@kotao/storefront 0.2.5 → 0.2.6

package/dist/{routing-sEonP93J.d.ts → routing-Bz3Cg0BW.d.ts}

@@ -1,8 +1,8 @@
-import { S as StoredThemeSettings } from './fetch-M3Y-fQrW.js';
+import { S as StoredThemeSettings } from './fetch-Bq_cc8_G.js';
 import { C as CacheStrategy, K as KotaoCache, S as StorefrontClient, b as StorefrontCacheInput } from './client-D51WdvYR.js';
-import { C as CartHandler } from './createCartHandler-C4RrPwSG.js';
-import { E as EventsClient } from './client-bsiNPHBi.js';
-import { H as HydrogenSession } from './types-bcbQzx87.js';
+import { C as CartHandler } from './createCartHandler-7DdKB-GF.js';
+import { E as EventsClient } from './client-CwOPPpFF.js';
+import { H as HydrogenSession } from './types-DZX8ScsJ.js';
 
 /**
  * Typed customer-account shapes for the `@kotao/storefront` SDK surface (#91). The names/signatures
@@ -123,7 +123,7 @@ interface CustomerAccountClient {
     requestLoginCode(input: RequestLoginCodeInput): Promise<RequestLoginCodeResult>;
     /**
      * POST to the proxy `/account/verify` endpoint with the OTP code. Returns the raw proxy `Response`
-     * so its `Set-Cookie` and 302 redirect headers propagate to the theme's RR7 action unchanged —
+     * so its `Set-Cookie` and 302 redirect headers propagate to the theme's RR8 action unchanged —
      * do NOT swallow or re-create this Response.
      */
     verifyLoginCode(input: VerifyLoginCodeInput): Promise<Response>;
@@ -217,12 +217,22 @@ interface KotaoSession extends HydrogenSession {
 }
 interface KotaoContext {
     readonly storefront: StorefrontClient;
+    /**
+     * Authenticated fetch for REST resources below `STOREFRONT_API_ENDPOINT`.
+     *
+     * This is deliberately not a general-purpose fetch: theme code is untrusted, so requests outside
+     * the configured storefront API origin + base path fail closed before Gateway-signed shop headers
+     * are attached.
+     */
+    readonly fetch: typeof fetch;
     readonly events: EventsClient;
     readonly cart: CartHandler;
     readonly customerAccount: CustomerAccountClient;
     readonly geo: Geo | null;
     readonly withCache: WithCache;
     readonly locale: string | null;
+    /** Gateway-selected Market context. Informational in theme code; API authorization uses HMAC. */
+    readonly market?: StorefrontMarketContext | null;
     /** Cookie-presence hint. `isLoggedIn` is true when the session cookie is present in the request.
      *  The authoritative check (HMAC verification) happens server-side in the proxy. */
     readonly session: KotaoSession;
@@ -236,8 +246,26 @@ interface KotaoContext {
      */
     readonly loadThemeSettings: (opts?: {
         readonly fetch?: typeof fetch;
+        readonly templateHandle?: string;
     }) => Promise<StoredThemeSettings>;
 }
+interface StorefrontMarketContext {
+    readonly id: string;
+    readonly pathPrefix: string | null;
+    readonly defaultLocale: string;
+    readonly alternateLocales: readonly string[];
+    readonly rootUrls: readonly {
+        readonly locale: string;
+        readonly url: string;
+    }[];
+    readonly canonicalUrl: string;
+    readonly themeId: string | null;
+    readonly settingsEnvironmentHandle: string | null;
+}
+
+declare function marketContextFromHeaders(headers: {
+    get(name: string): string | null;
+}): StorefrontMarketContext | null;
 declare function trustedShopOriginFromHeaders(headers: Headers): string | undefined;
 /**
  * Framework-agnostic per-request context, mirroring Hydrogen's `createHydrogenContext`:
@@ -256,6 +284,8 @@ interface StrippedLocalePath {
 }
 interface LocalizePathOptions {
     readonly primaryLocale?: string | null;
+    /** Trusted Market subfolder prefix that must survive locale switching. */
+    readonly marketPathPrefix?: string | null;
 }
 declare function isLocalePathSegment(segment: string): boolean;
 declare function localeFromAcceptLanguage(header: string | null | undefined, availableLocales?: readonly string[]): string | null;
@@ -266,4 +296,4 @@ declare function stripLocalePrefixFromPathname(pathname: string): StrippedLocale
 declare function stripLocalePrefixFromRequest(request: Request): Request;
 declare function localizePath(path: string, locale: string | null | undefined, options?: LocalizePathOptions): string;
 
