@open-mercato/checkout 0.6.5-develop.5169.1.d0671533ca → 0.6.5-develop.5200.1.871eca3402

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:checkout] found 153 entry points
+[build:checkout] found 156 entry points
 [build:checkout] built successfully

package/dist/modules/checkout/__integration__/TC-UNDO-001-no-undo-affordance.spec.js

@@ -0,0 +1,40 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { extractOperation, skipIfUndoTestsDisabled } from "@open-mercato/core/helpers/integration/undoHarness";
+import {
+  createCustomerData,
+  createFixedTemplateInput,
+  createLinkFixture,
+  createTemplateFixture,
+  deleteCheckoutEntityIfExists,
+  submitPayLink
+} from "./helpers/fixtures.js";
+test.describe("TC-UNDO-001 checkout \xA74 \u2014 non-undoable commands expose no undo token", () => {
+  test.beforeAll(() => {
+    skipIfUndoTestsDisabled();
+  });
+  test("public checkout submit creates a transaction with no undo token", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let templateId = null;
+    let linkId = null;
+    try {
+      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: "active", templateId }));
+      linkId = link.id;
+      const submitRes = await submitPayLink(request, link.slug, {
+        customerData: createCustomerData(),
+        acceptedLegalConsents: {},
+        amount: 49.99
+      });
+      expect(submitRes.status(), `submit status ${submitRes.status()}`).toBe(201);
+      expect(
+        extractOperation(submitRes),
+        "a financial checkout submit must expose no undo token (\xA74)"
+      ).toBeNull();
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+});
+//# sourceMappingURL=TC-UNDO-001-no-undo-affordance.spec.js.map

package/dist/modules/checkout/__integration__/TC-UNDO-001-no-undo-affordance.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/__integration__/TC-UNDO-001-no-undo-affordance.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/helpers/integration/api'\nimport { extractOperation, skipIfUndoTestsDisabled } from '@open-mercato/core/helpers/integration/undoHarness'\nimport {\n  createCustomerData,\n  createFixedTemplateInput,\n  createLinkFixture,\n  createTemplateFixture,\n  deleteCheckoutEntityIfExists,\n  submitPayLink,\n} from './helpers/fixtures'\n\n/**\n * TC-UNDO-001 (\u00A74 checkout) \u2014 non-undoable commands expose no undo affordance.\n *\n * Public checkout submissions create a CheckoutTransaction via the `checkout.transaction.*`\n * commands, which are intentionally NOT undoable (financial events). The mutating response\n * must therefore carry no `x-om-operation` undo envelope: `extractOperation(res) === null`.\n */\n\ntest.describe('TC-UNDO-001 checkout \u00A74 \u2014 non-undoable commands expose no undo token', () => {\n  test.beforeAll(() => {\n    skipIfUndoTestsDisabled()\n  })\n\n  test('public checkout submit creates a transaction with no undo token', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let templateId: string | null = null\n    let linkId: string | null = null\n    try {\n      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'active', templateId }))\n      linkId = link.id\n\n      const submitRes = await submitPayLink(request, link.slug, {\n        customerData: createCustomerData(),\n        acceptedLegalConsents: {},\n        amount: 49.99,\n      })\n      expect(submitRes.status(), `submit status ${submitRes.status()}`).toBe(201)\n\n      expect(\n        extractOperation(submitRes),\n        'a financial checkout submit must expose no undo token (\u00A74)',\n      ).toBeNull()\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB,+BAA+B;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAUP,KAAK,SAAS,gFAAwE,MAAM;AAC1F,OAAK,UAAU,MAAM;AACnB,4BAAwB;AAAA,EAC1B,CAAC;AAED,OAAK,mEAAmE,OAAO,EAAE,QAAQ,MAAM;AAC7F,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,aAA4B;AAChC,QAAI,SAAwB;AAC5B,QAAI;AACF,mBAAa,MAAM,sBAAsB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AACtG,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,UAAU,WAAW,CAAC,CAAC;AAC/G,eAAS,KAAK;AAEd,YAAM,YAAY,MAAM,cAAc,SAAS,KAAK,MAAM;AAAA,QACxD,cAAc,mBAAmB;AAAA,QACjC,uBAAuB,CAAC;AAAA,QACxB,QAAQ;AAAA,MACV,CAAC;AACD,aAAO,UAAU,OAAO,GAAG,iBAAiB,UAAU,OAAO,CAAC,EAAE,EAAE,KAAK,GAAG;AAE1E;AAAA,QACE,iBAAiB,SAAS;AAAA,QAC1B;AAAA,MACF,EAAE,SAAS;AAAA,IACb,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAClE,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/checkout/__integration__/TC-UNDO-001-pay-link.spec.js

@@ -0,0 +1,205 @@
+import { expect, test } from "@playwright/test";
+import { apiRequest, getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+import {
+  expectOperation,
+  undoOk,
+  redoOk,
+  expectTokenConsumed,
+  skipIfUndoTestsDisabled
+} from "@open-mercato/core/helpers/integration/undoHarness";
+import {
+  createFixedTemplateInput,
+  createLinkFixture,
+  deleteCheckoutEntityIfExists,
+  deleteLink,
+  updateLink
+} from "./helpers/fixtures.js";
+const LINKS = "/api/checkout/links";
+async function settle() {
+  await new Promise((resolve) => setTimeout(resolve, 50));
+}
+async function getLink(request, token, id) {
+  const res = await apiRequest(request, "GET", `${LINKS}/${encodeURIComponent(id)}`, { token });
+  return { status: res.status(), body: await readJsonSafe(res) };
+}
+test.describe("TC-UNDO-001 checkout.pay-link undo/redo", () => {
+  test.beforeAll(() => {
+    skipIfUndoTestsDisabled();
+  });
+  test("create \u2192 undo soft-deletes (I3) + token consumed (I5)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let linkId = null;
+    try {
+      const createRes = await apiRequest(request, "POST", LINKS, {
+        token,
+        data: createFixedTemplateInput({ status: "draft" })
+      });
+      expect(createRes.status(), `create status ${createRes.status()}`).toBe(201);
+      const createOp = expectOperation(createRes, "checkout.link.create");
+      linkId = createOp.resourceId;
+      expect(linkId, "create returns a resource id").toBeTruthy();
+      expect((await getLink(request, token, linkId)).status, "pay-link exists after create").toBe(200);
+      await undoOk(request, token, createOp.undoToken, "undo create pay-link");
+      expect(
+        (await getLink(request, token, linkId)).status,
+        "pay-link is gone after undoing create (I3 \u2014 soft-deleted, not readable)"
+      ).not.toBe(200);
+      await expectTokenConsumed(request, token, createOp.undoToken, "checkout.link.create double-undo (I5)");
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+    }
+  });
+  test("update \u2192 undo restores scalars (I1) \u2192 redo re-applies (I6)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let linkId = null;
+    try {
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      linkId = link.id;
+      const before = await getLink(request, token, linkId);
+      const beforeName = before.body?.name;
+      expect(beforeName, "pay-link name readable before update").toBeTruthy();
+      await settle();
+      const changedName = `Renamed by undo test ${Date.now()}`;
+      const updateRes = await updateLink(request, token, linkId, { name: changedName });
+      expect(updateRes.status(), `update status ${updateRes.status()}`).toBe(200);
+      const updateOp = expectOperation(updateRes, "checkout.link.update");
+      expect((await getLink(request, token, linkId)).body?.name, "update changed the name").toBe(changedName);
+      await settle();
+      await undoOk(request, token, updateOp.undoToken, "undo update pay-link");
+      const afterUndo = await getLink(request, token, linkId);
+      expect(afterUndo.body?.name, "update\u2192undo restores the prior name (I1)").toBe(beforeName);
+      expect(typeof afterUndo.body?.updatedAt, "pay-link surfaces updatedAt").toBe("string");
+      expect(afterUndo.body?.updatedAt, "undo bumps updatedAt (I1)").not.toBe(before.body?.updatedAt);
+      await redoOk(request, token, updateOp.logId, "redo update pay-link");
+      expect((await getLink(request, token, linkId)).body?.name, "redo re-applies the renamed value (I6)").toBe(changedName);
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+    }
+  });
+  test("delete \u2192 undo re-materializes (I2) \u2192 redo re-deletes (I6)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let linkId = null;
+    try {
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      linkId = link.id;
+      const beforeName = (await getLink(request, token, linkId)).body?.name;
+      await settle();
+      const deleteRes = await deleteLink(request, token, linkId);
+      expect(deleteRes.ok(), `delete status ${deleteRes.status()}`).toBeTruthy();
+      const deleteOp = expectOperation(deleteRes, "checkout.link.delete");
+      expect((await getLink(request, token, linkId)).status, "gone after delete").not.toBe(200);
+      await undoOk(request, token, deleteOp.undoToken, "undo delete pay-link");
+      const afterUndo = await getLink(request, token, linkId);
+      expect(afterUndo.status, "delete\u2192undo re-materializes the row (I2)").toBe(200);
+      expect(afterUndo.body?.name, "re-materialized record keeps its scalars (I2)").toBe(beforeName);
+      await redoOk(request, token, deleteOp.logId, "redo delete pay-link");
+      expect((await getLink(request, token, linkId)).status, "gone again after redo delete (I6)").not.toBe(200);
