@decocms/apps-vtex 8.1.0-next.0 → 8.1.0-next.1

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@decocms/apps-vtex",
-  "version": "8.1.0-next.0",
+  "version": "8.1.0-next.1",
   "type": "module",
-  "description": "Deco commerce app: VTEX integration",
+  "description": "Thin VTEX API client for Deco sites",
   "repository": {
     "type": "git",
     "url": "https://github.com/decocms/blocks.git",
@@ -10,67 +10,22 @@
   },
   "files": [
     "src",
-    "tsconfig.json"
+    "!src/**/*.test.ts",
+    "!src/**/__tests__"
   ],
   "main": "./src/index.ts",
   "exports": {
-    ".": "./src/index.ts",
-    "./commerceLoaders": "./src/commerceLoaders.ts",
-    "./mod": "./src/mod.ts",
-    "./schemas": "./src/schemas.ts",
-    "./client": "./src/client.ts",
-    "./types": "./src/types.ts",
-    "./actions": "./src/actions/index.ts",
-    "./actions/*": "./src/actions/*.ts",
-    "./actions/analytics/*": "./src/actions/analytics/*.ts",
-    "./loaders": "./src/loaders/index.ts",
-    "./loaders/*": "./src/loaders/*.ts",
-    "./utils": "./src/utils/index.ts",
-    "./utils/*": "./src/utils/*.ts",
-    "./loaders/intelligentSearch/*": "./src/loaders/intelligentSearch/*.ts",
-    "./loaders/legacy/*": "./src/loaders/legacy/*.ts",
-    "./loaders/workflow/*": "./src/loaders/workflow/*.ts",
-    "./inline-loaders/productDetailsPage": "./src/loaders/intelligentSearch/productDetailsPage.ts",
-    "./inline-loaders/productListingPage": "./src/loaders/intelligentSearch/productListingPage.ts",
-    "./inline-loaders/productList": "./src/loaders/productListFull.ts",
-    "./inline-loaders/productListShelf": "./src/loaders/intelligentSearch/productList.ts",
-    "./inline-loaders/relatedProducts": "./src/loaders/legacy/relatedProductsLoader.ts",
-    "./inline-loaders/suggestions": "./src/loaders/intelligentSearch/suggestions.ts",
-    "./inline-loaders/minicart": "./src/loaders/minicart.ts",
-    "./inline-loaders/workflowProducts": "./src/loaders/workflow/products.ts",
-    "./hooks": "./src/hooks/index.ts",
-    "./hooks/*": "./src/hooks/*.ts",
-    "./middleware": "./src/middleware.ts",
-    "./registry": "./src/registry.ts"
+    ".": "./src/index.ts"
   },
   "scripts": {
     "build": "tsc",
-    "generate:schemas": "bun ../blocks-cli/scripts/generate-app-schemas.ts",
     "test": "vitest run --root ../.. packages/apps-vtex/",
-    "typecheck": "tsc --noEmit",
-    "lint:unused": "knip"
+    "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@decocms/blocks": "8.1.0-next.0",
-    "@decocms/apps-commerce": "8.1.0-next.0",
-    "@decocms/apps-website": "8.1.0-next.0",
-    "@decocms/tanstack": "8.1.0-next.0"
-  },
-  "peerDependencies": {
-    "@tanstack/react-query": ">=5.0.0",
-    "react": "^19.0.0",
-    "react-dom": "^19.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@tanstack/react-query": {
-      "optional": true
-    }
+    "@decocms/blocks": "8.1.0-next.1"
   },
   "devDependencies": {
-    "@tanstack/react-query": "^5.96.0",
-    "@types/react": "^19.0.0",
-    "@types/react-dom": "^19.0.0",
-    "knip": "^5.86.0",
     "typescript": "^5.9.0"
   },
   "publishConfig": {

