@doswiftly/storefront-sdk 4.0.0

package/dist/core/errors.d.ts

@@ -0,0 +1,43 @@
+/**
+ * StorefrontError — unified error class for all SDK errors.
+ *
+ * Normalizes GraphQL errors, network errors, user errors, and timeouts
+ * into a single throwable type with structured data.
+ */
+import type { GraphQLErrorInfo, UserError } from './client/types';
+export interface StorefrontErrorOptions {
+    /** Error code for programmatic handling */
+    code: string;
+    /** Human-readable message */
+    message: string;
+    /** HTTP status code (0 for network errors) */
+    status?: number;
+    /** GraphQL-level errors from the response */
+    graphqlErrors?: GraphQLErrorInfo[];
+    /** User errors from mutations (field-level validation) */
+    userErrors?: UserError[];
+    /** Original error (if wrapping) */
+    cause?: unknown;
+}
+export declare class StorefrontError extends Error {
+    readonly code: string;
+    readonly status: number;
+    readonly graphqlErrors: GraphQLErrorInfo[];
+    readonly userErrors: UserError[];
+    constructor(options: StorefrontErrorOptions);
+    /** True if this error contains user errors (field-level validation) */
+    get hasUserErrors(): boolean;
+    /** True if this is a network error (no HTTP response) */
+    get isNetworkError(): boolean;
+    /** True if the request timed out */
+    get isTimeout(): boolean;
+}
+export declare const ErrorCodes: {
+    readonly NETWORK_ERROR: "NETWORK_ERROR";
+    readonly TIMEOUT: "TIMEOUT";
+    readonly HTTP_ERROR: "HTTP_ERROR";
+    readonly GRAPHQL_ERROR: "GRAPHQL_ERROR";
+    readonly USER_ERROR: "USER_ERROR";
+    readonly NO_DATA: "NO_DATA";
+};
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,WAAW,sBAAsB;IACrC,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACnC,0DAA0D;IAC1D,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB,mCAAmC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;gBAErB,OAAO,EAAE,sBAAsB;IAS3C,uEAAuE;IACvE,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED,yDAAyD;IACzD,IAAI,cAAc,IAAI,OAAO,CAE5B;IAED,oCAAoC;IACpC,IAAI,SAAS,IAAI,OAAO,CAEvB;CACF;AAMD,eAAO,MAAM,UAAU;;;;;;;CAOb,CAAC"}

package/dist/core/errors.js

@@ -0,0 +1,43 @@
+/**
+ * StorefrontError — unified error class for all SDK errors.
+ *
+ * Normalizes GraphQL errors, network errors, user errors, and timeouts
+ * into a single throwable type with structured data.
+ */
+export class StorefrontError extends Error {
+    code;
+    status;
+    graphqlErrors;
+    userErrors;
+    constructor(options) {
+        super(options.message, { cause: options.cause });
+        this.name = 'StorefrontError';
+        this.code = options.code;
+        this.status = options.status ?? 0;
+        this.graphqlErrors = options.graphqlErrors ?? [];
+        this.userErrors = options.userErrors ?? [];
+    }
+    /** True if this error contains user errors (field-level validation) */
+    get hasUserErrors() {
+        return this.userErrors.length > 0;
+    }
+    /** True if this is a network error (no HTTP response) */
+    get isNetworkError() {
+        return this.code === 'NETWORK_ERROR';
+    }
+    /** True if the request timed out */
+    get isTimeout() {
+        return this.code === 'TIMEOUT';
+    }
+}
+// ---------------------------------------------------------------------------
+// Error codes
+// ---------------------------------------------------------------------------
+export const ErrorCodes = {
+    NETWORK_ERROR: 'NETWORK_ERROR',
+    TIMEOUT: 'TIMEOUT',
+    HTTP_ERROR: 'HTTP_ERROR',
+    GRAPHQL_ERROR: 'GRAPHQL_ERROR',
+    USER_ERROR: 'USER_ERROR',
+    NO_DATA: 'NO_DATA',
+};

