@open-mercato/checkout 0.6.7-develop.6862.1.c11a64ce0a → 0.6.7

package/dist/modules/checkout/__integration__/TC-CHKT-043-concurrent-status-update.spec.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/checkout/__integration__/TC-CHKT-043-concurrent-status-update.spec.ts"],
-  "sourcesContent": ["import { expect, test } from '@playwright/test'\nimport { getAuthToken, apiRequest } from '@open-mercato/core/modules/core/__integration__/helpers/api'\nimport { readJsonSafe } from '@open-mercato/core/modules/core/__integration__/helpers/generalFixtures'\nimport {\n  createFixedTemplateInput,\n  createLinkFixture,\n  deleteCheckoutEntityIfExists,\n  findGatewayTransactionIdForCheckout,\n  readCheckoutTransaction,\n  sendMockGatewayWebhook,\n  submitPayLink,\n  waitForCheckoutStatus,\n} from './helpers/fixtures'\n\n/**\n * TC-CHKT-043: Two-contender concurrency test for updateTransactionStatus.\n *\n * Verifies that the compare-and-swap (CAS) in updateTransactionStatusCommand\n * serializes two concurrent writers correctly:\n *\n *  - Exactly one of two concurrent updateStatus calls wins.\n *  - The loser receives a 409 (concurrent_status_update).\n *  - The persisted terminal status stays 'completed'.\n *  - CheckoutLink.completionCount is incremented exactly once.\n *\n * This test exercises the race described in #4700 using a real database,\n * satisfying .ai/review-checklist.md \u00A720 (concurrency-sensitive commands\n * require an executable two-contender test).\n */\ntest.describe('TC-CHKT-043 (concurrency): Two-contender race \u2014 only one updateStatus call wins', () => {\n  test('concurrent completed + processing status updates: one wins, one gets 409, completionCount incremented once', async ({ request }) => {\n    let token: string | null = null\n    let linkId: string | null = null\n\n    try {\n      token = await getAuthToken(request)\n\n      // Create an active link that accepts a single payment.\n      const link = await createLinkFixture(request, token, {\n        ...createFixedTemplateInput({ status: 'active', collectCustomerDetails: false }),\n      })\n      linkId = link.id\n\n      // Submit a checkout to create a transaction and a gateway session.\n      const submitResponse = await submitPayLink(request, link.slug, {\n        customerData: {},\n        acceptedLegalConsents: {},\n        amount: 49.99,\n      })\n      expect(submitResponse.status(), `Submit failed: ${submitResponse.status()}`).toBe(201)\n      const submitBody = await submitResponse.json() as { transactionId: string }\n      const transactionId = submitBody.transactionId\n      expect(transactionId).toBeTruthy()\n\n      // Find the mock-gateway session ID so we can fire the captured webhook.\n      const gatewayTransactionId = await findGatewayTransactionIdForCheckout(request, token, transactionId)\n      const gatewayTransaction = await apiRequest(request, 'GET', `/api/payment_gateways/transactions/${encodeURIComponent(gatewayTransactionId)}`, { token })\n      const gtBody = await readJsonSafe<{ transaction?: { providerSessionId?: string | null } }>(gatewayTransaction)\n      const providerSessionId = gtBody?.transaction?.providerSessionId\n      expect(providerSessionId, 'providerSessionId is required for webhook simulation').toBeTruthy()\n\n      // --- Two-contender race ---\n      // Simultaneously fire:\n      //   (A) The gateway \"captured\" webhook ? tries to set status = 'completed'.\n      //   (B) A direct updateStatus API call ? tries to set status = 'processing'\n      //       (simulates the submit route's late write losing the race).\n      //\n      // Both target the same transaction. Exactly one must succeed; the other\n      // must receive a 409 so no lost-update occurs.