@replohq/sdk 1.13.6 → 1.14.1

package/_vendor/replo-utils/lib/misc.d.ts

@@ -142,4 +142,8 @@ export declare function coerceNumberToString(value: string | number | null): str
  */
 export declare function formatFileSize(byteCount: number, decimalPlaces?: number): string;
 export declare const sleep: (ms: number) => Promise<unknown>;
+export declare function sleepWithSignal({ delayMs, signal, }: {
+    delayMs: number;
+    signal: AbortSignal | null;
+}): Promise<unknown>;
 export declare function errorMessage(error: unknown): string;

package/_vendor/replo-utils/lib/misc.mjs

@@ -1,4 +1,4 @@
-export { coerceNumberToString, deepCloneAndMergeReplacingArrays, errorMessage, exhaustiveSwitch, formatFileSize, getFromRecordOrNull, hasOwnProperty, invariant, isEmpty, isNotNullish, isNullish, isPrimitive, mergeReplacingArrays, mergeReplacingObjects, noop, preventDefault, sleep, warning } from '../../../chunk-ZKAX2FW3.mjs';
+export { coerceNumberToString, deepCloneAndMergeReplacingArrays, errorMessage, exhaustiveSwitch, formatFileSize, getFromRecordOrNull, hasOwnProperty, invariant, isEmpty, isNotNullish, isNullish, isPrimitive, mergeReplacingArrays, mergeReplacingObjects, noop, preventDefault, sleep, sleepWithSignal, warning } from '../../../chunk-HFKL4ZR5.mjs';
 export { isNumber_default as isNumber, isString_default as isString } from '../../../chunk-EUIVDITZ.mjs';
 export { isFunction_default as isFunction } from '../../../chunk-SSBIMQES.mjs';
 import '../../../chunk-UJCSKKID.mjs';

package/_vendor/schemas/contentEntry.d.ts

@@ -1,5 +1,4 @@
-import type { LegacyContentEntryStatus } from "./contentCollection";
-import { contentCollectionFieldSchema } from "./contentCollection";
+import type { contentCollectionFieldSchema, LegacyContentEntryStatus } from "./contentCollection";
 import { z } from "zod";
 export declare const CONTENT_MANAGED_ENTRY_VALUE_KEYS: readonly ["slug", "title", "status", "author", "authorInitials", "excerpt", "coverImage", "coverImageAlt", "tags", "updatedAt", "publishedAt", "archivedAt", "seoTitle", "seoDescription", "related", "scratchpad", "backlinks"];
 export declare const contentEntryFrontmatterSchema: z.ZodObject<{

package/_vendor/schemas/money.mjs

@@ -1,5 +1,5 @@
 import { ReploError } from '../../chunk-Y3AYABMK.mjs';
-import '../../chunk-ZKAX2FW3.mjs';
+import '../../chunk-HFKL4ZR5.mjs';
 import '../../chunk-EUIVDITZ.mjs';
 import '../../chunk-SSBIMQES.mjs';
 import { __commonJS, __toESM } from '../../chunk-UJCSKKID.mjs';

package/_vendor/schemas/routing/locale.mjs

@@ -1,5 +1,5 @@
 import { ReploError } from '../../../chunk-Y3AYABMK.mjs';
-import '../../../chunk-ZKAX2FW3.mjs';
+import '../../../chunk-HFKL4ZR5.mjs';
 import '../../../chunk-EUIVDITZ.mjs';
 import '../../../chunk-SSBIMQES.mjs';
 import '../../../chunk-UJCSKKID.mjs';

package/_vendor/schemas/routing/rules.mjs

@@ -1,6 +1,6 @@
 import { getParamSegment, getRouteParams, hasRouteParam, matchSource } from '../../../chunk-VPEVERWE.mjs';
 import { ReploError } from '../../../chunk-Y3AYABMK.mjs';
-import '../../../chunk-ZKAX2FW3.mjs';
+import '../../../chunk-HFKL4ZR5.mjs';
 import '../../../chunk-EUIVDITZ.mjs';
 import '../../../chunk-SSBIMQES.mjs';
 import '../../../chunk-UJCSKKID.mjs';

package/cart/buy-now-action.js

@@ -9,6 +9,7 @@ import { buildBaseUrl } from "../lib/url-utils";
 import { createCartAction } from "./cart-actions";
 import { REPLO_ATTRIBUTION_PROPERTY } from "./cart-types";
 import { getReturnUrls } from "./return-urls";
+const REPLO_PROJECT_ID_KEY = "rpid";
 class BuyNowError extends CanopyError {
 }
 class BuyNowCartCreationError extends CanopyError {
@@ -53,7 +54,7 @@ async function buyNowWithRecoveryAction(input) {
         "[Replo] Stripe buy now does not support selling plans or discount codes; those options were ignored."
       );
     }
-    const env = await getEnv();
+    const env2 = await getEnv();
     const temporaryCartId = input.checkoutAttemptId ?? uuidv4();
     const body = {
       cartId: temporaryCartId,
@@ -63,11 +64,11 @@ async function buyNowWithRecoveryAction(input) {
         quantity: line.quantity,
         properties: line.properties
       })),
-      projectId: env.PROJECT_ID,
+      projectId: env2.PROJECT_ID,
       successUrl: `${origin}/checkout/success`,
       cancelUrl
     };
-    const canopyApiUrl = `${buildBaseUrl(env.CANOPY_API_HOST)}/api/v1/stripe-checkout/create-session`;
+    const canopyApiUrl = `${buildBaseUrl(env2.CANOPY_API_HOST)}/api/v1/stripe-checkout/create-session`;
     const response = await fetch(canopyApiUrl, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
@@ -130,6 +131,8 @@ async function buyNowWithRecoveryAction(input) {
     });
   }
   const checkoutUrl = new URL(cart.checkoutUrl, origin);
+  const env = await getEnv();
+  checkoutUrl.searchParams.set(REPLO_PROJECT_ID_KEY, env.PROJECT_ID);
   return { result: "created", redirectUrl: checkoutUrl.toString() };
 }
 export {

package/cart/cart-schema.d.ts

@@ -59,6 +59,11 @@ export declare const cartSchema: z.ZodObject<{
                 currencyCode: z.ZodString;
             }, z.core.$strip>;
         }, z.core.$strip>>>;
+        components: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            merchandiseId: z.ZodString;
+            quantity: z.ZodNumber;
+            sellingPlanId: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>;
     cost: z.ZodObject<{
         subtotalAmount: z.ZodNumber;
@@ -147,6 +152,11 @@ export declare const clientCartSchema: z.ZodObject<{
                 currencyCode: z.ZodString;
             }, z.core.$strip>;
         }, z.core.$strip>>>;
+        components: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            merchandiseId: z.ZodString;
+            quantity: z.ZodNumber;
+            sellingPlanId: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>>;
         merchandise: z.ZodNullable<z.ZodObject<{
             id: z.ZodString;
             title: z.ZodString;

package/cart/cart-schema.js

@@ -40,12 +40,18 @@ const cartLineMerchandiseSchema = z.object({
   image: cartImageSchema.nullable(),
   selectedOptions: z.array(z.object({ name: z.string(), value: z.string() }))
 });
+const cartLineComponentSchema = z.object({
+  merchandiseId: z.string(),
+  quantity: z.number(),
+  sellingPlanId: z.string().nullable()
+});
 const cartLineSchema = z.object({
   id: z.string(),
   quantity: z.number(),
   merchandise: cartLineMerchandiseSchema,
   attributes: z.array(cartLineAttributeSchema),
-  sellingPlanAllocation: sellingPlanAllocationSchema.nullish()
+  sellingPlanAllocation: sellingPlanAllocationSchema.nullish(),
+  components: z.array(cartLineComponentSchema).optional()
 });
 const cartCostSchema = z.object({
   subtotalAmount: amountSchema,

package/cart/cart-types.d.ts

@@ -77,6 +77,24 @@ export interface CartLine {
     merchandise: CartLineMerchandise | null;
     attributes: CartLineAttribute[];
     sellingPlanAllocation?: SellingPlanAllocation | null;
+    /**
+     * For a Shopify bundle line, the variants it holds; empty on other lines.
+     * The line itself is what checkout charges, so render and price the line
+     * and use components only to show what is inside it.
+     */
+    components?: CartLineComponent[];
+}
+/**
+ * A variant inside a bundle line. For a bundle Shopify merged from lines the
+ * shopper added, these are those lines.
+ */
+export interface CartLineComponent {
+    /** The component's variant ID */
+    merchandiseId: string;
+    /** How many of this variant the bundle line holds in total */
+    quantity: number;
+    /** The component's selling plan, or null for a one-time purchase */
+    sellingPlanId: string | null;
 }
 export interface CartCost {
     /** Integer minor units (Stripe convention) in currencyCode */

