@plentymarkets/shop-core 1.23.2 → 1.23.4

package/dist/module.d.mts

@@ -1,6 +1,6 @@
 import * as _nuxt_schema from '@nuxt/schema';
 import { ModuleOptions } from '../dist/runtime/types/module.js';
-export { CacheControlMeta, Cookie, CookieGroup, CookieGroupFromNuxtConfig, Events, JsonCookie, LocalizationMessage, Notification, PaymentButtonComponent, PaymentButtonComponentProps, SSRMetrics, ShopCoreConfigInput } from '../dist/runtime/types/index.js';
+export { CacheControlMeta, Cookie, CookieGroup, CookieGroupFromNuxtConfig, Events, ExtensionEntry, JsonCookie, LocalizationMessage, Notification, PaymentButtonComponent, PaymentButtonComponentProps, SSRMetrics, ShopCoreConfigInput } from '../dist/runtime/types/index.js';
 
 declare const _default: _nuxt_schema.NuxtModule<ModuleOptions, ModuleOptions, false>;
 

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@plentymarkets/shop-core",
   "configKey": "shopCore",
-  "version": "1.23.2",
+  "version": "1.23.4",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -1,8 +1,9 @@
 import { defineNuxtModule, createResolver, addTypeTemplate, addTemplate, addImportsSources, addComponent, addPlugin, addImports } from '@nuxt/kit';
 import { ofetch } from 'ofetch';
-import { access, mkdir, writeFile } from 'fs/promises';
-import { join } from 'path';
-import { constants } from 'fs';
+import { existsSync, readFileSync, constants } from 'node:fs';
+import { readFile, access, mkdir, writeFile } from 'node:fs/promises';
+import { resolve, join } from 'node:path';
+import { MANIFEST_FILENAME, LOG_PREFIX, DANGEROUS_IDS, DEFAULT_PRIORITY } from '../dist/runtime/types/extensions.js';
 import { genInlineTypeImport } from 'knitwork';
 
 const fetchAllTranslations = async (url, configId) => {
@@ -17,22 +18,151 @@ const fetchAllTranslations = async (url, configId) => {
   );
 };
 
