@easypayment/medusa-paypal 0.1.0

package/.medusa/server/src/api/store/paypal/disputes/route.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = GET;
+function toPublicDispute(dispute) {
+    return {
+        id: dispute.id,
+        dispute_id: dispute.dispute_id,
+        status: dispute.status ?? null,
+        reason: dispute.reason ?? null,
+        stage: dispute.stage ?? null,
+        amount: dispute.amount ?? null,
+        currency_code: dispute.currency_code ?? null,
+        transaction_id: dispute.transaction_id ?? null,
+        seller_transaction_id: dispute.seller_transaction_id ?? null,
+        order_id: dispute.order_id ?? null,
+        cart_id: dispute.cart_id ?? null,
+        created_at: dispute.created_at ?? null,
+        updated_at: dispute.updated_at ?? null,
+    };
+}
+async function GET(req, res) {
+    const paypal = req.scope.resolve("paypal_onboarding");
+    const query = (req.query || {});
+    const filters = {};
+    const addFilter = (key) => {
+        const value = query[key];
+        if (Array.isArray(value)) {
+            if (value[0]) {
+                filters[key] = value[0];
+            }
+            return;
+        }
+        if (typeof value === "string" && value.trim()) {
+            filters[key] = value.trim();
+        }
+    };
+    addFilter("order_id");
+    addFilter("cart_id");
+    addFilter("dispute_id");
+    if (Object.keys(filters).length === 0) {
+        return res.status(400).json({ message: "order_id, cart_id, or dispute_id is required" });
+    }
+    const disputes = await paypal.listPayPalDisputes(filters);
+    return res.json({ disputes: (disputes || []).map(toPublicDispute) });
+}
+//# sourceMappingURL=route.js.map

package/.medusa/server/src/api/store/paypal/disputes/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../../../../../src/api/store/paypal/disputes/route.ts"],"names":[],"mappings":";;AAqCA,kBA6BC;AA/CD,SAAS,eAAe,CAAC,OAAY;IACnC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;QAC9B,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;QAC5C,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;QAC9C,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,IAAI;QAC5D,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;QAClC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;QACtC,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;KACvC,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,GAAG,CAAC,GAAkB,EAAE,GAAmB;IAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAsB,mBAAmB,CAAC,CAAA;IAE1E,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAkD,CAAA;IAChF,MAAM,OAAO,GAA2B,EAAE,CAAA;IAE1C,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;QACxB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACzB,CAAC;YACD,OAAM;QACR,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAC7B,CAAC;IACH,CAAC,CAAA;IAED,SAAS,CAAC,UAAU,CAAC,CAAA;IACrB,SAAS,CAAC,SAAS,CAAC,CAAA;IACpB,SAAS,CAAC,YAAY,CAAC,CAAA;IAEvB,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACzD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;AACtE,CAAC"}

package/.medusa/server/src/api/store/paypal/settings/route.d.ts

@@ -0,0 +1,3 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function GET(req: MedusaRequest, res: MedusaResponse): Promise<MedusaResponse>;
+//# sourceMappingURL=route.d.ts.map

package/.medusa/server/src/api/store/paypal/settings/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/api/store/paypal/settings/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAG7E,wBAAsB,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,2BAQhE"}

package/.medusa/server/src/api/store/paypal/settings/route.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = GET;
+async function GET(req, res) {
+    const paypal = req.scope.resolve("paypal_onboarding");
+    try {
+        const settings = await paypal.getSettings();
+        return res.json(settings);
+    }
+    catch (e) {
+        return res.status(500).json({ message: e?.message || "Failed to load PayPal settings" });
+    }
+}
+//# sourceMappingURL=route.js.map

package/.medusa/server/src/api/store/paypal/settings/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../../../../../src/api/store/paypal/settings/route.ts"],"names":[],"mappings":";;AAGA,kBAQC;AARM,KAAK,UAAU,GAAG,CAAC,GAAkB,EAAE,GAAmB;IAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAsB,mBAAmB,CAAC,CAAA;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAA;QAC3C,OAAO,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,gCAAgC,EAAE,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC"}

package/.medusa/server/src/api/store/paypal/webhook/route.d.ts

@@ -0,0 +1,3 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function POST(req: MedusaRequest, res: MedusaResponse): Promise<MedusaResponse>;
+//# sourceMappingURL=route.d.ts.map

package/.medusa/server/src/api/store/paypal/webhook/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/api/store/paypal/webhook/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AA+H7E,wBAAsB,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,2BAuHjE"}