package/cart/utils/cart-adjustments.js

@@ -25,6 +25,20 @@ function totalsFromCart(cart) {
   }
   return totals;
 }
+function totalsWithBundleComponents(cart) {
+  const totals = totalsFromCart(cart);
+  for (const line of cart.lines) {
+    for (const component of line.components ?? []) {
+      addToTotals(
+        totals,
+        component.merchandiseId,
+        component.sellingPlanId,
+        component.quantity
+      );
+    }
+  }
+  return totals;
+}
 function diffTotals(intended, saved) {
   const adjustments = [];
   for (const [key, entry] of intended) {
@@ -48,11 +62,11 @@ function deriveAddToCartAdjustments({
   requestedLines,
   savedCart
 }) {
-  const intended = totalsFromCart(cartBeforeAdd);
+  const intended = totalsWithBundleComponents(cartBeforeAdd);
   for (const line of requestedLines) {
     addToTotals(intended, line.id, line.sellingPlanId ?? null, line.quantity);
   }
-  return diffTotals(intended, totalsFromCart(savedCart));
+  return diffTotals(intended, totalsWithBundleComponents(savedCart));
 }
 function deriveUpdateCartAdjustments({
   cartBeforeUpdate,

package/{chunk-ZKAX2FW3.mjs → chunk-HFKL4ZR5.mjs}

@@ -689,6 +689,26 @@ function formatFileSize(byteCount, decimalPlaces = 0) {
 var sleep = async (ms) => {
   return await new Promise((resolve) => setTimeout(resolve, ms));
 };
+function sleepWithSignal({
+  delayMs,
+  signal
+}) {
+  if (signal === null) {
+    return sleep(delayMs);
+  }
+  signal.throwIfAborted();
+  return new Promise((resolve, reject) => {
+    const onAbort = () => {
+      clearTimeout(timeoutId);
+      reject(signal.reason);
+    };
+    const timeoutId = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolve();
+    }, delayMs);
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+}
 function errorMessage(error) {
   if (error instanceof Error) {
     return error.message;
@@ -700,4 +720,4 @@ function errorMessage(error) {
   return String(error);
 }
 
-export { coerceNumberToString, deepCloneAndMergeReplacingArrays, errorMessage, exhaustiveSwitch, formatFileSize, getFromRecordOrNull, hasOwnProperty4 as hasOwnProperty, invariant, isEmpty2 as isEmpty, isNotNullish, isNullish, isPrimitive, mergeReplacingArrays, mergeReplacingObjects, noop, preventDefault, sleep, warning };
+export { coerceNumberToString, deepCloneAndMergeReplacingArrays, errorMessage, exhaustiveSwitch, formatFileSize, getFromRecordOrNull, hasOwnProperty4 as hasOwnProperty, invariant, isEmpty2 as isEmpty, isNotNullish, isNullish, isPrimitive, mergeReplacingArrays, mergeReplacingObjects, noop, preventDefault, sleep, sleepWithSignal, warning };

package/content.d.ts

@@ -1,8 +1,8 @@
 import "server-only";
 import type { Metadata } from "next";
 import type { ReactNode } from "react";
+import type { contentCollectionFieldSchema } from "./_vendor/schemas/contentCollection";
 import type { ContentManifest } from "./_vendor/schemas/contentManifest";
-import { contentCollectionFieldSchema } from "./_vendor/schemas/contentCollection";
 import { z } from "zod";
 /** Public name for the shared collection-field contract. */
 export type ContentField = z.infer<typeof contentCollectionFieldSchema>;

package/lib/buildMetadata.js

@@ -1,7 +1,7 @@
 export const BUILD_METADATA = {
   "packageName": "@replohq/sdk",
-  "version": "1.13.6",
+  "version": "1.14.1",
   "branch": "HEAD",
-  "commit": "26bb95e185c8dfd266d3635694fc84df57c83869",
-  "builtAt": "2026-09-25T18:56:30.188Z"
+  "commit": "19094c206182dc6886a38bbc6fcd1541c8123b64",
+  "builtAt": "2026-10-08T22:22:26.957Z"
 };

