feat(agent-commerce): ACP checkout (#6776) のコア実装

[nanasess]

概要(Overview・Refs Issue)

AI エージェント経由購入の ACP (Agentic Commerce Protocol, 2026-04-17) checkout を EC-CUBE 本体へ実装します。Refs #6776 / 共通基盤 #6777。

Phase 1b 共通基盤 (CheckoutSession / AgentCheckoutPurchaseFlowAdapter / 状態機械 / DB Idempotency、#6825) の上に積むスタック PR です。#6825 着地後に 4.4 へ rebase 予定で、それまで本 PR の diff には #6825 の変更が含まれます。本ブランチは upstream/4.4 を取り込み済み (kana nullable #6809 含む)。

• AcpCheckoutController: 5 エンドポイント (POST /acp/checkout_sessions / POST /{id} / GET /{id} / POST .../complete / POST .../cancel)
• インバウンド認証 = OAuth2 Bearer (acp:checkout scope)。eccube-api4 のリソースサーバー (api4#188) に依存し、未導入時は 503
• 決済具象は決済プラグインが寄与 (本 PR は AcpPaymentHandlerInterface の契約のみ)

方針(Policy)

• 一次仕様 (specifications/agentic-commerce-protocol, 2026-04-17) を正とし、openapi.agentic_checkout / rfc.agentic_checkout / rfc.discovery に準拠。
• PurchaseFlow は新規フローを作らず、通常購入と同一の eccube.purchase.flow.shopping を再利用 (ACP/UCP 共通基盤: エージェントコマース向け CheckoutSession・マッピング層の整備 #6777 の確定方針)。
• 2 系統エラー: プロトコル系 = HTTP 4xx/5xx + flat Error ({type, code, message, param?})、ビジネス系 (在庫切れ等) = HTTP 200 + messages[] (MessageError/Warning/Info)。
• Idempotency-Key は全 POST で必須 (欠落=400 idempotency_key_required / 異内容=422 idempotency_conflict / 処理中=409 idempotency_in_flight)。共通基盤 feat(agent-commerce): CheckoutSession 中核を実装 (#6777 トラックB前提・Phase 1b) #6825 の DB 一意制約ストアを consume し、IdempotencyConflictException に reason を付与して 422/409 を出し分け。
• complete は「中断→再開」状態機械 (ACP/UCP 共通基盤: エージェントコマース向け CheckoutSession・マッピング層の整備 #6777)。3DS は authentication_required という正常な中間状態として返り、再開 complete に authentication_result が無い場合のみ 400 requires_3ds (param=$.authentication_result)。
• status はプロトコル横断の正規化マスタを維持し、公開境界で ACP 11 値へ変換 (AcpStatusMapper)。
• inbound markdown は CommonMark 準拠・raw HTML 拒否 (MUST)。

実装に関する補足(Appendix)

• 共通基盤への小改修 (未リリースの agent-commerce 機能内): IdempotencyConflictException に reason (conflict/in_flight) を付与 (UCP は据え置きで 409、ACP が 422/409 を出し分け)。StorefrontUrlResolver / AddressMappingService::getPrefFromRegion() は feat(agent-commerce): CheckoutSession 中核を実装 (#6777 トラックB前提・Phase 1b) #6825 へ共通化済 (ACP/UCP 共用)。
• Discovery /.well-known/acp.json: no-auth・merchant_id 非混入 (MUST NOT)・Cache-Control: public, max-age=3600・acp_checkout_enabled ゲート。AcpDiscoveryDocumentBuilder で組み立て (Customize 差し替え可)。
• AcpMessageSigner: Webhook の Merchant-Signature (HMAC-SHA256(t + "." + raw_body)) 署名・検証基盤。秘密鍵は keystore (共通の鍵保管ディレクトリ app/keystore/ の導入 (各種暗号鍵・シークレットの標準置き場) #6797、purpose acp_webhook)。
• 秘密鍵は app/keystore/ (共通の鍵保管ディレクトリ app/keystore/ の導入 (各種暗号鍵・シークレットの標準置き場) #6797)。追加依存なし (HMAC は標準関数)。
• deferred (markTestIncomplete で明示): Webhook の outbound 送出 (order_create/order_update)、Delegate Payment API (PSP/プラグイン領域・範囲外)、実 PSP 決済 (決済プラグイン側)、会員 ID 連携 (api4#189)。

