includio-cms 0.15.2 → 0.15.3

package/dist/cli/index.js

@@ -2,6 +2,7 @@
 import { scaffoldAdmin } from './scaffold/admin.js';
 import { installPeers } from './install-peers.js';
 import { createUser } from './create-user.js';
+import fs from 'node:fs';
 import path from 'node:path';
 const args = process.argv.slice(2);
 const command = args[0];
@@ -17,15 +18,59 @@ Commands:
 Options:
   --force           Overwrite existing files
   --routes-dir      Path to routes directory (default: src/routes)
+  --cms-config      Path to cms config (default: src/lib/cms/cms.config.ts)
+  --shop            Force shop routes ON (default: auto-detect from cms config)
+  --no-shop         Force shop routes OFF
   --dry-run         Show what would be installed (install-peers)
 `);
 }
+function flagValue(name) {
+    const idx = args.indexOf(name);
+    return idx !== -1 ? args[idx + 1] : undefined;
+}
+/**
+ * Best-effort detection: scan cms config text for an active `shop: defineShop(`
+ * or `shop: <var>` property inside `defineCMS({ ... })`. Returns null if the
+ * config can't be located so the caller can fall back to a sensible default.
+ */
+function detectShopUsage(cmsConfigPath) {
+    if (!fs.existsSync(cmsConfigPath))
+        return null;
+    const raw = fs.readFileSync(cmsConfigPath, 'utf-8');
+    // Strip line + block comments so a commented `// shop:` doesn't trigger.
+    const stripped = raw
+        .replace(/\/\*[\s\S]*?\*\//g, '')
+        .replace(/\/\/[^\n]*/g, '');
+    return /\bshop\s*:\s*\S/.test(stripped);
+}
 if (command === 'scaffold' && subcommand === 'admin') {
     const force = args.includes('--force');
-    const routesDirIdx = args.indexOf('--routes-dir');
-    const routesDir = routesDirIdx !== -1 ? args[routesDirIdx + 1] : path.join(process.cwd(), 'src', 'routes');
-    console.log('Scaffolding admin routes...\n');
-    scaffoldAdmin({ routesDir, force });
+    const cwd = process.cwd();
+    const routesDir = flagValue('--routes-dir') ?? path.join(cwd, 'src', 'routes');
+    const cmsConfigPath = flagValue('--cms-config') ?? path.join(cwd, 'src', 'lib', 'cms', 'cms.config.ts');
+    let shop;
+    let shopSource;
+    if (args.includes('--shop')) {
+        shop = true;
+        shopSource = 'flag --shop';
+    }
+    else if (args.includes('--no-shop')) {
+        shop = false;
+        shopSource = 'flag --no-shop';
+    }
+    else {
+        const detected = detectShopUsage(cmsConfigPath);
+        if (detected === null) {
+            shop = false;
+            shopSource = `${cmsConfigPath} not found → off`;
+        }
+        else {
+            shop = detected;
+            shopSource = `${cmsConfigPath} → ${detected ? 'shop: detected' : 'no shop config'}`;
+        }
+    }
+    console.log(`Scaffolding admin routes (shop ${shop ? 'enabled' : 'disabled'} — ${shopSource})...\n`);
+    scaffoldAdmin({ routesDir, force, shop });
 }
 else if (command === 'install-peers') {
     const dryRun = args.includes('--dry-run');

package/dist/cli/scaffold/admin.d.ts

@@ -1,4 +1,11 @@
-export declare function scaffoldAdmin(options: {
+export interface ScaffoldAdminOptions {
     routesDir: string;
     force?: boolean;
-}): void;
+    /**
+     * Emit shop module routes (api/shop/* + admin/(afterLogin)/shop/*).
+     * Default `true`. Set to `false` for projects that don't use the shop
+     * module — keeps the route tree clean and avoids 404 stubs in your app.
+     */
+    shop?: boolean;
+}
+export declare function scaffoldAdmin(options: ScaffoldAdminOptions): void;