package/.medusa/server/src/api/store/paypal/webhook/route.js

@@ -0,0 +1,203 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const webhook_processor_1 = require("../../../../modules/paypal/webhook-processor");
+const REPLAY_WINDOW_MINUTES = (() => {
+    const configured = Number(process.env.PAYPAL_WEBHOOK_REPLAY_WINDOW_MINUTES);
+    return Number.isFinite(configured) ? configured : 60;
+})();
+function getHeader(headers, name) {
+    const direct = headers[name];
+    if (Array.isArray(direct)) {
+        return direct[0];
+    }
+    if (typeof direct === "string") {
+        return direct;
+    }
+    const needle = name.toLowerCase();
+    const key = Object.keys(headers).find((header) => header.toLowerCase() === needle);
+    const value = key ? headers[key] : undefined;
+    if (Array.isArray(value)) {
+        return value[0];
+    }
+    return value;
+}
+function isReplay(headers) {
+    const transmissionTime = getHeader(headers, "paypal-transmission-time");
+    if (!transmissionTime) {
+        throw new Error("Missing PayPal transmission time header");
+    }
+    const parsed = Date.parse(transmissionTime);
+    if (!Number.isFinite(parsed)) {
+        throw new Error("Invalid PayPal transmission time header");
+    }
+    const deltaMs = Math.abs(Date.now() - parsed);
+    return deltaMs > REPLAY_WINDOW_MINUTES * 60 * 1000;
+}
+function resolveWebhookId(environment, settings) {
+    const ids = (settings?.webhook_ids || {});
+    const legacyLive = settings?.webhook_id_live;
+    const legacySandbox = settings?.webhook_id_sandbox;
+    if (environment === "live") {
+        return ids.live || legacyLive || process.env.PAYPAL_WEBHOOK_ID_LIVE;
+    }
+    return ids.sandbox || legacySandbox || process.env.PAYPAL_WEBHOOK_ID_SANDBOX;
+}
+async function verifyWebhookSignature(paypal, environment, body, headers) {
+    if (isReplay(headers)) {
+        throw new Error("PayPal webhook replay protection triggered");
+    }
+    const settings = await paypal.getSettings().catch(() => ({ data: {} }));
+    const webhookId = resolveWebhookId(environment, settings?.data || {});
+    if (!webhookId) {
+        throw new Error(`Missing PayPal webhook ID for environment "${environment}"`);
+    }
+    const base = environment === "live"
+        ? "https://api-m.paypal.com"
+        : "https://api-m.sandbox.paypal.com";
+    const accessToken = await paypal.getAppAccessToken();
+    const verifyPayload = {
+        auth_algo: getHeader(headers, "paypal-auth-algo"),
+        cert_url: getHeader(headers, "paypal-cert-url"),
+        transmission_id: getHeader(headers, "paypal-transmission-id"),
+        transmission_sig: getHeader(headers, "paypal-transmission-sig"),
+        transmission_time: getHeader(headers, "paypal-transmission-time"),
+        webhook_id: webhookId,
+        webhook_event: body,
+    };
+    const requiredHeaders = [
+        verifyPayload.auth_algo,
+        verifyPayload.cert_url,
+        verifyPayload.transmission_id,
+        verifyPayload.transmission_sig,
+        verifyPayload.transmission_time,
+    ];
+    if (requiredHeaders.some((value) => !value)) {
+        throw new Error("Missing required PayPal webhook signature headers");
+    }
+    const resp = await fetch(`${base}/v1/notifications/verify-webhook-signature`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify(verifyPayload),
+    });
+    const json = await resp.json().catch(() => ({}));
+    if (!resp.ok || json?.verification_status !== "VERIFIED") {
+        const debugId = resp.headers.get("paypal-debug-id") || json?.debug_id;
+        throw new Error(`PayPal webhook verification failed (${resp.status}): ${JSON.stringify(json)}${debugId ? ` debug_id=${debugId}` : ""}`);
+    }
+}
+async function POST(req, res) {
+    const paypal = req.scope.resolve("paypal_onboarding");
+    try {
+        const payload = (req.body || {});
+        const eventId = String(payload?.id || payload?.event_id || "");
+        const eventType = String(payload?.event_type || payload?.eventType || "");
+        if (!eventId || !eventType) {
+            return res.status(400).json({ message: "Missing PayPal event id or type" });
+        }
+        const creds = await paypal.getActiveCredentials();
+        await verifyWebhookSignature(paypal, creds.environment, payload, req.headers);