テスト（Test)

AgentCommerce スイート 143 tests / 813 assertions / 0 失敗 / incomplete 4 (意図的)。

• Layer 0 仕様適合性 (AcpCheckoutConformanceTest / AcpDiscoveryControllerTest): MUST を 1:1 トレース (Idempotency 400/422/replay、minor unit 整数、business=200+messages[]、requires_3ds、cancel 405、markdown raw HTML 拒否、discovery no-auth/merchant_id 非混入/Cache-Control)。docblock に出典 URL (2026-04-17 pin)
• Layer 1 純ロジック: AcpStatusMapper / AcpMessageMapper (raw HTML 拒否) / AcpMessageSigner (Merchant-Signature 形式・HMAC・timestamp 窓)
• Layer 2 エンドポイント単体 (AcpCheckoutControllerTest): create→get→complete ハッピーパス、住所未確定 not_ready_for_payment、404 (他セッション遮断)、Idempotency 必須/replay/422、cancel/cancel完了済405、OAuth2 (欠落401/scope不足403)、フラグ無効 404、InMemoryAccessTokenHandler スタブ (eccube-api4 非依存)

検証 (直接的根拠):

• PHPUnit: AgentCommerce 143 tests 0 失敗 / PurchaseFlow 回帰 256 tests 0 失敗
• PHPStan level 6 (src 全体): No errors
• php-cs-fixer / rector: 0 件

PostgreSQL/MySQL マトリクスは CI で確認 (ローカルは SQLite)。

相談（Discussion）

• ベースは現状 feat(agent-commerce): CheckoutSession 中核を実装 (#6777 トラックB前提・Phase 1b) #6825 にスタックしています。マージ順は feat(agent-commerce): エージェントコマース共通基盤 Phase 1a (#6777) #6802 → feat(agent-commerce): Product Feed/Catalog/Discovery を実装 (#6794 トラックA) #6815 → feat(agent-commerce): CheckoutSession 中核を実装 (#6777 トラックB前提・Phase 1b) #6825 → feat(agent-commerce): UCP checkout (#6574) のコア実装 #6837(UCP) / 本 PR (ACP) を想定。

マイナーバージョン互換性保持のための制限事項チェックリスト

• 既存機能の仕様変更はありません
• フックポイントの呼び出しタイミングの変更はありません
• フックポイントのパラメータの削除・データ型の変更はありません
• twigファイルに渡しているパラメータの削除・データ型の変更はありません
• Serviceクラスの公開関数の、引数の削除・データ型の変更はありません
• 入出力ファイル(CSVなど)のフォーマット変更はありません

補足: IdempotencyConflictException のコンストラクタに reason 引数を追加しましたが、デフォルト値付きで後方互換です (未リリースの agent-commerce 機能内)。

レビュワー確認項目

• 動作確認
• コードレビュー
• E2E/Unit テスト確認(テストの追加・変更が必要かどうか)
• 互換性が保持されているか
• セキュリティ上の問題がないか
  • 権限を超えた操作が可能にならないか
  • 不要なファイルアップロードがないか
  • 外部へ公開されるファイルや機能の追加ではないか
  • テンプレートでのエスケープ漏れがないか

🤖 Generated with Claude Code

Summary by CodeRabbit

Release Notes

• New Features
  • Agent Commerce のACP checkoutエンドポイント（作成/更新/取得/完了/キャンセル）と、認証不要のACP discovery（/.well-known/acp.json）を追加。
  • Idempotency-Key 対応、ステータス/メッセージ仕様、OAuth2 Bearer認証（スコープ制御）を提供。
  • 管理画面にACP/UCPチェックアウト有効化トグルと、エージェント在庫エスカレーション期限設定を追加。
• Bug Fixes
  • エージェント起因注文ではプリオーダー整合チェックをスキップするよう修正。
• Chores
  • 追加マイグレーション、マスタデータ取込、関連のテスト追加および署名鍵/keystoreアクセス制御を更新。

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 86344ef7-bcdb-4847-9eb0-74926a0c7967

📥 Commits

Reviewing files that changed from the base of the PR and between f24dbfb and 08e9ed0.

