@open-mercato/checkout 0.6.5-develop.5116.1.f0af9e5080 → 0.6.5-develop.5155.1.148d10a46d

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:checkout] found 152 entry points
+[build:checkout] found 153 entry points
 [build:checkout] built successfully

package/dist/modules/checkout/__integration__/TC-CHKT-041-template-stale-delete-conflict.spec.js

@@ -0,0 +1,44 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/modules/core/__integration__/helpers/api";
+import { readJsonSafe } from "@open-mercato/core/modules/core/__integration__/helpers/generalFixtures";
+import {
+  createFixedTemplateInput,
+  createTemplateFixture,
+  deleteCheckoutEntityIfExists,
+  deleteTemplate,
+  updateTemplate
+} from "./helpers/fixtures.js";
+const OPTIMISTIC_LOCK_HEADER = "x-om-ext-optimistic-lock-expected-updated-at";
+const STALE_EXPECTED_AT = "2020-01-01T00:00:00.000Z";
+function resolveUrl(path) {
+  const base = process.env.BASE_URL?.trim() || null;
+  return base ? `${base}${path}` : path;
+}
+test.describe("TC-CHKT-041: Checkout template stale-edit after delete", () => {
+  test("PUT with stale optimistic-lock header on a deleted template returns 409 conflict", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let templateId = null;
+    try {
+      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      const deleteResponse = await deleteTemplate(request, token, templateId);
+      expect(deleteResponse.ok(), "template delete fixture should succeed").toBeTruthy();
+      const conflictResponse = await request.fetch(resolveUrl(`/api/checkout/templates/${encodeURIComponent(templateId)}`), {
+        method: "PUT",
+        headers: {
+          Authorization: `Bearer ${token}`,
+          "Content-Type": "application/json",
+          [OPTIMISTIC_LOCK_HEADER]: STALE_EXPECTED_AT
+        },
+        data: { name: "QA stale edit" }
+      });
+      expect(conflictResponse.status(), "stale edit after delete should be a 409 conflict").toBe(409);
+      const conflictBody = await readJsonSafe(conflictResponse);
+      expect(conflictBody?.code, "conflict body should carry the optimistic-lock code").toBe("optimistic_lock_conflict");
+      const notFoundResponse = await updateTemplate(request, token, templateId, { name: "QA stale edit no header" });
+      expect(notFoundResponse.status(), "no-header edit after delete should stay 404").toBe(404);
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+});
+//# sourceMappingURL=TC-CHKT-041-template-stale-delete-conflict.spec.js.map

package/dist/modules/checkout/__integration__/TC-CHKT-041-template-stale-delete-conflict.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/__integration__/TC-CHKT-041-template-stale-delete-conflict.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'\nimport { readJsonSafe } from '@open-mercato/core/modules/core/__integration__/helpers/generalFixtures'\nimport {\n  createFixedTemplateInput,\n  createTemplateFixture,\n  deleteCheckoutEntityIfExists,\n  deleteTemplate,\n  updateTemplate,\n} from './helpers/fixtures'\n\nconst OPTIMISTIC_LOCK_HEADER = 'x-om-ext-optimistic-lock-expected-updated-at'\nconst STALE_EXPECTED_AT = '2020-01-01T00:00:00.000Z'\n\nfunction resolveUrl(path: string): string {\n  const base = process.env.BASE_URL?.trim() || null\n  return base ? `${base}${path}` : path\n}\n\n// Regression for #2529 (alinadivante comment 4638514821, \"TC A\" optimistic-lock gap):\n// editing a checkout template that was deleted in another tab must surface a clean\n// optimistic-lock conflict (409) when the client sent the expected-version header \u2014\n// not a bare \"Template not found\" 404. Plain API clients that send no header keep the\n// existing 404 (fail-open).\ntest.describe('TC-CHKT-041: Checkout template stale-edit after delete', () => {\n  test('PUT with stale optimistic-lock header on a deleted template returns 409 conflict', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let templateId: string | null = null\n\n    try {\n      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n\n      // Simulate \"deleted in another tab\".\n      const deleteResponse = await deleteTemplate(request, token, templateId)\n      expect(deleteResponse.ok(), 'template delete fixture should succeed').toBeTruthy()\n\n      // Replay a stale edit carrying the optimistic-lock header \u2192 expect 409.\n      const conflictResponse = await request.fetch(resolveUrl(`/api/checkout/templates/${encodeURIComponent(templateId)}`), {\n        method: 'PUT',\n        headers: {\n          Authorization: `Bearer ${token}`,\n          'Content-Type': 'application/json',\n          [OPTIMISTIC_LOCK_HEADER]: STALE_EXPECTED_AT,\n        },\n        data: { name: 'QA stale edit' },\n      })\n      expect(conflictResponse.status(), 'stale edit after delete should be a 409 conflict').toBe(409)\n      const conflictBody = await readJsonSafe<{ code?: string }>(conflictResponse)\n      expect(conflictBody?.code, 'conflict body should carry the optimistic-lock code').toBe('optimistic_lock_conflict')\n\n      // Without the header, the same edit keeps the plain 404 (fail-open).\n      const notFoundResponse = await updateTemplate(request, token, templateId, { name: 'QA stale edit no header' })\n      expect(notFoundResponse.status(), 'no-header edit after delete should stay 404').toBe(404)\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,yBAAyB;AAC/B,MAAM,oBAAoB;AAE1B,SAAS,WAAW,MAAsB;AACxC,QAAM,OAAO,QAAQ,IAAI,UAAU,KAAK,KAAK;AAC7C,SAAO,OAAO,GAAG,IAAI,GAAG,IAAI,KAAK;AACnC;AAOA,KAAK,SAAS,0DAA0D,MAAM;AAC5E,OAAK,oFAAoF,OAAO,EAAE,QAAQ,MAAM;AAC9G,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,aAA4B;AAEhC,QAAI;AACF,mBAAa,MAAM,sBAAsB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AAGtG,YAAM,iBAAiB,MAAM,eAAe,SAAS,OAAO,UAAU;AACtE,aAAO,eAAe,GAAG,GAAG,wCAAwC,EAAE,WAAW;AAGjF,YAAM,mBAAmB,MAAM,QAAQ,MAAM,WAAW,2BAA2B,mBAAmB,UAAU,CAAC,EAAE,GAAG;AAAA,QACpH,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,eAAe,UAAU,KAAK;AAAA,UAC9B,gBAAgB;AAAA,UAChB,CAAC,sBAAsB,GAAG;AAAA,QAC5B;AAAA,QACA,MAAM,EAAE,MAAM,gBAAgB;AAAA,MAChC,CAAC;AACD,aAAO,iBAAiB,OAAO,GAAG,kDAAkD,EAAE,KAAK,GAAG;AAC9F,YAAM,eAAe,MAAM,aAAgC,gBAAgB;AAC3E,aAAO,cAAc,MAAM,qDAAqD,EAAE,KAAK,0BAA0B;AAGjH,YAAM,mBAAmB,MAAM,eAAe,SAAS,OAAO,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7G,aAAO,iBAAiB,OAAO,GAAG,6CAA6C,EAAE,KAAK,GAAG;AAAA,IAC3F,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/checkout/commands/templates.js

@@ -3,7 +3,7 @@ import { buildCustomFieldResetMap, loadCustomFieldSnapshot } from "@open-mercato
 import { setCustomFieldsIfAny } from "@open-mercato/shared/lib/commands/helpers";
 import { resolveRedoSnapshot } from "@open-mercato/shared/lib/commands/redo";
 import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
-import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { enforceCommandOptimisticLock, enforceRecordGoneIsConflict } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
 import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
 import { CheckoutLink, CheckoutLinkTemplate } from "../data/entities.js";
@@ -242,7 +242,14 @@ const updateTemplateCommand = {
       tenantId: scope.tenantId,
       deletedAt: null
     }, void 0, scope);
-    if (!template) throw new CrudHttpError(404, { error: "Template not found" });
+    if (!template) {
+      enforceRecordGoneIsConflict({
+        resourceKind: "checkout.template",
+        resourceId: parsed.id,
+        request: ctx.request ?? null
+      });
+      throw new CrudHttpError(404, { error: "Template not found" });
+    }
     enforceCommandOptimisticLock({
       resourceKind: "checkout.template",
       resourceId: template.id,
@@ -395,7 +402,14 @@ const deleteTemplateCommand = {
       tenantId: scope.tenantId,
       deletedAt: null
     }, void 0, scope);
-    if (!template) throw new CrudHttpError(404, { error: "Template not found" });
+    if (!template) {
+      enforceRecordGoneIsConflict({
+        resourceKind: "checkout.template",
+        resourceId: templateId,
+        request: ctx.request ?? null
+      });
+      throw new CrudHttpError(404, { error: "Template not found" });
+    }
     enforceCommandOptimisticLock({
       resourceKind: "checkout.template",
       resourceId: template.id,

