medusajs-documents-plugin 1.1.29 → 1.1.31

package/CHANGELOG.md

@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ---
 
+## [1.1.31] - 2026-11-01
+
+### HTTP HEAD Request Handling, Accept-Ranges Byte Streaming & Order Fallback
+- **HEAD Method Route Handlers & Unauthenticated Allowlist**: Exported `export const HEAD = GET;` across all document streaming and template preview routes (`/admin/documents/:id/document`, `/admin/documents/templates/preview`, `/api/admin/documents/:id/document`, `/documents/:id/document`, `/documents/templates/preview`) and added `HEAD` and `OPTIONS` to `src/api/middlewares.ts`. This resolves HTTP 401 Unauthorized errors caused when browsers, PDF viewers, or proxies issue HTTP HEAD requests to verify content type before fetching the PDF body.
+- **HTTP Range & Accept-Ranges Streaming**: Added `Accept-Ranges: bytes` and HTTP 206 Partial Content byte-range slicing to stream handlers, supporting native PDF viewers and media pre-loaders requesting partial byte ranges.
+- **Order Lookup Fallback in Admin Stream Route**: Extended `/admin/documents/:id/document` route lookup to query `order_id` in both database query layers.
+- **Admin Document Navigation Alignment**: Restored `src/admin/routes/documents/page.tsx` view and preview handlers to use `/admin/documents/...` endpoints directly.
+- **Zoho PDF Magic Bytes Verification**: Enforced `%PDF` header validation on buffers received from Zoho Books before invoking PDF post-processing.
+
+## [1.1.30] - 2026-11-01
+
+### Unauthenticated PDF Document Streaming & Robust Fallback Handling
+- **Unauthenticated PDF Streaming**: Added `export const AUTHENTICATE = false;` to `/admin/documents/:id/document` and template preview routes, and registered matching allowlist middlewares in `src/api/middlewares.ts`. This prevents 401 Unauthorized errors when viewing documents via `window.open` or direct browser links without Bearer authorization headers.
+- **Admin UI Streaming URLs**: Updated `src/admin/routes/documents/page.tsx` to point `window.open` targets to the dedicated public document streaming route `/documents/:id/document` and `/documents/templates/preview`.
+- **Defensive PDFKit Fallback**: Hardened `PDFKitGenerator.generate` and all underlying template renderers (`zoho_exact`, `modern`, `classic`, `minimal`, `job_card`, `service_report`) to gracefully handle zero items (`[]`), missing items (`undefined`), and incomplete item properties (missing title, unit_price, quantity) without throwing unhandled exceptions.
+- **Resilient Currency Formatting**: Enhanced `PDFKitGenerator.formatCurrency` to safely guard against `undefined`, `null`, and `NaN` values, preventing formatting runtime errors.
+- **Service Document Retrieval & Knex String Parsing**: Made `DocumentModuleService.getPdfForRecord` resilient to stringified JSON metadata and template failures with automatic fallback to the modern template.
+- **Repair Module Lookup Fallback**: Extended `/admin/documents/:id/document` to resolve document records via repair ticket tokens or ticket IDs if the primary ID lookup does not immediately match.
+
 ## [1.1.27] - 2026-11-01
 
 ### Repair Sync, 3-Column Template Gallery & Preset Previews

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "medusajs-documents-plugin",
-  "version": "1.1.29",
+  "version": "1.1.31",
   "description": "Comprehensive document generation and management module for Medusa v2 with Zoho Books integration, PDFKit fallback, QR codes, shortlinks, multi-channel notifications and unified admin hub.",
   "author": "Urban Device Care <info@urbandevicecare.co.uk>",
   "license": "MIT",