@salla.sa/twilight-theme-engine 1.0.128 → 1.0.130

package/dist/{chunk-S7QZUBXM.js.map → chunk-BSGHOYMT.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/engine-version.ts","../src/api/dev-settings-cache.ts","../src/api/client.ts"],"names":["entry","createIsomorphicFn","getCookie"],"mappings":";;;;;;;;;AAQO,IAAM,cAAA,GAC0C,SAAA;ACWhD,IAAM,sBAAsB,EAAA,GAAK,GAAA;AAGxC,IAAM,UAAA,GAAa,sBAAA;AAGnB,IAAM,iBAAA,GAAoB,2BAAA;AAOnB,SAAS,qBAAqB,OAAA,EAAkD;AACrF,EAAA,MAAM,EAAA,GAAK,MAAA,CAAO,OAAA,EAAS,GAAA,CAAI,iBAAiB,CAAC,CAAA;AACjD,EAAA,OAAO,OAAO,QAAA,CAAS,EAAE,CAAA,IAAK,EAAA,GAAK,IAAI,EAAA,GAAK,MAAA;AAC9C;AAMA,IAAM,kCAAkB,IAAI,GAAA,CAAI,CAAC,kBAAA,EAAoB,gBAAgB,CAAC,CAAA;AAuBtE,SAAS,kBAAkB,OAAA,EAA2B;AACpD,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,KAAA,EAAO,OAAO,KAAA;AACrC,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAA,CAAS,SAAS,iBAAiB,CAAA;AAAA,EACjE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAOA,SAAS,YAAY,IAAA,EAAuB;AAC1C,EAAA,IAAI;AACF,IAAA,OAAO,OAAA,CAAS,IAAA,CAAK,KAAA,CAAM,IAAI,GAAiC,IAAI,CAAA;AAAA,EACtE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAOA,SAAS,MAAM,OAAA,EAA0B;AACvC,EAAA,MAAM,UAAU,CAAC,GAAG,QAAQ,OAAO,CAAA,CAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAA,KAAM,GAAG,IAAI,CAAA,EAAA,EAAK,KAAK,CAAA,CAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AAC1F,EAAA,OAAO,CAAA,EAAG,OAAA,CAAQ,MAAM,CAAA,CAAA,EAAI,QAAQ,GAAG;AAAA,EAAK,OAAO,CAAA,CAAA;AACrD;AAQO,SAAS,uBAAuB,OAAA,EAAkC;AACvE,EAAA,MAAM;AAAA,IACJ,OAAA;AAAA,IACA,YAAA;AAAA,IACA,MAAM,IAAA,CAAK,GAAA;AAAA,IACX,KAAA,GAAQ,mBAAA;AAAA,IACR;AAAA,GACF,GAAI,OAAA;AACJ,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAmB;AACvC,EAAA,IAAI,SAAA,GAAY,KAAA;AAEhB,EAAA,MAAM,OAAA,GAAU,CAAC,KAAA,KACf,GAAA,EAAI,GAAI,MAAM,SAAA,GAAY,KAAA,IAAS,KAAA,CAAM,OAAA,KAAY,YAAA,EAAa;AAEpE,EAAA,MAAM,QAAA,GAAW,CAAC,KAAA,EAAc,GAAA,KAA2B;AACzD,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,KAAA,CAAM,OAAO,CAAA;AACzC,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAmB,MAAA,CAAO,KAAA,CAAM,SAAS,CAAC,CAAA;AACtD,IAAA,IAAI,GAAA,EAAK,OAAA,CAAQ,GAAA,CAAI,UAAA,EAAY,KAAK,CAAA;AACtC,IAAA,OAAO,IAAI,QAAA,CAAS,KAAA,CAAM,IAAA,EAAM;AAAA,MAC9B,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB;AAAA,KACD,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,MAAM,MAAA,GAA4B,CAAC,EAAE,OAAA,EAAQ,KAAM;AACjD,IAAA,IAAI,CAAC,OAAA,EAAQ,IAAK,CAAC,iBAAA,CAAkB,OAAO,CAAA,EAAG;AAC/C,IAAA,MAAM,GAAA,GAAM,MAAM,OAAO,CAAA;AACzB,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC7B,IAAA,IAAI,CAAC,KAAA,EAAO;AACZ,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnB,MAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAClB,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,SAAA,GAAY,IAAA;AACZ,MAAA,UAAA,IAAa;AAAA,IACf;AACA,IAAA,OAAO,QAAA,CAAS,OAAO,IAAI,CAAA;AAAA,EAC7B,CAAA;AAEA,EAAA,MAAM,KAAA,GAA2B,OAAO,EAAE,OAAA,EAAS,UAAS,KAAM;AAChE,IAAA,IAAI,CAAC,SAAQ,IAAK,CAAC,kBAAkB,OAAO,CAAA,IAAK,CAAC,QAAA,CAAS,EAAA,EAAI;AAC/D,IAAA,IAAI,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,UAAU,CAAA,EAAG;AAEtC,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,IAAI,CAAC,WAAA,CAAY,IAAI,CAAA,EAAG;AACxB,IAAA,KAAA,MAAW,CAAC,GAAA,EAAKA,MAAK,CAAA,IAAK,OAAA,EAAS;AAClC,MAAA,IAAI,KAAI,GAAIA,MAAAA,CAAM,aAAa,KAAA,EAAO,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,IAC1D;AACA,IAAA,MAAM,KAAA,GAAe;AAAA,MACnB,IAAA;AAAA,MACA,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,OAAA,EAAS,CAAC,GAAG,QAAA,CAAS,OAAO,CAAA,CAAE,MAAA,CAAO,CAAC,CAAC,IAAI,CAAA,KAAM,CAAC,eAAA,CAAgB,GAAA,CAAI,IAAI,CAAC,CAAA;AAAA,MAC5E,WAAW,GAAA,EAAI;AAAA,MACf,SAAS,YAAA;AAAa,KACxB;AACA,IAAA,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,OAAO,CAAA,EAAG,KAAK,CAAA;AAEjC,IAAA,OAAO,QAAA,CAAS,OAAO,KAAK,CAAA;AAAA,EAC9B,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,OAAO,MAAM,OAAA,CAAQ,OAAM,EAAE;AACvD;AAEA,IAAM,iBAAA,GAAoB,kBAAA,EAAmB,CAC1C,MAAA,CAAO,MAAqB;AAC3B,EAAA,IAAI;AACF,IAAA,OAAO,SAAA,CAAU,2BAA2B,CAAA,IAAK,IAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAC,CAAA,CACA,MAAA,CAAO,MAAqB,IAAI,CAAA;AAE5B,IAAM,mBAAmB,sBAAA,CAAuB;AAAA;AAAA;AAAA;AAAA,EAIrD,OAAA,EAAS,MACP,MAAA,CAAA,IAAA,CAAY,GAAA,CAAI,GAAA,IAAO,YAAY,GAAA,CAAI,IAAA,KAAS,MAAA,IAAU,OAAO,QAAA,KAAa,WAAA;AAAA,EAChF,YAAA,EAAc,iBAAA;AAAA,EACd,UAAA,EAAY,MACV,OAAA,CAAQ,IAAA;AAAA,IACN,CAAA,+CAAA,EAAkD,sBAAsB,GAAM,CAAA,2NAAA;AAAA;AAEpF,CAAC,CAAA;;;AClKD,IAAM,iBAAA,GAAoBC,kBAAAA,EAAmB,CAC1C,MAAA,CAAO,MAAqB;AAC3B,EAAA,IAAI;AACF,IAAA,OAAOC,SAAAA,CAAU,sBAAsB,CAAA,IAAK,IAAA;AAAA,EAC9C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAC,CAAA,CACA,OAAO,MAAqB;AAC3B,EAAA,MAAM,UAAA,GACJ,OAAO,QAAA,KAAa,WAAA,GAChB,wBAAwB,QAAA,CAAS,MAAA,EAAQ,sBAAsB,CAAA,GAC/D,IAAA;AACN,EAAA,IAAI,YAAY,OAAO,UAAA;AACvB,EAAA,MAAM,UAAU,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,OAAO,OAAA,GAAU,MAAA;AACxE,EAAA,MAAM,WAAA,GACJ,OAAO,OAAA,EAAS,GAAA,KAAQ,aAAa,OAAA,CAAQ,GAAA,CAAI,sBAAsB,CAAA,GAAI,IAAA;AAC7E,EAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,IAAY,WAAA,EAAa,OAAO,WAAA;AAE3D,EAAA,MAAM,aAAa,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,KAAA,EAAO,KAAK,KAAA,GAAQ,MAAA;AAC9E,EAAA,OAAO,OAAO,UAAA,KAAe,QAAA,IAAY,UAAA,GAAa,UAAA,GAAa,IAAA;AACrE,CAAC,CAAA;AAOI,IAAM,YAAA,GAAe,MAC1B,kBAAA,EAAmB,CAAE,aAAa,iBAAA;AAEpC,IAAM,mBAAA,GAAsBD,kBAAAA,EAAmB,CAC5C,MAAA,CAAO,MAAqB;AAC3B,EAAA,IAAI;AACF,IAAA,OAAO,cAAA,CAAeC,SAAAA,CAAU,oBAAoB,CAAC,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAC,CAAA,CACA,MAAA,CAAO,MAAqB,IAAI,CAAA;AAQ5B,SAAS,iBAAA,CAAkB,WAA0B,IAAA,EAAqB;AAC/E,EAAA,MAAM,MAAA,GACJ,OAAO,QAAA,KAAa,WAAA,GAChB,2BAA2B,QAAA,CAAS,MAAM,IAC1C,mBAAA,EAAoB;AAC1B,EAAA,OAAO,MAAA,IAAU,QAAA;AACnB;AAEA,IAAM,WAAA,GAAc;AAAA,EAClB,MAAA,EAAQ,QAAA;AAAA,EACR,eAAA,EAAiB,iBAAA;AAAA,EACjB,MAAA,EAAQ,UAAA;AAAA,EACR,WAAA,EAAa,eAAA;AAAA,EACb,GAAA,EAAK,OAAA;AAAA,EACL,MAAA,EAAQ,UAAA;AAAA,EACR,UAAA,EAAY,cAAA;AAAA,EACZ,iBAAA,EAAmB,qBAAA;AAAA,EACnB,cAAA,EAAgB,kBAAA;AAAA,EAChB,kBAAA,EAAoB,yBAAA;AAAA,EACpB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,QAAA,EAAU,UAAA;AAAA,EACV,aAAA,EAAe,eAAA;AAAA,EACf,UAAA,EAAY,cAAA;AAAA,EACZ,QAAA,EAAU,YAAA;AAAA,EACV,UAAA,EAAY,cAAA;AAAA,EACZ,qBAAA,EAAuB,yBAAA;AAAA,EACvB,mBAAA,EAAqB,uBAAA;AAAA,EACrB,UAAA,EAAY;AACd,CAAA;AAUO,IAAM,0BAA0B,WAAA,CAAY;AAc5C,IAAM,iBAAiB,MAA0B;AAItD,EAAA,MAAM,cAAc,YAAA,EAAa;AACjC,EAAA,IAAI,WAAA,KAAgB,QAAW,OAAO,WAAA;AAEtC,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACnC,IAAA,MAAM,UAAA,GAAa,uBAAA,CAAwB,QAAA,CAAS,MAAM,CAAA;AAC1D,IAAA,IAAI,UAAA,IAAc,MAAM,OAAO,UAAA;AAAA,EACjC;AAEA,EAAA,IAAI;AACF,IAAA,OAAO,oBAAmB,CAAE,KAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGO,IAAM,gBAAA,GAAmB,MAAqB,cAAA,EAAe,EAAG,EAAA,IAAM;AAE7E,IAAM,aAAA,GAAgB,CAAC,MAAA,MAAoB;AAAA,EACzC,CAAC,WAAA,CAAY,MAAM,GAAG,kBAAA;AAAA,EACtB,CAAC,WAAA,CAAY,eAAe,GAAG,MAAA;AAAA,EAC/B,CAAC,WAAA,CAAY,MAAM,GAAG,SAAA;AAAA,EACtB,CAAC,WAAA,CAAY,WAAW,GAAG,UAAA;AAAA,EAC3B,CAAC,WAAA,CAAY,GAAG,GAAG,IAAA;AAAA,EACnB,CAAC,WAAA,CAAY,MAAM,GAAG,UAAA;AAAA,EACtB,CAAC,WAAA,CAAY,UAAU,GAAG,OAAA;AAAA,EAC1B,CAAC,WAAA,CAAY,iBAAiB,GAAG,QAAA;AAAA,EACjC,CAAC,WAAA,CAAY,cAAc,GAAG,gBAAA;AAAA,EAC9B,CAAC,WAAA,CAAY,kBAAkB,GAAG;AACpC,CAAA,CAAA;AAcA,IAAM,iBAAA,GAAoB,CAAA,oBAAA,EACxB,gBAAA,CAAiB,IAAA,CAAK,cAAc,CAAA,GAAI,CAAC,CAAA,IAAK,OAChD,CAAA,EAAA,EAAK,MAAA,CAAA,IAAA,CAAY,GAAA,CAAI,GAAA,GAAM,gBAAgB,YAAY,CAAA,MAAA,CAAA;AASvD,IAAM,iBACJ,qBAAA,EAAsB,CAAE,OAAA,IAAW,OAAA,CAAQ,cAAc,CAAA,IAAK,gCAAA;AAEzD,IAAM,GAAA,GAAM,GAAG,MAAA,CAAO;AAAA,EAC3B,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS,GAAA;AAAA,EACT,KAAA,EAAO;AAAA,IACL,aAAA,EAAe;AAAA,MACb,CAAC,EAAE,OAAA,EAAQ,KAAM;AACf,QAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,kBAAA,EAAmB;AACjD,QAAA,MAAM,OAAA,GAAU,cAAc,MAAM,CAAA;AACpC,QAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,QAChC;AAIA,QAAA,IAAI,CAAC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,gBAAgB,CAAA,EAAG;AACtD,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,gBAAA,EAAkB,oBAAoB,CAAA;AAAA,QACxE;AAIA,QAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACnC,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,UAAA,EAAY,iBAAiB,CAAA;AAAA,QAC/D;AAEA,QAAA,MAAM,QAAQ,cAAA,EAAe;AAK7B,QAAA,MAAM,SAAA,GAAY,qBAAA,CAAsB,KAAA,EAAO,EAAA,IAAM,IAAI,CAAA;AACzD,QAAA,IAAI,SAAA,EAAW;AACb,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,UAAA,EAAY,SAAS,CAAA;AAAA,QACvD;AAEA,QAAA,MAAM,WAAW,iBAAA,EAAkB;AACnC,QAAA,IAAI,UAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,UAAU,QAAQ,CAAA;AAEhE,QAAA,MAAM,KAAA,GAAQ,aAAa,iBAAA,EAAkB;AAC7C,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,OAAA,CAAQ,QAAQ,GAAA,CAAI,WAAA,CAAY,aAAA,EAAe,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAA;AAAA,QAClE;AAIA,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,QAAA,EAAU,MAAM,EAAE,CAAA;AAClD,UAAA,IAAI,KAAA,CAAM,MAAM,OAAA,CAAQ,OAAA,CAAQ,IAAI,WAAA,CAAY,UAAA,EAAY,MAAM,IAAI,CAAA;AACtE,UAAA,IAAI,KAAA,CAAM,eAAA;AACR,YAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,qBAAA,EAAuB,MAAM,eAAe,CAAA;AAC9E,UAAA,IAAI,KAAA,CAAM,aAAA;AACR,YAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,mBAAA,EAAqB,MAAM,aAAa,CAAA;AAAA,QAC5E;AAAA,MACF,CAAA;AAAA;AAAA,MAEA,gBAAA,CAAiB;AAAA,KACnB;AAAA,IACA,aAAA,EAAe,CAAC,gBAAA,CAAiB,KAAK;AAAA;AAE1C,CAAC;AAEM,IAAM,GAAA,GAAM,GAAG,MAAA,CAAO;AAAA,EAC3B,MAAA,EAAQ,2BAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAC;AAUM,IAAM,QAAA,GAAW,GAAG,MAAA,CAAO;AAAA,EAChC,MAAA,EAAQ,iCAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAC","file":"chunk-S7QZUBXM.js","sourcesContent":["/**\n * The engine's own build version, injected by tsup `define` when dist is\n * built. Falls back to 'dev' when the source runs unbundled (vitest, direct\n * src imports in the monorepo).\n *\n * Exposed at runtime as `salla.versions.engine` by `useTwilightInit` so a\n * storefront can always be asked which engine build rendered it.\n */\nexport const ENGINE_VERSION: string =\n  typeof __TWILIGHT_ENGINE_VERSION__ !== 'undefined' ? __TWILIGHT_ENGINE_VERSION__ : 'dev';\n","import type { AfterResponseHook, BeforeRequestHook } from 'ky';\nimport { createIsomorphicFn } from '@tanstack/react-start';\nimport { getCookie } from '@tanstack/react-start/server';\nimport { DEV_SETTINGS_REFRESH_COOKIE } from '../utils/dev-settings-refresh';\n\n/**\n * A dev server reuses a store's settings for up to an hour.\n *\n * Every server render asks the API for `store/settings`, and a developer clicking\n * around a theme renders dozens of pages a minute. The API answers a burst of\n * settings requests for one store from one address with a challenge, which a\n * server-side fetch cannot pass, so the dev server rendered \"Store Unavailable\"\n * (6.05k challenged `(development; ssr)` calls in the 7 days to 2026-10-25). In\n * development, on the server, the same request within {@link DEV_SETTINGS_TTL_MS}\n * is answered from memory instead. An hour because the API counts settings\n * requests per hour, so one fetch an hour can never reach its limit; the theme\n * editor's \"Fetch fresh store data\" fetches sooner, and says how old the settings\n * are. A production build never runs it: `import.meta.env.DEV` is statically\n * false there.\n */\nexport const DEV_SETTINGS_TTL_MS = 60 * 60_000;\n\n/** Marks an answer from memory, so the store step does not file it again. */\nconst HIT_HEADER = 'x-twilight-dev-cache';\n\n/** When the answer was really fetched from the API (epoch ms), on fresh answers and reused ones alike. */\nconst FETCHED_AT_HEADER = 'x-twilight-dev-fetched-at';\n\n/**\n * When the dev server fetched these settings from the API, read off the answer the\n * cache handed back; `undefined` when the cache did not handle the call (a\n * production build, the browser, a test), so nothing new reaches the settings there.\n */\nexport function devSettingsFetchedAt(headers: Headers | undefined): number | undefined {\n  const at = Number(headers?.get(FETCHED_AT_HEADER));\n  return Number.isFinite(at) && at > 0 ? at : undefined;\n}\n\n/**\n * Not carried over to an answer from memory: the body is stored decoded, so its\n * original encoding and length no longer describe it.\n */\nconst DROPPED_HEADERS = new Set(['content-encoding', 'content-length']);\n\ninterface Entry {\n  body: string;\n  status: number;\n  statusText: string;\n  headers: [string, string][];\n  fetchedAt: number;\n  /** The refresh cookie's value when this answer was fetched. */\n  refresh: string | null;\n}\n\nexport interface DevSettingsCacheOptions {\n  /** Whether this call may use the cache at all. */\n  enabled: () => boolean;\n  /** The current value of {@link DEV_SETTINGS_REFRESH_COOKIE}, or null. */\n  refreshToken: () => string | null;\n  now?: () => number;\n  ttlMs?: number;\n  /** Called the first time an answer comes from memory. */\n  onFirstHit?: () => void;\n}\n\nfunction isSettingsRequest(request: Request): boolean {\n  if (request.method !== 'GET') return false;\n  try {\n    return new URL(request.url).pathname.endsWith('/store/settings');\n  } catch {\n    return false;\n  }\n}\n\n/**\n * An answer `requestSettings` accepts: JSON carrying `data`. A 200 without it is\n * refused there as \"Store Unavailable\"; kept here, it would be refused for the next\n * hour too, after the API had recovered.\n */\nfunction hasSettings(body: string): boolean {\n  try {\n    return Boolean((JSON.parse(body) as { data?: unknown } | null)?.data);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * The request as the API receives it: method, URL and every header the client's\n * hooks set. Keyed on the request itself rather than on the inputs that build it,\n * so a header added to the client later cannot be missing from the key.\n */\nfunction keyOf(request: Request): string {\n  const headers = [...request.headers].map(([name, value]) => `${name}: ${value}`).join('\\n');\n  return `${request.method} ${request.url}\\n${headers}`;\n}\n\n/**\n * The two ky hooks behind the cache: `lookup` runs last among `beforeRequest`, once\n * every header is set, and `store` among `afterResponse`. Only an answer with\n * settings in it is kept, so a timeout, a 429, a challenge or an empty 200 is asked\n * again on the next render.\n */\nexport function createDevSettingsCache(options: DevSettingsCacheOptions) {\n  const {\n    enabled,\n    refreshToken,\n    now = Date.now,\n    ttlMs = DEV_SETTINGS_TTL_MS,\n    onFirstHit,\n  } = options;\n  const entries = new Map<string, Entry>();\n  let announced = false;\n\n  const isFresh = (entry: Entry): boolean =>\n    now() - entry.fetchedAt < ttlMs && entry.refresh === refreshToken();\n\n  const answerOf = (entry: Entry, hit: boolean): Response => {\n    const headers = new Headers(entry.headers);\n    headers.set(FETCHED_AT_HEADER, String(entry.fetchedAt));\n    if (hit) headers.set(HIT_HEADER, 'hit');\n    return new Response(entry.body, {\n      status: entry.status,\n      statusText: entry.statusText,\n      headers,\n    });\n  };\n\n  const lookup: BeforeRequestHook = ({ request }) => {\n    if (!enabled() || !isSettingsRequest(request)) return;\n    const key = keyOf(request);\n    const entry = entries.get(key);\n    if (!entry) return;\n    if (!isFresh(entry)) {\n      entries.delete(key);\n      return;\n    }\n    if (!announced) {\n      announced = true;\n      onFirstHit?.();\n    }\n    return answerOf(entry, true);\n  };\n\n  const store: AfterResponseHook = async ({ request, response }) => {\n    if (!enabled() || !isSettingsRequest(request) || !response.ok) return;\n    if (response.headers.has(HIT_HEADER)) return;\n    // ky hands each hook a clone, so reading it leaves the answer it returns intact.