@doswiftly/storefront-sdk 4.7.1 → 5.0.0

package/dist/core/auth/auth-client.d.ts

@@ -9,9 +9,10 @@
  * const authClient = new AuthClient(storefrontClient);
  *
  * const result = await authClient.login('user@example.com', 'password');
- * console.log(result.accessToken); // JWT token
+ * console.log(result.accessToken); // JWT (also set as httpOnly cookie by API)
  *
- * const customer = await authClient.getCustomer(result.accessToken);
+ * // Auth context resolved server-side from cookie/Bearer — no token argument.
+ * const customer = await authClient.getCustomer();
  * ```
  */
 import type { StorefrontClient } from '../client/types';
@@ -25,22 +26,28 @@ export declare class AuthClient {
      */
     login(email: string, password: string): Promise<AuthResult>;
     /**
-     * Logout — invalidate token on backend.
+     * Logout — invalidates auth cookie on backend (server clears Set-Cookie via Apollo plugin).
+     * Token previously passed jako mutation arg → drop'd w Iteracja 2 (auth konsolidacja).
+     * Auth context czytany przez backend `StorefrontShopGuard` z httpOnly cookie lub
+     * `Authorization: Bearer` header (gdy ustawione przez SDK auth middleware).
      * Does not throw on failure (token may already be expired).
      */
-    logout(token: string): Promise<void>;
+    logout(): Promise<void>;
     /**
-     * Renew access token — extends expiry.
+     * Renew access token — extends expiry. Auth context czytany przez backend
+     * z cookie / Authorization Bearer (jak inne authenticated mutations).
      */
-    renewToken(token: string): Promise<AuthResult>;
+    renewToken(): Promise<AuthResult>;
     /**
      * Register new customer account.
      * Returns access token + customer data.
      */
     register(input: CustomerCreateInput): Promise<AuthResult>;
     /**
-     * Fetch customer data by access token.
+     * Fetch customer data — auth context z cookie / Authorization Bearer.
+     * Token nie jest argumentem (drop'd w Iteracja 2). Browser uses cookie auto-sent;
+     * non-browser klient passes Bearer header via SDK auth middleware (`setAuthToken`).
      */
-    getCustomer(accessToken: string): Promise<Customer | null>;
+    getCustomer(): Promise<Customer | null>;
 }
 //# sourceMappingURL=auth-client.d.ts.map

package/dist/core/auth/auth-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-client.d.ts","sourceRoot":"","sources":["../../../src/core/auth/auth-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAUzE,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,gBAAgB;IAErD;;;OAGG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAiBjE;;;OAGG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa1C;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAiBpD;;;OAGG;IACG,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB/D;;OAEG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAOjE"}
+{"version":3,"file":"auth-client.d.ts","sourceRoot":"","sources":["../../../src/core/auth/auth-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAUzE,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,gBAAgB;IAErD;;;OAGG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAiBjE;;;;;;OAMG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAa7B;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;IAiBvC;;;OAGG;IACG,QAAQ,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB/D;;;;OAIG;IACG,WAAW,IAAI,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;CAO9C"}

package/dist/core/auth/auth-client.js

@@ -9,9 +9,10 @@
  * const authClient = new AuthClient(storefrontClient);
  *
  * const result = await authClient.login('user@example.com', 'password');
- * console.log(result.accessToken); // JWT token
+ * console.log(result.accessToken); // JWT (also set as httpOnly cookie by API)
  *
- * const customer = await authClient.getCustomer(result.accessToken);
+ * // Auth context resolved server-side from cookie/Bearer — no token argument.
+ * const customer = await authClient.getCustomer();
  * ```
  */
 import { assertNoUserErrors } from '../helpers/assert-no-user-errors';
@@ -35,22 +36,26 @@ export class AuthClient {
         };
     }
     /**
-     * Logout — invalidate token on backend.
+     * Logout — invalidates auth cookie on backend (server clears Set-Cookie via Apollo plugin).
+     * Token previously passed jako mutation arg → drop'd w Iteracja 2 (auth konsolidacja).
+     * Auth context czytany przez backend `StorefrontShopGuard` z httpOnly cookie lub
+     * `Authorization: Bearer` header (gdy ustawione przez SDK auth middleware).
      * Does not throw on failure (token may already be expired).
      */
-    async logout(token) {
+    async logout() {
         try {
-            await this.client.mutate(CUSTOMER_LOGOUT, { customerAccessToken: token });
+            await this.client.mutate(CUSTOMER_LOGOUT);
         }
         catch {
             // Silently ignore — token may already be expired
         }
     }
     /**
-     * Renew access token — extends expiry.
+     * Renew access token — extends expiry. Auth context czytany przez backend
+     * z cookie / Authorization Bearer (jak inne authenticated mutations).
      */
-    async renewToken(token) {
-        const data = await this.client.mutate(CUSTOMER_TOKEN_RENEW, { customerAccessToken: token });
+    async renewToken() {
+        const data = await this.client.mutate(CUSTOMER_TOKEN_RENEW);
         assertNoUserErrors(data.customerAccessTokenRenew);
         const renewed = data.customerAccessTokenRenew.customerAccessToken;
         return {
@@ -73,10 +78,12 @@ export class AuthClient {
         };
     }
     /**
-     * Fetch customer data by access token.
+     * Fetch customer data — auth context z cookie / Authorization Bearer.
+     * Token nie jest argumentem (drop'd w Iteracja 2). Browser uses cookie auto-sent;
+     * non-browser klient passes Bearer header via SDK auth middleware (`setAuthToken`).
      */
-    async getCustomer(accessToken) {
-        const data = await this.client.query(CUSTOMER_QUERY, { customerAccessToken: accessToken });
+    async getCustomer() {
+        const data = await this.client.query(CUSTOMER_QUERY);
         return data.customer;
     }
 }