package/src/index.ts

@@ -1,32 +1,14 @@
 /**
- * VTEX app entry point.
- *
- * Next major: `createVtexClient` is the thin, instrumented VTEX client
- * (see ./vtexClient.ts and /next/upstream-clients). Everything else below is
- * the v7 app surface, kept exported for v7 consumers until v7 is dropped.
- *
- * v7: re-exports client config + initializer + app contract.
- *
- * For actions/loaders/utils, use sub-path imports:
- *   import { addItemsToCart } from "@decocms/apps/vtex/actions/checkout"
- *   import { searchProducts }  from "@decocms/apps/vtex/loaders/catalog"
- *   import { slugify }         from "@decocms/apps/vtex/utils/slugify"
- *
- * Or barrel imports:
- *   import { addItemsToCart } from "@decocms/apps/vtex/actions"
- *   import { searchProducts }  from "@decocms/apps/vtex/loaders"
+ * `@decocms/apps-vtex`: a thin, instrumented VTEX client (`createVtexClient`).
+ * See ./vtexClient.ts and /next/upstream-clients.
  */
-export * from "./client";
-export { configure, type VtexState } from "./mod";
-export { type CreateVtexFetchOptions, createVtexFetch } from "./utils/instrumentedFetch";
-export { vtexOperationRouter } from "./utils/operationRouter";
 export {
-	createVtexClient,
-	type VtexCatalogSearchArgs,
-	type VtexClient,
-	type VtexClientConfig,
-	VtexError,
-	type VtexRequestOptions,
-	type VtexResponse,
-	type VtexSearchArgs,
+  createVtexClient,
+  type VtexCatalogSearchArgs,
+  type VtexClient,
+  type VtexClientConfig,
+  VtexError,
+  type VtexRequestOptions,
+  type VtexResponse,
+  type VtexSearchArgs,
 } from "./vtexClient";

package/src/utils/constants.ts

@@ -1,62 +1,8 @@
 /**
- * Tuning knobs for the VTEX fetch resilience + cache layer.
- *
- * Every timeout, limit, and threshold that governs how `resilience.ts`
- * (abort/timeout, circuit breaker, retry budget) and `fetchCache.ts` (SWR +
- * stale-if-error) behave under VTEX slowness/outages lives HERE, in one file,
- * with the reasoning for each number next to it. Auditing or tuning the
- * resilience posture means reading one file, not hunting across two.
+ * Tuning knobs for VTEX request resilience (timeouts, retries, circuit
+ * breaker), with the reasoning for each number next to it.
  */
 
-// ---------------------------------------------------------------------------
-// fetchCache.ts — SWR + stale-if-error cache for VTEX GET responses
-// ---------------------------------------------------------------------------
-
-/** Max distinct cache keys kept in memory; oldest `createdAt` evicted first. */
-export const FETCH_CACHE_MAX_ENTRIES = 500;
-
-/**
- * How long a cached response is considered FRESH, keyed by status class.
- * Past this the entry is stale — served via SWR (2xx) while a background
- * refresh runs, or treated as expired (404/5xx). See `ttlForStatus` in
- * `fetchCache.ts`.
- */
-export const FETCH_CACHE_FRESH_TTL_MS = {
-  /** 2xx — 3 min. Catalog/price data doesn't need to be second-fresh. */
-  success: 180_000,
-  /** 404 — 10s. Short on purpose: a just-published SKU shouldn't 404 long. */
-  notFound: 10_000,
-  /** 5xx — never "fresh". A server error is never treated as a good cache hit. */
-  serverError: 0,
-} as const;
-
-/**
- * Stale-if-error window: how long PAST the freshness TTL a last-good 2xx entry
- * may still be served when the origin is failing (5xx / timeout / circuit
- * open). This is the "availability first" knob — a warm key survives a full
- * VTEX outage for up to this long with zero upstream pressure; once an entry
- * is older than `freshTtl + this`, it's considered too stale to serve and the
- * error surfaces (→ the degraded / branded-error path takes over). Mirrors the
- * edge `sie` window sites configure for the product/listing cache profiles.
- */
-export const FETCH_CACHE_STALE_IF_ERROR_MS = 86_400_000; // 24h
-
-/**
- * Inflight-slot backstop timeout. Bounds how long a single hung `fetch()` can
- * hold a dedup entry alive. Without this, a VTEX subrequest that never
- * settles leaks the inflight Map slot forever and every subsequent request
- * for the same cache key joins the zombie Promise, pinning memory until
- * `exceededMemory` (observed in prod: 514 hard crashes / 24h on a PLP route).
- *
- * MUST stay ABOVE `RESILIENCE_CONFIG.totalTimeoutMs` (see below) — the
- * resilient fetch already owns real per-call abort/timeout, so this is only a
- * last-resort backstop. If it fired first it would kill a slow-but-recoverable
- * response the resilience layer was about to deliver, discard the good body
- * (it never reaches the cache), and free the dedup slot early so a concurrent
- * request launches a duplicate upstream fetch.
- */
-export const FETCH_CACHE_INFLIGHT_BACKSTOP_MS = 15_000;
-
 // ---------------------------------------------------------------------------
 // resilience.ts — abort/timeout, retry budget, circuit breaker
 // ---------------------------------------------------------------------------

package/src/utils/cookieSanitizer.ts

@@ -29,36 +29,36 @@
  * `*.vtexcommercestable.com.br` / `*.myvtex.com` / `secure.<storefront>` APIs.
  */
 export const VTEX_COOKIE_PREFIXES: readonly string[] = [
-	"VtexIdclientAutCookie",
-	"checkout.vtex.com",
-	"CheckoutOrderFormOwnership",
-	"vtex_session",
-	"vtex_segment",
-	"vtex_is_",
-	"janus_sid",
+  "VtexIdclientAutCookie",
+  "checkout.vtex.com",
+  "CheckoutOrderFormOwnership",
+  "vtex_session",
+  "vtex_segment",
+  "vtex_is_",
+  "janus_sid",
 ];
 
 export type DropReason = "non_ascii" | "not_in_allowlist" | "malformed";
 
 export interface DroppedCookie {
-	name: string;
-	reason: DropReason;
+  name: string;
+  reason: DropReason;
 }
 
 export interface CookieSanitizeResult {
-	/** Cookie header string ready to forward (may be empty). */
-	cookies: string;
-	/** Cookies that were filtered out, with the reason per cookie. */
-	dropped: DroppedCookie[];
+  /** Cookie header string ready to forward (may be empty). */
+  cookies: string;
+  /** Cookies that were filtered out, with the reason per cookie. */
+  dropped: DroppedCookie[];
 }
 
 export interface CookieSanitizeOptions {
-	/**
-	 * When true, additionally enforces an allowlist: only cookies whose name
-	 * starts with one of `VTEX_COOKIE_PREFIXES` are kept.
-	 * @default false
-	 */
-	allowlist?: boolean;
+  /**
+   * When true, additionally enforces an allowlist: only cookies whose name
+   * starts with one of `VTEX_COOKIE_PREFIXES` are kept.
+   * @default false
+   */
+  allowlist?: boolean;
 }
 
