npm - @open-mercato/core - Versions diffs - 0.6.7-develop.6676.1.7dad6df292 → 0.6.7-develop.6685.1.77c0a5591b - Mend

@open-mercato/core 0.6.7-develop.6676.1.7dad6df292 → 0.6.7-develop.6685.1.77c0a5591b

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (71) hide show

package/dist/modules/payment_gateways/lib/gateway-service.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/payment_gateways/lib/gateway-service.ts"],
-  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  getGatewayAdapter,\n  type CreateSessionInput,\n  type CreateSessionResult,\n  type CaptureResult,\n  type RefundResult,\n  type CancelResult,\n  type GatewayAdapter,\n  type GatewayPaymentStatus,\n  type PaymentGatewayPresentationRequest,\n  type UnifiedPaymentStatus,\n} from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport type { IntegrationStateService } from '../../integrations/lib/state-service'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport { conflict } from '@open-mercato/shared/lib/crud/errors'\nimport { GatewaySessionInitialization, GatewayTransaction } from '../data/entities'\nimport { canApplyManualAction, isValidTransition, type ManualGatewayAction } from './status-machine'\nimport { emitPaymentGatewayEvent } from '../events'\nimport { readGatewayMetadata, readWebhookLog } from './transaction-fields'\nimport {\n  completePaymentOperation,\n  failPaymentOperation,\n  preparePaymentOperation,\n} from './payment-operation-idempotency'\nimport {\n  buildPaymentSessionOperationKey,\n  claimPaymentSessionInitialization,\n  findPaymentSessionInitialization,\n  reclaimPaymentSessionInitialization,\n  refreshPaymentSessionInitialization,\n  releasePaymentSessionInitialization,\n} from './session-idempotency'\n\nconst PAYMENT_SESSION_CLAIM_STALE_MS = 30_000\nconst PAYMENT_SESSION_WAIT_INTERVAL_MS = 25\n\nfunction assertManualActionAllowed(action: ManualGatewayAction, transaction: GatewayTransaction): void {\n  const current = transaction.unifiedStatus as UnifiedPaymentStatus\n  if (!canApplyManualAction(action, current)) {\n    throw conflict(`Cannot ${action} a payment in status \"${current}\"`)\n  }\n}\n\nfunction assertCaptureAmountAllowed(amount: number | undefined, transaction: GatewayTransaction): void {\n  if (amount !== undefined && amount > Number(transaction.amount)) {\n    throw conflict(`Capture amount ${amount} exceeds authorized transaction amount ${transaction.amount}`)\n  }\n}\n\nfunction applyAdapterResultStatus(\n  action: ManualGatewayAction,\n  transaction: GatewayTransaction,\n  resultStatus: UnifiedPaymentStatus,\n): boolean {\n  const current = transaction.unifiedStatus as UnifiedPaymentStatus\n  if (resultStatus === current) return false\n  if (isValidTransition(resultStatus, current)) return false\n  if (!isValidTransition(current, resultStatus)) {\n    throw conflict(\n      `Gateway returned status \"${resultStatus}\" which is not a valid transition from \"${current}\" for ${action}`,\n    )\n  }\n  transaction.unifiedStatus = resultStatus\n  return true\n}\n\nexport interface PaymentGatewayServiceDeps {\n  em: EntityManager\n  integrationCredentialsService: CredentialsService\n  integrationStateService?: IntegrationStateService\n  integrationLogService?: IntegrationLogService\n  sessionClaimOptions?: {\n    staleAfterMs?: number\n    heartbeatIntervalMs?: number\n    pollIntervalMs?: number\n  }\n}\n\nexport interface CreatePaymentSessionInput {\n  providerKey: string\n  paymentId: string\n  idempotencyKey?: string\n  orderId?: string\n  amount: number\n  currencyCode: string\n  captureMethod?: 'automatic' | 'manual'\n  paymentTypes?: string[]\n  description?: string\n  successUrl?: string\n  cancelUrl?: string\n  metadata?: Record<string, unknown>\n  presentation?: PaymentGatewayPresentationRequest\n  organizationId: string\n  tenantId: string\n}\n\nexport function createPaymentGatewayService(deps: PaymentGatewayServiceDeps) {\n  const { em, integrationCredentialsService, integrationLogService } = deps\n  const claimStaleAfterMs = Math.max(1, deps.sessionClaimOptions?.staleAfterMs ?? PAYMENT_SESSION_CLAIM_STALE_MS)\n  const claimHeartbeatIntervalMs = Math.max(\n    1,\n    deps.sessionClaimOptions?.heartbeatIntervalMs ?? Math.floor(claimStaleAfterMs / 3),\n  )\n  const claimPollIntervalMs = Math.max(1, deps.sessionClaimOptions?.pollIntervalMs ?? PAYMENT_SESSION_WAIT_INTERVAL_MS)\n\n  async function findTransactionOrThrow(\n    transactionId: string,\n    scope: { organizationId: string; tenantId: string },\n    targetEm: EntityManager = em,\n  ): Promise<GatewayTransaction> {\n    const transaction = await findOneWithDecryption(\n      targetEm,\n      GatewayTransaction,\n      {\n        id: transactionId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n    if (!transaction) {\n      throw new Error('Transaction not found')\n    }\n    return transaction\n  }\n\n  function readProviderSessionId(transaction: GatewayTransaction): string {\n    if (typeof transaction.providerSessionId === 'string' && transaction.providerSessionId.trim().length > 0) {\n      return transaction.providerSessionId\n    }\n    throw new Error('Transaction is missing provider session id')\n  }\n\n  async function emitStatusEvent(status: UnifiedPaymentStatus, payload: Record<string, unknown>) {\n    type PaymentGatewayEventId = Parameters<typeof emitPaymentGatewayEvent>[0]\n    const eventMap: Partial<Record<UnifiedPaymentStatus, PaymentGatewayEventId>> = {\n      authorized: 'payment_gateways.payment.authorized',\n      captured: 'payment_gateways.payment.captured',\n      failed: 'payment_gateways.payment.failed',\n      refunded: 'payment_gateways.payment.refunded',\n      cancelled: 'payment_gateways.payment.cancelled',\n    }\n    const eventId = eventMap[status]\n    if (!eventId) return\n    await emitPaymentGatewayEvent(eventId, payload)\n  }\n\n  async function writeTransactionLog(\n    providerKey: string,\n    scope: { organizationId: string; tenantId: string },\n    transactionId: string,\n    level: 'info' | 'warn' | 'error',\n    message: string,\n    payload?: Record<string, unknown> | null,\n    code?: string | null,\n  ) {\n    if (!integrationLogService) return\n    await integrationLogService.write({\n      integrationId: `gateway_${providerKey}`,\n      scopeEntityType: 'payment_transaction',\n      scopeEntityId: transactionId,\n      level,\n      message,\n      code,\n      payload: payload ?? null,\n    }, scope)\n  }\n\n  async function resolveAdapterAndCredentials(providerKey: string, scope: { organizationId: string; tenantId: string }) {\n    const integrationId = `gateway_${providerKey}`\n    const selectedVersion = deps.integrationStateService\n      ? await deps.integrationStateService.resolveApiVersion(integrationId, scope)\n      : undefined\n    const adapter = getGatewayAdapter(providerKey, selectedVersion)\n    if (!adapter) {\n      throw new Error(\n        selectedVersion\n          ? `No gateway adapter registered for provider: ${providerKey} (version: ${selectedVersion})`\n          : `No gateway adapter registered for provider: ${providerKey}`,\n      )\n    }\n    const credentials = await integrationCredentialsService.resolve(integrationId, scope) ?? {}\n\n    return { adapter, credentials }\n  }\n\n  type ManualOperationResult = CaptureResult | RefundResult | CancelResult\n\n  async function executeManualOperation<TResult extends ManualOperationResult>(input: {\n    action: ManualGatewayAction\n    transactionId: string\n    operationId?: string\n    payload: Record<string, unknown>\n    scope: { organizationId: string; tenantId: string }\n    assertInitialAllowed?: (transaction: GatewayTransaction) => void\n    invoke: (context: {\n      adapter: GatewayAdapter\n      credentials: Record<string, unknown>\n      transaction: GatewayTransaction\n      idempotencyKey: string\n    }) => Promise<TResult>\n    applyResult: (transaction: GatewayTransaction, result: TResult) => void\n    afterCommit: (transaction: GatewayTransaction, result: TResult) => Promise<void>\n  }): Promise<TResult> {\n    const transaction = await findTransactionOrThrow(input.transactionId, input.scope)\n    const prepared = await preparePaymentOperation({\n      em,\n      transactionId: transaction.id,\n      providerKey: transaction.providerKey,\n      action: input.action,\n      operationId: input.operationId,\n      payload: input.payload,\n      scope: input.scope,\n      assertInitialAllowed: () => {\n        assertManualActionAllowed(input.action, transaction)\n        input.assertInitialAllowed?.(transaction)\n      },\n    })\n    if (prepared.kind === 'completed') {\n      if (prepared.result.status !== transaction.unifiedStatus) {\n        throw conflict(\n          `Cannot replay ${input.action} because the payment status has changed since the operation completed`,\n        )\n      }\n      return prepared.result as unknown as TResult\n    }\n\n    try {\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n      const result = await input.invoke({\n        adapter,\n        credentials,\n        transaction,\n        idempotencyKey: prepared.claim.providerIdempotencyKey,\n      })\n      const statusChanged = await completePaymentOperation(\n        em,\n        prepared.claim,\n        result as unknown as Record<string, unknown>,\n        async (tx) => {\n          const current = await findTransactionOrThrow(input.transactionId, input.scope, tx)\n          const changed = applyAdapterResultStatus(input.action, current, result.status)\n          input.applyResult(current, result)\n          return changed\n        },\n      )\n      if (statusChanged) {\n        await emitStatusEvent(result.status, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n      }\n      await input.afterCommit(transaction, result)\n      return result\n    } catch (error: unknown) {\n      await Promise.allSettled([failPaymentOperation(em, prepared.claim)])\n      throw error\n    }\n  }\n\n  function createGatewayTransaction(\n    manager: EntityManager,\n    input: CreatePaymentSessionInput,\n    session: CreateSessionResult,\n    id?: string,\n  ): GatewayTransaction {\n    const data = {\n      paymentId: input.paymentId,\n      providerKey: input.providerKey,\n      providerSessionId: session.sessionId,\n      unifiedStatus: session.status,\n      redirectUrl: session.redirectUrl\n        ?? (session.clientSession?.type === 'redirect' ? session.clientSession.redirectUrl : null),\n      clientSecret: session.clientSecret ?? null,\n      amount: String(input.amount),\n      currencyCode: input.currencyCode,\n      gatewayMetadata: {\n        ...(session.providerData ?? {}),\n        ...(session.clientSession ? { clientSession: session.clientSession } : {}),\n      },\n      organizationId: input.organizationId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    }\n    return id\n      ? manager.create(GatewayTransaction, { id, ...data })\n      : manager.create(GatewayTransaction, data)\n  }\n\n  function restoreSession(transaction: GatewayTransaction): CreateSessionResult {\n    const metadata = readGatewayMetadata(transaction.gatewayMetadata)\n    const { clientSession, ...providerData } = metadata\n    return {\n      sessionId: readProviderSessionId(transaction),\n      status: transaction.unifiedStatus as UnifiedPaymentStatus,\n      ...(transaction.clientSecret ? { clientSecret: transaction.clientSecret } : {}),\n      ...(transaction.redirectUrl ? { redirectUrl: transaction.redirectUrl } : {}),\n      ...(Object.keys(providerData).length > 0 ? { providerData } : {}),\n      ...(clientSession && typeof clientSession === 'object'\n        ? { clientSession: clientSession as CreateSessionResult['clientSession'] }\n        : {}),\n    }\n  }\n\n  async function recordCreatedSession(\n    transaction: GatewayTransaction,\n    input: CreatePaymentSessionInput,\n    scope: { organizationId: string; tenantId: string },\n  ): Promise<void> {\n    await emitPaymentGatewayEvent('payment_gateways.session.created', {\n      transactionId: transaction.id,\n      paymentId: transaction.paymentId,\n      providerKey: transaction.providerKey,\n      status: transaction.unifiedStatus,\n      organizationId: transaction.organizationId,\n      tenantId: transaction.tenantId,\n    })\n    await writeTransactionLog(\n      transaction.providerKey,\n      scope,\n      transaction.id,\n      'info',\n      'Payment session created',\n      {\n        paymentId: transaction.paymentId,\n        providerSessionId: transaction.providerSessionId,\n        status: transaction.unifiedStatus,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n      },\n    )\n  }\n\n  function startClaimHeartbeat(\n    ownership: { id: string; claimToken: string },\n    scope: { organizationId: string; tenantId: string },\n  ): () => Promise<void> {\n    let stopped = false\n    let timer: ReturnType<typeof setTimeout> | null = null\n    let pendingRefresh = Promise.resolve()\n\n    const schedule = () => {\n      timer = setTimeout(() => {\n        pendingRefresh = refreshPaymentSessionInitialization(em, ownership, scope, new Date())\n          .then(\n            (refreshed) => {\n              if (refreshed && !stopped) schedule()\n            },\n            () => {\n              if (!stopped) schedule()\n            },\n          )\n      }, claimHeartbeatIntervalMs)\n    }\n    schedule()\n\n    return async () => {\n      stopped = true\n      if (timer) clearTimeout(timer)\n      await pendingRefresh\n    }\n  }\n\n  return {\n    async createPaymentSession(input: CreatePaymentSessionInput): Promise<{ transaction: GatewayTransaction; session: CreateSessionResult }> {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      const { adapter, credentials } = await resolveAdapterAndCredentials(input.providerKey, scope)\n\n      const sessionInput: CreateSessionInput = {\n        paymentId: input.paymentId,\n        orderId: input.orderId,\n        idempotencyKey: input.idempotencyKey,\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n        captureMethod: input.captureMethod,\n        paymentTypes: input.paymentTypes,\n        description: input.description,\n        successUrl: input.successUrl,\n        cancelUrl: input.cancelUrl,\n        metadata: input.metadata,\n        presentation: input.presentation,\n        credentials,\n      }\n\n      if (!input.idempotencyKey) {\n        const session = await adapter.createSession(sessionInput)\n        const transaction = createGatewayTransaction(em, input, session)\n        await em.persist(transaction).flush()\n        await recordCreatedSession(transaction, input, scope)\n        return { transaction, session }\n      }\n\n      const operationKey = buildPaymentSessionOperationKey({\n        idempotencyKey: input.idempotencyKey,\n        paymentId: input.paymentId,\n        providerKey: input.providerKey,\n        scope,\n      })\n      while (true) {\n        const existing = await findPaymentSessionInitialization(em, operationKey, input.providerKey, scope)\n        if (existing?.gatewayTransactionId) {\n          const transaction = await findOneWithDecryption(\n            em.fork(),\n            GatewayTransaction,\n            {\n              id: existing.gatewayTransactionId,\n              organizationId: scope.organizationId,\n              tenantId: scope.tenantId,\n              deletedAt: null,\n            },\n            undefined,\n            scope,\n          )\n          if (!transaction) {\n            throw new Error('Completed payment session is missing its gateway transaction')\n          }\n          return { transaction, session: restoreSession(transaction) }\n        }\n\n        const claimedAt = new Date()\n        const staleBefore = new Date(claimedAt.getTime() - claimStaleAfterMs)\n        const ownership = existing\n          ? await reclaimPaymentSessionInitialization(em, existing, scope, claimedAt, staleBefore)\n          : await claimPaymentSessionInitialization(em, operationKey, input.providerKey, scope, claimedAt)\n\n        if (!ownership) {\n          await new Promise((resolve) => setTimeout(resolve, claimPollIntervalMs))\n          continue\n        }\n\n        let session: CreateSessionResult\n        const stopHeartbeat = startClaimHeartbeat(ownership, scope)\n        try {\n          session = await adapter.createSession({ ...sessionInput, idempotencyKey: operationKey })\n        } catch (error) {\n          await releasePaymentSessionInitialization(em, ownership, scope).catch(() => undefined)\n          throw error\n        } finally {\n          await stopHeartbeat()\n        }\n\n        const transactionId = randomUUID()\n        const transaction = await em.fork().transactional(async (transactionEm) => {\n          const finalizedRows = await transactionEm.nativeUpdate(\n            GatewaySessionInitialization,\n            {\n              id: ownership.id,\n              claimToken: ownership.claimToken,\n              gatewayTransactionId: null,\n              organizationId: scope.organizationId,\n              tenantId: scope.tenantId,\n            },\n            {\n              gatewayTransactionId: transactionId,\n              claimToken: null,\n              claimedAt: null,\n              updatedAt: new Date(),\n            },\n          )\n          if (finalizedRows === 0) return null\n          const created = createGatewayTransaction(transactionEm, input, session, transactionId)\n          await transactionEm.persist(created).flush()\n          return created\n        })\n\n        if (!transaction) {\n          continue\n        }\n        await recordCreatedSession(transaction, input, scope)\n        return { transaction, session }\n      }\n    },\n\n    async capturePayment(\n      transactionId: string,\n      amount: number | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<CaptureResult> {\n      return executeManualOperation({\n        action: 'capture',\n        transactionId,\n        operationId,\n        payload: { amount: amount ?? null },\n        scope,\n        assertInitialAllowed: (transaction) => assertCaptureAmountAllowed(amount, transaction),\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.capture({\n          sessionId: readProviderSessionId(transaction),\n          amount,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: (transaction, result) => {\n          transaction.gatewayMetadata = {\n            ...readGatewayMetadata(transaction.gatewayMetadata),\n            captureResult: result.providerData,\n          }\n        },\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment captured',\n          { amount: amount ?? null, status: result.status, capturedAmount: result.capturedAmount },\n        ),\n      })\n    },\n\n    async refundPayment(\n      transactionId: string,\n      amount: number | undefined,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<RefundResult> {\n      return executeManualOperation({\n        action: 'refund',\n        transactionId,\n        operationId,\n        payload: { amount: amount ?? null, reason: reason ?? null },\n        scope,\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.refund({\n          sessionId: readProviderSessionId(transaction),\n          amount,\n          reason,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: (transaction, result) => {\n          transaction.gatewayRefundId = result.refundId\n          transaction.gatewayMetadata = {\n            ...readGatewayMetadata(transaction.gatewayMetadata),\n            refundResult: result.providerData,\n          }\n        },\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment refunded',\n          { amount: amount ?? null, reason: reason ?? null, status: result.status, refundId: result.refundId },\n        ),\n      })\n    },\n\n    async cancelPayment(\n      transactionId: string,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<CancelResult> {\n      return executeManualOperation({\n        action: 'cancel',\n        transactionId,\n        operationId,\n        payload: { reason: reason ?? null },\n        scope,\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.cancel({\n          sessionId: readProviderSessionId(transaction),\n          reason,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: () => {},\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment cancelled',\n          { reason: reason ?? null, status: result.status },\n        ),\n      })\n    },\n\n    async getPaymentStatus(transactionId: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayPaymentStatus> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n\n      const status = await adapter.getStatus({\n        sessionId: readProviderSessionId(transaction),\n        credentials,\n      })\n\n      if (status.status !