@salla.sa/twilight-theme-engine 1.0.27 → 1.0.28

package/dist/utils/store-identity.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Which store to ask about, in the order the answers can be trusted.
+ *
+ * A deployed theme worker is published with **no vars and no bindings** — the
+ * script metadata carries `main_module`, compatibility settings, assets and tags
+ * and nothing else — so `VITE_STORE_DOMAIN` exists only where a build baked it
+ * in, which is local development. In production this function used to reach the
+ * end of that chain and return the empty string, `store.settings` refused to
+ * call with no identifier, and the root loader threw "Store Unavailable" — a
+ * theme that renders its own failure page for every visitor of every store.
+ *
+ * The order:
+ *
+ * 1. what the caller passed, which is always deliberate;
+ * 2. the store this request names — the `?storeId=` a preview was opened with,
+ *    then the cookie remembering it — seeded by `twilightMiddleware`, and only
+ *    on a host permitted to name one;
+ * 3. what SSR already resolved and published, so the hydrated client asks about
+ *    the same store the server rendered instead of resolving again from a URL
+ *    that no longer names it;
+ * 4. the request's own host, which *is* the identity of a live storefront —
+ *    but only when that host is a storefront. `preview.salla.design` and
+ *    `localhost` serve many stores, so their names identify none;
+ * 5. `VITE_STORE_DOMAIN`, last, because a build-time constant is a development
+ *    convenience and must never outrank what the request actually said.
+ */
+export declare function resolveStoreIdentifier(explicit?: string): string;
+//# sourceMappingURL=store-identity.d.ts.map

package/dist/utils/store-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-identity.d.ts","sourceRoot":"","sources":["../../src/utils/store-identity.ts"],"names":[],"mappings":"AAuBA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAiBhE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salla.sa/twilight-theme-engine",
-  "version": "1.0.27",
+  "version": "1.0.28",
   "publishConfig": {
     "access": "public"
   },

package/dist/chunk-EQYBGXF4.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/api/client.ts"],"names":[],"mappings":";;;;;;AAqBA,IAAM,iBAAA,GAAoB,kBAAA,EAAmB,CAC1C,MAAA,CAAO,MAAqB;AAC3B,EAAA,IAAI;AACF,IAAA,OAAO,SAAA,CAAU,sBAAsB,CAAA,IAAK,IAAA;AAAA,EAC9C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF,CAAC,CAAA,CACA,OAAO,MAAqB;AAC3B,EAAA,MAAM,UAAA,GACJ,OAAO,QAAA,KAAa,WAAA,GAChB,wBAAwB,QAAA,CAAS,MAAA,EAAQ,sBAAsB,CAAA,GAC/D,IAAA;AACN,EAAA,IAAI,YAAY,OAAO,UAAA;AACvB,EAAA,MAAM,UAAU,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,OAAO,OAAA,GAAU,MAAA;AACxE,EAAA,MAAM,WAAA,GACJ,OAAO,OAAA,EAAS,GAAA,KAAQ,aAAa,OAAA,CAAQ,GAAA,CAAI,sBAAsB,CAAA,GAAI,IAAA;AAC7E,EAAA,IAAI,OAAO,WAAA,KAAgB,QAAA,IAAY,WAAA,EAAa,OAAO,WAAA;AAE3D,EAAA,MAAM,aAAa,OAAO,MAAA,KAAW,cAAc,MAAA,CAAO,KAAA,EAAO,KAAK,KAAA,GAAQ,MAAA;AAC9E,EAAA,OAAO,OAAO,UAAA,KAAe,QAAA,IAAY,UAAA,GAAa,UAAA,GAAa,IAAA;AACrE,CAAC,CAAA;AAOI,IAAM,YAAA,GAAe,MAC1B,kBAAA,EAAmB,CAAE,aAAa,iBAAA;AAEpC,IAAM,WAAA,GAAc;AAAA,EAClB,MAAA,EAAQ,QAAA;AAAA,EACR,eAAA,EAAiB,iBAAA;AAAA,EACjB,MAAA,EAAQ,UAAA;AAAA,EACR,WAAA,EAAa,eAAA;AAAA,EACb,GAAA,EAAK,OAAA;AAAA,EACL,MAAA,EAAQ,UAAA;AAAA,EACR,UAAA,EAAY,cAAA;AAAA,EACZ,iBAAA,EAAmB,qBAAA;AAAA,EACnB,cAAA,EAAgB,kBAAA;AAAA,EAChB,kBAAA,EAAoB,yBAAA;AAAA,EACpB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,aAAA,EAAe,eAAA;AAAA,EACf,UAAA,EAAY,cAAA;AAAA,EACZ,QAAA,EAAU;AACZ,CAAA;AAcO,IAAM,mBAAmB,MAAqB;AAInD,EAAA,MAAM,cAAc,cAAA,EAAe;AACnC,EAAA,IAAI,WAAA,KAAgB,QAAW,OAAO,WAAA;AAEtC,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACnC,IAAA,MAAM,UAAA,GAAa,yBAAA,CAA0B,QAAA,CAAS,MAAM,CAAA;AAC5D,IAAA,IAAI,UAAA,IAAc,MAAM,OAAO,UAAA;AAAA,EACjC;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,kBAAA,EAAmB;AACvC,IAAA,OAAO,OAAA,IAAW,IAAA,GAAO,MAAA,CAAO,OAAO,CAAA,GAAI,IAAA;AAAA,EAC7C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEA,IAAM,aAAA,GAAgB,CAAC,MAAA,MAAoB;AAAA,EACzC,CAAC,WAAA,CAAY,MAAM,GAAG,kBAAA;AAAA,EACtB,CAAC,WAAA,CAAY,eAAe,GAAG,MAAA;AAAA,EAC/B,CAAC,WAAA,CAAY,MAAM,GAAG,SAAA;AAAA,EACtB,CAAC,WAAA,CAAY,WAAW,GAAG,UAAA;AAAA,EAC3B,CAAC,WAAA,CAAY,GAAG,GAAG,IAAA;AAAA,EACnB,CAAC,WAAA,CAAY,MAAM,GAAG,UAAA;AAAA,EACtB,CAAC,WAAA,CAAY,UAAU,GAAG,OAAA;AAAA,EAC1B,CAAC,WAAA,CAAY,iBAAiB,GAAG,QAAA;AAAA,EACjC,CAAC,WAAA,CAAY,cAAc,GAAG,gBAAA;AAAA,EAC9B,CAAC,WAAA,CAAY,kBAAkB,GAAG;AACpC,CAAA,CAAA;AAWO,IAAM,GAAA,GAAM,GAAG,MAAA,CAAO;AAAA,EAC3B,MAAA,EAAQ,gCAAA;AAAA;AAAA,EACR,OAAA,EAAS,GAAA;AAAA,EACT,KAAA,EAAO;AAAA,IACL,aAAA,EAAe;AAAA,MACb,CAAC,EAAE,OAAA,EAAQ,KAAM;AACf,QAAA,MAAM,EAAE,MAAA,EAAQ,SAAA,EAAU,GAAI,kBAAA,EAAmB;AACjD,QAAA,MAAM,OAAA,GAAU,cAAc,MAAM,CAAA;AACpC,QAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,GAAA,EAAK,KAAK,CAAA;AAAA,QAChC;AACA,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,gBAAA,EAAkB,oBAAoB,CAAA;AAEtE,QAAA,IAAI;AACF,UAAA,MAAM,SAAA,GAAY,kBAAA,EAAmB,CAAE,QAAA,EAAU,OAAO,OAAA,EAAS,EAAA;AACjE,UAAA,IAAI,aAAa,IAAA,EAAM;AACrB,YAAA,OAAA,CAAQ,QAAQ,GAAA,CAAI,WAAA,CAAY,UAAA,EAAY,MAAA,CAAO,SAAS,CAAC,CAAA;AAAA,UAC/D;AAAA,QACF,CAAA,CAAA,MAAQ;AAAA,QAER;AAEA,QAAA,MAAM,KAAA,GAAQ,aAAa,iBAAA,EAAkB;AAC7C,QAAA,IAAI,KAAA,EAAO;AACT,UAAA,OAAA,CAAQ,QAAQ,GAAA,CAAI,WAAA,CAAY,aAAA,EAAe,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAA;AAAA,QAClE;AAEA,QAAA,MAAM,UAAU,gBAAA,EAAiB;AACjC,QAAA,IAAI,WAAW,IAAA,EAAM;AACnB,UAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,CAAY,QAAA,EAAU,OAAO,CAAA;AAAA,QACnD;AAAA,MACF;AAAA;AACF;AAEJ,CAAC;AAEM,IAAM,GAAA,GAAM,GAAG,MAAA,CAAO;AAAA,EAC3B,MAAA,EAAQ,2BAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAC","file":"chunk-EQYBGXF4.js","sourcesContent":["import