@open-mercato/checkout 0.6.7-develop.6862.1.c11a64ce0a → 0.6.7

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:checkout] found 162 entry points
+[build:checkout] found 157 entry points
 [build:checkout] built successfully

package/dist/modules/checkout/api/pay/[slug]/submit/route.js

@@ -1,6 +1,6 @@
 import { NextResponse } from "next/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
-import { CrudHttpError, isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { checkRateLimit } from "@open-mercato/shared/lib/ratelimit/helpers";
 import { GatewayTransaction } from "@open-mercato/core/modules/payment_gateways/data/entities";
@@ -351,9 +351,8 @@ async function POST(req, { params }) {
       const rendererKey = typeof link.gatewaySettings?.rendererKey === "string" && link.gatewaySettings.rendererKey.trim().length > 0 ? link.gatewaySettings.rendererKey.trim() : void 0;
       const rendererSettings = link.gatewaySettings?.rendererSettings && typeof link.gatewaySettings.rendererSettings === "object" && !Array.isArray(link.gatewaySettings.rendererSettings) ? link.gatewaySettings.rendererSettings : void 0;
       const presentationMode = link.gatewaySettings?.presentationMode === "embedded" || link.gatewaySettings?.presentationMode === "redirect" || link.gatewaySettings?.presentationMode === "auto" ? link.gatewaySettings.presentationMode : void 0;
-      let sessionResult;
       try {
-        sessionResult = await paymentGatewayService.createPaymentSession({
+        const sessionResult = await paymentGatewayService.createPaymentSession({
           providerKey: link.gatewayProviderKey,
           paymentId: transactionId,
           idempotencyKey,
@@ -375,47 +374,35 @@ async function POST(req, { params }) {
           organizationId: link.organizationId,
           tenantId: link.tenantId
         });
-      } catch (error) {
         await commandBus.execute("checkout.transaction.updateStatus", {
           input: {
             id: transaction.id,
-            status: "failed",
-            paymentStatus: transaction.paymentStatus ?? "failed",
+            status: mapGatewayStatusToCheckoutStatus(sessionResult.transaction.unifiedStatus),
+            paymentStatus: sessionResult.transaction.unifiedStatus,
+            gatewayTransactionId: sessionResult.transaction.id,
             organizationId: link.organizationId,
             tenantId: link.tenantId
           },
           ctx
-        }).catch(() => void 0);
-        logger.error("Failed to create payment session", {
-          linkId: link.id,
-          transactionId: transaction.id,
-          providerKey: link.gatewayProviderKey,
-          err: error
         });
-        throw new CrudHttpError(502, { error: "checkout.payPage.errors.sessionStart" });
-      }
-      let statusConflict = false;
-      try {
+      } catch (error) {
         await commandBus.execute("checkout.transaction.updateStatus", {
           input: {
             id: transaction.id,
-            status: mapGatewayStatusToCheckoutStatus(sessionResult.transaction.unifiedStatus),
-            paymentStatus: sessionResult.transaction.unifiedStatus,
-            gatewayTransactionId: sessionResult.transaction.id,
+            status: "failed",
+            paymentStatus: transaction.paymentStatus ?? "failed",
             organizationId: link.organizationId,
             tenantId: link.tenantId
           },
           ctx
-        });
-      } catch (error) {
-        const isConflict = isCrudHttpError(error) && error.status === 409 && (error.body?.code === "concurrent_status_update" || error.body?.code === "invalid_status_transition");
-        if (!isConflict) throw error;
-        logger.info("Transaction status already advanced by concurrent writer \u2014 webhook won the race", {
+        }).catch(() => void 0);
+        logger.error("Failed to create payment session", {
           linkId: link.id,
           transactionId: transaction.id,
-          conflictCode: error.body?.code
+          providerKey: link.gatewayProviderKey,
+          err: error
         });
-        statusConflict = true;
+        throw new CrudHttpError(502, { error: "checkout.payPage.errors.sessionStart" });
       }
       const refreshedTransaction = await findOneWithDecryption(em, CheckoutTransaction, {
         id: transaction.id,
@@ -425,23 +412,21 @@ async function POST(req, { params }) {
       if (!refreshedTransaction) {
         throw new CrudHttpError(404, { error: "Transaction not found" });
       }
-      if (!statusConflict) {
-        await emitCheckoutEvent("checkout.transaction.sessionStarted", {
-          transactionId: refreshedTransaction.id,
-          linkId: refreshedTransaction.linkId,
-          templateId: link.templateId ?? null,
-          slug: link.slug,
-          status: refreshedTransaction.status,
-          paymentStatus: refreshedTransaction.paymentStatus ?? null,
-          amount: Number(refreshedTransaction.amount),
-          currency: refreshedTransaction.currencyCode,
-          gatewayProvider: link.gatewayProviderKey,
-          gatewayTransactionId: refreshedTransaction.gatewayTransactionId ?? null,
-          occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
-          tenantId: link.tenantId,
-          organizationId: link.organizationId
-        }).catch(() => void 0);
-      }
+      await emitCheckoutEvent("checkout.transaction.sessionStarted", {
+        transactionId: refreshedTransaction.id,
+        linkId: refreshedTransaction.linkId,
+        templateId: link.templateId ?? null,
+        slug: link.slug,
+        status: refreshedTransaction.status,
+        paymentStatus: refreshedTransaction.paymentStatus ?? null,
+        amount: Number(refreshedTransaction.amount),
+        currency: refreshedTransaction.currencyCode,
+        gatewayProvider: link.gatewayProviderKey,
+        gatewayTransactionId: refreshedTransaction.gatewayTransactionId ?? null,
+        occurredAt: (/* @__PURE__ */ new Date()).toISOString(),
+        tenantId: link.tenantId,
+        organizationId: link.organizationId
+      }).catch(() => void 0);
       return NextResponse.json(
         await buildSubmitResponse(req, em, link, refreshedTransaction, link.gatewayProviderKey),
         { status: 201 }

package/dist/modules/checkout/api/pay/[slug]/submit/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/checkout/api/pay/%5Bslug%5D/submit/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError, isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { RateLimiterService } from '@open-mercato/shared/lib/ratelimit/service'\nimport { checkRateLimit } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport type { PaymentGatewayClientSession } from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { PaymentGatewayService } from '@open-mercato/core/modules/payment_gateways/lib/gateway-service'\nimport { GatewayTransaction } from '@open-mercato/core/modules/payment_gateways/data/entities'\nimport { CheckoutLink, CheckoutTransaction } from '../../../../data/entities'\nimport { publicSubmitSchema } from '../../../../data/validators'\nimport { handleCheckoutRouteError, requireCheckoutPasswordSession } from '../../../helpers'\nimport { emitCheckoutEvent } from '../../../../events'\nimport {\n  buildConsentProof,\n  isCheckoutLinkPublic,\n  mapGatewayStatusToCheckoutStatus,\n  resolveSubmittedAmount,\n  validateDescriptorCurrencies,\n} from '../../../../lib/utils'\nimport { validateCheckoutCustomerData } from '../../../../lib/customerDataValidation'\nimport { buildCheckoutRateLimitKey, checkoutSubmitRateLimitConfig } from '../../../../lib/rateLimiter'\nimport { checkoutTag } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('checkout')\n\ntype CachedSubmitResponse = {\n  transactionId: string\n  redirectUrl?: string | null\n  paymentSession?: (PaymentGatewayClientSession & {\n    providerKey: string | null\n    gatewayTransactionId: string\n  }) | null\n}\n\ntype CheckoutLegalDocumentRequirement = {\n  required?: boolean\n}\n\ntype CheckoutCustomerFieldRequirement = {\n  key: string\n  required?: boolean\n}\n\nfunction normalizePort(url: URL): string {\n  if (url.port) return url.port\n  return url.protocol === 'https:' ? '443' : '80'\n}\n\nfunction normalizeConfiguredOrigin(candidate: string): string | null {\n  try {\n    return new URL(candidate).origin\n  } catch {\n    return null\n  }\n}\n\nfunction isLoopbackHostname(hostname: string): boolean {\n  return hostname === '127.0.0.1' || hostname === 'localhost'\n}\n\nfunction splitHeaderValues(value: string | null): string[] {\n  if (!value) return []\n  return value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter((entry) => entry.length > 0)\n}\n\nfunction isAllowedRequestOrigin(submittedOrigin: string, allowedOrigin: string): boolean {\n  if (submittedOrigin === allowedOrigin) return true\n  try {\n    const submittedUrl = new URL(submittedOrigin)\n    const allowedUrl = new URL(allowedOrigin)\n    return submittedUrl.protocol === allowedUrl.protocol\n      && normalizePort(submittedUrl) === normalizePort(allowedUrl)\n      && isLoopbackHostname(submittedUrl.hostname)\n      && isLoopbackHostname(allowedUrl.hostname)\n  } catch {\n    return false\n  }\n}\n\nconst CONFIGURED_ALLOWED_ORIGINS: string[] = (process.env.CHECKOUT_ALLOWED_ORIGINS ?? '')\n  .split(',')\n  .map((origin) => origin.trim())\n  .filter((origin) => origin.length > 0)\n\nfunction addAllowedOrigin(allowedOrigins: Set<string>, candidate: string) {\n  const normalized = normalizeConfiguredOrigin(candidate)\n  if (!normalized) return\n  allowedOrigins.add(normalized)\n  try {\n    const parsed = new URL(normalized)\n    if (!isLoopbackHostname(parsed.hostname)) return\n    for (const hostname of ['127.0.0.1', 'localhost']) {\n      for (const protocol of ['http:', 'https:']) {\n        const variant = new URL(normalized)\n        variant.hostname = hostname\n        variant.protocol = protocol\n        allowedOrigins.add(variant.origin)\n      }\n    }\n  } catch {\n    // Ignore invalid variants.\n  }\n}\n\nfunction collectConfiguredOrigins(): string[] {\n  const origins = [...CONFIGURED_ALLOWED_ORIGINS]\n  for (const origin of [process.env.APP_URL, process.env.NEXT_PUBLIC_APP_URL]) {\n    if (origin) origins.push(origin)\n  }\n  return origins\n}\n\n// Allowed origins are built ONLY from server-configured values. The inbound\n// request URL, Host and X-Forwarded-Host headers are attacker-controllable on\n// deployments that do not normalize them at the edge, so they must never seed\n// the allowlist (otherwise a spoofed Host self-passes the origin check).\nfunction buildAllowedOrigins(): string[] {\n  const allowedOrigins = new Set<string>()\n  for (const origin of collectConfiguredOrigins()) {\n    addAllowedOrigin(allowedOrigins, origin)\n  }\n  return Array.from(allowedOrigins)\n}\n\n// Resolve the origin used to build gateway-bound success/cancel/return URLs.\n// Always prefer a server-pinned configured origin; only fall back to the request\n// origin on loopback (local dev/test), where the Host cannot be spoofed by a\n// remote attacker. A non-loopback request with no configured origin is a\n// misconfiguration and is rejected rather than emitting an attacker-controllable URL.\nfunction resolveServerOrigin(req: Request): string {\n  for (const candidate of collectConfiguredOrigins()) {\n    const normalized = normalizeConfiguredOrigin(candidate)\n    if (normalized) return normalized\n  }\n  const requestUrl = new URL(req.url)\n  if (isLoopbackHostname(requestUrl.hostname)) return requestUrl.origin\n  throw new CrudHttpError(500, { error: 'Checkout origin is not configured' })\n}\n\n// Normalize a host value (bare host, host:port, or full origin) to its authority\n// (`hostname` plus any non-default port), lower-cased. Protocol is intentionally\n// dropped: the gateway-bound URLs are already pinned to the configured origin, so\n// the host guard below only needs to reject foreign hosts \u2014 not enforce protocol\n// or internal-upstream-host parity, which would 403 legitimate proxied requests.\nfunction hostAuthority(value: string): string | null {\n  const candidate = value.includes('://') ? value : `https://${value}`\n  try {\n    const url = new URL(candidate)\n    if (!url.hostname) return null\n    const port = url.port && url.port !== '80' && url.port !== '443' ? `:${url.port}` : ''\n    return `${url.hostname.toLowerCase()}${port}`\n  } catch {\n    return null\n  }\n}\n\nfunction allowedHostAuthorities(allowedOrigins: string[]): Set<string> {\n  const authorities = new Set<string>()\n  for (const origin of allowedOrigins) {\n    const authority = hostAuthority(origin)\n    if (authority) authorities.add(authority)\n  }\n  return authorities\n}\n\n// The externally-asserted host: the proxy-forwarded X-Forwarded-Host when present,\n// otherwise the Host header. The internal upstream Host (and protocol) are ignored\n// so a correctly-proxied request is not rejected for not matching the public origin.\nfunction requestHostAuthorities(req: Request): string[] {\n  const forwarded = splitHeaderValues(req.headers.get('x-forwarded-host'))\n  const hostValues = forwarded.length > 0 ? forwarded : splitHeaderValues(req.headers.get('host'))\n  const authorities: string[] = []\n  for (const value of hostValues) {\n    const authority = hostAuthority(value)\n    if (authority) authorities.push(authority)\n  }\n  return authorities\n}\n\nfunction isIdempotencyConflict(error: unknown): boolean {\n  const message = error instanceof Error ? error.message : ''\n  return message.includes('checkout_transactions_organization_id_tenant_id_link_idempotency_key_index')\n    || message.includes('checkout_transactions_organization_id_tenant_id_link_idempotency_key_unique')\n    || message.includes('duplicate key value')\n}\n\nfunction readClientSession(\n  metadata: Record<string, unknown> | null | undefined,\n): PaymentGatewayClientSession | null {\n  const candidate = metadata?.clientSession\n  if (!candidate || typeof candidate !== 'object' || Array.isArray(candidate)) return null\n  const type = (candidate as { type?: unknown }).type\n  if (type === 'redirect') {\n    const redirectUrl = (candidate as { redirectUrl?: unknown }).redirectUrl\n    if (typeof redirectUrl !== 'string' || redirectUrl.trim().length === 0) return null\n    const target = (candidate as { target?: unknown }).target\n    return {\n      type: 'redirect',\n      redirectUrl,\n      target: target === 'top' ? 'top' : 'self',\n    }\n  }\n  if (type !== 'embedded') return null\n  if (typeof (candidate as { rendererKey?: unknown }).rendererKey !== 'string') return null\n  const payload = (candidate as { payload?: unknown }).payload\n  const settings = (candidate as { settings?: unknown }).settings\n  return {\n    type: 'embedded',\n    rendererKey: (candidate as { rendererKey: string }).rendererKey,\n    payload: payload && typeof payload === 'object' && !Array.isArray(payload)\n      ? payload as Record<string, unknown>\n      : undefined,\n    settings: settings && typeof settings === 'object' && !Array.isArray(settings)\n      ? settings as Record<string, unknown>\n      : undefined,\n  }\n}\n\nasync function buildSubmitResponse(\n  req: Request,\n  em: EntityManager,\n  link: CheckoutLink,\n  transaction: CheckoutTransaction,\n  providerKey: string | null | undefined,\n): Promise<CachedSubmitResponse> {\n  const gatewayTransaction = transaction.gatewayTransactionId\n    ? await em.findOne(GatewayTransaction, {\n      id: transaction.gatewayTransactionId,\n      organizationId: transaction.organizationId,\n      tenantId: transaction.tenantId,\n      deletedAt: null,\n    })\n    : null\n  const serverOrigin = resolveServerOrigin(req)\n  const clientSession = gatewayTransaction\n    ? readClientSession(gatewayTransaction.gatewayMetadata)\n    : null\n  const paymentSession = (clientSession && gatewayTransaction)\n    ? {\n        ...clientSession,\n        ...(clientSession.type === 'embedded'\n          ? {\n              payload: {\n                ...(clientSession.payload ?? {}),\n                returnUrl: `${serverOrigin}/pay/${encodeURIComponent(link.slug)}/success/${encodeURIComponent(transaction.id)}`,\n                cancelUrl: `${serverOrigin}/pay/${encodeURIComponent(link.slug)}/cancel/${encodeURIComponent(transaction.id)}`,\n              },\n            }\n          : {}),\n        providerKey: providerKey ?? gatewayTransaction.providerKey ?? null,\n        gatewayTransactionId: gatewayTransaction.id,\n      }\n    : null\n  return {\n    transactionId: transaction.id,\n    redirectUrl: gatewayTransaction?.redirectUrl ?? null,\n    paymentSession,\n  }\n}\n\nexport const metadata = {\n  path: '/checkout/pay/[slug]/submit',\n  POST: { requireAuth: false },\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ slug: string }> | { slug: string } }) {\n  try {\n    const container = await createRequestContainer()\n    try {\n      const rateLimiter = container.resolve('rateLimiterService') as RateLimiterService\n      const key = buildCheckoutRateLimitKey(req, rateLimiter, 'checkout-submit')\n      const rateLimitResponse = await checkRateLimit(rateLimiter, checkoutSubmitRateLimitConfig, key, 'Too many payment attempts. Please try again later.')\n      if (rateLimitResponse) return rateLimitResponse\n    } catch {\n      // Rate limiting is fail-open\n    }\n    const resolvedParams = await params\n\n    const allowedOrigins = buildAllowedOrigins()\n    if (allowedOrigins.length > 0) {\n      // Reject spoofed Host / X-Forwarded-Host before any business logic runs so\n      // an attacker-controlled host can never flow into gateway-bound URLs. Hosts\n      // are matched by authority (protocol-independent) so a correctly TLS-proxied\n      // request \u2014 internal http, X-Forwarded-Proto https \u2014 is not rejected.