@open-mercato/checkout 0.6.4-develop.4371.1.8f3030407e → 0.6.4

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:checkout] found 147 entry points
+[build:checkout] found 153 entry points
 [build:checkout] built successfully

package/dist/modules/checkout/__integration__/TC-CHK-CRUDFORM-001.spec.js

@@ -0,0 +1,125 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/modules/core/__integration__/helpers/api";
+import {
+  assertScalarFieldsPersisted,
+  skipIfCrudFormExtensionTestsDisabled
+} from "@open-mercato/core/helpers/integration/crudFormPersistence";
+import {
+  createPriceListTemplateInput,
+  createTemplateFixture,
+  deleteCheckoutEntityIfExists,
+  readTemplate,
+  updateTemplate
+} from "./helpers/fixtures.js";
+test.describe("TC-CHK-CRUDFORM-001: pay-link template CrudForm persists scalars, array + custom fields", () => {
+  test.beforeAll(() => {
+    skipIfCrudFormExtensionTestsDisabled();
+  });
+  test("round-trips scalars, priceListItems array, and custom fields on create and update", async ({ request }) => {
+    const token = await getAuthToken(request);
+    const stamp = Date.now();
+    let templateId = null;
+    try {
+      const createInput = createPriceListTemplateInput({
+        name: `QA CRUDFORM Template ${stamp}`,
+        title: `QA CRUDFORM Template Title ${stamp}`,
+        subtitle: "Original template subtitle",
+        description: "Original template description",
+        priceListItems: [
+          { id: "tier-basic", description: "Basic tier", amount: 19.99, currencyCode: "USD" },
+          { id: "tier-pro", description: "Pro tier", amount: 49.99, currencyCode: "USD" }
+        ],
+        collectCustomerDetails: true,
+        displayCustomFieldsOnPage: true,
+        customFieldsetCode: "service_package",
+        maxCompletions: 25,
+        status: "draft",
+        customFields: {
+          service_deliverables: "Discovery workshop and implementation memo",
+          delivery_timeline: "Within 5 business days",
+          support_contact: "ops@example.test"
+        }
+      });
+      templateId = await createTemplateFixture(request, token, createInput);
+      const afterCreate = await readTemplate(request, token, templateId);
+      assertScalarFieldsPersisted(
+        afterCreate,
+        {
+          name: `QA CRUDFORM Template ${stamp}`,
+          title: `QA CRUDFORM Template Title ${stamp}`,
+          subtitle: "Original template subtitle",
+          description: "Original template description",
+          pricingMode: "price_list",
+          priceListItems: [
+            { id: "tier-basic", description: "Basic tier", amount: 19.99, currencyCode: "USD" },
+            { id: "tier-pro", description: "Pro tier", amount: 49.99, currencyCode: "USD" }
+          ],
+          collectCustomerDetails: true,
+          displayCustomFieldsOnPage: true,
+          customFieldsetCode: "service_package",
+          maxCompletions: 25,
+          status: "draft"
+        },
+        "after-create"
+      );
+      expect(afterCreate.customFields, "after-create custom fields should persist").toMatchObject({
+        service_deliverables: "Discovery workshop and implementation memo",
+        delivery_timeline: "Within 5 business days",
+        support_contact: "ops@example.test"
+      });
+      const updatePayload = {
+        name: `QA CRUDFORM Template ${stamp} EDITED`,
+        title: `QA CRUDFORM Template Title ${stamp} EDITED`,
+        subtitle: "Updated template subtitle",
+        description: "Updated template description",
+        pricingMode: "price_list",
+        priceListItems: [
+          { id: "tier-solo", description: "Solo tier", amount: 99, currencyCode: "USD" }
+        ],
+        gatewayProviderKey: "mock",
+        collectCustomerDetails: false,
+        displayCustomFieldsOnPage: false,
+        customFieldsetCode: "service_package",
+        maxCompletions: 50,
+        status: "active",
+        customFields: {
+          delivery_timeline: "Within 2 business days",
+          session_format: "Remote video call"
+        }
+      };
+      const updateResponse = await updateTemplate(request, token, templateId, updatePayload);
+      expect(
+        updateResponse.ok(),
+        `update template failed: ${updateResponse.status()}`
+      ).toBeTruthy();
+      const afterUpdate = await readTemplate(request, token, templateId);
+      assertScalarFieldsPersisted(
+        afterUpdate,
+        {
+          name: `QA CRUDFORM Template ${stamp} EDITED`,
+          title: `QA CRUDFORM Template Title ${stamp} EDITED`,
+          subtitle: "Updated template subtitle",
+          description: "Updated template description",
+          pricingMode: "price_list",
+          priceListItems: [
+            { id: "tier-solo", description: "Solo tier", amount: 99, currencyCode: "USD" }
+          ],
+          collectCustomerDetails: false,
+          displayCustomFieldsOnPage: false,
+          maxCompletions: 50,
+          status: "active"
+        },
+        "after-update"
+      );
+      expect(afterUpdate.customFields, "after-update custom fields should persist + retain omitted keys").toMatchObject({
+        delivery_timeline: "Within 2 business days",
+        session_format: "Remote video call",
+        service_deliverables: "Discovery workshop and implementation memo",
+        support_contact: "ops@example.test"
+      });
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+});
+//# sourceMappingURL=TC-CHK-CRUDFORM-001.spec.js.map

package/dist/modules/checkout/__integration__/TC-CHK-CRUDFORM-001.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/__integration__/TC-CHK-CRUDFORM-001.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'\nimport {\n  assertScalarFieldsPersisted,\n  skipIfCrudFormExtensionTestsDisabled,\n} from '@open-mercato/core/helpers/integration/crudFormPersistence'\nimport {\n  createPriceListTemplateInput,\n  createTemplateFixture,\n  deleteCheckoutEntityIfExists,\n  readTemplate,\n  updateTemplate,\n  type CheckoutLinkInput,\n} from './helpers/fixtures'\n\n/**\n * TC-CHK-CRUDFORM-001: pay-link template CrudForm persists scalars, a price-list array\n * + custom fields (#2466 / #2566).\n *\n * The checkout template surface is hand-written (command bus + bespoke serializer), so it\n * does NOT fit `runCrudFormRoundTrip` from the sweep harness:\n * - writes go through the collection POST (`/api/checkout/templates`) but updates/deletes go\n *   through the RESTful detail route (`/api/checkout/templates/[id]`), not a `?id=` collection\n *   route;\n * - the serializer returns camelCase fields (not the makeCrud snake_case shape);\n * - custom fields come back as a top-level `customFields` object (not an array / `customValues`).\n *\n * This spec therefore drives the canonical create \u2192 read-back \u2192 assert \u2192 update \u2192 read-back \u2192\n * assert \u2192 delete cycle inline using the checkout integration fixtures, while reusing the sweep\n * harness gate (`skipIfCrudFormExtensionTestsDisabled`) and scalar assertion helper. It proves\n * every field type the template CrudForm edits round-trips: string scalars, enums (pricingMode,\n * status), booleans, an integer, the `priceListItems` array, and default-seeded custom fields.\n *\n * Verified contract:\n * - Read-back uses the detail GET (the list route does not filter by `?ids=`/`?id=`).\n * - Custom fields submit as a `customFields` object and return under `record.customFields`.\n * - PUT is a partial update \u2014 omitted custom fields are retained.\n * - Self-contained: custom-field definitions are seeded by `seedDefaults`; the template is the\n *   only fixture and is deleted in `finally`.