@easypayment/medusa-payment-paypal 0.7.4

package/.medusa/server/src/api/store/paypal/webhook/route.js

@@ -0,0 +1,250 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const webhook_processor_1 = require("../../../../modules/paypal/webhook-processor");
+const REPLAY_WINDOW_MINUTES = (() => {
+    const v = Number(process.env.PAYPAL_WEBHOOK_REPLAY_WINDOW_MINUTES);
+    return Number.isFinite(v) && v > 0 ? v : 60;
+})();
+function getHeader(headers, name) {
+    const direct = headers[name];
+    if (Array.isArray(direct))
+        return direct[0];
+    if (typeof direct === "string")
+        return direct;
+    const lower = name.toLowerCase();
+    const key = Object.keys(headers).find((h) => h.toLowerCase() === lower);
+    if (!key)
+        return undefined;
+    const val = headers[key];
+    return Array.isArray(val) ? val[0] : val;
+}
+function validateRequest(req) {
+    const payload = (req.body || {});
+    const eventId = String(payload?.id || payload?.event_id || "").trim();
+    const eventType = String(payload?.event_type || payload?.eventType || "").trim();
+    if (!eventId || !eventType) {
+        return { ok: false, status: 400, message: "Missing required fields: id and event_type" };
+    }
+    const transmissionTimeHeader = getHeader(req.headers, "paypal-transmission-time");
+    if (!transmissionTimeHeader) {
+        return {
+            ok: false,
+            status: 400,
+            message: "Missing required header: paypal-transmission-time",
+        };
+    }
+    const transmissionMs = Date.parse(transmissionTimeHeader);
+    if (!Number.isFinite(transmissionMs)) {
+        return {
+            ok: false,
+            status: 400,
+            message: "Invalid paypal-transmission-time header value",
+        };
+    }
+    const ageMs = Math.abs(Date.now() - transmissionMs);
+    if (ageMs > REPLAY_WINDOW_MINUTES * 60 * 1000) {
+        return {
+            ok: false,
+            status: 400,
+            message: `Webhook rejected: outside ${REPLAY_WINDOW_MINUTES}-minute replay window`,
+        };
+    }
+    return {
+        ok: true,
+        eventId,
+        eventType,
+        transmissionId: getHeader(req.headers, "paypal-transmission-id") || null,
+        transmissionTime: new Date(transmissionMs),
+    };
+}
+function resolveWebhookId(environment, settings) {
+    const ids = (settings?.webhook_ids || {});
+    if (environment === "live") {
+        return (ids.live ||
+            settings?.webhook_id_live ||
+            process.env.PAYPAL_WEBHOOK_ID_LIVE);
+    }
+    return (ids.sandbox ||
+        settings?.webhook_id_sandbox ||
+        process.env.PAYPAL_WEBHOOK_ID_SANDBOX);
+}
+async function verifyWebhookSignature(paypal, environment, body, headers) {
+    const settings = await paypal.getSettings().catch(() => ({ data: {} }));
+    const webhookId = resolveWebhookId(environment, settings?.data || {});
+    if (!webhookId) {
+        throw new Error(`PayPal webhook ID not configured for environment "${environment}". Set PAYPAL_WEBHOOK_ID_${environment.toUpperCase()} or configure it in admin settings.`);
+    }
+    const base = environment === "live"
+        ? "https://api-m.paypal.com"
+        : "https://api-m.sandbox.paypal.com";
+    const accessToken = await paypal.getAppAccessToken();
+    const verifyPayload = {
+        auth_algo: getHeader(headers, "paypal-auth-algo"),
+        cert_url: getHeader(headers, "paypal-cert-url"),
+        transmission_id: getHeader(headers, "paypal-transmission-id"),
+        transmission_sig: getHeader(headers, "paypal-transmission-sig"),
+        transmission_time: getHeader(headers, "paypal-transmission-time"),
+        webhook_id: webhookId,
+        webhook_event: body,
+    };
+    const missing = Object.entries(verifyPayload)
+        .filter(([k, v]) => k !== "webhook_id" && k !== "webhook_event" && !v)
+        .map(([k]) => k);
+    if (missing.length > 0) {
+        throw new Error(`Missing required PayPal webhook headers: ${missing.join(", ")}`);
+    }
+    const resp = await fetch(`${base}/v1/notifications/verify-webhook-signature`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify(verifyPayload),
+    });
+    const json = await resp.json().catch(() => ({}));
+    const debugId = resp.headers.get("paypal-debug-id") || json?.debug_id;
+    if (!resp.ok) {
+        throw new Error(`PayPal signature verification API error (${resp.status}): ${JSON.stringify(json)}` +
+            (debugId ? ` debug_id=${debugId}` : ""));
+    }
+    if (json?.verification_status !== "VERIFIED") {
+        throw new Error(`PayPal webhook signature not verified. Status: ${json?.verification_status}` +
+            (debugId ? ` debug_id=${debugId}` : ""));
+    }
+}
+async function POST(req, res) {
+    const paypal = req.scope.resolve("paypal_onboarding");
+    const validation = validateRequest(req);
+    if (!validation.ok) {
+        console.warn("[PayPal] webhook: validation failed:", validation.message);
+        return res.status(validation.status).json({ message: validation.message });
