@open-mercato/checkout 0.6.7-develop.6696.1.4236709f7e → 0.6.7-develop.6725.1.07a748cfc2

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:checkout] found 157 entry points
+[build:checkout] found 159 entry points
 [build:checkout] built successfully

package/dist/modules/checkout/__integration__/TC-CHKT-042.spec.js

@@ -0,0 +1,39 @@
+import { expect, test } from "@playwright/test";
+import { getAuthToken } from "@open-mercato/core/modules/core/__integration__/helpers/api";
+import {
+  createCustomerData,
+  createFixedTemplateInput,
+  createLinkFixture,
+  deleteCheckoutEntityIfExists,
+  listCheckoutTransactions,
+  submitPayLink
+} from "./helpers/fixtures.js";
+test.describe("TC-CHKT-042: Transaction search over encrypted customer data", () => {
+  test("finds a newly created transaction through its token index", async ({ request }) => {
+    const email = `token-search-${Date.now()}@example.test`;
+    let token = null;
+    let linkId = null;
+    try {
+      token = await getAuthToken(request);
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: "active" }));
+      linkId = link.id;
+      const submitted = await submitPayLink(request, link.slug, {
+        customerData: createCustomerData({ email }),
+        acceptedLegalConsents: {},
+        amount: 49.99
+      });
+      expect(submitted.ok()).toBeTruthy();
+      await expect.poll(async () => {
+        const result = await listCheckoutTransactions(
+          request,
+          token,
+          `search=${encodeURIComponent(email)}&page=1&pageSize=10`
+        );
+        return result.items.some((item) => item.email === email);
+      }, { timeout: 15e3 }).toBeTruthy();
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, "links", linkId);
+    }
+  });
+});
+//# sourceMappingURL=TC-CHKT-042.spec.js.map

package/dist/modules/checkout/__integration__/TC-CHKT-042.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/__integration__/TC-CHKT-042.spec.ts"],
+  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'\nimport {\n  createCustomerData,\n  createFixedTemplateInput,\n  createLinkFixture,\n  deleteCheckoutEntityIfExists,\n  listCheckoutTransactions,\n  submitPayLink,\n} from './helpers/fixtures'\n\ntest.describe('TC-CHKT-042: Transaction search over encrypted customer data', () => {\n  test('finds a newly created transaction through its token index', async ({ request }) => {\n    const email = `token-search-${Date.now()}@example.test`\n    let token: string | null = null\n    let linkId: string | null = null\n\n    try {\n      token = await getAuthToken(request)\n      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'active' }))\n      linkId = link.id\n      const submitted = await submitPayLink(request, link.slug, {\n        customerData: createCustomerData({ email }),\n        acceptedLegalConsents: {},\n        amount: 49.99,\n      })\n      expect(submitted.ok()).toBeTruthy()\n\n      await expect.poll(async () => {\n        const result = await listCheckoutTransactions(\n          request,\n          token!,\n          `search=${encodeURIComponent(email)}&page=1&pageSize=10`,\n        )\n        return result.items.some((item) => item.email === email)\n      }, { timeout: 15_000 }).toBeTruthy()\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,KAAK,SAAS,gEAAgE,MAAM;AAClF,OAAK,6DAA6D,OAAO,EAAE,QAAQ,MAAM;AACvF,UAAM,QAAQ,gBAAgB,KAAK,IAAI,CAAC;AACxC,QAAI,QAAuB;AAC3B,QAAI,SAAwB;AAE5B,QAAI;AACF,cAAQ,MAAM,aAAa,OAAO;AAClC,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO,yBAAyB,EAAE,QAAQ,SAAS,CAAC,CAAC;AACnG,eAAS,KAAK;AACd,YAAM,YAAY,MAAM,cAAc,SAAS,KAAK,MAAM;AAAA,QACxD,cAAc,mBAAmB,EAAE,MAAM,CAAC;AAAA,QAC1C,uBAAuB,CAAC;AAAA,QACxB,QAAQ;AAAA,MACV,CAAC;AACD,aAAO,UAAU,GAAG,CAAC,EAAE,WAAW;AAElC,YAAM,OAAO,KAAK,YAAY;AAC5B,cAAM,SAAS,MAAM;AAAA,UACnB;AAAA,UACA;AAAA,UACA,UAAU,mBAAmB,KAAK,CAAC;AAAA,QACrC;AACA,eAAO,OAAO,MAAM,KAAK,CAAC,SAAS,KAAK,UAAU,KAAK;AAAA,MACzD,GAAG,EAAE,SAAS,KAAO,CAAC,EAAE,WAAW;AAAA,IACrC,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/checkout/api/transactions/route.js

@@ -1,10 +1,13 @@
 import { NextResponse } from "next/server";
 import { findAndCountWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
+import { findEntityIdsBySearchTokens } from "@open-mercato/shared/lib/search/tokenLookup";
 import { CheckoutLink, CheckoutTransaction } from "../../data/entities.js";
+import { CHECKOUT_ENTITY_IDS } from "../../lib/constants.js";
 import { handleCheckoutRouteError, requireAdminContext, userHasCheckoutFeature } from "../helpers.js";
 import { checkoutTag } from "../openapi.js";
 import { serializeTransaction } from "../../lib/utils.js";
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 const metadata = {
   path: "/checkout/transactions",
   GET: { requireAuth: true, requireFeatures: ["checkout.view"] }
@@ -25,12 +28,26 @@ async function GET(req) {
     };
     if (linkId) where.linkId = linkId;
     if (status) where.status = status;
-    if (search) where.$or = [
-      { email: { $ilike: `%${escapeLikePattern(search)}%` } },
-      { firstName: { $ilike: `%${escapeLikePattern(search)}%` } },
-      { lastName: { $ilike: `%${escapeLikePattern(search)}%` } },
-      { id: { $ilike: `%${escapeLikePattern(search)}%` } }
-    ];
+    if (search) {
+      const pattern = `%${escapeLikePattern(search)}%`;
+      const searchOr = [
+        { email: { $ilike: pattern } },
+        { firstName: { $ilike: pattern } },
+        { lastName: { $ilike: pattern } }
+      ];
+      if (UUID_PATTERN.test(search)) searchOr.push({ id: search });
+      const tokenMatch = await findEntityIdsBySearchTokens({
+        db: em.getKysely(),
+        entityType: CHECKOUT_ENTITY_IDS.transaction,
+        query: search,
+        fields: ["email", "first_name", "last_name"],
+        scope: { tenantId: auth.tenantId, organizationId: auth.orgId }
+      });
+      if (tokenMatch.matched && tokenMatch.ids.length) {
+        searchOr.push({ id: { $in: tokenMatch.ids } });
+      }
+      where.$or = searchOr;
+    }
     const [items, total] = await findAndCountWithDecryption(
       em,
       CheckoutTransaction,