\n      const [webhookResult, directResult] = await Promise.allSettled([\n        sendMockGatewayWebhook(request, token!, providerSessionId!, 'captured', 49.99),\n        apiRequest(request, 'POST', `/api/checkout/transactions/${encodeURIComponent(transactionId)}/status`, {\n          token,\n          data: { status: 'processing', paymentStatus: 'processing' },\n        }),\n      ])\n\n      // At least the webhook path should have been attempted. The direct call\n      // may receive 409 (CAS missed) or 422 (invalid transition) depending on\n      // which writer committed first \u2014 both are acceptable losing outcomes.\n      // The important invariant is the final persisted state.\n      expect(webhookResult.status === 'fulfilled' || directResult.status === 'fulfilled').toBe(true)\n\n      // Wait for the transaction to reach a terminal state (the webhook sets it\n      // to 'completed'; the submit route's 'processing' write must not win).\n      const finalTransaction = await waitForCheckoutStatus(request, token!, transactionId, 'completed', {\n        attempts: 30,\n        intervalMs: 200,\n      })\n\n      // --- Core assertions ---\n\n      // 1. The persisted status must be 'completed' \u2014 not 'processing'.\n      expect(finalTransaction.status).toBe('completed')\n\n      // 2. completionCount must be exactly 1 \u2014 the terminal state must have\n      //    been applied exactly once, not zero or twice.\n      const updatedLinkResponse = await apiRequest(request, 'GET', `/api/checkout/links/${encodeURIComponent(link.id)}`, { token })\n      // The detail route spreads the serialized link at the top level; there is\n      // no `link` wrapper. Reading one made this assertion compare undefined to 1.\n      const updatedLinkBody = await readJsonSafe<{ completionCount?: number }>(updatedLinkResponse)\n      expect(updatedLinkBody?.completionCount).toBe(1)\n\n      // 3. The stored transaction must have a gatewayTransactionId from the webhook.\n      const storedTransaction = await readCheckoutTransaction(request, token!, transactionId)\n      expect(storedTransaction.status).toBe('completed')\n      expect(storedTransaction.gatewayTransactionId).toBeTruthy()\n    } finally {\n      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)\n    }\n  })\n})\n"],
-  "mappings": "AAAA,SAAS,QAAQ,YAAY;AAC7B,SAAS,cAAc,kBAAkB;AACzC,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAiBP,KAAK,SAAS,wFAAmF,MAAM;AACrG,OAAK,8GAA8G,OAAO,EAAE,QAAQ,MAAM;AACxI,QAAI,QAAuB;AAC3B,QAAI,SAAwB;AAE5B,QAAI;AACF,cAAQ,MAAM,aAAa,OAAO;AAGlC,YAAM,OAAO,MAAM,kBAAkB,SAAS,OAAO;AAAA,QACnD,GAAG,yBAAyB,EAAE,QAAQ,UAAU,wBAAwB,MAAM,CAAC;AAAA,MACjF,CAAC;AACD,eAAS,KAAK;AAGd,YAAM,iBAAiB,MAAM,cAAc,SAAS,KAAK,MAAM;AAAA,QAC7D,cAAc,CAAC;AAAA,QACf,uBAAuB,CAAC;AAAA,QACxB,QAAQ;AAAA,MACV,CAAC;AACD,aAAO,eAAe,OAAO,GAAG,kBAAkB,eAAe,OAAO,CAAC,EAAE,EAAE,KAAK,GAAG;AACrF,YAAM,aAAa,MAAM,eAAe,KAAK;AAC7C,YAAM,gBAAgB,WAAW;AACjC,aAAO,aAAa,EAAE,WAAW;AAGjC,YAAM,uBAAuB,MAAM,oCAAoC,SAAS,OAAO,aAAa;AACpG,YAAM,qBAAqB,MAAM,WAAW,SAAS,OAAO,sCAAsC,mBAAmB,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC;AACvJ,YAAM,SAAS,MAAM,aAAsE,kBAAkB;AAC7G,YAAM,oBAAoB,QAAQ,aAAa;AAC/C,aAAO,mBAAmB,sDAAsD,EAAE,WAAW;AAU7F,YAAM,CAAC,eAAe,YAAY,IAAI,MAAM,QAAQ,WAAW;AAAA,QAC7D,uBAAuB,SAAS,OAAQ,mBAAoB,YAAY,KAAK;AAAA,QAC7E,WAAW,SAAS,QAAQ,8BAA8B,mBAAmB,aAAa,CAAC,WAAW;AAAA,UACpG;AAAA,UACA,MAAM,EAAE,QAAQ,cAAc,eAAe,aAAa;AAAA,QAC5D,CAAC;AAAA,MACH,CAAC;AAMD,aAAO,cAAc,WAAW,eAAe,aAAa,WAAW,WAAW,EAAE,KAAK,IAAI;AAI7F,YAAM,mBAAmB,MAAM,sBAAsB,SAAS,OAAQ,eAAe,aAAa;AAAA,QAChG,UAAU;AAAA,QACV,YAAY;AAAA,MACd,CAAC;AAKD,aAAO,iBAAiB,MAAM,EAAE,KAAK,WAAW;AAIhD,YAAM,sBAAsB,MAAM,WAAW,SAAS,OAAO,uBAAuB,mBAAmB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;AAG5H,YAAM,kBAAkB,MAAM,aAA2C,mBAAmB;AAC5F,aAAO,iBAAiB,eAAe,EAAE,KAAK,CAAC;AAG/C,YAAM,oBAAoB,MAAM,wBAAwB,SAAS,OAAQ,aAAa;AACtF,aAAO,kBAAkB,MAAM,EAAE,KAAK,WAAW;AACjD,aAAO,kBAAkB,oBAAoB,EAAE,WAAW;AAAA,IAC5D,UAAE;AACA,YAAM,6BAA6B,SAAS,OAAO,SAAS,MAAM;AAAA,IACpE;AAAA,EACF,CAAC;AACH,CAAC;",
-  "names": []
-}

