@fased/fased 0.1.62 → 0.1.64

package/dist/federation/marketplace-direct-payment.js

@@ -3,7 +3,8 @@ import { readWalletProviderRegistry, resolveWalletUserRole } from "../wallet/wal
 import { listLocalMarketplaceOrders, upsertMarketplaceOrderConfig } from "./offers.js";
 import { publishFederationSettlementEvidence } from "./settlement-evidence.js";
 import { createOrExecuteWalletSend } from "../wallet/wallet-send-approvals.js";
-import { randomUUID } from "node:crypto";
+import { claimMarketplaceSettlementOrder, reserveMarketplaceSettlementAction, updateMarketplaceSettlementAction } from "./marketplace-settlement-ledger.js";
+import { createHash } from "node:crypto";
 
 //#region src/federation/marketplace-direct-payment.ts
 const DEFAULT_DEPS = {
@@ -13,19 +14,20 @@ const DEFAULT_DEPS = {
 	publishFederationSettlementEvidence
 };
 const MAX_SAFE_ON_CHAIN_INTEGER = BigInt(Number.MAX_SAFE_INTEGER);
-function fail(statusCode, code, message) {
+function fail(statusCode, code, message, details = {}) {
 	return {
 		ok: false,
 		statusCode,
 		code,
-		message
+		message,
+		...details
 	};
 }
 function trimString(value) {
 	return typeof value === "string" ? value.trim() : "";
 }
-function createDefaultId(prefix) {
-	return `${prefix}-${Date.now()}-${randomUUID().slice(0, 8)}`;
+function createStableOrderId(prefix, orderId) {
+	return `${prefix}-${createHash("sha256").update(orderId.trim()).digest("hex").slice(0, 24)}`;
 }
 function parseAssetDecimals(params) {
 	if (typeof params.raw === "number" && Number.isFinite(params.raw)) {
@@ -57,14 +59,6 @@ function parseHumanAmountToOnChainInteger(amountInput, decimals) {
 }
 function normalizeMarketplacePaymentFailure(message) {
 	const normalized = message.trim();
-	const lower = normalized.toLowerCase();
-	if (lower.includes("split-key custody requires an active unlock session") || lower.includes("custody_unlock_required")) {
-		return [
-			"Buyer Agent wallet is locked by split-key custody.",
-			"Open Wallet, select the Agent wallet, unlock custody with passkey/device share, then retry Pay.",
-			"No funds were moved."
-		].join(" ");
-	}
 	return normalized || "wallet payment failed";
 }
 function resolvePaymentAmount(order) {
@@ -142,6 +136,15 @@ function normalizePaymentIntent(params) {
 		updatedAt: params.now
 	};
 }
+function directInitialPhase(order) {
+	if (order.settlement?.status === "settled" || order.paymentIntent?.status === "verified") {
+		return "direct_settled";
+	}
+	return order.settlement?.txRef || order.paymentIntent?.txRef ? "direct_paid" : "open";
+}
+function isAmbiguousSendFailure(code) {
+	return code === "wallet_provider_ambiguous" || code === "wallet_send_in_progress";
+}
 async function payMarketplaceOrderDirect(params) {
 	const env = params.env ?? process.env;
 	const deps = {
@@ -159,6 +162,12 @@ async function payMarketplaceOrderDirect(params) {
 	if (order.paymentIntent?.status === "verified" || order.settlement?.status === "settled") {
 		return fail(409, "already_paid", "marketplace order is already paid");
 	}
+	if (order.paymentIntent?.txRef || order.settlement?.txRef) {
+		return fail(409, "settlement_unknown", "marketplace order already has a transaction reference but is not settled; reconcile it before retrying", {
+			state: "unknown",
+			txRef: order.paymentIntent?.txRef ?? order.settlement?.txRef
+		});
+	}
 	const amount = resolvePaymentAmount(order);
 	if (!amount) {
 		return fail(400, "amount_missing", "marketplace order payment amount is missing");
@@ -213,146 +222,268 @@ async function payMarketplaceOrderDirect(params) {
 	if (!walletConfig.enabled) {
 		return fail(409, "wallet_runtime_disabled", "wallet runtime is disabled");
 	}
-	const nowDate = new Date();
-	const now = nowDate.toISOString();
-	const invoiceId = trimString(order.settlement?.invoiceId) || trimString(order.receipt?.invoiceId) || trimString(order.invoiceId) || createDefaultId("invoice");
