@open-mercato/core 0.4.7-develop-0a657b411f → 0.4.7-develop-e249d3e7d0

package/dist/modules/payment_gateways/lib/gateway-service.js

@@ -0,0 +1,378 @@
+import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import {
+  getGatewayAdapter
+} from "@open-mercato/shared/modules/payment_gateways/types";
+import { GatewayTransaction } from "../data/entities.js";
+import { isValidTransition } from "./status-machine.js";
+import { emitPaymentGatewayEvent } from "../events.js";
+function createPaymentGatewayService(deps) {
+  const { em, integrationCredentialsService, integrationLogService } = deps;
+  async function findTransactionOrThrow(transactionId, scope) {
+    const transaction = await findOneWithDecryption(
+      em,
+      GatewayTransaction,
+      {
+        id: transactionId,
+        organizationId: scope.organizationId,
+        tenantId: scope.tenantId,
+        deletedAt: null
+      },
+      void 0,
+      scope
+    );
+    if (!transaction) {
+      throw new Error("Transaction not found");
+    }
+    return transaction;
+  }
+  function readProviderSessionId(transaction) {
+    if (typeof transaction.providerSessionId === "string" && transaction.providerSessionId.trim().length > 0) {
+      return transaction.providerSessionId;
+    }
+    throw new Error("Transaction is missing provider session id");
+  }
+  async function emitStatusEvent(status, payload) {
+    const eventMap = {
+      authorized: "payment_gateways.payment.authorized",
+      captured: "payment_gateways.payment.captured",
+      failed: "payment_gateways.payment.failed",
+      refunded: "payment_gateways.payment.refunded",
+      cancelled: "payment_gateways.payment.cancelled"
+    };
+    const eventId = eventMap[status];
+    if (!eventId) return;
+    await emitPaymentGatewayEvent(eventId, payload);
+  }
+  async function writeTransactionLog(providerKey, scope, transactionId, level, message, payload, code) {
+    if (!integrationLogService) return;
+    await integrationLogService.write({
+      integrationId: `gateway_${providerKey}`,
+      scopeEntityType: "payment_transaction",
+      scopeEntityId: transactionId,
+      level,
+      message,
+      code,
+      payload: payload ?? null
+    }, scope);
+  }
+  async function resolveAdapterAndCredentials(providerKey, scope) {
+    const integrationId = `gateway_${providerKey}`;
+    const selectedVersion = deps.integrationStateService ? await deps.integrationStateService.resolveApiVersion(integrationId, scope) : void 0;
+    const adapter = getGatewayAdapter(providerKey, selectedVersion);
+    if (!adapter) {
+      throw new Error(
+        selectedVersion ? `No gateway adapter registered for provider: ${providerKey} (version: ${selectedVersion})` : `No gateway adapter registered for provider: ${providerKey}`
+      );
+    }
+    const credentials = await integrationCredentialsService.resolve(integrationId, scope) ?? {};
+    return { adapter, credentials };
+  }
+  return {
+    async createPaymentSession(input) {
+      const scope = { organizationId: input.organizationId, tenantId: input.tenantId };
+      const { adapter, credentials } = await resolveAdapterAndCredentials(input.providerKey, scope);
+      const sessionInput = {
+        paymentId: input.paymentId,
+        orderId: input.orderId,
+        tenantId: input.tenantId,
+        organizationId: input.organizationId,
+        amount: input.amount,
+        currencyCode: input.currencyCode,
+        captureMethod: input.captureMethod,
+        description: input.description,
+        successUrl: input.successUrl,
+        cancelUrl: input.cancelUrl,
+        metadata: input.metadata,
+        credentials
+      };
+      const session = await adapter.createSession(sessionInput);
+      const transaction = em.create(GatewayTransaction, {
+        paymentId: input.paymentId,
+        providerKey: input.providerKey,
+        providerSessionId: session.sessionId,
+        unifiedStatus: session.status,
+        redirectUrl: session.redirectUrl ?? null,
+        clientSecret: null,
+        amount: String(input.amount),
+        currencyCode: input.currencyCode,
+        gatewayMetadata: session.providerData ?? null,
+        organizationId: input.organizationId,
+        tenantId: input.tenantId
+      });
+      await em.persistAndFlush(transaction);
+      await emitPaymentGatewayEvent("payment_gateways.session.created", {
+        transactionId: transaction.id,
+        paymentId: transaction.paymentId,
+        providerKey: transaction.providerKey,
+        status: transaction.unifiedStatus,
+        organizationId: transaction.organizationId,
+        tenantId: transaction.tenantId
+      });
+      await writeTransactionLog(
+        transaction.providerKey,
+        scope,
+        transaction.id,
+        "info",
+        "Payment session created",
+        {
+          paymentId: transaction.paymentId,
+          providerSessionId: transaction.providerSessionId,
+          status: transaction.unifiedStatus,
+          amount: input.amount,
+          currencyCode: input.currencyCode
+        }
+      );
+      return { transaction, session };
+    },
+    async capturePayment(transactionId, amount, scope) {
+      const transaction = await findTransactionOrThrow(transactionId, scope);
+      const { adapter, credentials } = await resolveAdapterAndCredentials(
+        transaction.providerKey,
+        { organizationId: transaction.organizationId, tenantId: transaction.tenantId }
+      );
+      const result = await adapter.capture({
+        sessionId: readProviderSessionId(transaction),
+        amount,
+        credentials
+      });
+      transaction.unifiedStatus = result.status;
+      transaction.gatewayMetadata = { ...transaction.gatewayMetadata, captureResult: result.providerData };
+      await em.flush();
+      await emitStatusEvent(result.status, {
+        transactionId: transaction.id,
+        paymentId: transaction.paymentId,
+        providerKey: transaction.providerKey,
+        organizationId: transaction.organizationId,
+        tenantId: transaction.tenantId
+      });
+      await writeTransactionLog(
+        transaction.providerKey,
+        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },
+        transaction.id,
+        "info",
+        "Payment captured",
+        {
+          amount: amount ?? null,
+          status: result.status,
+          capturedAmount: result.capturedAmount
+        }
+      );
+      return result;
+    },
+    async refundPayment(transactionId, amount, reason, scope) {
+      const transaction = await findTransactionOrThrow(transactionId, scope);
+      const { adapter, credentials } = await resolveAdapterAndCredentials(
+        transaction.providerKey,
