@pvh-afl/core 1.1.19 → 1.1.20

package/dist/common/decorators/current-customer.decorator.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Injects the authenticated customer resolved by {@link CustomerAuthGuard}
+ * (`req.customer`), or `undefined` when the request is unauthenticated and
+ * enforcement is disabled. Works in both GraphQL resolvers and REST controllers.
+ */
+export declare const CurrentCustomer: (...dataOrPipes: unknown[]) => ParameterDecorator;
+//# sourceMappingURL=current-customer.decorator.d.ts.map

package/dist/common/decorators/current-customer.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-customer.decorator.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/current-customer.decorator.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,eAAe,mDAU3B,CAAC"}

package/dist/common/decorators/current-customer.decorator.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CurrentCustomer = void 0;
+const common_1 = require("@nestjs/common");
+const graphql_1 = require("@nestjs/graphql");
+/**
+ * Injects the authenticated customer resolved by {@link CustomerAuthGuard}
+ * (`req.customer`), or `undefined` when the request is unauthenticated and
+ * enforcement is disabled. Works in both GraphQL resolvers and REST controllers.
+ */
+exports.CurrentCustomer = (0, common_1.createParamDecorator)((_data, context) => {
+    let req;
+    if (context.getType() === 'graphql') {
+        req = graphql_1.GqlExecutionContext.create(context).getContext()?.req;
+    }
+    else if (context.getType() === 'http') {
+        req = context.switchToHttp().getRequest();
+    }
+    return req?.customer;
+});
+//# sourceMappingURL=current-customer.decorator.js.map

package/dist/common/decorators/current-customer.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-customer.decorator.js","sourceRoot":"","sources":["../../../src/common/decorators/current-customer.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAAwE;AACxE,6CAAsE;AAGtE;;;;GAIG;AACU,QAAA,eAAe,GAAG,IAAA,6BAAoB,EACjD,CAAC,KAAc,EAAE,OAAyB,EAAqC,EAAE;IAC/E,IAAI,GAAqD,CAAC;IAC1D,IAAI,OAAO,CAAC,OAAO,EAAkB,KAAK,SAAS,EAAE,CAAC;QACpD,GAAG,GAAG,6BAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC;IAC9D,CAAC;SAAM,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;QACxC,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,EAAE,QAAQ,CAAC;AACvB,CAAC,CACF,CAAC"}

package/dist/common/decorators/require-customer.decorator.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Metadata key marking a resolver/route as requiring an authenticated customer.
+ */
+export declare const REQUIRE_CUSTOMER_KEY = "require_customer";
+/**
+ * Metadata key marking a resolver/route as customer-aware but not customer-gated:
+ * the guard attaches `req.customer` when a valid token is present, but never blocks
+ * the request when it is absent (used for endpoints that also serve anonymous/guest
+ * traffic, e.g. wishlist by guest session).
+ */
+export declare const OPTIONAL_CUSTOMER_KEY = "optional_customer";
+/**
+ * Marks a GraphQL resolver or REST route as customer-scoped. The globally
+ * registered {@link CustomerAuthGuard} validates the Shopify customerAccessToken
+ * and attaches `req.customer` for handlers carrying this marker; handlers without it
+ * (public catalog, webhooks, health) are passed through untouched.
+ */
+export declare const RequireCustomer: () => import("@nestjs/common").CustomDecorator<string>;
+/**
+ * Marks a route as customer-aware but still reachable anonymously. The guard
+ * attaches `req.customer` when a valid token is supplied and otherwise lets the
+ * request through, leaving the handler to decide how to treat unauthenticated calls.
+ */
+export declare const OptionalCustomer: () => import("@nestjs/common").CustomDecorator<string>;
+//# sourceMappingURL=require-customer.decorator.d.ts.map

package/dist/common/decorators/require-customer.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-customer.decorator.d.ts","sourceRoot":"","sources":["../../../src/common/decorators/require-customer.decorator.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAEzD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,wDAAgD,CAAC;AAE7E;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,wDAAiD,CAAC"}

