@open-mercato/core 0.10.1-develop.7736.1.88e07906bf → 0.10.1-develop.7748.1.d745ba61aa

package/dist/modules/payment_gateways/lib/gateway-service.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/payment_gateways/lib/gateway-service.ts"],
-  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport { QueryOrder } from '@mikro-orm/core'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  getGatewayAdapter,\n  type CreateSessionInput,\n  type CreateSessionResult,\n  type CaptureResult,\n  type RefundResult,\n  type CancelResult,\n  type GatewayAdapter,\n  type GatewayPaymentStatus,\n  type PaymentGatewayPresentationRequest,\n  type PaymentOrderTotalResolver,\n  type UnifiedPaymentStatus,\n} from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport type { IntegrationStateService } from '../../integrations/lib/state-service'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport { conflict, CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { GatewayPaymentOperation, GatewaySessionInitialization, GatewayTransaction } from '../data/entities'\nimport { canApplyManualAction, isValidTransition, type ManualGatewayAction } from './status-machine'\nimport { emitPaymentGatewayEvent } from '../events'\nimport { readGatewayMetadata, readWebhookLog } from './transaction-fields'\nimport { reconcileSessionAmountWithOrder } from './order-amount-reconciliation'\nimport {\n  alignCapturedAmountWithStatus,\n  assertCaptureWithinRemaining,\n  formatAmountUnits,\n  parseAmountUnits,\n  releaseCaptureAmount,\n  reserveCaptureAmount,\n  settleCapturedAmount,\n} from './capture-ledger'\nimport {\n  completePaymentOperation,\n  failPaymentOperation,\n  preparePaymentOperation,\n} from './payment-operation-idempotency'\nimport {\n  buildPaymentSessionOperationKey,\n  claimPaymentSessionInitialization,\n  findPaymentSessionInitialization,\n  reclaimPaymentSessionInitialization,\n  refreshPaymentSessionInitialization,\n  releasePaymentSessionInitialization,\n} from './session-idempotency'\n\nconst PAYMENT_SESSION_CLAIM_STALE_MS = 30_000\nconst PAYMENT_SESSION_WAIT_INTERVAL_MS = 25\nconst logger = createLogger('payment_gateways').child({ component: 'gateway-service' })\n\nfunction assertManualActionAllowed(action: ManualGatewayAction, transaction: GatewayTransaction): void {\n  const current = transaction.unifiedStatus as UnifiedPaymentStatus\n  if (!canApplyManualAction(action, current)) {\n    throw conflict(`Cannot ${action} a payment in status \"${current}\"`)\n  }\n}\n\nfunction applyAdapterResultStatus(\n  action: ManualGatewayAction,\n  transaction: GatewayTransaction,\n  resultStatus: UnifiedPaymentStatus,\n): boolean {\n  const current = transaction.unifiedStatus as UnifiedPaymentStatus\n  if (resultStatus === current) return false\n  if (isValidTransition(resultStatus, current)) return false\n  if (!isValidTransition(current, resultStatus)) {\n    throw conflict(\n      `Gateway returned status \"${resultStatus}\" which is not a valid transition from \"${current}\" for ${action}`,\n    )\n  }\n  transaction.unifiedStatus = resultStatus\n  return true\n}\n\nexport interface PaymentGatewayServiceDeps {\n  em: EntityManager\n  integrationCredentialsService: CredentialsService\n  integrationStateService?: IntegrationStateService\n  integrationLogService?: IntegrationLogService\n  /**\n   * Optional seam supplied by the module that owns orders (`sales` by default).\n   * When absent, session amounts cannot be reconciled and are accepted as-is.\n   */\n  paymentOrderTotalResolver?: PaymentOrderTotalResolver | null\n  sessionClaimOptions?: {\n    staleAfterMs?: number\n    heartbeatIntervalMs?: number\n    pollIntervalMs?: number\n  }\n}\n\nexport interface CreatePaymentSessionInput {\n  providerKey: string\n  paymentId: string\n  idempotencyKey?: string\n  orderId?: string\n  amount: number\n  currencyCode: string\n  captureMethod?: 'automatic' | 'manual'\n  paymentTypes?: string[]\n  description?: string\n  successUrl?: string\n  cancelUrl?: string\n  metadata?: Record<string, unknown>\n  presentation?: PaymentGatewayPresentationRequest\n  organizationId: string\n  tenantId: string\n}\n\nexport function createPaymentGatewayService(deps: PaymentGatewayServiceDeps) {\n  const { em, integrationCredentialsService, integrationLogService } = deps\n  const claimStaleAfterMs = Math.max(1, deps.sessionClaimOptions?.staleAfterMs ?? PAYMENT_SESSION_CLAIM_STALE_MS)\n  const claimHeartbeatIntervalMs = Math.max(\n    1,\n    deps.sessionClaimOptions?.heartbeatIntervalMs ?? Math.floor(claimStaleAfterMs / 3),\n  )\n  const claimPollIntervalMs = Math.max(1, deps.sessionClaimOptions?.pollIntervalMs ?? PAYMENT_SESSION_WAIT_INTERVAL_MS)\n\n  async function findTransactionOrThrow(\n    transactionId: string,\n    scope: { organizationId: string; tenantId: string },\n    targetEm: EntityManager = em,\n  ): Promise<GatewayTransaction> {\n    const transaction = await findOneWithDecryption(\n      targetEm,\n      GatewayTransaction,\n      {\n        id: transactionId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n    if (!transaction) {\n      throw new Error('Transaction not found')\n    }\n    return transaction\n  }\n\n  function readProviderSessionId(transaction: GatewayTransaction): string {\n    if (typeof transaction.providerSessionId === 'string' && transaction.providerSessionId.trim().length > 0) {\n      return transaction.providerSessionId\n    }\n    throw new Error('Transaction is missing provider session id')\n  }\n\n  async function emitStatusEvent(status: UnifiedPaymentStatus, payload: Record<string, unknown>) {\n    type PaymentGatewayEventId = Parameters<typeof emitPaymentGatewayEvent>[0]\n    const eventMap: Partial<Record<UnifiedPaymentStatus, PaymentGatewayEventId>> = {\n      authorized: 'payment_gateways.payment.authorized',\n      captured: 'payment_gateways.payment.captured',\n      failed: 'payment_gateways.payment.failed',\n      refunded: 'payment_gateways.payment.refunded',\n      cancelled: 'payment_gateways.payment.cancelled',\n    }\n    const eventId = eventMap[status]\n    if (!eventId) return\n    await emitPaymentGatewayEvent(eventId, payload)\n  }\n\n  async function writeTransactionLog(\n    providerKey: string,\n    scope: { organizationId: string; tenantId: string },\n    transactionId: string,\n    level: 'info' | 'warn' | 'error',\n    message: string,\n    payload?: Record<string, unknown> | null,\n    code?: string | null,\n  ) {\n    if (!integrationLogService) return\n    await integrationLogService.write({\n      integrationId: `gateway_${providerKey}`,\n      scopeEntityType: 'payment_transaction',\n      scopeEntityId: transactionId,\n      level,\n      message,\n      code,\n      payload: payload ?? null,\n    }, scope)\n  }\n\n  async function stampLastPolledAt(transaction: GatewayTransaction, polledAt: Date): Promise<void> {\n    await em.nativeUpdate(\n      GatewayTransaction,\n      { id: transaction.id, organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      { lastPolledAt: polledAt },\n    )\n  }\n\n  async function resolveAdapterAndCredentials(providerKey: string, scope: { organizationId: string; tenantId: string }) {\n    const integrationId = `gateway_${providerKey}`\n    const selectedVersion = deps.integrationStateService\n      ? await deps.integrationStateService.resolveApiVersion(integrationId, scope)\n      : undefined\n    const adapter = getGatewayAdapter(providerKey, selectedVersion)\n    if (!adapter) {\n      const message = selectedVersion\n        ? `No gateway adapter registered for provider: ${providerKey} (version: ${selectedVersion})`\n        : `No gateway adapter registered for provider: ${providerKey}`\n      throw new CrudHttpError(422, { error: message })\n    }\n    const credentials = await integrationCredentialsService.resolve(integrationId, scope) ?? {}\n\n    return { adapter, credentials }\n  }\n\n  type ManualOperationResult = CaptureResult | RefundResult | CancelResult\n\n  async function executeManualOperation<TResult extends ManualOperationResult>(input: {\n    action: ManualGatewayAction\n    transactionId: string\n    operationId?: string\n    payload: Record<string, unknown>\n    scope: { organizationId: string; tenantId: string }\n    assertInitialAllowed?: (transaction: GatewayTransaction) => void\n    beforeInvoke?: (context: { transaction: GatewayTransaction; operation: GatewayPaymentOperation }) => Promise<void>\n    releaseOnFailure?: (context: {\n      transaction: GatewayTransaction\n      operation: GatewayPaymentOperation\n      providerInvoked: boolean\n    }) => Promise<void>\n    invoke: (context: {\n      adapter: GatewayAdapter\n      credentials: Record<string, unknown>\n      transaction: GatewayTransaction\n      idempotencyKey: string\n    }) => Promise<TResult>\n    applyResult: (transaction: GatewayTransaction, result: TResult) => void\n    afterCommit: (transaction: GatewayTransaction, result: TResult) => Promise<void>\n  }): Promise<TResult> {\n    const transaction = await findTransactionOrThrow(input.transactionId, input.scope)\n    const prepared = await preparePaymentOperation({\n      em,\n      transactionId: transaction.id,\n      providerKey: transaction.providerKey,\n      action: input.action,\n      operationId: input.operationId,\n      payload: input.payload,\n      scope: input.scope,\n      assertInitialAllowed: () => {\n        assertManualActionAllowed(input.action, transaction)\n        input.assertInitialAllowed?.(transaction)\n      },\n    })\n    if (prepared.kind === 'completed') {\n      if (prepared.result.status !== transaction.unifiedStatus) {\n        throw conflict(\n          `Cannot replay ${input.action} because the payment status has changed since the operation completed`,\n        )\n      }\n      return prepared.result as unknown as TResult\n    }\n\n    const operation = prepared.claim.record\n    // Everything after this flips to true is post-settlement: the provider moved the money and the\n    // completion transaction committed it. A later event or logging failure must not undo either,\n    // so the failure path below only runs while the operation can still be rolled back.\n    let settled = false\n    // Flips once the provider call returned, so the failure path can tell \"the provider never\n    // moved the money\" from \"the provider moved it and only our bookkeeping failed\" \u2014 the two\n    // cases need opposite rollback decisions.\n    let providerInvoked = false\n    try {\n      await input.beforeInvoke?.({ transaction, operation })\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n      const result = await input.invoke({\n        adapter,\n        credentials,\n        transaction,\n        idempotencyKey: prepared.claim.providerIdempotencyKey,\n      })\n      providerInvoked = true\n      const statusChanged = await completePaymentOperation(\n        em,\n        prepared.claim,\n        result as unknown as Record<string, unknown>,\n        async (tx) => {\n          const current = await findTransactionOrThrow(input.transactionId, input.scope, tx)\n          const changed = applyAdapterResultStatus(input.action, current, result.status)\n          input.applyResult(current, result)\n          return changed\n        },\n      )\n      settled = true\n      if (statusChanged) {\n        await emitStatusEvent(result.status, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n      }\n      await input.afterCommit(transaction, result)\n      return result\n    } catch (error: unknown) {\n      if (!settled) {\n        if (input.releaseOnFailure) {\n          await input.releaseOnFailure({ transaction, operation, providerInvoked }).catch(() => undefined)\n        }\n        await Promise.allSettled([failPaymentOperation(em, prepared.claim)])\n      }\n      throw error\n    }\n  }\n\n  function createGatewayTransaction(\n    manager: EntityManager,\n    input: CreatePaymentSessionInput,\n    session: CreateSessionResult,\n    id?: string,\n  ): GatewayTransaction {\n    const data = {\n      paymentId: input.paymentId,\n      providerKey: input.providerKey,\n      providerSessionId: session.sessionId,\n      unifiedStatus: session.status,\n      redirectUrl: session.redirectUrl\n        ?? (session.clientSession?.type === 'redirect' ? session.clientSession.redirectUrl : null),\n      clientSecret: session.clientSecret ?? null,\n      amount: String(input.amount),\n      // An automatic-capture session comes back already captured, so the ledger has to start\n      // at the full amount \u2014 otherwise a later manual capture would look like the first one.\n      capturedAmount: session.status === 'captured' ? String(input.amount) : '0',\n      currencyCode: input.currencyCode,\n      gatewayMetadata: {\n        ...(session.providerData ?? {}),\n        ...(session.clientSession ? { clientSession: session.clientSession } : {}),\n      },\n      organizationId: input.organizationId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    }\n    return id\n      ? manager.create(GatewayTransaction, { id, ...data })\n      : manager.create(GatewayTransaction, data)\n  }\n\n  function restoreSession(transaction: GatewayTransaction): CreateSessionResult {\n    const metadata = readGatewayMetadata(transaction.gatewayMetadata)\n    const { clientSession, ...providerData } = metadata\n    return {\n      sessionId: readProviderSessionId(transaction),\n      status: transaction.unifiedStatus as UnifiedPaymentStatus,\n      ...(transaction.clientSecret ? { clientSecret: transaction.clientSecret } : {}),\n      ...(transaction.redirectUrl ? { redirectUrl: transaction.redirectUrl } : {}),\n      ...(Object.keys(providerData).length > 0 ? { providerData } : {}),\n      ...(clientSession && typeof clientSession === 'object'\n        ? { clientSession: clientSession as CreateSessionResult['clientSession'] }\n        : {}),\n    }\n  }\n\n  async function recordCreatedSession(\n    transaction: GatewayTransaction,\n    input: CreatePaymentSessionInput,\n    scope: { organizationId: string; tenantId: string },\n  ): Promise<void> {\n    await emitPaymentGatewayEvent('payment_gateways.session.created', {\n      transactionId: transaction.id,\n      paymentId: transaction.paymentId,\n      providerKey: transaction.providerKey,\n      status: transaction.unifiedStatus,\n      organizationId: transaction.organizationId,\n      tenantId: transaction.tenantId,\n    })\n    await writeTransactionLog(\n      transaction.providerKey,\n      scope,\n      transaction.id,\n      'info',\n      'Payment session created',\n      {\n        paymentId: transaction.paymentId,\n        providerSessionId: transaction.providerSessionId,\n        status: transaction.unifiedStatus,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n      },\n    )\n  }\n\n  function startClaimHeartbeat(\n    ownership: { id: string; claimToken: string },\n    scope: { organizationId: string; tenantId: string },\n  ): () => Promise<void> {\n    let stopped = false\n    let timer: ReturnType<typeof setTimeout> | null = null\n    let pendingRefresh = Promise.resolve()\n\n    const schedule = () => {\n      timer = setTimeout(() => {\n        pendingRefresh = refreshPaymentSessionInitialization(em, ownership, scope, new Date())\n          .then(\n            (refreshed) => {\n              if (refreshed && !stopped) schedule()\n            },\n            () => {\n              if (!stopped) schedule()\n            },\n          )\n      }, claimHeartbeatIntervalMs)\n    }\n    schedule()\n\n    return async () => {\n      stopped = true\n      if (timer) clearTimeout(timer)\n      await pendingRefresh\n    }\n  }\n\n  return {\n    async createPaymentSession(input: CreatePaymentSessionInput): Promise<{ transaction: GatewayTransaction; session: CreateSessionResult }> {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      await reconcileSessionAmountWithOrder({\n        orderId: input.orderId,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n        scope,\n        resolver: deps.paymentOrderTotalResolver,\n      })\n      const { adapter, credentials } = await resolveAdapterAndCredentials(input.providerKey, scope)\n\n      const sessionInput: CreateSessionInput = {\n        paymentId: input.paymentId,\n        orderId: input.orderId,\n        idempotencyKey: input.idempotencyKey,\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n        captureMethod: input.captureMethod,\n        paymentTypes: input.paymentTypes,\n        description: input.description,\n        successUrl: input.successUrl,\n        cancelUrl: input.cancelUrl,\n        metadata: input.metadata,\n        presentation: input.presentation,\n        credentials,\n      }\n\n      if (!input.idempotencyKey) {\n        const session = await adapter.createSession(sessionInput)\n        const transaction = createGatewayTransaction(em, input, session)\n        await em.persist(transaction).flush()\n        await recordCreatedSession(transaction, input, scope)\n        return { transaction, session }\n      }\n\n      const operationKey = buildPaymentSessionOperationKey({\n        idempotencyKey: input.idempotencyKey,\n        paymentId: input.paymentId,\n        providerKey: input.providerKey,\n        scope,\n      })\n      while (true) {\n        const existing = await findPaymentSessionInitialization(em, operationKey, input.providerKey, scope)\n        if (existing?.gatewayTransactionId) {\n          const transaction = await findOneWithDecryption(\n            em.fork(),\n            GatewayTransaction,\n            {\n              id: existing.gatewayTransactionId,\n              organizationId: scope.organizationId,\n              tenantId: scope.tenantId,\n              deletedAt: null,\n            },\n            undefined,\n            scope,\n          )\n          if (!transaction) {\n            throw new Error('[internal] Completed payment session is missing its gateway transaction')\n          }\n          return { transaction, session: restoreSession(transaction) }\n        }\n\n        const claimedAt = new Date()\n        const staleBefore = new Date(claimedAt.getTime() - claimStaleAfterMs)\n        const ownership = existing\n          ? await reclaimPaymentSessionInitialization(em, existing, scope, claimedAt, staleBefore)\n          : await claimPaymentSessionInitialization(em, operationKey, input.providerKey, scope, claimedAt)\n\n        if (!ownership) {\n          await new Promise((resolve) => setTimeout(resolve, claimPollIntervalMs))\n          continue\n        }\n\n        let session: CreateSessionResult\n        const stopHeartbeat = startClaimHeartbeat(ownership, scope)\n        try {\n          session = await adapter.createSession({ ...sessionInput, idempotencyKey: operationKey })\n        } catch (error) {\n          try {\n            await releasePaymentSessionInitialization(em, ownership, scope)\n          } catch (releaseError) {\n            logger.warn('Failed to release payment session initialization claim', {\n              claimId: ownership.id,\n              providerKey: input.providerKey,\n              err: releaseError,\n            })\n          }\n          throw error\n        } finally {\n          await stopHeartbeat()\n        }\n\n        const transactionId = randomUUID()\n        const transaction = await em.fork().transactional(async (transactionEm) => {\n          const finalizedRows = await transactionEm.nativeUpdate(\n            GatewaySessionInitialization,\n            {\n              id: ownership.id,\n              claimToken: ownership.claimToken,\n              gatewayTransactionId: null,\n              organizationId: scope.organizationId,\n              tenantId: scope.tenantId,\n            },\n            {\n              gatewayTransactionId: transactionId,\n              claimToken: null,\n              claimedAt: null,\n              updatedAt: new Date(),\n            },\n          )\n          if (finalizedRows === 0) return null\n          const created = createGatewayTransaction(transactionEm, input, session, transactionId)\n          await transactionEm.persist(created).flush()\n          return created\n        })\n\n        if (!transaction) {\n          continue\n        }\n        await recordCreatedSession(transaction, input, scope)\n        return { transaction, session }\n      }\n    },\n\n    async capturePayment(\n      transactionId: string,\n      amount: number | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<CaptureResult> {\n      let reservedUnits: bigint | null = null\n      let providerAmount = amount\n      return executeManualOperation({\n        action: 'capture',\n        transactionId,\n        operationId,\n        payload: { amount: amount ?? null },\n        scope,\n        assertInitialAllowed: (transaction) => { assertCaptureWithinRemaining(transaction, amount) },\n        beforeInvoke: async ({ transaction, operation }) => {\n          const alreadyCapturedUnits = parseAmountUnits(transaction.capturedAmount)\n          reservedUnits = await reserveCaptureAmount(em, { transaction, operation, amount, scope })\n          // \"Capture the rest\" has to name the remaining amount once part of the authorization is\n          // already captured, otherwise the provider would capture the full amount a second time.