@forgecart/cli 2.202610071755.0 → 2.202610082355.0

package/templates/storefront/README.md

@@ -13,15 +13,19 @@ To migrate a storefront built before the locale and SEO layer, follow [`SEO-MIGR
 
 ## Configuration
 
-The storefront reads three environment variables (server-side only):
+The storefront reads four environment variables (server-side only):
 
 | Variable                  | Purpose                                                        |
 | ------------------------- | -------------------------------------------------------------- |
 | `FORGECART_CHANNEL_TOKEN` | Identifies the channel; sent as the `forgecart-token` header.  |
 | `FORGECART_SHOP_API_URL`  | Base URL of the channel's shop GraphQL API (`.../shop-api`).   |
 | `FORGECART_ADMIN_SECRET`  | Channel admin secret for server-side admin operations.         |
+| `FORGECART_ADMIN_API_URL` | URL of the channel's admin GraphQL API (`.../admin-api`).      |
 
-`forgecart init` writes all of them to `.env` — it is the sole author of that
+`forgecart init` looks for all four in the environment, `.env` and
+`.forgecart/config.json`; when any is missing it opens the dashboard's
+`/authorize` page, and the approval delivers them. Either way it writes all of
+them to `.env` — it is the sole author of that
 file, and `.env` is the only env file this project ever has (no `.env.example`,
 no `.env.local`). None of the values ever reaches the
 browser: every module that constructs an SDK client starts with

package/templates/storefront/src/server/forgecart/forgecart-client.factory.ts

@@ -6,8 +6,12 @@ import { Injectable } from '@nestjs/common';
 const SHOP_API_URL = process.env.FORGECART_SHOP_API_URL ?? '';
 const CHANNEL_TOKEN = process.env.FORGECART_CHANNEL_TOKEN ?? '';
 const ADMIN_SECRET = process.env.FORGECART_ADMIN_SECRET ?? '';
-/** The admin API is the shop API's sibling endpoint on the same host. */
-const ADMIN_API_URL = SHOP_API_URL.replace(/\/shop-api$/, '/admin-api');
+/**
+ * The admin API endpoint, read like the other three: `forgecart init` writes
+ * the URL the platform delivered, so a deployment free to choose its API paths
+ * never has it guessed from the shop URL.
+ */
+const ADMIN_API_URL = process.env.FORGECART_ADMIN_API_URL ?? '';
 
 /**
  * SDK clients for backend methods. The generated SDK is graphql-ws, so
@@ -21,13 +25,13 @@ export class ForgeCartClientFactory {
 
   /**
    * Whether the backend gate is fully configured: `forgecart init` wrote all
-   * three env values AND the admin endpoint is derivable from the shop URL.
-   * False during the image-build pre-warm (which renders with no env) — the
-   * runner then answers with a typed envelope instead of driving doomed
-   * clients, keeping the pre-warm contract (serve, never crash) intact.
+   * four env values. False during the image-build pre-warm (which renders
+   * with no env) — the runner then answers with a typed envelope instead of
+   * driving doomed clients, keeping the pre-warm contract (serve, never crash)
+   * intact.
    */
   isConfigured(): boolean {
-    return Boolean(SHOP_API_URL && CHANNEL_TOKEN && ADMIN_SECRET && ADMIN_API_URL !== SHOP_API_URL);
+    return Boolean(SHOP_API_URL && CHANNEL_TOKEN && ADMIN_SECRET && ADMIN_API_URL);
   }
 
   /**

package/templates/storefront-shadcn/README.md

@@ -14,15 +14,19 @@ To migrate a storefront built before the locale and SEO layer, follow [`SEO-MIGR
 
 ## Configuration
 
-The storefront reads three environment variables (server-side only):
+The storefront reads four environment variables (server-side only):
 
 | Variable                  | Purpose                                                        |
 | ------------------------- | -------------------------------------------------------------- |
 | `FORGECART_CHANNEL_TOKEN` | Identifies the channel; sent as the `forgecart-token` header.  |
 | `FORGECART_SHOP_API_URL`  | Base URL of the channel's shop GraphQL API (`.../shop-api`).   |
 | `FORGECART_ADMIN_SECRET`  | Channel admin secret for server-side admin operations.         |
+| `FORGECART_ADMIN_API_URL` | URL of the channel's admin GraphQL API (`.../admin-api`).      |
 
-`forgecart init` writes all of them to `.env` — it is the sole author of that
+`forgecart init` looks for all four in the environment, `.env` and
+`.forgecart/config.json`; when any is missing it opens the dashboard's
+`/authorize` page, and the approval delivers them. Either way it writes all of
+them to `.env` — it is the sole author of that
 file, and `.env` is the only env file this project ever has (no `.env.example`,
 no `.env.local`). None of the values ever reaches the
 browser: every module that constructs an SDK client starts with

package/templates/storefront-shadcn/src/server/forgecart/forgecart-client.factory.ts

@@ -6,8 +6,12 @@ import { Injectable } from '@nestjs/common';
 const SHOP_API_URL = process.env.FORGECART_SHOP_API_URL ?? '';
 const CHANNEL_TOKEN = process.env.FORGECART_CHANNEL_TOKEN ?? '';
 const ADMIN_SECRET = process.env.FORGECART_ADMIN_SECRET ?? '';
-/** The admin API is the shop API's sibling endpoint on the same host. */
-const ADMIN_API_URL = SHOP_API_URL.replace(/\/shop-api$/, '/admin-api');
+/**
+ * The admin API endpoint, read like the other three: `forgecart init` writes
+ * the URL the platform delivered, so a deployment free to choose its API paths
+ * never has it guessed from the shop URL.
+ */
+const ADMIN_API_URL = process.env.FORGECART_ADMIN_API_URL ?? '';
 
 /**
  * SDK clients for backend methods. The generated SDK is graphql-ws, so
@@ -21,13 +25,13 @@ export class ForgeCartClientFactory {
 
   /**
    * Whether the backend gate is fully configured: `forgecart init` wrote all
-   * three env values AND the admin endpoint is derivable from the shop URL.
-   * False during the image-build pre-warm (which renders with no env) — the
-   * runner then answers with a typed envelope instead of driving doomed
-   * clients, keeping the pre-warm contract (serve, never crash) intact.
+   * four env values. False during the image-build pre-warm (which renders
+   * with no env) — the runner then answers with a typed envelope instead of
+   * driving doomed clients, keeping the pre-warm contract (serve, never crash)
+   * intact.
    */
   isConfigured(): boolean {
-    return Boolean(SHOP_API_URL && CHANNEL_TOKEN && ADMIN_SECRET && ADMIN_API_URL !== SHOP_API_URL);
+    return Boolean(SHOP_API_URL && CHANNEL_TOKEN && ADMIN_SECRET && ADMIN_API_URL);
   }
 
   /**