-	const receiptId = trimString(order.settlement?.receiptId) || trimString(order.receipt?.receiptId) || trimString(order.receiptId) || createDefaultId("receipt");
-	const taskId = trimString(order.id) || trimString(order.offerId) || params.orderId;
-	const send = await deps.createOrExecuteWalletSend({
-		payload: {
-			chain,
-			to: payeeAddress,
-			amount: amountBaseUnits.toString(),
-			...asset.kind === "spl-token" ? { program: asset.address } : {},
-			walletId: wallet.id,
-			walletName: wallet.name,
-			providerId: wallet.providerId,
-			memo: invoiceId
-		},
-		requestedBy: "marketplace-manual-order",
-		sendPath: "automation",
-		settlementContext: {
-			taskId,
-			invoiceId,
-			senderHandle: order.buyerHandle
-		},
-		config: walletConfig,
-		runtimeConfig: params.config,
-		providerIdOverride: wallet.providerId,
-		env
-	});
-	if (!send.ok) {
-		return fail(409, "wallet_payment_failed", normalizeMarketplacePaymentFailure(send.message));
-	}
-	if (send.mode !== "autonomous") {
-		return fail(409, "payment_automation_required", "Marketplace payment requires Agent wallet automation to be enabled");
-	}
-	const txRef = trimString(send.tx.txHash);
-	const payerAddress = resolveWalletAddress({
-		wallet,
-		chain,
-		txSigner: typeof send.tx.signer === "string" ? send.tx.signer : undefined
-	});
-	const publishSettlement = await deps.publishFederationSettlementEvidence({
-		taskId,
-		invoiceId,
-		senderHandle: order.buyerHandle,
-		txRef,
-		chain,
-		asset,
-		amount: amountBaseUnits.toString(),
-		payeeAddress,
-		providerId: wallet.providerId,
-		walletId: wallet.id,
-		walletName: wallet.name,
-		env
-	});
-	if (!publishSettlement.ok) {
-		return fail(502, "settlement_evidence_failed", `settlement evidence publish failed: ${publishSettlement.message}`);
+	const executionIntentId = `marketplace-order:${entry.configId}:direct-payment`;
+	let releaseSettlement;
+	try {
+		releaseSettlement = await claimMarketplaceSettlementOrder(entry.configId, env);
+	} catch (error) {
+		return fail(409, "settlement_in_progress", error instanceof Error ? error.message : String(error));
 	}
-	const evidenceRef = typeof publishSettlement.entry?.evidenceRef === "string" ? publishSettlement.entry.evidenceRef : typeof publishSettlement.entry?.settlementId === "string" ? `fased://marketplace/settlements/${publishSettlement.entry.settlementId}` : `tx:${txRef}`;
-	const paymentIntent = normalizePaymentIntent({
-		order,
-		amount,
-		currency,
-		chain,
-		assetKind,
-		assetAddress,
-		assetDecimals,
-		payeeAddress,
-		payerWalletId: wallet.id,
-		txRef,
-		now
-	});
-	const result = upsertMarketplaceOrderConfig({
-		config: params.config,
-		input: {
-			...order,
-			id: entry.configId,
-			status: order.status === "delivered" ? "delivered" : "running",
-			paymentIntent,
-			settlement: {
-				...order.settlement,
-				mode: "direct",
-				status: "settled",
-				amount,
-				currency,
+	try {
+		let workflow;
+		try {
+			workflow = reserveMarketplaceSettlementAction({
+				orderId: entry.configId,
+				action: "direct",
+				executionIntentId,
+				initialPhase: directInitialPhase(order),
+				intent: {
+					chain,
+					asset,
+					amount: amountBaseUnits.toString(),
+					payeeAddress,
+					payerWalletId: wallet.id,
+					buyerHandle: order.buyerHandle
+				},
+				env
+			});
+		} catch (error) {
+			return fail(409, "settlement_conflict", error instanceof Error ? error.message : String(error));
+		}
+		if (workflow.action.state === "unknown") {
+			return fail(409, "settlement_unknown", workflow.action.reason || "direct payment is unknown; reconcile it before retrying");
+		}
+		const nowDate = new Date();
+		const now = nowDate.toISOString();
+		const invoiceId = trimString(order.settlement?.invoiceId) || trimString(order.receipt?.invoiceId) || trimString(order.invoiceId) || createStableOrderId("invoice", params.orderId);
+		const receiptId = trimString(order.settlement?.receiptId) || trimString(order.receipt?.receiptId) || trimString(order.receiptId) || createStableOrderId("receipt", params.orderId);
