@hartl-services/medusa-affiliate 0.3.0

package/.medusa/server/src/workflows/hooks/enforce-unique-promotion-codes.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
+const utils_1 = require("@medusajs/framework/utils");
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+const promotion_code_availability_1 = require("../../utils/promotion-code-availability");
+/**
+ * Rejects a promotion whose code equals another promotion's code ignoring
+ * case (see `utils/promotion-code-availability.ts`). Runs after Medusa has
+ * written the promotion, so throwing here makes the workflow compensate and
+ * remove it again - the Admin user sees the error, nothing is left behind.
+ * Affiliate coupons are covered through the promotion each one provisions.
+ */
+const assertNoCaseInsensitiveDuplicates = async (promotions, promotionService) => {
+    const ownIds = promotions.map(({ id }) => id);
+    for (const promotion of promotions) {
+        if (!promotion.code)
+            continue;
+        const [owner] = await (0, promotion_code_availability_1.findPromotionsWithCodeIgnoringCase)(promotionService, promotion.code, { except_promotion_ids: ownIds });
+        if (owner) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.DUPLICATE_ERROR, (0, promotion_code_availability_1.promotionCodeTakenMessage)(promotion.code, owner));
+        }
+    }
+};
+core_flows_1.createPromotionsWorkflow.hooks.promotionsCreated(async ({ promotions }, { container }) => {
+    await assertNoCaseInsensitiveDuplicates(promotions, container.resolve(utils_1.Modules.PROMOTION));
+    return new workflows_sdk_1.StepResponse(undefined);
+});
+core_flows_1.updatePromotionsWorkflow.hooks.promotionsUpdated(async ({ promotions }, { container }) => {
+    await assertNoCaseInsensitiveDuplicates(promotions, container.resolve(utils_1.Modules.PROMOTION));
+    return new workflows_sdk_1.StepResponse(undefined);
+});
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/hooks/validate-affiliate-customer-code.js

@@ -0,0 +1,239 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateAffiliateCustomerCode = exports.isCodeReapplication = void 0;
+const Sentry = __importStar(require("@sentry/node"));
+const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
+const utils_1 = require("@medusajs/framework/utils");
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+const email_normalization_1 = require("../../modules/affiliate/domain/email-normalization");
+const resolve_services_1 = require("../../utils/resolve-services");
+const cart_promotions_1 = require("../../utils/cart-promotions");
+const affiliate_promotion_mutation_authorization_1 = require("../../utils/affiliate-promotion-mutation-authorization");
+const apply_affiliate_coupon_1 = require("../affiliate/apply-affiliate-coupon");
+const affiliate_coupon_cart_1 = require("../affiliate/affiliate-coupon-cart");
+const promotion_eligibility_1 = require("../affiliate/promotion-eligibility");
+const canonicalCode = (code) => code.trim().toUpperCase();
+/**
+ * True when the requested mutation neither introduces nor drops a code
+ * compared to what the cart already carries: an ADD of codes that are all
+ * applied already, or a REPLACE with exactly the applied set (which is what
+ * Medusa's own cart refresh sends).
+ */
+const isCodeReapplication = (action, requestedCodes, cartPromotions) => {
+    const applied = new Set(cartPromotions.flatMap(({ code }) => (code ? [canonicalCode(code)] : [])));
+    const requested = new Set(requestedCodes.map(canonicalCode));
+    const requestedAllApplied = [...requested].every((code) => applied.has(code));
+    if (action === utils_1.PromotionActions.ADD)
+        return requestedAllApplied;
+    if (action === utils_1.PromotionActions.REPLACE) {
+        return requestedAllApplied && requested.size === applied.size;
+    }
+    return false;
+};
+exports.isCodeReapplication = isCodeReapplication;
+const reportAffiliateCartStateReadFailure = (container, cartId, error) => {
+    Sentry.captureException(error, {
+        tags: { area: "affiliate-cart-hook" },
+        extra: { cartId },
+    });
+    try {
+        container
+            .resolve(utils_1.ContainerRegistrationKeys.LOGGER)
+            .warn(`Affiliate cart state could not be read for cart ${cartId}; letting the unchanged promotion set through: ${error instanceof Error ? error.message : "Unknown error"}`);
+    }
+    catch {
+        // A missing logger must not turn the fail-safe itself into a failure.
