@forgecart/cli 2.202607190047.0 → 2.202607240817.0

package/dist/src/commands/init.d.ts

@@ -30,7 +30,7 @@ export interface InitOptions {
      * Serve-in-place mode: the target directory is ALREADY a scaffolded,
      * dependency- and dev-compile-warmed storefront (materialized into the pod's
      * `/workspace` from the image's pre-warmed tree). Write ONLY the per-channel
-     * config + `.env.local` and skip the template copy entirely — copying would
+     * config + `.env` and skip the template copy entirely — copying would
      * clobber the warm `.next` and bust the Turbopack dev cache.
      */
     configOnly?: boolean;
@@ -40,7 +40,7 @@ export interface InitOptions {
  *
  * Resolves the target directory, scaffolds the storefront from the warmed
  * template when one is available (see {@link resolveScaffoldPlan}) or the
- * bundled template otherwise, writes the ForgeCart config and `.env.local`, and
+ * bundled template otherwise, writes the ForgeCart config and `.env`, and
  * prints next steps. Throws a clear Error on any failure (missing token,
  * missing template, copy failure).
  */

package/dist/src/commands/init.js

@@ -123,8 +123,8 @@ function buildConfig(channelToken, options) {
         storefrontPath: '.',
     };
 }
-/** Build the `.env.local` contents for the storefront SDK client. */
-function buildEnvLocal(channelToken, apiUrl) {
+/** Build the `.env` contents for the storefront SDK client. */
+function buildEnv(channelToken, apiUrl) {
     return [
         `FORGECART_CHANNEL_TOKEN=${channelToken}`,
         `FORGECART_SHOP_API_URL=${apiUrl}`,
@@ -133,7 +133,7 @@ function buildEnvLocal(channelToken, apiUrl) {
 }
 /**
  * Write the per-channel config the storefront reads at runtime: `.forgecart/
- * config.json` (channel token, api url, app flag) and `.env.local` (the SDK
+ * config.json` (channel token, api url, app flag) and `.env` (the SDK
  * client env). Shared by the full scaffold and the `--config-only` serve-in-place
  * path, so both write byte-identical config — the only difference is whether the
  * template tree was copied first.
@@ -142,7 +142,7 @@ async function writeChannelConfig(targetDir, channelToken, options) {
     const configDir = join(targetDir, '.forgecart');
     await mkdir(configDir, { recursive: true });
     await writeFile(join(configDir, 'config.json'), `${JSON.stringify(buildConfig(channelToken, options), null, 2)}\n`, 'utf8');
-    await writeFile(join(targetDir, '.env.local'), buildEnvLocal(channelToken, options.apiUrl), 'utf8');
+    await writeFile(join(targetDir, '.env'), buildEnv(channelToken, options.apiUrl), 'utf8');
 }
 /** Print the post-scaffold next steps. */
 function printNextSteps(targetDir, application, depsInstalled) {
@@ -179,7 +179,7 @@ function printConfigOnly(targetDir) {
  *
  * Resolves the target directory, scaffolds the storefront from the warmed
  * template when one is available (see {@link resolveScaffoldPlan}) or the
- * bundled template otherwise, writes the ForgeCart config and `.env.local`, and
+ * bundled template otherwise, writes the ForgeCart config and `.env`, and
  * prints next steps. Throws a clear Error on any failure (missing token,
  * missing template, copy failure).
  */

