pome-sh 0.6.6

package/node_modules/@pome-sh/twin-stripe/dist/scripts/smoke.js

@@ -0,0 +1,220 @@
+// SPDX-License-Identifier: Apache-2.0
+// End-to-end smoke for @pome-sh/twin-stripe.
+//
+// Boots the built server (or assumes one is running on PORT) and walks
+// the full x402 settlement flow:
+//   1. healthz returns 200 with the expected shape
+//   2. POST /v1/payment_intents → status=requires_action with deposit address
+//   3. POST /v1/test_helpers/.../simulate_crypto_deposit → status=succeeded
+//   4. GET /v1/balance reflects the PI amount
+//   5. GET /v1/events lists the 5 expected events
+//   6. an unsupported route returns the loud 501 envelope
+//
+// Exits 0 on full success, non-zero on any failure. Prints colored
+// progress to stderr; the final line on stdout is "OK" or "FAIL: <why>"
+// for easy scripting.
+import { spawn } from "node:child_process";
+import { setTimeout as sleep } from "node:timers/promises";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+const DEFAULT_PORT = 40_000 + Math.floor(Math.random() * 10_000);
+const port = Number(process.env.PORT ?? String(DEFAULT_PORT));
+const baseUrl = `http://127.0.0.1:${port}`;
+const sid = "default";
+const apiKey = "sk_test_pome_default";
+const c = {
+    step: "\x1b[36m",
+    ok: "\x1b[32m",
+    fail: "\x1b[31m",
+    dim: "\x1b[2m",
+    bold: "\x1b[1m",
+    reset: "\x1b[0m",
+};
+function log(stage, msg) {
+    const prefix = stage === "ok" ? `${c.ok}✓${c.reset}` :
+        stage === "fail" ? `${c.fail}✗${c.reset}` :
+            `${c.step}step${c.reset}`;
+    process.stderr.write(`${prefix} ${msg}\n`);
+}
+function assertOk(cond, msg) {
+    if (!cond) {
+        log("fail", msg);
+        throw new Error(msg);
+    }
+}
+async function waitForHealthz(timeoutMs, getChildExit) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        const childExit = getChildExit?.();
+        if (childExit) {
+            throw new Error(`server exited before healthz became ready: ${childExit}`);
+        }
+        try {
+            const r = await fetch(`${baseUrl}/healthz`);
+            if (r.ok)
+                return;
+        }
+        catch {
+            /* server not ready yet */
+        }
+        await sleep(100);
+    }
+    throw new Error(`healthz did not return 200 within ${timeoutMs}ms`);
+}
+async function main() {
+    process.stderr.write(`${c.bold}\n📋 twin-stripe end-to-end smoke${c.reset}\n\n`);
+    // Boot the server we just built. If POME_SMOKE_NO_BOOT=1, assume one
+    // is already running (CI uses this to test against a snapshot).