-export { type Address as A, trustedShopOriginFromHeaders as B, type CustomerAccountClient as C, verifyGeo as D, GEO_HEADER as G, type KotaoEnv as K, type LocalizePathOptions as L, type Money as M, type Order as O, ROUTING_LOCALE_HEADER as R, type StorefrontExecutionContext as S, type VerifyLoginCodeInput as V, type WithCache as W, type KotaoContext as a, type KotaoSession as b, type AddressConnection as c, type CustomerAccount as d, CustomerAccountError as e, type CustomerAccountErrorCode as f, GEO_SIGNATURE_HEADER as g, type Geo as h, type OrderConnection as i, type OrderPageInfo as j, type OrdersOptions as k, ROUTING_ORIGINAL_PATHNAME_HEADER as l, type RequestLoginCodeInput as m, type RequestLoginCodeResult as n, type StrippedLocalePath as o, createKotaoContext as p, createWithCache as q, isLocalePathSegment as r, stripLocalePrefixFromRequest as s, localeFromAcceptLanguage as t, localeFromPathname as u, localeFromRequest as v, localizePath as w, originalPathnameFromRequest as x, signGeo as y, stripLocalePrefixFromPathname as z };
+export { type Address as A, signGeo as B, type CustomerAccountClient as C, stripLocalePrefixFromPathname as D, trustedShopOriginFromHeaders as E, verifyGeo as F, GEO_HEADER as G, type KotaoContext as K, type LocalizePathOptions as L, type Money as M, type Order as O, ROUTING_LOCALE_HEADER as R, type StorefrontExecutionContext as S, type VerifyLoginCodeInput as V, type WithCache as W, type KotaoEnv as a, type KotaoSession as b, type AddressConnection as c, type CustomerAccount as d, CustomerAccountError as e, type CustomerAccountErrorCode as f, GEO_SIGNATURE_HEADER as g, type Geo as h, type OrderConnection as i, type OrderPageInfo as j, type OrdersOptions as k, ROUTING_ORIGINAL_PATHNAME_HEADER as l, type RequestLoginCodeInput as m, type RequestLoginCodeResult as n, type StorefrontMarketContext as o, type StrippedLocalePath as p, createKotaoContext as q, createWithCache as r, stripLocalePrefixFromRequest as s, isLocalePathSegment as t, localeFromAcceptLanguage as u, localeFromPathname as v, localeFromRequest as w, localizePath as x, marketContextFromHeaders as y, originalPathnameFromRequest as z };

package/dist/seo.d.ts

@@ -1,10 +1,10 @@
-import { S as SeoConfig, b as SeoDescriptor, J as JsonLd } from './types-BDhHWZsP.js';
-export { A as Alternate, O as OpenGraph, a as OpenGraphImage, T as TwitterCard } from './types-BDhHWZsP.js';
+import { S as SeoConfig, b as SeoDescriptor, J as JsonLd, A as Alternate } from './types-BkY0yET-.js';
+export { O as OpenGraph, a as OpenGraphImage, T as TwitterCard } from './types-BkY0yET-.js';
 import { S as StorefrontClient } from './client-D51WdvYR.js';
 import './http-types-CGh8WGHB.js';
 
 /**
- * Merge SEO config across levels and emit a flat, deduplicated descriptor list (RR7 `meta`-compatible):
+ * Merge SEO config across levels and emit a flat, deduplicated descriptor list (RR8 `meta`-compatible):
  * title, description, canonical, robots, Open Graph, Twitter Card, hreflang alternates, and JSON-LD.
  * Open Graph / Twitter titles + descriptions fall back to the page title/description (Hydrogen-shaped).
  */
@@ -95,6 +95,7 @@ declare function restaurantJsonLd(input: Omit<LocalBusinessInput, 'type'>): Json
  * Storefront API or a search index — an open question, NOT decided here): build the entry list, then call
  * these. The index shape exists so large catalogs split into child sitemaps rather than one document.
  */
+
 type ChangeFreq = 'always' | 'hourly' | 'daily' | 'weekly' | 'monthly' | 'yearly' | 'never';
 interface SitemapEntry {
     readonly loc: string;
@@ -102,6 +103,8 @@ interface SitemapEntry {
     readonly changefreq?: ChangeFreq;
     /** 0.0–1.0 (clamped). */
     readonly priority?: number;
+    /** Reciprocal language variants for this URL, including x-default when applicable. */
+    readonly alternates?: readonly Alternate[];
 }
 interface SitemapIndexEntry {
     readonly loc: string;
@@ -155,4 +158,4 @@ declare function resolveStorefrontRedirect(storefront: StorefrontClient, path: s
  */
 declare function storefrontRedirect(options: StorefrontRedirectOptions): Promise<Response>;
 
-export { type AddressInput, type BreadcrumbItem, type ChangeFreq, type GeoInput, JsonLd, type LocalBusinessInput, type OfferInput, type OrganizationInput, type ProductJsonLdInput, type RedirectLookup, type RedirectOptions, type RobotsOptions, SeoConfig, SeoDescriptor, type SitemapEntry, type SitemapIndexEntry, type StorefrontRedirectOptions, URL_REDIRECT_QUERY, type WebSiteInput, breadcrumbListJsonLd, buildRobotsTxt, buildSitemapIndexXml, buildSitemapXml, getSeoMeta, localBusinessJsonLd, organizationJsonLd, productJsonLd, resolveRedirect, resolveStorefrontRedirect, restaurantJsonLd, robotsResponse, serializeJsonLd, sitemapIndexResponse, sitemapResponse, storefrontRedirect, websiteJsonLd };
+export { type AddressInput, Alternate, type BreadcrumbItem, type ChangeFreq, type GeoInput, JsonLd, type LocalBusinessInput, type OfferInput, type OrganizationInput, type ProductJsonLdInput, type RedirectLookup, type RedirectOptions, type RobotsOptions, SeoConfig, SeoDescriptor, type SitemapEntry, type SitemapIndexEntry, type StorefrontRedirectOptions, URL_REDIRECT_QUERY, type WebSiteInput, breadcrumbListJsonLd, buildRobotsTxt, buildSitemapIndexXml, buildSitemapXml, getSeoMeta, localBusinessJsonLd, organizationJsonLd, productJsonLd, resolveRedirect, resolveStorefrontRedirect, restaurantJsonLd, robotsResponse, serializeJsonLd, sitemapIndexResponse, sitemapResponse, storefrontRedirect, websiteJsonLd };