package/dist/modules/checkout/extension-points.js

@@ -1,68 +0,0 @@
-import {
-  componentExtensionHost,
-  dataTableExtensionHost,
-  defineModuleExtensionPoints,
-  injectionExtensionHost
-} from "@open-mercato/shared/modules/widgets/extension-points";
-const payPageSpot = (spotId) => injectionExtensionHost({
-  family: "detail",
-  spotId,
-  supported: ["render-widget"],
-  contextContract: "checkout.pay-page.v1",
-  source: "components/PayPage.tsx"
-});
-const payPageComponent = (componentId) => componentExtensionHost({
-  componentId,
-  propsContract: "checkout.pay-page.v1",
-  source: "components/PayPage.tsx"
-});
-const extensionPoints = defineModuleExtensionPoints({
-  moduleId: "checkout",
-  hosts: {
-    linksTable: dataTableExtensionHost({ tableId: "checkout-links", source: "backend/checkout/pay-links/page.tsx" }),
-    templatesTable: dataTableExtensionHost({ tableId: "checkout-templates", source: "backend/checkout/templates/page.tsx" }),
-    transactionsTable: dataTableExtensionHost({ tableId: "checkout-transactions", source: "backend/checkout/transactions/page.tsx" }),
-    gatewayWidgetBefore: payPageSpot("checkout.pay-page:gateway-widget:before"),
-    gatewayRendererBefore: payPageSpot("checkout.pay-page:gateway-widget:renderer:before"),
-    gatewayRendererAfter: payPageSpot("checkout.pay-page:gateway-widget:renderer:after"),
-    gatewayActionsBefore: payPageSpot("checkout.pay-page:gateway-widget:actions:before"),
-    gatewayActionsAfter: payPageSpot("checkout.pay-page:gateway-widget:actions:after"),
-    gatewayWidgetAfter: payPageSpot("checkout.pay-page:gateway-widget:after"),
-    headerBefore: payPageSpot("checkout.pay-page:header:before"),
-    headerAfter: payPageSpot("checkout.pay-page:header:after"),
-    descriptionAfter: payPageSpot("checkout.pay-page:description:after"),
-    customerFieldsBefore: payPageSpot("checkout.pay-page:customer-fields:before"),
-    customerFieldsAfter: payPageSpot("checkout.pay-page:customer-fields:after"),
-    pricingBefore: payPageSpot("checkout.pay-page:pricing:before"),
-    pricingAfter: payPageSpot("checkout.pay-page:pricing:after"),
-    summaryBefore: payPageSpot("checkout.pay-page:summary:before"),
-    summaryAfter: payPageSpot("checkout.pay-page:summary:after"),
-    legalConsentBefore: payPageSpot("checkout.pay-page:legal-consent:before"),
-    legalConsentAfter: payPageSpot("checkout.pay-page:legal-consent:after"),
-    submitBefore: payPageSpot("checkout.pay-page:submit:before"),
-    submitAfter: payPageSpot("checkout.pay-page:submit:after"),
-    helpBefore: payPageSpot("checkout.pay-page:help:before"),
-    helpAfter: payPageSpot("checkout.pay-page:help:after"),
-    paymentBefore: payPageSpot("checkout.pay-page:payment:before"),
-    paymentAfter: payPageSpot("checkout.pay-page:payment:after"),
-    footerBefore: payPageSpot("checkout.pay-page:footer:before"),
-    footerAfter: payPageSpot("checkout.pay-page:footer:after"),
-    payPage: payPageComponent("page:checkout.pay-page"),
-    header: payPageComponent("section:checkout.pay-page.header"),
-    description: payPageComponent("section:checkout.pay-page.description"),
-    summary: payPageComponent("section:checkout.pay-page.summary"),
-    pricing: payPageComponent("section:checkout.pay-page.pricing"),
-    payment: payPageComponent("section:checkout.pay-page.payment"),
-    customerForm: payPageComponent("section:checkout.pay-page.customer-form"),
-    legalConsent: payPageComponent("section:checkout.pay-page.legal-consent"),
-    gatewayForm: payPageComponent("section:checkout.pay-page.gateway-form"),
-    help: payPageComponent("section:checkout.pay-page.help"),
-    footer: payPageComponent("section:checkout.pay-page.footer")
-  }
-});
-var extension_points_default = extensionPoints;
-export {
-  extension_points_default as default,
-  extensionPoints
-};
-//# sourceMappingURL=extension-points.js.map

