@hszrdm/core 1.0.3 → 1.1.0

package/.medusa/server/src/modules/lead/email.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.leadAdminEmail = leadAdminEmail;
+exports.leadCustomerEmail = leadCustomerEmail;
+exports.leadStatusEmail = leadStatusEmail;
+function leadAdminEmail(lead, brand = "HSZRDM Commerce") {
+    const subject = `Új érdeklődő – ${text(lead.name) || text(lead.company) || text(lead.email) || text(lead.id)}`;
+    const body = [
+        `Új lead érkezett a ${brand} rendszerbe.`,
+        "",
+        `Űrlap: ${text(lead.form_key) || "—"}`,
+        `Azonosító: ${text(lead.id)}`,
+        `Név: ${text(lead.name) || "—"}`,
+        `Cég: ${text(lead.company) || "—"}`,
+        `E-mail: ${text(lead.email) || "—"}`,
+        `Telefon: ${text(lead.phone) || "—"}`,
+        lead.message ? `Üzenet: ${text(lead.message)}` : "",
+    ].filter(Boolean).join("\n");
+    return { subject, text: body, html: simpleHtml(body) };
+}
+function leadCustomerEmail(lead, brand = "HSZRDM Commerce") {
+    const subject = `Megkaptuk az üzeneted – ${brand}`;
+    const body = [
+        `Kedves ${text(lead.name) || "Érdeklődő"}!`,
+        "",
+        "Megkaptuk az üzenetedet, hamarosan jelentkezünk.",
+        `Azonosító: ${text(lead.id)}`,
+        "",
+        brand,
+    ].join("\n");
+    return { subject, text: body, html: simpleHtml(body) };
+}
+function leadStatusEmail(lead, brand = "HSZRDM Commerce") {
+    const labels = {
+        contacted: "felvettük veled a kapcsolatot",
+        qualified: "feldolgozás alatt",
+        won: "sikeresen lezárva",
+        lost: "lezárva",
+        closed: "lezárva",
+    };
+    const label = labels[text(lead.status)] || text(lead.status);
+    const subject = `Érdeklődés frissítés – ${brand}`;
+    const body = [
+        `Kedves ${text(lead.name) || "Érdeklődő"}!`,
+        "",
+        `Az érdeklődésed státusza frissült: ${label}.`,
+        `Azonosító: ${text(lead.id)}`,
+        "",
+        brand,
+    ].join("\n");
+    return { subject, text: body, html: simpleHtml(body) };
+}
+function simpleHtml(value) {
+    return `<div style="font-family:Arial,sans-serif;white-space:pre-line">${escapeHtml(value)}</div>`;
+}
+function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, (char) => ({
+        "&": "&amp;",
+        "<": "&lt;",
+        ">": "&gt;",
+        '"': "&quot;",
+        "'": "&#39;",
+    })[char] || char);
+}
+function text(value) {
+    return typeof value === "string" ? value.trim() : "";
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/modules/lead/index.d.ts

@@ -0,0 +1,9 @@
+import LeadService from "./service";
+export declare const LEAD_MODULE = "lead";
+declare const _default: any;
+export default _default;
+export { LeadService };
+export { LEAD_STATUSES } from "./models/lead";
+export { loadLeadConfig, type LeadConfig, type LeadFieldDefinition, type LeadFormDefinition, } from "./config";
+export { leadAdminEmail, leadCustomerEmail, leadStatusEmail, } from "./email";
+export { assessLeadSpam, checkLeadRateLimit, clientFingerprint, verifyTurnstile, } from "./spam";

