@ecomiq/storefront 0.1.2 → 1.0.0

package/dist/nextjs/api.d.ts

@@ -1,24 +1,20 @@
 import { NextRequest, NextResponse } from 'next/server';
+import { S as StoreProxyHandlerConfig } from '../store-proxy-handler-CNzKlTFA.js';
 
-type StoreApiHandlerConfig = {
-    /**
-     * Base URL del API de storefront. Default: "https://storefront.ecomiq.pe"
-     */
-    apiBaseUrl?: string;
-};
+type StoreApiHandlerConfig = StoreProxyHandlerConfig;
 /**
  * Crea los handlers de ruta para montar la API de store como proxy en Next.js App Router.
- * La base /v1/storefront se maneja internamente: el usuario llama /api/store/products
- * y se hace proxy a https://storefront.ecomiq.pe/v1/storefront/products.
  *
- *   // app/api/store/[...path]/route.ts
- *   import { toNextJsStoreApiHandler } from "@ecomiq/storefront/nextjs/api";
+ * ```ts
+ * // app/api/store/[...path]/route.ts
+ * import { toNextJsStoreApiHandler } from "@ecomiq/storefront/nextjs/api";
  *
- *   export const { GET, POST, PUT, PATCH, DELETE } = toNextJsStoreApiHandler({
- *     apiBaseUrl: "https://storefront.ecomiq.pe", // opcional, es el default
- *   });
+ * export const { GET, POST, PUT, PATCH, DELETE } = toNextJsStoreApiHandler({
+ *   apiBaseUrl: process.env.STOREFRONT_API_URL,
+ * });
+ * ```
  */
-declare function toNextJsStoreApiHandler(config: StoreApiHandlerConfig): {
+declare function toNextJsStoreApiHandler(config?: StoreApiHandlerConfig): {
     GET: (request: NextRequest, context: {
         params: Promise<{
             path?: string[];

package/dist/nextjs/api.js

@@ -1,8 +1,18 @@
 import { NextResponse } from 'next/server';
-import { STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME, STOREFRONT_API_PATH_PREFIX } from '@ecomiq/storefront/core';
 
-// src/react/nextjs/api/store-handler.ts
+// src/react/frameworks/nextjs/api/store-handler.ts
+
+// src/core/constants/api-paths.ts
+var STOREFRONT_API_PATH_PREFIX = "v1";
+
+// src/core/constants/storefront-ecomiq-oauth-cookie.ts
+var STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME = "ecomiq_sf_oauth_at";
+
+// src/core/server/store-proxy-handler.ts
 var DEFAULT_API_BASE_URL = "https://storefront.ecomiq.pe";
+function jsonError(status, message, error) {
+  return Response.json({ error, message, status }, { status });
+}
 async function ensureStoreContext(request) {
   const xStoreId = request.headers.get("x-store-id")?.trim();
   const xStoreDomain = request.headers.get("x-store-domain")?.trim();
@@ -16,7 +26,11 @@ async function ensureStoreContext(request) {
   if (!xStoreId) {
     return {
       ok: false,
-      response: NextResponse.json({ error: "Store context required", message: "X-Store-Id is required", status: 400 })
+      response: jsonError(
+        400,
+        "X-Store-Id is required",
+        "Store context required"
+      )
     };
   }
   return {
@@ -32,17 +46,10 @@ var SKIP_FORWARD_HEADERS = /* @__PURE__ */ new Set([
   "transfer-encoding",
   "x-store-id",
   "x-store-domain",
-  /** Se reconstruye abajo desde el header entrante al proxy. */
   "authorization",
-  /** Nunca reenviar sesión/cookies del storefront al API Ecomiq (solo headers operativos). */
   "cookie",
   "cookie2",
   "set-cookie",
-  /**
-   * Headers de proxy/origen de Cloudflare: se reconstruyen abajo (X-Forwarded-*)
-   * para no contaminar la cadena con valores que el upstream no debe leer directamente
-   * y para garantizar que la IP del cliente final llegue como X-Forwarded-For.
