@cimplify/sdk 0.66.0 → 0.68.0

package/dist/{chunk-3G4QCENX.mjs → chunk-FVGVJ4TC.mjs}

@@ -2645,10 +2645,10 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
     REFRESH_TOKEN: "refresh_token", LOGOUT: "logout",
     PROCESS_CHECKOUT: "process_checkout", ABORT_CHECKOUT: "abort_checkout",
     READY: "ready", HEIGHT_CHANGE: "height_change",
-    AUTHENTICATED: "authenticated", REQUIRES_OTP: "requires_otp", ERROR: "error",
+    AUTH_REQUESTED: "auth_requested", ERROR: "error",
     ADDRESS_CHANGED: "address_changed", ADDRESS_SELECTED: "address_selected",
     PAYMENT_METHOD_SELECTED: "payment_method_selected",
-    TOKEN_REFRESHED: "token_refreshed", LOGOUT_COMPLETE: "logout_complete",
+    LOGOUT_COMPLETE: "logout_complete",
     CONTACT_PROVIDED: "contact_provided",
     CHECKOUT_STATUS: "checkout_status", CHECKOUT_COMPLETE: "checkout_complete",
     ORDER_TYPE_CHANGED: "order_type_changed", REQUEST_SUBMIT: "request_submit"
@@ -2657,6 +2657,7 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
   var AUTO = qs.get("auto") === "true";
   var DEMO_OTP = qs.get("otp") || "123456";
   var ORIGIN = qs.get("origin") || "*";
+  var NONCE = qs.get("nonce");
   var state = {
     businessId: DEFAULT_BUSINESS,
     token: null,
@@ -2671,7 +2672,10 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
   var content = document.getElementById("content");
   var title = document.getElementById("title");
 
-  function send(msg) { parent.postMessage(msg, ORIGIN); }
+  function send(msg) {
+    if (NONCE) msg.nonce = NONCE;
+    parent.postMessage(msg, ORIGIN);
+  }
   function reportHeight() { send({ type: MSG.HEIGHT_CHANGE, height: document.documentElement.scrollHeight }); }
   function ready() { send({ type: MSG.READY, height: document.documentElement.scrollHeight }); }
 
@@ -2691,54 +2695,13 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
   function renderAuth() {
     title.textContent = "Sign in";
     content.innerHTML =
-      '<label>Email or phone</label>' +
-      '<input id="contact" placeholder="you@example.com or +233..." value="' + (qs.get("contact") || "") + '">' +
-      '<button id="send-otp">Send code</button>' +
-      '<div id="otp-box" style="display:none">' +
-      '  <label>Verification code (mock: ' + DEMO_OTP + ')</label>' +
-      '  <input id="otp" maxlength="6" value="' + DEMO_OTP + '">' +
-      '  <button id="verify-otp">Verify</button>' +
-      '</div>' +
+      '<button id="start-auth">Continue with Cimplify</button>' +
       '<div class="err" id="err"></div>';
-    document.getElementById("send-otp").onclick = function () {
-      var contact = document.getElementById("contact").value.trim();
-      if (!contact) { document.getElementById("err").textContent = "Enter contact"; return; }
-      state.contact = contact;
-      var contactType = contact.indexOf("@") >= 0 ? "email" : "phone";
-      send({ type: MSG.CONTACT_PROVIDED, contact: contact, contactType: contactType });
-      send({ type: MSG.REQUIRES_OTP, contactMasked: contact.slice(0, 3) + "***" });
-      document.getElementById("otp-box").style.display = "block";
-      reportHeight();
-    };
-    document.getElementById("verify-otp").onclick = function () {
-      var code = document.getElementById("otp").value.trim();
-      if (code !== DEMO_OTP) { document.getElementById("err").textContent = "Invalid code"; return; }
-      fetch("/api/v1/auth/verify-otp", {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ contact: state.contact, code: code })
-      }).then(function (r) { return r.json(); }).then(function (body) {
-        var session = body.session || {};
-        state.token = session.token || body.token;
-        state.customer = {
-          name: session.customer_name || "Customer",
-          email: session.customer_email || (state.contact && state.contact.indexOf("@") >= 0 ? state.contact : null),
-          phone: session.customer_phone || (state.contact && state.contact.indexOf("@") < 0 ? state.contact : null)
-        };
-        send({
-          type: MSG.AUTHENTICATED,
-          accountId: "acct_mock_" + (session.id || "x"),
-          customerId: session.customer_id || "cust_mock",
-          token: state.token,
-          customer: state.customer
-        });
-      }).catch(function (e) {
-        send({ type: MSG.ERROR, code: "AUTH_FAILED", message: String(e) });
-      });
+    document.getElementById("start-auth").onclick = function () {
+      send({ type: MSG.AUTH_REQUESTED });
     };
     if (AUTO) {
-      setTimeout(function () { document.getElementById("send-otp").click(); }, 50);
-      setTimeout(function () { document.getElementById("verify-otp").click(); }, 150);
+      setTimeout(function () { document.getElementById("start-auth").click(); }, 50);
     }
   }
 