package/dist/core/format.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Formatting Utilities
+ *
+ * Pure functions for formatting prices, dates, numbers.
+ * 0 runtime dependencies — works in Node.js, Edge, Deno, Bun.
+ */
+export interface PriceMoney {
+    amount: string;
+    currencyCode: string;
+}
+/** Currency symbols mapping */
+export declare const CURRENCY_SYMBOLS: Record<string, string>;
+/** Currency locale mapping for proper formatting */
+export declare const CURRENCY_LOCALES: Record<string, string>;
+/**
+ * Get currency symbol
+ */
+export declare function getCurrencySymbol(code: string): string;
+/**
+ * Format price with currency symbol
+ *
+ * @example
+ * ```typescript
+ * formatPrice({ amount: "99.99", currencyCode: "USD" })
+ * // => "$99.99"
+ * ```
+ */
+export declare function formatPrice(price: PriceMoney | null | undefined): string;
+/**
+ * Format price range
+ *
+ * @example
+ * ```typescript
+ * formatPriceRange(
+ *   { amount: "10.00", currencyCode: "USD" },
+ *   { amount: "50.00", currencyCode: "USD" }
+ * )
+ * // => "$10.00 - $50.00"
+ * ```
+ */
+export declare function formatPriceRange(minPrice: PriceMoney, maxPrice: PriceMoney): string;
+/**
+ * Format amount with currency
+ *
+ * @example
+ * ```tsx
+ * const formatted = formatAmount("115.20", "EUR");
+ * // => "115,20 €"
+ * ```
+ */
+export declare function formatAmount(amount: string | number, currencyCode: string): string;
+/**
+ * Format date to locale string
+ *
+ * @example
+ * ```typescript
+ * formatDate(new Date())
+ * // => "Dec 9, 2025"
+ * ```
+ */
+export declare function formatDate(date: Date | string): string;
+/**
+ * Format date with time
+ *
+ * @example
+ * ```typescript
+ * formatDateTime(new Date())
+ * // => "Dec 9, 2025, 10:30 PM"
+ * ```
+ */
+export declare function formatDateTime(date: Date | string): string;
+/**
+ * Format number with thousands separator
+ *
+ * @example
+ * ```typescript
+ * formatNumber(1234567)
+ * // => "1,234,567"
+ * ```
+ */
+export declare function formatNumber(num: number): string;
+/**
+ * Format percentage
+ *
+ * @example
+ * ```typescript
+ * formatPercentage(0.15)
+ * // => "15%"
+ * ```
+ */
+export declare function formatPercentage(value: number): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/core/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/core/format.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD,+BAA+B;AAC/B,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAcnD,CAAC;AAEF,oDAAoD;AACpD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAcnD,CAAC;AA+CF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAaxE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,UAAU,EACpB,QAAQ,EAAE,UAAU,GACnB,MAAM,CAMR;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,YAAY,EAAE,MAAM,GACnB,MAAM,CAUR;AAMD;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAQtD;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAU1D;AAMD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtD"}

