vonpay-medusa 1.1.1 → 1.2.1

package/.medusa/server/src/admin/index.js

@@ -9,6 +9,47 @@ const icons = require("@medusajs/icons");
 const react = require("react");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };
 const Medusa__default = /* @__PURE__ */ _interopDefault(Medusa);
+const TIME_SLOT = "{time}";
+function fillTime(text, at, format) {
+  return at && text.includes(TIME_SLOT) ? text.split(TIME_SLOT).join(format(at)) : text;
+}
+const NOT_SAVED_TEXT = "That couldn't be saved. The list is read again: check the row as it stands now before you try again.";
+const CHARGE_REASON_LABEL = {
+  renewal_outcome_unknown: "Renewal charge — result unknown",
+  renewal_not_settled: "Renewal charge not completed",
+  renewal_charged_unrecorded: "Renewal charged, order unpaid",
+  renewal_paid_twice: "Renewal charged — order also paid another way",
+  renewal_buyer_mismatch: "Renewal charged to a different customer",
+  upsell_outcome_unknown: "Offer charge — result unknown",
+  upsell_not_settled: "Offer charge not completed",
+  upsell_paid_not_added: "Offer paid, item not added",
+  upsell_paid_unsettled: "Offer paid — check the order",
+  upsell_paid_unrecorded: "Offer paid, payment not recorded",
+  upsell_hold_not_released: "Offer payment held — release not confirmed",
+  upsell_bank_check_open: "Offer bank check still open",
+  upsell_refund_failed: "Late offer charge — refund failed",
+  upsell_refund_unclear: "Late offer charge — refund unclear",
+  upsell_refund_pending: "Late offer charge — refund in progress",
+  upsell_refunded_late: "Late offer charge refunded",
+  upsell_hold_unsettled: "Offer payment held — not finished yet",
+  upsell_take_unconfirmed: "Offer payment — collection not confirmed"
+};
+const CHARGE_RESOLVED_HOW_LABEL = {
+  closed_blocking: "Closed by a person — no more renewal charges for this order",
+  freed: "Freed — later renewals of this order may charge the customer",
+  closed_no_change: "Closed by a person — no change to money"
+};
+function chargeHandStep(paymentIntentId) {
+  return { title: "Check this order in Vonpay", body: `Find ${paymentIntentId ? `payment ${paymentIntentId}` : "any payment"} in the Vonpay dashboard by the order id, and settle it there if it needs it.` };
+}
+const OFFER_CLOSED_MONEY_TEXT = {
+  upsell_paid_not_added: "The buyer paid for this offer. Closing this row did not refund it or add the item: that was yours to settle in Vonpay or on the order.",
+  upsell_paid_unsettled: "The buyer paid for this offer. Closing this row did not refund it or add the item: that was yours to settle in Vonpay or on the order.",
+  upsell_paid_unrecorded: "The buyer paid, and the item is on the order. Closing this row did not mark that balance paid in Medusa: that was yours to do.",
+  upsell_refund_failed: "The buyer was charged and the item was not added. Closing this row sent no refund: that was yours to send in Vonpay.",
+  upsell_refund_unclear: "The buyer was charged and the item was not added. Closing this row sent no refund: that was yours to send in Vonpay."
+};
+const OFFER_CLOSED_MONEY_DEFAULT = "Closing this row moved no money. What Vonpay holds for this payment is as it was.";
 const REASON_COPY = {
   deleted_while_charged: {
     label: "Charged, then cart changed",
@@ -82,78 +123,7 @@ const REASON_COPY = {
     label: "Paid, order not created",
     what: "The buyer paid, but Medusa did not create the order, even after the plugin retried it automatically. Check the cart and the payment in Vonpay, then complete the order with the buyer or refund it."
   },
-  renewal_outcome_unknown: {
-    label: "Renewal charge — result unknown",
-    what: "A subscription renewal charged the customer's saved card, but Vonpay's answer could not be read, so the customer may have been charged. No further renewal charge is sent for this order. Check the payment in Vonpay before charging or refunding anything."
-  },
-  renewal_not_settled: {
-    label: "Renewal charge not completed",
-    what: "Vonpay answered the subscription renewal charge, but the payment had not completed. No further renewal charge is sent for this order. Check the payment in Vonpay."
-  },
-  renewal_charged_unrecorded: {
-    label: "Renewal charged, order unpaid",
-    what: "Vonpay charged the customer's saved card for this subscription renewal, but Medusa's records do not show the payment, even after the plugin retried it automatically (or Medusa recorded it and then cancelled it). The customer has paid; the order shows unpaid. No further renewal charge is sent for this order. Find the payment in Vonpay by the order id, then mark the order paid in Medusa — do not charge again."
-  },
-  renewal_paid_twice: {
-    label: "Renewal charged — order also paid another way",
-    what: "Vonpay charged the customer's saved card for this subscription renewal, and the order was also marked paid another way. The customer may have paid twice. Check the payment in Vonpay and the order in Medusa, then refund the extra payment. No further renewal charge is sent for this order."