+    }
+    const { eventId, eventType, transmissionId, transmissionTime } = validation;
+    const payload = (req.body || {});
+    if (transmissionId) {
+        try {
+            const existing = await paypal.listPayPalWebhookEvents({ transmission_id: transmissionId });
+            if ((existing || []).length > 0) {
+                console.info("[PayPal] webhook: duplicate transmission_id", {
+                    transmissionId,
+                    eventId,
+                });
+                return res.json({ ok: true, duplicate: true });
+            }
+        }
+        catch (e) {
+            console.warn("[PayPal] webhook: transmission_id dedup check failed:", e?.message);
+        }
+    }
+    try {
+        const creds = await paypal.getActiveCredentials();
+        await verifyWebhookSignature(paypal, creds.environment, payload, req.headers);
+    }
+    catch (e) {
+        console.error("[PayPal] webhook: signature verification failed:", e?.message);
+        return res
+            .status(401)
+            .json({ message: e?.message || "Webhook signature verification failed" });
+    }
+    const eventVersion = (0, webhook_processor_1.normalizeEventVersion)(payload);
+    let recordId = null;
+    try {
+        const recordResult = await paypal.createWebhookEventRecord({
+            event_id: eventId,
+            event_type: eventType,
+            payload,
+            event_version: eventVersion,
+            transmission_id: transmissionId,
+            transmission_time: transmissionTime,
+            status: "processing",
+            attempt_count: 1,
+        });
+        if (!recordResult.created) {
+            console.info("[PayPal] webhook: duplicate event_id", { eventId, eventType });
+            return res.json({ ok: true, duplicate: true });
+        }
+        recordId = recordResult.event?.id ?? null;
+    }
+    catch (e) {
+        console.error("[PayPal] webhook: failed to create DB record:", e?.message);
+        return res.status(500).json({ message: "Failed to record webhook event" });
+    }
+    if (!(0, webhook_processor_1.isAllowedEventType)(eventType)) {
+        console.info("[PayPal] webhook: unsupported event type, ignoring", { eventType });
+        await paypal.recordAuditEvent("webhook_unsupported_event", {
+            event_id: eventId,
+            event_type: eventType,
+        });
+        if (recordId) {
+            await paypal
+                .updateWebhookEventRecord({
+                id: recordId,
+                status: "ignored",
+                processed_at: new Date(),
+            })
+                .catch(() => { });
+        }
+        return res.json({ ok: true, ignored: true });
+    }
+    try {
+        const processed = await (0, webhook_processor_1.processPayPalWebhookEvent)(req.scope, { eventType, payload });
+        if (recordId) {
+            await paypal
+                .updateWebhookEventRecord({
+                id: recordId,
+                status: "processed",
+                processed_at: new Date(),
+                resource_id: processed.refundId || processed.captureId || processed.orderId || null,
+            })
+                .catch(() => { });
+        }
+        console.info("[PayPal] webhook: processed", {
+            event_id: eventId,
+            event_type: eventType,
+            order_id: processed.orderId,
+            capture_id: processed.captureId,
+            refund_id: processed.refundId,
+            cart_id: processed.cartId,
+            session_updated: processed.sessionUpdated,
+        });
+        await paypal.recordMetric("webhook_success").catch(() => { });
+        return res.json({ ok: true });
+    }
+    catch (e) {
+        console.error("[PayPal] webhook: processing failed", {
+            event_id: eventId,
+            event_type: eventType,
+            error: e?.message,
+        });
+        const retryable = (0, webhook_processor_1.isRetryableError)(e);
+        const nextStatus = retryable ? "failed" : "dead_letter";
+        if (recordId) {
+            await paypal
+                .updateWebhookEventRecord({
+                id: recordId,
+                status: nextStatus,
+                attempt_count: 1,
+                next_retry_at: retryable ? (0, webhook_processor_1.computeNextRetryAt)(1) : null,
+                last_error: e?.message || String(e),
+            })
+                .catch(() => { });
+        }
+        await paypal
+            .recordAuditEvent("webhook_processing_failed", {
+            event_id: eventId,
+            event_type: eventType,
+            retryable,
+            message: e?.message || String(e),
+        })
+            .catch(() => { });
+        await paypal.recordMetric("webhook_failed").catch(() => { });
+        if (!retryable) {
+            return res.status(200).json({ ok: false, message: e?.message });
+        }
+        return res
+            .status(500)
+            .json({ message: e?.message || "PayPal webhook processing error" });
+    }
+}
+//# sourceMappingURL=route.js.map