+    let serverProc;
+    let dbDir;
+    if (process.env.POME_SMOKE_NO_BOOT !== "1") {
+        dbDir = mkdtempSync(join(tmpdir(), "twin-stripe-smoke-"));
+        let childExit;
+        let childStderr = "";
+        serverProc = spawn("node", ["dist/src/server.js"], {
+            stdio: ["ignore", "pipe", "pipe"],
+            env: {
+                ...process.env,
+                PORT: String(port),
+                STRIPE_CLONE_HOST: "127.0.0.1",
+                STRIPE_CLONE_DB: join(dbDir, "smoke.db"),
+                TWIN_AUTH_SECRET: process.env.TWIN_AUTH_SECRET ?? "smoke-secret-not-for-prod",
+            },
+        });
+        serverProc.stderr?.on("data", (chunk) => {
+            childStderr = `${childStderr}${String(chunk)}`.slice(-4000);
+        });
+        serverProc.once("exit", (code, signal) => {
+            const status = code === null ? `signal=${signal}` : `code=${code}`;
+            childExit = childStderr.trim()
+                ? `${status}; stderr=${childStderr.trim()}`
+                : status;
+        });
+        await waitForHealthz(5000, () => childExit);
+        log("step", `server booted on :${port}`);
+    }
+    else {
+        log("step", `assuming server on :${port} (POME_SMOKE_NO_BOOT=1)`);
+    }
+    try {
+        // 1. healthz
+        {
+            const r = await fetch(`${baseUrl}/healthz`);
+            assertOk(r.ok, `1. healthz returned ${r.status}`);
+            const body = await r.json();
+            assertOk(body.twin === "stripe", `1. healthz twin=${body.twin}, expected "stripe"`);
+            assertOk(body.implementation === "stripe_clone", `1. implementation=${body.implementation}`);
+            assertOk(body.tools === 12, `1. tools=${body.tools}, expected 12`);
+            log("ok", `healthz: tools=${body.tools}, fidelity=${body.fidelity}, tthw=${body.tthw_seconds.toFixed(2)}s`);
+        }
+        const headers = {
+            Authorization: `Bearer ${apiKey}`,
+            "Content-Type": "application/json",
+        };
+        // 2. create PI
+        let piId = "";
+        let depositAddress = "";
+        {
+            const r = await fetch(`${baseUrl}/s/${sid}/v1/payment_intents`, {
+                method: "POST",
+                headers,
+                body: JSON.stringify({
+                    amount: 1000,
+                    currency: "usd",
+                    payment_method_types: ["crypto"],
+                    payment_method_options: {
+                        crypto: { mode: "deposit", deposit_options: { networks: ["base"] } },
+                    },
+                }),
+            });
+            const piRaw = await r.text();
+            assertOk(r.ok, `2. create PI returned ${r.status}: ${piRaw}`);
+            const pi = JSON.parse(piRaw);
+            assertOk(pi.id.startsWith("pi_"), `2. PI id ${pi.id} doesn't start with pi_`);
+            assertOk(pi.status === "requires_action", `2. PI status=${pi.status}, expected requires_action`);
+            assertOk(pi.amount === 1000, `2. PI amount=${pi.amount}, expected 1000`);
+            assertOk(pi.currency === "usd", `2. PI currency=${pi.currency}, expected usd`);
+            const next = pi.next_action;
+            depositAddress = next.crypto_display_details.deposit_addresses.base.address;
+            assertOk(/^0x[0-9a-f]{40}$/.test(depositAddress), `2. bad deposit address: ${depositAddress}`);
+            piId = pi.id;
+            log("ok", `created ${piId} with deposit ${c.dim}${depositAddress}${c.reset}`);
+        }
+        // 3. simulate deposit
+        {
+            const r = await fetch(`${baseUrl}/s/${sid}/v1/test_helpers/payment_intents/${piId}/simulate_crypto_deposit`, {
+                method: "POST",
+                headers,
+                body: "{}",
+            });
+            assertOk(r.ok, `3. simulate_crypto_deposit returned ${r.status}`);
+            const settled = await r.json();
+            assertOk(settled.status === "succeeded", `3. PI status after settle=${settled.status}, expected succeeded`);
+            assertOk(settled.latest_charge.startsWith("ch_"), `3. latest_charge=${settled.latest_charge}, expected ch_*`);
+            log("ok", `simulated deposit, PI succeeded, latest_charge=${settled.latest_charge}`);
+        }
+        // 4. balance
+        {
+            const r = await fetch(`${baseUrl}/s/${sid}/v1/balance`, { headers });
+            assertOk(r.ok, `4. balance returned ${r.status}`);
+            const balance = await r.json();
+            const usd = balance.available.find((row) => row.currency === "usd");
+            assertOk(usd, `4. no usd row in balance.available`);
+            assertOk(usd.amount === 1000, `4. balance.available.usd.amount=${usd.amount}, expected 1000`);