ky from 'ky';\nimport { createIsomorphicFn } from '@tanstack/react-start';\nimport { getCookie } from '@tanstack/react-start/server';\nimport { getStoreIdentifier } from '../utils/sdk-helpers';\n// import { getInjectedRuntimeEnv, readEnv } from '../utils/runtime-env';\nimport { getTwilightContext } from '../twilight/context';\nimport {\n  AUTH_TOKEN_COOKIE_NAME,\n  extractScopeIdFromCookies,\n  extractTokenFromCookies,\n  readSdkScopeId,\n} from '../utils/cookies';\n\n// The twilight module store doesn't reliably carry authToken into every scope: on the\n// SERVER workerd has no AsyncLocalStorage, and on BOTH sides this api client can live in a\n// different module instance than the one rootBeforeLoad populates (engine subpath import vs\n// engine-internal relative import). So `getTwilightContext().authToken` is often null even\n// for logged-in users → API calls (orders/customer/…) return `token_not_provided` (400).\n// Read the token directly from the request cookie (server) or document.cookie / salla.storage\n// (client) as a fallback. The server-only import is stripped from the client bundle by\n// createIsomorphicFn.\nconst readFallbackToken = createIsomorphicFn()\n  .server((): string | null => {\n    try {\n      return getCookie(AUTH_TOKEN_COOKIE_NAME) ?? null;\n    } catch {\n      return null;\n    }\n  })\n  .client((): string | null => {\n    const fromCookie =\n      typeof document !== 'undefined'\n        ? extractTokenFromCookies(document.cookie, AUTH_TOKEN_COOKIE_NAME)\n        : null;\n    if (fromCookie) return fromCookie;\n    const storage = typeof window !== 'undefined' ? window.salla?.storage : undefined;\n    const fromStorage =\n      typeof storage?.get === 'function' ? storage.get(AUTH_TOKEN_COOKIE_NAME) : null;\n    if (typeof fromStorage === 'string' && fromStorage) return fromStorage;\n    // `?token=` webview injection lands only on the SDK's axios instance\n    const fromSdkApi = typeof window !== 'undefined' ? window.salla?.api?.token : undefined;\n    return typeof fromSdkApi === 'string' && fromSdkApi ? fromSdkApi : null;\n  });\n\n/**\n * The auth token as the api client sees it: twilight context first, cookie/storage fallback.\n * Use this (not `getTwilightContext().authToken`, which is often null for logged-in users —\n * see the note above) to decide whether an authenticated-only query should run.\n */\nexport const getAuthToken = (): string | null =>\n  getTwilightContext().authToken ?? readFallbackToken();\n\nconst API_HEADERS = {\n  ACCEPT: 'accept',\n  ACCEPT_LANGUAGE: 'accept-language',\n  APP_OS: 's-app-os',\n  APP_VERSION: 's-app-version',\n  RAY: 's-ray',\n  SOURCE: 's-source',\n  THEME_TYPE: 's-theme-type',\n  STORE_API_VERSION: 's-store-api-version',\n  REQUESTED_WITH: 'x-requested-with',\n  CF_PROXY_WHITELIST: 's-cf-proxy-whitelist-id',\n  STORE_IDENTIFIER: 'store-identifier',\n  AUTHORIZATION: 'Authorization',\n  VERSION_ID: 's-version-id',\n  SCOPE_ID: 's-scope-id',\n} as const;\n\n/**\n * Active branch/scope id. On the client it comes from the branch Salla persists\n * in storage (`salla.storage.get('scope').id`); before the SDK hydrates storage it\n * falls back to the `scope` cookie the theme mirrors that selection into\n * (see writeScopeCookie), then to the id twilightMiddleware seeded from the same\n * cookie on the server. Requests vary by `s-scope-id`, so React Query keys must\n * include this to avoid serving another scope's cached categories/products.\n *\n * The cookie step matters for hydration: the SDK is not guaranteed to have\n * populated `salla.storage` by the time the client rebuilds a dehydrated query\n * key, and without it the client would compute null against a scoped SSR key.\n */\nexport const getActiveScopeId = (): string | null => {\n  // `!== undefined`, not `!= null`: a null here is the SDK authoritatively saying \"no branch\n  // selected\", which must beat a cookie left over from the previous selection. Only a\n  // not-yet-ready storage API (undefined) falls through to the cookie.\n  const fromStorage = readSdkScopeId();\n  if (fromStorage !== undefined) return fromStorage;\n\n  if (typeof document !== 'undefined') {\n    const fromCookie = extractScopeIdFromCookies(document.cookie);\n    if (fromCookie != null) return fromCookie;\n  }\n\n  try {\n    const { scopeId } = getTwilightContext();\n    return scopeId != null ? String(scopeId) : null;\n  } catch {\n    return null;\n  }\n};\n\nconst sharedHeaders = (locale: string) => ({\n  [API_HEADERS.ACCEPT]: 'application/json' as const,\n  [API_HEADERS.ACCEPT_LANGUAGE]: locale,\n  [API_HEADERS.APP_OS]: 'browser',\n  [API_HEADERS.APP_VERSION]: '2.14.363',\n  [API_HEADERS.RAY]: '50',\n  [API_HEADERS.SOURCE]: 'twilight',\n  [API_HEADERS.THEME_TYPE]: 'react',\n  [API_HEADERS.STORE_API_VERSION]: 'swoole',\n  [API_HEADERS.REQUESTED_WITH]: 'XMLHttpRequest',\n  [API_HEADERS.CF_PROXY_WHITELIST]: '019a2f78-a64c-7edb-proxy-whitelist-id-9a3a-17afda90f03a',\n});\n\n/**\n * Store API base. `VITE_API_URL` override points a preview at a branch backend; unset → prod\n * `api.salla.dev`. Resolution order matters: the value the SSR worker resolved (published into\n * the head, since worker `vars` are server-only `process.env` and never reach the browser\n * bundle) wins, so the hydrated client keeps talking to the backend that rendered the page.