package/dist/src/commands/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAmDnE;;;;;GAKG;AACH,SAAS,wBAAwB;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AACpE,CAAC;AAED,kDAAkD;AAClD,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CAAC,YAAoB;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,mBAAmB,CAAC,kBAA0B;IAC3D,MAAM,OAAO,GAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAErF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAEpD,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAE/D,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IACrF,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAClD,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACzC,CAAC;IACF,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE,6BAA6B;YACrC,WAAW,EAAE,kBAAkB;YAC/B,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,IAAkB;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,WAAW;QAC5B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,kDAAkD;AAClD,SAAS,WAAW,CAAC,YAAoB,EAAE,OAAoB;IAC7D,OAAO;QACL,OAAO,EAAE,KAAK;QACd,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;QAC5C,cAAc,EAAE,GAAG;KACpB,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,SAAS,aAAa,CAAC,YAAoB,EAAE,MAAc;IACzD,OAAO;QACL,2BAA2B,YAAY,EAAE;QACzC,0BAA0B,MAAM,EAAE;QAClC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,YAAoB,EACpB,OAAoB;IAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAC9B,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAClE,MAAM,CACP,CAAC;IACF,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAC7B,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,EAC3C,MAAM,CACP,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,SAAS,cAAc,CAAC,SAAiB,EAAE,WAAoB,EAAE,aAAsB;IACrF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CACH,aAAa;QACX,CAAC,CAAC,2FAA2F;QAC7F,CAAC,CAAC,qCAAqC,CAC1C,CAAC;IACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,aAAa,CAAC,CAAC;IACrB,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,KAAK,CAAC,eAAe,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CACH,2EAA2E;YACzE,0BAA0B,CAC7B,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,SAAiB;IACxC,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAC1F,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,aAAa,CAAC,CAAC;IACrB,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;IAC3B,KAAK,CAAC,eAAe,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAwB,EAAE,OAAoB;IAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtE,gFAAgF;IAChF,0EAA0E;IAC1E,+EAA+E;IAC/E,kFAAkF;IAClF,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,oDAAoD,SAAS,2BAA2B,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3D,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAC/C,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QAClD,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE;YACnE,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAE5C,cAAc,CAAC,IAAI,IAAI,GAAG,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACtF,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;SACvB,WAAW,CAAC,yDAAyD,CAAC;SACtE,QAAQ,CAAC,QAAQ,EAAE,2DAA2D,CAAC;SAC/E,MAAM,CAAC,qBAAqB,EAAE,oCAAoC,CAAC;SACnE,MAAM,CACL,iBAAiB,EACjB,yDAAyD,EACzD,oBAAoB,CACrB;SACA,MAAM,CAAC,mBAAmB,EAAE,uDAAuD,CAAC;SACpF,MAAM,CACL,eAAe,EACf,+FAA+F,CAChG;SACA,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,OAAoB,EAAE,EAAE;QAC/D,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAErC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAmDnE;;;;;GAKG;AACH,SAAS,wBAAwB;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AACpE,CAAC;AAED,kDAAkD;AAClD,KAAK,UAAU,WAAW,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,sBAAsB,CAAC,YAAoB;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,mBAAmB,CAAC,kBAA0B;IAC3D,MAAM,OAAO,GAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAErF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAEpD,MAAM,oBAAoB,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IAE/D,MAAM,cAAc,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IACrF,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAClD,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACzC,CAAC;IACF,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE,6BAA6B;YACrC,WAAW,EAAE,kBAAkB;YAC/B,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,IAAkB;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,WAAW;QAC5B,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC;IACF,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,kDAAkD;AAClD,SAAS,WAAW,CAAC,YAAoB,EAAE,OAAoB;IAC7D,OAAO;QACL,OAAO,EAAE,KAAK;QACd,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;QAC5C,cAAc,EAAE,GAAG;KACpB,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,SAAS,QAAQ,CAAC,YAAoB,EAAE,MAAc;IACpD,OAAO;QACL,2BAA2B,YAAY,EAAE;QACzC,0BAA0B,MAAM,EAAE;QAClC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAC/B,SAAiB,EACjB,YAAoB,EACpB,OAAoB;IAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAC9B,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAClE,MAAM,CACP,CAAC;IACF,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EACvB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,EACtC,MAAM,CACP,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,SAAS,cAAc,CAAC,SAAiB,EAAE,WAAoB,EAAE,aAAsB;IACrF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CACH,aAAa;QACX,CAAC,CAAC,2FAA2F;QAC7F,CAAC,CAAC,qCAAqC,CAC1C,CAAC;IACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,aAAa,CAAC,CAAC;IACrB,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,KAAK,CAAC,eAAe,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CACH,2EAA2E;YACzE,0BAA0B,CAC7B,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,SAAiB;IACxC,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,kFAAkF,CAAC,CAAC;IAC1F,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,KAAK,CAAC,aAAa,CAAC,CAAC;IACrB,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;IAC3B,KAAK,CAAC,eAAe,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAwB,EAAE,OAAoB;IAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtE,gFAAgF;IAChF,0EAA0E;IAC1E,+EAA+E;IAC/E,kFAAkF;IAClF,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,oDAAoD,SAAS,2BAA2B,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3D,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAC/C,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QAClD,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE;YACnE,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,kBAAkB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,oBAAoB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAE5C,cAAc,CAAC,IAAI,IAAI,GAAG,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACtF,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;SACvB,WAAW,CAAC,yDAAyD,CAAC;SACtE,QAAQ,CAAC,QAAQ,EAAE,2DAA2D,CAAC;SAC/E,MAAM,CAAC,qBAAqB,EAAE,oCAAoC,CAAC;SACnE,MAAM,CACL,iBAAiB,EACjB,yDAAyD,EACzD,oBAAoB,CACrB;SACA,MAAM,CAAC,mBAAmB,EAAE,uDAAuD,CAAC;SACpF,MAAM,CACL,eAAe,EACf,+FAA+F,CAChG;SACA,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,OAAoB,EAAE,EAAE;QAC/D,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgecart/cli",
-  "version": "2.202607190047.0",
+  "version": "2.202607240817.0",
   "type": "module",
   "description": "CLI for scaffolding and operating ForgeCart channel storefronts",
   "bin": {