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+    }
+  });
+  test("create \u2192 undo \u2192 redo restores the SAME record (I6)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let linkId = null;
+    try {
+      const createRes = await apiRequest(request, "POST", LINKS, {
+        token,
+        data: createFixedTemplateInput({ status: "draft" })
+      });
+      const createOp = expectOperation(createRes, "checkout.link.create");
+      linkId = createOp.resourceId;
+      await settle();
+      const undoLogId = await undoOk(request, token, createOp.undoToken, "undo create pay-link");
+      expect((await getLink(request, token, linkId)).status, "gone after undo create").not.toBe(200);
+      await redoOk(request, token, undoLogId, "redo create pay-link");
+      const afterRedo = await getLink(request, token, linkId);
+      expect(afterRedo.status, "same pay-link restored after redo (I6)").toBe(200);
+      expect(afterRedo.body?.id, "redo preserves the original id (I6)").toBe(linkId);
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+    }
+  });
+  test("custom fields revert on undo and re-apply on redo (I4)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let linkId = null;
+    try {
+      const beforeValue = `before ${Date.now()}`;
+      const link = await createLinkFixture(
+        request,
+        token,
+        createFixedTemplateInput({
+          status: "draft",
+          customFieldsetCode: "service_package",
+          customFields: { delivery_timeline: beforeValue }
+        })
+      );
+      linkId = link.id;
+      expect(
+        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,
+        "custom field persisted on create"
+      ).toBe(beforeValue);
+      await settle();
+      const afterValue = `after ${Date.now()}`;
+      const updateRes = await updateLink(request, token, linkId, { customFields: { delivery_timeline: afterValue } });
+      const updateOp = expectOperation(updateRes, "checkout.link.update");
+      expect(
+        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,
+        "update changed the custom field"
+      ).toBe(afterValue);
+      await settle();
+      await undoOk(request, token, updateOp.undoToken, "undo update custom field");
+      expect(
+        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,
+        "custom field reverts on undo (I4)"
+      ).toBe(beforeValue);
+      await redoOk(request, token, updateOp.logId, "redo update custom field");
+      expect(
+        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,
+        "custom field re-applies on redo (I4)"
+      ).toBe(afterValue);
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+    }
+  });
+  test("null gatewayProviderKey edit \u2192 undo restores the prior gateway (#2540, I1)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let linkId = null;
+    try {
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      linkId = link.id;
+      const before = await getLink(request, token, linkId);
+      expect(before.body?.gatewayProviderKey, "pay-link starts with the mock gateway").toBe("mock");
+      await settle();
+      const updateRes = await updateLink(request, token, linkId, {
+        name: "Pay link (no gateway)",
+        pricingMode: "fixed",
+        fixedPriceAmount: 49.99,
+        fixedPriceCurrencyCode: "USD",
+        status: "draft",
+        gatewayProviderKey: null
+      });
+      expect(
+        updateRes.ok(),
+        `clearing the gateway on a draft pay-link should succeed: ${updateRes.status()}`
+      ).toBeTruthy();
+      const updateOp = expectOperation(updateRes, "checkout.link.update (null gateway)");
+      const afterUpdate = await getLink(request, token, linkId);
+      expect(afterUpdate.body?.gatewayProviderKey ?? null, "gateway cleared to null after edit").toBeNull();
+      expect(afterUpdate.body?.name, "name changed by edit").toBe("Pay link (no gateway)");
+      await settle();
+      await undoOk(request, token, updateOp.undoToken, "undo null-gateway edit");
+      const afterUndo = await getLink(request, token, linkId);
+      expect(afterUndo.body?.gatewayProviderKey, "undo restores the prior gateway (#2540, I1)").toBe("mock");
+      expect(afterUndo.body?.name, "undo restores the prior name (I1)").toBe(before.body?.name);
+      await redoOk(request, token, updateOp.logId, "redo null-gateway edit");
+      expect(
+        (await getLink(request, token, linkId)).body?.gatewayProviderKey ?? null,
+        "redo re-clears the gateway to null (I6)"
+      ).toBeNull();
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+    }
+  });
+});
+//# sourceMappingURL=TC-UNDO-001-pay-link.spec.js.map

package/dist/modules/checkout/__integration__/TC-UNDO-001-pay-link.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/__integration__/TC-UNDO-001-pay-link.spec.ts"],
+  "sourcesContent": ["import { expect, test, type APIRequestContext } from '@playwright/test'\nimport { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api'\nimport { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'\nimport {\n  expectOperation,\n  undoOk,\n  redoOk,\n  expectTokenConsumed,\n  skipIfUndoTestsDisabled,\n} from '@open-mercato/core/helpers/integration/undoHarness'\nimport {\n  createFixedTemplateInput,\n  createLinkFixture,\n  deleteCheckoutEntityIfExists,\n  deleteLink,\n  updateLink,\n} from './helpers/fixtures'\n\n/**\n * TC-UNDO-001 (\u00A73 checkout.pay-link) \u2014 Undo/Redo correctness for the checkout pay-link\n * command bus, driven through the real `/api/checkout/links` routes plus the\n * `/api/audit_logs/audit-logs/actions/undo|redo` endpoints.\n *\n * Invariants asserted: I1 (update\u2192undo restores), I2 (delete\u2192undo re-materializes),\n * I3 (create\u2192undo soft-deletes), I4 (custom fields restore), I5 (token consumed),\n * I6 (redo reproduces post-state). checkout.link.create ships an id-preserving redo\n * handler, so the create\u2192undo\u2192redo SAME-id leg is asserted as corrected behaviour.\n *\n * Also covers the #2540 fix: a draft pay-link may persist a null gatewayProviderKey,\n * and editing it to null then undoing must restore the prior gateway.\n */\n\nconst LINKS = '/api/checkout/links'\n\ntype LinkRecord = {\n  id?: string\n  name?: string\n  slug?: string\n  updatedAt?: string\n  gatewayProviderKey?: string | null\n  customFields?: Record<string, unknown>\n}\n\n// The undo endpoint resolves the *latest* undoable log for a resource ordered by\n// millisecond-precision created_at, so consecutive mutations issued within the same\n// millisecond can tie. A short settle keeps each round-trip deterministic.\nasync function settle(): Promise<void> {\n  await new Promise((resolve) => setTimeout(resolve, 50))\n}\n\nasync function getLink(\n  request: APIRequestContext,\n  token: string,\n  id: string,\n): Promise<{ status: number; body: LinkRecord | null }> {\n  const res = await apiRequest(request, 'GET', `${LINKS}/${encodeURIComponent(id)}`, { token })\n  return { status: res.status(), body: await readJsonSafe<LinkRecord>(res) }\n}\n\ntest.describe('TC-UNDO-001 checkout.pay-link undo/redo', () => {\n  test.beforeAll(() => {\n    skipIfUndoTestsDisabled()\n  })\n\n  test('create \u2192 undo soft-deletes (I3) + token consumed (I5)', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let linkId: string | null = null\n    try {\n      const createRes = await apiRequest(request, 'POST', LINKS, {\n        token,\n        data: createFixedTemplateInput({ status: 'draft' }),\n      })\n      expect(createRes.status(), `create status ${createRes.status()}`).toBe(201)\n      const createOp = expectOperation(createRes, 'checkout.link.create')\n      linkId = createOp.resourceId\n      expect(linkId, 'create returns a resource id').toBeTruthy()\n\n      expect((await getLink(request, token, linkId as string)).status, 'pay-link exists after create').toBe(200)\n\n      await undoOk(request, token, createOp.undoToken, 'undo create pay-link')\n      expect(\n        (await getLink(request, token, linkId as string)).status,\n        'pay-link is gone after undoing create (I3 \u2014 soft-deleted, not readable)',\n      ).not.toBe(200)\n\n      await expectTokenConsumed(request, token, createOp.undoToken, 'checkout.link.create double-undo (I5)')\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n\n  test('update \u2192 undo restores scalars (I1) \u2192 redo re-applies (I6)', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let linkId: string | null = null\n    try {\n      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n      linkId = link.id\n      const before = await getLink(request, token, linkId)\n      const beforeName = before.body?.name\n      expect(beforeName, 'pay-link name readable before update').toBeTruthy()\n\n      await settle()\n      const changedName = `Renamed by undo test ${Date.now()}`\n      const updateRes = await updateLink(request, token, linkId, { name: changedName })\n      expect(updateRes.status(), `update status ${updateRes.status()}`).toBe(200)\n      const updateOp = expectOperation(updateRes, 'checkout.link.update')\n      expect((await getLink(request, token, linkId)).body?.name, 'update changed the name').toBe(changedName)\n\n      await settle()\n      await undoOk(request, token, updateOp.undoToken, 'undo