-   */
   "x-forwarded-for",
   "x-forwarded-proto",
   "x-forwarded-host",
@@ -72,11 +79,23 @@ function getClientIp(request) {
   }
   return null;
 }
+function getCookieValue(request, name) {
+  const cookieHeader = request.headers.get("cookie");
+  if (!cookieHeader) return void 0;
+  for (const part of cookieHeader.split(";")) {
+    const [rawKey, ...rest] = part.trim().split("=");
+    if (rawKey?.trim() === name) {
+      return decodeURIComponent(rest.join("="));
+    }
+  }
+  return void 0;
+}
 function buildUpstreamRequest(request, pathSegments, config, storeId, storeDomain) {
+  const requestUrl = new URL(request.url);
   const base = (config.apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\/$/, "");
   const userPath = pathSegments.length ? pathSegments.join("/") : "";
   const path = userPath ? `${STOREFRONT_API_PATH_PREFIX}/${userPath}` : STOREFRONT_API_PATH_PREFIX;
-  const search = request.nextUrl.searchParams.toString();
+  const search = requestUrl.searchParams.toString();
   const url = search ? `${base}/${path}?${search}` : `${base}/${path}`;
   const headers = new Headers();
   request.headers.forEach((value, key) => {
@@ -93,14 +112,14 @@ function buildUpstreamRequest(request, pathSegments, config, storeId, storeDomai
   if (clientIp) {
     headers.set("X-Forwarded-For", clientIp);
   }
-  const forwardedProto = request.headers.get("cf-visitor")?.match(/"scheme":"(https?)"/)?.[1] ?? request.nextUrl.protocol.replace(":", "") ?? "https";
+  const forwardedProto = request.headers.get("cf-visitor")?.match(/"scheme":"(https?)"/)?.[1] ?? requestUrl.protocol.replace(":", "") ?? "https";
   headers.set("X-Forwarded-Proto", forwardedProto);
-  const forwardedHost = request.headers.get("host") ?? request.nextUrl.host;
+  const forwardedHost = request.headers.get("host") ?? requestUrl.host;
   if (forwardedHost) {
     headers.set("X-Forwarded-Host", forwardedHost);
   }
   const incomingAuth = request.headers.get("authorization")?.trim();
-  const storefrontOAuth = request.cookies.get(STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.value?.trim();
+  const storefrontOAuth = getCookieValue(request, STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.trim();
   if (incomingAuth && /^Bearer\s+\S+/i.test(incomingAuth)) {
     headers.set("Authorization", incomingAuth);
   } else if (storefrontOAuth) {
@@ -121,39 +140,53 @@ function buildUpstreamRequest(request, pathSegments, config, storeId, storeDomai
 function isResponseBodyForbidden(status) {
   return status === 204 || status === 205 || status === 304;
 }
-function toNextJsStoreApiHandler(config) {
+async function handleStoreProxyRequest(request, pathSegments, config = {}) {
+  const storeContext = await ensureStoreContext(request);
+  if (!storeContext.ok) {
+    return storeContext.response;
+  }
+  const { storeId, storeDomain } = storeContext;
+  const { url, init } = buildUpstreamRequest(
+    request,
+    pathSegments,
+    config,
+    storeId,
+    storeDomain
+  );
+  const upstream = await fetch(url, init);
+  const responseHeaders = new Headers(upstream.headers);
+  const status = upstream.status;
+  if (isResponseBodyForbidden(status)) {
+    responseHeaders.delete("content-length");
+    responseHeaders.delete("content-type");
+    return new Response(null, {
+      status,
+      statusText: upstream.statusText,
+      headers: responseHeaders
+    });
+  }
+  const body = await upstream.text();
+  return new Response(body, {
+    status,
+    statusText: upstream.statusText,
+    headers: responseHeaders
+  });
+}
+
+// src/react/frameworks/nextjs/api/store-handler.ts
+function toNextJsStoreApiHandler(config = {}) {
   const handler = async (request, context) => {
     const params = await context.params;
     const pathSegments = params.path ?? [];
-    const storeContext = await ensureStoreContext(request);
-    if (!storeContext.ok) {
-      return storeContext.response;
-    }
-    const { storeId, storeDomain } = storeContext;
-    const { url, init } = buildUpstreamRequest(
+    const response = await handleStoreProxyRequest(
       request,
       pathSegments,
-      config,
-      storeId,
-      storeDomain
+      config
     );
-    const upstream = await fetch(url, init);
-    const responseHeaders = new Headers(upstream.headers);
-    const status = upstream.status;
-    if (isResponseBodyForbidden(status)) {
-      responseHeaders.delete("content-length");
-      responseHeaders.delete("content-type");
-      return new NextResponse(null, {
-        status,
-        statusText: upstream.statusText,
-        headers: responseHeaders
-      });
-    }
-    const body = await upstream.text();
-    return new NextResponse(body, {
-      status,
-      statusText: upstream.statusText,