package/dist/common/decorators/require-customer.decorator.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OptionalCustomer = exports.RequireCustomer = exports.OPTIONAL_CUSTOMER_KEY = exports.REQUIRE_CUSTOMER_KEY = void 0;
+const common_1 = require("@nestjs/common");
+/**
+ * Metadata key marking a resolver/route as requiring an authenticated customer.
+ */
+exports.REQUIRE_CUSTOMER_KEY = 'require_customer';
+/**
+ * Metadata key marking a resolver/route as customer-aware but not customer-gated:
+ * the guard attaches `req.customer` when a valid token is present, but never blocks
+ * the request when it is absent (used for endpoints that also serve anonymous/guest
+ * traffic, e.g. wishlist by guest session).
+ */
+exports.OPTIONAL_CUSTOMER_KEY = 'optional_customer';
+/**
+ * Marks a GraphQL resolver or REST route as customer-scoped. The globally
+ * registered {@link CustomerAuthGuard} validates the Shopify customerAccessToken
+ * and attaches `req.customer` for handlers carrying this marker; handlers without it
+ * (public catalog, webhooks, health) are passed through untouched.
+ */
+const RequireCustomer = () => (0, common_1.SetMetadata)(exports.REQUIRE_CUSTOMER_KEY, true);
+exports.RequireCustomer = RequireCustomer;
+/**
+ * Marks a route as customer-aware but still reachable anonymously. The guard
+ * attaches `req.customer` when a valid token is supplied and otherwise lets the
+ * request through, leaving the handler to decide how to treat unauthenticated calls.
+ */
+const OptionalCustomer = () => (0, common_1.SetMetadata)(exports.OPTIONAL_CUSTOMER_KEY, true);
+exports.OptionalCustomer = OptionalCustomer;
+//# sourceMappingURL=require-customer.decorator.js.map

package/dist/common/decorators/require-customer.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require-customer.decorator.js","sourceRoot":"","sources":["../../../src/common/decorators/require-customer.decorator.ts"],"names":[],"mappings":";;;AAAA,2CAA6C;AAE7C;;GAEG;AACU,QAAA,oBAAoB,GAAG,kBAAkB,CAAC;AAEvD;;;;;GAKG;AACU,QAAA,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD;;;;;GAKG;AACI,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,4BAAoB,EAAE,IAAI,CAAC,CAAC;AAAhE,QAAA,eAAe,mBAAiD;AAE7E;;;;GAIG;AACI,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAAC,IAAA,oBAAW,EAAC,6BAAqB,EAAE,IAAI,CAAC,CAAC;AAAlE,QAAA,gBAAgB,oBAAkD"}

package/dist/common/guards/customer-auth.guard.d.ts

@@ -0,0 +1,54 @@
+import { CanActivate, ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { ConfigService } from '../../config/config.service';
+import { IntegrationFactory } from '../../integrations/integration.factory';
+/**
+ * Whether customer authentication is enforced for a brand. Enforcement is on when
+ * `CUSTOMER_AUTH_ENFORCE=true` (global) or the brand sets
+ * `features.customerAuthEnforce`. Shared so guards and brand controllers agree.
+ */
+export declare function isCustomerAuthEnforced(configService: ConfigService, brand?: string): boolean;
+/**
+ * The authenticated customer resolved from a validated Shopify Storefront
+ * customerAccessToken. Attached to the request as `req.customer` by
+ * {@link CustomerAuthGuard} and read via the `@CurrentCustomer()` decorator.
+ */
+export interface AuthenticatedCustomer {
+    id: string;
+    phone: string | null;
+    email: string | null;
+    name: string | null;
+}
+/**
+ * CustomerAuthGuard
+ *
+ * Authenticates the caller by validating a Shopify Storefront customerAccessToken
+ * (the same mechanism the customer API already uses via `getCustomer`). On success
+ * it attaches `req.customer = { id, phone, email }` so resolvers/controllers derive
+ * identity from the verified token instead of trusting a client-supplied
+ * `mobile`/`orderId`/`customerId` argument.
+ *
+ * Token sources (in order): `Authorization: Bearer <token>`, then the
+ * `X-Shopify-Customer-Access-Token` header.
+ *
+ * Registered once as a global `APP_GUARD`. It only acts on handlers marked with
+ * `@RequireCustomer()`; everything else (public catalog, webhooks, health) passes
+ * through untouched.
+ *
+ * Enforcement is per-brand (migration-friendly): when a brand sets
+ * `features.customerAuthEnforce` (or env `CUSTOMER_AUTH_ENFORCE=true`), a missing or
+ * invalid token is rejected with 401. Otherwise the guard attaches identity when a
+ * valid token is present but does NOT block unauthenticated calls — it only logs a
+ * warning — so brands that have not migrated their clients keep working. Resolvers
+ * fall back to their legacy identifier argument only while enforcement is off.
+ */
+export declare class CustomerAuthGuard implements CanActivate {
+    private readonly reflector;
+    private readonly configService;
+    private readonly integrationFactory;
+    constructor(reflector: Reflector, configService: ConfigService, integrationFactory: IntegrationFactory);
+    canActivate(context: ExecutionContext): Promise<boolean>;
+    private extractToken;
+    private getRequest;
+}
+//# sourceMappingURL=customer-auth.guard.d.ts.map