package/.medusa/server/src/api/store/paypal/webhook/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../../../../../src/api/store/paypal/webhook/route.ts"],"names":[],"mappings":";;AAgLA,oBAoJC;AAlUD,oFAMqD;AAErD,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAA;IAClE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7C,CAAC,CAAC,EAAE,CAAA;AAEJ,SAAS,SAAS,CAChB,OAAsD,EACtD,IAAY;IAEZ,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAA;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAA;IACvE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;IACxB,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;AAC1C,CAAC;AAgBD,SAAS,eAAe,CAAC,GAAkB;IACzC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAA;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACrE,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAEhF,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAA;IAC1F,CAAC;IAED,MAAM,sBAAsB,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAA;IACjF,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,mDAAmD;SAC7D,CAAA;IACH,CAAC;IAED,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAA;IACzD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,+CAA+C;SACzD,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,CAAA;IACnD,IAAI,KAAK,GAAG,qBAAqB,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,6BAA6B,qBAAqB,uBAAuB;SACnF,CAAA;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO;QACP,SAAS;QACT,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,wBAAwB,CAAC,IAAI,IAAI;QACxE,gBAAgB,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC;KAC3C,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,WAAmB,EACnB,QAAiC;IAEjC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAuC,CAAA;IAC/E,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,CACL,GAAG,CAAC,IAAI;YACP,QAAQ,EAAE,eAA0B;YACrC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CACnC,CAAA;IACH,CAAC;IACD,OAAO,CACL,GAAG,CAAC,OAAO;QACV,QAAQ,EAAE,kBAA6B;QACxC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CACtC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,MAA2B,EAC3B,WAAmB,EACnB,IAA6B,EAC7B,OAAsD;IAEtD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACvE,MAAM,SAAS,GAAG,gBAAgB,CAChC,WAAW,EACV,QAAQ,EAAE,IAAgC,IAAI,EAAE,CAClD,CAAA;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,qDAAqD,WAAW,4BAA4B,WAAW,CAAC,WAAW,EAAE,qCAAqC,CAC3J,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GACR,WAAW,KAAK,MAAM;QACpB,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,kCAAkC,CAAA;IAExC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAA;IAEpD,MAAM,aAAa,GAAG;QACpB,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC;QACjD,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC;QAC/C,eAAe,EAAE,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;QAC7D,gBAAgB,EAAE,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC;QAC/D,iBAAiB,EAAE,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC;QACjE,UAAU,EAAE,SAAS;QACrB,aAAa,EAAE,IAAI;KACpB,CAAA;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;SAC1C,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAElB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,4CAA4C,EAAE;QAC5E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;KACpC,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,EAAE,QAAQ,CAAA;IAErE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;YACjF,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1C,CAAA;IACH,CAAC;IACD,IAAI,IAAI,EAAE,mBAAmB,KAAK,UAAU,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,kDAAkD,IAAI,EAAE,mBAAmB,EAAE;YAC3E,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC1C,CAAA;IACH,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,IAAI,CAAC,GAAkB,EAAE,GAAmB;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAsB,mBAAmB,CAAC,CAAA;IAE1E,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,sCAAsC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;QACxE,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,UAAU,CAAA;IAC3E,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAA;IAEvD,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAA;YAC1F,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,IAAI,CAAC,6CAA6C,EAAE;oBAC1D,cAAc;oBACd,OAAO;iBACR,CAAC,CAAA;gBACF,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAChD,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAA;QACjD,MAAM,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAC/E,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAC7E,OAAO,GAAG;aACP,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,uCAAuC,EAAE,CAAC,CAAA;IAC7E,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,yCAAqB,EAAC,OAAO,CAAC,CAAA;IACnD,IAAI,QAAQ,GAAkB,IAAI,CAAA;IAElC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC;YACzD,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,SAAS;YACrB,OAAO;YACP,aAAa,EAAE,YAAY;YAC3B,eAAe,EAAE,cAAc;YAC/B,iBAAiB,EAAE,gBAAgB;YACnC,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QAEF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;YAC5E,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,CAAC;QAED,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI,CAAA;IAC3C,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAC1E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,IAAI,CAAC,IAAA,sCAAkB,EAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,oDAAoD,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;QACjF,MAAM,MAAM,CAAC,gBAAgB,CAAC,2BAA2B,EAAE;YACzD,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,SAAS;SACtB,CAAC,CAAA;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM;iBACT,wBAAwB,CAAC;gBACxB,EAAE,EAAE,QAAQ;gBACZ,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,IAAI,IAAI,EAAE;aACzB,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpB,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAA,6CAAyB,EAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;QAEpF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM;iBACT,wBAAwB,CAAC;gBACxB,EAAE,EAAE,QAAQ;gBACZ,MAAM,EAAE,WAAW;gBACnB,YAAY,EAAE,IAAI,IAAI,EAAE;gBACxB,WAAW,EACT,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI;aACzE,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpB,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,6BAA6B,EAAE;YAC1C,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,SAAS,CAAC,OAAO;YAC3B,UAAU,EAAE,SAAS,CAAC,SAAS;YAC/B,SAAS,EAAE,SAAS,CAAC,QAAQ;YAC7B,OAAO,EAAE,SAAS,CAAC,MAAM;YACzB,eAAe,EAAE,SAAS,CAAC,cAAc;SAC1C,CAAC,CAAA;QAEF,MAAM,MAAM,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC5D,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE;YACnD,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,CAAC,EAAE,OAAO;SAClB,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,IAAA,oCAAgB,EAAC,CAAC,CAAC,CAAA;QACrC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAA;QAEvD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM;iBACT,wBAAwB,CAAC;gBACxB,EAAE,EAAE,QAAQ;gBACZ,MAAM,EAAE,UAAU;gBAClB,aAAa,EAAE,CAAC;gBAChB,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,IAAA,sCAAkB,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;gBACvD,UAAU,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC;aACpC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpB,CAAC;QAED,MAAM,MAAM;aACT,gBAAgB,CAAC,2BAA2B,EAAE;YAC7C,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,SAAS;YACrB,SAAS;YACT,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC;SACjC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAElB,MAAM,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAE3D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QACjE,CAAC;QACD,OAAO,GAAG;aACP,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,iCAAiC,EAAE,CAAC,CAAA;IACvE,CAAC;AACH,CAAC"}

