@hartl-services/medusa-base 0.4.0 → 1.1.0

package/.medusa/server/src/api/admin/email/messages/[id]/resends/route.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = void 0;
+const email_1 = require("@hartl-services/medusa-food-supplements-contracts/schemas/email");
+const email_2 = require("../../../../../../modules/email");
+const dispatch_email_message_1 = require("../../../../../../workflows/email/dispatch-email-message");
+const POST = async (req, res) => {
+    const email = req.scope.resolve(email_2.EMAIL_MODULE);
+    const clone = await email.createAdminResend({
+        source_message_id: req.params.id,
+        request_id: req.validatedBody.request_id,
+        requested_by_admin_id: req.auth_context.actor_id,
+    });
+    await (0, dispatch_email_message_1.dispatchEmailMessageWorkflow)(req.scope).run({
+        input: { message_id: clone.id },
+    });
+    const detail = await email.getAdminEmailMessage(clone.id);
+    const response = email_1.ResendAdminEmailMessageResponseSchema.parse({
+        message: detail.message,
+    });
+    res.json(response);
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL2VtYWlsL21lc3NhZ2VzL1tpZF0vcmVzZW5kcy9yb3V0ZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFJQSwyRkFBd0g7QUFNeEgsMkRBQStEO0FBRS9ELHFHQUF3RztBQUVqRyxNQUFNLElBQUksR0FBRyxLQUFLLEVBQ3ZCLEdBQXdELEVBQ3hELEdBQW9ELEVBQ3JDLEVBQUU7SUFDakIsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQXFCLG9CQUFZLENBQUMsQ0FBQztJQUNsRSxNQUFNLEtBQUssR0FBRyxNQUFNLEtBQUssQ0FBQyxpQkFBaUIsQ0FBQztRQUMxQyxpQkFBaUIsRUFBRSxHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUU7UUFDaEMsVUFBVSxFQUFFLEdBQUcsQ0FBQyxhQUFhLENBQUMsVUFBVTtRQUN4QyxxQkFBcUIsRUFBRSxHQUFHLENBQUMsWUFBWSxDQUFDLFFBQVE7S0FDakQsQ0FBQyxDQUFDO0lBQ0gsTUFBTSxJQUFBLHFEQUE0QixFQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsQ0FBQyxHQUFHLENBQUM7UUFDaEQsS0FBSyxFQUFFLEVBQUUsVUFBVSxFQUFFLEtBQUssQ0FBQyxFQUFFLEVBQUU7S0FDaEMsQ0FBQyxDQUFDO0lBQ0gsTUFBTSxNQUFNLEdBQUcsTUFBTSxLQUFLLENBQUMsb0JBQW9CLENBQUMsS0FBSyxDQUFDLEVBQUUsQ0FBQyxDQUFDO0lBQzFELE1BQU0sUUFBUSxHQUFHLDZDQUFxQyxDQUFDLEtBQUssQ0FBQztRQUMzRCxPQUFPLEVBQUUsTUFBTSxDQUFDLE9BQU87S0FDeEIsQ0FBQyxDQUFDO0lBQ0gsR0FBRyxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsQ0FBQztBQUNyQixDQUFDLENBQUM7QUFsQlcsUUFBQSxJQUFJLFFBa0JmIn0=

package/.medusa/server/src/api/admin/email/messages/[id]/route.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const email_1 = require("@hartl-services/medusa-food-supplements-contracts/schemas/email");
+const email_2 = require("../../../../../modules/email");
+const GET = async (req, res) => {
+    const email = req.scope.resolve(email_2.EMAIL_MODULE);
+    const response = email_1.GetAdminEmailMessageResponseSchema.parse(await email.getAdminEmailMessage(req.params.id));
+    res.json(response);
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL2VtYWlsL21lc3NhZ2VzL1tpZF0vcm91dGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBSUEsMkZBQXFIO0FBR3JILHdEQUE0RDtBQUdyRCxNQUFNLEdBQUcsR0FBRyxLQUFLLEVBQ3RCLEdBQStCLEVBQy9CLEdBQWlELEVBQ2xDLEVBQUU7SUFDakIsTUFBTSxLQUFLLEdBQUcsR0FBRyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQXFCLG9CQUFZLENBQUMsQ0FBQztJQUNsRSxNQUFNLFFBQVEsR0FBRywwQ0FBa0MsQ0FBQyxLQUFLLENBQ3ZELE1BQU0sS0FBSyxDQUFDLG9CQUFvQixDQUFDLEdBQUcsQ0FBQyxNQUFNLENBQUMsRUFBRSxDQUFDLENBQ2hELENBQUM7SUFDRixHQUFHLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO0FBQ3JCLENBQUMsQ0FBQztBQVRXLFFBQUEsR0FBRyxPQVNkIn0=

