@hszrdm/core 1.7.0 → 1.8.0

package/.medusa/server/src/api/hooks/arukereso/marketplace/order/route.js

@@ -0,0 +1,211 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const node_crypto_1 = require("node:crypto");
+const utils_1 = require("@medusajs/framework/utils");
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+const integration_settings_1 = require("../../../../../modules/integration-settings");
+const RESPONSE_VERSION = "v1.0.0";
+async function POST(req, res) {
+    const store = req.scope.resolve(integration_settings_1.INTEGRATION_SETTINGS_MODULE);
+    const resolved = await (0, integration_settings_1.resolvedIntegrationEnvironment)(store, "arukereso");
+    const env = resolved.env;
+    const enabled = resolved.enabled && env.ARUKERESO_MARKETPLACE_ENABLED === "true";
+    const expectedApiKey = String(env.ARUKERESO_MARKETPLACE_API_KEY || "").trim();
+    const regionId = String(env.ARUKERESO_MARKETPLACE_REGION_ID || "").trim();
+    const salesChannelId = String(env.ARUKERESO_MARKETPLACE_SALES_CHANNEL_ID || "").trim();
+    if (!enabled) {
+        return errorResponse(res, 503, ["Marketplace API is disabled."]);
+    }
+    if (!expectedApiKey || !regionId || !salesChannelId) {
+        return errorResponse(res, 503, ["Marketplace API is not fully configured."]);
+    }
+    const suppliedApiKey = String(req.headers["api-key"] || "").trim();
+    if (!safeEqual(suppliedApiKey, expectedApiKey)) {
+        return errorResponse(res, 401, ["Invalid Api-Key."]);
+    }
+    const payload = (req.body || {});
+    const order = payload.data;
+    const errors = validatePayload(payload);
+    if (!order || errors.length) {
+        return errorResponse(res, 400, errors.length ? errors : ["Order data is required."]);
+    }
+    const orderCode = String(order.code || "").trim();
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const existing = await query.graph({
+        entity: "order",
+        fields: ["id", "display_id", "metadata"],
+        filters: {
+            metadata: {
+                arukereso_marketplace_order_code: orderCode,
+            },
+        },
+    });
+    if (existing.data[0]) {
+        return successResponse(res, orderCode, existing.data[0]);
+    }
+    const marketplaceProducts = Array.isArray(order.products) ? order.products : [];
+    const variantIds = marketplaceProducts.map((item) => String(item.code || "").trim());
+    const { data: variants } = await query.graph({
+        entity: "variant",
+        fields: ["id", "title", "product.id", "product.title"],
+        filters: { id: variantIds },
+    });
+    const variantMap = new Map(variants.map((variant) => [String(variant.id), variant]));
+    const missingVariantIds = variantIds.filter((id) => !variantMap.has(id));
+    if (missingVariantIds.length) {
+        return errorResponse(res, 400, [
+            `Unknown product code(s): ${missingVariantIds.join(", ")}`,
+        ]);
+    }
+    const currencyCode = String(marketplaceProducts[0]?.grossUnitPriceCurrency ||
+        order.grossDeliveryPriceCurrency ||
+        "HUF").toLowerCase();
+    const items = marketplaceProducts.map((item) => {
+        const variantId = String(item.code || "").trim();
+        const variant = variantMap.get(variantId);
+        return {
+            title: String(item.name || variant.product?.title || variant.title || variantId),
+            quantity: numberValue(item.quantity),
+            unit_price: numberValue(item.grossUnitPrice),
