@replohq/sdk 1.2.3 → 1.3.1

package/analytics/get-analytics-sinks.js

@@ -1,5 +1,7 @@
 import { isConsentAllowed } from "../consent/consent-store";
+import { snippetScriptId } from "../consent/script-registration-store";
 import { ConvergeSink } from "./sinks/converge-sink";
+import { ElevarSink } from "./sinks/elevar-sink";
 import { GA4Sink } from "./sinks/ga4-sink";
 import { MetaSink } from "./sinks/meta-sink";
 import { NorthbeamSink } from "./sinks/northbeam-sink";
@@ -20,6 +22,15 @@ const PROVIDER_SINK_FACTORIES = {
   Northbeam: () => new NorthbeamSink(),
   Converge: () => new ConvergeSink()
 };
+const SNIPPET_PROVIDER_SINK_FACTORIES = {
+  [snippetScriptId("Elevar")]: () => new ElevarSink()
+};
+function findSinkFactory(script) {
+  if (script.type === "snippet") {
+    return SNIPPET_PROVIDER_SINK_FACTORIES[script.id] ?? null;
+  }
+  return PROVIDER_SINK_FACTORIES[script.type] ?? null;
+}
 function getAnalyticsSinks({
   consent,
   registeredScripts,
@@ -34,10 +45,11 @@ function getAnalyticsSinks({
     sinks.push(new ReploSink());
   }
   const shopifyOwnsCheckout = checkoutProvider === "shopify";
-  const addedTypes = /* @__PURE__ */ new Set();
+  const addedProviders = /* @__PURE__ */ new Set();
   for (const script of registeredScripts) {
-    const factory = PROVIDER_SINK_FACTORIES[script.type];
-    if (!factory || addedTypes.has(script.type)) {
+    const providerKey = script.type === "snippet" ? script.id : script.type;
+    const factory = findSinkFactory(script);
+    if (!factory || addedProviders.has(providerKey)) {
       continue;
     }
     if (isConsentAllowed({
@@ -48,7 +60,7 @@ function getAnalyticsSinks({
       sinks.push(
         shopifyOwnsCheckout ? gateShopifyOwnedFunnelEvents(sink) : sink
       );
-      addedTypes.add(script.type);
+      addedProviders.add(providerKey);
     }
   }
   return sinks;

package/analytics/get-analytics-sinks.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../analytics/get-analytics-sinks.ts"],
-  "sourcesContent": ["import type { ReploScriptType } from \"schemas/generated/consent\";\nimport type { ConsentState } from \"../consent/consent-store\";\nimport type { RegisteredScript } from \"../consent/script-registration-store\";\nimport type { CheckoutProvider } from \"../lib/integration-utils\";\nimport type { AnalyticsSink } from \"./analytics-sink\";\n\nimport { isConsentAllowed } from \"../consent/consent-store\";\nimport { ConvergeSink } from \"./sinks/converge-sink\";\nimport { GA4Sink } from \"./sinks/ga4-sink\";\nimport { MetaSink } from \"./sinks/meta-sink\";\nimport { NorthbeamSink } from \"./sinks/northbeam-sink\";\nimport { PinterestSink } from \"./sinks/pinterest-sink\";\nimport { RedditSink } from \"./sinks/reddit-sink\";\nimport { ReploSink } from \"./sinks/replo-sink\";\nimport { SnapchatSink } from \"./sinks/snapchat-sink\";\nimport { TikTokSink } from \"./sinks/tiktok-sink\";\nimport { WindowSink } from \"./sinks/window-sink\";\nimport { gateShopifyOwnedFunnelEvents } from \"./utils/shopify-funnel-gate\";\n\n/**\n * Named providers that have a corresponding ecommerce-event sink. The other\n * managed providers (GoogleTagManager, Hotjar, MicrosoftClarity, Segment,\n * Gorgias) and generic `snippet`/`custom` entries load scripts but do not map\n * to `AnalyticsSink` events today, so they never produce a sink here.\n */\nconst PROVIDER_SINK_FACTORIES: Partial<\n  Record<ReploScriptType, () => AnalyticsSink>\n> = {\n  GA4: () => new GA4Sink(),\n  Meta: () => new MetaSink(),\n  TikTok: () => new TikTokSink(),\n  Snapchat: () => new SnapchatSink(),\n  Pinterest: () => new PinterestSink(),\n  Reddit: () => new RedditSink(),\n  Northbeam: () => new NorthbeamSink(),\n  Converge: () => new ConvergeSink(),\n};\n\n/**\n * Builds the set of analytics sinks that may fire given the current consent\n * state and which managed scripts are registered on the page.\n *\n * Consent gates data egress, not in-page plumbing:\n * - `WindowSink` is a local `CustomEvent` bus (no data leaves the device), so it\n *   always ships regardless of consent. Its consumers self-gate: managed pixels\n *   are already gated at the injection layer (they never mount without consent,\n *   so they never subscribe), and unmanaged custom scripts are the author's\n *   responsibility.\n * - `ReploSink` forwards into Replo's first-party analytics pipeline (real\n *   egress / processing), so it counts as `analytics`-category tracking and is\n *   gated by that consent. It is an implicit sink this scaffold always ships\n *   (not tied to a registered entry) and is never editable in the miniapp.\n *   Under a delegated platform, `analytics` reflects that platform's answer.\n *\n * Third-party provider sinks are created only when a matching `<ReploScripts>`\n * entry is registered AND its required consent is granted.\n */\nexport function getAnalyticsSinks({\n  consent,\n  registeredScripts,\n  checkoutProvider,\n}: {\n  consent: ConsentState;\n  registeredScripts: RegisteredScript[];\n  checkoutProvider?: CheckoutProvider;\n}): AnalyticsSink[] {\n  const sinks: AnalyticsSink[] = [new WindowSink()];\n\n  const firstPartyAllowed = isConsentAllowed({\n    state: consent,\n    requiredConsent: [\"analytics\"],\n  });\n  if (firstPartyAllowed) {\n    sinks.push(new ReploSink());\n  }\n\n  // When Shopify hosts checkout, its native channels report the checkout-funnel\n  // events to ad platforms server-side. Suppress those events on third-party\n  // storefront pixels so they don't double-count Shopify's copy.\n  const shopifyOwnsCheckout = checkoutProvider === \"shopify\";\n\n  const addedTypes = new Set<ReploScriptType>();\n  for (const script of registeredScripts) {\n    const factory = PROVIDER_SINK_FACTORIES[script.type];\n    if (!factory || addedTypes.has(script.type)) {\n      continue;\n    }\n    if (\n      isConsentAllowed({\n        state: consent,\n        requiredConsent: script.requiredConsent,\n      })\n    ) {\n      const sink = factory();\n      sinks.push(\n        shopifyOwnsCheckout ? gateShopifyOwnedFunnelEvents(sink) : sink,\n      );\n      addedTypes.add(script.type);\n    }\n  }\n\n  return sinks;\n}\n"],
-  "mappings": "AAMA,SAAS,wBAAwB;AACjC,SAAS,oBAAoB;AAC7B,SAAS,eAAe;AACxB,SAAS,gBAAgB;AACzB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAC3B,SAAS,iBAAiB;AAC1B,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAAS,oCAAoC;AAQ7C,MAAM,0BAEF;AAAA,EACF,KAAK,MAAM,IAAI,QAAQ;AAAA,EACvB,MAAM,MAAM,IAAI,SAAS;AAAA,EACzB,QAAQ,MAAM,IAAI,WAAW;AAAA,EAC7B,UAAU,MAAM,IAAI,aAAa;AAAA,EACjC,WAAW,MAAM,IAAI,cAAc;AAAA,EACnC,QAAQ,MAAM,IAAI,WAAW;AAAA,EAC7B,WAAW,MAAM,IAAI,cAAc;AAAA,EACnC,UAAU,MAAM,IAAI,aAAa;AACnC;AAqBO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AACF,GAIoB;AAClB,QAAM,QAAyB,CAAC,IAAI,WAAW,CAAC;AAEhD,QAAM,oBAAoB,iBAAiB;AAAA,IACzC,OAAO;AAAA,IACP,iBAAiB,CAAC,WAAW;AAAA,EAC/B,CAAC;AACD,MAAI,mBAAmB;AACrB,UAAM,KAAK,IAAI,UAAU,CAAC;AAAA,EAC5B;AAKA,QAAM,sBAAsB,qBAAqB;AAEjD,QAAM,aAAa,oBAAI,IAAqB;AAC5C,aAAW,UAAU,mBAAmB;AACtC,UAAM,UAAU,wBAAwB,OAAO,IAAI;AACnD,QAAI,CAAC,WAAW,WAAW,IAAI,OAAO,IAAI,GAAG;AAC3C;AAAA,IACF;AACA,QACE,iBAAiB;AAAA,MACf,OAAO;AAAA,MACP,iBAAiB,OAAO;AAAA,IAC1B,CAAC,GACD;AACA,YAAM,OAAO,QAAQ;AACrB,YAAM;AAAA,QACJ,sBAAsB,6BAA6B,IAAI,IAAI;AAAA,MAC7D;AACA,iBAAW,IAAI,OAAO,IAAI;AAAA,IAC5B;AAAA,EACF;AAEA,SAAO;AACT;",
+  "sourcesContent": ["import type { ReploScriptType } from \"schemas/generated/consent\";\nimport type { ConsentState } from \"../consent/consent-store\";\nimport type { RegisteredScript } from \"../consent/script-registration-store\";\nimport type { CheckoutProvider } from \"../lib/integration-utils\";\nimport type { AnalyticsSink } from \"./analytics-sink\";\n\nimport { isConsentAllowed } from \"../consent/consent-store\";\nimport { snippetScriptId } from \"../consent/script-registration-store\";\nimport { ConvergeSink } from \"./sinks/converge-sink\";\nimport { ElevarSink } from \"./sinks/elevar-sink\";\nimport { GA4Sink } from \"./sinks/ga4-sink\";\nimport { MetaSink } from \"./sinks/meta-sink\";\nimport { NorthbeamSink } from \"./sinks/northbeam-sink\";\nimport { PinterestSink } from \"./sinks/pinterest-sink\";\nimport { RedditSink } from \"./sinks/reddit-sink\";\nimport { ReploSink } from \"./sinks/replo-sink\";\nimport { SnapchatSink } from \"./sinks/snapchat-sink\";\nimport { TikTokSink } from \"./sinks/tiktok-sink\";\nimport { WindowSink } from \"./sinks/window-sink\";\nimport { gateShopifyOwnedFunnelEvents } from \"./utils/shopify-funnel-gate\";\n\n/**\n * Named providers that have a corresponding ecommerce-event sink. The other\n * managed providers (GoogleTagManager, Hotjar, MicrosoftClarity, Segment,\n * Gorgias) and `custom` entries load scripts but do not map to\n * `AnalyticsSink` events today, so they never produce a sink here.\n */\nconst PROVIDER_SINK_FACTORIES: Partial<\n  Record<ReploScriptType, () => AnalyticsSink>\n> = {\n  GA4: () => new GA4Sink(),\n  Meta: () => new MetaSink(),\n  TikTok: () => new TikTokSink(),\n  Snapchat: () => new SnapchatSink(),\n  Pinterest: () => new PinterestSink(),\n  Reddit: () => new RedditSink(),\n  Northbeam: () => new NorthbeamSink(),\n  Converge: () => new ConvergeSink(),\n};\n\n/**\n * Snippet providers share the `snippet` type, so their sinks key on the\n * registration id instead. Elevar's pasted snippet only forwards what the page\n * pushes to its data layer, and this sink is what pushes it.\n */\nconst SNIPPET_PROVIDER_SINK_FACTORIES: Record<string, () => AnalyticsSink> = {\n  [snippetScriptId(\"Elevar\")]: () => new ElevarSink(),\n};\n\nfunction findSinkFactory(script: RegisteredScript) {\n  if (script.type === \"snippet\") {\n    return SNIPPET_PROVIDER_SINK_FACTORIES[script.id] ?? null;\n  }\n  return PROVIDER_SINK_FACTORIES[script.type] ?? null;\n}\n\n/**\n * Builds the set of analytics sinks that may fire given the current consent\n * state and which managed scripts are registered on the page.\n *\n * Consent gates data egress, not in-page plumbing:\n * - `WindowSink` is a local `CustomEvent` bus (no data leaves the device), so it\n *   always ships regardless of consent. Its consumers self-gate: managed pixels\n *   are already gated at the injection layer (they never mount without consent,\n *   so they never subscribe), and unmanaged custom scripts are the author's\n *   responsibility.\n * - `ReploSink` forwards into Replo's first-party analytics pipeline (real\n *   egress / processing), so it counts as `analytics`-category tracking and is\n *   gated by that consent. It is an implicit sink this scaffold always ships\n *   (not tied to a registered entry) and is never editable in the miniapp.\n *   Under a delegated platform, `analytics` reflects that platform's answer.\n *\n * Third-party provider sinks are created only when a matching `<ReploScripts>`\n * entry is registered AND its required consent is granted.\n */\nexport function getAnalyticsSinks({\n  consent,\n  registeredScripts,\n  checkoutProvider,\n}: {\n  consent: ConsentState;\n  registeredScripts: RegisteredScript[];\n  checkoutProvider?: CheckoutProvider;\n}): AnalyticsSink[] {\n  const sinks: AnalyticsSink[] = [new WindowSink()];\n\n  const firstPartyAllowed = isConsentAllowed({\n    state: consent,\n    requiredConsent: [\"analytics\"],\n  });\n  if (firstPartyAllowed) {\n    sinks.push(new ReploSink());\n  }\n\n  // When Shopify hosts checkout, its native channels report the checkout-funnel\n  // events to ad platforms server-side. Suppress those events on third-party\n  // storefront pixels so they don't double-count Shopify's copy.\n  const shopifyOwnsCheckout = checkoutProvider === \"shopify\";\n\n  // One sink per provider: typed providers dedupe on type, snippet providers\n  // on their registration id.\n  const addedProviders = new Set<string>();\n  for (const script of registeredScripts) {\n    const providerKey = script.type === \"snippet\" ? script.id : script.type;\n    const factory = findSinkFactory(script);\n    if (!factory || addedProviders.has(providerKey)) {\n      continue;\n    }\n    if (\n      isConsentAllowed({\n        state: consent,\n        requiredConsent: script.requiredConsent,\n      })\n    ) {\n      const sink = factory();\n      sinks.push(\n        shopifyOwnsCheckout ? gateShopifyOwnedFunnelEvents(sink) : sink,\n      );\n      addedProviders.add(providerKey);\n    }\n  }\n\n  return sinks;\n}\n"],
+  "mappings": "AAMA,SAAS,wBAAwB;AACjC,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AACxB,SAAS,gBAAgB;AACzB,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAC3B,SAAS,iBAAiB;AAC1B,SAAS,oBAAoB;AAC7B,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAAS,oCAAoC;AAQ7C,MAAM,0BAEF;AAAA,EACF,KAAK,MAAM,IAAI,QAAQ;AAAA,EACvB,MAAM,MAAM,IAAI,SAAS;AAAA,EACzB,QAAQ,MAAM,IAAI,WAAW;AAAA,EAC7B,UAAU,MAAM,IAAI,aAAa;AAAA,EACjC,WAAW,MAAM,IAAI,cAAc;AAAA,EACnC,QAAQ,MAAM,IAAI,WAAW;AAAA,EAC7B,WAAW,MAAM,IAAI,cAAc;AAAA,EACnC,UAAU,MAAM,IAAI,aAAa;AACnC;AAOA,MAAM,kCAAuE;AAAA,EAC3E,CAAC,gBAAgB,QAAQ,CAAC,GAAG,MAAM,IAAI,WAAW;AACpD;AAEA,SAAS,gBAAgB,QAA0B;AACjD,MAAI,OAAO,SAAS,WAAW;AAC7B,WAAO,gCAAgC,OAAO,EAAE,KAAK;AAAA,EACvD;AACA,SAAO,wBAAwB,OAAO,IAAI,KAAK;AACjD;AAqBO,SAAS,kBAAkB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AACF,GAIoB;AAClB,QAAM,QAAyB,CAAC,IAAI,WAAW,CAAC;AAEhD,QAAM,oBAAoB,iBAAiB;AAAA,IACzC,OAAO;AAAA,IACP,iBAAiB,CAAC,WAAW;AAAA,EAC/B,CAAC;AACD,MAAI,mBAAmB;AACrB,UAAM,KAAK,IAAI,UAAU,CAAC;AAAA,EAC5B;AAKA,QAAM,sBAAsB,qBAAqB;AAIjD,QAAM,iBAAiB,oBAAI,IAAY;AACvC,aAAW,UAAU,mBAAmB;AACtC,UAAM,cAAc,OAAO,SAAS,YAAY,OAAO,KAAK,OAAO;AACnE,UAAM,UAAU,gBAAgB,MAAM;AACtC,QAAI,CAAC,WAAW,eAAe,IAAI,WAAW,GAAG;AAC/C;AAAA,IACF;AACA,QACE,iBAAiB;AAAA,MACf,OAAO;AAAA,MACP,iBAAiB,OAAO;AAAA,IAC1B,CAAC,GACD;AACA,YAAM,OAAO,QAAQ;AACrB,YAAM;AAAA,QACJ,sBAAsB,6BAA6B,IAAI,IAAI;AAAA,MAC7D;AACA,qBAAe,IAAI,WAAW;AAAA,IAChC;AAAA,EACF;AAEA,SAAO;AACT;",
   "names": []
 }