package/.medusa/server/src/api/store/paypal-complete/route.d.ts

@@ -0,0 +1,3 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function POST(req: MedusaRequest, res: MedusaResponse): Promise<MedusaResponse>;
+//# sourceMappingURL=route.d.ts.map

package/.medusa/server/src/api/store/paypal-complete/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../src/api/store/paypal-complete/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAK7E,wBAAsB,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,2BAyFjE"}

package/.medusa/server/src/api/store/paypal-complete/route.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const utils_1 = require("@medusajs/framework/utils");
+async function POST(req, res) {
+    const { cart_id } = req.body;
+    if (!cart_id) {
+        return res.status(400).json({ error: "cart_id is required" });
+    }
+    try {
+        const query = req.scope.resolve("query");
+        const { data: carts } = await query.graph({
+            entity: "cart",
+            fields: [
+                "id",
+                "payment_collection.payment_sessions.id",
+                "payment_collection.payment_sessions.data",
+                "payment_collection.payment_sessions.status",
+                "payment_collection.payment_sessions.provider_id",
+                "payment_collection.payment_sessions.created_at",
+                "payment_collection.payment_sessions.amount",
+                "payment_collection.payment_sessions.currency_code",
+            ],
+            filters: { id: cart_id },
+        });
+        const sessions = carts?.[0]?.payment_collection?.payment_sessions || [];
+        const session = sessions
+            .filter((s) => String(s.provider_id || "").includes("paypal"))
+            .sort((a, b) => new Date(b.created_at || 0).getTime() - new Date(a.created_at || 0).getTime())[0];
+        if (!session) {
+            return res.status(400).json({ error: "No PayPal payment session found for cart" });
+        }
+        const currentStatus = String(session.status || "");
+        if (currentStatus === "authorized" || currentStatus === "captured") {
+            console.info("[paypal-complete] session already in terminal status:", currentStatus);
+            return res.json({ success: true, session_id: session.id, status: currentStatus });
+        }
+        const paymentModule = req.scope.resolve(utils_1.Modules.PAYMENT);
+        const [liveSession] = await paymentModule.listPaymentSessions({ id: [session.id] }, { take: 1 });
+        const liveData = (liveSession?.data || {});
+        const paypal = req.scope.resolve("paypal_onboarding");
+        const settings = await paypal.getSettings().catch(() => ({}));
+        const settingsData = settings && typeof settings === "object" && "data" in settings
+            ? (settings.data ?? {})
+            : {};
+        const additionalSettings = (settingsData.additional_settings || {});
+        const paymentAction = typeof additionalSettings.paymentAction === "string"
+            ? additionalSettings.paymentAction
+            : "capture";
+        const timestampKey = paymentAction === "authorize" ? "authorized_at" : "captured_at";
+        if (!liveData[timestampKey]) {
+            await paymentModule.updatePaymentSession({
+                id: session.id,
+                data: {
+                    ...liveData,
+                    [timestampKey]: new Date().toISOString(),
+                },
+                amount: liveSession?.amount ?? session.amount,
+                currency_code: liveSession?.currency_code ?? session.currency_code,
+            });
+        }
+        try {
+            await paymentModule.authorizePaymentSession(session.id, {});
+            console.info("[paypal-complete] authorizePaymentSession succeeded for session", session.id);
+        }
+        catch (e) {
+            console.warn("[paypal-complete] authorizePaymentSession non-fatal:", e?.message);
+        }
+        return res.json({ success: true, session_id: session.id });
+    }
+    catch (e) {
+        console.error("[paypal-complete] error:", e?.message || e);
+        return res.status(500).json({ error: e?.message || "Internal error" });
+    }
+}
+//# sourceMappingURL=route.js.map