@@ -2915,7 +2878,6 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
         break;
       case MSG.SET_TOKEN:
         state.token = msg.token;
-        send({ type: MSG.TOKEN_REFRESHED, token: state.token });
         break;
       case MSG.SET_CART:
         state.cart = msg.cart;
@@ -2927,7 +2889,7 @@ var ELEMENT_HANDLER_JS = `/* eslint-disable */
         send({ type: MSG.HEIGHT_CHANGE, height: document.documentElement.scrollHeight });
         break;
       case MSG.REFRESH_TOKEN:
-        send({ type: MSG.TOKEN_REFRESHED, token: state.token || "tok_mock_refreshed" });
+        reportHeight();
         break;
       case MSG.LOGOUT:
         state.token = null;

package/dist/chunk-IQLJJW2H.js

@@ -0,0 +1,168 @@
+'use strict';
+
+// src/gallery.ts
+function dedupe(urls) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const url of urls) {
+    if (url && !seen.has(url)) {
+      seen.add(url);
+      out.push(url);
+    }
+  }
+  return out;
+}
+function resolveGallery(product, selectedVariantId) {
+  const variant = selectedVariantId ? product.variants?.find((v) => v.id === selectedVariantId) : void 0;
+  if (variant?.images?.length) return dedupe(variant.images);
+  if (product.images?.length) return dedupe(product.images);
+  const firstWithImages = product.variants?.find((v) => v.images?.length);
+  if (firstWithImages?.images?.length) return dedupe(firstWithImages.images);
+  return product.image_url ? [product.image_url] : [];
+}
+function allGalleryImages(product) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  const push = (url, variantId) => {
+    if (url && !seen.has(url)) {
+      seen.add(url);
+      out.push({ url, variantId });
+    }
+  };
+  push(product.image_url, null);
+  for (const url of product.images ?? []) push(url, null);
+  for (const variant of product.variants ?? []) {
+    for (const url of variant.images ?? []) push(url, variant.id);
+  }
+  return out;
+}
+
+// src/utils/variant.ts
+function stripProductPrefix(variantName, productName) {
+  if (!variantName || !productName) return variantName || productName;
+  const lower = variantName.toLowerCase().trim();
+  if (lower === "default" || lower === "standard") return productName;
+  if (lower.endsWith("-default") || lower.endsWith("-standard")) return productName;
+  if (variantName.startsWith(productName)) {
+    const rest = variantName.slice(productName.length);
+    const match = rest.match(/^\s*[-–—]\s*(.*)/);
+    if (match && match[1].length > 0) return match[1];
+  }
+  const lowerProduct = productName.toLowerCase().trim();
+  if (lower.startsWith(lowerProduct)) {
+    const rest = variantName.slice(productName.length);
+    const match = rest.match(/^\s*[-–—]\s*(.*)/);
+    if (match && match[1].length > 0) return match[1];
+  }
+  const lastDash = variantName.lastIndexOf("-");
+  if (lastDash > 0 && lastDash < variantName.length - 1) {
+    const prefix = variantName.slice(0, lastDash).trim();
+    const suffix = variantName.slice(lastDash + 1).trim();
+    if (suffix.length > 0 && prefix.length > suffix.length * 2) {
+      return suffix;
+    }
+  }
+  return variantName;
+}
+function getVariantDisplayName(variant, productName) {
+  if (variant.display_attributes?.length) {
+    return variant.display_attributes.map((a) => a.value_name).join(" / ");
+  }
+  if (variant.name) {
+    return productName ? stripProductPrefix(variant.name, productName) : variant.name;
+  }
+  return productName || (variant.is_default ? "Default" : "Option");
+}
+
+// src/types/product.ts