\n *\n * Gated by `OM_INTEGRATION_CRUDFORM_EXTENSION_TESTS_DISABLED` (default off \u2192 runs).\n */\ntest.describe('TC-CHK-CRUDFORM-001: pay-link template CrudForm persists scalars, array + custom fields', () => {\n  test.beforeAll(() => {\n    skipIfCrudFormExtensionTestsDisabled()\n  })\n\n  test('round-trips scalars, priceListItems array, and custom fields on create and update', async ({ request }) => {\n    const token = await getAuthToken(request)\n    const stamp = Date.now()\n    let templateId: string | null = null\n\n    try {\n      const createInput: CheckoutLinkInput = createPriceListTemplateInput({\n        name: `QA CRUDFORM Template ${stamp}`,\n        title: `QA CRUDFORM Template Title ${stamp}`,\n        subtitle: 'Original template subtitle',\n        description: 'Original template description',\n        priceListItems: [\n          { id: 'tier-basic', description: 'Basic tier', amount: 19.99, currencyCode: 'USD' },\n          { id: 'tier-pro', description: 'Pro tier', amount: 49.99, currencyCode: 'USD' },\n        ],\n        collectCustomerDetails: true,\n        displayCustomFieldsOnPage: true,\n        customFieldsetCode: 'service_package',\n        maxCompletions: 25,\n        status: 'draft',\n        customFields: {\n          service_deliverables: 'Discovery workshop and implementation memo',\n          delivery_timeline: 'Within 5 business days',\n          support_contact: 'ops@example.test',\n        },\n      })\n      templateId = await createTemplateFixture(request, token, createInput)\n\n      const afterCreate = await readTemplate(request, token, templateId)\n      assertScalarFieldsPersisted(\n        afterCreate,\n        {\n          name: `QA CRUDFORM Template ${stamp}`,\n          title: `QA CRUDFORM Template Title ${stamp}`,\n          subtitle: 'Original template subtitle',\n          description: 'Original template description',\n          pricingMode: 'price_list',\n          priceListItems: [\n            { id: 'tier-basic', description: 'Basic tier', amount: 19.99, currencyCode: 'USD' },\n            { id: 'tier-pro', description: 'Pro tier', amount: 49.99, currencyCode: 'USD' },\n          ],\n          collectCustomerDetails: true,\n          displayCustomFieldsOnPage: true,\n          customFieldsetCode: 'service_package',\n          maxCompletions: 25,\n          status: 'draft',\n        },\n        'after-create',\n      )\n      expect(afterCreate.customFields, 'after-create custom fields should persist').toMatchObject({\n        service_deliverables: 'Discovery workshop and implementation memo',\n        delivery_timeline: 'Within 5 business days',\n        support_contact: 'ops@example.test',\n      })\n\n      const updatePayload: Partial<CheckoutLinkInput> = {\n        name: `QA CRUDFORM Template ${stamp} EDITED`,\n        title: `QA CRUDFORM Template Title ${stamp} EDITED`,\n        subtitle: 'Updated template subtitle',\n        description: 'Updated template description',\n        pricingMode: 'price_list',\n        priceListItems: [\n          { id: 'tier-solo', description: 'Solo tier', amount: 99, currencyCode: 'USD' },\n        ],\n        gatewayProviderKey: 'mock',\n        collectCustomerDetails: false,\n        displayCustomFieldsOnPage: false,\n        customFieldsetCode: 'service_package',\n        maxCompletions: 50,\n        status: 'active',\n        customFields: {\n          delivery_timeline: 'Within 2 business days',\n          session_format: 'Remote video call',\n        },\n      }\n      const updateResponse = await updateTemplate(request, token, templateId, updatePayload)\n      expect(\n        updateResponse.ok(),\n        `update template failed: ${updateResponse.status()}`,\n      ).toBeTruthy()\n\n      const afterUpdate = await readTemplate(request, token, templateId)\n      assertScalarFieldsPersisted(\n        afterUpdate,\n        {\n          name: `QA CRUDFORM Template ${stamp} EDITED`,\n          title: `QA CRUDFORM Template Title ${stamp} EDITED`,\n          subtitle: 'Updated template subtitle',\n          description: 'Updated template description',\n          pricingMode: 'price_list',\n          priceListItems: [\n            { id: 'tier-solo', description: 'Solo tier', amount: 99, currencyCode: 'USD' },\n          ],\n          collectCustomerDetails: false,\n          displayCustomFieldsOnPage: false,\n          maxCompletions: 50,\n          status: 'active',\n        },\n        'after-update',\n      )\n      expect(afterUpdate.customFields, 'after-update custom fields should persist + retain omitted keys').toMatchObject({\n        delivery_timeline: 'Within 2 business days',\n        session_format: 'Remote video call',\n        service_deliverables: 'Discovery workshop and implementation memo',\n        support_contact: 'ops@example.test',\n      })\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AA6BP,KAAK,SAAS,2FAA2F,MAAM;AAC7G,OAAK,UAAU,MAAM;AACnB,yCAAqC;AAAA,EACvC,CAAC;AAED,OAAK,qFAAqF,OAAO,EAAE,QAAQ,MAAM;AAC/G,UAAM,QAAQ,MAAM,aAAa,OAAO;AACxC,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,aAA4B;AAEhC,QAAI;AACF,YAAM,cAAiC,6BAA6B;AAAA,QAClE,MAAM,wBAAwB,KAAK;AAAA,QACnC,OAAO,8BAA8B,KAAK;AAAA,QAC1C,UAAU;AAAA,QACV,aAAa;AAAA,QACb,gBAAgB;AAAA,UACd,EAAE,IAAI,cAAc,aAAa,cAAc,QAAQ,OAAO,cAAc,MAAM;AAAA,UAClF,EAAE,IAAI,YAAY,aAAa,YAAY,QAAQ,OAAO,cAAc,MAAM;AAAA,QAChF;AAAA,QACA,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,QAC3B,oBAAoB;AAAA,QACpB,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,UACZ,sBAAsB;AAAA,UACtB,mBAAmB;AAAA,UACnB,iBAAiB;AAAA,QACnB;AAAA,MACF,CAAC;AACD,mBAAa,MAAM,sBAAsB,SAAS,OAAO,WAAW;AAEpE,YAAM,cAAc,MAAM,aAAa,SAAS,OAAO,UAAU;AACjE;AAAA,QACE;AAAA,QACA;AAAA,UACE,MAAM,wBAAwB,KAAK;AAAA,UACnC,OAAO,8BAA8B,KAAK;AAAA,UAC1C,UAAU;AAAA,UACV,aAAa;AAAA,UACb,aAAa;AAAA,UACb,gBAAgB;AAAA,YACd,EAAE,IAAI,cAAc,aAAa,cAAc,QAAQ,OAAO,cAAc,MAAM;AAAA,YAClF,EAAE,IAAI,YAAY,aAAa,YAAY,QAAQ,OAAO,cAAc,MAAM;AAAA,UAChF;AAAA,UACA,wBAAwB;AAAA,UACxB,2BAA2B;AAAA,UAC3B,oBAAoB;AAAA,UACpB,gBAAgB;AAAA,UAChB,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,MACF;AACA,aAAO,YAAY,cAAc,2CAA2C,EAAE,cAAc;AAAA,QAC1F,sBAAsB;AAAA,QACtB,mBAAmB;AAAA,QACnB,iBAAiB;AAAA,MACnB,CAAC;AAED,YAAM,gBAA4C;AAAA,QAChD,MAAM,wBAAwB,KAAK;AAAA,QACnC,OAAO,8BAA8B,KAAK;AAAA,QAC1C,UAAU;AAAA,QACV,aAAa;AAAA,QACb,aAAa;AAAA,QACb,gBAAgB;AAAA,UACd,EAAE,IAAI,aAAa,aAAa,aAAa,QAAQ,IAAI,cAAc,MAAM;AAAA,QAC/E;AAAA,QACA,oBAAoB;AAAA,QACpB,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,QAC3B,oBAAoB;AAAA,QACpB,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,UACZ,mBAAmB;AAAA,UACnB,gBAAgB;AAAA,QAClB;AAAA,MACF;AACA,YAAM,iBAAiB,MAAM,eAAe,SAAS,OAAO,YAAY,aAAa;AACrF;AAAA,QACE,eAAe,GAAG;AAAA,QAClB,2BAA2B,eAAe,OAAO,CAAC;AAAA,MACpD,EAAE,WAAW;AAEb,YAAM,cAAc,MAAM,aAAa,SAAS,OAAO,UAAU;AACjE;AAAA,QACE;AAAA,QACA;AAAA,UACE,MAAM,wBAAwB,KAAK;AAAA,UACnC,OAAO,8BAA8B,KAAK;AAAA,UAC1C,UAAU;AAAA,UACV,aAAa;AAAA,UACb,aAAa;AAAA,UACb,gBAAgB;AAAA,YACd,EAAE,IAAI,aAAa,aAAa,aAAa,QAAQ,IAAI,cAAc,MAAM;AAAA,UAC/E;AAAA,UACA,wBAAwB;AAAA,UACxB,2BAA2B;AAAA,UAC3B,gBAAgB;AAAA,UAChB,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,MACF;AACA,aAAO,YAAY,cAAc,iEAAiE,EAAE,cAAc;AAAA,QAChH,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,QAChB,sBAAsB;AAAA,QACtB,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/checkout/__integration__/TC-CHK-CRUDFORM-002.spec.js

@@ -0,0 +1,139 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/modules/core/__integration__/helpers/api";
+import {
+  assertScalarFieldsPersisted,
+  skipIfCrudFormExtensionTestsDisabled
+} from "@open-mercato/core/helpers/integration/crudFormPersistence";
+import {
+  createFixedTemplateInput,
+  createLinkFixture,
+  createTemplateFixture,
+  deleteCheckoutEntityIfExists,