package/dist/core/format.js

@@ -0,0 +1,216 @@
+/**
+ * Formatting Utilities
+ *
+ * Pure functions for formatting prices, dates, numbers.
+ * 0 runtime dependencies — works in Node.js, Edge, Deno, Bun.
+ */
+// ============================================================================
+// CONSTANTS
+// ============================================================================
+/** Currency symbols mapping */
+export const CURRENCY_SYMBOLS = {
+    PLN: 'zł',
+    EUR: '€',
+    USD: '$',
+    GBP: '£',
+    CHF: 'CHF',
+    CZK: 'Kč',
+    SEK: 'kr',
+    NOK: 'kr',
+    DKK: 'kr',
+    JPY: '¥',
+    CNY: '¥',
+    AUD: 'A$',
+    CAD: 'C$',
+};
+/** Currency locale mapping for proper formatting */
+export const CURRENCY_LOCALES = {
+    PLN: 'pl-PL',
+    EUR: 'de-DE',
+    USD: 'en-US',
+    GBP: 'en-GB',
+    CHF: 'de-CH',
+    CZK: 'cs-CZ',
+    SEK: 'sv-SE',
+    NOK: 'nb-NO',
+    DKK: 'da-DK',
+    JPY: 'ja-JP',
+    CNY: 'zh-CN',
+    AUD: 'en-AU',
+    CAD: 'en-CA',
+};
+// ============================================================================
+// FORMATTER CACHE (avoids re-creating Intl objects on every call)
+// ============================================================================
+const numberFormatCache = new Map();
+const dateFormatCache = new Map();
+function getCurrencyFormatter(locale, currency) {
+    const key = `${locale}:${currency}`;
+    let fmt = numberFormatCache.get(key);
+    if (!fmt) {
+        fmt = new Intl.NumberFormat(locale, {
+            style: 'currency',
+            currency,
+            minimumFractionDigits: 2,
+            maximumFractionDigits: 2,
+        });
+        numberFormatCache.set(key, fmt);
+    }
+    return fmt;
+}
+function getNumberFormatter(locale) {
+    let fmt = numberFormatCache.get(locale);
+    if (!fmt) {
+        fmt = new Intl.NumberFormat(locale);
+        numberFormatCache.set(locale, fmt);
+    }
+    return fmt;
+}
+function getDateFormatter(locale, options) {
+    const key = `${locale}:${JSON.stringify(options)}`;
+    let fmt = dateFormatCache.get(key);
+    if (!fmt) {
+        fmt = new Intl.DateTimeFormat(locale, options);
+        dateFormatCache.set(key, fmt);
+    }
+    return fmt;
+}
+// ============================================================================
+// UTILITY FUNCTIONS
+// ============================================================================
+/**
+ * Get currency symbol
+ */
+export function getCurrencySymbol(code) {
+    return CURRENCY_SYMBOLS[code] || code;
+}
+// ============================================================================
+// PRICE FORMATTING
+// ============================================================================
+/**
+ * Format price with currency symbol
+ *
+ * @example
+ * ```typescript
+ * formatPrice({ amount: "99.99", currencyCode: "USD" })
+ * // => "$99.99"
+ * ```
+ */
+export function formatPrice(price) {
+    if (!price)
+        return '';
+    const amount = parseFloat(price.amount);
+    const code = price.currencyCode;
+    const locale = CURRENCY_LOCALES[code] || 'en-US';
+    try {
+        return getCurrencyFormatter(locale, code).format(amount);
+    }
+    catch {
+        const symbol = CURRENCY_SYMBOLS[code] || code;
+        return `${amount.toFixed(2)} ${symbol}`;
+    }
+}
+/**
+ * Format price range
+ *
+ * @example
+ * ```typescript
+ * formatPriceRange(
+ *   { amount: "10.00", currencyCode: "USD" },
+ *   { amount: "50.00", currencyCode: "USD" }
+ * )
+ * // => "$10.00 - $50.00"
+ * ```
+ */
+export function formatPriceRange(minPrice, maxPrice) {
+    if (minPrice.amount === maxPrice.amount) {
+        return formatPrice(minPrice);
+    }
+    return `${formatPrice(minPrice)} - ${formatPrice(maxPrice)}`;
+}
+/**
+ * Format amount with currency
+ *
+ * @example
+ * ```tsx
+ * const formatted = formatAmount("115.20", "EUR");
+ * // => "115,20 €"
+ * ```
+ */
+export function formatAmount(amount, currencyCode) {
+    const numAmount = typeof amount === 'string' ? parseFloat(amount) : amount;
+    const locale = CURRENCY_LOCALES[currencyCode] || 'en-US';
+    try {
+        return getCurrencyFormatter(locale, currencyCode).format(numAmount);
+    }
+    catch {
+        const symbol = CURRENCY_SYMBOLS[currencyCode] || currencyCode;
+        return `${numAmount.toFixed(2)} ${symbol}`;
+    }
+}
+// ============================================================================
+// DATE FORMATTING
+// ============================================================================
+/**
+ * Format date to locale string
+ *
+ * @example
+ * ```typescript
+ * formatDate(new Date())
+ * // => "Dec 9, 2025"
+ * ```
+ */
+export function formatDate(date) {
+    const d = typeof date === 'string' ? new Date(date) : date;
+    return getDateFormatter('en-US', {
+        year: 'numeric',
+        month: 'short',
+        day: 'numeric',
+    }).format(d);
+}
+/**
+ * Format date with time
+ *
+ * @example
+ * ```typescript
+ * formatDateTime(new Date())
+ * // => "Dec 9, 2025, 10:30 PM"
+ * ```
+ */
+export function formatDateTime(date) {
+    const d = typeof date === 'string' ? new Date(date) : date;
+    return getDateFormatter('en-US', {
+        year: 'numeric',
+        month: 'short',
+        day: 'numeric',
+        hour: 'numeric',
+        minute: '2-digit',
+    }).format(d);
+}
+// ============================================================================
+// NUMBER FORMATTING
+// ============================================================================
+/**
+ * Format number with thousands separator
+ *
+ * @example
+ * ```typescript
+ * formatNumber(1234567)
+ * // => "1,234,567"
+ * ```
+ */
+export function formatNumber(num) {
+    return getNumberFormatter('en-US').format(num);
+}
+/**
+ * Format percentage
+ *
+ * @example
+ * ```typescript
+ * formatPercentage(0.15)
+ * // => "15%"
+ * ```
+ */
+export function formatPercentage(value) {
+    return `${Math.round(value * 100)}%`;
+}

