@legenki/print2medusa 0.1.0 → 0.2.0

package/.medusa/server/src/admin/index.js

@@ -3,10 +3,65 @@ const jsxRuntime = require("react/jsx-runtime");
 const adminSdk = require("@medusajs/admin-sdk");
 const ui = require("@medusajs/ui");
 const react = require("react");
+const ATTENTION_STATES = /* @__PURE__ */ new Set(["failed", "canceled", "onhold"]);
+const PrintfulOrderWidget = ({ data }) => {
+  const metadata = data.metadata ?? {};
+  const printfulOrderId = metadata.printful_order_id;
+  if (!printfulOrderId) {
+    return null;
+  }
+  const status = metadata.printful_status;
+  const statusUpdatedAt = metadata.printful_status_updated_at;
+  const shipments = metadata.printful_shipments ?? [];
+  const isAttention = status ? ATTENTION_STATES.has(status) : false;
+  return /* @__PURE__ */ jsxRuntime.jsxs(ui.Container, { className: "divide-y p-0", children: [
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-between px-6 py-4", children: [
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Heading, { level: "h2", children: "Printful" }),
+      status ? /* @__PURE__ */ jsxRuntime.jsx(ui.Badge, { color: isAttention ? "red" : "green", children: status }) : null
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "px-6 py-4 flex flex-col gap-2", children: [
+      /* @__PURE__ */ jsxRuntime.jsxs(ui.Text, { size: "small", children: [
+        "Printful order: ",
+        /* @__PURE__ */ jsxRuntime.jsx("strong", { children: printfulOrderId })
+      ] }),
+      shipments.length > 0 ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex flex-col gap-3 pt-1", children: shipments.map((shipment) => /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col gap-0.5", children: [
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center gap-2", children: [
+          /* @__PURE__ */ jsxRuntime.jsxs(ui.Text, { size: "small", children: [
+            shipment.carrier ?? "Unknown carrier",
+            shipment.service ? ` · ${shipment.service}` : ""
+          ] }),
+          shipment.reshipment ? /* @__PURE__ */ jsxRuntime.jsx(ui.Badge, { color: "purple", size: "2xsmall", children: "Reshipment" }) : null
+        ] }),
+        shipment.reshipment ? /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: "Replacement parcel — no fulfillment is recorded for it." }) : null,
+        /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: shipment.ship_date ? `Shipped ${new Date(shipment.ship_date).toLocaleDateString()}` : "Ship date pending" }),
+        shipment.tracking_number ? shipment.tracking_url ? /* @__PURE__ */ jsxRuntime.jsx(
+          "a",
+          {
+            href: shipment.tracking_url,
+            target: "_blank",
+            rel: "noreferrer noopener",
+            className: "text-ui-fg-interactive text-sm hover:underline",
+            children: shipment.tracking_number
+          }
+        ) : /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", children: shipment.tracking_number }) : null
+      ] }, shipment.id)) }) : /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: "No shipments yet." }),
+      statusUpdatedAt ? /* @__PURE__ */ jsxRuntime.jsxs(ui.Text, { size: "small", className: "text-ui-fg-subtle pt-1", children: [
+        "Last synced: ",
+        new Date(statusUpdatedAt).toLocaleString()
+      ] }) : null
+    ] })
+  ] });
+};
+adminSdk.defineWidgetConfig({
+  zone: "order.details.side.before"
+});
 const PrintfulSyncWidget = () => {
   const [status, setStatus] = react.useState(null);
   const [loading, setLoading] = react.useState(false);
   const [syncing, setSyncing] = react.useState(false);
+  const [webhook, setWebhook] = react.useState(null);
+  const [webhookLoading, setWebhookLoading] = react.useState(false);
+  const [registering, setRegistering] = react.useState(false);
   const loadStatus = async () => {
     setLoading(true);
     try {
@@ -24,9 +79,52 @@ const PrintfulSyncWidget = () => {
       setLoading(false);
     }
   };
+  const loadWebhook = async () => {
+    setWebhookLoading(true);
+    try {
+      const res = await fetch("/admin/printful/webhook", {
+        credentials: "include"
+      });
+      if (!res.ok) {
+        throw new Error(`Status ${res.status}`);
+      }
+      const data = await res.json();
+      setWebhook(data);
+    } catch (e) {
+      console.error(e);
+    } finally {
+      setWebhookLoading(false);
+    }
+  };
   react.useEffect(() => {
     void loadStatus();
+    void loadWebhook();
   }, []);
+  const onRegisterWebhook = async () => {
+    setRegistering(true);
+    try {
+      const res = await fetch("/admin/printful/webhook", {
+        method: "POST",
+        credentials: "include",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ base_url: window.location.origin })
+      });
+      if (!res.ok) {
+        const text = await res.text();
+        throw new Error(text || `Registration failed (${res.status})`);
+      }
+      ui.toast.success("Printful webhook registered", {
+        description: "The new configuration replaced any previous Printful webhook."
