pome-sh 0.6.6

package/node_modules/@pome-sh/twin-stripe/dist/src/app.js

@@ -0,0 +1,139 @@
+// SPDX-License-Identifier: Apache-2.0
+// Twin-stripe Hono app. AGENT-A owns the chassis and exports `sessionRouter`
+// (a Hono sub-app already mounted under `/s/:sid`) for AGENT-B and AGENT-C
+// to extend with the Stripe REST, MCP, and x402 routes.
+//
+// Important wiring contracts:
+//   - bearerAuth() runs at the session level; downstream code can read
+//     `c.get('session')` to get the resolved sid + account_id.
+//   - idempotencyMiddleware() runs after bearerAuth() so account_id is set.
+//   - The catch-all `app.all('*')` returning the loud 501 envelope MUST be
+//     registered AFTER any extending agent calls. The recommended pattern
+//     is for extenders to call `extendSessionRouter(s => s.post(...))` and
+//     to NOT touch the catch-all; we re-register the catch-all last in
+//     createTwinStripeApp().
+import { Hono } from "hono";
+import { z } from "zod";
+import { bearerAuth } from "./auth.js";
+import { openTwinStripeDatabase } from "./db.js";
+import { stripeError, TwinError, unsupported } from "./errors.js";
+import { createFailureInjectionStore, failureInjectionMiddleware, } from "./failure-injection.js";
+import { idempotencyMiddleware } from "./idempotency.js";
+import { mountRootPomeRoutes, mountSessionPomeRoutes, } from "./pome-routes.js";
+import { applySeed, defaultSeed } from "./seed.js";
+import { createRecorder } from "./recorder.js";
+import { requestId } from "./util.js";
+export function createTwinStripeApp(options = {}) {
+    const db = options.db ?? openTwinStripeDatabase();
+    const recorder = options.recorder ?? createRecorder();
+    const runId = options.runId ?? "local";
+    const startedAtMs = options.startedAtMs ?? Date.now();
+    const toolCount = options.toolCount ?? 0;
+    const failureInjection = options.failureInjection ?? createFailureInjectionStore();
+    if (!options.db && !options.noSeed) {
+        applySeed(db, defaultSeed(), failureInjection);
+    }
+    const ctx = {
+        db,
+        recorder,
+        runId,
+        startedAtMs,
+        failureInjection,
+    };
+    const root = new Hono();
+    mountRootPomeRoutes(root, {
+        db,
+        recorder,
+        toolCount,
+        startedAtMs,
+        failureInjection
+    });
+    // Per-session router. bearerAuth + failureInjectionMiddleware +
+    // idempotencyMiddleware run for every route mounted below. Failure
+    // injection MUST run before idempotency so a configured failure
+    // response isn't cached by the idempotency layer (otherwise a retry
+    // under the same key would replay the synthetic 4xx instead of
+    // re-invoking the handler).
+    const session = new Hono();
+    session.use("*", bearerAuth(db));
+    session.use("*", failureInjectionMiddleware(failureInjection, recorder, runId));
+    session.use("*", idempotencyMiddleware(db, recorder, runId));
+    // Hand the session router to the domain agent FIRST. Hono's router is
+    // first-match-wins, so AGENT-B's `/mcp/*` registrations need to land
+    // before the chassis stubs below. The domain agent can also return a
+    // `stateProvider` for `/_pome/state` (F4), which we apply when we
+    // mount the rest of the `_pome/*` surfaces below.
+    const extension = options.extendSession?.(session, ctx);
+    const stateProvider = (extension && extension.stateProvider) || undefined;
+    // Mount _pome/{health,state,events} AFTER extendSession has registered
+    // any earlier routes. We pass the domain-aware stateProvider through
+    // so /_pome/state returns real domain state (or the chassis default).
+    mountSessionPomeRoutes(session, {
+        db,
+        recorder,
+        toolCount,
+        startedAtMs
+    }, stateProvider);
+    // MCP scaffolding — chassis returns "no tools registered" iff AGENT-B
+    // didn't register handlers via `extendSession`. Hono's first-match-wins
+    // routing means these only run when nothing above matched.
+    session.get("/mcp/tools", (c) => c.json({ tools: [] }));
+    session.post("/mcp/tools/:name", (c) => {
+        const env = stripeError("invalid_request_error", "tool_not_found", `Unknown MCP tool: ${c.req.param("name")}`, { statusCode: 404, fidelity: "unsupported" });
+        return c.json(env.body, env.status);
+    });
+    session.post("/mcp/call", async (c) => {
+        let body = null;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            // fall through with body=null
+        }
+        const tool = (body && typeof body === "object" && "tool" in body
+            ? String(body.tool ?? "")
+            : "");
+        const env = stripeError("invalid_request_error", "tool_not_found", tool ? `Unknown MCP tool: ${tool}` : "MCP tool name is required.", { statusCode: tool ? 404 : 400, fidelity: "unsupported" });
+        return c.json(env.body, env.status);
+    });
+    // Catch-all loud 501 — must be last.
+    session.all("*", (c) => {
+        const env = unsupported();
+        return c.json(env.body, env.status);
+    });
+    // Top-level error handler for thrown TwinError / ZodError. Domain
+    // handlers can also catch and return directly; this is a safety net.