+const isNonEmptyString = (value) => typeof value === "string" && value.trim().length > 0;
+const isSafeId = (value) => isNonEmptyString(value) && !DANGEROUS_IDS.has(value);
+const isEntryOptions = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+const isModuleEntry = (value) => isNonEmptyString(value) || Array.isArray(value) && value.length === 2 && isNonEmptyString(value[0]) && isEntryOptions(value[1]);
+const validateEntries = (rawEntries) => {
+  const valid = [];
+  for (const entry of rawEntries) {
+    if (!entry || typeof entry !== "object") {
+      console.warn(`${LOG_PREFIX} Skipping invalid entry in ${MANIFEST_FILENAME} \u2014 must be an object:`, entry);
+      continue;
+    }
+    const candidate = entry;
+    if (!isSafeId(candidate.id) || !isModuleEntry(candidate.entry)) {
+      console.warn(
+        `${LOG_PREFIX} Skipping invalid entry in ${MANIFEST_FILENAME} \u2014 id must be a safe non-empty string and entry must be a string or [string, object] tuple:`,
+        entry
+      );
+      continue;
+    }
+    valid.push({ ...candidate, id: candidate.id, entry: candidate.entry });
+  }
+  return valid;
+};
+const findManifestPath = async (rootDir) => {
+  const candidates = [resolve(rootDir, MANIFEST_FILENAME), resolve(rootDir, `build/${MANIFEST_FILENAME}`)];
+  for (const p of candidates) {
+    try {
+      await access(p);
+      return p;
+    } catch {
+    }
+  }
+  return null;
+};
+const loadExtensionsSync = (rootDir) => {
+  const candidates = [resolve(rootDir, MANIFEST_FILENAME), resolve(rootDir, `build/${MANIFEST_FILENAME}`)];
+  const manifestPath = candidates.find((p) => existsSync(p));
+  if (!manifestPath) {
+    console.log(`${LOG_PREFIX} No ${MANIFEST_FILENAME} found \u2014 no extensions will be loaded.`);
+    return [];
+  }
+  try {
+    const rawEntries = JSON.parse(readFileSync(manifestPath, "utf-8"));
+    if (!Array.isArray(rawEntries)) {
+      console.warn(`${LOG_PREFIX} ${MANIFEST_FILENAME} does not contain an array \u2014 skipping extensions.`);
+      return [];
+    }
+    const validEntries = validateEntries([...rawEntries]);
+    console.log(
+      `${LOG_PREFIX} Loaded ${validEntries.length} of ${rawEntries.length} extension(s) from ${manifestPath}`
+    );
+    return validEntries;
+  } catch (error) {
+    console.error(`${LOG_PREFIX} Failed to parse ${MANIFEST_FILENAME} \u2014 skipping extensions.`, error);
+    return [];
+  }
+};
+const loadExtensions = async (rootDir) => {
+  const manifestPath = await findManifestPath(rootDir);
+  if (!manifestPath) {
+    console.log(`${LOG_PREFIX} No ${MANIFEST_FILENAME} found \u2014 no extensions will be loaded.`);
+    return [];
+  }
+  try {
+    const rawEntries = JSON.parse(await readFile(manifestPath, "utf-8"));
+    if (!Array.isArray(rawEntries)) {
+      console.warn(`${LOG_PREFIX} ${MANIFEST_FILENAME} does not contain an array \u2014 skipping extensions.`);
+      return [];
+    }
+    const valid = validateEntries([...rawEntries]);
+    console.log(`${LOG_PREFIX} Loaded ${valid.length} of ${rawEntries.length} extension(s) from ${manifestPath}`);
+    return valid;
+  } catch (error) {
+    console.error(`${LOG_PREFIX} Failed to parse ${MANIFEST_FILENAME} \u2014 skipping extensions.`, error);
+    return [];
+  }
+};
+
+const setupExtensions = async (nuxt, preloaded) => {
+  const extensions = preloaded ?? await loadExtensions(nuxt.options.rootDir);
+  const sorted = [...extensions].sort((a, b) => (a.priority ?? DEFAULT_PRIORITY) - (b.priority ?? DEFAULT_PRIORITY));
+  const enabled = [];
+  const skipped = [];
+  for (const ext of sorted) {
+    (ext.enabled === false ? skipped : enabled).push(ext);
+  }
+  if (skipped.length > 0) {
+    console.log(
+      `${LOG_PREFIX} Skipping ${skipped.length} disabled extension(s): ${skipped.map((e) => e.id || "(no id)").join(", ")}`
+    );
+  }
+  if (enabled.length === 0) {
+    console.log(`${LOG_PREFIX} No extensions to load.`);
+    return;
+  }
+  const loadOrder = enabled.map((e) => `${e.id} (priority ${e.priority ?? DEFAULT_PRIORITY})`).join(", ");
+  console.log(`${LOG_PREFIX} Loading ${enabled.length} extension(s) in priority order: ${loadOrder}`);
+  for (const ext of enabled) {
+    console.log(`${LOG_PREFIX}:${ext.id} Applying runtime config...`);
+    if (DANGEROUS_IDS.has(ext.id)) {
+      console.warn(`${LOG_PREFIX}:${ext.id} Skipping runtimeConfig injection \u2014 unsafe extension id.`);
+      continue;
+    }
+    if (ext.settings && Object.keys(ext.settings).length > 0) {
+      nuxt.options.runtimeConfig.public[ext.id] = ext.settings;
+      console.log(
+        `${LOG_PREFIX}:${ext.id} Injected ${Object.keys(ext.settings).length} public setting(s) into runtimeConfig.public.${ext.id}`
+      );
+    }
+    if (ext.privateSettings && Object.keys(ext.privateSettings).length > 0) {
+      nuxt.options.runtimeConfig[ext.id] = ext.privateSettings;
+      console.log(
+        `${LOG_PREFIX}:${ext.id} Injected ${Object.keys(ext.privateSettings).length} private setting(s) into server-only runtimeConfig.${ext.id} (values not logged)`
+      );
+    }
+  }
+};
+
+let _cachedExtensions;
 const module$1 = defineNuxtModule({
   meta: {
     name: "@plentymarkets/shop-core",
     configKey: "shopCore"
   },
   defaults: {},
-  moduleDependencies: {
-    "@nuxtjs/i18n": {
-      version: ">=9.5.4"
+  moduleDependencies(nuxt) {
+    _cachedExtensions = loadExtensionsSync(nuxt.options._layers[0]?.config.rootDir ?? nuxt.options.rootDir);
+    const deps = {
+      "@nuxtjs/i18n": { version: ">=9.5.4" }
+    };
+    for (const ext of _cachedExtensions.toSorted(
+      (a, b) => (a.priority ?? DEFAULT_PRIORITY) - (b.priority ?? DEFAULT_PRIORITY)
+    )) {
+      if (ext.enabled === false) continue;
+      const name = Array.isArray(ext.entry) ? ext.entry[0] : ext.entry;
+      const options = Array.isArray(ext.entry) ? ext.entry[1] ?? {} : {};
+      deps[name] = { defaults: options };
     }
+    return deps;
   },
   async setup(_options, nuxt) {
     const resolver = createResolver(import.meta.url);
-    const projectLayer = nuxt.options._layers[0];
-    const projectRootResolver = createResolver(projectLayer.config.rootDir);
+    const projectRootResolver = createResolver(nuxt.options._layers[0]?.config.rootDir ?? nuxt.options.rootDir);
     const buildDirectoryResolver = createResolver(nuxt.options.buildDir);
+    await setupExtensions(nuxt, _cachedExtensions);
     nuxt.options.runtimeConfig.public.shopCore = {
       apiUrl: _options.apiUrl,
       configId: _options.configId,