 /**
@@ -93,47 +93,47 @@ const ASCII_VALUE_RE = /^[\x20-\x7E]*$/;
  * ```
  */
 export function sanitizeOutboundCookieHeader(
-	raw: string,
-	opts: CookieSanitizeOptions = {},
+  raw: string,
+  opts: CookieSanitizeOptions = {},
 ): CookieSanitizeResult {
-	if (!raw) return { cookies: "", dropped: [] };
+  if (!raw) return { cookies: "", dropped: [] };
 
-	const kept: string[] = [];
-	const dropped: DroppedCookie[] = [];
-	const allowlist = opts.allowlist === true;
+  const kept: string[] = [];
+  const dropped: DroppedCookie[] = [];
+  const allowlist = opts.allowlist === true;
 
-	for (const segment of raw.split(";")) {
-		const pair = segment.trim();
-		if (!pair) continue;
+  for (const segment of raw.split(";")) {
+    const pair = segment.trim();
+    if (!pair) continue;
 
-		const eq = pair.indexOf("=");
-		if (eq <= 0) {
-			dropped.push({ name: pair.slice(0, 32), reason: "malformed" });
-			continue;
-		}
+    const eq = pair.indexOf("=");
+    if (eq <= 0) {
+      dropped.push({ name: pair.slice(0, 32), reason: "malformed" });
+      continue;
+    }
 
-		const name = pair.slice(0, eq);
-		const value = pair.slice(eq + 1);
+    const name = pair.slice(0, eq);
+    const value = pair.slice(eq + 1);
 
-		if (!TOKEN_RE.test(name)) {
-			dropped.push({ name, reason: "malformed" });
-			continue;
-		}
+    if (!TOKEN_RE.test(name)) {
+      dropped.push({ name, reason: "malformed" });
+      continue;
+    }
 
-		if (!ASCII_VALUE_RE.test(value)) {
-			dropped.push({ name, reason: "non_ascii" });
-			continue;
-		}
+    if (!ASCII_VALUE_RE.test(value)) {
+      dropped.push({ name, reason: "non_ascii" });
+      continue;
+    }
 
-		if (allowlist && !VTEX_COOKIE_PREFIXES.some((p) => name.startsWith(p))) {
-			dropped.push({ name, reason: "not_in_allowlist" });
-			continue;
-		}
+    if (allowlist && !VTEX_COOKIE_PREFIXES.some((p) => name.startsWith(p))) {
+      dropped.push({ name, reason: "not_in_allowlist" });
+      continue;
+    }
 
-		kept.push(`${name}=${value}`);
-	}
+    kept.push(`${name}=${value}`);
+  }
 
-	return { cookies: kept.join("; "), dropped };
+  return { cookies: kept.join("; "), dropped };
 }
 
 /**
@@ -142,7 +142,7 @@ export function sanitizeOutboundCookieHeader(
  * Equivalent to `sanitizeOutboundCookieHeader(raw, { allowlist: true }).cookies`.
  */
 export function extractVtexCookies(raw: string): string {
-	return sanitizeOutboundCookieHeader(raw, { allowlist: true }).cookies;
+  return sanitizeOutboundCookieHeader(raw, { allowlist: true }).cookies;
 }
 
 /**
@@ -158,16 +158,16 @@ const _warned = new Set<string>();
  * arbitrary `host` label so we can correlate in logs.
  */
 export function warnDroppedCookies(dropped: DroppedCookie[], host: string): void {
-	if (dropped.length === 0) return;
-	for (const d of dropped) {
-		const key = `${host}::${d.name}::${d.reason}`;
-		if (_warned.has(key)) continue;
-		_warned.add(key);
-		console.warn(`[vtex.cookie.dropped] host=${host} name=${d.name} reason=${d.reason}`);
-	}
+  if (dropped.length === 0) return;
+  for (const d of dropped) {
+    const key = `${host}::${d.name}::${d.reason}`;
+    if (_warned.has(key)) continue;
+    _warned.add(key);
+    console.warn(`[vtex.cookie.dropped] host=${host} name=${d.name} reason=${d.reason}`);
+  }
 }
 
 /** Reset the dedup set — exposed for tests. */
 export function _resetCookieWarnDedupForTests(): void {
-	_warned.clear();
+  _warned.clear();
 }

package/src/utils/operationRouter.ts

@@ -1,7 +1,7 @@
 /**
  * URL-derived operation name router for VTEX API calls.
  *
- * Plugged into `@decocms/start`'s `createInstrumentedFetch` via the
+ * Plugged into `createInstrumentedFetch` (`@decocms/blocks/fetch`) via the
  * `resolveOperation(url, method)` option. The resolved string becomes the
  * span suffix (`vtex.<operation>`) and the `fetch.operation` span +
  * histogram label, so it must be:
@@ -25,8 +25,8 @@
 type OperationResolver = string | ((match: RegExpMatchArray, method: string) => string);
 
 interface Matcher {
-	pattern: RegExp;
-	operation: OperationResolver;
+  pattern: RegExp;
+  operation: OperationResolver;