+    root.onError((err, c) => {
+        if (err instanceof TwinError) {
+            return c.json(err.toEnvelope(), err.status);
+        }
+        if (err instanceof z.ZodError) {
+            const env = stripeError("invalid_request_error", "parameter_invalid_empty", err.issues[0]?.message ?? "Validation failed.", {
+                statusCode: 400,
+                param: err.issues[0]?.path.join(".") || undefined
+            });
+            return c.json(env.body, env.status);
+        }
+        if (err instanceof SyntaxError) {
+            const env = stripeError("invalid_request_error", "invalid_json", "Could not parse JSON body.", { statusCode: 400 });
+            return c.json(env.body, env.status);
+        }
+        const env = stripeError("api_error", "internal_error", err instanceof Error ? err.message : "Internal server error.", { statusCode: 500 });
+        return c.json(env.body, env.status);
+    });
+    // Expose the request id helper on the app for downstream record() calls.
+    // (Not used by chassis; AGENT-B may want it.) Registered before the
+    // root-mounted session router so it isn't shadowed by the catch-all.
+    root.get("/_request_id", (c) => c.json({ request_id: requestId() }));
+    root.route("/s/:sid", session);
+    // F3: SDK-compatibility mount. Real `stripe-node`/`stripe-python` etc.
+    // build URLs like `/v1/payment_intents` and offer no way to inject a
+    // `/s/:sid` prefix, so we mount the same session router at the root
+    // path. The bearer alone resolves the sid (auth middleware skips the
+    // sid-comparison when the URL has no `:sid` segment). `mountRootPomeRoutes`
+    // ran before this, so `/healthz` and `/admin/*` win against the
+    // session router's catch-all.
+    root.route("/", session);
+    return root;
+}
+//# sourceMappingURL=app.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/app.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6EAA6E;AAC7E,2EAA2E;AAC3E,wDAAwD;AACxD,EAAE;AACF,8BAA8B;AAC9B,uEAAuE;AACvE,+DAA+D;AAC/D,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,2EAA2E;AAC3E,uEAAuE;AACvE,6BAA6B;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAE3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GAEvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAgDtC,MAAM,UAAU,mBAAmB,CAAC,UAAgC,EAAE;IACpE,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,sBAAsB,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC;IACvC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,2BAA2B,EAAE,CAAC;IAEnF,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,GAAG,GAAsB;QAC7B,EAAE;QACF,QAAQ;QACR,KAAK;QACL,WAAW;QACX,gBAAgB;KACjB,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,mBAAmB,CAAC,IAAI,EAAE;QACxB,EAAE;QACF,QAAQ;QACR,SAAS;QACT,WAAW;QACX,gBAAgB;KACjB,CAAC,CAAC;IAEH,gEAAgE;IAChE,mEAAmE;IACnE,gEAAgE;IAChE,oEAAoE;IACpE,+DAA+D;IAC/D,4BAA4B;IAC5B,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,0BAA0B,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAE7D,sEAAsE;IACtE,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,kDAAkD;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;IAE1E,uEAAuE;IACvE,qEAAqE;IACrE,sEAAsE;IACtE,sBAAsB,CACpB,OAAO,EACP;QACE,EAAE;QACF,QAAQ;QACR,SAAS;QACT,WAAW;KACZ,EACD,aAAa,CACd,CAAC;IAEF,sEAAsE;IACtE,wEAAwE;IACxE,2DAA2D;IAC3D,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,WAAW,CACrB,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAC1C,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,CAC7C,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI;YAC9D,CAAC,CAAC,MAAM,CAAE,IAA2B,CAAC,IAAI,IAAI,EAAE,CAAC;YACjD,CAAC,CAAC,EAAE,CAAC,CAAC;QACR,MAAM,GAAG,GAAG,WAAW,CACrB,uBAAuB,EACvB,gBAAgB,EAChB,IAAI,CAAC,CAAC,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC,4BAA4B,EACjE,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,CAC1D,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,qCAAqC;IACrC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,qEAAqE;IACrE,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACtB,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,MAAe,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,WAAW,CACrB,uBAAuB,EACvB,yBAAyB,EACzB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,oBAAoB,EAC9C;gBACE,UAAU,EAAE,GAAG;gBACf,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS;aAClD,CACF,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAe,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,WAAW,CACrB,uBAAuB,EACvB,cAAc,EACd,4BAA4B,EAC5B,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAe,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,CACrB,WAAW,EACX,gBAAgB,EAChB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,EAC7D,EAAE,UAAU,EAAE,GAAG,EAAE,CACpB,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAe,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,oEAAoE;IACpE,qEAAqE;IACrE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAErE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/B,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,qEAAqE;IACrE,4EAA4E;IAC5E,gEAAgE;IAChE,8BAA8B;IAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAEzB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/auth.d.ts