+    }
+};
+const validateAffiliateCustomerCode = async ({ input, cart }, { container }) => {
+    if (input.action !== utils_1.PromotionActions.ADD &&
+        input.action !== utils_1.PromotionActions.REPLACE) {
+        return new workflows_sdk_1.StepResponse(undefined);
+    }
+    const affiliateService = (0, resolve_services_1.resolveAffiliateService)(container);
+    const query = container.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const typedCart = cart;
+    const requestedCodes = [...new Set(input.promo_codes ?? [])];
+    let existingPromotions;
+    let existingBindings;
+    try {
+        existingPromotions = await (0, affiliate_coupon_cart_1.retrieveAffiliateCouponCartPromotions)(container, typedCart.id);
+        existingBindings = await (0, affiliate_coupon_cart_1.loadAffiliateCouponCartBindings)(affiliateService, existingPromotions);
+    }
+    catch (error) {
+        // This hook runs inside every line-item add/update/remove (Medusa's
+        // refreshCartItemsWorkflow re-applies the cart's current codes with
+        // REPLACE). A failure while merely *reading* the cart's affiliate state
+        // must not turn a plain cart edit into a 500 for a customer who never
+        // touched a coupon - but it must never let a coupon slip in or out
+        // unvalidated either. So the request is only allowed through when it
+        // changes nothing about the applied codes; the complete-cart hook stays
+        // the authoritative gate for the coupon itself.
+        if (!(0, exports.isCodeReapplication)(input.action, requestedCodes, (0, cart_promotions_1.readCartPromotions)(typedCart.promotions))) {
+            throw error;
+        }
+        reportAffiliateCartStateReadFailure(container, typedCart.id, error);
+        return new workflows_sdk_1.StepResponse(undefined);
+    }
+    const requestedCoupons = (await Promise.all(requestedCodes.map(async (code) => {
+        try {
+            return await affiliateService.findAffiliateCouponByCode(code);
+        }
+        catch (error) {
+            if (error instanceof utils_1.MedusaError &&
+                error.type === utils_1.MedusaError.Types.INVALID_DATA) {
+                return null;
+            }
+            throw error;
+        }
+    }))).filter((coupon) => coupon !== null);
+    const authorizationToken = input[affiliate_promotion_mutation_authorization_1.affiliatePromotionAuthorizationInputKey];
+    const effectiveCoupons = new Map();
+    if (input.action === utils_1.PromotionActions.ADD) {
+        for (const { coupon } of existingBindings) {
+            effectiveCoupons.set(coupon.id, coupon);
+        }
+    }
+    for (const coupon of requestedCoupons) {
+        effectiveCoupons.set(coupon.id, coupon);
+    }
+    if (!effectiveCoupons.size &&
+        input.action === utils_1.PromotionActions.REPLACE &&
+        existingBindings.length) {
+        const existingCoupon = existingBindings[0].coupon;
+        const authorized = authorizationToken !== undefined &&
+            existingCoupon.promotion_id !== null &&
+            (0, affiliate_promotion_mutation_authorization_1.consumeAffiliatePromotionMutationAuthorization)(authorizationToken, {
+                cart_id: typedCart.id,
+                coupon_id: existingCoupon.id,
+                promotion_id: existingCoupon.promotion_id,
+                action: input.action,
+                promo_codes: requestedCodes,
+            });
+        if (!authorized) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "Affiliate coupon promotion mutation is not authorized.");
+        }
+        return new workflows_sdk_1.StepResponse(undefined);
+    }
+    if (!effectiveCoupons.size) {
+        return new workflows_sdk_1.StepResponse(undefined);
+    }
+    if (input.action === utils_1.PromotionActions.ADD &&
+        existingBindings.some(({ exact }) => !exact)) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "The cart contains an invalid Affiliate coupon promotion binding.");
+    }
+    if (effectiveCoupons.size !== 1) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Exactly one public Affiliate coupon promotion may be applied to a cart.");
+    }
+    const coupon = [...effectiveCoupons.values()][0];
+    const affiliate = await affiliateService.retrieveAffiliateRecord(coupon.affiliate_id);
+    if (coupon.lifecycle_status !== "enabled" ||
+        coupon.provisioning_status !== "ready" ||
+        !coupon.promotion_id ||
+        affiliate.status !== "active") {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "The Affiliate coupon is inactive or not prepared.");
+    }
+    const settings = await affiliateService.retrieveProgramSettings();
+    await (0, promotion_eligibility_1.assertAuthenticAffiliateCouponPromotion)(container.resolve(utils_1.Modules.PROMOTION), { coupon, affiliate });
