@sakeetech/vendure-payment-viva 0.2.1

package/dist/services/connected-accounts.service.js

@@ -0,0 +1,108 @@
+/**
+ * services/connected-accounts.service.ts — Channel ↔ Viva account helpers.
+ *
+ * Used by the webhook worker (V7) for event 8194 and by the onboarding
+ * endpoints (V9). Encapsulates the mandatory field-write order rule:
+ *
+ *   1. vivaMerchantId  (write FIRST — storefront does NOT gate on this)
+ *   2. vivaPayoutsEnabled = true  (write LAST — storefront gates on this)
+ *
+ * Writing in reverse order would create a race window where the storefront
+ * sees payoutsEnabled=true but vivaMerchantId is still null, causing every
+ * createPayment to fail with VIVA_CHANNEL_MISCONFIGURED.
+ *
+ * @see docs/plans/vendure-plugin-v0.md §"Webhook Design — Process flow" step 4 (8194)
+ * @see docs/VENDURE-CONTRACT.MD §10 (field-write order)
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Injectable } from '@nestjs/common';
+import { ChannelService, TransactionalConnection, Logger } from '@vendure/core';
+import { Channel } from '@vendure/core';
+import { VIVA_LOG_CONTEXT } from '../constants.js';
+// ---------------------------------------------------------------------------
+// Service
+// ---------------------------------------------------------------------------
+let ConnectedAccountsService = class ConnectedAccountsService {
+    channelService;
+    connection;
+    constructor(channelService, connection) {
+        this.channelService = channelService;
+        this.connection = connection;
+    }
+    /**
+     * Write `vivaAccountId` on the channel.
+     *
+     * Called at onboarding-create time (V9) immediately after IsvAccounts.create
+     * returns the accountId. This is always the first write for a new channel.
+     */
+    async writeAccountId(ctx, channel, accountId) {
+        Logger.info(`[ConnectedAccounts] Writing vivaAccountId=${accountId} to channel ${String(channel.id)}.`, VIVA_LOG_CONTEXT);
+        await this.channelService.update(ctx, {
+            id: channel.id,
+            customFields: { vivaAccountId: accountId },
+        });
+    }
+    /**
+     * Find a channel where `customFields.vivaAccountId === accountId`.
+     *
+     * Loads all channels and filters in-process (Vendure doesn't support
+     * custom-field WHERE queries natively without raw SQL).
+     *
+     * Returns null if no channel matches.
+     */
+    async findChannelByAccountId(accountId) {
+        const repo = this.connection.rawConnection.getRepository(Channel);
+        const channels = await repo.find();
+        for (const ch of channels) {
+            const cf = ch.customFields;
+            if (cf && cf['vivaAccountId'] === accountId) {
+                return ch;
+            }
+        }
+        return null;
+    }
+    /**
+     * Write `vivaMerchantId` on the channel.
+     *
+     * Must be called BEFORE `flipPayoutsEnabled`. Do not reorder.
+     */
+    async writeMerchantId(ctx, channel, merchantId) {
+        Logger.info(`[ConnectedAccounts] Writing vivaMerchantId=${merchantId} to channel ${String(channel.id)}.`, VIVA_LOG_CONTEXT);
+        // TODO(impl): ChannelService.update in Vendure 3.x accepts a partial UpdateChannelInput.
+        // The exact shape of the update payload for customFields depends on the Vendure version
+        // and whether the channel custom fields are registered as AdminUI-visible.
+        // Line below assumes Vendure 3.6 ChannelService.update signature:
+        //   update(ctx, input: DeepPartial<Channel> & { id: ID }): Promise<Channel>
+        await this.channelService.update(ctx, {
+            id: channel.id,
+            customFields: { vivaMerchantId: merchantId },
+        });
+    }
+    /**
+     * Flip `vivaPayoutsEnabled` on the channel.
+     *
+     * Must be called AFTER `writeMerchantId` when enabling. Do not reorder.
+     */
+    async flipPayoutsEnabled(ctx, channel, value) {
+        Logger.info(`[ConnectedAccounts] Flipping vivaPayoutsEnabled=${value} on channel ${String(channel.id)}.`, VIVA_LOG_CONTEXT);
+        await this.channelService.update(ctx, {
+            id: channel.id,
+            customFields: { vivaPayoutsEnabled: value },
+        });
+    }
+};
+ConnectedAccountsService = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [ChannelService,
+        TransactionalConnection])
+], ConnectedAccountsService);
+export { ConnectedAccountsService };
+//# sourceMappingURL=connected-accounts.service.js.map