package/dist/modules/checkout/extension-points.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/checkout/extension-points.ts"],
-  "sourcesContent": ["import {\n  componentExtensionHost,\n  dataTableExtensionHost,\n  defineModuleExtensionPoints,\n  injectionExtensionHost,\n} from '@open-mercato/shared/modules/widgets/extension-points'\n\nconst payPageSpot = (spotId: string) => injectionExtensionHost({\n  family: 'detail',\n  spotId,\n  supported: ['render-widget'],\n  contextContract: 'checkout.pay-page.v1',\n  source: 'components/PayPage.tsx',\n})\n\nconst payPageComponent = (componentId: string) => componentExtensionHost({\n  componentId,\n  propsContract: 'checkout.pay-page.v1',\n  source: 'components/PayPage.tsx',\n})\n\nexport const extensionPoints = defineModuleExtensionPoints({\n  moduleId: 'checkout',\n  hosts: {\n    linksTable: dataTableExtensionHost({ tableId: 'checkout-links', source: 'backend/checkout/pay-links/page.tsx' }),\n    templatesTable: dataTableExtensionHost({ tableId: 'checkout-templates', source: 'backend/checkout/templates/page.tsx' }),\n    transactionsTable: dataTableExtensionHost({ tableId: 'checkout-transactions', source: 'backend/checkout/transactions/page.tsx' }),\n    gatewayWidgetBefore: payPageSpot('checkout.pay-page:gateway-widget:before'),\n    gatewayRendererBefore: payPageSpot('checkout.pay-page:gateway-widget:renderer:before'),\n    gatewayRendererAfter: payPageSpot('checkout.pay-page:gateway-widget:renderer:after'),\n    gatewayActionsBefore: payPageSpot('checkout.pay-page:gateway-widget:actions:before'),\n    gatewayActionsAfter: payPageSpot('checkout.pay-page:gateway-widget:actions:after'),\n    gatewayWidgetAfter: payPageSpot('checkout.pay-page:gateway-widget:after'),\n    headerBefore: payPageSpot('checkout.pay-page:header:before'),\n    headerAfter: payPageSpot('checkout.pay-page:header:after'),\n    descriptionAfter: payPageSpot('checkout.pay-page:description:after'),\n    customerFieldsBefore: payPageSpot('checkout.pay-page:customer-fields:before'),\n    customerFieldsAfter: payPageSpot('checkout.pay-page:customer-fields:after'),\n    pricingBefore: payPageSpot('checkout.pay-page:pricing:before'),\n    pricingAfter: payPageSpot('checkout.pay-page:pricing:after'),\n    summaryBefore: payPageSpot('checkout.pay-page:summary:before'),\n    summaryAfter: payPageSpot('checkout.pay-page:summary:after'),\n    legalConsentBefore: payPageSpot('checkout.pay-page:legal-consent:before'),\n    legalConsentAfter: payPageSpot('checkout.pay-page:legal-consent:after'),\n    submitBefore: payPageSpot('checkout.pay-page:submit:before'),\n    submitAfter: payPageSpot('checkout.pay-page:submit:after'),\n    helpBefore: payPageSpot('checkout.pay-page:help:before'),\n    helpAfter: payPageSpot('checkout.pay-page:help:after'),\n    paymentBefore: payPageSpot('checkout.pay-page:payment:before'),\n    paymentAfter: payPageSpot('checkout.pay-page:payment:after'),\n    footerBefore: payPageSpot('checkout.pay-page:footer:before'),\n    footerAfter: payPageSpot('checkout.pay-page:footer:after'),\n    payPage: payPageComponent('page:checkout.pay-page'),\n    header: payPageComponent('section:checkout.pay-page.header'),\n    description: payPageComponent('section:checkout.pay-page.description'),\n    summary: payPageComponent('section:checkout.pay-page.summary'),\n    pricing: payPageComponent('section:checkout.pay-page.pricing'),\n    payment: payPageComponent('section:checkout.pay-page.payment'),\n    customerForm: payPageComponent('section:checkout.pay-page.customer-form'),\n    legalConsent: payPageComponent('section:checkout.pay-page.legal-consent'),\n    gatewayForm: payPageComponent('section:checkout.pay-page.gateway-form'),\n    help: payPageComponent('section:checkout.pay-page.help'),\n    footer: payPageComponent('section:checkout.pay-page.footer'),\n  },\n})\n\nexport default extensionPoints\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,cAAc,CAAC,WAAmB,uBAAuB;AAAA,EAC7D,QAAQ;AAAA,EACR;AAAA,EACA,WAAW,CAAC,eAAe;AAAA,EAC3B,iBAAiB;AAAA,EACjB,QAAQ;AACV,CAAC;AAED,MAAM,mBAAmB,CAAC,gBAAwB,uBAAuB;AAAA,EACvE;AAAA,EACA,eAAe;AAAA,EACf,QAAQ;AACV,CAAC;AAEM,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,OAAO;AAAA,IACL,YAAY,uBAAuB,EAAE,SAAS,kBAAkB,QAAQ,sCAAsC,CAAC;AAAA,IAC/G,gBAAgB,uBAAuB,EAAE,SAAS,sBAAsB,QAAQ,sCAAsC,CAAC;AAAA,IACvH,mBAAmB,uBAAuB,EAAE,SAAS,yBAAyB,QAAQ,yCAAyC,CAAC;AAAA,IAChI,qBAAqB,YAAY,yCAAyC;AAAA,IAC1E,uBAAuB,YAAY,kDAAkD;AAAA,IACrF,sBAAsB,YAAY,iDAAiD;AAAA,IACnF,sBAAsB,YAAY,iDAAiD;AAAA,IACnF,qBAAqB,YAAY,gDAAgD;AAAA,IACjF,oBAAoB,YAAY,wCAAwC;AAAA,IACxE,cAAc,YAAY,iCAAiC;AAAA,IAC3D,aAAa,YAAY,gCAAgC;AAAA,IACzD,kBAAkB,YAAY,qCAAqC;AAAA,IACnE,sBAAsB,YAAY,0CAA0C;AAAA,IAC5E,qBAAqB,YAAY,yCAAyC;AAAA,IAC1E,eAAe,YAAY,kCAAkC;AAAA,IAC7D,cAAc,YAAY,iCAAiC;AAAA,IAC3D,eAAe,YAAY,kCAAkC;AAAA,IAC7D,cAAc,YAAY,iCAAiC;AAAA,IAC3D,oBAAoB,YAAY,wCAAwC;AAAA,IACxE,mBAAmB,YAAY,uCAAuC;AAAA,IACtE,cAAc,YAAY,iCAAiC;AAAA,IAC3D,aAAa,YAAY,gCAAgC;AAAA,IACzD,YAAY,YAAY,+BAA+B;AAAA,IACvD,WAAW,YAAY,8BAA8B;AAAA,IACrD,eAAe,YAAY,kCAAkC;AAAA,IAC7D,cAAc,YAAY,iCAAiC;AAAA,IAC3D,cAAc,YAAY,iCAAiC;AAAA,IAC3D,aAAa,YAAY,gCAAgC;AAAA,IACzD,SAAS,iBAAiB,wBAAwB;AAAA,IAClD,QAAQ,iBAAiB,kCAAkC;AAAA,IAC3D,aAAa,iBAAiB,uCAAuC;AAAA,IACrE,SAAS,iBAAiB,mCAAmC;AAAA,IAC7D,SAAS,iBAAiB,mCAAmC;AAAA,IAC7D,SAAS,iBAAiB,mCAAmC;AAAA,IAC7D,cAAc,iBAAiB,yCAAyC;AAAA,IACxE,cAAc,iBAAiB,yCAAyC;AAAA,IACxE,aAAa,iBAAiB,wCAAwC;AAAA,IACtE,MAAM,iBAAiB,gCAAgC;AAAA,IACvD,QAAQ,iBAAiB,kCAAkC;AAAA,EAC7D;AACF,CAAC;AAED,IAAO,2BAAQ;",
-  "names": []
-}

