@shop-on/customer-runtime 0.3.0 → 0.5.0

package/dist/handoff-state.d.ts

@@ -1,14 +1,14 @@
 //#region src/handoff-state.d.ts
 /**
  * Shared rules for the states that bind a handoff to the browser that started
- * it, used by their minters, the account `return_to` sanitizer that passes
- * them through, and their checkers. The formats are a shape check only: each
- * consumer verifies the value against its own cookie.
+ * it, used by their minters and their checkers. The formats are a shape check
+ * only: each consumer verifies the value against its own cookie.
  *
  * - `checkout_state`: `ts "." base64url(HMAC-SHA256)`, minted by checkout's
- *   `/begin` and `/sign-in`.
+ *   `/begin`, carried by the theme onto the cart handoff URL.
  * - `state` (theme): 32 random bytes base64url, minted by theme-server's
- *   `account_state` cookie.
+ *   `account_state` cookie; the account `return_to` sanitizer passes it
+ *   through on storefront hosts.
  */
 export declare const CHECKOUT_STATE_FORMAT: RegExp;
 export declare const ACCOUNT_STATE_FORMAT: RegExp;

package/dist/handoff-state.js

@@ -1,14 +1,14 @@
 //#region src/handoff-state.ts
 /**
 * Shared rules for the states that bind a handoff to the browser that started
-* it, used by their minters, the account `return_to` sanitizer that passes
-* them through, and their checkers. The formats are a shape check only: each
-* consumer verifies the value against its own cookie.
+* it, used by their minters and their checkers. The formats are a shape check
+* only: each consumer verifies the value against its own cookie.
 *
 * - `checkout_state`: `ts "." base64url(HMAC-SHA256)`, minted by checkout's
-*   `/begin` and `/sign-in`.
+*   `/begin`, carried by the theme onto the cart handoff URL.
 * - `state` (theme): 32 random bytes base64url, minted by theme-server's
-*   `account_state` cookie.
+*   `account_state` cookie; the account `return_to` sanitizer passes it
+*   through on storefront hosts.
 */
 const CHECKOUT_STATE_FORMAT = /^\d{10}\.[A-Za-z0-9_-]{43}$/;
 const ACCOUNT_STATE_FORMAT = /^[A-Za-z0-9_-]{43}$/;

package/dist/storefront-bounce.d.ts

@@ -0,0 +1,10 @@
+//#region src/storefront-bounce.d.ts
+/**
+ * The storefront's own `/account` bounce, coming back to `returnToPath`.
+ * Account and checkout sign a buyer in through it rather than linking to
+ * account directly: the theme issues the `state` its customer handoff is
+ * bound to, bounces to account, and consumes the handoff on the way back.
+ * Pure, so either app can build the link in a component.
+ */
+export declare function storefrontAccountBounceUrl(storefrontRoot: string, returnToPath: string): string;
+//#endregion

package/dist/storefront-bounce.js

@@ -0,0 +1,15 @@
+//#region src/storefront-bounce.ts
+/**
+* The storefront's own `/account` bounce, coming back to `returnToPath`.
+* Account and checkout sign a buyer in through it rather than linking to
+* account directly: the theme issues the `state` its customer handoff is
+* bound to, bounces to account, and consumes the handoff on the way back.
+* Pure, so either app can build the link in a component.
+*/
+function storefrontAccountBounceUrl(storefrontRoot, returnToPath) {
+	const url = new URL("/account", storefrontRoot);
+	url.searchParams.set("return_to", returnToPath);
+	return url.toString();
+}
+//#endregion
+export { storefrontAccountBounceUrl };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shop-on/customer-runtime",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "license": "SEE LICENSE IN dist/LICENSE.md",
   "files": [
     "dist"
@@ -18,6 +18,7 @@
     "./sealed-session": "./dist/sealed-session.js",
     "./session-cookie": "./dist/session-cookie.js",
     "./shop-context": "./dist/shop-context.js",
+    "./storefront-bounce": "./dist/storefront-bounce.js",
     "./trace": "./dist/trace.js",
     "./package.json": "./package.json"
   },