@ecomiq/storefront 1.0.0 → 1.0.2

package/dist/chunk-Q762YXCQ.js

@@ -0,0 +1,175 @@
+// src/core/constants/api-paths.ts
+var STOREFRONT_API_PATH_PREFIX = "v1";
+
+// src/core/constants/storefront-ecomiq-oauth-cookie.ts
+var STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME = "ecomiq_sf_oauth_at";
+var STOREFRONT_ECOMIQ_OAUTH_COOKIE_PATH = "/api/store";
+
+// src/core/server/store-proxy-handler.ts
+var DEFAULT_API_BASE_URL = "https://storefront.ecomiq.pe";
+function jsonError(status, message, error) {
+  return Response.json({ error, message, status }, { status });
+}
+async function ensureStoreContext(request) {
+  const xStoreId = request.headers.get("x-store-id")?.trim();
+  const xStoreDomain = request.headers.get("x-store-domain")?.trim();
+  if (xStoreDomain) {
+    return {
+      ok: true,
+      storeId: xStoreId || "",
+      storeDomain: xStoreDomain || null
+    };
+  }
+  if (!xStoreId) {
+    return {
+      ok: false,
+      response: jsonError(
+        400,
+        "X-Store-Id is required",
+        "Store context required"
+      )
+    };
+  }
+  return {
+    ok: true,
+    storeId: xStoreId || "",
+    storeDomain: xStoreDomain || null
+  };
+}
+var SKIP_FORWARD_HEADERS = /* @__PURE__ */ new Set([
+  "host",
+  "connection",
+  "content-length",
+  "transfer-encoding",
+  "x-store-id",
+  "x-store-domain",
+  "authorization",
+  "cookie",
+  "cookie2",
+  "set-cookie",
+  "x-forwarded-for",
+  "x-forwarded-proto",
+  "x-forwarded-host",
+  "x-real-ip",
+  "forwarded",
+  "cf-connecting-ip",
+  "cf-connecting-ipv6",
+  "true-client-ip",
+  "cf-ipcountry",
+  "cf-ray",
+  "cf-visitor"
+]);
+function getClientIp(request) {
+  const candidates = [
+    request.headers.get("cf-connecting-ip"),
+    request.headers.get("true-client-ip"),
+    request.headers.get("x-real-ip")
+  ];
+  for (const value of candidates) {
+    const trimmed = value?.trim();
+    if (trimmed) return trimmed;
+  }
+  const xff = request.headers.get("x-forwarded-for");
+  if (xff?.trim()) {
+    const first = xff.split(",")[0]?.trim();
+    if (first) return first;
+  }
+  return null;
+}
+function getCookieValue(request, name) {
+  const cookieHeader = request.headers.get("cookie");
+  if (!cookieHeader) return void 0;
+  for (const part of cookieHeader.split(";")) {
+    const [rawKey, ...rest] = part.trim().split("=");
+    if (rawKey?.trim() === name) {
+      return decodeURIComponent(rest.join("="));
+    }
+  }
+  return void 0;
+}
+function buildUpstreamRequest(request, pathSegments, config, storeId, storeDomain) {
+  const requestUrl = new URL(request.url);
+  const base = (config.apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\/$/, "");
+  const userPath = pathSegments.length ? pathSegments.join("/") : "";
+  const path = userPath ? `${STOREFRONT_API_PATH_PREFIX}/${userPath}` : STOREFRONT_API_PATH_PREFIX;
+  const search = requestUrl.searchParams.toString();
+  const url = search ? `${base}/${path}?${search}` : `${base}/${path}`;
+  const headers = new Headers();
+  request.headers.forEach((value, key) => {
+    const lower = key.toLowerCase();
