@open-mercato/checkout 0.10.1-develop.7716.1.cefe7975df → 0.10.1-develop.7721.1.b5c4a00a68

package/dist/modules/checkout/commands/transactions.js

@@ -1,10 +1,10 @@
 import { registerCommand } from "@open-mercato/shared/lib/commands";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { CheckoutLink, CheckoutTransaction } from "../data/entities.js";
 import { transactionCreateSchema, transactionUpdateStatusSchema } from "../data/validators.js";
 import { emitCheckoutEvent } from "../events.js";
 import {
-  applyTerminalTransactionState,
   isTerminalCheckoutStatus,
   mapGatewayStatusToCheckoutStatus,
   parseCheckoutInput,
@@ -44,12 +44,21 @@ const createTransactionCommand = {
       if (currentLink.status !== "active") {
         throw new CrudHttpError(422, { error: "This payment link is not currently accepting payments" });
       }
-      const reserved = await tx.getConnection().execute(
+      const transaction2 = tx.create(CheckoutTransaction, {
+        ...parsed,
+        organizationId: scope.organizationId,
+        tenantId: scope.tenantId,
+        amount: toMoneyString(parsed.amount) ?? "0.00",
+        status: "processing"
+      });
+      tx.persist(transaction2);
+      await tx.flush();
+      const reserved = await tx.execute(
         `
           UPDATE checkout_links
           SET active_reservation_count = active_reservation_count + 1,
               is_locked = true,
-              updated_at = now()
+              updated_at = clock_timestamp()
           WHERE id = ?
             AND organization_id = ?
             AND tenant_id = ?
@@ -59,27 +68,18 @@ const createTransactionCommand = {
               max_completions IS NULL
               OR completion_count + active_reservation_count < max_completions
             )
-          RETURNING id
+          RETURNING active_reservation_count
         `,
         [parsed.linkId, scope.organizationId, scope.tenantId]
       );
-      if (!reserved[0]?.id) {
+      if (!reserved[0]) {
         throw new CrudHttpError(422, { error: "This payment link is no longer available" });
       }
       lockedLinkId = currentLink.id;
       lockedLinkSlug = currentLink.slug;
       lockedLinkTemplateId = currentLink.templateId ?? null;
       lockedLinkGatewayProvider = currentLink.gatewayProviderKey ?? null;
-      shouldEmitLockedEvent = !currentLink.isLocked;
-      const transaction2 = tx.create(CheckoutTransaction, {
-        ...parsed,
-        organizationId: scope.organizationId,
-        tenantId: scope.tenantId,
-        amount: toMoneyString(parsed.amount) ?? "0.00",
-        status: "processing"
-      });
-      tx.persist(transaction2);
-      await tx.flush();
+      shouldEmitLockedEvent = Number(reserved[0].active_reservation_count) === 1;
       return transaction2;
     });
     if (shouldEmitLockedEvent && lockedLinkId && lockedLinkSlug) {
@@ -180,9 +180,29 @@ const updateTransactionStatusCommand = {
       }
       await tx.refresh(transaction);
       if (!previousTerminal && nextTerminal) {
-        const { usageLimitReached } = applyTerminalTransactionState(link, nextStatus);
-        await tx.flush();
-        if (usageLimitReached) {
+        const released = await tx.execute(
+          `
+            UPDATE checkout_links
+            SET active_reservation_count = GREATEST(active_reservation_count - 1, 0),
+                completion_count = completion_count + ?,
+                is_locked = GREATEST(active_reservation_count - 1, 0) > 0,
+                updated_at = clock_timestamp()
+            WHERE id = ?
+              AND organization_id = ?
+              AND tenant_id = ?
+              AND deleted_at IS NULL
+            RETURNING completion_count, max_completions
+          `,
+          [nextStatus === "completed" ? 1 : 0, link.id, scope.organizationId, scope.tenantId]
+        );
+        if (!released[0]) {
+          const { translate } = await resolveTranslations();
+          throw new CrudHttpError(404, {
+            error: translate("checkout.errors.links.notFound", "Payment link not found")
+          });
+        }
+        const maxCompletions = released[0].max_completions;
+        if (nextStatus === "completed" && maxCompletions != null && Number(released[0].completion_count) === Number(maxCompletions)) {
           emitUsageLimitReached = true;
           usageLimitReachedLinkId = link.id;
           usageLimitReachedLinkSlug = link.slug;

package/dist/modules/checkout/commands/transactions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/checkout/commands/transactions.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { CheckoutLink, CheckoutTransaction } from '../data/entities'\nimport { transactionCreateSchema, transactionUpdateStatusSchema } from '../data/validators'\nimport { emitCheckoutEvent } from '../events'\nimport {\n  applyTerminalTransactionState,\n  isTerminalCheckoutStatus,\n  mapGatewayStatusToCheckoutStatus,\n  parseCheckoutInput,\n  toMoneyString,\n} from '../lib/utils'\nimport { assertValidCheckoutStatusTransition } from '../lib/transaction-status-machine'\n\nfunction resolveTransactionScope(input: { tenantId?: string | null; organizationId?: string | null }) {\n  if (!input.organizationId || !input.tenantId) {\n    throw new CrudHttpError(400, { error: 'Transaction scope is required' })\n  }\n  return {\n    organizationId: input.organizationId,\n    tenantId: input.tenantId,\n  }\n}\n\ntype CheckoutTerminalEventPayload = {\n  transactionId: string\n  linkId: string\n  templateId: string | null\n  slug: string\n  status: CheckoutTransaction['status']\n  paymentStatus: string | null\n  amount: number\n  currency: string\n  gatewayProvider: string | null\n  gatewayTransactionId: string | null\n  occurredAt: string\n  tenantId: string\n  organizationId: string\n}\n\nconst createTransactionCommand: CommandHandler<Record<string, unknown>, { id: string }> = {\n  id: 'checkout.transaction.create',\n  async execute(rawInput, ctx) {\n    const { parsed } = parseCheckoutInput(rawInput, transactionCreateSchema.parse)\n    const scope = resolveTransactionScope(parsed)\n    const em = ctx.container.resolve('em') as EntityManager\n    let lockedLinkId: string | null = null\n    let lockedLinkSlug: string | null = null\n    let lockedLinkTemplateId: string | null = null\n    let lockedLinkGatewayProvider: string | null = null\n    let shouldEmitLockedEvent = false\n    const transaction = await em.transactional(async (tx) => {\n      const currentLink = await tx.findOne(CheckoutLink, {\n        id: parsed.linkId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      })\n      if (!currentLink) {\n        throw new CrudHttpError(404, { error: 'Payment link not found' })\n      }\n      if (currentLink.status !