📒 Files selected for processing (7)

• src/Eccube/Controller/AgentCommerce/AcpCheckoutController.php
• src/Eccube/Service/AgentCommerce/Acp/AcpCheckoutSessionMapper.php
• src/Eccube/Service/AgentCommerce/Acp/AcpMessageMapper.php
• tests/Eccube/Tests/Service/AgentCommerce/Acp/AcpMessageMapperTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Stub/InMemoryAccessTokenHandler.php
• tests/Eccube/Tests/Web/AgentCommerce/AcpCheckoutControllerTest.php
• tests/Eccube/Tests/Web/AgentCommerce/AcpDiscoveryControllerTest.php

🚧 Files skipped from review as they are similar to previous changes (5)

• tests/Eccube/Tests/Service/AgentCommerce/Stub/InMemoryAccessTokenHandler.php
• tests/Eccube/Tests/Web/AgentCommerce/AcpDiscoveryControllerTest.php
• src/Eccube/Service/AgentCommerce/Acp/AcpMessageMapper.php
• src/Eccube/Service/AgentCommerce/Acp/AcpCheckoutSessionMapper.php
• src/Eccube/Controller/AgentCommerce/AcpCheckoutController.php

---

📝 Walkthrough

Walkthrough

Agent Commerce の基盤として永続化モデル、設定、購入フロー連携、決済状態機械、OAuth2 認証、署名、ACP discovery と checkout API、冪等性処理、管理画面設定、保護設定、各層の単体・統合・Web テストが追加されています。

Changes

Agent Commerce 基盤と ACP チェックアウト

Layer / File(s)	Summary
永続化モデルと管理設定 app/DoctrineMigrations/*, src/Eccube/Entity/..., src/Eccube/Repository/..., src/Eccube/Form/Type/Admin/ShopMasterType.php, src/Eccube/Resource/..., src/Eccube/Service/CartService.php, app/keystore/.htaccess, .gitignore, .htaccess, tests/Eccube/Tests/Entity/*, tests/Eccube/Tests/Service/AgentCommerce/BaseInfoAgentCommerceFlagsTest.php	CheckoutSession・関連マスタ・注文/カート拡張・管理フラグ・管理画面 UI・CSV 定義・保護設定・基礎永続化テストが追加されています。
共有 DTO・変換・購入フロー src/Eccube/Service/AgentCommerce/CheckoutSession/*, src/Eccube/Service/AgentCommerce/AddressMappingService.php, src/Eccube/Service/AgentCommerce/MinorUnitConverter.php, src/Eccube/Service/AgentCommerce/Fulfillment/*, src/Eccube/Service/AgentCommerce/AgentCheckoutPurchaseFlowAdapter.php, src/Eccube/Service/PurchaseFlow/Processor/PreOrderIdValidator.php, tests/Eccube/Tests/Service/AgentCommerce/{AddressMappingServiceTest,MinorUnitConverterTest,AgentCheckoutPurchaseFlowAdapterTest,Fulfillment/*}, tests/Eccube/Tests/Service/AgentCommerce/Conformance/{AgentCheckoutCoreConformanceTest,AgentCommerceBaseConformanceTest}	住所・金額・配送選択肢・購入リクエスト DTO・購入フロー変換・例外型が追加され、エージェント起点の注文構築とカート分離がテストされています。
冪等性・決済契約・完了状態機械 src/Eccube/Entity/AgentCheckoutIdempotency.php, src/Eccube/Repository/AgentCheckoutIdempotencyRepository.php, src/Eccube/Service/AgentCommerce/Idempotency/*, src/Eccube/Service/AgentCommerce/Payment/*, src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutCompletion*.php, app/config/eccube/packages/eccube.yaml, app/config/eccube/services_test.yaml, tests/Eccube/Tests/Service/AgentCommerce/Idempotency/*, tests/Eccube/Tests/Service/AgentCommerce/CheckoutSession/AgentCheckoutCompletionServiceTest.php	Idempotency-Key 保存と再生、決済ハンドラ契約、complete 状態機械、期限延長設定が追加され、並行・再実行・決済結果別の状態遷移がテストされています。
認証・署名・鍵管理 src/Eccube/Service/AgentCommerce/Security/*, src/Eccube/Service/AgentCommerce/Acp/AcpAuthenticationSubscriber.php, src/Eccube/Service/AgentCommerce/Acp/AcpMessageSigner.php, app/config/eccube/services.yaml, app/config/eccube/services_test.yaml, tests/Eccube/Tests/Service/AgentCommerce/Security/*, tests/Eccube/Tests/Service/AgentCommerce/Acp/AcpMessageSignerTest.php, tests/Eccube/Tests/Service/AgentCommerce/Stub/InMemoryAccessTokenHandler.php	OAuth2 scope 検証、ACP ルート認証、ファイルベース鍵保管、ACP Webhook 署名、UCP 署名/JWKS 公開、テスト用トークンハンドラと関連テストが追加されています。
ACP API・discovery・HTTP 検証 src/Eccube/Controller/AgentCommerce/*, src/Eccube/Service/AgentCommerce/Acp/*, src/Eccube/Service/AgentCommerce/StorefrontUrlResolver.php, tests/Eccube/Tests/Web/AgentCommerce/*, tests/Eccube/Tests/Service/AgentCommerce/Acp/*, tests/Eccube/Tests/Service/AgentCommerce/Conformance/AcpCheckoutConformanceTest.php	ACP discovery 文書生成、メッセージ/状態/セッション応答マッピング、checkout REST エンドポイント、HTTP レベルの認証・冪等性・3DS・cancel・discovery テストが追加されています。