package/.medusa/server/src/modules/lead/index.js

@@ -0,0 +1,27 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyTurnstile = exports.clientFingerprint = exports.checkLeadRateLimit = exports.assessLeadSpam = exports.leadStatusEmail = exports.leadCustomerEmail = exports.leadAdminEmail = exports.loadLeadConfig = exports.LEAD_STATUSES = exports.LeadService = exports.LEAD_MODULE = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const service_1 = __importDefault(require("./service"));
+exports.LeadService = service_1.default;
+exports.LEAD_MODULE = "lead";
+exports.default = (0, utils_1.Module)(exports.LEAD_MODULE, {
+    service: service_1.default,
+});
+var lead_1 = require("./models/lead");
+Object.defineProperty(exports, "LEAD_STATUSES", { enumerable: true, get: function () { return lead_1.LEAD_STATUSES; } });
+var config_1 = require("./config");
+Object.defineProperty(exports, "loadLeadConfig", { enumerable: true, get: function () { return config_1.loadLeadConfig; } });
+var email_1 = require("./email");
+Object.defineProperty(exports, "leadAdminEmail", { enumerable: true, get: function () { return email_1.leadAdminEmail; } });
+Object.defineProperty(exports, "leadCustomerEmail", { enumerable: true, get: function () { return email_1.leadCustomerEmail; } });
+Object.defineProperty(exports, "leadStatusEmail", { enumerable: true, get: function () { return email_1.leadStatusEmail; } });
+var spam_1 = require("./spam");
+Object.defineProperty(exports, "assessLeadSpam", { enumerable: true, get: function () { return spam_1.assessLeadSpam; } });
+Object.defineProperty(exports, "checkLeadRateLimit", { enumerable: true, get: function () { return spam_1.checkLeadRateLimit; } });
+Object.defineProperty(exports, "clientFingerprint", { enumerable: true, get: function () { return spam_1.clientFingerprint; } });
+Object.defineProperty(exports, "verifyTurnstile", { enumerable: true, get: function () { return spam_1.verifyTurnstile; } });
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/modules/lead/migrations/Migration20261029163000.d.ts

@@ -0,0 +1,5 @@
+import { Migration } from "@medusajs/framework/mikro-orm/migrations";
+export declare class Migration20261029163000 extends Migration {
+    up(): Promise<void>;
+    down(): Promise<void>;
+}

package/.medusa/server/src/modules/lead/migrations/Migration20261029163000.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Migration20261029163000 = void 0;
+const migrations_1 = require("@medusajs/framework/mikro-orm/migrations");
+class Migration20261029163000 extends migrations_1.Migration {
+    async up() {
+        this.addSql(`create table if not exists "lead" ("id" text not null, "form_key" text not null, "status" text check ("status" in ('new','contacted','qualified','won','lost','spam','closed')) not null, "name" text null, "email" text null, "phone" text null, "company" text null, "message" text null, "fields" jsonb null, "source" text null, "page_url" text null, "referrer" text null, "utm" jsonb null, "customer_id" text null, "admin_note" text null, "privacy_consent_at" timestamptz null, "privacy_policy_version" text not null, "privacy_policy_url" text null, "privacy_policy_label" text null, "request_fingerprint" text null, "spam_score" integer not null default 0, "spam_reasons" jsonb null, "created_at" timestamptz not null default now(), "updated_at" timestamptz not null default now(), "deleted_at" timestamptz null, constraint "lead_pkey" primary key ("id"));`);
+        this.addSql(`create index if not exists "IDX_lead_status_created" on "lead" ("status", "created_at") where deleted_at is null;`);
+        this.addSql(`create index if not exists "IDX_lead_form_created" on "lead" ("form_key", "created_at") where deleted_at is null;`);
+        this.addSql(`create index if not exists "IDX_lead_email_created" on "lead" ("email", "created_at") where deleted_at is null;`);
+        this.addSql(`create index if not exists "IDX_lead_customer" on "lead" ("customer_id") where deleted_at is null;`);
+        this.addSql(`create index if not exists "IDX_lead_fingerprint_created" on "lead" ("request_fingerprint", "created_at") where deleted_at is null;`);
+    }
+    async down() {
+        this.addSql(`drop table if exists "lead" cascade;`);
+    }
+}
+exports.Migration20261029163000 = Migration20261029163000;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/modules/lead/models/lead.d.ts

@@ -0,0 +1,26 @@
+export declare const LEAD_STATUSES: readonly ["new", "contacted", "qualified", "won", "lost", "spam", "closed"];
+declare const Lead: import("@medusajs/framework/utils").DmlEntity<import("@medusajs/framework/utils").DMLEntitySchemaBuilder<{
+    id: import("@medusajs/framework/utils").PrimaryKeyModifier<string, import("@medusajs/framework/utils").IdProperty>;
+    form_key: import("@medusajs/framework/utils").TextProperty;
+    status: import("@medusajs/framework/utils").EnumProperty<["new", "contacted", "qualified", "won", "lost", "spam", "closed"]>;
+    name: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    email: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    phone: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    company: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    message: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    fields: import("@medusajs/framework/utils").NullableModifier<NoInfer<Record<string, unknown>>, import("@medusajs/framework/utils").JSONProperty<NoInfer<Record<string, unknown>>>>;
+    source: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    page_url: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    referrer: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    utm: import("@medusajs/framework/utils").NullableModifier<NoInfer<Record<string, unknown>>, import("@medusajs/framework/utils").JSONProperty<NoInfer<Record<string, unknown>>>>;
+    customer_id: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    admin_note: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    privacy_consent_at: import("@medusajs/framework/utils").NullableModifier<Date, import("@medusajs/framework/utils").DateTimeProperty>;
+    privacy_policy_version: import("@medusajs/framework/utils").TextProperty;
+    privacy_policy_url: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    privacy_policy_label: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    request_fingerprint: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+    spam_score: import("@medusajs/framework/utils").NumberProperty;
+    spam_reasons: import("@medusajs/framework/utils").NullableModifier<NoInfer<Record<string, unknown>>, import("@medusajs/framework/utils").JSONProperty<NoInfer<Record<string, unknown>>>>;
+}>, "lead">;
+export default Lead;

