@open-mercato/core 0.6.7-develop.6569.1.c06dee4866 → 0.6.7-develop.6573.1.28649ddec6

package/dist/modules/payment_gateways/lib/payment-operation-idempotency.js

@@ -0,0 +1,183 @@
+import { createHash, randomUUID } from "node:crypto";
+import { CrudHttpError, isUniqueViolation } from "@open-mercato/shared/lib/crud/errors";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { GatewayPaymentOperation } from "../data/entities.js";
+const OPERATION_LEASE_MS = 10 * 60 * 1e3;
+const OPERATION_UNIQUE_CONSTRAINT = "gateway_payment_operations_scope_operation_unique";
+function digest(value) {
+  return createHash("sha256").update(JSON.stringify(value)).digest("hex");
+}
+function operationConflict(code, operationId, message) {
+  return new CrudHttpError(409, { error: message, code, operationId });
+}
+async function findOperation(em, operationId, scope) {
+  return findOneWithDecryption(
+    em,
+    GatewayPaymentOperation,
+    {
+      operationId,
+      organizationId: scope.organizationId,
+      tenantId: scope.tenantId
+    },
+    void 0,
+    scope
+  );
+}
+function buildOperationIdentity(input) {
+  const requestHash = digest({
+    transactionId: input.transactionId,
+    providerKey: input.providerKey,
+    action: input.action,
+    payload: input.payload
+  });
+  const operationId = input.operationId ?? `auto_${requestHash}`;
+  const providerIdempotencyKey = `om-pg-${digest({
+    tenantId: input.scope.tenantId,
+    organizationId: input.scope.organizationId,
+    transactionId: input.transactionId,
+    action: input.action,
+    operationId
+  })}`;
+  return { operationId, providerIdempotencyKey, requestHash };
+}
+function claimFields(now) {
+  return {
+    status: "in_progress",
+    attemptToken: randomUUID(),
+    leaseExpiresAt: new Date(now.getTime() + OPERATION_LEASE_MS),
+    updatedAt: now
+  };
+}
+async function resolveExistingOperation(em, existing, identity) {
+  if (existing.requestHash !== identity.requestHash) {
+    throw operationConflict(
+      "payment_operation_conflict",
+      identity.operationId,
+      "Payment operation id was already used with a different request"
+    );
+  }
+  if (existing.providerIdempotencyKey !== identity.providerIdempotencyKey) {
+    throw operationConflict(
+      "payment_operation_conflict",
+      identity.operationId,
+      "Payment operation id resolved to a different provider request"
+    );
+  }
+  if (existing.status === "succeeded" && existing.result) {
+    return { kind: "completed", result: existing.result };
+  }
+  const now = /* @__PURE__ */ new Date();
+  const stale = existing.status === "in_progress" && existing.leaseExpiresAt instanceof Date && existing.leaseExpiresAt <= now;
+  if (existing.status !== "failed" && !stale) {
+    throw operationConflict(
+      "payment_operation_in_progress",
+      identity.operationId,
+      "Payment operation is already in progress"
+    );
+  }
+  const next = claimFields(now);
+  const where = existing.status === "failed" ? { id: existing.id, status: "failed", attemptToken: existing.attemptToken } : { id: existing.id, status: "in_progress", attemptToken: existing.attemptToken, leaseExpiresAt: { $lt: now } };
+  const claimed = await em.nativeUpdate(
+    GatewayPaymentOperation,
+    where,
+    { ...next, attemptCount: existing.attemptCount + 1 }
+  );
+  if (claimed !== 1) {
+    throw operationConflict(
+      "payment_operation_in_progress",
+      identity.operationId,
+      "Payment operation is already in progress"
+    );
+  }
+  Object.assign(existing, next, { attemptCount: existing.attemptCount + 1 });
+  return {
+    kind: "claimed",
+    claim: {
+      record: existing,
+      attemptToken: next.attemptToken,
+      providerIdempotencyKey: existing.providerIdempotencyKey
+    }
+  };
+}
+async function preparePaymentOperation(input) {
+  const identity = buildOperationIdentity(input);
+  const existing = await findOperation(input.em, identity.operationId, input.scope);
+  if (existing) {
+    return resolveExistingOperation(input.em, existing, identity);
+  }
+  input.assertInitialAllowed();
+  const now = /* @__PURE__ */ new Date();
+  const claim = claimFields(now);
+  const record = input.em.create(GatewayPaymentOperation, {
+    operationId: identity.operationId,
+    transactionId: input.transactionId,
+    operationType: input.action,
+    providerKey: input.providerKey,
+    requestHash: identity.requestHash,
+    providerIdempotencyKey: identity.providerIdempotencyKey,
+    status: claim.status,
+    attemptToken: claim.attemptToken,
+    attemptCount: 1,
+    result: null,
+    leaseExpiresAt: claim.leaseExpiresAt,
+    organizationId: input.scope.organizationId,
+    tenantId: input.scope.tenantId,
+    createdAt: now,
+    updatedAt: now
+  });
+  try {
+    await input.em.persist(record).flush();
+    return {
+      kind: "claimed",
+      claim: {
+        record,
+        attemptToken: claim.attemptToken,
+        providerIdempotencyKey: identity.providerIdempotencyKey
+      }
+    };
+  } catch (error) {
+    if (!isUniqueViolation(error, OPERATION_UNIQUE_CONSTRAINT) && !isUniqueViolation(error)) {
+      throw error;
+    }
+    const winner = await findOperation(input.em, identity.operationId, input.scope);
+    if (!winner) throw error;
+    return resolveExistingOperation(input.em, winner, identity);
+  }
+}
+async function completePaymentOperation(em, claim, result, applyResult) {
+  const statusChanged = await em.transactional(async (tx) => {
+    const completed = await tx.nativeUpdate(
+      GatewayPaymentOperation,
+      { id: claim.record.id, status: "in_progress", attemptToken: claim.attemptToken },
+      { status: "succeeded", result, leaseExpiresAt: null, updatedAt: /* @__PURE__ */ new Date() }
+    );
+    if (completed !== 1) {
+      throw operationConflict(
+        "payment_operation_claim_lost",
+        claim.record.operationId,
+        "Payment operation claim is no longer active"
+      );
+    }
+    const changed = await applyResult(tx);
+    await tx.flush();
+    return changed;
+  });
+  Object.assign(claim.record, { status: "succeeded", result, leaseExpiresAt: null });
+  return statusChanged;
+}
+async function failPaymentOperation(em, claim) {
+  const failed = await em.nativeUpdate(
+    GatewayPaymentOperation,
+    { id: claim.record.id, status: "in_progress", attemptToken: claim.attemptToken },
+    { status: "failed", leaseExpiresAt: null, updatedAt: /* @__PURE__ */ new Date() }
+  );
+  if (failed === 1) {
+    Object.assign(claim.record, { status: "failed", leaseExpiresAt: null });
+  }
+}
+export {
+  completePaymentOperation,
+  failPaymentOperation,
+  preparePaymentOperation
+};
+//# sourceMappingURL=payment-operation-idempotency.js.map