update pay-link')\n      const afterUndo = await getLink(request, token, linkId)\n      expect(afterUndo.body?.name, 'update\u2192undo restores the prior name (I1)').toBe(beforeName)\n      expect(typeof afterUndo.body?.updatedAt, 'pay-link surfaces updatedAt').toBe('string')\n      expect(afterUndo.body?.updatedAt, 'undo bumps updatedAt (I1)').not.toBe(before.body?.updatedAt)\n\n      await redoOk(request, token, updateOp.logId, 'redo update pay-link')\n      expect((await getLink(request, token, linkId)).body?.name, 'redo re-applies the renamed value (I6)').toBe(changedName)\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n\n  test('delete \u2192 undo re-materializes (I2) \u2192 redo re-deletes (I6)', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let linkId: string | null = null\n    try {\n      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n      linkId = link.id\n      const beforeName = (await getLink(request, token, linkId)).body?.name\n\n      await settle()\n      const deleteRes = await deleteLink(request, token, linkId)\n      expect(deleteRes.ok(), `delete status ${deleteRes.status()}`).toBeTruthy()\n      const deleteOp = expectOperation(deleteRes, 'checkout.link.delete')\n      expect((await getLink(request, token, linkId)).status, 'gone after delete').not.toBe(200)\n\n      await undoOk(request, token, deleteOp.undoToken, 'undo delete pay-link')\n      const afterUndo = await getLink(request, token, linkId)\n      expect(afterUndo.status, 'delete\u2192undo re-materializes the row (I2)').toBe(200)\n      expect(afterUndo.body?.name, 're-materialized record keeps its scalars (I2)').toBe(beforeName)\n\n      await redoOk(request, token, deleteOp.logId, 'redo delete pay-link')\n      expect((await getLink(request, token, linkId)).status, 'gone again after redo delete (I6)').not.toBe(200)\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n\n  test('create \u2192 undo \u2192 redo restores the SAME record (I6)', async ({ request }) => {\n    // checkout.link.create registers an id-preserving redo handler, so redo must restore\n    // the original soft-deleted row \u2014 not mint a new id (the #2468 customers.people defect).\n    const token = await getAuthToken(request, 'admin')\n    let linkId: string | null = null\n    try {\n      const createRes = await apiRequest(request, 'POST', LINKS, {\n        token,\n        data: createFixedTemplateInput({ status: 'draft' }),\n      })\n      const createOp = expectOperation(createRes, 'checkout.link.create')\n      linkId = createOp.resourceId\n\n      await settle()\n      const undoLogId = await undoOk(request, token, createOp.undoToken, 'undo create pay-link')\n      expect((await getLink(request, token, linkId as string)).status, 'gone after undo create').not.toBe(200)\n\n      await redoOk(request, token, undoLogId, 'redo create pay-link')\n      const afterRedo = await getLink(request, token, linkId as string)\n      expect(afterRedo.status, 'same pay-link restored after redo (I6)').toBe(200)\n      expect(afterRedo.body?.id, 'redo preserves the original id (I6)').toBe(linkId)\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n\n  test('custom fields revert on undo and re-apply on redo (I4)', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let linkId: string | null = null\n    try {\n      const beforeValue = `before ${Date.now()}`\n      const link = await createLinkFixture(\n        request,\n        token,\n        createFixedTemplateInput({\n          status: 'draft',\n          customFieldsetCode: 'service_package',\n          customFields: { delivery_timeline: beforeValue },\n        }),\n      )\n      linkId = link.id\n      expect(\n        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,\n        'custom field persisted on create',\n      ).toBe(beforeValue)\n\n      await settle()\n      const afterValue = `after ${Date.now()}`\n      const updateRes = await updateLink(request, token, linkId, { customFields: { delivery_timeline: afterValue } })\n      const updateOp = expectOperation(updateRes, 'checkout.link.update')\n      expect(\n        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,\n        'update changed the custom field',\n      ).toBe(afterValue)\n\n      await settle()\n      await undoOk(request, token, updateOp.undoToken, 'undo update custom field')\n      expect(\n        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,\n        'custom field reverts on undo (I4)',\n      ).toBe(beforeValue)\n\n      await redoOk(request, token, updateOp.logId, 'redo update custom field')\n      expect(\n        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,\n        'custom field re-applies on redo (I4)',\n      ).toBe(afterValue)\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n\n  test('null gatewayProviderKey edit \u2192 undo restores the prior gateway (#2540, I1)', async ({ request }) => {\n    // #2540: a draft pay-link may persist a null gatewayProviderKey. Editing the gateway to\n    // null must round-trip, and undoing the edit must restore the prior gateway value.\n    const token = await getAuthToken(request, 'admin')\n    let linkId: string | null = null\n    try {\n      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n      linkId = link.id\n      const before = await getLink(request, token, linkId)\n      expect(before.body?.gatewayProviderKey, 'pay-link starts with the mock gateway').toBe('mock')\n\n      await settle()\n      const updateRes = await updateLink(request, token, linkId, {\n        name: 'Pay link (no gateway)',\n        pricingMode: 'fixed',\n        fixedPriceAmount: 49.99,\n        fixedPriceCurrencyCode: 'USD',\n        status: 'draft',\n        gatewayProviderKey: null,\n      })\n      expect(\n        updateRes.ok(),\n        `clearing the gateway on a draft pay-link should succeed: ${updateRes.status()}`,\n      ).toBeTruthy()\n      const updateOp = expectOperation(updateRes, 'checkout.link.update (null gateway)')\n\n      const afterUpdate = await getLink(request, token, linkId)\n      expect(afterUpdate.body?.gatewayProviderKey ?? null, 'gateway cleared to null after edit').toBeNull()\n      expect(afterUpdate.body?.name, 'name changed by edit').toBe('Pay link (no gateway)')\n\n      await settle()\n      await undoOk(request, token, updateOp.undoToken, 'undo null-gateway edit')\n      const afterUndo = await getLink(request, token, linkId)\n      expect(afterUndo.body?.gatewayProviderKey, 'undo restores the prior gateway (#2540, I1)').toBe('mock')\n      expect(afterUndo.body?.name, 'undo restores the prior name (I1)').toBe(before.body?.name)\n\n      await redoOk(request, token, updateOp.logId, 'redo null-gateway edit')\n      expect(\n        (await getLink(request, token, linkId)).body?.gatewayProviderKey ?? null,\n        'redo re-clears the gateway to null (I6)',\n      ).toBeNull()\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAoC;AACrD,SAAS,YAAY,oBAAoB;AACzC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAgBP,MAAM,QAAQ;AAcd,eAAe,SAAwB;AACrC,QAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACxD;AAEA,eAAe,QACb,SACA,OACA,IACsD;AACtD,QAAM,MAAM,MAAM,WAAW,SAAS,OAAO,GAAG,KAAK,IAAI,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;AAC5F,SAAO,EAAE,QAAQ,IAAI,OAAO,GAAG,MAAM,MAAM,aAAyB,GAAG,EAAE;AAC3E;AAEA,KAAK,SAAS,2CAA2C,MAAM;AAC7D,OAAK,UAAU,MAAM;AACnB,4BAAwB;AAAA,EAC1B,CAAC;AAED,OAAK,8DAAyD,OAAO,EAAE,QAAQ,MAAM;AACnF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,SAAwB;AAC5B,QAAI;AACF,YAAM,YAAY,MAAM,WAAW,SAAS,QAAQ,OAAO;AAAA,QACzD;AAAA,QACA,MAAM,yBAAyB,EAAE,QAAQ,QAAQ,CAAC;AAAA,MACpD,CAAC;AACD,aAAO,UAAU,OAAO,GAAG,iBAAiB,UAAU,OAAO,CAAC,EAAE,EAAE,KAAK,GAAG;AAC1E,YAAM,WAAW,gBAAgB,WAAW,sBAAsB;AAClE,eAAS,SAAS;AAClB,aAAO,QAAQ,8BAA8B,EAAE,WAAW;AAE1D,cAAQ,MAAM,QAAQ,SAAS,OAAO,MAAgB,GAAG,QAAQ,8BAA8B,EAAE,KAAK,GAAG;AAEzG,YAAM,OAAO,SAAS,OAAO,SAAS,WAAW,sBAAsB;AACvE;AAAA,SACG,MAAM,QAAQ,SAAS,OAAO,MAAgB,GAAG;AAAA,QAClD;AAAA,MACF,EAAE,IAAI,KAAK,GAAG;AAEd,YAAM,oBAAoB,SAAS,OAAO,SAAS,WAAW,uCAAuC;AAAA,IACvG,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AAED,OAAK,wEAA8D,OAAO,EAAE,QAAQ,MAAM;AACxF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,SAAwB;AAC5B,QAAI;AACF,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AAClG,eAAS,KAAK;AACd,YAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,MAAM;AACnD,YAAM,aAAa,OAAO,MAAM;AAChC,aAAO,YAAY,sCAAsC,EAAE,WAAW;AAEtE,YAAM,OAAO;AACb,YAAM,cAAc,wBAAwB,KAAK,IAAI,CAAC;AACtD,YAAM,YAAY,MAAM,WAAW,SAAS,OAAO,QAAQ,EAAE,MAAM,YAAY,CAAC;AAChF,aAAO,UAAU,OAAO,GAAG,iBAAiB,UAAU,OAAO,CAAC,EAAE,EAAE,KAAK,GAAG;AAC1E,YAAM,WAAW,gBAAgB,WAAW,sBAAsB;AAClE,cAAQ,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,MAAM,MAAM,yBAAyB,EAAE,KAAK,WAAW;AAEtG,YAAM,OAAO;AACb,YAAM,OAAO,SAAS,OAAO,SAAS,WAAW,sBAAsB;AACvE,YAAM,YAAY,MAAM,QAAQ,SAAS,OAAO,MAAM;AACtD,aAAO,UAAU,MAAM,MAAM,+CAA0C,EAAE,KAAK,UAAU;AACxF,aAAO,OAAO,UAAU,MAAM,WAAW,6BAA6B,EAAE,KAAK,QAAQ;AACrF,aAAO,UAAU,MAAM,WAAW,2BAA2B,EAAE,IAAI,KAAK,OAAO,MAAM,SAAS;AAE9F,YAAM,OAAO,SAAS,OAAO,SAAS,OAAO,sBAAsB;AACnE,cAAQ,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,MAAM,MAAM,wCAAwC,EAAE,KAAK,WAAW;AAAA,IACvH,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AAED,OAAK,uEAA6D,OAAO,EAAE,QAAQ,MAAM;AACvF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,SAAwB;AAC5B,QAAI;AACF,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