@aforoai/storefront-widgets 1.0.2 → 1.0.4

package/dist/vanilla/index.mjs

@@ -5,7 +5,7 @@ import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 // src/vanilla/index.ts
 
 // src/core/version.ts
-var VERSION = "1.0.2";
+var VERSION = "1.0.4";
 
 // src/core/AforoEmbed.ts
 var mountedElements = /* @__PURE__ */ new WeakMap();
@@ -389,7 +389,7 @@ var BridgeClientError = class extends Error {
     this.retryable = retryable;
   }
 };
-var DEFAULT_BASE = "https://embed.aforo.ai";
+var DEFAULT_BASE = "https://storefront.aforo.ai";
 var DEFAULT_TIMEOUT_MS = 15e3;
 function uuidv4() {
   if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
@@ -577,10 +577,23 @@ var _BridgeClient = class _BridgeClient {
   /**
    * Headless config — the PricingCard widget's primary read path.
    *
-   * Mirrors `GET /api/v1/portal/headless/config` which returns
-   * `{branding, offerings, ratePlans, themeTokens, customPages, ...}`
-   * denormalized JSON. The endpoint is 60s Caffeine-cached server-side; we
-   * cache once per widget instance on the client.
+   * Hits `GET /api/v1/portal/embed/tenant-config/{slug}` — the SAME
+   * embed-key-authenticated endpoint {@link getTenantBrandKit} uses, now
+   * extended server-side with `offerings` + `embeddableWidget`. This was
+   * previously wired to `GET /api/v1/portal/headless/config`, an unrelated
+   * T6 Headless-tier endpoint that requires `X-Storefront-Key`/
+   * `X-Tenant-Id` auth — headers the embed key flow never sends. Every
+   * embed-tier fetch against that URL failed 400 "Missing tenant
+   * identification" by construction; this endpoint is scoped to the same
+   * `EmbedKeyAuthFilter` gate as the rest of the embed plane, so the
+   * `Authorization: Bearer <embed_key>` header `buildHeaders()` already
+   * sends is sufficient.
+   *
+   * The backend response is still a flat record (`tenantSlug,
+   * primaryColor, secondaryColor, logoUrl, fontFamily, offerings,
+   * embeddableWidget`) — kept flat so `getTenantBrandKit()`'s existing
+   * consumers (the ThemeReader cascade) are unaffected. This method nests
+   * the branding fields into the shape `HeadlessConfigResponse` expects.
    *
    * Pattern #18 fail-soft — returns `null` on transport failure, 404, or
    * malformed JSON. Widgets fall through to their empty / error state and
@@ -595,7 +608,7 @@ var _BridgeClient = class _BridgeClient {
     }
     const target = slug || this.tenantSlug;
     if (!target) return null;
-    const url = `${this.baseUrl}/api/v1/portal/headless/config?tenantSlug=${encodeURIComponent(target)}`;
+    const url = `${this.baseUrl}/api/v1/portal/embed/tenant-config/${encodeURIComponent(target)}`;
     let resp;
     try {
       resp = await this.send(url, {
@@ -608,7 +621,18 @@ var _BridgeClient = class _BridgeClient {
     if (!resp.ok) return null;
     try {
       const body = await resp.json();
-      return body && typeof body === "object" ? body : null;
+      if (!body || typeof body !== "object") return null;
+      return {
+        tenantSlug: body.tenantSlug,
+        branding: {
+          primaryColor: body.primaryColor ?? null,
+          secondaryColor: body.secondaryColor ?? null,
+          logoUrl: body.logoUrl ?? null,
+          fontFamily: body.fontFamily ?? null
+        },
+        offerings: Array.isArray(body.offerings) ? body.offerings : [],
+        embeddableWidget: body.embeddableWidget ?? null
+      };
     } catch {
       return null;
     }
@@ -2113,9 +2137,10 @@ var AforoSession = {
     };
     sessions.set(k, entry);
     if (config.bridgeToken) {
-      entry.pendingExchange = refreshSession(entry).catch((err) => {
-        throw err;
+      const exchangePromise = refreshSession(entry);
+      exchangePromise.catch(() => {
       });
+      entry.pendingExchange = exchangePromise;
     } else if (config.magicLinkMode) {
       const tokenInUrl = readMagicTokenFromUrl();
       if (tokenInUrl) {
@@ -2125,6 +2150,8 @@ var AforoSession = {
           pending = runMagicLinkVerify(entry, tokenInUrl).finally(() => {
             pendingMagicLinkVerifies.delete(dedupKey);
           });
+          pending.catch(() => {
+          });
           pendingMagicLinkVerifies.set(dedupKey, pending);
         }
         entry.pendingExchange = pending;

package/dist/vue/index.cjs

@@ -28,7 +28,7 @@ var React7__namespace = /*#__PURE__*/_interopNamespace(React7);
 // src/vue/index.ts
 
 // src/core/version.ts
-var VERSION = "1.0.2";
+var VERSION = "1.0.4";
 