package/analytics/sinks/elevar-sink.d.ts

@@ -0,0 +1,38 @@
+import type { AnalyticsSink, DataPayload } from "../analytics-sink";
+import type { PageMetadata } from "../utils/navigation-tracker";
+type ElevarUserProperties = {
+    visitor_type: "guest" | "logged_in";
+};
+type ElevarDataLayerEvent = {
+    event: string;
+    user_properties: ElevarUserProperties;
+    cart_total?: string;
+    ecommerce: Record<string, unknown>;
+};
+declare global {
+    interface Window {
+        ElevarDataLayer?: ElevarDataLayerEvent[];
+        ElevarInvalidateContext?: () => void;
+    }
+}
+/**
+ * Pushes Elevar's `dl_*` data layer events for a storefront whose Elevar
+ * headless snippet is installed as a `snippet` script entry. The snippet only
+ * forwards what the page pushes to `window.ElevarDataLayer`, and a Replo page
+ * (unlike a Shopify theme) pushes nothing on its own.
+ */
+export declare class ElevarSink implements AnalyticsSink {
+    constructor();
+    private pushEcommerceEvent;
+    private pushProductEvent;
+    pageView(metadata?: PageMetadata): Promise<void>;
+    purchase(): Promise<void>;
+    click(): Promise<void>;
+    productViewed(payload: DataPayload): Promise<void>;
+    addToCart(payload: DataPayload): Promise<void>;
+    removeFromCart(payload: DataPayload): Promise<void>;
+    viewCart({ data }: DataPayload): Promise<void>;
+    startCheckout({ data }: DataPayload): Promise<void>;
+    viewCollection({ data }: DataPayload): Promise<void>;
+}
+export {};

package/analytics/sinks/elevar-sink.js

@@ -0,0 +1,260 @@
+import { z } from "zod";
+const GUEST_USER_PROPERTIES = { visitor_type: "guest" };
+const FALLBACK_CURRENCY_CODE = "USD";
+const nonEmptyStringSchema = z.union([z.string().min(1), z.number().finite().transform(String)]).optional().catch(void 0);
+const finiteNumberSchema = z.union([
+  z.number().finite(),
+  z.string().trim().min(1).transform(Number).pipe(z.number().finite())
+]).optional().catch(void 0);
+const analyticsProductSchema = z.object({
+  productId: nonEmptyStringSchema,
+  productTitle: nonEmptyStringSchema,
+  variantId: nonEmptyStringSchema,
+  variantTitle: nonEmptyStringSchema,
+  variantSku: nonEmptyStringSchema,
+  price: finiteNumberSchema,
+  currency: nonEmptyStringSchema,
+  quantity: finiteNumberSchema
+});
+const checkoutLineSchema = z.object({
+  quantity: finiteNumberSchema,
+  merchandise: z.object({
+    id: nonEmptyStringSchema,
+    title: nonEmptyStringSchema,
+    sku: nonEmptyStringSchema,
+    price: z.object({
+      amount: finiteNumberSchema,
+      currencyCode: nonEmptyStringSchema
+    }).optional(),
+    product: z.object({ id: nonEmptyStringSchema, title: nonEmptyStringSchema }).optional()
+  }).optional()
+});
+const productListSchema = z.array(z.unknown()).optional().catch(void 0);
+const cartPayloadSchema = z.object({
+  currency: nonEmptyStringSchema,
+  currencyCode: nonEmptyStringSchema,
+  subtotal: finiteNumberSchema,
+  totalPrice: z.object({ amount: finiteNumberSchema }).optional(),
+  lineItems: productListSchema
+});
+const collectionPayloadSchema = z.object({
+  currency: nonEmptyStringSchema,
+  currencyCode: nonEmptyStringSchema,
+  products: productListSchema
+});
+function formatMoney(amount) {
+  return amount.toFixed(2);
+}
+function legacyResourceId(id) {
+  return id.replace(/^gid:\/\/shopify\/\w+\//, "");
+}
+function parseCheckoutLine(line) {
+  const parsed = checkoutLineSchema.safeParse(line);
+  if (!parsed.success || !parsed.data.merchandise) {
+    return null;
+  }
+  const { merchandise, quantity } = parsed.data;
+  return {
+    productId: merchandise.product?.id,
+    productTitle: merchandise.product?.title,
+    variantId: merchandise.id,
+    variantTitle: merchandise.title,
+    variantSku: merchandise.sku,
+    price: merchandise.price?.amount,
+    currency: merchandise.price?.currencyCode,
+    quantity
+  };
+}
+function parseAnalyticsProduct(value) {
+  const parsed = analyticsProductSchema.safeParse(value);
+  if (!parsed.success) {
+    return null;
+  }
+  return parsed.data.productId ? parsed.data : parseCheckoutLine(value);
+}
+function toElevarProduct(product, options) {
+  const productId = product.productId;
+  if (!productId) {
+    return null;
+  }
+  const variantId = product.variantId ?? productId;
+  return {
+    id: product.variantSku ?? legacyResourceId(variantId),
+    name: product.productTitle ?? "",
+    brand: "",
+    category: "",
+    variant: product.variantTitle ?? "",
+    price: formatMoney(product.price ?? 0),
+    ...options.withQuantity ? { quantity: String(product.quantity ?? 1) } : {},
+    ...options.position === void 0 ? {} : { position: String(options.position) },
+    list: options.list,
+    product_id: legacyResourceId(productId),
+    variant_id: legacyResourceId(variantId),
+    compare_at_price: "0.0",
+    image: ""
+  };
+}
+function toElevarProducts(products, options) {
+  const parsedProducts = products.map(parseAnalyticsProduct).filter((product) => product !== null);
+  const currencyCode = options.currency ?? parsedProducts.find((product) => product.currency)?.currency ?? FALLBACK_CURRENCY_CODE;
+  const elevarProducts = parsedProducts.map((product, index) => {
+    return toElevarProduct(product, { ...options, position: index + 1 });
+  }).filter((product) => product !== null);
+  return { products: elevarProducts, currencyCode };
+}
+function pushToElevarDataLayer(event) {
+  if (typeof window === "undefined") {
+    return;
+  }
+  window.ElevarDataLayer = window.ElevarDataLayer ?? [];
+  window.ElevarDataLayer.push(event);
+}
+let lastUserDataUrl = null;
+function pushUserData() {
+  lastUserDataUrl = window.location.href;
+  pushToElevarDataLayer({
+    event: "dl_user_data",
+    cart_total: formatMoney(0),
+    user_properties: GUEST_USER_PROPERTIES,
+    ecommerce: {
+      currencyCode: FALLBACK_CURRENCY_CODE,
+      cart_contents: { products: [] }
+    }
+  });
+}
+function ensureUserDataForCurrentPage() {
+  if (typeof window === "undefined" || lastUserDataUrl === window.location.href) {
+    return;
+  }
+  pushUserData();
+}
+class ElevarSink {
+  constructor() {
+    ensureUserDataForCurrentPage();
+  }
+  pushEcommerceEvent(event, ecommerce, cartTotal) {
+    ensureUserDataForCurrentPage();
+    pushToElevarDataLayer({
+      event,
+      user_properties: GUEST_USER_PROPERTIES,
+      ...cartTotal === void 0 ? {} : { cart_total: cartTotal },
+      ecommerce
+    });
+  }
+  pushProductEvent(event, action, { data }, options) {
+    const product = parseAnalyticsProduct(data);
+    const elevarProduct = product && toElevarProduct(product, {
+      list: "",
+      withQuantity: options.withQuantity
+    });
+    if (!elevarProduct) {
+      console.warn(`[analytics] skipped Elevar ${event}: no product id`);
+      return;
+    }
+    if (options.withUrl) {
+      elevarProduct.url = window.location.href;
+    }
+    this.pushEcommerceEvent(event, {
+      currencyCode: product.currency ?? FALLBACK_CURRENCY_CODE,
+      [action]: {
+        actionField: action === "detail" ? { list: window.location.pathname, action } : { list: window.location.pathname },
+        products: [elevarProduct]
+      }
+    });
+  }
+  async pageView(metadata) {
+    if (typeof window === "undefined") {
+      return;
+    }
+    if (metadata?.navigationType === "soft" && lastUserDataUrl !== window.location.href) {
+      window.ElevarInvalidateContext?.();
+    }
+    ensureUserDataForCurrentPage();
+  }
+  async purchase() {
+  }
+  async click() {
+  }
+  async productViewed(payload) {
+    this.pushProductEvent("dl_view_item", "detail", payload, {
+      withQuantity: false
+    });
+  }
+  async addToCart(payload) {
+    this.pushProductEvent("dl_add_to_cart", "add", payload, {
+      withQuantity: true,
+      withUrl: true
+    });
+  }
+  async removeFromCart(payload) {
+    this.pushProductEvent("dl_remove_from_cart", "remove", payload, {
+      withQuantity: true
+    });
+  }
+  async viewCart({ data }) {
+    const cart = cartPayloadSchema.safeParse(data);
+    if (!cart.success) {
+      return;
+    }
+    const { products, currencyCode } = toElevarProducts(
+      cart.data.lineItems ?? [],
+      {
+        list: "",
+        withQuantity: true,
+        currency: cart.data.currency ?? cart.data.currencyCode
+      }
+    );
+    this.pushEcommerceEvent(
+      "dl_view_cart",
+      {
+        currencyCode,
+        actionField: { list: "Shopping Cart" },
+        impressions: products
+      },
+      formatMoney(cart.data.subtotal ?? cart.data.totalPrice?.amount ?? 0)
+    );
+  }
+  async startCheckout({ data }) {
+    const cart = cartPayloadSchema.safeParse(data);
+    if (!cart.success) {
+      return;
+    }
+    const { products, currencyCode } = toElevarProducts(
+      cart.data.lineItems ?? [],
+      {
+        list: "",
+        withQuantity: true,
+        currency: cart.data.currencyCode ?? cart.data.currency
+      }
+    );
+    this.pushEcommerceEvent("dl_begin_checkout", {
+      currencyCode,
+      checkout: {
+        actionField: { step: "1", action: "checkout" },
+        products
+      }
+    });
+  }
+  async viewCollection({ data }) {
+    const collection = collectionPayloadSchema.safeParse(data);
+    if (!collection.success) {
+      return;
+    }
+    const { products, currencyCode } = toElevarProducts(
+      collection.data.products ?? [],
+      {
+        list: window.location.pathname,
+        withQuantity: false,
+        currency: collection.data.currency ?? collection.data.currencyCode
+      }
+    );
+    this.pushEcommerceEvent("dl_view_item_list", {
+      currencyCode,
+      impressions: products
+    });
+  }
+}
+export {
+  ElevarSink
+};
+//# sourceMappingURL=elevar-sink.js.map