\n          if (amount === undefined && alreadyCapturedUnits > 0n) {\n            providerAmount = Number(formatAmountUnits(reservedUnits))\n          }\n        },\n        // The slice goes back only while the provider has not been called yet. Once the capture\n        // call returned, the money may already have moved and only the completion transaction\n        // failed, so releasing would reopen the authorization for a fresh operation id and allow an\n        // over-capture. Holding the reservation is the conservative outcome: a retry of this same\n        // operation id reuses both the reservation and the provider idempotency key, so the provider\n        // itself collapses the duplicate.\n        releaseOnFailure: async ({ transaction, operation, providerInvoked }) => {\n          if (reservedUnits === null) return\n          if (providerInvoked) {\n            await writeTransactionLog(\n              transaction.providerKey,\n              { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n              transaction.id,\n              'warn',\n              'Capture reservation stays outstanding because the provider call already returned',\n              { operationId: operation.operationId, reservedAmount: formatAmountUnits(reservedUnits) },\n            )\n            return\n          }\n          const released = await releaseCaptureAmount(em, { transactionId, operation, reservedUnits, scope })\n          if (released) return\n          await writeTransactionLog(\n            transaction.providerKey,\n            { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n            transaction.id,\n            'warn',\n            'Capture reservation stays outstanding after a failed capture',\n            { operationId: operation.operationId, reservedAmount: formatAmountUnits(reservedUnits) },\n          )\n        },\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.capture({\n          sessionId: readProviderSessionId(transaction),\n          amount: providerAmount,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: (transaction, result) => {\n          transaction.gatewayMetadata = {\n            ...readGatewayMetadata(transaction.gatewayMetadata),\n            captureResult: result.providerData,\n          }\n          if (reservedUnits !== null) settleCapturedAmount(transaction, reservedUnits, result.capturedAmount)\n        },\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment captured',\n          { amount: amount ?? null, status: result.status, capturedAmount: result.capturedAmount },\n        ),\n      })\n    },\n\n    async refundPayment(\n      transactionId: string,\n      amount: number | undefined,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<RefundResult> {\n      return executeManualOperation({\n        action: 'refund',\n        transactionId,\n        operationId,\n        payload: { amount: amount ?? null, reason: reason ?? null },\n        scope,\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.refund({\n          sessionId: readProviderSessionId(transaction),\n          amount,\n          reason,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: (transaction, result) => {\n          transaction.gatewayRefundId = result.refundId\n          transaction.gatewayMetadata = {\n            ...readGatewayMetadata(transaction.gatewayMetadata),\n            refundResult: result.providerData,\n          }\n        },\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment refunded',\n          { amount: amount ?? null, reason: reason ?? null, status: result.status, refundId: result.refundId },\n        ),\n      })\n    },\n\n    async cancelPayment(\n      transactionId: string,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<CancelResult> {\n      return executeManualOperation({\n        action: 'cancel',\n        transactionId,\n        operationId,\n        payload: { reason: reason ?? null },\n        scope,\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.cancel({\n          sessionId: readProviderSessionId(transaction),\n          reason,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: () => {},\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment cancelled',\n          { reason: reason ?? null, status: result.status },\n        ),\n      })\n    },\n\n    async getPaymentStatus(transactionId: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayPaymentStatus> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      let status: GatewayPaymentStatus\n      try {\n        const { adapter, credentials } = await resolveAdapterAndCredentials(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        )\n        status = await adapter.getStatus({\n          sessionId: readProviderSessionId(transaction),\n          credentials,\n        })\n      } catch (error) {\n        try {\n          await stampLastPolledAt(transaction, new Date())\n        } catch (stampError) {\n          logger.warn('Failed to record last poll time after a failed status read', {\n            transactionId: transaction.id,\n            providerKey: transaction.providerKey,\n            err: stampError,\n          })\n        }\n        throw error\n      }\n\n      const polledAt = new Date()\n      const shouldApplyStatus = status.status !== transaction.unifiedStatus\n        && isValidTransition(transaction.unifiedStatus as UnifiedPaymentStatus, status.status)\n      if (shouldApplyStatus) {\n        const previousStatus = transaction.unifiedStatus\n        transaction.unifiedStatus = status.status\n        alignCapturedAmountWithStatus(transaction, status.status)\n        transaction.gatewayStatus = status.status\n        transaction.gatewayMetadata = { ...readGatewayMetadata(transaction.gatewayMetadata), statusResult: status.providerData ?? null }\n        transaction.lastPolledAt = polledAt\n        await em.flush()\n        await emitStatusEvent(status.status, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          previousStatus,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n        await writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment status updated by poller',\n          {\n            previousStatus,\n            nextStatus: status.status,\n          },\n        )\n      } else {\n        await stampLastPolledAt(transaction, polledAt)\n      }\n\n      return status\n    },\n\n    async syncTransactionStatus(transactionId: string, update: {\n      unifiedStatus: UnifiedPaymentStatus\n      providerStatus?: string\n      providerData?: Record<string, unknown>\n      webhookEvent?: {\n        eventType: string\n        idempotencyKey: string\n        processed: boolean\n        receivedAt?: string\n      }\n    }, scope: { organizationId: string; tenantId: string }): Promise<void> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const currentStatus = transaction.unifiedStatus as UnifiedPaymentStatus\n      const canTransition = isValidTransition(currentStatus, update.unifiedStatus)\n      const shouldApplyStatus = canTransition && update.unifiedStatus !== currentStatus\n      const previousStatus = transaction.unifiedStatus\n      if (shouldApplyStatus) {\n        transaction.unifiedStatus = update.unifiedStatus\n        alignCapturedAmountWithStatus(transaction, update.unifiedStatus)\n      }\n      if (update.providerStatus) {\n        transaction.gatewayStatus = update.providerStatus\n      }\n      if (update.providerData) {\n        transaction.gatewayMetadata = { ...readGatewayMetadata(transaction.gatewayMetadata), ...update.providerData }\n      }\n      if (update.webhookEvent) {\n        const webhookLog = readWebhookLog(transaction.webhookLog)\n        webhookLog.push({\n          eventType: update.webhookEvent.eventType,\n          receivedAt: update.webhookEvent.receivedAt ?? new Date().toISOString(),\n          idempotencyKey: update.webhookEvent.idempotencyKey,\n          unifiedStatus: update.unifiedStatus,\n          processed: update.webhookEvent.processed,\n        })\n        transaction.webhookLog = webhookLog\n      }\n      transaction.lastWebhookAt = new Date()\n      await em.flush()\n      if (shouldApplyStatus) {\n        await emitStatusEvent(update.unifiedStatus, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          previousStatus,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n      }\n      await writeTransactionLog(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        transaction.id,\n        shouldApplyStatus ? 'info' : 'warn',\n        shouldApplyStatus ? 'Payment status synchronized from webhook' : 'Webhook received with no status transition',\n        {\n          previousStatus,\n          nextStatus: update.unifiedStatus,\n          providerStatus: update.providerStatus ?? null,\n          eventType: update.webhookEvent?.eventType ?? null,\n          idempotencyKey: update.webhookEvent?.idempotencyKey ?? null,\n        },\n      )\n    },\n\n    async findTransaction(id: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          id,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async findTransactionBySessionId(\n      providerSessionId: string,\n      scope: { organizationId: string; tenantId: string },\n      providerKey?: string,\n    ): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          providerSessionId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n          ...(providerKey ? { providerKey } : {}),\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async listTransactionsForStatusPolling(scope?: {\n      organizationId?: string\n      tenantId?: string\n      providerKey?: string\n      limit?: number\n    }): Promise<GatewayTransaction[]> {\n      const where: Record<string, unknown> = {\n        unifiedStatus: { $in: ['pending', 'authorized', 'partially_captured'] },\n        deletedAt: null,\n      }\n      if (scope?.organizationId) where.organizationId = scope.organizationId\n      if (scope?.tenantId) where.tenantId = scope.tenantId\n      if (scope?.providerKey) where.providerKey = scope.providerKey\n\n      return findWithDecryption(\n        em,\n        GatewayTransaction,\n        where,\n        {\n          orderBy: { lastPolledAt: QueryOrder.ASC_NULLS_FIRST, createdAt: QueryOrder.ASC },\n          limit: scope?.limit ?? 100,\n        },\n        scope,\n      )\n    },\n  }\n}\n\nexport type PaymentGatewayService = ReturnType<typeof createPaymentGatewayService>\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAE3B,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,OAWK;AAIP,SAAS,UAAU,qBAAqB;AACxC,SAAkC,8BAA8B,0BAA0B;AAC1F,SAAS,sBAAsB,yBAAmD;AAClF,SAAS,+BAA+B;AACxC,SAAS,qBAAqB,sBAAsB;AACpD,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AACvC,MAAM,mCAAmC;AACzC,MAAM,SAAS,aAAa,kBAAkB,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAEtF,SAAS,0BAA0B,QAA6B,aAAuC;AACrG,QAAM,UAAU,YAAY;AAC5B,MAAI,CAAC,qBAAqB,QAAQ,OAAO,GAAG;AAC1C,UAAM,SAAS,UAAU,MAAM,yBAAyB,OAAO,GAAG;AAAA,EACpE;AACF;AAEA,SAAS,yBACP,QACA,aACA,cACS;AACT,QAAM,UAAU,YAAY;AAC5B,MAAI,iBAAiB,QAAS,QAAO;AACrC,MAAI,kBAAkB,cAAc,OAAO,EAAG,QAAO;AACrD,MAAI,CAAC,kBAAkB,SAAS,YAAY,GAAG;AAC7C,UAAM;AAAA,MACJ,4BAA4B,YAAY,2CAA2C,OAAO,SAAS,MAAM;AAAA,IAC3G;AAAA,EACF;AACA,cAAY,gBAAgB;AAC5B,SAAO;AACT;AAqCO,SAAS,4BAA4B,MAAiC;AAC3E,QAAM,EAAE,IAAI,+BAA+B,sBAAsB,IAAI;AACrE,QAAM,oBAAoB,KAAK,IAAI,GAAG,KAAK,qBAAqB,gBAAgB,8BAA8B;AAC9G,QAAM,2BAA2B,KAAK;AAAA,IACpC;AAAA,IACA,KAAK,qBAAqB,uBAAuB,KAAK,MAAM,oBAAoB,CAAC;AAAA,EACnF;AACA,QAAM,sBAAsB,KAAK,IAAI,GAAG,KAAK,qBAAqB,kBAAkB,gCAAgC;AAEpH,iBAAe,uBACb,eACA,OACA,WAA0B,IACG;AAC7B,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,WAAS,sBAAsB,aAAyC;AACtE,QAAI,OAAO,YAAY,sBAAsB,YAAY,YAAY,kBAAkB,KAAK,EAAE,SAAS,GAAG;AACxG,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,iBAAe,gBAAgB,QAA8B,SAAkC;AAE7F,UAAM,WAAyE;AAAA,MAC7E,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,QAAS;AACd,UAAM,wBAAwB,SAAS,OAAO;AAAA,EAChD;AAEA,iBAAe,oBACb,aACA,OACA,eACA,OACA,SACA,SACA,MACA;AACA,QAAI,CAAC,sBAAuB;AAC5B,UAAM,sBAAsB,MAAM;AAAA,MAChC,eAAe,WAAW,WAAW;AAAA,MACrC,iBAAiB;AAAA,MACjB,eAAe;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,WAAW;AAAA,IACtB,GAAG,KAAK;AAAA,EACV;AAEA,iBAAe,kBAAkB,aAAiC,UAA+B;AAC/F,UAAM,GAAG;AAAA,MACP;AAAA,MACA,EAAE,IAAI,YAAY,IAAI,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MACjG,EAAE,cAAc,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,iBAAe,6BAA6B,aAAqB,OAAqD;AACpH,UAAM,gBAAgB,WAAW,WAAW;AAC5C,UAAM,kBAAkB,KAAK,0BACzB,MAAM,KAAK,wBAAwB,kBAAkB,eAAe,KAAK,IACzE;AACJ,UAAM,UAAU,kBAAkB,aAAa,eAAe;AAC9D,QAAI,CAAC,SAAS;AACZ,YAAM,UAAU,kBACZ,+CAA+C,WAAW,cAAc,eAAe,MACvF,+CAA+C,WAAW;AAC9D,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,IACjD;AACA,UAAM,cAAc,MAAM,8BAA8B,QAAQ,eAAe,KAAK,KAAK,CAAC;AAE1F,WAAO,EAAE,SAAS,YAAY;AAAA,EAChC;AAIA,iBAAe,uBAA8D,OAqBxD;AACnB,UAAM,cAAc,MAAM,uBAAuB,MAAM,eAAe,MAAM,KAAK;AACjF,UAAM,WAAW,MAAM,wBAAwB;AAAA,MAC7C;AAAA,MACA,eAAe,YAAY;AAAA,MAC3B,aAAa,YAAY;AAAA,MACzB,QAAQ,MAAM;AAAA,MACd,aAAa,MAAM;AAAA,MACnB,SAAS,MAAM;AAAA,MACf,OAAO,MAAM;AAAA,MACb,sBAAsB,MAAM;AAC1B,kCAA0B,MAAM,QAAQ,WAAW;AACnD,cAAM,uBAAuB,WAAW;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,QAAI,SAAS,SAAS,aAAa;AACjC,UAAI,SAAS,OAAO,WAAW,YAAY,eAAe;AACxD,cAAM;AAAA,UACJ,iBAAiB,MAAM,MAAM;AAAA,QAC/B;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB;AAEA,UAAM,YAAY,SAAS,MAAM;AAIjC,QAAI,UAAU;AAId,QAAI,kBAAkB;AACtB,QAAI;AACF,YAAM,MAAM,eAAe,EAAE,aAAa,UAAU,CAAC;AACrD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AACA,YAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QAChC;AAAA,QACA;AAAA,QACA;AAAA,QACA,gBAAgB,SAAS,MAAM;AAAA,MACjC,CAAC;AACD,wBAAkB;AAClB,YAAM,gBAAgB,MAAM;AAAA,QAC1B;AAAA,QACA,SAAS;AAAA,QACT;AAAA,QACA,OAAO,OAAO;AACZ,gBAAM,UAAU,MAAM,uBAAuB,MAAM,eAAe,MAAM,OAAO,EAAE;AACjF,gBAAM,UAAU,yBAAyB,MAAM,QAAQ,SAAS,OAAO,MAAM;AAC7E,gBAAM,YAAY,SAAS,MAAM;AACjC,iBAAO;AAAA,QACT;AAAA,MACF;AACA,gBAAU;AACV,UAAI,eAAe;AACjB,cAAM,gBAAgB,OAAO,QAAQ;AAAA,UACnC,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AACA,YAAM,MAAM,YAAY,aAAa,MAAM;AAC3C,aAAO;AAAA,IACT,SAAS,OAAgB;AACvB,UAAI,CAAC,SAAS;AACZ,YAAI,MAAM,kBAAkB;AAC1B,gBAAM,MAAM,iBAAiB,EAAE,aAAa,WAAW,gBAAgB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,QACjG;AACA,cAAM,QAAQ,WAAW,CAAC,qBAAqB,IAAI,SAAS,KAAK,CAAC,CAAC;AAAA,MACrE;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAEA,WAAS,yBACP,SACA,OACA,SACA,IACoB;AACpB,UAAM,OAAO;AAAA,MACX,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,mBAAmB,QAAQ;AAAA,MAC3B,eAAe,QAAQ;AAAA,MACvB,aAAa,QAAQ,gBACf,QAAQ,eAAe,SAAS,aAAa,QAAQ,cAAc,cAAc;AAAA,MACvF,cAAc,QAAQ,gBAAgB;AAAA,MACtC,QAAQ,OAAO,MAAM,MAAM;AAAA;AAAA;AAAA,MAG3B,gBAAgB,QAAQ,WAAW,aAAa,OAAO,MAAM,MAAM,IAAI;AAAA,MACvE,cAAc,MAAM;AAAA,MACpB,iBAAiB;AAAA,QACf,GAAI,QAAQ,gBAAgB,CAAC;AAAA,QAC7B,GAAI,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,cAAc,IAAI,CAAC;AAAA,MAC1E;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AACA,WAAO,KACH,QAAQ,OAAO,oBAAoB,EAAE,IAAI,GAAG,KAAK,CAAC,IAClD,QAAQ,OAAO,oBAAoB,IAAI;AAAA,EAC7C;AAEA,WAAS,eAAe,aAAsD;AAC5E,UAAM,WAAW,oBAAoB,YAAY,eAAe;AAChE,UAAM,EAAE,eAAe,GAAG,aAAa,IAAI;AAC3C,WAAO;AAAA,MACL,WAAW,sBAAsB,WAAW;AAAA,MAC5C,QAAQ,YAAY;AAAA,MACpB,GAAI,YAAY,eAAe,EAAE,cAAc,YAAY,aAAa,IAAI,CAAC;AAAA,MAC7E,GAAI,YAAY,cAAc,EAAE,aAAa,YAAY,YAAY,IAAI,CAAC;AAAA,MAC1E,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAa,IAAI,CAAC;AAAA,MAC/D,GAAI,iBAAiB,OAAO,kBAAkB,WAC1C,EAAE,cAAqE,IACvE,CAAC;AAAA,IACP;AAAA,EACF;AAEA,iBAAe,qBACb,aACA,OACA,OACe;AACf,UAAM,wBAAwB,oCAAoC;AAAA,MAChE,eAAe,YAAY;AAAA,MAC3B,WAAW,YAAY;AAAA,MACvB,aAAa,YAAY;AAAA,MACzB,QAAQ,YAAY;AAAA,MACpB,gBAAgB,YAAY;AAAA,MAC5B,UAAU,YAAY;AAAA,IACxB,CAAC;AACD,UAAM;AAAA,MACJ,YAAY;AAAA,MACZ;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,YAAY;AAAA,QACvB,mBAAmB,YAAY;AAAA,QAC/B,QAAQ,YAAY;AAAA,QACpB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,oBACP,WACA,OACqB;AACrB,QAAI,UAAU;AACd,QAAI,QAA8C;AAClD,QAAI,iBAAiB,QAAQ,QAAQ;AAErC,UAAM,WAAW,MAAM;AACrB,cAAQ,WAAW,MAAM;AACvB,yBAAiB,oCAAoC,IAAI,WAAW,OAAO,oBAAI,KAAK,CAAC,EAClF;AAAA,UACC,CAAC,cAAc;AACb,gBAAI,aAAa,CAAC,QAAS,UAAS;AAAA,UACtC;AAAA,UACA,MAAM;AACJ,gBAAI,CAAC,QAAS,UAAS;AAAA,UACzB;AAAA,QACF;AAAA,MACJ,GAAG,wBAAwB;AAAA,IAC7B;AACA,aAAS;AAET,WAAO,YAAY;AACjB,gBAAU;AACV,UAAI,MAAO,cAAa,KAAK;AAC7B,YAAM;AAAA,IACR;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,qBAAqB,OAA8G;AACvI,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,YAAM,gCAAgC;AAAA,QACpC,SAAS,MAAM;AAAA,QACf,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB;AAAA,QACA,UAAU,KAAK;AAAA,MACjB,CAAC;AACD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,6BAA6B,MAAM,aAAa,KAAK;AAE5F,YAAM,eAAmC;AAAA,QACvC,WAAW,MAAM;AAAA,QACjB,SAAS,MAAM;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB,eAAe,MAAM;AAAA,QACrB,cAAc,MAAM;AAAA,QACpB,aAAa,MAAM;AAAA,QACnB,YAAY,MAAM;AAAA,QAClB,WAAW,MAAM;AAAA,QACjB,UAAU,MAAM;AAAA,QAChB,cAAc,MAAM;AAAA,QACpB;AAAA,MACF;AAEA,UAAI,CAAC,MAAM,gBAAgB;AACzB,cAAM,UAAU,MAAM,QAAQ,cAAc,YAAY;AACxD,cAAM,cAAc,yBAAyB,IAAI,OAAO,OAAO;AAC/D,cAAM,GAAG,QAAQ,WAAW,EAAE,MAAM;AACpC,cAAM,qBAAqB,aAAa,OAAO,KAAK;AACpD,eAAO,EAAE,aAAa,QAAQ;AAAA,MAChC;AAEA,YAAM,eAAe,gCAAgC;AAAA,QACnD,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB;AAAA,MACF,CAAC;AACD,aAAO,MAAM;AACX,cAAM,WAAW,MAAM,iCAAiC,IAAI,cAAc,MAAM,aAAa,KAAK;AAClG,YAAI,UAAU,sBAAsB;AAClC,gBAAMA,eAAc,MAAM;AAAA,YACxB,GAAG,KAAK;AAAA,YACR;AAAA,YACA;AAAA,cACE,IAAI,SAAS;AAAA,cACb,gBAAgB,MAAM;AAAA,cACtB,UAAU,MAAM;AAAA,cAChB,WAAW;AAAA,YACb;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,cAAI,CAACA,cAAa;AAChB,kBAAM,IAAI,MAAM,yEAAyE;AAAA,UAC3F;AACA,iBAAO,EAAE,aAAAA,cAAa,SAAS,eAAeA,YAAW,EAAE;AAAA,QAC7D;AAEA,cAAM,YAAY,oBAAI,KAAK;AAC3B,cAAM,cAAc,IAAI,KAAK,UAAU,QAAQ,IAAI,iBAAiB;AACpE,cAAM,YAAY,WACd,MAAM,oCAAoC,IAAI,UAAU,OAAO,WAAW,WAAW,IACrF,MAAM,kCAAkC,IAAI,cAAc,MAAM,aAAa,OAAO,SAAS;AAEjG,YAAI,CAAC,WAAW;AACd,gBAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,mBAAmB,CAAC;AACvE;AAAA,QACF;AAEA,YAAI;AACJ,cAAM,gBAAgB,oBAAoB,WAAW,KAAK;AAC1D,YAAI;AACF,oBAAU,MAAM,QAAQ,cAAc,EAAE,GAAG,cAAc,gBAAgB,aAAa,CAAC;AAAA,QACzF,SAAS,OAAO;AACd,cAAI;AACF,kBAAM,oCAAoC,IAAI,WAAW,KAAK;AAAA,UAChE,SAAS,cAAc;AACrB,mBAAO,KAAK,0DAA0D;AAAA,cACpE,SAAS,UAAU;AAAA,cACnB,aAAa,MAAM;AAAA,cACnB,KAAK;AAAA,YACP,CAAC;AAAA,UACH;AACA,gBAAM;AAAA,QACR,UAAE;AACA,gBAAM,cAAc;AAAA,QACtB;AAEA,cAAM,gBAAgB,WAAW;AACjC,cAAM,cAAc,MAAM,GAAG,KAAK,EAAE,cAAc,OAAO,kBAAkB;AACzE,gBAAM,gBAAgB,MAAM,cAAc;AAAA,YACxC;AAAA,YACA;AAAA,cACE,IAAI,UAAU;AAAA,cACd,YAAY,UAAU;AAAA,cACtB,sBAAsB;AAAA,cACtB,gBAAgB,MAAM;AAAA,cACtB,UAAU,MAAM;AAAA,YAClB;AAAA,YACA;AAAA,cACE,sBAAsB;AAAA,cACtB,YAAY;AAAA,cACZ,WAAW;AAAA,cACX,WAAW,oBAAI,KAAK;AAAA,YACtB;AAAA,UACF;AACA,cAAI,kBAAkB,EAAG,QAAO;AAChC,gBAAM,UAAU,yBAAyB,eAAe,OAAO,SAAS,aAAa;AACrF,gBAAM,cAAc,QAAQ,OAAO,EAAE,MAAM;AAC3C,iBAAO;AAAA,QACT,CAAC;AAED,YAAI,CAAC,aAAa;AAChB;AAAA,QACF;AACA,cAAM,qBAAqB,aAAa,OAAO,KAAK;AACpD,eAAO,EAAE,aAAa,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,MAAM,eACJ,eACA,QACA,OACA,aACwB;AACxB,UAAI,gBAA+B;AACnC,UAAI,iBAAiB;AACrB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,KAAK;AAAA,QAClC;AAAA,QACA,sBAAsB,CAAC,gBAAgB;AAAE,uCAA6B,aAAa,MAAM;AAAA,QAAE;AAAA,QAC3F,cAAc,OAAO,EAAE,aAAa,UAAU,MAAM;AAClD,gBAAM,uBAAuB,iBAAiB,YAAY,cAAc;AACxE,0BAAgB,MAAM,qBAAqB,IAAI,EAAE,aAAa,WAAW,QAAQ,MAAM,CAAC;AAGxF,cAAI,WAAW,UAAa,uBAAuB,IAAI;AACrD,6BAAiB,OAAO,kBAAkB,aAAa,CAAC;AAAA,UAC1D;AAAA,QACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAOA,kBAAkB,OAAO,EAAE,aAAa,WAAW,gBAAgB,MAAM;AACvE,cAAI,kBAAkB,KAAM;AAC5B,cAAI,iBAAiB;AACnB,kBAAM;AAAA,cACJ,YAAY;AAAA,cACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,cAC7E,YAAY;AAAA,cACZ;AAAA,cACA;AAAA,cACA,EAAE,aAAa,UAAU,aAAa,gBAAgB,kBAAkB,aAAa,EAAE;AAAA,YACzF;AACA;AAAA,UACF;AACA,gBAAM,WAAW,MAAM,qBAAqB,IAAI,EAAE,eAAe,WAAW,eAAe,MAAM,CAAC;AAClG,cAAI,SAAU;AACd,gBAAM;AAAA,YACJ,YAAY;AAAA,YACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,YAC7E,YAAY;AAAA,YACZ;AAAA,YACA;AAAA,YACA,EAAE,aAAa,UAAU,aAAa,gBAAgB,kBAAkB,aAAa,EAAE;AAAA,UACzF;AAAA,QACF;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,QAAQ;AAAA,UACjF,WAAW,sBAAsB,WAAW;AAAA,UAC5C,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,CAAC,aAAa,WAAW;AACpC,sBAAY,kBAAkB;AAAA,YAC5B,GAAG,oBAAoB,YAAY,eAAe;AAAA,YAClD,eAAe,OAAO;AAAA,UACxB;AACA,cAAI,kBAAkB,KAAM,sBAAqB,aAAa,eAAe,OAAO,cAAc;AAAA,QACpG;AAAA,QACA,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,OAAO,QAAQ,gBAAgB,OAAO,eAAe;AAAA,QACzF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,cACJ,eACA,QACA,QACA,OACA,aACuB;AACvB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,MAAM,QAAQ,UAAU,KAAK;AAAA,QAC1D;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,OAAO;AAAA,UAChF,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,CAAC,aAAa,WAAW;AACpC,sBAAY,kBAAkB,OAAO;AACrC,sBAAY,kBAAkB;AAAA,YAC5B,GAAG,oBAAoB,YAAY,eAAe;AAAA,YAClD,cAAc,OAAO;AAAA,UACvB;AAAA,QACF;AAAA,QACA,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,UAAU,MAAM,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS;AAAA,QACrG;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,cACJ,eACA,QACA,OACA,aACuB;AACvB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,KAAK;AAAA,QAClC;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,OAAO;AAAA,UAChF,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,MAAM;AAAA,QAAC;AAAA,QACpB,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,OAAO,OAAO;AAAA,QAClD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,iBAAiB,eAAuB,OAAoF;AAChI,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,UAAI;AACJ,UAAI;AACF,cAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,UACrC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC/E;AACA,iBAAS,MAAM,QAAQ,UAAU;AAAA,UAC/B,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI;AACF,gBAAM,kBAAkB,aAAa,oBAAI,KAAK,CAAC;AAAA,QACjD,SAAS,YAAY;AACnB,iBAAO,KAAK,8DAA8D;AAAA,YACxE,eAAe,YAAY;AAAA,YAC3B,aAAa,YAAY;AAAA,YACzB,KAAK;AAAA,UACP,CAAC;AAAA,QACH;AACA,cAAM;AAAA,MACR;AAEA,YAAM,WAAW,oBAAI,KAAK;AAC1B,YAAM,oBAAoB,OAAO,WAAW,YAAY,iBACnD,kBAAkB,YAAY,eAAuC,OAAO,MAAM;AACvF,UAAI,mBAAmB;AACrB,cAAM,iBAAiB,YAAY;AACnC,oBAAY,gBAAgB,OAAO;AACnC,sCAA8B,aAAa,OAAO,MAAM;AACxD,oBAAY,gBAAgB,OAAO;AACnC,oBAAY,kBAAkB,EAAE,GAAG,oBAAoB,YAAY,eAAe,GAAG,cAAc,OAAO,gBAAgB,KAAK;AAC/H,oBAAY,eAAe;AAC3B,cAAM,GAAG,MAAM;AACf,cAAM,gBAAgB,OAAO,QAAQ;AAAA,UACnC,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AACD,cAAM;AAAA,UACJ,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA;AAAA,YACE;AAAA,YACA,YAAY,OAAO;AAAA,UACrB;AAAA,QACF;AAAA,MACF,OAAO;AACL,cAAM,kBAAkB,aAAa,QAAQ;AAAA,MAC/C;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,sBAAsB,eAAuB,QAUhD,OAAoE;AACrE,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,gBAAgB,YAAY;AAClC,YAAM,gBAAgB,kBAAkB,eAAe,OAAO,aAAa;AAC3E,YAAM,oBAAoB,iBAAiB,OAAO,kBAAkB;AACpE,YAAM,iBAAiB,YAAY;AACnC,UAAI,mBAAmB;AACrB,oBAAY,gBAAgB,OAAO;AACnC,sCAA8B,aAAa,OAAO,aAAa;AAAA,MACjE;AACA,UAAI,OAAO,gBAAgB;AACzB,oBAAY,gBAAgB,OAAO;AAAA,MACrC;AACA,UAAI,OAAO,cAAc;AACvB,oBAAY,kBAAkB,EAAE,GAAG,oBAAoB,YAAY,eAAe,GAAG,GAAG,OAAO,aAAa;AAAA,MAC9G;AACA,UAAI,OAAO,cAAc;AACvB,cAAM,aAAa,eAAe,YAAY,UAAU;AACxD,mBAAW,KAAK;AAAA,UACd,WAAW,OAAO,aAAa;AAAA,UAC/B,YAAY,OAAO,aAAa,eAAc,oBAAI,KAAK,GAAE,YAAY;AAAA,UACrE,gBAAgB,OAAO,aAAa;AAAA,UACpC,eAAe,OAAO;AAAA,UACtB,WAAW,OAAO,aAAa;AAAA,QACjC,CAAC;AACD,oBAAY,aAAa;AAAA,MAC3B;AACA,kBAAY,gBAAgB,oBAAI,KAAK;AACrC,YAAM,GAAG,MAAM;AACf,UAAI,mBAAmB;AACrB,cAAM,gBAAgB,OAAO,eAAe;AAAA,UAC1C,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AACA,YAAM;AAAA,QACJ,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC7E,YAAY;AAAA,QACZ,oBAAoB,SAAS;AAAA,QAC7B,oBAAoB,6CAA6C;AAAA,QACjE;AAAA,UACE;AAAA,UACA,YAAY,OAAO;AAAA,UACnB,gBAAgB,OAAO,kBAAkB;AAAA,UACzC,WAAW,OAAO,cAAc,aAAa;AAAA,UAC7C,gBAAgB,OAAO,cAAc,kBAAkB;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,gBAAgB,IAAY,OAAyF;AACzH,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,2BACJ,mBACA,OACA,aACoC;AACpC,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,UACX,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,iCAAiC,OAKL;AAChC,YAAM,QAAiC;AAAA,QACrC,eAAe,EAAE,KAAK,CAAC,WAAW,cAAc,oBAAoB,EAAE;AAAA,QACtE,WAAW;AAAA,MACb;AACA,UAAI,OAAO,eAAgB,OAAM,iBAAiB,MAAM;AACxD,UAAI,OAAO,SAAU,OAAM,WAAW,MAAM;AAC5C,UAAI,OAAO,YAAa,OAAM,cAAc,MAAM;AAElD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,SAAS,EAAE,cAAc,WAAW,iBAAiB,WAAW,WAAW,IAAI;AAAA,UAC/E,OAAO,OAAO,SAAS;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport { LockMode, QueryOrder } from '@mikro-orm/core'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  getGatewayAdapter,\n  type CreateSessionInput,\n  type CreateSessionResult,\n  type CaptureResult,\n  type RefundResult,\n  type CancelResult,\n  type GatewayAdapter,\n  type GatewayPaymentStatus,\n  type PaymentGatewayPresentationRequest,\n  type PaymentOrderTotalResolver,\n  type UnifiedPaymentStatus,\n} from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport type { IntegrationStateService } from '../../integrations/lib/state-service'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport { conflict, CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { GatewayPaymentOperation, GatewaySessionInitialization, GatewayTransaction } from '../data/entities'\nimport { canApplyManualAction, isValidTransition, resolveImpliedCaptureStatus, type ManualGatewayAction } from './status-machine'\nimport { emitPaymentGatewayEvent } from '../events'\nimport { readGatewayMetadata, readWebhookLog } from './transaction-fields'\nimport { reconcileSessionAmountWithOrder } from './order-amount-reconciliation'\nimport {\n  alignCapturedAmountWithStatus,\n  assertCaptureWithinRemaining,\n  formatAmountUnits,\n  parseAmountUnits,\n  releaseCaptureAmount,\n  reserveCaptureAmount,\n  settleCapturedAmount,\n} from './capture-ledger'\nimport {\n  completePaymentOperation,\n  failPaymentOperation,\n  preparePaymentOperation,\n} from './payment-operation-idempotency'\nimport {\n  buildPaymentSessionOperationKey,\n  claimPaymentSessionInitialization,\n  findPaymentSessionInitialization,\n  reclaimPaymentSessionInitialization,\n  refreshPaymentSessionInitialization,\n  releasePaymentSessionInitialization,\n} from './session-idempotency'\n\nconst PAYMENT_SESSION_CLAIM_STALE_MS = 30_000\nconst PAYMENT_SESSION_WAIT_INTERVAL_MS = 25\nconst logger = createLogger('payment_gateways').child({ component: 'gateway-service' })\n\nfunction assertManualActionAllowed(action: ManualGatewayAction, transaction: GatewayTransaction): void {\n  const current = transaction.unifiedStatus as UnifiedPaymentStatus\n  if (!canApplyManualAction(action, current)) {\n    throw conflict(`Cannot ${action} a payment in status \"${current}\"`)\n  }\n}\n\nfunction applyAdapterResultStatus(\n  action: ManualGatewayAction,\n  transaction: GatewayTransaction,\n  resultStatus: UnifiedPaymentStatus,\n): boolean {\n  const current = transaction.unifiedStatus as UnifiedPaymentStatus\n  if (resultStatus === current) return false\n  if (isValidTransition(resultStatus, current)) return false\n  if (!isValidTransition(current, resultStatus)) {\n    throw conflict(\n      `Gateway returned status \"${resultStatus}\" which is not a valid transition from \"${current}\" for ${action}`,\n    )\n  }\n  transaction.unifiedStatus = resultStatus\n  return true\n}\n\nexport interface PaymentGatewayServiceDeps {\n  em: EntityManager\n  integrationCredentialsService: CredentialsService\n  integrationStateService?: IntegrationStateService\n  integrationLogService?: IntegrationLogService\n  /**\n   * Optional seam supplied by the module that owns orders (`sales` by default).\n   * When absent, session amounts cannot be reconciled and are accepted as-is.\n   */\n  paymentOrderTotalResolver?: PaymentOrderTotalResolver | null\n  sessionClaimOptions?: {\n    staleAfterMs?: number\n    heartbeatIntervalMs?: number\n    pollIntervalMs?: number\n  }\n}\n\nexport interface CreatePaymentSessionInput {\n  providerKey: string\n  paymentId: string\n  idempotencyKey?: string\n  orderId?: string\n  amount: number\n  currencyCode: string\n  captureMethod?: 'automatic' | 'manual'\n  paymentTypes?: string[]\n  description?: string\n  successUrl?: string\n  cancelUrl?: string\n  metadata?: Record<string, unknown>\n  presentation?: PaymentGatewayPresentationRequest\n  organizationId: string\n  tenantId: string\n}\n\nexport function createPaymentGatewayService(deps: PaymentGatewayServiceDeps) {\n  const { em, integrationCredentialsService, integrationLogService } = deps\n  const claimStaleAfterMs = Math.max(1, deps.sessionClaimOptions?.staleAfterMs ?? PAYMENT_SESSION_CLAIM_STALE_MS)\n  const claimHeartbeatIntervalMs = Math.max(\n    1,\n    deps.sessionClaimOptions?.heartbeatIntervalMs ?? Math.floor(claimStaleAfterMs / 3),\n  )\n  const claimPollIntervalMs = Math.max(1, deps.sessionClaimOptions?.pollIntervalMs ?? PAYMENT_SESSION_WAIT_INTERVAL_MS)\n\n  async function findTransactionOrThrow(\n    transactionId: string,\n    scope: { organizationId: string; tenantId: string },\n    targetEm: EntityManager = em,\n    options?: { lockMode: LockMode.PESSIMISTIC_WRITE },\n  ): Promise<GatewayTransaction> {\n    const transaction = await findOneWithDecryption(\n      targetEm,\n      GatewayTransaction,\n      {\n        id: transactionId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      options,\n      scope,\n    )\n    if (!transaction) {\n      throw new Error('Transaction not found')\n    }\n    return transaction\n  }\n\n  function readProviderSessionId(transaction: GatewayTransaction): string {\n    if (typeof transaction.providerSessionId === 'string' && transaction.providerSessionId.trim().length > 0) {\n      return transaction.providerSessionId\n    }\n    throw new Error('Transaction is missing provider session id')\n  }\n\n  async function emitStatusEvent(status: UnifiedPaymentStatus, payload: Record<string, unknown>) {\n    type PaymentGatewayEventId = Parameters<typeof emitPaymentGatewayEvent>[0]\n    const eventMap: Partial<Record<UnifiedPaymentStatus, PaymentGatewayEventId>> = {\n      authorized: 'payment_gateways.payment.authorized',\n      captured: 'payment_gateways.payment.captured',\n      failed: 'payment_gateways.payment.failed',\n      refunded: 'payment_gateways.payment.refunded',\n      cancelled: 'payment_gateways.payment.cancelled',\n    }\n    const eventId = eventMap[status]\n    if (!eventId) return\n    await emitPaymentGatewayEvent(eventId, payload)\n  }\n\n  async function writeTransactionLog(\n    providerKey: string,\n    scope: { organizationId: string; tenantId: string },\n    transactionId: string,\n    level: 'info' | 'warn' | 'error',\n    message: string,\n    payload?: Record<string, unknown> | null,\n    code?: string | null,\n  ) {\n    if (!integrationLogService) return\n    await integrationLogService.write({\n      integrationId: `gateway_${providerKey}`,\n      scopeEntityType: 'payment_transaction',\n      scopeEntityId: transactionId,\n      level,\n      message,\n      code,\n      payload: payload ?? null,\n    }, scope)\n  }\n\n  async function stampLastPolledAt(transaction: GatewayTransaction, polledAt: Date): Promise<void> {\n    await em.nativeUpdate(\n      GatewayTransaction,\n      { id: transaction.id, organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      { lastPolledAt: polledAt },\n    )\n  }\n\n  async function resolveAdapterAndCredentials(providerKey: string, scope: { organizationId: string; tenantId: string }) {\n    const integrationId = `gateway_${providerKey}`\n    const selectedVersion = deps.integrationStateService\n      ? await deps.integrationStateService.resolveApiVersion(integrationId, scope)\n      : undefined\n    const adapter = getGatewayAdapter(providerKey, selectedVersion)\n    if (!adapter) {\n      const message = selectedVersion\n        ? `No gateway adapter registered for provider: ${providerKey} (version: ${selectedVersion})`\n        : `No gateway adapter registered for provider: ${providerKey}`\n      throw new CrudHttpError(422, { error: message })\n    }\n    const credentials = await integrationCredentialsService.resolve(integrationId, scope) ?? {}\n\n    return { adapter, credentials }\n  }\n\n  type ManualOperationResult = CaptureResult | RefundResult | CancelResult\n\n  async function executeManualOperation<TResult extends ManualOperationResult>(input: {\n    action: ManualGatewayAction\n    transactionId: string\n    operationId?: string\n    payload: Record<string, unknown>\n    scope: { organizationId: string; tenantId: string }\n    assertInitialAllowed?: (transaction: GatewayTransaction) => void\n    beforeInvoke?: (context: { transaction: GatewayTransaction; operation: GatewayPaymentOperation }) => Promise<void>\n    releaseOnFailure?: (context: {\n      transaction: GatewayTransaction\n      operation: GatewayPaymentOperation\n      providerInvoked: boolean\n    }) => Promise<void>\n    invoke: (context: {\n      adapter: GatewayAdapter\n      credentials: Record<string, unknown>\n      transaction: GatewayTransaction\n      idempotencyKey: string\n    }) => Promise<TResult>\n    applyResult: (transaction: GatewayTransaction, result: TResult) => void\n    afterCommit: (transaction: GatewayTransaction, result: TResult) => Promise<void>\n  }): Promise<TResult> {\n    const transaction = await findTransactionOrThrow(input.transactionId, input.scope)\n    const prepared = await preparePaymentOperation({\n      em,\n      transactionId: transaction.id,\n      providerKey: transaction.providerKey,\n      action: input.action,\n      operationId: input.operationId,\n      payload: input.payload,\n      scope: input.scope,\n      assertInitialAllowed: () => {\n        assertManualActionAllowed(input.action, transaction)\n        input.assertInitialAllowed?.(transaction)\n      },\n    })\n    if (prepared.kind === 'completed') {\n      if (prepared.result.status !== transaction.unifiedStatus) {\n        throw conflict(\n          `Cannot replay ${input.action} because the payment status has changed since the operation completed`,\n        )\n      }\n      return prepared.result as unknown as TResult\n    }\n\n    const operation = prepared.claim.record\n    // Everything after this flips to true is post-settlement: the provider moved the money and the\n    // completion transaction committed it. A later event or logging failure must not undo either,\n    // so the failure path below only runs while the operation can still be rolled back.\n    let settled = false\n    // Flips once the provider call returned, so the failure path can tell \"the provider never\n    // moved the money\" from \"the provider moved it and only our bookkeeping failed\" \u2014 the two\n    // cases need opposite rollback decisions.\n    let providerInvoked = false\n    try {\n      await input.beforeInvoke?.({ transaction, operation })\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n      const result = await input.invoke({\n        adapter,\n        credentials,\n        transaction,\n        idempotencyKey: prepared.claim.providerIdempotencyKey,\n      })\n      providerInvoked = true\n      const statusChanged = await completePaymentOperation(\n        em,\n        prepared.claim,\n        result as unknown as Record<string, unknown>,\n        async (tx) => {\n          const current = await findTransactionOrThrow(input.transactionId, input.scope, tx)\n          const changed = applyAdapterResultStatus(input.action, current, result.status)\n          input.applyResult(current, result)\n          return changed\n        },\n      )\n      settled = true\n      if (statusChanged) {\n        await emitStatusEvent(result.status, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n      }\n      await input.afterCommit(transaction, result)\n      return result\n    } catch (error: unknown) {\n      if (!settled) {\n        if (input.releaseOnFailure) {\n          await input.releaseOnFailure({ transaction, operation, providerInvoked }).catch(() => undefined)\n        }\n        await Promise.allSettled([failPaymentOperation(em, prepared.claim)])\n      }\n      throw error\n    }\n  }\n\n  function createGatewayTransaction(\n    manager: EntityManager,\n    input: CreatePaymentSessionInput,\n    session: CreateSessionResult,\n    id?: string,\n  ): GatewayTransaction {\n    const data = {\n      paymentId: input.paymentId,\n      providerKey: input.providerKey,\n      providerSessionId: session.sessionId,\n      unifiedStatus: session.status,\n      redirectUrl: session.redirectUrl\n        ?? (session.clientSession?.type === 'redirect' ? session.clientSession.redirectUrl : null),\n      clientSecret: session.clientSecret ?? null,\n      amount: String(input.amount),\n      // An automatic-capture session comes back already captured, so the ledger has to start\n      // at the full amount \u2014 otherwise a later manual capture would look like the first one.\n      capturedAmount: session.status === 'captured' ? String(input.amount) : '0',\n      currencyCode: input.currencyCode,\n      gatewayMetadata: {\n        ...(session.providerData ?? {}),\n        ...(session.clientSession ? { clientSession: session.clientSession } : {}),\n      },\n      organizationId: input.organizationId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    }\n    return id\n      ? manager.create(GatewayTransaction, { id, ...data })\n      : manager.create(GatewayTransaction, data)\n  }\n\n  function restoreSession(transaction: GatewayTransaction): CreateSessionResult {\n    const metadata = readGatewayMetadata(transaction.gatewayMetadata)\n    const { clientSession, ...providerData } = metadata\n    return {\n      sessionId: readProviderSessionId(transaction),\n      status: transaction.unifiedStatus as UnifiedPaymentStatus,\n      ...(transaction.clientSecret ? { clientSecret: transaction.clientSecret } : {}),\n      ...(transaction.redirectUrl ? { redirectUrl: transaction.redirectUrl } : {}),\n      ...(Object.keys(providerData).length > 0 ? { providerData } : {}),\n      ...