@hartl-services/medusa-storefront 0.2.0 → 0.3.0

package/dist/registry/registry.json

@@ -7,8 +7,8 @@
       "title": "Storefront setup",
       "description": "Wires the storefront package into a Next shop: server and browser instances, the Server Action wrappers, texts, error reporting and the provider root for the [countryCode] layout.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.2.0",
-        "@hartl-services/medusa-contracts@^1.1.0",
+        "@hartl-services/medusa-storefront@^0.3.0",
+        "@hartl-services/medusa-contracts@^1.2.0",
         "@medusajs/framework@^2.19.0",
         "@medusajs/js-sdk@^2.19.0",
         "@medusajs/types@^2.19.0",
@@ -73,7 +73,7 @@
       "title": "Storefront form kit",
       "description": "The shop's TanStack form hook (useAppForm) with unstyled field components; the package's hooks hand their formOptions to it.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.2.0",
+        "@hartl-services/medusa-storefront@^0.3.0",
         "@tanstack/react-form@^1.33.5",
         "input-otp",
         "lucide-react"
@@ -197,7 +197,7 @@
       "title": "Cart",
       "description": "Cart widget with popover, line items, totals, cart page, add-to-cart button, variant picker and product price.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.2.0",
+        "@hartl-services/medusa-storefront@^0.3.0",
         "@medusajs/types@^2.19.0",
         "lucide-react"
       ],
@@ -306,8 +306,8 @@
       "title": "Customer account",
       "description": "Sign-in with password or e-mail code, password reset, account verification, address book with UID check, profile, orders, the account workspace layout and the document download route.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.2.0",
-        "@hartl-services/medusa-contracts@^1.1.0",
+        "@hartl-services/medusa-storefront@^0.3.0",
+        "@hartl-services/medusa-contracts@^1.2.0",
         "@medusajs/types@^2.19.0",
         "lucide-react"
       ],
@@ -516,7 +516,7 @@
       "title": "Checkout",
       "description": "Checkout page (address, login prompt, shipping and Stripe payment, coupon, UID status) and the order confirmation page.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.2.0",
+        "@hartl-services/medusa-storefront@^0.3.0",
         "@medusajs/types@^2.19.0",
         "@stripe/react-stripe-js@^5.6.1",
         "@stripe/stripe-js@^8.11.0",
@@ -661,8 +661,8 @@
       "title": "Partner portal",
       "description": "Partner portal: gated registration with UID check, links, coupon codes, commissions with date filter, consignment reports, and its Route Handlers.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.2.0",
-        "@hartl-services/medusa-contracts@^1.1.0",
+        "@hartl-services/medusa-storefront@^0.3.0",
+        "@hartl-services/medusa-contracts@^1.2.0",
         "@medusajs/types@^2.19.0",
         "lucide-react",
         "react-day-picker"