AAClG,eAAS,KAAK;AACd,YAAM,cAAc,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,MAAM;AAEjE,YAAM,OAAO;AACb,YAAM,YAAY,MAAM,WAAW,SAAS,OAAO,MAAM;AACzD,aAAO,UAAU,GAAG,GAAG,iBAAiB,UAAU,OAAO,CAAC,EAAE,EAAE,WAAW;AACzE,YAAM,WAAW,gBAAgB,WAAW,sBAAsB;AAClE,cAAQ,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,QAAQ,mBAAmB,EAAE,IAAI,KAAK,GAAG;AAExF,YAAM,OAAO,SAAS,OAAO,SAAS,WAAW,sBAAsB;AACvE,YAAM,YAAY,MAAM,QAAQ,SAAS,OAAO,MAAM;AACtD,aAAO,UAAU,QAAQ,+CAA0C,EAAE,KAAK,GAAG;AAC7E,aAAO,UAAU,MAAM,MAAM,+CAA+C,EAAE,KAAK,UAAU;AAE7F,YAAM,OAAO,SAAS,OAAO,SAAS,OAAO,sBAAsB;AACnE,cAAQ,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,QAAQ,mCAAmC,EAAE,IAAI,KAAK,GAAG;AAAA,IAC1G,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AAED,OAAK,gEAAsD,OAAO,EAAE,QAAQ,MAAM;AAGhF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,SAAwB;AAC5B,QAAI;AACF,YAAM,YAAY,MAAM,WAAW,SAAS,QAAQ,OAAO;AAAA,QACzD;AAAA,QACA,MAAM,yBAAyB,EAAE,QAAQ,QAAQ,CAAC;AAAA,MACpD,CAAC;AACD,YAAM,WAAW,gBAAgB,WAAW,sBAAsB;AAClE,eAAS,SAAS;AAElB,YAAM,OAAO;AACb,YAAM,YAAY,MAAM,OAAO,SAAS,OAAO,SAAS,WAAW,sBAAsB;AACzF,cAAQ,MAAM,QAAQ,SAAS,OAAO,MAAgB,GAAG,QAAQ,wBAAwB,EAAE,IAAI,KAAK,GAAG;AAEvG,YAAM,OAAO,SAAS,OAAO,WAAW,sBAAsB;AAC9D,YAAM,YAAY,MAAM,QAAQ,SAAS,OAAO,MAAgB;AAChE,aAAO,UAAU,QAAQ,wCAAwC,EAAE,KAAK,GAAG;AAC3E,aAAO,UAAU,MAAM,IAAI,qCAAqC,EAAE,KAAK,MAAM;AAAA,IAC/E,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AAED,OAAK,0DAA0D,OAAO,EAAE,QAAQ,MAAM;AACpF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,SAAwB;AAC5B,QAAI;AACF,YAAM,cAAc,UAAU,KAAK,IAAI,CAAC;AACxC,YAAM,OAAO,MAAM;AAAA,QACjB;AAAA,QACA;AAAA,QACA,yBAAyB;AAAA,UACvB,QAAQ;AAAA,UACR,oBAAoB;AAAA,UACpB,cAAc,EAAE,mBAAmB,YAAY;AAAA,QACjD,CAAC;AAAA,MACH;AACA,eAAS,KAAK;AACd;AAAA,SACG,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,MAAM,cAAc;AAAA,QAC5D;AAAA,MACF,EAAE,KAAK,WAAW;AAElB,YAAM,OAAO;AACb,YAAM,aAAa,SAAS,KAAK,IAAI,CAAC;AACtC,YAAM,YAAY,MAAM,WAAW,SAAS,OAAO,QAAQ,EAAE,cAAc,EAAE,mBAAmB,WAAW,EAAE,CAAC;AAC9G,YAAM,WAAW,gBAAgB,WAAW,sBAAsB;AAClE;AAAA,SACG,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,MAAM,cAAc;AAAA,QAC5D;AAAA,MACF,EAAE,KAAK,UAAU;AAEjB,YAAM,OAAO;AACb,YAAM,OAAO,SAAS,OAAO,SAAS,WAAW,0BAA0B;AAC3E;AAAA,SACG,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,MAAM,cAAc;AAAA,QAC5D;AAAA,MACF,EAAE,KAAK,WAAW;AAElB,YAAM,OAAO,SAAS,OAAO,SAAS,OAAO,0BAA0B;AACvE;AAAA,SACG,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,MAAM,cAAc;AAAA,QAC5D;AAAA,MACF,EAAE,KAAK,UAAU;AAAA,IACnB,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AAED,OAAK,mFAA8E,OAAO,EAAE,QAAQ,MAAM;AAGxG,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,SAAwB;AAC5B,QAAI;AACF,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AAClG,eAAS,KAAK;AACd,YAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,MAAM;AACnD,aAAO,OAAO,MAAM,oBAAoB,uCAAuC,EAAE,KAAK,MAAM;AAE5F,YAAM,OAAO;AACb,YAAM,YAAY,MAAM,WAAW,SAAS,OAAO,QAAQ;AAAA,QACzD,MAAM;AAAA,QACN,aAAa;AAAA,QACb,kBAAkB;AAAA,QAClB,wBAAwB;AAAA,QACxB,QAAQ;AAAA,QACR,oBAAoB;AAAA,MACtB,CAAC;AACD;AAAA,QACE,UAAU,GAAG;AAAA,QACb,4DAA4D,UAAU,OAAO,CAAC;AAAA,MAChF,EAAE,WAAW;AACb,YAAM,WAAW,gBAAgB,WAAW,qCAAqC;AAEjF,YAAM,cAAc,MAAM,QAAQ,SAAS,OAAO,MAAM;AACxD,aAAO,YAAY,MAAM,sBAAsB,MAAM,oCAAoC,EAAE,SAAS;AACpG,aAAO,YAAY,MAAM,MAAM,sBAAsB,EAAE,KAAK,uBAAuB;AAEnF,YAAM,OAAO;AACb,YAAM,OAAO,SAAS,OAAO,SAAS,WAAW,wBAAwB;AACzE,YAAM,YAAY,MAAM,QAAQ,SAAS,OAAO,MAAM;AACtD,aAAO,UAAU,MAAM,oBAAoB,6CAA6C,EAAE,KAAK,MAAM;AACrG,aAAO,UAAU,MAAM,MAAM,mCAAmC,EAAE,KAAK,OAAO,MAAM,IAAI;AAExF,YAAM,OAAO,SAAS,OAAO,SAAS,OAAO,wBAAwB;AACrE;AAAA,SACG,MAAM,QAAQ,SAAS,OAAO,MAAM,GAAG,MAAM,sBAAsB;AAAA,QACpE;AAAA,MACF,EAAE,SAAS;AAAA,IACb,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/checkout/__integration__/TC-UNDO-001-template.spec.js

@@ -0,0 +1,171 @@
+import { expect, test } from "@playwright/test";
+import { apiRequest, getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import { readJsonSafe } from "@open-mercato/core/helpers/integration/generalFixtures";
+import {
+  expectOperation,
+  undoOk,
+  redoOk,
+  expectTokenConsumed,
+  skipIfUndoTestsDisabled
+} from "@open-mercato/core/helpers/integration/undoHarness";
+import {
+  createFixedTemplateInput,
+  createTemplateFixture,
+  deleteCheckoutEntityIfExists,
+  deleteTemplate,
+  updateTemplate
+} from "./helpers/fixtures.js";
+const TEMPLATES = "/api/checkout/templates";
+async function settle() {
+  await new Promise((resolve) => setTimeout(resolve, 50));
+}
+async function getTemplate(request, token, id) {
+  const res = await apiRequest(request, "GET", `${TEMPLATES}/${encodeURIComponent(id)}`, { token });
+  return { status: res.status(), body: await readJsonSafe(res) };
+}
+test.describe("TC-UNDO-001 checkout.template undo/redo", () => {
+  test.beforeAll(() => {
+    skipIfUndoTestsDisabled();
+  });
+  test("create \u2192 undo soft-deletes (I3) + token consumed (I5)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let templateId = null;
+    try {
+      const createRes = await apiRequest(request, "POST", TEMPLATES, {
+        token,
+        data: createFixedTemplateInput({ status: "draft" })
+      });
+      expect(createRes.status(), `create status ${createRes.status()}`).toBe(201);
+      const createOp = expectOperation(createRes, "checkout.template.create");
+      templateId = createOp.resourceId;
+      expect(templateId, "create returns a resource id").toBeTruthy();
+      expect((await getTemplate(request, token, templateId)).status, "template exists after create").toBe(200);
+      await undoOk(request, token, createOp.undoToken, "undo create template");
+      expect(
+        (await getTemplate(request, token, templateId)).status,
+        "template is gone after undoing create (I3 \u2014 soft-deleted, not readable)"
+      ).not.toBe(200);
+      await expectTokenConsumed(request, token, createOp.undoToken, "checkout.template.create double-undo (I5)");
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+  test("update \u2192 undo restores scalars (I1) \u2192 redo re-applies (I6)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let templateId = null;
+    try {
+      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      const before = await getTemplate(request, token, templateId);
+      const beforeName = before.body?.name;
+      expect(beforeName, "template name readable before update").toBeTruthy();
+      await settle();
+      const changedName = `Renamed by undo test ${Date.now()}`;
+      const updateRes = await updateTemplate(request, token, templateId, { name: changedName });
+      expect(updateRes.status(), `update status ${updateRes.status()}`).toBe(200);
+      const updateOp = expectOperation(updateRes, "checkout.template.update");
+      expect((await getTemplate(request, token, templateId)).body?.name, "update changed the name").toBe(changedName);
+      await settle();
+      await undoOk(request, token, updateOp.undoToken, "undo update template");
+      const afterUndo = await getTemplate(request, token, templateId);
+      expect(afterUndo.body?.name, "update\u2192undo restores the prior name (I1)").toBe(beforeName);
+      expect(typeof afterUndo.body?.updatedAt, "template surfaces updatedAt").toBe("string");
+      expect(afterUndo.body?.updatedAt, "undo bumps updatedAt (I1)").not.toBe(before.body?.updatedAt);
+      await redoOk(request, token, updateOp.logId, "redo update template");
+      expect(
+        (await getTemplate(request, token, templateId)).body?.name,
+        "redo re-applies the renamed value (I6)"
+      ).toBe(changedName);
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+  test("delete \u2192 undo re-materializes (I2) \u2192 redo re-deletes (I6)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let templateId = null;
+    try {
+      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: "draft" }));
+      const beforeName = (await getTemplate(request, token, templateId)).body?.name;
+      await settle();
+      const deleteRes = await deleteTemplate(request, token, templateId);
+      expect(deleteRes.ok(), `delete status ${deleteRes.status()}`).toBeTruthy();
+      const deleteOp = expectOperation(deleteRes, "checkout.template.delete");
+      expect((await getTemplate(request, token, templateId)).status, "gone after delete").not.toBe(200);
+      await undoOk(request, token, deleteOp.undoToken, "undo delete template");
+      const afterUndo = await getTemplate(request, token, templateId);
+      expect(afterUndo.status, "delete\u2192undo re-materializes the row (I2)").toBe(200);
+      expect(afterUndo.body?.name, "re-materialized record keeps its scalars (I2)").toBe(beforeName);
+      await redoOk(request, token, deleteOp.logId, "redo delete template");
+      expect(
+        (await getTemplate(request, token, templateId)).status,
+        "gone again after redo delete (I6)"
+      ).not.toBe(200);
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+  test("create \u2192 undo \u2192 redo restores the SAME record (I6)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let templateId = null;
+    try {
+      const createRes = await apiRequest(request, "POST", TEMPLATES, {
+        token,
+        data: createFixedTemplateInput({ status: "draft" })
+      });
+      const createOp = expectOperation(createRes, "checkout.template.create");
+      templateId = createOp.resourceId;
+      await settle();