package/dist/modules/checkout/api/transactions/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/checkout/api/transactions/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { CheckoutLink, CheckoutTransaction } from '../../data/entities'\nimport { handleCheckoutRouteError, requireAdminContext, userHasCheckoutFeature } from '../helpers'\nimport { checkoutTag } from '../openapi'\nimport { serializeTransaction } from '../../lib/utils'\n\nexport const metadata = {\n  path: '/checkout/transactions',\n  GET: { requireAuth: true, requireFeatures: ['checkout.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { auth, container, em } = await requireAdminContext(req)\n    const canViewPii = await userHasCheckoutFeature(container, auth, 'checkout.viewPii')\n    const url = new URL(req.url)\n    const page = Math.max(1, Number(url.searchParams.get('page') ?? '1'))\n    const pageSize = Math.min(100, Math.max(1, Number(url.searchParams.get('pageSize') ?? '25')))\n    const search = (url.searchParams.get('search') ?? '').trim()\n    const linkId = url.searchParams.get('linkId')\n    const status = url.searchParams.get('status')\n    const where: Record<string, unknown> = {\n      organizationId: auth.orgId,\n      tenantId: auth.tenantId,\n    }\n    if (linkId) where.linkId = linkId\n    if (status) where.status = status\n    if (search) where.$or = [\n      { email: { $ilike: `%${escapeLikePattern(search)}%` } },\n      { firstName: { $ilike: `%${escapeLikePattern(search)}%` } },\n      { lastName: { $ilike: `%${escapeLikePattern(search)}%` } },\n      { id: { $ilike: `%${escapeLikePattern(search)}%` } },\n    ]\n    const [items, total] = await findAndCountWithDecryption(\n      em,\n      CheckoutTransaction,\n      where,\n      {\n        orderBy: { createdAt: 'desc' },\n        offset: (page - 1) * pageSize,\n        limit: pageSize,\n      },\n      { organizationId: auth.orgId, tenantId: auth.tenantId },\n    )\n    const linkIds = Array.from(new Set(items.map((item) => item.linkId)))\n    const links = linkIds.length\n      ? await findWithDecryption(em, CheckoutLink, {\n        id: { $in: linkIds },\n        organizationId: auth.orgId,\n        tenantId: auth.tenantId,\n        deletedAt: null,\n      }, undefined, { organizationId: auth.orgId, tenantId: auth.tenantId })\n      : []\n    const linkMap = new Map(links.map((link) => [link.id, link]))\n    return NextResponse.json({\n      items: items.map((item) => serializeTransaction(item, linkMap.get(item.linkId) ?? null, canViewPii)),\n      total,\n      page,\n      pageSize,\n      totalPages: Math.max(1, Math.ceil(total / pageSize)),\n      canViewPii,\n    })\n  } catch (error) {\n    return handleCheckoutRouteError(error)\n  }\n}\n\nexport const openApi = {\n  tags: [checkoutTag],\n}\n\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,cAAc,2BAA2B;AAClD,SAAS,0BAA0B,qBAAqB,8BAA8B;AACtF,SAAS,mBAAmB;AAC5B,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,MAAM,WAAW,GAAG,IAAI,MAAM,oBAAoB,GAAG;AAC7D,UAAM,aAAa,MAAM,uBAAuB,WAAW,MAAM,kBAAkB;AACnF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,OAAO,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK,GAAG,CAAC;AACpE,UAAM,WAAW,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;AAC5F,UAAM,UAAU,IAAI,aAAa,IAAI,QAAQ,KAAK,IAAI,KAAK;AAC3D,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,UAAM,QAAiC;AAAA,MACrC,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AACA,QAAI,OAAQ,OAAM,SAAS;AAC3B,QAAI,OAAQ,OAAM,SAAS;AAC3B,QAAI,OAAQ,OAAM,MAAM;AAAA,MACtB,EAAE,OAAO,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI,EAAE;AAAA,MACtD,EAAE,WAAW,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI,EAAE;AAAA,MAC1D,EAAE,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI,EAAE;AAAA,MACzD,EAAE,IAAI,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI,EAAE;AAAA,IACrD;AACA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B,SAAS,OAAO,KAAK;AAAA,QACrB,OAAO;AAAA,MACT;AAAA,MACA,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS;AAAA,IACxD;AACA,UAAM,UAAU,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;AACpE,UAAM,QAAQ,QAAQ,SAClB,MAAM,mBAAmB,IAAI,cAAc;AAAA,MAC3C,IAAI,EAAE,KAAK,QAAQ;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb,GAAG,QAAW,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS,CAAC,IACnE,CAAC;AACL,UAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5D,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,MAAM,IAAI,CAAC,SAAS,qBAAqB,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK,MAAM,UAAU,CAAC;AAAA,MACnG;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,yBAAyB,KAAK;AAAA,EACvC;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AACpB;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { findEntityIdsBySearchTokens, type SearchTokenDatabase } from '@open-mercato/shared/lib/search/tokenLookup'\nimport { CheckoutLink, CheckoutTransaction } from '../../data/entities'\nimport { CHECKOUT_ENTITY_IDS } from '../../lib/constants'\nimport { handleCheckoutRouteError, requireAdminContext, userHasCheckoutFeature } from '../helpers'\nimport { checkoutTag } from '../openapi'\nimport { serializeTransaction } from '../../lib/utils'\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\n\nexport const metadata = {\n  path: '/checkout/transactions',\n  GET: { requireAuth: true, requireFeatures: ['checkout.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { auth, container, em } = await requireAdminContext(req)\n    const canViewPii = await userHasCheckoutFeature(container, auth, 'checkout.viewPii')\n    const url = new URL(req.url)\n    const page = Math.max(1, Number(url.searchParams.get('page') ?? '1'))\n    const pageSize = Math.min(100, Math.max(1, Number(url.searchParams.get('pageSize') ?? '25')))\n    const search = (url.searchParams.get('search') ?? '').trim()\n    const linkId = url.searchParams.get('linkId')\n    const status = url.searchParams.get('status')\n    const where: Record<string, unknown> = {\n      organizationId: auth.orgId,\n      tenantId: auth.tenantId,\n    }\n    if (linkId) where.linkId = linkId\n    if (status) where.status = status\n    if (search) {\n      const pattern = `%${escapeLikePattern(search)}%`\n      // email/first_name/last_name are covered by the checkout encryption map,\n      // so an ILIKE alone compares the pattern against ciphertext and matches\n      // nothing once encryption is on. Union it with the token index, which\n      // stores hashes of the plaintext. Issue #2990.\n      const searchOr: Record<string, unknown>[] = [\n        { email: { $ilike: pattern } },\n        { firstName: { $ilike: pattern } },\n        { lastName: { $ilike: pattern } },\n      ]\n      // `id` is a uuid column: ILIKE against it has no Postgres operator and\n      // raises 42883, so only an exact id lookup is meaningful here.\n      if (UUID_PATTERN.test(search)) searchOr.push({ id: search })\n      const tokenMatch = await findEntityIdsBySearchTokens({\n        db: em.getKysely<SearchTokenDatabase>(),\n        entityType: CHECKOUT_ENTITY_IDS.transaction,\n        query: search,\n        fields: ['email', 'first_name', 'last_name'],\n        scope: { tenantId: auth.tenantId, organizationId: auth.orgId },\n      })\n      if (tokenMatch.matched && tokenMatch.ids.length) {\n        searchOr.push({ id: { $in: tokenMatch.ids } })\n      }\n      where.$or = searchOr\n    }\n    const [items, total] = await findAndCountWithDecryption(\n      em,\n      CheckoutTransaction,\n      where,\n      {\n        orderBy: { createdAt: 'desc' },\n        offset: (page - 1) * pageSize,\n        limit: pageSize,\n      },\n      { organizationId: auth.orgId, tenantId: auth.tenantId },\n    )\n    const linkIds = Array.from(new Set(items.map((item) => item.linkId)))\n    const links = linkIds.length\n      ? await findWithDecryption(em, CheckoutLink, {\n        id: { $in: linkIds },\n        organizationId: auth.orgId,\n        tenantId: auth.tenantId,\n        deletedAt: null,\n      }, undefined, { organizationId: auth.orgId, tenantId: auth.tenantId })\n      : []\n    const linkMap = new Map(links.map((link) => [link.id, link]))\n    return NextResponse.json({\n      items: items.map((item) => serializeTransaction(item, linkMap.get(item.linkId) ?? null, canViewPii)),\n      total,\n      page,\n      pageSize,\n      totalPages: Math.max(1, Math.ceil(total / pageSize)),\n      canViewPii,\n    })\n  } catch (error) {\n    return handleCheckoutRouteError(error)\n  }\n}\n\nexport const openApi = {\n  tags: [checkoutTag],\n}\n\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,mCAA6D;AACtE,SAAS,cAAc,2BAA2B;AAClD,SAAS,2BAA2B;AACpC,SAAS,0BAA0B,qBAAqB,8BAA8B;AACtF,SAAS,mBAAmB;AAC5B,SAAS,4BAA4B;AAErC,MAAM,eAAe;AAEd,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,MAAM,WAAW,GAAG,IAAI,MAAM,oBAAoB,GAAG;AAC7D,UAAM,aAAa,MAAM,uBAAuB,WAAW,MAAM,kBAAkB;AACnF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,OAAO,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK,GAAG,CAAC;AACpE,UAAM,WAAW,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;AAC5F,UAAM,UAAU,IAAI,aAAa,IAAI,QAAQ,KAAK,IAAI,KAAK;AAC3D,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,UAAM,QAAiC;AAAA,MACrC,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AACA,QAAI,OAAQ,OAAM,SAAS;AAC3B,QAAI,OAAQ,OAAM,SAAS;AAC3B,QAAI,QAAQ;AACV,YAAM,UAAU,IAAI,kBAAkB,MAAM,CAAC;AAK7C,YAAM,WAAsC;AAAA,QAC1C,EAAE,OAAO,EAAE,QAAQ,QAAQ,EAAE;AAAA,QAC7B,EAAE,WAAW,EAAE,QAAQ,QAAQ,EAAE;AAAA,QACjC,EAAE,UAAU,EAAE,QAAQ,QAAQ,EAAE;AAAA,MAClC;AAGA,UAAI,aAAa,KAAK,MAAM,EAAG,UAAS,KAAK,EAAE,IAAI,OAAO,CAAC;AAC3D,YAAM,aAAa,MAAM,4BAA4B;AAAA,QACnD,IAAI,GAAG,UAA+B;AAAA,QACtC,YAAY,oBAAoB;AAAA,QAChC,OAAO;AAAA,QACP,QAAQ,CAAC,SAAS,cAAc,WAAW;AAAA,QAC3C,OAAO,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,MAC/D,CAAC;AACD,UAAI,WAAW,WAAW,WAAW,IAAI,QAAQ;AAC/C,iBAAS,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,CAAC;AAAA,MAC/C;AACA,YAAM,MAAM;AAAA,IACd;AACA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B,SAAS,OAAO,KAAK;AAAA,QACrB,OAAO;AAAA,MACT;AAAA,MACA,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS;AAAA,IACxD;AACA,UAAM,UAAU,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;AACpE,UAAM,QAAQ,QAAQ,SAClB,MAAM,mBAAmB,IAAI,cAAc;AAAA,MAC3C,IAAI,EAAE,KAAK,QAAQ;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb,GAAG,QAAW,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS,CAAC,IACnE,CAAC;AACL,UAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5D,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,MAAM,IAAI,CAAC,SAAS,qBAAqB,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK,MAAM,UAAU,CAAC;AAAA,MACnG;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,yBAAyB,KAAK;AAAA,EACvC;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AACpB;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/checkout/search.js

@@ -41,6 +41,36 @@ const searchConfig = {
         subtitle: "Link Template",
         icon: "lucide:file-text"
       })
+    },
+    {
+      entityId: CHECKOUT_ENTITY_IDS.transaction,
+      enabled: true,
+      priority: 6,
+      fieldPolicy: {
+        searchable: ["email", "firstName", "lastName"]
+      },
+      buildSource: async (ctx) => ({
+        text: [
+          asSearchText(ctx.record.email),
+          asSearchText(ctx.record.firstName),
+          asSearchText(ctx.record.lastName)
+        ],
+        fields: {
+          email: ctx.record.email,
+          first_name: ctx.record.firstName,
+          last_name: ctx.record.lastName
+        },
+        presenter: {
+          title: asSearchText(ctx.record.email),
+          subtitle: `${asSearchText(ctx.record.firstName)} ${asSearchText(ctx.record.lastName)}`.trim()
+        },
+        checksumSource: { record: ctx.record }
+      }),
+      formatResult: async (ctx) => ({
+        title: asSearchText(ctx.record.email),
+        subtitle: `${asSearchText(ctx.record.firstName)} ${asSearchText(ctx.record.lastName)}`.trim(),
+        icon: "lucide:receipt"
+      })
     }
   ]
 };

