@ecomiq/storefront 0.1.1 → 1.0.0

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+
+declare const EcomiqConfigSchema: z.ZodObject<{
+    /**
+     * Slug de tienda en Ecomiq (p. ej. `mi-tienda` para `mi-tienda.ecomiq.app`).
+     * Si está definido, tiene prioridad sobre el `Host` de la request (útil en `localhost`).
+     */
+    slugStore: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    slugStore?: string | undefined;
+}, {
+    slugStore?: string | undefined;
+}>;
+type EcomiqConfig = z.infer<typeof EcomiqConfigSchema>;
+/**
+ * Carga `ecomiq.config.js` (o `.cjs` / `.mjs`) desde la raíz del proyecto (`process.cwd()`).
+ * Resultado en caché por proceso.
+ */
+declare function loadEcomiqConfig(cwd?: string): EcomiqConfig | null;
+/** Limpia la caché (tests o recarga en dev). */
+declare function clearEcomiqConfigCache(): void;
+/**
+ * Identificador de tienda para settings (API / KV).
+ * 1. `slugStore` en `ecomiq.config.*` si existe.
+ * 2. Si no, deriva del header `Host` (`resolveStorefrontSettingsHost`).
+ */
+declare function resolvePublicStoreKey(hostHeader: string | null | undefined, cwd?: string): string;
+declare function hasEcomiqSlugStoreConfig(cwd?: string): boolean;
+
+export { type EcomiqConfig, EcomiqConfigSchema, clearEcomiqConfigCache, hasEcomiqSlugStoreConfig, loadEcomiqConfig, resolvePublicStoreKey };

package/dist/index.js

@@ -0,0 +1,103 @@
+import { existsSync } from 'fs';
+import { createRequire } from 'module';
+import { join } from 'path';
+import { z } from 'zod';
+import '@opennextjs/cloudflare';
+import '@ecomiq/storefront/core';
+
+// src/core/config/ecomiq-config.ts
+var ECOMIQ_APP_APEX = "ecomiq.app";
+var ECOMIQ_APP_SUFFIX = [`.${ECOMIQ_APP_APEX}`, `.localhost`];
+function normalizeStoreHost(hostHeader) {
+  let h = hostHeader.trim().toLowerCase();
+  const colon = h.indexOf(":");
+  if (colon !== -1) h = h.slice(0, colon);
+  if (h.startsWith("www.")) h = h.slice(4);
+  return h;
+}
+function resolveStorefrontSettingsHost(hostHeader) {
+  const host = normalizeStoreHost(hostHeader);
+  if (!host) {
+    throw Object.assign(new Error("Host inv\xE1lido para tienda"), { status: 400 });
+  }
+  if (host === ECOMIQ_APP_APEX) {
+    throw Object.assign(new Error("Host apex ecomiq.app sin slug de tienda"), { status: 400 });
+  }
+  if (ECOMIQ_APP_SUFFIX.some((suffix) => host.endsWith(suffix))) {
+    const slug = host.slice(0, -(ECOMIQ_APP_SUFFIX.find((suffix) => host.endsWith(suffix))?.length ?? 0));
+    if (!slug) {
+      throw Object.assign(new Error("Host sin slug para ecomiq.app"), { status: 400 });
+    }
+    return slug;
+  }
+  return host;
+}
+
+// src/core/config/ecomiq-config.ts
+var CONFIG_FILENAMES = [
+  "ecomiq.config.js",
+  "ecomiq.config.cjs",
+  "ecomiq.config.mjs"
+];
+var EcomiqConfigSchema = z.object({
+  /**
+   * Slug de tienda en Ecomiq (p. ej. `mi-tienda` para `mi-tienda.ecomiq.app`).
+   * Si está definido, tiene prioridad sobre el `Host` de la request (útil en `localhost`).
+   */
+  slugStore: z.string().min(1).optional()
+});
+var cachedConfig;
+function parseExportedConfig(raw) {
+  const candidate = raw && typeof raw === "object" && "default" in raw ? raw.default : raw;
+  const parsed = EcomiqConfigSchema.safeParse(candidate);
+  if (!parsed.success) {
+    console.warn(
+      "[ecomiq] ecomiq.config.* inv\xE1lido:",
+      parsed.error.flatten().fieldErrors
+    );
+    return null;
+  }
+  const slugStore = parsed.data.slugStore?.trim();
+  return slugStore ? { slugStore } : {};
+}
+function loadEcomiqConfig(cwd = process.cwd()) {
+  if (cachedConfig !== void 0) return cachedConfig;
+  for (const filename of CONFIG_FILENAMES) {
+    const configPath = join(cwd, filename);
+    if (!existsSync(configPath)) continue;
+    try {
+      const requireFromApp = createRequire(join(cwd, "package.json"));
+      const loaded = requireFromApp(configPath);
+      const parsed = parseExportedConfig(loaded);
+      cachedConfig = parsed;
+      return cachedConfig;
+    } catch (error) {
+      console.warn(`[ecomiq] No se pudo cargar ${configPath}:`, error);
+    }
+  }
+  cachedConfig = null;
+  return null;
+}
+function clearEcomiqConfigCache() {
+  cachedConfig = void 0;
+}
+function resolvePublicStoreKey(hostHeader, cwd) {
+  const slugFromConfig = loadEcomiqConfig(cwd)?.slugStore?.trim();
+  if (slugFromConfig) return slugFromConfig;
+  if (!hostHeader?.trim()) {
+    throw Object.assign(
+      new Error(
+        "Host is required, o define slugStore en ecomiq.config.js en la ra\xEDz del proyecto"
+      ),
+      { status: 400 }
+    );
+  }
+  return resolveStorefrontSettingsHost(hostHeader);
+}
+function hasEcomiqSlugStoreConfig(cwd) {
+  return Boolean(loadEcomiqConfig(cwd)?.slugStore?.trim());
+}
+
+export { EcomiqConfigSchema, clearEcomiqConfigCache, hasEcomiqSlugStoreConfig, loadEcomiqConfig, resolvePublicStoreKey };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/client/storefront-settings-kv.service.ts","../src/core/config/ecomiq-config.ts"],"names":[],"mappings":";;;;;;;;AAOA,IAAM,eAAA,GAAkB,YAAA;AACxB,IAAM,iBAAA,GAAoB,CAAC,CAAA,CAAA,EAAI,eAAe,IAAI,CAAA,UAAA,CAAY,CAAA;AAOvD,SAAS,mBAAmB,UAAA,EAA4B;AAC7D,EAAA,IAAI,CAAA,GAAI,UAAA,CAAW,IAAA,EAAK,CAAE,WAAA,EAAY;AACtC,EAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,OAAA,CAAQ,GAAG,CAAA;AAC3B,EAAA,IAAI,UAAU,EAAA,EAAI,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,GAAG,KAAK,CAAA;AACtC,EAAA,IAAI,EAAE,UAAA,CAAW,MAAM,GAAG,CAAA,GAAI,CAAA,CAAE,MAAM,CAAC,CAAA;AACvC,EAAA,OAAO,CAAA;AACT;AAMO,SAAS,8BAA8B,UAAA,EAA4B;AACxE,EAAA,MAAM,IAAA,GAAO,mBAAmB,UAAU,CAAA;AAC1C,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,MAAM,MAAA,CAAO,OAAO,IAAI,KAAA,CAAM,8BAA2B,CAAA,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAC7E;AACA,EAAA,IAAI,SAAS,eAAA,EAAiB;AAC5B,IAAA,MAAM,MAAA,CAAO,OAAO,IAAI,KAAA,CAAM,yCAAyC,CAAA,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,EAC3F;AACA,EAAA,IAAI,kBAAkB,IAAA,CAAK,CAAA,MAAA,KAAU,KAAK,QAAA,CAAS,MAAM,CAAC,CAAA,EAAG;AAC3D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,iBAAA,CAAkB,IAAA,CAAK,CAAA,MAAA,KAAU,IAAA,CAAK,QAAA,CAAS,MAAM,CAAC,CAAA,EAAG,UAAU,CAAA,CAAE,CAAA;AAClG,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,MAAM,MAAA,CAAO,OAAO,IAAI,KAAA,CAAM,+BAA+B,CAAA,