\n      const allowedAuthorities = allowedHostAuthorities(allowedOrigins)\n      const hostAuthorities = requestHostAuthorities(req)\n      if (\n        hostAuthorities.length > 0\n        && !hostAuthorities.every((authority) => allowedAuthorities.has(authority))\n      ) {\n        return NextResponse.json({ error: 'Invalid request host' }, { status: 403 })\n      }\n\n      const origin = req.headers.get('origin')\n      const referer = req.headers.get('referer')\n      if (origin || referer) {\n        const submittedOrigin = origin ?? (referer ? new URL(referer).origin : null)\n        if (submittedOrigin && !allowedOrigins.some((allowedOrigin) => isAllowedRequestOrigin(submittedOrigin, allowedOrigin))) {\n          return NextResponse.json({ error: 'Invalid request origin' }, { status: 403 })\n        }\n      }\n    }\n\n    const idempotencyKey = req.headers.get('Idempotency-Key')?.trim()\n    if (!idempotencyKey) {\n      return NextResponse.json({ error: 'Idempotency-Key header is required' }, { status: 400 })\n    }\n    if (idempotencyKey.length < 16 || idempotencyKey.length > 128) {\n      return NextResponse.json({ error: 'Idempotency-Key must be between 16 and 128 characters' }, { status: 400 })\n    }\n\n    const body = publicSubmitSchema.parse(await req.json().catch(() => ({})))\n    const em = container.resolve('em')\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const paymentGatewayService = container.resolve('paymentGatewayService') as PaymentGatewayService\n    const link = await findOneWithDecryption(em, CheckoutLink, {\n      slug: resolvedParams.slug,\n      deletedAt: null,\n    })\n    if (!link) {\n      return NextResponse.json({ error: 'Payment link not found' }, { status: 404 })\n    }\n    if (!isCheckoutLinkPublic(link.status)) {\n      throw new CrudHttpError(422, { error: 'This payment link is not currently accepting payments' })\n    }\n    if (link.passwordHash) {\n      requireCheckoutPasswordSession(req, link.slug, {\n        linkId: link.id,\n        sessionVersion: link.passwordHash,\n      })\n    }\n    if (!link.gatewayProviderKey) {\n      throw new CrudHttpError(422, { error: 'A payment gateway must be configured before this link can be used' })\n    }\n    const legalDocuments = link.legalDocuments && typeof link.legalDocuments === 'object'\n      ? link.legalDocuments as Partial<Record<'terms' | 'privacyPolicy', CheckoutLegalDocumentRequirement>>\n      : {}\n    const legalConsentErrors: Record<string, string> = {}\n    for (const key of ['terms', 'privacyPolicy'] as const) {\n      const document = legalDocuments[key]\n      if (document?.required === true && body.acceptedLegalConsents?.[key] !== true) {\n        legalConsentErrors[`acceptedLegalConsents.${key}`] = 'checkout.payPage.validation.documentRequired'\n      }\n    }\n    if (Object.keys(legalConsentErrors).length > 0) {\n      throw new CrudHttpError(422, {\n        error: 'checkout.payPage.validation.fixErrors',\n        fieldErrors: legalConsentErrors,\n      })\n    }\n    const collectedCustomerData = link.collectCustomerDetails === false ? {} : body.customerData\n    const customerFields = Array.isArray(link.customerFieldsSchema)\n      ? link.customerFieldsSchema as CheckoutCustomerFieldRequirement[]\n      : []\n    if (link.collectCustomerDetails !== false) {\n      const customerFieldErrors = validateCheckoutCustomerData(customerFields, collectedCustomerData)\n      if (Object.keys(customerFieldErrors).length > 0) {\n        throw new CrudHttpError(422, {\n          error: 'checkout.payPage.validation.fixErrors',\n          fieldErrors: customerFieldErrors,\n        })\n      }\n    }\n    const resolvedAmount = resolveSubmittedAmount(link, body)\n    const existingTransaction = await findOneWithDecryption(em, CheckoutTransaction, {\n      linkId: link.id,\n      idempotencyKey,\n      organizationId: link.organizationId,\n      tenantId: link.tenantId,\n    }, undefined, { organizationId: link.organizationId, tenantId: link.tenantId })\n    validateDescriptorCurrencies(link.gatewayProviderKey, [\n      existingTransaction?.currencyCode ?? resolvedAmount.currencyCode,\n    ])\n    if (existingTransaction?.gatewayTransactionId) {\n      return NextResponse.json(\n        await buildSubmitResponse(req, em, link, existingTransaction, link.gatewayProviderKey),\n      )\n    }\n\n    const transactionInput = {\n      linkId: link.id,\n      amount: resolvedAmount.amount,\n      currencyCode: resolvedAmount.currencyCode,\n      idempotencyKey,\n      customerData: collectedCustomerData,\n      firstName: typeof collectedCustomerData.firstName === 'string' ? collectedCustomerData.firstName : null,\n      lastName: typeof collectedCustomerData.lastName === 'string' ? collectedCustomerData.lastName : null,\n      email: typeof collectedCustomerData.email === 'string' ? collectedCustomerData.email : null,\n      phone: typeof collectedCustomerData.phone === 'string' ? collectedCustomerData.phone : null,\n      selectedPriceItemId: resolvedAmount.selectedPriceItemId,\n      acceptedLegalConsents: buildConsentProof(link, body.acceptedLegalConsents),\n      ipAddress: req.headers.get('x-forwarded-for') ?? null,\n      userAgent: req.headers.get('user-agent') ?? null,\n      tenantId: link.tenantId,\n      organizationId: link.organizationId,\n    }\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth: null,\n      organizationScope: null,\n      selectedOrganizationId: link.organizationId,\n      organizationIds: [link.organizationId],\n      request: req,\n    }\n    let transactionId = existingTransaction?.id ?? null\n    if (!transactionId) {\n      try {\n        const created = await commandBus.execute<typeof transactionInput, { id: string }>('checkout.transaction.create', {\n          input: transactionInput,\n          ctx,\n        })\n        transactionId = created.result.id\n      } catch (error) {\n        if (!isIdempotencyConflict(error)) {\n          throw error\n        }\n        const duplicated = await findOneWithDecryption(em, CheckoutTransaction, {\n          linkId: link.id,\n          idempotencyKey,\n          organizationId: link.organizationId,\n          tenantId: link.tenantId,\n        }, undefined, { organizationId: link.organizationId, tenantId: link.tenantId })\n        if (!duplicated) {\n          throw error\n        }\n        transactionId = duplicated.id\n      }\n    }\n    if (!transactionId) {\n      throw new CrudHttpError(500, { error: 'Failed to initialize checkout transaction' })\n    }\n    const serverOrigin = resolveServerOrigin(req)\n    const successUrl = `${serverOrigin}/pay/${encodeURIComponent(link.slug)}/success/${encodeURIComponent(transactionId)}`\n    const cancelUrl = `${serverOrigin}/pay/${encodeURIComponent(link.slug)}/cancel/${encodeURIComponent(transactionId)}`\n    const transaction = await findOneWithDecryption(em, CheckoutTransaction, {\n      id: transactionId,\n      organizationId: link.organizationId,\n      tenantId: link.tenantId,\n    }, undefined, { organizationId: link.organizationId, tenantId: link.tenantId })\n    if (!transaction) {\n      throw new CrudHttpError(404, { error: 'Transaction not found' })\n    }\n    const sessionAmount = Number(transaction.amount)\n    if (!Number.isFinite(sessionAmount)) {\n      throw new CrudHttpError(500, { error: 'Invalid checkout transaction amount' })\n    }\n    const sessionCurrencyCode = transaction.currencyCode\n    if (!transaction.gatewayTransactionId) {\n      const configuredPaymentTypes = Array.isArray(link.gatewaySettings?.paymentTypes)\n        ? link.gatewaySettings.paymentTypes.filter(\n            (value: unknown): value is string => typeof value === 'string' && value.trim().length > 0,\n          )\n        : []\n      const rendererKey = typeof link.gatewaySettings?.rendererKey === 'string' && link.gatewaySettings.rendererKey.trim().length > 0\n        ? link.gatewaySettings.rendererKey.trim()\n        : undefined\n      const rendererSettings = link.gatewaySettings?.rendererSettings\n        && typeof link.gatewaySettings.rendererSettings === 'object'\n        && !Array.isArray(link.gatewaySettings.rendererSettings)\n        ? link.gatewaySettings.rendererSettings as Record<string, unknown>\n        : undefined\n      const presentationMode = link.gatewaySettings?.presentationMode === 'embedded'\n        || link.gatewaySettings?.presentationMode === 'redirect'\n        || link.gatewaySettings?.presentationMode === 'auto'\n        ? link.gatewaySettings.presentationMode\n        : undefined\n\n      let sessionResult: Awaited<ReturnType<typeof paymentGatewayService.createPaymentSession>>\n      try {\n        sessionResult = await paymentGatewayService.createPaymentSession({\n          providerKey: link.gatewayProviderKey,\n          paymentId: transactionId,\n          idempotencyKey,\n          amount: sessionAmount,\n          currencyCode: sessionCurrencyCode,\n          paymentTypes: configuredPaymentTypes.length > 0 ? configuredPaymentTypes : undefined,\n          description: link.title ?? link.name,\n          successUrl,\n          cancelUrl,\n          metadata: {\n            checkoutLinkId: link.id,\n            checkoutSlug: link.slug,\n          },\n          presentation: rendererKey || rendererSettings || presentationMode\n            ? {\n                ...(presentationMode ? { mode: presentationMode } : {}),\n                ...(rendererKey ? { rendererKey } : {}),\n                ...(rendererSettings ? { rendererSettings } : {}),\n              }\n            : undefined,\n          organizationId: link.organizationId,\n          tenantId: link.tenantId,\n        })\n      } catch (error) {\n        // The gateway itself failed \u2014 mark the transaction failed and surface 502.\n        await commandBus.execute('checkout.transaction.updateStatus', {\n          input: {\n            id: transaction.id,\n            status: 'failed',\n            paymentStatus: transaction.paymentStatus ?? 'failed',\n            organizationId: link.organizationId,\n            tenantId: link.tenantId,\n          },\n          ctx,\n        }).catch(() => undefined)\n        logger.error('Failed to create payment session', {\n          linkId: link.id,\n          transactionId: transaction.id,\n          providerKey: link.gatewayProviderKey,\n          err: error,\n        })\n        throw new CrudHttpError(502, { error: 'checkout.payPage.errors.sessionStart' })\n      }\n\n      // Update the transaction status to reflect the gateway response.\n      // If the webhook already raced ahead and completed this transaction,\n      // updateStatus will throw a 409 conflict \u2014 that is correct behavior and\n      // means the payment succeeded, so we treat it as benign and fall through\n      // to return the real, already-terminal transaction below.\n      let statusConflict = false\n      try {\n        await commandBus.execute('checkout.transaction.updateStatus', {\n          input: {\n            id: transaction.id,\n            status: mapGatewayStatusToCheckoutStatus(sessionResult.transaction.unifiedStatus),\n            paymentStatus: sessionResult.transaction.unifiedStatus,\n            gatewayTransactionId: sessionResult.transaction.id,\n            organizationId: link.organizationId,\n            tenantId: link.tenantId,\n          },\n          ctx,\n        })\n      } catch (error) {\n        const isConflict = isCrudHttpError(error)\n          && error.status === 409\n          && (\n            (error.body as Record<string, unknown> | undefined)?.code === 'concurrent_status_update'\n            || (error.body as Record<string, unknown> | undefined)?.code === 'invalid_status_transition'\n          )\n        if (!isConflict) throw error\n        logger.info('Transaction status already advanced by concurrent writer \u2014 webhook won the race', {\n          linkId: link.id,\n          transactionId: transaction.id,\n          conflictCode: (error.body as Record<string, unknown> | undefined)?.code,\n        })\n        statusConflict = true\n      }\n\n      const refreshedTransaction = await findOneWithDecryption(em, CheckoutTransaction, {\n        id: transaction.id,\n        organizationId: link.organizationId,\n        tenantId: link.tenantId,\n      }, undefined, { organizationId: link.organizationId, tenantId: link.tenantId })\n      if (!refreshedTransaction) {\n        throw new CrudHttpError(404, { error: 'Transaction not found' })\n      }\n      if (!statusConflict) {\n        await emitCheckoutEvent('checkout.transaction.sessionStarted', {\n          transactionId: refreshedTransaction.id,\n          linkId: refreshedTransaction.linkId,\n          templateId: link.templateId ?? null,\n          slug: link.slug,\n          status: refreshedTransaction.status,\n          paymentStatus: refreshedTransaction.paymentStatus ?? null,\n          amount: Number(refreshedTransaction.amount),\n          currency: refreshedTransaction.currencyCode,\n          gatewayProvider: link.gatewayProviderKey,\n          gatewayTransactionId: refreshedTransaction.gatewayTransactionId ?? null,\n          occurredAt: new Date().toISOString(),\n          tenantId: link.tenantId,\n          organizationId: link.organizationId,\n        }).catch(() => undefined)\n      }\n      return NextResponse.json(\n        await buildSubmitResponse(req, em, link, refreshedTransaction, link.gatewayProviderKey),\n        { status: 201 },\n      )\n    }\n\n    return NextResponse.json(await buildSubmitResponse(req, em, link, transaction, link.gatewayProviderKey), { status: 201 })\n  } catch (error) {\n    return handleCheckoutRouteError(error)\n  }\n}\n\nexport const openApi = {\n  tags: [checkoutTag],\n}\n\nexport default POST\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AAGvC,SAAS,eAAe,uBAAuB;AAC/C,SAAS,6BAA6B;AAEtC,SAAS,sBAAsB;AAG/B,SAAS,0BAA0B;AACnC,SAAS,cAAc,2BAA2B;AAClD,SAAS,0BAA0B;AACnC,SAAS,0BAA0B,sCAAsC;AACzE,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oCAAoC;AAC7C,SAAS,2BAA2B,qCAAqC;AACzE,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,UAAU;AAoBtC,SAAS,cAAc,KAAkB;AACvC,MAAI,IAAI,KAAM,QAAO,IAAI;AACzB,SAAO,IAAI,aAAa,WAAW,QAAQ;AAC7C;AAEA,SAAS,0BAA0B,WAAkC;AACnE,MAAI;AACF,WAAO,IAAI,IAAI,SAAS,EAAE;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,UAA2B;AACrD,SAAO,aAAa,eAAe,aAAa;AAClD;AAEA,SAAS,kBAAkB,OAAgC;AACzD,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACvC;AAEA,SAAS,uBAAuB,iBAAyB,eAAgC;AACvF,MAAI,oBAAoB,cAAe,QAAO;AAC9C,MAAI;AACF,UAAM,eAAe,IAAI,IAAI,eAAe;AAC5C,UAAM,aAAa,IAAI,IAAI,aAAa;AACxC,WAAO,aAAa,aAAa,WAAW,YACvC,cAAc,YAAY,MAAM,cAAc,UAAU,KACxD,mBAAmB,aAAa,QAAQ,KACxC,mBAAmB,WAAW,QAAQ;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,8BAAwC,QAAQ,IAAI,4BAA4B,IACnF,MAAM,GAAG,EACT,IAAI,CAAC,WAAW,OAAO,KAAK,CAAC,EAC7B,OAAO,CAAC,WAAW,OAAO,SAAS,CAAC;AAEvC,SAAS,iBAAiB,gBAA6B,WAAmB;AACxE,QAAM,aAAa,0BAA0B,SAAS;AACtD,MAAI,CAAC,WAAY;AACjB,iBAAe,IAAI,UAAU;AAC7B,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,UAAU;AACjC,QAAI,CAAC,mBAAmB,OAAO,QAAQ,EAAG;AAC1C,eAAW,YAAY,CAAC,aAAa,WAAW,GAAG;AACjD,iBAAW,YAAY,CAAC,SAAS,QAAQ,GAAG;AAC1C,cAAM,UAAU,IAAI,IAAI,UAAU;AAClC,gBAAQ,WAAW;AACnB,gBAAQ,WAAW;AACnB,uBAAe,IAAI,QAAQ,MAAM;AAAA,MACnC;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,2BAAqC;AAC5C,QAAM,UAAU,CAAC,GAAG,0BAA0B;AAC9C,aAAW,UAAU,CAAC,QAAQ,IAAI,SAAS,QAAQ,IAAI,mBAAmB,GAAG;AAC3E,QAAI,OAAQ,SAAQ,KAAK,MAAM;AAAA,EACjC;AACA,SAAO;AACT;AAMA,SAAS,sBAAgC;AACvC,QAAM,iBAAiB,oBAAI,IAAY;AACvC,aAAW,UAAU,yBAAyB,GAAG;AAC/C,qBAAiB,gBAAgB,MAAM;AAAA,EACzC;AACA,SAAO,MAAM,KAAK,cAAc;AAClC;AAOA,SAAS,oBAAoB,KAAsB;AACjD,aAAW,aAAa,yBAAyB,GAAG;AAClD,UAAM,aAAa,0BAA0B,SAAS;AACtD,QAAI,WAAY,QAAO;AAAA,EACzB;AACA,QAAM,aAAa,IAAI,IAAI,IAAI,GAAG;AAClC,MAAI,mBAAmB,WAAW,QAAQ,EAAG,QAAO,WAAW;AAC/D,QAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAC7E;AAOA,SAAS,cAAc,OAA8B;AACnD,QAAM,YAAY,MAAM,SAAS,KAAK,IAAI,QAAQ,WAAW,KAAK;AAClE,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAI,CAAC,IAAI,SAAU,QAAO;AAC1B,UAAM,OAAO,IAAI,QAAQ,IAAI,SAAS,QAAQ,IAAI,SAAS,QAAQ,IAAI,IAAI,IAAI,KAAK;AACpF,WAAO,GAAG,IAAI,SAAS,YAAY,CAAC,GAAG,IAAI;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,uBAAuB,gBAAuC;AACrE,QAAM,cAAc,oBAAI,IAAY;AACpC,aAAW,UAAU,gBAAgB;AACnC,UAAM,YAAY,cAAc,MAAM;AACtC,QAAI,UAAW,aAAY,IAAI,SAAS;AAAA,EAC1C;AACA,SAAO;AACT;AAKA,SAAS,uBAAuB,KAAwB;AACtD,QAAM,YAAY,kBAAkB,IAAI,QAAQ,IAAI,kBAAkB,CAAC;AACvE,QAAM,aAAa,UAAU,SAAS,IAAI,YAAY,kBAAkB,IAAI,QAAQ,IAAI,MAAM,CAAC;AAC/F,QAAM,cAAwB,CAAC;AAC/B,aAAW,SAAS,YAAY;AAC9B,UAAM,YAAY,cAAc,KAAK;AACrC,QAAI,UAAW,aAAY,KAAK,SAAS;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,OAAyB;AACtD,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,SAAO,QAAQ,SAAS,4EAA4E,KAC/F,QAAQ,SAAS,6EAA6E,KAC9F,QAAQ,SAAS,qBAAqB;AAC7C;AAEA,SAAS,kBACPA,WACoC;AACpC,QAAM,YAAYA,WAAU;AAC5B,MAAI,CAAC,aAAa,OAAO,cAAc,YAAY,MAAM,QAAQ,SAAS,EAAG,QAAO;AACpF,QAAM,OAAQ,UAAiC;AAC/C,MAAI,SAAS,YAAY;AACvB,UAAM,cAAe,UAAwC;AAC7D,QAAI,OAAO,gBAAgB,YAAY,YAAY,KAAK,EAAE,WAAW,EAAG,QAAO;AAC/E,UAAM,SAAU,UAAmC;AACnD,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,QAAQ,WAAW,QAAQ,QAAQ;AAAA,IACrC;AAAA,EACF;AACA,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,OAAQ,UAAwC,gBAAgB,SAAU,QAAO;AACrF,QAAM,UAAW,UAAoC;AACrD,QAAM,WAAY,UAAqC;AACvD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,aAAc,UAAsC;AAAA,IACpD,SAAS,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,OAAO,IACrE,UACA;AAAA,IACJ,UAAU,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,IACzE,WACA;AAAA,EACN;AACF;AAEA,eAAe,oBACb,KACA,IACA,MACA,aACA,aAC+B;AAC/B,QAAM,qBAAqB,YAAY,uBACnC,MAAM,GAAG,QAAQ,oBAAoB;AAAA,IACrC,IAAI,YAAY;AAAA,IAChB,gBAAgB,YAAY;AAAA,IAC5B,UAAU,YAAY;AAAA,IACtB,WAAW;AAAA,EACb,CAAC,IACC;AACJ,QAAM,eAAe,oBAAoB,GAAG;AAC5C,QAAM,gBAAgB,qBAClB,kBAAkB,mBAAmB,eAAe,IACpD;AACJ,QAAM,iBAAkB,iBAAiB,qBACrC;AAAA,IACE,GAAG;AAAA,IACH,GAAI,cAAc,SAAS,aACvB;AAAA,MACE,SAAS;AAAA,QACP,GAAI,cAAc,WAAW,CAAC;AAAA,QAC9B,WAAW,GAAG,YAAY,QAAQ,mBAAmB,KAAK,IAAI,CAAC,YAAY,mBAAmB,YAAY,EAAE,CAAC;AAAA,QAC7G,WAAW,GAAG,YAAY,QAAQ,mBAAmB,KAAK,IAAI,CAAC,WAAW,mBAAmB,YAAY,EAAE,CAAC;AAAA,MAC9G;AAAA,IACF,IACA,CAAC;AAAA,IACL,aAAa,eAAe,mBAAmB,eAAe;AAAA,IAC9D,sBAAsB,mBAAmB;AAAA,EAC3C,IACA;AACJ,SAAO;AAAA,IACL,eAAe,YAAY;AAAA,IAC3B,aAAa,oBAAoB,eAAe;AAAA,IAChD;AAAA,EACF;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAA6D;AAC7G,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI;AACF,YAAM,cAAc,UAAU,QAAQ,oBAAoB;AAC1D,YAAM,MAAM,0BAA0B,KAAK,aAAa,iBAAiB;AACzE,YAAM,oBAAoB,MAAM,eAAe,aAAa,+BAA+B,KAAK,oDAAoD;AACpJ,UAAI,kBAAmB,QAAO;AAAA,IAChC,QAAQ;AAAA,IAER;AACA,UAAM,iBAAiB,MAAM;AAE7B,UAAM,iBAAiB,oBAAoB;AAC3C,QAAI,eAAe,SAAS,GAAG;AAK7B,YAAM,qBAAqB,uBAAuB,cAAc;AAChE,YAAM,kBAAkB,uBAAuB,GAAG;AAClD,UACE,gBAAgB,SAAS,KACtB,CAAC,gBAAgB,MAAM,CAAC,cAAc,mBAAmB,IAAI,SAAS,CAAC,GAC1E;AACA,eAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC7E;AAEA,YAAM,SAAS,IAAI,QAAQ,IAAI,QAAQ;AACvC,YAAM,UAAU,IAAI,QAAQ,IAAI,SAAS;AACzC,UAAI,UAAU,SAAS;AACrB,cAAM,kBAAkB,WAAW,UAAU,IAAI,IAAI,OAAO,EAAE,SAAS;AACvE,YAAI,mBAAmB,CAAC,eAAe,KAAK,CAAC,kBAAkB,uBAAuB,iBAAiB,aAAa,CAAC,GAAG;AACtH,iBAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAEA,UAAM,iBAAiB,IAAI,QAAQ,IAAI,iBAAiB,GAAG,KAAK;AAChE,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3F;AACA,QAAI,eAAe,SAAS,MAAM,eAAe,SAAS,KAAK;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,wDAAwD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9G;AAEA,UAAM,OAAO,mBAAmB,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE,CAAC;AACxE,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,wBAAwB,UAAU,QAAQ,uBAAuB;AACvE,UAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc;AAAA,MACzD,MAAM,eAAe;AAAA,MACrB,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AACA,QAAI,CAAC,qBAAqB,KAAK,MAAM,GAAG;AACtC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wDAAwD,CAAC;AAAA,IACjG;AACA,QAAI,KAAK,cAAc;AACrB,qCAA+B,KAAK,KAAK,MAAM;AAAA,QAC7C,QAAQ,KAAK;AAAA,QACb,gBAAgB,KAAK;AAAA,MACvB,CAAC;AAAA,IACH;AACA,QAAI,CAAC,KAAK,oBAAoB;AAC5B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oEAAoE,CAAC;AAAA,IAC7G;AACA,UAAM,iBAAiB,KAAK,kBAAkB,OAAO,KAAK,mBAAmB,WACzE,KAAK,iBACL,CAAC;AACL,UAAM,qBAA6C,CAAC;AACpD,eAAW,OAAO,CAAC,SAAS,eAAe,GAAY;AACrD,YAAM,WAAW,eAAe,GAAG;AACnC,UAAI,UAAU,aAAa,QAAQ,KAAK,wBAAwB,GAAG,MAAM,MAAM;AAC7E,2BAAmB,yBAAyB,GAAG,EAAE,IAAI;AAAA,MACvD;AAAA,IACF;AACA,QAAI,OAAO