PHPackages glueful/commerce - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Payment Processing](/categories/payments) 4. / 5. glueful/commerce ActiveGlueful-extension[Payment Processing](/categories/payments) glueful/commerce ================ Commerce primitives for Glueful apps: products, carts, orders, inventory, discounts, checkout, and payment integration. v1.13.0(1w ago)02871MITPHPPHP ^8.3 Since Jul 16Pushed 1w agoCompare [ Source](https://github.com/glueful/commerce)[ Packagist](https://packagist.org/packages/glueful/commerce)[ RSS](/packages/glueful-commerce/feed)WikiDiscussions main Synced 1w ago READMEChangelog (10)Dependencies (15)Versions (19)Used By (1) Glueful Commerce ================ [](#glueful-commerce) Commerce for Glueful apps: catalog (products, variants, categories, tags, attributes, media, add-ons, reviews), inventory, carts, discounts, pricing, checkout, orders, refunds, digital delivery, shipping zones and tax tables, customer aggregates, reports, and payment integration seams — plus an optional multi-vendor marketplace (sellers, partitioned checkout, a commission & settlement ledger, payouts, reserves and chargebacks, seller API keys, and seller outbound webhooks) that is entirely inert until switched on. All money is integer minor units. Variant currency must match the store currency. Every mutable row is guarded by affected-row-checked revision claims; concurrency behavior is proven by two-connection PostgreSQL race tests. Install ------- [](#install) ``` composer require glueful/commerce php glueful extensions:enable commerce php glueful migrate:run ``` Commerce requires `glueful/extension-contracts`. Implementations such as Tenancy and Payvia bind those shared contracts when installed; Commerce consumes only the contracts and keeps zero hard class references to those extensions. Decoupling Invariants --------------------- [](#decoupling-invariants) CapabilityWithout extensionWith extensionPayments`ManualPaymentCollector` returns retryable manual payment instructions.A provider such as Payvia binds `PaymentCollector`; Commerce stores orders and starts payment through the contract.Provider payouts & disputesMarketplace payouts are recorded manually by an operator; no chargeback ingestion.A provider such as Payvia (≥ 2.1.0) binds `PayoutCollector` and emits `ProviderChargebackEvent`; the payout saga executes provider transfers, reconciles their status, and posts provider-reported chargebacks/reversals to the ledger.TenancyEvery row uses the `''` sentinel tenant key.Tenancy binds `CurrentTenantResolver` and `TenantTableRegistry`; Commerce fail-closes when no tenant is resolved.UsersGuest checkout works through hashed bearer order tokens.Authenticated order listing and customer detail enrichment use `UserProviderInterface`; guest lookups remain token-protected.MediaProduct media stores blob links; thumbnails absent.`glueful/media` provides image processing for uploaded blobs.EmailNo transactional email is sent (master switch also defaults off).With an email channel configured and `COMMERCE_EMAIL_ENABLED=true`, order lifecycle emails (placed/paid/fulfilled/refunded/note) are dispatched, including one-time digital-download deep links.Commerce never binds defaults under shared contract IDs. It resolves `container()->has(Contract::class) ? get() : inline fallback`, matching Glueful's soft-binding seam pattern. Shipping and tax are contracts with delegating defaults: app-bound provider > DB-backed (when zone/rate rows exist) > config fallback. Line-level tax is available through the optional `LineTaxCalculator` contract; checkout dispatches it automatically when the bound calculator implements it. Storefront API -------------- [](#storefront-api) Base path: `/commerce`. Public routes are rate-limited (config-driven). - `GET /products` — paginated; filters: `category` (slug), `tag` (slug), `attributes` (`attribute-slug:value-slug` pairs, AND, max 5) - `GET /products/{slug}` — enriched: variants, media, categories, tags, attributes, add-ons, rating, grouped children / external payload. Field-allowlisted; internal columns never leave this surface. - `GET /categories` — public category