tixbit 0.2.1 → 0.2.2

package/README.md

@@ -95,7 +95,7 @@ tixbit link start <listing-id> --quantity 1 --email buyer@example.com --max-pric
 tixbit link complete <order-reference>
 ```
 
-The second command checks approval, sends one Stripe MPP credential, and reports whether the ticket was issued. If approval is still pending, it returns the same URL without sending payment. If the payment result is uncertain, use `link complete` with the same order reference. The CLI stores the purchase key in a private file under `~/.local/state/tixbit/link` (or `XDG_STATE_HOME`) and never prints or saves the Link payment token. Keep that file until the order is settled. Each command returns JSON; `approval_required` and payment failures use exit code 2.
+The second command checks approval, sends one Stripe MPP credential, and reports whether the ticket was issued. If approval is still pending, it returns the same URL without sending payment. After payment submission, the CLI will not send that payment again. If the result is `pending`, do not start another checkout. Contact TixBit support with the order reference so the charge and ticket can be reconciled. The CLI stores the purchase key in a private file under `~/.local/state/tixbit/link` (or `XDG_STATE_HOME`) and never prints or saves the Link payment token. Keep that file until the order is settled. Each command returns JSON; `approval_required` and payment failures use exit code 2.
 
 Each spend request includes its TixBit order reference in the approval details. Link can still rate limit a matching amount and merchant for a short time, even after a request is canceled. If Link rejects a request, the CLI reports a safe error code such as `LINK_DUPLICATE_REQUEST` or `LINK_NETWORK_UNAVAILABLE` without printing Link credentials.
 

package/dist/cli.js

@@ -428,6 +428,20 @@ var TixBitClient = class {
       const body = await response.json().catch(() => ({}));
       const orderReference = normalizeOrderReference(body.orderReference);
       const receiptUrl = normalizeReceiptUrl(body.receiptUrl);
+      if (response.status >= 500 && body.status !== "manual_review_required") {
+        return {
+          success: false,
+          status: "pending",
+          idempotencyKey,
+          orderReference,
+          receiptUrl,
+          error: {
+            code: "PURCHASE_OUTCOME_AMBIGUOUS",
+            message: "The server failed to confirm the purchase outcome."
+          },
+          action: "Check the order with the same idempotency key. Do not create a new payment or purchase attempt."
+        };
+      }
       if (response.status === 402) {
         const order = normalizePurchaseOrder(
           body.order,
@@ -1049,7 +1063,15 @@ async function startLinkPurchase(input) {
 }
 async function completeLinkPurchase(orderReference) {
   const state = await loadState(orderReference);
-  if (state.result?.status === "fulfilled" || state.result?.status === "manual_review_required") return state.result;
+  if (state.result) return state.result;
+  if (state.paymentAttempted) return {
+    success: false,
+    status: "pending",
+    orderReference,
+    amountCents: state.amountCents,
+    error: { code: "PURCHASE_OUTCOME_AMBIGUOUS", message: "Payment may have been submitted, but the result is unknown." },
+    action: "Do not retry payment or start another checkout. Contact TixBit support with this order reference."
+  };
   const approval = await linkCli(["spend-request", "retrieve", state.spendRequestId, "--include", "shared_payment_token"]);
   if (["denied", "declined", "expired", "canceled", "cancelled"].includes(String(approval.status))) {
     return {
@@ -1097,6 +1119,8 @@ async function completeLinkPurchase(orderReference) {
     }
   });
   let decline = false;
+  state.paymentAttempted = true;
+  await saveState(state);
   const client2 = new TixBitClient({
     paymentEndpoint: paymentEndpoint(),
     timeoutMs: 9e4,
@@ -1123,13 +1147,11 @@ async function completeLinkPurchase(orderReference) {
     ...result.order && !decline ? { order: result.order } : {},
     ...!result.success ? {
       error: decline ? { code: "CARD_DECLINED", message: "Stripe declined the card selected in Link." } : result.error,
-      action: decline ? "Select another card in Link and start a new spend approval. No ticket was issued." : result.action
+      action: decline ? "Select another card in Link and start a new spend approval. No ticket was issued." : result.status === "pending" ? "Payment may have succeeded. Do not retry or start another checkout. Contact TixBit support with this order reference." : result.action
     } : {}
   };
-  if (output2.status === "fulfilled" || output2.status === "manual_review_required") {
-    state.result = output2;
-    await saveState(state);
-  }
+  state.result = output2;
+  await saveState(state);
   return output2;
 }
 

package/dist/index.js

@@ -408,6 +408,20 @@ var TixBitClient = class {
       const body = await response.json().catch(() => ({}));
       const orderReference = normalizeOrderReference(body.orderReference);
       const receiptUrl = normalizeReceiptUrl(body.receiptUrl);
+      if (response.status >= 500 && body.status !== "manual_review_required") {
+        return {
+          success: false,
+          status: "pending",
+          idempotencyKey,
+          orderReference,
+          receiptUrl,
+          error: {
+            code: "PURCHASE_OUTCOME_AMBIGUOUS",
+            message: "The server failed to confirm the purchase outcome."
+          },
+          action: "Check the order with the same idempotency key. Do not create a new payment or purchase attempt."
+        };
+      }
       if (response.status === 402) {
         const order = normalizePurchaseOrder(
           body.order,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tixbit",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Search events, browse listings, view seatmaps, and purchase TixBit tickets through MPP",
   "type": "module",
   "main": "./dist/index.js",