package/.medusa/server/src/api/store/paypal-complete/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../../../../src/api/store/paypal-complete/route.ts"],"names":[],"mappings":";;AAKA,oBAyFC;AA5FD,qDAAmD;AAG5C,KAAK,UAAU,IAAI,CAAC,GAAkB,EAAE,GAAmB;IAChE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAA2B,CAAA;IAEnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;YACxC,MAAM,EAAE,MAAM;YACd,MAAM,EAAE;gBACN,IAAI;gBACJ,wCAAwC;gBACxC,0CAA0C;gBAC1C,4CAA4C;gBAC5C,iDAAiD;gBACjD,gDAAgD;gBAChD,4CAA4C;gBAC5C,mDAAmD;aACpD;YACD,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE;SACzB,CAAC,CAAA;QAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,IAAI,EAAE,CAAA;QACvE,MAAM,OAAO,GAAG,QAAQ;aACrB,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;aAClE,IAAI,CACH,CAAC,CAAM,EAAE,CAAM,EAAE,EAAE,CACjB,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAChF,CAAC,CAAC,CAAC,CAAA;QAEN,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAA;QACpF,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAA;QAClD,IAAI,aAAa,KAAK,YAAY,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,aAAa,CAAC,CAAA;YACpF,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAA;QACnF,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,eAAO,CAAC,OAAO,CAA0B,CAAA;QAEjF,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,aAAa,CAAC,mBAAmB,CAC3D,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EACpB,EAAE,IAAI,EAAE,CAAC,EAAE,CACZ,CAAA;QAED,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAwB,CAAA;QAEjE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAsB,mBAAmB,CAAC,CAAA;QAC1E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7D,MAAM,YAAY,GAChB,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,IAAI,QAAQ;YAC5D,CAAC,CAAC,CAAE,QAA2C,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3D,CAAC,CAAC,EAAE,CAAA;QACR,MAAM,kBAAkB,GAAG,CAAC,YAAY,CAAC,mBAAmB,IAAI,EAAE,CAAwB,CAAA;QAC1F,MAAM,aAAa,GACjB,OAAO,kBAAkB,CAAC,aAAa,KAAK,QAAQ;YAClD,CAAC,CAAC,kBAAkB,CAAC,aAAa;YAClC,CAAC,CAAC,SAAS,CAAA;QAEf,MAAM,YAAY,GAAG,aAAa,KAAK,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,aAAa,CAAA;QAEpF,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5B,MAAO,aAAqB,CAAC,oBAAoB,CAAC;gBAChD,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE;oBACJ,GAAG,QAAQ;oBACX,CAAC,YAAY,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACzC;gBACD,MAAM,EAAE,WAAW,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM;gBAC7C,aAAa,EAAE,WAAW,EAAE,aAAa,IAAI,OAAO,CAAC,aAAa;aACnE,CAAC,CAAA;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAO,aAAqB,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;YACpE,OAAO,CAAC,IAAI,CAAC,iEAAiE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;QAC7F,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,sDAAsD,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;QAClF,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;IAC5D,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAA;QAC1D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,gBAAgB,EAAE,CAAC,CAAA;IACxE,CAAC;AACH,CAAC"}

package/.medusa/server/src/index.d.ts

@@ -0,0 +1,2 @@
+export { default } from "./modules/paypal";
+//# sourceMappingURL=index.d.ts.map

package/.medusa/server/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA"}

package/.medusa/server/src/index.js

@@ -0,0 +1,9 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.default = void 0;
+var paypal_1 = require("./modules/paypal");
+Object.defineProperty(exports, "default", { enumerable: true, get: function () { return __importDefault(paypal_1).default; } });
+//# sourceMappingURL=index.js.map

package/.medusa/server/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":";;;;;;AAAA,2CAA0C;AAAjC,kHAAA,OAAO,OAAA"}

package/.medusa/server/src/jobs/paypal-webhook-retry.d.ts

@@ -0,0 +1,7 @@
+import type { MedusaContainer } from "@medusajs/framework/types";
+export default function paypalWebhookRetry(container: MedusaContainer): Promise<void>;
+export declare const config: {
+    name: string;
+    schedule: string;
+};
+//# sourceMappingURL=paypal-webhook-retry.d.ts.map

package/.medusa/server/src/jobs/paypal-webhook-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-webhook-retry.d.ts","sourceRoot":"","sources":["../../../../src/jobs/paypal-webhook-retry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAUhE,wBAA8B,kBAAkB,CAAC,SAAS,EAAE,eAAe,iBAqI1E;AAED,eAAO,MAAM,MAAM;;;CAGlB,CAAA"}