-  },
-  renewal_buyer_mismatch: {
-    label: "Renewal charged to a different customer",
-    what: "Vonpay recorded the subscription renewal charge against a different customer than the order's. No further renewal charge is sent for this order. Check the payment in Vonpay."
-  },
-  upsell_outcome_unknown: {
-    label: "Offer charge — result unknown",
-    what: "The buyer accepted an offer after their order and the plugin charged their card for it, but Vonpay's answer could not be read, so the buyer may have been charged. The item was NOT added to the order, and the plugin will not try that offer again. Check the payment in Vonpay by the order id: if it was charged, add the item to the order (or refund it in Vonpay); if not, cancel the open order edit in Medusa."
-  },
-  upsell_not_settled: {
-    label: "Offer charge not completed",
-    what: "The buyer accepted an offer after their order, and Vonpay answered the charge, but the payment had not completed. The item was NOT added to the order. Check the payment in Vonpay by the order id, then cancel the open order edit in Medusa if nothing was charged."
-  },
-  upsell_paid_not_added: {
-    label: "Offer paid, item not added",
-    what: "The buyer accepted an offer after their order and paid for it, but the item was NOT added to the order, even after the plugin retried. The buyer has paid. Either add the item to the order in Medusa, or refund the charge in Vonpay — not both, and do not charge again."
-  },
-  upsell_paid_unsettled: {
-    label: "Offer paid — check the order",
-    what: "The buyer accepted an offer after their order and paid for it, but the plugin could not finish recording it. Open the order first. If the item is on it, mark that balance paid in Medusa (do NOT refund — the item ships). If the item is not on it, either add it or refund the charge in Vonpay — not both. Never charge again."
-  },
-  upsell_paid_unrecorded: {
-    label: "Offer paid, payment not recorded",
-    what: "The buyer accepted an offer after their order and paid for it, and the item IS on the order, but Medusa did not record the payment, even after the plugin retried — so the order shows an unpaid balance. The buyer has paid. Find the payment in Vonpay by the order id and mark that balance paid in Medusa. Do NOT refund it (the item ships) and do not charge again."
-  },
-  upsell_hold_not_released: {
-    label: "Offer payment held — release not confirmed",
-    what: "The buyer approved an offer after their order with Apple Pay or Google Pay, which only held the money. The item could not be added, so the plugin released the hold, but Vonpay has not confirmed the release. Nothing was taken and the item was NOT added. The plugin keeps releasing it on every run. If this row stays, find the payment in Vonpay by the order id and void it there. Do not take it."
-  },
-  upsell_bank_check_open: {
-    label: "Offer bank check still open",
-    what: "The offer ended while the buyer's bank check was still open, so nothing was added and the order change was undone. If the bank approves it later, the plugin refunds it automatically. Nothing to do unless this stays for a few days; then check the payment in Vonpay by the order id."
-  },
-  upsell_refund_failed: {
-    label: "Late offer charge — refund failed",
-    what: "The buyer was charged for an offer whose item was NOT added to the order — the bank approved it after the offer had ended, the item could not be added, or an earlier declined attempt was approved after all — so the plugin tried to refund that charge in full, but the refund did not go through (refused, or not settled within 48 hours). Refund the payment in Vonpay by the order id. Do not add the item."
-  },
-  upsell_refund_unclear: {
-    label: "Late offer charge — refund unclear",
-    what: "The buyer was charged for an offer whose item was NOT added to the order, and the plugin's automatic refund got an unclear answer: Vonpay reported an error, then recorded that refund as failed, but the money may have gone back anyway. The plugin will not send another refund. First check the payment in Vonpay by the order id: refund it there ONLY if no refund went through. Do not add the item."
-  },
-  upsell_refund_pending: {
-    label: "Late offer charge — refund in progress",
-    what: "The buyer's bank approved an offer after the offer had ended, so nothing was added and the plugin is refunding the charge in full. It keeps retrying. If this row stays for a day, refund the payment in Vonpay by the order id."
-  },
-  upsell_refunded_late: {
-    label: "Late offer charge refunded",
-    what: "The buyer's bank approved an offer after the offer had ended, so nothing was added and the plugin refunded the charge in full. Nothing to do."
-  },
-  upsell_hold_unsettled: {
-    label: "Offer payment held — not finished yet",
-    what: "The buyer approved an offer after their order with Apple Pay or Google Pay, which only held the money, and the plugin has not finished it yet. Nothing was taken. The plugin keeps working on it: it adds the item and takes the money, or releases the hold if the item cannot be added. Do not take or void it yourself unless this row stays for more than a day; then check the payment in Vonpay by the order id."
-  },
-  upsell_take_unconfirmed: {
-    label: "Offer payment — collection not confirmed",
-    what: "The buyer approved an offer after their order with Apple Pay or Google Pay, and the plugin asked Vonpay to take the held money, but Vonpay has not confirmed whether it was taken. The plugin re-checks it on every run: if it was taken, the plugin adds the item; if it was released, it closes the open order edit. Check the payment in Vonpay by the order id. Do not take it again."