tree (allowlisted fields only) - `POST /products/{slug}/reviews` — public submit, always lands `pending` - `GET /products/{slug}/reviews` — approved only, paginated - `POST /cart`, `GET /cart`, `POST /cart/lines`, `PATCH|DELETE /cart/lines/{uuid}`, `POST|DELETE /cart/discount` - `POST /checkout/quote`, `POST /checkout` - `GET /orders/{number}`, `POST /orders/{number}/payment` - `GET /orders` (authenticated), `GET /orders/{number}/downloads`, `POST /orders/{number}/downloads/{grantUuid}/url` - `GET /downloads/{token}` — grant-validated, short-lived signed blob URL - `GET|POST /account/addresses`, `PATCH|DELETE /account/addresses/{uuid}`(authenticated address book) Cart endpoints use `X-Cart-Token`. Guest order endpoints use `X-Order-Token`. Tokens are returned raw once, stored only as SHA-256 hashes, and are never accepted from query strings. Admin API --------- [](#admin-api) Base path: `/commerce/admin`, authenticated with `commerce:read` or `commerce:write` scopes. Lists are offset-paginated with stable ordering and literal (escaped) substring filters. - Products: list (`status`/`q`/`type` filters), show, create, update, soft delete (tombstone keeps its slug reserved), variants, grouped children - Bulk: `POST /products/bulk-status`, `POST /variants/bulk-price`, `POST /reviews/bulk` — cap 100, per-item outcomes `{applied, failed}` - Catalog breadth: categories (tree + show + CRUD), tags (list/show/create/ rename/delete), attributes (+values), product media (attach/reorder/update/ detach), add-ons - Reviews: list, show, create, approve, spam, delete - Stock: adjust a variant and write a movement ledger row - Discounts: list, show, create, update, guarded delete (409 while redeemed) - Orders: list, show, cancel, mark paid, fulfill, notes (add + list), invoice data - Refunds: issue per order (idempotency-key required), per-order list, cross-order list (`status`/`order`/`from`/`to`) and show - Digital delivery: variant downloads CRUD, grant revoke, refund-access override - Customers: list and show (aggregates over orders by user/email identity) - Shipping: zones (+locations, +methods), classes; Tax: rate tables — full CRUD, consumed by the delegating shipping/tax providers - Reports: `GET /reports/sales`, `/reports/products`, `/reports/customers`(day/week/month windows), `/reports/stock` (low/out-of-stock thresholds) Every route action carries OpenAPI annotations; a CI test walks the full route manifest and fails on any unannotated action. Marketplace (optional, off by default) -------------------------------------- [](#marketplace-optional-off-by-default) A two-level switch gates everything: the install master switch (`COMMERCE_MARKETPLACE_ENABLED`, default `false`) and a per-workspace activation guarded by a catalog adoption gate (no product may lack a seller). While the master switch is off, the marketplace/seller route groups are never registered and ordinary request paths execute **zero marketplace-table queries** — behavior is byte-identical to a non-marketplace install. - **Sellers & memberships** — seller lifecycle (`onboarding|active|suspended|closed`) with an audited, reasoned suspend/reactivate/close; memberships with a fixed role vocabulary (`seller_owner|seller_admin|seller_staff|seller_analyst`) and a last-owner anti-lockout guard; guarded catalog adoption/transfer (never a raw patch). - **Partitioned checkout & seller orders** — one customer order fans out into immutable per-seller partitions with exactly reconciled money attribution (largest-remainder allocation; `Σ` per-seller = order total, hard-asserted in the checkout transaction), independent parent-derived fulfillment, and a payment-confirmation PII gate. - **Commission & settlement ledger** — append-only per-account ledger with deterministic idempotency and per-account locks; immutable per-line commission snapshots (policy resolved product → seller → workspace → config); balances always derived by `SUM`, never stored. - **Payouts, reserves, chargebacks, debt** — manual payouts with derived- balance overdraw refusal, or provider transfers through the contracts `PayoutCollector` port (reserve/execute/finalize saga, retry/reconcile