\n */\n\n// const STORE_API_BASE = getInjectedRuntimeEnv().apiBase || readEnv('VITE_API_URL') || 'https://api.salla.dev/store/v1';\n\nexport const api = ky.extend({\n  prefix: 'https://api.salla.dev/store/v1', // TODO: check env\n  timeout: 8000,\n  hooks: {\n    beforeRequest: [\n      ({ request }) => {\n        const { locale, authToken } = getTwilightContext();\n        const headers = sharedHeaders(locale);\n        for (const [key, value] of Object.entries(headers)) {\n          request.headers.set(key, value);\n        }\n        request.headers.set(API_HEADERS.STORE_IDENTIFIER, getStoreIdentifier());\n\n        try {\n          const profileId = getTwilightContext().settings?.theme?.profile?.id;\n          if (profileId != null) {\n            request.headers.set(API_HEADERS.VERSION_ID, String(profileId));\n          }\n        } catch {\n          // settings not loaded yet — skip VERSION_ID header\n        }\n\n        const token = authToken ?? readFallbackToken();\n        if (token) {\n          request.headers.set(API_HEADERS.AUTHORIZATION, `Bearer ${token}`);\n        }\n\n        const scopeId = getActiveScopeId();\n        if (scopeId != null) {\n          request.headers.set(API_HEADERS.SCOPE_ID, scopeId);\n        }\n      },\n    ],\n  },\n});\n\nexport const cdn = ky.extend({\n  prefix: 'https://cdn.salla.network',\n  timeout: 5000,\n});\n"]}

package/dist/chunk-MRITQZH2.js

@@ -1,14 +0,0 @@
-import { lazy } from 'react';
-
-// src/components/cart/lazy.ts
-var LazyCartItem = lazy(() => import('./CartItem-BKINMGDW.js').then((m) => ({ default: m.CartItem })));
-var LazyCartSummary = lazy(
-  () => import('./CartSummary-SWPZE5UA.js').then((m) => ({ default: m.CartSummary }))
-);
-var LazySeoCartWidget = lazy(
-  () => import('./SeoCartWidget-JV64FLXE.js').then((m) => ({ default: m.SeoCartWidget }))
-);
-
-export { LazyCartItem, LazyCartSummary, LazySeoCartWidget };
-//# sourceMappingURL=chunk-MRITQZH2.js.map
-//# sourceMappingURL=chunk-MRITQZH2.js.map

package/dist/chunk-QCWPF7W4.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/cookies.ts","../src/utils/inline-script.ts","../src/utils/runtime-env.ts","../src/utils/sdk-helpers.ts"],"names":[],"mappings":";;;AAAO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,iBAAA,GAAoB,OAAA;AAoB1B,IAAM,oBAAA,GAAuB,WAAA;AAG7B,IAAM,cAAA,GAAiB,SAAA;AAUvB,SAAS,aAAa,GAAA,EAA+C;AAC1E,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,GAAG,CAAA,GAAI,GAAA,GAAM,IAAA;AAChD;AAGO,SAAS,0BAA0B,YAAA,EAA4C;AACpF,EAAA,OAAO,YAAA,CAAa,uBAAA,CAAwB,YAAA,EAAc,oBAAoB,CAAC,CAAA;AACjF;AAqBO,IAAM,cAAA,GAAoC,CAAC,sBAAsB,CAAA;AAGxE,SAAS,WAAW,IAAA,EAAsB;AACxC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,IAAA,EAAK,CAAE,WAAA,EAAY;AAExC,EAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA,GAAI,CAAC,CAAA,IAAK,OAAA;AAClF,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACjC,EAAA,OAAO,UAAU,EAAA,GAAK,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,GAAG,KAAK,CAAA;AACxD;AAEA,SAAS,WAAW,QAAA,EAA2B;AAC7C,EAAA,OACE,QAAA,KAAa,eACb,QAAA,KAAa,WAAA,IACb,aAAa,OAAA,IACb,QAAA,CAAS,SAAS,YAAY,CAAA;AAElC;AAUO,SAAS,qBAAqB,IAAA,EAA0C;AAC7E,EAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAClB,EAAA,MAAM,QAAA,GAAW,WAAW,IAAI,CAAA;AAChC,EAAA,OAAO,cAAA,CAAe,QAAA,CAAS,QAAQ,CAAA,IAAK,WAAW,QAAQ,CAAA;AACjE;AAgBO,SAAS,qBAAA,CACd,GAAA,EACA,YAAA,EACA,IAAA,EACe;AACf,EAAA,IAAI,CAAC,oBAAA,CAAqB,IAAI,CAAA,EAAG,OAAO,IAAA;AAExC,EAAA,IAAI,SAAA,GAA2B,IAAA;AAC/B,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,YAAA,CAAa,IAAI,GAAA,CAAI,GAAG,EAAE,YAAA,CAAa,GAAA,CAAI,cAAc,CAAC,CAAA;AAAA,EACxE,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,SAAA,IAAa,0BAA0B,YAAY,CAAA;AAC5D;AAOO,SAAS,oBAAA,GAA6B;AAC3C,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACrC,EAAA,QAAA,CAAS,MAAA,GAAS,GAAG,sBAAsB,CAAA,gDAAA,CAAA;AAC7C;AAEO,SAAS,uBAAA,CACd,cACA,UAAA,EACe;AACf,EAAA,IAAI,CAAC,cAAc,OAAO,IAAA;AAE1B,EAAA,MAAM,MAAA,GAAS,GAAG,UAAU,CAAA,CAAA,CAAA;AAC5B,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,OAAO,KAAA,GAAQ,aAAa,MAAA,EAAQ;AAClC,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,OAAA,CAAQ,MAAA,EAAQ,KAAK,CAAA;AAC9C,IAAA,IAAI,GAAA,KAAQ,IAAI,OAAO,IAAA;AAEvB,IAAA,MAAM,WAAW,GAAA,GAAM,CAAA,GAAI,YAAA,CAAa,GAAA,GAAM,CAAC,CAAA,GAAI,EAAA;AACnD,IAAA,IAAI,QAAA,KAAa,EAAA,IAAM,QAAA,KAAa,GAAA,IAAO,aAAa,GAAA,EAAK;AAC3D,MAAA,IAAI,GAAA,GAAM,YAAA,CAAa,OAAA,CAAQ,GAAA,EAAK,GAAG,CAAA;AACvC,MAAA,IAAI,GAAA,KAAQ,EAAA,EAAI,GAAA,GAAM,YAAA,CAAa,MAAA;AAEnC,MAAA,MAAM,KAAA,GAAQ,aAAa,KAAA,CAAM,GAAA,GAAM,OAAO,MAAA,EAAQ,GAAG,EAAE,IAAA,EAAK;AAChE,MAAA,IAAI;AACF,QAAA,OAAO,kBAAA,CAAmB,KAAK,CAAA,IAAK,IAAA;AAAA,MACtC,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,KAAA,IAAS,IAAA;AAAA,MAClB;AAAA,IACF;AAEA,IAAA,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,EACvB;AAEA,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,0BAA0B,YAAA,EAA4C;AACpF,EAAA,MAAM,GAAA,GAAM,uBAAA,CAAwB,YAAA,EAAc,iBAAiB,CAAA;AACnE,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,IAAI;AACF,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC5B,IAAA,OAAO,OAAO,EAAA,IAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,EAAE,CAAA,GAAI,IAAA;AAAA,EAChD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAUO,SAAS,cAAA,GAA4C;AAC1D,EAAA,MAAM,UAAU,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,OAAO,OAAA,GAAU,MAAA;AACxE,EAAA,IAAI,OAAO,OAAA,EAAS,GAAA,KAAQ,UAAA,EAAY,OAAO,MAAA;AAE/C,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAA;AAE3C,EAAA,MAAM,KAAK,OAAO,KAAA,KAAU,YAAY,KAAA,KAAU,IAAA,GAAO,MAAM,EAAA,GAAK,KAAA;AACpE,EAAA,OAAO,EAAA,IAAM,IAAA,GAAO,MAAA,CAAO,EAAE,CAAA,GAAI,IAAA;AACnC;AAGA,IAAM,oBAAA,GAAuB,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AAarC,SAAS,iBAAiB,OAAA,EAAiC;AAChE,EAAA,IAAI,OAAO,QAAA,KAAa,WAAA,EAAa,OAAO,KAAA;AAC5C,EAAA,IAAI,yBAAA,CAA0B,QAAA,CAAS,MAAM,CAAA,KAAM,SAAS,OAAO,KAAA;AAEnE,EAAA,IAAI,WAAW,IAAA,EAAM;AACnB,IAAA,QAAA,CAAS,MAAA,GAAS,GAAG,iBAAiB,CAAA,gDAAA,CAAA;AACtC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,mBAAmB,IAAA,CAAK,SAAA,CAAU,EAAE,EAAA