package/analytics/sinks/elevar-sink.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../analytics/sinks/elevar-sink.ts"],
+  "sourcesContent": ["import type { AnalyticsSink, DataPayload } from \"../analytics-sink\";\nimport type { PageMetadata } from \"../utils/navigation-tracker\";\n\nimport { z } from \"zod\";\n\n/**\n * Elevar's data layer contract for headless storefronts:\n * https://docs.getelevar.com/docs/headless-implementing-the-data-layer\n * Every value is a string, `dl_user_data` must precede every other event on a\n * page, and events are only processed when pushed to `window.ElevarDataLayer`.\n */\ntype ElevarProduct = {\n  id: string;\n  name: string;\n  brand: string;\n  category: string;\n  variant: string;\n  price: string;\n  quantity?: string;\n  position?: string;\n  list: string;\n  product_id: string;\n  variant_id: string;\n  compare_at_price: string;\n  image: string;\n  url?: string;\n};\n\ntype ElevarUserProperties = { visitor_type: \"guest\" | \"logged_in\" };\n\ntype ElevarDataLayerEvent = {\n  event: string;\n  user_properties: ElevarUserProperties;\n  cart_total?: string;\n  ecommerce: Record<string, unknown>;\n};\n\ndeclare global {\n  interface Window {\n    ElevarDataLayer?: ElevarDataLayerEvent[];\n    ElevarInvalidateContext?: () => void;\n  }\n}\n\n// The storefront has no customer identity to hand Elevar; logged-in customer\n// fields come from the merchant's Shopify source on Elevar's side.\nconst GUEST_USER_PROPERTIES: ElevarUserProperties = { visitor_type: \"guest\" };\n\n// Matches the cart provider's own fallback when a cart has no currency yet.\nconst FALLBACK_CURRENCY_CODE = \"USD\";\n\nconst nonEmptyStringSchema = z\n  .union([z.string().min(1), z.number().finite().transform(String)])\n  .optional()\n  .catch(undefined);\nconst finiteNumberSchema = z\n  .union([\n    z.number().finite(),\n    z.string().trim().min(1).transform(Number).pipe(z.number().finite()),\n  ])\n  .optional()\n  .catch(undefined);\n\n/** The flat product fields the SDK's cart provider and product-view hook emit. */\nconst analyticsProductSchema = z.object({\n  productId: nonEmptyStringSchema,\n  productTitle: nonEmptyStringSchema,\n  variantId: nonEmptyStringSchema,\n  variantTitle: nonEmptyStringSchema,\n  variantSku: nonEmptyStringSchema,\n  price: finiteNumberSchema,\n  currency: nonEmptyStringSchema,\n  quantity: finiteNumberSchema,\n});\n\n/** The nested line shape the starter site's checkout button emits. */\nconst checkoutLineSchema = z.object({\n  quantity: finiteNumberSchema,\n  merchandise: z\n    .object({\n      id: nonEmptyStringSchema,\n      title: nonEmptyStringSchema,\n      sku: nonEmptyStringSchema,\n      price: z\n        .object({\n          amount: finiteNumberSchema,\n          currencyCode: nonEmptyStringSchema,\n        })\n        .optional(),\n      product: z\n        .object({ id: nonEmptyStringSchema, title: nonEmptyStringSchema })\n        .optional(),\n    })\n    .optional(),\n});\n\nconst productListSchema = z.array(z.unknown()).optional().catch(undefined);\n\nconst cartPayloadSchema = z.object({\n  currency: nonEmptyStringSchema,\n  currencyCode: nonEmptyStringSchema,\n  subtotal: finiteNumberSchema,\n  totalPrice: z.object({ amount: finiteNumberSchema }).optional(),\n  lineItems: productListSchema,\n});\n\nconst collectionPayloadSchema = z.object({\n  currency: nonEmptyStringSchema,\n  currencyCode: nonEmptyStringSchema,\n  products: productListSchema,\n});\n\ntype AnalyticsProduct = z.infer<typeof analyticsProductSchema>;\n\nfunction formatMoney(amount: number) {\n  return amount.toFixed(2);\n}\n\n// Elevar's Shopify destinations key on legacy numeric ids, while the cart\n// carries Storefront API GIDs (`gid://shopify/ProductVariant/123`).\nfunction legacyResourceId(id: string) {\n  return id.replace(/^gid:\\/\\/shopify\\/\\w+\\//, \"\");\n}\n\nfunction parseCheckoutLine(line: unknown): AnalyticsProduct | null {\n  const parsed = checkoutLineSchema.safeParse(line);\n  if (!parsed.success || !parsed.data.merchandise) {\n    return null;\n  }\n  const { merchandise, quantity } = parsed.data;\n  return {\n    productId: merchandise.product?.id,\n    productTitle: merchandise.product?.title,\n    variantId: merchandise.id,\n    variantTitle: merchandise.title,\n    variantSku: merchandise.sku,\n    price: merchandise.price?.amount,\n    currency: merchandise.price?.currencyCode,\n    quantity,\n  };\n}\n\nfunction parseAnalyticsProduct(value: unknown): AnalyticsProduct | null {\n  const parsed = analyticsProductSchema.safeParse(value);\n  if (!parsed.success) {\n    return null;\n  }\n  return parsed.data.productId ? parsed.data : parseCheckoutLine(value);\n}\n\n/**\n * Brand, category, compare-at price, image, and the originating collection\n * path are not part of Replo's analytics payloads today, so they carry the\n * empty-value fallbacks Elevar's spec prescribes.\n */\nfunction toElevarProduct(\n  product: AnalyticsProduct,\n  options: { list: string; withQuantity: boolean; position?: number },\n): ElevarProduct | null {\n  const productId = product.productId;\n  if (!productId) {\n    return null;\n  }\n  const variantId = product.variantId ?? productId;\n  return {\n    id: product.variantSku ?? legacyResourceId(variantId),\n    name: product.productTitle ?? \"\",\n    brand: \"\",\n    category: \"\",\n    variant: product.variantTitle ?? \"\",\n    price: formatMoney(product.price ?? 0),\n    ...(options.withQuantity\n      ? { quantity: String(product.quantity ?? 1) }\n      : {}),\n    ...(options.position === undefined\n      ? {}\n      : { position: String(options.position) }),\n    list: options.list,\n    product_id: legacyResourceId(productId),\n    variant_id: legacyResourceId(variantId),\n    compare_at_price: \"0.0\",\n    image: \"\",\n  };\n}\n\nfunction toElevarProducts(\n  products: unknown[],\n  options: { list: string; withQuantity: boolean; currency?: string },\n): { products: ElevarProduct[]; currencyCode: string } {\n  const parsedProducts = products\n    .map(parseAnalyticsProduct)\n    .filter((product): product is AnalyticsProduct => product !== null);\n  const currencyCode =\n    options.currency ??\n    parsedProducts.find((product) => product.currency)?.currency ??\n    FALLBACK_CURRENCY_CODE;\n  const elevarProducts = parsedProducts\n    .map((product, index) => {\n      return toElevarProduct(product, { ...options, position: index + 1 });\n    })\n    .filter((product): product is ElevarProduct => product !== null);\n  return { products: elevarProducts, currencyCode };\n}\n\nfunction pushToElevarDataLayer(event: ElevarDataLayerEvent) {\n  if (typeof window === \"undefined\") {\n    return;\n  }\n  window.ElevarDataLayer = window.ElevarDataLayer ?? [];\n  window.ElevarDataLayer.push(event);\n}\n\n// Sinks are rebuilt whenever consent or script registration changes, so the\n// \"already announced this page\" marker lives outside the instance; otherwise\n// every rebuild would push a second `dl_user_data` for the same page.\nlet lastUserDataUrl: string | null = null;\n\nfunction pushUserData() {\n  lastUserDataUrl = window.location.href;\n  // Cart contents live in the cart provider's React state, which the sink\n  // cannot read, so the base event reports an empty cart. Cart totals reach\n  // Elevar on `dl_view_cart` instead.\n  pushToElevarDataLayer({\n    event: \"dl_user_data\",\n    cart_total: formatMoney(0),\n    user_properties: GUEST_USER_PROPERTIES,\n    ecommerce: {\n      currencyCode: FALLBACK_CURRENCY_CODE,\n      cart_contents: { products: [] },\n    },\n  });\n}\n\nfunction ensureUserDataForCurrentPage() {\n  if (\n    typeof window === \"undefined\" ||\n    lastUserDataUrl === window.location.href\n  ) {\n    return;\n  }\n  pushUserData();\n}\n\n/**\n * Pushes Elevar's `dl_*` data layer events for a storefront whose Elevar\n * headless snippet is installed as a `snippet` script entry. The snippet only\n * forwards what the page pushes to `window.ElevarDataLayer`, and a Replo page\n * (unlike a Shopify theme) pushes nothing on its own.\n */\nexport class ElevarSink implements AnalyticsSink {\n  constructor() {\n    // The snippet registers after the initial pageview has already been\n    // broadcast, so the sink announces the page it was created on itself.\n    ensureUserDataForCurrentPage();\n  }\n\n  private pushEcommerceEvent(\n    event: string,\n    ecommerce: Record<string, unknown>,\n    cartTotal?: string,\n  ) {\n    ensureUserDataForCurrentPage();\n    pushToElevarDataLayer({\n      event,\n      user_properties: GUEST_USER_PROPERTIES,\n      ...(cartTotal === undefined ? {} : { cart_total: cartTotal }),\n      ecommerce,\n    });\n  }\n\n  private pushProductEvent(\n    event: string,\n    action: \"detail\" | \"add\" | \"remove\",\n    { data }: DataPayload,\n    options: { withQuantity: boolean; withUrl?: boolean },\n  ) {\n    const product = parseAnalyticsProduct(data);\n    const elevarProduct =\n      product &&\n      toElevarProduct(product, {\n        list: \"\",\n        withQuantity: options.withQuantity,\n      });\n    if (!elevarProduct) {\n      console.warn(`[analytics] skipped Elevar ${event}: no product id`);\n      return;\n    }\n    if (options.withUrl) {\n      // The add-to-cart payload has no product URL; the page the shopper added\n      // from is the closest available stand-in.\n      elevarProduct.url = window.location.href;\n    }\n    this.pushEcommerceEvent(event, {\n      currencyCode: product.currency ?? FALLBACK_CURRENCY_CODE,\n      [action]: {\n        actionField:\n          action === \"detail\"\n            ? { list: window.location.pathname, action }\n            : { list: window.location.pathname },\n        products: [elevarProduct],\n      },\n    });\n  }\n\n  async pageView(metadata?: PageMetadata) {\n    if (typeof window === \"undefined\") {\n      return;\n    }\n    // A repeated pageView for the current URL must not invalidate Elevar's\n    // context and re-announce the page.\n    if (\n      metadata?.navigationType === \"soft\" &&\n      lastUserDataUrl !== window.location.href\n    ) {\n      window.ElevarInvalidateContext?.();\n    }\n    ensureUserDataForCurrentPage();\n  }\n\n  async purchase() {\n    // Orders complete on Shopify-hosted checkout, where the merchant's Elevar\n    // Shopify source reports dl_purchase; a storefront copy would double count.\n  }\n\n  async click() {\n    // Replo's click event carries no product, so there is no dl_select_item to build.\n  }\n\n  async productViewed(payload: DataPayload) {\n    this.pushProductEvent(\"dl_view_item\", \"detail\", payload, {\n      withQuantity: false,\n    });\n  }\n\n  async addToCart(payload: DataPayload) {\n    this.pushProductEvent(\"dl_add_to_cart\", \"add\", payload, {\n      withQuantity: true,\n      withUrl: true,\n    });\n  }\n\n  async removeFromCart(payload: DataPayload) {\n    this.pushProductEvent(\"dl_remove_from_cart\", \"remove\", payload, {\n      withQuantity: true,\n    });\n  }\n\n  async viewCart({ data }: DataPayload) {\n    const cart = cartPayloadSchema.safeParse(data);\n    if (!cart.success) {\n      return;\n    }\n    const { products, currencyCode } = toElevarProducts(\n      cart.data.lineItems ?? [],\n      {\n        list: \"\",\n        withQuantity: true,\n        currency: cart.data.currency ?? cart.data.currencyCode,\n      },\n    );\n    this.pushEcommerceEvent(\n      \"dl_view_cart\",\n      {\n        currencyCode,\n        actionField: { list: \"Shopping Cart\" },\n        impressions: products,\n      },\n      formatMoney(cart.data.subtotal ?? cart.data.totalPrice?.amount ?? 0),\n    );\n  }\n\n  async startCheckout({ data }: DataPayload) {\n    const cart = cartPayloadSchema.safeParse(data);\n    if (!cart.success) {\n      return;\n    }\n    const { products, currencyCode } = toElevarProducts(\n      cart.data.lineItems ?? [],\n      {\n        list: \"\",\n        withQuantity: true,\n        currency: cart.data.currencyCode ?? cart.data.currency,\n      },\n    );\n    this.pushEcommerceEvent(\"dl_begin_checkout\", {\n      currencyCode,\n      checkout: {\n        actionField: { step: \"1\", action: \"checkout\" },\n        products,\n      },\n    });\n  }\n\n  async viewCollection({ data }: DataPayload) {\n    const collection = collectionPayloadSchema.safeParse(data);\n    if (!collection.success) {\n      return;\n    }\n    const { products, currencyCode } = toElevarProducts(\n      collection.data.products ?? [],\n      {\n        list: window.location.pathname,\n        withQuantity: false,\n        currency: collection.data.currency ?? collection.data.currencyCode,\n      },\n    );\n    this.pushEcommerceEvent(\"dl_view_item_list\", {\n      currencyCode,\n      impressions: products,\n    });\n  }\n}\n"],
+  "mappings": "AAGA,SAAS,SAAS;AA2ClB,MAAM,wBAA8C,EAAE,cAAc,QAAQ;AAG5E,MAAM,yBAAyB;AAE/B,MAAM,uBAAuB,EAC1B,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,MAAM,CAAC,CAAC,EAChE,SAAS,EACT,MAAM,MAAS;AAClB,MAAM,qBAAqB,EACxB,MAAM;AAAA,EACL,EAAE,OAAO,EAAE,OAAO;AAAA,EAClB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,UAAU,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;AACrE,CAAC,EACA,SAAS,EACT,MAAM,MAAS;AAGlB,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,WAAW;AAAA,EACX,cAAc;AAAA,EACd,WAAW;AAAA,EACX,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,UAAU;AAAA,EACV,UAAU;AACZ,CAAC;AAGD,MAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,UAAU;AAAA,EACV,aAAa,EACV,OAAO;AAAA,IACN,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,KAAK;AAAA,IACL,OAAO,EACJ,OAAO;AAAA,MACN,QAAQ;AAAA,MACR,cAAc;AAAA,IAChB,CAAC,EACA,SAAS;AAAA,IACZ,SAAS,EACN,OAAO,EAAE,IAAI,sBAAsB,OAAO,qBAAqB,CAAC,EAChE,SAAS;AAAA,EACd,CAAC,EACA,SAAS;AACd,CAAC;AAED,MAAM,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,MAAS;AAEzE,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,UAAU;AAAA,EACV,cAAc;AAAA,EACd,UAAU;AAAA,EACV,YAAY,EAAE,OAAO,EAAE,QAAQ,mBAAmB,CAAC,EAAE,SAAS;AAAA,EAC9D,WAAW;AACb,CAAC;AAED,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,UAAU;AAAA,EACV,cAAc;AAAA,EACd,UAAU;AACZ,CAAC;AAID,SAAS,YAAY,QAAgB;AACnC,SAAO,OAAO,QAAQ,CAAC;AACzB;AAIA,SAAS,iBAAiB,IAAY;AACpC,SAAO,GAAG,QAAQ,2BAA2B,EAAE;AACjD;AAEA,SAAS,kBAAkB,MAAwC;AACjE,QAAM,SAAS,mBAAmB,UAAU,IAAI;AAChD,MAAI,CAAC,OAAO,WAAW,CAAC,OAAO,KAAK,aAAa;AAC/C,WAAO;AAAA,EACT;AACA,QAAM,EAAE,aAAa,SAAS,IAAI,OAAO;AACzC,SAAO;AAAA,IACL,WAAW,YAAY,SAAS;AAAA,IAChC,cAAc,YAAY,SAAS;AAAA,IACnC,WAAW,YAAY;AAAA,IACvB,cAAc,YAAY;AAAA,IAC1B,YAAY,YAAY;AAAA,IACxB,OAAO,YAAY,OAAO;AAAA,IAC1B,UAAU,YAAY,OAAO;AAAA,IAC7B;AAAA,EACF;AACF;AAEA,SAAS,sBAAsB,OAAyC;AACtE,QAAM,SAAS,uBAAuB,UAAU,KAAK;AACrD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO;AAAA,EACT;AACA,SAAO,OAAO,KAAK,YAAY,OAAO,OAAO,kBAAkB,KAAK;AACtE;AAOA,SAAS,gBACP,SACA,SACsB;AACtB,QAAM,YAAY,QAAQ;AAC1B,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AACA,QAAM,YAAY,QAAQ,aAAa;AACvC,SAAO;AAAA,IACL,IAAI,QAAQ,cAAc,iBAAiB,SAAS;AAAA,IACpD,MAAM,QAAQ,gBAAgB;AAAA,IAC9B,OAAO;AAAA,IACP,UAAU;AAAA,IACV,SAAS,QAAQ,gBAAgB;AAAA,IACjC,OAAO,YAAY,QAAQ,SAAS,CAAC;AAAA,IACrC,GAAI,QAAQ,eACR,EAAE,UAAU,OAAO,QAAQ,YAAY,CAAC,EAAE,IAC1C,CAAC;AAAA,IACL,GAAI,QAAQ,aAAa,SACrB,CAAC,IACD,EAAE,UAAU,OAAO,QAAQ,QAAQ,EAAE;AAAA,IACzC,MAAM,QAAQ;AAAA,IACd,YAAY,iBAAiB,SAAS;AAAA,IACtC,YAAY,iBAAiB,SAAS;AAAA,IACtC,kBAAkB;AAAA,IAClB,OAAO;AAAA,EACT;AACF;AAEA,SAAS,iBACP,UACA,SACqD;AACrD,QAAM,iBAAiB,SACpB,IAAI,qBAAqB,EACzB,OAAO,CAAC,YAAyC,YAAY,IAAI;AACpE,QAAM,eACJ,QAAQ,YACR,eAAe,KAAK,CAAC,YAAY,QAAQ,QAAQ,GAAG,YACpD;AACF,QAAM,iBAAiB,eACpB,IAAI,CAAC,SAAS,UAAU;AACvB,WAAO,gBAAgB,SAAS,EAAE,GAAG,SAAS,UAAU,QAAQ,EAAE,CAAC;AAAA,EACrE,CAAC,EACA,OAAO,CAAC,YAAsC,YAAY,IAAI;AACjE,SAAO,EAAE,UAAU,gBAAgB,aAAa;AAClD;AAEA,SAAS,sBAAsB,OAA6B;AAC1D,MAAI,OAAO,WAAW,aAAa;AACjC;AAAA,EACF;AACA,SAAO,kBAAkB,OAAO,mBAAmB,CAAC;AACpD,SAAO,gBAAgB,KAAK,KAAK;AACnC;AAKA,IAAI,kBAAiC;AAErC,SAAS,eAAe;AACtB,oBAAkB,OAAO,SAAS;AAIlC,wBAAsB;AAAA,IACpB,OAAO;AAAA,IACP,YAAY,YAAY,CAAC;AAAA,IACzB,iBAAiB;AAAA,IACjB,WAAW;AAAA,MACT,cAAc;AAAA,MACd,eAAe,EAAE,UAAU,CAAC,EAAE;AAAA,IAChC;AAAA,EACF,CAAC;AACH;AAEA,SAAS,+BAA+B;AACtC,MACE,OAAO,WAAW,eAClB,oBAAoB,OAAO,SAAS,MACpC;AACA;AAAA,EACF;AACA,eAAa;AACf;AAQO,MAAM,WAAoC;AAAA,EAC/C,cAAc;AAGZ,iCAA6B;AAAA,EAC/B;AAAA,EAEQ,mBACN,OACA,WACA,WACA;AACA,iCAA6B;AAC7B,0BAAsB;AAAA,MACpB;AAAA,MACA,iBAAiB;AAAA,MACjB,GAAI,cAAc,SAAY,CAAC,IAAI,EAAE,YAAY,UAAU;AAAA,MAC3D;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,iBACN,OACA,QACA,EAAE,KAAK,GACP,SACA;AACA,UAAM,UAAU,sBAAsB,IAAI;AAC1C,UAAM,gBACJ,WACA,gBAAgB,SAAS;AAAA,MACvB,MAAM;AAAA,MACN,cAAc,QAAQ;AAAA,IACxB,CAAC;AACH,QAAI,CAAC,eAAe;AAClB,cAAQ,KAAK,8BAA8B,KAAK,iBAAiB;AACjE;AAAA,IACF;AACA,QAAI,QAAQ,SAAS;AAGnB,oBAAc,MAAM,OAAO,SAAS;AAAA,IACtC;AACA,SAAK,mBAAmB,OAAO;AAAA,MAC7B,cAAc,QAAQ,YAAY;AAAA,MAClC,CAAC,MAAM,GAAG;AAAA,QACR,aACE,WAAW,WACP,EAAE,MAAM,OAAO,SAAS,UAAU,OAAO,IACzC,EAAE,MAAM,OAAO,SAAS,SAAS;AAAA,QACvC,UAAU,CAAC,aAAa;AAAA,MAC1B;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,SAAS,UAAyB;AACtC,QAAI,OAAO,WAAW,aAAa;AACjC;AAAA,IACF;AAGA,QACE,UAAU,mBAAmB,UAC7B,oBAAoB,OAAO,SAAS,MACpC;AACA,aAAO,0BAA0B;AAAA,IACnC;AACA,iCAA6B;AAAA,EAC/B;AAAA,EAEA,MAAM,WAAW;AAAA,EAGjB;AAAA,EAEA,MAAM,QAAQ;AAAA,EAEd;AAAA,EAEA,MAAM,cAAc,SAAsB;AACxC,SAAK,iBAAiB,gBAAgB,UAAU,SAAS;AAAA,MACvD,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAAU,SAAsB;AACpC,SAAK,iBAAiB,kBAAkB,OAAO,SAAS;AAAA,MACtD,cAAc;AAAA,MACd,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,eAAe,SAAsB;AACzC,SAAK,iBAAiB,uBAAuB,UAAU,SAAS;AAAA,MAC9D,cAAc;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,SAAS,EAAE,KAAK,GAAgB;AACpC,UAAM,OAAO,kBAAkB,UAAU,IAAI;AAC7C,QAAI,CAAC,KAAK,SAAS;AACjB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,aAAa,IAAI;AAAA,MACjC,KAAK,KAAK,aAAa,CAAC;AAAA,MACxB;AAAA,QACE,MAAM;AAAA,QACN,cAAc;AAAA,QACd,UAAU,KAAK,KAAK,YAAY,KAAK,KAAK;AAAA,MAC5C;AAAA,IACF;AACA,SAAK;AAAA,MACH;AAAA,MACA;AAAA,QACE;AAAA,QACA,aAAa,EAAE,MAAM,gBAAgB;AAAA,QACrC,aAAa;AAAA,MACf;AAAA,MACA,YAAY,KAAK,KAAK,YAAY,KAAK,KAAK,YAAY,UAAU,CAAC;AAAA,IACrE;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,EAAE,KAAK,GAAgB;AACzC,UAAM,OAAO,kBAAkB,UAAU,IAAI;AAC7C,QAAI,CAAC,KAAK,SAAS;AACjB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,aAAa,IAAI;AAAA,MACjC,KAAK,KAAK,aAAa,CAAC;AAAA,MACxB;AAAA,QACE,MAAM;AAAA,QACN,cAAc;AAAA,QACd,UAAU,KAAK,KAAK,gBAAgB,KAAK,KAAK;AAAA,MAChD;AAAA,IACF;AACA,SAAK,mBAAmB,qBAAqB;AAAA,MAC3C;AAAA,MACA,UAAU;AAAA,QACR,aAAa,EAAE,MAAM,KAAK,QAAQ,WAAW;AAAA,QAC7C;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,eAAe,EAAE,KAAK,GAAgB;AAC1C,UAAM,aAAa,wBAAwB,UAAU,IAAI;AACzD,QAAI,CAAC,WAAW,SAAS;AACvB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,aAAa,IAAI;AAAA,MACjC,WAAW,KAAK,YAAY,CAAC;AAAA,MAC7B;AAAA,QACE,MAAM,OAAO,SAAS;AAAA,QACtB,cAAc;AAAA,QACd,UAAU,WAAW,KAAK,YAAY,WAAW,KAAK;AAAA,MACxD;AAAA,IACF;AACA,SAAK,mBAAmB,qBAAqB;AAAA,MAC3C;AAAA,MACA,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/consent/replo-scripts.js