+  readLink,
+  updateLink
+} from "./helpers/fixtures.js";
+test.describe("TC-CHK-CRUDFORM-002: pay-link CrudForm persists scalars, templateId + slug + custom fields", () => {
+  test.beforeAll(() => {
+    skipIfCrudFormExtensionTestsDisabled();
+  });
+  test("round-trips scalars, templateId, slug, and custom fields on create and update", async ({ request }) => {
+    const token = await getAuthToken(request);
+    const stamp = Date.now();
+    let templateId = null;
+    let linkId = null;
+    try {
+      templateId = await createTemplateFixture(
+        request,
+        token,
+        createFixedTemplateInput({ name: `QA CRUDFORM Link Template ${stamp}` })
+      );
+      const createInput = createFixedTemplateInput({
+        name: `QA CRUDFORM Link ${stamp}`,
+        title: `QA CRUDFORM Link Title ${stamp}`,
+        subtitle: "Original link subtitle",
+        description: "Original link description",
+        fixedPriceAmount: 49.99,
+        fixedPriceCurrencyCode: "USD",
+        fixedPriceIncludesTax: true,
+        fixedPriceOriginalAmount: 69.99,
+        collectCustomerDetails: true,
+        displayCustomFieldsOnPage: true,
+        customFieldsetCode: "service_package",
+        maxCompletions: 10,
+        status: "draft",
+        templateId,
+        slug: `qa-crudform-link-${stamp}`,
+        customFields: {
+          service_deliverables: "One-on-one consultation call",
+          delivery_timeline: "Same week",
+          support_contact: "help@example.test"
+        }
+      });
+      const created = await createLinkFixture(request, token, createInput);
+      linkId = created.id;
+      const afterCreate = await readLink(request, token, linkId);
+      assertScalarFieldsPersisted(
+        afterCreate,
+        {
+          name: `QA CRUDFORM Link ${stamp}`,
+          title: `QA CRUDFORM Link Title ${stamp}`,
+          subtitle: "Original link subtitle",
+          description: "Original link description",
+          pricingMode: "fixed",
+          fixedPriceAmount: 49.99,
+          fixedPriceCurrencyCode: "USD",
+          fixedPriceIncludesTax: true,
+          fixedPriceOriginalAmount: 69.99,
+          collectCustomerDetails: true,
+          displayCustomFieldsOnPage: true,
+          customFieldsetCode: "service_package",
+          maxCompletions: 10,
+          status: "draft",
+          templateId,
+          slug: created.slug
+        },
+        "after-create"
+      );
+      expect(afterCreate.customFields, "after-create custom fields should persist").toMatchObject({
+        service_deliverables: "One-on-one consultation call",
+        delivery_timeline: "Same week",
+        support_contact: "help@example.test"
+      });
+      const updatePayload = {
+        name: `QA CRUDFORM Link ${stamp} EDITED`,
+        title: `QA CRUDFORM Link Title ${stamp} EDITED`,
+        subtitle: "Updated link subtitle",
+        description: "Updated link description",
+        pricingMode: "fixed",
+        fixedPriceAmount: 89.5,
+        fixedPriceCurrencyCode: "USD",
+        fixedPriceIncludesTax: false,
+        fixedPriceOriginalAmount: 129.99,
+        gatewayProviderKey: "mock",
+        collectCustomerDetails: false,
+        displayCustomFieldsOnPage: false,
+        customFieldsetCode: "service_package",
+        maxCompletions: 20,
+        status: "active",
+        customFields: {
+          delivery_timeline: "Next business day",
+          session_format: "In person"
+        }
+      };
+      const updateResponse = await updateLink(request, token, linkId, updatePayload);
+      expect(updateResponse.ok(), `update link failed: ${updateResponse.status()}`).toBeTruthy();
+      const afterUpdate = await readLink(request, token, linkId);
+      assertScalarFieldsPersisted(
+        afterUpdate,
+        {
+          name: `QA CRUDFORM Link ${stamp} EDITED`,
+          title: `QA CRUDFORM Link Title ${stamp} EDITED`,
+          subtitle: "Updated link subtitle",
+          description: "Updated link description",
+          pricingMode: "fixed",
+          fixedPriceAmount: 89.5,
+          fixedPriceCurrencyCode: "USD",
+          fixedPriceIncludesTax: false,
+          fixedPriceOriginalAmount: 129.99,
+          collectCustomerDetails: false,
+          displayCustomFieldsOnPage: false,
+          maxCompletions: 20,
+          status: "active",
+          templateId,
+          slug: created.slug
+        },
+        "after-update"
+      );
+      expect(afterUpdate.customFields, "after-update custom fields should persist + retain omitted keys").toMatchObject({
+        delivery_timeline: "Next business day",
+        session_format: "In person",
+        service_deliverables: "One-on-one consultation call",
+        support_contact: "help@example.test"
+      });
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+});
+//# sourceMappingURL=TC-CHK-CRUDFORM-002.spec.js.map

package/dist/modules/checkout/__integration__/TC-CHK-CRUDFORM-002.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/__integration__/TC-CHK-CRUDFORM-002.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'\nimport {\n  assertScalarFieldsPersisted,\n  skipIfCrudFormExtensionTestsDisabled,\n} from '@open-mercato/core/helpers/integration/crudFormPersistence'\nimport {\n  createFixedTemplateInput,\n  createLinkFixture,\n  createTemplateFixture,\n  deleteCheckoutEntityIfExists,\n  readLink,\n  updateLink,\n  type CheckoutLinkInput,\n} from './helpers/fixtures'\n\n/**\n * TC-CHK-CRUDFORM-002: pay-link CrudForm persists scalars, the templateId FK, slug\n * + custom fields (#2466 / #2566).\n *\n * The checkout pay-link surface is hand-written (command bus + bespoke serializer) and so does\n * NOT fit `runCrudFormRoundTrip` \u2014 see the note in TC-CHK-CRUDFORM-001. This spec drives the\n * canonical create \u2192 read-back \u2192 assert \u2192 update \u2192 read-back \u2192 assert \u2192 delete cycle inline,\n * reusing the sweep harness gate + scalar assertion helper.\n *\n * It covers the link-specific fields on top of the shared content fields: the `templateId`\n * foreign key and the generated `slug`, plus fixed-price money scalars, enums, booleans, an\n * integer, and default-seeded custom fields. Every explicitly-submitted field overrides the\n * source template (`pickExplicitParsedOverrides`), so the round-trip asserts the link's own\n * values, not inherited ones.\n *\n * Verified contract:\n * - Read-back uses the detail GET (the list route does not filter by `?ids=`/`?id=`).\n * - Custom fields submit as a `customFields` object and return under `record.customFields`.\n * - PUT is a partial update \u2014 omitted custom fields are retained; the slug is preserved when the\n *   name/title change (it recomputes from the existing slug).\n * - Self-contained: creates a throwaway template (no custom fields, so the link's own custom\n *   fields are not affected by template copy) and deletes both fixtures in `finally`.\n *\n * Gated by `OM_INTEGRATION_CRUDFORM_EXTENSION_TESTS_DISABLED` (default off \u2192 runs).