,EAAI,OAAA,EAAS,CAAC,CAAA;AAChE,EAAA,QAAA,CAAS,SAAS,CAAA,EAAG,iBAAiB,CAAA,CAAA,EAAI,KAAK,qBAAqB,oBAAoB,CAAA,cAAA,CAAA;AACxF,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,eAAA,GAA2B;AACzC,EAAA,MAAM,UAAU,cAAA,EAAe;AAC/B,EAAA,OAAO,OAAA,KAAY,MAAA,GAAY,KAAA,GAAQ,gBAAA,CAAiB,OAAO,CAAA;AACjE;;;ACzOO,SAAS,sBAAsB,KAAA,EAAuB;AAC3D,EAAA,OAAO,MACJ,OAAA,CAAQ,IAAA,EAAM,SAAS,CAAA,CACvB,OAAA,CAAQ,MAAM,SAAS,CAAA,CACvB,QAAQ,IAAA,EAAM,SAAS,EACvB,OAAA,CAAQ,SAAA,EAAW,SAAS,CAAA,CAC5B,OAAA,CAAQ,WAAW,SAAS,CAAA;AACjC;;;ACTA,IAAM,eAAA,GAAkB,uBAAA;AAcjB,SAAS,QAAQ,GAAA,EAAiC;AACvD,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAQ,MAAA,CAAA,IAAA,CAAwE,GAAA,GACpF,GACF,CAAA;AACA,IAAA,IAAI,MAAM,OAAO,IAAA;AAAA,EACnB,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,OAAO,OAAA,KAAY,WAAA,GAAc,OAAA,CAAQ,GAAA,GAAM,GAAG,CAAA,GAAI,MAAA;AAC/D;AAOO,SAAS,iBAAA,GAAgC;AAC9C,EAAA,MAAM,WAAW,qBAAA,EAAsB;AACvC,EAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,eAAA,EAAgB;AACjD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,QAAA,CAAS,OAAA,IAAW,OAAA,CAAQ,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMnD,iBACE,QAAA,CAAS,eAAA,IAAmB,OAAA,IAAW,WAAA,IAAe,QAAQ,mBAAmB;AAAA,GACrF;AACF;AAWO,SAAS,qBAAA,GAAoC;AAClD,EAAA,MAAM,MAAA,GAAS,UAAA;AACf,EAAA,OAAO,MAAA,CAAO,eAAe,CAAA,IAAK,EAAC;AACrC;AAMO,SAAS,sBAAA,CAAuB,GAAA,GAAkB,iBAAA,EAAkB,EAAkB;AAC3F,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,CAAE,MAAA,CAAO,CAAC,GAAG,KAAK,CAAA,KAAM,OAAA,CAAQ,KAAK,CAAC,CAAA;AACpE,EAAA,IAAI,CAAC,GAAA,CAAI,MAAA,EAAQ,OAAO,IAAA;AACxB,EAAA,MAAM,IAAA,GAAO,sBAAsB,IAAA,CAAK,SAAA,CAAU,OAAO,WAAA,CAAY,GAAG,CAAC,CAAC,CAAA;AAC1E,EAAA,OAAO,CAAA,OAAA,EAAU,eAAe,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,CAAA;AAC1C;;;ACtEA,IAAM,SAAA,GAAY,OAAO,MAAA,KAAW,WAAA;AAQ7B,SAAS,mBAAmB,QAAA,EAA2B;AAC5D,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAW,YAAoB,GAAA,EAAK,iBAAA;AAC1C,IAAA,IAAI,SAAS,OAAO,OAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,MAAM,QAAA,GAAW,uBAAsB,CAAE,eAAA;AACzC,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,IAAI,SAAA,EAAW,OAAO,MAAA,CAAO,QAAA,CAAS,IAAA;AACtC,EAAA,OACG,OAAO,YAAY,WAAA,KACjB,OAAA,CAAQ,KAAK,iBAAA,IAAqB,OAAA,CAAQ,KAAK,YAAA,CAAA,IAClD,EAAA;AAEJ;AAKO,SAAS,WAAA,GAA+C;AAC7D,EAAA,IAAI,CAAC,WAAW,OAAO,MAAA;AACvB,EAAA,OAAO,MAAA,CAAO,KAAA;AAChB;AAoBO,SAAS,cAAc,MAAA,EAAsB;AAClD,EAAA,MAAM,MAAM,WAAA,EAAY;AACxB,EAAA,IAAI,CAAC,GAAA,IAAO,CAAC,MAAA,EAAQ;AACrB,EAAA,IAAI;AACF,IAAA,GAAA,CAAI,IAAA,EAAM,YAAY,MAAM,CAAA;AAC5B,IAAA,GAAA,CAAI,GAAA,EAAK,SAAA,GAAY,iBAAA,EAAmB,MAAM,CAAA;AAG9C,IAAA,GAAA,CAAI,MAAA,EAAQ,GAAA,GAAM,oBAAA,EAAsB,MAAM,CAAA;AAAA,EAChD,CAAA,CAAA,MAAQ;AAAA,EAER;AACF","file":"chunk-QCWPF7W4.js","sourcesContent":["export const AUTH_TOKEN_COOKIE_NAME = 'token';\nexport const SCOPE_COOKIE_NAME = 'scope';\n\n/**\n * Which store this request is for, when the hostname does not say.\n *\n * A live storefront is reached at its own domain, so the hostname identifies it\n * and nothing else is needed. A preview is not: every theme under review is\n * served from the one preview hostname, so the store has to be named some other\n * way — the dispatcher takes it from `?storeId=` and puts it here, the same way\n * it remembers which theme to serve.\n *\n * Written by the dispatcher rather than the theme, and set on the *forwarded\n * request* as well as the response, because the response cookie only arrives in\n * time for the second page load and the first one has to render too.\n *\n * The literal is a contract with `STORE_COOKIE` in store-front-dispacher\n * (`src/dispatch/preview.ts`), and **nothing checks the two agree**. Drift does\n * not fail loudly — it renders somebody else's shop. Grep both repos before\n * changing it.\n */\nexport const STORE_ID_COOKIE_NAME = 'salla_sid';\n\n/** Query parameter naming the store, on a host that serves more than one. */\nexport const STORE_ID_PARAM = 'storeId';\n\n/**\n * A store id is an integer, and anything else is not a store id.\n *\n * Validated rather than passed through because this value ends up in an upstream\n * API path. Leading zeroes, signs, decimals and whitespace are all rejected: the\n * point is a single canonical form, not the widest set of things that could be\n * coerced into a number.\n */\nexport function parseStoreId(raw: string | null | undefined): string | null {\n  if (!raw) return null;\n  return /^[1-9][0-9]{0,18}$/.test(raw) ? raw : null;\n}\n\n/** The store id the dispatcher left in the cookie, or null when absent or malformed. */\nexport function extractStoreIdFromCookies(cookieHeader: string | null): string | null {\n  return parseStoreId(extractTokenFromCookies(cookieHeader, STORE_ID_COOKIE_NAME));\n}\n\n/**\n * The only hosts on which a request may name its own store.\n *\n * **This is a security boundary, not a convenience.** On a merchant's own domain\n * the hostname *is* the store, and it is the only thing that may decide. A theme\n * that also honoured `?storeId=` there would let anyone open\n * `https://reefperfumes.com/?storeId=<someone else>` and be served a different\n * merchant's shop from the domain its owner controls — their branding, their\n * customers' address bar, somebody else's catalogue — and the cookie would keep\n * serving it for the rest of that browser's session. Salla points SaaS domains\n * at this dispatcher, so those hostnames are real and reachable.\n *\n * The override exists for one situation: a host that serves many stores and so\n * cannot identify one from its name. That is the preview host, where every theme\n * under review answers on the same address, and local development.\n *\n * Adding an entry grants that host the ability to render any store on request.