package/.medusa/server/src/api/admin/email/messages/route.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const email_1 = require("@hartl-services/medusa-food-supplements-contracts/schemas/email");
+const email_2 = require("../../../../modules/email");
+const GET = async (req, res) => {
+    const email = req.scope.resolve(email_2.EMAIL_MODULE);
+    const response = email_1.ListAdminEmailMessagesResponseSchema.parse(await email.listAdminEmailMessages(req.validatedQuery));
+    res.json(response);
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/email/terms-versions/[id]/download/route.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const email_1 = require("../../../../../../modules/email");
+const terms_download_response_1 = require("../../../../../terms-download-response");
+const GET = async (req, res) => {
+    const email = req.scope.resolve(email_1.EMAIL_MODULE);
+    const version = await email.getEmailTermsVersionFile(req.params.id);
+    const files = req.scope.resolve(utils_1.Modules.FILE);
+    const stream = await files.getDownloadStream(version.file_id);
+    (0, terms_download_response_1.setTermsDownloadHeaders)(res, version.filename);
+    stream.pipe(res);
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/email/terms-versions/route.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = exports.GET = void 0;
+const node_crypto_1 = require("node:crypto");
+const utils_1 = require("@medusajs/framework/utils");
+const email_1 = require("@hartl-services/medusa-food-supplements-contracts/schemas/email");
+const email_2 = require("../../../../modules/email");
+const decodePdf = (contentBase64) => {
+    const content = Buffer.from(contentBase64, "base64");
+    if (content.length < 1 ||
+        content.length > email_1.EMAIL_TERMS_MAX_PDF_BYTES ||
+        content.toString("base64") !== contentBase64 ||
+        content.subarray(0, 5).toString("ascii") !== "%PDF-") {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "content_base64 must contain a valid PDF of at most 5 MiB.");
+    }
+    return content;
+};
+const GET = async (req, res) => {
+    const email = req.scope.resolve(email_2.EMAIL_MODULE);
+    const response = email_1.ListAdminEmailTermsVersionsResponseSchema.parse(await email.listAdminEmailTermsVersions(req.validatedQuery));
+    res.json(response);
+};
+exports.GET = GET;
+const POST = async (req, res) => {
+    const body = req.validatedBody;
+    const content = decodePdf(body.content_base64);
+    const email = req.scope.resolve(email_2.EMAIL_MODULE);
+    const files = req.scope.resolve(utils_1.Modules.FILE);
+    const result = await email.createEmailTermsVersion({
+        request_id: body.request_id,
+        filename: body.filename,
+        effective_at: new Date(body.effective_at),
+        byte_size: content.byteLength,
+        sha256: (0, node_crypto_1.createHash)("sha256").update(content).digest("hex"),
+    }, async () => (await files.createFiles({
+        filename: body.filename,
+        mimeType: "application/pdf",
+        content: content.toString("base64"),
+        access: "private",
+    })).id, async (fileId) => {
+        await files.deleteFiles([fileId]);
+    });
+    const response = email_1.CreateAdminEmailTermsVersionResponseSchema.parse(result);
+    res.status(result.created ? 201 : 200).json(response);