package/templates/storefront/.env.example

@@ -1,6 +1,6 @@
 # ForgeCart channel credentials.
 #
-# `forgecart init` writes the real values to `.env.local` for you. This file
+# `forgecart init` writes the real values to `.env` for you. This file
 # documents the variables the storefront reads. Both are required and used
 # server-side only (never exposed to the browser).
 

package/templates/storefront/README.md

@@ -17,8 +17,8 @@ The storefront reads two environment variables (server-side only):
 | `FORGECART_CHANNEL_TOKEN` | Identifies the channel; sent as the `forgecart-token` header. |
 | `FORGECART_SHOP_API_URL`  | Base URL of the channel's shop GraphQL API (`.../shop-api`).  |
 
-`forgecart init` writes both to `.env.local` for you. To configure manually,
-copy `.env.example` to `.env.local` and fill them in.
+`forgecart init` writes both to `.env` for you. To configure manually,
+copy `.env.example` to `.env` and fill them in.
 
 These values are consumed in [`src/lib/forgecart.ts`](src/lib/forgecart.ts),
 which constructs and memoizes a singleton `ForgeCartShopClient`:

package/templates/storefront/next.config.js

@@ -4,22 +4,23 @@ const nextConfig = {
   // storefront with `next start` without a full node_modules tree.
   output: 'standalone',
   reactStrictMode: true,
-  // The visual-editor preview runs THIS dev server inside a workspace pod and is
-  // reached cross-origin through the channel's preview ingress host
-  // (`<code>.127.0.0.1.nip.io:8081` on a bare host; `<code>-<vm>.vm.forgecart.com`
-  // through the Cloudflare tunnel of a `pnpm vm` environment; `<code>.dev|test
-  // .forgecart.dev` and `<code>.forgecart.dev` deployed) — never the pod's own
-  // `localhost:3000`. Next 16 ENFORCES `allowedDevOrigins`: a dev request whose
-  // host is not localhost/127.0.0.1 and not listed here is blocked, which
-  // silently kills the `/_next` HMR websocket (and the dashboard iframe's dev
-  // channel) with no page error. The `*` wildcard matches across dots, so
-  // `*.forgecart.dev` covers every env's preview subdomain. Dev-only —
-  // `next start` (deployed storefronts) ignores it.
+  // The visual-editor preview runs THIS dev server inside a workspace pod,
+  // embedded cross-origin in the dashboard's editor iframe. Next 16 ENFORCES
+  // `allowedDevOrigins`: it 403s any cross-site request to an internal dev
+  // resource (`/_next`, `/__nextjs`, the HMR websocket) whose Origin/Referer
+  // host is not localhost/127.0.0.1 and not listed here — silently killing the
+  // dashboard iframe's dev channel with no page error. So this list must name
+  // every ORIGIN THAT EMBEDS the editor — i.e. each env's DASHBOARD host — not
+  // just the preview subdomain. GOTCHA: `*` matches exactly ONE label (Next's
+  // `matchWildcardDomain`), so `*.forgecart.dev` does NOT cover the two-label
+  // prod preview host `<code>.preview.forgecart.dev` — it must be listed
+  // explicitly. Dev-only — `next start` (deployed storefronts) ignores it.
   allowedDevOrigins: [
-    '*.127.0.0.1.nip.io',
-    '*.vm.forgecart.com',
-    '*.dev.forgecart.dev',
-    '*.forgecart.dev',
+    '*.vm.forgecart.com', // `pnpm vm` Cloudflare-tunnel dashboards
+    '*.dev.forgecart.dev', // dev/test dashboard + preview subdomains
+    '*.forgecart.dev', // single-label deployed preview hosts
+    '*.preview.forgecart.dev', // two-label prod preview host (`*.forgecart.dev` can't match it)
+    'dashboard.forgecart.com', // prod dashboard origin that embeds the editor
   ],
   experimental: {
     // Persist Turbopack's dev compile artifacts to `.next` so a pod can serve