package/dist/registry/setup.json

@@ -4,8 +4,8 @@
   "title": "Storefront setup",
   "description": "Wires the storefront package into a Next shop: server and browser instances, the Server Action wrappers, texts, error reporting and the provider root for the [countryCode] layout.",
   "dependencies": [
-    "@hartl-services/medusa-storefront@^0.2.0",
-    "@hartl-services/medusa-contracts@^1.1.0",
+    "@hartl-services/medusa-storefront@^0.3.0",
+    "@hartl-services/medusa-contracts@^1.2.0",
     "@medusajs/framework@^2.19.0",
     "@medusajs/js-sdk@^2.19.0",
     "@medusajs/types@^2.19.0",
@@ -34,7 +34,7 @@
       "path": "registry/items/setup/lib/storefront/actions.ts",
       "target": "@lib/storefront/actions.ts",
       "type": "registry:lib",
-      "content": "\"use server\"\n\n// One Server Action per storefront server function: Next only accepts \"use server\"\n// functions defined in the app. The browser side gets them through lib/storefront/client.ts.\n\nimport { storefront } from \"@/lib/storefront/server\"\n\nexport async function getActiveCart(...args: Parameters<typeof storefront.cart.getActiveCart>) {\n  return await storefront.cart.getActiveCart(...args)\n}\n\nexport async function applyCustomerDefaultsToActiveCart(...args: Parameters<typeof storefront.cart.applyCustomerDefaultsToActiveCart>) {\n  return await storefront.cart.applyCustomerDefaultsToActiveCart(...args)\n}\n\nexport async function syncCartId(...args: Parameters<typeof storefront.cart.syncCartId>) {\n  return await storefront.cart.syncCartId(...args)\n}\n\nexport async function clearCartId(...args: Parameters<typeof storefront.cart.clearCartId>) {\n  return await storefront.cart.clearCartId(...args)\n}\n\nexport async function discardActiveCart(...args: Parameters<typeof storefront.cart.discardActiveCart>) {\n  return await storefront.cart.discardActiveCart(...args)\n}\n\nexport async function retrieveCustomer(...args: Parameters<typeof storefront.customer.retrieveCustomer>) {\n  return await storefront.customer.retrieveCustomer(...args)\n}\n\nexport async function loginCustomer(...args: Parameters<typeof storefront.customer.loginCustomer>) {\n  return await storefront.customer.loginCustomer(...args)\n}\n\nexport async function checkCustomerVerification(...args: Parameters<typeof storefront.customer.checkCustomerVerification>) {\n  return await storefront.customer.checkCustomerVerification(...args)\n}\n\nexport async function registerCustomer(...args: Parameters<typeof storefront.customer.registerCustomer>) {\n  return await storefront.customer.registerCustomer(...args)\n}\n\nexport async function registerCustomerWithProfile(...args: Parameters<typeof storefront.customer.registerCustomerWithProfile>) {\n  return await storefront.customer.registerCustomerWithProfile(...args)\n}\n\nexport async function requestLoginCode(...args: Parameters<typeof storefront.customer.requestLoginCode>) {\n  return await storefront.customer.requestLoginCode(...args)\n}\n\nexport async function loginWithCode(...args: Parameters<typeof storefront.customer.loginWithCode>) {\n  return await storefront.customer.loginWithCode(...args)\n}\n\nexport async function requestCustomerPasswordReset(...args: Parameters<typeof storefront.customer.requestCustomerPasswordReset>) {\n  return await storefront.customer.requestCustomerPasswordReset(...args)\n}\n\nexport async function resetCustomerPassword(...args: Parameters<typeof storefront.customer.resetCustomerPassword>) {\n  return await storefront.customer.resetCustomerPassword(...args)\n}\n\nexport async function confirmCustomerEmail(...args: Parameters<typeof storefront.customer.confirmCustomerEmail>) {\n  return await storefront.customer.confirmCustomerEmail(...args)\n}\n\nexport async function resendCustomerVerification(...args: Parameters<typeof storefront.customer.resendCustomerVerification>) {\n  return await storefront.customer.resendCustomerVerification(...args)\n}\n\nexport async function fetchCustomerPasswordPolicy(...args: Parameters<typeof storefront.customer.fetchCustomerPasswordPolicy>) {\n  return await storefront.customer.fetchCustomerPasswordPolicy(...args)\n}\n\nexport async function updateCustomer(...args: Parameters<typeof storefront.customer.updateCustomer>) {\n  return await storefront.customer.updateCustomer(...args)\n}\n\nexport async function createCustomerAddress(...args: Parameters<typeof storefront.customer.createCustomerAddress>) {\n  return await storefront.customer.createCustomerAddress(...args)\n}\n\nexport async function saveFirstCheckoutAddresses(...args: Parameters<typeof storefront.customer.saveFirstCheckoutAddresses>) {\n  return await storefront.customer.saveFirstCheckoutAddresses(...args)\n}\n\nexport async function updateCustomerAddress(...args: Parameters<typeof storefront.customer.updateCustomerAddress>) {\n  return await storefront.customer.updateCustomerAddress(...args)\n}\n\nexport async function deleteCustomerAddress(...args: Parameters<typeof storefront.customer.deleteCustomerAddress>) {\n  return await storefront.customer.deleteCustomerAddress(...args)\n}\n\nexport async function logoutCustomer(...args: Parameters<typeof storefront.customer.logoutCustomer>) {\n  return await storefront.customer.logoutCustomer(...args)\n}\n\nexport async function listShippingOptions(...args: Parameters<typeof storefront.checkout.listShippingOptions>) {\n  return await storefront.checkout.listShippingOptions(...args)\n}\n\nexport async function listPaymentProviders(...args: Parameters<typeof storefront.checkout.listPaymentProviders>) {\n  return await storefront.checkout.listPaymentProviders(...args)\n}\n\nexport async function listRegions(...args: Parameters<typeof storefront.region.listRegions>) {\n  return await storefront.region.listRegions(...args)\n}\n\nexport async function fetchPluginFeatures(...args: Parameters<typeof storefront.pluginFeatures.fetchPluginFeatures>) {\n  return await storefront.pluginFeatures.fetchPluginFeatures(...args)\n}\n\nexport async function checkCartTaxIdentification(...args: Parameters<typeof storefront.taxCompliance.checkCartTaxIdentification>) {\n  return await storefront.taxCompliance.checkCartTaxIdentification(...args)\n}\n\nexport async function listCustomerTaxIdentifications(...args: Parameters<typeof storefront.taxCompliance.listCustomerTaxIdentifications>) {\n  return await storefront.taxCompliance.listCustomerTaxIdentifications(...args)\n}\n\nexport async function verifyCustomerAddressTaxIdentification(...args: Parameters<typeof storefront.taxCompliance.verifyCustomerAddressTaxIdentification>) {\n  return await storefront.taxCompliance.verifyCustomerAddressTaxIdentification(...args)\n}\n\nexport async function submitAffiliateApplication(...args: Parameters<typeof storefront.affiliate.submitAffiliateApplication>) {\n  return await storefront.affiliate.submitAffiliateApplication(...args)\n}\n\nexport async function applyAffiliateOwnOrderPromotion(...args: Parameters<typeof storefront.affiliate.applyAffiliateOwnOrderPromotion>) {\n  return await storefront.affiliate.applyAffiliateOwnOrderPromotion(...args)\n}\n\nexport async function createAffiliateSlug(...args: Parameters<typeof storefront.affiliate.createAffiliateSlug>) {\n  return await storefront.affiliate.createAffiliateSlug(...args)\n}\n\nexport async function updateAffiliateSlug(...args: Parameters<typeof storefront.affiliate.updateAffiliateSlug>) {\n  return await storefront.affiliate.updateAffiliateSlug(...args)\n}\n\nexport async function createAffiliateCouponCode(...args: Parameters<typeof storefront.affiliate.createAffiliateCouponCode>) {\n  return await storefront.affiliate.createAffiliateCouponCode(...args)\n}\n\nexport async function rotateAffiliateCouponCode(...args: Parameters<typeof storefront.affiliate.rotateAffiliateCouponCode>) {\n  return await storefront.affiliate.rotateAffiliateCouponCode(...args)\n}\n\nexport async function revokeAffiliateCouponCode(...args: Parameters<typeof storefront.affiliate.revokeAffiliateCouponCode>) {\n  return await storefront.affiliate.revokeAffiliateCouponCode(...args)\n}\n\nexport async function createConsignmentReport(...args: Parameters<typeof storefront.affiliate.createConsignmentReport>) {\n  return await storefront.affiliate.createConsignmentReport(...args)\n}\n\nexport async function listOrders(...args: Parameters<typeof storefront.orders.listOrders>) {\n  return await storefront.orders.listOrders(...args)\n}\n\nexport async function getOrder(...args: Parameters<typeof storefront.orders.getOrder>) {\n  return await storefront.orders.getOrder(...args)\n}\n\nexport async function listDocuments(...args: Parameters<typeof storefront.documents.listDocuments>) {\n  return await storefront.documents.listDocuments(...args)\n}\n"