package/.medusa/server/src/modules/lead/models/lead.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LEAD_STATUSES = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+exports.LEAD_STATUSES = [
+    "new",
+    "contacted",
+    "qualified",
+    "won",
+    "lost",
+    "spam",
+    "closed",
+];
+const Lead = utils_1.model.define("lead", {
+    id: utils_1.model.id().primaryKey(),
+    form_key: utils_1.model.text(),
+    status: utils_1.model.enum([
+        "new",
+        "contacted",
+        "qualified",
+        "won",
+        "lost",
+        "spam",
+        "closed",
+    ]),
+    name: utils_1.model.text().nullable(),
+    email: utils_1.model.text().nullable(),
+    phone: utils_1.model.text().nullable(),
+    company: utils_1.model.text().nullable(),
+    message: utils_1.model.text().nullable(),
+    fields: utils_1.model.json().nullable(),
+    source: utils_1.model.text().nullable(),
+    page_url: utils_1.model.text().nullable(),
+    referrer: utils_1.model.text().nullable(),
+    utm: utils_1.model.json().nullable(),
+    customer_id: utils_1.model.text().nullable(),
+    admin_note: utils_1.model.text().nullable(),
+    privacy_consent_at: utils_1.model.dateTime().nullable(),
+    privacy_policy_version: utils_1.model.text(),
+    privacy_policy_url: utils_1.model.text().nullable(),
+    privacy_policy_label: utils_1.model.text().nullable(),
+    request_fingerprint: utils_1.model.text().nullable(),
+    spam_score: utils_1.model.number().default(0),
+    spam_reasons: utils_1.model.json().nullable(),
+}).indexes([
+    { on: ["status", "created_at"] },
+    { on: ["form_key", "created_at"] },
+    { on: ["email", "created_at"] },
+    { on: ["customer_id"] },
+    { on: ["request_fingerprint", "created_at"] },
+]);
+exports.default = Lead;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/modules/lead/service.d.ts

@@ -0,0 +1,29 @@
+declare const LeadService_base: import("@medusajs/framework/utils").MedusaServiceReturnType<import("@medusajs/framework/utils").ModelConfigurationsToConfigTemplate<{
+    readonly Lead: import("@medusajs/framework/utils").DmlEntity<import("@medusajs/framework/utils").DMLEntitySchemaBuilder<{
+        id: import("@medusajs/framework/utils").PrimaryKeyModifier<string, import("@medusajs/framework/utils").IdProperty>;
+        form_key: import("@medusajs/framework/utils").TextProperty;
+        status: import("@medusajs/framework/utils").EnumProperty<["new", "contacted", "qualified", "won", "lost", "spam", "closed"]>;
+        name: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        email: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        phone: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        company: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        message: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        fields: import("@medusajs/framework/utils").NullableModifier<NoInfer<Record<string, unknown>>, import("@medusajs/framework/utils").JSONProperty<NoInfer<Record<string, unknown>>>>;
+        source: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        page_url: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        referrer: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        utm: import("@medusajs/framework/utils").NullableModifier<NoInfer<Record<string, unknown>>, import("@medusajs/framework/utils").JSONProperty<NoInfer<Record<string, unknown>>>>;
+        customer_id: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        admin_note: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        privacy_consent_at: import("@medusajs/framework/utils").NullableModifier<Date, import("@medusajs/framework/utils").DateTimeProperty>;
+        privacy_policy_version: import("@medusajs/framework/utils").TextProperty;
+        privacy_policy_url: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        privacy_policy_label: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        request_fingerprint: import("@medusajs/framework/utils").NullableModifier<string, import("@medusajs/framework/utils").TextProperty>;
+        spam_score: import("@medusajs/framework/utils").NumberProperty;
+        spam_reasons: import("@medusajs/framework/utils").NullableModifier<NoInfer<Record<string, unknown>>, import("@medusajs/framework/utils").JSONProperty<NoInfer<Record<string, unknown>>>>;
+    }>, "lead">;
+}>>;
+declare class LeadService extends LeadService_base {
+}
+export default LeadService;