-      headers: responseHeaders
+    return new NextResponse(response.body, {
+      status: response.status,
+      statusText: response.statusText,
+      headers: response.headers
     });
   };
   return {

package/dist/nextjs/api.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/react/nextjs/api/store-handler.ts"],"names":[],"mappings":";;;;AAOA,IAAM,oBAAA,GAAuB,8BAAA;AAiB7B,eAAe,mBAAmB,OAAA,EAAmD;AACnF,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,IAAA,EAAK;AACzD,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,GAAG,IAAA,EAAK;AACjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,SAAS,QAAA,IAAY,EAAA;AAAA,MACrB,aAAa,YAAA,IAAgB;AAAA,KAC/B;AAAA,EACF;AACA,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,QAAA,EAAU,YAAA,CAAa,IAAA,CAAK,EAAE,KAAA,EAAO,0BAA0B,OAAA,EAAS,wBAAA,EAA0B,MAAA,EAAQ,GAAA,EAAK;AAAA,KACjH;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,SAAS,QAAA,IAAY,EAAA;AAAA,IACrB,aAAa,YAAA,IAAgB;AAAA,GAC/B;AACF;AAQA,IAAM,oBAAA,uBAA2B,GAAA,CAAI;AAAA,EACnC,MAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA;AAAA,EAEA,eAAA;AAAA;AAAA,EAEA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,YAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA,kBAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,kBAAA;AAAA,EACA,oBAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AAMD,SAAS,YAAY,OAAA,EAAqC;AACxD,EAAA,MAAM,UAAA,GAAa;AAAA,IACjB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AAAA,IACtC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAAA,IACpC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW;AAAA,GACjC;AACA,EAAA,KAAA,MAAW,SAAS,UAAA,EAAY;AAC9B,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAK;AAC5B,IAAA,IAAI,SAAS,OAAO,OAAA;AAAA,EACtB;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA;AACjD,EAAA,IAAI,GAAA,EAAK,MAAK,EAAG;AACf,IAAA,MAAM,QAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AACtC,IAAA,IAAI,OAAO,OAAO,KAAA;AAAA,EACpB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,oBAAA,CACP,OAAA,EACA,YAAA,EACA,MAAA,EACA,SACA,WAAA,EACoC;AACpC,EAAA,MAAM,QAAQ,MAAA,CAAO,UAAA,IAAc,oBAAA,EAAsB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC1E,EAAA,MAAM,WAAW,YAAA,CAAa,MAAA,GAAS,YAAA,CAAa,IAAA,CAAK,GAAG,CAAA,GAAI,EAAA;AAChE,EAAA,MAAM,OAAO,QAAA,GACT,CAAA,EAAG,0BAA0B,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,GACzC,0BAAA;AACJ,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,OAAA,CAAQ,YAAA,CAAa,QAAA,EAAS;AACrD,EAAA,MAAM,GAAA,GAAM,MAAA,GAAS,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,GAAK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAElE,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AACtC,IAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY;AAC9B,IAAA,IAAI,CAAC,oBAAA,CAAqB,GAAA,CAAI,KAAK,CAAA,EAAG;AACpC,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IACxB;AAAA,EACF,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,GAAA,CAAI,cAAc,OAAO,CAAA;AACjC,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAA,CAAQ,GAAA,CAAI,kBAAkB,WAAW,CAAA;AAAA,EAC3C;AAMA,EAAA,MAAM,QAAA,GAAW,YAAY,OAAO,CAAA;AACpC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,QAAQ,CAAA;AAAA,EACzC;AACA,EAAA,MAAM,iBACJ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,KAAA,CAAM,qBAAqB,CAAA,GAAI,CAAC,KACnE,OAAA,CAAQ,OAAA,CAAQ,SAAS,OAAA,CAAQ,GAAA,EAAK,EAAE,CAAA,IACxC,OAAA;AACF,EAAA,OAAA,CAAQ,GAAA,CAAI,qBAAqB,cAAc,CAAA;AAC/C,EAAA,MAAM,gBACJ,OAAA,CAAQ,OAAA,CAAQ,IAAI,MAAM,CAAA,IAAK,QAAQ,OAAA,CAAQ,IAAA;AACjD,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,OAAA,CAAQ,GAAA,CAAI,oBAAoB,aAAa,CAAA;AAAA,EAC/C;AAEA,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,GAAG,IAAA,EAAK;AAChE,EAAA,MAAM,kBACJ,OAAA,CAAQ,OAAA,CAAQ,IAAI,mCAAmC,CAAA,EAAG,OAAO,IAAA,EAAK;AAExE,EAAA,IAAI,YAAA,IAAgB,gBAAA,CAAiB,IAAA,CAAK,YAAY,CAAA,EAAG;AACvD,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAiB,YAAY,CAAA;AAAA,EAC3C,WAAW,eAAA,EAAiB;AAC1B,IAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,eAAe,CAAA,CAAE,CAAA;AAAA,EAC1D;AACA,EAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,UAAU,CAAA;AAEzC,EAAA,MAAM,IAAA,GAA0C;AAAA,IAC9C,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB;AAAA,GACF;AAEA,EAAA,MAAM,WAAA,GAAc,CAAC,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA;AAC3C,EAAA,IAAI,YAAY,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,IAAK,QAAQ,IAAA,EAAM;AACxD,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAEA,EAAA,OAAO,EAAE,KAAK,IAAA,EAAK;AACrB;AAGA,SAAS,wBAAwB,MAAA,EAAyB;AACxD,EAAA,OAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA;AACxD;AAcO,SAAS,wBAAwB,MAAA,EAA+B;AACrE,EAAA,MAAM,OAAA,GAAU,OACd,OAAA,EACA,OAAA,KAC0B;AAC1B,IAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA;AAC7B,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,IAAQ,EAAC;AAErC,IAAA,MAAM,YAAA,GAAe,MAAM,kBAAA,CAAmB,OAAO,CAAA;AACrD,IAAA