+	});
+	test("payment method setup selects setup mode", async () => {
+		const fixture = paymentFixture(create);
+		await fixture.service.setupPaymentMethod({ customer: "cus_contract" }, { idempotencyKey: "setup:contract" });
+		equal(fixture.requests[0]?.body.get("mode"), "setup");
+	});
+	test("saved method payments confirm off-session", async () => {
+		const fixture = paymentFixture(create);
+		await fixture.service.chargeSavedMethod({
+			amount: 1e3,
+			currency: "usd",
+			customer: "cus_contract",
+			payment_method: "pm_contract"
+		}, { idempotencyKey: "charge:contract" });
+		equal(fixture.requests[0]?.body.get("confirm"), "true");
+		equal(fixture.requests[0]?.body.get("off_session"), "true");
+	});
+	test("payment reads preserve native statuses and response fields", async () => {
+		const payment = await paymentFixture(create).service.getPayment("pi_contract");
+		deepStrictEqual({
+			id: payment.id,
+			status: payment.status
+		}, {
+			id: "pi_contract",
+			status: "requires_capture"
+		});
+	});
+	test("card failures retain the native error contract", async () => {
+		const fixture = paymentFixture(create, Response.json({ error: {
+			type: "card_error",
+			code: "authentication_required",
+			message: "Authentication required"
+		} }, { status: 402 }));
+		await rejects(fixture.service.chargeSavedMethod({
+			amount: 1e3,
+			currency: "usd",
+			customer: "cus_contract",
+			payment_method: "pm_contract"
+		}, { idempotencyKey: "charge:contract" }), Stripe.errors.StripeCardError);
+	});
+}
+function paymentFixture(create, response = Response.json({
+	id: "pi_contract",
+	status: "requires_capture"
+})) {
+	const requests = [];
+	return {
+		service: create(new Stripe("sk_test_contract", { httpClient: Stripe.createFetchHttpClient(async (input, init) => {
+			const request = new Request(input, init);
+			requests.push({
+				headers: request.headers,
+				body: new URLSearchParams(new TextDecoder().decode(await request.arrayBuffer()))
+			});
+			return response.clone();
+		}) })),
+		requests
+	};
+}
+
+//#endregion
+export { paymentServiceContract };
+//# sourceMappingURL=payment-service.js.map