package/dist/common/guards/customer-auth.guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-auth.guard.d.ts","sourceRoot":"","sources":["../../../src/common/guards/customer-auth.guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EACX,gBAAgB,EAEjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAQ5E;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAQ5F;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAQD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBACa,iBAAkB,YAAW,WAAW;IAEjD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,kBAAkB;gBAFlB,SAAS,EAAE,SAAS,EACpB,aAAa,EAAE,aAAa,EAC5B,kBAAkB,EAAE,kBAAkB;IAGnD,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IA8D9D,OAAO,CAAC,YAAY;IAkBpB,OAAO,CAAC,UAAU;CASnB"}

package/dist/common/guards/customer-auth.guard.js

@@ -0,0 +1,142 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CustomerAuthGuard = void 0;
+exports.isCustomerAuthEnforced = isCustomerAuthEnforced;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const graphql_1 = require("@nestjs/graphql");
+const config_service_1 = require("../../config/config.service");
+const integration_factory_1 = require("../../integrations/integration.factory");
+const require_customer_decorator_1 = require("../decorators/require-customer.decorator");
+const logger_1 = require("../logger");
+/**
+ * Whether customer authentication is enforced for a brand. Enforcement is on when
+ * `CUSTOMER_AUTH_ENFORCE=true` (global) or the brand sets
+ * `features.customerAuthEnforce`. Shared so guards and brand controllers agree.
+ */
+function isCustomerAuthEnforced(configService, brand) {
+    if (process.env.CUSTOMER_AUTH_ENFORCE === 'true') {
+        return true;
+    }
+    if (!brand) {
+        return false;
+    }
+    return configService.getBrand(brand)?.features?.customerAuthEnforce === true;
+}
+/**
+ * CustomerAuthGuard
+ *
+ * Authenticates the caller by validating a Shopify Storefront customerAccessToken
+ * (the same mechanism the customer API already uses via `getCustomer`). On success
+ * it attaches `req.customer = { id, phone, email }` so resolvers/controllers derive
+ * identity from the verified token instead of trusting a client-supplied
+ * `mobile`/`orderId`/`customerId` argument.
+ *
+ * Token sources (in order): `Authorization: Bearer <token>`, then the
+ * `X-Shopify-Customer-Access-Token` header.
+ *
+ * Registered once as a global `APP_GUARD`. It only acts on handlers marked with
+ * `@RequireCustomer()`; everything else (public catalog, webhooks, health) passes
+ * through untouched.
+ *
+ * Enforcement is per-brand (migration-friendly): when a brand sets
+ * `features.customerAuthEnforce` (or env `CUSTOMER_AUTH_ENFORCE=true`), a missing or
+ * invalid token is rejected with 401. Otherwise the guard attaches identity when a
+ * valid token is present but does NOT block unauthenticated calls — it only logs a
+ * warning — so brands that have not migrated their clients keep working. Resolvers
+ * fall back to their legacy identifier argument only while enforcement is off.
+ */
+let CustomerAuthGuard = class CustomerAuthGuard {
+    reflector;
+    configService;
+    integrationFactory;
+    constructor(reflector, configService, integrationFactory) {
+        this.reflector = reflector;
+        this.configService = configService;
+        this.integrationFactory = integrationFactory;
+    }
+    async canActivate(context) {
+        const required = this.reflector.getAllAndOverride(require_customer_decorator_1.REQUIRE_CUSTOMER_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        const optional = this.reflector.getAllAndOverride(require_customer_decorator_1.OPTIONAL_CUSTOMER_KEY, [
+            context.getHandler(),
+            context.getClass(),
+        ]);
+        if (!required && !optional) {
+            // Endpoint is not customer-scoped (public catalog, webhooks, health).
+            return true;
+        }
+        const req = this.getRequest(context);
+        if (!req) {
+            // Non HTTP/GraphQL execution context — nothing to authenticate.
+            return true;
+        }
+        const brand = req.brand ?? this.configService.getActiveBrand() ?? undefined;
+        const enforced = isCustomerAuthEnforced(this.configService, brand);
+        const token = this.extractToken(req);
+        if (token && brand) {
+            const commerce = this.integrationFactory.get(brand, 'commerce');
+            const result = commerce ? await commerce.getCustomer(token) : null;
+            if (result?.success && result.data) {
+                req.customer = {
+                    id: result.data.id,
+                    phone: result.data.phone,
+                    email: result.data.email,
+                    name: result.data.displayName ?? null,
+                };
+                return true;
+            }
+            // A token was supplied but did not validate. Optional endpoints treat this as
+            // an anonymous request; required endpoints reject when enforcing.
+            if (required && enforced) {
+                throw new common_1.UnauthorizedException('Invalid or expired customer token');
+            }
+            logger_1.logger.warn('Customer token present but invalid; treating as unauthenticated', { brand });
+            return true;
+        }
+        // No usable token.
+        if (required && enforced) {
+            throw new common_1.UnauthorizedException('Customer authentication required');
+        }
+        if (required) {
+            logger_1.logger.warn('Customer-scoped endpoint accessed without authentication (enforcement disabled)', { brand });
+        }
+        return true;
+    }
+    extractToken(req) {
+        const headers = req.headers ?? {};
+        const authHeader = headers['authorization'];
+        const auth = Array.isArray(authHeader) ? authHeader[0] : authHeader;
+        if (auth && auth.startsWith('Bearer ')) {
+            const token = auth.slice(7).trim();
+            if (token)
+                return token;
+        }
+        const custHeader = headers['x-shopify-customer-access-token'];
+        const cust = Array.isArray(custHeader) ? custHeader[0] : custHeader;
+        if (cust && cust.trim()) {
+            return cust.trim();
+        }
+        return null;
+    }
+    getRequest(context) {
+        if (context.getType() === 'graphql') {
+            return graphql_1.GqlExecutionContext.create(context).getContext()?.req ?? null;
+        }
+        if (context.getType() === 'http') {
+            return context.switchToHttp().getRequest();
+        }
+        return null;
+    }
+};
+exports.CustomerAuthGuard = CustomerAuthGuard;
+exports.CustomerAuthGuard = CustomerAuthGuard = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [core_1.Reflector,
+        config_service_1.ConfigService,
+        integration_factory_1.IntegrationFactory])
+], CustomerAuthGuard);
+//# sourceMappingURL=customer-auth.guard.js.map