+            log("ok", `balance.available.usd = $10.00 (1000 cents)`);
+        }
+        // 5. events
+        {
+            const r = await fetch(`${baseUrl}/s/${sid}/v1/events`, { headers });
+            assertOk(r.ok, `5. events returned ${r.status}`);
+            const list = await r.json();
+            const types = list.data.map((e) => e.type).sort();
+            const expected = [
+                "charge.succeeded",
+                "payment_intent.created",
+                "payment_intent.processing",
+                "payment_intent.requires_action",
+                "payment_intent.succeeded",
+            ];
+            assertOk(JSON.stringify(types) === JSON.stringify(expected), `5. events=${JSON.stringify(types)}, expected ${JSON.stringify(expected)}`);
+            log("ok", `5 events emitted: ${types.join(", ")}`);
+        }
+        // 6. unsupported route → loud 501
+        {
+            const r = await fetch(`${baseUrl}/s/${sid}/v1/customers`, { headers });
+            assertOk(r.status === 501, `6. /v1/customers returned ${r.status}, expected 501`);
+            const env = await r.json();
+            assertOk(env.error.code === "endpoint_not_supported", `6. error.code=${env.error.code}`);
+            assertOk(env.error.fidelity === "unsupported", `6. error.fidelity=${env.error.fidelity}`);
+            log("ok", `loud 501 envelope: code=${env.error.code}, fidelity=${env.error.fidelity}`);
+        }
+        process.stderr.write(`\n${c.ok}${c.bold}✓ smoke passed${c.reset}\n`);
+        process.stdout.write("OK\n");
+        process.exit(0);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        process.stderr.write(`\n${c.fail}${c.bold}✗ smoke failed${c.reset}: ${msg}\n`);
+        process.stdout.write(`FAIL: ${msg}\n`);
+        process.exit(1);
+    }
+    finally {
+        if (serverProc) {
+            serverProc.kill("SIGTERM");
+            // give it a moment to flush
+            await sleep(100);
+        }
+        if (dbDir) {
+            try {
+                rmSync(dbDir, { recursive: true, force: true });
+            }
+            catch { }
+        }
+    }
+}
+main().catch((err) => {
+    process.stderr.write(`fatal: ${err}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=smoke.js.map

package/node_modules/@pome-sh/twin-stripe/dist/scripts/smoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke.js","sourceRoot":"","sources":["../../scripts/smoke.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6CAA6C;AAC7C,EAAE;AACF,uEAAuE;AACvE,iCAAiC;AACjC,mDAAmD;AACnD,8EAA8E;AAC9E,4EAA4E;AAC5E,8CAA8C;AAC9C,kDAAkD;AAClD,0DAA0D;AAC1D,EAAE;AACF,mEAAmE;AACnE,wEAAwE;AACxE,sBAAsB;AAEtB,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,YAAY,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC;AACjE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;AAC9D,MAAM,OAAO,GAAG,oBAAoB,IAAI,EAAE,CAAC;AAC3C,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,MAAM,GAAG,sBAAsB,CAAC;AAEtC,MAAM,CAAC,GAAG;IACR,IAAI,EAAE,UAAU;IAChB,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,GAAG,EAAE,SAAS;IACd,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;CACjB,CAAC;AAEF,SAAS,GAAG,CAAC,KAA6B,EAAE,GAAW;IACrD,MAAM,MAAM,GACV,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACvC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3C,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa,EAAE,GAAW;IAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,SAAiB,EACjB,YAAuC;IAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,YAAY,EAAE,EAAE,CAAC;QACnC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,8CAA8C,SAAS,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,CAAC,CAAC;YAC5C,IAAI,CAAC,CAAC,EAAE;gBAAE,OAAO;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,oCAAoC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAEjF,qEAAqE;IACrE,gEAAgE;IAChE,IAAI,UAAoC,CAAC;IACzC,IAAI,KAAyB,CAAC;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,EAAE,CAAC;QAC3C,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC1D,IAAI,SAA6B,CAAC;QAClC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,oBAAoB,CAAC,EAAE;YACjD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBAClB,iBAAiB,EAAE,WAAW;gBAC9B,eAAe,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC;gBACxC,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,2BAA2B;aAC9E;SACF,CAAC,CAAC;QACH,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACtC,WAAW,GAAG,GAAG,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;YACnE,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE;gBAC5B,CAAC,CAAC,GAAG,MAAM,YAAY,WAAW,CAAC,IAAI,EAAE,EAAE;gBAC3C,CAAC,CAAC,MAAM,CAAC;QACb,CAAC,CAAC,CAAC;QACH,MAAM,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,GAAG,CAAC,MAAM,EAAE,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,EAAE,uBAAuB,IAAI,yBAAyB,