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/orders/[id]/documents/[document_id]/download/route.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const document_download_response_1 = require("../../../../../../document-download-response");
+const resolve_services_1 = require("../../../../../../../documents/utils/resolve-services");
+const GET = async (req, res) => {
+    const document = await (0, resolve_services_1.resolveDocumentsService)(req.scope).getDocumentForOrder(req.params.document_id, req.params.id);
+    if (!document?.file_id || !document.filename) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Document not found.");
+    }
+    const files = req.scope.resolve(utils_1.Modules.FILE);
+    const stream = await files.getDownloadStream(document.file_id);
+    (0, document_download_response_1.setDocumentDownloadHeaders)(res, {
+        filename: document.filename,
+        disposition: "inline",
+    });
+    stream.pipe(res);
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicm91dGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi8uLi9zcmMvYXBpL2FkbWluL29yZGVycy9baWRdL2RvY3VtZW50cy9bZG9jdW1lbnRfaWRdL2Rvd25sb2FkL3JvdXRlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUtBLHFEQUFnRTtBQUVoRSw2RkFBeUY7QUFDekYsNEZBQStGO0FBRXhGLE1BQU0sR0FBRyxHQUFHLEtBQUssRUFDdEIsR0FBK0IsRUFDL0IsR0FBbUIsRUFDbkIsRUFBRTtJQUNGLE1BQU0sUUFBUSxHQUFHLE1BQU0sSUFBQSwwQ0FBdUIsRUFBQyxHQUFHLENBQUMsS0FBSyxDQUFDLENBQUMsbUJBQW1CLENBQzNFLEdBQUcsQ0FBQyxNQUFNLENBQUMsV0FBVyxFQUN0QixHQUFHLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FDZCxDQUFBO0lBQ0QsSUFBSSxDQUFDLFFBQVEsRUFBRSxPQUFPLElBQUksQ0FBQyxRQUFRLENBQUMsUUFBUSxFQUFFLENBQUM7UUFDN0MsTUFBTSxJQUFJLG1CQUFXLENBQUMsbUJBQVcsQ0FBQyxLQUFLLENBQUMsU0FBUyxFQUFFLHFCQUFxQixDQUFDLENBQUE7SUFDM0UsQ0FBQztJQUVELE1BQU0sS0FBSyxHQUFHLEdBQUcsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLGVBQU8sQ0FBQyxJQUFJLENBQXVCLENBQUE7SUFDbkUsTUFBTSxNQUFNLEdBQUcsTUFBTSxLQUFLLENBQUMsaUJBQWlCLENBQUMsUUFBUSxDQUFDLE9BQU8sQ0FBQyxDQUFBO0lBQzlELElBQUEsdURBQTBCLEVBQUMsR0FBRyxFQUFFO1FBQzlCLFFBQVEsRUFBRSxRQUFRLENBQUMsUUFBUTtRQUMzQixXQUFXLEVBQUUsUUFBUTtLQUN0QixDQUFDLENBQUE7SUFDRixNQUFNLENBQUMsSUFBSSxDQUFDLEdBQUcsQ0FBQyxDQUFBO0FBQ2xCLENBQUMsQ0FBQTtBQW5CWSxRQUFBLEdBQUcsT0FtQmYifQ==

package/.medusa/server/src/api/admin/orders/[id]/documents/[document_id]/regenerate/route.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const document_response_1 = require("../../../../../../document-response");
+const resolve_services_1 = require("../../../../../../../documents/utils/resolve-services");
+const issue_invoice_after_shipment_1 = require("../../../../../../../workflows/documents/issue-invoice-after-shipment");
+const regenerate_issued_document_1 = require("../../../../../../../workflows/documents/regenerate-issued-document");
+/** Regenerates one issued document without creating a successor document. */
+const POST = async (req, res) => {
+    const documentsService = (0, resolve_services_1.resolveDocumentsService)(req.scope);
+    const currentDocument = await documentsService.getDocumentForOrder(req.params.document_id, req.params.id);
+    if (!currentDocument) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "The issued document was not found for this order.");
+    }
+    const { result: regeneratedDocumentId } = currentDocument.kind === "invoice"