+    if (!SKIP_FORWARD_HEADERS.has(lower)) {
+      headers.set(key, value);
+    }
+  });
+  headers.set("X-Store-Id", storeId);
+  if (storeDomain) {
+    headers.set("X-Store-domain", storeDomain);
+  }
+  const clientIp = getClientIp(request);
+  if (clientIp) {
+    headers.set("X-Forwarded-For", clientIp);
+  }
+  const forwardedProto = request.headers.get("cf-visitor")?.match(/"scheme":"(https?)"/)?.[1] ?? requestUrl.protocol.replace(":", "") ?? "https";
+  headers.set("X-Forwarded-Proto", forwardedProto);
+  const forwardedHost = request.headers.get("host") ?? requestUrl.host;
+  if (forwardedHost) {
+    headers.set("X-Forwarded-Host", forwardedHost);
+  }
+  const incomingAuth = request.headers.get("authorization")?.trim();
+  const storefrontOAuth = getCookieValue(request, STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.trim();
+  if (incomingAuth && /^Bearer\s+\S+/i.test(incomingAuth)) {
+    headers.set("Authorization", incomingAuth);
+  } else if (storefrontOAuth) {
+    headers.set("Authorization", `Bearer ${storefrontOAuth}`);
+  }
+  headers.set("Accept-Encoding", "identity");
+  const init = {
+    method: request.method,
+    headers
+  };
+  const bodyMethods = ["POST", "PUT", "PATCH"];
+  if (bodyMethods.includes(request.method) && request.body) {
+    init.body = request.body;
+    init.duplex = "half";
+  }
+  return { url, init };
+}
+function isResponseBodyForbidden(status) {
+  return status === 204 || status === 205 || status === 304;
+}
+async function handleStoreProxyRequest(request, pathSegments, config = {}) {
+  const storeContext = await ensureStoreContext(request);
+  if (!storeContext.ok) {
+    return storeContext.response;
+  }
+  const { storeId, storeDomain } = storeContext;
+  const { url, init } = buildUpstreamRequest(
+    request,
+    pathSegments,
+    config,
+    storeId,
+    storeDomain
+  );
+  const upstream = await fetch(url, init);
+  const responseHeaders = new Headers(upstream.headers);
+  const status = upstream.status;
+  if (isResponseBodyForbidden(status)) {
+    responseHeaders.delete("content-length");
+    responseHeaders.delete("content-type");
+    return new Response(null, {
+      status,
+      statusText: upstream.statusText,
+      headers: responseHeaders
+    });
+  }
+  const body = await upstream.text();
+  return new Response(body, {
+    status,
+    statusText: upstream.statusText,
+    headers: responseHeaders
+  });
+}
+
+export { STOREFRONT_API_PATH_PREFIX, STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME, STOREFRONT_ECOMIQ_OAUTH_COOKIE_PATH, handleStoreProxyRequest };
+//# sourceMappingURL=chunk-Q762YXCQ.js.map
+//# sourceMappingURL=chunk-Q762YXCQ.js.map