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC;QACH,aAAa;QACb,CAAC;YACC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,CAAC,CAAC;YAC5C,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAA6B,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,mBAAmB,IAAI,CAAC,IAAI,qBAAqB,CAAC,CAAC;YACpF,QAAQ,CAAC,IAAI,CAAC,cAAc,KAAK,cAAc,EAAE,qBAAqB,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC7F,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,EAAE,YAAY,IAAI,CAAC,KAAK,eAAe,CAAC,CAAC;YACnE,GAAG,CAAC,IAAI,EAAE,kBAAkB,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,QAAQ,UAAW,IAAI,CAAC,YAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1H,CAAC;QAED,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QAEF,eAAe;QACf,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,cAAc,GAAG,EAAE,CAAC;QACxB,CAAC;YACC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,MAAM,GAAG,qBAAqB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,KAAK;oBACf,oBAAoB,EAAE,CAAC,QAAQ,CAAC;oBAChC,sBAAsB,EAAE;wBACtB,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;qBACrE;iBACF,CAAC;aACH,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7B,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC,CAAC;YAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAC;YACxD,QAAQ,CAAE,EAAE,CAAC,EAAa,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAC1F,QAAQ,CAAC,EAAE,CAAC,MAAM,KAAK,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,MAAM,4BAA4B,CAAC,CAAC;YACjG,QAAQ,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,EAAE,gBAAgB,EAAE,CAAC,MAAM,iBAAiB,CAAC,CAAC;YACzE,QAAQ,CAAC,EAAE,CAAC,QAAQ,KAAK,KAAK,EAAE,kBAAkB,EAAE,CAAC,QAAQ,gBAAgB,CAAC,CAAC;YAC/E,MAAM,IAAI,GAAG,EAAE,CAAC,WAAkF,CAAC;YACnG,cAAc,GAAG,IAAI,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;YAC5E,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,2BAA2B,cAAc,EAAE,CAAC,CAAC;YAC/F,IAAI,GAAG,EAAE,CAAC,EAAY,CAAC;YACvB,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,iBAAiB,CAAC,CAAC,GAAG,GAAG,cAAc,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,sBAAsB;QACtB,CAAC;YACC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,MAAM,GAAG,oCAAoC,IAAI,0BAA0B,EAAE;gBAC3G,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,uCAAuC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,IAAI,EAA6B,CAAC;YAC1D,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,6BAA6B,OAAO,CAAC,MAAM,sBAAsB,CAAC,CAAC;YAC5G,QAAQ,CAAE,OAAO,CAAC,aAAwB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,oBAAoB,OAAO,CAAC,aAAa,iBAAiB,CAAC,CAAC;YAC1H,GAAG,CAAC,IAAI,EAAE,kDAAkD,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,aAAa;QACb,CAAC;YACC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,MAAM,GAAG,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACrE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,IAAI,EAAgE,CAAC;YAC7F,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;YACpE,QAAQ,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;YACpD,QAAQ,CAAC,GAAI,CAAC,MAAM,KAAK,IAAI,EAAE,mCAAmC,GAAI,CAAC,MAAM,iBAAiB,CAAC,CAAC;YAChG,GAAG,CAAC,IAAI,EAAE,6CAA6C,CAAC,CAAC;QAC3D,CAAC;QAED,YAAY;QACZ,CAAC;YACC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,MAAM,GAAG,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACpE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAuC,CAAC;YACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG;gBACf,kBAAkB;gBAClB,wBAAwB;gBACxB,2BAA2B;gBAC3B,gCAAgC;gBAChC,0BAA0B;aAC3B,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,aAAa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACzI,GAAG,CAAC,IAAI,EAAE,qBAAqB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,kCAAkC;QAClC,CAAC;YACC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,MAAM,GAAG,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,6BAA6B,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC;YAClF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,IAAI,EAAmD,CAAC;YAC5E,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,iBAAiB,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACzF,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,aAAa,EAAE,qBAAqB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1F,GAAG,CAAC,IAAI,EAAE,2BAA2B,GAAG,CAAC,KAAK,CAAC,IAAI,cAAc,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;QAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,4BAA4B;YAC5B,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACnE,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/admin-gate.d.ts

@@ -0,0 +1,35 @@
+import type { Context, MiddlewareHandler } from "hono";
+/** Context variable consulted first by getClientIp(). */
+export declare const CLIENT_IP_VAR = "pomeClientIp";
+/**
+ * Explicitly record the peer address for this request. Alternate serving
+ * bridges (or tests) call this from an upstream middleware so the gate never
+ * reaches into runtime-private internals.