,KAAK,kBAAkB,EAAE,SAAS,GAAG;AAC9C,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,QACP,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AACA,UAAM,wBAAwB,KAAK,2BAA2B,QAAQ,CAAC,IAAI,KAAK;AAChF,UAAM,iBAAiB,MAAM,QAAQ,KAAK,oBAAoB,IAC1D,KAAK,uBACL,CAAC;AACL,QAAI,KAAK,2BAA2B,OAAO;AACzC,YAAM,sBAAsB,6BAA6B,gBAAgB,qBAAqB;AAC9F,UAAI,OAAO,KAAK,mBAAmB,EAAE,SAAS,GAAG;AAC/C,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO;AAAA,UACP,aAAa;AAAA,QACf,CAAC;AAAA,MACH;AAAA,IACF;AACA,UAAM,iBAAiB,uBAAuB,MAAM,IAAI;AACxD,UAAM,sBAAsB,MAAM,sBAAsB,IAAI,qBAAqB;AAAA,MAC/E,QAAQ,KAAK;AAAA,MACb;AAAA,MACA,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB,GAAG,QAAW,EAAE,gBAAgB,KAAK,gBAAgB,UAAU,KAAK,SAAS,CAAC;AAC9E,iCAA6B,KAAK,oBAAoB;AAAA,MACpD,qBAAqB,gBAAgB,eAAe;AAAA,IACtD,CAAC;AACD,QAAI,qBAAqB,sBAAsB;AAC7C,aAAO,aAAa;AAAA,QAClB,MAAM,oBAAoB,KAAK,IAAI,MAAM,qBAAqB,KAAK,kBAAkB;AAAA,MACvF;AAAA,IACF;AAEA,UAAM,mBAAmB;AAAA,MACvB,QAAQ,KAAK;AAAA,MACb,QAAQ,eAAe;AAAA,MACvB,cAAc,eAAe;AAAA,MAC7B;AAAA,MACA,cAAc;AAAA,MACd,WAAW,OAAO,sBAAsB,cAAc,WAAW,sBAAsB,YAAY;AAAA,MACnG,UAAU,OAAO,sBAAsB,aAAa,WAAW,sBAAsB,WAAW;AAAA,MAChG,OAAO,OAAO,sBAAsB,UAAU,WAAW,sBAAsB,QAAQ;AAAA,MACvF,OAAO,OAAO,sBAAsB,UAAU,WAAW,sBAAsB,QAAQ;AAAA,MACvF,qBAAqB,eAAe;AAAA,MACpC,uBAAuB,kBAAkB,MAAM,KAAK,qBAAqB;AAAA,MACzE,WAAW,IAAI,QAAQ,IAAI,iBAAiB,KAAK;AAAA,MACjD,WAAW,IAAI,QAAQ,IAAI,YAAY,KAAK;AAAA,MAC5C,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB;AACA,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA,MAAM;AAAA,MACN,mBAAmB;AAAA,MACnB,wBAAwB,KAAK;AAAA,MAC7B,iBAAiB,CAAC,KAAK,cAAc;AAAA,MACrC,SAAS;AAAA,IACX;AACA,QAAI,gBAAgB,qBAAqB,MAAM;AAC/C,QAAI,CAAC,eAAe;AAClB,UAAI;AACF,cAAM,UAAU,MAAM,WAAW,QAAiD,+BAA+B;AAAA,UAC/G,OAAO;AAAA,UACP;AAAA,QACF,CAAC;AACD,wBAAgB,QAAQ,OAAO;AAAA,MACjC,SAAS,OAAO;AACd,YAAI,CAAC,sBAAsB,KAAK,GAAG;AACjC,gBAAM;AAAA,QACR;AACA,cAAM,aAAa,MAAM,sBAAsB,IAAI,qBAAqB;AAAA,UACtE,QAAQ,KAAK;AAAA,UACb;AAAA,UACA,gBAAgB,KAAK;AAAA,UACrB,UAAU,KAAK;AAAA,QACjB,GAAG,QAAW,EAAE,gBAAgB,KAAK,gBAAgB,UAAU,KAAK,SAAS,CAAC;AAC9E,YAAI,CAAC,YAAY;AACf,gBAAM;AAAA,QACR;AACA,wBAAgB,WAAW;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,4CAA4C,CAAC;AAAA,IACrF;AACA,UAAM,eAAe,oBAAoB,GAAG;AAC5C,UAAM,aAAa,GAAG,YAAY,QAAQ,mBAAmB,KAAK,IAAI,CAAC,YAAY,mBAAmB,aAAa,CAAC;AACpH,UAAM,YAAY,GAAG,YAAY,QAAQ,mBAAmB,KAAK,IAAI,CAAC,WAAW,mBAAmB,aAAa,CAAC;AAClH,UAAM,cAAc,MAAM,sBAAsB,IAAI,qBAAqB;AAAA,MACvE,IAAI;AAAA,MACJ,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB,GAAG,QAAW,EAAE,gBAAgB,KAAK,gBAAgB,UAAU,KAAK,SAAS,CAAC;AAC9E,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wBAAwB,CAAC;AAAA,IACjE;AACA,UAAM,gBAAgB,OAAO,YAAY,MAAM;AAC/C,QAAI,CAAC,OAAO,SAAS,aAAa,GAAG;AACnC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,IAC/E;AACA,UAAM,sBAAsB,YAAY;AACxC,QAAI,CAAC,YAAY,sBAAsB;AACrC,YAAM,yBAAyB,MAAM,QAAQ,KAAK,iBAAiB,YAAY,IAC3E,KAAK,gBAAgB,aAAa;AAAA,QAChC,CAAC,UAAoC,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS;AAAA,MAC1F,IACA,CAAC;AACL,YAAM,cAAc,OAAO,KAAK,iBAAiB,gBAAgB,YAAY,KAAK,gBAAgB,YAAY,KAAK,EAAE,SAAS,IAC1H,KAAK,gBAAgB,YAAY,KAAK,IACtC;AACJ,YAAM,mBAAmB,KAAK,iBAAiB,oBAC1C,OAAO,KAAK,gBAAgB,qBAAqB,YACjD,CAAC,MAAM,QAAQ,KAAK,gBAAgB,gBAAgB,IACrD,KAAK,gBAAgB,mBACrB;AACJ,YAAM,mBAAmB,KAAK,iBAAiB,qBAAqB,cAC/D,KAAK,iBAAiB,qBAAqB,cAC3C,KAAK,iBAAiB,qBAAqB,SAC5C,KAAK,gBAAgB,mBACrB;AAEJ,UAAI;AACJ,UAAI;AACF,wBAAgB,MAAM,sBAAsB,qBAAqB;AAAA,UAC/D,aAAa,KAAK;AAAA,UAClB,WAAW;AAAA,UACX;AAAA,UACA,QAAQ;AAAA,UACR,cAAc;AAAA,UACd,cAAc,uBAAuB,SAAS,IAAI,yBAAyB;AAAA,UAC3E,aAAa,KAAK,SAAS,KAAK;AAAA,UAChC;AAAA,UACA;AAAA,UACA,UAAU;AAAA,YACR,gBAAgB,KAAK;AAAA,YACrB,cAAc,KAAK;AAAA,UACrB;AAAA,UACA,cAAc,eAAe,oBAAoB,mBAC7C;AAAA,YACE,GAAI,mBAAmB,EAAE,MAAM,iBAAiB,IAAI,CAAC;AAAA,YACrD,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,YACrC,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;AAAA,UACjD,IACA;AAAA,UACJ,gBAAgB,KAAK;AAAA,UACrB,UAAU,KAAK;AAAA,QACjB,CAAC;AAAA,MACH,SAAS,OAAO;AAEd,cAAM,WAAW,QAAQ,qCAAqC;AAAA,UAC5D,OAAO;AAAA,YACL,IAAI,YAAY;AAAA,YAChB,QAAQ;AAAA,YACR,eAAe,YAAY,iBAAiB;AAAA,YAC5C,gBAAgB,KAAK;AAAA,YACrB,UAAU,KAAK;AAAA,UACjB;AAAA,UACA;AAAA,QACF,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,eAAO,MAAM,oCAAoC;AAAA,UAC/C,QAAQ,KAAK;AAAA,UACb,eAAe,YAAY;AAAA,UAC3B,aAAa,KAAK;AAAA,UAClB,KAAK;AAAA,QACP,CAAC;AACD,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uCAAuC,CAAC;AAAA,MAChF;AAOA,UAAI,iBAAiB;AACrB,UAAI;AACF,cAAM,WAAW,QAAQ,qCAAqC;AAAA,UAC5D,OAAO;AAAA,YACL,IAAI,YAAY;AAAA,YAChB,QAAQ,iCAAiC,cAAc,YAAY,aAAa;AAAA,YAChF,eAAe,cAAc,YAAY;AAAA,YACzC,sBAAsB,cAAc,YAAY;AAAA,YAChD,gBAAgB,KAAK;AAAA,YACrB,UAAU,KAAK;AAAA,UACjB;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,cAAM,aAAa,gBAAgB,KAAK,KACnC,MAAM,WAAW,QAEjB,MAAM,MAA8C,SAAS,8BAC1D,MAAM,MAA8C,SAAS;AAErE,YAAI,CAAC,WAAY,OAAM;AACvB,eAAO,KAAK,wFAAmF;AAAA,UAC7F,QAAQ,KAAK;AAAA,UACb,eAAe,YAAY;AAAA,UAC3B,cAAe,MAAM,MAA8C;AAAA,QACrE,CAAC;AACD,yBAAiB;AAAA,MACnB;AAEA,YAAM,uBAAuB,MAAM,sBAAsB,IAAI,qBAAqB;AAAA,QAChF,IAAI,YAAY;AAAA,QAChB,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,MACjB,GAAG,QAAW,EAAE,gBAAgB,KAAK,gBAAgB,UAAU,KAAK,SAAS,CAAC;AAC9E,UAAI,CAAC,sBAAsB;AACzB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wBAAwB,CAAC;AAAA,MACjE;AACA,UAAI,CAAC,gBAAgB;AACnB,cAAM,kBAAkB,uCAAuC;AAAA,UAC7D,eAAe,qBAAqB;AAAA,UACpC,QAAQ,qBAAqB;AAAA,UAC7B,YAAY,KAAK,cAAc;AAAA,UAC/B,MAAM,KAAK;AAAA,UACX,QAAQ,qBAAqB;AAAA,UAC7B,eAAe,qBAAqB,iBAAiB;AAAA,UACrD,QAAQ,OAAO,qBAAqB,MAAM;AAAA,UAC1C,UAAU,qBAAqB;AAAA,UAC/B,iBAAiB,KAAK;AAAA,UACtB,sBAAsB,qBAAqB,wBAAwB;AAAA,UACnE,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,UACnC,UAAU,KAAK;AAAA,UACf,gBAAgB,KAAK;AAAA,QACvB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,MAC1B;AACA,aAAO,aAAa;AAAA,QAClB,MAAM,oBAAoB,KAAK,IAAI,MAAM,sBAAsB,KAAK,kBAAkB;AAAA,QACtF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,MAAM,oBAAoB,KAAK,IAAI,MAAM,aAAa,KAAK,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1H,SAAS,OAAO;AACd,WAAO,yBAAyB,KAAK;AAAA,EACvC;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AACpB;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands/command-bus'\nimport type { CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { RateLimiterService } from '@open-mercato/shared/lib/ratelimit/service'\nimport { checkRateLimit } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport type { PaymentGatewayClientSession } from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { PaymentGatewayService } from '@open-mercato/core/modules/payment_gateways/lib/gateway-service'\nimport { GatewayTransaction } from '@open-mercato/core/modules/payment_gateways/data/entities'\nimport { CheckoutLink, CheckoutTransaction } from '../../../../data/entities'\nimport { publicSubmitSchema } from '../../../../data/validators'\nimport { handleCheckoutRouteError, requireCheckoutPasswordSession } from '../../../helpers'\nimport { emitCheckoutEvent } from '../../../../events'\nimport {\n  buildConsentProof,\n  isCheckoutLinkPublic,\n  mapGatewayStatusToCheckoutStatus,\n  resolveSubmittedAmount,\n  validateDescriptorCurrencies,\n} from '../../../../lib/utils'\nimport { validateCheckoutCustomerData } from '../../../../lib/customerDataValidation'\nimport { buildCheckoutRateLimitKey, checkoutSubmitRateLimitConfig } from '../../../../lib/rateLimiter'\nimport { checkoutTag } from '../../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('checkout')\n\ntype CachedSubmitResponse = {\n  transactionId: string\n  redirectUrl?: string | null\n  paymentSession?: (PaymentGatewayClientSession & {\n    providerKey: string | null\n    gatewayTransactionId: string\n  }) | null\n}\n\ntype CheckoutLegalDocumentRequirement = {\n  required?: boolean\n}\n\ntype CheckoutCustomerFieldRequirement = {\n  key: string\n  required?: boolean\n}\n\nfunction normalizePort(url: URL): string {\n  if (url.port) return url.port\n  return url.protocol === 'https:' ? '443' : '80'\n}\n\nfunction normalizeConfiguredOrigin(candidate: string): string | null {\n  try {\n    return new URL(candidate).origin\n  } catch {\n    return null\n  }\n}\n\nfunction isLoopbackHostname(hostname: string): boolean {\n  return hostname === '127.0.0.1' || hostname === 'localhost'\n}\n\nfunction splitHeaderValues(value: string | null): string[] {\n  if (!value) return []\n  return value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter((entry) => entry.length > 0)\n}\n\nfunction isAllowedRequestOrigin(submittedOrigin: string, allowedOrigin: string): boolean {\n  if (submittedOrigin === allowedOrigin) return true\n  try {\n    const submittedUrl = new URL(submittedOrigin)\n    const allowedUrl = new URL(allowedOrigin)\n    return submittedUrl.protocol === allowedUrl.protocol\n      && normalizePort(submittedUrl) === normalizePort(allowedUrl)\n      && isLoopbackHostname(submittedUrl.hostname)\n      && isLoopbackHostname(allowedUrl.hostname)\n  } catch {\n    return false\n  }\n}\n\nconst CONFIGURED_ALLOWED_ORIGINS: string[] = (process.env.CHECKOUT_ALLOWED_ORIGINS ?? '')\n  .split(',')\n  .map((origin) => origin.trim())\n  .filter((origin) => origin.length > 0)\n\nfunction addAllowedOrigin(allowedOrigins: Set<string>, candidate: string) {\n  const normalized = normalizeConfiguredOrigin(candidate)\n  if (!normalized) return\n  allowedOrigins.add(normalized)\n  try {\n    const parsed = new URL(normalized)\n    if (!isLoopbackHostname(parsed.hostname)) return\n    for (const hostname of ['127.0.0.1', 'localhost']) {\n      for (const protocol of ['http:', 'https:']) {\n        const variant = new URL(normalized)\n        variant.hostname = hostname\n        variant.protocol = protocol\n        allowedOrigins.add(variant.origin)\n      }\n    }\n  } catch {\n    // Ignore invalid variants.\n  }\n}\n\nfunction collectConfiguredOrigins(): string[] {\n  const origins = [...CONFIGURED_ALLOWED_ORIGINS]\n  for (const origin of [process.env.APP_URL, process.env.NEXT_PUBLIC_APP_URL]) {\n    if (origin) origins.push(origin)\n  }\n  return origins\n}\n\n// Allowed origins are built ONLY from server-configured values. The inbound\n// request URL, Host and X-Forwarded-Host headers are attacker-controllable on\n// deployments that do not normalize them at the edge, so they must never seed\n// the allowlist (otherwise a spoofed Host self-passes the origin check).\nfunction buildAllowedOrigins(): string[] {\n  const allowedOrigins = new Set<string>()\n  for (const origin of collectConfiguredOrigins()) {\n    addAllowedOrigin(allowedOrigins, origin)\n  }\n  return Array.from(allowedOrigins)\n}\n\n// Resolve the origin used to build gateway-bound success/cancel/return URLs.\n// Always prefer a server-pinned configured origin; only fall back to the request\n// origin on loopback (local dev/test), where the Host cannot be spoofed by a\n// remote attacker. A non-loopback request with no configured origin is a\n// misconfiguration and is rejected rather than emitting an attacker-controllable URL.\nfunction resolveServerOrigin(req: Request): string {\n  for (const candidate of collectConfiguredOrigins()) {\n    const normalized = normalizeConfiguredOrigin(candidate)\n    if (normalized) return normalized\n  }\n  const requestUrl = new URL(req.url)\n  if (isLoopbackHostname(requestUrl.hostname)) return requestUrl.origin\n  throw new CrudHttpError(500, { error: 'Checkout origin is not configured' })\n}\n\n// Normalize a host value (bare host, host:port, or full origin) to its authority\n// (`hostname` plus any non-default port), lower-cased. Protocol is intentionally\n// dropped: the gateway-bound URLs are already pinned to the configured origin, so\n// the host guard below only needs to reject foreign hosts \u2014 not enforce protocol\n// or internal-upstream-host parity, which would 403 legitimate proxied requests.\nfunction hostAuthority(value: string): string | null {\n  const candidate = value.includes('://') ? value : `https://${value}`\n  try {\n    const url = new URL(candidate)\n    if (!url.hostname) return null\n    const port = url.port && url.port !== '80' && url.port !== '443' ? `:${url.port}` : ''\n    return `${url.hostname.toLowerCase()}${port}`\n  } catch {\n    return null\n  }\n}\n\nfunction allowedHostAuthorities(allowedOrigins: string[]): Set<string> {\n  const authorities = new Set<string>()\n  for (const origin of allowedOrigins) {\n    const authority = hostAuthority(origin)\n    if (authority) authorities.add(authority)\n  }\n  return authorities\n}\n\n// The externally-asserted host: the proxy-forwarded X-Forwarded-Host when present,\n// otherwise the Host header. The internal upstream Host (and protocol) are ignored\n// so a correctly-proxied request is not rejected for not matching the public origin.\nfunction requestHostAuthorities(req: Request): string[] {\n  const forwarded = splitHeaderValues(req.headers.get('x-forwarded-host'))\n  const hostValues = forwarded.length > 0 ? forwarded : splitHeaderValues(req.headers.get('host'))\n  const authorities: string[] = []\n  for (const value of hostValues) {\n    const authority = hostAuthority(value)\n    if (authority) authorities.push(authority)\n  }\n  return authorities\n}\n\nfunction isIdempotencyConflict(error: unknown): boolean {\n  const message = error instanceof Error ? error.message : ''\n  return message.includes('checkout_transactions_organization_id_tenant_id_link_idempotency_key_index')\n    || message.includes('checkout_transactions_organization_id_tenant_id_link_idempotency_key_unique')\n    || message.includes('duplicate key value')\n}\n\nfunction readClientSession(\n  metadata: Record<string, unknown> | null | undefined,\n): PaymentGatewayClientSession | null {\n  const candidate = metadata?.clientSession\n  if (!candidate || typeof candidate !== 'object' || Array.isArray(candidate)) return null\n  const type = (candidate as { type?: unknown }).type\n  if (type === 'redirect') {\n    const redirectUrl = (candidate as { redirectUrl?: unknown }).redirectUrl\n    if (typeof redirectUrl !== 'string' || redirectUrl.trim().length === 0) return null\n    const target = (candidate as { target?: unknown }).target\n    return {\n      type: 'redirect',\n      redirectUrl,\n      target: target === 'top' ? 'top' : 'self',\n    }\n  }\n  if (type !== 'embedded') return null\n  if (typeof (candidate as { rendererKey?: unknown }).rendererKey !== 'string') return null\n  const payload = (candidate as { payload?: unknown }).payload\n  const settings = (candidate as { settings?: unknown }).settings\n  return {\n    type: 'embedded',\n    rendererKey: (candidate as { rendererKey: string }).rendererKey,\n    payload: payload && typeof payload === 'object' && !Array.isArray(payload)\n      ? payload as Record<string, unknown>\n      : undefined,\n    settings: settings && typeof settings === 'object' && !Array.isArray(settings)\n      ? settings as Record<string, unknown>\n      : undefined,\n  }\n}\n\nasync function buildSubmitResponse(\n  req: Request,\n  em: EntityManager,\n  link: CheckoutLink,\n  transaction: CheckoutTransaction,\n  providerKey: string | null | undefined,\n): Promise<CachedSubmitResponse> {\n  const gatewayTransaction = transaction.gatewayTransactionId\n    ? await em.findOne(GatewayTransaction, {\n      id: transaction.gatewayTransactionId,\n      organizationId: transaction.organizationId,\n      tenantId: transaction.tenantId,\n      deletedAt: null,\n    })\n    : null\n  const serverOrigin = resolveServerOrigin(req)\n  const clientSession = gatewayTransaction\n    ? readClientSession(gatewayTransaction.gatewayMetadata)\n    : null\n  const paymentSession = (clientSession && gatewayTransaction)\n    ? {\n        ...clientSession,\n        ...(clientSession.type === 'embedded'\n          ? {\n              payload: {\n                ...(clientSession.payload ?? {}),\n                returnUrl: `${serverOrigin}/pay/${encodeURIComponent(link.slug)}/success/${encodeURIComponent(transaction.id)}`,\n                cancelUrl: `${serverOrigin}/pay/${encodeURIComponent(link.slug)}/cancel/${encodeURIComponent(transaction.id)}`,\n              },\n            }\n          : {}),\n        providerKey: providerKey ?? gatewayTransaction.providerKey ?? null,\n        gatewayTransactionId: gatewayTransaction.id,\n      }\n    : null\n  return {\n    transactionId: transaction.id,\n    redirectUrl: gatewayTransaction?.redirectUrl ?? null,\n    paymentSession,\n  }\n}\n\nexport const metadata = {\n  path: '/checkout/pay/[slug]/submit',\n  POST: { requireAuth: false },\n}\n\nexport async function POST(req: Request, { params }: { params: Promise<{ slug: string }> | { slug: string } }) {\n  try {\n    const container = await createRequestContainer()\n    try {\n      const rateLimiter = container.resolve('rateLimiterService') as RateLimiterService\n      const key = buildCheckoutRateLimitKey(req, rateLimiter, 'checkout-submit')\n      const rateLimitResponse = await checkRateLimit(rateLimiter, checkoutSubmitRateLimitConfig, key, 'Too many payment attempts. Please try again later.')\n      if (rateLimitResponse) return rateLimitResponse\n    } catch {\n      // Rate limiting is fail-open\n    }\n    const resolvedParams = await params\n\n    const allowedOrigins = buildAllowedOrigins()\n    if (allowedOrigins.length > 0) {\n      // Reject spoofed Host / X-Forwarded-Host before any business logic runs so\n      // an attacker-controlled host can never flow into gateway-bound URLs. Hosts\n      // are matched by authority (protocol-independent) so a correctly TLS-proxied\n      // request \u2014 internal http, X-Forwarded-Proto https \u2014 is not rejected.\n      const allowedAuthorities = allowedHostAuthorities(allowedOrigins)\n      const hostAuthorities = requestHostAuthorities(req)\n      if (\n        hostAuthorities.length > 0\n        && !hostAuthorities.every((authority) => allowedAuthorities.has(authority))\n      ) {\n        return NextResponse.json({ error: 'Invalid request host' }, { status: 403 })\n      }\n\n      const origin = req.headers.get('origin')\n      const referer = req.headers.get('referer')\n      if (origin || referer) {\n        const submittedOrigin = origin ?? (referer ? new URL(referer).origin : null)\n        if (submittedOrigin && !allowedOrigins.some((allowedOrigin) => isAllowedRequestOrigin(submittedOrigin, allowedOrigin))) {\n          return NextResponse.json({ error: 'Invalid request origin' }, { status: 403 })\n        }\n      }\n    }\n\n    const idempotencyKey = req.headers.get('Idempotency-Key')?.trim()\n    if (!idempotencyKey) {\n      return NextResponse.json({ error: 'Idempotency-Key header is required' }, { status: 400 })\n    }\n    if (idempotencyKey.length < 16 || idempotencyKey.length > 128) {\n      return NextResponse.json({ error: 'Idempotency-Key must be between 16 and 128 characters' }, { status: 400 })\n    }\n\n    const body = publicSubmitSchema.parse(await req.json().catch(() => ({})))\n    const em = container.resolve('em')\n    const commandBus = container.resolve('commandBus') as CommandBus\n    const paymentGatewayService = container.resolve('paymentGatewayService') as PaymentGatewayService\n    const link = await findOneWithDecryption(em, CheckoutLink, {\n      slug: resolvedParams.slug,\n      deletedAt: null,\n    })\n    if (!link) {\n      return NextResponse.json({ error: 'Payment link not found' }, { status: 404 })\n    }\n    if (!isCheckoutLinkPublic(link.status)) {\n      throw new CrudHttpError(422, { error: 'This payment link is not currently accepting payments' })\n    }\n    if (link.passwordHash) {\n      requireCheckoutPasswordSession(req, link.slug, {\n        linkId: link.id,\n        sessionVersion: link.passwordHash,\n      })\n    }\n    if (!link.gatewayProviderKey) {\n      throw new CrudHttpError(422, { error: 'A payment gateway must be configured before this link can be used' })\n    }\n    const legalDocuments = link.legalDocuments && typeof link.legalDocuments === 'object'\n      ? link.legalDocuments as Partial<Record<'terms' | 'privacyPolicy', CheckoutLegalDocumentRequirement>>\n      : {}\n    const legalConsentErrors: Record<string, string> = {}\n    for (const key of ['terms', 'privacyPolicy'] as const) {\n      const document = legalDocuments[key]\n      if (document?.required === true && body.acceptedLegalConsents?.