+      const undoLogId = await undoOk(request, token, createOp.undoToken, "undo create template");
+      expect((await getTemplate(request, token, templateId)).status, "gone after undo create").not.toBe(200);
+      await redoOk(request, token, undoLogId, "redo create template");
+      const afterRedo = await getTemplate(request, token, templateId);
+      expect(afterRedo.status, "same template restored after redo (I6)").toBe(200);
+      expect(afterRedo.body?.id, "redo preserves the original id (I6)").toBe(templateId);
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+  test("custom fields revert on undo and re-apply on redo (I4)", async ({ request }) => {
+    const token = await getAuthToken(request, "admin");
+    let templateId = null;
+    try {
+      const beforeValue = `before ${Date.now()}`;
+      templateId = await createTemplateFixture(
+        request,
+        token,
+        createFixedTemplateInput({
+          status: "draft",
+          customFieldsetCode: "service_package",
+          customFields: { delivery_timeline: beforeValue }
+        })
+      );
+      expect(
+        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,
+        "custom field persisted on create"
+      ).toBe(beforeValue);
+      await settle();
+      const afterValue = `after ${Date.now()}`;
+      const updateRes = await updateTemplate(request, token, templateId, {
+        customFields: { delivery_timeline: afterValue }
+      });
+      const updateOp = expectOperation(updateRes, "checkout.template.update");
+      expect(
+        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,
+        "update changed the custom field"
+      ).toBe(afterValue);
+      await settle();
+      await undoOk(request, token, updateOp.undoToken, "undo update custom field");
+      expect(
+        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,
+        "custom field reverts on undo (I4)"
+      ).toBe(beforeValue);
+      await redoOk(request, token, updateOp.logId, "redo update custom field");
+      expect(
+        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,
+        "custom field re-applies on redo (I4)"
+      ).toBe(afterValue);
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "templates", templateId);
+    }
+  });
+});
+//# sourceMappingURL=TC-UNDO-001-template.spec.js.map

package/dist/modules/checkout/__integration__/TC-UNDO-001-template.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/__integration__/TC-UNDO-001-template.spec.ts"],
+  "sourcesContent": ["import { expect, test, type APIRequestContext } from '@playwright/test'\nimport { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api'\nimport { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'\nimport {\n  expectOperation,\n  undoOk,\n  redoOk,\n  expectTokenConsumed,\n  skipIfUndoTestsDisabled,\n} from '@open-mercato/core/helpers/integration/undoHarness'\nimport {\n  createFixedTemplateInput,\n  createTemplateFixture,\n  deleteCheckoutEntityIfExists,\n  deleteTemplate,\n  updateTemplate,\n} from './helpers/fixtures'\n\n/**\n * TC-UNDO-001 (\u00A73 checkout.template) \u2014 Undo/Redo correctness for the checkout template\n * command bus, driven through the real `/api/checkout/templates` routes plus the\n * `/api/audit_logs/audit-logs/actions/undo|redo` endpoints.\n *\n * Invariants asserted (per the #2468 tracking issue):\n *   I1 update\u2192undo restores scalars (and bumps updatedAt)\n *   I2 delete\u2192undo re-materializes the soft-deleted row\n *   I3 create\u2192undo soft-deletes (never hard-deletes)\n *   I4 custom fields revert on undo and re-apply on redo\n *   I5 a consumed undo token is rejected on a second undo\n *   I6 redo reproduces the command's post-state\n *\n * Unlike the customers.people pilot (where create\u2192undo\u2192redo mints a new id, #2468),\n * checkout.template.create ships an id-preserving redo handler, so the SAME-id redo\n * leg is asserted as corrected behaviour rather than quarantined.\n */\n\nconst TEMPLATES = '/api/checkout/templates'\n\ntype TemplateRecord = {\n  id?: string\n  name?: string\n  updatedAt?: string\n  gatewayProviderKey?: string | null\n  customFields?: Record<string, unknown>\n}\n\n// The undo endpoint resolves the *latest* undoable log for a resource ordered by\n// millisecond-precision created_at, so consecutive mutations issued within the same\n// millisecond can tie. A short settle keeps each round-trip deterministic.\nasync function settle(): Promise<void> {\n  await new Promise((resolve) => setTimeout(resolve, 50))\n}\n\nasync function getTemplate(\n  request: APIRequestContext,\n  token: string,\n  id: string,\n): Promise<{ status: number; body: TemplateRecord | null }> {\n  const res = await apiRequest(request, 'GET', `${TEMPLATES}/${encodeURIComponent(id)}`, { token })\n  return { status: res.status(), body: await readJsonSafe<TemplateRecord>(res) }\n}\n\ntest.describe('TC-UNDO-001 checkout.template undo/redo', () => {\n  test.beforeAll(() => {\n    skipIfUndoTestsDisabled()\n  })\n\n  test('create \u2192 undo soft-deletes (I3) + token consumed (I5)', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let templateId: string | null = null\n    try {\n      const createRes = await apiRequest(request, 'POST', TEMPLATES, {\n        token,\n        data: createFixedTemplateInput({ status: 'draft' }),\n      })\n      expect(createRes.status(), `create status ${createRes.status()}`).toBe(201)\n      const createOp = expectOperation(createRes, 'checkout.template.create')\n      templateId = createOp.resourceId\n      expect(templateId, 'create returns a resource id').toBeTruthy()\n\n      expect((await getTemplate(request, token, templateId as string)).status, 'template exists after create').toBe(200)\n\n      await undoOk(request, token, createOp.undoToken, 'undo create template')\n      expect(\n        (await getTemplate(request, token, templateId as string)).status,\n        'template is gone after undoing create (I3 \u2014 soft-deleted, not readable)',\n      ).not.toBe(200)\n\n      await expectTokenConsumed(request, token, createOp.undoToken, 'checkout.template.create double-undo (I5)')\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n\n  test('update \u2192 undo restores scalars (I1) \u2192 redo re-applies (I6)', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let templateId: string | null = null\n    try {\n      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n      const before = await getTemplate(request, token, templateId)\n      const beforeName = before.body?.name\n      expect(beforeName, 'template name readable before update').toBeTruthy()\n\n      await settle()\n      const changedName = `Renamed by undo test ${Date.now()}`\n      const updateRes = await updateTemplate(request, token, templateId, { name: changedName })\n      expect(updateRes.status(), `update status ${updateRes.status()}`).toBe(200)\n      const updateOp = expectOperation(updateRes, 'checkout.template.update')\n      expect((await getTemplate(request, token, templateId)).body?.name, 'update changed the name').toBe(changedName)\n\n      await settle()\n      await undoOk(request, token, updateOp.undoToken, 'undo update template')\n      const afterUndo = await getTemplate(request, token, templateId)\n      expect(afterUndo.body?.name, 'update\u2192undo restores the prior name (I1)').toBe(beforeName)\n      expect(typeof afterUndo.body?.updatedAt, 'template surfaces updatedAt').toBe('string')\n      expect(afterUndo.body?.updatedAt, 'undo bumps updatedAt (I1)').not.toBe(before.body?.updatedAt)\n\n      await redoOk(request, token, updateOp.logId, 'redo update template')\n      expect(\n        (await getTemplate(request, token, templateId)).body?.name,\n        'redo re-applies the renamed value (I6)',\n      ).toBe(changedName)\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n\n  test('delete \u2192 undo re-materializes (I2) \u2192 redo re-deletes (I6)', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let templateId: string | null = null\n    try {\n      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: 'draft' }))\n      const beforeName = (await getTemplate(request, token, templateId)).body?.name\n\n      await settle()\n      const deleteRes = await deleteTemplate(request, token, templateId)\n      expect(deleteRes.ok(), `delete status ${deleteRes.status()}`).toBeTruthy()\n      const deleteOp = expectOperation(deleteRes, 'checkout.template.delete')\n      expect((await getTemplate(request, token, templateId)).status, 'gone after delete').not.toBe(200)\n\n      await undoOk(request, token, deleteOp.undoToken, 'undo delete template')\n      const afterUndo = await getTemplate(request, token, templateId)\n      expect(afterUndo.status, 'delete\u2192undo re-materializes the row (I2)').toBe(200)\n      expect(afterUndo.body?.name, 're-materialized record keeps its scalars (I2)').toBe(beforeName)\n\n      await redoOk(request, token, deleteOp.logId, 'redo delete template')\n      expect(\n        (await getTemplate(request, token, templateId)).status,\n        'gone again after redo delete (I6)',\n      ).not.toBe(200)\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n\n  test('create \u2192 undo \u2192 redo restores the SAME record (I6)', async ({ request }) => {\n    // checkout.template.create registers an id-preserving redo handler, so redo must restore\n    // the original soft-deleted row \u2014 not mint a new id (the #2468 customers.people defect).