@shopify/hydrogen 2026.10.0-preview.2 → 2026.10.0-preview.4

package/dist/vite/customer-account.mjs

@@ -0,0 +1,191 @@
+import { join } from "node:path";
+import { readFile } from "node:fs/promises";
+import spawn from "cross-spawn";
+
+//#region src/vite/customer-account.ts
+const CUSTOMER_ACCOUNT_AUTHORIZE_PATH = "/account/authorize";
+const MINIMUM_HYDROGEN_CLI_VERSION = "13.0.4";
+const SUCCESS_EXIT_CODE = 0;
+function resolveCustomerAccountUrls(host, port) {
+	const javascriptOrigin = `https://${host}`;
+	const devOrigin = `${javascriptOrigin}:${port}`;
+	return {
+		callbackUri: `${devOrigin}${CUSTOMER_ACCOUNT_AUTHORIZE_PATH}`,
+		devOrigin,
+		javascriptOrigin,
+		logoutUri: devOrigin
+	};
+}
+function formatCustomerAccountSettings(urls) {
+	return [
+		"",
+		"Customer Account API - configure these values for your storefront:",
+		"",
+		`  Callback URI(s) (required):  ${urls.callbackUri}`,
+		`  JavaScript origin(s):        ${urls.javascriptOrigin}`,
+		`  Logout URI:                  ${urls.logoutUri}`,
+		""
+	].join("\n");
+}
+function isContinuousIntegration() {
+	const ci = process.env.CI;
+	return ci !== void 0 && ci !== "" && ci !== "false" && ci !== "0";
+}
+async function configureCustomerAccountUrls({ logger, root, urls }, dependencies = {}) {
+	if ((dependencies.isCI ?? isContinuousIntegration)()) {
+		logger.info(formatCustomerAccountSettings(urls));
+		return;
+	}
+	const runCommand = dependencies.runShopifyCommand ?? runShopifyCommand;
+	try {
+		await requireCompatibleShopifyCli(root, runCommand);
+	} catch (error) {
+		const reason = error instanceof Error ? error.message : String(error);
+		logger.warn([
+			"Automatic Customer Account API setup was skipped.",
+			reason,
+			"Install the latest Shopify CLI and restart the development server:",
+			"  npm install -g @shopify/cli@latest",
+			formatCustomerAccountSettings(urls)
+		].join("\n"));
+		return;
+	}
+	const hasLinkedStorefront = dependencies.hasLinkedStorefront ?? projectHasLinkedStorefront;
+	try {
+		if (!await hasLinkedStorefront(root)) {
+			logger.info("No linked Hydrogen storefront found. Starting Shopify CLI linking...");
+			await runCommand([
+				"hydrogen",
+				"link",
+				"--path",
+				root
+			], { cwd: root });
+			if (!await hasLinkedStorefront(root)) throw new Error("Shopify CLI finished without linking a Hydrogen storefront.");
+		}
+		logger.info("Updating Customer Account API settings with Shopify CLI...");
+		await runCommand([
+			"hydrogen",
+			"customer-account-push",
+			"--path",
+			root,
+			"--dev-origin",
+			urls.devOrigin,
+			"--javascript-origin",
+			urls.javascriptOrigin
+		], { cwd: root });
+		logger.info(`Customer Account API settings updated for ${urls.devOrigin}.`);
+	} catch (error) {
+		const reason = error instanceof Error ? error.message : String(error);
+		logger.warn([
+			"Local HTTPS is ready, but Customer Account API setup could not be completed:",
+			`  ${reason}`,
+			formatCustomerAccountSettings(urls)
+		].join("\n"));
+	}
+}
+var ShopifyCliRequirementError = class extends Error {};
+async function requireCompatibleShopifyCli(root, runCommand) {
+	const hydrogenCliVersion = await getHydrogenCliVersion(root, runCommand);
+	if (!isVersionAtLeast(hydrogenCliVersion, MINIMUM_HYDROGEN_CLI_VERSION)) throw new ShopifyCliRequirementError(`Found @shopify/cli-hydrogen ${hydrogenCliVersion}; ${MINIMUM_HYDROGEN_CLI_VERSION} or later is required.`);
+}
+async function getHydrogenCliVersion(root, runCommand) {
+	let output;
+	try {
+		output = await runCommand([
+			"plugins",
+			"--core",
+			"--json"
+		], {
+			captureOutput: true,
+			cwd: root
+		});
+	} catch (error) {
+		throw new ShopifyCliRequirementError(`A compatible Shopify CLI installation was not found. ${error instanceof Error ? error.message : String(error)}`);
+	}
+	let plugins;
+	try {
+		plugins = JSON.parse(output);
+	} catch {
+		throw new ShopifyCliRequirementError("Shopify CLI did not return valid plugin version information.");
+	}
+	if (!Array.isArray(plugins)) throw new ShopifyCliRequirementError("Shopify CLI did not return plugin version information.");
+	for (const plugin of plugins) {
+		if (!isRecord(plugin)) continue;
+		const packageJson = plugin.pjson;
+		if (!isRecord(packageJson) || packageJson.name !== "@shopify/cli") continue;
+		const devDependencies = packageJson.devDependencies;
+		if (!isRecord(devDependencies)) break;
+		const version = devDependencies["@shopify/cli-hydrogen"];
+		if (typeof version === "string") return version;
+		break;
+	}
+	throw new ShopifyCliRequirementError("The installed Shopify CLI does not include @shopify/cli-hydrogen.");
+}
+function isVersionAtLeast(version, minimum) {
+	const parsedVersion = parseVersion(version);
+	const parsedMinimum = parseVersion(minimum);
+	if (!parsedVersion || !parsedMinimum) return false;
+	for (let index = 0; index < parsedMinimum.numbers.length; index += 1) {
+		const difference = parsedVersion.numbers[index] - parsedMinimum.numbers[index];
+		if (difference !== 0) return difference > 0;
+	}
+	return parsedVersion.prerelease === void 0;
+}
+function parseVersion(version) {
+	const match = /^(\d+)\.(\d+)\.(\d+)(?:-([^+]+))?(?:\+.+)?$/.exec(version);
+	if (!match) return;
+	return {
+		numbers: [
+			Number(match[1]),
+			Number(match[2]),
+			Number(match[3])
+		],
+		prerelease: match[4]
+	};
+}
+async function projectHasLinkedStorefront(root) {
+	try {
+		const project = JSON.parse(await readFile(join(root, ".shopify", "project.json"), "utf8"));
+		return isRecord(project) && isRecord(project.storefront) && typeof project.storefront.id === "string" && project.storefront.id !== "";
+	} catch {
+		return false;
+	}
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+function runShopifyCommand(args, { captureOutput = false, cwd }) {
+	return new Promise((resolve, reject) => {
+		const child = spawn("shopify", args, {
+			cwd,
+			shell: false,
+			stdio: captureOutput ? [
+				"ignore",
+				"pipe",
+				"pipe"
+			] : "inherit"
+		});
+		let output = "";
+		let errorOutput = "";
+		const collect = (target) => (chunk) => {
+			if (target === "output") output += chunk.toString();
+			else errorOutput += chunk.toString();
+		};
+		child.stdout?.on("data", collect("output"));
+		child.stderr?.on("data", collect("errorOutput"));
+		child.on("error", reject);
+		child.on("close", (code, signal) => {
+			if (code === SUCCESS_EXIT_CODE) {
+				resolve(output);
+				return;
+			}
