@open-mercato/core 0.6.7-develop.6863.1.61001cf9a8 → 0.6.7

package/dist/modules/messages/lib/participantScope.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/messages/lib/participantScope.ts"],
-  "sourcesContent": ["import type { SelectQueryBuilder } from 'kysely'\n\n/**\n * Minimal Kysely schema contract the message participant-scope predicate depends\n * on. Both the messages list route (`api/route.ts`, `all` folder) and the\n * `communication_channels.message-channel` response enricher build their\n * sender-OR-recipient access filter from {@link applyMessageParticipantScope},\n * so a column rename (`sender_user_id`, `recipient_user_id`, `deleted_at`) or a\n * change to the recipient-visibility rules updates both call sites at once\n * instead of silently desyncing the enricher's security boundary from the list\n * route (#4133, follow-up to #4099).\n */\nexport type MessagesParticipantScopeDatabase = {\n  messages: {\n    id: string\n    tenant_id: string\n    organization_id: string | null\n    sender_user_id: string\n    deleted_at: Date | null\n  }\n  message_recipients: {\n    message_id: string\n    recipient_user_id: string\n    deleted_at: Date | null\n  }\n}\n\ntype MessagesTable = MessagesParticipantScopeDatabase['messages']\ntype MessageRecipientsTable = MessagesParticipantScopeDatabase['message_recipients']\n\ntype MessagesFrom = MessagesParticipantScopeDatabase & { m: MessagesTable }\ntype MessagesJoinedFrom = MessagesFrom & { r: MessageRecipientsTable }\n\n/**\n * Apply the shared message participant-scope predicate to a query already built\n * from `messages as m`. A message is visible to `userId` when they are the\n * sender OR a non-deleted recipient. The recipient soft-delete rule\n * (`r.deleted_at is null`) lives inside the recipient join, so it is part of the\n * single source of truth \u2014 the recipient-visibility boundary cannot drift\n * between the list route and the enricher.\n *\n * Message-level tenant / organization / soft-delete scoping stays with the\n * caller (both call sites already apply it uniformly to every query), but the\n * shared {@link MessagesParticipantScopeDatabase} type keeps those column names\n * coupled at compile time as well.\n */\nexport function applyMessageParticipantScope<O>(\n  query: SelectQueryBuilder<MessagesFrom, 'm', O>,\n  userId: string,\n): SelectQueryBuilder<MessagesJoinedFrom, 'm' | 'r', O> {\n  return query\n    .leftJoin('message_recipients as r', (join) =>\n      join\n        .onRef('m.id', '=', 'r.message_id')\n        .on('r.recipient_user_id', '=', userId)\n        .on('r.deleted_at', 'is', null),\n    )\n    .where((eb) =>\n      eb.or([\n        eb('m.sender_user_id', '=', userId),\n        eb('r.message_id', 'is not', null),\n      ]),\n    ) as unknown as SelectQueryBuilder<MessagesJoinedFrom, 'm' | 'r', O>\n}\n"],
-  "mappings": "AA8CO,SAAS,6BACd,OACA,QACsD;AACtD,SAAO,MACJ;AAAA,IAAS;AAAA,IAA2B,CAAC,SACpC,KACG,MAAM,QAAQ,KAAK,cAAc,EACjC,GAAG,uBAAuB,KAAK,MAAM,EACrC,GAAG,gBAAgB,MAAM,IAAI;AAAA,EAClC,EACC;AAAA,IAAM,CAAC,OACN,GAAG,GAAG;AAAA,MACJ,GAAG,oBAAoB,KAAK,MAAM;AAAA,MAClC,GAAG,gBAAgB,UAAU,IAAI;AAAA,IACnC,CAAC;AAAA,EACH;AACJ;",
-  "names": []
-}

package/dist/modules/notifications/lib/notificationScope.js

@@ -1,26 +0,0 @@
-function resolveOrganizationIds(scope) {
-  if (scope.organizationIds === null) return null;
-  if (scope.organizationIds === void 0) return null;
-  const candidates = scope.organizationIds;
-  return Array.from(new Set(candidates.filter((value) => value.trim().length > 0)));
-}
-function buildNotificationReadScopeWhere(scope) {
-  const organizationIds = resolveOrganizationIds(scope);
-  if (organizationIds === null) return {};
-  if (organizationIds.length === 0) return { organizationId: null };
-  return {
-    $or: [
-      { organizationId: { $in: organizationIds } },
-      { organizationId: null }
-    ]
-  };
-}
-function getNotificationReadScopeTagOrganizationIds(scope) {
-  const organizationIds = resolveOrganizationIds(scope);
-  return organizationIds === null ? [null] : [...organizationIds, null];
-}
-export {
-  buildNotificationReadScopeWhere,
-  getNotificationReadScopeTagOrganizationIds
-};
-//# sourceMappingURL=notificationScope.js.map

package/dist/modules/notifications/lib/notificationScope.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/notifications/lib/notificationScope.ts"],
-  "sourcesContent": ["export type NotificationReadOrganizationScope = {\n  organizationId?: string | null\n  organizationIds?: string[] | null\n}\n\ntype NotificationReadScopeWhere = {\n  organizationId?: null\n  $or?: Array<\n    | { organizationId: { $in: string[] } }\n    | { organizationId: null }\n  >\n}\n\nfunction resolveOrganizationIds(scope: NotificationReadOrganizationScope): string[] | null {\n  if (scope.organizationIds === null) return null\n  if (scope.organizationIds === undefined) return null\n  const candidates = scope.organizationIds\n  return Array.from(new Set(candidates.filter((value) => value.trim().length > 0)))\n}\n\nexport function buildNotificationReadScopeWhere(\n  scope: NotificationReadOrganizationScope,\n): NotificationReadScopeWhere {\n  const organizationIds = resolveOrganizationIds(scope)\n  if (organizationIds === null) return {}\n  if (organizationIds.length === 0) return { organizationId: null }\n  return {\n    $or: [\n      { organizationId: { $in: organizationIds } },\n      { organizationId: null },\n    ],\n  }\n}\n\nexport function getNotificationReadScopeTagOrganizationIds(\n  scope: NotificationReadOrganizationScope,\n): Array<string | null> {\n  const organizationIds = resolveOrganizationIds(scope)\n  return organizationIds === null ? [null] : [...organizationIds, null]\n}\n"],
-  "mappings": "AAaA,SAAS,uBAAuB,OAA2D;AACzF,MAAI,MAAM,oBAAoB,KAAM,QAAO;AAC3C,MAAI,MAAM,oBAAoB,OAAW,QAAO;AAChD,QAAM,aAAa,MAAM;AACzB,SAAO,MAAM,KAAK,IAAI,IAAI,WAAW,OAAO,CAAC,UAAU,MAAM,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;AAClF;AAEO,SAAS,gCACd,OAC4B;AAC5B,QAAM,kBAAkB,uBAAuB,KAAK;AACpD,MAAI,oBAAoB,KAAM,QAAO,CAAC;AACtC,MAAI,gBAAgB,WAAW,EAAG,QAAO,EAAE,gBAAgB,KAAK;AAChE,SAAO;AAAA,IACL,KAAK;AAAA,MACH,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE;AAAA,MAC3C,EAAE,gBAAgB,KAAK;AAAA,IACzB;AAAA,EACF;AACF;AAEO,SAAS,2CACd,OACsB;AACtB,QAAM,kBAAkB,uBAAuB,KAAK;AACpD,SAAO,oBAAoB,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,iBAAiB,IAAI;AACtE;",
-  "names": []
-}

package/dist/modules/payment_gateways/extension-points.js

@@ -1,19 +0,0 @@
-import { dataTableExtensionHost, defineModuleExtensionPoints, injectionExtensionHost } from "@open-mercato/shared/modules/widgets/extension-points";
-const extensionPoints = defineModuleExtensionPoints({
-  moduleId: "payment_gateways",
-  hosts: {
-    transactionsTable: dataTableExtensionHost({ tableId: "payment_gateways.transactions.list", source: "backend/payment-gateways/page.tsx" }),
-    transactionsAfter: injectionExtensionHost({
-      family: "detail",
-      spotId: "admin.page:payment-gateways/transactions:after",
-      supported: ["render-widget"],
-      source: "backend/payment-gateways/page.tsx"
-    })
-  }
-});
-var extension_points_default = extensionPoints;
-export {
-  extension_points_default as default,
-  extensionPoints
-};
-//# sourceMappingURL=extension-points.js.map