package/dist/chunk-Q762YXCQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/constants/api-paths.ts","../src/core/constants/storefront-ecomiq-oauth-cookie.ts","../src/core/server/store-proxy-handler.ts"],"names":[],"mappings":";AACO,IAAM,0BAAA,GAA6B;;;ACAnC,IAAM,mCAAA,GAAsC;AAG5C,IAAM,mCAAA,GAAsC;;;ACDnD,IAAM,oBAAA,GAAuB,8BAAA;AAe7B,SAAS,SAAA,CAAU,MAAA,EAAgB,OAAA,EAAiB,KAAA,EAAyB;AAC3E,EAAA,OAAO,QAAA,CAAS,KAAK,EAAE,KAAA,EAAO,SAAS,MAAA,EAAO,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC7D;AAEA,eAAe,mBAAmB,OAAA,EAA+C;AAC/E,EAAA,MAAM,WAAW,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,IAAA,EAAK;AACzD,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,GAAG,IAAA,EAAK;AACjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,SAAS,QAAA,IAAY,EAAA;AAAA,MACrB,aAAa,YAAA,IAAgB;AAAA,KAC/B;AAAA,EACF;AACA,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,QAAA,EAAU,SAAA;AAAA,QACR,GAAA;AAAA,QACA,wBAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,SAAS,QAAA,IAAY,EAAA;AAAA,IACrB,aAAa,YAAA,IAAgB;AAAA,GAC/B;AACF;AAEA,IAAM,oBAAA,uBAA2B,GAAA,CAAI;AAAA,EACnC,MAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,YAAA;AAAA,EACA,gBAAA;AAAA,EACA,eAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA,YAAA;AAAA,EACA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA,kBAAA;AAAA,EACA,WAAA;AAAA,EACA,WAAA;AAAA,EACA,kBAAA;AAAA,EACA,oBAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AAED,SAAS,YAAY,OAAA,EAAiC;AACpD,EAAA,MAAM,UAAA,GAAa;AAAA,IACjB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,kBAAkB,CAAA;AAAA,IACtC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAAA,IACpC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAW;AAAA,GACjC;AACA,EAAA,KAAA,MAAW,SAAS,UAAA,EAAY;AAC9B,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAK;AAC5B,IAAA,IAAI,SAAS,OAAO,OAAA;AAAA,EACtB;AACA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA;AACjD,EAAA,IAAI,GAAA,EAAK,MAAK,EAAG;AACf,IAAA,MAAM,QAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,GAAG,IAAA,EAAK;AACtC,IAAA,IAAI,OAAO,OAAO,KAAA;AAAA,EACpB;AACA,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,SAAkB,IAAA,EAAkC;AAC1E,EAAA,MAAM,YAAA,GAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA;AACjD,EAAA,IAAI,CAAC,cAAc,OAAO,MAAA;AAC1B,EAAA,KAAA,MAAW,IAAA,IAAQ,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,EAAG;AAC1C,IAAA,MAAM,CAAC,QAAQ,GAAG,IAAI,IAAI,IAAA,CAAK,IAAA,EAAK,CAAE,KAAA,CAAM,GAAG,CAAA;AAC/C,IAAA,IAAI,MAAA,EAAQ,IAAA,EAAK,KAAM,IAAA,EAAM;AAC3B,MAAA,OAAO,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,oBAAA,CACP,OAAA,EACA,YAAA,EACA,MAAA,EACA,SACA,WAAA,EAC0D;AAC1D,EAAA,MAAM,UAAA,GAAa,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AACtC,EAAA,MAAM,QAAQ,MAAA,CAAO,UAAA,IAAc,oBAAA,EAAsB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC1E,EAAA,MAAM,WAAW,YAAA,CAAa,MAAA,GAAS,YAAA,CAAa,IAAA,CAAK,GAAG,CAAA,GAAI,EAAA;AAChE,EAAA,MAAM,OAAO,QAAA,GACT,CAAA,EAAG,0BAA0B,CAAA,CAAA,EAAI,QAAQ,CAAA,CAAA,GACzC,0BAAA;AACJ,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,YAAA,CAAa,QAAA,EAAS;AAChD,EAAA,MAAM,GAAA,GAAM,MAAA,GAAS,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,GAAK,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAElE,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AACtC,IAAA,MAAM,KAAA,GAAQ,IAAI,WAAA,EAAY;AAC9B,IAAA,IAAI,CAAC,oBAAA,CAAqB,GAAA,CAAI,KAAK,CAAA,EAAG;AACpC,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IACxB;AAAA,EACF,CAAC,CAAA;AACD,EAAA,OAAA,CAAQ,GAAA,CAAI,cAAc,OAAO,CAAA;AACjC,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,OAAA,CAAQ,GAAA,CAAI,kBAAkB,WAAW,