package/dist/core/auth/handlers.d.ts

@@ -22,6 +22,37 @@ interface SetTokenHandlerOptions {
  * httpOnly (XSS protection), Secure in production.
  */
 export declare function createSetTokenHandler(overrides?: SetTokenHandlerOptions): (request: Request) => Promise<Response>;
+interface WhoamiHandlerOptions {
+    /** Backend GraphQL endpoint (default: `${apiUrl}/storefront/graphql`). */
+    apiUrl?: string;
+    /** Shop slug header value (X-Shop-Slug). */
+    shopSlug?: string;
+}
+/**
+ * Create a GET handler that hydrates customer state z httpOnly cookie.
+ *
+ * Browser-based storefront po hydration mountuje React app z czystym auth store
+ * (XSS fix — `accessToken` nie persistuje w localStorage). Aby pokazać "logged in"
+ * UI bez round-trip do login, klient wywołuje GET `/api/auth/whoami`:
+ *
+ * 1. Endpoint reads httpOnly cookie `customerAccessToken` (server-side, JS-inaccessible)
+ * 2. Forward jako `Authorization: Bearer` header do backend GraphQL `customer` query
+ * 3. Return `{ isAuthenticated, customer | null }` do klienta
+ * 4. Klient setAuth(customer, '') — token NIE w body (cookie kontynuuje per-request auth)
+ *
+ * Security: origin validation, fetch via Bearer (cookie nie crossuje API boundary).
+ *
+ * @example
+ * ```ts
+ * // app/api/auth/whoami/route.ts
+ * import { createWhoamiHandler } from '@doswiftly/storefront-sdk';
+ * export const GET = createWhoamiHandler({
+ *   apiUrl: process.env.NEXT_PUBLIC_API_URL!,
+ *   shopSlug: process.env.NEXT_PUBLIC_SHOP_SLUG!,
+ * });
+ * ```
+ */
+export declare function createWhoamiHandler(options?: WhoamiHandlerOptions): (request: Request) => Promise<Response>;
 /**
  * Create a POST handler that clears the auth token cookie.
  *

package/dist/core/auth/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../../src/core/auth/handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,UAAU,sBAAsB;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAmCD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,CAAC,EAAE,sBAAsB,GACjC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAgEzC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAkCjF"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../../src/core/auth/handlers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,UAAU,sBAAsB;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAmCD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,CAAC,EAAE,sBAAsB,GACjC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAgEzC;AAED,UAAU,oBAAoB;IAC5B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,oBAAyB,GACjC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA6DzC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAkCjF"}