@@ -13,7 +13,11 @@ import {
 } from "./consent-platform";
 import { isConsentAllowed, useConsent } from "./consent-store";
 import { injectScriptDescriptors } from "./inject-script-descriptors";
-import { registerScript, unregisterScript } from "./script-registration-store";
+import {
+  registerScript,
+  snippetScriptId,
+  unregisterScript
+} from "./script-registration-store";
 import { buildScriptTags, defaultConsentFor } from "./script-snippets";
 import { installConsentWindowApi } from "./window-api";
 function scriptId(entry) {
@@ -21,7 +25,7 @@ function scriptId(entry) {
     return `custom:${entry.id}`;
   }
   if (entry.type === "snippet") {
-    return `snippet:${entry.id}`;
+    return snippetScriptId(entry.id);
   }
   if (entry.type === "consentPlatform") {
     return `consent-platform:${entry.id}`;

package/consent/replo-scripts.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../consent/replo-scripts.tsx"],
-  "sourcesContent": ["\"use client\";\n\nimport type {\n  ConsentCategory,\n  ReploScriptEntry,\n  ScriptTagDescriptor,\n} from \"schemas/generated/consent\";\nimport type { RegisteredScript } from \"./script-registration-store\";\n\nimport { Component } from \"react\";\n\nimport {\n  activateBlockedScripts,\n  buildGrantMarker,\n  enableConsentDelegation,\n  findConsentPlatform,\n  findDelegatedPlatform,\n  getBlockingAttributes,\n  isConsentPlatformEntry,\n  OPTIONAL_CONSENT_CATEGORIES,\n} from \"./consent-platform\";\nimport { isConsentAllowed, useConsent } from \"./consent-store\";\nimport { injectScriptDescriptors } from \"./inject-script-descriptors\";\nimport { registerScript, unregisterScript } from \"./script-registration-store\";\nimport { buildScriptTags, defaultConsentFor } from \"./script-snippets\";\nimport { installConsentWindowApi } from \"./window-api\";\n\n/**\n * Stable identity for an entry, used as React key and DOM dedupe key. `snippet`\n * and `custom` entries key on their `id`; identifier providers on type+id.\n */\nfunction scriptId(entry: ReploScriptEntry): string {\n  if (entry.type === \"custom\") {\n    return `custom:${entry.id}`;\n  }\n  if (entry.type === \"snippet\") {\n    return `snippet:${entry.id}`;\n  }\n  if (entry.type === \"consentPlatform\") {\n    return `consent-platform:${entry.id}`;\n  }\n  return `${entry.type}:${entry.identifier}`;\n}\n\nfunction requiredConsentFor(entry: ReploScriptEntry): ConsentCategory[] {\n  if (entry.type === \"custom\" || entry.type === \"snippet\") {\n    return entry.requiredConsent;\n  }\n  // Platform entries are filtered out before render; arms exist for the types.\n  if (entry.type === \"consentPlatform\" || entry.type === \"Cookiebot\") {\n    return [];\n  }\n  return entry.requiredConsent ?? defaultConsentFor(entry.type);\n}\n\n/**\n * Resolves an entry to the concrete tags to inject. An identifier provider may\n * resolve to multiple tags (GA4 = external loader + inline config); a `snippet`\n * entry injects its pasted body inline; a `custom` entry is a single external\n * `src` or inline `body`.\n */\nfunction descriptorsFor(entry: ReploScriptEntry): ScriptTagDescriptor[] {\n  if (entry.type === \"custom\") {\n    if (entry.src) {\n      return [{ kind: \"external\", src: entry.src }];\n    }\n    if (entry.body) {\n      return [{ kind: \"inline\", body: entry.body }];\n    }\n    return [];\n  }\n  if (entry.type === \"snippet\") {\n    return [{ kind: \"inline\", body: entry.body, module: entry.module }];\n  }\n  // Platform entries load from their platform config rather than per-entry.\n  if (entry.type === \"consentPlatform\" || entry.type === \"Cookiebot\") {\n    return [];\n  }\n  return buildScriptTags({ type: entry.type, identifier: entry.identifier });\n}\n\n/**\n * Injects the resolved tags into `document.head` once a caller has decided\n * consent allows it. Reused both for author-managed `ReploScripts` entries and\n * for the implicit Replo first-party pixel.\n *\n * DOM insertion (not JSX) is required because inline `<script>` bodies set via\n * React's `dangerouslySetInnerHTML` never execute. Each node is tagged with\n * `data-replo-script-id` (plus a per-tag index) so re-renders and React Strict\n * Mode double-invokes do not double-inject.\n */\ntype InjectedScriptProps = {\n  baseId: string;\n  descriptors: ScriptTagDescriptor[];\n  /** Used under a delegated platform to derive the attributes that gate the tag. */\n  requiredConsent?: ConsentCategory[];\n};\n\nexport class InjectedScript extends Component<InjectedScriptProps> {\n  componentDidMount() {\n    const { baseId, descriptors, requiredConsent = [] } = this.props;\n    const platform = findDelegatedPlatform();\n    const blockingAttributes = platform\n      ? getBlockingAttributes(platform, requiredConsent)\n      : {};\n    const blockedByPlatform = \"type\" in blockingAttributes;\n    const createdNodes = injectScriptDescriptors({\n      baseId,\n      descriptors,\n      extraAttributes: blockingAttributes,\n    });\n\n    // Cookiebot may finish its startup scan before late consent-gated tags mount.\n    if (blockedByPlatform && createdNodes.length > 0) {\n      activateBlockedScripts();\n    }\n    // NOTE (Ryan, 2026-09-02): Executed scripts stay mounted because removing their nodes cannot unload the vendor.\n  }\n\n  render() {\n    return null;\n  }\n}\n\nclass ScriptRegistration extends Component<{ script: RegisteredScript }> {\n  componentDidMount() {\n    registerScript(this.props.script);\n  }\n\n  componentWillUnmount() {\n    unregisterScript(this.props.script.id);\n  }\n\n  render() {\n    return null;\n  }\n}\n\nfunction ManagedScript({ entry }: { entry: ReploScriptEntry }) {\n  const consent = useConsent();\n  const requiredConsent = requiredConsentFor(entry);\n  const id = scriptId(entry);\n  const isBlockedByNativeConsent =\n    !findDelegatedPlatform() &&\n    !isConsentAllowed({ state: consent, requiredConsent });\n\n  return (\n    <>\n      <ScriptRegistration\n        key={`${id}:${requiredConsent.join(\",\")}`}\n        script={{ id, type: entry.type, requiredConsent }}\n      />\n      {!isBlockedByNativeConsent && (\n        <InjectedScript\n          baseId={id}\n          descriptors={descriptorsFor(entry)}\n          requiredConsent={requiredConsent}\n        />\n      )}\n    </>\n  );\n}\n\nclass ConsentWindowApi extends Component {\n  private uninstall = () => {};\n\n  componentDidMount() {\n    this.uninstall = installConsentWindowApi();\n  }\n\n  componentWillUnmount() {\n    this.uninstall();\n  }\n\n  render() {\n    return null;\n  }\n}\n\n/**\n * The single registry component for all managed tracking scripts on the site.\n * Authored once in `app/layout.tsx`; the agent/miniapp only edit the `scripts`\n * array. Each entry registers itself and is gated + injected per consent.\n *\n * A consent-platform entry (`Cookiebot`, or a generic `consentPlatform`) takes\n * over consent site-wide: scripts carry the platform's blocking attributes, its\n * loader injects after them so its startup scan sees the full set, and Replo's\n * own gates follow the platform instead of the native banner.\n */\nexport function ReploScripts({ scripts }: { scripts: ReploScriptEntry[] }) {\n  // The earlier-mounted first-party pixel needs delegation before mount lifecycles run.\n  const platform = findConsentPlatform(scripts);\n  if (platform) {\n    enableConsentDelegation(platform);\n  }\n\n  // The loader renders last so every blocked tag mounts before its startup scan.\n  return (\n    <>\n      <ConsentWindowApi />\n      {scripts\n        .filter((entry) => !isConsentPlatformEntry(entry))\n        .map((entry) => (\n          <ManagedScript key={scriptId(entry)} entry={entry} />\n        ))}\n      {platform &&\n        !platform.isCookiebot &&\n        OPTIONAL_CONSENT_CATEGORIES.map((category) => (\n          <InjectedScript\n            key={category}\n            baseId={`consent-platform:${platform.id}:grant:${category}`}\n            descriptors={[buildGrantMarker(category)]}\n            requiredConsent={[category]}\n          />\n        ))}\n      {platform && (\n        <InjectedScript\n          baseId={`consent-platform:${platform.id}`}\n          descriptors={platform.loader}\n        />\n      )}\n    </>\n  );\n}\n"],
-  "mappings": ";AAmJI,mBACE,KADF;AA1IJ,SAAS,iBAAiB;AAE1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,kBAAkB;AAC7C,SAAS,+BAA+B;AACxC,SAAS,gBAAgB,wBAAwB;AACjD,SAAS,iBAAiB,yBAAyB;AACnD,SAAS,+BAA+B;AAMxC,SAAS,SAAS,OAAiC;AACjD,MAAI,MAAM,SAAS,UAAU;AAC3B,WAAO,UAAU,MAAM,EAAE;AAAA,EAC3B;AACA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,WAAW,MAAM,EAAE;AAAA,EAC5B;AACA,MAAI,MAAM,SAAS,mBAAmB;AACpC,WAAO,oBAAoB,MAAM,EAAE;AAAA,EACrC;AACA,SAAO,GAAG,MAAM,IAAI,IAAI,MAAM,UAAU;AAC1C;AAEA,SAAS,mBAAmB,OAA4C;AACtE,MAAI,MAAM,SAAS,YAAY,MAAM,SAAS,WAAW;AACvD,WAAO,MAAM;AAAA,EACf;AAEA,MAAI,MAAM,SAAS,qBAAqB,MAAM,SAAS,aAAa;AAClE,WAAO,CAAC;AAAA,EACV;AACA,SAAO,MAAM,mBAAmB,kBAAkB,MAAM,IAAI;AAC9D;AAQA,SAAS,eAAe,OAAgD;AACtE,MAAI,MAAM,SAAS,UAAU;AAC3B,QAAI,MAAM,KAAK;AACb,aAAO,CAAC,EAAE,MAAM,YAAY,KAAK,MAAM,IAAI,CAAC;AAAA,IAC9C;AACA,QAAI,MAAM,MAAM;AACd,aAAO,CAAC,EAAE,MAAM,UAAU,MAAM,MAAM,KAAK,CAAC;AAAA,IAC9C;AACA,WAAO,CAAC;AAAA,EACV;AACA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,CAAC,EAAE,MAAM,UAAU,MAAM,MAAM,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,EACpE;AAEA,MAAI,MAAM,SAAS,qBAAqB,MAAM,SAAS,aAAa;AAClE,WAAO,CAAC;AAAA,EACV;AACA,SAAO,gBAAgB,EAAE,MAAM,MAAM,MAAM,YAAY,MAAM,WAAW,CAAC;AAC3E;AAmBO,MAAM,uBAAuB,UAA+B;AAAA,EACjE,oBAAoB;AAClB,UAAM,EAAE,QAAQ,aAAa,kBAAkB,CAAC,EAAE,IAAI,KAAK;AAC3D,UAAM,WAAW,sBAAsB;AACvC,UAAM,qBAAqB,WACvB,sBAAsB,UAAU,eAAe,IAC/C,CAAC;AACL,UAAM,oBAAoB,UAAU;AACpC,UAAM,eAAe,wBAAwB;AAAA,MAC3C;AAAA,MACA;AAAA,MACA,iBAAiB;AAAA,IACnB,CAAC;AAGD,QAAI,qBAAqB,aAAa,SAAS,GAAG;AAChD,6BAAuB;AAAA,IACzB;AAAA,EAEF;AAAA,EAEA,SAAS;AACP,WAAO;AAAA,EACT;AACF;AAEA,MAAM,2BAA2B,UAAwC;AAAA,EACvE,oBAAoB;AAClB,mBAAe,KAAK,MAAM,MAAM;AAAA,EAClC;AAAA,EAEA,uBAAuB;AACrB,qBAAiB,KAAK,MAAM,OAAO,EAAE;AAAA,EACvC;AAAA,EAEA,SAAS;AACP,WAAO;AAAA,EACT;AACF;AAEA,SAAS,cAAc,EAAE,MAAM,GAAgC;AAC7D,QAAM,UAAU,WAAW;AAC3B,QAAM,kBAAkB,mBAAmB,KAAK;AAChD,QAAM,KAAK,SAAS,KAAK;AACzB,QAAM,2BACJ,CAAC,sBAAsB,KACvB,CAAC,iBAAiB,EAAE,OAAO,SAAS,gBAAgB,CAAC;AAEvD,SACE,iCACE;AAAA;AAAA,MAAC;AAAA;AAAA,QAEC,QAAQ,EAAE,IAAI,MAAM,MAAM,MAAM,gBAAgB;AAAA;AAAA,MAD3C,GAAG,EAAE,IAAI,gBAAgB,KAAK,GAAG,CAAC;AAAA,IAEzC;AAAA,IACC,CAAC,4BACA;AAAA,MAAC;AAAA;AAAA,QACC,QAAQ;AAAA,QACR,aAAa,eAAe,KAAK;AAAA,QACjC;AAAA;AAAA,IACF;AAAA,KAEJ;AAEJ;AAEA,MAAM,yBAAyB,UAAU;AAAA,EAC/B,YAAY,MAAM;AAAA,EAAC;AAAA,EAE3B,oBAAoB;AAClB,SAAK,YAAY,wBAAwB;AAAA,EAC3C;AAAA,EAEA,uBAAuB;AACrB,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,SAAS;AACP,WAAO;AAAA,EACT;AACF;AAYO,SAAS,aAAa,EAAE,QAAQ,GAAoC;AAEzE,QAAM,WAAW,oBAAoB,OAAO;AAC5C,MAAI,UAAU;AACZ,4BAAwB,QAAQ;AAAA,EAClC;AAGA,SACE,iCACE;AAAA,wBAAC,oBAAiB;AAAA,IACjB,QACE,OAAO,CAAC,UAAU,CAAC,uBAAuB,KAAK,CAAC,EAChD,IAAI,CAAC,UACJ,oBAAC,iBAAoC,SAAjB,SAAS,KAAK,CAAiB,CACpD;AAAA,IACF,YACC,CAAC,SAAS,eACV,4BAA4B,IAAI,CAAC,aAC/B;AAAA,MAAC;AAAA;AAAA,QAEC,QAAQ,oBAAoB,SAAS,EAAE,UAAU,QAAQ;AAAA,QACzD,aAAa,CAAC,iBAAiB,QAAQ,CAAC;AAAA,QACxC,iBAAiB,CAAC,QAAQ;AAAA;AAAA,MAHrB;AAAA,IAIP,CACD;AAAA,IACF,YACC;AAAA,MAAC;AAAA;AAAA,QACC,QAAQ,oBAAoB,SAAS,EAAE;AAAA,QACvC,aAAa,SAAS;AAAA;AAAA,IACxB;AAAA,KAEJ;AAEJ;",
+  "sourcesContent": ["\"use client\";\n\nimport type {\n  ConsentCategory,\n  ReploScriptEntry,\n  ScriptTagDescriptor,\n} from \"schemas/generated/consent\";\nimport type { RegisteredScript } from \"./script-registration-store\";\n\nimport { Component } from \"react\";\n\nimport {\n  activateBlockedScripts,\n  buildGrantMarker,\n  enableConsentDelegation,\n  findConsentPlatform,\n  findDelegatedPlatform,\n  getBlockingAttributes,\n  isConsentPlatformEntry,\n  OPTIONAL_CONSENT_CATEGORIES,\n} from \"./consent-platform\";\nimport { isConsentAllowed, useConsent } from \"./consent-store\";\nimport { injectScriptDescriptors } from \"./inject-script-descriptors\";\nimport {\n  registerScript,\n  snippetScriptId,\n  unregisterScript,\n} from \"./script-registration-store\";\nimport { buildScriptTags, defaultConsentFor } from \"./script-snippets\";\nimport { installConsentWindowApi } from \"./window-api\";\n\n/**\n * Stable identity for an entry, used as React key and DOM dedupe key. `snippet`\n * and `custom` entries key on their `id`; identifier providers on type+id.\n */\nfunction scriptId(entry: ReploScriptEntry): string {\n  if (entry.type === \"custom\") {\n    return `custom:${entry.id}`;\n  }\n  if (entry.type === \"snippet\") {\n    return snippetScriptId(entry.id);\n  }\n  if (entry.type === \"consentPlatform\") {\n    return `consent-platform:${entry.id}`;\n  }\n  return `${entry.type}:${entry.identifier}`;\n}\n\nfunction requiredConsentFor(entry: ReploScriptEntry): ConsentCategory[] {\n  if (entry.type === \"custom\" || entry.type === \"snippet\") {\n    return entry.requiredConsent;\n  }\n  // Platform entries are filtered out before render; arms exist for the types.\n  if (entry.type === \"consentPlatform\" || entry.type === \"Cookiebot\") {\n    return [];\n  }\n  return entry.requiredConsent ?? defaultConsentFor(entry.type);\n}\n\n/**\n * Resolves an entry to the concrete tags to inject. An identifier provider may\n * resolve to multiple tags (GA4 = external loader + inline config); a `snippet`\n * entry injects its pasted body inline; a `custom` entry is a single external\n * `src` or inline `body`.\n */\nfunction descriptorsFor(entry: ReploScriptEntry): ScriptTagDescriptor[] {\n  if (entry.type === \"custom\") {\n    if (entry.src) {\n      return [{ kind: \"external\", src: entry.src }];\n    }\n    if (entry.body) {\n      return [{ kind: \"inline\", body: entry.body }];\n    }\n    return [];\n  }\n  if (entry.type === \"snippet\") {\n    return [{ kind: \"inline\", body: entry.body, module: entry.module }];\n  }\n  // Platform entries load from their platform config rather than per-entry.\n  if (entry.type === \"consentPlatform\" || entry.type === \"Cookiebot\") {\n    return [];\n  }\n  return buildScriptTags({ type: entry.type, identifier: entry.identifier });\n}\n\n/**\n * Injects the resolved tags into `document.head` once a caller has decided\n * consent allows it. Reused both for author-managed `ReploScripts` entries and\n * for the implicit Replo first-party pixel.\n *\n * DOM insertion (not JSX) is required because inline `<script>` bodies set via\n * React's `dangerouslySetInnerHTML` never execute. Each node is tagged with\n * `data-replo-script-id` (plus a per-tag index) so re-renders and React Strict\n * Mode double-invokes do not double-inject.\n */\ntype InjectedScriptProps = {\n  baseId: string;\n  descriptors: ScriptTagDescriptor[];\n  /** Used under a delegated platform to derive the attributes that gate the tag. */\n  requiredConsent?: ConsentCategory[];\n};\n\nexport class InjectedScript extends Component<InjectedScriptProps> {\n  componentDidMount() {\n    const { baseId, descriptors, requiredConsent = [] } = this.props;\n    const platform = findDelegatedPlatform();\n    const blockingAttributes = platform\n      ? getBlockingAttributes(platform, requiredConsent)\n      : {};\n    const blockedByPlatform = \"type\" in blockingAttributes;\n    const createdNodes = injectScriptDescriptors({\n      baseId,\n      descriptors,\n      extraAttributes: blockingAttributes,\n    });\n\n    // Cookiebot may finish its startup scan before late consent-gated tags mount.\n    if (blockedByPlatform && createdNodes.length > 0) {\n      activateBlockedScripts();\n    }\n    // NOTE (Ryan, 2026-09-02): Executed scripts stay mounted because removing their nodes cannot unload the vendor.\n  }\n\n  render() {\n    return null;\n  }\n}\n\nclass ScriptRegistration extends Component<{ script: RegisteredScript }> {\n  componentDidMount() {\n    registerScript(this.props.script);\n  }\n\n  componentWillUnmount() {\n    unregisterScript(this.props.script.id);\n  }\n\n  render() {\n    return null;\n  }\n}\n\nfunction ManagedScript({ entry }: { entry: ReploScriptEntry }) {\n  const consent = useConsent();\n  const requiredConsent = requiredConsentFor(entry);\n  const id = scriptId(entry);\n  const isBlockedByNativeConsent =\n    !findDelegatedPlatform() &&\n    !isConsentAllowed({ state: consent, requiredConsent });\n\n  return (\n    <>\n      <ScriptRegistration\n        key={`${id}:${requiredConsent.join(\",\")}`}\n        script={{ id, type: entry.type, requiredConsent }}\n      />\n      {!isBlockedByNativeConsent && (\n        <InjectedScript\n          baseId={id}\n          descriptors={descriptorsFor(entry)}\n          requiredConsent={requiredConsent}\n        />\n      )}\n    </>\n  );\n}\n\nclass ConsentWindowApi extends Component {\n  private uninstall = () => {};\n\n  componentDidMount() {\n    this.uninstall = installConsentWindowApi();\n  }\n\n  componentWillUnmount() {\n    this.uninstall();\n  }\n\n  render() {\n    return null;\n  }\n}\n\n/**\n * The single registry component for all managed tracking scripts on the site.\n * Authored once in `app/layout.tsx`; the agent/miniapp only edit the `scripts`\n * array. Each entry registers itself and is gated + injected per consent.\n *\n * A consent-platform entry (`Cookiebot`, or a generic `consentPlatform`) takes\n * over consent site-wide: scripts carry the platform's blocking attributes, its\n * loader injects after them so its startup scan sees the full set, and Replo's\n * own gates follow the platform instead of the native banner.\n */\nexport function ReploScripts({ scripts }: { scripts: ReploScriptEntry[] }) {\n  // The earlier-mounted first-party pixel needs delegation before mount lifecycles run.\n  const platform = findConsentPlatform(scripts);\n  if (platform) {\n    enableConsentDelegation(platform);\n  }\n\n  // The loader renders last so every blocked tag mounts before its startup scan.\n  return (\n    <>\n      <ConsentWindowApi />\n      {scripts\n        .filter((entry) => !isConsentPlatformEntry(entry))\n        .map((entry) => (\n          <ManagedScript key={scriptId(entry)} entry={entry} />\n        ))}\n      {platform &&\n        !platform.isCookiebot &&\n        OPTIONAL_CONSENT_CATEGORIES.map((category) => (\n          <InjectedScript\n            key={category}\n            baseId={`consent-platform:${platform.id}:grant:${category}`}\n            descriptors={[buildGrantMarker(category)]}\n            requiredConsent={[category]}\n          />\n        ))}\n      {platform && (\n        <InjectedScript\n          baseId={`consent-platform:${platform.id}`}\n          descriptors={platform.loader}\n        />\n      )}\n    </>\n  );\n}\n"],
+  "mappings": ";AAuJI,mBACE,KADF;AA9IJ,SAAS,iBAAiB;AAE1B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,kBAAkB;AAC7C,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAiB,yBAAyB;AACnD,SAAS,+BAA+B;AAMxC,SAAS,SAAS,OAAiC;AACjD,MAAI,MAAM,SAAS,UAAU;AAC3B,WAAO,UAAU,MAAM,EAAE;AAAA,EAC3B;AACA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,gBAAgB,MAAM,EAAE;AAAA,EACjC;AACA,MAAI,MAAM,SAAS,mBAAmB;AACpC,WAAO,oBAAoB,MAAM,EAAE;AAAA,EACrC;AACA,SAAO,GAAG,MAAM,IAAI,IAAI,MAAM,UAAU;AAC1C;AAEA,SAAS,mBAAmB,OAA4C;AACtE,MAAI,MAAM,SAAS,YAAY,MAAM,SAAS,WAAW;AACvD,WAAO,MAAM;AAAA,EACf;AAEA,MAAI,MAAM,SAAS,qBAAqB,MAAM,SAAS,aAAa;AAClE,WAAO,CAAC;AAAA,EACV;AACA,SAAO,MAAM,mBAAmB,kBAAkB,MAAM,IAAI;AAC9D;AAQA,SAAS,eAAe,OAAgD;AACtE,MAAI,MAAM,SAAS,UAAU;AAC3B,QAAI,MAAM,KAAK;AACb,aAAO,CAAC,EAAE,MAAM,YAAY,KAAK,MAAM,IAAI,CAAC;AAAA,IAC9C;AACA,QAAI,MAAM,MAAM;AACd,aAAO,CAAC,EAAE,MAAM,UAAU,MAAM,MAAM,KAAK,CAAC;AAAA,IAC9C;AACA,WAAO,CAAC;AAAA,EACV;AACA,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO,CAAC,EAAE,MAAM,UAAU,MAAM,MAAM,MAAM,QAAQ,MAAM,OAAO,CAAC;AAAA,EACpE;AAEA,MAAI,MAAM,SAAS,qBAAqB,MAAM,SAAS,aAAa;AAClE,WAAO,CAAC;AAAA,EACV;AACA,SAAO,gBAAgB,EAAE,MAAM,MAAM,MAAM,YAAY,MAAM,WAAW,CAAC;AAC3E;AAmBO,MAAM,uBAAuB,UAA+B;AAAA,EACjE,oBAAoB;AAClB,UAAM,EAAE,QAAQ,aAAa,kBAAkB,CAAC,EAAE,IAAI,KAAK;AAC3D,UAAM,WAAW,sBAAsB;AACvC,UAAM,qBAAqB,WACvB,sBAAsB,UAAU,eAAe,IAC/C,CAAC;AACL,UAAM,oBAAoB,UAAU;AACpC,UAAM,eAAe,wBAAwB;AAAA,MAC3C;AAAA,MACA;AAAA,MACA,iBAAiB;AAAA,IACnB,CAAC;AAGD,QAAI,qBAAqB,aAAa,SAAS,GAAG;AAChD,6BAAuB;AAAA,IACzB;AAAA,EAEF;AAAA,EAEA,SAAS;AACP,WAAO;AAAA,EACT;AACF;AAEA,MAAM,2BAA2B,UAAwC;AAAA,EACvE,oBAAoB;AAClB,mBAAe,KAAK,MAAM,MAAM;AAAA,EAClC;AAAA,EAEA,uBAAuB;AACrB,qBAAiB,KAAK,MAAM,OAAO,EAAE;AAAA,EACvC;AAAA,EAEA,SAAS;AACP,WAAO;AAAA,EACT;AACF;AAEA,SAAS,cAAc,EAAE,MAAM,GAAgC;AAC7D,QAAM,UAAU,WAAW;AAC3B,QAAM,kBAAkB,mBAAmB,KAAK;AAChD,QAAM,KAAK,SAAS,KAAK;AACzB,QAAM,2BACJ,CAAC,sBAAsB,KACvB,CAAC,iBAAiB,EAAE,OAAO,SAAS,gBAAgB,CAAC;AAEvD,SACE,iCACE;AAAA;AAAA,MAAC;AAAA;AAAA,QAEC,QAAQ,EAAE,IAAI,MAAM,MAAM,MAAM,gBAAgB;AAAA;AAAA,MAD3C,GAAG,EAAE,IAAI,gBAAgB,KAAK,GAAG,CAAC;AAAA,IAEzC;AAAA,IACC,CAAC,4BACA;AAAA,MAAC;AAAA;AAAA,QACC,QAAQ;AAAA,QACR,aAAa,eAAe,KAAK;AAAA,QACjC;AAAA;AAAA,IACF;AAAA,KAEJ;AAEJ;AAEA,MAAM,yBAAyB,UAAU;AAAA,EAC/B,YAAY,MAAM;AAAA,EAAC;AAAA,EAE3B,oBAAoB;AAClB,SAAK,YAAY,wBAAwB;AAAA,EAC3C;AAAA,EAEA,uBAAuB;AACrB,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,SAAS;AACP,WAAO;AAAA,EACT;AACF;AAYO,SAAS,aAAa,EAAE,QAAQ,GAAoC;AAEzE,QAAM,WAAW,oBAAoB,OAAO;AAC5C,MAAI,UAAU;AACZ,4BAAwB,QAAQ;AAAA,EAClC;AAGA,SACE,iCACE;AAAA,wBAAC,oBAAiB;AAAA,IACjB,QACE,OAAO,CAAC,UAAU,CAAC,uBAAuB,KAAK,CAAC,EAChD,IAAI,CAAC,UACJ,oBAAC,iBAAoC,SAAjB,SAAS,KAAK,CAAiB,CACpD;AAAA,IACF,YACC,CAAC,SAAS,eACV,4BAA4B,IAAI,CAAC,aAC/B;AAAA,MAAC;AAAA;AAAA,QAEC,QAAQ,oBAAoB,SAAS,EAAE,UAAU,QAAQ;AAAA,QACzD,aAAa,CAAC,iBAAiB,QAAQ,CAAC;AAAA,QACxC,iBAAiB,CAAC,QAAQ;AAAA;AAAA,MAHrB;AAAA,IAIP,CACD;AAAA,IACF,YACC;AAAA,MAAC;AAAA;AAAA,QACC,QAAQ,oBAAoB,SAAS,EAAE;AAAA,QACvC,aAAa,SAAS;AAAA;AAAA,IACxB;AAAA,KAEJ;AAEJ;",
   "names": []
 }