package/dist/modules/payment_gateways/extension-points.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/payment_gateways/extension-points.ts"],
-  "sourcesContent": ["import { dataTableExtensionHost, defineModuleExtensionPoints, injectionExtensionHost } from '@open-mercato/shared/modules/widgets/extension-points'\n\nexport const extensionPoints = defineModuleExtensionPoints({\n  moduleId: 'payment_gateways',\n  hosts: {\n    transactionsTable: dataTableExtensionHost({ tableId: 'payment_gateways.transactions.list', source: 'backend/payment-gateways/page.tsx' }),\n    transactionsAfter: injectionExtensionHost({\n      family: 'detail',\n      spotId: 'admin.page:payment-gateways/transactions:after',\n      supported: ['render-widget'],\n      source: 'backend/payment-gateways/page.tsx',\n    }),\n  },\n})\n\nexport default extensionPoints\n"],
-  "mappings": "AAAA,SAAS,wBAAwB,6BAA6B,8BAA8B;AAErF,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,OAAO;AAAA,IACL,mBAAmB,uBAAuB,EAAE,SAAS,sCAAsC,QAAQ,oCAAoC,CAAC;AAAA,IACxI,mBAAmB,uBAAuB;AAAA,MACxC,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,CAAC,eAAe;AAAA,MAC3B,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AACF,CAAC;AAED,IAAO,2BAAQ;",
-  "names": []
-}

package/dist/modules/payment_gateways/lib/capture-ledger.js

@@ -1,183 +0,0 @@
-import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
-import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
-import { GatewayPaymentOperation, GatewayTransaction } from "../data/entities.js";
-const AMOUNT_SCALE = 4;
-const AMOUNT_UNITS_PER_WHOLE = 10n ** BigInt(AMOUNT_SCALE);
-const DECIMAL_PATTERN = /^(-?)(\d*)(?:\.(\d*))?$/;
-function parseAmountUnits(value) {
-  if (value === null || value === void 0) return 0n;
-  const text = typeof value === "number" ? value.toFixed(AMOUNT_SCALE) : value.trim();
-  const match = DECIMAL_PATTERN.exec(text);
-  const whole = match?.[2] ?? "";
-  const fraction = match?.[3] ?? "";
-  if (!match || whole === "" && fraction === "") {
-    throw new Error(`[internal] Unsupported gateway amount value: ${String(value)}`);
-  }
-  const keptFraction = fraction.slice(0, AMOUNT_SCALE).padEnd(AMOUNT_SCALE, "0");
-  const nextDigit = fraction.charAt(AMOUNT_SCALE);
-  let units = BigInt(whole === "" ? "0" : whole) * AMOUNT_UNITS_PER_WHOLE + BigInt(keptFraction);
-  if (nextDigit !== "" && Number(nextDigit) >= 5) units += 1n;
-  return match[1] === "-" ? -units : units;
-}
-function formatAmountUnits(units) {
-  const negative = units < 0n;
-  const absolute = negative ? -units : units;
-  const fraction = (absolute % AMOUNT_UNITS_PER_WHOLE).toString().padStart(AMOUNT_SCALE, "0");
-  return `${negative ? "-" : ""}${absolute / AMOUNT_UNITS_PER_WHOLE}.${fraction}`;
-}
-function formatAmountLabel(units) {
-  return formatAmountUnits(units).replace(/\.?0+$/, "");
-}
-function captureConflict(code, message) {
-  return new CrudHttpError(409, { error: message, code });
-}
-function resolveCaptureAmounts(transaction, amount) {
-  const authorizedUnits = parseAmountUnits(transaction.amount);
-  const capturedUnits = parseAmountUnits(transaction.capturedAmount);
-  const remainingUnits = authorizedUnits - capturedUnits;
-  return {
-    authorizedUnits,
-    capturedUnits,
-    remainingUnits,
-    requestedUnits: amount === void 0 ? remainingUnits : parseAmountUnits(amount)
-  };
-}
-function assertCaptureWithinRemaining(transaction, amount) {
-  const amounts = resolveCaptureAmounts(transaction, amount);
-  if (amounts.remainingUnits <= 0n) {
-    throw captureConflict(
-      "payment_capture_ceiling_exceeded",
-      `Transaction is already fully captured (${formatAmountLabel(amounts.capturedUnits)} of ${formatAmountLabel(amounts.authorizedUnits)})`
-    );
-  }
-  if (amounts.requestedUnits <= 0n) {
-    throw captureConflict("payment_capture_amount_invalid", "Capture amount must be greater than zero");
-  }
-  if (amounts.requestedUnits > amounts.remainingUnits) {
-    throw captureConflict(
-      "payment_capture_ceiling_exceeded",
-      `Capture amount ${formatAmountLabel(amounts.requestedUnits)} exceeds the ${formatAmountLabel(amounts.remainingUnits)} still capturable on authorized amount ${formatAmountLabel(amounts.authorizedUnits)} (already captured ${formatAmountLabel(amounts.capturedUnits)})`
-    );
-  }
-  return amounts;
-}
-async function reserveCaptureAmount(em, input) {
-  if (input.operation.reservedAmount !== null && input.operation.reservedAmount !== void 0) {
-    return parseAmountUnits(input.operation.reservedAmount);
-  }
-  const amounts = assertCaptureWithinRemaining(input.transaction, input.amount);
-  const previousCapturedAmount = input.transaction.capturedAmount;
-  const reservedAmount = formatAmountUnits(amounts.requestedUnits);
-  const nextCapturedAmount = formatAmountUnits(amounts.capturedUnits + amounts.requestedUnits);
-  await em.transactional(async (tx) => {
-    const reserved = await tx.nativeUpdate(
-      GatewayTransaction,
-      {
-        id: input.transaction.id,
-        organizationId: input.scope.organizationId,
-        tenantId: input.scope.tenantId,
-        deletedAt: null,
-        capturedAmount: previousCapturedAmount
-      },
-      { capturedAmount: nextCapturedAmount, updatedAt: /* @__PURE__ */ new Date() }
-    );
-    if (reserved !== 1) {
-      throw captureConflict(
-        "payment_capture_reservation_conflict",
-        "This transaction changed while the capture amount was being reserved; re-read it and retry with the remaining amount"
-      );
-    }
-    const stamped = await tx.nativeUpdate(
-      GatewayPaymentOperation,
-      {
-        id: input.operation.id,
-        organizationId: input.scope.organizationId,
-        tenantId: input.scope.tenantId,
-        reservedAmount: null
-      },
-      { reservedAmount, updatedAt: /* @__PURE__ */ new Date() }
-    );
-    if (stamped !== 1) {
-      throw captureConflict(
-        "payment_capture_reservation_conflict",
-        "Capture reservation could not be recorded for this operation"
-      );
-    }
-  });
-  Object.assign(input.operation, { reservedAmount });
-  return amounts.requestedUnits;
-}
-function settleCapturedAmount(transaction, reservedUnits, capturedAmount) {
-  const actualUnits = typeof capturedAmount === "number" && Number.isFinite(capturedAmount) && capturedAmount >= 0 ? parseAmountUnits(capturedAmount) : reservedUnits;
-  if (actualUnits === reservedUnits) return;
-  const settledUnits = parseAmountUnits(transaction.capturedAmount) - reservedUnits + actualUnits;
-  transaction.capturedAmount = formatAmountUnits(settledUnits < 0n ? 0n : settledUnits);
-}
-function alignCapturedAmountWithStatus(transaction, status) {
-  if (status !== "captured") return;
-  const authorizedUnits = parseAmountUnits(transaction.amount);
-  if (parseAmountUnits(transaction.capturedAmount) >= authorizedUnits) return;
-  transaction.capturedAmount = formatAmountUnits(authorizedUnits);
-}
-async function releaseCaptureAmount(em, input) {
-  const reservedAmount = formatAmountUnits(input.reservedUnits);
-  try {
-    return await em.transactional(async (tx) => {
-      const current = await findOneWithDecryption(
-        tx,
-        GatewayTransaction,
-        {
-          id: input.transactionId,
-          organizationId: input.scope.organizationId,
-          tenantId: input.scope.tenantId
-        },
-        void 0,
-        input.scope
-      );
-      if (!current) return false;
-      const releasedUnits = parseAmountUnits(current.capturedAmount) - input.reservedUnits;
-      const released = await tx.nativeUpdate(
-        GatewayTransaction,
-        {
-          id: input.transactionId,
-          organizationId: input.scope.organizationId,
-          tenantId: input.scope.tenantId,
-          capturedAmount: current.capturedAmount
-        },
-        { capturedAmount: formatAmountUnits(releasedUnits < 0n ? 0n : releasedUnits), updatedAt: /* @__PURE__ */ new Date() }
-      );
-      if (released !== 1) return false;
-      const cleared = await tx.nativeUpdate(
-        GatewayPaymentOperation,
-        {
-          id: input.operation.id,
-          organizationId: input.scope.organizationId,
-          tenantId: input.scope.tenantId,
-          reservedAmount
-        },
-        { reservedAmount: null, updatedAt: /* @__PURE__ */ new Date() }
-      );
-      if (cleared !== 1) {
-        throw captureConflict(
-          "payment_capture_reservation_conflict",
-          "Capture reservation could not be released for this operation"
-        );
-      }
-      Object.assign(input.operation, { reservedAmount: null });
-      return true;
-    });
-  } catch {
-    return false;
-  }
-}
-export {
-  alignCapturedAmountWithStatus,
-  assertCaptureWithinRemaining,
-  formatAmountUnits,
-  parseAmountUnits,
-  releaseCaptureAmount,
-  reserveCaptureAmount,
-  resolveCaptureAmounts,
-  settleCapturedAmount
-};
-//# sourceMappingURL=capture-ledger.js.map