[key] !== true) {\n        legalConsentErrors[`acceptedLegalConsents.${key}`] = 'checkout.payPage.validation.documentRequired'\n      }\n    }\n    if (Object.keys(legalConsentErrors).length > 0) {\n      throw new CrudHttpError(422, {\n        error: 'checkout.payPage.validation.fixErrors',\n        fieldErrors: legalConsentErrors,\n      })\n    }\n    const collectedCustomerData = link.collectCustomerDetails === false ? {} : body.customerData\n    const customerFields = Array.isArray(link.customerFieldsSchema)\n      ? link.customerFieldsSchema as CheckoutCustomerFieldRequirement[]\n      : []\n    if (link.collectCustomerDetails !== false) {\n      const customerFieldErrors = validateCheckoutCustomerData(customerFields, collectedCustomerData)\n      if (Object.keys(customerFieldErrors).length > 0) {\n        throw new CrudHttpError(422, {\n          error: 'checkout.payPage.validation.fixErrors',\n          fieldErrors: customerFieldErrors,\n        })\n      }\n    }\n    const resolvedAmount = resolveSubmittedAmount(link, body)\n    const existingTransaction = await findOneWithDecryption(em, CheckoutTransaction, {\n      linkId: link.id,\n      idempotencyKey,\n      organizationId: link.organizationId,\n      tenantId: link.tenantId,\n    }, undefined, { organizationId: link.organizationId, tenantId: link.tenantId })\n    validateDescriptorCurrencies(link.gatewayProviderKey, [\n      existingTransaction?.currencyCode ?? resolvedAmount.currencyCode,\n    ])\n    if (existingTransaction?.gatewayTransactionId) {\n      return NextResponse.json(\n        await buildSubmitResponse(req, em, link, existingTransaction, link.gatewayProviderKey),\n      )\n    }\n\n    const transactionInput = {\n      linkId: link.id,\n      amount: resolvedAmount.amount,\n      currencyCode: resolvedAmount.currencyCode,\n      idempotencyKey,\n      customerData: collectedCustomerData,\n      firstName: typeof collectedCustomerData.firstName === 'string' ? collectedCustomerData.firstName : null,\n      lastName: typeof collectedCustomerData.lastName === 'string' ? collectedCustomerData.lastName : null,\n      email: typeof collectedCustomerData.email === 'string' ? collectedCustomerData.email : null,\n      phone: typeof collectedCustomerData.phone === 'string' ? collectedCustomerData.phone : null,\n      selectedPriceItemId: resolvedAmount.selectedPriceItemId,\n      acceptedLegalConsents: buildConsentProof(link, body.acceptedLegalConsents),\n      ipAddress: req.headers.get('x-forwarded-for') ?? null,\n      userAgent: req.headers.get('user-agent') ?? null,\n      tenantId: link.tenantId,\n      organizationId: link.organizationId,\n    }\n    const ctx: CommandRuntimeContext = {\n      container,\n      auth: null,\n      organizationScope: null,\n      selectedOrganizationId: link.organizationId,\n      organizationIds: [link.organizationId],\n      request: req,\n    }\n    let transactionId = existingTransaction?.id ?? null\n    if (!transactionId) {\n      try {\n        const created = await commandBus.execute<typeof transactionInput, { id: string }>('checkout.transaction.create', {\n          input: transactionInput,\n          ctx,\n        })\n        transactionId = created.result.id\n      } catch (error) {\n        if (!isIdempotencyConflict(error)) {\n          throw error\n        }\n        const duplicated = await findOneWithDecryption(em, CheckoutTransaction, {\n          linkId: link.id,\n          idempotencyKey,\n          organizationId: link.organizationId,\n          tenantId: link.tenantId,\n        }, undefined, { organizationId: link.organizationId, tenantId: link.tenantId })\n        if (!duplicated) {\n          throw error\n        }\n        transactionId = duplicated.id\n      }\n    }\n    if (!transactionId) {\n      throw new CrudHttpError(500, { error: 'Failed to initialize checkout transaction' })\n    }\n    const serverOrigin = resolveServerOrigin(req)\n    const successUrl = `${serverOrigin}/pay/${encodeURIComponent(link.slug)}/success/${encodeURIComponent(transactionId)}`\n    const cancelUrl = `${serverOrigin}/pay/${encodeURIComponent(link.slug)}/cancel/${encodeURIComponent(transactionId)}`\n    const transaction = await findOneWithDecryption(em, CheckoutTransaction, {\n      id: transactionId,\n      organizationId: link.organizationId,\n      tenantId: link.tenantId,\n    }, undefined, { organizationId: link.organizationId, tenantId: link.tenantId })\n    if (!transaction) {\n      throw new CrudHttpError(404, { error: 'Transaction not found' })\n    }\n    const sessionAmount = Number(transaction.amount)\n    if (!Number.isFinite(sessionAmount)) {\n      throw new CrudHttpError(500, { error: 'Invalid checkout transaction amount' })\n    }\n    const sessionCurrencyCode = transaction.currencyCode\n    if (!transaction.gatewayTransactionId) {\n      const configuredPaymentTypes = Array.isArray(link.gatewaySettings?.paymentTypes)\n        ? link.gatewaySettings.paymentTypes.filter(\n            (value: unknown): value is string => typeof value === 'string' && value.trim().length > 0,\n          )\n        : []\n      const rendererKey = typeof link.gatewaySettings?.rendererKey === 'string' && link.gatewaySettings.rendererKey.trim().length > 0\n        ? link.gatewaySettings.rendererKey.trim()\n        : undefined\n      const rendererSettings = link.gatewaySettings?.rendererSettings\n        && typeof link.gatewaySettings.rendererSettings === 'object'\n        && !Array.isArray(link.gatewaySettings.rendererSettings)\n        ? link.gatewaySettings.rendererSettings as Record<string, unknown>\n        : undefined\n      const presentationMode = link.gatewaySettings?.presentationMode === 'embedded'\n        || link.gatewaySettings?.presentationMode === 'redirect'\n        || link.gatewaySettings?.presentationMode === 'auto'\n        ? link.gatewaySettings.presentationMode\n        : undefined\n      try {\n        const sessionResult = await paymentGatewayService.createPaymentSession({\n          providerKey: link.gatewayProviderKey,\n          paymentId: transactionId,\n          idempotencyKey,\n          amount: sessionAmount,\n          currencyCode: sessionCurrencyCode,\n          paymentTypes: configuredPaymentTypes.length > 0 ? configuredPaymentTypes : undefined,\n          description: link.title ?? link.name,\n          successUrl,\n          cancelUrl,\n          metadata: {\n            checkoutLinkId: link.id,\n            checkoutSlug: link.slug,\n          },\n          presentation: rendererKey || rendererSettings || presentationMode\n            ? {\n                ...(presentationMode ? { mode: presentationMode } : {}),\n                ...(rendererKey ? { rendererKey } : {}),\n                ...(rendererSettings ? { rendererSettings } : {}),\n              }\n            : undefined,\n          organizationId: link.organizationId,\n          tenantId: link.tenantId,\n        })\n        await commandBus.execute('checkout.transaction.updateStatus', {\n          input: {\n            id: transaction.id,\n            status: mapGatewayStatusToCheckoutStatus(sessionResult.transaction.unifiedStatus),\n            paymentStatus: sessionResult.transaction.unifiedStatus,\n            gatewayTransactionId: sessionResult.transaction.id,\n            organizationId: link.organizationId,\n            tenantId: link.tenantId,\n          },\n          ctx,\n        })\n      } catch (error) {\n        await commandBus.execute('checkout.transaction.updateStatus', {\n          input: {\n            id: transaction.id,\n            status: 'failed',\n            paymentStatus: transaction.paymentStatus ?? 'failed',\n            organizationId: link.organizationId,\n            tenantId: link.tenantId,\n          },\n          ctx,\n        }).catch(() => undefined)\n        logger.error('Failed to create payment session', {\n          linkId: link.id,\n          transactionId: transaction.id,\n          providerKey: link.gatewayProviderKey,\n          err: error,\n        })\n        throw new CrudHttpError(502, { error: 'checkout.payPage.errors.sessionStart' })\n      }\n      const refreshedTransaction = await findOneWithDecryption(em, CheckoutTransaction, {\n        id: transaction.id,\n        organizationId: link.organizationId,\n        tenantId: link.tenantId,\n      }, undefined, { organizationId: link.organizationId, tenantId: link.tenantId })\n      if (!refreshedTransaction) {\n        throw new CrudHttpError(404, { error: 'Transaction not found' })\n      }\n      await emitCheckoutEvent('checkout.transaction.sessionStarted', {\n        transactionId: refreshedTransaction.id,\n        linkId: refreshedTransaction.linkId,\n        templateId: link.templateId ?? null,\n        slug: link.slug,\n        status: refreshedTransaction.status,\n        paymentStatus: refreshedTransaction.paymentStatus ?? null,\n        amount: Number(refreshedTransaction.amount),\n        currency: refreshedTransaction.currencyCode,\n        gatewayProvider: link.gatewayProviderKey,\n        gatewayTransactionId: refreshedTransaction.gatewayTransactionId ?? null,\n        occurredAt: new Date().toISOString(),\n        tenantId: link.tenantId,\n        organizationId: link.organizationId,\n      }).catch(() => undefined)\n      return NextResponse.json(\n        await buildSubmitResponse(req, em, link, refreshedTransaction, link.gatewayProviderKey),\n        { status: 201 },\n      )\n    }\n    return NextResponse.json(await buildSubmitResponse(req, em, link, transaction, link.gatewayProviderKey), { status: 201 })\n  } catch (error) {\n    return handleCheckoutRouteError(error)\n  }\n}\n\nexport const openApi = {\n  tags: [checkoutTag],\n}\n\nexport default POST\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AAGvC,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AAEtC,SAAS,sBAAsB;AAG/B,SAAS,0BAA0B;AACnC,SAAS,cAAc,2BAA2B;AAClD,SAAS,0BAA0B;AACnC,SAAS,0BAA0B,sCAAsC;AACzE,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oCAAoC;AAC7C,SAAS,2BAA2B,qCAAqC;AACzE,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,UAAU;AAoBtC,SAAS,cAAc,KAAkB;AACvC,MAAI,IAAI,KAAM,QAAO,IAAI;AACzB,SAAO,IAAI,aAAa,WAAW,QAAQ;AAC7C;AAEA,SAAS,0BAA0B,WAAkC;AACnE,MAAI;AACF,WAAO,IAAI,IAAI,SAAS,EAAE;AAAA,EAC5B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,UAA2B;AACrD,SAAO,aAAa,eAAe,aAAa;AAClD;AAEA,SAAS,kBAAkB,OAAgC;AACzD,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC;AACvC;AAEA,SAAS,uBAAuB,iBAAyB,eAAgC;AACvF,MAAI,oBAAoB,cAAe,QAAO;AAC9C,MAAI;AACF,UAAM,eAAe,IAAI,IAAI,eAAe;AAC5C,UAAM,aAAa,IAAI,IAAI,aAAa;AACxC,WAAO,aAAa,aAAa,WAAW,YACvC,cAAc,YAAY,MAAM,cAAc,UAAU,KACxD,mBAAmB,aAAa,QAAQ,KACxC,mBAAmB,WAAW,QAAQ;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,8BAAwC,QAAQ,IAAI,4BAA4B,IACnF,MAAM,GAAG,EACT,IAAI,CAAC,WAAW,OAAO,KAAK,CAAC,EAC7B,OAAO,CAAC,WAAW,OAAO,SAAS,CAAC;AAEvC,SAAS,iBAAiB,gBAA6B,WAAmB;AACxE,QAAM,aAAa,0BAA0B,SAAS;AACtD,MAAI,CAAC,WAAY;AACjB,iBAAe,IAAI,UAAU;AAC7B,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,UAAU;AACjC,QAAI,CAAC,mBAAmB,OAAO,QAAQ,EAAG;AAC1C,eAAW,YAAY,CAAC,aAAa,WAAW,GAAG;AACjD,iBAAW,YAAY,CAAC,SAAS,QAAQ,GAAG;AAC1C,cAAM,UAAU,IAAI,IAAI,UAAU;AAClC,gBAAQ,WAAW;AACnB,gBAAQ,WAAW;AACnB,uBAAe,IAAI,QAAQ,MAAM;AAAA,MACnC;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,2BAAqC;AAC5C,QAAM,UAAU,CAAC,GAAG,0BAA0B;AAC9C,aAAW,UAAU,CAAC,QAAQ,IAAI,SAAS,QAAQ,IAAI,mBAAmB,GAAG;AAC3E,QAAI,OAAQ,SAAQ,KAAK,MAAM;AAAA,EACjC;AACA,SAAO;AACT;AAMA,SAAS,sBAAgC;AACvC,QAAM,iBAAiB,oBAAI,IAAY;AACvC,aAAW,UAAU,yBAAyB,GAAG;AAC/C,qBAAiB,gBAAgB,MAAM;AAAA,EACzC;AACA,SAAO,MAAM,KAAK,cAAc;AAClC;AAOA,SAAS,oBAAoB,KAAsB;AACjD,aAAW,aAAa,yBAAyB,GAAG;AAClD,UAAM,aAAa,0BAA0B,SAAS;AACtD,QAAI,WAAY,QAAO;AAAA,EACzB;AACA,QAAM,aAAa,IAAI,IAAI,IAAI,GAAG;AAClC,MAAI,mBAAmB,WAAW,QAAQ,EAAG,QAAO,WAAW;AAC/D,QAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oCAAoC,CAAC;AAC7E;AAOA,SAAS,cAAc,OAA8B;AACnD,QAAM,YAAY,MAAM,SAAS,KAAK,IAAI,QAAQ,WAAW,KAAK;AAClE,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAI,CAAC,IAAI,SAAU,QAAO;AAC1B,UAAM,OAAO,IAAI,QAAQ,IAAI,SAAS,QAAQ,IAAI,SAAS,QAAQ,IAAI,IAAI,IAAI,KAAK;AACpF,WAAO,GAAG,IAAI,SAAS,YAAY,CAAC,GAAG,IAAI;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,uBAAuB,gBAAuC;AACrE,QAAM,cAAc,oBAAI,IAAY;AACpC,aAAW,UAAU,gBAAgB;AACnC,UAAM,YAAY,cAAc,MAAM;AACtC,QAAI,UAAW,aAAY,IAAI,SAAS;AAAA,EAC1C;AACA,SAAO;AACT;AAKA,SAAS,uBAAuB,KAAwB;AACtD,QAAM,YAAY,kBAAkB,IAAI,QAAQ,IAAI,kBAAkB,CAAC;AACvE,QAAM,aAAa,UAAU,SAAS,IAAI,YAAY,kBAAkB,IAAI,QAAQ,IAAI,MAAM,CAAC;AAC/F,QAAM,cAAwB,CAAC;AAC/B,aAAW,SAAS,YAAY;AAC9B,UAAM,YAAY,cAAc,KAAK;AACrC,QAAI,UAAW,aAAY,KAAK,SAAS;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,SAAS,sBAAsB,OAAyB;AACtD,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,SAAO,QAAQ,SAAS,4EAA4E,KAC/F,QAAQ,SAAS,6EAA6E,KAC9F,QAAQ,SAAS,qBAAqB;AAC7C;AAEA,SAAS,kBACPA,WACoC;AACpC,QAAM,YAAYA,WAAU;AAC5B,MAAI,CAAC,aAAa,OAAO,cAAc,YAAY,MAAM,QAAQ,SAAS,EAAG,QAAO;AACpF,QAAM,OAAQ,UAAiC;AAC/C,MAAI,SAAS,YAAY;AACvB,UAAM,cAAe,UAAwC;AAC7D,QAAI,OAAO,gBAAgB,YAAY,YAAY,KAAK,EAAE,WAAW,EAAG,QAAO;AAC/E,UAAM,SAAU,UAAmC;AACnD,WAAO;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,QAAQ,WAAW,QAAQ,QAAQ;AAAA,IACrC;AAAA,EACF;AACA,MAAI,SAAS,WAAY,QAAO;AAChC,MAAI,OAAQ,UAAwC,gBAAgB,SAAU,QAAO;AACrF,QAAM,UAAW,UAAoC;AACrD,QAAM,WAAY,UAAqC;AACvD,SAAO;AAAA,IACL,MAAM;AAAA,IACN,aAAc,UAAsC;AAAA,IACpD,SAAS,WAAW,OAAO,YAAY,YAAY,CAAC,MAAM,QAAQ,OAAO,IACrE,UACA;AAAA,IACJ,UAAU,YAAY,OAAO,aAAa,YAAY,CAAC,MAAM,QAAQ,QAAQ,IACzE,WACA;AAAA,EACN;AACF;AAEA,eAAe,oBACb,KACA,IACA,MACA,aACA,aAC+B;AAC/B,QAAM,qBAAqB,YAAY,uBACnC,MAAM,GAAG,QAAQ,oBAAoB;AAAA,IACrC,IAAI,YAAY;AAAA,IAChB,gBAAgB,YAAY;AAAA,IAC5B,UAAU,YAAY;AAAA,IACtB,WAAW;AAAA,EACb,CAAC,IACC;AACJ,QAAM,eAAe,oBAAoB,GAAG;AAC5C,QAAM,gBAAgB,qBAClB,kBAAkB,mBAAmB,eAAe,IACpD;AACJ,QAAM,iBAAkB,iBAAiB,qBACrC;AAAA,IACE,GAAG;AAAA,IACH,GAAI,cAAc,SAAS,aACvB;AAAA,MACE,SAAS;AAAA,QACP,GAAI,cAAc,WAAW,CAAC;AAAA,QAC9B,WAAW,GAAG,YAAY,QAAQ,mBAAmB,KAAK,IAAI,CAAC,YAAY,mBAAmB,YAAY,EAAE,CAAC;AAAA,QAC7G,WAAW,GAAG,YAAY,QAAQ,mBAAmB,KAAK,IAAI,CAAC,WAAW,mBAAmB,YAAY,EAAE,CAAC;AAAA,MAC9G;AAAA,IACF,IACA,CAAC;AAAA,IACL,aAAa,eAAe,mBAAmB,eAAe;AAAA,IAC9D,sBAAsB,mBAAmB;AAAA,EAC3C,IACA;AACJ,SAAO;AAAA,IACL,eAAe,YAAY;AAAA,IAC3B,aAAa,oBAAoB,eAAe;AAAA,IAChD;AAAA,EACF;AACF;AAEO,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,eAAsB,KAAK,KAAc,EAAE,OAAO,GAA6D;AAC7G,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAI;AACF,YAAM,cAAc,UAAU,QAAQ,oBAAoB;AAC1D,YAAM,MAAM,0BAA0B,KAAK,aAAa,iBAAiB;AACzE,YAAM,oBAAoB,MAAM,eAAe,aAAa,+BAA+B,KAAK,oDAAoD;AACpJ,UAAI,kBAAmB,QAAO;AAAA,IAChC,QAAQ;AAAA,IAER;AACA,UAAM,iBAAiB,MAAM;AAE7B,UAAM,iBAAiB,oBAAoB;AAC3C,QAAI,eAAe,SAAS,GAAG;AAK7B,YAAM,qBAAqB,uBAAuB,cAAc;AAChE,YAAM,kBAAkB,uBAAuB,GAAG;AAClD,UACE,gBAAgB,SAAS,KACtB,CAAC,gBAAgB,MAAM,CAAC,cAAc,mBAAmB,IAAI,SAAS,CAAC,GAC1E;AACA,eAAO,aAAa,KAAK,EAAE,OAAO,uBAAuB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAC7E;AAEA,YAAM,SAAS,IAAI,QAAQ,IAAI,QAAQ;AACvC,YAAM,UAAU,IAAI,QAAQ,IAAI,SAAS;AACzC,UAAI,UAAU,SAAS;AACrB,cAAM,kBAAkB,WAAW,UAAU,IAAI,IAAI,OAAO,EAAE,SAAS;AACvE,YAAI,mBAAmB,CAAC,eAAe,KAAK,CAAC,kBAAkB,uBAAuB,iBAAiB,aAAa,CAAC,GAAG;AACtH,iBAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAEA,UAAM,iBAAiB,IAAI,QAAQ,IAAI,iBAAiB,GAAG,KAAK;AAChE,QAAI,CAAC,gBAAgB;AACnB,aAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC3F;AACA,QAAI,eAAe,SAAS,MAAM,eAAe,SAAS,KAAK;AAC7D,aAAO,aAAa,KAAK,EAAE,OAAO,wDAAwD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC9G;AAEA,UAAM,OAAO,mBAAmB,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE,CAAC;AACxE,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,UAAM,wBAAwB,UAAU,QAAQ,uBAAuB;AACvE,UAAM,OAAO,MAAM,sBAAsB,IAAI,cAAc;AAAA,MACzD,MAAM,eAAe;AAAA,MACrB,WAAW;AAAA,IACb,CAAC;AACD,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,yBAAyB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AACA,QAAI,CAAC,qBAAqB,KAAK,MAAM,GAAG;AACtC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wDAAwD,CAAC;AAAA,IACjG;AACA,QAAI,KAAK,cAAc;AACrB,qCAA+B,KAAK,KAAK,MAAM;AAAA,QAC7C,QAAQ,KAAK;AAAA,QACb,gBAAgB,KAAK;AAAA,MACvB,CAAC;AAAA,IACH;AACA,QAAI,CAAC,KAAK,oBAAoB;AAC5B,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,oEAAoE,CAAC;AAAA,IAC7G;AACA,UAAM,iBAAiB,KAAK,kBAAkB,OAAO,KAAK,mBAAmB,WACzE,KAAK,iBACL,CAAC;AACL,UAAM,qBAA6C,CAAC;AACpD,eAAW,OAAO,CAAC,SAAS,eAAe,GAAY;AACrD,YAAM,WAAW,eAAe,GAAG;AACnC,UAAI,UAAU,aAAa,QAAQ,KAAK,wBAAwB,GAAG,MAAM,MAAM;AAC7E,2BAAmB,yBAAyB,GAAG,EAAE,IAAI;AAAA,MACvD;AAAA,IACF;AACA,QAAI,OAAO,KAAK,kBAAkB,EAAE,SAAS,GAAG;AAC9C,YAAM,IAAI,cAAc,KAAK;AAAA,QAC3B,OAAO;AAAA,QACP,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AACA,UAAM,wBAAwB,KAAK,2BAA2B,QAAQ,CAAC,IAAI,KAAK;AAChF,UAAM,iBAAiB,MAAM,QAAQ,KAAK,oBAAoB,IAC1D,KAAK,uBACL,CAAC;AACL,QAAI,KAAK,2BAA2B,OAAO;AACzC,YAAM,sBAAsB,6BAA6B,gBAAgB,qBAAqB;AAC9F,UAAI,OAAO,KAAK,mBAAmB,EAAE,SAAS,GAAG;AAC/C,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO;AAAA,UACP,aAAa;AAAA,QACf,CAAC;AAAA,MACH;AAAA,IACF;AACA,UAAM,iBAAiB,uBAAuB,MAAM,IAAI;AACxD,UAAM,sBAAsB,MAAM,sBAAsB,IAAI,qBAAqB;AAAA,MAC/E,QAAQ,KAAK;AAAA,MACb;AAAA,MACA,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB,GAAG,QAAW,EAAE,gBAAgB,KAAK,gBAAgB,UAAU,KAAK,SAAS,CAAC;AAC9E,iCAA6B,KAAK,oBAAoB;AAAA,MACpD,qBAAqB,gBAAgB,eAAe;AAAA,IACtD,CAAC;AACD,QAAI,qBAAqB,sBAAsB;AAC7C,aAAO,aAAa;AAAA,QAClB,MAAM,oBAAoB,KAAK,IAAI,MAAM,qBAAqB,KAAK,kBAAkB;AAAA,MACvF;AAAA,IACF;AAEA,UAAM,mBAAmB;AAAA,MACvB,QAAQ,KAAK;AAAA,MACb,QAAQ,eAAe;AAAA,MACvB,cAAc,eAAe;AAAA,MAC7B;AAAA,MACA,cAAc;AAAA,MACd,WAAW,OAAO,sBAAsB,cAAc,WAAW,sBAAsB,YAAY;AAAA,MACnG,UAAU,OAAO,sBAAsB,aAAa,WAAW,sBAAsB,WAAW;AAAA,MAChG,OAAO,OAAO,sBAAsB,UAAU,WAAW,sBAAsB,QAAQ;AAAA,MACvF,OAAO,OAAO,sBAAsB,UAAU,WAAW,sBAAsB,QAAQ;AAAA,MACvF,qBAAqB,eAAe;AAAA,MACpC,uBAAuB,kBAAkB,MAAM,KAAK,qBAAqB;AAAA,MACzE,WAAW,IAAI,QAAQ,IAAI,iBAAiB,KAAK;AAAA,MACjD,WAAW,IAAI,QAAQ,IAAI,YAAY,KAAK;AAAA,MAC5C,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB;AACA,UAAM,MAA6B;AAAA,MACjC;AAAA,MACA,MAAM;AAAA,MACN,mBAAmB;AAAA,MACnB,wBAAwB,KAAK;AAAA,MAC7B,iBAAiB,CAAC,KAAK,cAAc;AAAA,MACrC,SAAS;AAAA,IACX;AACA,QAAI,gBAAgB,qBAAqB,MAAM;AAC/C,QAAI,CAAC,eAAe;AAClB,UAAI;AACF,cAAM,UAAU,MAAM,WAAW,QAAiD,+BAA+B;AAAA,UAC/G,OAAO;AAAA,UACP;AAAA,QACF,CAAC;AACD,wBAAgB,QAAQ,OAAO;AAAA,MACjC,SAAS,OAAO;AACd,YAAI,CAAC,sBAAsB,KAAK,GAAG;AACjC,gBAAM;AAAA,QACR;AACA,cAAM,aAAa,MAAM,sBAAsB,IAAI,qBAAqB;AAAA,UACtE,QAAQ,KAAK;AAAA,UACb;AAAA,UACA,gBAAgB,KAAK;AAAA,UACrB,UAAU,KAAK;AAAA,QACjB,GAAG,QAAW,EAAE,gBAAgB,KAAK,gBAAgB,UAAU,KAAK,SAAS,CAAC;AAC9E,YAAI,CAAC,YAAY;AACf,gBAAM;AAAA,QACR;AACA,wBAAgB,WAAW;AAAA,MAC7B;AAAA,IACF;AACA,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,4CAA4C,CAAC;AAAA,IACrF;AACA,UAAM,eAAe,oBAAoB,GAAG;AAC5C,UAAM,aAAa,GAAG,YAAY,QAAQ,mBAAmB,KAAK,IAAI,CAAC,YAAY,mBAAmB,aAAa,CAAC;AACpH,UAAM,YAAY,GAAG,YAAY,QAAQ,mBAAmB,KAAK,IAAI,CAAC,WAAW,mBAAmB,aAAa,CAAC;AAClH,UAAM,cAAc,MAAM,sBAAsB,IAAI,qBAAqB;AAAA,MACvE,IAAI;AAAA,MACJ,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB,GAAG,QAAW,EAAE,gBAAgB,KAAK,gBAAgB,UAAU,KAAK,SAAS,CAAC;AAC9E,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wBAAwB,CAAC;AAAA,IACjE;AACA,UAAM,gBAAgB,OAAO,YAAY,MAAM;AAC/C,QAAI,CAAC,OAAO,SAAS,aAAa,GAAG;AACnC,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,sCAAsC,CAAC;AAAA,IAC/E;AACA,UAAM,sBAAsB,YAAY;AACxC,QAAI,CAAC,YAAY,sBAAsB;AACrC,YAAM,yBAAyB,MAAM,QAAQ,KAAK,iBAAiB,YAAY,IAC3E,KAAK,gBAAgB,aAAa;AAAA,QAChC,CAAC,UAAoC,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS;AAAA,MAC1F,IACA,CAAC;AACL,YAAM,cAAc,OAAO,KAAK,iBAAiB,gBAAgB,YAAY,KAAK,gBAAgB,YAAY,KAAK,EAAE,SAAS,IAC1H,KAAK,gBAAgB,YAAY,KAAK,IACtC;AACJ,YAAM,mBAAmB,KAAK,iBAAiB,oBAC1C,OAAO,KAAK,gBAAgB,qBAAqB,YACjD,CAAC,MAAM,QAAQ,KAAK,gBAAgB,gBAAgB,IACrD,KAAK,gBAAgB,mBACrB;AACJ,YAAM,mBAAmB,KAAK,iBAAiB,qBAAqB,cAC/D,KAAK,iBAAiB,qBAAqB,cAC3C,KAAK,iBAAiB,qBAAqB,SAC5C,KAAK,gBAAgB,mBACrB;AACJ,UAAI;AACF,cAAM,gBAAgB,MAAM,sBAAsB,qBAAqB;AAAA,UACrE,aAAa,KAAK;AAAA,UAClB,WAAW;AAAA,UACX;AAAA,UACA,QAAQ;AAAA,UACR,cAAc;AAAA,UACd,cAAc,uBAAuB,SAAS,IAAI,yBAAyB;AAAA,UAC3E,aAAa,KAAK,SAAS,KAAK;AAAA,UAChC;AAAA,UACA;AAAA,UACA,UAAU;AAAA,YACR,gBAAgB,KAAK;AAAA,YACrB,cAAc,KAAK;AAAA,UACrB;AAAA,UACA,cAAc,eAAe,oBAAoB,mBAC7C;AAAA,YACE,GAAI,mBAAmB,EAAE,MAAM,iBAAiB,IAAI,CAAC;AAAA,YACrD,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,YACrC,GAAI,mBAAmB,EAAE,iBAAiB,IAAI,CAAC;AAAA,UACjD,IACA;AAAA,UACJ,gBAAgB,KAAK;AAAA,UACrB,UAAU,KAAK;AAAA,QACjB,CAAC;AACD,cAAM,WAAW,QAAQ,qCAAqC;AAAA,UAC5D,OAAO;AAAA,YACL,IAAI,YAAY;AAAA,YAChB,QAAQ,iCAAiC,cAAc,YAAY,aAAa;AAAA,YAChF,eAAe,cAAc,YAAY;AAAA,YACzC,sBAAsB,cAAc,YAAY;AAAA,YAChD,gBAAgB,KAAK;AAAA,YACrB,UAAU,KAAK;AAAA,UACjB;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,cAAM,WAAW,QAAQ,qCAAqC;AAAA,UAC5D,OAAO;AAAA,YACL,IAAI,YAAY;AAAA,YAChB,QAAQ;AAAA,YACR,eAAe,YAAY,iBAAiB;AAAA,YAC5C,gBAAgB,KAAK;AAAA,YACrB,UAAU,KAAK;AAAA,UACjB;AAAA,UACA;AAAA,QACF,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,eAAO,MAAM,oCAAoC;AAAA,UAC/C,QAAQ,KAAK;AAAA,UACb,eAAe,YAAY;AAAA,UAC3B,aAAa,KAAK;AAAA,UAClB,KAAK;AAAA,QACP,CAAC;AACD,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,uCAAuC,CAAC;AAAA,MAChF;AACA,YAAM,uBAAuB,MAAM,sBAAsB,IAAI,qBAAqB;AAAA,QAChF,IAAI,YAAY;AAAA,QAChB,gBAAgB,KAAK;AAAA,QACrB,UAAU,KAAK;AAAA,MACjB,GAAG,QAAW,EAAE,gBAAgB,KAAK,gBAAgB,UAAU,KAAK,SAAS,CAAC;AAC9E,UAAI,CAAC,sBAAsB;AACzB,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,wBAAwB,CAAC;AAAA,MACjE;AACA,YAAM,kBAAkB,uCAAuC;AAAA,QAC7D,eAAe,qBAAqB;AAAA,QACpC,QAAQ,qBAAqB;AAAA,QAC7B,YAAY,KAAK,cAAc;AAAA,QAC/B,MAAM,KAAK;AAAA,QACX,QAAQ,qBAAqB;AAAA,QAC7B,eAAe,qBAAqB,iBAAiB;AAAA,QACrD,QAAQ,OAAO,qBAAqB,MAAM;AAAA,QAC1C,UAAU,qBAAqB;AAAA,QAC/B,iBAAiB,KAAK;AAAA,QACtB,sBAAsB,qBAAqB,wBAAwB;AAAA,QACnE,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,QACnC,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK;AAAA,MACvB,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,aAAO,aAAa;AAAA,QAClB,MAAM,oBAAoB,KAAK,IAAI,MAAM,sBAAsB,KAAK,kBAAkB;AAAA,QACtF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AACA,WAAO,aAAa,KAAK,MAAM,oBAAoB,KAAK,IAAI,MAAM,aAAa,KAAK,kBAAkB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1H,SAAS,OAAO;AACd,WAAO,yBAAyB,KAAK;AAAA,EACvC;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AACpB;AAEA,IAAO,gBAAQ;",
   "names": ["metadata"]
 }

package/dist/modules/checkout/api/transactions/route.js

@@ -1,13 +1,10 @@
 import { NextResponse } from "next/server";
 import { findAndCountWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
 import { escapeLikePattern } from "@open-mercato/shared/lib/db/escapeLikePattern";
-import { findEntityIdsBySearchTokens } from "@open-mercato/shared/lib/search/tokenLookup";
 import { CheckoutLink, CheckoutTransaction } from "../../data/entities.js";
-import { CHECKOUT_ENTITY_IDS } from "../../lib/constants.js";
 import { handleCheckoutRouteError, requireAdminContext, userHasCheckoutFeature } from "../helpers.js";
 import { checkoutTag } from "../openapi.js";
 import { serializeTransaction } from "../../lib/utils.js";
-const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 const metadata = {
   path: "/checkout/transactions",
   GET: { requireAuth: true, requireFeatures: ["checkout.view"] }
@@ -28,26 +25,12 @@ async function GET(req) {
     };
     if (linkId) where.linkId = linkId;
     if (status) where.status = status;
-    if (search) {
-      const pattern = `%${escapeLikePattern(search)}%`;
-      const searchOr = [
-        { email: { $ilike: pattern } },
-        { firstName: { $ilike: pattern } },
-        { lastName: { $ilike: pattern } }
-      ];
-      if (UUID_PATTERN.test(search)) searchOr.push({ id: search });
-      const tokenMatch = await findEntityIdsBySearchTokens({
-        db: em.getKysely(),
-        entityType: CHECKOUT_ENTITY_IDS.transaction,
-        query: search,
-        fields: ["email", "first_name", "last_name"],
-        scope: { tenantId: auth.tenantId, organizationId: auth.orgId }
-      });
-      if (tokenMatch.matched && tokenMatch.ids.length) {
-        searchOr.push({ id: { $in: tokenMatch.ids } });
-      }
-      where.$or = searchOr;
-    }
+    if (search) where.$or = [
+      { email: { $ilike: `%${escapeLikePattern(search)}%` } },
+      { firstName: { $ilike: `%${escapeLikePattern(search)}%` } },
+      { lastName: { $ilike: `%${escapeLikePattern(search)}%` } },
+      { id: { $ilike: `%${escapeLikePattern(search)}%` } }
+    ];
     const [items, total] = await findAndCountWithDecryption(
       em,
       CheckoutTransaction,

package/dist/modules/checkout/api/transactions/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/checkout/api/transactions/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { findEntityIdsBySearchTokens, type SearchTokenDatabase } from '@open-mercato/shared/lib/search/tokenLookup'\nimport { CheckoutLink, CheckoutTransaction } from '../../data/entities'\nimport { CHECKOUT_ENTITY_IDS } from '../../lib/constants'\nimport { handleCheckoutRouteError, requireAdminContext, userHasCheckoutFeature } from '../helpers'\nimport { checkoutTag } from '../openapi'\nimport { serializeTransaction } from '../../lib/utils'\n\nconst UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\n\nexport const metadata = {\n  path: '/checkout/transactions',\n  GET: { requireAuth: true, requireFeatures: ['checkout.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { auth, container, em } = await requireAdminContext(req)\n    const canViewPii = await userHasCheckoutFeature(container, auth, 'checkout.viewPii')\n    const url = new URL(req.url)\n    const page = Math.max(1, Number(url.searchParams.get('page') ?? '1'))\n    const pageSize = Math.min(100, Math.max(1, Number(url.searchParams.get('pageSize') ?? '25')))\n    const search = (url.searchParams.get('search') ?? '').trim()\n    const linkId = url.searchParams.get('linkId')\n    const status = url.searchParams.get('status')\n    const where: Record<string, unknown> = {\n      organizationId: auth.orgId,\n      tenantId: auth.tenantId,\n    }\n    if (linkId) where.linkId = linkId\n    if (status) where.status = status\n    if (search) {\n      const pattern = `%${escapeLikePattern(search)}%`\n      // email/first_name/last_name are covered by the checkout encryption map,\n      // so an ILIKE alone compares the pattern against ciphertext and matches\n      // nothing once encryption is on. Union it with the token index, which\n      // stores hashes of the plaintext. Issue #2990.\n      const searchOr: Record<string, unknown>[] = [\n        { email: { $ilike: pattern } },\n        { firstName: { $ilike: pattern } },\n        { lastName: { $ilike: pattern } },\n      ]\n      // `id` is a uuid column: ILIKE against it has no Postgres operator and\n      // raises 42883, so only an exact id lookup is meaningful here.\n      if (UUID_PATTERN.test(search)) searchOr.push({ id: search })\n      const tokenMatch = await findEntityIdsBySearchTokens({\n        db: em.getKysely<SearchTokenDatabase>(),\n        entityType: CHECKOUT_ENTITY_IDS.transaction,\n        query: search,\n        fields: ['email', 'first_name', 'last_name'],\n        scope: { tenantId: auth.tenantId, organizationId: auth.orgId },\n      })\n      if (tokenMatch.matched && tokenMatch.ids.length) {\n        searchOr.push({ id: { $in: tokenMatch.ids } })\n      }\n      where.$or = searchOr\n    }\n    const [items, total] = await findAndCountWithDecryption(\n      em,\n      CheckoutTransaction,\n      where,\n      {\n        orderBy: { createdAt: 'desc' },\n        offset: (page - 1) * pageSize,\n        limit: pageSize,\n      },\n      { organizationId: auth.orgId, tenantId: auth.tenantId },\n    )\n    const linkIds = Array.from(new Set(items.map((item) => item.linkId)))\n    const links = linkIds.length\n      ? await findWithDecryption(em, CheckoutLink, {\n        id: { $in: linkIds },\n        organizationId: auth.orgId,\n        tenantId: auth.tenantId,\n        deletedAt: null,\n      }, undefined, { organizationId: auth.orgId, tenantId: auth.tenantId })\n      : []\n    const linkMap = new Map(links.map((link) => [link.id, link]))\n    return NextResponse.json({\n      items: items.map((item) => serializeTransaction(item, linkMap.get(item.linkId) ?? null, canViewPii)),\n      total,\n      page,\n      pageSize,\n      totalPages: Math.max(1, Math.ceil(total / pageSize)),\n      canViewPii,\n    })\n  } catch (error) {\n    return handleCheckoutRouteError(error)\n  }\n}\n\nexport const openApi = {\n  tags: [checkoutTag],\n}\n\nexport default GET\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,mCAA6D;AACtE,SAAS,cAAc,2BAA2B;AAClD,SAAS,2BAA2B;AACpC,SAAS,0BAA0B,qBAAqB,8BAA8B;AACtF,SAAS,mBAAmB;AAC5B,SAAS,4BAA4B;AAErC,MAAM,eAAe;AAEd,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,MAAM,WAAW,GAAG,IAAI,MAAM,oBAAoB,GAAG;AAC7D,UAAM,aAAa,MAAM,uBAAuB,WAAW,MAAM,kBAAkB;AACnF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,OAAO,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK,GAAG,CAAC;AACpE,UAAM,WAAW,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;AAC5F,UAAM,UAAU,IAAI,aAAa,IAAI,QAAQ,KAAK,IAAI,KAAK;AAC3D,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,UAAM,QAAiC;AAAA,MACrC,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AACA,QAAI,OAAQ,OAAM,SAAS;AAC3B,QAAI,OAAQ,OAAM,SAAS;AAC3B,QAAI,QAAQ;AACV,YAAM,UAAU,IAAI,kBAAkB,MAAM,CAAC;AAK7C,YAAM,WAAsC;AAAA,QAC1C,EAAE,OAAO,EAAE,QAAQ,QAAQ,EAAE;AAAA,QAC7B,EAAE,WAAW,EAAE,QAAQ,QAAQ,EAAE;AAAA,QACjC,EAAE,UAAU,EAAE,QAAQ,QAAQ,EAAE;AAAA,MAClC;AAGA,UAAI,aAAa,KAAK,MAAM,EAAG,UAAS,KAAK,EAAE,IAAI,OAAO,CAAC;AAC3D,YAAM,aAAa,MAAM,4BAA4B;AAAA,QACnD,IAAI,GAAG,UAA+B;AAAA,QACtC,YAAY,oBAAoB;AAAA,QAChC,OAAO;AAAA,QACP,QAAQ,CAAC,SAAS,cAAc,WAAW;AAAA,QAC3C,OAAO,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,MAC/D,CAAC;AACD,UAAI,WAAW,WAAW,WAAW,IAAI,QAAQ;AAC/C,iBAAS,KAAK,EAAE,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,CAAC;AAAA,MAC/C;AACA,YAAM,MAAM;AAAA,IACd;AACA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B,SAAS,OAAO,KAAK;AAAA,QACrB,OAAO;AAAA,MACT;AAAA,MACA,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS;AAAA,IACxD;AACA,UAAM,UAAU,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;AACpE,UAAM,QAAQ,QAAQ,SAClB,MAAM,mBAAmB,IAAI,cAAc;AAAA,MAC3C,IAAI,EAAE,KAAK,QAAQ;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb,GAAG,QAAW,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS,CAAC,IACnE,CAAC;AACL,UAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5D,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,MAAM,IAAI,CAAC,SAAS,qBAAqB,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK,MAAM,UAAU,CAAC;AAAA,MACnG;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,yBAAyB,KAAK;AAAA,EACvC;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AACpB;AAEA,IAAO,gBAAQ;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { findAndCountWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { escapeLikePattern } from '@open-mercato/shared/lib/db/escapeLikePattern'\nimport { CheckoutLink, CheckoutTransaction } from '../../data/entities'\nimport { handleCheckoutRouteError, requireAdminContext, userHasCheckoutFeature } from '../helpers'\nimport { checkoutTag } from '../openapi'\nimport { serializeTransaction } from '../../lib/utils'\n\nexport const metadata = {\n  path: '/checkout/transactions',\n  GET: { requireAuth: true, requireFeatures: ['checkout.view'] },\n}\n\nexport async function GET(req: Request) {\n  try {\n    const { auth, container, em } = await requireAdminContext(req)\n    const canViewPii = await userHasCheckoutFeature(container, auth, 'checkout.viewPii')\n    const url = new URL(req.url)\n    const page = Math.max(1, Number(url.searchParams.get('page') ?? '1'))\n    const pageSize = Math.min(100, Math.max(1, Number(url.searchParams.get('pageSize') ?? '25')))\n    const search = (url.searchParams.get('search') ?? '').trim()\n    const linkId = url.searchParams.get('linkId')\n    const status = url.searchParams.get('status')\n    const where: Record<string, unknown> = {\n      organizationId: auth.orgId,\n      tenantId: auth.tenantId,\n    }\n    if (linkId) where.linkId = linkId\n    if (status) where.status = status\n    if (search) where.$or = [\n      { email: { $ilike: `%${escapeLikePattern(search)}%` } },\n      { firstName: { $ilike: `%${escapeLikePattern(search)}%` } },\n      { lastName: { $ilike: `%${escapeLikePattern(search)}%` } },\n      { id: { $ilike: `%${escapeLikePattern(search)}%` } },\n    ]\n    const [items, total] = await findAndCountWithDecryption(\n      em,\n      CheckoutTransaction,\n      where,\n      {\n        orderBy: { createdAt: 'desc' },\n        offset: (page - 1) * pageSize,\n        limit: pageSize,\n      },\n      { organizationId: auth.orgId, tenantId: auth.tenantId },\n    )\n    const linkIds = Array.from(new Set(items.map((item) => item.linkId)))\n    const links = linkIds.length\n      ? await findWithDecryption(em, CheckoutLink, {\n        id: { $in: linkIds },\n        organizationId: auth.orgId,\n        tenantId: auth.tenantId,\n        deletedAt: null,\n      }, undefined, { organizationId: auth.orgId, tenantId: auth.tenantId })\n      : []\n    const linkMap = new Map(links.map((link) => [link.id, link]))\n    return NextResponse.json({\n      items: items.map((item) => serializeTransaction(item, linkMap.get(item.linkId) ?? null, canViewPii)),\n      total,\n      page,\n      pageSize,\n      totalPages: Math.max(1, Math.ceil(total / pageSize)),\n      canViewPii,\n    })\n  } catch (error) {\n    return handleCheckoutRouteError(error)\n  }\n}\n\nexport const openApi = {\n  tags: [checkoutTag],\n}\n\nexport default GET\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B,0BAA0B;AAC/D,SAAS,yBAAyB;AAClC,SAAS,cAAc,2BAA2B;AAClD,SAAS,0BAA0B,qBAAqB,8BAA8B;AACtF,SAAS,mBAAmB;AAC5B,SAAS,4BAA4B;AAE9B,MAAM,WAAW;AAAA,EACtB,MAAM;AAAA,EACN,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,eAAe,EAAE;AAC/D;AAEA,eAAsB,IAAI,KAAc;AACtC,MAAI;AACF,UAAM,EAAE,MAAM,WAAW,GAAG,IAAI,MAAM,oBAAoB,GAAG;AAC7D,UAAM,aAAa,MAAM,uBAAuB,WAAW,MAAM,kBAAkB;AACnF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,UAAM,OAAO,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,MAAM,KAAK,GAAG,CAAC;AACpE,UAAM,WAAW,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,OAAO,IAAI,aAAa,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;AAC5F,UAAM,UAAU,IAAI,aAAa,IAAI,QAAQ,KAAK,IAAI,KAAK;AAC3D,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,UAAM,SAAS,IAAI,aAAa,IAAI,QAAQ;AAC5C,UAAM,QAAiC;AAAA,MACrC,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,IACjB;AACA,QAAI,OAAQ,OAAM,SAAS;AAC3B,QAAI,OAAQ,OAAM,SAAS;AAC3B,QAAI,OAAQ,OAAM,MAAM;AAAA,MACtB,EAAE,OAAO,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI,EAAE;AAAA,MACtD,EAAE,WAAW,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI,EAAE;AAAA,MAC1D,EAAE,UAAU,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI,EAAE;AAAA,MACzD,EAAE,IAAI,EAAE,QAAQ,IAAI,kBAAkB,MAAM,CAAC,IAAI,EAAE;AAAA,IACrD;AACA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B,SAAS,OAAO,KAAK;AAAA,QACrB,OAAO;AAAA,MACT;AAAA,MACA,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS;AAAA,IACxD;AACA,UAAM,UAAU,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;AACpE,UAAM,QAAQ,QAAQ,SAClB,MAAM,mBAAmB,IAAI,cAAc;AAAA,MAC3C,IAAI,EAAE,KAAK,QAAQ;AAAA,MACnB,gBAAgB,KAAK;AAAA,MACrB,UAAU,KAAK;AAAA,MACf,WAAW;AAAA,IACb,GAAG,QAAW,EAAE,gBAAgB,KAAK,OAAO,UAAU,KAAK,SAAS,CAAC,IACnE,CAAC;AACL,UAAM,UAAU,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5D,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,MAAM,IAAI,CAAC,SAAS,qBAAqB,MAAM,QAAQ,IAAI,KAAK,MAAM,KAAK,MAAM,UAAU,CAAC;AAAA,MACnG;AAAA,MACA;AAAA,MACA;AAAA,MACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,QAAQ,CAAC;AAAA,MACnD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,yBAAyB,KAAK;AAAA,EACvC;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,WAAW;AACpB;AAEA,IAAO,gBAAQ;",
   "names": []
 }

package/dist/modules/checkout/backend/checkout/pay-links/page.js

@@ -1,7 +1,6 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
-import { extensionPoints } from "@open-mercato/checkout/modules/checkout/extension-points";
 import Link from "next/link";
 import { Plus } from "lucide-react";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
@@ -165,7 +164,7 @@ function CheckoutPayLinksPage() {
       },
       pagination: { page, pageSize: 25, total, totalPages, onPageChange: setPage },
       isLoading: loading,
-      perspective: { tableId: extensionPoints.hosts.linksTable.tableId },
+      perspective: { tableId: "checkout-links" },
       actions: /* @__PURE__ */ jsx(Button, { asChild: true, children: /* @__PURE__ */ jsxs(Link, { href: "/backend/checkout/pay-links/create", children: [
         /* @__PURE__ */ jsx(Plus, { className: "mr-2 h-4 w-4" }),
         t("checkout.admin.payLinks.actions.create")

package/dist/modules/checkout/backend/checkout/pay-links/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/checkout/backend/checkout/pay-links/page.tsx"],