+ *
+ * SECURITY: the value passed here MUST be the transport-level peer address
+ * (the socket's remote address as reported by the serving bridge). It takes
+ * precedence over getConnInfo, so deriving it from any request-controlled
+ * input — X-Forwarded-For or any other client-supplied header — would make
+ * the loopback-only admin gate spoofable by whoever sets that header. If you
+ * are behind a reverse proxy, use TWIN_ADMIN_TOKEN instead of trying to
+ * recover the "real" client IP.
+ */
+export declare function setClientIp(c: Context, ip: string): void;
+/**
+ * Runtime-neutral client-IP accessor (FDRS-587). Resolution order:
+ *   1. Explicit override set via setClientIp() (alternate bridges / tests).
+ *   2. The node serving bridge's official getConnInfo helper.
+ *   3. undefined — no live socket (e.g. app.request() in-process tests).
+ */
+export declare function getClientIp(c: Context): Promise<string | undefined>;
+export declare function isLoopbackAddress(remote: string): boolean;
+export interface AdminGateOptions {
+    /** 403 response factory so each twin keeps its own error envelope. */
+    forbidden?: () => Response;
+}
+/**
+ * Admin endpoint protection shared by every twin (FDRS-616). Each twin's
+ * auth.ts wraps this with its own `forbidden` envelope. Semantics are
+ * identical to the per-twin requireAdminAuth() copies this replaces.
+ */
+export declare function createAdminGate(options?: AdminGateOptions): MiddlewareHandler;

package/node_modules/@pome-sh/twin-stripe/dist/src/admin-gate.js

@@ -0,0 +1,116 @@
+// SPDX-License-Identifier: Apache-2.0
+// MIRRORED FILE — byte-identical copies enforced by
+// scripts/check-admin-gate-mirrors.mjs (root script `lint:admin-gate-mirrors`,
+// wired into .github/workflows/ci.yml). Edit the canonical copy, then re-copy.
+//
+// Canonical: packages/sdk/src/admin-gate.ts
+// Mirrors:   packages/twin-github/src/admin-gate.ts
+//            packages/twin-slack/src/admin-gate.ts
+//            packages/twin-stripe/src/admin-gate.ts
+//            cli/src/twin-github/admin-gate.ts
+//            cli/src/twin-slack/admin-gate.ts
+//
+// Shared admin-endpoint gate (FDRS-587 / FDRS-616). Twins cannot depend on
+// @pome-sh/sdk (twin-stripe is vendored into the CLI as a file: tarball, so
+// a workspace dep would break off-workspace installs) — hence the mirror
+// pattern, same as redaction.ts.
+//
+// Tiered policy (semantics unchanged from the per-twin copies it replaces):
+//   1. TWIN_ADMIN_TOKEN set → require X-Admin-Token to match (timing-safe).
+//   2. TWIN_ADMIN_TOKEN unset + client IP known → allow only loopback.
+//   3. TWIN_ADMIN_TOKEN unset + client IP unknown → deny in production,
+//      allow otherwise (accepted fail-open for in-process test harnesses).
