@hartl-services/medusa-base 0.3.0 → 1.0.0

package/.medusa/server/src/providers/smtp/service.js

@@ -0,0 +1,236 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SmtpNotificationService = exports.SMTP_TIMEOUTS = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const nodemailer_1 = __importDefault(require("nodemailer"));
+const service_1 = require("../../modules/email/service");
+const types_1 = require("./types");
+exports.SMTP_TIMEOUTS = {
+    connection: 10_000,
+    greeting: 10_000,
+    socket: 30_000,
+};
+const emailAddressPattern = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+const connectionFailureCodes = new Set(["ECONNREFUSED", "EDNS"]);
+const invalidOptions = () => {
+    throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Invalid SMTP notification provider options.");
+};
+const isNonEmptyString = (value) => typeof value === "string" && Boolean(value.trim());
+const deliveryIdentity = (notification) => {
+    const providerData = notification.provider_data;
+    const hasIdentity = Boolean(providerData && "message_id" in providerData);
+    if (!hasIdentity) {
+        return null;
+    }
+    const notificationId = notification.id;
+    if (!providerData ||
+        !isNonEmptyString(providerData.attempt_id) ||
+        !isNonEmptyString(providerData.kind) ||
+        !isNonEmptyString(providerData.message_id) ||
+        !isNonEmptyString(notificationId)) {
+        return throwSentinel(types_1.SMTP_FAILURE_SENTINELS.invalidContent);
+    }
+    return {
+        attemptId: providerData.attempt_id,
+        kind: providerData.kind,
+        messageId: providerData.message_id,
+        notificationId,
+    };
+};
+const classifySmtpFailure = (error) => {
+    if (!error || typeof error !== "object") {
+        return types_1.SMTP_FAILURE_SENTINELS.outcomeUnknown;
+    }
+    const smtpError = error;
+    const responseCode = Number(smtpError.responseCode);
+    if (responseCode >= 400 && responseCode < 500) {
+        return types_1.SMTP_FAILURE_SENTINELS.transientRejection;
+    }
+    if (responseCode >= 500 && responseCode < 600) {
+        return types_1.SMTP_FAILURE_SENTINELS.permanentRejection;
+    }
+    const code = typeof smtpError.code === "string" ? smtpError.code : "";
+    const command = typeof smtpError.command === "string"
+        ? smtpError.command.toUpperCase()
+        : "";
+    const syscall = typeof smtpError.syscall === "string"
+        ? smtpError.syscall.toLowerCase()
+        : "";
+    if ((connectionFailureCodes.has(code) && command !== "DATA") ||
+        (code === "ESOCKET" && command === "CONN" && syscall === "connect")) {
+        return types_1.SMTP_FAILURE_SENTINELS.connectionFailed;
+    }
+    return types_1.SMTP_FAILURE_SENTINELS.outcomeUnknown;
+};
+const throwSentinel = (sentinel) => {
+    throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, sentinel);
+};
+class SmtpNotificationService extends utils_1.AbstractNotificationProviderService {
+    constructor(dependencies, options) {
+        super();
+        this.logger_ = dependencies.logger;
+        this.options_ = options;
+        this.pgConnection_ = dependencies[utils_1.ContainerRegistrationKeys.PG_CONNECTION];
+        if (options.transport) {
+            this.transport_ = options.transport;
+            return;
+        }
+        const transport = nodemailer_1.default.createTransport({
+            auth: {
+                pass: options.smtp.password,
+                user: options.smtp.user,
+            },
+            connectionTimeout: exports.SMTP_TIMEOUTS.connection,
+            greetingTimeout: exports.SMTP_TIMEOUTS.greeting,
+            host: options.smtp.host,
+            port: options.smtp.port,
+            requireTLS: options.smtp.requireTls,
+            secure: options.smtp.secure,
+            socketTimeout: exports.SMTP_TIMEOUTS.socket,
+        });
+        this.transport_ = {
+            sendMail: (message) => transport.sendMail(message),
+        };
+    }
+    static validateOptions(options) {
+        if (!options || typeof options !== "object" || Array.isArray(options)) {
+            invalidOptions();
+        }
+        const channels = options.channels;
+        const smtp = options.smtp;
+        if (!Array.isArray(channels) ||
+            channels.length !== 1 ||
+            channels[0] !== "email" ||
+            typeof smtp !== "object" ||
+            smtp === null ||