+        const transmissionId = getHeader(req.headers, "paypal-transmission-id") || null;
+        const transmissionTimeHeader = getHeader(req.headers, "paypal-transmission-time");
+        const transmissionTime = transmissionTimeHeader ? new Date(transmissionTimeHeader) : null;
+        const eventVersion = (0, webhook_processor_1.normalizeEventVersion)(payload);
+        if (transmissionId) {
+            const existingByTransmission = await paypal.listPayPalWebhookEvents({
+                transmission_id: transmissionId,
+            });
+            if ((existingByTransmission || []).length > 0) {
+                return res.json({ ok: true, duplicate: true });
+            }
+        }
+        const recordResult = await paypal.createWebhookEventRecord({
+            event_id: eventId,
+            event_type: eventType,
+            payload,
+            event_version: eventVersion,
+            transmission_id: transmissionId,
+            transmission_time: transmissionTime,
+            status: "processing",
+            attempt_count: 1,
+        });
+        if (!recordResult.created) {
+            return res.json({ ok: true, duplicate: true });
+        }
+        if (!(0, webhook_processor_1.isAllowedEventType)(eventType)) {
+            await paypal.recordAuditEvent("webhook_unsupported_event", {
+                event_id: eventId,
+                event_type: eventType,
+            });
+            if (recordResult.event?.id) {
+                await paypal.updateWebhookEventRecord({
+                    id: recordResult.event.id,
+                    status: "ignored",
+                    processed_at: new Date(),
+                });
+            }
+            return res.json({ ok: true, ignored: true });
+        }
+        const processed = await (0, webhook_processor_1.processPayPalWebhookEvent)(req.scope, {
+            eventType,
+            payload,
+        });
+        if (recordResult.event?.id) {
+            await paypal.updateWebhookEventRecord({
+                id: recordResult.event.id,
+                status: "processed",
+                processed_at: new Date(),
+                resource_id: processed.disputeId || processed.refundId || processed.captureId || processed.orderId || null,
+            });
+        }
+        console.info("[PayPal] webhook", {
+            event_id: eventId,
+            event_type: eventType,
+            order_id: processed.orderId,
+            capture_id: processed.captureId,
+            refund_id: processed.refundId,
+            cart_id: processed.cartId,
+        });
+        try {
+            await paypal.recordMetric("webhook_success");
+        }
+        catch {
+            // ignore metrics failures
+        }
+        return res.json({ ok: true });
+    }
+    catch (e) {
+        try {
+            const payload = (req.body || {});
+            const eventId = String(payload?.id || payload?.event_id || "");
+            const eventType = String(payload?.event_type || payload?.eventType || "");
+            if (eventId) {
+                const existing = await paypal.listPayPalWebhookEvents({ event_id: eventId });
+                const record = existing?.[0];
+                if (record?.id) {
+                    const attemptCount = Number(record.attempt_count || 0) + 1;
+                    await paypal.updateWebhookEventRecord({
+                        id: record.id,
+                        status: "failed",
+                        attempt_count: attemptCount,
+                        next_retry_at: (0, webhook_processor_1.computeNextRetryAt)(attemptCount),
+                        last_error: e?.message || String(e),
+                    });
+                }
+            }
+            await paypal.recordAuditEvent("webhook_failed", {
+                event_id: payload?.id || payload?.event_id,
+                event_type: payload?.event_type || payload?.eventType,
+                message: e?.message || String(e),
+            });
+            await paypal.recordMetric("webhook_failed");
+        }
+        catch {
+            // ignore audit logging failures
+        }
+        console.error("[PayPal] webhook error", e?.message || e);
+        return res.status(500).json({ message: e?.message || "PayPal webhook error" });
+    }
+}
+//# sourceMappingURL=route.js.map