+import { timingSafeEqual } from "node:crypto";
+/** Context variable consulted first by getClientIp(). */
+export const CLIENT_IP_VAR = "pomeClientIp";
+let nodeGetConnInfo;
+// Lazily import the node bridge's official ConnInfo helper. Dynamic because
+// @pome-sh/sdk declares @hono/node-server as an *optional* peer dependency —
+// a static import would crash consumers that never bind a Node socket.
+// Works with both @hono/node-server v1 and v2 (same subpath + signature).
+function loadNodeGetConnInfo() {
+    nodeGetConnInfo ??= import("@hono/node-server/conninfo").then((mod) => mod.getConnInfo, () => undefined);
+    return nodeGetConnInfo;
+}
+/**
+ * Explicitly record the peer address for this request. Alternate serving
+ * bridges (or tests) call this from an upstream middleware so the gate never
+ * reaches into runtime-private internals.
+ *
+ * SECURITY: the value passed here MUST be the transport-level peer address
+ * (the socket's remote address as reported by the serving bridge). It takes
+ * precedence over getConnInfo, so deriving it from any request-controlled
+ * input — X-Forwarded-For or any other client-supplied header — would make
+ * the loopback-only admin gate spoofable by whoever sets that header. If you
+ * are behind a reverse proxy, use TWIN_ADMIN_TOKEN instead of trying to
+ * recover the "real" client IP.
+ */
+export function setClientIp(c, ip) {
+    c.set(CLIENT_IP_VAR, ip);
+}
+/**
+ * Runtime-neutral client-IP accessor (FDRS-587). Resolution order:
+ *   1. Explicit override set via setClientIp() (alternate bridges / tests).
+ *   2. The node serving bridge's official getConnInfo helper.
+ *   3. undefined — no live socket (e.g. app.request() in-process tests).
+ */
+export async function getClientIp(c) {
+    const override = c.get(CLIENT_IP_VAR);
+    if (typeof override === "string" && override.length > 0)
+        return override;
+    const getConnInfo = await loadNodeGetConnInfo();
+    if (!getConnInfo)
+        return undefined;
+    try {
+        const address = getConnInfo(c).remote?.address;
+        return typeof address === "string" && address.length > 0 ? address : undefined;
+    }
+    catch {
+        // The helper throws when the context has no node socket behind it.
+        return undefined;
+    }
+}
+export function isLoopbackAddress(remote) {
+    return (remote === "127.0.0.1" ||
+        remote === "::1" ||
+        remote === "::ffff:127.0.0.1" ||
+        remote === "localhost");
+}
+function defaultForbidden() {
+    return Response.json({ message: "Forbidden", documentation_url: "" }, { status: 403 });
+}
+/**
+ * Admin endpoint protection shared by every twin (FDRS-616). Each twin's
+ * auth.ts wraps this with its own `forbidden` envelope. Semantics are
+ * identical to the per-twin requireAdminAuth() copies this replaces.
+ */
+export function createAdminGate(options = {}) {
+    const forbidden = options.forbidden ?? defaultForbidden;
+    return async (c, next) => {
+        const adminToken = process.env.TWIN_ADMIN_TOKEN;
+        if (adminToken && adminToken.length > 0) {
+            // Web Headers lookups are case-insensitive, so one lookup covers every
+            // casing a client might send.