== 'active') {\n        throw new CrudHttpError(422, { error: 'This payment link is not currently accepting payments' })\n      }\n      const reserved = await tx.getConnection().execute<Array<{ id: string }>>(\n        `\n          UPDATE checkout_links\n          SET active_reservation_count = active_reservation_count + 1,\n              is_locked = true,\n              updated_at = now()\n          WHERE id = ?\n            AND organization_id = ?\n            AND tenant_id = ?\n            AND deleted_at IS NULL\n            AND status = 'active'\n            AND (\n              max_completions IS NULL\n              OR completion_count + active_reservation_count < max_completions\n            )\n          RETURNING id\n        `,\n        [parsed.linkId, scope.organizationId, scope.tenantId],\n      )\n      if (!reserved[0]?.id) {\n        throw new CrudHttpError(422, { error: 'This payment link is no longer available' })\n      }\n      lockedLinkId = currentLink.id\n      lockedLinkSlug = currentLink.slug\n      lockedLinkTemplateId = currentLink.templateId ?? null\n      lockedLinkGatewayProvider = currentLink.gatewayProviderKey ?? null\n      shouldEmitLockedEvent = !currentLink.isLocked\n      const transaction = tx.create(CheckoutTransaction, {\n        ...parsed,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        amount: toMoneyString(parsed.amount) ?? '0.00',\n        status: 'processing',\n      })\n      tx.persist(transaction)\n      await tx.flush()\n      return transaction\n    })\n    if (shouldEmitLockedEvent && lockedLinkId && lockedLinkSlug) {\n      await emitCheckoutEvent('checkout.link.locked', {\n        id: lockedLinkId,\n        slug: lockedLinkSlug,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      }).catch(() => undefined)\n    }\n    await emitCheckoutEvent('checkout.transaction.created', {\n      transactionId: transaction.id,\n      linkId: transaction.linkId,\n      status: transaction.status,\n      amount: Number(transaction.amount),\n      currency: transaction.currencyCode,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    }).catch(() => undefined)\n    await emitCheckoutEvent('checkout.transaction.customerDataCaptured', {\n      transactionId: transaction.id,\n      linkId: transaction.linkId,\n      templateId: lockedLinkTemplateId,\n      slug: lockedLinkSlug,\n      status: transaction.status,\n      paymentStatus: transaction.paymentStatus ?? null,\n      amount: Number(transaction.amount),\n      currency: transaction.currencyCode,\n      gatewayProvider: lockedLinkGatewayProvider,\n      gatewayTransactionId: transaction.gatewayTransactionId ?? null,\n      occurredAt: new Date().toISOString(),\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      customerDataCaptured: true,\n    }).catch(() => undefined)\n    return { id: transaction.id }\n  },\n}\n\nconst updateTransactionStatusCommand: CommandHandler<Record<string, unknown>, { ok: true }> = {\n  id: 'checkout.transaction.updateStatus',\n  async execute(rawInput, ctx) {\n    const { parsed } = parseCheckoutInput(rawInput, transactionUpdateStatusSchema.parse)\n    const scope = resolveTransactionScope(parsed)\n    const em = ctx.container.resolve('em') as EntityManager\n    let terminalEventPayload: CheckoutTerminalEventPayload | null = null\n    let emitUsageLimitReached = false\n    let usageLimitReachedLinkId: string | null = null\n    let usageLimitReachedLinkSlug: string | null = null\n    await em.transactional(async (tx) => {\n      const transaction = await tx.findOne(CheckoutTransaction, {\n        id: parsed.id,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      })\n      if (!transaction) throw new CrudHttpError(404, { error: 'Transaction not found' })\n      const link = await tx.findOne(CheckoutLink, {\n        id: transaction.linkId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      })\n      if (!link) throw new CrudHttpError(404, { error: 'Payment link not found' })\n\n      const previousStatus = transaction.status\n      const nextStatus = parsed.status\n      const previousTerminal = isTerminalCheckoutStatus(previousStatus)\n      const nextTerminal = isTerminalCheckoutStatus(nextStatus)\n\n      // State-machine guard: reject any transition not permitted by the\n      // VALID_CHECKOUT_TRANSITIONS map (e.g. completed \u2192 processing).\n      // This runs inside the DB transaction so the check and the write share\n      // the same serialisable snapshot.\n      assertValidCheckoutStatusTransition(previousStatus, nextStatus)\n\n      // Resolve the new field values before the write.\n      const newPaymentStatus = parsed.paymentStatus ?? transaction.paymentStatus ?? null\n      const newGatewayTransactionId = parsed.gatewayTransactionId ?? transaction.gatewayTransactionId ?? null\n\n      // Atomic compare-and-swap: the WHERE clause pins the current status so\n      // a concurrent writer that already advanced the status to a terminal\n      // state will cause this update to match 0 rows \u2014 eliminating the TOCTOU\n      // window between the findOne above and this write.\n      const affected = await tx.nativeUpdate(\n        CheckoutTransaction,\n        {\n          id: parsed.id,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          status: previousStatus,\n        },\n        {\n          status: nextStatus,\n          paymentStatus: newPaymentStatus,\n          gatewayTransactionId: newGatewayTransactionId,\n          updatedAt: new Date(),\n        },\n      )\n\n      if (affected === 0) {\n        // A concurrent writer already advanced the status. Force a DB round-trip\n        // (refresh: true bypasses the MikroORM identity map) so the reported\n        // currentStatus reflects the winning writer's value, not the stale snapshot.\n        const actualTx = await tx.findOne(\n          CheckoutTransaction,\n          { id: parsed.id, organizationId: scope.organizationId, tenantId: scope.tenantId },\n          { fields: ['status'], refresh: true },\n        )\n        throw new CrudHttpError(409, {\n          error: `[internal] Transaction status was already updated by a concurrent process (expected \"${previousStatus}\", actual \"${actualTx?.status ?? 