package/dist/modules/payment_gateways/lib/capture-ledger.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/payment_gateways/lib/capture-ledger.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport type { UnifiedPaymentStatus } from '@open-mercato/shared/modules/payment_gateways/types'\nimport { GatewayPaymentOperation, GatewayTransaction } from '../data/entities'\n\ntype Scope = { organizationId: string; tenantId: string }\n\nconst AMOUNT_SCALE = 4\nconst AMOUNT_UNITS_PER_WHOLE = 10n ** BigInt(AMOUNT_SCALE)\nconst DECIMAL_PATTERN = /^(-?)(\\d*)(?:\\.(\\d*))?$/\n\n/**\n * Money in this module lives in `numeric(18,4)` columns and is read back as strings. Every\n * comparison and every sum runs on integer minor units (1 unit = 10^-4) so partial captures\n * never accumulate floating-point drift. Extra precision beyond four decimals is rounded\n * half-up, matching what Postgres would store in the column anyway.\n */\nexport function parseAmountUnits(value: string | number | null | undefined): bigint {\n  if (value === null || value === undefined) return 0n\n  const text = typeof value === 'number' ? value.toFixed(AMOUNT_SCALE) : value.trim()\n  const match = DECIMAL_PATTERN.exec(text)\n  const whole = match?.[2] ?? ''\n  const fraction = match?.[3] ?? ''\n  if (!match || (whole === '' && fraction === '')) {\n    throw new Error(`[internal] Unsupported gateway amount value: ${String(value)}`)\n  }\n  const keptFraction = fraction.slice(0, AMOUNT_SCALE).padEnd(AMOUNT_SCALE, '0')\n  const nextDigit = fraction.charAt(AMOUNT_SCALE)\n  let units = BigInt(whole === '' ? '0' : whole) * AMOUNT_UNITS_PER_WHOLE + BigInt(keptFraction)\n  if (nextDigit !== '' && Number(nextDigit) >= 5) units += 1n\n  return match[1] === '-' ? -units : units\n}\n\nexport function formatAmountUnits(units: bigint): string {\n  const negative = units < 0n\n  const absolute = negative ? -units : units\n  const fraction = (absolute % AMOUNT_UNITS_PER_WHOLE).toString().padStart(AMOUNT_SCALE, '0')\n  return `${negative ? '-' : ''}${absolute / AMOUNT_UNITS_PER_WHOLE}.${fraction}`\n}\n\nfunction formatAmountLabel(units: bigint): string {\n  return formatAmountUnits(units).replace(/\\.?0+$/, '')\n}\n\nfunction captureConflict(code: string, message: string): CrudHttpError {\n  return new CrudHttpError(409, { error: message, code })\n}\n\nexport type CaptureAmounts = {\n  authorizedUnits: bigint\n  capturedUnits: bigint\n  remainingUnits: bigint\n  requestedUnits: bigint\n}\n\n/**\n * Resolves what a capture request means for the transaction's running total. An omitted\n * amount captures everything that is still authorized, not the original full amount.\n */\nexport function resolveCaptureAmounts(transaction: GatewayTransaction, amount: number | undefined): CaptureAmounts {\n  const authorizedUnits = parseAmountUnits(transaction.amount)\n  const capturedUnits = parseAmountUnits(transaction.capturedAmount)\n  const remainingUnits = authorizedUnits - capturedUnits\n  return {\n    authorizedUnits,\n    capturedUnits,\n    remainingUnits,\n    requestedUnits: amount === undefined ? remainingUnits : parseAmountUnits(amount),\n  }\n}\n\n/**\n * Rejects a capture whose amount would push the captured-to-date total past the authorized\n * amount. This is the cumulative ceiling: each individual request may look small, but the\n * sum of all captures against one authorization can never exceed it (#4487).\n */\nexport function assertCaptureWithinRemaining(\n  transaction: GatewayTransaction,\n  amount: number | undefined,\n): CaptureAmounts {\n  const amounts = resolveCaptureAmounts(transaction, amount)\n  if (amounts.remainingUnits <= 0n) {\n    throw captureConflict(\n      'payment_capture_ceiling_exceeded',\n      `Transaction is already fully captured (${formatAmountLabel(amounts.capturedUnits)} of ${formatAmountLabel(amounts.authorizedUnits)})`,\n    )\n  }\n  if (amounts.requestedUnits <= 0n) {\n    throw captureConflict('payment_capture_amount_invalid', 'Capture amount must be greater than zero')\n  }\n  if (amounts.requestedUnits > amounts.remainingUnits) {\n    throw captureConflict(\n      'payment_capture_ceiling_exceeded',\n      `Capture amount ${formatAmountLabel(amounts.requestedUnits)} exceeds the ${formatAmountLabel(amounts.remainingUnits)} still capturable on authorized amount ${formatAmountLabel(amounts.authorizedUnits)} (already captured ${formatAmountLabel(amounts.capturedUnits)})`,\n    )\n  }\n  return amounts\n}\n\n/**\n * Claims the requested slice of the authorized amount before the provider is called, so two\n * concurrent captures can never both charge. The increment is a compare-and-swap on the\n * previous captured-to-date value: whoever loses it never reaches the adapter. The reserved\n * amount is stamped on the operation row in the same transaction, so a retry of the same\n * operation id reuses its reservation instead of reserving twice.\n */\nexport async function reserveCaptureAmount(em: EntityManager, input: {\n  transaction: GatewayTransaction\n  operation: GatewayPaymentOperation\n  amount: number | undefined\n  scope: Scope\n}): Promise<bigint> {\n  if (input.operation.reservedAmount !== null && input.operation.reservedAmount !== undefined) {\n    return parseAmountUnits(input.operation.reservedAmount)\n  }\n  const amounts = assertCaptureWithinRemaining(input.transaction, input.amount)\n  const previousCapturedAmount = input.transaction.capturedAmount\n  const reservedAmount = formatAmountUnits(amounts.requestedUnits)\n  const nextCapturedAmount = formatAmountUnits(amounts.capturedUnits + amounts.requestedUnits)\n\n  await em.transactional(async (tx) => {\n    const reserved = await tx.nativeUpdate(\n      GatewayTransaction,\n      {\n        id: input.transaction.id,\n        organizationId: input.scope.organizationId,\n        tenantId: input.scope.tenantId,\n        deletedAt: null,\n        capturedAmount: previousCapturedAmount,\n      },\n      { capturedAmount: nextCapturedAmount, updatedAt: new Date() },\n    )\n    if (reserved !== 1) {\n      throw captureConflict(\n        'payment_capture_reservation_conflict',\n        'This transaction changed while the capture amount was being reserved; re-read it and retry with the remaining amount',\n      )\n    }\n    const stamped = await tx.nativeUpdate(\n      GatewayPaymentOperation,\n      {\n        id: input.operation.id,\n        organizationId: input.scope.organizationId,\n        tenantId: input.scope.tenantId,\n        reservedAmount: null,\n      },\n      { reservedAmount, updatedAt: new Date() },\n    )\n    if (stamped !== 1) {\n      throw captureConflict(\n        'payment_capture_reservation_conflict',\n        'Capture reservation could not be recorded for this operation',\n      )\n    }\n  })\n\n  Object.assign(input.operation, { reservedAmount })\n  return amounts.requestedUnits\n}\n\n/**\n * Reconciles the reservation with what the provider actually captured. Runs on the transaction\n * instance loaded inside the completion transaction, so the adjustment commits together with\n * the operation result.\n */\nexport function settleCapturedAmount(\n  transaction: GatewayTransaction,\n  reservedUnits: bigint,\n  capturedAmount: number | undefined,\n): void {\n  const actualUnits = typeof capturedAmount === 'number' && Number.isFinite(capturedAmount) && capturedAmount >= 0\n    ? parseAmountUnits(capturedAmount)\n    : reservedUnits\n  if (actualUnits === reservedUnits) return\n  const settledUnits = parseAmountUnits(transaction.capturedAmount) - reservedUnits + actualUnits\n  transaction.capturedAmount = formatAmountUnits(settledUnits < 0n ? 