package/.medusa/server/src/api/store/paypal/webhook/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../../../../../src/api/store/paypal/webhook/route.ts"],"names":[],"mappings":";;AA+HA,oBAuHC;AApPD,oFAKqD;AAErD,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAA;IAC3E,OAAO,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAA;AACtD,CAAC,CAAC,EAAE,CAAA;AAEJ,SAAS,SAAS,CAAC,OAAsD,EAAE,IAAY;IACrF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAA;IACf,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAA;IAClF,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,OAAsD;IACtE,MAAM,gBAAgB,GAAG,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAA;IACvE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAA;IAC7C,OAAO,OAAO,GAAG,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAA;AACpD,CAAC;AAED,SAAS,gBAAgB,CACvB,WAAmB,EACnB,QAAkC;IAElC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAuC,CAAA;IAC/E,MAAM,UAAU,GAAG,QAAQ,EAAE,eAAqC,CAAA;IAClE,MAAM,aAAa,GAAG,QAAQ,EAAE,kBAAwC,CAAA;IAExE,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,IAAI,IAAI,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;IACrE,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,IAAI,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAA;AAC9E,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,MAA2B,EAC3B,WAAmB,EACnB,IAA6B,EAC7B,OAAsD;IAEtD,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IACvE,MAAM,SAAS,GAAG,gBAAgB,CAChC,WAAW,EACV,QAAQ,EAAE,IAAgC,IAAI,EAAE,CAClD,CAAA;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8CAA8C,WAAW,GAAG,CAAC,CAAA;IAC/E,CAAC;IAED,MAAM,IAAI,GACR,WAAW,KAAK,MAAM;QACpB,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,kCAAkC,CAAA;IACxC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAA;IAEpD,MAAM,aAAa,GAAG;QACpB,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,kBAAkB,CAAC;QACjD,QAAQ,EAAE,SAAS,CAAC,OAAO,EAAE,iBAAiB,CAAC;QAC/C,eAAe,EAAE,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;QAC7D,gBAAgB,EAAE,SAAS,CAAC,OAAO,EAAE,yBAAyB,CAAC;QAC/D,iBAAiB,EAAE,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC;QACjE,UAAU,EAAE,SAAS;QACrB,aAAa,EAAE,IAAI;KACpB,CAAA;IAED,MAAM,eAAe,GAAG;QACtB,aAAa,CAAC,SAAS;QACvB,aAAa,CAAC,QAAQ;QACtB,aAAa,CAAC,eAAe;QAC7B,aAAa,CAAC,gBAAgB;QAC9B,aAAa,CAAC,iBAAiB;KAChC,CAAA;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,4CAA4C,EAAE;QAC5E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;KACpC,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAChD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,mBAAmB,KAAK,UAAU,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,EAAE,QAAQ,CAAA;QACrE,MAAM,IAAI,KAAK,CACb,uCAAuC,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAC1E,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC,CAAC,EACrC,EAAE,CACH,CAAA;IACH,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,IAAI,CAAC,GAAkB,EAAE,GAAmB;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAsB,mBAAmB,CAAC,CAAA;IAE1E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAA;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAA;QAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAA;QAEzE,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAA;QAC7E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAA;QACjD,MAAM,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QAC7E,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,wBAAwB,CAAC,IAAI,IAAI,CAAA;QAC/E,MAAM,sBAAsB,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAA;QACjF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACzF,MAAM,YAAY,GAAG,IAAA,yCAAqB,EAAC,OAAO,CAAC,CAAA;QAEnD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,sBAAsB,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC;gBAClE,eAAe,EAAE,cAAc;aAChC,CAAC,CAAA;YACF,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAChD,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC;YACzD,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,SAAS;YACrB,OAAO;YACP,aAAa,EAAE,YAAY;YAC3B,eAAe,EAAE,cAAc;YAC/B,iBAAiB,EAAE,gBAAgB;YACnC,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,CAAC;SACjB,CAAC,CAAA;QACF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAChD,CAAC;QAED,IAAI,CAAC,IAAA,sCAAkB,EAAC,SAAS,CAAC,EAAE,CAAC;YACnC,MAAM,MAAM,CAAC,gBAAgB,CAAC,2BAA2B,EAAE;gBACzD,QAAQ,EAAE,OAAO;gBACjB,UAAU,EAAE,SAAS;aACtB,CAAC,CAAA;YACF,IAAI,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,wBAAwB,CAAC;oBACpC,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE;oBACzB,MAAM,EAAE,SAAS;oBACjB,YAAY,EAAE,IAAI,IAAI,EAAE;iBACzB,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAA,6CAAyB,EAAC,GAAG,CAAC,KAAK,EAAE;YAC3D,SAAS;YACT,OAAO;SACR,CAAC,CAAA;QAEF,IAAI,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;YAC3B,MAAM,MAAM,CAAC,wBAAwB,CAAC;gBACpC,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE;gBACzB,MAAM,EAAE,WAAW;gBACnB,YAAY,EAAE,IAAI,IAAI,EAAE;gBACxB,WAAW,EACT,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI;aAChG,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE;YAC/B,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,SAAS,CAAC,OAAO;YAC3B,UAAU,EAAE,SAAS,CAAC,SAAS;YAC/B,SAAS,EAAE,SAAS,CAAC,QAAQ;YAC7B,OAAO,EAAE,SAAS,CAAC,MAAM;SAC1B,CAAC,CAAA;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAA;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAwB,CAAA;YACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAA;YAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAA;YACzE,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;gBAC5E,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAA;gBAC5B,IAAI,MAAM,EAAE,EAAE,EAAE,CAAC;oBACf,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;oBAC1D,MAAM,MAAM,CAAC,wBAAwB,CAAC;wBACpC,EAAE,EAAE,MAAM,CAAC,EAAE;wBACb,MAAM,EAAE,QAAQ;wBAChB,aAAa,EAAE,YAAY;wBAC3B,aAAa,EAAE,IAAA,sCAAkB,EAAC,YAAY,CAAC;wBAC/C,UAAU,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC;qBACpC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,EAAE;gBAC9C,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,QAAQ;gBAC1C,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,SAAS;gBACrD,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC;aACjC,CAAC,CAAA;YACF,MAAM,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAA;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAA;QACxD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,sBAAsB,EAAE,CAAC,CAAA;IAChF,CAAC;AACH,CAAC"}