Estimated code review effort

🎯 5 (Critical) | ⏱️ ~120 minutes

Possibly related issues

• Agentic Commerce Protocol (ACP) の対応 #6776: ACP checkout の REST エンドポイント、OAuth2 Bearer 認証、冪等性、署名、状態機械がこの変更に含まれています。
• ACP/UCP 共通基盤: エージェントコマース向け CheckoutSession・マッピング層の整備 #6777: CheckoutSession、共通 DTO、認証、決済抽象、購入フロー連携など Agent Commerce 共通基盤が追加されています。
• ユニバーサル コマース プロトコル（UCP）の対応 #6574: UCP 実装の前提となる共通基盤として、CheckoutSession、AddressMapping、MinorUnitConverter、購入フロー連携、冪等性が追加されています。

Poem

🐇 ぴょこんと鍵をしまいこみ
新しい道へ API が跳ねる
状態はくるり、在庫はきちん
署名も認証も耳をすませて
春草みたいに機能がのびた 🌱

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 42.06% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	PR タイトル「feat(agent-commerce): ACP checkout (#6776) のコア実装」は、このPRの主な変更であるエージェントコマース（Agent Commerce Protocol）のACP checkoutコア実装を明確に説明しており、技術的かつ具体的で、ノイズのない適切なタイトルになっています。
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 11

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@src/Eccube/Controller/AgentCommerce/AcpCheckoutController.php`:
- Around line 155-168: The decodeBody() call at line 155 is outside the
try-catch block, so when it throws an AgentCheckoutException for invalid JSON,
it won't be caught and results in a 500 error instead of a proper 400 protocol
error. Move the $payload = $this->decodeBody($request) statement inside the
existing try block (before the isAuthenticationPending check) so that any
AgentCheckoutException thrown by decodeBody will be caught by the
catch(AgentCheckoutException $e) handler and properly converted to a protocol
error response, making the error handling consistent with the create and update
methods.
- Around line 312-320: The findSession() method in AcpCheckoutController is only
validating the protocol but not verifying that the session owner (agent_id or
acp_client_id) matches the current requesting agent, which creates a security
vulnerability where unauthorized agents could access other agents' sessions. Add
an additional authorization check after the protocol validation to verify that
the session's agent_id matches the current agent's identifier, and throw a
NotFoundHttpException or AccessDeniedHttpException if they do not match,
ensuring that principal mismatch is properly rejected.

