backend-manager 5.0.121 → 5.0.123

package/CHANGELOG.md

@@ -14,6 +14,54 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - `Fixed` for any bug fixes.
 - `Security` in case of vulnerabilities.
 
+# [5.0.123] - 2026-03-10
+### Added
+- Dispute alert system: `POST /payments/dispute-alert` endpoint with Chargeblast processor for ingesting payment dispute webhooks
+- Firestore trigger (`payments-disputes/{alertId}`) that matches disputes to Stripe invoices by date/amount/card, auto-refunds, and cancels subscriptions
+- Discount code system: `GET /payments/discount` validation endpoint and `discount-codes.js` library (FLASH20, SAVE10, WELCOME15)
+- Discount code integration in payment intent flow — auto-creates/reuses Stripe and Chargebee coupons with deterministic IDs
+- Meta Conversions API and TikTok Events API tracking alongside existing GA4 in payment analytics
+- Subscription renewal tracking as payment events (fires on `invoice.payment_succeeded` / `PAYMENT.SALE.COMPLETED` even without a state transition)
+- `attribution`, `discount`, and `supplemental` fields on payment intent schema for checkout context tracking
+- Intent data (attribution, discount, supplemental) propagated to order objects during webhook on-write
+- `meta.pixelId` and `tiktok.pixelCode` fields in config template
+- Journey test accounts for discount and attribution flows
+- Tests for discount validation and dispute alert endpoints
+
+### Changed
+- Renamed config key `google_analytics` → `googleAnalytics`
+- Payment analytics rewritten with independent per-platform fire functions (`fireGA4`, `fireMeta`, `fireTikTok`)
+- Test runner module resolution now tries normal resolution first before falling back to search paths
+- reCAPTCHA marketing contact test skipped when `TEST_EXTENDED_MODE` is not set
+
+# [5.0.122] - 2026-03-09
+### Added
+- Abandoned cart reminder system: sends escalating emails at 15min, 3h, 24h, 48h, 72h to users who visit checkout but don't complete payment
+- `payments-carts/{uid}` Firestore collection with security rules (client-side write, server-side completion)
+- `bm_cronFrequent` Cloud Function running every 10 minutes for sub-daily cron jobs
+- Shared cron runner (`cron/runner.js`) consolidating daily and frequent cron orchestrators
+- `main/order/refunded` and `main/order/abandoned-cart` email templates
+- Firestore rules test for `payments-carts` (12 test cases)
+
+### Changed
+- Migrated v1 email templates to v2 SendGrid template IDs
+- `cron/daily.js` and `cron/frequent.js` now delegate to shared `cron/runner.js`
+- Payment analytics tracking now fires independently of transitions
+
+# [5.0.120] - 2026-03-09
+### Added
+- reCAPTCHA verification on `POST /payments/intent` route (reads `verification.g-recaptcha-response` from request body)
+- Shared `libraries/recaptcha.js` module for reCAPTCHA token verification (replaces duplicate helpers)
+- `verification` field in `payments/intent` schema to accept the reCAPTCHA token object
+
+### Security
+- reCAPTCHA failure responses now return generic "Request could not be verified" (403) instead of revealing the verification mechanism
+- reCAPTCHA verification runs in all environments except automated tests (`isTesting()`)
+
+### Changed
+- Marketing contact routes (`POST /marketing/contact`, `bm_api add-marketing-contact`) now use shared `recaptcha.verify()` instead of inline helpers
+- Marketing reCAPTCHA checks skip during automated tests (consistent with payment intent)
+
 # [5.0.119] - 2026-03-07
 ### Added
 - `POST /marketing/email-preferences` route for unsubscribe/resubscribe via SendGrid ASM suppression groups

package/README.md

@@ -139,7 +139,7 @@ Create `backend-manager-config.json` in your functions directory:
   sentry: {
     dsn: 'https://xxx@xxx.ingest.sentry.io/xxx',
   },
-  google_analytics: {
+  googleAnalytics: {
     id: 'G-XXXXXXXXXX',
     secret: 'your-ga4-secret',
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend-manager",
-  "version": "5.0.121",
+  "version": "5.0.123",
   "description": "Quick tools for developing Firebase functions",
   "main": "src/manager/index.js",
   "bin": {

package/src/cli/commands/deploy.js

@@ -13,7 +13,7 @@ class DeployCommand extends BaseCommand {
     }
 
     // Execute
-    await powertools.execute('firebase deploy', { log: true });
+    await powertools.execute('firebase deploy', { log: true, config: { cwd: self.firebaseProjectPath } });
   }
 }
 

package/src/manager/cron/daily.js

@@ -1,54 +1,3 @@
-const jetpack = require('fs-jetpack');
+const run = require('./runner.js');
 