sweeps, reversal handling); rolling reserves consumed reserve-first; provider-reported chargebacks (full auto-expand or operator line attribution) and their reversals; negative balances tracked as debt that freezes payouts. - **Seller API keys** — seller-scoped machine credentials whose effective access is declared key scopes ∩ the subject's live role capabilities ∩ a dedicated grantable catalog, revalidated per request; grace-window rotation and whole-lineage revocation; key management is JWT-interactive only (a key can never mint or manage keys). - **Seller outbound webhooks** — a transactional per-seller outbox written inside the same transaction as the business change (no committed-state-without-event window), payloads allow-list projected per seller; encrypted-at-rest AAD-bound signing secrets returned exactly once; strict SSRF-safe delivery (framework `SafeOutboundTargetResolver`, one resolve + IP pin, HTTPS only); crash-safe claim leases with token-checked finalization; retries with backoff, dead-letter, seller replay, and per-endpoint auto-disable; suspend pauses delivery with the remaining delay frozen, close cancels. Surfaces: sellers operate under `/commerce/seller/{sellerUuid}/...` (catalog, inventory, orders + fulfillment, financial reports, balance, reserves, payout readiness, API keys, webhooks — capability-gated per role; a suspended seller's members keep a minimum read/fulfill surface); platform operators under `/commerce/admin/marketplace/...` (sellers, memberships, adoption and transfer, commission and reserve policy, chargebacks, manual holds, payouts, debt forgiveness). Marketplace tables are tenancy-adopted and `commerce:diagnose`-covered exactly like the core tables. Requires `glueful/framework` ≥ 1.71.0. Provider payouts and dispute ingestion additionally need a `PayoutCollector` implementation (e.g. `glueful/payvia`≥ 2.1.0); without one, payouts stay manual. Configuration ------------- [](#configuration) ``` return [ 'currency' => env('COMMERCE_CURRENCY', 'USD'), // Config fallbacks — used only until DB zone/rate rows exist or an app // binds its own providers. 'tax' => ['flat_rate_bps' => (int) env('COMMERCE_TAX_BPS', 0)], 'shipping' => [ 'methods' => [ ['id' => 'standard', 'label' => 'Standard shipping', 'amount' => 500, 'free_over' => 5000], ], ], 'cart' => ['ttl_days' => (int) env('COMMERCE_CART_TTL_DAYS', 30)], 'rate_limits' => [ 'cart' => [(int) env('COMMERCE_CART_RATE_LIMIT', 60), 60], 'checkout' => [(int) env('COMMERCE_CHECKOUT_RATE_LIMIT', 30), 60], 'orders' => [(int) env('COMMERCE_ORDER_RATE_LIMIT', 60), 60], 'downloads' => [(int) env('COMMERCE_DOWNLOADS_RATE_LIMIT', 60), 60], 'catalog' => [(int) env('COMMERCE_CATALOG_RATE_LIMIT', 120), 60], 'review_submit' => [(int) env('COMMERCE_REVIEW_SUBMIT_RATE_LIMIT', 5), 60], ], // Digital-delivery signed URLs. 'downloads' => ['url_ttl' => (int) env('COMMERCE_DOWNLOADS_URL_TTL', 300)], 'orders' => [ 'expiry_minutes' => (int) env('COMMERCE_ORDER_EXPIRY_MINUTES', 60), 'number_format' => env('COMMERCE_ORDER_NUMBER_FORMAT', 'ORD-{seq}'), ], 'tenancy' => ['enabled' => (bool) env('COMMERCE_TENANCY_ENABLED', false)], // Null-tolerant: invoice-data serializes each key as null, never omitted. 'seller' => [ 'name' => env('COMMERCE_SELLER_NAME'), 'address' => env('COMMERCE_SELLER_ADDRESS'), 'tax_id' => env('COMMERCE_SELLER_TAX_ID'), ], 'email' => [ // Master switch: OFF by default, even when an email channel is active. 'enabled' => (bool) env('COMMERCE_EMAIL_ENABLED', false), 'templates' => [ 'order_placed' => true, 'order_paid' => true, 'order_fulfilled' => true, 'order_refunded' => true, 'order_note' => true, ], ], 'reports' => [ // Low-stock report threshold (0..100000); per-request ?threshold= override. 'low_stock_threshold' => (int) env('COMMERCE_REPORTS_LOW_STOCK_THRESHOLD', 2), ], ]; ``` Marketplace tuning lives under `marketplace.