@open-mercato/carrier-inpost 0.10.1-develop.8072.1.592356afda → 0.10.1-develop.8098.1.f4decc8a57

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:carrier-inpost] found 25 entry points
+[build:carrier-inpost] found 26 entry points
 [build:carrier-inpost] built successfully

package/dist/modules/carrier_inpost/__integration__/TC-INPOST-005.spec.js

@@ -0,0 +1,117 @@
+import { createHmac, randomUUID } from "node:crypto";
+import { expect, test } from "@playwright/test";
+import { apiRequest, getAuthToken } from "@open-mercato/core/helpers/integration/api";
+import {
+  createOrganizationInDb,
+  deleteIntegrationCredentialsInDb,
+  deleteOrganizationInDb,
+  withClient
+} from "@open-mercato/core/helpers/integration/dbFixtures";
+import { getTokenScope } from "@open-mercato/core/helpers/integration/generalFixtures";
+import { drainIntegrationQueue } from "@open-mercato/core/helpers/integration/queue";
+const WEBHOOK_PATH = "/api/shipping-carriers/webhook/inpost";
+const stamp = `${Date.now()}_${randomUUID().slice(0, 8)}`;
+const webhookSecret = `tcinpost005_${stamp}`;
+async function seedShipment(scope, carrierShipmentId, status) {
+  const id = randomUUID();
+  await withClient(async (client) => {
+    await client.query(
+      `insert into carrier_shipments
+        (id, order_id, provider_key, carrier_shipment_id, tracking_number, unified_status,
+         organization_id, tenant_id, created_at, updated_at)
+       values ($1, $2, 'inpost', $3, $3, $4, $5, $6, now(), now())`,
+      [id, randomUUID(), carrierShipmentId, status, scope.organizationId, scope.tenantId]
+    );
+  });
+  return id;
+}
+async function readShipment(id) {
+  return withClient(async (client) => {
+    const result = await client.query(
+      "select unified_status, carrier_status from carrier_shipments where id = $1",
+      [id]
+    );
+    return result.rows[0] ?? null;
+  });
+}
+async function isWebhookProcessed(idempotencyKey) {
+  return withClient(async (client) => {
+    const result = await client.query(
+      "select 1 from carrier_webhook_events where provider_key = 'inpost' and idempotency_key = $1",
+      [idempotencyKey]
+    );
+    return (result.rowCount ?? 0) > 0;
+  });
+}
+async function deliverStatus(request, carrierShipmentId, status) {
+  const eventTs = (/* @__PURE__ */ new Date()).toISOString();
+  const body = JSON.stringify({
+    event: "shipment_status_changed",
+    event_ts: eventTs,
+    organization_id: 1,
+    payload: { shipment_id: carrierShipmentId, status, tracking_number: carrierShipmentId }
+  });
+  const idempotencyKey = [carrierShipmentId, "shipment_status_changed", status, eventTs].join(":");
+  const response = await request.post(WEBHOOK_PATH, {
+    data: body,
+    headers: {
+      "content-type": "application/json",
+      "x-inpost-signature": createHmac("sha256", webhookSecret).update(body).digest("hex")
+    }
+  });
+  expect(response.status(), `webhook ${status} should be accepted`).toBe(202);
+  await drainIntegrationQueue("shipping-carriers-webhook");
+  await expect.poll(() => isWebhookProcessed(idempotencyKey), {
+    message: `the ${status} webhook should be processed by the worker`,
+    timeout: 3e4
+  }).toBe(true);
+}
+test.describe('TC-INPOST-005: InPost "claimed" is a failed delivery, not a cancellation', () => {
+  test("keeps a complained parcel trackable until InPost returns it to the sender", async ({ request }) => {
+    test.setTimeout(12e4);
+    const adminScope = getTokenScope(await getAuthToken(request, "admin"));
+    const tenantId = adminScope.tenantId;
+    let organizationId = null;
+    const shipmentIds = [];
+    try {
+      organizationId = await createOrganizationInDb({ name: `TC-INPOST-005 ${stamp}`, tenantId });
+      const scope = { organizationId, tenantId };
+      const superadminToken = await getAuthToken(request, "superadmin");
+      const saved = await apiRequest(request, "PUT", "/api/integrations/carrier_inpost/credentials", {
+        token: superadminToken,
+        headers: {
+          Cookie: `om_selected_tenant=${encodeURIComponent(tenantId)}; om_selected_org=${encodeURIComponent(organizationId)}`
+        },
+        data: { credentials: { apiToken: `tcinpost005_token_${stamp}`, organizationId: "1", webhookSecret } }
+      });
+      expect(saved.status(), await saved.text()).toBe(200);
+      const awaitingPickup = `tcinpost005a${stamp}`;
+      const awaitingPickupId = await seedShipment(scope, awaitingPickup, "out_for_delivery");
+      shipmentIds.push(awaitingPickupId);
+      const pickupExpired = `tcinpost005b${stamp}`;
+      const pickupExpiredId = await seedShipment(scope, pickupExpired, "failed_delivery");
+      shipmentIds.push(pickupExpiredId);
+      await deliverStatus(request, awaitingPickup, "claimed");
+      await expect.poll(async () => readShipment(awaitingPickupId), { timeout: 1e4 }).toEqual({ unified_status: "failed_delivery", carrier_status: "claimed" });
+      await deliverStatus(request, pickupExpired, "claimed");
+      expect(await readShipment(pickupExpiredId)).toEqual({ unified_status: "failed_delivery", carrier_status: null });
+      await deliverStatus(request, pickupExpired, "returned_to_sender");
+      await expect.poll(async () => (await readShipment(pickupExpiredId))?.unified_status, {
+        message: "the return after a complaint must still be applied",
+        timeout: 1e4
+      }).toBe("returned");
+    } finally {
+      await withClient(async (client) => {
+        if (organizationId) {
+          await client.query("delete from carrier_webhook_events where organization_id = $1", [organizationId]);
+        }
+        if (shipmentIds.length > 0) {
+          await client.query("delete from carrier_shipments where id = any($1::uuid[])", [shipmentIds]);
+        }
+      }).catch(() => void 0);
+      await deleteIntegrationCredentialsInDb(organizationId).catch(() => void 0);
+      await deleteOrganizationInDb(organizationId).catch(() => void 0);
+    }
+  });
+});
+//# sourceMappingURL=TC-INPOST-005.spec.js.map