-  },
+  ...Object.fromEntries(Object.entries(CHARGE_REASON_LABEL).map(([reason, label]) => [reason, { label }])),
   cancel_refund_missing: {
     label: "Cancelled, refund failed",
     what: "The order was cancelled, but Medusa's refund to the buyer did not go through. The buyer may still be charged."
@@ -207,6 +177,7 @@ const RESOLVED_HOW_LABEL = {
   refunded_earlier: "Already refunded with this payment's key (for example from the command line)",
   nothing_left: "Vonpay showed nothing left to refund — confirm in the Vonpay dashboard that the buyer got it back",
   marked: "Marked resolved",
+  ...CHARGE_RESOLVED_HOW_LABEL,
   auto_closed: "Closed automatically — Vonpay confirmed nothing was charged and the payment can no longer be used",
   paid_after_auto_close: "Re-opened automatically — money arrived after the automatic close",
   paid_after_resolution: "Re-opened automatically — Vonpay reported this payment as paid after it was marked resolved",
@@ -250,6 +221,9 @@ function isConfirmedRefund(row) {
 function canRefund(row) {
   return row.vp_session_id !== null && !isConfirmedRefund(row) && !isAutoClosed(row) && !isUnrecognisedRecord(row) && REFUNDABLE_REASONS.includes(row.reason);
 }
+function isChargeRow(row) {
+  return row.source === "renewal" || row.source === "upsell";
+}
 function canRelease(row) {
   return row.source === "collection" && row.vp_session_id !== null && row.status === "open" && WALLET_REASONS.includes(row.reason);
 }
@@ -257,9 +231,20 @@ function canComplete(row) {
   return row.source === "collection" && row.vp_session_id !== null && row.status === "open" && row.reason === "wallet_held_no_order";
 }
 function canMarkResolved(row) {
+  if (isChargeRow(row)) return false;
   return row.vp_session_id !== null && row.status !== "resolved" && !isUnrecognisedRecord(row) && !WALLET_REASONS.includes(row.reason) && !TAKE_REASONS.includes(row.reason);
 }
 function locatorFor(row) {
+  if (isChargeRow(row)) {
+    return {
+      source: row.source,
+      payment_collection_id: row.payment_collection_id,
+      ...row.order_id ? { order_id: row.order_id } : {},
+      ...row.medusa_payment_session_id ? { medusa_payment_session_id: row.medusa_payment_session_id } : {},
+      ...row.acceptance_id ? { acceptance_id: row.acceptance_id } : {},
+      ...row.prior_intent_id ? { prior_intent_id: row.prior_intent_id } : {}
+    };
+  }
   return {
     source: row.source,
     vp_session_id: row.vp_session_id ?? "",
@@ -269,6 +254,9 @@ function locatorFor(row) {
   };
 }
 function resolutionSteps(row) {
+  if (isChargeRow(row)) {
+    return [chargeHandStep(row.vp_payment_intent_id)];
+  }
   if (!row.vp_session_id || row.reason === "unrecognised") {
     return [{ title: "Check this payment in Vonpay", body: "Find the payment in the Vonpay dashboard before refunding or fulfilling anything." }];
   }
@@ -348,6 +336,14 @@ function reconcileCopy(o) {
 function markConfirmMatches(typed, row) {
   return row.vp_session_id !== null && typed.trim() === row.vp_session_id;
 }
+function closedMoneyNote(row) {
+  if (row.status !== "resolved" || row.resolution?.how !== "closed_no_change") return null;
+  return OFFER_CLOSED_MONEY_TEXT[row.reason] ?? OFFER_CLOSED_MONEY_DEFAULT;
+}
+function chargedUncheckedNote(count) {
+  if (!(count > 0)) return null;
+  return `${count} paid ${count === 1 ? "renewal was" : "renewals were"} not checked against Medusa on this load, because a load checks a limited number or Medusa did not answer. One that Medusa has no record of may be missing from this list. Reload to check the next ones.`;
+}
 const REFUSAL_TEXT = {
   hold_release_not_eligible: "Only a held wallet payment can be released here. Nothing was changed.",
   hold_release_payment_active: "This held payment belongs to an order. Take it or cancel it from the order. Nothing was changed.",
@@ -369,7 +365,7 @@ const REFUSAL_TEXT = {
   hold_refund_auto_closed: "This payment was closed automatically because Vonpay confirmed nothing was charged. There's nothing to refund.",
   hold_refund_not_eligible: "This held payment has no single charge that can be refunded from here. Nothing was refunded — check it in Vonpay.",
   hold_record_unrecognised: "This payment's record in the list isn't one the plugin recognises. Nothing was changed — check it in Vonpay.",