,IAAI,CAAC,aAAa,EAAA,EAAI;AACpB,MAAA,OAAO,YAAA,CAAa,QAAA;AAAA,IACtB;AAEA,IAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,YAAA;AACjC,IAAA,MAAM,EAAE,GAAA,EAAK,IAAA,EAAK,GAAI,oBAAA;AAAA,MACpB,OAAA;AAAA,MACA,YAAA;AAAA,MACA,MAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AACtC,IAAA,MAAM,eAAA,GAAkB,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA;AACpD,IAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AAExB,IAAA,IAAI,uBAAA,CAAwB,MAAM,CAAA,EAAG;AACnC,MAAA,eAAA,CAAgB,OAAO,gBAAgB,CAAA;AACvC,MAAA,eAAA,CAAgB,OAAO,cAAc,CAAA;AACrC,MAAA,OAAO,IAAI,aAAa,IAAA,EAAM;AAAA,QAC5B,MAAA;AAAA,QACA,YAAY,QAAA,CAAS,UAAA;AAAA,QACrB,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,OAAO,IAAI,aAAa,IAAA,EAAM;AAAA,MAC5B,MAAA;AAAA,MACA,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,OAAA;AAAA,IACL,IAAA,EAAM,OAAA;AAAA,IACN,GAAA,EAAK,OAAA;AAAA,IACL,KAAA,EAAO,OAAA;AAAA,IACP,MAAA,EAAQ;AAAA,GACV;AACF","file":"api.js","sourcesContent":["import type { NextRequest } from \"next/server\";\nimport { NextResponse } from \"next/server\";\nimport {\n  STOREFRONT_API_PATH_PREFIX,\n  STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME,\n} from \"@ecomiq/storefront/core\";\n\nconst DEFAULT_API_BASE_URL = \"https://storefront.ecomiq.pe\";\n\nexport type StoreApiHandlerConfig = {\n  /**\n   * Base URL del API de storefront. Default: \"https://storefront.ecomiq.pe\"\n   */\n  apiBaseUrl?: string;\n};\n\ntype StoreContextResult =\n  | {\n      ok: true;\n      storeId: string;\n      storeDomain: string | null;\n    }\n  | { ok: false; response: NextResponse };\n\nasync function ensureStoreContext(request: NextRequest): Promise<StoreContextResult> {\n  const xStoreId = request.headers.get(\"x-store-id\")?.trim();\n  const xStoreDomain = request.headers.get(\"x-store-domain\")?.trim();\n  if (xStoreDomain) {\n    return {\n      ok: true,\n      storeId: xStoreId || \"\",\n      storeDomain: xStoreDomain || null,\n    };\n  }\n  if (!xStoreId) {\n    return {\n      ok: false,\n      response: NextResponse.json({ error: \"Store context required\", message: \"X-Store-Id is required\", status: 400 }),\n    };\n  }\n\n  return {\n    ok: true,\n    storeId: xStoreId || \"\",\n    storeDomain: xStoreDomain || null,\n  };\n}\n\n/**\n * Headers que no se reenvían al upstream Ecomiq.\n * La API remota no usa cookies del navegador para el contexto de tienda: toda petición al proxy debe traer\n * `X-Store-Id`. `X-Store-Domain` es opcional para reenvío al upstream. El token sale de `Authorization` /\n * cookie OAuth leída en el proxy.\n */\nconst SKIP_FORWARD_HEADERS = new Set([\n  \"host\",\n  \"connection\",\n  \"content-length\",\n  \"transfer-encoding\",\n  \"x-store-id\",\n  \"x-store-domain\",\n  /** Se reconstruye abajo desde el header entrante al proxy. */\n  \"authorization\",\n  /** Nunca reenviar sesión/cookies del storefront al API Ecomiq (solo headers operativos). */\n  \"cookie\",\n  \"cookie2\",\n  \"set-cookie\",\n  /**\n   * Headers de proxy/origen de Cloudflare: se reconstruyen abajo (X-Forwarded-*)\n   * para no contaminar la cadena con valores que el upstream no debe leer directamente\n   * y para garantizar que la IP del cliente final llegue como X-Forwarded-For.\n   */\n  \"x-forwarded-for\",\n  \"x-forwarded-proto\",\n  \"x-forwarded-host\",\n  \"x-real-ip\",\n  \"forwarded\",\n  \"cf-connecting-ip\",\n  \"cf-connecting-ipv6\",\n  \"true-client-ip\",\n  \"cf-ipcountry\",\n  \"cf-ray\",\n  \"cf-visitor\",\n]);\n\n/**\n * Obtiene la IP real del cliente (no la IP del worker/edge de Cloudflare).\n * En Cloudflare Workers, `cf-connecting-ip` siempre es la IP del cliente final.\n */\nfunction getClientIp(request: NextRequest): string | null {\n  const candidates = [\n    request.headers.get(\"cf-connecting-ip\"),\n    request.headers.get(\"true-client-ip\"),\n    request.headers.get(\"x-real-ip\"),\n  ];\n  for (const value of candidates) {\n    const trimmed = value?.trim();\n    if (trimmed) return trimmed;\n  }\n  const xff = request.headers.get(\"x-forwarded-for\");\n  if (xff?.trim()) {\n    const first = xff.split(\",\")[0]?.trim();\n    if (first) return first;\n  }\n  return null;\n}\n\nfunction buildUpstreamRequest(\n  request: NextRequest,\n  pathSegments: string[],\n  config: StoreApiHandlerConfig,\n  storeId: string,\n  storeDomain: string | null\n): { url: string; init: RequestInit } {\n  const base = (config.apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\\/$/, \"\");\n  const userPath = pathSegments.length ? pathSegments.join(\"/\") : \"\";\n  const path = userPath\n    ? `${STOREFRONT_API_PATH_PREFIX}/${userPath}`\n    : STOREFRONT_API_PATH_PREFIX;\n  const search = request.nextUrl.searchParams.toString();\n  const url = search ? `${base}/${path}?