@financedistrict/medusa-plugin-agentic-commerce 0.1.0

package/.medusa/server/src/api/middleware/idempotency.js

@@ -0,0 +1,184 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createIdempotencyMiddleware = createIdempotencyMiddleware;
+const crypto_1 = __importDefault(require("crypto"));
+const utils_1 = require("@medusajs/framework/utils");
+const IDEMPOTENCY_TTL = 60 * 60 * 24; // 24 hours in seconds
+const PROCESSING_TTL = 60; // 1 minute lock while processing
+function hashBody(body) {
+    const serialized = JSON.stringify(body || {});
+    return crypto_1.default.createHash("sha256").update(serialized).digest("hex");
+}
+function cacheKey(path, idempotencyKey, identity) {
+    return `idempotency:${identity}:${path}:${idempotencyKey}`;
+}
+function extractIdentity(req) {
+    // Scope by authenticated identity: API key or UCP-Agent header
+    const authHeader = req.headers["authorization"];
+    if (authHeader) {
+        return crypto_1.default.createHash("sha256").update(authHeader).digest("hex").slice(0, 16);
+    }
+    const ucpAgent = req.headers["ucp-agent"];
+    if (ucpAgent) {
+        return crypto_1.default.createHash("sha256").update(ucpAgent).digest("hex").slice(0, 16);
+    }
+    return "anonymous";
+}
+/**
+ * Idempotency middleware for agentic commerce endpoints.
+ *
+ * - ACP: Idempotency-Key header is REQUIRED on every POST (returns 400 if missing)
+ * - UCP: Idempotency-Key header is REQUIRED on POST/PUT (returns 400 if missing)
+ *
+ * Uses Medusa's cache module (in-memory dev, Redis production) with 24h TTL.
+ * Keys are scoped by authenticated identity + request path.
+ *
+ * Behavior:
+ * - New key: mark as "processing", run handler, cache response (skip 5xx)
+ * - Duplicate key + same body hash: return cached response with Idempotent-Replayed: true
+ * - Duplicate key + different body hash: 422 idempotency_conflict
+ * - Duplicate key still processing: 409 with Retry-After: 1
+ */
+function createIdempotencyMiddleware(options) {
+    return async function idempotencyMiddleware(req, res, next) {
+        // Only apply to POST and PUT requests
+        if (req.method !== "POST" && req.method !== "PUT") {
+            next();
+            return;
+        }
+        const idempotencyKey = req.headers["idempotency-key"];
+        // If header missing and required, return 400
+        if (!idempotencyKey) {
+            if (options.required) {
+                if (options.protocol === "acp") {
+                    res.status(400).json({
+                        type: "invalid_request",
+                        code: "idempotency_key_required",
+                        message: "Idempotency-Key header is required for POST requests",
+                    });
+                }
+                else {
+                    res.status(400).json({
+                        ucp: { version: "2026-01-11", status: "error" },
+                        messages: [{
+                                type: "error",
+                                code: "idempotency_key_required",
+                                content: "Idempotency-Key header is required for mutating requests",
+                                severity: "error",
+                            }],
+                    });
+                }
+                return;
+            }
+            // Not required and not present — skip
+            next();
+            return;
+        }
+        let cacheModule;
+        try {
+            cacheModule = req.scope.resolve(utils_1.Modules.CACHE);
+        }
+        catch {
+            // Cache module not available — skip idempotency (dev fallback)
+            console.warn("[idempotency] Cache module not available, skipping idempotency check");
+            next();
+            return;
+        }
+        const identity = extractIdentity(req);
+        const key = cacheKey(req.path, idempotencyKey, identity);
+        const bodyHash = hashBody(req.body);
+        // Check for existing cached response
+        const cached = await cacheModule.get(key);
+        if (cached) {
+            // Body hash mismatch — conflict
+            if (cached.body_hash !== bodyHash) {
+                if (options.protocol === "acp") {
+                    res.status(422).json({
+                        type: "invalid_request",
+                        code: "idempotency_conflict",
+                        message: "Idempotency-Key has already been used with a different request body",
+                    });
+                }
+                else {
+                    res.status(422).json({
+                        ucp: { version: "2026-01-11", status: "error" },
+                        messages: [{
+                                type: "error",
+                                code: "idempotency_conflict",
+                                content: "Idempotency-Key has already been used with a different request body",
+                                severity: "error",
+                            }],
+                    });
+                }
+                return;
+            }
+            // Still processing — retry later
+            if (cached.status === "processing") {
+                if (options.protocol === "acp") {
+                    res.status(409).set("Retry-After", "1").json({
+                        type: "processing_error",
+                        code: "idempotency_in_flight",
+                        message: "A request with this Idempotency-Key is currently being processed",
+                    });
+                }
+                else {
+                    res.status(409).set("Retry-After", "1").json({
+                        ucp: { version: "2026-01-11", status: "error" },
+                        messages: [{
+                                type: "error",
+                                code: "idempotency_in_flight",
+                                content: "A request with this Idempotency-Key is currently being processed",
+                                severity: "error",
+                            }],
+                    });
+                }
+                return;
+            }
+            // Completed — replay cached response
+            if (cached.status === "completed" && cached.response_body) {
+                res
+                    .status(cached.response_status || 200)
+                    .set("Idempotent-Replayed", "true")
+                    .set("Idempotency-Key", idempotencyKey)
+                    .json(cached.response_body);
+                return;
+            }
+        }
+        // Mark as processing
+        const processingEntry = {
+            status: "processing",
+            body_hash: bodyHash,
+        };
+        await cacheModule.set(key, processingEntry, PROCESSING_TTL);
+        // Intercept res.json to cache the response (skip 5xx)
+        const originalJson = res.json.bind(res);
+        res.json = function (body) {
+            // Only cache successful responses (non-5xx)
+            if (res.statusCode < 500) {
+                const completedEntry = {
+                    status: "completed",
+                    body_hash: bodyHash,
+                    response_status: res.statusCode,
+                    response_body: body,
+                    completed_at: new Date().toISOString(),
+                };
+                // Cache asynchronously — don't block response
+                cacheModule.set(key, completedEntry, IDEMPOTENCY_TTL).catch((err) => {
+                    console.error("[idempotency] Failed to cache response:", err.message);
+                });
+            }
+            else {
+                // 5xx: clean up the processing entry so retries work
+                cacheModule.invalidate(key).catch(() => { });
+            }
+            // Set idempotency headers on response
+            res.set("Idempotency-Key", idempotencyKey);
+            return originalJson(body);
+        };
+        next();
+    };
+}
+//# sourceMappingURL=idempotency.js.map