package/loaders/invoke-loader-server.d.ts

@@ -4,8 +4,8 @@
  *
  * Results are cached via Next.js `unstable_cache` so repeated SSR renders
  * for the same loader+args return instantly without a network round-trip
- * to canopy-api. The canopy-api's own in-memory cache still acts as a second
- * layer for cold starts and cross-instance sharing.
+ * to canopy-api. Canopy can also cache opted-in loaders in shared KV when
+ * its deployment enables caching.
  *
  * A canopy 404 is cached as a not-found marker and rethrown as a 404
  * `CanopyApiGatewayError`, so a successful revalidation can displace a stale

package/loaders/judgeme-review-aggregate-loader.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import { z } from "zod";
+import type { z } from "zod";
 import { judgemeProductReviewAggregateLoaderOutputSchema } from "./loader-schemas";
 type JudgemeReviewAggregateData = z.infer<typeof judgemeProductReviewAggregateLoaderOutputSchema>;
 type JudgemeReviewAggregateLoaderProps = {

package/loaders/judgeme-reviews-loader.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import { z } from "zod";
+import type { z } from "zod";
 import { judgemeProductReviewsLoaderOutputSchema } from "./loader-schemas";
 type JudgemeReviewsData = z.infer<typeof judgemeProductReviewsLoaderOutputSchema>;
 type JudgemeReviewsLoaderProps = {

package/loaders/loader-schemas.d.ts

@@ -371,6 +371,7 @@ export declare const productSchema: z.ZodObject<{
             externalId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
     }, z.core.$strip>>>;
+    requiresSellingPlan: z.ZodOptional<z.ZodBoolean>;
     metafields: z.ZodOptional<z.ZodArray<z.ZodObject<{
         key: z.ZodString;
         namespace: z.ZodString;
@@ -583,6 +584,7 @@ export declare const fullProductSchema: z.ZodObject<{
             externalId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
+    requiresSellingPlan: z.ZodOptional<z.ZodBoolean>;
     metafields: z.ZodArray<z.ZodObject<{
         key: z.ZodString;
         namespace: z.ZodString;
@@ -776,6 +778,7 @@ export declare const paginatedProductsSchema: z.ZodObject<{
                 externalId: z.ZodNullable<z.ZodString>;
             }, z.core.$strip>>;
         }, z.core.$strip>>>;
+        requiresSellingPlan: z.ZodOptional<z.ZodBoolean>;
         metafields: z.ZodOptional<z.ZodArray<z.ZodObject<{
             key: z.ZodString;
             namespace: z.ZodString;

package/loaders/loader-schemas.js

@@ -144,6 +144,7 @@ const productSchema = z.object({
   productType: z.string().nullish(),
   tags: z.array(z.string()).optional(),
   sellingPlanGroups: z.array(sellingPlanGroupSchema).optional(),
+  requiresSellingPlan: z.boolean().optional(),
   metafields: z.array(metafieldSchema).optional()
 });
 const okendoReviewSchema = z.object({
@@ -185,6 +186,7 @@ const fullProductSchema = z.object({
   productType: z.string().nullable(),
   tags: z.array(z.string()),
   sellingPlanGroups: z.array(sellingPlanGroupSchema),
+  requiresSellingPlan: productSchema.shape.requiresSellingPlan,
   metafields: z.array(metafieldSchema)
 });
 const fullCollectionSchema = z.object({

package/loaders/loox-review-aggregate-loader.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import { z } from "zod";
+import type { z } from "zod";
 import { looxProductReviewAggregateLoaderOutputSchema } from "./loader-schemas";
 type LooxReviewAggregateData = z.infer<typeof looxProductReviewAggregateLoaderOutputSchema>;
 type LooxReviewAggregateLoaderProps = {

package/loaders/loox-reviews-loader.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import { z } from "zod";
+import type { z } from "zod";
 import { looxProductReviewsLoaderOutputSchema } from "./loader-schemas";
 type LooxReviewsData = z.infer<typeof looxProductReviewsLoaderOutputSchema>;
 type LooxReviewsLoaderProps = {