package/dist/testing/payment-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-service.js","names":[],"sources":["../../src/infrastructure/testing/payment-service-contract.ts"],"sourcesContent":["import { deepStrictEqual, equal, rejects } from 'node:assert/strict'\n\nimport Stripe from 'stripe'\n\nimport type { IPaymentService } from '../stripe/payment-service.ts'\n\n/**\n * Test a Stripe payment adapter through native fetch injection without live payments.\n * Each case constructs a fresh SDK instance and adapter; no Vitest dependency is required.\n */\nexport function paymentServiceContract(\n  test: (name: string, run: () => Promise<void>) => void,\n  create: (stripe: Stripe) => IPaymentService,\n): void {\n  test('payment checkout selects payment mode and retains the supplied key', async () => {\n    const fixture = paymentFixture(create)\n    await fixture.service.createCheckout(\n      { customer: 'cus_contract' },\n      { idempotencyKey: 'checkout:contract' },\n    )\n    equal(fixture.requests[0]?.body.get('mode'), 'payment')\n    equal(fixture.requests[0]?.headers.get('idempotency-key'), 'checkout:contract')\n  })\n\n  test('payment method setup selects setup mode', async () => {\n    const fixture = paymentFixture(create)\n    await fixture.service.setupPaymentMethod(\n      { customer: 'cus_contract' },\n      { idempotencyKey: 'setup:contract' },\n    )\n    equal(fixture.requests[0]?.body.get('mode'), 'setup')\n  })\n\n  test('saved method payments confirm off-session', async () => {\n    const fixture = paymentFixture(create)\n    await fixture.service.chargeSavedMethod(\n      { amount: 1000, currency: 'usd', customer: 'cus_contract', payment_method: 'pm_contract' },\n      { idempotencyKey: 'charge:contract' },\n    )\n    equal(fixture.requests[0]?.body.get('confirm'), 'true')\n    equal(fixture.requests[0]?.body.get('off_session'), 'true')\n  })\n\n  test('payment reads preserve native statuses and response fields', async () => {\n    const fixture = paymentFixture(create)\n    const payment = await fixture.service.getPayment('pi_contract')\n    deepStrictEqual(\n      { id: payment.id, status: payment.status },\n      { id: 'pi_contract', status: 'requires_capture' },\n    )\n  })\n\n  test('card failures retain the native error contract', async () => {\n    const response = Response.json(\n      {\n        error: {\n          type: 'card_error',\n          code: 'authentication_required',\n          message: 'Authentication required',\n        },\n      },\n      { status: 402 },\n    )\n    const fixture = paymentFixture(create, response)\n    await rejects(\n      fixture.service.chargeSavedMethod(\n        { amount: 1000, currency: 'usd', customer: 'cus_contract', payment_method: 'pm_contract' },\n        { idempotencyKey: 'charge:contract' },\n      ),\n      Stripe.errors.StripeCardError,\n    )\n  })\n}\n\nfunction paymentFixture(\n  create: (stripe: Stripe) => IPaymentService,\n  response = Response.json({ id: 'pi_contract', status: 'requires_capture' }),\n) {\n  const requests: { headers: Headers; body: URLSearchParams }[] = []\n  const stripe = new Stripe('sk_test_contract', {\n    httpClient: Stripe.createFetchHttpClient(async (input, init) => {\n      const request = new Request(input, init)\n      requests.push({\n        headers: request.headers,\n        body: new URLSearchParams(new TextDecoder().decode(await request.arrayBuffer())),\n      })\n      return response.clone()\n    }),\n  })\n  return { service: create(stripe), requests }\n}\n"],"mappings":";;;;;;;;AAUA,SAAgB,uBACd,MACA,QACM;CACN,KAAK,sEAAsE,YAAY;EACrF,MAAM,UAAU,eAAe,MAAM;EACrC,MAAM,QAAQ,QAAQ,eACpB,EAAE,UAAU,eAAe,GAC3B,EAAE,gBAAgB,oBAAoB,CACxC;EACA,MAAM,QAAQ,SAAS,EAAE,EAAE,KAAK,IAAI,MAAM,GAAG,SAAS;EACtD,MAAM,QAAQ,SAAS,EAAE,EAAE,QAAQ,IAAI,iBAAiB,GAAG,mBAAmB;CAChF,CAAC;CAED,KAAK,2CAA2C,YAAY;EAC1D,MAAM,UAAU,eAAe,MAAM;EACrC,MAAM,QAAQ,QAAQ,mBACpB,EAAE,UAAU,eAAe,GAC3B,EAAE,gBAAgB,iBAAiB,CACrC;EACA,MAAM,QAAQ,SAAS,EAAE,EAAE,KAAK,IAAI,MAAM,GAAG,OAAO;CACtD,CAAC;CAED,KAAK,6CAA6C,YAAY;EAC5D,MAAM,UAAU,eAAe,MAAM;EACrC,MAAM,QAAQ,QAAQ,kBACpB;GAAE,QAAQ;GAAM,UAAU;GAAO,UAAU;GAAgB,gBAAgB;EAAc,GACzF,EAAE,gBAAgB,kBAAkB,CACtC;EACA,MAAM,QAAQ,SAAS,EAAE,EAAE,KAAK,IAAI,SAAS,GAAG,MAAM;EACtD,MAAM,QAAQ,SAAS,EAAE,EAAE,KAAK,IAAI,aAAa,GAAG,MAAM;CAC5D,CAAC;CAED,KAAK,8DAA8D,YAAY;EAE7E,MAAM,UAAU,MADA,eAAe,MACH,CAAC,CAAC,QAAQ,WAAW,aAAa;EAC9D,gBACE;GAAE,IAAI,QAAQ;GAAI,QAAQ,QAAQ;EAAO,GACzC;GAAE,IAAI;GAAe,QAAQ;EAAmB,CAClD;CACF,CAAC;CAED,KAAK,kDAAkD,YAAY;EAWjE,MAAM,UAAU,eAAe,QAVd,SAAS,KACxB,EACE,OAAO;GACL,MAAM;GACN,MAAM;GACN,SAAS;EACX,EACF,GACA,EAAE,QAAQ,IAAI,CAE8B,CAAC;EAC/C,MAAM,QACJ,QAAQ,QAAQ,kBACd;GAAE,QAAQ;GAAM,UAAU;GAAO,UAAU;GAAgB,gBAAgB;EAAc,GACzF,EAAE,gBAAgB,kBAAkB,CACtC,GACA,OAAO,OAAO,eAChB;CACF,CAAC;AACH;AAEA,SAAS,eACP,QACA,WAAW,SAAS,KAAK;CAAE,IAAI;CAAe,QAAQ;AAAmB,CAAC,GAC1E;CACA,MAAM,WAA0D,CAAC;CAWjE,OAAO;EAAE,SAAS,OAAO,IAVN,OAAO,oBAAoB,EAC5C,YAAY,OAAO,sBAAsB,OAAO,OAAO,SAAS;GAC9D,MAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;GACvC,SAAS,KAAK;IACZ,SAAS,QAAQ;IACjB,MAAM,IAAI,gBAAgB,IAAI,YAAY,CAAC,CAAC,OAAO,MAAM,QAAQ,YAAY,CAAC,CAAC;GACjF,CAAC;GACD,OAAO,SAAS,MAAM;EACxB,CAAC,EACH,CAC8B,CAAC;EAAG;CAAS;AAC7C"}

