@salla.sa/twilight-theme-engine 1.0.60 → 1.0.62

package/dist/{chunk-XTMHHLNK.js → chunk-SR4OTLTJ.js}

@@ -11,6 +11,9 @@ function parseRequestId(raw) {
   if (!raw) return null;
   return /^[1-9][0-9]{0,18}$/.test(raw) ? raw : null;
 }
+function parseStoreId(raw) {
+  return parseRequestId(raw);
+}
 var STORE_ID_HOSTS = ["preview.salla.design"];
 function hostnameOf(host) {
   const trimmed = host.trim().toLowerCase();
@@ -32,9 +35,10 @@ function hostIdentifiesStore(host) {
 function resolveRequestStoreId(url, cookieHeader, host) {
   return resolveRequestId(url, cookieHeader, host, STORE_ID_PARAM, STORE_ID_COOKIE_NAME);
 }
-var STORE_BASE_SEGMENT = /^[a-z0-9][a-z0-9_-]{0,62}$/i;
+var STORE_BASE_SEGMENT = /^[a-z0-9][a-z0-9._-]{0,62}$/i;
+var ROOT_FILE = /\.(ico|txt|xml|json|webmanifest|html?|js|mjs|css|map|png|jpe?g|gif|svg|webp|avif|woff2?|ttf|otf|eot|pdf|mp4|webm|wasm)$/i;
 function isStoreBaseSegment(value) {
-  return typeof value === "string" && STORE_BASE_SEGMENT.test(value) && !isLocale(value.toLowerCase());
+  return typeof value === "string" && STORE_BASE_SEGMENT.test(value) && !ROOT_FILE.test(value) && !isLocale(value.toLowerCase());
 }
 function resolveRequestStoreBase(url, host) {
   if (!allowsRequestStoreId(host)) return null;
@@ -67,6 +71,11 @@ function resolveRequestId(url, cookieHeader, host, param, cookieName) {
   }
   return fromQuery ?? parseRequestId(extractTokenFromCookies(cookieHeader, cookieName));
 }
+function rememberDevStoreId(id) {
+  if (typeof document === "undefined" || !isLoopback(window.location.hostname)) return;
+  const storeId = parseStoreId(id == null ? null : String(id));
+  if (storeId) document.cookie = `${STORE_ID_COOKIE_NAME}=${storeId}; path=/; SameSite=Lax`;
+}
 function clearAuthTokenCookie() {
   if (typeof document === "undefined") return;
   document.cookie = `${AUTH_TOKEN_COOKIE_NAME}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`;
@@ -173,7 +182,16 @@ function storeBaseRedirectHref(args) {
   url.searchParams.delete(STORE_ID_PARAM);
   return `${prefixStoreBase(url.pathname, username)}${url.search}${url.hash}`;
 }
+function loginRedirectHref(args) {
+  const { pathname, searchStr, origin, base } = args;
+  const first = pathname.split("/")[1];
+  const home = isLocale(first) ? `/${first}` : "/";
+  if ((pathname.replace(/\/$/, "") || "/") === home) return null;
+  const browserPath = (path) => base ? prefixStoreBase(path, base) : path;
+  const intended = `${origin}${browserPath(pathname)}${searchStr}`;
+  return `${browserPath(home)}?intended_to=${encodeURIComponent(intended)}`;
+}
 
-export { AUTH_TOKEN_COOKIE_NAME, clearAuthTokenCookie, extractScopeFromCookies, extractTokenFromCookies, hostIdentifiesStore, prefixStoreBase, readSdkScope, resolveRequestStore, resolveRequestStoreBase, resolveRequestVersionId, storeBaseRedirectHref, stripStoreBase, syncScopeCookie, withoutStoreUrlBase };
-//# sourceMappingURL=chunk-XTMHHLNK.js.map
-//# sourceMappingURL=chunk-XTMHHLNK.js.map
+export { AUTH_TOKEN_COOKIE_NAME, clearAuthTokenCookie, extractScopeFromCookies, extractTokenFromCookies, hostIdentifiesStore, isLoopback, loginRedirectHref, prefixStoreBase, readSdkScope, rememberDevStoreId, resolveRequestStore, resolveRequestStoreBase, resolveRequestVersionId, storeBaseRedirectHref, stripStoreBase, syncScopeCookie, withoutStoreUrlBase };
+//# sourceMappingURL=chunk-SR4OTLTJ.js.map
+//# sourceMappingURL=chunk-SR4OTLTJ.js.map