\n    const body = await response.text();\n    if (!hasSettings(body)) return;\n    for (const [key, entry] of entries) {\n      if (now() - entry.fetchedAt >= ttlMs) entries.delete(key);\n    }\n    const entry: Entry = {\n      body,\n      status: response.status,\n      statusText: response.statusText,\n      headers: [...response.headers].filter(([name]) => !DROPPED_HEADERS.has(name)),\n      fetchedAt: now(),\n      refresh: refreshToken(),\n    };\n    entries.set(keyOf(request), entry);\n    // Handed on in place of the API's own answer, so it carries its fetch time too.\n    return answerOf(entry, false);\n  };\n\n  return { lookup, store, clear: () => entries.clear() };\n}\n\nconst readRefreshCookie = createIsomorphicFn()\n  .server((): string | null => {\n    try {\n      return getCookie(DEV_SETTINGS_REFRESH_COOKIE) ?? null;\n    } catch {\n      return null;\n    }\n  })\n  .client((): string | null => null);\n\nexport const devSettingsCache = createDevSettingsCache({\n  // A dev server's render only. A production build has `DEV` statically false,\n  // the browser keeps the settings it was handed in its query cache, and vitest\n  // runs in `test` mode, where every test wants the request it mocked.\n  enabled: () =>\n    import.meta.env.DEV && import.meta.env.MODE !== 'test' && typeof document === 'undefined',\n  refreshToken: readRefreshCookie,\n  onFirstHit: () =>\n    console.warn(\n      `[twilight] Store settings are reused for up to ${DEV_SETTINGS_TTL_MS / 60_000} minutes while you develop, to stay under the Salla API's rate limit. To see a change you made in the dashboard, press \"Fetch fresh store data\" in the theme editor's side panel: it also says when they were last fetched.`\n    ),\n});\n","import ky from 'ky';\nimport { createIsomorphicFn } from '@tanstack/react-start';\nimport { getCookie } from '@tanstack/react-start/server';\nimport { getStoreIdentifier } from '../utils/sdk-helpers';\nimport { resolveThemeVersionId } from '../utils/theme-version';\nimport { getInjectedRuntimeEnv, readEnv } from '../utils/runtime-env';\nimport { getTwilightContext } from '../twilight/context';\nimport { ENGINE_VERSION } from '../utils/engine-version';\nimport { devSettingsCache } from './dev-settings-cache';\nimport {\n  AUTH_TOKEN_COOKIE_NAME,\n  CURRENCY_COOKIE_NAME,\n  extractCurrencyFromCookies,\n  extractScopeFromCookies,\n  toCurrencyCode,\n  extractTokenFromCookies,\n  readSdkScope,\n  type ActiveScope,\n} from '../utils/cookies';\n\n// The twilight module store doesn't reliably carry authToken into every scope: on the\n// SERVER workerd has no AsyncLocalStorage, and on BOTH sides this api client can live in a\n// different module instance than the one rootBeforeLoad populates (engine subpath import vs\n// engine-internal relative import). So `getTwilightContext().authToken` is often null even\n// for logged-in users → API calls (orders/customer/…) return `token_not_provided` (400).\n// Read the token directly from the request cookie (server) or document.cookie / salla.storage\n// (client) as a fallback. The server-only import is stripped from the client bundle by\n// createIsomorphicFn.\nconst readFallbackToken = createIsomorphicFn()\n  .server((): string | null => {\n    try {\n      return getCookie(AUTH_TOKEN_COOKIE_NAME) ?? null;\n    } catch {\n      return null;\n    }\n  })\n  .client((): string | null => {\n    const fromCookie =\n      typeof document !== 'undefined'\n        ? extractTokenFromCookies(document.cookie, AUTH_TOKEN_COOKIE_NAME)\n        : null;\n    if (fromCookie) return fromCookie;\n    const storage = typeof window !== 'undefined' ? window.salla?.storage : undefined;\n    const fromStorage =\n      typeof storage?.get === 'function' ? storage.get(AUTH_TOKEN_COOKIE_NAME) : null;\n    if (typeof fromStorage === 'string' && fromStorage) return fromStorage;\n    // `?token=` webview injection lands only on the SDK's axios instance\n    const fromSdkApi = typeof window !== 'undefined' ? window.salla?.api?.token : undefined;\n    return typeof fromSdkApi === 'string' && fromSdkApi ? fromSdkApi : null;\n  });\n\n/**\n * The auth token as the api client sees it: twilight context first, cookie/storage fallback.\n * Use this (not `getTwilightContext().authToken`, which is often null for logged-in users —\n * see the note above) to decide whether an authenticated-only query should run.\n */\nexport const getAuthToken = (): string | null =>\n  getTwilightContext().authToken ?? readFallbackToken();\n\nconst readRequestCurrency = createIsomorphicFn()\n  .server((): string | null => {\n    try {\n      return toCurrencyCode(getCookie(CURRENCY_COOKIE_NAME));\n    } catch {\n      return null;\n    }\n  })\n  .client((): string | null => null);\n\n/**\n * The currency the visitor chose, from the `s-curr` cookie the SDK writes: the API\n * answers in the store's own currency unless the request names one.\n */\nexport function getActiveCurrency(): string | null;\nexport function getActiveCurrency(fallback: string): string;\nexport function getActiveCurrency(fallback: string | null = null): string | null {\n  const chosen =\n    typeof document !== 'undefined'\n      ? extractCurrencyFromCookies(document.cookie)\n      : readRequestCurrency();\n  return chosen ?? fallback;\n}\n\nconst API_HEADERS = {\n  ACCEPT: 'accept',\n  ACCEPT_LANGUAGE: 'accept-language',\n  APP_OS: 's-app-os',\n  APP_VERSION: 's-app-version',\n  RAY: 's-ray',\n  SOURCE: 's-source',\n  THEME_TYPE: 's-theme-type',\n  STORE_API_VERSION: 's-store-api-version',\n  REQUESTED_WITH: 'x-requested-with',\n  CF_PROXY_WHITELIST: 's-cf-proxy-whitelist-id',\n  STORE_IDENTIFIER: 'store-identifier',\n  CURRENCY: 'currency',\n  AUTHORIZATION: 'Authorization',\n  VERSION_ID: 's-version-id',\n  SCOPE_ID: 's-scope-id',\n  SCOPE_TYPE: 's-scope-type',\n  SCOPE_ALLOCATION_TYPE: 's-scope-allocation-type',\n  SCOPE_ALLOCATION_ID: 's-scope-allocation-id',\n  USER_AGENT: 'user-agent',\n} as const;\n\n/**\n * The header every Salla API call is answered by store.\n *\n * Exported because a caller that already knows which store it is asking about\n * must be able to say so on the request itself — see `store.settings`. Without\n * it the only way to name a store is the ambient resolver, and \"the identifier\n * I checked\" and \"the identifier that was sent\" become two different things.\n */\nexport const STORE_IDENTIFIER_HEADER = API_HEADERS.STORE_IDENTIFIER;\n\n/**\n * Active scope: the market plus its branch allocation, as the SDK stores it. On the\n * client it comes from `salla.storage.get('scope')`; before the SDK hydrates storage\n * it falls back to the `scope` cookie the theme mirrors that selection into (see\n * writeScopeCookie), then to the scope twilightMiddleware seeded from the same\n * cookie on the server. Requests vary by the `s-scope-*` headers, so React Query\n * keys must include this to avoid serving another branch's cached categories/products.\n *\n * The cookie step matters for hydration: the SDK is not guaranteed to have\n * populated `salla.storage` by the time the client rebuilds a dehydrated query\n * key, and without it the client would compute null against a scoped SSR key.\n */\nexport const getActiveScope = (): ActiveScope | null => {\n  // `!== undefined`, not `!= null`: a null here is the SDK authoritatively saying \"no branch\n  // selected\", which must beat a cookie left over from the previous selection. Only a\n  // not-yet-ready storage API (undefined) falls through to the cookie.\n  const fromStorage = readSdkScope();\n  if (fromStorage !== undefined) return fromStorage;\n\n  if (typeof document !