package/dist/seo.js

@@ -1,4 +1,4 @@
-export { URL_REDIRECT_QUERY, breadcrumbListJsonLd, buildRobotsTxt, buildSitemapIndexXml, buildSitemapXml, localBusinessJsonLd, organizationJsonLd, productJsonLd, resolveRedirect, resolveStorefrontRedirect, restaurantJsonLd, robotsResponse, sitemapIndexResponse, sitemapResponse, storefrontRedirect, websiteJsonLd } from './chunk-PXVDVUFX.js';
-export { getSeoMeta, serializeJsonLd } from './chunk-MYDKIJRH.js';
+export { URL_REDIRECT_QUERY, breadcrumbListJsonLd, buildRobotsTxt, buildSitemapIndexXml, buildSitemapXml, localBusinessJsonLd, organizationJsonLd, productJsonLd, resolveRedirect, resolveStorefrontRedirect, restaurantJsonLd, robotsResponse, sitemapIndexResponse, sitemapResponse, storefrontRedirect, websiteJsonLd } from './chunk-W74FGUZH.js';
+export { getSeoMeta, serializeJsonLd } from './chunk-SVMYFYIA.js';
 //# sourceMappingURL=seo.js.map
 //# sourceMappingURL=seo.js.map

package/dist/settings.d.ts

@@ -1,7 +1,7 @@
 import { SectionSchema, Preset, ValuesDocument, SettingInput, SectionInstance } from '@kotao/storefront-contracts/theme';
-import { c as ResolvedSection, R as ResolvedSettings, a as ThemeSettingsSnapshot } from './store-CtCWHI8H.js';
-export { b as ResolvedBlock, T as ThemeSettingsStore, d as createThemeSettingsStore } from './store-CtCWHI8H.js';
-export { F as FetchThemeSettingsOptions, S as StoredThemeSettings, f as fetchThemeSettings } from './fetch-M3Y-fQrW.js';
+import { a as ResolvedSection, R as ResolvedSettings, c as ThemeSettingsSnapshot } from './store-DO08fzJi.js';
+export { b as ResolvedBlock, T as ThemeSettingsStore, d as createThemeSettingsStore } from './store-DO08fzJi.js';
+export { F as FetchThemeSettingsOptions, S as StoredThemeSettings, f as fetchThemeSettings } from './fetch-Bq_cc8_G.js';
 import './client-D51WdvYR.js';
 import './http-types-CGh8WGHB.js';
 
@@ -51,4 +51,14 @@ interface ResolveThemeSettingsArgs {
 /** Compose the merge over an entire values document → the snapshot a theme renders from. */
 declare function resolveThemeSettings(args: ResolveThemeSettingsArgs): ThemeSettingsSnapshot;
 
-export { type ResolveThemeSettingsArgs, ResolvedSection, ResolvedSettings, ThemeSettingsSnapshot, mergeSection, mergeSettings, resolveThemeSettings };
+/**
+ * Reconcile a platform-derived layout group with previously published merchant values.
+ *
+ * Synthetic groups such as `layout-static` are rebuilt from layout/theme.liquid and are not
+ * merchant-editable section groups. The current document therefore owns membership and order.
+ * Stored values only enrich matching instances, so removed/guarded sections cannot return after a
+ * runtime rebuild while saved settings for drawers and other surviving furniture remain intact.
+ */
+declare function reconcileSyntheticSectionGroup(current: ValuesDocument, stored: ValuesDocument | null | undefined): ValuesDocument;
+
+export { type ResolveThemeSettingsArgs, ResolvedSection, ResolvedSettings, ThemeSettingsSnapshot, mergeSection, mergeSettings, reconcileSyntheticSectionGroup, resolveThemeSettings };

package/dist/settings.js

@@ -1,4 +1,4 @@
-export { createThemeSettingsStore, mergeSection, mergeSettings, resolveThemeSettings } from './chunk-H3D7BAOL.js';
-export { fetchThemeSettings } from './chunk-M7BPQ54D.js';
+export { createThemeSettingsStore, mergeSection, mergeSettings, reconcileSyntheticSectionGroup, resolveThemeSettings } from './chunk-VOTBNOWH.js';
+export { fetchThemeSettings } from './chunk-2MRB6SMP.js';
 //# sourceMappingURL=settings.js.map
 //# sourceMappingURL=settings.js.map

package/dist/{shop-BJSvtmnV.d.ts → shop-CnrnSAJw.d.ts}

@@ -1,4 +1,4 @@
-import { j as CartFormAction } from './types-bcbQzx87.js';
+import { j as CartFormAction } from './types-DZX8ScsJ.js';
 import { ReactNode } from 'react';
 
