@drttix/drt-sdk 1.3.4 → 1.4.0

package/dist/esm/src/functions/sdkConfig.d.ts

@@ -1,7 +1,25 @@
+export type ShopperScope = 'singleton' | 'per-request';
 export interface SDKConfig {
-    shopperGuid: string;
-    accountId: string;
     apiKey: string;
+    /**
+     * Required when shopperScope is 'singleton' (the default). Optional when
+     * shopperScope is 'per-request' — in that mode these act only as a fallback
+     * default, and every shopper call may override them via a trailing
+     * `{ shopperGuid, accountId }` context argument.
+     */
+    shopperGuid?: string;
+    accountId?: string;
+    /**
+     * 'singleton' (default): shopperGuid/accountId are fixed for the lifetime of
+     * the process, exactly like today.
+     *
+     * 'per-request': shopperGuid/accountId become optional at init() time, and
+     * every shopper service method accepts an optional trailing context argument
+     * ({ shopperGuid, accountId }) so a single SDK instance can serve requests
+     * for many shoppers/accounts concurrently — the intended shape for a backend
+     * that proxies calls on behalf of arbitrary shoppers.
+     */
+    shopperScope?: ShopperScope;
 }
 /**
  * Initialize the DRT SDK with credentials.
@@ -14,7 +32,7 @@ export interface SDKConfig {
  * ```javascript
  * import { DRT } from '@drttix/drt-sdk';
  *
- * // Initialize once
+ * // Initialize once (default: singleton shopper scope)
  * DRT.init({
  *   shopperGuid: 'your-shopper-guid',
  *   accountId: 'your-account-id',
@@ -24,6 +42,18 @@ export interface SDKConfig {
  * // Now make calls without passing credentials
  * const theme = await DRT.shopper.account.getTheme();
  * ```
+ *
+ * @example
+ * ```javascript
+ * // Backend serving many shoppers/accounts from a single SDK instance
+ * DRT.init({ apiKey: 'your-api-key', shopperScope: 'per-request' });
+ *
+ * // Pass shopperGuid/accountId per call instead
+ * await DRT.shopper.product.addProduct(body, {
+ *   shopperGuid: req.shopperGuid,
+ *   accountId: req.accountId,
+ * });
+ * ```
  */
 export declare function init(config: SDKConfig): void;
 /**
@@ -35,21 +65,22 @@ export declare function isReady(): boolean;
  */
 export declare function getConfig(): SDKConfig | null;
 /**
- * Reset the SDK configuration.
+ * Get the shopperScope the SDK was initialized with ('singleton' if not yet initialized).
  */
-export declare function reset(): void;
+export declare function getShopperScope(): ShopperScope;
 /**
- * Get credentials from config, throwing if not initialized.
- * Used internally by wrapped services.
+ * Reset the SDK configuration.
  */
-export declare function getCredentials(): {
-    shopperGuid: string;
-    accountId: string;
-    apiKey: string;
-};
+export declare function reset(): void;
 /**
- * Creates a proxy that auto-injects credentials for service methods.
- * Methods that take (shopperguid, accountid, apikey, ...rest) as first 3 params
- * will have those auto-filled from the SDK config.
+ * Resolves the shopperguid/accountid/apikey headers for a single shopper API call.
+ *
+ * Used internally by every generated shopper service method. `context`, when
+ * provided, overrides the shopperGuid/accountId set at DRT.init() — this is
+ * what makes shopperScope: 'per-request' work. apiKey always comes from
+ * DRT.init(), since it identifies the calling backend, not the shopper.
  */
-export declare function createAutoCredentialsProxy<T extends object>(service: T): T;
+export declare function resolveShopperHeaders(context?: {
+    shopperGuid?: string;
+    accountId?: string;
+}): Record<string, string>;