${search}` : `${base}/${path}`;\n\n  const headers = new Headers();\n  request.headers.forEach((value, key) => {\n    const lower = key.toLowerCase();\n    if (!SKIP_FORWARD_HEADERS.has(lower)) {\n      headers.set(key, value);\n    }\n  });\n  headers.set(\"X-Store-Id\", storeId);\n  if (storeDomain) {\n    headers.set(\"X-Store-domain\", storeDomain);\n  }\n\n  // Reenvío de IP/origen del cliente final hacia apiecomiq.\n  // Sin esto, todas las requests llegan con la IP del worker de Cloudflare\n  // y caen en el rate limit del backend (.NET ForwardedHeaders middleware\n  // lee X-Forwarded-For / -Proto / -Host).\n  const clientIp = getClientIp(request);\n  if (clientIp) {\n    headers.set(\"X-Forwarded-For\", clientIp);\n  }\n  const forwardedProto =\n    request.headers.get(\"cf-visitor\")?.match(/\"scheme\":\"(https?)\"/)?.[1] ??\n    request.nextUrl.protocol.replace(\":\", \"\") ??\n    \"https\";\n  headers.set(\"X-Forwarded-Proto\", forwardedProto);\n  const forwardedHost =\n    request.headers.get(\"host\") ?? request.nextUrl.host;\n  if (forwardedHost) {\n    headers.set(\"X-Forwarded-Host\", forwardedHost);\n  }\n\n  const incomingAuth = request.headers.get(\"authorization\")?.trim();\n  const storefrontOAuth =\n    request.cookies.get(STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.value?.trim();\n\n  if (incomingAuth && /^Bearer\\s+\\S+/i.test(incomingAuth)) {\n    headers.set(\"Authorization\", incomingAuth);\n  } else if (storefrontOAuth) {\n    headers.set(\"Authorization\", `Bearer ${storefrontOAuth}`);\n  }\n  headers.set(\"Accept-Encoding\", \"identity\");\n\n  const init: RequestInit & { duplex?: \"half\" } = {\n    method: request.method,\n    headers,\n  };\n\n  const bodyMethods = [\"POST\", \"PUT\", \"PATCH\"];\n  if (bodyMethods.includes(request.method) && request.body) {\n    init.body = request.body;\n    init.duplex = \"half\";\n  }\n\n  return { url, init };\n}\n\n/** Códigos HTTP que no pueden llevar cuerpo (Fetch / NextResponse). */\nfunction isResponseBodyForbidden(status: number): boolean {\n  return status === 204 || status === 205 || status === 304;\n}\n\n/**\n * Crea los handlers de ruta para montar la API de store como proxy en Next.js App Router.\n * La base /v1/storefront se maneja internamente: el usuario llama /api/store/products\n * y se hace proxy a https://storefront.ecomiq.pe/v1/storefront/products.\n *\n *   // app/api/store/[...path]/route.ts\n *   import { toNextJsStoreApiHandler } from \"@ecomiq/storefront/nextjs/api\";\n *\n *   export const { GET, POST, PUT, PATCH, DELETE } = toNextJsStoreApiHandler({\n *     apiBaseUrl: \"https://storefront.ecomiq.pe\", // opcional, es el default\n *   });\n */\nexport function toNextJsStoreApiHandler(config: StoreApiHandlerConfig) {\n  const handler = async (\n    request: NextRequest,\n    context: { params: Promise<{ path?: string[] }> }\n  ): Promise<NextResponse> => {\n    const params = await context.params;\n    const pathSegments = params.path ?? [];\n\n    const storeContext = await ensureStoreContext(request);\n    if (!storeContext.ok) {\n      return storeContext.response;\n    }\n\n    const { storeId, storeDomain } = storeContext;\n    const { url, init } = buildUpstreamRequest(\n      request,\n      pathSegments,\n      config,\n      storeId,\n      storeDomain\n    );\n\n    const upstream = await fetch(url, init);\n    const responseHeaders = new Headers(upstream.headers);\n    const status = upstream.status;\n\n    if (isResponseBodyForbidden(status)) {\n      responseHeaders.delete(\"content-length\");\n      responseHeaders.delete(\"content-type\");\n      return new NextResponse(null, {\n        status,\n        statusText: upstream.statusText,\n        headers: responseHeaders,\n      });\n    }\n\n    const body = await upstream.text();\n    return new NextResponse(body, {\n      status,\n      statusText: upstream.statusText,\n      headers: responseHeaders,\n    });\n  };\n\n  return {\n    GET: handler,\n    POST: handler,\n    PUT: handler,\n    PATCH: handler,\n    DELETE: handler,\n  };\n}\n"]}
+{"version":3,"sources":["../../src/core/constants/api-paths.ts","../../src/core/constants/storefront-ecomiq-oauth-cookie.ts","../../src/core/server/store-proxy-handler.ts","../../src/react/frameworks/nextjs/api/store-handler.ts"],"names":[],"mappings":";;;;;AACO,IAAM,0BAAA,GAA6B,IAAA;;;ACAnC,IAAM,mCAAA,GAAsC,oBAAA;;;ACEnD,IAAM,oBAAA,GAAuB,8BAAA;AAe7B,SAAS,SAAA,CAAU,MAAA,EAAgB,OAAA,EAAiB,KAAA,EAAyB;AAC3E,EAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,SAAS,MAAA,EAAO,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC7D;AAEA,eAAe,mBAAmB,OAAA,EAA+C;AAC/E,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,IAAA,EAAK;AACzD,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,GAAG,IAAA,EAAK;AACjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,SAAS,QAAA,IAAY,EAAA;AAAA,MACrB,aAAa,YAAA,IAAgB;AAAA,KAC/B;AAAA,EACF;AACA,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,QAAA,EAAU,SAAA;AAAA,QACR,GAAA;AAAA,QACA,wBAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,SAAS,QAAA,IAAY,EAAA;AAAA,IACrB,aAAa,YAAA,IAAgB;AAAA,GAC/B;AACF;AAEA,IAAM,oBAAA,uBAA2B,GAAA,CAAI;AAAA,EACnC,MAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,YAAA;AAAA,EACA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA,kBAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,kBAAA;AAAA,EACA,oBAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,YAAY,OAAA,EAAiC;AACpD,EAAA,MAAM,UAAA,GAAa;AAAA,IACjB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AAAA,IACtC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAAA,IACpC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW;AAAA,GACjC;AACA,EAAA,KAAA,MAAW,SAAS,UAAA,EAAY;AAC9B,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAK;AAC5B,IAAA,IAAI,SAAS,OAAO,OAAA;AAAA,EACtB;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA;AACjD,EAAA,IAAI,GAAA,EAAK,MAAK,EAAG;AACf,IAAA,MAAM,QAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AACtC,IAAA,IAAI,OAAO,OAAO,KAAA;AAAA,EACpB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,SAAkB,IAAA,EAAkC;AAC1E,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACjD,EAAA,IAAI,CAAC,cAAc,OAAO,MAAA;AAC1B,EAAA,KAAA,MAAW,IAAA,IAAQ,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,EAAG;AAC1C,IAAA,MAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,IAAA,CAAK,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,CAAA;AAC/C,IAAA,IAAI,MAAA,EAAQ,IAAA,EAAK,KAAM,IAAA,EAAM;AAC3B,MAAA,OAAO,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,oBAAA,CACP,OAAA,EACA,YAAA,EACA,MAAA,EACA,SACA,WAAA,EAC0D;AAC1D,EAAA,MAAM,UAAA,GAAa,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AACtC,EAAA,MAAM,QAAQ,MAAA,CAAO,UAAA,IAAc,oBAAA,EAAsB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC1E,EAAA,MAAM,WAAW,YAAA,CAAa,MAAA,GAAS,YAAA,CAAa,IAAA,CAAK,GAAG,CAAA,GAAI,EAAA;AAChE,EAAA,MAAM,OAAO,QAAA,GACT,CAAA,EAAG,0BAA0B,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,GACzC,0BAAA;AACJ,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,YAAA,CAAa,QAAA,EAAS;AAChD,EAAA,MAAM,GAAA,GAAM,MAAA,GAAS,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,GAAK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAElE,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AACtC,IAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY;AAC9B,IAAA,IAAI,CAAC,oBAAA,CAAqB,GAAA,CAAI,KAAK,CAAA,EAAG;AACpC,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IACxB;AAAA,EACF,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,GAAA,CAAI,cAAc,OAAO,CAAA;AACjC,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAA,CAAQ,GAAA,CAAI,kBAAkB,WAAW,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,QAAA,GAAW,YAAY,OAAO,CAAA;AACpC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,QAAQ,CAAA;AAAA,EACzC;AACA,EAAA,MAAM,iBACJ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,KAAA,CAAM,qBAAqB,CAAA,GAAI,CAAC,KACnE,UAAA,CAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,EAAK,EAAE,CAAA,IACnC,OAAA;AACF,EAAA,OAAA,CAAQ,GAAA,CAAI,qBAAqB,cAAc,CAAA;AAC/C,EAAA,MAAM,gBAAgB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,MAAM,KAAK,UAAA,CAAW,IAAA;AAChE,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,OAAA,CAAQ,GAAA,CAAI,oBAAoB,aAAa,CAAA;AAAA,EAC/C;AAEA,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,GAAG,IAAA,EAAK;AAChE,EAAA,MAAM,eAAA,GAAkB,cAAA,CAAe,OAAA,EAAS,mCAAmC,GAAG,IAAA,EAAK;AAE3F,EAAA,IAAI,YAAA,IAAgB,gBAAA,CAAiB,IAAA,CAAK,YAAY,CAAA,EAAG;AACvD,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAiB,YAAY,CAAA;AAAA,EAC3C,WAAW,eAAA,EAAiB;AAC1B,IAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,eAAe,CAAA,CAAE,CAAA;AAAA,EAC1D;AACA,EAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,UAAU,CAAA;AAEzC,EAAA,MAAM,IAAA,GAA0C;AAAA,IAC9C,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB;AAAA,GACF;AAEA,EAAA,MAAM,WAAA,GAAc,CAAC,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA;AAC3C,EAAA,IAAI,YAAY,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,IAAK,QAAQ,IAAA,EAAM;AACxD,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAEA,EAAA,OAAO,EAAE,KAAK,IAAA,EAAK;AACrB;AAEA,SAAS,wBAAwB,MAAA,EAAyB;AACxD,EAAA,OAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA;AACxD;AAKA,eAAsB,uBAAA,CACpB,OAAA,EACA,YAAA,EACA,MAAA,GAAkC,EAAC,EAChB;AACnB,EAAA,MAAM,YAAA,GAAe,MAAM,kBAAA,CAAmB,OAAO,CAAA;AACrD,EAAA,IAAI,CAAC,aAAa,EAAA,EAAI;AACpB,IAAA,OAAO,YAAA,CAAa,QAAA;AAAA,EACtB;AAEA,EAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,YAAA;AACjC,EAAA,MAAM,EAAE,GAAA,EAAK,IAAA,EAAK,GAAI,oBAAA;AAAA,IACpB,OAAA;AAAA,IACA,YAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AACtC