 interface CartFormProps {
@@ -79,18 +79,34 @@ declare const ANALYTICS_EVENTS: {
     readonly productAddedToCart: "product_added_to_cart";
 };
 type AnalyticsEventName = (typeof ANALYTICS_EVENTS)[keyof typeof ANALYTICS_EVENTS];
+type AnalyticsDeviceClass = 'mobile' | 'tablet' | 'desktop';
 /** Ambient context the provider attaches to every event before it reaches the pixel. */
 interface AnalyticsContext {
     readonly shopId?: string;
     readonly url?: string;
     readonly geo?: AnalyticsGeo;
+    readonly referrer?: string;
+    readonly utmSource?: string;
+    readonly utmMedium?: string;
+    readonly utmCampaign?: string;
+    readonly deviceClass?: AnalyticsDeviceClass;
 }
 interface PageViewedPayload {
     readonly title?: string;
 }
 interface ProductViewedPayload {
     readonly productId: string;
+    /** Stable offer id; Google Merchant Center and Google ecommerce events use this as item_id. */
+    readonly variantId?: string;
     readonly handle?: string;
+    readonly title?: string;
+    readonly variantTitle?: string;
+    readonly vendor?: string;
+    readonly sku?: string;
+    /** Major-unit price, e.g. 24.95. */
+    readonly price?: number;
+    readonly currency?: string;
+    readonly quantity?: number;
 }
 interface CollectionViewedPayload {
     readonly collectionId: string;
@@ -107,6 +123,13 @@ interface ProductAddedToCartPayload {
     readonly productId: string;
     readonly variantId: string;
     readonly quantity: number;
+    readonly title?: string;
+    readonly variantTitle?: string;
+    readonly vendor?: string;
+    readonly sku?: string;
+    /** Major-unit price, e.g. 24.95. */
+    readonly price?: number;
+    readonly currency?: string;
 }
 /** Event name → payload (the typed pub/sub surface). */
 interface AnalyticsEventMap {
@@ -135,6 +158,8 @@ interface AnalyticsEmitter {
 }
 declare function createAnalyticsEmitter(): AnalyticsEmitter;
 
+type AnonymousAnalyticsContext = Pick<AnalyticsContext, 'url'>;
+
 /** The actual network send. Injectable so tests don't touch the network. */
 type PixelSend = (endpoint: string, body: string) => void;
 interface PixelTransportOptions {
@@ -163,8 +188,10 @@ interface AnalyticsBusOptions {
     readonly transport: PixelTransport;
     /** Legacy consent seam retained for API compatibility while Storefront consent UI is disabled. */
     readonly getConsent: () => ConsentState;
-    /** Ambient context (shopId, geo, url) attached to each pixel event. */
+    /** Ambient context (including attribution and device class) attached to consented events. */
     readonly getContext?: () => AnalyticsContext;
+    /** Sanitized same-origin page URL used only for the anonymous page-view fallback. */
+    readonly getAnonymousContext?: () => AnonymousAnalyticsContext;
     /** Clock seam for deterministic timestamps in tests. */
     readonly now?: () => string;
 }
@@ -174,9 +201,9 @@ interface AnalyticsBus {
     flush(): void;
 }
 /**
- * Wire the emitter to the pixel. Every published event reaches theme subscribers (via the emitter) and
- * is also recorded to the pixel. Consent gating is temporarily disabled with the UI; the consent seam
- * remains so a proper replacement can reinstate the policy without changing theme APIs.
+ * Wire the emitter to the pixel. Every published event reaches theme subscribers (via the emitter).
+ * First-party recording is consent-strict: denied visits get only an anonymous page_viewed row and
+ * never evaluate ambient context, which may read attribution or device-class signals.
  */
 declare function createAnalyticsBus(options: AnalyticsBusOptions): AnalyticsBus;
 
@@ -199,4 +226,4 @@ interface GetShopAnalyticsOptions {
 }
 declare function getShopAnalytics(options: GetShopAnalyticsOptions): ShopAnalytics;
 
-export { type AnalyticsContext as A, type BoundNonceProvider as B, type ConsentState as C, DENIED_CONSENT as D, type EventHandler as E, createAnalyticsEmitter as F, GRANTED_CONSENT as G, createPixelTransport as H, getShopAnalytics as I, isGranted as J, mergeConsent as K, parseConsent as L, readConsentCookie as M, serializeConsent as N, type PageViewedPayload as P, type ShopAnalytics as S, type AnalyticsEmitter as a, type AnalyticsBus as b, type ConsentBucket as c, ANALYTICS_EVENTS as d, type AnalyticsBusOptions as e, type AnalyticsEventMap as f, getCartFormInput as g, type AnalyticsEventName as h, type AnalyticsGeo as i, CONSENT_BUCKETS as j, CONSENT_COOKIE as k, CartForm as l, type CartFormProps as m, type CartViewedPayload as n, type CollectionViewedPayload as o, type GetShopAnalyticsOptions as p, type PixelEvent as q, type PixelSend as r, type PixelTransport as s, type PixelTransportOptions as t, useNonce as u, type ProductAddedToCartPayload as v, type ProductViewedPayload as w, type SearchViewedPayload as x, buildConsentCookie as y, createAnalyticsBus as z };
+export { type AnalyticsContext as A, type BoundNonceProvider as B, type ConsentState as C, DENIED_CONSENT as D, type EventHandler as E, createAnalyticsBus as F, GRANTED_CONSENT as G, createAnalyticsEmitter as H, createPixelTransport as I, getShopAnalytics as J, isGranted as K, mergeConsent as L, parseConsent as M, readConsentCookie as N, serializeConsent as O, type PageViewedPayload as P, type ShopAnalytics as S, type AnalyticsEmitter as a, type AnalyticsBus as b, type ConsentBucket as c, ANALYTICS_EVENTS as d, type AnalyticsBusOptions as e, type AnalyticsDeviceClass as f, getCartFormInput as g, type AnalyticsEventMap as h, type AnalyticsEventName as i, type AnalyticsGeo as j, CONSENT_BUCKETS as k, CONSENT_COOKIE as l, CartForm as m, type CartFormProps as n, type CartViewedPayload as o, type CollectionViewedPayload as p, type GetShopAnalyticsOptions as q, type PixelEvent as r, type PixelSend as s, type PixelTransport as t, useNonce as u, type PixelTransportOptions as v, type ProductAddedToCartPayload as w, type ProductViewedPayload as x, type SearchViewedPayload as y, buildConsentCookie as z };