(clientSession && typeof clientSession === 'object'\n        ? { clientSession: clientSession as CreateSessionResult['clientSession'] }\n        : {}),\n    }\n  }\n\n  async function recordCreatedSession(\n    transaction: GatewayTransaction,\n    input: CreatePaymentSessionInput,\n    scope: { organizationId: string; tenantId: string },\n  ): Promise<void> {\n    await emitPaymentGatewayEvent('payment_gateways.session.created', {\n      transactionId: transaction.id,\n      paymentId: transaction.paymentId,\n      providerKey: transaction.providerKey,\n      status: transaction.unifiedStatus,\n      organizationId: transaction.organizationId,\n      tenantId: transaction.tenantId,\n    })\n    await writeTransactionLog(\n      transaction.providerKey,\n      scope,\n      transaction.id,\n      'info',\n      'Payment session created',\n      {\n        paymentId: transaction.paymentId,\n        providerSessionId: transaction.providerSessionId,\n        status: transaction.unifiedStatus,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n      },\n    )\n  }\n\n  function startClaimHeartbeat(\n    ownership: { id: string; claimToken: string },\n    scope: { organizationId: string; tenantId: string },\n  ): () => Promise<void> {\n    let stopped = false\n    let timer: ReturnType<typeof setTimeout> | null = null\n    let pendingRefresh = Promise.resolve()\n\n    const schedule = () => {\n      timer = setTimeout(() => {\n        pendingRefresh = refreshPaymentSessionInitialization(em, ownership, scope, new Date())\n          .then(\n            (refreshed) => {\n              if (refreshed && !stopped) schedule()\n            },\n            () => {\n              if (!stopped) schedule()\n            },\n          )\n      }, claimHeartbeatIntervalMs)\n    }\n    schedule()\n\n    return async () => {\n      stopped = true\n      if (timer) clearTimeout(timer)\n      await pendingRefresh\n    }\n  }\n\n  return {\n    async createPaymentSession(input: CreatePaymentSessionInput): Promise<{ transaction: GatewayTransaction; session: CreateSessionResult }> {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      await reconcileSessionAmountWithOrder({\n        orderId: input.orderId,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n        scope,\n        resolver: deps.paymentOrderTotalResolver,\n      })\n      const { adapter, credentials } = await resolveAdapterAndCredentials(input.providerKey, scope)\n\n      const sessionInput: CreateSessionInput = {\n        paymentId: input.paymentId,\n        orderId: input.orderId,\n        idempotencyKey: input.idempotencyKey,\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n        captureMethod: input.captureMethod,\n        paymentTypes: input.paymentTypes,\n        description: input.description,\n        successUrl: input.successUrl,\n        cancelUrl: input.cancelUrl,\n        metadata: input.metadata,\n        presentation: input.presentation,\n        credentials,\n      }\n\n      if (!input.idempotencyKey) {\n        const session = await adapter.createSession(sessionInput)\n        const transaction = createGatewayTransaction(em, input, session)\n        await em.persist(transaction).flush()\n        await recordCreatedSession(transaction, input, scope)\n        return { transaction, session }\n      }\n\n      const operationKey = buildPaymentSessionOperationKey({\n        idempotencyKey: input.idempotencyKey,\n        paymentId: input.paymentId,\n        providerKey: input.providerKey,\n        scope,\n      })\n      while (true) {\n        const existing = await findPaymentSessionInitialization(em, operationKey, input.providerKey, scope)\n        if (existing?.gatewayTransactionId) {\n          const transaction = await findOneWithDecryption(\n            em.fork(),\n            GatewayTransaction,\n            {\n              id: existing.gatewayTransactionId,\n              organizationId: scope.organizationId,\n              tenantId: scope.tenantId,\n              deletedAt: null,\n            },\n            undefined,\n            scope,\n          )\n          if (!transaction) {\n            throw new Error('[internal] Completed payment session is missing its gateway transaction')\n          }\n          return { transaction, session: restoreSession(transaction) }\n        }\n\n        const claimedAt = new Date()\n        const staleBefore = new Date(claimedAt.getTime() - claimStaleAfterMs)\n        const ownership = existing\n          ? await reclaimPaymentSessionInitialization(em, existing, scope, claimedAt, staleBefore)\n          : await claimPaymentSessionInitialization(em, operationKey, input.providerKey, scope, claimedAt)\n\n        if (!ownership) {\n          await new Promise((resolve) => setTimeout(resolve, claimPollIntervalMs))\n          continue\n        }\n\n        let session: CreateSessionResult\n        const stopHeartbeat = startClaimHeartbeat(ownership, scope)\n        try {\n          session = await adapter.createSession({ ...sessionInput, idempotencyKey: operationKey })\n        } catch (error) {\n          try {\n            await releasePaymentSessionInitialization(em, ownership, scope)\n          } catch (releaseError) {\n            logger.warn('Failed to release payment session initialization claim', {\n              claimId: ownership.id,\n              providerKey: input.providerKey,\n              err: releaseError,\n            })\n          }\n          throw error\n        } finally {\n          await stopHeartbeat()\n        }\n\n        const transactionId = randomUUID()\n        const transaction = await em.fork().transactional(async (transactionEm) => {\n          const finalizedRows = await transactionEm.nativeUpdate(\n            GatewaySessionInitialization,\n            {\n              id: ownership.id,\n              claimToken: ownership.claimToken,\n              gatewayTransactionId: null,\n              organizationId: scope.organizationId,\n              tenantId: scope.tenantId,\n            },\n            {\n              gatewayTransactionId: transactionId,\n              claimToken: null,\n              claimedAt: null,\n              updatedAt: new Date(),\n            },\n          )\n          if (finalizedRows === 0) return null\n          const created = createGatewayTransaction(transactionEm, input, session, transactionId)\n          await transactionEm.persist(created).flush()\n          return created\n        })\n\n        if (!transaction) {\n          continue\n        }\n        await recordCreatedSession(transaction, input, scope)\n        return { transaction, session }\n      }\n    },\n\n    async capturePayment(\n      transactionId: string,\n      amount: number | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<CaptureResult> {\n      let reservedUnits: bigint | null = null\n      let providerAmount = amount\n      return executeManualOperation({\n        action: 'capture',\n        transactionId,\n        operationId,\n        payload: { amount: amount ?? null },\n        scope,\n        assertInitialAllowed: (transaction) => { assertCaptureWithinRemaining(transaction, amount) },\n        beforeInvoke: async ({ transaction, operation }) => {\n          const alreadyCapturedUnits = parseAmountUnits(transaction.capturedAmount)\n          reservedUnits = await reserveCaptureAmount(em, { transaction, operation, amount, scope })\n          // \"Capture the rest\" has to name the remaining amount once part of the authorization is\n          // already captured, otherwise the provider would capture the full amount a second time.\n          if (amount === undefined && alreadyCapturedUnits > 0n) {\n            providerAmount = Number(formatAmountUnits(reservedUnits))\n          }\n        },\n        // The slice goes back only while the provider has not been called yet. Once the capture\n        // call returned, the money may already have moved and only the completion transaction\n        // failed, so releasing would reopen the authorization for a fresh operation id and allow an\n        // over-capture. Holding the reservation is the conservative outcome: a retry of this same\n        // operation id reuses both the reservation and the provider idempotency key, so the provider\n        // itself collapses the duplicate.\n        releaseOnFailure: async ({ transaction, operation, providerInvoked }) => {\n          if (reservedUnits === null) return\n          if (providerInvoked) {\n            await writeTransactionLog(\n              transaction.providerKey,\n              { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n              transaction.id,\n              'warn',\n              'Capture reservation stays outstanding because the provider call already returned',\n              { operationId: operation.operationId, reservedAmount: formatAmountUnits(reservedUnits) },\n            )\n            return\n          }\n          const released = await releaseCaptureAmount(em, { transactionId, operation, reservedUnits, scope })\n          if (released) return\n          await writeTransactionLog(\n            transaction.providerKey,\n            { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n            transaction.id,\n            'warn',\n            'Capture reservation stays outstanding after a failed capture',\n            { operationId: operation.operationId, reservedAmount: formatAmountUnits(reservedUnits) },\n          )\n        },\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.capture({\n          sessionId: readProviderSessionId(transaction),\n          amount: providerAmount,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: (transaction, result) => {\n          transaction.gatewayMetadata = {\n            ...readGatewayMetadata(transaction.gatewayMetadata),\n            captureResult: result.providerData,\n          }\n          if (reservedUnits !== null) settleCapturedAmount(transaction, reservedUnits, result.capturedAmount)\n        },\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment captured',\n          { amount: amount ?? null, status: result.status, capturedAmount: result.capturedAmount },\n        ),\n      })\n    },\n\n    async refundPayment(\n      transactionId: string,\n      amount: number | undefined,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<RefundResult> {\n      return executeManualOperation({\n        action: 'refund',\n        transactionId,\n        operationId,\n        payload: { amount: amount ?? null, reason: reason ?? null },\n        scope,\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.refund({\n          sessionId: readProviderSessionId(transaction),\n          amount,\n          reason,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: (transaction, result) => {\n          transaction.gatewayRefundId = result.refundId\n          transaction.gatewayMetadata = {\n            ...readGatewayMetadata(transaction.gatewayMetadata),\n            refundResult: result.providerData,\n          }\n        },\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment refunded',\n          { amount: amount ?? null, reason: reason ?? null, status: result.status, refundId: result.refundId },\n        ),\n      })\n    },\n\n    async cancelPayment(\n      transactionId: string,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<CancelResult> {\n      return executeManualOperation({\n        action: 'cancel',\n        transactionId,\n        operationId,\n        payload: { reason: reason ?? null },\n        scope,\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.cancel({\n          sessionId: readProviderSessionId(transaction),\n          reason,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: () => {},\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment cancelled',\n          { reason: reason ?? null, status: result.status },\n        ),\n      })\n    },\n\n    async getPaymentStatus(transactionId: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayPaymentStatus> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      let status: GatewayPaymentStatus\n      try {\n        const { adapter, credentials } = await resolveAdapterAndCredentials(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        )\n        status = await adapter.getStatus({\n          sessionId: readProviderSessionId(transaction),\n          credentials,\n        })\n      } catch (error) {\n        try {\n          await stampLastPolledAt(transaction, new Date())\n        } catch (stampError) {\n          logger.warn('Failed to record last poll time after a failed status read', {\n            transactionId: transaction.id,\n            providerKey: transaction.providerKey,\n            err: stampError,\n          })\n        }\n        throw error\n      }\n\n      const polledAt = new Date()\n      const shouldApplyStatus = status.status !== transaction.unifiedStatus\n        && isValidTransition(transaction.unifiedStatus as UnifiedPaymentStatus, status.status)\n      if (shouldApplyStatus) {\n        const previousStatus = transaction.unifiedStatus\n        transaction.unifiedStatus = status.status\n        alignCapturedAmountWithStatus(transaction, status.status)\n        transaction.gatewayStatus = status.status\n        transaction.gatewayMetadata = { ...readGatewayMetadata(transaction.gatewayMetadata), statusResult: status.providerData ?? null }\n        transaction.lastPolledAt = polledAt\n        await em.flush()\n        await emitStatusEvent(status.status, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          previousStatus,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n        await writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment status updated by poller',\n          {\n            previousStatus,\n            nextStatus: status.status,\n          },\n        )\n      } else {\n        await stampLastPolledAt(transaction, polledAt)\n      }\n\n      return status\n    },\n\n    async syncTransactionStatus(transactionId: string, update: {\n      unifiedStatus: UnifiedPaymentStatus\n      providerStatus?: string\n      providerData?: Record<string, unknown>\n      webhookEvent?: {\n        eventType: string\n        idempotencyKey: string\n        processed: boolean\n        receivedAt?: string\n      }\n    }, scope: { organizationId: string; tenantId: string }): Promise<void> {\n      const { transaction, previousStatus, impliedCaptureStatus, shouldApplyStatus } = await em.fork().transactional(async (tx) => {\n        const locked = await findTransactionOrThrow(transactionId, scope, tx, { lockMode: LockMode.PESSIMISTIC_WRITE })\n        const currentStatus = locked.unifiedStatus as UnifiedPaymentStatus\n        const implied = resolveImpliedCaptureStatus(currentStatus, update.unifiedStatus)\n        const canTransition = isValidTransition(currentStatus, update.unifiedStatus) || implied !== null\n        const applies = canTransition && update.unifiedStatus !== currentStatus\n        if (applies) {\n          if (implied) alignCapturedAmountWithStatus(locked, implied)\n          locked.unifiedStatus = update.unifiedStatus\n          alignCapturedAmountWithStatus(locked, update.unifiedStatus)\n        }\n        if (update.providerStatus) {\n          locked.gatewayStatus = update.providerStatus\n        }\n        if (update.providerData) {\n          locked.gatewayMetadata = { ...readGatewayMetadata(locked.gatewayMetadata), ...update.providerData }\n        }\n        if (update.webhookEvent) {\n          const webhookLog = readWebhookLog(locked.webhookLog)\n          webhookLog.push({\n            eventType: update.webhookEvent.eventType,\n            receivedAt: update.webhookEvent.receivedAt ?? new Date().toISOString(),\n            idempotencyKey: update.webhookEvent.idempotencyKey,\n            unifiedStatus: update.unifiedStatus,\n            processed: update.webhookEvent.processed,\n          })\n          locked.webhookLog = webhookLog\n        }\n        locked.lastWebhookAt = new Date()\n        await tx.flush()\n        return {\n          transaction: locked,\n          previousStatus: currentStatus,\n          impliedCaptureStatus: applies ? implied : null,\n          shouldApplyStatus: applies,\n        }\n      })\n      if (shouldApplyStatus) {\n        const eventPayload = {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        }\n        if (impliedCaptureStatus) {\n          await emitStatusEvent(impliedCaptureStatus, { ...eventPayload, previousStatus })\n        }\n        await emitStatusEvent(update.unifiedStatus, {\n          ...eventPayload,\n          previousStatus: impliedCaptureStatus ?? previousStatus,\n        })\n      }\n      await writeTransactionLog(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        transaction.id,\n        shouldApplyStatus ? 'info' : 'warn',\n        shouldApplyStatus ? 'Payment status synchronized from webhook' : 'Webhook received with no status transition',\n        {\n          previousStatus,\n          ...(impliedCaptureStatus ? { impliedStatus: impliedCaptureStatus } : {}),\n          nextStatus: update.unifiedStatus,\n          providerStatus: update.providerStatus ?? null,\n          eventType: update.webhookEvent?.eventType ?? null,\n          idempotencyKey: update.webhookEvent?.idempotencyKey ?? null,\n        },\n      )\n    },\n\n    async findTransaction(id: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          id,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async findTransactionBySessionId(\n      providerSessionId: string,\n      scope: { organizationId: string; tenantId: string },\n      providerKey?: string,\n    ): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          providerSessionId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n          ...(providerKey ? { providerKey } : {}),\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async listTransactionsForStatusPolling(scope?: {\n      organizationId?: string\n      tenantId?: string\n      providerKey?: string\n      limit?: number\n    }): Promise<GatewayTransaction[]> {\n      const where: Record<string, unknown> = {\n        unifiedStatus: { $in: ['pending', 'authorized', 'partially_captured'] },\n        deletedAt: null,\n      }\n      if (scope?.organizationId) where.organizationId = scope.organizationId\n      if (scope?.tenantId) where.tenantId = scope.tenantId\n      if (scope?.providerKey) where.providerKey = scope.providerKey\n\n      return findWithDecryption(\n        em,\n        GatewayTransaction,\n        where,\n        {\n          orderBy: { lastPolledAt: QueryOrder.ASC_NULLS_FIRST, createdAt: QueryOrder.ASC },\n          limit: scope?.limit ?? 