@hartl-services/medusa-base 0.3.0 → 1.0.0

package/.medusa/server/src/api/files/[asset]/route.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const gateway_1 = require("../../../files/gateway");
+const file_response_1 = require("../file-response");
+const GET = async (req, res) => {
+    let fileKey;
+    try {
+        fileKey = (0, gateway_1.publicFileGatewayKey)(req.params.asset);
+    }
+    catch {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "File not found.");
+    }
+    await (0, file_response_1.streamGatewayFile)({
+        cacheControl: "public, max-age=31536000, immutable",
+        fileKey,
+        files: req.scope.resolve(utils_1.Modules.FILE),
+        filename: req.params.asset,
+        response: res,
+    });
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/files/file-response.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.streamGatewayFile = void 0;
+const node_path_1 = require("node:path");
+const promises_1 = require("node:stream/promises");
+const utils_1 = require("@medusajs/framework/utils");
+const mime_types_1 = require("mime-types");
+const safeFilename = (value) => (0, node_path_1.basename)(value).replaceAll(/[^a-zA-Z0-9._-]/g, "_");
+const isNotFoundError = (error) => {
+    if (typeof error !== "object" || error === null) {
+        return false;
+    }
+    const status = "$metadata" in error &&
+        typeof error.$metadata === "object" &&
+        error.$metadata !== null &&
+        "httpStatusCode" in error.$metadata
+        ? error.$metadata.httpStatusCode
+        : undefined;
+    const name = "name" in error ? error.name : undefined;
+    return status === 404 || name === "NoSuchKey" || name === "NotFound";
+};
+const streamGatewayFile = async (input) => {
+    let stream;
+    try {
+        stream = await input.files.getDownloadStream(input.fileKey);
+    }
+    catch (error) {
+        if (isNotFoundError(error)) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "File not found.");
+        }
+        throw error;
+    }
+    input.response.setHeader("Cache-Control", input.cacheControl);
+    input.response.setHeader("Content-Security-Policy", "sandbox; default-src 'none'");
+    input.response.setHeader("Content-Type", (0, mime_types_1.lookup)(input.filename) || "application/octet-stream");
+    input.response.setHeader("X-Content-Type-Options", "nosniff");
+    if (input.disposition) {
+        input.response.setHeader("Content-Disposition", `${input.disposition}; filename="${safeFilename(input.filename)}"`);
+    }
+    await (0, promises_1.pipeline)(stream, input.response);
+};