package/dist/core/auth/handlers.js

@@ -91,6 +91,75 @@ export function createSetTokenHandler(overrides) {
         }
     };
 }
+/**
+ * Create a GET handler that hydrates customer state z httpOnly cookie.
+ *
+ * Browser-based storefront po hydration mountuje React app z czystym auth store
+ * (XSS fix — `accessToken` nie persistuje w localStorage). Aby pokazać "logged in"
+ * UI bez round-trip do login, klient wywołuje GET `/api/auth/whoami`:
+ *
+ * 1. Endpoint reads httpOnly cookie `customerAccessToken` (server-side, JS-inaccessible)
+ * 2. Forward jako `Authorization: Bearer` header do backend GraphQL `customer` query
+ * 3. Return `{ isAuthenticated, customer | null }` do klienta
+ * 4. Klient setAuth(customer, '') — token NIE w body (cookie kontynuuje per-request auth)
+ *
+ * Security: origin validation, fetch via Bearer (cookie nie crossuje API boundary).
+ *
+ * @example
+ * ```ts
+ * // app/api/auth/whoami/route.ts
+ * import { createWhoamiHandler } from '@doswiftly/storefront-sdk';
+ * export const GET = createWhoamiHandler({
+ *   apiUrl: process.env.NEXT_PUBLIC_API_URL!,
+ *   shopSlug: process.env.NEXT_PUBLIC_SHOP_SLUG!,
+ * });
+ * ```
+ */
+export function createWhoamiHandler(options = {}) {
+    return async (request) => {
+        try {
+            const originError = validateOrigin(request);
+            if (originError)
+                return originError;
+            const cookieHeader = request.headers.get('cookie') ?? '';
+            const tokenMatch = cookieHeader.match(new RegExp(`(?:^|; )${AUTH_COOKIE_NAME}=([^;]+)`));
+            const token = tokenMatch ? decodeURIComponent(tokenMatch[1]) : null;
+            if (!token) {
+                return new Response(JSON.stringify({ isAuthenticated: false, customer: null }), { status: 200, headers: { 'Content-Type': 'application/json' } });
+            }
+            const apiUrl = options.apiUrl ?? process.env.NEXT_PUBLIC_API_URL ?? '';
+            const shopSlug = options.shopSlug ?? process.env.NEXT_PUBLIC_SHOP_SLUG ?? '';
+            const endpoint = `${apiUrl.replace(/\/$/, '')}/storefront/graphql`;
+            const gqlResponse = await fetch(endpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    Accept: 'application/json',
+                    Authorization: `Bearer ${token}`,
+                    ...(shopSlug ? { 'X-Shop-Slug': shopSlug } : {}),
+                },
+                body: JSON.stringify({
+                    query: `query Whoami {
+            customer {
+              id
+              email
+              firstName
+              lastName
+              phone
+            }
+          }`,
+                }),
+            });
+            const json = (await gqlResponse.json());
+            const customer = json.data?.customer ?? null;
+            return new Response(JSON.stringify({ isAuthenticated: !!customer, customer }), { status: 200, headers: { 'Content-Type': 'application/json' } });
+        }
+        catch (error) {
+            console.error('Error in whoami handler:', error);
+            return new Response(JSON.stringify({ isAuthenticated: false, customer: null, error: 'Internal server error' }), { status: 500, headers: { 'Content-Type': 'application/json' } });
+        }
+    };
+}
 /**
  * Create a POST handler that clears the auth token cookie.
  *

package/dist/core/auth/types.d.ts

@@ -25,8 +25,8 @@ export interface Customer {
 }
 export interface MailingAddress {
     id: string;
-    address1: string | null;
-    address2: string | null;
+    streetLine1: string | null;
+    streetLine2: string | null;
     city: string | null;
     company: string | null;
     country: string | null;
@@ -34,9 +34,9 @@ export interface MailingAddress {
     firstName: string | null;
     lastName: string | null;
     phone: string | null;
-    province: string | null;
-    provinceCode: string | null;
-    zip: string | null;
+    state: string | null;
+    stateCode: string | null;
+    postalCode: string | null;
     isDefault: boolean;
 }
 export interface AuthResult {

package/dist/core/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/auth/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/auth/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/core/cache.d.ts