package/dist/modules/carrier_inpost/__integration__/TC-INPOST-005.spec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/carrier_inpost/__integration__/TC-INPOST-005.spec.ts"],
+  "sourcesContent": ["import { createHmac, randomUUID } from 'node:crypto'\nimport { expect, test, type APIRequestContext } from '@playwright/test'\nimport { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api'\nimport {\n  createOrganizationInDb,\n  deleteIntegrationCredentialsInDb,\n  deleteOrganizationInDb,\n  withClient,\n} from '@open-mercato/core/helpers/integration/dbFixtures'\nimport { getTokenScope } from '@open-mercato/core/helpers/integration/generalFixtures'\nimport { drainIntegrationQueue } from '@open-mercato/core/helpers/integration/queue'\n\n/**\n * TC-INPOST-005: An InPost parcel complaint (\"claimed\") does not cancel the shipment\n *\n * InPost reports `claimed` when the recipient files a complaint at the parcel machine. That is a\n * failed delivery, not a cancelled label: the shipment must stay non-terminal so the carrier's\n * later outcome (here `returned_to_sender`) is still applied.\n *\n * Shipments are seeded with SQL in a throwaway organization (creating a real InPost shipment needs\n * an InPost account). Signed webhooks are POSTed to the real `/api/shipping-carriers/webhook/inpost`\n * route; verification is local HMAC with the organization's saved webhook secret.\n *\n * ENVIRONMENT: API + raw `pg` against `DATABASE_URL`; run under a coherent app+DB stack\n * (`yarn test:integration` / `yarn test:integration:ephemeral`).\n */\n\nconst WEBHOOK_PATH = '/api/shipping-carriers/webhook/inpost'\nconst stamp = `${Date.now()}_${randomUUID().slice(0, 8)}`\nconst webhookSecret = `tcinpost005_${stamp}`\n\ntype Scope = { organizationId: string; tenantId: string }\ntype ShipmentRow = { unified_status: string; carrier_status: string | null }\n\nasync function seedShipment(scope: Scope, carrierShipmentId: string, status: string): Promise<string> {\n  const id = randomUUID()\n  await withClient(async (client) => {\n    await client.query(\n      `insert into carrier_shipments\n        (id, order_id, provider_key, carrier_shipment_id, tracking_number, unified_status,\n         organization_id, tenant_id, created_at, updated_at)\n       values ($1, $2, 'inpost', $3, $3, $4, $5, $6, now(), now())`,\n      [id, randomUUID(), carrierShipmentId, status, scope.organizationId, scope.tenantId],\n    )\n  })\n  return id\n}\n\nasync function readShipment(id: string): Promise<ShipmentRow | null> {\n  return withClient(async (client) => {\n    const result = await client.query<ShipmentRow>(\n      'select unified_status, carrier_status from carrier_shipments where id = $1',\n      [id],\n    )\n    return result.rows[0] ?? null\n  })\n}\n\nasync function isWebhookProcessed(idempotencyKey: string): Promise<boolean> {\n  return withClient(async (client) => {\n    const result = await client.query(\n      \"select 1 from carrier_webhook_events where provider_key = 'inpost' and idempotency_key = $1\",\n      [idempotencyKey],\n    )\n    return (result.rowCount ?? 0) > 0\n  })\n}\n\nasync function deliverStatus(\n  request: APIRequestContext,\n  carrierShipmentId: string,\n  status: string,\n): Promise<void> {\n  const eventTs = new Date().toISOString()\n  const body = JSON.stringify({\n    event: 'shipment_status_changed',\n    event_ts: eventTs,\n    organization_id: 1,\n    payload: { shipment_id: carrierShipmentId, status, tracking_number: carrierShipmentId },\n  })\n  const idempotencyKey = [carrierShipmentId, 'shipment_status_changed', status, eventTs].join(':')\n  const response = await request.post(WEBHOOK_PATH, {\n    data: body,\n    headers: {\n      'content-type': 'application/json',\n      'x-inpost-signature': createHmac('sha256', webhookSecret).update(body).digest('hex'),\n    },\n  })\n  expect(response.status(), `webhook ${status} should be accepted`).toBe(202)\n  await drainIntegrationQueue('shipping-carriers-webhook')\n  await expect\n    .poll(() => isWebhookProcessed(idempotencyKey), {\n      message: `the ${status} webhook should be processed by the worker`,\n      timeout: 30_000,\n    })\n    .toBe(true)\n}\n\ntest.describe('TC-INPOST-005: InPost \"claimed\" is a failed delivery, not a cancellation', () => {\n  test('keeps a complained parcel trackable until InPost returns it to the sender', async ({ request }) => {\n    test.setTimeout(120_000)\n    const adminScope = getTokenScope(await getAuthToken(request, 'admin'))\n    const tenantId = adminScope.tenantId\n    let organizationId: string | null = null\n    const shipmentIds: string[] = []\n\n    try {\n      organizationId = await createOrganizationInDb({ name: `TC-INPOST-005 ${stamp}`, tenantId })\n      const scope: Scope = { organizationId, tenantId }\n      const superadminToken = await getAuthToken(request, 'superadmin')\n      const saved = await apiRequest(request, 'PUT', '/api/integrations/carrier_inpost/credentials', {\n        token: superadminToken,\n        headers: {\n          Cookie: `om_selected_tenant=${encodeURIComponent(tenantId)}; om_selected_org=${encodeURIComponent(organizationId)}`,\n        },\n        data: { credentials: { apiToken: `tcinpost005_token_${stamp}`, organizationId: '1', webhookSecret } },\n      })\n      expect(saved.status(), await saved.text()).toBe(200)\n\n      const awaitingPickup = `tcinpost005a${stamp}`\n      const awaitingPickupId = await seedShipment(scope, awaitingPickup, 'out_for_delivery')\n      shipmentIds.push(awaitingPickupId)\n      const pickupExpired = `tcinpost005b${stamp}`\n      const pickupExpiredId = await seedShipment(scope, pickupExpired, 'failed_delivery')\n      shipmentIds.push(pickupExpiredId)\n\n      await deliverStatus(request, awaitingPickup, 'claimed')\n      await expect\n        .poll(async () => readShipment(awaitingPickupId), { timeout: 10_000 })\n        .toEqual({ unified_status: 'failed_delivery', carrier_status: 'claimed' })\n\n      await deliverStatus(request, pickupExpired, 'claimed')\n      expect(await readShipment(pickupExpiredId)).toEqual({ unified_status: 'failed_delivery', carrier_status: null })\n\n      await deliverStatus(request, pickupExpired, 'returned_to_sender')\n      await expect\n        .poll(async () => (await readShipment(pickupExpiredId))?.unified_status, {\n          message: 'the return after a complaint must still be applied',\n          timeout: 10_000,\n        })\n        .toBe('returned')\n    } finally {\n      await withClient(async (client) => {\n        if (organizationId) {\n          await client.query('delete from carrier_webhook_events where organization_id = $1', [organizationId])\n        }\n        if (shipmentIds.length > 0) {\n          await client.query('delete from carrier_shipments where id = any($1::uuid[])', [shipmentIds])\n        }\n      }).catch(() => undefined)\n      await deleteIntegrationCredentialsInDb(organizationId).catch(() => undefined)\n      await deleteOrganizationInDb(organizationId).catch(() => undefined)\n    }\n  })\n})\n"],
+  "mappings": "AAAA,SAAS,YAAY,kBAAkB;AACvC,SAAS,QAAQ,YAAoC;AACrD,SAAS,YAAY,oBAAoB;AACzC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AAiBtC,MAAM,eAAe;AACrB,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,IAAI,WAAW,EAAE,MAAM,GAAG,CAAC,CAAC;AACvD,MAAM,gBAAgB,eAAe,KAAK;AAK1C,eAAe,aAAa,OAAc,mBAA2B,QAAiC;AACpG,QAAM,KAAK,WAAW;AACtB,QAAM,WAAW,OAAO,WAAW;AACjC,UAAM,OAAO;AAAA,MACX;AAAA;AAAA;AAAA;AAAA,MAIA,CAAC,IAAI,WAAW,GAAG,mBAAmB,QAAQ,MAAM,gBAAgB,MAAM,QAAQ;AAAA,IACpF;AAAA,EACF,CAAC;AACD,SAAO;AACT;AAEA,eAAe,aAAa,IAAyC;AACnE,SAAO,WAAW,OAAO,WAAW;AAClC,UAAM,SAAS,MAAM,OAAO;AAAA,MAC1B;AAAA,MACA,CAAC,EAAE;AAAA,IACL;AACA,WAAO,OAAO,KAAK,CAAC,KAAK;AAAA,EAC3B,CAAC;AACH;AAEA,eAAe,mBAAmB,gBAA0C;AAC1E,SAAO,WAAW,OAAO,WAAW;AAClC,UAAM,SAAS,MAAM,OAAO;AAAA,MAC1B;AAAA,MACA,CAAC,cAAc;AAAA,IACjB;AACA,YAAQ,OAAO,YAAY,KAAK;AAAA,EAClC,CAAC;AACH;AAEA,eAAe,cACb,SACA,mBACA,QACe;AACf,QAAM,WAAU,oBAAI,KAAK,GAAE,YAAY;AACvC,QAAM,OAAO,KAAK,UAAU;AAAA,IAC1B,OAAO;AAAA,IACP,UAAU;AAAA,IACV,iBAAiB;AAAA,IACjB,SAAS,EAAE,aAAa,mBAAmB,QAAQ,iBAAiB,kBAAkB;AAAA,EACxF,CAAC;AACD,QAAM,iBAAiB,CAAC,mBAAmB,2BAA2B,QAAQ,OAAO,EAAE,KAAK,GAAG;AAC/F,QAAM,WAAW,MAAM,QAAQ,KAAK,cAAc;AAAA,IAChD,MAAM;AAAA,IACN,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,sBAAsB,WAAW,UAAU,aAAa,EAAE,OAAO,IAAI,EAAE,OAAO,KAAK;AAAA,IACrF;AAAA,EACF,CAAC;AACD,SAAO,SAAS,OAAO,GAAG,WAAW,MAAM,qBAAqB,EAAE,KAAK,GAAG;AAC1E,QAAM,sBAAsB,2BAA2B;AACvD,QAAM,OACH,KAAK,MAAM,mBAAmB,cAAc,GAAG;AAAA,IAC9C,SAAS,OAAO,MAAM;AAAA,IACtB,SAAS;AAAA,EACX,CAAC,EACA,KAAK,IAAI;AACd;AAEA,KAAK,SAAS,4EAA4E,MAAM;AAC9F,OAAK,6EAA6E,OAAO,EAAE,QAAQ,MAAM;AACvG,SAAK,WAAW,IAAO;AACvB,UAAM,aAAa,cAAc,MAAM,aAAa,SAAS,OAAO,CAAC;AACrE,UAAM,WAAW,WAAW;AAC5B,QAAI,iBAAgC;AACpC,UAAM,cAAwB,CAAC;AAE/B,QAAI;AACF,uBAAiB,MAAM,uBAAuB,EAAE,MAAM,iBAAiB,KAAK,IAAI,SAAS,CAAC;AAC1F,YAAM,QAAe,EAAE,gBAAgB,SAAS;AAChD,YAAM,kBAAkB,MAAM,aAAa,SAAS,YAAY;AAChE,YAAM,QAAQ,MAAM,WAAW,SAAS,OAAO,gDAAgD;AAAA,QAC7F,OAAO;AAAA,QACP,SAAS;AAAA,UACP,QAAQ,sBAAsB,mBAAmB,QAAQ,CAAC,qBAAqB,mBAAmB,cAAc,CAAC;AAAA,QACnH;AAAA,QACA,MAAM,EAAE,aAAa,EAAE,UAAU,qBAAqB,KAAK,IAAI,gBAAgB,KAAK,cAAc,EAAE;AAAA,MACtG,CAAC;AACD,aAAO,MAAM,OAAO,GAAG,MAAM,MAAM,KAAK,CAAC,EAAE,KAAK,GAAG;AAEnD,YAAM,iBAAiB,eAAe,KAAK;AAC3C,YAAM,mBAAmB,MAAM,aAAa,OAAO,gBAAgB,kBAAkB;AACrF,kBAAY,KAAK,gBAAgB;AACjC,YAAM,gBAAgB,eAAe,KAAK;AAC1C,YAAM,kBAAkB,MAAM,aAAa,OAAO,eAAe,iBAAiB;AAClF,kBAAY,KAAK,eAAe;AAEhC,YAAM,cAAc,SAAS,gBAAgB,SAAS;AACtD,YAAM,OACH,KAAK,YAAY,aAAa,gBAAgB,GAAG,EAAE,SAAS,IAAO,CAAC,EACpE,QAAQ,EAAE,gBAAgB,mBAAmB,gBAAgB,UAAU,CAAC;AAE3E,YAAM,cAAc,SAAS,eAAe,SAAS;AACrD,aAAO,MAAM,aAAa,eAAe,CAAC,EAAE,QAAQ,EAAE,gBAAgB,mBAAmB,gBAAgB,KAAK,CAAC;AAE/G,YAAM,cAAc,SAAS,eAAe,oBAAoB;AAChE,YAAM,OACH,KAAK,aAAa,MAAM,aAAa,eAAe,IAAI,gBAAgB;AAAA,QACvE,SAAS;AAAA,QACT,SAAS;AAAA,MACX,CAAC,EACA,KAAK,UAAU;AAAA,IACpB,UAAE;AACA,YAAM,WAAW,OAAO,WAAW;AACjC,YAAI,gBAAgB;AAClB,gBAAM,OAAO,MAAM,iEAAiE,CAAC,cAAc,CAAC;AAAA,QACtG;AACA,YAAI,YAAY,SAAS,GAAG;AAC1B,gBAAM,OAAO,MAAM,4DAA4D,CAAC,WAAW,CAAC;AAAA,QAC9F;AAAA,MACF,CAAC,EAAE,MAAM,MAAM,MAAS;AACxB,YAAM,iCAAiC,cAAc,EAAE,MAAM,MAAM,MAAS;AAC5E,YAAM,uBAAuB,cAAc,EAAE,MAAM,MAAM,MAAS;AAAA,IACpE;AAAA,EACF,CAAC;AACH,CAAC;",
+  "names": []
+}