'unknown'}\")`,\n          code: 'concurrent_status_update',\n          expectedStatus: previousStatus,\n          currentStatus: actualTx?.status ?? 'unknown',\n          requestedStatus: nextStatus,\n        })\n      }\n\n      // Sync the entity state in the unit of work by refreshing it.\n      // This loads the updated values (status, paymentStatus, gatewayTransactionId)\n      // from the DB and marks the entity as clean, avoiding a redundant second write\n      // during the subsequent tx.flush().\n      await tx.refresh(transaction)\n\n      // Only apply terminal link state and emit the terminal event when the\n      // status actually changes \u2014 prevents double-notification on idempotent\n      // redeliveries (e.g. authorized \u2192 captured, both mapping to 'completed').\n      if (!previousTerminal && nextTerminal) {\n        const { usageLimitReached } = applyTerminalTransactionState(link, nextStatus)\n        await tx.flush()\n        if (usageLimitReached) {\n          emitUsageLimitReached = true\n          usageLimitReachedLinkId = link.id\n          usageLimitReachedLinkSlug = link.slug\n        }\n      }\n      if (nextTerminal && previousStatus !== nextStatus) {\n        terminalEventPayload = {\n          transactionId: transaction.id,\n          linkId: transaction.linkId,\n          templateId: link.templateId ?? null,\n          slug: link.slug,\n          status: transaction.status,\n          paymentStatus: transaction.paymentStatus ?? null,\n          amount: Number(transaction.amount),\n          currency: transaction.currencyCode,\n          gatewayProvider: link.gatewayProviderKey ?? null,\n          gatewayTransactionId: transaction.gatewayTransactionId ?? null,\n          occurredAt: new Date().toISOString(),\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        }\n      }\n    })\n    if (terminalEventPayload !== null) {\n      if (parsed.status === 'completed') {\n        await emitCheckoutEvent('checkout.transaction.completed', terminalEventPayload).catch(() => undefined)\n      } else if (parsed.status === 'failed') {\n        await emitCheckoutEvent('checkout.transaction.failed', terminalEventPayload).catch(() => undefined)\n      } else if (parsed.status === 'cancelled') {\n        await emitCheckoutEvent('checkout.transaction.cancelled', terminalEventPayload).catch(() => undefined)\n      } else if (parsed.status === 'expired') {\n        await emitCheckoutEvent('checkout.transaction.expired', terminalEventPayload).catch(() => undefined)\n      }\n    }\n    if (emitUsageLimitReached && usageLimitReachedLinkId && usageLimitReachedLinkSlug) {\n      await emitCheckoutEvent('checkout.link.usageLimitReached', {\n        id: usageLimitReachedLinkId,\n        slug: usageLimitReachedLinkSlug,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      }).catch(() => undefined)\n    }\n    return { ok: true }\n  },\n}\n\nregisterCommand(createTransactionCommand)\nregisterCommand(updateTransactionStatusCommand)\n\nexport function mapGatewayStatusForCommand(status: string | null | undefined) {\n  return mapGatewayStatusToCheckoutStatus(status)\n}\n"],
-  "mappings": "AAEA,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,cAAc,2BAA2B;AAClD,SAAS,yBAAyB,qCAAqC;AACvE,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,2CAA2C;AAEpD,SAAS,wBAAwB,OAAqE;AACpG,MAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,UAAU;AAC5C,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,gCAAgC,CAAC;AAAA,EACzE;AACA,SAAO;AAAA,IACL,gBAAgB,MAAM;AAAA,IACtB,UAAU,MAAM;AAAA,EAClB;AACF;AAkBA,MAAM,2BAAoF;AAAA,EACxF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,OAAO,IAAI,mBAAmB,UAAU,wBAAwB,KAAK;AAC7E,UAAM,QAAQ,wBAAwB,MAAM;AAC5C,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAI,eAA8B;AAClC,QAAI,iBAAgC;AACpC,QAAI,uBAAsC;AAC1C,QAAI,4BAA2C;AAC/C,QAAI,wBAAwB;AAC5B,UAAM,cAAc,MAAM,GAAG,cAAc,OAAO,OAAO;AACvD,YAAM,cAAc,MAAM,GAAG,QAAQ,cAAc;AAAA,QACjD,IAAI,OAAO;AAAA,QACX,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb,CAAC;AACD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAAA,MAClE;AACA,UAAI,YAAY,WAAW,UAAU;AACnC,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wDAAwD,CAAC;AAAA,MACjG;AACA,YAAM,WAAW,MAAM,GAAG,cAAc,EAAE;AAAA,QACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAgBA,CAAC,OAAO,QAAQ,MAAM,gBAAgB,MAAM,QAAQ;AAAA,MACtD;AACA,UAAI,CAAC,SAAS,CAAC,GAAG,IAAI;AACpB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2CAA2C,CAAC;AAAA,MACpF;AACA,qBAAe,YAAY;AAC3B,uBAAiB,YAAY;AAC7B,6BAAuB,YAAY,cAAc;AACjD,kCAA4B,YAAY,sBAAsB;AAC9D,8BAAwB,CAAC,YAAY;AACrC,YAAMA,eAAc,GAAG,OAAO,qBAAqB;AAAA,QACjD,GAAG;AAAA,QACH,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,QAAQ,cAAc,OAAO,MAAM,KAAK;AAAA,QACxC,QAAQ;AAAA,MACV,CAAC;AACD,SAAG,QAAQA,YAAW;AACtB,YAAM,GAAG,MAAM;AACf,aAAOA;AAAA,IACT,CAAC;AACD,QAAI,yBAAyB,gBAAgB,gBAAgB;AAC3D,YAAM,kBAAkB,wBAAwB;AAAA,QAC9C,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC1B;AACA,UAAM,kBAAkB,gCAAgC;AAAA,MACtD,eAAe,YAAY;AAAA,MAC3B,QAAQ,YAAY;AAAA,MACpB,QAAQ,YAAY;AAAA,MACpB,QAAQ,OAAO,YAAY,MAAM;AAAA,MACjC,UAAU,YAAY;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,UAAM,kBAAkB,6CAA6C;AAAA,MACnE,eAAe,YAAY;AAAA,MAC3B,QAAQ,YAAY;AAAA,MACpB,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,QAAQ,YAAY;AAAA,MACpB,eAAe,YAAY,iBAAiB;AAAA,MAC5C,QAAQ,OAAO,YAAY,MAAM;AAAA,MACjC,UAAU,YAAY;AAAA,MACtB,iBAAiB;AAAA,MACjB,sBAAsB,YAAY,wBAAwB;AAAA,MAC1D,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,MACnC,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,sBAAsB;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,YAAY,GAAG;AAAA,EAC9B;AACF;AAEA,MAAM,iCAAwF;AAAA,EAC5F,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,OAAO,IAAI,mBAAmB,UAAU,8BAA8B,KAAK;AACnF,UAAM,QAAQ,wBAAwB,MAAM;AAC5C,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAI,uBAA4D;AAChE,QAAI,wBAAwB;AAC5B,QAAI,0BAAyC;AAC7C,QAAI,4BAA2C;AAC/C,UAAM,GAAG,cAAc,OAAO,OAAO;AACnC,YAAM,cAAc,MAAM,GAAG,QAAQ,qBAAqB;AAAA,QACxD,IAAI,OAAO;AAAA,QACX,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,UAAI,CAAC,YAAa,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACjF,YAAM,OAAO,MAAM,GAAG,QAAQ,cAAc;AAAA,QAC1C,IAAI,YAAY;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb,CAAC;AACD,UAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAE3E,YAAM,iBAAiB,YAAY;AACnC,YAAM,aAAa,OAAO;AAC1B,YAAM,mBAAmB,yBAAyB,cAAc;AAChE,YAAM,eAAe,yBAAyB,UAAU;AAMxD,0CAAoC,gBAAgB,UAAU;AAG9D,YAAM,mBAAmB,OAAO,iBAAiB,YAAY,iBAAiB;AAC9E,YAAM,0BAA0B,OAAO,wBAAwB,YAAY,wBAAwB;AAMnG,YAAM,WAAW,MAAM,GAAG;AAAA,QACxB;AAAA,QACA;AAAA,UACE,IAAI,OAAO;AAAA,UACX,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,eAAe;AAAA,UACf,sBAAsB;AAAA,UACtB,WAAW,oBAAI,KAAK;AAAA,QACtB;AAAA,MACF;AAEA,UAAI,aAAa,GAAG;AAIlB,cAAM,WAAW,MAAM,GAAG;AAAA,UACxB;AAAA,UACA,EAAE,IAAI,OAAO,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,UAChF,EAAE,QAAQ,CAAC,QAAQ,GAAG,SAAS,KAAK;AAAA,QACtC;AACA,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,wFAAwF,cAAc,cAAc,UAAU,UAAU,SAAS;AAAA,UACxJ,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,eAAe,UAAU,UAAU;AAAA,UACnC,iBAAiB;AAAA,QACnB,CAAC;AAAA,MACH;AAMA,YAAM,GAAG,QAAQ,WAAW;AAK5B,UAAI,CAAC,oBAAoB,cAAc;AACrC,cAAM,EAAE,kBAAkB,IAAI,8BAA8B,MAAM,UAAU;AAC5E,cAAM,GAAG,MAAM;AACf,YAAI,mBAAmB;AACrB,kCAAwB;AACxB,oCAA0B,KAAK;AAC/B,sCAA4B,KAAK;AAAA,QACnC;AAAA,MACF;AACA,UAAI,gBAAgB,mBAAmB,YAAY;AACjD,+BAAuB;AAAA,UACrB,eAAe,YAAY;AAAA,UAC3B,QAAQ,YAAY;AAAA,UACpB,YAAY,KAAK,cAAc;AAAA,UAC/B,MAAM,KAAK;AAAA,UACX,QAAQ,YAAY;AAAA,UACpB,eAAe,YAAY,iBAAiB;AAAA,UAC5C,QAAQ,OAAO,YAAY,MAAM;AAAA,UACjC,UAAU,YAAY;AAAA,UACtB,iBAAiB,KAAK,sBAAsB;AAAA,UAC5C,sBAAsB,YAAY,wBAAwB;AAAA,UAC1D,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,UACnC,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB;AAAA,MACF;AAAA,IACF,CAAC;AACD,QAAI,yBAAyB,MAAM;AACjC,UAAI,OAAO,WAAW,aAAa;AACjC,cAAM,kBAAkB,kCAAkC,oBAAoB,EAAE,MAAM,MAAM,MAAS;AAAA,MACvG,WAAW,OAAO,WAAW,UAAU;AACrC,cAAM,kBAAkB,+BAA+B,oBAAoB,EAAE,MAAM,MAAM,MAAS;AAAA,MACpG,WAAW,OAAO,WAAW,aAAa;AACxC,cAAM,kBAAkB,kCAAkC,oBAAoB,EAAE,MAAM,MAAM,MAAS;AAAA,MACvG,WAAW,OAAO,WAAW,WAAW;AACtC,cAAM,kBAAkB,gCAAgC,oBAAoB,EAAE,MAAM,MAAM,MAAS;AAAA,MACrG;AAAA,IACF;AACA,QAAI,yBAAyB,2BAA2B,2BAA2B;AACjF,YAAM,kBAAkB,mCAAmC;AAAA,QACzD,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC1B;AACA,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AACF;AAEA,gBAAgB,wBAAwB;AACxC,gBAAgB,8BAA8B;AAEvC,SAAS,2BAA2B,QAAmC;AAC5E,SAAO,iCAAiC,MAAM;AAChD;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CheckoutLink, CheckoutTransaction } from '../data/entities'\nimport { transactionCreateSchema, transactionUpdateStatusSchema } from '../data/validators'\nimport { emitCheckoutEvent } from '../events'\nimport {\n  isTerminalCheckoutStatus,\n  mapGatewayStatusToCheckoutStatus,\n  parseCheckoutInput,\n  toMoneyString,\n} from '../lib/utils'\nimport { assertValidCheckoutStatusTransition } from '../lib/transaction-status-machine'\n\nfunction resolveTransactionScope(input: { tenantId?: string | null; organizationId?: string | null }) {\n  if (!input.organizationId || !input.tenantId) {\n    throw new CrudHttpError(400, { error: 'Transaction scope is required' })\n  }\n  return {\n    organizationId: input.organizationId,\n    tenantId: input.tenantId,\n  }\n}\n\ntype CheckoutTerminalEventPayload = {\n  transactionId: string\n  linkId: string\n  templateId: string | null\n  slug: string\n  status: CheckoutTransaction['status']\n  paymentStatus: string | null\n  amount: number\n  currency: string\n  gatewayProvider: string | null\n  gatewayTransactionId: string | null\n  occurredAt: string\n  tenantId: string\n  organizationId: string\n}\n\nconst createTransactionCommand: CommandHandler<Record<string, unknown>, { id: string }> = {\n  id: 'checkout.transaction.create',\n  async execute(rawInput, ctx) {\n    const { parsed } = parseCheckoutInput(rawInput, transactionCreateSchema.parse)\n    const scope = resolveTransactionScope(parsed)\n    const em = ctx.container.resolve('em') as EntityManager\n    let lockedLinkId: string | null = null\n    let lockedLinkSlug: string | null = null\n    let lockedLinkTemplateId: string | null = null\n    let lockedLinkGatewayProvider: string | null = null\n    let shouldEmitLockedEvent = false\n    const transaction = await em.transactional(async (tx) => {\n      const currentLink = await tx.findOne(CheckoutLink, {\n        id: parsed.linkId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      })\n      if (!currentLink) {\n        throw new CrudHttpError(404, { error: 'Payment link not found' })\n      }\n      if (currentLink.status !== 'active') {\n        throw new CrudHttpError(422, { error: 'This payment link is not currently accepting payments' })\n      }\n      const transaction = tx.create(CheckoutTransaction, {\n        ...parsed,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        amount: toMoneyString(parsed.amount) ?? '0.00',\n        status: 'processing',\n      })\n      tx.persist(transaction)\n      await tx.flush()\n      const reserved = await tx.execute<Array<{ active_reservation_count: number }>>(\n        `\n          UPDATE checkout_links\n          SET active_reservation_count = active_reservation_count + 1,\n              is_locked = true,\n              updated_at = clock_timestamp()\n          WHERE id = ?\n            AND organization_id = ?\n            AND tenant_id = ?\n            AND deleted_at IS NULL\n            AND status = 'active'\n            AND (\n              max_completions IS NULL\n              OR completion_count + active_reservation_count < max_completions\n            )\n          RETURNING active_reservation_count\n        `,\n        [parsed.linkId, scope.organizationId, scope.tenantId],\n      )\n      if (!reserved[0]) {\n        throw new CrudHttpError(422, { error: 'This payment link is no longer available' })\n      }\n      lockedLinkId = currentLink.id\n      lockedLinkSlug = currentLink.slug\n      lockedLinkTemplateId = currentLink.templateId ?? null\n      lockedLinkGatewayProvider = currentLink.gatewayProviderKey ?? null\n      shouldEmitLockedEvent = Number(reserved[0].active_reservation_count) === 1\n      return transaction\n    })\n    if (shouldEmitLockedEvent && lockedLinkId && lockedLinkSlug) {\n      await emitCheckoutEvent('checkout.link.locked', {\n        id: lockedLinkId,\n        slug: lockedLinkSlug,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      }).catch(() => undefined)\n    }\n    await emitCheckoutEvent('checkout.transaction.created', {\n      transactionId: transaction.id,\n      linkId: transaction.linkId,\n      status: transaction.status,\n      amount: Number(transaction.amount),\n      currency: transaction.currencyCode,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    }).catch(() => undefined)\n    await