package/dist/modules/checkout/search.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/checkout/search.ts"],
-  "sourcesContent": ["import type { SearchModuleConfig } from '@open-mercato/shared/modules/search'\nimport { CHECKOUT_ENTITY_IDS } from './lib/constants'\n\nfunction asSearchText(value: unknown): string {\n  return typeof value === 'string' ? value : ''\n}\n\nexport const searchConfig: SearchModuleConfig = {\n  entities: [\n    {\n      entityId: CHECKOUT_ENTITY_IDS.link,\n      enabled: true,\n      priority: 10,\n      fieldPolicy: {\n        searchable: ['name', 'title', 'slug'],\n        excluded: ['passwordHash', 'gatewaySettings', 'customerFieldsSchema'],\n      },\n      buildSource: async (ctx) => ({\n        text: [`${asSearchText(ctx.record.name)}: ${asSearchText(ctx.record.title)} (${asSearchText(ctx.record.slug)})`],\n        presenter: { title: asSearchText(ctx.record.name), subtitle: asSearchText(ctx.record.slug) },\n        checksumSource: { record: ctx.record, customFields: ctx.customFields },\n      }),\n      formatResult: async (ctx) => ({\n        title: asSearchText(ctx.record.name),\n        subtitle: `/pay/${asSearchText(ctx.record.slug)}`,\n        icon: 'lucide:link',\n      }),\n    },\n    {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      enabled: true,\n      priority: 8,\n      fieldPolicy: {\n        searchable: ['name', 'title'],\n        excluded: ['passwordHash', 'gatewaySettings', 'customerFieldsSchema'],\n      },\n      buildSource: async (ctx) => ({\n        text: [`${asSearchText(ctx.record.name)}: ${asSearchText(ctx.record.title)}`],\n        presenter: { title: asSearchText(ctx.record.name), subtitle: 'Link Template' },\n        checksumSource: { record: ctx.record, customFields: ctx.customFields },\n      }),\n      formatResult: async (ctx) => ({\n        title: asSearchText(ctx.record.name),\n        subtitle: 'Link Template',\n        icon: 'lucide:file-text',\n      }),\n    },\n  ],\n}\n\nexport const config = searchConfig\nexport default searchConfig\n"],
-  "mappings": "AACA,SAAS,2BAA2B;AAEpC,SAAS,aAAa,OAAwB;AAC5C,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEO,MAAM,eAAmC;AAAA,EAC9C,UAAU;AAAA,IACR;AAAA,MACE,UAAU,oBAAoB;AAAA,MAC9B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,SAAS,MAAM;AAAA,QACpC,UAAU,CAAC,gBAAgB,mBAAmB,sBAAsB;AAAA,MACtE;AAAA,MACA,aAAa,OAAO,SAAS;AAAA,QAC3B,MAAM,CAAC,GAAG,aAAa,IAAI,OAAO,IAAI,CAAC,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,KAAK,aAAa,IAAI,OAAO,IAAI,CAAC,GAAG;AAAA,QAC/G,WAAW,EAAE,OAAO,aAAa,IAAI,OAAO,IAAI,GAAG,UAAU,aAAa,IAAI,OAAO,IAAI,EAAE;AAAA,QAC3F,gBAAgB,EAAE,QAAQ,IAAI,QAAQ,cAAc,IAAI,aAAa;AAAA,MACvE;AAAA,MACA,cAAc,OAAO,SAAS;AAAA,QAC5B,OAAO,aAAa,IAAI,OAAO,IAAI;AAAA,QACnC,UAAU,QAAQ,aAAa,IAAI,OAAO,IAAI,CAAC;AAAA,QAC/C,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU,oBAAoB;AAAA,MAC9B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,OAAO;AAAA,QAC5B,UAAU,CAAC,gBAAgB,mBAAmB,sBAAsB;AAAA,MACtE;AAAA,MACA,aAAa,OAAO,SAAS;AAAA,QAC3B,MAAM,CAAC,GAAG,aAAa,IAAI,OAAO,IAAI,CAAC,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,EAAE;AAAA,QAC5E,WAAW,EAAE,OAAO,aAAa,IAAI,OAAO,IAAI,GAAG,UAAU,gBAAgB;AAAA,QAC7E,gBAAgB,EAAE,QAAQ,IAAI,QAAQ,cAAc,IAAI,aAAa;AAAA,MACvE;AAAA,MACA,cAAc,OAAO,SAAS;AAAA,QAC5B,OAAO,aAAa,IAAI,OAAO,IAAI;AAAA,QACnC,UAAU;AAAA,QACV,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEO,MAAM,SAAS;AACtB,IAAO,iBAAQ;",
+  "sourcesContent": ["import type { SearchModuleConfig } from '@open-mercato/shared/modules/search'\nimport { CHECKOUT_ENTITY_IDS } from './lib/constants'\n\nfunction asSearchText(value: unknown): string {\n  return typeof value === 'string' ? value : ''\n}\n\nexport const searchConfig: SearchModuleConfig = {\n  entities: [\n    {\n      entityId: CHECKOUT_ENTITY_IDS.link,\n      enabled: true,\n      priority: 10,\n      fieldPolicy: {\n        searchable: ['name', 'title', 'slug'],\n        excluded: ['passwordHash', 'gatewaySettings', 'customerFieldsSchema'],\n      },\n      buildSource: async (ctx) => ({\n        text: [`${asSearchText(ctx.record.name)}: ${asSearchText(ctx.record.title)} (${asSearchText(ctx.record.slug)})`],\n        presenter: { title: asSearchText(ctx.record.name), subtitle: asSearchText(ctx.record.slug) },\n        checksumSource: { record: ctx.record, customFields: ctx.customFields },\n      }),\n      formatResult: async (ctx) => ({\n        title: asSearchText(ctx.record.name),\n        subtitle: `/pay/${asSearchText(ctx.record.slug)}`,\n        icon: 'lucide:link',\n      }),\n    },\n    {\n      entityId: CHECKOUT_ENTITY_IDS.template,\n      enabled: true,\n      priority: 8,\n      fieldPolicy: {\n        searchable: ['name', 'title'],\n        excluded: ['passwordHash', 'gatewaySettings', 'customerFieldsSchema'],\n      },\n      buildSource: async (ctx) => ({\n        text: [`${asSearchText(ctx.record.name)}: ${asSearchText(ctx.record.title)}`],\n        presenter: { title: asSearchText(ctx.record.name), subtitle: 'Link Template' },\n        checksumSource: { record: ctx.record, customFields: ctx.customFields },\n      }),\n      formatResult: async (ctx) => ({\n        title: asSearchText(ctx.record.name),\n        subtitle: 'Link Template',\n        icon: 'lucide:file-text',\n      }),\n    },\n    {\n      entityId: CHECKOUT_ENTITY_IDS.transaction,\n      enabled: true,\n      priority: 6,\n      fieldPolicy: {\n        searchable: ['email', 'firstName', 'lastName'],\n      },\n      buildSource: async (ctx) => ({\n        text: [\n          asSearchText(ctx.record.email),\n          asSearchText(ctx.record.firstName),\n          asSearchText(ctx.record.lastName),\n        ],\n        fields: {\n          email: ctx.record.email,\n          first_name: ctx.record.firstName,\n          last_name: ctx.record.lastName,\n        },\n        presenter: {\n          title: asSearchText(ctx.record.email),\n          subtitle: `${asSearchText(ctx.record.firstName)} ${asSearchText(ctx.record.lastName)}`.trim(),\n        },\n        checksumSource: { record: ctx.record },\n      }),\n      formatResult: async (ctx) => ({\n        title: asSearchText(ctx.record.email),\n        subtitle: `${asSearchText(ctx.record.firstName)} ${asSearchText(ctx.record.lastName)}`.trim(),\n        icon: 'lucide:receipt',\n      }),\n    },\n  ],\n}\n\nexport const config = searchConfig\nexport default searchConfig\n"],
+  "mappings": "AACA,SAAS,2BAA2B;AAEpC,SAAS,aAAa,OAAwB;AAC5C,SAAO,OAAO,UAAU,WAAW,QAAQ;AAC7C;AAEO,MAAM,eAAmC;AAAA,EAC9C,UAAU;AAAA,IACR;AAAA,MACE,UAAU,oBAAoB;AAAA,MAC9B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,SAAS,MAAM;AAAA,QACpC,UAAU,CAAC,gBAAgB,mBAAmB,sBAAsB;AAAA,MACtE;AAAA,MACA,aAAa,OAAO,SAAS;AAAA,QAC3B,MAAM,CAAC,GAAG,aAAa,IAAI,OAAO,IAAI,CAAC,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,KAAK,aAAa,IAAI,OAAO,IAAI,CAAC,GAAG;AAAA,QAC/G,WAAW,EAAE,OAAO,aAAa,IAAI,OAAO,IAAI,GAAG,UAAU,aAAa,IAAI,OAAO,IAAI,EAAE;AAAA,QAC3F,gBAAgB,EAAE,QAAQ,IAAI,QAAQ,cAAc,IAAI,aAAa;AAAA,MACvE;AAAA,MACA,cAAc,OAAO,SAAS;AAAA,QAC5B,OAAO,aAAa,IAAI,OAAO,IAAI;AAAA,QACnC,UAAU,QAAQ,aAAa,IAAI,OAAO,IAAI,CAAC;AAAA,QAC/C,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU,oBAAoB;AAAA,MAC9B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa;AAAA,QACX,YAAY,CAAC,QAAQ,OAAO;AAAA,QAC5B,UAAU,CAAC,gBAAgB,mBAAmB,sBAAsB;AAAA,MACtE;AAAA,MACA,aAAa,OAAO,SAAS;AAAA,QAC3B,MAAM,CAAC,GAAG,aAAa,IAAI,OAAO,IAAI,CAAC,KAAK,aAAa,IAAI,OAAO,KAAK,CAAC,EAAE;AAAA,QAC5E,WAAW,EAAE,OAAO,aAAa,IAAI,OAAO,IAAI,GAAG,UAAU,gBAAgB;AAAA,QAC7E,gBAAgB,EAAE,QAAQ,IAAI,QAAQ,cAAc,IAAI,aAAa;AAAA,MACvE;AAAA,MACA,cAAc,OAAO,SAAS;AAAA,QAC5B,OAAO,aAAa,IAAI,OAAO,IAAI;AAAA,QACnC,UAAU;AAAA,QACV,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA;AAAA,MACE,UAAU,oBAAoB;AAAA,MAC9B,SAAS;AAAA,MACT,UAAU;AAAA,MACV,aAAa;AAAA,QACX,YAAY,CAAC,SAAS,aAAa,UAAU;AAAA,MAC/C;AAAA,MACA,aAAa,OAAO,SAAS;AAAA,QAC3B,MAAM;AAAA,UACJ,aAAa,IAAI,OAAO,KAAK;AAAA,UAC7B,aAAa,IAAI,OAAO,SAAS;AAAA,UACjC,aAAa,IAAI,OAAO,QAAQ;AAAA,QAClC;AAAA,QACA,QAAQ;AAAA,UACN,OAAO,IAAI,OAAO;AAAA,UAClB,YAAY,IAAI,OAAO;AAAA,UACvB,WAAW,IAAI,OAAO;AAAA,QACxB;AAAA,QACA,WAAW;AAAA,UACT,OAAO,aAAa,IAAI,OAAO,KAAK;AAAA,UACpC,UAAU,GAAG,aAAa,IAAI,OAAO,SAAS,CAAC,IAAI,aAAa,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK;AAAA,QAC9F;AAAA,QACA,gBAAgB,EAAE,QAAQ,IAAI,OAAO;AAAA,MACvC;AAAA,MACA,cAAc,OAAO,SAAS;AAAA,QAC5B,OAAO,aAAa,IAAI,OAAO,KAAK;AAAA,QACpC,UAAU,GAAG,aAAa,IAAI,OAAO,SAAS,CAAC,IAAI,aAAa,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK;AAAA,QAC5F,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEO,MAAM,SAAS;AACtB,IAAO,iBAAQ;",
   "names": []
 }