package/dist/chunk-SR4OTLTJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/cookies.ts","../src/utils/store-base.ts"],"names":[],"mappings":";;;AAEO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,iBAAA,GAAoB,OAAA;AAoB1B,IAAM,oBAAA,GAAuB,WAAA;AAG7B,IAAM,cAAA,GAAiB,SAAA;AAsBvB,IAAM,sBAAA,GAAyB,WAAA;AAG/B,IAAM,gBAAA,GAAmB,WAAA;AAchC,SAAS,eAAe,GAAA,EAA+C;AACrE,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,GAAG,CAAA,GAAI,GAAA,GAAM,IAAA;AAChD;AAGO,SAAS,aAAa,GAAA,EAA+C;AAC1E,EAAA,OAAO,eAAe,GAAG,CAAA;AAC3B;AAoCO,IAAM,cAAA,GAAoC,CAAC,sBAAsB,CAAA;AAGxE,SAAS,WAAW,IAAA,EAAsB;AACxC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,IAAA,EAAK,CAAE,WAAA,EAAY;AAExC,EAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA,GAAI,CAAC,CAAA,IAAK,OAAA;AAClF,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACjC,EAAA,OAAO,UAAU,EAAA,GAAK,OAAA,GAAU,OAAA,CAAQ,KAAA,CAAM,GAAG,KAAK,CAAA;AACxD;AAEO,SAAS,WAAW,QAAA,EAA2B;AACpD,EAAA,OACE,QAAA,KAAa,eACb,QAAA,KAAa,WAAA,IACb,aAAa,OAAA,IACb,QAAA,CAAS,SAAS,YAAY,CAAA;AAElC;AAkBO,SAAS,qBAAqB,IAAA,EAA0C;AAC7E,EAAA,IAAI,CAAC,MAAM,OAAO,KAAA;AAClB,EAAA,MAAM,QAAA,GAAW,WAAW,IAAI,CAAA;AAChC,EAAA,OAAO,cAAA,CAAe,QAAA,CAAS,QAAQ,CAAA,IAAK,WAAW,QAAQ,CAAA;AACjE;AAYO,SAAS,oBAAoB,IAAA,EAA0C;AAC5E,EAAA,OAAO,OAAA,CAAQ,IAAI,CAAA,IAAK,CAAC,qBAAqB,IAAI,CAAA;AACpD;AAgBO,SAAS,qBAAA,CACd,GAAA,EACA,YAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,gBAAA,CAAiB,GAAA,EAAK,YAAA,EAAc,IAAA,EAAM,gBAAgB,oBAAoB,CAAA;AACvF;AAYA,IAAM,kBAAA,GAAqB,8BAAA;AAC3B,IAAM,SAAA,GACJ,0HAAA;AAcK,SAAS,mBAAmB,KAAA,EAAmD;AACpF,EAAA,OACE,OAAO,KAAA,KAAU,QAAA,IACjB,kBAAA,CAAmB,IAAA,CAAK,KAAK,CAAA,IAC7B,CAAC,SAAA,CAAU,IAAA,CAAK,KAAK,CAAA,IACrB,CAAC,QAAA,CAAS,KAAA,CAAM,aAAa,CAAA;AAEjC;AA4BO,SAAS,uBAAA,CACd,KACA,IAAA,EACe;AACf,EAAA,IAAI,CAAC,oBAAA,CAAqB,IAAI,CAAA,EAAG,OAAO,IAAA;AAExC,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,MAAA,CAAO,YAAA,CAAa,GAAA,CAAI,cAAc,GAAG,OAAO,IAAA;AAEpD,EAAA,MAAM,QAAQ,MAAA,CAAO,QAAA,CAAS,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AAC1C,EAAA,OAAO,kBAAA,CAAmB,KAAK,CAAA,GAAI,KAAA,GAAQ,IAAA;AAC7C;AAkBO,SAAS,mBAAA,CACd,GAAA,EACA,YAAA,EACA,IAAA,EACc;AACd,EAAA,MAAM,SAAA,GAAY,uBAAA,CAAwB,GAAA,EAAK,IAAI,CAAA;AACnD,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,SAAS,SAAA,GAAY,IAAA,GAAO,qBAAA,CAAsB,GAAA,EAAK,cAAc,IAAI;AAAA,GAC3E;AACF;AAaO,SAAS,uBAAA,CACd,GAAA,EACA,YAAA,EACA,IAAA,EACe;AACf,EAAA,OAAO,gBAAA,CAAiB,GAAA,EAAK,YAAA,EAAc,IAAA,EAAM,kBAAkB,sBAAsB,CAAA;AAC3F;AASA,SAAS,gBAAA,CACP,GAAA,EACA,YAAA,EACA,IAAA,EACA,OACA,UAAA,EACe;AACf,EAAA,IAAI,CAAC,oBAAA,CAAqB,IAAI,CAAA,EAAG,OAAO,IAAA;AAExC,EAAA,IAAI,SAAA,GAA2B,IAAA;AAC/B,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,cAAA,CAAe,IAAI,GAAA,CAAI,GAAG,EAAE,YAAA,CAAa,GAAA,CAAI,KAAK,CAAC,CAAA;AAAA,EACjE,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,SAAA,IAAa,cAAA,CAAe,uBAAA,CAAwB,YAAA,EAAc,UAAU,CAAC,CAAA;AACtF;AAYO,SAAS,mBAAmB,EAAA,EAA8C;AAC/E,EAAA,IAAI,OAAO,aAAa,WAAA,IAAe,CAAC,WAAW,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC9E,EAAA,MAAM,UAAU,YAAA,CAAa,EAAA,IAAM,OAAO,IAAA,GAAO,MAAA,CAAO,EAAE,CAAC,CAAA;AAC3D,EAAA,IAAI,SAAS,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG,oBAAoB,IAAI,OAAO,CAAA,sBAAA,CAAA;AACnE;AAEO,SAAS,oBAAA,GAA6B;AAC3C,EAAA,IAAI,OAAO,aAAa,WAAA,EAAa;AACrC,EAAA,QAAA,CAAS,MAAA,GAAS,GAAG,sBAAsB,CAAA,gDAAA,CAAA;AAC7C;AAEO,SAAS,uBAAA,CACd,cACA,UAAA,EACe;AACf,EAAA,IAAI,CAAC,cAAc,OAAO,IAAA;AAE1B,EAAA,MAAM,MAAA,GAAS,GAAG,UAAU,CAAA,CAAA,CAAA;AAC5B,EAAA,IAAI,KAAA,GAAQ,CAAA;AAEZ,EAAA,OAAO,KAAA,GAAQ,aAAa,MAAA,EAAQ;AAClC,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,OAAA,CAAQ,MAAA,EAAQ,KAAK,CAAA;AAC9C,IAAA,IAAI,GAAA,KAAQ,IAAI,OAAO,IAAA;AAEvB,IAAA,MAAM,WAAW,GAAA,GAAM,CAAA,GAAI,YAAA,CAAa,GAAA,GAAM,CAAC,CAAA,GAAI,EAAA;AACnD,IAAA,IAAI,QAAA,KAAa,EAAA,IAAM,QAAA,KAAa,GAAA,IAAO,aAAa,GAAA,EAAK;AAC3D,MAAA,IAAI,GAAA,GAAM,YAAA,CAAa,OAAA,CAAQ,GAAA,EAAK,GAAG,CAAA;AACvC,MAAA,IAAI,GAAA,KAAQ,EAAA,EAAI,GAAA,GAAM,YAAA,CAAa,MAAA;AAEnC,MAAA,MAAM,KAAA,GAAQ,aAAa,KAAA,CAAM,GAAA,GAAM,OAAO,MAAA,EAAQ,GAAG,EAAE,IAAA,EAAK;AAChE,MAAA,IAAI;AACF,QAAA,OAAO,kBAAA,CAAmB,KAAK,CAAA,IAAK,IAAA;AAAA,MACtC,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,KAAA,IAAS,IAAA;AAAA,MAClB;AAAA,IACF;AAEA,IAAA,KAAA,GAAQ,MAAM,MAAA,CAAO,MAAA;AAAA,EACvB;AAEA,EAAA,OAAO,IAAA;AACT;AAiBA,SAAS,eAAe,GAAA,EAAkC;AACxD,EAAA,IAAI,GAAA,IAAO,MAAM,OAAO,IAAA;AACxB,EAAA,IAAI,OAAO,QAAQ,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,MAAA,CAAO,GAAG,CAAA,EAAE;AACtD,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,IAAI,CAAA,CAAE,EAAA,IAAM,IAAA,EAAM,OAAO,IAAA;AACzB,EAAA,MAAM,QAAqB,EAAE,EAAA,EAAI,MAAA,CAAO,CAAA,CAAE,EAAE,CAAA,EAAE;AAC9C,EAAA,IAAI,EAAE,IAAA,IAAQ,IAAA,QAAY,IAAA,GAAO,MAAA,CAAO,EAAE,IAAI,CAAA;AAC9C,EAAA,IAAI,EAAE,eAAA,IAAmB,IAAA,QAAY,eAAA,GAAkB,MAAA,CAAO,EAAE,eAAe,CAAA;AAC/E,EAAA,IAAI,EAAE,aAAA,IAAiB,IAAA,QAAY,aAAA,GAAgB,MAAA,CAAO,EAAE,aAAa,CAAA;AACzE,EAAA,OAAO,KAAA;AACT;AAQO,SAAS,wBAAwB,YAAA,EAAiD;AACvF,EAAA,MAAM,GAAA,GAAM,uBAAA,CAAwB,YAAA,EAAc,iBAAiB,CAAA;AACnE,EAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,EAAA,IAAI;AACF,IAAA,OAAO,cAAA,CAAe,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAAA,EACvC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAcO,SAAS,YAAA,GAA+C;AAC7D,EAAA,MAAM,UAAU,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,OAAO,OAAA,GAAU,MAAA;AACxE,EAAA,IAAI,OAAO,OAAA,EAAS,GAAA,KAAQ,UAAA,EAAY,OAAO,MAAA;AAC/C,EAAA,OAAO,cAAA,CAAe,OAAA,CAAQ,GAAA,CAAI,iBAAiB,CAAC,CAAA;AACtD;AASA,IAAM,oBAAA,GAAuB,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AAE5C,IAAM,SAAA,GAAY,CAAC,CAAA,EAAuB,CAAA,KACxC,IAAA,CAAK,UAAU,CAAC,CAAA,KAAM,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA;AAejC,SAAS,iBAAiB,KAAA,EAAoC;AACnE,EAAA,IAAI,OAAO,QAAA,KAAa,WAAA,EAAa,OAAO,KAAA;AAC5C,EAAA,IAAI,UAAU,uBAAA,CAAwB,QAAA,CAAS,MAAM,CAAA,EAAG,KAAK,GAAG,OAAO,KAAA;AAEvE,EAAA,IAAI,SAAS,IAAA,EAAM;AACjB,IAAA,QAAA,CAAS,MAAA,GAAS,GAAG,iBAAiB,CAAA,gDAAA,CAAA;AACtC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,KAAA,GAAQ,kBAAA,CAAmB,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AACtD,EAAA,QAAA,CAAS,SAAS,CAAA,EAAG,iBAAiB,CAAA,CAAA,EAAI,KAAK,qBAAqB,oBAAoB,CAAA,cAAA,CAAA;AACxF,EAAA,OAAO,IAAA;AACT;AAOO,SAAS,eAAA,GAA2B;AACzC,EAAA,MAAM,QAAQ,YAAA,EAAa;AAC3B,EAAA,OAAO,KAAA,KAAU,MAAA,GAAY,KAAA,GAAQ,gBAAA,CAAiB,KAAK,CAAA;AAC7D;;;AC7dO,SAAS,cAAA,CAAe,UAAkB,IAAA,EAAsB;AACrE,EAAA,MAAM,MAAA,GAAS,IAAI,IAAI,CAAA,CAAA;AACvB,EAAA,IAAI,QAAA,KAAa,QAAQ,OAAO,GAAA;AAChC,EAAA,OAAO,QAAA,CAAS,UAAA,CAAW,CAAA,EAAG,MAAM,CAAA,CAAA,CAAG,IAAI,QAAA,CAAS,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,QAAA;AAC7E;AASO,SAAS,eAAA,CAAgB,MAAc,IAAA,EAAsB;AAClE,EAAA,MAAM,SAAS,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,GAAI,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAErD,EAAA,MAAM,MAAA,GAAS,WAAW,GAAA,IAAO,MAAA,CAAO,CAAC,CAAA,KAAM,GAAA,IAAO,MAAA,CAAO,CAAC,CAAA,KAAM,GAAA;AACpE,EAAA,OAAO,CAAA,CAAA,EAAI,IAAI,CAAA,EAAG,MAAA,GAAS,OAAO,KAAA,CAAM,CAAC,IAAI,MAAM,CAAA,CAAA;AACrD;AAsBO,SAAS,mBAAA,CACd,QAAA,EACA,gBAAA,EACA,QAAA,EACQ;AACR,EAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,gBAAA,EAAkB,QAAQ,CAAA;AACtD,EAAA,IAAI,CAAC,KAAK,OAAO,QAAA;AAEjB,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA;AAInC,EAAA,IAAI,EAAA,GAAK,EAAA;AACT,EAAA,IAAI,QAAA,CAAS,SAAS,CAAC,CAAC,KAAK,QAAA,CAAS,CAAC,CAAA,KAAM,GAAA,EAAK,EAAA,GAAK,CAAA;AAAA,OAAA,IAC9C,QAAA,CAAS,CAAC,CAAA,KAAM,GAAA,EAAK,EAAA,GAAK,CAAA;AACnC,EAAA,IAAI,EAAA,KAAO,IAAI,OAAO,QAAA;AAEtB,EAAA,QAAA,CAAS,MAAA,CAAO,IAAI,CAAC,CAAA;AACrB,EAAA,OAAO,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,IAAK,GAAA;AAC/B;AAGA,SAAS,eAAA,CAAgB,kBAA0B,QAAA,EAAyC;AAC1F,EAAA,MAAM,IAAA,GAAO,iBAAiB,KAAA,CAAM,GAAG,EAAE,MAAA,CAAO,OAAO,EAAE,GAAA,EAAI;AAC7D,EAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,EAAA,IAAI,QAAA,EAAU,OAAO,IAAA,KAAS,QAAA,GAAW,IAAA,GAAO,IAAA;AAChD,EAAA,OAAO,QAAA,CAAS,IAAI,CAAA,GAAI,IAAA,GAAO,IAAA;AACjC;AAqBO,SAAS,sBAAsB,IAAA,EAKpB;AAChB,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAM,QAAA,EAAU,MAAK,GAAI,IAAA;AACvC,EAAA,IAAI,CAAC,qBAAqB,IAAI,CAAA,IAAK,CAAC,kBAAA,CAAmB,QAAQ,CAAA,IAAK,QAAA,KAAa,IAAA,EAAM;AACrF,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,EAAM,2BAA2B,CAAA;AACrD,EAAA,GAAA,CAAI,YAAA,CAAa,OAAO,cAAc,CAAA;AACtC,EAAA,OAAO,CAAA,EAAG,eAAA,CAAgB,GAAA,CAAI,QAAA,EAAU,QAAQ,CAAC,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA;AAC3E;AAOO,SAAS,kBAAkB,IAAA,EAKhB;AAChB,EAAA,MAAM,EAAE,QAAA,EAAU,SAAA,EAAW,MAAA,EAAQ,MAAK,GAAI,IAAA;AAC9C,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AACnC,EAAA,MAAM,OAAO,QAAA,CAAS,KAAK,CAAA,GAAI,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA,GAAK,GAAA;AAC7C,EAAA,IAAA,CAAK,SAAS,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,IAAK,GAAA,MAAS,MAAM,OAAO,IAAA;AAE1D,EAAA,MAAM,cAAc,CAAC,IAAA,KAAkB,OAAO,eAAA,CAAgB,IAAA,EAAM,IAAI,CAAA,GAAI,IAAA;AAC5E,EAAA,MAAM,QAAA,GAAW,GAAG,MAAM,CAAA,EAAG,YAAY,QAAQ,CAAC,GAAG,SAAS,CAAA,CAAA;AAC9D,EAAA,OAAO,GAAG,WAAA,CAAY,IAAI,CAAC,CAAA,aAAA,EAAgB,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AACzE","file":"chunk-SR4OTLTJ.js","sourcesContent":["import { isLocale } from '../providers/locale-constants';\n\nexport const AUTH_TOKEN_COOKIE_NAME = 'token';\nexport const SCOPE_COOKIE_NAME = 'scope';\n\n/**\n * Which store this request is for, when the hostname does not say.\n *\n * A live storefront is reached at its own domain, so the hostname identifies it\n * and nothing else is needed. A preview is not: every theme under review is\n * served from the one preview hostname, so the store has to be named some other\n * way — the dispatcher takes it from `?storeId=` and puts it here, the same way\n * it remembers which theme to serve.\n *\n * Written by the dispatcher rather than the theme, and set on the *forwarded\n * request* as well as the response, because the response cookie only arrives in\n * time for the second page load and the first one has to render too.\n *\n * The literal is a contract with `STORE_COOKIE` in store-front-dispacher\n * (`src/dispatch/preview.ts`), and **nothing checks the two agree**. Drift does\n * not fail loudly — it renders somebody else's shop. Grep both repos before\n * changing it.\n */\nexport const STORE_ID_COOKIE_NAME = 'salla_sid';\n\n/** Query parameter naming the store, on a host that serves more than one. */\nexport const STORE_ID_PARAM = 'storeId';\n\n/**\n * Which version of the theme's settings to render.\n *\n * A merchant's theme settings are versioned, and the storefront normally shows\n * whichever version is live — the API answers with it, and names it back as\n * `theme.profile.id`. Two places need a different one: the merchant's own theme\n * editor, which previews a draft version before it is published, and a partner\n * running a theme locally against a store whose settings they are editing. Both\n * open the theme inside an iframe, and the version travels in that URL.\n *\n * Named `versionId` rather than the `version_id` the Dashboard uses internally,\n * because it sits beside `?storeId=` and one URL should not spell two ids two\n * ways. The value is the same one either way: the Optimus-encoded version id,\n * which is exactly what `s-version-id` has always carried.\n *\n * The literal is a contract with `VERSION_COOKIE` in store-front-dispacher\n * (`src/dispatch/preview.ts`), on the same terms as {@link STORE_ID_COOKIE_NAME}:\n * nothing checks the two agree, and drift shows a merchant the wrong version of\n * their own settings rather than failing.\n */\nexport const VERSION_ID_COOKIE_NAME = 'salla_vid';\n\n/** Query parameter naming the theme-settings version, where one may be named. */\nexport const VERSION_ID_PARAM = 'versionId';\n\n/**\n * An id named by a request is an integer, and anything else is not one.\n *\n * Validated rather than passed through because these values end up in an upstream\n * API path and header. Leading zeroes, signs, decimals and whitespace are all\n * rejected: the point is a single canonical form, not the widest set of things\n * that could be coerced into a number.\n *\n * One function for both ids on purpose. They arrive the same way, from the same\n * untrusted place, and are spent the same way; two copies of this rule would be\n * two chances for one of them to be relaxed on its own.\n */\nfunction parseRequestId(raw: string | null | undefined): string | null {\n  if (!raw) return null;\n  return /^[1-9][0-9]{0,18}$/.test(raw) ? raw : null;\n}\n\n/** A store id in its canonical form, or null when it is not one. */\nexport function parseStoreId(raw: string | null | undefined): string | null {\n  return parseRequestId(raw);\n}\n\n/** A theme-settings version id in its canonical form, or null when it is not one. */\nexport function parseVersionId(raw: string | null | undefined): string | null {\n  return parseRequestId(raw);\n}\n\n/** The store id the dispatcher left in the cookie, or null when absent or malformed. */\nexport function extractStoreIdFromCookies(cookieHeader: string | null): string | null {\n  return parseStoreId(extractTokenFromCookies(cookieHeader, STORE_ID_COOKIE_NAME));\n}\n\n/** The version id the dispatcher left in the cookie, or null when absent or malformed. */\nexport function extractVersionIdFromCookies(cookieHeader: string | null): string | null {\n  return parseVersionId(extractTokenFromCookies(cookieHeader, VERSION_ID_COOKIE_NAME));\n}\n\n/**\n * The only hosts on which a request may name its own store.\n *\n * **This is a security boundary, not a convenience.** On a merchant's own domain\n * the hostname *is* the store, and it is the only thing that may decide. A theme\n * that also honoured `?storeId=` there would let anyone open\n * `https://reefperfumes.com/?storeId=<someone else>` and be served a different\n * merchant's shop from the domain its owner controls — their branding, their\n * customers' address bar, somebody else's catalogue — and the cookie would keep\n * serving it for the rest of that browser's session. Salla points SaaS domains\n * at this dispatcher, so those hostnames are real and reachable.\n *\n * The override exists for one situation: a host that serves many stores and so\n * cannot identify one from its name. That is the preview host, where every theme\n * under review answers on the same address, and local development.\n *\n * Adding an entry grants that host the ability to render any store on request.\n * Add nothing that a merchant's traffic reaches.\n */\nexport const STORE_ID_HOSTS: readonly string[] = ['preview.salla.design'];\n\n/** The hostname alone — a port never distinguishes one host's authority from another's. */\nfunction hostnameOf(host: string): string {\n  const trimmed = host.trim().toLowerCase();\n  // IPv6 literals are bracketed, and the colons inside them are not a port.\n  if (trimmed.startsWith('[')) return trimmed.slice(0, trimmed.indexOf(']') + 1) || trimmed;\n  const colon = trimmed.indexOf(':');\n  return colon === -1 ? trimmed : trimmed.slice(0, colon);\n}\n\nexport function isLoopback(hostname: string): boolean {\n  return (\n    hostname === 'localhost' ||\n    hostname === '127.0.0.1' ||\n    hostname === '[::1]' ||\n    hostname.endsWith('.localhost')\n  );\n}\n\n/**\n * Whether this host is allowed to let the request choose a store.\n *\n * Deliberately an allowlist of exact hostnames plus loopback. No suffix matching:\n * a rule like \"anything ending in salla.design\" is one wildcard DNS record away\n * from admitting a host nobody meant to admit, and the list of hosts that serve\n * more than one store is short and known.\n *\n * It gates {@link resolveRequestVersionId} as well, and the name has been left\n * alone rather than generalised because one predicate that both call is the\n * property worth keeping — a second, subtly different list is how a host ends up\n * permitted to name one thing and not the other. A version is worth gating for\n * the same reason a store is: on a merchant's own domain, honouring\n * `?versionId=` would publish whatever draft settings they are still working on\n * to anyone who guessed the URL.\n */\nexport function allowsRequestStoreId(host: string | null | undefined): boolean {\n  if (!host) return false;\n  const hostname = hostnameOf(host);\n  return STORE_ID_HOSTS.includes(hostname) || isLoopback(hostname);\n}\n\n/**\n * Whether this host *is* a store, so its name can be used as the identifier.\n *\n * The exact inverse of {@link allowsRequestStoreId}, and deliberately written as\n * one so the two can never disagree: a host that may name its store is a host\n * that serves more than one, and a host that serves more than one cannot be the\n * answer to \"which store is this?\". `preview.salla.design` and `localhost:5188`\n * are not shops; asking the API about them earns a 422 and a page that reads as\n * a broken theme.\n */\nexport function hostIdentifiesStore(host: string | null | undefined): boolean {\n  return Boolean(host) && !allowsRequestStoreId(host);\n}\n\n/**\n * The store this request names, on a host permitted to name one.\n *\n * The host check is inside the resolution rather than at a call site, because a\n * call site is a thing someone can add without reading this comment. There is no\n * way to ask \"what store did the request name?\" without also asking \"is this a\n * host that may say?\" — get it wrong and the answer is a security bug that looks\n * like a feature.\n *\n * Between the two permitted sources the URL wins, the same precedence the\n * dispatcher uses for the theme and for the same reason: a link is how someone\n * switches, and a cookie they cannot see should never beat the address they\n * just typed.\n */\nexport function resolveRequestStoreId(\n  url: string,\n  cookieHeader: string | null,\n  host: string | null | undefined\n): string | null {\n  return resolveRequestId(url, cookieHeader, host, STORE_ID_PARAM, STORE_ID_COOKIE_NAME);\n}\n\n/**\n * A store username as it can appear as the first segment of a path.\n *\n * Starts with a letter or digit, so nothing the platform mounts at the root of a\n * host — `/_serverFn/`, `/.well-known/` — is ever read as a store. Dots are allowed\n * (`zyros.sa`), but a root file (`/favicon.ico`, `/robots.txt`) is not a store.\n * The value is sent upstream as the `store-identifier` header, so the set is kept\n * narrow on purpose: a username outside it cannot be addressed by path, and\n * `?storeId=` still can.\n */\nconst STORE_BASE_SEGMENT = /^[a-z0-9][a-z0-9._-]{0,62}$/i;\nconst ROOT_FILE =\n  /\\.(ico|txt|xml|json|webmanifest|html?|js|mjs|css|map|png|jpe?g|gif|svg|webp|avif|woff2?|ttf|otf|eot|pdf|mp4|webm|wasm)$/i;\n\n/**\n * Whether this could be a store's username in the first segment of a path.\n *\n * A supported locale code never is, in any case: `/ar` and `/EN` are languages,\n * so `preview.salla.design/en/cart` is the English cart of the store the cookie\n * names. That makes a store whose username is a locale code (`ar` is one)\n * unreachable by path; `?storeId=` still reaches it.\n *\n * The same predicate decides whether a username may become a path's root\n * (`storeBaseRedirectHref`). That is what stops the redirect from looping: a\n * store called `ar`, sent to `/ar/…`, would find no store there and be sent again.\n */\nexport function isStoreBaseSegment(value: string | null | undefined): value is string {\n  return (\n    typeof value === 'string' &&\n    STORE_BASE_SEGMENT.test(value) &&\n    !ROOT_FILE.test(value) &&\n    !isLocale(value.toLowerCase())\n  );\n}\n\n/**\n * The store the first segment of this request's path names, on a host permitted\n * to name one.\n *\n * On such a host the first segment **is** the store. It is the root of the\n * application there, so `https://preview.salla.design/mtgr-alaatr-2/cart` is the\n * cart of the store whose username is `mtgr-alaatr-2`. This is a rule rather than\n * a guess, and it has to be: `cart`, `offers` and `search` are all real store\n * usernames, so a store cannot be told from a page by looking at the segment.\n * `/cart` on these hosts is the store called `cart`.\n *\n * The one segment that is not a store is a supported locale code (see\n * {@link isStoreBaseSegment}). `/ar/cart` names a language, and the store comes\n * from the cookie or `VITE_STORE_DOMAIN`, as it would at `/`.\n *\n * A URL that carries `storeId` is not read this way at all, whatever its value.\n * That is how `salla theme dev` names a store (`/ar?storeId=…`), on a path that\n * begins with a page; the root loader then redirects to the store's own address.\n * Checking for a *valid* id instead would let a malformed one hand the page's\n * first segment the store's job. (On the preview host the dispatcher removes the\n * parameter and sends a cookie; the editor opens that host at `/`, where there is\n * no segment to read.)\n *\n * Same gate as {@link resolveRequestStoreId}, for the same reason: on a merchant's\n * own domain the hostname is the store and the path is only ever a page.\n */\nexport function resolveRequestStoreBase(\n  url: string,\n  host: string | null | undefined\n): string | null {\n  if (!allowsRequestStoreId(host)) return null;\n\n  let parsed: URL;\n  try {\n    parsed = new URL(url);\n  } catch {\n    return null;\n  }\n  if (parsed.searchParams.has(STORE_ID_PARAM)) return null;\n\n  const first = parsed.pathname.split('/')[1];\n  return isStoreBaseSegment(first) ? first : null;\n}\n\n/** Which store a request addressed, and how. At most one of the two is set. */\nexport interface RequestStore {\n  /** Named by `?storeId=`, or by the cookie remembering it. */\n  storeId: string | null;\n  /** Named by the first segment of the path. */\n  storeBase: string | null;\n}\n\n/**\n * The store this request addressed: the query, then the path, then the cookie.\n *\n * The path outranks the cookie because it is the address the visitor can see.\n * The cookie is one value for the whole preview host, so with two stores open in\n * two tabs it names whichever was opened last; the path names the one in front\n * of them.\n */\nexport function resolveRequestStore(\n  url: string,\n  cookieHeader: string | null,\n  host: string | null | undefined\n): RequestStore {\n  const storeBase = resolveRequestStoreBase(url, host);\n  return {\n    storeBase,\n    storeId: storeBase ? null : resolveRequestStoreId(url, cookieHeader, host),\n  };\n}\n\n/**\n * The theme-settings version this request names, on a host permitted to name one.\n *\n * Same shape and the same host gate as {@link resolveRequestStoreId}, deliberately:\n * both answer \"what did this request ask to be shown?\", both are reached only on\n * a host that serves more than one thing, and a version that could be named where\n * a store could not would be a second rule to keep in step with the first.\n *\n * Null is the ordinary answer, and it is not a failure — it means nothing\n * addressed a version, so the store's own live one is what gets rendered.\n */\nexport function resolveRequestVersionId(\n  url: string,\n  cookieHeader: string | null,\n  host: string | null | undefined\n): string | null {\n  return resolveRequestId(url, cookieHeader, host, VERSION_ID_PARAM, VERSION_ID_COOKIE_NAME);\n}\n\n/**\n * The id this request names, from the query first and the cookie after.\n *\n * The host check lives here rather than at either call site, for the reason the\n * two wrappers above are wrappers at all: there must be no way to ask what a\n * request named without also asking whether this host may say.\n */\nfunction resolveRequestId(\n  url: string,\n  cookieHeader: string | null,\n  host: string | null | undefined,\n  param: string,\n  cookieName: string\n): string | null {\n  if (!allowsRequestStoreId(host)) return null;\n\n  let fromQuery: string | null = null;\n  try {\n    fromQuery = parseRequestId(new URL(url).searchParams.get(param));\n  } catch {\n    /* a relative or malformed URL simply names nothing */\n  }\n  return fromQuery ?? parseRequestId(extractTokenFromCookies(cookieHeader, cookieName));\n}\n\n/**\n * Deletes the auth `token` cookie. This cookie is written client-side by the theme\n * (TwilightProvider), not by the SDK — `salla.cookie.clearAll()` only clears its own\n * allowlist and leaves `token` behind — so logout must clear it here. Client-only.\n */\n/**\n * On a dev server, remembers the store the page is showing, so a later URL that\n * names no store keeps it instead of falling back to `VITE_STORE_DOMAIN`.\n * Loopback only: on the preview host this cookie belongs to the dispatcher. Client-only.\n */\nexport function rememberDevStoreId(id: string | number | null | undefined): void {\n  if (typeof document === 'undefined' || !isLoopback(window.location.hostname)) return;\n  const storeId = parseStoreId(id == null ? null : String(id));\n  if (storeId) document.cookie = `${STORE_ID_COOKIE_NAME}=${storeId}; path=/; SameSite=Lax`;\n}\n\nexport function clearAuthTokenCookie(): void {\n  if (typeof document === 'undefined') return;\n  document.cookie = `${AUTH_TOKEN_COOKIE_NAME}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`;\n}\n\nexport function extractTokenFromCookies(\n  cookieHeader: string | null,\n  cookieName: string\n): string | null {\n  if (!cookieHeader) return null;\n\n  const prefix = `${cookieName}=`;\n  let start = 0;\n\n  while (start < cookieHeader.length) {\n    const idx = cookieHeader.indexOf(prefix, start);\n    if (idx === -1) return null;\n\n    const prevChar = idx > 0 ? cookieHeader[idx - 1] : '';\n    if (prevChar === '' || prevChar === ';' || prevChar === ' ') {\n      let end = cookieHeader.indexOf(';', idx);\n      if (end === -1) end = cookieHeader.length;\n\n      const value = cookieHeader.slice(idx + prefix.length, end).trim();\n      try {\n        return decodeURIComponent(value) || null;\n      } catch {\n        return value || null;\n      }\n    }\n\n    start = idx + prefix.length;\n  }\n\n  return null;\n}\n\n/**\n * The scope the Salla SDK persists as `scope`: the market (`id`/`type`) plus, once\n * bullet delivery confirms an address or branch, the allocation. The SDK sends all\n * four as request headers (`s-scope-id`, `s-scope-type`, `s-scope-allocation-type`,\n * `s-scope-allocation-id`) and the API resolves stock per allocation — a scope sent\n * without its allocation is a different question, answered from a different branch.\n */\nexport interface ActiveScope {\n  id: string;\n  type?: string;\n  allocation_type?: string;\n  allocation_id?: string;\n}\n\n/** The SDK stores the scope either as its full object or as a bare id. */\nfunction normalizeScope(raw: unknown): ActiveScope | null {\n  if (raw == null) return null;\n  if (typeof raw !== 'object') return { id: String(raw) };\n  const s = raw as Record<string, unknown>;\n  if (s.id == null) return null;\n  const scope: ActiveScope = { id: String(s.id) };\n  if (s.type != null) scope.type = String(s.type);\n  if (s.allocation_type != null) scope.allocation_type = String(s.allocation_type);\n  if (s.allocation_id != null) scope.allocation_id = String(s.allocation_id);\n  return scope;\n}\n\n/**\n * Reads the active scope from the `scope` cookie, which Salla persists as a JSON\n * object (e.g. `{\"id\":123,\"type\":\"scope\",\"allocation_type\":\"branch\",\"allocation_id\":\"9\"}`).\n * Returns null when the cookie is missing or unparseable. Used server-side, where\n * `salla.storage` is absent.\n */\nexport function extractScopeFromCookies(cookieHeader: string | null): ActiveScope | null {\n  const raw = extractTokenFromCookies(cookieHeader, SCOPE_COOKIE_NAME);\n  if (!raw) return null;\n  try {\n    return normalizeScope(JSON.parse(raw));\n  } catch {\n    return null;\n  }\n}\n\n/** {@link extractScopeFromCookies} reduced to the id. */\nexport function extractScopeIdFromCookies(cookieHeader: string | null): string | null {\n  return extractScopeFromCookies(cookieHeader)?.id ?? null;\n}\n\n/**\n * The scope the Salla SDK persisted in its storage (`salla.storage.get('scope')`).\n *\n * Returns `undefined` when the SDK storage API isn't ready yet — deliberately\n * distinct from `null` (\"no branch selected\"), so callers can't mistake a\n * not-yet-hydrated SDK for a cleared selection. Client-only.\n */\nexport function readSdkScope(): ActiveScope | null | undefined {\n  const storage = typeof window !== 'undefined' ? window.salla?.storage : undefined;\n  if (typeof storage?.get !== 'function') return undefined;\n  return normalizeScope(storage.get(SCOPE_COOKIE_NAME));\n}\n\n/** {@link readSdkScope} reduced to the id; keeps the not-ready/none distinction. */\nexport function readSdkScopeId(): string | null | undefined {\n  const scope = readSdkScope();\n  return scope === undefined ? undefined : (scope?.id ?? null);\n}\n\n/** One year — the SDK keeps the selected branch in localStorage indefinitely. */\nconst SCOPE_COOKIE_MAX_AGE = 60 * 60 * 24 * 365;\n\nconst sameScope = (a: ActiveScope | null, b: ActiveScope | null): boolean =>\n  JSON.stringify(a) === JSON.stringify(b);\n\n/**\n * Mirrors the scope the Salla SDK selected into the `scope` cookie so the SERVER\n * can see it. The SDK persists the selection in localStorage ONLY and writes no\n * cookie, so without this the server computes scope=null for every visitor who\n * picked a branch while the client computes the branch id — the dehydrated settings\n * query key never matches and the client refetches store settings on every page\n * load (SAL-122).\n *\n * Written in the SDK's own JSON shape so {@link extractScopeFromCookies} parses it,\n * allocation included: the bullet-delivery component writes the same cookie with the\n * full object, and rewriting it with the id alone would drop the branch the server\n * needs. Returns true when the cookie was (re)written. Client-only; no-op on the server.\n */\nexport function writeScopeCookie(scope: ActiveScope | null): boolean {\n  if (typeof document === 'undefined') return false;\n  if (sameScope(extractScopeFromCookies(document.cookie), scope)) return false;\n\n  if (scope == null) {\n    document.cookie = `${SCOPE_COOKIE_NAME}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`;\n    return true;\n  }\n\n  const value = encodeURIComponent(JSON.stringify(scope));\n  document.cookie = `${SCOPE_COOKIE_NAME}=${value}; path=/; max-age=${SCOPE_COOKIE_MAX_AGE}; samesite=lax`;\n  return true;\n}\n\n/**\n * Keeps the `scope` cookie in step with the SDK's selected branch. Call on every\n * client navigation; it no-ops while the SDK storage API is still hydrating so a\n * late-loading SDK can't wipe a valid cookie.\n */\nexport function syncScopeCookie(): boolean {\n  const scope = readSdkScope();\n  return scope === undefined ? false : writeScopeCookie(scope);\n}\n","/**\n * @fileoverview Paths on a host where the store is the root.\n *\n * On `preview.salla.design` and a dev server a store is addressed by the first\n * segment of the path — `/mtgr-alaatr-2/cart` — and that segment is the root of\n * the application. No route knows about it: the router takes it off every URL on\n * the way in and puts it back on every URL on the way out\n * (`tanstack/store-base.ts`), so pages, links and loaders all see `/cart`.\n *\n * Which segment it is, and on which hosts, is decided once, by\n * `resolveRequestStoreBase` in `utils/cookies.ts`. This file only moves it on and\n * off a path. See `docs/store-base-path.md`.\n */\nimport { allowsRequestStoreId, isStoreBaseSegment, STORE_ID_PARAM } from './cookies';\nimport { isLocale } from '../providers/locale-constants';\n\n/**\n * An application pathname, without the store segment in front.\n *\n * Only a whole segment is removed, so `/mtgr-alaatr-2x/cart` is left alone, and a\n * pathname that does not start with the segment comes back unchanged.\n */\nexport function stripStoreBase(pathname: string, base: string): string {\n  const prefix = `/${base}`;\n  if (pathname === prefix) return '/';\n  return pathname.startsWith(`${prefix}/`) ? pathname.slice(prefix.length) : pathname;\n}\n\n/**\n * An application path as the browser addresses it, with the store segment in front.\n *\n * It never checks whether the segment is already there, because that cannot be\n * told apart from a page of the same name: a store called `cart` keeps its cart at\n * `/cart/cart`. Callers pass application paths only.\n */\nexport function prefixStoreBase(path: string, base: string): string {\n  const rooted = path.startsWith('/') ? path : `/${path}`;\n  // The store's root is `/<base>`, not `/<base>/`, with or without a query or hash.\n  const atRoot = rooted === '/' || rooted[1] === '?' || rooted[1] === '#';\n  return `/${base}${atRoot ? rooted.slice(1) : rooted}`;\n}\n\n/**\n * A pathname from a link the Salla API handed out, without the store's username in it.\n *\n * A store with no domain of its own is served under its username on a shared host,\n * and every URL the API returns for it carries that segment. Its `store.url` is\n * `/{lang}/{username}/` when the store is multilingual and `/{username}/` when it is\n * not: `https://demostore.salla.sa/ar/dev-vgckq3fssfhjewwi/`, `https://salla.sa/cart/`.\n * The segment there belongs to Salla's host, not to the application. Left in, it\n * lands where a page slug is expected and matches no route.\n *\n * The username is the last segment of `store.url`, but only when it equals the\n * store's username. Neither its position nor its spelling says so on its own: `/ar/`\n * is the locale of `https://3tir.com/ar/`, a store on its own domain whose links carry\n * no username, and it is also the whole address of the store called `ar`,\n * `https://salla.sa/ar/`. Without a username to compare against, a last segment\n * spelled like a locale is taken to be one, which is wrong only for a store whose\n * username is a locale code.\n *\n * The locale stays wherever the link put it.\n */\nexport function withoutStoreUrlBase(\n  pathname: string,\n  storeUrlPathname: string,\n  username?: string | null\n): string {\n  const own = storeUrlSegment(storeUrlPathname, username);\n  if (!own) return pathname;\n\n  const segments = pathname.split('/');\n  // Salla puts the locale first (`/ar/dev-x/…`); a store that is not multilingual has\n  // none (`/dev-x/…`). Checked in that order, `/ar/ar/…` for a store called `ar` keeps\n  // its locale.\n  let at = -1;\n  if (isLocale(segments[1]) && segments[2] === own) at = 2;\n  else if (segments[1] === own) at = 1;\n  if (at === -1) return pathname;\n\n  segments.splice(at, 1);\n  return segments.join('/') || '/';\n}\n\n/** The segment `store.url` serves the store under, or null when it has none. */\nfunction storeUrlSegment(storeUrlPathname: string, username?: string | null): string | null {\n  const last = storeUrlPathname.split('/').filter(Boolean).pop();\n  if (!last) return null;\n  if (username) return last === username ? last : null;\n  return isLocale(last) ? null : last;\n}\n\n/**\n * Where to send a page whose store was not named by its own first segment, or null\n * when it already was.\n *\n * On a host where the store is the root, every page has one address,\n * `/<username>/…`. A request that found its store some other way (`?storeId=`, the\n * preview cookie, `VITE_STORE_DOMAIN`, or a first segment that named the store by\n * another spelling, such as its numeric id) is sent there once the store's settings\n * say what its username is.\n *\n * `storeId` is dropped from the query on the way. It has to be: a URL carrying it\n * is never read for a store segment, so keeping it would redirect to an address\n * that redirects again, forever. For the same reason a username that could not be\n * read back out of a path produces no redirect at all.\n *\n * `href` is the application's own href (path, query and hash, already without any\n * store segment), which the router keeps percent-encoded, so the result is safe to\n * put in a `Location` header.\n */\nexport function storeBaseRedirectHref(args: {\n  host: string | null | undefined;\n  base: string | null;\n  username: string | null | undefined;\n  href: string;\n}): string | null {\n  const { host, base, username, href } = args;\n  if (!allowsRequestStoreId(host) || !isStoreBaseSegment(username) || username === base) {\n    return null;\n  }\n\n  const url = new URL(href, 'http://store-base.invalid');\n  url.searchParams.delete(STORE_ID_PARAM);\n  return `${prefixStoreBase(url.pathname, username)}${url.search}${url.hash}`;\n}\n\n/**\n * Where to send a guest who opened a customer-only page: the locale's home with\n * `intended_to`, which the SDK reads to open the login modal and come back after.\n * Null when already there, so the redirect cannot loop.\n */\nexport function loginRedirectHref(args: {\n  pathname: string;\n  searchStr: string;\n  origin: string;\n  base: string | null;\n}): string | null {\n  const { pathname, searchStr, origin, base } = args;\n  const first = pathname.split('/')[1];\n  const home = isLocale(first) ? `/${first}` : '/';\n  if ((pathname.replace(/\\/$/, '') || '/') === home) return null;\n\n  const browserPath = (path: string) => (base ? prefixStoreBase(path, base) : path);\n  const intended = `${origin}${browserPath(pathname)}${searchStr}`;\n  return `${browserPath(home)}?intended_to=${encodeURIComponent(intended)}`;\n}\n"]}