+var PRODUCT_TYPE = {
+  Product: "product",
+  Service: "service",
+  Digital: "digital",
+  Bundle: "bundle",
+  Composite: "composite"
+};
+var RENDER_HINT = {
+  Food: "food",
+  Physical: "physical",
+  General: "general"
+};
+var DURATION_UNIT = {
+  Minutes: "minutes",
+  Hours: "hours",
+  Days: "days",
+  Nights: "nights",
+  Weeks: "weeks",
+  Months: "months",
+  Years: "years"
+};
+var INPUT_FIELD_TYPE = {
+  Text: "text",
+  Textarea: "textarea",
+  Number: "number",
+  Select: "select",
+  Radio: "radio",
+  Checkbox: "checkbox",
+  Color: "color",
+  Date: "date",
+  File: "file",
+  Image: "image",
+  Url: "url",
+  Address: "address",
+  Phone: "phone",
+  Email: "email",
+  DateTime: "date_time",
+  Time: "time",
+  Signature: "signature",
+  MultiSelect: "multi_select",
+  DateRange: "date_range",
+  Location: "location"
+};
+
+// src/assets/url.ts
+var DEFAULT_CDN_BASE_URL = "https://storefrontassetscdn.cimplify.io";
+var CIMPLIFY_CDN_HOSTS = [
+  "storefrontassetscdn.cimplify.io",
+  "cdn.cimplify.io",
+  "static-tmp.cimplify.io"
+];
+var ABSOLUTE_URL_RE = /^https?:\/\//i;
+var MOCK_PASSTHROUGH_RE = /^\/(img|elements|_mock)\//;
+function assetUrl(path, opts = {}) {
+  if (!path) return path;
+  if (ABSOLUTE_URL_RE.test(path)) return appendTransform(path, opts);
+  if (MOCK_PASSTHROUGH_RE.test(path)) return appendTransform(path, opts);
+  const base = (opts.base ?? DEFAULT_CDN_BASE_URL).replace(/\/+$/, "");
+  const normalized = path.replace(/^\/+/, "");
+  return appendTransform(`${base}/${normalized}`, opts);
+}
+function isCimplifyAsset(src, base) {
+  if (!src) return false;
+  if (!ABSOLUTE_URL_RE.test(src)) return true;
+  if (MOCK_PASSTHROUGH_RE.test(src)) return true;
+  const resolvedBase = (base ?? DEFAULT_CDN_BASE_URL).replace(/\/+$/, "");
+  if (resolvedBase && src.startsWith(resolvedBase)) return true;
+  return CIMPLIFY_CDN_HOSTS.some((host) => src.startsWith(`https://${host}/`));
+}
+function appendTransform(url, t) {
+  const params = new URLSearchParams();
+  if (t.w != null) params.set("w", String(t.w));
+  if (t.h != null) params.set("h", String(t.h));
+  if (t.quality != null) params.set("quality", String(t.quality));
+  if (t.format != null) params.set("format", t.format);
+  const query = params.toString();
+  if (!query) return url;
+  return `${url}${url.includes("?") ? "&" : "?"}${query}`;
+}
+
+exports.CIMPLIFY_CDN_HOSTS = CIMPLIFY_CDN_HOSTS;
+exports.DEFAULT_CDN_BASE_URL = DEFAULT_CDN_BASE_URL;
+exports.DURATION_UNIT = DURATION_UNIT;
+exports.INPUT_FIELD_TYPE = INPUT_FIELD_TYPE;
+exports.PRODUCT_TYPE = PRODUCT_TYPE;
+exports.RENDER_HINT = RENDER_HINT;
+exports.allGalleryImages = allGalleryImages;
+exports.assetUrl = assetUrl;
+exports.getVariantDisplayName = getVariantDisplayName;
+exports.isCimplifyAsset = isCimplifyAsset;
+exports.resolveGallery = resolveGallery;

package/dist/{chunk-227XTAEB.mjs → chunk-KNPE4WCQ.mjs}

@@ -1,4 +1,4 @@
-import { safe, generateIdempotencyKey, CatalogueQueries, CartOperations, CheckoutService, OrderQueries, LinkService, AuthService, BusinessService, InventoryService, SchedulingService, LiteService, FxService, createElements } from './chunk-R6363CC7.mjs';
+import { safe, generateIdempotencyKey, CatalogueQueries, CartOperations, CheckoutService, OrderQueries, LinkService, AuthService, BusinessService, InventoryService, SchedulingService, LiteService, FxService, createElements } from './chunk-SOV4H6PQ.mjs';
 import { CimplifyError, ErrorCode, IdempotencyMismatchError, enrichError } from './chunk-AMZXALF6.mjs';
 