package/loaders/rebuy-recommendations-loader.d.ts

@@ -146,6 +146,7 @@ declare const rebuyRecommendationsOutputSchema: z.ZodObject<{
                 externalId: z.ZodNullable<z.ZodString>;
             }, z.core.$strip>>;
         }, z.core.$strip>>>;
+        requiresSellingPlan: z.ZodOptional<z.ZodBoolean>;
         metafields: z.ZodOptional<z.ZodArray<z.ZodObject<{
             key: z.ZodString;
             namespace: z.ZodString;

package/loaders/reviews-io-review-aggregate-loader.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import { z } from "zod";
+import type { z } from "zod";
 import { reviewsIoProductReviewAggregateLoaderOutputSchema } from "./loader-schemas";
 type ReviewsIoReviewAggregateData = z.infer<typeof reviewsIoProductReviewAggregateLoaderOutputSchema>;
 type ReviewsIoReviewAggregateLoaderProps = {

package/loaders/reviews-io-reviews-loader.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import { z } from "zod";
+import type { z } from "zod";
 import { reviewsIoProductReviewsLoaderOutputSchema } from "./loader-schemas";
 type ReviewsIoReviewsData = z.infer<typeof reviewsIoProductReviewsLoaderOutputSchema>;
 type ReviewsIoReviewsLoaderProps = {

package/loaders/statsig-experiment-loader.d.ts

@@ -1,20 +1,34 @@
 import type { ReactNode } from "react";
 import type { StatsigExperimentAssignment } from "./loader-schemas";
-type StatsigExperimentLoaderProps = {
-    loaderKey: string;
-    experimentName: string;
+type StatsigVisitorIds = {
     /**
-     * Durable per-visitor identifier. Read it from the `statsig_stable_id` cookie
-     * in the page's server component and pass the same value to both
-     * `PrefetchedLoaders` and this component so the SSR-prefetched assignment
-     * hydrates without a refetch and stays consistent across renders.
+     * Shorthand for `customIds.stableID`. Use it only when the experiment's ID
+     * type is `stableID`.
      */
-    stableId: string;
+    stableId?: string;
     userId?: string;
+    /**
+     * Visitor IDs keyed by the experiment's Statsig ID type, e.g.
+     * `{ publicID: visitorId }`. Read the ID in the page's server component and
+     * pass the same value to both `PrefetchedLoaders` and this component so the
+     * SSR-prefetched assignment hydrates without a refetch.
+     */
+    customIds?: Record<string, string>;
+};
+type AtLeastOneVisitorId = (StatsigVisitorIds & {
+    stableId: string;
+}) | (StatsigVisitorIds & {
+    userId: string;
+}) | (StatsigVisitorIds & {
+    customIds: Record<string, string>;
+});
+type StatsigExperimentLoaderProps = AtLeastOneVisitorId & {
+    loaderKey: string;
+    experimentName: string;
     environmentTier?: string;
     customAttributes?: Record<string, string>;
     children: (assignment: StatsigExperimentAssignment) => ReactNode;
     fallback?: ReactNode;
 };
-export declare function StatsigExperimentLoader({ loaderKey, experimentName, stableId, userId, environmentTier, customAttributes, children, fallback, }: StatsigExperimentLoaderProps): import("react/jsx-runtime").JSX.Element;
+export declare function StatsigExperimentLoader({ loaderKey, experimentName, stableId, userId, customIds, environmentTier, customAttributes, children, fallback, }: StatsigExperimentLoaderProps): import("react/jsx-runtime").JSX.Element;
 export {};