+			const reason = signal ? `was killed by ${signal}` : `exited with code ${code}`;
+			const detail = errorOutput.trim();
+			reject(/* @__PURE__ */ new Error(`shopify ${args.join(" ")} ${reason}${detail ? `\n${detail}` : ""}`));
+		});
+	});
+}
+
+//#endregion
+export { configureCustomerAccountUrls, isContinuousIntegration, resolveCustomerAccountUrls };
+//# sourceMappingURL=customer-account.mjs.map

package/dist/vite/customer-account.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"customer-account.mjs","names":[],"sources":["../../src/vite/customer-account.ts"],"sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport spawn from \"cross-spawn\";\n\nconst CUSTOMER_ACCOUNT_AUTHORIZE_PATH = \"/account/authorize\";\nconst MINIMUM_HYDROGEN_CLI_VERSION = \"13.0.4\";\nconst SUCCESS_EXIT_CODE = 0;\n\ntype Logger = {\n  info(message: string): void;\n  warn(message: string): void;\n};\n\ntype RunShopifyCommand = (\n  args: string[],\n  options: { captureOutput?: boolean; cwd: string },\n) => Promise<string>;\n\ntype CustomerAccountSetupDependencies = {\n  hasLinkedStorefront?: (root: string) => Promise<boolean>;\n  isCI?: () => boolean;\n  runShopifyCommand?: RunShopifyCommand;\n};\n\nexport type CustomerAccountUrls = {\n  callbackUri: string;\n  devOrigin: string;\n  javascriptOrigin: string;\n  logoutUri: string;\n};\n\nexport function resolveCustomerAccountUrls(host: string, port: number): CustomerAccountUrls {\n  const javascriptOrigin = `https://${host}`;\n  const devOrigin = `${javascriptOrigin}:${port}`;\n\n  return {\n    callbackUri: `${devOrigin}${CUSTOMER_ACCOUNT_AUTHORIZE_PATH}`,\n    devOrigin,\n    javascriptOrigin,\n    logoutUri: devOrigin,\n  };\n}\n\nfunction formatCustomerAccountSettings(urls: CustomerAccountUrls) {\n  return [\n    \"\",\n    \"Customer Account API - configure these values for your storefront:\",\n    \"\",\n    `  Callback URI(s) (required):  ${urls.callbackUri}`,\n    `  JavaScript origin(s):        ${urls.javascriptOrigin}`,\n    `  Logout URI:                  ${urls.logoutUri}`,\n    \"\",\n  ].join(\"\\n\");\n}\n\nexport function isContinuousIntegration() {\n  const ci = process.env.CI;\n  return ci !== undefined && ci !== \"\" && ci !== \"false\" && ci !== \"0\";\n}\n\nexport async function configureCustomerAccountUrls(\n  {\n    logger,\n    root,\n    urls,\n  }: {\n    logger: Logger;\n    root: string;\n    urls: CustomerAccountUrls;\n  },\n  dependencies: CustomerAccountSetupDependencies = {},\n) {\n  const isCI = dependencies.isCI ?? isContinuousIntegration;\n  if (isCI()) {\n    logger.info(formatCustomerAccountSettings(urls));\n    return;\n  }\n\n  const runCommand = dependencies.runShopifyCommand ?? runShopifyCommand;\n\n  try {\n    await requireCompatibleShopifyCli(root, runCommand);\n  } catch (error) {\n    const reason = error instanceof Error ? error.message : String(error);\n    logger.warn(\n      [\n        \"Automatic Customer Account API setup was skipped.\",\n        reason,\n        \"Install the latest Shopify CLI and restart the development server:\",\n        \"  npm install -g @shopify/cli@latest\",\n        formatCustomerAccountSettings(urls),\n      ].join(\"\\n\"),\n    );\n    return;\n  }\n\n  const hasLinkedStorefront = dependencies.hasLinkedStorefront ?? projectHasLinkedStorefront;\n\n  try {\n    if (!(await hasLinkedStorefront(root))) {\n      logger.info(\"No linked Hydrogen storefront found. Starting Shopify CLI linking...\");\n      await runCommand([\"hydrogen\", \"link\", \"--path\", root], { cwd: root });\n\n      if (!(await hasLinkedStorefront(root))) {\n        throw new Error(\"Shopify CLI finished without linking a Hydrogen storefront.\");\n      }\n    }\n\n    logger.info(\"Updating Customer Account API settings with Shopify CLI...\");\n    await runCommand(\n      [\n        \"hydrogen\",\n        \"customer-account-push\",\n        \"--path\",\n        root,\n        \"--dev-origin\",\n        urls.devOrigin,\n        \"--javascript-origin\",\n        urls.javascriptOrigin,\n      ],\n      { cwd: root },\n    );\n    logger.info(`Customer Account API settings updated for ${urls.devOrigin}.`);\n  } catch (error) {\n    const reason = error instanceof Error ? error.message : String(error);\n    logger.warn(\n      [\n        \"Local HTTPS is ready, but Customer Account API setup could not be completed:\",\n        `  ${reason}`,\n        formatCustomerAccountSettings(urls),\n      ].join(\"\\n\"),\n    );\n  }\n}\n\nclass ShopifyCliRequirementError extends Error {}\n\nasync function requireCompatibleShopifyCli(root: string, runCommand: RunShopifyCommand) {\n  const hydrogenCliVersion = await getHydrogenCliVersion(root, runCommand);\n  if (!isVersionAtLeast(hydrogenCliVersion, MINIMUM_HYDROGEN_CLI_VERSION)) {\n    throw new ShopifyCliRequirementError(\n      `Found @shopify/cli-hydrogen ${hydrogenCliVersion}; ${MINIMUM_HYDROGEN_CLI_VERSION} or later is required.`,\n    );\n  }\n}\n\nasync function getHydrogenCliVersion(root: string, runCommand: RunShopifyCommand) {\n  let output: string;\n  try {\n    output = await runCommand([\"plugins\", \"--core\", \"--json\"], {\n      captureOutput: true,\n      cwd: root,\n    });\n  } catch (error) {\n    const reason = error instanceof Error ? error.message : String(error);\n    throw new ShopifyCliRequirementError(\n      `A compatible Shopify CLI installation was not found. ${reason}`,\n    );\n  }\n\n  let plugins: unknown;\n  try {\n    plugins = JSON.parse(output);\n  } catch {\n    throw new ShopifyCliRequirementError(\n      \"Shopify CLI did not return valid plugin version information.\",\n    );\n  }\n\n  if (!Array.isArray(plugins)) {\n    throw new ShopifyCliRequirementError(\"Shopify CLI did not return plugin version information.\");\n  }\n\n  for (const plugin of plugins) {\n    if (!isRecord(plugin)) continue;\n    const packageJson = plugin.pjson;\n    if (!isRecord(packageJson) || packageJson.name !== \"@shopify/cli\") continue;\n\n    const devDependencies = packageJson.devDependencies;\n    if (!isRecord(devDependencies)) break;\n\n    const version = devDependencies[\"@shopify/cli-hydrogen\"];\n    if (typeof version === \"string\") return version;\n    break;\n  }\n\n  throw new ShopifyCliRequirementError(\n    \"The installed Shopify CLI does not include @shopify/cli-hydrogen.