package/consent/script-registration-store.d.ts

@@ -11,6 +11,12 @@ export interface RegisteredScript {
     type: ReploScriptType;
     requiredConsent: ConsentCategory[];
 }
+/**
+ * Registration id of a `snippet` entry. Snippet providers have no distinct
+ * `type`, so both `ReploScripts` (registering) and the analytics sink factory
+ * (matching) identify them by this id.
+ */
+export declare function snippetScriptId(entryId: string): string;
 export declare const scriptRegistrationStore: {
     register(script: RegisteredScript): void;
     unregister(id: string): void;

package/consent/script-registration-store.js

@@ -1,5 +1,8 @@
 "use client";
 import { useSyncExternalStore } from "react";
+function snippetScriptId(entryId) {
+  return `snippet:${entryId}`;
+}
 const registry = /* @__PURE__ */ new Map();
 const listeners = /* @__PURE__ */ new Set();
 let snapshot = [];
@@ -55,6 +58,7 @@ function useRegisteredScripts() {
 export {
   registerScript,
   scriptRegistrationStore,
+  snippetScriptId,
   unregisterScript,
   useRegisteredScripts
 };

package/consent/script-registration-store.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../consent/script-registration-store.ts"],
-  "sourcesContent": ["\"use client\";\n\nimport type {\n  ConsentCategory,\n  ReploScriptType,\n} from \"schemas/generated/consent\";\n\nimport { useSyncExternalStore } from \"react\";\n\n/**\n * Tracks which managed scripts are currently mounted on the page. Each\n * `ReploScripts` entry registers itself here on mount, so the analytics provider\n * can create sinks only for providers that are actually present (and consented),\n * without importing a static list. Like the consent store, this is a singleton\n * rather than React context so it works regardless of tree position.\n */\n\nexport interface RegisteredScript {\n  id: string;\n  type: ReploScriptType;\n  requiredConsent: ConsentCategory[];\n}\n\nconst registry = new Map<string, RegisteredScript>();\nconst listeners = new Set<() => void>();\n\n// useSyncExternalStore requires a referentially-stable snapshot between emits.\nlet snapshot: RegisteredScript[] = [];\n\nconst SERVER_SNAPSHOT: RegisteredScript[] = [];\n\nfunction emit() {\n  snapshot = [...registry.values()];\n  for (const listener of listeners) {\n    listener();\n  }\n}\n\nexport const scriptRegistrationStore = {\n  register(script: RegisteredScript) {\n    registry.set(script.id, script);\n    emit();\n  },\n  unregister(id: string) {\n    if (registry.delete(id)) {\n      emit();\n    }\n  },\n  getSnapshot(): RegisteredScript[] {\n    return snapshot;\n  },\n  getServerSnapshot(): RegisteredScript[] {\n    return SERVER_SNAPSHOT;\n  },\n  subscribe(listener: () => void): () => void {\n    listeners.add(listener);\n    return () => {\n      listeners.delete(listener);\n    };\n  },\n  /** Test-only: clear the registry between cases. */\n  reset() {\n    registry.clear();\n    listeners.clear();\n    snapshot = [];\n  },\n};\n\nexport function registerScript(script: RegisteredScript) {\n  scriptRegistrationStore.register(script);\n}\n\nexport function unregisterScript(id: string) {\n  scriptRegistrationStore.unregister(id);\n}\n\nexport function useRegisteredScripts(): RegisteredScript[] {\n  return useSyncExternalStore(\n    scriptRegistrationStore.subscribe,\n    scriptRegistrationStore.getSnapshot,\n    scriptRegistrationStore.getServerSnapshot,\n  );\n}\n"],
-  "mappings": ";AAOA,SAAS,4BAA4B;AAgBrC,MAAM,WAAW,oBAAI,IAA8B;AACnD,MAAM,YAAY,oBAAI,IAAgB;AAGtC,IAAI,WAA+B,CAAC;AAEpC,MAAM,kBAAsC,CAAC;AAE7C,SAAS,OAAO;AACd,aAAW,CAAC,GAAG,SAAS,OAAO,CAAC;AAChC,aAAW,YAAY,WAAW;AAChC,aAAS;AAAA,EACX;AACF;AAEO,MAAM,0BAA0B;AAAA,EACrC,SAAS,QAA0B;AACjC,aAAS,IAAI,OAAO,IAAI,MAAM;AAC9B,SAAK;AAAA,EACP;AAAA,EACA,WAAW,IAAY;AACrB,QAAI,SAAS,OAAO,EAAE,GAAG;AACvB,WAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,cAAkC;AAChC,WAAO;AAAA,EACT;AAAA,EACA,oBAAwC;AACtC,WAAO;AAAA,EACT;AAAA,EACA,UAAU,UAAkC;AAC1C,cAAU,IAAI,QAAQ;AACtB,WAAO,MAAM;AACX,gBAAU,OAAO,QAAQ;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAEA,QAAQ;AACN,aAAS,MAAM;AACf,cAAU,MAAM;AAChB,eAAW,CAAC;AAAA,EACd;AACF;AAEO,SAAS,eAAe,QAA0B;AACvD,0BAAwB,SAAS,MAAM;AACzC;AAEO,SAAS,iBAAiB,IAAY;AAC3C,0BAAwB,WAAW,EAAE;AACvC;AAEO,SAAS,uBAA2C;AACzD,SAAO;AAAA,IACL,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,EAC1B;AACF;",
+  "sourcesContent": ["\"use client\";\n\nimport type {\n  ConsentCategory,\n  ReploScriptType,\n} from \"schemas/generated/consent\";\n\nimport { useSyncExternalStore } from \"react\";\n\n/**\n * Tracks which managed scripts are currently mounted on the page. Each\n * `ReploScripts` entry registers itself here on mount, so the analytics provider\n * can create sinks only for providers that are actually present (and consented),\n * without importing a static list. Like the consent store, this is a singleton\n * rather than React context so it works regardless of tree position.\n */\n\nexport interface RegisteredScript {\n  id: string;\n  type: ReploScriptType;\n  requiredConsent: ConsentCategory[];\n}\n\n/**\n * Registration id of a `snippet` entry. Snippet providers have no distinct\n * `type`, so both `ReploScripts` (registering) and the analytics sink factory\n * (matching) identify them by this id.\n */\nexport function snippetScriptId(entryId: string) {\n  return `snippet:${entryId}`;\n}\n\nconst registry = new Map<string, RegisteredScript>();\nconst listeners = new Set<() => void>();\n\n// useSyncExternalStore requires a referentially-stable snapshot between emits.\nlet snapshot: RegisteredScript[] = [];\n\nconst SERVER_SNAPSHOT: RegisteredScript[] = [];\n\nfunction emit() {\n  snapshot = [...registry.values()];\n  for (const listener of listeners) {\n    listener();\n  }\n}\n\nexport const scriptRegistrationStore = {\n  register(script: RegisteredScript) {\n    registry.set(script.id, script);\n    emit();\n  },\n  unregister(id: string) {\n    if (registry.delete(id)) {\n      emit();\n    }\n  },\n  getSnapshot(): RegisteredScript[] {\n    return snapshot;\n  },\n  getServerSnapshot(): RegisteredScript[] {\n    return SERVER_SNAPSHOT;\n  },\n  subscribe(listener: () => void): () => void {\n    listeners.add(listener);\n    return () => {\n      listeners.delete(listener);\n    };\n  },\n  /** Test-only: clear the registry between cases. */\n  reset() {\n    registry.clear();\n    listeners.clear();\n    snapshot = [];\n  },\n};\n\nexport function registerScript(script: RegisteredScript) {\n  scriptRegistrationStore.register(script);\n}\n\nexport function unregisterScript(id: string) {\n  scriptRegistrationStore.unregister(id);\n}\n\nexport function useRegisteredScripts(): RegisteredScript[] {\n  return useSyncExternalStore(\n    scriptRegistrationStore.subscribe,\n    scriptRegistrationStore.getSnapshot,\n    scriptRegistrationStore.getServerSnapshot,\n  );\n}\n"],
+  "mappings": ";AAOA,SAAS,4BAA4B;AAqB9B,SAAS,gBAAgB,SAAiB;AAC/C,SAAO,WAAW,OAAO;AAC3B;AAEA,MAAM,WAAW,oBAAI,IAA8B;AACnD,MAAM,YAAY,oBAAI,IAAgB;AAGtC,IAAI,WAA+B,CAAC;AAEpC,MAAM,kBAAsC,CAAC;AAE7C,SAAS,OAAO;AACd,aAAW,CAAC,GAAG,SAAS,OAAO,CAAC;AAChC,aAAW,YAAY,WAAW;AAChC,aAAS;AAAA,EACX;AACF;AAEO,MAAM,0BAA0B;AAAA,EACrC,SAAS,QAA0B;AACjC,aAAS,IAAI,OAAO,IAAI,MAAM;AAC9B,SAAK;AAAA,EACP;AAAA,EACA,WAAW,IAAY;AACrB,QAAI,SAAS,OAAO,EAAE,GAAG;AACvB,WAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,cAAkC;AAChC,WAAO;AAAA,EACT;AAAA,EACA,oBAAwC;AACtC,WAAO;AAAA,EACT;AAAA,EACA,UAAU,UAAkC;AAC1C,cAAU,IAAI,QAAQ;AACtB,WAAO,MAAM;AACX,gBAAU,OAAO,QAAQ;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAEA,QAAQ;AACN,aAAS,MAAM;AACf,cAAU,MAAM;AAChB,eAAW,CAAC;AAAA,EACd;AACF;AAEO,SAAS,eAAe,QAA0B;AACvD,0BAAwB,SAAS,MAAM;AACzC;AAEO,SAAS,iBAAiB,IAAY;AAC3C,0BAAwB,WAAW,EAAE;AACvC;AAEO,SAAS,uBAA2C;AACzD,SAAO;AAAA,IACL,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,IACxB,wBAAwB;AAAA,EAC1B;AACF;",
   "names": []
 }

package/gateways/canopy-api.js

@@ -97,7 +97,11 @@ If you're running locally, make sure the canopy-api cloudflare worker is running
     const response = await this._post(`${this.baseUrl}/api/v1/loaders/invoke`, {
       projectId: env.PROJECT_ID,
       loaderKey,
-      args
+      args,
+      // The builder preview must render a product the merchant hasn't launched
+      // yet; a published storefront must not. Only the sandbox dev server sets
+      // IS_REPLO_SANDBOX, so it is what separates the two.
+      includeInactiveProducts: Boolean(process.env.IS_REPLO_SANDBOX)
     });
     if (!response.ok) {
       const errorBody = await response.text().catch(() => "");