+      "content": "\"use server\"\n\n// One Server Action per storefront server function: Next only accepts \"use server\"\n// functions defined in the app. The browser side gets them through lib/storefront/client.ts.\n\nimport { storefront } from \"@/lib/storefront/server\"\n\nexport async function getActiveCart(...args: Parameters<typeof storefront.cart.getActiveCart>) {\n  return await storefront.cart.getActiveCart(...args)\n}\n\nexport async function applyCustomerDefaultsToActiveCart(...args: Parameters<typeof storefront.cart.applyCustomerDefaultsToActiveCart>) {\n  return await storefront.cart.applyCustomerDefaultsToActiveCart(...args)\n}\n\nexport async function syncCartId(...args: Parameters<typeof storefront.cart.syncCartId>) {\n  return await storefront.cart.syncCartId(...args)\n}\n\nexport async function clearCartId(...args: Parameters<typeof storefront.cart.clearCartId>) {\n  return await storefront.cart.clearCartId(...args)\n}\n\nexport async function discardActiveCart(...args: Parameters<typeof storefront.cart.discardActiveCart>) {\n  return await storefront.cart.discardActiveCart(...args)\n}\n\nexport async function retrieveCustomer(...args: Parameters<typeof storefront.customer.retrieveCustomer>) {\n  return await storefront.customer.retrieveCustomer(...args)\n}\n\nexport async function loginCustomer(...args: Parameters<typeof storefront.customer.loginCustomer>) {\n  return await storefront.customer.loginCustomer(...args)\n}\n\nexport async function checkCustomerVerification(...args: Parameters<typeof storefront.customer.checkCustomerVerification>) {\n  return await storefront.customer.checkCustomerVerification(...args)\n}\n\nexport async function registerCustomer(...args: Parameters<typeof storefront.customer.registerCustomer>) {\n  return await storefront.customer.registerCustomer(...args)\n}\n\nexport async function registerCustomerWithProfile(...args: Parameters<typeof storefront.customer.registerCustomerWithProfile>) {\n  return await storefront.customer.registerCustomerWithProfile(...args)\n}\n\nexport async function registerPartnerWithProfile(...args: Parameters<typeof storefront.customer.registerPartnerWithProfile>) {\n  return await storefront.customer.registerPartnerWithProfile(...args)\n}\n\nexport async function requestLoginCode(...args: Parameters<typeof storefront.customer.requestLoginCode>) {\n  return await storefront.customer.requestLoginCode(...args)\n}\n\nexport async function loginWithCode(...args: Parameters<typeof storefront.customer.loginWithCode>) {\n  return await storefront.customer.loginWithCode(...args)\n}\n\nexport async function requestCustomerPasswordReset(...args: Parameters<typeof storefront.customer.requestCustomerPasswordReset>) {\n  return await storefront.customer.requestCustomerPasswordReset(...args)\n}\n\nexport async function resetCustomerPassword(...args: Parameters<typeof storefront.customer.resetCustomerPassword>) {\n  return await storefront.customer.resetCustomerPassword(...args)\n}\n\nexport async function confirmCustomerEmail(...args: Parameters<typeof storefront.customer.confirmCustomerEmail>) {\n  return await storefront.customer.confirmCustomerEmail(...args)\n}\n\nexport async function resendCustomerVerification(...args: Parameters<typeof storefront.customer.resendCustomerVerification>) {\n  return await storefront.customer.resendCustomerVerification(...args)\n}\n\nexport async function fetchCustomerPasswordPolicy(...args: Parameters<typeof storefront.customer.fetchCustomerPasswordPolicy>) {\n  return await storefront.customer.fetchCustomerPasswordPolicy(...args)\n}\n\nexport async function updateCustomer(...args: Parameters<typeof storefront.customer.updateCustomer>) {\n  return await storefront.customer.updateCustomer(...args)\n}\n\nexport async function createCustomerAddress(...args: Parameters<typeof storefront.customer.createCustomerAddress>) {\n  return await storefront.customer.createCustomerAddress(...args)\n}\n\nexport async function saveFirstCheckoutAddresses(...args: Parameters<typeof storefront.customer.saveFirstCheckoutAddresses>) {\n  return await storefront.customer.saveFirstCheckoutAddresses(...args)\n}\n\nexport async function updateCustomerAddress(...args: Parameters<typeof storefront.customer.updateCustomerAddress>) {\n  return await storefront.customer.updateCustomerAddress(...args)\n}\n\nexport async function deleteCustomerAddress(...args: Parameters<typeof storefront.customer.deleteCustomerAddress>) {\n  return await storefront.customer.deleteCustomerAddress(...args)\n}\n\nexport async function logoutCustomer(...args: Parameters<typeof storefront.customer.logoutCustomer>) {\n  return await storefront.customer.logoutCustomer(...args)\n}\n\nexport async function listShippingOptions(...args: Parameters<typeof storefront.checkout.listShippingOptions>) {\n  return await storefront.checkout.listShippingOptions(...args)\n}\n\nexport async function listPaymentProviders(...args: Parameters<typeof storefront.checkout.listPaymentProviders>) {\n  return await storefront.checkout.listPaymentProviders(...args)\n}\n\nexport async function listRegions(...args: Parameters<typeof storefront.region.listRegions>) {\n  return await storefront.region.listRegions(...args)\n}\n\nexport async function fetchPluginFeatures(...args: Parameters<typeof storefront.pluginFeatures.fetchPluginFeatures>) {\n  return await storefront.pluginFeatures.fetchPluginFeatures(...args)\n}\n\nexport async function checkCartTaxIdentification(...args: Parameters<typeof storefront.taxCompliance.checkCartTaxIdentification>) {\n  return await storefront.taxCompliance.checkCartTaxIdentification(...args)\n}\n\nexport async function listCustomerTaxIdentifications(...args: Parameters<typeof storefront.taxCompliance.listCustomerTaxIdentifications>) {\n  return await storefront.taxCompliance.listCustomerTaxIdentifications(...args)\n}\n\nexport async function verifyCustomerAddressTaxIdentification(...args: Parameters<typeof storefront.taxCompliance.verifyCustomerAddressTaxIdentification>) {\n  return await storefront.taxCompliance.verifyCustomerAddressTaxIdentification(...args)\n}\n\nexport async function submitAffiliateApplication(...args: Parameters<typeof storefront.affiliate.submitAffiliateApplication>) {\n  return await storefront.affiliate.submitAffiliateApplication(...args)\n}\n\nexport async function applyAffiliateOwnOrderPromotion(...args: Parameters<typeof storefront.affiliate.applyAffiliateOwnOrderPromotion>) {\n  return await storefront.affiliate.applyAffiliateOwnOrderPromotion(...args)\n}\n\nexport async function createAffiliateSlug(...args: Parameters<typeof storefront.affiliate.createAffiliateSlug>) {\n  return await storefront.affiliate.createAffiliateSlug(...args)\n}\n\nexport async function updateAffiliateSlug(...args: Parameters<typeof storefront.affiliate.updateAffiliateSlug>) {\n  return await storefront.affiliate.updateAffiliateSlug(...args)\n}\n\nexport async function createAffiliateCouponCode(...args: Parameters<typeof storefront.affiliate.createAffiliateCouponCode>) {\n  return await storefront.affiliate.createAffiliateCouponCode(...args)\n}\n\nexport async function rotateAffiliateCouponCode(...args: Parameters<typeof storefront.affiliate.rotateAffiliateCouponCode>) {\n  return await storefront.affiliate.rotateAffiliateCouponCode(...args)\n}\n\nexport async function revokeAffiliateCouponCode(...args: Parameters<typeof storefront.affiliate.revokeAffiliateCouponCode>) {\n  return await storefront.affiliate.revokeAffiliateCouponCode(...args)\n}\n\nexport async function createConsignmentReport(...args: Parameters<typeof storefront.affiliate.createConsignmentReport>) {\n  return await storefront.affiliate.createConsignmentReport(...args)\n}\n\nexport async function listOrders(...args: Parameters<typeof storefront.orders.listOrders>) {\n  return await storefront.orders.listOrders(...args)\n}\n\nexport async function getOrder(...args: Parameters<typeof storefront.orders.getOrder>) {\n  return await storefront.orders.getOrder(...args)\n}\n\nexport async function listDocuments(...args: Parameters<typeof storefront.documents.listDocuments>) {\n  return await storefront.documents.listDocuments(...args)\n}\n"
     },
     {
       "path": "registry/items/setup/lib/storefront/client.ts",