== transaction.unifiedStatus && isValidTransition(transaction.unifiedStatus as UnifiedPaymentStatus, status.status)) {\n        const previousStatus = transaction.unifiedStatus\n        transaction.unifiedStatus = status.status\n        transaction.gatewayStatus = status.status\n        transaction.gatewayMetadata = { ...readGatewayMetadata(transaction.gatewayMetadata), statusResult: status.providerData ?? null }\n        transaction.lastPolledAt = new Date()\n        await em.flush()\n        await emitStatusEvent(status.status, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          previousStatus,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n        await writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment status updated by poller',\n          {\n            previousStatus,\n            nextStatus: status.status,\n          },\n        )\n      }\n\n      return status\n    },\n\n    async syncTransactionStatus(transactionId: string, update: {\n      unifiedStatus: UnifiedPaymentStatus\n      providerStatus?: string\n      providerData?: Record<string, unknown>\n      webhookEvent?: {\n        eventType: string\n        idempotencyKey: string\n        processed: boolean\n        receivedAt?: string\n      }\n    }, scope: { organizationId: string; tenantId: string }): Promise<void> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const currentStatus = transaction.unifiedStatus as UnifiedPaymentStatus\n      const canTransition = isValidTransition(currentStatus, update.unifiedStatus)\n      const shouldApplyStatus = canTransition && update.unifiedStatus !== currentStatus\n      const previousStatus = transaction.unifiedStatus\n      if (shouldApplyStatus) {\n        transaction.unifiedStatus = update.unifiedStatus\n      }\n      if (update.providerStatus) {\n        transaction.gatewayStatus = update.providerStatus\n      }\n      if (update.providerData) {\n        transaction.gatewayMetadata = { ...readGatewayMetadata(transaction.gatewayMetadata), ...update.providerData }\n      }\n      if (update.webhookEvent) {\n        const webhookLog = readWebhookLog(transaction.webhookLog)\n        webhookLog.push({\n          eventType: update.webhookEvent.eventType,\n          receivedAt: update.webhookEvent.receivedAt ?? new Date().toISOString(),\n          idempotencyKey: update.webhookEvent.idempotencyKey,\n          unifiedStatus: update.unifiedStatus,\n          processed: update.webhookEvent.processed,\n        })\n        transaction.webhookLog = webhookLog\n      }\n      transaction.lastWebhookAt = new Date()\n      await em.flush()\n      if (shouldApplyStatus) {\n        await emitStatusEvent(update.unifiedStatus, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          previousStatus,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n      }\n      await writeTransactionLog(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        transaction.id,\n        shouldApplyStatus ? 'info' : 'warn',\n        shouldApplyStatus ? 'Payment status synchronized from webhook' : 'Webhook received with no status transition',\n        {\n          previousStatus,\n          nextStatus: update.unifiedStatus,\n          providerStatus: update.providerStatus ?? null,\n          eventType: update.webhookEvent?.eventType ?? null,\n          idempotencyKey: update.webhookEvent?.idempotencyKey ?? null,\n        },\n      )\n    },\n\n    async findTransaction(id: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          id,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async findTransactionBySessionId(\n      providerSessionId: string,\n      scope: { organizationId: string; tenantId: string },\n      providerKey?: string,\n    ): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          providerSessionId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n          ...(providerKey ? { providerKey } : {}),\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async listTransactionsForStatusPolling(scope?: {\n      organizationId?: string\n      tenantId?: string\n      providerKey?: string\n      limit?: number\n    }): Promise<GatewayTransaction[]> {\n      const where: Record<string, unknown> = {\n        unifiedStatus: { $in: ['pending', 'authorized', 'partially_captured'] },\n        deletedAt: null,\n      }\n      if (scope?.organizationId) where.organizationId = scope.organizationId\n      if (scope?.tenantId) where.tenantId = scope.tenantId\n      if (scope?.providerKey) where.providerKey = scope.providerKey\n\n      return findWithDecryption(\n        em,\n        GatewayTransaction,\n        where,\n        {\n          orderBy: { updatedAt: 'asc' },\n          limit: scope?.limit ?? 100,\n        },\n        scope,\n      )\n    },\n  }\n}\n\nexport type PaymentGatewayService = ReturnType<typeof createPaymentGatewayService>\n"],
-  "mappings": "AAAA,SAAS,kBAAkB;AAE3B,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,OAUK;AAIP,SAAS,gBAAgB;AACzB,SAAS,8BAA8B,0BAA0B;AACjE,SAAS,sBAAsB,yBAAmD;AAClF,SAAS,+BAA+B;AACxC,SAAS,qBAAqB,sBAAsB;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AACvC,MAAM,mCAAmC;AAEzC,SAAS,0BAA0B,QAA6B,aAAuC;AACrG,QAAM,UAAU,YAAY;AAC5B,MAAI,CAAC,qBAAqB,QAAQ,OAAO,GAAG;AAC1C,UAAM,SAAS,UAAU,MAAM,yBAAyB,OAAO,GAAG;AAAA,EACpE;AACF;AAEA,SAAS,2BAA2B,QAA4B,aAAuC;AACrG,MAAI,WAAW,UAAa,SAAS,OAAO,YAAY,MAAM,GAAG;AAC/D,UAAM,SAAS,kBAAkB,MAAM,0CAA0C,YAAY,MAAM,EAAE;AAAA,EACvG;AACF;AAEA,SAAS,yBACP,QACA,aACA,cACS;AACT,QAAM,UAAU,YAAY;AAC5B,MAAI,iBAAiB,QAAS,QAAO;AACrC,MAAI,kBAAkB,cAAc,OAAO,EAAG,QAAO;AACrD,MAAI,CAAC,kBAAkB,SAAS,YAAY,GAAG;AAC7C,UAAM;AAAA,MACJ,4BAA4B,YAAY,2CAA2C,OAAO,SAAS,MAAM;AAAA,IAC3G;AAAA,EACF;AACA,cAAY,gBAAgB;AAC5B,SAAO;AACT;AAgCO,SAAS,4BAA4B,MAAiC;AAC3E,QAAM,EAAE,IAAI,+BAA+B,sBAAsB,IAAI;AACrE,QAAM,oBAAoB,KAAK,IAAI,GAAG,KAAK,qBAAqB,gBAAgB,8BAA8B;AAC9G,QAAM,2BAA2B,KAAK;AAAA,IACpC;AAAA,IACA,KAAK,qBAAqB,uBAAuB,KAAK,MAAM,oBAAoB,CAAC;AAAA,EACnF;AACA,QAAM,sBAAsB,KAAK,IAAI,GAAG,KAAK,qBAAqB,kBAAkB,gCAAgC;AAEpH,iBAAe,uBACb,eACA,OACA,WAA0B,IACG;AAC7B,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,WAAS,sBAAsB,aAAyC;AACtE,QAAI,OAAO,YAAY,sBAAsB,YAAY,YAAY,kBAAkB,KAAK,EAAE,SAAS,GAAG;AACxG,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,iBAAe,gBAAgB,QAA8B,SAAkC;AAE7F,UAAM,WAAyE;AAAA,MAC7E,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,QAAS;AACd,UAAM,wBAAwB,SAAS,OAAO;AAAA,EAChD;AAEA,iBAAe,oBACb,aACA,OACA,eACA,OACA,SACA,SACA,MACA;AACA,QAAI,CAAC,sBAAuB;AAC5B,UAAM,sBAAsB,MAAM;AAAA,MAChC,eAAe,WAAW,WAAW;AAAA,MACrC,iBAAiB;AAAA,MACjB,eAAe;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,WAAW;AAAA,IACtB,GAAG,KAAK;AAAA,EACV;AAEA,iBAAe,6BAA6B,aAAqB,OAAqD;AACpH,UAAM,gBAAgB,WAAW,WAAW;AAC5C,UAAM,kBAAkB,KAAK,0BACzB,MAAM,KAAK,wBAAwB,kBAAkB,eAAe,KAAK,IACzE;AACJ,UAAM,UAAU,kBAAkB,aAAa,eAAe;AAC9D,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR,kBACI,+CAA+C,WAAW,cAAc,eAAe,MACvF,+CAA+C,WAAW;AAAA,MAChE;AAAA,IACF;AACA,UAAM,cAAc,MAAM,8BAA8B,QAAQ,eAAe,KAAK,KAAK,CAAC;AAE1F,WAAO,EAAE,SAAS,YAAY;AAAA,EAChC;AAIA,iBAAe,uBAA8D,OAexD;AACnB,UAAM,cAAc,MAAM,uBAAuB,MAAM,eAAe,MAAM,KAAK;AACjF,UAAM,WAAW,MAAM,wBAAwB;AAAA,MAC7C;AAAA,MACA,eAAe,YAAY;AAAA,MAC3B,aAAa,YAAY;AAAA,MACzB,QAAQ,MAAM;AAAA,MACd,aAAa,MAAM;AAAA,MACnB,SAAS,MAAM;AAAA,MACf,OAAO,MAAM;AAAA,MACb,sBAAsB,MAAM;AAC1B,kCAA0B,MAAM,QAAQ,WAAW;AACnD,cAAM,uBAAuB,WAAW;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,QAAI,SAAS,SAAS,aAAa;AACjC,UAAI,SAAS,OAAO,WAAW,YAAY,eAAe;AACxD,cAAM;AAAA,UACJ,iBAAiB,MAAM,MAAM;AAAA,QAC/B;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB;AAEA,QAAI;AACF,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AACA,YAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QAChC;AAAA,QACA;AAAA,QACA;AAAA,QACA,gBAAgB,SAAS,MAAM;AAAA,MACjC,CAAC;AACD,YAAM,gBAAgB,MAAM;AAAA,QAC1B;AAAA,QACA,SAAS;AAAA,QACT;AAAA,QACA,OAAO,OAAO;AACZ,gBAAM,UAAU,MAAM,uBAAuB,MAAM,eAAe,MAAM,OAAO,EAAE;AACjF,gBAAM,UAAU,yBAAyB,MAAM,QAAQ,SAAS,OAAO,MAAM;AAC7E,gBAAM,YAAY,SAAS,MAAM;AACjC,iBAAO;AAAA,QACT;AAAA,MACF;AACA,UAAI,eAAe;AACjB,cAAM,gBAAgB,OAAO,QAAQ;AAAA,UACnC,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AACA,YAAM,MAAM,YAAY,aAAa,MAAM;AAC3C,aAAO;AAAA,IACT,SAAS,OAAgB;AACvB,YAAM,QAAQ,WAAW,CAAC,qBAAqB,IAAI,SAAS,KAAK,CAAC,CAAC;AACnE,YAAM;AAAA,IACR;AAAA,EACF;AAEA,WAAS,yBACP,SACA,OACA,SACA,IACoB;AACpB,UAAM,OAAO;AAAA,MACX,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,mBAAmB,QAAQ;AAAA,MAC3B,eAAe,QAAQ;AAAA,MACvB,aAAa,QAAQ,gBACf,QAAQ,eAAe,SAAS,aAAa,QAAQ,cAAc,cAAc;AAAA,MACvF,cAAc,QAAQ,gBAAgB;AAAA,MACtC,QAAQ,OAAO,MAAM,MAAM;AAAA,MAC3B,cAAc,MAAM;AAAA,MACpB,iBAAiB;AAAA,QACf,GAAI,QAAQ,gBAAgB,CAAC;AAAA,QAC7B,GAAI,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,cAAc,IAAI,CAAC;AAAA,MAC1E;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AACA,WAAO,KACH,QAAQ,OAAO,oBAAoB,EAAE,IAAI,GAAG,KAAK,CAAC,IAClD,QAAQ,OAAO,oBAAoB,IAAI;AAAA,EAC7C;AAEA,WAAS,eAAe,aAAsD;AAC5E,UAAM,WAAW,oBAAoB,YAAY,eAAe;AAChE,UAAM,EAAE,eAAe,GAAG,aAAa,IAAI;AAC3C,WAAO;AAAA,MACL,WAAW,sBAAsB,WAAW;AAAA,MAC5C,QAAQ,YAAY;AAAA,MACpB,GAAI,YAAY,eAAe,EAAE,cAAc,YAAY,aAAa,IAAI,CAAC;AAAA,MAC7E,GAAI,YAAY,cAAc,EAAE,aAAa,YAAY,YAAY,IAAI,CAAC;AAAA,MAC1E,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAa,IAAI,CAAC;AAAA,MAC/D,GAAI,iBAAiB,OAAO,kBAAkB,WAC1C,EAAE,cAAqE,IACvE,CAAC;AAAA,IACP;AAAA,EACF;AAEA,iBAAe,qBACb,aACA,OACA,OACe;AACf,UAAM,wBAAwB,oCAAoC;AAAA,MAChE,eAAe,YAAY;AAAA,MAC3B,WAAW,YAAY;AAAA,MACvB,aAAa,YAAY;AAAA,MACzB,QAAQ,YAAY;AAAA,MACpB,gBAAgB,YAAY;AAAA,MAC5B,UAAU,YAAY;AAAA,IACxB,CAAC;AACD,UAAM;AAAA,MACJ,YAAY;AAAA,MACZ;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,YAAY;AAAA,QACvB,mBAAmB,YAAY;AAAA,QAC/B,QAAQ,YAAY;AAAA,QACpB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,oBACP,WACA,OACqB;AACrB,QAAI,UAAU;AACd,QAAI,QAA8C;AAClD,QAAI,iBAAiB,QAAQ,QAAQ;AAErC,UAAM,WAAW,MAAM;AACrB,cAAQ,WAAW,MAAM;AACvB,yBAAiB,oCAAoC,IAAI,WAAW,OAAO,oBAAI,KAAK,CAAC,EAClF;AAAA,UACC,CAAC,cAAc;AACb,gBAAI,aAAa,CAAC,QAAS,UAAS;AAAA,UACtC;AAAA,UACA,MAAM;AACJ,gBAAI,CAAC,QAAS,UAAS;AAAA,UACzB;AAAA,QACF;AAAA,MACJ,GAAG,wBAAwB;AAAA,IAC7B;AACA,aAAS;AAET,WAAO,YAAY;AACjB,gBAAU;AACV,UAAI,MAAO,cAAa,KAAK;AAC7B,YAAM;AAAA,IACR;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,qBAAqB,OAA8G;AACvI,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,6BAA6B,MAAM,aAAa,KAAK;AAE5F,YAAM,eAAmC;AAAA,QACvC,WAAW,MAAM;AAAA,QACjB,SAAS,MAAM;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB,eAAe,MAAM;AAAA,QACrB,cAAc,MAAM;AAAA,QACpB,aAAa,MAAM;AAAA,QACnB,YAAY,MAAM;AAAA,QAClB,WAAW,MAAM;AAAA,QACjB,UAAU,MAAM;AAAA,QAChB,cAAc,MAAM;AAAA,QACpB;AAAA,MACF;AAEA,UAAI,CAAC,MAAM,gBAAgB;AACzB,cAAM,UAAU,MAAM,QAAQ,cAAc,YAAY;AACxD,cAAM,cAAc,yBAAyB,IAAI,OAAO,OAAO;AAC/D,cAAM,GAAG,QAAQ,WAAW,EAAE,MAAM;AACpC,cAAM,qBAAqB,aAAa,OAAO,KAAK;AACpD,eAAO,EAAE,aAAa,QAAQ;AAAA,MAChC;AAEA,YAAM,eAAe,gCAAgC;AAAA,QACnD,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB;AAAA,MACF,CAAC;AACD,aAAO,MAAM;AACX,cAAM,WAAW,MAAM,iCAAiC,IAAI,cAAc,MAAM,aAAa,KAAK;AAClG,YAAI,UAAU,sBAAsB;AAClC,gBAAMA,eAAc,MAAM;AAAA,YACxB,GAAG,KAAK;AAAA,YACR;AAAA,YACA;AAAA,cACE,IAAI,SAAS;AAAA,cACb,gBAAgB,MAAM;AAAA,cACtB,UAAU,MAAM;AAAA,cAChB,WAAW;AAAA,YACb;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,cAAI,CAACA,cAAa;AAChB,kBAAM,IAAI,MAAM,8DAA8D;AAAA,UAChF;AACA,iBAAO,EAAE,aAAAA,cAAa,SAAS,eAAeA,YAAW,EAAE;AAAA,QAC7D;AAEA,cAAM,YAAY,oBAAI,KAAK;AAC3B,cAAM,cAAc,IAAI,KAAK,UAAU,QAAQ,IAAI,iBAAiB;AACpE,cAAM,YAAY,WACd,MAAM,oCAAoC,IAAI,UAAU,OAAO,WAAW,WAAW,IACrF,MAAM,kCAAkC,IAAI,cAAc,MAAM,aAAa,OAAO,SAAS;AAEjG,YAAI,CAAC,WAAW;AACd,gBAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,mBAAmB,CAAC;AACvE;AAAA,QACF;AAEA,YAAI;AACJ,cAAM,gBAAgB,oBAAoB,WAAW,KAAK;AAC1D,YAAI;AACF,oBAAU,MAAM,QAAQ,cAAc,EAAE,GAAG,cAAc,gBAAgB,aAAa,CAAC;AAAA,QACzF,SAAS,OAAO;AACd,gBAAM,oCAAoC,IAAI,WAAW,KAAK,EAAE,MAAM,MAAM,MAAS;AACrF,gBAAM;AAAA,QACR,UAAE;AACA,gBAAM,cAAc;AAAA,QACtB;AAEA,cAAM,gBAAgB,WAAW;AACjC,cAAM,cAAc,MAAM,GAAG,KAAK,EAAE,cAAc,OAAO,kBAAkB;AACzE,gBAAM,gBAAgB,MAAM,cAAc;AAAA,YACxC;AAAA,YACA;AAAA,cACE,IAAI,UAAU;AAAA,cACd,YAAY,UAAU;AAAA,cACtB,sBAAsB;AAAA,cACtB,gBAAgB,MAAM;AAAA,cACtB,UAAU,MAAM;AAAA,YAClB;AAAA,YACA;AAAA,cACE,sBAAsB;AAAA,cACtB,YAAY;AAAA,cACZ,WAAW;AAAA,cACX,WAAW,oBAAI,KAAK;AAAA,YACtB;AAAA,UACF;AACA,cAAI,kBAAkB,EAAG,QAAO;AAChC,gBAAM,UAAU,yBAAyB,eAAe,OAAO,SAAS,aAAa;AACrF,gBAAM,cAAc,QAAQ,OAAO,EAAE,MAAM;AAC3C,iBAAO;AAAA,QACT,CAAC;AAED,YAAI,CAAC,aAAa;AAChB;AAAA,QACF;AACA,cAAM,qBAAqB,aAAa,OAAO,KAAK;AACpD,eAAO,EAAE,aAAa,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,MAAM,eACJ,eACA,QACA,OACA,aACwB;AACxB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,KAAK;AAAA,QAClC;AAAA,QACA,sBAAsB,CAAC,gBAAgB,2BAA2B,QAAQ,WAAW;AAAA,QACrF,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,QAAQ;AAAA,UACjF,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,CAAC,aAAa,WAAW;AACpC,sBAAY,kBAAkB;AAAA,YAC5B,GAAG,oBAAoB,YAAY,eAAe;AAAA,YAClD,eAAe,OAAO;AAAA,UACxB;AAAA,QACF;AAAA,QACA,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,OAAO,QAAQ,gBAAgB,OAAO,eAAe;AAAA,QACzF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,cACJ,eACA,QACA,QACA,OACA,aACuB;AACvB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,MAAM,QAAQ,UAAU,KAAK;AAAA,QAC1D;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,OAAO;AAAA,UAChF,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,CAAC,aAAa,WAAW;AACpC,sBAAY,kBAAkB,OAAO;AACrC,sBAAY,kBAAkB;AAAA,YAC5B,GAAG,oBAAoB,YAAY,eAAe;AAAA,YAClD,cAAc,OAAO;AAAA,UACvB;AAAA,QACF;AAAA,QACA,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,UAAU,MAAM,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS;AAAA,QACrG;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,cACJ,eACA,QACA,OACA,aACuB;AACvB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,KAAK;AAAA,QAClC;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,OAAO;AAAA,UAChF,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,MAAM;AAAA,QAAC;AAAA,QACpB,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,OAAO,OAAO;AAAA,QAClD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,iBAAiB,eAAuB,OAAoF;AAChI,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AAEA,YAAM,SAAS,MAAM,QAAQ,UAAU;AAAA,QACrC,WAAW,sBAAsB,WAAW;AAAA,QAC5C;AAAA,MACF,CAAC;AAED,UAAI,OAAO,WAAW,YAAY,iBAAiB,kBAAkB,YAAY,eAAuC,OAAO,MAAM,GAAG;AACtI,cAAM,iBAAiB,YAAY;AACnC,oBAAY,gBAAgB,OAAO;AACnC,oBAAY,gBAAgB,OAAO;AACnC,oBAAY,kBAAkB,EAAE,GAAG,oBAAoB,YAAY,eAAe,GAAG,cAAc,OAAO,gBAAgB,KAAK;AAC/H,oBAAY,eAAe,oBAAI,KAAK;AACpC,cAAM,GAAG,MAAM;AACf,cAAM,gBAAgB,OAAO,QAAQ;AAAA,UACnC,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AACD,cAAM;AAAA,UACJ,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA;AAAA,YACE;AAAA,YACA,YAAY,OAAO;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,sBAAsB,eAAuB,QAUhD,OAAoE;AACrE,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,gBAAgB,YAAY;AAClC,YAAM,gBAAgB,kBAAkB,eAAe,OAAO,aAAa;AAC3E,YAAM,oBAAoB,iBAAiB,OAAO,kBAAkB;AACpE,YAAM,iBAAiB,YAAY;AACnC,UAAI,mBAAmB;AACrB,oBAAY,gBAAgB,OAAO;AAAA,MACrC;AACA,UAAI,OAAO,gBAAgB;AACzB,oBAAY,gBAAgB,OAAO;AAAA,MACrC;AACA,UAAI,OAAO,cAAc;AACvB,oBAAY,kBAAkB,EAAE,GAAG,oBAAoB,YAAY,eAAe,GAAG,GAAG,OAAO,aAAa;AAAA,MAC9G;AACA,UAAI,OAAO,cAAc;AACvB,cAAM,aAAa,eAAe,YAAY,UAAU;AACxD,mBAAW,KAAK;AAAA,UACd,WAAW,OAAO,aAAa;AAAA,UAC/B,YAAY,OAAO,aAAa,eAAc,oBAAI,KAAK,GAAE,YAAY;AAAA,UACrE,gBAAgB,OAAO,aAAa;AAAA,UACpC,eAAe,OAAO;AAAA,UACtB,WAAW,OAAO,aAAa;AAAA,QACjC,CAAC;AACD,oBAAY,aAAa;AAAA,MAC3B;AACA,kBAAY,gBAAgB,oBAAI,KAAK;AACrC,YAAM,GAAG,MAAM;AACf,UAAI,mBAAmB;AACrB,cAAM,gBAAgB,OAAO,eAAe;AAAA,UAC1C,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AACA,YAAM;AAAA,QACJ,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC7E,YAAY;AAAA,QACZ,oBAAoB,SAAS;AAAA,QAC7B,oBAAoB,6CAA6C;AAAA,QACjE;AAAA,UACE;AAAA,UACA,YAAY,OAAO;AAAA,UACnB,gBAAgB,OAAO,kBAAkB;AAAA,UACzC,WAAW,OAAO,cAAc,aAAa;AAAA,UAC7C,gBAAgB,OAAO,cAAc,kBAAkB;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,gBAAgB,IAAY,OAAyF;AACzH,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,2BACJ,mBACA,OACA,aACoC;AACpC,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,UACX,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,iCAAiC,OAKL;AAChC,YAAM,QAAiC;AAAA,QACrC,eAAe,EAAE,KAAK,CAAC,WAAW,cAAc,oBAAoB,EAAE;AAAA,QACtE,WAAW;AAAA,MACb;AACA,UAAI,OAAO,eAAgB,OAAM,iBAAiB,MAAM;AACxD,UAAI,OAAO,SAAU,OAAM,WAAW,MAAM;AAC5C,UAAI,OAAO,YAAa,OAAM,cAAc,MAAM;AAElD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,SAAS,EAAE,WAAW,MAAM;AAAA,UAC5B,OAAO,OAAO,SAAS;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport {\n  getGatewayAdapter,\n  type CreateSessionInput,\n  type CreateSessionResult,\n  type CaptureResult,\n  type RefundResult,\n  type CancelResult,\n  type GatewayAdapter,\n  type GatewayPaymentStatus,\n  type PaymentGatewayPresentationRequest,\n  type UnifiedPaymentStatus,\n} from '@open-mercato/shared/modules/payment_gateways/types'\nimport type { CredentialsService } from '../../integrations/lib/credentials-service'\nimport type { IntegrationStateService } from '../../integrations/lib/state-service'\nimport type { IntegrationLogService } from '../../integrations/lib/log-service'\nimport { conflict } from '@open-mercato/shared/lib/crud/errors'\nimport { GatewayPaymentOperation, GatewaySessionInitialization, GatewayTransaction } from '../data/entities'\nimport { canApplyManualAction, isValidTransition, type ManualGatewayAction } from './status-machine'\nimport { emitPaymentGatewayEvent } from '../events'\nimport { readGatewayMetadata, readWebhookLog } from './transaction-fields'\nimport {\n  alignCapturedAmountWithStatus,\n  assertCaptureWithinRemaining,\n  formatAmountUnits,\n  parseAmountUnits,\n  releaseCaptureAmount,\n  reserveCaptureAmount,\n  settleCapturedAmount,\n} from './capture-ledger'\nimport {\n  completePaymentOperation,\n  failPaymentOperation,\n  preparePaymentOperation,\n} from './payment-operation-idempotency'\nimport {\n  buildPaymentSessionOperationKey,\n  claimPaymentSessionInitialization,\n  findPaymentSessionInitialization,\n  reclaimPaymentSessionInitialization,\n  refreshPaymentSessionInitialization,\n  releasePaymentSessionInitialization,\n} from './session-idempotency'\n\nconst PAYMENT_SESSION_CLAIM_STALE_MS = 30_000\nconst PAYMENT_SESSION_WAIT_INTERVAL_MS = 25\n\nfunction assertManualActionAllowed(action: ManualGatewayAction, transaction: GatewayTransaction): void {\n  const current = transaction.unifiedStatus as UnifiedPaymentStatus\n  if (!canApplyManualAction(action, current)) {\n    throw conflict(`Cannot ${action} a payment in status \"${current}\"`)\n  }\n}\n\nfunction applyAdapterResultStatus(\n  action: ManualGatewayAction,\n  transaction: GatewayTransaction,\n  resultStatus: UnifiedPaymentStatus,\n): boolean {\n  const current = transaction.unifiedStatus as UnifiedPaymentStatus\n  if (resultStatus === current) return false\n  if (isValidTransition(resultStatus, current)) return false\n  if (!isValidTransition(current, resultStatus)) {\n    throw conflict(\n      `Gateway returned status \"${resultStatus}\" which is not a valid transition from \"${current}\" for ${action}`,\n    )\n  }\n  transaction.unifiedStatus = resultStatus\n  return true\n}\n\nexport interface PaymentGatewayServiceDeps {\n  em: EntityManager\n  integrationCredentialsService: CredentialsService\n  integrationStateService?: IntegrationStateService\n  integrationLogService?: IntegrationLogService\n  sessionClaimOptions?: {\n    staleAfterMs?: number\n    heartbeatIntervalMs?: number\n    pollIntervalMs?: number\n  }\n}\n\nexport interface CreatePaymentSessionInput {\n  providerKey: string\n  paymentId: string\n  idempotencyKey?: string\n  orderId?: string\n  amount: number\n  currencyCode: string\n  captureMethod?: 'automatic' | 'manual'\n  paymentTypes?: string[]\n  description?: string\n  successUrl?: string\n  cancelUrl?: string\n  metadata?: Record<string, unknown>\n  presentation?: PaymentGatewayPresentationRequest\n  organizationId: string\n  tenantId: string\n}\n\nexport function createPaymentGatewayService(deps: PaymentGatewayServiceDeps) {\n  const { em, integrationCredentialsService, integrationLogService } = deps\n  const claimStaleAfterMs = Math.max(1, deps.sessionClaimOptions?.staleAfterMs ?? PAYMENT_SESSION_CLAIM_STALE_MS)\n  const claimHeartbeatIntervalMs = Math.max(\n    1,\n    deps.sessionClaimOptions?.heartbeatIntervalMs ?? Math.floor(claimStaleAfterMs / 3),\n  )\n  const claimPollIntervalMs = Math.max(1, deps.sessionClaimOptions?.pollIntervalMs ?? PAYMENT_SESSION_WAIT_INTERVAL_MS)\n\n  async function findTransactionOrThrow(\n    transactionId: string,\n    scope: { organizationId: string; tenantId: string },\n    targetEm: EntityManager = em,\n  ): Promise<GatewayTransaction> {\n    const transaction = await findOneWithDecryption(\n      targetEm,\n      GatewayTransaction,\n      {\n        id: transactionId,\n        organizationId: scope.organizationId,\n        tenantId: scope.tenantId,\n        deletedAt: null,\n      },\n      undefined,\n      scope,\n    )\n    if (!transaction) {\n      throw new Error('Transaction not found')\n    }\n    return transaction\n  }\n\n  function readProviderSessionId(transaction: GatewayTransaction): string {\n    if (typeof transaction.providerSessionId === 'string' && transaction.providerSessionId.trim().length > 0) {\n      return transaction.providerSessionId\n    }\n    throw new Error('Transaction is missing provider session id')\n  }\n\n  async function emitStatusEvent(status: UnifiedPaymentStatus, payload: Record<string, unknown>) {\n    type PaymentGatewayEventId = Parameters<typeof emitPaymentGatewayEvent>[0]\n    const eventMap: Partial<Record<UnifiedPaymentStatus, PaymentGatewayEventId>> = {\n      authorized: 'payment_gateways.payment.authorized',\n      captured: 'payment_gateways.payment.captured',\n      failed: 'payment_gateways.payment.failed',\n      refunded: 'payment_gateways.payment.refunded',\n      cancelled: 'payment_gateways.payment.cancelled',\n    }\n    const eventId = eventMap[status]\n    if (!eventId) return\n    await emitPaymentGatewayEvent(eventId, payload)\n  }\n\n  async function writeTransactionLog(\n    providerKey: string,\n    scope: { organizationId: string; tenantId: string },\n    transactionId: string,\n    level: 'info' | 'warn' | 'error',\n    message: string,\n    payload?: Record<string, unknown> | null,\n    code?: string | null,\n  ) {\n    if (!integrationLogService) return\n    await integrationLogService.write({\n      integrationId: `gateway_${providerKey}`,\n      scopeEntityType: 'payment_transaction',\n      scopeEntityId: transactionId,\n      level,\n      message,\n      code,\n      payload: payload ?? null,\n    }, scope)\n  }\n\n  async function resolveAdapterAndCredentials(providerKey: string, scope: { organizationId: string; tenantId: string }) {\n    const integrationId = `gateway_${providerKey}`\n    const selectedVersion = deps.integrationStateService\n      ? await deps.integrationStateService.resolveApiVersion(integrationId, scope)\n      : undefined\n    const adapter = getGatewayAdapter(providerKey, selectedVersion)\n    if (!adapter) {\n      throw new Error(\n        selectedVersion\n          ? `No gateway adapter registered for provider: ${providerKey} (version: ${selectedVersion})`\n          : `No gateway adapter registered for provider: ${providerKey}`,\n      )\n    }\n    const credentials = await integrationCredentialsService.resolve(integrationId, scope) ?? {}\n\n    return { adapter, credentials }\n  }\n\n  type ManualOperationResult = CaptureResult | RefundResult | CancelResult\n\n  async function executeManualOperation<TResult extends ManualOperationResult>(input: {\n    action: ManualGatewayAction\n    transactionId: string\n    operationId?: string\n    payload: Record<string, unknown>\n    scope: { organizationId: string; tenantId: string }\n    assertInitialAllowed?: (transaction: GatewayTransaction) => void\n    beforeInvoke?: (context: { transaction: GatewayTransaction; operation: GatewayPaymentOperation }) => Promise<void>\n    releaseOnFailure?: (context: {\n      transaction: GatewayTransaction\n      operation: GatewayPaymentOperation\n      providerInvoked: boolean\n    }) => Promise<void>\n    invoke: (context: {\n      adapter: GatewayAdapter\n      credentials: Record<string, unknown>\n      transaction: GatewayTransaction\n      idempotencyKey: string\n    }) => Promise<TResult>\n    applyResult: (transaction: GatewayTransaction, result: TResult) => void\n    afterCommit: (transaction: GatewayTransaction, result: TResult) => Promise<void>\n  }): Promise<TResult> {\n    const transaction = await findTransactionOrThrow(input.transactionId, input.scope)\n    const prepared = await preparePaymentOperation({\n      em,\n      transactionId: transaction.id,\n      providerKey: transaction.providerKey,\n      action: input.action,\n      operationId: input.operationId,\n      payload: input.payload,\n      scope: input.scope,\n      assertInitialAllowed: () => {\n        assertManualActionAllowed(input.action, transaction)\n        input.assertInitialAllowed?.(transaction)\n      },\n    })\n    if (prepared.kind === 'completed') {\n      if (prepared.result.status !== transaction.unifiedStatus) {\n        throw conflict(\n          `Cannot replay ${input.action} because the payment status has changed since the operation completed`,\n        )\n      }\n      return prepared.result as unknown as TResult\n    }\n\n    const operation = prepared.claim.record\n    // Everything after this flips to true is post-settlement: the provider moved the money and the\n    // completion transaction committed it. A later event or logging failure must not undo either,\n    // so the failure path below only runs while the operation can still be rolled back.\n    let settled = false\n    // Flips once the provider call returned, so the failure path can tell \"the provider never\n    // moved the money\" from \"the provider moved it and only our bookkeeping failed\" \u2014 the two\n    // cases need opposite rollback decisions.\n    let providerInvoked = false\n    try {\n      await input.beforeInvoke?.({ transaction, operation })\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n      const result = await input.invoke({\n        adapter,\n        credentials,\n        transaction,\n        idempotencyKey: prepared.claim.providerIdempotencyKey,\n      })\n      providerInvoked = true\n      const statusChanged = await completePaymentOperation(\n        em,\n        prepared.claim,\n        result as unknown as Record<string, unknown>,\n        async (tx) => {\n          const current = await findTransactionOrThrow(input.transactionId, input.scope, tx)\n          const changed = applyAdapterResultStatus(input.action, current, result.status)\n          input.applyResult(current, result)\n          return changed\n        },\n      )\n      settled = true\n      if (statusChanged) {\n        await emitStatusEvent(result.status, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n      }\n      await input.afterCommit(transaction, result)\n      return result\n    } catch (error: unknown) {\n      if (!settled) {\n        if (input.releaseOnFailure) {\n          await input.releaseOnFailure({ transaction, operation, providerInvoked }).catch(() => undefined)\n        }\n        await Promise.allSettled([failPaymentOperation(em, prepared.claim)])\n      }\n      throw error\n    }\n  }\n\n  function createGatewayTransaction(\n    manager: EntityManager,\n    input: CreatePaymentSessionInput,\n    session: CreateSessionResult,\n    id?: string,\n  ): GatewayTransaction {\n    const data = {\n      paymentId: input.paymentId,\n      providerKey: input.providerKey,\n      providerSessionId: session.sessionId,\n      unifiedStatus: session.status,\n      redirectUrl: session.redirectUrl\n        ?? (session.clientSession?.type === 'redirect' ? session.clientSession.redirectUrl : null),\n      clientSecret: session.clientSecret ?? null,\n      amount: String(input.amount),\n      // An automatic-capture session comes back already captured, so the ledger has to start\n      // at the full amount \u2014 otherwise a later manual capture would look like the first one.\n      capturedAmount: session.status === 'captured' ? String(input.amount) : '0',\n      currencyCode: input.currencyCode,\n      gatewayMetadata: {\n        ...(session.providerData ?? {}),\n        ...(session.clientSession ? { clientSession: session.clientSession } : {}),\n      },\n      organizationId: input.organizationId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    }\n    return id\n      ? manager.create(GatewayTransaction, { id, ...data })\n      : manager.create(GatewayTransaction, data)\n  }\n\n  function restoreSession(transaction: GatewayTransaction): CreateSessionResult {\n    const metadata = readGatewayMetadata(transaction.gatewayMetadata)\n    const { clientSession, ...providerData } = metadata\n    return {\n      sessionId: readProviderSessionId(transaction),\n      status: transaction.unifiedStatus as UnifiedPaymentStatus,\n      ...(transaction.clientSecret ? { clientSecret: transaction.clientSecret } : {}),\n      ...(transaction.redirectUrl ? { redirectUrl: transaction.redirectUrl } : {}),\n      ...(Object.keys(providerData).length > 0 ? { providerData } : {}),\n      ...(clientSession && typeof clientSession === 'object'\n        ? { clientSession: clientSession as CreateSessionResult['clientSession'] }\n        : {}),\n    }\n  }\n\n  async function recordCreatedSession(\n    transaction: GatewayTransaction,\n    input: CreatePaymentSessionInput,\n    scope: { organizationId: string; tenantId: string },\n  ): Promise<void> {\n    await emitPaymentGatewayEvent('payment_gateways.session.created', {\n      transactionId: transaction.id,\n      paymentId: transaction.paymentId,\n      providerKey: transaction.providerKey,\n      status: transaction.unifiedStatus,\n      organizationId: transaction.organizationId,\n      tenantId: transaction.tenantId,\n    })\n    await writeTransactionLog(\n      transaction.providerKey,\n      scope,\n      transaction.id,\n      'info',\n      'Payment session created',\n      {\n        paymentId: transaction.paymentId,\n        providerSessionId: transaction.providerSessionId,\n        status: transaction.unifiedStatus,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n      },\n    )\n  }\n\n  function startClaimHeartbeat(\n    ownership: { id: string; claimToken: string },\n    scope: { organizationId: string; tenantId: string },\n  ): () => Promise<void> {\n    let stopped = false\n    let timer: ReturnType<typeof setTimeout> | null = null\n    let pendingRefresh = Promise.resolve()\n\n    const schedule = () => {\n      timer = setTimeout(() => {\n        pendingRefresh = refreshPaymentSessionInitialization(em, ownership, scope, new Date())\n          .then(\n            (refreshed) => {\n              if (refreshed && !stopped) schedule()\n            },\n            () => {\n              if (!stopped) schedule()\n            },\n          )\n      }, claimHeartbeatIntervalMs)\n    }\n    schedule()\n\n    return async () => {\n      stopped = true\n      if (timer) clearTimeout(timer)\n      await pendingRefresh\n    }\n  }\n\n  return {\n    async createPaymentSession(input: CreatePaymentSessionInput): Promise<{ transaction: GatewayTransaction; session: CreateSessionResult }> {\n      const scope = { organizationId: input.organizationId, tenantId: input.tenantId }\n      const { adapter, credentials } = await resolveAdapterAndCredentials(input.providerKey, scope)\n\n      const sessionInput: CreateSessionInput = {\n        paymentId: input.paymentId,\n        orderId: input.orderId,\n        idempotencyKey: input.idempotencyKey,\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        amount: input.amount,\n        currencyCode: input.currencyCode,\n        captureMethod: input.captureMethod,\n        paymentTypes: input.paymentTypes,\n        description: input.description,\n        successUrl: input.successUrl,\n        cancelUrl: input.cancelUrl,\n        metadata: input.metadata,\n        presentation: input.presentation,\n        credentials,\n      }\n\n      if (!input.idempotencyKey) {\n        const session = await adapter.createSession(sessionInput)\n        const transaction = createGatewayTransaction(em, input, session)\n        await em.persist(transaction).flush()\n        await recordCreatedSession(transaction, input, scope)\n        return { transaction, session }\n      }\n\n      const operationKey = buildPaymentSessionOperationKey({\n        idempotencyKey: input.idempotencyKey,\n        paymentId: input.paymentId,\n        providerKey: input.providerKey,\n        scope,\n      })\n      while (true) {\n        const existing = await findPaymentSessionInitialization(em, operationKey, input.providerKey, scope)\n        if (existing?.gatewayTransactionId) {\n          const transaction = await findOneWithDecryption(\n            em.fork(),\n            GatewayTransaction,\n            {\n              id: existing.gatewayTransactionId,\n              organizationId: scope.organizationId,\n              tenantId: scope.tenantId,\n              deletedAt: null,\n            },\n            undefined,\n            scope,\n          )\n          if (!transaction) {\n            throw new Error('Completed payment session is missing its gateway transaction')\n          }\n          return { transaction, session: restoreSession(transaction) }\n        }\n\n        const claimedAt = new Date()\n        const staleBefore = new Date(claimedAt.getTime() - claimStaleAfterMs)\n        const ownership = existing\n          ? await reclaimPaymentSessionInitialization(em, existing, scope, claimedAt, staleBefore)\n          : await claimPaymentSessionInitialization(em, operationKey, input.providerKey, scope, claimedAt)\n\n        if (!ownership) {\n          await new Promise((resolve) => setTimeout(resolve, claimPollIntervalMs))\n          continue\n        }\n\n        let session: CreateSessionResult\n        const stopHeartbeat = startClaimHeartbeat(ownership, scope)\n        try {\n          session = await adapter.createSession({ ...sessionInput, idempotencyKey: operationKey })\n        } catch (error) {\n          await releasePaymentSessionInitialization(em, ownership, scope).catch(() => undefined)\n          throw error\n        } finally {\n          await stopHeartbeat()\n        }\n\n        const transactionId = randomUUID()\n        const transaction = await em.fork().transactional(async (transactionEm) => {\n          const finalizedRows = await transactionEm.nativeUpdate(\n            GatewaySessionInitialization,\n            {\n              id: ownership.id,\n              claimToken: ownership.claimToken,\n              gatewayTransactionId: null,\n              organizationId: scope.organizationId,\n              tenantId: scope.tenantId,\n            },\n            {\n              gatewayTransactionId: transactionId,\n              claimToken: null,\n              claimedAt: null,\n              updatedAt: new Date(),\n            },\n          )\n          if (finalizedRows === 0) return null\n          const created = createGatewayTransaction(transactionEm, input, session, transactionId)\n          await transactionEm.persist(created).flush()\n          return created\n        })\n\n        if (!transaction) {\n          continue\n        }\n        await recordCreatedSession(transaction, input, scope)\n        return { transaction, session }\n      }\n    },\n\n    async capturePayment(\n      transactionId: string,\n      amount: number | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<CaptureResult> {\n      let reservedUnits: bigint | null = null\n      let providerAmount = amount\n      return executeManualOperation({\n        action: 'capture',\n        transactionId,\n        operationId,\n        payload: { amount: amount ?? null },\n        scope,\n        assertInitialAllowed: (transaction) => { assertCaptureWithinRemaining(transaction, amount) },\n        beforeInvoke: async ({ transaction, operation }) => {\n          const alreadyCapturedUnits = parseAmountUnits(transaction.capturedAmount)\n          reservedUnits = await reserveCaptureAmount(em, { transaction, operation, amount, scope })\n          // \"Capture the rest\" has to name the remaining amount once part of the authorization is\n          // already captured, otherwise the provider would capture the full amount a second time.\n          if (amount === undefined && alreadyCapturedUnits > 0n) {\n            providerAmount = Number(formatAmountUnits(reservedUnits))\n          }\n        },\n        // The slice goes back only while the provider has not been called yet. Once the capture\n        // call returned, the money may already have moved and only the completion transaction\n        // failed, so releasing would reopen the authorization for a fresh operation id and allow an\n        // over-capture. Holding the reservation is the conservative outcome: a retry of this same\n        // operation id reuses both the reservation and the provider idempotency key, so the provider\n        // itself collapses the duplicate.\n        releaseOnFailure: async ({ transaction, operation, providerInvoked }) => {\n          if (reservedUnits === null) return\n          if (providerInvoked) {\n            await writeTransactionLog(\n              transaction.providerKey,\n              { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n              transaction.id,\n              'warn',\n              'Capture reservation stays outstanding because the provider call already returned',\n              { operationId: operation.operationId, reservedAmount: formatAmountUnits(reservedUnits) },\n            )\n            return\n          }\n          const released = await releaseCaptureAmount(em, { transactionId, operation, reservedUnits, scope })\n          if (released) return\n          await writeTransactionLog(\n            transaction.providerKey,\n            { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n            transaction.id,\n            'warn',\n            'Capture reservation stays outstanding after a failed capture',\n            { operationId: operation.operationId, reservedAmount: formatAmountUnits(reservedUnits) },\n          )\n        },\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.capture({\n          sessionId: readProviderSessionId(transaction),\n          amount: providerAmount,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: (transaction, result) => {\n          transaction.gatewayMetadata = {\n            ...readGatewayMetadata(transaction.gatewayMetadata),\n            captureResult: result.providerData,\n          }\n          if (reservedUnits !== null) settleCapturedAmount(transaction, reservedUnits, result.capturedAmount)\n        },\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment captured',\n          { amount: amount ?? null, status: result.status, capturedAmount: result.capturedAmount },\n        ),\n      })\n    },\n\n    async refundPayment(\n      transactionId: string,\n      amount: number | undefined,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<RefundResult> {\n      return executeManualOperation({\n        action: 'refund',\n        transactionId,\n        operationId,\n        payload: { amount: amount ?? null, reason: reason ?? null },\n        scope,\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.refund({\n          sessionId: readProviderSessionId(transaction),\n          amount,\n          reason,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: (transaction, result) => {\n          transaction.gatewayRefundId = result.refundId\n          transaction.gatewayMetadata = {\n            ...readGatewayMetadata(transaction.gatewayMetadata),\n            refundResult: result.providerData,\n          }\n        },\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment refunded',\n          { amount: amount ?? null, reason: reason ?? null, status: result.status, refundId: result.refundId },\n        ),\n      })\n    },\n\n    async cancelPayment(\n      transactionId: string,\n      reason: string | undefined,\n      scope: { organizationId: string; tenantId: string },\n      operationId?: string,\n    ): Promise<CancelResult> {\n      return executeManualOperation({\n        action: 'cancel',\n        transactionId,\n        operationId,\n        payload: { reason: reason ?? null },\n        scope,\n        invoke: ({ adapter, credentials, transaction, idempotencyKey }) => adapter.cancel({\n          sessionId: readProviderSessionId(transaction),\n          reason,\n          credentials,\n          idempotencyKey,\n        }),\n        applyResult: () => {},\n        afterCommit: (transaction, result) => writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment cancelled',\n          { reason: reason ?? null, status: result.status },\n        ),\n      })\n    },\n\n    async getPaymentStatus(transactionId: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayPaymentStatus> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const { adapter, credentials } = await resolveAdapterAndCredentials(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n      )\n\n      const status = await adapter.getStatus({\n        sessionId: readProviderSessionId(transaction),\n        credentials,\n      })\n\n      if (status.status !