spree_stripe 6.0.0 → 6.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f11b0571ed27cbf8d0fc226eb6be6e4fd0132dd10c813bd721ab9b821620eea0
-  data.tar.gz: 628e43f18f6a8101d50aef245a30fadf58361d468e0047ec44632fd91bf4d678
+  metadata.gz: c1fcd61b50a152f08e6a5434ca784000df9701d20a21504862e8bbaf163f0b08
+  data.tar.gz: '096b6f4bdcc0e118a9013b0c50c6f411e76fc22796bef8558de31074eaf58e3b'
 SHA512:
-  metadata.gz: 1aaf8e88ef87e4eaff0212cf55c4ac7dd5b5db46e208bf19fbdf1bcb5a06c77e634ae29fc1b06d1bff56b8c0a5825ed5f16081b92965fa9e4a2889dabc3a37b6
-  data.tar.gz: 5d15a1b370f4f8f4fa1630854173bb9d0f049df47a3f4acf1c7a9d4f8b3fa8a5d8771df7ee2ffc161a8066e0a74fc8913e356e45288d4cc43f2fc5b1c33b5875
+  metadata.gz: 023b9092770dc58004da4557a2c11cc29e2e6be1b018f7222d501647c2d27975d5cee59da47b2c20ff409526a4b3048025d12dd2323b7c8cea856c7ee4b4a558
+  data.tar.gz: f8265ae450f3f8afac7ed4c9a1dd07cadd68db361981d0c82e5f15e8e1e79cbb44b4eb1b0031abd48f30994b8810ef73f65a4ecf58d9f6fb4aa4cec73cbca313

data/app/models/spree_stripe/gateway/connect.rb

@@ -93,7 +93,7 @@ module SpreeStripe
       def connect_webhook_url
         return nil unless store
 
-        "#{store.url_or_custom_domain}/api/v3/webhooks/payouts/#{prefixed_id}"
+        "#{store.formatted_url_or_custom_domain}/api/v3/webhooks/payouts/#{prefixed_id}"
       end
 
       def create_connect_webhook_endpoint

data/app/models/spree_stripe/gateway.rb

@@ -130,6 +130,12 @@ module SpreeStripe
       end
     end
 
+    # Voiding cancels the PaymentIntent, which Stripe refuses once it has
+    # succeeded; a captured payment has to be refunded instead.
+    def can_void?(payment)
+      !payment.completed?
+    end
+
     def void(response_code, _source, _gateway_options)
       return failure('Response code is blank') if response_code.blank?
 

data/app/models/spree_stripe/payout_provider.rb

@@ -266,15 +266,58 @@ module SpreeStripe
       raise Spree::Core::AmbiguousGatewayError, e.message
     end
 