-  refund_refused: "Vonpay refused the refund. Nothing was refunded.",
+  refund_refused: "Vonpay refused the refund. Nothing was refunded. If the buyer already has the money back (a dispute, or a refund made in the Vonpay dashboard), close this row with Mark resolved.",
   refund_exceeds_remaining: "Vonpay shows nothing left to refund on this payment. Nothing new was refunded.",
   hold_provider_unavailable: "The Vonpay payment provider couldn't be reached from the admin. Nothing was changed — try again.",
   hold_provider_ambiguous: "More than one Vonpay provider could own this payment. Nothing was changed — check the store's payment setup.",
@@ -377,7 +373,7 @@ const REFUSAL_TEXT = {
   hold_refund_key_conflict: "A refund with this payment's key was already made with different details (for example a partial amount from the command line). Nothing new was refunded — check it in Vonpay.",
   refund_declined: "The payment provider declined the refund. No money moved.",
   refund_not_completed: "Vonpay recorded this refund as failed. No money moved.",
-  hold_refund_not_refundable_now: "Vonpay says nothing can be refunded on this payment right now (not settled yet, disputed, or already refunded). Nothing was refunded.",
+  hold_refund_not_refundable_now: "Vonpay says nothing can be refunded on this payment right now (not settled yet, disputed, or already refunded). Nothing was refunded. Once the buyer has the money back (a dispute, or a refund made in the Vonpay dashboard), close this row with Mark resolved; if it has not settled yet, try again later.",
   hold_checkout_busy: "The buyer's checkout for this payment is in progress right now. Nothing was changed — try again in a moment.",
   hold_checkout_lock_unavailable: "This payment's checkout couldn't be locked, so nothing was changed. Check the store's locking setup, or refund from the command line.",
   hold_recheck_failed: "The order couldn't be re-checked just before acting. Nothing was changed — try again.",
@@ -387,6 +383,14 @@ const REFUSAL_TEXT = {
   hold_refund_payment_active: "This payment now belongs to an order that isn't cancelled. Nothing was refunded — refund it from the order.",
   hold_resolve_wallet_held: "Use Release for a held wallet payment. It checks Vonpay first, then releases the hold, lists it for a refund, or clears it with its order. Nothing was changed.",
   hold_resolve_payment_active: "This payment now belongs to an order that isn't cancelled, so it isn't held. Nothing was changed.",
+  move_request_invalid: "That request was missing the payment's ids. Run the check again. Nothing was changed.",
+  hold_resolve_confirm_mismatch: "To mark a payment resolved, type its Vonpay session id exactly as the row shows it. Nothing was changed.",
+  move_not_listed: "This payment isn't one the check lists any more (it may have become an order, or already be on Held payments). Run the check again. Nothing was changed.",
+  move_not_paid: "Vonpay doesn't show money taken or held on this payment, so there is nothing to move. Nothing was changed.",
+  move_refunded: "Vonpay shows this payment refunded in full (or a full refund still in progress), so there is nothing to move. Nothing was changed.",
+  move_not_this_checkout: "Vonpay's record of this payment names a different checkout. Check it in the Vonpay dashboard. Nothing was changed.",
+  move_lock_not_shared: "The command can't move a payment on a store without a shared lock (Redis or Postgres locking). Use the Move to Held payments button in the admin instead. Nothing was changed.",
+  move_vonpay_unavailable: "Vonpay couldn't be reached to check this payment again. Nothing was changed — try again shortly.",
   hold_not_found: "This held payment is no longer on the list. It may already have been completed, released or refunded. Reload the list and check the order."
 };
 function outcomeCopy(o) {
@@ -456,6 +460,23 @@ function completeOutcomeCopy(o) {
       return UNKNOWN_OUTCOME;
   }
 }
+function moveOutcomeCopy(o) {
+  switch (o.outcome) {
+    case "moved":
+      return {
+        variant: "success",
+        text: o.reason === "wallet_held_no_order" ? "Moved to Held payments. Release the held payment or complete the order there." : "Moved to Held payments. Refund it or mark it resolved there."