package/dist/esm/src/functions/sdkConfig.js

@@ -4,6 +4,7 @@ import { OpenAPI as ScannerAPI } from '../generated/scanner/core/OpenAPI.js';
 import { OpenAPI as PortalAPI } from '../generated/portal/core/OpenAPI.js';
 let isInitialized = false;
 let currentConfig = null;
+let currentShopperScope = 'singleton';
 /**
  * Initialize the DRT SDK with credentials.
  * Once initialized, these credentials will be automatically included
@@ -15,7 +16,7 @@ let currentConfig = null;
  * ```javascript
  * import { DRT } from '@drttix/drt-sdk';
  *
- * // Initialize once
+ * // Initialize once (default: singleton shopper scope)
  * DRT.init({
  *   shopperGuid: 'your-shopper-guid',
  *   accountId: 'your-account-id',
@@ -25,21 +26,44 @@ let currentConfig = null;
  * // Now make calls without passing credentials
  * const theme = await DRT.shopper.account.getTheme();
  * ```
+ *
+ * @example
+ * ```javascript
+ * // Backend serving many shoppers/accounts from a single SDK instance
+ * DRT.init({ apiKey: 'your-api-key', shopperScope: 'per-request' });
+ *
+ * // Pass shopperGuid/accountId per call instead
+ * await DRT.shopper.product.addProduct(body, {
+ *   shopperGuid: req.shopperGuid,
+ *   accountId: req.accountId,
+ * });
+ * ```
  */
 export function init(config) {
-    if (!config.shopperGuid || !config.accountId || !config.apiKey) {
-        throw new Error('DRT SDK init requires shopperGuid, accountId, and apiKey');
+    var _a;
+    if (!config.apiKey) {
+        throw new Error('DRT SDK init requires apiKey');
+    }
+    const shopperScope = (_a = config.shopperScope) !== null && _a !== void 0 ? _a : 'singleton';
+    if (shopperScope === 'singleton' && (!config.shopperGuid || !config.accountId)) {
+        throw new Error('DRT SDK init requires shopperGuid and accountId (or pass shopperScope: "per-request" to supply them per shopper call instead)');
     }
     currentConfig = config;
-    const headers = {
-        shopperguid: config.shopperGuid,
-        accountid: config.accountId,
-        apikey: config.apiKey,
-    };
-    // Set headers on all API clients
-    ShopperAPI.HEADERS = headers;
-    ScannerAPI.HEADERS = headers;
-    PortalAPI.HEADERS = headers;
+    currentShopperScope = shopperScope;
+    // Portal and scanner are always singleton-scoped: one fixed set of
+    // credentials for every call, applied globally via OpenAPI.HEADERS.
+    const sharedHeaders = { apikey: config.apiKey };
+    if (config.shopperGuid && config.accountId) {
+        sharedHeaders.shopperguid = config.shopperGuid;
+        sharedHeaders.accountid = config.accountId;
+    }
+    ScannerAPI.HEADERS = sharedHeaders;
+    PortalAPI.HEADERS = sharedHeaders;
+    // Shopper credentials are resolved per-call by resolveShopperHeaders()
+    // (see generated shopper services), so no global header is set here —
+    // that's what lets shopperScope: 'per-request' override per call without
+    // a global value silently taking precedence.
+    ShopperAPI.HEADERS = undefined;
     isInitialized = true;
 }
 /**
@@ -54,50 +78,46 @@ export function isReady() {
 export function getConfig() {
