feat/e-commerce-stripe-v2

[CarmenDou]

Summary by cubic

Add real Stripe Checkout via InsForge Payments, a wishlist, and an order status timeline with admin fulfillment. Checkout now redirects to Stripe, then back to a success page that polls and routes to the order; inventory is finalized via a payment trigger that uses greatest(0, ...) to surface oversells and avoid silent errors.

• New Features

  • Stripe Checkout from the checkout form; creates a pending order, starts a session, redirects to Stripe, then /checkout/success polls until paid and redirects to the order. Finalization happens via a database trigger on payments.payment_history that decrements inventory with greatest(0, ...). Uses NEXT_PUBLIC_APP_URL for redirects and handles timeouts/errors.
  • Order timeline on the order page (placed, payment confirmed, preparing, shipped, delivered), with admin actions: mark shipped (optional tracking) and mark delivered.
  • Wishlist with optimistic heart toggle on cards and PDP, plus /account/wishlist.
  • Product and variant stripe_price_id support; missing-price errors are surfaced clearly. Parallelized data fetch and resilient wishlist lookups.
  • Updated docs for Stripe setup, promo-code caveat, and the order lifecycle.

• Migration

  • Run the DB migration (adds order_status_events, wishlists, Stripe columns on products/variants and orders, RLS, admin RPCs, and a payments trigger that finalizes paid orders and safely decrements inventory).
  • Upgrade @insforge/sdk to ^1.3.1.
  • Configure InsForge Payments with your Stripe keys and seed products/prices; write stripe_price_id to matching products/product_variants rows.
  • Set NEXT_PUBLIC_APP_URL for production.

^{Written for commit 539206e. Summary will update on new commits.}

[cubic-dev-ai]

11 issues found across 22 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="e-commerce/lib/store-actions.ts">

<violation number="1" location="e-commerce/lib/store-actions.ts:140">
P1: The new checkout-success poll path only reads `orders.payment_status` and no longer finalizes paid sessions, so paid checkouts can remain unfinalized when the projection/webhook update is delayed or missed.</violation>
</file>

<file name="e-commerce/lib/store.ts">

<violation number="1" location="e-commerce/lib/store.ts:743">
P1: Stripe checkout session omits shipping/tax from the charged amount, so customers can be charged less than `orders.total_cents`.</violation>
</file>

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[cubic-dev-ai]

P1: The new checkout-success poll path only reads orders.payment_status and no longer finalizes paid sessions, so paid checkouts can remain unfinalized when the projection/webhook update is delayed or missed.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At e-commerce/lib/store-actions.ts, line 140:

<comment>The new checkout-success poll path only reads `orders.payment_status` and no longer finalizes paid sessions, so paid checkouts can remain unfinalized when the projection/webhook update is delayed or missed.</comment>

<file context>
@@ -119,3 +134,38 @@ export async function setDefaultAddressAction(
+
+export async function pollOrderPaymentAction(payload: { orderId: string }) {
+  const { viewer, accessToken } = await requireSession();
+  const result = await getOrderPaymentState({
+    accessToken,
+    userId: viewer.id,
</file context>

[cubic-dev-ai]

P1: Stripe checkout session omits shipping/tax from the charged amount, so customers can be charged less than orders.total_cents.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At e-commerce/lib/store.ts, line 743:

<comment>Stripe checkout session omits shipping/tax from the charged amount, so customers can be charged less than `orders.total_cents`.</comment>

<file context>
@@ -603,6 +673,143 @@ export async function placeOrderForUser(args: {
+
+  const { data: session, error: sessionError } = await insforge.payments.createCheckoutSession('test', {
+    mode: 'payment',
+    lineItems,
+    successUrl: `${args.successOrigin}/checkout/success?order_id=${args.orderId}&session_id={CHECKOUT_SESSION_ID}`,
+    cancelUrl: `${args.successOrigin}/cart`,
</file context>

[cubic-dev-ai]

2 issues found across 7 files (changes from recent commits).

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="e-commerce/lib/store-actions.ts">

<violation number="1" location="e-commerce/lib/store-actions.ts:140">
P1: The new checkout-success poll path only reads `orders.payment_status` and no longer finalizes paid sessions, so paid checkouts can remain unfinalized when the projection/webhook update is delayed or missed.</violation>
</file>

<file name="e-commerce/lib/store.ts">

<violation number="1" location="e-commerce/lib/store.ts:743">
P1: Stripe checkout session omits shipping/tax from the charged amount, so customers can be charged less than `orders.total_cents`.</violation>
</file>

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[jwfing]

LGTM - approved.