package/dist/runtime/types/extensions.d.ts

@@ -0,0 +1,26 @@
+/**
+ * A module entry is either:
+ * - a plain package name: `"@agency-x/payments"`
+ * - a tuple with inline options: `["@agency-x/payments", { region: "eu" }]`
+ */
+export type ModuleEntry = string | [string, Record<string, unknown>];
+export declare const DEFAULT_PRIORITY = 500;
+export declare const MANIFEST_FILENAME = "module.manifest.json";
+export declare const LOG_PREFIX = "[shop-core | extensions]";
+export declare const DANGEROUS_IDS: Set<string>;
+export interface ExtensionEntry {
+    /** Unique identifier for the extension (used as runtimeConfig key). */
+    id: string;
+    /** The Nuxt module entry point. Supports string or [name, options] tuple. */
+    entry: ModuleEntry;
+    /** npm version range used by the CLI to add the dependency. Unused at runtime. */
+    version?: string;
+    /** Load priority — lower numbers load first. */
+    priority?: number;
+    /** Arbitrary settings injected into runtimeConfig.public[id]. */
+    settings?: Record<string, unknown>;
+    /** Server-only settings — NOT exposed to the client. */
+    privateSettings?: Record<string, unknown>;
+    /** Set to false to skip loading this extension. Defaults to true. */
+    enabled?: boolean;
+}

package/dist/runtime/types/extensions.js

@@ -0,0 +1,4 @@
+export const DEFAULT_PRIORITY = 500;
+export const MANIFEST_FILENAME = "module.manifest.json";
+export const LOG_PREFIX = "[shop-core | extensions]";
+export const DANGEROUS_IDS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);

package/dist/runtime/types/index.d.ts

@@ -1,5 +1,6 @@
 export * from './cookies.js';
 export * from './events.js';
+export * from './extensions.js';
 export * from './render.js';
 export * from './notification.js';
 export * from './localization.js';

package/dist/runtime/types/index.js

@@ -1,5 +1,6 @@
 export * from "./cookies.js";
 export * from "./events.js";
+export * from "./extensions.js";
 export * from "./render.js";
 export * from "./notification.js";
 export * from "./localization.js";

package/dist/types.d.mts

@@ -4,6 +4,6 @@ import type { default as Module } from './module.mjs'
 
 export type ModuleOptions = typeof Module extends NuxtModule<infer O> ? Partial<O> : Record<string, any>
 
-export { type CacheControlMeta, type Cookie, type CookieGroup, type CookieGroupFromNuxtConfig, type Events, type JsonCookie, type LocalizationMessage, type Notification, type PaymentButtonComponent, type PaymentButtonComponentProps, type SSRMetrics, type ShopCoreConfigInput } from '../dist/runtime/types/index.js'
+export { type CacheControlMeta, type Cookie, type CookieGroup, type CookieGroupFromNuxtConfig, type Events, type ExtensionEntry, type JsonCookie, type LocalizationMessage, type Notification, type PaymentButtonComponent, type PaymentButtonComponentProps, type SSRMetrics, type ShopCoreConfigInput } from '../dist/runtime/types/index.js'
 
 export { default } from './module.mjs'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plentymarkets/shop-core",
-  "version": "1.23.2",
+  "version": "1.23.4",
   "description": "Core module for PlentyONE Shop",
   "repository": {
     "type": "git",
@@ -50,7 +50,7 @@
   },
   "dependencies": {
     "@noble/hashes": "^2.0.1",
-    "@plentymarkets/shop-api": "^0.164.0",
+    "@plentymarkets/shop-api": "^0.165.1",
     "@vue-storefront/sdk": "^3.4.1",
     "cookie-es": "^2.0.0",
     "knitwork": "^1.3.0",