+		const taskId = trimString(order.id) || trimString(order.offerId) || params.orderId;
+		const cachedPayment = (workflow.action.state === "executed" || workflow.action.state === "evidence_pending" || workflow.action.state === "complete") && Boolean(workflow.action.txHash);
+		let requestId = workflow.action.requestId;
+		let txRef = trimString(workflow.action.txHash);
+		let payerAddress = resolveWalletAddress({
+			wallet,
+			chain
+		});
+		if (!cachedPayment) {
+			updateMarketplaceSettlementAction({
+				orderId: entry.configId,
+				action: "direct",
+				expectedStates: [
+					"reserved",
+					"pending",
+					"failed"
+				],
+				state: "pending",
+				env
+			});
+			const send = await deps.createOrExecuteWalletSend({
+				payload: {
+					chain,
+					to: payeeAddress,
+					amount: amountBaseUnits.toString(),
+					...asset.kind === "spl-token" ? { program: asset.address } : {},
+					walletId: wallet.id,
+					walletName: wallet.name,
+					providerId: wallet.providerId
+				},
+				requestedBy: "marketplace-manual-order",
+				executionIntentId,
+				sendPath: "automation",
+				settlementContext: {
+					taskId,
+					invoiceId,
+					senderHandle: order.buyerHandle
+				},
+				config: walletConfig,
+				runtimeConfig: params.config,
+				providerIdOverride: wallet.providerId,
+				env
+			});
+			if (!send.ok) {
+				const ambiguous = isAmbiguousSendFailure(send.code);
+				updateMarketplaceSettlementAction({
+					orderId: entry.configId,
+					action: "direct",
+					expectedStates: ["pending"],
+					state: ambiguous ? "unknown" : "failed",
+					requestId: send.requestId,
+					reason: send.message,
+					env
+				});
+				return fail(409, "wallet_payment_failed", normalizeMarketplacePaymentFailure(send.message), {
+					state: ambiguous ? "unknown" : undefined,
+					requestId: send.requestId,
+					invoiceId,
+					receiptId
+				});
+			}
+			if (send.mode !== "autonomous") {
+				updateMarketplaceSettlementAction({
+					orderId: entry.configId,
+					action: "direct",
+					expectedStates: ["pending"],
+					state: "pending",
+					requestId: send.request.id,
+					reason: "Agent wallet automation approval is pending",
+					env
+				});
+				return fail(409, "payment_automation_required", "Marketplace payment requires Agent wallet automation to be enabled", {
+					state: "pending",
+					requestId: send.request.id,
+					invoiceId,
+					receiptId
+				});
+			}
+			requestId = send.requestId;
+			txRef = trimString(send.tx.txHash);
+			payerAddress = resolveWalletAddress({
+				wallet,
 				chain,
-				assetKind,
-				...assetAddress ? { assetAddress } : {},
-				assetDecimals,
+				txSigner: typeof send.tx.signer === "string" ? send.tx.signer : undefined
+			});
+			updateMarketplaceSettlementAction({
+				orderId: entry.configId,
+				action: "direct",
+				expectedStates: ["pending"],
+				state: "executed",
+				requestId,
+				txHash: txRef,
+				env
+			});
+		}
+		let evidenceRef = trimString(workflow.action.evidenceRef);
+		if (!evidenceRef) {
+			const publishSettlement = await deps.publishFederationSettlementEvidence({
+				taskId,
 				invoiceId,
-				receiptId,
+				senderHandle: order.buyerHandle,
 				txRef,
-				evidenceRef,
-				payerWalletId: wallet.id,
+				chain,
+				asset,
+				amount: amountBaseUnits.toString(),
 				payeeAddress,
-				escrow: {
-					...order.settlement?.escrow,
-					status: "not_applicable",
-					holdPolicy: "none",
-					releaseRequired: false,
+				providerId: wallet.providerId,
+				walletId: wallet.id,
+				walletName: wallet.name,
+				env
+			});
+			if (!publishSettlement.ok) {
+				updateMarketplaceSettlementAction({
+					orderId: entry.configId,
+					action: "direct",
+					expectedStates: ["executed", "evidence_pending"],
+					state: "evidence_pending",
+					requestId,
+					txHash: txRef,