package/dist/modules/payment_gateways/lib/payment-operation-idempotency.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/payment_gateways/lib/payment-operation-idempotency.ts"],
+  "sourcesContent": ["import { createHash, randomUUID } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isUniqueViolation } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { GatewayPaymentOperation } from '../data/entities'\nimport type { ManualGatewayAction } from './status-machine'\n\ntype Scope = { organizationId: string; tenantId: string }\ntype OperationStatus = 'in_progress' | 'succeeded' | 'failed'\n\nconst OPERATION_LEASE_MS = 10 * 60 * 1000\nconst OPERATION_UNIQUE_CONSTRAINT = 'gateway_payment_operations_scope_operation_unique'\n\nexport type ClaimedPaymentOperation = {\n  record: GatewayPaymentOperation\n  attemptToken: string\n  providerIdempotencyKey: string\n}\n\nexport type PreparedPaymentOperation =\n  | { kind: 'completed'; result: Record<string, unknown> }\n  | { kind: 'claimed'; claim: ClaimedPaymentOperation }\n\ntype PreparePaymentOperationInput = {\n  em: EntityManager\n  transactionId: string\n  providerKey: string\n  action: ManualGatewayAction\n  operationId?: string\n  payload: Record<string, unknown>\n  scope: Scope\n  assertInitialAllowed: () => void\n}\n\nfunction digest(value: unknown): string {\n  return createHash('sha256').update(JSON.stringify(value)).digest('hex')\n}\n\nfunction operationConflict(code: string, operationId: string, message: string): CrudHttpError {\n  return new CrudHttpError(409, { error: message, code, operationId })\n}\n\nasync function findOperation(\n  em: EntityManager,\n  operationId: string,\n  scope: Scope,\n): Promise<GatewayPaymentOperation | null> {\n  return findOneWithDecryption(\n    em,\n    GatewayPaymentOperation,\n    {\n      operationId,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n    },\n    undefined,\n    scope,\n  )\n}\n\nfunction buildOperationIdentity(input: Omit<PreparePaymentOperationInput, 'em' | 'assertInitialAllowed'>) {\n  const requestHash = digest({\n    transactionId: input.transactionId,\n    providerKey: input.providerKey,\n    action: input.action,\n    payload: input.payload,\n  })\n  const operationId = input.operationId ?? `auto_${requestHash}`\n  const providerIdempotencyKey = `om-pg-${digest({\n    tenantId: input.scope.tenantId,\n    organizationId: input.scope.organizationId,\n    transactionId: input.transactionId,\n    action: input.action,\n    operationId,\n  })}`\n  return { operationId, providerIdempotencyKey, requestHash }\n}\n\nfunction claimFields(now: Date) {\n  return {\n    status: 'in_progress' as OperationStatus,\n    attemptToken: randomUUID(),\n    leaseExpiresAt: new Date(now.getTime() + OPERATION_LEASE_MS),\n    updatedAt: now,\n  }\n}\n\nasync function resolveExistingOperation(\n  em: EntityManager,\n  existing: GatewayPaymentOperation,\n  identity: ReturnType<typeof buildOperationIdentity>,\n): Promise<PreparedPaymentOperation> {\n  if (existing.requestHash !== identity.requestHash) {\n    throw operationConflict(\n      'payment_operation_conflict',\n      identity.operationId,\n      'Payment operation id was already used with a different request',\n    )\n  }\n  if (existing.providerIdempotencyKey !== identity.providerIdempotencyKey) {\n    throw operationConflict(\n      'payment_operation_conflict',\n      identity.operationId,\n      'Payment operation id resolved to a different provider request',\n    )\n  }\n  if (existing.status === 'succeeded' && existing.result) {\n    return { kind: 'completed', result: existing.result }\n  }\n\n  const now = new Date()\n  const stale = existing.status === 'in_progress'\n    && existing.leaseExpiresAt instanceof Date\n    && existing.leaseExpiresAt <= now\n  if (existing.status !== 'failed' && !stale) {\n    throw operationConflict(\n      'payment_operation_in_progress',\n      identity.operationId,\n      'Payment operation is already in progress',\n    )\n  }\n\n  const next = claimFields(now)\n  const where = existing.status === 'failed'\n    ? { id: existing.id, status: 'failed', attemptToken: existing.attemptToken }\n    : { id: existing.id, status: 'in_progress', attemptToken: existing.attemptToken, leaseExpiresAt: { $lt: now } }\n  const claimed = await em.nativeUpdate(\n    GatewayPaymentOperation,\n    where,\n    { ...next, attemptCount: existing.attemptCount + 1 },\n  )\n  if (claimed !== 1) {\n    throw operationConflict(\n      'payment_operation_in_progress',\n      identity.operationId,\n      'Payment operation is already in progress',\n    )\n  }\n  Object.assign(existing, next, { attemptCount: existing.attemptCount + 1 })\n  return {\n    kind: 'claimed',\n    claim: {\n      record: existing,\n      attemptToken: next.attemptToken,\n      providerIdempotencyKey: existing.providerIdempotencyKey,\n    },\n  }\n}\n\nexport async function preparePaymentOperation(\n  input: PreparePaymentOperationInput,\n): Promise<PreparedPaymentOperation> {\n  const identity = buildOperationIdentity(input)\n  const existing = await findOperation(input.em, identity.operationId, input.scope)\n  if (existing) {\n    return resolveExistingOperation(input.em, existing, identity)\n  }\n\n  input.assertInitialAllowed()\n  const now = new Date()\n  const claim = claimFields(now)\n  const record = input.em.create(GatewayPaymentOperation, {\n    operationId: identity.operationId,\n    transactionId: input.transactionId,\n    operationType: input.action,\n    providerKey: input.providerKey,\n    requestHash: identity.requestHash,\n    providerIdempotencyKey: identity.providerIdempotencyKey,\n    status: claim.status,\n    attemptToken: claim.attemptToken,\n    attemptCount: 1,\n    result: null,\n    leaseExpiresAt: claim.leaseExpiresAt,\n    organizationId: input.scope.organizationId,\n    tenantId: input.scope.tenantId,\n    createdAt: now,\n    updatedAt: now,\n  })\n  try {\n    await input.em.persist(record).flush()\n    return {\n      kind: 'claimed',\n      claim: {\n        record,\n        attemptToken: claim.attemptToken,\n        providerIdempotencyKey: identity.providerIdempotencyKey,\n      },\n    }\n  } catch (error: unknown) {\n    if (!isUniqueViolation(error, OPERATION_UNIQUE_CONSTRAINT) && !isUniqueViolation(error)) {\n      throw error\n    }\n    const winner = await findOperation(input.em, identity.operationId, input.scope)\n    if (!winner) throw error\n    return resolveExistingOperation(input.em, winner, identity)\n  }\n}\n\nexport async function completePaymentOperation<T extends Record<string, unknown>>(\n  em: EntityManager,\n  claim: ClaimedPaymentOperation,\n  result: T,\n  applyResult: (tx: EntityManager) => Promise<boolean>,\n): Promise<boolean> {\n  const statusChanged = await em.transactional(async (tx) => {\n    const completed = await tx.nativeUpdate(\n      GatewayPaymentOperation,\n      { id: claim.record.id, status: 'in_progress', attemptToken: claim.attemptToken },\n      { status: 'succeeded', result, leaseExpiresAt: null, updatedAt: new Date() },\n    )\n    if (completed !== 1) {\n      throw operationConflict(\n        'payment_operation_claim_lost',\n        claim.record.operationId,\n        'Payment operation claim is no longer active',\n      )\n    }\n    const changed = await applyResult(tx)\n    await tx.flush()\n    return changed\n  })\n  Object.assign(claim.record, { status: 'succeeded', result, leaseExpiresAt: null })\n  return statusChanged\n}\n\nexport async function failPaymentOperation(\n  em: EntityManager,\n  claim: ClaimedPaymentOperation,\n): Promise<void> {\n  const failed = await em.nativeUpdate(\n    GatewayPaymentOperation,\n    { id: claim.record.id, status: 'in_progress', attemptToken: claim.attemptToken },\n    { status: 'failed', leaseExpiresAt: null, updatedAt: new Date() },\n  )\n  if (failed === 1) {\n    Object.assign(claim.record, { status: 'failed', leaseExpiresAt: null })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,kBAAkB;AAEvC,SAAS,eAAe,yBAAyB;AACjD,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AAMxC,MAAM,qBAAqB,KAAK,KAAK;AACrC,MAAM,8BAA8B;AAuBpC,SAAS,OAAO,OAAwB;AACtC,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC,EAAE,OAAO,KAAK;AACxE;AAEA,SAAS,kBAAkB,MAAc,aAAqB,SAAgC;AAC5F,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,SAAS,MAAM,YAAY,CAAC;AACrE;AAEA,eAAe,cACb,IACA,aACA,OACyC;AACzC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,uBAAuB,OAA0E;AACxG,QAAM,cAAc,OAAO;AAAA,IACzB,eAAe,MAAM;AAAA,IACrB,aAAa,MAAM;AAAA,IACnB,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,QAAM,cAAc,MAAM,eAAe,QAAQ,WAAW;AAC5D,QAAM,yBAAyB,SAAS,OAAO;AAAA,IAC7C,UAAU,MAAM,MAAM;AAAA,IACtB,gBAAgB,MAAM,MAAM;AAAA,IAC5B,eAAe,MAAM;AAAA,IACrB,QAAQ,MAAM;AAAA,IACd;AAAA,EACF,CAAC,CAAC;AACF,SAAO,EAAE,aAAa,wBAAwB,YAAY;AAC5D;AAEA,SAAS,YAAY,KAAW;AAC9B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,WAAW;AAAA,IACzB,gBAAgB,IAAI,KAAK,IAAI,QAAQ,IAAI,kBAAkB;AAAA,IAC3D,WAAW;AAAA,EACb;AACF;AAEA,eAAe,yBACb,IACA,UACA,UACmC;AACnC,MAAI,SAAS,gBAAgB,SAAS,aAAa;AACjD,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,2BAA2B,SAAS,wBAAwB;AACvE,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,WAAW,eAAe,SAAS,QAAQ;AACtD,WAAO,EAAE,MAAM,aAAa,QAAQ,SAAS,OAAO;AAAA,EACtD;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,QAAQ,SAAS,WAAW,iBAC7B,SAAS,0BAA0B,QACnC,SAAS,kBAAkB;AAChC,MAAI,SAAS,WAAW,YAAY,CAAC,OAAO;AAC1C,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,YAAY,GAAG;AAC5B,QAAM,QAAQ,SAAS,WAAW,WAC9B,EAAE,IAAI,SAAS,IAAI,QAAQ,UAAU,cAAc,SAAS,aAAa,IACzE,EAAE,IAAI,SAAS,IAAI,QAAQ,eAAe,cAAc,SAAS,cAAc,gBAAgB,EAAE,KAAK,IAAI,EAAE;AAChH,QAAM,UAAU,MAAM,GAAG;AAAA,IACvB;AAAA,IACA;AAAA,IACA,EAAE,GAAG,MAAM,cAAc,SAAS,eAAe,EAAE;AAAA,EACrD;AACA,MAAI,YAAY,GAAG;AACjB,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO,OAAO,UAAU,MAAM,EAAE,cAAc,SAAS,eAAe,EAAE,CAAC;AACzE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,KAAK;AAAA,MACnB,wBAAwB,SAAS;AAAA,IACnC;AAAA,EACF;AACF;AAEA,eAAsB,wBACpB,OACmC;AACnC,QAAM,WAAW,uBAAuB,KAAK;AAC7C,QAAM,WAAW,MAAM,cAAc,MAAM,IAAI,SAAS,aAAa,MAAM,KAAK;AAChF,MAAI,UAAU;AACZ,WAAO,yBAAyB,MAAM,IAAI,UAAU,QAAQ;AAAA,EAC9D;AAEA,QAAM,qBAAqB;AAC3B,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM,SAAS,MAAM,GAAG,OAAO,yBAAyB;AAAA,IACtD,aAAa,SAAS;AAAA,IACtB,eAAe,MAAM;AAAA,IACrB,eAAe,MAAM;AAAA,IACrB,aAAa,MAAM;AAAA,IACnB,aAAa,SAAS;AAAA,IACtB,wBAAwB,SAAS;AAAA,IACjC,QAAQ,MAAM;AAAA,IACd,cAAc,MAAM;AAAA,IACpB,cAAc;AAAA,IACd,QAAQ;AAAA,IACR,gBAAgB,MAAM;AAAA,IACtB,gBAAgB,MAAM,MAAM;AAAA,IAC5B,UAAU,MAAM,MAAM;AAAA,IACtB,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC;AACD,MAAI;AACF,UAAM,MAAM,GAAG,QAAQ,MAAM,EAAE,MAAM;AACrC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,QACL;AAAA,QACA,cAAc,MAAM;AAAA,QACpB,wBAAwB,SAAS;AAAA,MACnC;AAAA,IACF;AAAA,EACF,SAAS,OAAgB;AACvB,QAAI,CAAC,kBAAkB,OAAO,2BAA2B,KAAK,CAAC,kBAAkB,KAAK,GAAG;AACvF,YAAM;AAAA,IACR;AACA,UAAM,SAAS,MAAM,cAAc,MAAM,IAAI,SAAS,aAAa,MAAM,KAAK;AAC9E,QAAI,CAAC,OAAQ,OAAM;AACnB,WAAO,yBAAyB,MAAM,IAAI,QAAQ,QAAQ;AAAA,EAC5D;AACF;AAEA,eAAsB,yBACpB,IACA,OACA,QACA,aACkB;AAClB,QAAM,gBAAgB,MAAM,GAAG,cAAc,OAAO,OAAO;AACzD,UAAM,YAAY,MAAM,GAAG;AAAA,MACzB;AAAA,MACA,EAAE,IAAI,MAAM,OAAO,IAAI,QAAQ,eAAe,cAAc,MAAM,aAAa;AAAA,MAC/E,EAAE,QAAQ,aAAa,QAAQ,gBAAgB,MAAM,WAAW,oBAAI,KAAK,EAAE;AAAA,IAC7E;AACA,QAAI,cAAc,GAAG;AACnB,YAAM;AAAA,QACJ;AAAA,QACA,MAAM,OAAO;AAAA,QACb;AAAA,MACF;AAAA,IACF;AACA,UAAM,UAAU,MAAM,YAAY,EAAE;AACpC,UAAM,GAAG,MAAM;AACf,WAAO;AAAA,EACT,CAAC;AACD,SAAO,OAAO,MAAM,QAAQ,EAAE,QAAQ,aAAa,QAAQ,gBAAgB,KAAK,CAAC;AACjF,SAAO;AACT;AAEA,eAAsB,qBACpB,IACA,OACe;AACf,QAAM,SAAS,MAAM,GAAG;AAAA,IACtB;AAAA,IACA,EAAE,IAAI,MAAM,OAAO,IAAI,QAAQ,eAAe,cAAc,MAAM,aAAa;AAAA,IAC/E,EAAE,QAAQ,UAAU,gBAAgB,MAAM,WAAW,oBAAI,KAAK,EAAE;AAAA,EAClE;AACA,MAAI,WAAW,GAAG;AAChB,WAAO,OAAO,MAAM,QAAQ,EAAE,QAAQ,UAAU,gBAAgB,KAAK,CAAC;AAAA,EACxE;AACF;",
+  "names": []
+}

package/dist/modules/payment_gateways/migrations/Migration20260709220735_payment_gateways.js