+    const existingPromotionIds = new Set(existingPromotions.map(({ id }) => id));
+    const introducesCoupon = requestedCoupons.some(({ id }) => id === coupon.id) &&
+        !existingPromotionIds.has(coupon.promotion_id);
+    const normalizedEmail = typedCart.email
+        ? (0, email_normalization_1.normalizeAffiliateEmail)(typedCart.email)
+        : null;
+    const state = await affiliateService.inspectAffiliateCartReferralForCheckout({
+        cart_id: typedCart.id,
+        customer_id: typedCart.customer_id ?? null,
+        normalized_email: normalizedEmail,
+    }, query);
+    if (introducesCoupon && state.has_code_redemption) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.CONFLICT, apply_affiliate_coupon_1.AFFILIATE_COUPON_ALREADY_USED_MESSAGE);
+    }
+    if (introducesCoupon && !typedCart.email) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "A cart email is required to use an Affiliate coupon.");
+    }
+    if (introducesCoupon &&
+        typedCart.customer_id &&
+        (await affiliateService.isCustomerAffiliate(typedCart.customer_id))) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "Affiliate customers cannot use public Affiliate coupons.");
+    }
+    if (introducesCoupon &&
+        (state.assignment_conflict ||
+            (state.assignment &&
+                state.assignment.affiliate_id !== coupon.affiliate_id))) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "This customer is assigned to another Affiliate.");
+    }
+    if (!(0, affiliate_coupon_cart_1.hasExactPreparedAffiliateCouponBinding)(state.referrals, coupon)) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "The Affiliate coupon has no exact active prepared cart binding.");
+    }
+    const exactExistingCouponRefresh = input.action === utils_1.PromotionActions.REPLACE &&
+        existingBindings.length === 1 &&
+        existingBindings[0].exact &&
+        existingBindings[0].coupon.id === coupon.id &&
+        requestedCoupons.length === 1 &&
+        requestedCoupons[0].id === coupon.id &&
+        requestedCodes.filter((code) => canonicalCode(code) === coupon.code)
+            .length === 1;
+    const authorized = authorizationToken !== undefined &&
+        (0, affiliate_promotion_mutation_authorization_1.consumeAffiliatePromotionMutationAuthorization)(authorizationToken, {
+            cart_id: typedCart.id,
+            coupon_id: coupon.id,
+            promotion_id: coupon.promotion_id,
+            action: input.action,
+            promo_codes: requestedCodes,
+        });
+    if ((authorizationToken !== undefined && !authorized) ||
+        (!authorized &&
+            requestedCoupons.length > 0 &&
+            !exactExistingCouponRefresh)) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "Affiliate coupon promotion mutation is not authorized.");
+    }
+    if (settings.promotion_stacking === "exclusive") {
+        // Automatic promotions (e.g. a threshold-based free-shipping promotion)
+        // aren't something the customer chose to combine, so they don't count
+        // as "another promotion" under exclusive stacking.
+        const existingOtherPromotion = input.action === utils_1.PromotionActions.ADD &&
+            existingPromotions.some(({ id, is_automatic }) => id !== coupon.promotion_id && !is_automatic);
+        const requestedOtherCode = requestedCodes.some((code) => canonicalCode(code) !== coupon.code);
+        if (existingOtherPromotion || requestedOtherCode) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, "The Affiliate coupon cannot be combined with another promotion.");
+        }
+    }
+    return new workflows_sdk_1.StepResponse(undefined);
+};
+exports.validateAffiliateCustomerCode = validateAffiliateCustomerCode;
+core_flows_1.updateCartPromotionsWorkflow.hooks.validate(exports.validateAffiliateCustomerCode);
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/workflows/hooks/validate-complete-cart-affiliate-referral.js

@@ -0,0 +1,137 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateCompleteCartAffiliateReferral = void 0;
+const Sentry = __importStar(require("@sentry/node"));
+const workflows_sdk_1 = require("@medusajs/framework/workflows-sdk");
+const utils_1 = require("@medusajs/framework/utils");
+const core_flows_1 = require("@medusajs/medusa/core-flows");
+const email_normalization_1 = require("../../modules/affiliate/domain/email-normalization");
+const resolve_services_1 = require("../../utils/resolve-services");
+const affiliate_coupon_cart_1 = require("../affiliate/affiliate-coupon-cart");
+const promotion_eligibility_1 = require("../affiliate/promotion-eligibility");
+const complete_cart_own_order_discount_1 = require("./complete-cart-own-order-discount");