package/dist/services/connected-accounts.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connected-accounts.service.js","sourceRoot":"","sources":["../../src/services/connected-accounts.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAGvE,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAEhB;IACA;IAFnB,YACmB,cAA8B,EAC9B,UAAmC;QADnC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,eAAU,GAAV,UAAU,CAAyB;IACnD,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,GAAmB,EAAE,OAAgB,EAAE,SAAiB;QAC3E,MAAM,CAAC,IAAI,CACT,6CAA6C,SAAS,eAAe,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAC1F,gBAAgB,CACjB,CAAC;QACF,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE;YACpC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,YAAY,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE;SACpC,CAAC,CAAC;IACZ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,sBAAsB,CAAC,SAAiB;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAI,EAAU,CAAC,YAAmD,CAAC;YAC3E,IAAI,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC5C,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,GAAmB,EAAE,OAAgB,EAAE,UAAkB;QAC7E,MAAM,CAAC,IAAI,CACT,8CAA8C,UAAU,eAAe,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAC5F,gBAAgB,CACjB,CAAC;QACF,yFAAyF;QACzF,wFAAwF;QACxF,2EAA2E;QAC3E,kEAAkE;QAClE,4EAA4E;QAC5E,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE;YACpC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,YAAY,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE;SACtC,CAAC,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,GAAmB,EAAE,OAAgB,EAAE,KAAc;QAC5E,MAAM,CAAC,IAAI,CACT,mDAAmD,KAAK,eAAe,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAC5F,gBAAgB,CACjB,CAAC;QACF,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,EAAE;YACpC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,YAAY,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE;SACrC,CAAC,CAAC;IACZ,CAAC;CACF,CAAA;AA/EY,wBAAwB;IADpC,UAAU,EAAE;qCAGwB,cAAc;QAClB,uBAAuB;GAH3C,wBAAwB,CA+EpC"}

package/dist/services/per-merchant-semaphore.service.d.ts

@@ -0,0 +1,49 @@
+/**
+ * services/per-merchant-semaphore.service.ts — In-process per-merchant concurrency semaphore.
+ *
+ * Limits concurrent webhook processing per merchantId to PER_MERCHANT_SEMAPHORE_PERMITS
+ * (default 5) per worker process, matching Medusa A11.
+ *
+ * Optional Redlock injection: when `redlock` is set in plugin options the service
+ * acquires a Redis-backed distributed lock on `merchant:{merchantId}` before
+ * entering the in-process semaphore. Release always happens in `finally`.
+ *
+ * LRU: idle merchant entries (no waiting/active holders) are evicted after 5 min.
+ *
+ * Multi-worker note: without Redlock the cap is PERMITS × WORKERS (each worker has
+ * its own independent in-process counter — no global coordination).
+ *
+ * @see docs/plans/vendure-plugin-v0.md §"Webhook Design — Per-tenant concurrency" D9
+ */
+import type { VivaPaymentPluginOptions } from '../types.js';
+export type Release = () => Promise<void>;
+export declare class PerMerchantSemaphore {
+    private readonly options;
+    private readonly slots;
+    private readonly permits;
+    private readonly redlock;
+    private _evictionTimer;
+    readonly EVICTION_IDLE_MS: number;
+    constructor(options: VivaPaymentPluginOptions);
+    /**
+     * Acquire a semaphore permit for `merchantId`.
+     *
+     * Returns a `Release` function that MUST be called in a `finally` block.
+     *
+     * If a Redlock client is configured, a distributed lock is also acquired
+     * before returning. The distributed lock is released together with the
+     * in-process permit.
+     */
+    acquire(merchantId: string): Promise<Release>;
+    private _getSlot;
+    private _acquireInProcess;
+    private _releaseInProcess;
+    private _startEvictionTimer;
+    private _evict;
+    /** @internal Force an eviction pass (for tests). */
+    _forceEvict(): void;
+    /** @internal Snapshot of current slot map size (for tests). */
+    get _slotCount(): number;
+    onApplicationShutdown(): void;
+}
+//# sourceMappingURL=per-merchant-semaphore.service.d.ts.map