,EAAA,MAAM,eAAA,GAAkB,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA;AACpD,EAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AAExB,EAAA,IAAI,uBAAA,CAAwB,MAAM,CAAA,EAAG;AACnC,IAAA,eAAA,CAAgB,OAAO,gBAAgB,CAAA;AACvC,IAAA,eAAA,CAAgB,OAAO,cAAc,CAAA;AACrC,IAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,MACxB,MAAA;AAAA,MACA,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,EAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,IACxB,MAAA;AAAA,IACA,YAAY,QAAA,CAAS,UAAA;AAAA,IACrB,OAAA,EAAS;AAAA,GACV,CAAA;AACH;;;ACnMO,SAAS,uBAAA,CAAwB,MAAA,GAAgC,EAAC,EAAG;AAC1E,EAAA,MAAM,OAAA,GAAU,OACd,OAAA,EACA,OAAA,KAC0B;AAC1B,IAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,MAAA;AAC7B,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,IAAQ,EAAC;AACrC,IAAA,MAAM,WAAW,MAAM,uBAAA;AAAA,MACrB,OAAA;AAAA,MACA,YAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAO,IAAI,YAAA,CAAa,QAAA,CAAS,IAAA,EAAM;AAAA,MACrC,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,SAAS,QAAA,CAAS;AAAA,KACnB,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,OAAA;AAAA,IACL,IAAA,EAAM,OAAA;AAAA,IACN,GAAA,EAAK,OAAA;AAAA,IACL,KAAA,EAAO,OAAA;AAAA,IACP,MAAA,EAAQ;AAAA,GACV;AACF","file":"api.js","sourcesContent":["/** Prefijo base de la API storefront (ej. v1/storefront). */\nexport const STOREFRONT_API_PATH_PREFIX = \"v1\";\n","/** Cookie HttpOnly con el bearer OAuth storefront; solo path `/api/store` (no navega a todo el sitio). */\nexport const STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME = \"ecomiq_sf_oauth_at\";\n\n/** Debe coincidir con el prefijo de la ruta proxy en Next (`app/api/store/...`). */\nexport const STOREFRONT_ECOMIQ_OAUTH_COOKIE_PATH = \"/api/store\";\n","import { STOREFRONT_API_PATH_PREFIX } from \"../constants/api-paths\";\nimport { STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME } from \"../constants/storefront-ecomiq-oauth-cookie\";\n\nconst DEFAULT_API_BASE_URL = \"https://storefront.ecomiq.pe\";\n\nexport type StoreProxyHandlerConfig = {\n  /** Base URL del API de storefront. Default: `https://storefront.ecomiq.pe` */\n  apiBaseUrl?: string;\n};\n\ntype StoreContextResult =\n  | {\n      ok: true;\n      storeId: string;\n      storeDomain: string | null;\n    }\n  | { ok: false; response: Response };\n\nfunction jsonError(status: number, message: string, error: string): Response {\n  return Response.json({ error, message, status }, { status });\n}\n\nasync function ensureStoreContext(request: Request): Promise<StoreContextResult> {\n  const xStoreId = request.headers.get(\"x-store-id\")?.trim();\n  const xStoreDomain = request.headers.get(\"x-store-domain\")?.trim();\n  if (xStoreDomain) {\n    return {\n      ok: true,\n      storeId: xStoreId || \"\",\n      storeDomain: xStoreDomain || null,\n    };\n  }\n  if (!xStoreId) {\n    return {\n      ok: false,\n      response: jsonError(\n        400,\n        \"X-Store-Id is required\",\n        \"Store context required\",\n      ),\n    };\n  }\n\n  return {\n    ok: true,\n    storeId: xStoreId || \"\",\n    storeDomain: xStoreDomain || null,\n  };\n}\n\nconst SKIP_FORWARD_HEADERS = new Set([\n  \"host\",\n  \"connection\",\n  \"content-length\",\n  \"transfer-encoding\",\n  \"x-store-id\",\n  \"x-store-domain\",\n  \"authorization\",\n  \"cookie\",\n  \"cookie2\",\n  \"set-cookie\",\n  \"x-forwarded-for\",\n  \"x-forwarded-proto\",\n  \"x-forwarded-host\",\n  \"x-real-ip\",\n  \"forwarded\",\n  \"cf-connecting-ip\",\n  \"cf-connecting-ipv6\",\n  \"true-client-ip\",\n  \"cf-ipcountry\",\n  \"cf-ray\",\n  \"cf-visitor\",\n]);\n\nfunction getClientIp(request: Request): string | null {\n  const candidates = [\n    request.headers.get(\"cf-connecting-ip\"),\n    request.headers.get(\"true-client-ip\"),\n    request.headers.get(\"x-real-ip\"),\n  ];\n  for (const value of candidates) {\n    const trimmed = value?.trim();\n    if (trimmed) return trimmed;\n  }\n  const xff = request.headers.get(\"x-forwarded-for\");\n  if (xff?.trim()) {\n    const first = xff.split(\",\")[0]?.trim();\n    if (first) return first;\n  }\n  return null;\n}\n\nfunction getCookieValue(request: Request, name: string): string | undefined {\n  const cookieHeader = request.headers.get(\"cookie\");\n  if (!cookieHeader) return undefined;\n  for (const part of cookieHeader.split(\";\")) {\n    const [rawKey, ...rest] = part.trim().split(\"=\");\n    if (rawKey?.trim() === name) {\n      return decodeURIComponent(rest.join(\"=\"));\n    }\n  }\n  return undefined;\n}\n\nfunction buildUpstreamRequest(\n  request: Request,\n  pathSegments: string[],\n  config: StoreProxyHandlerConfig,\n  storeId: string,\n  storeDomain: string | null,\n): { url: string; init: RequestInit & { duplex?: \"half\" } } {\n  const requestUrl = new URL(request.url);\n  const base = (config.apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\\/$/, \"\");\n  const userPath = pathSegments.length ? pathSegments.join(\"/\") : \"\";\n  const path = userPath\n    ? `${STOREFRONT_API_PATH_PREFIX}/${userPath}`\n    : STOREFRONT_API_PATH_PREFIX;\n  const search = requestUrl.searchParams.toString();\n  const url = search ? `${base}/${path}?