package/dist/{chunk-HAV32VZS.js → chunk-TDZSHACC.js}

@@ -1,4 +1,7 @@
-import { configureNavigation, UnauthorizedError, NavigationProvider } from './chunk-RLSYCDI4.js';
+import { configureNavigation, UnauthorizedError, NavigationProvider } from './chunk-WH225GEC.js';
+import { resolveStoreBase } from './chunk-TYLKNVQA.js';
+import { loginRedirectHref, isLoopback } from './chunk-SR4OTLTJ.js';
+import { getTwilightContext, getRequestStore } from './chunk-N2S25NXP.js';
 import { isLocale } from './chunk-T72DAX7R.js';
 import { LinkProvider } from './chunk-BYMOPN2S.js';
 import { useParams, Link, redirect, notFound, useNavigate } from '@tanstack/react-router';
@@ -40,7 +43,7 @@ var TanStackLinkAdapter = forwardRef(
         target,
         rel,
         onClick,
-        preload: preload === "intent" ? "intent" : void 0,
+        preload: preload === "intent" || preload === false ? preload : void 0,
         replace,
         "aria-label": ariaLabel,
         ...rest
@@ -53,6 +56,24 @@ TanStackLinkAdapter.displayName = "TanStackLinkAdapter";
 function createTanStackLinkAdapter() {
   return TanStackLinkAdapter;
 }
+
+// src/utils/request-host.ts
+function requestHostOf(request) {
+  try {
+    const fromUrl = new URL(request.url).host;
+    if (fromUrl) return fromUrl;
+  } catch {
+  }
+  return request.headers.get("Host")?.trim() || null;
+}
+function requestOriginOf(host) {
+  return `${isLoopback(host.replace(/:\d+$/, "")) ? "http" : "https"}://${host}`;
+}
+function currentOrigin() {
+  if (typeof window !== "undefined") return window.location.origin;
+  const host = getRequestStore().requestHost;
+  return host ? requestOriginOf(host) : null;
+}
 configureNavigation({
   notFound: (message) => {
     throw notFound({ data: message });
@@ -61,6 +82,10 @@ configureNavigation({
     throw redirect({ to: path, replace: opts?.replace });
   },
   unauthorized: (message) => {
+    const origin = currentOrigin();
+    const { pathname, searchStr } = getTwilightContext().location;
+    const href = origin && loginRedirectHref({ pathname, searchStr, origin, base: resolveStoreBase() });
+    if (href) throw redirect({ href, reloadDocument: true, replace: true });
     throw new UnauthorizedError(message);
   }
 });
@@ -84,6 +109,6 @@ function TanStackNavigationProvider({ children }) {
   );
 }
 
-export { NavigationSetup, TanStackLinkAdapter, TanStackNavigationProvider, createTanStackLinkAdapter };
-//# sourceMappingURL=chunk-HAV32VZS.js.map
-//# sourceMappingURL=chunk-HAV32VZS.js.map
+export { NavigationSetup, TanStackLinkAdapter, TanStackNavigationProvider, createTanStackLinkAdapter, requestHostOf };
+//# sourceMappingURL=chunk-TDZSHACC.js.map
+//# sourceMappingURL=chunk-TDZSHACC.js.map

package/dist/chunk-TDZSHACC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tanstack/link.tsx","../src/utils/request-host.ts","../src/tanstack/navigation.tsx"],"names":["TanStackLink","tanstackNotFound","tanstackRedirect","useParams"],"mappings":";;;;;;;;;;AAWO,SAAS,mBAAA,CAAoB,aAAqB,MAAA,EAAiB;AACxE,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,WAAA,CAAY,UAAA,CAAW,GAAG,CAAA,IAAK,WAAA,CAAY,UAAA,CAAW,IAAI,CAAA,EAAG,OAAO,WAAA;AACpF,EAAA,MAAM,YAAA,GAAe,WAAA,CAAY,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,EAAG,KAAA,CAAM,MAAM,CAAA,CAAE,CAAC,CAAA;AAC/D,EAAA,IAAI,QAAA,CAAS,YAAY,CAAA,EAAG,OAAO,WAAA;AACnC,EAAA,OAAO,WAAA,KAAgB,MAAM,CAAA,CAAA,EAAI,MAAM,KAAK,CAAA,CAAA,EAAI,MAAM,GAAG,WAAW,CAAA,CAAA;AACtE;AAMO,IAAM,mBAAA,GAAsB,UAAA;AAAA,EACjC,CACE;AAAA,IACE,EAAA;AAAA,IACA,IAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA;AAAA,IACA,KAAA;AAAA,IACA,KAAA;AAAA,IACA,MAAA;AAAA,IACA,GAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,OAAA;AAAA,IACA,YAAA,EAAc,SAAA;AAAA,IACd,GAAG;AAAA,KAEL,GAAA,KACG;AACH,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,UAAU,EAAE,MAAA,EAAQ,OAAO,CAAA;AAC9C,IAAA,MAAM,WAAA,GAAc,mBAAA,CAAoB,EAAA,IAAM,IAAA,IAAQ,KAAK,MAAM,CAAA;AAEjE,IAAA,OAAO,aAAA;AAAA,MACLA,IAAA;AAAA,MACA;AAAA,QACE,GAAA;AAAA,QACA,EAAA,EAAI,WAAA;AAAA,QACJ,SAAA;AAAA,QACA,KAAA;AAAA,QACA,KAAA;AAAA,QACA,MAAA;AAAA,QACA,GAAA;AAAA,QACA,OAAA;AAAA,QACA,OAAA,EAAS,OAAA,KAAY,QAAA,IAAY,OAAA,KAAY,QAAQ,OAAA,GAAU,MAAA;AAAA,QAC/D,OAAA;AAAA,QACA,YAAA,EAAc,SAAA;AAAA,QACd,GAAI;AAAA,OACN;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AAEA,mBAAA,CAAoB,WAAA,GAAc,qBAAA;AAK3B,SAAS,yBAAA,GAA4B;AAC1C,EAAA,OAAO,mBAAA;AACT;;;AC3CO,SAAS,cAAc,OAAA,EAAoC;AAChE,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,IAAA;AACrC,IAAA,IAAI,SAAS,OAAO,OAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,OAAO,QAAQ,OAAA,CAAQ,GAAA,CAAI,MAAM,CAAA,EAAG,MAAK,IAAK,IAAA;AAChD;AAGO,SAAS,gBAAgB,IAAA,EAAsB;AACpD,EAAA,OAAO,CAAA,EAAG,UAAA,CAAW,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAS,EAAE,CAAC,CAAA,GAAI,MAAA,GAAS,OAAO,CAAA,GAAA,EAAM,IAAI,CAAA,CAAA;AAC9E;ACvBA,SAAS,aAAA,GAA+B;AACtC,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,OAAO,QAAA,CAAS,MAAA;AAC1D,EAAA,MAAM,IAAA,GAAO,iBAAgB,CAAE,WAAA;AAC/B,EAAA,OAAO,IAAA,GAAO,eAAA,CAAgB,IAAI,CAAA,GAAI,IAAA;AACxC;AAEA,mBAAA,CAAoB;AAAA,EAClB,QAAA,EAAU,CAAC,OAAA,KAAqB;AAC9B,IAAA,MAAMC,QAAA,CAAiB,EAAE,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,EAC1C,CAAA;AAAA,EACA,QAAA,EAAU,CAAC,IAAA,EAAc,IAAA,KAAiC;AACxD,IAAA,MAAMC,SAAiB,EAAE,EAAA,EAAI,MAAM,OAAA,EAAS,IAAA,EAAM,SAAS,CAAA;AAAA,EAC7D,CAAA;AAAA,EACA,YAAA,EAAc,CAAC,OAAA,KAAqB;AAClC,IAAA,MAAM,SAAS,aAAA,EAAc;AAC7B,IAAA,MAAM,EAAE,QAAA,EAAU,SAAA,EAAU,GAAI,oBAAmB,CAAE,QAAA;AACrD,IAAA,MAAM,IAAA,GACJ,MAAA,IAAU,iBAAA,CAAkB,EAAE,QAAA,EAAU,WAAW,MAAA,EAAQ,IAAA,EAAM,gBAAA,EAAiB,EAAG,CAAA;AAEvF,IAAA,IAAI,IAAA,QAAYA,QAAA,CAAiB,EAAE,MAAM,cAAA,EAAgB,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,CAAA;AAC9E,IAAA,MAAM,IAAI,kBAAkB,OAAO,CAAA;AAAA,EACrC;AACF,CAAC,CAAA;AAMM,SAAS,eAAA,CAAgB,EAAE,QAAA,EAAS,EAA4B;AACrE,EAAA,MAAM,WAAW,WAAA,EAAY;AAC7B,EAAA,MAAM,EAAE,MAAA,EAAO,GAAIC,UAAU,EAAE,MAAA,EAAQ,OAAO,CAAA;AAC9C,EAAA,MAAM,UAAA,GAAa,WAAA;AAAA,IACjB,CAAC,EAAA,EAAY,IAAA,KACX,QAAA,CAAS,EAAE,EAAA,EAAI,mBAAA,CAAoB,EAAA,EAAI,MAAM,CAAA,EAAG,OAAA,EAAS,IAAA,EAAM,SAAS,CAAA;AAAA,IAC1E,CAAC,UAAU,MAAM;AAAA,GACnB;AAEA,EAAA,uBACE,GAAA,CAAC,sBAAmB,QAAA,EAAU,UAAA,EAC5B,8BAAC,YAAA,EAAA,EAAa,OAAA,EAAS,mBAAA,EAAsB,QAAA,EAAS,CAAA,EACxD,CAAA;AAEJ;AAGO,SAAS,0BAAA,CAA2B,EAAE,QAAA,EAAS,EAA4B;AAChF,EAAA,MAAM,WAAW,WAAA,EAAY;AAC7B,EAAA,uBACE,GAAA;AAAA,IAAC,kBAAA;AAAA,IAAA;AAAA,MACC,QAAA,EAAU,CAAC,EAAA,EAAY,IAAA,KAA2B,QAAA,CAAS,EAAE,EAAA,EAAI,OAAA,EAAS,IAAA,EAAM,OAAA,EAAS,CAAA;AAAA,MAEzF,QAAA,kBAAA,GAAA,CAAC,YAAA,EAAA,EAAa,OAAA,EAAS,mBAAA,EAAsB,QAAA,EAAS;AAAA;AAAA,GACxD;AAEJ","file":"chunk-TDZSHACC.js","sourcesContent":["import { forwardRef, createElement } from 'react';\nimport { Link as TanStackLink, useParams } from '@tanstack/react-router';\nimport { isLocale } from '../providers/locale-constants';\nimport type { BaseLinkProps } from '../components/common/Link.types';\n\n/**\n * Routes live under an optional `/{-$locale}` param, so a bare `to=\"/brands\"`\n * resolves with the locale omitted and the $locale loader bounces the user to\n * the fallback locale. Prefix the current locale onto internal paths that\n * don't already carry one.\n */\nexport function localizeDestination(destination: string, locale?: string) {\n  if (!locale || !destination.startsWith('/') || destination.startsWith('//')) return destination;\n  const firstSegment = destination.split('/')[1]?.split(/[?#]/)[0];\n  if (isLocale(firstSegment)) return destination;\n  return destination === '/' ? `/${locale}` : `/${locale}${destination}`;\n}\n\n/**\n * TanStack Router Link adapter.\n * Translates framework-agnostic props to TanStack Router Link props.\n */\nexport const TanStackLinkAdapter = forwardRef<HTMLAnchorElement, BaseLinkProps>(\n  (\n    {\n      to,\n      href,\n      children,\n      className,\n      style,\n      title,\n      target,\n      rel,\n      onClick,\n      preload,\n      replace,\n      'aria-label': ariaLabel,\n      ...rest\n    },\n    ref\n  ) => {\n    const { locale } = useParams({ strict: false }) as { locale?: string };\n    const destination = localizeDestination(to ?? href ?? '/', locale);\n\n    return createElement(\n      TanStackLink,\n      {\n        ref,\n        to: destination,\n        className,\n        style,\n        title,\n        target,\n        rel,\n        onClick,\n        preload: preload === 'intent' || preload === false ? preload : undefined,\n        replace,\n        'aria-label': ariaLabel,\n        ...(rest as Record<string, unknown>),\n      },\n      children\n    );\n  }\n);\n\nTanStackLinkAdapter.displayName = 'TanStackLinkAdapter';\n\n/**\n * Create a TanStack Router Link adapter component.\n */\nexport function createTanStackLinkAdapter() {\n  return TanStackLinkAdapter;\n}\n","/**\n * What the request itself is enough to describe: its host.\n *\n * Small, and deliberately its own module rather than a helper inside the\n * middleware. This value decides two things — which store a live storefront is,\n * and whether the request is allowed to name a store at all — so it is worth\n * testing directly instead of only through the wiring that calls it.\n */\nimport { isLoopback } from './cookies';\n\n/** The part of a `Request` this needs, so a test does not have to build a whole one. */\nexport interface HostSource {\n  url: string;\n  headers: { get(name: string): string | null };\n}\n\n/**\n * The host this request arrived on, with its port when it has one.\n *\n * Taken from the request URL, which in a Worker is the address the platform\n * actually routed on, and from the `Host` header only when that fails.\n *\n * **`X-Forwarded-Host` is deliberately not consulted.** A client can set it, and\n * this value gates `allowsRequestStoreId` — so honouring it would be a way to\n * talk a merchant's own domain into behaving like the preview host, and from\n * there into serving a stranger's shop. The dispatcher strips that header today;\n * a theme must not be one edit to another repository's allowlist away from a\n * spoofable identity.\n */\nexport function requestHostOf(request: HostSource): string | null {\n  try {\n    const fromUrl = new URL(request.url).host;\n    if (fromUrl) return fromUrl;\n  } catch {\n    /* an unparseable URL falls through to the header */\n  }\n\n  return request.headers.get('Host')?.trim() || null;\n}\n\n/** The origin a browser reached this host on: `http` for a dev server, `https` otherwise. */\nexport function requestOriginOf(host: string): string {\n  return `${isLoopback(host.replace(/:\\d+$/, '')) ? 'http' : 'https'}://${host}`;\n}\n","import {\n  useNavigate,\n  useParams,\n  redirect as tanstackRedirect,\n  notFound as tanstackNotFound,\n} from '@tanstack/react-router';\nimport {\n  NavigationProvider,\n  configureNavigation,\n  type NavigateOptions,\n} from '../providers/NavigationProvider';\nimport { LinkProvider } from '../providers/LinkProvider';\nimport { TanStackLinkAdapter, localizeDestination } from './link';\nimport { useCallback, type ReactNode } from 'react';\nimport { UnauthorizedError } from '../providers/NavigationProvider';\nimport { getRequestStore, getTwilightContext } from '../twilight/context';\nimport { resolveStoreBase } from '../utils/store-identity';\nimport { loginRedirectHref } from '../utils/store-base';\nimport { requestOriginOf } from '../utils/request-host';\n\nfunction currentOrigin(): string | null {\n  if (typeof window !== 'undefined') return window.location.origin;\n  const host = getRequestStore().requestHost;\n  return host ? requestOriginOf(host) : null;\n}\n\nconfigureNavigation({\n  notFound: (message?: string) => {\n    throw tanstackNotFound({ data: message });\n  },\n  redirect: (path: string, opts?: { replace?: boolean }) => {\n    throw tanstackRedirect({ to: path, replace: opts?.replace });\n  },\n  unauthorized: (message?: string) => {\n    const origin = currentOrigin();\n    const { pathname, searchStr } = getTwilightContext().location;\n    const href =\n      origin && loginRedirectHref({ pathname, searchStr, origin, base: resolveStoreBase() });\n    // A full load, because the SDK only reads `intended_to` when a page starts.\n    if (href) throw tanstackRedirect({ href, reloadDocument: true, replace: true });\n    throw new UnauthorizedError(message);\n  },\n});\n\n/**\n * TanStack navigation setup - wraps children with NavigationProvider and LinkProvider.\n * Called by TwilightProvider when client.framework === 'tanstack'.\n */\nexport function NavigationSetup({ children }: { children: ReactNode }) {\n  const navigate = useNavigate();\n  const { locale } = useParams({ strict: false }) as { locale?: string };\n  const navigateFn = useCallback(\n    (to: string, opts?: NavigateOptions) =>\n      navigate({ to: localizeDestination(to, locale), replace: opts?.replace }),\n    [navigate, locale]\n  );\n\n  return (\n    <NavigationProvider navigate={navigateFn}>\n      <LinkProvider adapter={TanStackLinkAdapter}>{children}</LinkProvider>\n    </NavigationProvider>\n  );\n}\n\n/** @deprecated Use NavigationSetup instead */\nexport function TanStackNavigationProvider({ children }: { children: ReactNode }) {\n  const navigate = useNavigate();\n  return (\n    <NavigationProvider\n      navigate={(to: string, opts?: NavigateOptions) => navigate({ to, replace: opts?.replace })}\n    >\n      <LinkProvider adapter={TanStackLinkAdapter}>{children}</LinkProvider>\n    </NavigationProvider>\n  );\n}\n"]}

package/dist/{chunk-NK2V2SW5.js → chunk-TLO2M5TJ.js}

@@ -1,6 +1,6 @@
-import { orThrow } from './chunk-RLSYCDI4.js';
-import { getActiveScope, api } from './chunk-BHU25UEW.js';
-import { getTwilightContext } from './chunk-OGQXRBCR.js';
+import { orThrow } from './chunk-WH225GEC.js';
+import { getActiveScope, api } from './chunk-P3OPJL6I.js';
+import { getTwilightContext } from './chunk-N2S25NXP.js';
 import { defaultShouldDehydrateQuery, queryOptions } from '@tanstack/react-query';
 
 function queryClientOrNull() {
@@ -174,5 +174,5 @@ var product = {
 };
 
 export { getProductPreview, isProductPreviewQuery, product, productDetailQueryKey, productPreviewQueryKey, rememberProductPreview, shouldDehydrateQuery };
-//# sourceMappingURL=chunk-NK2V2SW5.js.map
-//# sourceMappingURL=chunk-NK2V2SW5.js.map
+//# sourceMappingURL=chunk-TLO2M5TJ.js.map
+//# sourceMappingURL=chunk-TLO2M5TJ.js.map