package/dist/modules/checkout/setup.js

@@ -1,12 +1,40 @@
+import { createHash } from "node:crypto";
 import { ensureCheckoutFieldsetsAndDefinitions } from "./seed/customFields.js";
 import { seedCheckoutExamples } from "./seed/examples.js";
+import { CHECKOUT_EXPIRY_QUEUE } from "./workers/transaction-expiry.worker.js";
 import { DEFAULT_CHECKOUT_CUSTOMER_FIELDS } from "./lib/defaults.js";
+function stableUuidFromString(input) {
+  const bytes = createHash("sha256").update(input).digest().subarray(0, 16);
+  bytes[6] = bytes[6] & 15 | 80;
+  bytes[8] = bytes[8] & 63 | 128;
+  const hex = Buffer.from(bytes).toString("hex");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`;
+}
 const setup = {
   async seedDefaults(ctx) {
     await ensureCheckoutFieldsetsAndDefinitions(ctx.em, {
       tenantId: ctx.tenantId,
       organizationId: ctx.organizationId
     });
+    const cradle = ctx.container;
+    if (typeof cradle.hasRegistration !== "function" || !cradle.hasRegistration("schedulerService")) return;
+    const schedulerService = ctx.container.resolve("schedulerService");
+    await schedulerService.register({
+      id: stableUuidFromString(`checkout:transaction-expiry:${ctx.tenantId}:${ctx.organizationId}`),
+      name: "Checkout transaction expiry",
+      description: "Marks stale checkout transactions as expired and runs usage limit updates.",
+      scopeType: "organization",
+      organizationId: ctx.organizationId,
+      tenantId: ctx.tenantId,
+      scheduleType: "interval",
+      scheduleValue: "10m",
+      timezone: "UTC",
+      targetType: "queue",
+      targetQueue: CHECKOUT_EXPIRY_QUEUE,
+      sourceType: "module",
+      sourceModule: "checkout",
+      isEnabled: true
+    });
   },
   defaultRoleFeatures: {
     superadmin: ["checkout.*"],

package/dist/modules/checkout/setup.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/checkout/setup.ts"],
-  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { ensureCheckoutFieldsetsAndDefinitions } from './seed/customFields'\nimport { seedCheckoutExamples } from './seed/examples'\nexport { DEFAULT_CHECKOUT_CUSTOMER_FIELDS } from './lib/defaults'\n\nexport const setup: ModuleSetupConfig = {\n  async seedDefaults(ctx) {\n    await ensureCheckoutFieldsetsAndDefinitions(ctx.em, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    })\n  },\n\n  defaultRoleFeatures: {\n    superadmin: ['checkout.*'],\n    admin: ['checkout.view', 'checkout.create', 'checkout.edit', 'checkout.delete', 'checkout.viewPii', 'checkout.export'],\n    employee: ['checkout.view'],\n  },\n\n  async seedExamples(ctx) {\n    await seedCheckoutExamples(ctx)\n  },\n}\n\nexport default setup\n"],
-  "mappings": "AACA,SAAS,6CAA6C;AACtD,SAAS,4BAA4B;AACrC,SAAS,wCAAwC;AAE1C,MAAM,QAA2B;AAAA,EACtC,MAAM,aAAa,KAAK;AACtB,UAAM,sCAAsC,IAAI,IAAI;AAAA,MAClD,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEA,qBAAqB;AAAA,IACnB,YAAY,CAAC,YAAY;AAAA,IACzB,OAAO,CAAC,iBAAiB,mBAAmB,iBAAiB,mBAAmB,oBAAoB,iBAAiB;AAAA,IACrH,UAAU,CAAC,eAAe;AAAA,EAC5B;AAAA,EAEA,MAAM,aAAa,KAAK;AACtB,UAAM,qBAAqB,GAAG;AAAA,EAChC;AACF;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'\nimport { createHash } from 'node:crypto'\nimport { ensureCheckoutFieldsetsAndDefinitions } from './seed/customFields'\nimport { seedCheckoutExamples } from './seed/examples'\nimport { CHECKOUT_EXPIRY_QUEUE } from './workers/transaction-expiry.worker'\nexport { DEFAULT_CHECKOUT_CUSTOMER_FIELDS } from './lib/defaults'\n\nfunction stableUuidFromString(input: string): string {\n  const bytes = createHash('sha256').update(input).digest().subarray(0, 16)\n  bytes[6] = (bytes[6] & 0x0f) | 0x50\n  bytes[8] = (bytes[8] & 0x3f) | 0x80\n  const hex = Buffer.from(bytes).toString('hex')\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`\n}\n\ntype SchedulerServiceLike = {\n  register: (registration: {\n    id: string\n    name: string\n    description?: string\n    scopeType: 'organization'\n    organizationId: string\n    tenantId: string\n    scheduleType: 'cron' | 'interval'\n    scheduleValue: string\n    timezone?: string\n    targetType: 'queue'\n    targetQueue: string\n    targetPayload?: Record<string, unknown>\n    sourceType: 'module'\n    sourceModule: string\n    isEnabled?: boolean\n  }) => Promise<void>\n}\n\nexport const setup: ModuleSetupConfig = {\n  async seedDefaults(ctx) {\n    await ensureCheckoutFieldsetsAndDefinitions(ctx.em, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    })\n\n    const cradle = ctx.container as { hasRegistration?: (name: string) => boolean }\n    if (typeof cradle.hasRegistration !== 'function' || !cradle.hasRegistration('schedulerService')) return\n\n    const schedulerService = ctx.container.resolve('schedulerService') as SchedulerServiceLike\n    await schedulerService.register({\n      id: stableUuidFromString(`checkout:transaction-expiry:${ctx.tenantId}:${ctx.organizationId}`),\n      name: 'Checkout transaction expiry',\n      description: 'Marks stale checkout transactions as expired and runs usage limit updates.',\n      scopeType: 'organization',\n      organizationId: ctx.organizationId,\n      tenantId: ctx.tenantId,\n      scheduleType: 'interval',\n      scheduleValue: '10m',\n      timezone: 'UTC',\n      targetType: 'queue',\n      targetQueue: CHECKOUT_EXPIRY_QUEUE,\n      sourceType: 'module',\n      sourceModule: 'checkout',\n      isEnabled: true,\n    })\n  },\n\n  defaultRoleFeatures: {\n    superadmin: ['checkout.*'],\n    admin: ['checkout.view', 'checkout.create', 'checkout.edit', 'checkout.delete', 'checkout.viewPii', 'checkout.export'],\n    employee: ['checkout.view'],\n  },\n\n  async seedExamples(ctx) {\n    await seedCheckoutExamples(ctx)\n  },\n}\n\nexport default setup\n"],
+  "mappings": "AACA,SAAS,kBAAkB;AAC3B,SAAS,6CAA6C;AACtD,SAAS,4BAA4B;AACrC,SAAS,6BAA6B;AACtC,SAAS,wCAAwC;AAEjD,SAAS,qBAAqB,OAAuB;AACnD,QAAM,QAAQ,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,GAAG,EAAE;AACxE,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,OAAO,KAAK,KAAK,EAAE,SAAS,KAAK;AAC7C,SAAO,GAAG,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,MAAM,GAAG,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,IAAI,MAAM,IAAI,EAAE,CAAC;AAC9G;AAsBO,MAAM,QAA2B;AAAA,EACtC,MAAM,aAAa,KAAK;AACtB,UAAM,sCAAsC,IAAI,IAAI;AAAA,MAClD,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB,CAAC;AAED,UAAM,SAAS,IAAI;AACnB,QAAI,OAAO,OAAO,oBAAoB,cAAc,CAAC,OAAO,gBAAgB,kBAAkB,EAAG;AAEjG,UAAM,mBAAmB,IAAI,UAAU,QAAQ,kBAAkB;AACjE,UAAM,iBAAiB,SAAS;AAAA,MAC9B,IAAI,qBAAqB,+BAA+B,IAAI,QAAQ,IAAI,IAAI,cAAc,EAAE;AAAA,MAC5F,MAAM;AAAA,MACN,aAAa;AAAA,MACb,WAAW;AAAA,MACX,gBAAgB,IAAI;AAAA,MACpB,UAAU,IAAI;AAAA,MACd,cAAc;AAAA,MACd,eAAe;AAAA,MACf,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,aAAa;AAAA,MACb,YAAY;AAAA,MACZ,cAAc;AAAA,MACd,WAAW;AAAA,IACb,CAAC;AAAA,EACH;AAAA,EAEA,qBAAqB;AAAA,IACnB,YAAY,CAAC,YAAY;AAAA,IACzB,OAAO,CAAC,iBAAiB,mBAAmB,iBAAiB,mBAAmB,oBAAoB,iBAAiB;AAAA,IACrH,UAAU,CAAC,eAAe;AAAA,EAC5B;AAAA,EAEA,MAAM,aAAa,KAAK;AACtB,UAAM,qBAAqB,GAAG;AAAA,EAChC;AACF;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/checkout/subscribers/search-reindex-transaction-created.js