+      };
+    case "already_held":
+      return { variant: "success", text: "It is already on Held payments. Nothing was changed." };
+    case "ordered":
+      return { variant: "warning", text: "An order holds this payment now, so it was not moved. Nothing was changed." };
+    case "refused":
+      return { variant: "error", text: o.code && REFUSAL_TEXT[o.code] || "That couldn't be done. Nothing was changed." };
+    default:
+      return UNKNOWN_OUTCOME;
+  }
+}
 function resolveOutcomeCopy(o) {
   if (o.outcome === "refused") return { variant: "error", text: o.code && REFUSAL_TEXT[o.code] || "That couldn't be done. Nothing was changed." };
   if (!o.recorded) return { variant: "warning", text: "Couldn't save that. Try again." };
@@ -466,6 +487,7 @@ const authType = typeof __AUTH_TYPE__ !== "undefined" && __AUTH_TYPE__ ? __AUTH_
 const sdk = new Medusa__default.default({ baseUrl: backendUrl, auth: { type: authType } });
 const HELD_PAGE_SIZE = 20;
 const LIST_KEY = "vonpay-held-payments";
+const HELD_LIST_KEY = LIST_KEY;
 function useHeldPayments(page) {
   const status = page.status ?? "open";
   return reactQuery.useQuery({
@@ -528,6 +550,22 @@ function useMarkResolved() {
     onSettled: () => qc.invalidateQueries({ queryKey: [LIST_KEY] })
   });
 }
+function useChargeAction() {
+  const qc = reactQuery.useQueryClient();
+  return reactQuery.useMutation({
+    mutationFn: (v) => sdk.client.fetch("/admin/vonpay/holds/resolve", {
+      method: "POST",
+      body: {
+        ...locatorFor(v.row),
+        action: v.action,
+        ...v.typed_order_id !== void 0 ? { confirm_order_id: v.typed_order_id.trim(), confirm_checked_in_vonpay: v.checked_in_vonpay === true } : {},
+        ...v.action === "close_unreadable" && v.row.record_sha256 ? { confirm_record_sha256: v.row.record_sha256 } : {}
+      }
+    }),
+    retry: false,
+    onSettled: () => qc.invalidateQueries({ queryKey: [LIST_KEY] })
+  });
+}
 function useReconcileHold() {
   const qc = reactQuery.useQueryClient();
   return reactQuery.useMutation({
@@ -632,8 +670,42 @@ function useSetupCheck() {
     retry: false
   });
 }
+function useMoveToHeld() {
+  const qc = reactQuery.useQueryClient();
+  return reactQuery.useMutation({
+    mutationFn: (m) => sdk.client.fetch("/admin/vonpay/setup-check/move-to-held", { method: "POST", body: { vp_session_id: m.vp_session_id, medusa_payment_session_id: m.medusa_payment_session_id } }),
+    retry: false,
+    onSettled: () => qc.invalidateQueries({ queryKey: [HELD_LIST_KEY] })
+  });
+}
 const LABEL = { pass: "OK", warn: "Check", fail: "Fix", not_checked: "Not checked" };
 const COLOR = { pass: "green", warn: "orange", fail: "red", not_checked: "grey" };
+function uniqueMoves(moves) {
+  const seen = /* @__PURE__ */ new Set();
+  return (moves ?? []).filter((m) => !seen.has(m.vp_session_id) && (seen.add(m.vp_session_id), true));
+}
+const MoveRow = ({ move }) => {
+  const mutation = useMoveToHeld();
+  const [result, setResult] = react.useState(null);
+  const done = result !== null && result.variant !== "error";
+  return /* @__PURE__ */ jsxRuntime.jsxs("li", { className: "flex flex-col gap-y-1 sm:flex-row sm:items-center sm:gap-x-3", children: [
+    /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "font-mono", children: move.vp_session_id }),
+    !done && /* @__PURE__ */ jsxRuntime.jsx(
+      ui.Button,
+      {
+        size: "small",
+        variant: "secondary",
+        isLoading: mutation.isPending,
+        onClick: () => mutation.mutate(move, {
+          onSuccess: (o) => setResult(moveOutcomeCopy(o)),
+          onError: () => setResult({ variant: "error", text: "That couldn't be done. Nothing was changed — try again." })
+        }),
+        children: "Move to Held payments"
+      }
+    ),
+    result && /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: result.variant === "error" ? "text-ui-fg-error" : "text-ui-fg-subtle", children: result.text })
+  ] });
+};
 const SetupCheckPanel = () => {
   const check = useSetupCheck();
   const items = check.data?.items ?? [];
@@ -652,7 +724,8 @@ const SetupCheckPanel = () => {
         /* @__PURE__ */ jsxRuntime.jsx(ui.StatusBadge, { color: COLOR[i.status], className: "w-fit shrink-0", children: LABEL[i.status] }),
         /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col", children: [
           /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", children: i.detail }),
-          i.fix && /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: i.fix })
+          i.fix && /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: i.fix }),
+          uniqueMoves(i.moves).length > 0 && /* @__PURE__ */ jsxRuntime.jsx("ul", { className: "mt-2 flex flex-col gap-y-2", "aria-label": "Paid checkouts with no order", children: uniqueMoves(i.moves).map((m) => /* @__PURE__ */ jsxRuntime.jsx(MoveRow, { move: m }, m.vp_session_id)) })
         ] })