emitCheckoutEvent('checkout.transaction.customerDataCaptured', {\n      transactionId: transaction.id,\n      linkId: transaction.linkId,\n      templateId: lockedLinkTemplateId,\n      slug: lockedLinkSlug,\n      status: transaction.status,\n      paymentStatus: transaction.paymentStatus ?? null,\n      amount: Number(transaction.amount),\n      currency: transaction.currencyCode,\n      gatewayProvider: lockedLinkGatewayProvider,\n      gatewayTransactionId: transaction.gatewayTransactionId ?? null,\n      occurredAt: new Date().toISOString(),\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      customerDataCaptured: true,\n    }).catch(() => undefined)\n    return { id: transaction.id }\n  },\n}\n\nconst updateTransactionStatusCommand: CommandHandler<Record<string, unknown>, { ok: true }> = {\n  id: 'checkout.transaction.updateStatus',\n  async execute(rawInput, ctx) {\n    const { parsed } = parseCheckoutInput(rawInput, transactionUpdateStatusSchema.parse)\n    const scope = resolveTransactionScope(parsed)\n    const em = ctx.container.resolve('em') as EntityManager\n    let terminalEventPayload: CheckoutTerminalEventPayload | null = null\n    let emitUsageLimitReached = false\n    let usageLimitReachedLinkId: string | null = null\n    let usageLimitReachedLinkSlug: string | null = null\n    await em.transactional(async (tx) => {\n      const transaction = await tx.findOne(CheckoutTransaction, {\n        id: parsed.id,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n      })\n      if (!transaction) throw new CrudHttpError(404, { error: 'Transaction not found' })\n      const link = await tx.findOne(CheckoutLink, {\n        id: transaction.linkId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      })\n      if (!link) throw new CrudHttpError(404, { error: 'Payment link not found' })\n\n      const previousStatus = transaction.status\n      const nextStatus = parsed.status\n      const previousTerminal = isTerminalCheckoutStatus(previousStatus)\n      const nextTerminal = isTerminalCheckoutStatus(nextStatus)\n\n      // State-machine guard: reject any transition not permitted by the\n      // VALID_CHECKOUT_TRANSITIONS map (e.g. completed \u2192 processing).\n      // This runs inside the DB transaction so the check and the write share\n      // the same serialisable snapshot.\n      assertValidCheckoutStatusTransition(previousStatus, nextStatus)\n\n      // Resolve the new field values before the write.\n      const newPaymentStatus = parsed.paymentStatus ?? transaction.paymentStatus ?? null\n      const newGatewayTransactionId = parsed.gatewayTransactionId ?? transaction.gatewayTransactionId ?? null\n\n      // Atomic compare-and-swap: the WHERE clause pins the current status so\n      // a concurrent writer that already advanced the status to a terminal\n      // state will cause this update to match 0 rows \u2014 eliminating the TOCTOU\n      // window between the findOne above and this write.\n      const affected = await tx.nativeUpdate(\n        CheckoutTransaction,\n        {\n          id: parsed.id,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          status: previousStatus,\n        },\n        {\n          status: nextStatus,\n          paymentStatus: newPaymentStatus,\n          gatewayTransactionId: newGatewayTransactionId,\n          updatedAt: new Date(),\n        },\n      )\n\n      if (affected === 0) {\n        // A concurrent writer already advanced the status. Force a DB round-trip\n        // (refresh: true bypasses the MikroORM identity map) so the reported\n        // currentStatus reflects the winning writer's value, not the stale snapshot.\n        const actualTx = await tx.findOne(\n          CheckoutTransaction,\n          { id: parsed.id, organizationId: scope.organizationId, tenantId: scope.tenantId },\n          { fields: ['status'], refresh: true },\n        )\n        throw new CrudHttpError(409, {\n          error: `[internal] Transaction status was already updated by a concurrent process (expected \"${previousStatus}\", actual \"${actualTx?.status ?? 'unknown'}\")`,\n          code: 'concurrent_status_update',\n          expectedStatus: previousStatus,\n          currentStatus: actualTx?.status ?? 'unknown',\n          requestedStatus: nextStatus,\n        })\n      }\n\n      // Sync the entity state in the unit of work by refreshing it.\n      // This loads the updated values (status, paymentStatus, gatewayTransactionId)\n      // from the DB and marks the entity as clean, avoiding a redundant second write\n      // during the subsequent tx.flush().\n      await tx.refresh(transaction)\n\n      // Only apply terminal link state and emit the terminal event when the\n      // status actually changes \u2014 prevents double-notification on idempotent\n      // redeliveries (e.g. authorized \u2192 captured, both mapping to 'completed').\n      if (!previousTerminal && nextTerminal) {\n        const released = await tx.execute<Array<{ completion_count: number; max_completions: number | null }>>(\n          `\n            UPDATE checkout_links\n            SET active_reservation_count = GREATEST(active_reservation_count - 1, 0),\n                completion_count = completion_count + ?,\n                is_locked = GREATEST(active_reservation_count - 1, 0) > 0,\n                updated_at = clock_timestamp()\n            WHERE id = ?\n              AND organization_id = ?\n              AND tenant_id = ?\n              AND deleted_at IS NULL\n            RETURNING completion_count, max_completions\n          `,\n          [nextStatus === 'completed' ? 1 : 0, link.id, scope.organizationId, scope.tenantId],\n        )\n        if (!released[0]) {\n          const { translate } = await resolveTranslations()\n          throw new CrudHttpError(404, {\n            error: translate('checkout.errors.links.notFound', 'Payment link not found'),\n          })\n        }\n        const maxCompletions = released[0].max_completions\n        if (\n          nextStatus === 'completed'\n          && maxCompletions != null\n          && Number(released[0].completion_count) === Number(maxCompletions)\n        ) {\n          emitUsageLimitReached = true\n          usageLimitReachedLinkId = link.id\n          usageLimitReachedLinkSlug = link.slug\n        }\n      }\n      if (nextTerminal && previousStatus !