+            Array.isArray(smtp)) {
+            invalidOptions();
+        }
+        const configuration = smtp;
+        if (!isNonEmptyString(configuration.from) ||
+            !emailAddressPattern.test(configuration.from) ||
+            !isNonEmptyString(configuration.host) ||
+            !isNonEmptyString(configuration.password) ||
+            !Number.isInteger(configuration.port) ||
+            configuration.port <= 0 ||
+            configuration.port > 65_535 ||
+            typeof configuration.requireTls !== "boolean" ||
+            typeof configuration.secure !== "boolean" ||
+            !isNonEmptyString(configuration.user)) {
+            invalidOptions();
+        }
+    }
+    async send(notification) {
+        const content = notification.content;
+        const html = content?.html;
+        const subject = content?.subject;
+        const text = content?.text;
+        if (!isNonEmptyString(html) ||
+            !isNonEmptyString(subject) ||
+            !isNonEmptyString(text)) {
+            return throwSentinel(types_1.SMTP_FAILURE_SENTINELS.invalidContent);
+        }
+        const attachments = notification.attachments?.map((attachment) => {
+            const contentDisposition = attachment.disposition === "inline" ? "inline" : "attachment";
+            return {
+                ...(contentDisposition === "inline" && attachment.id
+                    ? { cid: attachment.id }
+                    : {}),
+                content: Buffer.from(attachment.content, "binary"),
+                contentDisposition,
+                contentType: attachment.content_type,
+                filename: attachment.filename,
+            };
+        });
+        const from = notification.from && emailAddressPattern.test(notification.from)
+            ? notification.from
+            : this.options_.smtp.from;
+        const identity = deliveryIdentity(notification);
+        const sendMail = async () => {
+            try {
+                return {
+                    outcome: "sent",
+                    result: await this.transport_.sendMail({
+                        attachments,
+                        from,
+                        html,
+                        subject,
+                        text,
+                        to: notification.to,
+                    }),
+                };
+            }
+            catch (error) {
+                return { error, outcome: "failed" };
+            }
+        };
+        let delivery;
+        if (identity) {
+            if (!this.pgConnection_) {
+                this.logger_.error(`smtp: delivery fence failed (${types_1.SMTP_FAILURE_SENTINELS.outcomeUnknown})`);
+                return throwSentinel(types_1.SMTP_FAILURE_SENTINELS.outcomeUnknown);
+            }
+            try {
+                delivery = await this.pgConnection_.transaction(async (transaction) => {
+                    const guarded = await transaction.raw(`update "email_attempt" as a
+             set "lease_started_at" = clock_timestamp(),
+                 "lease_expires_at" = clock_timestamp() + (? * interval '1 millisecond'),
+                 "notification_id" = ?, "updated_at" = clock_timestamp()
+             from "email_message" as m
+             where a."id" = ? and a."message_id" = ?
+               and a."status" = 'processing' and a."attempt_token" is not null
+               and a."deleted_at" is null and a."notification_id" is null
+               and m."id" = a."message_id" and m."kind" = ?
+               and m."status" = 'sending' and m."deleted_at" is null
+             returning a."id"`, [
+                        service_1.EMAIL_ATTEMPT_LEASE_MS,
+                        identity.notificationId,
+                        identity.attemptId,
+                        identity.messageId,
+                        identity.kind,
+                    ]);
+                    if (guarded.rowCount !== 1) {
+                        throw new Error("Email attempt delivery fence was not acquired.");
+                    }
+                    const result = await sendMail();
+                    const renewed = await transaction.raw(`update "email_attempt"
+             set "lease_started_at" = clock_timestamp(),
+                 "lease_expires_at" = clock_timestamp() + (? * interval '1 millisecond'),
+                 "updated_at" = clock_timestamp()
+             where "id" = ? and "message_id" = ?