0n : settledUnits)\n}\n\n/**\n * Keeps the ledger honest for captures that happened outside the capture endpoint. A webhook or a\n * status poll reports money that already moved but carries no captured amount, so only `captured`\n * \u2014 the provider saying the whole authorization was taken \u2014 can be translated into a number: the\n * full amount. The ledger is raised, never lowered, so an already recorded capture survives.\n * `partially_captured` carries no recoverable amount, so it is left alone and the remainder stays\n * capturable.\n */\nexport function alignCapturedAmountWithStatus(\n  transaction: GatewayTransaction,\n  status: UnifiedPaymentStatus,\n): void {\n  if (status !== 'captured') return\n  const authorizedUnits = parseAmountUnits(transaction.amount)\n  if (parseAmountUnits(transaction.capturedAmount) >= authorizedUnits) return\n  transaction.capturedAmount = formatAmountUnits(authorizedUnits)\n}\n\n/**\n * Gives the reserved slice back after a failed provider call. Both writes share one\n * transaction, so a partial release is impossible: either the amount becomes capturable again\n * and the operation stops holding it, or the reservation stays outstanding. Returning `false`\n * means the reservation is still held \u2014 the conservative outcome when it is unknown whether\n * the provider took the money.\n */\nexport async function releaseCaptureAmount(em: EntityManager, input: {\n  transactionId: string\n  operation: GatewayPaymentOperation\n  reservedUnits: bigint\n  scope: Scope\n}): Promise<boolean> {\n  const reservedAmount = formatAmountUnits(input.reservedUnits)\n  try {\n    return await em.transactional(async (tx) => {\n      const current = await findOneWithDecryption(\n        tx,\n        GatewayTransaction,\n        {\n          id: input.transactionId,\n          organizationId: input.scope.organizationId,\n          tenantId: input.scope.tenantId,\n        },\n        undefined,\n        input.scope,\n      )\n      if (!current) return false\n      const releasedUnits = parseAmountUnits(current.capturedAmount) - input.reservedUnits\n      const released = await tx.nativeUpdate(\n        GatewayTransaction,\n        {\n          id: input.transactionId,\n          organizationId: input.scope.organizationId,\n          tenantId: input.scope.tenantId,\n          capturedAmount: current.capturedAmount,\n        },\n        { capturedAmount: formatAmountUnits(releasedUnits < 0n ? 0n : releasedUnits), updatedAt: new Date() },\n      )\n      if (released !== 1) return false\n      const cleared = await tx.nativeUpdate(\n        GatewayPaymentOperation,\n        {\n          id: input.operation.id,\n          organizationId: input.scope.organizationId,\n          tenantId: input.scope.tenantId,\n          reservedAmount,\n        },\n        { reservedAmount: null, updatedAt: new Date() },\n      )\n      if (cleared !== 1) {\n        throw captureConflict(\n          'payment_capture_reservation_conflict',\n          'Capture reservation could not be released for this operation',\n        )\n      }\n      Object.assign(input.operation, { reservedAmount: null })\n      return true\n    })\n  } catch {\n    return false\n  }\n}\n"],
-  "mappings": "AACA,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AAEtC,SAAS,yBAAyB,0BAA0B;AAI5D,MAAM,eAAe;AACrB,MAAM,yBAAyB,OAAO,OAAO,YAAY;AACzD,MAAM,kBAAkB;AAQjB,SAAS,iBAAiB,OAAmD;AAClF,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,QAAM,OAAO,OAAO,UAAU,WAAW,MAAM,QAAQ,YAAY,IAAI,MAAM,KAAK;AAClF,QAAM,QAAQ,gBAAgB,KAAK,IAAI;AACvC,QAAM,QAAQ,QAAQ,CAAC,KAAK;AAC5B,QAAM,WAAW,QAAQ,CAAC,KAAK;AAC/B,MAAI,CAAC,SAAU,UAAU,MAAM,aAAa,IAAK;AAC/C,UAAM,IAAI,MAAM,gDAAgD,OAAO,KAAK,CAAC,EAAE;AAAA,EACjF;AACA,QAAM,eAAe,SAAS,MAAM,GAAG,YAAY,EAAE,OAAO,cAAc,GAAG;AAC7E,QAAM,YAAY,SAAS,OAAO,YAAY;AAC9C,MAAI,QAAQ,OAAO,UAAU,KAAK,MAAM,KAAK,IAAI,yBAAyB,OAAO,YAAY;AAC7F,MAAI,cAAc,MAAM,OAAO,SAAS,KAAK,EAAG,UAAS;AACzD,SAAO,MAAM,CAAC,MAAM,MAAM,CAAC,QAAQ;AACrC;AAEO,SAAS,kBAAkB,OAAuB;AACvD,QAAM,WAAW,QAAQ;AACzB,QAAM,WAAW,WAAW,CAAC,QAAQ;AACrC,QAAM,YAAY,WAAW,wBAAwB,SAAS,EAAE,SAAS,cAAc,GAAG;AAC1F,SAAO,GAAG,WAAW,MAAM,EAAE,GAAG,WAAW,sBAAsB,IAAI,QAAQ;AAC/E;AAEA,SAAS,kBAAkB,OAAuB;AAChD,SAAO,kBAAkB,KAAK,EAAE,QAAQ,UAAU,EAAE;AACtD;AAEA,SAAS,gBAAgB,MAAc,SAAgC;AACrE,SAAO,IAAI,cAAc,KAAK,EAAE,OAAO,SAAS,KAAK,CAAC;AACxD;AAaO,SAAS,sBAAsB,aAAiC,QAA4C;AACjH,QAAM,kBAAkB,iBAAiB,YAAY,MAAM;AAC3D,QAAM,gBAAgB,iBAAiB,YAAY,cAAc;AACjE,QAAM,iBAAiB,kBAAkB;AACzC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,WAAW,SAAY,iBAAiB,iBAAiB,MAAM;AAAA,EACjF;AACF;AAOO,SAAS,6BACd,aACA,QACgB;AAChB,QAAM,UAAU,sBAAsB,aAAa,MAAM;AACzD,MAAI,QAAQ,kBAAkB,IAAI;AAChC,UAAM;AAAA,MACJ;AAAA,MACA,0CAA0C,kBAAkB,QAAQ,aAAa,CAAC,OAAO,kBAAkB,QAAQ,eAAe,CAAC;AAAA,IACrI;AAAA,EACF;AACA,MAAI,QAAQ,kBAAkB,IAAI;AAChC,UAAM,gBAAgB,kCAAkC,0CAA0C;AAAA,EACpG;AACA,MAAI,QAAQ,iBAAiB,QAAQ,gBAAgB;AACnD,UAAM;AAAA,MACJ;AAAA,MACA,kBAAkB,kBAAkB,QAAQ,cAAc,CAAC,gBAAgB,kBAAkB,QAAQ,cAAc,CAAC,0CAA0C,kBAAkB,QAAQ,eAAe,CAAC,sBAAsB,kBAAkB,QAAQ,aAAa,CAAC;AAAA,IACxQ;AAAA,EACF;AACA,SAAO;AACT;AASA,eAAsB,qBAAqB,IAAmB,OAK1C;AAClB,MAAI,MAAM,UAAU,mBAAmB,QAAQ,MAAM,UAAU,mBAAmB,QAAW;AAC3F,WAAO,iBAAiB,MAAM,UAAU,cAAc;AAAA,EACxD;AACA,QAAM,UAAU,6BAA6B,MAAM,aAAa,MAAM,MAAM;AAC5E,QAAM,yBAAyB,MAAM,YAAY;AACjD,QAAM,iBAAiB,kBAAkB,QAAQ,cAAc;AAC/D,QAAM,qBAAqB,kBAAkB,QAAQ,gBAAgB,QAAQ,cAAc;AAE3F,QAAM,GAAG,cAAc,OAAO,OAAO;AACnC,UAAM,WAAW,MAAM,GAAG;AAAA,MACxB;AAAA,MACA;AAAA,QACE,IAAI,MAAM,YAAY;AAAA,QACtB,gBAAgB,MAAM,MAAM;AAAA,QAC5B,UAAU,MAAM,MAAM;AAAA,QACtB,WAAW;AAAA,QACX,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,gBAAgB,oBAAoB,WAAW,oBAAI,KAAK,EAAE;AAAA,IAC9D;AACA,QAAI,aAAa,GAAG;AAClB,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,UAAM,UAAU,MAAM,GAAG;AAAA,MACvB;AAAA,MACA;AAAA,QACE,IAAI,MAAM,UAAU;AAAA,QACpB,gBAAgB,MAAM,MAAM;AAAA,QAC5B,UAAU,MAAM,MAAM;AAAA,QACtB,gBAAgB;AAAA,MAClB;AAAA,MACA,EAAE,gBAAgB,WAAW,oBAAI,KAAK,EAAE;AAAA,IAC1C;AACA,QAAI,YAAY,GAAG;AACjB,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO,OAAO,MAAM,WAAW,EAAE,eAAe,CAAC;AACjD,SAAO,QAAQ;AACjB;AAOO,SAAS,qBACd,aACA,eACA,gBACM;AACN,QAAM,cAAc,OAAO,mBAAmB,YAAY,OAAO,SAAS,cAAc,KAAK,kBAAkB,IAC3G,iBAAiB,cAAc,IAC/B;AACJ,MAAI,gBAAgB,cAAe;AACnC,QAAM,eAAe,iBAAiB,YAAY,cAAc,IAAI,gBAAgB;AACpF,cAAY,iBAAiB,kBAAkB,eAAe,KAAK,KAAK,YAAY;AACtF;AAUO,SAAS,8BACd,aACA,QACM;AACN,MAAI,WAAW,WAAY;AAC3B,QAAM,kBAAkB,iBAAiB,YAAY,MAAM;AAC3D,MAAI,iBAAiB,YAAY,cAAc,KAAK,gBAAiB;AACrE,cAAY,iBAAiB,kBAAkB,eAAe;AAChE;AASA,eAAsB,qBAAqB,IAAmB,OAKzC;AACnB,QAAM,iBAAiB,kBAAkB,MAAM,aAAa;AAC5D,MAAI;AACF,WAAO,MAAM,GAAG,cAAc,OAAO,OAAO;AAC1C,YAAM,UAAU,MAAM;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,UACE,IAAI,MAAM;AAAA,UACV,gBAAgB,MAAM,MAAM;AAAA,UAC5B,UAAU,MAAM,MAAM;AAAA,QACxB;AAAA,QACA;AAAA,QACA,MAAM;AAAA,MACR;AACA,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,gBAAgB,iBAAiB,QAAQ,cAAc,IAAI,MAAM;AACvE,YAAM,WAAW,MAAM,GAAG;AAAA,QACxB;AAAA,QACA;AAAA,UACE,IAAI,MAAM;AAAA,UACV,gBAAgB,MAAM,MAAM;AAAA,UAC5B,UAAU,MAAM,MAAM;AAAA,UACtB,gBAAgB,QAAQ;AAAA,QAC1B;AAAA,QACA,EAAE,gBAAgB,kBAAkB,gBAAgB,KAAK,KAAK,aAAa,GAAG,WAAW,oBAAI,KAAK,EAAE;AAAA,MACtG;AACA,UAAI,aAAa,EAAG,QAAO;AAC3B,YAAM,UAAU,MAAM,GAAG;AAAA,QACvB;AAAA,QACA;AAAA,UACE,IAAI,MAAM,UAAU;AAAA,UACpB,gBAAgB,MAAM,MAAM;AAAA,UAC5B,UAAU,MAAM,MAAM;AAAA,UACtB;AAAA,QACF;AAAA,QACA,EAAE,gBAAgB,MAAM,WAAW,oBAAI,KAAK,EAAE;AAAA,MAChD;AACA,UAAI,YAAY,GAAG;AACjB,cAAM;AAAA,UACJ;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,aAAO,OAAO,MAAM,WAAW,EAAE,gBAAgB,KAAK,CAAC;AACvD,aAAO;AAAA,IACT,CAAC;AAAA,EACH,QAAQ;AACN,WAAO;AAAA,EACT;AACF;",
-  "names": []
-}

