@ecomiq/storefront 2.0.19 → 2.0.20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ecomiq/storefront",
-  "version": "2.0.19",
+  "version": "2.0.20",
   "description": "Micro framework SSR de Ecomiq para storefronts. Páginas, datos y deploy sin configurar nada.",
   "type": "module",
   "license": "MIT",
@@ -44,6 +44,8 @@
     "./internal/thank-you": "./src/pages/thank-you.tsx",
     "./internal/cms-page": "./src/pages/pages.$pageSlug.tsx",
     "./internal/account": "./src/pages/account.tsx",
+    "./internal/api-proxy": "./src/pages/api.$.ts",
+    "./internal/auth-api": "./src/pages/api.auth.$.ts",
     "./package.json": "./package.json"
   },
   "files": [
@@ -80,7 +82,7 @@
     "vite": "^8.1.0",
     "wrangler": "^4.100.0",
     "zod": "^3.25.0",
-    "@ecomiq/core": "^0.1.6"
+    "@ecomiq/core": "^0.1.7"
   },
   "peerDependencies": {
     "react": "^19.0.0",

package/src/auth/ecomiq-oauth-password-types.ts

@@ -2,7 +2,6 @@ import { z } from "zod";
 
 export const customerLoginCustomerSchema = z.object({
   id: z.coerce.number(),
-  publicId: z.union([z.coerce.number(), z.string()]),
   status: z.string(),
   isVerified: z.boolean(),
 });

package/src/auth/storefront-auth.ts

@@ -0,0 +1,7 @@
+/**
+ * Instancia Better Auth del storefront (servidor).
+ * Singleton usado por la ruta cerrada `/api/auth/$`.
+ */
+import { createStorefrontAuth } from './create-storefront-auth'
+
+export const storefrontAuth = createStorefrontAuth()

package/src/codegen.mjs

@@ -17,6 +17,8 @@
  *   /checkout/$checkoutId  ← flujo de checkout
  *   /thank-you             ← post-compra
  *   /account/*             ← área de cuenta (login/register en template: /login, /register)
+ *   /api/$                 ← proxy BFF same-origin
+ *   /api/auth/$            ← Better Auth (handlers del framework)
  */
 import {
   mkdirSync,
@@ -90,6 +92,20 @@ const FRAMEWORK_LOCKED_PAGES = [
   },
 ]
 
+/** Server routes cerradas del framework (proxy BFF, Better Auth, etc.). */
+const FRAMEWORK_LOCKED_API_ROUTES = [
+  {
+    rel: 'api/$.ts',
+    routeId: '/api/$',
+    importFrom: '@ecomiq/storefront/internal/api-proxy',
+  },
+  {
+    rel: 'api/auth.$.ts',
+    routeId: '/api/auth/$',
+    importFrom: '@ecomiq/storefront/internal/auth-api',
+  },
+]
+
 export async function generateApp({ cwd, appDir, frameworkRoot, config }) {
   const pagesDir = resolve(cwd, 'pages')
   if (!existsSync(pagesDir)) {
@@ -209,11 +225,13 @@ export async function generateApp({ cwd, appDir, frameworkRoot, config }) {
   }
 
   assertNoFrameworkPageOverrides(pageEntries)
+  assertNoFrameworkApiOverrides(apiEntries)
 
   const desiredRoutes = [
     ...pageEntries.map((entry) => entry.rel.replace(/\.jsx$/, '.tsx')),
     ...apiEntries.map((entry) => entry.rel),
     ...FRAMEWORK_LOCKED_PAGES.map((page) => page.rel),
+    ...FRAMEWORK_LOCKED_API_ROUTES.map((route) => route.rel),
   ].sort()
 
   for (const entry of pageEntries) {
@@ -244,6 +262,15 @@ export async function generateApp({ cwd, appDir, frameworkRoot, config }) {
     )
   }
 
+  for (const locked of FRAMEWORK_LOCKED_API_ROUTES) {
+    const outFile = join(routesDir, locked.rel)
+    mkdirSync(dirname(outFile), { recursive: true })
+    writeGeneratedFile(
+      outFile,
+      apiRouteFileSource(locked.routeId, locked.importFrom),
+    )
+  }
+
   reconcileGeneratedRoutes(appDir, routesDir, desiredRoutes)
 