== transaction.unifiedStatus && isValidTransition(transaction.unifiedStatus as UnifiedPaymentStatus, status.status)) {\n        const previousStatus = transaction.unifiedStatus\n        transaction.unifiedStatus = status.status\n        alignCapturedAmountWithStatus(transaction, status.status)\n        transaction.gatewayStatus = status.status\n        transaction.gatewayMetadata = { ...readGatewayMetadata(transaction.gatewayMetadata), statusResult: status.providerData ?? null }\n        transaction.lastPolledAt = new Date()\n        await em.flush()\n        await emitStatusEvent(status.status, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          previousStatus,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n        await writeTransactionLog(\n          transaction.providerKey,\n          { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n          transaction.id,\n          'info',\n          'Payment status updated by poller',\n          {\n            previousStatus,\n            nextStatus: status.status,\n          },\n        )\n      }\n\n      return status\n    },\n\n    async syncTransactionStatus(transactionId: string, update: {\n      unifiedStatus: UnifiedPaymentStatus\n      providerStatus?: string\n      providerData?: Record<string, unknown>\n      webhookEvent?: {\n        eventType: string\n        idempotencyKey: string\n        processed: boolean\n        receivedAt?: string\n      }\n    }, scope: { organizationId: string; tenantId: string }): Promise<void> {\n      const transaction = await findTransactionOrThrow(transactionId, scope)\n      const currentStatus = transaction.unifiedStatus as UnifiedPaymentStatus\n      const canTransition = isValidTransition(currentStatus, update.unifiedStatus)\n      const shouldApplyStatus = canTransition && update.unifiedStatus !== currentStatus\n      const previousStatus = transaction.unifiedStatus\n      if (shouldApplyStatus) {\n        transaction.unifiedStatus = update.unifiedStatus\n        alignCapturedAmountWithStatus(transaction, update.unifiedStatus)\n      }\n      if (update.providerStatus) {\n        transaction.gatewayStatus = update.providerStatus\n      }\n      if (update.providerData) {\n        transaction.gatewayMetadata = { ...readGatewayMetadata(transaction.gatewayMetadata), ...update.providerData }\n      }\n      if (update.webhookEvent) {\n        const webhookLog = readWebhookLog(transaction.webhookLog)\n        webhookLog.push({\n          eventType: update.webhookEvent.eventType,\n          receivedAt: update.webhookEvent.receivedAt ?? new Date().toISOString(),\n          idempotencyKey: update.webhookEvent.idempotencyKey,\n          unifiedStatus: update.unifiedStatus,\n          processed: update.webhookEvent.processed,\n        })\n        transaction.webhookLog = webhookLog\n      }\n      transaction.lastWebhookAt = new Date()\n      await em.flush()\n      if (shouldApplyStatus) {\n        await emitStatusEvent(update.unifiedStatus, {\n          transactionId: transaction.id,\n          paymentId: transaction.paymentId,\n          providerKey: transaction.providerKey,\n          previousStatus,\n          organizationId: transaction.organizationId,\n          tenantId: transaction.tenantId,\n        })\n      }\n      await writeTransactionLog(\n        transaction.providerKey,\n        { organizationId: transaction.organizationId, tenantId: transaction.tenantId },\n        transaction.id,\n        shouldApplyStatus ? 'info' : 'warn',\n        shouldApplyStatus ? 'Payment status synchronized from webhook' : 'Webhook received with no status transition',\n        {\n          previousStatus,\n          nextStatus: update.unifiedStatus,\n          providerStatus: update.providerStatus ?? null,\n          eventType: update.webhookEvent?.eventType ?? null,\n          idempotencyKey: update.webhookEvent?.idempotencyKey ?? null,\n        },\n      )\n    },\n\n    async findTransaction(id: string, scope: { organizationId: string; tenantId: string }): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          id,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async findTransactionBySessionId(\n      providerSessionId: string,\n      scope: { organizationId: string; tenantId: string },\n      providerKey?: string,\n    ): Promise<GatewayTransaction | null> {\n      return findOneWithDecryption(\n        em,\n        GatewayTransaction,\n        {\n          providerSessionId,\n          organizationId: scope.organizationId,\n          tenantId: scope.tenantId,\n          deletedAt: null,\n          ...(providerKey ? { providerKey } : {}),\n        },\n        undefined,\n        scope,\n      )\n    },\n\n    async listTransactionsForStatusPolling(scope?: {\n      organizationId?: string\n      tenantId?: string\n      providerKey?: string\n      limit?: number\n    }): Promise<GatewayTransaction[]> {\n      const where: Record<string, unknown> = {\n        unifiedStatus: { $in: ['pending', 'authorized', 'partially_captured'] },\n        deletedAt: null,\n      }\n      if (scope?.organizationId) where.organizationId = scope.organizationId\n      if (scope?.tenantId) where.tenantId = scope.tenantId\n      if (scope?.providerKey) where.providerKey = scope.providerKey\n\n      return findWithDecryption(\n        em,\n        GatewayTransaction,\n        where,\n        {\n          orderBy: { updatedAt: 'asc' },\n          limit: scope?.limit ?? 100,\n        },\n        scope,\n      )\n    },\n  }\n}\n\nexport type PaymentGatewayService = ReturnType<typeof createPaymentGatewayService>\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAE3B,SAAS,uBAAuB,0BAA0B;AAC1D;AAAA,EACE;AAAA,OAUK;AAIP,SAAS,gBAAgB;AACzB,SAAkC,8BAA8B,0BAA0B;AAC1F,SAAS,sBAAsB,yBAAmD;AAClF,SAAS,+BAA+B;AACxC,SAAS,qBAAqB,sBAAsB;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,iCAAiC;AACvC,MAAM,mCAAmC;AAEzC,SAAS,0BAA0B,QAA6B,aAAuC;AACrG,QAAM,UAAU,YAAY;AAC5B,MAAI,CAAC,qBAAqB,QAAQ,OAAO,GAAG;AAC1C,UAAM,SAAS,UAAU,MAAM,yBAAyB,OAAO,GAAG;AAAA,EACpE;AACF;AAEA,SAAS,yBACP,QACA,aACA,cACS;AACT,QAAM,UAAU,YAAY;AAC5B,MAAI,iBAAiB,QAAS,QAAO;AACrC,MAAI,kBAAkB,cAAc,OAAO,EAAG,QAAO;AACrD,MAAI,CAAC,kBAAkB,SAAS,YAAY,GAAG;AAC7C,UAAM;AAAA,MACJ,4BAA4B,YAAY,2CAA2C,OAAO,SAAS,MAAM;AAAA,IAC3G;AAAA,EACF;AACA,cAAY,gBAAgB;AAC5B,SAAO;AACT;AAgCO,SAAS,4BAA4B,MAAiC;AAC3E,QAAM,EAAE,IAAI,+BAA+B,sBAAsB,IAAI;AACrE,QAAM,oBAAoB,KAAK,IAAI,GAAG,KAAK,qBAAqB,gBAAgB,8BAA8B;AAC9G,QAAM,2BAA2B,KAAK;AAAA,IACpC;AAAA,IACA,KAAK,qBAAqB,uBAAuB,KAAK,MAAM,oBAAoB,CAAC;AAAA,EACnF;AACA,QAAM,sBAAsB,KAAK,IAAI,GAAG,KAAK,qBAAqB,kBAAkB,gCAAgC;AAEpH,iBAAe,uBACb,eACA,OACA,WAA0B,IACG;AAC7B,UAAM,cAAc,MAAM;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AACA,WAAO;AAAA,EACT;AAEA,WAAS,sBAAsB,aAAyC;AACtE,QAAI,OAAO,YAAY,sBAAsB,YAAY,YAAY,kBAAkB,KAAK,EAAE,SAAS,GAAG;AACxG,aAAO,YAAY;AAAA,IACrB;AACA,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,iBAAe,gBAAgB,QAA8B,SAAkC;AAE7F,UAAM,WAAyE;AAAA,MAC7E,YAAY;AAAA,MACZ,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AACA,UAAM,UAAU,SAAS,MAAM;AAC/B,QAAI,CAAC,QAAS;AACd,UAAM,wBAAwB,SAAS,OAAO;AAAA,EAChD;AAEA,iBAAe,oBACb,aACA,OACA,eACA,OACA,SACA,SACA,MACA;AACA,QAAI,CAAC,sBAAuB;AAC5B,UAAM,sBAAsB,MAAM;AAAA,MAChC,eAAe,WAAW,WAAW;AAAA,MACrC,iBAAiB;AAAA,MACjB,eAAe;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS,WAAW;AAAA,IACtB,GAAG,KAAK;AAAA,EACV;AAEA,iBAAe,6BAA6B,aAAqB,OAAqD;AACpH,UAAM,gBAAgB,WAAW,WAAW;AAC5C,UAAM,kBAAkB,KAAK,0BACzB,MAAM,KAAK,wBAAwB,kBAAkB,eAAe,KAAK,IACzE;AACJ,UAAM,UAAU,kBAAkB,aAAa,eAAe;AAC9D,QAAI,CAAC,SAAS;AACZ,YAAM,IAAI;AAAA,QACR,kBACI,+CAA+C,WAAW,cAAc,eAAe,MACvF,+CAA+C,WAAW;AAAA,MAChE;AAAA,IACF;AACA,UAAM,cAAc,MAAM,8BAA8B,QAAQ,eAAe,KAAK,KAAK,CAAC;AAE1F,WAAO,EAAE,SAAS,YAAY;AAAA,EAChC;AAIA,iBAAe,uBAA8D,OAqBxD;AACnB,UAAM,cAAc,MAAM,uBAAuB,MAAM,eAAe,MAAM,KAAK;AACjF,UAAM,WAAW,MAAM,wBAAwB;AAAA,MAC7C;AAAA,MACA,eAAe,YAAY;AAAA,MAC3B,aAAa,YAAY;AAAA,MACzB,QAAQ,MAAM;AAAA,MACd,aAAa,MAAM;AAAA,MACnB,SAAS,MAAM;AAAA,MACf,OAAO,MAAM;AAAA,MACb,sBAAsB,MAAM;AAC1B,kCAA0B,MAAM,QAAQ,WAAW;AACnD,cAAM,uBAAuB,WAAW;AAAA,MAC1C;AAAA,IACF,CAAC;AACD,QAAI,SAAS,SAAS,aAAa;AACjC,UAAI,SAAS,OAAO,WAAW,YAAY,eAAe;AACxD,cAAM;AAAA,UACJ,iBAAiB,MAAM,MAAM;AAAA,QAC/B;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB;AAEA,UAAM,YAAY,SAAS,MAAM;AAIjC,QAAI,UAAU;AAId,QAAI,kBAAkB;AACtB,QAAI;AACF,YAAM,MAAM,eAAe,EAAE,aAAa,UAAU,CAAC;AACrD,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AACA,YAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QAChC;AAAA,QACA;AAAA,QACA;AAAA,QACA,gBAAgB,SAAS,MAAM;AAAA,MACjC,CAAC;AACD,wBAAkB;AAClB,YAAM,gBAAgB,MAAM;AAAA,QAC1B;AAAA,QACA,SAAS;AAAA,QACT;AAAA,QACA,OAAO,OAAO;AACZ,gBAAM,UAAU,MAAM,uBAAuB,MAAM,eAAe,MAAM,OAAO,EAAE;AACjF,gBAAM,UAAU,yBAAyB,MAAM,QAAQ,SAAS,OAAO,MAAM;AAC7E,gBAAM,YAAY,SAAS,MAAM;AACjC,iBAAO;AAAA,QACT;AAAA,MACF;AACA,gBAAU;AACV,UAAI,eAAe;AACjB,cAAM,gBAAgB,OAAO,QAAQ;AAAA,UACnC,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AACA,YAAM,MAAM,YAAY,aAAa,MAAM;AAC3C,aAAO;AAAA,IACT,SAAS,OAAgB;AACvB,UAAI,CAAC,SAAS;AACZ,YAAI,MAAM,kBAAkB;AAC1B,gBAAM,MAAM,iBAAiB,EAAE,aAAa,WAAW,gBAAgB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,QACjG;AACA,cAAM,QAAQ,WAAW,CAAC,qBAAqB,IAAI,SAAS,KAAK,CAAC,CAAC;AAAA,MACrE;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAEA,WAAS,yBACP,SACA,OACA,SACA,IACoB;AACpB,UAAM,OAAO;AAAA,MACX,WAAW,MAAM;AAAA,MACjB,aAAa,MAAM;AAAA,MACnB,mBAAmB,QAAQ;AAAA,MAC3B,eAAe,QAAQ;AAAA,MACvB,aAAa,QAAQ,gBACf,QAAQ,eAAe,SAAS,aAAa,QAAQ,cAAc,cAAc;AAAA,MACvF,cAAc,QAAQ,gBAAgB;AAAA,MACtC,QAAQ,OAAO,MAAM,MAAM;AAAA;AAAA;AAAA,MAG3B,gBAAgB,QAAQ,WAAW,aAAa,OAAO,MAAM,MAAM,IAAI;AAAA,MACvE,cAAc,MAAM;AAAA,MACpB,iBAAiB;AAAA,QACf,GAAI,QAAQ,gBAAgB,CAAC;AAAA,QAC7B,GAAI,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,cAAc,IAAI,CAAC;AAAA,MAC1E;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AACA,WAAO,KACH,QAAQ,OAAO,oBAAoB,EAAE,IAAI,GAAG,KAAK,CAAC,IAClD,QAAQ,OAAO,oBAAoB,IAAI;AAAA,EAC7C;AAEA,WAAS,eAAe,aAAsD;AAC5E,UAAM,WAAW,oBAAoB,YAAY,eAAe;AAChE,UAAM,EAAE,eAAe,GAAG,aAAa,IAAI;AAC3C,WAAO;AAAA,MACL,WAAW,sBAAsB,WAAW;AAAA,MAC5C,QAAQ,YAAY;AAAA,MACpB,GAAI,YAAY,eAAe,EAAE,cAAc,YAAY,aAAa,IAAI,CAAC;AAAA,MAC7E,GAAI,YAAY,cAAc,EAAE,aAAa,YAAY,YAAY,IAAI,CAAC;AAAA,MAC1E,GAAI,OAAO,KAAK,YAAY,EAAE,SAAS,IAAI,EAAE,aAAa,IAAI,CAAC;AAAA,MAC/D,GAAI,iBAAiB,OAAO,kBAAkB,WAC1C,EAAE,cAAqE,IACvE,CAAC;AAAA,IACP;AAAA,EACF;AAEA,iBAAe,qBACb,aACA,OACA,OACe;AACf,UAAM,wBAAwB,oCAAoC;AAAA,MAChE,eAAe,YAAY;AAAA,MAC3B,WAAW,YAAY;AAAA,MACvB,aAAa,YAAY;AAAA,MACzB,QAAQ,YAAY;AAAA,MACpB,gBAAgB,YAAY;AAAA,MAC5B,UAAU,YAAY;AAAA,IACxB,CAAC;AACD,UAAM;AAAA,MACJ,YAAY;AAAA,MACZ;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,QACE,WAAW,YAAY;AAAA,QACvB,mBAAmB,YAAY;AAAA,QAC/B,QAAQ,YAAY;AAAA,QACpB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAEA,WAAS,oBACP,WACA,OACqB;AACrB,QAAI,UAAU;AACd,QAAI,QAA8C;AAClD,QAAI,iBAAiB,QAAQ,QAAQ;AAErC,UAAM,WAAW,MAAM;AACrB,cAAQ,WAAW,MAAM;AACvB,yBAAiB,oCAAoC,IAAI,WAAW,OAAO,oBAAI,KAAK,CAAC,EAClF;AAAA,UACC,CAAC,cAAc;AACb,gBAAI,aAAa,CAAC,QAAS,UAAS;AAAA,UACtC;AAAA,UACA,MAAM;AACJ,gBAAI,CAAC,QAAS,UAAS;AAAA,UACzB;AAAA,QACF;AAAA,MACJ,GAAG,wBAAwB;AAAA,IAC7B;AACA,aAAS;AAET,WAAO,YAAY;AACjB,gBAAU;AACV,UAAI,MAAO,cAAa,KAAK;AAC7B,YAAM;AAAA,IACR;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM,qBAAqB,OAA8G;AACvI,YAAM,QAAQ,EAAE,gBAAgB,MAAM,gBAAgB,UAAU,MAAM,SAAS;AAC/E,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM,6BAA6B,MAAM,aAAa,KAAK;AAE5F,YAAM,eAAmC;AAAA,QACvC,WAAW,MAAM;AAAA,QACjB,SAAS,MAAM;AAAA,QACf,gBAAgB,MAAM;AAAA,QACtB,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,QACd,cAAc,MAAM;AAAA,QACpB,eAAe,MAAM;AAAA,QACrB,cAAc,MAAM;AAAA,QACpB,aAAa,MAAM;AAAA,QACnB,YAAY,MAAM;AAAA,QAClB,WAAW,MAAM;AAAA,QACjB,UAAU,MAAM;AAAA,QAChB,cAAc,MAAM;AAAA,QACpB;AAAA,MACF;AAEA,UAAI,CAAC,MAAM,gBAAgB;AACzB,cAAM,UAAU,MAAM,QAAQ,cAAc,YAAY;AACxD,cAAM,cAAc,yBAAyB,IAAI,OAAO,OAAO;AAC/D,cAAM,GAAG,QAAQ,WAAW,EAAE,MAAM;AACpC,cAAM,qBAAqB,aAAa,OAAO,KAAK;AACpD,eAAO,EAAE,aAAa,QAAQ;AAAA,MAChC;AAEA,YAAM,eAAe,gCAAgC;AAAA,QACnD,gBAAgB,MAAM;AAAA,QACtB,WAAW,MAAM;AAAA,QACjB,aAAa,MAAM;AAAA,QACnB;AAAA,MACF,CAAC;AACD,aAAO,MAAM;AACX,cAAM,WAAW,MAAM,iCAAiC,IAAI,cAAc,MAAM,aAAa,KAAK;AAClG,YAAI,UAAU,sBAAsB;AAClC,gBAAMA,eAAc,MAAM;AAAA,YACxB,GAAG,KAAK;AAAA,YACR;AAAA,YACA;AAAA,cACE,IAAI,SAAS;AAAA,cACb,gBAAgB,MAAM;AAAA,cACtB,UAAU,MAAM;AAAA,cAChB,WAAW;AAAA,YACb;AAAA,YACA;AAAA,YACA;AAAA,UACF;AACA,cAAI,CAACA,cAAa;AAChB,kBAAM,IAAI,MAAM,8DAA8D;AAAA,UAChF;AACA,iBAAO,EAAE,aAAAA,cAAa,SAAS,eAAeA,YAAW,EAAE;AAAA,QAC7D;AAEA,cAAM,YAAY,oBAAI,KAAK;AAC3B,cAAM,cAAc,IAAI,KAAK,UAAU,QAAQ,IAAI,iBAAiB;AACpE,cAAM,YAAY,WACd,MAAM,oCAAoC,IAAI,UAAU,OAAO,WAAW,WAAW,IACrF,MAAM,kCAAkC,IAAI,cAAc,MAAM,aAAa,OAAO,SAAS;AAEjG,YAAI,CAAC,WAAW;AACd,gBAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,mBAAmB,CAAC;AACvE;AAAA,QACF;AAEA,YAAI;AACJ,cAAM,gBAAgB,oBAAoB,WAAW,KAAK;AAC1D,YAAI;AACF,oBAAU,MAAM,QAAQ,cAAc,EAAE,GAAG,cAAc,gBAAgB,aAAa,CAAC;AAAA,QACzF,SAAS,OAAO;AACd,gBAAM,oCAAoC,IAAI,WAAW,KAAK,EAAE,MAAM,MAAM,MAAS;AACrF,gBAAM;AAAA,QACR,UAAE;AACA,gBAAM,cAAc;AAAA,QACtB;AAEA,cAAM,gBAAgB,WAAW;AACjC,cAAM,cAAc,MAAM,GAAG,KAAK,EAAE,cAAc,OAAO,kBAAkB;AACzE,gBAAM,gBAAgB,MAAM,cAAc;AAAA,YACxC;AAAA,YACA;AAAA,cACE,IAAI,UAAU;AAAA,cACd,YAAY,UAAU;AAAA,cACtB,sBAAsB;AAAA,cACtB,gBAAgB,MAAM;AAAA,cACtB,UAAU,MAAM;AAAA,YAClB;AAAA,YACA;AAAA,cACE,sBAAsB;AAAA,cACtB,YAAY;AAAA,cACZ,WAAW;AAAA,cACX,WAAW,oBAAI,KAAK;AAAA,YACtB;AAAA,UACF;AACA,cAAI,kBAAkB,EAAG,QAAO;AAChC,gBAAM,UAAU,yBAAyB,eAAe,OAAO,SAAS,aAAa;AACrF,gBAAM,cAAc,QAAQ,OAAO,EAAE,MAAM;AAC3C,iBAAO;AAAA,QACT,CAAC;AAED,YAAI,CAAC,aAAa;AAChB;AAAA,QACF;AACA,cAAM,qBAAqB,aAAa,OAAO,KAAK;AACpD,eAAO,EAAE,aAAa,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,IAEA,MAAM,eACJ,eACA,QACA,OACA,aACwB;AACxB,UAAI,gBAA+B;AACnC,UAAI,iBAAiB;AACrB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,KAAK;AAAA,QAClC;AAAA,QACA,sBAAsB,CAAC,gBAAgB;AAAE,uCAA6B,aAAa,MAAM;AAAA,QAAE;AAAA,QAC3F,cAAc,OAAO,EAAE,aAAa,UAAU,MAAM;AAClD,gBAAM,uBAAuB,iBAAiB,YAAY,cAAc;AACxE,0BAAgB,MAAM,qBAAqB,IAAI,EAAE,aAAa,WAAW,QAAQ,MAAM,CAAC;AAGxF,cAAI,WAAW,UAAa,uBAAuB,IAAI;AACrD,6BAAiB,OAAO,kBAAkB,aAAa,CAAC;AAAA,UAC1D;AAAA,QACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAOA,kBAAkB,OAAO,EAAE,aAAa,WAAW,gBAAgB,MAAM;AACvE,cAAI,kBAAkB,KAAM;AAC5B,cAAI,iBAAiB;AACnB,kBAAM;AAAA,cACJ,YAAY;AAAA,cACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,cAC7E,YAAY;AAAA,cACZ;AAAA,cACA;AAAA,cACA,EAAE,aAAa,UAAU,aAAa,gBAAgB,kBAAkB,aAAa,EAAE;AAAA,YACzF;AACA;AAAA,UACF;AACA,gBAAM,WAAW,MAAM,qBAAqB,IAAI,EAAE,eAAe,WAAW,eAAe,MAAM,CAAC;AAClG,cAAI,SAAU;AACd,gBAAM;AAAA,YACJ,YAAY;AAAA,YACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,YAC7E,YAAY;AAAA,YACZ;AAAA,YACA;AAAA,YACA,EAAE,aAAa,UAAU,aAAa,gBAAgB,kBAAkB,aAAa,EAAE;AAAA,UACzF;AAAA,QACF;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,QAAQ;AAAA,UACjF,WAAW,sBAAsB,WAAW;AAAA,UAC5C,QAAQ;AAAA,UACR;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,CAAC,aAAa,WAAW;AACpC,sBAAY,kBAAkB;AAAA,YAC5B,GAAG,oBAAoB,YAAY,eAAe;AAAA,YAClD,eAAe,OAAO;AAAA,UACxB;AACA,cAAI,kBAAkB,KAAM,sBAAqB,aAAa,eAAe,OAAO,cAAc;AAAA,QACpG;AAAA,QACA,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,OAAO,QAAQ,gBAAgB,OAAO,eAAe;AAAA,QACzF;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,cACJ,eACA,QACA,QACA,OACA,aACuB;AACvB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,MAAM,QAAQ,UAAU,KAAK;AAAA,QAC1D;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,OAAO;AAAA,UAChF,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,CAAC,aAAa,WAAW;AACpC,sBAAY,kBAAkB,OAAO;AACrC,sBAAY,kBAAkB;AAAA,YAC5B,GAAG,oBAAoB,YAAY,eAAe;AAAA,YAClD,cAAc,OAAO;AAAA,UACvB;AAAA,QACF;AAAA,QACA,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,UAAU,MAAM,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS;AAAA,QACrG;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,cACJ,eACA,QACA,OACA,aACuB;AACvB,aAAO,uBAAuB;AAAA,QAC5B,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,SAAS,EAAE,QAAQ,UAAU,KAAK;AAAA,QAClC;AAAA,QACA,QAAQ,CAAC,EAAE,SAAS,aAAa,aAAa,eAAe,MAAM,QAAQ,OAAO;AAAA,UAChF,WAAW,sBAAsB,WAAW;AAAA,UAC5C;AAAA,UACA;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,aAAa,MAAM;AAAA,QAAC;AAAA,QACpB,aAAa,CAAC,aAAa,WAAW;AAAA,UACpC,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA,EAAE,QAAQ,UAAU,MAAM,QAAQ,OAAO,OAAO;AAAA,QAClD;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,MAAM,iBAAiB,eAAuB,OAAoF;AAChI,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,EAAE,SAAS,YAAY,IAAI,MAAM;AAAA,QACrC,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,MAC/E;AAEA,YAAM,SAAS,MAAM,QAAQ,UAAU;AAAA,QACrC,WAAW,sBAAsB,WAAW;AAAA,QAC5C;AAAA,MACF,CAAC;AAED,UAAI,OAAO,WAAW,YAAY,iBAAiB,kBAAkB,YAAY,eAAuC,OAAO,MAAM,GAAG;AACtI,cAAM,iBAAiB,YAAY;AACnC,oBAAY,gBAAgB,OAAO;AACnC,sCAA8B,aAAa,OAAO,MAAM;AACxD,oBAAY,gBAAgB,OAAO;AACnC,oBAAY,kBAAkB,EAAE,GAAG,oBAAoB,YAAY,eAAe,GAAG,cAAc,OAAO,gBAAgB,KAAK;AAC/H,oBAAY,eAAe,oBAAI,KAAK;AACpC,cAAM,GAAG,MAAM;AACf,cAAM,gBAAgB,OAAO,QAAQ;AAAA,UACnC,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AACD,cAAM;AAAA,UACJ,YAAY;AAAA,UACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,UAC7E,YAAY;AAAA,UACZ;AAAA,UACA;AAAA,UACA;AAAA,YACE;AAAA,YACA,YAAY,OAAO;AAAA,UACrB;AAAA,QACF;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,sBAAsB,eAAuB,QAUhD,OAAoE;AACrE,YAAM,cAAc,MAAM,uBAAuB,eAAe,KAAK;AACrE,YAAM,gBAAgB,YAAY;AAClC,YAAM,gBAAgB,kBAAkB,eAAe,OAAO,aAAa;AAC3E,YAAM,oBAAoB,iBAAiB,OAAO,kBAAkB;AACpE,YAAM,iBAAiB,YAAY;AACnC,UAAI,mBAAmB;AACrB,oBAAY,gBAAgB,OAAO;AACnC,sCAA8B,aAAa,OAAO,aAAa;AAAA,MACjE;AACA,UAAI,OAAO,gBAAgB;AACzB,oBAAY,gBAAgB,OAAO;AAAA,MACrC;AACA,UAAI,OAAO,cAAc;AACvB,oBAAY,kBAAkB,EAAE,GAAG,oBAAoB,YAAY,eAAe,GAAG,GAAG,OAAO,aAAa;AAAA,MAC9G;AACA,UAAI,OAAO,cAAc;AACvB,cAAM,aAAa,eAAe,YAAY,UAAU;AACxD,mBAAW,KAAK;AAAA,UACd,WAAW,OAAO,aAAa;AAAA,UAC/B,YAAY,OAAO,aAAa,eAAc,oBAAI,KAAK,GAAE,YAAY;AAAA,UACrE,gBAAgB,OAAO,aAAa;AAAA,UACpC,eAAe,OAAO;AAAA,UACtB,WAAW,OAAO,aAAa;AAAA,QACjC,CAAC;AACD,oBAAY,aAAa;AAAA,MAC3B;AACA,kBAAY,gBAAgB,oBAAI,KAAK;AACrC,YAAM,GAAG,MAAM;AACf,UAAI,mBAAmB;AACrB,cAAM,gBAAgB,OAAO,eAAe;AAAA,UAC1C,eAAe,YAAY;AAAA,UAC3B,WAAW,YAAY;AAAA,UACvB,aAAa,YAAY;AAAA,UACzB;AAAA,UACA,gBAAgB,YAAY;AAAA,UAC5B,UAAU,YAAY;AAAA,QACxB,CAAC;AAAA,MACH;AACA,YAAM;AAAA,QACJ,YAAY;AAAA,QACZ,EAAE,gBAAgB,YAAY,gBAAgB,UAAU,YAAY,SAAS;AAAA,QAC7E,YAAY;AAAA,QACZ,oBAAoB,SAAS;AAAA,QAC7B,oBAAoB,6CAA6C;AAAA,QACjE;AAAA,UACE;AAAA,UACA,YAAY,OAAO;AAAA,UACnB,gBAAgB,OAAO,kBAAkB;AAAA,UACzC,WAAW,OAAO,cAAc,aAAa;AAAA,UAC7C,gBAAgB,OAAO,cAAc,kBAAkB;AAAA,QACzD;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,gBAAgB,IAAY,OAAyF;AACzH,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,QACb;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,2BACJ,mBACA,OACA,aACoC;AACpC,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,UACE;AAAA,UACA,gBAAgB,MAAM;AAAA,UACtB,UAAU,MAAM;AAAA,UAChB,WAAW;AAAA,UACX,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,iCAAiC,OAKL;AAChC,YAAM,QAAiC;AAAA,QACrC,eAAe,EAAE,KAAK,CAAC,WAAW,cAAc,oBAAoB,EAAE;AAAA,QACtE,WAAW;AAAA,MACb;AACA,UAAI,OAAO,eAAgB,OAAM,iBAAiB,MAAM;AACxD,UAAI,OAAO,SAAU,OAAM,WAAW,MAAM;AAC5C,UAAI,OAAO,YAAa,OAAM,cAAc,MAAM;AAElD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,UACE,SAAS,EAAE,WAAW,MAAM;AAAA,UAC5B,OAAO,OAAO,SAAS;AAAA,QACzB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["transaction"]
 }