\",\n  );\n}\n\nfunction isVersionAtLeast(version: string, minimum: string) {\n  const parsedVersion = parseVersion(version);\n  const parsedMinimum = parseVersion(minimum);\n  if (!parsedVersion || !parsedMinimum) return false;\n\n  for (let index = 0; index < parsedMinimum.numbers.length; index += 1) {\n    const difference = parsedVersion.numbers[index] - parsedMinimum.numbers[index];\n    if (difference !== 0) return difference > 0;\n  }\n\n  return parsedVersion.prerelease === undefined;\n}\n\nfunction parseVersion(version: string) {\n  const match = /^(\\d+)\\.(\\d+)\\.(\\d+)(?:-([^+]+))?(?:\\+.+)?$/.exec(version);\n  if (!match) return;\n\n  return {\n    numbers: [Number(match[1]), Number(match[2]), Number(match[3])],\n    prerelease: match[4],\n  };\n}\n\nasync function projectHasLinkedStorefront(root: string) {\n  try {\n    const project = JSON.parse(await readFile(join(root, \".shopify\", \"project.json\"), \"utf8\"));\n    return (\n      isRecord(project) &&\n      isRecord(project.storefront) &&\n      typeof project.storefront.id === \"string\" &&\n      project.storefront.id !== \"\"\n    );\n  } catch {\n    return false;\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction runShopifyCommand(\n  args: string[],\n  { captureOutput = false, cwd }: { captureOutput?: boolean; cwd: string },\n): Promise<string> {\n  return new Promise((resolve, reject) => {\n    const child = spawn(\"shopify\", args, {\n      cwd,\n      shell: false,\n      stdio: captureOutput ? [\"ignore\", \"pipe\", \"pipe\"] : \"inherit\",\n    });\n    let output = \"\";\n    let errorOutput = \"\";\n\n    const collect = (target: \"output\" | \"errorOutput\") => (chunk: Buffer) => {\n      if (target === \"output\") output += chunk.toString();\n      else errorOutput += chunk.toString();\n    };\n\n    child.stdout?.on(\"data\", collect(\"output\"));\n    child.stderr?.on(\"data\", collect(\"errorOutput\"));\n    child.on(\"error\", reject);\n    child.on(\"close\", (code, signal) => {\n      if (code === SUCCESS_EXIT_CODE) {\n        resolve(output);\n        return;\n      }\n\n      const reason = signal ? `was killed by ${signal}` : `exited with code ${code}`;\n      const detail = errorOutput.trim();\n      reject(new Error(`shopify ${args.join(\" \")} ${reason}${detail ? `\\n${detail}` : \"\"}`));\n    });\n  });\n}\n"],"mappings":";;;;;AAKA,MAAM,kCAAkC;AACxC,MAAM,+BAA+B;AACrC,MAAM,oBAAoB;AAyB1B,SAAgB,2BAA2B,MAAc,MAAmC;CAC1F,MAAM,mBAAmB,WAAW;CACpC,MAAM,YAAY,GAAG,iBAAiB,GAAG;AAEzC,QAAO;EACL,aAAa,GAAG,YAAY;EAC5B;EACA;EACA,WAAW;EACZ;;AAGH,SAAS,8BAA8B,MAA2B;AAChE,QAAO;EACL;EACA;EACA;EACA,kCAAkC,KAAK;EACvC,kCAAkC,KAAK;EACvC,kCAAkC,KAAK;EACvC;EACD,CAAC,KAAK,KAAK;;AAGd,SAAgB,0BAA0B;CACxC,MAAM,KAAK,QAAQ,IAAI;AACvB,QAAO,OAAO,UAAa,OAAO,MAAM,OAAO,WAAW,OAAO;;AAGnE,eAAsB,6BACpB,EACE,QACA,MACA,QAMF,eAAiD,EAAE,EACnD;AAEA,MADa,aAAa,QAAQ,0BACxB,EAAE;AACV,SAAO,KAAK,8BAA8B,KAAK,CAAC;AAChD;;CAGF,MAAM,aAAa,aAAa,qBAAqB;AAErD,KAAI;AACF,QAAM,4BAA4B,MAAM,WAAW;UAC5C,OAAO;EACd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACrE,SAAO,KACL;GACE;GACA;GACA;GACA;GACA,8BAA8B,KAAK;GACpC,CAAC,KAAK,KAAK,CACb;AACD;;CAGF,MAAM,sBAAsB,aAAa,uBAAuB;AAEhE,KAAI;AACF,MAAI,CAAE,MAAM,oBAAoB,KAAK,EAAG;AACtC,UAAO,KAAK,uEAAuE;AACnF,SAAM,WAAW;IAAC;IAAY;IAAQ;IAAU;IAAK,EAAE,EAAE,KAAK,MAAM,CAAC;AAErE,OAAI,CAAE,MAAM,oBAAoB,KAAK,CACnC,OAAM,IAAI,MAAM,8DAA8D;;AAIlF,SAAO,KAAK,6DAA6D;AACzE,QAAM,WACJ;GACE;GACA;GACA;GACA;GACA;GACA,KAAK;GACL;GACA,KAAK;GACN,EACD,EAAE,KAAK,MAAM,CACd;AACD,SAAO,KAAK,6CAA6C,KAAK,UAAU,GAAG;UACpE,OAAO;EACd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACrE,SAAO,KACL;GACE;GACA,KAAK;GACL,8BAA8B,KAAK;GACpC,CAAC,KAAK,KAAK,CACb;;;AAIL,IAAM,6BAAN,cAAyC,MAAM;AAE/C,eAAe,4BAA4B,MAAc,YAA+B;CACtF,MAAM,qBAAqB,MAAM,sBAAsB,MAAM,WAAW;AACxE,KAAI,CAAC,iBAAiB,oBAAoB,6BAA6B,CACrE,OAAM,IAAI,2BACR,+BAA+B,mBAAmB,IAAI,6BAA6B,wBACpF;;AAIL,eAAe,sBAAsB,MAAc,YAA+B;CAChF,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,WAAW;GAAC;GAAW;GAAU;GAAS,EAAE;GACzD,eAAe;GACf,KAAK;GACN,CAAC;UACK,OAAO;AAEd,QAAM,IAAI,2BACR,wDAFa,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAGpE;;CAGH,IAAI;AACJ,KAAI;AACF,YAAU,KAAK,MAAM,OAAO;SACtB;AACN,QAAM,IAAI,2BACR,+DACD;;AAGH,KAAI,CAAC,MAAM,QAAQ,QAAQ,CACzB,OAAM,IAAI,2BAA2B,yDAAyD;AAGhG,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,CAAC,SAAS,OAAO,CAAE;EACvB,MAAM,cAAc,OAAO;AAC3B,MAAI,CAAC,SAAS,YAAY,IAAI,YAAY,SAAS,eAAgB;EAEnE,MAAM,kBAAkB,YAAY;AACpC,MAAI,CAAC,SAAS,gBAAgB,CAAE;EAEhC,MAAM,UAAU,gBAAgB;AAChC,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC;;AAGF,OAAM,IAAI,2BACR,oEACD;;AAGH,SAAS,iBAAiB,SAAiB,SAAiB;CAC1D,MAAM,gBAAgB,aAAa,QAAQ;CAC3C,MAAM,gBAAgB,aAAa,QAAQ;AAC3C,KAAI,CAAC,iBAAiB,CAAC,cAAe,QAAO;AAE7C,MAAK,IAAI,QAAQ,GAAG,QAAQ,cAAc,QAAQ,QAAQ,SAAS,GAAG;EACpE,MAAM,aAAa,cAAc,QAAQ,SAAS,cAAc,QAAQ;AACxE,MAAI,eAAe,EAAG,QAAO,aAAa;;AAG5C,QAAO,cAAc,eAAe;;AAGtC,SAAS,aAAa,SAAiB;CACrC,MAAM,QAAQ,8CAA8C,KAAK,QAAQ;AACzE,KAAI,CAAC,MAAO;AAEZ,QAAO;EACL,SAAS;GAAC,OAAO,MAAM,GAAG;GAAE,OAAO,MAAM,GAAG;GAAE,OAAO,MAAM,GAAG;GAAC;EAC/D,YAAY,MAAM;EACnB;;AAGH,eAAe,2BAA2B,MAAc;AACtD,KAAI;EACF,MAAM,UAAU,KAAK,MAAM,MAAM,SAAS,KAAK,MAAM,YAAY,eAAe,EAAE,OAAO,CAAC;AAC1F,SACE,SAAS,QAAQ,IACjB,SAAS,QAAQ,WAAW,IAC5B,OAAO,QAAQ,WAAW,OAAO,YACjC,QAAQ,WAAW,OAAO;SAEtB;AACN,SAAO;;;AAIX,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU;;AAGhD,SAAS,kBACP,MACA,EAAE,gBAAgB,OAAO,OACR;AACjB,QAAO,IAAI,SAAS,SAAS,WAAW;EACtC,MAAM,QAAQ,MAAM,WAAW,MAAM;GACnC;GACA,OAAO;GACP,OAAO,gBAAgB;IAAC;IAAU;IAAQ;IAAO,GAAG;GACrD,CAAC;EACF,IAAI,SAAS;EACb,IAAI,cAAc;EAElB,MAAM,WAAW,YAAsC,UAAkB;AACvE,OAAI,WAAW,SAAU,WAAU,MAAM,UAAU;OAC9C,gBAAe,MAAM,UAAU;;AAGtC,QAAM,QAAQ,GAAG,QAAQ,QAAQ,SAAS,CAAC;AAC3C,QAAM,QAAQ,GAAG,QAAQ,QAAQ,cAAc,CAAC;AAChD,QAAM,GAAG,SAAS,OAAO;AACzB,QAAM,GAAG,UAAU,MAAM,WAAW;AAClC,OAAI,SAAS,mBAAmB;AAC9B,YAAQ,OAAO;AACf;;GAGF,MAAM,SAAS,SAAS,iBAAiB,WAAW,oBAAoB;GACxE,MAAM,SAAS,YAAY,MAAM;AACjC,0BAAO,IAAI,MAAM,WAAW,KAAK,KAAK,IAAI,CAAC,GAAG,SAAS,SAAS,KAAK,WAAW,KAAK,CAAC;IACtF;GACF"}

package/dist/vite/local-https.mjs

@@ -1,5 +1,5 @@
-import { CUSTOMER_ACCOUNT_PATHS } from "../core/url.mjs";
 import { confirmCertificateInstallation } from "./certificate-prompt.mjs";
+import { configureCustomerAccountUrls, isContinuousIntegration, resolveCustomerAccountUrls } from "./customer-account.mjs";
 import { provisionCertificates } from "./mkcert.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -23,7 +23,7 @@ const HTTP1_ONLY_RESPONSE_HEADERS = new Set([
 	"upgrade"
 ]);
 const emittedMissingCertificateWarnings = /* @__PURE__ */ new Set();
-const loggedCustomerAccountSettings = /* @__PURE__ */ new Set();
+const startedCustomerAccountSetups = /* @__PURE__ */ new Set();
 /**
 * Configures Vite for trusted local HTTPS on Hydrogen's default development host.