+            const provided = c.req.header("X-Admin-Token");
+            if (!provided)
+                return forbidden();
+            const a = Buffer.from(provided);
+            const b = Buffer.from(adminToken);
+            if (a.length !== b.length || !timingSafeEqual(a, b))
+                return forbidden();
+            await next();
+            return;
+        }
+        const remote = await getClientIp(c);
+        if (!remote) {
+            if (process.env.NODE_ENV === "production")
+                return forbidden();
+            await next();
+            return;
+        }
+        if (!isLoopbackAddress(remote))
+            return forbidden();
+        await next();
+    };
+}
+//# sourceMappingURL=admin-gate.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/admin-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-gate.js","sourceRoot":"","sources":["../../src/admin-gate.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,oDAAoD;AACpD,+EAA+E;AAC/E,+EAA+E;AAC/E,EAAE;AACF,4CAA4C;AAC5C,oDAAoD;AACpD,mDAAmD;AACnD,oDAAoD;AACpD,+CAA+C;AAC/C,8CAA8C;AAC9C,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,iCAAiC;AACjC,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,2EAA2E;AAG3E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;AAO5C,IAAI,eAA+D,CAAC;AAEpE,4EAA4E;AAC5E,6EAA6E;AAC7E,uEAAuE;AACvE,0EAA0E;AAC1E,SAAS,mBAAmB;IAC1B,eAAe,KAAK,MAAM,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAuC,EACpD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,EAAU;IAC/C,CAA0B,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAU;IAC1C,MAAM,QAAQ,GAAI,CAA0B,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzE,MAAM,WAAW,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC;QAC/C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,CACL,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,KAAK;QAChB,MAAM,KAAK,kBAAkB;QAC7B,MAAM,KAAK,WAAW,CACvB,CAAC;AACJ,CAAC;AAOD,SAAS,gBAAgB;IACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAA4B,EAAE;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAChD,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,uEAAuE;YACvE,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,SAAS,EAAE,CAAC;YACxE,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBAAE,OAAO,SAAS,EAAE,CAAC;YAC9D,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/api-keys.d.ts

@@ -0,0 +1,27 @@
+import type { ApiKeyRow, TwinStripeDatabase } from "./types.js";
+export type MintApiKeyInput = {
+    sid: string;
+    account_id?: string;
+    /** Override key for tests / seed. Must already begin with sk_test_pome_. */
+    key?: string;
+};
+/**
+ * Mint a new Stripe-shaped api key bound to a session id. The Stripe SDK
+ * sends `Authorization: Bearer <key>` and the twin resolves the row to a
+ * sid. Pattern from D-ENG-1.
+ */
+export declare function mintApiKey(db: TwinStripeDatabase, input: MintApiKeyInput): ApiKeyRow;
+/** Revoke a key without deleting (audit). */
+export declare function revokeApiKey(db: TwinStripeDatabase, key: string): void;
+/**
+ * Resolve a bearer token (the value after `Bearer `) to a session if it is
+ * an active api key. Returns undefined if the key is missing, malformed,
+ * or revoked. Caller is responsible for distinguishing api keys from JWTs
+ * via the `sk_test_pome_` / `rk_test_pome_` prefix.
+ */
+export declare function resolveSidFromKey(db: TwinStripeDatabase, token: string): {
+    sid: string;
+    account_id: string;
+} | undefined;
+/** Heuristic prefix check — does this token look like one of our api keys? */
+export declare function looksLikeApiKey(token: string): boolean;

package/node_modules/@pome-sh/twin-stripe/dist/src/api-keys.js

@@ -0,0 +1,49 @@
+import { newApiKey } from "./ids.js";
+import { nowIso } from "./util.js";
+/**
+ * Mint a new Stripe-shaped api key bound to a session id. The Stripe SDK
+ * sends `Authorization: Bearer <key>` and the twin resolves the row to a
+ * sid. Pattern from D-ENG-1.
+ */
+export function mintApiKey(db, input) {
+    const key = input.key ?? newApiKey();
+    const account_id = input.account_id ?? `acct_${input.sid}`;
+    const created_at = nowIso();
+    db.prepare(`INSERT INTO api_keys (key, sid, account_id, created_at, revoked_at)
+     VALUES (?, ?, ?, ?, NULL)
+     ON CONFLICT(key) DO UPDATE SET
+       sid = excluded.sid,
+       account_id = excluded.account_id,
+       revoked_at = NULL`).run(key, input.sid, account_id, created_at);
+    return { key, sid: input.sid, account_id, created_at, revoked_at: null };
+}
+/** Revoke a key without deleting (audit). */
+export function revokeApiKey(db, key) {
+    db.prepare(`UPDATE api_keys SET revoked_at = ? WHERE key = ?`).run(nowIso(), key);
+}
+/**
+ * Resolve a bearer token (the value after `Bearer `) to a session if it is
+ * an active api key. Returns undefined if the key is missing, malformed,
+ * or revoked. Caller is responsible for distinguishing api keys from JWTs
+ * via the `sk_test_pome_` / `rk_test_pome_` prefix.