\n */\ntest.describe('TC-CHK-CRUDFORM-002: pay-link CrudForm persists scalars, templateId + slug + custom fields', () => {\n  test.beforeAll(() => {\n    skipIfCrudFormExtensionTestsDisabled()\n  })\n\n  test('round-trips scalars, templateId, slug, and custom fields on create and update', async ({ request }) => {\n    const token = await getAuthToken(request)\n    const stamp = Date.now()\n    let templateId: string | null = null\n    let linkId: string | null = null\n\n    try {\n      templateId = await createTemplateFixture(\n        request,\n        token,\n        createFixedTemplateInput({ name: `QA CRUDFORM Link Template ${stamp}` }),\n      )\n\n      const createInput: CheckoutLinkInput = createFixedTemplateInput({\n        name: `QA CRUDFORM Link ${stamp}`,\n        title: `QA CRUDFORM Link Title ${stamp}`,\n        subtitle: 'Original link subtitle',\n        description: 'Original link description',\n        fixedPriceAmount: 49.99,\n        fixedPriceCurrencyCode: 'USD',\n        fixedPriceIncludesTax: true,\n        fixedPriceOriginalAmount: 69.99,\n        collectCustomerDetails: true,\n        displayCustomFieldsOnPage: true,\n        customFieldsetCode: 'service_package',\n        maxCompletions: 10,\n        status: 'draft',\n        templateId,\n        slug: `qa-crudform-link-${stamp}`,\n        customFields: {\n          service_deliverables: 'One-on-one consultation call',\n          delivery_timeline: 'Same week',\n          support_contact: 'help@example.test',\n        },\n      })\n      const created = await createLinkFixture(request, token, createInput)\n      linkId = created.id\n\n      const afterCreate = await readLink(request, token, linkId)\n      assertScalarFieldsPersisted(\n        afterCreate,\n        {\n          name: `QA CRUDFORM Link ${stamp}`,\n          title: `QA CRUDFORM Link Title ${stamp}`,\n          subtitle: 'Original link subtitle',\n          description: 'Original link description',\n          pricingMode: 'fixed',\n          fixedPriceAmount: 49.99,\n          fixedPriceCurrencyCode: 'USD',\n          fixedPriceIncludesTax: true,\n          fixedPriceOriginalAmount: 69.99,\n          collectCustomerDetails: true,\n          displayCustomFieldsOnPage: true,\n          customFieldsetCode: 'service_package',\n          maxCompletions: 10,\n          status: 'draft',\n          templateId,\n          slug: created.slug,\n        },\n        'after-create',\n      )\n      expect(afterCreate.customFields, 'after-create custom fields should persist').toMatchObject({\n        service_deliverables: 'One-on-one consultation call',\n        delivery_timeline: 'Same week',\n        support_contact: 'help@example.test',\n      })\n\n      const updatePayload: Partial<CheckoutLinkInput> = {\n        name: `QA CRUDFORM Link ${stamp} EDITED`,\n        title: `QA CRUDFORM Link Title ${stamp} EDITED`,\n        subtitle: 'Updated link subtitle',\n        description: 'Updated link description',\n        pricingMode: 'fixed',\n        fixedPriceAmount: 89.5,\n        fixedPriceCurrencyCode: 'USD',\n        fixedPriceIncludesTax: false,\n        fixedPriceOriginalAmount: 129.99,\n        gatewayProviderKey: 'mock',\n        collectCustomerDetails: false,\n        displayCustomFieldsOnPage: false,\n        customFieldsetCode: 'service_package',\n        maxCompletions: 20,\n        status: 'active',\n        customFields: {\n          delivery_timeline: 'Next business day',\n          session_format: 'In person',\n        },\n      }\n      const updateResponse = await updateLink(request, token, linkId, updatePayload)\n      expect(updateResponse.ok(), `update link failed: ${updateResponse.status()}`).toBeTruthy()\n\n      const afterUpdate = await readLink(request, token, linkId)\n      assertScalarFieldsPersisted(\n        afterUpdate,\n        {\n          name: `QA CRUDFORM Link ${stamp} EDITED`,\n          title: `QA CRUDFORM Link Title ${stamp} EDITED`,\n          subtitle: 'Updated link subtitle',\n          description: 'Updated link description',\n          pricingMode: 'fixed',\n          fixedPriceAmount: 89.5,\n          fixedPriceCurrencyCode: 'USD',\n          fixedPriceIncludesTax: false,\n          fixedPriceOriginalAmount: 129.99,\n          collectCustomerDetails: false,\n          displayCustomFieldsOnPage: false,\n          maxCompletions: 20,\n          status: 'active',\n          templateId,\n          slug: created.slug,\n        },\n        'after-update',\n      )\n      expect(afterUpdate.customFields, 'after-update custom fields should persist + retain omitted keys').toMatchObject({\n        delivery_timeline: 'Next business day',\n        session_format: 'In person',\n        service_deliverables: 'One-on-one consultation call',\n        support_contact: 'help@example.test',\n      })\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AA2BP,KAAK,SAAS,8FAA8F,MAAM;AAChH,OAAK,UAAU,MAAM;AACnB,yCAAqC;AAAA,EACvC,CAAC;AAED,OAAK,iFAAiF,OAAO,EAAE,QAAQ,MAAM;AAC3G,UAAM,QAAQ,MAAM,aAAa,OAAO;AACxC,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,aAA4B;AAChC,QAAI,SAAwB;AAE5B,QAAI;AACF,mBAAa,MAAM;AAAA,QACjB;AAAA,QACA;AAAA,QACA,yBAAyB,EAAE,MAAM,6BAA6B,KAAK,GAAG,CAAC;AAAA,MACzE;AAEA,YAAM,cAAiC,yBAAyB;AAAA,QAC9D,MAAM,oBAAoB,KAAK;AAAA,QAC/B,OAAO,0BAA0B,KAAK;AAAA,QACtC,UAAU;AAAA,QACV,aAAa;AAAA,QACb,kBAAkB;AAAA,QAClB,wBAAwB;AAAA,QACxB,uBAAuB;AAAA,QACvB,0BAA0B;AAAA,QAC1B,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,QAC3B,oBAAoB;AAAA,QACpB,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR;AAAA,QACA,MAAM,oBAAoB,KAAK;AAAA,QAC/B,cAAc;AAAA,UACZ,sBAAsB;AAAA,UACtB,mBAAmB;AAAA,UACnB,iBAAiB;AAAA,QACnB;AAAA,MACF,CAAC;AACD,YAAM,UAAU,MAAM,kBAAkB,SAAS,OAAO,WAAW;AACnE,eAAS,QAAQ;AAEjB,YAAM,cAAc,MAAM,SAAS,SAAS,OAAO,MAAM;AACzD;AAAA,QACE;AAAA,QACA;AAAA,UACE,MAAM,oBAAoB,KAAK;AAAA,UAC/B,OAAO,0BAA0B,KAAK;AAAA,UACtC,UAAU;AAAA,UACV,aAAa;AAAA,UACb,aAAa;AAAA,UACb,kBAAkB;AAAA,UAClB,wBAAwB;AAAA,UACxB,uBAAuB;AAAA,UACvB,0BAA0B;AAAA,UAC1B,wBAAwB;AAAA,UACxB,2BAA2B;AAAA,UAC3B,oBAAoB;AAAA,UACpB,gBAAgB;AAAA,UAChB,QAAQ;AAAA,UACR;AAAA,UACA,MAAM,QAAQ;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AACA,aAAO,YAAY,cAAc,2CAA2C,EAAE,cAAc;AAAA,QAC1F,sBAAsB;AAAA,QACtB,mBAAmB;AAAA,QACnB,iBAAiB;AAAA,MACnB,CAAC;AAED,YAAM,gBAA4C;AAAA,QAChD,MAAM,oBAAoB,KAAK;AAAA,QAC/B,OAAO,0BAA0B,KAAK;AAAA,QACtC,UAAU;AAAA,QACV,aAAa;AAAA,QACb,aAAa;AAAA,QACb,kBAAkB;AAAA,QAClB,wBAAwB;AAAA,QACxB,uBAAuB;AAAA,QACvB,0BAA0B;AAAA,QAC1B,oBAAoB;AAAA,QACpB,wBAAwB;AAAA,QACxB,2BAA2B;AAAA,QAC3B,oBAAoB;AAAA,QACpB,gBAAgB;AAAA,QAChB,QAAQ;AAAA,QACR,cAAc;AAAA,UACZ,mBAAmB;AAAA,UACnB,gBAAgB;AAAA,QAClB;AAAA,MACF;AACA,YAAM,iBAAiB,MAAM,WAAW,SAAS,OAAO,QAAQ,aAAa;AAC7E,aAAO,eAAe,GAAG,GAAG,uBAAuB,eAAe,OAAO,CAAC,EAAE,EAAE,WAAW;AAEzF,YAAM,cAAc,MAAM,SAAS,SAAS,OAAO,MAAM;AACzD;AAAA,QACE;AAAA,QACA;AAAA,UACE,MAAM,oBAAoB,KAAK;AAAA,UAC/B,OAAO,0BAA0B,KAAK;AAAA,UACtC,UAAU;AAAA,UACV,aAAa;AAAA,UACb,aAAa;AAAA,UACb,kBAAkB;AAAA,UAClB,wBAAwB;AAAA,UACxB,uBAAuB;AAAA,UACvB,0BAA0B;AAAA,UAC1B,wBAAwB;AAAA,UACxB,2BAA2B;AAAA,UAC3B,gBAAgB;AAAA,UAChB,QAAQ;AAAA,UACR;AAAA,UACA,MAAM,QAAQ;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AACA,aAAO,YAAY,cAAc,iEAAiE,EAAE,cAAc;AAAA,QAChH,mBAAmB;AAAA,QACnB,gBAAgB;AAAA,QAChB,sBAAsB;AAAA,QACtB,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAClE,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/checkout/__integration__/TC-CHKT-008.spec.js

@@ -13,7 +13,9 @@ import {
   waitForCheckoutStatus
 } from "./helpers/fixtures.js";
 test.describe("TC-CHKT-008: Attempt update on locked link, verify 422", () => {
+  test.setTimeout(12e4);
   test("rejects link edits after the first transaction locks the record", async ({ request }) => {
+    test.slow();
     let token = null;
     let linkId = null;
     let transactionId = null;

package/dist/modules/checkout/__integration__/TC-CHKT-008.spec.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/checkout/__integration__/TC-CHKT-008.spec.ts"],