package/dist/cli/scaffold/admin.js

@@ -2,6 +2,10 @@ import fs from 'node:fs';
 import path from 'node:path';
 const GENERATED_COMMENT = '<!-- Generated by includio-cms -->';
 const GENERATED_COMMENT_TS = '// Generated by includio-cms';
+function isShopFile(p) {
+    return (p.startsWith('api/shop/') ||
+        p.startsWith('admin/(afterLogin)/shop/'));
+}
 function getAdminFiles() {
     return [
         {
@@ -230,6 +234,30 @@ export const { GET } = createOrderHandler();
 import { createPaymentWebhookHandler } from 'includio-cms/shop/http';
 
 export const { POST } = createPaymentWebhookHandler();
+`
+        },
+        {
+            path: 'api/shop/carriers/[id]/+server.ts',
+            content: `${GENERATED_COMMENT_TS}
+import { createCarrierConfigHandler } from 'includio-cms/shop/http';
+
+export const { GET } = createCarrierConfigHandler();
+`
+        },
+        {
+            path: 'api/shop/carriers/[id]/webhook/+server.ts',
+            content: `${GENERATED_COMMENT_TS}
+import { createCarrierWebhookHandler } from 'includio-cms/shop/http';
+
+export const { POST } = createCarrierWebhookHandler();
+`
+        },
+        {
+            path: 'api/shop/admin/orders/[id]/label/+server.ts',
+            content: `${GENERATED_COMMENT_TS}
+import { createShipmentLabelHandler } from 'includio-cms/shop/http';
+
+export const { GET } = createShipmentLabelHandler();
 `
         },
         {
@@ -317,8 +345,9 @@ export const { GET, POST, PUT, DELETE } = createRestApiHandler();
     ];
 }
 export function scaffoldAdmin(options) {
-    const { routesDir, force = false } = options;
-    const files = getAdminFiles();
+    const { routesDir, force = false, shop = true } = options;
+    const allFiles = getAdminFiles();
+    const files = shop ? allFiles : allFiles.filter((f) => !isShopFile(f.path));
     let created = 0;
     let skipped = 0;
     for (const file of files) {
@@ -334,7 +363,7 @@ export function scaffoldAdmin(options) {
         console.log(`  create ${file.path}`);
         created++;
     }
-    console.log(`\nDone: ${created} created, ${skipped} skipped`);
+    console.log(`\nDone: ${created} created, ${skipped} skipped${shop ? '' : ' (shop routes excluded)'}`);
     if (skipped > 0 && !force) {
         console.log('Use --force to overwrite existing files.');
     }

package/dist/db-postgres/schema/shop/order.d.ts

@@ -279,6 +279,74 @@ export declare const shopOrdersTable: import("drizzle-orm/pg-core/table", { with
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        shipmentId: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "shipment_id";
+            tableName: "shop_orders";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        trackingNumber: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "tracking_number";
+            tableName: "shop_orders";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        labelUrl: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "label_url";
+            tableName: "shop_orders";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        shipmentCreatedAt: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "shipment_created_at";
+            tableName: "shop_orders";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         paymentMethod: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
             name: "payment_method";
             tableName: "shop_orders";

package/dist/db-postgres/schema/shop/order.js

@@ -19,6 +19,10 @@ export const shopOrdersTable = pgTable('shop_orders', {
     }),
     carrierType: text('carrier_type'),
     carrierRef: text('carrier_ref'),
+    shipmentId: text('shipment_id'),
+    trackingNumber: text('tracking_number'),
+    labelUrl: text('label_url'),
+    shipmentCreatedAt: timestamp('shipment_created_at', { withTimezone: true }),
     paymentMethod: text('payment_method'),
     paymentProviderRef: text('payment_provider_ref'),
     consents: jsonb('consents').$type(),