package/.medusa/server/src/api/middleware/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../../../../src/api/middleware/idempotency.ts"],"names":[],"mappings":";;;;;AAwDA,kEA0JC;AAlND,oDAA2B;AAM3B,qDAAmD;AAEnD,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA,CAAC,sBAAsB;AAC3D,MAAM,cAAc,GAAG,EAAE,CAAA,CAAC,iCAAiC;AAU3D,SAAS,QAAQ,CAAC,IAAa;IAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAC7C,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,cAAsB,EAAE,QAAgB;IACtE,OAAO,eAAe,QAAQ,IAAI,IAAI,IAAI,cAAc,EAAE,CAAA;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,GAAkB;IACzC,+DAA+D;IAC/D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAC/C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAW,CAAA;IACnD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,gBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,WAAW,CAAA;AACpB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,2BAA2B,CAAC,OAG3C;IACC,OAAO,KAAK,UAAU,qBAAqB,CACzC,GAAkB,EAClB,GAAmB,EACnB,IAAwB;QAExB,sCAAsC;QACtC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAClD,IAAI,EAAE,CAAA;YACN,OAAM;QACR,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAuB,CAAA;QAE3E,6CAA6C;QAC7C,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;oBAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,iBAAiB;wBACvB,IAAI,EAAE,0BAA0B;wBAChC,OAAO,EAAE,sDAAsD;qBAChE,CAAC,CAAA;gBACJ,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;wBAC/C,QAAQ,EAAE,CAAC;gCACT,IAAI,EAAE,OAAO;gCACb,IAAI,EAAE,0BAA0B;gCAChC,OAAO,EAAE,0DAA0D;gCACnE,QAAQ,EAAE,OAAO;6BAClB,CAAC;qBACH,CAAC,CAAA;gBACJ,CAAC;gBACD,OAAM;YACR,CAAC;YACD,sCAAsC;YACtC,IAAI,EAAE,CAAA;YACN,OAAM;QACR,CAAC;QAED,IAAI,WAAgB,CAAA;QACpB,IAAI,CAAC;YACH,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,eAAO,CAAC,KAAK,CAAC,CAAA;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;YAC/D,OAAO,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;YACpF,IAAI,EAAE,CAAA;YACN,OAAM;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAA;QACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEnC,qCAAqC;QACrC,MAAM,MAAM,GAA0B,MAAM,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAEhE,IAAI,MAAM,EAAE,CAAC;YACX,gCAAgC;YAChC,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;oBAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,iBAAiB;wBACvB,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EAAE,qEAAqE;qBAC/E,CAAC,CAAA;gBACJ,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;wBAC/C,QAAQ,EAAE,CAAC;gCACT,IAAI,EAAE,OAAO;gCACb,IAAI,EAAE,sBAAsB;gCAC5B,OAAO,EAAE,qEAAqE;gCAC9E,QAAQ,EAAE,OAAO;6BAClB,CAAC;qBACH,CAAC,CAAA;gBACJ,CAAC;gBACD,OAAM;YACR,CAAC;YAED,iCAAiC;YACjC,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;oBAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;wBAC3C,IAAI,EAAE,kBAAkB;wBACxB,IAAI,EAAE,uBAAuB;wBAC7B,OAAO,EAAE,kEAAkE;qBAC5E,CAAC,CAAA;gBACJ,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;wBAC3C,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;wBAC/C,QAAQ,EAAE,CAAC;gCACT,IAAI,EAAE,OAAO;gCACb,IAAI,EAAE,uBAAuB;gCAC7B,OAAO,EAAE,kEAAkE;gCAC3E,QAAQ,EAAE,OAAO;6BAClB,CAAC;qBACH,CAAC,CAAA;gBACJ,CAAC;gBACD,OAAM;YACR,CAAC;YAED,qCAAqC;YACrC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC1D,GAAG;qBACA,MAAM,CAAC,MAAM,CAAC,eAAe,IAAI,GAAG,CAAC;qBACrC,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC;qBAClC,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC;qBACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;gBAC7B,OAAM;YACR,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,eAAe,GAAmB;YACtC,MAAM,EAAE,YAAY;YACpB,SAAS,EAAE,QAAQ;SACpB,CAAA;QACD,MAAM,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,EAAE,cAAc,CAAC,CAAA;QAE3D,sDAAsD;QACtD,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACvC,GAAG,CAAC,IAAI,GAAG,UAAU,IAAa;YAChC,4CAA4C;YAC5C,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;gBACzB,MAAM,cAAc,GAAmB;oBACrC,MAAM,EAAE,WAAW;oBACnB,SAAS,EAAE,QAAQ;oBACnB,eAAe,EAAE,GAAG,CAAC,UAAU;oBAC/B,aAAa,EAAE,IAAI;oBACnB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACvC,CAAA;gBAED,8CAA8C;gBAC9C,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;oBACzE,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;gBACvE,CAAC,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,qDAAqD;gBACrD,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC7C,CAAC;YAED,sCAAsC;YACtC,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAA;YAE1C,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAQ,CAAA;QAER,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC"}