+            variant_id: variantId,
+            product_id: String(variant.product?.id || ""),
+            metadata: {
+                arukereso_commission: numberValue(item.commission),
+                arukereso_commission_currency: item.commissionCurrency || null,
+                arukereso_vat: item.vat || null,
+                arukereso_merchant_id: item.merchantId || null,
+            },
+        };
+    });
+    const shippingAmount = numberValue(order.grossDeliveryPrice) + numberValue(order.grossCODFee);
+    const shippingMethods = [
+        {
+            name: String(order.courierName || "Árukereső Marketplace szállítás"),
+            amount: shippingAmount,
+            data: {
+                source: "arukereso_marketplace",
+                delivery_mode: order.deliveryMode ?? null,
+                store_id: order.storeId ?? null,
+                home_delivery_id: order.homeDeliveryId ?? null,
+                pickup_point_id: order.pickUpPointId ?? null,
+                cod_fee: numberValue(order.grossCODFee),
+            },
+        },
+    ];
+    const orderInput = {
+        region_id: regionId,
+        sales_channel_id: salesChannelId,
+        currency_code: currencyCode,
+        email: String(order.email || "").trim().toLowerCase(),
+        shipping_address: mapAddress(order.deliveryAddress, order),
+        billing_address: mapAddress(order.billingAddress, order),
+        items,
+        shipping_methods: shippingMethods,
+        metadata: {
+            source: "arukereso_marketplace",
+            arukereso_marketplace_order_code: orderCode,
+            arukereso_order_date: order.orderDate || null,
+            arukereso_status: order.status ?? null,
+            arukereso_delivery_mode: order.deliveryMode ?? null,
+            arukereso_payment_mode: order.paymentMode ?? null,
+            arukereso_online_payment_mode: order.onlinePaymentMode || null,
+            arukereso_payment_status: order.paymentStatus || null,
+            arukereso_payment_id: order.paymentId || null,
+            arukereso_comment: order.comment || null,
+            arukereso_request_version: payload.version || null,
+            arukereso_request_timestamp: payload.timestamp ?? null,
+        },
+    };
+    try {
+        const result = await (0, core_flows_1.createOrderWorkflow)(req.scope).run({
+            input: orderInput,
+        });
+        return successResponse(res, orderCode, result.result);
+    }
+    catch (error) {
+        return errorResponse(res, 400, [
+            error instanceof Error ? error.message : "Order import failed.",
+        ]);
+    }
+}
+function validatePayload(payload) {
+    const errors = [];
+    const order = payload.data;
+    if (!order)
+        return ["Order data is required."];
+    if (!String(order.code || "").trim())
+        errors.push("Code is required.");
+    if (!String(order.email || "").includes("@"))
+        errors.push("Valid email is required.");
+    if (!String(order.countryCode || "").trim())
+        errors.push("CountryCode is required.");
+    if (!Array.isArray(order.products) || !order.products.length) {
+        errors.push("Products are required.");
+    }
+    else {
+        order.products.forEach((item, index) => {
+            if (!String(item.code || "").trim())
+                errors.push(`Products[${index}].code is required.`);
+            if (numberValue(item.quantity) <= 0)
+                errors.push(`Products[${index}].quantity is invalid.`);