package/dist/server/affiliate.d.ts

@@ -1,4 +1,4 @@
-import type { ApplyOwnOrderPromotionResponse, CreatePartnerPortalSlugRequest, CreateStoreAffiliateCouponCodeRequest, RotateStoreAffiliateCouponCodeRequest, SubmitAffiliateApplicationRequest, SubmitConsignmentReportRequest, UpdatePartnerPortalSlugRequest } from "@hartl-services/medusa-contracts/types/affiliate-store";
+import type { ApplyOwnOrderPromotionResponse, CreatePartnerPortalSlugRequest, CreateStoreAffiliateCouponCodeRequest, RotateStoreAffiliateCouponCodeRequest, StoreAffiliatePortalContextResponse, SubmitAffiliateApplicationRequest, SubmitConsignmentReportRequest, UpdatePartnerPortalSlugRequest } from "@hartl-services/medusa-contracts/types/affiliate-store";
 import type { MedusaActionResult } from "../core/action-result.js";
 import type { ServerContext } from "./context.js";
 import type { ServerPluginFeatures } from "./plugin-features.js";
@@ -12,6 +12,9 @@ export interface AffiliateCouponRotationInput {
     command: RotateStoreAffiliateCouponCodeRequest;
 }
 export declare function createAffiliate(context: ServerContext, pluginFeatures: ServerPluginFeatures, runMedusaAction: RunMedusaAction): {
+    loadPartnerPortalState: () => Promise<StoreAffiliatePortalContextResponse["portal_state"] | null>;
+    /** Whether the logged-in customer is an approved, active partner (fail-closed). */
+    isActivePartner(): Promise<boolean>;
     submitAffiliateApplication(data: SubmitAffiliateApplicationRequest): Promise<MedusaActionResult<{
         application: {
             id: string;

package/dist/server/affiliate.js

@@ -1,3 +1,4 @@
+import { cache } from "react";
 import { affiliateStorePaths } from "@hartl-services/medusa-contracts/paths/affiliate";
 import { isPluginFeatureEnabled } from "../core/plugin-features.js";
 import { createMedusaErrorResponse } from "./route-response.js";
@@ -19,7 +20,35 @@ export function createAffiliate(context, pluginFeatures, runMedusaAction) {
             return medusaErrorResponse(error);
         }
     }
+    /**
+     * The logged-in customer's partner state for server rendering (e.g. a
+     * therapist view): null when logged out, while the partner portal is off,
+     * or when the backend cannot answer - every partner view then stays hidden.
+     * Deduplicated per request via React cache().
+     */
+    const loadPartnerPortalState = cache(async () => {
+        if (!(await context.session.getMedusaAuthToken())) {
+            return null;
+        }
+        if (!isPluginFeatureEnabled(await pluginFeatures.loadPluginFeatures(), "affiliate", "partner_portal")) {
+            return null;
+        }
+        try {
+            const sdk = await customerClient();
+            const response = await sdk.client.fetch(affiliateStorePaths.get.me, { method: "GET" });
+            return response.portal_state;
+        }
+        catch (error) {
+            context.reportError(error, { area: "affiliate", context: { step: "portal_state" } });
+            return null;
+        }
+    });
     return {
+        loadPartnerPortalState,
+        /** Whether the logged-in customer is an approved, active partner (fail-closed). */
+        async isActivePartner() {
+            return (await loadPartnerPortalState()) === "active";
+        },
         async submitAffiliateApplication(data) {
             return runMedusaAction(async () => {
                 const sdk = await customerClient();