package/dist/modules/checkout/commands/templates.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/checkout/commands/templates.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { buildCustomFieldResetMap, loadCustomFieldSnapshot } from '@open-mercato/shared/lib/commands/customFieldSnapshots'\nimport { setCustomFieldsIfAny } from '@open-mercato/shared/lib/commands/helpers'\nimport { resolveRedoSnapshot } from '@open-mercato/shared/lib/commands/redo'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CheckoutLink, CheckoutLinkTemplate } from '../data/entities'\nimport { createTemplateSchema, updateTemplateSchema } from '../data/validators'\nimport { CHECKOUT_ENTITY_IDS } from '../lib/constants'\nimport {\n  ensureGatewayProviderConfigured,\n  type PaymentGatewayDescriptorService,\n} from '../lib/gatewayProviderAvailability'\nimport { emitCheckoutEvent } from '../events'\nimport {\n  deriveConfiguredCurrencies,\n  hashCheckoutPassword,\n  parseCheckoutInput,\n  serializeTemplateOrLink,\n  toMoneyString,\n  validateDescriptorCurrencies,\n} from '../lib/utils'\nimport {\n  buildSelectiveLinkedCustomFieldUpdates,\n  buildSelectiveLinkedLinkSnapshot,\n  captureTemplateSnapshot,\n  createTemplateFromSnapshot,\n  extractUndoPayload,\n  captureLinkSnapshot,\n  readCommandId,\n  resolveCommandScope,\n  restoreLinkFromSnapshot,\n  restoreTemplateFromSnapshot,\n  toCheckoutAuditSnapshot,\n  type CheckoutTemplateSnapshot,\n} from './shared'\n\ntype CheckoutTemplateUndoPayload = {\n  before?: CheckoutTemplateSnapshot | null\n  after?: CheckoutTemplateSnapshot | null\n}\n\nasync function syncLinkedLinksWithTemplateSnapshot(params: {\n  em: EntityManager\n  dataEngine: DataEngine\n  scope: { organizationId: string; tenantId: string }\n  templateId: string\n  before: CheckoutTemplateSnapshot\n  after: CheckoutTemplateSnapshot\n}) {\n  const { em, dataEngine, scope, templateId, before, after } = params\n  const linkedLinks = await findWithDecryption(\n    em,\n    CheckoutLink,\n    {\n      templateId,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n      isLocked: false,\n    },\n    undefined,\n    scope,\n  )\n\n  let changedLinks = false\n\n  for (const link of linkedLinks) {\n    const currentLinkSnapshot = captureLinkSnapshot(link)\n    const nextLinkSnapshot = buildSelectiveLinkedLinkSnapshot(currentLinkSnapshot, before, after)\n    if (nextLinkSnapshot.changed) {\n      restoreLinkFromSnapshot(link, nextLinkSnapshot.snapshot)\n      changedLinks = true\n    }\n\n    const currentCustom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.link,\n      recordId: link.id,\n      tenantId: link.tenantId,\n      organizationId: link.organizationId,\n    })\n    const customFieldUpdates = buildSelectiveLinkedCustomFieldUpdates(currentCustom, before.custom, after.custom)\n    if (Object.keys(customFieldUpdates).length > 0) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.link,\n        recordId: link.id,\n        tenantId: link.tenantId,\n        organizationId: link.organizationId,\n        values: customFieldUpdates,\n      })\n    }\n  }\n\n  if (changedLinks) {\n    await em.flush()\n  }\n}\n\nconst createTemplateCommand: CommandHandler<Record<string, unknown>, { id: string }> = {\n  id: 'checkout.template.create',\n  async execute(rawInput, ctx) {\n    const { parsed, customFields } = parseCheckoutInput(rawInput, createTemplateSchema.parse)\n    const scope = resolveCommandScope(ctx)\n    validateDescriptorCurrencies(parsed.gatewayProviderKey, deriveConfiguredCurrencies(parsed))\n    const descriptorService = ctx.container.resolve('paymentGatewayDescriptorService') as PaymentGatewayDescriptorService\n    await ensureGatewayProviderConfigured(parsed.gatewayProviderKey, descriptorService, scope)\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    const template = em.create(CheckoutLinkTemplate, {\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      ...parsed,\n      fixedPriceAmount: toMoneyString(parsed.fixedPriceAmount),\n      fixedPriceOriginalAmount: toMoneyString(parsed.fixedPriceOriginalAmount),\n      customAmountMin: toMoneyString(parsed.customAmountMin),\n      customAmountMax: toMoneyString(parsed.customAmountMax),\n      passwordHash: await hashCheckoutPassword(parsed.password),\n    } as any)\n    em.persist(template)\n    await em.flush()\n    await setCustomFieldsIfAny({\n      dataEngine,\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      values: customFields,\n    })\n    await emitCheckoutEvent('checkout.template.created', {\n      id: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    }).catch(() => undefined)\n    return { id: template.id }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, { id: result.id })\n    if (!template) return null\n    const custom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    return captureTemplateSnapshot(template, custom)\n  },\n  buildLog: async ({ result, snapshots }) => {\n    const { translate } = await resolveTranslations()\n    const after = snapshots.after as CheckoutTemplateSnapshot | null | undefined\n    return {\n      actionLabel: translate('checkout.audit.templates.create', 'Create pay-link template'),\n      resourceKind: 'checkout.template',\n      resourceId: result.id,\n      tenantId: after?.tenantId ?? null,\n      organizationId: after?.organizationId ?? null,\n      snapshotAfter: after ? toCheckoutAuditSnapshot(after) : null,\n      payload: {\n        undo: {\n          after: after ?? null,\n        } satisfies CheckoutTemplateUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const after = extractUndoPayload<CheckoutTemplateUndoPayload>(logEntry)?.after\n    if (!after) return\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    const reset = buildCustomFieldResetMap(undefined, after.custom)\n    if (Object.keys(reset).length) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.template,\n        recordId: after.id,\n        tenantId: after.tenantId,\n        organizationId: after.organizationId,\n        values: reset,\n        notify: false,\n      })\n    }\n    const template = await em.findOne(CheckoutLinkTemplate, { id: after.id })\n    if (!template) return\n    template.deletedAt = new Date()\n    await em.flush()\n  },\n  redo: async ({ logEntry, ctx }) => {\n    const after = resolveRedoSnapshot<CheckoutTemplateSnapshot>(logEntry)\n    if (!after) throw new CrudHttpError(400, { error: '[internal] redo snapshot unavailable for checkout template create' })\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    let template = await findOneWithDecryption(\n      em,\n      CheckoutLinkTemplate,\n      { id: after.id },\n      {},\n      { tenantId: after.tenantId, organizationId: after.organizationId },\n    )\n    if (template) {\n      restoreTemplateFromSnapshot(template, after)\n      template.deletedAt = null\n    } else {\n      template = em.create(CheckoutLinkTemplate, createTemplateFromSnapshot(after))\n      em.persist(template)\n    }\n    await em.flush()\n    const reset = buildCustomFieldResetMap(after.custom, undefined)\n    if (Object.keys(reset).length) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.template,\n        recordId: after.id,\n        tenantId: after.tenantId,\n        organizationId: after.organizationId,\n        values: reset,\n        notify: false,\n      })\n    }\n    await emitCheckoutEvent('checkout.template.created', {\n      id: template.id,\n      tenantId: after.tenantId,\n      organizationId: after.organizationId,\n    }).catch(() => undefined)\n    return { id: template.id }\n  },\n}\n\nconst updateTemplateCommand: CommandHandler<Record<string, unknown>, { ok: true }> = {\n  id: 'checkout.template.update',\n  async prepare(rawInput, ctx) {\n    const { parsed } = parseCheckoutInput(rawInput, updateTemplateSchema.parse)\n    const scope = resolveCommandScope(ctx)\n    const em = ctx.container.resolve('em') as EntityManager\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, {\n      id: parsed.id,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n    }, undefined, scope)\n    if (!template) return {}\n    const custom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    return { before: captureTemplateSnapshot(template, custom) }\n  },\n  async execute(rawInput, ctx) {\n    const { parsed, customFields } = parseCheckoutInput(rawInput, updateTemplateSchema.parse)\n    const scope = resolveCommandScope(ctx)\n    validateDescriptorCurrencies(parsed.gatewayProviderKey ?? null, deriveConfiguredCurrencies(parsed))\n    const descriptorService = ctx.container.resolve('paymentGatewayDescriptorService') as PaymentGatewayDescriptorService\n    await ensureGatewayProviderConfigured(parsed.gatewayProviderKey ?? null, descriptorService, scope)\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, {\n      id: parsed.id,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n    }, undefined, scope)\n    if (!template) throw new CrudHttpError(404, { error: 'Template not found' })\n    enforceCommandOptimisticLock({\n      resourceKind: 'checkout.template',\n      resourceId: template.id,\n      current: template.updatedAt ?? null,\n      request: ctx.request ?? null,\n    })\n    const beforeCustom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    const beforeSnapshot = captureTemplateSnapshot(template, beforeCustom)\n    const passwordHash = parsed.password !