+      });
+      await loadWebhook();
+    } catch (e) {
+      ui.toast.error("Failed to register webhook", {
+        description: e instanceof Error ? e.message : String(e)
+      });
+    } finally {
+      setRegistering(false);
+    }
+  };
   const onSync = async () => {
     var _a, _b, _c;
     setSyncing(true);
@@ -93,7 +191,41 @@ const PrintfulSyncWidget = () => {
         latest.products_failed ?? 0
       ] }),
       latest.error_message ? /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-error", children: latest.error_message.slice(0, 300) }) : null
-    ] }) : /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: "No sync runs yet." }) })
+    ] }) : /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: "No sync runs yet." }) }),
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "px-6 py-4 flex flex-col gap-2", children: [
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex items-center justify-between", children: [
+        /* @__PURE__ */ jsxRuntime.jsx(ui.Heading, { level: "h3", children: "Webhook" }),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          ui.Button,
+          {
+            size: "small",
+            variant: "secondary",
+            onClick: () => void onRegisterWebhook(),
+            isLoading: registering,
+            disabled: webhookLoading || registering || !(webhook == null ? void 0 : webhook.secret_set),
+            children: "Register webhook"
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: "Printful allows only one webhook configuration per store. Registering replaces any existing Printful webhook URL and event list — including one set up by another integration or a previous install of this plugin." }),
+      webhookLoading && !webhook ? /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", children: "Loading webhook configuration…" }) : webhook ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(ui.Text, { size: "small", children: [
+          "Current URL:",
+          " ",
+          /* @__PURE__ */ jsxRuntime.jsx("strong", { children: webhook.current.url ?? "Not configured" })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: [
+          "Current events:",
+          " ",
+          webhook.current.types.length > 0 ? webhook.current.types.join(", ") : "None"
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsxs(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: [
+          "Will register: ",
+          webhook.configured_types.join(", ")
+        ] }),
+        !webhook.secret_set ? /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-error", children: "Set the webhookSecret plugin option before registering a webhook." }) : null
+      ] }) : /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: "Unable to load webhook configuration." })
+    ] })
   ] });
 };
 adminSdk.defineWidgetConfig({
@@ -101,6 +233,11 @@ adminSdk.defineWidgetConfig({
 });
 const i18nTranslations0 = {};
 const widgetModule = { widgets: [
+  {
+    Component: PrintfulOrderWidget,
+    zone: ["order.details.side.before"],
+    widgetId: "Widget-537b"
+  },
   {
     Component: PrintfulSyncWidget,
     zone: ["product.list.before"],

package/.medusa/server/src/admin/index.mjs

@@ -1,11 +1,66 @@
 import { jsxs, jsx, Fragment } from "react/jsx-runtime";
 import { defineWidgetConfig } from "@medusajs/admin-sdk";
-import { Container, Heading, Text, Button, toast } from "@medusajs/ui";
+import { Container, Heading, Badge, Text, Button, toast } from "@medusajs/ui";
 import { useState, useEffect } from "react";
+const ATTENTION_STATES = /* @__PURE__ */ new Set(["failed", "canceled", "onhold"]);
+const PrintfulOrderWidget = ({ data }) => {
+  const metadata = data.metadata ?? {};
+  const printfulOrderId = metadata.printful_order_id;
+  if (!printfulOrderId) {
+    return null;
+  }
+  const status = metadata.printful_status;
+  const statusUpdatedAt = metadata.printful_status_updated_at;
+  const shipments = metadata.printful_shipments ?? [];
+  const isAttention = status ? ATTENTION_STATES.has(status) : false;
+  return /* @__PURE__ */ jsxs(Container, { className: "divide-y p-0", children: [