 // src/core/AforoEmbed.ts
 var mountedElements = /* @__PURE__ */ new WeakMap();
@@ -412,7 +412,7 @@ var BridgeClientError = class extends Error {
     this.retryable = retryable;
   }
 };
-var DEFAULT_BASE = "https://embed.aforo.ai";
+var DEFAULT_BASE = "https://storefront.aforo.ai";
 var DEFAULT_TIMEOUT_MS = 15e3;
 function uuidv4() {
   if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
@@ -600,10 +600,23 @@ var _BridgeClient = class _BridgeClient {
   /**
    * Headless config — the PricingCard widget's primary read path.
    *
-   * Mirrors `GET /api/v1/portal/headless/config` which returns
-   * `{branding, offerings, ratePlans, themeTokens, customPages, ...}`
-   * denormalized JSON. The endpoint is 60s Caffeine-cached server-side; we
-   * cache once per widget instance on the client.
+   * Hits `GET /api/v1/portal/embed/tenant-config/{slug}` — the SAME
+   * embed-key-authenticated endpoint {@link getTenantBrandKit} uses, now
+   * extended server-side with `offerings` + `embeddableWidget`. This was
+   * previously wired to `GET /api/v1/portal/headless/config`, an unrelated
+   * T6 Headless-tier endpoint that requires `X-Storefront-Key`/
+   * `X-Tenant-Id` auth — headers the embed key flow never sends. Every
+   * embed-tier fetch against that URL failed 400 "Missing tenant
+   * identification" by construction; this endpoint is scoped to the same
+   * `EmbedKeyAuthFilter` gate as the rest of the embed plane, so the
+   * `Authorization: Bearer <embed_key>` header `buildHeaders()` already
+   * sends is sufficient.
+   *
+   * The backend response is still a flat record (`tenantSlug,
+   * primaryColor, secondaryColor, logoUrl, fontFamily, offerings,
+   * embeddableWidget`) — kept flat so `getTenantBrandKit()`'s existing
+   * consumers (the ThemeReader cascade) are unaffected. This method nests
+   * the branding fields into the shape `HeadlessConfigResponse` expects.
    *
    * Pattern #18 fail-soft — returns `null` on transport failure, 404, or
    * malformed JSON. Widgets fall through to their empty / error state and
@@ -618,7 +631,7 @@ var _BridgeClient = class _BridgeClient {
     }
     const target = slug || this.tenantSlug;
     if (!target) return null;
-    const url = `${this.baseUrl}/api/v1/portal/headless/config?tenantSlug=${encodeURIComponent(target)}`;
+    const url = `${this.baseUrl}/api/v1/portal/embed/tenant-config/${encodeURIComponent(target)}`;
     let resp;
     try {
       resp = await this.send(url, {
@@ -631,7 +644,18 @@ var _BridgeClient = class _BridgeClient {
     if (!resp.ok) return null;
     try {
       const body = await resp.json();
-      return body && typeof body === "object" ? body : null;
+      if (!body || typeof body !== "object") return null;
+      return {
+        tenantSlug: body.tenantSlug,
+        branding: {
+          primaryColor: body.primaryColor ?? null,
+          secondaryColor: body.secondaryColor ?? null,
+          logoUrl: body.logoUrl ?? null,
+          fontFamily: body.fontFamily ?? null
+        },
+        offerings: Array.isArray(body.offerings) ? body.offerings : [],
+        embeddableWidget: body.embeddableWidget ?? null
+      };
     } catch {
       return null;
     }
@@ -2136,9 +2160,10 @@ var AforoSession = {
     };
     sessions.set(k, entry);
     if (config.bridgeToken) {
-      entry.pendingExchange = refreshSession(entry).catch((err) => {
-        throw err;
+      const exchangePromise = refreshSession(entry);
+      exchangePromise.catch(() => {
       });
+      entry.pendingExchange = exchangePromise;
     } else if (config.magicLinkMode) {
       const tokenInUrl = readMagicTokenFromUrl();
       if (tokenInUrl) {
@@ -2148,6 +2173,8 @@ var AforoSession = {
           pending = runMagicLinkVerify(entry, tokenInUrl).finally(() => {
             pendingMagicLinkVerifies.delete(dedupKey);
           });
+          pending.catch(() => {
+          });
           pendingMagicLinkVerifies.set(dedupKey, pending);
         }
         entry.pendingExchange = pending;

package/dist/vue/index.d.cts

@@ -1,5 +1,5 @@
 import * as vue from 'vue';
-import { T as ThemeTokenOverrides } from '../types-Dm6cp_Cc.cjs';
+import { T as ThemeTokenOverrides } from '../types-BbQw2_32.cjs';
 
 declare const AforoPricingCard: vue.DefineComponent<{
     tenantSlug: string;

package/dist/vue/index.d.ts

@@ -1,5 +1,5 @@
 import * as vue from 'vue';
-import { T as ThemeTokenOverrides } from '../types-Dm6cp_Cc.js';
+import { T as ThemeTokenOverrides } from '../types-BbQw2_32.js';
 
 declare const AforoPricingCard: vue.DefineComponent<{
     tenantSlug: string;

package/dist/vue/index.mjs

@@ -6,7 +6,7 @@ import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
 // src/vue/index.ts
 