package/dist/modules/checkout/lib/transaction-status-machine.js

@@ -1,31 +0,0 @@
-import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
-const VALID_CHECKOUT_TRANSITIONS = {
-  pending: ["processing", "completed", "failed", "cancelled", "expired"],
-  processing: ["completed", "failed", "cancelled", "expired"],
-  // Terminal states — no transitions out
-  completed: [],
-  failed: [],
-  cancelled: [],
-  expired: []
-};
-function isValidCheckoutStatusTransition(from, to) {
-  if (from === to) return true;
-  const allowed = VALID_CHECKOUT_TRANSITIONS[from];
-  if (!allowed) return false;
-  return allowed.includes(to);
-}
-function assertValidCheckoutStatusTransition(from, to) {
-  if (isValidCheckoutStatusTransition(from, to)) return;
-  throw new CrudHttpError(409, {
-    error: `[internal] Cannot transition payment from "${from}" to "${to}"`,
-    code: "invalid_status_transition",
-    currentStatus: from,
-    requestedStatus: to
-  });
-}
-export {
-  VALID_CHECKOUT_TRANSITIONS,
-  assertValidCheckoutStatusTransition,
-  isValidCheckoutStatusTransition
-};
-//# sourceMappingURL=transaction-status-machine.js.map

package/dist/modules/checkout/lib/transaction-status-machine.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/checkout/lib/transaction-status-machine.ts"],
-  "sourcesContent": ["import { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport type { CheckoutTransaction } from '../data/entities'\n\n/**\n * Allowed status transitions for a CheckoutTransaction.\n *\n * Terminal states (completed, failed, cancelled, expired) have an empty\n * allowed-set, meaning NO transition out of them is permitted.  This prevents\n * the race condition where the submit route's late `updateStatus('processing')`\n * call overwrites a `'completed'` status that the gateway webhook set first.\n *\n * Allowed path:\n *   pending     \u2500\u2500\u25BA processing  (transaction created, payment session initiated)\n *   pending     \u2500\u2500\u25BA completed   (captured webhook arrives before processing state)\n *   processing  \u2500\u2500\u25BA completed   (webhook: payment captured)\n *   processing  \u2500\u2500\u25BA failed      (webhook or session error)\n *   processing  \u2500\u2500\u25BA cancelled   (customer or merchant cancellation)\n *   processing  \u2500\u2500\u25BA expired     (expiry worker)\n *\n * Rejected (regression guard):\n *   completed \u2500\u2500\u25BA *   REJECTED\n *   failed    \u2500\u2500\u25BA *   REJECTED\n *   cancelled \u2500\u2500\u25BA *   REJECTED\n *   expired   \u2500\u2500\u25BA *   REJECTED\n */\nexport const VALID_CHECKOUT_TRANSITIONS: Record<CheckoutTransaction['status'], CheckoutTransaction['status'][]> = {\n  pending: ['processing', 'completed', 'failed', 'cancelled', 'expired'],\n  processing: ['completed', 'failed', 'cancelled', 'expired'],\n  // Terminal states \u2014 no transitions out\n  completed: [],\n  failed: [],\n  cancelled: [],\n  expired: [],\n}\n\n/**\n * Returns `true` when transitioning from `from` to `to` is allowed by the\n * state machine. Same-state transitions are allowed as safe no-ops to support\n * idempotency.\n */\nexport function isValidCheckoutStatusTransition(\n  from: CheckoutTransaction['status'],\n  to: CheckoutTransaction['status'],\n): boolean {\n  if (from === to) return true\n  const allowed = VALID_CHECKOUT_TRANSITIONS[from]\n  if (!allowed) return false\n  return allowed.includes(to)\n}\n\n/**\n * Throws a structured 409 Conflict when the requested status transition is\n * not allowed by the state machine.  The error body is compatible with the\n * `conflict` error shape that the frontend handles.\n *\n * This must be called **inside** a database transaction so that the check and\n * the subsequent write are atomic.  The atomic `nativeUpdate` WHERE-clause\n * provides the TOCTOU safety net; this function is the human-readable guard.\n */\nexport function assertValidCheckoutStatusTransition(\n  from: CheckoutTransaction['status'],\n  to: CheckoutTransaction['status'],\n): void {\n  if (isValidCheckoutStatusTransition(from, to)) return\n  throw new CrudHttpError(409, {\n    error: `[internal] Cannot transition payment from \"${from}\" to \"${to}\"`,\n    code: 'invalid_status_transition',\n    currentStatus: from,\n    requestedStatus: to,\n  })\n}\n"],
-  "mappings": "AAAA,SAAS,qBAAqB;AAyBvB,MAAM,6BAAqG;AAAA,EAChH,SAAS,CAAC,cAAc,aAAa,UAAU,aAAa,SAAS;AAAA,EACrE,YAAY,CAAC,aAAa,UAAU,aAAa,SAAS;AAAA;AAAA,EAE1D,WAAW,CAAC;AAAA,EACZ,QAAQ,CAAC;AAAA,EACT,WAAW,CAAC;AAAA,EACZ,SAAS,CAAC;AACZ;AAOO,SAAS,gCACd,MACA,IACS;AACT,MAAI,SAAS,GAAI,QAAO;AACxB,QAAM,UAAU,2BAA2B,IAAI;AAC/C,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,QAAQ,SAAS,EAAE;AAC5B;AAWO,SAAS,oCACd,MACA,IACM;AACN,MAAI,gCAAgC,MAAM,EAAE,EAAG;AAC/C,QAAM,IAAI,cAAc,KAAK;AAAA,IAC3B,OAAO,8CAA8C,IAAI,SAAS,EAAE;AAAA,IACpE,MAAM;AAAA,IACN,eAAe;AAAA,IACf,iBAAiB;AAAA,EACnB,CAAC;AACH;",
-  "names": []
-}

package/dist/modules/checkout/subscribers/search-reindex-transaction-created.js

@@ -1,32 +0,0 @@
-const metadata = {
-  event: "checkout.transaction.created",
-  persistent: false,
-  id: "checkout:query-index-reindex-transaction-created"
-};
-async function handle(payload, ctx) {
-  const recordId = typeof payload.transactionId === "string" ? payload.transactionId : null;
-  const tenantId = typeof payload.tenantId === "string" ? payload.tenantId : null;
-  if (!recordId || !tenantId) return;
-  let eventBus = null;
-  try {
-    eventBus = ctx.resolve("eventBus");
-  } catch {
-    return;
-  }
-  await eventBus.emitEvent("query_index.upsert_one", {
-    entityType: "checkout:checkout_transaction",
-    recordId,
-    organizationId: payload.organizationId ?? null,
-    tenantId,
-    crudAction: "created",
-    coverageBaseDelta: 1
-  }, {
-    tenantId,
-    organizationId: payload.organizationId ?? null
-  }).catch(() => void 0);
-}
-export {
-  handle as default,
-  metadata
-};
-//# sourceMappingURL=search-reindex-transaction-created.js.map

package/dist/modules/checkout/subscribers/search-reindex-transaction-created.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/checkout/subscribers/search-reindex-transaction-created.ts"],
-  "sourcesContent": ["export const metadata = {\n  event: 'checkout.transaction.created',\n  persistent: false,\n  id: 'checkout:query-index-reindex-transaction-created',\n}\n\ntype Payload = {\n  transactionId?: string\n  tenantId?: string | null\n  organizationId?: string | null\n}\n\ntype EventBus = { emitEvent: (name: string, body: unknown, options?: unknown) => Promise<void> }\ntype HandlerContext = { resolve: <T = unknown>(name: string) => T }\n\nexport default async function handle(payload: Payload, ctx: HandlerContext): Promise<void> {\n  const recordId = typeof payload.transactionId === 'string' ? payload.transactionId : null\n  const tenantId = typeof payload.tenantId === 'string' ? payload.tenantId : null\n  if (!recordId || !tenantId) return\n\n  let eventBus: EventBus | null = null\n  try {\n    eventBus = ctx.resolve<EventBus>('eventBus')\n  } catch {\n    return\n  }\n\n  await eventBus.emitEvent('query_index.upsert_one', {\n    entityType: 'checkout:checkout_transaction',\n    recordId,\n    organizationId: payload.organizationId ?? null,\n    tenantId,\n    crudAction: 'created',\n    coverageBaseDelta: 1,\n  }, {\n    tenantId,\n    organizationId: payload.organizationId ?? null,\n  }).catch(() => undefined)\n}\n"],
-  "mappings": "AAAO,MAAM,WAAW;AAAA,EACtB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,IAAI;AACN;AAWA,eAAO,OAA8B,SAAkB,KAAoC;AACzF,QAAM,WAAW,OAAO,QAAQ,kBAAkB,WAAW,QAAQ,gBAAgB;AACrF,QAAM,WAAW,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW;AAC3E,MAAI,CAAC,YAAY,CAAC,SAAU;AAE5B,MAAI,WAA4B;AAChC,MAAI;AACF,eAAW,IAAI,QAAkB,UAAU;AAAA,EAC7C,QAAQ;AACN;AAAA,EACF;AAEA,QAAM,SAAS,UAAU,0BAA0B;AAAA,IACjD,YAAY;AAAA,IACZ;AAAA,IACA,gBAAgB,QAAQ,kBAAkB;AAAA,IAC1C;AAAA,IACA,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB,GAAG;AAAA,IACD;AAAA,IACA,gBAAgB,QAAQ,kBAAkB;AAAA,EAC5C,CAAC,EAAE,MAAM,MAAM,MAAS;AAC1B;",
-  "names": []
-}