package/dist/modules/payment_gateways/lib/order-amount-reconciliation.js

@@ -1,58 +0,0 @@
-import { conflict } from "@open-mercato/shared/lib/crud/errors";
-import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
-import { createFallbackTranslator } from "@open-mercato/shared/lib/i18n/translate";
-const AMOUNT_TOLERANCE = 1e-4;
-function normalizeCurrencyCode(currencyCode) {
-  return currencyCode.trim().toUpperCase();
-}
-async function resolveConflictTranslator() {
-  try {
-    const { translate } = await resolveTranslations();
-    return translate;
-  } catch {
-    return createFallbackTranslator({});
-  }
-}
-function isPaymentOrderTotalResolver(candidate) {
-  return !!candidate && typeof candidate === "object" && typeof candidate.resolveOrderTotal === "function";
-}
-function assertSessionAmountMatchesOrderTotal(requested, orderTotal, translate) {
-  if (normalizeCurrencyCode(requested.currencyCode) !== normalizeCurrencyCode(orderTotal.currencyCode)) {
-    throw conflict(translate(
-      "payment_gateways.errors.sessionCurrencyMismatch",
-      "Payment session currency {currencyCode} does not match the currency of order {orderId}",
-      { currencyCode: normalizeCurrencyCode(requested.currencyCode), orderId: requested.orderId }
-    ));
-  }
-  if (Math.abs(requested.amount - orderTotal.amountDue) > AMOUNT_TOLERANCE) {
-    throw conflict(translate(
-      "payment_gateways.errors.sessionAmountMismatch",
-      "Payment session amount {amount} does not match the amount due for order {orderId}",
-      { amount: requested.amount, orderId: requested.orderId }
-    ));
-  }
-}
-async function reconcileSessionAmountWithOrder(input) {
-  const { orderId, resolver } = input;
-  if (!orderId || !resolver) return;
-  const orderTotal = await resolver.resolveOrderTotal(orderId, input.scope);
-  const translate = await resolveConflictTranslator();
-  if (!orderTotal) {
-    throw conflict(translate(
-      "payment_gateways.errors.sessionOrderNotFound",
-      "Order {orderId} was not found in the current scope",
-      { orderId }
-    ));
-  }
-  assertSessionAmountMatchesOrderTotal(
-    { orderId, amount: input.amount, currencyCode: input.currencyCode },
-    orderTotal,
-    translate
-  );
-}
-export {
-  assertSessionAmountMatchesOrderTotal,
-  isPaymentOrderTotalResolver,
-  reconcileSessionAmountWithOrder
-};
-//# sourceMappingURL=order-amount-reconciliation.js.map