package/.medusa/server/src/api/middlewares.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@medusajs/framework/http").MiddlewaresConfig;
+export default _default;
+//# sourceMappingURL=middlewares.d.ts.map

package/.medusa/server/src/api/middlewares.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middlewares.d.ts","sourceRoot":"","sources":["../../../../src/api/middlewares.ts"],"names":[],"mappings":";AAwOA,wBAmIE"}

package/.medusa/server/src/api/middlewares.js

@@ -0,0 +1,309 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const http_1 = require("@medusajs/framework/http");
+const validation_schemas_1 = require("./validation-schemas");
+const idempotency_1 = require("./middleware/idempotency");
+const error_formatters_1 = require("../lib/error-formatters");
+const error_formatters_2 = require("../lib/error-formatters");
+// Supported ACP API versions
+const SUPPORTED_ACP_VERSIONS = ["2026-01-30"];
+const UCP_VERSION = "2026-01-11";
+// --- ACP Auth Middleware ---
+// Validates Bearer token + API-Version header + optional HMAC signature
+async function validateAcpRequest(req, res, next) {
+    // Validate Bearer token
+    const apiKey = req.headers["authorization"]?.replace("Bearer ", "").trim();
+    if (!apiKey) {
+        res.status(401).json((0, error_formatters_1.formatAcpError)({
+            type: "invalid_request",
+            code: "unauthorized",
+            message: "Missing API key in Authorization header",
+            httpStatus: 401,
+        }));
+        return;
+    }
+    const agenticCommerceService = req.scope.resolve("agenticCommerce");
+    if (!agenticCommerceService.validateApiKey(apiKey)) {
+        res.status(401).json((0, error_formatters_1.formatAcpError)({
+            type: "invalid_request",
+            code: "unauthorized",
+            message: "Invalid API key",
+            httpStatus: 401,
+        }));
+        return;
+    }
+    // Validate API-Version header (required by ACP spec)
+    const apiVersion = req.headers["api-version"];
+    if (!apiVersion) {
+        res.status(400).json((0, error_formatters_1.formatAcpError)({
+            code: "missing_api_version",
+            message: "API-Version header is required for ACP requests",
+            httpStatus: 400,
+        }));
+        return;
+    }
+    if (!SUPPORTED_ACP_VERSIONS.includes(apiVersion)) {
+        res.status(400).json((0, error_formatters_1.formatAcpError)({
+            code: "unsupported_api_version",
+            message: `Unsupported API-Version: ${apiVersion}. Supported versions: ${SUPPORTED_ACP_VERSIONS.join(", ")}`,
+            httpStatus: 400,
+        }));
+        return;
+    }
+    // Optional HMAC signature verification for write operations
+    if (req.method !== "GET" && req.headers["signature"]) {
+        const signature = req.headers["signature"];
+        const body = JSON.stringify(req.body || {});
+        if (!agenticCommerceService.verifySignature(body, signature)) {
+            res.status(403).json((0, error_formatters_1.formatAcpError)({
+                code: "invalid_signature",
+                message: "Invalid request signature",
+                httpStatus: 403,
+            }));
+            return;
+        }
+    }
+    next();
+}
+// --- ACP Request-Id Middleware ---
+// Echoes client's Request-Id if provided, otherwise generates new
+async function acpRequestId(req, res, next) {
+    const clientRequestId = req.headers["request-id"];
+    res.set("Request-Id", clientRequestId || crypto.randomUUID());
+    next();
+}
+// --- UCP Auth Middleware ---
+// Requires UCP-Agent header, validates Request-Id, optionally validates Bearer token
+async function validateUcpRequest(req, res, next) {
+    const ucpAgent = req.headers["ucp-agent"];
+    if (!ucpAgent) {
+        res.status(400).json((0, error_formatters_2.formatUcpError)({
+            ucpVersion: UCP_VERSION,
+            code: "missing_ucp_agent",
+            content: "Missing UCP-Agent header for platform identification",
+        }));
+        return;
+    }
+    // Validate Request-Id header (required by UCP spec)
+    const requestId = req.headers["request-id"];
+    if (!requestId) {
+        res.status(400).json((0, error_formatters_2.formatUcpError)({
+            ucpVersion: UCP_VERSION,