package/dist/modules/carrier_inpost/lib/status-map.js

@@ -44,11 +44,11 @@ const INPOST_STATUS_MAP = {
   undelivered_wrong_address: "failed_delivery",
   undelivered_cod_cash_receiver: "failed_delivery",
   rejected_by_receiver: "failed_delivery",
+  claimed: "failed_delivery",
   // Returned
   returned_to_sender: "returned",
   // Cancelled
-  canceled: "cancelled",
-  claimed: "cancelled"
+  canceled: "cancelled"
 };
 function mapInpostStatus(inpostStatus) {
   return INPOST_STATUS_MAP[inpostStatus] ?? "unknown";

package/dist/modules/carrier_inpost/lib/status-map.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/carrier_inpost/lib/status-map.ts"],
-  "sourcesContent": ["import type { UnifiedShipmentStatus } from '@open-mercato/core/modules/shipping_carriers/lib/adapter'\n\nconst INPOST_STATUS_MAP: Record<string, UnifiedShipmentStatus> = {\n  // Label / offer preparation\n  created: 'label_created',\n  offers_prepared: 'label_created',\n  offer_selected: 'label_created',\n  confirmed: 'label_created',\n\n  // Picked up from sender\n  dispatched_by_sender: 'picked_up',\n  dispatched_by_sender_to_pok: 'picked_up',\n  collected_from_sender: 'picked_up',\n  taken_by_courier_from_customer_service_point: 'picked_up',\n  taken_by_courier_from_pok: 'picked_up',\n\n  // In transit / sorting\n  taken_by_courier: 'in_transit',\n  adopted_at_source_branch: 'in_transit',\n  sent_from_source_branch: 'in_transit',\n  adopted_at_sorting_center: 'in_transit',\n  oversized: 'in_transit',\n  readdressed: 'in_transit',\n  delay_in_delivery: 'in_transit',\n  unstack_from_customer_service_point: 'in_transit',\n  unstack_from_box_machine: 'in_transit',\n  redirect_to_box: 'in_transit',\n  canceled_redirect_to_box: 'in_transit',\n\n  // Out for delivery / awaiting pickup\n  out_for_delivery: 'out_for_delivery',\n  out_for_delivery_to_address: 'out_for_delivery',\n  ready_to_pickup: 'out_for_delivery',\n  ready_to_pickup_from_pok: 'out_for_delivery',\n  ready_to_pickup_from_branch: 'out_for_delivery',\n  stack_in_box_machine: 'out_for_delivery',\n  stack_in_customer_service_point: 'out_for_delivery',\n  pickup_reminder_sent: 'out_for_delivery',\n  pickup_reminder_sent_address: 'out_for_delivery',\n  courier_avizo_in_customer_service_point: 'out_for_delivery',\n\n  // Delivered\n  delivered: 'delivered',\n\n  // Failed delivery\n  pickup_time_expired: 'failed_delivery',\n  stack_parcel_pickup_time_expired: 'failed_delivery',\n  stack_parcel_in_box_machine_pickup_time_expired: 'failed_delivery',\n  avizo: 'failed_delivery',\n  undelivered: 'failed_delivery',\n  undelivered_wrong_address: 'failed_delivery',\n  undelivered_cod_cash_receiver: 'failed_delivery',\n  rejected_by_receiver: 'failed_delivery',\n\n  // Returned\n  returned_to_sender: 'returned',\n\n  // Cancelled\n  canceled: 'cancelled',\n  claimed: 'cancelled',\n}\n\nexport function mapInpostStatus(inpostStatus: string): UnifiedShipmentStatus {\n  return INPOST_STATUS_MAP[inpostStatus] ?? 'unknown'\n}\n\nexport const SERVICE_CODE_MAP: Record<string, string> = {\n  locker_standard: 'inpost_locker_standard',\n  courier_standard: 'inpost_courier_standard',\n  courier_c2c: 'inpost_courier_c2c',\n}\n\n// Locker services use template-based parcel sizing (small/medium/large).\n// courier_c2c also uses templates (small/medium/large/xlarge) but is NOT\n// included here because isLockerService is used to add locker-specific\n// API fields (e.g. target_point, receiver email) \u2014 courier_c2c does not need those.\nconst LOCKER_SERVICE_CODES = new Set([\n  'locker_standard',\n  'inpost_locker_standard',\n  'inpost_locker_allegro',\n  'inpost_locker_pass_thru',\n  'inpost_locker_standard_smart',\n  'inpost_locker_allegro_smart',\n])\n\nexport function isLockerService(serviceCode: string): boolean {\n  return LOCKER_SERVICE_CODES.has(serviceCode)\n}\n\nexport function mapServiceCodeToInpost(serviceCode: string): string {\n  return SERVICE_CODE_MAP[serviceCode] ?? serviceCode\n}\n"],