+            if (numberValue(item.grossUnitPrice) < 0)
+                errors.push(`Products[${index}].grossUnitPrice is invalid.`);
+        });
+    }
+    if (payload.timestamp != null && !Number.isFinite(Number(payload.timestamp))) {
+        errors.push("Timestamp is invalid.");
+    }
+    return errors;
+}
+function mapAddress(address, order) {
+    const value = address || {};
+    const address1 = String(value.addressLine1 || value.street || "").trim();
+    return {
+        first_name: String(value.firstName || order.firstName || "").trim(),
+        last_name: String(value.lastName || order.lastName || "").trim(),
+        company: String(value.name || "").trim() || undefined,
+        address_1: address1,
+        address_2: String(value.addressLine2 || "").trim() || undefined,
+        city: String(value.city || "").trim(),
+        postal_code: String(value.postalCode || "").trim(),
+        country_code: String(value.countryCode || order.countryCode || "HU").toLowerCase(),
+        phone: String(order.phone || "").trim() || undefined,
+        metadata: value.taxNumber
+            ? { tax_number: String(value.taxNumber).trim() }
+            : undefined,
+    };
+}
+function numberValue(value) {
+    const result = Number(value ?? 0);
+    return Number.isFinite(result) ? result : 0;
+}
+function safeEqual(actual, expected) {
+    const actualBuffer = Buffer.from(actual);
+    const expectedBuffer = Buffer.from(expected);
+    return (actualBuffer.length === expectedBuffer.length &&
+        (0, node_crypto_1.timingSafeEqual)(actualBuffer, expectedBuffer));
+}
+function successResponse(res, orderCode, order) {
+    const internalOrderId = String(order.display_id || order.id || "");
+    return res.status(201).json({
+        message: "Success",
+        code: 0,
+        version: RESPONSE_VERSION,
+        data: {
+            orderCode,
+            internalOrderId,
+            variableSymbol: internalOrderId,
+        },
+    });
+}
+function errorResponse(res, status, errors) {
+    return res.status(status).json({
+        message: "Error",
+        code: 0,
+        version: RESPONSE_VERSION,
+        data: [],
+        errors,
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/hooks/simplepay/ipn/route.js

@@ -10,14 +10,61 @@ const state_1 = require("../../../../modules/integration-operation/state");
 function headerValue(value) {
     return Array.isArray(value) ? value[0] : value;
 }
+function text(value) {
+    return typeof value === "string" || typeof value === "number"
+        ? String(value).trim()
+        : "";
+}
+function numberValue(value) {
+    const number = Number(value && typeof value === "object" && "toString" in value
+        ? value.toString()
+        : value);
+    return Number.isFinite(number) ? number : undefined;
+}
+function normalizedAmount(value, currency) {
+    const number = numberValue(value);
+    if (number === undefined)
+        return undefined;
+    return currency.toUpperCase() === "HUF"
+        ? Math.round(number)
+        : Math.round(number * 100) / 100;
+}
+function consistencyErrors(event, sessionData) {
+    const errors = [];
+    const expectedOrderRef = text(sessionData.orderRef);
+    const expectedTransactionId = numberValue(sessionData.transactionId);
+    const expectedCurrency = text(sessionData.currency).toUpperCase();
+    const receivedCurrency = text(event.currency).toUpperCase();