@@ -1,7 +1,7 @@
 /**
  * Cache strategies — functions (not constants) with override support.
  *
- * Inspired by Shopify Hydrogen's caching strategies.
+ * Industry-standard storefront caching strategies (no-store / SWR / private).
  *
  * @example
  * ```typescript

package/dist/core/cache.js

@@ -1,7 +1,7 @@
 /**
  * Cache strategies — functions (not constants) with override support.
  *
- * Inspired by Shopify Hydrogen's caching strategies.
+ * Industry-standard storefront caching strategies (no-store / SWR / private).
  *
  * @example
  * ```typescript

package/dist/core/cart/types.d.ts

@@ -128,7 +128,7 @@ export interface CartAttributeSelectionInput {
 export interface CartLineInput {
     merchandiseId: string;
     quantity?: number;
-    /** Shopify-style raw Line Item Properties (gift messages, engraving notes, etc.). */
+    /** Raw Line Item Properties (gift messages, engraving notes, etc.). */
     attributes?: Array<{
         key: string;
         value: string;

package/dist/core/cart/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/cart/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,OAAO,CAAC;CACtB;AAMD,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,cAAc,EAAE,UAAU,CAAC;IAC3B,cAAc,EAAE,UAAU,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,UAAU,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,iBAAiB,EAAE,UAAU,CAAC;IAC9B,cAAc,EAAE,UAAU,CAAC;IAC3B,WAAW,EAAE,UAAU,CAAC;IACxB,0BAA0B,EAAE,UAAU,GAAG,IAAI,CAAC;CAC/C;AAMD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,UAAU,CAAC;IAClB,aAAa,EAAE,KAAK,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,UAAU,GAAG,IAAI,CAAC;IAClC,sBAAsB,EAAE,KAAK,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAChJ,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,mBAAmB,CAAC;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACzD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,KAAK,CAAC;CACf;AAMD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAMD,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,aAAa,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACxC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,mBAAmB,EAAE,sBAAsB,EAAE,CAAC;IAC9C,UAAU,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAC1D;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,2BAA2B;IAC1C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,GAAG,IAAI,CAAC;CAC5D;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/cart/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,MAAM,WAAW,KAAK;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,OAAO,CAAC;CACtB;AAMD,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,UAAU,CAAC;IACxB,cAAc,EAAE,UAAU,CAAC;IAC3B,cAAc,EAAE,UAAU,GAAG,IAAI,CAAC;IAClC,eAAe,EAAE,UAAU,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,iBAAiB,EAAE,UAAU,CAAC;IAC9B,cAAc,EAAE,UAAU,CAAC;IAC3B,WAAW,EAAE,UAAU,CAAC;IACxB,0BAA0B,EAAE,UAAU,GAAG,IAAI,CAAC;CAC/C;AAMD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,KAAK,EAAE,UAAU,CAAC;IAClB,aAAa,EAAE,KAAK,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,UAAU,GAAG,IAAI,CAAC;IAClC,sBAAsB,EAAE,KAAK,GAAG,IAAI,CAAC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAChJ,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,mBAAmB,CAAC;IACjC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACzD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,KAAK,CAAC;CACf;AAMD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAMD,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,aAAa,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACxC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,mBAAmB,EAAE,sBAAsB,EAAE,CAAC;IAC9C,UAAU,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAC1D;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,2BAA2B;IAC1C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnD,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,GAAG,IAAI,CAAC;CAC5D;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/core/client/compose.d.ts

@@ -1,5 +1,5 @@
 /**
- * Compose middleware chain using reduceRight (Hydrogen pattern).
+ * Compose middleware chain using reduceRight (industry-standard pattern).
  *
  * Middleware execute in order: first registered runs first.
  * Each can modify request, modify response, retry, or short-circuit.

package/dist/core/client/compose.js

@@ -1,5 +1,5 @@
 /**
- * Compose middleware chain using reduceRight (Hydrogen pattern).
+ * Compose middleware chain using reduceRight (industry-standard pattern).
  *
  * Middleware execute in order: first registered runs first.
  * Each can modify request, modify response, retry, or short-circuit.