package/.medusa/server/src/jobs/paypal-webhook-retry.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.config = void 0;
+exports.default = paypalWebhookRetry;
+const webhook_processor_1 = require("../modules/paypal/webhook-processor");
+async function paypalWebhookRetry(container) {
+    const paypal = container.resolve("paypal_onboarding");
+    const now = Date.now();
+    const candidates = await paypal.listPayPalWebhookEvents({ status: "failed" });
+    if (!candidates?.length)
+        return;
+    console.info(`[PayPal] webhook-retry: evaluating ${candidates.length} failed event(s)`);
+    for (const event of candidates) {
+        const nextRetryAt = event?.next_retry_at
+            ? new Date(event.next_retry_at).getTime()
+            : null;
+        if (!nextRetryAt || nextRetryAt > now)
+            continue;
+        const attemptCount = Number(event.attempt_count || 0);
+        if (attemptCount >= webhook_processor_1.MAX_WEBHOOK_ATTEMPTS) {
+            await paypal
+                .updateWebhookEventRecord({
+                id: event.id,
+                status: "dead_letter",
+                next_retry_at: null,
+                last_error: `Exceeded max attempts (${webhook_processor_1.MAX_WEBHOOK_ATTEMPTS})`,
+            })
+                .catch(() => { });
+            console.warn("[PayPal] webhook-retry: dead-lettered (max attempts)", {
+                id: event.id,
+                event_type: event.event_type,
+                attempts: attemptCount,
+            });
+            await paypal.recordMetric("webhook_dead_letter").catch(() => { });
+            continue;
+        }
+        await paypal
+            .updateWebhookEventRecord({
+            id: event.id,
+            status: "processing",
+            attempt_count: attemptCount + 1,
+            next_retry_at: null,
+            last_error: null,
+        })
+            .catch(() => { });
+        const eventType = String(event.event_type || "");
+        if (!(0, webhook_processor_1.isAllowedEventType)(eventType)) {
+            await paypal
+                .updateWebhookEventRecord({
+                id: event.id,
+                status: "ignored",
+                processed_at: new Date(),
+            })
+                .catch(() => { });
+            console.info("[PayPal] webhook-retry: ignored unsupported event type", {
+                id: event.id,
+                event_type: eventType,
+            });
+            continue;
+        }
+        try {
+            const payload = (event.payload || {});
+            const processed = await (0, webhook_processor_1.processPayPalWebhookEvent)(container, { eventType, payload });
+            await paypal
+                .updateWebhookEventRecord({
+                id: event.id,
+                status: "processed",
+                processed_at: new Date(),
+                resource_id: processed.refundId || processed.captureId || processed.orderId || null,
+            })
+                .catch(() => { });
+            console.info("[PayPal] webhook-retry: processed successfully", {
+                id: event.id,
+                event_type: eventType,
+                attempt: attemptCount + 1,
+                order_id: processed.orderId,
+                capture_id: processed.captureId,
+                cart_id: processed.cartId,
+                session_updated: processed.sessionUpdated,
+            });
+            await paypal.recordMetric("webhook_retry_success").catch(() => { });
+        }
+        catch (error) {
+            const retryable = (0, webhook_processor_1.isRetryableError)(error);
+            const nextAttempt = attemptCount + 1;
+            if (!retryable || nextAttempt >= webhook_processor_1.MAX_WEBHOOK_ATTEMPTS) {
+                await paypal
+                    .updateWebhookEventRecord({
+                    id: event.id,
+                    status: "dead_letter",
+                    attempt_count: nextAttempt,
+                    next_retry_at: null,
+                    last_error: error?.message || String(error),
+                })
+                    .catch(() => { });
+                console.error("[PayPal] webhook-retry: dead-lettered after error", {
+                    id: event.id,
+                    event_type: eventType,
+                    attempt: nextAttempt,
+                    retryable,
+                    error: error?.message,
+                });
+                await paypal.recordMetric("webhook_dead_letter").catch(() => { });
+            }
+            else {
+                const nextRetry = (0, webhook_processor_1.computeNextRetryAt)(nextAttempt);
+                await paypal
+                    .updateWebhookEventRecord({
+                    id: event.id,
+                    status: "failed",
+                    attempt_count: nextAttempt,
+                    next_retry_at: nextRetry,
+                    last_error: error?.message || String(error),
+                })
+                    .catch(() => { });
+                console.warn("[PayPal] webhook-retry: scheduled retry", {
+                    id: event.id,
+                    event_type: eventType,
+                    attempt: nextAttempt,
+                    next_retry_at: nextRetry?.toISOString(),
+                    error: error?.message,
+                });
+                await paypal.recordMetric("webhook_retry_failed").catch(() => { });
+            }
+        }
+    }
+}
+exports.config = {
+    name: "paypal-webhook-retry",
+    schedule: "*/10 * * * *",
+};
+//# sourceMappingURL=paypal-webhook-retry.js.map