     return currentConfig;
 }
+/**
+ * Get the shopperScope the SDK was initialized with ('singleton' if not yet initialized).
+ */
+export function getShopperScope() {
+    return currentShopperScope;
+}
 /**
  * Reset the SDK configuration.
  */
 export function reset() {
     currentConfig = null;
+    currentShopperScope = 'singleton';
     isInitialized = false;
     ShopperAPI.HEADERS = undefined;
     ScannerAPI.HEADERS = undefined;
     PortalAPI.HEADERS = undefined;
 }
 /**
- * Get credentials from config, throwing if not initialized.
- * Used internally by wrapped services.
+ * Resolves the shopperguid/accountid/apikey headers for a single shopper API call.
+ *
+ * Used internally by every generated shopper service method. `context`, when
+ * provided, overrides the shopperGuid/accountId set at DRT.init() — this is
+ * what makes shopperScope: 'per-request' work. apiKey always comes from
+ * DRT.init(), since it identifies the calling backend, not the shopper.
  */
-export function getCredentials() {
+export function resolveShopperHeaders(context) {
+    var _a, _b;
     if (!currentConfig) {
         throw new Error('DRT SDK not initialized. Call DRT.init() first.');
     }
+    const shopperGuid = (_a = context === null || context === void 0 ? void 0 : context.shopperGuid) !== null && _a !== void 0 ? _a : currentConfig.shopperGuid;
+    const accountId = (_b = context === null || context === void 0 ? void 0 : context.accountId) !== null && _b !== void 0 ? _b : currentConfig.accountId;
+    if (!shopperGuid || !accountId) {
+        throw new Error(currentShopperScope === 'per-request'
+            ? 'No shopperGuid/accountId available for this call. DRT SDK was initialized with shopperScope: "per-request" without defaults — pass { shopperGuid, accountId } as the last argument to this call.'
+            : 'DRT SDK not initialized with shopperGuid/accountId. Call DRT.init() first.');
+    }
     return {
-        shopperGuid: currentConfig.shopperGuid,
-        accountId: currentConfig.accountId,
-        apiKey: currentConfig.apiKey,
+        shopperguid: shopperGuid,
+        accountid: accountId,
+        apikey: currentConfig.apiKey,
     };
 }
-/**
- * Creates a proxy that auto-injects credentials for service methods.
- * Methods that take (shopperguid, accountid, apikey, ...rest) as first 3 params
- * will have those auto-filled from the SDK config.
- */
-export function createAutoCredentialsProxy(service) {
-    return new Proxy(service, {
-        get(target, prop) {
-            const value = target[prop];
-            if (typeof value === 'function') {
-                return (...args) => {
-                    // If SDK is initialized, prepend credentials
-                    if (isInitialized && currentConfig) {
-                        return value.call(target, currentConfig.shopperGuid, currentConfig.accountId, currentConfig.apiKey, ...args);
-                    }
-                    // Otherwise call with original args
-                    return value.apply(target, args);
-                };
-            }
-            return value;
-        },
-    });
-}