== 'undefined') {\n    const fromCookie = extractScopeFromCookies(document.cookie);\n    if (fromCookie != null) return fromCookie;\n  }\n\n  try {\n    return getTwilightContext().scope;\n  } catch {\n    return null;\n  }\n};\n\n/** {@link getActiveScope} reduced to the market id. */\nexport const getActiveScopeId = (): string | null => getActiveScope()?.id ?? null;\n\nconst sharedHeaders = (locale: string) => ({\n  [API_HEADERS.ACCEPT]: 'application/json' as const,\n  [API_HEADERS.ACCEPT_LANGUAGE]: locale,\n  [API_HEADERS.APP_OS]: 'browser',\n  [API_HEADERS.APP_VERSION]: '2.14.363',\n  [API_HEADERS.RAY]: '50',\n  [API_HEADERS.SOURCE]: 'twilight',\n  [API_HEADERS.THEME_TYPE]: 'react',\n  [API_HEADERS.STORE_API_VERSION]: 'swoole',\n  [API_HEADERS.REQUESTED_WITH]: 'XMLHttpRequest',\n  [API_HEADERS.CF_PROXY_WHITELIST]: '019a2f78-a64c-7edb-proxy-whitelist-id-9a3a-17afda90f03a',\n});\n\n/**\n * Who a server-rendered call says it is.\n *\n * Every theme worker reaches api.salla.dev from Cloudflare's one Workers address, so\n * salla.dev's per-IP rate limits counted every React store as a single client and\n * refused the calls each page makes (`store/settings` among them: \"Store Unavailable\").\n * The zone skips rate limiting for a User-Agent shaped `Salla-<Name>/<N.N.N> (<env>; <meta>)`\n * from Cloudflare's or AWS's networks, the convention Salla's other services already send.\n *\n * Built from fixed parts: the zone's pattern takes only digits and dots for the version,\n * so a prerelease suffix is dropped, and an unbundled engine (`dev`) reads as `0.0.0`.\n */\nconst SERVER_USER_AGENT = `Salla-TwilightReact/${\n  /^\\d+(?:\\.\\d+)*/.exec(ENGINE_VERSION)?.[0] ?? '0.0.0'\n} (${import.meta.env.DEV ? 'development' : 'production'}; ssr)`;\n\n/**\n * Store API base. `VITE_API_URL` override points a preview at a branch backend; unset → prod\n * `api.salla.dev`. Resolution order matters: the value the SSR worker resolved (published into\n * the head, since worker `vars` are server-only `process.env` and never reach the browser\n * bundle) wins, so the hydrated client keeps talking to the backend that rendered the page.\n */\n\nconst STORE_API_BASE =\n  getInjectedRuntimeEnv().apiBase || readEnv('VITE_API_URL') || 'https://api.salla.dev/store/v1';\n\nexport const api = ky.extend({\n  prefix: STORE_API_BASE,\n  timeout: 8000,\n  hooks: {\n    beforeRequest: [\n      ({ request }) => {\n        const { locale, authToken } = getTwilightContext();\n        const headers = sharedHeaders(locale);\n        for (const [key, value] of Object.entries(headers)) {\n          request.headers.set(key, value);\n        }\n        // Only when the caller did not say. `headers.set` here would otherwise\n        // overwrite a per-request identifier with the ambient one, which is a\n        // silent way to answer a question about one store with another's data.\n        if (!request.headers.get(API_HEADERS.STORE_IDENTIFIER)) {\n          request.headers.set(API_HEADERS.STORE_IDENTIFIER, getStoreIdentifier());\n        }\n\n        // Server only. A browser call comes from the shopper's own address and is\n        // counted against it, which is what the zone's limits are for.\n        if (typeof document === 'undefined') {\n          request.headers.set(API_HEADERS.USER_AGENT, SERVER_USER_AGENT);\n        }\n\n        const scope = getActiveScope();\n\n        // The version the request asked for, else the one the settings named for\n        // this scope. Absent means \"whatever is live\", which is what an ordinary\n        // storefront visit wants — so a null is left off rather than sent empty.\n        const versionId = resolveThemeVersionId(scope?.id ?? null);\n        if (versionId) {\n          request.headers.set(API_HEADERS.VERSION_ID, versionId);\n        }\n\n        const currency = getActiveCurrency();\n        if (currency) request.headers.set(API_HEADERS.CURRENCY, currency);\n\n        const token = authToken ?? readFallbackToken();\n        if (token) {\n          request.headers.set(API_HEADERS.AUTHORIZATION, `Bearer ${token}`);\n        }\n\n        // The same four the SDK's own client sends. The API resolves stock per\n        // allocation: id alone asks about the market, not the branch the shopper chose.\n        if (scope) {\n          request.headers.set(API_HEADERS.SCOPE_ID, scope.id);\n          if (scope.type) request.headers.set(API_HEADERS.SCOPE_TYPE, scope.type);\n          if (scope.allocation_type)\n            request.headers.set(API_HEADERS.SCOPE_ALLOCATION_TYPE, scope.allocation_type);\n          if (scope.allocation_id)\n            request.headers.set(API_HEADERS.SCOPE_ALLOCATION_ID, scope.allocation_id);\n        }\n      },\n      // Last, so it keys on the request with every header above set.\n      devSettingsCache.lookup,\n    ],\n    afterResponse: [devSettingsCache.store],\n  },\n});\n\nexport const cdn = ky.extend({\n  prefix: 'https://cdn.salla.network',\n  timeout: 5000,\n});\n\n/**\n * The merchant uploader's public bucket, `admin-uploader-prod`.\n *\n * A different host from {@link cdn} and a different thing behind it: this one\n * is an R2 custom domain, so a read never passes through a worker. Storefront\n * translations live here, per language, under `translations/` — see\n * `api/translations.ts`.\n */\nexport const filesCdn = ky.extend({\n  prefix: 'https://cdn.files.salla.network',\n  timeout: 5000,\n});\n"]}
+{"version":3,"sources":["../src/utils/engine-version.ts","../src/api/dev-settings-cache.ts","../src/api/client.ts"],"names":["entry","createIsomorphicFn","getCookie"],"mappings":";;;;;;;;;AAQO,IAAM,cAAA,GAC0C,SAAA;ACWhD,IAAM,sBAAsB,EAAA,GAAK,GAAA;AAGxC,IAAM,UAAA,GAAa,sBAAA;AAGnB,IAAM,iBAAA,GAAoB,2BAAA;AAOnB,SAAS,qBAAqB,OAAA,EAAkD;AACrF,EAAA,MAAM,EAAA,GAAK,MAAA,CAAO,OAAA,EAAS,GAAA,CAAI,iBAAiB,CAAC,CAAA;AACjD,EAAA,OAAO,OAAO,QAAA,CAAS,EAAE,CAAA,IAAK,EAAA,GAAK,IAAI,EAAA,GAAK,MAAA;AAC9C;AAMA,IAAM,kCAAkB,IAAI,GAAA,CAAI,CAAC,kBAAA,EAAoB,gBAAgB,CAAC,CAAA;AAuBtE,SAAS,kBAAkB,OAAA,EAA2B;AACpD,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,KAAA,EAAO,OAAO,KAAA;AACrC,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAA,CAAS,SAAS,iBAAiB,CAAA;AAAA,EACjE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAOA,SAAS,YAAY,IAAA,EAAuB;AAC1C,EAAA,IAAI;AACF,IAAA,OAAO,OAAA,CAAS,IAAA,CAAK,KAAA,CAAM,IAAI,GAAiC,IAAI,CAAA;AAAA,EACtE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAOA,SAAS,MAAM,OAAA,EAA0B;AACvC,EAAA,MAAM,UAAU,CAAC,GAAG,QAAQ,OAAO,CAAA,CAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAA,KAAM,GAAG,IAAI,CAAA,EAAA,EAAK,KAAK,CAAA,CAAE,CAAA,CAAE,KAAK,IAAI,CAAA;AAC1F,EAAA,OAAO,CAAA,EAAG,OAAA,CAAQ,MAAM,CAAA,CAAA,EAAI,QAAQ,GAAG;AAAA,EAAK,OAAO,CAAA,CAAA;AACrD;AAQO,SAAS,uBAAuB,OAAA,EAAkC;AACvE,EAAA,MAAM;AAAA,IACJ,OAAA;AAAA,IACA,YAAA;AAAA,IACA,MAAM,IAAA,CAAK,GAAA;AAAA,IACX,KAAA,GAAQ,mBAAA;AAAA,IACR;AAAA,GACF,GAAI,OAAA;AACJ,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAmB;AACvC,EAAA,IAAI,SAAA,GAAY,KAAA;AAEhB,EAAA,MAAM,OAAA,GAAU,CAAC,KAAA,KACf,GAAA,EAAI,GAAI,MAAM,SAAA,GAAY,KAAA,IAAS,KAAA,CAAM,OAAA,KAAY,YAAA,EAAa;AAEpE,EAAA,MAAM,QAAA,GAAW,CAAC,KAAA,EAAc,GAAA,KAA2B;AACzD,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,KAAA,CAAM,OAAO,CAAA;AACzC,IAAA,OAAA,CAAQ,GAAA,CAAI,iBAAA,EAAmB,MAAA,CAAO,KAAA,CAAM,SAAS,CAAC,CAAA;AACtD,IAAA,IAAI,GAAA,EAAK,OAAA,CAAQ,GAAA,CAAI,UAAA,EAAY,KAAK,CAAA;AACtC,IAAA,OAAO,IAAI,QAAA,CAAS,KAAA,CAAM,IAAA,EAAM;AAAA,MAC9B,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB;AAAA,KACD,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,MAAM,MAAA,GAA4B,CAAC,EAAE,OAAA,EAAQ,KAAM;AACjD,IAAA,IAAI,CAAC,OAAA,EAAQ,IAAK,CAAC,iBAAA,CAAkB,OAAO,CAAA,EAAG;AAC/C,IAAA,MAAM,GAAA,GAAM,MAAM,OAAO,CAAA;AACzB,IAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAC7B,IAAA,IAAI,CAAC,KAAA,EAAO;AACZ,IAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnB,MAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAClB,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,SAAA,GAAY,IAAA;AACZ,MAAA,UAAA,IAAa;AAAA,IACf;AACA,IAAA,OAAO,QAAA,CAAS,OAAO,IAAI,CAAA;AAAA,EAC7B,CAAA;AAEA,EAAA,MAAM,KAAA,GAA2B,OAAO,EAAE,OAAA,EAAS,UAAS,KAAM;AAChE,IAAA,IAAI,CAAC,SAAQ,IAAK,CAAC,kBAAkB,OAAO,CAAA,IAAK,CAAC,QAAA,CAAS,EAAA,EAAI;AAC/D,IAAA,IAAI,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,UAAU,CAAA,EAAG;AAEtC,IAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