package/dist/common/guards/customer-auth.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-auth.guard.js","sourceRoot":"","sources":["../../../src/common/guards/customer-auth.guard.ts"],"names":[],"mappings":";;;AAsBA,wDAQC;;AA9BD,2CAKwB;AACxB,uCAAyC;AACzC,6CAAsE;AACtE,gEAA4D;AAC5D,gFAA4E;AAE5E,yFAGkD;AAClD,sCAAmC;AAEnC;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,aAA4B,EAAE,KAAc;IACjF,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,MAAM,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAC/E,CAAC;AAoBD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IACA;IACA;IAHnB,YACmB,SAAoB,EACpB,aAA4B,EAC5B,kBAAsC;QAFtC,cAAS,GAAT,SAAS,CAAW;QACpB,kBAAa,GAAb,aAAa,CAAe;QAC5B,uBAAkB,GAAlB,kBAAkB,CAAoB;IACtD,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,iDAAoB,EAAE;YAC/E,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAU,kDAAqB,EAAE;YAChF,OAAO,CAAC,UAAU,EAAE;YACpB,OAAO,CAAC,QAAQ,EAAE;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,sEAAsE;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,gEAAgE;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAuB,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,IAAI,SAAS,CAAC;QAChG,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAEtD,CAAC;YACT,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAEnE,IAAI,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACnC,GAAG,CAAC,QAAQ,GAAG;oBACb,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;oBAClB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;oBACxB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;oBACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI;iBACtC,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,8EAA8E;YAC9E,kEAAkE;YAClE,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,IAAI,8BAAqB,CAAC,mCAAmC,CAAC,CAAC;YACvE,CAAC;YACD,eAAM,CAAC,IAAI,CAAC,iEAAiE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1F,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,8BAAqB,CAAC,kCAAkC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,eAAM,CAAC,IAAI,CACT,iFAAiF,EACjF,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY,CAAC,GAAiB;QACpC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACpE,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACpE,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,UAAU,CAAC,OAAyB;QAC1C,IAAI,OAAO,CAAC,OAAO,EAAkB,KAAK,SAAS,EAAE,CAAC;YACpD,OAAO,6BAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,IAAI,CAAC;QACvE,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAhGY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;6CAGmB,gBAAS;QACL,8BAAa;QACR,wCAAkB;GAJ9C,iBAAiB,CAgG7B"}

package/dist/theme/theme-content.service.d.ts

@@ -1,7 +1,7 @@
-import { CacheService } from '../cache/cache.service';
-import { ConfigService } from '../config/config.service';
-import { ShopifyThemeService } from '../integrations/shopify-theme';
-import { IThemeCollectionService, IThemeProductService } from './theme-content.interfaces';
+import { CacheService } from "../cache/cache.service";
+import { ConfigService } from "../config/config.service";
+import { ShopifyThemeService } from "../integrations/shopify-theme";
+import { IThemeCollectionService, IThemeProductService } from "./theme-content.interfaces";
 interface CuratedBlock {
     type: string;
     settings?: Record<string, unknown>;
@@ -85,6 +85,7 @@ export declare class ThemeContentService {
     private readonly shopifyThemeService;
     private readonly collectionService?;
     private readonly productService?;
+    private static readonly MEDIA_QUERY_BATCH_SIZE;
     private refreshInProgress;
     constructor(cacheService: CacheService, configService: ConfigService, shopifyThemeService: ShopifyThemeService, collectionService?: IThemeCollectionService | undefined, productService?: IThemeProductService | undefined);
     /**
@@ -191,6 +192,12 @@ export declare class ThemeContentService {
     private fetchMediaUrls;
     private resolveShopImages;
     private resolveFilesApiMedia;
+    /**
+     * Build a Shopify Files search query that matches any of the given filenames
+     * for a media type, e.g.
+     *   media_type:IMAGE status:READY (filename:'a.png' OR filename:'b.jpg')
+     */
+    private buildFilenameSearchQuery;
     private readonly mediaFieldNames;
     private isMediaUrl;
     private replaceMediaReferences;