-  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { extensionPoints } from '@open-mercato/checkout/modules/checkout/extension-points'\nimport Link from 'next/link'\nimport { Plus } from 'lucide-react'\nimport type { ColumnDef } from '@tanstack/react-table'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Badge } from '@open-mercato/ui/primitives/badge'\nimport { apiCallOrThrow, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { normalizeCrudServerError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { ListEmptyState } from '@open-mercato/ui/backend/filters/ListEmptyState'\n\ntype LinkRow = {\n  id: string\n  name: string\n  slug: string\n  pricingMode: 'fixed' | 'custom_amount' | 'price_list'\n  fixedPriceAmount?: number | null\n  fixedPriceCurrencyCode?: string | null\n  customAmountMin?: number | null\n  customAmountMax?: number | null\n  customAmountCurrencyCode?: string | null\n  status: 'draft' | 'active' | 'inactive'\n  completionCount: number\n  maxCompletions?: number | null\n  createdAt?: string | null\n}\n\ntype ListResponse = {\n  items: LinkRow[]\n  total: number\n  totalPages: number\n}\n\nfunction formatDate(value: string | null | undefined): string {\n  if (!value) return '\u2014'\n  const parsed = new Date(value)\n  return Number.isNaN(parsed.getTime()) ? value : parsed.toLocaleDateString()\n}\n\nexport default function CheckoutPayLinksPage() {\n  const t = useT()\n  const [rows, setRows] = React.useState<LinkRow[]>([])\n  const [page, setPage] = React.useState(1)\n  const [search, setSearch] = React.useState('')\n  const [filters, setFilters] = React.useState<FilterValues>({})\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const [loading, setLoading] = React.useState(true)\n  const { runMutation } = useGuardedMutation<{\n    entityType: string\n    entityId?: string\n  }>({\n    contextId: 'checkout:pay-links-list',\n  })\n\n  const filterDefs = React.useMemo<FilterDef[]>(() => [\n    {\n      id: 'status',\n      label: t('checkout.admin.payLinks.filters.status'),\n      type: 'select',\n      options: [\n        { value: 'draft', label: t('checkout.common.status.draft') },\n        { value: 'active', label: t('checkout.common.status.active') },\n        { value: 'inactive', label: t('checkout.common.status.inactive') },\n      ],\n    },\n    {\n      id: 'pricingMode',\n      label: t('checkout.admin.payLinks.filters.pricing'),\n      type: 'select',\n      options: [\n        { value: 'fixed', label: t('checkout.linkTemplateForm.pricing.modes.fixed') },\n        { value: 'custom_amount', label: t('checkout.linkTemplateForm.pricing.modes.customAmount') },\n        { value: 'price_list', label: t('checkout.linkTemplateForm.pricing.modes.priceList') },\n      ],\n    },\n  ], [t])\n\n  const loadRows = React.useCallback(async () => {\n    setLoading(true)\n    const params = new URLSearchParams({\n      page: String(page),\n      pageSize: '25',\n      search,\n    })\n    if (typeof filters.status === 'string' && filters.status) params.set('status', filters.status)\n    if (typeof filters.pricingMode === 'string' && filters.pricingMode) params.set('pricingMode', filters.pricingMode)\n    const result = await readApiResultOrThrow<ListResponse>(`/api/checkout/links?${params.toString()}`)\n    setRows(result.items ?? [])\n    setTotal(result.total ?? 0)\n    setTotalPages(result.totalPages ?? 1)\n    setLoading(false)\n  }, [filters.pricingMode, filters.status, page, search])\n\n  React.useEffect(() => {\n    void loadRows()\n  }, [loadRows])\n\n  const runRowMutation = React.useCallback(async ({\n    row,\n    operation,\n    successMessage,\n    fallbackErrorMessage,\n    mutationPayload,\n  }: {\n    row: LinkRow\n    operation: () => Promise<void>\n    successMessage: string\n    fallbackErrorMessage: string\n    mutationPayload?: Record<string, unknown>\n  }) => {\n    try {\n      await runMutation({\n        operation,\n        mutationPayload,\n        context: {\n          entityType: 'checkout:checkout_link',\n          entityId: row.id,\n        },\n      })\n      flash(successMessage, 'success')\n      void loadRows()\n    } catch (error) {\n      const { message } = normalizeCrudServerError(error)\n      flash(message || fallbackErrorMessage, 'error')\n    }\n  }, [loadRows, runMutation])\n\n  const columns = React.useMemo<ColumnDef<LinkRow>[]>(() => [\n    { accessorKey: 'name', header: t('checkout.admin.payLinks.columns.name') },\n    {\n      accessorKey: 'slug',\n      header: t('checkout.admin.payLinks.columns.slug'),\n      cell: ({ row }) => <span className=\"font-mono text-xs\">/pay/{row.original.slug}</span>,\n    },\n    {\n      accessorKey: 'pricingMode',\n      header: t('checkout.admin.payLinks.columns.pricing'),\n      cell: ({ row }) => {\n        if (row.original.pricingMode === 'fixed') {\n          return t('checkout.admin.payLinks.pricing.fixed', {\n            amount: row.original.fixedPriceAmount?.toFixed(2) ?? '0.00',\n            currency: row.original.fixedPriceCurrencyCode ?? '',\n          }).trim()\n        }\n        if (row.original.pricingMode === 'custom_amount') {\n          return t('checkout.admin.payLinks.pricing.customAmount', {\n            min: row.original.customAmountMin?.toFixed(2) ?? '0.00',\n            max: row.original.customAmountMax?.toFixed(2) ?? '0.00',\n            currency: row.original.customAmountCurrencyCode ?? '',\n          }).trim()\n        }\n        return t('checkout.linkTemplateForm.pricing.modes.priceList')\n      },\n    },\n    {\n      accessorKey: 'status',\n      header: t('checkout.admin.payLinks.columns.status'),\n      cell: ({ row }) => (\n        <Badge variant={row.original.status === 'active' ? 'default' : 'secondary'}>\n          {t(`checkout.common.status.${row.original.status}`)}\n        </Badge>\n      ),\n    },\n    {\n      accessorKey: 'completionCount',\n      header: t('checkout.admin.payLinks.columns.uses'),\n      cell: ({ row }) => `${row.original.completionCount} / ${row.original.maxCompletions ?? '\u221E'}`,\n    },\n    {\n      accessorKey: 'createdAt',\n      header: t('checkout.admin.payLinks.columns.created'),\n      cell: ({ row }) => formatDate(row.original.createdAt),\n    },\n  ], [t])\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('checkout.admin.payLinks.title')}\n          columns={columns}\n          data={rows}\n          searchValue={search}\n          onSearchChange={(value) => { setSearch(value); setPage(1) }}\n          searchPlaceholder={t('checkout.admin.payLinks.searchPlaceholder')}\n          filters={filterDefs}\n          filterValues={filters}\n          onFiltersApply={(next) => { setFilters(next); setPage(1) }}\n          onFiltersClear={() => { setFilters({}); setPage(1) }}\n          pagination={{ page, pageSize: 25, total, totalPages, onPageChange: setPage }}\n          isLoading={loading}\n          perspective={{ tableId: extensionPoints.hosts.linksTable.tableId }}\n          actions={(\n            <Button asChild>\n              <Link href=\"/backend/checkout/pay-links/create\">\n                <Plus className=\"mr-2 h-4 w-4\" />\n                {t('checkout.admin.payLinks.actions.create')}\n              </Link>\n            </Button>\n          )}\n          emptyState={(\n            <ListEmptyState\n              entityName={t('checkout.admin.payLinks.title')}\n              createHref=\"/backend/checkout/pay-links/create\"\n              createLabel={t('checkout.admin.payLinks.actions.create')}\n            />\n          )}\n          rowActions={(row) => (\n            <RowActions items={[\n              { id: 'edit', label: t('checkout.common.actions.edit'), href: `/backend/checkout/pay-links/${encodeURIComponent(row.id)}` },\n              {\n                id: 'preview',\n                label: t('checkout.common.actions.preview'),\n                onSelect: () => window.open(`/pay/${encodeURIComponent(row.slug)}?preview=true`, '_blank', 'noopener,noreferrer'),\n              },\n              ...(row.status === 'active'\n                ? [{\n                  id: 'view',\n                  label: t('checkout.admin.payLinks.actions.viewPayPage'),\n                  onSelect: () => window.open(`/pay/${encodeURIComponent(row.slug)}`, '_blank', 'noopener,noreferrer'),\n                }]\n                : []),\n              {\n                id: 'copy',\n                label: t('checkout.admin.payLinks.actions.copyUrl'),\n                onSelect: async () => {\n                  await navigator.clipboard.writeText(`${window.location.origin}/pay/${row.slug}`)\n                },\n              },\n              { id: 'transactions', label: t('checkout.admin.payLinks.actions.showTransactions'), href: `/backend/checkout/transactions?linkId=${encodeURIComponent(row.id)}` },\n              ...(row.status !== 'active'\n                ? [{\n                  id: 'publish',\n                  label: t('checkout.admin.payLinks.actions.publish'),\n                  onSelect: async () => {\n                    await runRowMutation({\n                      row,\n                      successMessage: t('checkout.admin.payLinks.flash.published'),\n                      fallbackErrorMessage: t('checkout.admin.payLinks.flash.publishError'),\n                      mutationPayload: { status: 'active' },\n                      operation: async () => {\n                        await apiCallOrThrow(`/api/checkout/links/${encodeURIComponent(row.id)}`, {\n                          method: 'PUT',\n                          headers: { 'Content-Type': 'application/json' },\n                          body: JSON.stringify({ status: 'active' }),\n                        })\n                      },\n                    })\n                  },\n                }]\n                : [{\n                  id: 'deactivate',\n                  label: t('checkout.admin.payLinks.actions.deactivate'),\n                  onSelect: async () => {\n                    await runRowMutation({\n                      row,\n                      successMessage: t('checkout.admin.payLinks.flash.deactivated'),\n                      fallbackErrorMessage: t('checkout.admin.payLinks.flash.deactivateError'),\n                      mutationPayload: { status: 'inactive' },\n                      operation: async () => {\n                        await apiCallOrThrow(`/api/checkout/links/${encodeURIComponent(row.id)}`, {\n                          method: 'PUT',\n                          headers: { 'Content-Type': 'application/json' },\n                          body: JSON.stringify({ status: 'inactive' }),\n                        })\n                      },\n                    })\n                  },\n                }]),\n              {\n                id: 'delete',\n                label: t('checkout.common.actions.delete'),\n                onSelect: async () => {\n                  await runRowMutation({\n                    row,\n                    successMessage: t('checkout.admin.payLinks.flash.deleted'),\n                    fallbackErrorMessage: t('checkout.admin.payLinks.flash.deleteError'),\n                    operation: async () => {\n                      await apiCallOrThrow(`/api/checkout/links/${encodeURIComponent(row.id)}`, { method: 'DELETE' })\n                    },\n                  })\n                },\n              },\n            ]} />\n          )}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AA6IyB,SA0BjB,KA1BiB;AA5IzB,YAAY,WAAW;AACvB,SAAS,uBAAuB;AAChC,OAAO,UAAU;AACjB,SAAS,YAAY;AAErB,SAAS,YAAY;AAErB,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,gBAAgB,4BAA4B;AACrD,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAwB/B,SAAS,WAAW,OAA0C;AAC5D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,SAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,QAAQ,OAAO,mBAAmB;AAC5E;AAEe,SAAR,uBAAwC;AAC7C,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAoB,CAAC,CAAC;AACpD,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAS,EAAE;AAC7C,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAuB,CAAC,CAAC;AAC7D,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,EAAE,YAAY,IAAI,mBAGrB;AAAA,IACD,WAAW;AAAA,EACb,CAAC;AAED,QAAM,aAAa,MAAM,QAAqB,MAAM;AAAA,IAClD;AAAA,MACE,IAAI;AAAA,MACJ,OAAO,EAAE,wCAAwC;AAAA,MACjD,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,OAAO,SAAS,OAAO,EAAE,8BAA8B,EAAE;AAAA,QAC3D,EAAE,OAAO,UAAU,OAAO,EAAE,+BAA+B,EAAE;AAAA,QAC7D,EAAE,OAAO,YAAY,OAAO,EAAE,iCAAiC,EAAE;AAAA,MACnE;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,OAAO,EAAE,yCAAyC;AAAA,MAClD,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,OAAO,SAAS,OAAO,EAAE,+CAA+C,EAAE;AAAA,QAC5E,EAAE,OAAO,iBAAiB,OAAO,EAAE,sDAAsD,EAAE;AAAA,QAC3F,EAAE,OAAO,cAAc,OAAO,EAAE,mDAAmD,EAAE;AAAA,MACvF;AAAA,IACF;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,WAAW,MAAM,YAAY,YAAY;AAC7C,eAAW,IAAI;AACf,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,MAAM,OAAO,IAAI;AAAA,MACjB,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AACD,QAAI,OAAO,QAAQ,WAAW,YAAY,QAAQ,OAAQ,QAAO,IAAI,UAAU,QAAQ,MAAM;AAC7F,QAAI,OAAO,QAAQ,gBAAgB,YAAY,QAAQ,YAAa,QAAO,IAAI,eAAe,QAAQ,WAAW;AACjH,UAAM,SAAS,MAAM,qBAAmC,uBAAuB,OAAO,SAAS,CAAC,EAAE;AAClG,YAAQ,OAAO,SAAS,CAAC,CAAC;AAC1B,aAAS,OAAO,SAAS,CAAC;AAC1B,kBAAc,OAAO,cAAc,CAAC;AACpC,eAAW,KAAK;AAAA,EAClB,GAAG,CAAC,QAAQ,aAAa,QAAQ,QAAQ,MAAM,MAAM,CAAC;AAEtD,QAAM,UAAU,MAAM;AACpB,SAAK,SAAS;AAAA,EAChB,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,iBAAiB,MAAM,YAAY,OAAO;AAAA,IAC9C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,MAMM;AACJ,QAAI;AACF,YAAM,YAAY;AAAA,QAChB;AAAA,QACA;AAAA,QACA,SAAS;AAAA,UACP,YAAY;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB;AAAA,MACF,CAAC;AACD,YAAM,gBAAgB,SAAS;AAC/B,WAAK,SAAS;AAAA,IAChB,SAAS,OAAO;AACd,YAAM,EAAE,QAAQ,IAAI,yBAAyB,KAAK;AAClD,YAAM,WAAW,sBAAsB,OAAO;AAAA,IAChD;AAAA,EACF,GAAG,CAAC,UAAU,WAAW,CAAC;AAE1B,QAAM,UAAU,MAAM,QAA8B,MAAM;AAAA,IACxD,EAAE,aAAa,QAAQ,QAAQ,EAAE,sCAAsC,EAAE;AAAA,IACzE;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,sCAAsC;AAAA,MAChD,MAAM,CAAC,EAAE,IAAI,MAAM,qBAAC,UAAK,WAAU,qBAAoB;AAAA;AAAA,QAAM,IAAI,SAAS;AAAA,SAAK;AAAA,IACjF;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,yCAAyC;AAAA,MACnD,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,YAAI,IAAI,SAAS,gBAAgB,SAAS;AACxC,iBAAO,EAAE,yCAAyC;AAAA,YAChD,QAAQ,IAAI,SAAS,kBAAkB,QAAQ,CAAC,KAAK;AAAA,YACrD,UAAU,IAAI,SAAS,0BAA0B;AAAA,UACnD,CAAC,EAAE,KAAK;AAAA,QACV;AACA,YAAI,IAAI,SAAS,gBAAgB,iBAAiB;AAChD,iBAAO,EAAE,gDAAgD;AAAA,YACvD,KAAK,IAAI,SAAS,iBAAiB,QAAQ,CAAC,KAAK;AAAA,YACjD,KAAK,IAAI,SAAS,iBAAiB,QAAQ,CAAC,KAAK;AAAA,YACjD,UAAU,IAAI,SAAS,4BAA4B;AAAA,UACrD,CAAC,EAAE,KAAK;AAAA,QACV;AACA,eAAO,EAAE,mDAAmD;AAAA,MAC9D;AAAA,IACF;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,wCAAwC;AAAA,MAClD,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,SAAM,SAAS,IAAI,SAAS,WAAW,WAAW,YAAY,aAC5D,YAAE,0BAA0B,IAAI,SAAS,MAAM,EAAE,GACpD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,sCAAsC;AAAA,MAChD,MAAM,CAAC,EAAE,IAAI,MAAM,GAAG,IAAI,SAAS,eAAe,MAAM,IAAI,SAAS,kBAAkB,QAAG;AAAA,IAC5F;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,yCAAyC;AAAA,MACnD,MAAM,CAAC,EAAE,IAAI,MAAM,WAAW,IAAI,SAAS,SAAS;AAAA,IACtD;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,+BAA+B;AAAA,MACxC;AAAA,MACA,MAAM;AAAA,MACN,aAAa;AAAA,MACb,gBAAgB,CAAC,UAAU;AAAE,kBAAU,KAAK;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MAC1D,mBAAmB,EAAE,2CAA2C;AAAA,MAChE,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB,CAAC,SAAS;AAAE,mBAAW,IAAI;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MACzD,gBAAgB,MAAM;AAAE,mBAAW,CAAC,CAAC;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MACnD,YAAY,EAAE,MAAM,UAAU,IAAI,OAAO,YAAY,cAAc,QAAQ;AAAA,MAC3E,WAAW;AAAA,MACX,aAAa,EAAE,SAAS,gBAAgB,MAAM,WAAW,QAAQ;AAAA,MACjE,SACE,oBAAC,UAAO,SAAO,MACb,+BAAC,QAAK,MAAK,sCACT;AAAA,4BAAC,QAAK,WAAU,gBAAe;AAAA,QAC9B,EAAE,wCAAwC;AAAA,SAC7C,GACF;AAAA,MAEF,YACE;AAAA,QAAC;AAAA;AAAA,UACC,YAAY,EAAE,+BAA+B;AAAA,UAC7C,YAAW;AAAA,UACX,aAAa,EAAE,wCAAwC;AAAA;AAAA,MACzD;AAAA,MAEF,YAAY,CAAC,QACX,oBAAC,cAAW,OAAO;AAAA,QACjB,EAAE,IAAI,QAAQ,OAAO,EAAE,8BAA8B,GAAG,MAAM,+BAA+B,mBAAmB,IAAI,EAAE,CAAC,GAAG;AAAA,QAC1H;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,iCAAiC;AAAA,UAC1C,UAAU,MAAM,OAAO,KAAK,QAAQ,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,UAAU,qBAAqB;AAAA,QAClH;AAAA,QACA,GAAI,IAAI,WAAW,WACf,CAAC;AAAA,UACD,IAAI;AAAA,UACJ,OAAO,EAAE,6CAA6C;AAAA,UACtD,UAAU,MAAM,OAAO,KAAK,QAAQ,mBAAmB,IAAI,IAAI,CAAC,IAAI,UAAU,qBAAqB;AAAA,QACrG,CAAC,IACC,CAAC;AAAA,QACL;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,yCAAyC;AAAA,UAClD,UAAU,YAAY;AACpB,kBAAM,UAAU,UAAU,UAAU,GAAG,OAAO,SAAS,MAAM,QAAQ,IAAI,IAAI,EAAE;AAAA,UACjF;AAAA,QACF;AAAA,QACA,EAAE,IAAI,gBAAgB,OAAO,EAAE,kDAAkD,GAAG,MAAM,yCAAyC,mBAAmB,IAAI,EAAE,CAAC,GAAG;AAAA,QAChK,GAAI,IAAI,WAAW,WACf,CAAC;AAAA,UACD,IAAI;AAAA,UACJ,OAAO,EAAE,yCAAyC;AAAA,UAClD,UAAU,YAAY;AACpB,kBAAM,eAAe;AAAA,cACnB;AAAA,cACA,gBAAgB,EAAE,yCAAyC;AAAA,cAC3D,sBAAsB,EAAE,4CAA4C;AAAA,cACpE,iBAAiB,EAAE,QAAQ,SAAS;AAAA,cACpC,WAAW,YAAY;AACrB,sBAAM,eAAe,uBAAuB,mBAAmB,IAAI,EAAE,CAAC,IAAI;AAAA,kBACxE,QAAQ;AAAA,kBACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,kBAC9C,MAAM,KAAK,UAAU,EAAE,QAAQ,SAAS,CAAC;AAAA,gBAC3C,CAAC;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,CAAC,IACC,CAAC;AAAA,UACD,IAAI;AAAA,UACJ,OAAO,EAAE,4CAA4C;AAAA,UACrD,UAAU,YAAY;AACpB,kBAAM,eAAe;AAAA,cACnB;AAAA,cACA,gBAAgB,EAAE,2CAA2C;AAAA,cAC7D,sBAAsB,EAAE,+CAA+C;AAAA,cACvE,iBAAiB,EAAE,QAAQ,WAAW;AAAA,cACtC,WAAW,YAAY;AACrB,sBAAM,eAAe,uBAAuB,mBAAmB,IAAI,EAAE,CAAC,IAAI;AAAA,kBACxE,QAAQ;AAAA,kBACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,kBAC9C,MAAM,KAAK,UAAU,EAAE,QAAQ,WAAW,CAAC;AAAA,gBAC7C,CAAC;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,CAAC;AAAA,QACH;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,gCAAgC;AAAA,UACzC,UAAU,YAAY;AACpB,kBAAM,eAAe;AAAA,cACnB;AAAA,cACA,gBAAgB,EAAE,uCAAuC;AAAA,cACzD,sBAAsB,EAAE,2CAA2C;AAAA,cACnE,WAAW,YAAY;AACrB,sBAAM,eAAe,uBAAuB,mBAAmB,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,SAAS,CAAC;AAAA,cAChG;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,GAAG;AAAA;AAAA,EAEP,GACF,GACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { Plus } from 'lucide-react'\nimport type { ColumnDef } from '@tanstack/react-table'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { flash } from '@open-mercato/ui/backend/FlashMessages'\nimport { useGuardedMutation } from '@open-mercato/ui/backend/injection/useGuardedMutation'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { Badge } from '@open-mercato/ui/primitives/badge'\nimport { apiCallOrThrow, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { normalizeCrudServerError } from '@open-mercato/ui/backend/utils/serverErrors'\nimport { ListEmptyState } from '@open-mercato/ui/backend/filters/ListEmptyState'\n\ntype LinkRow = {\n  id: string\n  name: string\n  slug: string\n  pricingMode: 'fixed' | 'custom_amount' | 'price_list'\n  fixedPriceAmount?: number | null\n  fixedPriceCurrencyCode?: string | null\n  customAmountMin?: number | null\n  customAmountMax?: number | null\n  customAmountCurrencyCode?: string | null\n  status: 'draft' | 'active' | 'inactive'\n  completionCount: number\n  maxCompletions?: number | null\n  createdAt?: string | null\n}\n\ntype ListResponse = {\n  items: LinkRow[]\n  total: number\n  totalPages: number\n}\n\nfunction formatDate(value: string | null | undefined): string {\n  if (!value) return '\u2014'\n  const parsed = new Date(value)\n  return Number.isNaN(parsed.getTime()) ? value : parsed.toLocaleDateString()\n}\n\nexport default function CheckoutPayLinksPage() {\n  const t = useT()\n  const [rows, setRows] = React.useState<LinkRow[]>([])\n  const [page, setPage] = React.useState(1)\n  const [search, setSearch] = React.useState('')\n  const [filters, setFilters] = React.useState<FilterValues>({})\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n  const [loading, setLoading] = React.useState(true)\n  const { runMutation } = useGuardedMutation<{\n    entityType: string\n    entityId?: string\n  }>({\n    contextId: 'checkout:pay-links-list',\n  })\n\n  const filterDefs = React.useMemo<FilterDef[]>(() => [\n    {\n      id: 'status',\n      label: t('checkout.admin.payLinks.filters.status'),\n      type: 'select',\n      options: [\n        { value: 'draft', label: t('checkout.common.status.draft') },\n        { value: 'active', label: t('checkout.common.status.active') },\n        { value: 'inactive', label: t('checkout.common.status.inactive') },\n      ],\n    },\n    {\n      id: 'pricingMode',\n      label: t('checkout.admin.payLinks.filters.pricing'),\n      type: 'select',\n      options: [\n        { value: 'fixed', label: t('checkout.linkTemplateForm.pricing.modes.fixed') },\n        { value: 'custom_amount', label: t('checkout.linkTemplateForm.pricing.modes.customAmount') },\n        { value: 'price_list', label: t('checkout.linkTemplateForm.pricing.modes.priceList') },\n      ],\n    },\n  ], [t])\n\n  const loadRows = React.useCallback(async () => {\n    setLoading(true)\n    const params = new URLSearchParams({\n      page: String(page),\n      pageSize: '25',\n      search,\n    })\n    if (typeof filters.status === 'string' && filters.status) params.set('status', filters.status)\n    if (typeof filters.pricingMode === 'string' && filters.pricingMode) params.set('pricingMode', filters.pricingMode)\n    const result = await readApiResultOrThrow<ListResponse>(`/api/checkout/links?