+exports.streamGatewayFile = streamGatewayFile;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZmlsZS1yZXNwb25zZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9hcGkvZmlsZXMvZmlsZS1yZXNwb25zZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSx5Q0FBcUM7QUFDckMsbURBQWdEO0FBSWhELHFEQUF3RDtBQUN4RCwyQ0FBb0M7QUFFcEMsTUFBTSxZQUFZLEdBQUcsQ0FBQyxLQUFhLEVBQVUsRUFBRSxDQUM3QyxJQUFBLG9CQUFRLEVBQUMsS0FBSyxDQUFDLENBQUMsVUFBVSxDQUFDLGtCQUFrQixFQUFFLEdBQUcsQ0FBQyxDQUFDO0FBRXRELE1BQU0sZUFBZSxHQUFHLENBQUMsS0FBYyxFQUFXLEVBQUU7SUFDbEQsSUFBSSxPQUFPLEtBQUssS0FBSyxRQUFRLElBQUksS0FBSyxLQUFLLElBQUksRUFBRSxDQUFDO1FBQ2hELE9BQU8sS0FBSyxDQUFDO0lBQ2YsQ0FBQztJQUVELE1BQU0sTUFBTSxHQUNWLFdBQVcsSUFBSSxLQUFLO1FBQ3BCLE9BQU8sS0FBSyxDQUFDLFNBQVMsS0FBSyxRQUFRO1FBQ25DLEtBQUssQ0FBQyxTQUFTLEtBQUssSUFBSTtRQUN4QixnQkFBZ0IsSUFBSSxLQUFLLENBQUMsU0FBUztRQUNqQyxDQUFDLENBQUMsS0FBSyxDQUFDLFNBQVMsQ0FBQyxjQUFjO1FBQ2hDLENBQUMsQ0FBQyxTQUFTLENBQUM7SUFDaEIsTUFBTSxJQUFJLEdBQUcsTUFBTSxJQUFJLEtBQUssQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsU0FBUyxDQUFDO0lBQ3RELE9BQU8sTUFBTSxLQUFLLEdBQUcsSUFBSSxJQUFJLEtBQUssV0FBVyxJQUFJLElBQUksS0FBSyxVQUFVLENBQUM7QUFDdkUsQ0FBQyxDQUFDO0FBRUssTUFBTSxpQkFBaUIsR0FBRyxLQUFLLEVBQUUsS0FPdkMsRUFBaUIsRUFBRTtJQUNsQixJQUFJLE1BQU0sQ0FBQztJQUNYLElBQUksQ0FBQztRQUNILE1BQU0sR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUMsaUJBQWlCLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxDQUFDO0lBQzlELENBQUM7SUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1FBQ2YsSUFBSSxlQUFlLENBQUMsS0FBSyxDQUFDLEVBQUUsQ0FBQztZQUMzQixNQUFNLElBQUksbUJBQVcsQ0FBQyxtQkFBVyxDQUFDLEtBQUssQ0FBQyxTQUFTLEVBQUUsaUJBQWlCLENBQUMsQ0FBQztRQUN4RSxDQUFDO1FBQ0QsTUFBTSxLQUFLLENBQUM7SUFDZCxDQUFDO0lBRUQsS0FBSyxDQUFDLFFBQVEsQ0FBQyxTQUFTLENBQUMsZUFBZSxFQUFFLEtBQUssQ0FBQyxZQUFZLENBQUMsQ0FBQztJQUM5RCxLQUFLLENBQUMsUUFBUSxDQUFDLFNBQVMsQ0FDdEIseUJBQXlCLEVBQ3pCLDZCQUE2QixDQUM5QixDQUFDO0lBQ0YsS0FBSyxDQUFDLFFBQVEsQ0FBQyxTQUFTLENBQ3RCLGNBQWMsRUFDZCxJQUFBLG1CQUFNLEVBQUMsS0FBSyxDQUFDLFFBQVEsQ0FBQyxJQUFJLDBCQUEwQixDQUNyRCxDQUFDO0lBQ0YsS0FBSyxDQUFDLFFBQVEsQ0FBQyxTQUFTLENBQUMsd0JBQXdCLEVBQUUsU0FBUyxDQUFDLENBQUM7SUFDOUQsSUFBSSxLQUFLLENBQUMsV0FBVyxFQUFFLENBQUM7UUFDdEIsS0FBSyxDQUFDLFFBQVEsQ0FBQyxTQUFTLENBQ3RCLHFCQUFxQixFQUNyQixHQUFHLEtBQUssQ0FBQyxXQUFXLGVBQWUsWUFBWSxDQUFDLEtBQUssQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUNuRSxDQUFDO0lBQ0osQ0FBQztJQUVELE1BQU0sSUFBQSxtQkFBUSxFQUFDLE1BQU0sRUFBRSxLQUFLLENBQUMsUUFBUSxDQUFDLENBQUM7QUFDekMsQ0FBQyxDQUFDO0FBcENXLFFBQUEsaUJBQWlCLHFCQW9DNUIifQ==

package/.medusa/server/src/api/files/gateway-options.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveFileGatewayRouteOptions = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const types_1 = require("../../files/types");
+/**
+ * The routes sign and verify with the `files.gateway` option of the base
+ * plugin the shop registered via `createS3CacheStorageConfig`, which also
+ * configures the File provider, so both always share one signing secret.
+ * Upload CORS follows Medusa's own Admin CORS setting.