+    /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between px-6 py-4", children: [
+      /* @__PURE__ */ jsx(Heading, { level: "h2", children: "Printful" }),
+      status ? /* @__PURE__ */ jsx(Badge, { color: isAttention ? "red" : "green", children: status }) : null
+    ] }),
+    /* @__PURE__ */ jsxs("div", { className: "px-6 py-4 flex flex-col gap-2", children: [
+      /* @__PURE__ */ jsxs(Text, { size: "small", children: [
+        "Printful order: ",
+        /* @__PURE__ */ jsx("strong", { children: printfulOrderId })
+      ] }),
+      shipments.length > 0 ? /* @__PURE__ */ jsx("div", { className: "flex flex-col gap-3 pt-1", children: shipments.map((shipment) => /* @__PURE__ */ jsxs("div", { className: "flex flex-col gap-0.5", children: [
+        /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
+          /* @__PURE__ */ jsxs(Text, { size: "small", children: [
+            shipment.carrier ?? "Unknown carrier",
+            shipment.service ? ` · ${shipment.service}` : ""
+          ] }),
+          shipment.reshipment ? /* @__PURE__ */ jsx(Badge, { color: "purple", size: "2xsmall", children: "Reshipment" }) : null
+        ] }),
+        shipment.reshipment ? /* @__PURE__ */ jsx(Text, { size: "small", className: "text-ui-fg-subtle", children: "Replacement parcel — no fulfillment is recorded for it." }) : null,
+        /* @__PURE__ */ jsx(Text, { size: "small", className: "text-ui-fg-subtle", children: shipment.ship_date ? `Shipped ${new Date(shipment.ship_date).toLocaleDateString()}` : "Ship date pending" }),
+        shipment.tracking_number ? shipment.tracking_url ? /* @__PURE__ */ jsx(
+          "a",
+          {
+            href: shipment.tracking_url,
+            target: "_blank",
+            rel: "noreferrer noopener",
+            className: "text-ui-fg-interactive text-sm hover:underline",
+            children: shipment.tracking_number
+          }
+        ) : /* @__PURE__ */ jsx(Text, { size: "small", children: shipment.tracking_number }) : null
+      ] }, shipment.id)) }) : /* @__PURE__ */ jsx(Text, { size: "small", className: "text-ui-fg-subtle", children: "No shipments yet." }),
+      statusUpdatedAt ? /* @__PURE__ */ jsxs(Text, { size: "small", className: "text-ui-fg-subtle pt-1", children: [
+        "Last synced: ",
+        new Date(statusUpdatedAt).toLocaleString()
+      ] }) : null
+    ] })
+  ] });
+};
+defineWidgetConfig({
+  zone: "order.details.side.before"
+});
 const PrintfulSyncWidget = () => {
   const [status, setStatus] = useState(null);
   const [loading, setLoading] = useState(false);
   const [syncing, setSyncing] = useState(false);
+  const [webhook, setWebhook] = useState(null);
+  const [webhookLoading, setWebhookLoading] = useState(false);
+  const [registering, setRegistering] = useState(false);
   const loadStatus = async () => {
     setLoading(true);
     try {
@@ -23,9 +78,52 @@ const PrintfulSyncWidget = () => {
       setLoading(false);
     }
   };
+  const loadWebhook = async () => {
+    setWebhookLoading(true);
+    try {
+      const res = await fetch("/admin/printful/webhook", {
+        credentials: "include"
+      });
+      if (!res.ok) {
+        throw new Error(`Status ${res.status}`);
+      }
+      const data = await res.json();
+      setWebhook(data);
+    } catch (e) {
+      console.error(e);
+    } finally {
+      setWebhookLoading(false);
+    }
+  };
   useEffect(() => {
     void loadStatus();
+    void loadWebhook();
   }, []);
+  const onRegisterWebhook = async () => {
+    setRegistering(true);
+    try {
+      const res = await fetch("/admin/printful/webhook", {
+        method: "POST",
+        credentials: "include",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ base_url: window.location.origin })
+      });
+      if (!res.ok) {
+        const text = await res.text();
+        throw new Error(text || `Registration failed (${res.status})`);
+      }
+      toast.success("Printful webhook registered", {
+        description: "The new configuration replaced any previous Printful webhook."