package/loaders/statsig-experiment-loader.js

@@ -9,13 +9,15 @@ function buildArgs({
   experimentName,
   stableId,
   userId,
+  customIds,
   environmentTier,
   customAttributes
 }) {
   return {
     experimentName,
-    stableId,
+    ...stableId !== void 0 ? { stableId } : {},
     ...userId !== void 0 ? { userId } : {},
+    ...customIds !== void 0 ? { customIds } : {},
     ...environmentTier !== void 0 ? { environmentTier } : {},
     ...customAttributes !== void 0 ? { customAttributes } : {}
   };
@@ -25,6 +27,7 @@ function StatsigExperimentLoaderInner({
   experimentName,
   stableId,
   userId,
+  customIds,
   environmentTier,
   customAttributes,
   children
@@ -33,6 +36,7 @@ function StatsigExperimentLoaderInner({
     experimentName,
     stableId,
     userId,
+    customIds,
     environmentTier,
     customAttributes
   });
@@ -50,6 +54,7 @@ function StatsigExperimentLoader({
   experimentName,
   stableId,
   userId,
+  customIds,
   environmentTier,
   customAttributes,
   children,
@@ -59,7 +64,7 @@ function StatsigExperimentLoader({
     LoaderErrorBoundary,
     {
       fallback: fallback ?? null,
-      resetKey: `${loaderKey}:${experimentName}:${stableId}`,
+      resetKey: `${loaderKey}:${experimentName}:${JSON.stringify({ stableId, userId, customIds })}`,
       children: /* @__PURE__ */ jsx(Suspense, { fallback: fallback ?? null, children: /* @__PURE__ */ jsx(
         StatsigExperimentLoaderInner,
         {
@@ -67,6 +72,7 @@ function StatsigExperimentLoader({
           experimentName,
           stableId,
           userId,
+          customIds,
           environmentTier,
           customAttributes,
           children

package/loaders/yotpo-review-aggregate-loader.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import { z } from "zod";
+import type { z } from "zod";
 import { yotpoProductReviewAggregateLoaderOutputSchema } from "./loader-schemas";
 type YotpoReviewAggregateData = z.infer<typeof yotpoProductReviewAggregateLoaderOutputSchema>;
 type YotpoReviewAggregateLoaderProps = {

package/loaders/yotpo-reviews-loader.d.ts

@@ -1,5 +1,5 @@
 import type { ReactNode } from "react";
-import { z } from "zod";
+import type { z } from "zod";
 import { yotpoProductReviewsLoaderOutputSchema } from "./loader-schemas";
 type YotpoReviewsData = z.infer<typeof yotpoProductReviewsLoaderOutputSchema>;
 type YotpoReviewsLoaderProps = {

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@replohq/sdk",
-  "version": "1.13.6",
+  "version": "1.14.1",
   "reploBuild": {
     "packageName": "@replohq/sdk",
-    "version": "1.13.6",
+    "version": "1.14.1",
     "branch": "HEAD",
-    "commit": "26bb95e185c8dfd266d3635694fc84df57c83869",
-    "builtAt": "2026-09-25T18:56:30.188Z"
+    "commit": "19094c206182dc6886a38bbc6fcd1541c8123b64",
+    "builtAt": "2026-10-08T22:22:26.957Z"
   },
   "description": "Replo SDK — cart, analytics, and data loaders for agent-built Next.js sites.",
   "license": "SEE LICENSE IN LICENSE",
@@ -261,6 +261,10 @@
       "types": "./routing/geo.d.ts",
       "default": "./routing/geo.js"
     },
+    "./routing/visitor-id": {
+      "types": "./routing/visitor-id.d.ts",
+      "default": "./routing/visitor-id.js"
+    },
     "./_vendor/schemas/loaderKeys": {
       "types": "./_vendor/schemas/loaderKeys.d.ts",
       "default": "./_vendor/schemas/loaderKeys.mjs"

package/routing/visitor-id.d.ts

@@ -0,0 +1,41 @@
+import type { NextRequest, NextResponse } from "next/server";
+import type { ConsentCategory } from "../consent/types";
+/**
+ * Gives a first-time visitor a durable visitor ID (a UUID) in the `cookieName`
+ * cookie, so experiments bucket every page view of theirs the same way. Call it
+ * in `middleware.ts` on the response the rest of the middleware returns. It
+ * never replaces an existing cookie, so a visitor keeps any ID the customer's
+ * own site already gave them, and it skips redirects.
+ *
+ * When the request's host is `cookieDomain` or one of its subdomains, the
+ * cookie is scoped to `cookieDomain` so the customer's other subdomains (their
+ * funnel or checkout) see the same ID. On any other host, such as a preview or
+ * a `replosites.com` address, or with `cookieDomain: null`, the cookie stays on
+ * the current host.
+ *
+ * With a `requiredConsent` category, the ID is only created once the visitor
+ * has granted that category in Replo's consent banner. Pass `null` when the
+ * site needs no consent for it.
+ */
+export declare function ensureVisitorId({ request, response, cookieName, cookieDomain, requiredConsent, }: {
+    request: NextRequest;
+    response: NextResponse;
+    cookieName: string;
+    cookieDomain: string | null;
+    requiredConsent: VisitorIdConsent;
+}): NextResponse;
+/**
+ * Reads the visitor ID for an experiment evaluation, or `null` when the
+ * visitor has none or hasn't granted `requiredConsent`. Pass it the page's
+ * `await cookies()` and the same `cookieName` and `requiredConsent` as
+ * `ensureVisitorId`, so a visitor who withdraws consent sees the default and
+ * logs no exposure.
+ */
+export declare function findVisitorId({ cookies, cookieName, requiredConsent, }: {
+    cookies: VisitorIdCookies;
+    cookieName: string;
+    requiredConsent: VisitorIdConsent;
+}): string | null;
+type VisitorIdCookies = Pick<NextRequest["cookies"], "get">;
+type VisitorIdConsent = Exclude<ConsentCategory, "necessary"> | null;
+export {};