+const INVALID_AFFILIATE_REFERRAL_MESSAGE = "Der Affiliate-Referral des Warenkorbs ist nicht vollständig validiert. Bitte aktualisiere den Warenkorb und versuche es erneut.";
+const validateCompleteCartAffiliateReferral = async ({ cart }, { container }) => {
+    const invalid = () => {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_ALLOWED, INVALID_AFFILIATE_REFERRAL_MESSAGE);
+    };
+    const typedCart = cart;
+    const affiliateService = (0, resolve_services_1.resolveAffiliateService)(container);
+    const query = container.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const normalizedEmail = typedCart.email
+        ? (0, email_normalization_1.normalizeAffiliateEmail)(typedCart.email)
+        : null;
+    const state = await affiliateService.inspectAffiliateCartReferralForCheckout({
+        cart_id: typedCart.id,
+        customer_id: typedCart.customer_id ?? null,
+        normalized_email: normalizedEmail,
+    }, query);
+    if (state.referrals.some((referral) => referral.status === "pending_email_validation")) {
+        invalid();
+    }
+    const activeReferral = state.referrals.find((referral) => referral.status === "active");
+    const latestReferral = state.latest_referral;
+    const referralAffiliate = activeReferral
+        ? await affiliateService.retrieveAffiliateRecord(activeReferral.affiliate_id)
+        : null;
+    if ((!activeReferral &&
+        latestReferral?.status === "invalidated" &&
+        latestReferral.invalidated_reason === "affiliate_inactive") ||
+        (activeReferral &&
+            (new Date(activeReferral.expires_at).getTime() <= Date.now() ||
+                referralAffiliate?.status !== "active"))) {
+        invalid();
+    }
+    // Medusa 2.19's complete-cart snapshot selects promotion IDs but not codes.
+    const promotions = await (0, affiliate_coupon_cart_1.retrieveAffiliateCouponCartPromotions)(container, typedCart.id);
+    const couponBindings = await (0, affiliate_coupon_cart_1.loadAffiliateCouponCartBindings)(affiliateService, promotions);
+    if (!couponBindings.length) {
+        if (activeReferral?.source === "coupon" ||
+            activeReferral?.applied_affiliate_coupon_id ||
+            activeReferral?.applied_promotion_id) {
+            invalid();
+        }
+        return new workflows_sdk_1.StepResponse(undefined);
+    }
+    if (couponBindings.length !== 1 ||
+        !couponBindings[0].exact ||
+        !activeReferral) {
+        invalid();
+    }
+    const coupon = couponBindings[0].coupon;
+    const affiliate = await affiliateService.retrieveAffiliateRecord(coupon.affiliate_id);
+    if (coupon.lifecycle_status !== "enabled" ||
+        coupon.provisioning_status !== "ready" ||
+        !coupon.promotion_id ||
+        affiliate.status !== "active" ||
+        !typedCart.email ||
+        state.assignment_conflict ||
+        state.has_code_redemption ||
+        (state.assignment && state.assignment.affiliate_id !== affiliate.id) ||
+        !(0, affiliate_coupon_cart_1.hasExactPreparedAffiliateCouponBinding)(state.referrals, coupon)) {
+        invalid();
+    }
+    if (typedCart.customer_id &&
+        (await affiliateService.isCustomerAffiliate(typedCart.customer_id))) {
+        invalid();
+    }
+    const settings = await affiliateService.retrieveProgramSettings();
+    await (0, promotion_eligibility_1.assertAuthenticAffiliateCouponPromotion)(container.resolve(utils_1.Modules.PROMOTION), { coupon, affiliate });
+    if (settings.promotion_stacking === "exclusive" &&
+        promotions.some(({ id }) => id !== coupon.promotion_id)) {
+        invalid();
+    }
+    return new workflows_sdk_1.StepResponse(undefined);
+};
+exports.validateCompleteCartAffiliateReferral = validateCompleteCartAffiliateReferral;
+core_flows_1.completeCartWorkflow.hooks.validate(async (input, context) => {
+    try {
+        await (0, complete_cart_own_order_discount_1.validateCompleteCartOwnOrderDiscount)(input, context);
+        return await (0, exports.validateCompleteCartAffiliateReferral)(input, context);
+    }
+    catch (error) {
+        // Both hooks already fail the checkout API call via a thrown
+        // MedusaError - captured here too for aggregate visibility (e.g.
+        // noticing every checkout failing for one affiliate), not because the
+        // customer-facing behavior needs to change.
+        Sentry.captureException(error, {
+            tags: { area: "affiliate-complete-cart-validate" },
+            extra: { cartId: input.cart.id },
+        });
+        throw error;
+    }
+});
+//# sourceMappingURL=data:application/json;base64,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

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Hartl Services GmbH
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.