\n * Add nothing that a merchant's traffic reaches.\n */\nexport const STORE_ID_HOSTS: readonly string[] = ['preview.salla.design'];\n\n/** The hostname alone — a port never distinguishes one host's authority from another's. */\nfunction hostnameOf(host: string): string {\n  const trimmed = host.trim().toLowerCase();\n  // IPv6 literals are bracketed, and the colons inside them are not a port.\n  if (trimmed.startsWith('[')) return trimmed.slice(0, trimmed.indexOf(']') + 1) || trimmed;\n  const colon = trimmed.indexOf(':');\n  return colon === -1 ? trimmed : trimmed.slice(0, colon);\n}\n\nfunction isLoopback(hostname: string): boolean {\n  return (\n    hostname === 'localhost' ||\n    hostname === '127.0.0.1' ||\n    hostname === '[::1]' ||\n    hostname.endsWith('.localhost')\n  );\n}\n\n/**\n * Whether this host is allowed to let the request choose a store.\n *\n * Deliberately an allowlist of exact hostnames plus loopback. No suffix matching:\n * a rule like \"anything ending in salla.design\" is one wildcard DNS record away\n * from admitting a host nobody meant to admit, and the list of hosts that serve\n * more than one store is short and known.\n */\nexport function allowsRequestStoreId(host: string | null | undefined): boolean {\n  if (!host) return false;\n  const hostname = hostnameOf(host);\n  return STORE_ID_HOSTS.includes(hostname) || isLoopback(hostname);\n}\n\n/**\n * The store this request names, on a host permitted to name one.\n *\n * The host check is inside this function rather than at its call site, because a\n * call site is a thing someone can add without reading this comment. There is no\n * way to ask \"what store did the request name?\" without also asking \"is this a\n * host that may say?\" — get it wrong and the answer is a security bug that looks\n * like a feature.\n *\n * Between the two permitted sources the URL wins, the same precedence the\n * dispatcher uses for the theme and for the same reason: a link is how someone\n * switches, and a cookie they cannot see should never beat the address they\n * just typed.\n */\nexport function resolveRequestStoreId(\n  url: string,\n  cookieHeader: string | null,\n  host: string | null | undefined\n): string | null {\n  if (!allowsRequestStoreId(host)) return null;\n\n  let fromQuery: string | null = null;\n  try {\n    fromQuery = parseStoreId(new URL(url).searchParams.get(STORE_ID_PARAM));\n  } catch {\n    /* a relative or malformed URL simply names no store */\n  }\n  return fromQuery ?? extractStoreIdFromCookies(cookieHeader);\n}\n\n/**\n * Deletes the auth `token` cookie. This cookie is written client-side by the theme\n * (TwilightProvider), not by the SDK — `salla.cookie.clearAll()` only clears its own\n * allowlist and leaves `token` behind — so logout must clear it here. Client-only.\n */\nexport function clearAuthTokenCookie(): void {\n  if (typeof document === 'undefined') return;\n  document.cookie = `${AUTH_TOKEN_COOKIE_NAME}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`;\n}\n\nexport function extractTokenFromCookies(\n  cookieHeader: string | null,\n  cookieName: string\n): string | null {\n  if (!cookieHeader) return null;\n\n  const prefix = `${cookieName}=`;\n  let start = 0;\n\n  while (start < cookieHeader.length) {\n    const idx = cookieHeader.indexOf(prefix, start);\n    if (idx === -1) return null;\n\n    const prevChar = idx > 0 ? cookieHeader[idx - 1] : '';\n    if (prevChar === '' || prevChar === ';' || prevChar === ' ') {\n      let end = cookieHeader.indexOf(';', idx);\n      if (end === -1) end = cookieHeader.length;\n\n      const value = cookieHeader.slice(idx + prefix.length, end).trim();\n      try {\n        return decodeURIComponent(value) || null;\n      } catch {\n        return value || null;\n      }\n    }\n\n    start = idx + prefix.length;\n  }\n\n  return null;\n}\n\n/**\n * Reads the active scope id from the `scope` cookie, which Salla persists as a\n * JSON object (e.g. `{\"id\":123,\"type\":\"branch\"}`). Returns null when the cookie\n * is missing or unparseable. Used server-side, where `salla.storage` is absent.\n */\nexport function extractScopeIdFromCookies(cookieHeader: string | null): string | null {\n  const raw = extractTokenFromCookies(cookieHeader, SCOPE_COOKIE_NAME);\n  if (!raw) return null;\n  try {\n    const scope = JSON.parse(raw) as { id?: number | string | null };\n    return scope?.id != null ? String(scope.id) : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The branch the Salla SDK persisted in its storage (`salla.storage.get('scope')`),\n * which it stores either as `{ id, type }` or as a bare id.\n *\n * Returns `undefined` when the SDK storage API isn't ready yet — deliberately\n * distinct from `null` (\"no branch selected\"), so callers can't mistake a\n * not-yet-hydrated SDK for a cleared selection. Client-only.\n */\nexport function readSdkScopeId(): string | null | undefined {\n  const storage = typeof window !== 'undefined' ? window.salla?.storage : undefined;\n  if (typeof storage?.get !== 'function') return undefined;\n\n  const scope = storage.get(SCOPE_COOKIE_NAME) as\n    { id?: number | string | null } | number | string | null;\n  const id = typeof scope === 'object' && scope !== null ? scope.id : scope;\n  return id != null ? String(id) : null;\n}\n\n/** One year — the SDK keeps the selected branch in localStorage indefinitely. */\nconst SCOPE_COOKIE_MAX_AGE = 60 * 60 * 24 * 365;\n\n/**\n * Mirrors the branch the Salla SDK selected into the `scope` cookie so the SERVER\n * can see it. The SDK persists the selection in localStorage ONLY and writes no\n * cookie, so without this the server computes scope=null for every visitor who\n * picked a branch while the client computes the branch id — the dehydrated settings\n * query key never matches and the client refetches store settings on every page\n * load (SAL-122).