${search}` : `${base}/${path}`;\n\n  const headers = new Headers();\n  request.headers.forEach((value, key) => {\n    const lower = key.toLowerCase();\n    if (!SKIP_FORWARD_HEADERS.has(lower)) {\n      headers.set(key, value);\n    }\n  });\n  headers.set(\"X-Store-Id\", storeId);\n  if (storeDomain) {\n    headers.set(\"X-Store-domain\", storeDomain);\n  }\n\n  const clientIp = getClientIp(request);\n  if (clientIp) {\n    headers.set(\"X-Forwarded-For\", clientIp);\n  }\n  const forwardedProto =\n    request.headers.get(\"cf-visitor\")?.match(/\"scheme\":\"(https?)\"/)?.[1] ??\n    requestUrl.protocol.replace(\":\", \"\") ??\n    \"https\";\n  headers.set(\"X-Forwarded-Proto\", forwardedProto);\n  const forwardedHost = request.headers.get(\"host\") ?? requestUrl.host;\n  if (forwardedHost) {\n    headers.set(\"X-Forwarded-Host\", forwardedHost);\n  }\n\n  const incomingAuth = request.headers.get(\"authorization\")?.trim();\n  const storefrontOAuth = getCookieValue(request, STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.trim();\n\n  if (incomingAuth && /^Bearer\\s+\\S+/i.test(incomingAuth)) {\n    headers.set(\"Authorization\", incomingAuth);\n  } else if (storefrontOAuth) {\n    headers.set(\"Authorization\", `Bearer ${storefrontOAuth}`);\n  }\n  headers.set(\"Accept-Encoding\", \"identity\");\n\n  const init: RequestInit & { duplex?: \"half\" } = {\n    method: request.method,\n    headers,\n  };\n\n  const bodyMethods = [\"POST\", \"PUT\", \"PATCH\"];\n  if (bodyMethods.includes(request.method) && request.body) {\n    init.body = request.body;\n    init.duplex = \"half\";\n  }\n\n  return { url, init };\n}\n\nfunction isResponseBodyForbidden(status: number): boolean {\n  return status === 204 || status === 205 || status === 304;\n}\n\n/**\n * Proxy BFF `/api/store/*` → upstream Ecomiq. Usa Web Fetch API (`Request` / `Response`).\n */\nexport async function handleStoreProxyRequest(\n  request: Request,\n  pathSegments: string[],\n  config: StoreProxyHandlerConfig = {},\n): Promise<Response> {\n  const storeContext = await ensureStoreContext(request);\n  if (!storeContext.ok) {\n    return storeContext.response;\n  }\n\n  const { storeId, storeDomain } = storeContext;\n  const { url, init } = buildUpstreamRequest(\n    request,\n    pathSegments,\n    config,\n    storeId,\n    storeDomain,\n  );\n\n  const upstream = await fetch(url, init);\n  const responseHeaders = new Headers(upstream.headers);\n  const status = upstream.status;\n\n  if (isResponseBodyForbidden(status)) {\n    responseHeaders.delete(\"content-length\");\n    responseHeaders.delete(\"content-type\");\n    return new Response(null, {\n      status,\n      statusText: upstream.statusText,\n      headers: responseHeaders,\n    });\n  }\n\n  const body = await upstream.text();\n  return new Response(body, {\n    status,\n    statusText: upstream.statusText,\n    headers: responseHeaders,\n  });\n}\n","import type { NextRequest } from \"next/server\";\nimport { NextResponse } from \"next/server\";\nimport {\n  handleStoreProxyRequest,\n  type StoreProxyHandlerConfig,\n} from \"../../../../core/server/store-proxy-handler\";\n\nexport type StoreApiHandlerConfig = StoreProxyHandlerConfig;\n\n/**\n * Crea los handlers de ruta para montar la API de store como proxy en Next.js App Router.\n *\n * ```ts\n * // app/api/store/[...path]/route.ts\n * import { toNextJsStoreApiHandler } from \"@ecomiq/storefront/nextjs/api\";\n *\n * export const { GET, POST, PUT, PATCH, DELETE } = toNextJsStoreApiHandler({\n *   apiBaseUrl: process.env.STOREFRONT_API_URL,\n * });\n * ```\n */\nexport function toNextJsStoreApiHandler(config: StoreApiHandlerConfig = {}) {\n  const handler = async (\n    request: NextRequest,\n    context: { params: Promise<{ path?: string[] }> },\n  ): Promise<NextResponse> => {\n    const params = await context.params;\n    const pathSegments = params.path ?? [];\n    const response = await handleStoreProxyRequest(\n      request,\n      pathSegments,\n      config,\n    );\n    return new NextResponse(response.body, {\n      status: response.status,\n      statusText: response.statusText,\n      headers: response.headers,\n    });\n  };\n\n  return {\n    GET: handler,\n    POST: handler,\n    PUT: handler,\n    PATCH: handler,\n    DELETE: handler,\n  };\n}\n\nexport { handleStoreProxyRequest } from \"../../../../core/server/store-proxy-handler\";\n"]}