mirror of
https://github.com/hanzoai/commerce.git
synced 2026-10-30 15:08:42 +00:00
zeekay
1943f1c093
Multi-tenant commerce and billing: orders, subscriptions, invoices, plans, usage metering and a credit ledger. One Go binary. MIT OR Apache-2.0. Claude-Session: https://claude.ai/code/session_01SAtaDFm8VDiWrhYHNNtxMw
46 lines
2.2 KiB
Go
46 lines
2.2 KiB
Go
package billing
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/hanzoai/commerce/events"
|
|
"github.com/hanzoai/commerce/log"
|
|
)
|
|
|
|
// The money alarm: a charge SETTLED at the processor and the ledger did not move.
|
|
//
|
|
// Every place that can happen already detected it exactly — six of them, each
|
|
// ending at `log.Error("RECONCILE: ...")`. Precise detection that reached
|
|
// nobody: a $99 subscription charge settled on 2026-08-06 and sat uncredited for
|
|
// about twenty-one hours, and the line naming it had been written the instant it
|
|
// happened. The gap was never the detection. It was that a log line is not a
|
|
// channel to a person.
|
|
//
|
|
// So the alarm goes out on the same spine the rest of billing already uses (the
|
|
// analytics collector, one best-effort event) where the fleet read side can see
|
|
// it and page on it. The log line STAYS: the event is fire-and-forget by design
|
|
// and must never be the only record of money that moved.
|
|
//
|
|
// It reports a defect, not a lifecycle step, which is why it is the one billing
|
|
// event carrying `terminal` — the two classes need different humans. A retryable
|
|
// one clears when the customer or the provider tries again; a terminal one needs
|
|
// somebody to grant the balance and refund the charge, and telling that customer
|
|
// to "try again" charges their card twice.
|
|
// It takes the collector as a VALUE rather than lifting it off a request,
|
|
// because the moment it reports belongs to the money move and not to whoever
|
|
// asked for it: the off-session recharge that discovers this has no request at
|
|
// all, and an alarm only a browser can raise is the same silence this exists to
|
|
// end.
|
|
func uncredited(ctx context.Context, ev *events.Client, orgName, subject, settlement, reason string, amountCents int64, terminal bool) {
|
|
log.Error("RECONCILE: a settled payment did not move the ledger — org=%s subject=%s settlement=%s amount=%d terminal=%v: %s",
|
|
orgName, subject, settlement, amountCents, terminal, reason)
|
|
if ev == nil {
|
|
return
|
|
}
|
|
// WithoutCancel (not Background): survive client disconnect but keep trace values.
|
|
detached := context.WithoutCancel(ctx)
|
|
go func() {
|
|
_ = ev.EmitPaymentUncredited(detached, orgName, subject, settlement, reason, amountCents, terminal)
|
|
}()
|
|
}
|