package/.medusa/server/src/jobs/paypal-reconcile.d.ts

@@ -0,0 +1,7 @@
+import type { MedusaContainer } from "@medusajs/framework/types";
+export default function paypalReconcile(container: MedusaContainer): Promise<void>;
+export declare const config: {
+    name: string;
+    schedule: string;
+};
+//# sourceMappingURL=paypal-reconcile.d.ts.map

package/.medusa/server/src/jobs/paypal-reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-reconcile.d.ts","sourceRoot":"","sources":["../../../../src/jobs/paypal-reconcile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAWhE,wBAA8B,eAAe,CAAC,SAAS,EAAE,eAAe,iBAsHvE;AAED,eAAO,MAAM,MAAM;;;CAGlB,CAAA"}

package/.medusa/server/src/jobs/paypal-reconcile.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.config = void 0;
+exports.default = paypalReconcile;
+const STATUS_MAP = {
+    CREATED: "pending",
+    APPROVED: "authorized",
+    COMPLETED: "captured",
+    VOIDED: "canceled",
+    CANCELLED: "canceled",
+};
+async function paypalReconcile(container) {
+    const paymentSessionService = container.resolve("payment_session");
+    const paypal = container.resolve("paypal_onboarding");
+    const sessions = await paymentSessionService.list({
+        provider_id: ["paypal", "paypal_card"],
+        status: ["pending", "authorized"],
+    });
+    let sessionsChecked = 0;
+    let sessionsUpdated = 0;
+    let driftCount = 0;
+    let lastDriftAt = null;
+    let lastDriftOrderId = null;
+    let hadFailure = false;
+    let lastErrorMessage = null;
+    for (const session of sessions || []) {
+        const data = (session?.data || {});
+        const paypalData = (data.paypal || {});
+        const orderId = String(paypalData.order_id || data.order_id || "");
+        if (!orderId) {
+            continue;
+        }
+        sessionsChecked += 1;
+        try {
+            const order = await paypal.getOrderDetails(orderId);
+            const status = STATUS_MAP[String(order?.status || "").toUpperCase()];
+            if (!status) {
+                continue;
+            }
+            const previousStatus = session?.status;
+            if (previousStatus && previousStatus !== status) {
+                driftCount += 1;
+                lastDriftAt = new Date().toISOString();
+                lastDriftOrderId = orderId;
+                await paypal.recordPaymentLog("reconcile_drift", {
+                    session_id: session.id,
+                    order_id: orderId,
+                    previous_status: previousStatus,
+                    next_status: status,
+                });
+                await paypal.recordMetric("reconcile_drift");
+                await paypal.sendAlert({
+                    type: "reconcile_drift",
+                    message: `PayPal reconciliation drift detected for order ${orderId}.`,
+                    metadata: {
+                        session_id: session.id,
+                        previous_status: previousStatus,
+                        next_status: status,
+                    },
+                });
+            }
+            await paymentSessionService.update(session.id, {
+                status,
+                data: {
+                    ...(session.data || {}),
+                    paypal: {
+                        ...((session.data || {}).paypal || {}),
+                        order,
+                        reconciliation: {
+                            last_reconciled_at: new Date().toISOString(),
+                            last_status: status,
+                            order_status: order?.status,
+                        },
+                    },
+                },
+            });
+            sessionsUpdated += 1;
+            try {
+                await paypal.recordMetric("reconcile_success");
+            }
+            catch {
+                // ignore metrics failures
+            }
+        }
+        catch (error) {
+            hadFailure = true;
+            lastErrorMessage = error instanceof Error ? error.message : String(error);
+            try {
+                await paypal.recordMetric("reconcile_failed");
+            }
+            catch {
+                // ignore metrics failures
+            }
+            await paypal.sendAlert({
+                type: "reconcile_failed",
+                message: `PayPal reconciliation failed for order ${orderId}.`,
+                metadata: {
+                    session_id: session.id,
+                },
+            });
+            console.error("[PayPal] reconcile error", error);
+        }
+    }
+    try {
+        await paypal.updateReconciliationStatus({
+            status: hadFailure ? "failed" : "success",
+            sessions_checked: sessionsChecked,
+            sessions_updated: sessionsUpdated,
+            drift_count: driftCount,
+            last_drift_at: lastDriftAt,
+            last_drift_order_id: lastDriftOrderId,
+            error_message: hadFailure ? lastErrorMessage : null,
+        });
+    }
+    catch (error) {
+        await paypal.updateReconciliationStatus({
+            status: "failed",
+            sessions_checked: sessionsChecked,
+            sessions_updated: sessionsUpdated,
+            drift_count: driftCount,
+            last_drift_at: lastDriftAt,
+            last_drift_order_id: lastDriftOrderId,
+            error_message: error?.message,
+        });
+    }
+}
+exports.config = {
+    name: "paypal-reconcile",
+    schedule: "*/15 * * * *",
+};
+//# sourceMappingURL=paypal-reconcile.js.map

