@deenruv/inpost-plugin 1.0.0

package/LICENSE

@@ -0,0 +1,23 @@
+# License 1
+
+The MIT License
+
+Copyright (c) 2025-present Aexol
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+# License 2
+
+The MIT License
+
+Copyright (c) 2018-2025 Michael Bromley
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,46 @@
+# @deenruv/inpost-plugin
+
+Integration plugin for the InPost parcel locker shipping service. It provides a custom fulfillment handler, shipment management, label generation, webhook handling, and a geowidget for pickup point selection on the storefront.
+
+## Installation
+
+```bash
+pnpm add @deenruv/inpost-plugin
+```
+
+## Configuration
+
+```typescript
+import { InpostPlugin } from '@deenruv/inpost-plugin';
+
+// In your Deenruv server config:
+plugins: [
+  InpostPlugin.init({}),
+]
+```
+
+## Features
+
+- Custom InPost fulfillment handler for shipping method integration
+- InPost API configuration per shipping method (host, API key, organization, service type)
+- Shipment label generation and storage as Fulfillment assets
+- Webhook controller for InPost shipment status events (confirmed, delivered, cancelled, etc.)
+- Pickup point ID custom field on orders
+- Geowidget key exposed to the storefront for pickup point selection
+- Organization listing for admin configuration
+
+## Admin UI
+
+This plugin extends the admin UI with an InPost configuration panel where administrators can set up API credentials, select InPost organizations and services, and manage shipping method integration settings.
+
+## API Extensions
+
+### Admin API
+
+- **Query** `getInpostConfig: InpostConfig` — Returns the current InPost configuration
+- **Query** `getInpostOrganizations(input: GetInpostOrganizationsInput): InpostOrganizationResponse!` — Lists available InPost organizations for given credentials
+- **Mutation** `setInpostShippingMethodConfig(input: SetInpostShippingMethodConfigInput!): Boolean!` — Saves InPost configuration for a shipping method
+
+### Shop API
+
+- **Query** `inPostGeowidgetKey: String` — Returns the geowidget key for the storefront pickup point selector

package/dist/plugin-server/api/inpost-admin.resolver.d.ts

@@ -0,0 +1,20 @@
+import { RequestContext } from "@deenruv/core";
+import { InpostService } from "../services/inpost.service.js";
+import { SetInpostShippingMethodConfigInput } from "../types.js";
+export declare class InpostAdminResolver {
+    private inpostService;
+    constructor(inpostService: InpostService);
+    getInpostConfig(ctx: RequestContext): Promise<import("../entities/inpost-config-entity.js").InpostConfigEntity | undefined>;
+    getInpostOrganizations(ctx: RequestContext, input: {
+        host: string;
+        apiKey: string;
+        inpostOrganization: number;
+    }): Promise<{
+        items: {
+            id: number;
+            name: string;
+            services: import("@deenruv/inpost").Service[];
+        }[];
+    }>;
+    setInpostShippingMethodConfig(ctx: RequestContext, input: SetInpostShippingMethodConfigInput): Promise<boolean>;
+}

package/dist/plugin-server/api/inpost-admin.resolver.js

@@ -0,0 +1,64 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InpostAdminResolver = void 0;
+const graphql_1 = require("@nestjs/graphql");
+const core_1 = require("@deenruv/core");
+const inpost_service_js_1 = require("../services/inpost.service.js");
+let InpostAdminResolver = class InpostAdminResolver {
+    constructor(inpostService) {
+        this.inpostService = inpostService;
+    }
+    async getInpostConfig(ctx) {
+        return this.inpostService.getInpostConfig(ctx);
+    }
+    async getInpostOrganizations(ctx, input) {
+        return this.inpostService.getInpostOrganizations(ctx, input);
+    }
+    async setInpostShippingMethodConfig(ctx, input) {
+        await this.inpostService.setInpostConfig(ctx, input);
+        return true;
+    }
+};
+exports.InpostAdminResolver = InpostAdminResolver;
+__decorate([
+    (0, graphql_1.Query)(),
+    (0, core_1.Allow)(core_1.Permission.Owner),
+    __param(0, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext]),
+    __metadata("design:returntype", Promise)
+], InpostAdminResolver.prototype, "getInpostConfig", null);
+__decorate([
+    (0, graphql_1.Query)(),
+    (0, core_1.Allow)(core_1.Permission.Owner),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)("input")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], InpostAdminResolver.prototype, "getInpostOrganizations", null);
+__decorate([
+    (0, graphql_1.Mutation)(),
+    (0, core_1.Allow)(core_1.Permission.Owner),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, graphql_1.Args)("input")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object]),
+    __metadata("design:returntype", Promise)
+], InpostAdminResolver.prototype, "setInpostShippingMethodConfig", null);
+exports.InpostAdminResolver = InpostAdminResolver = __decorate([
+    (0, graphql_1.Resolver)(),
+    __metadata("design:paramtypes", [inpost_service_js_1.InpostService])
+], InpostAdminResolver);