+            code: "missing_request_id",
+            content: "Request-Id header is required for UCP requests",
+        }));
+        return;
+    }
+    // Echo Request-Id back
+    res.set("Request-Id", requestId);
+    // If a Bearer token is provided, validate it
+    const authHeader = req.headers["authorization"];
+    if (authHeader) {
+        const token = authHeader.replace("Bearer ", "").trim();
+        const agenticCommerceService = req.scope.resolve("agenticCommerce");
+        if (!agenticCommerceService.validateApiKey(token)) {
+            res.status(401).json((0, error_formatters_2.formatUcpError)({
+                ucpVersion: UCP_VERSION,
+                code: "unauthorized",
+                content: "Invalid Bearer token",
+            }));
+            return;
+        }
+    }
+    next();
+}
+// --- Adapter Resolution Middleware ---
+// Resolves payment handler adapters from the request-scoped container.
+// Must run before any route that accesses payment handlers.
+// Module-scoped containers can't see other modules; the request scope can.
+async function resolvePaymentAdapters(req, _res, next) {
+    try {
+        const agenticCommerceService = req.scope.resolve("agenticCommerce");
+        agenticCommerceService.resolveAdapters(req.scope);
+    }
+    catch {
+        // Silently skip — service may not be configured
+    }
+    next();
+}
+// --- .well-known route handlers ---
+// Medusa's file-based routing ignores directories starting with "." so the
+// actual route files live at src/api/well-known/. These method-specific
+// middleware entries register proper Express routes at the standard
+// /.well-known/ paths that proxy to the real handlers.
+async function wellKnownUcpHandler(req, res) {
+    const agenticCommerceService = req.scope.resolve("agenticCommerce");
+    const paymentHandlers = agenticCommerceService.getPaymentHandlerService();
+    const ucpVersion = agenticCommerceService.getUcpVersion();
+    const handlers = await paymentHandlers.getUcpDiscoveryHandlers();
+    const baseUrl = `${req.protocol}://${req.get("host")}`;
+    res.json({
+        ucp: {
+            version: ucpVersion,
+            services: {
+                "dev.ucp.shopping": [{
+                        version: ucpVersion,
+                        transport: "rest",
+                        endpoint: `${baseUrl}/ucp`,
+                    }],
+            },
+            capabilities: {
+                "dev.ucp.shopping.catalog.search": [{ version: ucpVersion }],
+                "dev.ucp.shopping.catalog.lookup": [{ version: ucpVersion }],
+                "dev.ucp.shopping.checkout": [{ version: ucpVersion }],
+                "dev.ucp.shopping.cart": [{ version: ucpVersion }],
+                "dev.ucp.shopping.order": [{ version: ucpVersion }],
+            },
+            payment_handlers: handlers,
+        },
+    });
+}
+async function wellKnownAcpHandler(req, res) {
+    const agenticCommerceService = req.scope.resolve("agenticCommerce");
+    const paymentHandlers = agenticCommerceService.getPaymentHandlerService();
+    const acpVersion = agenticCommerceService.getAcpVersion();
+    const handlers = await paymentHandlers.getAcpDiscoveryHandlers();
+    const baseUrl = `${req.protocol}://${req.get("host")}`;
+    res.json({
+        protocol: {
+            name: "acp",
+            version: acpVersion,
+            supported_versions: [acpVersion],
+        },
+        api_base_url: `${baseUrl}/acp`,
+        transports: ["rest"],
+        capabilities: {
+            services: ["checkout", "orders"],
+            payment: { handlers },
+            supported_currencies: ["eur"],
+            supported_locales: ["en"],
+        },
+    });
+}
+exports.default = (0, http_1.defineMiddlewares)({
+    routes: [
+        // --- .well-known route aliases ---
+        // Registered as app.get() routes so they work at the standard RFC 8615 path.
+        // resolvePaymentAdapters runs first to ensure adapters are available.
+        {
+            matcher: "/.well-known/ucp",
+            method: "GET",
+            middlewares: [resolvePaymentAdapters, wellKnownUcpHandler],
+        },
+        {
+            matcher: "/.well-known/acp.json",
+            method: "GET",
+            middlewares: [resolvePaymentAdapters, wellKnownAcpHandler],