package/dist/{chunk-NK2V2SW5.js.map → chunk-TLO2M5TJ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/api/product.ts"],"names":["product"],"mappings":";;;;;AA+FA,SAAS,iBAAA,GAAoB;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,WAAA,GAAc,oBAAmB,CAAE,WAAA;AACzC,IAAA,OAAO,WAAA,IAAe,OAAO,WAAA,CAAY,YAAA,KAAiB,aAAa,WAAA,GAAc,IAAA;AAAA,EACvF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEO,SAAS,uBAAuB,EAAA,EAAY;AACjD,EAAA,OAAO,CAAC,UAAA,EAAY,SAAA,EAAW,MAAA,CAAO,EAAE,GAAG,EAAE,KAAA,EAAO,cAAA,EAAe,EAAG,CAAA;AACxE;AAEO,SAAS,sBAAsB,EAAA,EAAY;AAChD,EAAA,OAAO,CAAC,YAAY,QAAA,EAAU,EAAA,EAAI,EAAE,KAAA,EAAO,cAAA,IAAkB,CAAA;AAC/D;AAGO,SAAS,sBAAsB,KAAA,EAAkD;AACtF,EAAA,OAAO,KAAA,CAAM,SAAS,CAAC,CAAA,KAAM,cAAc,KAAA,CAAM,QAAA,CAAS,CAAC,CAAA,KAAM,SAAA;AACnE;AAMO,SAAS,qBACd,KAAA,EACS;AACT,EAAA,OACE,CAAC,sBAAsB,KAAK,CAAA,KAC3B,4BAA4B,KAAK,CAAA,IAAK,KAAA,CAAM,KAAA,CAAM,MAAA,KAAW,SAAA,CAAA;AAElE;AAOO,SAAS,uBAAuBA,QAAAA,EAAwB;AAC7D,EAAA,MAAM,cAAc,iBAAA,EAAkB;AACtC,EAAA,IAAI,CAAC,WAAA,IAAeA,QAAAA,EAAS,EAAA,IAAM,IAAA,EAAM;AACzC,EAAA,MAAM,EAAA,GAAK,MAAA,CAAOA,QAAAA,CAAQ,EAAE,CAAA;AAC5B,EAAA,IAAI,YAAY,aAAA,CAAc,qBAAA,CAAsB,EAAE,CAAC,CAAA,EAAG,WAAW,SAAA,EAAW;AAChF,EAAA,WAAA,CAAY,YAAA,CAAa,sBAAA,CAAuB,EAAE,CAAA,EAAGA,QAAO,CAAA;AAC9D;AAEA,SAAS,kBAAkB,QAAA,EAA8D;AACvF,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,QAAA,CAAS,MAAA,GAAS,CAAC,CAAA;AACzC,EAAA,IAAI,IAAA,IAAQ,QAAQ,OAAO,IAAA,KAAS,YAAY,EAAE,OAAA,IAAW,OAAO,OAAO,MAAA;AAC3E,EAAA,OAAQ,IAAA,CAAuC,KAAA;AACjD;AAEA,SAAS,WAAA,CAAY,GAAmC,CAAA,EAAgC;AACtF,EAAA,IAAI,CAAA,KAAM,QAAW,OAAO,KAAA;AAC5B,EAAA,IAAI,CAAA,KAAM,GAAG,OAAO,IAAA;AACpB,EAAA,IAAI,KAAK,IAAA,IAAQ,CAAA,IAAK,MAAM,OAAO,CAAA,IAAK,QAAQ,CAAA,IAAK,IAAA;AACrD,EAAA,OACE,CAAA,CAAE,EAAA,KAAO,CAAA,CAAE,EAAA,IACX,EAAE,IAAA,KAAS,CAAA,CAAE,IAAA,IACb,CAAA,CAAE,aAAA,KAAkB,CAAA,CAAE,aAAA,IACtB,CAAA,CAAE,oBAAoB,CAAA,CAAE,eAAA;AAE5B;AAEA,IAAM,mBAAA,GAAsB;AAAA,EAC1B,CAAC,YAAY,MAAM,CAAA;AAAA,EACnB,CAAC,YAAY,MAAM;AACrB,CAAA;AAMA,SAAS,wBAAA,CACP,aACA,EAAA,EACqB;AACrB,EAAA,MAAM,QAAQ,cAAA,EAAe;AAC7B,EAAA,IAAI,KAAA;AACJ,EAAA,KAAA,MAAW,UAAU,mBAAA,EAAqB;AACxC,IAAA,KAAA,MAAW,CAAC,QAAA,EAAU,IAAI,CAAA,IAAK,YAAY,cAAA,CAAmC;AAAA,MAC5E,QAAA,EAAU;AAAA,KACX,CAAA,EAAG;AACF,MAAA,IAAI,CAAC,WAAA,CAAY,iBAAA,CAAkB,QAAQ,CAAA,EAAG,KAAK,CAAA,EAAG;AACtD,MAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,EAAM,KAAA,IAAS,EAAC,EAAG;AACpC,QAAA,IAAI,IAAA,EAAM,MAAM,IAAA,EAAM;AACtB,QAAA,sBAAA,CAAuB,IAAI,CAAA;AAC3B,QAAA,IAAI,CAAC,KAAA,IAAS,MAAA,CAAO,KAAK,EAAE,CAAA,KAAM,IAAI,KAAA,GAAQ,IAAA;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAMO,SAAS,kBAAkB,EAAA,EAAiC;AACjE,EAAA,MAAM,cAAc,iBAAA,EAAkB;AACtC,EAAA,IAAI,CAAC,aAAa,OAAO,MAAA;AACzB,EAAA,MAAM,GAAA,GAAM,OAAO,EAAE,CAAA;AACrB,EAAA,OACE,WAAA,CAAY,aAAa,sBAAA,CAAuB,GAAG,CAAC,CAAA,IACpD,wBAAA,CAAyB,aAAa,GAAG,CAAA;AAE7C;AAEA,SAAS,wBAAwB,KAAA,EAAwB;AACvD,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAO,sBAAA,CAAuB,IAAI,CAAA;AACvD;AAMA,SAAS,mBACP,YAAA,EACA,EAAE,MAAA,EAAQ,WAAA,EAAa,SAAQ,EACzB;AACN,EAAA,IAAI,WAAW,QAAA,EAAU;AACvB,IAAA,MAAM,QAAQ,OAAA,IAAW,WAAA;AACzB,IAAA,IAAI,UAAU,MAAA,EAAW,YAAA,CAAa,IAAI,SAAA,EAAW,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EACpE,CAAA,MAAA,IAAW,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,EAAG;AACrC,IAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,GAAA,KAAQ,YAAA,CAAa,OAAO,gBAAA,EAAkB,MAAA,CAAO,GAAG,CAAC,CAAC,CAAA;AAAA,EACjF,CAAA,MAAA,IAAW,gBAAgB,MAAA,EAAW;AACpC,IAAA,YAAA,CAAa,MAAA,CAAO,gBAAA,EAAkB,MAAA,CAAO,WAAW,CAAC,CAAA;AAAA,EAC3D;AACF;AAMA,SAAS,kBAAA,CACP,YAAA,EACA,OAAA,EACA,SAAA,GAAY,SAAA,EACN;AACN,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,CAAA;AACnC,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,MAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,IAAA,KAAS,YAAA,CAAa,MAAA,CAAO,CAAA,EAAG,OAAO,CAAA,EAAA,CAAA,EAAM,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA;AAAA,IAC3E,CAAA,MAAA,IAAW,KAAA,KAAU,IAAA,IAAQ,OAAO,UAAU,QAAA,EAAU;AACtD,MAAA,kBAAA,CAAmB,YAAA,EAAc,OAAO,OAAO,CAAA;AAAA,IACjD,CAAA,MAAA,IAAW,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AAChD,MAAA,YAAA,CAAa,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IAC5C;AAAA,EACF;AACF;AAGA,SAAS,kBAAkB,OAAA,EAA+C;AACxE,EAAA,MAAM,MAAM,OAAA,EAAS,WAAA;AACrB,EAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,GAAA,KAAQ,IAAA,EAAM,OAAO,IAAA;AAC9C,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,GAAG,IAAI,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,MAAA,CAAO,MAAA,CAAO,GAAG,CAAA,GAAI,CAAC,GAAG,CAAA;AAC1F,EAAA,OAAO,GAAA,CAAI,IAAI,MAAM,CAAA;AACvB;AAIO,IAAM,OAAA,GAAU;AAAA,EACrB,IAAA,EAAM,OAAO,EAAA,KAAiC;AAC5C,IAAA,MAAM,QAAA,GAAW,YAAY,EAAE,CAAA,wNAAA,CAAA;AAC/B,IAAA,MAAM,EAAE,MAAK,GAAI,MAAM,IAAI,GAAA,CAAI,QAAQ,EAAE,IAAA,EAAwB;AACjE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAAA,EAEA,aAAa,CAAC,EAAA,KAAiC,QAAQ,OAAA,CAAQ,IAAA,CAAK,EAAE,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQvE,IAAA,EAAM,OAAO,MAAA,KAA4D;AACvE,IAAA,MAAM;AAAA,MACJ,MAAA;AAAA,MACA,WAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA;AAAA,MACA,MAAA;AAAA,MACA,OAAA,GAAU,EAAA;AAAA,MACV,IAAA;AAAA,MACA,UAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA,KACF,GAAI,MAAA;AAGJ,IAAA,MAAM,YAAA,GAAe,IAAI,eAAA,EAAgB;AACzC,IAAA,YAAA,CAAa,GAAA,CAAI,UAAU,MAAM,CAAA;AAEjC,IAAA,IAAI,SAAS,MAAA,EAAW,YAAA,CAAa,IAAI,MAAA,EAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AAC7D,IAAA,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,MAAA,CAAO,OAAO,CAAC,CAAA;AAE5C,IAAA,kBAAA,CAAmB,YAAA,EAAc;AAAA,MAC/B,MAAA;AAAA,MACA,WAAA,EAAc,MAAA,KAAW,YAAA,IAAgB,iBAAA,CAAkB,OAAO,CAAA,IAAM,WAAA;AAAA,MACxE;AAAA,KACD,CAAA;AACD,IAAA,kBAAA,CAAmB,cAAc,OAAO,CAAA;AAGxC,IAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,MAAA,YAAA,CAAa,GAAA,CAAI,YAAA,EAAc,UAAA,GAAa,GAAA,GAAM,GAAG,CAAA;AAAA,IACvD;AAGA,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,YAAA,CAAa,GAAA,CAAI,QAAQ,IAAI,CAAA;AAAA,IAC/B;AAGA,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,YAAA,CAAa,GAAA,CAAI,UAAU,MAAM,CAAA;AAAA,IACnC;AAGA,IAAA,MAAM,UAAmC,EAAC;AAC1C,IAAA,IAAI,MAAA,UAAgB,MAAA,GAAS,MAAA;AAE7B,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CACpB,GAAA,CAAI,CAAA,SAAA,EAAY,YAAA,CAAa,QAAA,EAAU,CAAA,CAAA,EAAI,OAAc,CAAA,CACzD,IAAA,EAA2B;AAE9B,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,IAAA,IAAQ,EAAC;AAChC,IAAA,uBAAA,CAAwB,KAAK,CAAA;AAE7B,IAAA,OAAO;AAAA,MACL,KAAA;AAAA,MACA,IAAA,EAAM,QAAA,CAAS,MAAA,EAAQ,IAAA,IAAQ,IAAA;AAAA,MAC/B,SAAS,QAAA,CAAS;AAAA,KACpB;AAAA,EACF,CAAA;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,MAAA,EAAQ,CAAC,EAAA,KACP,YAAA,CAAa;AAAA;AAAA,MAEX,QAAA,EAAU,sBAAsB,EAAE,CAAA;AAAA,MAClC,OAAA,EAAS,MAAM,OAAA,CAAQ,IAAA,CAAK,EAAE,CAAA;AAAA;AAAA;AAAA,MAG9B,eAAA,EAAiB,MAAM,iBAAA,CAAkB,EAAE;AAAA,KAC5C,CAAA;AAAA,IACH,IAAA,EAAM,CAAC,MAAA,KACL,YAAA,CAAa;AAAA;AAAA,MAEX,QAAA,EAAU,CAAC,UAAA,EAAY,MAAA,EAAQ,QAAQ,EAAE,KAAA,EAAO,cAAA,EAAe,EAAG,CAAA;AAAA,MAClE,OAAA,EAAS,CAAC,EAAE,MAAA,EAAO,KAAM,OAAA,CAAQ,IAAA,CAAK,EAAE,GAAG,MAAA,EAAQ,MAAA,EAAQ;AAAA,KAC5D;AAAA;AAEP","file":"chunk-NK2V2SW5.js","sourcesContent":["import { queryOptions, defaultShouldDehydrateQuery } from '@tanstack/react-query';\nimport { api, getActiveScope } from './client';\nimport type { Product } from '../types';\nimport type { Pagination, PaginatedResult } from './types';\nimport { orThrow } from '../providers/NavigationProvider';\nimport { getTwilightContext } from '../twilight/context';\nimport type { ActiveScope } from '../utils/cookies';\n\n// ===== Filter Types =====\n\nexport interface FilterValue {\n  key?: string;\n  count?: number;\n  value?: string;\n  from?: number | '*';\n  to?: number | '*';\n}\n\nexport interface Filter {\n  key?: string;\n  label?: string;\n  type?: string;\n  values?: FilterValue[];\n  max?: number;\n  min?: number;\n}\n\n// ===== Product List Types =====\n\nexport type ProductsListSource =\n  | 'brands'\n  | 'categories'\n  | 'json'\n  | 'landing-page'\n  | 'latest'\n  | 'offers'\n  | 'recently'\n  | 'related'\n  | 'selected'\n  | 'tags'\n  | 'top-rated'\n  | 'wishlist'\n  | 'search'\n  | 'sales'\n  | 'reorder'\n  | 'best_selling';\n\nexport interface ProductsListParams {\n  /** Source type (wishlist, latest, brands, etc.) */\n  source: ProductsListSource;\n  /**\n   * The ids the source reads, as an array: category, brand, tag or product ids\n   * (`sourceValue: [708738657]`). Sent as `source_value[]`.\n   */\n  sourceValue?: string | number | number[] | null;\n  /** The search words when `source` is `'search'`. Sent as `keyword`; other sources ignore it. */\n  keyword?: string;\n  /** Page number for offset-based pagination */\n  page?: number;\n  /** Cursor for cursor-based pagination (from previous response) */\n  cursor?: string | null;\n  /** Items per page (default: 15) */\n  perPage?: number;\n  /** Sort option */\n  sort?: string;\n  /** Enable filters on the response */\n  filterable?: boolean;\n  /** Applied `<salla-filters>` selection (the `salla-filters::changed` payload). */\n  filters?: ProductListFilters;\n  /** Abort signal for cancellation */\n  signal?: AbortSignal;\n}\n\n/** One `<salla-filters>` value: a scalar, a list, or a nested `{ sub-key: value }` (variants). */\nexport type ProductListFilterValue =\n  string | number | Array<string | number> | { [key: string]: ProductListFilterValue };\n\n/** A `<salla-filters>` selection, i.e. the `salla-filters::changed` payload. */\nexport type ProductListFilters = Record<string, ProductListFilterValue>;\n\nexport type ProductsListResult = PaginatedResult<Product> & {\n  filters?: Filter[];\n};\n\nexport interface ProductsListResponse {\n  data: Product[];\n  cursor?: Pagination;\n  filters?: Filter[];\n}\n\n// ===== List-card preview cache =====\n// List payloads are a subset of details (one `image`, no `options` / `images[]`).\n// They live on a separate query key so they can paint a sheet/quick-view without\n// being treated as a successful `products/{id}/details` fetch.\n\nfunction queryClientOrNull() {\n  try {\n    const queryClient = getTwilightContext().queryClient;\n    return queryClient && typeof queryClient.setQueryData === 'function' ? queryClient : null;\n  } catch {\n    return null;\n  }\n}\n\nexport function productPreviewQueryKey(id: string) {\n  return ['products', 'preview', String(id), { scope: getActiveScope() }] as const;\n}\n\nexport function productDetailQueryKey(id: string) {\n  return ['products', 'detail', id, { scope: getActiveScope() }] as const;\n}\n\n/** True when this query is a list-card stand-in — skip it when dehydrating SSR. */\nexport function isProductPreviewQuery(query: { queryKey: readonly unknown[] }): boolean {\n  return query.queryKey[0] === 'products' && query.queryKey[1] === 'preview';\n}\n\n/**\n * Default dehydrate policy (success) plus pending SSR-stream queries, minus\n * list-card stand-ins. Replacing the default wholesale would ship error states.\n */\nexport function shouldDehydrateQuery(\n  query: Parameters<typeof defaultShouldDehydrateQuery>[0]\n): boolean {\n  return (\n    !isProductPreviewQuery(query) &&\n    (defaultShouldDehydrateQuery(query) || query.state.status === 'pending')\n  );\n}\n\n/**\n * Remember a list/card product so `product.queries.detail(id)` can use it as\n * `placeholderData` while details load. No-op if details for this id are already\n * cached. Themes that fetch products outside `product.list` should call this.\n */\nexport function rememberProductPreview(product: Product): void {\n  const queryClient = queryClientOrNull();\n  if (!queryClient || product?.id == null) return;\n  const id = String(product.id);\n  if (queryClient.getQueryState(productDetailQueryKey(id))?.status === 'success') return;\n  queryClient.setQueryData(productPreviewQueryKey(id), product);\n}\n\nfunction scopeFromQueryKey(queryKey: readonly unknown[]): ActiveScope | null | undefined {\n  const last = queryKey[queryKey.length - 1];\n  if (last == null || typeof last !== 'object' || !('scope' in last)) return undefined;\n  return (last as { scope: ActiveScope | null }).scope;\n}\n\nfunction isSameScope(a: ActiveScope | null | undefined, b: ActiveScope | null): boolean {\n  if (a === undefined) return false;\n  if (a === b) return true;\n  if (a == null || b == null) return a == null && b == null;\n  return (\n    a.id === b.id &&\n    a.type === b.type &&\n    a.allocation_id === b.allocation_id &&\n    a.allocation_type === b.allocation_type\n  );\n}\n\nconst LIST_QUERY_PREFIXES = [\n  ['products', 'list'],\n  ['wishlist', 'list'],\n] as const;\n\n/**\n * Rebuild the scoped preview index from hydrated list/wishlist queries (SSR\n * dehydrate drops preview keys). Subsequent lookups hit `productPreviewQueryKey`.\n */\nfunction findProductInScopedLists(\n  queryClient: NonNullable<ReturnType<typeof queryClientOrNull>>,\n  id: string\n): Product | undefined {\n  const scope = getActiveScope();\n  let found: Product | undefined;\n  for (const prefix of LIST_QUERY_PREFIXES) {\n    for (const [queryKey, data] of queryClient.getQueriesData<ProductsListResult>({\n      queryKey: prefix,\n    })) {\n      if (!isSameScope(scopeFromQueryKey(queryKey), scope)) continue;\n      for (const item of data?.items ?? []) {\n        if (item?.id == null) continue;\n        rememberProductPreview(item);\n        if (!found && String(item.id) === id) found = item;\n      }\n    }\n  }\n  return found;\n}\n\n/**\n * List-card product for `placeholderData`. Prefers the preview key; if that was\n * dropped on SSR dehydrate, rebuilds it from the current-scope list/wishlist.\n */\nexport function getProductPreview(id: string): Product | undefined {\n  const queryClient = queryClientOrNull();\n  if (!queryClient) return undefined;\n  const key = String(id);\n  return (\n    queryClient.getQueryData(productPreviewQueryKey(key)) ??\n    findProductInScopedLists(queryClient, key)\n  );\n}\n\nfunction rememberProductPreviews(items: Product[]): void {\n  for (const item of items) rememberProductPreview(item);\n}\n\n/**\n * Search sends its words as `keyword` (a `sourceValue` string is still read there, as before);\n * every other source sends its ids as `source_value[]`, which the API requires as an array.\n */\nfunction appendSourceParams(\n  searchParams: URLSearchParams,\n  { source, sourceValue, keyword }: Pick<ProductsListParams, 'source' | 'sourceValue' | 'keyword'>\n): void {\n  if (source === 'search') {\n    const words = keyword ?? sourceValue;\n    if (words !== undefined) searchParams.set('keyword', String(words));\n  } else if (Array.isArray(sourceValue)) {\n    sourceValue.forEach((val) => searchParams.append('source_value[]', String(val)));\n  } else if (sourceValue !== undefined) {\n    searchParams.append('source_value[]', String(sourceValue));\n  }\n}\n\n/**\n * Sends an applied filter selection the way the SDK's `<salla-products-list>` does:\n * `filters[key]=v`, `filters[key][]=v` or `filters[key][sub]=v`.\n */\nfunction appendFilterParams(\n  searchParams: URLSearchParams,\n  filters?: Record<string, ProductListFilterValue>,\n  parentKey = 'filters'\n): void {\n  if (!filters) return;\n  for (const [key, value] of Object.entries(filters)) {\n    const fullKey = `${parentKey}[${key}]`;\n    if (Array.isArray(value)) {\n      value.forEach((item) => searchParams.append(`${fullKey}[]`, String(item)));\n    } else if (value !== null && typeof value === 'object') {\n      appendFilterParams(searchParams, value, fullKey);\n    } else if (value !== undefined && value !== null) {\n      searchParams.append(fullKey, String(value));\n    }\n  }\n}\n\n/** A `category_id` filter replaces the page's category as the list source (as in the SDK). */\nfunction categoryFilterIds(filters?: ProductListFilters): number[] | null {\n  const raw = filters?.category_id;\n  if (raw === undefined || raw === null) return null;\n  const ids = Array.isArray(raw) ? raw : typeof raw === 'object' ? Object.values(raw) : [raw];\n  return ids.map(Number);\n}\n\n// ===== API Functions =====\n\nexport const product = {\n  find: async (id: string): Promise<Product> => {\n    const endpoint = `products/${id}/details?with[]=images&with[]=category&with[]=rating&with[]=notify_availability&with[]=tags&with[]=brand&with[]=options&with[]=skus&with[]=skus_availability&with[]=included_products&with[]=bundle&with[]=sold_quantity`;\n    const { data } = await api.get(endpoint).json<{ data: Product }>();\n    return data;\n  },\n\n  findOrThrow: (id: string): Promise<Product> => orThrow(product.find(id)),\n\n  /**\n   * Fetch products list with pagination support\n   * Used by native ProductsList component for SSR loaders\n   *\n   * API pattern: GET /products?source=wishlist&page=1\n   */\n  list: async (params: ProductsListParams): Promise<ProductsListResult> => {\n    const {\n      source,\n      sourceValue,\n      keyword,\n      page,\n      cursor,\n      perPage = 16,\n      sort,\n      filterable,\n      filters,\n      signal,\n    } = params;\n\n    // Build URL with query parameters\n    const searchParams = new URLSearchParams();\n    searchParams.set('source', source);\n    // Only send page when explicitly provided — cursor-based callers omit it entirely\n    if (page !== undefined) searchParams.set('page', String(page));\n    searchParams.set('per_page', String(perPage));\n\n    appendSourceParams(searchParams, {\n      source,\n      sourceValue: (source === 'categories' && categoryFilterIds(filters)) || sourceValue,\n      keyword,\n    });\n    appendFilterParams(searchParams, filters);\n\n    // Add filterable parameter\n    if (filterable !== undefined) {\n      searchParams.set('filterable', filterable ? '1' : '0');\n    }\n\n    // Add sort parameter\n    if (sort) {\n      searchParams.set('sort', sort);\n    }\n\n    // Add cursor for cursor-based pagination\n    if (cursor) {\n      searchParams.set('cursor', cursor);\n    }\n\n    // Make the request\n    const options: Record<string, unknown> = {};\n    if (signal) options.signal = signal;\n\n    const response = await api\n      .get(`products?${searchParams.toString()}`, options as any)\n      .json<ProductsListResponse>();\n\n    const items = response.data ?? [];\n    rememberProductPreviews(items);\n\n    return {\n      items,\n      next: response.cursor?.next ?? null,\n      filters: response.filters,\n    };\n  },\n\n  queries: {\n    detail: (id: string) =>\n      queryOptions({\n        // Stock and availability are resolved per branch allocation — same as the list.\n        queryKey: productDetailQueryKey(id),\n        queryFn: () => product.find(id),\n        // List-card product, if one was remembered. Not written as the detail\n        // cache entry — `queryFn` still hits products/{id}/details.\n        placeholderData: () => getProductPreview(id),\n      }),\n    list: (params: Omit<ProductsListParams, 'signal'>) =>\n      queryOptions({\n        // Scope (branch) varies product availability — key must include it.\n        queryKey: ['products', 'list', params, { scope: getActiveScope() }],\n        queryFn: ({ signal }) => product.list({ ...params, signal }),\n      }),\n  },\n};\n"]}