package/dist/plugin-server/api/inpost-shop.resolver.d.ts

@@ -0,0 +1,7 @@
+import { RequestContext } from "@deenruv/core";
+import { InpostService } from "../services/inpost.service.js";
+export declare class InpostShopResolver {
+    private inpostService;
+    constructor(inpostService: InpostService);
+    inPostGeowidgetKey(ctx: RequestContext): Promise<string | null>;
+}

package/dist/plugin-server/api/inpost-shop.resolver.js

@@ -0,0 +1,38 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InpostShopResolver = void 0;
+const graphql_1 = require("@nestjs/graphql");
+const core_1 = require("@deenruv/core");
+const inpost_service_js_1 = require("../services/inpost.service.js");
+let InpostShopResolver = class InpostShopResolver {
+    constructor(inpostService) {
+        this.inpostService = inpostService;
+    }
+    async inPostGeowidgetKey(ctx) {
+        return this.inpostService.getGeowidgetKey(ctx);
+    }
+};
+exports.InpostShopResolver = InpostShopResolver;
+__decorate([
+    (0, graphql_1.Query)(),
+    __param(0, (0, core_1.Ctx)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext]),
+    __metadata("design:returntype", Promise)
+], InpostShopResolver.prototype, "inPostGeowidgetKey", null);
+exports.InpostShopResolver = InpostShopResolver = __decorate([
+    (0, graphql_1.Resolver)(),
+    __metadata("design:paramtypes", [inpost_service_js_1.InpostService])
+], InpostShopResolver);

package/dist/plugin-server/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const LOGGER_CTX = "Inpost";
+export declare const INPOST_PLUGIN_OPTIONS: unique symbol;

package/dist/plugin-server/constants.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INPOST_PLUGIN_OPTIONS = exports.LOGGER_CTX = void 0;
+exports.LOGGER_CTX = "Inpost";
+exports.INPOST_PLUGIN_OPTIONS = Symbol("options");

package/dist/plugin-server/controllers/inpost.controller.d.ts

@@ -0,0 +1,9 @@
+import { RequestContext } from "@deenruv/core";
+import { Response, Request } from "express";
+import { InpostService } from "../services/inpost.service.js";
+export declare class InpostController {
+    private inpostService;
+    constructor(inpostService: InpostService);
+    health(response: Response): void;
+    status(ctx: RequestContext, request: Request, response: Response): Promise<void>;
+}

package/dist/plugin-server/controllers/inpost.controller.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InpostController = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@deenruv/core");
+const inpost_service_js_1 = require("../services/inpost.service.js");
+const inpost_webhook_guard_js_1 = require("../guards/inpost-webhook.guard.js");
+let InpostController = class InpostController {
+    constructor(inpostService) {
+        this.inpostService = inpostService;
+    }
+    health(response) {
+        response.sendStatus(200);
+    }
+    async status(ctx, request, response) {
+        await this.inpostService.handleUpdateEvent(ctx, request.body);
+        response.sendStatus(200);
+    }
+};
+exports.InpostController = InpostController;
+__decorate([
+    (0, common_1.UseGuards)(inpost_webhook_guard_js_1.InPostWebhookGuard),
+    (0, common_1.Get)("status"),
+    __param(0, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], InpostController.prototype, "health", null);
+__decorate([
+    (0, common_1.UseGuards)(inpost_webhook_guard_js_1.InPostWebhookGuard),
+    (0, common_1.Post)("status"),
+    __param(0, (0, core_1.Ctx)()),
+    __param(1, (0, common_1.Req)()),
+    __param(2, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [core_1.RequestContext, Object, Object]),
+    __metadata("design:returntype", Promise)
+], InpostController.prototype, "status", null);
+exports.InpostController = InpostController = __decorate([
+    (0, common_1.Controller)("inpost"),
+    __metadata("design:paramtypes", [inpost_service_js_1.InpostService])
+], InpostController);