package/dist/modules/payment_gateways/lib/order-amount-reconciliation.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/payment_gateways/lib/order-amount-reconciliation.ts"],
-  "sourcesContent": ["import { conflict } from '@open-mercato/shared/lib/crud/errors'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createFallbackTranslator, type TranslateWithFallbackFn } from '@open-mercato/shared/lib/i18n/translate'\nimport type {\n  PaymentGatewayScope,\n  PaymentOrderTotal,\n  PaymentOrderTotalResolver,\n} from '@open-mercato/shared/modules/payment_gateways/types'\n\n/** Amounts are stored as numeric(18,4); anything below that is rounding noise, not a mismatch. */\nconst AMOUNT_TOLERANCE = 0.0001\n\nfunction normalizeCurrencyCode(currencyCode: string): string {\n  return currencyCode.trim().toUpperCase()\n}\n\n/**\n * Conflict copy is served from the module catalog on a request path. Contexts\n * without a registered module dictionary (CLI commands, workers, unit tests)\n * fall back to the English template shipped with each call, so a missing\n * dictionary degrades the wording of a rejection but never its outcome.\n */\nasync function resolveConflictTranslator(): Promise<TranslateWithFallbackFn> {\n  try {\n    const { translate } = await resolveTranslations()\n    return translate\n  } catch {\n    return createFallbackTranslator({})\n  }\n}\n\nexport function isPaymentOrderTotalResolver(candidate: unknown): candidate is PaymentOrderTotalResolver {\n  return !!candidate\n    && typeof candidate === 'object'\n    && typeof (candidate as PaymentOrderTotalResolver).resolveOrderTotal === 'function'\n}\n\nexport function assertSessionAmountMatchesOrderTotal(\n  requested: { orderId: string; amount: number; currencyCode: string },\n  orderTotal: PaymentOrderTotal,\n  translate: TranslateWithFallbackFn,\n): void {\n  if (normalizeCurrencyCode(requested.currencyCode) !== normalizeCurrencyCode(orderTotal.currencyCode)) {\n    throw conflict(translate(\n      'payment_gateways.errors.sessionCurrencyMismatch',\n      'Payment session currency {currencyCode} does not match the currency of order {orderId}',\n      { currencyCode: normalizeCurrencyCode(requested.currencyCode), orderId: requested.orderId },\n    ))\n  }\n  if (Math.abs(requested.amount - orderTotal.amountDue) > AMOUNT_TOLERANCE) {\n    throw conflict(translate(\n      'payment_gateways.errors.sessionAmountMismatch',\n      'Payment session amount {amount} does not match the amount due for order {orderId}',\n      { amount: requested.amount, orderId: requested.orderId },\n    ))\n  }\n}\n\n/**\n * Reconciles a caller-supplied session amount against the authoritative amount\n * due for the referenced order. Reconciliation is skipped when the request\n * references no order, or when no module registered a resolver (for example an\n * installation without the `sales` module) \u2014 there is nothing authoritative to\n * compare against in either case. A referenced order that does not resolve\n * inside the caller's tenant/organization scope is rejected exactly like an\n * unknown one, so the response never reveals whether it exists elsewhere.\n */\nexport async function reconcileSessionAmountWithOrder(input: {\n  orderId?: string\n  amount: number\n  currencyCode: string\n  scope: PaymentGatewayScope\n  resolver?: PaymentOrderTotalResolver | null\n}): Promise<void> {\n  const { orderId, resolver } = input\n  if (!orderId || !resolver) return\n\n  const orderTotal = await resolver.resolveOrderTotal(orderId, input.scope)\n  const translate = await resolveConflictTranslator()\n  if (!orderTotal) {\n    throw conflict(translate(\n      'payment_gateways.errors.sessionOrderNotFound',\n      'Order {orderId} was not found in the current scope',\n      { orderId },\n    ))\n  }\n\n  assertSessionAmountMatchesOrderTotal(\n    { orderId, amount: input.amount, currencyCode: input.currencyCode },\n    orderTotal,\n    translate,\n  )\n}\n"],
-  "mappings": "AAAA,SAAS,gBAAgB;AACzB,SAAS,2BAA2B;AACpC,SAAS,gCAA8D;AAQvE,MAAM,mBAAmB;AAEzB,SAAS,sBAAsB,cAA8B;AAC3D,SAAO,aAAa,KAAK,EAAE,YAAY;AACzC;AAQA,eAAe,4BAA8D;AAC3E,MAAI;AACF,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO,yBAAyB,CAAC,CAAC;AAAA,EACpC;AACF;AAEO,SAAS,4BAA4B,WAA4D;AACtG,SAAO,CAAC,CAAC,aACJ,OAAO,cAAc,YACrB,OAAQ,UAAwC,sBAAsB;AAC7E;AAEO,SAAS,qCACd,WACA,YACA,WACM;AACN,MAAI,sBAAsB,UAAU,YAAY,MAAM,sBAAsB,WAAW,YAAY,GAAG;AACpG,UAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE,cAAc,sBAAsB,UAAU,YAAY,GAAG,SAAS,UAAU,QAAQ;AAAA,IAC5F,CAAC;AAAA,EACH;AACA,MAAI,KAAK,IAAI,UAAU,SAAS,WAAW,SAAS,IAAI,kBAAkB;AACxE,UAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,UAAU,QAAQ,SAAS,UAAU,QAAQ;AAAA,IACzD,CAAC;AAAA,EACH;AACF;AAWA,eAAsB,gCAAgC,OAMpC;AAChB,QAAM,EAAE,SAAS,SAAS,IAAI;AAC9B,MAAI,CAAC,WAAW,CAAC,SAAU;AAE3B,QAAM,aAAa,MAAM,SAAS,kBAAkB,SAAS,MAAM,KAAK;AACxE,QAAM,YAAY,MAAM,0BAA0B;AAClD,MAAI,CAAC,YAAY;AACf,UAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE,QAAQ;AAAA,IACZ,CAAC;AAAA,EACH;AAEA;AAAA,IACE,EAAE,SAAS,QAAQ,MAAM,QAAQ,cAAc,MAAM,aAAa;AAAA,IAClE;AAAA,IACA;AAAA,EACF;AACF;",
-  "names": []
-}

package/dist/modules/payment_gateways/migrations/Migration20260725101500_payment_gateways.js

@@ -1,16 +0,0 @@
-import { Migration } from "@mikro-orm/migrations";
-class Migration20260725101500_payment_gateways extends Migration {
-  up() {
-    this.addSql(`alter table "gateway_transactions" add column "captured_amount" numeric(18,4) not null default '0';`);
-    this.addSql(`alter table "gateway_payment_operations" add column "reserved_amount" numeric(18,4) null;`);
-    this.addSql(`update "gateway_transactions" as t set "captured_amount" = coalesce((select sum((o."result"->>'capturedAmount')::numeric) from "gateway_payment_operations" as o where o."transaction_id" = t."id" and o."operation_type" = 'capture' and o."status" = 'succeeded'), case when t."unified_status" in ('captured', 'refunded', 'partially_refunded') then t."amount" else 0 end);`);
-  }
-  down() {
-    this.addSql(`alter table "gateway_payment_operations" drop column "reserved_amount";`);
-    this.addSql(`alter table "gateway_transactions" drop column "captured_amount";`);
-  }
-}
-export {
-  Migration20260725101500_payment_gateways
-};
-//# sourceMappingURL=Migration20260725101500_payment_gateways.js.map