@@ -0,0 +1,9 @@
+import type { MiddlewareHandler } from "hono";
+import type { TwinStripeDatabase } from "./types.js";
+export declare function resolveAuthSecret(): string;
+export declare function bearerAuth(db: TwinStripeDatabase): MiddlewareHandler;
+/**
+ * Admin endpoint protection. Thin wrapper over the shared, mirrored
+ * admin-gate module (FDRS-587 / FDRS-616) with the Stripe error envelope.
+ */
+export declare function requireAdminAuth(): MiddlewareHandler;

package/node_modules/@pome-sh/twin-stripe/dist/src/auth.js

@@ -0,0 +1,145 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { verify } from "hono/jwt";
+import { createAdminGate } from "./admin-gate.js";
+import { looksLikeApiKey, resolveSidFromKey } from "./api-keys.js";
+import { forbidden, unauthorized } from "./errors.js";
+export function resolveAuthSecret() {
+    const secret = process.env.TWIN_AUTH_SECRET;
+    if (!secret && process.env.NODE_ENV === "production") {
+        throw new Error("TWIN_AUTH_SECRET required in production");
+    }
+    return secret ?? "dev-only-insecure-secret";
+}
+function jsonError(envelope) {
+    return Response.json(envelope.body, { status: envelope.status });
+}
+function extractSidFromUrl(rawUrl) {
+    try {
+        const path = new URL(rawUrl).pathname;
+        const match = path.match(/^\/s\/([^/]+)/);
+        return match?.[1] ? decodeURIComponent(match[1]) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function readBearer(c) {
+    const header = c.req.header("Authorization") ?? c.req.header("authorization");
+    if (!header)
+        return undefined;
+    // Accept "Bearer <token>" (Stripe SDK shape), "bearer <token>" (case-
+    // insensitive), and "<token>" (twin-github MCP-client backwards compat).
+    const trimmed = header.trim();
+    if (trimmed.toLowerCase().startsWith("bearer ")) {
+        return trimmed.slice(7).trim();
+    }
+    return trimmed;
+}
+export function bearerAuth(db) {
+    return async (c, next) => {
+        const token = readBearer(c);
+        if (!token)
+            return jsonError(unauthorized("Bad credentials"));
+        // Path may or may not carry a :sid prefix. The path-prefixed mount
+        // (`/s/:sid/...`) requires the bearer-resolved sid match the path
+        // sid; the SDK-compat root mount (`/v1/...`) skips the comparison
+        // and trusts the bearer alone (F3). Either way, we resolve a
+        // session from the bearer.
+        const pathSid = c.req.param("sid") ?? extractSidFromUrl(c.req.url);
+        let resolved;
+        if (looksLikeApiKey(token)) {
+            const row = resolveSidFromKey(db, token);
+            if (row) {
+                resolved = { sid: row.sid, account_id: row.account_id, via: "api_key" };
+            }
+            else {
+                const providerSid = verifyProviderToken("stripe", token);
+                if (!providerSid)
+                    return jsonError(unauthorized("Invalid API Key provided."));
+                resolved = { sid: providerSid, account_id: `acct_${providerSid}`, via: "api_key" };
+            }
+        }
+        else {
+            // JWT path. Mirrors twin-github exactly.
+            let claims;
+            try {
+                claims = (await verify(token, resolveAuthSecret(), "HS256"));
+            }
+            catch {
+                return jsonError(unauthorized("Bad credentials"));
+            }
+            if (typeof claims.exp === "number" && claims.exp < Math.floor(Date.now() / 1000)) {
+                return jsonError(unauthorized("Token expired"));
+            }
+            if (!claims.sid)
+                return jsonError(unauthorized("Bad credentials"));
+            resolved = {
+                sid: claims.sid,
+                account_id: claims.account_id ?? `acct_${claims.sid}`,
+                via: "jwt"
+            };
+        }
+        // Only enforce sid match when the URL has a :sid component. Root-
+        // mounted /v1/* requests carry no path sid; the bearer alone is
+        // sufficient and the resolved sid is whatever the bearer says.
+        if (pathSid && resolved.sid !== pathSid) {
+            return jsonError(forbidden("Session id mismatch."));
+        }