package/dist/core/client/create-client.d.ts

@@ -1,10 +1,10 @@
 /**
- * createStorefrontClient — transport factory (Hydrogen pattern).
+ * createStorefrontClient — transport factory (agnostic-core pattern).
  *
  * Creates a framework-agnostic GraphQL client with:
  * - Middleware pipeline (composable, lazy)
  * - Request deduplication (same-tick queries)
- * - TypedDocumentString support (Saleor/client-preset)
+ * - TypedDocumentString support (graphql client-preset)
  * - Plain string queries (for custom operations)
  * - Debug mode
  *

package/dist/core/client/create-client.js

@@ -1,10 +1,10 @@
 /**
- * createStorefrontClient — transport factory (Hydrogen pattern).
+ * createStorefrontClient — transport factory (agnostic-core pattern).
  *
  * Creates a framework-agnostic GraphQL client with:
  * - Middleware pipeline (composable, lazy)
  * - Request deduplication (same-tick queries)
- * - TypedDocumentString support (Saleor/client-preset)
+ * - TypedDocumentString support (graphql client-preset)
  * - Plain string queries (for custom operations)
  * - Debug mode
  *

package/dist/core/client/execute.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../../src/core/client/execute.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAoB,MAAM,SAAS,CAAC;AAEjF,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC/B,2BAA2B;IAC3B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,IAGnB,SAAS,cAAc,KAAG,OAAO,CAAC,eAAe,CAAC,CA6CjF"}
+{"version":3,"file":"execute.d.ts","sourceRoot":"","sources":["../../../src/core/client/execute.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAoB,MAAM,SAAS,CAAC;AAEjF,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC/B,2BAA2B;IAC3B,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,IAGnB,SAAS,cAAc,KAAG,OAAO,CAAC,eAAe,CAAC,CAmDjF"}

package/dist/core/client/execute.js

@@ -30,6 +30,12 @@ export function createExecute(config) {
             },
             body: JSON.stringify(body),
             signal,
+            // Include httpOnly cookies (e.g. customerAccessToken auth) on cross-origin
+            // requests. Required when the storefront runs on a domain different from the
+            // backend GraphQL endpoint — same-origin browsers send cookies regardless,
+            // but cross-origin needs `credentials: 'include'` paired with the backend's
+            // `Access-Control-Allow-Credentials: true` (already configured).
+            credentials: 'include',
         });
         const json = await response.json();
         if (debug) {

package/dist/core/client/types.js

@@ -4,7 +4,7 @@
  * Framework-agnostic — no React, no Zustand, 0 runtime dependencies.
  */
 // ---------------------------------------------------------------------------
-// TypedDocumentString (Saleor / client-preset pattern)
+// TypedDocumentString (graphql-codegen client-preset pattern)
 // ---------------------------------------------------------------------------
 /**
  * A branded string carrying result & variable types.

package/dist/core/index.d.ts

@@ -59,7 +59,7 @@ export { LANGUAGE_COOKIE_NAME, LANGUAGE_COOKIE_MAX_AGE, LANGUAGE_HEADER_NAME } f
 export { CURRENCY_COOKIE_NAME, CURRENCY_COOKIE_MAX_AGE, CURRENCY_HEADER_NAME } from './currency/cookie-config';
 export { CART_COOKIE_NAME, CART_COOKIE_MAX_AGE } from './cart/cookie-config';
 export { matchesRoute, type RouteProtectionConfig } from './auth/routes';
-export { createSetTokenHandler, createClearTokenHandler } from './auth/handlers';
+export { createSetTokenHandler, createClearTokenHandler, createWhoamiHandler } from './auth/handlers';
 export { createAuthTokenClient, type AuthTokenClient } from './auth/token-client';
 export { type ImageData, thumbHashToDataURL } from './image';
 export { getOperationName } from './client/operation-name';

package/dist/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,SAAS,EACT,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,YAAY,EACZ,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,8BAA8B,EACnC,KAAK,YAAY,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAGjF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAGpF,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,0BAA0B,EAC1B,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,YAAY,EACV,IAAI,EACJ,QAAQ,EACR,mBAAmB,EACnB,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,KAAK,GACN,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,YAAY,EACV,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACd,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACL,mBAAmB,EACnB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAG/G,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAG/G,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG7E,OAAO,EAAE,YAAY,EAAE,KAAK,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAGjF,OAAO,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGlF,OAAO,EAAE,KAAK,SAAS,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAG7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,SAAS,EACT,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,YAAY,EACZ,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,8BAA8B,EACnC,KAAK,YAAY,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAGjF,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,sBAAsB,EAAE,MAAM,UAAU,CAAC;AAGpF,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,WAAW,EACX,0BAA0B,EAC1B,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,YAAY,EACV,IAAI,EACJ,QAAQ,EACR,mBAAmB,EACnB,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,KAAK,GACN,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,YAAY,EACV,QAAQ,EACR,mBAAmB,EACnB,cAAc,EACd,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACL,mBAAmB,EACnB,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,gCAAgC,CAAC;AAGxC,OAAO,EACL,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,UAAU,GAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAG/G,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAG/G,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG7E,OAAO,EAAE,YAAY,EAAE,KAAK,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGzE,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAGtG,OAAO,EAAE,qBAAqB,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGlF,OAAO,EAAE,KAAK,SAAS,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAG7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC"}