package/src/modules/checkout/__integration__/TC-CHKT-042.spec.ts

@@ -1,41 +0,0 @@
-import { expect, test } from '@playwright/test'
-import { getAuthToken } from '@open-mercato/core/modules/core/__integration__/helpers/api'
-import {
-  createCustomerData,
-  createFixedTemplateInput,
-  createLinkFixture,
-  deleteCheckoutEntityIfExists,
-  listCheckoutTransactions,
-  submitPayLink,
-} from './helpers/fixtures'
-
-test.describe('TC-CHKT-042: Transaction search over encrypted customer data', () => {
-  test('finds a newly created transaction through its token index', async ({ request }) => {
-    const email = `token-search-${Date.now()}@example.test`
-    let token: string | null = null
-    let linkId: string | null = null
-
-    try {
-      token = await getAuthToken(request)
-      const link = await createLinkFixture(request, token, createFixedTemplateInput({ status: 'active' }))
-      linkId = link.id
-      const submitted = await submitPayLink(request, link.slug, {
-        customerData: createCustomerData({ email }),
-        acceptedLegalConsents: {},
-        amount: 49.99,
-      })
-      expect(submitted.ok()).toBeTruthy()
-
-      await expect.poll(async () => {
-        const result = await listCheckoutTransactions(
-          request,
-          token!,
-          `search=${encodeURIComponent(email)}&page=1&pageSize=10`,
-        )
-        return result.items.some((item) => item.email === email)
-      }, { timeout: 15_000 }).toBeTruthy()
-    } finally {
-      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
-    }
-  })
-})

package/src/modules/checkout/__integration__/TC-CHKT-043-concurrent-status-update.spec.ts

@@ -1,112 +0,0 @@
-import { expect, test } from '@playwright/test'
-import { getAuthToken, apiRequest } from '@open-mercato/core/modules/core/__integration__/helpers/api'
-import { readJsonSafe } from '@open-mercato/core/modules/core/__integration__/helpers/generalFixtures'
-import {
-  createFixedTemplateInput,
-  createLinkFixture,
-  deleteCheckoutEntityIfExists,
-  findGatewayTransactionIdForCheckout,
-  readCheckoutTransaction,
-  sendMockGatewayWebhook,
-  submitPayLink,
-  waitForCheckoutStatus,
-} from './helpers/fixtures'
-
-/**
- * TC-CHKT-043: Two-contender concurrency test for updateTransactionStatus.
- *
- * Verifies that the compare-and-swap (CAS) in updateTransactionStatusCommand
- * serializes two concurrent writers correctly:
- *
- *  - Exactly one of two concurrent updateStatus calls wins.
- *  - The loser receives a 409 (concurrent_status_update).
- *  - The persisted terminal status stays 'completed'.
- *  - CheckoutLink.completionCount is incremented exactly once.
- *
- * This test exercises the race described in #4700 using a real database,
- * satisfying .ai/review-checklist.md §20 (concurrency-sensitive commands
- * require an executable two-contender test).
- */
-test.describe('TC-CHKT-043 (concurrency): Two-contender race — only one updateStatus call wins', () => {
-  test('concurrent completed + processing status updates: one wins, one gets 409, completionCount incremented once', async ({ request }) => {
-    let token: string | null = null
-    let linkId: string | null = null
-
-    try {
-      token = await getAuthToken(request)
-
-      // Create an active link that accepts a single payment.
-      const link = await createLinkFixture(request, token, {
-        ...createFixedTemplateInput({ status: 'active', collectCustomerDetails: false }),
-      })
-      linkId = link.id
-
-      // Submit a checkout to create a transaction and a gateway session.
-      const submitResponse = await submitPayLink(request, link.slug, {
-        customerData: {},
-        acceptedLegalConsents: {},
-        amount: 49.99,
-      })
-      expect(submitResponse.status(), `Submit failed: ${submitResponse.status()}`).toBe(201)
-      const submitBody = await submitResponse.json() as { transactionId: string }
-      const transactionId = submitBody.transactionId
-      expect(transactionId).toBeTruthy()
-
-      // Find the mock-gateway session ID so we can fire the captured webhook.
-      const gatewayTransactionId = await findGatewayTransactionIdForCheckout(request, token, transactionId)
-      const gatewayTransaction = await apiRequest(request, 'GET', `/api/payment_gateways/transactions/${encodeURIComponent(gatewayTransactionId)}`, { token })
-      const gtBody = await readJsonSafe<{ transaction?: { providerSessionId?: string | null } }>(gatewayTransaction)
-      const providerSessionId = gtBody?.transaction?.providerSessionId
-      expect(providerSessionId, 'providerSessionId is required for webhook simulation').toBeTruthy()
-
-      // --- Two-contender race ---
-      // Simultaneously fire:
-      //   (A) The gateway "captured" webhook ? tries to set status = 'completed'.
-      //   (B) A direct updateStatus API call ? tries to set status = 'processing'
-      //       (simulates the submit route's late write losing the race).
-      //
-      // Both target the same transaction. Exactly one must succeed; the other
-      // must receive a 409 so no lost-update occurs.
-      const [webhookResult, directResult] = await Promise.allSettled([
-        sendMockGatewayWebhook(request, token!, providerSessionId!, 'captured', 49.99),
-        apiRequest(request, 'POST', `/api/checkout/transactions/${encodeURIComponent(transactionId)}/status`, {
-          token,
-          data: { status: 'processing', paymentStatus: 'processing' },
-        }),
-      ])
-
-      // At least the webhook path should have been attempted. The direct call
-      // may receive 409 (CAS missed) or 422 (invalid transition) depending on
-      // which writer committed first — both are acceptable losing outcomes.
-      // The important invariant is the final persisted state.
-      expect(webhookResult.status === 'fulfilled' || directResult.status === 'fulfilled').toBe(true)
-
-      // Wait for the transaction to reach a terminal state (the webhook sets it
-      // to 'completed'; the submit route's 'processing' write must not win).
-      const finalTransaction = await waitForCheckoutStatus(request, token!, transactionId, 'completed', {
-        attempts: 30,
-        intervalMs: 200,
-      })
-
-      // --- Core assertions ---
-
-      // 1. The persisted status must be 'completed' — not 'processing'.
-      expect(finalTransaction.status).toBe('completed')
-
-      // 2. completionCount must be exactly 1 — the terminal state must have
-      //    been applied exactly once, not zero or twice.
-      const updatedLinkResponse = await apiRequest(request, 'GET', `/api/checkout/links/${encodeURIComponent(link.id)}`, { token })
-      // The detail route spreads the serialized link at the top level; there is
-      // no `link` wrapper. Reading one made this assertion compare undefined to 1.
-      const updatedLinkBody = await readJsonSafe<{ completionCount?: number }>(updatedLinkResponse)
-      expect(updatedLinkBody?.completionCount).toBe(1)
-
-      // 3. The stored transaction must have a gatewayTransactionId from the webhook.
-      const storedTransaction = await readCheckoutTransaction(request, token!, transactionId)
-      expect(storedTransaction.status).toBe('completed')
-      expect(storedTransaction.gatewayTransactionId).toBeTruthy()
-    } finally {
-      await deleteCheckoutEntityIfExists(request, token, 'links', linkId)
-    }
-  })
-})