package/dist/esm/src/generated/portal/core/OpenAPI.js

@@ -1,6 +1,6 @@
 export const OpenAPI = {
     BASE: '',
-    VERSION: '20260622.4',
+    VERSION: '20260629.2',
     WITH_CREDENTIALS: false,
     CREDENTIALS: 'include',
     TOKEN: undefined,

package/dist/esm/src/generated/portal/core/request.js

@@ -194,13 +194,16 @@ export const getResponseBody = async (response) => {
             const contentType = response.headers.get("Content-Type");
             if (contentType) {
                 const jsonTypes = ["application/json", "application/problem+json"];
-                const isJSON = jsonTypes.some((type) => contentType.toLowerCase().startsWith(type));
+                const lc = contentType.toLowerCase();
+                const isJSON = jsonTypes.some((type) => lc.startsWith(type));
                 if (isJSON) {
                     return await response.json();
                 }
-                else {
-                    return await response.text();
+                // Return Blob for PDF / binary responses
+                if (lc.startsWith('application/pdf') || lc.startsWith('application/octet-stream')) {
+                    return await response.blob();
                 }
+                return await response.text();
             }
         }
         catch (error) {
@@ -230,7 +233,36 @@ export const catchErrorCodes = (options, result) => {
         throw new ApiError(options, result, `Generic Error: status: ${errorStatus}; status text: ${errorStatusText}; body: ${errorBody}`);
     }
 };
-let globalCookieHeader;
+// Cookies are cached per request "identity" rather than in one shared slot.
+// Shopper calls carry shopperguid/accountid in options.headers (resolved
+// per-call by resolveShopperHeaders()), so each shopper gets its own cookie
+// jar instead of one shopper's session leaking into another's requests when
+// a single SDK instance serves many shoppers concurrently (shopperScope:
+// 'per-request'). Portal/scanner calls carry no such header and fall back to
+// the single default slot, matching prior behavior.
+const DEFAULT_COOKIE_KEY = "__default__";
+const MAX_COOKIE_ENTRIES = 10000;
+const cookiesByKey = new Map();
+const getCookieKey = (options) => {
+    var _a, _b;
+    const shopperguid = (_a = options.headers) === null || _a === void 0 ? void 0 : _a["shopperguid"];
+    const accountid = (_b = options.headers) === null || _b === void 0 ? void 0 : _b["accountid"];
+    if (isStringWithValue(shopperguid)) {
+        return `${shopperguid}:${isStringWithValue(accountid) ? accountid : ""}`;
+    }
+    return DEFAULT_COOKIE_KEY;
+};
+const storeCookie = (key, value) => {
+    if (!cookiesByKey.has(key) && cookiesByKey.size >= MAX_COOKIE_ENTRIES) {
+        // Evict the oldest entry (Map preserves insertion order) to bound memory
+        // on a long-running, many-shopper backend process.
+        const oldestKey = cookiesByKey.keys().next().value;
+        if (oldestKey !== undefined) {
+            cookiesByKey.delete(oldestKey);
+        }
+    }
+    cookiesByKey.set(key, value);
+};
 /**
  * Wraps sendRequest to capture cookies on login
  * and attach cookies on other requests
@@ -241,6 +273,7 @@ export const request = (config, options) => {
             const url = getUrl(config, options);
             const formData = getFormData(options);
             const body = getRequestBody(options);
+            const cookieKey = getCookieKey(options);
             // Before making headers, possibly attach cookie if we have it
             const baseHeaders = await getHeaders(config, options);
             // We will build combined headers
@@ -248,9 +281,10 @@ export const request = (config, options) => {
             baseHeaders.forEach((value, key) => {
                 headerObj[key] = value;
             });
-            if (globalCookieHeader) {
+            const storedCookie = cookiesByKey.get(cookieKey);
+            if (storedCookie) {
                 // Attach stored cookie
-                headerObj["Cookie"] = globalCookieHeader;
+                headerObj["Cookie"] = storedCookie;
             }
             const headers = new Headers(headerObj);
             if (!onCancel.isCancelled) {
@@ -259,7 +293,7 @@ export const request = (config, options) => {
                 const setCookie = response.headers.get("set-cookie");
                 if (setCookie) {
                     // Overwrite or append as needed
-                    globalCookieHeader = setCookie;
+                    storeCookie(cookieKey, setCookie);
                 }
                 const responseBody = await getResponseBody(response);
                 const responseHeader = getResponseHeader(response, options.responseHeader);

package/dist/esm/src/generated/scanner/core/OpenAPI.js

@@ -1,6 +1,6 @@
 export const OpenAPI = {
     BASE: 'https://api.drttix.com/scanner-v3',
-    VERSION: '20260307.1',
+    VERSION: '20260625.1',
     WITH_CREDENTIALS: false,
     CREDENTIALS: 'include',
     TOKEN: undefined,