== nextStatus) {\n        terminalEventPayload = {\n          transactionId: transaction.id,\n          linkId: transaction.linkId,\n          templateId: link.templateId ?? null,\n          slug: link.slug,\n          status: transaction.status,\n          paymentStatus: transaction.paymentStatus ?? null,\n          amount: Number(transaction.amount),\n          currency: transaction.currencyCode,\n          gatewayProvider: link.gatewayProviderKey ?? null,\n          gatewayTransactionId: transaction.gatewayTransactionId ?? null,\n          occurredAt: new Date().toISOString(),\n          tenantId: scope.tenantId,\n          organizationId: scope.organizationId,\n        }\n      }\n    })\n    if (terminalEventPayload !== null) {\n      if (parsed.status === 'completed') {\n        await emitCheckoutEvent('checkout.transaction.completed', terminalEventPayload).catch(() => undefined)\n      } else if (parsed.status === 'failed') {\n        await emitCheckoutEvent('checkout.transaction.failed', terminalEventPayload).catch(() => undefined)\n      } else if (parsed.status === 'cancelled') {\n        await emitCheckoutEvent('checkout.transaction.cancelled', terminalEventPayload).catch(() => undefined)\n      } else if (parsed.status === 'expired') {\n        await emitCheckoutEvent('checkout.transaction.expired', terminalEventPayload).catch(() => undefined)\n      }\n    }\n    if (emitUsageLimitReached && usageLimitReachedLinkId && usageLimitReachedLinkSlug) {\n      await emitCheckoutEvent('checkout.link.usageLimitReached', {\n        id: usageLimitReachedLinkId,\n        slug: usageLimitReachedLinkSlug,\n        tenantId: scope.tenantId,\n        organizationId: scope.organizationId,\n      }).catch(() => undefined)\n    }\n    return { ok: true }\n  },\n}\n\nregisterCommand(createTransactionCommand)\nregisterCommand(updateTransactionStatusCommand)\n\nexport function mapGatewayStatusForCommand(status: string | null | undefined) {\n  return mapGatewayStatusToCheckoutStatus(status)\n}\n"],
+  "mappings": "AAEA,SAAS,uBAAuB;AAChC,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AACpC,SAAS,cAAc,2BAA2B;AAClD,SAAS,yBAAyB,qCAAqC;AACvE,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,2CAA2C;AAEpD,SAAS,wBAAwB,OAAqE;AACpG,MAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,UAAU;AAC5C,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,gCAAgC,CAAC;AAAA,EACzE;AACA,SAAO;AAAA,IACL,gBAAgB,MAAM;AAAA,IACtB,UAAU,MAAM;AAAA,EAClB;AACF;AAkBA,MAAM,2BAAoF;AAAA,EACxF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,OAAO,IAAI,mBAAmB,UAAU,wBAAwB,KAAK;AAC7E,UAAM,QAAQ,wBAAwB,MAAM;AAC5C,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAI,eAA8B;AAClC,QAAI,iBAAgC;AACpC,QAAI,uBAAsC;AAC1C,QAAI,4BAA2C;AAC/C,QAAI,wBAAwB;AAC5B,UAAM,cAAc,MAAM,GAAG,cAAc,OAAO,OAAO;AACvD,YAAM,cAAc,MAAM,GAAG,QAAQ,cAAc;AAAA,QACjD,IAAI,OAAO;AAAA,QACX,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb,CAAC;AACD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAAA,MAClE;AACA,UAAI,YAAY,WAAW,UAAU;AACnC,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wDAAwD,CAAC;AAAA,MACjG;AACA,YAAMA,eAAc,GAAG,OAAO,qBAAqB;AAAA,QACjD,GAAG;AAAA,QACH,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,QAAQ,cAAc,OAAO,MAAM,KAAK;AAAA,QACxC,QAAQ;AAAA,MACV,CAAC;AACD,SAAG,QAAQA,YAAW;AACtB,YAAM,GAAG,MAAM;AACf,YAAM,WAAW,MAAM,GAAG;AAAA,QACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAgBA,CAAC,OAAO,QAAQ,MAAM,gBAAgB,MAAM,QAAQ;AAAA,MACtD;AACA,UAAI,CAAC,SAAS,CAAC,GAAG;AAChB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,2CAA2C,CAAC;AAAA,MACpF;AACA,qBAAe,YAAY;AAC3B,uBAAiB,YAAY;AAC7B,6BAAuB,YAAY,cAAc;AACjD,kCAA4B,YAAY,sBAAsB;AAC9D,8BAAwB,OAAO,SAAS,CAAC,EAAE,wBAAwB,MAAM;AACzE,aAAOA;AAAA,IACT,CAAC;AACD,QAAI,yBAAyB,gBAAgB,gBAAgB;AAC3D,YAAM,kBAAkB,wBAAwB;AAAA,QAC9C,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC1B;AACA,UAAM,kBAAkB,gCAAgC;AAAA,MACtD,eAAe,YAAY;AAAA,MAC3B,QAAQ,YAAY;AAAA,MACpB,QAAQ,YAAY;AAAA,MACpB,QAAQ,OAAO,YAAY,MAAM;AAAA,MACjC,UAAU,YAAY;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,UAAM,kBAAkB,6CAA6C;AAAA,MACnE,eAAe,YAAY;AAAA,MAC3B,QAAQ,YAAY;AAAA,MACpB,YAAY;AAAA,MACZ,MAAM;AAAA,MACN,QAAQ,YAAY;AAAA,MACpB,eAAe,YAAY,iBAAiB;AAAA,MAC5C,QAAQ,OAAO,YAAY,MAAM;AAAA,MACjC,UAAU,YAAY;AAAA,MACtB,iBAAiB;AAAA,MACjB,sBAAsB,YAAY,wBAAwB;AAAA,MAC1D,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,MACnC,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,sBAAsB;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,YAAY,GAAG;AAAA,EAC9B;AACF;AAEA,MAAM,iCAAwF;AAAA,EAC5F,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,OAAO,IAAI,mBAAmB,UAAU,8BAA8B,KAAK;AACnF,UAAM,QAAQ,wBAAwB,MAAM;AAC5C,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,QAAI,uBAA4D;AAChE,QAAI,wBAAwB;AAC5B,QAAI,0BAAyC;AAC7C,QAAI,4BAA2C;AAC/C,UAAM,GAAG,cAAc,OAAO,OAAO;AACnC,YAAM,cAAc,MAAM,GAAG,QAAQ,qBAAqB;AAAA,QACxD,IAAI,OAAO;AAAA,QACX,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,UAAI,CAAC,YAAa,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wBAAwB,CAAC;AACjF,YAAM,OAAO,MAAM,GAAG,QAAQ,cAAc;AAAA,QAC1C,IAAI,YAAY;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb,CAAC;AACD,UAAI,CAAC,KAAM,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,yBAAyB,CAAC;AAE3E,YAAM,iBAAiB,YAAY;AACnC,YAAM,aAAa,OAAO;AAC1B,YAAM,mBAAmB,yBAAyB,cAAc;AAChE,YAAM,eAAe,yBAAyB,UAAU;AAMxD,0CAAoC,gBAAgB,UAAU;AAG9D,YAAM,mBAAmB,OAAO,iBAAiB,YAAY,iBAAiB;AAC9E,YAAM,0BAA0B,OAAO,wBAAwB,YAAY,wBAAwB;AAMnG,YAAM,WAAW,MAAM,GAAG;AAAA,QACxB;AAAA,QACA;AAAA,UACE,IAAI,OAAO;AAAA,UACX,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,eAAe;AAAA,UACf,sBAAsB;AAAA,UACtB,WAAW,oBAAI,KAAK;AAAA,QACtB;AAAA,MACF;AAEA,UAAI,aAAa,GAAG;AAIlB,cAAM,WAAW,MAAM,GAAG;AAAA,UACxB;AAAA,UACA,EAAE,IAAI,OAAO,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,UAChF,EAAE,QAAQ,CAAC,QAAQ,GAAG,SAAS,KAAK;AAAA,QACtC;AACA,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,wFAAwF,cAAc,cAAc,UAAU,UAAU,SAAS;AAAA,UACxJ,MAAM;AAAA,UACN,gBAAgB;AAAA,UAChB,eAAe,UAAU,UAAU;AAAA,UACnC,iBAAiB;AAAA,QACnB,CAAC;AAAA,MACH;AAMA,YAAM,GAAG,QAAQ,WAAW;AAK5B,UAAI,CAAC,oBAAoB,cAAc;AACrC,cAAM,WAAW,MAAM,GAAG;AAAA,UACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAYA,CAAC,eAAe,cAAc,IAAI,GAAG,KAAK,IAAI,MAAM,gBAAgB,MAAM,QAAQ;AAAA,QACpF;AACA,YAAI,CAAC,SAAS,CAAC,GAAG;AAChB,gBAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,gBAAM,IAAI,cAAc,KAAK;AAAA,YAC3B,OAAO,UAAU,kCAAkC,wBAAwB;AAAA,UAC7E,CAAC;AAAA,QACH;AACA,cAAM,iBAAiB,SAAS,CAAC,EAAE;AACnC,YACE,eAAe,eACZ,kBAAkB,QAClB,OAAO,SAAS,CAAC,EAAE,gBAAgB,MAAM,OAAO,cAAc,GACjE;AACA,kCAAwB;AACxB,oCAA0B,KAAK;AAC/B,sCAA4B,KAAK;AAAA,QACnC;AAAA,MACF;AACA,UAAI,gBAAgB,