+        c.set("session", resolved);
+        await next();
+    };
+}
+function verifyProviderToken(provider, token) {
+    const match = token.match(/^sk_test_pome_([^_]+)_(?:(\d+)_)?(.+)$/);
+    if (!match)
+        return undefined;
+    const sid = decodeBase64Url(match[1]);
+    if (!sid)
+        return undefined;
+    const exp = match[2] ? Number(match[2]) : undefined;
+    if (exp !== undefined && (!Number.isSafeInteger(exp) || exp < Math.floor(Date.now() / 1000))) {
+        return undefined;
+    }
+    const expected = exp === undefined
+        ? signProvider(provider, sid, resolveAuthSecret())
+        : signProviderExp(provider, sid, exp, resolveAuthSecret());
+    const actual = match[3];
+    if (safeEqual(actual, expected))
+        return sid;
+    return undefined;
+}
+function signProvider(provider, sid, secret) {
+    return createHmac("sha256", secret)
+        .update(`${provider}:${sid}`)
+        .digest("base64url")
+        .slice(0, 22);
+}
+function signProviderExp(provider, sid, exp, secret) {
+    return createHmac("sha256", secret)
+        .update(`${provider}:${sid}:${exp}`)
+        .digest("base64url")
+        .slice(0, 22);
+}
+function decodeBase64Url(value) {
+    try {
+        return Buffer.from(value, "base64url").toString("utf8");
+    }
+    catch {
+        return undefined;
+    }
+}
+function safeEqual(a, b) {
+    const ab = Buffer.from(a);
+    const bb = Buffer.from(b);
+    return ab.length === bb.length && timingSafeEqual(ab, bb);
+}
+/**
+ * Admin endpoint protection. Thin wrapper over the shared, mirrored
+ * admin-gate module (FDRS-587 / FDRS-616) with the Stripe error envelope.
+ */
+export function requireAdminAuth() {
+    return createAdminGate({
+        forbidden: () => jsonError(forbidden("Forbidden")),
+    });
+}
+//# sourceMappingURL=auth.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGtD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,IAAI,0BAA0B,CAAC;AAC9C,CAAC;AAED,SAAS,SAAS,CAAC,QAA2C;IAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,sEAAsE;IACtE,yEAAyE;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAsB;IAC/C,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAE9D,mEAAmE;QACnE,kEAAkE;QAClE,kEAAkE;QAClE,6DAA6D;QAC7D,2BAA2B;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnE,IAAI,QAAqC,CAAC;QAE1C,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,GAAG,EAAE,CAAC;gBACR,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACzD,IAAI,CAAC,WAAW;oBAAE,OAAO,SAAS,CAAC,YAAY,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBAC9E,QAAQ,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,WAAW,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YACrF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,yCAAyC;YACzC,IAAI,MAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,MAAM,MAAM,CACpB,KAAK,EACL,iBAAiB,EAAE,EACnB,OAAO,CACR,CAA6B,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBACjF,OAAO,SAAS,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACnE,QAAQ,GAAG;gBACT,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,QAAQ,MAAM,CAAC,GAAG,EAAE;gBACrD,GAAG,EAAE,KAAK;aACX,CAAC;QACJ,CAAC;QAED,kEAAkE;QAClE,gEAAgE;QAChE,+DAA+D;QAC/D,IAAI,OAAO,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YACxC,OAAO,SAAS,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3B,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAkB,EAAE,KAAa;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;QAC7F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,KAAK,SAAS;QAChC,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;QAClD,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACzB,IAAI,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC;IAC5C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,GAAW,EAAE,MAAc;IACjE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;SAC5B,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,GAAW,EAAE,GAAW,EAAE,MAAc;IACjF,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,GAAG,QAAQ,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;SACnC,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,CAAC;QACrB,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;KACnD,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/build-info.d.ts