${params.toString()}`)\n    setRows(result.items ?? [])\n    setTotal(result.total ?? 0)\n    setTotalPages(result.totalPages ?? 1)\n    setLoading(false)\n  }, [filters.pricingMode, filters.status, page, search])\n\n  React.useEffect(() => {\n    void loadRows()\n  }, [loadRows])\n\n  const runRowMutation = React.useCallback(async ({\n    row,\n    operation,\n    successMessage,\n    fallbackErrorMessage,\n    mutationPayload,\n  }: {\n    row: LinkRow\n    operation: () => Promise<void>\n    successMessage: string\n    fallbackErrorMessage: string\n    mutationPayload?: Record<string, unknown>\n  }) => {\n    try {\n      await runMutation({\n        operation,\n        mutationPayload,\n        context: {\n          entityType: 'checkout:checkout_link',\n          entityId: row.id,\n        },\n      })\n      flash(successMessage, 'success')\n      void loadRows()\n    } catch (error) {\n      const { message } = normalizeCrudServerError(error)\n      flash(message || fallbackErrorMessage, 'error')\n    }\n  }, [loadRows, runMutation])\n\n  const columns = React.useMemo<ColumnDef<LinkRow>[]>(() => [\n    { accessorKey: 'name', header: t('checkout.admin.payLinks.columns.name') },\n    {\n      accessorKey: 'slug',\n      header: t('checkout.admin.payLinks.columns.slug'),\n      cell: ({ row }) => <span className=\"font-mono text-xs\">/pay/{row.original.slug}</span>,\n    },\n    {\n      accessorKey: 'pricingMode',\n      header: t('checkout.admin.payLinks.columns.pricing'),\n      cell: ({ row }) => {\n        if (row.original.pricingMode === 'fixed') {\n          return t('checkout.admin.payLinks.pricing.fixed', {\n            amount: row.original.fixedPriceAmount?.toFixed(2) ?? '0.00',\n            currency: row.original.fixedPriceCurrencyCode ?? '',\n          }).trim()\n        }\n        if (row.original.pricingMode === 'custom_amount') {\n          return t('checkout.admin.payLinks.pricing.customAmount', {\n            min: row.original.customAmountMin?.toFixed(2) ?? '0.00',\n            max: row.original.customAmountMax?.toFixed(2) ?? '0.00',\n            currency: row.original.customAmountCurrencyCode ?? '',\n          }).trim()\n        }\n        return t('checkout.linkTemplateForm.pricing.modes.priceList')\n      },\n    },\n    {\n      accessorKey: 'status',\n      header: t('checkout.admin.payLinks.columns.status'),\n      cell: ({ row }) => (\n        <Badge variant={row.original.status === 'active' ? 'default' : 'secondary'}>\n          {t(`checkout.common.status.${row.original.status}`)}\n        </Badge>\n      ),\n    },\n    {\n      accessorKey: 'completionCount',\n      header: t('checkout.admin.payLinks.columns.uses'),\n      cell: ({ row }) => `${row.original.completionCount} / ${row.original.maxCompletions ?? '\u221E'}`,\n    },\n    {\n      accessorKey: 'createdAt',\n      header: t('checkout.admin.payLinks.columns.created'),\n      cell: ({ row }) => formatDate(row.original.createdAt),\n    },\n  ], [t])\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('checkout.admin.payLinks.title')}\n          columns={columns}\n          data={rows}\n          searchValue={search}\n          onSearchChange={(value) => { setSearch(value); setPage(1) }}\n          searchPlaceholder={t('checkout.admin.payLinks.searchPlaceholder')}\n          filters={filterDefs}\n          filterValues={filters}\n          onFiltersApply={(next) => { setFilters(next); setPage(1) }}\n          onFiltersClear={() => { setFilters({}); setPage(1) }}\n          pagination={{ page, pageSize: 25, total, totalPages, onPageChange: setPage }}\n          isLoading={loading}\n          perspective={{ tableId: 'checkout-links' }}\n          actions={(\n            <Button asChild>\n              <Link href=\"/backend/checkout/pay-links/create\">\n                <Plus className=\"mr-2 h-4 w-4\" />\n                {t('checkout.admin.payLinks.actions.create')}\n              </Link>\n            </Button>\n          )}\n          emptyState={(\n            <ListEmptyState\n              entityName={t('checkout.admin.payLinks.title')}\n              createHref=\"/backend/checkout/pay-links/create\"\n              createLabel={t('checkout.admin.payLinks.actions.create')}\n            />\n          )}\n          rowActions={(row) => (\n            <RowActions items={[\n              { id: 'edit', label: t('checkout.common.actions.edit'), href: `/backend/checkout/pay-links/${encodeURIComponent(row.id)}` },\n              {\n                id: 'preview',\n                label: t('checkout.common.actions.preview'),\n                onSelect: () => window.open(`/pay/${encodeURIComponent(row.slug)}?preview=true`, '_blank', 'noopener,noreferrer'),\n              },\n              ...(row.status === 'active'\n                ? [{\n                  id: 'view',\n                  label: t('checkout.admin.payLinks.actions.viewPayPage'),\n                  onSelect: () => window.open(`/pay/${encodeURIComponent(row.slug)}`, '_blank', 'noopener,noreferrer'),\n                }]\n                : []),\n              {\n                id: 'copy',\n                label: t('checkout.admin.payLinks.actions.copyUrl'),\n                onSelect: async () => {\n                  await navigator.clipboard.writeText(`${window.location.origin}/pay/${row.slug}`)\n                },\n              },\n              { id: 'transactions', label: t('checkout.admin.payLinks.actions.showTransactions'), href: `/backend/checkout/transactions?linkId=${encodeURIComponent(row.id)}` },\n              ...(row.status !== 'active'\n                ? [{\n                  id: 'publish',\n                  label: t('checkout.admin.payLinks.actions.publish'),\n                  onSelect: async () => {\n                    await runRowMutation({\n                      row,\n                      successMessage: t('checkout.admin.payLinks.flash.published'),\n                      fallbackErrorMessage: t('checkout.admin.payLinks.flash.publishError'),\n                      mutationPayload: { status: 'active' },\n                      operation: async () => {\n                        await apiCallOrThrow(`/api/checkout/links/${encodeURIComponent(row.id)}`, {\n                          method: 'PUT',\n                          headers: { 'Content-Type': 'application/json' },\n                          body: JSON.stringify({ status: 'active' }),\n                        })\n                      },\n                    })\n                  },\n                }]\n                : [{\n                  id: 'deactivate',\n                  label: t('checkout.admin.payLinks.actions.deactivate'),\n                  onSelect: async () => {\n                    await runRowMutation({\n                      row,\n                      successMessage: t('checkout.admin.payLinks.flash.deactivated'),\n                      fallbackErrorMessage: t('checkout.admin.payLinks.flash.deactivateError'),\n                      mutationPayload: { status: 'inactive' },\n                      operation: async () => {\n                        await apiCallOrThrow(`/api/checkout/links/${encodeURIComponent(row.id)}`, {\n                          method: 'PUT',\n                          headers: { 'Content-Type': 'application/json' },\n                          body: JSON.stringify({ status: 'inactive' }),\n                        })\n                      },\n                    })\n                  },\n                }]),\n              {\n                id: 'delete',\n                label: t('checkout.common.actions.delete'),\n                onSelect: async () => {\n                  await runRowMutation({\n                    row,\n                    successMessage: t('checkout.admin.payLinks.flash.deleted'),\n                    fallbackErrorMessage: t('checkout.admin.payLinks.flash.deleteError'),\n                    operation: async () => {\n                      await apiCallOrThrow(`/api/checkout/links/${encodeURIComponent(row.id)}`, { method: 'DELETE' })\n                    },\n                  })\n                },\n              },\n            ]} />\n          )}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AA4IyB,SA0BjB,KA1BiB;AA3IzB,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,YAAY;AAErB,SAAS,YAAY;AAErB,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,aAAa;AACtB,SAAS,0BAA0B;AACnC,SAAS,cAAc;AACvB,SAAS,aAAa;AACtB,SAAS,gBAAgB,4BAA4B;AACrD,SAAS,gCAAgC;AACzC,SAAS,sBAAsB;AAwB/B,SAAS,WAAW,OAA0C;AAC5D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,SAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,QAAQ,OAAO,mBAAmB;AAC5E;AAEe,SAAR,uBAAwC;AAC7C,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAoB,CAAC,CAAC;AACpD,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAS,EAAE;AAC7C,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAuB,CAAC,CAAC;AAC7D,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,EAAE,YAAY,IAAI,mBAGrB;AAAA,IACD,WAAW;AAAA,EACb,CAAC;AAED,QAAM,aAAa,MAAM,QAAqB,MAAM;AAAA,IAClD;AAAA,MACE,IAAI;AAAA,MACJ,OAAO,EAAE,wCAAwC;AAAA,MACjD,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,OAAO,SAAS,OAAO,EAAE,8BAA8B,EAAE;AAAA,QAC3D,EAAE,OAAO,UAAU,OAAO,EAAE,+BAA+B,EAAE;AAAA,QAC7D,EAAE,OAAO,YAAY,OAAO,EAAE,iCAAiC,EAAE;AAAA,MACnE;AAAA,IACF;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,OAAO,EAAE,yCAAyC;AAAA,MAClD,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,OAAO,SAAS,OAAO,EAAE,+CAA+C,EAAE;AAAA,QAC5E,EAAE,OAAO,iBAAiB,OAAO,EAAE,sDAAsD,EAAE;AAAA,QAC3F,EAAE,OAAO,cAAc,OAAO,EAAE,mDAAmD,EAAE;AAAA,MACvF;AAAA,IACF;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,WAAW,MAAM,YAAY,YAAY;AAC7C,eAAW,IAAI;AACf,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,MAAM,OAAO,IAAI;AAAA,MACjB,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AACD,QAAI,OAAO,QAAQ,WAAW,YAAY,QAAQ,OAAQ,QAAO,IAAI,UAAU,QAAQ,MAAM;AAC7F,QAAI,OAAO,QAAQ,gBAAgB,YAAY,QAAQ,YAAa,QAAO,IAAI,eAAe,QAAQ,WAAW;AACjH,UAAM,SAAS,MAAM,qBAAmC,uBAAuB,OAAO,SAAS,CAAC,EAAE;AAClG,YAAQ,OAAO,SAAS,CAAC,CAAC;AAC1B,aAAS,OAAO,SAAS,CAAC;AAC1B,kBAAc,OAAO,cAAc,CAAC;AACpC,eAAW,KAAK;AAAA,EAClB,GAAG,CAAC,QAAQ,aAAa,QAAQ,QAAQ,MAAM,MAAM,CAAC;AAEtD,QAAM,UAAU,MAAM;AACpB,SAAK,SAAS;AAAA,EAChB,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,iBAAiB,MAAM,YAAY,OAAO;AAAA,IAC9C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,MAMM;AACJ,QAAI;AACF,YAAM,YAAY;AAAA,QAChB;AAAA,QACA;AAAA,QACA,SAAS;AAAA,UACP,YAAY;AAAA,UACZ,UAAU,IAAI;AAAA,QAChB;AAAA,MACF,CAAC;AACD,YAAM,gBAAgB,SAAS;AAC/B,WAAK,SAAS;AAAA,IAChB,SAAS,OAAO;AACd,YAAM,EAAE,QAAQ,IAAI,yBAAyB,KAAK;AAClD,YAAM,WAAW,sBAAsB,OAAO;AAAA,IAChD;AAAA,EACF,GAAG,CAAC,UAAU,WAAW,CAAC;AAE1B,QAAM,UAAU,MAAM,QAA8B,MAAM;AAAA,IACxD,EAAE,aAAa,QAAQ,QAAQ,EAAE,sCAAsC,EAAE;AAAA,IACzE;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,sCAAsC;AAAA,MAChD,MAAM,CAAC,EAAE,IAAI,MAAM,qBAAC,UAAK,WAAU,qBAAoB;AAAA;AAAA,QAAM,IAAI,SAAS;AAAA,SAAK;AAAA,IACjF;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,yCAAyC;AAAA,MACnD,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,YAAI,IAAI,SAAS,gBAAgB,SAAS;AACxC,iBAAO,EAAE,yCAAyC;AAAA,YAChD,QAAQ,IAAI,SAAS,kBAAkB,QAAQ,CAAC,KAAK;AAAA,YACrD,UAAU,IAAI,SAAS,0BAA0B;AAAA,UACnD,CAAC,EAAE,KAAK;AAAA,QACV;AACA,YAAI,IAAI,SAAS,gBAAgB,iBAAiB;AAChD,iBAAO,EAAE,gDAAgD;AAAA,YACvD,KAAK,IAAI,SAAS,iBAAiB,QAAQ,CAAC,KAAK;AAAA,YACjD,KAAK,IAAI,SAAS,iBAAiB,QAAQ,CAAC,KAAK;AAAA,YACjD,UAAU,IAAI,SAAS,4BAA4B;AAAA,UACrD,CAAC,EAAE,KAAK;AAAA,QACV;AACA,eAAO,EAAE,mDAAmD;AAAA,MAC9D;AAAA,IACF;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,wCAAwC;AAAA,MAClD,MAAM,CAAC,EAAE,IAAI,MACX,oBAAC,SAAM,SAAS,IAAI,SAAS,WAAW,WAAW,YAAY,aAC5D,YAAE,0BAA0B,IAAI,SAAS,MAAM,EAAE,GACpD;AAAA,IAEJ;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,sCAAsC;AAAA,MAChD,MAAM,CAAC,EAAE,IAAI,MAAM,GAAG,IAAI,SAAS,eAAe,MAAM,IAAI,SAAS,kBAAkB,QAAG;AAAA,IAC5F;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,yCAAyC;AAAA,MACnD,MAAM,CAAC,EAAE,IAAI,MAAM,WAAW,IAAI,SAAS,SAAS;AAAA,IACtD;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,+BAA+B;AAAA,MACxC;AAAA,MACA,MAAM;AAAA,MACN,aAAa;AAAA,MACb,gBAAgB,CAAC,UAAU;AAAE,kBAAU,KAAK;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MAC1D,mBAAmB,EAAE,2CAA2C;AAAA,MAChE,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB,CAAC,SAAS;AAAE,mBAAW,IAAI;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MACzD,gBAAgB,MAAM;AAAE,mBAAW,CAAC,CAAC;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MACnD,YAAY,EAAE,MAAM,UAAU,IAAI,OAAO,YAAY,cAAc,QAAQ;AAAA,MAC3E,WAAW;AAAA,MACX,aAAa,EAAE,SAAS,iBAAiB;AAAA,MACzC,SACE,oBAAC,UAAO,SAAO,MACb,+BAAC,QAAK,MAAK,sCACT;AAAA,4BAAC,QAAK,WAAU,gBAAe;AAAA,QAC9B,EAAE,wCAAwC;AAAA,SAC7C,GACF;AAAA,MAEF,YACE;AAAA,QAAC;AAAA;AAAA,UACC,YAAY,EAAE,+BAA+B;AAAA,UAC7C,YAAW;AAAA,UACX,aAAa,EAAE,wCAAwC;AAAA;AAAA,MACzD;AAAA,MAEF,YAAY,CAAC,QACX,oBAAC,cAAW,OAAO;AAAA,QACjB,EAAE,IAAI,QAAQ,OAAO,EAAE,8BAA8B,GAAG,MAAM,+BAA+B,mBAAmB,IAAI,EAAE,CAAC,GAAG;AAAA,QAC1H;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,iCAAiC;AAAA,UAC1C,UAAU,MAAM,OAAO,KAAK,QAAQ,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,UAAU,qBAAqB;AAAA,QAClH;AAAA,QACA,GAAI,IAAI,WAAW,WACf,CAAC;AAAA,UACD,IAAI;AAAA,UACJ,OAAO,EAAE,6CAA6C;AAAA,UACtD,UAAU,MAAM,OAAO,KAAK,QAAQ,mBAAmB,IAAI,IAAI,CAAC,IAAI,UAAU,qBAAqB;AAAA,QACrG,CAAC,IACC,CAAC;AAAA,QACL;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,yCAAyC;AAAA,UAClD,UAAU,YAAY;AACpB,kBAAM,UAAU,UAAU,UAAU,GAAG,OAAO,SAAS,MAAM,QAAQ,IAAI,IAAI,EAAE;AAAA,UACjF;AAAA,QACF;AAAA,QACA,EAAE,IAAI,gBAAgB,OAAO,EAAE,kDAAkD,GAAG,MAAM,yCAAyC,mBAAmB,IAAI,EAAE,CAAC,GAAG;AAAA,QAChK,GAAI,IAAI,WAAW,WACf,CAAC;AAAA,UACD,IAAI;AAAA,UACJ,OAAO,EAAE,yCAAyC;AAAA,UAClD,UAAU,YAAY;AACpB,kBAAM,eAAe;AAAA,cACnB;AAAA,cACA,gBAAgB,EAAE,yCAAyC;AAAA,cAC3D,sBAAsB,EAAE,4CAA4C;AAAA,cACpE,iBAAiB,EAAE,QAAQ,SAAS;AAAA,cACpC,WAAW,YAAY;AACrB,sBAAM,eAAe,uBAAuB,mBAAmB,IAAI,EAAE,CAAC,IAAI;AAAA,kBACxE,QAAQ;AAAA,kBACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,kBAC9C,MAAM,KAAK,UAAU,EAAE,QAAQ,SAAS,CAAC;AAAA,gBAC3C,CAAC;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,CAAC,IACC,CAAC;AAAA,UACD,IAAI;AAAA,UACJ,OAAO,EAAE,4CAA4C;AAAA,UACrD,UAAU,YAAY;AACpB,kBAAM,eAAe;AAAA,cACnB;AAAA,cACA,gBAAgB,EAAE,2CAA2C;AAAA,cAC7D,sBAAsB,EAAE,+CAA+C;AAAA,cACvE,iBAAiB,EAAE,QAAQ,WAAW;AAAA,cACtC,WAAW,YAAY;AACrB,sBAAM,eAAe,uBAAuB,mBAAmB,IAAI,EAAE,CAAC,IAAI;AAAA,kBACxE,QAAQ;AAAA,kBACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,kBAC9C,MAAM,KAAK,UAAU,EAAE,QAAQ,WAAW,CAAC;AAAA,gBAC7C,CAAC;AAAA,cACH;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,CAAC;AAAA,QACH;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,gCAAgC;AAAA,UACzC,UAAU,YAAY;AACpB,kBAAM,eAAe;AAAA,cACnB;AAAA,cACA,gBAAgB,EAAE,uCAAuC;AAAA,cACzD,sBAAsB,EAAE,2CAA2C;AAAA,cACnE,WAAW,YAAY;AACrB,sBAAM,eAAe,uBAAuB,mBAAmB,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,SAAS,CAAC;AAAA,cAChG;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,GAAG;AAAA;AAAA,EAEP,GACF,GACF;AAEJ;",
   "names": []
 }

package/dist/modules/checkout/backend/checkout/templates/page.js

@@ -1,7 +1,6 @@
 "use client";
 import { jsx, jsxs } from "react/jsx-runtime";
 import * as React from "react";
-import { extensionPoints } from "@open-mercato/checkout/modules/checkout/extension-points";
 import Link from "next/link";
 import { Plus } from "lucide-react";
 import { useT } from "@open-mercato/shared/lib/i18n/context";
@@ -107,7 +106,7 @@ function CheckoutTemplatesPage() {
         setPage(1);
       },
       pagination: { page, pageSize: 25, total, totalPages, onPageChange: setPage },
-      perspective: { tableId: extensionPoints.hosts.templatesTable.tableId },
+      perspective: { tableId: "checkout-templates" },
       actions: /* @__PURE__ */ jsx(Button, { asChild: true, children: /* @__PURE__ */ jsxs(Link, { href: "/backend/checkout/templates/create", children: [
         /* @__PURE__ */ jsx(Plus, { className: "mr-2 h-4 w-4" }),
         t("checkout.admin.templates.actions.create")

package/dist/modules/checkout/backend/checkout/templates/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/checkout/backend/checkout/templates/page.tsx"],