+               and "status" = 'processing' and "attempt_token" is not null
+               and "notification_id" = ? and "deleted_at" is null
+             returning "id"`, [
+                        service_1.EMAIL_ATTEMPT_LEASE_MS,
+                        identity.attemptId,
+                        identity.messageId,
+                        identity.notificationId,
+                    ]);
+                    if (renewed.rowCount !== 1) {
+                        throw new Error("Email attempt delivery fence was lost.");
+                    }
+                    return result;
+                });
+            }
+            catch {
+                this.logger_.error(`smtp: delivery fence failed (${types_1.SMTP_FAILURE_SENTINELS.outcomeUnknown})`);
+                return throwSentinel(types_1.SMTP_FAILURE_SENTINELS.outcomeUnknown);
+            }
+        }
+        else {
+            delivery = await sendMail();
+        }
+        if (delivery.outcome === "sent") {
+            return delivery.result.messageId ? { id: delivery.result.messageId } : {};
+        }
+        const sentinel = classifySmtpFailure(delivery.error);
+        this.logger_.error(`smtp: send failed (${sentinel})`);
+        return throwSentinel(sentinel);
+    }
+}
+exports.SmtpNotificationService = SmtpNotificationService;
+SmtpNotificationService.identifier = "smtp";
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/providers/smtp/types.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SMTP_FAILURE_SENTINELS = void 0;
+exports.SMTP_FAILURE_SENTINELS = {
+    connectionFailed: "EMAIL_SMTP_CONNECTION_FAILED",
+    invalidContent: "EMAIL_SMTP_INVALID_CONTENT",
+    outcomeUnknown: "EMAIL_SMTP_OUTCOME_UNKNOWN",
+    permanentRejection: "EMAIL_SMTP_PERMANENT_REJECTION",
+    transientRejection: "EMAIL_SMTP_TRANSIENT_REJECTION",
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoidHlwZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi9zcmMvcHJvdmlkZXJzL3NtdHAvdHlwZXMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBRWEsUUFBQSxzQkFBc0IsR0FBRztJQUNwQyxnQkFBZ0IsRUFBRSw4QkFBOEI7SUFDaEQsY0FBYyxFQUFFLDRCQUE0QjtJQUM1QyxjQUFjLEVBQUUsNEJBQTRCO0lBQzVDLGtCQUFrQixFQUFFLGdDQUFnQztJQUNwRCxrQkFBa0IsRUFBRSxnQ0FBZ0M7Q0FDNUMsQ0FBQyJ9

package/.medusa/server/src/public/action-progress.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLUGIN_ACTION_PROGRESS_LABEL_MAX_LENGTH = void 0;
+exports.normalizeActionProgress = normalizeActionProgress;
+exports.reportPluginActionProgress = reportPluginActionProgress;
+const utils_1 = require("@medusajs/framework/utils");
+const module_access_1 = require("./module-access");
+/** Longest stored progress label; longer labels are cut. */
+exports.PLUGIN_ACTION_PROGRESS_LABEL_MAX_LENGTH = 200;
+const isCount = (value) => typeof value === "number" && Number.isInteger(value) && value >= 0;
+/**
+ * Validates and normalizes reported progress: `current` and `total` are
+ * non-negative integers (`total` may be unknown), a blank label is `null`
+ * and a long one is cut. Throws `INVALID_DATA`.
+ */
+function normalizeActionProgress(progress) {
+    if (!isCount(progress?.current)) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Fortschritt: current muss eine nicht-negative ganze Zahl sein.");
+    }
+    const total = progress.total ?? null;
+    if (total !== null && !isCount(total)) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "Fortschritt: total muss eine nicht-negative ganze Zahl oder null sein.");
+    }
+    const label = typeof progress.label === "string" && progress.label.trim()
+        ? progress.label.trim().slice(0, exports.PLUGIN_ACTION_PROGRESS_LABEL_MAX_LENGTH)
+        : null;
+    return { current: progress.current, total, label };
+}
+const warn = (container, message) => {
+    try {
+        container.resolve(utils_1.ContainerRegistrationKeys.LOGGER).warn(message);
+    }
+    catch {
+        // Progress is informational; logging must not fail the action.
+    }
+};
+/**
+ * Stores the progress of a running action (shown in the Admin while it
+ * runs). Call it from the action's workflow with `input.run_id`. Without a
+ * `run_id` (e.g. the same workflow run from a script) it does nothing. An
+ * unknown or finished run, a failed write and invalid progress (negative
+ * or non-integer numbers) are logged as a warning and dropped; progress
+ * never fails the action.