+{"version":3,"sources":["../src/api/product.ts"],"names":["product"],"mappings":";;;;;AA+FA,SAAS,iBAAA,GAAoB;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,WAAA,GAAc,oBAAmB,CAAE,WAAA;AACzC,IAAA,OAAO,WAAA,IAAe,OAAO,WAAA,CAAY,YAAA,KAAiB,aAAa,WAAA,GAAc,IAAA;AAAA,EACvF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAEO,SAAS,uBAAuB,EAAA,EAAY;AACjD,EAAA,OAAO,CAAC,UAAA,EAAY,SAAA,EAAW,MAAA,CAAO,EAAE,GAAG,EAAE,KAAA,EAAO,cAAA,EAAe,EAAG,CAAA;AACxE;AAEO,SAAS,sBAAsB,EAAA,EAAY;AAChD,EAAA,OAAO,CAAC,YAAY,QAAA,EAAU,EAAA,EAAI,EAAE,KAAA,EAAO,cAAA,IAAkB,CAAA;AAC/D;AAGO,SAAS,sBAAsB,KAAA,EAAkD;AACtF,EAAA,OAAO,KAAA,CAAM,SAAS,CAAC,CAAA,KAAM,cAAc,KAAA,CAAM,QAAA,CAAS,CAAC,CAAA,KAAM,SAAA;AACnE;AAMO,SAAS,qBACd,KAAA,EACS;AACT,EAAA,OACE,CAAC,sBAAsB,KAAK,CAAA,KAC3B,4BAA4B,KAAK,CAAA,IAAK,KAAA,CAAM,KAAA,CAAM,MAAA,KAAW,SAAA,CAAA;AAElE;AAOO,SAAS,uBAAuBA,QAAAA,EAAwB;AAC7D,EAAA,MAAM,cAAc,iBAAA,EAAkB;AACtC,EAAA,IAAI,CAAC,WAAA,IAAeA,QAAAA,EAAS,EAAA,IAAM,IAAA,EAAM;AACzC,EAAA,MAAM,EAAA,GAAK,MAAA,CAAOA,QAAAA,CAAQ,EAAE,CAAA;AAC5B,EAAA,IAAI,YAAY,aAAA,CAAc,qBAAA,CAAsB,EAAE,CAAC,CAAA,EAAG,WAAW,SAAA,EAAW;AAChF,EAAA,WAAA,CAAY,YAAA,CAAa,sBAAA,CAAuB,EAAE,CAAA,EAAGA,QAAO,CAAA;AAC9D;AAEA,SAAS,kBAAkB,QAAA,EAA8D;AACvF,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,QAAA,CAAS,MAAA,GAAS,CAAC,CAAA;AACzC,EAAA,IAAI,IAAA,IAAQ,QAAQ,OAAO,IAAA,KAAS,YAAY,EAAE,OAAA,IAAW,OAAO,OAAO,MAAA;AAC3E,EAAA,OAAQ,IAAA,CAAuC,KAAA;AACjD;AAEA,SAAS,WAAA,CAAY,GAAmC,CAAA,EAAgC;AACtF,EAAA,IAAI,CAAA,KAAM,QAAW,OAAO,KAAA;AAC5B,EAAA,IAAI,CAAA,KAAM,GAAG,OAAO,IAAA;AACpB,EAAA,IAAI,KAAK,IAAA,IAAQ,CAAA,IAAK,MAAM,OAAO,CAAA,IAAK,QAAQ,CAAA,IAAK,IAAA;AACrD,EAAA,OACE,CAAA,CAAE,EAAA,KAAO,CAAA,CAAE,EAAA,IACX,EAAE,IAAA,KAAS,CAAA,CAAE,IAAA,IACb,CAAA,CAAE,aAAA,KAAkB,CAAA,CAAE,aAAA,IACtB,CAAA,CAAE,oBAAoB,CAAA,CAAE,eAAA;AAE5B;AAEA,IAAM,mBAAA,GAAsB;AAAA,EAC1B,CAAC,YAAY,MAAM,CAAA;AAAA,EACnB,CAAC,YAAY,MAAM;AACrB,CAAA;AAMA,SAAS,wBAAA,CACP,aACA,EAAA,EACqB;AACrB,EAAA,MAAM,QAAQ,cAAA,EAAe;AAC7B,EAAA,IAAI,KAAA;AACJ,EAAA,KAAA,MAAW,UAAU,mBAAA,EAAqB;AACxC,IAAA,KAAA,MAAW,CAAC,QAAA,EAAU,IAAI,CAAA,IAAK,YAAY,cAAA,CAAmC;AAAA,MAC5E,QAAA,EAAU;AAAA,KACX,CAAA,EAAG;AACF,MAAA,IAAI,CAAC,WAAA,CAAY,iBAAA,CAAkB,QAAQ,CAAA,EAAG,KAAK,CAAA,EAAG;AACtD,MAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,EAAM,KAAA,IAAS,EAAC,EAAG;AACpC,QAAA,IAAI,IAAA,EAAM,MAAM,IAAA,EAAM;AACtB,QAAA,sBAAA,CAAuB,IAAI,CAAA;AAC3B,QAAA,IAAI,CAAC,KAAA,IAAS,MAAA,CAAO,KAAK,EAAE,CAAA,KAAM,IAAI,KAAA,GAAQ,IAAA;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAMO,SAAS,kBAAkB,EAAA,EAAiC;AACjE,EAAA,MAAM,cAAc,iBAAA,EAAkB;AACtC,EAAA,IAAI,CAAC,aAAa,OAAO,MAAA;AACzB,EAAA,MAAM,GAAA,GAAM,OAAO,EAAE,CAAA;AACrB,EAAA,OACE,WAAA,CAAY,aAAa,sBAAA,CAAuB,GAAG,CAAC,CAAA,IACpD,wBAAA,CAAyB,aAAa,GAAG,CAAA;AAE7C;AAEA,SAAS,wBAAwB,KAAA,EAAwB;AACvD,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAA,EAAO,sBAAA,CAAuB,IAAI,CAAA;AACvD;AAMA,SAAS,mBACP,YAAA,EACA,EAAE,MAAA,EAAQ,WAAA,EAAa,SAAQ,EACzB;AACN,EAAA,IAAI,WAAW,QAAA,EAAU;AACvB,IAAA,MAAM,QAAQ,OAAA,IAAW,WAAA;AACzB,IAAA,IAAI,UAAU,MAAA,EAAW,YAAA,CAAa,IAAI,SAAA,EAAW,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,EACpE,CAAA,MAAA,IAAW,KAAA,CAAM,OAAA,CAAQ,WAAW,CAAA,EAAG;AACrC,IAAA,WAAA,CAAY,OAAA,CAAQ,CAAC,GAAA,KAAQ,YAAA,CAAa,OAAO,gBAAA,EAAkB,MAAA,CAAO,GAAG,CAAC,CAAC,CAAA;AAAA,EACjF,CAAA,MAAA,IAAW,gBAAgB,MAAA,EAAW;AACpC,IAAA,YAAA,CAAa,MAAA,CAAO,gBAAA,EAAkB,MAAA,CAAO,WAAW,CAAC,CAAA;AAAA,EAC3D;AACF;AAMA,SAAS,kBAAA,CACP,YAAA,EACA,OAAA,EACA,SAAA,GAAY,SAAA,EACN;AACN,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AAClD,IAAA,MAAM,OAAA,GAAU,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,CAAA;AACnC,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,MAAA,KAAA,CAAM,OAAA,CAAQ,CAAC,IAAA,KAAS,YAAA,CAAa,MAAA,CAAO,CAAA,EAAG,OAAO,CAAA,EAAA,CAAA,EAAM,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA;AAAA,IAC3E,CAAA,MAAA,IAAW,KAAA,KAAU,IAAA,IAAQ,OAAO,UAAU,QAAA,EAAU;AACtD,MAAA,kBAAA,CAAmB,YAAA,EAAc,OAAO,OAAO,CAAA;AAAA,IACjD,CAAA,MAAA,IAAW,KAAA,KAAU,MAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AAChD,MAAA,YAAA,CAAa,MAAA,CAAO,OAAA,EAAS,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IAC5C;AAAA,EACF;AACF;AAGA,SAAS,kBAAkB,OAAA,EAA+C;AACxE,EAAA,MAAM,MAAM,OAAA,EAAS,WAAA;AACrB,EAAA,IAAI,GAAA,KAAQ,MAAA,IAAa,GAAA,KAAQ,IAAA,EAAM,OAAO,IAAA;AAC9C,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,GAAG,IAAI,GAAA,GAAM,OAAO,GAAA,KAAQ,QAAA,GAAW,MAAA,CAAO,MAAA,CAAO,GAAG,CAAA,GAAI,CAAC,GAAG,CAAA;AAC1F,EAAA,OAAO,GAAA,CAAI,IAAI,MAAM,CAAA;AACvB;AAIO,IAAM,OAAA,GAAU;AAAA,EACrB,IAAA,EAAM,OAAO,EAAA,KAAiC;AAC5C,IAAA,MAAM,QAAA,GAAW,YAAY,EAAE,CAAA,wNAAA,CAAA;AAC/B,IAAA,MAAM,EAAE,MAAK,GAAI,MAAM,IAAI,GAAA,CAAI,QAAQ,EAAE,IAAA,EAAwB;AACjE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAAA,EAEA,aAAa,CAAC,EAAA,KAAiC,QAAQ,OAAA,CAAQ,IAAA,CAAK,EAAE,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQvE,IAAA,EAAM,OAAO,MAAA,KAA4D;AACvE,IAAA,MAAM;AAAA,MACJ,MAAA;AAAA,MACA,WAAA;AAAA,MACA,OAAA;AAAA,MACA,IAAA;AAAA,MACA,MAAA;AAAA,MACA,OAAA,GAAU,EAAA;AAAA,MACV,IAAA;AAAA,MACA,UAAA;AAAA,MACA,OAAA;AAAA,MACA;AAAA,KACF,GAAI,MAAA;AAGJ,IAAA,MAAM,YAAA,GAAe,IAAI,eAAA,EAAgB;AACzC,IAAA,YAAA,CAAa,GAAA,CAAI,UAAU,MAAM,CAAA;AAEjC,IAAA,IAAI,SAAS,MAAA,EAAW,YAAA,CAAa,IAAI,MAAA,EAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AAC7D,IAAA,YAAA,CAAa,GAAA,CAAI,UAAA,EAAY,MAAA,CAAO,OAAO,CAAC,CAAA;AAE5C,IAAA,kBAAA,CAAmB,YAAA,EAAc;AAAA,MAC/B,MAAA;AAAA,MACA,WAAA,EAAc,MAAA,KAAW,YAAA,IAAgB,iBAAA,CAAkB,OAAO,CAAA,IAAM,WAAA;AAAA,MACxE;AAAA,KACD,CAAA;AACD,IAAA,kBAAA,CAAmB,cAAc,OAAO,CAAA;AAGxC,IAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,MAAA,YAAA,CAAa,GAAA,CAAI,YAAA,EAAc,UAAA,GAAa,GAAA,GAAM,GAAG,CAAA;AAAA,IACvD;AAGA,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,YAAA,CAAa,GAAA,CAAI,QAAQ,IAAI,CAAA;AAAA,IAC/B;AAGA,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,YAAA,CAAa,GAAA,CAAI,UAAU,MAAM,CAAA;AAAA,IACnC;AAGA,IAAA,MAAM,UAAmC,EAAC;AAC1C,IAAA,IAAI,MAAA,UAAgB,MAAA,GAAS,MAAA;AAE7B,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CACpB,GAAA,CAAI,CAAA,SAAA,EAAY,YAAA,CAAa,QAAA,EAAU,CAAA,CAAA,EAAI,OAAc,CAAA,CACzD,IAAA,EAA2B;AAE9B,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,IAAA,IAAQ,EAAC;AAChC,IAAA,uBAAA,CAAwB,KAAK,CAAA;AAE7B,IAAA,OAAO;AAAA,MACL,KAAA;AAAA,MACA,IAAA,EAAM,QAAA,CAAS,MAAA,EAAQ,IAAA,IAAQ,IAAA;AAAA,MAC/B,SAAS,QAAA,CAAS;AAAA,KACpB;AAAA,EACF,CAAA;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,MAAA,EAAQ,CAAC,EAAA,KACP,YAAA,CAAa;AAAA;AAAA,MAEX,QAAA,EAAU,sBAAsB,EAAE,CAAA;AAAA,MAClC,OAAA,EAAS,MAAM,OAAA,CAAQ,IAAA,CAAK,EAAE,CAAA;AAAA;AAAA;AAAA,MAG9B,eAAA,EAAiB,MAAM,iBAAA,CAAkB,EAAE;AAAA,KAC5C,CAAA;AAAA,IACH,IAAA,EAAM,CAAC,MAAA,KACL,YAAA,CAAa;AAAA;AAAA,MAEX,QAAA,EAAU,CAAC,UAAA,EAAY,MAAA,EAAQ,QAAQ,EAAE,KAAA,EAAO,cAAA,EAAe,EAAG,CAAA;AAAA,MAClE,OAAA,EAAS,CAAC,EAAE,MAAA,EAAO,KAAM,OAAA,CAAQ,IAAA,CAAK,EAAE,GAAG,MAAA,EAAQ,MAAA,EAAQ;AAAA,KAC5D;AAAA;AAEP","file":"chunk-TLO2M5TJ.js","sourcesContent":["import { queryOptions, defaultShouldDehydrateQuery } from '@tanstack/react-query';\nimport { api, getActiveScope } from './client';\nimport type { Product } from '../types';\nimport type { Pagination, PaginatedResult } from './types';\nimport { orThrow } from '../providers/NavigationProvider';\nimport { getTwilightContext } from '../twilight/context';\nimport type { ActiveScope } from '../utils/cookies';\n\n// ===== Filter Types =====\n\nexport interface FilterValue {\n  key?: string;\n  count?: number;\n  value?: string;\n  from?: number | '*';\n  to?: number | '*';\n}\n\nexport interface Filter {\n  key?: string;\n  label?: string;\n  type?: string;\n  values?: FilterValue[];\n  max?: number;\n  min?: number;\n}\n\n// ===== Product List Types =====\n\nexport type ProductsListSource =\n  | 'brands'\n  | 'categories'\n  | 'json'\n  | 'landing-page'\n  | 'latest'\n  | 'offers'\n  | 'recently'\n  | 'related'\n  | 'selected'\n  | 'tags'\n  | 'top-rated'\n  | 'wishlist'\n  | 'search'\n  | 'sales'\n  | 'reorder'\n  | 'best_selling';\n\nexport interface ProductsListParams {\n  /** Source type (wishlist, latest, brands, etc.) */\n  source: ProductsListSource;\n  /**\n   * The ids the source reads, as an array: category, brand, tag or product ids\n   * (`sourceValue: [708738657]`). Sent as `source_value[]`.\n   */\n  sourceValue?: string | number | number[] | null;\n  /** The search words when `source` is `'search'`. Sent as `keyword`; other sources ignore it. */\n  keyword?: string;\n  /** Page number for offset-based pagination */\n  page?: number;\n  /** Cursor for cursor-based pagination (from previous response) */\n  cursor?: string | null;\n  /** Items per page (default: 15) */\n  perPage?: number;\n  /** Sort option */\n  sort?: string;\n  /** Enable filters on the response */\n  filterable?: boolean;\n  /** Applied `<salla-filters>` selection (the `salla-filters::changed` payload). */\n  filters?: ProductListFilters;\n  /** Abort signal for cancellation */\n  signal?: AbortSignal;\n}\n\n/** One `<salla-filters>` value: a scalar, a list, or a nested `{ sub-key: value }` (variants). */\nexport type ProductListFilterValue =\n  string | number | Array<string | number> | { [key: string]: ProductListFilterValue };\n\n/** A `<salla-filters>` selection, i.e. the `salla-filters::changed` payload. */\nexport type ProductListFilters = Record<string, ProductListFilterValue>;\n\nexport type ProductsListResult = PaginatedResult<Product> & {\n  filters?: Filter[];\n};\n\nexport interface ProductsListResponse {\n  data: Product[];\n  cursor?: Pagination;\n  filters?: Filter[];\n}\n\n// ===== List-card preview cache =====\n// List payloads are a subset of details (one `image`, no `options` / `images[]`).\n// They live on a separate query key so they can paint a sheet/quick-view without\n// being treated as a successful `products/{id}/details` fetch.\n\nfunction queryClientOrNull() {\n  try {\n    const queryClient = getTwilightContext().queryClient;\n    return queryClient && typeof queryClient.setQueryData === 'function' ? queryClient : null;\n  } catch {\n    return null;\n  }\n}\n\nexport function productPreviewQueryKey(id: string) {\n  return ['products', 'preview', String(id), { scope: getActiveScope() }] as const;\n}\n\nexport function productDetailQueryKey(id: string) {\n  return ['products', 'detail', id, { scope: getActiveScope() }] as const;\n}\n\n/** True when this query is a list-card stand-in — skip it when dehydrating SSR. */\nexport function isProductPreviewQuery(query: { queryKey: readonly unknown[] }): boolean {\n  return query.queryKey[0] === 'products' && query.queryKey[1] === 'preview';\n}\n\n/**\n * Default dehydrate policy (success) plus pending SSR-stream queries, minus\n * list-card stand-ins. Replacing the default wholesale would ship error states.\n */\nexport function shouldDehydrateQuery(\n  query: Parameters<typeof defaultShouldDehydrateQuery>[0]\n): boolean {\n  return (\n    !isProductPreviewQuery(query) &&\n    (defaultShouldDehydrateQuery(query) || query.state.status === 'pending')\n  );\n}\n\n/**\n * Remember a list/card product so `product.queries.detail(id)` can use it as\n * `placeholderData` while details load. No-op if details for this id are already\n * cached. Themes that fetch products outside `product.list` should call this.\n */\nexport function rememberProductPreview(product: Product): void {\n  const queryClient = queryClientOrNull();\n  if (!queryClient || product?.id == null) return;\n  const id = String(product.id);\n  if (queryClient.getQueryState(productDetailQueryKey(id))?.status === 'success') return;\n  queryClient.setQueryData(productPreviewQueryKey(id), product);\n}\n\nfunction scopeFromQueryKey(queryKey: readonly unknown[]): ActiveScope | null | undefined {\n  const last = queryKey[queryKey.length - 1];\n  if (last == null || typeof last !== 'object' || !('scope' in last)) return undefined;\n  return (last as { scope: ActiveScope | null }).scope;\n}\n\nfunction isSameScope(a: ActiveScope | null | undefined, b: ActiveScope | null): boolean {\n  if (a === undefined) return false;\n  if (a === b) return true;\n  if (a == null || b == null) return a == null && b == null;\n  return (\n    a.id === b.id &&\n    a.type === b.type &&\n    a.allocation_id === b.allocation_id &&\n    a.allocation_type === b.allocation_type\n  );\n}\n\nconst LIST_QUERY_PREFIXES = [\n  ['products', 'list'],\n  ['wishlist', 'list'],\n] as const;\n\n/**\n * Rebuild the scoped preview index from hydrated list/wishlist queries (SSR\n * dehydrate drops preview keys). Subsequent lookups hit `productPreviewQueryKey`.\n */\nfunction findProductInScopedLists(\n  queryClient: NonNullable<ReturnType<typeof queryClientOrNull>>,\n  id: string\n): Product | undefined {\n  const scope = getActiveScope();\n  let found: Product | undefined;\n  for (const prefix of LIST_QUERY_PREFIXES) {\n    for (const [queryKey, data] of queryClient.getQueriesData<ProductsListResult>({\n      queryKey: prefix,\n    })) {\n      if (!isSameScope(scopeFromQueryKey(queryKey), scope)) continue;\n      for (const item of data?.items ?? []) {\n        if (item?.id == null) continue;\n        rememberProductPreview(item);\n        if (!found && String(item.id) === id) found = item;\n      }\n    }\n  }\n  return found;\n}\n\n/**\n * List-card product for `placeholderData`. Prefers the preview key; if that was\n * dropped on SSR dehydrate, rebuilds it from the current-scope list/wishlist.\n */\nexport function getProductPreview(id: string): Product | undefined {\n  const queryClient = queryClientOrNull();\n  if (!queryClient) return undefined;\n  const key = String(id);\n  return (\n    queryClient.getQueryData(productPreviewQueryKey(key)) ??\n    findProductInScopedLists(queryClient, key)\n  );\n}\n\nfunction rememberProductPreviews(items: Product[]): void {\n  for (const item of items) rememberProductPreview(item);\n}\n\n/**\n * Search sends its words as `keyword` (a `sourceValue` string is still read there, as before);\n * every other source sends its ids as `source_value[]`, which the API requires as an array.\n */\nfunction appendSourceParams(\n  searchParams: URLSearchParams,\n  { source, sourceValue, keyword }: Pick<ProductsListParams, 'source' | 'sourceValue' | 'keyword'>\n): void {\n  if (source === 'search') {\n    const words = keyword ?? sourceValue;\n    if (words !== undefined) searchParams.set('keyword', String(words));\n  } else if (Array.isArray(sourceValue)) {\n    sourceValue.forEach((val) => searchParams.append('source_value[]', String(val)));\n  } else if (sourceValue !== undefined) {\n    searchParams.append('source_value[]', String(sourceValue));\n  }\n}\n\n/**\n * Sends an applied filter selection the way the SDK's `<salla-products-list>` does:\n * `filters[key]=v`, `filters[key][]=v` or `filters[key][sub]=v`.\n */\nfunction appendFilterParams(\n  searchParams: URLSearchParams,\n  filters?: Record<string, ProductListFilterValue>,\n  parentKey = 'filters'\n): void {\n  if (!filters) return;\n  for (const [key, value] of Object.entries(filters)) {\n    const fullKey = `${parentKey}[${key}]`;\n    if (Array.isArray(value)) {\n      value.forEach((item) => searchParams.append(`${fullKey}[]`, String(item)));\n    } else if (value !== null && typeof value === 'object') {\n      appendFilterParams(searchParams, value, fullKey);\n    } else if (value !== undefined && value !== null) {\n      searchParams.append(fullKey, String(value));\n    }\n  }\n}\n\n/** A `category_id` filter replaces the page's category as the list source (as in the SDK). */\nfunction categoryFilterIds(filters?: ProductListFilters): number[] | null {\n  const raw = filters?.category_id;\n  if (raw === undefined || raw === null) return null;\n  const ids = Array.isArray(raw) ? raw : typeof raw === 'object' ? Object.values(raw) : [raw];\n  return ids.map(Number);\n}\n\n// ===== API Functions =====\n\nexport const product = {\n  find: async (id: string): Promise<Product> => {\n    const endpoint = `products/${id}/details?with[]=images&with[]=category&with[]=rating&with[]=notify_availability&with[]=tags&with[]=brand&with[]=options&with[]=skus&with[]=skus_availability&with[]=included_products&with[]=bundle&with[]=sold_quantity`;\n    const { data } = await api.get(endpoint).json<{ data: Product }>();\n    return data;\n  },\n\n  findOrThrow: (id: string): Promise<Product> => orThrow(product.find(id)),\n\n  /**\n   * Fetch products list with pagination support\n   * Used by native ProductsList component for SSR loaders\n   *\n   * API pattern: GET /products?source=wishlist&page=1\n   */\n  list: async (params: ProductsListParams): Promise<ProductsListResult> => {\n    const {\n      source,\n      sourceValue,\n      keyword,\n      page,\n      cursor,\n      perPage = 16,\n      sort,\n      filterable,\n      filters,\n      signal,\n    } = params;\n\n    // Build URL with query parameters\n    const searchParams = new URLSearchParams();\n    searchParams.set('source', source);\n    // Only send page when explicitly provided — cursor-based callers omit it entirely\n    if (page !== undefined) searchParams.set('page', String(page));\n    searchParams.set('per_page', String(perPage));\n\n    appendSourceParams(searchParams, {\n      source,\n      sourceValue: (source === 'categories' && categoryFilterIds(filters)) || sourceValue,\n      keyword,\n    });\n    appendFilterParams(searchParams, filters);\n\n    // Add filterable parameter\n    if (filterable !== undefined) {\n      searchParams.set('filterable', filterable ? '1' : '0');\n    }\n\n    // Add sort parameter\n    if (sort) {\n      searchParams.set('sort', sort);\n    }\n\n    // Add cursor for cursor-based pagination\n    if (cursor) {\n      searchParams.set('cursor', cursor);\n    }\n\n    // Make the request\n    const options: Record<string, unknown> = {};\n    if (signal) options.signal = signal;\n\n    const response = await api\n      .get(`products?${searchParams.toString()}`, options as any)\n      .json<ProductsListResponse>();\n\n    const items = response.data ?? [];\n    rememberProductPreviews(items);\n\n    return {\n      items,\n      next: response.cursor?.next ?? null,\n      filters: response.filters,\n    };\n  },\n\n  queries: {\n    detail: (id: string) =>\n      queryOptions({\n        // Stock and availability are resolved per branch allocation — same as the list.\n        queryKey: productDetailQueryKey(id),\n        queryFn: () => product.find(id),\n        // List-card product, if one was remembered. Not written as the detail\n        // cache entry — `queryFn` still hits products/{id}/details.\n        placeholderData: () => getProductPreview(id),\n      }),\n    list: (params: Omit<ProductsListParams, 'signal'>) =>\n      queryOptions({\n        // Scope (branch) varies product availability — key must include it.\n        queryKey: ['products', 'list', params, { scope: getActiveScope() }],\n        queryFn: ({ signal }) => product.list({ ...params, signal }),\n      }),\n  },\n};\n"]}