+ */
+const resolveFileGatewayRouteOptions = (container) => {
+    const configModule = container.resolve(utils_1.ContainerRegistrationKeys.CONFIG_MODULE);
+    const registration = configModule.plugins?.find((plugin) => typeof plugin === "object" && plugin.resolve === types_1.BASE_PLUGIN_RESOLVE);
+    const options = typeof registration === "object"
+        ? registration.options
+        : undefined;
+    const signingSecret = options?.files?.gateway?.signingSecret?.trim();
+    if (!signingSecret) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, "File gateway signing is not configured.");
+    }
+    return {
+        signingSecret,
+        uploadAllowedOrigins: (configModule.projectConfig?.http?.adminCors ?? "")
+            .split(",")
+            .map((origin) => origin.trim())
+            .filter(Boolean),
+    };
+};
+exports.resolveFileGatewayRouteOptions = resolveFileGatewayRouteOptions;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/files/private/[token]/route.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const gateway_1 = require("../../../../files/gateway");
+const file_response_1 = require("../../file-response");
+const gateway_options_1 = require("../../gateway-options");
+const GET = async (req, res) => {
+    const { signingSecret } = (0, gateway_options_1.resolveFileGatewayRouteOptions)(req.scope);
+    const fileKey = (0, gateway_1.verifyPrivateFileGatewayToken)({
+        expires: req.validatedQuery.expires,
+        signature: req.validatedQuery.signature,
+        signingSecret,
+        token: req.params.token,
+    });
+    if (!fileKey) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNAUTHORIZED, "Invalid or expired file URL.");
+    }
+    await (0, file_response_1.streamGatewayFile)({
+        cacheControl: "private, no-store, max-age=0",
+        disposition: "attachment",
+        fileKey,
+        files: req.scope.resolve(utils_1.Modules.FILE),
+        filename: fileKey,
+        response: res,
+    });
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2ZpbGVzL3ByaXZhdGUvW3Rva2VuXS9yb3V0ZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFFQSxxREFBaUU7QUFHakUsdURBQTBFO0FBQzFFLHVEQUF3RDtBQUN4RCwyREFBdUU7QUFFaEUsTUFBTSxHQUFHLEdBQUcsS0FBSyxFQUN0QixHQUEwRCxFQUMxRCxHQUFtQixFQUNuQixFQUFFO0lBQ0YsTUFBTSxFQUFFLGFBQWEsRUFBRSxHQUFHLElBQUEsZ0RBQThCLEVBQUMsR0FBRyxDQUFDLEtBQUssQ0FBQyxDQUFDO0lBRXBFLE1BQU0sT0FBTyxHQUFHLElBQUEsdUNBQTZCLEVBQUM7UUFDNUMsT0FBTyxFQUFFLEdBQUcsQ0FBQyxjQUFjLENBQUMsT0FBTztRQUNuQyxTQUFTLEVBQUUsR0FBRyxDQUFDLGNBQWMsQ0FBQyxTQUFTO1FBQ3ZDLGFBQWE7UUFDYixLQUFLLEVBQUUsR0FBRyxDQUFDLE1BQU0sQ0FBQyxLQUFLO0tBQ3hCLENBQUMsQ0FBQztJQUNILElBQUksQ0FBQyxPQUFPLEVBQUUsQ0FBQztRQUNiLE1BQU0sSUFBSSxtQkFBVyxDQUNuQixtQkFBVyxDQUFDLEtBQUssQ0FBQyxZQUFZLEVBQzlCLDhCQUE4QixDQUMvQixDQUFDO0lBQ0osQ0FBQztJQUVELE1BQU0sSUFBQSxpQ0FBaUIsRUFBQztRQUN0QixZQUFZLEVBQUUsOEJBQThCO1FBQzVDLFdBQVcsRUFBRSxZQUFZO1FBQ3pCLE9BQU87UUFDUCxLQUFLLEVBQUUsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsZUFBTyxDQUFDLElBQUksQ0FBdUI7UUFDNUQsUUFBUSxFQUFFLE9BQU87UUFDakIsUUFBUSxFQUFFLEdBQUc7S0FDZCxDQUFDLENBQUM7QUFDTCxDQUFDLENBQUM7QUEzQlcsUUFBQSxHQUFHLE9BMkJkIn0=

package/.medusa/server/src/api/files/upload/[token]/route.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PUT = exports.OPTIONS = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const gateway_1 = require("../../../../files/gateway");