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IACjF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;;;ACrCA,IAAM,gBAAA,GAAmB;AAAA,EACvB,kBAAA;AAAA,EACA,mBAAA;AAAA,EACA;AACF,CAAA;AAEO,IAAM,kBAAA,GAAqB,EAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKzC,WAAW,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA;AAC/B,CAAC;AAID,IAAI,YAAA;AAEJ,SAAS,oBAAoB,GAAA,EAAmC;AAC9D,EAAA,MAAM,SAAA,GACJ,OAAO,OAAO,GAAA,KAAQ,YAAY,SAAA,IAAc,GAAA,GAC3C,IAA6B,OAAA,GAC9B,GAAA;AACN,EAAA,MAAM,MAAA,GAAS,kBAAA,CAAmB,SAAA,CAAU,SAAS,CAAA;AACrD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,OAAA,CAAQ,IAAA;AAAA,MACN,uCAAA;AAAA,MACA,MAAA,CAAO,KAAA,CAAM,OAAA,EAAQ,CAAE;AAAA,KACzB;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,IAAA,EAAK;AAC9C,EAAA,OAAO,SAAA,GAAY,EAAE,SAAA,EAAU,GAAI,EAAC;AACtC;AAMO,SAAS,gBAAA,CAAiB,GAAA,GAAM,OAAA,CAAQ,GAAA,EAAI,EAAwB;AACzE,EAAA,IAAI,YAAA,KAAiB,QAAW,OAAO,YAAA;AAEvC,EAAA,KAAA,MAAW,YAAY,gBAAA,EAAkB;AACvC,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,GAAA,EAAK,QAAQ,CAAA;AACrC,IAAA,IAAI,CAAC,UAAA,CAAW,UAAU,CAAA,EAAG;AAE7B,IAAA,IAAI;AACF,MAAA,MAAM,cAAA,GAAiB,aAAA,CAAc,IAAA,CAAK,GAAA,EAAK,cAAc,CAAC,CAAA;AAC9D,MAAA,MAAM,MAAA,GAAS,eAAe,UAAU,CAAA;AACxC,MAAA,MAAM,MAAA,GAAS,oBAAoB,MAAM,CAAA;AACzC,MAAA,YAAA,GAAe,MAAA;AACf,MAAA,OAAO,YAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,2BAAA,EAA8B,UAAU,CAAA,CAAA,CAAA,EAAK,KAAK,CAAA;AAAA,IACjE;AAAA,EACF;AAEA,EAAA,YAAA,GAAe,IAAA;AACf,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,sBAAA,GAA+B;AAC7C,EAAA,YAAA,GAAe,MAAA;AACjB;AAOO,SAAS,qBAAA,CACd,YACA,GAAA,EACQ;AACR,EAAA,MAAM,cAAA,GAAiB,gBAAA,CAAiB,GAAG,CAAA,EAAG,WAAW,IAAA,EAAK;AAC9D,EAAA,IAAI,gBAAgB,OAAO,cAAA;AAE3B,EAAA,IAAI,CAAC,UAAA,EAAY,IAAA,EAAK,EAAG;AACvB,IAAA,MAAM,MAAA,CAAO,MAAA;AAAA,MACX,IAAI,KAAA;AAAA,QACF;AAAA,OACF;AAAA,MACA,EAAE,QAAQ,GAAA;AAAI,KAChB;AAAA,EACF;AAEA,EAAA,OAAO,8BAA8B,UAAU,CAAA;AACjD;AAEO,SAAS,yBAAyB,GAAA,EAAuB;AAC9D,EAAA,OAAO,QAAQ,gBAAA,CAAiB,GAAG,CAAA,EAAG,SAAA,EAAW,MAAM,CAAA;AACzD","file":"index.js","sourcesContent":["import { getCloudflareContext } from \"@opennextjs/cloudflare\";\nimport { StorefrontSettingsSchema } from \"@ecomiq/storefront/core\";\nimport type { StorefrontSettings } from \"@ecomiq/storefront/core\";\n\n/** Debe coincidir con el `binding` en wrangler.jsonc (`kv_namespaces`). */\nexport const ECOMIQ_CLIENTS_STORE_KV_BINDING = \"ecomiq_clients_store\" as const;\n\nconst ECOMIQ_APP_APEX = \"ecomiq.app\";\nconst ECOMIQ_APP_SUFFIX = [`.${ECOMIQ_APP_APEX}`, `.localhost`];\n\ntype KvJsonGet = {\n  get(key: string, options: { type: \"json\" }): Promise<unknown>;\n};\n\n/** Host sin puerto, minúsculas, sin `www.`. */\nexport function normalizeStoreHost(hostHeader: string): string {\n  let h = hostHeader.trim().toLowerCase();\n  const colon = h.indexOf(\":\");\n  if (colon !== -1) h = h.slice(0, colon);\n  if (h.startsWith(\"www.\")) h = h.slice(4);\n  return h;\n}\n\n/**\n * Identificador de tienda a partir del `Host`: slug en `*.ecomiq.app`, FQDN en dominio propio.\n * Misma semántica que el sufijo de `buildStorefrontKvSnapshotKey` (sin el prefijo KV).\n */\nexport function resolveStorefrontSettingsHost(hostHeader: string): string {\n  const host = normalizeStoreHost(hostHeader);\n  if (!host) {\n    throw Object.assign(new Error(\"Host inválido para tienda\"), { status: 400 });\n  }\n  if (host === ECOMIQ_APP_APEX) {\n    throw Object.assign(new Error(\"Host apex ecomiq.app sin slug de tienda\"), { status: 400 });\n  }\n  if (ECOMIQ_APP_SUFFIX.some(suffix => host.endsWith(suffix))) {\n    const slug = host.slice(0, -(ECOMIQ_APP_SUFFIX.find(suffix => host.endsWith(suffix))?.length ?? 0));\n    if (!slug) {\n      throw Object.assign(new Error(\"Host sin slug para ecomiq.app\"), { status: 400 });\n    }\n    return slug;\n  }\n  return host;\n}\n\n/**\n * Clave KV del snapshot de tienda.\n * - `*.ecomiq.app` → `storefront:snapshots:store:<slug>` (todo lo que va antes de `.ecomiq.app`, p. ej. `plata950`).\n * - Dominio propio (p. ej. `plata950.com`) → `storefront:snapshots:store:<dominio completo>`.\n */\nexport function buildStorefrontKvSnapshotKeyFromStoreKey(storeKey: string): string {\n  const key = storeKey.trim();\n  if (!key) {\n    throw Object.assign(new Error(\"Store key vacío para KV\"), { status: 400 });\n  }\n  return `storefront:snapshots:store:${key}`;\n}\n\nexport function buildStorefrontKvSnapshotKey(hostHeader: string): string {\n  return buildStorefrontKvSnapshotKeyFromStoreKey(\n    resolveStorefrontSettingsHost(hostHeader),\n  );\n}\n\nfunction getKvNamespace(env: unknown): KvJsonGet | undefined {\n  if (!env || typeof env !== \"object\") return undefined;\n  const ns = (env as Record<string, unknown>)[ECOMIQ_CLIENTS_STORE_KV_BINDING];\n  if (!ns || typeof ns !== \"object\" || typeof (ns as KvJsonGet).get !== \"function\") {\n    return undefined;\n  }\n  return ns as KvJsonGet;\n}\n\n/**\n * Lee settings desde KV con clave ya resuelta (slug o dominio).\n */\nexport async function getStorefrontSettingsFromKvByStoreKey(\n  storeKey: string,\n): Promise<StorefrontSettings> {\n  const { env } = await getCloudflareContext({ async: true });\n  const kv = getKvNamespace(env);\n  if (!kv) {\n    const err = new Error(\n      `Binding KV \"${ECOMIQ_CLIENTS_STORE_KV_BINDING}\" no encontrado. Configura kv_namespaces en wrangler.`\n    );\n    throw Object.assign(err, { status: 500 });\n  }\n\n  const cacheKey = buildStorefrontKvSnapshotKeyFromStoreKey(storeKey);\n  const raw = await kv.get(cacheKey, { type: \"json\" });\n  if (raw == null) {\n    const err = new Error(\"Store settings not found in KV\");\n    throw Object.assign(err, { status: 404 });\n  }\n\n  return StorefrontSettingsSchema.parse(raw);\n}\n\n/**\n * Lee settings desde KV (`ecomiq_clients_store`) usando la clave según el host.\n */\nexport async function getStorefrontSettingsFromKv(hostHeader: string): Promise<StorefrontSettings> {\n  return getStorefrontSettingsFromKvByStoreKey(\n    resolveStorefrontSettingsHost(hostHeader),\n  );\n}\n","import { existsSync } from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport { join } from \"node:path\";\nimport { z } from \"zod\";\nimport { resolveStorefrontSettingsHost } from \"../client/storefront-settings-kv.service\";\n\nconst CONFIG_FILENAMES = [\n  \"ecomiq.config.js\",\n  \"ecomiq.config.cjs\",\n  \"ecomiq.config.mjs\",\n] as const;\n\nexport const EcomiqConfigSchema = z.object({\n  /**\n   * Slug de tienda en Ecomiq (p. ej. `mi-tienda` para `mi-tienda.ecomiq.app`).