@@ -0,0 +1,13 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260709220735_payment_gateways extends Migration {
+  up() {
+    this.addSql(`create table "gateway_payment_operations" ("id" uuid not null default gen_random_uuid(), "operation_id" text not null, "transaction_id" uuid not null, "operation_type" text not null, "provider_key" text not null, "request_hash" text not null, "provider_idempotency_key" text not null, "status" text not null default 'in_progress', "attempt_token" text not null, "attempt_count" int not null default 1, "result" jsonb null, "lease_expires_at" timestamptz null, "organization_id" uuid not null, "tenant_id" uuid not null, "created_at" timestamptz not null, "updated_at" timestamptz not null, primary key ("id"));`);
+    this.addSql(`create index "gateway_payment_operations_status_lease_expires_at_index" on "gateway_payment_operations" ("status", "lease_expires_at");`);
+    this.addSql(`create index "gateway_payment_operations_transaction_id_operatio_615c8_index" on "gateway_payment_operations" ("transaction_id", "operation_type", "organization_id", "tenant_id");`);
+    this.addSql(`alter table "gateway_payment_operations" add constraint "gateway_payment_operations_scope_operation_unique" unique ("operation_id", "organization_id", "tenant_id");`);
+  }
+}
+export {
+  Migration20260709220735_payment_gateways
+};
+//# sourceMappingURL=Migration20260709220735_payment_gateways.js.map

package/dist/modules/payment_gateways/migrations/Migration20260709220735_payment_gateways.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/payment_gateways/migrations/Migration20260709220735_payment_gateways.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260709220735_payment_gateways extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`create table \"gateway_payment_operations\" (\"id\" uuid not null default gen_random_uuid(), \"operation_id\" text not null, \"transaction_id\" uuid not null, \"operation_type\" text not null, \"provider_key\" text not null, \"request_hash\" text not null, \"provider_idempotency_key\" text not null, \"status\" text not null default 'in_progress', \"attempt_token\" text not null, \"attempt_count\" int not null default 1, \"result\" jsonb null, \"lease_expires_at\" timestamptz null, \"organization_id\" uuid not null, \"tenant_id\" uuid not null, \"created_at\" timestamptz not null, \"updated_at\" timestamptz not null, primary key (\"id\"));`);\n    this.addSql(`create index \"gateway_payment_operations_status_lease_expires_at_index\" on \"gateway_payment_operations\" (\"status\", \"lease_expires_at\");`);\n    this.addSql(`create index \"gateway_payment_operations_transaction_id_operatio_615c8_index\" on \"gateway_payment_operations\" (\"transaction_id\", \"operation_type\", \"organization_id\", \"tenant_id\");`);\n    this.addSql(`alter table \"gateway_payment_operations\" add constraint \"gateway_payment_operations_scope_operation_unique\" unique (\"operation_id\", \"organization_id\", \"tenant_id\");`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,iDAAiD,UAAU;AAAA,EAE7D,KAA2B;AAClC,SAAK,OAAO,omBAAomB;AAChnB,SAAK,OAAO,yIAAyI;AACrJ,SAAK,OAAO,qLAAqL;AACjM,SAAK,OAAO,sKAAsK;AAAA,EACpL;AAEF;",
+  "names": []
+}

package/dist/modules/sales/api/quotes/accept/route.js

@@ -67,7 +67,7 @@ async function POST(req) {
         { lockMode: LockMode.PESSIMISTIC_WRITE },
         tenantScope
       );
-      const quote2 = await findQuoteByToken(hashedToken) ?? await findQuoteByToken(token);
+      const quote2 = await findQuoteByToken(hashedToken);
       if (!quote2) {
         throw notFound(translate("sales.quotes.accept.notFound", "Quote not found."));
       }