       ] }, `${i.id}:${i.provider ?? ""}:${n}`)) })
     ] })
@@ -825,6 +898,130 @@ const MarkResolvedAction = ({ row, onResult }) => {
     ] }) })
   ] });
 };
+const localTime = (iso) => new Date(iso).toLocaleString();
+const TIMER_MAX_MS = 2147483647;
+const REPOLL_MS = 15e3;
+const REPOLL_MAX = 8;
+const ChargeActions = ({ row, listAt, onResult }) => {
+  const [answered, setAnswer] = react.useState(null);
+  const answer = answered && !(listAt > answered.receivedAt) ? answered : null;
+  const [asking, setAsking] = react.useState(null);
+  const [typed, setTyped] = react.useState("");
+  const [checked, setChecked] = react.useState(false);
+  const act = useChargeAction();
+  const qc = reactQuery.useQueryClient();
+  const rowSays = JSON.stringify([row.held_at, row.actions ?? null, row.hint ?? null]);
+  react.useEffect(() => setAnswer(null), [rowSays]);
+  const actions = answer?.actions ?? row.actions ?? [];
+  const hint = answer ? answer.hint : row.hint ?? null;
+  const closedUntil = actions.filter((a) => !a.available && a.available_at).map((a) => Date.parse(a.available_at)).filter((t) => Number.isFinite(t));
+  const opensAt = closedUntil.filter((t) => t > Date.now());
+  const nextOpen = opensAt.length > 0 ? Math.min(...opensAt) : null;
+  react.useEffect(() => {
+    if (nextOpen === null) return;
+    const timer = setTimeout(() => {
+      setAnswer(null);
+      void qc.invalidateQueries({ queryKey: [HELD_LIST_KEY] });
+    }, Math.min(TIMER_MAX_MS, Math.max(0, nextOpen - Date.now()) + 1e3));
+    return () => clearTimeout(timer);
+  }, [nextOpen, qc]);
+  const overdue = closedUntil.filter((t) => t <= Date.now());
+  const pastDue = overdue.length > 0 ? Math.min(...overdue) : null;
+  const repolls = react.useRef(0);
+  react.useEffect(() => {
+    if (pastDue === null || repolls.current >= REPOLL_MAX) return;
+    const timer = setTimeout(() => {
+      repolls.current += 1;
+      void qc.invalidateQueries({ queryKey: [HELD_LIST_KEY] });
+    }, REPOLL_MS);
+    return () => clearTimeout(timer);
+  }, [pastDue, listAt, qc]);
+  const run = (a) => act.mutate(
+    { row, action: a.id, ...a.confirm === "type_order_id" ? { typed_order_id: typed, checked_in_vonpay: checked } : {} },
+    {
+      onSuccess: (o) => {
+        if (o.recorded === false || o.outcome === "not_saved") {
+          setAnswer({ ...o, actions: [], hint: null, receivedAt: Date.now() });
+          onResult({ variant: "warning", text: NOT_SAVED_TEXT });
+          void qc.invalidateQueries({ queryKey: [HELD_LIST_KEY] });
+          return;
+        }
+        setAnswer({ ...o, receivedAt: Date.now() });
+        onResult({ variant: o.tone, text: fillTime(o.text, o.at, localTime) });
+      },
+      onError: (e) => {
+        const f = postFailure(e);
+        onResult(f.variant === "error" ? f : { variant: "warning", text: "Couldn't confirm the outcome. Reload the list." });
+      },
+      onSettled: () => setAsking(null)
+    }
+  );
+  const typedOk = !asking || asking.confirm !== "type_order_id" || typed.trim() === row.order_id && checked;
+  const inputId = `vonpay-charge-confirm-${row.payment_collection_id}-${row.medusa_payment_session_id ?? row.acceptance_id ?? ""}`;
+  return /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col gap-y-2", children: [
+    hint && /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-subtle", children: fillTime(hint.text, hint.at, localTime) }),
+    actions.length > 0 && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "flex flex-wrap gap-2", children: actions.map((a) => /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col gap-y-1", children: [
+      /* @__PURE__ */ jsxRuntime.jsx(
+        ui.Button,
+        {
+          size: "small",
+          variant: a.id === "check" ? "primary" : "secondary",
+          disabled: !a.available || act.isPending,
+          isLoading: act.isPending && (asking?.id === a.id || a.id === "check" && !asking),
+          onClick: () => {
+            if (!a.available) return;
+            if (!a.confirm) {
+              run(a);
+              return;
+            }
+            setTyped("");
+            setChecked(false);
+            setAsking(a);
+          },
+          children: a.label
+        }
+      ),
+      !a.available && a.available_at && /* @__PURE__ */ jsxRuntime.jsxs(ui.Text, { size: "xsmall", className: "text-ui-fg-muted", children: [
+        "Opens ",
+        localTime(a.available_at)
+      ] })
+    ] }, a.id)) }),
+    /* @__PURE__ */ jsxRuntime.jsx(ui.Prompt, { open: asking !== null, onOpenChange: (o) => !act.isPending && !o && setAsking(null), variant: "confirmation", children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Prompt.Content, { children: [
+      /* @__PURE__ */ jsxRuntime.jsxs(ui.Prompt.Header, { children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(ui.Prompt.Title, { children: [
+          asking?.label.replace(/…$/, ""),
+          "?"