\n   * Si está definido, tiene prioridad sobre el `Host` de la request (útil en `localhost`).\n   */\n  slugStore: z.string().min(1).optional(),\n});\n\nexport type EcomiqConfig = z.infer<typeof EcomiqConfigSchema>;\n\nlet cachedConfig: EcomiqConfig | null | undefined;\n\nfunction parseExportedConfig(raw: unknown): EcomiqConfig | null {\n  const candidate =\n    raw && typeof raw === \"object\" && \"default\" in (raw as object)\n      ? (raw as { default: unknown }).default\n      : raw;\n  const parsed = EcomiqConfigSchema.safeParse(candidate);\n  if (!parsed.success) {\n    console.warn(\n      \"[ecomiq] ecomiq.config.* inválido:\",\n      parsed.error.flatten().fieldErrors,\n    );\n    return null;\n  }\n  const slugStore = parsed.data.slugStore?.trim();\n  return slugStore ? { slugStore } : {};\n}\n\n/**\n * Carga `ecomiq.config.js` (o `.cjs` / `.mjs`) desde la raíz del proyecto (`process.cwd()`).\n * Resultado en caché por proceso.\n */\nexport function loadEcomiqConfig(cwd = process.cwd()): EcomiqConfig | null {\n  if (cachedConfig !== undefined) return cachedConfig;\n\n  for (const filename of CONFIG_FILENAMES) {\n    const configPath = join(cwd, filename);\n    if (!existsSync(configPath)) continue;\n\n    try {\n      const requireFromApp = createRequire(join(cwd, \"package.json\"));\n      const loaded = requireFromApp(configPath) as unknown;\n      const parsed = parseExportedConfig(loaded);\n      cachedConfig = parsed;\n      return cachedConfig;\n    } catch (error) {\n      console.warn(`[ecomiq] No se pudo cargar ${configPath}:`, error);\n    }\n  }\n\n  cachedConfig = null;\n  return null;\n}\n\n/** Limpia la caché (tests o recarga en dev). */\nexport function clearEcomiqConfigCache(): void {\n  cachedConfig = undefined;\n}\n\n/**\n * Identificador de tienda para settings (API / KV).\n * 1. `slugStore` en `ecomiq.config.*` si existe.\n * 2. Si no, deriva del header `Host` (`resolveStorefrontSettingsHost`).\n */\nexport function resolvePublicStoreKey(\n  hostHeader: string | null | undefined,\n  cwd?: string,\n): string {\n  const slugFromConfig = loadEcomiqConfig(cwd)?.slugStore?.trim();\n  if (slugFromConfig) return slugFromConfig;\n\n  if (!hostHeader?.trim()) {\n    throw Object.assign(\n      new Error(\n        \"Host is required, o define slugStore en ecomiq.config.js en la raíz del proyecto\",\n      ),\n      { status: 400 },\n    );\n  }\n\n  return resolveStorefrontSettingsHost(hostHeader);\n}\n\nexport function hasEcomiqSlugStoreConfig(cwd?: string): boolean {\n  return Boolean(loadEcomiqConfig(cwd)?.slugStore?.trim());\n}\n"]}

package/dist/nextjs/api.d.ts

@@ -1,24 +1,20 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { S as StoreProxyHandlerConfig } from '../store-proxy-handler-CNzKlTFA.js';
 
-type StoreApiHandlerConfig = {
-    /**
-     * Base URL del API de storefront. Default: "https://storefront.ecomiq.pe"
-     */
-    apiBaseUrl?: string;
-};
+type StoreApiHandlerConfig = StoreProxyHandlerConfig;
 /**
  * Crea los handlers de ruta para montar la API de store como proxy en Next.js App Router.
- * La base /v1/storefront se maneja internamente: el usuario llama /api/store/products
- * y se hace proxy a https://storefront.ecomiq.pe/v1/storefront/products.
  *
- *   // app/api/store/[...path]/route.ts
- *   import { toNextJsStoreApiHandler } from "@ecomiq/storefront/nextjs/api";
+ * ```ts
+ * // app/api/store/[...path]/route.ts
+ * import { toNextJsStoreApiHandler } from "@ecomiq/storefront/nextjs/api";
  *
- *   export const { GET, POST, PUT, PATCH, DELETE } = toNextJsStoreApiHandler({
- *     apiBaseUrl: "https://storefront.ecomiq.pe", // opcional, es el default
- *   });
+ * export const { GET, POST, PUT, PATCH, DELETE } = toNextJsStoreApiHandler({
+ *   apiBaseUrl: process.env.STOREFRONT_API_URL,
+ * });
+ * ```
  */
-declare function toNextJsStoreApiHandler(config: StoreApiHandlerConfig): {
+declare function toNextJsStoreApiHandler(config?: StoreApiHandlerConfig): {
     GET: (request: NextRequest, context: {
         params: Promise<{
             path?: string[];

package/dist/nextjs/api.js

@@ -1,8 +1,18 @@
 import { NextResponse } from 'next/server';
-import { STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME, STOREFRONT_API_PATH_PREFIX } from '@ecomiq/storefront/core';
 
-// src/react/nextjs/api/store-handler.ts
+// src/react/frameworks/nextjs/api/store-handler.ts
+
+// src/core/constants/api-paths.ts
+var STOREFRONT_API_PATH_PREFIX = "v1";
+
+// src/core/constants/storefront-ecomiq-oauth-cookie.ts
+var STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME = "ecomiq_sf_oauth_at";
+
+// src/core/server/store-proxy-handler.ts
 var DEFAULT_API_BASE_URL = "https://storefront.ecomiq.pe";
+function jsonError(status, message, error) {
+  return Response.json({ error, message, status }, { status });
+}
 async function ensureStoreContext(request) {
   const xStoreId = request.headers.get("x-store-id")?.trim();
   const xStoreDomain = request.headers.get("x-store-domain")?.trim();
@@ -16,7 +26,11 @@ async function ensureStoreContext(request) {
   if (!xStoreId) {
     return {
       ok: false,
-      response: NextResponse.json({ error: "Store context required", message: "X-Store-Id is required", status: 400 })
+      response: jsonError(
+        400,
+        "X-Store-Id is required",
+        "Store context required"
+      )
     };
   }
   return {
@@ -32,17 +46,10 @@ var SKIP_FORWARD_HEADERS = /* @__PURE__ */ new Set([
   "transfer-encoding",
   "x-store-id",
   "x-store-domain",
-  /** Se reconstruye abajo desde el header entrante al proxy. */
   "authorization",
-  /** Nunca reenviar sesión/cookies del storefront al API Ecomiq (solo headers operativos). */
   "cookie",
   "cookie2",
   "set-cookie",
-  /**
-   * Headers de proxy/origen de Cloudflare: se reconstruyen abajo (X-Forwarded-*)
-   * para no contaminar la cadena con valores que el upstream no debe leer directamente
-   * y para garantizar que la IP del cliente final llegue como X-Forwarded-For.