+        { organizationId: transaction.organizationId, tenantId: transaction.tenantId }
+      );
+      const result = await adapter.refund({
+        sessionId: readProviderSessionId(transaction),
+        amount,
+        reason,
+        credentials
+      });
+      transaction.unifiedStatus = result.status;
+      transaction.gatewayRefundId = result.refundId;
+      transaction.gatewayMetadata = { ...transaction.gatewayMetadata, refundResult: result.providerData };
+      await em.flush();
+      await emitStatusEvent(result.status, {
+        transactionId: transaction.id,
+        paymentId: transaction.paymentId,
+        providerKey: transaction.providerKey,
+        organizationId: transaction.organizationId,
+        tenantId: transaction.tenantId
+      });
+      await writeTransactionLog(
+        transaction.providerKey,
+        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },
+        transaction.id,
+        "info",
+        "Payment refunded",
+        {
+          amount: amount ?? null,
+          reason: reason ?? null,
+          status: result.status,
+          refundId: result.refundId
+        }
+      );
+      return result;
+    },
+    async cancelPayment(transactionId, reason, scope) {
+      const transaction = await findTransactionOrThrow(transactionId, scope);
+      const { adapter, credentials } = await resolveAdapterAndCredentials(
+        transaction.providerKey,
+        { organizationId: transaction.organizationId, tenantId: transaction.tenantId }
+      );
+      const result = await adapter.cancel({
+        sessionId: readProviderSessionId(transaction),
+        reason,
+        credentials
+      });
+      transaction.unifiedStatus = result.status;
+      await em.flush();
+      await emitStatusEvent(result.status, {
+        transactionId: transaction.id,
+        paymentId: transaction.paymentId,
+        providerKey: transaction.providerKey,
+        organizationId: transaction.organizationId,
+        tenantId: transaction.tenantId
+      });
+      await writeTransactionLog(
+        transaction.providerKey,
+        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },
+        transaction.id,
+        "info",
+        "Payment cancelled",
+        {
+          reason: reason ?? null,
+          status: result.status
+        }
+      );
+      return result;
+    },
+    async getPaymentStatus(transactionId, scope) {
+      const transaction = await findTransactionOrThrow(transactionId, scope);
+      const { adapter, credentials } = await resolveAdapterAndCredentials(
+        transaction.providerKey,
+        { organizationId: transaction.organizationId, tenantId: transaction.tenantId }
+      );
+      const status = await adapter.getStatus({
+        sessionId: readProviderSessionId(transaction),
+        credentials
+      });
+      if (status.status !== transaction.unifiedStatus && isValidTransition(transaction.unifiedStatus, status.status)) {
+        const previousStatus = transaction.unifiedStatus;
+        transaction.unifiedStatus = status.status;
+        transaction.gatewayStatus = status.status;
+        transaction.gatewayMetadata = { ...transaction.gatewayMetadata, statusResult: status.providerData ?? null };
+        transaction.lastPolledAt = /* @__PURE__ */ new Date();
+        await em.flush();
+        await emitStatusEvent(status.status, {
+          transactionId: transaction.id,
+          paymentId: transaction.paymentId,
+          providerKey: transaction.providerKey,
+          previousStatus,
+          organizationId: transaction.organizationId,
+          tenantId: transaction.tenantId
+        });
+        await writeTransactionLog(
+          transaction.providerKey,
+          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },
+          transaction.id,
+          "info",
+          "Payment status updated by poller",
+          {
+            previousStatus,
+            nextStatus: status.status
+          }
+        );
+      }
+      return status;
+    },
+    async syncTransactionStatus(transactionId, update, scope) {
+      const transaction = await findTransactionOrThrow(transactionId, scope);
+      const currentStatus = transaction.unifiedStatus;
+      const canTransition = isValidTransition(currentStatus, update.unifiedStatus);
+      const shouldApplyStatus = canTransition && update.unifiedStatus !== currentStatus;
+      const previousStatus = transaction.unifiedStatus;
+      if (shouldApplyStatus) {
+        transaction.unifiedStatus = update.unifiedStatus;
+      }
+      if (update.providerStatus) {
+        transaction.gatewayStatus = update.providerStatus;
+      }
+      if (update.providerData) {
+        transaction.gatewayMetadata = { ...transaction.gatewayMetadata, ...update.providerData };
+      }
+      if (update.webhookEvent) {
+        const webhookLog = Array.isArray(transaction.webhookLog) ? transaction.webhookLog : [];
+        webhookLog.push({
+          eventType: update.webhookEvent.eventType,
+          receivedAt: update.webhookEvent.receivedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+          idempotencyKey: update.webhookEvent.idempotencyKey,
+          unifiedStatus: update.unifiedStatus,
+          processed: update.webhookEvent.processed
+        });
+        transaction.webhookLog = webhookLog;
+      }
+      transaction.lastWebhookAt = /* @__PURE__ */ new Date();
+      await em.flush();
+      if (shouldApplyStatus) {
+        await emitStatusEvent(update.unifiedStatus, {
+          transactionId: transaction.id,
+          paymentId: transaction.paymentId,
+          providerKey: transaction.providerKey,
+          previousStatus,
+          organizationId: transaction.organizationId,
+          tenantId: transaction.tenantId
+        });
+      }
+      await writeTransactionLog(
+        transaction.providerKey,
+        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },
+        transaction.id,
+        shouldApplyStatus ? "info" : "warn",
+        shouldApplyStatus ? "Payment status synchronized from webhook" : "Webhook received with no status transition",
+        {
+          previousStatus,
+          nextStatus: update.unifiedStatus,
+          providerStatus: update.providerStatus ?? null,
+          eventType: update.webhookEvent?.eventType ?? null,
+          idempotencyKey: update.webhookEvent?.idempotencyKey ?? null
+        }
+      );
+    },
+    async findTransaction(id, scope) {
+      return findOneWithDecryption(
+        em,
+        GatewayTransaction,
+        {
+          id,
+          organizationId: scope.organizationId,
+          tenantId: scope.tenantId,
+          deletedAt: null
+        },
+        void 0,
+        scope
+      );
+    },