\n    const token = await getAuthToken(request, 'admin')\n    let templateId: string | null = null\n    try {\n      const createRes = await apiRequest(request, 'POST', TEMPLATES, {\n        token,\n        data: createFixedTemplateInput({ status: 'draft' }),\n      })\n      const createOp = expectOperation(createRes, 'checkout.template.create')\n      templateId = createOp.resourceId\n\n      await settle()\n      const undoLogId = await undoOk(request, token, createOp.undoToken, 'undo create template')\n      expect((await getTemplate(request, token, templateId as string)).status, 'gone after undo create').not.toBe(200)\n\n      await redoOk(request, token, undoLogId, 'redo create template')\n      const afterRedo = await getTemplate(request, token, templateId as string)\n      expect(afterRedo.status, 'same template restored after redo (I6)').toBe(200)\n      expect(afterRedo.body?.id, 'redo preserves the original id (I6)').toBe(templateId)\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n\n  test('custom fields revert on undo and re-apply on redo (I4)', async ({ request }) => {\n    const token = await getAuthToken(request, 'admin')\n    let templateId: string | null = null\n    try {\n      const beforeValue = `before ${Date.now()}`\n      templateId = await createTemplateFixture(\n        request,\n        token,\n        createFixedTemplateInput({\n          status: 'draft',\n          customFieldsetCode: 'service_package',\n          customFields: { delivery_timeline: beforeValue },\n        }),\n      )\n      expect(\n        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,\n        'custom field persisted on create',\n      ).toBe(beforeValue)\n\n      await settle()\n      const afterValue = `after ${Date.now()}`\n      const updateRes = await updateTemplate(request, token, templateId, {\n        customFields: { delivery_timeline: afterValue },\n      })\n      const updateOp = expectOperation(updateRes, 'checkout.template.update')\n      expect(\n        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,\n        'update changed the custom field',\n      ).toBe(afterValue)\n\n      await settle()\n      await undoOk(request, token, updateOp.undoToken, 'undo update custom field')\n      expect(\n        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,\n        'custom field reverts on undo (I4)',\n      ).toBe(beforeValue)\n\n      await redoOk(request, token, updateOp.logId, 'redo update custom field')\n      expect(\n        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,\n        'custom field re-applies on redo (I4)',\n      ).toBe(afterValue)\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAoC;AACrD,SAAS,YAAY,oBAAoB;AACzC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAoBP,MAAM,YAAY;AAalB,eAAe,SAAwB;AACrC,QAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACxD;AAEA,eAAe,YACb,SACA,OACA,IAC0D;AAC1D,QAAM,MAAM,MAAM,WAAW,SAAS,OAAO,GAAG,SAAS,IAAI,mBAAmB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;AAChG,SAAO,EAAE,QAAQ,IAAI,OAAO,GAAG,MAAM,MAAM,aAA6B,GAAG,EAAE;AAC/E;AAEA,KAAK,SAAS,2CAA2C,MAAM;AAC7D,OAAK,UAAU,MAAM;AACnB,4BAAwB;AAAA,EAC1B,CAAC;AAED,OAAK,8DAAyD,OAAO,EAAE,QAAQ,MAAM;AACnF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,aAA4B;AAChC,QAAI;AACF,YAAM,YAAY,MAAM,WAAW,SAAS,QAAQ,WAAW;AAAA,QAC7D;AAAA,QACA,MAAM,yBAAyB,EAAE,QAAQ,QAAQ,CAAC;AAAA,MACpD,CAAC;AACD,aAAO,UAAU,OAAO,GAAG,iBAAiB,UAAU,OAAO,CAAC,EAAE,EAAE,KAAK,GAAG;AAC1E,YAAM,WAAW,gBAAgB,WAAW,0BAA0B;AACtE,mBAAa,SAAS;AACtB,aAAO,YAAY,8BAA8B,EAAE,WAAW;AAE9D,cAAQ,MAAM,YAAY,SAAS,OAAO,UAAoB,GAAG,QAAQ,8BAA8B,EAAE,KAAK,GAAG;AAEjH,YAAM,OAAO,SAAS,OAAO,SAAS,WAAW,sBAAsB;AACvE;AAAA,SACG,MAAM,YAAY,SAAS,OAAO,UAAoB,GAAG;AAAA,QAC1D;AAAA,MACF,EAAE,IAAI,KAAK,GAAG;AAEd,YAAM,oBAAoB,SAAS,OAAO,SAAS,WAAW,2CAA2C;AAAA,IAC3G,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AAED,OAAK,wEAA8D,OAAO,EAAE,QAAQ,MAAM;AACxF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,aAA4B;AAChC,QAAI;AACF,mBAAa,MAAM,sBAAsB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AACtG,YAAM,SAAS,MAAM,YAAY,SAAS,OAAO,UAAU;AAC3D,YAAM,aAAa,OAAO,MAAM;AAChC,aAAO,YAAY,sCAAsC,EAAE,WAAW;AAEtE,YAAM,OAAO;AACb,YAAM,cAAc,wBAAwB,KAAK,IAAI,CAAC;AACtD,YAAM,YAAY,MAAM,eAAe,SAAS,OAAO,YAAY,EAAE,MAAM,YAAY,CAAC;AACxF,aAAO,UAAU,OAAO,GAAG,iBAAiB,UAAU,OAAO,CAAC,EAAE,EAAE,KAAK,GAAG;AAC1E,YAAM,WAAW,gBAAgB,WAAW,0BAA0B;AACtE,cAAQ,MAAM,YAAY,SAAS,OAAO,UAAU,GAAG,MAAM,MAAM,yBAAyB,EAAE,KAAK,WAAW;AAE9G,YAAM,OAAO;AACb,YAAM,OAAO,SAAS,OAAO,SAAS,WAAW,sBAAsB;AACvE,YAAM,YAAY,MAAM,YAAY,SAAS,OAAO,UAAU;AAC9D,aAAO,UAAU,MAAM,MAAM,+CAA0C,EAAE,KAAK,UAAU;AACxF,aAAO,OAAO,UAAU,MAAM,WAAW,6BAA6B,EAAE,KAAK,QAAQ;AACrF,aAAO,UAAU,MAAM,WAAW,2BAA2B,EAAE,IAAI,KAAK,OAAO,MAAM,SAAS;AAE9F,YAAM,OAAO,SAAS,OAAO,SAAS,OAAO,sBAAsB;AACnE;AAAA,SACG,MAAM,YAAY,SAAS,OAAO,UAAU,GAAG,MAAM;AAAA,QACtD;AAAA,MACF,EAAE,KAAK,WAAW;AAAA,IACpB,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AAED,OAAK,uEAA6D,OAAO,EAAE,QAAQ,MAAM;AACvF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,aAA4B;AAChC,QAAI;AACF,mBAAa,MAAM,sBAAsB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,QAAQ,CAAC,CAAC;AACtG,YAAM,cAAc,MAAM,YAAY,SAAS,OAAO,UAAU,GAAG,MAAM;AAEzE,YAAM,OAAO;AACb,YAAM,YAAY,MAAM,eAAe,SAAS,OAAO,UAAU;AACjE,aAAO,UAAU,GAAG,GAAG,iBAAiB,UAAU,OAAO,CAAC,EAAE,EAAE,WAAW;AACzE,YAAM,WAAW,gBAAgB,WAAW,0BAA0B;AACtE,cAAQ,MAAM,YAAY,SAAS,OAAO,UAAU,GAAG,QAAQ,mBAAmB,EAAE,IAAI,KAAK,GAAG;AAEhG,YAAM,OAAO,SAAS,OAAO,SAAS,WAAW,sBAAsB;AACvE,YAAM,YAAY,MAAM,YAAY,SAAS,OAAO,UAAU;AAC9D,aAAO,UAAU,QAAQ,+CAA0C,EAAE,KAAK,GAAG;AAC7E,aAAO,UAAU,MAAM,MAAM,+CAA+C,EAAE,KAAK,UAAU;AAE7F,YAAM,OAAO,SAAS,OAAO,SAAS,OAAO,sBAAsB;AACnE;AAAA,SACG,MAAM,YAAY,SAAS,OAAO,UAAU,GAAG;AAAA,QAChD;AAAA,MACF,EAAE,IAAI,KAAK,GAAG;AAAA,IAChB,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AAED,OAAK,gEAAsD,OAAO,EAAE,QAAQ,MAAM;AAGhF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,aAA4B;AAChC,QAAI;AACF,YAAM,YAAY,MAAM,WAAW,SAAS,QAAQ,WAAW;AAAA,QAC7D;AAAA,QACA,MAAM,yBAAyB,EAAE,QAAQ,QAAQ,CAAC;AAAA,MACpD,CAAC;AACD,YAAM,WAAW,gBAAgB,WAAW,0BAA0B;AACtE,mBAAa,SAAS;AAEtB,YAAM,OAAO;AACb,YAAM,YAAY,MAAM,OAAO,SAAS,OAAO,SAAS,WAAW,sBAAsB;AACzF,cAAQ,MAAM,YAAY,SAAS,OAAO,UAAoB,GAAG,QAAQ,wBAAwB,EAAE,IAAI,KAAK,GAAG;AAE/G,YAAM,OAAO,SAAS,OAAO,WAAW,sBAAsB;AAC9D,YAAM,YAAY,MAAM,YAAY,SAAS,OAAO,UAAoB;AACxE,aAAO,UAAU,QAAQ,wCAAwC,EAAE,KAAK,GAAG;AAC3E,aAAO,UAAU,MAAM,IAAI,qCAAqC,EAAE,KAAK,UAAU;AAAA,IACnF,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AAED,OAAK,0DAA0D,OAAO,EAAE,QAAQ,MAAM;AACpF,UAAM,QAAQ,MAAM,aAAa,SAAS,OAAO;AACjD,QAAI,aAA4B;AAChC,QAAI;AACF,YAAM,cAAc,UAAU,KAAK,IAAI,CAAC;AACxC,mBAAa,MAAM;AAAA,QACjB;AAAA,QACA;AAAA,QACA,yBAAyB;AAAA,UACvB,QAAQ;AAAA,UACR,oBAAoB;AAAA,UACpB,cAAc,EAAE,mBAAmB,YAAY;AAAA,QACjD,CAAC;AAAA,MACH;AACA;AAAA,SACG,MAAM,YAAY,SAAS,OAAO,UAAU,GAAG,MAAM,cAAc;AAAA,QACpE;AAAA,MACF,EAAE,KAAK,WAAW;AAElB,YAAM,OAAO;AACb,YAAM,aAAa,SAAS,KAAK,IAAI,CAAC;AACtC,YAAM,YAAY,MAAM,eAAe,SAAS,OAAO,YAAY;AAAA,QACjE,cAAc,EAAE,mBAAmB,WAAW;AAAA,MAChD,CAAC;AACD,YAAM,WAAW,gBAAgB,WAAW,0BAA0B;AACtE;AAAA,SACG,MAAM,YAAY,SAAS,OAAO,UAAU,GAAG,MAAM,cAAc;AAAA,QACpE;AAAA,MACF,EAAE,KAAK,UAAU;AAEjB,YAAM,OAAO;AACb,YAAM,OAAO,SAAS,OAAO,SAAS,WAAW,0BAA0B;AAC3E;AAAA,SACG,MAAM,YAAY,SAAS,OAAO,UAAU,GAAG,MAAM,cAAc;AAAA,QACpE;AAAA,MACF,EAAE,KAAK,WAAW;AAElB,YAAM,OAAO,SAAS,OAAO,SAAS,OAAO,0BAA0B;AACvE;AAAA,SACG,MAAM,YAAY,SAAS,OAAO,UAAU,GAAG,MAAM,cAAc;AAAA,QACpE;AAAA,MACF,EAAE,KAAK,UAAU;AAAA,IACnB,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,aAAa,UAAU;AAAA,IAC5E;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/checkout",
-  "version": "0.6.5-develop.5169.1.d0671533ca",
+  "version": "0.6.5-develop.5200.1.871eca3402",
   "type": "module",
   "main": "./dist/index.js",
   "scripts": {
@@ -61,18 +61,18 @@
     }
   },
   "dependencies": {
-    "@open-mercato/core": "0.6.5-develop.5169.1.d0671533ca",
-    "@open-mercato/ui": "0.6.5-develop.5169.1.d0671533ca",
+    "@open-mercato/core": "0.6.5-develop.5200.1.871eca3402",
+    "@open-mercato/ui": "0.6.5-develop.5200.1.871eca3402",
     "bcryptjs": "^3.0.3"
   },
   "peerDependencies": {
     "@mikro-orm/postgresql": "^7.0.14",
-    "@open-mercato/shared": "0.6.5-develop.5169.1.d0671533ca",
+    "@open-mercato/shared": "0.6.5-develop.5200.1.871eca3402",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.6.5-develop.5169.1.d0671533ca",
+    "@open-mercato/shared": "0.6.5-develop.5200.1.871eca3402",
     "@types/jest": "^30.0.0",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",

package/src/modules/checkout/__integration__/TC-UNDO-001-no-undo-affordance.spec.ts

@@ -0,0 +1,51 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/helpers/integration/api'
+import { extractOperation, skipIfUndoTestsDisabled } from '@open-mercato/core/helpers/integration/undoHarness'
+import {
+  createCustomerData,
+  createFixedTemplateInput,
+  createLinkFixture,
+  createTemplateFixture,
+  deleteCheckoutEntityIfExists,
+  submitPayLink,
+} from './helpers/fixtures'
+
+/**
+ * TC-UNDO-001 (§4 checkout) — non-undoable commands expose no undo affordance.
+ *
+ * Public checkout submissions create a CheckoutTransaction via the `checkout.transaction.*`
+ * commands, which are intentionally NOT undoable (financial events). The mutating response
+ * must therefore carry no `x-om-operation` undo envelope: `extractOperation(res) === null`.