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,QAAA,GAAW,YAAY,OAAO,CAAA;AACpC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,QAAQ,CAAA;AAAA,EACzC;AACA,EAAA,MAAM,iBACJ,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,YAAY,GAAG,KAAA,CAAM,qBAAqB,CAAA,GAAI,CAAC,KACnE,UAAA,CAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,EAAK,EAAE,CAAA,IACnC,OAAA;AACF,EAAA,OAAA,CAAQ,GAAA,CAAI,qBAAqB,cAAc,CAAA;AAC/C,EAAA,MAAM,gBAAgB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,MAAM,KAAK,UAAA,CAAW,IAAA;AAChE,EAAA,IAAI,aAAA,EAAe;AACjB,IAAA,OAAA,CAAQ,GAAA,CAAI,oBAAoB,aAAa,CAAA;AAAA,EAC/C;AAEA,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,GAAG,IAAA,EAAK;AAChE,EAAA,MAAM,eAAA,GAAkB,cAAA,CAAe,OAAA,EAAS,mCAAmC,GAAG,IAAA,EAAK;AAE3F,EAAA,IAAI,YAAA,IAAgB,gBAAA,CAAiB,IAAA,CAAK,YAAY,CAAA,EAAG;AACvD,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAiB,YAAY,CAAA;AAAA,EAC3C,WAAW,eAAA,EAAiB;AAC1B,IAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,eAAe,CAAA,CAAE,CAAA;AAAA,EAC1D;AACA,EAAA,OAAA,CAAQ,GAAA,CAAI,mBAAmB,UAAU,CAAA;AAEzC,EAAA,MAAM,IAAA,GAA0C;AAAA,IAC9C,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB;AAAA,GACF;AAEA,EAAA,MAAM,WAAA,GAAc,CAAC,MAAA,EAAQ,KAAA,EAAO,OAAO,CAAA;AAC3C,EAAA,IAAI,YAAY,QAAA,CAAS,OAAA,CAAQ,MAAM,CAAA,IAAK,QAAQ,IAAA,EAAM;AACxD,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAEA,EAAA,OAAO,EAAE,KAAK,IAAA,EAAK;AACrB;AAEA,SAAS,wBAAwB,MAAA,EAAyB;AACxD,EAAA,OAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA,IAAO,MAAA,KAAW,GAAA;AACxD;AAKA,eAAsB,uBAAA,CACpB,OAAA,EACA,YAAA,EACA,MAAA,GAAkC,EAAC,EAChB;AACnB,EAAA,MAAM,YAAA,GAAe,MAAM,kBAAA,CAAmB,OAAO,CAAA;AACrD,EAAA,IAAI,CAAC,aAAa,EAAA,EAAI;AACpB,IAAA,OAAO,YAAA,CAAa,QAAA;AAAA,EACtB;AAEA,EAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,YAAA;AACjC,EAAA,MAAM,EAAE,GAAA,EAAK,IAAA,EAAK,GAAI,oBAAA;AAAA,IACpB,OAAA;AAAA,IACA,YAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,IAAI,CAAA;AACtC,EAAA,MAAM,eAAA,GAAkB,IAAI,OAAA,CAAQ,QAAA,CAAS,OAAO,CAAA;AACpD,EAAA,MAAM,SAAS,QAAA,CAAS,MAAA;AAExB,EAAA,IAAI,uBAAA,CAAwB,MAAM,CAAA,EAAG;AACnC,IAAA,eAAA,CAAgB,OAAO,gBAAgB,CAAA;AACvC,IAAA,eAAA,CAAgB,OAAO,cAAc,CAAA;AACrC,IAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,MACxB,MAAA;AAAA,MACA,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,OAAA,EAAS;AAAA,KACV,CAAA;AAAA,EACH;AAEA,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,EAAA,OAAO,IAAI,SAAS,IAAA,EAAM;AAAA,IACxB,MAAA;AAAA,IACA,YAAY,QAAA,CAAS,UAAA;AAAA,IACrB,OAAA,EAAS;AAAA,GACV,CAAA;AACH","file":"chunk-Q762YXCQ.js","sourcesContent":["/** Prefijo base de la API storefront (ej. v1/storefront). */\nexport const STOREFRONT_API_PATH_PREFIX = \"v1\";\n","/** Cookie HttpOnly con el bearer OAuth storefront; solo path `/api/store` (no navega a todo el sitio). */\nexport const STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME = \"ecomiq_sf_oauth_at\";\n\n/** Debe coincidir con el prefijo de la ruta proxy en Next (`app/api/store/...