,IAAA,IAAI,CAAC,WAAA,CAAY,IAAI,CAAA,EAAG;AACxB,IAAA,KAAA,MAAW,CAAC,GAAA,EAAKA,MAAK,CAAA,IAAK,OAAA,EAAS;AAClC,MAAA,IAAI,KAAI,GAAIA,MAAAA,CAAM,aAAa,KAAA,EAAO,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,IAC1D;AACA,IAAA,MAAM,KAAA,GAAe;AAAA,MACnB,IAAA;AAAA,MACA,QAAQ,QAAA,CAAS,MAAA;AAAA,MACjB,YAAY,QAAA,CAAS,UAAA;AAAA,MACrB,OAAA,EAAS,CAAC,GAAG,QAAA,CAAS,OAAO,CAAA,CAAE,MAAA,CAAO,CAAC,CAAC,IAAI,CAAA,KAAM,CAAC,eAAA,CAAgB,GAAA,CAAI,IAAI,CAAC,CAAA;AAAA,MAC5E,WAAW,GAAA,EAAI;AAAA,MACf,SAAS,YAAA;AAAa,KACxB;AACA,IAAA,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,OAAO,CAAA,EAAG,KAAK,CAAA;AAEjC,IAAA,OAAO,QAAA,CAAS,OAAO,KAAK,CAAA;AAAA,EAC9B,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,KAAA,EAAO,OAAO,MAAM,OAAA,CAAQ,OAAM,EAAE;AACvD;AAEA,IAAM,iBAAA,GAAoB,kBAAA,EAAmB,CAC1C,MAAA,CAAO,MAAqB;AAC3B,EAAA,IAAI;AACF,IAAA,OAAO,SAAA,CAAU,2BAA2B,CAAA,IAAK,IAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAC,CAAA,CACA,MAAA,CAAO,MAAqB,IAAI,CAAA;AAE5B,IAAM,mBAAmB,sBAAA,CAAuB;AAAA;AAAA;AAAA;AAAA,EAIrD,OAAA,EAAS,MACP,MAAA,CAAA,IAAA,CAAY,GAAA,CAAI,GAAA,IAAO,YAAY,GAAA,CAAI,IAAA,KAAS,MAAA,IAAU,OAAO,QAAA,KAAa,WAAA;AAAA,EAChF,YAAA,EAAc,iBAAA;AAAA,EACd,UAAA,EAAY,MACV,OAAA,CAAQ,IAAA;AAAA,IACN,CAAA,+CAAA,EAAkD,sBAAsB,GAAM,CAAA,2NAAA;AAAA;AAEpF,CAAC,CAAA;;;AClKD,IAAM,iBAAA,GAAoBC,kBAAAA,EAAmB,CAC1C,MAAA,CAAO,MAAqB;AAC3B,EAAA,IAAI;AACF,IAAA,OAAOC,SAAAA,CAAU,sBAAsB,CAAA,IAAK,IAAA;AAAA,EAC9C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAC,CAAA,CACA,OAAO,MAAqB;AAC3B,EAAA,MAAM,UAAA,GACJ,OAAO,QAAA,KAAa,WAAA,GAChB,wBAAwB,QAAA,CAAS,MAAA,EAAQ,sBAAsB,CAAA,GAC/D,IAAA;AACN,EAAA,IAAI,YAAY,OAAO,UAAA;AACvB,EAAA,MAAM,UAAU,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,OAAO,OAAA,GAAU,MAAA;AACxE,EAAA,MAAM,WAAA,GACJ,OAAO,OAAA,EAAS,GAAA,KAAQ,aAAa,OAAA,CAAQ,GAAA,CAAI,sBAAsB,CAAA,GAAI,IAAA;AAC7E,EAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,IAAY,WAAA,EAAa,OAAO,WAAA;AAE3D,EAAA,MAAM,aAAa,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,KAAA,EAAO,KAAK,KAAA,GAAQ,MAAA;AAC9E,EAAA,OAAO,OAAO,UAAA,KAAe,QAAA,IAAY,UAAA,GAAa,UAAA,GAAa,IAAA;AACrE,CAAC,CAAA;AAOI,IAAM,YAAA,GAAe,MAC1B,kBAAA,EAAmB,CAAE,aAAa,iBAAA;AAEpC,IAAM,mBAAA,GAAsBD,kBAAAA,EAAmB,CAC5C,MAAA,CAAO,MAAqB;AAC3B,EAAA,IAAI;AACF,IAAA,OAAO,cAAA,CAAeC,SAAAA,CAAU,oBAAoB,CAAC,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAC,CAAA,CACA,MAAA,CAAO,MAAqB,IAAI,CAAA;AAQ5B,SAAS,iBAAA,CAAkB,WAA0B,IAAA,EAAqB;AAC/E,EAAA,MAAM,MAAA,GACJ,OAAO,QAAA,KAAa,WAAA,GAChB,2BAA2B,QAAA,CAAS,MAAM,IAC1C,mBAAA,EAAoB;AAC1B,EAAA,OAAO,MAAA,IAAU,QAAA;AACnB;AAEA,IAAM,WAAA,GAAc;AAAA,EAClB,MAAA,EAAQ,QAAA;AAAA,EACR,eAAA,EAAiB,iBAAA;AAAA,EACjB,MAAA,EAAQ,UAAA;AAAA,EACR,WAAA,EAAa,eAAA;AAAA,EACb,GAAA,EAAK,OAAA;AAAA,EACL,MAAA,EAAQ,UAAA;AAAA,EACR,UAAA,EAAY,cAAA;AAAA,EACZ,iBAAA,EAAmB,qBAAA;AAAA,EACnB,cAAA,EAAgB,kBAAA;AAAA,EAChB,kBAAA,EAAoB,yBAAA;AAAA,EACpB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,QAAA,EAAU,UAAA;AAAA,EACV,aAAA,EAAe,eAAA;AAAA,EACf,UAAA,EAAY,cAAA;AAAA,EACZ,QAAA,EAAU,YAAA;AAAA,EACV,UAAA,EAAY,cAAA;AAAA,EACZ,qBAAA,EAAuB,yBAAA;AAAA,EACvB,mBAAA,EAAqB,uBAAA;AAAA,EACrB,UAAA,EAAY;AACd,CAAA;AAUO,IAAM,0BAA0B,WAAA,CAAY;AAc5C,IAAM,iBAAiB,MAA0B;AAItD,EAAA,MAAM,cAAc,YAAA,EAAa;AACjC,EAAA,IAAI,WAAA,KAAgB,QAAW,OAAO,WAAA;AAEtC,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACnC,IAAA,MAAM,UAAA,GAAa,uBAAA,CAAwB,QAAA,CAAS,MAAM,CAAA;AAC1D,IAAA,IAAI,UAAA,IAAc,MAAM,OAAO,UAAA;AAAA,EACjC;AAEA,EAAA,IAAI;AACF,IAAA,OAAO,oBAAmB,CAAE,KAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAGO,IAAM,gBAAA,GAAmB,MAAqB,cAAA,EAAe,EAAG,EAAA,IAAM;AAE7E,IAAM,aAAA,GAAgB,CAAC,MAAA,MAAoB;AAAA,EACzC,CAAC,WAAA,CAAY,MAAM,GAAG,kBAAA;AAAA,EACtB,CAAC,WAAA,CAAY,eAAe,GAAG,MAAA;AAAA,EAC/B,CAAC,WAAA,CAAY,MAAM,GAAG,SAAA;AAAA,EACtB,CAAC,WAAA,CAAY,WAAW,GAAG,UAAA;AAAA,EAC3B,CAAC,WAAA,CAAY,GAAG,GAAG,IAAA;AAAA,EACnB,CAAC,WAAA,CAAY,MAAM,GAAG,UAAA;AAAA,EACtB,CAAC,WAAA,CAAY,UAAU,GAAG,OAAA;AAAA,EAC1B,CAAC,WAAA,CAAY,iBAAiB,GAAG,QAAA;AAAA,EACjC,CAAC,WAAA,CAAY,cAAc,GAAG,gBAAA;AAAA,EAC9B,CAAC,WAAA,CAAY,kBAAkB,GAAG;AACpC,CAAA,CAAA;AAcA,IAAM,iBAAA,GAAoB,CAAA,oBAAA,EACxB,gBAAA,CAAiB,IAAA,CAAK,cAAc,CAAA,GAAI,CAAC,CAAA,IAAK,OAChD,CAAA,EAAA,EAAK,MAAA,CAAA,IAAA,CAAY,GAAA,CAAI,GAAA,GAAM,gBAAgB,YAAY,CAAA,MAAA,CAAA;AASvD,IAAM,iBACJ,qBAAA,EAAsB,CAAE,OAAA,IAAW,OAAA,CAAQ,cAAc,CAAA,IAAK,gCAAA;AAEzD,IAAM,GAAA,GAAM,GAAG,MAAA,CAAO;AAAA,EAC3B,MAAA,EAAQ,cAAA;AAAA,EACR,OAAA,EAAS,GAAA;AAAA,EACT,KAAA,EAAO;AAAA,IACL,aAAA,EAAe;AAAA,MACb,CAAC,EAAE,OAAA,EAAQ,KAAM;AACf,QAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,kBAAA,EAAmB;AACjD,QAAA,MAAM,OAAA,GAAU,cAAc,MAAM,CAAA;AACpC,QAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,QAChC;AAIA,QAAA,IAAI,CAAC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,gBAAgB,CAAA,EAAG;AACtD,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,gBAAA,EAAkB,oBAAoB,CAAA;AAAA,QACxE;AAIA,QAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACnC,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,UAAA,EAAY,iBAAiB,CAAA;AAAA,QAC/D;AAEA,QAAA,MAAM,QAAQ,cAAA,EAAe;AAK7B,QAAA,MAAM,SAAA,GAAY,qBAAA,CAAsB,KAAA,EAAO,EAAA,IAAM,IAAI,CAAA;AACzD,QAAA,IAAI,SAAA,EAAW;AACb,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,UAAA,EAAY,SAAS,CAAA;AAAA,QACvD;AAEA,QAAA,MAAM,WAAW,iBAAA,EAAkB;AACnC,QAAA,IAAI,UAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,UAAU,QAAQ,CAAA;AAEhE,QAAA,MAAM,KAAA,GAAQ,aAAa,iBAAA,EAAkB;AAC7C,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,OAAA,CAAQ,QAAQ,GAAA,CAAI,WAAA,CAAY,aAAA,EAAe,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAA;AAAA,QAClE;AAIA,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,QAAA,EAAU,MAAM,EAAE,CAAA;AAClD,UAAA,IAAI,KAAA,CAAM,MAAM,OAAA,CAAQ,OAAA,CAAQ,IAAI,WAAA,CAAY,UAAA,EAAY,MAAM,IAAI,CAAA;AACtE,UAAA,IAAI,KAAA,CAAM,eAAA;AACR,YAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,qBAAA,EAAuB,MAAM,eAAe,CAAA;AAC9E,UAAA,IAAI,KAAA,CAAM,aAAA;AACR,YAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,mBAAA,EAAqB,MAAM,aAAa,CAAA;AAAA,QAC5E;AAAA,MACF,CAAA;AAAA;AAAA,MAEA,gBAAA,CAAiB;AAAA,KACnB;AAAA,IACA,aAAA,EAAe,CAAC,gBAAA,CAAiB,KAAK;AAAA;AAE1C,CAAC;AAEM,IAAM,GAAA,GAAM,GAAG,MAAA,CAAO;AAAA,EAC3B,MAAA,EAAQ,2BAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAC;AAUM,IAAM,QAAA,GAAW,GAAG,MAAA,CAAO;AAAA,EAChC,MAAA,EAAQ,iCAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAC","file":"chunk-BSGHOYMT.js","sourcesContent":["/**\n * The engine's own build version, injected by tsup `define` when dist is\n * built. Falls back to 'dev' when the source runs unbundled (vitest, direct\n * src imports in the monorepo).\n *\n * Exposed at runtime as `salla.versions.engine` by `useTwilightInit` so a\n * storefront can always be asked which engine build rendered it.\n */\nexport const ENGINE_VERSION: string =\n  typeof __TWILIGHT_ENGINE_VERSION__ !== 'undefined' ? __TWILIGHT_ENGINE_VERSION__ : 'dev';\n","import type { AfterResponseHook, BeforeRequestHook } from 'ky';\nimport { createIsomorphicFn } from '@tanstack/react-start';\nimport { getCookie } from '@tanstack/react-start/server';\nimport { DEV_SETTINGS_REFRESH_COOKIE } from '../utils/dev-settings-refresh';\n\n/**\n * A dev server reuses a store's settings for up to an hour.\n *\n * Every server render asks the API for `store/settings`, and a developer clicking\n * around a theme renders dozens of pages a minute. The API answers a burst of\n * settings requests for one store from one address with a challenge, which a\n * server-side fetch cannot pass, so the dev server rendered \"Store Unavailable\"\n * (6.05k challenged `(development; ssr)` calls in the 7 days to 2026-10-25). In\n * development, on the server, the same request within {@link DEV_SETTINGS_TTL_MS}\n * is answered from memory instead. An hour because the API counts settings\n * requests per hour, so one fetch an hour can never reach its limit; the theme\n * editor's \"Fetch fresh store data\" fetches sooner, and says how old the settings\n * are. A production build never runs it: `import.meta.env.DEV` is statically\n * false there.