== undefined\n      ? await hashCheckoutPassword(parsed.password)\n      : template.passwordHash\n    Object.assign(template, {\n      ...parsed,\n      fixedPriceAmount: parsed.fixedPriceAmount !== undefined ? toMoneyString(parsed.fixedPriceAmount) : template.fixedPriceAmount,\n      fixedPriceOriginalAmount: parsed.fixedPriceOriginalAmount !== undefined ? toMoneyString(parsed.fixedPriceOriginalAmount) : template.fixedPriceOriginalAmount,\n      customAmountMin: parsed.customAmountMin !== undefined ? toMoneyString(parsed.customAmountMin) : template.customAmountMin,\n      customAmountMax: parsed.customAmountMax !== undefined ? toMoneyString(parsed.customAmountMax) : template.customAmountMax,\n      passwordHash,\n    })\n    await em.flush()\n    await setCustomFieldsIfAny({\n      dataEngine,\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      values: customFields,\n    })\n    const afterCustom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    const afterSnapshot = captureTemplateSnapshot(template, afterCustom)\n    await syncLinkedLinksWithTemplateSnapshot({\n      em,\n      dataEngine,\n      scope,\n      templateId: template.id,\n      before: beforeSnapshot,\n      after: afterSnapshot,\n    })\n    await emitCheckoutEvent('checkout.template.updated', {\n      id: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    }).catch(() => undefined)\n    return { ok: true }\n  },\n  captureAfter: async (input, _result, ctx) => {\n    const { parsed } = parseCheckoutInput(input, updateTemplateSchema.parse)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, { id: parsed.id, deletedAt: null })\n    if (!template) return null\n    const custom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    return captureTemplateSnapshot(template, custom)\n  },\n  buildLog: async ({ snapshots, input }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as CheckoutTemplateSnapshot | null | undefined\n    const after = snapshots.after as CheckoutTemplateSnapshot | null | undefined\n    return {\n      actionLabel: translate('checkout.audit.templates.update', 'Update pay-link template'),\n      resourceKind: 'checkout.template',\n      resourceId: after?.id ?? before?.id ?? readCommandId(input, 'Template id is required'),\n      tenantId: after?.tenantId ?? before?.tenantId ?? null,\n      organizationId: after?.organizationId ?? before?.organizationId ?? null,\n      snapshotBefore: before ? toCheckoutAuditSnapshot(before) : null,\n      snapshotAfter: after ? toCheckoutAuditSnapshot(after) : null,\n      payload: {\n        undo: {\n          before: before ?? null,\n          after: after ?? null,\n        } satisfies CheckoutTemplateUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const undo = extractUndoPayload<CheckoutTemplateUndoPayload>(logEntry)\n    const before = undo?.before\n    const after = undo?.after\n    if (!before) return\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    const template = await em.findOne(CheckoutLinkTemplate, { id: before.id, deletedAt: null })\n    if (!template) return\n    restoreTemplateFromSnapshot(template, before)\n    await em.flush()\n    const reset = buildCustomFieldResetMap(before.custom, after?.custom)\n    if (Object.keys(reset).length) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.template,\n        recordId: before.id,\n        tenantId: before.tenantId,\n        organizationId: before.organizationId,\n        values: reset,\n        notify: false,\n      })\n    }\n    if (after) {\n      await syncLinkedLinksWithTemplateSnapshot({\n        em,\n        dataEngine,\n        scope: { organizationId: before.organizationId, tenantId: before.tenantId },\n        templateId: before.id,\n        before: after,\n        after: before,\n      })\n    }\n  },\n}\n\nconst deleteTemplateCommand: CommandHandler<Record<string, unknown>, { ok: true }> = {\n  id: 'checkout.template.delete',\n  async prepare(rawInput, ctx) {\n    const templateId = readCommandId(rawInput, 'Template id is required')\n    const scope = resolveCommandScope(ctx)\n    const em = ctx.container.resolve('em') as EntityManager\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, {\n      id: templateId,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n    }, undefined, scope)\n    if (!template) return {}\n    const custom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    return { before: captureTemplateSnapshot(template, custom) }\n  },\n  async execute(rawInput, ctx) {\n    const templateId = readCommandId(rawInput, 'Template id is required')\n    const scope = resolveCommandScope(ctx)\n    const em = ctx.container.resolve('em') as EntityManager\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, {\n      id: templateId,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n    }, undefined, scope)\n    if (!template) throw new CrudHttpError(404, { error: 'Template not found' })\n    enforceCommandOptimisticLock({\n      resourceKind: 'checkout.template',\n      resourceId: template.id,\n      current: template.updatedAt ?? null,\n      request: ctx.request ?? null,\n    })\n    template.deletedAt = new Date()\n    await em.flush()\n    await emitCheckoutEvent('checkout.template.deleted', {\n      id: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    }).catch(() => undefined)\n    return { ok: true }\n  },\n  buildLog: async ({ snapshots, input }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as CheckoutTemplateSnapshot | null | undefined\n    return {\n      actionLabel: translate('checkout.audit.templates.delete', 'Delete pay-link template'),\n      resourceKind: 'checkout.template',\n      resourceId: before?.id ?? readCommandId(input, 'Template id is required'),\n      tenantId: before?.tenantId ?? null,\n      organizationId: before?.organizationId ?? null,\n      snapshotBefore: before ? toCheckoutAuditSnapshot(before) : null,\n      payload: {\n        undo: {\n          before: before ?? null,\n        } satisfies CheckoutTemplateUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const before = extractUndoPayload<CheckoutTemplateUndoPayload>(logEntry)?.before\n    if (!before) return\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    let template = await em.findOne(CheckoutLinkTemplate, { id: before.id })\n    if (template) {\n      restoreTemplateFromSnapshot(template, before)\n    } else {\n      template = em.create(CheckoutLinkTemplate, createTemplateFromSnapshot(before))\n      em.persist(template)\n    }\n    await em.flush()\n    const reset = buildCustomFieldResetMap(before.custom, undefined)\n    if (Object.keys(reset).length) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.template,\n        recordId: before.id,\n        tenantId: before.tenantId,\n        organizationId: before.organizationId,\n        values: reset,\n        notify: false,\n      })\n    }\n  },\n}\n\nregisterCommand(createTemplateCommand)\nregisterCommand(updateTemplateCommand)\nregisterCommand(deleteTemplateCommand)\n\nexport function serializeTemplateRecord(record: CheckoutLinkTemplate) {\n  return serializeTemplateOrLink(record)\n}\n"],