`). */\nexport const STOREFRONT_ECOMIQ_OAUTH_COOKIE_PATH = \"/api/store\";\n","import { STOREFRONT_API_PATH_PREFIX } from \"../constants/api-paths\";\nimport { STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME } from \"../constants/storefront-ecomiq-oauth-cookie\";\n\nconst DEFAULT_API_BASE_URL = \"https://storefront.ecomiq.pe\";\n\nexport type StoreProxyHandlerConfig = {\n  /** Base URL del API de storefront. Default: `https://storefront.ecomiq.pe` */\n  apiBaseUrl?: string;\n};\n\ntype StoreContextResult =\n  | {\n      ok: true;\n      storeId: string;\n      storeDomain: string | null;\n    }\n  | { ok: false; response: Response };\n\nfunction jsonError(status: number, message: string, error: string): Response {\n  return Response.json({ error, message, status }, { status });\n}\n\nasync function ensureStoreContext(request: Request): Promise<StoreContextResult> {\n  const xStoreId = request.headers.get(\"x-store-id\")?.trim();\n  const xStoreDomain = request.headers.get(\"x-store-domain\")?.trim();\n  if (xStoreDomain) {\n    return {\n      ok: true,\n      storeId: xStoreId || \"\",\n      storeDomain: xStoreDomain || null,\n    };\n  }\n  if (!xStoreId) {\n    return {\n      ok: false,\n      response: jsonError(\n        400,\n        \"X-Store-Id is required\",\n        \"Store context required\",\n      ),\n    };\n  }\n\n  return {\n    ok: true,\n    storeId: xStoreId || \"\",\n    storeDomain: xStoreDomain || null,\n  };\n}\n\nconst SKIP_FORWARD_HEADERS = new Set([\n  \"host\",\n  \"connection\",\n  \"content-length\",\n  \"transfer-encoding\",\n  \"x-store-id\",\n  \"x-store-domain\",\n  \"authorization\",\n  \"cookie\",\n  \"cookie2\",\n  \"set-cookie\",\n  \"x-forwarded-for\",\n  \"x-forwarded-proto\",\n  \"x-forwarded-host\",\n  \"x-real-ip\",\n  \"forwarded\",\n  \"cf-connecting-ip\",\n  \"cf-connecting-ipv6\",\n  \"true-client-ip\",\n  \"cf-ipcountry\",\n  \"cf-ray\",\n  \"cf-visitor\",\n]);\n\nfunction getClientIp(request: Request): string | null {\n  const candidates = [\n    request.headers.get(\"cf-connecting-ip\"),\n    request.headers.get(\"true-client-ip\"),\n    request.headers.get(\"x-real-ip\"),\n  ];\n  for (const value of candidates) {\n    const trimmed = value?.trim();\n    if (trimmed) return trimmed;\n  }\n  const xff = request.headers.get(\"x-forwarded-for\");\n  if (xff?.trim()) {\n    const first = xff.split(\",\")[0]?.trim();\n    if (first) return first;\n  }\n  return null;\n}\n\nfunction getCookieValue(request: Request, name: string): string | undefined {\n  const cookieHeader = request.headers.get(\"cookie\");\n  if (!cookieHeader) return undefined;\n  for (const part of cookieHeader.split(\";\")) {\n    const [rawKey, ...rest] = part.trim().split(\"=\");\n    if (rawKey?.trim() === name) {\n      return decodeURIComponent(rest.join(\"=\"));\n    }\n  }\n  return undefined;\n}\n\nfunction buildUpstreamRequest(\n  request: Request,\n  pathSegments: string[],\n  config: StoreProxyHandlerConfig,\n  storeId: string,\n  storeDomain: string | null,\n): { url: string; init: RequestInit & { duplex?: \"half\" } } {\n  const requestUrl = new URL(request.url);\n  const base = (config.apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\\/$/, \"\");\n  const userPath = pathSegments.length ? pathSegments.join(\"/\") : \"\";\n  const path = userPath\n    ? `${STOREFRONT_API_PATH_PREFIX}/${userPath}`\n    : STOREFRONT_API_PATH_PREFIX;\n  const search = requestUrl.searchParams.toString();\n  const url = search ? `${base}/${path}?