package/dist/modules/sales/api/quotes/accept/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/sales/api/quotes/accept/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { getCachedRateLimiterService } from '@open-mercato/core/bootstrap'\nimport { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'\nimport { checkRateLimit, getClientIp, rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport { validateSameOriginMutationRequest } from './originGuard'\nimport { hashAuthToken } from '../../../../auth/lib/tokenHash'\nimport { SalesOrder, SalesQuote } from '../../../data/entities'\nimport { quoteAcceptSchema } from '../../../data/validators'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport { resolveStatusEntryIdByValue } from '../../../lib/statusHelpers'\nimport { QuoteAcceptedAdminEmail } from '../../../emails/QuoteAcceptedAdminEmail'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\ntype ConvertToOrderResult = {\n  result?: { orderId?: string } | null\n  orderId?: string\n}\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst quoteAcceptRateLimitConfig = readEndpointRateLimitConfig('SALES_QUOTES_ACCEPT', {\n  points: 10,\n  duration: 60,\n  blockDuration: 300,\n  keyPrefix: 'sales_quote_accept',\n})\n\nexport async function POST(req: Request) {\n  try {\n    const { translate } = await resolveTranslations()\n    const sameOriginViolation = validateSameOriginMutationRequest(req)\n    if (sameOriginViolation) {\n      return NextResponse.json(\n        { error: translate('sales.quotes.accept.forbidden', 'Cross-site quote acceptance is not allowed.') },\n        { status: 403 },\n      )\n    }\n\n    const rateLimiterService = getCachedRateLimiterService()\n    const clientIp = rateLimiterService ? getClientIp(req, rateLimiterService.trustProxyDepth) : null\n    if (rateLimiterService && clientIp) {\n      const rateLimitResponse = await checkRateLimit(\n        rateLimiterService,\n        quoteAcceptRateLimitConfig,\n        clientIp,\n        translate('api.errors.rateLimit', 'Too many requests. Please try again later.'),\n      )\n      if (rateLimitResponse) return rateLimitResponse\n    }\n\n    const { token } = quoteAcceptSchema.parse(await req.json().catch(() => ({})))\n    const auth = await getAuthFromRequest(req)\n    const container = await createRequestContainer()\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const hashedToken = hashAuthToken(token)\n    const tenantScope = auth?.tenantId ? { tenantId: auth.tenantId } : undefined\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n\n    // Lock the quote, flip it to confirmed, and convert it to an order inside a\n    // single transaction. The conversion command reuses this transaction (and its\n    // PESSIMISTIC_WRITE lock) via ctx.transactionalEm, so the status flip and the\n    // order creation are atomic: if conversion fails the whole transaction rolls\n    // back, leaving the quote in its prior 'sent' state with no partial order and\n    // no need for an out-of-band compensating write.\n    const { quote, orderId } = await em.transactional(async (trx) => {\n      const findQuoteByToken = (acceptanceToken: string) =>\n        findOneWithDecryption(\n          trx,\n          SalesQuote,\n          {\n            acceptanceToken,\n            ...(auth?.tenantId ? { tenantId: auth.tenantId } : {}),\n            deletedAt: null,\n          },\n          { lockMode: LockMode.PESSIMISTIC_WRITE },\n          tenantScope,\n        )\n      const quote = (await findQuoteByToken(hashedToken)) ?? (await findQuoteByToken(token))\n      if (!quote) {\n        throw notFound(translate('sales.quotes.accept.notFound', 'Quote not found.'))\n      }\n\n      const now = new Date()\n      if (quote.validUntil && quote.validUntil.getTime() < now.getTime()) {\n        throw new CrudHttpError(400, { error: translate('sales.quotes.accept.expired', 'This quote has expired.') })\n      }\n\n      if ((quote.status ?? null) !== 'sent') {\n        throw new CrudHttpError(400, {\n          error: translate('sales.quotes.accept.invalidStatus', 'This quote cannot be accepted in its current status.'),\n        })\n      }\n\n      quote.status = 'confirmed'\n      quote.statusEntryId = await resolveStatusEntryIdByValue(trx, {\n        tenantId: quote.tenantId,\n        organizationId: quote.organizationId,\n        value: 'confirmed',\n      })\n      quote.updatedAt = now\n      trx.persist(quote)\n      await trx.flush()\n\n      const ctx: CommandRuntimeContext = {\n        container,\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: quote.organizationId,\n        organizationIds: [quote.organizationId],\n        request: req,\n        transactionalEm: trx,\n      }\n\n      const result = (await commandBus.execute('sales.quotes.convert_to_order', { input: { quoteId: quote.id }, ctx })) as ConvertToOrderResult | null\n      const orderId = result?.result?.orderId ?? result?.orderId ?? quote.id\n\n      return { quote, orderId }\n    })\n\n    const order = await findOneWithDecryption(em, SalesOrder, { id: orderId, deletedAt: null }, {}, tenantScope)\n    const orderNumber = order?.orderNumber ?? orderId\n\n    // Admin notification should not block acceptance.\n    const adminEmail = process.env.ADMIN_EMAIL || ''\n    if (adminEmail) {\n      try {\n        const appUrl = process.env.APP_URL || ''\n        const orderUrl = appUrl ? `${appUrl.replace(/\\/$/, '')}/backend/sales/orders/${orderId}` : `/backend/sales/orders/${orderId}`\n\n        const copy = {\n          preview: translate('sales.quotes.accept.adminEmail.preview', 'Quote {quoteNumber} accepted', { quoteNumber: quote.quoteNumber }),\n          heading: translate('sales.quotes.accept.adminEmail.heading', 'Quote {quoteNumber} accepted', { quoteNumber: quote.quoteNumber }),\n          body: translate('sales.quotes.accept.adminEmail.body', 'The customer accepted quote {quoteNumber}. An order has been created: {orderNumber}.', {\n            quoteNumber: quote.quoteNumber,\n            orderNumber,\n          }),\n          cta: translate('sales.quotes.accept.adminEmail.cta', 'View order'),\n          footer: translate('sales.quotes.accept.adminEmail.footer', 'Open Mercato'),\n        }\n\n        await sendEmail({\n          to: adminEmail,\n          subject: translate('sales.quotes.accept.adminSubject', 'Quote {quoteNumber} accepted \u2192 Order {orderNumber}', {\n            quoteNumber: quote.quoteNumber,\n            orderNumber,\n          }),\n          react: QuoteAcceptedAdminEmail({ orderUrl, copy }),\n        })\n      } catch (err) {\n        logger.error('sales.quotes.accept.adminEmail failed', { err })\n      }\n    }\n\n    return NextResponse.json({ orderId, orderNumber })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('sales.quotes.accept failed', { err })\n    return NextResponse.json({ error: translate('sales.quotes.accept.failed', 'Failed to accept quote.') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Sales',\n  summary: 'Accept a quote (public)',\n  methods: {\n    POST: {\n      summary: 'Accept quote and convert to order',\n      requestBody: {\n        contentType: 'application/json',\n        schema: quoteAcceptSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Quote accepted and order created',\n          schema: z.object({ orderId: z.string().uuid(), orderNumber: z.string() }),\n        },\n        { status: 400, description: 'Invalid or expired quote', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Cross-site request rejected', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Quote not found', schema: z.object({ error: z.string() }) },\n        { status: 429, description: 'Too many requests', schema: rateLimitErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B;AACpC,SAAS,eAAe,iBAAiB,gBAAgB;AAGzD,SAAS,gBAAgB;AACzB,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,mCAAmC;AAC5C,SAAS,mCAAmC;AAC5C,SAAS,gBAAgB,aAAa,4BAA4B;AAClE,SAAS,yCAAyC;AAClD,SAAS,qBAAqB;AAC9B,SAAS,YAAY,kBAAkB;AACvC,SAAS,yBAAyB;AAClC,SAAS,iBAAiB;AAC1B,SAAS,mCAAmC;AAC5C,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAO5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,6BAA6B,4BAA4B,uBAAuB;AAAA,EACpF,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,eAAe;AAAA,EACf,WAAW;AACb,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,sBAAsB,kCAAkC,GAAG;AACjE,QAAI,qBAAqB;AACvB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,iCAAiC,6CAA6C,EAAE;AAAA,QACnG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,qBAAqB,4BAA4B;AACvD,UAAM,WAAW,qBAAqB,YAAY,KAAK,mBAAmB,eAAe,IAAI;AAC7F,QAAI,sBAAsB,UAAU;AAClC,YAAM,oBAAoB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,wBAAwB,4CAA4C;AAAA,MAChF;AACA,UAAI,kBAAmB,QAAO;AAAA,IAChC;AAEA,UAAM,EAAE,MAAM,IAAI,kBAAkB,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE,CAAC;AAC5E,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,cAAc,cAAc,KAAK;AACvC,UAAM,cAAc,MAAM,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI;AAEnE,UAAM,aAAa,UAAU,QAAQ,YAAY;AAQjD,UAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AAC/D,YAAM,mBAAmB,CAAC,oBACxB;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,GAAI,MAAM,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;AAAA,UACpD,WAAW;AAAA,QACb;AAAA,QACA,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACF,YAAMA,SAAS,MAAM,iBAAiB,WAAW,KAAO,MAAM,iBAAiB,KAAK;AACpF,UAAI,CAACA,QAAO;AACV,cAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,MAC9E;AAEA,YAAM,MAAM,oBAAI,KAAK;AACrB,UAAIA,OAAM,cAAcA,OAAM,WAAW,QAAQ,IAAI,IAAI,QAAQ,GAAG;AAClE,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,+BAA+B,yBAAyB,EAAE,CAAC;AAAA,MAC7G;AAEA,WAAKA,OAAM,UAAU,UAAU,QAAQ;AACrC,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,UAAU,qCAAqC,sDAAsD;AAAA,QAC9G,CAAC;AAAA,MACH;AAEA,MAAAA,OAAM,SAAS;AACf,MAAAA,OAAM,gBAAgB,MAAM,4BAA4B,KAAK;AAAA,QAC3D,UAAUA,OAAM;AAAA,QAChB,gBAAgBA,OAAM;AAAA,QACtB,OAAO;AAAA,MACT,CAAC;AACD,MAAAA,OAAM,YAAY;AAClB,UAAI,QAAQA,MAAK;AACjB,YAAM,IAAI,MAAM;AAEhB,YAAM,MAA6B;AAAA,QACjC;AAAA,QACA,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwBA,OAAM;AAAA,QAC9B,iBAAiB,CAACA,OAAM,cAAc;AAAA,QACtC,SAAS;AAAA,QACT,iBAAiB;AAAA,MACnB;AAEA,YAAM,SAAU,MAAM,WAAW,QAAQ,iCAAiC,EAAE,OAAO,EAAE,SAASA,OAAM,GAAG,GAAG,IAAI,CAAC;AAC/G,YAAMC,WAAU,QAAQ,QAAQ,WAAW,QAAQ,WAAWD,OAAM;AAEpE,aAAO,EAAE,OAAAA,QAAO,SAAAC,SAAQ;AAAA,IAC1B,CAAC;AAED,UAAM,QAAQ,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,SAAS,WAAW,KAAK,GAAG,CAAC,GAAG,WAAW;AAC3G,UAAM,cAAc,OAAO,eAAe;AAG1C,UAAM,aAAa,QAAQ,IAAI,eAAe;AAC9C,QAAI,YAAY;AACd,UAAI;AACF,cAAM,SAAS,QAAQ,IAAI,WAAW;AACtC,cAAM,WAAW,SAAS,GAAG,OAAO,QAAQ,OAAO,EAAE,CAAC,yBAAyB,OAAO,KAAK,yBAAyB,OAAO;AAE3H,cAAM,OAAO;AAAA,UACX,SAAS,UAAU,0CAA0C,gCAAgC,EAAE,aAAa,MAAM,YAAY,CAAC;AAAA,UAC/H,SAAS,UAAU,0CAA0C,gCAAgC,EAAE,aAAa,MAAM,YAAY,CAAC;AAAA,UAC/H,MAAM,UAAU,uCAAuC,wFAAwF;AAAA,YAC7I,aAAa,MAAM;AAAA,YACnB;AAAA,UACF,CAAC;AAAA,UACD,KAAK,UAAU,sCAAsC,YAAY;AAAA,UACjE,QAAQ,UAAU,yCAAyC,cAAc;AAAA,QAC3E;AAEA,cAAM,UAAU;AAAA,UACd,IAAI;AAAA,UACJ,SAAS,UAAU,oCAAoC,2DAAsD;AAAA,YAC3G,aAAa,MAAM;AAAA,YACnB;AAAA,UACF,CAAC;AAAA,UACD,OAAO,wBAAwB,EAAE,UAAU,KAAK,CAAC;AAAA,QACnD,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,eAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAAA,MAC/D;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,SAAS,YAAY,CAAC;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,8BAA8B,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzH;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,aAAa,EAAE,OAAO,EAAE,CAAC;AAAA,QAC1E;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACnG,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,MAChF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { CrudHttpError, isCrudHttpError, notFound } from '@open-mercato/shared/lib/crud/errors'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { LockMode } from '@mikro-orm/core'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { getCachedRateLimiterService } from '@open-mercato/core/bootstrap'\nimport { readEndpointRateLimitConfig } from '@open-mercato/shared/lib/ratelimit/config'\nimport { checkRateLimit, getClientIp, rateLimitErrorSchema } from '@open-mercato/shared/lib/ratelimit/helpers'\nimport { validateSameOriginMutationRequest } from './originGuard'\nimport { hashAuthToken } from '../../../../auth/lib/tokenHash'\nimport { SalesOrder, SalesQuote } from '../../../data/entities'\nimport { quoteAcceptSchema } from '../../../data/validators'\nimport { sendEmail } from '@open-mercato/shared/lib/email/send'\nimport { resolveStatusEntryIdByValue } from '../../../lib/statusHelpers'\nimport { QuoteAcceptedAdminEmail } from '../../../emails/QuoteAcceptedAdminEmail'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\ntype ConvertToOrderResult = {\n  result?: { orderId?: string } | null\n  orderId?: string\n}\n\nexport const metadata = {\n  POST: { requireAuth: false },\n}\n\nconst quoteAcceptRateLimitConfig = readEndpointRateLimitConfig('SALES_QUOTES_ACCEPT', {\n  points: 10,\n  duration: 60,\n  blockDuration: 300,\n  keyPrefix: 'sales_quote_accept',\n})\n\nexport async function POST(req: Request) {\n  try {\n    const { translate } = await resolveTranslations()\n    const sameOriginViolation = validateSameOriginMutationRequest(req)\n    if (sameOriginViolation) {\n      return NextResponse.json(\n        { error: translate('sales.quotes.accept.forbidden', 'Cross-site quote acceptance is not allowed.') },\n        { status: 403 },\n      )\n    }\n\n    const rateLimiterService = getCachedRateLimiterService()\n    const clientIp = rateLimiterService ? getClientIp(req, rateLimiterService.trustProxyDepth) : null\n    if (rateLimiterService && clientIp) {\n      const rateLimitResponse = await checkRateLimit(\n        rateLimiterService,\n        quoteAcceptRateLimitConfig,\n        clientIp,\n        translate('api.errors.rateLimit', 'Too many requests. Please try again later.'),\n      )\n      if (rateLimitResponse) return rateLimitResponse\n    }\n\n    const { token } = quoteAcceptSchema.parse(await req.json().catch(() => ({})))\n    const auth = await getAuthFromRequest(req)\n    const container = await createRequestContainer()\n    const em = (container.resolve('em') as EntityManager).fork()\n\n    const hashedToken = hashAuthToken(token)\n    const tenantScope = auth?.tenantId ? { tenantId: auth.tenantId } : undefined\n\n    const commandBus = container.resolve('commandBus') as CommandBus\n\n    // Lock the quote, flip it to confirmed, and convert it to an order inside a\n    // single transaction. The conversion command reuses this transaction (and its\n    // PESSIMISTIC_WRITE lock) via ctx.transactionalEm, so the status flip and the\n    // order creation are atomic: if conversion fails the whole transaction rolls\n    // back, leaving the quote in its prior 'sent' state with no partial order and\n    // no need for an out-of-band compensating write.\n    const { quote, orderId } = await em.transactional(async (trx) => {\n      const findQuoteByToken = (acceptanceToken: string) =>\n        findOneWithDecryption(\n          trx,\n          SalesQuote,\n          {\n            acceptanceToken,\n            ...(auth?.tenantId ? { tenantId: auth.tenantId } : {}),\n            deletedAt: null,\n          },\n          { lockMode: LockMode.PESSIMISTIC_WRITE },\n          tenantScope,\n        )\n      const quote = await findQuoteByToken(hashedToken)\n      if (!quote) {\n        throw notFound(translate('sales.quotes.accept.notFound', 'Quote not found.'))\n      }\n\n      const now = new Date()\n      if (quote.validUntil && quote.validUntil.getTime() < now.getTime()) {\n        throw new CrudHttpError(400, { error: translate('sales.quotes.accept.expired', 'This quote has expired.') })\n      }\n\n      if ((quote.status ?? null) !== 'sent') {\n        throw new CrudHttpError(400, {\n          error: translate('sales.quotes.accept.invalidStatus', 'This quote cannot be accepted in its current status.'),\n        })\n      }\n\n      quote.status = 'confirmed'\n      quote.statusEntryId = await resolveStatusEntryIdByValue(trx, {\n        tenantId: quote.tenantId,\n        organizationId: quote.organizationId,\n        value: 'confirmed',\n      })\n      quote.updatedAt = now\n      trx.persist(quote)\n      await trx.flush()\n\n      const ctx: CommandRuntimeContext = {\n        container,\n        auth: null,\n        organizationScope: null,\n        selectedOrganizationId: quote.organizationId,\n        organizationIds: [quote.organizationId],\n        request: req,\n        transactionalEm: trx,\n      }\n\n      const result = (await commandBus.execute('sales.quotes.convert_to_order', { input: { quoteId: quote.id }, ctx })) as ConvertToOrderResult | null\n      const orderId = result?.result?.orderId ?? result?.orderId ?? quote.id\n\n      return { quote, orderId }\n    })\n\n    const order = await findOneWithDecryption(em, SalesOrder, { id: orderId, deletedAt: null }, {}, tenantScope)\n    const orderNumber = order?.orderNumber ?? orderId\n\n    // Admin notification should not block acceptance.\n    const adminEmail = process.env.ADMIN_EMAIL || ''\n    if (adminEmail) {\n      try {\n        const appUrl = process.env.APP_URL || ''\n        const orderUrl = appUrl ? `${appUrl.replace(/\\/$/, '')}/backend/sales/orders/${orderId}` : `/backend/sales/orders/${orderId}`\n\n        const copy = {\n          preview: translate('sales.quotes.accept.adminEmail.preview', 'Quote {quoteNumber} accepted', { quoteNumber: quote.quoteNumber }),\n          heading: translate('sales.quotes.accept.adminEmail.heading', 'Quote {quoteNumber} accepted', { quoteNumber: quote.quoteNumber }),\n          body: translate('sales.quotes.accept.adminEmail.body', 'The customer accepted quote {quoteNumber}. An order has been created: {orderNumber}.', {\n            quoteNumber: quote.quoteNumber,\n            orderNumber,\n          }),\n          cta: translate('sales.quotes.accept.adminEmail.cta', 'View order'),\n          footer: translate('sales.quotes.accept.adminEmail.footer', 'Open Mercato'),\n        }\n\n        await sendEmail({\n          to: adminEmail,\n          subject: translate('sales.quotes.accept.adminSubject', 'Quote {quoteNumber} accepted \u2192 Order {orderNumber}', {\n            quoteNumber: quote.quoteNumber,\n            orderNumber,\n          }),\n          react: QuoteAcceptedAdminEmail({ orderUrl, copy }),\n        })\n      } catch (err) {\n        logger.error('sales.quotes.accept.adminEmail failed', { err })\n      }\n    }\n\n    return NextResponse.json({ orderId, orderNumber })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    const { translate } = await resolveTranslations()\n    logger.error('sales.quotes.accept failed', { err })\n    return NextResponse.json({ error: translate('sales.quotes.accept.failed', 'Failed to accept quote.') }, { status: 400 })\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: 'Sales',\n  summary: 'Accept a quote (public)',\n  methods: {\n    POST: {\n      summary: 'Accept quote and convert to order',\n      requestBody: {\n        contentType: 'application/json',\n        schema: quoteAcceptSchema,\n      },\n      responses: [\n        {\n          status: 200,\n          description: 'Quote accepted and order created',\n          schema: z.object({ orderId: z.string().uuid(), orderNumber: z.string() }),\n        },\n        { status: 400, description: 'Invalid or expired quote', schema: z.object({ error: z.string() }) },\n        { status: 403, description: 'Cross-site request rejected', schema: z.object({ error: z.string() }) },\n        { status: 404, description: 'Quote not found', schema: z.object({ error: z.string() }) },\n        { status: 429, description: 'Too many requests', schema: rateLimitErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AAEvC,SAAS,2BAA2B;AACpC,SAAS,eAAe,iBAAiB,gBAAgB;AAGzD,SAAS,gBAAgB;AACzB,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,mCAAmC;AAC5C,SAAS,mCAAmC;AAC5C,SAAS,gBAAgB,aAAa,4BAA4B;AAClE,SAAS,yCAAyC;AAClD,SAAS,qBAAqB;AAC9B,SAAS,YAAY,kBAAkB;AACvC,SAAS,yBAAyB;AAClC,SAAS,iBAAiB;AAC1B,SAAS,mCAAmC;AAC5C,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAO5B,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM;AAC7B;AAEA,MAAM,6BAA6B,4BAA4B,uBAAuB;AAAA,EACpF,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,eAAe;AAAA,EACf,WAAW;AACb,CAAC;AAED,eAAsB,KAAK,KAAc;AACvC,MAAI;AACF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,sBAAsB,kCAAkC,GAAG;AACjE,QAAI,qBAAqB;AACvB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,UAAU,iCAAiC,6CAA6C,EAAE;AAAA,QACnG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,qBAAqB,4BAA4B;AACvD,UAAM,WAAW,qBAAqB,YAAY,KAAK,mBAAmB,eAAe,IAAI;AAC7F,QAAI,sBAAsB,UAAU;AAClC,YAAM,oBAAoB,MAAM;AAAA,QAC9B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU,wBAAwB,4CAA4C;AAAA,MAChF;AACA,UAAI,kBAAmB,QAAO;AAAA,IAChC;AAEA,UAAM,EAAE,MAAM,IAAI,kBAAkB,MAAM,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE,CAAC;AAC5E,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,UAAM,cAAc,cAAc,KAAK;AACvC,UAAM,cAAc,MAAM,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI;AAEnE,UAAM,aAAa,UAAU,QAAQ,YAAY;AAQjD,UAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,GAAG,cAAc,OAAO,QAAQ;AAC/D,YAAM,mBAAmB,CAAC,oBACxB;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,GAAI,MAAM,WAAW,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;AAAA,UACpD,WAAW;AAAA,QACb;AAAA,QACA,EAAE,UAAU,SAAS,kBAAkB;AAAA,QACvC;AAAA,MACF;AACF,YAAMA,SAAQ,MAAM,iBAAiB,WAAW;AAChD,UAAI,CAACA,QAAO;AACV,cAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,MAC9E;AAEA,YAAM,MAAM,oBAAI,KAAK;AACrB,UAAIA,OAAM,cAAcA,OAAM,WAAW,QAAQ,IAAI,IAAI,QAAQ,GAAG;AAClE,cAAM,IAAI,cAAc,KAAK,EAAE,OAAO,UAAU,+BAA+B,yBAAyB,EAAE,CAAC;AAAA,MAC7G;AAEA,WAAKA,OAAM,UAAU,UAAU,QAAQ;AACrC,cAAM,IAAI,cAAc,KAAK;AAAA,UAC3B,OAAO,UAAU,qCAAqC,sDAAsD;AAAA,QAC9G,CAAC;AAAA,MACH;AAEA,MAAAA,OAAM,SAAS;AACf,MAAAA,OAAM,gBAAgB,MAAM,4BAA4B,KAAK;AAAA,QAC3D,UAAUA,OAAM;AAAA,QAChB,gBAAgBA,OAAM;AAAA,QACtB,OAAO;AAAA,MACT,CAAC;AACD,MAAAA,OAAM,YAAY;AAClB,UAAI,QAAQA,MAAK;AACjB,YAAM,IAAI,MAAM;AAEhB,YAAM,MAA6B;AAAA,QACjC;AAAA,QACA,MAAM;AAAA,QACN,mBAAmB;AAAA,QACnB,wBAAwBA,OAAM;AAAA,QAC9B,iBAAiB,CAACA,OAAM,cAAc;AAAA,QACtC,SAAS;AAAA,QACT,iBAAiB;AAAA,MACnB;AAEA,YAAM,SAAU,MAAM,WAAW,QAAQ,iCAAiC,EAAE,OAAO,EAAE,SAASA,OAAM,GAAG,GAAG,IAAI,CAAC;AAC/G,YAAMC,WAAU,QAAQ,QAAQ,WAAW,QAAQ,WAAWD,OAAM;AAEpE,aAAO,EAAE,OAAAA,QAAO,SAAAC,SAAQ;AAAA,IAC1B,CAAC;AAED,UAAM,QAAQ,MAAM,sBAAsB,IAAI,YAAY,EAAE,IAAI,SAAS,WAAW,KAAK,GAAG,CAAC,GAAG,WAAW;AAC3G,UAAM,cAAc,OAAO,eAAe;AAG1C,UAAM,aAAa,QAAQ,IAAI,eAAe;AAC9C,QAAI,YAAY;AACd,UAAI;AACF,cAAM,SAAS,QAAQ,IAAI,WAAW;AACtC,cAAM,WAAW,SAAS,GAAG,OAAO,QAAQ,OAAO,EAAE,CAAC,yBAAyB,OAAO,KAAK,yBAAyB,OAAO;AAE3H,cAAM,OAAO;AAAA,UACX,SAAS,UAAU,0CAA0C,gCAAgC,EAAE,aAAa,MAAM,YAAY,CAAC;AAAA,UAC/H,SAAS,UAAU,0CAA0C,gCAAgC,EAAE,aAAa,MAAM,YAAY,CAAC;AAAA,UAC/H,MAAM,UAAU,uCAAuC,wFAAwF;AAAA,YAC7I,aAAa,MAAM;AAAA,YACnB;AAAA,UACF,CAAC;AAAA,UACD,KAAK,UAAU,sCAAsC,YAAY;AAAA,UACjE,QAAQ,UAAU,yCAAyC,cAAc;AAAA,QAC3E;AAEA,cAAM,UAAU;AAAA,UACd,IAAI;AAAA,UACJ,SAAS,UAAU,oCAAoC,2DAAsD;AAAA,YAC3G,aAAa,MAAM;AAAA,YACnB;AAAA,UACF,CAAC;AAAA,UACD,OAAO,wBAAwB,EAAE,UAAU,KAAK,CAAC;AAAA,QACnD,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,eAAO,MAAM,yCAAyC,EAAE,IAAI,CAAC;AAAA,MAC/D;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,EAAE,SAAS,YAAY,CAAC;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,8BAA8B,yBAAyB,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzH;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa;AAAA,QACX,aAAa;AAAA,QACb,QAAQ;AAAA,MACV;AAAA,MACA,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,GAAG,aAAa,EAAE,OAAO,EAAE,CAAC;AAAA,QAC1E;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QAChG,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACnG,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE;AAAA,QACvF,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,qBAAqB;AAAA,MAChF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["quote", "orderId"]
 }