 // src/activity.ts
@@ -274,7 +274,6 @@ function createClientEvents() {
 var SESSION_TOKEN_STORAGE_KEY = "cimplify_session_token";
 var ORDER_TOKEN_PREFIX = "cimplify_ot_";
 var SESSION_TOKEN_HEADER = "x-session-token";
-var REFRESH_ENDPOINT = "/v1/link/elements/refresh";
 var ORDER_TOKEN_TTL_MS = 24 * 60 * 60 * 1e3;
 var DEFAULT_TIMEOUT_MS = 5e3;
 var DEFAULT_MAX_RETRIES = 3;
@@ -382,7 +381,6 @@ var CimplifyClient = class {
     this.context = {};
     this.businessId = null;
     this.businessIdResolvePromise = null;
-    this.refreshInflight = null;
     this.inflightRequests = /* @__PURE__ */ new Map();
     /**
      * App-level event channel. Subscribe to surface mutation rollbacks, outbox
@@ -529,52 +527,8 @@ var CimplifyClient = class {
       this.businessIdResolvePromise = null;
     }
   }
-  // Browser-only (the server is handed a token directly). Concurrent 401s share
-  // one in-flight refresh so the rotating cookie rotates once, not N times.
-  async refreshAccessToken() {
-    if (typeof window === "undefined") return false;
-    if (this.refreshInflight) return this.refreshInflight;
-    this.refreshInflight = (async () => {
-      try {
-        const headers = { "Content-Type": "application/json" };
-        const trimmedPublicKey = this.publicKey.trim();
-        if (trimmedPublicKey) headers["X-API-Key"] = trimmedPublicKey;
-        const res = await this.fetchImpl(`${this.linkApiUrl}${REFRESH_ENDPOINT}`, {
-          method: "POST",
-          credentials: this.credentials,
-          headers,
-          body: "{}"
-        });
-        if (!res.ok) return false;
-        const json = await res.json();
-        const token = json?.data?.token ?? json?.token;
-        if (typeof token === "string" && token.length > 0) {
-          this.setAccessToken(token);
-          return true;
-        }
-        return false;
-      } catch {
-        return false;
-      } finally {
-        this.refreshInflight = null;
-      }
-    })();
-    return this.refreshInflight;
-  }
-  // On 401, refresh from the session cookie once and retry — re-establishes a
-  // session after a reload without persisting any token.
   async authedFetch(url, options) {
-    const response = await this.resilientFetch(url, options);
-    if (response.status !== 401 || typeof window === "undefined" || url.includes(REFRESH_ENDPOINT)) {
-      return response;
-    }
-    const refreshed = await this.refreshAccessToken();
-    if (!refreshed) return response;
-    const retryHeaders = {
-      ...options.headers,
-      Authorization: `Bearer ${this.accessToken}`
-    };
-    return this.resilientFetch(url, { ...options, headers: retryHeaders });
+    return this.resilientFetch(url, options);
   }
   loadSessionToken() {
     if (typeof window !== "undefined" && window.localStorage) {

package/dist/{chunk-H6DBPHMZ.js → chunk-NGQCWFKF.js}

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkHCZTBWU4_js = require('./chunk-HCZTBWU4.js');
-var chunkJ3MGY6AU_js = require('./chunk-J3MGY6AU.js');
+var chunkSXGFJEME_js = require('./chunk-SXGFJEME.js');
+var chunk5HAUJBOK_js = require('./chunk-5HAUJBOK.js');
 var zod = require('zod');
 
 var cimplifyRegistry = zod.z.registry();
@@ -595,7 +595,7 @@ async function toForwardedRequest(input, init) {
   };
 }
 function createTestClient(options = {}) {
-  const mock = chunkHCZTBWU4_js.createMockApp(options);
+  const mock = chunkSXGFJEME_js.createMockApp(options);
   let sessionToken;
   const fetchImpl = async (input, init) => {
     const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
@@ -614,7 +614,7 @@ function createTestClient(options = {}) {
     if (echoed) sessionToken = echoed;
     return res;
   };
-  const client = chunkJ3MGY6AU_js.createCimplifyClient({
+  const client = chunk5HAUJBOK_js.createCimplifyClient({
     baseUrl: TEST_BASE_URL,
     // Link mock lives at /v1/link on the same Hono app, so point the SDK's
     // separate Link transport at the same TEST_BASE_URL.