+      });
+      await loadWebhook();
+    } catch (e) {
+      toast.error("Failed to register webhook", {
+        description: e instanceof Error ? e.message : String(e)
+      });
+    } finally {
+      setRegistering(false);
+    }
+  };
   const onSync = async () => {
     var _a, _b, _c;
     setSyncing(true);
@@ -92,7 +190,41 @@ const PrintfulSyncWidget = () => {
         latest.products_failed ?? 0
       ] }),
       latest.error_message ? /* @__PURE__ */ jsx(Text, { size: "small", className: "text-ui-fg-error", children: latest.error_message.slice(0, 300) }) : null
-    ] }) : /* @__PURE__ */ jsx(Text, { size: "small", className: "text-ui-fg-subtle", children: "No sync runs yet." }) })
+    ] }) : /* @__PURE__ */ jsx(Text, { size: "small", className: "text-ui-fg-subtle", children: "No sync runs yet." }) }),
+    /* @__PURE__ */ jsxs("div", { className: "px-6 py-4 flex flex-col gap-2", children: [
+      /* @__PURE__ */ jsxs("div", { className: "flex items-center justify-between", children: [
+        /* @__PURE__ */ jsx(Heading, { level: "h3", children: "Webhook" }),
+        /* @__PURE__ */ jsx(
+          Button,
+          {
+            size: "small",
+            variant: "secondary",
+            onClick: () => void onRegisterWebhook(),
+            isLoading: registering,
+            disabled: webhookLoading || registering || !(webhook == null ? void 0 : webhook.secret_set),
+            children: "Register webhook"
+          }
+        )
+      ] }),
+      /* @__PURE__ */ jsx(Text, { size: "small", className: "text-ui-fg-subtle", children: "Printful allows only one webhook configuration per store. Registering replaces any existing Printful webhook URL and event list — including one set up by another integration or a previous install of this plugin." }),
+      webhookLoading && !webhook ? /* @__PURE__ */ jsx(Text, { size: "small", children: "Loading webhook configuration…" }) : webhook ? /* @__PURE__ */ jsxs(Fragment, { children: [
+        /* @__PURE__ */ jsxs(Text, { size: "small", children: [
+          "Current URL:",
+          " ",
+          /* @__PURE__ */ jsx("strong", { children: webhook.current.url ?? "Not configured" })
+        ] }),
+        /* @__PURE__ */ jsxs(Text, { size: "small", className: "text-ui-fg-subtle", children: [
+          "Current events:",
+          " ",
+          webhook.current.types.length > 0 ? webhook.current.types.join(", ") : "None"
+        ] }),
+        /* @__PURE__ */ jsxs(Text, { size: "small", className: "text-ui-fg-subtle", children: [
+          "Will register: ",
+          webhook.configured_types.join(", ")
+        ] }),
+        !webhook.secret_set ? /* @__PURE__ */ jsx(Text, { size: "small", className: "text-ui-fg-error", children: "Set the webhookSecret plugin option before registering a webhook." }) : null
+      ] }) : /* @__PURE__ */ jsx(Text, { size: "small", className: "text-ui-fg-subtle", children: "Unable to load webhook configuration." })
+    ] })
   ] });
 };
 defineWidgetConfig({
@@ -100,6 +232,11 @@ defineWidgetConfig({
 });
 const i18nTranslations0 = {};
 const widgetModule = { widgets: [
+  {
+    Component: PrintfulOrderWidget,
+    zone: ["order.details.side.before"],
+    widgetId: "Widget-537b"
+  },
   {
     Component: PrintfulSyncWidget,
     zone: ["product.list.before"],

package/.medusa/server/src/api/admin/printful/webhook/route.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = GET;
+exports.POST = POST;
+const printful_1 = require("../../../../modules/printful");