package/dist/plugin-server/entities/inpost-config-entity.d.ts

@@ -0,0 +1,12 @@
+import { DeenruvEntity, DeepPartial, ShippingMethod } from "@deenruv/core";
+import { Relation } from "typeorm";
+import { Service } from "@deenruv/inpost";
+export declare class InpostConfigEntity extends DeenruvEntity {
+    constructor(data: DeepPartial<InpostConfigEntity>);
+    shippingMethod: Relation<ShippingMethod>;
+    host: string;
+    apiKey: string;
+    geowidgetKey: string;
+    inpostOrganization: number;
+    service: Service;
+}

package/dist/plugin-server/entities/inpost-config-entity.js

@@ -0,0 +1,49 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InpostConfigEntity = void 0;
+const core_1 = require("@deenruv/core");
+const typeorm_1 = require("typeorm");
+let InpostConfigEntity = class InpostConfigEntity extends core_1.DeenruvEntity {
+    constructor(data) {
+        super(data);
+    }
+};
+exports.InpostConfigEntity = InpostConfigEntity;
+__decorate([
+    (0, typeorm_1.OneToOne)(() => core_1.ShippingMethod),
+    (0, typeorm_1.JoinColumn)(),
+    __metadata("design:type", Object)
+], InpostConfigEntity.prototype, "shippingMethod", void 0);
+__decorate([
+    (0, typeorm_1.Column)("text"),
+    __metadata("design:type", String)
+], InpostConfigEntity.prototype, "host", void 0);
+__decorate([
+    (0, typeorm_1.Column)("text"),
+    __metadata("design:type", String)
+], InpostConfigEntity.prototype, "apiKey", void 0);
+__decorate([
+    (0, typeorm_1.Column)("text", { nullable: true }),
+    __metadata("design:type", String)
+], InpostConfigEntity.prototype, "geowidgetKey", void 0);
+__decorate([
+    (0, typeorm_1.Column)("bigint"),
+    __metadata("design:type", Number)
+], InpostConfigEntity.prototype, "inpostOrganization", void 0);
+__decorate([
+    (0, typeorm_1.Column)("text"),
+    __metadata("design:type", String)
+], InpostConfigEntity.prototype, "service", void 0);
+exports.InpostConfigEntity = InpostConfigEntity = __decorate([
+    (0, typeorm_1.Entity)(),
+    __metadata("design:paramtypes", [Object])
+], InpostConfigEntity);

package/dist/plugin-server/entities/inpost-ref-entity.d.ts

@@ -0,0 +1,9 @@
+import { DeenruvEntity, DeepPartial, OrderLine } from "@deenruv/core";
+import { Relation } from "typeorm";
+import { InpostConfigEntity } from "./inpost-config-entity";
+export declare class InpostRefEntity extends DeenruvEntity {
+    constructor(data: DeepPartial<InpostRefEntity>);
+    inpostConfig: Relation<InpostConfigEntity>;
+    inpostShipmentId?: number;
+    orderLines: Relation<OrderLine[]>;
+}