100,\n        },\n        scope,\n      )\n    },\n  }\n}\n\nexport type PaymentGatewayService = ReturnType<typeof createPaymentGatewayService>\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,UAAU,kBAAkB;AAErC,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,OAWK;AAIP,SAAS,UAAU,qBAAqB;AACxC,SAAkC,8BAA8B,0BAA0B;AAC1F,SAAS,sBAAsB,mBAAmB,mCAA6D;AAC/G,SAAS,+BAA+B;AACxC,SAAS,qBAAqB,sBAAsB;AACpD,SAAS,uCAAuC;AAChD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AACvC,MAAM,mCAAmC;AACzC,MAAM,SAAS,aAAa,kBAAkB,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAEtF,SAAS,0BAA0B,QAA6B,aAAuC;AACrG,QAAM,UAAU,YAAY;AAC5B,MAAI,CAAC,qBAAqB,QAAQ,OAAO,GAAG;AAC1C,UAAM,SAAS,UAAU,MAAM,yBAAyB,OAAO,GAAG;AAAA,EACpE;AACF;AAEA,SAAS,yBACP,QACA,aACA,cACS;AACT,QAAM,UAAU,YAAY;AAC5B,MAAI,iBAAiB,QAAS,QAAO;AACrC,MAAI,kBAAkB,cAAc,OAAO,EAAG,QAAO;AACrD,MAAI,CAAC,kBAAkB,SAAS,YAAY,GAAG;AAC7C,UAAM;AAAA,MACJ,4BAA4B,YAAY,2CAA2C,OAAO,SAAS,MAAM;AAAA,IAC3G;AAAA,EACF;AACA,cAAY,gBAAgB;AAC5B,SAAO;AACT;AAqCO,SAAS,4BAA4B,MAAiC;AAC3E,QAAM,EAAE,IAAI,+BAA+B,sBAAsB,IAAI;AACrE,QAAM,oBAAoB,KAAK,IAAI,GAAG,KAAK,qBAAqB,gBAAgB,8BAA8B;AAC9G,QAAM,2BAA2B,KAAK;AAAA,IACpC;AAAA,IACA,KAAK,qBAAqB,uBAAuB,KAAK,MAAM,oBAAoB,CAAC;AAAA,EACnF;AACA,QAAM,sBAAsB,KAAK,IAAI,GAAG,KAAK,qBAAqB,kBAAkB,gCAAgC;AAEpH,iBAAe,uBACb,eACA,OACA,WAA0B,IAC1B,SAC6B;AAC7B,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,WAAS,sBAAsB,aAAyC;AACtE,QAAI,OAAO,YAAY,sBAAsB,YAAY,YAAY,kBAAkB,KAAK,EAAE,SAAS,GAAG;AACxG,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,iBAAe,gBAAgB,QAA8B,SAAkC;AAE7F,UAAM,WAAyE;AAAA,MAC7E,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,QAAS;AACd,UAAM,wBAAwB,SAAS,OAAO;AAAA,EAChD;AAEA,iBAAe,oBACb,aACA,OACA,eACA,OACA,SACA,SACA,MACA;AACA,QAAI,CAAC,sBAAuB;AAC5B,UAAM,sBAAsB,MAAM;AAAA,MAChC,eAAe,WAAW,WAAW;AAAA,MACrC,iBAAiB;AAAA,MACjB,eAAe;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,WAAW;AAAA,IACtB,GAAG,KAAK;AAAA,EACV;AAEA,iBAAe,kBAAkB,aAAiC,UAA+B;AAC/F,UAAM,GAAG;AAAA,MACP;AAAA,MACA,EAAE,IAAI,YAAY,IAAI,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MACjG,EAAE,cAAc,SAAS;AAAA,IAC3B;AAAA,EACF;AAEA,iBAAe,6BAA6B,aAAqB,OAAqD;AACpH,UAAM,gBAAgB,WAAW,WAAW;AAC5C,UAAM,kBAAkB,KAAK,0BACzB,MAAM,KAAK,wBAAwB,kBAAkB,eAAe,KAAK,IACzE;AACJ,UAAM,UAAU,kBAAkB,aAAa,eAAe;AAC9D,QAAI,CAAC,SAAS;AACZ,YAAM,UAAU,kBACZ,+CAA+C,WAAW,cAAc,eAAe,MACvF,+CAA+C,WAAW;AAC9D,YAAM,IAAI,cAAc,KAAK,EAAE,OAAO,QAAQ,CAAC;AAAA,IACjD;AACA,UAAM,cAAc,MAAM,8BAA8B,QAAQ,eAAe,KAAK,KAAK,CAAC;AAE1F,WAAO,EAAE,SAAS,YAAY;AAAA,EAChC;AAIA,iBAAe,uBAA8D,OAqBxD;AACnB,UAAM,cAAc,MAAM,uBAAuB,MAAM,eAAe,MAAM,KAAK;AACjF,UAAM,WAAW,MAAM,wBAAwB;AAAA,MAC7C;AAAA,MACA,eAAe,YAAY;AAAA,MAC3B,aAAa,YAAY;AAAA,MACzB,QAAQ,MAAM;AAAA,MACd,aAAa,MAAM;AAAA,MACnB,SAAS,MAAM;AAAA,MACf,OAAO,MAAM;AAAA,MACb,sBAAsB,MAAM;AAC1B,kCAA0B,MAAM,QAAQ,WAAW;AACnD,cAAM,uBAAuB,WAAW;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,QAAI,SAAS,SAAS,aAAa;AACjC,UAAI,SAAS,OAAO,WAAW,YAAY,eAAe;AACxD,cAAM;AAAA,UACJ,iBAAiB,MAAM,MAAM;AAAA,QAC/B;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB;AAEA,UAAM,YAAY,SAAS,MAAM;AAIjC,QAAI,UAAU;AAId,QAAI,kBAAkB;AACtB,QAAI;AACF,YAAM,MAAM,eAAe,EAAE,aAAa,UAAU,CAAC;AACrD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AACA,YAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QAChC;AAAA,QACA;AAAA,QACA;AAAA,QACA,gBAAgB,SAAS,MAAM;AAAA,MACjC,CAAC;AACD,wBAAkB;AAClB,YAAM,gBAAgB,MAAM;AAAA,QAC1B;AAAA,QACA,SAAS;AAAA,QACT;AAAA,QACA,OAAO,OAAO;AACZ,gBAAM,UAAU,MAAM,uBAAuB,MAAM,eAAe,MAAM,OAAO,EAAE;AACjF,gBAAM,UAAU,yBAAyB,MAAM,QAAQ,SAAS,OAAO,MAAM;AAC7E,gBAAM,YAAY,SAAS,MAAM;AACjC,iBAAO;AAAA,QACT;AAAA,MACF;AACA,gBAAU;AACV,UAAI,eAAe;AACjB,cAAM,gBAAgB,OAAO,QAAQ;AAAA,UACnC,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AACA,YAAM,MAAM,YAAY,aAAa,MAAM;AAC3C,aAAO;AAAA,IACT,SAAS,OAAgB;AACvB,UAAI,CAAC,SAAS;AACZ,YAAI,MAAM,kBAAkB;AAC1B,gBAAM,MAAM,iBAAiB,EAAE,aAAa,WAAW,gBAAgB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,QACjG;AACA,cAAM,QAAQ,WAAW,CAAC,qBAAqB,IAAI,SAAS,KAAK,CAAC,CAAC;AAAA,MACrE;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAEA,WAAS,yBACP,SACA,OACA,SACA,IACoB;AACpB,UAAM,OAAO;AAAA,MACX,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,mBAAmB,QAAQ;AAAA,MAC3B,eAAe,QAAQ;AAAA,MACvB,aAAa,QAAQ,gBACf,QAAQ,eAAe,SAAS,aAAa,QAAQ,cAAc,cAAc;AAAA,MACvF,cAAc,QAAQ,gBAAgB;AAAA,MACtC,QAAQ,OAAO,MAAM,MAAM;AAAA;AAAA;AAAA,MAG3B,gBAAgB,QAAQ,WAAW,aAAa,OAAO,MAAM,MAAM,IAAI;AAAA,MACvE,cAAc,MAAM;AAAA,MACpB,iBAAiB;AAAA,QACf,GAAI,QAAQ,gBAAgB,CAAC;AAAA,QAC7B,GAAI,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,cAAc,IAAI,CAAC;AAAA,MAC1E;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AACA,WAAO,KACH,QAAQ,OAAO,oBAAoB,EAAE,IAAI,GAAG,KAAK,CAAC,IAClD,QAAQ,OAAO,oBAAoB,IAAI;AAAA,EAC7C;AAEA,WAAS,eAAe,aAAsD;AAC5E,UAAM,WAAW,oBAAoB,YAAY,eAAe;AAChE,UAAM,EAAE,eAAe,GAAG,aAAa,IAAI;AAC3C,WAAO;AAAA,MACL,WAAW,sBAAsB,WAAW;AAAA,MAC5C,QAAQ,YAAY;AAAA,MACpB,GAAI,YAAY,eAAe,EAAE,cAAc,YAAY,aAAa,IAAI,CAAC;AAAA,MAC7E,GAAI,YAAY,cAAc,EAAE,aAAa,YAAY,YAAY,IAAI,CAAC;AAAA,MAC1E,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAa,IAAI,CAAC;AAAA,MAC/D,GAAI,iBAAiB,OAAO,kBAAkB,WAC1C,EAAE,cAAqE,IACvE,CAAC;AAAA,IACP;AAAA,EACF;AAEA,iBAAe,qBACb,aACA,OACA,OACe;AACf,UAAM,wBAAwB,oCAAoC;AAAA,MAChE,eAAe,YAAY;AAAA,MAC3B,WAAW,YAAY;AAAA,MACvB,aAAa,YAAY;AAAA,MACzB,QAAQ,YAAY;AAAA,MACpB,gBAAgB,YAAY;AAAA,MAC5B,UAAU,YAAY;AAAA,IACxB,CAAC;AACD,UAAM;AAAA,MACJ,YAAY;AAAA,MACZ;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,YAAY;AAAA,QACvB,mBAAmB,YAAY;AAAA,QAC/B,QAAQ,YAAY;AAAA,QACpB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,oBACP,WACA,OACqB;AACrB,QAAI,UAAU;AACd,QAAI,QAA8C;AAClD,QAAI,iBAAiB,QAAQ,QAAQ;AAErC,UAAM,WAAW,MAAM;AACrB,cAAQ,WAAW,MAAM;AACvB,yBAAiB,oCAAoC,IAAI,WAAW,OAAO,oBAAI,KAAK,CAAC,EAClF;AAAA,UACC,CAAC,cAAc;AACb,gBAAI,aAAa,CAAC,QAAS,UAAS;AAAA,UACtC;AAAA,UACA,MAAM;AACJ,gBAAI,CAAC,QAAS,UAAS;AAAA,UACzB;AAAA,QACF;AAAA,MACJ,GAAG,wBAAwB;AAAA,IAC7B;AACA,aAAS;AAET,WAAO,YAAY;AACjB,gBAAU;AACV,UAAI,MAAO,cAAa,KAAK;AAC7B,YAAM;AAAA,IACR;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,qBAAqB,OAA8G;AACvI,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,YAAM,gCAAgC;AAAA,QACpC,SAAS,MAAM;AAAA,QACf,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB;AAAA,QACA,UAAU,KAAK;AAAA,MACjB,CAAC;AACD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,6BAA6B,MAAM,aAAa,KAAK;AAE5F,YAAM,eAAmC;AAAA,QACvC,WAAW,MAAM;AAAA,QACjB,SAAS,MAAM;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB,eAAe,MAAM;AAAA,QACrB,cAAc,MAAM;AAAA,QACpB,aAAa,MAAM;AAAA,QACnB,YAAY,MAAM;AAAA,QAClB,WAAW,MAAM;AAAA,QACjB,UAAU,MAAM;AAAA,QAChB,cAAc,MAAM;AAAA,QACpB;AAAA,MACF;AAEA,UAAI,CAAC,MAAM,gBAAgB;AACzB,cAAM,UAAU,MAAM,QAAQ,cAAc,YAAY;AACxD,cAAM,cAAc,yBAAyB,IAAI,OAAO,OAAO;AAC/D,cAAM,GAAG,QAAQ,WAAW,EAAE,MAAM;AACpC,cAAM,qBAAqB,aAAa,OAAO,KAAK;AACpD,eAAO,EAAE,aAAa,QAAQ;AAAA,MAChC;AAEA,YAAM,eAAe,gCAAgC;AAAA,QACnD,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB;AAAA,MACF,CAAC;AACD,aAAO,MAAM;AACX,cAAM,WAAW,MAAM,iCAAiC,IAAI,cAAc,MAAM,aAAa,KAAK;AAClG,YAAI,UAAU,sBAAsB;AAClC,gBAAMA,eAAc,MAAM;AAAA,YACxB,GAAG,KAAK;AAAA,YACR;AAAA,YACA;AAAA,cACE,IAAI,SAAS;AAAA,cACb,gBAAgB,MAAM;AAAA,cACtB,UAAU,MAAM;AAAA,cAChB,WAAW;AAAA,YACb;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,cAAI,CAACA,cAAa;AAChB,kBAAM,IAAI,MAAM,yEAAyE;AAAA,UAC3F;AACA,iBAAO,EAAE,aAAAA,cAAa,SAAS,eAAeA,YAAW,EAAE;AAAA,QAC7D;AAEA,cAAM,YAAY,oBAAI,KAAK;AAC3B,cAAM,cAAc,IAAI,KAAK,UAAU,QAAQ,IAAI,iBAAiB;AACpE,cAAM,YAAY,WACd,MAAM,oCAAoC,IAAI,UAAU,OAAO,WAAW,WAAW,IACrF,MAAM,kCAAkC,IAAI,cAAc,MAAM,aAAa,OAAO,SAAS;AAEjG,YAAI,CAAC,WAAW;AACd,gBAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,mBAAmB,CAAC;AACvE;AAAA,QACF;AAEA,YAAI;AACJ,cAAM,gBAAgB,oBAAoB,WAAW,KAAK;AAC1D,YAAI;AACF,oBAAU,MAAM,QAAQ,cAAc,EAAE,GAAG,cAAc,gBAAgB,aAAa,CAAC;AAAA,QACzF,SAAS,OAAO;AACd,cAAI;AACF,kBAAM,oCAAoC,IAAI,WAAW,KAAK;AAAA,UAChE,SAAS,cAAc;AACrB,mBAAO,KAAK,0DAA0D;AAAA,cACpE,SAAS,UAAU;AAAA,cACnB,aAAa,MAAM;AAAA,cACnB,KAAK;AAAA,YACP,CAAC;AAAA,UACH;AACA,gBAAM;AAAA,QACR,UAAE;AACA,gBAAM,cAAc;AAAA,QACtB;AAEA,cAAM,gBAAgB,WAAW;AACjC,cAAM,cAAc,MAAM,GAAG,KAAK,EAAE,cAAc,OAAO,kBAAkB;AACzE,gBAAM,gBAAgB,MAAM,cAAc;AAAA,YACxC;AAAA,YACA;AAAA,cACE,IAAI,UAAU;AAAA,cACd,YAAY,UAAU;AAAA,cACtB,sBAAsB;AAAA,cACtB,gBAAgB,MAAM;AAAA,cACtB,UAAU,MAAM;AAAA,YAClB;AAAA,YACA;AAAA,cACE,sBAAsB;AAAA,cACtB,YAAY;AAAA,cACZ,WAAW;AAAA,cACX,WAAW,oBAAI,KAAK;AAAA,YACtB;AAAA,UACF;AACA,cAAI,kBAAkB,EAAG,QAAO;AAChC,gBAAM,UAAU,yBAAyB,eAAe,OAAO,SAAS,aAAa;AACrF,gBAAM,cAAc,QAAQ,OAAO,EAAE,MAAM;AAC3C,iBAAO;AAAA,QACT,CAAC;AAED,YAAI,CAAC,aAAa;AAChB;AAAA,QACF;AACA,cAAM,qBAAqB,aAAa,OAAO,KAAK;AACpD,eAAO,EAAE,aAAa,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,MAAM,eACJ,eACA,QACA,OACA,aACwB;AACxB,UAAI,gBAA+B;AACnC,UAAI,iBAAiB;AACrB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,KAAK;AAAA,QAClC;AAAA,QACA,sBAAsB,CAAC,gBAAgB;AAAE,uCAA6B,aAAa,MAAM;AAAA,QAAE;AAAA,QAC3F,cAAc,OAAO,EAAE,aAAa,UAAU,MAAM;AAClD,gBAAM,uBAAuB,iBAAiB,YAAY,cAAc;AACxE,0BAAgB,MAAM,qBAAqB,IAAI,EAAE,aAAa,WAAW,QAAQ,MAAM,CAAC;AAGxF,cAAI,WAAW,UAAa,uBAAuB,IAAI;AACrD,6BAAiB,OAAO,kBAAkB,aAAa,CAAC;AAAA,UAC1D;AAAA,QACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAOA,kBAAkB,OAAO,EAAE,aAAa,WAAW,gBAAgB,MAAM;AACvE,cAAI,kBAAkB,KAAM;AAC5B,cAAI,iBAAiB;AACnB,kBAAM;AAAA,cACJ,YAAY;AAAA,cACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,cAC7E,YAAY;AAAA,cACZ;AAAA,cACA;AAAA,cACA,EAAE,aAAa,UAAU,aAAa,gBAAgB,kBAAkB,aAAa,EAAE;AAAA,YACzF;AACA;AAAA,UACF;AACA,gBAAM,WAAW,MAAM,qBAAqB,IAAI,EAAE,eAAe,WAAW,eAAe,MAAM,CAAC;AAClG,cAAI,SAAU;AACd,gBAAM;AAAA,YACJ,YAAY;AAAA,YACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,YAC7E,YAAY;AAAA,YACZ;AAAA,YACA;AAAA,YACA,EAAE,aAAa,UAAU,aAAa,gBAAgB,kBAAkB,aAAa,EAAE;AAAA,UACzF;AAAA,QACF;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,QAAQ;AAAA,UACjF,WAAW,sBAAsB,WAAW;AAAA,UAC5C,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,CAAC,aAAa,WAAW;AACpC,sBAAY,kBAAkB;AAAA,YAC5B,GAAG,oBAAoB,YAAY,eAAe;AAAA,YAClD,eAAe,OAAO;AAAA,UACxB;AACA,cAAI,kBAAkB,KAAM,sBAAqB,aAAa,eAAe,OAAO,cAAc;AAAA,QACpG;AAAA,QACA,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,OAAO,QAAQ,gBAAgB,OAAO,eAAe;AAAA,QACzF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,cACJ,eACA,QACA,QACA,OACA,aACuB;AACvB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,MAAM,QAAQ,UAAU,KAAK;AAAA,QAC1D;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,OAAO;AAAA,UAChF,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,CAAC,aAAa,WAAW;AACpC,sBAAY,kBAAkB,OAAO;AACrC,sBAAY,kBAAkB;AAAA,YAC5B,GAAG,oBAAoB,YAAY,eAAe;AAAA,YAClD,cAAc,OAAO;AAAA,UACvB;AAAA,QACF;AAAA,QACA,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,UAAU,MAAM,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS;AAAA,QACrG;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,cACJ,eACA,QACA,OACA,aACuB;AACvB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,KAAK;AAAA,QAClC;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,OAAO;AAAA,UAChF,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,MAAM;AAAA,QAAC;AAAA,QACpB,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,OAAO,OAAO;AAAA,QAClD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,iBAAiB,eAAuB,OAAoF;AAChI,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,UAAI;AACJ,UAAI;AACF,cAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,UACrC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC/E;AACA,iBAAS,MAAM,QAAQ,UAAU;AAAA,UAC/B,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,QACF,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI;AACF,gBAAM,kBAAkB,aAAa,oBAAI,KAAK,CAAC;AAAA,QACjD,SAAS,YAAY;AACnB,iBAAO,KAAK,8DAA8D;AAAA,YACxE,eAAe,YAAY;AAAA,YAC3B,aAAa,YAAY;AAAA,YACzB,KAAK;AAAA,UACP,CAAC;AAAA,QACH;AACA,cAAM;AAAA,MACR;AAEA,YAAM,WAAW,oBAAI,KAAK;AAC1B,YAAM,oBAAoB,OAAO,WAAW,YAAY,iBACnD,kBAAkB,YAAY,eAAuC,OAAO,MAAM;AACvF,UAAI,mBAAmB;AACrB,cAAM,iBAAiB,YAAY;AACnC,oBAAY,gBAAgB,OAAO;AACnC,sCAA8B,aAAa,OAAO,MAAM;AACxD,oBAAY,gBAAgB,OAAO;AACnC,oBAAY,kBAAkB,EAAE,GAAG,oBAAoB,YAAY,eAAe,GAAG,cAAc,OAAO,gBAAgB,KAAK;AAC/H,oBAAY,eAAe;AAC3B,cAAM,GAAG,MAAM;AACf,cAAM,gBAAgB,OAAO,QAAQ;AAAA,UACnC,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AACD,cAAM;AAAA,UACJ,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA;AAAA,YACE;AAAA,YACA,YAAY,OAAO;AAAA,UACrB;AAAA,QACF;AAAA,MACF,OAAO;AACL,cAAM,kBAAkB,aAAa,QAAQ;AAAA,MAC/C;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,sBAAsB,eAAuB,QAUhD,OAAoE;AACrE,YAAM,EAAE,aAAa,gBAAgB,sBAAsB,kBAAkB,IAAI,MAAM,GAAG,KAAK,EAAE,cAAc,OAAO,OAAO;AAC3H,cAAM,SAAS,MAAM,uBAAuB,eAAe,OAAO,IAAI,EAAE,UAAU,SAAS,kBAAkB,CAAC;AAC9G,cAAM,gBAAgB,OAAO;AAC7B,cAAM,UAAU,4BAA4B,eAAe,OAAO,aAAa;AAC/E,cAAM,gBAAgB,kBAAkB,eAAe,OAAO,aAAa,KAAK,YAAY;AAC5F,cAAM,UAAU,iBAAiB,OAAO,kBAAkB;AAC1D,YAAI,SAAS;AACX,cAAI,QAAS,+BAA8B,QAAQ,OAAO;AAC1D,iBAAO,gBAAgB,OAAO;AAC9B,wCAA8B,QAAQ,OAAO,aAAa;AAAA,QAC5D;AACA,YAAI,OAAO,gBAAgB;AACzB,iBAAO,gBAAgB,OAAO;AAAA,QAChC;AACA,YAAI,OAAO,cAAc;AACvB,iBAAO,kBAAkB,EAAE,GAAG,oBAAoB,OAAO,eAAe,GAAG,GAAG,OAAO,aAAa;AAAA,QACpG;AACA,YAAI,OAAO,cAAc;AACvB,gBAAM,aAAa,eAAe,OAAO,UAAU;AACnD,qBAAW,KAAK;AAAA,YACd,WAAW,OAAO,aAAa;AAAA,YAC/B,YAAY,OAAO,aAAa,eAAc,oBAAI,KAAK,GAAE,YAAY;AAAA,YACrE,gBAAgB,OAAO,aAAa;AAAA,YACpC,eAAe,OAAO;AAAA,YACtB,WAAW,OAAO,aAAa;AAAA,UACjC,CAAC;AACD,iBAAO,aAAa;AAAA,QACtB;AACA,eAAO,gBAAgB,oBAAI,KAAK;AAChC,cAAM,GAAG,MAAM;AACf,eAAO;AAAA,UACL,aAAa;AAAA,UACb,gBAAgB;AAAA,UAChB,sBAAsB,UAAU,UAAU;AAAA,UAC1C,mBAAmB;AAAA,QACrB;AAAA,MACF,CAAC;AACD,UAAI,mBAAmB;AACrB,cAAM,eAAe;AAAA,UACnB,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB;AACA,YAAI,sBAAsB;AACxB,gBAAM,gBAAgB,sBAAsB,EAAE,GAAG,cAAc,eAAe,CAAC;AAAA,QACjF;AACA,cAAM,gBAAgB,OAAO,eAAe;AAAA,UAC1C,GAAG;AAAA,UACH,gBAAgB,wBAAwB;AAAA,QAC1C,CAAC;AAAA,MACH;AACA,YAAM;AAAA,QACJ,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC7E,YAAY;AAAA,QACZ,oBAAoB,SAAS;AAAA,QAC7B,oBAAoB,6CAA6C;AAAA,QACjE;AAAA,UACE;AAAA,UACA,GAAI,uBAAuB,EAAE,eAAe,qBAAqB,IAAI,CAAC;AAAA,UACtE,YAAY,OAAO;AAAA,UACnB,gBAAgB,OAAO,kBAAkB;AAAA,UACzC,WAAW,OAAO,cAAc,aAAa;AAAA,UAC7C,gBAAgB,OAAO,cAAc,kBAAkB;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,gBAAgB,IAAY,OAAyF;AACzH,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,2BACJ,mBACA,OACA,aACoC;AACpC,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,UACX,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,iCAAiC,OAKL;AAChC,YAAM,QAAiC;AAAA,QACrC,eAAe,EAAE,KAAK,CAAC,WAAW,cAAc,oBAAoB,EAAE;AAAA,QACtE,WAAW;AAAA,MACb;AACA,UAAI,OAAO,eAAgB,OAAM,iBAAiB,MAAM;AACxD,UAAI,OAAO,SAAU,OAAM,WAAW,MAAM;AAC5C,UAAI,OAAO,YAAa,OAAM,cAAc,MAAM;AAElD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,SAAS,EAAE,cAAc,WAAW,iBAAiB,WAAW,WAAW,IAAI;AAAA,UAC/E,OAAO,OAAO,SAAS;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["transaction"]
 }

package/dist/modules/payment_gateways/lib/status-machine.js

@@ -33,10 +33,19 @@ function canApplyManualAction(action, from) {
   if (targets.includes(from)) return true;
   return targets.some((target) => isValidTransition(from, target));
 }
+const REFUND_STATUSES = /* @__PURE__ */ new Set(["refunded", "partially_refunded"]);
+function resolveImpliedCaptureStatus(from, to) {
+  if (!REFUND_STATUSES.has(to)) return null;
+  if (isValidTransition(from, to)) return null;
+  if (!isValidTransition(from, "captured")) return null;
+  if (!isValidTransition("captured", to)) return null;
+  return "captured";
+}
 export {
   TERMINAL_STATUSES,
   canApplyManualAction,
   isTerminalStatus,
-  isValidTransition
+  isValidTransition,
+  resolveImpliedCaptureStatus
 };
 //# sourceMappingURL=status-machine.js.map

package/dist/modules/payment_gateways/lib/status-machine.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/payment_gateways/lib/status-machine.ts"],
-  "sourcesContent": ["import type { UnifiedPaymentStatus } from '@open-mercato/shared/modules/payment_gateways/types'\n\nconst VALID_TRANSITIONS: Record<string, UnifiedPaymentStatus[]> = {\n  pending: ['authorized', 'captured', 'failed', 'expired', 'cancelled'],\n  authorized: ['captured', 'partially_captured', 'cancelled', 'failed'],\n  captured: ['refunded', 'partially_refunded'],\n  partially_captured: ['captured', 'refunded', 'partially_refunded', 'cancelled'],\n  partially_refunded: ['refunded'],\n  // Terminal states: refunded, cancelled, failed, expired \u2014 no valid transitions out\n}\n\nexport const TERMINAL_STATUSES: Set<UnifiedPaymentStatus> = new Set([\n  'refunded',\n  'cancelled',\n  'failed',\n  'expired',\n])\n\nexport function isValidTransition(from: UnifiedPaymentStatus, to: UnifiedPaymentStatus): boolean {\n  if (from === to) return false\n  const allowed = VALID_TRANSITIONS[from]\n  if (!allowed) return false\n  return allowed.includes(to)\n}\n\nexport function isTerminalStatus(status: UnifiedPaymentStatus): boolean {\n  return TERMINAL_STATUSES.has(status)\n}\n\nexport type ManualGatewayAction = 'capture' | 'refund' | 'cancel'\n\nconst MANUAL_ACTION_TARGET_STATUSES: Record<ManualGatewayAction, UnifiedPaymentStatus[]> = {\n  capture: ['captured', 'partially_captured'],\n  refund: ['refunded', 'partially_refunded'],\n  cancel: ['cancelled'],\n}\n\nexport function canApplyManualAction(action: ManualGatewayAction, from: UnifiedPaymentStatus): boolean {\n  if (isTerminalStatus(from)) return false\n  const targets = MANUAL_ACTION_TARGET_STATUSES[action]\n  if (!targets) return false\n  if (targets.includes(from)) return true\n  return targets.some((target) => isValidTransition(from, target))\n}\n"],
-  "mappings": "AAEA,MAAM,oBAA4D;AAAA,EAChE,SAAS,CAAC,cAAc,YAAY,UAAU,WAAW,WAAW;AAAA,EACpE,YAAY,CAAC,YAAY,sBAAsB,aAAa,QAAQ;AAAA,EACpE,UAAU,CAAC,YAAY,oBAAoB;AAAA,EAC3C,oBAAoB,CAAC,YAAY,YAAY,sBAAsB,WAAW;AAAA,EAC9E,oBAAoB,CAAC,UAAU;AAAA;AAEjC;AAEO,MAAM,oBAA+C,oBAAI,IAAI;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,kBAAkB,MAA4B,IAAmC;AAC/F,MAAI,SAAS,GAAI,QAAO;AACxB,QAAM,UAAU,kBAAkB,IAAI;AACtC,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,QAAQ,SAAS,EAAE;AAC5B;AAEO,SAAS,iBAAiB,QAAuC;AACtE,SAAO,kBAAkB,IAAI,MAAM;AACrC;AAIA,MAAM,gCAAqF;AAAA,EACzF,SAAS,CAAC,YAAY,oBAAoB;AAAA,EAC1C,QAAQ,CAAC,YAAY,oBAAoB;AAAA,EACzC,QAAQ,CAAC,WAAW;AACtB;AAEO,SAAS,qBAAqB,QAA6B,MAAqC;AACrG,MAAI,iBAAiB,IAAI,EAAG,QAAO;AACnC,QAAM,UAAU,8BAA8B,MAAM;AACpD,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,QAAQ,SAAS,IAAI,EAAG,QAAO;AACnC,SAAO,QAAQ,KAAK,CAAC,WAAW,kBAAkB,MAAM,MAAM,CAAC;AACjE;",
+  "sourcesContent": ["import type { UnifiedPaymentStatus } from '@open-mercato/shared/modules/payment_gateways/types'\n\nconst VALID_TRANSITIONS: Record<string, UnifiedPaymentStatus[]> = {\n  pending: ['authorized', 'captured', 'failed', 'expired', 'cancelled'],\n  authorized: ['captured', 'partially_captured', 'cancelled', 'failed'],\n  captured: ['refunded', 'partially_refunded'],\n  partially_captured: ['captured', 'refunded', 'partially_refunded', 'cancelled'],\n  partially_refunded: ['refunded'],\n  // Terminal states: refunded, cancelled, failed, expired \u2014 no valid transitions out\n}\n\nexport const TERMINAL_STATUSES: Set<UnifiedPaymentStatus> = new Set([\n  'refunded',\n  'cancelled',\n  'failed',\n  'expired',\n])\n\nexport function isValidTransition(from: UnifiedPaymentStatus, to: UnifiedPaymentStatus): boolean {\n  if (from === to) return false\n  const allowed = VALID_TRANSITIONS[from]\n  if (!allowed) return false\n  return allowed.includes(to)\n}\n\nexport function isTerminalStatus(status: UnifiedPaymentStatus): boolean {\n  return TERMINAL_STATUSES.has(status)\n}\n\nexport type ManualGatewayAction = 'capture' | 'refund' | 'cancel'\n\nconst MANUAL_ACTION_TARGET_STATUSES: Record<ManualGatewayAction, UnifiedPaymentStatus[]> = {\n  capture: ['captured', 'partially_captured'],\n  refund: ['refunded', 'partially_refunded'],\n  cancel: ['cancelled'],\n}\n\nexport function canApplyManualAction(action: ManualGatewayAction, from: UnifiedPaymentStatus): boolean {\n  if (isTerminalStatus(from)) return false\n  const targets = MANUAL_ACTION_TARGET_STATUSES[action]\n  if (!targets) return false\n  if (targets.includes(from)) return true\n  return targets.some((target) => isValidTransition(from, target))\n}\n\nconst REFUND_STATUSES: Set<UnifiedPaymentStatus> = new Set(['refunded', 'partially_refunded'])\n\n/**\n * A provider-confirmed refund proves the payment was captured. When a refund status reaches a\n * transaction whose capture was not recorded yet (the capture webhook is late, or was never\n * delivered), the transaction passes through `captured` on its way to the refund status instead\n * of dropping the refund. Returns that intermediate status, or `null` when no bridge applies.\n */\nexport function resolveImpliedCaptureStatus(\n  from: UnifiedPaymentStatus,\n  to: UnifiedPaymentStatus,\n): UnifiedPaymentStatus | null {\n  if (!REFUND_STATUSES.has(to)) return null\n  if (isValidTransition(from, to)) return null\n  if (!isValidTransition(from, 'captured')) return null\n  if (!isValidTransition('captured', to)) return null\n  return 'captured'\n}\n"],
