@decocms/apps-wake 8.1.0-next.0 → 8.1.0-next.2

package/src/utils/cookies.ts

@@ -1,82 +0,0 @@
-/**
- * Node.js-compatible cookie helpers.
- * Replaces Deno's std/http/cookie.ts.
- */
-
-export function getCookies(headers: Headers): Record<string, string> {
-  const cookieHeader = headers.get("cookie") || "";
-  const cookies: Record<string, string> = {};
-  for (const pair of cookieHeader.split(";")) {
-    const [key, ...rest] = pair.trim().split("=");
-    if (key) {
-      cookies[key.trim()] = decodeURIComponent(rest.join("=").trim());
-    }
-  }
-  return cookies;
-}
-
-export function setCookie(
-  headers: Headers,
-  options: {
-    name: string;
-    value: string;
-    path?: string;
-    expires?: Date;
-    maxAge?: number;
-    httpOnly?: boolean;
-    secure?: boolean;
-    sameSite?: "Strict" | "Lax" | "None";
-  },
-) {
-  const parts = [`${options.name}=${encodeURIComponent(options.value)}`];
-  if (options.path) parts.push(`Path=${options.path}`);
-  if (options.expires) parts.push(`Expires=${options.expires.toUTCString()}`);
-  if (options.maxAge !== undefined) parts.push(`Max-Age=${options.maxAge}`);
-  if (options.httpOnly) parts.push("HttpOnly");
-  if (options.secure) parts.push("Secure");
-  if (options.sameSite) parts.push(`SameSite=${options.sameSite}`);
-
-  headers.append("Set-Cookie", parts.join("; "));
-}
-
-export interface Cookie {
-  name: string;
-  value: string;
-  path?: string;
-  expires?: Date;
-  maxAge?: number;
-  httpOnly?: boolean;
-  secure?: boolean;
-  sameSite?: "Strict" | "Lax" | "None";
-}
-
-export function getSetCookies(headers: Headers): Cookie[] {
-  const cookies: Cookie[] = [];
-  const setCookieHeaders = headers.getSetCookie?.() ?? [];
-  for (const header of setCookieHeaders) {
-    const parts = header.split(";").map((p) => p.trim());
-    const [nameValue, ...attrs] = parts;
-    const [name, ...rest] = nameValue.split("=");
-    const value = rest.join("=");
-    const cookie: Cookie = { name: name.trim(), value };
-    for (const attr of attrs) {
-      const [k, v] = attr.split("=");
-      const key = k.trim().toLowerCase();
-      if (key === "path") cookie.path = v?.trim();
-      if (key === "httponly") cookie.httpOnly = true;
-      if (key === "secure") cookie.secure = true;
-      if (key === "samesite") cookie.sameSite = v?.trim() as any;
-      if (key === "max-age") cookie.maxAge = Number(v?.trim());
-    }
-    cookies.push(cookie);
-  }
-  return cookies;
-}
-
-export function debounce<T extends (...args: any[]) => void>(fn: T, delay: number): T {
-  let timer: ReturnType<typeof setTimeout>;
-  return ((...args: any[]) => {
-    clearTimeout(timer);
-    timer = setTimeout(() => fn(...args), delay);
-  }) as T;
-}

