@aglyn/plugins-commerce 1.0.0-beta.203 → 1.0.0-beta.205

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/plugins-commerce",
-  "version": "1.0.0-beta.203",
+  "version": "1.0.0-beta.205",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,18 +25,18 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.203",
-    "@aglyn/shared-data-mdi": "1.0.0-beta.203",
-    "@aglyn/shared-ui-jsx": "1.0.0-beta.203",
-    "@aglyn/shared-ui-next": "1.0.0-beta.203",
-    "@aglyn/shared-ui-snackstack": "1.0.0-beta.203",
-    "@aglyn/shared-util-email": "1.0.0-beta.203",
-    "@aglyn/shared-util-http": "1.0.0-beta.203",
-    "@aglyn/shared-util-timestamp": "1.0.0-beta.203",
-    "@aglyn/shared-util-tools": "1.0.0-beta.203",
-    "@aglyn/tenant-data-admin": "1.0.0-beta.203",
-    "@aglyn/tenant-feature-instance": "1.0.0-beta.203",
-    "@aglyn/tenant-runtime": "1.0.0-beta.203",
+    "@aglyn/aglyn": "1.0.0-beta.205",
+    "@aglyn/shared-data-mdi": "1.0.0-beta.205",
+    "@aglyn/shared-ui-jsx": "1.0.0-beta.205",
+    "@aglyn/shared-ui-next": "1.0.0-beta.205",
+    "@aglyn/shared-ui-snackstack": "1.0.0-beta.205",
+    "@aglyn/shared-util-email": "1.0.0-beta.205",
+    "@aglyn/shared-util-http": "1.0.0-beta.205",
+    "@aglyn/shared-util-timestamp": "1.0.0-beta.205",
+    "@aglyn/shared-util-tools": "1.0.0-beta.205",
+    "@aglyn/tenant-data-admin": "1.0.0-beta.205",
+    "@aglyn/tenant-feature-instance": "1.0.0-beta.205",
+    "@aglyn/tenant-runtime": "1.0.0-beta.205",
     "@stripe/react-stripe-js": "^3.10.0",
     "@stripe/stripe-js": "^5.10.0",
     "@swc/helpers": "0.5.23",