 */
@@ -127,10 +127,6 @@ async function ensureCertificateFiles(settings) {
 		return checkCertificateFiles(settings, `Automatic certificate provisioning failed:\n  ${error instanceof Error ? error.message : String(error)}`);
 	}
 }
-function isContinuousIntegration() {
-	const ci = process.env.CI;
-	return ci !== void 0 && ci !== "" && ci !== "false" && ci !== "0";
-}
 function checkCertificateFiles(settings, provisioningNote) {
 	const missingPaths = [settings.certPath, settings.keyPath].filter((path) => !existsSync(path));
 	if (missingPaths.length === 0) return true;
@@ -209,31 +205,19 @@ function configureLocalHttpsServer(server, settings) {
 		stripHttp1OnlyResponseHeaders(response);
 		next();
 	});
-	const logSettings = () => {
+	const configureCustomerAccounts = () => {
 		const port = resolveBoundPort();
-		const settingsKey = `${settings.host}:${port}`;
-		if (loggedCustomerAccountSettings.has(settingsKey)) return;
-		loggedCustomerAccountSettings.add(settingsKey);
-		server.config.logger.info(formatCustomerAccountSettings({
-			host: settings.host,
-			port
-		}));
+		const settingsKey = `${server.config.root}:${settings.host}:${port}`;
+		if (startedCustomerAccountSetups.has(settingsKey)) return;
+		startedCustomerAccountSetups.add(settingsKey);
+		configureCustomerAccountUrls({
+			logger: server.config.logger,
+			root: server.config.root,
+			urls: resolveCustomerAccountUrls(settings.host, port)
+		});
 	};
-	if (server.httpServer) server.httpServer.once("listening", logSettings);
-	else logSettings();
-}
-function formatCustomerAccountSettings({ host, port }) {
-	const origin = `https://${host}`;
-	const portfulOrigin = `${origin}:${port}`;
-	return [
-		"",
-		"Customer Account API — make sure these values are configured for your storefront:",
-		"",
-		`  Callback URI(s) (required):  ${portfulOrigin}${CUSTOMER_ACCOUNT_PATHS.authorize}`,
-		`  JavaScript origin(s):        ${origin}`,
-		`  Logout URI:                  ${portfulOrigin}`,
-		""
-	].join("\n");
+	if (server.httpServer) server.httpServer.once("listening", configureCustomerAccounts);
+	else configureCustomerAccounts();
 }
 function stripHttp1OnlyResponseHeaders(response) {
 	const originalWriteHead = response.writeHead.bind(response);

package/dist/vite/local-https.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"local-https.mjs","names":[],"sources":["../../src/vite/local-https.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport type { OutgoingHttpHeader, OutgoingHttpHeaders, ServerResponse } from \"node:http\";\nimport { homedir } from \"node:os\";\nimport { dirname, isAbsolute, join, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nimport type { ConfigEnv, Plugin, ViteDevServer } from \"vite\";\n\nimport { CUSTOMER_ACCOUNT_PATHS } from \"../core/url\";\nimport { confirmCertificateInstallation } from \"./certificate-prompt\";\nimport { provisionCertificates } from \"./mkcert\";\n\nexport const LOCAL_HTTPS_DEFAULTS = {\n  host: \"local.tryhydrogen.dev\",\n  port: 5_173,\n} as const;\n\nconst HEADER_PAIR_SIZE = 2;\nconst HTTP1_ONLY_RESPONSE_HEADERS = new Set([\n  \"connection\",\n  \"keep-alive\",\n  \"proxy-authenticate\",\n  \"proxy-authorization\",\n  \"te\",\n  \"trailer\",\n  \"transfer-encoding\",\n  \"upgrade\",\n]);\nconst emittedMissingCertificateWarnings = new Set<string>();\nconst loggedCustomerAccountSettings = new Set<string>();\n\n/** Options for Hydrogen's local HTTPS Vite plugin. */\nexport type LocalHttpsOptions = {\n  /** Enable trusted local HTTPS for the dev server. */\n  enabled: boolean;\n  /** Local hostname registered in Shopify admin. Defaults to `local.tryhydrogen.dev`. */\n  host?: string;\n  /** Local port registered in Shopify admin. Defaults to `5173`. */\n  port?: number;\n  /** Certificate file path. Defaults to Hydrogen's mkcert path under `~/.shopify/hydrogen/certs`. */\n  certPath?: string | URL;\n  /** Private key file path. Defaults to Hydrogen's mkcert path under `~/.shopify/hydrogen/certs`. */\n  keyPath?: string | URL;\n};\n\nexport type LocalHttpsPlugin = Plugin & {\n  api: {\n    /** Returns host, port, and TLS file paths for frameworks that terminate HTTPS outside Vite. */\n    getDevServerConfig(): LocalHttpsDevServerConfig | undefined;\n  };\n};\n\nexport type LocalHttpsDevServerConfig = {\n  host: string;\n  port: number;\n  https: {\n    cert: string;\n    key: string;\n  };\n};\n\n/**\n * Configures Vite for trusted local HTTPS on Hydrogen's default development host.\n */\nexport function localHttps(options: LocalHttpsOptions): LocalHttpsPlugin {\n  const settings = options.enabled ? resolveLocalHttpsSettings(options) : undefined;\n  let certificateFiles: LocalHttpsCertificateFiles | undefined;\n\n  const getCertificateFiles = () => {\n    if (!settings) return;\n\n    certificateFiles ??= readCertificateFiles(settings);\n    return certificateFiles;\n  };\n\n  const getDevServerConfig = () => {\n    if (!settings || !checkCertificateFiles(settings)) return;\n\n    getCertificateFiles();\n\n    return {\n      host: settings.host,\n      port: settings.port,\n      https: {\n        cert: settings.certPath,\n        key: settings.keyPath,\n      },\n    };\n  };\n\n  return {\n    name: \"hydrogen-local-https\",\n    api: { getDevServerConfig },\n    async config(_config: unknown, env: ConfigEnv) {\n      if (settings && env.command === \"serve\" && !env.isPreview) {\n        const certificatesAvailable = await ensureCertificateFiles(settings);\n        if (!certificatesAvailable) return;\n      } else if (settings && !checkCertificateFiles(settings)) {\n        return;\n      }\n\n      const certificates = getCertificateFiles();\n      if (!settings || !certificates) return;\n\n      return {\n        server: {\n          allowedHosts: [settings.host],\n          host: settings.host,\n          port: settings.port,\n          strictPort: true,\n          https: {\n            // Several framework dev servers fail when Vite negotiates HTTP/2.\n            ALPNProtocols: [\"http/1.1\"],\n            cert: certificates.cert,\n            key: certificates.key,\n          },\n          hmr: {\n            host: settings.host,\n            protocol: \"wss\",\n          },\n        },\n      };\n    },\n    configureServer(server) {\n      if (!settings || !checkCertificateFiles(settings)) return;\n\n      getCertificateFiles();\n      configureLocalHttpsServer(server, settings);\n    },\n  };\n}\n\nexport type ProvisionLocalHttpsOptions = Omit<LocalHttpsOptions, \"enabled\" | \"port\">;\n\n/**\n * Downloads a pinned, checksum-verified mkcert release and generates the\n * trusted local certificate files when they do not exist yet. The Vite plugin\n * runs this automatically on `vite dev`; call it directly for frameworks that\n * read certificate paths before Vite starts or from setup scripts.