package/dist/db-postgres/schema/shop/shippingMethod.d.ts

@@ -1,4 +1,10 @@
 export type ShopCarrierType = 'none' | 'inpost' | string;
+export type InpostServiceType = 'inpost_locker_standard' | 'inpost_locker_express' | 'inpost_courier_standard' | 'inpost_courier_express';
+export type InpostParcelSize = 'A' | 'B' | 'C';
+export interface ShippingCarrierConfig {
+    serviceType?: InpostServiceType | string;
+    defaultSize?: InpostParcelSize | string;
+}
 export declare const shopShippingMethodsTable: import("drizzle-orm/pg-core/table", { with: { "resolution-mode": "require" } }).PgTableWithColumns<{
     name: "shop_shipping_methods";
     schema: undefined;
@@ -111,6 +117,25 @@ export declare const shopShippingMethodsTable: import("drizzle-orm/pg-core/table
         }, {}, {
             $type: string;
         }>;
+        carrierConfig: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
+            name: "carrier_config";
+            tableName: "shop_shipping_methods";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: ShippingCarrierConfig | null;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: ShippingCarrierConfig | null;
+        }>;
         conditions: import("drizzle-orm/pg-core", { with: { "resolution-mode": "require" } }).PgColumn<{
             name: "conditions";
             tableName: "shop_shipping_methods";

package/dist/db-postgres/schema/shop/shippingMethod.js

@@ -7,6 +7,7 @@ export const shopShippingMethodsTable = pgTable('shop_shipping_methods', {
     price: numeric('price', { precision: 20, scale: 6 }).notNull(),
     vatRate: integer('vat_rate').notNull(),
     carrierType: text('carrier_type').$type().default('none').notNull(),
+    carrierConfig: jsonb('carrier_config').$type(),
     conditions: jsonb('conditions').$type(),
     allowedPaymentMethods: jsonb('allowed_payment_methods').$type(),
     isActive: boolean('is_active').default(true).notNull(),

package/dist/shop/adapters/inpost/geowidget.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Geowidget v5 (Web Component) config used by `<InpostPicker>` on the frontend.
+ * The token is a public read-only "geowidget v5" token from your InPost account
+ * (https://manager.paczkomaty.pl). It must be delivered to the browser — do not
+ * pass private ShipX tokens here.
+ *
+ * Docs: https://dokumentacja-inpost.atlassian.net/wiki/spaces/PL/pages/50069505/Geowidget+v5
+ */
+export type GeowidgetEnvironment = 'production' | 'sandbox';
+export type GeowidgetConfigPreset = 'parcelcollect' | 'parcelsend' | 'parcelcollect247' | string;
+export interface GeowidgetConfig {
+    token: string;
+    language: string;
+    config: GeowidgetConfigPreset;
+}
+export interface GeowidgetWidgetDescriptor {
+    scriptUrl: string;
+    stylesheetUrl: string;
+    config: GeowidgetConfig;
+}
+export interface GeowidgetBuildOptions {
+    token: string;
+    environment?: GeowidgetEnvironment;
+    language?: string;
+    config?: GeowidgetConfigPreset;
+}
+export declare function buildGeowidgetDescriptor(opts: GeowidgetBuildOptions): GeowidgetWidgetDescriptor;

package/dist/shop/adapters/inpost/geowidget.js

@@ -0,0 +1,31 @@
+/**
+ * Geowidget v5 (Web Component) config used by `<InpostPicker>` on the frontend.
+ * The token is a public read-only "geowidget v5" token from your InPost account
+ * (https://manager.paczkomaty.pl). It must be delivered to the browser — do not
+ * pass private ShipX tokens here.
+ *
+ * Docs: https://dokumentacja-inpost.atlassian.net/wiki/spaces/PL/pages/50069505/Geowidget+v5
+ */
+const GEOWIDGET_URLS = {
+    production: {
+        script: 'https://geowidget.inpost.pl/inpost-geowidget.js',
+        stylesheet: 'https://geowidget.inpost.pl/inpost-geowidget.css'
+    },
+    sandbox: {
+        script: 'https://sandbox-easy-geowidget-sdk.easypack24.net/inpost-geowidget.js',
+        stylesheet: 'https://sandbox-easy-geowidget-sdk.easypack24.net/inpost-geowidget.css'
+    }
+};
+export function buildGeowidgetDescriptor(opts) {
+    const env = opts.environment ?? 'production';
+    const urls = GEOWIDGET_URLS[env];
+    return {
+        scriptUrl: urls.script,
+        stylesheetUrl: urls.stylesheet,
+        config: {
+            token: opts.token,
+            language: opts.language ?? 'pl',
+            config: opts.config ?? 'parcelcollect'
+        }
+    };
+}