+const gateway_options_1 = require("../../gateway-options");
+const MAX_UPLOAD_BYTES = 100 * 1024 * 1024;
+const setCorsHeaders = (req, res, allowedOrigins) => {
+    const origin = req.get("origin");
+    if (origin && allowedOrigins.includes(origin)) {
+        res.setHeader("Access-Control-Allow-Origin", origin);
+        res.setHeader("Vary", "Origin");
+    }
+    res.setHeader("Access-Control-Allow-Methods", "PUT, OPTIONS");
+    res.setHeader("Access-Control-Allow-Headers", "Content-Type");
+};
+const OPTIONS = async (req, res) => {
+    setCorsHeaders(req, res, (0, gateway_options_1.resolveFileGatewayRouteOptions)(req.scope).uploadAllowedOrigins);
+    res.status(204).end();
+};
+exports.OPTIONS = OPTIONS;
+const PUT = async (req, res) => {
+    const { signingSecret, uploadAllowedOrigins } = (0, gateway_options_1.resolveFileGatewayRouteOptions)(req.scope);
+    setCorsHeaders(req, res, uploadAllowedOrigins);
+    const fileKey = (0, gateway_1.verifyFileGatewayUploadToken)({
+        expires: req.validatedQuery.expires,
+        signature: req.validatedQuery.signature,
+        signingSecret,
+        token: req.params.token,
+    });
+    if (!fileKey ||
+        (!fileKey.startsWith("private/") && !fileKey.startsWith("public/"))) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNAUTHORIZED, "Invalid or expired file upload URL.");
+    }
+    const declaredSize = Number(req.get("content-length"));
+    if (Number.isFinite(declaredSize) && declaredSize > MAX_UPLOAD_BYTES) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, `Gateway uploads must not exceed ${MAX_UPLOAD_BYTES} bytes.`);
+    }
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += buffer.length;
+        if (size > MAX_UPLOAD_BYTES) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, `Gateway uploads must not exceed ${MAX_UPLOAD_BYTES} bytes.`);
+        }
+        chunks.push(buffer);
+    }
+    const files = req.scope.resolve(utils_1.Modules.FILE);
+    const access = fileKey.startsWith("private/") ? "private" : "public";
+    const mimeType = req.get("content-type")?.split(";", 1)[0]?.trim() ||
+        "application/octet-stream";
+    const uploaded = await files.createFiles({
+        access,
+        content: Buffer.concat(chunks).toString("base64"),
+        filename: fileKey.slice(fileKey.indexOf("/") + 1),
+        mimeType,
+    });
+    if (uploaded.id !== fileKey) {
+        await files.deleteFiles(uploaded.id);
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, "Gateway upload did not preserve its reserved file key.");
+    }
+    res.status(204).end();
+};
+exports.PUT = PUT;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2ZpbGVzL3VwbG9hZC9bdG9rZW5dL3JvdXRlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUVBLHFEQUFpRTtBQUdqRSx1REFBeUU7QUFDekUsMkRBQXVFO0FBRXZFLE1BQU0sZ0JBQWdCLEdBQUcsR0FBRyxHQUFHLElBQUksR0FBRyxJQUFJLENBQUM7QUFFM0MsTUFBTSxjQUFjLEdBQUcsQ0FDckIsR0FBa0IsRUFDbEIsR0FBbUIsRUFDbkIsY0FBaUMsRUFDM0IsRUFBRTtJQUNSLE1BQU0sTUFBTSxHQUFHLEdBQUcsQ0FBQyxHQUFHLENBQUMsUUFBUSxDQUFDLENBQUM7SUFDakMsSUFBSSxNQUFNLElBQUksY0FBYyxDQUFDLFFBQVEsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDO1FBQzlDLEdBQUcsQ0FBQyxTQUFTLENBQUMsNkJBQTZCLEVBQUUsTUFBTSxDQUFDLENBQUM7UUFDckQsR0FBRyxDQUFDLFNBQVMsQ0FBQyxNQUFNLEVBQUUsUUFBUSxDQUFDLENBQUM7SUFDbEMsQ0FBQztJQUNELEdBQUcsQ0FBQyxTQUFTLENBQUMsOEJBQThCLEVBQUUsY0FBYyxDQUFDLENBQUM7SUFDOUQsR0FBRyxDQUFDLFNBQVMsQ0FBQyw4QkFBOEIsRUFBRSxjQUFjLENBQUMsQ0FBQztBQUNoRSxDQUFDLENBQUM7QUFFSyxNQUFNLE9BQU8sR0FBRyxLQUFLLEVBQUUsR0FBa0IsRUFBRSxHQUFtQixFQUFFLEVBQUU7SUFDdkUsY0FBYyxDQUNaLEdBQUcsRUFDSCxHQUFHLEVBQ0gsSUFBQSxnREFBOEIsRUFBQyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUMsb0JBQW9CLENBQy9ELENBQUM7SUFDRixHQUFHLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLEdBQUcsRUFBRSxDQUFDO0FBQ3hCLENBQUMsQ0FBQztBQVBXLFFBQUEsT0FBTyxXQU9sQjtBQUVLLE1BQU0sR0FBRyxHQUFHLEtBQUssRUFDdEIsR0FBMEQsRUFDMUQsR0FBbUIsRUFDbkIsRUFBRTtJQUNGLE1BQU0sRUFBRSxhQUFhLEVBQUUsb0JBQW9CLEVBQUUsR0FDM0MsSUFBQSxnREFBOEIsRUFBQyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUM7SUFDNUMsY0FBYyxDQUFDLEdBQUcsRUFBRSxHQUFHLEVBQUUsb0JBQW9CLENBQUMsQ0FBQztJQUUvQyxNQUFNLE9BQU8sR0FBRyxJQUFBLHNDQUE0QixFQUFDO1FBQzNDLE9BQU8sRUFBRSxHQUFHLENBQUMsY0FBYyxDQUFDLE9BQU87UUFDbkMsU0FBUyxFQUFFLEdBQUcsQ0FBQyxjQUFjLENBQUMsU0FBUztRQUN2QyxhQUFhO1FBQ2IsS0FBSyxFQUFFLEdBQUcsQ0FBQyxNQUFNLENBQUMsS0FBSztLQUN4QixDQUFDLENBQUM7SUFDSCxJQUNFLENBQUMsT0FBTztRQUNSLENBQUMsQ0FBQyxPQUFPLENBQUMsVUFBVSxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsT0FBTyxDQUFDLFVBQVUsQ0FBQyxTQUFTLENBQUMsQ0FBQyxFQUNuRSxDQUFDO1FBQ0QsTUFBTSxJQUFJLG1CQUFXLENBQ25CLG1CQUFXLENBQUMsS0FBSyxDQUFDLFlBQVksRUFDOUIscUNBQXFDLENBQ3RDLENBQUM7SUFDSixDQUFDO0lBRUQsTUFBTSxZQUFZLEdBQUcsTUFBTSxDQUFDLEdBQUcsQ0FBQyxHQUFHLENBQUMsZ0JBQWdCLENBQUMsQ0FBQyxDQUFDO0lBQ3ZELElBQUksTUFBTSxDQUFDLFFBQVEsQ0FBQyxZQUFZLENBQUMsSUFBSSxZQUFZLEdBQUcsZ0JBQWdCLEVBQUUsQ0FBQztRQUNyRSxNQUFNLElBQUksbUJBQVcsQ0FDbkIsbUJBQVcsQ0FBQyxLQUFLLENBQUMsWUFBWSxFQUM5QixtQ0FBbUMsZ0JBQWdCLFNBQVMsQ0FDN0QsQ0FBQztJQUNKLENBQUM7SUFFRCxNQUFNLE1BQU0sR0FBYSxFQUFFLENBQUM7SUFDNUIsSUFBSSxJQUFJLEdBQUcsQ0FBQyxDQUFDO0lBQ2IsSUFBSSxLQUFLLEVBQUUsTUFBTSxLQUFLLElBQUksR0FBRyxFQUFFLENBQUM7UUFDOUIsTUFBTSxNQUFNLEdBQUcsTUFBTSxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBQ25FLElBQUksSUFBSSxNQUFNLENBQUMsTUFBTSxDQUFDO1FBQ3RCLElBQUksSUFBSSxHQUFHLGdCQUFnQixFQUFFLENBQUM7WUFDNUIsTUFBTSxJQUFJLG1CQUFXLENBQ25CLG1CQUFXLENBQUMsS0FBSyxDQUFDLFlBQVksRUFDOUIsbUNBQW1DLGdCQUFnQixTQUFTLENBQzdELENBQUM7UUFDSixDQUFDO1FBQ0QsTUFBTSxDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsQ0FBQztJQUN0QixDQUFDO0lBRUQsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsZUFBTyxDQUFDLElBQUksQ0FBdUIsQ0FBQztJQUNwRSxNQUFNLE1BQU0sR0FBRyxPQUFPLENBQUMsVUFBVSxDQUFDLFVBQVUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUMsQ0FBQyxDQUFDLFFBQVEsQ0FBQztJQUNyRSxNQUFNLFFBQVEsR0FDWixHQUFHLENBQUMsR0FBRyxDQUFDLGNBQWMsQ0FBQyxFQUFFLEtBQUssQ0FBQyxHQUFHLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsSUFBSSxFQUFFO1FBQ2pELDBCQUEwQixDQUFDO0lBQzdCLE1BQU0sUUFBUSxHQUFHLE1BQU0sS0FBSyxDQUFDLFdBQVcsQ0FBQztRQUN2QyxNQUFNO1FBQ04sT0FBTyxFQUFFLE1BQU0sQ0FBQyxNQUFNLENBQUMsTUFBTSxDQUFDLENBQUMsUUFBUSxDQUFDLFFBQVEsQ0FBQztRQUNqRCxRQUFRLEVBQUUsT0FBTyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxHQUFHLENBQUMsQ0FBQztRQUNqRCxRQUFRO0tBQ1QsQ0FBQyxDQUFDO0lBQ0gsSUFBSSxRQUFRLENBQUMsRUFBRSxLQUFLLE9BQU8sRUFBRSxDQUFDO1FBQzVCLE1BQU0sS0FBSyxDQUFDLFdBQVcsQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDLENBQUM7UUFDckMsTUFBTSxJQUFJLG1CQUFXLENBQ25CLG1CQUFXLENBQUMsS0FBSyxDQUFDLGdCQUFnQixFQUNsQyx3REFBd0QsQ0FDekQsQ0FBQztJQUNKLENBQUM7SUFFRCxHQUFHLENBQUMsTUFBTSxDQUFDLEdBQUcsQ0FBQyxDQUFDLEdBQUcsRUFBRSxDQUFDO0FBQ3hCLENBQUMsQ0FBQztBQWxFVyxRQUFBLEdBQUcsT0FrRWQifQ==