package/.medusa/server/src/jobs/paypal-reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-reconcile.js","sourceRoot":"","sources":["../../../../src/jobs/paypal-reconcile.ts"],"names":[],"mappings":";;;AAWA,kCAsHC;AA9HD,MAAM,UAAU,GAAuE;IACrF,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,YAAY;IACtB,SAAS,EAAE,UAAU;IACrB,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,UAAU;CACtB,CAAA;AAEc,KAAK,UAAU,eAAe,CAAC,SAA0B;IACtE,MAAM,qBAAqB,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAQ,CAAA;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAsB,mBAAmB,CAAC,CAAA;IAE1E,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC;QAChD,WAAW,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;QACtC,MAAM,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;KAClC,CAAC,CAAA;IAEF,IAAI,eAAe,GAAG,CAAC,CAAA;IACvB,IAAI,eAAe,GAAG,CAAC,CAAA;IACvB,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,WAAW,GAAkB,IAAI,CAAA;IACrC,IAAI,gBAAgB,GAAkB,IAAI,CAAA;IAC1C,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,IAAI,gBAAgB,GAAkB,IAAI,CAAA;IAE1C,KAAK,MAAM,OAAO,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAwB,CAAA;QACzD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAwB,CAAA;QAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAQ;QACV,CAAC;QAED,eAAe,IAAI,CAAC,CAAA;QAEpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;YACpE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAQ;YACV,CAAC;YAED,MAAM,cAAc,GAAG,OAAO,EAAE,MAAM,CAAA;YACtC,IAAI,cAAc,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;gBAChD,UAAU,IAAI,CAAC,CAAA;gBACf,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;gBACtC,gBAAgB,GAAG,OAAO,CAAA;gBAC1B,MAAM,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,EAAE;oBAC/C,UAAU,EAAE,OAAO,CAAC,EAAE;oBACtB,QAAQ,EAAE,OAAO;oBACjB,eAAe,EAAE,cAAc;oBAC/B,WAAW,EAAE,MAAM;iBACpB,CAAC,CAAA;gBACF,MAAM,MAAM,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAA;gBAC5C,MAAM,MAAM,CAAC,SAAS,CAAC;oBACrB,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,kDAAkD,OAAO,GAAG;oBACrE,QAAQ,EAAE;wBACR,UAAU,EAAE,OAAO,CAAC,EAAE;wBACtB,eAAe,EAAE,cAAc;wBAC/B,WAAW,EAAE,MAAM;qBACpB;iBACF,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE;gBAC7C,MAAM;gBACN,IAAI,EAAE;oBACJ,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,EAAE;wBACN,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;wBACtC,KAAK;wBACL,cAAc,EAAE;4BACd,kBAAkB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;4BAC5C,WAAW,EAAE,MAAM;4BACnB,YAAY,EAAE,KAAK,EAAE,MAAM;yBAC5B;qBACF;iBACF;aACF,CAAC,CAAA;YACF,eAAe,IAAI,CAAC,CAAA;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAA;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,GAAG,IAAI,CAAA;YACjB,gBAAgB,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACzE,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAA;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;YACD,MAAM,MAAM,CAAC,SAAS,CAAC;gBACrB,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,0CAA0C,OAAO,GAAG;gBAC7D,QAAQ,EAAE;oBACR,UAAU,EAAE,OAAO,CAAC,EAAE;iBACvB;aACF,CAAC,CAAA;YACF,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;QAClD,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACzC,gBAAgB,EAAE,eAAe;YACjC,gBAAgB,EAAE,eAAe;YACjC,WAAW,EAAE,UAAU;YACvB,aAAa,EAAE,WAAW;YAC1B,mBAAmB,EAAE,gBAAgB;YACrC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI;SACpD,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,0BAA0B,CAAC;YACtC,MAAM,EAAE,QAAQ;YAChB,gBAAgB,EAAE,eAAe;YACjC,gBAAgB,EAAE,eAAe;YACjC,WAAW,EAAE,UAAU;YACvB,aAAa,EAAE,WAAW;YAC1B,mBAAmB,EAAE,gBAAgB;YACrC,aAAa,EAAE,KAAK,EAAE,OAAO;SAC9B,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAEY,QAAA,MAAM,GAAG;IACpB,IAAI,EAAE,kBAAkB;IACxB,QAAQ,EAAE,cAAc;CACzB,CAAA"}

package/.medusa/server/src/jobs/paypal-webhook-retry.d.ts

@@ -0,0 +1,7 @@
+import type { MedusaContainer } from "@medusajs/framework/types";
+export default function paypalWebhookRetry(container: MedusaContainer): Promise<void>;
+export declare const config: {
+    name: string;
+    schedule: string;
+};
+//# sourceMappingURL=paypal-webhook-retry.d.ts.map

package/.medusa/server/src/jobs/paypal-webhook-retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-webhook-retry.d.ts","sourceRoot":"","sources":["../../../../src/jobs/paypal-webhook-retry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAUhE,wBAA8B,kBAAkB,CAAC,SAAS,EAAE,eAAe,iBAsE1E;AAED,eAAO,MAAM,MAAM;;;CAGlB,CAAA"}