+        ? await (0, issue_invoice_after_shipment_1.issueInvoiceAfterShipmentWorkflow)(req.scope).run({
+            input: {
+                order_id: req.params.id,
+                regenerate_document_id: currentDocument.id,
+            },
+        })
+        : await (0, regenerate_issued_document_1.regenerateIssuedDocumentWorkflow)(req.scope).run({
+            input: {
+                order_id: req.params.id,
+                document_id: currentDocument.id,
+            },
+        });
+    const regeneratedDocument = regeneratedDocumentId
+        ? await documentsService.retrieveDocumentRecord(regeneratedDocumentId)
+        : null;
+    if (!regeneratedDocument) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, "The regenerated document could not be retrieved.");
+    }
+    res.json({ document: (0, document_response_1.toDocumentSummary)(regeneratedDocument) });
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/orders/[id]/documents/regenerate/route.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const document_response_1 = require("../../../../../document-response");
+const resolve_services_1 = require("../../../../../../documents/utils/resolve-services");
+const issue_invoice_after_shipment_1 = require("../../../../../../workflows/documents/issue-invoice-after-shipment");
+/** Regenerates the issued invoice in place from current order source data. */
+const POST = async (req, res) => {
+    const documentsService = (0, resolve_services_1.resolveDocumentsService)(req.scope);
+    const currentInvoice = await documentsService.getIssuedInvoiceForOrder(req.params.id);
+    if (!currentInvoice) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.INVALID_DATA, "An issued invoice is required before it can be regenerated.");
+    }
+    const { result: issuedDocumentId } = await (0, issue_invoice_after_shipment_1.issueInvoiceAfterShipmentWorkflow)(req.scope).run({
+        input: {
+            order_id: req.params.id,
+            regenerate_document_id: currentInvoice.id,
+        },
+    });
+    const regeneratedInvoice = issuedDocumentId
+        ? await documentsService.retrieveDocumentRecord(issuedDocumentId)
+        : null;
+    if (!regeneratedInvoice) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, "The regenerated invoice could not be retrieved.");
+    }
+    res.json({
+        document: (0, document_response_1.toDocumentSummary)(regeneratedInvoice),
+    });
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/orders/[id]/documents/route.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const document_response_1 = require("../../../../document-response");
+const resolve_services_1 = require("../../../../../documents/utils/resolve-services");
+const issue_invoice_after_shipment_1 = require("../../../../../workflows/documents/issue-invoice-after-shipment");
+/** All authenticated Admin users can inspect issued documents for an order. */
+const GET = async (req, res) => {
+    const documents = await (0, resolve_services_1.resolveDocumentsService)(req.scope).listIssuedDocumentsForOrder(req.params.id);
+    res.json({ documents: documents.map(document_response_1.toDocumentSummary) });
+};
+exports.GET = GET;
+/**
+ * Issues the total invoice for an older order on demand. The workflow still
+ * enforces the normal final-shipment and cancellation checks, so this endpoint
+ * cannot create a premature invoice.
+ */
+const POST = async (req, res) => {
+    const documentsService = (0, resolve_services_1.resolveDocumentsService)(req.scope);
+    const { result: issuedDocumentId } = await (0, issue_invoice_after_shipment_1.issueInvoiceAfterShipmentWorkflow)(req.scope).run({
+        input: { order_id: req.params.id },
+    });
+    const issuedDocument = issuedDocumentId
+        ? await documentsService.retrieveDocumentRecord(issuedDocumentId)
+        : (await documentsService.listIssuedDocumentsForOrder(req.params.id)).find((document) => document.kind === "invoice");
+    if (!issuedDocument) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.CONFLICT, "Invoice issuance is already in progress or did not complete. Retry shortly.");
+    }
+    res.status(issuedDocumentId ? 201 : 200).json({
+        document: (0, document_response_1.toDocumentSummary)(issuedDocument),
+        created: Boolean(issuedDocumentId),
+    });
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/orders/[id]/packing-lists/[fulfillment_id]/download/route.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const document_download_response_1 = require("../../../../../../document-download-response");
+const resolve_services_1 = require("../../../../../../../documents/utils/resolve-services");
+const GET = async (req, res) => {
+    const record = await (0, resolve_services_1.resolveDocumentsService)(req.scope).getPackingListForOrderAndFulfillment(req.params.id, req.params.fulfillment_id);
+    const revision = record?.revisions.find((candidate) => candidate.generation_status === "ready" &&
+        candidate.file_id &&
+        candidate.filename);
+    if (!revision?.file_id || !revision.filename) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Packing list not found.");
+    }
+    const files = req.scope.resolve(utils_1.Modules.FILE);
+    const stream = await files.getDownloadStream(revision.file_id);
+    (0, document_download_response_1.setDocumentDownloadHeaders)(res, {
+        filename: revision.filename,
+        disposition: "inline",
+    });
+    stream.pipe(res);
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/orders/[id]/packing-lists/[fulfillment_id]/retry/route.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.POST = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const resolve_services_1 = require("../../../../../../../documents/utils/resolve-services");
+const issue_packing_list_1 = require("../../../../../../../workflows/documents/issue-packing-list");
+const packing_list_response_1 = require("../../../../../../packing-list-response");
+const POST = async (req, res) => {
+    await (0, issue_packing_list_1.issuePackingListWorkflow)(req.scope).run({
+        input: {
+            order_id: req.params.id,
+            fulfillment_id: req.params.fulfillment_id,
+        },
+    });
+    const record = await (0, resolve_services_1.resolveDocumentsService)(req.scope).getPackingListForOrderAndFulfillment(req.params.id, req.params.fulfillment_id);
+    let fallbackStatus = "pending";
+    if (!record) {
+        const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+        const { data } = await query.graph({
+            entity: "fulfillment",
+            fields: ["id", "canceled_at"],
+            filters: { id: req.params.fulfillment_id },
+        });
+        if (data[0]?.canceled_at !== null && data[0]?.canceled_at !== undefined) {
+            fallbackStatus = "canceled";
+        }
+    }
+    res.json({
+        packing_list: record
+            ? (0, packing_list_response_1.toPackingListSummary)(record)
+            : {
+                id: null,
+                fulfillment_id: req.params.fulfillment_id,
+                status: fallbackStatus,
+                number: null,
+                source_revision: null,
+                generated_at: null,
+                location_name: null,
+                failure_reason: null,
+            },
+    });
+};
+exports.POST = POST;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/admin/orders/[id]/packing-lists/route.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const resolve_services_1 = require("../../../../../documents/utils/resolve-services");
+const packing_list_response_1 = require("../../../../packing-list-response");
+const asFulfillments = (value) => {
+    if (!Array.isArray(value)) {
+        return [];
+    }
+    return value.flatMap((entry) => {
+        if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+            return [];
+        }
+        const record = entry;
+        if (typeof record.id !== "string" || !record.id) {
+            return [];
+        }
+        const createdAt = record.created_at instanceof Date
+            ? record.created_at.toISOString()
+            : typeof record.created_at === "string"
+                ? record.created_at
+                : new Date(0).toISOString();
+        return [
+            {
+                id: record.id,
+                created_at: createdAt,
+                requires_shipping: typeof record.requires_shipping === "boolean"
+                    ? record.requires_shipping
+                    : undefined,
+                canceled_at: record.canceled_at instanceof Date
+                    ? record.canceled_at.toISOString()
+                    : typeof record.canceled_at === "string"
+                        ? record.canceled_at
+                        : null,
+            },
+        ];
+    });
+};
+const GET = async (req, res) => {
+    const query = req.scope.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+    const { data } = await query.graph({
+        entity: "order",
+        fields: [
+            "id",
+            "fulfillments.id",
+            "fulfillments.created_at",
+            "fulfillments.requires_shipping",
+            "fulfillments.canceled_at",
+        ],
+        filters: { id: req.params.id },
+    });
+    if (data.length !== 1) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "Order not found.");
+    }
+    const order = data[0];
+    const fulfillments = asFulfillments(order.fulfillments)
+        .filter((fulfillment) => fulfillment.requires_shipping !== false)
+        .sort((left, right) => left.created_at.localeCompare(right.created_at) ||
+        left.id.localeCompare(right.id));
+    const records = await (0, resolve_services_1.resolveDocumentsService)(req.scope).listPackingListsForOrder(req.params.id);
+    const recordsByFulfillment = new Map(records.map((record) => [record.packing_list.fulfillment_id, record]));
+    const packingLists = fulfillments.map((fulfillment) => {
+        const record = recordsByFulfillment.get(fulfillment.id);
+        if (record) {
+            return (0, packing_list_response_1.toPackingListSummary)(record);
+        }
+        return {
+            id: null,
+            fulfillment_id: fulfillment.id,
+            status: fulfillment.canceled_at ? "canceled" : "missing",
+            number: null,
+            source_revision: null,
+            generated_at: null,
+            location_name: null,
+            failure_reason: null,
+        };
+    });
+    res.json({ packing_lists: packingLists });
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/document-download-response.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setDocumentDownloadHeaders = void 0;
+const contentDispositionFilename = (filename) => filename.replaceAll(/[^a-zA-Z0-9._-]/g, "_");
+/**
+ * PDFs contain personal and financial data. Keep their response policy in one
+ * place so every protected download gets the same cache and MIME safeguards.
+ */
+const setDocumentDownloadHeaders = (res, input) => {
+    res.setHeader("Cache-Control", "private, no-store, max-age=0");
+    res.setHeader("Content-Type", "application/pdf");
+    res.setHeader("Content-Disposition", `${input.disposition}; filename="${contentDispositionFilename(input.filename)}"`);
+    res.setHeader("X-Content-Type-Options", "nosniff");
+};
+exports.setDocumentDownloadHeaders = setDocumentDownloadHeaders;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZG9jdW1lbnQtZG93bmxvYWQtcmVzcG9uc2UuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYXBpL2RvY3VtZW50LWRvd25sb2FkLXJlc3BvbnNlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUlBLE1BQU0sMEJBQTBCLEdBQUcsQ0FBQyxRQUFnQixFQUFVLEVBQUUsQ0FDOUQsUUFBUSxDQUFDLFVBQVUsQ0FBQyxrQkFBa0IsRUFBRSxHQUFHLENBQUMsQ0FBQTtBQUU5Qzs7O0dBR0c7QUFDSSxNQUFNLDBCQUEwQixHQUFHLENBQ3hDLEdBQW1CLEVBQ25CLEtBQTZELEVBQ3ZELEVBQUU7SUFDUixHQUFHLENBQUMsU0FBUyxDQUFDLGVBQWUsRUFBRSw4QkFBOEIsQ0FBQyxDQUFBO0lBQzlELEdBQUcsQ0FBQyxTQUFTLENBQUMsY0FBYyxFQUFFLGlCQUFpQixDQUFDLENBQUE7SUFDaEQsR0FBRyxDQUFDLFNBQVMsQ0FDWCxxQkFBcUIsRUFDckIsR0FBRyxLQUFLLENBQUMsV0FBVyxlQUFlLDBCQUEwQixDQUFDLEtBQUssQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUNqRixDQUFBO0lBQ0QsR0FBRyxDQUFDLFNBQVMsQ0FBQyx3QkFBd0IsRUFBRSxTQUFTLENBQUMsQ0FBQTtBQUNwRCxDQUFDLENBQUE7QUFYWSxRQUFBLDBCQUEwQiw4QkFXdEMifQ==

package/.medusa/server/src/api/document-response.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toDocumentSummary = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+/**
+ * Shared API summary. It deliberately excludes immutable source data,
+ * private-file/artifact identifiers, recipient details and resolution state.