package/gateways/canopy-api.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../gateways/canopy-api.ts"],
-  "sourcesContent": ["import type { Cart } from \"../cart/cart-schema\";\n\nimport { z } from \"zod\";\n\nimport { cartSchema } from \"../cart/cart-schema\";\nimport { getEnv } from \"../env\";\nimport { CanopyError } from \"../lib/canopy-error\";\nimport { buildBaseUrl } from \"../lib/url-utils\";\n\ntype CanopyApiGatewayErrorConfig = {\n  message: string;\n  statusCode?: number;\n  cause?: unknown;\n  additionalData?: Record<string, unknown>;\n};\n\nexport class CanopyApiGatewayError extends CanopyError {\n  statusCode: number;\n\n  constructor(config: CanopyApiGatewayErrorConfig) {\n    const resolvedStatusCode = config.statusCode ?? 500;\n    super({\n      message: config.message,\n      cause: config.cause,\n      additionalData: {\n        ...config.additionalData,\n        statusCode: resolvedStatusCode,\n      },\n    });\n    this.statusCode = resolvedStatusCode;\n  }\n}\n\nclass UnknownCanopyApiError extends CanopyApiGatewayError {\n  constructor(config: Omit<CanopyApiGatewayErrorConfig, \"statusCode\">) {\n    super({ ...config, statusCode: 502 });\n  }\n}\n\nconst loaderInvokeResponseSchema = z.object({\n  data: z.unknown(),\n  meta: z\n    .object({\n      cache: z.object({\n        hit: z.boolean(),\n        ttlSeconds: z.number(),\n      }),\n    })\n    .optional(),\n});\n\nclass CanopyApiGateway {\n  private apiHost: string;\n  private baseUrl: string;\n  constructor(apiHost: string) {\n    this.apiHost = apiHost;\n    this.baseUrl = buildBaseUrl(apiHost);\n  }\n\n  private static readonly REQUEST_TIMEOUT_MILLISECONDS = 10_000;\n\n  static async setup() {\n    const env = await getEnv();\n\n    return new CanopyApiGateway(env.CANOPY_API_HOST);\n  }\n\n  private async _post(url: string, body: unknown) {\n    const abortController = new AbortController();\n    const timeoutId = setTimeout(() => {\n      abortController.abort();\n    }, CanopyApiGateway.REQUEST_TIMEOUT_MILLISECONDS);\n\n    try {\n      return await fetch(url, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify(body),\n        signal: abortController.signal,\n      });\n    } catch (error) {\n      let message = `Failed to POST to canopy-api at ${url}: ${error}`;\n      if (process.env.NODE_ENV !== \"production\") {\n        message += `\\n\\napiHost: ${this.apiHost}\\nIf you're running locally, make sure the canopy-api cloudflare worker is running. You may need to restart the dev server.`;\n      }\n      throw new UnknownCanopyApiError({ message, cause: error });\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  private async _get(url: string) {\n    const abortController = new AbortController();\n    const timeoutId = setTimeout(() => {\n      abortController.abort();\n    }, CanopyApiGateway.REQUEST_TIMEOUT_MILLISECONDS);\n\n    try {\n      return await fetch(url, { signal: abortController.signal });\n    } catch (error) {\n      let message = `Failed to GET from canopy-api at ${url}: ${error}`;\n      if (process.env.NODE_ENV !== \"production\") {\n        message += `\\n\\napiHost: ${this.apiHost}\\nIf you're running locally, make sure the canopy-api cloudflare worker is running. You may need to restart the dev server.`;\n      }\n      throw new UnknownCanopyApiError({ message, cause: error });\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  async invokeLoader({\n    loaderKey,\n    args,\n  }: {\n    loaderKey: string;\n    args: Record<string, unknown>;\n  }) {\n    const env = await getEnv();\n    const response = await this._post(`${this.baseUrl}/api/v1/loaders/invoke`, {\n      projectId: env.PROJECT_ID,\n      loaderKey,\n      args,\n    });\n\n    if (!response.ok) {\n      const errorBody = await response.text().catch(() => \"\");\n      throw new CanopyApiGatewayError({\n        message: `Failed to invoke loader ${loaderKey}: ${response.status} ${response.statusText}${errorBody ? ` \u2014 ${errorBody}` : \"\"}`,\n        statusCode: response.status,\n      });\n    }\n\n    return loaderInvokeResponseSchema.parse(await response.json());\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cart operations (canopy-api-backed ExternalCart)\n  // ---------------------------------------------------------------------------\n\n  private async _cartPost(\n    path: string,\n    body: Record<string, unknown>,\n  ): Promise<Cart> {\n    const env = await getEnv();\n    const url = `${this.baseUrl}/api/v1/cart${path}`;\n\n    const abortController = new AbortController();\n    const timeoutId = setTimeout(() => {\n      abortController.abort();\n    }, CanopyApiGateway.REQUEST_TIMEOUT_MILLISECONDS);\n\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n        },\n        body: JSON.stringify({ ...body, projectId: env.PROJECT_ID }),\n        signal: abortController.signal,\n      });\n    } catch (error) {\n      throw new UnknownCanopyApiError({\n        message: `Failed to POST cart operation to ${url}: ${error}`,\n        cause: error,\n      });\n    } finally {\n      clearTimeout(timeoutId);\n    }\n\n    if (!response.ok) {\n      const text = await response.text().catch(() => \"\");\n      throw new CanopyApiGatewayError({\n        message: `Cart operation ${path} failed: ${response.status} ${response.statusText} \u2014 ${text}`,\n        statusCode: response.status,\n      });\n    }\n\n    // Legacy cast - may or may not be necessary\n    // eslint-disable-next-line replo/no-as-cast\n    const json = (await response.json()) as { data: unknown };\n    return cartSchema.parse(json.data);\n  }\n\n  async cartGet({ cartId }: { cartId: string }): Promise<Cart | null> {\n    try {\n      return await this._cartPost(\"/get\", { cartId });\n    } catch (error) {\n      if (error instanceof CanopyApiGatewayError && error.statusCode === 404) {\n        return null;\n      }\n      throw error;\n    }\n  }\n\n  async cartCreate(options?: {\n    lines?: {\n      merchandiseId: string;\n      quantity: number;\n      attributes?: { key: string; value: string }[];\n      sellingPlanId?: string | null;\n    }[];\n    discountCodes?: string[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/create\", {\n      lines: options?.lines,\n      discountCodes: options?.discountCodes,\n    });\n  }\n\n  async cartAddLines({\n    cartId,\n    lines,\n  }: {\n    cartId: string;\n    lines: {\n      merchandiseId: string;\n      quantity: number;\n      attributes?: { key: string; value: string }[];\n      sellingPlanId?: string | null;\n    }[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/add-lines\", { cartId, lines });\n  }\n\n  async cartUpdateLines({\n    cartId,\n    lines,\n  }: {\n    cartId: string;\n    lines: {\n      lineId: string;\n      quantity: number;\n      attributes?: { key: string; value: string }[];\n      sellingPlanId?: string | null;\n    }[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/update-lines\", { cartId, lines });\n  }\n\n  async cartRemoveLines({\n    cartId,\n    lineIds,\n  }: {\n    cartId: string;\n    lineIds: string[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/remove-lines\", { cartId, lineIds });\n  }\n\n  async cartUpdateDiscountCodes({\n    cartId,\n    discountCodes,\n  }: {\n    cartId: string;\n    discountCodes: string[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/update-discount-codes\", { cartId, discountCodes });\n  }\n}\n\nexport async function getCanopyApiGateway() {\n  return CanopyApiGateway.setup();\n}\n"],
-  "mappings": "AAEA,SAAS,SAAS;AAElB,SAAS,kBAAkB;AAC3B,SAAS,cAAc;AACvB,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAStB,MAAM,8BAA8B,YAAY;AAAA,EACrD;AAAA,EAEA,YAAY,QAAqC;AAC/C,UAAM,qBAAqB,OAAO,cAAc;AAChD,UAAM;AAAA,MACJ,SAAS,OAAO;AAAA,MAChB,OAAO,OAAO;AAAA,MACd,gBAAgB;AAAA,QACd,GAAG,OAAO;AAAA,QACV,YAAY;AAAA,MACd;AAAA,IACF,CAAC;AACD,SAAK,aAAa;AAAA,EACpB;AACF;AAEA,MAAM,8BAA8B,sBAAsB;AAAA,EACxD,YAAY,QAAyD;AACnE,UAAM,EAAE,GAAG,QAAQ,YAAY,IAAI,CAAC;AAAA,EACtC;AACF;AAEA,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,MAAM,EAAE,QAAQ;AAAA,EAChB,MAAM,EACH,OAAO;AAAA,IACN,OAAO,EAAE,OAAO;AAAA,MACd,KAAK,EAAE,QAAQ;AAAA,MACf,YAAY,EAAE,OAAO;AAAA,IACvB,CAAC;AAAA,EACH,CAAC,EACA,SAAS;AACd,CAAC;AAED,MAAM,iBAAiB;AAAA,EACb;AAAA,EACA;AAAA,EACR,YAAY,SAAiB;AAC3B,SAAK,UAAU;AACf,SAAK,UAAU,aAAa,OAAO;AAAA,EACrC;AAAA,EAEA,OAAwB,+BAA+B;AAAA,EAEvD,aAAa,QAAQ;AACnB,UAAM,MAAM,MAAM,OAAO;AAEzB,WAAO,IAAI,iBAAiB,IAAI,eAAe;AAAA,EACjD;AAAA,EAEA,MAAc,MAAM,KAAa,MAAe;AAC9C,UAAM,kBAAkB,IAAI,gBAAgB;AAC5C,UAAM,YAAY,WAAW,MAAM;AACjC,sBAAgB,MAAM;AAAA,IACxB,GAAG,iBAAiB,4BAA4B;AAEhD,QAAI;AACF,aAAO,MAAM,MAAM,KAAK;AAAA,QACtB,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,QAAQ,gBAAgB;AAAA,MAC1B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,UAAU,mCAAmC,GAAG,KAAK,KAAK;AAC9D,UAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,mBAAW;AAAA;AAAA,WAAgB,KAAK,OAAO;AAAA;AAAA,MACzC;AACA,YAAM,IAAI,sBAAsB,EAAE,SAAS,OAAO,MAAM,CAAC;AAAA,IAC3D,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AAAA,EAEA,MAAc,KAAK,KAAa;AAC9B,UAAM,kBAAkB,IAAI,gBAAgB;AAC5C,UAAM,YAAY,WAAW,MAAM;AACjC,sBAAgB,MAAM;AAAA,IACxB,GAAG,iBAAiB,4BAA4B;AAEhD,QAAI;AACF,aAAO,MAAM,MAAM,KAAK,EAAE,QAAQ,gBAAgB,OAAO,CAAC;AAAA,IAC5D,SAAS,OAAO;AACd,UAAI,UAAU,oCAAoC,GAAG,KAAK,KAAK;AAC/D,UAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,mBAAW;AAAA;AAAA,WAAgB,KAAK,OAAO;AAAA;AAAA,MACzC;AACA,YAAM,IAAI,sBAAsB,EAAE,SAAS,OAAO,MAAM,CAAC;AAAA,IAC3D,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AAAA,EAEA,MAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,EACF,GAGG;AACD,UAAM,MAAM,MAAM,OAAO;AACzB,UAAM,WAAW,MAAM,KAAK,MAAM,GAAG,KAAK,OAAO,0BAA0B;AAAA,MACzE,WAAW,IAAI;AAAA,MACf;AAAA,MACA;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACtD,YAAM,IAAI,sBAAsB;AAAA,QAC9B,SAAS,2BAA2B,SAAS,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU,GAAG,YAAY,WAAM,SAAS,KAAK,EAAE;AAAA,QAC7H,YAAY,SAAS;AAAA,MACvB,CAAC;AAAA,IACH;AAEA,WAAO,2BAA2B,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,UACZ,MACA,MACe;AACf,UAAM,MAAM,MAAM,OAAO;AACzB,UAAM,MAAM,GAAG,KAAK,OAAO,eAAe,IAAI;AAE9C,UAAM,kBAAkB,IAAI,gBAAgB;AAC5C,UAAM,YAAY,WAAW,MAAM;AACjC,sBAAgB,MAAM;AAAA,IACxB,GAAG,iBAAiB,4BAA4B;AAEhD,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK;AAAA,QAC1B,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,KAAK,UAAU,EAAE,GAAG,MAAM,WAAW,IAAI,WAAW,CAAC;AAAA,QAC3D,QAAQ,gBAAgB;AAAA,MAC1B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI,sBAAsB;AAAA,QAC9B,SAAS,oCAAoC,GAAG,KAAK,KAAK;AAAA,QAC1D,OAAO;AAAA,MACT,CAAC;AAAA,IACH,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAO,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACjD,YAAM,IAAI,sBAAsB;AAAA,QAC9B,SAAS,kBAAkB,IAAI,YAAY,SAAS,MAAM,IAAI,SAAS,UAAU,WAAM,IAAI;AAAA,QAC3F,YAAY,SAAS;AAAA,MACvB,CAAC;AAAA,IACH;AAIA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,WAAW,MAAM,KAAK,IAAI;AAAA,EACnC;AAAA,EAEA,MAAM,QAAQ,EAAE,OAAO,GAA6C;AAClE,QAAI;AACF,aAAO,MAAM,KAAK,UAAU,QAAQ,EAAE,OAAO,CAAC;AAAA,IAChD,SAAS,OAAO;AACd,UAAI,iBAAiB,yBAAyB,MAAM,eAAe,KAAK;AACtE,eAAO;AAAA,MACT;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,SAQC;AAChB,WAAO,KAAK,UAAU,WAAW;AAAA,MAC/B,OAAO,SAAS;AAAA,MAChB,eAAe,SAAS;AAAA,IAC1B,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,EACF,GAQkB;AAChB,WAAO,KAAK,UAAU,cAAc,EAAE,QAAQ,MAAM,CAAC;AAAA,EACvD;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,EACF,GAQkB;AAChB,WAAO,KAAK,UAAU,iBAAiB,EAAE,QAAQ,MAAM,CAAC;AAAA,EAC1D;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,EACF,GAGkB;AAChB,WAAO,KAAK,UAAU,iBAAiB,EAAE,QAAQ,QAAQ,CAAC;AAAA,EAC5D;AAAA,EAEA,MAAM,wBAAwB;AAAA,IAC5B;AAAA,IACA;AAAA,EACF,GAGkB;AAChB,WAAO,KAAK,UAAU,0BAA0B,EAAE,QAAQ,cAAc,CAAC;AAAA,EAC3E;AACF;AAEA,eAAsB,sBAAsB;AAC1C,SAAO,iBAAiB,MAAM;AAChC;",