\n */\nexport async function provisionLocalHttps(options: ProvisionLocalHttpsOptions = {}) {\n  const settings = resolveLocalHttpsSettings({ enabled: true, ...options });\n\n  if (!certificateFilesExist(settings)) {\n    await provisionCertificates(settings);\n  }\n\n  return {\n    host: settings.host,\n    certPath: settings.certPath,\n    keyPath: settings.keyPath,\n  };\n}\n\ntype LocalHttpsSettings = {\n  host: string;\n  port: number;\n  certPath: string;\n  keyPath: string;\n};\n\ntype LocalHttpsCertificateFiles = {\n  cert: Buffer;\n  key: Buffer;\n};\n\nfunction resolveLocalHttpsSettings(options: LocalHttpsOptions): LocalHttpsSettings {\n  const host = options.host ?? LOCAL_HTTPS_DEFAULTS.host;\n  const certificateDirectory = join(homedir(), \".shopify\", \"hydrogen\", \"certs\");\n\n  return {\n    host,\n    port: options.port ?? LOCAL_HTTPS_DEFAULTS.port,\n    certPath: resolveCertificatePath(options.certPath ?? join(certificateDirectory, `${host}.pem`)),\n    keyPath: resolveCertificatePath(\n      options.keyPath ?? join(certificateDirectory, `${host}-key.pem`),\n    ),\n  };\n}\n\nfunction resolveCertificatePath(path: string | URL) {\n  if (path instanceof URL) return fileURLToPath(path);\n  if (path === \"~\") return homedir();\n  if (path.startsWith(\"~/\")) return resolve(homedir(), path.slice(2));\n  return isAbsolute(path) ? path : resolve(path);\n}\n\nfunction certificateFilesExist(settings: LocalHttpsSettings) {\n  return existsSync(settings.certPath) && existsSync(settings.keyPath);\n}\n\nasync function ensureCertificateFiles(settings: LocalHttpsSettings): Promise<boolean> {\n  if (certificateFilesExist(settings)) return true;\n\n  // Installing the mkcert certificate authority needs an interactive trust\n  // prompt on first run, which hangs or fails on CI runners.\n  if (isContinuousIntegration()) {\n    return checkCertificateFiles(\n      settings,\n      \"Automatic certificate provisioning is skipped in CI environments (the CI environment variable is set).\",\n    );\n  }\n\n  if (!(await confirmCertificateInstallation(settings.host))) {\n    return checkCertificateFiles(\n      settings,\n      \"Automatic certificate provisioning requires confirmation in an interactive terminal.\",\n    );\n  }\n\n  try {\n    await provisionCertificates(settings);\n    return true;\n  } catch (error) {\n    return checkCertificateFiles(\n      settings,\n      `Automatic certificate provisioning failed:\\n  ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n}\n\nfunction isContinuousIntegration() {\n  const ci = process.env.CI;\n  return ci !== undefined && ci !== \"\" && ci !== \"false\" && ci !== \"0\";\n}\n\nfunction checkCertificateFiles(settings: LocalHttpsSettings, provisioningNote?: string) {\n  const missingPaths = [settings.certPath, settings.keyPath].filter((path) => !existsSync(path));\n  if (missingPaths.length === 0) return true;\n\n  const warning = formatMissingCertificateWarning(settings, missingPaths, provisioningNote);\n  if (!emittedMissingCertificateWarnings.has(warning)) {\n    emittedMissingCertificateWarnings.add(warning);\n    process.emitWarning(warning, { type: \"HydrogenLocalHttpsWarning\" });\n  }\n  return false;\n}\n\nfunction formatMissingCertificateWarning(\n  { certPath, host, keyPath }: LocalHttpsSettings,\n  missingPaths: string[],\n  provisioningNote?: string,\n) {\n  const certificateDirectories = [...new Set([dirname(certPath), dirname(keyPath)])];\n  const provisioningFailure = provisioningNote === undefined ? [] : [\"\", provisioningNote];\n\n  return [\n    \"Local HTTPS is disabled because certificate files are missing:\",\n    ...missingPaths.map((path) => `  ${path}`),\n    ...provisioningFailure,\n    \"\",\n    \"Expected certificate files:\",\n    `  Certificate: ${certPath}`,\n    `  Private key: ${keyPath}`,\n    \"\",\n    \"Run the automatic setup:\",\n    \"  npx hydrogen certs install\",\n    \"\",\n    \"Or install and configure mkcert, then generate the certificate:\",\n    \"  macOS: brew install mkcert\",\n    \"  mkcert -install\",\n    `  mkdir -p ${certificateDirectories.map(shellQuote).join(\" \")}`,\n    `  mkcert -cert-file ${shellQuote(certPath)} -key-file ${shellQuote(keyPath)} ${shellQuote(host)}`,\n  ].join(\"\\n\");\n}\n\nfunction readCertificateFiles(settings: LocalHttpsSettings): LocalHttpsCertificateFiles {\n  return {\n    cert: readCertificateFile(settings, \"certificate\", settings.certPath),\n    key: readCertificateFile(settings, \"private key\", settings.keyPath),\n  };\n}\n\nfunction readCertificateFile(settings: LocalHttpsSettings, label: string, path: string) {\n  try {\n    return readFileSync(path);\n  } catch (error) {\n    throw new Error(formatCertificateReadError(settings, label, path, error), { cause: error });\n  }\n}\n\nfunction formatCertificateReadError(\n  { certPath, host, keyPath }: LocalHttpsSettings,\n  label: string,\n  path: string,\n  error: unknown,\n) {\n  const certificateDirectories = [...new Set([dirname(certPath), dirname(keyPath)])];\n  const reason = error instanceof Error ? error.message : String(error);\n\n  return [\n    `Local HTTPS requires a readable ${label} file:`,\n    `  ${path}`,\n    `Reason: ${reason}`,\n    \"\",\n    \"Expected certificate files:\",\n    `  Certificate: ${certPath}`,\n    `  Private key: ${keyPath}`,\n    \"\",\n    \"Install and configure mkcert, then generate the certificate:\",\n    \"  macOS: brew install mkcert\",\n    \"  mkcert -install\",\n    `  mkdir -p ${certificateDirectories.map(shellQuote).join(\" \")}`,\n    `  mkcert -cert-file ${shellQuote(certPath)} -key-file ${shellQuote(keyPath)} ${shellQuote(host)}`,\n  ].join(\"\\n\");\n}\n\nfunction shellQuote(value: string) {\n  return `'${value.replaceAll(\"'\", `'\\\\''`)}'`;\n}\n\nfunction configureLocalHttpsServer(server: ViteDevServer, settings: LocalHttpsSettings) {\n  // The configured port is only a fallback: frameworks that own the listener\n  // (or auto-incremented ports) can bind somewhere else, and the Customer\n  // Account URLs registered in admin must match the port actually served.\n  const resolveBoundPort = () => {\n    const address = server.httpServer?.address();\n    return address && typeof address === \"object\" ? address.port : settings.port;\n  };\n\n  server.middlewares.use((request, response, next) => {\n    request.headers[\"x-forwarded-host\"] ??=\n      request.headers.host ?? `${settings.host}:${resolveBoundPort()}`;\n    request.headers[\"x-forwarded-proto\"] ??= \"https\";\n    stripHttp1OnlyResponseHeaders(response);\n    next();\n  });\n\n  const logSettings = () => {\n    const port = resolveBoundPort();\n    const settingsKey = `${settings.host}:${port}`;\n    if (loggedCustomerAccountSettings.has(settingsKey)) return;\n    loggedCustomerAccountSettings.add(settingsKey);\n    server.config.logger.info(formatCustomerAccountSettings({ host: settings.host, port }));\n  };\n\n  if (server.httpServer) {\n    server.httpServer.once(\"listening\", logSettings);\n  } else {\n    logSettings();\n  }\n}\n\nfunction formatCustomerAccountSettings({ host, port }: Pick<LocalHttpsSettings, \"host\" | \"port\">) {\n  const origin = `https://${host}`;\n  const portfulOrigin = `${origin}:${port}`;\n\n  return [\n    \"\",\n    \"Customer Account API — make sure these values are configured for your storefront:\",\n    \"\",\n    `  Callback URI(s) (required):  ${portfulOrigin}${CUSTOMER_ACCOUNT_PATHS.authorize}`,\n    // Shopify's server-side validation rejects JavaScript origins containing a port.