package/routing/visitor-id.js

@@ -0,0 +1,97 @@
+import { CONSENT_COOKIE_NAME, parseConsentCookie } from "../consent/cookie";
+const ONE_YEAR_SECONDS = 60 * 60 * 24 * 365;
+const SHARED_REPLO_DOMAINS = /* @__PURE__ */ new Set([
+  "reploshops.com",
+  "replosites.com",
+  "replosites-staging.com",
+  "replosites-dev.com"
+]);
+const REGISTRY_SUFFIX_LABELS = /* @__PURE__ */ new Set([
+  "ac",
+  "co",
+  "com",
+  "edu",
+  "gov",
+  "ne",
+  "net",
+  "or",
+  "org"
+]);
+function ensureVisitorId({
+  request,
+  response,
+  cookieName,
+  cookieDomain,
+  requiredConsent
+}) {
+  const isRedirect = response.status >= 300 && response.status < 400;
+  const isAlreadySet = response.headers.getSetCookie().some((setCookie) => {
+    return setCookie.startsWith(`${cookieName}=`);
+  });
+  if (isRedirect || isAlreadySet || !isConsentGranted({ cookies: request.cookies, requiredConsent }) || request.cookies.get(cookieName)?.value) {
+    return response;
+  }
+  const appendedSetCookies = response.headers.getSetCookie().filter((setCookie) => {
+    return !response.cookies.has(setCookie.split("=")[0]?.trim() ?? "");
+  });
+  const domain = findCookieDomain({
+    hostname: request.nextUrl.hostname,
+    cookieDomain
+  });
+  response.cookies.set({
+    name: cookieName,
+    value: crypto.randomUUID(),
+    path: "/",
+    maxAge: ONE_YEAR_SECONDS,
+    sameSite: "lax",
+    secure: request.nextUrl.protocol === "https:",
+    httpOnly: false,
+    ...domain !== null ? { domain } : {}
+  });
+  for (const setCookie of appendedSetCookies) {
+    response.headers.append("set-cookie", setCookie);
+  }
+  response.headers.set("Cache-Control", "private, no-store");
+  return response;
+}
+function findVisitorId({
+  cookies,
+  cookieName,
+  requiredConsent
+}) {
+  const visitorId = cookies.get(cookieName)?.value;
+  if (!visitorId || !isConsentGranted({ cookies, requiredConsent })) {
+    return null;
+  }
+  return visitorId;
+}
+function isConsentGranted({
+  cookies,
+  requiredConsent
+}) {
+  if (requiredConsent === null) {
+    return true;
+  }
+  const consent = parseConsentCookie(cookies.get(CONSENT_COOKIE_NAME)?.value);
+  return consent?.categories[requiredConsent] ?? false;
+}
+function findCookieDomain({
+  hostname,
+  cookieDomain
+}) {
+  if (cookieDomain === null) {
+    return null;
+  }
+  const domain = cookieDomain.trim().toLowerCase().replace(/^\./, "");
+  const labels = domain.split(".");
+  const isRegistrySuffix = labels.length < 2 || labels.length === 2 && REGISTRY_SUFFIX_LABELS.has(labels[0] ?? "");
+  if (isRegistrySuffix || SHARED_REPLO_DOMAINS.has(domain)) {
+    return null;
+  }
+  const host = hostname.toLowerCase();
+  return host === domain || host.endsWith(`.${domain}`) ? domain : null;
+}
+export {
+  ensureVisitorId,
+  findVisitorId
+};