+ */
+
+test.describe('TC-UNDO-001 checkout §4 — non-undoable commands expose no undo token', () => {
+  test.beforeAll(() => {
+    skipIfUndoTestsDisabled()
+  })
+
+  test('public checkout submit creates a transaction with no undo token', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let templateId: string | null = null
+    let linkId: string | null = null
+    try {
+      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: 'draft' }))
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'active', templateId }))
+      linkId = link.id
+
+      const submitRes = await submitPayLink(request, link.slug, {
+        customerData: createCustomerData(),
+        acceptedLegalConsents: {},
+        amount: 49.99,
+      })
+      expect(submitRes.status(), `submit status ${submitRes.status()}`).toBe(201)
+
+      expect(
+        extractOperation(submitRes),
+        'a financial checkout submit must expose no undo token (§4)',
+      ).toBeNull()
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)
+    }
+  })
+})

package/src/modules/checkout/__integration__/TC-UNDO-001-pay-link.spec.ts

@@ -0,0 +1,266 @@
+import { expect, test, type APIRequestContext } from '@playwright/test'
+import { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api'
+import { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'
+import {
+  expectOperation,
+  undoOk,
+  redoOk,
+  expectTokenConsumed,
+  skipIfUndoTestsDisabled,
+} from '@open-mercato/core/helpers/integration/undoHarness'
+import {
+  createFixedTemplateInput,
+  createLinkFixture,
+  deleteCheckoutEntityIfExists,
+  deleteLink,
+  updateLink,
+} from './helpers/fixtures'
+
+/**
+ * TC-UNDO-001 (§3 checkout.pay-link) — Undo/Redo correctness for the checkout pay-link
+ * command bus, driven through the real `/api/checkout/links` routes plus the
+ * `/api/audit_logs/audit-logs/actions/undo|redo` endpoints.
+ *
+ * Invariants asserted: I1 (update→undo restores), I2 (delete→undo re-materializes),
+ * I3 (create→undo soft-deletes), I4 (custom fields restore), I5 (token consumed),
+ * I6 (redo reproduces post-state). checkout.link.create ships an id-preserving redo
+ * handler, so the create→undo→redo SAME-id leg is asserted as corrected behaviour.
+ *
+ * Also covers the #2540 fix: a draft pay-link may persist a null gatewayProviderKey,
+ * and editing it to null then undoing must restore the prior gateway.
+ */
+
+const LINKS = '/api/checkout/links'
+
+type LinkRecord = {
+  id?: string
+  name?: string
+  slug?: string
+  updatedAt?: string
+  gatewayProviderKey?: string | null
+  customFields?: Record<string, unknown>
+}
+
+// The undo endpoint resolves the *latest* undoable log for a resource ordered by
+// millisecond-precision created_at, so consecutive mutations issued within the same
+// millisecond can tie. A short settle keeps each round-trip deterministic.
+async function settle(): Promise<void> {
+  await new Promise((resolve) => setTimeout(resolve, 50))
+}
+
+async function getLink(
+  request: APIRequestContext,
+  token: string,
+  id: string,
+): Promise<{ status: number; body: LinkRecord | null }> {
+  const res = await apiRequest(request, 'GET', `${LINKS}/${encodeURIComponent(id)}`, { token })
+  return { status: res.status(), body: await readJsonSafe<LinkRecord>(res) }
+}
+
+test.describe('TC-UNDO-001 checkout.pay-link undo/redo', () => {
+  test.beforeAll(() => {
+    skipIfUndoTestsDisabled()
+  })
+
+  test('create → undo soft-deletes (I3) + token consumed (I5)', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let linkId: string | null = null
+    try {
+      const createRes = await apiRequest(request, 'POST', LINKS, {
+        token,
+        data: createFixedTemplateInput({ status: 'draft' }),
+      })
+      expect(createRes.status(), `create status ${createRes.status()}`).toBe(201)
+      const createOp = expectOperation(createRes, 'checkout.link.create')
+      linkId = createOp.resourceId
+      expect(linkId, 'create returns a resource id').toBeTruthy()
+
+      expect((await getLink(request, token, linkId as string)).status, 'pay-link exists after create').toBe(200)
+
+      await undoOk(request, token, createOp.undoToken, 'undo create pay-link')
+      expect(
+        (await getLink(request, token, linkId as string)).status,
+        'pay-link is gone after undoing create (I3 — soft-deleted, not readable)',
+      ).not.toBe(200)
+
+      await expectTokenConsumed(request, token, createOp.undoToken, 'checkout.link.create double-undo (I5)')
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+
+  test('update → undo restores scalars (I1) → redo re-applies (I6)', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let linkId: string | null = null
+    try {
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'draft' }))
+      linkId = link.id
+      const before = await getLink(request, token, linkId)
+      const beforeName = before.body?.name
+      expect(beforeName, 'pay-link name readable before update').toBeTruthy()
+
+      await settle()
+      const changedName = `Renamed by undo test ${Date.now()}`
+      const updateRes = await updateLink(request, token, linkId, { name: changedName })
+      expect(updateRes.status(), `update status ${updateRes.status()}`).toBe(200)
+      const updateOp = expectOperation(updateRes, 'checkout.link.update')
+      expect((await getLink(request, token, linkId)).body?.name, 'update changed the name').toBe(changedName)
+
+      await settle()
+      await undoOk(request, token, updateOp.undoToken, 'undo update pay-link')
+      const afterUndo = await getLink(request, token, linkId)
+      expect(afterUndo.body?.name, 'update→undo restores the prior name (I1)').toBe(beforeName)
+      expect(typeof afterUndo.body?.updatedAt, 'pay-link surfaces updatedAt').toBe('string')
+      expect(afterUndo.body?.updatedAt, 'undo bumps updatedAt (I1)').not.toBe(before.body?.updatedAt)
+
+      await redoOk(request, token, updateOp.logId, 'redo update pay-link')
+      expect((await getLink(request, token, linkId)).body?.name, 'redo re-applies the renamed value (I6)').toBe(changedName)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+
+  test('delete → undo re-materializes (I2) → redo re-deletes (I6)', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let linkId: string | null = null
+    try {
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'draft' }))
+      linkId = link.id
+      const beforeName = (await getLink(request, token, linkId)).body?.name
+
+      await settle()
+      const deleteRes = await deleteLink(request, token, linkId)
+      expect(deleteRes.ok(), `delete status ${deleteRes.status()}`).toBeTruthy()
+      const deleteOp = expectOperation(deleteRes, 'checkout.link.delete')
+      expect((await getLink(request, token, linkId)).status, 'gone after delete').not.toBe(200)
+
+      await undoOk(request, token, deleteOp.undoToken, 'undo delete pay-link')
+      const afterUndo = await getLink(request, token, linkId)
+      expect(afterUndo.status, 'delete→undo re-materializes the row (I2)').toBe(200)
+      expect(afterUndo.body?.name, 're-materialized record keeps its scalars (I2)').toBe(beforeName)
+
+      await redoOk(request, token, deleteOp.logId, 'redo delete pay-link')
+      expect((await getLink(request, token, linkId)).status, 'gone again after redo delete (I6)').not.toBe(200)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+
+  test('create → undo → redo restores the SAME record (I6)', async ({ request }) => {
+    // checkout.link.create registers an id-preserving redo handler, so redo must restore
+    // the original soft-deleted row — not mint a new id (the #2468 customers.people defect).
+    const token = await getAuthToken(request, 'admin')
+    let linkId: string | null = null
+    try {
+      const createRes = await apiRequest(request, 'POST', LINKS, {
+        token,
+        data: createFixedTemplateInput({ status: 'draft' }),
+      })
+      const createOp = expectOperation(createRes, 'checkout.link.create')
+      linkId = createOp.resourceId
+
+      await settle()
+      const undoLogId = await undoOk(request, token, createOp.undoToken, 'undo create pay-link')
+      expect((await getLink(request, token, linkId as string)).status, 'gone after undo create').not.toBe(200)
+
+      await redoOk(request, token, undoLogId, 'redo create pay-link')
+      const afterRedo = await getLink(request, token, linkId as string)
+      expect(afterRedo.status, 'same pay-link restored after redo (I6)').toBe(200)
+      expect(afterRedo.body?.id, 'redo preserves the original id (I6)').toBe(linkId)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+
+  test('custom fields revert on undo and re-apply on redo (I4)', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let linkId: string | null = null
+    try {
+      const beforeValue = `before ${Date.now()}`
+      const link = await createLinkFixture(
+        request,
+        token,
+        createFixedTemplateInput({
+          status: 'draft',
+          customFieldsetCode: 'service_package',
+          customFields: { delivery_timeline: beforeValue },
+        }),
+      )
+      linkId = link.id
+      expect(
+        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,
+        'custom field persisted on create',
+      ).toBe(beforeValue)
+
+      await settle()
+      const afterValue = `after ${Date.now()}`
+      const updateRes = await updateLink(request, token, linkId, { customFields: { delivery_timeline: afterValue } })
+      const updateOp = expectOperation(updateRes, 'checkout.link.update')
+      expect(
+        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,
+        'update changed the custom field',
+      ).toBe(afterValue)
+
+      await settle()
+      await undoOk(request, token, updateOp.undoToken, 'undo update custom field')
+      expect(
+        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,
+        'custom field reverts on undo (I4)',
+      ).toBe(beforeValue)
+
+      await redoOk(request, token, updateOp.logId, 'redo update custom field')
+      expect(
+        (await getLink(request, token, linkId)).body?.customFields?.delivery_timeline,
+        'custom field re-applies on redo (I4)',
+      ).toBe(afterValue)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+
+  test('null gatewayProviderKey edit → undo restores the prior gateway (#2540, I1)', async ({ request }) => {
+    // #2540: a draft pay-link may persist a null gatewayProviderKey. Editing the gateway to
+    // null must round-trip, and undoing the edit must restore the prior gateway value.