-  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport { extensionPoints } from '@open-mercato/checkout/modules/checkout/extension-points'\nimport Link from 'next/link'\nimport { Plus } from 'lucide-react'\nimport type { ColumnDef } from '@tanstack/react-table'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { apiCallOrThrow, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { ListEmptyState } from '@open-mercato/ui/backend/filters/ListEmptyState'\n\ntype TemplateRow = {\n  id: string\n  name: string\n  pricingMode: string\n  gatewayProviderKey?: string | null\n  maxCompletions?: number | null\n  createdAt?: string | null\n}\n\ntype ListResponse = {\n  items: TemplateRow[]\n  total: number\n  totalPages: number\n}\n\nfunction formatDate(value: string | null | undefined): string {\n  if (!value) return '\u2014'\n  const parsed = new Date(value)\n  return Number.isNaN(parsed.getTime()) ? value : parsed.toLocaleDateString()\n}\n\nexport default function CheckoutTemplatesPage() {\n  const t = useT()\n  const [rows, setRows] = React.useState<TemplateRow[]>([])\n  const [loading, setLoading] = React.useState(true)\n  const [page, setPage] = React.useState(1)\n  const [search, setSearch] = React.useState('')\n  const [filters, setFilters] = React.useState<FilterValues>({})\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n\n  const filterDefs = React.useMemo<FilterDef[]>(() => [\n    {\n      id: 'pricingMode',\n      label: t('checkout.admin.templates.filters.pricingMode'),\n      type: 'select',\n      options: [\n        { value: 'fixed', label: t('checkout.linkTemplateForm.pricing.modes.fixed') },\n        { value: 'custom_amount', label: t('checkout.linkTemplateForm.pricing.modes.customAmount') },\n        { value: 'price_list', label: t('checkout.linkTemplateForm.pricing.modes.priceList') },\n      ],\n    },\n  ], [t])\n\n  const loadRows = React.useCallback(async () => {\n    setLoading(true)\n    const params = new URLSearchParams({\n      page: String(page),\n      pageSize: '25',\n      search,\n    })\n    if (typeof filters.pricingMode === 'string' && filters.pricingMode) params.set('pricingMode', filters.pricingMode)\n    const result = await readApiResultOrThrow<ListResponse>(`/api/checkout/templates?${params.toString()}`)\n    setRows(result.items ?? [])\n    setTotal(result.total ?? 0)\n    setTotalPages(result.totalPages ?? 1)\n    setLoading(false)\n  }, [filters.pricingMode, page, search])\n\n  React.useEffect(() => {\n    void loadRows()\n  }, [loadRows])\n\n  const columns = React.useMemo<ColumnDef<TemplateRow>[]>(() => [\n    { accessorKey: 'name', header: t('checkout.admin.templates.columns.name') },\n    {\n      accessorKey: 'pricingMode',\n      header: t('checkout.admin.templates.columns.pricingMode'),\n      cell: ({ row }) => {\n        const mode = row.original.pricingMode\n        if (mode === 'fixed') return t('checkout.linkTemplateForm.pricing.modes.fixed')\n        if (mode === 'custom_amount') return t('checkout.linkTemplateForm.pricing.modes.customAmount')\n        if (mode === 'price_list') return t('checkout.linkTemplateForm.pricing.modes.priceList')\n        return mode\n      },\n    },\n    {\n      accessorKey: 'gatewayProviderKey',\n      header: t('checkout.admin.templates.columns.gateway'),\n      cell: ({ row }) => row.original.gatewayProviderKey ?? t('checkout.common.emptyValue'),\n    },\n    {\n      accessorKey: 'maxCompletions',\n      header: t('checkout.admin.templates.columns.maxUses'),\n      cell: ({ row }) => row.original.maxCompletions ?? t('checkout.admin.templates.unlimited'),\n    },\n    {\n      accessorKey: 'createdAt',\n      header: t('checkout.admin.templates.columns.created'),\n      cell: ({ row }) => formatDate(row.original.createdAt),\n    },\n  ], [t])\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('checkout.admin.templates.title')}\n          columns={columns}\n          data={rows}\n          isLoading={loading}\n          searchValue={search}\n          onSearchChange={(value) => { setSearch(value); setPage(1) }}\n          searchPlaceholder={t('checkout.admin.templates.searchPlaceholder')}\n          filters={filterDefs}\n          filterValues={filters}\n          onFiltersApply={(next) => { setFilters(next); setPage(1) }}\n          onFiltersClear={() => { setFilters({}); setPage(1) }}\n          pagination={{ page, pageSize: 25, total, totalPages, onPageChange: setPage }}\n          perspective={{ tableId: extensionPoints.hosts.templatesTable.tableId }}\n          actions={(\n            <Button asChild>\n              <Link href=\"/backend/checkout/templates/create\">\n                <Plus className=\"mr-2 h-4 w-4\" />\n                {t('checkout.admin.templates.actions.create')}\n              </Link>\n            </Button>\n          )}\n          emptyState={(\n            <ListEmptyState\n              entityName={t('checkout.admin.templates.title')}\n              createHref=\"/backend/checkout/templates/create\"\n              createLabel={t('checkout.admin.templates.actions.create')}\n            />\n          )}\n          rowActions={(row) => (\n            <RowActions items={[\n              { id: 'edit', label: t('checkout.common.actions.edit'), href: `/backend/checkout/templates/${encodeURIComponent(row.id)}` },\n              {\n                id: 'preview',\n                label: t('checkout.common.actions.preview'),\n                onSelect: () => window.open(`/backend/checkout/templates/${encodeURIComponent(row.id)}/preview`, '_blank', 'noopener,noreferrer'),\n              },\n              { id: 'create-link', label: t('checkout.admin.templates.actions.createLinkFromTemplate'), href: `/backend/checkout/pay-links/create?templateId=${encodeURIComponent(row.id)}` },\n              {\n                id: 'delete',\n                label: t('checkout.common.actions.delete'),\n                onSelect: async () => {\n                  await apiCallOrThrow(`/api/checkout/templates/${encodeURIComponent(row.id)}`, { method: 'DELETE' })\n                  void loadRows()\n                },\n              },\n            ]} />\n          )}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AA+Hc,SACE,KADF;AA9Hd,YAAY,WAAW;AACvB,SAAS,uBAAuB;AAChC,OAAO,UAAU;AACjB,SAAS,YAAY;AAErB,SAAS,YAAY;AAErB,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,cAAc;AACvB,SAAS,gBAAgB,4BAA4B;AACrD,SAAS,sBAAsB;AAiB/B,SAAS,WAAW,OAA0C;AAC5D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,SAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,QAAQ,OAAO,mBAAmB;AAC5E;AAEe,SAAR,wBAAyC;AAC9C,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAwB,CAAC,CAAC;AACxD,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAS,EAAE;AAC7C,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAuB,CAAC,CAAC;AAC7D,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AAEpD,QAAM,aAAa,MAAM,QAAqB,MAAM;AAAA,IAClD;AAAA,MACE,IAAI;AAAA,MACJ,OAAO,EAAE,8CAA8C;AAAA,MACvD,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,OAAO,SAAS,OAAO,EAAE,+CAA+C,EAAE;AAAA,QAC5E,EAAE,OAAO,iBAAiB,OAAO,EAAE,sDAAsD,EAAE;AAAA,QAC3F,EAAE,OAAO,cAAc,OAAO,EAAE,mDAAmD,EAAE;AAAA,MACvF;AAAA,IACF;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,WAAW,MAAM,YAAY,YAAY;AAC7C,eAAW,IAAI;AACf,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,MAAM,OAAO,IAAI;AAAA,MACjB,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AACD,QAAI,OAAO,QAAQ,gBAAgB,YAAY,QAAQ,YAAa,QAAO,IAAI,eAAe,QAAQ,WAAW;AACjH,UAAM,SAAS,MAAM,qBAAmC,2BAA2B,OAAO,SAAS,CAAC,EAAE;AACtG,YAAQ,OAAO,SAAS,CAAC,CAAC;AAC1B,aAAS,OAAO,SAAS,CAAC;AAC1B,kBAAc,OAAO,cAAc,CAAC;AACpC,eAAW,KAAK;AAAA,EAClB,GAAG,CAAC,QAAQ,aAAa,MAAM,MAAM,CAAC;AAEtC,QAAM,UAAU,MAAM;AACpB,SAAK,SAAS;AAAA,EAChB,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,UAAU,MAAM,QAAkC,MAAM;AAAA,IAC5D,EAAE,aAAa,QAAQ,QAAQ,EAAE,uCAAuC,EAAE;AAAA,IAC1E;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,8CAA8C;AAAA,MACxD,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,OAAO,IAAI,SAAS;AAC1B,YAAI,SAAS,QAAS,QAAO,EAAE,+CAA+C;AAC9E,YAAI,SAAS,gBAAiB,QAAO,EAAE,sDAAsD;AAC7F,YAAI,SAAS,aAAc,QAAO,EAAE,mDAAmD;AACvF,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,0CAA0C;AAAA,MACpD,MAAM,CAAC,EAAE,IAAI,MAAM,IAAI,SAAS,sBAAsB,EAAE,4BAA4B;AAAA,IACtF;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,0CAA0C;AAAA,MACpD,MAAM,CAAC,EAAE,IAAI,MAAM,IAAI,SAAS,kBAAkB,EAAE,oCAAoC;AAAA,IAC1F;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,0CAA0C;AAAA,MACpD,MAAM,CAAC,EAAE,IAAI,MAAM,WAAW,IAAI,SAAS,SAAS;AAAA,IACtD;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,gCAAgC;AAAA,MACzC;AAAA,MACA,MAAM;AAAA,MACN,WAAW;AAAA,MACX,aAAa;AAAA,MACb,gBAAgB,CAAC,UAAU;AAAE,kBAAU,KAAK;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MAC1D,mBAAmB,EAAE,4CAA4C;AAAA,MACjE,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB,CAAC,SAAS;AAAE,mBAAW,IAAI;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MACzD,gBAAgB,MAAM;AAAE,mBAAW,CAAC,CAAC;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MACnD,YAAY,EAAE,MAAM,UAAU,IAAI,OAAO,YAAY,cAAc,QAAQ;AAAA,MAC3E,aAAa,EAAE,SAAS,gBAAgB,MAAM,eAAe,QAAQ;AAAA,MACrE,SACE,oBAAC,UAAO,SAAO,MACb,+BAAC,QAAK,MAAK,sCACT;AAAA,4BAAC,QAAK,WAAU,gBAAe;AAAA,QAC9B,EAAE,yCAAyC;AAAA,SAC9C,GACF;AAAA,MAEF,YACE;AAAA,QAAC;AAAA;AAAA,UACC,YAAY,EAAE,gCAAgC;AAAA,UAC9C,YAAW;AAAA,UACX,aAAa,EAAE,yCAAyC;AAAA;AAAA,MAC1D;AAAA,MAEF,YAAY,CAAC,QACX,oBAAC,cAAW,OAAO;AAAA,QACjB,EAAE,IAAI,QAAQ,OAAO,EAAE,8BAA8B,GAAG,MAAM,+BAA+B,mBAAmB,IAAI,EAAE,CAAC,GAAG;AAAA,QAC1H;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,iCAAiC;AAAA,UAC1C,UAAU,MAAM,OAAO,KAAK,+BAA+B,mBAAmB,IAAI,EAAE,CAAC,YAAY,UAAU,qBAAqB;AAAA,QAClI;AAAA,QACA,EAAE,IAAI,eAAe,OAAO,EAAE,yDAAyD,GAAG,MAAM,iDAAiD,mBAAmB,IAAI,EAAE,CAAC,GAAG;AAAA,QAC9K;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,gCAAgC;AAAA,UACzC,UAAU,YAAY;AACpB,kBAAM,eAAe,2BAA2B,mBAAmB,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,SAAS,CAAC;AAClG,iBAAK,SAAS;AAAA,UAChB;AAAA,QACF;AAAA,MACF,GAAG;AAAA;AAAA,EAEP,GACF,GACF;AAEJ;",
+  "sourcesContent": ["\"use client\"\nimport * as React from 'react'\nimport Link from 'next/link'\nimport { Plus } from 'lucide-react'\nimport type { ColumnDef } from '@tanstack/react-table'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { FilterDef, FilterValues } from '@open-mercato/ui/backend/FilterBar'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { DataTable } from '@open-mercato/ui/backend/DataTable'\nimport { RowActions } from '@open-mercato/ui/backend/RowActions'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { apiCallOrThrow, readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { ListEmptyState } from '@open-mercato/ui/backend/filters/ListEmptyState'\n\ntype TemplateRow = {\n  id: string\n  name: string\n  pricingMode: string\n  gatewayProviderKey?: string | null\n  maxCompletions?: number | null\n  createdAt?: string | null\n}\n\ntype ListResponse = {\n  items: TemplateRow[]\n  total: number\n  totalPages: number\n}\n\nfunction formatDate(value: string | null | undefined): string {\n  if (!value) return '\u2014'\n  const parsed = new Date(value)\n  return Number.isNaN(parsed.getTime()) ? value : parsed.toLocaleDateString()\n}\n\nexport default function CheckoutTemplatesPage() {\n  const t = useT()\n  const [rows, setRows] = React.useState<TemplateRow[]>([])\n  const [loading, setLoading] = React.useState(true)\n  const [page, setPage] = React.useState(1)\n  const [search, setSearch] = React.useState('')\n  const [filters, setFilters] = React.useState<FilterValues>({})\n  const [total, setTotal] = React.useState(0)\n  const [totalPages, setTotalPages] = React.useState(1)\n\n  const filterDefs = React.useMemo<FilterDef[]>(() => [\n    {\n      id: 'pricingMode',\n      label: t('checkout.admin.templates.filters.pricingMode'),\n      type: 'select',\n      options: [\n        { value: 'fixed', label: t('checkout.linkTemplateForm.pricing.modes.fixed') },\n        { value: 'custom_amount', label: t('checkout.linkTemplateForm.pricing.modes.customAmount') },\n        { value: 'price_list', label: t('checkout.linkTemplateForm.pricing.modes.priceList') },\n      ],\n    },\n  ], [t])\n\n  const loadRows = React.useCallback(async () => {\n    setLoading(true)\n    const params = new URLSearchParams({\n      page: String(page),\n      pageSize: '25',\n      search,\n    })\n    if (typeof filters.pricingMode === 'string' && filters.pricingMode) params.set('pricingMode', filters.pricingMode)\n    const result = await readApiResultOrThrow<ListResponse>(`/api/checkout/templates?${params.toString()}`)\n    setRows(result.items ?? [])\n    setTotal(result.total ?? 0)\n    setTotalPages(result.totalPages ?? 1)\n    setLoading(false)\n  }, [filters.pricingMode, page, search])\n\n  React.useEffect(() => {\n    void loadRows()\n  }, [loadRows])\n\n  const columns = React.useMemo<ColumnDef<TemplateRow>[]>(() => [\n    { accessorKey: 'name', header: t('checkout.admin.templates.columns.name') },\n    {\n      accessorKey: 'pricingMode',\n      header: t('checkout.admin.templates.columns.pricingMode'),\n      cell: ({ row }) => {\n        const mode = row.original.pricingMode\n        if (mode === 'fixed') return t('checkout.linkTemplateForm.pricing.modes.fixed')\n        if (mode === 'custom_amount') return t('checkout.linkTemplateForm.pricing.modes.customAmount')\n        if (mode === 'price_list') return t('checkout.linkTemplateForm.pricing.modes.priceList')\n        return mode\n      },\n    },\n    {\n      accessorKey: 'gatewayProviderKey',\n      header: t('checkout.admin.templates.columns.gateway'),\n      cell: ({ row }) => row.original.gatewayProviderKey ?? t('checkout.common.emptyValue'),\n    },\n    {\n      accessorKey: 'maxCompletions',\n      header: t('checkout.admin.templates.columns.maxUses'),\n      cell: ({ row }) => row.original.maxCompletions ?? t('checkout.admin.templates.unlimited'),\n    },\n    {\n      accessorKey: 'createdAt',\n      header: t('checkout.admin.templates.columns.created'),\n      cell: ({ row }) => formatDate(row.original.createdAt),\n    },\n  ], [t])\n\n  return (\n    <Page>\n      <PageBody>\n        <DataTable\n          title={t('checkout.admin.templates.title')}\n          columns={columns}\n          data={rows}\n          isLoading={loading}\n          searchValue={search}\n          onSearchChange={(value) => { setSearch(value); setPage(1) }}\n          searchPlaceholder={t('checkout.admin.templates.searchPlaceholder')}\n          filters={filterDefs}\n          filterValues={filters}\n          onFiltersApply={(next) => { setFilters(next); setPage(1) }}\n          onFiltersClear={() => { setFilters({}); setPage(1) }}\n          pagination={{ page, pageSize: 25, total, totalPages, onPageChange: setPage }}\n          perspective={{ tableId: 'checkout-templates' }}\n          actions={(\n            <Button asChild>\n              <Link href=\"/backend/checkout/templates/create\">\n                <Plus className=\"mr-2 h-4 w-4\" />\n                {t('checkout.admin.templates.actions.create')}\n              </Link>\n            </Button>\n          )}\n          emptyState={(\n            <ListEmptyState\n              entityName={t('checkout.admin.templates.title')}\n              createHref=\"/backend/checkout/templates/create\"\n              createLabel={t('checkout.admin.templates.actions.create')}\n            />\n          )}\n          rowActions={(row) => (\n            <RowActions items={[\n              { id: 'edit', label: t('checkout.common.actions.edit'), href: `/backend/checkout/templates/${encodeURIComponent(row.id)}` },\n              {\n                id: 'preview',\n                label: t('checkout.common.actions.preview'),\n                onSelect: () => window.open(`/backend/checkout/templates/${encodeURIComponent(row.id)}/preview`, '_blank', 'noopener,noreferrer'),\n              },\n              { id: 'create-link', label: t('checkout.admin.templates.actions.createLinkFromTemplate'), href: `/backend/checkout/pay-links/create?templateId=${encodeURIComponent(row.id)}` },\n              {\n                id: 'delete',\n                label: t('checkout.common.actions.delete'),\n                onSelect: async () => {\n                  await apiCallOrThrow(`/api/checkout/templates/${encodeURIComponent(row.id)}`, { method: 'DELETE' })\n                  void loadRows()\n                },\n              },\n            ]} />\n          )}\n        />\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AA8Hc,SACE,KADF;AA7Hd,YAAY,WAAW;AACvB,OAAO,UAAU;AACjB,SAAS,YAAY;AAErB,SAAS,YAAY;AAErB,SAAS,MAAM,gBAAgB;AAC/B,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAC3B,SAAS,cAAc;AACvB,SAAS,gBAAgB,4BAA4B;AACrD,SAAS,sBAAsB;AAiB/B,SAAS,WAAW,OAA0C;AAC5D,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,IAAI,KAAK,KAAK;AAC7B,SAAO,OAAO,MAAM,OAAO,QAAQ,CAAC,IAAI,QAAQ,OAAO,mBAAmB;AAC5E;AAEe,SAAR,wBAAyC;AAC9C,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAwB,CAAC,CAAC;AACxD,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,IAAI;AACjD,QAAM,CAAC,MAAM,OAAO,IAAI,MAAM,SAAS,CAAC;AACxC,QAAM,CAAC,QAAQ,SAAS,IAAI,MAAM,SAAS,EAAE;AAC7C,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAuB,CAAC,CAAC;AAC7D,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAS,CAAC;AAC1C,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AAEpD,QAAM,aAAa,MAAM,QAAqB,MAAM;AAAA,IAClD;AAAA,MACE,IAAI;AAAA,MACJ,OAAO,EAAE,8CAA8C;AAAA,MACvD,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,OAAO,SAAS,OAAO,EAAE,+CAA+C,EAAE;AAAA,QAC5E,EAAE,OAAO,iBAAiB,OAAO,EAAE,sDAAsD,EAAE;AAAA,QAC3F,EAAE,OAAO,cAAc,OAAO,EAAE,mDAAmD,EAAE;AAAA,MACvF;AAAA,IACF;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,WAAW,MAAM,YAAY,YAAY;AAC7C,eAAW,IAAI;AACf,UAAM,SAAS,IAAI,gBAAgB;AAAA,MACjC,MAAM,OAAO,IAAI;AAAA,MACjB,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AACD,QAAI,OAAO,QAAQ,gBAAgB,YAAY,QAAQ,YAAa,QAAO,IAAI,eAAe,QAAQ,WAAW;AACjH,UAAM,SAAS,MAAM,qBAAmC,2BAA2B,OAAO,SAAS,CAAC,EAAE;AACtG,YAAQ,OAAO,SAAS,CAAC,CAAC;AAC1B,aAAS,OAAO,SAAS,CAAC;AAC1B,kBAAc,OAAO,cAAc,CAAC;AACpC,eAAW,KAAK;AAAA,EAClB,GAAG,CAAC,QAAQ,aAAa,MAAM,MAAM,CAAC;AAEtC,QAAM,UAAU,MAAM;AACpB,SAAK,SAAS;AAAA,EAChB,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,UAAU,MAAM,QAAkC,MAAM;AAAA,IAC5D,EAAE,aAAa,QAAQ,QAAQ,EAAE,uCAAuC,EAAE;AAAA,IAC1E;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,8CAA8C;AAAA,MACxD,MAAM,CAAC,EAAE,IAAI,MAAM;AACjB,cAAM,OAAO,IAAI,SAAS;AAC1B,YAAI,SAAS,QAAS,QAAO,EAAE,+CAA+C;AAC9E,YAAI,SAAS,gBAAiB,QAAO,EAAE,sDAAsD;AAC7F,YAAI,SAAS,aAAc,QAAO,EAAE,mDAAmD;AACvF,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,0CAA0C;AAAA,MACpD,MAAM,CAAC,EAAE,IAAI,MAAM,IAAI,SAAS,sBAAsB,EAAE,4BAA4B;AAAA,IACtF;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,0CAA0C;AAAA,MACpD,MAAM,CAAC,EAAE,IAAI,MAAM,IAAI,SAAS,kBAAkB,EAAE,oCAAoC;AAAA,IAC1F;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,0CAA0C;AAAA,MACpD,MAAM,CAAC,EAAE,IAAI,MAAM,WAAW,IAAI,SAAS,SAAS;AAAA,IACtD;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,SACE,oBAAC,QACC,8BAAC,YACC;AAAA,IAAC;AAAA;AAAA,MACC,OAAO,EAAE,gCAAgC;AAAA,MACzC;AAAA,MACA,MAAM;AAAA,MACN,WAAW;AAAA,MACX,aAAa;AAAA,MACb,gBAAgB,CAAC,UAAU;AAAE,kBAAU,KAAK;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MAC1D,mBAAmB,EAAE,4CAA4C;AAAA,MACjE,SAAS;AAAA,MACT,cAAc;AAAA,MACd,gBAAgB,CAAC,SAAS;AAAE,mBAAW,IAAI;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MACzD,gBAAgB,MAAM;AAAE,mBAAW,CAAC,CAAC;AAAG,gBAAQ,CAAC;AAAA,MAAE;AAAA,MACnD,YAAY,EAAE,MAAM,UAAU,IAAI,OAAO,YAAY,cAAc,QAAQ;AAAA,MAC3E,aAAa,EAAE,SAAS,qBAAqB;AAAA,MAC7C,SACE,oBAAC,UAAO,SAAO,MACb,+BAAC,QAAK,MAAK,sCACT;AAAA,4BAAC,QAAK,WAAU,gBAAe;AAAA,QAC9B,EAAE,yCAAyC;AAAA,SAC9C,GACF;AAAA,MAEF,YACE;AAAA,QAAC;AAAA;AAAA,UACC,YAAY,EAAE,gCAAgC;AAAA,UAC9C,YAAW;AAAA,UACX,aAAa,EAAE,yCAAyC;AAAA;AAAA,MAC1D;AAAA,MAEF,YAAY,CAAC,QACX,oBAAC,cAAW,OAAO;AAAA,QACjB,EAAE,IAAI,QAAQ,OAAO,EAAE,8BAA8B,GAAG,MAAM,+BAA+B,mBAAmB,IAAI,EAAE,CAAC,GAAG;AAAA,QAC1H;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,iCAAiC;AAAA,UAC1C,UAAU,MAAM,OAAO,KAAK,+BAA+B,mBAAmB,IAAI,EAAE,CAAC,YAAY,UAAU,qBAAqB;AAAA,QAClI;AAAA,QACA,EAAE,IAAI,eAAe,OAAO,EAAE,yDAAyD,GAAG,MAAM,iDAAiD,mBAAmB,IAAI,EAAE,CAAC,GAAG;AAAA,QAC9K;AAAA,UACE,IAAI;AAAA,UACJ,OAAO,EAAE,gCAAgC;AAAA,UACzC,UAAU,YAAY;AACpB,kBAAM,eAAe,2BAA2B,mBAAmB,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,SAAS,CAAC;AAClG,iBAAK,SAAS;AAAA,UAChB;AAAA,QACF;AAAA,MACF,GAAG;AAAA;AAAA,EAEP,GACF,GACF;AAEJ;",
   "names": []
 }