+    const expectedTotal = normalizedAmount(sessionData.total, expectedCurrency || receivedCurrency);
+    const receivedTotal = normalizedAmount(event.total, receivedCurrency || expectedCurrency);
+    if (!event.orderRef || !expectedOrderRef || event.orderRef !== expectedOrderRef) {
+        errors.push("orderRef");
+    }
+    if (typeof event.transactionId !== "number" ||
+        expectedTransactionId === undefined ||
+        event.transactionId !== expectedTransactionId) {
+        errors.push("transactionId");
+    }
+    if (!receivedCurrency || !expectedCurrency || receivedCurrency !== expectedCurrency) {
+        errors.push("currency");
+    }
+    if (receivedTotal === undefined ||
+        expectedTotal === undefined ||
+        receivedTotal !== expectedTotal) {
+        errors.push("total");
+    }
+    return errors;
+}
 async function POST(req, res) {
     if (process.env.SIMPLEPAY_ENABLED !== "true") {
         res.status(404).send("Not found");
         return;
     }
-    const raw = req.rawBody
-        ? req.rawBody.toString("utf8")
-        : JSON.stringify(req.body ?? {});
+    if (!req.rawBody?.length) {
+        res.status(400).send("SimplePay IPN raw body is required");
+        return;
+    }
+    const raw = req.rawBody.toString("utf8");
     const signature = headerValue(req.headers["signature"]);
     const client = new client_1.SimplePayClient((0, config_1.simplePayOptionsFromEnv)());
     let event;
@@ -30,29 +77,78 @@ async function POST(req, res) {
         res.status(400).send("Invalid SimplePay IPN");
         return;
     }
-    const fingerprint = typeof event.transactionId === "number" && event.status
+    if (!event.orderRef ||
+        typeof event.transactionId !== "number" ||
+        !event.currency ||
+        typeof event.total !== "number") {
+        res.status(400).send("Incomplete SimplePay IPN");
+        return;
+    }
+    const paymentSessionId = event.orderRef.split("-r-")[0];
+    const fingerprint = event.status
         ? `${event.transactionId}:${event.status}`
         : (0, node_crypto_1.createHash)("sha256").update(raw).digest("hex");
-    const entityId = typeof event.transactionId === "number"
-        ? String(event.transactionId)
-        : event.orderRef || fingerprint;
+    const entityId = String(event.transactionId);
     let durable;
     try {
         const store = req.scope.resolve(integration_operation_1.INTEGRATION_OPERATION_MODULE);
+        const paymentService = req.scope.resolve(utils_1.Modules.PAYMENT);
+        const paymentSession = await paymentService.retrievePaymentSession(paymentSessionId);
+        const sessionData = paymentSession.data ?? {};
+        const mismatches = consistencyErrors(event, sessionData);
+        if (mismatches.length) {
+            const integrity = await (0, state_1.acquireOperation)(store, {
+                provider: "simplepay",
+                operation_type: "ipn.integrity_mismatch",
+                entity_type: "payment_transaction",
+                entity_id: entityId,
+                external_id: entityId,
+                idempotency_key: `simplepay:ipn-integrity:${fingerprint}`,
+                reference_data: {
+                    replay_safe: true,
+                    paymentSessionId,
+                    transactionId: event.transactionId,
+                    orderRef: event.orderRef,
+                    status: event.status ?? null,
+                    currency: event.currency,
+                    total: event.total,