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx(ui.Prompt.Description, { children: asking?.confirm_text })
+      ] }),
+      asking?.confirm === "type_order_id" && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col gap-y-2 px-6 pb-4", children: [
+        /* @__PURE__ */ jsxRuntime.jsxs(ui.Label, { htmlFor: inputId, size: "small", children: [
+          "Type the order id to confirm: ",
+          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "font-mono", children: row.order_id })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx(ui.Input, { id: inputId, size: "small", autoComplete: "off", value: typed, onChange: (e) => setTyped(e.target.value) }),
+        /* @__PURE__ */ jsxRuntime.jsxs("label", { className: "flex items-center gap-x-2", children: [
+          /* @__PURE__ */ jsxRuntime.jsx("input", { type: "checkbox", checked, onChange: (e) => setChecked(e.target.checked) }),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "txt-compact-small", children: "I checked this order in the Vonpay dashboard" })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs(ui.Prompt.Footer, { children: [
+        /* @__PURE__ */ jsxRuntime.jsx(ui.Prompt.Cancel, { disabled: act.isPending, children: "Cancel" }),
+        /* @__PURE__ */ jsxRuntime.jsx(
+          ui.Prompt.Action,
+          {
+            disabled: act.isPending || !typedOk,
+            onClick: (e) => {
+              e.preventDefault();
+              if (asking && typedOk) run(asking);
+            },
+            children: asking?.label.replace(/…$/, "")
+          }
+        )
+      ] })
+    ] }) })
+  ] });
+};
 const WalletHoldAction = ({ row, kind, onResult }) => {
   const [open, setOpen] = react.useState(false);
   const release = useReleaseHold();
@@ -860,7 +1057,7 @@ const WalletHoldAction = ({ row, kind, onResult }) => {
     ] }) })
   ] });
 };
-const HoldDrawer = ({ row, onClose }) => {
+const HoldDrawer = ({ row, listAt, onClose }) => {
   const copy = row ? reasonCopy(row.reason) : void 0;
   const known = row ? isKnownStatus(row.status) && !isUnrecognisedRecord(row) : false;
   const showRefund = !!row && known && canRefund(row);
@@ -877,7 +1074,7 @@ const HoldDrawer = ({ row, onClose }) => {
   return /* @__PURE__ */ jsxRuntime.jsx(ui.Drawer, { open: row !== null, onOpenChange: (open) => !open && close(), children: /* @__PURE__ */ jsxRuntime.jsxs(ui.Drawer.Content, { children: [
     /* @__PURE__ */ jsxRuntime.jsxs(ui.Drawer.Header, { children: [
       /* @__PURE__ */ jsxRuntime.jsx(ui.Drawer.Title, { children: copy?.label ?? "Held payment" }),
-      /* @__PURE__ */ jsxRuntime.jsx(ui.Drawer.Description, { children: copy?.what })
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Drawer.Description, { children: row && isChargeRow(row) ? void 0 : copy?.what })
     ] }),
     row && /* @__PURE__ */ jsxRuntime.jsxs(ui.Drawer.Body, { className: "flex flex-col gap-y-6 overflow-y-auto", children: [
       /* @__PURE__ */ jsxRuntime.jsxs("dl", { className: "grid grid-cols-[auto_1fr] gap-x-4 gap-y-2", children: [
@@ -902,6 +1099,10 @@ const HoldDrawer = ({ row, onClose }) => {
           /* @__PURE__ */ jsxRuntime.jsx("dt", { className: "txt-compact-small text-ui-fg-subtle", children: "Order" }),
           /* @__PURE__ */ jsxRuntime.jsx("dd", { children: /* @__PURE__ */ jsxRuntime.jsx(Mono, { value: row.order_id, label: "order id" }) })
         ] }),
+        row.vp_payment_intent_id && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+          /* @__PURE__ */ jsxRuntime.jsx("dt", { className: "txt-compact-small text-ui-fg-subtle", children: "Vonpay payment" }),
+          /* @__PURE__ */ jsxRuntime.jsx("dd", { children: /* @__PURE__ */ jsxRuntime.jsx(Mono, { value: row.vp_payment_intent_id, label: "Vonpay payment id" }) })
+        ] }),
         /* @__PURE__ */ jsxRuntime.jsx("dt", { className: "txt-compact-small text-ui-fg-subtle", children: "Vonpay session" }),
         /* @__PURE__ */ jsxRuntime.jsx("dd", { children: /* @__PURE__ */ jsxRuntime.jsx(Mono, { value: row.vp_session_id, label: "Vonpay session id" }) }),
         /* @__PURE__ */ jsxRuntime.jsx("dt", { className: "txt-compact-small text-ui-fg-subtle", children: "Medusa payment session" }),
@@ -930,6 +1131,7 @@ const HoldDrawer = ({ row, onClose }) => {
         ] })
       ] }),
       result && /* @__PURE__ */ jsxRuntime.jsx(ui.Alert, { variant: result.variant, children: result.text }),
+      closedMoneyNote(row) && /* @__PURE__ */ jsxRuntime.jsx(ui.Alert, { variant: "warning", children: closedMoneyNote(row) }),
       (showRefund || showMark || showRelease || showComplete || showOpenOrder) && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-wrap gap-2", children: [