 // src/core/version.ts
-var VERSION = "1.0.2";
+var VERSION = "1.0.4";
 
 // src/core/AforoEmbed.ts
 var mountedElements = /* @__PURE__ */ new WeakMap();
@@ -390,7 +390,7 @@ var BridgeClientError = class extends Error {
     this.retryable = retryable;
   }
 };
-var DEFAULT_BASE = "https://embed.aforo.ai";
+var DEFAULT_BASE = "https://storefront.aforo.ai";
 var DEFAULT_TIMEOUT_MS = 15e3;
 function uuidv4() {
   if (typeof crypto !== "undefined" && typeof crypto.randomUUID === "function") {
@@ -578,10 +578,23 @@ var _BridgeClient = class _BridgeClient {
   /**
    * Headless config — the PricingCard widget's primary read path.
    *
-   * Mirrors `GET /api/v1/portal/headless/config` which returns
-   * `{branding, offerings, ratePlans, themeTokens, customPages, ...}`
-   * denormalized JSON. The endpoint is 60s Caffeine-cached server-side; we
-   * cache once per widget instance on the client.
+   * Hits `GET /api/v1/portal/embed/tenant-config/{slug}` — the SAME
+   * embed-key-authenticated endpoint {@link getTenantBrandKit} uses, now
+   * extended server-side with `offerings` + `embeddableWidget`. This was
+   * previously wired to `GET /api/v1/portal/headless/config`, an unrelated
+   * T6 Headless-tier endpoint that requires `X-Storefront-Key`/
+   * `X-Tenant-Id` auth — headers the embed key flow never sends. Every
+   * embed-tier fetch against that URL failed 400 "Missing tenant
+   * identification" by construction; this endpoint is scoped to the same
+   * `EmbedKeyAuthFilter` gate as the rest of the embed plane, so the
+   * `Authorization: Bearer <embed_key>` header `buildHeaders()` already
+   * sends is sufficient.
+   *
+   * The backend response is still a flat record (`tenantSlug,
+   * primaryColor, secondaryColor, logoUrl, fontFamily, offerings,
+   * embeddableWidget`) — kept flat so `getTenantBrandKit()`'s existing
+   * consumers (the ThemeReader cascade) are unaffected. This method nests
+   * the branding fields into the shape `HeadlessConfigResponse` expects.
    *
    * Pattern #18 fail-soft — returns `null` on transport failure, 404, or
    * malformed JSON. Widgets fall through to their empty / error state and
@@ -596,7 +609,7 @@ var _BridgeClient = class _BridgeClient {
     }
     const target = slug || this.tenantSlug;
     if (!target) return null;
-    const url = `${this.baseUrl}/api/v1/portal/headless/config?tenantSlug=${encodeURIComponent(target)}`;
+    const url = `${this.baseUrl}/api/v1/portal/embed/tenant-config/${encodeURIComponent(target)}`;
     let resp;
     try {
       resp = await this.send(url, {
@@ -609,7 +622,18 @@ var _BridgeClient = class _BridgeClient {
     if (!resp.ok) return null;
     try {
       const body = await resp.json();
-      return body && typeof body === "object" ? body : null;
+      if (!body || typeof body !== "object") return null;
+      return {
+        tenantSlug: body.tenantSlug,
+        branding: {
+          primaryColor: body.primaryColor ?? null,
+          secondaryColor: body.secondaryColor ?? null,
+          logoUrl: body.logoUrl ?? null,
+          fontFamily: body.fontFamily ?? null
+        },
+        offerings: Array.isArray(body.offerings) ? body.offerings : [],
+        embeddableWidget: body.embeddableWidget ?? null
+      };
     } catch {
       return null;
     }
@@ -2114,9 +2138,10 @@ var AforoSession = {
     };
     sessions.set(k, entry);
     if (config.bridgeToken) {
-      entry.pendingExchange = refreshSession(entry).catch((err) => {
-        throw err;
+      const exchangePromise = refreshSession(entry);
+      exchangePromise.catch(() => {
       });
+      entry.pendingExchange = exchangePromise;
     } else if (config.magicLinkMode) {
       const tokenInUrl = readMagicTokenFromUrl();
       if (tokenInUrl) {
@@ -2126,6 +2151,8 @@ var AforoSession = {
           pending = runMagicLinkVerify(entry, tokenInUrl).finally(() => {
             pendingMagicLinkVerifies.delete(dedupKey);
           });
+          pending.catch(() => {
+          });
           pendingMagicLinkVerifies.set(dedupKey, pending);
         }
         entry.pendingExchange = pending;