package/dist/{webhook-verification-D6aGQfNi.js → webhook-verification-BBmjkHgI.js}

@@ -1,4 +1,4 @@
-import { rt as AppError } from "./core-ClSP5-V9.js";
+import { nt as AppError } from "./core-UUW2unJd.js";
 
 //#region src/infrastructure/http/webhook-verification.ts
 /** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */
@@ -15,4 +15,4 @@ var WebhookVerificationError = class extends AppError {
 
 //#endregion
 export { WebhookVerificationError as t };
-//# sourceMappingURL=webhook-verification-D6aGQfNi.js.map
+//# sourceMappingURL=webhook-verification-BBmjkHgI.js.map

package/dist/{webhook-verification-D6aGQfNi.js.map → webhook-verification-BBmjkHgI.js.map}

@@ -1 +1 @@
-{"version":3,"file":"webhook-verification-D6aGQfNi.js","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"sourcesContent":["import { AppError } from '@/core'\n\n/** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */\nexport class WebhookVerificationError extends AppError {\n  readonly _tag = 'WebhookVerificationError'\n  readonly classification = 'terminal'\n\n  /** Keep secrets and payload details out of the public message. */\n  constructor(\n    readonly reason: 'missing_headers' | 'invalid_signature' | 'invalid_payload',\n    cause?: unknown,\n  ) {\n    super(`Webhook rejected: ${reason}`, { cause })\n  }\n}\n\n/** A verified event, an ignored event, or an invalid request. */\nexport type WebhookVerification<Event> =\n  | { readonly outcome: 'event'; readonly event: Event }\n  | { readonly outcome: 'ignored'; readonly type: string }\n  | { readonly outcome: 'rejected'; readonly error: WebhookVerificationError }\n\n/** The provider owns signature verification, timestamp tolerance, and payload parsing. */\nexport interface WebhookVerifier<Event> {\n  /** Verify the exact body before parsing it. Return invalid requests; throw operational failures. */\n  verify(body: string, headers: Headers): Promise<WebhookVerification<Event>>\n}\n"],"mappings":";;;;AAGA,IAAa,2BAAb,cAA8C,SAAS;CAM1C;CALX,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YACE,AAAS,QACT,OACA;EACA,MAAM,qBAAqB,UAAU,EAAE,MAAM,CAAC;EAHrC;CAIX;AACF"}
+{"version":3,"file":"webhook-verification-BBmjkHgI.js","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"sourcesContent":["import { AppError } from '@/core'\n\n/** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */\nexport class WebhookVerificationError extends AppError {\n  readonly _tag = 'WebhookVerificationError'\n  readonly classification = 'terminal'\n\n  /** Keep secrets and payload details out of the public message. */\n  constructor(\n    readonly reason: 'missing_headers' | 'invalid_signature' | 'invalid_payload',\n    cause?: unknown,\n  ) {\n    super(`Webhook rejected: ${reason}`, { cause })\n  }\n}\n\n/** A verified event, an ignored event, or an invalid request. */\nexport type WebhookVerification<Event> =\n  | { readonly outcome: 'event'; readonly event: Event }\n  | { readonly outcome: 'ignored'; readonly type: string }\n  | { readonly outcome: 'rejected'; readonly error: WebhookVerificationError }\n\n/** The provider owns signature verification, timestamp tolerance, and payload parsing. */\nexport interface WebhookVerifier<Event> {\n  /** Verify the exact body before parsing it. Return invalid requests; throw operational failures. */\n  verify(body: string, headers: Headers): Promise<WebhookVerification<Event>>\n}\n"],"mappings":";;;;AAGA,IAAa,2BAAb,cAA8C,SAAS;CAM1C;CALX,AAAS,OAAO;CAChB,AAAS,iBAAiB;;CAG1B,YACE,AAAS,QACT,OACA;EACA,MAAM,qBAAqB,UAAU,EAAE,MAAM,CAAC;EAHrC;CAIX;AACF"}

package/dist/{webhook-verification-BcQQG-vY.d.ts → webhook-verification-BuxPzdr4.d.ts}

@@ -1,4 +1,4 @@
-import { $t as AppError } from "./index-DvJUcSW1.js";
+import { Xt as AppError } from "./index-DUFS0SJ_.js";
 //#region src/infrastructure/http/webhook-verification.d.ts
 /** A webhook cannot be trusted or parsed. The HTTP handler logs the rejection once. */
 declare class WebhookVerificationError extends AppError {
@@ -26,4 +26,4 @@ interface WebhookVerifier<Event> {
 }
 //#endregion
 export { WebhookVerificationError as n, WebhookVerifier as r, WebhookVerification as t };
-//# sourceMappingURL=webhook-verification-BcQQG-vY.d.ts.map
+//# sourceMappingURL=webhook-verification-BuxPzdr4.d.ts.map

package/dist/{webhook-verification-BcQQG-vY.d.ts.map → webhook-verification-BuxPzdr4.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"webhook-verification-BcQQG-vY.d.ts","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"mappings":";;;cAGa,iCAAiC;WAMjC;WALF;WACA;;EAGT,YACW,qEACT;;;KAOQ,oBAAoB;WACjB;WAA2B,OAAO;;WAClC;WAA6B;;WAC7B;WAA8B,OAAO;;;UAGnC,gBAAgB;;EAE/B,OAAO,cAAc,SAAS,UAAU,QAAQ,oBAAoB"}
+{"version":3,"file":"webhook-verification-BuxPzdr4.d.ts","names":[],"sources":["../src/infrastructure/http/webhook-verification.ts"],"mappings":";;;cAGa,iCAAiC;WAMjC;WALF;WACA;;EAGT,YACW,qEACT;;;KAOQ,oBAAoB;WACjB;WAA2B,OAAO;;WAClC;WAA6B;;WAC7B;WAA8B,OAAO;;;UAGnC,gBAAgB;;EAE/B,OAAO,cAAc,SAAS,UAAU,QAAQ,oBAAoB"}