         showOpenOrder && /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { size: "small", variant: "primary", asChild: true, children: /* @__PURE__ */ jsxRuntime.jsx(reactRouterDom.Link, { to: orderPath(row.order_id), children: "Open order" }) }),
         showComplete && /* @__PURE__ */ jsxRuntime.jsx(WalletHoldAction, { row, kind: "complete", onResult: setResult }),
@@ -938,6 +1140,7 @@ const HoldDrawer = ({ row, onClose }) => {
         showRefund && /* @__PURE__ */ jsxRuntime.jsx(CheckWithVonpayAction, { row, onResult: setResult }),
         showMark && /* @__PURE__ */ jsxRuntime.jsx(MarkResolvedAction, { row, onResult: setResult })
       ] }),
+      row && isChargeRow(row) && /* @__PURE__ */ jsxRuntime.jsx(ChargeActions, { row, listAt, onResult: setResult }, `${row.payment_collection_id}:${row.medusa_payment_session_id ?? row.acceptance_id ?? ""}:${row.prior_intent_id ?? ""}`),
       /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col gap-y-4", children: [
         /* @__PURE__ */ jsxRuntime.jsx(ui.Heading, { level: "h3", children: "Or do it by hand" }),
         steps.map((step) => /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col gap-y-2", children: [
@@ -948,7 +1151,7 @@ const HoldDrawer = ({ row, onClose }) => {
             /* @__PURE__ */ jsxRuntime.jsx(ui.CodeBlock.Body, {})
           ] })
         ] }, step.title)),
-        /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-muted", children: STILL_LISTED_NOTE })
+        !isChargeRow(row) && /* @__PURE__ */ jsxRuntime.jsx(ui.Text, { size: "small", className: "text-ui-fg-muted", children: STILL_LISTED_NOTE })
       ] })
     ] })
   ] }) });
@@ -958,11 +1161,11 @@ const HeldPaymentsPage = () => {
   const [pageIndex, setPageIndex] = react.useState(0);
   const [filter, setFilter] = react.useState("open");
   const [opened, setOpened] = react.useState(null);
-  const { data, isLoading, isError, refetch } = useHeldPayments({ limit: HELD_PAGE_SIZE, offset: pageIndex * HELD_PAGE_SIZE, status: filter });
+  const { data, dataUpdatedAt, isLoading, isError, refetch } = useHeldPayments({ limit: HELD_PAGE_SIZE, offset: pageIndex * HELD_PAGE_SIZE, status: filter });
   const count = data?.count ?? 0;
   const remainder = count % HELD_PAGE_SIZE;
   const pageCount = Math.max(1, (count - remainder) / HELD_PAGE_SIZE + (remainder > 0 ? 1 : 0));
-  const keyOf = (row) => `${row.payment_collection_id}:${row.vp_session_id ?? "unreadable"}:${row.source}:${row.payment_id ?? ""}:${row.medusa_payment_session_id ?? ""}`;
+  const keyOf = (row) => `${row.payment_collection_id}:${row.vp_session_id ?? "unreadable"}:${row.source}:${row.payment_id ?? ""}:${row.medusa_payment_session_id ?? ""}:${row.acceptance_id ?? ""}:${row.prior_intent_id ?? ""}`;
   const open = opened ? data?.holds.find((r) => keyOf(r) === keyOf(opened)) ?? opened : null;
   const onRowKey = (row) => (e) => {
     if (e.key === "Enter" || e.key === " ") {
@@ -994,6 +1197,8 @@ const HeldPaymentsPage = () => {
         ) })
       ] }),
       data && !data.scan_complete && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "px-6 py-4", children: /* @__PURE__ */ jsxRuntime.jsx(ui.Alert, { variant: "warning", children: "This list may be incomplete: the store has more records than one page load can check." }) }),
+      data?.job?.filter((j) => j.banner).map((j) => /* @__PURE__ */ jsxRuntime.jsx("div", { className: "px-6 py-4", children: /* @__PURE__ */ jsxRuntime.jsx(ui.Alert, { variant: "warning", children: j.banner }) }, j.mode)),
+      data && chargedUncheckedNote(data.charged_unchecked) && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "px-6 py-4", children: /* @__PURE__ */ jsxRuntime.jsx(ui.Alert, { variant: "warning", children: chargedUncheckedNote(data.charged_unchecked) }) }),
       isError ? /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex flex-col items-start gap-y-3 px-6 py-6", children: [
         /* @__PURE__ */ jsxRuntime.jsx(ui.Alert, { variant: "error", children: "Couldn't load held payments." }),
         /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { size: "small", variant: "secondary", onClick: () => refetch(), children: "Try again" })
@@ -1045,7 +1250,7 @@ const HeldPaymentsPage = () => {
           }
         )
       ] }),
-      /* @__PURE__ */ jsxRuntime.jsx(HoldDrawer, { row: open, onClose: () => setOpened(null) })
+      /* @__PURE__ */ jsxRuntime.jsx(HoldDrawer, { row: open, listAt: dataUpdatedAt, onClose: () => setOpened(null) })
     ] }),
     /* @__PURE__ */ jsxRuntime.jsx(SetupCheckPanel, {})
   ] });