package/dist/modules/sales/api/quotes/public/[token]/route.js

@@ -29,9 +29,6 @@ async function GET(req, ctx) {
     const quote = await findOneWithDecryption(em, SalesQuote, {
       acceptanceToken: hashedToken,
       deletedAt: null
-    }) ?? await findOneWithDecryption(em, SalesQuote, {
-      acceptanceToken: token,
-      deletedAt: null
     });
     const { translate } = await resolveTranslations();
     if (!quote) {

package/dist/modules/sales/api/quotes/public/[token]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/sales/api/quotes/public/%5Btoken%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from \"next/server\";\nimport { z } from \"zod\";\nimport { createRequestContainer } from \"@open-mercato/shared/lib/di/container\";\nimport { resolveTranslations } from \"@open-mercato/shared/lib/i18n/server\";\nimport { isCrudHttpError, notFound } from \"@open-mercato/shared/lib/crud/errors\";\nimport type { OpenApiRouteDoc } from \"@open-mercato/shared/lib/openapi\";\nimport type { EntityManager } from \"@mikro-orm/postgresql\";\nimport { findOneWithDecryption, findWithDecryption } from \"@open-mercato/shared/lib/encryption/find\";\nimport { hashAuthToken } from \"../../../../../auth/lib/tokenHash\";\nimport {\n  SalesQuote,\n  SalesQuoteLine,\n  SalesQuoteAdjustment,\n} from \"../../../../data/entities\";\nimport { canonicalizeUnitCode } from \"@open-mercato/shared/lib/units/unitCodes\";\nimport { getAuthFromRequest } from \"@open-mercato/shared/lib/auth/server\";\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\nconst paramsSchema = z.object({\n  token: z.string().uuid(),\n});\n\nexport const metadata = {\n  GET: { requireAuth: false },\n};\n\nexport async function GET(req: Request, ctx: { params: { token: string } }) {\n  try {\n    const { token } = paramsSchema.parse(ctx.params ?? {});\n    const container = await createRequestContainer();\n    const em = container.resolve(\"em\") as EntityManager;\n    const hashedToken = hashAuthToken(token);\n    const quote =\n      (await findOneWithDecryption(em, SalesQuote, {\n        acceptanceToken: hashedToken,\n        deletedAt: null,\n      })) ??\n      (await findOneWithDecryption(em, SalesQuote, {\n        acceptanceToken: token,\n        deletedAt: null,\n      }));\n    const { translate } = await resolveTranslations();\n    if (!quote) {\n      throw notFound(translate(\"sales.quotes.public.notFound\", \"Quote not found.\"));\n    }\n\n    const auth = await getAuthFromRequest(req);\n    if (auth?.tenantId && quote.tenantId !== auth.tenantId) {\n      throw notFound(translate(\"sales.quotes.public.notFound\", \"Quote not found.\"));\n    }\n\n    const now = new Date();\n    const isExpired =\n      !!quote.validUntil && quote.validUntil.getTime() < now.getTime();\n\n    const [lines, adjustments] = await Promise.all([\n      findWithDecryption(\n        em,\n        SalesQuoteLine,\n        { quote: quote.id, organizationId: quote.organizationId, tenantId: quote.tenantId, deletedAt: null },\n        { orderBy: { lineNumber: \"asc\" } },\n      ),\n      findWithDecryption(\n        em,\n        SalesQuoteAdjustment,\n        { quote: quote.id, organizationId: quote.organizationId, tenantId: quote.tenantId },\n        { orderBy: { position: \"asc\" } },\n      ),\n    ]);\n\n    return NextResponse.json({\n      quote: {\n        quoteNumber: quote.quoteNumber,\n        currencyCode: quote.currencyCode,\n        validFrom: quote.validFrom?.toISOString() ?? null,\n        validUntil: quote.validUntil?.toISOString() ?? null,\n        status: quote.status ?? null,\n        subtotalNetAmount: quote.subtotalNetAmount,\n        subtotalGrossAmount: quote.subtotalGrossAmount,\n        discountTotalAmount: quote.discountTotalAmount,\n        taxTotalAmount: quote.taxTotalAmount,\n        grandTotalNetAmount: quote.grandTotalNetAmount,\n        grandTotalGrossAmount: quote.grandTotalGrossAmount,\n      },\n      lines: lines.map((line) => ({\n        lineNumber: line.lineNumber ?? null,\n        kind: line.kind,\n        name: line.name ?? null,\n        description: line.description ?? null,\n        quantity: line.quantity,\n        quantityUnit: canonicalizeUnitCode(line.quantityUnit) ?? null,\n        normalizedQuantity: line.normalizedQuantity ?? line.quantity,\n        normalizedUnit:\n          canonicalizeUnitCode(line.normalizedUnit ?? line.quantityUnit) ??\n          null,\n        uomSnapshot: line.uomSnapshot\n          ? {\n              baseUnitCode: line.uomSnapshot.baseUnitCode ?? null,\n              enteredUnitCode: line.uomSnapshot.enteredUnitCode ?? null,\n            }\n          : null,\n        currencyCode: line.currencyCode,\n        unitPriceNet: line.unitPriceNet,\n        unitPriceGross: line.unitPriceGross,\n        discountAmount: line.discountAmount,\n        discountPercent: line.discountPercent,\n        taxRate: line.taxRate,\n        taxAmount: line.taxAmount,\n        totalNetAmount: line.totalNetAmount,\n        totalGrossAmount: line.totalGrossAmount,\n        unitPriceReference: (() => {\n          if (!line.uomSnapshot) return null;\n          const ref = line.uomSnapshot.unitPriceReference;\n          if (!ref) return null;\n          return {\n            enabled: ref.enabled ?? null,\n            referenceUnitCode: ref.referenceUnitCode ?? null,\n            baseQuantity: ref.baseQuantity ?? null,\n            grossPerReference: ref.grossPerReference ?? null,\n            netPerReference: ref.netPerReference ?? null,\n          };\n        })(),\n      })),\n      adjustments: adjustments.map((adj) => ({\n        scope: adj.scope,\n        kind: adj.kind,\n        label: adj.label ?? adj.code ?? null,\n        rate: adj.rate,\n        amountNet: adj.amountNet,\n        amountGross: adj.amountGross,\n        currencyCode: adj.currencyCode ?? null,\n        position: adj.position ?? null,\n        quoteLineId: adj.quoteLine?.id ?? null,\n      })),\n      isExpired,\n    });\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status });\n    }\n    const { translate } = await resolveTranslations();\n    logger.error('sales.quotes.public failed', { err });\n    return NextResponse.json(\n      {\n        error: translate(\"sales.quotes.public.failed\", \"Failed to load quote.\"),\n      },\n      { status: 400 },\n    );\n  }\n}\n\nconst publicQuoteResponseSchema = z.object({\n  quote: z.object({\n    quoteNumber: z.string(),\n    currencyCode: z.string(),\n    validFrom: z.string().nullable(),\n    validUntil: z.string().nullable(),\n    status: z.string().nullable(),\n    subtotalNetAmount: z.string(),\n    subtotalGrossAmount: z.string(),\n    discountTotalAmount: z.string(),\n    taxTotalAmount: z.string(),\n    grandTotalNetAmount: z.string(),\n    grandTotalGrossAmount: z.string(),\n  }),\n  lines: z.array(\n    z.object({\n      lineNumber: z.number().nullable(),\n      kind: z.string(),\n      name: z.string().nullable(),\n      description: z.string().nullable(),\n      quantity: z.string(),\n      quantityUnit: z.string().nullable(),\n      normalizedQuantity: z.string(),\n      normalizedUnit: z.string().nullable(),\n      uomSnapshot: z\n        .object({\n          baseUnitCode: z.string().nullable(),\n          enteredUnitCode: z.string().nullable(),\n        })\n        .nullable()\n        .optional(),\n      currencyCode: z.string(),\n      unitPriceNet: z.string(),\n      unitPriceGross: z.string(),\n      discountAmount: z.string(),\n      discountPercent: z.string(),\n      taxRate: z.string(),\n      taxAmount: z.string(),\n      totalNetAmount: z.string(),\n      totalGrossAmount: z.string(),\n      unitPriceReference: z\n        .object({\n          enabled: z.boolean().nullable().optional(),\n          referenceUnitCode: z.string().nullable().optional(),\n          baseQuantity: z.string().nullable().optional(),\n          grossPerReference: z.string().nullable().optional(),\n          netPerReference: z.string().nullable().optional(),\n        })\n        .nullable()\n        .optional(),\n    }),\n  ),\n  adjustments: z.array(\n    z.object({\n      scope: z.string().nullable(),\n      kind: z.string().nullable(),\n      label: z.string().nullable(),\n      rate: z.string().nullable(),\n      amountNet: z.string().nullable(),\n      amountGross: z.string().nullable(),\n      currencyCode: z.string().nullable(),\n      position: z.number().nullable(),\n      quoteLineId: z.string().uuid().nullable(),\n    }),\n  ),\n  isExpired: z.boolean(),\n});\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: \"Sales\",\n  summary: \"View a quote (public)\",\n  pathParams: z.object({ token: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: \"Get quote details by acceptance token\",\n      responses: [\n        {\n          status: 200,\n          description: \"Quote details\",\n          schema: publicQuoteResponseSchema,\n        },\n        {\n          status: 404,\n          description: \"Quote not found\",\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n};\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,iBAAiB,gBAAgB;AAG1C,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK;AACzB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,eAAsB,IAAI,KAAc,KAAoC;AAC1E,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,aAAa,MAAM,IAAI,UAAU,CAAC,CAAC;AACrD,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,cAAc,cAAc,KAAK;AACvC,UAAM,QACH,MAAM,sBAAsB,IAAI,YAAY;AAAA,MAC3C,iBAAiB;AAAA,MACjB,WAAW;AAAA,IACb,CAAC,KACA,MAAM,sBAAsB,IAAI,YAAY;AAAA,MAC3C,iBAAiB;AAAA,MACjB,WAAW;AAAA,IACb,CAAC;AACH,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,OAAO;AACV,YAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,IAC9E;AAEA,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,MAAM,YAAY,MAAM,aAAa,KAAK,UAAU;AACtD,YAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,IAC9E;AAEA,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,YACJ,CAAC,CAAC,MAAM,cAAc,MAAM,WAAW,QAAQ,IAAI,IAAI,QAAQ;AAEjE,UAAM,CAAC,OAAO,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC7C;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,OAAO,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,UAAU,WAAW,KAAK;AAAA,QACnG,EAAE,SAAS,EAAE,YAAY,MAAM,EAAE;AAAA,MACnC;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,OAAO,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,QAClF,EAAE,SAAS,EAAE,UAAU,MAAM,EAAE;AAAA,MACjC;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,QACL,aAAa,MAAM;AAAA,QACnB,cAAc,MAAM;AAAA,QACpB,WAAW,MAAM,WAAW,YAAY,KAAK;AAAA,QAC7C,YAAY,MAAM,YAAY,YAAY,KAAK;AAAA,QAC/C,QAAQ,MAAM,UAAU;AAAA,QACxB,mBAAmB,MAAM;AAAA,QACzB,qBAAqB,MAAM;AAAA,QAC3B,qBAAqB,MAAM;AAAA,QAC3B,gBAAgB,MAAM;AAAA,QACtB,qBAAqB,MAAM;AAAA,QAC3B,uBAAuB,MAAM;AAAA,MAC/B;AAAA,MACA,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,QAC1B,YAAY,KAAK,cAAc;AAAA,QAC/B,MAAM,KAAK;AAAA,QACX,MAAM,KAAK,QAAQ;AAAA,QACnB,aAAa,KAAK,eAAe;AAAA,QACjC,UAAU,KAAK;AAAA,QACf,cAAc,qBAAqB,KAAK,YAAY,KAAK;AAAA,QACzD,oBAAoB,KAAK,sBAAsB,KAAK;AAAA,QACpD,gBACE,qBAAqB,KAAK,kBAAkB,KAAK,YAAY,KAC7D;AAAA,QACF,aAAa,KAAK,cACd;AAAA,UACE,cAAc,KAAK,YAAY,gBAAgB;AAAA,UAC/C,iBAAiB,KAAK,YAAY,mBAAmB;AAAA,QACvD,IACA;AAAA,QACJ,cAAc,KAAK;AAAA,QACnB,cAAc,KAAK;AAAA,QACnB,gBAAgB,KAAK;AAAA,QACrB,gBAAgB,KAAK;AAAA,QACrB,iBAAiB,KAAK;AAAA,QACtB,SAAS,KAAK;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,gBAAgB,KAAK;AAAA,QACrB,kBAAkB,KAAK;AAAA,QACvB,qBAAqB,MAAM;AACzB,cAAI,CAAC,KAAK,YAAa,QAAO;AAC9B,gBAAM,MAAM,KAAK,YAAY;AAC7B,cAAI,CAAC,IAAK,QAAO;AACjB,iBAAO;AAAA,YACL,SAAS,IAAI,WAAW;AAAA,YACxB,mBAAmB,IAAI,qBAAqB;AAAA,YAC5C,cAAc,IAAI,gBAAgB;AAAA,YAClC,mBAAmB,IAAI,qBAAqB;AAAA,YAC5C,iBAAiB,IAAI,mBAAmB;AAAA,UAC1C;AAAA,QACF,GAAG;AAAA,MACL,EAAE;AAAA,MACF,aAAa,YAAY,IAAI,CAAC,SAAS;AAAA,QACrC,OAAO,IAAI;AAAA,QACX,MAAM,IAAI;AAAA,QACV,OAAO,IAAI,SAAS,IAAI,QAAQ;AAAA,QAChC,MAAM,IAAI;AAAA,QACV,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,cAAc,IAAI,gBAAgB;AAAA,QAClC,UAAU,IAAI,YAAY;AAAA,QAC1B,aAAa,IAAI,WAAW,MAAM;AAAA,MACpC,EAAE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,UAAU,8BAA8B,uBAAuB;AAAA,MACxE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,OAAO;AAAA,IACd,aAAa,EAAE,OAAO;AAAA,IACtB,cAAc,EAAE,OAAO;AAAA,IACvB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,mBAAmB,EAAE,OAAO;AAAA,IAC5B,qBAAqB,EAAE,OAAO;AAAA,IAC9B,qBAAqB,EAAE,OAAO;AAAA,IAC9B,gBAAgB,EAAE,OAAO;AAAA,IACzB,qBAAqB,EAAE,OAAO;AAAA,IAC9B,uBAAuB,EAAE,OAAO;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE;AAAA,IACP,EAAE,OAAO;AAAA,MACP,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,MAChC,MAAM,EAAE,OAAO;AAAA,MACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,UAAU,EAAE,OAAO;AAAA,MACnB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,oBAAoB,EAAE,OAAO;AAAA,MAC7B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,MACpC,aAAa,EACV,OAAO;AAAA,QACN,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,QAClC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,MACvC,CAAC,EACA,SAAS,EACT,SAAS;AAAA,MACZ,cAAc,EAAE,OAAO;AAAA,MACvB,cAAc,EAAE,OAAO;AAAA,MACvB,gBAAgB,EAAE,OAAO;AAAA,MACzB,gBAAgB,EAAE,OAAO;AAAA,MACzB,iBAAiB,EAAE,OAAO;AAAA,MAC1B,SAAS,EAAE,OAAO;AAAA,MAClB,WAAW,EAAE,OAAO;AAAA,MACpB,gBAAgB,EAAE,OAAO;AAAA,MACzB,kBAAkB,EAAE,OAAO;AAAA,MAC3B,oBAAoB,EACjB,OAAO;AAAA,QACN,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,QACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAClD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAC7C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAClD,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,MAClD,CAAC,EACA,SAAS,EACT,SAAS;AAAA,IACd,CAAC;AAAA,EACH;AAAA,EACA,aAAa,EAAE;AAAA,IACb,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,MAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,MAC9B,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA,EACA,WAAW,EAAE,QAAQ;AACvB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EACjD,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from \"next/server\";\nimport { z } from \"zod\";\nimport { createRequestContainer } from \"@open-mercato/shared/lib/di/container\";\nimport { resolveTranslations } from \"@open-mercato/shared/lib/i18n/server\";\nimport { isCrudHttpError, notFound } from \"@open-mercato/shared/lib/crud/errors\";\nimport type { OpenApiRouteDoc } from \"@open-mercato/shared/lib/openapi\";\nimport type { EntityManager } from \"@mikro-orm/postgresql\";\nimport { findOneWithDecryption, findWithDecryption } from \"@open-mercato/shared/lib/encryption/find\";\nimport { hashAuthToken } from \"../../../../../auth/lib/tokenHash\";\nimport {\n  SalesQuote,\n  SalesQuoteLine,\n  SalesQuoteAdjustment,\n} from \"../../../../data/entities\";\nimport { canonicalizeUnitCode } from \"@open-mercato/shared/lib/units/unitCodes\";\nimport { getAuthFromRequest } from \"@open-mercato/shared/lib/auth/server\";\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('sales')\n\nconst paramsSchema = z.object({\n  token: z.string().uuid(),\n});\n\nexport const metadata = {\n  GET: { requireAuth: false },\n};\n\nexport async function GET(req: Request, ctx: { params: { token: string } }) {\n  try {\n    const { token } = paramsSchema.parse(ctx.params ?? {});\n    const container = await createRequestContainer();\n    const em = container.resolve(\"em\") as EntityManager;\n    const hashedToken = hashAuthToken(token);\n    const quote = await findOneWithDecryption(em, SalesQuote, {\n      acceptanceToken: hashedToken,\n      deletedAt: null,\n    });\n    const { translate } = await resolveTranslations();\n    if (!quote) {\n      throw notFound(translate(\"sales.quotes.public.notFound\", \"Quote not found.