package/src/utils/getVariations.ts

@@ -1,47 +0,0 @@
-import { getWakeClient } from "../client";
-import { GetProducts } from "./graphql/queries";
-import type {
-  GetProductsQuery,
-  GetProductsQueryVariables,
-  ProductFragment,
-} from "./graphql/storefront.graphql.gen";
-import { toProduct } from "./transform";
-
-export const MAXIMUM_REQUEST_QUANTITY = 50;
-
-/**
- * Fetch every variant for the given product ids (paginating the storefront
- * `products` query) and map them to canonical commerce `Product`s.
- */
-export const getVariations = async (
-  productIds: number[],
-  base: URL,
-  extraHeaders?: Record<string, string>,
-) => {
-  const storefront = getWakeClient();
-  const variations: ProductFragment[] = [];
-
-  const fetchData = async (cursor?: string) => {
-    const variables: GetProductsQueryVariables = {
-      first: MAXIMUM_REQUEST_QUANTITY,
-      filters: { productId: productIds },
-      sortDirection: "ASC",
-      sortKey: "RANDOM",
-      after: cursor,
-    };
-
-    const data = await storefront.query<GetProductsQuery>(GetProducts, variables, extraHeaders);
-
-    if (data.products?.nodes?.length) {
-      variations.push(...data.products.nodes.filter((v): v is ProductFragment => Boolean(v)));
-    }
-
-    if (data.products?.pageInfo.hasNextPage && data.products.pageInfo.endCursor) {
-      await fetchData(data.products.pageInfo.endCursor);
-    }
-  };
-
-  await fetchData();
-
-  return variations.map((i) => toProduct(i, { base }));
-};

package/src/utils/graphql.ts

@@ -1,72 +0,0 @@
-import { type FetchFn, withFetchTimeout } from "@decocms/blocks/sdk/fetchTimeout";
-import type { InstrumentedFetchInit } from "@decocms/blocks/sdk/instrumentedFetch";
-import { buildQuery, type QueryDefinition } from "./gql";
-import { extractGraphqlOperationName } from "./graphqlOperationName";
-
-export { buildQuery, gql, type QueryDefinition } from "./gql";
-
-export interface GraphQLClient {
-  /**
-   * Run a GraphQL operation. `extraHeaders` is merged over the client's
-   * base headers for the single call — Wake loaders use it to forward the
-   * client IP (`X-Forwarded-For`) via `parseHeaders(...)`.
-   */
-  query<T>(
-    query: string | QueryDefinition,
-    variables?: Record<string, unknown>,
-    extraHeaders?: Record<string, string>,
-  ): Promise<T>;
-}
-
-export function createGraphqlClient(
-  endpoint: string,
-  headers: Record<string, string>,
-  fetchFn?: FetchFn,
-): GraphQLClient {
-  const _fetch = fetchFn ?? withFetchTimeout();
-  return {
-    async query<T>(
-      queryOrDef: string | QueryDefinition,
-      variables?: Record<string, unknown>,
-      extraHeaders?: Record<string, string>,
-    ): Promise<T> {
-      const query = typeof queryOrDef === "string" ? queryOrDef : buildQuery(queryOrDef);
-
-      // Stamp the GraphQL operation as init.operation so the framework's
-      // span name becomes `wake.<OperationName>` instead of the generic
-      // `wake.storefront.graphql` from the URL router. The extra field is
-      // silently dropped by plain `fetch` and read by any `InstrumentedFetch`
-      // configured via `setWakeFetch`.
-      const operation = extractGraphqlOperationName(query);
-      const init: InstrumentedFetchInit = {
-        method: "POST",
-        headers: {
-          // Per-call `extraHeaders` (e.g. forwarded client IP) come first so
-          // they can never override the app's auth token or Content-Type.
-          ...extraHeaders,
-          "Content-Type": "application/json",
-          ...headers,
-        },
-        body: JSON.stringify({ query, variables }),
-        ...(operation ? { operation } : {}),
-      };
-      const response = await _fetch(endpoint, init);
-
-      if (!response.ok) {
-        throw new Error(`Wake GraphQL error: ${response.status} ${response.statusText}`);
-      }
-
-      const json = (await response.json()) as { data?: T; errors?: Array<{ message: string }> };
-
-      if (json.errors?.length) {
-        throw new Error(`Wake GraphQL errors: ${json.errors.map((e) => e.message).join(", ")}`);
-      }
-
-      if (json.data === undefined) {
-        throw new Error("Wake GraphQL response missing data");
-      }
-
-      return json.data;
-    },
-  };
-}