+  "mappings": "AAEA,MAAM,oBAA4D;AAAA,EAChE,SAAS,CAAC,cAAc,YAAY,UAAU,WAAW,WAAW;AAAA,EACpE,YAAY,CAAC,YAAY,sBAAsB,aAAa,QAAQ;AAAA,EACpE,UAAU,CAAC,YAAY,oBAAoB;AAAA,EAC3C,oBAAoB,CAAC,YAAY,YAAY,sBAAsB,WAAW;AAAA,EAC9E,oBAAoB,CAAC,UAAU;AAAA;AAEjC;AAEO,MAAM,oBAA+C,oBAAI,IAAI;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,kBAAkB,MAA4B,IAAmC;AAC/F,MAAI,SAAS,GAAI,QAAO;AACxB,QAAM,UAAU,kBAAkB,IAAI;AACtC,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,QAAQ,SAAS,EAAE;AAC5B;AAEO,SAAS,iBAAiB,QAAuC;AACtE,SAAO,kBAAkB,IAAI,MAAM;AACrC;AAIA,MAAM,gCAAqF;AAAA,EACzF,SAAS,CAAC,YAAY,oBAAoB;AAAA,EAC1C,QAAQ,CAAC,YAAY,oBAAoB;AAAA,EACzC,QAAQ,CAAC,WAAW;AACtB;AAEO,SAAS,qBAAqB,QAA6B,MAAqC;AACrG,MAAI,iBAAiB,IAAI,EAAG,QAAO;AACnC,QAAM,UAAU,8BAA8B,MAAM;AACpD,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,QAAQ,SAAS,IAAI,EAAG,QAAO;AACnC,SAAO,QAAQ,KAAK,CAAC,WAAW,kBAAkB,MAAM,MAAM,CAAC;AACjE;AAEA,MAAM,kBAA6C,oBAAI,IAAI,CAAC,YAAY,oBAAoB,CAAC;AAQtF,SAAS,4BACd,MACA,IAC6B;AAC7B,MAAI,CAAC,gBAAgB,IAAI,EAAE,EAAG,QAAO;AACrC,MAAI,kBAAkB,MAAM,EAAE,EAAG,QAAO;AACxC,MAAI,CAAC,kBAAkB,MAAM,UAAU,EAAG,QAAO;AACjD,MAAI,CAAC,kBAAkB,YAAY,EAAE,EAAG,QAAO;AAC/C,SAAO;AACT;",
   "names": []
 }

package/dist/modules/payment_gateways/lib/webhook-processor.js

@@ -56,7 +56,7 @@ async function processPaymentGatewayWebhookJob(deps, payload) {
       return;
     }
     const providerStatus = typeof event.data.status === "string" ? event.data.status : "";
-    const unifiedStatus = adapter.mapStatus(providerStatus, event.eventType);
+    const unifiedStatus = adapter.mapStatus(providerStatus, event.eventType, { ...event, timestamp: new Date(event.timestamp) });
     await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, "info", "Payment gateway webhook received", {
       eventType: event.eventType,
       providerStatus,

package/dist/modules/payment_gateways/lib/webhook-processor.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/payment_gateways/lib/webhook-processor.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getGatewayAdapter, type WebhookEvent } from '@open-mercato/shared/modules/payment_gateways/types'\nimport { isTrustedWebhookDispatch } from '@open-mercato/shared/lib/queue/dispatchOrigin'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport type { PaymentGatewayService } from './gateway-service'\nimport { claimWebhookProcessing, releaseWebhookClaim } from './webhook-utils'\n\nconst logger = createLogger('payment_gateways').child({ component: 'webhook-processor' })\n\nexport type PaymentGatewayWebhookJobPayload = {\n  providerKey: string\n  event: WebhookEvent\n  transactionId?: string | null\n  scope?: {\n    organizationId: string\n    tenantId: string\n  } | null\n}\n\ntype PaymentGatewayWebhookProcessorDeps = {\n  em: EntityManager\n  paymentGatewayService: PaymentGatewayService\n  integrationLogService: IntegrationLogService\n}\n\nfunction readSessionIdFromEvent(event: WebhookEvent): string | null {\n  const id = event.data.id\n  if (typeof id === 'string' && id.trim().length > 0) return id.trim()\n  const paymentIntent = event.data.payment_intent\n  if (typeof paymentIntent === 'string' && paymentIntent.trim().length > 0) return paymentIntent.trim()\n  return null\n}\n\nasync function writeTransactionLog(\n  integrationLogService: IntegrationLogService,\n  providerKey: string,\n  scope: { organizationId: string; tenantId: string },\n  transactionId: string,\n  level: 'info' | 'warn' | 'error',\n  message: string,\n  payload?: Record<string, unknown>,\n) {\n  await integrationLogService.write({\n    integrationId: `gateway_${providerKey}`,\n    scopeEntityType: 'payment_transaction',\n    scopeEntityId: transactionId,\n    level,\n    message,\n    payload: payload ?? null,\n  }, scope)\n}\n\nexport async function processPaymentGatewayWebhookJob(\n  deps: PaymentGatewayWebhookProcessorDeps,\n  payload: PaymentGatewayWebhookJobPayload,\n): Promise<void> {\n  const { em, paymentGatewayService, integrationLogService } = deps\n  const { providerKey, event } = payload\n  // Fail closed on untrusted dispatch origins (#5213): only jobs enqueued by the\n  // inbound webhook route (signature verified) may drive payment state. Jobs that\n  // arrive through any other path \u2014 e.g. a scheduled queue target \u2014 are dropped.\n  if (!isTrustedWebhookDispatch(payload)) {\n    logger.error('Dropping webhook job with missing or untrusted dispatch origin', { providerKey, eventType: event?.eventType ?? null })\n    return\n  }\n  // Scope MUST come from the trusted route layer (derived from a verified GatewayTransaction).\n  // Never fall back to attacker-controlled metadata on `event.data.metadata` \u2014 that was the\n  // vector that allowed forged mock webhooks to mutate another tenant's payment state.\n  const scopedPayload = payload.scope ?? null\n  if (!scopedPayload) return\n\n  let transaction = payload.transactionId\n    ? await paymentGatewayService.findTransaction(payload.transactionId, scopedPayload)\n    : null\n\n  if (!transaction) {\n    const sessionId = readSessionIdFromEvent(event)\n    if (sessionId) {\n      transaction = await paymentGatewayService.findTransactionBySessionId(sessionId, scopedPayload, providerKey)\n    }\n  }\n  if (!transaction) return\n\n  const scope = { organizationId: transaction.organizationId, tenantId: transaction.tenantId }\n  const claimed = await claimWebhookProcessing(em, event.idempotencyKey, providerKey, scope, event.eventType)\n  if (!claimed) {\n    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'info', 'Duplicate payment gateway webhook skipped', {\n      eventType: event.eventType,\n      idempotencyKey: event.idempotencyKey,\n    })\n    return\n  }\n\n  try {\n    const adapter = getGatewayAdapter(providerKey)\n    if (!adapter) {\n      await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'warn', 'Missing payment gateway adapter for webhook event', {\n        providerKey,\n        eventType: event.eventType,\n      })\n      return\n    }\n\n    const providerStatus = typeof event.data.status === 'string' ? event.data.status : ''\n    const unifiedStatus = adapter.mapStatus(providerStatus, event.eventType)\n    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'info', 'Payment gateway webhook received', {\n      eventType: event.eventType,\n      providerStatus,\n      unifiedStatus,\n    })\n\n    await paymentGatewayService.syncTransactionStatus(transaction.id, {\n      unifiedStatus,\n      providerStatus: event.eventType,\n      providerData: event.data,\n      webhookEvent: {\n        eventType: event.eventType,\n        idempotencyKey: event.idempotencyKey,\n        processed: true,\n      },\n    }, scope)\n\n    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'info', 'Payment gateway webhook processed', {\n      eventType: event.eventType,\n      unifiedStatus,\n    })\n  } catch (error: unknown) {\n    await releaseWebhookClaim(em, event.idempotencyKey, providerKey, scope)\n    throw error\n  }\n}\n"],
-  "mappings": "AACA,SAAS,yBAA4C;AACrD,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAG7B,SAAS,wBAAwB,2BAA2B;AAE5D,MAAM,SAAS,aAAa,kBAAkB,EAAE,MAAM,EAAE,WAAW,oBAAoB,CAAC;AAkBxF,SAAS,uBAAuB,OAAoC;AAClE,QAAM,KAAK,MAAM,KAAK;AACtB,MAAI,OAAO,OAAO,YAAY,GAAG,KAAK,EAAE,SAAS,EAAG,QAAO,GAAG,KAAK;AACnE,QAAM,gBAAgB,MAAM,KAAK;AACjC,MAAI,OAAO,kBAAkB,YAAY,cAAc,KAAK,EAAE,SAAS,EAAG,QAAO,cAAc,KAAK;AACpG,SAAO;AACT;AAEA,eAAe,oBACb,uBACA,aACA,OACA,eACA,OACA,SACA,SACA;AACA,QAAM,sBAAsB,MAAM;AAAA,IAChC,eAAe,WAAW,WAAW;AAAA,IACrC,iBAAiB;AAAA,IACjB,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,SAAS,WAAW;AAAA,EACtB,GAAG,KAAK;AACV;AAEA,eAAsB,gCACpB,MACA,SACe;AACf,QAAM,EAAE,IAAI,uBAAuB,sBAAsB,IAAI;AAC7D,QAAM,EAAE,aAAa,MAAM,IAAI;AAI/B,MAAI,CAAC,yBAAyB,OAAO,GAAG;AACtC,WAAO,MAAM,kEAAkE,EAAE,aAAa,WAAW,OAAO,aAAa,KAAK,CAAC;AACnI;AAAA,EACF;AAIA,QAAM,gBAAgB,QAAQ,SAAS;AACvC,MAAI,CAAC,cAAe;AAEpB,MAAI,cAAc,QAAQ,gBACtB,MAAM,sBAAsB,gBAAgB,QAAQ,eAAe,aAAa,IAChF;AAEJ,MAAI,CAAC,aAAa;AAChB,UAAM,YAAY,uBAAuB,KAAK;AAC9C,QAAI,WAAW;AACb,oBAAc,MAAM,sBAAsB,2BAA2B,WAAW,eAAe,WAAW;AAAA,IAC5G;AAAA,EACF;AACA,MAAI,CAAC,YAAa;AAElB,QAAM,QAAQ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAC3F,QAAM,UAAU,MAAM,uBAAuB,IAAI,MAAM,gBAAgB,aAAa,OAAO,MAAM,SAAS;AAC1G,MAAI,CAAC,SAAS;AACZ,UAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,6CAA6C;AAAA,MACxI,WAAW,MAAM;AAAA,MACjB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AACD;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,kBAAkB,WAAW;AAC7C,QAAI,CAAC,SAAS;AACZ,YAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,qDAAqD;AAAA,QAChJ;AAAA,QACA,WAAW,MAAM;AAAA,MACnB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,iBAAiB,OAAO,MAAM,KAAK,WAAW,WAAW,MAAM,KAAK,SAAS;AACnF,UAAM,gBAAgB,QAAQ,UAAU,gBAAgB,MAAM,SAAS;AACvE,UAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,oCAAoC;AAAA,MAC/H,WAAW,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,sBAAsB,sBAAsB,YAAY,IAAI;AAAA,MAChE;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,cAAc,MAAM;AAAA,MACpB,cAAc;AAAA,QACZ,WAAW,MAAM;AAAA,QACjB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,MACb;AAAA,IACF,GAAG,KAAK;AAER,UAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,qCAAqC;AAAA,MAChI,WAAW,MAAM;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAgB;AACvB,UAAM,oBAAoB,IAAI,MAAM,gBAAgB,aAAa,KAAK;AACtE,UAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getGatewayAdapter, type WebhookEvent } from '@open-mercato/shared/modules/payment_gateways/types'\nimport { isTrustedWebhookDispatch } from '@open-mercato/shared/lib/queue/dispatchOrigin'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport type { PaymentGatewayService } from './gateway-service'\nimport { claimWebhookProcessing, releaseWebhookClaim } from './webhook-utils'\n\nconst logger = createLogger('payment_gateways').child({ component: 'webhook-processor' })\n\nexport type PaymentGatewayWebhookJobPayload = {\n  providerKey: string\n  event: WebhookEvent\n  transactionId?: string | null\n  scope?: {\n    organizationId: string\n    tenantId: string\n  } | null\n}\n\ntype PaymentGatewayWebhookProcessorDeps = {\n  em: EntityManager\n  paymentGatewayService: PaymentGatewayService\n  integrationLogService: IntegrationLogService\n}\n\nfunction readSessionIdFromEvent(event: WebhookEvent): string | null {\n  const id = event.data.id\n  if (typeof id === 'string' && id.trim().length > 0) return id.trim()\n  const paymentIntent = event.data.payment_intent\n  if (typeof paymentIntent === 'string' && paymentIntent.trim().length > 0) return paymentIntent.trim()\n  return null\n}\n\nasync function writeTransactionLog(\n  integrationLogService: IntegrationLogService,\n  providerKey: string,\n  scope: { organizationId: string; tenantId: string },\n  transactionId: string,\n  level: 'info' | 'warn' | 'error',\n  message: string,\n  payload?: Record<string, unknown>,\n) {\n  await integrationLogService.write({\n    integrationId: `gateway_${providerKey}`,\n    scopeEntityType: 'payment_transaction',\n    scopeEntityId: transactionId,\n    level,\n    message,\n    payload: payload ?? null,\n  }, scope)\n}\n\nexport async function processPaymentGatewayWebhookJob(\n  deps: PaymentGatewayWebhookProcessorDeps,\n  payload: PaymentGatewayWebhookJobPayload,\n): Promise<void> {\n  const { em, paymentGatewayService, integrationLogService } = deps\n  const { providerKey, event } = payload\n  // Fail closed on untrusted dispatch origins (#5213): only jobs enqueued by the\n  // inbound webhook route (signature verified) may drive payment state. Jobs that\n  // arrive through any other path \u2014 e.g. a scheduled queue target \u2014 are dropped.\n  if (!isTrustedWebhookDispatch(payload)) {\n    logger.error('Dropping webhook job with missing or untrusted dispatch origin', { providerKey, eventType: event?.eventType ?? null })\n    return\n  }\n  // Scope MUST come from the trusted route layer (derived from a verified GatewayTransaction).\n  // Never fall back to attacker-controlled metadata on `event.data.metadata` \u2014 that was the\n  // vector that allowed forged mock webhooks to mutate another tenant's payment state.\n  const scopedPayload = payload.scope ?? null\n  if (!scopedPayload) return\n\n  let transaction = payload.transactionId\n    ? await paymentGatewayService.findTransaction(payload.transactionId, scopedPayload)\n    : null\n\n  if (!transaction) {\n    const sessionId = readSessionIdFromEvent(event)\n    if (sessionId) {\n      transaction = await paymentGatewayService.findTransactionBySessionId(sessionId, scopedPayload, providerKey)\n    }\n  }\n  if (!transaction) return\n\n  const scope = { organizationId: transaction.organizationId, tenantId: transaction.tenantId }\n  const claimed = await claimWebhookProcessing(em, event.idempotencyKey, providerKey, scope, event.eventType)\n  if (!claimed) {\n    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'info', 'Duplicate payment gateway webhook skipped', {\n      eventType: event.eventType,\n      idempotencyKey: event.idempotencyKey,\n    })\n    return\n  }\n\n  try {\n    const adapter = getGatewayAdapter(providerKey)\n    if (!adapter) {\n      await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'warn', 'Missing payment gateway adapter for webhook event', {\n        providerKey,\n        eventType: event.eventType,\n      })\n      return\n    }\n\n    const providerStatus = typeof event.data.status === 'string' ? event.data.status : ''\n    const unifiedStatus = adapter.mapStatus(providerStatus, event.eventType, { ...event, timestamp: new Date(event.timestamp) })\n    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'info', 'Payment gateway webhook received', {\n      eventType: event.eventType,\n      providerStatus,\n      unifiedStatus,\n    })\n\n    await paymentGatewayService.syncTransactionStatus(transaction.id, {\n      unifiedStatus,\n      providerStatus: event.eventType,\n      providerData: event.data,\n      webhookEvent: {\n        eventType: event.eventType,\n        idempotencyKey: event.idempotencyKey,\n        processed: true,\n      },\n    }, scope)\n\n    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'info', 'Payment gateway webhook processed', {\n      eventType: event.eventType,\n      unifiedStatus,\n    })\n  } catch (error: unknown) {\n    await releaseWebhookClaim(em, event.idempotencyKey, providerKey, scope)\n    throw error\n  }\n}\n"],
+  "mappings": "AACA,SAAS,yBAA4C;AACrD,SAAS,gCAAgC;AACzC,SAAS,oBAAoB;AAG7B,SAAS,wBAAwB,2BAA2B;AAE5D,MAAM,SAAS,aAAa,kBAAkB,EAAE,MAAM,EAAE,WAAW,oBAAoB,CAAC;AAkBxF,SAAS,uBAAuB,OAAoC;AAClE,QAAM,KAAK,MAAM,KAAK;AACtB,MAAI,OAAO,OAAO,YAAY,GAAG,KAAK,EAAE,SAAS,EAAG,QAAO,GAAG,KAAK;AACnE,QAAM,gBAAgB,MAAM,KAAK;AACjC,MAAI,OAAO,kBAAkB,YAAY,cAAc,KAAK,EAAE,SAAS,EAAG,QAAO,cAAc,KAAK;AACpG,SAAO;AACT;AAEA,eAAe,oBACb,uBACA,aACA,OACA,eACA,OACA,SACA,SACA;AACA,QAAM,sBAAsB,MAAM;AAAA,IAChC,eAAe,WAAW,WAAW;AAAA,IACrC,iBAAiB;AAAA,IACjB,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,SAAS,WAAW;AAAA,EACtB,GAAG,KAAK;AACV;AAEA,eAAsB,gCACpB,MACA,SACe;AACf,QAAM,EAAE,IAAI,uBAAuB,sBAAsB,IAAI;AAC7D,QAAM,EAAE,aAAa,MAAM,IAAI;AAI/B,MAAI,CAAC,yBAAyB,OAAO,GAAG;AACtC,WAAO,MAAM,kEAAkE,EAAE,aAAa,WAAW,OAAO,aAAa,KAAK,CAAC;AACnI;AAAA,EACF;AAIA,QAAM,gBAAgB,QAAQ,SAAS;AACvC,MAAI,CAAC,cAAe;AAEpB,MAAI,cAAc,QAAQ,gBACtB,MAAM,sBAAsB,gBAAgB,QAAQ,eAAe,aAAa,IAChF;AAEJ,MAAI,CAAC,aAAa;AAChB,UAAM,YAAY,uBAAuB,KAAK;AAC9C,QAAI,WAAW;AACb,oBAAc,MAAM,sBAAsB,2BAA2B,WAAW,eAAe,WAAW;AAAA,IAC5G;AAAA,EACF;AACA,MAAI,CAAC,YAAa;AAElB,QAAM,QAAQ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAC3F,QAAM,UAAU,MAAM,uBAAuB,IAAI,MAAM,gBAAgB,aAAa,OAAO,MAAM,SAAS;AAC1G,MAAI,CAAC,SAAS;AACZ,UAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,6CAA6C;AAAA,MACxI,WAAW,MAAM;AAAA,MACjB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AACD;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,kBAAkB,WAAW;AAC7C,QAAI,CAAC,SAAS;AACZ,YAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,qDAAqD;AAAA,QAChJ;AAAA,QACA,WAAW,MAAM;AAAA,MACnB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,iBAAiB,OAAO,MAAM,KAAK,WAAW,WAAW,MAAM,KAAK,SAAS;AACnF,UAAM,gBAAgB,QAAQ,UAAU,gBAAgB,MAAM,WAAW,EAAE,GAAG,OAAO,WAAW,IAAI,KAAK,MAAM,SAAS,EAAE,CAAC;AAC3H,UAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,oCAAoC;AAAA,MAC/H,WAAW,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,sBAAsB,sBAAsB,YAAY,IAAI;AAAA,MAChE;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,cAAc,MAAM;AAAA,MACpB,cAAc;AAAA,QACZ,WAAW,MAAM;AAAA,QACjB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,MACb;AAAA,IACF,GAAG,KAAK;AAER,UAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,qCAAqC;AAAA,MAChI,WAAW,MAAM;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAgB;AACvB,UAAM,oBAAoB,IAAI,MAAM,gBAAgB,aAAa,KAAK;AACtE,UAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/staff/notifications.js

@@ -14,14 +14,16 @@ const notificationTypes = [
         labelKey: "staff.notifications.leaveRequest.actions.approve",
         variant: "default",
         icon: "check",
-        commandId: "staff.leave-requests.accept"
+        commandId: "staff.leave-requests.accept",
+        requiredFeatures: ["staff.leave_requests.manage"]
       },
       {
         id: "reject",
         labelKey: "staff.notifications.leaveRequest.actions.reject",
         variant: "destructive",
         icon: "x",
-        commandId: "staff.leave-requests.reject"
+        commandId: "staff.leave-requests.reject",
+        requiredFeatures: ["staff.leave_requests.manage"]
       }
     ],
     primaryActionId: "approve",

package/dist/modules/staff/notifications.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/modules/staff/notifications.ts"],