package/templates/storefront/package.json

@@ -8,11 +8,12 @@
     "start": "next start"
   },
   "dependencies": {
-    "@forgecart/designer-runtime": "^1.0.0",
+    "@forgecart/designer-runtime": "^1.202607161748.0",
     "@forgecart/sdk": "^1.2.6",
     "next": "^16.1.0",
     "react": "^19.0.0",
-    "react-dom": "^19.0.0"
+    "react-dom": "^19.0.0",
+    "uuidv7": "^1.1.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",

package/templates/storefront/src/app/%5F%5Ffc/track/route.ts

@@ -0,0 +1,168 @@
+import { NextResponse } from 'next/server';
+import type { NextRequest } from 'next/server';
+
+import {
+  forwardTrackEvent,
+  getUpstreamConfig,
+  isObviousBot,
+  type TrackEventInput,
+} from '../../../lib/track-forward';
+
+/**
+ * Same-origin marketing-event relay (design doc S7).
+ *
+ * `ForgeTracker` batches client events (page_view, cta_click, heartbeat, …)
+ * and POSTs them here; this handler forwards each item to the ForgeCart shop
+ * API as a `trackEvent` GraphQL mutation. Unlike `__forge_beacon` this route
+ * is a PRODUCTION feature — tracking runs on deployed storefronts — with one
+ * inert guard: before `forgecart init` writes `.env` (the image-build
+ * prewarm) there is no shop to talk to, so every item answers `accepted:false`
+ * without any upstream call and the server never crashes.
+ *
+ * The upstream hop itself (raw HTTP GraphQL POST with the channel token, the
+ * shopper session as Bearer, UA + `x-forwarded-for` enrichment, and the
+ * why-not-the-SDK rationale) lives in `src/lib/track-forward.ts` — shared with
+ * the F-B `experiment_exposure` emission so both server-side emitters speak
+ * one contract. This route owns everything batch-shaped: parsing, per-item
+ * validation, the bot gate, session threading, and cookie persistence.
+ *
+ * Session capture mirrors `cart-actions.ts#persistSession`: the shop API
+ * surfaces a freshly minted session in the response `extensions`
+ * (`forgecart-auth-token`) exactly once; the first touched item captures it,
+ * the remaining items of the batch ride it as Bearer (one identity per batch),
+ * and the relay response persists it into the httpOnly `forgecart-session`
+ * cookie with the same attributes the cart actions use — the first tracked
+ * interaction establishes the shopper identity the cart will later reuse.
+ *
+ * Contract: per-item isolation (one upstream failure never kills the batch),
+ * `accepted:false` is TERMINAL for that item (the tracker never retries), and
+ * obviously non-human user agents short-circuit the whole batch with zero
+ * upstream calls.
+ *
+ * Folder name: `%5F%5Ffc` is URL-encoded `__fc` — the App Router treats
+ * `_`-prefixed folders as PRIVATE (excluded from routing), and the `%5F`
+ * escape is Next's documented way to serve a literal-underscore URL segment.
+ * A folder literally named `__fc` would silently 404.
+ */
+export const dynamic = 'force-dynamic';
+
+const SESSION_COOKIE = 'forgecart-session';
+/** Mirrors `cart-actions.ts#persistSession` — the cookie is one shared identity. */
+const SESSION_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 30;
+
+/** The tracker flushes at ≤10 events; anything past this is not our client. */
+const MAX_BATCH_SIZE = 50;
+
+/** Canonical textual UUID — the only client `eventId` shape the API accepts. */
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+
+interface TrackItemResult {
+  accepted: boolean;
+  eventId: string | null;
+}
+
+function isPlainObject(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+/** Parse the request body into a bounded batch array, or `null` when malformed. */
+async function parseBatch(request: NextRequest): Promise<unknown[] | null> {
+  let body: unknown;
+  try {
+    body = await request.json();
+  } catch {
+    return null;
+  }
+  if (!isPlainObject(body) || !Array.isArray(body.events)) return null;