package/dist/{store-CtCWHI8H.d.ts → store-DO08fzJi.d.ts}

@@ -64,4 +64,4 @@ interface ThemeSettingsStore {
 }
 declare function createThemeSettingsStore(initial: ThemeSettingsSnapshot): ThemeSettingsStore;
 
-export { type ResolvedSettings as R, type ThemeSettingsStore as T, type ThemeSettingsSnapshot as a, type ResolvedBlock as b, type ResolvedSection as c, createThemeSettingsStore as d };
+export { type ResolvedSettings as R, type ThemeSettingsStore as T, type ResolvedSection as a, type ResolvedBlock as b, type ThemeSettingsSnapshot as c, createThemeSettingsStore as d };

package/dist/storefront-api-types.d.ts

@@ -201,6 +201,17 @@ interface ProductVariant extends LooseObject {
     readonly id: string;
     readonly image?: Image | null;
     readonly price: MoneyV2;
+    readonly quantityRule?: {
+        readonly minimum: number;
+        readonly maximum: number | null;
+        readonly increment: number;
+    } | null;
+    readonly quantityPriceBreaks?: {
+        readonly nodes?: Array<{
+            readonly minimumQuantity: number;
+            readonly price: MoneyV2;
+        }>;
+    };
     readonly product: Pick<Product, 'id' | 'handle' | 'title'>;
     readonly selectedOptions: SelectedOption[];
     readonly sku?: string | null;
@@ -289,6 +300,7 @@ interface CartBuyerIdentityInput extends LooseObject {
     readonly customerAccessToken?: string | null;
     readonly email?: string | null;
     readonly phone?: string | null;
+    readonly companyLocationId?: string | null;
 }
 interface CartDiscountCode extends LooseObject {
     readonly applicable?: boolean;

package/dist/{types-BDhHWZsP.d.ts → types-BkY0yET-.d.ts}

@@ -1,6 +1,6 @@
 /**
  * SEO surface types for `@kotao/storefront` (ADR-0003 §SDK), Hydrogen-shaped. Framework-agnostic:
- * `getSeoMeta` emits a flat descriptor list a theme can return from a React Router 7 `meta` export or
+ * `getSeoMeta` emits a flat descriptor list a theme can return from a React Router 8 `meta` export or
  * feed to the `<Seo/>` component.
  */
 interface OpenGraphImage {
@@ -27,7 +27,7 @@ interface TwitterCard {
     readonly description?: string;
     readonly image?: string;
 }
-/** An hreflang alternate. Design-only hook (no multi-language data ships) — emitted only when supplied. */
+/** An hreflang alternate emitted only when supplied. */
 interface Alternate {
     readonly hreflang: string;
     readonly href: string;
@@ -56,7 +56,7 @@ interface SeoConfig {
     /** schema.org JSON-LD object(s); accumulated (not overridden) across levels. */
     readonly jsonLd?: JsonLd | readonly JsonLd[];
 }
-/** A head descriptor, shaped to be React Router 7 `meta`-export compatible. */
+/** A head descriptor, shaped to be React Router 8 `meta`-export compatible. */
 type SeoDescriptor = {
     readonly title: string;
 } | {

package/dist/{types-bcbQzx87.d.ts → types-DZX8ScsJ.d.ts}

@@ -35,6 +35,7 @@ interface CartBuyerIdentityInput {
     readonly phone?: string | null;
     readonly countryCode?: string | null;
     readonly customerAccessToken?: string | null;
+    readonly companyLocationId?: string | null;
 }
 interface CartMetafield {
     readonly namespace: string;
@@ -104,6 +105,7 @@ interface CartBuyerIdentity {
     readonly email: string | null;
     readonly phone: string | null;
     readonly countryCode: string | null;
+    readonly companyLocationId: string | null;
 }
 interface Cart {
     readonly id: string;

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@kotao/storefront",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "type": "module",
   "license": "MIT",
-  "description": "Kotao Storefronts theme SDK — framework-agnostic server runtime (storefront client, SWR isolated cache, signed geo) + React Router 7 binding. Mirrors Hydrogen's API (ADR-0003). Leaf package (ADR-0006).",
+  "description": "Kotao Storefronts theme SDK — framework-agnostic server runtime, React Router 8 binding, and authenticated source-authoritative React/Hydrogen editor bridge (ADR-0003/ADR-0047). Leaf package (ADR-0006).",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/kotao-org/monorepo.git",
@@ -72,11 +72,11 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@kotao/storefront-contracts": "^0.2.2"
+    "@kotao/storefront-contracts": "^0.2.3"
   },
   "peerDependencies": {
     "react": "^18.2.0 || ^19.0.0",
-    "react-router": "^7.16.0"
+    "react-router": "^8.3.0"
   },
   "peerDependenciesMeta": {
     "react": {