package/dist/esm/src/generated/scanner/core/request.js

@@ -194,13 +194,16 @@ export const getResponseBody = async (response) => {
             const contentType = response.headers.get("Content-Type");
             if (contentType) {
                 const jsonTypes = ["application/json", "application/problem+json"];
-                const isJSON = jsonTypes.some((type) => contentType.toLowerCase().startsWith(type));
+                const lc = contentType.toLowerCase();
+                const isJSON = jsonTypes.some((type) => lc.startsWith(type));
                 if (isJSON) {
                     return await response.json();
                 }
-                else {
-                    return await response.text();
+                // Return Blob for PDF / binary responses
+                if (lc.startsWith('application/pdf') || lc.startsWith('application/octet-stream')) {
+                    return await response.blob();
                 }
+                return await response.text();
             }
         }
         catch (error) {
@@ -230,7 +233,36 @@ export const catchErrorCodes = (options, result) => {
         throw new ApiError(options, result, `Generic Error: status: ${errorStatus}; status text: ${errorStatusText}; body: ${errorBody}`);
     }
 };
-let globalCookieHeader;
+// Cookies are cached per request "identity" rather than in one shared slot.
+// Shopper calls carry shopperguid/accountid in options.headers (resolved
+// per-call by resolveShopperHeaders()), so each shopper gets its own cookie
+// jar instead of one shopper's session leaking into another's requests when
+// a single SDK instance serves many shoppers concurrently (shopperScope:
+// 'per-request'). Portal/scanner calls carry no such header and fall back to
+// the single default slot, matching prior behavior.
+const DEFAULT_COOKIE_KEY = "__default__";
+const MAX_COOKIE_ENTRIES = 10000;
+const cookiesByKey = new Map();
+const getCookieKey = (options) => {
+    var _a, _b;
+    const shopperguid = (_a = options.headers) === null || _a === void 0 ? void 0 : _a["shopperguid"];
+    const accountid = (_b = options.headers) === null || _b === void 0 ? void 0 : _b["accountid"];
+    if (isStringWithValue(shopperguid)) {
+        return `${shopperguid}:${isStringWithValue(accountid) ? accountid : ""}`;
+    }
+    return DEFAULT_COOKIE_KEY;
+};
+const storeCookie = (key, value) => {
+    if (!cookiesByKey.has(key) && cookiesByKey.size >= MAX_COOKIE_ENTRIES) {
+        // Evict the oldest entry (Map preserves insertion order) to bound memory
+        // on a long-running, many-shopper backend process.
+        const oldestKey = cookiesByKey.keys().next().value;
+        if (oldestKey !== undefined) {
+            cookiesByKey.delete(oldestKey);
+        }
+    }
+    cookiesByKey.set(key, value);
+};
 /**
  * Wraps sendRequest to capture cookies on login
  * and attach cookies on other requests
@@ -241,6 +273,7 @@ export const request = (config, options) => {
             const url = getUrl(config, options);
             const formData = getFormData(options);
             const body = getRequestBody(options);
+            const cookieKey = getCookieKey(options);
             // Before making headers, possibly attach cookie if we have it
             const baseHeaders = await getHeaders(config, options);
             // We will build combined headers
@@ -248,9 +281,10 @@ export const request = (config, options) => {
             baseHeaders.forEach((value, key) => {
                 headerObj[key] = value;
             });
-            if (globalCookieHeader) {
+            const storedCookie = cookiesByKey.get(cookieKey);
+            if (storedCookie) {
                 // Attach stored cookie
-                headerObj["Cookie"] = globalCookieHeader;
+                headerObj["Cookie"] = storedCookie;
             }
             const headers = new Headers(headerObj);
             if (!onCancel.isCancelled) {
@@ -259,7 +293,7 @@ export const request = (config, options) => {
                 const setCookie = response.headers.get("set-cookie");
                 if (setCookie) {
                     // Overwrite or append as needed
-                    globalCookieHeader = setCookie;
+                    storeCookie(cookieKey, setCookie);
                 }
                 const responseBody = await getResponseBody(response);
                 const responseHeader = getResponseHeader(response, options.responseHeader);

package/dist/esm/src/generated/scanner/index.d.ts

@@ -11,6 +11,7 @@ export type { EventSkin } from './models/EventSkin';
 export type { MobileReceiptResponse } from './models/MobileReceiptResponse';
 export type { OrderDetails } from './models/OrderDetails';
 export type { OrderProduct } from './models/OrderProduct';
+export type { OrderScan } from './models/OrderScan';
 export type { OrderSeat } from './models/OrderSeat';
 export type { OrderSummary } from './models/OrderSummary';
 export type { Product } from './models/Product';

package/dist/esm/src/generated/scanner/models/OrderScan.d.ts

@@ -0,0 +1,9 @@
+import type { TicketScan } from './TicketScan';
+export type OrderScan = {
+    valid: boolean;
+    message: string;
+    oid: number;
+    scannedCount: number;
+    remainingTickets: number;
+    tickets: Array<TicketScan>;
+};

package/dist/esm/src/generated/scanner/models/OrderScan.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/src/generated/scanner/models/TicketScan.d.ts