-  "mappings": "AAGA,SAAS,uBAAuB;AAChC,SAAS,0BAA0B,+BAA+B;AAClE,SAAS,4BAA4B;AACrC,SAAS,2BAA2B;AACpC,SAAS,qBAAqB;AAC9B,SAAS,oCAAoC;AAC7C,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,2BAA2B;AACpC,SAAS,cAAc,4BAA4B;AACnD,SAAS,sBAAsB,4BAA4B;AAC3D,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAOP,eAAe,oCAAoC,QAOhD;AACD,QAAM,EAAE,IAAI,YAAY,OAAO,YAAY,QAAQ,MAAM,IAAI;AAC7D,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,eAAe;AAEnB,aAAW,QAAQ,aAAa;AAC9B,UAAM,sBAAsB,oBAAoB,IAAI;AACpD,UAAM,mBAAmB,iCAAiC,qBAAqB,QAAQ,KAAK;AAC5F,QAAI,iBAAiB,SAAS;AAC5B,8BAAwB,MAAM,iBAAiB,QAAQ;AACvD,qBAAe;AAAA,IACjB;AAEA,UAAM,gBAAgB,MAAM,wBAAwB,IAAI;AAAA,MACtD,UAAU,oBAAoB;AAAA,MAC9B,UAAU,KAAK;AAAA,MACf,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,UAAM,qBAAqB,uCAAuC,eAAe,OAAO,QAAQ,MAAM,MAAM;AAC5G,QAAI,OAAO,KAAK,kBAAkB,EAAE,SAAS,GAAG;AAC9C,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,KAAK;AAAA,QACf,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,cAAc;AAChB,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,MAAM,wBAAiF;AAAA,EACrF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,QAAQ,aAAa,IAAI,mBAAmB,UAAU,qBAAqB,KAAK;AACxF,UAAM,QAAQ,oBAAoB,GAAG;AACrC,iCAA6B,OAAO,oBAAoB,2BAA2B,MAAM,CAAC;AAC1F,UAAM,oBAAoB,IAAI,UAAU,QAAQ,iCAAiC;AACjF,UAAM,gCAAgC,OAAO,oBAAoB,mBAAmB,KAAK;AACzF,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,WAAW,GAAG,OAAO,sBAAsB;AAAA,MAC/C,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,GAAG;AAAA,MACH,kBAAkB,cAAc,OAAO,gBAAgB;AAAA,MACvD,0BAA0B,cAAc,OAAO,wBAAwB;AAAA,MACvE,iBAAiB,cAAc,OAAO,eAAe;AAAA,MACrD,iBAAiB,cAAc,OAAO,eAAe;AAAA,MACrD,cAAc,MAAM,qBAAqB,OAAO,QAAQ;AAAA,IAC1D,CAAQ;AACR,OAAG,QAAQ,QAAQ;AACnB,UAAM,GAAG,MAAM;AACf,UAAM,qBAAqB;AAAA,MACzB;AAAA,MACA,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,IACV,CAAC;AACD,UAAM,kBAAkB,6BAA6B;AAAA,MACnD,IAAI,SAAS;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,SAAS,GAAG;AAAA,EAC3B;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB,EAAE,IAAI,OAAO,GAAG,CAAC;AACxF,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,MAC/C,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO,wBAAwB,UAAU,MAAM;AAAA,EACjD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,UAAU,MAAM;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,QAAQ,UAAU;AACxB,WAAO;AAAA,MACL,aAAa,UAAU,mCAAmC,0BAA0B;AAAA,MACpF,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO,YAAY;AAAA,MAC7B,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,eAAe,QAAQ,wBAAwB,KAAK,IAAI;AAAA,MACxD,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,OAAO,SAAS;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,QAAQ,mBAAgD,QAAQ,GAAG;AACzE,QAAI,CAAC,MAAO;AACZ,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,QAAQ,yBAAyB,QAAW,MAAM,MAAM;AAC9D,QAAI,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC7B,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,WAAW,MAAM,GAAG,QAAQ,sBAAsB,EAAE,IAAI,MAAM,GAAG,CAAC;AACxE,QAAI,CAAC,SAAU;AACf,aAAS,YAAY,oBAAI,KAAK;AAC9B,UAAM,GAAG,MAAM;AAAA,EACjB;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,QAAQ,oBAA8C,QAAQ;AACpE,QAAI,CAAC,MAAO,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oEAAoE,CAAC;AACvH,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAI,WAAW,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,MAAM,GAAG;AAAA,MACf,CAAC;AAAA,MACD,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,QAAI,UAAU;AACZ,kCAA4B,UAAU,KAAK;AAC3C,eAAS,YAAY;AAAA,IACvB,OAAO;AACL,iBAAW,GAAG,OAAO,sBAAsB,2BAA2B,KAAK,CAAC;AAC5E,SAAG,QAAQ,QAAQ;AAAA,IACrB;AACA,UAAM,GAAG,MAAM;AACf,UAAM,QAAQ,yBAAyB,MAAM,QAAQ,MAAS;AAC9D,QAAI,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC7B,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,kBAAkB,6BAA6B;AAAA,MACnD,IAAI,SAAS;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,SAAS,GAAG;AAAA,EAC3B;AACF;AAEA,MAAM,wBAA+E;AAAA,EACnF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,OAAO,IAAI,mBAAmB,UAAU,qBAAqB,KAAK;AAC1E,UAAM,QAAQ,oBAAoB,GAAG;AACrC,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB;AAAA,MACrE,IAAI,OAAO;AAAA,MACX,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb,GAAG,QAAW,KAAK;AACnB,QAAI,CAAC,SAAU,QAAO,CAAC;AACvB,UAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,MAC/C,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO,EAAE,QAAQ,wBAAwB,UAAU,MAAM,EAAE;AAAA,EAC7D;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,QAAQ,aAAa,IAAI,mBAAmB,UAAU,qBAAqB,KAAK;AACxF,UAAM,QAAQ,oBAAoB,GAAG;AACrC,iCAA6B,OAAO,sBAAsB,MAAM,2BAA2B,MAAM,CAAC;AAClG,UAAM,oBAAoB,IAAI,UAAU,QAAQ,iCAAiC;AACjF,UAAM,gCAAgC,OAAO,sBAAsB,MAAM,mBAAmB,KAAK;AACjG,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB;AAAA,MACrE,IAAI,OAAO;AAAA,MACX,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb,GAAG,QAAW,KAAK;AACnB,QAAI,CAAC,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qBAAqB,CAAC;AAC3E,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,SAAS,SAAS,aAAa;AAAA,MAC/B,SAAS,IAAI,WAAW;AAAA,IAC1B,CAAC;AACD,UAAM,eAAe,MAAM,wBAAwB,IAAI;AAAA,MACrD,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,UAAM,iBAAiB,wBAAwB,UAAU,YAAY;AACrE,UAAM,eAAe,OAAO,aAAa,SACrC,MAAM,qBAAqB,OAAO,QAAQ,IAC1C,SAAS;AACb,WAAO,OAAO,UAAU;AAAA,MACtB,GAAG;AAAA,MACH,kBAAkB,OAAO,qBAAqB,SAAY,cAAc,OAAO,gBAAgB,IAAI,SAAS;AAAA,MAC5G,0BAA0B,OAAO,6BAA6B,SAAY,cAAc,OAAO,wBAAwB,IAAI,SAAS;AAAA,MACpI,iBAAiB,OAAO,oBAAoB,SAAY,cAAc,OAAO,eAAe,IAAI,SAAS;AAAA,MACzG,iBAAiB,OAAO,oBAAoB,SAAY,cAAc,OAAO,eAAe,IAAI,SAAS;AAAA,MACzG;AAAA,IACF,CAAC;AACD,UAAM,GAAG,MAAM;AACf,UAAM,qBAAqB;AAAA,MACzB;AAAA,MACA,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,IACV,CAAC;AACD,UAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,MACpD,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,UAAM,gBAAgB,wBAAwB,UAAU,WAAW;AACnE,UAAM,oCAAoC;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,SAAS;AAAA,MACrB,QAAQ;AAAA,MACR,OAAO;AAAA,IACT,CAAC;AACD,UAAM,kBAAkB,6BAA6B;AAAA,MACnD,IAAI,SAAS;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA,EACA,cAAc,OAAO,OAAO,SAAS,QAAQ;AAC3C,UAAM,EAAE,OAAO,IAAI,mBAAmB,OAAO,qBAAqB,KAAK;AACvE,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,CAAC;AACzG,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,MAC/C,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO,wBAAwB,UAAU,MAAM;AAAA,EACjD;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,MAAM,MAAM;AACxC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,UAAM,QAAQ,UAAU;AACxB,WAAO;AAAA,MACL,aAAa,UAAU,mCAAmC,0BAA0B;AAAA,MACpF,cAAc;AAAA,MACd,YAAY,OAAO,MAAM,QAAQ,MAAM,cAAc,OAAO,yBAAyB;AAAA,MACrF,UAAU,OAAO,YAAY,QAAQ,YAAY;AAAA,MACjD,gBAAgB,OAAO,kBAAkB,QAAQ,kBAAkB;AAAA,MACnE,gBAAgB,SAAS,wBAAwB,MAAM,IAAI;AAAA,MAC3D,eAAe,QAAQ,wBAAwB,KAAK,IAAI;AAAA,MACxD,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAQ,UAAU;AAAA,UAClB,OAAO,SAAS;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,OAAO,mBAAgD,QAAQ;AACrE,UAAM,SAAS,MAAM;AACrB,UAAM,QAAQ,MAAM;AACpB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,WAAW,MAAM,GAAG,QAAQ,sBAAsB,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,CAAC;AAC1F,QAAI,CAAC,SAAU;AACf,gCAA4B,UAAU,MAAM;AAC5C,UAAM,GAAG,MAAM;AACf,UAAM,QAAQ,yBAAyB,OAAO,QAAQ,OAAO,MAAM;AACnE,QAAI,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC7B,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,OAAO;AAAA,QACjB,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,QAAI,OAAO;AACT,YAAM,oCAAoC;AAAA,QACxC;AAAA,QACA;AAAA,QACA,OAAO,EAAE,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,SAAS;AAAA,QAC1E,YAAY,OAAO;AAAA,QACnB,QAAQ;AAAA,QACR,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,MAAM,wBAA+E;AAAA,EACnF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,aAAa,cAAc,UAAU,yBAAyB;AACpE,UAAM,QAAQ,oBAAoB,GAAG;AACrC,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB;AAAA,MACrE,IAAI;AAAA,MACJ,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb,GAAG,QAAW,KAAK;AACnB,QAAI,CAAC,SAAU,QAAO,CAAC;AACvB,UAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,MAC/C,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO,EAAE,QAAQ,wBAAwB,UAAU,MAAM,EAAE;AAAA,EAC7D;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,aAAa,cAAc,UAAU,yBAAyB;AACpE,UAAM,QAAQ,oBAAoB,GAAG;AACrC,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB;AAAA,MACrE,IAAI;AAAA,MACJ,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb,GAAG,QAAW,KAAK;AACnB,QAAI,CAAC,SAAU,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qBAAqB,CAAC;AAC3E,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,SAAS,SAAS,aAAa;AAAA,MAC/B,SAAS,IAAI,WAAW;AAAA,IAC1B,CAAC;AACD,aAAS,YAAY,oBAAI,KAAK;AAC9B,UAAM,GAAG,MAAM;AACf,UAAM,kBAAkB,6BAA6B;AAAA,MACnD,IAAI,SAAS;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,MAAM,MAAM;AACxC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,WAAO;AAAA,MACL,aAAa,UAAU,mCAAmC,0BAA0B;AAAA,MACpF,cAAc;AAAA,MACd,YAAY,QAAQ,MAAM,cAAc,OAAO,yBAAyB;AAAA,MACxE,UAAU,QAAQ,YAAY;AAAA,MAC9B,gBAAgB,QAAQ,kBAAkB;AAAA,MAC1C,gBAAgB,SAAS,wBAAwB,MAAM,IAAI;AAAA,MAC3D,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAQ,UAAU;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,SAAS,mBAAgD,QAAQ,GAAG;AAC1E,QAAI,CAAC,OAAQ;AACb,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAI,WAAW,MAAM,GAAG,QAAQ,sBAAsB,EAAE,IAAI,OAAO,GAAG,CAAC;AACvE,QAAI,UAAU;AACZ,kCAA4B,UAAU,MAAM;AAAA,IAC9C,OAAO;AACL,iBAAW,GAAG,OAAO,sBAAsB,2BAA2B,MAAM,CAAC;AAC7E,SAAG,QAAQ,QAAQ;AAAA,IACrB;AACA,UAAM,GAAG,MAAM;AACf,UAAM,QAAQ,yBAAyB,OAAO,QAAQ,MAAS;AAC/D,QAAI,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC7B,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,OAAO;AAAA,QACjB,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,gBAAgB,qBAAqB;AACrC,gBAAgB,qBAAqB;AACrC,gBAAgB,qBAAqB;AAE9B,SAAS,wBAAwB,QAA8B;AACpE,SAAO,wBAAwB,MAAM;AACvC;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { DataEngine } from '@open-mercato/shared/lib/data/engine'\nimport type { CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { registerCommand } from '@open-mercato/shared/lib/commands'\nimport { buildCustomFieldResetMap, loadCustomFieldSnapshot } from '@open-mercato/shared/lib/commands/customFieldSnapshots'\nimport { setCustomFieldsIfAny } from '@open-mercato/shared/lib/commands/helpers'\nimport { resolveRedoSnapshot } from '@open-mercato/shared/lib/commands/redo'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock, enforceRecordGoneIsConflict } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CheckoutLink, CheckoutLinkTemplate } from '../data/entities'\nimport { createTemplateSchema, updateTemplateSchema } from '../data/validators'\nimport { CHECKOUT_ENTITY_IDS } from '../lib/constants'\nimport {\n  ensureGatewayProviderConfigured,\n  type PaymentGatewayDescriptorService,\n} from '../lib/gatewayProviderAvailability'\nimport { emitCheckoutEvent } from '../events'\nimport {\n  deriveConfiguredCurrencies,\n  hashCheckoutPassword,\n  parseCheckoutInput,\n  serializeTemplateOrLink,\n  toMoneyString,\n  validateDescriptorCurrencies,\n} from '../lib/utils'\nimport {\n  buildSelectiveLinkedCustomFieldUpdates,\n  buildSelectiveLinkedLinkSnapshot,\n  captureTemplateSnapshot,\n  createTemplateFromSnapshot,\n  extractUndoPayload,\n  captureLinkSnapshot,\n  readCommandId,\n  resolveCommandScope,\n  restoreLinkFromSnapshot,\n  restoreTemplateFromSnapshot,\n  toCheckoutAuditSnapshot,\n  type CheckoutTemplateSnapshot,\n} from './shared'\n\ntype CheckoutTemplateUndoPayload = {\n  before?: CheckoutTemplateSnapshot | null\n  after?: CheckoutTemplateSnapshot | null\n}\n\nasync function syncLinkedLinksWithTemplateSnapshot(params: {\n  em: EntityManager\n  dataEngine: DataEngine\n  scope: { organizationId: string; tenantId: string }\n  templateId: string\n  before: CheckoutTemplateSnapshot\n  after: CheckoutTemplateSnapshot\n}) {\n  const { em, dataEngine, scope, templateId, before, after } = params\n  const linkedLinks = await findWithDecryption(\n    em,\n    CheckoutLink,\n    {\n      templateId,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n      isLocked: false,\n    },\n    undefined,\n    scope,\n  )\n\n  let changedLinks = false\n\n  for (const link of linkedLinks) {\n    const currentLinkSnapshot = captureLinkSnapshot(link)\n    const nextLinkSnapshot = buildSelectiveLinkedLinkSnapshot(currentLinkSnapshot, before, after)\n    if (nextLinkSnapshot.changed) {\n      restoreLinkFromSnapshot(link, nextLinkSnapshot.snapshot)\n      changedLinks = true\n    }\n\n    const currentCustom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.link,\n      recordId: link.id,\n      tenantId: link.tenantId,\n      organizationId: link.organizationId,\n    })\n    const customFieldUpdates = buildSelectiveLinkedCustomFieldUpdates(currentCustom, before.custom, after.custom)\n    if (Object.keys(customFieldUpdates).length > 0) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.link,\n        recordId: link.id,\n        tenantId: link.tenantId,\n        organizationId: link.organizationId,\n        values: customFieldUpdates,\n      })\n    }\n  }\n\n  if (changedLinks) {\n    await em.flush()\n  }\n}\n\nconst createTemplateCommand: CommandHandler<Record<string, unknown>, { id: string }> = {\n  id: 'checkout.template.create',\n  async execute(rawInput, ctx) {\n    const { parsed, customFields } = parseCheckoutInput(rawInput, createTemplateSchema.parse)\n    const scope = resolveCommandScope(ctx)\n    validateDescriptorCurrencies(parsed.gatewayProviderKey, deriveConfiguredCurrencies(parsed))\n    const descriptorService = ctx.container.resolve('paymentGatewayDescriptorService') as PaymentGatewayDescriptorService\n    await ensureGatewayProviderConfigured(parsed.gatewayProviderKey, descriptorService, scope)\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    const template = em.create(CheckoutLinkTemplate, {\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      ...parsed,\n      fixedPriceAmount: toMoneyString(parsed.fixedPriceAmount),\n      fixedPriceOriginalAmount: toMoneyString(parsed.fixedPriceOriginalAmount),\n      customAmountMin: toMoneyString(parsed.customAmountMin),\n      customAmountMax: toMoneyString(parsed.customAmountMax),\n      passwordHash: await hashCheckoutPassword(parsed.password),\n    } as any)\n    em.persist(template)\n    await em.flush()\n    await setCustomFieldsIfAny({\n      dataEngine,\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      values: customFields,\n    })\n    await emitCheckoutEvent('checkout.template.created', {\n      id: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    }).catch(() => undefined)\n    return { id: template.id }\n  },\n  captureAfter: async (_input, result, ctx) => {\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, { id: result.id })\n    if (!template) return null\n    const custom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    return captureTemplateSnapshot(template, custom)\n  },\n  buildLog: async ({ result, snapshots }) => {\n    const { translate } = await resolveTranslations()\n    const after = snapshots.after as CheckoutTemplateSnapshot | null | undefined\n    return {\n      actionLabel: translate('checkout.audit.templates.create', 'Create pay-link template'),\n      resourceKind: 'checkout.template',\n      resourceId: result.id,\n      tenantId: after?.tenantId ?? null,\n      organizationId: after?.organizationId ?? null,\n      snapshotAfter: after ? toCheckoutAuditSnapshot(after) : null,\n      payload: {\n        undo: {\n          after: after ?? null,\n        } satisfies CheckoutTemplateUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const after = extractUndoPayload<CheckoutTemplateUndoPayload>(logEntry)?.after\n    if (!after) return\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    const reset = buildCustomFieldResetMap(undefined, after.custom)\n    if (Object.keys(reset).length) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.template,\n        recordId: after.id,\n        tenantId: after.tenantId,\n        organizationId: after.organizationId,\n        values: reset,\n        notify: false,\n      })\n    }\n    const template = await em.findOne(CheckoutLinkTemplate, { id: after.id })\n    if (!template) return\n    template.deletedAt = new Date()\n    await em.flush()\n  },\n  redo: async ({ logEntry, ctx }) => {\n    const after = resolveRedoSnapshot<CheckoutTemplateSnapshot>(logEntry)\n    if (!after) throw new CrudHttpError(400, { error: '[internal] redo snapshot unavailable for checkout template create' })\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    let template = await findOneWithDecryption(\n      em,\n      CheckoutLinkTemplate,\n      { id: after.id },\n      {},\n      { tenantId: after.tenantId, organizationId: after.organizationId },\n    )\n    if (template) {\n      restoreTemplateFromSnapshot(template, after)\n      template.deletedAt = null\n    } else {\n      template = em.create(CheckoutLinkTemplate, createTemplateFromSnapshot(after))\n      em.persist(template)\n    }\n    await em.flush()\n    const reset = buildCustomFieldResetMap(after.custom, undefined)\n    if (Object.keys(reset).length) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.template,\n        recordId: after.id,\n        tenantId: after.tenantId,\n        organizationId: after.organizationId,\n        values: reset,\n        notify: false,\n      })\n    }\n    await emitCheckoutEvent('checkout.template.created', {\n      id: template.id,\n      tenantId: after.tenantId,\n      organizationId: after.organizationId,\n    }).catch(() => undefined)\n    return { id: template.id }\n  },\n}\n\nconst updateTemplateCommand: CommandHandler<Record<string, unknown>, { ok: true }> = {\n  id: 'checkout.template.update',\n  async prepare(rawInput, ctx) {\n    const { parsed } = parseCheckoutInput(rawInput, updateTemplateSchema.parse)\n    const scope = resolveCommandScope(ctx)\n    const em = ctx.container.resolve('em') as EntityManager\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, {\n      id: parsed.id,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n    }, undefined, scope)\n    if (!template) return {}\n    const custom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    return { before: captureTemplateSnapshot(template, custom) }\n  },\n  async execute(rawInput, ctx) {\n    const { parsed, customFields } = parseCheckoutInput(rawInput, updateTemplateSchema.parse)\n    const scope = resolveCommandScope(ctx)\n    validateDescriptorCurrencies(parsed.gatewayProviderKey ?? null, deriveConfiguredCurrencies(parsed))\n    const descriptorService = ctx.container.resolve('paymentGatewayDescriptorService') as PaymentGatewayDescriptorService\n    await ensureGatewayProviderConfigured(parsed.gatewayProviderKey ?? null, descriptorService, scope)\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, {\n      id: parsed.id,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n    }, undefined, scope)\n    if (!template) {\n      // The template was deleted in another tab. When the client opted into\n      // optimistic locking, surface the unified conflict bar instead of a bare\n      // 404 (#2529); otherwise the plain 404 still fires for API consumers.