\n */\nexport const DEV_SETTINGS_TTL_MS = 60 * 60_000;\n\n/** Marks an answer from memory, so the store step does not file it again. */\nconst HIT_HEADER = 'x-twilight-dev-cache';\n\n/** When the answer was really fetched from the API (epoch ms), on fresh answers and reused ones alike. */\nconst FETCHED_AT_HEADER = 'x-twilight-dev-fetched-at';\n\n/**\n * When the dev server fetched these settings from the API, read off the answer the\n * cache handed back; `undefined` when the cache did not handle the call (a\n * production build, the browser, a test), so nothing new reaches the settings there.\n */\nexport function devSettingsFetchedAt(headers: Headers | undefined): number | undefined {\n  const at = Number(headers?.get(FETCHED_AT_HEADER));\n  return Number.isFinite(at) && at > 0 ? at : undefined;\n}\n\n/**\n * Not carried over to an answer from memory: the body is stored decoded, so its\n * original encoding and length no longer describe it.\n */\nconst DROPPED_HEADERS = new Set(['content-encoding', 'content-length']);\n\ninterface Entry {\n  body: string;\n  status: number;\n  statusText: string;\n  headers: [string, string][];\n  fetchedAt: number;\n  /** The refresh cookie's value when this answer was fetched. */\n  refresh: string | null;\n}\n\nexport interface DevSettingsCacheOptions {\n  /** Whether this call may use the cache at all. */\n  enabled: () => boolean;\n  /** The current value of {@link DEV_SETTINGS_REFRESH_COOKIE}, or null. */\n  refreshToken: () => string | null;\n  now?: () => number;\n  ttlMs?: number;\n  /** Called the first time an answer comes from memory. */\n  onFirstHit?: () => void;\n}\n\nfunction isSettingsRequest(request: Request): boolean {\n  if (request.method !== 'GET') return false;\n  try {\n    return new URL(request.url).pathname.endsWith('/store/settings');\n  } catch {\n    return false;\n  }\n}\n\n/**\n * An answer `requestSettings` accepts: JSON carrying `data`. A 200 without it is\n * refused there as \"Store Unavailable\"; kept here, it would be refused for the next\n * hour too, after the API had recovered.\n */\nfunction hasSettings(body: string): boolean {\n  try {\n    return Boolean((JSON.parse(body) as { data?: unknown } | null)?.data);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * The request as the API receives it: method, URL and every header the client's\n * hooks set. Keyed on the request itself rather than on the inputs that build it,\n * so a header added to the client later cannot be missing from the key.\n */\nfunction keyOf(request: Request): string {\n  const headers = [...request.headers].map(([name, value]) => `${name}: ${value}`).join('\\n');\n  return `${request.method} ${request.url}\\n${headers}`;\n}\n\n/**\n * The two ky hooks behind the cache: `lookup` runs last among `beforeRequest`, once\n * every header is set, and `store` among `afterResponse`. Only an answer with\n * settings in it is kept, so a timeout, a 429, a challenge or an empty 200 is asked\n * again on the next render.\n */\nexport function createDevSettingsCache(options: DevSettingsCacheOptions) {\n  const {\n    enabled,\n    refreshToken,\n    now = Date.now,\n    ttlMs = DEV_SETTINGS_TTL_MS,\n    onFirstHit,\n  } = options;\n  const entries = new Map<string, Entry>();\n  let announced = false;\n\n  const isFresh = (entry: Entry): boolean =>\n    now() - entry.fetchedAt < ttlMs && entry.refresh === refreshToken();\n\n  const answerOf = (entry: Entry, hit: boolean): Response => {\n    const headers = new Headers(entry.headers);\n    headers.set(FETCHED_AT_HEADER, String(entry.fetchedAt));\n    if (hit) headers.set(HIT_HEADER, 'hit');\n    return new Response(entry.body, {\n      status: entry.status,\n      statusText: entry.statusText,\n      headers,\n    });\n  };\n\n  const lookup: BeforeRequestHook = ({ request }) => {\n    if (!enabled() || !isSettingsRequest(request)) return;\n    const key = keyOf(request);\n    const entry = entries.get(key);\n    if (!entry) return;\n    if (!isFresh(entry)) {\n      entries.delete(key);\n      return;\n    }\n    if (!announced) {\n      announced = true;\n      onFirstHit?.();\n    }\n    return answerOf(entry, true);\n  };\n\n  const store: AfterResponseHook = async ({ request, response }) => {\n    if (!enabled() || !isSettingsRequest(request) || !response.ok) return;\n    if (response.headers.has(HIT_HEADER)) return;\n    // ky hands each hook a clone, so reading it leaves the answer it returns intact.\n    const body = await response.text();\n    if (!hasSettings(body)) return;\n    for (const [key, entry] of entries) {\n      if (now() - entry.fetchedAt >= ttlMs) entries.delete(key);\n    }\n    const entry: Entry = {\n      body,\n      status: response.status,\n      statusText: response.statusText,\n      headers: [...response.headers].filter(([name]) => !DROPPED_HEADERS.has(name)),\n      fetchedAt: now(),\n      refresh: refreshToken(),\n    };\n    entries.set(keyOf(request), entry);\n    // Handed on in place of the API's own answer, so it carries its fetch time too.\n    return answerOf(entry, false);\n  };\n\n  return { lookup, store, clear: () => entries.clear() };\n}\n\nconst readRefreshCookie = createIsomorphicFn()\n  .server((): string | null => {\n    try {\n      return getCookie(DEV_SETTINGS_REFRESH_COOKIE) ?? null;\n    } catch {\n      return null;\n    }\n  })\n  .client((): string | null => null);\n\nexport const devSettingsCache = createDevSettingsCache({\n  // A dev server's render only. A production build has `DEV` statically false,\n  // the browser keeps the settings it was handed in its query cache, and vitest\n  // runs in `test` mode, where every test wants the request it mocked.\n  enabled: () =>\n    import.meta.env.DEV && import.meta.env.MODE !== 'test' && typeof document === 'undefined',\n  refreshToken: readRefreshCookie,\n  onFirstHit: () =>\n    console.warn(\n      `[twilight] Store settings are reused for up to ${DEV_SETTINGS_TTL_MS / 60_000} minutes while you develop, to stay under the Salla API's rate limit. To see a change you made in the dashboard, press \"Fetch fresh store data\" in the theme editor's side panel: it also says when they were last fetched.`\n    ),\n});\n","import ky from 'ky';\nimport { createIsomorphicFn } from '@tanstack/react-start';\nimport { getCookie } from '@tanstack/react-start/server';\nimport { getStoreIdentifier } from '../utils/sdk-helpers';\nimport { resolveThemeVersionId } from '../utils/theme-version';\nimport { getInjectedRuntimeEnv, readEnv } from '../utils/runtime-env';\nimport { getTwilightContext } from '../twilight/context';\nimport { ENGINE_VERSION } from '../utils/engine-version';\nimport { devSettingsCache } from './dev-settings-cache';\nimport {\n  AUTH_TOKEN_COOKIE_NAME,\n  CURRENCY_COOKIE_NAME,\n  extractCurrencyFromCookies,\n  extractScopeFromCookies,\n  toCurrencyCode,\n  extractTokenFromCookies,\n  readSdkScope,\n  type ActiveScope,\n} from '../utils/cookies';\n\n// The twilight module store doesn't reliably carry authToken into every scope: on the\n// SERVER workerd has no AsyncLocalStorage, and on BOTH sides this api client can live in a\n// different module instance than the one rootBeforeLoad populates (engine subpath import vs\n// engine-internal relative import). So `getTwilightContext().authToken` is often null even\n// for logged-in users → API calls (orders/customer/…) return `token_not_provided` (400).\n// Read the token directly from the request cookie (server) or document.cookie / salla.storage\n// (client) as a fallback. The server-only import is stripped from the client bundle by\n// createIsomorphicFn.