+ */
+async function reportPluginActionProgress(container, runId, progress) {
+    let normalized;
+    try {
+        normalized = normalizeActionProgress(progress);
+    }
+    catch (error) {
+        warn(container, `Ungültiger Fortschritt${runId ? ` für Aktionslauf "${runId}"` : ""} verworfen: ${error instanceof Error ? error.message : String(error)}`);
+        return;
+    }
+    if (!runId) {
+        return;
+    }
+    try {
+        const updated = await (0, module_access_1.resolveBaseModule)(container).reportPluginActionRunProgress(runId, normalized);
+        if (!updated) {
+            warn(container, `Fortschritt für Aktionslauf "${runId}" verworfen: Lauf unbekannt oder nicht mehr aktiv.`);
+        }
+    }
+    catch (error) {
+        warn(container, `Fortschritt für Aktionslauf "${runId}" konnte nicht gespeichert werden: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/public/config.js

@@ -0,0 +1,186 @@
+"use strict";
+/* eslint-disable @medusajs/use-medusa-error-not-generic-error -- Startup configuration errors are not HTTP responses. */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRedisEventBus = exports.resolveStripe = exports.shopUrl = exports.resolvePublicOrigin = exports.allowsInsecureLocalServices = exports.booleanEnvironment = exports.integerEnvironment = exports.requireEnvironment = exports.optionalEnvironment = exports.MEDUSA_BUILD_PLACEHOLDERS = void 0;
+/**
+ * Placeholders for the variables Medusa core and the Stripe payment provider
+ * need. `medusa build` loads the configuration without deployment secrets;
+ * pass these (merged with the placeholders of the shop's other plugins) as
+ * `buildPlaceholders` to `requireEnvironment` so required-variable checks pass
+ * during the build. They never reach a running server.
+ */
+exports.MEDUSA_BUILD_PLACEHOLDERS = {
+    ADMIN_CORS: "http://localhost",
+    AUTH_CORS: "http://localhost",
+    COOKIE_SECRET: "build-placeholder",
+    DATABASE_URL: "postgres://build:build@localhost:5432/build",
+    JWT_SECRET: "build-placeholder",
+    MEDUSA_BACKEND_URL: "http://localhost",
+    STOREFRONT_URL: "http://localhost:8000",
+    STORE_CORS: "http://localhost",
+    STRIPE_API_KEY: "sk_test_build-placeholder",
+    STRIPE_WEBHOOK_SECRET: "whsec_build-placeholder",
+};
+const optionalEnvironment = (environment, name) => {
+    const value = environment[name]?.trim();
+    return value ? value : undefined;
+};
+exports.optionalEnvironment = optionalEnvironment;
+/**
+ * Returns every named value or throws one error listing all missing names.
+ * During the build phase, the given `buildPlaceholders` stand in for
+ * deployment values; at runtime they are ignored.
+ */
+const requireEnvironment = (environment, names, phase, buildPlaceholders) => {
+    const source = phase === "build" ? { ...environment, ...buildPlaceholders } : environment;
+    const missing = names.filter((name) => (0, exports.optionalEnvironment)(source, name) === undefined);
+    if (missing.length > 0) {
+        throw new TypeError(`Missing required environment variables: ${missing.join(", ")}.`);
+    }
+    return Object.fromEntries(names.map((name) => [name, (0, exports.optionalEnvironment)(source, name)]));
+};
+exports.requireEnvironment = requireEnvironment;
+const integerEnvironment = (environment, name, minimum, maximum) => {
+    const value = (0, exports.optionalEnvironment)(environment, name);
+    if (value === undefined) {
+        return undefined;
+    }
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed < minimum || parsed > maximum) {
+        throw new TypeError(`${name} must be an integer from ${minimum} through ${maximum}.`);
+    }
+    return parsed;
+};
+exports.integerEnvironment = integerEnvironment;
+const booleanEnvironment = (environment, name, defaultValue) => {
+    const value = (0, exports.optionalEnvironment)(environment, name);
+    if (value === undefined) {
+        return defaultValue;
+    }
+    if (value !== "true" && value !== "false") {
+        throw new TypeError(`${name} must be either "true" or "false".`);
+    }
+    return value === "true";
+};
+exports.booleanEnvironment = booleanEnvironment;
+/** Local development, tests and builds may use plain HTTP and SMTP. */
+const allowsInsecureLocalServices = (environment, phase) => phase === "build" ||
+    environment.NODE_ENV === "development" ||
+    environment.NODE_ENV === "test";
+exports.allowsInsecureLocalServices = allowsInsecureLocalServices;
+const resolvePublicOrigin = (value, name, allowHttp) => {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new TypeError(`${name} must be a valid HTTP(S) origin.`);
+    }
+    if ((url.protocol !== "https:" && url.protocol !== "http:") ||
+        url.username ||
+        url.password ||
+        url.pathname !== "/" ||
+        url.search ||
+        url.hash) {
+        throw new TypeError(`${name} must be a valid HTTP(S) origin.`);
+    }
+    if (!allowHttp && url.protocol !== "https:") {
+        throw new TypeError(`${name} must use HTTPS outside development and test.`);
+    }
+    return url.origin;
+};
+exports.resolvePublicOrigin = resolvePublicOrigin;
+/**
+ * Builds an absolute URL on a validated origin from a path that may contain
+ * customer-controlled parts (e.g. a locale). Protocol-relative paths, queries,
+ * fragments and backslashes are rejected so the URL can never leave the origin.