package/dist/{chunk-T26Y47JL.js → chunk-TTMYT3RB.js}

@@ -1,5 +1,5 @@
-import { api } from './chunk-BHU25UEW.js';
-import { getTwilightContext } from './chunk-OGQXRBCR.js';
+import { api } from './chunk-P3OPJL6I.js';
+import { getTwilightContext } from './chunk-N2S25NXP.js';
 import { queryOptions } from '@tanstack/react-query';
 
 var menu = {
@@ -23,5 +23,5 @@ var menu = {
 };
 
 export { menu };
-//# sourceMappingURL=chunk-T26Y47JL.js.map
-//# sourceMappingURL=chunk-T26Y47JL.js.map
+//# sourceMappingURL=chunk-TTMYT3RB.js.map
+//# sourceMappingURL=chunk-TTMYT3RB.js.map

package/dist/{chunk-T26Y47JL.js.map → chunk-TTMYT3RB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/api/menu.ts"],"names":[],"mappings":";;;;AAKO,IAAM,IAAA,GAAO;AAAA,EAClB,QAAQ,YAAiC;AACvC,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,kBAAA,EAAmB;AACtC,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CAAI,IAAI,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAE,CAAA,CAAE,IAAA,EAA2B;AACzF,IAAA,OAAO,QAAQ,EAAC;AAAA,EAClB,CAAA;AAAA,EAEA,QAAQ,YAAiC;AACvC,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,kBAAA,EAAmB;AACtC,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CAAI,IAAI,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAE,CAAA,CAAE,IAAA,EAA2B;AACzF,IAAA,OAAO,QAAQ,EAAC;AAAA,EAClB,CAAA;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,MAAA,EAAQ,MACN,YAAA,CAAa;AAAA,MACX,UAAU,CAAC,OAAA,EAAS,QAAA,EAAU,kBAAA,GAAqB,MAAM,CAAA;AAAA,MACzD,OAAA,EAAS,MAAM,IAAA,CAAK,MAAA,EAAO;AAAA,MAC3B,SAAA,EAAW,IAAI,EAAA,GAAK;AAAA,KACrB;AAAA;AAEP","file":"chunk-T26Y47JL.js","sourcesContent":["import { queryOptions } from '@tanstack/react-query';\nimport { api } from './client';\nimport { getTwilightContext } from '../twilight/context';\nimport type { MenuItem } from '../types';\n\nexport const menu = {\n  header: async (): Promise<MenuItem[]> => {\n    const { locale } = getTwilightContext();\n    const { data } = await api.get(`menus/header?lang=${locale}`).json<{ data: MenuItem[] }>();\n    return data || [];\n  },\n\n  footer: async (): Promise<MenuItem[]> => {\n    const { locale } = getTwilightContext();\n    const { data } = await api.get(`menus/footer?lang=${locale}`).json<{ data: MenuItem[] }>();\n    return data || [];\n  },\n\n  queries: {\n    header: () =>\n      queryOptions({\n        queryKey: ['menus', 'header', getTwilightContext().locale],\n        queryFn: () => menu.header(),\n        staleTime: 5 * 60 * 1000,\n      }),\n  },\n};\n"]}
+{"version":3,"sources":["../src/api/menu.ts"],"names":[],"mappings":";;;;AAKO,IAAM,IAAA,GAAO;AAAA,EAClB,QAAQ,YAAiC;AACvC,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,kBAAA,EAAmB;AACtC,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CAAI,IAAI,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAE,CAAA,CAAE,IAAA,EAA2B;AACzF,IAAA,OAAO,QAAQ,EAAC;AAAA,EAClB,CAAA;AAAA,EAEA,QAAQ,YAAiC;AACvC,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,kBAAA,EAAmB;AACtC,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CAAI,IAAI,CAAA,kBAAA,EAAqB,MAAM,CAAA,CAAE,CAAA,CAAE,IAAA,EAA2B;AACzF,IAAA,OAAO,QAAQ,EAAC;AAAA,EAClB,CAAA;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,MAAA,EAAQ,MACN,YAAA,CAAa;AAAA,MACX,UAAU,CAAC,OAAA,EAAS,QAAA,EAAU,kBAAA,GAAqB,MAAM,CAAA;AAAA,MACzD,OAAA,EAAS,MAAM,IAAA,CAAK,MAAA,EAAO;AAAA,MAC3B,SAAA,EAAW,IAAI,EAAA,GAAK;AAAA,KACrB;AAAA;AAEP","file":"chunk-TTMYT3RB.js","sourcesContent":["import { queryOptions } from '@tanstack/react-query';\nimport { api } from './client';\nimport { getTwilightContext } from '../twilight/context';\nimport type { MenuItem } from '../types';\n\nexport const menu = {\n  header: async (): Promise<MenuItem[]> => {\n    const { locale } = getTwilightContext();\n    const { data } = await api.get(`menus/header?lang=${locale}`).json<{ data: MenuItem[] }>();\n    return data || [];\n  },\n\n  footer: async (): Promise<MenuItem[]> => {\n    const { locale } = getTwilightContext();\n    const { data } = await api.get(`menus/footer?lang=${locale}`).json<{ data: MenuItem[] }>();\n    return data || [];\n  },\n\n  queries: {\n    header: () =>\n      queryOptions({\n        queryKey: ['menus', 'header', getTwilightContext().locale],\n        queryFn: () => menu.header(),\n        staleTime: 5 * 60 * 1000,\n      }),\n  },\n};\n"]}

package/dist/{chunk-VRV5F6G7.js → chunk-TYLKNVQA.js}

@@ -1,5 +1,5 @@
-import { hostIdentifiesStore, resolveRequestStoreBase, storeBaseRedirectHref } from './chunk-XTMHHLNK.js';
-import { getRequestStore } from './chunk-OGQXRBCR.js';
+import { hostIdentifiesStore, resolveRequestStoreBase, storeBaseRedirectHref } from './chunk-SR4OTLTJ.js';
+import { getRequestStore } from './chunk-N2S25NXP.js';
 
 // src/utils/inline-script.ts
 function escapeForInlineScript(value) {
@@ -76,26 +76,6 @@ function resolveStoreBaseRedirect(username, href) {
   return storeBaseRedirectHref({ host, base: resolveStoreBase(), username, href });
 }
 
-// src/utils/sdk-helpers.ts
-var isBrowser = typeof window !== "undefined";
-function getStoreIdentifier(explicit) {
-  return resolveStoreIdentifier(explicit);
-}
-function getSallaSDK() {
-  if (!isBrowser) return void 0;
-  return window.salla;
-}
-function syncSdkLocale(locale) {
-  const sdk = getSallaSDK();
-  if (!sdk || !locale) return;
-  try {
-    sdk.lang?.setLocale?.(locale);
-    sdk.api?.setHeader?.("accept-language", locale);
-    sdk.config?.set?.("user.language_code", locale);
-  } catch {
-  }
-}
-
-export { escapeForInlineScript, getInjectedRuntimeEnv, getSallaSDK, getStoreIdentifier, readEnv, renderRuntimeEnvScript, resolveStoreBase, resolveStoreBaseRedirect, resolveStoreIdentifier, syncSdkLocale };
-//# sourceMappingURL=chunk-VRV5F6G7.js.map
-//# sourceMappingURL=chunk-VRV5F6G7.js.map
+export { escapeForInlineScript, getInjectedRuntimeEnv, readEnv, renderRuntimeEnvScript, resolveStoreBase, resolveStoreBaseRedirect, resolveStoreIdentifier };
+//# sourceMappingURL=chunk-TYLKNVQA.js.map
+//# sourceMappingURL=chunk-TYLKNVQA.js.map

package/dist/chunk-TYLKNVQA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/inline-script.ts","../src/utils/runtime-env.ts","../src/utils/store-identity.ts"],"names":[],"mappings":";;;;AAMO,SAAS,sBAAsB,KAAA,EAAuB;AAC3D,EAAA,OAAO,MACJ,OAAA,CAAQ,IAAA,EAAM,SAAS,CAAA,CACvB,OAAA,CAAQ,MAAM,SAAS,CAAA,CACvB,QAAQ,IAAA,EAAM,SAAS,EACvB,OAAA,CAAQ,SAAA,EAAW,SAAS,CAAA,CAC5B,OAAA,CAAQ,WAAW,SAAS,CAAA;AACjC;;;ACRA,IAAM,eAAA,GAAkB,uBAAA;AAsCjB,SAAS,QAAQ,GAAA,EAAiC;AACvD,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAQ,MAAA,CAAA,IAAA,CAAwE,GAAA,GACpF,GACF,CAAA;AACA,IAAA,IAAI,MAAM,OAAO,IAAA;AAAA,EACnB,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,OAAO,OAAA,KAAY,WAAA,GAAc,OAAA,CAAQ,GAAA,GAAM,GAAG,CAAA,GAAI,MAAA;AAC/D;AAOO,SAAS,iBAAA,GAAgC;AAC9C,EAAA,MAAM,WAAW,qBAAA,EAAsB;AACvC,EAAA,MAAM,EAAE,OAAA,EAAS,SAAA,EAAW,SAAA,EAAW,WAAA,KAAgB,eAAA,EAAgB;AACvE,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,QAAA,CAAS,OAAA,IAAW,OAAA,CAAQ,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMnD,eAAA,EACE,QAAA,CAAS,eAAA,IACT,OAAA,IACA,SAAA,KACC,mBAAA,CAAoB,WAAW,CAAA,GAAI,WAAA,GAAc,IAAA,CAAA,IAClD,OAAA,CAAQ,mBAAmB,CAAA;AAAA;AAAA;AAAA,IAG7B,SAAA,EAAW,QAAA,CAAS,SAAA,IAAa,SAAA,IAAa,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAK9C,SAAA,EAAW,QAAA,CAAS,SAAA,IAAa,SAAA,IAAa;AAAA,GAChD;AACF;AAWO,SAAS,qBAAA,GAAoC;AAClD,EAAA,MAAM,MAAA,GAAS,UAAA;AACf,EAAA,OAAO,MAAA,CAAO,eAAe,CAAA,IAAK,EAAC;AACrC;AAMO,SAAS,sBAAA,CAAuB,GAAA,GAAkB,iBAAA,EAAkB,EAAkB;AAC3F,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,CAAE,MAAA,CAAO,CAAC,GAAG,KAAK,CAAA,KAAM,OAAA,CAAQ,KAAK,CAAC,CAAA;AACpE,EAAA,IAAI,CAAC,GAAA,CAAI,MAAA,EAAQ,OAAO,IAAA;AACxB,EAAA,MAAM,IAAA,GAAO,sBAAsB,IAAA,CAAK,SAAA,CAAU,OAAO,WAAA,CAAY,GAAG,CAAC,CAAC,CAAA;AAC1E,EAAA,OAAO,CAAA,OAAA,EAAU,eAAe,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,CAAA;AAC1C;;;ACtDO,SAAS,uBAAuB,QAAA,EAA2B;AAChE,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,MAAM,EAAE,OAAA,EAAS,WAAA,EAAY,GAAI,eAAA,EAAgB;AACjD,EAAA,IAAI,SAAS,OAAO,OAAA;AAEpB,EAAA,MAAM,YAAY,gBAAA,EAAiB;AACnC,EAAA,IAAI,WAAW,OAAO,SAAA;AAEtB,EAAA,MAAM,QAAA,GAAW,uBAAsB,CAAE,eAAA;AACzC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,IAAI,mBAAA,CAAoB,WAAW,CAAA,EAAG,OAAO,WAAA;AAI7C,EAAA,MAAM,cAAc,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,SAAS,IAAA,GAAO,IAAA;AAC3E,EAAA,IAAI,mBAAA,CAAoB,WAAW,CAAA,EAAG,OAAO,WAAA;AAE7C,EAAA,OAAO,OAAA,CAAQ,mBAAmB,CAAA,IAAK,OAAA,CAAQ,cAAc,CAAA,IAAK,EAAA;AACpE;AAkBO,SAAS,gBAAA,GAAkC;AAChD,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,eAAA,EAAgB;AACtC,EAAA,IAAI,WAAW,OAAO,SAAA;AACtB,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAE1C,EAAA,MAAM,YAAY,qBAAA,EAAsB;AACxC,EAAA,IAAI,SAAA,CAAU,SAAA,EAAW,OAAO,SAAA,CAAU,SAAA;AAC1C,EAAA,IAAI,OAAO,IAAA,CAAK,SAAS,CAAA,CAAE,MAAA,GAAS,GAAG,OAAO,IAAA;AAE9C,EAAA,OAAO,wBAAwB,MAAA,CAAO,QAAA,CAAS,IAAA,EAAM,MAAA,CAAO,SAAS,IAAI,CAAA;AAC3E;AAaO,SAAS,wBAAA,CACd,UACA,IAAA,EACe;AACf,EAAA,MAAM,IAAA,GACJ,iBAAgB,CAAE,WAAA,KAAgB,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,IAAA,GAAO,IAAA,CAAA;AAC3F,EAAA,OAAO,qBAAA,CAAsB,EAAE,IAAA,EAAM,IAAA,EAAM,kBAAiB,EAAG,QAAA,EAAU,MAAM,CAAA;AACjF","file":"chunk-TYLKNVQA.js","sourcesContent":["/**\n * Escape a JSON-stringified value for safe embedding inside an inline `<script>` body.\n *\n * The head injects script bodies raw, so a `</script>` inside partner-set data would break out\n * of the tag; U+2028/U+2029 are line terminators in JS but not in JSON, so they must go too.\n */\nexport function escapeForInlineScript(value: string): string {\n  return value\n    .replace(/</g, '\\\\u003c')\n    .replace(/>/g, '\\\\u003e')\n    .replace(/&/g, '\\\\u0026')\n    .replace(/\\u2028/g, '\\\\u2028')\n    .replace(/\\u2029/g, '\\\\u2029');\n}\n","import { escapeForInlineScript } from './inline-script';\nimport { getRequestStore } from '../twilight/context';\nimport { hostIdentifiesStore } from './cookies';\n\n/** Where `rootHead` publishes the SSR-resolved env for the browser bundle to read. */\nconst RUNTIME_ENV_KEY = '__SALLA_RUNTIME_ENV__';\n\n/** The env values that must agree between the SSR render and the hydrated client. */\nexport interface RuntimeEnv {\n  /** Store API base — `VITE_API_URL`. */\n  apiBase?: string;\n  /** Store identifier — `VITE_STORE_DOMAIN`. */\n  storeIdentifier?: string;\n  /**\n   * The theme-settings version the request named, if any.\n   *\n   * Published for the same reason `storeIdentifier` is: the dispatcher strips\n   * `?versionId=` on the way in, so by the time the browser has the page its own\n   * URL no longer says which version it is showing. Without this the hydrated\n   * client would ask the API about the store's live version and quietly replace\n   * the draft it was handed.\n   *\n   * Absent — not empty — when nothing named one, so it drops out of the inline\n   * script entirely rather than publishing a value that means \"live\".\n   */\n  versionId?: string;\n  /**\n   * The store segment at the root of this page's paths, when the store is\n   * addressed that way — see `resolveStoreBase`.\n   *\n   * Published because the browser's address is not always the URL the server\n   * read: the dispatcher removes `?storeId=` from the request it forwards but not\n   * from the address bar, and a URL carrying it is never read for a segment. The\n   * client builds its router from this, and a router that disagreed with the\n   * server about the root would hydrate a different page.\n   */\n  storeBase?: string;\n}\n\n/**\n * A build-time `import.meta.env` var, falling back to the worker's runtime `process.env`\n * (wrangler `vars`, exposed via the `nodejs_compat_populate_process_env` flag).\n */\nexport function readEnv(key: string): string | undefined {\n  try {\n    const vite = (import.meta as unknown as { env?: Record<string, string | undefined> }).env?.[\n      key\n    ];\n    if (vite) return vite;\n  } catch {\n    /* import.meta.env not available in all environments */\n  }\n  return typeof process !== 'undefined' ? process.env?.[key] : undefined;\n}\n\n/**\n * What this runtime resolves from its own env — server-side that includes the worker vars.\n * Prefers what the server already published, so re-rendering the head during hydration yields\n * the same script instead of dropping it.\n */\nexport function resolveRuntimeEnv(): RuntimeEnv {\n  const injected = getInjectedRuntimeEnv();\n  const { storeId, storeBase, versionId, requestHost } = getRequestStore();\n  return {\n    apiBase: injected.apiBase || readEnv('VITE_API_URL'),\n    // The request outranks the build-time var here for the same reason it does\n    // in `resolveStoreIdentifier`, and this is the copy that reaches the\n    // browser: publish the store SSR actually rendered, or hydration resolves\n    // again from a URL whose `?storeId=` the dispatcher has already stripped and\n    // queries a different store than the markup it is hydrating.\n    storeIdentifier:\n      injected.storeIdentifier ||\n      storeId ||\n      storeBase ||\n      (hostIdentifiesStore(requestHost) ? requestHost : null) ||\n      readEnv('VITE_STORE_DOMAIN'),\n    // Absent rather than empty when the path named no store, so it drops out of\n    // the inline script, like `versionId`.\n    storeBase: injected.storeBase || storeBase || undefined,\n    // No env fallback on purpose. A store identifier has one because a build can\n    // legitimately be pinned to a store; a version is something a request asks\n    // for, and a build-time default would make every visitor of every store see\n    // whichever draft was current when the theme was compiled.\n    versionId: injected.versionId || versionId || undefined,\n  };\n}\n\n/**\n * The env the SSR worker resolved, as handed to the browser by `rootHead`. Empty on the server\n * and on a client whose head carried nothing.\n *\n * Worker `vars` are *runtime* env: they live in `process.env` on the server only, while\n * `import.meta.env` is substituted at build time. A bundle built without those vars therefore\n * sees `undefined` in the browser and silently falls back to the production defaults — SSR\n * would render off the configured backend while every post-hydration fetch hits another one.\n */\nexport function getInjectedRuntimeEnv(): RuntimeEnv {\n  const holder = globalThis as typeof globalThis & { [RUNTIME_ENV_KEY]?: RuntimeEnv };\n  return holder[RUNTIME_ENV_KEY] ?? {};\n}\n\n/**\n * Inline head `<script>` body publishing the server-resolved env, or null when there is nothing\n * to publish (no overrides configured — the defaults already agree on both sides).\n */\nexport function renderRuntimeEnvScript(env: RuntimeEnv = resolveRuntimeEnv()): string | null {\n  const set = Object.entries(env).filter(([, value]) => Boolean(value));\n  if (!set.length) return null;\n  const json = escapeForInlineScript(JSON.stringify(Object.fromEntries(set)));\n  return `window.${RUNTIME_ENV_KEY}=${json};`;\n}\n","/**\n * @fileoverview Which store to ask about — the one answer, in one place.\n *\n * This lived in two places once. `api/store.ts` learned to read the store a\n * request names, and `utils/sdk-helpers.ts` — the copy `api/client.ts` actually\n * sets the `store-identifier` header from — did not. So the resolver that had\n * been taught the answer was consulted for a null check and thrown away, every\n * outgoing request carried an empty identifier, the API answered\n * `422 Store Identifier not found`, and every published theme rendered\n * \"Store Unavailable\" while its tests passed: the client's suite mocked the\n * resolver, and the resolver's suite never went near a request.\n *\n * Hence one module, imported by both. If a third place ever needs a store\n * identifier, it imports this — a second implementation is the bug, not a\n * refactor away from it.\n *\n * See `docs/store-identity.md` for the full picture, including the security\n * boundary on who may name a store.\n */\nimport { getRequestStore } from '../twilight/context';\nimport { hostIdentifiesStore, resolveRequestStoreBase } from './cookies';\nimport { getInjectedRuntimeEnv, readEnv } from './runtime-env';\nimport { storeBaseRedirectHref } from './store-base';\n\n/**\n * Which store to ask about, in the order the answers can be trusted.\n *\n * A deployed theme worker is published with **no vars and no bindings** — the\n * script metadata carries `main_module`, compatibility settings, assets and tags\n * and nothing else — so `VITE_STORE_DOMAIN` exists only where a build baked it\n * in, which is local development. In production this function used to reach the\n * end of that chain and return the empty string, `store.settings` refused to\n * call with no identifier, and the root loader threw \"Store Unavailable\" — a\n * theme that renders its own failure page for every visitor of every store.\n *\n * The order:\n *\n * 1. what the caller passed, which is always deliberate;\n * 2. the store this request names — the `?storeId=` a preview was opened with,\n *    then the cookie remembering it — seeded by `twilightMiddleware`, and only\n *    on a host permitted to name one;\n * 3. the store the first segment of the path names, on those same hosts — its\n *    username, which the API accepts as an identifier as readily as an id (see\n *    {@link resolveStoreBase});\n * 4. what SSR already resolved and published, so the hydrated client asks about\n *    the same store the server rendered instead of resolving again from a URL\n *    that no longer names it;\n * 5. the request's own host, which *is* the identity of a live storefront —\n *    but only when that host is a storefront. `preview.salla.design` and\n *    `localhost` serve many stores, so their names identify none;\n * 6. `VITE_STORE_DOMAIN`, last, because a build-time constant is a development\n *    convenience and must never outrank what the request actually said.\n *\n * Steps 2 and 3 never both answer: a path that names a store takes the place of\n * the cookie, and a URL carrying `?storeId=` is not read for a path segment.\n */\nexport function resolveStoreIdentifier(explicit?: string): string {\n  if (explicit) return explicit;\n\n  const { storeId, requestHost } = getRequestStore();\n  if (storeId) return storeId;\n\n  const storeBase = resolveStoreBase();\n  if (storeBase) return storeBase;\n\n  const injected = getInjectedRuntimeEnv().storeIdentifier;\n  if (injected) return injected;\n\n  if (hostIdentifiesStore(requestHost)) return requestHost as string;\n\n  // The browser's own address, for a client render that reached neither of the\n  // above — a live storefront, where the host is the store.\n  const browserHost = typeof window !== 'undefined' ? window.location.host : null;\n  if (hostIdentifiesStore(browserHost)) return browserHost as string;\n\n  return readEnv('VITE_STORE_DOMAIN') || readEnv('STORE_DOMAIN') || '';\n}\n\n/**\n * The store segment at the root of this page's paths, or null when the store is\n * not addressed that way.\n *\n * On the server it is what `twilightMiddleware` read off the request. In the\n * browser it is what SSR published, because the address bar is not always the\n * URL the server rendered: on the preview host the dispatcher removes\n * `?storeId=` from the request it forwards and leaves it in the browser's, and a\n * URL carrying `storeId` is never read for a segment. Re-reading\n * `window.location` would, for `/ar?storeId=…`, route the page under a different\n * store than the one it was rendered for.\n *\n * The address bar is read only when SSR published nothing at all: a page the dev\n * server answered with its client shell instead of a render, where there is no\n * server decision to agree with.\n */\nexport function resolveStoreBase(): string | null {\n  const { storeBase } = getRequestStore();\n  if (storeBase) return storeBase;\n  if (typeof window === 'undefined') return null;\n\n  const published = getInjectedRuntimeEnv();\n  if (published.storeBase) return published.storeBase;\n  if (Object.keys(published).length > 0) return null;\n\n  return resolveRequestStoreBase(window.location.href, window.location.host);\n}\n\n/**\n * The address this page should be loaded from instead, when the store is the root\n * of every URL on this host and this request did not use it; null otherwise.\n *\n * @param username - the store's username, from the settings the request loaded\n * @param href - the router's own href for the page, without any store segment\n *\n * See `storeBaseRedirectHref` for the rules. The host is the request's on the\n * server and the browser's own in the browser, so the decision is gated the same\n * way on both sides.\n */\nexport function resolveStoreBaseRedirect(\n  username: string | null | undefined,\n  href: string\n): string | null {\n  const host =\n    getRequestStore().requestHost ?? (typeof window !== 'undefined' ? window.location.host : null);\n  return storeBaseRedirectHref({ host, base: resolveStoreBase(), username, href });\n}\n"]}