package/dist/shop/adapters/inpost/index.d.ts

@@ -0,0 +1,89 @@
+import type { CarrierAdapter, I18nText } from '../../types.js';
+import { type GeowidgetConfigPreset } from './geowidget.js';
+import { type InpostEnvironment } from './points-api.js';
+export interface InpostSenderAddress {
+    name: string;
+    company?: string;
+    street: string;
+    buildingNumber?: string;
+    city: string;
+    postCode: string;
+    countryCode?: string;
+    email: string;
+    phone: string;
+}
+export interface InpostAdapterOptions {
+    /**
+     * Public Geowidget v5 token (read-only). Delivered to the browser via
+     * `GET /api/shop/carriers/inpost`.
+     */
+    geowidgetToken: string;
+    /**
+     * Private ShipX organization-scoped token (`Bearer`). Used server-side for
+     * shipment creation, label fetching, cancellation. Optional in geowidget-only
+     * setups (Etap 2). Required for ShipX shipment operations (Etap 3).
+     */
+    shipxToken?: string;
+    /** ShipX organization ID, e.g. `123456`. Required when shipxToken is set. */
+    organizationId?: string;
+    /** `production` (default) or `sandbox`. Controls all ShipX endpoints. */
+    environment?: InpostEnvironment;
+    /**
+     * Shared secret used to authenticate webhook calls. Pass it as `?secret=`
+     * query in the `notifyUrl` you configure in the ShipX panel.
+     */
+    webhookSecret?: string;
+    /** Absolute URL ShipX should POST shipment events to. */
+    notifyUrl?: string;
+    /** Sender pickup address used for ShipX shipment creation. */
+    senderAddress?: InpostSenderAddress;
+    /**
+     * Tracking link template. `{trackingNumber}` is replaced. Default:
+     * `https://inpost.pl/sledzenie-przesylek?number={trackingNumber}`.
+     */
+    trackingUrlTemplate?: string;
+    /** Default geowidget preset. Default: `parcelCollect`. */
+    geowidgetPreset?: GeowidgetConfigPreset;
+    /** Default geowidget language. Default: `pl`. */
+    geowidgetLanguage?: string;
+    /** Cache TTL for Points API validation (ms). Default 5 min. */
+    pointsCacheTtlMs?: number;
+    /** Default ShipX label format (PDF). */
+    labelFormat?: 'Pdf' | 'ZebraLP';
+    /** Default ShipX label paper size. */
+    labelSize?: 'A4' | 'A6';
+    /** Additional ShipX services attached to every shipment (e.g. ['email', 'sms']). */
+    additionalServices?: string[];
+    /**
+     * After POST /shipments, automatically call POST /shipments/:id/buy to
+     * confirm the auto-selected offer. Required for accounts (esp. sandbox)
+     * where ShipX leaves shipments in `offer_selected` instead of paying
+     * automatically. Default `true`. Set `false` if your org is configured
+     * for full auto-pay or you handle confirmation yourself.
+     */
+    autoConfirm?: boolean;
+    /**
+     * Delay between POST /shipments and POST /shipments/:id/buy (ms). ShipX
+     * needs a brief moment to prepare the offer. Default 1500ms.
+     */
+    autoConfirmDelayMs?: number;
+    /**
+     * After POST /shipments/:id/buy, poll GET /shipments/:id every second
+     * until the status leaves `offer_selected` (becomes `confirmed` or further).
+     * ShipX buying is asynchronous — production is fast (~1s), sandbox can
+     * take minutes. Default 8000ms. Set 0 to disable polling and rely on
+     * the webhook to reconcile.
+     */
+    autoConfirmPollTimeoutMs?: number;
+    /**
+     * Verbose adapter logging — payload dumps, every poll tick, offer details.
+     * Off by default. Turn on when troubleshooting sandbox stalls or unexpected
+     * ShipX responses. Errors and the post-timeout stall warning always log.
+     */
+    debug?: boolean;
+    fetch?: typeof fetch;
+    id?: string;
+    label?: I18nText;
+}
+export declare function inpostAdapter(opts: InpostAdapterOptions): CarrierAdapter;
+export type { GeowidgetConfigPreset, InpostEnvironment };