-  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'staff.leave_request.pending',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.pending.title',\n    bodyKey: 'staff.notifications.leaveRequest.pending.body',\n    icon: 'calendar-off',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'approve',\n        labelKey: 'staff.notifications.leaveRequest.actions.approve',\n        variant: 'default',\n        icon: 'check',\n        commandId: 'staff.leave-requests.accept',\n      },\n      {\n        id: 'reject',\n        labelKey: 'staff.notifications.leaveRequest.actions.reject',\n        variant: 'destructive',\n        icon: 'x',\n        commandId: 'staff.leave-requests.reject',\n      },\n    ],\n    primaryActionId: 'approve',\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'staff.leave_request.approved',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.approved.title',\n    bodyKey: 'staff.notifications.leaveRequest.approved.body',\n    icon: 'calendar-check',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    type: 'staff.leave_request.rejected',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.rejected.title',\n    bodyKey: 'staff.notifications.leaveRequest.rejected.body',\n    icon: 'calendar-x',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    // Spec D-6: the \"Request access\" button on screens 2 and 17 raises a real\n    // notification for every `staff.timesheets.projects.manage` holder. The\n    // subscriber overrides `linkHref` with the requester-specific deep link so\n    // the project team drawer opens with the requester pre-selected.\n    type: 'staff.timesheets.project_access.requested',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeProjectAccess.requested.title',\n    bodyKey: 'staff.notifications.timeProjectAccess.requested.body',\n    icon: 'user-plus',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-team',\n        labelKey: 'staff.notifications.timeProjectAccess.actions.openTeam',\n        variant: 'default',\n        icon: 'users',\n        href: '/backend/staff/time-tracking/projects/{sourceEntityId}?panel=team',\n      },\n    ],\n    primaryActionId: 'open-team',\n    linkHref: '/backend/staff/time-tracking/projects',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    // Screen 4 budget card: \"Ostrzezenie przy 80% i 100% wykorzystania\". One type\n    // covers both thresholds \u2014 the subscriber raises the severity to `error` for the\n    // 100% crossing and carries the numbers in `bodyVariables`, so the two alerts\n    // read differently without splitting the notification id.\n    type: 'staff.timesheets.time_project.budget_threshold_reached',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeProjectBudget.thresholdReached.title',\n    bodyKey: 'staff.notifications.timeProjectBudget.thresholdReached.body',\n    icon: 'gauge',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'open-project',\n        labelKey: 'staff.notifications.timeProjectBudget.actions.openProject',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/projects/{sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-project',\n    linkHref: '/backend/staff/time-tracking/projects/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * EP-48. Raised by `subscribers/time-report-approved-notification.ts` when a\n     * report is closed \u2014 closing IS the approval in this module: it freezes every\n     * per-entry value and locks the entries, and `staff.timesheets.lock` is the\n     * feature that gates it. The recipient is the person who drafted the report,\n     * who otherwise learns about it only by reopening the screen.\n     */\n    type: 'staff.timesheets.time_report.approved',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeReport.approved.title',\n    bodyKey: 'staff.notifications.timeReport.approved.body',\n    icon: 'file-check',\n    severity: 'success',\n    actions: [\n      {\n        id: 'open-report',\n        labelKey: 'staff.notifications.timeReport.actions.openReport',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-report',\n    linkHref: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * EP-48, contributable-only by design. The module has exactly one report\n     * transition \u2014 draft \u2192 closed \u2014 so there is no \"submitted, awaiting a second\n     * pair of eyes\" state for core to announce. This id exists so the multi-step\n     * approval a `registerReportApprovalPolicy` contribution (EP-41) implements\n     * has a published notification to raise instead of inventing its own, and so\n     * the renderer and delivery preferences are already in place when it does.\n     */\n    type: 'staff.timesheets.time_report.ready_for_approval',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeReport.readyForApproval.title',\n    bodyKey: 'staff.notifications.timeReport.readyForApproval.body',\n    icon: 'file-clock',\n    severity: 'info',\n    actions: [\n      {\n        id: 'review-report',\n        labelKey: 'staff.notifications.timeReport.actions.reviewReport',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'review-report',\n    linkHref: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * EP-48, contributable-only by design. \"This timer has been running for six\n     * hours\" needs something that wakes up on a schedule and looks at open\n     * timers; the module ships no periodic job and inventing one to justify an id\n     * would be the tail wagging the dog. The id is the contract for a module that\n     * does ship one.\n     */\n    type: 'staff.timesheets.time_entry.timer_running_long',\n    channels: ['in_app'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeEntryTimer.runningLong.title',\n    bodyKey: 'staff.notifications.timeEntryTimer.runningLong.body',\n    icon: 'timer',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'open-timesheet',\n        labelKey: 'staff.notifications.timesheet.actions.openTimesheet',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/timesheet',\n      },\n    ],\n    primaryActionId: 'open-timesheet',\n    linkHref: '/backend/staff/time-tracking/timesheet',\n    expiresAfterHours: 24,\n  },\n  {\n    /**\n     * EP-48, contributable-only by design. Whether a period is \"incomplete\" is\n     * the capacity provider's question (EP-40), and the built-in provider spreads\n     * one flat daily number over the caller's working days on demand \u2014 it has no\n     * schedule and no opinion about when to complain. A contributed provider that\n     * knows contract hours and leave is the thing that can raise this honestly.\n     */\n    type: 'staff.timesheets.timesheet.period_incomplete',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timesheet.periodIncomplete.title',\n    bodyKey: 'staff.notifications.timesheet.periodIncomplete.body',\n    icon: 'calendar-clock',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'open-timesheet',\n        labelKey: 'staff.notifications.timesheet.actions.openTimesheet',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/timesheet',\n      },\n    ],\n    primaryActionId: 'open-timesheet',\n    linkHref: '/backend/staff/time-tracking/timesheet',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    // Customer support tickets: raised for every portal ticket. The audience is the\n    // assignee (when the project default applied) plus the project's active\n    // assigners, falling back through owner and organization project managers.\n    type: 'staff.support_ticket.created',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.supportTicket.created.title',\n    bodyKey: 'staff.notifications.supportTicket.created.body',\n    icon: 'life-buoy',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-ticket',\n        labelKey: 'staff.notifications.supportTicket.actions.open',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/support?task={sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-ticket',\n    linkHref: '/backend/staff/time-tracking/support?task={sourceEntityId}',\n    expiresAfterHours: 336,\n  },\n  {\n    type: 'staff.support_ticket.customer_replied',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.supportTicket.customerReplied.title',\n    bodyKey: 'staff.notifications.supportTicket.customerReplied.body',\n    icon: 'message-square',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-ticket',\n        labelKey: 'staff.notifications.supportTicket.actions.open',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/support?task={sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-ticket',\n    linkHref: '/backend/staff/time-tracking/support?task={sourceEntityId}',\n    expiresAfterHours: 336,\n  },\n  {\n    // A task in the project became unassigned (released or cleared): tells the\n    // project's assigners there is claimable work.\n    type: 'staff.timesheets.time_task.released',\n    channels: ['in_app'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeTask.released.title',\n    bodyKey: 'staff.notifications.timeTask.released.body',\n    icon: 'hand',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-task',\n        labelKey: 'staff.notifications.timeTask.actions.open',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/board?task={sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-task',\n    linkHref: '/backend/staff/time-tracking/board?task={sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    // Someone else assigned the recipient to a task through the task editor. Not sent\n    // for claims (self-assignment) or for the portal default assignee, who hears\n    // about the intake once through `staff.support_ticket.created`.\n    type: 'staff.timesheets.time_task.assigned',\n    channels: ['in_app'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeTask.assigned.title',\n    bodyKey: 'staff.notifications.timeTask.assigned.body',\n    icon: 'user-check',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-task',\n        labelKey: 'staff.notifications.timeTask.actions.open',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/board?task={sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-task',\n    linkHref: '/backend/staff/time-tracking/board?task={sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n]\n\nexport default notificationTypes\n"],
-  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,MACb;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,MACb;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQE,MAAM;AAAA,IACN,UAAU,CAAC,QAAQ;AAAA,IACnB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,IAIE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA,IAGE,MAAM;AAAA,IACN,UAAU,CAAC,QAAQ;AAAA,IACnB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,IAIE,MAAM;AAAA,IACN,UAAU,CAAC,QAAQ;AAAA,IACnB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
+  "sourcesContent": ["import type { NotificationTypeDefinition } from '@open-mercato/shared/modules/notifications/types'\n\nexport const notificationTypes: NotificationTypeDefinition[] = [\n  {\n    type: 'staff.leave_request.pending',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.pending.title',\n    bodyKey: 'staff.notifications.leaveRequest.pending.body',\n    icon: 'calendar-off',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'approve',\n        labelKey: 'staff.notifications.leaveRequest.actions.approve',\n        variant: 'default',\n        icon: 'check',\n        commandId: 'staff.leave-requests.accept',\n        requiredFeatures: ['staff.leave_requests.manage'],\n      },\n      {\n        id: 'reject',\n        labelKey: 'staff.notifications.leaveRequest.actions.reject',\n        variant: 'destructive',\n        icon: 'x',\n        commandId: 'staff.leave-requests.reject',\n        requiredFeatures: ['staff.leave_requests.manage'],\n      },\n    ],\n    primaryActionId: 'approve',\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    type: 'staff.leave_request.approved',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.approved.title',\n    bodyKey: 'staff.notifications.leaveRequest.approved.body',\n    icon: 'calendar-check',\n    severity: 'success',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    type: 'staff.leave_request.rejected',\n    // Ships without push \u2014 operators re-enable it per type from the Notification Delivery settings.\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.leaveRequest.rejected.title',\n    bodyKey: 'staff.notifications.leaveRequest.rejected.body',\n    icon: 'calendar-x',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'view',\n        labelKey: 'common.view',\n        variant: 'outline',\n        href: '/backend/staff/leave-requests/{sourceEntityId}',\n        icon: 'external-link',\n      },\n    ],\n    linkHref: '/backend/staff/leave-requests/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    // Spec D-6: the \"Request access\" button on screens 2 and 17 raises a real\n    // notification for every `staff.timesheets.projects.manage` holder. The\n    // subscriber overrides `linkHref` with the requester-specific deep link so\n    // the project team drawer opens with the requester pre-selected.\n    type: 'staff.timesheets.project_access.requested',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeProjectAccess.requested.title',\n    bodyKey: 'staff.notifications.timeProjectAccess.requested.body',\n    icon: 'user-plus',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-team',\n        labelKey: 'staff.notifications.timeProjectAccess.actions.openTeam',\n        variant: 'default',\n        icon: 'users',\n        href: '/backend/staff/time-tracking/projects/{sourceEntityId}?panel=team',\n      },\n    ],\n    primaryActionId: 'open-team',\n    linkHref: '/backend/staff/time-tracking/projects',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    // Screen 4 budget card: \"Ostrzezenie przy 80% i 100% wykorzystania\". One type\n    // covers both thresholds \u2014 the subscriber raises the severity to `error` for the\n    // 100% crossing and carries the numbers in `bodyVariables`, so the two alerts\n    // read differently without splitting the notification id.\n    type: 'staff.timesheets.time_project.budget_threshold_reached',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeProjectBudget.thresholdReached.title',\n    bodyKey: 'staff.notifications.timeProjectBudget.thresholdReached.body',\n    icon: 'gauge',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'open-project',\n        labelKey: 'staff.notifications.timeProjectBudget.actions.openProject',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/projects/{sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-project',\n    linkHref: '/backend/staff/time-tracking/projects/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * EP-48. Raised by `subscribers/time-report-approved-notification.ts` when a\n     * report is closed \u2014 closing IS the approval in this module: it freezes every\n     * per-entry value and locks the entries, and `staff.timesheets.lock` is the\n     * feature that gates it. The recipient is the person who drafted the report,\n     * who otherwise learns about it only by reopening the screen.\n     */\n    type: 'staff.timesheets.time_report.approved',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeReport.approved.title',\n    bodyKey: 'staff.notifications.timeReport.approved.body',\n    icon: 'file-check',\n    severity: 'success',\n    actions: [\n      {\n        id: 'open-report',\n        labelKey: 'staff.notifications.timeReport.actions.openReport',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-report',\n    linkHref: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * EP-48, contributable-only by design. The module has exactly one report\n     * transition \u2014 draft \u2192 closed \u2014 so there is no \"submitted, awaiting a second\n     * pair of eyes\" state for core to announce. This id exists so the multi-step\n     * approval a `registerReportApprovalPolicy` contribution (EP-41) implements\n     * has a published notification to raise instead of inventing its own, and so\n     * the renderer and delivery preferences are already in place when it does.\n     */\n    type: 'staff.timesheets.time_report.ready_for_approval',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeReport.readyForApproval.title',\n    bodyKey: 'staff.notifications.timeReport.readyForApproval.body',\n    icon: 'file-clock',\n    severity: 'info',\n    actions: [\n      {\n        id: 'review-report',\n        labelKey: 'staff.notifications.timeReport.actions.reviewReport',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'review-report',\n    linkHref: '/backend/staff/time-tracking/reports/{sourceEntityId}',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    /**\n     * EP-48, contributable-only by design. \"This timer has been running for six\n     * hours\" needs something that wakes up on a schedule and looks at open\n     * timers; the module ships no periodic job and inventing one to justify an id\n     * would be the tail wagging the dog. The id is the contract for a module that\n     * does ship one.\n     */\n    type: 'staff.timesheets.time_entry.timer_running_long',\n    channels: ['in_app'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeEntryTimer.runningLong.title',\n    bodyKey: 'staff.notifications.timeEntryTimer.runningLong.body',\n    icon: 'timer',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'open-timesheet',\n        labelKey: 'staff.notifications.timesheet.actions.openTimesheet',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/timesheet',\n      },\n    ],\n    primaryActionId: 'open-timesheet',\n    linkHref: '/backend/staff/time-tracking/timesheet',\n    expiresAfterHours: 24,\n  },\n  {\n    /**\n     * EP-48, contributable-only by design. Whether a period is \"incomplete\" is\n     * the capacity provider's question (EP-40), and the built-in provider spreads\n     * one flat daily number over the caller's working days on demand \u2014 it has no\n     * schedule and no opinion about when to complain. A contributed provider that\n     * knows contract hours and leave is the thing that can raise this honestly.\n     */\n    type: 'staff.timesheets.timesheet.period_incomplete',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timesheet.periodIncomplete.title',\n    bodyKey: 'staff.notifications.timesheet.periodIncomplete.body',\n    icon: 'calendar-clock',\n    severity: 'warning',\n    actions: [\n      {\n        id: 'open-timesheet',\n        labelKey: 'staff.notifications.timesheet.actions.openTimesheet',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/timesheet',\n      },\n    ],\n    primaryActionId: 'open-timesheet',\n    linkHref: '/backend/staff/time-tracking/timesheet',\n    expiresAfterHours: 168, // 7 days\n  },\n  {\n    // Customer support tickets: raised for every portal ticket. The audience is the\n    // assignee (when the project default applied) plus the project's active\n    // assigners, falling back through owner and organization project managers.\n    type: 'staff.support_ticket.created',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.supportTicket.created.title',\n    bodyKey: 'staff.notifications.supportTicket.created.body',\n    icon: 'life-buoy',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-ticket',\n        labelKey: 'staff.notifications.supportTicket.actions.open',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/support?task={sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-ticket',\n    linkHref: '/backend/staff/time-tracking/support?task={sourceEntityId}',\n    expiresAfterHours: 336,\n  },\n  {\n    type: 'staff.support_ticket.customer_replied',\n    channels: ['in_app', 'email'],\n    module: 'staff',\n    titleKey: 'staff.notifications.supportTicket.customerReplied.title',\n    bodyKey: 'staff.notifications.supportTicket.customerReplied.body',\n    icon: 'message-square',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-ticket',\n        labelKey: 'staff.notifications.supportTicket.actions.open',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/support?task={sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-ticket',\n    linkHref: '/backend/staff/time-tracking/support?task={sourceEntityId}',\n    expiresAfterHours: 336,\n  },\n  {\n    // A task in the project became unassigned (released or cleared): tells the\n    // project's assigners there is claimable work.\n    type: 'staff.timesheets.time_task.released',\n    channels: ['in_app'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeTask.released.title',\n    bodyKey: 'staff.notifications.timeTask.released.body',\n    icon: 'hand',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-task',\n        labelKey: 'staff.notifications.timeTask.actions.open',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/board?task={sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-task',\n    linkHref: '/backend/staff/time-tracking/board?task={sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n  {\n    // Someone else assigned the recipient to a task through the task editor. Not sent\n    // for claims (self-assignment) or for the portal default assignee, who hears\n    // about the intake once through `staff.support_ticket.created`.\n    type: 'staff.timesheets.time_task.assigned',\n    channels: ['in_app'],\n    module: 'staff',\n    titleKey: 'staff.notifications.timeTask.assigned.title',\n    bodyKey: 'staff.notifications.timeTask.assigned.body',\n    icon: 'user-check',\n    severity: 'info',\n    actions: [\n      {\n        id: 'open-task',\n        labelKey: 'staff.notifications.timeTask.actions.open',\n        variant: 'default',\n        icon: 'external-link',\n        href: '/backend/staff/time-tracking/board?task={sourceEntityId}',\n      },\n    ],\n    primaryActionId: 'open-task',\n    linkHref: '/backend/staff/time-tracking/board?task={sourceEntityId}',\n    expiresAfterHours: 168,\n  },\n]\n\nexport default notificationTypes\n"],