+                    expected_orderRef: sessionData.orderRef ?? null,
+                    expected_transactionId: sessionData.transactionId ?? null,
+                    expected_currency: sessionData.currency ?? null,
+                    expected_total: sessionData.total ?? null,
+                    mismatches,
+                    fingerprint,
+                },
+            });
+            if (integrity.acquired) {
+                await store.updateIntegrationOperations({
+                    id: integrity.operation.id,
+                    status: "needs_reconciliation",
+                    next_attempt_at: new Date(Date.now() + 5 * 60_000),
+                });
+            }
+            // The callback is authentic, but it does not belong to the current
+            // payment-session state. Acknowledge it to stop provider retries while
+            // deliberately not dispatching it into Medusa payment processing.
+            res.setHeader("Signature", confirmation.signature);
+            res.status(200).type("application/json").send(confirmation.body);
+            return;
+        }
         durable = await (0, state_1.acquireOperation)(store, {
             provider: "simplepay",
             operation_type: "ipn.dispatch",
             entity_type: "payment_transaction",
             entity_id: entityId,
-            external_id: typeof event.transactionId === "number"
-                ? String(event.transactionId)
-                : undefined,
+            external_id: entityId,
             idempotency_key: `simplepay:ipn-dispatch:${fingerprint}`,
             reference_data: {
                 replay_safe: true,
-                transactionId: event.transactionId ?? null,
-                orderRef: event.orderRef ?? null,
+                paymentSessionId,
+                transactionId: event.transactionId,
+                orderRef: event.orderRef,
                 status: event.status ?? null,
+                currency: event.currency,
+                total: event.total,
                 fingerprint,
             },
         });
@@ -80,20 +176,16 @@ async function POST(req, res) {
                 },
             },
         }, { delay: 500, attempts: 3 });
-        if (event.status === "FINISHED" &&
-            event.orderRef &&
-            typeof event.transactionId === "number") {
+        if (event.status === "FINISHED") {
             await eventBus.emit({
                 name: "simplepay.payment_finished",
                 data: {
-                    paymentSessionId: event.orderRef.split("-r-")[0],
+                    paymentSessionId,
                     transactionId: event.transactionId,
                 },
             }, { delay: 750, attempts: 5 });
         }
-        await (0, state_1.operationSucceeded)(store, durable.operation, typeof event.transactionId === "number"
-            ? String(event.transactionId)
-            : undefined, {
+        await (0, state_1.operationSucceeded)(store, durable.operation, entityId, {
             ...(durable.operation.reference_data ?? {}),
             replay_safe: true,
             queued_at: new Date().toISOString(),
@@ -105,9 +197,7 @@ async function POST(req, res) {
         if (durable?.acquired) {
             try {
                 const store = req.scope.resolve(integration_operation_1.INTEGRATION_OPERATION_MODULE);
-                await (0, state_1.operationFailed)(store, durable.operation, error, false, typeof event.transactionId === "number"