package/dist/shop/adapters/inpost/index.js

@@ -0,0 +1,156 @@
+import { buildGeowidgetDescriptor } from './geowidget.js';
+import { buildShipmentPayload } from './payload.js';
+import { createPointsValidator } from './points-api.js';
+import { ShipxClient } from './shipx-client.js';
+import { parseShipxWebhook } from './webhook.js';
+const DEFAULT_LABEL = { pl: 'InPost', en: 'InPost' };
+const DEFAULT_TRACKING_TEMPLATE = 'https://inpost.pl/sledzenie-przesylek?number={trackingNumber}';
+export function inpostAdapter(opts) {
+    if (!opts.geowidgetToken) {
+        throw new Error('inpostAdapter: `geowidgetToken` is required.');
+    }
+    const id = opts.id ?? 'inpost';
+    const env = opts.environment ?? 'production';
+    const fetchFn = opts.fetch ?? globalThis.fetch.bind(globalThis);
+    const points = createPointsValidator({
+        environment: env,
+        fetch: fetchFn,
+        cacheTtlMs: opts.pointsCacheTtlMs
+    });
+    const widgetDesc = buildGeowidgetDescriptor({
+        token: opts.geowidgetToken,
+        environment: env,
+        language: opts.geowidgetLanguage,
+        config: opts.geowidgetPreset
+    });
+    const trackingTemplate = opts.trackingUrlTemplate ?? DEFAULT_TRACKING_TEMPLATE;
+    function requireShipx() {
+        if (!opts.shipxToken) {
+            throw new Error('inpostAdapter: `shipxToken` is required for ShipX shipment operations.');
+        }
+        if (!opts.organizationId) {
+            throw new Error('inpostAdapter: `organizationId` is required for ShipX shipment operations.');
+        }
+        return new ShipxClient({
+            token: opts.shipxToken,
+            organizationId: opts.organizationId,
+            environment: env,
+            fetch: fetchFn
+        });
+    }
+    return {
+        id,
+        label: opts.label ?? DEFAULT_LABEL,
+        widget: {
+            scriptUrl: widgetDesc.scriptUrl,
+            stylesheetUrl: widgetDesc.stylesheetUrl,
+            config: { ...widgetDesc.config }
+        },
+        async validateSelection(ref, ctx) {
+            const serviceType = ctx?.serviceType;
+            // Courier service ships to a street address — no parcel locker code expected.
+            if (!serviceType || serviceType.startsWith('inpost_courier_'))
+                return true;
+            if (!ref)
+                return false;
+            return points.validate(ref);
+        },
+        async createShipment(input) {
+            const client = requireShipx();
+            const debug = opts.debug === true;
+            const log = (msg) => {
+                if (debug)
+                    console.log(msg);
+            };
+            const payload = buildShipmentPayload({
+                input,
+                sender: opts.senderAddress,
+                additionalServices: opts.additionalServices
+            });
+            log(`[inpost] createShipment: order=${input.order.number} service=${input.serviceType} carrierRef=${input.carrierRef ?? '—'}`);
+            if (debug)
+                console.log('[inpost] payload →', JSON.stringify(payload, null, 2));
+            let shipment = await client.createShipment(payload);
+            log(`[inpost] POST /shipments → id=${shipment.id} status=${shipment.status} tracking=${shipment.tracking_number ?? 'null'}`);
+            if (opts.autoConfirm !== false) {
+                const delay = opts.autoConfirmDelayMs ?? 1500;
+                if (delay > 0) {
+                    await new Promise((resolve) => setTimeout(resolve, delay));
+                }
+                try {
+                    const fresh = await client.getShipment(shipment.id);
+                    log(`[inpost] shipment now: status=${fresh.status} selected_offer=${fresh.selected_offer?.id ?? 'null'} offers=${fresh.offers?.length ?? 0}`);
+                    const offerId = fresh.selected_offer?.id ??
+                        (Array.isArray(fresh.offers) && fresh.offers.length > 0
+                            ? fresh.offers[0].id
+                            : undefined);
+                    if (offerId == null) {
+                        throw new Error(`Shipment ${shipment.id} has no selected_offer / offers yet (status=${fresh.status})`);
+                    }
+                    log(`[inpost] POST /shipments/${shipment.id}/buy {offer_id: ${offerId}}`);
+                    const buyResult = await client.buyShipment(shipment.id, offerId);