@@ -0,0 +1,7 @@
+export type TwinBuildInfo = {
+    package: string;
+    version: string;
+    git_sha: string;
+    build_time: string;
+};
+export declare function twinBuildInfo(): TwinBuildInfo;

package/node_modules/@pome-sh/twin-stripe/dist/src/build-info.js

@@ -0,0 +1,10 @@
+// SPDX-License-Identifier: Apache-2.0
+export function twinBuildInfo() {
+    return {
+        package: "@pome-sh/twin-stripe",
+        version: process.env.POME_TWIN_VERSION ?? "0.1.0",
+        git_sha: process.env.POME_TWIN_GIT_SHA ?? process.env.VERCEL_GIT_COMMIT_SHA ?? "dev",
+        build_time: process.env.POME_TWIN_BUILD_TIME ?? "dev",
+    };
+}
+//# sourceMappingURL=build-info.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/build-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.js","sourceRoot":"","sources":["../../src/build-info.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAStC,MAAM,UAAU,aAAa;IAC3B,OAAO;QACL,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO;QACjD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,KAAK;QACpF,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,KAAK;KACtD,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/db.d.ts

@@ -0,0 +1,4 @@
+import type { TwinStripeDatabase } from "./types.js";
+export declare function openTwinStripeDatabase(path?: string): TwinStripeDatabase;
+export declare function migrate(db: TwinStripeDatabase): void;
+export declare function resetDatabase(db: TwinStripeDatabase): void;