\n      enforceRecordGoneIsConflict({\n        resourceKind: 'checkout.template',\n        resourceId: parsed.id,\n        request: ctx.request ?? null,\n      })\n      throw new CrudHttpError(404, { error: 'Template not found' })\n    }\n    enforceCommandOptimisticLock({\n      resourceKind: 'checkout.template',\n      resourceId: template.id,\n      current: template.updatedAt ?? null,\n      request: ctx.request ?? null,\n    })\n    const beforeCustom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    const beforeSnapshot = captureTemplateSnapshot(template, beforeCustom)\n    const passwordHash = parsed.password !== undefined\n      ? await hashCheckoutPassword(parsed.password)\n      : template.passwordHash\n    Object.assign(template, {\n      ...parsed,\n      fixedPriceAmount: parsed.fixedPriceAmount !== undefined ? toMoneyString(parsed.fixedPriceAmount) : template.fixedPriceAmount,\n      fixedPriceOriginalAmount: parsed.fixedPriceOriginalAmount !== undefined ? toMoneyString(parsed.fixedPriceOriginalAmount) : template.fixedPriceOriginalAmount,\n      customAmountMin: parsed.customAmountMin !== undefined ? toMoneyString(parsed.customAmountMin) : template.customAmountMin,\n      customAmountMax: parsed.customAmountMax !== undefined ? toMoneyString(parsed.customAmountMax) : template.customAmountMax,\n      passwordHash,\n    })\n    await em.flush()\n    await setCustomFieldsIfAny({\n      dataEngine,\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n      values: customFields,\n    })\n    const afterCustom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    const afterSnapshot = captureTemplateSnapshot(template, afterCustom)\n    await syncLinkedLinksWithTemplateSnapshot({\n      em,\n      dataEngine,\n      scope,\n      templateId: template.id,\n      before: beforeSnapshot,\n      after: afterSnapshot,\n    })\n    await emitCheckoutEvent('checkout.template.updated', {\n      id: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    }).catch(() => undefined)\n    return { ok: true }\n  },\n  captureAfter: async (input, _result, ctx) => {\n    const { parsed } = parseCheckoutInput(input, updateTemplateSchema.parse)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, { id: parsed.id, deletedAt: null })\n    if (!template) return null\n    const custom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    return captureTemplateSnapshot(template, custom)\n  },\n  buildLog: async ({ snapshots, input }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as CheckoutTemplateSnapshot | null | undefined\n    const after = snapshots.after as CheckoutTemplateSnapshot | null | undefined\n    return {\n      actionLabel: translate('checkout.audit.templates.update', 'Update pay-link template'),\n      resourceKind: 'checkout.template',\n      resourceId: after?.id ?? before?.id ?? readCommandId(input, 'Template id is required'),\n      tenantId: after?.tenantId ?? before?.tenantId ?? null,\n      organizationId: after?.organizationId ?? before?.organizationId ?? null,\n      snapshotBefore: before ? toCheckoutAuditSnapshot(before) : null,\n      snapshotAfter: after ? toCheckoutAuditSnapshot(after) : null,\n      payload: {\n        undo: {\n          before: before ?? null,\n          after: after ?? null,\n        } satisfies CheckoutTemplateUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const undo = extractUndoPayload<CheckoutTemplateUndoPayload>(logEntry)\n    const before = undo?.before\n    const after = undo?.after\n    if (!before) return\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    const template = await em.findOne(CheckoutLinkTemplate, { id: before.id, deletedAt: null })\n    if (!template) return\n    restoreTemplateFromSnapshot(template, before)\n    await em.flush()\n    const reset = buildCustomFieldResetMap(before.custom, after?.custom)\n    if (Object.keys(reset).length) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.template,\n        recordId: before.id,\n        tenantId: before.tenantId,\n        organizationId: before.organizationId,\n        values: reset,\n        notify: false,\n      })\n    }\n    if (after) {\n      await syncLinkedLinksWithTemplateSnapshot({\n        em,\n        dataEngine,\n        scope: { organizationId: before.organizationId, tenantId: before.tenantId },\n        templateId: before.id,\n        before: after,\n        after: before,\n      })\n    }\n  },\n}\n\nconst deleteTemplateCommand: CommandHandler<Record<string, unknown>, { ok: true }> = {\n  id: 'checkout.template.delete',\n  async prepare(rawInput, ctx) {\n    const templateId = readCommandId(rawInput, 'Template id is required')\n    const scope = resolveCommandScope(ctx)\n    const em = ctx.container.resolve('em') as EntityManager\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, {\n      id: templateId,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n    }, undefined, scope)\n    if (!template) return {}\n    const custom = await loadCustomFieldSnapshot(em, {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      recordId: template.id,\n      tenantId: template.tenantId,\n      organizationId: template.organizationId,\n    })\n    return { before: captureTemplateSnapshot(template, custom) }\n  },\n  async execute(rawInput, ctx) {\n    const templateId = readCommandId(rawInput, 'Template id is required')\n    const scope = resolveCommandScope(ctx)\n    const em = ctx.container.resolve('em') as EntityManager\n    const template = await findOneWithDecryption(em, CheckoutLinkTemplate, {\n      id: templateId,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n      deletedAt: null,\n    }, undefined, scope)\n    if (!template) {\n      // Already deleted elsewhere \u2014 convert to a 409 conflict when the client\n      // sent the optimistic-lock header so the stale edit surfaces cleanly (#2529).\n      enforceRecordGoneIsConflict({\n        resourceKind: 'checkout.template',\n        resourceId: templateId,\n        request: ctx.request ?? null,\n      })\n      throw new CrudHttpError(404, { error: 'Template not found' })\n    }\n    enforceCommandOptimisticLock({\n      resourceKind: 'checkout.template',\n      resourceId: template.id,\n      current: template.updatedAt ?? null,\n      request: ctx.request ?? null,\n    })\n    template.deletedAt = new Date()\n    await em.flush()\n    await emitCheckoutEvent('checkout.template.deleted', {\n      id: template.id,\n      tenantId: scope.tenantId,\n      organizationId: scope.organizationId,\n    }).catch(() => undefined)\n    return { ok: true }\n  },\n  buildLog: async ({ snapshots, input }) => {\n    const { translate } = await resolveTranslations()\n    const before = snapshots.before as CheckoutTemplateSnapshot | null | undefined\n    return {\n      actionLabel: translate('checkout.audit.templates.delete', 'Delete pay-link template'),\n      resourceKind: 'checkout.template',\n      resourceId: before?.id ?? readCommandId(input, 'Template id is required'),\n      tenantId: before?.tenantId ?? null,\n      organizationId: before?.organizationId ?? null,\n      snapshotBefore: before ? toCheckoutAuditSnapshot(before) : null,\n      payload: {\n        undo: {\n          before: before ?? null,\n        } satisfies CheckoutTemplateUndoPayload,\n      },\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const before = extractUndoPayload<CheckoutTemplateUndoPayload>(logEntry)?.before\n    if (!before) return\n    const em = ctx.container.resolve('em') as EntityManager\n    const dataEngine = ctx.container.resolve('dataEngine') as DataEngine\n    let template = await em.findOne(CheckoutLinkTemplate, { id: before.id })\n    if (template) {\n      restoreTemplateFromSnapshot(template, before)\n    } else {\n      template = em.create(CheckoutLinkTemplate, createTemplateFromSnapshot(before))\n      em.persist(template)\n    }\n    await em.flush()\n    const reset = buildCustomFieldResetMap(before.custom, undefined)\n    if (Object.keys(reset).length) {\n      await setCustomFieldsIfAny({\n        dataEngine,\n        entityId: CHECKOUT_ENTITY_IDS.template,\n        recordId: before.id,\n        tenantId: before.tenantId,\n        organizationId: before.organizationId,\n        values: reset,\n        notify: false,\n      })\n    }\n  },\n}\n\nregisterCommand(createTemplateCommand)\nregisterCommand(updateTemplateCommand)\nregisterCommand(deleteTemplateCommand)\n\nexport function serializeTemplateRecord(record: CheckoutLinkTemplate) {\n  return serializeTemplateOrLink(record)\n}\n"],