+const webhook_events_1 = require("../../../../utils/webhook-events");
+/**
+ * Printful returns the webhook URL we registered, which embeds our secret
+ * token as its last path segment (see POST below). The GET here is
+ * admin-authenticated, so returning the URL at all is defensible — the whole
+ * point of this endpoint is to show the current config before an admin
+ * overwrites it. But the secret is a bearer credential (anyone who has it can
+ * forge webhook deliveries prior to the timing-safe check even being
+ * relevant, since it's compared as-is), and this endpoint is polled on every
+ * widget mount, so there is no reason to put it on the wire repeatedly. Mask
+ * everything after the last path segment so the UI can still show host+path
+ * shape and confirm "yes, a Printful webhook is registered here" without
+ * re-exposing the live token on every page load.
+ */
+function maskSecretInUrl(url) {
+    if (!url) {
+        return url;
+    }
+    try {
+        const parsed = new URL(url);
+        const segments = parsed.pathname.split("/").filter(Boolean);
+        if (segments.length > 0) {
+            segments[segments.length - 1] = "••••••••";
+            parsed.pathname = `/${segments.join("/")}`;
+        }
+        return parsed.toString();
+    }
+    catch {
+        return url;
+    }
+}
+async function GET(req, res) {
+    const printful = req.scope.resolve(printful_1.PRINTFUL_MODULE);
+    const client = await printful.getClient();
+    const options = await printful.getOptions();
+    const current = await client.getWebhookConfig();
+    res.status(200).json({
+        current: {
+            ...current,
+            url: maskSecretInUrl(current.url),
+        },
+        configured_types: webhook_events_1.PRINTFUL_WEBHOOK_TYPES,
+        secret_set: Boolean(options.webhookSecret),
+    });
+}
+async function POST(req, res) {
+    const printful = req.scope.resolve(printful_1.PRINTFUL_MODULE);
+    const client = await printful.getClient();
+    const options = await printful.getOptions();
+    if (!options.webhookSecret) {
+        res.status(400).json({
+            message: "Set the webhookSecret plugin option before registering a webhook",
+        });
+        return;
+    }
+    const body = (req.body ?? {});
+    if (!body.base_url) {
+        res.status(400).json({ message: "base_url is required" });
+        return;
+    }
+    const url = `${body.base_url.replace(/\/$/, "")}/hooks/printful/${options.webhookSecret}`;
+    // Printful keeps one config per store, so this replaces the whole allowlist.
+    const updated = await client.setWebhookConfig(url, [
+        ...webhook_events_1.PRINTFUL_WEBHOOK_TYPES,
+    ]);
+    res.status(200).json({
+        current: {
+            ...updated,
+            url: maskSecretInUrl(updated.url),
+        },
+    });
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/hooks/printful/[token]/route.js

@@ -0,0 +1,80 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = POST;
+const utils_1 = require("@medusajs/framework/utils");
+const printful_1 = require("../../../../modules/printful");
+const webhook_events_1 = require("../../../../utils/webhook-events");
+const apply_order_status_1 = __importDefault(require("../../../../workflows/apply-order-status"));
+/**
+ * Public Printful webhook endpoint.
+ *
+ * The payload is a trigger, not a source of truth: we persist it, answer 200,
+ * and let the workflow re-read GET /orders/{id} for the real state. Never log
+ * the request URL or token.
