@proxy-checkout/server-js 0.0.4-pr-76.17.1 → 0.0.4-pr-76.19.1

package/dist/lifecycle.d.ts

@@ -10,7 +10,13 @@ import type { MerchantProxySession } from "./sessions.js";
 import type { MerchantProxySubscription } from "./subscriptions.js";
 /** Session statuses that mean the payer has paid and entitlement may be granted. */
 export declare const PROVISIONABLE_SESSION_STATUSES: Set<string>;
-/** Session statuses that are terminal — no further lifecycle transitions occur. */
+/**
+ * Session statuses that are terminal from the SDK's lifecycle perspective — the
+ * automatic flow has stopped and the merchant must observe the outcome. This
+ * includes `merchant_action_required`, which halts the session pending merchant
+ * intervention; classifying it here keeps a `proxy_session.merchant_action_required`
+ * event from silently resolving to `ignored` and being marked processed.
+ */
 export declare const TERMINAL_SESSION_STATUSES: Set<string>;
 /** Subscription statuses that mean the subscription is no longer active. */
 export declare const ENDED_SUBSCRIPTION_STATUSES: Set<string>;

package/dist/lifecycle.js

@@ -9,11 +9,18 @@
 import { ProxyCheckoutValidationError } from "./errors.js";
 /** Session statuses that mean the payer has paid and entitlement may be granted. */
 export const PROVISIONABLE_SESSION_STATUSES = new Set(["paid", "provisionable"]);
-/** Session statuses that are terminal — no further lifecycle transitions occur. */
+/**
+ * Session statuses that are terminal from the SDK's lifecycle perspective — the
+ * automatic flow has stopped and the merchant must observe the outcome. This
+ * includes `merchant_action_required`, which halts the session pending merchant
+ * intervention; classifying it here keeps a `proxy_session.merchant_action_required`
+ * event from silently resolving to `ignored` and being marked processed.
+ */
 export const TERMINAL_SESSION_STATUSES = new Set([
     "cancelled",
     "expired",
     "failed",
+    "merchant_action_required",
     "provisioned",
     "provisioning_failed",
 ]);

package/dist/sessions.d.ts

@@ -35,6 +35,7 @@ export interface MerchantProxySession {
     readonly amountMinor: number;
     readonly buyerReference: string;
     readonly cartSnapshot: JsonObject;
+    readonly cartVersion: number;
     readonly createdAt: string;
     readonly currency: string;
     readonly expiresAt: string;
@@ -65,10 +66,12 @@ export interface SetProxySessionCartInput extends ProxyCheckoutServerRequestOpti
     readonly amountMinor: number;
     readonly cartSnapshot: JsonObject;
     readonly currency: string;
+    readonly expectedCartVersion: number;
 }
 export interface ProxySessionCartResult {
     readonly amountMinor: number;
     readonly cartSnapshot: JsonObject;
+    readonly cartVersion: number;
     readonly currency: string;
 }
 export interface RecordProviderBindingInput extends ProxyCheckoutServerRequestOptions {

package/dist/sessions.js

@@ -148,6 +148,7 @@ export class ProxySessionCartResource {
         return {
             amountMinor: requireInteger(body.amount_minor, "sessions.cart.set.amountMinor"),
             cartSnapshot: requireJsonObject(body.cart_snapshot, "sessions.cart.set"),
+            cartVersion: requireInteger(body.cart_version, "sessions.cart.set.cartVersion"),
             currency: requireString(body.currency, "sessions.cart.set.currency"),
         };
     }
@@ -182,6 +183,7 @@ function toProxySessionCartBody(input) {
         amount_minor: input.amountMinor,
         cart_snapshot: input.cartSnapshot,
         currency: input.currency,
+        expected_cart_version: input.expectedCartVersion,
     };
 }
 function removeUndefinedValues(input) {
@@ -216,6 +218,7 @@ function toMerchantProxySession(response) {
         amountMinor: requireInteger(body.amount_minor, "sessions.retrieve.amountMinor"),
         buyerReference: requireString(body.buyer_reference, "sessions.retrieve.buyerReference"),
         cartSnapshot: requireJsonObject(body.cart_snapshot, "sessions.retrieve.cartSnapshot"),
+        cartVersion: requireInteger(body.cart_version, "sessions.retrieve.cartVersion"),
         createdAt: requireString(body.created_at, "sessions.retrieve.createdAt"),
         currency: requireString(body.currency, "sessions.retrieve.currency"),
         expiresAt: requireString(body.expires_at, "sessions.retrieve.expiresAt"),
@@ -240,6 +243,7 @@ function toPayerOpenedResult(response) {
         amountMinor: requireInteger(body.amount_minor, "sessions.payerOpened.amountMinor"),
         buyerReference: requireString(body.buyer_reference, "sessions.payerOpened.buyerReference"),
         cartSnapshot: requireJsonObject(body.cart_snapshot, "sessions.payerOpened.cartSnapshot"),
+        cartVersion: requireInteger(body.cart_version, "sessions.payerOpened.cartVersion"),
         createdAt: requireString(body.created_at, "sessions.payerOpened.createdAt"),
         currency: requireString(body.currency, "sessions.payerOpened.currency"),
         expiresAt: requireString(body.expires_at, "sessions.payerOpened.expiresAt"),
@@ -248,9 +252,8 @@ function toPayerOpenedResult(response) {
         integrationMode: requireString(body.integration_mode, "sessions.payerOpened.integrationMode"),
         metadata: requireJsonObject(body.metadata, "sessions.payerOpened.metadata"),
         payerContact: requireNullablePayerContact(body.payer_contact, "sessions.payerOpened"),
-        // No provider binding exists yet at payer-open; it is recorded after checkout creation.
-        providerCheckoutSessionId: null,
-        providerCheckoutSessionPsp: null,
+        providerCheckoutSessionId: requireNullableString(body.provider_checkout_session_id, "sessions.payerOpened.providerCheckoutSessionId"),
+        providerCheckoutSessionPsp: requireNullableString(body.provider_checkout_session_psp, "sessions.payerOpened.providerCheckoutSessionPsp"),
         status,
         updatedAt: requireString(body.updated_at, "sessions.payerOpened.updatedAt"),
     };