package/dist/modules/payment_gateways/migrations/Migration20260725101500_payment_gateways.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/payment_gateways/migrations/Migration20260725101500_payment_gateways.ts"],
-  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations';\n\nexport class Migration20260725101500_payment_gateways extends Migration {\n\n  override up(): void | Promise<void> {\n    this.addSql(`alter table \"gateway_transactions\" add column \"captured_amount\" numeric(18,4) not null default '0';`);\n    this.addSql(`alter table \"gateway_payment_operations\" add column \"reserved_amount\" numeric(18,4) null;`);\n    // Backfill the captured-to-date ledger from the succeeded capture operations, which are the\n    // only capture path since the payment operation ledger landed. Transactions captured before\n    // that (no succeeded capture rows) fall back to their full amount when their status says the\n    // money was taken. A historical `partially_captured` transaction has no recoverable captured\n    // amount, so it starts at 0 and can still be over-captured once.\n    this.addSql(`update \"gateway_transactions\" as t set \"captured_amount\" = coalesce((select sum((o.\"result\"->>'capturedAmount')::numeric) from \"gateway_payment_operations\" as o where o.\"transaction_id\" = t.\"id\" and o.\"operation_type\" = 'capture' and o.\"status\" = 'succeeded'), case when t.\"unified_status\" in ('captured', 'refunded', 'partially_refunded') then t.\"amount\" else 0 end);`);\n  }\n\n  override down(): void | Promise<void> {\n    this.addSql(`alter table \"gateway_payment_operations\" drop column \"reserved_amount\";`);\n    this.addSql(`alter table \"gateway_transactions\" drop column \"captured_amount\";`);\n  }\n\n}\n"],
-  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,iDAAiD,UAAU;AAAA,EAE7D,KAA2B;AAClC,SAAK,OAAO,qGAAqG;AACjH,SAAK,OAAO,2FAA2F;AAMvG,SAAK,OAAO,kXAAkX;AAAA,EAChY;AAAA,EAES,OAA6B;AACpC,SAAK,OAAO,yEAAyE;AACrF,SAAK,OAAO,mEAAmE;AAAA,EACjF;AAEF;",
-  "names": []
-}

package/dist/modules/payment_gateways/migrations/Migration20260803103035_payment_gateways.js

@@ -1,18 +0,0 @@
-import { Migration } from "@mikro-orm/migrations";
-class Migration20260803103035_payment_gateways extends Migration {
-  isTransactional() {
-    return false;
-  }
-  up() {
-    this.addSql(
-      'create index concurrently if not exists "gateway_session_initializations_prune_idx" on "gateway_session_initializations" ("tenant_id", "organization_id", "updated_at") where "gateway_transaction_id" is not null;'
-    );
-  }
-  down() {
-    this.addSql('drop index concurrently if exists "gateway_session_initializations_prune_idx";');
-  }
-}
-export {
-  Migration20260803103035_payment_gateways
-};
-//# sourceMappingURL=Migration20260803103035_payment_gateways.js.map

package/dist/modules/payment_gateways/migrations/Migration20260803103035_payment_gateways.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/payment_gateways/migrations/Migration20260803103035_payment_gateways.ts"],
-  "sourcesContent": ["import { Migration } from '@mikro-orm/migrations'\n\nexport class Migration20260803103035_payment_gateways extends Migration {\n  override isTransactional(): boolean {\n    return false\n  }\n\n  override up(): void | Promise<void> {\n    this.addSql(\n      'create index concurrently if not exists \"gateway_session_initializations_prune_idx\" on \"gateway_session_initializations\" (\"tenant_id\", \"organization_id\", \"updated_at\") where \"gateway_transaction_id\" is not null;',\n    )\n  }\n\n  override down(): void | Promise<void> {\n    this.addSql('drop index concurrently if exists \"gateway_session_initializations_prune_idx\";')\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,iBAAiB;AAEnB,MAAM,iDAAiD,UAAU;AAAA,EAC7D,kBAA2B;AAClC,WAAO;AAAA,EACT;AAAA,EAES,KAA2B;AAClC,SAAK;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAAA,EAES,OAA6B;AACpC,SAAK,OAAO,gFAAgF;AAAA,EAC9F;AACF;",
-  "names": []
-}

package/dist/modules/payment_gateways/workers/session-initialization-prune.js

@@ -1,50 +0,0 @@
-import { createModuleQueue } from "@open-mercato/queue";
-import { createLogger } from "@open-mercato/shared/lib/logger";
-import {
-  PAYMENT_SESSION_INITIALIZATION_PRUNE_QUEUE,
-  PAYMENT_SESSION_INITIALIZATION_PRUNE_BATCH_SIZE,
-  pruneCompletedPaymentSessionInitializations
-} from "../lib/session-idempotency.js";
-const logger = createLogger("payment_gateways");
-let continuationQueue = null;
-function getContinuationQueue() {
-  continuationQueue ??= createModuleQueue(
-    PAYMENT_SESSION_INITIALIZATION_PRUNE_QUEUE,
-    { concurrency: 1 }
-  );
-  return continuationQueue;
-}
-const metadata = {
-  queue: PAYMENT_SESSION_INITIALIZATION_PRUNE_QUEUE,
-  id: "payment_gateways:session-initialization-prune",
-  concurrency: 1
-};
-async function handle(job, ctx) {
-  const tenantId = job.payload?.tenantId;
-  const organizationId = job.payload?.organizationId;
-  if (!tenantId || !organizationId) {
-    logger.warn("Skipping payment-session initialization prune without tenant scope");
-    return;
-  }
-  const em = ctx.resolve("em").fork();
-  const deleted = await pruneCompletedPaymentSessionInitializations(
-    em,
-    { tenantId, organizationId },
-    { batchSize: PAYMENT_SESSION_INITIALIZATION_PRUNE_BATCH_SIZE }
-  );
-  if (deleted > 0) {
-    logger.info("Pruned completed payment-session initialization claims", {
-      deleted,
-      tenantId,
-      organizationId
-    });
-  }
-  if (deleted >= PAYMENT_SESSION_INITIALIZATION_PRUNE_BATCH_SIZE) {
-    await getContinuationQueue().enqueue({ tenantId, organizationId }, { delayMs: 1e3 });
-  }
-}
-export {
-  handle as default,
-  metadata
-};
-//# sourceMappingURL=session-initialization-prune.js.map

package/dist/modules/payment_gateways/workers/session-initialization-prune.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/modules/payment_gateways/workers/session-initialization-prune.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { createModuleQueue, type JobContext, type Queue, type QueuedJob, type WorkerMeta } from '@open-mercato/queue'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  PAYMENT_SESSION_INITIALIZATION_PRUNE_QUEUE,\n  PAYMENT_SESSION_INITIALIZATION_PRUNE_BATCH_SIZE,\n  pruneCompletedPaymentSessionInitializations,\n} from '../lib/session-idempotency'\n\ntype PrunePayload = {\n  tenantId?: string\n  organizationId?: string\n}\n\ntype HandlerContext = JobContext & {\n  resolve: <T = unknown>(name: string) => T\n}\n\nconst logger = createLogger('payment_gateways')\nlet continuationQueue: Queue<PrunePayload> | null = null\n\nfunction getContinuationQueue(): Queue<PrunePayload> {\n  continuationQueue ??= createModuleQueue<PrunePayload>(\n    PAYMENT_SESSION_INITIALIZATION_PRUNE_QUEUE,\n    { concurrency: 1 },\n  )\n  return continuationQueue\n}\n\nexport const metadata: WorkerMeta = {\n  queue: PAYMENT_SESSION_INITIALIZATION_PRUNE_QUEUE,\n  id: 'payment_gateways:session-initialization-prune',\n  concurrency: 1,\n}\n\nexport default async function handle(\n  job: QueuedJob<PrunePayload>,\n  ctx: HandlerContext,\n): Promise<void> {\n  const tenantId = job.payload?.tenantId\n  const organizationId = job.payload?.organizationId\n  if (!tenantId || !organizationId) {\n    logger.warn('Skipping payment-session initialization prune without tenant scope')\n    return\n  }\n\n  const em = ctx.resolve<EntityManager>('em').fork()\n  const deleted = await pruneCompletedPaymentSessionInitializations(\n    em,\n    { tenantId, organizationId },\n    { batchSize: PAYMENT_SESSION_INITIALIZATION_PRUNE_BATCH_SIZE },\n  )\n  if (deleted > 0) {\n    logger.info('Pruned completed payment-session initialization claims', {\n      deleted,\n      tenantId,\n      organizationId,\n    })\n  }\n  if (deleted >= PAYMENT_SESSION_INITIALIZATION_PRUNE_BATCH_SIZE) {\n    await getContinuationQueue().enqueue({ tenantId, organizationId }, { delayMs: 1_000 })\n  }\n}\n"],
-  "mappings": "AACA,SAAS,yBAAuF;AAChG,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAWP,MAAM,SAAS,aAAa,kBAAkB;AAC9C,IAAI,oBAAgD;AAEpD,SAAS,uBAA4C;AACnD,wBAAsB;AAAA,IACpB;AAAA,IACA,EAAE,aAAa,EAAE;AAAA,EACnB;AACA,SAAO;AACT;AAEO,MAAM,WAAuB;AAAA,EAClC,OAAO;AAAA,EACP,IAAI;AAAA,EACJ,aAAa;AACf;AAEA,eAAO,OACL,KACA,KACe;AACf,QAAM,WAAW,IAAI,SAAS;AAC9B,QAAM,iBAAiB,IAAI,SAAS;AACpC,MAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,WAAO,KAAK,oEAAoE;AAChF;AAAA,EACF;AAEA,QAAM,KAAK,IAAI,QAAuB,IAAI,EAAE,KAAK;AACjD,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA,EAAE,UAAU,eAAe;AAAA,IAC3B,EAAE,WAAW,gDAAgD;AAAA,EAC/D;AACA,MAAI,UAAU,GAAG;AACf,WAAO,KAAK,0DAA0D;AAAA,MACpE;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,WAAW,iDAAiD;AAC9D,UAAM,qBAAqB,EAAE,QAAQ,EAAE,UAAU,eAAe,GAAG,EAAE,SAAS,IAAM,CAAC;AAAA,EACvF;AACF;",
-  "names": []
-}