package/dist/modules/payment_gateways/lib/payment-operation-idempotency.js CHANGED Viewed

@@ -119,6 +119,7 @@ async function preparePaymentOperation(input) {
     attemptToken: claim.attemptToken,
     attemptCount: 1,
     result: null,
+    reservedAmount: null,
     leaseExpiresAt: claim.leaseExpiresAt,
     organizationId: input.scope.organizationId,
     tenantId: input.scope.tenantId,

package/dist/modules/payment_gateways/lib/payment-operation-idempotency.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/payment_gateways/lib/payment-operation-idempotency.ts"],
-  "sourcesContent": ["import { createHash, randomUUID } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isUniqueViolation } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { GatewayPaymentOperation } from '../data/entities'\nimport type { ManualGatewayAction } from './status-machine'\n\ntype Scope = { organizationId: string; tenantId: string }\ntype OperationStatus = 'in_progress' | 'succeeded' | 'failed'\n\nconst OPERATION_LEASE_MS = 10 * 60 * 1000\nconst OPERATION_UNIQUE_CONSTRAINT = 'gateway_payment_operations_scope_operation_unique'\n\nexport type ClaimedPaymentOperation = {\n  record: GatewayPaymentOperation\n  attemptToken: string\n  providerIdempotencyKey: string\n}\n\nexport type PreparedPaymentOperation =\n  | { kind: 'completed'; result: Record<string, unknown> }\n  | { kind: 'claimed'; claim: ClaimedPaymentOperation }\n\ntype PreparePaymentOperationInput = {\n  em: EntityManager\n  transactionId: string\n  providerKey: string\n  action: ManualGatewayAction\n  operationId?: string\n  payload: Record<string, unknown>\n  scope: Scope\n  assertInitialAllowed: () => void\n}\n\nfunction digest(value: unknown): string {\n  return createHash('sha256').update(JSON.stringify(value)).digest('hex')\n}\n\nfunction operationConflict(code: string, operationId: string, message: string): CrudHttpError {\n  return new CrudHttpError(409, { error: message, code, operationId })\n}\n\nasync function findOperation(\n  em: EntityManager,\n  operationId: string,\n  scope: Scope,\n): Promise<GatewayPaymentOperation | null> {\n  return findOneWithDecryption(\n    em,\n    GatewayPaymentOperation,\n    {\n      operationId,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n    },\n    undefined,\n    scope,\n  )\n}\n\nfunction buildOperationIdentity(input: Omit<PreparePaymentOperationInput, 'em' | 'assertInitialAllowed'>) {\n  const requestHash = digest({\n    transactionId: input.transactionId,\n    providerKey: input.providerKey,\n    action: input.action,\n    payload: input.payload,\n  })\n  const operationId = input.operationId ?? `auto_${requestHash}`\n  const providerIdempotencyKey = `om-pg-${digest({\n    tenantId: input.scope.tenantId,\n    organizationId: input.scope.organizationId,\n    transactionId: input.transactionId,\n    action: input.action,\n    operationId,\n  })}`\n  return { operationId, providerIdempotencyKey, requestHash }\n}\n\nfunction claimFields(now: Date) {\n  return {\n    status: 'in_progress' as OperationStatus,\n    attemptToken: randomUUID(),\n    leaseExpiresAt: new Date(now.getTime() + OPERATION_LEASE_MS),\n    updatedAt: now,\n  }\n}\n\nasync function resolveExistingOperation(\n  em: EntityManager,\n  existing: GatewayPaymentOperation,\n  identity: ReturnType<typeof buildOperationIdentity>,\n): Promise<PreparedPaymentOperation> {\n  if (existing.requestHash !== identity.requestHash) {\n    throw operationConflict(\n      'payment_operation_conflict',\n      identity.operationId,\n      'Payment operation id was already used with a different request',\n    )\n  }\n  if (existing.providerIdempotencyKey !== identity.providerIdempotencyKey) {\n    throw operationConflict(\n      'payment_operation_conflict',\n      identity.operationId,\n      'Payment operation id resolved to a different provider request',\n    )\n  }\n  if (existing.status === 'succeeded' && existing.result) {\n    return { kind: 'completed', result: existing.result }\n  }\n\n  const now = new Date()\n  const stale = existing.status === 'in_progress'\n    && existing.leaseExpiresAt instanceof Date\n    && existing.leaseExpiresAt <= now\n  if (existing.status !== 'failed' && !stale) {\n    throw operationConflict(\n      'payment_operation_in_progress',\n      identity.operationId,\n      'Payment operation is already in progress',\n    )\n  }\n\n  const next = claimFields(now)\n  const where = existing.status === 'failed'\n    ? { id: existing.id, status: 'failed', attemptToken: existing.attemptToken }\n    : { id: existing.id, status: 'in_progress', attemptToken: existing.attemptToken, leaseExpiresAt: { $lt: now } }\n  const claimed = await em.nativeUpdate(\n    GatewayPaymentOperation,\n    where,\n    { ...next, attemptCount: existing.attemptCount + 1 },\n  )\n  if (claimed !== 1) {\n    throw operationConflict(\n      'payment_operation_in_progress',\n      identity.operationId,\n      'Payment operation is already in progress',\n    )\n  }\n  Object.assign(existing, next, { attemptCount: existing.attemptCount + 1 })\n  return {\n    kind: 'claimed',\n    claim: {\n      record: existing,\n      attemptToken: next.attemptToken,\n      providerIdempotencyKey: existing.providerIdempotencyKey,\n    },\n  }\n}\n\nexport async function preparePaymentOperation(\n  input: PreparePaymentOperationInput,\n): Promise<PreparedPaymentOperation> {\n  const identity = buildOperationIdentity(input)\n  const existing = await findOperation(input.em, identity.operationId, input.scope)\n  if (existing) {\n    return resolveExistingOperation(input.em, existing, identity)\n  }\n\n  input.assertInitialAllowed()\n  const now = new Date()\n  const claim = claimFields(now)\n  const record = input.em.create(GatewayPaymentOperation, {\n    operationId: identity.operationId,\n    transactionId: input.transactionId,\n    operationType: input.action,\n    providerKey: input.providerKey,\n    requestHash: identity.requestHash,\n    providerIdempotencyKey: identity.providerIdempotencyKey,\n    status: claim.status,\n    attemptToken: claim.attemptToken,\n    attemptCount: 1,\n    result: null,\n    leaseExpiresAt: claim.leaseExpiresAt,\n    organizationId: input.scope.organizationId,\n    tenantId: input.scope.tenantId,\n    createdAt: now,\n    updatedAt: now,\n  })\n  try {\n    await input.em.persist(record).flush()\n    return {\n      kind: 'claimed',\n      claim: {\n        record,\n        attemptToken: claim.attemptToken,\n        providerIdempotencyKey: identity.providerIdempotencyKey,\n      },\n    }\n  } catch (error: unknown) {\n    if (!isUniqueViolation(error, OPERATION_UNIQUE_CONSTRAINT) && !isUniqueViolation(error)) {\n      throw error\n    }\n    const winner = await findOperation(input.em, identity.operationId, input.scope)\n    if (!winner) throw error\n    return resolveExistingOperation(input.em, winner, identity)\n  }\n}\n\nexport async function completePaymentOperation<T extends Record<string, unknown>>(\n  em: EntityManager,\n  claim: ClaimedPaymentOperation,\n  result: T,\n  applyResult: (tx: EntityManager) => Promise<boolean>,\n): Promise<boolean> {\n  const statusChanged = await em.transactional(async (tx) => {\n    const completed = await tx.nativeUpdate(\n      GatewayPaymentOperation,\n      { id: claim.record.id, status: 'in_progress', attemptToken: claim.attemptToken },\n      { status: 'succeeded', result, leaseExpiresAt: null, updatedAt: new Date() },\n    )\n    if (completed !== 1) {\n      throw operationConflict(\n        'payment_operation_claim_lost',\n        claim.record.operationId,\n        'Payment operation claim is no longer active',\n      )\n    }\n    const changed = await applyResult(tx)\n    await tx.flush()\n    return changed\n  })\n  Object.assign(claim.record, { status: 'succeeded', result, leaseExpiresAt: null })\n  return statusChanged\n}\n\nexport async function failPaymentOperation(\n  em: EntityManager,\n  claim: ClaimedPaymentOperation,\n): Promise<void> {\n  const failed = await em.nativeUpdate(\n    GatewayPaymentOperation,\n    { id: claim.record.id, status: 'in_progress', attemptToken: claim.attemptToken },\n    { status: 'failed', leaseExpiresAt: null, updatedAt: new Date() },\n  )\n  if (failed === 1) {\n    Object.assign(claim.record, { status: 'failed', leaseExpiresAt: null })\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,YAAY,kBAAkB;AAEvC,SAAS,eAAe,yBAAyB;AACjD,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AAMxC,MAAM,qBAAqB,KAAK,KAAK;AACrC,MAAM,8BAA8B;AAuBpC,SAAS,OAAO,OAAwB;AACtC,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC,EAAE,OAAO,KAAK;AACxE;AAEA,SAAS,kBAAkB,MAAc,aAAqB,SAAgC;AAC5F,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,SAAS,MAAM,YAAY,CAAC;AACrE;AAEA,eAAe,cACb,IACA,aACA,OACyC;AACzC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,uBAAuB,OAA0E;AACxG,QAAM,cAAc,OAAO;AAAA,IACzB,eAAe,MAAM;AAAA,IACrB,aAAa,MAAM;AAAA,IACnB,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,QAAM,cAAc,MAAM,eAAe,QAAQ,WAAW;AAC5D,QAAM,yBAAyB,SAAS,OAAO;AAAA,IAC7C,UAAU,MAAM,MAAM;AAAA,IACtB,gBAAgB,MAAM,MAAM;AAAA,IAC5B,eAAe,MAAM;AAAA,IACrB,QAAQ,MAAM;AAAA,IACd;AAAA,EACF,CAAC,CAAC;AACF,SAAO,EAAE,aAAa,wBAAwB,YAAY;AAC5D;AAEA,SAAS,YAAY,KAAW;AAC9B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,WAAW;AAAA,IACzB,gBAAgB,IAAI,KAAK,IAAI,QAAQ,IAAI,kBAAkB;AAAA,IAC3D,WAAW;AAAA,EACb;AACF;AAEA,eAAe,yBACb,IACA,UACA,UACmC;AACnC,MAAI,SAAS,gBAAgB,SAAS,aAAa;AACjD,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,2BAA2B,SAAS,wBAAwB;AACvE,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,WAAW,eAAe,SAAS,QAAQ;AACtD,WAAO,EAAE,MAAM,aAAa,QAAQ,SAAS,OAAO;AAAA,EACtD;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,QAAQ,SAAS,WAAW,iBAC7B,SAAS,0BAA0B,QACnC,SAAS,kBAAkB;AAChC,MAAI,SAAS,WAAW,YAAY,CAAC,OAAO;AAC1C,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,YAAY,GAAG;AAC5B,QAAM,QAAQ,SAAS,WAAW,WAC9B,EAAE,IAAI,SAAS,IAAI,QAAQ,UAAU,cAAc,SAAS,aAAa,IACzE,EAAE,IAAI,SAAS,IAAI,QAAQ,eAAe,cAAc,SAAS,cAAc,gBAAgB,EAAE,KAAK,IAAI,EAAE;AAChH,QAAM,UAAU,MAAM,GAAG;AAAA,IACvB;AAAA,IACA;AAAA,IACA,EAAE,GAAG,MAAM,cAAc,SAAS,eAAe,EAAE;AAAA,EACrD;AACA,MAAI,YAAY,GAAG;AACjB,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO,OAAO,UAAU,MAAM,EAAE,cAAc,SAAS,eAAe,EAAE,CAAC;AACzE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,KAAK;AAAA,MACnB,wBAAwB,SAAS;AAAA,IACnC;AAAA,EACF;AACF;AAEA,eAAsB,wBACpB,OACmC;AACnC,QAAM,WAAW,uBAAuB,KAAK;AAC7C,QAAM,WAAW,MAAM,cAAc,MAAM,IAAI,SAAS,aAAa,MAAM,KAAK;AAChF,MAAI,UAAU;AACZ,WAAO,yBAAyB,MAAM,IAAI,UAAU,QAAQ;AAAA,EAC9D;AAEA,QAAM,qBAAqB;AAC3B,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM,SAAS,MAAM,GAAG,OAAO,yBAAyB;AAAA,IACtD,aAAa,SAAS;AAAA,IACtB,eAAe,MAAM;AAAA,IACrB,eAAe,MAAM;AAAA,IACrB,aAAa,MAAM;AAAA,IACnB,aAAa,SAAS;AAAA,IACtB,wBAAwB,SAAS;AAAA,IACjC,QAAQ,MAAM;AAAA,IACd,cAAc,MAAM;AAAA,IACpB,cAAc;AAAA,IACd,QAAQ;AAAA,IACR,gBAAgB,MAAM;AAAA,IACtB,gBAAgB,MAAM,MAAM;AAAA,IAC5B,UAAU,MAAM,MAAM;AAAA,IACtB,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC;AACD,MAAI;AACF,UAAM,MAAM,GAAG,QAAQ,MAAM,EAAE,MAAM;AACrC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,QACL;AAAA,QACA,cAAc,MAAM;AAAA,QACpB,wBAAwB,SAAS;AAAA,MACnC;AAAA,IACF;AAAA,EACF,SAAS,OAAgB;AACvB,QAAI,CAAC,kBAAkB,OAAO,2BAA2B,KAAK,CAAC,kBAAkB,KAAK,GAAG;AACvF,YAAM;AAAA,IACR;AACA,UAAM,SAAS,MAAM,cAAc,MAAM,IAAI,SAAS,aAAa,MAAM,KAAK;AAC9E,QAAI,CAAC,OAAQ,OAAM;AACnB,WAAO,yBAAyB,MAAM,IAAI,QAAQ,QAAQ;AAAA,EAC5D;AACF;AAEA,eAAsB,yBACpB,IACA,OACA,QACA,aACkB;AAClB,QAAM,gBAAgB,MAAM,GAAG,cAAc,OAAO,OAAO;AACzD,UAAM,YAAY,MAAM,GAAG;AAAA,MACzB;AAAA,MACA,EAAE,IAAI,MAAM,OAAO,IAAI,QAAQ,eAAe,cAAc,MAAM,aAAa;AAAA,MAC/E,EAAE,QAAQ,aAAa,QAAQ,gBAAgB,MAAM,WAAW,oBAAI,KAAK,EAAE;AAAA,IAC7E;AACA,QAAI,cAAc,GAAG;AACnB,YAAM;AAAA,QACJ;AAAA,QACA,MAAM,OAAO;AAAA,QACb;AAAA,MACF;AAAA,IACF;AACA,UAAM,UAAU,MAAM,YAAY,EAAE;AACpC,UAAM,GAAG,MAAM;AACf,WAAO;AAAA,EACT,CAAC;AACD,SAAO,OAAO,MAAM,QAAQ,EAAE,QAAQ,aAAa,QAAQ,gBAAgB,KAAK,CAAC;AACjF,SAAO;AACT;AAEA,eAAsB,qBACpB,IACA,OACe;AACf,QAAM,SAAS,MAAM,GAAG;AAAA,IACtB;AAAA,IACA,EAAE,IAAI,MAAM,OAAO,IAAI,QAAQ,eAAe,cAAc,MAAM,aAAa;AAAA,IAC/E,EAAE,QAAQ,UAAU,gBAAgB,MAAM,WAAW,oBAAI,KAAK,EAAE;AAAA,EAClE;AACA,MAAI,WAAW,GAAG;AAChB,WAAO,OAAO,MAAM,QAAQ,EAAE,QAAQ,UAAU,gBAAgB,KAAK,CAAC;AAAA,EACxE;AACF;",
+  "sourcesContent": ["import { createHash, randomUUID } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError, isUniqueViolation } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { GatewayPaymentOperation } from '../data/entities'\nimport type { ManualGatewayAction } from './status-machine'\n\ntype Scope = { organizationId: string; tenantId: string }\ntype OperationStatus = 'in_progress' | 'succeeded' | 'failed'\n\nconst OPERATION_LEASE_MS = 10 * 60 * 1000\nconst OPERATION_UNIQUE_CONSTRAINT = 'gateway_payment_operations_scope_operation_unique'\n\nexport type ClaimedPaymentOperation = {\n  record: GatewayPaymentOperation\n  attemptToken: string\n  providerIdempotencyKey: string\n}\n\nexport type PreparedPaymentOperation =\n  | { kind: 'completed'; result: Record<string, unknown> }\n  | { kind: 'claimed'; claim: ClaimedPaymentOperation }\n\ntype PreparePaymentOperationInput = {\n  em: EntityManager\n  transactionId: string\n  providerKey: string\n  action: ManualGatewayAction\n  operationId?: string\n  payload: Record<string, unknown>\n  scope: Scope\n  assertInitialAllowed: () => void\n}\n\nfunction digest(value: unknown): string {\n  return createHash('sha256').update(JSON.stringify(value)).digest('hex')\n}\n\nfunction operationConflict(code: string, operationId: string, message: string): CrudHttpError {\n  return new CrudHttpError(409, { error: message, code, operationId })\n}\n\nasync function findOperation(\n  em: EntityManager,\n  operationId: string,\n  scope: Scope,\n): Promise<GatewayPaymentOperation | null> {\n  return findOneWithDecryption(\n    em,\n    GatewayPaymentOperation,\n    {\n      operationId,\n      organizationId: scope.organizationId,\n      tenantId: scope.tenantId,\n    },\n    undefined,\n    scope,\n  )\n}\n\nfunction buildOperationIdentity(input: Omit<PreparePaymentOperationInput, 'em' | 'assertInitialAllowed'>) {\n  const requestHash = digest({\n    transactionId: input.transactionId,\n    providerKey: input.providerKey,\n    action: input.action,\n    payload: input.payload,\n  })\n  const operationId = input.operationId ?? `auto_${requestHash}`\n  const providerIdempotencyKey = `om-pg-${digest({\n    tenantId: input.scope.tenantId,\n    organizationId: input.scope.organizationId,\n    transactionId: input.transactionId,\n    action: input.action,\n    operationId,\n  })}`\n  return { operationId, providerIdempotencyKey, requestHash }\n}\n\nfunction claimFields(now: Date) {\n  return {\n    status: 'in_progress' as OperationStatus,\n    attemptToken: randomUUID(),\n    leaseExpiresAt: new Date(now.getTime() + OPERATION_LEASE_MS),\n    updatedAt: now,\n  }\n}\n\nasync function resolveExistingOperation(\n  em: EntityManager,\n  existing: GatewayPaymentOperation,\n  identity: ReturnType<typeof buildOperationIdentity>,\n): Promise<PreparedPaymentOperation> {\n  if (existing.requestHash !== identity.requestHash) {\n    throw operationConflict(\n      'payment_operation_conflict',\n      identity.operationId,\n      'Payment operation id was already used with a different request',\n    )\n  }\n  if (existing.providerIdempotencyKey !== identity.providerIdempotencyKey) {\n    throw operationConflict(\n      'payment_operation_conflict',\n      identity.operationId,\n      'Payment operation id resolved to a different provider request',\n    )\n  }\n  if (existing.status === 'succeeded' && existing.result) {\n    return { kind: 'completed', result: existing.result }\n  }\n\n  const now = new Date()\n  const stale = existing.status === 'in_progress'\n    && existing.leaseExpiresAt instanceof Date\n    && existing.leaseExpiresAt <= now\n  if (existing.status !== 'failed' && !stale) {\n    throw operationConflict(\n      'payment_operation_in_progress',\n      identity.operationId,\n      'Payment operation is already in progress',\n    )\n  }\n\n  const next = claimFields(now)\n  const where = existing.status === 'failed'\n    ? { id: existing.id, status: 'failed', attemptToken: existing.attemptToken }\n    : { id: existing.id, status: 'in_progress', attemptToken: existing.attemptToken, leaseExpiresAt: { $lt: now } }\n  const claimed = await em.nativeUpdate(\n    GatewayPaymentOperation,\n    where,\n    { ...next, attemptCount: existing.attemptCount + 1 },\n  )\n  if (claimed !== 1) {\n    throw operationConflict(\n      'payment_operation_in_progress',\n      identity.operationId,\n      'Payment operation is already in progress',\n    )\n  }\n  Object.assign(existing, next, { attemptCount: existing.attemptCount + 1 })\n  return {\n    kind: 'claimed',\n    claim: {\n      record: existing,\n      attemptToken: next.attemptToken,\n      providerIdempotencyKey: existing.providerIdempotencyKey,\n    },\n  }\n}\n\nexport async function preparePaymentOperation(\n  input: PreparePaymentOperationInput,\n): Promise<PreparedPaymentOperation> {\n  const identity = buildOperationIdentity(input)\n  const existing = await findOperation(input.em, identity.operationId, input.scope)\n  if (existing) {\n    return resolveExistingOperation(input.em, existing, identity)\n  }\n\n  input.assertInitialAllowed()\n  const now = new Date()\n  const claim = claimFields(now)\n  const record = input.em.create(GatewayPaymentOperation, {\n    operationId: identity.operationId,\n    transactionId: input.transactionId,\n    operationType: input.action,\n    providerKey: input.providerKey,\n    requestHash: identity.requestHash,\n    providerIdempotencyKey: identity.providerIdempotencyKey,\n    status: claim.status,\n    attemptToken: claim.attemptToken,\n    attemptCount: 1,\n    result: null,\n    reservedAmount: null,\n    leaseExpiresAt: claim.leaseExpiresAt,\n    organizationId: input.scope.organizationId,\n    tenantId: input.scope.tenantId,\n    createdAt: now,\n    updatedAt: now,\n  })\n  try {\n    await input.em.persist(record).flush()\n    return {\n      kind: 'claimed',\n      claim: {\n        record,\n        attemptToken: claim.attemptToken,\n        providerIdempotencyKey: identity.providerIdempotencyKey,\n      },\n    }\n  } catch (error: unknown) {\n    if (!isUniqueViolation(error, OPERATION_UNIQUE_CONSTRAINT) && !isUniqueViolation(error)) {\n      throw error\n    }\n    const winner = await findOperation(input.em, identity.operationId, input.scope)\n    if (!winner) throw error\n    return resolveExistingOperation(input.em, winner, identity)\n  }\n}\n\nexport async function completePaymentOperation<T extends Record<string, unknown>>(\n  em: EntityManager,\n  claim: ClaimedPaymentOperation,\n  result: T,\n  applyResult: (tx: EntityManager) => Promise<boolean>,\n): Promise<boolean> {\n  const statusChanged = await em.transactional(async (tx) => {\n    const completed = await tx.nativeUpdate(\n      GatewayPaymentOperation,\n      { id: claim.record.id, status: 'in_progress', attemptToken: claim.attemptToken },\n      { status: 'succeeded', result, leaseExpiresAt: null, updatedAt: new Date() },\n    )\n    if (completed !== 1) {\n      throw operationConflict(\n        'payment_operation_claim_lost',\n        claim.record.operationId,\n        'Payment operation claim is no longer active',\n      )\n    }\n    const changed = await applyResult(tx)\n    await tx.flush()\n    return changed\n  })\n  Object.assign(claim.record, { status: 'succeeded', result, leaseExpiresAt: null })\n  return statusChanged\n}\n\nexport async function failPaymentOperation(\n  em: EntityManager,\n  claim: ClaimedPaymentOperation,\n): Promise<void> {\n  const failed = await em.nativeUpdate(\n    GatewayPaymentOperation,\n    { id: claim.record.id, status: 'in_progress', attemptToken: claim.attemptToken },\n    { status: 'failed', leaseExpiresAt: null, updatedAt: new Date() },\n  )\n  if (failed === 1) {\n    Object.assign(claim.record, { status: 'failed', leaseExpiresAt: null })\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,kBAAkB;AAEvC,SAAS,eAAe,yBAAyB;AACjD,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AAMxC,MAAM,qBAAqB,KAAK,KAAK;AACrC,MAAM,8BAA8B;AAuBpC,SAAS,OAAO,OAAwB;AACtC,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC,EAAE,OAAO,KAAK;AACxE;AAEA,SAAS,kBAAkB,MAAc,aAAqB,SAAgC;AAC5F,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,SAAS,MAAM,YAAY,CAAC;AACrE;AAEA,eAAe,cACb,IACA,aACA,OACyC;AACzC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,MACE;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,UAAU,MAAM;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,uBAAuB,OAA0E;AACxG,QAAM,cAAc,OAAO;AAAA,IACzB,eAAe,MAAM;AAAA,IACrB,aAAa,MAAM;AAAA,IACnB,QAAQ,MAAM;AAAA,IACd,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,QAAM,cAAc,MAAM,eAAe,QAAQ,WAAW;AAC5D,QAAM,yBAAyB,SAAS,OAAO;AAAA,IAC7C,UAAU,MAAM,MAAM;AAAA,IACtB,gBAAgB,MAAM,MAAM;AAAA,IAC5B,eAAe,MAAM;AAAA,IACrB,QAAQ,MAAM;AAAA,IACd;AAAA,EACF,CAAC,CAAC;AACF,SAAO,EAAE,aAAa,wBAAwB,YAAY;AAC5D;AAEA,SAAS,YAAY,KAAW;AAC9B,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,cAAc,WAAW;AAAA,IACzB,gBAAgB,IAAI,KAAK,IAAI,QAAQ,IAAI,kBAAkB;AAAA,IAC3D,WAAW;AAAA,EACb;AACF;AAEA,eAAe,yBACb,IACA,UACA,UACmC;AACnC,MAAI,SAAS,gBAAgB,SAAS,aAAa;AACjD,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,2BAA2B,SAAS,wBAAwB;AACvE,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,MAAI,SAAS,WAAW,eAAe,SAAS,QAAQ;AACtD,WAAO,EAAE,MAAM,aAAa,QAAQ,SAAS,OAAO;AAAA,EACtD;AAEA,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,QAAQ,SAAS,WAAW,iBAC7B,SAAS,0BAA0B,QACnC,SAAS,kBAAkB;AAChC,MAAI,SAAS,WAAW,YAAY,CAAC,OAAO;AAC1C,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,YAAY,GAAG;AAC5B,QAAM,QAAQ,SAAS,WAAW,WAC9B,EAAE,IAAI,SAAS,IAAI,QAAQ,UAAU,cAAc,SAAS,aAAa,IACzE,EAAE,IAAI,SAAS,IAAI,QAAQ,eAAe,cAAc,SAAS,cAAc,gBAAgB,EAAE,KAAK,IAAI,EAAE;AAChH,QAAM,UAAU,MAAM,GAAG;AAAA,IACvB;AAAA,IACA;AAAA,IACA,EAAE,GAAG,MAAM,cAAc,SAAS,eAAe,EAAE;AAAA,EACrD;AACA,MAAI,YAAY,GAAG;AACjB,UAAM;AAAA,MACJ;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO,OAAO,UAAU,MAAM,EAAE,cAAc,SAAS,eAAe,EAAE,CAAC;AACzE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,MACL,QAAQ;AAAA,MACR,cAAc,KAAK;AAAA,MACnB,wBAAwB,SAAS;AAAA,IACnC;AAAA,EACF;AACF;AAEA,eAAsB,wBACpB,OACmC;AACnC,QAAM,WAAW,uBAAuB,KAAK;AAC7C,QAAM,WAAW,MAAM,cAAc,MAAM,IAAI,SAAS,aAAa,MAAM,KAAK;AAChF,MAAI,UAAU;AACZ,WAAO,yBAAyB,MAAM,IAAI,UAAU,QAAQ;AAAA,EAC9D;AAEA,QAAM,qBAAqB;AAC3B,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM,SAAS,MAAM,GAAG,OAAO,yBAAyB;AAAA,IACtD,aAAa,SAAS;AAAA,IACtB,eAAe,MAAM;AAAA,IACrB,eAAe,MAAM;AAAA,IACrB,aAAa,MAAM;AAAA,IACnB,aAAa,SAAS;AAAA,IACtB,wBAAwB,SAAS;AAAA,IACjC,QAAQ,MAAM;AAAA,IACd,cAAc,MAAM;AAAA,IACpB,cAAc;AAAA,IACd,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,gBAAgB,MAAM;AAAA,IACtB,gBAAgB,MAAM,MAAM;AAAA,IAC5B,UAAU,MAAM,MAAM;AAAA,IACtB,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC;AACD,MAAI;AACF,UAAM,MAAM,GAAG,QAAQ,MAAM,EAAE,MAAM;AACrC,WAAO;AAAA,MACL,MAAM;AAAA,MACN,OAAO;AAAA,QACL;AAAA,QACA,cAAc,MAAM;AAAA,QACpB,wBAAwB,SAAS;AAAA,MACnC;AAAA,IACF;AAAA,EACF,SAAS,OAAgB;AACvB,QAAI,CAAC,kBAAkB,OAAO,2BAA2B,KAAK,CAAC,kBAAkB,KAAK,GAAG;AACvF,YAAM;AAAA,IACR;AACA,UAAM,SAAS,MAAM,cAAc,MAAM,IAAI,SAAS,aAAa,MAAM,KAAK;AAC9E,QAAI,CAAC,OAAQ,OAAM;AACnB,WAAO,yBAAyB,MAAM,IAAI,QAAQ,QAAQ;AAAA,EAC5D;AACF;AAEA,eAAsB,yBACpB,IACA,OACA,QACA,aACkB;AAClB,QAAM,gBAAgB,MAAM,GAAG,cAAc,OAAO,OAAO;AACzD,UAAM,YAAY,MAAM,GAAG;AAAA,MACzB;AAAA,MACA,EAAE,IAAI,MAAM,OAAO,IAAI,QAAQ,eAAe,cAAc,MAAM,aAAa;AAAA,MAC/E,EAAE,QAAQ,aAAa,QAAQ,gBAAgB,MAAM,WAAW,oBAAI,KAAK,EAAE;AAAA,IAC7E;AACA,QAAI,cAAc,GAAG;AACnB,YAAM;AAAA,QACJ;AAAA,QACA,MAAM,OAAO;AAAA,QACb;AAAA,MACF;AAAA,IACF;AACA,UAAM,UAAU,MAAM,YAAY,EAAE;AACpC,UAAM,GAAG,MAAM;AACf,WAAO;AAAA,EACT,CAAC;AACD,SAAO,OAAO,MAAM,QAAQ,EAAE,QAAQ,aAAa,QAAQ,gBAAgB,KAAK,CAAC;AACjF,SAAO;AACT;AAEA,eAAsB,qBACpB,IACA,OACe;AACf,QAAM,SAAS,MAAM,GAAG;AAAA,IACtB;AAAA,IACA,EAAE,IAAI,MAAM,OAAO,IAAI,QAAQ,eAAe,cAAc,MAAM,aAAa;AAAA,IAC/E,EAAE,QAAQ,UAAU,gBAAgB,MAAM,WAAW,oBAAI,KAAK,EAAE;AAAA,EAClE;AACA,MAAI,WAAW,GAAG;AAChB,WAAO,OAAO,MAAM,QAAQ,EAAE,QAAQ,UAAU,gBAAgB,KAAK,CAAC;AAAA,EACxE;AACF;",
   "names": []
 }