package/.medusa/server/src/modules/lead/service.js

@@ -0,0 +1,11 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("@medusajs/framework/utils");
+const lead_1 = __importDefault(require("./models/lead"));
+class LeadService extends (0, utils_1.MedusaService)({ Lead: lead_1.default }) {
+}
+exports.default = LeadService;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2VydmljZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3NyYy9tb2R1bGVzL2xlYWQvc2VydmljZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7OztBQUFBLHFEQUF5RDtBQUN6RCx5REFBZ0M7QUFFaEMsTUFBTSxXQUFZLFNBQVEsSUFBQSxxQkFBYSxFQUFDLEVBQUUsSUFBSSxFQUFKLGNBQUksRUFBRSxDQUFDO0NBQUc7QUFFcEQsa0JBQWUsV0FBVyxDQUFBIn0=

package/.medusa/server/src/modules/lead/spam.d.ts

@@ -0,0 +1,24 @@
+export type SpamAssessment = {
+    score: number;
+    reasons: string[];
+    spam: boolean;
+};
+type RateLimitInput = {
+    fingerprint: string | null;
+    email?: string | null;
+    max: number;
+    windowSeconds: number;
+};
+export declare function clientFingerprint(headers: Record<string, unknown>, secret?: string): string | null;
+export declare function assessLeadSpam(input: {
+    honeypotValue?: unknown;
+    formStartedAt?: unknown;
+    now?: number;
+}): SpamAssessment;
+export declare function checkLeadRateLimit(input: RateLimitInput): Promise<boolean>;
+export declare function verifyTurnstile(input: {
+    token?: string | null;
+    secretKey?: string | null;
+    remoteIp?: string | null;
+}): Promise<boolean>;
+export {};

package/.medusa/server/src/modules/lead/spam.js

@@ -0,0 +1,114 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clientFingerprint = clientFingerprint;
+exports.assessLeadSpam = assessLeadSpam;
+exports.checkLeadRateLimit = checkLeadRateLimit;
+exports.verifyTurnstile = verifyTurnstile;
+const node_crypto_1 = require("node:crypto");
+const ioredis_1 = __importDefault(require("ioredis"));
+const memoryCounters = new Map();
+let redis;
+function clientFingerprint(headers, secret = process.env.LEAD_SPAM_HASH_SECRET || process.env.COOKIE_SECRET || "hszrdm-lead") {
+    const raw = firstHeader(headers["cf-connecting-ip"]) || firstHeader(headers["x-forwarded-for"])?.split(",")[0]?.trim() || firstHeader(headers["x-real-ip"]);
+    if (!raw)
+        return null;
+    return (0, node_crypto_1.createHmac)("sha256", secret).update(raw).digest("hex");
+}
+function assessLeadSpam(input) {
+    const reasons = [];
+    let score = 0;
+    if (typeof input.honeypotValue === "string" && input.honeypotValue.trim()) {
+        score += 100;
+        reasons.push("honeypot");
+    }
+    const started = typeof input.formStartedAt === "string" || typeof input.formStartedAt === "number"
+        ? new Date(input.formStartedAt).getTime()
+        : NaN;
+    const now = input.now ?? Date.now();
+    if (Number.isFinite(started) && now - started >= 0 && now - started < 1500) {
+        score += 30;
+        reasons.push("too_fast");
+    }
+    return { score, reasons, spam: score >= 100 };
+}
+async function checkLeadRateLimit(input) {
+    const identities = [
+        input.fingerprint ? `ip:${input.fingerprint}` : null,
+        input.email ? `email:${(0, node_crypto_1.createHash)("sha256").update(input.email.trim().toLowerCase()).digest("hex")}` : null,
+    ].filter((value) => Boolean(value));
+    for (const identity of identities) {
+        const allowed = await increment(identity, input.max, input.windowSeconds);
+        if (!allowed)
+            return false;
+    }
+    return true;
+}
+async function verifyTurnstile(input) {
+    if (!input.secretKey)
+        return true;
+    if (!input.token)
+        return false;
+    const body = new URLSearchParams({ secret: input.secretKey, response: input.token });
+    if (input.remoteIp)
+        body.set("remoteip", input.remoteIp);
+    const response = await fetch("https://challenges.cloudflare.com/turnstile/v0/siteverify", {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body,
+        signal: AbortSignal.timeout(8000),
+    });
+    if (!response.ok)
+        return false;
+    const payload = await response.json();
+    return payload.success === true;
+}
+function firstHeader(value) {
+    if (Array.isArray(value))
+        return value.length ? String(value[0]) : null;
+    if (typeof value === "string")
+        return value;
+    return null;
+}
+async function increment(identity, max, windowSeconds) {
+    const redisClient = getRedis();
+    const key = `hszrdm:lead-rate:${identity}`;
+    if (redisClient) {
+        try {
+            const count = await redisClient.incr(key);
+            if (count === 1)
+                await redisClient.expire(key, windowSeconds);
+            return count <= max;
+        }
+        catch {
+            // Fall back to the local process counter when Redis is unavailable.
+        }
+    }
+    const now = Date.now();
+    const current = memoryCounters.get(key);
+    if (!current || current.expiresAt <= now) {
+        memoryCounters.set(key, { count: 1, expiresAt: now + windowSeconds * 1000 });
+        return true;
+    }
+    current.count += 1;
+    return current.count <= max;
+}
+function getRedis() {
+    if (redis !== undefined)
+        return redis;
+    const url = process.env.REDIS_URL?.trim();
+    if (!url) {
+        redis = null;
+        return redis;
+    }
+    redis = new ioredis_1.default(url, {
+        lazyConnect: true,
+        maxRetriesPerRequest: 1,
+        enableOfflineQueue: false,
+    });
+    redis.connect().catch(() => undefined);
+    return redis;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/modules/quote-request/config.d.ts