package/dist/modules/portal/extension-points.js

@@ -1,32 +0,0 @@
-import { defineModuleExtensionPoints, injectionExtensionHost } from "@open-mercato/shared/modules/widgets/extension-points";
-const portalPageHost = (spotId, source) => injectionExtensionHost({
-  family: "portal-page",
-  spotId,
-  supported: ["render-widget"],
-  contextContract: "portal.page.v1",
-  scopeContract: "tenant.organization.customer-session",
-  source
-});
-const extensionPoints = defineModuleExtensionPoints({
-  moduleId: "portal",
-  hosts: {
-    dashboardBefore: portalPageHost("portal:dashboard:before", "frontend/[orgSlug]/portal/dashboard/page.tsx"),
-    dashboardAfter: portalPageHost("portal:dashboard:after", "frontend/[orgSlug]/portal/dashboard/page.tsx"),
-    loginBefore: portalPageHost("portal:login:before", "frontend/[orgSlug]/portal/login/page.tsx"),
-    loginAfter: portalPageHost("portal:login:after", "frontend/[orgSlug]/portal/login/page.tsx"),
-    homeBefore: portalPageHost("portal:home:before", "frontend/[orgSlug]/portal/page.tsx"),
-    homeAfter: portalPageHost("portal:home:after", "frontend/[orgSlug]/portal/page.tsx"),
-    profileBefore: portalPageHost("portal:profile:before", "frontend/[orgSlug]/portal/profile/page.tsx"),
-    profileAfter: portalPageHost("portal:profile:after", "frontend/[orgSlug]/portal/profile/page.tsx"),
-    resetPasswordBefore: portalPageHost("portal:reset-password:before", "frontend/[orgSlug]/portal/reset-password/page.tsx"),
-    resetPasswordAfter: portalPageHost("portal:reset-password:after", "frontend/[orgSlug]/portal/reset-password/page.tsx"),
-    signupBefore: portalPageHost("portal:signup:before", "frontend/[orgSlug]/portal/signup/page.tsx"),
-    signupAfter: portalPageHost("portal:signup:after", "frontend/[orgSlug]/portal/signup/page.tsx")
-  }
-});
-var extension_points_default = extensionPoints;
-export {
-  extension_points_default as default,
-  extensionPoints
-};
-//# sourceMappingURL=extension-points.js.map

package/dist/modules/portal/extension-points.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/modules/portal/extension-points.ts"],
-  "sourcesContent": ["import { defineModuleExtensionPoints, injectionExtensionHost } from '@open-mercato/shared/modules/widgets/extension-points'\n\nconst portalPageHost = (spotId: string, source: string) => injectionExtensionHost({\n  family: 'portal-page',\n  spotId,\n  supported: ['render-widget'],\n  contextContract: 'portal.page.v1',\n  scopeContract: 'tenant.organization.customer-session',\n  source,\n})\n\nexport const extensionPoints = defineModuleExtensionPoints({\n  moduleId: 'portal',\n  hosts: {\n    dashboardBefore: portalPageHost('portal:dashboard:before', 'frontend/[orgSlug]/portal/dashboard/page.tsx'),\n    dashboardAfter: portalPageHost('portal:dashboard:after', 'frontend/[orgSlug]/portal/dashboard/page.tsx'),\n    loginBefore: portalPageHost('portal:login:before', 'frontend/[orgSlug]/portal/login/page.tsx'),\n    loginAfter: portalPageHost('portal:login:after', 'frontend/[orgSlug]/portal/login/page.tsx'),\n    homeBefore: portalPageHost('portal:home:before', 'frontend/[orgSlug]/portal/page.tsx'),\n    homeAfter: portalPageHost('portal:home:after', 'frontend/[orgSlug]/portal/page.tsx'),\n    profileBefore: portalPageHost('portal:profile:before', 'frontend/[orgSlug]/portal/profile/page.tsx'),\n    profileAfter: portalPageHost('portal:profile:after', 'frontend/[orgSlug]/portal/profile/page.tsx'),\n    resetPasswordBefore: portalPageHost('portal:reset-password:before', 'frontend/[orgSlug]/portal/reset-password/page.tsx'),\n    resetPasswordAfter: portalPageHost('portal:reset-password:after', 'frontend/[orgSlug]/portal/reset-password/page.tsx'),\n    signupBefore: portalPageHost('portal:signup:before', 'frontend/[orgSlug]/portal/signup/page.tsx'),\n    signupAfter: portalPageHost('portal:signup:after', 'frontend/[orgSlug]/portal/signup/page.tsx'),\n  },\n})\n\nexport default extensionPoints\n"],
-  "mappings": "AAAA,SAAS,6BAA6B,8BAA8B;AAEpE,MAAM,iBAAiB,CAAC,QAAgB,WAAmB,uBAAuB;AAAA,EAChF,QAAQ;AAAA,EACR;AAAA,EACA,WAAW,CAAC,eAAe;AAAA,EAC3B,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf;AACF,CAAC;AAEM,MAAM,kBAAkB,4BAA4B;AAAA,EACzD,UAAU;AAAA,EACV,OAAO;AAAA,IACL,iBAAiB,eAAe,2BAA2B,8CAA8C;AAAA,IACzG,gBAAgB,eAAe,0BAA0B,8CAA8C;AAAA,IACvG,aAAa,eAAe,uBAAuB,0CAA0C;AAAA,IAC7F,YAAY,eAAe,sBAAsB,0CAA0C;AAAA,IAC3F,YAAY,eAAe,sBAAsB,oCAAoC;AAAA,IACrF,WAAW,eAAe,qBAAqB,oCAAoC;AAAA,IACnF,eAAe,eAAe,yBAAyB,4CAA4C;AAAA,IACnG,cAAc,eAAe,wBAAwB,4CAA4C;AAAA,IACjG,qBAAqB,eAAe,gCAAgC,mDAAmD;AAAA,IACvH,oBAAoB,eAAe,+BAA+B,mDAAmD;AAAA,IACrH,cAAc,eAAe,wBAAwB,2CAA2C;AAAA,IAChG,aAAa,eAAe,uBAAuB,2CAA2C;AAAA,EAChG;AACF,CAAC;AAED,IAAO,2BAAQ;",
-  "names": []
-}