package/.medusa/server/src/jobs/paypal-webhook-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-webhook-retry.js","sourceRoot":"","sources":["../../../../src/jobs/paypal-webhook-retry.ts"],"names":[],"mappings":";;;AAUA,qCAqIC;AA7ID,2EAM4C;AAE7B,KAAK,UAAU,kBAAkB,CAAC,SAA0B;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAsB,mBAAmB,CAAC,CAAA;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAEtB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7E,IAAI,CAAC,UAAU,EAAE,MAAM;QAAE,OAAM;IAE/B,OAAO,CAAC,IAAI,CACV,sCAAsC,UAAU,CAAC,MAAM,kBAAkB,CAC1E,CAAA;IAED,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,KAAK,EAAE,aAAa;YACtC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;YACzC,CAAC,CAAC,IAAI,CAAA;QACR,IAAI,CAAC,WAAW,IAAI,WAAW,GAAG,GAAG;YAAE,SAAQ;QAE/C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,CAAA;QAErD,IAAI,YAAY,IAAI,wCAAoB,EAAE,CAAC;YACzC,MAAM,MAAM;iBACT,wBAAwB,CAAC;gBACxB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,MAAM,EAAE,aAAa;gBACrB,aAAa,EAAE,IAAI;gBACnB,UAAU,EAAE,0BAA0B,wCAAoB,GAAG;aAC9D,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAClB,OAAO,CAAC,IAAI,CAAC,sDAAsD,EAAE;gBACnE,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAA;YACF,MAAM,MAAM,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAChE,SAAQ;QACV,CAAC;QAED,MAAM,MAAM;aACT,wBAAwB,CAAC;YACxB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,YAAY,GAAG,CAAC;YAC/B,aAAa,EAAE,IAAI;YACnB,UAAU,EAAE,IAAI;SACjB,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAElB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;QAEhD,IAAI,CAAC,IAAA,sCAAkB,EAAC,SAAS,CAAC,EAAE,CAAC;YACnC,MAAM,MAAM;iBACT,wBAAwB,CAAC;gBACxB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,IAAI,IAAI,EAAE;aACzB,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAClB,OAAO,CAAC,IAAI,CAAC,wDAAwD,EAAE;gBACrE,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,SAAS;aACtB,CAAC,CAAA;YACF,SAAQ;QACV,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAwB,CAAA;YAC5D,MAAM,SAAS,GAAG,MAAM,IAAA,6CAAyB,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;YAEpF,MAAM,MAAM;iBACT,wBAAwB,CAAC;gBACxB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,MAAM,EAAE,WAAW;gBACnB,YAAY,EAAE,IAAI,IAAI,EAAE;gBACxB,WAAW,EACT,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI;aACzE,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAElB,OAAO,CAAC,IAAI,CAAC,gDAAgD,EAAE;gBAC7D,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE,YAAY,GAAG,CAAC;gBACzB,QAAQ,EAAE,SAAS,CAAC,OAAO;gBAC3B,UAAU,EAAE,SAAS,CAAC,SAAS;gBAC/B,OAAO,EAAE,SAAS,CAAC,MAAM;gBACzB,eAAe,EAAE,SAAS,CAAC,cAAc;aAC1C,CAAC,CAAA;YAEF,MAAM,MAAM,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpE,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,IAAA,oCAAgB,EAAC,KAAK,CAAC,CAAA;YACzC,MAAM,WAAW,GAAG,YAAY,GAAG,CAAC,CAAA;YAEpC,IAAI,CAAC,SAAS,IAAI,WAAW,IAAI,wCAAoB,EAAE,CAAC;gBACtD,MAAM,MAAM;qBACT,wBAAwB,CAAC;oBACxB,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,WAAW;oBAC1B,aAAa,EAAE,IAAI;oBACnB,UAAU,EAAE,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC;iBAC5C,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAClB,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE;oBACjE,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,UAAU,EAAE,SAAS;oBACrB,OAAO,EAAE,WAAW;oBACpB,SAAS;oBACT,KAAK,EAAE,KAAK,EAAE,OAAO;iBACtB,CAAC,CAAA;gBACF,MAAM,MAAM,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAClE,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,GAAG,IAAA,sCAAkB,EAAC,WAAW,CAAC,CAAA;gBACjD,MAAM,MAAM;qBACT,wBAAwB,CAAC;oBACxB,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,WAAW;oBAC1B,aAAa,EAAE,SAAS;oBACxB,UAAU,EAAE,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC;iBAC5C,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAClB,OAAO,CAAC,IAAI,CAAC,yCAAyC,EAAE;oBACtD,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,UAAU,EAAE,SAAS;oBACrB,OAAO,EAAE,WAAW;oBACpB,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE;oBACvC,KAAK,EAAE,KAAK,EAAE,OAAO;iBACtB,CAAC,CAAA;gBACF,MAAM,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACnE,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAEY,QAAA,MAAM,GAAG;IACpB,IAAI,EAAE,sBAAsB;IAC5B,QAAQ,EAAE,cAAc;CACzB,CAAA"}