   // ── 9. wrangler.jsonc para deploy en Cloudflare Workers ──
@@ -521,6 +548,23 @@ function assertNoFrameworkPageOverrides(pageEntries) {
   }
 }
 
+function assertNoFrameworkApiOverrides(apiEntries) {
+  const reserved = new Map(
+    FRAMEWORK_LOCKED_API_ROUTES.map((route) => [route.routeId, route.rel]),
+  )
+
+  for (const entry of apiEntries) {
+    const routeId = fileToRouteId(entry.rel)
+    if (!reserved.has(routeId)) continue
+    throw new Error(
+      `La ruta ${routeId} es reservada por Ecomiq. ` +
+        `Elimina pages/${entry.rel}; ya la genera @ecomiq/storefront ` +
+        `(proxy BFF /api/$ y Better Auth /api/auth/$). ` +
+        `Puedes añadir otras rutas en pages/api/.`,
+    )
+  }
+}
+
 /** Server route: reexporta GET/POST/... del módulo del usuario. */
 function apiRouteFileSource(routeId, importPath) {
   return (

package/src/index.ts

@@ -31,6 +31,9 @@ export {
   DepartmentsSchema,
   DistrictSchema,
   DistrictsSchema,
+  EntityIdSchema,
+  NullableEntityIdSchema,
+  OptionalEntityIdSchema,
   GeoDivisionSchema,
   GeoDivisionTypeSchema,
   GetDepartmentsParamsSchema,
@@ -43,6 +46,7 @@ export {
   StorefrontMenuItemSchema,
   getMenuItems,
 } from '@ecomiq/core'
+export type { EntityId } from '@ecomiq/core'
 export { getCountries, getDepartments, getDistricts, getProvinces } from '@ecomiq/core'
 export {
   AddCartItemParamsSchema,

package/src/pages/api.$.ts

@@ -0,0 +1,20 @@
+/**
+ * Proxy catch-all same-origin: `/api/*` → storefront `/v1/*`.
+ * Ruta cerrada del framework (no hace falta en pages/ del usuario).
+ */
+import { proxyStorefrontRequest } from '../api-proxy'
+
+type ApiHandlerArgs = {
+  request: Request
+  params: { _splat?: string }
+}
+
+async function handle({ request, params }: ApiHandlerArgs) {
+  return proxyStorefrontRequest(request, params._splat)
+}
+
+export const GET = handle
+export const POST = handle
+export const PUT = handle
+export const PATCH = handle
+export const DELETE = handle

package/src/pages/api.auth.$.ts

@@ -0,0 +1,16 @@
+/**
+ * Better Auth catch-all: `/api/auth/*`.
+ * Ruta cerrada del framework (no hace falta en pages/ del usuario).
+ */
+import { storefrontAuth } from '../auth/storefront-auth'
+
+type ApiHandlerArgs = {
+  request: Request
+}
+
+async function handle({ request }: ApiHandlerArgs) {
+  return storefrontAuth.handler(request)
+}
+
+export const GET = handle
+export const POST = handle