+ */
+export function resolveSidFromKey(db, token) {
+    const row = db
+        .prepare(`SELECT key, sid, account_id, created_at, revoked_at
+         FROM api_keys
+        WHERE key = ? AND revoked_at IS NULL`)
+        .get(token);
+    if (!row)
+        return undefined;
+    return { sid: row.sid, account_id: row.account_id };
+}
+/** Heuristic prefix check — does this token look like one of our api keys? */
+export function looksLikeApiKey(token) {
+    return (token.startsWith("sk_test_pome_") ||
+        token.startsWith("rk_test_pome_") ||
+        // Tolerate raw Stripe-style sk_test_* / rk_test_* in case a downstream
+        // user mints their own non-pome-prefixed test keys via the admin API.
+        token.startsWith("sk_test_") ||
+        token.startsWith("rk_test_"));
+}
+//# sourceMappingURL=api-keys.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../src/api-keys.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AASnC;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,EAAsB,EACtB,KAAsB;IAEtB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE,CAAC;IACrC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC;IAC3D,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;IAC5B,EAAE,CAAC,OAAO,CACR;;;;;yBAKqB,CACtB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,YAAY,CAAC,EAAsB,EAAE,GAAW;IAC9D,EAAE,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAChE,MAAM,EAAE,EACR,GAAG,CACJ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAsB,EACtB,KAAa;IAEb,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN;;6CAEuC,CACxC;SACA,GAAG,CAAC,KAAK,CAA0B,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,CACL,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;QACjC,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC;QACjC,uEAAuE;QACvE,sEAAsE;QACtE,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAC5B,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAC7B,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/app.d.ts

@@ -0,0 +1,50 @@
+import { Hono } from "hono";
+import { type FailureInjectionStore } from "./failure-injection.js";
+import { type StateProvider } from "./pome-routes.js";
+import type { Recorder, TwinStripeDatabase } from "./types.js";
+export type TwinStripeAppOptions = {
+    db?: TwinStripeDatabase;
+    recorder?: Recorder;
+    /** Defaults to `Date.now()` at app creation. */
+    startedAtMs?: number;
+    runId?: string;
+    /** Skip default seed (for empty-state tests). */
+    noSeed?: boolean;
+    /**
+     * Pre-built failure-injection store, supplied when the embedder needs
+     * to seed `failure_injection` rules into the store BEFORE the app is
+     * wired up (e.g. `server.ts` applies `loadSeedFromEnv()` against this
+     * store ahead of constructing the app, see FDRS-369). When omitted,
+     * the app creates its own empty store.
+     */
+    failureInjection?: FailureInjectionStore;
+    /**
+     * Hook called once with the per-session router so domain agents (B/C)
+     * can register routes. Runs after auth + idempotency middleware are
+     * installed and after the `mcp/*` and `_pome/{health,events}` routes
+     * are mounted, but BEFORE `/_pome/state` and BEFORE the catch-all 501.
+     * Embedders use this to mount the Stripe REST, MCP, and x402 routes.
+     *
+     * Returning a `stateProvider` from this hook lets the domain agent
+     * supply the body for `GET /_pome/state` (F4). When omitted, the
+     * chassis default is mounted instead.
+     */
+    extendSession?: (session: Hono, ctx: TwinStripeContext) => {
+        stateProvider?: StateProvider;
+    } | void;
+    /**
+     * Tool count to advertise on /healthz. AGENT-B registers tools and can
+     * pass the real count; chassis-only it's 0.
+     */
+    toolCount?: number;
+};
+export type TwinStripeContext = {
+    db: TwinStripeDatabase;
+    recorder: Recorder;
+    runId: string;
+    startedAtMs: number;
+    failureInjection: FailureInjectionStore;
+};
+export declare function createTwinStripeApp(options?: TwinStripeAppOptions): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+/** Re-export the session Hono so AGENT-B can import the type. */
+export type SessionRouter = Hono;