+  "sourcesContent": ["import type { Cart } from \"../cart/cart-schema\";\n\nimport { z } from \"zod\";\n\nimport { cartSchema } from \"../cart/cart-schema\";\nimport { getEnv } from \"../env\";\nimport { CanopyError } from \"../lib/canopy-error\";\nimport { buildBaseUrl } from \"../lib/url-utils\";\n\ntype CanopyApiGatewayErrorConfig = {\n  message: string;\n  statusCode?: number;\n  cause?: unknown;\n  additionalData?: Record<string, unknown>;\n};\n\nexport class CanopyApiGatewayError extends CanopyError {\n  statusCode: number;\n\n  constructor(config: CanopyApiGatewayErrorConfig) {\n    const resolvedStatusCode = config.statusCode ?? 500;\n    super({\n      message: config.message,\n      cause: config.cause,\n      additionalData: {\n        ...config.additionalData,\n        statusCode: resolvedStatusCode,\n      },\n    });\n    this.statusCode = resolvedStatusCode;\n  }\n}\n\nclass UnknownCanopyApiError extends CanopyApiGatewayError {\n  constructor(config: Omit<CanopyApiGatewayErrorConfig, \"statusCode\">) {\n    super({ ...config, statusCode: 502 });\n  }\n}\n\nconst loaderInvokeResponseSchema = z.object({\n  data: z.unknown(),\n  meta: z\n    .object({\n      cache: z.object({\n        hit: z.boolean(),\n        ttlSeconds: z.number(),\n      }),\n    })\n    .optional(),\n});\n\nclass CanopyApiGateway {\n  private apiHost: string;\n  private baseUrl: string;\n  constructor(apiHost: string) {\n    this.apiHost = apiHost;\n    this.baseUrl = buildBaseUrl(apiHost);\n  }\n\n  private static readonly REQUEST_TIMEOUT_MILLISECONDS = 10_000;\n\n  static async setup() {\n    const env = await getEnv();\n\n    return new CanopyApiGateway(env.CANOPY_API_HOST);\n  }\n\n  private async _post(url: string, body: unknown) {\n    const abortController = new AbortController();\n    const timeoutId = setTimeout(() => {\n      abortController.abort();\n    }, CanopyApiGateway.REQUEST_TIMEOUT_MILLISECONDS);\n\n    try {\n      return await fetch(url, {\n        method: \"POST\",\n        headers: { \"Content-Type\": \"application/json\" },\n        body: JSON.stringify(body),\n        signal: abortController.signal,\n      });\n    } catch (error) {\n      let message = `Failed to POST to canopy-api at ${url}: ${error}`;\n      if (process.env.NODE_ENV !== \"production\") {\n        message += `\\n\\napiHost: ${this.apiHost}\\nIf you're running locally, make sure the canopy-api cloudflare worker is running. You may need to restart the dev server.`;\n      }\n      throw new UnknownCanopyApiError({ message, cause: error });\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  private async _get(url: string) {\n    const abortController = new AbortController();\n    const timeoutId = setTimeout(() => {\n      abortController.abort();\n    }, CanopyApiGateway.REQUEST_TIMEOUT_MILLISECONDS);\n\n    try {\n      return await fetch(url, { signal: abortController.signal });\n    } catch (error) {\n      let message = `Failed to GET from canopy-api at ${url}: ${error}`;\n      if (process.env.NODE_ENV !== \"production\") {\n        message += `\\n\\napiHost: ${this.apiHost}\\nIf you're running locally, make sure the canopy-api cloudflare worker is running. You may need to restart the dev server.`;\n      }\n      throw new UnknownCanopyApiError({ message, cause: error });\n    } finally {\n      clearTimeout(timeoutId);\n    }\n  }\n\n  async invokeLoader({\n    loaderKey,\n    args,\n  }: {\n    loaderKey: string;\n    args: Record<string, unknown>;\n  }) {\n    const env = await getEnv();\n    const response = await this._post(`${this.baseUrl}/api/v1/loaders/invoke`, {\n      projectId: env.PROJECT_ID,\n      loaderKey,\n      args,\n      // The builder preview must render a product the merchant hasn't launched\n      // yet; a published storefront must not. Only the sandbox dev server sets\n      // IS_REPLO_SANDBOX, so it is what separates the two.\n      includeInactiveProducts: Boolean(process.env.IS_REPLO_SANDBOX),\n    });\n\n    if (!response.ok) {\n      const errorBody = await response.text().catch(() => \"\");\n      throw new CanopyApiGatewayError({\n        message: `Failed to invoke loader ${loaderKey}: ${response.status} ${response.statusText}${errorBody ? ` \u2014 ${errorBody}` : \"\"}`,\n        statusCode: response.status,\n      });\n    }\n\n    return loaderInvokeResponseSchema.parse(await response.json());\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cart operations (canopy-api-backed ExternalCart)\n  // ---------------------------------------------------------------------------\n\n  private async _cartPost(\n    path: string,\n    body: Record<string, unknown>,\n  ): Promise<Cart> {\n    const env = await getEnv();\n    const url = `${this.baseUrl}/api/v1/cart${path}`;\n\n    const abortController = new AbortController();\n    const timeoutId = setTimeout(() => {\n      abortController.abort();\n    }, CanopyApiGateway.REQUEST_TIMEOUT_MILLISECONDS);\n\n    let response: Response;\n    try {\n      response = await fetch(url, {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n        },\n        body: JSON.stringify({ ...body, projectId: env.PROJECT_ID }),\n        signal: abortController.signal,\n      });\n    } catch (error) {\n      throw new UnknownCanopyApiError({\n        message: `Failed to POST cart operation to ${url}: ${error}`,\n        cause: error,\n      });\n    } finally {\n      clearTimeout(timeoutId);\n    }\n\n    if (!response.ok) {\n      const text = await response.text().catch(() => \"\");\n      throw new CanopyApiGatewayError({\n        message: `Cart operation ${path} failed: ${response.status} ${response.statusText} \u2014 ${text}`,\n        statusCode: response.status,\n      });\n    }\n\n    // Legacy cast - may or may not be necessary\n    // eslint-disable-next-line replo/no-as-cast\n    const json = (await response.json()) as { data: unknown };\n    return cartSchema.parse(json.data);\n  }\n\n  async cartGet({ cartId }: { cartId: string }): Promise<Cart | null> {\n    try {\n      return await this._cartPost(\"/get\", { cartId });\n    } catch (error) {\n      if (error instanceof CanopyApiGatewayError && error.statusCode === 404) {\n        return null;\n      }\n      throw error;\n    }\n  }\n\n  async cartCreate(options?: {\n    lines?: {\n      merchandiseId: string;\n      quantity: number;\n      attributes?: { key: string; value: string }[];\n      sellingPlanId?: string | null;\n    }[];\n    discountCodes?: string[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/create\", {\n      lines: options?.lines,\n      discountCodes: options?.discountCodes,\n    });\n  }\n\n  async cartAddLines({\n    cartId,\n    lines,\n  }: {\n    cartId: string;\n    lines: {\n      merchandiseId: string;\n      quantity: number;\n      attributes?: { key: string; value: string }[];\n      sellingPlanId?: string | null;\n    }[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/add-lines\", { cartId, lines });\n  }\n\n  async cartUpdateLines({\n    cartId,\n    lines,\n  }: {\n    cartId: string;\n    lines: {\n      lineId: string;\n      quantity: number;\n      attributes?: { key: string; value: string }[];\n      sellingPlanId?: string | null;\n    }[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/update-lines\", { cartId, lines });\n  }\n\n  async cartRemoveLines({\n    cartId,\n    lineIds,\n  }: {\n    cartId: string;\n    lineIds: string[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/remove-lines\", { cartId, lineIds });\n  }\n\n  async cartUpdateDiscountCodes({\n    cartId,\n    discountCodes,\n  }: {\n    cartId: string;\n    discountCodes: string[];\n  }): Promise<Cart> {\n    return this._cartPost(\"/update-discount-codes\", { cartId, discountCodes });\n  }\n}\n\nexport async function getCanopyApiGateway() {\n  return CanopyApiGateway.setup();\n}\n"],
+  "mappings": "AAEA,SAAS,SAAS;AAElB,SAAS,kBAAkB;AAC3B,SAAS,cAAc;AACvB,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB;AAStB,MAAM,8BAA8B,YAAY;AAAA,EACrD;AAAA,EAEA,YAAY,QAAqC;AAC/C,UAAM,qBAAqB,OAAO,cAAc;AAChD,UAAM;AAAA,MACJ,SAAS,OAAO;AAAA,MAChB,OAAO,OAAO;AAAA,MACd,gBAAgB;AAAA,QACd,GAAG,OAAO;AAAA,QACV,YAAY;AAAA,MACd;AAAA,IACF,CAAC;AACD,SAAK,aAAa;AAAA,EACpB;AACF;AAEA,MAAM,8BAA8B,sBAAsB;AAAA,EACxD,YAAY,QAAyD;AACnE,UAAM,EAAE,GAAG,QAAQ,YAAY,IAAI,CAAC;AAAA,EACtC;AACF;AAEA,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,MAAM,EAAE,QAAQ;AAAA,EAChB,MAAM,EACH,OAAO;AAAA,IACN,OAAO,EAAE,OAAO;AAAA,MACd,KAAK,EAAE,QAAQ;AAAA,MACf,YAAY,EAAE,OAAO;AAAA,IACvB,CAAC;AAAA,EACH,CAAC,EACA,SAAS;AACd,CAAC;AAED,MAAM,iBAAiB;AAAA,EACb;AAAA,EACA;AAAA,EACR,YAAY,SAAiB;AAC3B,SAAK,UAAU;AACf,SAAK,UAAU,aAAa,OAAO;AAAA,EACrC;AAAA,EAEA,OAAwB,+BAA+B;AAAA,EAEvD,aAAa,QAAQ;AACnB,UAAM,MAAM,MAAM,OAAO;AAEzB,WAAO,IAAI,iBAAiB,IAAI,eAAe;AAAA,EACjD;AAAA,EAEA,MAAc,MAAM,KAAa,MAAe;AAC9C,UAAM,kBAAkB,IAAI,gBAAgB;AAC5C,UAAM,YAAY,WAAW,MAAM;AACjC,sBAAgB,MAAM;AAAA,IACxB,GAAG,iBAAiB,4BAA4B;AAEhD,QAAI;AACF,aAAO,MAAM,MAAM,KAAK;AAAA,QACtB,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,IAAI;AAAA,QACzB,QAAQ,gBAAgB;AAAA,MAC1B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,UAAU,mCAAmC,GAAG,KAAK,KAAK;AAC9D,UAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,mBAAW;AAAA;AAAA,WAAgB,KAAK,OAAO;AAAA;AAAA,MACzC;AACA,YAAM,IAAI,sBAAsB,EAAE,SAAS,OAAO,MAAM,CAAC;AAAA,IAC3D,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AAAA,EAEA,MAAc,KAAK,KAAa;AAC9B,UAAM,kBAAkB,IAAI,gBAAgB;AAC5C,UAAM,YAAY,WAAW,MAAM;AACjC,sBAAgB,MAAM;AAAA,IACxB,GAAG,iBAAiB,4BAA4B;AAEhD,QAAI;AACF,aAAO,MAAM,MAAM,KAAK,EAAE,QAAQ,gBAAgB,OAAO,CAAC;AAAA,IAC5D,SAAS,OAAO;AACd,UAAI,UAAU,oCAAoC,GAAG,KAAK,KAAK;AAC/D,UAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,mBAAW;AAAA;AAAA,WAAgB,KAAK,OAAO;AAAA;AAAA,MACzC;AACA,YAAM,IAAI,sBAAsB,EAAE,SAAS,OAAO,MAAM,CAAC;AAAA,IAC3D,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAAA,EACF;AAAA,EAEA,MAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,EACF,GAGG;AACD,UAAM,MAAM,MAAM,OAAO;AACzB,UAAM,WAAW,MAAM,KAAK,MAAM,GAAG,KAAK,OAAO,0BAA0B;AAAA,MACzE,WAAW,IAAI;AAAA,MACf;AAAA,MACA;AAAA;AAAA;AAAA;AAAA,MAIA,yBAAyB,QAAQ,QAAQ,IAAI,gBAAgB;AAAA,IAC/D,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACtD,YAAM,IAAI,sBAAsB;AAAA,QAC9B,SAAS,2BAA2B,SAAS,KAAK,SAAS,MAAM,IAAI,SAAS,UAAU,GAAG,YAAY,WAAM,SAAS,KAAK,EAAE;AAAA,QAC7H,YAAY,SAAS;AAAA,MACvB,CAAC;AAAA,IACH;AAEA,WAAO,2BAA2B,MAAM,MAAM,SAAS,KAAK,CAAC;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,UACZ,MACA,MACe;AACf,UAAM,MAAM,MAAM,OAAO;AACzB,UAAM,MAAM,GAAG,KAAK,OAAO,eAAe,IAAI;AAE9C,UAAM,kBAAkB,IAAI,gBAAgB;AAC5C,UAAM,YAAY,WAAW,MAAM;AACjC,sBAAgB,MAAM;AAAA,IACxB,GAAG,iBAAiB,4BAA4B;AAEhD,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,KAAK;AAAA,QAC1B,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,QACA,MAAM,KAAK,UAAU,EAAE,GAAG,MAAM,WAAW,IAAI,WAAW,CAAC;AAAA,QAC3D,QAAQ,gBAAgB;AAAA,MAC1B,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,IAAI,sBAAsB;AAAA,QAC9B,SAAS,oCAAoC,GAAG,KAAK,KAAK;AAAA,QAC1D,OAAO;AAAA,MACT,CAAC;AAAA,IACH,UAAE;AACA,mBAAa,SAAS;AAAA,IACxB;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAO,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACjD,YAAM,IAAI,sBAAsB;AAAA,QAC9B,SAAS,kBAAkB,IAAI,YAAY,SAAS,MAAM,IAAI,SAAS,UAAU,WAAM,IAAI;AAAA,QAC3F,YAAY,SAAS;AAAA,MACvB,CAAC;AAAA,IACH;AAIA,UAAM,OAAQ,MAAM,SAAS,KAAK;AAClC,WAAO,WAAW,MAAM,KAAK,IAAI;AAAA,EACnC;AAAA,EAEA,MAAM,QAAQ,EAAE,OAAO,GAA6C;AAClE,QAAI;AACF,aAAO,MAAM,KAAK,UAAU,QAAQ,EAAE,OAAO,CAAC;AAAA,IAChD,SAAS,OAAO;AACd,UAAI,iBAAiB,yBAAyB,MAAM,eAAe,KAAK;AACtE,eAAO;AAAA,MACT;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,SAQC;AAChB,WAAO,KAAK,UAAU,WAAW;AAAA,MAC/B,OAAO,SAAS;AAAA,MAChB,eAAe,SAAS;AAAA,IAC1B,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,EACF,GAQkB;AAChB,WAAO,KAAK,UAAU,cAAc,EAAE,QAAQ,MAAM,CAAC;AAAA,EACvD;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,EACF,GAQkB;AAChB,WAAO,KAAK,UAAU,iBAAiB,EAAE,QAAQ,MAAM,CAAC;AAAA,EAC1D;AAAA,EAEA,MAAM,gBAAgB;AAAA,IACpB;AAAA,IACA;AAAA,EACF,GAGkB;AAChB,WAAO,KAAK,UAAU,iBAAiB,EAAE,QAAQ,QAAQ,CAAC;AAAA,EAC5D;AAAA,EAEA,MAAM,wBAAwB;AAAA,IAC5B;AAAA,IACA;AAAA,EACF,GAGkB;AAChB,WAAO,KAAK,UAAU,0BAA0B,EAAE,QAAQ,cAAc,CAAC;AAAA,EAC3E;AACF;AAEA,eAAsB,sBAAsB;AAC1C,SAAO,iBAAiB,MAAM;AAChC;",
   "names": []
 }