package/dist/services/per-merchant-semaphore.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"per-merchant-semaphore.service.d.ts","sourceRoot":"","sources":["../../src/services/per-merchant-semaphore.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,wBAAwB,EAAiB,MAAM,aAAa,CAAC;AAM3E,MAAM,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;AAY1C,qBACa,oBAAoB;IAYA,OAAO,CAAC,QAAQ,CAAC,OAAO;IAXvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IAGpD,OAAO,CAAC,cAAc,CAA6C;IAGnE,QAAQ,CAAC,gBAAgB,SAAkB;gBAGK,OAAO,EAAE,wBAAwB;IAOjF;;;;;;;;OAQG;IACG,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwBnD,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,iBAAiB;IAoBzB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,MAAM;IASd,oDAAoD;IACpD,WAAW,IAAI,IAAI;IAInB,+DAA+D;IAC/D,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,qBAAqB,IAAI,IAAI;CAK9B"}

package/dist/services/per-merchant-semaphore.service.js

@@ -0,0 +1,156 @@
+/**
+ * services/per-merchant-semaphore.service.ts — In-process per-merchant concurrency semaphore.
+ *
+ * Limits concurrent webhook processing per merchantId to PER_MERCHANT_SEMAPHORE_PERMITS
+ * (default 5) per worker process, matching Medusa A11.
+ *
+ * Optional Redlock injection: when `redlock` is set in plugin options the service
+ * acquires a Redis-backed distributed lock on `merchant:{merchantId}` before
+ * entering the in-process semaphore. Release always happens in `finally`.
+ *
+ * LRU: idle merchant entries (no waiting/active holders) are evicted after 5 min.
+ *
+ * Multi-worker note: without Redlock the cap is PERMITS × WORKERS (each worker has
+ * its own independent in-process counter — no global coordination).
+ *
+ * @see docs/plans/vendure-plugin-v0.md §"Webhook Design — Per-tenant concurrency" D9
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+import { Injectable, Inject } from '@nestjs/common';
+import { PER_MERCHANT_SEMAPHORE_PERMITS, VIVA_PLUGIN_OPTIONS } from '../constants.js';
+// ---------------------------------------------------------------------------
+// Service
+// ---------------------------------------------------------------------------
+let PerMerchantSemaphore = class PerMerchantSemaphore {
+    options;
+    slots = new Map();
+    permits;
+    redlock;
+    // LRU eviction timer handle
+    _evictionTimer;
+    // Exposed for tests
+    EVICTION_IDLE_MS = 5 * 60 * 1_000; // 5 minutes
+    constructor(options) {
+        this.options = options;
+        this.permits = PER_MERCHANT_SEMAPHORE_PERMITS;
+        this.redlock = options.redlock;
+        this._startEvictionTimer();
+    }
+    /**
+     * Acquire a semaphore permit for `merchantId`.
+     *
+     * Returns a `Release` function that MUST be called in a `finally` block.
+     *
+     * If a Redlock client is configured, a distributed lock is also acquired
+     * before returning. The distributed lock is released together with the
+     * in-process permit.
+     */
+    async acquire(merchantId) {
+        // 1. Acquire distributed lock (if configured)
+        let redlockRelease;
+        if (this.redlock) {
+            const lock = await this.redlock.acquire([`merchant:${merchantId}`], 30_000);
+            redlockRelease = () => lock.release();
+        }
+        // 2. Acquire in-process slot
+        await this._acquireInProcess(merchantId);
+        return async () => {
+            try {
+                if (redlockRelease)
+                    await redlockRelease();
+            }
+            finally {
+                this._releaseInProcess(merchantId);
+            }
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // In-process semaphore helpers
+    // ---------------------------------------------------------------------------
+    _getSlot(merchantId) {
+        let slot = this.slots.get(merchantId);
+        if (!slot) {
+            slot = { active: 0, queue: [], lastIdleAt: Date.now() };
+            this.slots.set(merchantId, slot);
+        }
+        return slot;
+    }
+    _acquireInProcess(merchantId) {
+        const slot = this._getSlot(merchantId);
+        if (slot.active < this.permits) {
+            slot.active++;
+            return Promise.resolve();
+        }
+        // Queue the waiter