+    async findTransactionBySessionId(providerSessionId, scope, providerKey) {
+      return findOneWithDecryption(
+        em,
+        GatewayTransaction,
+        {
+          providerSessionId,
+          organizationId: scope.organizationId,
+          tenantId: scope.tenantId,
+          deletedAt: null,
+          ...providerKey ? { providerKey } : {}
+        },
+        void 0,
+        scope
+      );
+    },
+    async listTransactionsForStatusPolling(scope) {
+      const where = {
+        unifiedStatus: { $in: ["pending", "authorized", "partially_captured"] },
+        deletedAt: null
+      };
+      if (scope?.organizationId) where.organizationId = scope.organizationId;
+      if (scope?.tenantId) where.tenantId = scope.tenantId;
+      if (scope?.providerKey) where.providerKey = scope.providerKey;
+      return findWithDecryption(
+        em,
+        GatewayTransaction,
+        where,
+        {
+          orderBy: { updatedAt: "asc" },
+          limit: scope?.limit ?? 100
+        },
+        scope
+      );
+    }
+  };
+}
+export {
+  createPaymentGatewayService
+};
+//# sourceMappingURL=gateway-service.js.map

package/dist/modules/payment_gateways/lib/gateway-service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/payment_gateways/lib/gateway-service.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  getGatewayAdapter,\n  type CreateSessionInput,\n  type CreateSessionResult,\n  type CaptureResult,\n  type RefundResult,\n  type CancelResult,\n  type GatewayPaymentStatus,\n  type UnifiedPaymentStatus,\n} from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport type { IntegrationStateService } from '../../integrations/lib/state-service'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport { GatewayTransaction } from '../data/entities'\nimport { isValidTransition } from './status-machine'\nimport { emitPaymentGatewayEvent } from '../events'\n\nexport interface PaymentGatewayServiceDeps {\n  em: EntityManager\n  integrationCredentialsService: CredentialsService\n  integrationStateService?: IntegrationStateService\n  integrationLogService?: IntegrationLogService\n}\n\nexport interface CreatePaymentSessionInput {\n  providerKey: string\n  paymentId: string\n  orderId?: string\n  amount: number\n  currencyCode: string\n  captureMethod?: 'automatic' | 'manual'\n  description?: string\n  successUrl?: string\n  cancelUrl?: string\n  metadata?: Record<string, unknown>\n  organizationId: string\n  tenantId: string\n}\n\nexport function createPaymentGatewayService(deps: PaymentGatewayServiceDeps) {\n  const { em, integrationCredentialsService, integrationLogService } = deps\n\n  async function findTransactionOrThrow(\n    transactionId: string,\n    scope: { organizationId: string; tenantId: string },\n  ): Promise<GatewayTransaction> {\n    const transaction = await findOneWithDecryption(\n      em,\n      GatewayTransaction,\n      {\n        id: transactionId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n    if (!transaction) {\n      throw new Error('Transaction not found')\n    }\n    return transaction\n  }\n\n  function readProviderSessionId(transaction: GatewayTransaction): string {\n    if (typeof transaction.providerSessionId === 'string' && transaction.providerSessionId.trim().length > 0) {\n      return transaction.providerSessionId\n    }\n    throw new Error('Transaction is missing provider session id')\n  }\n\n  async function emitStatusEvent(status: UnifiedPaymentStatus, payload: Record<string, unknown>) {\n    type PaymentGatewayEventId = Parameters<typeof emitPaymentGatewayEvent>[0]\n    const eventMap: Partial<Record<UnifiedPaymentStatus, PaymentGatewayEventId>> = {\n      authorized: 'payment_gateways.payment.authorized',\n      captured: 'payment_gateways.payment.captured',\n      failed: 'payment_gateways.payment.failed',\n      refunded: 'payment_gateways.payment.refunded',\n      cancelled: 'payment_gateways.payment.cancelled',\n    }\n    const eventId = eventMap[status]\n    if (!eventId) return\n    await emitPaymentGatewayEvent(eventId, payload)\n  }\n\n  async function writeTransactionLog(\n    providerKey: string,\n    scope: { organizationId: string; tenantId: string },\n    transactionId: string,\n    level: 'info' | 'warn' | 'error',\n    message: string,\n    payload?: Record<string, unknown> | null,\n    code?: string | null,\n  ) {\n    if (!integrationLogService) return\n    await integrationLogService.write({\n      integrationId: `gateway_${providerKey}`,\n      scopeEntityType: 'payment_transaction',\n      scopeEntityId: transactionId,\n      level,\n      message,\n      code,\n      payload: payload ?? null,\n    }, scope)\n  }\n\n  async function resolveAdapterAndCredentials(providerKey: string, scope: { organizationId: string; tenantId: string }) {\n    const integrationId = `gateway_${providerKey}`\n    const selectedVersion = deps.integrationStateService\n      ? await deps.integrationStateService.resolveApiVersion(integrationId, scope)\n      : undefined\n    const adapter = getGatewayAdapter(providerKey, selectedVersion)\n    if (!adapter) {\n      throw new Error(\n        selectedVersion\n          ? `No gateway adapter registered for provider: ${providerKey} (version: ${selectedVersion})`\n          : `No gateway adapter registered for provider: ${providerKey}`,\n      )\n    }\n    const credentials = await integrationCredentialsService.resolve(integrationId, scope) ?? {}\n\n    return { adapter, credentials }\n  }\n\n  return {\n    async createPaymentSession(input: CreatePaymentSessionInput): Promise<{ transaction: GatewayTransaction; session: CreateSessionResult }> {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      const { adapter, credentials } = await resolveAdapterAndCredentials(input.providerKey, scope)\n\n      const sessionInput: CreateSessionInput = {\n        paymentId: input.paymentId,\n        orderId: input.orderId,\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n        captureMethod: input.captureMethod,\n        description: input.description,\n        successUrl: input.successUrl,\n        cancelUrl: input.cancelUrl,\n        metadata: input.metadata,\n        credentials,\n      }\n\n      const session = await adapter.createSession(sessionInput)\n\n      const transaction = em.create(GatewayTransaction, {\n        paymentId: input.paymentId,\n        providerKey: input.providerKey,\n        providerSessionId: session.sessionId,\n        unifiedStatus: session.status,\n        redirectUrl: session.redirectUrl ?? null,\n        clientSecret: null,\n        amount: String(input.amount),\n        currencyCode: input.currencyCode,\n        gatewayMetadata: session.providerData ?? null,\n        organizationId: input.organizationId,\n        tenantId: input.tenantId,\n      })\n      await em.persistAndFlush(transaction)\n      await emitPaymentGatewayEvent('payment_gateways.session.created', {\n        transactionId: transaction.id,\n        paymentId: transaction.paymentId,\n        providerKey: transaction.providerKey,\n        status: transaction.unifiedStatus,\n        organizationId: transaction.organizationId,\n        tenantId: transaction.tenantId,\n      })\n      await writeTransactionLog(\n        transaction.providerKey,\n        scope,\n        transaction.id,\n        'info',\n        'Payment session created',\n        {\n          paymentId: transaction.paymentId,\n          providerSessionId: transaction.providerSessionId,\n          status: transaction.unifiedStatus,\n          amount: input.amount,\n          currencyCode: input.currencyCode,\n        },\n      )\n\n      return { transaction, session }\n    },\n\n    async capturePayment(transactionId: string, amount: number | undefined, scope: { organizationId: string; tenantId: string }): Promise<CaptureResult> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n\n      const result = await adapter.capture({\n        sessionId: readProviderSessionId(transaction),\n        amount,\n        credentials,\n      })\n\n      transaction.unifiedStatus = result.status\n      transaction.gatewayMetadata = { ...transaction.gatewayMetadata, captureResult: result.providerData }\n      await em.flush()\n      await emitStatusEvent(result.status, {\n        transactionId: transaction.id,\n        paymentId: transaction.paymentId,\n        providerKey: transaction.providerKey,\n        organizationId: transaction.organizationId,\n        tenantId: transaction.tenantId,\n      })\n      await writeTransactionLog(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        transaction.id,\n        'info',\n        'Payment captured',\n        {\n          amount: amount ?? null,\n          status: result.status,\n          capturedAmount: result.capturedAmount,\n        },\n      )\n\n      return result\n    },\n\n    async refundPayment(\n      transactionId: string,\n      amount: number | undefined,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n    ): Promise<RefundResult> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n\n      const result = await adapter.refund({\n        sessionId: readProviderSessionId(transaction),\n        amount,\n        reason,\n        credentials,\n      })\n\n      transaction.unifiedStatus = result.status\n      transaction.gatewayRefundId = result.refundId\n      transaction.gatewayMetadata = { ...transaction.gatewayMetadata, refundResult: result.providerData }\n      await em.flush()\n      await emitStatusEvent(result.status, {\n        transactionId: transaction.id,\n        paymentId: transaction.paymentId,\n        providerKey: transaction.providerKey,\n        organizationId: transaction.organizationId,\n        tenantId: transaction.tenantId,\n      })\n      await writeTransactionLog(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        transaction.id,\n        'info',\n        'Payment refunded',\n        {\n          amount: amount ?? null,\n          reason: reason ?? null,\n          status: result.status,\n          refundId: result.refundId,\n        },\n      )\n\n      return result\n    },\n\n    async cancelPayment(\n      transactionId: string,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n    ): Promise<CancelResult> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n\n      const result = await adapter.cancel({\n        sessionId: readProviderSessionId(transaction),\n        reason,\n        credentials,\n      })\n\n      transaction.unifiedStatus = result.status\n      await em.flush()\n      await emitStatusEvent(result.status, {\n        transactionId: transaction.id,\n        paymentId: transaction.paymentId,\n        providerKey: transaction.providerKey,\n        organizationId: transaction.organizationId,\n        tenantId: transaction.tenantId,\n      })\n      await writeTransactionLog(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        transaction.id,\n        'info',\n        'Payment cancelled',\n        {\n          reason: reason ?? null,\n          status: result.status,\n        },\n      )\n\n      return result\n    },\n\n    async getPaymentStatus(transactionId: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayPaymentStatus> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n\n      const status = await adapter.getStatus({\n        sessionId: readProviderSessionId(transaction),\n        credentials,\n      })\n\n      if (status.status !== transaction.unifiedStatus && isValidTransition(transaction.unifiedStatus as UnifiedPaymentStatus, status.status)) {\n        const previousStatus = transaction.unifiedStatus\n        transaction.unifiedStatus = status.status\n        transaction.gatewayStatus = status.status\n        transaction.gatewayMetadata = { ...transaction.gatewayMetadata, statusResult: status.providerData ?? null }\n        transaction.lastPolledAt = new Date()\n        await em.flush()\n        await emitStatusEvent(status.status, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          previousStatus,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n        await writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment status updated by poller',\n          {\n            previousStatus,\n            nextStatus: status.status,\n          },\n        )\n      }\n\n      return status\n    },\n\n    async syncTransactionStatus(transactionId: string, update: {\n      unifiedStatus: UnifiedPaymentStatus\n      providerStatus?: string\n      providerData?: Record<string, unknown>\n      webhookEvent?: {\n        eventType: string\n        idempotencyKey: string\n        processed: boolean\n        receivedAt?: string\n      }\n    }, scope: { organizationId: string; tenantId: string }): Promise<void> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const currentStatus = transaction.unifiedStatus as UnifiedPaymentStatus\n      const canTransition = isValidTransition(currentStatus, update.unifiedStatus)\n      const shouldApplyStatus = canTransition && update.unifiedStatus !