+  if (body.events.length === 0 || body.events.length > MAX_BATCH_SIZE) return null;
+  return body.events;
+}
+
+/** Copy an optional string field from the raw item, rejecting non-string junk. */
+function readOptionalString(value: unknown): string | undefined {
+  return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+
+/**
+ * Validate one raw batch item into a `TrackEventInput`, or `null` when the
+ * item is malformed (missing/empty `eventType`, non-UUID `eventId`, non-object
+ * `properties`). Only allowlisted fields cross to the upstream call.
+ */
+function validateItem(raw: unknown): TrackEventInput | null {
+  if (!isPlainObject(raw)) return null;
+  const { eventType, eventId, properties } = raw;
+  if (typeof eventType !== 'string' || eventType.length === 0) return null;
+  if (eventId !== undefined && (typeof eventId !== 'string' || !UUID_PATTERN.test(eventId))) {
+    return null;
+  }
+  if (properties !== undefined && !isPlainObject(properties)) return null;
+
+  const input: TrackEventInput = { eventType };
+  if (typeof eventId === 'string') input.eventId = eventId;
+  const occurredAt = readOptionalString(raw.occurredAt);
+  if (occurredAt) input.occurredAt = occurredAt;
+  if (isPlainObject(properties)) input.properties = properties;
+  const utmSource = readOptionalString(raw.utmSource);
+  if (utmSource) input.utmSource = utmSource;
+  const utmMedium = readOptionalString(raw.utmMedium);
+  if (utmMedium) input.utmMedium = utmMedium;
+  const utmCampaign = readOptionalString(raw.utmCampaign);
+  if (utmCampaign) input.utmCampaign = utmCampaign;
+  const utmTerm = readOptionalString(raw.utmTerm);
+  if (utmTerm) input.utmTerm = utmTerm;
+  const utmContent = readOptionalString(raw.utmContent);
+  if (utmContent) input.utmContent = utmContent;
+  const currencyCode = readOptionalString(raw.currencyCode);
+  if (currencyCode) input.currencyCode = currencyCode;
+  return input;
+}
+
+export async function POST(request: NextRequest): Promise<NextResponse> {
+  const batch = await parseBatch(request);
+  if (!batch) {
+    return NextResponse.json({ error: 'malformed batch' }, { status: 400 });
+  }
+
+  const rejectAll = (): NextResponse =>
+    NextResponse.json({
+      results: batch.map((): TrackItemResult => ({ accepted: false, eventId: null })),
+    });
+
+  // Inert before `forgecart init` writes `.env` (image-prewarm contract).
+  if (!getUpstreamConfig()) return rejectAll();
+
+  const userAgent = request.headers.get('user-agent') ?? '';
+  if (isObviousBot(userAgent)) return rejectAll();
+
+  const incomingSession = request.cookies.get(SESSION_COOKIE)?.value ?? null;
+  const forwardedFor = request.headers.get('x-forwarded-for');
+
+  let sessionToken = incomingSession;
+  const results: TrackItemResult[] = [];
+  // Sequential on purpose: the first touched item mints the session and every
+  // later item of the batch must ride it — parallel sends would mint one
+  // identity per item and shatter attribution.
+  for (const raw of batch) {
+    const input = validateItem(raw);
+    if (!input) {
+      results.push({ accepted: false, eventId: null });
+      continue;
+    }
+    const outcome = await forwardTrackEvent(input, { sessionToken, userAgent, forwardedFor });
+    results.push({ accepted: outcome.accepted, eventId: outcome.eventId });
+    if (outcome.sessionToken) sessionToken = outcome.sessionToken;
+  }
+
+  const response = NextResponse.json({ results });
+  // Persist a newly minted (or upstream-refreshed) session exactly like
+  // `cart-actions.ts#persistSession` — same cookie, same attributes.
+  if (sessionToken && sessionToken !== incomingSession) {
+    response.cookies.set(SESSION_COOKIE, sessionToken, {
+      httpOnly: true,
+      sameSite: 'lax',
+      path: '/',
+      maxAge: SESSION_COOKIE_MAX_AGE_SECONDS,
+    });
+  }
+  return response;
+}