-  "mappings": "AAEA,MAAM,oBAA2D;AAAA;AAAA,EAE/D,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,WAAW;AAAA;AAAA,EAGX,sBAAsB;AAAA,EACtB,6BAA6B;AAAA,EAC7B,uBAAuB;AAAA,EACvB,8CAA8C;AAAA,EAC9C,2BAA2B;AAAA;AAAA,EAG3B,kBAAkB;AAAA,EAClB,0BAA0B;AAAA,EAC1B,yBAAyB;AAAA,EACzB,2BAA2B;AAAA,EAC3B,WAAW;AAAA,EACX,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,qCAAqC;AAAA,EACrC,0BAA0B;AAAA,EAC1B,iBAAiB;AAAA,EACjB,0BAA0B;AAAA;AAAA,EAG1B,kBAAkB;AAAA,EAClB,6BAA6B;AAAA,EAC7B,iBAAiB;AAAA,EACjB,0BAA0B;AAAA,EAC1B,6BAA6B;AAAA,EAC7B,sBAAsB;AAAA,EACtB,iCAAiC;AAAA,EACjC,sBAAsB;AAAA,EACtB,8BAA8B;AAAA,EAC9B,yCAAyC;AAAA;AAAA,EAGzC,WAAW;AAAA;AAAA,EAGX,qBAAqB;AAAA,EACrB,kCAAkC;AAAA,EAClC,iDAAiD;AAAA,EACjD,OAAO;AAAA,EACP,aAAa;AAAA,EACb,2BAA2B;AAAA,EAC3B,+BAA+B;AAAA,EAC/B,sBAAsB;AAAA;AAAA,EAGtB,oBAAoB;AAAA;AAAA,EAGpB,UAAU;AAAA,EACV,SAAS;AACX;AAEO,SAAS,gBAAgB,cAA6C;AAC3E,SAAO,kBAAkB,YAAY,KAAK;AAC5C;AAEO,MAAM,mBAA2C;AAAA,EACtD,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,aAAa;AACf;AAMA,MAAM,uBAAuB,oBAAI,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,gBAAgB,aAA8B;AAC5D,SAAO,qBAAqB,IAAI,WAAW;AAC7C;AAEO,SAAS,uBAAuB,aAA6B;AAClE,SAAO,iBAAiB,WAAW,KAAK;AAC1C;",
+  "sourcesContent": ["import type { UnifiedShipmentStatus } from '@open-mercato/core/modules/shipping_carriers/lib/adapter'\n\nconst INPOST_STATUS_MAP: Record<string, UnifiedShipmentStatus> = {\n  // Label / offer preparation\n  created: 'label_created',\n  offers_prepared: 'label_created',\n  offer_selected: 'label_created',\n  confirmed: 'label_created',\n\n  // Picked up from sender\n  dispatched_by_sender: 'picked_up',\n  dispatched_by_sender_to_pok: 'picked_up',\n  collected_from_sender: 'picked_up',\n  taken_by_courier_from_customer_service_point: 'picked_up',\n  taken_by_courier_from_pok: 'picked_up',\n\n  // In transit / sorting\n  taken_by_courier: 'in_transit',\n  adopted_at_source_branch: 'in_transit',\n  sent_from_source_branch: 'in_transit',\n  adopted_at_sorting_center: 'in_transit',\n  oversized: 'in_transit',\n  readdressed: 'in_transit',\n  delay_in_delivery: 'in_transit',\n  unstack_from_customer_service_point: 'in_transit',\n  unstack_from_box_machine: 'in_transit',\n  redirect_to_box: 'in_transit',\n  canceled_redirect_to_box: 'in_transit',\n\n  // Out for delivery / awaiting pickup\n  out_for_delivery: 'out_for_delivery',\n  out_for_delivery_to_address: 'out_for_delivery',\n  ready_to_pickup: 'out_for_delivery',\n  ready_to_pickup_from_pok: 'out_for_delivery',\n  ready_to_pickup_from_branch: 'out_for_delivery',\n  stack_in_box_machine: 'out_for_delivery',\n  stack_in_customer_service_point: 'out_for_delivery',\n  pickup_reminder_sent: 'out_for_delivery',\n  pickup_reminder_sent_address: 'out_for_delivery',\n  courier_avizo_in_customer_service_point: 'out_for_delivery',\n\n  // Delivered\n  delivered: 'delivered',\n\n  // Failed delivery\n  pickup_time_expired: 'failed_delivery',\n  stack_parcel_pickup_time_expired: 'failed_delivery',\n  stack_parcel_in_box_machine_pickup_time_expired: 'failed_delivery',\n  avizo: 'failed_delivery',\n  undelivered: 'failed_delivery',\n  undelivered_wrong_address: 'failed_delivery',\n  undelivered_cod_cash_receiver: 'failed_delivery',\n  rejected_by_receiver: 'failed_delivery',\n  claimed: 'failed_delivery',\n\n  // Returned\n  returned_to_sender: 'returned',\n\n  // Cancelled\n  canceled: 'cancelled',\n}\n\nexport function mapInpostStatus(inpostStatus: string): UnifiedShipmentStatus {\n  return INPOST_STATUS_MAP[inpostStatus] ?? 