\n    `  JavaScript origin(s):        ${origin}`,\n    `  Logout URI:                  ${portfulOrigin}`,\n    \"\",\n  ].join(\"\\n\");\n}\n\nfunction stripHttp1OnlyResponseHeaders(response: ServerResponse) {\n  const originalWriteHead = response.writeHead.bind(response);\n\n  response.writeHead = (\n    statusCode: number,\n    statusMessageOrHeaders?: string | OutgoingHttpHeaders | OutgoingHttpHeader[],\n    headers?: OutgoingHttpHeaders | OutgoingHttpHeader[],\n  ) => {\n    removeStoredHttp1OnlyHeaders(response);\n\n    if (typeof statusMessageOrHeaders === \"string\") {\n      return originalWriteHead(\n        statusCode,\n        statusMessageOrHeaders,\n        sanitizeWriteHeadHeaders(headers),\n      );\n    }\n\n    return originalWriteHead(statusCode, sanitizeWriteHeadHeaders(statusMessageOrHeaders));\n  };\n}\n\nfunction removeStoredHttp1OnlyHeaders(response: ServerResponse) {\n  for (const header of HTTP1_ONLY_RESPONSE_HEADERS) {\n    response.removeHeader(header);\n  }\n}\n\nfunction sanitizeWriteHeadHeaders(headers: OutgoingHttpHeaders | OutgoingHttpHeader[] | undefined) {\n  if (Array.isArray(headers)) return sanitizeHeaderArray(headers);\n  if (headers) return sanitizeHeaderObject(headers);\n  return headers;\n}\n\nfunction sanitizeHeaderObject(headers: OutgoingHttpHeaders) {\n  const sanitizedHeaders: OutgoingHttpHeaders = {};\n\n  for (const [name, value] of Object.entries(headers)) {\n    if (!isHttp1OnlyHeader(name)) sanitizedHeaders[name] = value;\n  }\n\n  return sanitizedHeaders;\n}\n\nfunction sanitizeHeaderArray(headers: OutgoingHttpHeader[]) {\n  const sanitizedHeaders: OutgoingHttpHeader[] = [];\n\n  for (let index = 0; index < headers.length; index += HEADER_PAIR_SIZE) {\n    const name = headers[index];\n    const value = headers[index + 1];\n    if (typeof name === \"string\" && isHttp1OnlyHeader(name)) continue;\n\n    sanitizedHeaders.push(name);\n    if (value !== undefined) sanitizedHeaders.push(value);\n  }\n\n  return sanitizedHeaders;\n}\n\nfunction isHttp1OnlyHeader(name: string) {\n  return HTTP1_ONLY_RESPONSE_HEADERS.has(name.toLowerCase());\n}\n"],"mappings":";;;;;;;;;AAYA,MAAa,uBAAuB;CAClC,MAAM;CACN,MAAM;CACP;AAED,MAAM,mBAAmB;AACzB,MAAM,8BAA8B,IAAI,IAAI;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AACF,MAAM,oDAAoC,IAAI,KAAa;AAC3D,MAAM,gDAAgC,IAAI,KAAa;;;;AAmCvD,SAAgB,WAAW,SAA8C;CACvE,MAAM,WAAW,QAAQ,UAAU,0BAA0B,QAAQ,GAAG;CACxE,IAAI;CAEJ,MAAM,4BAA4B;AAChC,MAAI,CAAC,SAAU;AAEf,uBAAqB,qBAAqB,SAAS;AACnD,SAAO;;CAGT,MAAM,2BAA2B;AAC/B,MAAI,CAAC,YAAY,CAAC,sBAAsB,SAAS,CAAE;AAEnD,uBAAqB;AAErB,SAAO;GACL,MAAM,SAAS;GACf,MAAM,SAAS;GACf,OAAO;IACL,MAAM,SAAS;IACf,KAAK,SAAS;IACf;GACF;;AAGH,QAAO;EACL,MAAM;EACN,KAAK,EAAE,oBAAoB;EAC3B,MAAM,OAAO,SAAkB,KAAgB;AAC7C,OAAI,YAAY,IAAI,YAAY,WAAW,CAAC,IAAI,WAE9C;QAAI,CAAC,MAD+B,uBAAuB,SAAS,CACxC;cACnB,YAAY,CAAC,sBAAsB,SAAS,CACrD;GAGF,MAAM,eAAe,qBAAqB;AAC1C,OAAI,CAAC,YAAY,CAAC,aAAc;AAEhC,UAAO,EACL,QAAQ;IACN,cAAc,CAAC,SAAS,KAAK;IAC7B,MAAM,SAAS;IACf,MAAM,SAAS;IACf,YAAY;IACZ,OAAO;KAEL,eAAe,CAAC,WAAW;KAC3B,MAAM,aAAa;KACnB,KAAK,aAAa;KACnB;IACD,KAAK;KACH,MAAM,SAAS;KACf,UAAU;KACX;IACF,EACF;;EAEH,gBAAgB,QAAQ;AACtB,OAAI,CAAC,YAAY,CAAC,sBAAsB,SAAS,CAAE;AAEnD,wBAAqB;AACrB,6BAA0B,QAAQ,SAAS;;EAE9C;;;;;;;;AAWH,eAAsB,oBAAoB,UAAsC,EAAE,EAAE;CAClF,MAAM,WAAW,0BAA0B;EAAE,SAAS;EAAM,GAAG;EAAS,CAAC;AAEzE,KAAI,CAAC,sBAAsB,SAAS,CAClC,OAAM,sBAAsB,SAAS;AAGvC,QAAO;EACL,MAAM,SAAS;EACf,UAAU,SAAS;EACnB,SAAS,SAAS;EACnB;;AAeH,SAAS,0BAA0B,SAAgD;CACjF,MAAM,OAAO,QAAQ,QAAQ,qBAAqB;CAClD,MAAM,uBAAuB,KAAK,SAAS,EAAE,YAAY,YAAY,QAAQ;AAE7E,QAAO;EACL;EACA,MAAM,QAAQ,QAAQ,qBAAqB;EAC3C,UAAU,uBAAuB,QAAQ,YAAY,KAAK,sBAAsB,GAAG,KAAK,MAAM,CAAC;EAC/F,SAAS,uBACP,QAAQ,WAAW,KAAK,sBAAsB,GAAG,KAAK,UAAU,CACjE;EACF;;AAGH,SAAS,uBAAuB,MAAoB;AAClD,KAAI,gBAAgB,IAAK,QAAO,cAAc,KAAK;AACnD,KAAI,SAAS,IAAK,QAAO,SAAS;AAClC,KAAI,KAAK,WAAW,KAAK,CAAE,QAAO,QAAQ,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;AACnE,QAAO,WAAW,KAAK,GAAG,OAAO,QAAQ,KAAK;;AAGhD,SAAS,sBAAsB,UAA8B;AAC3D,QAAO,WAAW,SAAS,SAAS,IAAI,WAAW,SAAS,QAAQ;;AAGtE,eAAe,uBAAuB,UAAgD;AACpF,KAAI,sBAAsB,SAAS,CAAE,QAAO;AAI5C,KAAI,yBAAyB,CAC3B,QAAO,sBACL,UACA,yGACD;AAGH,KAAI,CAAE,MAAM,+BAA+B,SAAS,KAAK,CACvD,QAAO,sBACL,UACA,uFACD;AAGH,KAAI;AACF,QAAM,sBAAsB,SAAS;AACrC,SAAO;UACA,OAAO;AACd,SAAO,sBACL,UACA,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GACxG;;;AAIL,SAAS,0BAA0B;CACjC,MAAM,KAAK,QAAQ,IAAI;AACvB,QAAO,OAAO,UAAa,OAAO,MAAM,OAAO,WAAW,OAAO;;AAGnE,SAAS,sBAAsB,UAA8B,kBAA2B;CACtF,MAAM,eAAe,CAAC,SAAS,UAAU,SAAS,QAAQ,CAAC,QAAQ,SAAS,CAAC,WAAW,KAAK,CAAC;AAC9F,KAAI,aAAa,WAAW,EAAG,QAAO;CAEtC,MAAM,UAAU,gCAAgC,UAAU,cAAc,iBAAiB;AACzF,KAAI,CAAC,kCAAkC,IAAI,QAAQ,EAAE;AACnD,oCAAkC,IAAI,QAAQ;AAC9C,UAAQ,YAAY,SAAS,EAAE,MAAM,6BAA6B,CAAC;;AAErE,QAAO;;AAGT,SAAS,gCACP,EAAE,UAAU,MAAM,WAClB,cACA,kBACA;CACA,MAAM,yBAAyB,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,SAAS,EAAE,QAAQ,QAAQ,CAAC,CAAC,CAAC;CAClF,MAAM,sBAAsB,qBAAqB,SAAY,EAAE,GAAG,CAAC,IAAI,iBAAiB;AAExF,QAAO;EACL;EACA,GAAG,aAAa,KAAK,SAAS,KAAK,OAAO;EAC1C,GAAG;EACH;EACA;EACA,kBAAkB;EAClB,kBAAkB;EAClB;EACA;EACA;EACA;EACA;EACA;EACA;EACA,cAAc,uBAAuB,IAAI,WAAW,CAAC,KAAK,IAAI;EAC9D,uBAAuB,WAAW,SAAS,CAAC,aAAa,WAAW,QAAQ,CAAC,GAAG,WAAW,KAAK;EACjG,CAAC,KAAK,KAAK;;AAGd,SAAS,qBAAqB,UAA0D;AACtF,QAAO;EACL,MAAM,oBAAoB,UAAU,eAAe,SAAS,SAAS;EACrE,KAAK,oBAAoB,UAAU,eAAe,SAAS,QAAQ;EACpE;;AAGH,SAAS,oBAAoB,UAA8B,OAAe,MAAc;AACtF,KAAI;AACF,SAAO,aAAa,KAAK;UAClB,OAAO;AACd,QAAM,IAAI,MAAM,2BAA2B,UAAU,OAAO,MAAM,MAAM,EAAE,EAAE,OAAO,OAAO,CAAC;;;AAI/F,SAAS,2BACP,EAAE,UAAU,MAAM,WAClB,OACA,MACA,OACA;CACA,MAAM,yBAAyB,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,SAAS,EAAE,QAAQ,QAAQ,CAAC,CAAC,CAAC;CAClF,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAErE,QAAO;EACL,mCAAmC,MAAM;EACzC,KAAK;EACL,WAAW;EACX;EACA;EACA,kBAAkB;EAClB,kBAAkB;EAClB;EACA;EACA;EACA;EACA,cAAc,uBAAuB,IAAI,WAAW,CAAC,KAAK,IAAI;EAC9D,uBAAuB,WAAW,SAAS,CAAC,aAAa,WAAW,QAAQ,CAAC,GAAG,WAAW,KAAK;EACjG,CAAC,KAAK,KAAK;;AAGd,SAAS,WAAW,OAAe;AACjC,QAAO,IAAI,MAAM,WAAW,KAAK,QAAQ,CAAC;;AAG5C,SAAS,0BAA0B,QAAuB,UAA8B;CAItF,MAAM,yBAAyB;EAC7B,MAAM,UAAU,OAAO,YAAY,SAAS;AAC5C,SAAO,WAAW,OAAO,YAAY,WAAW,QAAQ,OAAO,SAAS;;AAG1E,QAAO,YAAY,KAAK,SAAS,UAAU,SAAS;AAClD,UAAQ,QAAQ,wBACd,QAAQ,QAAQ,QAAQ,GAAG,SAAS,KAAK,GAAG,kBAAkB;AAChE,UAAQ,QAAQ,yBAAyB;AACzC,gCAA8B,SAAS;AACvC,QAAM;GACN;CAEF,MAAM,oBAAoB;EACxB,MAAM,OAAO,kBAAkB;EAC/B,MAAM,cAAc,GAAG,SAAS,KAAK,GAAG;AACxC,MAAI,8BAA8B,IAAI,YAAY,CAAE;AACpD,gCAA8B,IAAI,YAAY;AAC9C,SAAO,OAAO,OAAO,KAAK,8BAA8B;GAAE,MAAM,SAAS;GAAM;GAAM,CAAC,CAAC;;AAGzF,KAAI,OAAO,WACT,QAAO,WAAW,KAAK,aAAa,YAAY;KAEhD,cAAa;;AAIjB,SAAS,8BAA8B,EAAE,MAAM,QAAmD;CAChG,MAAM,SAAS,WAAW;CAC1B,MAAM,gBAAgB,GAAG,OAAO,GAAG;AAEnC,QAAO;EACL;EACA;EACA;EACA,kCAAkC,gBAAgB,uBAAuB;EAEzE,kCAAkC;EAClC,kCAAkC;EAClC;EACD,CAAC,KAAK,KAAK;;AAGd,SAAS,8BAA8B,UAA0B;CAC/D,MAAM,oBAAoB,SAAS,UAAU,KAAK,SAAS;AAE3D,UAAS,aACP,YACA,wBACA,YACG;AACH,+BAA6B,SAAS;AAEtC,MAAI,OAAO,2BAA2B,SACpC,QAAO,kBACL,YACA,wBACA,yBAAyB,QAAQ,CAClC;AAGH,SAAO,kBAAkB,YAAY,yBAAyB,uBAAuB,CAAC;;;AAI1F,SAAS,6BAA6B,UAA0B;AAC9D,MAAK,MAAM,UAAU,4BACnB,UAAS,aAAa,OAAO;;AAIjC,SAAS,yBAAyB,SAAiE;AACjG,KAAI,MAAM,QAAQ,QAAQ,CAAE,QAAO,oBAAoB,QAAQ;AAC/D,KAAI,QAAS,QAAO,qBAAqB,QAAQ;AACjD,QAAO;;AAGT,SAAS,qBAAqB,SAA8B;CAC1D,MAAM,mBAAwC,EAAE;AAEhD,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,QAAQ,CACjD,KAAI,CAAC,kBAAkB,KAAK,CAAE,kBAAiB,QAAQ;AAGzD,QAAO;;AAGT,SAAS,oBAAoB,SAA+B;CAC1D,MAAM,mBAAyC,EAAE;AAEjD,MAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,kBAAkB;EACrE,MAAM,OAAO,QAAQ;EACrB,MAAM,QAAQ,QAAQ,QAAQ;AAC9B,MAAI,OAAO,SAAS,YAAY,kBAAkB,KAAK,CAAE;AAEzD,mBAAiB,KAAK,KAAK;AAC3B,MAAI,UAAU,OAAW,kBAAiB,KAAK,MAAM;;AAGvD,QAAO;;AAGT,SAAS,kBAAkB,MAAc;AACvC,QAAO,4BAA4B,IAAI,KAAK,aAAa,CAAC"}