package/.medusa/server/src/api/middlewares.js

@@ -2,24 +2,205 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const http_1 = require("@medusajs/framework/http");
 const plugin_features_1 = require("@hartl-services/medusa-food-supplements-contracts/schemas/plugin-features");
+const documents_1 = require("@hartl-services/medusa-food-supplements-contracts/schemas/documents");
+const email_1 = require("@hartl-services/medusa-food-supplements-contracts/schemas/email");
+const files_1 = require("@hartl-services/medusa-food-supplements-contracts/schemas/files");
+const plugin_features_2 = require("../documents/plugin-features");
+const plugin_features_3 = require("../email/plugin-features");
+const public_1 = require("../public");
+/**
+ * Feature-toggle gate for the Documents routes. Without `methods` Medusa
+ * registers the entry with `app.use`, i.e. as a prefix match that runs before
+ * every method-specific middleware (authentication included), so a disabled
+ * feature answers 404 for the route and everything below it. Without keys only
+ * the plugin switch is checked; several keys must all be enabled.
+ */
+const documentsGate = (matcher, ...keys) => ({
+    matcher,
+    middlewares: [(0, public_1.requirePluginFeature)(plugin_features_2.documentsPluginFeatures, ...keys)],
+});
+// Authentication: Medusa authenticates every /admin route (actor "user";
+// bearer, session or secret API key) before plugin middlewares run
+// (framework 2.19.0 http/router.js), so no second `authenticate` here.
 // Store GETs need nothing beyond Medusa's publishable-key check on /store.
-// Every authenticated Admin user may read and change the toggles (no RBAC by
-// design).
+// Every authenticated Admin user may read and change toggles and settings
+// and run actions (no RBAC by design).
 exports.default = (0, http_1.defineMiddlewares)({
     routes: [
         {
             matcher: "/admin/plugin-features",
+            methods: ["POST"],
+            middlewares: [(0, http_1.validateAndTransformBody)(plugin_features_1.UpdatePluginFeaturesSchema)],
+        },
+        {
+            matcher: "/admin/plugin-features/:plugin_key/settings",
+            methods: ["POST"],
+            middlewares: [(0, http_1.validateAndTransformBody)(plugin_features_1.UpdatePluginSettingsSchema)],
+        },
+        {
+            matcher: "/admin/plugin-features/:plugin_key/actions/:action_key",
+            methods: ["POST"],
+            middlewares: [(0, http_1.validateAndTransformBody)(plugin_features_1.RunPluginActionSchema)],
+        },
+        {
+            matcher: "/admin/plugin-features/:plugin_key/actions/:action_key/runs",
+            methods: ["GET"],
+            middlewares: [
+                (0, http_1.validateAndTransformQuery)(plugin_features_1.ListPluginActionRunsQuerySchema, {
+                    isList: false,
+                }),
+            ],
+        },
+        // --- E-Mail ---------------------------------------------------------
+        // Feature-toggle gate (see plugin-features.ts). Without `methods` Medusa
+        // registers it with `app.use`, a prefix match that runs before every
+        // method-specific entry below, so a switched-off plugin answers 404 for
+        // the whole Admin mail log and the terms versions.
