rerobe-js-orm 4.9.16 → 4.9.17

package/lib/helpers/OrderHelpers.js

@@ -828,10 +828,28 @@ class OrderHelpers {
         const timeBucket = this.generateTimeBucket(order.createdAtTimestamp || Date.now(), timeBucketMinutes);
         // Create a hash of line items - what is being ordered
         const lineItemsHash = this.generateLineItemsHash(order.lineItems || []);
+        // Payment anchor - the Stripe-issued PaymentIntent id, present once the order
+        // is paid. Including it gives two genuinely-distinct sales of an IDENTICAL
+        // cart different keys (different PaymentIntents), so a rapid, legitimate
+        // re-sale of the same stocked SKU is not mistaken for a duplicate — while
+        // retries of the SAME payment still collapse to one key. Omitted (filtered out
+        // below) when absent, so unpaid / offline orders keep the pure content + time
+        // fingerprint and behave exactly as before. Unlike id / shopifyId /
+        // orderNumber, the PaymentIntent id is Stripe-issued (not a client-forgeable
+        // arbitrary value), so it cannot be used to bypass idempotency.
+        const paymentIntentId = order.paymentIntentId || '';
         // Combine all fields into a consistent string
         // Note: We explicitly exclude client-generated IDs (id, shopifyId, orderNumber)
         // since clients control these and could bypass idempotency protection
-        const keyComponents = [customerEmail, totalAmount, currencyCode, merchantId, timeBucket, lineItemsHash];
+        const keyComponents = [
+            customerEmail,
+            totalAmount,
+            currencyCode,
+            merchantId,
+            timeBucket,
+            lineItemsHash,
+            paymentIntentId,
+        ];
         // Filter out empty values and join
         const keyString = keyComponents.filter((component) => component && String(component).trim().length > 0).join('|');
         // Generate SHA-256 hash for consistent length and uniqueness

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rerobe-js-orm",
-  "version": "4.9.16",
+  "version": "4.9.17",
   "description": "ReRobe's Javascript ORM Framework",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",