-   */
   "x-forwarded-for",
   "x-forwarded-proto",
   "x-forwarded-host",
@@ -72,11 +79,23 @@ function getClientIp(request) {
   }
   return null;
 }
+function getCookieValue(request, name) {
+  const cookieHeader = request.headers.get("cookie");
+  if (!cookieHeader) return void 0;
+  for (const part of cookieHeader.split(";")) {
+    const [rawKey, ...rest] = part.trim().split("=");
+    if (rawKey?.trim() === name) {
+      return decodeURIComponent(rest.join("="));
+    }
+  }
+  return void 0;
+}
 function buildUpstreamRequest(request, pathSegments, config, storeId, storeDomain) {
+  const requestUrl = new URL(request.url);
   const base = (config.apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\/$/, "");
   const userPath = pathSegments.length ? pathSegments.join("/") : "";
   const path = userPath ? `${STOREFRONT_API_PATH_PREFIX}/${userPath}` : STOREFRONT_API_PATH_PREFIX;
-  const search = request.nextUrl.searchParams.toString();
+  const search = requestUrl.searchParams.toString();
   const url = search ? `${base}/${path}?${search}` : `${base}/${path}`;
   const headers = new Headers();
   request.headers.forEach((value, key) => {
@@ -93,14 +112,14 @@ function buildUpstreamRequest(request, pathSegments, config, storeId, storeDomai
   if (clientIp) {
     headers.set("X-Forwarded-For", clientIp);
   }
-  const forwardedProto = request.headers.get("cf-visitor")?.match(/"scheme":"(https?)"/)?.[1] ?? request.nextUrl.protocol.replace(":", "") ?? "https";
+  const forwardedProto = request.headers.get("cf-visitor")?.match(/"scheme":"(https?)"/)?.[1] ?? requestUrl.protocol.replace(":", "") ?? "https";
   headers.set("X-Forwarded-Proto", forwardedProto);
-  const forwardedHost = request.headers.get("host") ?? request.nextUrl.host;
+  const forwardedHost = request.headers.get("host") ?? requestUrl.host;
   if (forwardedHost) {
     headers.set("X-Forwarded-Host", forwardedHost);
   }
   const incomingAuth = request.headers.get("authorization")?.trim();
-  const storefrontOAuth = request.cookies.get(STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.value?.trim();
+  const storefrontOAuth = getCookieValue(request, STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.trim();
   if (incomingAuth && /^Bearer\s+\S+/i.test(incomingAuth)) {
     headers.set("Authorization", incomingAuth);
   } else if (storefrontOAuth) {
@@ -121,39 +140,53 @@ function buildUpstreamRequest(request, pathSegments, config, storeId, storeDomai
 function isResponseBodyForbidden(status) {
   return status === 204 || status === 205 || status === 304;
 }
-function toNextJsStoreApiHandler(config) {
+async function handleStoreProxyRequest(request, pathSegments, config = {}) {
+  const storeContext = await ensureStoreContext(request);
+  if (!storeContext.ok) {
+    return storeContext.response;
+  }
+  const { storeId, storeDomain } = storeContext;
+  const { url, init } = buildUpstreamRequest(
+    request,
+    pathSegments,
+    config,
+    storeId,
+    storeDomain
+  );
+  const upstream = await fetch(url, init);
+  const responseHeaders = new Headers(upstream.headers);
+  const status = upstream.status;
+  if (isResponseBodyForbidden(status)) {
+    responseHeaders.delete("content-length");
+    responseHeaders.delete("content-type");
+    return new Response(null, {
+      status,
+      statusText: upstream.statusText,
+      headers: responseHeaders
+    });
+  }
+  const body = await upstream.text();
+  return new Response(body, {
+    status,
+    statusText: upstream.statusText,
+    headers: responseHeaders
+  });
+}
+
+// src/react/frameworks/nextjs/api/store-handler.ts
+function toNextJsStoreApiHandler(config = {}) {
   const handler = async (request, context) => {
     const params = await context.params;
     const pathSegments = params.path ?? [];
-    const storeContext = await ensureStoreContext(request);
-    if (!storeContext.ok) {
-      return storeContext.response;
-    }
-    const { storeId, storeDomain } = storeContext;
-    const { url, init } = buildUpstreamRequest(
+    const response = await handleStoreProxyRequest(
       request,
       pathSegments,
-      config,
-      storeId,
-      storeDomain
+      config
     );
-    const upstream = await fetch(url, init);
-    const responseHeaders = new Headers(upstream.headers);
-    const status = upstream.status;
-    if (isResponseBodyForbidden(status)) {
-      responseHeaders.delete("content-length");
-      responseHeaders.delete("content-type");
-      return new NextResponse(null, {
-        status,
-        statusText: upstream.statusText,
-        headers: responseHeaders
-      });
-    }
-    const body = await upstream.text();
-    return new NextResponse(body, {
-      status,
-      statusText: upstream.statusText,
-      headers: responseHeaders
+    return new NextResponse(response.body, {
+      status: response.status,
+      statusText: response.statusText,
+      headers: response.headers
     });
   };
   return {

package/dist/nextjs/api.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/react/nextjs/api/store-handler.ts"],"names":[],"mappings":";;;;AAOA,IAAM,oBAAA,GAAuB,8BAAA;AAiB7B,eAAe,mBAAmB,OAAA,EAAmD;AACnF,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,IAAA,EAAK;AACzD,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,GAAG,IAAA,EAAK;AACjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,SAAS,QAAA,IAAY,EAAA;AAAA,MACrB,aAAa,YAAA,IAAgB;AAAA,KAC/B;AAAA,EACF;AACA,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,QAAA,EAAU,YAAA,CAAa,IAAA,CAAK,EAAE,KAAA,EAAO,0BAA0B,OAAA,EAAS,wBAAA,EAA0B,MAAA,EAAQ,GAAA,EAAK;AAAA,KACjH;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,SAAS,QAAA,IAAY,EAAA;AAAA,IACrB,aAAa,YAAA,IAAgB;AAAA,GAC/B;AACF;AAQA,IAAM,oBAAA,uBAA2B,GAAA,CAAI;AAAA,EACnC,MAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA;AAAA,EAEA,eAAA;AAAA;AAAA,EAEA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,YAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA,kBAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,kBAAA;AAAA,EACA,oBAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AAMD,SAAS,YAAY,OAAA,EAAqC;AACxD,EAAA,MAAM,UAAA,GAAa;AAAA,IACjB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AAAA,IACtC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAAA,IACpC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW;AAAA,GACjC;AACA,EAAA,KAAA,MAAW,SAAS,UAAA,EAAY;AAC9B,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAK;AAC5B,IAAA,IAAI,SAAS,OAAO,OAAA;AAAA,EACtB;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA;AACjD,EAAA,IAAI,GAAA,EAAK,MAAK,EAAG;AACf,IAAA,MAAM,QAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AACtC,IAAA,IAAI,OAAO,OAAO,KAAA;AAAA,EACpB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,oBAAA,CACP,OAAA,EACA,YAAA,EACA,MAAA,EACA,SACA,WAAA,EACoC;AACpC,EAAA,MAAM,QAAQ,MAAA,CAAO,UAAA,IAAc,oBAAA,EAAsB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC1E,EAAA,MAAM,WAAW,YAAA,CAAa,MAAA,GAAS,YAAA,CAAa,IAAA,CAAK,GAAG,CAAA,GAAI,EAAA;AAChE,EAAA,MAAM,OAAO,QAAA,GACT,CAAA,EAAG,0BAA0B,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,GACzC,0BAAA;AACJ,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,QAAA,EAAS;AACrD,EAAA,MAAM,GAAA,GAAM,MAAA,GAAS,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,GAAK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAElE,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AACtC,IAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY;AAC9B,IAAA,IAAI,CAAC,oBAAA,CAAqB,GAAA,CAAI,KAAK,CAAA,EAAG;AACpC,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IACxB;AAAA,EACF,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,GAAA,CAAI,cAAc,OAAO,CAAA;AACjC,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAA,CAAQ,GAAA,CAAI,kBAAkB,WAAW,CAAA;AAAA,EAC3C;AAMA,EAAA,MAAM,QAAA,GAAW,YAAY,OAAO,CAAA;AACpC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,QAAQ,CAAA;AAAA,EACzC;AACA,EAAA,MAAM,iBACJ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,KAAA,CAAM,qBAAqB,CAAA,GAAI,CAAC,KACnE,OAAA,CAAQ,OAAA,CAAQ,SAAS,OAAA,CAAQ,GAAA,EAAK,EAAE,CAAA,IACxC,OAAA;AACF,EAAA,OAAA,CAAQ,GAAA,CAAI,qBAAqB,cAAc,CAAA;AAC/C,EAAA,MAAM,gBACJ,OAAA,CAAQ,OAAA,CAAQ,IAAI,MAAM,CAAA,IAAK,QAAQ,OAAA,CAAQ,IAAA;AACjD,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,OAAA,CAAQ,GAAA,CAAI,oBAAoB,aAAa,CAAA;AAAA,EAC/C;AAEA,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,GAAG,IAAA,EAAK;AAChE,EAAA,MAAM,kBACJ,OAAA,CAAQ,OAAA,CAAQ,IAAI,mCAAmC,CAAA,EAAG,OAAO,IAAA,EAAK;AAExE,EAAA,IAAI,YAAA,IAAgB,gBAAA,CAAiB,IAAA,CAAK,YAAY,CAAA,EAAG;AACvD,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAiB,YAAY,CAAA;AAAA,EAC3C,WAAW,eAAA,EAAiB;AAC1B,IAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,eAAe,CAAA,CAAE,CAAA;AAAA,EAC1D;AACA,EAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,UAAU,CAAA;AAEzC,EAAA,MAAM,IAAA,GAA0C;AAAA,IAC9C,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB;AAAA,GACF;AAEA,EAAA,MAAM,WAAA,GAAc,CAAC,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA;AAC3C,EAAA,IAAI,YAAY,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,IAAK,QAAQ,IAAA,EAAM;AACxD,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAEA,EAAA,OAAO,EAAE,KAAK,IAAA,EAAK;AACrB;AAGA,SAAS,wBAAwB,MAAA,EAAyB;AACxD,EAAA,OAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA;AACxD;AAcO,SAAS,wBAAwB,MAAA,EAA+B;AACrE,EAAA,MAAM,OAAA,GAAU,OACd,OAAA,EACA,OAAA,KAC0B;AAC1B,IAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA;AAC7B,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,IAAQ,EAAC;AAErC,IAAA,MAAM,YAAA,GAAe,MAAM,kBAAA,CAAmB,OAAO,CAAA;AACrD,IAAA,IAAI,CAAC,aAAa,EAAA,EAAI;AACpB,MAAA,OAAO,YAAA,CAAa,QAAA;AAAA,IACtB;AAEA,IAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,YAAA;AACjC,IAAA,MAAM,EAAE,GAAA,EAAK,IAAA,EAAK,GAAI,oBAAA;AAAA,MACpB,OAAA;AAAA,MACA,YAAA;AAAA,MACA,MAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AACtC,IAAA,MAAM,eAAA,GAAkB,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA;AACpD,IAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AAExB,IAAA,IAAI,uBAAA,CAAwB,MAAM,CAAA,EAAG;AACnC,MAAA,eAAA,CAAgB,OAAO,gBAAgB,CAAA;AACvC,MAAA,eAAA,CAAgB,OAAO,cAAc,CAAA;AACrC,MAAA,OAAO,IAAI,aAAa,IAAA,EAAM;AAAA,QAC5B,MAAA;AAAA,QACA,YAAY,QAAA,CAAS,UAAA;AAAA,QACrB,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAI,aAAa,IAAA,EAAM;AAAA,MAC5B,MAAA;AAAA,MACA,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,OAAA;AAAA,IACL,IAAA,EAAM,OAAA;AAAA,IACN,GAAA,EAAK,OAAA;AAAA,IACL,KAAA,EAAO,OAAA;AAAA,IACP,MAAA,EAAQ;AAAA,GACV;AACF","file":"api.js","sourcesContent":["import type { NextRequest } from \"next/server\";\nimport { NextResponse } from \"next/server\";\nimport {\n  STOREFRONT_API_PATH_PREFIX,\n  STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME,\n} from \"@ecomiq/storefront/core\";\n\nconst DEFAULT_API_BASE_URL = \"https://storefront.ecomiq.pe\";\n\nexport type StoreApiHandlerConfig = {\n  /**\n   * Base URL del API de storefront. Default: \"https://storefront.ecomiq.pe\"\n   */\n  apiBaseUrl?: string;\n};\n\ntype StoreContextResult =\n  | {\n      ok: true;\n      storeId: string;\n      storeDomain: string | null;\n    }\n  | { ok: false; response: NextResponse };\n\nasync function ensureStoreContext(request: NextRequest): Promise<StoreContextResult> {\n  const xStoreId = request.headers.get(\"x-store-id\")?.trim();\n  const xStoreDomain = request.headers.get(\"x-store-domain\")?.trim();\n  if (xStoreDomain) {\n    return {\n      ok: true,\n      storeId: xStoreId || \"\",\n      storeDomain: xStoreDomain || null,\n    };\n  }\n  if (!xStoreId) {\n    return {\n      ok: false,\n      response: NextResponse.json({ error: \"Store context required\", message: \"X-Store-Id is required\", status: 400 }),\n    };\n  }\n\n  return {\n    ok: true,\n    storeId: xStoreId || \"\",\n    storeDomain: xStoreDomain || null,\n  };\n}\n\n/**\n * Headers que no se reenvían al upstream Ecomiq.\n * La API remota no usa cookies del navegador para el contexto de tienda: toda petición al proxy debe traer\n * `X-Store-Id`. `X-Store-Domain` es opcional para reenvío al upstream. El token sale de `Authorization` /\n * cookie OAuth leída en el proxy.\n */\nconst SKIP_FORWARD_HEADERS = new Set([\n  \"host\",\n  \"connection\",\n  \"content-length\",\n  \"transfer-encoding\",\n  \"x-store-id\",\n  \"x-store-domain\",\n  /** Se reconstruye abajo desde el header entrante al proxy. */\n  \"authorization\",\n  /** Nunca reenviar sesión/cookies del storefront al API Ecomiq (solo headers operativos). */\n  \"cookie\",\n  \"cookie2\",\n  \"set-cookie\",\n  /**\n   * Headers de proxy/origen de Cloudflare: se reconstruyen abajo (X-Forwarded-*)\n   * para no contaminar la cadena con valores que el upstream no debe leer directamente\n   * y para garantizar que la IP del cliente final llegue como X-Forwarded-For.\n   */\n  \"x-forwarded-for\",\n  \"x-forwarded-proto\",\n  \"x-forwarded-host\",\n  \"x-real-ip\",\n  \"forwarded\",\n  \"cf-connecting-ip\",\n  \"cf-connecting-ipv6\",\n  \"true-client-ip\",\n  \"cf-ipcountry\",\n  \"cf-ray\",\n  \"cf-visitor\",\n]);\n\n/**\n * Obtiene la IP real del cliente (no la IP del worker/edge de Cloudflare).\n * En Cloudflare Workers, `cf-connecting-ip` siempre es la IP del cliente final.