-  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'\nimport {\n  createCustomerData,\n  createFixedTemplateInput,\n  createLinkFixture,\n  deleteCheckoutEntityIfExists,\n  findGatewayTransactionIdForCheckout,\n  readGatewayTransaction,\n  sendMockGatewayWebhook,\n  submitPayLink,\n  updateLink,\n  waitForCheckoutStatus,\n} from './helpers/fixtures'\n\ntest.describe('TC-CHKT-008: Attempt update on locked link, verify 422', () => {\n  test('rejects link edits after the first transaction locks the record', async ({ request }) => {\n    let token: string | null = null\n    let linkId: string | null = null\n    let transactionId: string | null = null\n\n    try {\n      token = await getAuthToken(request)\n      const link = await createLinkFixture(request, token, {\n        ...createFixedTemplateInput({\n          status: 'active',\n          gatewayProviderKey: 'mock_processing',\n        }),\n      })\n      linkId = link.id\n\n      const submitResponse = await submitPayLink(request, link.slug, {\n        customerData: createCustomerData(),\n        acceptedLegalConsents: {},\n        amount: 49.99,\n      })\n      expect(submitResponse.status()).toBe(201)\n      const submitBody = await submitResponse.json()\n      transactionId = typeof submitBody.transactionId === 'string' ? submitBody.transactionId : null\n\n      const updateResponse = await updateLink(request, token, link.id, {\n        title: 'Should fail after lock',\n      })\n      expect(updateResponse.status()).toBe(422)\n\n      const body = await updateResponse.json()\n      expect(body.error).toContain('cannot be edited')\n    } finally {\n      if (token && transactionId) {\n        const gatewayTransactionId = await findGatewayTransactionIdForCheckout(request, token, transactionId)\n        const gatewayTransaction = await readGatewayTransaction(request, token, gatewayTransactionId)\n        if (gatewayTransaction.providerSessionId) {\n          await sendMockGatewayWebhook(request, token, gatewayTransaction.providerSessionId, 'captured', 49.99, {\n            providerKey: 'mock_processing',\n          })\n          await waitForCheckoutStatus(request, token, transactionId, 'completed')\n        }\n      }\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n})\n"],
-  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,KAAK,SAAS,0DAA0D,MAAM;AAC5E,OAAK,mEAAmE,OAAO,EAAE,QAAQ,MAAM;AAC7F,QAAI,QAAuB;AAC3B,QAAI,SAAwB;AAC5B,QAAI,gBAA+B;AAEnC,QAAI;AACF,cAAQ,MAAM,aAAa,OAAO;AAClC,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO;AAAA,QACnD,GAAG,yBAAyB;AAAA,UAC1B,QAAQ;AAAA,UACR,oBAAoB;AAAA,QACtB,CAAC;AAAA,MACH,CAAC;AACD,eAAS,KAAK;AAEd,YAAM,iBAAiB,MAAM,cAAc,SAAS,KAAK,MAAM;AAAA,QAC7D,cAAc,mBAAmB;AAAA,QACjC,uBAAuB,CAAC;AAAA,QACxB,QAAQ;AAAA,MACV,CAAC;AACD,aAAO,eAAe,OAAO,CAAC,EAAE,KAAK,GAAG;AACxC,YAAM,aAAa,MAAM,eAAe,KAAK;AAC7C,sBAAgB,OAAO,WAAW,kBAAkB,WAAW,WAAW,gBAAgB;AAE1F,YAAM,iBAAiB,MAAM,WAAW,SAAS,OAAO,KAAK,IAAI;AAAA,QAC/D,OAAO;AAAA,MACT,CAAC;AACD,aAAO,eAAe,OAAO,CAAC,EAAE,KAAK,GAAG;AAExC,YAAM,OAAO,MAAM,eAAe,KAAK;AACvC,aAAO,KAAK,KAAK,EAAE,UAAU,kBAAkB;AAAA,IACjD,UAAE;AACA,UAAI,SAAS,eAAe;AAC1B,cAAM,uBAAuB,MAAM,oCAAoC,SAAS,OAAO,aAAa;AACpG,cAAM,qBAAqB,MAAM,uBAAuB,SAAS,OAAO,oBAAoB;AAC5F,YAAI,mBAAmB,mBAAmB;AACxC,gBAAM,uBAAuB,SAAS,OAAO,mBAAmB,mBAAmB,YAAY,OAAO;AAAA,YACpG,aAAa;AAAA,UACf,CAAC;AACD,gBAAM,sBAAsB,SAAS,OAAO,eAAe,WAAW;AAAA,QACxE;AAAA,MACF;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AACH,CAAC;",
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'\nimport {\n  createCustomerData,\n  createFixedTemplateInput,\n  createLinkFixture,\n  deleteCheckoutEntityIfExists,\n  findGatewayTransactionIdForCheckout,\n  readGatewayTransaction,\n  sendMockGatewayWebhook,\n  submitPayLink,\n  updateLink,\n  waitForCheckoutStatus,\n} from './helpers/fixtures'\n\ntest.describe('TC-CHKT-008: Attempt update on locked link, verify 422', () => {\n  test.setTimeout(120_000)\n\n  test('rejects link edits after the first transaction locks the record', async ({ request }) => {\n    test.slow()\n\n    let token: string | null = null\n    let linkId: string | null = null\n    let transactionId: string | null = null\n\n    try {\n      token = await getAuthToken(request)\n      const link = await createLinkFixture(request, token, {\n        ...createFixedTemplateInput({\n          status: 'active',\n          gatewayProviderKey: 'mock_processing',\n        }),\n      })\n      linkId = link.id\n\n      const submitResponse = await submitPayLink(request, link.slug, {\n        customerData: createCustomerData(),\n        acceptedLegalConsents: {},\n        amount: 49.99,\n      })\n      expect(submitResponse.status()).toBe(201)\n      const submitBody = await submitResponse.json()\n      transactionId = typeof submitBody.transactionId === 'string' ? submitBody.transactionId : null\n\n      const updateResponse = await updateLink(request, token, link.id, {\n        title: 'Should fail after lock',\n      })\n      expect(updateResponse.status()).toBe(422)\n\n      const body = await updateResponse.json()\n      expect(body.error).toContain('cannot be edited')\n    } finally {\n      if (token && transactionId) {\n        const gatewayTransactionId = await findGatewayTransactionIdForCheckout(request, token, transactionId)\n        const gatewayTransaction = await readGatewayTransaction(request, token, gatewayTransactionId)\n        if (gatewayTransaction.providerSessionId) {\n          await sendMockGatewayWebhook(request, token, gatewayTransaction.providerSessionId, 'captured', 49.99, {\n            providerKey: 'mock_processing',\n          })\n          await waitForCheckoutStatus(request, token, transactionId, 'completed')\n        }\n      }\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,KAAK,SAAS,0DAA0D,MAAM;AAC5E,OAAK,WAAW,IAAO;AAEvB,OAAK,mEAAmE,OAAO,EAAE,QAAQ,MAAM;AAC7F,SAAK,KAAK;AAEV,QAAI,QAAuB;AAC3B,QAAI,SAAwB;AAC5B,QAAI,gBAA+B;AAEnC,QAAI;AACF,cAAQ,MAAM,aAAa,OAAO;AAClC,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO;AAAA,QACnD,GAAG,yBAAyB;AAAA,UAC1B,QAAQ;AAAA,UACR,oBAAoB;AAAA,QACtB,CAAC;AAAA,MACH,CAAC;AACD,eAAS,KAAK;AAEd,YAAM,iBAAiB,MAAM,cAAc,SAAS,KAAK,MAAM;AAAA,QAC7D,cAAc,mBAAmB;AAAA,QACjC,uBAAuB,CAAC;AAAA,QACxB,QAAQ;AAAA,MACV,CAAC;AACD,aAAO,eAAe,OAAO,CAAC,EAAE,KAAK,GAAG;AACxC,YAAM,aAAa,MAAM,eAAe,KAAK;AAC7C,sBAAgB,OAAO,WAAW,kBAAkB,WAAW,WAAW,gBAAgB;AAE1F,YAAM,iBAAiB,MAAM,WAAW,SAAS,OAAO,KAAK,IAAI;AAAA,QAC/D,OAAO;AAAA,MACT,CAAC;AACD,aAAO,eAAe,OAAO,CAAC,EAAE,KAAK,GAAG;AAExC,YAAM,OAAO,MAAM,eAAe,KAAK;AACvC,aAAO,KAAK,KAAK,EAAE,UAAU,kBAAkB;AAAA,IACjD,UAAE;AACA,UAAI,SAAS,eAAe;AAC1B,cAAM,uBAAuB,MAAM,oCAAoC,SAAS,OAAO,aAAa;AACpG,cAAM,qBAAqB,MAAM,uBAAuB,SAAS,OAAO,oBAAoB;AAC5F,YAAI,mBAAmB,mBAAmB;AACxC,gBAAM,uBAAuB,SAAS,OAAO,mBAAmB,mBAAmB,YAAY,OAAO;AAAA,YACpG,aAAa;AAAA,UACf,CAAC;AACD,gBAAM,sBAAsB,SAAS,OAAO,eAAe,WAAW;AAAA,QACxE;AAAA,MACF;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AACH,CAAC;",
   "names": []
 }

package/dist/modules/checkout/__integration__/TC-CHKT-039-null-gateway-edit.spec.js

@@ -0,0 +1,115 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/modules/core/__integration__/helpers/api";
+import { readJsonSafe } from "@open-mercato/core/modules/core/__integration__/helpers/generalFixtures";
+import {
+  createFixedTemplateInput,
+  createLinkFixture,
+  createTemplateFixture,
+  deleteCheckoutEntityIfExists,
+  readLink,
+  readTemplate,
+  updateLink,
+  updateTemplate
+} from "./helpers/fixtures.js";
+test.describe("TC-CHKT-039: Draft template/pay-link gateway provider edit validation", () => {
+  test("template: clearing the required gateway provider is rejected and preserves the previous value", async ({ request }) => {
+    let token = null;
+    let templateId = null;
+    try {
+      token = await getAuthToken(request);
+      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      const clearResponse = await updateTemplate(request, token, templateId, {
+        name: "Consulting Fee (no gateway)",
+        pricingMode: "fixed",
+        fixedPriceAmount: 49.99,
+        fixedPriceCurrencyCode: "USD",
+        status: "draft",
