Update site changes

backend/src/routes/payments.ts

@@ -311,7 +311,21 @@ paymentsRouter.post('/:id/reject', requireAuth(['admin', 'organizer']), zValidat
     })
     .where(eq((payments as any).id, id));
   
-  // Note: We don't cancel the ticket automatically - admin can do that separately if needed
+  // Cancel the ticket - booking is no longer valid after rejection
+  await (db as any)
+    .update(tickets)
+    .set({ 
+      status: 'cancelled',
+      updatedAt: now,
+    })
+    .where(eq((tickets as any).id, payment.ticketId));
+  
+  // Send rejection email asynchronously (for manual payment methods only)
+  if (['bank_transfer', 'tpago'].includes(payment.provider)) {
+    emailService.sendPaymentRejectionEmail(id).catch(err => {
+      console.error('[Email] Failed to send payment rejection email:', err);
+    });
+  }
   
   const updated = await (db as any)
     .select()
@@ -319,7 +333,7 @@ paymentsRouter.post('/:id/reject', requireAuth(['admin', 'organizer']), zValidat
     .where(eq((payments as any).id, id))
     .get();
   
-  return c.json({ payment: updated, message: 'Payment rejected' });
+  return c.json({ payment: updated, message: 'Payment rejected and booking cancelled' });
 });
 
 // Update admin note