package/.medusa/server/src/modules/paypal/clients/paypal-seller.client.d.ts

@@ -0,0 +1,15 @@
+export declare class PayPalSellerClient {
+    private opts;
+    private static readonly BN_CODE;
+    constructor(opts: {
+        environment: "sandbox" | "live";
+        accessToken: string;
+    });
+    private baseUrl;
+    private headers;
+    createOrder(body: any): Promise<any>;
+    getOrder(orderId: string): Promise<any>;
+    captureOrder(orderId: string): Promise<any>;
+    refundCapture(captureId: string, body?: any): Promise<any>;
+}
+//# sourceMappingURL=paypal-seller.client.d.ts.map

package/.medusa/server/src/modules/paypal/clients/paypal-seller.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-seller.client.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/paypal/clients/paypal-seller.client.ts"],"names":[],"mappings":"AAAA,qBAAa,kBAAkB;IAGjB,OAAO,CAAC,IAAI;IAFxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAyB;gBAEpC,IAAI,EAAE;QAAE,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;IAElF,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,OAAO;IAST,WAAW,CAAC,IAAI,EAAE,GAAG;IAWrB,QAAQ,CAAC,OAAO,EAAE,MAAM;IAUxB,YAAY,CAAC,OAAO,EAAE,MAAM;IAU5B,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG;CAUlD"}

package/.medusa/server/src/modules/paypal/clients/paypal-seller.client.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PayPalSellerClient = void 0;
+class PayPalSellerClient {
+    opts;
+    static BN_CODE = "MBJTechnolabs_SI_SPB";
+    constructor(opts) {
+        this.opts = opts;
+    }
+    baseUrl() {
+        return this.opts.environment === "live"
+            ? "https://api-m.paypal.com"
+            : "https://api-m.sandbox.paypal.com";
+    }
+    headers(extra) {
+        return {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${this.opts.accessToken}`,
+            "PayPal-Partner-Attribution-Id": PayPalSellerClient.BN_CODE,
+            ...(extra ?? {}),
+        };
+    }
+    async createOrder(body) {
+        const res = await fetch(`${this.baseUrl()}/v2/checkout/orders`, {
+            method: "POST",
+            headers: this.headers(),
+            body: JSON.stringify(body),
+        });
+        const json = await res.json().catch(() => ({}));
+        if (!res.ok)
+            throw new Error(`PayPal createOrder failed (${res.status}): ${JSON.stringify(json)}`);
+        return json;
+    }
+    async getOrder(orderId) {
+        const res = await fetch(`${this.baseUrl()}/v2/checkout/orders/${orderId}`, {
+            method: "GET",
+            headers: this.headers(),
+        });
+        const json = await res.json().catch(() => ({}));
+        if (!res.ok)
+            throw new Error(`PayPal getOrder failed (${res.status}): ${JSON.stringify(json)}`);
+        return json;
+    }
+    async captureOrder(orderId) {
+        const res = await fetch(`${this.baseUrl()}/v2/checkout/orders/${orderId}/capture`, {
+            method: "POST",
+            headers: this.headers(),
+        });
+        const json = await res.json().catch(() => ({}));
+        if (!res.ok)
+            throw new Error(`PayPal captureOrder failed (${res.status}): ${JSON.stringify(json)}`);
+        return json;
+    }
+    async refundCapture(captureId, body) {
+        const res = await fetch(`${this.baseUrl()}/v2/payments/captures/${captureId}/refund`, {
+            method: "POST",
+            headers: this.headers(),
+            body: body ? JSON.stringify(body) : "{}",
+        });
+        const json = await res.json().catch(() => ({}));
+        if (!res.ok)
+            throw new Error(`PayPal refund failed (${res.status}): ${JSON.stringify(json)}`);
+        return json;
+    }
+}
+exports.PayPalSellerClient = PayPalSellerClient;
+//# sourceMappingURL=paypal-seller.client.js.map

package/.medusa/server/src/modules/paypal/clients/paypal-seller.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-seller.client.js","sourceRoot":"","sources":["../../../../../../src/modules/paypal/clients/paypal-seller.client.ts"],"names":[],"mappings":";;;AAAA,MAAa,kBAAkB;IAGT;IAFZ,MAAM,CAAU,OAAO,GAAG,sBAAsB,CAAA;IAExD,YAAoB,IAA8D;QAA9D,SAAI,GAAJ,IAAI,CAA0D;IAAG,CAAC;IAE9E,OAAO;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM;YACrC,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,kCAAkC,CAAA;IACxC,CAAC;IAEO,OAAO,CAAC,KAA8B;QAC5C,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAChD,+BAA+B,EAAE,kBAAkB,CAAC,OAAO;YAC3D,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,qBAAqB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAClG,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,OAAO,EAAE,EAAE;YACzE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/F,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,OAAO,UAAU,EAAE;YACjF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACnG,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,IAAU;QAC/C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,yBAAyB,SAAS,SAAS,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SACzC,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC7F,OAAO,IAAI,CAAA;IACb,CAAC;;AA5DH,gDA6DC"}