package/src/providers/auth.tsx

@@ -1,12 +1,10 @@
 /**
  * Auth storefront: Better Auth client + sesión via context.
  *
- * ```tsx
- * const client = createStorefrontAuthClient()
- * <AuthProvider client={client}>
- *   <App />
- * </AuthProvider>
+ * El framework monta `<AuthProvider>` en `__root` (cliente por defecto).
+ * Puedes pasar un `client` propio si necesitas opciones custom.
  *
+ * ```tsx
  * const { session, signIn, signOut } = useAuth()
  * ```
  */
@@ -39,14 +37,29 @@ export type StorefrontSession = StorefrontAuthClientInstance['$Infer']['Session'
 
 const AuthContext = createContext<StorefrontAuthClientInstance | null>(null)
 
+/** Cliente por defecto del framework (una instancia por bundle). */
+let defaultAuthClient: StorefrontAuthClientInstance | null = null
+
+function getDefaultAuthClient(): StorefrontAuthClientInstance {
+  if (!defaultAuthClient) {
+    defaultAuthClient = createStorefrontAuthClient()
+  }
+  return defaultAuthClient
+}
+
 export function AuthProvider({
   client,
   children,
 }: {
-  client: StorefrontAuthClientInstance
+  /** Si se omite, usa el cliente por defecto del storefront. */
+  client?: StorefrontAuthClientInstance
   children: ReactNode
 }) {
-  return <AuthContext.Provider value={client}>{children}</AuthContext.Provider>
+  return (
+    <AuthContext.Provider value={client ?? getDefaultAuthClient()}>
+      {children}
+    </AuthContext.Provider>
+  )
 }
 
 /** Acceso a sesión y acciones de auth. Requiere `<AuthProvider>` + `<AppEcomiqProvider>`. */

package/src/providers/cart.tsx

@@ -17,14 +17,14 @@ import {
   useState,
   type ReactNode,
 } from 'react'
-import { type StorefrontCart } from '@ecomiq/core'
+import { type StorefrontCart, EntityIdSchema } from '@ecomiq/core'
 import { z } from 'zod'
 import { serverApi } from '../server'
 
 const CartSessionSchema = z.object({
   version: z.literal(1),
   storeId: z.string().min(1),
-  cartId: z.string().uuid(),
+  cartId: EntityIdSchema,
 })
 
 export type CartLoadStatus = 'loading' | 'ready' | 'error'

package/src/runtime/context.ts

@@ -1 +1,2 @@
 export { AppEcomiqContext, AppEcomiqProvider, type AppEcomiqValue } from '../providers/ecomiq'
+export { AuthProvider } from '../providers/auth'

package/src/server.ts

@@ -58,6 +58,8 @@ import {
   type RemoveCartItemParams,
   type UpdateCartItemQuantityParams,
   type UploadPaymentReceiptParams,
+  EntityIdSchema,
+  OptionalEntityIdSchema,
 } from '@ecomiq/core'
 import { z } from 'zod'
 import { getStorefrontClient } from './client'
@@ -133,7 +135,7 @@ const removeCartItemFn = createServerFn({ method: 'POST' })
   .handler(({ data }) => submitCartItemRemoval(getStorefrontClient(), data))
 
 const AddProductToCartServerSchema = z.object({
-  cartId: z.string().uuid().optional(),
+  cartId: OptionalEntityIdSchema,
   currencyCode: z.string().length(3),
   variantId: z.string().regex(/^[1-9]\d*$/),
   quantity: z.number().int().positive(),
@@ -172,7 +174,7 @@ const checkoutCartFn = createServerFn({ method: 'POST' })
   .handler(({ data }) => getStorefrontClient().checkoutCart(data))
 
 const CartPaymentReceiptServerSchema = z.object({
-  cartId: z.string().uuid(),
+  cartId: EntityIdSchema,
   fileBase64: z.string().min(1),
   fileName: z.string().min(1),
   mimeType: z.string().min(1).optional(),

package/templates/__root.tsx

@@ -2,7 +2,7 @@
 import { useState, type ReactNode } from 'react'
 import { createRootRoute, HeadContent, Scripts, Outlet, Link } from '@tanstack/react-router'
 import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
-import { AppEcomiqProvider } from '@ecomiq/storefront/internal/context'
+import { AppEcomiqProvider, AuthProvider } from '@ecomiq/storefront/internal/context'
 import { buildRootHead } from '@ecomiq/storefront/internal/head'
 import { serverApi } from '@ecomiq/storefront'
 import { StorefrontError } from '@ecomiq/storefront/ui'
@@ -33,9 +33,11 @@ function RootComponent() {
     <RootDocument language={settings.store.language}>
       <QueryClientProvider client={queryClient}>
         <AppEcomiqProvider config={publicConfig} settings={settings}>
-          <Layout config={publicConfig} settings={settings}>
-            <Outlet />
-          </Layout>
+          <AuthProvider>
+            <Layout config={publicConfig} settings={settings}>
+              <Outlet />
+            </Layout>
+          </AuthProvider>
         </AppEcomiqProvider>
       </QueryClientProvider>
     </RootDocument>