@open-mercato/core 0.4.7-develop-0a657b411f → 0.4.7-develop-11728c8558

package/src/modules/payment_gateways/lib/webhook-utils.ts

@@ -0,0 +1,52 @@
+import { UniqueConstraintViolationException } from '@mikro-orm/core'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'
+import { WebhookProcessedEvent } from '../data/entities'
+
+export async function claimWebhookProcessing(
+  em: EntityManager,
+  idempotencyKey: string,
+  providerKey: string,
+  scope: { organizationId: string; tenantId: string },
+  eventType: string,
+): Promise<boolean> {
+  const record = em.create(WebhookProcessedEvent, {
+    idempotencyKey,
+    providerKey,
+    eventType,
+    organizationId: scope.organizationId,
+    tenantId: scope.tenantId,
+  })
+
+  try {
+    await em.persistAndFlush(record)
+    return true
+  } catch (error: unknown) {
+    if (error instanceof UniqueConstraintViolationException) {
+      return false
+    }
+    throw error
+  }
+}
+
+export async function releaseWebhookClaim(
+  em: EntityManager,
+  idempotencyKey: string,
+  providerKey: string,
+  scope: { organizationId: string; tenantId: string },
+): Promise<void> {
+  const existing = await findOneWithDecryption(
+    em,
+    WebhookProcessedEvent,
+    {
+      idempotencyKey,
+      providerKey,
+      organizationId: scope.organizationId,
+      tenantId: scope.tenantId,
+    },
+    undefined,
+    scope,
+  )
+  if (!existing) return
+  await em.removeAndFlush(existing)
+}

package/src/modules/payment_gateways/migrations/.snapshot-open-mercato.json

@@ -0,0 +1,373 @@
+{
+  "namespaces": [
+    "public"
+  ],
+  "name": "public",
+  "tables": [
+    {
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "default": "gen_random_uuid()",
+          "mappedType": "uuid"
+        },
+        "payment_id": {
+          "name": "payment_id",
+          "type": "uuid",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "uuid"
+        },
+        "provider_key": {
+          "name": "provider_key",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "text"
+        },
+        "provider_session_id": {
+          "name": "provider_session_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "mappedType": "text"
+        },
+        "gateway_payment_id": {
+          "name": "gateway_payment_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "mappedType": "text"
+        },
+        "gateway_refund_id": {
+          "name": "gateway_refund_id",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "mappedType": "text"
+        },
+        "unified_status": {
+          "name": "unified_status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "default": "'pending'",
+          "mappedType": "text"
+        },
+        "gateway_status": {
+          "name": "gateway_status",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "mappedType": "text"
+        },
+        "redirect_url": {
+          "name": "redirect_url",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "mappedType": "text"
+        },
+        "client_secret": {
+          "name": "client_secret",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "mappedType": "text"
+        },
+        "amount": {
+          "name": "amount",
+          "type": "numeric(18,4)",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "precision": 18,
+          "scale": 4,
+          "mappedType": "decimal"
+        },
+        "currency_code": {
+          "name": "currency_code",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "text"
+        },
+        "gateway_metadata": {
+          "name": "gateway_metadata",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "mappedType": "json"
+        },
+        "webhook_log": {
+          "name": "webhook_log",
+          "type": "jsonb",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "mappedType": "json"
+        },
+        "last_webhook_at": {
+          "name": "last_webhook_at",
+          "type": "timestamptz",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "length": 6,
+          "mappedType": "datetime"
+        },
+        "last_polled_at": {
+          "name": "last_polled_at",
+          "type": "timestamptz",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "length": 6,
+          "mappedType": "datetime"
+        },
+        "expires_at": {
+          "name": "expires_at",
+          "type": "timestamptz",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "length": 6,
+          "mappedType": "datetime"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "uuid"
+        },
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "uuid",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "uuid"
+        },
+        "created_at": {
+          "name": "created_at",
+          "type": "timestamptz",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "length": 6,
+          "mappedType": "datetime"
+        },
+        "updated_at": {
+          "name": "updated_at",
+          "type": "timestamptz",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "length": 6,
+          "mappedType": "datetime"
+        },
+        "deleted_at": {
+          "name": "deleted_at",
+          "type": "timestamptz",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": true,
+          "length": 6,
+          "mappedType": "datetime"
+        }
+      },
+      "name": "gateway_transactions",
+      "schema": "public",
+      "indexes": [
+        {
+          "keyName": "gateway_transactions_organization_id_tenant_id_uni_5a9b9_index",
+          "columnNames": [
+            "organization_id",
+            "tenant_id",
+            "unified_status"
+          ],
+          "composite": true,
+          "constraint": false,
+          "primary": false,
+          "unique": false
+        },
+        {
+          "keyName": "gateway_transactions_provider_key_provider_session_d8577_index",
+          "columnNames": [
+            "provider_key",
+            "provider_session_id",
+            "organization_id"
+          ],
+          "composite": true,
+          "constraint": false,
+          "primary": false,
+          "unique": false
+        },
+        {
+          "keyName": "gateway_transactions_payment_id_organization_id_tenant_id_index",
+          "columnNames": [
+            "payment_id",
+            "organization_id",
+            "tenant_id"
+          ],
+          "composite": true,
+          "constraint": false,
+          "primary": false,
+          "unique": false
+        },
+        {
+          "keyName": "gateway_transactions_pkey",
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "foreignKeys": {},
+      "nativeEnums": {}
+    },
+    {
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "default": "gen_random_uuid()",
+          "mappedType": "uuid"
+        },
+        "provider_key": {
+          "name": "provider_key",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "text"
+        },
+        "idempotency_key": {
+          "name": "idempotency_key",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "text"
+        },
+        "event_type": {
+          "name": "event_type",
+          "type": "text",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "text"
+        },
+        "organization_id": {
+          "name": "organization_id",
+          "type": "uuid",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "uuid"
+        },
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "uuid",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "mappedType": "uuid"
+        },
+        "processed_at": {
+          "name": "processed_at",
+          "type": "timestamptz",
+          "unsigned": false,
+          "autoincrement": false,
+          "primary": false,
+          "nullable": false,
+          "length": 6,
+          "mappedType": "datetime"
+        }
+      },
+      "name": "gateway_webhook_events",
+      "schema": "public",
+      "indexes": [
+        {
+          "keyName": "gateway_webhook_events_idempotency_unique",
+          "columnNames": [
+            "idempotency_key",
+            "provider_key",
+            "organization_id",
+            "tenant_id"
+          ],
+          "composite": true,
+          "constraint": false,
+          "primary": false,
+          "unique": true
+        },
+        {
+          "keyName": "gateway_webhook_events_pkey",
+          "columnNames": [
+            "id"
+          ],
+          "composite": false,
+          "constraint": true,
+          "primary": true,
+          "unique": true
+        }
+      ],
+      "checks": [],
+      "foreignKeys": {},
+      "nativeEnums": {}
+    }
+  ],
+  "nativeEnums": {}
+}