@@ -0,0 +1,32 @@
+const metadata = {
+  event: "checkout.transaction.created",
+  persistent: false,
+  id: "checkout:query-index-reindex-transaction-created"
+};
+async function handle(payload, ctx) {
+  const recordId = typeof payload.transactionId === "string" ? payload.transactionId : null;
+  const tenantId = typeof payload.tenantId === "string" ? payload.tenantId : null;
+  if (!recordId || !tenantId) return;
+  let eventBus = null;
+  try {
+    eventBus = ctx.resolve("eventBus");
+  } catch {
+    return;
+  }
+  await eventBus.emitEvent("query_index.upsert_one", {
+    entityType: "checkout:checkout_transaction",
+    recordId,
+    organizationId: payload.organizationId ?? null,
+    tenantId,
+    crudAction: "created",
+    coverageBaseDelta: 1
+  }, {
+    tenantId,
+    organizationId: payload.organizationId ?? null
+  }).catch(() => void 0);
+}
+export {
+  handle as default,
+  metadata
+};
+//# sourceMappingURL=search-reindex-transaction-created.js.map

package/dist/modules/checkout/subscribers/search-reindex-transaction-created.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/checkout/subscribers/search-reindex-transaction-created.ts"],
+  "sourcesContent": ["export const metadata = {\n  event: 'checkout.transaction.created',\n  persistent: false,\n  id: 'checkout:query-index-reindex-transaction-created',\n}\n\ntype Payload = {\n  transactionId?: string\n  tenantId?: string | null\n  organizationId?: string | null\n}\n\ntype EventBus = { emitEvent: (name: string, body: unknown, options?: unknown) => Promise<void> }\ntype HandlerContext = { resolve: <T = unknown>(name: string) => T }\n\nexport default async function handle(payload: Payload, ctx: HandlerContext): Promise<void> {\n  const recordId = typeof payload.transactionId === 'string' ? payload.transactionId : null\n  const tenantId = typeof payload.tenantId === 'string' ? payload.tenantId : null\n  if (!recordId || !tenantId) return\n\n  let eventBus: EventBus | null = null\n  try {\n    eventBus = ctx.resolve<EventBus>('eventBus')\n  } catch {\n    return\n  }\n\n  await eventBus.emitEvent('query_index.upsert_one', {\n    entityType: 'checkout:checkout_transaction',\n    recordId,\n    organizationId: payload.organizationId ?? null,\n    tenantId,\n    crudAction: 'created',\n    coverageBaseDelta: 1,\n  }, {\n    tenantId,\n    organizationId: payload.organizationId ?? null,\n  }).catch(() => undefined)\n}\n"],
+  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAWA,eAAO,OAA8B,SAAkB,KAAoC;AACzF,QAAM,WAAW,OAAO,QAAQ,kBAAkB,WAAW,QAAQ,gBAAgB;AACrF,QAAM,WAAW,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW;AAC3E,MAAI,CAAC,YAAY,CAAC,SAAU;AAE5B,MAAI,WAA4B;AAChC,MAAI;AACF,eAAW,IAAI,QAAkB,UAAU;AAAA,EAC7C,QAAQ;AACN;AAAA,EACF;AAEA,QAAM,SAAS,UAAU,0BAA0B;AAAA,IACjD,YAAY;AAAA,IACZ;AAAA,IACA,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C;AAAA,IACA,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB,GAAG;AAAA,IACD;AAAA,IACA,gBAAgB,QAAQ,kBAAkB;AAAA,EAC5C,CAAC,EAAE,MAAM,MAAM,MAAS;AAC1B;",
+  "names": []
+}

package/dist/modules/checkout/workers/transaction-expiry.worker.js

@@ -14,14 +14,21 @@ async function handle(job, ctx) {
   const commandBus = ctx.resolve("commandBus");
   const batchSize = job.payload?.batchSize ?? 100;
   const cutoff = new Date(Date.now() - EXPIRY_TIMEOUT_MS);
+  if (!job.payload?.tenantId || !job.payload?.organizationId) {
+    throw new Error("[internal] tenantId and organizationId are required in CheckoutExpiryJob");
+  }
+  const { tenantId, organizationId } = job.payload;
   const staleTransactions = await findWithDecryption(
     em,
     CheckoutTransaction,
     {
       status: "processing",
-      createdAt: { $lt: cutoff }
+      createdAt: { $lt: cutoff },
+      tenantId,
+      organizationId
     },
-    { limit: batchSize, orderBy: { createdAt: "ASC" } }
+    { limit: batchSize, orderBy: { createdAt: "ASC" } },
+    { tenantId, organizationId }
   );
   for (const transaction of staleTransactions) {
     try {

package/dist/modules/checkout/workers/transaction-expiry.worker.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/checkout/workers/transaction-expiry.worker.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands/types'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CheckoutTransaction } from '../data/entities'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('checkout').child({ component: 'transaction-expiry' })\n\nexport const CHECKOUT_EXPIRY_QUEUE = 'checkout-transaction-expiry'\n\nconst EXPIRY_TIMEOUT_MS = 2 * 60 * 60 * 1000 // 2 hours\n\nexport type CheckoutExpiryJob = {\n  batchSize?: number\n}\n\nexport const metadata: WorkerMeta = {\n  queue: CHECKOUT_EXPIRY_QUEUE,\n  id: 'checkout:transaction-expiry',\n  concurrency: 1,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(job: QueuedJob<CheckoutExpiryJob>, ctx: HandlerContext): Promise<void> {\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const commandBus = ctx.resolve('commandBus') as CommandBus\n  const batchSize = job.payload?.batchSize ?? 100\n  const cutoff = new Date(Date.now() - EXPIRY_TIMEOUT_MS)\n\n  const staleTransactions = await findWithDecryption(\n    em,\n    CheckoutTransaction,\n    {\n      status: 'processing',\n      createdAt: { $lt: cutoff },\n    },\n    { limit: batchSize, orderBy: { createdAt: 'ASC' } },\n  )\n\n  for (const transaction of staleTransactions) {\n    try {\n      const commandCtx: CommandRuntimeContext = {\n        container: { resolve: ctx.resolve } as unknown as CommandRuntimeContext['container'],\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: transaction.organizationId,\n        organizationIds: [transaction.organizationId],\n      }\n      await commandBus.execute('checkout.transaction.updateStatus', {\n        input: {\n          id: transaction.id,\n          status: 'expired',\n          paymentStatus: 'expired',\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        },\n        ctx: commandCtx,\n      })\n    } catch (error) {\n      logger.error('Failed to expire transaction', { transactionId: transaction.id, err: error })\n    }\n  }\n}\n"],
-  "mappings": "AAIA,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,UAAU,EAAE,MAAM,EAAE,WAAW,qBAAqB,CAAC;AAE1E,MAAM,wBAAwB;AAErC,MAAM,oBAAoB,IAAI,KAAK,KAAK;AAMjC,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAMA,eAAO,OAA8B,KAAmC,KAAoC;AAC1G,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,aAAa,IAAI,QAAQ,YAAY;AAC3C,QAAM,YAAY,IAAI,SAAS,aAAa;AAC5C,QAAM,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB;AAEtD,QAAM,oBAAoB,MAAM;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,WAAW,EAAE,KAAK,OAAO;AAAA,IAC3B;AAAA,IACA,EAAE,OAAO,WAAW,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,EACpD;AAEA,aAAW,eAAe,mBAAmB;AAC3C,QAAI;AACF,YAAM,aAAoC;AAAA,QACxC,WAAW,EAAE,SAAS,IAAI,QAAQ;AAAA,QAClC,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwB,YAAY;AAAA,QACpC,iBAAiB,CAAC,YAAY,cAAc;AAAA,MAC9C;AACA,YAAM,WAAW,QAAQ,qCAAqC;AAAA,QAC5D,OAAO;AAAA,UACL,IAAI,YAAY;AAAA,UAChB,QAAQ;AAAA,UACR,eAAe;AAAA,UACf,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB;AAAA,QACA,KAAK;AAAA,MACP,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,MAAM,gCAAgC,EAAE,eAAe,YAAY,IAAI,KAAK,MAAM,CAAC;AAAA,IAC5F;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands/types'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { CheckoutTransaction } from '../data/entities'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('checkout').child({ component: 'transaction-expiry' })\n\nexport const CHECKOUT_EXPIRY_QUEUE = 'checkout-transaction-expiry'\n\nconst EXPIRY_TIMEOUT_MS = 2 * 60 * 60 * 1000 // 2 hours\n\nexport type CheckoutExpiryJob = {\n  batchSize?: number\n  tenantId: string\n  organizationId: string\n}\n\nexport const metadata: WorkerMeta = {\n  queue: CHECKOUT_EXPIRY_QUEUE,\n  id: 'checkout:transaction-expiry',\n  concurrency: 1,\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nexport default async function handle(job: QueuedJob<CheckoutExpiryJob>, ctx: HandlerContext): Promise<void> {\n  const em = (ctx.resolve('em') as EntityManager).fork()\n  const commandBus = ctx.resolve('commandBus') as CommandBus\n  const batchSize = job.payload?.batchSize ?? 100\n  const cutoff = new Date(Date.now() - EXPIRY_TIMEOUT_MS)\n\n  if (!job.payload?.tenantId || !job.payload?.organizationId) {\n    throw new Error('[internal] tenantId and organizationId are required in CheckoutExpiryJob')\n  }\n\n  const { tenantId, organizationId } = job.payload\n\n  const staleTransactions = await findWithDecryption(\n    em,\n    CheckoutTransaction,\n    {\n      status: 'processing',\n      createdAt: { $lt: cutoff },\n      tenantId,\n      organizationId,\n    },\n    { limit: batchSize, orderBy: { createdAt: 'ASC' } },\n    { tenantId, organizationId },\n  )\n\n  for (const transaction of staleTransactions) {\n    try {\n      const commandCtx: CommandRuntimeContext = {\n        container: { resolve: ctx.resolve } as unknown as CommandRuntimeContext['container'],\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: transaction.organizationId,\n        organizationIds: [transaction.organizationId],\n      }\n      await commandBus.execute('checkout.transaction.updateStatus', {\n        input: {\n          id: transaction.id,\n          status: 'expired',\n          paymentStatus: 'expired',\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        },\n        ctx: commandCtx,\n      })\n    } catch (error) {\n      logger.error('Failed to expire transaction', { transactionId: transaction.id, err: error })\n    }\n  }\n}\n"],
+  "mappings": "AAIA,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,UAAU,EAAE,MAAM,EAAE,WAAW,qBAAqB,CAAC;AAE1E,MAAM,wBAAwB;AAErC,MAAM,oBAAoB,IAAI,KAAK,KAAK;AAQjC,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAMA,eAAO,OAA8B,KAAmC,KAAoC;AAC1G,QAAM,KAAM,IAAI,QAAQ,IAAI,EAAoB,KAAK;AACrD,QAAM,aAAa,IAAI,QAAQ,YAAY;AAC3C,QAAM,YAAY,IAAI,SAAS,aAAa;AAC5C,QAAM,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB;AAEtD,MAAI,CAAC,IAAI,SAAS,YAAY,CAAC,IAAI,SAAS,gBAAgB;AAC1D,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AAEA,QAAM,EAAE,UAAU,eAAe,IAAI,IAAI;AAEzC,QAAM,oBAAoB,MAAM;AAAA,IAC9B;AAAA,IACA;AAAA,IACA;AAAA,MACE,QAAQ;AAAA,MACR,WAAW,EAAE,KAAK,OAAO;AAAA,MACzB;AAAA,MACA;AAAA,IACF;AAAA,IACA,EAAE,OAAO,WAAW,SAAS,EAAE,WAAW,MAAM,EAAE;AAAA,IAClD,EAAE,UAAU,eAAe;AAAA,EAC7B;AAEA,aAAW,eAAe,mBAAmB;AAC3C,QAAI;AACF,YAAM,aAAoC;AAAA,QACxC,WAAW,EAAE,SAAS,IAAI,QAAQ;AAAA,QAClC,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwB,YAAY;AAAA,QACpC,iBAAiB,CAAC,YAAY,cAAc;AAAA,MAC9C;AACA,YAAM,WAAW,QAAQ,qCAAqC;AAAA,QAC5D,OAAO;AAAA,UACL,IAAI,YAAY;AAAA,UAChB,QAAQ;AAAA,UACR,eAAe;AAAA,UACf,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB;AAAA,QACA,KAAK;AAAA,MACP,CAAC;AAAA,IACH,SAAS,OAAO;AACd,aAAO,MAAM,gCAAgC,EAAE,eAAe,YAAY,IAAI,KAAK,MAAM,CAAC;AAAA,IAC5F;AAAA,EACF;AACF;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/checkout",
-  "version": "0.6.7-develop.6696.1.4236709f7e",
+  "version": "0.6.7-develop.6725.1.07a748cfc2",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -62,18 +62,18 @@
     }
   },
   "dependencies": {
-    "@open-mercato/core": "0.6.7-develop.6696.1.4236709f7e",
-    "@open-mercato/ui": "0.6.7-develop.6696.1.4236709f7e",
+    "@open-mercato/core": "0.6.7-develop.6725.1.07a748cfc2",
+    "@open-mercato/ui": "0.6.7-develop.6725.1.07a748cfc2",
     "bcryptjs": "^3.0.3"
   },
   "peerDependencies": {
     "@mikro-orm/postgresql": "^7.0.14",
-    "@open-mercato/shared": "0.6.7-develop.6696.1.4236709f7e",
+    "@open-mercato/shared": "0.6.7-develop.6725.1.07a748cfc2",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/shared": "0.6.7-develop.6696.1.4236709f7e",
+    "@open-mercato/shared": "0.6.7-develop.6725.1.07a748cfc2",
     "@types/jest": "^30.0.0",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",