package/src/utils/httpError.ts

@@ -1,15 +0,0 @@
-/**
- * Minimal HTTP error carrying a status code.
- *
- * The Deno Wake app threw `HttpError` from `deco/utils/http.ts`; in this
- * architecture actions just throw `Error`, so this local class preserves the
- * `.status` field that some callers/handlers inspect.
- */
-export class HttpError extends Error {
-  status: number;
-  constructor(status: number, message?: string) {
-    super(message ?? `HTTP ${status}`);
-    this.name = "HttpError";
-    this.status = status;
-  }
-}

package/src/utils/instrumentedFetch.ts

@@ -1,46 +0,0 @@
-/**
- * Pre-wired instrumented fetch factory for Wake. Mirrors
- * `apps-shopify/utils/instrumentedFetch.ts`.
- *
- * Bundles `createInstrumentedFetch` (spans, traceparent, URL redaction), the
- * `wakeOperationRouter` URL fallback, and an `onComplete` that records the
- * canonical `http.client.request.duration` histogram with `provider: "wake"`.
- *
- * Sites do:
- * ```ts
- * import { setWakeFetch, createWakeFetch } from "@decocms/apps-wake";
- * setWakeFetch(createWakeFetch());
- * ```
- */
-
-import type { FetchFn } from "@decocms/blocks/sdk/fetchTimeout";
-import {
-  createInstrumentedFetch,
-  type InstrumentedFetch,
-} from "@decocms/blocks/sdk/instrumentedFetch";
-import { recordCommerceMetric } from "@decocms/blocks/sdk/observability";
-import { wakeOperationRouter } from "./operationRouter";
-
-export interface CreateWakeFetchOptions {
-  baseFetch?: FetchFn;
-  disableHistogram?: boolean;
-}
-
-export function createWakeFetch(options: CreateWakeFetchOptions = {}): InstrumentedFetch {
-  const { baseFetch, disableHistogram = false } = options;
-  return createInstrumentedFetch({
-    name: "wake",
-    baseFetch,
-    resolveOperation: wakeOperationRouter,
-    onComplete: disableHistogram
-      ? undefined
-      : ({ operation, status, durationMs, cached }) => {
-          recordCommerceMetric(durationMs, {
-            provider: "wake",
-            operation,
-            status_class: `${Math.floor(status / 100)}xx`,
-            cached,
-          });
-        },
-  });
-}

package/src/utils/operationRouter.ts

@@ -1,51 +0,0 @@
-/**
- * URL-derived operation name router for Wake API calls.
- *
- * Plugged into `@decocms/blocks`'s `createInstrumentedFetch` via the
- * `resolveOperation(url, method)` option. Wake's API surface here is the
- * GraphQL storefront (`/graphql`) plus a couple of checkout REST endpoints.
- * The semantic GraphQL operation name is extracted from the document itself
- * (see `./graphqlOperationName.ts`) and stamped as `init.operation`, which
- * always wins over this router; this router is the fallback.
- */
-
-type OperationResolver = string | ((match: RegExpMatchArray, method: string) => string);
-
-interface Matcher {
-  pattern: RegExp;
-  operation: OperationResolver;
-}
-
-const m = (pattern: RegExp, operation: OperationResolver): Matcher => ({ pattern, operation });
-
-const MATCHERS: ReadonlyArray<Matcher> = [
-  m(/^\/graphql/, "storefront.graphql"),
-  m(/^\/api\/Login\/Get/, "checkout.login"),
-  m(/^\/api\/carrinho/, "checkout.cart"),
-  m(/^\/api\//, "checkout.api"),
-  m(/^\/Sitemap\.xml/i, "sitemap"),
-];
-
-/**
- * Resolve an operation name for a Wake URL. Returns `undefined` if no matcher
- * fires, which causes the framework to fall back to `wake.fetch`.
- */
-export function wakeOperationRouter(url: string, method: string): string | undefined {
-  let pathname: string;
-  try {
-    pathname = new URL(url).pathname;
-  } catch {
-    const qs = url.indexOf("?");
-    const hash = url.indexOf("#");
-    const end = [qs, hash].filter((i) => i >= 0).sort((a, b) => a - b)[0];
-    pathname = end === undefined ? url : url.slice(0, end);
-  }
-
-  const upperMethod = method.toUpperCase();
-  for (const { pattern, operation } of MATCHERS) {
-    const match = pathname.match(pattern);
-    if (!match) continue;
-    return typeof operation === "function" ? operation(match, upperMethod) : operation;
-  }
-  return undefined;
-}