+        // The mail features gate subscribers only; no route belongs to them.
+        {
+            matcher: "/admin/email",
+            middlewares: [(0, public_1.requirePluginFeature)(plugin_features_3.emailPluginFeatures)],
+        },
+        {
+            matcher: "/admin/email/messages",
+            methods: ["GET"],
+            middlewares: [
+                (0, http_1.authenticate)("user", ["session", "bearer"]),
+                (0, http_1.validateAndTransformQuery)(email_1.ListAdminEmailMessagesQuerySchema, {
+                    isList: true,
+                }),
+            ],
+        },
+        {
+            matcher: "/admin/email/messages/:id",
             methods: ["GET"],
             middlewares: [(0, http_1.authenticate)("user", ["session", "bearer"])],
         },
         {
-            matcher: "/admin/plugin-features",
+            matcher: "/admin/email/messages/:id/resends",
             methods: ["POST"],
             middlewares: [
                 (0, http_1.authenticate)("user", ["session", "bearer"]),
-                (0, http_1.validateAndTransformBody)(plugin_features_1.UpdatePluginFeaturesSchema),
+                (0, http_1.validateAndTransformBody)(email_1.ResendAdminEmailMessageSchema),
+            ],
+        },
+        {
+            matcher: "/admin/email/terms-versions",
+            methods: ["GET"],
+            middlewares: [
+                (0, http_1.authenticate)("user", ["session", "bearer"]),
+                (0, http_1.validateAndTransformQuery)(email_1.ListAdminEmailTermsVersionsQuerySchema, {
+                    isList: true,
+                }),
+            ],
+        },
+        {
+            bodyParser: { sizeLimit: "7mb" },
+            matcher: "/admin/email/terms-versions",
+            methods: ["POST"],
+            middlewares: [
+                (0, http_1.authenticate)("user", ["session", "bearer"]),
+                (0, http_1.validateAndTransformBody)(email_1.CreateAdminEmailTermsVersionSchema),
+            ],
+        },
+        {
+            matcher: "/admin/email/terms-versions/:id/download",
+            methods: ["GET"],
+            middlewares: [(0, http_1.authenticate)("user", ["session", "bearer"])],
+        },
+        // --- Dokumente ------------------------------------------------------
+        // Feature-toggle gates (see plugin-features.ts). They cover every
+        // Documents route and nothing else; subscribers and jobs check the
+        // toggles themselves, workflow hooks and the checkout path never do.
+        //
+        // Plugin switch
+        documentsGate("/store/documents"),
+        documentsGate("/admin/orders/:id/documents"),
+        documentsGate("/admin/orders/:id/packing-lists"),
+        // Rechnungen & Stornos
+        documentsGate("/store/documents", "invoices"),
+        documentsGate("/admin/orders/:id/documents", "invoices"),
+        // Packlisten
+        documentsGate("/admin/orders/:id/packing-lists", "packing_lists"),
+        {
+            matcher: "/store/documents",
+            methods: ["GET"],
+            middlewares: [(0, http_1.authenticate)("customer", ["session", "bearer"])],
+        },
+        {
+            matcher: "/store/documents/:id",
+            methods: ["GET"],
+            middlewares: [(0, http_1.authenticate)("customer", ["session", "bearer"])],
+        },
+        {
+            matcher: "/store/documents/:id/download",
+            methods: ["GET"],
+            middlewares: [(0, http_1.authenticate)("customer", ["session", "bearer"])],
+        },
+        {
+            matcher: "/admin/orders/:id/documents",
+            methods: ["GET", "POST"],
+            middlewares: [(0, http_1.authenticate)("user", ["session", "bearer"])],
+        },
+        {
+            matcher: "/admin/orders/:id/documents/:document_id/download",
+            methods: ["GET"],
+            middlewares: [(0, http_1.authenticate)("user", ["session", "bearer"])],
+        },
+        {
+            matcher: "/admin/orders/:id/documents/regenerate",
+            methods: ["POST"],