*` (see `config/commerce.php` for the full annotated set): the master switch (`COMMERCE_MARKETPLACE_ENABLED`), workspace-default commission (`COMMERCE_COMMISSION_KIND|BPS|FIXED`), reserve release sweep batching, API-key denial-audit retention (`COMMERCE_API_KEYS_AUTH_DENIED_RETENTION_DAYS`, default 90), and the webhook delivery envelope (`COMMERCE_WEBHOOKS_*`: retry budget and backoff, per-attempt timeout, claim lease — validated strictly greater than the timeout — response cap, consecutive-failure disable threshold, secret rotation overlap, retention, sweep batching). All defaults are operational tuning only; no marketplace behavior turns on without the master switch. Digital Delivery ---------------- [](#digital-delivery) Variants carry downloadable files (private blobs). Grants are issued transactionally when an order is paid: snapshot-derived, idempotent per `(order, download)`, token-hashed. Access flows through `GET /commerce/downloads/{token}` (grant checks + short-lived signed blob URL); a `BlobAccessPolicy` contributor backstops direct blob access. Refunded orders lose access unless an admin sets a per-grant override. `commerce:downloads:backfill`heals grants for orders paid before a download was attached. Tenancy Adoption ---------------- [](#tenancy-adoption) Single-store installs use `tenant_uuid = ''`. If enabling tenancy after data exists, adopt sentinel rows into one tenant before serving tenant-scoped traffic: ``` php glueful commerce:tenancy:adopt --tenant= ``` The command runs in one transaction, refuses mixed tenant data, and rekeys all commerce tenant-owned tables including sequences. `commerce:diagnose` reports contract bindings and sentinel row counts so orphaned rows are visible. Maintenance Commands -------------------- [](#maintenance-commands) - `commerce:orders:expire` - `commerce:carts:prune` - `commerce:stock:adjust [--reason=]` - `commerce:downloads:backfill` - `commerce:customers:link-guests` - `commerce:tenancy:adopt` - `commerce:diagnose` Marketplace (host-cron; all no-ops while the master switch is off): - `commerce:marketplace:reconcile` — read-only ledger coherence scan (missing/duplicate/mismatched postings) - `commerce:marketplace:payouts:retry-sweep` / `commerce:marketplace:payouts:reconcile-sweep` - `commerce:marketplace:payouts:run-batch` - `commerce:marketplace:payout-accounts:sync` — provider destination readiness - `commerce:marketplace:reserves:release-sweep` — release matured rolling reserves - `commerce:marketplace:webhooks:sweep` — reclaim expired delivery leases, re-enqueue due rows - `commerce:marketplace:webhooks:purge` — retention purge of terminal delivery history - `commerce:marketplace:api-keys:purge-denials` — denial-audit retention Migrating from WooCommerce -------------------------- [](#migrating-from-woocommerce) `docs/woocommerce-migration-comparison.md` tracks feature-by-feature coverage. Commerce matches Woo's merchant-observable semantics where migrated stores depend on them (zone first-match ordering, tax rate priority, low-stock defaults) without adopting Woo's architecture; subscriptions, memberships, and bundles are deliberate non-goals. ### Health Score 48 — FairBetter than 94% of packages Maintenance98 Actively maintained with recent releases Popularity17 Limited adoption so far Community8 Small or concentrated contributor base Maturity57 Maturing project, gaining track record Bus Factor1 Top contributor holds 100% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Release Activity Cadence Every ~2 days Total 17 Last Release 13d ago ### Community Maintainers ![](https://avatars.githubusercontent.com/u/95650726?v=4)[msowah](/maintainers/msowah)[@msowah](https://github.com/msowah) --- Top Contributors [![MichaelSowah](https://avatars.githubusercontent.com/u/24699905?v=4)](https://github.com/MichaelSowah "MichaelSowah (178 commits)") --- Tags orderscartcheckoutdiscountsinventorycommerce ### Code Quality TestsPHPUnit Static AnalysisPHPStan Code StylePHP\_CodeSniffer Type Coverage Yes ### Embed Badge ![Health badge](/badges/glueful-commerce/health.svg) ``` [![Health](https://phpackages.com/badges/glueful-commerce/health.svg)](https://phpackages.com/packages/glueful-commerce) ``` ### Alternatives [amsgames/laravel-shop Package set to provide shop or e-commerce functionality (such as CART, ORDERS, TRANSACTIONS and ITEMS) to Laravel for customizable builds. 4825.9k](/packages/amsgames-laravel-shop) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)