package/dist/version.d.ts

@@ -1,3 +1,3 @@
 export declare const proxyCheckoutServerSdkName = "@proxy-checkout/server-js";
-export declare const proxyCheckoutServerSdkVersion = "0.0.4-pr-76.17.1";
-export declare const proxyCheckoutServerSdkUserAgent = "@proxy-checkout/server-js/0.0.4-pr-76.17.1";
+export declare const proxyCheckoutServerSdkVersion = "0.0.4-pr-76.19.1";
+export declare const proxyCheckoutServerSdkUserAgent = "@proxy-checkout/server-js/0.0.4-pr-76.19.1";

package/dist/version.js

@@ -1,3 +1,3 @@
 export const proxyCheckoutServerSdkName = "@proxy-checkout/server-js";
-export const proxyCheckoutServerSdkVersion = "0.0.4-pr-76.17.1";
+export const proxyCheckoutServerSdkVersion = "0.0.4-pr-76.19.1";
 export const proxyCheckoutServerSdkUserAgent = `${proxyCheckoutServerSdkName}/${proxyCheckoutServerSdkVersion}`;

package/dist/webhook-events.d.ts

@@ -7,7 +7,12 @@
  */
 export declare const PROXY_WEBHOOK_EVENT_TYPES: {
     readonly paymentAttemptCancelled: "payment_attempt.cancelled";
+    readonly paymentAttemptDisputed: "payment_attempt.disputed";
+    readonly paymentAttemptDisputeLost: "payment_attempt.dispute_lost";
+    readonly paymentAttemptDisputeWon: "payment_attempt.dispute_won";
     readonly paymentAttemptFailed: "payment_attempt.failed";
+    readonly paymentAttemptPartiallyRefunded: "payment_attempt.partially_refunded";
+    readonly paymentAttemptRefunded: "payment_attempt.refunded";
     readonly paymentAttemptSucceeded: "payment_attempt.succeeded";
     readonly sessionCancelled: "proxy_session.cancelled";
     readonly sessionExpired: "proxy_session.expired";

package/dist/webhook-events.js

@@ -7,7 +7,12 @@
  */
 export const PROXY_WEBHOOK_EVENT_TYPES = {
     paymentAttemptCancelled: "payment_attempt.cancelled",
+    paymentAttemptDisputed: "payment_attempt.disputed",
+    paymentAttemptDisputeLost: "payment_attempt.dispute_lost",
+    paymentAttemptDisputeWon: "payment_attempt.dispute_won",
     paymentAttemptFailed: "payment_attempt.failed",
+    paymentAttemptPartiallyRefunded: "payment_attempt.partially_refunded",
+    paymentAttemptRefunded: "payment_attempt.refunded",
     paymentAttemptSucceeded: "payment_attempt.succeeded",
     sessionCancelled: "proxy_session.cancelled",
     sessionExpired: "proxy_session.expired",
@@ -36,7 +41,12 @@ const SUBSCRIPTION_EVENT_TYPES = new Set([
 ]);
 const PAYMENT_ATTEMPT_EVENT_TYPES = new Set([
     PROXY_WEBHOOK_EVENT_TYPES.paymentAttemptCancelled,
+    PROXY_WEBHOOK_EVENT_TYPES.paymentAttemptDisputeLost,
+    PROXY_WEBHOOK_EVENT_TYPES.paymentAttemptDisputeWon,
+    PROXY_WEBHOOK_EVENT_TYPES.paymentAttemptDisputed,
     PROXY_WEBHOOK_EVENT_TYPES.paymentAttemptFailed,
+    PROXY_WEBHOOK_EVENT_TYPES.paymentAttemptPartiallyRefunded,
+    PROXY_WEBHOOK_EVENT_TYPES.paymentAttemptRefunded,
     PROXY_WEBHOOK_EVENT_TYPES.paymentAttemptSucceeded,
 ]);
 /** True for `proxy_session.*` events. */

package/dist/webhook-handler.js

@@ -72,7 +72,21 @@ export class ProxyWebhooksResource {
             throw error;
         }
         if (store !== undefined) {
-            await store.markProcessed(event.id, toProcessRecord(resolved));
+            try {
+                await store.markProcessed(event.id, toProcessRecord(resolved));
+            }
+            catch (error) {
+                // The fulfillment ran, but committing idempotency failed. Best-effort
+                // release the claim so the event is reclaimable on a later delivery
+                // instead of being stuck in the in-flight branch forever.
+                try {
+                    await store.markFailed(event.id, error);
+                }
+                catch {
+                    // Never let a store failure shadow the original markProcessed error.
+                }
+                throw error;
+            }
         }
         return {
             event,

package/package.json

@@ -7,7 +7,7 @@
   "sideEffects": false,
   "type": "module",
   "types": "./dist/index.d.ts",
-  "version": "0.0.4-pr-76.17.1",
+  "version": "0.0.4-pr-76.19.1",
   "devDependencies": {
     "@types/node": "^24.12.4",
     "@vitest/coverage-v8": "4.1.7",