-                    ? String(event.transactionId)
-                    : undefined, {
+                await (0, state_1.operationFailed)(store, durable.operation, error, false, entityId, {
                     ...(durable.operation.reference_data ?? {}),
                     replay_safe: true,
                 });
@@ -121,4 +211,4 @@ async function POST(req, res) {
         res.status(503).send("SimplePay IPN processing failed");
     }
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2hvb2tzL3NpbXBsZXBheS9pcG4vcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFtQkEsb0JBdUpDO0FBMUtELDZDQUF3QztBQUV4QyxxREFBeUU7QUFDekUsbUVBQXdFO0FBQ3hFLG1FQUFnRjtBQUNoRixxRkFHa0Q7QUFDbEQsMkVBSXdEO0FBRXhELFNBQVMsV0FBVyxDQUFDLEtBQW9DO0lBQ3ZELE9BQU8sS0FBSyxDQUFDLE9BQU8sQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUE7QUFDaEQsQ0FBQztBQUVNLEtBQUssVUFBVSxJQUFJLENBQUMsR0FBa0IsRUFBRSxHQUFtQjtJQUNoRSxJQUFJLE9BQU8sQ0FBQyxHQUFHLENBQUMsaUJBQWlCLEtBQUssTUFBTSxFQUFFLENBQUM7UUFDN0MsR0FBRyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQyxJQUFJLENBQUMsV0FBVyxDQUFDLENBQUE7UUFDakMsT0FBTTtJQUNSLENBQUM7SUFFRCxNQUFNLEdBQUcsR0FBRyxHQUFHLENBQUMsT0FBTztRQUNyQixDQUFDLENBQUMsR0FBRyxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDO1FBQzlCLENBQUMsQ0FBQyxJQUFJLENBQUMsU0FBUyxDQUFDLEdBQUcsQ0FBQyxJQUFJLElBQUksRUFBRSxDQUFDLENBQUE7SUFDbEMsTUFBTSxTQUFTLEdBQUcsV0FBVyxDQUMzQixHQUFHLENBQUMsT0FBTyxDQUFDLFdBQVcsQ0FBa0MsQ0FDMUQsQ0FBQTtJQUNELE1BQU0sTUFBTSxHQUFHLElBQUksd0JBQWUsQ0FBQyxJQUFBLGdDQUF1QixHQUFFLENBQUMsQ0FBQTtJQUU3RCxJQUFJLEtBQStDLENBQUE7SUFDbkQsSUFBSSxZQUFrRSxDQUFBO0lBRXRFLElBQUksQ0FBQztRQUNILEtBQUssR0FBRyxNQUFNLENBQUMsU0FBUyxDQUFDLEdBQUcsRUFBRSxTQUFTLENBQUMsQ0FBQTtRQUN4QyxZQUFZLEdBQUcsTUFBTSxDQUFDLHFCQUFxQixDQUN6QyxLQUEyQyxDQUM1QyxDQUFBO0lBQ0gsQ0FBQztJQUFDLE1BQU0sQ0FBQztRQUNQLEdBQUcsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDLHVCQUF1QixDQUFDLENBQUE7UUFDN0MsT0FBTTtJQUNSLENBQUM7SUFFRCxNQUFNLFdBQVcsR0FDZixPQUFPLEtBQUssQ0FBQyxhQUFhLEtBQUssUUFBUSxJQUFJLEtBQUssQ0FBQyxNQUFNO1FBQ3JELENBQUMsQ0FBQyxHQUFHLEtBQUssQ0FBQyxhQUFhLElBQUksS0FBSyxDQUFDLE1BQU0sRUFBRTtRQUMxQyxDQUFDLENBQUMsSUFBQSx3QkFBVSxFQUFDLFFBQVEsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLENBQUE7SUFDcEQsTUFBTSxRQUFRLEdBQ1osT0FBTyxLQUFLLENBQUMsYUFBYSxLQUFLLFFBQVE7UUFDckMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsYUFBYSxDQUFDO1FBQzdCLENBQUMsQ0FBQyxLQUFLLENBQUMsUUFBUSxJQUFJLFdBQVcsQ0FBQTtJQUVuQyxJQUFJLE9BQWlFLENBQUE7SUFFckUsSUFBSSxDQUFDO1FBQ0gsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQzdCLG9EQUE0QixDQUNFLENBQUE7UUFDaEMsT0FBTyxHQUFHLE1BQU0sSUFBQSx3QkFBZ0IsRUFBQyxLQUFLLEVBQUU7WUFDdEMsUUFBUSxFQUFFLFdBQVc7WUFDckIsY0FBYyxFQUFFLGNBQWM7WUFDOUIsV0FBVyxFQUFFLHFCQUFxQjtZQUNsQyxTQUFTLEVBQUUsUUFBUTtZQUNuQixXQUFXLEVBQ1QsT0FBTyxLQUFLLENBQUMsYUFBYSxLQUFLLFFBQVE7Z0JBQ3JDLENBQUMsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLGFBQWEsQ0FBQztnQkFDN0IsQ0FBQyxDQUFDLFNBQVM7WUFDZixlQUFlLEVBQUUsMEJBQTBCLFdBQVcsRUFBRTtZQUN4RCxjQUFjLEVBQUU7Z0JBQ2QsV0FBVyxFQUFFLElBQUk7Z0JBQ2pCLGFBQWEsRUFBRSxLQUFLLENBQUMsYUFBYSxJQUFJLElBQUk7Z0JBQzFDLFFBQVEsRUFBRSxLQUFLLENBQUMsUUFBUSxJQUFJLElBQUk7Z0JBQ2hDLE1BQU0sRUFBRSxLQUFLLENBQUMsTUFBTSxJQUFJLElBQUk7Z0JBQzVCLFdBQVc7YUFDWjtTQUNGLENBQUMsQ0FBQTtRQUVGLElBQUksQ0FBQyxPQUFPLENBQUMsUUFBUSxFQUFFLENBQUM7WUFDdEIsSUFBSSxPQUFPLENBQUMsU0FBUyxDQUFDLE1BQU0sS0FBSyxXQUFXLEVBQUUsQ0FBQztnQkFDN0MsR0FBRyxDQUFDLFNBQVMsQ0FBQyxXQUFXLEVBQUUsWUFBWSxDQUFDLFNBQVMsQ0FBQyxDQUFBO2dCQUNsRCxHQUFHLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLElBQUksQ0FBQyxrQkFBa0IsQ0FBQyxDQUFDLElBQUksQ0FBQyxZQUFZLENBQUMsSUFBSSxDQUFDLENBQUE7Z0JBQ2hFLE9BQU07WUFDUixDQUFDO1lBRUQseUVBQXlFO1lBQ3pFLDBFQUEwRTtZQUMxRSw4REFBOEQ7WUFDOUQsR0FBRyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQyxJQUFJLENBQUMsMENBQTBDLENBQUMsQ0FBQTtZQUNoRSxPQUFNO1FBQ1IsQ0FBQztRQUVELE1BQU0sUUFBUSxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLGVBQU8sQ0FBQyxTQUFTLENBQUMsQ0FBQTtRQUNyRCxNQUFNLFFBQVEsQ0FBQyxJQUFJLENBQ2pCO1lBQ0UsSUFBSSxFQUFFLDRCQUFvQixDQUFDLGVBQWU7WUFDMUMsSUFBSSxFQUFFO2dCQUNKLFFBQVEsRUFBRSxxQkFBcUI7Z0JBQy9CLE9BQU8sRUFBRTtvQkFDUCxJQUFJLEVBQUUsR0FBRyxDQUFDLElBQUk7b0JBQ2QsT0FBTyxFQUFFLEdBQUcsQ0FBQyxPQUFPO29CQUNwQixPQUFPLEVBQUUsR0FBRyxDQUFDLE9BQU87aUJBQ3JCO2FBQ0Y7U0FDRixFQUNELEVBQUUsS0FBSyxFQUFFLEdBQUcsRUFBRSxRQUFRLEVBQUUsQ0FBQyxFQUFFLENBQzVCLENBQUE7UUFFRCxJQUNFLEtBQUssQ0FBQyxNQUFNLEtBQUssVUFBVTtZQUMzQixLQUFLLENBQUMsUUFBUTtZQUNkLE9BQU8sS0FBSyxDQUFDLGFBQWEsS0FBSyxRQUFRLEVBQ3ZDLENBQUM7WUFDRCxNQUFNLFFBQVEsQ0FBQyxJQUFJLENBQ2pCO2dCQUNFLElBQUksRUFBRSw0QkFBNEI7Z0JBQ2xDLElBQUksRUFBRTtvQkFDSixnQkFBZ0IsRUFBRSxLQUFLLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUM7b0JBQ2hELGFBQWEsRUFBRSxLQUFLLENBQUMsYUFBYTtpQkFDbkM7YUFDRixFQUNELEVBQUUsS0FBSyxFQUFFLEdBQUcsRUFBRSxRQUFRLEVBQUUsQ0FBQyxFQUFFLENBQzVCLENBQUE7UUFDSCxDQUFDO1FBRUQsTUFBTSxJQUFBLDBCQUFrQixFQUN0QixLQUFLLEVBQ0wsT0FBTyxDQUFDLFNBQVMsRUFDakIsT0FBTyxLQUFLLENBQUMsYUFBYSxLQUFLLFFBQVE7WUFDckMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsYUFBYSxDQUFDO1lBQzdCLENBQUMsQ0FBQyxTQUFTLEVBQ2I7WUFDRSxHQUFHLENBQUMsT0FBTyxDQUFDLFNBQVMsQ0FBQyxjQUFjLElBQUksRUFBRSxDQUFDO1lBQzNDLFdBQVcsRUFBRSxJQUFJO1lBQ2pCLFNBQVMsRUFBRSxJQUFJLElBQUksRUFBRSxDQUFDLFdBQVcsRUFBRTtTQUNwQyxDQUNGLENBQUE7UUFFRCxHQUFHLENBQUMsU0FBUyxDQUFDLFdBQVcsRUFBRSxZQUFZLENBQUMsU0FBUyxDQUFDLENBQUE7UUFDbEQsR0FBRyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsQ0FBQyxJQUFJLENBQUMsa0JBQWtCLENBQUMsQ0FBQyxJQUFJLENBQUMsWUFBWSxDQUFDLElBQUksQ0FBQyxDQUFBO0lBQ2xFLENBQUM7SUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1FBQ2YsSUFBSSxPQUFPLEVBQUUsUUFBUSxFQUFFLENBQUM7WUFDdEIsSUFBSSxDQUFDO2dCQUNILE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUM3QixvREFBNEIsQ0FDRSxDQUFBO2dCQUNoQyxNQUFNLElBQUEsdUJBQWUsRUFDbkIsS0FBSyxFQUNMLE9BQU8sQ0FBQyxTQUFTLEVBQ2pCLEtBQUssRUFDTCxLQUFLLEVBQ0wsT0FBTyxLQUFLLENBQUMsYUFBYSxLQUFLLFFBQVE7b0JBQ3JDLENBQUMsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLGFBQWEsQ0FBQztvQkFDN0IsQ0FBQyxDQUFDLFNBQVMsRUFDYjtvQkFDRSxHQUFHLENBQUMsT0FBTyxDQUFDLFNBQVMsQ0FBQyxjQUFjLElBQUksRUFBRSxDQUFDO29CQUMzQyxXQUFXLEVBQUUsSUFBSTtpQkFDbEIsQ0FDRixDQUFBO1lBQ0gsQ0FBQztZQUFDLE1BQU0sQ0FBQztnQkFDUCxvREFBb0Q7WUFDdEQsQ0FBQztRQUNILENBQUM7UUFFRCwwRUFBMEU7UUFDMUUsOERBQThEO1FBQzlELEdBQUcsQ0FBQyxNQUFNLENBQUMsR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDLGlDQUFpQyxDQUFDLENBQUE7SUFDekQsQ0FBQztBQUNILENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/account/orders/[id]/reorder/route.d.ts

@@ -0,0 +1,2 @@
+import type { AuthenticatedMedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare const POST: (req: AuthenticatedMedusaRequest, res: MedusaResponse) => Promise<void>;

package/.medusa/server/src/api/store/account/orders/[id]/reorder/route.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+function itemTitle(item) {
+    return item.product_title || item.title || item.variant_title || "Korábbi rendelési tétel";
+}
+function errorMessage(error) {
+    return error instanceof Error && error.message
+        ? error.message
+        : "A termék jelenleg nem tehető kosárba.";
+}
+const POST = async (req, res) => {