== currentStatus\n      const previousStatus = transaction.unifiedStatus\n      if (shouldApplyStatus) {\n        transaction.unifiedStatus = update.unifiedStatus\n      }\n      if (update.providerStatus) {\n        transaction.gatewayStatus = update.providerStatus\n      }\n      if (update.providerData) {\n        transaction.gatewayMetadata = { ...transaction.gatewayMetadata, ...update.providerData }\n      }\n      if (update.webhookEvent) {\n        const webhookLog = Array.isArray(transaction.webhookLog) ? transaction.webhookLog : []\n        webhookLog.push({\n          eventType: update.webhookEvent.eventType,\n          receivedAt: update.webhookEvent.receivedAt ?? new Date().toISOString(),\n          idempotencyKey: update.webhookEvent.idempotencyKey,\n          unifiedStatus: update.unifiedStatus,\n          processed: update.webhookEvent.processed,\n        })\n        transaction.webhookLog = webhookLog\n      }\n      transaction.lastWebhookAt = new Date()\n      await em.flush()\n      if (shouldApplyStatus) {\n        await emitStatusEvent(update.unifiedStatus, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          previousStatus,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n      }\n      await writeTransactionLog(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        transaction.id,\n        shouldApplyStatus ? 'info' : 'warn',\n        shouldApplyStatus ? 'Payment status synchronized from webhook' : 'Webhook received with no status transition',\n        {\n          previousStatus,\n          nextStatus: update.unifiedStatus,\n          providerStatus: update.providerStatus ?? null,\n          eventType: update.webhookEvent?.eventType ?? null,\n          idempotencyKey: update.webhookEvent?.idempotencyKey ?? null,\n        },\n      )\n    },\n\n    async findTransaction(id: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          id,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async findTransactionBySessionId(\n      providerSessionId: string,\n      scope: { organizationId: string; tenantId: string },\n      providerKey?: string,\n    ): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          providerSessionId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n          ...(providerKey ? { providerKey } : {}),\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async listTransactionsForStatusPolling(scope?: {\n      organizationId?: string\n      tenantId?: string\n      providerKey?: string\n      limit?: number\n    }): Promise<GatewayTransaction[]> {\n      const where: Record<string, unknown> = {\n        unifiedStatus: { $in: ['pending', 'authorized', 'partially_captured'] },\n        deletedAt: null,\n      }\n      if (scope?.organizationId) where.organizationId = scope.organizationId\n      if (scope?.tenantId) where.tenantId = scope.tenantId\n      if (scope?.providerKey) where.providerKey = scope.providerKey\n\n      return findWithDecryption(\n        em,\n        GatewayTransaction,\n        where,\n        {\n          orderBy: { updatedAt: 'asc' },\n          limit: scope?.limit ?? 100,\n        },\n        scope,\n      )\n    },\n  }\n}\n\nexport type PaymentGatewayService = ReturnType<typeof createPaymentGatewayService>\n"],
+  "mappings": "AACA,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,OAQK;AAIP,SAAS,0BAA0B;AACnC,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AAwBjC,SAAS,4BAA4B,MAAiC;AAC3E,QAAM,EAAE,IAAI,+BAA+B,sBAAsB,IAAI;AAErE,iBAAe,uBACb,eACA,OAC6B;AAC7B,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,WAAS,sBAAsB,aAAyC;AACtE,QAAI,OAAO,YAAY,sBAAsB,YAAY,YAAY,kBAAkB,KAAK,EAAE,SAAS,GAAG;AACxG,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,iBAAe,gBAAgB,QAA8B,SAAkC;AAE7F,UAAM,WAAyE;AAAA,MAC7E,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,QAAS;AACd,UAAM,wBAAwB,SAAS,OAAO;AAAA,EAChD;AAEA,iBAAe,oBACb,aACA,OACA,eACA,OACA,SACA,SACA,MACA;AACA,QAAI,CAAC,sBAAuB;AAC5B,UAAM,sBAAsB,MAAM;AAAA,MAChC,eAAe,WAAW,WAAW;AAAA,MACrC,iBAAiB;AAAA,MACjB,eAAe;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,WAAW;AAAA,IACtB,GAAG,KAAK;AAAA,EACV;AAEA,iBAAe,6BAA6B,aAAqB,OAAqD;AACpH,UAAM,gBAAgB,WAAW,WAAW;AAC5C,UAAM,kBAAkB,KAAK,0BACzB,MAAM,KAAK,wBAAwB,kBAAkB,eAAe,KAAK,IACzE;AACJ,UAAM,UAAU,kBAAkB,aAAa,eAAe;AAC9D,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR,kBACI,+CAA+C,WAAW,cAAc,eAAe,MACvF,+CAA+C,WAAW;AAAA,MAChE;AAAA,IACF;AACA,UAAM,cAAc,MAAM,8BAA8B,QAAQ,eAAe,KAAK,KAAK,CAAC;AAE1F,WAAO,EAAE,SAAS,YAAY;AAAA,EAChC;AAEA,SAAO;AAAA,IACL,MAAM,qBAAqB,OAA8G;AACvI,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,6BAA6B,MAAM,aAAa,KAAK;AAE5F,YAAM,eAAmC;AAAA,QACvC,WAAW,MAAM;AAAA,QACjB,SAAS,MAAM;AAAA,QACf,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB,eAAe,MAAM;AAAA,QACrB,aAAa,MAAM;AAAA,QACnB,YAAY,MAAM;AAAA,QAClB,WAAW,MAAM;AAAA,QACjB,UAAU,MAAM;AAAA,QAChB;AAAA,MACF;AAEA,YAAM,UAAU,MAAM,QAAQ,cAAc,YAAY;AAExD,YAAM,cAAc,GAAG,OAAO,oBAAoB;AAAA,QAChD,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB,mBAAmB,QAAQ;AAAA,QAC3B,eAAe,QAAQ;AAAA,QACvB,aAAa,QAAQ,eAAe;AAAA,QACpC,cAAc;AAAA,QACd,QAAQ,OAAO,MAAM,MAAM;AAAA,QAC3B,cAAc,MAAM;AAAA,QACpB,iBAAiB,QAAQ,gBAAgB;AAAA,QACzC,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD,YAAM,GAAG,gBAAgB,WAAW;AACpC,YAAM,wBAAwB,oCAAoC;AAAA,QAChE,eAAe,YAAY;AAAA,QAC3B,WAAW,YAAY;AAAA,QACvB,aAAa,YAAY;AAAA,QACzB,QAAQ,YAAY;AAAA,QACpB,gBAAgB,YAAY;AAAA,QAC5B,UAAU,YAAY;AAAA,MACxB,CAAC;AACD,YAAM;AAAA,QACJ,YAAY;AAAA,QACZ;AAAA,QACA,YAAY;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,UACE,WAAW,YAAY;AAAA,UACvB,mBAAmB,YAAY;AAAA,UAC/B,QAAQ,YAAY;AAAA,UACpB,QAAQ,MAAM;AAAA,UACd,cAAc,MAAM;AAAA,QACtB;AAAA,MACF;AAEA,aAAO,EAAE,aAAa,QAAQ;AAAA,IAChC;AAAA,IAEA,MAAM,eAAe,eAAuB,QAA4B,OAA6E;AACnJ,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AAEA,YAAM,SAAS,MAAM,QAAQ,QAAQ;AAAA,QACnC,WAAW,sBAAsB,WAAW;AAAA,QAC5C;AAAA,QACA;AAAA,MACF,CAAC;AAED,kBAAY,gBAAgB,OAAO;AACnC,kBAAY,kBAAkB,EAAE,GAAG,YAAY,iBAAiB,eAAe,OAAO,aAAa;AACnG,YAAM,GAAG,MAAM;AACf,YAAM,gBAAgB,OAAO,QAAQ;AAAA,QACnC,eAAe,YAAY;AAAA,QAC3B,WAAW,YAAY;AAAA,QACvB,aAAa,YAAY;AAAA,QACzB,gBAAgB,YAAY;AAAA,QAC5B,UAAU,YAAY;AAAA,MACxB,CAAC;AACD,YAAM;AAAA,QACJ,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC7E,YAAY;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,UACE,QAAQ,UAAU;AAAA,UAClB,QAAQ,OAAO;AAAA,UACf,gBAAgB,OAAO;AAAA,QACzB;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cACJ,eACA,QACA,QACA,OACuB;AACvB,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AAEA,YAAM,SAAS,MAAM,QAAQ,OAAO;AAAA,QAClC,WAAW,sBAAsB,WAAW;AAAA,QAC5C;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAED,kBAAY,gBAAgB,OAAO;AACnC,kBAAY,kBAAkB,OAAO;AACrC,kBAAY,kBAAkB,EAAE,GAAG,YAAY,iBAAiB,cAAc,OAAO,aAAa;AAClG,YAAM,GAAG,MAAM;AACf,YAAM,gBAAgB,OAAO,QAAQ;AAAA,QACnC,eAAe,YAAY;AAAA,QAC3B,WAAW,YAAY;AAAA,QACvB,aAAa,YAAY;AAAA,QACzB,gBAAgB,YAAY;AAAA,QAC5B,UAAU,YAAY;AAAA,MACxB,CAAC;AACD,YAAM;AAAA,QACJ,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC7E,YAAY;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,UACE,QAAQ,UAAU;AAAA,UAClB,QAAQ,UAAU;AAAA,UAClB,QAAQ,OAAO;AAAA,UACf,UAAU,OAAO;AAAA,QACnB;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,cACJ,eACA,QACA,OACuB;AACvB,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AAEA,YAAM,SAAS,MAAM,QAAQ,OAAO;AAAA,QAClC,WAAW,sBAAsB,WAAW;AAAA,QAC5C;AAAA,QACA;AAAA,MACF,CAAC;AAED,kBAAY,gBAAgB,OAAO;AACnC,YAAM,GAAG,MAAM;AACf,YAAM,gBAAgB,OAAO,QAAQ;AAAA,QACnC,eAAe,YAAY;AAAA,QAC3B,WAAW,YAAY;AAAA,QACvB,aAAa,YAAY;AAAA,QACzB,gBAAgB,YAAY;AAAA,QAC5B,UAAU,YAAY;AAAA,MACxB,CAAC;AACD,YAAM;AAAA,QACJ,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC7E,YAAY;AAAA,QACZ;AAAA,QACA;AAAA,QACA;AAAA,UACE,QAAQ,UAAU;AAAA,UAClB,QAAQ,OAAO;AAAA,QACjB;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,iBAAiB,eAAuB,OAAoF;AAChI,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AAEA,YAAM,SAAS,MAAM,QAAQ,UAAU;AAAA,QACrC,WAAW,sBAAsB,WAAW;AAAA,QAC5C;AAAA,MACF,CAAC;AAED,UAAI,OAAO,WAAW,YAAY,iBAAiB,kBAAkB,YAAY,eAAuC,OAAO,MAAM,GAAG;AACtI,cAAM,iBAAiB,YAAY;AACnC,oBAAY,gBAAgB,OAAO;AACnC,oBAAY,gBAAgB,OAAO;AACnC,oBAAY,kBAAkB,EAAE,GAAG,YAAY,iBAAiB,cAAc,OAAO,gBAAgB,KAAK;AAC1G,oBAAY,eAAe,oBAAI,KAAK;AACpC,cAAM,GAAG,MAAM;AACf,cAAM,gBAAgB,OAAO,QAAQ;AAAA,UACnC,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AACD,cAAM;AAAA,UACJ,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA;AAAA,YACE;AAAA,YACA,YAAY,OAAO;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,sBAAsB,eAAuB,QAUhD,OAAoE;AACrE,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,gBAAgB,YAAY;AAClC,YAAM,gBAAgB,kBAAkB,eAAe,OAAO,aAAa;AAC3E,YAAM,oBAAoB,iBAAiB,OAAO,kBAAkB;AACpE,YAAM,iBAAiB,YAAY;AACnC,UAAI,mBAAmB;AACrB,oBAAY,gBAAgB,OAAO;AAAA,MACrC;AACA,UAAI,OAAO,gBAAgB;AACzB,oBAAY,gBAAgB,OAAO;AAAA,MACrC;AACA,UAAI,OAAO,cAAc;AACvB,oBAAY,kBAAkB,EAAE,GAAG,YAAY,iBAAiB,GAAG,OAAO,aAAa;AAAA,MACzF;AACA,UAAI,OAAO,cAAc;AACvB,cAAM,aAAa,MAAM,QAAQ,YAAY,UAAU,IAAI,YAAY,aAAa,CAAC;AACrF,mBAAW,KAAK;AAAA,UACd,WAAW,OAAO,aAAa;AAAA,UAC/B,YAAY,OAAO,aAAa,eAAc,oBAAI,KAAK,GAAE,YAAY;AAAA,UACrE,gBAAgB,OAAO,aAAa;AAAA,UACpC,eAAe,OAAO;AAAA,UACtB,WAAW,OAAO,aAAa;AAAA,QACjC,CAAC;AACD,oBAAY,aAAa;AAAA,MAC3B;AACA,kBAAY,gBAAgB,oBAAI,KAAK;AACrC,YAAM,GAAG,MAAM;AACf,UAAI,mBAAmB;AACrB,cAAM,gBAAgB,OAAO,eAAe;AAAA,UAC1C,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AACA,YAAM;AAAA,QACJ,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC7E,YAAY;AAAA,QACZ,oBAAoB,SAAS;AAAA,QAC7B,oBAAoB,6CAA6C;AAAA,QACjE;AAAA,UACE;AAAA,UACA,YAAY,OAAO;AAAA,UACnB,gBAAgB,OAAO,kBAAkB;AAAA,UACzC,WAAW,OAAO,cAAc,aAAa;AAAA,UAC7C,gBAAgB,OAAO,cAAc,kBAAkB;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,gBAAgB,IAAY,OAAyF;AACzH,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,2BACJ,mBACA,OACA,aACoC;AACpC,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,UACX,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,iCAAiC,OAKL;AAChC,YAAM,QAAiC;AAAA,QACrC,eAAe,EAAE,KAAK,CAAC,WAAW,cAAc,oBAAoB,EAAE;AAAA,QACtE,WAAW;AAAA,MACb;AACA,UAAI,OAAO,eAAgB,OAAM,iBAAiB,MAAM;AACxD,UAAI,OAAO,SAAU,OAAM,WAAW,MAAM;AAC5C,UAAI,OAAO,YAAa,OAAM,cAAc,MAAM;AAElD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,SAAS,EAAE,WAAW,MAAM;AAAA,UAC5B,OAAO,OAAO,SAAS;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/payment_gateways/lib/queue.js

@@ -0,0 +1,17 @@
+import { createQueue } from "@open-mercato/queue";
+import { getRedisUrl } from "@open-mercato/shared/lib/redis/connection";
+const queues = /* @__PURE__ */ new Map();
+function getPaymentGatewayQueue(queueName) {
+  const existing = queues.get(queueName);
+  if (existing) return existing;
+  const created = process.env.QUEUE_STRATEGY === "async" ? createQueue(queueName, "async", {
+    connection: { url: getRedisUrl("QUEUE") },
+    concurrency: Math.max(1, Number.parseInt(process.env.PAYMENT_GATEWAY_QUEUE_CONCURRENCY ?? "5", 10) || 5)
+  }) : createQueue(queueName, "local");
+  queues.set(queueName, created);
+  return created;
+}
+export {
+  getPaymentGatewayQueue
+};
+//# sourceMappingURL=queue.js.map

package/dist/modules/payment_gateways/lib/queue.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/payment_gateways/lib/queue.ts"],
+  "sourcesContent": ["import { createQueue, type Queue } from '@open-mercato/queue'\nimport { getRedisUrl } from '@open-mercato/shared/lib/redis/connection'\n\nconst queues = new Map<string, Queue<Record<string, unknown>>>()\n\nexport function getPaymentGatewayQueue(queueName: string): Queue<Record<string, unknown>> {\n  const existing = queues.get(queueName)\n  if (existing) return existing\n\n  const created = process.env.QUEUE_STRATEGY === 'async'\n    ? createQueue<Record<string, unknown>>(queueName, 'async', {\n      connection: { url: getRedisUrl('QUEUE') },\n      concurrency: Math.max(1, Number.parseInt(process.env.PAYMENT_GATEWAY_QUEUE_CONCURRENCY ?? '5', 10) || 5),\n    })\n    : createQueue<Record<string, unknown>>(queueName, 'local')\n\n  queues.set(queueName, created)\n  return created\n}\n"],
+  "mappings": "AAAA,SAAS,mBAA+B;AACxC,SAAS,mBAAmB;AAE5B,MAAM,SAAS,oBAAI,IAA4C;AAExD,SAAS,uBAAuB,WAAmD;AACxF,QAAM,WAAW,OAAO,IAAI,SAAS;AACrC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,QAAQ,IAAI,mBAAmB,UAC3C,YAAqC,WAAW,SAAS;AAAA,IACzD,YAAY,EAAE,KAAK,YAAY,OAAO,EAAE;AAAA,IACxC,aAAa,KAAK,IAAI,GAAG,OAAO,SAAS,QAAQ,IAAI,qCAAqC,KAAK,EAAE,KAAK,CAAC;AAAA,EACzG,CAAC,IACC,YAAqC,WAAW,OAAO;AAE3D,SAAO,IAAI,WAAW,OAAO;AAC7B,SAAO;AACT;",
+  "names": []
+}

package/dist/modules/payment_gateways/lib/status-machine.js

@@ -0,0 +1,29 @@
+const VALID_TRANSITIONS = {
+  pending: ["authorized", "captured", "failed", "expired", "cancelled"],
+  authorized: ["captured", "partially_captured", "cancelled", "failed"],
+  captured: ["refunded", "partially_refunded"],
+  partially_captured: ["captured", "refunded", "partially_refunded", "cancelled"],
+  partially_refunded: ["refunded"]
+  // Terminal states: refunded, cancelled, failed, expired — no valid transitions out
+};
+const TERMINAL_STATUSES = /* @__PURE__ */ new Set([
+  "refunded",
+  "cancelled",
+  "failed",
+  "expired"
+]);
+function isValidTransition(from, to) {
+  if (from === to) return false;
+  const allowed = VALID_TRANSITIONS[from];
+  if (!allowed) return false;
+  return allowed.includes(to);
+}
+function isTerminalStatus(status) {
+  return TERMINAL_STATUSES.has(status);
+}
+export {
+  TERMINAL_STATUSES,
+  isTerminalStatus,
+  isValidTransition
+};
+//# sourceMappingURL=status-machine.js.map

package/dist/modules/payment_gateways/lib/status-machine.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/payment_gateways/lib/status-machine.ts"],
