Contribution records credited to Bordeaux Metropole

Kessai Payment Engine

• Load a movement's payment through the storage rather than pinning a stale copy, refuse an amount create() cannot record, and fix what the full audit found untranslated, silent and duplicated
  Thu, 09/10/2026 - 07:23
• Record what an undone checkout moved when the provider names no amount, stop a missing gateway killing the expiry sweep, and fix what the full audit found duplicated, inaccessible and stale
  Wed, 09/09/2026 - 07:33
• Give the three movements one shape, and fix what the pre-release audit found stale
  Tue, 09/08/2026 - 17:45
• Finish the renames #3618948 promised, and take core's verbs for takeOperationLock, defaultDeadline and latestMovement
  Tue, 09/08/2026 - 14:55
• Name things the way Drupal core does: canceled over cancelled, module-prefixed *Hooks classes, cron() over onCron(), isHoldKept() over holdKept()
  Tue, 09/08/2026 - 14:50
• Restore entity_test in the tests, and patch key on the next-major lane so it reports on kessai code
  Tue, 09/08/2026 - 13:55
• Inject the logger factory rather than a prebuilt channel
  Sat, 09/05/2026 - 11:50
• Take the payment views with kessai_views when it is uninstalled, because they outlive the module that gives them their Views data
  Sat, 09/05/2026 - 09:44
• Record the claim a token charge takes, run the bcmath gate core actually calls, and fix what the full audit found duplicated and stale
  Sat, 09/05/2026 - 08:11
• Give the audit trail test stub the two methods audit_trail alpha9 added, because without them it fatals and takes the whole suite with it
  Fri, 09/04/2026 - 21:20
• Say when capture() cannot honor the amount it was given, say that INITIATED marks every handoff, and fix what the pre-release audit found stale
  Tue, 09/01/2026 - 07:40
• Raise phpstan from level 3 to level 5: the seventeen findings are all at level 4, and level 5 comes free
  Sun, 08/30/2026 - 20:29
• Remove a payment's movements when the payment is deleted: nothing does, so claims, refunds and reversals outlive it
  Sat, 08/29/2026 - 08:42
• Run phpstan at level 3 like the sibling projects: level 0 let a wrong return type through a green pipeline
  Fri, 08/28/2026 - 23:49
• Give the duplicated logic one owner each, from the row lock to thirteen copies of the same test reload
  Fri, 08/28/2026 - 21:39
• Log the gateway exception the handoff discards, so a gateway that cannot start a payment leaves a trace
  Wed, 08/26/2026 - 20:55
• Name methods verb-first the way Drupal core does, across the public, private and test-helper surface
  Wed, 08/26/2026 - 13:26
• Partial capture, cancel and refund measured against a Worldline pre-production account
  Mon, 08/24/2026 - 14:30
• Documentation contradicts the current expiry design, and the metrics page measures a codebase that no longer exists
  Mon, 08/24/2026 - 13:10
• A cron expiry can record money on the payment it just expired
  Mon, 08/24/2026 - 13:00
• Two gateway methods nothing ever calls, two settings forms with no Configure link, and an unchecked extension
  Mon, 08/24/2026 - 12:50
• capture() cannot name what a claim is for, and a claim leaves no record of its own
  Wed, 08/19/2026 - 12:00
• Documentation and docblocks recount the project's history instead of describing the current design
  Wed, 08/19/2026 - 09:40
• cancel() can only void a whole hold, so a guarantee cannot be partly claimed and partly released
  Wed, 08/19/2026 - 08:50
• refund() can only return a payment whole, and a refund leaves no record of its own
  Wed, 08/19/2026 - 06:30
• A released authorization stops anchoring the card-on-file chain, so a guarantee on a free booking is always declined
  Sun, 08/16/2026 - 12:15
• Let the caller name a payment's purpose instead of choosing from kessai's two kinds
  Sat, 08/15/2026 - 20:20
• Audit follow-up: the ignore file lists a project that raises nothing
  Sat, 08/15/2026 - 18:10
• The next-major lane fails every test class on a deprecation the CI template causes
  Sat, 08/15/2026 - 17:55
• Declare Drupal 12 compatibility, because the pinned core requirement makes every dependent unable to resolve a next-major lane
  Sat, 08/15/2026 - 08:45
• README describes a base field that no longer exists, and misses the alpha2 API surface
  Fri, 08/14/2026 - 23:25
• Leave an abandoned Worldline checkout to its deadline, instead of recording it failed
  Fri, 08/14/2026 - 22:35
• The idempotency key is 43 characters and Worldline accepts 40, so it is not doing its job
  Fri, 08/14/2026 - 21:30
• Tell a payer when the provider is unreachable, instead of silently sending them onward
  Fri, 08/14/2026 - 20:15
• Name the authorization reauthorize could not void, and drop hook_help
  Fri, 08/14/2026 - 17:10
• Documentation for alpha3: regenerate the stale metrics page and add hook_help
  Fri, 08/14/2026 - 16:10
• Warn when the Worldline gateway is configured but webhooks are not, instead of discarding every notification
  Fri, 08/14/2026 - 16:05
• Accessibility: name the payments table, say when it is empty, and identify the card fields
  Fri, 08/14/2026 - 16:05
• Build each gateway plugin once per request instead of once per payment
  Fri, 08/14/2026 - 16:05
• forgetCard() keeps a stored card forever when the gateway has no token support
  Fri, 08/14/2026 - 15:15
• Carry an idempotency key to gateways that support one, so a retry from outside the engine cannot charge twice
  Fri, 08/14/2026 - 14:50
• Mark the public API surface, and say deadline and locale consistently everywhere
  Fri, 08/14/2026 - 14:25
• Cover the untested half of the module: the simulator, the audit trail bridge and both settings forms
  Fri, 08/14/2026 - 14:15
• Claim a payment before calling the provider, so two concurrent callers cannot capture, cancel or refund twice
  Fri, 08/14/2026 - 13:00
• Fix two wrong reconciliation answers: a zero budget defers for a day, and an unexamined payment reports NothingHappened
  Fri, 08/14/2026 - 12:35
• Send the payer's own language to the hosted checkout, not one site-wide locale
  Fri, 08/14/2026 - 11:25
• Decide the expiry and handoff policies left open by the alpha2 audit
  Fri, 08/14/2026 - 10:40
• Give gateways declared capabilities and a single failure convention
  Fri, 08/14/2026 - 10:30
• Close the administrative gaps around payment expiry
  Fri, 08/14/2026 - 09:10
• Let the gateway declare its payment deadline, and reconcile expiry with the provider
  Thu, 08/13/2026 - 22:45