package/node_modules/@pome-sh/twin-stripe/dist/src/db.js

@@ -0,0 +1,149 @@
+// SPDX-License-Identifier: Apache-2.0
+import Database from "better-sqlite3";
+import { mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+// All tables are created up front so AGENT-B (domain) and AGENT-C (x402) do
+// not need to migrate. v1 ships with payment_intents, charges,
+// balance_transactions, and events. The remaining tables (customers,
+// payment_methods, refunds, products, prices, checkout_sessions, SPT,
+// webhook_endpoints) are deferred to v2.
+const MIGRATION_SQL = `
+-- ----- chassis tables (AGENT-A) -------------------------------------------
+
+CREATE TABLE IF NOT EXISTS api_keys (
+  key TEXT PRIMARY KEY,
+  sid TEXT NOT NULL,
+  account_id TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  revoked_at TEXT
+);
+
+CREATE INDEX IF NOT EXISTS idx_api_keys_sid ON api_keys(sid);
+
+CREATE TABLE IF NOT EXISTS idempotency_keys (
+  key TEXT NOT NULL,
+  account_id TEXT NOT NULL,
+  method TEXT NOT NULL,
+  path TEXT NOT NULL,
+  request_hash TEXT NOT NULL,
+  response_status INTEGER NOT NULL,
+  response_body_json TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (key, account_id, method, path)
+);
+
+-- ----- v1 Stripe domain tables (AGENT-B fills in domain logic) ------------
+
+CREATE TABLE IF NOT EXISTS payment_intents (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL,
+  amount INTEGER NOT NULL,
+  currency TEXT NOT NULL,
+  status TEXT NOT NULL,
+  payment_method_types_json TEXT NOT NULL DEFAULT '[]',
+  next_action_json TEXT,
+  latest_charge_id TEXT,
+  capture_method TEXT NOT NULL DEFAULT 'automatic',
+  confirmation_method TEXT NOT NULL DEFAULT 'automatic',
+  idempotency_key TEXT,
+  metadata_json TEXT NOT NULL DEFAULT '{}',
+  crypto_deposit_json TEXT,
+  client_secret TEXT NOT NULL,
+  created INTEGER NOT NULL,
+  updated INTEGER NOT NULL,
+  canceled_at INTEGER,
+  captured_at INTEGER
+);
+
+CREATE INDEX IF NOT EXISTS idx_payment_intents_created ON payment_intents(created);
+CREATE INDEX IF NOT EXISTS idx_payment_intents_status ON payment_intents(status);
+CREATE INDEX IF NOT EXISTS idx_payment_intents_account_id ON payment_intents(account_id);
+
+CREATE TABLE IF NOT EXISTS charges (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL,
+  payment_intent_id TEXT NOT NULL,
+  amount INTEGER NOT NULL,
+  amount_captured INTEGER NOT NULL DEFAULT 0,
+  amount_refunded INTEGER NOT NULL DEFAULT 0,
+  status TEXT NOT NULL,
+  balance_transaction_id TEXT,
+  captured INTEGER NOT NULL DEFAULT 0,
+  created INTEGER NOT NULL,
+  currency TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_charges_payment_intent ON charges(payment_intent_id);
+CREATE INDEX IF NOT EXISTS idx_charges_created ON charges(created);
+CREATE INDEX IF NOT EXISTS idx_charges_account_id ON charges(account_id);
+
+CREATE TABLE IF NOT EXISTS balance_transactions (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL,
+  type TEXT NOT NULL,
+  amount INTEGER NOT NULL,
+  fee INTEGER NOT NULL DEFAULT 0,
+  net INTEGER NOT NULL,
+  currency TEXT NOT NULL,
+  source_id TEXT,
+  source_type TEXT,
+  available_on INTEGER NOT NULL,
+  created INTEGER NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending'
+);
+
+CREATE INDEX IF NOT EXISTS idx_balance_transactions_created ON balance_transactions(created);
+CREATE INDEX IF NOT EXISTS idx_balance_transactions_source ON balance_transactions(source_id);
+CREATE INDEX IF NOT EXISTS idx_balance_transactions_account_id ON balance_transactions(account_id);
+
+CREATE TABLE IF NOT EXISTS events (
+  id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL,
+  type TEXT NOT NULL,
+  data_json TEXT NOT NULL,
+  request_idempotency_key TEXT,
+  livemode INTEGER NOT NULL DEFAULT 0,
+  created INTEGER NOT NULL,
+  api_version TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_events_type ON events(type);
+CREATE INDEX IF NOT EXISTS idx_events_created ON events(created);
+CREATE INDEX IF NOT EXISTS idx_events_account_id ON events(account_id);
+
+-- ----- audit log (writes through admin/seed/reset) ------------------------
+
+CREATE TABLE IF NOT EXISTS audit_log (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  ts TEXT NOT NULL,
+  action TEXT NOT NULL,
+  payload_json TEXT NOT NULL
+);
+`;
+const RESET_SQL = `
+DELETE FROM audit_log;
+DELETE FROM events;
+DELETE FROM balance_transactions;
+DELETE FROM charges;
+DELETE FROM payment_intents;
+DELETE FROM idempotency_keys;
+DELETE FROM api_keys;
+`;
+export function openTwinStripeDatabase(path = process.env.STRIPE_CLONE_DB ?? ":memory:") {
+    if (path !== ":memory:") {
+        mkdirSync(dirname(path), { recursive: true });
+    }
+    const db = new Database(path);
+    migrate(db);
+    return db;
+}
+export function migrate(db) {
+    db.pragma("busy_timeout = 5000");
+    db.pragma("journal_mode = WAL");
+    db.pragma("foreign_keys = ON");
+    db.exec(MIGRATION_SQL);
+}
+export function resetDatabase(db) {
+    db.exec(RESET_SQL);
+}
+//# sourceMappingURL=db.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/db.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,4EAA4E;AAC5E,+DAA+D;AAC/D,qEAAqE;AACrE,sEAAsE;AACtE,yCAAyC;AACzC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgHrB,CAAC;AAEF,MAAM,SAAS,GAAG;;;;;;;;CAQjB,CAAC;AAEF,MAAM,UAAU,sBAAsB,CACpC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,UAAU;IAEhD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,EAAsB;IAC5C,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAsB;IAClD,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC"}