@@ -0,0 +1,14 @@
+export type QuoteExtraFieldDefinition = {
+    key: string;
+    label: string;
+    type: "text" | "textarea" | "number" | "boolean" | "select";
+    required: boolean;
+    options?: string[];
+};
+export type QuoteRequestConfig = {
+    enabled: boolean;
+    emailEnabled: boolean;
+    adminEmails: string[];
+    extraFields: QuoteExtraFieldDefinition[];
+};
+export declare function loadQuoteRequestConfig(env?: NodeJS.ProcessEnv): QuoteRequestConfig;

package/.medusa/server/src/modules/quote-request/config.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadQuoteRequestConfig = loadQuoteRequestConfig;
+function loadQuoteRequestConfig(env = process.env) {
+    return {
+        enabled: env.QUOTE_REQUESTS_ENABLED !== "false",
+        emailEnabled: env.QUOTE_EMAIL_ENABLED !== "false",
+        adminEmails: splitEmails(env.QUOTE_ADMIN_EMAILS || env.QUOTE_ADMIN_EMAIL || ""),
+        extraFields: parseExtraFields(env.QUOTE_EXTRA_FIELDS_JSON),
+    };
+}
+function splitEmails(value) {
+    return [...new Set(value.split(/[;,]/).map((email) => email.trim()).filter(Boolean))];
+}
+function parseExtraFields(raw) {
+    if (!raw?.trim())
+        return [];
+    try {
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed))
+            return [];
+        return parsed.flatMap((value) => {
+            if (!value || typeof value !== "object" || Array.isArray(value))
+                return [];
+            const row = value;
+            const key = text(row.key);
+            const label = text(row.label) || key;
+            const type = text(row.type);
+            if (!key || !/^[a-zA-Z0-9_.-]{1,80}$/.test(key))
+                return [];
+            if (!["text", "textarea", "number", "boolean", "select"].includes(type))
+                return [];
+            const options = Array.isArray(row.options)
+                ? row.options.map(text).filter(Boolean).slice(0, 100)
+                : undefined;
+            return [{
+                    key,
+                    label: label.slice(0, 160),
+                    type: type,
+                    required: row.required === true,
+                    ...(options?.length ? { options } : {}),
+                }];
+        }).slice(0, 50);
+    }
+    catch {
+        return [];
+    }
+}
+function text(value) {
+    return typeof value === "string" ? value.trim() : "";
+}
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/modules/quote-request/email.d.ts

@@ -0,0 +1,17 @@
+type QuoteLike = Record<string, any>;
+export declare function quoteRequestCreatedEmail(quote: QuoteLike, brand?: string): {
+    subject: string;
+    text: string;
+    html: string;
+};
+export declare function quoteRequestAdminEmail(quote: QuoteLike, brand?: string): {
+    subject: string;
+    text: string;
+    html: string;
+};
+export declare function quoteRequestStatusEmail(quote: QuoteLike, brand?: string): {
+    subject: string;
+    text: string;
+    html: string;
+};
+export {};