@asteby/storefront 0.16.1 → 0.18.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { isStorefrontError, availabilityLocale, StorefrontError, formatAvailabilityMessage, defaultCodeForStatus } from './chunk-IPUAZ3LQ.js';
-export { PICKUP_STEPS, SHIPPING_STEPS, StorefrontError, availabilityLocale, availabilityMessages, availabilityView, cartLineProblemView, declineMessage, declineMessageKey, formatAvailabilityMessage, formatVoucherExpiry, isStorefrontError, isTestInvoice, isTestShipment, nextAction, orderProgress, orderShipments, paymentErrorView, paymentIdempotencyKey, paymentMessages, paymentOutcome, productAvailability, resolveAvailability, safeHttpsUrl, safeTrackingUrl, schemaAvailability, shipmentsStatus, sortTrackingEvents } from './chunk-IPUAZ3LQ.js';
+import { isStorefrontError, availabilityLocale, StorefrontError, formatAvailabilityMessage, defaultCodeForStatus } from './chunk-5BJRZIS3.js';
+export { DEFAULT_FIT_TAG_PREFIX, MAX_SUBJECT_YEAR, MIN_SUBJECT_YEAR, PICKUP_STEPS, PRIVATE_MASK, SHIPPING_STEPS, SUBJECT_CATALOG_PAGE_BYTES, StorefrontError, availabilityLocale, availabilityMessages, availabilityView, cartLineProblemView, coversYear, declineMessage, declineMessageKey, fitTag, fitTagsAny, formatAvailabilityMessage, formatVoucherExpiry, isMasked, isStorefrontError, isTestInvoice, isTestShipment, nextAction, orderProgress, orderShipments, paymentErrorView, paymentIdempotencyKey, paymentMessages, paymentOutcome, productAvailability, reconcileSubjectValues, resolveAvailability, resolveSubject, safeHttpsUrl, safeTrackingUrl, schemaAvailability, shipmentsStatus, sortTrackingEvents, splitSubjectTree, subjectFields, subjectLevels, subjectOptions } from './chunk-5BJRZIS3.js';
 import { isValidPoint } from './chunk-45R47HYO.js';
 
 // src/money.ts
@@ -48,9 +48,14 @@ function appendParams(search, params) {
   return search;
 }
 function productListQuery(params = {}) {
-  const { filters, handles, ...rest } = params;
+  const { filters, handles, tags_any, ...rest } = params;
   const search = appendParams(new URLSearchParams(), rest);
   if (handles && handles.length > 0) search.set("handles", handles.join(","));
+  if (tags_any && tags_any.length > 0) {
+    if (tags_any.length > 5) throw new RangeError("tags_any takes at most 5 tags");
+    if (tags_any.some((t) => t.includes(",") || t.length > 120)) throw new TypeError("tags_any: a tag has at most 120 characters and no comma");
+    search.set("tags_any", tags_any.join(","));
+  }
   if (filters) {
     for (const [key, raw] of Object.entries(filters)) {
       const name = key.startsWith("filter.") ? key : `filter.${key}`;
@@ -410,6 +415,43 @@ function createStorefrontClient(config) {
       get: (options) => get("/storefront/customer", void 0, options),
       /** Updates the profile and the saved fiscal data; `fiscal: null` deletes the latter. `422` with `field: 'fiscal.<field>'`. */
       update: (input, options) => write("PATCH", "/storefront/customer", input, options),
+      /**
+       * Active sessions of the buyer («Devices»; contract 1.9). Private, never cached. The list carries no address
+       * and no token: only what the buyer needs to recognize their own devices.