package/.medusa/server/src/jobs/paypal-webhook-retry.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.config = void 0;
+exports.default = paypalWebhookRetry;
+const webhook_processor_1 = require("../modules/paypal/webhook-processor");
+const MAX_WEBHOOK_ATTEMPTS = 5;
+async function paypalWebhookRetry(container) {
+    const paypal = container.resolve("paypal_onboarding");
+    const now = Date.now();
+    const candidates = await paypal.listPayPalWebhookEvents({ status: "failed" });
+    for (const event of candidates || []) {
+        const nextRetryAt = event?.next_retry_at ? new Date(event.next_retry_at).getTime() : null;
+        if (!nextRetryAt || nextRetryAt > now) {
+            continue;
+        }
+        const attemptCount = Number(event.attempt_count || 0) + 1;
+        if (attemptCount > MAX_WEBHOOK_ATTEMPTS) {
+            continue;
+        }
+        await paypal.updateWebhookEventRecord({
+            id: event.id,
+            status: "processing",
+            attempt_count: attemptCount,
+            next_retry_at: null,
+            last_error: null,
+        });
+        try {
+            const eventType = String(event.event_type || "");
+            if (!(0, webhook_processor_1.isAllowedEventType)(eventType)) {
+                await paypal.updateWebhookEventRecord({
+                    id: event.id,
+                    status: "ignored",
+                    processed_at: new Date(),
+                });
+                continue;
+            }
+            const payload = (event.payload || {});
+            const processed = await (0, webhook_processor_1.processPayPalWebhookEvent)(container, {
+                eventType,
+                payload,
+            });
+            await paypal.updateWebhookEventRecord({
+                id: event.id,
+                status: "processed",
+                processed_at: new Date(),
+                resource_id: processed.disputeId || processed.refundId || processed.captureId || processed.orderId || null,
+            });
+            try {
+                await paypal.recordMetric("webhook_retry_success");
+            }
+            catch {
+                // ignore metrics failures
+            }
+        }
+        catch (error) {
+            const nextRetry = attemptCount >= MAX_WEBHOOK_ATTEMPTS ? null : (0, webhook_processor_1.computeNextRetryAt)(attemptCount);
+            await paypal.updateWebhookEventRecord({
+                id: event.id,
+                status: "failed",
+                attempt_count: attemptCount,
+                next_retry_at: nextRetry,
+                last_error: error?.message || String(error),
+            });
+            try {
+                await paypal.recordMetric("webhook_retry_failed");
+            }
+            catch {
+                // ignore metrics failures
+            }
+            console.error("[PayPal] webhook retry error", error);
+        }
+    }
+}
+exports.config = {
+    name: "paypal-webhook-retry",
+    schedule: "*/10 * * * *",
+};
+//# sourceMappingURL=paypal-webhook-retry.js.map

package/.medusa/server/src/jobs/paypal-webhook-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-webhook-retry.js","sourceRoot":"","sources":["../../../../src/jobs/paypal-webhook-retry.ts"],"names":[],"mappings":";;;AAUA,qCAsEC;AA9ED,2EAI4C;AAE5C,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAEf,KAAK,UAAU,kBAAkB,CAAC,SAA0B;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAsB,mBAAmB,CAAC,CAAA;IAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IAE7E,KAAK,MAAM,KAAK,IAAI,UAAU,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,WAAW,GAAG,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QACzF,IAAI,CAAC,WAAW,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;YACtC,SAAQ;QACV,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACzD,IAAI,YAAY,GAAG,oBAAoB,EAAE,CAAC;YACxC,SAAQ;QACV,CAAC;QAED,MAAM,MAAM,CAAC,wBAAwB,CAAC;YACpC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,MAAM,EAAE,YAAY;YACpB,aAAa,EAAE,YAAY;YAC3B,aAAa,EAAE,IAAI;YACnB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAA;QAEF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAA;YAChD,IAAI,CAAC,IAAA,sCAAkB,EAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,MAAM,MAAM,CAAC,wBAAwB,CAAC;oBACpC,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,MAAM,EAAE,SAAS;oBACjB,YAAY,EAAE,IAAI,IAAI,EAAE;iBACzB,CAAC,CAAA;gBACF,SAAQ;YACV,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAwB,CAAA;YAC5D,MAAM,SAAS,GAAG,MAAM,IAAA,6CAAyB,EAAC,SAAS,EAAE;gBAC3D,SAAS;gBACT,OAAO;aACR,CAAC,CAAA;YAEF,MAAM,MAAM,CAAC,wBAAwB,CAAC;gBACpC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,MAAM,EAAE,WAAW;gBACnB,YAAY,EAAE,IAAI,IAAI,EAAE;gBACxB,WAAW,EACT,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI;aAChG,CAAC,CAAA;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAA;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,YAAY,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,sCAAkB,EAAC,YAAY,CAAC,CAAA;YAChG,MAAM,MAAM,CAAC,wBAAwB,CAAC;gBACpC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,MAAM,EAAE,QAAQ;gBAChB,aAAa,EAAE,YAAY;gBAC3B,aAAa,EAAE,SAAS;gBACxB,UAAU,EAAE,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC;aAC5C,CAAC,CAAA;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAA;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAEY,QAAA,MAAM,GAAG;IACpB,IAAI,EAAE,sBAAsB;IAC5B,QAAQ,EAAE,cAAc;CACzB,CAAA"}

