From 7909f130c63fb4bb4fa6a78c2928742aef16318e Mon Sep 17 00:00:00 2001
From: justin <justin@liquidator.optimal-reality.com>
Date: Fri, 22 May 2026 00:36:15 -0500
Subject: [PATCH] Fix $0 checkout bypass: remove nonexistent status column

compliance_orders has payment_status, not status.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 api/src/routes/checkout.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api/src/routes/checkout.ts b/api/src/routes/checkout.ts
index 24a133b..ce8e4df 100644
--- a/api/src/routes/checkout.ts
+++ b/api/src/routes/checkout.ts
@@ -894,7 +894,7 @@ router.post("/api/v1/checkout/create-session", async (req, res) => {
       if (zt) {
         const whereCol = order_type === "compliance_batch" ? "batch_id" : "order_number";
         await pool.query(
-          `UPDATE ${zt} SET payment_status = 'paid', payment_method = 'free', status = 'pending', surcharge_cents = 0, surcharge_pct = 0 WHERE ${whereCol} = $1`,
+          `UPDATE ${zt} SET payment_status = 'paid', payment_method = 'free', surcharge_cents = 0, surcharge_pct = 0 WHERE ${whereCol} = $1`,
           [order_id],
         );
       }