package/src/modules/checkout/__tests__/search.test.ts

@@ -1,21 +0,0 @@
-import searchConfig from '../search'
-import { CHECKOUT_ENTITY_IDS } from '../lib/constants'
-
-describe('checkout search configuration', () => {
-  it('indexes the encrypted transaction fields used by the list API', async () => {
-    const transaction = searchConfig.entities.find((entry) => entry.entityId === CHECKOUT_ENTITY_IDS.transaction)
-    expect(transaction?.fieldPolicy?.searchable).toEqual(['email', 'firstName', 'lastName'])
-
-    const source = await transaction?.buildSource?.({
-      record: { email: 'buyer@example.test', firstName: 'Ada', lastName: 'Lovelace' },
-      customFields: {},
-      tenantId: 'tenant-1',
-      organizationId: 'org-1',
-    })
-    expect(source?.fields).toMatchObject({
-      email: 'buyer@example.test',
-      first_name: 'Ada',
-      last_name: 'Lovelace',
-    })
-  })
-})

package/src/modules/checkout/__tests__/setup-schedules.test.ts

@@ -1,99 +0,0 @@
-import { describe, expect, it, jest } from '@jest/globals'
-import type { EntityManager } from '@mikro-orm/postgresql'
-import type { AwilixContainer } from 'awilix'
-import type { InitSetupContext } from '@open-mercato/shared/modules/setup'
-import { CHECKOUT_EXPIRY_QUEUE } from '../workers/transaction-expiry.worker'
-
-const ensureCheckoutFieldsetsAndDefinitions = jest.fn(async (..._args: unknown[]) => undefined)
-
-jest.mock('../seed/customFields', () => ({
-  ensureCheckoutFieldsetsAndDefinitions: (...args: unknown[]) => ensureCheckoutFieldsetsAndDefinitions(...args),
-}))
-
-type ScheduleRegistration = {
-  id: string
-  organizationId: string
-  tenantId: string
-  scopeType: string
-  targetQueue: string
-}
-
-function createSetupContext(options: {
-  tenantId?: string
-  organizationId?: string
-  hasScheduler?: boolean
-  register?: (registration: ScheduleRegistration) => Promise<void>
-}) {
-  const register = jest.fn(options.register ?? (async () => undefined))
-  const resolve = jest.fn((name: string) => {
-    if (name === 'schedulerService') return { register }
-    throw new Error(`[internal] Missing dependency: ${name}`)
-  })
-  const container = {
-    hasRegistration: jest.fn(() => options.hasScheduler ?? true),
-    resolve,
-  }
-  const context: InitSetupContext = {
-    tenantId: options.tenantId ?? 'tenant-1',
-    organizationId: options.organizationId ?? 'organization-1',
-    em: {} as EntityManager,
-    container: container as unknown as AwilixContainer,
-  }
-  return { context, register, resolve }
-}
-
-async function seedDefaults(context: InitSetupContext): Promise<void> {
-  const { setup } = await import('../setup')
-  if (!setup.seedDefaults) throw new Error('[internal] Checkout seedDefaults hook is missing')
-  await setup.seedDefaults(context)
-}
-
-describe('checkout setup schedules', () => {
-  it('registers one organization-scoped transaction-expiry schedule', async () => {
-    const { context, register } = createSetupContext({})
-
-    await seedDefaults(context)
-
-    expect(register).toHaveBeenCalledWith(expect.objectContaining({
-      organizationId: 'organization-1',
-      tenantId: 'tenant-1',
-      scopeType: 'organization',
-      targetQueue: CHECKOUT_EXPIRY_QUEUE,
-    }))
-  })
-
-  it('uses stable IDs that remain distinct across organizations in one tenant', async () => {
-    const first = createSetupContext({ organizationId: 'organization-1' })
-    const second = createSetupContext({ organizationId: 'organization-2' })
-    const repeated = createSetupContext({ organizationId: 'organization-1' })
-
-    await seedDefaults(first.context)
-    await seedDefaults(second.context)
-    await seedDefaults(repeated.context)
-
-    const firstId = first.register.mock.calls[0][0].id
-    const secondId = second.register.mock.calls[0][0].id
-    const repeatedId = repeated.register.mock.calls[0][0].id
-    expect(firstId).not.toBe(secondId)
-    expect(repeatedId).toBe(firstId)
-  })
-
-  it('skips schedule registration when the optional scheduler module is absent', async () => {
-    const { context, register, resolve } = createSetupContext({ hasScheduler: false })
-
-    await seedDefaults(context)
-
-    expect(register).not.toHaveBeenCalled()
-    expect(resolve).not.toHaveBeenCalled()
-  })
-
-  it('propagates scheduler registration failures', async () => {
-    const { context } = createSetupContext({
-      register: async () => {
-        throw new Error('[internal] scheduler unavailable')
-      },
-    })
-
-    await expect(seedDefaults(context)).rejects.toThrow('[internal] scheduler unavailable')
-  })
-})