package/dist/core/index.js

@@ -71,7 +71,7 @@ export { CART_COOKIE_NAME, CART_COOKIE_MAX_AGE } from './cart/cookie-config';
 // Auth route matching
 export { matchesRoute } from './auth/routes';
 // Auth cookie handlers (API route factories)
-export { createSetTokenHandler, createClearTokenHandler } from './auth/handlers';
+export { createSetTokenHandler, createClearTokenHandler, createWhoamiHandler } from './auth/handlers';
 // Auth token client (client-side fetch helpers)
 export { createAuthTokenClient } from './auth/token-client';
 // Image types (loaders removed — GraphQL returns ready-to-use CDN URLs with transform params)

package/dist/core/language/cookie-config.d.ts

@@ -3,12 +3,17 @@
  *
  * Used by:
  * - SDK language store (client-side cookie read/write)
- * - SDK language middleware (X-Lang header)
+ * - SDK language middleware (X-Language header)
  * - next-intl middleware `localeCookie.name` (server-side locale detection)
  *
  * Single cookie replaces both next-intl's NEXT_LOCALE and SDK's preferred-language.
+ *
+ * Header name `X-Language` matches backend `StorefrontContextBuilder.resolveLanguage`
+ * reader (`x-language` lowercased per Express normalization). Earlier `X-Lang` value
+ * was a documented mismatch that resulted in the SDK header being silently ignored
+ * by the backend.
  */
 export declare const LANGUAGE_COOKIE_NAME = "preferred-language";
 export declare const LANGUAGE_COOKIE_MAX_AGE: number;
-export declare const LANGUAGE_HEADER_NAME = "X-Lang";
+export declare const LANGUAGE_HEADER_NAME = "X-Language";
 //# sourceMappingURL=cookie-config.d.ts.map

package/dist/core/language/cookie-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cookie-config.d.ts","sourceRoot":"","sources":["../../../src/core/language/cookie-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AACzD,eAAO,MAAM,uBAAuB,QAAqB,CAAC;AAC1D,eAAO,MAAM,oBAAoB,WAAW,CAAC"}
+{"version":3,"file":"cookie-config.d.ts","sourceRoot":"","sources":["../../../src/core/language/cookie-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AACzD,eAAO,MAAM,uBAAuB,QAAqB,CAAC;AAC1D,eAAO,MAAM,oBAAoB,eAAe,CAAC"}

package/dist/core/language/cookie-config.js

@@ -3,11 +3,16 @@
  *
  * Used by:
  * - SDK language store (client-side cookie read/write)
- * - SDK language middleware (X-Lang header)
+ * - SDK language middleware (X-Language header)
  * - next-intl middleware `localeCookie.name` (server-side locale detection)
  *
  * Single cookie replaces both next-intl's NEXT_LOCALE and SDK's preferred-language.
+ *
+ * Header name `X-Language` matches backend `StorefrontContextBuilder.resolveLanguage`
+ * reader (`x-language` lowercased per Express normalization). Earlier `X-Lang` value
+ * was a documented mismatch that resulted in the SDK header being silently ignored
+ * by the backend.
  */
 export const LANGUAGE_COOKIE_NAME = 'preferred-language';
 export const LANGUAGE_COOKIE_MAX_AGE = 365 * 24 * 60 * 60; // 1 year
-export const LANGUAGE_HEADER_NAME = 'X-Lang';
+export const LANGUAGE_HEADER_NAME = 'X-Language';

