popertotsandSisyphus 8accc2ba6f fix: dev mock parity — GetCheckout/GetPayment return structured NOT_FOUND errors matching prod ...

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

2026-08-22 00:34:51 +01:00

..

cards_pagination_test.go

fix: payments hardening — SCA wire contract (saved-card ref + tokenize-result), terminal/till token routing, tip-cap overflow carve, completion campaign atomicity, orphan B1-evidence gate, gift-card gates/locks, admin backstops

2026-08-22 00:34:50 +01:00

square_dev_test.go

fix: dev-mock/prod parity + fail-closed config gates — 402 verification, cnon:sca binding validation, refund reconcile parity, SNAPSHOT_ENC_KEY fail-closed, webhook config gates, access-token startup validation, ClientIP validation

2026-08-22 00:34:51 +01:00

square_dev.go

fix: dev mock parity — GetCheckout/GetPayment return structured NOT_FOUND errors matching prod

2026-08-22 00:34:51 +01:00

square_http_client_test.go

fix: round-3 — tip gate asymmetry, webhook VAT align + 503 notifications, cash-tip campaign overcharge, lockout DoS, erasure durability, S3 retry cap, env parsing, per-user rate limiters, consume dead code, frontend 2FA remnants

2026-08-22 00:34:51 +01:00

square_http_client_timeout_test.go

fix: comprehensive payment system hardening (4 review passes)

2026-08-22 00:34:49 +01:00

square_http_client.go

fix: round-3 — tip gate asymmetry, webhook VAT align + 503 notifications, cash-tip campaign overcharge, lockout DoS, erasure durability, S3 retry cap, env parsing, per-user rate limiters, consume dead code, frontend 2FA remnants

2026-08-22 00:34:51 +01:00

square.go

fix: review-loop A — discount credit on admin payments, campaign over-credit cap, sweep replay window, dedup refund revalidation, duplication/modularisation, GBP pence naming

2026-08-22 00:34:50 +01:00

types.go

feat: Square SCA tokenize-result wire contract — token as source_id, byte-identical dev mock

2026-08-22 00:34:50 +01:00