+  "mappings": "AAEO,MAAM,oBAAkD;AAAA,EAC7D;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,QACX,kBAAkB,CAAC,6BAA6B;AAAA,MAClD;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,WAAW;AAAA,QACX,kBAAkB,CAAC,6BAA6B;AAAA,MAClD;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA;AAAA,IAEN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA,IAKE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQE,MAAM;AAAA,IACN,UAAU,CAAC,QAAQ;AAAA,IACnB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,IAIE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,UAAU,CAAC,UAAU,OAAO;AAAA,IAC5B,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA,IAGE,MAAM;AAAA,IACN,UAAU,CAAC,QAAQ;AAAA,IACnB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AAAA,EACA;AAAA;AAAA;AAAA;AAAA,IAIE,MAAM;AAAA,IACN,UAAU,CAAC,QAAQ;AAAA,IACnB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS;AAAA,IACT,MAAM;AAAA,IACN,UAAU;AAAA,IACV,SAAS;AAAA,MACP;AAAA,QACE,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,SAAS;AAAA,QACT,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,iBAAiB;AAAA,IACjB,UAAU;AAAA,IACV,mBAAmB;AAAA,EACrB;AACF;AAEA,IAAO,wBAAQ;",
   "names": []
 }

package/dist/modules/workflows/api/portal/tasks/[id]/complete/route.js

@@ -96,7 +96,7 @@ async function POST(request, { params }) {
         { status: 400 }
       );
     }
-    if (code === "TASK_NOT_FOUND" || code === "TASK_ASSIGNED_TO_ANOTHER_USER") {
+    if (code === "TASK_NOT_FOUND" || code === "TASK_ASSIGNED_TO_ANOTHER_USER" || code === "WORKFLOW_NOT_ACTIVE") {
       return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status });
     }
     logger.error("Error completing portal task", { err: error });

package/dist/modules/workflows/api/portal/tasks/[id]/complete/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../../src/modules/workflows/api/portal/tasks/%5Bid%5D/complete/route.ts"],
-  "sourcesContent": ["/**\n * Portal User Task completion API\n *\n * - POST /api/workflows/portal/tasks/[id]/complete\n *\n * `actable` is the gate, and on the portal branch `actable` is true only for the\n * assignee themselves: a portal admin who can READ a company member's task gets\n * `visible` without `actable` and is refused here. The refusal is a 404, same as\n * every other portal refusal \u2014 telling an admin \"you may see this but not\n * finish it\" would disclose more than the read already did.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  getCustomerAuthFromRequest,\n  requireCustomerFeature,\n} from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { CustomerRbacService } from '@open-mercato/core/modules/customer_accounts/services/customerRbacService'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { UserTask } from '../../../../../data/entities'\nimport { serializeUserTask } from '../../../../tasks/serialize'\nimport type { TaskHandlerService } from '../../../../../lib/task-handler'\nimport {\n  decidePortalTaskAccess,\n  PORTAL_TASK_REFUSAL,\n  PORTAL_TASKS_COMPLETE_FEATURE,\n  resolvePortalTaskPrincipal,\n} from '../../../../../lib/portal-task-access'\nimport {\n  workflowsTag,\n  portalTaskCompleteRequestSchema,\n  portalTaskCompleteResponseSchema,\n  portalTaskErrorSchema,\n} from '../../../../openapi'\n\nconst logger = createLogger('workflows')\n\nexport const metadata: { requireAuth?: boolean } = { requireAuth: false }\n\nconst completeSchema = z.object({\n  formData: z.record(z.string(), z.any()),\n  comments: z.string().optional(),\n  decisionId: z.string().min(1).optional(),\n})\n\nexport async function POST(request: NextRequest, { params }: { params: { id: string } }) {\n  const auth = await getCustomerAuthFromRequest(request)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'Authentication required' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const rbac = container.resolve('customerRbacService') as CustomerRbacService\n\n  try {\n    await requireCustomerFeature(auth, [PORTAL_TASKS_COMPLETE_FEATURE], rbac)\n  } catch (response) {\n    return response as NextResponse\n  }\n\n  try {\n    const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n    const acl = await rbac.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n\n    const resolved = await resolvePortalTaskPrincipal({ auth, em, isPortalAdmin: acl.isPortalAdmin })\n    if (!resolved.ok) return NextResponse.json(resolved.body, { status: resolved.status })\n\n    const parsed = completeSchema.safeParse(await request.json())\n    if (!parsed.success) {\n      return NextResponse.json(\n        { ok: false, error: 'Invalid request body', details: parsed.error.format() },\n        { status: 400 },\n      )\n    }\n\n    const task = await em.findOne(UserTask, {\n      id: params.id,\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n    if (!task) {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n\n    const decision = decidePortalTaskAccess(resolved.principal, task)\n    if (!decision.actable) {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n\n    const taskHandler = container.resolve('taskHandler') as TaskHandlerService\n    await taskHandler.completeUserTask(em, container, {\n      taskId: params.id,\n      formData: parsed.data.formData,\n      // The portal principal's own id. `completeUserTask` compares it against\n      // `claimedBy ?? assignedTo`, which for a portal task is the same id space,\n      // so its own ownership check agrees with the predicate rather than\n      // fighting it.\n      userId: auth.sub,\n      comments: parsed.data.comments,\n      decisionId: parsed.data.decisionId,\n      scope: { tenantId: auth.tenantId, organizationId: auth.orgId },\n    })\n\n    const updated = await em.findOne(UserTask, {\n      id: params.id,\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n\n    return NextResponse.json({\n      ok: true,\n      task: updated ? serializeUserTask(updated) : null,\n    })\n  } catch (error) {\n    const code = (error as { code?: unknown }).code\n    if (code === 'UNKNOWN_DECISION' || code === 'FORM_VALIDATION_FAILED') {\n      return NextResponse.json(\n        { ok: false, error: error instanceof Error ? error.message : 'Invalid submission' },\n        { status: 400 },\n      )\n    }\n    // Anything the handler refuses on ownership or status grounds collapses into\n    // the same 404 the predicate would have produced, so the act path discloses\n    // no more than the read path.\n    if (code === 'TASK_NOT_FOUND' || code === 'TASK_ASSIGNED_TO_ANOTHER_USER') {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n    logger.error('Error completing portal task', { err: error })\n    return NextResponse.json({ ok: false, error: 'Failed to complete task' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Portal user task completion',\n  methods: {\n    POST: {\n      summary: 'Complete a portal task',\n      description:\n        'Completes a customer-assigned task and resumes the workflow. Only the assignee may complete; a portal admin who can read a company member\\'s task is refused.',\n      requestBody: { schema: portalTaskCompleteRequestSchema },\n      responses: [\n        { status: 200, description: 'Task completed', schema: portalTaskCompleteResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request body or form data', schema: portalTaskErrorSchema },\n        { status: 401, description: 'Authentication required', schema: portalTaskErrorSchema },\n        { status: 403, description: 'Insufficient permissions or no company association', schema: portalTaskErrorSchema },\n        { status: 404, description: 'Task not found or not actionable by this principal', schema: portalTaskErrorSchema },\n        { status: 500, description: 'Internal server error', schema: portalTaskErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAYA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,yBAAyB;AAElC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAsC,EAAE,aAAa,MAAM;AAExE,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACzC,CAAC;AAED,eAAsB,KAAK,SAAsB,EAAE,OAAO,GAA+B;AACvF,QAAM,OAAO,MAAM,2BAA2B,OAAO;AACrD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAQ,qBAAqB;AAEpD,MAAI;AACF,UAAM,uBAAuB,MAAM,CAAC,6BAA6B,GAAG,IAAI;AAAA,EAC1E,SAAS,UAAU;AACjB,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK;AAAA,MACvC,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AAED,UAAM,WAAW,MAAM,2BAA2B,EAAE,MAAM,IAAI,eAAe,IAAI,cAAc,CAAC;AAChG,QAAI,CAAC,SAAS,GAAI,QAAO,aAAa,KAAK,SAAS,MAAM,EAAE,QAAQ,SAAS,OAAO,CAAC;AAErF,UAAM,SAAS,eAAe,UAAU,MAAM,QAAQ,KAAK,CAAC;AAC5D,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,wBAAwB,SAAS,OAAO,MAAM,OAAO,EAAE;AAAA,QAC3E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,MACtC,IAAI,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AAEA,UAAM,WAAW,uBAAuB,SAAS,WAAW,IAAI;AAChE,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,YAAY,iBAAiB,IAAI,WAAW;AAAA,MAChD,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,MAKtB,QAAQ,KAAK;AAAA,MACb,UAAU,OAAO,KAAK;AAAA,MACtB,YAAY,OAAO,KAAK;AAAA,MACxB,OAAO,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,IAC/D,CAAC;AAED,UAAM,UAAU,MAAM,GAAG,QAAQ,UAAU;AAAA,MACzC,IAAI,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,MAAM,UAAU,kBAAkB,OAAO,IAAI;AAAA,IAC/C,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,OAAQ,MAA6B;AAC3C,QAAI,SAAS,sBAAsB,SAAS,0BAA0B;AACpE,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,qBAAqB;AAAA,QAClF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAIA,QAAI,SAAS,oBAAoB,SAAS,iCAAiC;AACzE,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AACA,WAAO,MAAM,gCAAgC,EAAE,KAAK,MAAM,CAAC;AAC3D,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,QAAQ,gCAAgC;AAAA,MACvD,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,iCAAiC;AAAA,MACzF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,sBAAsB;AAAA,QAC/F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,sBAAsB;AAAA,QAChH,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,sBAAsB;AAAA,QAChH,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * Portal User Task completion API\n *\n * - POST /api/workflows/portal/tasks/[id]/complete\n *\n * `actable` is the gate, and on the portal branch `actable` is true only for the\n * assignee themselves: a portal admin who can READ a company member's task gets\n * `visible` without `actable` and is refused here. The refusal is a 404, same as\n * every other portal refusal \u2014 telling an admin \"you may see this but not\n * finish it\" would disclose more than the read already did.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  getCustomerAuthFromRequest,\n  requireCustomerFeature,\n} from '@open-mercato/core/modules/customer_accounts/lib/customerAuth'\nimport type { CustomerRbacService } from '@open-mercato/core/modules/customer_accounts/services/customerRbacService'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { UserTask } from '../../../../../data/entities'\nimport { serializeUserTask } from '../../../../tasks/serialize'\nimport type { TaskHandlerService } from '../../../../../lib/task-handler'\nimport {\n  decidePortalTaskAccess,\n  PORTAL_TASK_REFUSAL,\n  PORTAL_TASKS_COMPLETE_FEATURE,\n  resolvePortalTaskPrincipal,\n} from '../../../../../lib/portal-task-access'\nimport {\n  workflowsTag,\n  portalTaskCompleteRequestSchema,\n  portalTaskCompleteResponseSchema,\n  portalTaskErrorSchema,\n} from '../../../../openapi'\n\nconst logger = createLogger('workflows')\n\nexport const metadata: { requireAuth?: boolean } = { requireAuth: false }\n\nconst completeSchema = z.object({\n  formData: z.record(z.string(), z.any()),\n  comments: z.string().optional(),\n  decisionId: z.string().min(1).optional(),\n})\n\nexport async function POST(request: NextRequest, { params }: { params: { id: string } }) {\n  const auth = await getCustomerAuthFromRequest(request)\n  if (!auth) {\n    return NextResponse.json({ ok: false, error: 'Authentication required' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const rbac = container.resolve('customerRbacService') as CustomerRbacService\n\n  try {\n    await requireCustomerFeature(auth, [PORTAL_TASKS_COMPLETE_FEATURE], rbac)\n  } catch (response) {\n    return response as NextResponse\n  }\n\n  try {\n    const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n    const acl = await rbac.loadAcl(auth.sub, {\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n\n    const resolved = await resolvePortalTaskPrincipal({ auth, em, isPortalAdmin: acl.isPortalAdmin })\n    if (!resolved.ok) return NextResponse.json(resolved.body, { status: resolved.status })\n\n    const parsed = completeSchema.safeParse(await request.json())\n    if (!parsed.success) {\n      return NextResponse.json(\n        { ok: false, error: 'Invalid request body', details: parsed.error.format() },\n        { status: 400 },\n      )\n    }\n\n    const task = await em.findOne(UserTask, {\n      id: params.id,\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n    if (!task) {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n\n    const decision = decidePortalTaskAccess(resolved.principal, task)\n    if (!decision.actable) {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n\n    const taskHandler = container.resolve('taskHandler') as TaskHandlerService\n    await taskHandler.completeUserTask(em, container, {\n      taskId: params.id,\n      formData: parsed.data.formData,\n      // The portal principal's own id. `completeUserTask` compares it against\n      // `claimedBy ?? assignedTo`, which for a portal task is the same id space,\n      // so its own ownership check agrees with the predicate rather than\n      // fighting it.\n      userId: auth.sub,\n      comments: parsed.data.comments,\n      decisionId: parsed.data.decisionId,\n      scope: { tenantId: auth.tenantId, organizationId: auth.orgId },\n    })\n\n    const updated = await em.findOne(UserTask, {\n      id: params.id,\n      tenantId: auth.tenantId,\n      organizationId: auth.orgId,\n    })\n\n    return NextResponse.json({\n      ok: true,\n      task: updated ? serializeUserTask(updated) : null,\n    })\n  } catch (error) {\n    const code = (error as { code?: unknown }).code\n    if (code === 'UNKNOWN_DECISION' || code === 'FORM_VALIDATION_FAILED') {\n      return NextResponse.json(\n        { ok: false, error: error instanceof Error ? error.message : 'Invalid submission' },\n        { status: 400 },\n      )\n    }\n    // Anything the handler refuses on ownership or status grounds collapses into\n    // the same 404 the predicate would have produced, so the act path discloses\n    // no more than the read path.\n    if (\n      code === 'TASK_NOT_FOUND' ||\n      code === 'TASK_ASSIGNED_TO_ANOTHER_USER' ||\n      code === 'WORKFLOW_NOT_ACTIVE'\n    ) {\n      return NextResponse.json(PORTAL_TASK_REFUSAL.body, { status: PORTAL_TASK_REFUSAL.status })\n    }\n    logger.error('Error completing portal task', { err: error })\n    return NextResponse.json({ ok: false, error: 'Failed to complete task' }, { status: 500 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Portal user task completion',\n  methods: {\n    POST: {\n      summary: 'Complete a portal task',\n      description:\n        'Completes a customer-assigned task and resumes the workflow. Only the assignee may complete; a portal admin who can read a company member\\'s task is refused.',\n      requestBody: { schema: portalTaskCompleteRequestSchema },\n      responses: [\n        { status: 200, description: 'Task completed', schema: portalTaskCompleteResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid request body or form data', schema: portalTaskErrorSchema },\n        { status: 401, description: 'Authentication required', schema: portalTaskErrorSchema },\n        { status: 403, description: 'Insufficient permissions or no company association', schema: portalTaskErrorSchema },\n        { status: 404, description: 'Task not found or not actionable by this principal', schema: portalTaskErrorSchema },\n        { status: 500, description: 'Internal server error', schema: portalTaskErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAYA,SAAsB,oBAAoB;AAC1C,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAEP,SAAS,oBAAoB;AAC7B,SAAS,gBAAgB;AACzB,SAAS,yBAAyB;AAElC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAsC,EAAE,aAAa,MAAM;AAExE,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,IAAI,CAAC;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACzC,CAAC;AAED,eAAsB,KAAK,SAAsB,EAAE,OAAO,GAA+B;AACvF,QAAM,OAAO,MAAM,2BAA2B,OAAO;AACrD,MAAI,CAAC,MAAM;AACT,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,OAAO,UAAU,QAAQ,qBAAqB;AAEpD,MAAI;AACF,UAAM,uBAAuB,MAAM,CAAC,6BAA6B,GAAG,IAAI;AAAA,EAC1E,SAAS,UAAU;AACjB,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,MAAM,MAAM,KAAK,QAAQ,KAAK,KAAK;AAAA,MACvC,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AAED,UAAM,WAAW,MAAM,2BAA2B,EAAE,MAAM,IAAI,eAAe,IAAI,cAAc,CAAC;AAChG,QAAI,CAAC,SAAS,GAAI,QAAO,aAAa,KAAK,SAAS,MAAM,EAAE,QAAQ,SAAS,OAAO,CAAC;AAErF,UAAM,SAAS,eAAe,UAAU,MAAM,QAAQ,KAAK,CAAC;AAC5D,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,wBAAwB,SAAS,OAAO,MAAM,OAAO,EAAE;AAAA,QAC3E,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,MACtC,IAAI,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AACD,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AAEA,UAAM,WAAW,uBAAuB,SAAS,WAAW,IAAI;AAChE,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AAEA,UAAM,cAAc,UAAU,QAAQ,aAAa;AACnD,UAAM,YAAY,iBAAiB,IAAI,WAAW;AAAA,MAChD,QAAQ,OAAO;AAAA,MACf,UAAU,OAAO,KAAK;AAAA;AAAA;AAAA;AAAA;AAAA,MAKtB,QAAQ,KAAK;AAAA,MACb,UAAU,OAAO,KAAK;AAAA,MACtB,YAAY,OAAO,KAAK;AAAA,MACxB,OAAO,EAAE,UAAU,KAAK,UAAU,gBAAgB,KAAK,MAAM;AAAA,IAC/D,CAAC;AAED,UAAM,UAAU,MAAM,GAAG,QAAQ,UAAU;AAAA,MACzC,IAAI,OAAO;AAAA,MACX,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK;AAAA,IACvB,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI;AAAA,MACJ,MAAM,UAAU,kBAAkB,OAAO,IAAI;AAAA,IAC/C,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,OAAQ,MAA6B;AAC3C,QAAI,SAAS,sBAAsB,SAAS,0BAA0B;AACpE,aAAO,aAAa;AAAA,QAClB,EAAE,IAAI,OAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,qBAAqB;AAAA,QAClF,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAIA,QACE,SAAS,oBACT,SAAS,mCACT,SAAS,uBACT;AACA,aAAO,aAAa,KAAK,oBAAoB,MAAM,EAAE,QAAQ,oBAAoB,OAAO,CAAC;AAAA,IAC3F;AACA,WAAO,MAAM,gCAAgC,EAAE,KAAK,MAAM,CAAC;AAC3D,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,OAAO,0BAA0B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,QAAQ,gCAAgC;AAAA,MACvD,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,iCAAiC;AAAA,MACzF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,sBAAsB;AAAA,QAC/F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,sBAAsB;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,sBAAsB;AAAA,QAChH,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,sBAAsB;AAAA,QAChH,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,sBAAsB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/tasks/[id]/complete/route.js

@@ -105,6 +105,12 @@ async function POST(request, { params }) {
           { status: 409 }
         );
       }
+      if (error.code === "WORKFLOW_NOT_ACTIVE") {
+        return NextResponse.json(
+          { error: error.message, code: "WORKFLOW_NOT_ACTIVE" },
+          { status: 409 }
+        );
+      }
       if (error.message.includes("not found")) {
         return NextResponse.json(
           { error: error.message },
@@ -152,7 +158,7 @@ const openApi = {
         { status: 401, description: "Unauthorized", schema: workflowErrorSchema },
         { status: 403, description: "The task is visible to the caller but is not theirs to act on \u2014 it has no assignee and no role queue, so it must be reassigned first (\xA76.4: administration widens seeing, never acting).", schema: workflowErrorSchema },
         { status: 404, description: "Task not found, or not visible to the caller", schema: workflowErrorSchema },
-        { status: 409, description: "Task already completed", schema: workflowErrorSchema },
+        { status: 409, description: "Task already completed, assigned to another user, or its workflow run is no longer active (`code: WORKFLOW_NOT_ACTIVE` \u2014 the run is completed, failed, cancelled, compensating or compensated)", schema: workflowErrorSchema },
         { status: 500, description: "Internal server error", schema: workflowErrorSchema }
       ]
     }