\"));\n    }\n\n    const auth = await getAuthFromRequest(req);\n    if (auth?.tenantId && quote.tenantId !== auth.tenantId) {\n      throw notFound(translate(\"sales.quotes.public.notFound\", \"Quote not found.\"));\n    }\n\n    const now = new Date();\n    const isExpired =\n      !!quote.validUntil && quote.validUntil.getTime() < now.getTime();\n\n    const [lines, adjustments] = await Promise.all([\n      findWithDecryption(\n        em,\n        SalesQuoteLine,\n        { quote: quote.id, organizationId: quote.organizationId, tenantId: quote.tenantId, deletedAt: null },\n        { orderBy: { lineNumber: \"asc\" } },\n      ),\n      findWithDecryption(\n        em,\n        SalesQuoteAdjustment,\n        { quote: quote.id, organizationId: quote.organizationId, tenantId: quote.tenantId },\n        { orderBy: { position: \"asc\" } },\n      ),\n    ]);\n\n    return NextResponse.json({\n      quote: {\n        quoteNumber: quote.quoteNumber,\n        currencyCode: quote.currencyCode,\n        validFrom: quote.validFrom?.toISOString() ?? null,\n        validUntil: quote.validUntil?.toISOString() ?? null,\n        status: quote.status ?? null,\n        subtotalNetAmount: quote.subtotalNetAmount,\n        subtotalGrossAmount: quote.subtotalGrossAmount,\n        discountTotalAmount: quote.discountTotalAmount,\n        taxTotalAmount: quote.taxTotalAmount,\n        grandTotalNetAmount: quote.grandTotalNetAmount,\n        grandTotalGrossAmount: quote.grandTotalGrossAmount,\n      },\n      lines: lines.map((line) => ({\n        lineNumber: line.lineNumber ?? null,\n        kind: line.kind,\n        name: line.name ?? null,\n        description: line.description ?? null,\n        quantity: line.quantity,\n        quantityUnit: canonicalizeUnitCode(line.quantityUnit) ?? null,\n        normalizedQuantity: line.normalizedQuantity ?? line.quantity,\n        normalizedUnit:\n          canonicalizeUnitCode(line.normalizedUnit ?? line.quantityUnit) ??\n          null,\n        uomSnapshot: line.uomSnapshot\n          ? {\n              baseUnitCode: line.uomSnapshot.baseUnitCode ?? null,\n              enteredUnitCode: line.uomSnapshot.enteredUnitCode ?? null,\n            }\n          : null,\n        currencyCode: line.currencyCode,\n        unitPriceNet: line.unitPriceNet,\n        unitPriceGross: line.unitPriceGross,\n        discountAmount: line.discountAmount,\n        discountPercent: line.discountPercent,\n        taxRate: line.taxRate,\n        taxAmount: line.taxAmount,\n        totalNetAmount: line.totalNetAmount,\n        totalGrossAmount: line.totalGrossAmount,\n        unitPriceReference: (() => {\n          if (!line.uomSnapshot) return null;\n          const ref = line.uomSnapshot.unitPriceReference;\n          if (!ref) return null;\n          return {\n            enabled: ref.enabled ?? null,\n            referenceUnitCode: ref.referenceUnitCode ?? null,\n            baseQuantity: ref.baseQuantity ?? null,\n            grossPerReference: ref.grossPerReference ?? null,\n            netPerReference: ref.netPerReference ?? null,\n          };\n        })(),\n      })),\n      adjustments: adjustments.map((adj) => ({\n        scope: adj.scope,\n        kind: adj.kind,\n        label: adj.label ?? adj.code ?? null,\n        rate: adj.rate,\n        amountNet: adj.amountNet,\n        amountGross: adj.amountGross,\n        currencyCode: adj.currencyCode ?? null,\n        position: adj.position ?? null,\n        quoteLineId: adj.quoteLine?.id ?? null,\n      })),\n      isExpired,\n    });\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status });\n    }\n    const { translate } = await resolveTranslations();\n    logger.error('sales.quotes.public failed', { err });\n    return NextResponse.json(\n      {\n        error: translate(\"sales.quotes.public.failed\", \"Failed to load quote.\"),\n      },\n      { status: 400 },\n    );\n  }\n}\n\nconst publicQuoteResponseSchema = z.object({\n  quote: z.object({\n    quoteNumber: z.string(),\n    currencyCode: z.string(),\n    validFrom: z.string().nullable(),\n    validUntil: z.string().nullable(),\n    status: z.string().nullable(),\n    subtotalNetAmount: z.string(),\n    subtotalGrossAmount: z.string(),\n    discountTotalAmount: z.string(),\n    taxTotalAmount: z.string(),\n    grandTotalNetAmount: z.string(),\n    grandTotalGrossAmount: z.string(),\n  }),\n  lines: z.array(\n    z.object({\n      lineNumber: z.number().nullable(),\n      kind: z.string(),\n      name: z.string().nullable(),\n      description: z.string().nullable(),\n      quantity: z.string(),\n      quantityUnit: z.string().nullable(),\n      normalizedQuantity: z.string(),\n      normalizedUnit: z.string().nullable(),\n      uomSnapshot: z\n        .object({\n          baseUnitCode: z.string().nullable(),\n          enteredUnitCode: z.string().nullable(),\n        })\n        .nullable()\n        .optional(),\n      currencyCode: z.string(),\n      unitPriceNet: z.string(),\n      unitPriceGross: z.string(),\n      discountAmount: z.string(),\n      discountPercent: z.string(),\n      taxRate: z.string(),\n      taxAmount: z.string(),\n      totalNetAmount: z.string(),\n      totalGrossAmount: z.string(),\n      unitPriceReference: z\n        .object({\n          enabled: z.boolean().nullable().optional(),\n          referenceUnitCode: z.string().nullable().optional(),\n          baseQuantity: z.string().nullable().optional(),\n          grossPerReference: z.string().nullable().optional(),\n          netPerReference: z.string().nullable().optional(),\n        })\n        .nullable()\n        .optional(),\n    }),\n  ),\n  adjustments: z.array(\n    z.object({\n      scope: z.string().nullable(),\n      kind: z.string().nullable(),\n      label: z.string().nullable(),\n      rate: z.string().nullable(),\n      amountNet: z.string().nullable(),\n      amountGross: z.string().nullable(),\n      currencyCode: z.string().nullable(),\n      position: z.number().nullable(),\n      quoteLineId: z.string().uuid().nullable(),\n    }),\n  ),\n  isExpired: z.boolean(),\n});\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: \"Sales\",\n  summary: \"View a quote (public)\",\n  pathParams: z.object({ token: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: \"Get quote details by acceptance token\",\n      responses: [\n        {\n          status: 200,\n          description: \"Quote details\",\n          schema: publicQuoteResponseSchema,\n        },\n        {\n          status: 404,\n          description: \"Quote not found\",\n          schema: z.object({ error: z.string() }),\n        },\n      ],\n    },\n  },\n};\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,iBAAiB,gBAAgB;AAG1C,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,4BAA4B;AACrC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,OAAO;AAEnC,MAAM,eAAe,EAAE,OAAO;AAAA,EAC5B,OAAO,EAAE,OAAO,EAAE,KAAK;AACzB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM;AAC5B;AAEA,eAAsB,IAAI,KAAc,KAAoC;AAC1E,MAAI;AACF,UAAM,EAAE,MAAM,IAAI,aAAa,MAAM,IAAI,UAAU,CAAC,CAAC;AACrD,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,cAAc,cAAc,KAAK;AACvC,UAAM,QAAQ,MAAM,sBAAsB,IAAI,YAAY;AAAA,MACxD,iBAAiB;AAAA,MACjB,WAAW;AAAA,IACb,CAAC;AACD,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,QAAI,CAAC,OAAO;AACV,YAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,IAC9E;AAEA,UAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,QAAI,MAAM,YAAY,MAAM,aAAa,KAAK,UAAU;AACtD,YAAM,SAAS,UAAU,gCAAgC,kBAAkB,CAAC;AAAA,IAC9E;AAEA,UAAM,MAAM,oBAAI,KAAK;AACrB,UAAM,YACJ,CAAC,CAAC,MAAM,cAAc,MAAM,WAAW,QAAQ,IAAI,IAAI,QAAQ;AAEjE,UAAM,CAAC,OAAO,WAAW,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC7C;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,OAAO,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,UAAU,WAAW,KAAK;AAAA,QACnG,EAAE,SAAS,EAAE,YAAY,MAAM,EAAE;AAAA,MACnC;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,EAAE,OAAO,MAAM,IAAI,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAAA,QAClF,EAAE,SAAS,EAAE,UAAU,MAAM,EAAE;AAAA,MACjC;AAAA,IACF,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO;AAAA,QACL,aAAa,MAAM;AAAA,QACnB,cAAc,MAAM;AAAA,QACpB,WAAW,MAAM,WAAW,YAAY,KAAK;AAAA,QAC7C,YAAY,MAAM,YAAY,YAAY,KAAK;AAAA,QAC/C,QAAQ,MAAM,UAAU;AAAA,QACxB,mBAAmB,MAAM;AAAA,QACzB,qBAAqB,MAAM;AAAA,QAC3B,qBAAqB,MAAM;AAAA,QAC3B,gBAAgB,MAAM;AAAA,QACtB,qBAAqB,MAAM;AAAA,QAC3B,uBAAuB,MAAM;AAAA,MAC/B;AAAA,MACA,OAAO,MAAM,IAAI,CAAC,UAAU;AAAA,QAC1B,YAAY,KAAK,cAAc;AAAA,QAC/B,MAAM,KAAK;AAAA,QACX,MAAM,KAAK,QAAQ;AAAA,QACnB,aAAa,KAAK,eAAe;AAAA,QACjC,UAAU,KAAK;AAAA,QACf,cAAc,qBAAqB,KAAK,YAAY,KAAK;AAAA,QACzD,oBAAoB,KAAK,sBAAsB,KAAK;AAAA,QACpD,gBACE,qBAAqB,KAAK,kBAAkB,KAAK,YAAY,KAC7D;AAAA,QACF,aAAa,KAAK,cACd;AAAA,UACE,cAAc,KAAK,YAAY,gBAAgB;AAAA,UAC/C,iBAAiB,KAAK,YAAY,mBAAmB;AAAA,QACvD,IACA;AAAA,QACJ,cAAc,KAAK;AAAA,QACnB,cAAc,KAAK;AAAA,QACnB,gBAAgB,KAAK;AAAA,QACrB,gBAAgB,KAAK;AAAA,QACrB,iBAAiB,KAAK;AAAA,QACtB,SAAS,KAAK;AAAA,QACd,WAAW,KAAK;AAAA,QAChB,gBAAgB,KAAK;AAAA,QACrB,kBAAkB,KAAK;AAAA,QACvB,qBAAqB,MAAM;AACzB,cAAI,CAAC,KAAK,YAAa,QAAO;AAC9B,gBAAM,MAAM,KAAK,YAAY;AAC7B,cAAI,CAAC,IAAK,QAAO;AACjB,iBAAO;AAAA,YACL,SAAS,IAAI,WAAW;AAAA,YACxB,mBAAmB,IAAI,qBAAqB;AAAA,YAC5C,cAAc,IAAI,gBAAgB;AAAA,YAClC,mBAAmB,IAAI,qBAAqB;AAAA,YAC5C,iBAAiB,IAAI,mBAAmB;AAAA,UAC1C;AAAA,QACF,GAAG;AAAA,MACL,EAAE;AAAA,MACF,aAAa,YAAY,IAAI,CAAC,SAAS;AAAA,QACrC,OAAO,IAAI;AAAA,QACX,MAAM,IAAI;AAAA,QACV,OAAO,IAAI,SAAS,IAAI,QAAQ;AAAA,QAChC,MAAM,IAAI;AAAA,QACV,WAAW,IAAI;AAAA,QACf,aAAa,IAAI;AAAA,QACjB,cAAc,IAAI,gBAAgB;AAAA,QAClC,UAAU,IAAI,YAAY;AAAA,QAC1B,aAAa,IAAI,WAAW,MAAM;AAAA,MACpC,EAAE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO,MAAM,8BAA8B,EAAE,IAAI,CAAC;AAClD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO,UAAU,8BAA8B,uBAAuB;AAAA,MACxE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEA,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,OAAO;AAAA,IACd,aAAa,EAAE,OAAO;AAAA,IACtB,cAAc,EAAE,OAAO;AAAA,IACvB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,IAChC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,mBAAmB,EAAE,OAAO;AAAA,IAC5B,qBAAqB,EAAE,OAAO;AAAA,IAC9B,qBAAqB,EAAE,OAAO;AAAA,IAC9B,gBAAgB,EAAE,OAAO;AAAA,IACzB,qBAAqB,EAAE,OAAO;AAAA,IAC9B,uBAAuB,EAAE,OAAO;AAAA,EAClC,CAAC;AAAA,EACD,OAAO,EAAE;AAAA,IACP,EAAE,OAAO;AAAA,MACP,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,MAChC,MAAM,EAAE,OAAO;AAAA,MACf,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,UAAU,EAAE,OAAO;AAAA,MACnB,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,oBAAoB,EAAE,OAAO;AAAA,MAC7B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,MACpC,aAAa,EACV,OAAO;AAAA,QACN,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,QAClC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,MACvC,CAAC,EACA,SAAS,EACT,SAAS;AAAA,MACZ,cAAc,EAAE,OAAO;AAAA,MACvB,cAAc,EAAE,OAAO;AAAA,MACvB,gBAAgB,EAAE,OAAO;AAAA,MACzB,gBAAgB,EAAE,OAAO;AAAA,MACzB,iBAAiB,EAAE,OAAO;AAAA,MAC1B,SAAS,EAAE,OAAO;AAAA,MAClB,WAAW,EAAE,OAAO;AAAA,MACpB,gBAAgB,EAAE,OAAO;AAAA,MACzB,kBAAkB,EAAE,OAAO;AAAA,MAC3B,oBAAoB,EACjB,OAAO;AAAA,QACN,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;AAAA,QACzC,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAClD,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAC7C,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,QAClD,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,MAClD,CAAC,EACA,SAAS,EACT,SAAS;AAAA,IACd,CAAC;AAAA,EACH;AAAA,EACA,aAAa,EAAE;AAAA,IACb,EAAE,OAAO;AAAA,MACP,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,MAC3B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,MAC1B,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,MAC/B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,MACjC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,MAClC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,MAC9B,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA,EACA,WAAW,EAAE,QAAQ;AACvB,CAAC;AAEM,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EACjD,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/generated/entities/gateway_payment_operation/index.ts