package/dist/modules/payment_gateways/migrations/Migration20260725101500_payment_gateways.js ADDED Viewed

@@ -0,0 +1,16 @@
+import { Migration } from "@mikro-orm/migrations";
+class Migration20260725101500_payment_gateways extends Migration {
+  up() {
+    this.addSql(`alter table "gateway_transactions" add column "captured_amount" numeric(18,4) not null default '0';`);
+    this.addSql(`alter table "gateway_payment_operations" add column "reserved_amount" numeric(18,4) null;`);
+    this.addSql(`update "gateway_transactions" as t set "captured_amount" = coalesce((select sum((o."result"->>'capturedAmount')::numeric) from "gateway_payment_operations" as o where o."transaction_id" = t."id" and o."operation_type" = 'capture' and o."status" = 'succeeded'), case when t."unified_status" in ('captured', 'refunded', 'partially_refunded') then t."amount" else 0 end);`);
+  }
+  down() {
+    this.addSql(`alter table "gateway_payment_operations" drop column "reserved_amount";`);
+    this.addSql(`alter table "gateway_transactions" drop column "captured_amount";`);
+  }
+}
+export {
+  Migration20260725101500_payment_gateways
+};
+//# sourceMappingURL=Migration20260725101500_payment_gateways.js.map

package/dist/modules/payment_gateways/migrations/Migration20260725101500_payment_gateways.js.map ADDED Viewed

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/payment_gateways/migrations/Migration20260725101500_payment_gateways.ts"],
+  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260725101500_payment_gateways extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`alter table \"gateway_transactions\" add column \"captured_amount\" numeric(18,4) not null default '0';`);\n    this.addSql(`alter table \"gateway_payment_operations\" add column \"reserved_amount\" numeric(18,4) null;`);\n    // Backfill the captured-to-date ledger from the succeeded capture operations, which are the\n    // only capture path since the payment operation ledger landed. Transactions captured before\n    // that (no succeeded capture rows) fall back to their full amount when their status says the\n    // money was taken. A historical `partially_captured` transaction has no recoverable captured\n    // amount, so it starts at 0 and can still be over-captured once.\n    this.addSql(`update \"gateway_transactions\" as t set \"captured_amount\" = coalesce((select sum((o.\"result\"->>'capturedAmount')::numeric) from \"gateway_payment_operations\" as o where o.\"transaction_id\" = t.\"id\" and o.\"operation_type\" = 'capture' and o.\"status\" = 'succeeded'), case when t.\"unified_status\" in ('captured', 'refunded', 'partially_refunded') then t.\"amount\" else 0 end);`);\n  }\n\n  override down(): void | Promise<void> {\n    this.addSql(`alter table \"gateway_payment_operations\" drop column \"reserved_amount\";`);\n    this.addSql(`alter table \"gateway_transactions\" drop column \"captured_amount\";`);\n  }\n\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,iDAAiD,UAAU;AAAA,EAE7D,KAA2B;AAClC,SAAK,OAAO,qGAAqG;AACjH,SAAK,OAAO,2FAA2F;AAMvG,SAAK,OAAO,kXAAkX;AAAA,EAChY;AAAA,EAES,OAA6B;AACpC,SAAK,OAAO,yEAAyE;AACrF,SAAK,OAAO,mEAAmE;AAAA,EACjF;AAEF;",
+  "names": []
+}

package/dist/modules/query_index/lib/indexer.js CHANGED Viewed

@@ -2,8 +2,10 @@ import { resolveEntityTableName } from "@open-mercato/shared/lib/query/engine";
 import { resolveTenantEncryptionService } from "@open-mercato/shared/lib/encryption/customFieldValues";
 import { decryptIndexDocForSearch, encryptIndexDocForStorage } from "@open-mercato/shared/lib/encryption/indexDoc";
 import { sql } from "kysely";
+import { createLogger } from "@open-mercato/shared/lib/logger";
 import { replaceSearchTokensForRecord, deleteSearchTokensForRecord } from "./search-tokens.js";
 import { attachAggregateSearchField } from "./document.js";
+const logger = createLogger("query_index").child({ component: "indexer" });
 async function buildIndexDoc(em, params) {
   const db = em.getKysely();
   const baseTable = resolveEntityTableName(em, params.entityType);
@@ -77,8 +79,8 @@ async function buildIndexDoc(em, params) {
     }
   } catch {
   }
+  doc = attachAggregateSearchField(doc);
   try {
-    doc = attachAggregateSearchField(doc);
     const encryption = resolveTenantEncryptionService(em);
     doc = await encryptIndexDocForStorage(
       params.entityType,
@@ -86,7 +88,15 @@ async function buildIndexDoc(em, params) {
       { tenantId: params.tenantId ?? null, organizationId: params.organizationId ?? null },
       encryption
     );
-  } catch {
+  } catch (error) {
+    logger.error("Index document encryption failed; refusing to return an unencrypted document", {
+      entityType: params.entityType,
+      recordId: params.recordId,
+      tenantId: params.tenantId ?? null,
+      organizationId: params.organizationId ?? null,
+      err: error
+    });
+    throw error;
   }
   return doc;
 }