+        return new Promise((resolve) => {
+            slot.queue.push(resolve);
+        });
+    }
+    _releaseInProcess(merchantId) {
+        const slot = this.slots.get(merchantId);
+        if (!slot)
+            return;
+        const next = slot.queue.shift();
+        if (next) {
+            // hand the permit directly to the next waiter (active count unchanged)
+            next();
+        }
+        else {
+            slot.active = Math.max(0, slot.active - 1);
+            if (slot.active === 0) {
+                slot.lastIdleAt = Date.now();
+            }
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // LRU eviction
+    // ---------------------------------------------------------------------------
+    _startEvictionTimer() {
+        // Run every minute; evict entries idle for >5 min with no active/queued holders
+        this._evictionTimer = setInterval(() => {
+            this._evict();
+        }, 60_000);
+        // Don't block the Node.js event loop from exiting
+        if (this._evictionTimer.unref)
+            this._evictionTimer.unref();
+    }
+    _evict() {
+        const now = Date.now();
+        for (const [merchantId, slot] of this.slots.entries()) {
+            if (slot.active === 0 && slot.queue.length === 0 && now - slot.lastIdleAt > this.EVICTION_IDLE_MS) {
+                this.slots.delete(merchantId);
+            }
+        }
+    }
+    /** @internal Force an eviction pass (for tests). */
+    _forceEvict() {
+        this._evict();
+    }
+    /** @internal Snapshot of current slot map size (for tests). */
+    get _slotCount() {
+        return this.slots.size;
+    }
+    onApplicationShutdown() {
+        if (this._evictionTimer) {
+            clearInterval(this._evictionTimer);
+        }
+    }
+};
+PerMerchantSemaphore = __decorate([
+    Injectable(),
+    __param(0, Inject(VIVA_PLUGIN_OPTIONS)),
+    __metadata("design:paramtypes", [Object])
+], PerMerchantSemaphore);
+export { PerMerchantSemaphore };
+//# sourceMappingURL=per-merchant-semaphore.service.js.map

package/dist/services/per-merchant-semaphore.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"per-merchant-semaphore.service.js","sourceRoot":"","sources":["../../src/services/per-merchant-semaphore.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,8BAA8B,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAetF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAGvE,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAYiB;IAX/B,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IACxC,OAAO,CAAS;IAChB,OAAO,CAA4B;IAEpD,4BAA4B;IACpB,cAAc,CAA6C;IAEnE,oBAAoB;IACX,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,YAAY;IAExD,YACgD,OAAiC;QAAjC,YAAO,GAAP,OAAO,CAA0B;QAE/E,IAAI,CAAC,OAAO,GAAG,8BAA8B,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,8CAA8C;QAC9C,IAAI,cAAiD,CAAC;QACtD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,YAAY,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5E,cAAc,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,CAAC;QAED,6BAA6B;QAC7B,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEzC,OAAO,KAAK,IAAI,EAAE;YAChB,IAAI,CAAC;gBACH,IAAI,cAAc;oBAAE,MAAM,cAAc,EAAE,CAAC;YAC7C,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACrC,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,+BAA+B;IAC/B,8EAA8E;IAEtE,QAAQ,CAAC,UAAkB;QACjC,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,iBAAiB,CAAC,UAAkB;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,mBAAmB;QACnB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAC,UAAkB;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,uEAAuE;YACvE,IAAI,EAAE,CAAC;QACT,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAEtE,mBAAmB;QACzB,gFAAgF;QAChF,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,kDAAkD;QAClD,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IAEO,MAAM;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAClG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,WAAW;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,+DAA+D;IAC/D,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,qBAAqB;QACnB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;CACF,CAAA;AA9HY,oBAAoB;IADhC,UAAU,EAAE;IAaR,WAAA,MAAM,CAAC,mBAAmB,CAAC,CAAA;;GAZnB,oBAAoB,CA8HhC"}