+ */
+async function POST(req, res) {
+    const printful = req.scope.resolve(printful_1.PRINTFUL_MODULE);
+    const logger = req.scope.resolve(utils_1.ContainerRegistrationKeys.LOGGER);
+    const options = await printful.getOptions();
+    const provided = req.params.token;
+    if (!(0, webhook_events_1.verifyWebhookToken)(options.webhookSecret, provided)) {
+        // 404, not 401: do not confirm that this path exists.
+        res.status(404).json({ message: "Not found" });
+        return;
+    }
+    const payload = (req.body ?? {});
+    const type = payload.type ?? "unknown";
+    const printfulOrderId = (0, webhook_events_1.extractOrderId)(payload);
+    if (!printfulOrderId) {
+        res.status(200).json({ received: true, ignored: "no_order_id" });
+        return;
+    }
+    let eventId;
+    try {
+        eventId = (0, webhook_events_1.deriveEventId)(payload);
+    }
+    catch {
+        // Malformed or hostile payload — refuse it without a 5xx, which would make
+        // Printful retry something that can never succeed.
+        res.status(400).json({ message: "Malformed payload" });
+        return;
+    }
+    const handled = webhook_events_1.PRINTFUL_WEBHOOK_TYPES.includes(type);
+    let event;
+    try {
+        event = await printful.recordWebhookEvent({
+            event_id: eventId,
+            type,
+            printful_order_id: printfulOrderId,
+            printful_shipment_id: (0, webhook_events_1.extractShipmentId)(payload),
+            payload: payload,
+            status: handled ? "received" : "ignored",
+        });
+    }
+    catch (err) {
+        // Only storage failures reach here. 500 is correct: we want Printful to retry.
+        logger.error(`Printful: failed to store webhook event ${eventId}: ${err instanceof Error ? err.message : String(err)}`);
+        res.status(500).json({ message: "Failed to store event" });
+        return;
+    }
+    // Redelivery of an event we already hold: absorb it.
+    if (!event) {
+        res.status(200).json({ received: true, event_id: eventId, duplicate: true });
+        return;
+    }
+    res.status(200).json({ received: true, event_id: eventId });
+    if (handled) {
+        // Fire-and-forget: the durable row plus the retry job (once it lands) are
+        // the intended safety net, so losing this in-process attempt costs at most
+        // one retry interval.
+        void (0, apply_order_status_1.default)(req.scope)
+            .run({ input: { event_row_id: event.id } })
+            .catch((err) => {
+            logger.error(`Printful: apply failed for event ${eventId}: ${err instanceof Error ? err.message : String(err)}`);
+        });
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/middlewares.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const http_1 = require("@medusajs/framework/http");
+const webhook_path_1 = require("../utils/webhook-path");
+exports.default = (0, http_1.defineMiddlewares)({
+    routes: [
+        {
+            matcher: "/hooks/printful/*",
+            /**
+             * Sized deliberately, for two reasons.
+             *
+             * Correctness: Express defaults to 100KB, and a real `package_shipped`
+             * body for a ~25-line-item order already exceeds that (~132KB; ~262KB at
+             * 50 items). Under the default, Printful deliveries for large orders are
+             * rejected outright.
+             *
+             * Secrecy: that rejection is a 413 raised by the GLOBAL body-parser,
+             * which Medusa registers at `app.use("/", ...)` before any route-scoped
+             * middleware (@medusajs/framework/dist/http/router.js). Such an error
+             * goes straight to the error handler without ever running the redaction
+             * below, so the live secret in the path would be logged in cleartext.
+             * Raising the limit keeps legitimate traffic from ever reaching that
+             * path. This config IS honoured despite the global registration: the
+             * parser resolves its config per request via a RoutesFinder lookup on
+             * `req.path` (dist/http/middlewares/bodyparser.js).