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/balance.d.ts

@@ -0,0 +1,53 @@
+import type { TwinStripeDatabase, BalanceTxRow } from "../types.js";
+export type CreateBalanceTxInput = {
+    type: "charge" | "refund" | "adjustment" | "fee";
+    amount: number;
+    fee?: number;
+    currency: string;
+    source_id?: string;
+    source_type?: string;
+};
+export type ListBalanceTxInput = {
+    limit?: number;
+    type?: string;
+    created_gt?: number;
+    created_gte?: number;
+    created_lt?: number;
+    created_lte?: number;
+};
+export declare class BalanceDomain {
+    readonly db: TwinStripeDatabase;
+    constructor(db: TwinStripeDatabase);
+    create(accountId: string, input: CreateBalanceTxInput): BalanceTxRow;
+    getById(accountId: string, id: string): BalanceTxRow | null;
+    requireById(accountId: string, id: string): BalanceTxRow;
+    list(accountId: string, input: ListBalanceTxInput): {
+        rows: BalanceTxRow[];
+        hasMore: boolean;
+        limit: number;
+    };
+    /**
+     * Compute current balance grouped by currency. v1 deviation: we lump
+     * everything into `available`; `pending` is always [].
+     */
+    current(accountId: string): {
+        available: Array<{
+            currency: string;
+            amount: number;
+            source_types: {
+                card: number;
+            };
+        }>;
+        pending: Array<{
+            currency: string;
+            amount: number;
+            source_types: {
+                card: number;
+            };
+        }>;
+    };
+    /** Count balance txns for a given source (PI). Used by concurrency test. */
+    countForSource(accountId: string, sourceId: string): number;
+    /** Sum of all `net` amounts. Used by concurrency test (assert total == PI amount). */
+    totalNet(accountId: string, currency?: string): number;
+}