package/dist/{chunk-X7P2WSNU.js → chunk-UIOLSYKV.js}

@@ -1,4 +1,4 @@
-import { api } from './chunk-BHU25UEW.js';
+import { api } from './chunk-P3OPJL6I.js';
 import { queryOptions } from '@tanstack/react-query';
 
 var apps = {
@@ -40,5 +40,5 @@ var apps = {
 };
 
 export { apps };
-//# sourceMappingURL=chunk-X7P2WSNU.js.map
-//# sourceMappingURL=chunk-X7P2WSNU.js.map
+//# sourceMappingURL=chunk-UIOLSYKV.js.map
+//# sourceMappingURL=chunk-UIOLSYKV.js.map

package/dist/{chunk-X7P2WSNU.js.map → chunk-UIOLSYKV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/api/apps.ts"],"names":[],"mappings":";;;AAmCO,IAAM,IAAA,GAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlB,UAAU,YAAmC;AAC3C,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CACpB,GAAA,CAAI,eAAA,EAAiB,EAAE,OAAA,EAAS,IAAA,EAAM,CAAA,CACtC,IAAA,EAA8B;AACjC,IAAA,OAAO,QAAQ,EAAC;AAAA,EAClB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,UAAU,YAAkC;AAC1C,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CACpB,GAAA,CAAI,wBAAA,EAA0B,EAAE,OAAA,EAAS,IAAA,EAAM,CAAA,CAC/C,IAAA,EAAsC;AACzC,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,IAAQ,EAAC,EAAE;AAAA,EAClC,CAAA;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,QAAA,EAAU,MACR,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,MAAA,EAAQ,UAAU,CAAA;AAAA,MAC7B,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,EAAS;AAAA;AAAA,MAE7B,SAAA,EAAW,QAAA;AAAA;AAAA;AAAA;AAAA,MAIX,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,IAEH,QAAA,EAAU,MACR,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,MAAA,EAAQ,UAAU,CAAA;AAAA,MAC7B,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,EAAS;AAAA;AAAA,MAE7B,SAAA,EAAW,QAAA;AAAA,MACX,KAAA,EAAO;AAAA,KACR;AAAA;AAEP","file":"chunk-X7P2WSNU.js","sourcesContent":["import { queryOptions } from '@tanstack/react-query';\nimport { api } from './client';\n\nexport interface AppSnippetRow {\n  place: string;\n  content: string;\n  url?: string | null;\n  /**\n   * Raw snippet id, emitted as `data-snippet-id`. Present only on CDN rows — the\n   * inline branch of the backend's snippet parser omits the key entirely.\n   */\n  id?: number;\n  /** `{{customer.x}}` placeholders in `content` to substitute from SDK config `user.*` keys. */\n  customer_parameters?: string[];\n}\n\nexport interface AppSnippet {\n  service: string;\n  app_id: string;\n  /** Encoded app id (`getRouteKey()`): the scope id its snippets bind to via `data-scope-id`,\n   *  and its settings-bucket key. Absent on payloads predating the settings API. */\n  id?: string;\n  app_slug: string;\n  status: string;\n  snippets: AppSnippetRow[];\n}\n\n/**\n * Per-app public `app.*` buckets for CDN snippets, keyed by encoded app id (== `AppSnippet.id`,\n * the `Salla.appScope` scope id). One isolated bucket per app; reads within a scope are bare `app.*`.\n */\nexport interface AppSettings {\n  apps: Record<string, Record<string, unknown>>;\n}\n\nexport const apps = {\n  /**\n   * Installed apps' snippets (scripts/HTML to inject). Timeout-bounded because it's awaited in\n   * rootBeforeLoad (SSR/TTFB): a slow response degrades to no CDN tags, never stalls the page.\n   */\n  snippets: async (): Promise<AppSnippet[]> => {\n    const { data } = await api\n      .get('apps/snippets', { timeout: 2500 })\n      .json<{ data?: AppSnippet[] }>();\n    return data ?? [];\n  },\n\n  /**\n   * Per-app public `app.*` buckets, keyed by encoded app id. Timeout-bounded (SSR-awaited):\n   * a slow response degrades to empty buckets (fail-open), never strands injection.\n   */\n  settings: async (): Promise<AppSettings> => {\n    const { data } = await api\n      .get('apps/snippets/settings', { timeout: 2500 })\n      .json<{ data?: Partial<AppSettings> }>();\n    return { apps: data?.apps ?? {} };\n  },\n\n  queries: {\n    snippets: () =>\n      queryOptions({\n        queryKey: ['apps', 'snippets'],\n        queryFn: () => apps.snippets(),\n        // Snippets are static per session; one fetch per page load is enough.\n        staleTime: Infinity,\n        // No retry: this is awaited in rootBeforeLoad, so the router's default `retry: 1` would\n        // make the SSR wait 2 x the 2500ms timeout (plus backoff) before failing open. The\n        // 2500ms timeout must be the whole budget; the client fallback query does the retrying.\n        retry: 0,\n      }),\n\n    settings: () =>\n      queryOptions({\n        queryKey: ['apps', 'settings'],\n        queryFn: () => apps.settings(),\n        // Encoded app ids and their buckets are stable per page; one fetch is enough.\n        staleTime: Infinity,\n        retry: 0,\n      }),\n  },\n};\n"]}
+{"version":3,"sources":["../src/api/apps.ts"],"names":[],"mappings":";;;AAmCO,IAAM,IAAA,GAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlB,UAAU,YAAmC;AAC3C,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CACpB,GAAA,CAAI,eAAA,EAAiB,EAAE,OAAA,EAAS,IAAA,EAAM,CAAA,CACtC,IAAA,EAA8B;AACjC,IAAA,OAAO,QAAQ,EAAC;AAAA,EAClB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,UAAU,YAAkC;AAC1C,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CACpB,GAAA,CAAI,wBAAA,EAA0B,EAAE,OAAA,EAAS,IAAA,EAAM,CAAA,CAC/C,IAAA,EAAsC;AACzC,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,IAAQ,EAAC,EAAE;AAAA,EAClC,CAAA;AAAA,EAEA,OAAA,EAAS;AAAA,IACP,QAAA,EAAU,MACR,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,MAAA,EAAQ,UAAU,CAAA;AAAA,MAC7B,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,EAAS;AAAA;AAAA,MAE7B,SAAA,EAAW,QAAA;AAAA;AAAA;AAAA;AAAA,MAIX,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,IAEH,QAAA,EAAU,MACR,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,MAAA,EAAQ,UAAU,CAAA;AAAA,MAC7B,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,EAAS;AAAA;AAAA,MAE7B,SAAA,EAAW,QAAA;AAAA,MACX,KAAA,EAAO;AAAA,KACR;AAAA;AAEP","file":"chunk-UIOLSYKV.js","sourcesContent":["import { queryOptions } from '@tanstack/react-query';\nimport { api } from './client';\n\nexport interface AppSnippetRow {\n  place: string;\n  content: string;\n  url?: string | null;\n  /**\n   * Raw snippet id, emitted as `data-snippet-id`. Present only on CDN rows — the\n   * inline branch of the backend's snippet parser omits the key entirely.\n   */\n  id?: number;\n  /** `{{customer.x}}` placeholders in `content` to substitute from SDK config `user.*` keys. */\n  customer_parameters?: string[];\n}\n\nexport interface AppSnippet {\n  service: string;\n  app_id: string;\n  /** Encoded app id (`getRouteKey()`): the scope id its snippets bind to via `data-scope-id`,\n   *  and its settings-bucket key. Absent on payloads predating the settings API. */\n  id?: string;\n  app_slug: string;\n  status: string;\n  snippets: AppSnippetRow[];\n}\n\n/**\n * Per-app public `app.*` buckets for CDN snippets, keyed by encoded app id (== `AppSnippet.id`,\n * the `Salla.appScope` scope id). One isolated bucket per app; reads within a scope are bare `app.*`.\n */\nexport interface AppSettings {\n  apps: Record<string, Record<string, unknown>>;\n}\n\nexport const apps = {\n  /**\n   * Installed apps' snippets (scripts/HTML to inject). Timeout-bounded because it's awaited in\n   * rootBeforeLoad (SSR/TTFB): a slow response degrades to no CDN tags, never stalls the page.\n   */\n  snippets: async (): Promise<AppSnippet[]> => {\n    const { data } = await api\n      .get('apps/snippets', { timeout: 2500 })\n      .json<{ data?: AppSnippet[] }>();\n    return data ?? [];\n  },\n\n  /**\n   * Per-app public `app.*` buckets, keyed by encoded app id. Timeout-bounded (SSR-awaited):\n   * a slow response degrades to empty buckets (fail-open), never strands injection.\n   */\n  settings: async (): Promise<AppSettings> => {\n    const { data } = await api\n      .get('apps/snippets/settings', { timeout: 2500 })\n      .json<{ data?: Partial<AppSettings> }>();\n    return { apps: data?.apps ?? {} };\n  },\n\n  queries: {\n    snippets: () =>\n      queryOptions({\n        queryKey: ['apps', 'snippets'],\n        queryFn: () => apps.snippets(),\n        // Snippets are static per session; one fetch per page load is enough.\n        staleTime: Infinity,\n        // No retry: this is awaited in rootBeforeLoad, so the router's default `retry: 1` would\n        // make the SSR wait 2 x the 2500ms timeout (plus backoff) before failing open. The\n        // 2500ms timeout must be the whole budget; the client fallback query does the retrying.\n        retry: 0,\n      }),\n\n    settings: () =>\n      queryOptions({\n        queryKey: ['apps', 'settings'],\n        queryFn: () => apps.settings(),\n        // Encoded app ids and their buckets are stable per page; one fetch is enough.\n        staleTime: Infinity,\n        retry: 0,\n      }),\n  },\n};\n"]}

package/dist/{chunk-6DVYW7OA.js → chunk-UZKTK6YV.js}

@@ -1,5 +1,5 @@
-import { user } from './chunk-KZMUU5ZD.js';
-import { getTwilightContext } from './chunk-OGQXRBCR.js';
+import { user } from './chunk-5X2UFNKY.js';
+import { getTwilightContext } from './chunk-N2S25NXP.js';
 import { useQuery } from '@tanstack/react-query';
 
 function useUser() {
@@ -13,5 +13,5 @@ function useUser() {
 }
 
 export { useUser };
-//# sourceMappingURL=chunk-6DVYW7OA.js.map
-//# sourceMappingURL=chunk-6DVYW7OA.js.map
+//# sourceMappingURL=chunk-UZKTK6YV.js.map
+//# sourceMappingURL=chunk-UZKTK6YV.js.map

package/dist/{chunk-6DVYW7OA.js.map → chunk-UZKTK6YV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/hooks/useUser.ts"],"names":[],"mappings":";;;;AAUO,SAAS,OAAA,GAAyB;AACvC,EAAA,MAAM,KAAA,GAAQ,oBAAmB,CAAE,SAAA;AAEnC,EAAA,MAAM,QAAQ,QAAA,CAAS;AAAA,IACrB,GAAG,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAQ;AAAA,IACxB,OAAA,EAAS,CAAC,CAAC,KAAA;AAAA,IACX,eAAA,EAAiB;AAAA,GAClB,CAAA;AAED,EAAA,OAAO,EAAE,GAAG,KAAA,EAAO,UAAA,EAAY,CAAC,CAAC,KAAA,EAAM;AACzC","file":"chunk-6DVYW7OA.js","sourcesContent":["import { useQuery, type UseQueryResult } from '@tanstack/react-query';\nimport { getTwilightContext } from '../twilight/context';\nimport { user } from '../api/user';\nimport type { User } from '../types';\n\nexport type UseUserReturn = UseQueryResult<User | null> & {\n  /** True when an auth token exists (regardless of query state). */\n  isLoggedIn: boolean;\n};\n\nexport function useUser(): UseUserReturn {\n  const token = getTwilightContext().authToken;\n\n  const query = useQuery({\n    ...user.queries.current(),\n    enabled: !!token,\n    placeholderData: null,\n  });\n\n  return { ...query, isLoggedIn: !!token };\n}\n"]}
+{"version":3,"sources":["../src/hooks/useUser.ts"],"names":[],"mappings":";;;;AAUO,SAAS,OAAA,GAAyB;AACvC,EAAA,MAAM,KAAA,GAAQ,oBAAmB,CAAE,SAAA;AAEnC,EAAA,MAAM,QAAQ,QAAA,CAAS;AAAA,IACrB,GAAG,IAAA,CAAK,OAAA,CAAQ,OAAA,EAAQ;AAAA,IACxB,OAAA,EAAS,CAAC,CAAC,KAAA;AAAA,IACX,eAAA,EAAiB;AAAA,GAClB,CAAA;AAED,EAAA,OAAO,EAAE,GAAG,KAAA,EAAO,UAAA,EAAY,CAAC,CAAC,KAAA,EAAM;AACzC","file":"chunk-UZKTK6YV.js","sourcesContent":["import { useQuery, type UseQueryResult } from '@tanstack/react-query';\nimport { getTwilightContext } from '../twilight/context';\nimport { user } from '../api/user';\nimport type { User } from '../types';\n\nexport type UseUserReturn = UseQueryResult<User | null> & {\n  /** True when an auth token exists (regardless of query state). */\n  isLoggedIn: boolean;\n};\n\nexport function useUser(): UseUserReturn {\n  const token = getTwilightContext().authToken;\n\n  const query = useQuery({\n    ...user.queries.current(),\n    enabled: !!token,\n    placeholderData: null,\n  });\n\n  return { ...query, isLoggedIn: !!token };\n}\n"]}

package/dist/{chunk-HF6RCUMD.js → chunk-VJHDE6UT.js}

@@ -1,5 +1,5 @@
-import { orThrow, orUnauthorized } from './chunk-RLSYCDI4.js';
-import { api } from './chunk-BHU25UEW.js';
+import { orThrow, orUnauthorized } from './chunk-WH225GEC.js';
+import { api } from './chunk-P3OPJL6I.js';
 import { queryOptions } from '@tanstack/react-query';
 
 var order = {
@@ -69,5 +69,5 @@ var order = {
 };
 
 export { order };
-//# sourceMappingURL=chunk-HF6RCUMD.js.map
-//# sourceMappingURL=chunk-HF6RCUMD.js.map
+//# sourceMappingURL=chunk-VJHDE6UT.js.map
+//# sourceMappingURL=chunk-VJHDE6UT.js.map