+        },
+        // --- ACP Auth + Adapter Resolution + Request-Id ---
+        {
+            matcher: "/acp/checkout_sessions*",
+            middlewares: [validateAcpRequest, resolvePaymentAdapters, acpRequestId],
+        },
+        {
+            matcher: "/acp/orders*",
+            middlewares: [validateAcpRequest, resolvePaymentAdapters, acpRequestId],
+        },
+        {
+            matcher: "/acp/product-feed*",
+            middlewares: [validateAcpRequest, resolvePaymentAdapters, acpRequestId],
+        },
+        // --- ACP Idempotency (required on all POSTs) ---
+        {
+            matcher: "/acp/checkout_sessions*",
+            method: "POST",
+            middlewares: [(0, idempotency_1.createIdempotencyMiddleware)({ required: true, protocol: "acp" })],
+        },
+        // --- ACP Zod Validation ---
+        {
+            matcher: "/acp/checkout_sessions",
+            method: "POST",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.CreateAcpCheckoutSessionSchema)],
+        },
+        {
+            matcher: "/acp/checkout_sessions/:id",
+            method: "POST",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.UpdateAcpCheckoutSessionSchema)],
+        },
+        {
+            matcher: "/acp/checkout_sessions/:id/complete",
+            method: "POST",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.CompleteAcpCheckoutSessionSchema)],
+        },
+        // --- UCP Auth + Adapter Resolution ---
+        {
+            matcher: "/ucp/catalog/*",
+            middlewares: [validateUcpRequest, resolvePaymentAdapters],
+        },
+        {
+            matcher: "/ucp/checkout-sessions*",
+            middlewares: [validateUcpRequest, resolvePaymentAdapters],
+        },
+        {
+            matcher: "/ucp/carts*",
+            middlewares: [validateUcpRequest, resolvePaymentAdapters],
+        },
+        {
+            matcher: "/ucp/orders*",
+            middlewares: [validateUcpRequest, resolvePaymentAdapters],
+        },
+        // --- UCP Idempotency (required on POST/PUT) ---
+        {
+            matcher: "/ucp/checkout-sessions*",
+            method: "POST",
+            middlewares: [(0, idempotency_1.createIdempotencyMiddleware)({ required: true, protocol: "ucp" })],
+        },
+        {
+            matcher: "/ucp/checkout-sessions*",
+            method: "PUT",
+            middlewares: [(0, idempotency_1.createIdempotencyMiddleware)({ required: true, protocol: "ucp" })],
+        },
+        {
+            matcher: "/ucp/carts*",
+            method: "POST",
+            middlewares: [(0, idempotency_1.createIdempotencyMiddleware)({ required: true, protocol: "ucp" })],
+        },
+        {
+            matcher: "/ucp/carts*",
+            method: "PUT",
+            middlewares: [(0, idempotency_1.createIdempotencyMiddleware)({ required: true, protocol: "ucp" })],
+        },
+        // --- UCP Zod Validation ---
+        {
+            matcher: "/ucp/checkout-sessions",
+            method: "POST",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.CreateUcpCheckoutSessionSchema)],
+        },
+        {
+            matcher: "/ucp/checkout-sessions/:id",
+            method: "PUT",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.UpdateUcpCheckoutSessionSchema)],
+        },
+        {
+            matcher: "/ucp/checkout-sessions/:id/complete",
+            method: "POST",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.CompleteUcpCheckoutSessionSchema)],
+        },
+        {
+            matcher: "/ucp/carts",
+            method: "POST",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.CreateUcpCartSchema)],
+        },
+        {
+            matcher: "/ucp/carts/:id",
+            method: "PUT",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.UpdateUcpCartSchema)],
+        },
+        {
+            matcher: "/ucp/catalog/search",
+            method: "POST",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.CatalogSearchSchema)],
+        },
+        {
+            matcher: "/ucp/catalog/lookup",
+            method: "POST",
+            middlewares: [(0, http_1.validateAndTransformBody)(validation_schemas_1.CatalogLookupSchema)],
+        },
+    ],
+});
+//# sourceMappingURL=middlewares.js.map