package/dist/core/operations/auth.d.ts

@@ -4,8 +4,8 @@
  * These match the backend storefront-graphql schema exactly.
  */
 export declare const CUSTOMER_LOGIN = "\n  mutation CustomerLogin($input: CustomerAccessTokenCreateInput!) {\n    customerAccessTokenCreate(input: $input) {\n      customerAccessToken { ...CustomerAccessTokenFields }\n      userErrors { ...UserErrorFields }\n    }\n  }\n  \n  fragment CustomerAccessTokenFields on CustomerAccessToken {\n    accessToken\n    expiresAt\n  }\n\n  \n  fragment UserErrorFields on UserError {\n    message\n    field\n    code\n  }\n\n";
-export declare const CUSTOMER_LOGOUT = "\n  mutation CustomerLogout($customerAccessToken: String!) {\n    customerAccessTokenDelete(customerAccessToken: $customerAccessToken) {\n      deletedAccessToken\n      deletedCustomerAccessTokenId\n      userErrors { ...UserErrorFields }\n    }\n  }\n  \n  fragment UserErrorFields on UserError {\n    message\n    field\n    code\n  }\n\n";
-export declare const CUSTOMER_TOKEN_RENEW = "\n  mutation CustomerTokenRenew($customerAccessToken: String!) {\n    customerAccessTokenRenew(customerAccessToken: $customerAccessToken) {\n      customerAccessToken { ...CustomerAccessTokenFields }\n      userErrors { ...UserErrorFields }\n    }\n  }\n  \n  fragment CustomerAccessTokenFields on CustomerAccessToken {\n    accessToken\n    expiresAt\n  }\n\n  \n  fragment UserErrorFields on UserError {\n    message\n    field\n    code\n  }\n\n";
-export declare const CUSTOMER_CREATE = "\n  mutation CustomerCreate($input: CustomerCreateInput!) {\n    customerCreate(input: $input) {\n      customer { ...CustomerFields }\n      customerAccessToken { ...CustomerAccessTokenFields }\n      userErrors { ...UserErrorFields }\n    }\n  }\n  \n  fragment CustomerFields on Customer {\n    id\n    email\n    firstName\n    lastName\n    displayName\n    phone\n    emailVerified\n    emailMarketingState\n    defaultAddress {\n      id\n      address1\n      address2\n      city\n      company\n      country\n      countryCode\n      firstName\n      lastName\n      phone\n      province\n      provinceCode\n      zip\n      isDefault\n    }\n    ordersCount\n    totalSpent {\n      amount\n      currencyCode\n    }\n    createdAt\n    updatedAt\n  }\n\n  \n  fragment CustomerAccessTokenFields on CustomerAccessToken {\n    accessToken\n    expiresAt\n  }\n\n  \n  fragment UserErrorFields on UserError {\n    message\n    field\n    code\n  }\n\n";
-export declare const CUSTOMER_QUERY = "\n  query Customer($customerAccessToken: String!) {\n    customer(customerAccessToken: $customerAccessToken) {\n      ...CustomerFields\n    }\n  }\n  \n  fragment CustomerFields on Customer {\n    id\n    email\n    firstName\n    lastName\n    displayName\n    phone\n    emailVerified\n    emailMarketingState\n    defaultAddress {\n      id\n      address1\n      address2\n      city\n      company\n      country\n      countryCode\n      firstName\n      lastName\n      phone\n      province\n      provinceCode\n      zip\n      isDefault\n    }\n    ordersCount\n    totalSpent {\n      amount\n      currencyCode\n    }\n    createdAt\n    updatedAt\n  }\n\n";
+export declare const CUSTOMER_LOGOUT = "\n  mutation CustomerLogout {\n    customerAccessTokenDelete {\n      deletedAccessToken\n      deletedCustomerAccessTokenId\n      userErrors { ...UserErrorFields }\n    }\n  }\n  \n  fragment UserErrorFields on UserError {\n    message\n    field\n    code\n  }\n\n";
+export declare const CUSTOMER_TOKEN_RENEW = "\n  mutation CustomerTokenRenew {\n    customerAccessTokenRenew {\n      customerAccessToken { ...CustomerAccessTokenFields }\n      userErrors { ...UserErrorFields }\n    }\n  }\n  \n  fragment CustomerAccessTokenFields on CustomerAccessToken {\n    accessToken\n    expiresAt\n  }\n\n  \n  fragment UserErrorFields on UserError {\n    message\n    field\n    code\n  }\n\n";
+export declare const CUSTOMER_CREATE = "\n  mutation CustomerCreate($input: CustomerCreateInput!) {\n    customerCreate(input: $input) {\n      customer { ...CustomerFields }\n      customerAccessToken { ...CustomerAccessTokenFields }\n      userErrors { ...UserErrorFields }\n    }\n  }\n  \n  fragment CustomerFields on Customer {\n    id\n    email\n    firstName\n    lastName\n    displayName\n    phone\n    emailVerified\n    emailMarketingState\n    defaultAddress {\n      id\n      streetLine1\n      streetLine2\n      city\n      company\n      country\n      countryCode\n      firstName\n      lastName\n      phone\n      state\n      stateCode\n      postalCode\n      isDefault\n    }\n    ordersCount\n    totalSpent {\n      amount\n      currencyCode\n    }\n    createdAt\n    updatedAt\n  }\n\n  \n  fragment CustomerAccessTokenFields on CustomerAccessToken {\n    accessToken\n    expiresAt\n  }\n\n  \n  fragment UserErrorFields on UserError {\n    message\n    field\n    code\n  }\n\n";
+export declare const CUSTOMER_QUERY = "\n  query Customer {\n    customer {\n      ...CustomerFields\n    }\n  }\n  \n  fragment CustomerFields on Customer {\n    id\n    email\n    firstName\n    lastName\n    displayName\n    phone\n    emailVerified\n    emailMarketingState\n    defaultAddress {\n      id\n      streetLine1\n      streetLine2\n      city\n      company\n      country\n      countryCode\n      firstName\n      lastName\n      phone\n      state\n      stateCode\n      postalCode\n      isDefault\n    }\n    ordersCount\n    totalSpent {\n      amount\n      currencyCode\n    }\n    createdAt\n    updatedAt\n  }\n\n";
 //# sourceMappingURL=auth.d.ts.map