package/dist/cart-documents-CwwRTvm8.d.ts

@@ -1,21 +0,0 @@
-import { CartAdapter } from '@kotao/smart-cart';
-
-/**
- * All fully-resolved cart GraphQL document strings from the react seam adapter.
- * Exported for schema-validation tests (apps/storefront-api/test/cart-graphql-documents.test.ts)
- * that submit each document to a real graphql-yoga instance and assert zero validation errors,
- * catching invalid field selections (e.g. subfields on a scalar) at test time rather than runtime.
- */
-declare const REACT_SEAM_CART_DOCUMENTS: readonly string[];
-/**
- * A CartAdapter that drives the storefront-api cart over the same-origin /api/storefront GraphQL proxy
- * (the proxy injects the read token + resolves the shop server-side). The theme supplies the cart id
- * (from its loader's cart cookie/session) and renders <CartDrawerOverlay adapter={this} />.
- */
-declare function createStorefrontApiCartAdapter(opts: {
-    readonly cartId: string;
-    readonly apiPath?: string;
-    readonly fetchImpl?: typeof fetch;
-}): CartAdapter;
-
-export { REACT_SEAM_CART_DOCUMENTS as R, createStorefrontApiCartAdapter as c };

package/dist/chunk-2IWNUDSZ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/react/storefront-cart-adapter.ts"],"names":[],"mappings":";AA0BA,IAAM,YAAA,GAAe,CAAC,CAAA,KAAwB,IAAA,CAAK,MAAM,UAAA,CAAW,CAAA,CAAE,MAAM,CAAA,GAAI,GAAG,CAAA;AAEnF,IAAM,WAAA,GAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAAA,CAAA;AAUpB,IAAM,UAAA,GAAa,4DAA4D,WAAW,CAAA,IAAA,CAAA;AAC1F,IAAM,SAAA,GAAY,+HAA+H,WAAW,CAAA,MAAA,CAAA;AAC5J,IAAM,YAAA,GAAe,2IAA2I,WAAW,CAAA,MAAA,CAAA;AAC3K,IAAM,YAAA,GAAe,gIAAgI,WAAW,CAAA,MAAA,CAAA;AAChK,IAAM,qBAAA,GAAwB,qKAAqK,WAAW,CAAA,MAAA,CAAA;AAQvM,IAAM,yBAAA,GAA+C;AAAA,EAC1D,UAAA;AAAA,EACA,SAAA;AAAA,EACA,YAAA;AAAA,EACA,YAAA;AAAA,EACA;AACF;AAEA,SAAS,QAAQ,CAAA,EAA4B;AAC3C,EAAA,MAAM,QAAA,GAAW,CAAA,CAAE,IAAA,CAAK,cAAA,CAAe,YAAA;AACvC,EAAA,MAAM,QAAyB,CAAA,CAAE,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM;AACtD,IAAA,MAAM,aAAqC,EAAC;AAC5C,IAAA,KAAA,MAAW,CAAA,IAAK,CAAA,CAAE,UAAA,IAAc,EAAC,EAAG;AAClC,MAAA,IAAI,EAAE,KAAA,KAAU,IAAA,aAAiB,CAAA,CAAE,GAAG,IAAI,CAAA,CAAE,KAAA;AAAA,IAC9C;AACA,IAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,IAAA,CAAK,UAAU,EAAE,MAAA,GAAS,CAAA;AACvD,IAAA,OAAO;AAAA,MACL,IAAI,CAAA,CAAE,EAAA;AAAA,MACN,KAAA,EAAO,CAAA,CAAE,WAAA,CAAY,OAAA,CAAQ,KAAA;AAAA,MAC7B,YAAA,EAAc,EAAE,WAAA,CAAY,KAAA;AAAA,MAC5B,SAAA,EAAW,CAAA,CAAE,WAAA,CAAY,EAAA,IAAM,IAAA;AAAA,MAC/B,UAAU,CAAA,CAAE,QAAA;AAAA,MACZ,QAAA,EAAU,CAAA,CAAE,WAAA,CAAY,KAAA,EAAO,GAAA,IAAO,IAAA;AAAA,MACtC,SAAA,EAAW,EAAE,MAAA,EAAQ,YAAA,CAAa,EAAE,IAAA,CAAK,WAAW,GAAG,QAAA,EAAS;AAAA,MAChE,GAAI,aAAA,IAAiB,EAAE,UAAA;AAAW,KACpC;AAAA,EACF,CAAC,CAAA;AACD,EAAA,MAAM,kBAAA,GAAqB,EAAE,IAAA,CAAK,aAAA,IAAiB,OAAO,YAAA,CAAa,CAAA,CAAE,IAAA,CAAK,aAAa,CAAA,GAAI,CAAA;AAC/F,EAAA,MAAM,YAAA,GAAe,EAAE,aAAA,EAAe,MAAA,CAAO,CAAC,IAAA,KAAS,IAAA,CAAK,SAAS,CAAC,CAAA;AACtE,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,QAAA,EAAU,EAAE,MAAA,EAAQ,YAAA,CAAa,EAAE,IAAA,CAAK,cAAc,GAAG,QAAA,EAAS;AAAA,IAClE,aAAa,CAAA,CAAE,WAAA;AAAA,IACf,QAAA;AAAA,IACA,GAAI,qBAAqB,CAAA,IAAK;AAAA,MAC5B,aAAA,EAAe,EAAE,MAAA,EAAQ,kBAAA,EAAoB,QAAA;AAAS,KACxD;AAAA,IACA,GAAI,YAAA,IAAgB,IAAA,IAAQ,aAAa,MAAA,GAAS,CAAA,IAAK,EAAE,YAAA;AAAa,GACxE;AACF;AAOO,SAAS,+BAA+B,IAAA,EAI/B;AACd,EAAA,MAAM,SAAA,GAAY,KAAK,SAAA,IAAa,KAAA;AACpC,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,iBAAA;AAChC,EAAA,MAAM,GAAA,GAAM,OACV,KAAA,EACA,SAAA,EACA,GAAA,KAC4B;AAC5B,IAAA,MAAM,GAAA,GAAM,MAAM,SAAA,CAAU,OAAA,EAAS;AAAA,MACnC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,QAAQ,kBAAA,EAAmB;AAAA,MAC1E,MAAM,IAAA,CAAK,SAAA,CAAU,EAAE,KAAA,EAAO,WAAW;AAAA,KAC1C,CAAA;AACD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,MAAM,CAAA,gCAAA,EAAmC,GAAA,CAAI,MAAM,CAAA,CAAA,EAAI,GAAA,CAAI,UAAU,CAAA,CAAE,CAAA;AAAA,IACnF;AACA,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,IAAA,GAAO,GAAG,CAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,OAAA,IAAW,MAAA,IAAU,OAAA,GAAU,QAAQ,IAAA,GAAQ,OAAA;AAC5D,IAAA,OAAO,QAAQ,IAAI,CAAA;AAAA,EACrB,CAAA;AACA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,MAAM,GAAA,CAAI,UAAA,EAAY,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAO,EAAG,MAAM,CAAA;AAAA,IAC9D,OAAA,EAAS,CAAC,aAAA,EAAe,QAAA,EAAU,UAAA,KACjC,GAAA;AAAA,MACE,SAAA;AAAA,MACA;AAAA,QACE,QAAQ,IAAA,CAAK,MAAA;AAAA,QACb,KAAA,EAAO;AAAA,UACL;AAAA,YACE,aAAA;AAAA,YACA,QAAA;AAAA,YACA,GAAI,eAAe,MAAA,IAAa;AAAA,cAC9B,UAAA,EAAY,MAAA,CAAO,OAAA,CAAQ,UAAU,EAAE,GAAA,CAAI,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,MAAO,EAAE,GAAA,EAAK,OAAM,CAAE;AAAA;AAC/E;AACF;AACF,OACF;AAAA,MACA;AAAA,KACF;AAAA,IACF,YAAY,CAAC,EAAA,EAAI,aACf,GAAA,CAAI,YAAA,EAAc,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,KAAA,EAAO,CAAC,EAAE,EAAA,EAAI,UAAU,CAAA,IAAK,iBAAiB,CAAA;AAAA,IACzF,UAAA,EAAY,CAAC,EAAA,KACX,GAAA,CAAI,cAAc,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,OAAA,EAAS,CAAC,EAAE,CAAA,IAAK,iBAAiB,CAAA;AAAA,IAC7E,mBAAA,EAAqB,CAAC,KAAA,KACpB,GAAA;AAAA,MACE,qBAAA;AAAA,MACA,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,eAAe,KAAA,EAAM;AAAA,MAC5C;AAAA;AACF,GACJ;AACF","file":"chunk-2IWNUDSZ.js","sourcesContent":["import type { CartAdapter, SmartCartLine, SmartCartState } from '@kotao/smart-cart'\n\ninterface GqlMoney {\n  amount: string\n  currencyCode: string\n}\ninterface GqlCartLine {\n  id: string\n  quantity: number\n  attributes: { key: string; value: string | null }[] | null\n  cost: { totalAmount: GqlMoney }\n  merchandise: {\n    id: string\n    title: string | null\n    image: { url: string } | null\n    product: { title: string }\n  }\n}\ninterface GqlCart {\n  checkoutUrl: string\n  cost: { subtotalAmount: GqlMoney; discountTotal?: GqlMoney }\n  discountCodes?: string[]\n  lines: { nodes: GqlCartLine[] }\n}\n\n// GraphQL Money is a decimal string (\"216.00\"); SmartCartState money is integer minor units.\nconst toMinorUnits = (m: GqlMoney): number => Math.round(parseFloat(m.amount) * 100)\n\nconst CART_FIELDS = `\n  checkoutUrl\n  cost { subtotalAmount { amount currencyCode } discountTotal { amount currencyCode } }\n  discountCodes\n  lines(first: 250) { nodes {\n    id quantity\n    attributes { key value }\n    cost { totalAmount { amount currencyCode } }\n    merchandise { ... on ProductVariant { id title image { url } product { title } } }\n  } }`\nconst CART_QUERY = `query KotaoSmartCart($cartId: ID!) { cart(id: $cartId) { ${CART_FIELDS} } }`\nconst LINES_ADD = `mutation KotaoSmartCartAdd($cartId: ID!, $lines: [CartLineInput!]!) { cartLinesAdd(cartId: $cartId, lines: $lines) { cart { ${CART_FIELDS} } } }`\nconst LINES_UPDATE = `mutation KotaoSmartCartUpdate($cartId: ID!, $lines: [CartLineUpdateInput!]!) { cartLinesUpdate(cartId: $cartId, lines: $lines) { cart { ${CART_FIELDS} } } }`\nconst LINES_REMOVE = `mutation KotaoSmartCartRemove($cartId: ID!, $lineIds: [ID!]!) { cartLinesRemove(cartId: $cartId, lineIds: $lineIds) { cart { ${CART_FIELDS} } } }`\nconst DISCOUNT_CODES_UPDATE = `mutation KotaoSmartCartDiscountCodes($cartId: ID!, $discountCodes: [String!]!) { cartDiscountCodesUpdate(cartId: $cartId, discountCodes: $discountCodes) { cart { ${CART_FIELDS} } } }`\n\n/**\n * All fully-resolved cart GraphQL document strings from the react seam adapter.\n * Exported for schema-validation tests (apps/storefront-api/test/cart-graphql-documents.test.ts)\n * that submit each document to a real graphql-yoga instance and assert zero validation errors,\n * catching invalid field selections (e.g. subfields on a scalar) at test time rather than runtime.