+  "sourcesContent": ["import type { UnifiedPaymentStatus } from '@open-mercato/shared/modules/payment_gateways/types'\n\nconst VALID_TRANSITIONS: Record<string, UnifiedPaymentStatus[]> = {\n  pending: ['authorized', 'captured', 'failed', 'expired', 'cancelled'],\n  authorized: ['captured', 'partially_captured', 'cancelled', 'failed'],\n  captured: ['refunded', 'partially_refunded'],\n  partially_captured: ['captured', 'refunded', 'partially_refunded', 'cancelled'],\n  partially_refunded: ['refunded'],\n  // Terminal states: refunded, cancelled, failed, expired \u2014 no valid transitions out\n}\n\nexport const TERMINAL_STATUSES: Set<UnifiedPaymentStatus> = new Set([\n  'refunded',\n  'cancelled',\n  'failed',\n  'expired',\n])\n\nexport function isValidTransition(from: UnifiedPaymentStatus, to: UnifiedPaymentStatus): boolean {\n  if (from === to) return false\n  const allowed = VALID_TRANSITIONS[from]\n  if (!allowed) return false\n  return allowed.includes(to)\n}\n\nexport function isTerminalStatus(status: UnifiedPaymentStatus): boolean {\n  return TERMINAL_STATUSES.has(status)\n}\n"],
+  "mappings": "AAEA,MAAM,oBAA4D;AAAA,EAChE,SAAS,CAAC,cAAc,YAAY,UAAU,WAAW,WAAW;AAAA,EACpE,YAAY,CAAC,YAAY,sBAAsB,aAAa,QAAQ;AAAA,EACpE,UAAU,CAAC,YAAY,oBAAoB;AAAA,EAC3C,oBAAoB,CAAC,YAAY,YAAY,sBAAsB,WAAW;AAAA,EAC9E,oBAAoB,CAAC,UAAU;AAAA;AAEjC;AAEO,MAAM,oBAA+C,oBAAI,IAAI;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,kBAAkB,MAA4B,IAAmC;AAC/F,MAAI,SAAS,GAAI,QAAO;AACxB,QAAM,UAAU,kBAAkB,IAAI;AACtC,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,QAAQ,SAAS,EAAE;AAC5B;AAEO,SAAS,iBAAiB,QAAuC;AACtE,SAAO,kBAAkB,IAAI,MAAM;AACrC;",
+  "names": []
+}

package/dist/modules/payment_gateways/lib/webhook-processor.js

@@ -0,0 +1,88 @@
+import { getGatewayAdapter } from "@open-mercato/shared/modules/payment_gateways/types";
+import { claimWebhookProcessing, releaseWebhookClaim } from "./webhook-utils.js";
+function readSessionIdFromEvent(event) {
+  const id = event.data.id;
+  if (typeof id === "string" && id.trim().length > 0) return id.trim();
+  const paymentIntent = event.data.payment_intent;
+  if (typeof paymentIntent === "string" && paymentIntent.trim().length > 0) return paymentIntent.trim();
+  return null;
+}
+function readScopeFromEvent(event) {
+  const metadata = event.data.metadata;
+  if (!metadata || typeof metadata !== "object") return null;
+  const metadataRecord = metadata;
+  const organizationId = typeof metadataRecord.organizationId === "string" ? metadataRecord.organizationId.trim() : "";
+  const tenantId = typeof metadataRecord.tenantId === "string" ? metadataRecord.tenantId.trim() : "";
+  if (!organizationId || !tenantId) return null;
+  return { organizationId, tenantId };
+}
+async function writeTransactionLog(integrationLogService, providerKey, scope, transactionId, level, message, payload) {
+  await integrationLogService.write({
+    integrationId: `gateway_${providerKey}`,
+    scopeEntityType: "payment_transaction",
+    scopeEntityId: transactionId,
+    level,
+    message,
+    payload: payload ?? null
+  }, scope);
+}
+async function processPaymentGatewayWebhookJob(deps, payload) {
+  const { em, paymentGatewayService, integrationLogService } = deps;
+  const { providerKey, event } = payload;
+  const scopedPayload = payload.scope ?? readScopeFromEvent(event);
+  let transaction = payload.transactionId && scopedPayload ? await paymentGatewayService.findTransaction(payload.transactionId, scopedPayload) : null;
+  if (!transaction) {
+    const sessionId = readSessionIdFromEvent(event);
+    if (sessionId && scopedPayload) {
+      transaction = await paymentGatewayService.findTransactionBySessionId(sessionId, scopedPayload, providerKey);
+    }
+  }
+  if (!transaction) return;
+  const scope = { organizationId: transaction.organizationId, tenantId: transaction.tenantId };
+  const claimed = await claimWebhookProcessing(em, event.idempotencyKey, providerKey, scope, event.eventType);
+  if (!claimed) {
+    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, "info", "Duplicate payment gateway webhook skipped", {
+      eventType: event.eventType,
+      idempotencyKey: event.idempotencyKey
+    });
+    return;
+  }
+  try {
+    const adapter = getGatewayAdapter(providerKey);
+    if (!adapter) {
+      await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, "warn", "Missing payment gateway adapter for webhook event", {
+        providerKey,
+        eventType: event.eventType
+      });
+      return;
+    }
+    const providerStatus = typeof event.data.status === "string" ? event.data.status : "";
+    const unifiedStatus = adapter.mapStatus(providerStatus, event.eventType);
+    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, "info", "Payment gateway webhook received", {
+      eventType: event.eventType,
+      providerStatus,
+      unifiedStatus
+    });
+    await paymentGatewayService.syncTransactionStatus(transaction.id, {
+      unifiedStatus,
+      providerStatus: event.eventType,
+      providerData: event.data,
+      webhookEvent: {
+        eventType: event.eventType,
+        idempotencyKey: event.idempotencyKey,
+        processed: true
+      }
+    }, scope);
+    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, "info", "Payment gateway webhook processed", {
+      eventType: event.eventType,
+      unifiedStatus
+    });
+  } catch (error) {
+    await releaseWebhookClaim(em, event.idempotencyKey, providerKey, scope);
+    throw error;
+  }
+}
+export {
+  processPaymentGatewayWebhookJob
+};
+//# sourceMappingURL=webhook-processor.js.map

package/dist/modules/payment_gateways/lib/webhook-processor.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/payment_gateways/lib/webhook-processor.ts"],
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { getGatewayAdapter, type WebhookEvent } from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport type { PaymentGatewayService } from './gateway-service'\nimport { claimWebhookProcessing, releaseWebhookClaim } from './webhook-utils'\n\nexport type PaymentGatewayWebhookJobPayload = {\n  providerKey: string\n  event: WebhookEvent\n  transactionId?: string | null\n  scope?: {\n    organizationId: string\n    tenantId: string\n  } | null\n}\n\ntype PaymentGatewayWebhookProcessorDeps = {\n  em: EntityManager\n  paymentGatewayService: PaymentGatewayService\n  integrationLogService: IntegrationLogService\n}\n\nfunction readSessionIdFromEvent(event: WebhookEvent): string | null {\n  const id = event.data.id\n  if (typeof id === 'string' && id.trim().length > 0) return id.trim()\n  const paymentIntent = event.data.payment_intent\n  if (typeof paymentIntent === 'string' && paymentIntent.trim().length > 0) return paymentIntent.trim()\n  return null\n}\n\nfunction readScopeFromEvent(event: WebhookEvent): { organizationId: string; tenantId: string } | null {\n  const metadata = event.data.metadata\n  if (!metadata || typeof metadata !