package/dist/server/catalog.d.ts

@@ -9,8 +9,13 @@ export interface CommerceProductListInput {
     /** Medusa's product search (title, description, handle, ...). */
     q?: string;
 }
-/** Medusa's half of a catalog: products priced for a country, categories and collections. */
-export declare function createCatalog(context: ServerContext, region: ServerRegion): {
+/**
+ * Medusa's half of a catalog: products priced for a country, categories and
+ * collections. Partner-only products and categories (see
+ * `isPartnerOnlyProduct`) are left out unless `isActivePartner` says the
+ * visitor is an active partner; the backend refuses them at checkout anyway.
+ */
+export declare function createCatalog(context: ServerContext, region: ServerRegion, isActivePartner?: () => Promise<boolean>): {
     listCommerceProducts({ categoryId, collectionId, countryCode, handles, q }: CommerceProductListInput): Promise<HttpTypes.StoreProduct[] | null>;
     commerceProductByHandle({ countryCode, handle }: {
         countryCode: string;
@@ -19,7 +24,8 @@ export declare function createCatalog(context: ServerContext, region: ServerRegi
     /**
      * The top-level categories with all descendants (e.g. "Anwendungsbereiche"
      * and "Inhaltsstoffe" with their entries) - the filter trees of a product
-     * list; filter with `filterProductsByCategories` from /core.
+     * list; filter with `filterProductsByCategories` from /core. Partner-only
+     * categories only for an active partner.
      */
     listCategoryTrees(): Promise<HttpTypes.StoreProductCategory[]>;
     categoryByPath(categoryPath: string[]): Promise<HttpTypes.StoreProductCategory | null>;

package/dist/server/catalog.js

@@ -1,7 +1,14 @@
+import { cache } from "react";
+import { collectPartnerOnlyCategoryIds, isPartnerOnlyProduct, withoutPartnerOnlyCategories } from "../core/catalog/partner-only.js";
 import { CATEGORY_FIELDS, COLLECTION_FIELDS, PRODUCT_FIELDS } from "../core/fields.js";
 const catalogFetchLimit = 100;
-/** Medusa's half of a catalog: products priced for a country, categories and collections. */
-export function createCatalog(context, region) {
+/**
+ * Medusa's half of a catalog: products priced for a country, categories and
+ * collections. Partner-only products and categories (see
+ * `isPartnerOnlyProduct`) are left out unless `isActivePartner` says the
+ * visitor is an active partner; the backend refuses them at checkout anyway.
+ */
+export function createCatalog(context, region, isActivePartner = async () => false) {
     async function getPricingContext(countryCode) {
         const countryRegion = await region.getRegionForCountry(countryCode);
         if (!countryRegion) {
@@ -13,6 +20,29 @@ export function createCatalog(context, region) {
             region_id: countryRegion.id,
         };
     }
+    // Every top-level category with all descendants, once per request.
+    const loadCategoryTrees = cache(async () => {
+        const sdk = context.createMedusaClient();
+        const { product_categories: productCategories } = await sdk.store.category.list({
+            fields: "id,name,handle,description,metadata,rank,*category_children",
+            include_descendants_tree: true,
+            limit: catalogFetchLimit,
+            parent_category_id: "null",
+        });
+        return productCategories;
+    });
+    /**
+     * Leaves out partner-only products for everyone but an active partner. The
+     * partner check (a backend request) only runs when a partner-only product
+     * is among them, so a shop without any pays nothing for it; the category
+     * trees are only read when a product has categories.
+     */
+    async function visibleProducts(products) {
+        const hasCategories = products.some((product) => (product.categories?.length ?? 0) > 0);
+        const partnerOnlyCategoryIds = hasCategories ? collectPartnerOnlyCategoryIds(await loadCategoryTrees()) : new Set();
+        const visible = products.filter((product) => !isPartnerOnlyProduct(product, partnerOnlyCategoryIds));
+        return visible.length === products.length || !(await isActivePartner()) ? visible : products;
+    }
     return {
         async listCommerceProducts({ categoryId, collectionId, countryCode, handles, q }) {
             const pricingContext = await getPricingContext(countryCode);
@@ -29,7 +59,7 @@ export function createCatalog(context, region) {
                 fields: PRODUCT_FIELDS,
                 limit: catalogFetchLimit,
             });
-            return products;
+            return await visibleProducts(products);
         },
         async commerceProductByHandle({ countryCode, handle }) {
             const pricingContext = await getPricingContext(countryCode);
@@ -43,22 +73,20 @@ export function createCatalog(context, region) {
                 handle,
                 limit: 1,
             });
-            return products[0] ?? null;
+            return (await visibleProducts(products))[0] ?? null;
         },
         /**
          * The top-level categories with all descendants (e.g. "Anwendungsbereiche"
          * and "Inhaltsstoffe" with their entries) - the filter trees of a product
-         * list; filter with `filterProductsByCategories` from /core.
+         * list; filter with `filterProductsByCategories` from /core. Partner-only
+         * categories only for an active partner.
          */
         async listCategoryTrees() {
-            const sdk = context.createMedusaClient();
-            const { product_categories: productCategories } = await sdk.store.category.list({
-                fields: "id,name,handle,description,metadata,rank,*category_children",
-                include_descendants_tree: true,
-                limit: catalogFetchLimit,
-                parent_category_id: "null",
-            });
-            return productCategories;
+            const trees = await loadCategoryTrees();
+            if (collectPartnerOnlyCategoryIds(trees).size === 0) {
+                return trees;
+            }
+            return (await isActivePartner()) ? trees : withoutPartnerOnlyCategories(trees);
         },
         async categoryByPath(categoryPath) {
             const sdk = context.createMedusaClient();
@@ -67,7 +95,11 @@ export function createCatalog(context, region) {
                 handle: categoryPath.join("/"),
                 limit: 1,
             });
-            return productCategories[0] ?? null;
+            const category = productCategories[0] ?? null;
+            if (!category || !collectPartnerOnlyCategoryIds(await loadCategoryTrees()).has(category.id)) {
+                return category;
+            }
+            return (await isActivePartner()) ? category : null;
         },
         async collectionByHandle(handle) {
             const sdk = context.createMedusaClient();