@@ -16,4 +16,5 @@ export type TicketScan = {
     seat: number | null;
     tsScanned: number;
     dateScanned: string | null;
+    remainingTickets: number | null;
 };

package/dist/esm/src/generated/scanner/services/ScanningService.d.ts

@@ -1,6 +1,7 @@
 import type { EventResponse } from '../models/EventResponse';
 import type { MobileReceiptResponse } from '../models/MobileReceiptResponse';
 import type { OrderDetails } from '../models/OrderDetails';
+import type { OrderScan } from '../models/OrderScan';
 import type { ProductQR } from '../models/ProductQR';
 import type { ProductScan } from '../models/ProductScan';
 import type { ReceiptResponse } from '../models/ReceiptResponse';
@@ -100,6 +101,21 @@ export declare class ScanningService {
      * @throws ApiError
      */
     static appControllerGetOrder(c: string, oid: number, type: 'seats' | 'merch', lang?: any): CancelablePromise<OrderDetails>;
+    /**
+     * Used to scan every remaining ticket in an order
+     * Scans all unscanned tickets in an order and returns an OrderScan object summarizing the results
+     * @param c Show code
+     * @param devicename The name of the device issuing the request
+     * @param requestBody The order to scan, identified by orderId
+     * @param lang Language for error messages to be returned in
+     * @returns OrderScan Scans the order and returns the scan information.
+     * @throws ApiError
+     */
+    static appControllerScanEntireOrder(c: string, devicename: string, requestBody: {
+        orderId?: {
+            oid?: number;
+        };
+    }, lang?: string): CancelablePromise<OrderScan>;
     /**
      * Used to get a show by its showCode
      * Returns details for a single event.

package/dist/esm/src/generated/scanner/services/ScanningService.js

@@ -226,6 +226,34 @@ export class ScanningService {
             },
         });
     }
+    /**
+     * Used to scan every remaining ticket in an order
+     * Scans all unscanned tickets in an order and returns an OrderScan object summarizing the results
+     * @param c Show code
+     * @param devicename The name of the device issuing the request
+     * @param requestBody The order to scan, identified by orderId
+     * @param lang Language for error messages to be returned in
+     * @returns OrderScan Scans the order and returns the scan information.
+     * @throws ApiError
+     */
+    static appControllerScanEntireOrder(c, devicename, requestBody, lang) {
+        return __request(OpenAPI, {
+            method: 'POST',
+            url: '/order',
+            query: {
+                'c': c,
+                'devicename': devicename,
+                'lang': lang,
+            },
+            body: requestBody,
+            mediaType: 'application/json',
+            errors: {
+                400: `Bad Request error with error details.`,
+                404: `Not found error with error details.`,
+                500: `Internal Server Error, please contact developers.`,
+            },
+        });
+    }
     /**
      * Used to get a show by its showCode
      * Returns details for a single event.

package/dist/esm/src/generated/scanner/types.d.ts

@@ -7,6 +7,7 @@ export type { EventSkin } from './models/EventSkin';
 export type { MobileReceiptResponse } from './models/MobileReceiptResponse';
 export type { OrderDetails } from './models/OrderDetails';
 export type { OrderProduct } from './models/OrderProduct';
+export type { OrderScan } from './models/OrderScan';
 export type { OrderSeat } from './models/OrderSeat';
 export type { OrderSummary } from './models/OrderSummary';
 export type { Product } from './models/Product';

package/dist/esm/src/generated/shopper/core/OpenAPI.js

@@ -1,6 +1,6 @@
 export const OpenAPI = {
     BASE: 'https://api.drttix.com/shopper',
-    VERSION: '20260622.1',
+    VERSION: '20260629.1',
     WITH_CREDENTIALS: false,
     CREDENTIALS: 'include',
     TOKEN: undefined,