package/.medusa/server/src/api/middlewares.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middlewares.js","sourceRoot":"","sources":["../../../../src/api/middlewares.ts"],"names":[],"mappings":";;AAAA,mDAAsF;AAEtF,6DAW6B;AAC7B,0DAAsE;AACtE,8DAAwD;AACxD,8DAAwD;AAExD,6BAA6B;AAC7B,MAAM,sBAAsB,GAAG,CAAC,YAAY,CAAC,CAAA;AAC7C,MAAM,WAAW,GAAG,YAAY,CAAA;AAEhC,8BAA8B;AAC9B,wEAAwE;AAExE,KAAK,UAAU,kBAAkB,CAC/B,GAAkB,EAClB,GAAmB,EACnB,IAAwB;IAExB,wBAAwB;IACxB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,iCAAc,EAAC;YAClC,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,yCAAyC;YAClD,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC,CAAA;QACH,OAAM;IACR,CAAC;IAED,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAQ,CAAA;IAC1E,IAAI,CAAC,sBAAsB,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,iCAAc,EAAC;YAClC,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,iBAAiB;YAC1B,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC,CAAA;QACH,OAAM;IACR,CAAC;IAED,qDAAqD;IACrD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAuB,CAAA;IACnE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,iCAAc,EAAC;YAClC,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,iDAAiD;YAC1D,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC,CAAA;QACH,OAAM;IACR,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,iCAAc,EAAC;YAClC,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,4BAA4B,UAAU,yBAAyB,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC3G,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC,CAAA;QACH,OAAM;IACR,CAAC;IAED,4DAA4D;IAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAW,CAAA;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAC3C,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,iCAAc,EAAC;gBAClC,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,2BAA2B;gBACpC,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC,CAAA;YACH,OAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAA;AACR,CAAC;AAED,oCAAoC;AACpC,kEAAkE;AAElE,KAAK,UAAU,YAAY,CACzB,GAAkB,EAClB,GAAmB,EACnB,IAAwB;IAExB,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAuB,CAAA;IACvE,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;IAC7D,IAAI,EAAE,CAAA;AACR,CAAC;AAED,8BAA8B;AAC9B,qFAAqF;AAErF,KAAK,UAAU,kBAAkB,CAC/B,GAAkB,EAClB,GAAmB,EACnB,IAAwB;IAExB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAuB,CAAA;IAE/D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,iCAAc,EAAC;YAClC,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC,CAAA;QACH,OAAM;IACR,CAAC;IAED,oDAAoD;IACpD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAuB,CAAA;IACjE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,iCAAc,EAAC;YAClC,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC,CAAA;QACH,OAAM;IACR,CAAC;IAED,uBAAuB;IACvB,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;IAEhC,6CAA6C;IAC7C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAC/C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAQ,CAAA;QAC1E,IAAI,CAAC,sBAAsB,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAA,iCAAc,EAAC;gBAClC,UAAU,EAAE,WAAW;gBACvB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,sBAAsB;aAChC,CAAC,CAAC,CAAA;YACH,OAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,EAAE,CAAA;AACR,CAAC;AAED,wCAAwC;AACxC,uEAAuE;AACvE,4DAA4D;AAC5D,2EAA2E;AAE3E,KAAK,UAAU,sBAAsB,CACnC,GAAkB,EAClB,IAAoB,EACpB,IAAwB;IAExB,IAAI,CAAC;QACH,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAQ,CAAA;QAC1E,sBAAsB,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,IAAI,EAAE,CAAA;AACR,CAAC;AAED,qCAAqC;AACrC,2EAA2E;AAC3E,wEAAwE;AACxE,oEAAoE;AACpE,uDAAuD;AAEvD,KAAK,UAAU,mBAAmB,CAAC,GAAkB,EAAE,GAAmB;IACxE,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAQ,CAAA;IAC1E,MAAM,eAAe,GAAG,sBAAsB,CAAC,wBAAwB,EAAE,CAAA;IACzE,MAAM,UAAU,GAAG,sBAAsB,CAAC,aAAa,EAAE,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,uBAAuB,EAAE,CAAA;IAChE,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAA;IAEtD,GAAG,CAAC,IAAI,CAAC;QACP,GAAG,EAAE;YACH,OAAO,EAAE,UAAU;YACnB,QAAQ,EAAE;gBACR,kBAAkB,EAAE,CAAC;wBACnB,OAAO,EAAE,UAAU;wBACnB,SAAS,EAAE,