\n *\n * Written in the SDK's own JSON shape so {@link extractScopeIdFromCookies} parses it.\n * Returns true when the cookie was (re)written. Client-only; no-op on the server.\n */\nexport function writeScopeCookie(scopeId: string | null): boolean {\n  if (typeof document === 'undefined') return false;\n  if (extractScopeIdFromCookies(document.cookie) === scopeId) return false;\n\n  if (scopeId == null) {\n    document.cookie = `${SCOPE_COOKIE_NAME}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`;\n    return true;\n  }\n\n  const value = encodeURIComponent(JSON.stringify({ id: scopeId }));\n  document.cookie = `${SCOPE_COOKIE_NAME}=${value}; path=/; max-age=${SCOPE_COOKIE_MAX_AGE}; samesite=lax`;\n  return true;\n}\n\n/**\n * Keeps the `scope` cookie in step with the SDK's selected branch. Call on every\n * client navigation; it no-ops while the SDK storage API is still hydrating so a\n * late-loading SDK can't wipe a valid cookie.\n */\nexport function syncScopeCookie(): boolean {\n  const scopeId = readSdkScopeId();\n  return scopeId === undefined ? false : writeScopeCookie(scopeId);\n}\n","/**\n * Escape a JSON-stringified value for safe embedding inside an inline `<script>` body.\n *\n * The head injects script bodies raw, so a `</script>` inside partner-set data would break out\n * of the tag; U+2028/U+2029 are line terminators in JS but not in JSON, so they must go too.\n */\nexport function escapeForInlineScript(value: string): string {\n  return value\n    .replace(/</g, '\\\\u003c')\n    .replace(/>/g, '\\\\u003e')\n    .replace(/&/g, '\\\\u0026')\n    .replace(/\\u2028/g, '\\\\u2028')\n    .replace(/\\u2029/g, '\\\\u2029');\n}\n","import { escapeForInlineScript } from './inline-script';\nimport { getRequestStore } from '../twilight/context';\n\n/** Where `rootHead` publishes the SSR-resolved env for the browser bundle to read. */\nconst RUNTIME_ENV_KEY = '__SALLA_RUNTIME_ENV__';\n\n/** The env values that must agree between the SSR render and the hydrated client. */\nexport interface RuntimeEnv {\n  /** Store API base — `VITE_API_URL`. */\n  apiBase?: string;\n  /** Store identifier — `VITE_STORE_DOMAIN`. */\n  storeIdentifier?: string;\n}\n\n/**\n * A build-time `import.meta.env` var, falling back to the worker's runtime `process.env`\n * (wrangler `vars`, exposed via the `nodejs_compat_populate_process_env` flag).\n */\nexport function readEnv(key: string): string | undefined {\n  try {\n    const vite = (import.meta as unknown as { env?: Record<string, string | undefined> }).env?.[\n      key\n    ];\n    if (vite) return vite;\n  } catch {\n    /* import.meta.env not available in all environments */\n  }\n  return typeof process !== 'undefined' ? process.env?.[key] : undefined;\n}\n\n/**\n * What this runtime resolves from its own env — server-side that includes the worker vars.\n * Prefers what the server already published, so re-rendering the head during hydration yields\n * the same script instead of dropping it.\n */\nexport function resolveRuntimeEnv(): RuntimeEnv {\n  const injected = getInjectedRuntimeEnv();\n  const { storeId, requestHost } = getRequestStore();\n  return {\n    apiBase: injected.apiBase || readEnv('VITE_API_URL'),\n    // The request outranks the build-time var here for the same reason it does\n    // in `resolveStoreIdentifier`, and this is the copy that reaches the\n    // browser: publish the store SSR actually rendered, or hydration resolves\n    // again from a URL whose `?storeId=` the dispatcher has already stripped and\n    // queries a different store than the markup it is hydrating.\n    storeIdentifier:\n      injected.storeIdentifier || storeId || requestHost || readEnv('VITE_STORE_DOMAIN'),\n  };\n}\n\n/**\n * The env the SSR worker resolved, as handed to the browser by `rootHead`. Empty on the server\n * and on a client whose head carried nothing.\n *\n * Worker `vars` are *runtime* env: they live in `process.env` on the server only, while\n * `import.meta.env` is substituted at build time. A bundle built without those vars therefore\n * sees `undefined` in the browser and silently falls back to the production defaults — SSR\n * would render off the configured backend while every post-hydration fetch hits another one.\n */\nexport function getInjectedRuntimeEnv(): RuntimeEnv {\n  const holder = globalThis as typeof globalThis & { [RUNTIME_ENV_KEY]?: RuntimeEnv };\n  return holder[RUNTIME_ENV_KEY] ?? {};\n}\n\n/**\n * Inline head `<script>` body publishing the server-resolved env, or null when there is nothing\n * to publish (no overrides configured — the defaults already agree on both sides).\n */\nexport function renderRuntimeEnvScript(env: RuntimeEnv = resolveRuntimeEnv()): string | null {\n  const set = Object.entries(env).filter(([, value]) => Boolean(value));\n  if (!set.length) return null;\n  const json = escapeForInlineScript(JSON.stringify(Object.fromEntries(set)));\n  return `window.${RUNTIME_ENV_KEY}=${json};`;\n}\n","export type { StoreContext } from '../api/store';\nimport { getInjectedRuntimeEnv } from './runtime-env';\n\nconst isBrowser = typeof window !== 'undefined';\n\n/**\n * Get the store identifier. Priority: explicit > VITE_STORE_DOMAIN (build-time) > the identifier\n * the SSR worker resolved (published into the head — wrangler `vars` are server-only, so\n * without this the browser would fall back to its own host and request a different store than\n * the one that was rendered) > window.location.host > runtime env (process.env).