package/templates/storefront/src/app/layout.tsx

@@ -1,8 +1,8 @@
 import type { Metadata } from 'next';
 import type { ReactNode } from 'react';
 
-import { ForgeAnalytics } from '../components/ForgeAnalytics';
 import { ForgeErrorBeacon } from '../components/ForgeErrorBeacon';
+import { ForgeTracker } from '../components/ForgeTracker';
 import { ForgecartDesigner } from '../components/ForgecartDesigner';
 import { Header } from '../components/Header';
 import { getCart } from '../lib/cart-actions';
@@ -31,7 +31,7 @@ export default async function RootLayout({ children }: { children: ReactNode })
         </CartProvider>
         <ForgecartDesigner />
         <ForgeErrorBeacon />
-        <ForgeAnalytics
+        <ForgeTracker
           shopApiUrl={process.env.FORGECART_SHOP_API_URL ?? ''}
           channelToken={process.env.FORGECART_CHANNEL_TOKEN ?? ''}
         />

package/templates/storefront/src/app/page.tsx

@@ -1,6 +1,7 @@
 import Link from 'next/link';
 
 import { ProductCard } from '../components/ProductCard';
+import { getVariant } from '../lib/experiments';
 import { getFeaturedProducts } from '../lib/forgecart';
 
 // Product data changes in the dashboard, so render on each request.
@@ -8,16 +9,27 @@ export const dynamic = 'force-dynamic';
 
 export default async function HomePage() {
   const products = await getFeaturedProducts(4);
+  // A/B example (design doc F-B): variants are code branches keyed on
+  // `variantKey`. `hero-headline` is the template's reference experiment —
+  // create one with that key (variants `control` + `b`) in the dashboard and
+  // this hero starts splitting; until then `variantKey` is null and the
+  // default copy renders. `data-fc-variant` mirrors the assignment for
+  // debugging/verification; exposure tracking happens server-side.
+  const hero = await getVariant('hero-headline');
 
   return (
     <div className="space-y-12">
-      <section className="rounded-2xl bg-white p-10 shadow-sm">
+      <section
+        data-fc-variant={hero.variantKey ?? 'default'}
+        className="rounded-2xl bg-white p-10 shadow-sm"
+      >
         <h1 className="text-3xl font-bold tracking-tight text-gray-900">
           Welcome to the shop
         </h1>
         <p className="mt-3 max-w-2xl text-gray-600">
-          This storefront is served by a ForgeCart channel. Browse the catalog
-          and add products to your cart.
+          {hero.variantKey === 'b'
+            ? 'Fresh picks, fair prices — see what everyone is adding to their carts.'
+            : 'This storefront is served by a ForgeCart channel. Browse the catalog and add products to your cart.'}
         </p>
         <Link
           href="/products"

package/templates/storefront/src/components/CartView.tsx

@@ -33,6 +33,7 @@ export function CartView({ channelGroups }: { channelGroups: SellingPlanGroup[]
         <p className="text-gray-500">Your cart is empty.</p>
         <Link
           href="/products"
+          data-fc-track="cart-browse-products"
           className="inline-block rounded-md bg-gray-900 px-5 py-2.5 text-sm font-medium text-white transition hover:bg-gray-700"
         >
           Browse products
@@ -134,6 +135,7 @@ export function CartView({ channelGroups }: { channelGroups: SellingPlanGroup[]
                   type="button"
                   onClick={() => setSellingPlan(plan.id)}
                   disabled={pending}
+                  data-fc-track="cart-subscribe-order"
                   aria-pressed={active}
                   className={`rounded-md border px-3 py-2 text-left text-sm transition disabled:opacity-50 ${
                     active