package/src/modules/payment_gateways/migrations/Migration20260305122155.ts

@@ -0,0 +1,20 @@
+import { Migration } from '@mikro-orm/migrations';
+
+export class Migration20260305122155 extends Migration {
+
+  override async up(): Promise<void> {
+    this.addSql(`create table "gateway_transactions" ("id" uuid not null default gen_random_uuid(), "payment_id" uuid not null, "provider_key" text not null, "provider_session_id" text null, "gateway_payment_id" text null, "gateway_refund_id" text null, "unified_status" text not null default 'pending', "gateway_status" text null, "redirect_url" text null, "client_secret" text null, "amount" numeric(18,4) not null, "currency_code" text not null, "gateway_metadata" jsonb null, "webhook_log" jsonb null, "last_webhook_at" timestamptz null, "last_polled_at" timestamptz null, "expires_at" timestamptz null, "organization_id" uuid not null, "tenant_id" uuid not null, "created_at" timestamptz not null, "updated_at" timestamptz not null, "deleted_at" timestamptz null, constraint "gateway_transactions_pkey" primary key ("id"));`);
+    this.addSql(`create index "gateway_transactions_organization_id_tenant_id_uni_5a9b9_index" on "gateway_transactions" ("organization_id", "tenant_id", "unified_status");`);
+    this.addSql(`create index "gateway_transactions_provider_key_provider_session_d8577_index" on "gateway_transactions" ("provider_key", "provider_session_id", "organization_id");`);
+    this.addSql(`create index "gateway_transactions_payment_id_organization_id_tenant_id_index" on "gateway_transactions" ("payment_id", "organization_id", "tenant_id");`);
+
+    this.addSql(`create table "gateway_webhook_events" ("id" uuid not null default gen_random_uuid(), "provider_key" text not null, "idempotency_key" text not null, "event_type" text not null, "organization_id" uuid not null, "tenant_id" uuid not null, "processed_at" timestamptz not null, constraint "gateway_webhook_events_pkey" primary key ("id"));`);
+    this.addSql(`create unique index "gateway_webhook_events_idempotency_unique" on "gateway_webhook_events" ("idempotency_key", "provider_key", "organization_id", "tenant_id");`);
+  }
+
+  override async down(): Promise<void> {
+    this.addSql(`drop table if exists "gateway_webhook_events";`);
+    this.addSql(`drop table if exists "gateway_transactions";`);
+  }
+
+}