\n */\nexport function getStoreIdentifier(explicit?: string): string {\n  if (explicit) return explicit;\n  try {\n    const viteEnv = (import.meta as any).env?.VITE_STORE_DOMAIN;\n    if (viteEnv) return viteEnv;\n  } catch {\n    /* import.meta not available in all environments */\n  }\n  const injected = getInjectedRuntimeEnv().storeIdentifier;\n  if (injected) return injected;\n  if (isBrowser) return window.location.host;\n  return (\n    (typeof process !== 'undefined' &&\n      (process.env?.VITE_STORE_DOMAIN || process.env?.STORE_DOMAIN)) ||\n    ''\n  );\n}\n\n/**\n * Get Salla SDK instance if available\n */\nexport function getSallaSDK(): typeof window.salla | undefined {\n  if (!isBrowser) return undefined;\n  return window.salla;\n}\n\n/**\n * Push the active route locale onto the Salla SDK.\n *\n * Why this is needed (and why it must run on every navigation):\n *  - The SDK seeds its locale from `navigator.language` — the theme sets no `s-lang`\n *    cookie or `window.locale` — so an English browser starts the SDK in `en` even on\n *    an `/ar` store.\n *  - The SDK fixes its axios `accept-language` header ONCE, at init. `salla.lang.setLocale`\n *    only swaps UI translations (it never touches the header), and `salla.init()` is a\n *    no-op after `Salla.status === 'ready'`, so the header never refreshes on its own.\n *  - `profile::info.fetched` (login / profile refresh on navigation) overrides the header\n *    to the *account's* language.\n *\n * Net result without this: `salla.api.*` calls (cart/product details) return data in the\n * wrong locale — e.g. English cart item names on `/ar/cart` — intermittently, depending on\n * load order and whether a profile fetch ran. Re-asserting the URL locale here keeps the\n * header correct. No-op on the server and until the SDK exposes the methods.\n */\nexport function syncSdkLocale(locale: string): void {\n  const sdk = getSallaSDK();\n  if (!sdk || !locale) return;\n  try {\n    sdk.lang?.setLocale?.(locale);\n    sdk.api?.setHeader?.('accept-language', locale);\n    // The localization modal swaps `/${user.language_code}/` in the URL on submit;\n    // the SDK never sets this locally, so without it the switch reloads the same page.\n    sdk.config?.set?.('user.language_code', locale);\n  } catch {\n    // SDK partially loaded — the header is re-asserted on the next navigation.\n  }\n}\n"]}

package/dist/chunk-ZYKBHBBH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/api/store.ts"],"names":[],"mappings":";;;;;AAMA,IAAM,qBAAA,GAAwB;AAAA,EAC5B,OAAA;AAAA,EACA,UAAA;AAAA,EACA,OAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,YAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,iBAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAA;AAoEO,SAAS,uBAAuB,QAAA,EAA2B;AAChE,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,eAAA,EAAgB;AACjD,EAAA,IAAI,SAAS,OAAO,OAAA;AAEpB,EAAA,MAAM,QAAA,GAAW,uBAAsB,CAAE,eAAA;AACzC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,IAAI,aAAa,OAAO,WAAA;AAExB,EAAA,MAAM,SAAA,GAAY,OAAO,MAAA,KAAW,WAAA;AACpC,EAAA,IAAI,SAAA,EAAW,OAAO,MAAA,CAAO,QAAA,CAAS,IAAA;AAEtC,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAW,YAAyD,GAAA,EACtE,iBAAA;AACJ,IAAA,IAAI,SAAS,OAAO,OAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAQ,OAAO,OAAA,KAAY,WAAA,IAAe,OAAA,CAAQ,KAAK,YAAA,IAAiB,EAAA;AAC1E;AAQA,SAAS,iBAAiB,SAAA,EAA8D;AACtF,EAAA,IAAI,CAAC,WAAW,OAAO,MAAA;AAGvB,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,SAAS,CAAA,CAAE,GAAA,CAAI,CAAC,IAAA,MAAU,EAAE,QAAA,EAAU,IAAA,CAAK,IAAA,EAAM,GAAG,MAAK,CAAE,CAAA;AAClF;AAEO,IAAM,KAAA,GAAQ;AAAA,EACnB,QAAA,EAAU,OAAO,eAAA,KAA2D;AAC1E,IAAA,MAAM,UAAA,GAAa,mBAAmB,sBAAA,EAAuB;AAE7D,IAAA,IAAI,CAAC,UAAA,EAAY;AACf,MAAA,OAAA,CAAQ,KAAK,gDAAgD,CAAA;AAC7D,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,MAAM,aAAA,GAAgB,qBAAA,CAAsB,GAAA,CAAI,CAAC,CAAA,KAAM,aAAa,CAAC,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AACjF,IAAA,MAAM,UAAU,gBAAA,EAAiB;AACjC,IAAA,MAAM,SAAS,OAAA,IAAW,IAAA,GAAO,GAAG,aAAa,CAAA,OAAA,EAAU,OAAO,CAAA,CAAA,GAAK,aAAA;AAEvE,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAChB,GAAA,CAAI,CAAA,eAAA,EAAkB,MAAM,CAAA,CAAA,EAAI,EAAE,OAAA,EAAS,GAAA,EAAM,CAAA,CACjD,IAAA,EAAqC;AAExC,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAGlB,MAAA,MAAM,SAAA,GAAY,gBAAA,CAAiB,IAAA,CAAK,SAAS,CAAA;AAEjD,MAAA,OAAO;AAAA,QACL,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,SAAA;AAAA,QACA,YAAY,IAAA,CAAK,UAAA;AAAA,QACjB,mBAAmB,IAAA,CAAK,iBAAA;AAAA,QACxB,SAAS,IAAA,CAAK,OAAA;AAAA,QACd,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,YAAY,IAAA,CAAK;AAAA,OACnB;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,4BAA4B,KAAK,CAAA;AAC/C,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF,CAAA;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,QAAA,EAAU,CAAC,eAAA,KACT,YAAA,CAAkC;AAAA,MAChC,QAAA,EAAU;AAAA,QACR,OAAA;AAAA,QACA,UAAA;AAAA,QACA,eAAA;AAAA,QACA,oBAAmB,CAAE,MAAA;AAAA,QACrB,gBAAA;AAAiB,OACnB;AAAA,MACA,OAAA,EAAS,MAAM,KAAA,CAAM,QAAA,CAAS,eAAe;AAAA,KAC9C;AAAA;AAEP","file":"chunk-ZYKBHBBH.js","sourcesContent":["import { queryOptions } from '@tanstack/react-query';\nimport { api, getActiveScopeId } from './client';\nimport type { Store, Theme, Language } from '../types';\nimport { getTwilightContext, getRequestStore } from '../twilight/context';\nimport { getInjectedRuntimeEnv } from '../utils/runtime-env';\n\nconst DEFAULT_INCLUDE_ITEMS = [\n  'store',\n  'settings',\n  'theme',\n  'theme_settings',\n  'external_services',\n  'currencies',\n  'languages',\n  'payments',\n  'product_widgets',\n  'rating',\n  'ratings',\n];\n\n/**\n * Raw API response for settings endpoint.