+       */
+      sessions: {
+        list: async (options) => (await get("/storefront/customer/sessions", void 0, { ...options, cache: "no-store" })).nodes,
+        /** Closes one session. Repeating it is fine. `404` for a session that is not the buyer's. Closing the current one is a sign-out. */
+        revoke: (id, options) => write("DELETE", `/storefront/customer/sessions/${enc(id)}`, void 0, options),
+        /** Closes every session except the one making the call. */
+        revokeOthers: (options) => write("DELETE", "/storefront/customer/sessions/others", void 0, options)
+      },
+      /**
+       * Confirms the buyer's identity again with their password or a sign-in code (`requestOtp` first). The
+       * confirmation lasts `valid_for_seconds` (a few minutes) and counts only for the session that made the call;
+       * exporting data and deleting the account need it (`403 reauth_required` otherwise, see `isReauthRequired`).
+       * A wrong credential is always the same `400`; too many tries is `429` (`StorefrontError.retryAfter`).
+       */
+      reauth: (input, options) => write("POST", "/storefront/customer/reauth", input, options),
+      /**
+       * The buyer's data as a JSON file (contract 1.9, `capabilities().data_export`). Needs a recent `reauth`. It is
+       * built on request and is neither stored nor emailed: call it from YOUR server, stream the bytes
+       * (`dataExportBytes`, `safeExportFilename`) with `Cache-Control: no-store`, and keep nothing. Three a day per account.
+       */
+      exportData: async (options) => {
+        const file = await write("POST", "/storefront/customer/data-export", void 0, { ...options, cache: "no-store" });
+        if (!file || typeof file.content_base64 !== "string" || typeof file.filename !== "string" || typeof file.content_type !== "string") {
+          throw new StorefrontError({ status: 502, code: "invalid_response", message: "The data export answer is not a file" });
+        }
+        return { filename: file.filename, content_type: file.content_type, content_base64: file.content_base64 };
+      },
+      /**
+       * Deletes the buyer's account (contract 1.9, `capabilities().account_delete`). Needs a recent `reauth` and the
+       * text the buyer typed in `confirm`. Personal data is erased; orders and invoices are kept by the store.
+       * `409` (see `isAccountDeleteBlocked`) while an order is on its way or a payment is pending. Idempotent: a
+       * repeat after success is also fine. Afterwards the token is dead: drop it.
+       */
+      deleteAccount: (input, options) => write("DELETE", "/storefront/customer", input, options),
       orders: (params, options) => get("/storefront/customer/orders", params, options),
       /** `null` when the order does not exist or belongs to someone else. */
       order: (id, options) => getOrNull(`/storefront/customer/orders/${enc(id)}`, void 0, options),
@@ -460,6 +502,19 @@ function createStorefrontClient(config) {
         /** Physical delete (a profile leaves nothing behind). A saved default passes to another profile. */
         delete: (id, options) => write("DELETE", `/storefront/customer/fiscal-profiles/${enc(id)}`, void 0, options)
       },
+      /**
+       * Saved items of the buyer («My items», «My garage»; contract 1.9, `capabilities().subjects`). Personal data:
+       * private, never cached, never logged. `422` with `field: 'attributes.<field>'` when the kind refuses a value
+       * (it never echoes it); `409` for an item already saved or past the limit; `429` for too many saves; `404` for
+       * an item that is not the buyer's. The server builds `label` and `fit_key`; private fields come back masked.
+       */
+      subjects: {
+        list: async (params, options) => (await get("/storefront/customer/subjects", params, { ...options, cache: "no-store" })).nodes,
+        create: (input, options) => write("POST", "/storefront/customer/subjects", input, options),
+        update: (id, patch, options) => write("PATCH", `/storefront/customer/subjects/${enc(id)}`, patch, options),
+        /** Physical delete (the item leaves nothing behind). The default of its kind passes to another item. */
+        delete: (id, options) => write("DELETE", `/storefront/customer/subjects/${enc(id)}`, void 0, options)
+      },
       addresses: {
         list: (options) => get("/storefront/customer/addresses", void 0, options),
         create: (address, options) => write("POST", "/storefront/customer/addresses", address, options),
@@ -468,6 +523,11 @@ function createStorefrontClient(config) {
       }
     },
     content: {
+      /**
+       * The kinds of buyer item the organization declares («My garage») and their catalogs (contract 1.9; public,
+       * cacheable). `[]` when it declares none or the server predates the route: the store has no such section.