${search}` : `${base}/${path}`;\n\n  const headers = new Headers();\n  request.headers.forEach((value, key) => {\n    const lower = key.toLowerCase();\n    if (!SKIP_FORWARD_HEADERS.has(lower)) {\n      headers.set(key, value);\n    }\n  });\n  headers.set(\"X-Store-Id\", storeId);\n  if (storeDomain) {\n    headers.set(\"X-Store-domain\", storeDomain);\n  }\n\n  const clientIp = getClientIp(request);\n  if (clientIp) {\n    headers.set(\"X-Forwarded-For\", clientIp);\n  }\n  const forwardedProto =\n    request.headers.get(\"cf-visitor\")?.match(/\"scheme\":\"(https?)\"/)?.[1] ??\n    requestUrl.protocol.replace(\":\", \"\") ??\n    \"https\";\n  headers.set(\"X-Forwarded-Proto\", forwardedProto);\n  const forwardedHost = request.headers.get(\"host\") ?? requestUrl.host;\n  if (forwardedHost) {\n    headers.set(\"X-Forwarded-Host\", forwardedHost);\n  }\n\n  const incomingAuth = request.headers.get(\"authorization\")?.trim();\n  const storefrontOAuth = getCookieValue(request, STOREFRONT_ECOMIQ_OAUTH_COOKIE_NAME)?.trim();\n\n  if (incomingAuth && /^Bearer\\s+\\S+/i.test(incomingAuth)) {\n    headers.set(\"Authorization\", incomingAuth);\n  } else if (storefrontOAuth) {\n    headers.set(\"Authorization\", `Bearer ${storefrontOAuth}`);\n  }\n  headers.set(\"Accept-Encoding\", \"identity\");\n\n  const init: RequestInit & { duplex?: \"half\" } = {\n    method: request.method,\n    headers,\n  };\n\n  const bodyMethods = [\"POST\", \"PUT\", \"PATCH\"];\n  if (bodyMethods.includes(request.method) && request.body) {\n    init.body = request.body;\n    init.duplex = \"half\";\n  }\n\n  return { url, init };\n}\n\nfunction isResponseBodyForbidden(status: number): boolean {\n  return status === 204 || status === 205 || status === 304;\n}\n\n/**\n * Proxy BFF `/api/store/*` → upstream Ecomiq. Usa Web Fetch API (`Request` / `Response`).\n */\nexport async function handleStoreProxyRequest(\n  request: Request,\n  pathSegments: string[],\n  config: StoreProxyHandlerConfig = {},\n): Promise<Response> {\n  const storeContext = await ensureStoreContext(request);\n  if (!storeContext.ok) {\n    return storeContext.response;\n  }\n\n  const { storeId, storeDomain } = storeContext;\n  const { url, init } = buildUpstreamRequest(\n    request,\n    pathSegments,\n    config,\n    storeId,\n    storeDomain,\n  );\n\n  const upstream = await fetch(url, init);\n  const responseHeaders = new Headers(upstream.headers);\n  const status = upstream.status;\n\n  if (isResponseBodyForbidden(status)) {\n    responseHeaders.delete(\"content-length\");\n    responseHeaders.delete(\"content-type\");\n    return new Response(null, {\n      status,\n      statusText: upstream.statusText,\n      headers: responseHeaders,\n    });\n  }\n\n  const body = await upstream.text();\n  return new Response(body, {\n    status,\n    statusText: upstream.statusText,\n    headers: responseHeaders,\n  });\n}\n"]}