package/src/modules/payment_gateways/setup.ts

@@ -0,0 +1,11 @@
+import type { ModuleSetupConfig } from '@open-mercato/shared/modules/setup'
+
+export const setup: ModuleSetupConfig = {
+  defaultRoleFeatures: {
+    superadmin: ['payment_gateways.*'],
+    admin: ['payment_gateways.*'],
+    employee: ['payment_gateways.view'],
+  },
+}
+
+export default setup

package/src/modules/payment_gateways/widgets/injection-table.ts

@@ -0,0 +1,9 @@
+import type { ModuleInjectionTable } from '@open-mercato/shared/modules/widgets/injection'
+
+/**
+ * Keep hub module free of cross-module UI bindings.
+ * Consumer modules should map their own spots to payment_gateway widgets.
+ */
+export const injectionTable: ModuleInjectionTable = {}
+
+export default injectionTable

package/src/modules/payment_gateways/workers/status-poller.ts

@@ -0,0 +1,58 @@
+import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'
+import type { IntegrationLogService } from '../../integrations/lib/log-service'
+import type { PaymentGatewayService } from '../lib/gateway-service'
+
+type PollerJobPayload = {
+  scope?: {
+    organizationId?: string
+    tenantId?: string
+    providerKey?: string
+  }
+  limit?: number
+}
+
+type HandlerContext = JobContext & {
+  resolve: <T = unknown>(name: string) => T
+}
+
+export const metadata: WorkerMeta = {
+  queue: 'payment-gateways-status-poller',
+  id: 'payment-gateways:status-poller',
+  concurrency: 2,
+}
+
+export default async function handle(job: QueuedJob<PollerJobPayload>, ctx: HandlerContext): Promise<void> {
+  const service = ctx.resolve<PaymentGatewayService>('paymentGatewayService')
+  const integrationLogService = ctx.resolve<IntegrationLogService>('integrationLogService')
+  const transactions = await service.listTransactionsForStatusPolling({
+    organizationId: job.payload.scope?.organizationId,
+    tenantId: job.payload.scope?.tenantId,
+    providerKey: job.payload.scope?.providerKey,
+    limit: job.payload.limit ?? 100,
+  })
+
+  for (const transaction of transactions) {
+    try {
+      await service.getPaymentStatus(transaction.id, {
+        organizationId: transaction.organizationId,
+        tenantId: transaction.tenantId,
+      })
+    } catch (error: unknown) {
+      const message = error instanceof Error ? error.message : 'Unknown polling error'
+      await integrationLogService.write({
+        integrationId: `gateway_${transaction.providerKey}`,
+        scopeEntityType: 'payment_transaction',
+        scopeEntityId: transaction.id,
+        level: 'error',
+        message: 'Payment status polling failed',
+        payload: {
+          transactionId: transaction.id,
+          message,
+        },
+      }, {
+        organizationId: transaction.organizationId,
+        tenantId: transaction.tenantId,
+      })
+    }
+  }
+}

package/src/modules/payment_gateways/workers/webhook-processor.ts

@@ -0,0 +1,30 @@
+import type { EntityManager } from '@mikro-orm/postgresql'
+import type { WebhookEvent } from '@open-mercato/shared/modules/payment_gateways/types'
+import type { JobContext, QueuedJob, WorkerMeta } from '@open-mercato/queue'
+import type { IntegrationLogService } from '../../integrations/lib/log-service'
+import type { PaymentGatewayService } from '../lib/gateway-service'
+import { processPaymentGatewayWebhookJob, type PaymentGatewayWebhookJobPayload } from '../lib/webhook-processor'
+
+type WebhookJobPayload = PaymentGatewayWebhookJobPayload & {
+  event: WebhookEvent
+}
+
+type HandlerContext = JobContext & {
+  resolve: <T = unknown>(name: string) => T
+}
+
+export const metadata: WorkerMeta = {
+  queue: 'payment-gateways-webhook',
+  id: 'payment-gateways:webhook-processor',
+  concurrency: 5,
+}
+
+export default async function handle(job: QueuedJob<WebhookJobPayload>, ctx: HandlerContext): Promise<void> {
+  const em = ctx.resolve<EntityManager>('em')
+  const paymentGatewayService = ctx.resolve<PaymentGatewayService>('paymentGatewayService')
+  const integrationLogService = ctx.resolve<IntegrationLogService>('integrationLogService')
+  await processPaymentGatewayWebhookJob(
+    { em, paymentGatewayService, integrationLogService },
+    job.payload,
+  )
+}

package/src/modules/sales/data/enrichers.ts

@@ -0,0 +1,94 @@
+import type { ResponseEnricher } from '@open-mercato/shared/lib/crud/response-enricher'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { GatewayTransaction } from '../../payment_gateways/data/entities'
+
+type SalesPaymentRecord = Record<string, unknown> & {
+  id?: string
+  paymentId?: string
+}
+
+function readPaymentId(record: SalesPaymentRecord): string | null {
+  if (typeof record.id === 'string' && record.id.trim().length > 0) return record.id
+  if (typeof record.paymentId === 'string' && record.paymentId.trim().length > 0) return record.paymentId
+  return null
+}
+
+const paymentGatewayBindingEnricher: ResponseEnricher<SalesPaymentRecord> = {
+  id: 'sales.payment-gateway-binding',
+  targetEntity: 'sales.payment',
+  priority: 40,
+  timeout: 2000,
+
+  async enrichOne(record, context) {
+    try {
+      const em = context.em as EntityManager
+      const paymentId = readPaymentId(record)
+      if (!paymentId) return record
+      const transaction = await em.findOne(GatewayTransaction, {
+        paymentId,
+        organizationId: context.organizationId,
+        tenantId: context.tenantId,
+        deletedAt: null,
+      }, { orderBy: { createdAt: 'desc' } })
+      if (!transaction) return record
+
+      return {
+        ...record,
+        _gateway: {
+          transactionId: transaction.id,
+          unifiedStatus: transaction.unifiedStatus,
+          gatewayStatus: transaction.gatewayStatus ?? null,
+          providerKey: transaction.providerKey,
+          providerSessionId: transaction.providerSessionId ?? null,
+        },
+      }
+    } catch {
+      // payment_gateways module may be disabled; fail-open
+      return record
+    }
+  },
+
+  async enrichMany(records, context) {
+    try {
+      const em = context.em as EntityManager
+      const paymentIds = records.map(readPaymentId).filter((value): value is string => Boolean(value))
+      if (paymentIds.length === 0) return records
+
+      const transactions = await em.find(GatewayTransaction, {
+        paymentId: { $in: paymentIds },
+        organizationId: context.organizationId,
+        tenantId: context.tenantId,
+        deletedAt: null,
+      }, { orderBy: { createdAt: 'desc' } })
+
+      const latestByPaymentId = new Map<string, GatewayTransaction>()
+      for (const transaction of transactions) {
+        if (!latestByPaymentId.has(transaction.paymentId)) {
+          latestByPaymentId.set(transaction.paymentId, transaction)
+        }
+      }
+
+      return records.map((record) => {
+        const paymentId = readPaymentId(record)
+        if (!paymentId) return record
+        const transaction = latestByPaymentId.get(paymentId)
+        if (!transaction) return record
+        return {
+          ...record,
+          _gateway: {
+            transactionId: transaction.id,
+            unifiedStatus: transaction.unifiedStatus,
+            gatewayStatus: transaction.gatewayStatus ?? null,
+            providerKey: transaction.providerKey,
+            providerSessionId: transaction.providerSessionId ?? null,
+          },
+        }
+      })
+    } catch {
+      // payment_gateways module may be disabled; fail-open
+      return records
+    }
+  },
+}
+
+export const enrichers: ResponseEnricher[] = [paymentGatewayBindingEnricher]

package/src/modules/sales/widgets/injection/payment-gateway-config-field/widget.ts

@@ -0,0 +1,28 @@
+import type { InjectionFieldWidget } from '@open-mercato/shared/modules/widgets/injection'
+
+const widget: InjectionFieldWidget = {
+  metadata: {
+    id: 'sales.injection.payment-gateway-config-field',
+    priority: 40,
+  },
+  fields: [
+    {
+      id: 'payment_gateways.captureMethod',
+      label: 'payment_gateways.field.captureMethod',
+      type: 'select',
+      group: 'details',
+      options: [
+        { value: 'automatic', label: 'payment_gateways.captureMethod.automatic' },
+        { value: 'manual', label: 'payment_gateways.captureMethod.manual' },
+      ],
+    },
+    {
+      id: 'payment_gateways.paymentTypes',
+      label: 'payment_gateways.field.paymentTypes',
+      type: 'text',
+      group: 'details',
+    },
+  ],
+}
+
+export default widget