 }
 
 const m = (pattern: RegExp, operation: OperationResolver): Matcher => ({ pattern, operation });
@@ -42,66 +42,66 @@ const m = (pattern: RegExp, operation: OperationResolver): Matcher => ({ pattern
  * prefixes them with the integration name at span time.
  */
 const MATCHERS: ReadonlyArray<Matcher> = [
-	m(/^\/api\/io\/_v\/api\/intelligent-search\/([a-z_-]+)/, (mm) => `intelligent-search.${mm[1]}`),
-	m(/^\/_v\/private\/graphql\/v1/, "io.graphql"),
-	m(/^\/_v\/segment\//, "io.segment"),
+  m(/^\/api\/io\/_v\/api\/intelligent-search\/([a-z_-]+)/, (mm) => `intelligent-search.${mm[1]}`),
+  m(/^\/_v\/private\/graphql\/v1/, "io.graphql"),
+  m(/^\/_v\/segment\//, "io.segment"),
 
-	m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/items\/update/, (_mm, method) =>
-		method === "POST" ? "checkout.orderform.items.update" : "checkout.orderform.items",
-	),
-	m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/items/, (_mm, method) => {
-		if (method === "DELETE") return "checkout.orderform.items.remove";
-		if (method === "PATCH" || method === "PUT") return "checkout.orderform.items.update";
-		return "checkout.orderform.items.add";
-	}),
-	m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/coupons/, "checkout.orderform.coupons"),
-	m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/profile/, "checkout.orderform.profile"),
-	m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/shippingData/, "checkout.orderform.shipping"),
-	m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/paymentData/, "checkout.orderform.payment"),
-	m(/^\/api\/checkout\/pub\/orderForm\/[^/]+/, (_mm, method) =>
-		method === "GET" ? "checkout.orderform.get" : "checkout.orderform.update",
-	),
-	m(/^\/api\/checkout\/pub\/orderForm(?:\/?$)/, (_mm, method) =>
-		method === "POST" ? "checkout.orderform.create" : "checkout.orderform.get",
-	),
-	m(/^\/api\/checkout\/pub\/orderForms\/simulation/, "checkout.simulation"),
-	m(/^\/api\/checkout\/pub\/regions/, "checkout.regions"),
-	m(/^\/api\/checkout\/pub\/postal-code/, "checkout.postal-code"),
+  m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/items\/update/, (_mm, method) =>
+    method === "POST" ? "checkout.orderform.items.update" : "checkout.orderform.items",
+  ),
+  m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/items/, (_mm, method) => {
+    if (method === "DELETE") return "checkout.orderform.items.remove";
+    if (method === "PATCH" || method === "PUT") return "checkout.orderform.items.update";
+    return "checkout.orderform.items.add";
+  }),
+  m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/coupons/, "checkout.orderform.coupons"),
+  m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/profile/, "checkout.orderform.profile"),
+  m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/shippingData/, "checkout.orderform.shipping"),
+  m(/^\/api\/checkout\/pub\/orderForm\/[^/]+\/paymentData/, "checkout.orderform.payment"),
+  m(/^\/api\/checkout\/pub\/orderForm\/[^/]+/, (_mm, method) =>
+    method === "GET" ? "checkout.orderform.get" : "checkout.orderform.update",
+  ),
+  m(/^\/api\/checkout\/pub\/orderForm(?:\/?$)/, (_mm, method) =>
+    method === "POST" ? "checkout.orderform.create" : "checkout.orderform.get",
+  ),
+  m(/^\/api\/checkout\/pub\/orderForms\/simulation/, "checkout.simulation"),
+  m(/^\/api\/checkout\/pub\/regions/, "checkout.regions"),
+  m(/^\/api\/checkout\/pub\/postal-code/, "checkout.postal-code"),
 
-	m(/^\/api\/sessions/, (_mm, method) => (method === "POST" ? "sessions.update" : "sessions.get")),
-	m(/^\/api\/segments\//, "segments.get"),
+  m(/^\/api\/sessions/, (_mm, method) => (method === "POST" ? "sessions.update" : "sessions.get")),
+  m(/^\/api\/segments\//, "segments.get"),
 
-	m(/^\/api\/catalog_system\/pub\/portal\/pagetype\//, "catalog.pagetype"),
-	m(
-		/^\/api\/catalog_system\/pub\/products\/crossselling\/([^/]+)/,
-		(mm) => `catalog.crossselling.${mm[1]}`,
-	),
-	m(/^\/api\/catalog_system\/pub\/products\/variations\//, "catalog.products.variations"),
-	m(/^\/api\/catalog_system\/pub\/products\/search/, "catalog.products.search"),