package/src/modules/checkout/__integration__/TC-CHKT-042.spec.ts

@@ -0,0 +1,41 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'
+import {
+  createCustomerData,
+  createFixedTemplateInput,
+  createLinkFixture,
+  deleteCheckoutEntityIfExists,
+  listCheckoutTransactions,
+  submitPayLink,
+} from './helpers/fixtures'
+
+test.describe('TC-CHKT-042: Transaction search over encrypted customer data', () => {
+  test('finds a newly created transaction through its token index', async ({ request }) => {
+    const email = `token-search-${Date.now()}@example.test`
+    let token: string | null = null
+    let linkId: string | null = null
+
+    try {
+      token = await getAuthToken(request)
+      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'active' }))
+      linkId = link.id
+      const submitted = await submitPayLink(request, link.slug, {
+        customerData: createCustomerData({ email }),
+        acceptedLegalConsents: {},
+        amount: 49.99,
+      })
+      expect(submitted.ok()).toBeTruthy()
+
+      await expect.poll(async () => {
+        const result = await listCheckoutTransactions(
+          request,
+          token!,
+          `search=${encodeURIComponent(email)}&page=1&pageSize=10`,
+        )
+        return result.items.some((item) => item.email === email)
+      }, { timeout: 15_000 }).toBeTruthy()
+    } finally {
+      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
+    }
+  })
+})

package/src/modules/checkout/__tests__/search.test.ts

@@ -0,0 +1,21 @@
+import searchConfig from '../search'
+import { CHECKOUT_ENTITY_IDS } from '../lib/constants'
+
+describe('checkout search configuration', () => {
+  it('indexes the encrypted transaction fields used by the list API', async () => {
+    const transaction = searchConfig.entities.find((entry) => entry.entityId === CHECKOUT_ENTITY_IDS.transaction)
+    expect(transaction?.fieldPolicy?.searchable).toEqual(['email', 'firstName', 'lastName'])
+
+    const source = await transaction?.buildSource?.({
+      record: { email: 'buyer@example.test', firstName: 'Ada', lastName: 'Lovelace' },
+      customFields: {},
+      tenantId: 'tenant-1',
+      organizationId: 'org-1',
+    })
+    expect(source?.fields).toMatchObject({
+      email: 'buyer@example.test',
+      first_name: 'Ada',
+      last_name: 'Lovelace',
+    })
+  })
+})

package/src/modules/checkout/__tests__/setup-schedules.test.ts

@@ -0,0 +1,99 @@
+import { describe, expect, it, jest } from '@jest/globals'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import type { AwilixContainer } from 'awilix'
+import type { InitSetupContext } from '@open-mercato/shared/modules/setup'
+import { CHECKOUT_EXPIRY_QUEUE } from '../workers/transaction-expiry.worker'
+
+const ensureCheckoutFieldsetsAndDefinitions = jest.fn(async (..._args: unknown[]) => undefined)
+
+jest.mock('../seed/customFields', () => ({
+  ensureCheckoutFieldsetsAndDefinitions: (...args: unknown[]) => ensureCheckoutFieldsetsAndDefinitions(...args),
+}))
+
+type ScheduleRegistration = {
+  id: string
+  organizationId: string
+  tenantId: string
+  scopeType: string
+  targetQueue: string
+}
+
+function createSetupContext(options: {
+  tenantId?: string
+  organizationId?: string
+  hasScheduler?: boolean
+  register?: (registration: ScheduleRegistration) => Promise<void>
+}) {
+  const register = jest.fn(options.register ?? (async () => undefined))
+  const resolve = jest.fn((name: string) => {
+    if (name === 'schedulerService') return { register }
+    throw new Error(`[internal] Missing dependency: ${name}`)
+  })
+  const container = {
+    hasRegistration: jest.fn(() => options.hasScheduler ?? true),
+    resolve,
+  }
+  const context: InitSetupContext = {
+    tenantId: options.tenantId ?? 'tenant-1',
+    organizationId: options.organizationId ?? 'organization-1',
+    em: {} as EntityManager,
+    container: container as unknown as AwilixContainer,
+  }
+  return { context, register, resolve }
+}
+
+async function seedDefaults(context: InitSetupContext): Promise<void> {
+  const { setup } = await import('../setup')
+  if (!setup.seedDefaults) throw new Error('[internal] Checkout seedDefaults hook is missing')
+  await setup.seedDefaults(context)
+}
+
+describe('checkout setup schedules', () => {
+  it('registers one organization-scoped transaction-expiry schedule', async () => {
+    const { context, register } = createSetupContext({})
+
+    await seedDefaults(context)
+
+    expect(register).toHaveBeenCalledWith(expect.objectContaining({
+      organizationId: 'organization-1',
+      tenantId: 'tenant-1',
+      scopeType: 'organization',
+      targetQueue: CHECKOUT_EXPIRY_QUEUE,
+    }))
+  })
+
+  it('uses stable IDs that remain distinct across organizations in one tenant', async () => {
+    const first = createSetupContext({ organizationId: 'organization-1' })
+    const second = createSetupContext({ organizationId: 'organization-2' })
+    const repeated = createSetupContext({ organizationId: 'organization-1' })
+
+    await seedDefaults(first.context)
+    await seedDefaults(second.context)
+    await seedDefaults(repeated.context)
+
+    const firstId = first.register.mock.calls[0][0].id
+    const secondId = second.register.mock.calls[0][0].id
+    const repeatedId = repeated.register.mock.calls[0][0].id
+    expect(firstId).not.toBe(secondId)
+    expect(repeatedId).toBe(firstId)
+  })
+
+  it('skips schedule registration when the optional scheduler module is absent', async () => {
+    const { context, register, resolve } = createSetupContext({ hasScheduler: false })
+
+    await seedDefaults(context)
+
+    expect(register).not.toHaveBeenCalled()
+    expect(resolve).not.toHaveBeenCalled()
+  })
+
+  it('propagates scheduler registration failures', async () => {
+    const { context } = createSetupContext({
+      register: async () => {
+        throw new Error('[internal] scheduler unavailable')
+      },
+    })
+
+    await expect(seedDefaults(context)).rejects.toThrow('[internal] scheduler unavailable')
+  })
+})