+  "mappings": "AAGA,SAAS,uBAAuB;AAChC,SAAS,0BAA0B,+BAA+B;AAClE,SAAS,4BAA4B;AACrC,SAAS,2BAA2B;AACpC,SAAS,qBAAqB;AAC9B,SAAS,8BAA8B,mCAAmC;AAC1E,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,2BAA2B;AACpC,SAAS,cAAc,4BAA4B;AACnD,SAAS,sBAAsB,4BAA4B;AAC3D,SAAS,2BAA2B;AACpC;AAAA,EACE;AAAA,OAEK;AACP,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAOP,eAAe,oCAAoC,QAOhD;AACD,QAAM,EAAE,IAAI,YAAY,OAAO,YAAY,QAAQ,MAAM,IAAI;AAC7D,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,MACX,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,MAAI,eAAe;AAEnB,aAAW,QAAQ,aAAa;AAC9B,UAAM,sBAAsB,oBAAoB,IAAI;AACpD,UAAM,mBAAmB,iCAAiC,qBAAqB,QAAQ,KAAK;AAC5F,QAAI,iBAAiB,SAAS;AAC5B,8BAAwB,MAAM,iBAAiB,QAAQ;AACvD,qBAAe;AAAA,IACjB;AAEA,UAAM,gBAAgB,MAAM,wBAAwB,IAAI;AAAA,MACtD,UAAU,oBAAoB;AAAA,MAC9B,UAAU,KAAK;AAAA,MACf,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,UAAM,qBAAqB,uCAAuC,eAAe,OAAO,QAAQ,MAAM,MAAM;AAC5G,QAAI,OAAO,KAAK,kBAAkB,EAAE,SAAS,GAAG;AAC9C,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,KAAK;AAAA,QACf,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,QACrB,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,cAAc;AAChB,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,MAAM,wBAAiF;AAAA,EACrF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,QAAQ,aAAa,IAAI,mBAAmB,UAAU,qBAAqB,KAAK;AACxF,UAAM,QAAQ,oBAAoB,GAAG;AACrC,iCAA6B,OAAO,oBAAoB,2BAA2B,MAAM,CAAC;AAC1F,UAAM,oBAAoB,IAAI,UAAU,QAAQ,iCAAiC;AACjF,UAAM,gCAAgC,OAAO,oBAAoB,mBAAmB,KAAK;AACzF,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,WAAW,GAAG,OAAO,sBAAsB;AAAA,MAC/C,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,GAAG;AAAA,MACH,kBAAkB,cAAc,OAAO,gBAAgB;AAAA,MACvD,0BAA0B,cAAc,OAAO,wBAAwB;AAAA,MACvE,iBAAiB,cAAc,OAAO,eAAe;AAAA,MACrD,iBAAiB,cAAc,OAAO,eAAe;AAAA,MACrD,cAAc,MAAM,qBAAqB,OAAO,QAAQ;AAAA,IAC1D,CAAQ;AACR,OAAG,QAAQ,QAAQ;AACnB,UAAM,GAAG,MAAM;AACf,UAAM,qBAAqB;AAAA,MACzB;AAAA,MACA,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,IACV,CAAC;AACD,UAAM,kBAAkB,6BAA6B;AAAA,MACnD,IAAI,SAAS;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,SAAS,GAAG;AAAA,EAC3B;AAAA,EACA,cAAc,OAAO,QAAQ,QAAQ,QAAQ;AAC3C,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB,EAAE,IAAI,OAAO,GAAG,CAAC;AACxF,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,MAC/C,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO,wBAAwB,UAAU,MAAM;AAAA,EACjD;AAAA,EACA,UAAU,OAAO,EAAE,QAAQ,UAAU,MAAM;AACzC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,QAAQ,UAAU;AACxB,WAAO;AAAA,MACL,aAAa,UAAU,mCAAmC,0BAA0B;AAAA,MACpF,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO,YAAY;AAAA,MAC7B,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,eAAe,QAAQ,wBAAwB,KAAK,IAAI;AAAA,MACxD,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,OAAO,SAAS;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,QAAQ,mBAAgD,QAAQ,GAAG;AACzE,QAAI,CAAC,MAAO;AACZ,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,QAAQ,yBAAyB,QAAW,MAAM,MAAM;AAC9D,QAAI,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC7B,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,WAAW,MAAM,GAAG,QAAQ,sBAAsB,EAAE,IAAI,MAAM,GAAG,CAAC;AACxE,QAAI,CAAC,SAAU;AACf,aAAS,YAAY,oBAAI,KAAK;AAC9B,UAAM,GAAG,MAAM;AAAA,EACjB;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,QAAQ,oBAA8C,QAAQ;AACpE,QAAI,CAAC,MAAO,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oEAAoE,CAAC;AACvH,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAI,WAAW,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA,EAAE,IAAI,MAAM,GAAG;AAAA,MACf,CAAC;AAAA,MACD,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,IACnE;AACA,QAAI,UAAU;AACZ,kCAA4B,UAAU,KAAK;AAC3C,eAAS,YAAY;AAAA,IACvB,OAAO;AACL,iBAAW,GAAG,OAAO,sBAAsB,2BAA2B,KAAK,CAAC;AAC5E,SAAG,QAAQ,QAAQ;AAAA,IACrB;AACA,UAAM,GAAG,MAAM;AACf,UAAM,QAAQ,yBAAyB,MAAM,QAAQ,MAAS;AAC9D,QAAI,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC7B,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,UAAM,kBAAkB,6BAA6B;AAAA,MACnD,IAAI,SAAS;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,SAAS,GAAG;AAAA,EAC3B;AACF;AAEA,MAAM,wBAA+E;AAAA,EACnF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,OAAO,IAAI,mBAAmB,UAAU,qBAAqB,KAAK;AAC1E,UAAM,QAAQ,oBAAoB,GAAG;AACrC,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB;AAAA,MACrE,IAAI,OAAO;AAAA,MACX,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb,GAAG,QAAW,KAAK;AACnB,QAAI,CAAC,SAAU,QAAO,CAAC;AACvB,UAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,MAC/C,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO,EAAE,QAAQ,wBAAwB,UAAU,MAAM,EAAE;AAAA,EAC7D;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,EAAE,QAAQ,aAAa,IAAI,mBAAmB,UAAU,qBAAqB,KAAK;AACxF,UAAM,QAAQ,oBAAoB,GAAG;AACrC,iCAA6B,OAAO,sBAAsB,MAAM,2BAA2B,MAAM,CAAC;AAClG,UAAM,oBAAoB,IAAI,UAAU,QAAQ,iCAAiC;AACjF,UAAM,gCAAgC,OAAO,sBAAsB,MAAM,mBAAmB,KAAK;AACjG,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB;AAAA,MACrE,IAAI,OAAO;AAAA,MACX,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb,GAAG,QAAW,KAAK;AACnB,QAAI,CAAC,UAAU;AAIb,kCAA4B;AAAA,QAC1B,cAAc;AAAA,QACd,YAAY,OAAO;AAAA,QACnB,SAAS,IAAI,WAAW;AAAA,MAC1B,CAAC;AACD,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qBAAqB,CAAC;AAAA,IAC9D;AACA,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,SAAS,SAAS,aAAa;AAAA,MAC/B,SAAS,IAAI,WAAW;AAAA,IAC1B,CAAC;AACD,UAAM,eAAe,MAAM,wBAAwB,IAAI;AAAA,MACrD,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,UAAM,iBAAiB,wBAAwB,UAAU,YAAY;AACrE,UAAM,eAAe,OAAO,aAAa,SACrC,MAAM,qBAAqB,OAAO,QAAQ,IAC1C,SAAS;AACb,WAAO,OAAO,UAAU;AAAA,MACtB,GAAG;AAAA,MACH,kBAAkB,OAAO,qBAAqB,SAAY,cAAc,OAAO,gBAAgB,IAAI,SAAS;AAAA,MAC5G,0BAA0B,OAAO,6BAA6B,SAAY,cAAc,OAAO,wBAAwB,IAAI,SAAS;AAAA,MACpI,iBAAiB,OAAO,oBAAoB,SAAY,cAAc,OAAO,eAAe,IAAI,SAAS;AAAA,MACzG,iBAAiB,OAAO,oBAAoB,SAAY,cAAc,OAAO,eAAe,IAAI,SAAS;AAAA,MACzG;AAAA,IACF,CAAC;AACD,UAAM,GAAG,MAAM;AACf,UAAM,qBAAqB;AAAA,MACzB;AAAA,MACA,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,MACtB,QAAQ;AAAA,IACV,CAAC;AACD,UAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,MACpD,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,UAAM,gBAAgB,wBAAwB,UAAU,WAAW;AACnE,UAAM,oCAAoC;AAAA,MACxC;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,SAAS;AAAA,MACrB,QAAQ;AAAA,MACR,OAAO;AAAA,IACT,CAAC;AACD,UAAM,kBAAkB,6BAA6B;AAAA,MACnD,IAAI,SAAS;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA,EACA,cAAc,OAAO,OAAO,SAAS,QAAQ;AAC3C,UAAM,EAAE,OAAO,IAAI,mBAAmB,OAAO,qBAAqB,KAAK;AACvE,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,CAAC;AACzG,QAAI,CAAC,SAAU,QAAO;AACtB,UAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,MAC/C,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO,wBAAwB,UAAU,MAAM;AAAA,EACjD;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,MAAM,MAAM;AACxC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,UAAM,QAAQ,UAAU;AACxB,WAAO;AAAA,MACL,aAAa,UAAU,mCAAmC,0BAA0B;AAAA,MACpF,cAAc;AAAA,MACd,YAAY,OAAO,MAAM,QAAQ,MAAM,cAAc,OAAO,yBAAyB;AAAA,MACrF,UAAU,OAAO,YAAY,QAAQ,YAAY;AAAA,MACjD,gBAAgB,OAAO,kBAAkB,QAAQ,kBAAkB;AAAA,MACnE,gBAAgB,SAAS,wBAAwB,MAAM,IAAI;AAAA,MAC3D,eAAe,QAAQ,wBAAwB,KAAK,IAAI;AAAA,MACxD,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAQ,UAAU;AAAA,UAClB,OAAO,SAAS;AAAA,QAClB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,OAAO,mBAAgD,QAAQ;AACrE,UAAM,SAAS,MAAM;AACrB,UAAM,QAAQ,MAAM;AACpB,QAAI,CAAC,OAAQ;AACb,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,UAAM,WAAW,MAAM,GAAG,QAAQ,sBAAsB,EAAE,IAAI,OAAO,IAAI,WAAW,KAAK,CAAC;AAC1F,QAAI,CAAC,SAAU;AACf,gCAA4B,UAAU,MAAM;AAC5C,UAAM,GAAG,MAAM;AACf,UAAM,QAAQ,yBAAyB,OAAO,QAAQ,OAAO,MAAM;AACnE,QAAI,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC7B,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,OAAO;AAAA,QACjB,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AACA,QAAI,OAAO;AACT,YAAM,oCAAoC;AAAA,QACxC;AAAA,QACA;AAAA,QACA,OAAO,EAAE,gBAAgB,OAAO,gBAAgB,UAAU,OAAO,SAAS;AAAA,QAC1E,YAAY,OAAO;AAAA,QACnB,QAAQ;AAAA,QACR,OAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,MAAM,wBAA+E;AAAA,EACnF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,aAAa,cAAc,UAAU,yBAAyB;AACpE,UAAM,QAAQ,oBAAoB,GAAG;AACrC,