package/dist/services/state-machine.service.d.ts

@@ -0,0 +1,100 @@
+/**
+ * services/state-machine.service.ts — Low-level VivaTransaction row helpers
+ * AND Vendure order/payment transition wrappers (V7 extension).
+ *
+ * Row helpers: INSERT-OR-NOTHING idempotent writes + lookups for VivaTransaction.
+ * Transition helpers: wraps OrderService + PaymentService state-machine calls;
+ *   used exclusively by the webhook worker (V7). Implements the stale-recovery
+ *   re-walk (AddingItems → ArrangingPayment → PaymentAuthorized → PaymentSettled)
+ *   with fail-loud semantics per Q4 decision.
+ *
+ * Repository injection via Vendure's TransactionalConnection.
+ *
+ * @see docs/plans/vendure-plugin-v0.md §"Build Plan — V5 + V7"
+ * @see docs/plans/vendure-plugin-v0.md §D6 (state transitions via OrderService)
+ * @see docs/plans/vendure-plugin-v0.md §D11 (idempotency)
+ */
+import { TransactionalConnection, OrderService, PaymentService } from '@vendure/core';
+import type { RequestContext } from '@vendure/core';
+import { VivaTransaction } from '../entities/viva-transaction.entity.js';
+import type { VivaTransactionStatus } from '../entities/viva-transaction.entity.js';
+export interface UpsertPendingInput {
+    channelId: string | number;
+    paymentId: string | number;
+    idempotencyKey: string;
+    amountMinor: bigint;
+    currencyCode: string;
+    isvAmountMinor: bigint;
+}
+export declare class StateMachineService {
+    private readonly connection;
+    private readonly orderService;
+    private readonly paymentService;
+    constructor(connection: TransactionalConnection, orderService: OrderService, paymentService: PaymentService);
+    /**
+     * Load a VivaTransaction row by (channelId, paymentId).
+     * Returns null if not found.
+     */
+    getVivaTransaction(ctx: RequestContext, channelId: string | number, paymentId: string | number): Promise<VivaTransaction | null>;
+    /**
+     * INSERT-OR-NOTHING write of a pending VivaTransaction row.
+     *
+     * Idempotency key D11: keyed on (channelId, paymentId).
+     * If a row already exists with the same key and a non-null vivaOrderCode,
+     * returns that existing row so the handler can skip the Viva API call.
+     *
+     * Returns: { row, wasInserted }
+     *   wasInserted=true  → freshly inserted; handler must call Viva.
+     *   wasInserted=false → already existed; check row.vivaOrderCode.
+     */
+    upsertPendingTransaction(ctx: RequestContext, input: UpsertPendingInput): Promise<{
+        row: VivaTransaction;
+        wasInserted: boolean;
+    }>;
+    /**
+     * Update the vivaOrderCode on a pending row after createOrder succeeds.
+     */
+    setOrderCode(ctx: RequestContext, rowId: string | number, vivaOrderCode: string, metadata: Record<string, unknown>): Promise<void>;
+    /**
+     * Update row status (e.g. pending → captured, pending → cancelled).
+     */
+    setStatus(ctx: RequestContext, rowId: string | number, status: VivaTransactionStatus, metadata?: Record<string, unknown>): Promise<void>;
+    /**
+     * Transition a Payment to `Settled` via `PaymentService.transitionToState`.
+     *
+     * Vendure's canonical path for webhook-driven settlement.
+     * @see docs/plans/vendure-plugin-v0.md §D6, §D5 (1796 settle path)
+     */
+    transitionPaymentToSettled(ctx: RequestContext, orderId: string | number, paymentId: string | number): Promise<void>;
+    /**
+     * Transition a Payment to `Declined` via `PaymentService.transitionToState`.
+     *
+     * Called on webhook 1798 (Transaction Failed). Order stays in ArrangingPayment.
+     * @see docs/plans/vendure-plugin-v0.md §D5 (1798 path)
+     */
+    transitionPaymentToDeclined(ctx: RequestContext, paymentId: string | number): Promise<void>;
+    /**
+     * Transition a Payment to `Cancelled` via `PaymentService.transitionToState`.
+     *
+     * Called on webhook 4865 user-cancel detection.
+     * @see docs/plans/vendure-plugin-v0.md §D5 (4865 path)
+     */
+    transitionPaymentToCancelled(ctx: RequestContext, paymentId: string | number): Promise<void>;
+    /**
+     * Stale-order re-walk: AddingItems → ArrangingPayment → PaymentSettled.
+     *
+     * Implements the Q4 decision: fail-loud on any transition failure — log an
+     * ERROR-level message, throw, let the webhook row stay unprocessed. The
+     * storefront will surface "basket changed" via the live order state.
+     *
+     * Sequence:
+     *   1. AddingItems → ArrangingPayment    (transitionOrderToState)
+     *   2. ArrangingPayment → settlePayment  (OrderService.settlePayment)
+     *
+     * @see docs/plans/vendure-plugin-v0.md §"Process flow" step 4e
+     * @see docs/plans/vendure-plugin-v0.md §"Architecture Decisions Q4"
+     */
+    recoverStaleOrderAndSettle(ctx: RequestContext, orderId: string | number, paymentId: string | number): Promise<void>;
+    private _isDuplicateKeyError;
+}
+//# sourceMappingURL=state-machine.service.d.ts.map