package/.medusa/server/src/modules/paypal/clients/paypal-seller.client.d.ts

@@ -0,0 +1,14 @@
+export declare class PayPalSellerClient {
+    private opts;
+    constructor(opts: {
+        environment: "sandbox" | "live";
+        accessToken: string;
+    });
+    private baseUrl;
+    private headers;
+    createOrder(body: any): Promise<any>;
+    getOrder(orderId: string): Promise<any>;
+    captureOrder(orderId: string): Promise<any>;
+    refundCapture(captureId: string, body?: any): Promise<any>;
+}
+//# sourceMappingURL=paypal-seller.client.d.ts.map

package/.medusa/server/src/modules/paypal/clients/paypal-seller.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-seller.client.d.ts","sourceRoot":"","sources":["../../../../../../src/modules/paypal/clients/paypal-seller.client.ts"],"names":[],"mappings":"AAAA,qBAAa,kBAAkB;IACjB,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE;QAAE,WAAW,EAAE,SAAS,GAAG,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;IAElF,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,OAAO;IAQT,WAAW,CAAC,IAAI,EAAE,GAAG;IAWrB,QAAQ,CAAC,OAAO,EAAE,MAAM;IAUxB,YAAY,CAAC,OAAO,EAAE,MAAM;IAU5B,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG;CAUlD"}

package/.medusa/server/src/modules/paypal/clients/paypal-seller.client.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PayPalSellerClient = void 0;
+class PayPalSellerClient {
+    opts;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    baseUrl() {
+        return this.opts.environment === "live"
+            ? "https://api-m.paypal.com"
+            : "https://api-m.sandbox.paypal.com";
+    }
+    headers(extra) {
+        return {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${this.opts.accessToken}`,
+            ...(extra ?? {}),
+        };
+    }
+    async createOrder(body) {
+        const res = await fetch(`${this.baseUrl()}/v2/checkout/orders`, {
+            method: "POST",
+            headers: this.headers(),
+            body: JSON.stringify(body),
+        });
+        const json = await res.json().catch(() => ({}));
+        if (!res.ok)
+            throw new Error(`PayPal createOrder failed (${res.status}): ${JSON.stringify(json)}`);
+        return json;
+    }
+    async getOrder(orderId) {
+        const res = await fetch(`${this.baseUrl()}/v2/checkout/orders/${orderId}`, {
+            method: "GET",
+            headers: this.headers(),
+        });
+        const json = await res.json().catch(() => ({}));
+        if (!res.ok)
+            throw new Error(`PayPal getOrder failed (${res.status}): ${JSON.stringify(json)}`);
+        return json;
+    }
+    async captureOrder(orderId) {
+        const res = await fetch(`${this.baseUrl()}/v2/checkout/orders/${orderId}/capture`, {
+            method: "POST",
+            headers: this.headers(),
+        });
+        const json = await res.json().catch(() => ({}));
+        if (!res.ok)
+            throw new Error(`PayPal captureOrder failed (${res.status}): ${JSON.stringify(json)}`);
+        return json;
+    }
+    async refundCapture(captureId, body) {
+        const res = await fetch(`${this.baseUrl()}/v2/payments/captures/${captureId}/refund`, {
+            method: "POST",
+            headers: this.headers(),
+            body: body ? JSON.stringify(body) : "{}",
+        });
+        const json = await res.json().catch(() => ({}));
+        if (!res.ok)
+            throw new Error(`PayPal refund failed (${res.status}): ${JSON.stringify(json)}`);
+        return json;
+    }
+}
+exports.PayPalSellerClient = PayPalSellerClient;
+//# sourceMappingURL=paypal-seller.client.js.map

package/.medusa/server/src/modules/paypal/clients/paypal-seller.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal-seller.client.js","sourceRoot":"","sources":["../../../../../../src/modules/paypal/clients/paypal-seller.client.ts"],"names":[],"mappings":";;;AAAA,MAAa,kBAAkB;IACT;IAApB,YAAoB,IAA8D;QAA9D,SAAI,GAAJ,IAAI,CAA0D;IAAG,CAAC;IAE9E,OAAO;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,KAAK,MAAM;YACrC,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,kCAAkC,CAAA;IACxC,CAAC;IAEO,OAAO,CAAC,KAA8B;QAC5C,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAChD,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAS;QACzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,qBAAqB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAClG,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,OAAO,EAAE,EAAE;YACzE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC/F,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,OAAO,UAAU,EAAE;YACjF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACnG,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,IAAU;QAC/C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,yBAAyB,SAAS,SAAS,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SACzC,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC7F,OAAO,IAAI,CAAA;IACb,CAAC;CACF;AA1DD,gDA0DC"}