\n */\nfunction getClientIp(request: NextRequest): string | null {\n  const candidates = [\n    request.headers.get(\"cf-connecting-ip\"),\n    request.headers.get(\"true-client-ip\"),\n    request.headers.get(\"x-real-ip\"),\n  ];\n  for (const value of candidates) {\n    const trimmed = value?.trim();\n    if (trimmed) return trimmed;\n  }\n  const xff = request.headers.get(\"x-forwarded-for\");\n  if (xff?.trim()) {\n    const first = xff.split(\",\")[0]?.trim();\n    if (first) return first;\n  }\n  return null;\n}\n\nfunction buildUpstreamRequest(\n  request: NextRequest,\n  pathSegments: string[],\n  config: StoreApiHandlerConfig,\n  storeId: string,\n  storeDomain: string | null\n): { url: string; init: RequestInit } {\n  const base = (config.apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\\/$/, \"\");\n  const userPath = pathSegments.length ? pathSegments.join(\"/\") : \"\";\n  const path = userPath\n    ? `${STOREFRONT_API_PATH_PREFIX}/${userPath}`\n    : STOREFRONT_API_PATH_PREFIX;\n  const search = request.nextUrl.searchParams.toString();\n  const url = search ? `${base}/${path}?${search}` : `${base}/${path}`;\n\n  const headers = new Headers();\n  request.headers.forEach((value, key) => {\n    const lower = key.toLowerCase();\n    if (!SKIP_FORWARD_HEADERS.has(lower)) {\n      headers.set(key, value);\n    }\n  });\n  headers.set(\"X-Store-Id\", storeId);\n  if (storeDomain) {\n    headers.set(\"X-Store-domain\", storeDomain);\n  }\n\n  // Reenvío de IP/origen del cliente final hacia apiecomiq.\n  // Sin esto, todas las requests llegan con la IP del worker de Cloudflare\n  // y caen en el rate limit del backend (.NET ForwardedHeaders middleware\n  // lee X-Forwarded-For / -Proto / -Host).\n  const clientIp = getClientIp(request);\n  if (clientIp) {\n    headers.set(\"X-Forwarded-For\", clientIp);\n  }\n  const forwardedProto =\n    request.headers.get(\"cf-visitor\")?.match(/\"scheme\":\"(https?)\"/)?.[1] ??\n    request.nextUrl.protocol.replace(\":\", \"\") ??\n    \"https\";\n  headers.set(\"X-Forwarded-Proto\", forwardedProto);\n  const forwardedHost =\n    request.headers.get(\"host\") ?? request.nextUrl.host;\n  if (forwardedHost) {\n    headers.set(\"X-Forwarded-Host\", forwardedHost);\n  }\n\n  const incomingAuth = request.headers.get(\"authorization\")?.trim();\n  const storefrontOAuth =\n    request.cookies.get(STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.value?.trim();\n\n  if (incomingAuth && /^Bearer\\s+\\S+/i.test(incomingAuth)) {\n    headers.set(\"Authorization\", incomingAuth);\n  } else if (storefrontOAuth) {\n    headers.set(\"Authorization\", `Bearer ${storefrontOAuth}`);\n  }\n  headers.set(\"Accept-Encoding\", \"identity\");\n\n  const init: RequestInit & { duplex?: \"half\" } = {\n    method: request.method,\n    headers,\n  };\n\n  const bodyMethods = [\"POST\", \"PUT\", \"PATCH\"];\n  if (bodyMethods.includes(request.method) && request.body) {\n    init.body = request.body;\n    init.duplex = \"half\";\n  }\n\n  return { url, init };\n}\n\n/** Códigos HTTP que no pueden llevar cuerpo (Fetch / NextResponse). */\nfunction isResponseBodyForbidden(status: number): boolean {\n  return status === 204 || status === 205 || status === 304;\n}\n\n/**\n * Crea los handlers de ruta para montar la API de store como proxy en Next.js App Router.\n * La base /v1/storefront se maneja internamente: el usuario llama /api/store/products\n * y se hace proxy a https://storefront.ecomiq.pe/v1/storefront/products.\n *\n *   // app/api/store/[...path]/route.ts\n *   import { toNextJsStoreApiHandler } from \"@ecomiq/storefront/nextjs/api\";\n *\n *   export const { GET, POST, PUT, PATCH, DELETE } = toNextJsStoreApiHandler({\n *     apiBaseUrl: \"https://storefront.ecomiq.pe\", // opcional, es el default\n *   });\n */\nexport function toNextJsStoreApiHandler(config: StoreApiHandlerConfig) {\n  const handler = async (\n    request: NextRequest,\n    context: { params: Promise<{ path?: string[] }> }\n  ): Promise<NextResponse> => {\n    const params = await context.params;\n    const pathSegments = params.path ?? [];\n\n    const storeContext = await ensureStoreContext(request);\n    if (!storeContext.ok) {\n      return storeContext.response;\n    }\n\n    const { storeId, storeDomain } = storeContext;\n    const { url, init } = buildUpstreamRequest(\n      request,\n      pathSegments,\n      config,\n      storeId,\n      storeDomain\n    );\n\n    const upstream = await fetch(url, init);\n    const responseHeaders = new Headers(upstream.headers);\n    const status = upstream.status;\n\n    if (isResponseBodyForbidden(status)) {\n      responseHeaders.delete(\"content-length\");\n      responseHeaders.delete(\"content-type\");\n      return new NextResponse(null, {\n        status,\n        statusText: upstream.statusText,\n        headers: responseHeaders,\n      });\n    }\n\n    const body = await upstream.text();\n    return new NextResponse(body, {\n      status,\n      statusText: upstream.statusText,\n      headers: responseHeaders,\n    });\n  };\n\n  return {\n    GET: handler,\n    POST: handler,\n    PUT: handler,\n    PATCH: handler,\n    DELETE: handler,\n  };\n}\n"]}
+{"version":3,"sources":["../../src/core/constants/api-paths.ts","../../src/core/constants/storefront-ecomiq-oauth-cookie.ts","../../src/core/server/store-proxy-handler.ts","../../src/react/frameworks/nextjs/api/store-handler.ts"],"names":[],"mappings":";;;;;AACO,IAAM,0BAAA,GAA6B,IAAA;;;ACAnC,IAAM,mCAAA,GAAsC,oBAAA;;;ACEnD,IAAM,oBAAA,GAAuB,8BAAA;AAe7B,SAAS,SAAA,CAAU,MAAA,EAAgB,OAAA,EAAiB,KAAA,EAAyB;AAC3E,EAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,SAAS,MAAA,EAAO,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC7D;AAEA,eAAe,mBAAmB,OAAA,EAA+C;AAC/E,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,IAAA,EAAK;AACzD,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,GAAG,IAAA,EAAK;AACjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,SAAS,QAAA,IAAY,EAAA;AAAA,MACrB,aAAa,YAAA,IAAgB;AAAA,KAC/B;AAAA,EACF;AACA,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,QAAA,EAAU,SAAA;AAAA,QACR,GAAA;AAAA,QACA,wBAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,SAAS,QAAA,IAAY,EAAA;AAAA,IACrB,aAAa,YAAA,IAAgB;AAAA,GAC/B;AACF;AAEA,IAAM,oBAAA,uBAA2B,GAAA,CAAI;AAAA,EACnC,MAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,YAAA;AAAA,EACA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA,kBAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,kBAAA;AAAA,EACA,oBAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,YAAY,OAAA,EAAiC;AACpD,EAAA,MAAM,UAAA,GAAa;AAAA,IACjB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AAAA,IACtC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAAA,IACpC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW;AAAA,GACjC;AACA,EAAA,KAAA,MAAW,SAAS,UAAA,EAAY;AAC9B,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAK;AAC5B,IAAA,IAAI,SAAS,OAAO,OAAA;AAAA,EACtB;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA;AACjD,EAAA,IAAI,GAAA,EAAK,MAAK,EAAG;AACf,IAAA,MAAM,QAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AACtC,IAAA,IAAI,OAAO,OAAO,KAAA;AAAA,EACpB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,SAAkB,IAAA,EAAkC;AAC1E,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACjD,EAAA,IAAI,CAAC,cAAc,OAAO,MAAA;AAC1B,EAAA,KAAA,MAAW,IAAA,IAAQ,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,EAAG;AAC1C,IAAA,MAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,IAAA,CAAK,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,CAAA;AAC/C,IAAA,IAAI,MAAA,EAAQ,IAAA,EAAK,KAAM,IAAA,EAAM;AAC3B,MAAA,OAAO,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,oBAAA,CACP,OAAA,EACA,YAAA,EACA,MAAA,EACA,SACA,WAAA,EAC0D;AAC1D,EAAA,MAAM,UAAA,GAAa,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AACtC,EAAA,MAAM,QAAQ,MAAA,CAAO,UAAA,IAAc,oBAAA,EAAsB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC1E,EAAA,MAAM,WAAW,YAAA,CAAa,MAAA,GAAS,YAAA,CAAa,IAAA,CAAK,GAAG,CAAA,GAAI,EAAA;AAChE,EAAA,MAAM,OAAO,QAAA,GACT,CAAA,EAAG,0BAA0B,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,GACzC,0BAAA;AACJ,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,YAAA,CAAa,QAAA,EAAS;AAChD,EAAA,MAAM,GAAA,GAAM,MAAA,GAAS,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,GAAK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAElE,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AACtC,IAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY;AAC9B,IAAA,IAAI,CAAC,oBAAA,CAAqB,GAAA,CAAI,KAAK,CAAA,EAAG;AACpC,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IACxB;AAAA,EACF,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,GAAA,CAAI,cAAc,OAAO,CAAA;AACjC,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAA,CAAQ,GAAA,CAAI,kBAAkB,WAAW,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,QAAA,GAAW,YAAY,OAAO,CAAA;AACpC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,QAAQ,CAAA;AAAA,EACzC;AACA,EAAA,MAAM,iBACJ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,KAAA,CAAM,qBAAqB,CAAA,GAAI,CAAC,KACnE,UAAA,CAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,EAAK,EAAE,CAAA,IACnC,OAAA;AACF,EAAA,OAAA,CAAQ,GAAA,CAAI,qBAAqB,cAAc,CAAA;AAC/C,EAAA,MAAM,gBAAgB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,MAAM,KAAK,UAAA,CAAW,IAAA;AAChE,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,OAAA,CAAQ,GAAA,CAAI,oBAAoB,aAAa,CAAA;AAAA,EAC/C;AAEA,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,GAAG,IAAA,EAAK;AAChE,EAAA,MAAM,eAAA,GAAkB,cAAA,CAAe,OAAA,EAAS,mCAAmC,GAAG,IAAA,EAAK;AAE3F,EAAA,IAAI,YAAA,IAAgB,gBAAA,CAAiB,IAAA,CAAK,YAAY,CAAA,EAAG;AACvD,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAiB,YAAY,CAAA;AAAA,EAC3C,WAAW,eAAA,EAAiB;AAC1B,IAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,eAAe,CAAA,CAAE,CAAA;AAAA,EAC1D;AACA,EAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,UAAU,CAAA;AAEzC,EAAA,MAAM,IAAA,GAA0C;AAAA,IAC9C,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB;AAAA,GACF;AAEA,EAAA,MAAM,WAAA,GAAc,CAAC,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA;AAC3C,EAAA,IAAI,YAAY,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,IAAK,QAAQ,IAAA,EAAM;AACxD,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAEA,EAAA,OAAO,EAAE,KAAK,IAAA,EAAK;AACrB;AAEA,SAAS,wBAAwB,MAAA,EAAyB;AACxD,EAAA,OAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA;AACxD;AAKA,eAAsB,uBAAA,CACpB,OAAA,EACA,YAAA,EACA,MAAA,GAAkC,EAAC,EAChB;AACnB,EAAA,MAAM,YAAA,GAAe,MAAM,kBAAA,CAAmB,OAAO,CAAA;AACrD,EAAA,IAAI,CAAC,aAAa,EAAA,EAAI;AACpB,IAAA,OAAO,YAAA,CAAa,QAAA;AAAA,EACtB;AAEA,EAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,YAAA;AACjC,EAAA,MAAM,EAAE,GAAA,EAAK,IAAA,EAAK,GAAI,oBAAA;AAAA,IACpB,OAAA;AAAA,IACA,YAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AACtC,EAAA,MAAM,eAAA,GAAkB,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA;AACpD,EAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AAExB,EAAA,IAAI,uBAAA,CAAwB,MAAM,CAAA,EAAG;AACnC,IAAA,eAAA,CAAgB,OAAO,gBAAgB,CAAA;AACvC,IAAA,eAAA,CAAgB,OAAO,cAAc,CAAA;AACrC,IAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,MACxB,MAAA;AAAA,MACA,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,EAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,IACxB,MAAA;AAAA,IACA,YAAY,QAAA,CAAS,UAAA;AAAA,IACrB,OAAA,EAAS;AAAA,GACV,CAAA;AACH;;;ACnMO,SAAS,uBAAA,CAAwB,MAAA,GAAgC,EAAC,EAAG;AAC1E,EAAA,MAAM,OAAA,GAAU,OACd,OAAA,EACA,OAAA,KAC0B;AAC1B,IAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA;AAC7B,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,IAAQ,EAAC;AACrC,IAAA,MAAM,WAAW,MAAM,uBAAA;AAAA,MACrB,OAAA;AAAA,MACA,YAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,YAAA,CAAa,QAAA,CAAS,IAAA,EAAM;AAAA,MACrC,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,SAAS,QAAA,CAAS;AAAA,KACnB,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,OAAA;AAAA,IACL,IAAA,EAAM,OAAA;AAAA,IACN,GAAA,EAAK,OAAA;AAAA,IACL,KAAA,EAAO,OAAA;AAAA,IACP,MAAA,EAAQ;AAAA,GACV;AACF","file":"api.js","sourcesContent":["/** Prefijo base de la API storefront (ej. v1/storefront). */\nexport const STOREFRONT_API_PATH_PREFIX = \"v1\";\n","/** Cookie HttpOnly con el bearer OAuth storefront; solo path `/api/store` (no navega a todo el sitio). */\nexport const STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME = \"ecomiq_sf_oauth_at\";\n\n/** Debe coincidir con el prefijo de la ruta proxy en Next (`app/api/store/...`). */\nexport const STOREFRONT_ECOMIQ_OAUTH_COOKIE_PATH = \"/api/store\";\n","import { STOREFRONT_API_PATH_PREFIX } from \"../constants/api-paths\";\nimport { STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME } from \"../constants/storefront-ecomiq-oauth-cookie\";\n\nconst DEFAULT_API_BASE_URL = \"https://storefront.ecomiq.pe\";\n\nexport type StoreProxyHandlerConfig = {\n  /** Base URL del API de storefront. Default: `https://storefront.ecomiq.pe` */\n  apiBaseUrl?: string;\n};\n\ntype StoreContextResult =\n  | {\n      ok: true;\n      storeId: string;\n      storeDomain: string | null;\n    }\n  | { ok: false; response: Response };\n\nfunction jsonError(status: number, message: string, error: string): Response {\n  return Response.json({ error, message, status }, { status });\n}\n\nasync function ensureStoreContext(request: Request): Promise<StoreContextResult> {\n  const xStoreId = request.headers.get(\"x-store-id\")?.trim();\n  const xStoreDomain = request.headers.get(\"x-store-domain\")?.trim();\n  if (xStoreDomain) {\n    return {\n      ok: true,\n      storeId: xStoreId || \"\",\n      storeDomain: xStoreDomain || null,\n    };\n  }\n  if (!xStoreId) {\n    return {\n      ok: false,\n      response: jsonError(\n        