mBAAmB,YAAY;AACjD,+BAAuB;AAAA,UACrB,eAAe,YAAY;AAAA,UAC3B,QAAQ,YAAY;AAAA,UACpB,YAAY,KAAK,cAAc;AAAA,UAC/B,MAAM,KAAK;AAAA,UACX,QAAQ,YAAY;AAAA,UACpB,eAAe,YAAY,iBAAiB;AAAA,UAC5C,QAAQ,OAAO,YAAY,MAAM;AAAA,UACjC,UAAU,YAAY;AAAA,UACtB,iBAAiB,KAAK,sBAAsB;AAAA,UAC5C,sBAAsB,YAAY,wBAAwB;AAAA,UAC1D,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,UACnC,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB;AAAA,MACF;AAAA,IACF,CAAC;AACD,QAAI,yBAAyB,MAAM;AACjC,UAAI,OAAO,WAAW,aAAa;AACjC,cAAM,kBAAkB,kCAAkC,oBAAoB,EAAE,MAAM,MAAM,MAAS;AAAA,MACvG,WAAW,OAAO,WAAW,UAAU;AACrC,cAAM,kBAAkB,+BAA+B,oBAAoB,EAAE,MAAM,MAAM,MAAS;AAAA,MACpG,WAAW,OAAO,WAAW,aAAa;AACxC,cAAM,kBAAkB,kCAAkC,oBAAoB,EAAE,MAAM,MAAM,MAAS;AAAA,MACvG,WAAW,OAAO,WAAW,WAAW;AACtC,cAAM,kBAAkB,gCAAgC,oBAAoB,EAAE,MAAM,MAAM,MAAS;AAAA,MACrG;AAAA,IACF;AACA,QAAI,yBAAyB,2BAA2B,2BAA2B;AACjF,YAAM,kBAAkB,mCAAmC;AAAA,QACzD,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,MACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC1B;AACA,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AACF;AAEA,gBAAgB,wBAAwB;AACxC,gBAAgB,8BAA8B;AAEvC,SAAS,2BAA2B,QAAmC;AAC5E,SAAO,iCAAiC,MAAM;AAChD;",
   "names": ["transaction"]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/checkout",
-  "version": "0.10.1-develop.7716.1.cefe7975df",
+  "version": "0.10.1-develop.7721.1.b5c4a00a68",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -62,18 +62,18 @@
     }
   },
   "dependencies": {
-    "@open-mercato/core": "0.10.1-develop.7716.1.cefe7975df",
-    "@open-mercato/ui": "0.10.1-develop.7716.1.cefe7975df",
+    "@open-mercato/core": "0.10.1-develop.7721.1.b5c4a00a68",
+    "@open-mercato/ui": "0.10.1-develop.7721.1.b5c4a00a68",
     "bcryptjs": "^3.0.3"
   },
   "peerDependencies": {
     "@mikro-orm/postgresql": "^7.0.14",
-    "@open-mercato/shared": "0.10.1-develop.7716.1.cefe7975df",
+    "@open-mercato/shared": "0.10.1-develop.7721.1.b5c4a00a68",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.10.1-develop.7716.1.cefe7975df",
+    "@open-mercato/shared": "0.10.1-develop.7721.1.b5c4a00a68",
     "@types/jest": "^30.0.0",
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.5",

package/src/modules/checkout/__integration__/TC-CHKT-046-pay-link-usage-counters.spec.ts

@@ -0,0 +1,136 @@
+import { expect, test, type APIRequestContext } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'
+import { expectOperation, skipIfUndoTestsDisabled, undoOk } from '@open-mercato/core/helpers/integration/undoHarness'
+import {
+  createFixedTemplateInput,
+  createLinkFixture,
+  deleteCheckoutEntityIfExists,
+  readLink,
+  submitPayLink,
+  updateLink,
+} from './helpers/fixtures'
+
+/**
+ * TC-CHKT-046: Pay-link usage counters stay equal to the link's transactions.
+ *
+ * The example mock gateway captures every session immediately, so each accepted
+ * submit reserves a usage slot and completes it inside one request. Parallel submits
+ * are therefore parallel terminal transitions on the same link row.
+ *
+ * Invariants: completionCount = completed payments, activeReservationCount = payments
+ * in flight (0 here), isLocked = activeReservationCount > 0, never more completions
+ * than maxCompletions — including after undoing an edit made before the payments.
+ */
+
+const PAYMENT = { customerData: {}, acceptedLegalConsents: {}, amount: 49.99 }
+
+async function payInParallel(request: APIRequestContext, slug: string, count: number) {
+  return Promise.all(Array.from({ length: count }, () => submitPayLink(request, slug, PAYMENT)))
+}
+
+test.describe('TC-CHKT-046: Pay-link usage counters under concurrent payments and undo', () => {
+  test('parallel payments on one link are all counted and release their reservations', async ({ request }) => {
+    const token = await getAuthToken(request)
+    let linkId: string | null = null
+    try {
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'active', collectCustomerDetails: false }))
+      linkId = link.id
+
+      const responses = await payInParallel(request, link.slug, 4)
+      expect(responses.map((response) => response.status())).toEqual([201, 201, 201, 201])
+
+      const stored = await readLink(request, token, link.id)
+      expect(stored.completionCount).toBe(4)
+      expect(stored.activeReservationCount).toBe(0)
+      expect(stored.isLocked).toBe(false)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+
+  test('a duplicated Idempotency-Key submit does not leave a reservation behind', async ({ request }) => {
+    const token = await getAuthToken(request)
+    let linkId: string | null = null
+    try {
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({
+        status: 'active',
+        collectCustomerDetails: false,
+        maxCompletions: 2,
+      }))
+      linkId = link.id
+      const idempotencyKey = `tc-chkt-046-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`
+
+      const responses = await Promise.all([
+        submitPayLink(request, link.slug, PAYMENT, { idempotencyKey }),
+        submitPayLink(request, link.slug, PAYMENT, { idempotencyKey }),
+      ])
+      const bodies = await Promise.all(responses.map((response) => response.json() as Promise<{ transactionId?: string }>))
+      expect(bodies[0].transactionId).toBeTruthy()
+      expect(bodies[1].transactionId).toBe(bodies[0].transactionId)
+
+      const stored = await readLink(request, token, link.id)
+      expect(stored.completionCount).toBe(1)
+      expect(stored.activeReservationCount).toBe(0)
+      expect(stored.isLocked).toBe(false)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+
+  test('a limited link sells exactly its limit under parallel payments', async ({ request }) => {
+    const token = await getAuthToken(request)
+    let linkId: string | null = null
+    try {
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({
+        status: 'active',
+        collectCustomerDetails: false,
+        maxCompletions: 2,
+      }))
+      linkId = link.id
+
+      const responses = await payInParallel(request, link.slug, 6)
+      const accepted = responses.filter((response) => response.status() === 201)
+      expect(accepted).toHaveLength(2)
+
+      const stored = await readLink(request, token, link.id)
+      expect(stored.completionCount).toBe(2)
+      expect(stored.activeReservationCount).toBe(0)
+      expect(stored.isLocked).toBe(false)
+
+      const afterLimit = await submitPayLink(request, link.slug, PAYMENT)