package/dist/plugin-server/entities/inpost-ref-entity.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InpostRefEntity = void 0;
+const core_1 = require("@deenruv/core");
+const typeorm_1 = require("typeorm");
+const inpost_config_entity_1 = require("./inpost-config-entity");
+let InpostRefEntity = class InpostRefEntity extends core_1.DeenruvEntity {
+    constructor(data) {
+        super(data);
+    }
+};
+exports.InpostRefEntity = InpostRefEntity;
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => inpost_config_entity_1.InpostConfigEntity),
+    __metadata("design:type", Object)
+], InpostRefEntity.prototype, "inpostConfig", void 0);
+__decorate([
+    (0, typeorm_1.Index)({ unique: true, sparse: true }),
+    (0, typeorm_1.Column)("bigint", { nullable: true }),
+    __metadata("design:type", Number)
+], InpostRefEntity.prototype, "inpostShipmentId", void 0);
+__decorate([
+    (0, typeorm_1.ManyToMany)(() => core_1.OrderLine),
+    (0, typeorm_1.JoinTable)(),
+    __metadata("design:type", Object)
+], InpostRefEntity.prototype, "orderLines", void 0);
+exports.InpostRefEntity = InpostRefEntity = __decorate([
+    (0, typeorm_1.Entity)(),
+    __metadata("design:paramtypes", [Object])
+], InpostRefEntity);

package/dist/plugin-server/extensions/inpost.extension.d.ts

@@ -0,0 +1 @@
+export declare const AdminExtension: import("graphql").DocumentNode;

package/dist/plugin-server/extensions/inpost.extension.js

@@ -0,0 +1,53 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminExtension = void 0;
+const graphql_tag_1 = __importDefault(require("graphql-tag"));
+exports.AdminExtension = (0, graphql_tag_1.default) `
+  input SetInpostShippingMethodConfigInput {
+    shippingMethodId: ID!
+    host: String!
+    apiKey: String!
+    geowidgetKey: String
+    inpostOrganization: Int!
+    service: String!
+  }
+
+  type InpostConfig {
+    shippingMethodId: ID!
+    host: String!
+    apiKey: String!
+    geowidgetKey: String
+    inpostOrganization: Int!
+    service: String!
+  }
+
+  type InpostOrganization {
+    id: Int!
+    name: String!
+    services: [String!]!
+  }
+  type InpostOrganizationResponse {
+    items: [InpostOrganization!]!
+  }
+
+  input GetInpostOrganizationsInput {
+    host: String!
+    apiKey: String!
+  }
+
+  extend type Query {
+    getInpostConfig: InpostConfig
+    getInpostOrganizations(
+      input: GetInpostOrganizationsInput
+    ): InpostOrganizationResponse!
+  }
+
+  extend type Mutation {
+    setInpostShippingMethodConfig(
+      input: SetInpostShippingMethodConfigInput!
+    ): Boolean!
+  }
+`;

package/dist/plugin-server/extensions/inpost.shop.extenstion.d.ts

@@ -0,0 +1 @@
+export declare const ShopExtension: import("graphql").DocumentNode;

package/dist/plugin-server/extensions/inpost.shop.extenstion.js

@@ -0,0 +1,12 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ShopExtension = void 0;
+const graphql_tag_1 = __importDefault(require("graphql-tag"));
+exports.ShopExtension = (0, graphql_tag_1.default) `
+  extend type Query {
+    inPostGeowidgetKey: String
+  }
+`;

package/dist/plugin-server/guards/inpost-webhook.guard.d.ts

@@ -0,0 +1,22 @@
+import type { CanActivate, ExecutionContext } from "@nestjs/common";
+import { RequestContextService, TransactionalConnection } from "@deenruv/core";
+import { InpostService } from "../services/inpost.service.js";
+export declare class InPostAuthErrorResult extends Error {
+    readonly httpStatus: number;
+}
+export declare class AuthenticationError extends InPostAuthErrorResult {
+    readonly __typename = "AuthenticationError";
+    readonly name = "authentication_error";
+    readonly httpStatus = 403;
+    readonly message = "AUTH_ERROR";
+}
+export declare class InPostWebhookGuard implements CanActivate {
+    private connection;
+    private requestContextService;
+    private inpostService;
+    constructor(connection: TransactionalConnection, requestContextService: RequestContextService, inpostService: InpostService);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    validateSignature(signature: string, body: string, secret: string): boolean;
+    getHMACSecret(): Promise<string>;
+    private verifySignature;
+}