+{"version":3,"file":"local-https.mjs","names":[],"sources":["../../src/vite/local-https.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport type { OutgoingHttpHeader, OutgoingHttpHeaders, ServerResponse } from \"node:http\";\nimport { homedir } from \"node:os\";\nimport { dirname, isAbsolute, join, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nimport type { ConfigEnv, Plugin, ViteDevServer } from \"vite\";\n\nimport { confirmCertificateInstallation } from \"./certificate-prompt\";\nimport {\n  configureCustomerAccountUrls,\n  isContinuousIntegration,\n  resolveCustomerAccountUrls,\n} from \"./customer-account\";\nimport { provisionCertificates } from \"./mkcert\";\n\nexport const LOCAL_HTTPS_DEFAULTS = {\n  host: \"local.tryhydrogen.dev\",\n  port: 5_173,\n} as const;\n\nconst HEADER_PAIR_SIZE = 2;\nconst HTTP1_ONLY_RESPONSE_HEADERS = new Set([\n  \"connection\",\n  \"keep-alive\",\n  \"proxy-authenticate\",\n  \"proxy-authorization\",\n  \"te\",\n  \"trailer\",\n  \"transfer-encoding\",\n  \"upgrade\",\n]);\nconst emittedMissingCertificateWarnings = new Set<string>();\nconst startedCustomerAccountSetups = new Set<string>();\n\n/** Options for Hydrogen's local HTTPS Vite plugin. */\nexport type LocalHttpsOptions = {\n  /** Enable trusted local HTTPS for the dev server. */\n  enabled: boolean;\n  /** Local hostname registered in Shopify admin. Defaults to `local.tryhydrogen.dev`. */\n  host?: string;\n  /** Local port registered in Shopify admin. Defaults to `5173`. */\n  port?: number;\n  /** Certificate file path. Defaults to Hydrogen's mkcert path under `~/.shopify/hydrogen/certs`. */\n  certPath?: string | URL;\n  /** Private key file path. Defaults to Hydrogen's mkcert path under `~/.shopify/hydrogen/certs`. */\n  keyPath?: string | URL;\n};\n\nexport type LocalHttpsPlugin = Plugin & {\n  api: {\n    /** Returns host, port, and TLS file paths for frameworks that terminate HTTPS outside Vite. */\n    getDevServerConfig(): LocalHttpsDevServerConfig | undefined;\n  };\n};\n\nexport type LocalHttpsDevServerConfig = {\n  host: string;\n  port: number;\n  https: {\n    cert: string;\n    key: string;\n  };\n};\n\n/**\n * Configures Vite for trusted local HTTPS on Hydrogen's default development host.\n */\nexport function localHttps(options: LocalHttpsOptions): LocalHttpsPlugin {\n  const settings = options.enabled ? resolveLocalHttpsSettings(options) : undefined;\n  let certificateFiles: LocalHttpsCertificateFiles | undefined;\n\n  const getCertificateFiles = () => {\n    if (!settings) return;\n\n    certificateFiles ??= readCertificateFiles(settings);\n    return certificateFiles;\n  };\n\n  const getDevServerConfig = () => {\n    if (!settings || !checkCertificateFiles(settings)) return;\n\n    getCertificateFiles();\n\n    return {\n      host: settings.host,\n      port: settings.port,\n      https: {\n        cert: settings.certPath,\n        key: settings.keyPath,\n      },\n    };\n  };\n\n  return {\n    name: \"hydrogen-local-https\",\n    api: { getDevServerConfig },\n    async config(_config: unknown, env: ConfigEnv) {\n      if (settings && env.command === \"serve\" && !env.isPreview) {\n        const certificatesAvailable = await ensureCertificateFiles(settings);\n        if (!certificatesAvailable) return;\n      } else if (settings && !checkCertificateFiles(settings)) {\n        return;\n      }\n\n      const certificates = getCertificateFiles();\n      if (!settings || !certificates) return;\n\n      return {\n        server: {\n          allowedHosts: [settings.host],\n          host: settings.host,\n          port: settings.port,\n          strictPort: true,\n          https: {\n            // Several framework dev servers fail when Vite negotiates HTTP/2.\n            ALPNProtocols: [\"http/1.1\"],\n            cert: certificates.cert,\n            key: certificates.key,\n          },\n          hmr: {\n            host: settings.host,\n            protocol: \"wss\",\n          },\n        },\n      };\n    },\n    configureServer(server) {\n      if (!settings || !checkCertificateFiles(settings)) return;\n\n      getCertificateFiles();\n      configureLocalHttpsServer(server, settings);\n    },\n  };\n}\n\nexport type ProvisionLocalHttpsOptions = Omit<LocalHttpsOptions, \"enabled\" | \"port\">;\n\n/**\n * Downloads a pinned, checksum-verified mkcert release and generates the\n * trusted local certificate files when they do not exist yet. The Vite plugin\n * runs this automatically on `vite dev`; call it directly for frameworks that\n * read certificate paths before Vite starts or from setup scripts.\n */\nexport async function provisionLocalHttps(options: ProvisionLocalHttpsOptions = {}) {\n  const settings = resolveLocalHttpsSettings({ enabled: true, ...options });\n\n  if (!certificateFilesExist(settings)) {\n    await provisionCertificates(settings);\n  }\n\n  return {\n    host: settings.host,\n    certPath: settings.certPath,\n    keyPath: settings.keyPath,\n  };\n}\n\ntype LocalHttpsSettings = {\n  host: string;\n  port: number;\n  certPath: string;\n  keyPath: string;\n};\n\ntype LocalHttpsCertificateFiles = {\n  cert: Buffer;\n  key: Buffer;\n};\n\nfunction resolveLocalHttpsSettings(options: LocalHttpsOptions): LocalHttpsSettings {\n  const host = options.host ?? LOCAL_HTTPS_DEFAULTS.host;\n  const certificateDirectory = join(homedir(), \".shopify\", \"hydrogen\", \"certs\");\n\n  return {\n    host,\n    port: options.port ?? LOCAL_HTTPS_DEFAULTS.port,\n    certPath: resolveCertificatePath(options.certPath ?? join(certificateDirectory, `${host}.pem`)),\n    keyPath: resolveCertificatePath(\n      options.keyPath ?? join(certificateDirectory, `${host}-key.pem`),\n    ),\n  };\n}\n\nfunction resolveCertificatePath(path: string | URL) {\n  if (path instanceof URL) return fileURLToPath(path);\n  if (path === \"~\") return homedir();\n  if (path.startsWith(\"~/\")) return resolve(homedir(), path.slice(2));\n  return isAbsolute(path) ? path : resolve(path);\n}\n\nfunction certificateFilesExist(settings: LocalHttpsSettings) {\n  return existsSync(settings.certPath) && existsSync(settings.keyPath);\n}\n\nasync function ensureCertificateFiles(settings: LocalHttpsSettings): Promise<boolean> {\n  if (certificateFilesExist(settings)) return true;\n\n  // Installing the mkcert certificate authority needs an interactive trust\n  // prompt on first run, which hangs or fails on CI runners.