MAAM;wBACjB,QAAQ,EAAE,GAAG,OAAO,MAAM;qBAC3B,CAAC;aACH;YACD,YAAY,EAAE;gBACZ,iCAAiC,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;gBAC5D,iCAAiC,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;gBAC5D,2BAA2B,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;gBACtD,uBAAuB,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;gBAClD,wBAAwB,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;aACpD;YACD,gBAAgB,EAAE,QAAQ;SAC3B;KACF,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAkB,EAAE,GAAmB;IACxE,MAAM,sBAAsB,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAQ,CAAA;IAC1E,MAAM,eAAe,GAAG,sBAAsB,CAAC,wBAAwB,EAAE,CAAA;IACzE,MAAM,UAAU,GAAG,sBAAsB,CAAC,aAAa,EAAE,CAAA;IACzD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,uBAAuB,EAAE,CAAA;IAChE,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAA;IAEtD,GAAG,CAAC,IAAI,CAAC;QACP,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,UAAU;YACnB,kBAAkB,EAAE,CAAC,UAAU,CAAC;SACjC;QACD,YAAY,EAAE,GAAG,OAAO,MAAM;QAC9B,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,YAAY,EAAE;YACZ,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;YAChC,OAAO,EAAE,EAAE,QAAQ,EAAE;YACrB,oBAAoB,EAAE,CAAC,KAAK,CAAC;YAC7B,iBAAiB,EAAE,CAAC,IAAI,CAAC;SAC1B;KACF,CAAC,CAAA;AACJ,CAAC;AAED,kBAAe,IAAA,wBAAiB,EAAC;IAC/B,MAAM,EAAE;QACN,oCAAoC;QACpC,6EAA6E;QAC7E,sEAAsE;QACtE;YACE,OAAO,EAAE,kBAAkB;YAC3B,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;SAC3D;QACD;YACE,OAAO,EAAE,uBAAuB;YAChC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;SAC3D;QAED,qDAAqD;QACrD;YACE,OAAO,EAAE,yBAAyB;YAClC,WAAW,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,YAAY,CAAC;SACxE;QACD;YACE,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,YAAY,CAAC;SACxE;QACD;YACE,OAAO,EAAE,oBAAoB;YAC7B,WAAW,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,YAAY,CAAC;SACxE;QAED,kDAAkD;QAClD;YACE,OAAO,EAAE,yBAAyB;YAClC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,yCAA2B,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;SAChF;QAED,6BAA6B;QAC7B;YACE,OAAO,EAAE,wBAAwB;YACjC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,mDAA8B,CAAC,CAAC;SACxE;QACD;YACE,OAAO,EAAE,4BAA4B;YACrC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,mDAA8B,CAAC,CAAC;SACxE;QACD;YACE,OAAO,EAAE,qCAAqC;YAC9C,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,qDAAgC,CAAC,CAAC;SAC1E;QAED,wCAAwC;QACxC;YACE,OAAO,EAAE,gBAAgB;YACzB,WAAW,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;SAC1D;QACD;YACE,OAAO,EAAE,yBAAyB;YAClC,WAAW,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;SAC1D;QACD;YACE,OAAO,EAAE,aAAa;YACtB,WAAW,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;SAC1D;QACD;YACE,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;SAC1D;QAED,iDAAiD;QACjD;YACE,OAAO,EAAE,yBAAyB;YAClC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,yCAA2B,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;SAChF;QACD;YACE,OAAO,EAAE,yBAAyB;YAClC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,CAAC,IAAA,yCAA2B,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;SAChF;QACD;YACE,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,yCAA2B,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;SAChF;QACD;YACE,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,CAAC,IAAA,yCAA2B,EAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;SAChF;QAED,6BAA6B;QAC7B;YACE,OAAO,EAAE,wBAAwB;YACjC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,mDAA8B,CAAC,CAAC;SACxE;QACD;YACE,OAAO,EAAE,4BAA4B;YACrC,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,mDAA8B,CAAC,CAAC;SACxE;QACD;YACE,OAAO,EAAE,qCAAqC;YAC9C,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,qDAAgC,CAAC,CAAC;SAC1E;QACD;YACE,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,wCAAmB,CAAC,CAAC;SAC7D;QACD;YACE,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,wCAAmB,CAAC,CAAC;SAC7D;QACD;YACE,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,wCAAmB,CAAC,CAAC;SAC7D;QACD;YACE,OAAO,EAAE,qBAAqB;YAC9B,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,IAAA,+BAAwB,EAAC,wCAAmB,CAAC,CAAC;SAC7D;KACF;CACF,CAAC,CAAA"}