'unknown'\n}\n\nexport const SERVICE_CODE_MAP: Record<string, string> = {\n  locker_standard: 'inpost_locker_standard',\n  courier_standard: 'inpost_courier_standard',\n  courier_c2c: 'inpost_courier_c2c',\n}\n\n// Locker services use template-based parcel sizing (small/medium/large).\n// courier_c2c also uses templates (small/medium/large/xlarge) but is NOT\n// included here because isLockerService is used to add locker-specific\n// API fields (e.g. target_point, receiver email) \u2014 courier_c2c does not need those.\nconst LOCKER_SERVICE_CODES = new Set([\n  'locker_standard',\n  'inpost_locker_standard',\n  'inpost_locker_allegro',\n  'inpost_locker_pass_thru',\n  'inpost_locker_standard_smart',\n  'inpost_locker_allegro_smart',\n])\n\nexport function isLockerService(serviceCode: string): boolean {\n  return LOCKER_SERVICE_CODES.has(serviceCode)\n}\n\nexport function mapServiceCodeToInpost(serviceCode: string): string {\n  return SERVICE_CODE_MAP[serviceCode] ?? serviceCode\n}\n"],
+  "mappings": "AAEA,MAAM,oBAA2D;AAAA;AAAA,EAE/D,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,WAAW;AAAA;AAAA,EAGX,sBAAsB;AAAA,EACtB,6BAA6B;AAAA,EAC7B,uBAAuB;AAAA,EACvB,8CAA8C;AAAA,EAC9C,2BAA2B;AAAA;AAAA,EAG3B,kBAAkB;AAAA,EAClB,0BAA0B;AAAA,EAC1B,yBAAyB;AAAA,EACzB,2BAA2B;AAAA,EAC3B,WAAW;AAAA,EACX,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,qCAAqC;AAAA,EACrC,0BAA0B;AAAA,EAC1B,iBAAiB;AAAA,EACjB,0BAA0B;AAAA;AAAA,EAG1B,kBAAkB;AAAA,EAClB,6BAA6B;AAAA,EAC7B,iBAAiB;AAAA,EACjB,0BAA0B;AAAA,EAC1B,6BAA6B;AAAA,EAC7B,sBAAsB;AAAA,EACtB,iCAAiC;AAAA,EACjC,sBAAsB;AAAA,EACtB,8BAA8B;AAAA,EAC9B,yCAAyC;AAAA;AAAA,EAGzC,WAAW;AAAA;AAAA,EAGX,qBAAqB;AAAA,EACrB,kCAAkC;AAAA,EAClC,iDAAiD;AAAA,EACjD,OAAO;AAAA,EACP,aAAa;AAAA,EACb,2BAA2B;AAAA,EAC3B,+BAA+B;AAAA,EAC/B,sBAAsB;AAAA,EACtB,SAAS;AAAA;AAAA,EAGT,oBAAoB;AAAA;AAAA,EAGpB,UAAU;AACZ;AAEO,SAAS,gBAAgB,cAA6C;AAC3E,SAAO,kBAAkB,YAAY,KAAK;AAC5C;AAEO,MAAM,mBAA2C;AAAA,EACtD,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,aAAa;AACf;AAMA,MAAM,uBAAuB,oBAAI,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,gBAAgB,aAA8B;AAC5D,SAAO,qBAAqB,IAAI,WAAW;AAC7C;AAEO,SAAS,uBAAuB,aAA6B;AAClE,SAAO,iBAAiB,WAAW,KAAK;AAC1C;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/carrier-inpost",
-  "version": "0.10.1-develop.8072.1.592356afda",
+  "version": "0.10.1-develop.8098.1.f4decc8a57",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -62,21 +62,21 @@
     }
   },
   "dependencies": {
-    "@open-mercato/core": "0.10.1-develop.8072.1.592356afda",
-    "@open-mercato/ui": "0.10.1-develop.8072.1.592356afda",
+    "@open-mercato/core": "0.10.1-develop.8098.1.f4decc8a57",
+    "@open-mercato/ui": "0.10.1-develop.8098.1.f4decc8a57",
     "ts-pattern": "^5.0.0"
   },
   "peerDependencies": {
     "@mikro-orm/postgresql": "^7.0.14",
-    "@open-mercato/ai-assistant": "0.10.1-develop.8072.1.592356afda",
-    "@open-mercato/shared": "0.10.1-develop.8072.1.592356afda",
+    "@open-mercato/ai-assistant": "0.10.1-develop.8098.1.f4decc8a57",
+    "@open-mercato/shared": "0.10.1-develop.8098.1.f4decc8a57",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "react-is": ">=18.0.0"
   },
   "devDependencies": {
-    "@open-mercato/ai-assistant": "0.10.1-develop.8072.1.592356afda",
-    "@open-mercato/shared": "0.10.1-develop.8072.1.592356afda",
+    "@open-mercato/ai-assistant": "0.10.1-develop.8098.1.f4decc8a57",
+    "@open-mercato/shared": "0.10.1-develop.8098.1.f4decc8a57",
     "@types/chance": "^1.1.8",
     "@types/jest": "^30.0.0",
     "@types/react": "^19.2.18",