package/dist/core/helpers/assert-no-user-errors.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Auto-throw on userErrors — used internally by CartClient and AuthClient.
+ *
+ * Frontend code doesn't need to manually check `if (userErrors.length)`.
+ */
+import type { UserError } from '../client/types';
+export declare function assertNoUserErrors(result: {
+    userErrors?: UserError[] | null;
+}): void;
+//# sourceMappingURL=assert-no-user-errors.d.ts.map

package/dist/core/helpers/assert-no-user-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-no-user-errors.d.ts","sourceRoot":"","sources":["../../../src/core/helpers/assert-no-user-errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE;IAAE,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,IAAI,CAAA;CAAE,GAC1C,IAAI,CASN"}

package/dist/core/helpers/assert-no-user-errors.js

@@ -0,0 +1,16 @@
+/**
+ * Auto-throw on userErrors — used internally by CartClient and AuthClient.
+ *
+ * Frontend code doesn't need to manually check `if (userErrors.length)`.
+ */
+import { StorefrontError, ErrorCodes } from '../errors';
+export function assertNoUserErrors(result) {
+    if (result.userErrors && result.userErrors.length > 0) {
+        const firstError = result.userErrors[0];
+        throw new StorefrontError({
+            code: ErrorCodes.USER_ERROR,
+            message: firstError.message,
+            userErrors: result.userErrors,
+        });
+    }
+}

package/dist/core/helpers/normalize-connection.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Relay-style GraphQL connection normalizer.
+ *
+ * Converts `{ edges: [{ node }], pageInfo, totalCount }` → flat array.
+ * Pure function, 0 deps, works everywhere.
+ */
+export interface ConnectionEdge<T> {
+    node: T;
+    cursor: string;
+}
+export interface ConnectionPageInfo {
+    hasNextPage: boolean;
+    hasPreviousPage: boolean;
+    startCursor?: string | null;
+    endCursor?: string | null;
+}
+export interface Connection<T> {
+    edges: ConnectionEdge<T>[];
+    pageInfo: ConnectionPageInfo;
+    totalCount?: number;
+}
+export interface NormalizedConnection<T> {
+    items: T[];
+    pageInfo: ConnectionPageInfo;
+    totalCount?: number;
+}
+/**
+ * Normalize a GraphQL Relay connection to a flat array.
+ *
+ * @example
+ * ```typescript
+ * const { items, pageInfo, totalCount } = normalizeConnection(data.products);
+ * ```
+ */
+export declare function normalizeConnection<T>(connection: Connection<T>): NormalizedConnection<T>;
+//# sourceMappingURL=normalize-connection.d.ts.map