package/dist/core/operations/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/core/operations/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6DH,eAAO,MAAM,cAAc,+aAS1B,CAAC;AAEF,eAAO,MAAM,eAAe,0VAS3B,CAAC;AAEF,eAAO,MAAM,oBAAoB,qcAShC,CAAC;AAEF,eAAO,MAAM,eAAe,w8BAW3B,CAAC;AAMF,eAAO,MAAM,cAAc,kqBAO1B,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/core/operations/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6DH,eAAO,MAAM,cAAc,+aAS1B,CAAC;AAEF,eAAO,MAAM,eAAe,gRAS3B,CAAC;AAEF,eAAO,MAAM,oBAAoB,2XAShC,CAAC;AAEF,eAAO,MAAM,eAAe,+8BAW3B,CAAC;AAMF,eAAO,MAAM,cAAc,+lBAO1B,CAAC"}

package/dist/core/operations/auth.js

@@ -31,8 +31,8 @@ const CUSTOMER_FRAGMENT = `
     emailMarketingState
     defaultAddress {
       id
-      address1
-      address2
+      streetLine1
+      streetLine2
       city
       company
       country
@@ -40,9 +40,9 @@ const CUSTOMER_FRAGMENT = `
       firstName
       lastName
       phone
-      province
-      provinceCode
-      zip
+      state
+      stateCode
+      postalCode
       isDefault
     }
     ordersCount
@@ -68,8 +68,8 @@ export const CUSTOMER_LOGIN = `
   ${USER_ERROR_FRAGMENT}
 `;
 export const CUSTOMER_LOGOUT = `
-  mutation CustomerLogout($customerAccessToken: String!) {
-    customerAccessTokenDelete(customerAccessToken: $customerAccessToken) {
+  mutation CustomerLogout {
+    customerAccessTokenDelete {
       deletedAccessToken
       deletedCustomerAccessTokenId
       userErrors { ...UserErrorFields }
@@ -78,8 +78,8 @@ export const CUSTOMER_LOGOUT = `
   ${USER_ERROR_FRAGMENT}
 `;
 export const CUSTOMER_TOKEN_RENEW = `
-  mutation CustomerTokenRenew($customerAccessToken: String!) {
-    customerAccessTokenRenew(customerAccessToken: $customerAccessToken) {
+  mutation CustomerTokenRenew {
+    customerAccessTokenRenew {
       customerAccessToken { ...CustomerAccessTokenFields }
       userErrors { ...UserErrorFields }
     }
@@ -103,8 +103,8 @@ export const CUSTOMER_CREATE = `
 // Queries
 // ---------------------------------------------------------------------------
 export const CUSTOMER_QUERY = `
-  query Customer($customerAccessToken: String!) {
-    customer(customerAccessToken: $customerAccessToken) {
+  query Customer {
+    customer {
       ...CustomerFields
     }
   }