-	m(/^\/api\/catalog_system\/pub\/facets\/search/, "catalog.facets.search"),
-	m(/^\/api\/catalog_system\/pub\/category\/tree/, "catalog.category.tree"),
-	m(/^\/api\/catalog_system\/(?:pub|pvt)\/specification/, "catalog.specification"),
-	m(/^\/api\/catalog_system\/pub\/brand/, "catalog.brand"),
-	m(/^\/api\/catalog_system\/pvt\/sku\//, "catalog.sku"),
-	m(/^\/api\/catalog_system\//, "catalog.other"),
+  m(/^\/api\/catalog_system\/pub\/portal\/pagetype\//, "catalog.pagetype"),
+  m(
+    /^\/api\/catalog_system\/pub\/products\/crossselling\/([^/]+)/,
+    (mm) => `catalog.crossselling.${mm[1]}`,
+  ),
+  m(/^\/api\/catalog_system\/pub\/products\/variations\//, "catalog.products.variations"),
+  m(/^\/api\/catalog_system\/pub\/products\/search/, "catalog.products.search"),
+  m(/^\/api\/catalog_system\/pub\/facets\/search/, "catalog.facets.search"),
+  m(/^\/api\/catalog_system\/pub\/category\/tree/, "catalog.category.tree"),
+  m(/^\/api\/catalog_system\/(?:pub|pvt)\/specification/, "catalog.specification"),
+  m(/^\/api\/catalog_system\/pub\/brand/, "catalog.brand"),
+  m(/^\/api\/catalog_system\/pvt\/sku\//, "catalog.sku"),
+  m(/^\/api\/catalog_system\//, "catalog.other"),
 
-	m(/^\/api\/wishlist\//, "wishlist"),
-	m(/^\/api\/profile-system\/profile\//, "profile"),
-	m(/^\/api\/dataentities\/([^/]+)/, (mm) => `masterdata.${mm[1]}`),
+  m(/^\/api\/wishlist\//, "wishlist"),
+  m(/^\/api\/profile-system\/profile\//, "profile"),
+  m(/^\/api\/dataentities\/([^/]+)/, (mm) => `masterdata.${mm[1]}`),
 
-	m(/^\/api\/oms\/user\/orders\/[^/]+\/cancel/, "oms.orders.cancel"),
-	m(/^\/api\/oms\/user\/orders/, "oms.orders"),
-	m(/^\/api\/oms\/pvt\/orders/, "oms.orders.pvt"),
+  m(/^\/api\/oms\/user\/orders\/[^/]+\/cancel/, "oms.orders.cancel"),
+  m(/^\/api\/oms\/user\/orders/, "oms.orders"),
+  m(/^\/api\/oms\/pvt\/orders/, "oms.orders.pvt"),
 
-	m(/^\/api\/vtexid\/pub\/logout/, "vtexid.logout"),
-	m(/^\/api\/vtexid\/pub\/authentication\/start/, "vtexid.authentication.start"),
-	m(/^\/api\/vtexid\/pub\/authentication\/[a-z]+\/validate/, "vtexid.authentication.validate"),
-	m(/^\/api\/vtexid\/pub\/authenticated\/user/, "vtexid.user"),
-	m(/^\/api\/vtexid\//, "vtexid.other"),
+  m(/^\/api\/vtexid\/pub\/logout/, "vtexid.logout"),
+  m(/^\/api\/vtexid\/pub\/authentication\/start/, "vtexid.authentication.start"),
+  m(/^\/api\/vtexid\/pub\/authentication\/[a-z]+\/validate/, "vtexid.authentication.validate"),
+  m(/^\/api\/vtexid\/pub\/authenticated\/user/, "vtexid.user"),
+  m(/^\/api\/vtexid\//, "vtexid.other"),
 
-	m(/^\/api\/events\/v1\//, "events.send"),
-	m(/^\/sitemap.*\.xml$/, "sitemap"),
-	m(/^\/api\/license-manager/, "license-manager"),
+  m(/^\/api\/events\/v1\//, "events.send"),
+  m(/^\/sitemap.*\.xml$/, "sitemap"),
+  m(/^\/api\/license-manager/, "license-manager"),
 ];
 
 /**
@@ -118,16 +118,26 @@ const MATCHERS: ReadonlyArray<Matcher> = [
  * });
  * ```
  */
-import { extractPathname } from "@decocms/blocks/sdk/urlUtils";
+/** The URL's pathname; tolerates relative or malformed URLs by stripping `?`/`#`. */
+function extractPathname(url: string): string {
+  try {
+    return new URL(url).pathname;
+  } catch {
+    const qs = url.indexOf("?");
+    const hash = url.indexOf("#");
+    const end = [qs, hash].filter((i) => i >= 0).sort((a, b) => a - b)[0];
+    return end === undefined ? url : url.slice(0, end);
+  }
+}
 
 export function vtexOperationRouter(url: string, method: string): string | undefined {
-	const pathname = extractPathname(url);
+  const pathname = extractPathname(url);
 
-	const upperMethod = method.toUpperCase();
-	for (const { pattern, operation } of MATCHERS) {
-		const match = pathname.match(pattern);
-		if (!match) continue;
-		return typeof operation === "function" ? operation(match, upperMethod) : operation;
-	}
-	return undefined;
+  const upperMethod = method.toUpperCase();
+  for (const { pattern, operation } of MATCHERS) {
+    const match = pathname.match(pattern);
+    if (!match) continue;
+    return typeof operation === "function" ? operation(match, upperMethod) : operation;
+  }
+  return undefined;
 }