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/balance.js

@@ -0,0 +1,77 @@
+// SPDX-License-Identifier: Apache-2.0
+// Balance + balance transactions. Owned by AGENT-B.
+//
+// In real Stripe, `available` and `pending` are separated by deposit time
+// (T+2 etc). For this twin every settled PI hits `available` immediately
+// — we don't model the float. `available_on` is set to `created` for the
+// same reason. Documented in FIDELITY.md.
+import { TwinError } from "../errors.js";
+import { newId } from "../ids.js";
+import { nowUnix } from "../util.js";
+import { ensureStripeTables } from "./schema.js";
+import { listPaginated } from "./payment-intents.js";
+export class BalanceDomain {
+    db;
+    constructor(db) {
+        this.db = db;
+        ensureStripeTables(db);
+    }
+    create(accountId, input) {
+        const id = newId("balance_transaction");
+        const now = nowUnix();
+        const fee = input.fee ?? 0;
+        const net = input.amount - fee;
+        this.db
+            .prepare(`INSERT INTO balance_transactions (
+          id, account_id, type, amount, fee, net, currency, source_id, source_type,
+          available_on, status, created
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'available', ?)`)
+            .run(id, accountId, input.type, input.amount, fee, net, input.currency, input.source_id ?? null, input.source_type ?? null, now, now);
+        return this.requireById(accountId, id);
+    }
+    getById(accountId, id) {
+        return (this.db
+            .prepare("SELECT * FROM balance_transactions WHERE id = ? AND account_id = ?")
+            .get(id, accountId) ?? null);
+    }
+    requireById(accountId, id) {
+        const row = this.getById(accountId, id);
+        if (!row) {
+            throw new TwinError("invalid_request_error", "resource_missing", `No such balance_transaction: '${id}'.`, { param: "balance_transaction", statusCode: 404 });
+        }
+        return row;
+    }
+    list(accountId, input) {
+        return listPaginated(this.db, "balance_transactions", accountId, input);
+    }
+    /**
+     * Compute current balance grouped by currency. v1 deviation: we lump
+     * everything into `available`; `pending` is always [].
+     */
+    current(accountId) {
+        const rows = this.db
+            .prepare("SELECT currency, COALESCE(SUM(net), 0) AS amount FROM balance_transactions WHERE account_id = ? GROUP BY currency")
+            .all(accountId);
+        const available = rows.map((row) => ({
+            currency: row.currency,
+            amount: row.amount,
+            source_types: { card: 0 },
+        }));
+        return { available, pending: [] };
+    }
+    /** Count balance txns for a given source (PI). Used by concurrency test. */
+    countForSource(accountId, sourceId) {
+        const row = this.db
+            .prepare("SELECT COUNT(*) as n FROM balance_transactions WHERE source_id = ? AND account_id = ?")
+            .get(sourceId, accountId);
+        return row.n;
+    }
+    /** Sum of all `net` amounts. Used by concurrency test (assert total == PI amount). */
+    totalNet(accountId, currency = "usd") {
+        const row = this.db
+            .prepare("SELECT COALESCE(SUM(net), 0) AS total FROM balance_transactions WHERE currency = ? AND account_id = ?")
+            .get(currency, accountId);
+        return row.total;
+    }
+}
+//# sourceMappingURL=balance.js.map

package/node_modules/@pome-sh/twin-stripe/dist/src/domain/balance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance.js","sourceRoot":"","sources":["../../../src/domain/balance.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,oDAAoD;AACpD,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,yEAAyE;AACzE,0CAA0C;AAG1C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAoBrD,MAAM,OAAO,aAAa;IACH;IAArB,YAAqB,EAAsB;QAAtB,OAAE,GAAF,EAAE,CAAoB;QACzC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,KAA2B;QACnD,MAAM,EAAE,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;QAC/B,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;gEAGwD,CACzD;aACA,GAAG,CACF,EAAE,EACF,SAAS,EACT,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,EACZ,GAAG,EACH,GAAG,EACH,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,IAAI,IAAI,EACvB,KAAK,CAAC,WAAW,IAAI,IAAI,EACzB,GAAG,EACH,GAAG,CACJ,CAAC;QACJ,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,EAAU;QACnC,OAAO,CACJ,IAAI,CAAC,EAAE;aACL,OAAO,CAAC,oEAAoE,CAAC;aAC7E,GAAG,CAAC,EAAE,EAAE,SAAS,CAA8B,IAAI,IAAI,CAC3D,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,EAAU;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CACjB,uBAAuB,EACvB,kBAAkB,EAClB,iCAAiC,EAAE,IAAI,EACvC,EAAE,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,GAAG,EAAE,CAClD,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,SAAiB,EAAE,KAAyB;QAK/C,OAAO,aAAa,CAAe,IAAI,CAAC,EAAE,EAAE,sBAAsB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACxF,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,SAAiB;QAIvB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN,mHAAmH,CACpH;aACA,GAAG,CAAC,SAAS,CAAgD,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;SAC1B,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IAED,4EAA4E;IAC5E,cAAc,CAAC,SAAiB,EAAE,QAAgB;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,uFAAuF,CACxF;aACA,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAkB,CAAC;QAC7C,OAAO,GAAG,CAAC,CAAC,CAAC;IACf,CAAC;IAED,sFAAsF;IACtF,QAAQ,CAAC,SAAiB,EAAE,QAAQ,GAAG,KAAK;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN,uGAAuG,CACxG;aACA,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAsB,CAAC;QACjD,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;CACF"}