+        gatewayProviderKey: null
+      });
+      expect(clearResponse.status()).toBe(400);
+      const clearBody = await readJsonSafe(clearResponse);
+      expect(clearBody?.fieldErrors?.gatewayProviderKey ?? clearBody?.error ?? "").toContain("checkout.validation.gatewayProviderKey.required");
+      const cleared = await readTemplate(request, token, templateId);
+      expect(cleared.gatewayProviderKey).toBe("mock");
+      expect(cleared.name).not.toBe("Consulting Fee (no gateway)");
+      const renameResponse = await updateTemplate(request, token, templateId, {
+        name: "Consulting Fee renamed"
+      });
+      expect(
+        renameResponse.ok(),
+        `Editing a field while retaining the existing gateway should succeed: ${renameResponse.status()} ${JSON.stringify(await readJsonSafe(renameResponse))}`
+      ).toBeTruthy();
+      const renamed = await readTemplate(request, token, templateId);
+      expect(renamed.gatewayProviderKey).toBe("mock");
+      expect(renamed.name).toBe("Consulting Fee renamed");
+      const blankResponse = await updateTemplate(request, token, templateId, {
+        gatewayProviderKey: "   "
+      });
+      expect(blankResponse.status()).toBe(400);
+      const blankBody = await readJsonSafe(blankResponse);
+      expect(blankBody?.fieldErrors?.gatewayProviderKey ?? blankBody?.error ?? "").toContain("checkout.validation.gatewayProviderKey.required");
+      const blanked = await readTemplate(request, token, templateId);
+      expect(blanked.gatewayProviderKey).toBe("mock");
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+  test("pay-link: clearing the gateway provider on a draft saves and round-trips as null", async ({ request }) => {
+    let token = null;
+    let linkId = null;
+    try {
+      token = await getAuthToken(request);
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      linkId = link.id;
+      const clearResponse = await updateLink(request, token, link.id, {
+        name: "Pay link (no gateway)",
+        pricingMode: "fixed",
+        fixedPriceAmount: 49.99,
+        fixedPriceCurrencyCode: "USD",
+        status: "draft",
+        gatewayProviderKey: null
+      });
+      expect(
+        clearResponse.ok(),
+        `Clearing the gateway on a draft pay-link should succeed: ${clearResponse.status()} ${JSON.stringify(await readJsonSafe(clearResponse))}`
+      ).toBeTruthy();
+      const cleared = await readLink(request, token, link.id);
+      expect(cleared.gatewayProviderKey ?? null).toBeNull();
+      expect(cleared.name).toBe("Pay link (no gateway)");
+      const renameResponse = await updateLink(request, token, link.id, {
+        name: "Pay link renamed",
+        gatewayProviderKey: null
+      });
+      expect(
+        renameResponse.ok(),
+        `Editing a field on a gateway-less draft pay-link should succeed: ${renameResponse.status()} ${JSON.stringify(await readJsonSafe(renameResponse))}`
+      ).toBeTruthy();
+      const renamed = await readLink(request, token, link.id);
+      expect(renamed.gatewayProviderKey ?? null).toBeNull();
+      expect(renamed.name).toBe("Pay link renamed");
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+    }
+  });
+  test("pay-link: publishing still requires a gateway provider", async ({ request }) => {
+    let token = null;
+    let linkId = null;
+    try {
+      token = await getAuthToken(request);
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      linkId = link.id;
+      const publishResponse = await updateLink(request, token, link.id, {
+        status: "active",
+        gatewayProviderKey: null
+      });
+      expect([400, 422]).toContain(publishResponse.status());
+      const body = await readJsonSafe(publishResponse);
+      const fieldError = typeof body?.fieldErrors?.gatewayProviderKey === "string" ? body.fieldErrors.gatewayProviderKey : "";
+      const errorMessage = typeof body?.error === "string" ? body.error : "";
+      expect(`${fieldError} ${errorMessage}`.toLowerCase()).toContain("gateway");
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+    }
+  });
+});
+//# sourceMappingURL=TC-CHKT-039-null-gateway-edit.spec.js.map

package/dist/modules/checkout/__integration__/TC-CHKT-039-null-gateway-edit.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/__integration__/TC-CHKT-039-null-gateway-edit.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'\nimport { readJsonSafe } from '@open-mercato/core/modules/core/__integration__/helpers/generalFixtures'\nimport {\n  createFixedTemplateInput,\n  createLinkFixture,\n  createTemplateFixture,\n  deleteCheckoutEntityIfExists,\n  readLink,\n  readTemplate,\n  updateLink,\n  updateTemplate,\n} from './helpers/fixtures'\n\ntest.describe('TC-CHKT-039: Draft template/pay-link gateway provider edit validation', () => {\n  test('template: clearing the required gateway provider is rejected and preserves the previous value', async ({ request }) => {\n    let token: string | null = null\n    let templateId: string | null = null\n\n    try {\n      token = await getAuthToken(request)\n      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n\n      const clearResponse = await updateTemplate(request, token, templateId, {\n        name: 'Consulting Fee (no gateway)',\n        pricingMode: 'fixed',\n        fixedPriceAmount: 49.99,\n        fixedPriceCurrencyCode: 'USD',\n        status: 'draft',\n        gatewayProviderKey: null,\n      })\n      expect(clearResponse.status()).toBe(400)\n      const clearBody = await readJsonSafe<{ fieldErrors?: { gatewayProviderKey?: string }; error?: string }>(clearResponse)\n      expect(clearBody?.fieldErrors?.gatewayProviderKey ?? clearBody?.error ?? '').toContain('checkout.validation.gatewayProviderKey.required')\n\n      const cleared = await readTemplate(request, token, templateId)\n      expect(cleared.gatewayProviderKey).toBe('mock')\n      expect(cleared.name).not.toBe('Consulting Fee (no gateway)')\n\n      const renameResponse = await updateTemplate(request, token, templateId, {\n        name: 'Consulting Fee renamed',\n      })\n      expect(\n        renameResponse.ok(),\n        `Editing a field while retaining the existing gateway should succeed: ${renameResponse.status()} ${JSON.stringify(await readJsonSafe(renameResponse))}`,\n      ).toBeTruthy()\n\n      const renamed = await readTemplate(request, token, templateId)\n      expect(renamed.gatewayProviderKey).toBe('mock')\n      expect(renamed.name).toBe('Consulting Fee renamed')\n\n      const blankResponse = await updateTemplate(request, token, templateId, {\n        gatewayProviderKey: '   ',\n      })\n      expect(blankResponse.status()).toBe(400)\n      const blankBody = await readJsonSafe<{ fieldErrors?: { gatewayProviderKey?: string }; error?: string }>(blankResponse)\n      expect(blankBody?.fieldErrors?.gatewayProviderKey ?? blankBody?.error ?? '').toContain('checkout.validation.gatewayProviderKey.required')\n\n      const blanked = await readTemplate(request, token, templateId)\n      expect(blanked.gatewayProviderKey).toBe('mock')\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n\n  test('pay-link: clearing the gateway provider on a draft saves and round-trips as null', async ({ request }) => {\n    let token: string | null = null\n    let linkId: string | null = null\n\n    try {\n      token = await getAuthToken(request)\n      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n      linkId = link.id\n\n      const clearResponse = await updateLink(request, token, link.id, {\n        name: 'Pay link (no gateway)',\n        pricingMode: 'fixed',\n        fixedPriceAmount: 49.99,\n        fixedPriceCurrencyCode: 'USD',\n        