package/dist/core/helpers/normalize-connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-connection.d.ts","sourceRoot":"","sources":["../../../src/core/helpers/normalize-connection.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACrC,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,GACxB,oBAAoB,CAAC,CAAC,CAAC,CAMzB"}

package/dist/core/helpers/normalize-connection.js

@@ -0,0 +1,21 @@
+/**
+ * Relay-style GraphQL connection normalizer.
+ *
+ * Converts `{ edges: [{ node }], pageInfo, totalCount }` → flat array.
+ * Pure function, 0 deps, works everywhere.
+ */
+/**
+ * Normalize a GraphQL Relay connection to a flat array.
+ *
+ * @example
+ * ```typescript
+ * const { items, pageInfo, totalCount } = normalizeConnection(data.products);
+ * ```
+ */
+export function normalizeConnection(connection) {
+    return {
+        items: connection.edges.map((edge) => edge.node),
+        pageInfo: connection.pageInfo,
+        totalCount: connection.totalCount,
+    };
+}

package/dist/core/helpers/sanitize-html.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Lightweight HTML sanitizer for defense-in-depth.
+ * Primary sanitization happens on the backend (sanitize-html library).
+ * This strips dangerous tags/attributes as an extra safety layer.
+ * Works in both Node.js and Edge runtimes (no external dependencies).
+ */
+export declare function sanitizeHtml(html: string): string;
+//# sourceMappingURL=sanitize-html.d.ts.map

package/dist/core/helpers/sanitize-html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-html.d.ts","sourceRoot":"","sources":["../../../src/core/helpers/sanitize-html.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuBH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAajD"}

package/dist/core/helpers/sanitize-html.js

@@ -0,0 +1,35 @@
+/**
+ * Lightweight HTML sanitizer for defense-in-depth.
+ * Primary sanitization happens on the backend (sanitize-html library).
+ * This strips dangerous tags/attributes as an extra safety layer.
+ * Works in both Node.js and Edge runtimes (no external dependencies).
+ */
+const DANGEROUS_TAG_PATTERNS = [
+    // Tags with content that must be fully removed
+    /<script\b[^<]*(?:(?!<\/script>)<[^<]*)*<\/script\s*>/gi,
+    /<iframe\b[^<]*(?:(?!<\/iframe>)<[^<]*)*<\/iframe\s*>/gi,
+    /<object\b[^<]*(?:(?!<\/object>)<[^<]*)*<\/object\s*>/gi,
+    /<form\b[^<]*(?:(?!<\/form>)<[^<]*)*<\/form\s*>/gi,
+    /<style\b[^<]*(?:(?!<\/style>)<[^<]*)*<\/style\s*>/gi,
+    // Self-closing / void dangerous tags
+    /<embed\b[^>]*\/?>/gi,
+    /<link\b[^>]*\/?>/gi,
+    /<meta\b[^>]*\/?>/gi,
+    /<base\b[^>]*\/?>/gi,
+    /<applet\b[^<]*(?:(?!<\/applet>)<[^<]*)*<\/applet\s*>/gi,
+];
+// Event handler attributes (onclick, onerror, onload, etc.)
+const EVENT_HANDLER_PATTERN = /\s+on\w+\s*=\s*(?:"[^"]*"|'[^']*'|[^\s>]+)/gi;
+// javascript: protocol in href/src/action attributes
+const JS_PROTOCOL_PATTERN = /(href|src|action)\s*=\s*["']\s*javascript\s*:/gi;
+export function sanitizeHtml(html) {
+    if (!html)
+        return html;
+    let result = html;
+    for (const pattern of DANGEROUS_TAG_PATTERNS) {
+        result = result.replace(pattern, '');
+    }
+    result = result.replace(EVENT_HANDLER_PATTERN, '');
+    result = result.replace(JS_PROTOCOL_PATTERN, '$1="');
+    return result;
+}