+    const customerId = req.auth_context?.actor_id;
+    if (!customerId) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNAUTHORIZED, "Customer authentication is required.");
+    }
+    const orderId = req.params.id;
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { data: orders } = await query.graph({
+        entity: "order",
+        fields: [
+            "id",
+            "customer_id",
+            "email",
+            "region_id",
+            "sales_channel_id",
+            "items.id",
+            "items.title",
+            "items.product_title",
+            "items.variant_title",
+            "items.variant_id",
+            "items.quantity",
+        ],
+        filters: { id: orderId },
+    });
+    const order = orders[0];
+    if (!order || order.customer_id !== customerId) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Order not found.");
+    }
+    const { result: createdCart } = await (0, core_flows_1.createCartWorkflow)(req.scope).run({
+        input: {
+            region_id: order.region_id,
+            sales_channel_id: order.sales_channel_id,
+            customer_id: customerId,
+            email: order.email || undefined,
+        },
+    });
+    const skippedItems = [];
+    let addedCount = 0;
+    for (const rawItem of (order.items || [])) {
+        const quantity = Number(rawItem.quantity || 0);
+        const variantId = rawItem.variant_id || null;
+        if (!variantId || !Number.isFinite(quantity) || quantity <= 0) {
+            skippedItems.push({
+                order_item_id: rawItem.id,
+                title: itemTitle(rawItem),
+                variant_id: variantId,
+                quantity: Math.max(0, quantity || 0),
+                reason: !variantId
+                    ? "A korábbi termékváltozat már nem érhető el."
+                    : "A korábbi tétel mennyisége nem érvényes.",
+            });
+            continue;
+        }
+        try {
+            await (0, core_flows_1.addToCartWorkflow)(req.scope).run({
+                input: {
+                    cart_id: createdCart.id,
+                    items: [
+                        {
+                            variant_id: variantId,
+                            quantity,
+                        },
+                    ],
+                },
+            });
+            addedCount += 1;
+        }
+        catch (error) {
+            skippedItems.push({
+                order_item_id: rawItem.id,
+                title: itemTitle(rawItem),
+                variant_id: variantId,
+                quantity,
+                reason: errorMessage(error),
+            });
+        }
+    }
+    const { data: carts } = await query.graph({
+        entity: "cart",
+        fields: [
+            "id",
+            "customer_id",
+            "currency_code",
+            "region_id",
+            "sales_channel_id",
+            "subtotal",
+            "item_total",
+            "total",
+            "items.*",
+        ],
+        filters: { id: createdCart.id },
+    });
+    res.status(200).json({
+        cart: carts[0] || createdCart,
+        added_count: addedCount,
+        skipped_items: skippedItems,
+    });
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/store/arukereso/backlink/route.d.ts

@@ -0,0 +1,2 @@
+import type { MedusaRequest, MedusaResponse } from "@medusajs/framework/http";
+export declare function GET(req: MedusaRequest, res: MedusaResponse): Promise<MedusaResponse>;