package/dist/esm/src/generated/shopper/core/request.js

@@ -194,13 +194,16 @@ export const getResponseBody = async (response) => {
             const contentType = response.headers.get("Content-Type");
             if (contentType) {
                 const jsonTypes = ["application/json", "application/problem+json"];
-                const isJSON = jsonTypes.some((type) => contentType.toLowerCase().startsWith(type));
+                const lc = contentType.toLowerCase();
+                const isJSON = jsonTypes.some((type) => lc.startsWith(type));
                 if (isJSON) {
                     return await response.json();
                 }
-                else {
-                    return await response.text();
+                // Return Blob for PDF / binary responses
+                if (lc.startsWith('application/pdf') || lc.startsWith('application/octet-stream')) {
+                    return await response.blob();
                 }
+                return await response.text();
             }
         }
         catch (error) {
@@ -230,7 +233,36 @@ export const catchErrorCodes = (options, result) => {
         throw new ApiError(options, result, `Generic Error: status: ${errorStatus}; status text: ${errorStatusText}; body: ${errorBody}`);
     }
 };
-let globalCookieHeader;
+// Cookies are cached per request "identity" rather than in one shared slot.
+// Shopper calls carry shopperguid/accountid in options.headers (resolved
+// per-call by resolveShopperHeaders()), so each shopper gets its own cookie
+// jar instead of one shopper's session leaking into another's requests when
+// a single SDK instance serves many shoppers concurrently (shopperScope:
+// 'per-request'). Portal/scanner calls carry no such header and fall back to
+// the single default slot, matching prior behavior.
+const DEFAULT_COOKIE_KEY = "__default__";
+const MAX_COOKIE_ENTRIES = 10000;
+const cookiesByKey = new Map();
+const getCookieKey = (options) => {
+    var _a, _b;
+    const shopperguid = (_a = options.headers) === null || _a === void 0 ? void 0 : _a["shopperguid"];
+    const accountid = (_b = options.headers) === null || _b === void 0 ? void 0 : _b["accountid"];
+    if (isStringWithValue(shopperguid)) {
+        return `${shopperguid}:${isStringWithValue(accountid) ? accountid : ""}`;
+    }
+    return DEFAULT_COOKIE_KEY;
+};
+const storeCookie = (key, value) => {
+    if (!cookiesByKey.has(key) && cookiesByKey.size >= MAX_COOKIE_ENTRIES) {
+        // Evict the oldest entry (Map preserves insertion order) to bound memory
+        // on a long-running, many-shopper backend process.
+        const oldestKey = cookiesByKey.keys().next().value;
+        if (oldestKey !== undefined) {
+            cookiesByKey.delete(oldestKey);
+        }
+    }
+    cookiesByKey.set(key, value);
+};
 /**
  * Wraps sendRequest to capture cookies on login
  * and attach cookies on other requests
@@ -241,6 +273,7 @@ export const request = (config, options) => {
             const url = getUrl(config, options);
             const formData = getFormData(options);
             const body = getRequestBody(options);
+            const cookieKey = getCookieKey(options);
             // Before making headers, possibly attach cookie if we have it
             const baseHeaders = await getHeaders(config, options);
             // We will build combined headers
@@ -248,9 +281,10 @@ export const request = (config, options) => {
             baseHeaders.forEach((value, key) => {
                 headerObj[key] = value;
             });
-            if (globalCookieHeader) {
+            const storedCookie = cookiesByKey.get(cookieKey);
+            if (storedCookie) {
                 // Attach stored cookie
-                headerObj["Cookie"] = globalCookieHeader;
+                headerObj["Cookie"] = storedCookie;
             }
             const headers = new Headers(headerObj);
             if (!onCancel.isCancelled) {
@@ -259,7 +293,7 @@ export const request = (config, options) => {
                 const setCookie = response.headers.get("set-cookie");
                 if (setCookie) {
                     // Overwrite or append as needed
-                    globalCookieHeader = setCookie;
+                    storeCookie(cookieKey, setCookie);
                 }
                 const responseBody = await getResponseBody(response);
                 const responseHeader = getResponseHeader(response, options.responseHeader);