400,\n        \"X-Store-Id is required\",\n        \"Store context required\",\n      ),\n    };\n  }\n\n  return {\n    ok: true,\n    storeId: xStoreId || \"\",\n    storeDomain: xStoreDomain || null,\n  };\n}\n\nconst SKIP_FORWARD_HEADERS = new Set([\n  \"host\",\n  \"connection\",\n  \"content-length\",\n  \"transfer-encoding\",\n  \"x-store-id\",\n  \"x-store-domain\",\n  \"authorization\",\n  \"cookie\",\n  \"cookie2\",\n  \"set-cookie\",\n  \"x-forwarded-for\",\n  \"x-forwarded-proto\",\n  \"x-forwarded-host\",\n  \"x-real-ip\",\n  \"forwarded\",\n  \"cf-connecting-ip\",\n  \"cf-connecting-ipv6\",\n  \"true-client-ip\",\n  \"cf-ipcountry\",\n  \"cf-ray\",\n  \"cf-visitor\",\n]);\n\nfunction getClientIp(request: Request): string | null {\n  const candidates = [\n    request.headers.get(\"cf-connecting-ip\"),\n    request.headers.get(\"true-client-ip\"),\n    request.headers.get(\"x-real-ip\"),\n  ];\n  for (const value of candidates) {\n    const trimmed = value?.trim();\n    if (trimmed) return trimmed;\n  }\n  const xff = request.headers.get(\"x-forwarded-for\");\n  if (xff?.trim()) {\n    const first = xff.split(\",\")[0]?.trim();\n    if (first) return first;\n  }\n  return null;\n}\n\nfunction getCookieValue(request: Request, name: string): string | undefined {\n  const cookieHeader = request.headers.get(\"cookie\");\n  if (!cookieHeader) return undefined;\n  for (const part of cookieHeader.split(\";\")) {\n    const [rawKey, ...rest] = part.trim().split(\"=\");\n    if (rawKey?.trim() === name) {\n      return decodeURIComponent(rest.join(\"=\"));\n    }\n  }\n  return undefined;\n}\n\nfunction buildUpstreamRequest(\n  request: Request,\n  pathSegments: string[],\n  config: StoreProxyHandlerConfig,\n  storeId: string,\n  storeDomain: string | null,\n): { url: string; init: RequestInit & { duplex?: \"half\" } } {\n  const requestUrl = new URL(request.url);\n  const base = (config.apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\\/$/, \"\");\n  const userPath = pathSegments.length ? pathSegments.join(\"/\") : \"\";\n  const path = userPath\n    ? `${STOREFRONT_API_PATH_PREFIX}/${userPath}`\n    : STOREFRONT_API_PATH_PREFIX;\n  const search = requestUrl.searchParams.toString();\n  const url = search ? `${base}/${path}?${search}` : `${base}/${path}`;\n\n  const headers = new Headers();\n  request.headers.forEach((value, key) => {\n    const lower = key.toLowerCase();\n    if (!SKIP_FORWARD_HEADERS.has(lower)) {\n      headers.set(key, value);\n    }\n  });\n  headers.set(\"X-Store-Id\", storeId);\n  if (storeDomain) {\n    headers.set(\"X-Store-domain\", storeDomain);\n  }\n\n  const clientIp = getClientIp(request);\n  if (clientIp) {\n    headers.set(\"X-Forwarded-For\", clientIp);\n  }\n  const forwardedProto =\n    request.headers.get(\"cf-visitor\")?.match(/\"scheme\":\"(https?)\"/)?.[1] ??\n    requestUrl.protocol.replace(\":\", \"\") ??\n    \"https\";\n  headers.set(\"X-Forwarded-Proto\", forwardedProto);\n  const forwardedHost = request.headers.get(\"host\") ?? requestUrl.host;\n  if (forwardedHost) {\n    headers.set(\"X-Forwarded-Host\", forwardedHost);\n  }\n\n  const incomingAuth = request.headers.get(\"authorization\")?.trim();\n  const storefrontOAuth = getCookieValue(request, STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.trim();\n\n  if (incomingAuth && /^Bearer\\s+\\S+/i.test(incomingAuth)) {\n    headers.set(\"Authorization\", incomingAuth);\n  } else if (storefrontOAuth) {\n    headers.set(\"Authorization\", `Bearer ${storefrontOAuth}`);\n  }\n  headers.set(\"Accept-Encoding\", \"identity\");\n\n  const init: RequestInit & { duplex?: \"half\" } = {\n    method: request.method,\n    headers,\n  };\n\n  const bodyMethods = [\"POST\", \"PUT\", \"PATCH\"];\n  if (bodyMethods.includes(request.method) && request.body) {\n    init.body = request.body;\n    init.duplex = \"half\";\n  }\n\n  return { url, init };\n}\n\nfunction isResponseBodyForbidden(status: number): boolean {\n  return status === 204 || status === 205 || status === 304;\n}\n\n/**\n * Proxy BFF `/api/store/*` → upstream Ecomiq. Usa Web Fetch API (`Request` / `Response`).\n */\nexport async function handleStoreProxyRequest(\n  request: Request,\n  pathSegments: string[],\n  config: StoreProxyHandlerConfig = {},\n): Promise<Response> {\n  const storeContext = await ensureStoreContext(request);\n  if (!storeContext.ok) {\n    return storeContext.response;\n  }\n\n  const { storeId, storeDomain } = storeContext;\n  const { url, init } = buildUpstreamRequest(\n    request,\n    pathSegments,\n    config,\n    storeId,\n    storeDomain,\n  );\n\n  const upstream = await fetch(url, init);\n  const responseHeaders = new Headers(upstream.headers);\n  const status = upstream.status;\n\n  if (isResponseBodyForbidden(status)) {\n    responseHeaders.delete(\"content-length\");\n    responseHeaders.delete(\"content-type\");\n    return new Response(null, {\n      status,\n      statusText: upstream.statusText,\n      headers: responseHeaders,\n    });\n  }\n\n  const body = await upstream.text();\n  return new Response(body, {\n    status,\n    statusText: upstream.statusText,\n    headers: responseHeaders,\n  });\n}\n","import type { NextRequest } from \"next/server\";\nimport { NextResponse } from \"next/server\";\nimport {\n  handleStoreProxyRequest,\n  type StoreProxyHandlerConfig,\n} from \"../../../../core/server/store-proxy-handler\";\n\nexport type StoreApiHandlerConfig = StoreProxyHandlerConfig;\n\n/**\n * Crea los handlers de ruta para montar la API de store como proxy en Next.js App Router.\n *\n * ```ts\n * // app/api/store/[...path]/route.ts\n * import { toNextJsStoreApiHandler } from \"@ecomiq/storefront/nextjs/api\";\n *\n * export const { GET, POST, PUT, PATCH, DELETE } = toNextJsStoreApiHandler({\n *   apiBaseUrl: process.env.STOREFRONT_API_URL,\n * });\n * ```\n */\nexport function toNextJsStoreApiHandler(config: StoreApiHandlerConfig = {}) {\n  const handler = async (\n    request: NextRequest,\n    context: { params: Promise<{ path?: string[] }> },\n  ): Promise<NextResponse> => {\n    const params = await context.params;\n    const pathSegments = params.path ?? [];\n    const response = await handleStoreProxyRequest(\n      request,\n      pathSegments,\n      config,\n    );\n    return new NextResponse(response.body, {\n      status: response.status,\n      statusText: response.statusText,\n      headers: response.headers,\n    });\n  };\n\n  return {\n    GET: handler,\n    POST: handler,\n    PUT: handler,\n    PATCH: handler,\n    DELETE: handler,\n  };\n}\n\nexport { handleStoreProxyRequest } from \"../../../../core/server/store-proxy-handler\";\n"]}