\nconst readFallbackToken = createIsomorphicFn()\n  .server((): string | null => {\n    try {\n      return getCookie(AUTH_TOKEN_COOKIE_NAME) ?? null;\n    } catch {\n      return null;\n    }\n  })\n  .client((): string | null => {\n    const fromCookie =\n      typeof document !== 'undefined'\n        ? extractTokenFromCookies(document.cookie, AUTH_TOKEN_COOKIE_NAME)\n        : null;\n    if (fromCookie) return fromCookie;\n    const storage = typeof window !== 'undefined' ? window.salla?.storage : undefined;\n    const fromStorage =\n      typeof storage?.get === 'function' ? storage.get(AUTH_TOKEN_COOKIE_NAME) : null;\n    if (typeof fromStorage === 'string' && fromStorage) return fromStorage;\n    // `?token=` webview injection lands only on the SDK's axios instance\n    const fromSdkApi = typeof window !== 'undefined' ? window.salla?.api?.token : undefined;\n    return typeof fromSdkApi === 'string' && fromSdkApi ? fromSdkApi : null;\n  });\n\n/**\n * The auth token as the api client sees it: twilight context first, cookie/storage fallback.\n * Use this (not `getTwilightContext().authToken`, which is often null for logged-in users —\n * see the note above) to decide whether an authenticated-only query should run.\n */\nexport const getAuthToken = (): string | null =>\n  getTwilightContext().authToken ?? readFallbackToken();\n\nconst readRequestCurrency = createIsomorphicFn()\n  .server((): string | null => {\n    try {\n      return toCurrencyCode(getCookie(CURRENCY_COOKIE_NAME));\n    } catch {\n      return null;\n    }\n  })\n  .client((): string | null => null);\n\n/**\n * The currency the visitor chose, from the `s-curr` cookie the SDK writes: the API\n * answers in the store's own currency unless the request names one.\n */\nexport function getActiveCurrency(): string | null;\nexport function getActiveCurrency(fallback: string): string;\nexport function getActiveCurrency(fallback: string | null = null): string | null {\n  const chosen =\n    typeof document !== 'undefined'\n      ? extractCurrencyFromCookies(document.cookie)\n      : readRequestCurrency();\n  return chosen ?? fallback;\n}\n\nconst API_HEADERS = {\n  ACCEPT: 'accept',\n  ACCEPT_LANGUAGE: 'accept-language',\n  APP_OS: 's-app-os',\n  APP_VERSION: 's-app-version',\n  RAY: 's-ray',\n  SOURCE: 's-source',\n  THEME_TYPE: 's-theme-type',\n  STORE_API_VERSION: 's-store-api-version',\n  REQUESTED_WITH: 'x-requested-with',\n  CF_PROXY_WHITELIST: 's-cf-proxy-whitelist-id',\n  STORE_IDENTIFIER: 'store-identifier',\n  CURRENCY: 'currency',\n  AUTHORIZATION: 'Authorization',\n  VERSION_ID: 's-version-id',\n  SCOPE_ID: 's-scope-id',\n  SCOPE_TYPE: 's-scope-type',\n  SCOPE_ALLOCATION_TYPE: 's-scope-allocation-type',\n  SCOPE_ALLOCATION_ID: 's-scope-allocation-id',\n  USER_AGENT: 'user-agent',\n} as const;\n\n/**\n * The header every Salla API call is answered by store.\n *\n * Exported because a caller that already knows which store it is asking about\n * must be able to say so on the request itself — see `store.settings`. Without\n * it the only way to name a store is the ambient resolver, and \"the identifier\n * I checked\" and \"the identifier that was sent\" become two different things.\n */\nexport const STORE_IDENTIFIER_HEADER = API_HEADERS.STORE_IDENTIFIER;\n\n/**\n * Active scope: the market plus its branch allocation, as the SDK stores it. On the\n * client it comes from `salla.storage.get('scope')`; before the SDK hydrates storage\n * it falls back to the `scope` cookie the theme mirrors that selection into (see\n * writeScopeCookie), then to the scope twilightMiddleware seeded from the same\n * cookie on the server. Requests vary by the `s-scope-*` headers, so React Query\n * keys must include this to avoid serving another branch's cached categories/products.\n *\n * The cookie step matters for hydration: the SDK is not guaranteed to have\n * populated `salla.storage` by the time the client rebuilds a dehydrated query\n * key, and without it the client would compute null against a scoped SSR key.\n */\nexport const getActiveScope = (): ActiveScope | null => {\n  // `!== undefined`, not `!= null`: a null here is the SDK authoritatively saying \"no branch\n  // selected\", which must beat a cookie left over from the previous selection. Only a\n  // not-yet-ready storage API (undefined) falls through to the cookie.\n  const fromStorage = readSdkScope();\n  if (fromStorage !== undefined) return fromStorage;\n\n  if (typeof document !== 'undefined') {\n    const fromCookie = extractScopeFromCookies(document.cookie);\n    if (fromCookie != null) return fromCookie;\n  }\n\n  try {\n    return getTwilightContext().scope;\n  } catch {\n    return null;\n  }\n};\n\n/** {@link getActiveScope} reduced to the market id. */\nexport const getActiveScopeId = (): string | null => getActiveScope()?.id ?? null;\n\nconst sharedHeaders = (locale: string) => ({\n  [API_HEADERS.ACCEPT]: 'application/json' as const,\n  [API_HEADERS.ACCEPT_LANGUAGE]: locale,\n  [API_HEADERS.APP_OS]: 'browser',\n  [API_HEADERS.APP_VERSION]: '2.14.363',\n  [API_HEADERS.RAY]: '50',\n  [API_HEADERS.SOURCE]: 'twilight',\n  [API_HEADERS.THEME_TYPE]: 'react',\n  [API_HEADERS.STORE_API_VERSION]: 'swoole',\n  [API_HEADERS.REQUESTED_WITH]: 'XMLHttpRequest',\n  [API_HEADERS.CF_PROXY_WHITELIST]: '019a2f78-a64c-7edb-proxy-whitelist-id-9a3a-17afda90f03a',\n});\n\n/**\n * Who a server-rendered call says it is.\n *\n * Every theme worker reaches api.salla.dev from Cloudflare's one Workers address, so\n * salla.dev's per-IP rate limits counted every React store as a single client and\n * refused the calls each page makes (`store/settings` among them: \"Store Unavailable\").\n * The zone skips rate limiting for a User-Agent shaped `Salla-<Name>/<N.N.N> (<env>; <meta>)`\n * from Cloudflare's or AWS's networks, the convention Salla's other services already send.\n *\n * Built from fixed parts: the zone's pattern takes only digits and dots for the version,\n * so a prerelease suffix is dropped, and an unbundled engine (`dev`) reads as `0.0.0`.\n */\nconst SERVER_USER_AGENT = `Salla-TwilightReact/${\n  /^\\d+(?:\\.\\d+)*/.exec(ENGINE_VERSION)?.[0] ?? '0.0.0'\n} (${import.meta.env.DEV ? 'development' : 'production'}; ssr)`;\n\n/**\n * Store API base. `VITE_API_URL` override points a preview at a branch backend; unset → prod\n * `api.salla.dev`. Resolution order matters: the value the SSR worker resolved (published into\n * the head, since worker `vars` are server-only `process.env` and never reach the browser\n * bundle) wins, so the hydrated client keeps talking to the backend that rendered the page.\n */\n\nconst STORE_API_BASE =\n  getInjectedRuntimeEnv().apiBase || readEnv('VITE_API_URL') || 'https://api.salla.dev/store/v1';\n\nexport const api = ky.extend({\n  prefix: STORE_API_BASE,\n  timeout: 8000,\n  hooks: {\n    beforeRequest: [\n      ({ request }) => {\n        const { locale, authToken } = getTwilightContext();\n        const headers = sharedHeaders(locale);\n        for (const [key, value] of Object.entries(headers)) {\n          request.headers.set(key, value);\n        }\n        // Only when the caller did not say. `headers.set` here would otherwise\n        // overwrite a per-request identifier with the ambient one, which is a\n        // silent way to answer a question about one store with another's data.\n        if (!request.headers.get(API_HEADERS.STORE_IDENTIFIER)) {\n          request.headers.set(API_HEADERS.STORE_IDENTIFIER, getStoreIdentifier());\n        }\n\n        // Server only. A browser call comes from the shopper's own address and is\n        // counted against it, which is what the zone's limits are for.\n        if (typeof document === 'undefined') {\n          request.headers.set(API_HEADERS.USER_AGENT, SERVER_USER_AGENT);\n        }\n\n        const scope = getActiveScope();\n\n        // The version the request asked for, else the one the settings named for\n        // this scope. Absent means \"whatever is live\", which is what an ordinary\n        // storefront visit wants — so a null is left off rather than sent empty.