package/dist/server/customer.d.ts

@@ -1,6 +1,7 @@
 import type { LoginWithCodeRequest, RequestLoginCodeRequest } from "@hartl-services/medusa-contracts/types/customer-auth-store";
-import type { CheckoutAddressValues, CustomerAddressValues, CustomerAuthValues, CustomerProfileValues, CustomerRegistrationProfileValues, VerificationResendValues } from "../core/form-values.js";
+import type { CheckoutAddressValues, CustomerAddressValues, CustomerAuthValues, CustomerProfileValues, CustomerRegistrationProfileValues, PartnerRegistrationProfileValues, VerificationResendValues } from "../core/form-values.js";
 import type { ServerContext } from "./context.js";
+import type { ServerPluginFeatures } from "./plugin-features.js";
 import type { RunMedusaAction } from "./run-medusa-action.js";
 export interface UpdateCustomerAddressInput {
     addressId: string;
@@ -10,7 +11,7 @@ export interface UpdateCustomerAddressInput {
         metadata?: Record<string, unknown>;
     };
 }
-export declare function createCustomer(context: ServerContext, runMedusaAction: RunMedusaAction): {
+export declare function createCustomer(context: ServerContext, runMedusaAction: RunMedusaAction, pluginFeatures: ServerPluginFeatures): {
     retrieveCustomer(): Promise<import("@medusajs/types").StoreCustomerResponse | null>;
     loginCustomer(data: CustomerAuthValues): Promise<import("../core/action-result.js").MedusaActionResult<{
         state: "success";
@@ -40,12 +41,32 @@ export declare function createCustomer(context: ServerContext, runMedusaAction:
      */
     registerCustomerWithProfile(data: CustomerRegistrationProfileValues): Promise<import("../core/action-result.js").MedusaActionResult<{
         state: "verification_required";
+        addressId?: undefined;
         addressSaved?: undefined;
         sessionToken?: undefined;
     } | {
         addressSaved: boolean;
+        sessionToken: string;
         state: "success";
+    }>>;
+    /**
+     * Partner (e.g. therapist) registration: the account with its company
+     * address as default address, then the partner application from that
+     * address. Like the plain registration it counts as registered even if a
+     * later step fails (`addressSaved` / `applicationSubmitted` false). While
+     * the e-mail is unconfirmed, address and application wait until the
+     * first login. Refused up front while the partner portal is off.
+     */
+    registerPartnerWithProfile(data: PartnerRegistrationProfileValues): Promise<import("../core/action-result.js").MedusaActionResult<{
+        state: "verification_required";
+        addressId?: undefined;
+        addressSaved?: undefined;
+        sessionToken?: undefined;
+    } | {
+        addressSaved: boolean;
+        applicationSubmitted: boolean;
         sessionToken: string;
+        state: "success";
     }>>;
     requestLoginCode(data: RequestLoginCodeRequest): Promise<import("../core/action-result.js").MedusaActionResult<void>>;
     loginWithCode(data: LoginWithCodeRequest): Promise<import("../core/action-result.js").MedusaActionResult<{