+       */
+      subjectKinds: async (options) => (await getOrNull("/storefront/subject-kinds", void 0, options))?.nodes ?? [],
       theme: (options) => get("/storefront/content/theme", void 0, options),
       /** `null` when the page does not exist. */
       page: (handle, options) => getOrNull(`/storefront/content/pages/${enc(handle)}`, previewQuery(options), options),
@@ -806,6 +866,29 @@ function hreflangLinks(markets, path, defaultMarket, protocol = "https") {
   return links;
 }
 
+// src/account-settings.ts
+function isReauthRequired(error) {
+  const e = error;
+  return !!e && typeof e === "object" && e.status === 403 && e.code === "reauth_required";
+}
+function isAccountDeleteBlocked(error) {
+  const e = error;
+  return !!e && typeof e === "object" && e.status === 409 && (e.field === "orders" || e.field === "pending_payments");
+}
+function dataExportBytes(file) {
+  const raw = typeof file.content_base64 === "string" ? file.content_base64.replace(/\s+/g, "") : "";
+  if (!/^[A-Za-z0-9+/]*={0,2}$/.test(raw) || raw.length % 4 === 1) throw new TypeError("data export is not valid base64");
+  const bin = atob(raw);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function safeExportFilename(name, fallback = "account-data.json") {
+  const base = typeof name === "string" ? name.split(/[\\/]/).pop() ?? "" : "";
+  const clean = base.replace(/[^A-Za-z0-9._-]+/g, "_").replace(/^\.+/, "").slice(0, 80);
+  return clean || fallback;
+}
+
 // src/invoice-docs.ts
 function groupInvoiceDocs(docs) {
   const list = Array.isArray(docs) ? docs.filter((d) => !!d && typeof d === "object") : [];
@@ -859,6 +942,6 @@ function deliveryNotices(delivery) {
   };
 }
 
-export { CLIENT_IP_HEADER, COUNTRY_HEADERS, MISSING_WEIGHT, NOTE_MAX_LENGTH, PAYMENT_CHOICE_REFUSED_FIELD, appendParams, clampPercent, classifyPaymentError, createStorefrontClient, deliveryInput, deliveryNotices, diagnose, formatMoney, generateIdempotencyKey, groupInvoiceDocs, hreflangLinks, invoiceFileBytes, isTokenPublishable, maskToken, negotiateLocale, normalizeClientIp, normalizeNote, opsSaysNotRetryable, parseDelivery, parseMoney, parseProductFilters, preferredLanguages, productListQuery, promoProgressView, promotionMessages, repairPath, rewardLabel, safeInvoiceFilename, storefrontDomainHeader, suggestMarket, toMoney, visitorCountry };
+export { CLIENT_IP_HEADER, COUNTRY_HEADERS, MISSING_WEIGHT, NOTE_MAX_LENGTH, PAYMENT_CHOICE_REFUSED_FIELD, appendParams, clampPercent, classifyPaymentError, createStorefrontClient, dataExportBytes, deliveryInput, deliveryNotices, diagnose, formatMoney, generateIdempotencyKey, groupInvoiceDocs, hreflangLinks, invoiceFileBytes, isAccountDeleteBlocked, isReauthRequired, isTokenPublishable, maskToken, negotiateLocale, normalizeClientIp, normalizeNote, opsSaysNotRetryable, parseDelivery, parseMoney, parseProductFilters, preferredLanguages, productListQuery, promoProgressView, promotionMessages, repairPath, rewardLabel, safeExportFilename, safeInvoiceFilename, storefrontDomainHeader, suggestMarket, toMoney, visitorCountry };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map