In `@src/Eccube/Service/AgentCommerce/Acp/AcpCheckoutSessionMapper.php`:
- Around line 61-77: In the toCheckoutRequest method, the current implementation
on lines 75-76 allows invalid values to be accepted - non-numeric itemId becomes
0 and negative quantity values pass through unchecked. Modify the logic to
validate that itemId and quantity are both positive integers only. After
extracting itemId and quantity from the rawLineItem, add validation checks that
throw AgentCheckoutException with an appropriate error message if either value
is not a positive integer (must be greater than 0). Only create the
AgentCheckoutLineItem instance if both values pass validation, preventing
invalid line items from being added to the lineItems array.

In `@src/Eccube/Service/AgentCommerce/Acp/AcpMessageMapper.php`:
- Around line 39-40: The RAW_HTML_PATTERN regular expression currently only
matches a specific whitelist of HTML tags (script, div, img, iframe, style,
object, embed, link, meta, form, input, svg, a, span, table), which allows other
tags like <p>, <h1>, and HTML comments to bypass detection. Update the
RAW_HTML_PATTERN to comprehensively match any HTML tag (opening or closing) and
HTML comments instead of limiting detection to specific tags, ensuring the
assertNoRawHtml() method catches all raw HTML content as required by the
specification.

In
`@src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutCompletionService.php`:
- Around line 127-135: In the COMPLETED case of the switch statement in
AgentCheckoutCompletionService, only the capture result's metadata is being
merged via the mergePaymentData method call, but the authorize result's metadata
from the $outcome variable is not being preserved. Before the existing
mergePaymentData call that handles $capture->metadata, add another
mergePaymentData call to merge $outcome->metadata first, ensuring that both the
authorize and capture metadata are saved to maintain complete PSP reference
information.

In
`@src/Eccube/Service/AgentCommerce/Idempotency/AgentCheckoutIdempotencyStore.php`:
- Around line 104-109: The hashRequest() method in AgentCheckoutIdempotencyStore
only sorts keys at the top level using ksort($payload), but does not recursively
normalize nested associative arrays. This causes identical requests with
different key ordering in nested structures to produce different hashes,
resulting in false conflicts. Create a recursive helper method that sorts keys
at all nesting levels of the payload array, then apply this helper to the entire
payload before calling json_encode() instead of only using ksort() on the top
level.
- Around line 55-64: The execute method accepts a nullable $subject parameter
that silently defaults to an empty string when null, creating a shared namespace
risk across all subjects. Additionally, the hashRequest() method only applies
ksort() at the top level, failing to canonicalize nested associative arrays,
which causes identical payloads with different key orders to generate different
hashes and break idempotency detection. Fix these issues by: (1) making the
$subject parameter required (remove nullable type and default value) in the
execute method signature to enforce explicit subject provision, and (2)
modifying the hashRequest() method to apply recursive key sorting to all nested
arrays and objects to ensure consistent canonicalization of payloads regardless
of key order.

In `@src/Eccube/Service/AgentCommerce/Security/FilesystemKeyStore.php`:
- Around line 54-76: In the write method of the FilesystemKeyStore class, the
file_put_contents call that writes the private key lacks exclusive file locking,
which can cause data corruption when multiple processes attempt to write to the
same key file simultaneously. Add the FILE_LOCK_EX flag as the third parameter
to the file_put_contents call to ensure exclusive locking and serialize
concurrent write operations.

In `@src/Eccube/Service/AgentCommerce/Security/UcpMessageSigner.php`:
- Around line 158-167: The collectPublicKeys() method does not handle exceptions
thrown by PublicKeyLoader::load() when it encounters invalid or malformed PEM
keys in the gracePublicKeyPems collection. Wrap the PublicKeyLoader::load($pem)
call in a try-catch block to catch any exceptions thrown during key loading, and
use continue to skip over invalid keys and proceed to the next iteration of the
foreach loop. This allows the method to gracefully skip malformed legacy grace
period keys and only collect valid public keys that can be converted to JWK
format.

In
`@tests/Eccube/Tests/Service/AgentCommerce/Stub/InMemoryAccessTokenHandler.php`:
- Around line 1-13: The test file InMemoryAccessTokenHandler.php is missing the
strict types declaration that is required in all test files under the tests/
directory. Add the line declare(strict_types=1); immediately after the opening
<?php tag and before the EC-CUBE license header comment block. This ensures
consistency with the project's coding standards where the order should be:
opening PHP tag, declare statement, then the license header.