package/lib/buildMetadata.js

@@ -1,7 +1,7 @@
 export const BUILD_METADATA = {
   "packageName": "@replohq/sdk",
-  "version": "1.2.3",
+  "version": "1.3.1",
   "branch": "HEAD",
-  "commit": "8bbee68d9aafb3c6dc7fcb3216a20bb46b70ba8a",
-  "builtAt": "2026-09-04T19:41:23.624Z"
+  "commit": "302ac40cbc8324340e402864bed7b955020c6196",
+  "builtAt": "2026-09-05T00:51:07.446Z"
 };

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@replohq/sdk",
-  "version": "1.2.3",
+  "version": "1.3.1",
   "reploBuild": {
     "packageName": "@replohq/sdk",
-    "version": "1.2.3",
+    "version": "1.3.1",
     "branch": "HEAD",
-    "commit": "8bbee68d9aafb3c6dc7fcb3216a20bb46b70ba8a",
-    "builtAt": "2026-09-04T19:41:23.624Z"
+    "commit": "302ac40cbc8324340e402864bed7b955020c6196",
+    "builtAt": "2026-09-05T00:51:07.446Z"
   },
   "description": "Replo SDK — cart, analytics, and data loaders for agent-built Next.js sites.",
   "license": "SEE LICENSE IN LICENSE",