-    # Pulls a seller's money back after a refund.
+    # Pulls a seller's share of a refund back from their connected account.
     #
-    # Ledger-only in open source: the row is written either way, so the books
-    # stay correct, but reversing the Stripe transfer — and netting a negative
-    # balance against future earnings — is where a marketplace needs the money
-    # operations that Enterprise provides.
+    # Reverses the transfer that paid the earning, by the reversal's amount,
+    # so the money returns to the platform that refunded the customer. A
+    # seller who has already been paid out is left with a negative Stripe
+    # balance, which their next earnings make up before anything more is paid
+    # out to them.
+    #
+    # The reversal waits until its earning has reached Stripe: until then
+    # there is no transfer to take from. It is left pending, and the
+    # pending-transfers job asks again once the earning is sent.
+    #
+    # A retry first looks for a reversal an earlier attempt already made, so
+    # the seller is never charged twice for one refund.
     def reverse!(seller_transfer)
-      seller_transfer.update!(status: 'completed')
+      return complete_without_sending(seller_transfer) if minor_units(seller_transfer).zero?
+
+      earning = seller_transfer.reversed_from
+      raise Spree::Core::GatewayError, 'Reversal has no earning to take back from' if earning.nil?
+      # Never sent, so nothing reached the seller's account.
+      return complete_without_sending(seller_transfer) if earning.failed?
+      return seller_transfer unless earning.completed?
+
+      # Confirmed without a transfer to point at — settled by hand, say. Only
+      # a person can say where that money is.
+      if earning.reference.blank?
+        raise Spree::Core::AmbiguousGatewayError, 'The earning has no Stripe transfer to reverse'
+      end
+
+      api_options = gateway_for(seller_transfer.seller.store).api_options
+      reversal = made_reversal(earning, seller_transfer, api_options) || Stripe::Transfer.create_reversal(
+        earning.reference,
+        {
+          amount: minor_units(seller_transfer),
+          metadata: {
+            spree_seller_transfer_id: seller_transfer.id,
+            spree_order_number: seller_transfer.order.number
+          }
+        },
+        api_options.merge(idempotency_key: idempotency_key(seller_transfer))
+      )
+
+      # The earning may have been sent after this row was written, and only
+      # then learned the currency it settled in.
+      seller_transfer.update!(
+        { status: 'completed', reference: reversal.id }.merge(earning.reversal_settlement(seller_transfer.amount.abs))
+      )
       seller_transfer
+    rescue *AMBIGUOUS_ERRORS => e
+      # The reversal may have been made before the answer was lost, so core
+      # parks it rather than taking the money back twice.
+      raise Spree::Core::AmbiguousGatewayError, e.message
     end
 
     private
@@ -300,6 +343,21 @@ module SpreeStripe
       seller_transfer
     end
 
+    # The reversal an earlier attempt made but never recorded — the row failed
+    # to save, or the process stopped first. Found by the row it names, since
+    # the idempotency key that would also stop a second one lasts only a day.
+    #
+    # A failed lookup moved no money, so it is a refusal the retry job can
+    # repeat rather than an outcome nobody knows.
+    def made_reversal(earning, seller_transfer, api_options)
+      reversals = Stripe::Transfer.list_reversals(earning.reference, { limit: 100 }, api_options)
+      reversals.auto_paging_each.find do |reversal|
+        reversal.metadata['spree_seller_transfer_id'] == seller_transfer.id.to_s
+      end
+    rescue Stripe::StripeError => e
+      raise Spree::Core::GatewayError, e.message
+    end
+
     # Nil rather than raising: a checklist row asking why it is incomplete
     # must not take the page down because Stripe is unreachable.
     def retrieve_account(seller)

data/app/services/spree_stripe/create_source.rb

@@ -50,7 +50,8 @@ module SpreeStripe
 
     def find_or_create_credit_card
       if customer
-        exact_source = customer.credit_cards.find_by(gateway_payment_profile_id: stripe_payment_method_id)
+        exact_source = customer.credit_cards.where(payment_method: gateway).
+                       find_by(gateway_payment_profile_id: stripe_payment_method_id)
         return exact_source if exact_source
 
         matching_source = match_credit_card_by_fingerprint

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: spree_stripe
 version: !ruby/object:Gem::Version
-  version: 6.0.0
+  version: 6.0.2
 platform: ruby
 authors:
 - Vendo Connect Inc.
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-10-27 00:00:00.000000000 Z
+date: 2026-11-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: spree_core
@@ -17,14 +17,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 6.0.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 6.0.2
 - !ruby/object:Gem::Dependency
   name: stripe
   requirement: !ruby/object:Gem::Requirement
@@ -112,9 +112,9 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/spree/spree/issues
-  changelog_uri: https://github.com/spree/spree/releases/tag/v6.0.0
-  documentation_uri: https://docs.spreecommerce.org/
-  source_code_uri: https://github.com/spree/spree/tree/v6.0.0
+  changelog_uri: https://github.com/spree/spree/releases/tag/v6.0.2
+  documentation_uri: https://spreecommerce.org/docs/
+  source_code_uri: https://github.com/spree/spree/tree/v6.0.2
 post_install_message:
 rdoc_options: []
 require_paths: