@hartl-services/medusa-base 2.0.0 → 2.1.0

package/.medusa/server/src/workflows/email/dispatch-email-message.js

@@ -156,7 +156,9 @@ const deliverEmailClaim = async (container, claim, clock) => {
     const email = resolveEmailService(container);
     const logger = container.resolve(utils_1.ContainerRegistrationKeys.LOGGER);
     const message = claim.message;
-    if (message.kind === "auth.password_reset") {
+    // Reset and verification links exist only in their subscriber; the code keeps
+    // its original name because it is a published safe status code.
+    if ((0, types_1.isEphemeralEmailKind)(message.kind)) {
         return await failPreparation(email, logger, claim, "password_reset_requires_ephemeral_context", getNow());
     }
     if (!message.recipient || !emailAddressPattern.test(message.recipient)) {
@@ -298,4 +300,4 @@ const dispatchEmailMessageStep = (0, workflows_sdk_1.createStep)("email-dispatch
     return new workflows_sdk_1.StepResponse(await (0, exports.deliverEmailClaim)(container, claim, clock));
 });
 exports.dispatchEmailMessageWorkflow = (0, workflows_sdk_1.createWorkflow)("email-dispatch-message", (input) => new workflows_sdk_1.WorkflowResponse(dispatchEmailMessageStep(input)));
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGlzcGF0Y2gtZW1haWwtbWVzc2FnZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy93b3JrZmxvd3MvZW1haWwvZGlzcGF0Y2gtZW1haWwtbWVzc2FnZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQSw2Q0FBeUM7QUFRekMscURBSW1DO0FBQ25DLHFFQUsyQztBQUUzQyxzRkFNbUQ7QUFDbkQsK0NBQW1EO0FBQ25ELHNFQUcrQztBQUcvQywyRkFBcUY7QUFDckYscUVBQWlFO0FBQ2pFLDZDQUcyQjtBQUUzQixNQUFNLG1CQUFtQixHQUFHLDRCQUE0QixDQUFDO0FBRXpELE1BQU0sNkJBQThCLFNBQVEsS0FBSztDQUFHO0FBOEJwRCxNQUFNLG1CQUFtQixHQUFHLENBQUMsU0FBMEIsRUFBc0IsRUFBRSxDQUM3RSxTQUFTLENBQUMsT0FBTyxDQUFxQixvQkFBWSxDQUFDLENBQUM7QUFFdEQsTUFBTSxVQUFVLEdBQUcsQ0FBQyxLQUFjLEVBQVEsRUFBRTtJQUMxQyxNQUFNLElBQUksR0FBRyxLQUFLLENBQUMsQ0FBQyxDQUFDLElBQUksSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxJQUFJLElBQUksRUFBRSxDQUFDO0lBQ2xELElBQUksTUFBTSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUMsT0FBTyxFQUFFLENBQUMsRUFBRSxDQUFDO1FBQ2pDLE1BQU0sSUFBSSxTQUFTLENBQUMsMENBQTBDLENBQUMsQ0FBQztJQUNsRSxDQUFDO0lBQ0QsT0FBTyxJQUFJLENBQUM7QUFDZCxDQUFDLENBQUM7QUFFRixNQUFNLG9CQUFvQixHQUFHLENBQUMsS0FBYyxFQUE2QixFQUFFO0lBQ3pFLElBQUksQ0FBQyxLQUFLLElBQUksT0FBTyxLQUFLLEtBQUssUUFBUSxFQUFFLENBQUM7UUFDeEMsT0FBTyxJQUFJLENBQUM7SUFDZCxDQUFDO0lBQ0QsTUFBTSxNQUFNLEdBQUcsS0FBZ0MsQ0FBQztJQUNoRCxJQUNFLE9BQU8sTUFBTSxDQUFDLEVBQUUsS0FBSyxRQUFRO1FBQzdCLENBQUMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxJQUFJLEVBQUU7UUFDakIsQ0FBQyxNQUFNLENBQUMsTUFBTSxLQUFLLFNBQVM7WUFDMUIsTUFBTSxDQUFDLE1BQU0sS0FBSyxTQUFTO1lBQzNCLE1BQU0sQ0FBQyxNQUFNLEtBQUssU0FBUyxDQUFDLEVBQzlCLENBQUM7UUFDRCxPQUFPLElBQUksQ0FBQztJQUNkLENBQUM7SUFDRCxPQUFPO1FBQ0wsV0FBVyxFQUNULE9BQU8sTUFBTSxDQUFDLFdBQVcsS0FBSyxRQUFRLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxXQUFXLENBQUMsQ0FBQyxDQUFDLElBQUk7UUFDcEUsRUFBRSxFQUFFLE1BQU0sQ0FBQyxFQUFFO1FBQ2IsTUFBTSxFQUFFLE1BQU0sQ0FBQyxNQUFNO0tBQ3RCLENBQUM7QUFDSixDQUFDLENBQUM7QUFFRixNQUFNLHdCQUF3QixHQUFHLENBQUMsS0FBYyxFQUFXLEVBQUU7SUFDM0QsSUFDRSxtQkFBVyxDQUFDLGFBQWEsQ0FBQyxLQUFLLENBQUM7UUFDaEMsS0FBSyxDQUFDLElBQUksS0FBSyxtQkFBVyxDQUFDLEtBQUssQ0FBQyxTQUFTLEVBQzFDLENBQUM7UUFDRCxPQUFPLElBQUksQ0FBQztJQUNkLENBQUM7SUFDRCxJQUFJLENBQUMsS0FBSyxJQUFJLE9BQU8sS0FBSyxLQUFLLFFBQVEsRUFBRSxDQUFDO1FBQ3hDLE9BQU8sS0FBSyxDQUFDO0lBQ2YsQ0FBQztJQUNELE1BQU0sTUFBTSxHQUFHLEtBQWdDLENBQUM7SUFDaEQsSUFBSSxNQUFNLENBQUMsSUFBSSxLQUFLLFFBQVEsSUFBSSxNQUFNLENBQUMsSUFBSSxLQUFLLFdBQVcsRUFBRSxDQUFDO1FBQzVELE9BQU8sSUFBSSxDQUFDO0lBQ2QsQ0FBQztJQUNELE1BQU0sUUFBUSxHQUFHLE1BQU0sQ0FBQyxTQUFTLENBQUM7SUFDbEMsT0FBTyxDQUNMLE9BQU8sQ0FBQyxRQUFRLENBQUM7UUFDakIsT0FBTyxRQUFRLEtBQUssUUFBUTtRQUMzQixRQUFvQyxDQUFDLGNBQWMsS0FBSyxHQUFHLENBQzdELENBQUM7QUFDSixDQUFDLENBQUM7QUFFSyxNQUFNLHVCQUF1QixHQUFHLEtBQUssRUFDMUMsU0FBMEIsRUFDMUIsU0FBaUIsRUFDbUIsRUFBRTtJQUN0QyxNQUFNLEtBQUssR0FBRyxTQUFTLENBQUMsT0FBTyxDQUM3QixpQ0FBeUIsQ0FBQyxLQUFLLENBQ2hDLENBQUM7SUFDRixNQUFNLE1BQU0sR0FBRyxNQUFNLEtBQUssQ0FBQyxLQUFLLENBQUM7UUFDL0IsTUFBTSxFQUFFLGNBQWM7UUFDdEIsTUFBTSxFQUFFLENBQUMsSUFBSSxFQUFFLFFBQVEsRUFBRSxhQUFhLENBQUM7UUFDdkMsT0FBTyxFQUFFLEVBQUUsZUFBZSxFQUFFLElBQUEsb0RBQTJCLEVBQUMsU0FBUyxDQUFDLEVBQUU7S0FDckUsQ0FBQyxDQUFDO0lBQ0gsSUFBSSxNQUFNLENBQUMsSUFBSSxDQUFDLE1BQU0sR0FBRyxDQUFDLEVBQUUsQ0FBQztRQUMzQixNQUFNLElBQUksS0FBSyxDQUFDLGdEQUFnRCxDQUFDLENBQUM7SUFDcEUsQ0FBQztJQUNELE9BQU8sb0JBQW9CLENBQUMsTUFBTSxDQUFDLElBQUksQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDO0FBQzlDLENBQUMsQ0FBQztBQWhCVyxRQUFBLHVCQUF1QiwyQkFnQmxDO0FBRUYsTUFBTSxVQUFVLEdBQUcsQ0FDakIsS0FBd0IsRUFDeEIsTUFBNEMsRUFDNUMsVUFHSyxFQUFFLEVBQ3FCLEVBQUUsQ0FBQyxDQUFDO0lBQ2hDLFVBQVUsRUFBRSxLQUFLLENBQUMsT0FBTyxDQUFDLEVBQUU7SUFDNUIsR0FBRyxDQUFDLE9BQU8sQ0FBQyxXQUFXLENBQUMsQ0FBQyxDQUFDLEVBQUUsWUFBWSxFQUFFLE9BQU8sQ0FBQyxXQUFXLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDO0lBQ3JFLElBQUksRUFBRSxLQUFLLENBQUMsT0FBTyxDQUFDLElBQUk7SUFDeEIsVUFBVSxFQUFFLEtBQUssQ0FBQyxPQUFPLENBQUMsRUFBRTtJQUM1QixHQUFHLENBQUMsT0FBTyxDQUFDLGNBQWM7UUFDeEIsQ0FBQyxDQUFDLEVBQUUsZUFBZSxFQUFFLE9BQU8sQ0FBQyxjQUFjLEVBQUU7UUFDN0MsQ0FBQyxDQUFDLEVBQUUsQ0FBQztJQUNQLE1BQU07Q0FDUCxDQUFDLENBQUM7QUFFSCxNQUFNLFVBQVUsR0FBRyxDQUNqQixNQUFjLEVBQ2QsS0FBd0IsRUFDeEIsSUFBWSxFQUNOLEVBQUU7SUFDUixNQUFNLENBQUMsSUFBSSxDQUNULGtCQUFrQixLQUFLLENBQUMsT0FBTyxDQUFDLEVBQUUsU0FBUyxLQUFLLENBQUMsT0FBTyxDQUFDLElBQUksWUFBWSxLQUFLLENBQUMsT0FBTyxDQUFDLEVBQUUsU0FBUyxJQUFJLEVBQUUsQ0FDekcsQ0FBQztBQUNKLENBQUMsQ0FBQztBQUVGLE1BQU0sZUFBZSxHQUFHLEtBQUssRUFDM0IsS0FBeUIsRUFDekIsTUFBYyxFQUNkLEtBQXdCLEVBQ3hCLElBQVksRUFDWixHQUFTLEVBQzRCLEVBQUU7SUFDdkMsTUFBTSxLQUFLLENBQUMsaUJBQWlCLENBQUM7UUFDNUIsVUFBVSxFQUFFLEtBQUssQ0FBQyxPQUFPLENBQUMsRUFBRTtRQUM1QixhQUFhLEVBQUUsS0FBSyxDQUFDLGFBQWE7UUFDbEMsWUFBWSxFQUFFLElBQUk7UUFDbEIsV0FBVyxFQUFFLEdBQUc7S0FDakIsQ0FBQyxDQUFDO0lBQ0gsVUFBVSxDQUFDLE1BQU0sRUFBRSxLQUFLLEVBQUUsSUFBSSxDQUFDLENBQUM7SUFDaEMsT0FBTyxVQUFVLENBQUMsS0FBSyxFQUFFLFFBQVEsRUFBRSxFQUFFLFdBQVcsRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDO0FBQzVELENBQUMsQ0FBQztBQUVGLE1BQU0sdUJBQXVCLEdBQUcsS0FBSyxFQUNuQyxLQUF5QixFQUN6QixNQUFjLEVBQ2QsS0FBd0IsRUFDeEIsT0FBNkIsRUFDN0IsY0FBNkIsRUFDN0IsR0FBUyxFQUM0QixFQUFFO0lBQ3ZDLElBQ0UsT0FBTyxDQUFDLE9BQU8sS0FBSyxXQUFXO1FBQy9CLElBQUEsOENBQXFCLEVBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxjQUFjLENBQUMsRUFDbkQsQ0FBQztRQUNELE1BQU0sS0FBSyxDQUFDLG9CQUFvQixDQUFDO1lBQy9CLFVBQVUsRUFBRSxLQUFLLENBQUMsT0FBTyxDQUFDLEVBQUU7WUFDNUIsYUFBYSxFQUFFLEtBQUssQ0FBQyxhQUFhO1lBQ2xDLFlBQVksRUFBRSxPQUFPLENBQUMsSUFBSTtZQUMxQixXQUFXLEVBQUUsR0FBRztZQUNoQixlQUFlLEVBQUUsSUFBQSw2Q0FBb0IsRUFBQyxHQUFHLEVBQUUsS0FBSyxDQUFDLE9BQU8sQ0FBQyxjQUFjLENBQUM7WUFDeEUsZUFBZSxFQUFFLGNBQWM7U0FDaEMsQ0FBQyxDQUFDO1FBQ0gsVUFBVSxDQUFDLE1BQU0sRUFBRSxLQUFLLEVBQUUsT0FBTyxDQUFDLElBQUksQ0FBQyxDQUFDO1FBQ3hDLE9BQU8sVUFBVSxDQUFDLEtBQUssRUFBRSxlQUFlLEVBQUU7WUFDeEMsV0FBVyxFQUFFLE9BQU8sQ0FBQyxJQUFJO1lBQ3pCLGNBQWM7U0FDZixDQUFDLENBQUM7SUFDTCxDQUFDO0lBQ0QsSUFBSSxPQUFPLENBQUMsT0FBTyxLQUFLLFdBQVcsRUFBRSxDQUFDO1FBQ3BDLE1BQU0sSUFBSSxHQUFHLGlCQUFpQixDQUFDO1FBQy9CLE1BQU0sS0FBSyxDQUFDLGlCQUFpQixDQUFDO1lBQzVCLFVBQVUsRUFBRSxLQUFLLENBQUMsT0FBTyxDQUFDLEVBQUU7WUFDNUIsYUFBYSxFQUFFLEtBQUssQ0FBQyxhQUFhO1lBQ2xDLFlBQVksRUFBRSxJQUFJO1lBQ2xCLFdBQVcsRUFBRSxHQUFHO1lBQ2hCLGVBQWUsRUFBRSxjQUFjO1NBQ2hDLENBQUMsQ0FBQztRQUNILFVBQVUsQ0FBQyxNQUFNLEVBQUUsS0FBSyxFQUFFLElBQUksQ0FBQyxDQUFDO1FBQ2hDLE9BQU8sVUFBVSxDQUFDLEtBQUssRUFBRSxRQUFRLEVBQUU7WUFDakMsV0FBVyxFQUFFLElBQUk7WUFDakIsY0FBYztTQUNmLENBQUMsQ0FBQztJQUNMLENBQUM7SUFDRCxJQUFJLE9BQU8sQ0FBQyxPQUFPLEtBQUssUUFBUSxFQUFFLENBQUM7UUFDakMsTUFBTSxLQUFLLENBQUMsaUJBQWlCLENBQUM7WUFDNUIsVUFBVSxFQUFFLEtBQUssQ0FBQyxPQUFPLENBQUMsRUFBRTtZQUM1QixhQUFhLEVBQUUsS0FBSyxDQUFDLGFBQWE7WUFDbEMsWUFBWSxFQUFFLE9BQU8sQ0FBQyxJQUFJO1lBQzFCLFdBQVcsRUFBRSxHQUFHO1lBQ2hCLGVBQWUsRUFBRSxjQUFjO1NBQ2hDLENBQUMsQ0FBQztRQUNILFVBQVUsQ0FBQyxNQUFNLEVBQUUsS0FBSyxFQUFFLE9BQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQztRQUN4QyxPQUFPLFVBQVUsQ0FBQyxLQUFLLEVBQUUsUUFBUSxFQUFFO1lBQ2pDLFdBQVcsRUFBRSxPQUFPLENBQUMsSUFBSTtZQUN6QixjQUFjO1NBQ2YsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUNELE1BQU0sS0FBSyxDQUFDLGtCQUFrQixDQUFDO1FBQzdCLFVBQVUsRUFBRSxLQUFLLENBQUMsT0FBTyxDQUFDLEVBQUU7UUFDNUIsYUFBYSxFQUFFLEtBQUssQ0FBQyxhQUFhO1FBQ2xDLFlBQVksRUFBRSxPQUFPLENBQUMsSUFBSTtRQUMxQixXQUFXLEVBQUUsR0FBRztRQUNoQixlQUFlLEVBQUUsY0FBYztLQUNoQyxDQUFDLENBQUM7SUFDSCxVQUFVLENBQUMsTUFBTSxFQUFFLEtBQUssRUFBRSxPQUFPLENBQUMsSUFBSSxDQUFDLENBQUM7SUFDeEMsT0FBTyxVQUFVLENBQUMsS0FBSyxFQUFFLFNBQVMsRUFBRTtRQUNsQyxXQUFXLEVBQUUsT0FBTyxDQUFDLElBQUk7UUFDekIsY0FBYztLQUNmLENBQUMsQ0FBQztBQUNMLENBQUMsQ0FBQztBQUVLLE1BQU0saUJBQWlCLEdBQUcsS0FBSyxFQUNwQyxTQUEwQixFQUMxQixLQUF3QixFQUN4QixLQUEwQixFQUNXLEVBQUU7SUFDdkMsTUFBTSxNQUFNLEdBQUcsS0FBSyxZQUFZLElBQUksQ0FBQyxDQUFDLENBQUMsR0FBRyxFQUFFLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUM7SUFDM0QsTUFBTSxLQUFLLEdBQUcsbUJBQW1CLENBQUMsU0FBUyxDQUFDLENBQUM7SUFDN0MsTUFBTSxNQUFNLEdBQUcsU0FBUyxDQUFDLE9BQU8sQ0FBUyxpQ0FBeUIsQ0FBQyxNQUFNLENBQUMsQ0FBQztJQUMzRSxNQUFNLE9BQU8sR0FBRyxLQUFLLENBQUMsT0FBTyxDQUFDO0lBQzlCLDhFQUE4RTtJQUM5RSxnRUFBZ0U7SUFDaEUsSUFBSSxJQUFBLDRCQUFvQixFQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsRUFBRSxDQUFDO1FBQ3ZDLE9BQU8sTUFBTSxlQUFlLENBQzFCLEtBQUssRUFDTCxNQUFNLEVBQ04sS0FBSyxFQUNMLDJDQUEyQyxFQUMzQyxNQUFNLEVBQUUsQ0FDVCxDQUFDO0lBQ0osQ0FBQztJQUNELElBQUksQ0FBQyxPQUFPLENBQUMsU0FBUyxJQUFJLENBQUMsbUJBQW1CLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxTQUFTLENBQUMsRUFBRSxDQUFDO1FBQ3ZFLE9BQU8sTUFBTSxlQUFlLENBQzFCLEtBQUssRUFDTCxNQUFNLEVBQ04sS0FBSyxFQUNMLG1CQUFtQixFQUNuQixNQUFNLEVBQUUsQ0FDVCxDQUFDO0lBQ0osQ0FBQztJQUNELE1BQU0sWUFBWSxHQUFHLGlDQUF5QixDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQyxTQUFTLENBQ3BFLE9BQU8sQ0FBQyxhQUFhLENBQ3RCLENBQUM7SUFDRixJQUFJLENBQUMsWUFBWSxDQUFDLE9BQU8sRUFBRSxDQUFDO1FBQzFCLE9BQU8sTUFBTSxlQUFlLENBQzFCLEtBQUssRUFDTCxNQUFNLEVBQ04sS0FBSyxFQUNMLHVCQUF1QixFQUN2QixNQUFNLEVBQUUsQ0FDVCxDQUFDO0lBQ0osQ0FBQztJQUNELE1BQU0scUJBQXFCLEdBQUcsa0NBQXFCLENBQUMsS0FBSyxFQUFFLENBQUMsU0FBUyxDQUNuRSxPQUFPLENBQUMsV0FBVyxDQUNwQixDQUFDO0lBQ0YsSUFBSSxDQUFDLHFCQUFxQixDQUFDLE9BQU8sRUFBRSxDQUFDO1FBQ25DLE9BQU8sTUFBTSxlQUFlLENBQzFCLEtBQUssRUFDTCxNQUFNLEVBQ04sS0FBSyxFQUNMLG9CQUFvQixFQUNwQixNQUFNLEVBQUUsQ0FDVCxDQUFDO0lBQ0osQ0FBQztJQUVELElBQUksV0FBVyxDQUFDO0lBQ2hCLElBQUksQ0FBQztRQUNILE1BQU0sS0FBSyxHQUFHLFNBQVMsQ0FBQyxPQUFPLENBQXFCLGVBQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQztRQUNsRSxXQUFXLEdBQUcsTUFBTSxPQUFPLENBQUMsR0FBRyxDQUM3QixxQkFBcUIsQ0FBQyxJQUFJLENBQUMsR0FBRyxDQUFDLEtBQUssRUFBRSxVQUFVLEVBQUUsRUFBRTtZQUNsRCxNQUFNLE9BQU8sR0FBRyxNQUFNLEtBQUssQ0FBQyxXQUFXLENBQUMsVUFBVSxDQUFDLE9BQU8sQ0FBQyxDQUFDO1lBQzVELElBQ0UsUUFBUSxJQUFJLFVBQVU7Z0JBQ3RCLENBQUMsT0FBTyxDQUFDLFVBQVUsS0FBSyxVQUFVLENBQUMsU0FBUztvQkFDMUMsSUFBQSx3QkFBVSxFQUFDLFFBQVEsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDO3dCQUNoRCxVQUFVLENBQUMsTUFBTSxDQUFDLEVBQ3RCLENBQUM7Z0JBQ0QsTUFBTSxJQUFJLDZCQUE2QixFQUFFLENBQUM7WUFDNUMsQ0FBQztZQUNELE9BQU87Z0JBQ0wsT0FBTyxFQUFFLE9BQU8sQ0FBQyxRQUFRLENBQUMsUUFBUSxDQUFDO2dCQUNuQyxZQUFZLEVBQUUsVUFBVSxDQUFDLFlBQVk7Z0JBQ3JDLFdBQVcsRUFBRSxZQUFxQjtnQkFDbEMsUUFBUSxFQUFFLFVBQVUsQ0FBQyxRQUFRO2dCQUM3QixFQUFFLEVBQUUsSUFBQSw4QkFBaUIsRUFBQyxVQUFVLENBQUM7YUFDbEMsQ0FBQztRQUNKLENBQUMsQ0FBQyxDQUNILENBQUM7SUFDSixDQUFDO0lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztRQUNmLElBQUksS0FBSyxZQUFZLDZCQUE2QixFQUFFLENBQUM7WUFDbkQsT0FBTyxNQUFNLGVBQWUsQ0FDMUIsS0FBSyxFQUNMLE1BQU0sRUFDTixLQUFLLEVBQ0wsb0JBQW9CLEVBQ3BCLE1BQU0sRUFBRSxDQUNULENBQUM7UUFDSixDQUFDO1FBQ0QsSUFBSSx3QkFBd0IsQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQ3BDLE9BQU8sTUFBTSxlQUFlLENBQzFCLEtBQUssRUFDTCxNQUFNLEVBQ04sS0FBSyxFQUNMLHdCQUF3QixFQUN4QixNQUFNLEVBQUUsQ0FDVCxDQUFDO1FBQ0osQ0FBQztRQUNELE9BQU8sTUFBTSx1QkFBdUIsQ0FDbEMsS0FBSyxFQUNMLE1BQU0sRUFDTixLQUFLLEVBQ0wsRUFBRSxJQUFJLEVBQUUsc0JBQXNCLEVBQUUsT0FBTyxFQUFFLFdBQVcsRUFBRSxFQUN0RCxJQUFJLEVBQ0osTUFBTSxFQUFFLENBQ1QsQ0FBQztJQUNKLENBQUM7SUFFRCxNQUFNLElBQUksR0FBRyxNQUFNLElBQUEsOENBQW9CLEVBQUMsU0FBUyxDQUFDLENBQUM7SUFDbkQsSUFBSSxRQUFRLENBQUM7SUFDYixJQUFJLENBQUM7UUFDSCxRQUFRLEdBQUcsSUFBQSwwQkFBVyxFQUNwQixLQUFLLENBQUMsd0JBQXdCLEVBQUUsRUFDaEM7WUFDRSxJQUFJLEVBQUUsT0FBTyxDQUFDLElBQUk7WUFDbEIsSUFBSSxFQUFFLFlBQVksQ0FBQyxJQUFJO1NBQ2YsRUFDVixJQUFJLENBQ0wsQ0FBQztJQUNKLENBQUM7SUFBQyxNQUFNLENBQUM7UUFDUCxPQUFPLE1BQU0sZUFBZSxDQUMxQixLQUFLLEVBQ0wsTUFBTSxFQUNOLEtBQUssRUFDTCxlQUFlLEVBQ2YsTUFBTSxFQUFFLENBQ1QsQ0FBQztJQUNKLENBQUM7SUFFRCxJQUFJLENBQUM7UUFDSCxNQUFNLEtBQUssQ0FBQyxpQkFBaUIsQ0FBQztZQUM1QixVQUFVLEVBQUUsS0FBSyxDQUFDLE9BQU8sQ0FBQyxFQUFFO1lBQzVCLGFBQWEsRUFBRSxLQUFLLENBQUMsYUFBYTtZQUNsQyxHQUFHLEVBQUUsTUFBTSxFQUFFO1NBQ2QsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUFDLE1BQU0sQ0FBQztRQUNQLE1BQU0sSUFBSSxHQUFHLG9CQUFvQixDQUFDO1FBQ2xDLFVBQVUsQ0FBQyxNQUFNLEVBQUUsS0FBSyxFQUFFLElBQUksQ0FBQyxDQUFDO1FBQ2hDLE9BQU8sVUFBVSxDQUFDLEtBQUssRUFBRSxhQUFhLEVBQUUsRUFBRSxXQUFXLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQztJQUNqRSxDQUFDO0lBRUQsTUFBTSxhQUFhLEdBQUcsU0FBUyxDQUFDLE9BQU8sQ0FDckMsZUFBTyxDQUFDLFlBQVksQ0FDckIsQ0FBQztJQUNGLE1BQU0sUUFBUSxHQUFHO1FBQ2YsVUFBVSxFQUFFLEtBQUssQ0FBQyxPQUFPLENBQUMsRUFBRTtRQUM1QixJQUFJLEVBQUUsT0FBTyxDQUFDLElBQUk7UUFDbEIsVUFBVSxFQUFFLE9BQU8sQ0FBQyxFQUFFO0tBQ3ZCLENBQUM7SUFDRixJQUFJLGFBQXNCLENBQUM7SUFDM0IsSUFBSSxPQUFPLEdBQThCLElBQUksQ0FBQztJQUM5QyxJQUFJLENBQUM7UUFDSCxPQUFPLEdBQUcsb0JBQW9CLENBQzVCLE1BQU0sYUFBYSxDQUFDLG1CQUFtQixDQUFDO1lBQ3RDLFdBQVc7WUFDWCxPQUFPLEVBQUUsT0FBTztZQUNoQixPQUFPLEVBQUU7Z0JBQ1AsSUFBSSxFQUFFLFFBQVEsQ0FBQyxJQUFJO2dCQUNuQixPQUFPLEVBQUUsUUFBUSxDQUFDLE9BQU87Z0JBQ3pCLElBQUksRUFBRSxRQUFRLENBQUMsSUFBSTthQUNwQjtZQUNELElBQUksRUFBRSxRQUFRO1lBQ2QsZUFBZSxFQUFFLElBQUEsb0RBQTJCLEVBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7WUFDOUQsR0FBRyxDQUFDLEtBQUssQ0FBQyx3QkFBd0I7Z0JBQ2hDLENBQUMsQ0FBQyxFQUFFLHdCQUF3QixFQUFFLEtBQUssQ0FBQyx3QkFBd0IsRUFBRTtnQkFDOUQsQ0FBQyxDQUFDLEVBQUUsQ0FBQztZQUNQLGFBQWEsRUFBRSxRQUFRO1lBQ3ZCLFdBQVcsRUFBRSxPQUFPLENBQUMsV0FBVyxJQUFJLE9BQU8sQ0FBQyxFQUFFO1lBQzlDLGFBQWEsRUFBRSxPQUFPLENBQUMsYUFBYTtZQUNwQyxRQUFRLEVBQUUsT0FBTyxDQUFDLElBQUk7WUFDdEIsRUFBRSxFQUFFLE9BQU8sQ0FBQyxTQUFTO1lBQ3JCLFlBQVksRUFBRSx3QkFBd0I7U0FDdkMsQ0FBQyxDQUNILENBQUM7SUFDSixDQUFDO0lBQUMsT0FBTyxLQUFLLEVBQUUsQ0FBQztRQUNmLGFBQWEsR0FBRyxLQUFLLENBQUM7SUFDeEIsQ0FBQztJQUVELElBQUksU0FBUyxHQUE4QixJQUFJLENBQUM7SUFDaEQsSUFBSSxZQUFZLEdBQUcsS0FBSyxDQUFDO0lBQ3pCLElBQUksQ0FBQyxPQUFPLElBQUksYUFBYSxFQUFFLENBQUM7UUFDOUIsSUFBSSxDQUFDO1lBQ0gsU0FBUyxHQUFHLE1BQU0sSUFBQSwrQkFBdUIsRUFBQyxTQUFTLEVBQUUsS0FBSyxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUMsQ0FBQztRQUN6RSxDQUFDO1FBQUMsTUFBTSxDQUFDO1lBQ1AsWUFBWSxHQUFHLElBQUksQ0FBQztRQUN0QixDQUFDO0lBQ0gsQ0FBQztJQUNELE1BQU0sWUFBWSxHQUFHLE9BQU8sSUFBSSxTQUFTLENBQUM7SUFDMUMsTUFBTSxVQUFVLEdBQUcsTUFBTSxFQUFFLENBQUM7SUFDNUIsSUFBSSxZQUFZLEVBQUUsTUFBTSxLQUFLLFNBQVMsRUFBRSxDQUFDO1FBQ3ZDLE1BQU0sS0FBSyxDQUFDLGVBQWUsQ0FBQztZQUMxQixVQUFVLEVBQUUsS0FBSyxDQUFDLE9BQU8sQ0FBQyxFQUFFO1lBQzVCLGFBQWEsRUFBRSxLQUFLLENBQUMsYUFBYTtZQUNsQyxXQUFXLEVBQUUsVUFBVTtZQUN2QixlQUFlLEVBQUUsWUFBWSxDQUFDLEVBQUU7U0FDakMsQ0FBQyxDQUFDO1FBQ0gsT0FBTyxVQUFVLENBQUMsS0FBSyxFQUFFLE1BQU0sRUFBRSxFQUFFLGNBQWMsRUFBRSxZQUFZLENBQUMsRUFBRSxFQUFFLENBQUMsQ0FBQztJQUN4RSxDQUFDO0lBRUQsTUFBTSxPQUFPLEdBQ1gsYUFBYSxJQUFJLFlBQVksRUFBRSxNQUFNLEtBQUssU0FBUyxJQUFJLENBQUMsWUFBWTtRQUNsRSxDQUFDLENBQUMsSUFBQSxvREFBMkIsRUFBQyxhQUFhLENBQUM7UUFDNUMsQ0FBQyxDQUFFLEVBQUUsSUFBSSxFQUFFLGlCQUFpQixFQUFFLE9BQU8sRUFBRSxTQUFTLEVBQVksQ0FBQztJQUNqRSxPQUFPLE1BQU0sdUJBQXVCLENBQ2xDLEtBQUssRUFDTCxNQUFNLEVBQ04sS0FBSyxFQUNMLE9BQU8sRUFDUCxZQUFZLEVBQUUsRUFBRSxJQUFJLElBQUksRUFDeEIsVUFBVSxDQUNYLENBQUM7QUFDSixDQUFDLENBQUM7QUFqTlcsUUFBQSxpQkFBaUIscUJBaU41QjtBQUVGLE1BQU0sd0JBQXdCLEdBQUcsSUFBQSwwQkFBVSxFQUl6Qyx3QkFBd0IsRUFBRSxLQUFLLEVBQUUsS0FBSyxFQUFFLEVBQUUsU0FBUyxFQUFFLEVBQUUsRUFBRTtJQUN6RCxNQUFNLFFBQVEsR0FBRyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQyxVQUFVLENBQUMsS0FBSyxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUM7SUFDMUQsTUFBTSxLQUFLLEdBQUcsUUFBUSxDQUFDLENBQUMsQ0FBQyxHQUFHLEVBQUUsQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFDLEdBQUcsRUFBRSxDQUFDLElBQUksSUFBSSxFQUFFLENBQUM7SUFDM0QsTUFBTSxLQUFLLEdBQUcsTUFBTSxtQkFBbUIsQ0FDckMsU0FBUyxDQUNWLENBQUMscUNBQXFDLENBQUM7UUFDdEMsVUFBVSxFQUFFLEtBQUssQ0FBQyxVQUFVO1FBQzVCLEdBQUcsRUFBRSxLQUFLLEVBQUU7S0FDYixDQUFDLENBQUM7SUFDSCxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUM7UUFDWCxPQUFPLElBQUksNEJBQVksQ0FBQztZQUN0QixVQUFVLEVBQUUsS0FBSyxDQUFDLFVBQVU7WUFDNUIsTUFBTSxFQUFFLGFBQWE7U0FDdEIsQ0FBQyxDQUFDO0lBQ0wsQ0FBQztJQUNELE9BQU8sSUFBSSw0QkFBWSxDQUFDLE1BQU0sSUFBQSx5QkFBaUIsRUFBQyxTQUFTLEVBQUUsS0FBSyxFQUFFLEtBQUssQ0FBQyxDQUFDLENBQUM7QUFDNUUsQ0FBQyxDQUFDLENBQUM7QUFFVSxRQUFBLDRCQUE0QixHQUFHLElBQUEsOEJBQWMsRUFDeEQsd0JBQXdCLEVBQ3hCLENBQUMsS0FBZ0MsRUFBRSxFQUFFLENBQ25DLElBQUksZ0NBQWdCLENBQUMsd0JBQXdCLENBQUMsS0FBSyxDQUFDLENBQUMsQ0FDeEQsQ0FBQyJ9

package/README.md

@@ -125,6 +125,7 @@ dashboard uses.
 | `POST` | `/admin/plugin-features/:plugin_key/settings` | Admin user | `AdminPluginFeaturesResponse` |
 | `POST` | `/admin/plugin-features/:plugin_key/actions/:action_key` | Admin user | `AdminPluginActionRunResponse` (200 sync, 202 background), 409 `AdminPluginActionConflictResponse` while it runs |
 | `GET` | `/admin/plugin-features/:plugin_key/actions/:action_key/runs` | Admin user | `AdminPluginActionRunsResponse` (`?limit=`, default 1, max 20) |
+| `POST` | `/store/customer-verification/resend` | publishable key | 202 `ResendCustomerVerificationResponse` (`{ accepted: true }`) for every address, 404 while `customer_verification` is off; see "Kontobestätigung per E-Mail" |
 
 Every authenticated Admin user may change toggles and settings and run
 actions (no RBAC by design). Admin plugin DTOs carry the toggles plus
@@ -272,7 +273,9 @@ Code on the cart and checkout hot path (cart middlewares, cart workflow hooks,
 `orderCreated` handling, cart subscribers) must never read toggles. It stays
 fail-safe and independent of the database state of this plugin. Toggles
 control visibility and reachability of features, not the integrity of
-existing data.
+existing data. Login is not the cart path: the E-Mail plugin's
+`customer_verification` toggle does switch customer logins, through an
+in-memory copy of the toggle (see "Kontobestätigung per E-Mail").
 
 ## Runtime settings
 
@@ -832,8 +835,11 @@ Options of the `email` namespace:
   `projectConfig.http.jwtSecret`.
 - `shop` — a `ShopEmailConfiguration` object: `displayName`,
   `affiliatePortalUrl`, the `passwordResetUrl`/`inviteUrl` builders and the
-  `orderNotificationEmail` mailbox. `layout` and `renderers` are optional
-  overrides, see "Shop configuration and default templates".
+  `orderNotificationEmail` mailbox. `verifyAccountUrl` (optional builder,
+  like `passwordResetUrl`; the mail appends `#token=`) is the storefront page
+  that confirms an account, needed while `customer_verification` is on.
+  `layout` and `renderers` are optional overrides, see "Shop configuration and
+  default templates".
 
 Without `email.shop` the module still boots, but it cannot dispatch: no mail
 is sent (the dispatch configuration is requested lazily and fails with
@@ -882,7 +888,8 @@ feature is switched on again.
 | --------------------- | ---------------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------- |
 | (plugin switch)       | E-Mail                 | on      | every route under `/admin/email/*` (mail log, resends, terms versions; 404); jobs `email-reconcile-attempts`, `email-reconcile-pending-messages`, `email-retry-messages`; every feature below                            | checkout and orders; already queued messages stay stored |
 | `order_mails`         | Bestell-Mails          | on      | subscribers `order-placed`, `email-shipment-created`, `email-order-canceled`, `return-requested`, `return-received`, `documents-shipment-invoice-assignment-decided`, `documents-order-cancellation-ready`, `documents-refund-ready` | jobs, Admin routes, already created messages             |
-| `account_mails`       | Konto-Mails            | on      | subscribers `password-reset`, `user-invite`                                                                                                                                                                              | jobs, Admin routes, already created messages             |
+| `account_mails`       | Konto-Mails            | on      | subscribers `password-reset`, `user-invite`, `customer-verification` (the last one only with `customer_verification` on as well)                                                                                          | jobs, Admin routes, already created messages             |
+| `customer_verification` | Kontobestätigung per E-Mail | off | Medusa's e-mail verification of customer logins (see "Kontobestätigung per E-Mail"), route `POST /store/customer-verification/resend` (404 while off), subscriber `customer-verification`; child of `account_mails` | checkout and orders; confirmed accounts stay confirmed, already created messages |
 | `affiliate_reminders` | Affiliate-Erinnerungen | on      | subscriber `affiliate-consignment-reminder-due`                                                                                                                                                                          | jobs, Admin routes, already created messages             |
 
 With the plugin switched off the three jobs return immediately, so nothing
@@ -902,6 +909,111 @@ and gates the Terms PDF versions and mail log sections below it on the
 plugin switch, showing `PluginFeatureDisabledNotice` in their place while it
 is off.
 
+### Kontobestätigung per E-Mail
+
+Feature `customer_verification` (child of `account_mails`, default **off**)
+makes customers confirm their e-mail address through a link before their
+first login. It builds on Medusa 2.19's own e-mail verification
+(`projectConfig.http.authVerificationsPerActor`) and adds the mail, the
+toggle and a resend route.
+
+How it works while the feature is on:
+
+1. A login (`POST /auth/customer/emailpass`) of an account whose address is
+   not confirmed answers `200 { verification_required: true, verification,
+   token }`. `token` is an actorless JWT, valid only for the verification
+   calls.
+2. The storefront calls Medusa's `POST /auth/verification/request`
+   (`{ code_provider: "token", entity_id: <e-mail>, entity_type: "email" }`)
+   with that token. Medusa emits `auth.verification_requested`; the
+   `customer-verification` subscriber sends the mail "Bestätige deine
+   E-Mail-Adresse" (kind `auth.verification`) to `entity_id`.
+3. The link is `<STOREFRONT_URL>/<cc>/verify-account#token=<token>`
+   (`verifyAccountUrl` plus the fragment, never a query string). The
+   storefront page calls `POST /auth/verification/confirm`
+   (`{ code: <token>, code_provider: "token" }`); the next login returns a
+   normal token.
+4. The token is valid for 15 minutes (Medusa's default `ttl_seconds` of the
+   token provider). Every new request issues a new token and invalidates the
+   previous one.
+5. `POST /store/customer-verification/resend` (`{ email }`, publishable key)
+   asks for a new mail without a login. It always answers 202
+   `{ accepted: true }`, whether or not an account exists, is confirmed or
+   was asked too recently, so addresses cannot be probed. The answer is sent
+   before any lookup (equal timing), the work runs detached. A mail follows
+   only for an existing, unconfirmed customer account whose last request is
+   older than 60 seconds. Admin users and addresses without a customer
+   account are ignored. A failure is logged with a fixed message and the
+   error class only (never the address), not answered. While the feature is
+   off the route answers 404.
+6. The same 60-second limit per account applies to Medusa's own
+   `POST /auth/verification/request`, which the storefront calls at every
+   blocked login: a base middleware answers a request within a minute of the
+   previous one with `201 { verification }` (Medusa's shape, without the
+   stored token hash) and sends nothing, so repeated logins cannot mail-bomb
+   an address; the earlier link stays valid. It applies only to the customer
+   account's own `emailpass` address while the feature is on, and fails open
+   (the request goes on to Medusa) if the check itself fails.
+
+Accounts that exist before the feature is switched on need no migration: they
+have no confirmation row, so their next login is answered with
+`verification_required` and the storefront sends them the mail. Social or
+other providers are not affected, only `emailpass` for `customer`.
+
+The mail is sent only while the plugin switch, `account_mails` and
+`customer_verification` are on. It is built from the event like the
+password-reset mail: only the token's hash (the business key) is stored, never
+the token or the link, and neither the generic retry job nor an Admin resend
+can touch it (the Event Bus retry and the 60-second resend are the retry paths).
+Medusa takes `entity_id` of the verification request from the request body
+without comparing it, so the subscriber sends only to an address that is the
+identity's own `emailpass` address and only for a customer actor.
+
+**Switching at run time.** The preset sets
+`projectConfig.http.authVerificationsPerActor` to an object whose `customer`
+is a getter: Medusa reads it on every login, and the getter answers from an
+in-memory copy of the effective toggle. The copy is loaded when the
+application starts (the E-Mail module's `onApplicationStart`) and, while
+an unref'd timer refreshes it every 30 seconds, also without traffic (stopped
+at shutdown); a read that finds the copy older than 30 seconds additionally
+starts a background refresh (stale-while-revalidate; the getter is synchronous
+and never throws). A change in the Admin therefore reaches a running instance
+within about 30 seconds plus the read (each instance has its own copy); the
+resend route, the request throttle and the subscriber read
+the toggle itself and follow at once. A failed read keeps the last value and
+logs a warning; before the first successful read the copy is off. The copy
+lives on `globalThis` because the preset (`dist`) and the plugin code Medusa
+loads (`.medusa/server`) are compiled separately. Only the preset
+(`buildFoodShopConfig` / `defineFoodShopConfig`) sets the getter; a shop with a
+hand-written config must set `authVerificationsPerActor` itself (a fixed list,
+changed by a restart) for the toggle to have any effect on logins.
+
+Login is not on the cart path, so the cart rule above is not affected.
+
+Things to know when switching it on:
+
+- Customers who are already logged in stay logged in until their session or
+  JWT expires: Medusa checks the confirmation at login and token generation
+  without an actor, and a token refresh of an existing actor skips it.
+  Only their next login asks for the confirmation.
+- A password reset does not confirm the address; the customer still
+  confirms through the link at the next login.
+- The storefront must not store the actorless `token` of a
+  `verification_required` response as the customer session. It is only for
+  the verification request, and it carries no customer.
+
+Storefront contract (DTOs, schema and path from the Contracts package,
+`types/customer-verification-store`, `schemas/customer-verification`,
+`paths/customer-verification`):
+
+- Read `GET /store/plugin-features/email` and show the confirmation flow only
+  while `features.customer_verification` is `true`.
+- Handle `verification_required` on login and registration: request the mail
+  with the actorless token, show "check your inbox" and offer "Bestätigungsmail
+  erneut senden" (`customerVerificationStorePaths.post.resend`).
+- Serve `/<cc>/verify-account`, read `token` from `location.hash`, confirm it
+  and then send the customer to the login.
+
 ### Ownership
 
 - Documents owns document issuance and publishes immutable document facts.
@@ -944,6 +1056,7 @@ installed Medusa 2.19 exports:
 | `order.return_requested` | `{ order_id: string; return_id: string }`                                                      |
 | `order.return_received`  | `{ order_id: string; return_id: string }`                                                      |
 | `auth.password_reset`    | `{ entity_id: string; actor_type: string; token: string; metadata?: Record<string, unknown> }` |
+| `auth.verification_requested` | `{ entity_id: string; entity_type: string; code_provider: string; auth_identity_id: string; code: string; expires_at: Date \| string; metadata?: Record<string, unknown> }`; not strict, `code` is missing for an already confirmed identity (ignored) |
 
 The shared immutable Documents artifact is:
 
@@ -1037,8 +1150,8 @@ has at most 35 characters. Email runtime-validates every contract before use.
 
 - The accepted kinds are exactly `order.received`, `order.received.admin`, `order.shipped`,
   `order.canceled`, `order.return_requested`, `order.return_received`,
-  `order.refunded`, `auth.password_reset`, and
-  `affiliate.consignment_report_due`.
+  `order.refunded`, `auth.password_reset`, `auth.verification`,
+  `affiliate.consignment_report_due` and `user.invite`.
 - Every automatic message has a deterministic business key.
 - Every placed Order creates independent customer and Shop intents. The customer
   intent honors `no_notification`; the Shop intent always targets the static
@@ -1060,10 +1173,11 @@ has at most 35 characters. Email runtime-validates every contract before use.
   including any invoice attachment; refund email has no Documents-disabled
   native fallback.
 - Recipients, rendered content, attachment bytes, SMTP responses, credentials,
-  reset tokens, and reset URLs are never logged.
-- Reset tokens and reset URLs are never persisted by Email or Notification.
-- Password-reset messages cannot be retried by the generic retry job or resent
-  by an Admin.
+  reset and verification tokens, and their URLs are never logged.
+- Reset and verification tokens and URLs are never persisted by Email or
+  Notification.
+- Password-reset and account-confirmation messages cannot be retried by the
+  generic retry job or resent by an Admin.
 - Unknown transport outcomes are never automatically resent.
 - Shop branding is the configured `displayName` plus the `logo` setting of
   the E-Mail plugin and the company details of the Shop-Stammdaten; a shop overrides the default layout or
@@ -1172,6 +1286,14 @@ without `iat`) and a note that the mail can be ignored. The lifetime is
 passed as the ephemeral `valid_minutes` next to `reset_url` and is never
 persisted.
 
+The account confirmation (`auth.verification`) has the subject "Bestätige
+deine E-Mail-Adresse", a "E-Mail-Adresse bestätigen" button, the link as
+copyable text, a note that the link is only valid for a limited time (a new
+one comes with the next login or "Bestätigungsmail erneut senden") and a note
+that the mail can be ignored. The link comes from `verifyAccountUrl` plus
+`#token=`; without that builder the message fails with `render_failed`. See
+"Kontobestätigung per E-Mail".
+
 The affiliate reminder (`affiliate.consignment_report_due`) greets the
 affiliate by `affiliate_display_name`, names the report month ("September
 2026", Austrian month names) and the due date ("10.10.2026") as calendar
@@ -1258,9 +1380,10 @@ process persists success, and a conscious resend can produce a duplicate.
 
 Email transport retries and Event Bus retries are separate. Once an ordinary
 message outcome is persisted, its subscriber completes and the Email retry job
-owns any `retry_pending` work. Password-reset token and URL data remain
-ephemeral; password reset is excluded from the generic retry job and Admin
-resend, and retryable handling stays bounded by the original Event Bus event.
+owns any `retry_pending` work. Password-reset and verification token and URL
+data remain ephemeral; both kinds are excluded from the generic retry job and
+Admin resend, and retryable handling stays bounded by the original Event Bus
+event.
 
 ### Admin API
 
@@ -2342,7 +2465,7 @@ validate the environment; a missing variable fails with the variable's name.
 | `displayName` | Shop name in the default e-mail templates (a shop's initial seed may use it as store name). Company name, address and UID are no options: documents and tax compliance read them only from the Shop-Stammdaten (Admin, "Hartl Services Plugins"). |
 | `orderNotificationEmail` | Receives order notification e-mails; must look like an e-mail address. |
 | `timeZone` | IANA time zone (validated with `Intl`). Chooses the annual document-number period, the printed dates on documents and the affiliate consignment reminder time zone. |
-| `storefrontCountryCode` | 2-letter lowercase country code of the storefront route. Links: `<STOREFRONT_URL>/<cc>/partnerportal` (affiliate portal), `<STOREFRONT_URL>/<cc>/reset-password` (the e-mail plugin appends `#token=`), referral base `<STOREFRONT_URL>/<cc>`. The Admin invite link is `<MEDUSA_BACKEND_URL>/app/invite?token=`. |
+| `storefrontCountryCode` | 2-letter lowercase country code of the storefront route. Links: `<STOREFRONT_URL>/<cc>/partnerportal` (affiliate portal), `<STOREFRONT_URL>/<cc>/reset-password` and `<STOREFRONT_URL>/<cc>/verify-account` (the e-mail plugin appends `#token=`), referral base `<STOREFRONT_URL>/<cc>`. The Admin invite link is `<MEDUSA_BACKEND_URL>/app/invite?token=`. |
 | `documentHtmlFactory` | Optional `DocumentHtmlFactory` that replaces the default document markup, typically `createDefaultDocumentHtmlFactory({ timeZone, theme })` from `/config` with the shop's CSS and watermark (see "Layout, logo, payment terms and shop theme"). Must be a function. |
 | `loadEnvFile` | Default `true`: calls `loadEnv(NODE_ENV \|\| "development", process.cwd())`. Pass `false` when the environment is already complete (tests, isolated child processes). |
 
@@ -2382,4 +2505,6 @@ Not configurable on purpose: the plugin order (base first), the Redis event
 bus job policy (3 attempts, exponential backoff from 1 s), S3 cache defaults
 (15 min cleanup, 1 h TTL, absolute expiration), Stripe immediate capture with
 automatic payment methods, the 24 h session lifetime, Admin path `/app`,
-consignment reminders due on day 10, and the Documents module always being part of the base.
+consignment reminders due on day 10, the Documents module always being part of the base, and
+`http.authVerificationsPerActor.customer` (a getter that follows the E-Mail `customer_verification` toggle, see
+"Kontobestätigung per E-Mail").

package/dist/email/customer-verification-snapshot.d.ts

@@ -0,0 +1,53 @@
+/**
+ * In-memory copy of the effective `customer_verification` toggle for the one
+ * place that cannot await it: Medusa reads
+ * `projectConfig.http.authVerificationsPerActor.customer` synchronously on
+ * every login. The shop preset puts `customerVerificationActors()` behind a
+ * getter there, so a toggle change in the Admin takes effect without a
+ * restart.
+ *
+ * - Boot: `startCustomerVerificationSnapshot` loads the toggle once.
+ * - Afterwards an unref'd timer refreshes every 30 s, so a change reaches an
+ *   idle instance too. A read that finds the copy older than 30 s (a blocked
+ *   timer, say) also starts one refresh in the background
+ *   (stale-while-revalidate) and still answers from the copy. A change thus
+ *   reaches a running instance within about 30 s plus the duration of the
+ *   read.
+ * - A failed read keeps the last value (initially "off") and is logged; the
+ *   next attempt waits another 30 s.
+ *
+ * The state lives on `globalThis`: the preset (`dist`) and the Medusa-loaded
+ * plugin code (`.medusa/server`) are compiled separately and would otherwise
+ * each hold their own copy. Login is not on the cart path.
+ */
+export declare const CUSTOMER_VERIFICATION_REFRESH_MS = 30000;
+export type CustomerVerificationActor = Readonly<{
+    auth_provider: string;
+    entity_type: string;
+}>;
+/** Reads the toggle once; never rejects. Concurrent calls share one read. */
+export declare const refreshCustomerVerificationSnapshot: () => Promise<void>;
+/** Stops the periodic refresh (application shutdown). The value stays. */
+export declare const stopCustomerVerificationSnapshot: () => void;
+/**
+ * Registers the reader, loads the toggle once and keeps it fresh every 30 s
+ * (application start). `read` returns the effective toggle; `warn` is the
+ * container logger. Starting again replaces the reader and the timer.
+ */
+export declare const startCustomerVerificationSnapshot: (input: Readonly<{
+    read: () => Promise<boolean>;
+    warn: (message: string) => void;
+}>) => Promise<void>;
+/** Synchronous; starts a background refresh when the copy is stale. Never throws. */
+export declare const isCustomerVerificationEnabled: () => boolean;
+/**
+ * The value of `authVerificationsPerActor.customer`: Medusa's e-mail
+ * verification for the `emailpass` provider while the toggle is on, none
+ * while it is off. A fresh array per call.
+ */
+export declare const customerVerificationActors: () => CustomerVerificationActor[];
+/**
+ * Test hook: sets the value and counts as just refreshed, so it holds for
+ * 30 s without a reader; `null` forgets reader and value.
+ */
+export declare const setCustomerVerificationEnabledForTests: (enabled: boolean | null) => void;

package/dist/email/customer-verification-snapshot.js

@@ -0,0 +1,143 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setCustomerVerificationEnabledForTests = exports.customerVerificationActors = exports.isCustomerVerificationEnabled = exports.startCustomerVerificationSnapshot = exports.stopCustomerVerificationSnapshot = exports.refreshCustomerVerificationSnapshot = exports.CUSTOMER_VERIFICATION_REFRESH_MS = void 0;
+/**
+ * In-memory copy of the effective `customer_verification` toggle for the one
+ * place that cannot await it: Medusa reads
+ * `projectConfig.http.authVerificationsPerActor.customer` synchronously on
+ * every login. The shop preset puts `customerVerificationActors()` behind a
+ * getter there, so a toggle change in the Admin takes effect without a
+ * restart.
+ *
+ * - Boot: `startCustomerVerificationSnapshot` loads the toggle once.
+ * - Afterwards an unref'd timer refreshes every 30 s, so a change reaches an
+ *   idle instance too. A read that finds the copy older than 30 s (a blocked
+ *   timer, say) also starts one refresh in the background
+ *   (stale-while-revalidate) and still answers from the copy. A change thus
+ *   reaches a running instance within about 30 s plus the duration of the
+ *   read.
+ * - A failed read keeps the last value (initially "off") and is logged; the
+ *   next attempt waits another 30 s.
+ *
+ * The state lives on `globalThis`: the preset (`dist`) and the Medusa-loaded
+ * plugin code (`.medusa/server`) are compiled separately and would otherwise
+ * each hold their own copy. Login is not on the cart path.
+ */
+exports.CUSTOMER_VERIFICATION_REFRESH_MS = 30_000;
+const STATE_KEY = Symbol.for("@hartl-services/medusa-base/customer-verification-snapshot");
+const state = () => {
+    const holder = globalThis;
+    holder[STATE_KEY] ??= {
+        enabled: false,
+        refreshedAt: null,
+        refreshing: null,
+        timer: null,
+        read: null,
+        warn: null,
+    };
+    return holder[STATE_KEY];
+};
+const logFailure = (current, error) => {
+    try {
+        current.warn?.(`Customer verification toggle could not be read, keeping "${current.enabled ? "on" : "off"}": ${error instanceof Error ? error.message : "unknown error"}`);
+    }
+    catch {
+        // A broken logger must not turn a failed refresh into a throw.
+    }
+};
+/** Reads the toggle once; never rejects. Concurrent calls share one read. */
+const refreshCustomerVerificationSnapshot = () => {
+    const current = state();
+    if (!current.read) {
+        return Promise.resolve();
+    }
+    if (current.refreshing) {
+        return current.refreshing;
+    }
+    const read = current.read;
+    // Started from a microtask so the assignment below always precedes `finally`.
+    const refreshing = Promise.resolve().then(async () => {
+        try {
+            current.enabled = (await read()) === true;
+        }
+        catch (error) {
+            logFailure(current, error);
+        }
+        finally {
+            current.refreshedAt = Date.now();
+            current.refreshing = null;
+        }
+    });
+    current.refreshing = refreshing;
+    return refreshing;
+};
+exports.refreshCustomerVerificationSnapshot = refreshCustomerVerificationSnapshot;
+const stopTimer = (current) => {
+    if (current.timer) {
+        clearInterval(current.timer);
+        current.timer = null;
+    }
+};
+/** Stops the periodic refresh (application shutdown). The value stays. */
+const stopCustomerVerificationSnapshot = () => {
+    stopTimer(state());
+};
+exports.stopCustomerVerificationSnapshot = stopCustomerVerificationSnapshot;
+/**
+ * Registers the reader, loads the toggle once and keeps it fresh every 30 s
+ * (application start). `read` returns the effective toggle; `warn` is the
+ * container logger. Starting again replaces the reader and the timer.
+ */
+const startCustomerVerificationSnapshot = (input) => {
+    const current = state();
+    current.read = input.read;
+    current.warn = input.warn;
+    stopTimer(current);
+    current.timer = setInterval(() => {
+        void (0, exports.refreshCustomerVerificationSnapshot)();
+    }, exports.CUSTOMER_VERIFICATION_REFRESH_MS);
+    // An idle timer must not keep the process (or a test run) alive.
+    current.timer.unref();
+    return (0, exports.refreshCustomerVerificationSnapshot)();
+};
+exports.startCustomerVerificationSnapshot = startCustomerVerificationSnapshot;
+/** Synchronous; starts a background refresh when the copy is stale. Never throws. */
+const isCustomerVerificationEnabled = () => {
+    const current = state();
+    if (current.read &&
+        !current.refreshing &&
+        (current.refreshedAt === null ||
+            Date.now() - current.refreshedAt >= exports.CUSTOMER_VERIFICATION_REFRESH_MS)) {
+        void (0, exports.refreshCustomerVerificationSnapshot)();
+    }
+    return current.enabled;
+};
+exports.isCustomerVerificationEnabled = isCustomerVerificationEnabled;
+/**
+ * The value of `authVerificationsPerActor.customer`: Medusa's e-mail
+ * verification for the `emailpass` provider while the toggle is on, none
+ * while it is off. A fresh array per call.
+ */
+const customerVerificationActors = () => (0, exports.isCustomerVerificationEnabled)()
+    ? [{ auth_provider: "emailpass", entity_type: "email" }]
+    : [];
+exports.customerVerificationActors = customerVerificationActors;
+/**
+ * Test hook: sets the value and counts as just refreshed, so it holds for
+ * 30 s without a reader; `null` forgets reader and value.
+ */
+const setCustomerVerificationEnabledForTests = (enabled) => {
+    const current = state();
+    if (enabled === null) {
+        stopTimer(current);
+        current.enabled = false;
+        current.refreshedAt = null;
+        current.refreshing = null;
+        current.read = null;
+        current.warn = null;
+        return;
+    }
+    current.enabled = enabled;
+    current.refreshedAt = Date.now();
+};
+exports.setCustomerVerificationEnabledForTests = setCustomerVerificationEnabledForTests;

package/dist/email/types/email-kinds.d.ts

@@ -1,5 +1,5 @@
 import { z } from "@medusajs/framework/zod";
-export declare const EMAIL_KINDS: readonly ["order.received", "order.received.admin", "order.shipped", "order.canceled", "order.return_requested", "order.return_received", "order.refunded", "auth.password_reset", "affiliate.consignment_report_due", "user.invite"];
+export declare const EMAIL_KINDS: readonly ["order.received", "order.received.admin", "order.shipped", "order.canceled", "order.return_requested", "order.return_received", "order.refunded", "auth.password_reset", "affiliate.consignment_report_due", "user.invite", "auth.verification"];
 export declare const EmailKindSchema: z.ZodEnum<{
     "order.received": "order.received";
     "order.received.admin": "order.received.admin";
@@ -11,5 +11,13 @@ export declare const EmailKindSchema: z.ZodEnum<{
     "auth.password_reset": "auth.password_reset";
     "affiliate.consignment_report_due": "affiliate.consignment_report_due";
     "user.invite": "user.invite";
+    "auth.verification": "auth.verification";
 }>;
 export type EmailKind = (typeof EMAIL_KINDS)[number];
+/**
+ * Kinds whose link carries a one-time token that is never persisted: the
+ * subscriber builds the mail from the event, so neither the generic retry
+ * job, the automatic dispatch nor an Admin resend may touch them.
+ */
+export declare const EPHEMERAL_EMAIL_KINDS: readonly ["auth.password_reset", "auth.verification"];
+export declare const isEphemeralEmailKind: (kind: EmailKind) => boolean;

package/dist/email/types/email-kinds.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EmailKindSchema = exports.EMAIL_KINDS = void 0;
+exports.isEphemeralEmailKind = exports.EPHEMERAL_EMAIL_KINDS = exports.EmailKindSchema = exports.EMAIL_KINDS = void 0;
 const zod_1 = require("@medusajs/framework/zod");
 exports.EMAIL_KINDS = [
     "order.received",
@@ -13,5 +13,17 @@ exports.EMAIL_KINDS = [
     "auth.password_reset",
     "affiliate.consignment_report_due",
     "user.invite",
+    "auth.verification",
 ];
 exports.EmailKindSchema = zod_1.z.enum(exports.EMAIL_KINDS);
+/**
+ * Kinds whose link carries a one-time token that is never persisted: the
+ * subscriber builds the mail from the event, so neither the generic retry
+ * job, the automatic dispatch nor an Admin resend may touch them.
+ */
+exports.EPHEMERAL_EMAIL_KINDS = [
+    "auth.password_reset",
+    "auth.verification",
+];
+const isEphemeralEmailKind = (kind) => exports.EPHEMERAL_EMAIL_KINDS.includes(kind);
+exports.isEphemeralEmailKind = isEphemeralEmailKind;

package/dist/email/types/shop-configuration.d.ts

@@ -49,6 +49,14 @@ export type ShopEmailConfiguration = Readonly<{
     passwordResetUrl: (input: Readonly<{
         locale: string | null;
     }>) => string;
+    /**
+     * Storefront page that confirms an account's e-mail address; the mail
+     * appends `#token=<token>`. Only needed while the E-Mail plugin's
+     * `customer_verification` feature is used; a mail cannot be built without it.
+     */
+    verifyAccountUrl?: (input: Readonly<{
+        locale: string | null;
+    }>) => string;
     renderers?: Partial<EmailRendererMap>;
     /**
      * IANA time zone of dates in the default templates (e.g. the order time in

package/dist/email/types/template-data.d.ts

@@ -363,6 +363,9 @@ export declare const EmailPersistedDataSchemas: {
         locale: z.ZodNullable<z.ZodString>;
     }, z.core.$strict>;
     readonly "user.invite": z.ZodObject<{}, z.core.$strict>;
+    readonly "auth.verification": z.ZodObject<{
+        locale: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
 };
 export declare const EmailRenderDataSchemas: {
     readonly "auth.password_reset": z.ZodObject<{
@@ -374,6 +377,10 @@ export declare const EmailRenderDataSchemas: {
         invite_url: z.ZodString;
         expires_at: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>;
+    readonly "auth.verification": z.ZodObject<{
+        locale: z.ZodNullable<z.ZodString>;
+        verify_url: z.ZodString;
+    }, z.core.$strict>;
     readonly "order.received": z.ZodObject<{
         order_id: z.ZodString;
         summary: z.ZodOptional<z.ZodObject<{
@@ -601,6 +608,8 @@ export type EmailEphemeralRenderContextMap = {
     }> : Kind extends "user.invite" ? Readonly<{
         invite_url: string;
         expires_at?: string;
+    }> : Kind extends "auth.verification" ? Readonly<{
+        verify_url: string;
     }> : EmptyRenderContext;
 };
 export type EmailRenderDataMap = {

package/dist/email/types/template-data.js

@@ -215,6 +215,11 @@ exports.EmailPersistedDataSchemas = {
     })
         .strict(),
     "user.invite": zod_1.z.object({}).strict(),
+    "auth.verification": zod_1.z
+        .object({
+        locale: NullableLocaleSchema,
+    })
+        .strict(),
 };
 exports.EmailRenderDataSchemas = {
     ...exports.EmailPersistedDataSchemas,
@@ -228,4 +233,7 @@ exports.EmailRenderDataSchemas = {
         /** When the invite expires (ISO 8601), from the current invite. */
         expires_at: zod_1.z.string().datetime().optional(),
     }),
+    "auth.verification": exports.EmailPersistedDataSchemas["auth.verification"].extend({
+        verify_url: zod_1.z.string().url(),
+    }),
 };