status: 'draft',\n        gatewayProviderKey: null,\n      })\n      expect(\n        clearResponse.ok(),\n        `Clearing the gateway on a draft pay-link should succeed: ${clearResponse.status()} ${JSON.stringify(await readJsonSafe(clearResponse))}`,\n      ).toBeTruthy()\n\n      const cleared = await readLink(request, token, link.id)\n      expect(cleared.gatewayProviderKey ?? null).toBeNull()\n      expect(cleared.name).toBe('Pay link (no gateway)')\n\n      const renameResponse = await updateLink(request, token, link.id, {\n        name: 'Pay link renamed',\n        gatewayProviderKey: null,\n      })\n      expect(\n        renameResponse.ok(),\n        `Editing a field on a gateway-less draft pay-link should succeed: ${renameResponse.status()} ${JSON.stringify(await readJsonSafe(renameResponse))}`,\n      ).toBeTruthy()\n\n      const renamed = await readLink(request, token, link.id)\n      expect(renamed.gatewayProviderKey ?? null).toBeNull()\n      expect(renamed.name).toBe('Pay link renamed')\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n\n  test('pay-link: publishing still requires a gateway provider', async ({ request }) => {\n    let token: string | null = null\n    let linkId: string | null = null\n\n    try {\n      token = await getAuthToken(request)\n      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n      linkId = link.id\n\n      const publishResponse = await updateLink(request, token, link.id, {\n        status: 'active',\n        gatewayProviderKey: null,\n      })\n      expect([400, 422]).toContain(publishResponse.status())\n      const body = await readJsonSafe<{ error?: string; fieldErrors?: { gatewayProviderKey?: string } }>(publishResponse)\n      const fieldError = typeof body?.fieldErrors?.gatewayProviderKey === 'string' ? body.fieldErrors.gatewayProviderKey : ''\n      const errorMessage = typeof body?.error === 'string' ? body.error : ''\n      expect(`${fieldError} ${errorMessage}`.toLowerCase()).toContain('gateway')\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,KAAK,SAAS,yEAAyE,MAAM;AAC3F,OAAK,iGAAiG,OAAO,EAAE,QAAQ,MAAM;AAC3H,QAAI,QAAuB;AAC3B,QAAI,aAA4B;AAEhC,QAAI;AACF,cAAQ,MAAM,aAAa,OAAO;AAClC,mBAAa,MAAM,sBAAsB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AAEtG,YAAM,gBAAgB,MAAM,eAAe,SAAS,OAAO,YAAY;AAAA,QACrE,MAAM;AAAA,QACN,aAAa;AAAA,QACb,kBAAkB;AAAA,QAClB,wBAAwB;AAAA,QACxB,QAAQ;AAAA,QACR,oBAAoB;AAAA,MACtB,CAAC;AACD,aAAO,cAAc,OAAO,CAAC,EAAE,KAAK,GAAG;AACvC,YAAM,YAAY,MAAM,aAAgF,aAAa;AACrH,aAAO,WAAW,aAAa,sBAAsB,WAAW,SAAS,EAAE,EAAE,UAAU,iDAAiD;AAExI,YAAM,UAAU,MAAM,aAAa,SAAS,OAAO,UAAU;AAC7D,aAAO,QAAQ,kBAAkB,EAAE,KAAK,MAAM;AAC9C,aAAO,QAAQ,IAAI,EAAE,IAAI,KAAK,6BAA6B;AAE3D,YAAM,iBAAiB,MAAM,eAAe,SAAS,OAAO,YAAY;AAAA,QACtE,MAAM;AAAA,MACR,CAAC;AACD;AAAA,QACE,eAAe,GAAG;AAAA,QAClB,wEAAwE,eAAe,OAAO,CAAC,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,CAAC,CAAC;AAAA,MACvJ,EAAE,WAAW;AAEb,YAAM,UAAU,MAAM,aAAa,SAAS,OAAO,UAAU;AAC7D,aAAO,QAAQ,kBAAkB,EAAE,KAAK,MAAM;AAC9C,aAAO,QAAQ,IAAI,EAAE,KAAK,wBAAwB;AAElD,YAAM,gBAAgB,MAAM,eAAe,SAAS,OAAO,YAAY;AAAA,QACrE,oBAAoB;AAAA,MACtB,CAAC;AACD,aAAO,cAAc,OAAO,CAAC,EAAE,KAAK,GAAG;AACvC,YAAM,YAAY,MAAM,aAAgF,aAAa;AACrH,aAAO,WAAW,aAAa,sBAAsB,WAAW,SAAS,EAAE,EAAE,UAAU,iDAAiD;AAExI,YAAM,UAAU,MAAM,aAAa,SAAS,OAAO,UAAU;AAC7D,aAAO,QAAQ,kBAAkB,EAAE,KAAK,MAAM;AAAA,IAChD,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AAED,OAAK,oFAAoF,OAAO,EAAE,QAAQ,MAAM;AAC9G,QAAI,QAAuB;AAC3B,QAAI,SAAwB;AAE5B,QAAI;AACF,cAAQ,MAAM,aAAa,OAAO;AAClC,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AAClG,eAAS,KAAK;AAEd,YAAM,gBAAgB,MAAM,WAAW,SAAS,OAAO,KAAK,IAAI;AAAA,QAC9D,MAAM;AAAA,QACN,aAAa;AAAA,QACb,kBAAkB;AAAA,QAClB,wBAAwB;AAAA,QACxB,QAAQ;AAAA,QACR,oBAAoB;AAAA,MACtB,CAAC;AACD;AAAA,QACE,cAAc,GAAG;AAAA,QACjB,4DAA4D,cAAc,OAAO,CAAC,IAAI,KAAK,UAAU,MAAM,aAAa,aAAa,CAAC,CAAC;AAAA,MACzI,EAAE,WAAW;AAEb,YAAM,UAAU,MAAM,SAAS,SAAS,OAAO,KAAK,EAAE;AACtD,aAAO,QAAQ,sBAAsB,IAAI,EAAE,SAAS;AACpD,aAAO,QAAQ,IAAI,EAAE,KAAK,uBAAuB;AAEjD,YAAM,iBAAiB,MAAM,WAAW,SAAS,OAAO,KAAK,IAAI;AAAA,QAC/D,MAAM;AAAA,QACN,oBAAoB;AAAA,MACtB,CAAC;AACD;AAAA,QACE,eAAe,GAAG;AAAA,QAClB,oEAAoE,eAAe,OAAO,CAAC,IAAI,KAAK,UAAU,MAAM,aAAa,cAAc,CAAC,CAAC;AAAA,MACnJ,EAAE,WAAW;AAEb,YAAM,UAAU,MAAM,SAAS,SAAS,OAAO,KAAK,EAAE;AACtD,aAAO,QAAQ,sBAAsB,IAAI,EAAE,SAAS;AACpD,aAAO,QAAQ,IAAI,EAAE,KAAK,kBAAkB;AAAA,IAC9C,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AAED,OAAK,0DAA0D,OAAO,EAAE,QAAQ,MAAM;AACpF,QAAI,QAAuB;AAC3B,QAAI,SAAwB;AAE5B,QAAI;AACF,cAAQ,MAAM,aAAa,OAAO;AAClC,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AAClG,eAAS,KAAK;AAEd,YAAM,kBAAkB,MAAM,WAAW,SAAS,OAAO,KAAK,IAAI;AAAA,QAChE,QAAQ;AAAA,QACR,oBAAoB;AAAA,MACtB,CAAC;AACD,aAAO,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,gBAAgB,OAAO,CAAC;AACrD,YAAM,OAAO,MAAM,aAAgF,eAAe;AAClH,YAAM,aAAa,OAAO,MAAM,aAAa,uBAAuB,WAAW,KAAK,YAAY,qBAAqB;AACrH,YAAM,eAAe,OAAO,MAAM,UAAU,WAAW,KAAK,QAAQ;AACpE,aAAO,GAAG,UAAU,IAAI,YAAY,GAAG,YAAY,CAAC,EAAE,UAAU,SAAS;AAAA,IAC3E,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/checkout/__integration__/TC-CHKT-039-stale-delete-lock.spec.js

@@ -0,0 +1,66 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/modules/core/__integration__/helpers/api";
+import { createFixedTemplateInput, createLinkFixture, readLink } from "./helpers/fixtures.js";
+const OPTIMISTIC_LOCK_HEADER = "x-om-ext-optimistic-lock-expected-updated-at";
+function readUpdatedAt(record) {
+  const raw = record.updatedAt ?? record.updated_at;
+  expect(typeof raw, "link detail should expose updatedAt as a string").toBe("string");
+  return new Date(Date.parse(raw)).toISOString();
+}
+test.describe("TC-CHKT-039: pay-link stale DELETE optimistic-lock guard", () => {
+  test("stale DELETE returns 409; fresh DELETE succeeds; header-less stays backward-compatible", async ({ request }) => {
+    const token = await getAuthToken(request);
+    const guarded = await createLinkFixture(request, token, createFixedTemplateInput());
+    const additive = await createLinkFixture(request, token, createFixedTemplateInput());
+    let guardedDeleted = false;
+    let additiveDeleted = false;
+    try {
+      const detail = await readLink(request, token, guarded.id);
+      const t0 = readUpdatedAt(detail);
+      const bump = await request.fetch(`/api/checkout/links/${encodeURIComponent(guarded.id)}`, {
+        method: "PUT",
+        headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+        data: { subtitle: "bumped for stale-delete test" }
+      });
+      expect(bump.status(), "PUT bump should succeed").toBeLessThan(300);
+      const staleDelete = await request.fetch(`/api/checkout/links/${encodeURIComponent(guarded.id)}`, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${token}`, [OPTIMISTIC_LOCK_HEADER]: t0 }
+      });
+      expect(staleDelete.status(), "DELETE with a stale header should return 409").toBe(409);
+      expect(await staleDelete.json()).toMatchObject({
+        code: "optimistic_lock_conflict",
+        expectedUpdatedAt: t0
+      });
+      const stillThere = await readLink(request, token, guarded.id);
+      const t1 = readUpdatedAt(stillThere);
+      expect(t1, "stale delete must NOT have removed the record").not.toBe(t0);
+      const freshDelete = await request.fetch(`/api/checkout/links/${encodeURIComponent(guarded.id)}`, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${token}`, [OPTIMISTIC_LOCK_HEADER]: t1 }
+      });
+      expect(freshDelete.status(), "DELETE with a fresh header should succeed").toBeLessThan(300);
+      guardedDeleted = true;
+      const nohdrDelete = await request.fetch(`/api/checkout/links/${encodeURIComponent(additive.id)}`, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${token}` }
+      });