\n */\nexport const REACT_SEAM_CART_DOCUMENTS: readonly string[] = [\n  CART_QUERY,\n  LINES_ADD,\n  LINES_UPDATE,\n  LINES_REMOVE,\n  DISCOUNT_CODES_UPDATE,\n]\n\nfunction mapCart(c: GqlCart): SmartCartState {\n  const currency = c.cost.subtotalAmount.currencyCode\n  const lines: SmartCartLine[] = c.lines.nodes.map((l) => {\n    const attributes: Record<string, string> = {}\n    for (const a of l.attributes ?? []) {\n      if (a.value !== null) attributes[a.key] = a.value\n    }\n    const hasAttributes = Object.keys(attributes).length > 0\n    return {\n      id: l.id,\n      title: l.merchandise.product.title,\n      variantTitle: l.merchandise.title,\n      variantId: l.merchandise.id ?? null,\n      quantity: l.quantity,\n      imageUrl: l.merchandise.image?.url ?? null,\n      linePrice: { amount: toMinorUnits(l.cost.totalAmount), currency },\n      ...(hasAttributes && { attributes }),\n    }\n  })\n  const discountMinorUnits = c.cost.discountTotal != null ? toMinorUnits(c.cost.discountTotal) : 0\n  const appliedCodes = c.discountCodes?.filter((code) => code.length > 0)\n  return {\n    lines,\n    subtotal: { amount: toMinorUnits(c.cost.subtotalAmount), currency },\n    checkoutUrl: c.checkoutUrl,\n    currency,\n    ...(discountMinorUnits > 0 && {\n      discountTotal: { amount: discountMinorUnits, currency },\n    }),\n    ...(appliedCodes != null && appliedCodes.length > 0 && { appliedCodes }),\n  }\n}\n\n/**\n * A CartAdapter that drives the storefront-api cart over the same-origin /api/storefront GraphQL proxy\n * (the proxy injects the read token + resolves the shop server-side). The theme supplies the cart id\n * (from its loader's cart cookie/session) and renders <CartDrawerOverlay adapter={this} />.\n */\nexport function createStorefrontApiCartAdapter(opts: {\n  readonly cartId: string\n  readonly apiPath?: string\n  readonly fetchImpl?: typeof fetch\n}): CartAdapter {\n  const fetchImpl = opts.fetchImpl ?? fetch\n  const apiPath = opts.apiPath ?? '/api/storefront'\n  const run = async (\n    query: string,\n    variables: Record<string, unknown>,\n    key: string,\n  ): Promise<SmartCartState> => {\n    const res = await fetchImpl(apiPath, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json', accept: 'application/json' },\n      body: JSON.stringify({ query, variables }),\n    })\n    if (!res.ok) {\n      throw new Error(`storefront cart request failed: ${res.status} ${res.statusText}`)\n    }\n    const json = (await res.json()) as { data?: Record<string, unknown> }\n    const payload = json.data?.[key] as GqlCart | { cart: GqlCart } | undefined\n    const cart = payload && 'cart' in payload ? payload.cart : (payload as GqlCart)\n    return mapCart(cart)\n  }\n  return {\n    getCart: () => run(CART_QUERY, { cartId: opts.cartId }, 'cart'),\n    addLine: (merchandiseId, quantity, attributes) =>\n      run(\n        LINES_ADD,\n        {\n          cartId: opts.cartId,\n          lines: [\n            {\n              merchandiseId,\n              quantity,\n              ...(attributes !== undefined && {\n                attributes: Object.entries(attributes).map(([key, value]) => ({ key, value })),\n              }),\n            },\n          ],\n        },\n        'cartLinesAdd',\n      ),\n    updateLine: (id, quantity) =>\n      run(LINES_UPDATE, { cartId: opts.cartId, lines: [{ id, quantity }] }, 'cartLinesUpdate'),\n    removeLine: (id) =>\n      run(LINES_REMOVE, { cartId: opts.cartId, lineIds: [id] }, 'cartLinesRemove'),\n    updateDiscountCodes: (codes) =>\n      run(\n        DISCOUNT_CODES_UPDATE,\n        { cartId: opts.cartId, discountCodes: codes },\n        'cartDiscountCodesUpdate',\n      ),\n  }\n}\n"]}