package/src/modules/checkout/api/transactions/__tests__/route.test.ts

@@ -1,113 +0,0 @@
-/** @jest-environment node */
-
-import { GET } from '../route'
-import { CheckoutTransaction } from '../../../data/entities'
-
-const mockFindAndCountWithDecryption = jest.fn()
-const mockFindWithDecryption = jest.fn()
-
-jest.mock('@open-mercato/shared/lib/encryption/find', () => ({
-  findAndCountWithDecryption: (...args: unknown[]) => mockFindAndCountWithDecryption(...args),
-  findWithDecryption: (...args: unknown[]) => mockFindWithDecryption(...args),
-}))
-
-const mockFindEntityIdsBySearchTokens = jest.fn(async () => ({ matched: false, reason: 'no-tokens' as const }))
-
-jest.mock('@open-mercato/shared/lib/search/tokenLookup', () => ({
-  findEntityIdsBySearchTokens: (...args: unknown[]) => mockFindEntityIdsBySearchTokens(...(args as [])),
-}))
-
-const mockEm = { getKysely: jest.fn(() => ({})) }
-const auth = { tenantId: 'tenant-1', orgId: 'org-1', sub: 'user-1' }
-
-jest.mock('../../helpers', () => ({
-  requireAdminContext: jest.fn(async () => ({ auth, container: {}, em: mockEm, commandBus: {} })),
-  userHasCheckoutFeature: jest.fn(async () => true),
-  handleCheckoutRouteError: (error: unknown) => {
-    throw error
-  },
-}))
-
-function makeRequest(params?: Record<string, string>) {
-  const url = new URL('http://localhost/api/checkout/transactions')
-  for (const [key, value] of Object.entries(params ?? {})) url.searchParams.set(key, value)
-  return new Request(url.toString(), { method: 'GET' })
-}
-
-function capturedWhere(): Record<string, unknown> {
-  return mockFindAndCountWithDecryption.mock.calls[0][2] as Record<string, unknown>
-}
-
-describe('GET /api/checkout/transactions', () => {
-  beforeEach(() => {
-    jest.clearAllMocks()
-    mockFindAndCountWithDecryption.mockResolvedValue([[], 0])
-    mockFindWithDecryption.mockResolvedValue([])
-    mockFindEntityIdsBySearchTokens.mockResolvedValue({ matched: false, reason: 'no-tokens' } as never)
-  })
-
-  it('applies no search predicate when no term is supplied', async () => {
-    await GET(makeRequest())
-
-    expect(mockFindAndCountWithDecryption).toHaveBeenCalledWith(
-      mockEm,
-      CheckoutTransaction,
-      { organizationId: 'org-1', tenantId: 'tenant-1' },
-      expect.any(Object),
-      expect.any(Object),
-    )
-    expect(mockFindEntityIdsBySearchTokens).not.toHaveBeenCalled()
-  })
-
-  it('keeps the escaped ILIKE predicates for the PII columns', async () => {
-    await GET(makeRequest({ search: '100%_off' }))
-
-    expect(capturedWhere().$or).toEqual([
-      { email: { $ilike: '%100\\%\\_off%' } },
-      { firstName: { $ilike: '%100\\%\\_off%' } },
-      { lastName: { $ilike: '%100\\%\\_off%' } },
-    ])
-  })
-
-  it('unions the encrypted-column token matches into the search predicate', async () => {
-    mockFindEntityIdsBySearchTokens.mockResolvedValueOnce({
-      matched: true,
-      ids: ['tx-1', 'tx-2'],
-    } as never)
-
-    await GET(makeRequest({ search: 'ada@example.com' }))
-
-    expect(mockFindEntityIdsBySearchTokens).toHaveBeenCalledWith(expect.objectContaining({
-      entityType: 'checkout:checkout_transaction',
-      query: 'ada@example.com',
-      fields: ['email', 'first_name', 'last_name'],
-      scope: { tenantId: 'tenant-1', organizationId: 'org-1' },
-    }))
-    expect(capturedWhere().$or).toContainEqual({ id: { $in: ['tx-1', 'tx-2'] } })
-  })
-
-  it('never emits an ILIKE against the uuid id column', async () => {
-    await GET(makeRequest({ search: 'abc' }))
-
-    const or = capturedWhere().$or as Array<Record<string, unknown>>
-    expect(or.some((clause) => 'id' in clause)).toBe(false)
-  })
-
-  it('matches a uuid search term against the id column exactly', async () => {
-    const id = '3f2504e0-4f89-41d3-9a0c-0305e82c3301'
-    await GET(makeRequest({ search: id }))
-
-    expect(capturedWhere().$or).toContainEqual({ id })
-  })
-
-  it('keeps link and status filters alongside the search predicate', async () => {
-    await GET(makeRequest({ search: 'ada', status: 'completed', linkId: 'link-1' }))
-
-    expect(capturedWhere()).toMatchObject({
-      organizationId: 'org-1',
-      tenantId: 'tenant-1',
-      status: 'completed',
-      linkId: 'link-1',
-    })
-  })
-})