-/**
- * Daily cron job runner
- *
- * Executes all daily jobs from:
- * 1. BEM core jobs (src/manager/cron/daily/)
- * 2. Custom project jobs (functions/hooks/cron/daily/)
- */
-module.exports = async ({ Manager, assistant, context, libraries }) => {
-  // Set log prefix
-  assistant.setLogPrefix('cron/daily()');
-
-  // Log
-  assistant.log('Starting...');
-
-  // Load BEM jobs
-  await loadAndExecuteJobs(`${__dirname}/daily`, Manager, context);
-
-  // Load custom jobs
-  await loadAndExecuteJobs(`${Manager.cwd}/hooks/cron/daily`, Manager, context);
-};
-
-async function loadAndExecuteJobs(jobsPath, Manager, context) {
-  const jobs = jetpack.list(jobsPath) || [];
-
-  // Log
-  Manager.assistant.log(`Located ${jobs.length} jobs @ ${jobsPath}...`);
-
-  for (const job of jobs) {
-    // Create new assistant for each job
-    const assistant = Manager.Assistant();
-
-    // Load job
-    const jobName = job.replace('.js', '');
-
-    // Set log prefix
-    assistant.setLogPrefix(`cron/daily/${jobName}()`);
-
-    // Log
-    assistant.log('Starting...');
-
-    try {
-      // Load and execute job
-      const handler = require(`${jobsPath}/${job}`);
-      await handler({ Manager, assistant, context, libraries: Manager.libraries });
-
-      assistant.log('Completed!');
-    } catch (e) {
-      assistant.errorify(`Error executing: ${e}`, { code: 500, sentry: true });
-      throw e;
-    }
-  }
-}
+module.exports = async (options) => run('daily', options);

package/src/manager/cron/frequent/abandoned-carts.js

@@ -0,0 +1,148 @@
+const powertools = require('node-powertools');
+const { REMINDER_DELAYS, COLLECTION } = require('../../libraries/abandoned-cart-config.js');
+const { sendOrderEmail } = require('../../events/firestore/payments-webhooks/transitions/send-email.js');
+
+/**
+ * Abandoned cart reminder cron job
+ *
+ * Queries payments-carts where status is pending and nextReminderAt has passed,
+ * sends escalating email reminders, and advances or completes the tracker.
+ */
+module.exports = async ({ Manager, assistant, context, libraries }) => {
+  const { admin } = libraries;
+  const nowUNIX = Math.floor(Date.now() / 1000);
+
+  // Query all pending carts that are due for a reminder
+  const snapshot = await admin.firestore()
+    .collection(COLLECTION)
+    .where('status', '==', 'pending')
+    .where('nextReminderAt', '<=', nowUNIX)
+    .get();
+
+  if (snapshot.empty) {
+    assistant.log('No abandoned carts due for reminders');
+    return;
+  }
+
+  assistant.log(`Processing ${snapshot.size} abandoned cart reminder(s)...`);
+
+  let sent = 0;
+  let completed = 0;
+  let skipped = 0;
+
+  for (const doc of snapshot.docs) {
+    const data = doc.data();
+    const uid = data.owner;
+    const reminderIndex = data.reminderIndex || 0;
+
+    try {
+      // Fetch user doc for email sending
+      const userSnap = await admin.firestore().doc(`users/${uid}`).get();
+
+      if (!userSnap.exists) {
+        assistant.log(`User ${uid} not found, marking cart completed`);
+        await markCompleted(doc, admin, nowUNIX);
+        skipped++;
+        continue;
+      }
+
+      const userDoc = userSnap.data();
+
+      // Belt-and-suspenders: skip if user already has active paid subscription
+      if (userDoc.subscription?.status === 'active'
+        && userDoc.subscription?.product?.id !== 'basic') {
+        assistant.log(`User ${uid} now has active subscription, marking cart completed`);
+        await markCompleted(doc, admin, nowUNIX);
+        skipped++;
+        continue;
+      }
+
+      // Build checkout URL from cart data
+      const checkoutUrl = buildCheckoutUrl(Manager.project.websiteUrl, data);
+
+      // Send reminder email
+      assistant.log(`Sending abandoned cart reminder #${reminderIndex + 1} to uid=${uid}, product=${data.productId}`);
+
+      sendOrderEmail({
+        template: 'main/order/abandoned-cart',
+        subject: `Complete your ${data.productId} checkout`,
+        categories: ['order/abandoned-cart', `order/abandoned-cart/reminder-${reminderIndex + 1}`],
+        userDoc,
+        assistant,
+        data: {
+          abandonedCart: {
+            productId: data.productId,
+            type: data.type,
+            frequency: data.frequency,
+            reminderNumber: reminderIndex + 1,
+            totalReminders: REMINDER_DELAYS.length,
+            checkoutUrl: checkoutUrl,
+          },
+        },
+      });
+
+      sent++;
+
+      // Advance to next reminder or mark completed if this was the last one
+      const nextIndex = reminderIndex + 1;
+
+      if (nextIndex >= REMINDER_DELAYS.length) {
+        assistant.log(`Last reminder sent for uid=${uid}, marking cart completed`);
+        await markCompleted(doc, admin, nowUNIX);
+        completed++;
+      } else {
+        const now = powertools.timestamp(new Date(), { output: 'string' });
+        const updatedNowUNIX = powertools.timestamp(now, { output: 'unix' });
+
+        await doc.ref.set({
+          reminderIndex: nextIndex,
+          nextReminderAt: updatedNowUNIX + REMINDER_DELAYS[nextIndex],
+          metadata: {
+            updated: {
+              timestamp: now,
+              timestampUNIX: updatedNowUNIX,
+            },
+          },
+        }, { merge: true });
+
+        assistant.log(`Advanced uid=${uid} to reminder index ${nextIndex}, next at ${updatedNowUNIX + REMINDER_DELAYS[nextIndex]}`);
+      }
+    } catch (e) {
+      assistant.error(`Error processing abandoned cart for uid=${uid}: ${e.message}`, e);
+      // Continue to next document
+    }
+  }
+
+  assistant.log(`Completed! (${sent} sent, ${completed} completed, ${skipped} skipped)`);
+};
+
+/**
+ * Mark a cart document as completed
+ */
+async function markCompleted(doc, admin, nowUNIX) {
+  const now = powertools.timestamp(new Date(), { output: 'string' });
+
+  await doc.ref.set({
+    status: 'completed',
+    metadata: {
+      updated: {
+        timestamp: now,
+        timestampUNIX: nowUNIX,
+      },
+    },
+  }, { merge: true });
+}
+
+/**
+ * Build checkout URL from cart data
+ */
+function buildCheckoutUrl(baseUrl, data) {
+  const url = new URL('/payment/checkout', baseUrl);
+  url.searchParams.set('product', data.productId);
+
+  if (data.frequency) {
+    url.searchParams.set('frequency', data.frequency);
+  }
+
+  return url.toString();
+}