+ */
+const toDocumentSummary = (document) => {
+    if (!document.snapshot || !document.document_number || !document.issued_at) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, `Issued document ${document.id} is missing its public summary.`);
+    }
+    return {
+        id: document.id,
+        kind: document.kind,
+        number: document.document_number,
+        order_display_id: document.order_display_id,
+        issued_at: document.issued_at.toISOString(),
+        total: document.snapshot.totals.total,
+    };
+};
+exports.toDocumentSummary = toDocumentSummary;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZG9jdW1lbnQtcmVzcG9uc2UuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi8uLi9zcmMvYXBpL2RvY3VtZW50LXJlc3BvbnNlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLHFEQUF1RDtBQUt2RDs7O0dBR0c7QUFDSSxNQUFNLGlCQUFpQixHQUFHLENBQy9CLFFBQXdCLEVBQ1AsRUFBRTtJQUNuQixJQUFJLENBQUMsUUFBUSxDQUFDLFFBQVEsSUFBSSxDQUFDLFFBQVEsQ0FBQyxlQUFlLElBQUksQ0FBQyxRQUFRLENBQUMsU0FBUyxFQUFFLENBQUM7UUFDM0UsTUFBTSxJQUFJLG1CQUFXLENBQ25CLG1CQUFXLENBQUMsS0FBSyxDQUFDLGdCQUFnQixFQUNsQyxtQkFBbUIsUUFBUSxDQUFDLEVBQUUsaUNBQWlDLENBQ2hFLENBQUE7SUFDSCxDQUFDO0lBRUQsT0FBTztRQUNMLEVBQUUsRUFBRSxRQUFRLENBQUMsRUFBRTtRQUNmLElBQUksRUFBRSxRQUFRLENBQUMsSUFBSTtRQUNuQixNQUFNLEVBQUUsUUFBUSxDQUFDLGVBQWU7UUFDaEMsZ0JBQWdCLEVBQUUsUUFBUSxDQUFDLGdCQUFnQjtRQUMzQyxTQUFTLEVBQUUsUUFBUSxDQUFDLFNBQVMsQ0FBQyxXQUFXLEVBQUU7UUFDM0MsS0FBSyxFQUFFLFFBQVEsQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDLEtBQUs7S0FDdEMsQ0FBQTtBQUNILENBQUMsQ0FBQTtBQWxCWSxRQUFBLGlCQUFpQixxQkFrQjdCIn0=

package/.medusa/server/src/api/files/[asset]/route.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const gateway_1 = require("../../../files/gateway");
+const file_response_1 = require("../file-response");
+const GET = async (req, res) => {
+    let fileKey;
+    try {
+        fileKey = (0, gateway_1.publicFileGatewayKey)(req.params.asset);
+    }
+    catch {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "File not found.");
+    }
+    await (0, file_response_1.streamGatewayFile)({
+        cacheControl: "public, max-age=31536000, immutable",
+        fileKey,
+        files: req.scope.resolve(utils_1.Modules.FILE),
+        filename: req.params.asset,
+        response: res,
+    });
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/files/file-response.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.streamGatewayFile = void 0;
+const node_path_1 = require("node:path");
+const promises_1 = require("node:stream/promises");
+const utils_1 = require("@medusajs/framework/utils");
+const mime_types_1 = require("mime-types");
+const safeFilename = (value) => (0, node_path_1.basename)(value).replaceAll(/[^a-zA-Z0-9._-]/g, "_");
+const isNotFoundError = (error) => {
+    if (typeof error !== "object" || error === null) {
+        return false;
+    }
+    const status = "$metadata" in error &&
+        typeof error.$metadata === "object" &&
+        error.$metadata !== null &&
+        "httpStatusCode" in error.$metadata
+        ? error.$metadata.httpStatusCode
+        : undefined;
+    const name = "name" in error ? error.name : undefined;
+    return status === 404 || name === "NoSuchKey" || name === "NotFound";
+};
+const streamGatewayFile = async (input) => {
+    let stream;
+    try {
+        stream = await input.files.getDownloadStream(input.fileKey);
+    }
+    catch (error) {
+        if (isNotFoundError(error)) {