package/src/utils/parseHeaders.ts

@@ -1,19 +0,0 @@
-export const getClientIP = (headers: Headers) => {
-  const cfConnectingIp = headers.get("cf-connecting-ip");
-  const xForwardedFor = headers.get("x-forwarded-for");
-
-  if (cfConnectingIp) return cfConnectingIp;
-
-  return xForwardedFor;
-};
-
-/**
- * Build a headers bag that forwards the originating client IP to Wake.
- * Passed per-call into the storefront GraphQL client.
- */
-export const parseHeaders = (headers: Headers): Record<string, string> => {
-  const clientIP = getClientIP(headers);
-  const out: Record<string, string> = {};
-  if (clientIP) out["X-Forwarded-For"] = clientIP;
-  return out;
-};

package/src/utils/partner.ts

@@ -1,34 +0,0 @@
-import { getCookies, setCookie } from "./cookies";
-import { isSecureRequest } from "./requestCtx";
-
-const PARTNER_COOKIE = "partner-token";
-
-const TEN_DAYS_MS = 10 * 24 * 3600 * 1_000;
-
-export const getPartnerCookie = (headers: Headers): string | undefined => {
-  const cookies = getCookies(headers);
-
-  return cookies[PARTNER_COOKIE];
-};
-
-export const setPartnerCookie = (headers: Headers, partnerToken: string) =>
-  setCookie(headers, {
-    name: PARTNER_COOKIE,
-    value: partnerToken,
-    path: "/",
-    expires: new Date(Date.now() + TEN_DAYS_MS),
-    // Server-only token — nothing client-side reads it.
-    httpOnly: true,
-    // Secure only on HTTPS — a Secure cookie is dropped over http:// (localhost dev).
-    secure: isSecureRequest(),
-    sameSite: "Lax",
-  });
-
-export const deletePartnerCookie = (headers: Headers) =>
-  setCookie(headers, {
-    name: PARTNER_COOKIE,
-    value: "",
-    path: "/",
-    expires: new Date(0),
-    maxAge: 0,
-  });

package/src/utils/requestCtx.ts

@@ -1,41 +0,0 @@
-import { RequestContext } from "@decocms/blocks/sdk/requestContext";
-import { parseHeaders } from "./parseHeaders";
-
-/**
- * Request-scoped helpers bridging the Deno `(req, ctx)` convention to this
- * architecture's `RequestContext` singleton. Loaders/actions read the active
- * request's URL/cookies and write Set-Cookie via these.
- */
-
-export const currentRequest = (): Request | null => RequestContext.current?.request ?? null;
-
-export const currentUrl = (): URL => new URL(currentRequest()?.url ?? "https://localhost");
-
-export const currentRequestHeaders = (): Headers => currentRequest()?.headers ?? new Headers();
-
-export const currentResponseHeaders = (): Headers =>
-  RequestContext.current?.responseHeaders ?? new Headers();
-
-/** Client-IP forwarding headers for the storefront GraphQL call. */
-export const forwardedHeaders = (): Record<string, string> => {
-  const req = currentRequest();
-  return req ? parseHeaders(req.headers) : {};
-};
-
-/**
- * Whether the active request is HTTPS — drives the `Secure` cookie flag.
- * A `Secure` cookie is rejected by browsers over plain HTTP (e.g. localhost
- * dev), so cookies must only be marked Secure on real HTTPS requests. Defaults
- * to `true` when the request is unknown (prod-safety).
- */
-export const isSecureRequest = (): boolean => {
-  const req = currentRequest();
-  if (!req) return true;
-  try {
-    const proto = req.headers.get("x-forwarded-proto");
-    if (proto) return proto.split(",")[0].trim() === "https";
-    return new URL(req.url).protocol === "https:";
-  } catch {
-    return true;
-  }
-};