\n        const versionId = resolveThemeVersionId(scope?.id ?? null);\n        if (versionId) {\n          request.headers.set(API_HEADERS.VERSION_ID, versionId);\n        }\n\n        const currency = getActiveCurrency();\n        if (currency) request.headers.set(API_HEADERS.CURRENCY, currency);\n\n        const token = authToken ?? readFallbackToken();\n        if (token) {\n          request.headers.set(API_HEADERS.AUTHORIZATION, `Bearer ${token}`);\n        }\n\n        // The same four the SDK's own client sends. The API resolves stock per\n        // allocation: id alone asks about the market, not the branch the shopper chose.\n        if (scope) {\n          request.headers.set(API_HEADERS.SCOPE_ID, scope.id);\n          if (scope.type) request.headers.set(API_HEADERS.SCOPE_TYPE, scope.type);\n          if (scope.allocation_type)\n            request.headers.set(API_HEADERS.SCOPE_ALLOCATION_TYPE, scope.allocation_type);\n          if (scope.allocation_id)\n            request.headers.set(API_HEADERS.SCOPE_ALLOCATION_ID, scope.allocation_id);\n        }\n      },\n      // Last, so it keys on the request with every header above set.\n      devSettingsCache.lookup,\n    ],\n    afterResponse: [devSettingsCache.store],\n  },\n});\n\nexport const cdn = ky.extend({\n  prefix: 'https://cdn.salla.network',\n  timeout: 5000,\n});\n\n/**\n * The merchant uploader's public bucket, `admin-uploader-prod`.\n *\n * A different host from {@link cdn} and a different thing behind it: this one\n * is an R2 custom domain, so a read never passes through a worker. Storefront\n * translations live here, per language, under `translations/` — see\n * `api/translations.ts`.\n */\nexport const filesCdn = ky.extend({\n  prefix: 'https://cdn.files.salla.network',\n  timeout: 5000,\n});\n"]}

package/dist/{chunk-QLFRNPPF.js → chunk-CGDUSBLK.js}

@@ -1,18 +1,19 @@
-import { editorFrame, postToEditor, FRAME_LOADED_ACTION } from './chunk-MVNWWZWQ.js';
-import { Header } from './chunk-XCS62X6X.js';
-import { Footer } from './chunk-5U7LPEFE.js';
-import { withOwnerMaintenanceButton, resolveTwilightSdkUrl, TICKETING_SCRIPT_URL, setSnippetPageTargets } from './chunk-KQEBYXYB.js';
-import { useDevSettingsOverrides, useDevReportSettingsFetchedAt } from './chunk-4LR7N76Q.js';
-import { apps } from './chunk-GFOAMXSO.js';
+import { editorFrame, previewTheme, postToEditor, FRAME_LOADED_ACTION } from './chunk-FHAHE46U.js';
+import { Header } from './chunk-672DTSG4.js';
+import { Footer } from './chunk-HH7WFQLN.js';
+import { resolveTwilightSdkUrl, TICKETING_SCRIPT_URL, setSnippetPageTargets } from './chunk-3CNXPHJE.js';
+import { useDevSettingsOverrides, useDevReportSettingsFetchedAt } from './chunk-SCM4P6QG.js';
+import { apps } from './chunk-AXPZEXJN.js';
 import { color } from './chunk-VVZNW5CB.js';
 import { applyThemeHookSlots, installAppScope } from './chunk-5FJFN3IW.js';
-import { useLocation, useIsHome, NavigationInterceptor } from './chunk-HZIQK63A.js';
-import { useUser } from './chunk-U2UDXLAE.js';
+import { withOwnerMaintenanceButton } from './chunk-FID76MUV.js';
+import { useLocation, useIsHome, NavigationInterceptor } from './chunk-WYWI77EA.js';
+import { useUser } from './chunk-GSI42HHP.js';
 import { DocumentClassProvider, useDocumentClass } from './chunk-JWXJPJBO.js';
 import { WidgetHead } from './chunk-V2ZDTY6H.js';
 import { HookSlot } from './chunk-5XDPAKF5.js';
 import { hookRegistry } from './chunk-GCPEMNSU.js';
-import { getActiveCurrency, ENGINE_VERSION } from './chunk-S7QZUBXM.js';
+import { getActiveCurrency, ENGINE_VERSION } from './chunk-BSGHOYMT.js';
 import { useTranslation, I18nProvider } from './chunk-TYNZ5B2B.js';
 import { Toaster } from './chunk-V2M5YNZQ.js';
 import { isNativeApp } from './chunk-2TLIULJZ.js';
@@ -342,13 +343,13 @@ function useNativeSpaWebview() {
 }
 var navigationSetups = {
   tanstack: lazy(
-    () => import('./navigation-XCZMJSNS.js').then((m) => ({ default: m.NavigationSetup }))
+    () => import('./navigation-WVVYQOOZ.js').then((m) => ({ default: m.NavigationSetup }))
   ),
-  nextjs: lazy(() => import('./navigation-ATD4DRST.js').then((m) => ({ default: m.NavigationSetup })))
+  nextjs: lazy(() => import('./navigation-7HBHI524.js').then((m) => ({ default: m.NavigationSetup })))
 };
 var routeDocumentSyncs = {
   tanstack: lazy(
-    () => import('./document-class-DSRV5LZK.js').then((m) => ({
+    () => import('./document-class-2SKG4YZE.js').then((m) => ({
       default: m.TanStackDocumentSync
     }))
   )
@@ -870,7 +871,7 @@ var LazySiftSnippet = lazy(
   () => import('./SiftSnippet-5FCU6TR6.js').then((m) => ({ default: m.SiftSnippet }))
 );
 var LazyStoreClosedNotification = lazy(
-  () => import('./StoreClosedNotification-AUQCK2MP.js').then((m) => ({
+  () => import('./StoreClosedNotification-CMOHA4LU.js').then((m) => ({
     default: m.StoreClosedNotification
   }))
 );
@@ -1115,12 +1116,12 @@ function SallaSdkScripts({ settings }) {
   ] });
 }
 var LazyStoreClosedNotification2 = lazy(
-  () => import('./StoreClosedNotification-AUQCK2MP.js').then((m) => ({
+  () => import('./StoreClosedNotification-CMOHA4LU.js').then((m) => ({
     default: m.StoreClosedNotification
   }))
 );
 var LazyMaintenancePage = lazy(
-  () => import('./MaintenancePage-7Y4QA5LD.js').then((m) => ({ default: m.MaintenancePage }))
+  () => import('./MaintenancePage-A7CNHM7B.js').then((m) => ({ default: m.MaintenancePage }))
 );
 var BAR = {
   position: "fixed",
@@ -1165,7 +1166,7 @@ function MaintenanceDevBar() {
   ] });
 }
 var LazyLiveEditorBar = lazy(
-  () => import('./LiveEditorBar-IQLFFBHE.js').then((m) => ({ default: m.LiveEditorBar }))
+  () => import('./LiveEditorBar-DOSRO35J.js').then((m) => ({ default: m.LiveEditorBar }))
 );
 function LiveEditor() {
   const [frame, setFrame] = useState(null);
@@ -1303,6 +1304,12 @@ function TwilightProvider({
     onError,
     initialLocale
   });
+  const [inEditor, setInEditor] = useState(false);
+  useEffect(() => setInEditor(editorFrame() !== null), []);
+  const theme = useMemo(
+    () => inEditor ? previewTheme(themeData) : themeData,
+    [inEditor, themeData]
+  );
   const storeId = storeData?.id;
   useEffect(() => rememberDevStoreId(storeId), [storeId]);
   const config = useMemo(() => ({ debug }), [debug]);
@@ -1331,7 +1338,7 @@ function TwilightProvider({
       isReady,
       store: storeData,
       _setStore: setStoreData,
-      theme: themeData,
+      theme,
       currency,
       config,
       log,
@@ -1363,7 +1370,7 @@ function TwilightProvider({
         return getTwilightContext().extras;
       }
     }),
-    [isReady, storeData, setStoreData, themeData, currency, config, log, authToken]
+    [isReady, storeData, setStoreData, theme, currency, config, log, authToken]
   );
   const framework = client !== false ? client?.framework ?? "tanstack" : null;
   const LazyNavSetup = framework ? navigationSetups[framework] : null;
@@ -1432,7 +1439,7 @@ function TwilightProvider({
     /* @__PURE__ */ jsx(
       ThemeDocumentSync,
       {
-        theme: themeData,
+        theme,
         locale: initialLocale,
         direction: getTwilightContext().dir,
         isMobileWebview
@@ -1461,5 +1468,5 @@ function useStore() {
 }
 
 export { LazyMaintenancePage, LazyStoreClosedNotification2 as LazyStoreClosedNotification, MasterLayout, TwilightProvider, fastCheckoutScript, registerDefaultHooks, registerDocumentSync, routeDocumentSyncs, useBreadcrumbs, useDate, useGtm, useMoney, useNumber, useOpeningHours, usePageConfig, useStore };
-//# sourceMappingURL=chunk-QLFRNPPF.js.map
-//# sourceMappingURL=chunk-QLFRNPPF.js.map
+//# sourceMappingURL=chunk-CGDUSBLK.js.map
+//# sourceMappingURL=chunk-CGDUSBLK.js.map