In `@tests/Eccube/Tests/Web/AgentCommerce/AcpDiscoveryControllerTest.php`:
- Around line 76-79: The test is checking for an exact string match of
`max-age=3600` using assertStringContainsString, but the specification requires
that max-age be at least 3600 seconds (>= 3600). This means responses with
compliant higher values like `max-age=7200` would incorrectly fail. Replace the
exact string match assertion with logic that extracts the numeric max-age value
from the Cache-Control header in $cacheControl, parses it, and asserts that the
integer value is greater than or equal to 3600.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 699231ee-da11-4701-9222-195e85679352

📥 Commits

Reviewing files that changed from the base of the PR and between 5777408 and f24dbfb.

⛔ Files ignored due to path filters (8)

• src/Eccube/Resource/doctrine/import_csv/en/dtb_base_info.csv is excluded by !**/*.csv
• src/Eccube/Resource/doctrine/import_csv/en/mtb_agent_protocol.csv is excluded by !**/*.csv
• src/Eccube/Resource/doctrine/import_csv/en/mtb_checkout_session_status.csv is excluded by !**/*.csv
• src/Eccube/Resource/doctrine/import_csv/en/mtb_country_iso_code.csv is excluded by !**/*.csv
• src/Eccube/Resource/doctrine/import_csv/ja/dtb_base_info.csv is excluded by !**/*.csv
• src/Eccube/Resource/doctrine/import_csv/ja/mtb_agent_protocol.csv is excluded by !**/*.csv
• src/Eccube/Resource/doctrine/import_csv/ja/mtb_checkout_session_status.csv is excluded by !**/*.csv
• src/Eccube/Resource/doctrine/import_csv/ja/mtb_country_iso_code.csv is excluded by !**/*.csv

📒 Files selected for processing (92)

