@hartl-services/medusa-storefront 0.5.0 → 0.6.0

package/README.md

@@ -97,6 +97,12 @@ the account with the company address as default address and submits the
 application from it; while the e-mail is unconfirmed, both wait until the
 first login.
 
+The catalog leaves out partner-only products for everyone but a partner. A
+shop may let others see them too with `canSeePartnerOnlyProducts` in the
+server config, e.g. a CMS editor in preview who checks such a product's page
+(since 0.6.0). It only affects what is shown; the backend still refuses
+partner-only products at checkout for non-partners.
+
 ## Wiring rules
 
 - Create `createStorefrontServer` and `createStorefrontBrowser` once each, at

package/dist/registry/account.json

@@ -4,7 +4,7 @@
   "title": "Customer account",
   "description": "Sign-in with password or e-mail code, password reset, account verification, address book with UID check, profile, orders, the account workspace layout and the document download route.",
   "dependencies": [
-    "@hartl-services/medusa-storefront@^0.5.0",
+    "@hartl-services/medusa-storefront@^0.6.0",
     "@hartl-services/medusa-contracts@^1.5.0",
     "@medusajs/types@^2.19.0",
     "lucide-react"

package/dist/registry/affiliate.json

@@ -4,7 +4,7 @@
   "title": "Partner portal",
   "description": "Partner portal: gated registration with UID check, links, coupon codes, commissions with date filter, consignment reports, and its Route Handlers.",
   "dependencies": [
-    "@hartl-services/medusa-storefront@^0.5.0",
+    "@hartl-services/medusa-storefront@^0.6.0",
     "@hartl-services/medusa-contracts@^1.5.0",
     "@medusajs/types@^2.19.0",
     "lucide-react",

package/dist/registry/cart.json

@@ -4,7 +4,7 @@
   "title": "Cart",
   "description": "Cart widget with popover, line items, totals, cart page, add-to-cart button, variant picker and product price.",
   "dependencies": [
-    "@hartl-services/medusa-storefront@^0.5.0",
+    "@hartl-services/medusa-storefront@^0.6.0",
     "@medusajs/types@^2.19.0",
     "lucide-react"
   ],

package/dist/registry/checkout.json

@@ -4,7 +4,7 @@
   "title": "Checkout",
   "description": "Checkout page (address, login prompt, shipping and Stripe payment, coupon, UID status) and the order confirmation page.",
   "dependencies": [
-    "@hartl-services/medusa-storefront@^0.5.0",
+    "@hartl-services/medusa-storefront@^0.6.0",
     "@medusajs/types@^2.19.0",
     "@stripe/react-stripe-js@^5.6.1",
     "@stripe/stripe-js@^8.11.0",

package/dist/registry/form.json

@@ -4,7 +4,7 @@
   "title": "Storefront form kit",
   "description": "The shop's TanStack form hook (useAppForm) with unstyled field components; the package's hooks hand their formOptions to it.",
   "dependencies": [
-    "@hartl-services/medusa-storefront@^0.5.0",
+    "@hartl-services/medusa-storefront@^0.6.0",
     "@tanstack/react-form@^1.33.5",
     "input-otp",
     "lucide-react"

package/dist/registry/registry.json

@@ -7,7 +7,7 @@
       "title": "Storefront setup",
       "description": "Wires the storefront package into a Next shop: server and browser instances, the Server Action wrappers, texts, error reporting and the provider root for the [countryCode] layout.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.5.0",
+        "@hartl-services/medusa-storefront@^0.6.0",
         "@hartl-services/medusa-contracts@^1.5.0",
         "@medusajs/framework@^2.19.0",
         "@medusajs/js-sdk@^2.19.0",
@@ -73,7 +73,7 @@
       "title": "Storefront form kit",
       "description": "The shop's TanStack form hook (useAppForm) with unstyled field components; the package's hooks hand their formOptions to it.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.5.0",
+        "@hartl-services/medusa-storefront@^0.6.0",
         "@tanstack/react-form@^1.33.5",
         "input-otp",
         "lucide-react"
@@ -197,7 +197,7 @@
       "title": "Cart",
       "description": "Cart widget with popover, line items, totals, cart page, add-to-cart button, variant picker and product price.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.5.0",
+        "@hartl-services/medusa-storefront@^0.6.0",
         "@medusajs/types@^2.19.0",
         "lucide-react"
       ],
@@ -306,7 +306,7 @@
       "title": "Customer account",
       "description": "Sign-in with password or e-mail code, password reset, account verification, address book with UID check, profile, orders, the account workspace layout and the document download route.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.5.0",
+        "@hartl-services/medusa-storefront@^0.6.0",
         "@hartl-services/medusa-contracts@^1.5.0",
         "@medusajs/types@^2.19.0",
         "lucide-react"
@@ -516,7 +516,7 @@
       "title": "Checkout",
       "description": "Checkout page (address, login prompt, shipping and Stripe payment, coupon, UID status) and the order confirmation page.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.5.0",
+        "@hartl-services/medusa-storefront@^0.6.0",
         "@medusajs/types@^2.19.0",
         "@stripe/react-stripe-js@^5.6.1",
         "@stripe/stripe-js@^8.11.0",
@@ -661,7 +661,7 @@
       "title": "Partner portal",
       "description": "Partner portal: gated registration with UID check, links, coupon codes, commissions with date filter, consignment reports, and its Route Handlers.",
       "dependencies": [
-        "@hartl-services/medusa-storefront@^0.5.0",
+        "@hartl-services/medusa-storefront@^0.6.0",
         "@hartl-services/medusa-contracts@^1.5.0",
         "@medusajs/types@^2.19.0",
         "lucide-react",