+                    // Polling: ShipX buy is asynchronous. Wait until we leave the
+                    // offer_selected/created state, or give up and let the webhook reconcile.
+                    const pollTimeout = opts.autoConfirmPollTimeoutMs ?? 8000;
+                    const pollIntervalMs = 1000;
+                    const deadline = Date.now() + pollTimeout;
+                    shipment = buyResult;
+                    while (pollTimeout > 0 &&
+                        Date.now() < deadline &&
+                        (shipment.status === 'offer_selected' || shipment.status === 'created')) {
+                        await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+                        shipment = await client.getShipment(shipment.id);
+                        log(`[inpost] poll → status=${shipment.status} tracking=${shipment.tracking_number ?? 'null'}`);
+                    }
+                    log(`[inpost] final shipment: status=${shipment.status} tracking=${shipment.tracking_number ?? 'null'}`);
+                    if (shipment.status === 'offer_selected' || shipment.status === 'created') {
+                        console.warn(`[inpost] shipment ${shipment.id} still in '${shipment.status}' after ${pollTimeout}ms — sandbox often stalls here without a wallet/payment configured. Webhook will reconcile if/when ShipX completes the purchase.`);
+                    }
+                }
+                catch (err) {
+                    // Auto-confirm is best-effort. If the offer isn't ready, the
+                    // account is configured for full auto-pay, or the offer was
+                    // already bought, the webhook will reconcile the final status.
+                    console.warn(`[inpost] auto-confirm failed for shipment ${shipment.id} — webhook will reconcile.`);
+                    if (err instanceof Error) {
+                        console.warn(`[inpost] ${err.name}: ${err.message}`);
+                        const body = err.body;
+                        if (body !== undefined) {
+                            console.warn('[inpost] error body:', typeof body === 'string' ? body : JSON.stringify(body));
+                        }
+                    }
+                    else {
+                        console.warn('[inpost] auto-confirm error:', err);
+                    }
+                }
+            }
+            return {
+                shipmentId: String(shipment.id),
+                trackingNumber: shipment.tracking_number ?? '',
+                raw: shipment
+            };
+        },
+        async getShipmentLabel(shipmentId, labelOpts) {
+            const client = requireShipx();
+            const { contentType, body } = await client.getLabel(shipmentId, {
+                format: opts.labelFormat ?? 'Pdf',
+                type: labelOpts?.size ?? opts.labelSize ?? 'A6'
+            });
+            return {
+                contentType,
+                body,
+                filename: `inpost-${shipmentId}.pdf`
+            };
+        },
+        async cancelShipment(shipmentId) {
+            const client = requireShipx();
+            await client.cancelShipment(shipmentId);
+        },
+        async handleWebhook(req) {
+            return parseShipxWebhook(req, { secret: opts.webhookSecret });
+        },
+        trackingUrl(trackingNumber) {
+            return trackingTemplate.replace('{trackingNumber}', encodeURIComponent(trackingNumber));
+        }
+    };
+}

package/dist/shop/adapters/inpost/payload.d.ts

@@ -0,0 +1,18 @@
+import type { ShipmentCreateInput } from '../../types.js';
+import type { InpostSenderAddress } from './index.js';
+export declare function mapParcelSize(size: string | undefined): string;
+export declare function splitFullName(full: string | null | undefined): {
+    firstName?: string;
+    lastName?: string;
+};
+export interface BuildShipmentPayloadOptions {
+    input: ShipmentCreateInput;
+    sender?: InpostSenderAddress;
+    additionalServices?: string[];
+}
+/**
+ * Build a ShipX `POST /shipments` body for a given order. Locker services attach
+ * `custom_attributes.target_point` (paczkomat code from `carrierRef`); courier
+ * services use the receiver address from the order's shipping_address instead.
+ */
+export declare function buildShipmentPayload(opts: BuildShipmentPayloadOptions): Record<string, unknown>;