package/src/modules/checkout/api/transactions/__tests__/route.test.ts

@@ -0,0 +1,113 @@
+/** @jest-environment node */
+
+import { GET } from '../route'
+import { CheckoutTransaction } from '../../../data/entities'
+
+const mockFindAndCountWithDecryption = jest.fn()
+const mockFindWithDecryption = jest.fn()
+
+jest.mock('@open-mercato/shared/lib/encryption/find', () => ({
+  findAndCountWithDecryption: (...args: unknown[]) => mockFindAndCountWithDecryption(...args),
+  findWithDecryption: (...args: unknown[]) => mockFindWithDecryption(...args),
+}))
+
+const mockFindEntityIdsBySearchTokens = jest.fn(async () => ({ matched: false, reason: 'no-tokens' as const }))
+
+jest.mock('@open-mercato/shared/lib/search/tokenLookup', () => ({
+  findEntityIdsBySearchTokens: (...args: unknown[]) => mockFindEntityIdsBySearchTokens(...(args as [])),
+}))
+
+const mockEm = { getKysely: jest.fn(() => ({})) }
+const auth = { tenantId: 'tenant-1', orgId: 'org-1', sub: 'user-1' }
+
+jest.mock('../../helpers', () => ({
+  requireAdminContext: jest.fn(async () => ({ auth, container: {}, em: mockEm, commandBus: {} })),
+  userHasCheckoutFeature: jest.fn(async () => true),
+  handleCheckoutRouteError: (error: unknown) => {
+    throw error
+  },
+}))
+
+function makeRequest(params?: Record<string, string>) {
+  const url = new URL('http://localhost/api/checkout/transactions')
+  for (const [key, value] of Object.entries(params ?? {})) url.searchParams.set(key, value)
+  return new Request(url.toString(), { method: 'GET' })
+}
+
+function capturedWhere(): Record<string, unknown> {
+  return mockFindAndCountWithDecryption.mock.calls[0][2] as Record<string, unknown>
+}
+
+describe('GET /api/checkout/transactions', () => {
+  beforeEach(() => {
+    jest.clearAllMocks()
+    mockFindAndCountWithDecryption.mockResolvedValue([[], 0])
+    mockFindWithDecryption.mockResolvedValue([])
+    mockFindEntityIdsBySearchTokens.mockResolvedValue({ matched: false, reason: 'no-tokens' } as never)
+  })
+
+  it('applies no search predicate when no term is supplied', async () => {
+    await GET(makeRequest())
+
+    expect(mockFindAndCountWithDecryption).toHaveBeenCalledWith(
+      mockEm,
+      CheckoutTransaction,
+      { organizationId: 'org-1', tenantId: 'tenant-1' },
+      expect.any(Object),
+      expect.any(Object),
+    )
+    expect(mockFindEntityIdsBySearchTokens).not.toHaveBeenCalled()
+  })
+
+  it('keeps the escaped ILIKE predicates for the PII columns', async () => {
+    await GET(makeRequest({ search: '100%_off' }))
+
+    expect(capturedWhere().$or).toEqual([
+      { email: { $ilike: '%100\\%\\_off%' } },
+      { firstName: { $ilike: '%100\\%\\_off%' } },
+      { lastName: { $ilike: '%100\\%\\_off%' } },
+    ])
+  })
+
+  it('unions the encrypted-column token matches into the search predicate', async () => {
+    mockFindEntityIdsBySearchTokens.mockResolvedValueOnce({
+      matched: true,
+      ids: ['tx-1', 'tx-2'],
+    } as never)
+
+    await GET(makeRequest({ search: 'ada@example.com' }))
+
+    expect(mockFindEntityIdsBySearchTokens).toHaveBeenCalledWith(expect.objectContaining({
+      entityType: 'checkout:checkout_transaction',
+      query: 'ada@example.com',
+      fields: ['email', 'first_name', 'last_name'],
+      scope: { tenantId: 'tenant-1', organizationId: 'org-1' },
+    }))
+    expect(capturedWhere().$or).toContainEqual({ id: { $in: ['tx-1', 'tx-2'] } })
+  })
+
+  it('never emits an ILIKE against the uuid id column', async () => {
+    await GET(makeRequest({ search: 'abc' }))
+
+    const or = capturedWhere().$or as Array<Record<string, unknown>>
+    expect(or.some((clause) => 'id' in clause)).toBe(false)
+  })
+
+  it('matches a uuid search term against the id column exactly', async () => {
+    const id = '3f2504e0-4f89-41d3-9a0c-0305e82c3301'
+    await GET(makeRequest({ search: id }))
+
+    expect(capturedWhere().$or).toContainEqual({ id })
+  })
+
+  it('keeps link and status filters alongside the search predicate', async () => {
+    await GET(makeRequest({ search: 'ada', status: 'completed', linkId: 'link-1' }))
+
+    expect(capturedWhere()).toMatchObject({
+      organizationId: 'org-1',
+      tenantId: 'tenant-1',
+      status: 'completed',
+      linkId: 'link-1',
+    })
+  })
+})

package/src/modules/checkout/api/transactions/route.ts

@@ -1,11 +1,15 @@
 import { NextResponse } from 'next/server'
 import { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'
 import { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'
+import { findEntityIdsBySearchTokens, type SearchTokenDatabase } from '@open-mercato/shared/lib/search/tokenLookup'
 import { CheckoutLink, CheckoutTransaction } from '../../data/entities'
+import { CHECKOUT_ENTITY_IDS } from '../../lib/constants'
 import { handleCheckoutRouteError, requireAdminContext, userHasCheckoutFeature } from '../helpers'
 import { checkoutTag } from '../openapi'
 import { serializeTransaction } from '../../lib/utils'
 
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i
+
 export const metadata = {
   path: '/checkout/transactions',
   GET: { requireAuth: true, requireFeatures: ['checkout.view'] },
@@ -27,12 +31,32 @@ export async function GET(req: Request) {
     }
     if (linkId) where.linkId = linkId
     if (status) where.status = status
-    if (search) where.$or = [
-      { email: { $ilike: `%${escapeLikePattern(search)}%` } },
-      { firstName: { $ilike: `%${escapeLikePattern(search)}%` } },
-      { lastName: { $ilike: `%${escapeLikePattern(search)}%` } },
-      { id: { $ilike: `%${escapeLikePattern(search)}%` } },
-    ]
+    if (search) {
+      const pattern = `%${escapeLikePattern(search)}%`
+      // email/first_name/last_name are covered by the checkout encryption map,
+      // so an ILIKE alone compares the pattern against ciphertext and matches
+      // nothing once encryption is on. Union it with the token index, which
+      // stores hashes of the plaintext. Issue #2990.
+      const searchOr: Record<string, unknown>[] = [
+        { email: { $ilike: pattern } },
+        { firstName: { $ilike: pattern } },
+        { lastName: { $ilike: pattern } },
+      ]
+      // `id` is a uuid column: ILIKE against it has no Postgres operator and
+      // raises 42883, so only an exact id lookup is meaningful here.
+      if (UUID_PATTERN.test(search)) searchOr.push({ id: search })
+      const tokenMatch = await findEntityIdsBySearchTokens({
+        db: em.getKysely<SearchTokenDatabase>(),
+        entityType: CHECKOUT_ENTITY_IDS.transaction,
+        query: search,
+        fields: ['email', 'first_name', 'last_name'],
+        scope: { tenantId: auth.tenantId, organizationId: auth.orgId },
+      })
+      if (tokenMatch.matched && tokenMatch.ids.length) {
+        searchOr.push({ id: { $in: tokenMatch.ids } })
+      }
+      where.$or = searchOr
+    }
     const [items, total] = await findAndCountWithDecryption(
       em,
       CheckoutTransaction,

package/src/modules/checkout/search.ts

@@ -45,6 +45,36 @@ export const searchConfig: SearchModuleConfig = {
         icon: 'lucide:file-text',
       }),
     },
+    {
+      entityId: CHECKOUT_ENTITY_IDS.transaction,
+      enabled: true,
+      priority: 6,
+      fieldPolicy: {
+        searchable: ['email', 'firstName', 'lastName'],
+      },
+      buildSource: async (ctx) => ({
+        text: [
+          asSearchText(ctx.record.email),
+          asSearchText(ctx.record.firstName),
+          asSearchText(ctx.record.lastName),
+        ],
+        fields: {
+          email: ctx.record.email,
+          first_name: ctx.record.firstName,
+          last_name: ctx.record.lastName,
+        },
+        presenter: {
+          title: asSearchText(ctx.record.email),
+          subtitle: `${asSearchText(ctx.record.firstName)} ${asSearchText(ctx.record.lastName)}`.trim(),
+        },
+        checksumSource: { record: ctx.record },
+      }),
+      formatResult: async (ctx) => ({
+        title: asSearchText(ctx.record.email),
+        subtitle: `${asSearchText(ctx.record.firstName)} ${asSearchText(ctx.record.lastName)}`.trim(),
+        icon: 'lucide:receipt',
+      }),
+    },
   ],
 }
 

package/src/modules/checkout/setup.ts

@@ -1,14 +1,65 @@
 import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+import { createHash } from 'node:crypto'
 import { ensureCheckoutFieldsetsAndDefinitions } from './seed/customFields'
 import { seedCheckoutExamples } from './seed/examples'
+import { CHECKOUT_EXPIRY_QUEUE } from './workers/transaction-expiry.worker'
 export { DEFAULT_CHECKOUT_CUSTOMER_FIELDS } from './lib/defaults'
 