+      expect(afterLimit.status()).toBe(422)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+
+  test('undoing an edit made before a sale does not reopen a sold-out link', async ({ request }) => {
+    skipIfUndoTestsDisabled()
+    const token = await getAuthToken(request)
+    let linkId: string | null = null
+    try {
+      const input = createFixedTemplateInput({ status: 'active', collectCustomerDetails: false, maxCompletions: 1 })
+      const link = await createLinkFixture(request, token, input)
+      linkId = link.id
+
+      const updateResponse = await updateLink(request, token, link.id, { ...input, slug: link.slug, title: `${input.title} (edited)` })
+      expect(updateResponse.status()).toBe(200)
+      const updateOperation = expectOperation(updateResponse, 'checkout.link.update')
+
+      const sale = await submitPayLink(request, link.slug, PAYMENT)
+      expect(sale.status()).toBe(201)
+
+      await undoOk(request, token, updateOperation.undoToken, 'undo pay-link edit after a sale')
+
+      const stored = await readLink(request, token, link.id)
+      expect(stored.title).toBe(input.title)
+      expect(stored.completionCount).toBe(1)
+      expect(stored.activeReservationCount).toBe(0)
+
+      const afterUndo = await submitPayLink(request, link.slug, PAYMENT)
+      expect(afterUndo.status()).toBe(422)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+})

package/src/modules/checkout/__integration__/helpers/fixtures.ts

@@ -71,6 +71,7 @@ export type CheckoutLinkRecord = {
   templateId?: string | null
   completionCount?: number
   activeReservationCount?: number
+  isLocked?: boolean
   fixedPriceAmount?: number | null
   displayCustomFieldsOnPage?: boolean
   publicCustomFields?: Array<{ key?: string; label?: string; value?: unknown }>

package/src/modules/checkout/commands/__tests__/create-transaction-reservation.test.ts

@@ -0,0 +1,124 @@
+/** @jest-environment node */
+
+import { commandRegistry } from '@open-mercato/shared/lib/commands/registry'
+import type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands/types'
+
+import '../transactions'
+
+jest.mock('../../events', () => ({
+  emitCheckoutEvent: jest.fn(async () => undefined),
+}))
+
+const { emitCheckoutEvent } = jest.requireMock('../../events') as {
+  emitCheckoutEvent: jest.Mock
+}
+
+const ORG_ID = '123e4567-e89b-12d3-a456-426614174000'
+const TENANT_ID = '123e4567-e89b-12d3-a456-426614174001'
+const LINK_ID = '123e4567-e89b-12d3-a456-426614174010'
+const TX_ID = '123e4567-e89b-12d3-a456-426614174020'
+
+type ReservedRow = { id?: string; active_reservation_count: number }
+
+function makeMockEm(options: { isLocked?: boolean; reserved?: ReservedRow[] } = {}) {
+  const reserved = options.reserved ?? [{ id: LINK_ID, active_reservation_count: 1 }]
+  const link = {
+    id: LINK_ID,
+    organizationId: ORG_ID,
+    tenantId: TENANT_ID,
+    slug: 'test-link',
+    templateId: null,
+    gatewayProviderKey: 'stripe',
+    status: 'active',
+    isLocked: options.isLocked ?? false,
+    deletedAt: null,
+  }
+  const poolExecute = jest.fn(async () => reserved)
+  const tx = {
+    findOne: jest.fn(async () => link),
+    create: jest.fn((_entity: unknown, data: Record<string, unknown>) => ({ id: TX_ID, ...data })),
+    persist: jest.fn(),
+    flush: jest.fn(async () => undefined),
+    execute: jest.fn(async () => reserved),
+    getConnection: jest.fn(() => ({ execute: poolExecute })),
+  }
+  const em = {
+    transactional: jest.fn(async (fn: (inner: typeof tx) => Promise<unknown>) => fn(tx)),
+  }
+  return { em, tx, poolExecute }
+}
+
+function makeContext(em: unknown): CommandRuntimeContext {
+  return {
+    container: {
+      resolve: (token: string) => (token === 'em' ? em : null),
+    } as unknown as CommandRuntimeContext['container'],
+    auth: null,
+    organizationScope: null,
+    selectedOrganizationId: ORG_ID,
+    organizationIds: [ORG_ID],
+  }
+}
+
+async function runCreate(em: unknown) {
+  const handler = commandRegistry.get('checkout.transaction.create')
+  if (!handler) throw new Error('checkout.transaction.create not registered')
+  return handler.execute({
+    linkId: LINK_ID,
+    amount: 49.99,
+    currencyCode: 'USD',
+    idempotencyKey: 'idempotency-key-0001',
+    customerData: {},
+    organizationId: ORG_ID,
+    tenantId: TENANT_ID,
+  }, makeContext(em))
+}
+
+function reservationCalls(mock: jest.Mock) {
+  return mock.mock.calls.filter(([sql]) => typeof sql === 'string' && sql.includes('UPDATE checkout_links'))
+}
+
+describe('createTransactionCommand — usage slot reservation', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+  })
+
+  it('reserves the slot through the transaction, after inserting the transaction row', async () => {
+    const { em, tx, poolExecute } = makeMockEm()
+
+    await runCreate(em)
+
+    expect(reservationCalls(poolExecute)).toHaveLength(0)
+    const calls = reservationCalls(tx.execute)
+    expect(calls).toHaveLength(1)
+    const [sql, params] = calls[0] as [string, unknown[]]
+    expect(sql).toMatch(/active_reservation_count = active_reservation_count \+ 1/)
+    expect(sql).toMatch(/completion_count \+ active_reservation_count < max_completions/)
+    expect(params).toEqual([LINK_ID, ORG_ID, TENANT_ID])
+    expect(tx.flush.mock.invocationCallOrder[0]).toBeLessThan(tx.execute.mock.invocationCallOrder[0])
+  })
+
+  it('rejects with 422 and emits nothing when no slot is left', async () => {
+    const { em } = makeMockEm({ reserved: [] })
+
+    await expect(runCreate(em)).rejects.toMatchObject({ status: 422 })
+    expect(emitCheckoutEvent).not.toHaveBeenCalled()
+  })
+
+  it('emits checkout.link.locked when this reservation takes the link from zero to one', async () => {
+    const { em } = makeMockEm({ isLocked: false, reserved: [{ id: LINK_ID, active_reservation_count: 1 }] })
+
+    await runCreate(em)
+
+    expect(emitCheckoutEvent).toHaveBeenCalledWith('checkout.link.locked', expect.objectContaining({ id: LINK_ID }))
+  })
+
+  it('does not emit checkout.link.locked when another reservation already holds the link', async () => {
+    const { em } = makeMockEm({ isLocked: false, reserved: [{ id: LINK_ID, active_reservation_count: 2 }] })
+
+    await runCreate(em)
+
+    expect(emitCheckoutEvent).not.toHaveBeenCalledWith('checkout.link.locked', expect.any(Object))
+    expect(emitCheckoutEvent).toHaveBeenCalledWith('checkout.transaction.created', expect.any(Object))
+  })
+})