package/dist/services/state-machine.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-machine.service.d.ts","sourceRoot":"","sources":["../../src/services/state-machine.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,uBAAuB,EAAU,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,KAAK,EAAE,cAAc,EAAW,MAAM,eAAe,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAC;AAOpF,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD,qBACa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAFd,UAAU,EAAE,uBAAuB,EACnC,YAAY,EAAE,YAAY,EAC1B,cAAc,EAAE,cAAc;IAGjD;;;OAGG;IACG,kBAAkB,CACtB,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,GAAG,MAAM,EAC1B,SAAS,EAAE,MAAM,GAAG,MAAM,GACzB,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAOlC;;;;;;;;;;OAUG;IACG,wBAAwB,CAC5B,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC;QAAE,GAAG,EAAE,eAAe,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;IAgD1D;;OAEG;IACG,YAAY,CAChB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,IAAI,CAAC;IAYhB;;OAEG;IACG,SAAS,CACb,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,MAAM,EAAE,qBAAqB,EAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAwBhB;;;;;OAKG;IACG,0BAA0B,CAC9B,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,SAAS,EAAE,MAAM,GAAG,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,2BAA2B,CAC/B,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,GAAG,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;;OAKG;IACG,4BAA4B,CAChC,GAAG,EAAE,cAAc,EACnB,SAAS,EAAE,MAAM,GAAG,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;;;;;;;;;;OAaG;IACG,0BAA0B,CAC9B,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,SAAS,EAAE,MAAM,GAAG,MAAM,GACzB,OAAO,CAAC,IAAI,CAAC;IAgChB,OAAO,CAAC,oBAAoB;CAQ7B"}