+ */
+const shopUrl = (origin, path) => {
+    if (!path ||
+        path !== path.trim() ||
+        !path.startsWith("/") ||
+        path.startsWith("//") ||
+        path.includes("?") ||
+        path.includes("#") ||
+        path.includes("\\")) {
+        throw new TypeError(`Shop URL path "${path}" is not a plain absolute path.`);
+    }
+    return new URL(path, origin).toString();
+};
+exports.shopUrl = shopUrl;
+const resolveStripe = (values) => {
+    if (!values.STRIPE_API_KEY.startsWith("sk_")) {
+        throw new TypeError("STRIPE_API_KEY must be a Stripe secret key (sk_...), not a publishable key.");
+    }
+    if (!values.STRIPE_WEBHOOK_SECRET.startsWith("whsec_")) {
+        throw new TypeError("STRIPE_WEBHOOK_SECRET must be a Stripe webhook signing secret (whsec_...).");
+    }
+    return {
+        apiKey: values.STRIPE_API_KEY,
+        webhookSecret: values.STRIPE_WEBHOOK_SECRET,
+    };
+};
+exports.resolveStripe = resolveStripe;
+/**
+ * Redis is optional in development (Medusa then uses its local Event Bus),
+ * required at runtime everywhere else, and never used during a build.
+ * Production requires authenticated `rediss://` unless an insecure private
+ * network is explicitly accepted.
+ */
+const resolveRedisEventBus = (environment, phase) => {
+    if (phase === "build") {
+        return undefined;
+    }
+    const url = (0, exports.optionalEnvironment)(environment, "REDIS_URL");
+    if (!url) {
+        if (environment.NODE_ENV !== "development") {
+            throw new TypeError("Missing required environment variables: REDIS_URL.");
+        }
+        return undefined;
+    }
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new TypeError("REDIS_URL must be a valid Redis URL.");
+    }
+    if (parsed.protocol !== "redis:" && parsed.protocol !== "rediss:") {
+        throw new TypeError("REDIS_URL must use redis:// or rediss://.");
+    }
+    if (environment.NODE_ENV === "production") {
+        if (!parsed.password) {
+            throw new TypeError("Production REDIS_URL must include authentication.");
+        }
+        if (parsed.protocol !== "rediss:" &&
+            !(0, exports.booleanEnvironment)(environment, "REDIS_ALLOW_INSECURE_PRIVATE_NETWORK", false)) {
+            throw new TypeError("Production REDIS_URL must use rediss:// unless REDIS_ALLOW_INSECURE_PRIVATE_NETWORK=true.");
+        }
+    }
+    return { url };
+};
+exports.resolveRedisEventBus = resolveRedisEventBus;
+/**
+ * Boot-time registrations of the plugin's built-in modules, from the same
+ * `@hartl-services/medusa-base/config` entry: the SMTP notification provider
+ * (E-Mail), the S3 file storage provider with its `/files` gateway part, and
+ * the default document markup.
+ */
+__exportStar(require("../email/config"), exports);
+__exportStar(require("../files/config"), exports);
+__exportStar(require("../documents/config"), exports);
+//# sourceMappingURL=data:application/json;base64,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