\n * Languages come as object: { \"AR\": { code, name, ... }, \"EN\": {...} }\n */\ninterface SettingsApiResponse {\n  store?: Store;\n  theme?: Theme;\n  languages?: Record<string, Language>;\n  currencies?: Record<\n    string,\n    { code: string; name: string; symbol: string; amount: number; country_code: string }\n  >;\n  external_services?: Record<string, unknown>;\n  headers?: Record<string, unknown>;\n  login?: { url: string; turnstile_site_key: string };\n  affiliate?: { utm_url: string; cta_enabled: boolean };\n  debug?: boolean;\n  trace_console?: boolean;\n  policy_url?: string;\n}\n\n/**\n * Central settings context - single source of truth for all API data.\n * Contains everything from the settings endpoint response after processing.\n */\nexport interface StoreContext {\n  store?: Store;\n  theme?: Theme;\n  /** Languages as array after conversion from API object format */\n  languages?: Language[];\n  currencies?: Record<\n    string,\n    { code: string; name: string; symbol: string; amount: number; country_code: string }\n  >;\n  external_services?: Record<string, unknown>;\n  headers?: Record<string, unknown>;\n  login?: { url: string; turnstile_site_key: string };\n  affiliate?: { utm_url: string; cta_enabled: boolean };\n  debug?: boolean;\n  trace_console?: boolean; // todo:: remove it\n  policy_url?: string;\n}\n\n/**\n * Which store to ask about, in the order the answers can be trusted.\n *\n * A deployed theme worker is published with **no vars and no bindings** — the\n * script metadata carries `main_module`, compatibility settings, assets and tags\n * and nothing else — so `VITE_STORE_DOMAIN` exists only where a build baked it\n * in, which is local development. In production this function used to reach the\n * end of that chain and return the empty string, `store.settings` refused to\n * call with no identifier, and the root loader threw \"Store Unavailable\" — a\n * theme that renders its own failure page for every visitor of every store.\n *\n * The order:\n *\n * 1. what the caller passed, which is always deliberate;\n * 2. the store this request names — the `?storeId=` a preview was opened with,\n *    then the cookie remembering it — seeded by `twilightMiddleware`;\n * 3. what SSR already resolved and published, so the hydrated client asks about\n *    the same store the server rendered instead of resolving again from a URL\n *    that no longer names it;\n * 4. the request's own host, which *is* the identity of a live storefront;\n * 5. `VITE_STORE_DOMAIN`, last, because a build-time constant is a development\n *    convenience and must never outrank what the request actually said.\n */\nexport function resolveStoreIdentifier(explicit?: string): string {\n  if (explicit) return explicit;\n\n  const { storeId, requestHost } = getRequestStore();\n  if (storeId) return storeId;\n\n  const injected = getInjectedRuntimeEnv().storeIdentifier;\n  if (injected) return injected;\n\n  if (requestHost) return requestHost;\n\n  const isBrowser = typeof window !== 'undefined';\n  if (isBrowser) return window.location.host;\n\n  try {\n    const viteEnv = (import.meta as { env?: { VITE_STORE_DOMAIN?: string } }).env\n      ?.VITE_STORE_DOMAIN;\n    if (viteEnv) return viteEnv;\n  } catch {\n    /* import.meta not available in all environments */\n  }\n  return (typeof process !== 'undefined' && process.env?.STORE_DOMAIN) || '';\n}\n\n/**\n * Converts languages object from API to array format.\n * API returns: { \"AR\": { code, name, ... }, \"EN\": { ... } }\n * We need: [{ code, name, ... }, { code, name, ... }]\n * todo:: return the languages as object from the APIs to avoid this\n */\nfunction languagesToArray(languages?: Record<string, Language>): Language[] | undefined {\n  if (!languages) return undefined;\n  // The SDK's localization modal reads `lang.iso_code` (not `code`) when a language is\n  // selected — without it the switch navigates to `/undefined/...`.\n  return Object.values(languages).map((lang) => ({ iso_code: lang.code, ...lang }));\n}\n\nexport const store = {\n  settings: async (storeIdentifier?: string): Promise<StoreContext | null> => {\n    const identifier = storeIdentifier ?? resolveStoreIdentifier();\n\n    if (!identifier) {\n      console.warn('[store.settings] No store identifier available');\n      return null;\n    }\n\n    const includeParams = DEFAULT_INCLUDE_ITEMS.map((i) => `include[]=${i}`).join('&');\n    const scopeId = getActiveScopeId();\n    const params = scopeId != null ? `${includeParams}&scope=${scopeId}` : includeParams;\n\n    try {\n      const json = await api\n        .get(`store/settings?${params}`, { timeout: 5000 })\n        .json<{ data?: SettingsApiResponse }>();\n\n      const data = json?.data;\n      if (!data) return null;\n\n      // Convert languages from object to array\n      const languages = languagesToArray(data.languages);\n\n      return {\n        store: data.store,\n        theme: data.theme,\n        languages,\n        currencies: data.currencies,\n        external_services: data.external_services,\n        headers: data.headers,\n        login: data.login,\n        affiliate: data.affiliate,\n        policy_url: data.policy_url,\n      };\n    } catch (error) {\n      console.error('[store.settings] Failed:', error);\n      return null;\n    }\n  },\n\n  queries: {\n    settings: (storeIdentifier?: string) =>\n      queryOptions<StoreContext | null>({\n        queryKey: [\n          'store',\n          'settings',\n          storeIdentifier,\n          getTwilightContext().locale,\n          getActiveScopeId(),\n        ],\n        queryFn: () => store.settings(storeIdentifier),\n      }),\n  },\n};\n"]}