package/src/manager/cron/frequent.js

@@ -0,0 +1,3 @@
+const run = require('./runner.js');
+
+module.exports = async (options) => run('frequent', options);

package/src/manager/cron/runner.js

@@ -0,0 +1,60 @@
+const jetpack = require('fs-jetpack');
+
+/**
+ * Shared cron job runner
+ *
+ * Discovers and executes all .js job files from:
+ * 1. BEM core jobs directory
+ * 2. Custom project hooks directory
+ *
+ * @param {string} name - Cron schedule name (e.g., 'daily', 'frequent')
+ * @param {object} options
+ * @param {object} options.Manager - Manager instance
+ * @param {object} options.assistant - Assistant instance
+ * @param {object} options.context - Cloud Function context
+ */
+module.exports = async function run(name, { Manager, assistant, context }) {
+  // Set log prefix
+  assistant.setLogPrefix(`cron/${name}()`);
+
+  // Log
+  assistant.log('Starting...');
+
+  // Load BEM jobs
+  await loadAndExecuteJobs(name, `${__dirname}/${name}`, Manager, context);
+
+  // Load custom jobs
+  await loadAndExecuteJobs(name, `${Manager.cwd}/hooks/cron/${name}`, Manager, context);
+};
+
+async function loadAndExecuteJobs(name, jobsPath, Manager, context) {
+  const jobs = jetpack.list(jobsPath) || [];
+
+  // Log
+  Manager.assistant.log(`Located ${jobs.length} jobs @ ${jobsPath}...`);
+
+  for (const job of jobs) {
+    // Create new assistant for each job
+    const assistant = Manager.Assistant();
+
+    // Load job
+    const jobName = job.replace('.js', '');
+
+    // Set log prefix
+    assistant.setLogPrefix(`cron/${name}/${jobName}()`);
+
+    // Log
+    assistant.log('Starting...');
+
+    try {
+      // Load and execute job
+      const handler = require(`${jobsPath}/${job}`);
+      await handler({ Manager, assistant, context, libraries: Manager.libraries });
+
+      assistant.log('Completed!');
+    } catch (e) {
+      assistant.errorify(`Error executing: ${e}`, { code: 500, sentry: true });
+      throw e;
+    }
+  }
+}