package/src/modules/carrier_inpost/__integration__/TC-INPOST-005.spec.ts

@@ -0,0 +1,155 @@
+import { createHmac, randomUUID } from 'node:crypto'
+import { expect, test, type APIRequestContext } from '@playwright/test'
+import { apiRequest, getAuthToken } from '@open-mercato/core/helpers/integration/api'
+import {
+  createOrganizationInDb,
+  deleteIntegrationCredentialsInDb,
+  deleteOrganizationInDb,
+  withClient,
+} from '@open-mercato/core/helpers/integration/dbFixtures'
+import { getTokenScope } from '@open-mercato/core/helpers/integration/generalFixtures'
+import { drainIntegrationQueue } from '@open-mercato/core/helpers/integration/queue'
+
+/**
+ * TC-INPOST-005: An InPost parcel complaint ("claimed") does not cancel the shipment
+ *
+ * InPost reports `claimed` when the recipient files a complaint at the parcel machine. That is a
+ * failed delivery, not a cancelled label: the shipment must stay non-terminal so the carrier's
+ * later outcome (here `returned_to_sender`) is still applied.
+ *
+ * Shipments are seeded with SQL in a throwaway organization (creating a real InPost shipment needs
+ * an InPost account). Signed webhooks are POSTed to the real `/api/shipping-carriers/webhook/inpost`
+ * route; verification is local HMAC with the organization's saved webhook secret.
+ *
+ * ENVIRONMENT: API + raw `pg` against `DATABASE_URL`; run under a coherent app+DB stack
+ * (`yarn test:integration` / `yarn test:integration:ephemeral`).
+ */
+
+const WEBHOOK_PATH = '/api/shipping-carriers/webhook/inpost'
+const stamp = `${Date.now()}_${randomUUID().slice(0, 8)}`
+const webhookSecret = `tcinpost005_${stamp}`
+
+type Scope = { organizationId: string; tenantId: string }
+type ShipmentRow = { unified_status: string; carrier_status: string | null }
+
+async function seedShipment(scope: Scope, carrierShipmentId: string, status: string): Promise<string> {
+  const id = randomUUID()
+  await withClient(async (client) => {
+    await client.query(
+      `insert into carrier_shipments
+        (id, order_id, provider_key, carrier_shipment_id, tracking_number, unified_status,
+         organization_id, tenant_id, created_at, updated_at)
+       values ($1, $2, 'inpost', $3, $3, $4, $5, $6, now(), now())`,
+      [id, randomUUID(), carrierShipmentId, status, scope.organizationId, scope.tenantId],
+    )
+  })
+  return id
+}
+
+async function readShipment(id: string): Promise<ShipmentRow | null> {
+  return withClient(async (client) => {
+    const result = await client.query<ShipmentRow>(
+      'select unified_status, carrier_status from carrier_shipments where id = $1',
+      [id],
+    )
+    return result.rows[0] ?? null
+  })
+}
+
+async function isWebhookProcessed(idempotencyKey: string): Promise<boolean> {
+  return withClient(async (client) => {
+    const result = await client.query(
+      "select 1 from carrier_webhook_events where provider_key = 'inpost' and idempotency_key = $1",
+      [idempotencyKey],
+    )
+    return (result.rowCount ?? 0) > 0
+  })
+}
+
+async function deliverStatus(
+  request: APIRequestContext,
+  carrierShipmentId: string,
+  status: string,
+): Promise<void> {
+  const eventTs = new Date().toISOString()
+  const body = JSON.stringify({
+    event: 'shipment_status_changed',
+    event_ts: eventTs,
+    organization_id: 1,
+    payload: { shipment_id: carrierShipmentId, status, tracking_number: carrierShipmentId },
+  })
+  const idempotencyKey = [carrierShipmentId, 'shipment_status_changed', status, eventTs].join(':')
+  const response = await request.post(WEBHOOK_PATH, {
+    data: body,
+    headers: {
+      'content-type': 'application/json',
+      'x-inpost-signature': createHmac('sha256', webhookSecret).update(body).digest('hex'),
+    },
+  })
+  expect(response.status(), `webhook ${status} should be accepted`).toBe(202)
+  await drainIntegrationQueue('shipping-carriers-webhook')
+  await expect
+    .poll(() => isWebhookProcessed(idempotencyKey), {
+      message: `the ${status} webhook should be processed by the worker`,
+      timeout: 30_000,
+    })
+    .toBe(true)
+}
+
+test.describe('TC-INPOST-005: InPost "claimed" is a failed delivery, not a cancellation', () => {
+  test('keeps a complained parcel trackable until InPost returns it to the sender', async ({ request }) => {
+    test.setTimeout(120_000)
+    const adminScope = getTokenScope(await getAuthToken(request, 'admin'))
+    const tenantId = adminScope.tenantId
+    let organizationId: string | null = null
+    const shipmentIds: string[] = []
+
+    try {
+      organizationId = await createOrganizationInDb({ name: `TC-INPOST-005 ${stamp}`, tenantId })
+      const scope: Scope = { organizationId, tenantId }
+      const superadminToken = await getAuthToken(request, 'superadmin')
+      const saved = await apiRequest(request, 'PUT', '/api/integrations/carrier_inpost/credentials', {
+        token: superadminToken,
+        headers: {
+          Cookie: `om_selected_tenant=${encodeURIComponent(tenantId)}; om_selected_org=${encodeURIComponent(organizationId)}`,
+        },
+        data: { credentials: { apiToken: `tcinpost005_token_${stamp}`, organizationId: '1', webhookSecret } },
+      })
+      expect(saved.status(), await saved.text()).toBe(200)
+
+      const awaitingPickup = `tcinpost005a${stamp}`
+      const awaitingPickupId = await seedShipment(scope, awaitingPickup, 'out_for_delivery')
+      shipmentIds.push(awaitingPickupId)
+      const pickupExpired = `tcinpost005b${stamp}`
+      const pickupExpiredId = await seedShipment(scope, pickupExpired, 'failed_delivery')
+      shipmentIds.push(pickupExpiredId)
+
+      await deliverStatus(request, awaitingPickup, 'claimed')
+      await expect
+        .poll(async () => readShipment(awaitingPickupId), { timeout: 10_000 })
+        .toEqual({ unified_status: 'failed_delivery', carrier_status: 'claimed' })
+
+      await deliverStatus(request, pickupExpired, 'claimed')
+      expect(await readShipment(pickupExpiredId)).toEqual({ unified_status: 'failed_delivery', carrier_status: null })
+
+      await deliverStatus(request, pickupExpired, 'returned_to_sender')
+      await expect
+        .poll(async () => (await readShipment(pickupExpiredId))?.unified_status, {
+          message: 'the return after a complaint must still be applied',
+          timeout: 10_000,
+        })
+        .toBe('returned')
+    } finally {
+      await withClient(async (client) => {
+        if (organizationId) {
+          await client.query('delete from carrier_webhook_events where organization_id = $1', [organizationId])
+        }
+        if (shipmentIds.length > 0) {
+          await client.query('delete from carrier_shipments where id = any($1::uuid[])', [shipmentIds])
+        }
+      }).catch(() => undefined)
+      await deleteIntegrationCredentialsInDb(organizationId).catch(() => undefined)
+      await deleteOrganizationInDb(organizationId).catch(() => undefined)
+    }
+  })
+})