@@ -0,0 +1,16 @@
+export const id = "id";
+export const operation_id = "operation_id";
+export const transaction_id = "transaction_id";
+export const operation_type = "operation_type";
+export const provider_key = "provider_key";
+export const request_hash = "request_hash";
+export const provider_idempotency_key = "provider_idempotency_key";
+export const status = "status";
+export const attempt_token = "attempt_token";
+export const attempt_count = "attempt_count";
+export const result = "result";
+export const lease_expires_at = "lease_expires_at";
+export const organization_id = "organization_id";
+export const tenant_id = "tenant_id";
+export const created_at = "created_at";
+export const updated_at = "updated_at";

package/generated/entities.ids.generated.ts

@@ -267,6 +267,7 @@ export const M = {
     },
     "payment_gateways": {
       "gateway_transaction": "payment_gateways:gateway_transaction",
+      "gateway_payment_operation": "payment_gateways:gateway_payment_operation",
       "gateway_session_initialization": "payment_gateways:gateway_session_initialization",
       "webhook_processed_event": "payment_gateways:webhook_processed_event"
     },

package/generated/entity-fields-registry.ts

@@ -1225,6 +1225,24 @@ export const entityFieldsRegistry: Record<string, Record<string, string>> = {
       "updated_at": "updated_at",
       "value": "value"
     },
+    "gateway_payment_operation": {
+      "id": "id",
+      "operation_id": "operation_id",
+      "transaction_id": "transaction_id",
+      "operation_type": "operation_type",
+      "provider_key": "provider_key",
+      "request_hash": "request_hash",
+      "provider_idempotency_key": "provider_idempotency_key",
+      "status": "status",
+      "attempt_token": "attempt_token",
+      "attempt_count": "attempt_count",
+      "result": "result",
+      "lease_expires_at": "lease_expires_at",
+      "organization_id": "organization_id",
+      "tenant_id": "tenant_id",
+      "created_at": "created_at",
+      "updated_at": "updated_at"
+    },
     "gateway_session_initialization": {
       "id": "id",
       "operation_key": "operation_key",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/core",
-  "version": "0.6.7-develop.6569.1.c06dee4866",
+  "version": "0.6.7-develop.6573.1.28649ddec6",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -253,16 +253,16 @@
     "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@open-mercato/ai-assistant": "0.6.7-develop.6569.1.c06dee4866",
-    "@open-mercato/shared": "0.6.7-develop.6569.1.c06dee4866",
-    "@open-mercato/ui": "0.6.7-develop.6569.1.c06dee4866",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6573.1.28649ddec6",
+    "@open-mercato/shared": "0.6.7-develop.6573.1.28649ddec6",
+    "@open-mercato/ui": "0.6.7-develop.6573.1.28649ddec6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.6.7-develop.6569.1.c06dee4866",
-    "@open-mercato/shared": "0.6.7-develop.6569.1.c06dee4866",
-    "@open-mercato/ui": "0.6.7-develop.6569.1.c06dee4866",
+    "@open-mercato/ai-assistant": "0.6.7-develop.6573.1.28649ddec6",
+    "@open-mercato/shared": "0.6.7-develop.6573.1.28649ddec6",
+    "@open-mercato/ui": "0.6.7-develop.6573.1.28649ddec6",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.1",

package/src/modules/directory/commands/organizations.ts

@@ -279,7 +279,7 @@ const createOrganizationCommand: CommandHandler<Record<string, unknown>, Organiz
   async execute(rawInput, ctx) {
     const { parsed, custom } = parseWithCustomFields(organizationCreateSchema, rawInput)
     const em = (ctx.container.resolve('em') as EntityManager)
-    const tenantId = await enforceTenantSelection(ctx, parsed.tenantId ?? null)
+    const tenantId = await enforceTenantSelection(ctx, parsed.tenantId)
     if (!tenantId) throw new CrudHttpError(400, { error: 'Tenant scope required' })
 
     const parentId = parsed.parentId ?? null

package/src/modules/payment_gateways/api/cancel/route.ts

@@ -61,6 +61,7 @@ export async function POST(req: Request) {
       parsed.data.transactionId,
       parsed.data.reason,
       { organizationId: auth.orgId as string, tenantId: auth.tenantId },
+      parsed.data.operationId,
     )
     await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
       tenantId: auth.tenantId,

package/src/modules/payment_gateways/api/capture/route.ts

@@ -61,6 +61,7 @@ export async function POST(req: Request) {
       parsed.data.transactionId,
       parsed.data.amount,
       { organizationId: auth.orgId as string, tenantId: auth.tenantId },
+      parsed.data.operationId,
     )
     await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
       tenantId: auth.tenantId,

package/src/modules/payment_gateways/api/refund/route.ts

@@ -62,6 +62,7 @@ export async function POST(req: Request) {
       parsed.data.amount,
       parsed.data.reason,
       { organizationId: auth.orgId as string, tenantId: auth.tenantId },
+      parsed.data.operationId,
     )
     await runPaymentGatewayMutationGuardAfterSuccess(guardResult.afterSuccessCallbacks, {
       tenantId: auth.tenantId,

package/src/modules/payment_gateways/data/entities.ts

@@ -75,6 +75,65 @@ export class GatewayTransaction {
   deletedAt?: Date | null
 }
 
+@Entity({ tableName: 'gateway_payment_operations' })
+@Unique({
+  name: 'gateway_payment_operations_scope_operation_unique',
+  properties: ['operationId', 'organizationId', 'tenantId'],
+})
+@Index({ properties: ['transactionId', 'operationType', 'organizationId', 'tenantId'] })
+@Index({ properties: ['status', 'leaseExpiresAt'] })
+export class GatewayPaymentOperation {
+  [OptionalProps]?: 'status' | 'attemptCount' | 'result' | 'leaseExpiresAt' | 'createdAt' | 'updatedAt'
+
+  @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })
+  id!: string
+
+  @Property({ name: 'operation_id', type: 'text' })
+  operationId!: string
+
+  @Property({ name: 'transaction_id', type: 'uuid' })
+  transactionId!: string
+
+  @Property({ name: 'operation_type', type: 'text' })
+  operationType!: string
+
+  @Property({ name: 'provider_key', type: 'text' })
+  providerKey!: string
+
+  @Property({ name: 'request_hash', type: 'text' })
+  requestHash!: string
+
+  @Property({ name: 'provider_idempotency_key', type: 'text' })
+  providerIdempotencyKey!: string
+
+  @Property({ name: 'status', type: 'text' })
+  status: string = 'in_progress'
+
+  @Property({ name: 'attempt_token', type: 'text' })
+  attemptToken!: string
+
+  @Property({ name: 'attempt_count', type: 'integer' })
+  attemptCount: number = 1
+
+  @Property({ name: 'result', type: 'jsonb', nullable: true })
+  result?: Record<string, unknown> | null
+
+  @Property({ name: 'lease_expires_at', type: Date, nullable: true })
+  leaseExpiresAt?: Date | null
+
+  @Property({ name: 'organization_id', type: 'uuid' })
+  organizationId!: string
+
+  @Property({ name: 'tenant_id', type: 'uuid' })
+  tenantId!: string
+
+  @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })
+  createdAt: Date = new Date()
+
+  @Property({ name: 'updated_at', type: Date, onCreate: () => new Date(), onUpdate: () => new Date() })
+  updatedAt: Date = new Date()
+}
+
 @Entity({ tableName: 'gateway_session_initializations' })
 @Unique({
   name: 'gateway_session_initializations_scope_operation_unique',

package/src/modules/payment_gateways/data/validators.ts

@@ -36,6 +36,7 @@ export type CreateSessionPayload = z.infer<typeof createSessionSchema>
 export const captureSchema = z.object({
   transactionId: z.string().uuid(),
   amount: z.number().positive().optional(),
+  operationId: z.string().trim().min(1).max(200).optional(),
 })
 
 export type CapturePayload = z.infer<typeof captureSchema>
@@ -44,6 +45,7 @@ export const refundSchema = z.object({
   transactionId: z.string().uuid(),
   amount: z.number().positive().optional(),
   reason: z.string().max(200).optional(),
+  operationId: z.string().trim().min(1).max(200).optional(),
 })
 
 export type RefundPayload = z.infer<typeof refundSchema>
@@ -51,6 +53,7 @@ export type RefundPayload = z.infer<typeof refundSchema>
 export const cancelSchema = z.object({
   transactionId: z.string().uuid(),
   reason: z.string().max(200).optional(),
+  operationId: z.string().trim().min(1).max(200).optional(),
 })
 
 export type CancelPayload = z.infer<typeof cancelSchema>