package/dist/modules/query_index/lib/indexer.js.map CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/query_index/lib/indexer.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { resolveEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport { decryptIndexDocForSearch, encryptIndexDocForStorage } from '@open-mercato/shared/lib/encryption/indexDoc'\nimport { sql } from 'kysely'\nimport { replaceSearchTokensForRecord, deleteSearchTokensForRecord } from './search-tokens'\nimport { attachAggregateSearchField } from './document'\n\ntype BuildDocParams = {\n  entityType: string // '<module>:<entity>'\n  recordId: string\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport async function buildIndexDoc(em: EntityManager, params: BuildDocParams): Promise<Record<string, any> | null> {\n  const db = (em as any).getKysely()\n  const baseTable = resolveEntityTableName(em, params.entityType)\n\n  // Fetch base row\n  const baseRow = await db\n    .selectFrom(baseTable as any)\n    .selectAll()\n    .where('id' as any, '=', params.recordId)\n    .executeTakeFirst() as Record<string, any> | undefined\n  if (!baseRow) return null\n  const docSources: Array<Record<string, any>> = []\n\n  // Attach the core customer entity when indexing customer profiles so search tokens see the combined row\n  let parentEntityRow: Record<string, any> | null = null\n  if (params.entityType === 'customers:customer_person_profile' || params.entityType === 'customers:customer_company_profile') {\n    const entityId = (baseRow as any).entity_id ?? (baseRow as any).entityId\n    if (entityId) {\n      const entityRow = await db\n        .selectFrom('customer_entities' as any)\n        .selectAll()\n        .where('id' as any, '=', entityId)\n        .executeTakeFirst() as Record<string, any> | undefined\n      if (entityRow) {\n        docSources.push(entityRow)\n        parentEntityRow = entityRow\n      }\n    }\n  }\n  void parentEntityRow\n\n  // Build base document (snake_case keys as in DB)\n  let doc: Record<string, any> = {}\n  docSources.push(baseRow)\n  for (const source of docSources) {\n    for (const [k, v] of Object.entries(source)) doc[k] = v\n  }\n\n  // Attach custom fields under flat keys 'cf:<key>'\n  let cfQuery = db\n    .selectFrom('custom_field_values' as any)\n    .select([\n      'field_key' as any,\n      'value_text' as any,\n      'value_multiline' as any,\n      'value_int' as any,\n      'value_float' as any,\n      'value_bool' as any,\n    ])\n    .where('entity_id' as any, '=', params.entityType)\n    .where('record_id' as any, '=', String(params.recordId))\n\n  if (params.organizationId != null) {\n    cfQuery = cfQuery.where((eb: any) => eb.or([\n      eb('organization_id' as any, '=', params.organizationId),\n      eb('organization_id' as any, 'is', null),\n    ]))\n  } else {\n    cfQuery = cfQuery.where('organization_id' as any, 'is', null)\n  }\n\n  if (params.tenantId != null) {\n    cfQuery = cfQuery.where((eb: any) => eb.or([\n      eb('tenant_id' as any, '=', params.tenantId),\n      eb('tenant_id' as any, 'is', null),\n    ]))\n  } else {\n    cfQuery = cfQuery.where('tenant_id' as any, 'is', null)\n  }\n\n  const cfRows = await cfQuery.execute() as Array<Record<string, any>>\n\n  const cfMap: Record<string, any[]> = {}\n  for (const r of cfRows) {\n    const key = String(r.field_key)\n    const cfKey = `cf:${key}`\n    const val = r.value_bool ?? r.value_int ?? r.value_float ?? r.value_text ?? r.value_multiline ?? null\n    if (!cfMap[cfKey]) cfMap[cfKey] = []\n    cfMap[cfKey].push(val)\n  }\n  for (const [key, arr] of Object.entries(cfMap)) {\n    // Store singletons as simple value; multis as array\n    doc[key] = arr.length <= 1 ? arr[0] : arr\n  }\n\n  // Attach translations under flat keys 'l10n:{locale}:{field}'\n  try {\n    const translationRow = await db\n      .selectFrom('entity_translations' as any)\n      .select(['translations' as any])\n      .where('entity_type' as any, '=', params.entityType)\n      .where('entity_id' as any, '=', String(params.recordId))\n      .where(sql`tenant_id is not distinct from ${params.tenantId ?? null}`)\n      .where(sql`organization_id is not distinct from ${params.organizationId ?? null}`)\n      .executeTakeFirst() as { translations: Record<string, Record<string, unknown>> | null } | undefined\n\n    if (translationRow?.translations && typeof translationRow.translations === 'object') {\n      for (const [locale, fields] of Object.entries(translationRow.translations)) {\n        if (!fields || typeof fields !== 'object') continue\n        for (const [field, value] of Object.entries(fields as Record<string, unknown>)) {\n          if (typeof value === 'string' && value.length > 0) {\n            doc[`l10n:${locale}:${field}`] = value\n          }\n        }\n      }\n    }\n  } catch {}\n\n  try {\n    doc = attachAggregateSearchField(doc)\n    const encryption = resolveTenantEncryptionService(em as any)\n    doc = await encryptIndexDocForStorage(\n      params.entityType,\n      doc,\n      { tenantId: params.tenantId ?? null, organizationId: params.organizationId ?? null },\n      encryption,\n    )\n  } catch {}\n\n  return doc\n}\n\nexport type UpsertIndexResult = {\n  doc: Record<string, any> | null\n  existed: boolean\n  wasDeleted: boolean\n  created: boolean\n  revived: boolean\n}\n\nfunction scopeEntityIndexes<QB extends { where: (...args: any[]) => QB }>(\n  q: QB,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null },\n): QB {\n  let chain = q.where('entity_type' as any, '=', args.entityType)\n  chain = chain.where('entity_id' as any, '=', String(args.recordId))\n  chain = args.organizationId == null\n    ? chain.where('organization_id' as any, 'is', null as any)\n    : chain.where('organization_id' as any, '=', args.organizationId)\n  chain = chain.where(sql`tenant_id is not distinct from ${args.tenantId ?? null}`)\n  return chain\n}\n\nexport async function upsertIndexRow(\n  em: EntityManager,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null; searchTokenDoc?: Record<string, unknown> | null; deferSearchTokens?: boolean }\n): Promise<UpsertIndexResult> {\n  const db = (em as any).getKysely()\n\n  const existing = await scopeEntityIndexes(\n    db.selectFrom('entity_indexes' as any).select(['id' as any, 'deleted_at' as any]),\n    args,\n  ).executeTakeFirst() as { id: string; deleted_at: Date | null } | undefined\n\n  const existed = !!existing\n  const wasDeleted = !!existing && existing.deleted_at != null\n\n  const doc = await buildIndexDoc(em, args)\n  if (!doc) {\n    // When the caller defers token work it owns the matching token cleanup; the\n    // projection-row removal below stays synchronous so list reads converge immediately.\n    if (!args.deferSearchTokens) {\n      try {\n        await reindexSearchTokensForRecord(em, {\n          entityType: args.entityType,\n          recordId: args.recordId,\n          organizationId: args.organizationId ?? null,\n          tenantId: args.tenantId ?? null,\n          doc: null,\n        })\n      } catch {}\n    }\n    if (existed) {\n      await scopeEntityIndexes(\n        db.deleteFrom('entity_indexes' as any) as any,\n        args,\n      ).execute()\n    }\n    return { doc: null, existed, wasDeleted, created: false, revived: false }\n  }\n\n  const payload = {\n    entity_type: args.entityType,\n    entity_id: String(args.recordId),\n    organization_id: args.organizationId ?? null,\n    tenant_id: args.tenantId ?? null,\n    doc: sql`${JSON.stringify(doc)}::jsonb`,\n    index_version: 1,\n    updated_at: sql`now()`,\n    deleted_at: null,\n  }\n\n  // Prefer modern upsert keyed by coalesced org id when available; fallback to update-then-insert\n  try {\n    await db\n      .insertInto('entity_indexes' as any)\n      .values({ ...payload, created_at: sql`now()` } as any)\n      .onConflict((oc: any) => oc\n        .columns(['entity_type', 'entity_id', 'organization_id_coalesced'])\n        .doUpdateSet({\n          tenant_id: args.tenantId ?? null,\n          doc: sql`${JSON.stringify(doc)}::jsonb`,\n          index_version: 1,\n          updated_at: sql`now()`,\n          deleted_at: null,\n        } as any))\n      .execute()\n  } catch {\n    // Fallback for schemas without organization_id_coalesced column/index\n    const updated = await scopeEntityIndexes(\n      db.updateTable('entity_indexes' as any).set(payload as any) as any,\n      args,\n    ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n    if (!updated || Number(updated.numUpdatedRows ?? 0) === 0) {\n      try {\n        await db\n          .insertInto('entity_indexes' as any)\n          .values({ ...payload, created_at: sql`now()` } as any)\n          .execute()\n      } catch {}\n    }\n  }\n\n  const created = !existed\n  const revived = existed && wasDeleted\n  // The search-token rebuild (DELETE + chunked INSERT) is the heavy tail of indexing.\n  // Callers that defer it (the upsert subscriber) run `reindexSearchTokensForRecord`\n  // asynchronously after this projection update so write latency stays bounded.\n  if (!args.deferSearchTokens) {\n    try {\n      await reindexSearchTokensForRecord(em, {\n        entityType: args.entityType,\n        recordId: args.recordId,\n        organizationId: args.organizationId ?? null,\n        tenantId: args.tenantId ?? null,\n        doc,\n        searchTokenDoc: args.searchTokenDoc ?? null,\n      })\n    } catch {}\n  }\n  return { doc, existed, wasDeleted, created, revived }\n}\n\n/**\n * Rebuilds (or clears, when `doc` is null) the search-token rows for a single record.\n * This is the asynchronous-friendly tail of `upsertIndexRow`: it does not touch the\n * `entity_indexes` projection that list endpoints read, so it can run out-of-band\n * without making query-index reads inconsistent.\n */\nexport async function reindexSearchTokensForRecord(\n  em: EntityManager,\n  args: {\n    entityType: string\n    recordId: string\n    organizationId?: string | null\n    tenantId?: string | null\n    doc: Record<string, any> | null\n    searchTokenDoc?: Record<string, unknown> | null\n  },\n): Promise<void> {\n  const db = (em as any).getKysely()\n  if (!args.doc) {\n    await deleteSearchTokensForRecord(db, {\n      entityType: args.entityType,\n      recordId: args.recordId,\n      organizationId: args.organizationId ?? null,\n      tenantId: args.tenantId ?? null,\n    })\n    return\n  }\n  const tokenDoc = args.searchTokenDoc ?? (() => {\n    const encryption = resolveTenantEncryptionService(em as any)\n    const dekKeyCache = new Map<string | null, string | null>()\n    return decryptIndexDocForSearch(\n      args.entityType,\n      args.doc,\n      { tenantId: args.tenantId ?? null, organizationId: args.organizationId ?? null },\n      encryption,\n      dekKeyCache,\n    )\n  })()\n  await replaceSearchTokensForRecord(db, {\n    entityType: args.entityType,\n    recordId: args.recordId,\n    organizationId: args.organizationId ?? null,\n    tenantId: args.tenantId ?? null,\n    doc: await tokenDoc,\n  })\n}\n\nexport async function markDeleted(\n  em: EntityManager,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null }\n): Promise<{ wasActive: boolean }> {\n  const db = (em as any).getKysely()\n  const existing = await scopeEntityIndexes(\n    db.selectFrom('entity_indexes' as any).select(['deleted_at' as any]),\n    args,\n  ).executeTakeFirst() as { deleted_at: Date | null } | undefined\n\n  const wasActive = !!existing && existing.deleted_at == null\n\n  if (existing) {\n    try {\n      await deleteSearchTokensForRecord(db, {\n        entityType: args.entityType,\n        recordId: args.recordId,\n        organizationId: args.organizationId ?? null,\n        tenantId: args.tenantId ?? null,\n      })\n    } catch {}\n    await scopeEntityIndexes(\n      db.deleteFrom('entity_indexes' as any) as any,\n      args,\n    ).execute()\n  }\n\n  return { wasActive }\n}\n"],
-  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,sCAAsC;AAC/C,SAAS,0BAA0B,iCAAiC;AACpE,SAAS,WAAW;AACpB,SAAS,8BAA8B,mCAAmC;AAC1E,SAAS,kCAAkC;AAS3C,eAAsB,cAAc,IAAmB,QAA6D;AAClH,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,YAAY,uBAAuB,IAAI,OAAO,UAAU;AAG9D,QAAM,UAAU,MAAM,GACnB,WAAW,SAAgB,EAC3B,UAAU,EACV,MAAM,MAAa,KAAK,OAAO,QAAQ,EACvC,iBAAiB;AACpB,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAyC,CAAC;AAGhD,MAAI,kBAA8C;AAClD,MAAI,OAAO,eAAe,uCAAuC,OAAO,eAAe,sCAAsC;AAC3H,UAAM,WAAY,QAAgB,aAAc,QAAgB;AAChE,QAAI,UAAU;AACZ,YAAM,YAAY,MAAM,GACrB,WAAW,mBAA0B,EACrC,UAAU,EACV,MAAM,MAAa,KAAK,QAAQ,EAChC,iBAAiB;AACpB,UAAI,WAAW;AACb,mBAAW,KAAK,SAAS;AACzB,0BAAkB;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AACA,OAAK;AAGL,MAAI,MAA2B,CAAC;AAChC,aAAW,KAAK,OAAO;AACvB,aAAW,UAAU,YAAY;AAC/B,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,EAAG,KAAI,CAAC,IAAI;AAAA,EACxD;AAGA,MAAI,UAAU,GACX,WAAW,qBAA4B,EACvC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,aAAoB,KAAK,OAAO,UAAU,EAChD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC;AAEzD,MAAI,OAAO,kBAAkB,MAAM;AACjC,cAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,MACzC,GAAG,mBAA0B,KAAK,OAAO,cAAc;AAAA,MACvD,GAAG,mBAA0B,MAAM,IAAI;AAAA,IACzC,CAAC,CAAC;AAAA,EACJ,OAAO;AACL,cAAU,QAAQ,MAAM,mBAA0B,MAAM,IAAI;AAAA,EAC9D;AAEA,MAAI,OAAO,YAAY,MAAM;AAC3B,cAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,MACzC,GAAG,aAAoB,KAAK,OAAO,QAAQ;AAAA,MAC3C,GAAG,aAAoB,MAAM,IAAI;AAAA,IACnC,CAAC,CAAC;AAAA,EACJ,OAAO;AACL,cAAU,QAAQ,MAAM,aAAoB,MAAM,IAAI;AAAA,EACxD;AAEA,QAAM,SAAS,MAAM,QAAQ,QAAQ;AAErC,QAAM,QAA+B,CAAC;AACtC,aAAW,KAAK,QAAQ;AACtB,UAAM,MAAM,OAAO,EAAE,SAAS;AAC9B,UAAM,QAAQ,MAAM,GAAG;AACvB,UAAM,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB;AACjG,QAAI,CAAC,MAAM,KAAK,EAAG,OAAM,KAAK,IAAI,CAAC;AACnC,UAAM,KAAK,EAAE,KAAK,GAAG;AAAA,EACvB;AACA,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAE9C,QAAI,GAAG,IAAI,IAAI,UAAU,IAAI,IAAI,CAAC,IAAI;AAAA,EACxC;AAGA,MAAI;AACF,UAAM,iBAAiB,MAAM,GAC1B,WAAW,qBAA4B,EACvC,OAAO,CAAC,cAAqB,CAAC,EAC9B,MAAM,eAAsB,KAAK,OAAO,UAAU,EAClD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC,EACtD,MAAM,qCAAqC,OAAO,YAAY,IAAI,EAAE,EACpE,MAAM,2CAA2C,OAAO,kBAAkB,IAAI,EAAE,EAChF,iBAAiB;AAEpB,QAAI,gBAAgB,gBAAgB,OAAO,eAAe,iBAAiB,UAAU;AACnF,iBAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,eAAe,YAAY,GAAG;AAC1E,YAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,mBAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC9E,cAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,gBAAI,QAAQ,MAAM,IAAI,KAAK,EAAE,IAAI;AAAA,UACnC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAAC;AAET,MAAI;AACF,UAAM,2BAA2B,GAAG;AACpC,UAAM,aAAa,+BAA+B,EAAS;AAC3D,UAAM,MAAM;AAAA,MACV,OAAO;AAAA,MACP;AAAA,MACA,EAAE,UAAU,OAAO,YAAY,MAAM,gBAAgB,OAAO,kBAAkB,KAAK;AAAA,MACnF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAAC;AAET,SAAO;AACT;AAUA,SAAS,mBACP,GACA,MACI;AACJ,MAAI,QAAQ,EAAE,MAAM,eAAsB,KAAK,KAAK,UAAU;AAC9D,UAAQ,MAAM,MAAM,aAAoB,KAAK,OAAO,KAAK,QAAQ,CAAC;AAClE,UAAQ,KAAK,kBAAkB,OAC3B,MAAM,MAAM,mBAA0B,MAAM,IAAW,IACvD,MAAM,MAAM,mBAA0B,KAAK,KAAK,cAAc;AAClE,UAAQ,MAAM,MAAM,qCAAqC,KAAK,YAAY,IAAI,EAAE;AAChF,SAAO;AACT;AAEA,eAAsB,eACpB,IACA,MAC4B;AAC5B,QAAM,KAAM,GAAW,UAAU;AAEjC,QAAM,WAAW,MAAM;AAAA,IACrB,GAAG,WAAW,gBAAuB,EAAE,OAAO,CAAC,MAAa,YAAmB,CAAC;AAAA,IAChF;AAAA,EACF,EAAE,iBAAiB;AAEnB,QAAM,UAAU,CAAC,CAAC;AAClB,QAAM,aAAa,CAAC,CAAC,YAAY,SAAS,cAAc;AAExD,QAAM,MAAM,MAAM,cAAc,IAAI,IAAI;AACxC,MAAI,CAAC,KAAK;AAGR,QAAI,CAAC,KAAK,mBAAmB;AAC3B,UAAI;AACF,cAAM,6BAA6B,IAAI;AAAA,UACrC,YAAY,KAAK;AAAA,UACjB,UAAU,KAAK;AAAA,UACf,gBAAgB,KAAK,kBAAkB;AAAA,UACvC,UAAU,KAAK,YAAY;AAAA,UAC3B,KAAK;AAAA,QACP,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AACA,QAAI,SAAS;AACX,YAAM;AAAA,QACJ,GAAG,WAAW,gBAAuB;AAAA,QACrC;AAAA,MACF,EAAE,QAAQ;AAAA,IACZ;AACA,WAAO,EAAE,KAAK,MAAM,SAAS,YAAY,SAAS,OAAO,SAAS,MAAM;AAAA,EAC1E;AAEA,QAAM,UAAU;AAAA,IACd,aAAa,KAAK;AAAA,IAClB,WAAW,OAAO,KAAK,QAAQ;AAAA,IAC/B,iBAAiB,KAAK,kBAAkB;AAAA,IACxC,WAAW,KAAK,YAAY;AAAA,IAC5B,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,IAC9B,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,YAAY;AAAA,EACd;AAGA,MAAI;AACF,UAAM,GACH,WAAW,gBAAuB,EAClC,OAAO,EAAE,GAAG,SAAS,YAAY,WAAW,CAAQ,EACpD,WAAW,CAAC,OAAY,GACtB,QAAQ,CAAC,eAAe,aAAa,2BAA2B,CAAC,EACjE,YAAY;AAAA,MACX,WAAW,KAAK,YAAY;AAAA,MAC5B,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,MAC9B,eAAe;AAAA,MACf,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAQ,CAAC,EACV,QAAQ;AAAA,EACb,QAAQ;AAEN,UAAM,UAAU,MAAM;AAAA,MACpB,GAAG,YAAY,gBAAuB,EAAE,IAAI,OAAc;AAAA,MAC1D;AAAA,IACF,EAAE,iBAAiB;AACnB,QAAI,CAAC,WAAW,OAAO,QAAQ,kBAAkB,CAAC,MAAM,GAAG;AACzD,UAAI;AACF,cAAM,GACH,WAAW,gBAAuB,EAClC,OAAO,EAAE,GAAG,SAAS,YAAY,WAAW,CAAQ,EACpD,QAAQ;AAAA,MACb,QAAQ;AAAA,MAAC;AAAA,IACX;AAAA,EACF;AAEA,QAAM,UAAU,CAAC;AACjB,QAAM,UAAU,WAAW;AAI3B,MAAI,CAAC,KAAK,mBAAmB;AAC3B,QAAI;AACF,YAAM,6BAA6B,IAAI;AAAA,QACrC,YAAY,KAAK;AAAA,QACjB,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,UAAU,KAAK,YAAY;AAAA,QAC3B;AAAA,QACA,gBAAgB,KAAK,kBAAkB;AAAA,MACzC,CAAC;AAAA,IACH,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,SAAO,EAAE,KAAK,SAAS,YAAY,SAAS,QAAQ;AACtD;AAQA,eAAsB,6BACpB,IACA,MAQe;AACf,QAAM,KAAM,GAAW,UAAU;AACjC,MAAI,CAAC,KAAK,KAAK;AACb,UAAM,4BAA4B,IAAI;AAAA,MACpC,YAAY,KAAK;AAAA,MACjB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK,kBAAkB;AAAA,MACvC,UAAU,KAAK,YAAY;AAAA,IAC7B,CAAC;AACD;AAAA,EACF;AACA,QAAM,WAAW,KAAK,mBAAmB,MAAM;AAC7C,UAAM,aAAa,+BAA+B,EAAS;AAC3D,UAAM,cAAc,oBAAI,IAAkC;AAC1D,WAAO;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,kBAAkB,KAAK;AAAA,MAC/E;AAAA,MACA;AAAA,IACF;AAAA,EACF,GAAG;AACH,QAAM,6BAA6B,IAAI;AAAA,IACrC,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK,kBAAkB;AAAA,IACvC,UAAU,KAAK,YAAY;AAAA,IAC3B,KAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEA,eAAsB,YACpB,IACA,MACiC;AACjC,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,WAAW,MAAM;AAAA,IACrB,GAAG,WAAW,gBAAuB,EAAE,OAAO,CAAC,YAAmB,CAAC;AAAA,IACnE;AAAA,EACF,EAAE,iBAAiB;AAEnB,QAAM,YAAY,CAAC,CAAC,YAAY,SAAS,cAAc;AAEvD,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,4BAA4B,IAAI;AAAA,QACpC,YAAY,KAAK;AAAA,QACjB,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,UAAU,KAAK,YAAY;AAAA,MAC7B,CAAC;AAAA,IACH,QAAQ;AAAA,IAAC;AACT,UAAM;AAAA,MACJ,GAAG,WAAW,gBAAuB;AAAA,MACrC;AAAA,IACF,EAAE,QAAQ;AAAA,EACZ;AAEA,SAAO,EAAE,UAAU;AACrB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { resolveEntityTableName } from '@open-mercato/shared/lib/query/engine'\nimport { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport { decryptIndexDocForSearch, encryptIndexDocForStorage } from '@open-mercato/shared/lib/encryption/indexDoc'\nimport { sql } from 'kysely'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { replaceSearchTokensForRecord, deleteSearchTokensForRecord } from './search-tokens'\nimport { attachAggregateSearchField } from './document'\n\nconst logger = createLogger('query_index').child({ component: 'indexer' })\n\ntype BuildDocParams = {\n  entityType: string // '<module>:<entity>'\n  recordId: string\n  organizationId?: string | null\n  tenantId?: string | null\n}\n\nexport async function buildIndexDoc(em: EntityManager, params: BuildDocParams): Promise<Record<string, any> | null> {\n  const db = (em as any).getKysely()\n  const baseTable = resolveEntityTableName(em, params.entityType)\n\n  // Fetch base row\n  const baseRow = await db\n    .selectFrom(baseTable as any)\n    .selectAll()\n    .where('id' as any, '=', params.recordId)\n    .executeTakeFirst() as Record<string, any> | undefined\n  if (!baseRow) return null\n  const docSources: Array<Record<string, any>> = []\n\n  // Attach the core customer entity when indexing customer profiles so search tokens see the combined row\n  let parentEntityRow: Record<string, any> | null = null\n  if (params.entityType === 'customers:customer_person_profile' || params.entityType === 'customers:customer_company_profile') {\n    const entityId = (baseRow as any).entity_id ?? (baseRow as any).entityId\n    if (entityId) {\n      const entityRow = await db\n        .selectFrom('customer_entities' as any)\n        .selectAll()\n        .where('id' as any, '=', entityId)\n        .executeTakeFirst() as Record<string, any> | undefined\n      if (entityRow) {\n        docSources.push(entityRow)\n        parentEntityRow = entityRow\n      }\n    }\n  }\n  void parentEntityRow\n\n  // Build base document (snake_case keys as in DB)\n  let doc: Record<string, any> = {}\n  docSources.push(baseRow)\n  for (const source of docSources) {\n    for (const [k, v] of Object.entries(source)) doc[k] = v\n  }\n\n  // Attach custom fields under flat keys 'cf:<key>'\n  let cfQuery = db\n    .selectFrom('custom_field_values' as any)\n    .select([\n      'field_key' as any,\n      'value_text' as any,\n      'value_multiline' as any,\n      'value_int' as any,\n      'value_float' as any,\n      'value_bool' as any,\n    ])\n    .where('entity_id' as any, '=', params.entityType)\n    .where('record_id' as any, '=', String(params.recordId))\n\n  if (params.organizationId != null) {\n    cfQuery = cfQuery.where((eb: any) => eb.or([\n      eb('organization_id' as any, '=', params.organizationId),\n      eb('organization_id' as any, 'is', null),\n    ]))\n  } else {\n    cfQuery = cfQuery.where('organization_id' as any, 'is', null)\n  }\n\n  if (params.tenantId != null) {\n    cfQuery = cfQuery.where((eb: any) => eb.or([\n      eb('tenant_id' as any, '=', params.tenantId),\n      eb('tenant_id' as any, 'is', null),\n    ]))\n  } else {\n    cfQuery = cfQuery.where('tenant_id' as any, 'is', null)\n  }\n\n  const cfRows = await cfQuery.execute() as Array<Record<string, any>>\n\n  const cfMap: Record<string, any[]> = {}\n  for (const r of cfRows) {\n    const key = String(r.field_key)\n    const cfKey = `cf:${key}`\n    const val = r.value_bool ?? r.value_int ?? r.value_float ?? r.value_text ?? r.value_multiline ?? null\n    if (!cfMap[cfKey]) cfMap[cfKey] = []\n    cfMap[cfKey].push(val)\n  }\n  for (const [key, arr] of Object.entries(cfMap)) {\n    // Store singletons as simple value; multis as array\n    doc[key] = arr.length <= 1 ? arr[0] : arr\n  }\n\n  // Attach translations under flat keys 'l10n:{locale}:{field}'\n  try {\n    const translationRow = await db\n      .selectFrom('entity_translations' as any)\n      .select(['translations' as any])\n      .where('entity_type' as any, '=', params.entityType)\n      .where('entity_id' as any, '=', String(params.recordId))\n      .where(sql`tenant_id is not distinct from ${params.tenantId ?? null}`)\n      .where(sql`organization_id is not distinct from ${params.organizationId ?? null}`)\n      .executeTakeFirst() as { translations: Record<string, Record<string, unknown>> | null } | undefined\n\n    if (translationRow?.translations && typeof translationRow.translations === 'object') {\n      for (const [locale, fields] of Object.entries(translationRow.translations)) {\n        if (!fields || typeof fields !== 'object') continue\n        for (const [field, value] of Object.entries(fields as Record<string, unknown>)) {\n          if (typeof value === 'string' && value.length > 0) {\n            doc[`l10n:${locale}:${field}`] = value\n          }\n        }\n      }\n    }\n  } catch {}\n\n  // Kept outside the guard below: a failure while building the aggregate search field is a\n  // bug in the aggregation or its configuration, and must surface instead of being mistaken\n  // for an encryption failure and silently skipping encryption.\n  doc = attachAggregateSearchField(doc)\n\n  try {\n    const encryption = resolveTenantEncryptionService(em as any)\n    doc = await encryptIndexDocForStorage(\n      params.entityType,\n      doc,\n      { tenantId: params.tenantId ?? null, organizationId: params.organizationId ?? null },\n      encryption,\n    )\n  } catch (error) {\n    // `encryptIndexDocForStorage` already returns the document untouched when encryption is\n    // absent or disabled, so a throw here is always a genuine encryption failure. Returning\n    // `doc` would hand the caller the plaintext document to write into `entity_indexes`,\n    // which must stay encrypted at rest; returning `null` would mean \"record gone\" and make\n    // `upsertIndexRow` delete a healthy index row. Fail loudly instead: the projection keeps\n    // its previous, correctly encrypted contents and the `query_index.upsert_one` subscriber\n    // persists the error via `recordIndexerError`.\n    logger.error('Index document encryption failed; refusing to return an unencrypted document', {\n      entityType: params.entityType,\n      recordId: params.recordId,\n      tenantId: params.tenantId ?? null,\n      organizationId: params.organizationId ?? null,\n      err: error,\n    })\n    throw error\n  }\n\n  return doc\n}\n\nexport type UpsertIndexResult = {\n  doc: Record<string, any> | null\n  existed: boolean\n  wasDeleted: boolean\n  created: boolean\n  revived: boolean\n}\n\nfunction scopeEntityIndexes<QB extends { where: (...args: any[]) => QB }>(\n  q: QB,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null },\n): QB {\n  let chain = q.where('entity_type' as any, '=', args.entityType)\n  chain = chain.where('entity_id' as any, '=', String(args.recordId))\n  chain = args.organizationId == null\n    ? chain.where('organization_id' as any, 'is', null as any)\n    : chain.where('organization_id' as any, '=', args.organizationId)\n  chain = chain.where(sql`tenant_id is not distinct from ${args.tenantId ?? null}`)\n  return chain\n}\n\nexport async function upsertIndexRow(\n  em: EntityManager,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null; searchTokenDoc?: Record<string, unknown> | null; deferSearchTokens?: boolean }\n): Promise<UpsertIndexResult> {\n  const db = (em as any).getKysely()\n\n  const existing = await scopeEntityIndexes(\n    db.selectFrom('entity_indexes' as any).select(['id' as any, 'deleted_at' as any]),\n    args,\n  ).executeTakeFirst() as { id: string; deleted_at: Date | null } | undefined\n\n  const existed = !!existing\n  const wasDeleted = !!existing && existing.deleted_at != null\n\n  const doc = await buildIndexDoc(em, args)\n  if (!doc) {\n    // When the caller defers token work it owns the matching token cleanup; the\n    // projection-row removal below stays synchronous so list reads converge immediately.\n    if (!args.deferSearchTokens) {\n      try {\n        await reindexSearchTokensForRecord(em, {\n          entityType: args.entityType,\n          recordId: args.recordId,\n          organizationId: args.organizationId ?? null,\n          tenantId: args.tenantId ?? null,\n          doc: null,\n        })\n      } catch {}\n    }\n    if (existed) {\n      await scopeEntityIndexes(\n        db.deleteFrom('entity_indexes' as any) as any,\n        args,\n      ).execute()\n    }\n    return { doc: null, existed, wasDeleted, created: false, revived: false }\n  }\n\n  const payload = {\n    entity_type: args.entityType,\n    entity_id: String(args.recordId),\n    organization_id: args.organizationId ?? null,\n    tenant_id: args.tenantId ?? null,\n    doc: sql`${JSON.stringify(doc)}::jsonb`,\n    index_version: 1,\n    updated_at: sql`now()`,\n    deleted_at: null,\n  }\n\n  // Prefer modern upsert keyed by coalesced org id when available; fallback to update-then-insert\n  try {\n    await db\n      .insertInto('entity_indexes' as any)\n      .values({ ...payload, created_at: sql`now()` } as any)\n      .onConflict((oc: any) => oc\n        .columns(['entity_type', 'entity_id', 'organization_id_coalesced'])\n        .doUpdateSet({\n          tenant_id: args.tenantId ?? null,\n          doc: sql`${JSON.stringify(doc)}::jsonb`,\n          index_version: 1,\n          updated_at: sql`now()`,\n          deleted_at: null,\n        } as any))\n      .execute()\n  } catch {\n    // Fallback for schemas without organization_id_coalesced column/index\n    const updated = await scopeEntityIndexes(\n      db.updateTable('entity_indexes' as any).set(payload as any) as any,\n      args,\n    ).executeTakeFirst() as { numUpdatedRows?: bigint | number } | undefined\n    if (!updated || Number(updated.numUpdatedRows ?? 0) === 0) {\n      try {\n        await db\n          .insertInto('entity_indexes' as any)\n          .values({ ...payload, created_at: sql`now()` } as any)\n          .execute()\n      } catch {}\n    }\n  }\n\n  const created = !existed\n  const revived = existed && wasDeleted\n  // The search-token rebuild (DELETE + chunked INSERT) is the heavy tail of indexing.\n  // Callers that defer it (the upsert subscriber) run `reindexSearchTokensForRecord`\n  // asynchronously after this projection update so write latency stays bounded.\n  if (!args.deferSearchTokens) {\n    try {\n      await reindexSearchTokensForRecord(em, {\n        entityType: args.entityType,\n        recordId: args.recordId,\n        organizationId: args.organizationId ?? null,\n        tenantId: args.tenantId ?? null,\n        doc,\n        searchTokenDoc: args.searchTokenDoc ?? null,\n      })\n    } catch {}\n  }\n  return { doc, existed, wasDeleted, created, revived }\n}\n\n/**\n * Rebuilds (or clears, when `doc` is null) the search-token rows for a single record.\n * This is the asynchronous-friendly tail of `upsertIndexRow`: it does not touch the\n * `entity_indexes` projection that list endpoints read, so it can run out-of-band\n * without making query-index reads inconsistent.\n */\nexport async function reindexSearchTokensForRecord(\n  em: EntityManager,\n  args: {\n    entityType: string\n    recordId: string\n    organizationId?: string | null\n    tenantId?: string | null\n    doc: Record<string, any> | null\n    searchTokenDoc?: Record<string, unknown> | null\n  },\n): Promise<void> {\n  const db = (em as any).getKysely()\n  if (!args.doc) {\n    await deleteSearchTokensForRecord(db, {\n      entityType: args.entityType,\n      recordId: args.recordId,\n      organizationId: args.organizationId ?? null,\n      tenantId: args.tenantId ?? null,\n    })\n    return\n  }\n  const tokenDoc = args.searchTokenDoc ?? (() => {\n    const encryption = resolveTenantEncryptionService(em as any)\n    const dekKeyCache = new Map<string | null, string | null>()\n    return decryptIndexDocForSearch(\n      args.entityType,\n      args.doc,\n      { tenantId: args.tenantId ?? null, organizationId: args.organizationId ?? null },\n      encryption,\n      dekKeyCache,\n    )\n  })()\n  await replaceSearchTokensForRecord(db, {\n    entityType: args.entityType,\n    recordId: args.recordId,\n    organizationId: args.organizationId ?? null,\n    tenantId: args.tenantId ?? null,\n    doc: await tokenDoc,\n  })\n}\n\nexport async function markDeleted(\n  em: EntityManager,\n  args: { entityType: string; recordId: string; organizationId?: string | null; tenantId?: string | null }\n): Promise<{ wasActive: boolean }> {\n  const db = (em as any).getKysely()\n  const existing = await scopeEntityIndexes(\n    db.selectFrom('entity_indexes' as any).select(['deleted_at' as any]),\n    args,\n  ).executeTakeFirst() as { deleted_at: Date | null } | undefined\n\n  const wasActive = !!existing && existing.deleted_at == null\n\n  if (existing) {\n    try {\n      await deleteSearchTokensForRecord(db, {\n        entityType: args.entityType,\n        recordId: args.recordId,\n        organizationId: args.organizationId ?? null,\n        tenantId: args.tenantId ?? null,\n      })\n    } catch {}\n    await scopeEntityIndexes(\n      db.deleteFrom('entity_indexes' as any) as any,\n      args,\n    ).execute()\n  }\n\n  return { wasActive }\n}\n"],
+  "mappings": "AACA,SAAS,8BAA8B;AACvC,SAAS,sCAAsC;AAC/C,SAAS,0BAA0B,iCAAiC;AACpE,SAAS,WAAW;AACpB,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B,mCAAmC;AAC1E,SAAS,kCAAkC;AAE3C,MAAM,SAAS,aAAa,aAAa,EAAE,MAAM,EAAE,WAAW,UAAU,CAAC;AASzE,eAAsB,cAAc,IAAmB,QAA6D;AAClH,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,YAAY,uBAAuB,IAAI,OAAO,UAAU;AAG9D,QAAM,UAAU,MAAM,GACnB,WAAW,SAAgB,EAC3B,UAAU,EACV,MAAM,MAAa,KAAK,OAAO,QAAQ,EACvC,iBAAiB;AACpB,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,aAAyC,CAAC;AAGhD,MAAI,kBAA8C;AAClD,MAAI,OAAO,eAAe,uCAAuC,OAAO,eAAe,sCAAsC;AAC3H,UAAM,WAAY,QAAgB,aAAc,QAAgB;AAChE,QAAI,UAAU;AACZ,YAAM,YAAY,MAAM,GACrB,WAAW,mBAA0B,EACrC,UAAU,EACV,MAAM,MAAa,KAAK,QAAQ,EAChC,iBAAiB;AACpB,UAAI,WAAW;AACb,mBAAW,KAAK,SAAS;AACzB,0BAAkB;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AACA,OAAK;AAGL,MAAI,MAA2B,CAAC;AAChC,aAAW,KAAK,OAAO;AACvB,aAAW,UAAU,YAAY;AAC/B,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,EAAG,KAAI,CAAC,IAAI;AAAA,EACxD;AAGA,MAAI,UAAU,GACX,WAAW,qBAA4B,EACvC,OAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,EACA,MAAM,aAAoB,KAAK,OAAO,UAAU,EAChD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC;AAEzD,MAAI,OAAO,kBAAkB,MAAM;AACjC,cAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,MACzC,GAAG,mBAA0B,KAAK,OAAO,cAAc;AAAA,MACvD,GAAG,mBAA0B,MAAM,IAAI;AAAA,IACzC,CAAC,CAAC;AAAA,EACJ,OAAO;AACL,cAAU,QAAQ,MAAM,mBAA0B,MAAM,IAAI;AAAA,EAC9D;AAEA,MAAI,OAAO,YAAY,MAAM;AAC3B,cAAU,QAAQ,MAAM,CAAC,OAAY,GAAG,GAAG;AAAA,MACzC,GAAG,aAAoB,KAAK,OAAO,QAAQ;AAAA,MAC3C,GAAG,aAAoB,MAAM,IAAI;AAAA,IACnC,CAAC,CAAC;AAAA,EACJ,OAAO;AACL,cAAU,QAAQ,MAAM,aAAoB,MAAM,IAAI;AAAA,EACxD;AAEA,QAAM,SAAS,MAAM,QAAQ,QAAQ;AAErC,QAAM,QAA+B,CAAC;AACtC,aAAW,KAAK,QAAQ;AACtB,UAAM,MAAM,OAAO,EAAE,SAAS;AAC9B,UAAM,QAAQ,MAAM,GAAG;AACvB,UAAM,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB;AACjG,QAAI,CAAC,MAAM,KAAK,EAAG,OAAM,KAAK,IAAI,CAAC;AACnC,UAAM,KAAK,EAAE,KAAK,GAAG;AAAA,EACvB;AACA,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAE9C,QAAI,GAAG,IAAI,IAAI,UAAU,IAAI,IAAI,CAAC,IAAI;AAAA,EACxC;AAGA,MAAI;AACF,UAAM,iBAAiB,MAAM,GAC1B,WAAW,qBAA4B,EACvC,OAAO,CAAC,cAAqB,CAAC,EAC9B,MAAM,eAAsB,KAAK,OAAO,UAAU,EAClD,MAAM,aAAoB,KAAK,OAAO,OAAO,QAAQ,CAAC,EACtD,MAAM,qCAAqC,OAAO,YAAY,IAAI,EAAE,EACpE,MAAM,2CAA2C,OAAO,kBAAkB,IAAI,EAAE,EAChF,iBAAiB;AAEpB,QAAI,gBAAgB,gBAAgB,OAAO,eAAe,iBAAiB,UAAU;AACnF,iBAAW,CAAC,QAAQ,MAAM,KAAK,OAAO,QAAQ,eAAe,YAAY,GAAG;AAC1E,YAAI,CAAC,UAAU,OAAO,WAAW,SAAU;AAC3C,mBAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,MAAiC,GAAG;AAC9E,cAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAG;AACjD,gBAAI,QAAQ,MAAM,IAAI,KAAK,EAAE,IAAI;AAAA,UACnC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAAC;AAKT,QAAM,2BAA2B,GAAG;AAEpC,MAAI;AACF,UAAM,aAAa,+BAA+B,EAAS;AAC3D,UAAM,MAAM;AAAA,MACV,OAAO;AAAA,MACP;AAAA,MACA,EAAE,UAAU,OAAO,YAAY,MAAM,gBAAgB,OAAO,kBAAkB,KAAK;AAAA,MACnF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AAQd,WAAO,MAAM,gFAAgF;AAAA,MAC3F,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,UAAU,OAAO,YAAY;AAAA,MAC7B,gBAAgB,OAAO,kBAAkB;AAAA,MACzC,KAAK;AAAA,IACP,CAAC;AACD,UAAM;AAAA,EACR;AAEA,SAAO;AACT;AAUA,SAAS,mBACP,GACA,MACI;AACJ,MAAI,QAAQ,EAAE,MAAM,eAAsB,KAAK,KAAK,UAAU;AAC9D,UAAQ,MAAM,MAAM,aAAoB,KAAK,OAAO,KAAK,QAAQ,CAAC;AAClE,UAAQ,KAAK,kBAAkB,OAC3B,MAAM,MAAM,mBAA0B,MAAM,IAAW,IACvD,MAAM,MAAM,mBAA0B,KAAK,KAAK,cAAc;AAClE,UAAQ,MAAM,MAAM,qCAAqC,KAAK,YAAY,IAAI,EAAE;AAChF,SAAO;AACT;AAEA,eAAsB,eACpB,IACA,MAC4B;AAC5B,QAAM,KAAM,GAAW,UAAU;AAEjC,QAAM,WAAW,MAAM;AAAA,IACrB,GAAG,WAAW,gBAAuB,EAAE,OAAO,CAAC,MAAa,YAAmB,CAAC;AAAA,IAChF;AAAA,EACF,EAAE,iBAAiB;AAEnB,QAAM,UAAU,CAAC,CAAC;AAClB,QAAM,aAAa,CAAC,CAAC,YAAY,SAAS,cAAc;AAExD,QAAM,MAAM,MAAM,cAAc,IAAI,IAAI;AACxC,MAAI,CAAC,KAAK;AAGR,QAAI,CAAC,KAAK,mBAAmB;AAC3B,UAAI;AACF,cAAM,6BAA6B,IAAI;AAAA,UACrC,YAAY,KAAK;AAAA,UACjB,UAAU,KAAK;AAAA,UACf,gBAAgB,KAAK,kBAAkB;AAAA,UACvC,UAAU,KAAK,YAAY;AAAA,UAC3B,KAAK;AAAA,QACP,CAAC;AAAA,MACH,QAAQ;AAAA,MAAC;AAAA,IACX;AACA,QAAI,SAAS;AACX,YAAM;AAAA,QACJ,GAAG,WAAW,gBAAuB;AAAA,QACrC;AAAA,MACF,EAAE,QAAQ;AAAA,IACZ;AACA,WAAO,EAAE,KAAK,MAAM,SAAS,YAAY,SAAS,OAAO,SAAS,MAAM;AAAA,EAC1E;AAEA,QAAM,UAAU;AAAA,IACd,aAAa,KAAK;AAAA,IAClB,WAAW,OAAO,KAAK,QAAQ;AAAA,IAC/B,iBAAiB,KAAK,kBAAkB;AAAA,IACxC,WAAW,KAAK,YAAY;AAAA,IAC5B,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,IAC9B,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,YAAY;AAAA,EACd;AAGA,MAAI;AACF,UAAM,GACH,WAAW,gBAAuB,EAClC,OAAO,EAAE,GAAG,SAAS,YAAY,WAAW,CAAQ,EACpD,WAAW,CAAC,OAAY,GACtB,QAAQ,CAAC,eAAe,aAAa,2BAA2B,CAAC,EACjE,YAAY;AAAA,MACX,WAAW,KAAK,YAAY;AAAA,MAC5B,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,MAC9B,eAAe;AAAA,MACf,YAAY;AAAA,MACZ,YAAY;AAAA,IACd,CAAQ,CAAC,EACV,QAAQ;AAAA,EACb,QAAQ;AAEN,UAAM,UAAU,MAAM;AAAA,MACpB,GAAG,YAAY,gBAAuB,EAAE,IAAI,OAAc;AAAA,MAC1D;AAAA,IACF,EAAE,iBAAiB;AACnB,QAAI,CAAC,WAAW,OAAO,QAAQ,kBAAkB,CAAC,MAAM,GAAG;AACzD,UAAI;AACF,cAAM,GACH,WAAW,gBAAuB,EAClC,OAAO,EAAE,GAAG,SAAS,YAAY,WAAW,CAAQ,EACpD,QAAQ;AAAA,MACb,QAAQ;AAAA,MAAC;AAAA,IACX;AAAA,EACF;AAEA,QAAM,UAAU,CAAC;AACjB,QAAM,UAAU,WAAW;AAI3B,MAAI,CAAC,KAAK,mBAAmB;AAC3B,QAAI;AACF,YAAM,6BAA6B,IAAI;AAAA,QACrC,YAAY,KAAK;AAAA,QACjB,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,UAAU,KAAK,YAAY;AAAA,QAC3B;AAAA,QACA,gBAAgB,KAAK,kBAAkB;AAAA,MACzC,CAAC;AAAA,IACH,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,SAAO,EAAE,KAAK,SAAS,YAAY,SAAS,QAAQ;AACtD;AAQA,eAAsB,6BACpB,IACA,MAQe;AACf,QAAM,KAAM,GAAW,UAAU;AACjC,MAAI,CAAC,KAAK,KAAK;AACb,UAAM,4BAA4B,IAAI;AAAA,MACpC,YAAY,KAAK;AAAA,MACjB,UAAU,KAAK;AAAA,MACf,gBAAgB,KAAK,kBAAkB;AAAA,MACvC,UAAU,KAAK,YAAY;AAAA,IAC7B,CAAC;AACD;AAAA,EACF;AACA,QAAM,WAAW,KAAK,mBAAmB,MAAM;AAC7C,UAAM,aAAa,+BAA+B,EAAS;AAC3D,UAAM,cAAc,oBAAI,IAAkC;AAC1D,WAAO;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,kBAAkB,KAAK;AAAA,MAC/E;AAAA,MACA;AAAA,IACF;AAAA,EACF,GAAG;AACH,QAAM,6BAA6B,IAAI;AAAA,IACrC,YAAY,KAAK;AAAA,IACjB,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK,kBAAkB;AAAA,IACvC,UAAU,KAAK,YAAY;AAAA,IAC3B,KAAK,MAAM;AAAA,EACb,CAAC;AACH;AAEA,eAAsB,YACpB,IACA,MACiC;AACjC,QAAM,KAAM,GAAW,UAAU;AACjC,QAAM,WAAW,MAAM;AAAA,IACrB,GAAG,WAAW,gBAAuB,EAAE,OAAO,CAAC,YAAmB,CAAC;AAAA,IACnE;AAAA,EACF,EAAE,iBAAiB;AAEnB,QAAM,YAAY,CAAC,CAAC,YAAY,SAAS,cAAc;AAEvD,MAAI,UAAU;AACZ,QAAI;AACF,YAAM,4BAA4B,IAAI;AAAA,QACpC,YAAY,KAAK;AAAA,QACjB,UAAU,KAAK;AAAA,QACf,gBAAgB,KAAK,kBAAkB;AAAA,QACvC,UAAU,KAAK,YAAY;AAAA,MAC7B,CAAC;AAAA,IACH,QAAQ;AAAA,IAAC;AACT,UAAM;AAAA,MACJ,GAAG,WAAW,gBAAuB;AAAA,MACrC;AAAA,IACF,EAAE,QAAQ;AAAA,EACZ;AAEA,SAAO,EAAE,UAAU;AACrB;",
   "names": []
 }