+function stableUuidFromString(input: string): string {
+  const bytes = createHash('sha256').update(input).digest().subarray(0, 16)
+  bytes[6] = (bytes[6] & 0x0f) | 0x50
+  bytes[8] = (bytes[8] & 0x3f) | 0x80
+  const hex = Buffer.from(bytes).toString('hex')
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20, 32)}`
+}
+
+type SchedulerServiceLike = {
+  register: (registration: {
+    id: string
+    name: string
+    description?: string
+    scopeType: 'organization'
+    organizationId: string
+    tenantId: string
+    scheduleType: 'cron' | 'interval'
+    scheduleValue: string
+    timezone?: string
+    targetType: 'queue'
+    targetQueue: string
+    targetPayload?: Record<string, unknown>
+    sourceType: 'module'
+    sourceModule: string
+    isEnabled?: boolean
+  }) => Promise<void>
+}
+
 export const setup: ModuleSetupConfig = {
   async seedDefaults(ctx) {
     await ensureCheckoutFieldsetsAndDefinitions(ctx.em, {
       tenantId: ctx.tenantId,
       organizationId: ctx.organizationId,
     })
+
+    const cradle = ctx.container as { hasRegistration?: (name: string) => boolean }
+    if (typeof cradle.hasRegistration !== 'function' || !cradle.hasRegistration('schedulerService')) return
+
+    const schedulerService = ctx.container.resolve('schedulerService') as SchedulerServiceLike
+    await schedulerService.register({
+      id: stableUuidFromString(`checkout:transaction-expiry:${ctx.tenantId}:${ctx.organizationId}`),
+      name: 'Checkout transaction expiry',
+      description: 'Marks stale checkout transactions as expired and runs usage limit updates.',
+      scopeType: 'organization',
+      organizationId: ctx.organizationId,
+      tenantId: ctx.tenantId,
+      scheduleType: 'interval',
+      scheduleValue: '10m',
+      timezone: 'UTC',
+      targetType: 'queue',
+      targetQueue: CHECKOUT_EXPIRY_QUEUE,
+      sourceType: 'module',
+      sourceModule: 'checkout',
+      isEnabled: true,
+    })
   },
 
   defaultRoleFeatures: {

package/src/modules/checkout/subscribers/__tests__/search-reindex-transaction-created.test.ts

@@ -0,0 +1,29 @@
+import handle from '../search-reindex-transaction-created'
+
+const emitEvent = jest.fn(async () => undefined)
+const context = { resolve: jest.fn(() => ({ emitEvent })) }
+
+describe('checkout transaction search reindex subscriber', () => {
+  beforeEach(() => jest.clearAllMocks())
+
+  it('bridges transaction creation to the query index', async () => {
+    await handle({ transactionId: 'transaction-1', tenantId: 'tenant-1', organizationId: 'org-1' }, context)
+
+    expect(emitEvent).toHaveBeenCalledWith('query_index.upsert_one', {
+      entityType: 'checkout:checkout_transaction',
+      recordId: 'transaction-1',
+      organizationId: 'org-1',
+      tenantId: 'tenant-1',
+      crudAction: 'created',
+      coverageBaseDelta: 1,
+    }, { tenantId: 'tenant-1', organizationId: 'org-1' })
+  })
+
+  it('skips incomplete payloads and unavailable event buses', async () => {
+    await handle({ transactionId: 'transaction-1' }, context)
+    await handle({ transactionId: 'transaction-1', tenantId: 'tenant-1' }, {
+      resolve: () => { throw new Error('unavailable') },
+    })
+    expect(emitEvent).not.toHaveBeenCalled()
+  })
+})

package/src/modules/checkout/subscribers/search-reindex-transaction-created.ts

@@ -0,0 +1,39 @@
+export const metadata = {
+  event: 'checkout.transaction.created',
+  persistent: false,
+  id: 'checkout:query-index-reindex-transaction-created',
+}
+
+type Payload = {
+  transactionId?: string
+  tenantId?: string | null
+  organizationId?: string | null
+}
+
+type EventBus = { emitEvent: (name: string, body: unknown, options?: unknown) => Promise<void> }
+type HandlerContext = { resolve: <T = unknown>(name: string) => T }
+
+export default async function handle(payload: Payload, ctx: HandlerContext): Promise<void> {
+  const recordId = typeof payload.transactionId === 'string' ? payload.transactionId : null
+  const tenantId = typeof payload.tenantId === 'string' ? payload.tenantId : null
+  if (!recordId || !tenantId) return
+
+  let eventBus: EventBus | null = null
+  try {
+    eventBus = ctx.resolve<EventBus>('eventBus')
+  } catch {
+    return
+  }
+
+  await eventBus.emitEvent('query_index.upsert_one', {
+    entityType: 'checkout:checkout_transaction',
+    recordId,
+    organizationId: payload.organizationId ?? null,
+    tenantId,
+    crudAction: 'created',
+    coverageBaseDelta: 1,
+  }, {
+    tenantId,
+    organizationId: payload.organizationId ?? null,
+  }).catch(() => undefined)
+}

package/src/modules/checkout/workers/__tests__/transaction-expiry.worker.test.ts

@@ -0,0 +1,124 @@
+import { beforeEach, describe, expect, it, jest } from '@jest/globals'
+import type { JobContext, QueuedJob } from '@open-mercato/queue'
+import { CheckoutTransaction } from '../../data/entities'
+import type { CheckoutExpiryJob } from '../transaction-expiry.worker'
+
+const findWithDecryption = jest.fn()
+jest.mock('@open-mercato/shared/lib/encryption/find', () => ({
+  findWithDecryption: (...args: unknown[]) => findWithDecryption(...args),
+}))
+
+describe('checkout transaction-expiry worker', () => {
+  const mockCommandBus = {
+    execute: jest.fn().mockResolvedValue({ ok: true }),
+  }
+
+  type MockEntityManager = {
+    fork: () => MockEntityManager
+  }
+
+  const mockEm: MockEntityManager = {
+    fork: () => mockEm,
+  }
+
+  const resolve = <ResolvedValue = unknown>(name: string): ResolvedValue => {
+    if (name === 'em') return mockEm as ResolvedValue
+    if (name === 'commandBus') return mockCommandBus as ResolvedValue
+    throw new Error(`[internal] Missing dependency: ${name}`)
+  }
+
+  const mockContext: JobContext & { resolve: typeof resolve } = {
+    resolve,
+    jobId: 'job-1',
+    attemptNumber: 1,
+    queueName: 'checkout-transaction-expiry',
+  }
+
+  const baseJob = {
+    id: 'job-1',
+    createdAt: '2026-08-01T00:00:00.000Z',
+  }
+
+  beforeEach(() => {
+    jest.clearAllMocks()
+  })
+
+  it('throws an error if tenantId or organizationId is missing', async () => {
+    const { default: handle } = await import('../transaction-expiry.worker')
+
+    await expect(
+      handle(
+        {
+          ...baseJob,
+          payload: { batchSize: 10 },
+        } as unknown as QueuedJob<CheckoutExpiryJob>,
+        mockContext,
+      ),
+    ).rejects.toThrow('[internal] tenantId and organizationId are required in CheckoutExpiryJob')
+
+    expect(findWithDecryption).not.toHaveBeenCalled()
+  })
+
+  it('queries only transactions matching the payload tenantId and organizationId and passes decryption scope', async () => {
+    const { default: handle } = await import('../transaction-expiry.worker')
+
+    const mockTransactions = [
+      {
+        id: 'txn-1',
+        organizationId: 'org-123',
+        tenantId: 'tenant-456',
+      },
+      {
+        id: 'txn-2',
+        organizationId: 'org-123',
+        tenantId: 'tenant-456',
+      },
+    ]
+
+    findWithDecryption.mockResolvedValueOnce(mockTransactions)
+
+    await handle(
+      {
+        ...baseJob,
+        payload: {
+          batchSize: 50,
+          tenantId: 'tenant-456',
+          organizationId: 'org-123',
+        },
+      } satisfies QueuedJob<CheckoutExpiryJob>,
+      mockContext,
+    )
+
+    expect(findWithDecryption).toHaveBeenCalledWith(
+      mockEm,
+      CheckoutTransaction,
+      expect.objectContaining({
+        status: 'processing',
+        tenantId: 'tenant-456',
+        organizationId: 'org-123',
+      }),
+      expect.objectContaining({
+        limit: 50,
+      }),
+      {
+        tenantId: 'tenant-456',
+        organizationId: 'org-123',
+      },
+    )
+
+    expect(mockCommandBus.execute).toHaveBeenCalledTimes(2)
+    expect(mockCommandBus.execute).toHaveBeenNthCalledWith(
+      1,
+      'checkout.transaction.updateStatus',
+      expect.objectContaining({
+        input: {
+          id: 'txn-1',
+          status: 'expired',
+          paymentStatus: 'expired',
+          organizationId: 'org-123',
+          tenantId: 'tenant-456',
+        },
+      }),
+    )
+  })
+})

package/src/modules/checkout/workers/transaction-expiry.worker.ts

@@ -14,6 +14,8 @@ const EXPIRY_TIMEOUT_MS = 2 * 60 * 60 * 1000 // 2 hours
 
 export type CheckoutExpiryJob = {
   batchSize?: number
+  tenantId: string
+  organizationId: string
 }
 
 export const metadata: WorkerMeta = {
@@ -32,14 +34,23 @@ export default async function handle(job: QueuedJob<CheckoutExpiryJob>, ctx: Han
   const batchSize = job.payload?.batchSize ?? 100
   const cutoff = new Date(Date.now() - EXPIRY_TIMEOUT_MS)
 
+  if (!job.payload?.tenantId || !job.payload?.organizationId) {
+    throw new Error('[internal] tenantId and organizationId are required in CheckoutExpiryJob')
+  }
+
+  const { tenantId, organizationId } = job.payload
+
   const staleTransactions = await findWithDecryption(
     em,
     CheckoutTransaction,
     {
       status: 'processing',
       createdAt: { $lt: cutoff },
+      tenantId,
+      organizationId,
     },
     { limit: batchSize, orderBy: { createdAt: 'ASC' } },
+    { tenantId, organizationId },
   )
 
   for (const transaction of staleTransactions) {