package/src/lib/server/billing-webhook.js

@@ -15,7 +15,7 @@
  * limitations under the License.
  */ import { _ as _extends } from "@swc/helpers/_/_extends";
 import * as Aglyn from "@aglyn/aglyn/server";
-import { findUserByUidAcrossPools, firebaseAdmin, getOrgForHost, meterHostEmail, notifyHostManagers, notifyStaff, renderHostEmailWithTokens, clearConnectPayoutFailure, recordConnectPayoutFailure, syncConnectAccountStatus, updateExisting, hostSendingIdentity } from "@aglyn/tenant-data-admin";
+import { findUserByUidAcrossPools, firebaseAdmin, getOrgForHost, meterHostEmail, notifyHostManagers, notifyRiskEvent, notifyStaff, renderHostEmailWithTokens, clearConnectPayoutFailure, recordConnectPayoutFailure, syncConnectAccountStatus, updateExisting, hostSendingIdentity } from "@aglyn/tenant-data-admin";
 import { captureHostContact } from "@aglyn/tenant-runtime";
 import { createHmac } from "crypto";
 import { isEmailConfigured, sendEmail } from "@aglyn/shared-util-email";
@@ -3918,10 +3918,12 @@ async function findOrderForDispute(paymentIntentId) {
             if (outcome.kind === 'frozen-for-review') {
                 await notifyGiftCardHold({
                     hostId,
-                    orderLabel: `Order ${snapshot.id}`,
+                    orderLabel: `order ${snapshot.id}`,
+                    orderPath: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
+                    orderId: snapshot.id,
                     cards: outcome.cards,
                     reason: 'refund-review'
-                }, notifyHostManagers);
+                }, notifyRiskEvent);
             }
         }
         return {
@@ -3953,28 +3955,32 @@ async function findOrderForDispute(paymentIntentId) {
             ref: snapshot.ref,
             signal: risk.signal,
             hostId,
-            subjectLabel: `Order ${CommerceModel.formatOrderNumber(order, snapshot.id)}`,
-            link: `/${hostId}/orders`,
+            subjectLabel: `order ${CommerceModel.formatOrderNumber(order, snapshot.id)}`,
+            // The Orders section of the Products hub, with this order's dialog
+            // open — where Refund lives (`siteRecordLinks().order`).
+            link: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
             notificationType: 'content.order',
             extraUpdate: (data)=>({
                     timeline: CommerceModel.appendOrderEvent(CommerceModel.liftLegacyOrder(data), risk.signal.kind === 'early-fraud-warning' ? 'fraud-warning' : 'payment-review', risk.signal.kind === 'early-fraud-warning' ? 'The card issuer reported this payment as possibly fraudulent' + (risk.signal.detail ? ` (${risk.signal.detail.replace(/_/g, ' ')})` : '') : 'Stripe Radar is holding this payment for review', risk.signal.atMs)
                 })
         }, {
             firestore: firebaseAdmin.app().firestore(),
-            notify: notifyHostManagers
+            notifyRisk: notifyRiskEvent
         });
         // The cards this order bought are frozen until the merchant releases them
         // (AGL-3363): a warning or review is the moment a stolen-card gift card
         // is still unspent.
         await notifyGiftCardHold({
             hostId,
-            orderLabel: `Order ${CommerceModel.formatOrderNumber(order, snapshot.id)}`,
+            orderLabel: `order ${CommerceModel.formatOrderNumber(order, snapshot.id)}`,
+            orderPath: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
+            orderId: snapshot.id,
             cards: await applyOrderGiftCardRisk(snapshot, {
                 kind: 'freeze',
                 reason: risk.signal.kind
             }),
             reason: risk.signal.kind
-        }, notifyHostManagers);
+        }, notifyRiskEvent);
         return {
             claimed: true,
             hostId
@@ -4038,33 +4044,46 @@ async function findOrderForDispute(paymentIntentId) {
                 // A chargeback's gift cards are frozen while it is open (AGL-3363).
                 await notifyGiftCardHold({
                     hostId,
-                    orderLabel: `Order ${snapshot.id}`,
+                    orderLabel: `order ${snapshot.id}`,
+                    orderPath: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`,
+                    orderId: snapshot.id,
                     cards: await applyOrderGiftCardRisk(snapshot, {
                         kind: 'freeze',
                         reason: 'dispute'
                     }),
                     reason: 'dispute'
-                }, notifyHostManagers);
+                }, notifyRiskEvent);
                 const { opened, record } = await recordDisputeOpened(snapshot, dispute);
                 if (opened && hostId) {
+                    var _snapshot_data1, _record_evidenceDueByMs, _ref88;
                     // Time-critical — Stripe's evidence window is days, not weeks — so
                     // this is awaited rather than fired off with `void`: the handler is
                     // serverless and work left running past the response is work the
-                    // container may be frozen before it finishes. `notifyHostManagers`
-                    // never throws.
-                    await notifyHostManagers(hostId, {
-                        type: 'content.order',
-                        title: `Chargeback opened — $${(record.amountCents / 100).toFixed(2)}`,
-                        body: `Order ${snapshot.id} was disputed` + (record.reason ? ` (${record.reason.replace(/_/g, ' ')})` : '') + (record.evidenceDueByMs ? `. Evidence is due ${new Date(record.evidenceDueByMs).toISOString().slice(0, 10)}.` : '. Respond in Stripe.'),
-                        link: `/${hostId}/orders`
+                    // container may be frozen before it finishes. The risk notice
+                    // (AGL-3368) tells the site's managers and the workspace's owners
+                    // what a dispute means and when the evidence is due; it never
+                    // throws.
+                    const order = CommerceModel.liftLegacyOrder((_snapshot_data1 = snapshot.data()) != null ? _snapshot_data1 : {});
+                    await notifyRiskEvent({
+                        kind: 'sale-dispute',
+                        orgId: null,
+                        hostId,
+                        item: {
+                            label: `order ${CommerceModel.formatOrderNumber(order, snapshot.id)}`,
+                            path: `/${hostId}/products/orders?order=${encodeURIComponent(snapshot.id)}`
+                        },
+                        amount: `$${(record.amountCents / 100).toFixed(2)}`,
+                        evidenceDueByMs: (_record_evidenceDueByMs = record.evidenceDueByMs) != null ? _record_evidenceDueByMs : null,
+                        dedupeKey: `sale:${String((_ref88 = dispute == null ? void 0 : dispute.id) != null ? _ref88 : snapshot.id)}`,
+                        staffEvidence: record.reason ? `Reason: ${record.reason.replace(/_/g, ' ')}.` : null
                     });
                 }
             } else {
-                var _ref88, _ref89;
+                var _ref89, _ref90;
                 // Lost: the money went back, so the cards it bought are voided. Won
                 // (or closed on a warning): the dispute's freeze lifts; a freeze a
                 // fraud warning or review put on stays for the merchant (AGL-3363).
-                await applyOrderGiftCardRisk(snapshot, String((_ref88 = dispute == null ? void 0 : dispute.status) != null ? _ref88 : '') === 'lost' ? {
+                await applyOrderGiftCardRisk(snapshot, String((_ref89 = dispute == null ? void 0 : dispute.status) != null ? _ref89 : '') === 'lost' ? {
                     kind: 'void',
                     reason: 'dispute-lost'
                 } : {
@@ -4128,7 +4147,7 @@ async function findOrderForDispute(paymentIntentId) {
                 // transiently-failed reversal gets its retry — and gated inside on
                 // the order's own `reversedTransferCents` marker, so it runs at most
                 // once per dispute however many times Stripe delivers.
-                if (String((_ref89 = dispute == null ? void 0 : dispute.status) != null ? _ref89 : '') === 'lost') {
+                if (String((_ref90 = dispute == null ? void 0 : dispute.status) != null ? _ref90 : '') === 'lost') {
                     const pulledBackCents = await reverseSellerShare(snapshot.ref, dispute);
                     // The merchant-experience half of the AGL-1794 decision, and not an
                     // optional extra: the reversal takes money out of the connected