+             */
+            bodyParser: { sizeLimit: webhook_path_1.WEBHOOK_BODY_SIZE_LIMIT },
+            middlewares: [
+                (req, _res, next) => {
+                    // Medusa's error handler logs `Error ${statusCode} at ${req.path}`
+                    // (@medusajs/framework/dist/http/middlewares/error-handler.js), and
+                    // our path carries the webhook secret as a segment. Redact it before
+                    // any downstream handler or the error middleware can write it out.
+                    //
+                    // Medusa registers plugin middleware with app.use(matcher, handler),
+                    // so inside THIS function Express has already stripped the matched
+                    // prefix: req.path is "/" and the secret sits in req.baseUrl. The
+                    // full path is only reassembled downstream, which is why we redact
+                    // req.originalUrl and pin req.path to the redacted full path — the
+                    // value the error handler ends up reading.
+                    //
+                    // Verified: this does not affect req.params.token (param extraction
+                    // happens in the route layer from the untouched URL), so the route's
+                    // auth check is unaffected.
+                    const redacted = (0, webhook_path_1.redactWebhookPath)(req.originalUrl);
+                    Object.defineProperty(req, "path", {
+                        value: redacted,
+                        configurable: true,
+                    });
+                    Object.defineProperty(req, "originalUrl", {
+                        value: redacted,
+                        configurable: true,
+                    });
+                    next();
+                },
+            ],
+        },
+    ],
+});
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/jobs/retry-webhook-events.js

@@ -0,0 +1,65 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.config = void 0;
+exports.default = retryPrintfulWebhookEvents;
+const utils_1 = require("@medusajs/framework/utils");
+const printful_1 = require("../modules/printful");
+const apply_order_status_1 = __importDefault(require("../workflows/apply-order-status"));
+/**
+ * Drains webhook events that were stored but not applied — most often because
+ * the order link had not been written yet when the webhook landed, or because
+ * the process died between storing the event and applying it.
+ *
+ * This is the safety net the webhook route's fire-and-forget dispatch relies on:
+ * the route's in-process attempt is only an optimization to avoid waiting a
+ * retry interval in the common case.
+ */
+/** Events drained per sweep. */
+const BATCH_SIZE = 50;
+/**
+ * Consecutive failures before the sweep gives up for this run. A database or
+ * Printful outage fails every event identically, and grinding through the whole
+ * batch each tick buys nothing — the remaining events keep their backoff and
+ * are picked up by the next sweep.
+ */
+const CONSECUTIVE_FAILURE_LIMIT = 5;
+async function retryPrintfulWebhookEvents(container) {
+    const printful = container.resolve(printful_1.PRINTFUL_MODULE);
+    const logger = container.resolve(utils_1.ContainerRegistrationKeys.LOGGER);
+    const due = await printful.listDueWebhookEvents(BATCH_SIZE);
+    if (!due.length) {
+        return;
+    }
+    logger.info(`Printful: retrying ${due.length} webhook event(s)`);
+    if (due.length === BATCH_SIZE) {
+        // A full batch means the backlog may exceed what one sweep can drain.
+        logger.info(`Printful: retry batch is full (${BATCH_SIZE}); backlog may be growing`);
+    }
+    let consecutiveFailures = 0;
+    for (const event of due) {
+        try {
+            await (0, apply_order_status_1.default)(container).run({
+                input: { event_row_id: event.id },
+            });
+            consecutiveFailures = 0;
+        }
+        catch (err) {
+            // The workflow records its own failure state; a throw here means the
+            // sweep should continue rather than abandon the remaining events.
+            consecutiveFailures += 1;
+            logger.error(`Printful: retry failed for event ${event.event_id}: ${err instanceof Error ? err.message : String(err)}`);
+            if (consecutiveFailures >= CONSECUTIVE_FAILURE_LIMIT) {
+                logger.error(`Printful: aborting retry sweep after ${consecutiveFailures} consecutive failures`);
+                return;
+            }
+        }
+    }
+}
+exports.config = {
+    name: "printful-retry-webhook-events",
+    schedule: "*/5 * * * *",
+};
+//# sourceMappingURL=data:application/json;base64,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