• .gitignore
• .htaccess
• app/DoctrineMigrations/Version20260604120000.php
• app/DoctrineMigrations/Version20260611120000.php
• app/DoctrineMigrations/Version20260617120000.php
• app/config/eccube/packages/eccube.yaml
• app/config/eccube/services.yaml
• app/config/eccube/services_test.yaml
• app/keystore/.gitkeep
• app/keystore/.htaccess
• src/Eccube/Controller/AgentCommerce/AcpCheckoutController.php
• src/Eccube/Controller/AgentCommerce/AcpDiscoveryController.php
• src/Eccube/Entity/AgentCheckoutIdempotency.php
• src/Eccube/Entity/BaseInfo.php
• src/Eccube/Entity/Cart.php
• src/Eccube/Entity/CheckoutSession.php
• src/Eccube/Entity/Master/AgentProtocol.php
• src/Eccube/Entity/Master/CheckoutSessionStatus.php
• src/Eccube/Entity/Master/CountryIsoCode.php
• src/Eccube/Entity/Order.php
• src/Eccube/Form/Type/Admin/ShopMasterType.php
• src/Eccube/Repository/AgentCheckoutIdempotencyRepository.php
• src/Eccube/Repository/CheckoutSessionRepository.php
• src/Eccube/Repository/Master/AgentProtocolRepository.php
• src/Eccube/Repository/Master/CheckoutSessionStatusRepository.php
• src/Eccube/Repository/Master/CountryIsoCodeRepository.php
• src/Eccube/Resource/doctrine/import_csv/en/definition.yml
• src/Eccube/Resource/doctrine/import_csv/ja/definition.yml
• src/Eccube/Resource/locale/messages.en.yaml
• src/Eccube/Resource/locale/messages.ja.yaml
• src/Eccube/Resource/template/admin/Setting/Shop/shop_master.twig
• src/Eccube/Service/AgentCommerce/Acp/AcpAuthenticationSubscriber.php
• src/Eccube/Service/AgentCommerce/Acp/AcpCheckoutSessionMapper.php
• src/Eccube/Service/AgentCommerce/Acp/AcpDiscoveryDocumentBuilder.php
• src/Eccube/Service/AgentCommerce/Acp/AcpMessageMapper.php
• src/Eccube/Service/AgentCommerce/Acp/AcpMessageSigner.php
• src/Eccube/Service/AgentCommerce/Acp/AcpStatusMapper.php
• src/Eccube/Service/AgentCommerce/AddressMappingService.php
• src/Eccube/Service/AgentCommerce/AgentCheckoutPurchaseFlowAdapter.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutAddress.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutCompletionResult.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutCompletionService.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutLineItem.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutMessage.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutMessageLevel.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutRequest.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/AgentCheckoutResult.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/CustomerResolverInterface.php
• src/Eccube/Service/AgentCommerce/CheckoutSession/GuestCustomerResolver.php
• src/Eccube/Service/AgentCommerce/Exception/AgentCheckoutErrorCode.php
• src/Eccube/Service/AgentCommerce/Exception/AgentCheckoutException.php
• src/Eccube/Service/AgentCommerce/Exception/IdempotencyConflictException.php
• src/Eccube/Service/AgentCommerce/Fulfillment/FulfillmentOption.php
• src/Eccube/Service/AgentCommerce/Fulfillment/FulfillmentOptionMapperInterface.php
• src/Eccube/Service/AgentCommerce/Fulfillment/FulfillmentPaymentOption.php
• src/Eccube/Service/AgentCommerce/Fulfillment/StandardFulfillmentOptionMapper.php
• src/Eccube/Service/AgentCommerce/Idempotency/AgentCheckoutIdempotencyStore.php
• src/Eccube/Service/AgentCommerce/MinorUnitConverter.php
• src/Eccube/Service/AgentCommerce/Payment/AcpPaymentHandlerInterface.php
• src/Eccube/Service/AgentCommerce/Payment/AgentCheckoutPaymentHandlerInterface.php
• src/Eccube/Service/AgentCommerce/Payment/AgentCheckoutPaymentHandlerRegistry.php
• src/Eccube/Service/AgentCommerce/Payment/PaymentOutcome.php
• src/Eccube/Service/AgentCommerce/Payment/PaymentOutcomeStatus.php
• src/Eccube/Service/AgentCommerce/Security/AgentCommerceMessageSignerInterface.php
• src/Eccube/Service/AgentCommerce/Security/AgentCommerceOAuth2Authenticator.php
• src/Eccube/Service/AgentCommerce/Security/AgentCommerceScopeRegistry.php
• src/Eccube/Service/AgentCommerce/Security/FilesystemKeyStore.php
• src/Eccube/Service/AgentCommerce/Security/KeyStoreInterface.php
• src/Eccube/Service/AgentCommerce/Security/UcpMessageSigner.php
• src/Eccube/Service/AgentCommerce/StorefrontUrlResolver.php
• src/Eccube/Service/CartService.php
• src/Eccube/Service/PurchaseFlow/Processor/PreOrderIdValidator.php
• tests/Eccube/Tests/Entity/CheckoutSessionTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Acp/AcpMessageMapperTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Acp/AcpMessageSignerTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Acp/AcpStatusMapperTest.php
• tests/Eccube/Tests/Service/AgentCommerce/AddressMappingServiceTest.php
• tests/Eccube/Tests/Service/AgentCommerce/AgentCheckoutPurchaseFlowAdapterTest.php
• tests/Eccube/Tests/Service/AgentCommerce/BaseInfoAgentCommerceFlagsTest.php
• tests/Eccube/Tests/Service/AgentCommerce/CheckoutSession/AgentCheckoutCompletionServiceTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Conformance/AcpCheckoutConformanceTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Conformance/AgentCheckoutCoreConformanceTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Conformance/AgentCommerceBaseConformanceTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Fulfillment/StandardFulfillmentOptionMapperTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Idempotency/AgentCheckoutIdempotencyStoreTest.php
• tests/Eccube/Tests/Service/AgentCommerce/MinorUnitConverterTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Security/AgentCommerceOAuth2AuthenticatorTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Security/AgentCommerceScopeRegistryTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Security/UcpMessageSignerTest.php
• tests/Eccube/Tests/Service/AgentCommerce/Stub/InMemoryAccessTokenHandler.php
• tests/Eccube/Tests/Web/AgentCommerce/AcpCheckoutControllerTest.php
• tests/Eccube/Tests/Web/AgentCommerce/AcpDiscoveryControllerTest.php