+      expect(nohdrDelete.status(), "DELETE without a header should succeed").toBeLessThan(300);
+      additiveDeleted = true;
+    } finally {
+      if (!guardedDeleted) {
+        await request.fetch(`/api/checkout/links/${encodeURIComponent(guarded.id)}`, {
+          method: "DELETE",
+          headers: { Authorization: `Bearer ${token}` }
+        }).catch(() => void 0);
+      }
+      if (!additiveDeleted) {
+        await request.fetch(`/api/checkout/links/${encodeURIComponent(additive.id)}`, {
+          method: "DELETE",
+          headers: { Authorization: `Bearer ${token}` }
+        }).catch(() => void 0);
+      }
+    }
+  });
+});
+//# sourceMappingURL=TC-CHKT-039-stale-delete-lock.spec.js.map

package/dist/modules/checkout/__integration__/TC-CHKT-039-stale-delete-lock.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/__integration__/TC-CHKT-039-stale-delete-lock.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'\nimport { createFixedTemplateInput, createLinkFixture, readLink } from './helpers/fixtures'\n\n/**\n * TC-CHKT-039: OSS optimistic locking now guards the pay-link/template DELETE.\n *\n * QA round-6 (PR #2055): after a save conflict surfaced the unified conflict\n * bar, clicking Delete still removed the stale record. The pay-link/template\n * delete path was unguarded \u2014 the client sent no version header and the\n * `checkout.link.delete` / `checkout.template.delete` commands never called\n * `enforceCommandOptimisticLock` (only the *.update commands did).\n *\n * This spec proves the server contract the UI relies on:\n *   - GET detail exposes `updatedAt`.\n *   - DELETE without the header succeeds (strictly additive).\n *   - DELETE with a stale header returns 409 with the structured conflict body.\n *   - DELETE with a fresh header deletes the record.\n *\n * Requires `OM_OPTIMISTIC_LOCK=all` (CI default).\n */\nconst OPTIMISTIC_LOCK_HEADER = 'x-om-ext-optimistic-lock-expected-updated-at'\n\nfunction readUpdatedAt(record: Record<string, unknown>): string {\n  const raw = record.updatedAt ?? record.updated_at\n  expect(typeof raw, 'link detail should expose updatedAt as a string').toBe('string')\n  return new Date(Date.parse(raw as string)).toISOString()\n}\n\ntest.describe('TC-CHKT-039: pay-link stale DELETE optimistic-lock guard', () => {\n  test('stale DELETE returns 409; fresh DELETE succeeds; header-less stays backward-compatible', async ({ request }) => {\n    const token = await getAuthToken(request)\n\n    // Two links: one to prove the stale\u2192409\u2192fresh path, one to prove the\n    // strictly-additive header-less delete still works.\n    const guarded = await createLinkFixture(request, token, createFixedTemplateInput())\n    const additive = await createLinkFixture(request, token, createFixedTemplateInput())\n    let guardedDeleted = false\n    let additiveDeleted = false\n\n    try {\n      const detail = await readLink(request, token, guarded.id)\n      const t0 = readUpdatedAt(detail as Record<string, unknown>)\n\n      // A save advances the version, making t0 stale.\n      const bump = await request.fetch(`/api/checkout/links/${encodeURIComponent(guarded.id)}`, {\n        method: 'PUT',\n        headers: { Authorization: `Bearer ${token}`, 'Content-Type': 'application/json' },\n        data: { subtitle: 'bumped for stale-delete test' },\n      })\n      expect(bump.status(), 'PUT bump should succeed').toBeLessThan(300)\n\n      // Stale DELETE \u2192 409 with the structured conflict body; record survives.\n      const staleDelete = await request.fetch(`/api/checkout/links/${encodeURIComponent(guarded.id)}`, {\n        method: 'DELETE',\n        headers: { Authorization: `Bearer ${token}`, [OPTIMISTIC_LOCK_HEADER]: t0 },\n      })\n      expect(staleDelete.status(), 'DELETE with a stale header should return 409').toBe(409)\n      expect((await staleDelete.json()) as Record<string, unknown>).toMatchObject({\n        code: 'optimistic_lock_conflict',\n        expectedUpdatedAt: t0,\n      })\n\n      const stillThere = await readLink(request, token, guarded.id)\n      const t1 = readUpdatedAt(stillThere as Record<string, unknown>)\n      expect(t1, 'stale delete must NOT have removed the record').not.toBe(t0)\n\n      // Fresh DELETE \u2192 succeeds.\n      const freshDelete = await request.fetch(`/api/checkout/links/${encodeURIComponent(guarded.id)}`, {\n        method: 'DELETE',\n        headers: { Authorization: `Bearer ${token}`, [OPTIMISTIC_LOCK_HEADER]: t1 },\n      })\n      expect(freshDelete.status(), 'DELETE with a fresh header should succeed').toBeLessThan(300)\n      guardedDeleted = true\n\n      // Header-less DELETE still works (strictly additive).\n      const nohdrDelete = await request.fetch(`/api/checkout/links/${encodeURIComponent(additive.id)}`, {\n        method: 'DELETE',\n        headers: { Authorization: `Bearer ${token}` },\n      })\n      expect(nohdrDelete.status(), 'DELETE without a header should succeed').toBeLessThan(300)\n      additiveDeleted = true\n    } finally {\n      if (!guardedDeleted) {\n        await request.fetch(`/api/checkout/links/${encodeURIComponent(guarded.id)}`, {\n          method: 'DELETE',\n          headers: { Authorization: `Bearer ${token}` },\n        }).catch(() => undefined)\n      }\n      if (!additiveDeleted) {\n        await request.fetch(`/api/checkout/links/${encodeURIComponent(additive.id)}`, {\n          method: 'DELETE',\n          headers: { Authorization: `Bearer ${token}` },\n        }).catch(() => undefined)\n      }\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B,mBAAmB,gBAAgB;AAmBtE,MAAM,yBAAyB;AAE/B,SAAS,cAAc,QAAyC;AAC9D,QAAM,MAAM,OAAO,aAAa,OAAO;AACvC,SAAO,OAAO,KAAK,iDAAiD,EAAE,KAAK,QAAQ;AACnF,SAAO,IAAI,KAAK,KAAK,MAAM,GAAa,CAAC,EAAE,YAAY;AACzD;AAEA,KAAK,SAAS,4DAA4D,MAAM;AAC9E,OAAK,0FAA0F,OAAO,EAAE,QAAQ,MAAM;AACpH,UAAM,QAAQ,MAAM,aAAa,OAAO;AAIxC,UAAM,UAAU,MAAM,kBAAkB,SAAS,OAAO,yBAAyB,CAAC;AAClF,UAAM,WAAW,MAAM,kBAAkB,SAAS,OAAO,yBAAyB,CAAC;AACnF,QAAI,iBAAiB;AACrB,QAAI,kBAAkB;AAEtB,QAAI;AACF,YAAM,SAAS,MAAM,SAAS,SAAS,OAAO,QAAQ,EAAE;AACxD,YAAM,KAAK,cAAc,MAAiC;AAG1D,YAAM,OAAO,MAAM,QAAQ,MAAM,uBAAuB,mBAAmB,QAAQ,EAAE,CAAC,IAAI;AAAA,QACxF,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,gBAAgB,mBAAmB;AAAA,QAChF,MAAM,EAAE,UAAU,+BAA+B;AAAA,MACnD,CAAC;AACD,aAAO,KAAK,OAAO,GAAG,yBAAyB,EAAE,aAAa,GAAG;AAGjE,YAAM,cAAc,MAAM,QAAQ,MAAM,uBAAuB,mBAAmB,QAAQ,EAAE,CAAC,IAAI;AAAA,QAC/F,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,CAAC,sBAAsB,GAAG,GAAG;AAAA,MAC5E,CAAC;AACD,aAAO,YAAY,OAAO,GAAG,8CAA8C,EAAE,KAAK,GAAG;AACrF,aAAQ,MAAM,YAAY,KAAK,CAA6B,EAAE,cAAc;AAAA,QAC1E,MAAM;AAAA,QACN,mBAAmB;AAAA,MACrB,CAAC;AAED,YAAM,aAAa,MAAM,SAAS,SAAS,OAAO,QAAQ,EAAE;AAC5D,YAAM,KAAK,cAAc,UAAqC;AAC9D,aAAO,IAAI,+CAA+C,EAAE,IAAI,KAAK,EAAE;AAGvE,YAAM,cAAc,MAAM,QAAQ,MAAM,uBAAuB,mBAAmB,QAAQ,EAAE,CAAC,IAAI;AAAA,QAC/F,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,CAAC,sBAAsB,GAAG,GAAG;AAAA,MAC5E,CAAC;AACD,aAAO,YAAY,OAAO,GAAG,2CAA2C,EAAE,aAAa,GAAG;AAC1F,uBAAiB;AAGjB,YAAM,cAAc,MAAM,QAAQ,MAAM,uBAAuB,mBAAmB,SAAS,EAAE,CAAC,IAAI;AAAA,QAChG,QAAQ;AAAA,QACR,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,MAC9C,CAAC;AACD,aAAO,YAAY,OAAO,GAAG,wCAAwC,EAAE,aAAa,GAAG;AACvF,wBAAkB;AAAA,IACpB,UAAE;AACA,UAAI,CAAC,gBAAgB;AACnB,cAAM,QAAQ,MAAM,uBAAuB,mBAAmB,QAAQ,EAAE,CAAC,IAAI;AAAA,UAC3E,QAAQ;AAAA,UACR,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,QAC9C,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,MAC1B;AACA,UAAI,CAAC,iBAAiB;AACpB,cAAM,QAAQ,MAAM,uBAAuB,mBAAmB,SAAS,EAAE,CAAC,IAAI;AAAA,UAC5E,QAAQ;AAAA,UACR,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,QAC9C,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,MAC1B;AAAA,IACF;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}