== 'object') return null\n\n  const metadataRecord = metadata as Record<string, unknown>\n  const organizationId = typeof metadataRecord.organizationId === 'string'\n    ? metadataRecord.organizationId.trim()\n    : ''\n  const tenantId = typeof metadataRecord.tenantId === 'string'\n    ? metadataRecord.tenantId.trim()\n    : ''\n\n  if (!organizationId || !tenantId) return null\n  return { organizationId, tenantId }\n}\n\nasync function writeTransactionLog(\n  integrationLogService: IntegrationLogService,\n  providerKey: string,\n  scope: { organizationId: string; tenantId: string },\n  transactionId: string,\n  level: 'info' | 'warn' | 'error',\n  message: string,\n  payload?: Record<string, unknown>,\n) {\n  await integrationLogService.write({\n    integrationId: `gateway_${providerKey}`,\n    scopeEntityType: 'payment_transaction',\n    scopeEntityId: transactionId,\n    level,\n    message,\n    payload: payload ?? null,\n  }, scope)\n}\n\nexport async function processPaymentGatewayWebhookJob(\n  deps: PaymentGatewayWebhookProcessorDeps,\n  payload: PaymentGatewayWebhookJobPayload,\n): Promise<void> {\n  const { em, paymentGatewayService, integrationLogService } = deps\n  const { providerKey, event } = payload\n  const scopedPayload = payload.scope ?? readScopeFromEvent(event)\n\n  let transaction = payload.transactionId && scopedPayload\n    ? await paymentGatewayService.findTransaction(payload.transactionId, scopedPayload)\n    : null\n\n  if (!transaction) {\n    const sessionId = readSessionIdFromEvent(event)\n    if (sessionId && scopedPayload) {\n      transaction = await paymentGatewayService.findTransactionBySessionId(sessionId, scopedPayload, providerKey)\n    }\n  }\n  if (!transaction) return\n\n  const scope = { organizationId: transaction.organizationId, tenantId: transaction.tenantId }\n  const claimed = await claimWebhookProcessing(em, event.idempotencyKey, providerKey, scope, event.eventType)\n  if (!claimed) {\n    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'info', 'Duplicate payment gateway webhook skipped', {\n      eventType: event.eventType,\n      idempotencyKey: event.idempotencyKey,\n    })\n    return\n  }\n\n  try {\n    const adapter = getGatewayAdapter(providerKey)\n    if (!adapter) {\n      await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'warn', 'Missing payment gateway adapter for webhook event', {\n        providerKey,\n        eventType: event.eventType,\n      })\n      return\n    }\n\n    const providerStatus = typeof event.data.status === 'string' ? event.data.status : ''\n    const unifiedStatus = adapter.mapStatus(providerStatus, event.eventType)\n    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'info', 'Payment gateway webhook received', {\n      eventType: event.eventType,\n      providerStatus,\n      unifiedStatus,\n    })\n\n    await paymentGatewayService.syncTransactionStatus(transaction.id, {\n      unifiedStatus,\n      providerStatus: event.eventType,\n      providerData: event.data,\n      webhookEvent: {\n        eventType: event.eventType,\n        idempotencyKey: event.idempotencyKey,\n        processed: true,\n      },\n    }, scope)\n\n    await writeTransactionLog(integrationLogService, providerKey, scope, transaction.id, 'info', 'Payment gateway webhook processed', {\n      eventType: event.eventType,\n      unifiedStatus,\n    })\n  } catch (error: unknown) {\n    await releaseWebhookClaim(em, event.idempotencyKey, providerKey, scope)\n    throw error\n  }\n}\n"],
+  "mappings": "AACA,SAAS,yBAA4C;AAGrD,SAAS,wBAAwB,2BAA2B;AAkB5D,SAAS,uBAAuB,OAAoC;AAClE,QAAM,KAAK,MAAM,KAAK;AACtB,MAAI,OAAO,OAAO,YAAY,GAAG,KAAK,EAAE,SAAS,EAAG,QAAO,GAAG,KAAK;AACnE,QAAM,gBAAgB,MAAM,KAAK;AACjC,MAAI,OAAO,kBAAkB,YAAY,cAAc,KAAK,EAAE,SAAS,EAAG,QAAO,cAAc,KAAK;AACpG,SAAO;AACT;AAEA,SAAS,mBAAmB,OAA0E;AACpG,QAAM,WAAW,MAAM,KAAK;AAC5B,MAAI,CAAC,YAAY,OAAO,aAAa,SAAU,QAAO;AAEtD,QAAM,iBAAiB;AACvB,QAAM,iBAAiB,OAAO,eAAe,mBAAmB,WAC5D,eAAe,eAAe,KAAK,IACnC;AACJ,QAAM,WAAW,OAAO,eAAe,aAAa,WAChD,eAAe,SAAS,KAAK,IAC7B;AAEJ,MAAI,CAAC,kBAAkB,CAAC,SAAU,QAAO;AACzC,SAAO,EAAE,gBAAgB,SAAS;AACpC;AAEA,eAAe,oBACb,uBACA,aACA,OACA,eACA,OACA,SACA,SACA;AACA,QAAM,sBAAsB,MAAM;AAAA,IAChC,eAAe,WAAW,WAAW;AAAA,IACrC,iBAAiB;AAAA,IACjB,eAAe;AAAA,IACf;AAAA,IACA;AAAA,IACA,SAAS,WAAW;AAAA,EACtB,GAAG,KAAK;AACV;AAEA,eAAsB,gCACpB,MACA,SACe;AACf,QAAM,EAAE,IAAI,uBAAuB,sBAAsB,IAAI;AAC7D,QAAM,EAAE,aAAa,MAAM,IAAI;AAC/B,QAAM,gBAAgB,QAAQ,SAAS,mBAAmB,KAAK;AAE/D,MAAI,cAAc,QAAQ,iBAAiB,gBACvC,MAAM,sBAAsB,gBAAgB,QAAQ,eAAe,aAAa,IAChF;AAEJ,MAAI,CAAC,aAAa;AAChB,UAAM,YAAY,uBAAuB,KAAK;AAC9C,QAAI,aAAa,eAAe;AAC9B,oBAAc,MAAM,sBAAsB,2BAA2B,WAAW,eAAe,WAAW;AAAA,IAC5G;AAAA,EACF;AACA,MAAI,CAAC,YAAa;AAElB,QAAM,QAAQ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAC3F,QAAM,UAAU,MAAM,uBAAuB,IAAI,MAAM,gBAAgB,aAAa,OAAO,MAAM,SAAS;AAC1G,MAAI,CAAC,SAAS;AACZ,UAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,6CAA6C;AAAA,MACxI,WAAW,MAAM;AAAA,MACjB,gBAAgB,MAAM;AAAA,IACxB,CAAC;AACD;AAAA,EACF;AAEA,MAAI;AACF,UAAM,UAAU,kBAAkB,WAAW;AAC7C,QAAI,CAAC,SAAS;AACZ,YAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,qDAAqD;AAAA,QAChJ;AAAA,QACA,WAAW,MAAM;AAAA,MACnB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,iBAAiB,OAAO,MAAM,KAAK,WAAW,WAAW,MAAM,KAAK,SAAS;AACnF,UAAM,gBAAgB,QAAQ,UAAU,gBAAgB,MAAM,SAAS;AACvE,UAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,oCAAoC;AAAA,MAC/H,WAAW,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,IACF,CAAC;AAED,UAAM,sBAAsB,sBAAsB,YAAY,IAAI;AAAA,MAChE;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,cAAc,MAAM;AAAA,MACpB,cAAc;AAAA,QACZ,WAAW,MAAM;AAAA,QACjB,gBAAgB,MAAM;AAAA,QACtB,WAAW;AAAA,MACb;AAAA,IACF,GAAG,KAAK;AAER,UAAM,oBAAoB,uBAAuB,aAAa,OAAO,YAAY,IAAI,QAAQ,qCAAqC;AAAA,MAChI,WAAW,MAAM;AAAA,MACjB;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAgB;AACvB,UAAM,oBAAoB,IAAI,MAAM,gBAAgB,aAAa,KAAK;AACtE,UAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/modules/payment_gateways/lib/webhook-utils.js

@@ -0,0 +1,42 @@
+import { UniqueConstraintViolationException } from "@mikro-orm/core";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { WebhookProcessedEvent } from "../data/entities.js";
+async function claimWebhookProcessing(em, idempotencyKey, providerKey, scope, eventType) {
+  const record = em.create(WebhookProcessedEvent, {
+    idempotencyKey,
+    providerKey,
+    eventType,
+    organizationId: scope.organizationId,
+    tenantId: scope.tenantId
+  });
+  try {
+    await em.persistAndFlush(record);
+    return true;
+  } catch (error) {
+    if (error instanceof UniqueConstraintViolationException) {
+      return false;
+    }
+    throw error;
+  }
+}
+async function releaseWebhookClaim(em, idempotencyKey, providerKey, scope) {
+  const existing = await findOneWithDecryption(
+    em,
+    WebhookProcessedEvent,
+    {
+      idempotencyKey,
+      providerKey,
+      organizationId: scope.organizationId,
+      tenantId: scope.tenantId
+    },
+    void 0,
+    scope
+  );
+  if (!existing) return;
+  await em.removeAndFlush(existing);
+}
+export {
+  claimWebhookProcessing,
+  releaseWebhookClaim
+};
+//# sourceMappingURL=webhook-utils.js.map