+            throw new utils_1.MedusaError(utils_1.MedusaError.Types.NOT_FOUND, "File not found.");
+        }
+        throw error;
+    }
+    input.response.setHeader("Cache-Control", input.cacheControl);
+    input.response.setHeader("Content-Security-Policy", "sandbox; default-src 'none'");
+    input.response.setHeader("Content-Type", (0, mime_types_1.lookup)(input.filename) || "application/octet-stream");
+    input.response.setHeader("X-Content-Type-Options", "nosniff");
+    if (input.disposition) {
+        input.response.setHeader("Content-Disposition", `${input.disposition}; filename="${safeFilename(input.filename)}"`);
+    }
+    await (0, promises_1.pipeline)(stream, input.response);
+};
+exports.streamGatewayFile = streamGatewayFile;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/files/gateway-options.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveFileGatewayRouteOptions = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const types_1 = require("../../files/types");
+/**
+ * The routes sign and verify with the `files.gateway` option of the base
+ * plugin the shop registered via `createS3CacheStorageConfig`, which also
+ * configures the File provider, so both always share one signing secret.
+ * Upload CORS follows Medusa's own Admin CORS setting.
+ */
+const resolveFileGatewayRouteOptions = (container) => {
+    const configModule = container.resolve(utils_1.ContainerRegistrationKeys.CONFIG_MODULE);
+    const registration = configModule.plugins?.find((plugin) => typeof plugin === "object" && plugin.resolve === types_1.BASE_PLUGIN_RESOLVE);
+    const options = typeof registration === "object"
+        ? registration.options
+        : undefined;
+    const signingSecret = options?.files?.gateway?.signingSecret?.trim();
+    if (!signingSecret) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNEXPECTED_STATE, "File gateway signing is not configured.");
+    }
+    return {
+        signingSecret,
+        uploadAllowedOrigins: (configModule.projectConfig?.http?.adminCors ?? "")
+            .split(",")
+            .map((origin) => origin.trim())
+            .filter(Boolean),
+    };
+};
+exports.resolveFileGatewayRouteOptions = resolveFileGatewayRouteOptions;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/api/files/private/[token]/route.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GET = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const gateway_1 = require("../../../../files/gateway");
+const file_response_1 = require("../../file-response");
+const gateway_options_1 = require("../../gateway-options");
+const GET = async (req, res) => {
+    const { signingSecret } = (0, gateway_options_1.resolveFileGatewayRouteOptions)(req.scope);
+    const fileKey = (0, gateway_1.verifyPrivateFileGatewayToken)({
+        expires: req.validatedQuery.expires,
+        signature: req.validatedQuery.signature,
+        signingSecret,
+        token: req.params.token,
+    });
+    if (!fileKey) {
+        throw new utils_1.MedusaError(utils_1.MedusaError.Types.UNAUTHORIZED, "Invalid or expired file URL.");
+    }
+    await (0, file_response_1.streamGatewayFile)({
+        cacheControl: "private, no-store, max-age=0",
+        disposition: "attachment",
+        fileKey,
+        files: req.scope.resolve(utils_1.Modules.FILE),
+        filename: fileKey,
+        response: res,
+    });
+};
+exports.GET = GET;
+//# sourceMappingURL=data:application/json;base64,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