package/dist/plugin-server/guards/inpost-webhook.guard.js

@@ -0,0 +1,96 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InPostWebhookGuard = exports.AuthenticationError = exports.InPostAuthErrorResult = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@deenruv/core");
+const crypto_1 = __importDefault(require("crypto"));
+const inpost_config_entity_js_1 = require("../entities/inpost-config-entity.js");
+const inpost_service_js_1 = require("../services/inpost.service.js");
+class InPostAuthErrorResult extends Error {
+}
+exports.InPostAuthErrorResult = InPostAuthErrorResult;
+class AuthenticationError extends InPostAuthErrorResult {
+    constructor() {
+        super(...arguments);
+        this.__typename = "AuthenticationError";
+        this.name = "authentication_error";
+        this.httpStatus = 403;
+        this.message = "AUTH_ERROR";
+    }
+}
+exports.AuthenticationError = AuthenticationError;
+let InPostWebhookGuard = class InPostWebhookGuard {
+    constructor(connection, requestContextService, inpostService) {
+        this.connection = connection;
+        this.requestContextService = requestContextService;
+        this.inpostService = inpostService;
+    }
+    async canActivate(context) {
+        return this.verifySignature(context);
+    }
+    validateSignature(signature, body, secret) {
+        const computed = crypto_1.default
+            .createHmac("sha256", secret)
+            .update(body, "utf8")
+            .digest("base64");
+        return crypto_1.default.timingSafeEqual(Buffer.from(signature, "base64"), Buffer.from(computed, "base64"));
+    }
+    async getHMACSecret() {
+        const configs = await this.connection.rawConnection
+            .getRepository(inpost_config_entity_js_1.InpostConfigEntity)
+            .find({ take: 1 });
+        if (configs.length === 0) {
+            throw new Error("HMAC secret not found in database");
+        }
+        const config = configs[0];
+        return config.apiKey;
+    }
+    async verifySignature(context) {
+        const request = context.switchToHttp().getRequest();
+        const headers = request.headers;
+        console.log("INPOST HEADERS", headers, "rawBody" in request ? "rawBody" : "body", "rawBody" in request ? request.rawBody : request.body);
+        const channel = await this.connection.rawConnection
+            .getRepository(core_1.Channel)
+            .findOne({
+            where: { code: "__default_channel__" },
+            relations: ["defaultTaxZone", "defaultShippingZone"],
+        });
+        if (!channel)
+            throw new AuthenticationError();
+        const ctx = await this.requestContextService.create({
+            req: request,
+            apiType: "admin",
+            channelOrToken: channel,
+            languageCode: channel.defaultLanguageCode,
+        });
+        context.switchToHttp().getRequest()["ctx"] = ctx;
+        return true;
+        if (!ctx)
+            throw new AuthenticationError();
+        if (!headers["x-inpost-signature"])
+            throw new AuthenticationError();
+        const isValidSignature = this.validateSignature(headers["x-inpost-signature"], JSON.stringify(request.body), await this.getHMACSecret());
+        if (!isValidSignature)
+            throw new AuthenticationError();
+        return true;
+    }
+};
+exports.InPostWebhookGuard = InPostWebhookGuard;
+exports.InPostWebhookGuard = InPostWebhookGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.TransactionalConnection,
+        core_1.RequestContextService,
+        inpost_service_js_1.InpostService])
+], InPostWebhookGuard);

package/dist/plugin-server/handlers/inpost.fulfillment.d.ts

@@ -0,0 +1,20 @@
+import { FulfillmentHandler, LanguageCode } from "@deenruv/core";
+export declare const inpostFulfillmentHandlerCode = "inpost-fulfillment";
+/**
+ * The handler for Inpost shipping.
+ */
+export declare const inpostFulfillmentHandler: () => FulfillmentHandler<{
+    dimensions: {
+        type: "string";
+        ui: {
+            component: string;
+            options: {
+                value: string;
+                label: {
+                    languageCode: LanguageCode;
+                    value: string;
+                }[];
+            }[];
+        };
+    };
+}>;