package/.medusa/server/src/api/ucp/carts/[id]/cancel/route.d.ts

@@ -0,0 +1,3 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function POST(req: MedusaRequest, res: MedusaResponse): Promise<void>;
+//# sourceMappingURL=route.d.ts.map

package/.medusa/server/src/api/ucp/carts/[id]/cancel/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../../src/api/ucp/carts/[id]/cancel/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAM7E,wBAAsB,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,iBA8BjE"}

package/.medusa/server/src/api/ucp/carts/[id]/cancel/route.js

@@ -0,0 +1,39 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const cancel_checkout_session_1 = __importDefault(require("../../../../../workflows/cancel-checkout-session"));
+const error_formatters_1 = require("../../../../../lib/error-formatters");
+const UCP_VERSION = "2026-01-11";
+async function POST(req, res) {
+    const { id } = req.params;
+    try {
+        await (0, cancel_checkout_session_1.default)(req.scope).run({
+            input: { cart_id: id },
+        });
+        res.json({
+            ucp: { version: UCP_VERSION, status: "success" },
+            id,
+            status: "canceled",
+            currency: null,
+            line_items: [],
+            totals: [],
+            messages: [
+                { type: "info", code: "cart_canceled", content: "Cart has been cancelled.", severity: "info" },
+            ],
+        });
+    }
+    catch (error) {
+        const statusCode = error.message?.includes("not found") ? 404
+            : error.message?.includes("completed") ? 409
+                : 500;
+        res.status(statusCode).json((0, error_formatters_1.formatUcpError)({
+            ucpVersion: UCP_VERSION,
+            code: statusCode === 404 ? "not_found" : "internal_error",
+            content: error.message,
+        }));
+    }
+}
+//# sourceMappingURL=route.js.map

package/.medusa/server/src/api/ucp/carts/[id]/cancel/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../../../../../../../src/api/ucp/carts/[id]/cancel/route.ts"],"names":[],"mappings":";;;;;AAMA,oBA8BC;AAnCD,+GAA4F;AAC5F,0EAAoE;AAEpE,MAAM,WAAW,GAAG,YAAY,CAAA;AAEzB,KAAK,UAAU,IAAI,CAAC,GAAkB,EAAE,GAAmB;IAChE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAA;IAEzB,IAAI,CAAC;QACH,MAAM,IAAA,iCAA6B,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;YACjD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;SACvB,CAAC,CAAA;QAEF,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE;YAChD,EAAE;YACF,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE;gBACR,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,EAAE;aAC/F;SACF,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG;YAC3D,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG;gBAC5C,CAAC,CAAC,GAAG,CAAA;QAEP,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAA,iCAAc,EAAC;YACzC,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB;YACzD,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC,CAAA;IACL,CAAC;AACH,CAAC"}

package/.medusa/server/src/api/ucp/carts/[id]/route.d.ts

@@ -0,0 +1,4 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function GET(req: MedusaRequest, res: MedusaResponse): Promise<void>;
+export declare function PUT(req: MedusaRequest, res: MedusaResponse): Promise<void>;
+//# sourceMappingURL=route.d.ts.map

package/.medusa/server/src/api/ucp/carts/[id]/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/api/ucp/carts/[id]/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAS7E,wBAAsB,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,iBAgChE;AAED,wBAAsB,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,iBA0DhE"}