+					reason: publishSettlement.message,
+					env
+				});
+				return fail(502, "settlement_evidence_failed", `settlement evidence publish failed: ${publishSettlement.message}`, {
+					state: "evidence_pending",
+					requestId,
+					invoiceId,
+					receiptId,
+					txRef
+				});
+			}
+			evidenceRef = typeof publishSettlement.entry?.evidenceRef === "string" ? publishSettlement.entry.evidenceRef : typeof publishSettlement.entry?.settlementId === "string" ? `fased://marketplace/settlements/${publishSettlement.entry.settlementId}` : `tx:${txRef}`;
+			updateMarketplaceSettlementAction({
+				orderId: entry.configId,
+				action: "direct",
+				expectedStates: ["executed", "evidence_pending"],
+				state: "complete",
+				requestId,
+				txHash: txRef,
+				evidenceRef,
+				env
+			});
+		}
+		const paymentIntent = normalizePaymentIntent({
+			order,
+			amount,
+			currency,
+			chain,
+			assetKind,
+			assetAddress,
+			assetDecimals,
+			payeeAddress,
+			payerWalletId: wallet.id,
+			txRef,
+			now
+		});
+		const result = upsertMarketplaceOrderConfig({
+			config: params.config,
+			input: {
+				...order,
+				id: entry.configId,
+				status: order.status === "delivered" ? "delivered" : "running",
+				paymentIntent,
+				settlement: {
+					...order.settlement,
+					mode: "direct",
+					status: "settled",
+					amount,
+					currency,
+					chain,
+					assetKind,
+					...assetAddress ? { assetAddress } : {},
+					assetDecimals,
+					invoiceId,
+					receiptId,
+					txRef,
+					evidenceRef,
+					payerWalletId: wallet.id,
+					payeeAddress,
+					escrow: {
+						...order.settlement?.escrow,
+						status: "not_applicable",
+						holdPolicy: "none",
+						releaseRequired: false,
+						updatedAt: now
+					},
+					notes: "Direct Agent-wallet payment settled. Seller manual delivery is pending.",
+					verifiedAt: now,
+					settledAt: now,
+					updatedAt: now
+				},
+				delivery: {
+					...order.delivery,
+					status: order.delivery?.status === "delivered" ? "delivered" : "pending",
+					notes: order.delivery?.notes || "Payment verified. Waiting for seller to manually complete delivery.",
+					updatedAt: now
+				},
+				receipt: {
+					...order.receipt,
+					status: "issued",
+					invoiceId,
+					receiptId,
+					txRef,
+					notes: "Receipt issued after direct Agent-wallet payment. Delivery remains seller-managed.",
 					updatedAt: now
 				},
-				notes: "Direct Agent-wallet payment settled. Seller manual delivery is pending.",
-				verifiedAt: now,
-				settledAt: now,
-				updatedAt: now
-			},
-			delivery: {
-				...order.delivery,
-				status: order.delivery?.status === "delivered" ? "delivered" : "pending",
-				notes: order.delivery?.notes || "Payment verified. Waiting for seller to manually complete delivery.",
-				updatedAt: now
-			},
-			receipt: {
-				...order.receipt,
-				status: "issued",
 				invoiceId,
 				receiptId,
-				txRef,
-				notes: "Receipt issued after direct Agent-wallet payment. Delivery remains seller-managed.",
-				updatedAt: now
+				txRef
 			},
+			now
+		});
+		const updatedOrder = listLocalMarketplaceOrders(result.config).find((candidate) => candidate.configId === result.order.id)?.order ?? result.order;
+		return {
+			ok: true,
+			config: result.config,
+			order: updatedOrder,
+			mode: "autonomous",
 			invoiceId,
 			receiptId,
-			txRef
-		},
-		now
-	});
-	const updatedOrder = listLocalMarketplaceOrders(result.config).find((candidate) => candidate.configId === result.order.id)?.order ?? result.order;
-	return {
-		ok: true,
-		config: result.config,
-		order: updatedOrder,
-		mode: "autonomous",
-		invoiceId,
-		receiptId,
-		txRef,
-		payerAddress,
-		evidenceRef,
-		message: "Payment verified. Seller manual delivery is pending."
-	};
+			txRef,
+			payerAddress,
+			evidenceRef,
+			message: "Payment verified. Seller manual delivery is pending."
+		};
+	} finally {
+		await releaseSettlement();
+	}
 }
 
 //#endregion