package/dist/modules/workflows/backend/definitions/visual-editor/page.js CHANGED Viewed

@@ -9,6 +9,7 @@ import { useState, useCallback, useEffect } from "react";
 import { useRouter, useSearchParams, usePathname } from "next/navigation";
 import { graphToDefinition, definitionToGraph, validateWorkflowGraph, generateStepId, generateTransitionId, appendWorkflowEdge } from "../../../lib/graph-utils.js";
 import { performDeleteEdgeFlow, performDeleteNodeFlow } from "../../../lib/visual-editor-delete-flow.js";
+import { humanizeDefinitionIssuePath } from "../../../lib/format-validation-error.js";
 import { workflowDefinitionDataSchema } from "../../../data/validators.js";
 import { Page } from "@open-mercato/ui/backend/Page";
 import { Button } from "@open-mercato/ui/primitives/button";
@@ -268,8 +269,10 @@ function VisualEditorPage() {
     };
     const schemaResult = workflowDefinitionDataSchema.safeParse(definitionData);
     if (!schemaResult.success) {
-      const firstIssue = schemaResult.error.issues[0];
-      flash(`Schema error: ${firstIssue.path.join(".")} - ${firstIssue.message}`, "error");
+      const issues = schemaResult.error.issues;
+      const described = issues.slice(0, 3).map((issue) => `${humanizeDefinitionIssuePath(issue.path)}: ${issue.message}`);
+      const suffix = issues.length > described.length ? ` (+${issues.length - described.length} more)` : "";
+      flash(`Cannot save \u2014 ${described.join("; ")}${suffix}`, "error");
       return;
     }
     setIsSaving(true);