package/dist/core/index.d.ts

@@ -0,0 +1,59 @@
+/**
+ * @doswiftly/storefront-sdk — Core (framework-agnostic)
+ *
+ * 100% framework-agnostic, 0 runtime dependencies.
+ * Works in Node.js, Edge Workers, Deno, Bun, CLI scripts — without React.
+ *
+ * @example
+ * ```typescript
+ * import {
+ *   createStorefrontClient,
+ *   authMiddleware,
+ *   currencyMiddleware,
+ *   retryMiddleware,
+ *   timeoutMiddleware,
+ *   errorMiddleware,
+ *   CartClient,
+ *   AuthClient,
+ * } from '@doswiftly/storefront-sdk';
+ *
+ * const client = createStorefrontClient({
+ *   apiUrl: 'https://api.doswiftly.pl',
+ *   shopSlug: 'my-shop',
+ *   middleware: [
+ *     authMiddleware(() => getToken()),
+ *     currencyMiddleware(() => getCurrency()),
+ *     retryMiddleware({ maxRetries: 2 }),
+ *     timeoutMiddleware({ timeout: 5000 }),
+ *     errorMiddleware(),
+ *   ],
+ * });
+ *
+ * const cartClient = new CartClient(client);
+ * const cart = await cartClient.create();
+ * ```
+ */
+export { createStorefrontClient } from './client/create-client';
+export type { StorefrontClient, StorefrontClientConfig, Middleware, ExecuteFn, GraphQLRequest, GraphQLResponse, GraphQLErrorInfo, UserError, CacheStrategy, CacheOptions, TypedDocumentString, } from './client/types';
+export { authMiddleware } from './middleware/auth';
+export { currencyMiddleware } from './middleware/currency';
+export { retryMiddleware, type RetryOptions } from './middleware/retry';
+export { timeoutMiddleware, type TimeoutOptions } from './middleware/timeout';
+export { errorMiddleware } from './middleware/errors';
+export { StorefrontError, ErrorCodes, type StorefrontErrorOptions } from './errors';
+export { cacheNone, cacheShort, cacheLong, cachePrivate, cacheCustom, generateCacheControlHeader, type CacheOverrides, } from './cache';
+export { CartClient } from './cart/cart-client';
+export type { Cart, CartLine, CartLineMerchandise, CartLineCost, CartCost, CartBuyerIdentity, CartDiscountCode, CartDiscountAllocation, CartLineInput, CartLineUpdateInput, CartCreateInput, CartBuyerIdentityInput, Money, } from './cart/types';
+export { AuthClient } from './auth/auth-client';
+export type { Customer, CustomerAccessToken, MailingAddress, AuthResult, CustomerCreateInput, } from './auth/types';
+export { assertNoUserErrors } from './helpers/assert-no-user-errors';
+export { sanitizeHtml } from './helpers/sanitize-html';
+export { normalizeConnection, type Connection, type ConnectionEdge, type ConnectionPageInfo, type NormalizedConnection, } from './helpers/normalize-connection';
+export { formatPrice, formatPriceRange, formatAmount, formatDate, formatDateTime, formatNumber, formatPercentage, getCurrencySymbol, CURRENCY_SYMBOLS, CURRENCY_LOCALES, type PriceMoney, } from './format';
+export { AUTH_COOKIE_NAME, AUTH_COOKIE_DEFAULTS, type AuthCookieConfig, } from './auth/cookie-config';
+export { matchesRoute, type RouteProtectionConfig } from './auth/routes';
+export { createSetTokenHandler, createClearTokenHandler } from './auth/handlers';
+export { createAuthTokenClient, type AuthTokenClient } from './auth/token-client';
+export { getOperationName } from './client/operation-name';
+export { hashQuery } from './client/hash';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,SAAS,EACT,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,YAAY,EACZ,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAGpF,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,0BAA0B,EAC1B,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,YAAY,EACV,IAAI,EACJ,QAAQ,EACR,mBAAmB,EACnB,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,KAAK,GACN,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,YAAY,EACV,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACd,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACL,mBAAmB,EACnB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,YAAY,EAAE,KAAK,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAGjF,OAAO,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGlF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC"}