package/dist/{chunk-HF6RCUMD.js.map → chunk-VJHDE6UT.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/api/order.ts"],"names":[],"mappings":";;;;AAqCO,IAAM,KAAA,GAAQ;AAAA,EACnB,IAAA,EAAM,OAAO,MAAA,KAA2D;AACtE,IAAA,MAAM;AAAA,MACJ,IAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAA;AAAA,MACA,eAAA,EAAiB,cAAA;AAAA,MACjB,UAAA,EAAY,SAAA;AAAA,MACZ;AAAA,KACF,GAAI,UAAU,EAAC;AAEf,IAAA,MAAM,YAAA,GAAe,IAAI,eAAA,EAAgB;AACzC,IAAA,IAAI,SAAS,MAAA,EAAW,YAAA,CAAa,IAAI,MAAA,EAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AAC7D,IAAA,IAAI,MAAA,EAAQ,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA;AAC7C,IAAA,IAAI,MAAA,EAAQ,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA;AAC7C,IAAA,IAAI,cAAA,EAAgB,YAAA,CAAa,GAAA,CAAI,iBAAA,EAAmB,cAAc,CAAA;AACtE,IAAA,IAAI,SAAA,EAAW,YAAA,CAAa,GAAA,CAAI,YAAA,EAAc,GAAG,CAAA;AAEjD,IAAA,MAAM,UAAmC,EAAC;AAC1C,IAAA,IAAI,MAAA,UAAgB,MAAA,GAAS,MAAA;AAE7B,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CACpB,GAAA,CAAI,CAAA,OAAA,EAAU,YAAA,CAAa,QAAA,EAAU,CAAA,CAAA,EAAI,OAAc,CAAA,CACvD,IAAA,EAA4D;AAE/D,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,QAAA,CAAS,IAAA,IAAQ,EAAC;AAAA,MACxB,QAAQ,QAAA,CAAS;AAAA,KACnB;AAAA,EACF,CAAA;AAAA,EAEA,IAAA,EAAM,OAAO,EAAA,KAA6C;AACxD,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CAAI,GAAA,CAAI,UAAU,EAAE,CAAA,CAAE,EAAE,IAAA,EAAsB;AAErE,IAAA,OAAO,EAAE,KAAA,EAAO,QAAA,CAAS,IAAA,EAAK;AAAA,EAChC,CAAA;AAAA,EAEA,SAAA,EAAW,OAAO,OAAA,KAAkD;AAClE,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CACpB,GAAA,CAAI,UAAU,OAAO,CAAA,UAAA,CAAY,EACjC,IAAA,EAAoC;AACvC,IAAA,OAAO,QAAA,CAAS,QAAQ,EAAC;AAAA,EAC3B,CAAA;AAAA,EAEA,OAAA,EAAS,OAAO,OAAA,KAAgD;AAC9D,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CAAI,GAAA,CAAI,UAAU,OAAO,CAAA,QAAA,CAAU,EAAE,IAAA,EAAkC;AAC9F,IAAA,OAAO,QAAA,CAAS,QAAQ,EAAC;AAAA,EAC3B,CAAA;AAAA,EAEA,aAAa,CAAC,EAAA,KAA6C,eAAe,KAAA,CAAM,IAAA,CAAK,EAAE,CAAC,CAAA;AAAA,EAExF,QAAA,EAAU,OAAO,OAAA,KAAmD;AAClE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CACpB,IAAI,CAAA,mBAAA,EAAsB,OAAO,CAAA,CAAE,CAAA,CACnC,IAAA,EAAqC;AACxC,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAAA,EAEA,iBAAiB,CAAC,OAAA,KAChB,QAAQ,KAAA,CAAM,QAAA,CAAS,OAAO,CAAC,CAAA;AAAA,EAEjC,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,CAAC,MAAA,KACL,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA;AAAA,MACnC,OAAA,EAAS,CAAC,EAAE,MAAA,EAAO,KAAM,KAAA,CAAM,IAAA,CAAK,EAAE,GAAG,MAAA,EAAQ,MAAA,EAAQ;AAAA,KAC1D,CAAA;AAAA,IACH,IAAA,EAAM,CAAC,EAAA,KACL,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,QAAA,EAAU,EAAE,CAAA;AAAA,MACjC,OAAA,EAAS,MAAM,KAAA,CAAM,IAAA,CAAK,EAAE;AAAA,KAC7B,CAAA;AAAA,IACH,SAAA,EAAW,CAAC,OAAA,KACV,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,WAAA,EAAa,OAAO,CAAA;AAAA,MACzC,OAAA,EAAS,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO;AAAA,KACvC,CAAA;AAAA,IACH,OAAA,EAAS,CAAC,OAAA,KACR,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,SAAA,EAAW,OAAO,CAAA;AAAA,MACvC,OAAA,EAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,OAAO;AAAA,KACrC,CAAA;AAAA,IACH,QAAA,EAAU,CAAC,OAAA,KACT,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,UAAA,EAAY,OAAO,CAAA;AAAA,MACxC,OAAA,EAAS,MAAM,KAAA,CAAM,QAAA,CAAS,OAAO;AAAA,KACtC;AAAA;AAEP","file":"chunk-HF6RCUMD.js","sourcesContent":["import { queryOptions } from '@tanstack/react-query';\nimport { api } from './client';\nimport type {\n  Order,\n  OrderListItem,\n  OrderShipmentItem,\n  OrderRatingItem,\n} from '../routes/account/types';\nimport type { Pagination } from './types';\nimport { orThrow, orUnauthorized } from '../providers/NavigationProvider';\n\nexport interface OrderDetailResponse {\n  order: Order;\n}\n\nexport interface CheckoutThankYouData {\n  thank_you_title?: string;\n  messages?: string[];\n  share_message?: string;\n  short_share_message?: string;\n}\n\nexport interface OrdersListResponse {\n  data: OrderListItem[];\n  cursor?: Pagination;\n}\n\nexport interface OrdersListParams {\n  page?: number;\n  cursor?: string | null;\n  status?: string;\n  feedback_status?: string;\n  /** When set, the list payload includes each order's `items[]` (`with_items=1`). */\n  with_items?: boolean | number;\n  signal?: AbortSignal;\n}\n\nexport const order = {\n  list: async (params?: OrdersListParams): Promise<OrdersListResponse> => {\n    const {\n      page,\n      cursor,\n      status,\n      feedback_status: feedbackStatus,\n      with_items: withItems,\n      signal,\n    } = params ?? {};\n\n    const searchParams = new URLSearchParams();\n    if (page !== undefined) searchParams.set('page', String(page));\n    if (cursor) searchParams.set('cursor', cursor);\n    if (status) searchParams.set('status', status);\n    if (feedbackStatus) searchParams.set('feedback_status', feedbackStatus);\n    if (withItems) searchParams.set('with_items', '1');\n\n    const options: Record<string, unknown> = {};\n    if (signal) options.signal = signal;\n\n    const response = await api\n      .get(`orders?${searchParams.toString()}`, options as any)\n      .json<{ data: OrderListItem[] | null; cursor?: Pagination }>();\n\n    return {\n      data: response.data ?? [],\n      cursor: response.cursor,\n    };\n  },\n\n  find: async (id: string): Promise<OrderDetailResponse> => {\n    const response = await api.get(`orders/${id}`).json<{ data: Order }>();\n\n    return { order: response.data };\n  },\n\n  shipments: async (orderId: string): Promise<OrderShipmentItem[]> => {\n    const response = await api\n      .get(`orders/${orderId}/shipments`)\n      .json<{ data: OrderShipmentItem[] }>();\n    return response.data ?? [];\n  },\n\n  ratings: async (orderId: string): Promise<OrderRatingItem[]> => {\n    const response = await api.get(`orders/${orderId}/ratings`).json<{ data: OrderRatingItem[] }>();\n    return response.data ?? [];\n  },\n\n  findOrThrow: (id: string): Promise<OrderDetailResponse> => orUnauthorized(order.find(id)),\n\n  thankYou: async (orderId: string): Promise<CheckoutThankYouData> => {\n    const { data } = await api\n      .get(`checkout/thank-you/${orderId}`)\n      .json<{ data: CheckoutThankYouData }>();\n    return data;\n  },\n\n  thankYouOrThrow: (orderId: string): Promise<CheckoutThankYouData> =>\n    orThrow(order.thankYou(orderId)),\n\n  queries: {\n    list: (params?: Omit<OrdersListParams, 'signal'>) =>\n      queryOptions({\n        queryKey: ['orders', 'list', params],\n        queryFn: ({ signal }) => order.list({ ...params, signal }),\n      }),\n    find: (id: string) =>\n      queryOptions({\n        queryKey: ['orders', 'detail', id],\n        queryFn: () => order.find(id),\n      }),\n    shipments: (orderId: string) =>\n      queryOptions({\n        queryKey: ['orders', 'shipments', orderId],\n        queryFn: () => order.shipments(orderId),\n      }),\n    ratings: (orderId: string) =>\n      queryOptions({\n        queryKey: ['orders', 'ratings', orderId],\n        queryFn: () => order.ratings(orderId),\n      }),\n    thankYou: (orderId: string) =>\n      queryOptions({\n        queryKey: ['orders', 'thankYou', orderId],\n        queryFn: () => order.thankYou(orderId),\n      }),\n  },\n};\n"]}
+{"version":3,"sources":["../src/api/order.ts"],"names":[],"mappings":";;;;AAqCO,IAAM,KAAA,GAAQ;AAAA,EACnB,IAAA,EAAM,OAAO,MAAA,KAA2D;AACtE,IAAA,MAAM;AAAA,MACJ,IAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAA;AAAA,MACA,eAAA,EAAiB,cAAA;AAAA,MACjB,UAAA,EAAY,SAAA;AAAA,MACZ;AAAA,KACF,GAAI,UAAU,EAAC;AAEf,IAAA,MAAM,YAAA,GAAe,IAAI,eAAA,EAAgB;AACzC,IAAA,IAAI,SAAS,MAAA,EAAW,YAAA,CAAa,IAAI,MAAA,EAAQ,MAAA,CAAO,IAAI,CAAC,CAAA;AAC7D,IAAA,IAAI,MAAA,EAAQ,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA;AAC7C,IAAA,IAAI,MAAA,EAAQ,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA;AAC7C,IAAA,IAAI,cAAA,EAAgB,YAAA,CAAa,GAAA,CAAI,iBAAA,EAAmB,cAAc,CAAA;AACtE,IAAA,IAAI,SAAA,EAAW,YAAA,CAAa,GAAA,CAAI,YAAA,EAAc,GAAG,CAAA;AAEjD,IAAA,MAAM,UAAmC,EAAC;AAC1C,IAAA,IAAI,MAAA,UAAgB,MAAA,GAAS,MAAA;AAE7B,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CACpB,GAAA,CAAI,CAAA,OAAA,EAAU,YAAA,CAAa,QAAA,EAAU,CAAA,CAAA,EAAI,OAAc,CAAA,CACvD,IAAA,EAA4D;AAE/D,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,QAAA,CAAS,IAAA,IAAQ,EAAC;AAAA,MACxB,QAAQ,QAAA,CAAS;AAAA,KACnB;AAAA,EACF,CAAA;AAAA,EAEA,IAAA,EAAM,OAAO,EAAA,KAA6C;AACxD,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CAAI,GAAA,CAAI,UAAU,EAAE,CAAA,CAAE,EAAE,IAAA,EAAsB;AAErE,IAAA,OAAO,EAAE,KAAA,EAAO,QAAA,CAAS,IAAA,EAAK;AAAA,EAChC,CAAA;AAAA,EAEA,SAAA,EAAW,OAAO,OAAA,KAAkD;AAClE,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CACpB,GAAA,CAAI,UAAU,OAAO,CAAA,UAAA,CAAY,EACjC,IAAA,EAAoC;AACvC,IAAA,OAAO,QAAA,CAAS,QAAQ,EAAC;AAAA,EAC3B,CAAA;AAAA,EAEA,OAAA,EAAS,OAAO,OAAA,KAAgD;AAC9D,IAAA,MAAM,QAAA,GAAW,MAAM,GAAA,CAAI,GAAA,CAAI,UAAU,OAAO,CAAA,QAAA,CAAU,EAAE,IAAA,EAAkC;AAC9F,IAAA,OAAO,QAAA,CAAS,QAAQ,EAAC;AAAA,EAC3B,CAAA;AAAA,EAEA,aAAa,CAAC,EAAA,KAA6C,eAAe,KAAA,CAAM,IAAA,CAAK,EAAE,CAAC,CAAA;AAAA,EAExF,QAAA,EAAU,OAAO,OAAA,KAAmD;AAClE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,GAAA,CACpB,IAAI,CAAA,mBAAA,EAAsB,OAAO,CAAA,CAAE,CAAA,CACnC,IAAA,EAAqC;AACxC,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAAA,EAEA,iBAAiB,CAAC,OAAA,KAChB,QAAQ,KAAA,CAAM,QAAA,CAAS,OAAO,CAAC,CAAA;AAAA,EAEjC,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,CAAC,MAAA,KACL,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA;AAAA,MACnC,OAAA,EAAS,CAAC,EAAE,MAAA,EAAO,KAAM,KAAA,CAAM,IAAA,CAAK,EAAE,GAAG,MAAA,EAAQ,MAAA,EAAQ;AAAA,KAC1D,CAAA;AAAA,IACH,IAAA,EAAM,CAAC,EAAA,KACL,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,QAAA,EAAU,EAAE,CAAA;AAAA,MACjC,OAAA,EAAS,MAAM,KAAA,CAAM,IAAA,CAAK,EAAE;AAAA,KAC7B,CAAA;AAAA,IACH,SAAA,EAAW,CAAC,OAAA,KACV,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,WAAA,EAAa,OAAO,CAAA;AAAA,MACzC,OAAA,EAAS,MAAM,KAAA,CAAM,SAAA,CAAU,OAAO;AAAA,KACvC,CAAA;AAAA,IACH,OAAA,EAAS,CAAC,OAAA,KACR,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,SAAA,EAAW,OAAO,CAAA;AAAA,MACvC,OAAA,EAAS,MAAM,KAAA,CAAM,OAAA,CAAQ,OAAO;AAAA,KACrC,CAAA;AAAA,IACH,QAAA,EAAU,CAAC,OAAA,KACT,YAAA,CAAa;AAAA,MACX,QAAA,EAAU,CAAC,QAAA,EAAU,UAAA,EAAY,OAAO,CAAA;AAAA,MACxC,OAAA,EAAS,MAAM,KAAA,CAAM,QAAA,CAAS,OAAO;AAAA,KACtC;AAAA;AAEP","file":"chunk-VJHDE6UT.js","sourcesContent":["import { queryOptions } from '@tanstack/react-query';\nimport { api } from './client';\nimport type {\n  Order,\n  OrderListItem,\n  OrderShipmentItem,\n  OrderRatingItem,\n} from '../routes/account/types';\nimport type { Pagination } from './types';\nimport { orThrow, orUnauthorized } from '../providers/NavigationProvider';\n\nexport interface OrderDetailResponse {\n  order: Order;\n}\n\nexport interface CheckoutThankYouData {\n  thank_you_title?: string;\n  messages?: string[];\n  share_message?: string;\n  short_share_message?: string;\n}\n\nexport interface OrdersListResponse {\n  data: OrderListItem[];\n  cursor?: Pagination;\n}\n\nexport interface OrdersListParams {\n  page?: number;\n  cursor?: string | null;\n  status?: string;\n  feedback_status?: string;\n  /** When set, the list payload includes each order's `items[]` (`with_items=1`). */\n  with_items?: boolean | number;\n  signal?: AbortSignal;\n}\n\nexport const order = {\n  list: async (params?: OrdersListParams): Promise<OrdersListResponse> => {\n    const {\n      page,\n      cursor,\n      status,\n      feedback_status: feedbackStatus,\n      with_items: withItems,\n      signal,\n    } = params ?? {};\n\n    const searchParams = new URLSearchParams();\n    if (page !== undefined) searchParams.set('page', String(page));\n    if (cursor) searchParams.set('cursor', cursor);\n    if (status) searchParams.set('status', status);\n    if (feedbackStatus) searchParams.set('feedback_status', feedbackStatus);\n    if (withItems) searchParams.set('with_items', '1');\n\n    const options: Record<string, unknown> = {};\n    if (signal) options.signal = signal;\n\n    const response = await api\n      .get(`orders?${searchParams.toString()}`, options as any)\n      .json<{ data: OrderListItem[] | null; cursor?: Pagination }>();\n\n    return {\n      data: response.data ?? [],\n      cursor: response.cursor,\n    };\n  },\n\n  find: async (id: string): Promise<OrderDetailResponse> => {\n    const response = await api.get(`orders/${id}`).json<{ data: Order }>();\n\n    return { order: response.data };\n  },\n\n  shipments: async (orderId: string): Promise<OrderShipmentItem[]> => {\n    const response = await api\n      .get(`orders/${orderId}/shipments`)\n      .json<{ data: OrderShipmentItem[] }>();\n    return response.data ?? [];\n  },\n\n  ratings: async (orderId: string): Promise<OrderRatingItem[]> => {\n    const response = await api.get(`orders/${orderId}/ratings`).json<{ data: OrderRatingItem[] }>();\n    return response.data ?? [];\n  },\n\n  findOrThrow: (id: string): Promise<OrderDetailResponse> => orUnauthorized(order.find(id)),\n\n  thankYou: async (orderId: string): Promise<CheckoutThankYouData> => {\n    const { data } = await api\n      .get(`checkout/thank-you/${orderId}`)\n      .json<{ data: CheckoutThankYouData }>();\n    return data;\n  },\n\n  thankYouOrThrow: (orderId: string): Promise<CheckoutThankYouData> =>\n    orThrow(order.thankYou(orderId)),\n\n  queries: {\n    list: (params?: Omit<OrdersListParams, 'signal'>) =>\n      queryOptions({\n        queryKey: ['orders', 'list', params],\n        queryFn: ({ signal }) => order.list({ ...params, signal }),\n      }),\n    find: (id: string) =>\n      queryOptions({\n        queryKey: ['orders', 'detail', id],\n        queryFn: () => order.find(id),\n      }),\n    shipments: (orderId: string) =>\n      queryOptions({\n        queryKey: ['orders', 'shipments', orderId],\n        queryFn: () => order.shipments(orderId),\n      }),\n    ratings: (orderId: string) =>\n      queryOptions({\n        queryKey: ['orders', 'ratings', orderId],\n        queryFn: () => order.ratings(orderId),\n      }),\n    thankYou: (orderId: string) =>\n      queryOptions({\n        queryKey: ['orders', 'thankYou', orderId],\n        queryFn: () => order.thankYou(orderId),\n      }),\n  },\n};\n"]}

package/dist/{chunk-AODO3GFK.js → chunk-VSJLPWFI.js}

@@ -1,5 +1,5 @@
-import { redirect } from './chunk-RLSYCDI4.js';
-import { clearAuthTokenCookie } from './chunk-XTMHHLNK.js';
+import { redirect } from './chunk-WH225GEC.js';
+import { clearAuthTokenCookie } from './chunk-SR4OTLTJ.js';
 import { FALLBACK_LOCALE } from './chunk-T72DAX7R.js';
 import { useEffect } from 'react';
 
@@ -20,5 +20,5 @@ function LogoutRedirect() {
 }
 
 export { LogoutRedirect, pendingOrdersRedirectLoader, slugBrandRedirectLoader };
-//# sourceMappingURL=chunk-AODO3GFK.js.map
-//# sourceMappingURL=chunk-AODO3GFK.js.map
+//# sourceMappingURL=chunk-VSJLPWFI.js.map
+//# sourceMappingURL=chunk-VSJLPWFI.js.map

package/dist/{chunk-AODO3GFK.js.map → chunk-VSJLPWFI.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/routes/seo-redirects.ts"],"names":[],"mappings":";;;;;AAcA,eAAsB,wBAAwB,GAAA,EAAkD;AAC9F,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,MAAA,CAAO,MAAA,IAAU,eAAA;AACpC,EAAA,MAAM,SAAS,CAAA,CAAA,EAAI,MAAM,WAAW,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,CAAE,CAAA;AACrD;AAOA,eAAsB,4BACpB,GAAA,GAA+C,EAAE,MAAA,EAAQ,IAAG,EAC5C;AAChB,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,MAAA,CAAO,MAAA,IAAU,eAAA;AACpC,EAAA,MAAM,QAAA,CAAS,CAAA,CAAA,EAAI,MAAM,CAAA,8BAAA,CAAgC,CAAA;AAC3D;AAUO,SAAS,cAAA,GAAuB;AACrC,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,oBAAA,EAAqB;AAErB,IAAA,MAAA,CAAO,QAAA,CAAS,QAAQ,MAAA,CAAO,QAAA,CAAS,KAAK,OAAA,CAAQ,8BAAA,EAAgC,EAAE,CAAC,CAAA;AAAA,EAC1F,CAAA,EAAG,EAAE,CAAA;AACL,EAAA,OAAO,IAAA;AACT","file":"chunk-AODO3GFK.js","sourcesContent":["import { useEffect } from 'react';\nimport { redirect } from '../providers/NavigationProvider';\nimport { FALLBACK_LOCALE } from '../providers/locale-constants';\nimport { clearAuthTokenCookie } from '../utils/cookies';\n\nexport interface SlugBrandParams {\n  /** SEO slug segment (ignored — only here to match the route pattern). */\n  slug: string;\n  /** Brand numeric ID to redirect to. */\n  id: string;\n  /** Active locale from the `/$locale` parent layout (e.g. `'ar'`, `'en'`). */\n  locale?: string;\n}\n\nexport async function slugBrandRedirectLoader(ctx: { params: SlugBrandParams }): Promise<never> {\n  const locale = ctx.params.locale || FALLBACK_LOCALE;\n  throw redirect(`/${locale}/brands/${ctx.params.id}`);\n}\n\nexport interface PendingOrdersRedirectParams {\n  /** Active locale from the `/$locale` parent layout (e.g. `'ar'`, `'en'`). */\n  locale?: string;\n}\n\nexport async function pendingOrdersRedirectLoader(\n  ctx: { params: PendingOrdersRedirectParams } = { params: {} }\n): Promise<never> {\n  const locale = ctx.params.locale || FALLBACK_LOCALE;\n  throw redirect(`/${locale}/account/orders?status=pending`);\n}\n\n/**\n * `/logout` — where the SDK sends the browser once `salla.auth.logout()` has run\n * (`salla.url.get('logout?from=…')`). The Twig storefront serves that URL server-side. Here\n * it renders nothing and, in the browser, removes the theme's own `token` cookie (the SDK's\n * `cookie.clearAll()` leaves it) and then does a full navigation home. It has to be a\n * component, not a loader redirect: a loader runs during server rendering, where the cookie\n * can't be cleared, so the redirect would leave the visitor signed in on the next request.\n */\nexport function LogoutRedirect(): null {\n  useEffect(() => {\n    clearAuthTokenCookie();\n    // `/{store base}/{locale}/logout?from=…` → `/{store base}/{locale}`\n    window.location.replace(window.location.href.replace(/\\/logout\\/?(\\?[^#]*)?(#.*)?$/, ''));\n  }, []);\n  return null;\n}\n"]}
+{"version":3,"sources":["../src/routes/seo-redirects.ts"],"names":[],"mappings":";;;;;AAcA,eAAsB,wBAAwB,GAAA,EAAkD;AAC9F,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,MAAA,CAAO,MAAA,IAAU,eAAA;AACpC,EAAA,MAAM,SAAS,CAAA,CAAA,EAAI,MAAM,WAAW,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,CAAE,CAAA;AACrD;AAOA,eAAsB,4BACpB,GAAA,GAA+C,EAAE,MAAA,EAAQ,IAAG,EAC5C;AAChB,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,MAAA,CAAO,MAAA,IAAU,eAAA;AACpC,EAAA,MAAM,QAAA,CAAS,CAAA,CAAA,EAAI,MAAM,CAAA,8BAAA,CAAgC,CAAA;AAC3D;AAUO,SAAS,cAAA,GAAuB;AACrC,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,oBAAA,EAAqB;AAErB,IAAA,MAAA,CAAO,QAAA,CAAS,QAAQ,MAAA,CAAO,QAAA,CAAS,KAAK,OAAA,CAAQ,8BAAA,EAAgC,EAAE,CAAC,CAAA;AAAA,EAC1F,CAAA,EAAG,EAAE,CAAA;AACL,EAAA,OAAO,IAAA;AACT","file":"chunk-VSJLPWFI.js","sourcesContent":["import { useEffect } from 'react';\nimport { redirect } from '../providers/NavigationProvider';\nimport { FALLBACK_LOCALE } from '../providers/locale-constants';\nimport { clearAuthTokenCookie } from '../utils/cookies';\n\nexport interface SlugBrandParams {\n  /** SEO slug segment (ignored — only here to match the route pattern). */\n  slug: string;\n  /** Brand numeric ID to redirect to. */\n  id: string;\n  /** Active locale from the `/$locale` parent layout (e.g. `'ar'`, `'en'`). */\n  locale?: string;\n}\n\nexport async function slugBrandRedirectLoader(ctx: { params: SlugBrandParams }): Promise<never> {\n  const locale = ctx.params.locale || FALLBACK_LOCALE;\n  throw redirect(`/${locale}/brands/${ctx.params.id}`);\n}\n\nexport interface PendingOrdersRedirectParams {\n  /** Active locale from the `/$locale` parent layout (e.g. `'ar'`, `'en'`). */\n  locale?: string;\n}\n\nexport async function pendingOrdersRedirectLoader(\n  ctx: { params: PendingOrdersRedirectParams } = { params: {} }\n): Promise<never> {\n  const locale = ctx.params.locale || FALLBACK_LOCALE;\n  throw redirect(`/${locale}/account/orders?status=pending`);\n}\n\n/**\n * `/logout` — where the SDK sends the browser once `salla.auth.logout()` has run\n * (`salla.url.get('logout?from=…')`). The Twig storefront serves that URL server-side. Here\n * it renders nothing and, in the browser, removes the theme's own `token` cookie (the SDK's\n * `cookie.clearAll()` leaves it) and then does a full navigation home. It has to be a\n * component, not a loader redirect: a loader runs during server rendering, where the cookie\n * can't be cleared, so the redirect would leave the visitor signed in on the next request.\n */\nexport function LogoutRedirect(): null {\n  useEffect(() => {\n    clearAuthTokenCookie();\n    // `/{store base}/{locale}/logout?from=…` → `/{store base}/{locale}`\n    window.location.replace(window.location.href.replace(/\\/logout\\/?(\\?[^#]*)?(#.*)?$/, ''));\n  }, []);\n  return null;\n}\n"]}