+    const token = await getAuthToken(request, 'admin')
+    let linkId: string | null = null
+    try {
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'draft' }))
+      linkId = link.id
+      const before = await getLink(request, token, linkId)
+      expect(before.body?.gatewayProviderKey, 'pay-link starts with the mock gateway').toBe('mock')
+
+      await settle()
+      const updateRes = await updateLink(request, token, linkId, {
+        name: 'Pay link (no gateway)',
+        pricingMode: 'fixed',
+        fixedPriceAmount: 49.99,
+        fixedPriceCurrencyCode: 'USD',
+        status: 'draft',
+        gatewayProviderKey: null,
+      })
+      expect(
+        updateRes.ok(),
+        `clearing the gateway on a draft pay-link should succeed: ${updateRes.status()}`,
+      ).toBeTruthy()
+      const updateOp = expectOperation(updateRes, 'checkout.link.update (null gateway)')
+
+      const afterUpdate = await getLink(request, token, linkId)
+      expect(afterUpdate.body?.gatewayProviderKey ?? null, 'gateway cleared to null after edit').toBeNull()
+      expect(afterUpdate.body?.name, 'name changed by edit').toBe('Pay link (no gateway)')
+
+      await settle()
+      await undoOk(request, token, updateOp.undoToken, 'undo null-gateway edit')
+      const afterUndo = await getLink(request, token, linkId)
+      expect(afterUndo.body?.gatewayProviderKey, 'undo restores the prior gateway (#2540, I1)').toBe('mock')
+      expect(afterUndo.body?.name, 'undo restores the prior name (I1)').toBe(before.body?.name)
+
+      await redoOk(request, token, updateOp.logId, 'redo null-gateway edit')
+      expect(
+        (await getLink(request, token, linkId)).body?.gatewayProviderKey ?? null,
+        'redo re-clears the gateway to null (I6)',
+      ).toBeNull()
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+})

package/src/modules/checkout/__integration__/TC-UNDO-001-template.spec.ts

@@ -0,0 +1,228 @@
+import { expect, test, type APIRequestContext } from '@playwright/test'
+import { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api'
+import { readJsonSafe } from '@open-mercato/core/helpers/integration/generalFixtures'
+import {
+  expectOperation,
+  undoOk,
+  redoOk,
+  expectTokenConsumed,
+  skipIfUndoTestsDisabled,
+} from '@open-mercato/core/helpers/integration/undoHarness'
+import {
+  createFixedTemplateInput,
+  createTemplateFixture,
+  deleteCheckoutEntityIfExists,
+  deleteTemplate,
+  updateTemplate,
+} from './helpers/fixtures'
+
+/**
+ * TC-UNDO-001 (§3 checkout.template) — Undo/Redo correctness for the checkout template
+ * command bus, driven through the real `/api/checkout/templates` routes plus the
+ * `/api/audit_logs/audit-logs/actions/undo|redo` endpoints.
+ *
+ * Invariants asserted (per the #2468 tracking issue):
+ *   I1 update→undo restores scalars (and bumps updatedAt)
+ *   I2 delete→undo re-materializes the soft-deleted row
+ *   I3 create→undo soft-deletes (never hard-deletes)
+ *   I4 custom fields revert on undo and re-apply on redo
+ *   I5 a consumed undo token is rejected on a second undo
+ *   I6 redo reproduces the command's post-state
+ *
+ * Unlike the customers.people pilot (where create→undo→redo mints a new id, #2468),
+ * checkout.template.create ships an id-preserving redo handler, so the SAME-id redo
+ * leg is asserted as corrected behaviour rather than quarantined.
+ */
+
+const TEMPLATES = '/api/checkout/templates'
+
+type TemplateRecord = {
+  id?: string
+  name?: string
+  updatedAt?: string
+  gatewayProviderKey?: string | null
+  customFields?: Record<string, unknown>
+}
+
+// The undo endpoint resolves the *latest* undoable log for a resource ordered by
+// millisecond-precision created_at, so consecutive mutations issued within the same
+// millisecond can tie. A short settle keeps each round-trip deterministic.
+async function settle(): Promise<void> {
+  await new Promise((resolve) => setTimeout(resolve, 50))
+}
+
+async function getTemplate(
+  request: APIRequestContext,
+  token: string,
+  id: string,
+): Promise<{ status: number; body: TemplateRecord | null }> {
+  const res = await apiRequest(request, 'GET', `${TEMPLATES}/${encodeURIComponent(id)}`, { token })
+  return { status: res.status(), body: await readJsonSafe<TemplateRecord>(res) }
+}
+
+test.describe('TC-UNDO-001 checkout.template undo/redo', () => {
+  test.beforeAll(() => {
+    skipIfUndoTestsDisabled()
+  })
+
+  test('create → undo soft-deletes (I3) + token consumed (I5)', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let templateId: string | null = null
+    try {
+      const createRes = await apiRequest(request, 'POST', TEMPLATES, {
+        token,
+        data: createFixedTemplateInput({ status: 'draft' }),
+      })
+      expect(createRes.status(), `create status ${createRes.status()}`).toBe(201)
+      const createOp = expectOperation(createRes, 'checkout.template.create')
+      templateId = createOp.resourceId
+      expect(templateId, 'create returns a resource id').toBeTruthy()
+
+      expect((await getTemplate(request, token, templateId as string)).status, 'template exists after create').toBe(200)
+
+      await undoOk(request, token, createOp.undoToken, 'undo create template')
+      expect(
+        (await getTemplate(request, token, templateId as string)).status,
+        'template is gone after undoing create (I3 — soft-deleted, not readable)',
+      ).not.toBe(200)
+
+      await expectTokenConsumed(request, token, createOp.undoToken, 'checkout.template.create double-undo (I5)')
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)
+    }
+  })
+
+  test('update → undo restores scalars (I1) → redo re-applies (I6)', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let templateId: string | null = null
+    try {
+      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: 'draft' }))
+      const before = await getTemplate(request, token, templateId)
+      const beforeName = before.body?.name
+      expect(beforeName, 'template name readable before update').toBeTruthy()
+
+      await settle()
+      const changedName = `Renamed by undo test ${Date.now()}`
+      const updateRes = await updateTemplate(request, token, templateId, { name: changedName })
+      expect(updateRes.status(), `update status ${updateRes.status()}`).toBe(200)
+      const updateOp = expectOperation(updateRes, 'checkout.template.update')
+      expect((await getTemplate(request, token, templateId)).body?.name, 'update changed the name').toBe(changedName)
+
+      await settle()
+      await undoOk(request, token, updateOp.undoToken, 'undo update template')
+      const afterUndo = await getTemplate(request, token, templateId)
+      expect(afterUndo.body?.name, 'update→undo restores the prior name (I1)').toBe(beforeName)
+      expect(typeof afterUndo.body?.updatedAt, 'template surfaces updatedAt').toBe('string')
+      expect(afterUndo.body?.updatedAt, 'undo bumps updatedAt (I1)').not.toBe(before.body?.updatedAt)
+
+      await redoOk(request, token, updateOp.logId, 'redo update template')
+      expect(
+        (await getTemplate(request, token, templateId)).body?.name,
+        'redo re-applies the renamed value (I6)',
+      ).toBe(changedName)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)
+    }
+  })
+
+  test('delete → undo re-materializes (I2) → redo re-deletes (I6)', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let templateId: string | null = null
+    try {
+      templateId = await createTemplateFixture(request, token, createFixedTemplateInput({ status: 'draft' }))
+      const beforeName = (await getTemplate(request, token, templateId)).body?.name
+
+      await settle()
+      const deleteRes = await deleteTemplate(request, token, templateId)
+      expect(deleteRes.ok(), `delete status ${deleteRes.status()}`).toBeTruthy()
+      const deleteOp = expectOperation(deleteRes, 'checkout.template.delete')
+      expect((await getTemplate(request, token, templateId)).status, 'gone after delete').not.toBe(200)
+
+      await undoOk(request, token, deleteOp.undoToken, 'undo delete template')
+      const afterUndo = await getTemplate(request, token, templateId)
+      expect(afterUndo.status, 'delete→undo re-materializes the row (I2)').toBe(200)
+      expect(afterUndo.body?.name, 're-materialized record keeps its scalars (I2)').toBe(beforeName)
+
+      await redoOk(request, token, deleteOp.logId, 'redo delete template')
+      expect(
+        (await getTemplate(request, token, templateId)).status,
+        'gone again after redo delete (I6)',
+      ).not.toBe(200)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)
+    }
+  })
+
+  test('create → undo → redo restores the SAME record (I6)', async ({ request }) => {
+    // checkout.template.create registers an id-preserving redo handler, so redo must restore
+    // the original soft-deleted row — not mint a new id (the #2468 customers.people defect).
+    const token = await getAuthToken(request, 'admin')
+    let templateId: string | null = null
+    try {
+      const createRes = await apiRequest(request, 'POST', TEMPLATES, {
+        token,
+        data: createFixedTemplateInput({ status: 'draft' }),
+      })
+      const createOp = expectOperation(createRes, 'checkout.template.create')
+      templateId = createOp.resourceId
+
+      await settle()
+      const undoLogId = await undoOk(request, token, createOp.undoToken, 'undo create template')
+      expect((await getTemplate(request, token, templateId as string)).status, 'gone after undo create').not.toBe(200)
+
+      await redoOk(request, token, undoLogId, 'redo create template')
+      const afterRedo = await getTemplate(request, token, templateId as string)
+      expect(afterRedo.status, 'same template restored after redo (I6)').toBe(200)
+      expect(afterRedo.body?.id, 'redo preserves the original id (I6)').toBe(templateId)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)
+    }
+  })
+
+  test('custom fields revert on undo and re-apply on redo (I4)', async ({ request }) => {
+    const token = await getAuthToken(request, 'admin')
+    let templateId: string | null = null
+    try {
+      const beforeValue = `before ${Date.now()}`
+      templateId = await createTemplateFixture(
+        request,
+        token,
+        createFixedTemplateInput({
+          status: 'draft',
+          customFieldsetCode: 'service_package',
+          customFields: { delivery_timeline: beforeValue },
+        }),
+      )
+      expect(
+        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,
+        'custom field persisted on create',
+      ).toBe(beforeValue)
+
+      await settle()
+      const afterValue = `after ${Date.now()}`
+      const updateRes = await updateTemplate(request, token, templateId, {
+        customFields: { delivery_timeline: afterValue },
+      })
+      const updateOp = expectOperation(updateRes, 'checkout.template.update')
+      expect(
+        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,
+        'update changed the custom field',
+      ).toBe(afterValue)
+
+      await settle()
+      await undoOk(request, token, updateOp.undoToken, 'undo update custom field')
+      expect(
+        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,
+        'custom field reverts on undo (I4)',
+      ).toBe(beforeValue)
+
+      await redoOk(request, token, updateOp.logId, 'redo update custom field')
+      expect(
+        (await getTemplate(request, token, templateId)).body?.customFields?.delivery_timeline,
+        'custom field re-applies on redo (I4)',
+      ).toBe(afterValue)
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'templates', templateId)
+    }
+  })
+})