package/dist/server/customer.js

@@ -1,12 +1,15 @@
 import { customerAuthStorePaths } from "@hartl-services/medusa-contracts/paths/customer-auth";
 import { EMAIL_OTP_AUTH_PROVIDER, LoginWithCodeSchema, RequestLoginCodeSchema, normalizeLoginEmail } from "@hartl-services/medusa-contracts/schemas/customer-auth";
 import { customerVerificationStorePaths } from "@hartl-services/medusa-contracts/paths/customer-verification";
+import { affiliateStorePaths } from "@hartl-services/medusa-contracts/paths/affiliate";
+import { TAX_COMPLIANCE_FEATURES, TAX_COMPLIANCE_PLUGIN_KEY, taxCompliancePaths } from "@hartl-services/medusa-contracts/paths/tax-compliance";
 import { vatNumberMetadataPatch } from "../core/addresses.js";
 import { completeCustomerSignIn as completeCustomerSignInWith, loginWithEmailpass } from "../core/auth/customer-sign-in.js";
 import { toCustomerAddressesFromCheckout } from "../core/checkout/checkout-address-draft.js";
 import { StorefrontError } from "../core/errors.js";
 import { CART_OWNER_FIELDS, CUSTOMER_FIELDS } from "../core/fields.js";
-import { createCheckoutAddressSchema, createVerificationResendSchema, customerAddressSchema, customerAuthSchema, customerProfileSchema, customerRegistrationProfileSchema, registrationAddressSchema } from "../core/form-values.js";
+import { createCheckoutAddressSchema, createVerificationResendSchema, customerAddressSchema, customerAuthSchema, customerProfileSchema, customerRegistrationProfileSchema, partnerRegistrationProfileSchema, registrationAddressSchema } from "../core/form-values.js";
+import { isPluginFeatureEnabled } from "../core/plugin-features.js";
 function cartCustomerHasAccount(cart) {
     const customer = Reflect.get(cart, "customer");
     return typeof customer === "object" && customer !== null && Reflect.get(customer, "has_account") === true;
@@ -20,10 +23,23 @@ function isVerificationRequired(result) {
  * no token to add one, so it waits here until the first login.
  */
 const PENDING_REGISTRATION_ADDRESS_KEY = "pending_registration_address";
+/**
+ * Metadata key of a partner application that waits for its company address
+ * (the registration address): submitted right after the address is stored.
+ */
+const PENDING_PARTNER_APPLICATION_KEY = "pending_partner_application";
+function toPendingPartnerApplication(value) {
+    return typeof value === "object" && value !== null ? { confirmed_without_vat_number: Reflect.get(value, "confirmed_without_vat_number") === true } : null;
+}
+/** The registration address the customer create took last (Medusa answers with the whole customer). */
+function findDefaultAddressId(customer) {
+    const addresses = customer.addresses ?? [];
+    return (addresses.find(({ is_default_billing }) => is_default_billing) ?? addresses[0])?.id ?? null;
+}
 function getAuthenticationToken(result) {
     return typeof result === "string" ? result : null;
 }
-export function createCustomer(context, runMedusaAction) {
+export function createCustomer(context, runMedusaAction, pluginFeatures) {
     const { createAuthenticatedMedusaClient, createMedusaClient, session } = context;
     async function requestCustomerVerification(email, token) {
         const sdk = createAuthenticatedMedusaClient(token);
@@ -78,40 +94,80 @@ export function createCustomer(context, runMedusaAction) {
         }
     }
     /**
-     * Stores the registration address as the customer's default address. True
-     * when stored (or nothing to store); never throws - a failing address must
-     * not turn a registration or login into a failure.
+     * Stores the registration address as the customer's default address.
+     * `saved` is true when stored (or nothing to store); never throws - a
+     * failing address must not turn a registration or login into a failure.
      */
     async function storeRegistrationAddress(token, profile, address) {
         const parsed = registrationAddressSchema.safeParse(address);
         if (!parsed.success) {
-            return true;
+            return { addressId: null, saved: true };
         }
         try {
             const sdk = createAuthenticatedMedusaClient(token);
-            await sdk.store.customer.createAddress({
-                ...parsed.data,
+            const { vat_number: vatNumber, ...addressValues } = parsed.data;
+            const { customer } = await sdk.store.customer.createAddress({
+                ...addressValues,
                 first_name: profile.first_name ?? undefined,
                 is_default_billing: true,
                 is_default_shipping: true,
                 last_name: profile.last_name ?? undefined,
                 phone: profile.phone || undefined,
-            });
+                ...(vatNumber ? { metadata: vatNumberMetadataPatch(vatNumber) } : {}),
+            }, { fields: "*addresses" });
             await sdk.store.customer.update({ metadata: { [PENDING_REGISTRATION_ADDRESS_KEY]: null } });
-            return true;
+            return { addressId: findDefaultAddressId(customer), saved: true };
         }
         catch (error) {
             context.reportError(error, { area: "customer-auth", context: { step: "registration_address" } });
+            return { addressId: null, saved: false };
+        }
+    }
+    /**
+     * Submits a registration's partner application with its company address:
+     * a UID is checked first (the application takes it only once checked; an
+     * unreachable check counts too), and the pending marker is cleared either
+     * way. True when submitted; never throws - the account stays registered.
+     */
+    async function submitPartnerApplication(token, addressId, hasVatNumber, application) {
+        const sdk = createAuthenticatedMedusaClient(token);
+        try {
+            if (hasVatNumber && isPluginFeatureEnabled(await pluginFeatures.loadPluginFeatures(), TAX_COMPLIANCE_PLUGIN_KEY, TAX_COMPLIANCE_FEATURES.vatValidation)) {
+                await sdk.client.fetch(taxCompliancePaths.store.customers.addressTaxIdentification(addressId), { method: "POST" });
+            }
+            await sdk.client.fetch(affiliateStorePaths.post.register, {
+                body: { confirmed_without_vat_number: application.confirmed_without_vat_number, customer_address_id: addressId },
+                method: "POST",
+            });
+            return true;
+        }
+        catch (error) {
+            context.reportError(error, { area: "affiliate", context: { step: "registration_application" } });
             return false;
         }
+        finally {
+            try {
+                await sdk.store.customer.update({ metadata: { [PENDING_PARTNER_APPLICATION_KEY]: null } });
+            }
+            catch (error) {
+                context.reportError(error, { area: "affiliate", context: { step: "registration_application_cleanup" } });
+            }
+        }
     }
-    /** After a login: adds a registration address that waited for the e-mail confirmation. */
+    /**
+     * After a login: adds a registration address that waited for the e-mail
+     * confirmation, then the partner application that waited for it.
+     */
     async function applyPendingRegistrationAddress(token) {
         try {
             const { customer } = await createAuthenticatedMedusaClient(token).store.customer.retrieve({ fields: "first_name,last_name,phone,metadata,*addresses" });
             const pending = customer.metadata?.[PENDING_REGISTRATION_ADDRESS_KEY];
             if (pending && (customer.addresses?.length ?? 0) === 0) {
-                await storeRegistrationAddress(token, customer, pending);
+                const { addressId } = await storeRegistrationAddress(token, customer, pending);
+                const application = toPendingPartnerApplication(customer.metadata?.[PENDING_PARTNER_APPLICATION_KEY]);
+                if (addressId && application) {
+                    await submitPartnerApplication(token, addressId, Boolean(registrationAddressSchema.safeParse(pending).data?.vat_number), application);
+                }
             }
         }
         catch (error) {
@@ -127,6 +183,34 @@ export function createCustomer(context, runMedusaAction) {
         await applyPendingRegistrationAddress(result.sessionToken);
         return result;
     }
+    async function registerWithProfile(parsed, metadata = {}) {
+        const credentials = { email: parsed.email, password: parsed.password };
+        const registrationSdk = createMedusaClient();
+        const registrationToken = await registrationSdk.auth.register("customer", "emailpass", credentials);
+        const customerSdk = createAuthenticatedMedusaClient(registrationToken);
+        const pendingMetadata = { ...(parsed.address ? { [PENDING_REGISTRATION_ADDRESS_KEY]: parsed.address } : {}), ...metadata };
+        const { customer } = await customerSdk.store.customer.create({
+            email: parsed.email,
+            first_name: parsed.first_name,
+            last_name: parsed.last_name,
+            ...(parsed.phone ? { phone: parsed.phone } : {}),
+            ...(Object.keys(pendingMetadata).length > 0 ? { metadata: pendingMetadata } : {}),
+        });
+        const loginSdk = createMedusaClient();
+        const result = await loginSdk.auth.login("customer", "emailpass", credentials);
+        if (isVerificationRequired(result)) {
+            await requestCustomerVerification(parsed.email, result.token);
+            return { state: "verification_required" };
+        }
+        const token = getAuthenticationToken(result);
+        if (!token) {
+            throw new StorefrontError("auth.registration_unsupported_step");
+        }
+        await transferActiveCartToCustomer(createAuthenticatedMedusaClient(token), { id: customer.id, email: parsed.email });
+        await session.setMedusaAuthToken(token);
+        const { addressId, saved } = parsed.address ? await storeRegistrationAddress(token, parsed, parsed.address) : { addressId: null, saved: true };
+        return { addressId, addressSaved: saved, state: "success", sessionToken: token };
+    }
     async function signInCustomer(data, { requestVerificationMail }) {
         const parsed = customerAuthSchema.parse(data);
         return runMedusaAction(async () => {
@@ -202,32 +286,32 @@ export function createCustomer(context, runMedusaAction) {
          */
         async registerCustomerWithProfile(data) {
             const parsed = customerRegistrationProfileSchema.parse(data);
-            const credentials = { email: parsed.email, password: parsed.password };
             return runMedusaAction(async () => {
-                const registrationSdk = createMedusaClient();
-                const registrationToken = await registrationSdk.auth.register("customer", "emailpass", credentials);
-                const customerSdk = createAuthenticatedMedusaClient(registrationToken);
-                const { customer } = await customerSdk.store.customer.create({
-                    email: parsed.email,
-                    first_name: parsed.first_name,
-                    last_name: parsed.last_name,
-                    ...(parsed.phone ? { phone: parsed.phone } : {}),
-                    ...(parsed.address ? { metadata: { [PENDING_REGISTRATION_ADDRESS_KEY]: parsed.address } } : {}),
-                });
-                const loginSdk = createMedusaClient();
-                const result = await loginSdk.auth.login("customer", "emailpass", credentials);
-                if (isVerificationRequired(result)) {
-                    await requestCustomerVerification(parsed.email, result.token);
-                    return { state: "verification_required" };
+                const result = await registerWithProfile(parsed);
+                return result.state === "success" ? { addressSaved: result.addressSaved, sessionToken: result.sessionToken, state: result.state } : result;
+            }, { endSessionOnUnauthorized: false });
+        },
+        /**
+         * Partner (e.g. therapist) registration: the account with its company
+         * address as default address, then the partner application from that
+         * address. Like the plain registration it counts as registered even if a
+         * later step fails (`addressSaved` / `applicationSubmitted` false). While
+         * the e-mail is unconfirmed, address and application wait until the
+         * first login. Refused up front while the partner portal is off.
+         */
+        async registerPartnerWithProfile(data) {
+            const parsed = partnerRegistrationProfileSchema.parse(data);
+            return runMedusaAction(async () => {
+                if (!isPluginFeatureEnabled(await pluginFeatures.loadPluginFeatures(), "affiliate", "partner_portal")) {
+                    throw new StorefrontError("partner_registration.unavailable");
                 }
-                const token = getAuthenticationToken(result);
-                if (!token) {
-                    throw new StorefrontError("auth.registration_unsupported_step");
+                const application = { confirmed_without_vat_number: parsed.confirmed_without_vat_number };
+                const result = await registerWithProfile(parsed, { [PENDING_PARTNER_APPLICATION_KEY]: application });
+                if (result.state !== "success") {
+                    return result;
                 }
-                await transferActiveCartToCustomer(createAuthenticatedMedusaClient(token), { id: customer.id, email: parsed.email });
-                await session.setMedusaAuthToken(token);
-                const addressSaved = parsed.address ? await storeRegistrationAddress(token, parsed, parsed.address) : true;
-                return { addressSaved, state: "success", sessionToken: token };
+                const applicationSubmitted = result.addressId ? await submitPartnerApplication(result.sessionToken, result.addressId, Boolean(parsed.address.vat_number), application) : false;
+                return { addressSaved: result.addressSaved, applicationSubmitted, sessionToken: result.sessionToken, state: result.state };
             }, { endSessionOnUnauthorized: false });
         },
         // The backend answers 202 for every address (no account enumeration) and