package/dist/theme/theme-content.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"theme-content.service.d.ts","sourceRoot":"","sources":["../../src/theme/theme-content.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEpE,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EAIrB,MAAM,4BAA4B,CAAC;AAqBpC,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACzB;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,EAAE;QACV,eAAe,EAAE,YAAY,CAAC;QAC9B,eAAe,EAAE,YAAY,CAAC;KAC/B,CAAC;IACF,cAAc,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAAG,cAAc,EAAE,CAAC;AA0CnD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAID,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAqFD,qBACa,mBAAmB;IAI5B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAGpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAGnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAXlC,OAAO,CAAC,iBAAiB,CAAqB;gBAG3B,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,aAAa,EAC5B,mBAAmB,EAAE,mBAAmB,EAGxC,iBAAiB,CAAC,EAAE,uBAAuB,YAAA,EAG3C,cAAc,CAAC,EAAE,oBAAoB,YAAA;IAGxD;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAIlD;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAIvD;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA8C1E;;OAEG;YACW,0BAA0B;IAmBxC;;OAEG;IACG,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAuCtC;;;;;;OAMG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAe,GACtB,OAAO,CAAC,mBAAmB,CAAC;IA0C/B;;OAEG;YACW,sBAAsB;IAmBpC;;OAEG;IACG,0BAA0B,CAC9B,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAe,GACtB,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAqExD;;;;;;OAMG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAOxD;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAsB1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAqCxB;;;OAGG;IACH,OAAO,CAAC,YAAY;IAuBpB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAiB1B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAqD9B;;OAEG;IACH,OAAO,CAAC,UAAU;IASlB;;OAEG;YACW,kBAAkB;IA2EhC;;OAEG;IACH,OAAO,CAAC,WAAW;IAqBnB;;OAEG;YACW,2BAA2B;IAgGzC;;OAEG;YACW,wBAAwB;IA0DtC;;OAEG;IACH,OAAO,CAAC,mBAAmB;YA+Bb,sBAAsB;IAwBpC,OAAO,CAAC,wBAAwB;YAkDlB,cAAc;YAqCd,iBAAiB;YA4HjB,oBAAoB;IA6FlC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAS7B;IAEH,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,sBAAsB;CA4E/B"}
+{"version":3,"file":"theme-content.service.d.ts","sourceRoot":"","sources":["../../src/theme/theme-content.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEpE,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EAIrB,MAAM,4BAA4B,CAAC;AAqBpC,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;CACzB;AAED,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE;QACd,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,EAAE;QACV,eAAe,EAAE,YAAY,CAAC;QAC9B,eAAe,EAAE,YAAY,CAAC;KAC/B,CAAC;IACF,cAAc,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,UAAU,aAAa;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,cAAc;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,cAAc,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAAG,cAAc,EAAE,CAAC;AA0CnD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAID,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAqFD,qBACa,mBAAmB;IAQ5B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAGpC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAGnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAblC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAM;IAEpD,OAAO,CAAC,iBAAiB,CAAqB;gBAG3B,YAAY,EAAE,YAAY,EAC1B,aAAa,EAAE,aAAa,EAC5B,mBAAmB,EAAE,mBAAmB,EAGxC,iBAAiB,CAAC,EAAE,uBAAuB,YAAA,EAG3C,cAAc,CAAC,EAAE,oBAAoB,YAAA;IAGxD;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAIlD;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM;IAIvD;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAoD1E;;OAEG;YACW,0BAA0B;IAmBxC;;OAEG;IACG,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IA0CtC;;;;;;OAMG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAe,GACtB,OAAO,CAAC,mBAAmB,CAAC;IA+C/B;;OAEG;YACW,sBAAsB;IAmBpC;;OAEG;IACG,0BAA0B,CAC9B,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAe,GACtB,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA4ExD;;;;;;OAMG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWxD;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAwB1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAmCxB;;;OAGG;IACH,OAAO,CAAC,YAAY;IAuBpB;;;;;;OAMG;IACH,OAAO,CAAC,kBAAkB;IAiB1B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAuD9B;;OAEG;IACH,OAAO,CAAC,UAAU;IASlB;;OAEG;YACW,kBAAkB;IA+EhC;;OAEG;IACH,OAAO,CAAC,WAAW;IAqBnB;;OAEG;YACW,2BAA2B;IAoGzC;;OAEG;YACW,wBAAwB;IA2DtC;;OAEG;IACH,OAAO,CAAC,mBAAmB;YA+Bb,sBAAsB;IAwBpC,OAAO,CAAC,wBAAwB;YAkDlB,cAAc;YA+Cd,iBAAiB;YAyHjB,oBAAoB;IA8GlC;;;;OAIG;IACH,OAAO,CAAC,wBAAwB;IAUhC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAS7B;IAEH,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,sBAAsB;CA4E/B"}