package/dist/registry/setup.json

@@ -4,7 +4,7 @@
   "title": "Storefront setup",
   "description": "Wires the storefront package into a Next shop: server and browser instances, the Server Action wrappers, texts, error reporting and the provider root for the [countryCode] layout.",
   "dependencies": [
-    "@hartl-services/medusa-storefront@^0.5.0",
+    "@hartl-services/medusa-storefront@^0.6.0",
     "@hartl-services/medusa-contracts@^1.5.0",
     "@medusajs/framework@^2.19.0",
     "@medusajs/js-sdk@^2.19.0",

package/dist/server/catalog.d.ts

@@ -1,5 +1,5 @@
 import type { HttpTypes } from "@medusajs/types";
-import type { ServerContext } from "./context.js";
+import type { ServerContext, StorefrontServerConfig } from "./context.js";
 import type { ServerRegion } from "./region.js";
 export interface CommerceProductListInput {
     categoryId?: string;
@@ -32,3 +32,9 @@ export declare function createCatalog(context: ServerContext, region: ServerRegi
     collectionByHandle(handle: string): Promise<HttpTypes.StoreCollection | null>;
 };
 export type ServerCatalog = ReturnType<typeof createCatalog>;
+/**
+ * The catalog's partner-only check: the shop's own rule
+ * (`canSeePartnerOnlyProducts`) first, then the partner state. A failing
+ * shop rule counts as "no", so it never hides anything from a partner.
+ */
+export declare function partnerOnlyVisibility(config: Pick<StorefrontServerConfig, "canSeePartnerOnlyProducts">, isActivePartner: () => Promise<boolean>): () => Promise<boolean>;

package/dist/server/catalog.js

@@ -112,3 +112,15 @@ export function createCatalog(context, region, isActivePartner = async () => fal
         },
     };
 }
+/**
+ * The catalog's partner-only check: the shop's own rule
+ * (`canSeePartnerOnlyProducts`) first, then the partner state. A failing
+ * shop rule counts as "no", so it never hides anything from a partner.
+ */
+export function partnerOnlyVisibility(config, isActivePartner) {
+    const shopRule = config.canSeePartnerOnlyProducts;
+    if (!shopRule) {
+        return isActivePartner;
+    }
+    return async () => (await shopRule().catch(() => false)) || isActivePartner();
+}

package/dist/server/context.d.ts

@@ -18,6 +18,13 @@ export interface StorefrontServerConfig {
     resolveLocale?: (countryCode: string) => string;
     /** Cookies are `Secure` in production. */
     secureCookies?: boolean;
+    /**
+     * Who else besides an active partner may see partner-only products in the
+     * catalog, e.g. a CMS editor in preview who checks a partner product's page.
+     * Display only: the backend still refuses partner-only products at checkout
+     * for everyone who is not a partner. Should fail closed.
+     */
+    canSeePartnerOnlyProducts?: () => Promise<boolean>;
 }
 export type MedusaServerClient = Medusa;
 export interface ServerContext {

package/dist/server/index.js

@@ -1,7 +1,7 @@
 import "server-only";
 import { createAffiliate } from "./affiliate.js";
 import { createCart } from "./cart.js";
-import { createCatalog } from "./catalog.js";
+import { createCatalog, partnerOnlyVisibility } from "./catalog.js";
 import { createCheckout } from "./checkout.js";
 import { createServerContext } from "./context.js";
 import { createCustomer } from "./customer.js";
@@ -41,6 +41,6 @@ export function createStorefrontServer(config) {
         affiliate,
         orders: createOrders(context),
         documents: createDocuments(context),
-        catalog: createCatalog(context, region, affiliate.isActivePartner),
+        catalog: createCatalog(context, region, partnerOnlyVisibility(config, affiliate.isActivePartner)),
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hartl-services/medusa-storefront",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Headless Medusa storefront logic, Next.js server/browser adapters and React hooks for shops built from the @hartl-services/medusa-* plugins.",
   "type": "module",
   "sideEffects": false,