package/src/modules/carrier_inpost/__tests__/status-map.test.ts

@@ -1,4 +1,9 @@
 import Chance from 'chance'
+import {
+  getTerminalShippingEvent,
+  syncShipmentStatus,
+  TERMINAL_SHIPPING_STATUSES,
+} from '@open-mercato/core/modules/shipping_carriers/lib/status-sync'
 import { mapInpostStatus, mapServiceCodeToInpost, isLockerService } from '../lib/status-map'
 
 const chance = new Chance()
@@ -55,13 +60,13 @@ describe('mapInpostStatus', () => {
     ['undelivered_wrong_address', 'failed_delivery'],
     ['undelivered_cod_cash_receiver', 'failed_delivery'],
     ['rejected_by_receiver', 'failed_delivery'],
+    ['claimed', 'failed_delivery'],
 
     // Returned
     ['returned_to_sender', 'returned'],
 
     // Cancelled
     ['canceled', 'cancelled'],
-    ['claimed', 'cancelled'],
   ]
 
   it.each(cases)('maps InPost status "%s" to unified "%s"', (inpostStatus, expected) => {
@@ -77,6 +82,21 @@ describe('mapInpostStatus', () => {
   it('returns "unknown" for sent_from_sorting_center (not in official status list)', () => {
     expect(mapInpostStatus('sent_from_sorting_center')).toBe('unknown')
   })
+
+  it('does not treat a parcel complaint ("claimed") as a terminal cancellation', () => {
+    const mapped = mapInpostStatus('claimed')
+    expect(mapped).not.toBe(mapInpostStatus('canceled'))
+    expect(TERMINAL_SHIPPING_STATUSES.has(mapped)).toBe(false)
+    expect(getTerminalShippingEvent(mapped)).toBeNull()
+  })
+
+  it('keeps syncing a shipment after a complaint so the parcel return is still recorded', () => {
+    const shipment = { unifiedStatus: 'failed_delivery' } as Parameters<typeof syncShipmentStatus>[0]
+    expect(syncShipmentStatus(shipment, mapInpostStatus('claimed'))).toBe(false)
+    expect(shipment.unifiedStatus).toBe('failed_delivery')
+    expect(syncShipmentStatus(shipment, mapInpostStatus('returned_to_sender'))).toBe(true)
+    expect(shipment.unifiedStatus).toBe('returned')
+  })
 })
 
 describe('mapServiceCodeToInpost', () => {

package/src/modules/carrier_inpost/lib/status-map.ts

@@ -51,13 +51,13 @@ const INPOST_STATUS_MAP: Record<string, UnifiedShipmentStatus> = {
   undelivered_wrong_address: 'failed_delivery',
   undelivered_cod_cash_receiver: 'failed_delivery',
   rejected_by_receiver: 'failed_delivery',
+  claimed: 'failed_delivery',
 
   // Returned
   returned_to_sender: 'returned',
 
   // Cancelled
   canceled: 'cancelled',
-  claimed: 'cancelled',
 }
 
 export function mapInpostStatus(inpostStatus: string): UnifiedShipmentStatus {