package/dist/server/index.d.ts

@@ -63,12 +63,24 @@ export declare function createStorefrontServer(config: StorefrontServerConfig):
         }>>;
         registerCustomerWithProfile(data: import("../core/form-values.js").CustomerRegistrationProfileValues): Promise<import("../core/action-result.js").MedusaActionResult<{
             state: "verification_required";
+            addressId?: undefined;
             addressSaved?: undefined;
             sessionToken?: undefined;
         } | {
             addressSaved: boolean;
+            sessionToken: string;
             state: "success";
+        }>>;
+        registerPartnerWithProfile(data: import("../core/form-values.js").PartnerRegistrationProfileValues): Promise<import("../core/action-result.js").MedusaActionResult<{
+            state: "verification_required";
+            addressId?: undefined;
+            addressSaved?: undefined;
+            sessionToken?: undefined;
+        } | {
+            addressSaved: boolean;
+            applicationSubmitted: boolean;
             sessionToken: string;
+            state: "success";
         }>>;
         requestLoginCode(data: import("@hartl-services/medusa-contracts/types/customer-auth-store").RequestLoginCodeRequest): Promise<import("../core/action-result.js").MedusaActionResult<void>>;
         loginWithCode(data: import("@hartl-services/medusa-contracts/types/customer-auth-store").LoginWithCodeRequest): Promise<import("../core/action-result.js").MedusaActionResult<{
@@ -109,6 +121,8 @@ export declare function createStorefrontServer(config: StorefrontServerConfig):
         verifyCustomerAddressTaxIdentification(addressId: string): Promise<import("../core/action-result.js").MedusaActionResult<import("@hartl-services/medusa-contracts/types/tax-compliance-store").SubmitCustomerAddressTaxIdentificationResponse>>;
     };
     affiliate: {
+        loadPartnerPortalState: () => Promise<import("@hartl-services/medusa-contracts/types/affiliate-store").StoreAffiliatePortalContextResponse["portal_state"] | null>;
+        isActivePartner(): Promise<boolean>;
         submitAffiliateApplication(data: import("@hartl-services/medusa-contracts/types/affiliate-store").SubmitAffiliateApplicationRequest): Promise<import("../core/action-result.js").MedusaActionResult<{
             application: {
                 id: string;

package/dist/server/index.js

@@ -26,6 +26,7 @@ export function createStorefrontServer(config) {
     const runMedusaAction = createRunMedusaAction(context);
     const pluginFeatures = createPluginFeatures(context);
     const region = createRegion(context);
+    const affiliate = createAffiliate(context, pluginFeatures, runMedusaAction);
     return {
         session: context.session,
         createMedusaClient: context.createMedusaClient,
@@ -34,12 +35,12 @@ export function createStorefrontServer(config) {
         pluginFeatures,
         region,
         cart: createCart(context, pluginFeatures),
-        customer: createCustomer(context, runMedusaAction),
+        customer: createCustomer(context, runMedusaAction, pluginFeatures),
         checkout: createCheckout(context),
         taxCompliance: createTaxCompliance(context, pluginFeatures, runMedusaAction),
-        affiliate: createAffiliate(context, pluginFeatures, runMedusaAction),
+        affiliate,
         orders: createOrders(context),
         documents: createDocuments(context),
-        catalog: createCatalog(context, region),
+        catalog: createCatalog(context, region, affiliate.isActivePartner),
     };
 }