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB;AAAA,MACrE,IAAI;AAAA,MACJ,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb,GAAG,QAAW,KAAK;AACnB,QAAI,CAAC,SAAU,QAAO,CAAC;AACvB,UAAM,SAAS,MAAM,wBAAwB,IAAI;AAAA,MAC/C,UAAU,oBAAoB;AAAA,MAC9B,UAAU,SAAS;AAAA,MACnB,UAAU,SAAS;AAAA,MACnB,gBAAgB,SAAS;AAAA,IAC3B,CAAC;AACD,WAAO,EAAE,QAAQ,wBAAwB,UAAU,MAAM,EAAE;AAAA,EAC7D;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,aAAa,cAAc,UAAU,yBAAyB;AACpE,UAAM,QAAQ,oBAAoB,GAAG;AACrC,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,WAAW,MAAM,sBAAsB,IAAI,sBAAsB;AAAA,MACrE,IAAI;AAAA,MACJ,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb,GAAG,QAAW,KAAK;AACnB,QAAI,CAAC,UAAU;AAGb,kCAA4B;AAAA,QAC1B,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,SAAS,IAAI,WAAW;AAAA,MAC1B,CAAC;AACD,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,qBAAqB,CAAC;AAAA,IAC9D;AACA,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,SAAS,SAAS,aAAa;AAAA,MAC/B,SAAS,IAAI,WAAW;AAAA,IAC1B,CAAC;AACD,aAAS,YAAY,oBAAI,KAAK;AAC9B,UAAM,GAAG,MAAM;AACf,UAAM,kBAAkB,6BAA6B;AAAA,MACnD,IAAI,SAAS;AAAA,MACb,UAAU,MAAM;AAAA,MAChB,gBAAgB,MAAM;AAAA,IACxB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA,EACA,UAAU,OAAO,EAAE,WAAW,MAAM,MAAM;AACxC,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,SAAS,UAAU;AACzB,WAAO;AAAA,MACL,aAAa,UAAU,mCAAmC,0BAA0B;AAAA,MACpF,cAAc;AAAA,MACd,YAAY,QAAQ,MAAM,cAAc,OAAO,yBAAyB;AAAA,MACxE,UAAU,QAAQ,YAAY;AAAA,MAC9B,gBAAgB,QAAQ,kBAAkB;AAAA,MAC1C,gBAAgB,SAAS,wBAAwB,MAAM,IAAI;AAAA,MAC3D,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAQ,UAAU;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,SAAS,mBAAgD,QAAQ,GAAG;AAC1E,QAAI,CAAC,OAAQ;AACb,UAAM,KAAK,IAAI,UAAU,QAAQ,IAAI;AACrC,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AACrD,QAAI,WAAW,MAAM,GAAG,QAAQ,sBAAsB,EAAE,IAAI,OAAO,GAAG,CAAC;AACvE,QAAI,UAAU;AACZ,kCAA4B,UAAU,MAAM;AAAA,IAC9C,OAAO;AACL,iBAAW,GAAG,OAAO,sBAAsB,2BAA2B,MAAM,CAAC;AAC7E,SAAG,QAAQ,QAAQ;AAAA,IACrB;AACA,UAAM,GAAG,MAAM;AACf,UAAM,QAAQ,yBAAyB,OAAO,QAAQ,MAAS;AAC/D,QAAI,OAAO,KAAK,KAAK,EAAE,QAAQ;AAC7B,YAAM,qBAAqB;AAAA,QACzB;AAAA,QACA,UAAU,oBAAoB;AAAA,QAC9B,UAAU,OAAO;AAAA,QACjB,UAAU,OAAO;AAAA,QACjB,gBAAgB,OAAO;AAAA,QACvB,QAAQ;AAAA,QACR,QAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAEA,gBAAgB,qBAAqB;AACrC,gBAAgB,qBAAqB;AACrC,gBAAgB,qBAAqB;AAE9B,SAAS,wBAAwB,QAA8B;AACpE,SAAO,wBAAwB,MAAM;AACvC;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/checkout",
-  "version": "0.6.5-develop.5116.1.f0af9e5080",
+  "version": "0.6.5-develop.5155.1.148d10a46d",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -61,20 +61,20 @@
     }
   },
   "dependencies": {
-    "@open-mercato/core": "0.6.5-develop.5116.1.f0af9e5080",
-    "@open-mercato/ui": "0.6.5-develop.5116.1.f0af9e5080",
+    "@open-mercato/core": "0.6.5-develop.5155.1.148d10a46d",
+    "@open-mercato/ui": "0.6.5-develop.5155.1.148d10a46d",
     "bcryptjs": "^3.0.3"
   },
   "peerDependencies": {
     "@mikro-orm/postgresql": "^7.0.14",
-    "@open-mercato/shared": "0.6.5-develop.5116.1.f0af9e5080",
+    "@open-mercato/shared": "0.6.5-develop.5155.1.148d10a46d",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.6.5-develop.5116.1.f0af9e5080",
+    "@open-mercato/shared": "0.6.5-develop.5155.1.148d10a46d",
     "@types/jest": "^30.0.0",
-    "@types/react": "^19.2.16",
+    "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "esbuild": "^0.28.0",
     "glob": "^13.0.6",

package/src/modules/checkout/__integration__/TC-CHKT-041-template-stale-delete-conflict.spec.ts

@@ -0,0 +1,58 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'
+import { readJsonSafe } from '@open-mercato/core/modules/core/__integration__/helpers/generalFixtures'
+import {
+  createFixedTemplateInput,
+  createTemplateFixture,
+  deleteCheckoutEntityIfExists,
+  deleteTemplate,
+  updateTemplate,
+} from './helpers/fixtures'
+
+const OPTIMISTIC_LOCK_HEADER = 'x-om-ext-optimistic-lock-expected-updated-at'
+const STALE_EXPECTED_AT = '2020-01-01T00:00:00.000Z'
+
+function resolveUrl(path: string): string {
+  const base = process.env.BASE_URL?.trim() || null
+  return base ? `${base}${path}` : path
+}
+
+// Regression for #2529 (alinadivante comment 4638514821, "TC A" optimistic-lock gap):
+// editing a checkout template that was deleted in another tab must surface a clean
+// optimistic-lock conflict (409) when the client sent the expected-version header —
+// not a bare "Template not found" 404. Plain API clients that send no header keep the
+// existing 404 (fail-open).
+test.describe('TC-CHKT-041: Checkout template stale-edit after delete', () => {
+  test('PUT with stale optimistic-lock header on a deleted template returns 409 conflict', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let templateId: string | null = null
+
+    try {
+      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: 'draft' }))
+
+      // Simulate "deleted in another tab".
+      const deleteResponse = await deleteTemplate(request, token, templateId)
+      expect(deleteResponse.ok(), 'template delete fixture should succeed').toBeTruthy()
+
+      // Replay a stale edit carrying the optimistic-lock header → expect 409.
+      const conflictResponse = await request.fetch(resolveUrl(`/api/checkout/templates/${encodeURIComponent(templateId)}`), {
+        method: 'PUT',
+        headers: {
+          Authorization: `Bearer ${token}`,
+          'Content-Type': 'application/json',
+          [OPTIMISTIC_LOCK_HEADER]: STALE_EXPECTED_AT,
+        },
+        data: { name: 'QA stale edit' },
+      })
+      expect(conflictResponse.status(), 'stale edit after delete should be a 409 conflict').toBe(409)
+      const conflictBody = await readJsonSafe<{ code?: string }>(conflictResponse)
+      expect(conflictBody?.code, 'conflict body should carry the optimistic-lock code').toBe('optimistic_lock_conflict')
+
+      // Without the header, the same edit keeps the plain 404 (fail-open).
+      const notFoundResponse = await updateTemplate(request, token, templateId, { name: 'QA stale edit no header' })
+      expect(notFoundResponse.status(), 'no-header edit after delete should stay 404').toBe(404)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)
+    }
+  })
+})

package/src/modules/checkout/commands/templates.ts

@@ -6,7 +6,7 @@ import { buildCustomFieldResetMap, loadCustomFieldSnapshot } from '@open-mercato
 import { setCustomFieldsIfAny } from '@open-mercato/shared/lib/commands/helpers'
 import { resolveRedoSnapshot } from '@open-mercato/shared/lib/commands/redo'
 import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'
-import { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'
+import { enforceCommandOptimisticLock, enforceRecordGoneIsConflict } from '@open-mercato/shared/lib/crud/optimistic-lock-command'
 import { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'
 import { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'
 import { CheckoutLink, CheckoutLinkTemplate } from '../data/entities'
@@ -266,7 +266,17 @@ const updateTemplateCommand: CommandHandler<Record<string, unknown>, { ok: true
       tenantId: scope.tenantId,
       deletedAt: null,
     }, undefined, scope)
-    if (!template) throw new CrudHttpError(404, { error: 'Template not found' })
+    if (!template) {
+      // The template was deleted in another tab. When the client opted into
+      // optimistic locking, surface the unified conflict bar instead of a bare
+      // 404 (#2529); otherwise the plain 404 still fires for API consumers.
+      enforceRecordGoneIsConflict({
+        resourceKind: 'checkout.template',
+        resourceId: parsed.id,
+        request: ctx.request ?? null,
+      })
+      throw new CrudHttpError(404, { error: 'Template not found' })
+    }
     enforceCommandOptimisticLock({
       resourceKind: 'checkout.template',
       resourceId: template.id,
@@ -422,7 +432,16 @@ const deleteTemplateCommand: CommandHandler<Record<string, unknown>, { ok: true
       tenantId: scope.tenantId,
       deletedAt: null,
     }, undefined, scope)
-    if (!template) throw new CrudHttpError(404, { error: 'Template not found' })
+    if (!template) {
+      // Already deleted elsewhere — convert to a 409 conflict when the client
+      // sent the optimistic-lock header so the stale edit surfaces cleanly (#2529).
+      enforceRecordGoneIsConflict({
+        resourceKind: 'checkout.template',
+        resourceId: templateId,
+        request: ctx.request ?? null,
+      })
+      throw new CrudHttpError(404, { error: 'Template not found' })
+    }
     enforceCommandOptimisticLock({
       resourceKind: 'checkout.template',
       resourceId: template.id,