+            middlewares: [
+                (0, http_1.authenticate)("user", ["session", "bearer"]),
+                (0, http_1.validateAndTransformBody)(documents_1.RegenerateAdminOrderDocumentBodySchema),
+            ],
+        },
+        {
+            matcher: "/admin/orders/:id/documents/:document_id/regenerate",
+            methods: ["POST"],
+            middlewares: [
+                (0, http_1.authenticate)("user", ["session", "bearer"]),
+                (0, http_1.validateAndTransformBody)(documents_1.RegenerateAdminOrderDocumentBodySchema),
+            ],
+        },
+        {
+            matcher: "/admin/orders/:id/packing-lists",
+            methods: ["GET"],
+            middlewares: [(0, http_1.authenticate)("user", ["session", "bearer"])],
+        },
+        {
+            matcher: "/admin/orders/:id/packing-lists/:fulfillment_id/download",
+            methods: ["GET"],
+            middlewares: [(0, http_1.authenticate)("user", ["session", "bearer"])],
+        },
+        {
+            matcher: "/admin/orders/:id/packing-lists/:fulfillment_id/retry",
+            methods: ["POST"],
+            middlewares: [
+                (0, http_1.authenticate)("user", ["session", "bearer"]),
+                (0, http_1.validateAndTransformBody)(documents_1.RetryAdminOrderPackingListBodySchema),
+            ],
+        },
+        // --- Dateispeicher (/files gateway) ---------------------------------
+        {
+            matcher: "/files/private/:token",
+            methods: ["GET"],
+            middlewares: [
+                (0, http_1.validateAndTransformQuery)(files_1.PrivateFileGatewayDownloadQuerySchema, {
+                    isList: false,
+                }),
+            ],
+        },
+        {
+            bodyParser: false,
+            matcher: "/files/upload/:token",
+            methods: ["PUT"],
+            middlewares: [
+                (0, http_1.validateAndTransformQuery)(files_1.PrivateFileGatewayDownloadQuerySchema, {
+                    isList: false,
+                }),
             ],
         },
     ],
 });
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibWlkZGxld2FyZXMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYXBpL21pZGRsZXdhcmVzLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUEsbURBSWlDO0FBQ2pDLCtHQUFzSDtBQUV0SCwyRUFBMkU7QUFDM0UsNkVBQTZFO0FBQzdFLFdBQVc7QUFDWCxrQkFBZSxJQUFBLHdCQUFpQixFQUFDO0lBQy9CLE1BQU0sRUFBRTtRQUNOO1lBQ0UsT0FBTyxFQUFFLHdCQUF3QjtZQUNqQyxPQUFPLEVBQUUsQ0FBQyxLQUFLLENBQUM7WUFDaEIsV0FBVyxFQUFFLENBQUMsSUFBQSxtQkFBWSxFQUFDLE1BQU0sRUFBRSxDQUFDLFNBQVMsRUFBRSxRQUFRLENBQUMsQ0FBQyxDQUFDO1NBQzNEO1FBQ0Q7WUFDRSxPQUFPLEVBQUUsd0JBQXdCO1lBQ2pDLE9BQU8sRUFBRSxDQUFDLE1BQU0sQ0FBQztZQUNqQixXQUFXLEVBQUU7Z0JBQ1gsSUFBQSxtQkFBWSxFQUFDLE1BQU0sRUFBRSxDQUFDLFNBQVMsRUFBRSxRQUFRLENBQUMsQ0FBQztnQkFDM0MsSUFBQSwrQkFBd0IsRUFBQyw0Q0FBMEIsQ0FBQzthQUNyRDtTQUNGO0tBQ0Y7Q0FDRixDQUFDLENBQUEifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/packing-list-response.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toPackingListSummary = void 0;
+const toPackingListSummary = (value) => {
+    const latestRevision = value.revisions[0] ?? null;
+    const latestReady = value.revisions.find((revision) => revision.generation_status === "ready");
+    const snapshot = latestRevision?.snapshot ?? latestReady?.snapshot ?? null;
+    return {
+        id: value.packing_list.id,
+        fulfillment_id: value.packing_list.fulfillment_id,
+        status: value.packing_list.lifecycle_status === "canceled"
+            ? "canceled"
+            : (latestRevision?.generation_status ?? "pending"),
+        number: snapshot?.document.number ?? null,
+        source_revision: latestRevision?.source_revision ?? null,
+        generated_at: latestReady?.generated_at?.toISOString() ?? null,
+        location_name: snapshot?.fulfillment.location_name ?? null,
+        failure_reason: latestRevision?.failure_reason ?? null,
+    };
+};
+exports.toPackingListSummary = toPackingListSummary;
+//# sourceMappingURL=data:application/json;base64,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