\n  if (isContinuousIntegration()) {\n    return checkCertificateFiles(\n      settings,\n      \"Automatic certificate provisioning is skipped in CI environments (the CI environment variable is set).\",\n    );\n  }\n\n  if (!(await confirmCertificateInstallation(settings.host))) {\n    return checkCertificateFiles(\n      settings,\n      \"Automatic certificate provisioning requires confirmation in an interactive terminal.\",\n    );\n  }\n\n  try {\n    await provisionCertificates(settings);\n    return true;\n  } catch (error) {\n    return checkCertificateFiles(\n      settings,\n      `Automatic certificate provisioning failed:\\n  ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n}\n\nfunction checkCertificateFiles(settings: LocalHttpsSettings, provisioningNote?: string) {\n  const missingPaths = [settings.certPath, settings.keyPath].filter((path) => !existsSync(path));\n  if (missingPaths.length === 0) return true;\n\n  const warning = formatMissingCertificateWarning(settings, missingPaths, provisioningNote);\n  if (!emittedMissingCertificateWarnings.has(warning)) {\n    emittedMissingCertificateWarnings.add(warning);\n    process.emitWarning(warning, { type: \"HydrogenLocalHttpsWarning\" });\n  }\n  return false;\n}\n\nfunction formatMissingCertificateWarning(\n  { certPath, host, keyPath }: LocalHttpsSettings,\n  missingPaths: string[],\n  provisioningNote?: string,\n) {\n  const certificateDirectories = [...new Set([dirname(certPath), dirname(keyPath)])];\n  const provisioningFailure = provisioningNote === undefined ? [] : [\"\", provisioningNote];\n\n  return [\n    \"Local HTTPS is disabled because certificate files are missing:\",\n    ...missingPaths.map((path) => `  ${path}`),\n    ...provisioningFailure,\n    \"\",\n    \"Expected certificate files:\",\n    `  Certificate: ${certPath}`,\n    `  Private key: ${keyPath}`,\n    \"\",\n    \"Run the automatic setup:\",\n    \"  npx hydrogen certs install\",\n    \"\",\n    \"Or install and configure mkcert, then generate the certificate:\",\n    \"  macOS: brew install mkcert\",\n    \"  mkcert -install\",\n    `  mkdir -p ${certificateDirectories.map(shellQuote).join(\" \")}`,\n    `  mkcert -cert-file ${shellQuote(certPath)} -key-file ${shellQuote(keyPath)} ${shellQuote(host)}`,\n  ].join(\"\\n\");\n}\n\nfunction readCertificateFiles(settings: LocalHttpsSettings): LocalHttpsCertificateFiles {\n  return {\n    cert: readCertificateFile(settings, \"certificate\", settings.certPath),\n    key: readCertificateFile(settings, \"private key\", settings.keyPath),\n  };\n}\n\nfunction readCertificateFile(settings: LocalHttpsSettings, label: string, path: string) {\n  try {\n    return readFileSync(path);\n  } catch (error) {\n    throw new Error(formatCertificateReadError(settings, label, path, error), { cause: error });\n  }\n}\n\nfunction formatCertificateReadError(\n  { certPath, host, keyPath }: LocalHttpsSettings,\n  label: string,\n  path: string,\n  error: unknown,\n) {\n  const certificateDirectories = [...new Set([dirname(certPath), dirname(keyPath)])];\n  const reason = error instanceof Error ? error.message : String(error);\n\n  return [\n    `Local HTTPS requires a readable ${label} file:`,\n    `  ${path}`,\n    `Reason: ${reason}`,\n    \"\",\n    \"Expected certificate files:\",\n    `  Certificate: ${certPath}`,\n    `  Private key: ${keyPath}`,\n    \"\",\n    \"Install and configure mkcert, then generate the certificate:\",\n    \"  macOS: brew install mkcert\",\n    \"  mkcert -install\",\n    `  mkdir -p ${certificateDirectories.map(shellQuote).join(\" \")}`,\n    `  mkcert -cert-file ${shellQuote(certPath)} -key-file ${shellQuote(keyPath)} ${shellQuote(host)}`,\n  ].join(\"\\n\");\n}\n\nfunction shellQuote(value: string) {\n  return `'${value.replaceAll(\"'\", `'\\\\''`)}'`;\n}\n\nfunction configureLocalHttpsServer(server: ViteDevServer, settings: LocalHttpsSettings) {\n  // The configured port is only a fallback: frameworks that own the listener\n  // (or auto-incremented ports) can bind somewhere else, and the Customer\n  // Account URLs registered in admin must match the port actually served.\n  const resolveBoundPort = () => {\n    const address = server.httpServer?.address();\n    return address && typeof address === \"object\" ? address.port : settings.port;\n  };\n\n  server.middlewares.use((request, response, next) => {\n    request.headers[\"x-forwarded-host\"] ??=\n      request.headers.host ?? `${settings.host}:${resolveBoundPort()}`;\n    request.headers[\"x-forwarded-proto\"] ??= \"https\";\n    stripHttp1OnlyResponseHeaders(response);\n    next();\n  });\n\n  const configureCustomerAccounts = () => {\n    const port = resolveBoundPort();\n    const settingsKey = `${server.config.root}:${settings.host}:${port}`;\n    if (startedCustomerAccountSetups.has(settingsKey)) return;\n    startedCustomerAccountSetups.add(settingsKey);\n\n    void configureCustomerAccountUrls({\n      logger: server.config.logger,\n      root: server.config.root,\n      urls: resolveCustomerAccountUrls(settings.host, port),\n    });\n  };\n\n  if (server.httpServer) {\n    server.httpServer.once(\"listening\", configureCustomerAccounts);\n  } else {\n    configureCustomerAccounts();\n  }\n}\n\nfunction stripHttp1OnlyResponseHeaders(response: ServerResponse) {\n  const originalWriteHead = response.writeHead.bind(response);\n\n  response.writeHead = (\n    statusCode: number,\n    statusMessageOrHeaders?: string | OutgoingHttpHeaders | OutgoingHttpHeader[],\n    headers?: OutgoingHttpHeaders | OutgoingHttpHeader[],\n  ) => {\n    removeStoredHttp1OnlyHeaders(response);\n\n    if (typeof statusMessageOrHeaders === \"string\") {\n      return originalWriteHead(\n        statusCode,\n        statusMessageOrHeaders,\n        sanitizeWriteHeadHeaders(headers),\n      );\n    }\n\n    return originalWriteHead(statusCode, sanitizeWriteHeadHeaders(statusMessageOrHeaders));\n  };\n}\n\nfunction removeStoredHttp1OnlyHeaders(response: ServerResponse) {\n  for (const header of HTTP1_ONLY_RESPONSE_HEADERS) {\n    response.removeHeader(header);\n  }\n}\n\nfunction sanitizeWriteHeadHeaders(headers: OutgoingHttpHeaders | OutgoingHttpHeader[] | undefined) {\n  if (Array.isArray(headers)) return sanitizeHeaderArray(headers);\n  if (headers) return sanitizeHeaderObject(headers);\n  return headers;\n}\n\nfunction sanitizeHeaderObject(headers: OutgoingHttpHeaders) {\n  const sanitizedHeaders: OutgoingHttpHeaders = {};\n\n  for (const [name, value] of Object.entries(headers)) {\n    if (!isHttp1OnlyHeader(name)) sanitizedHeaders[name] = value;\n  }\n\n  return sanitizedHeaders;\n}\n\nfunction sanitizeHeaderArray(headers: OutgoingHttpHeader[]) {\n  const sanitizedHeaders: OutgoingHttpHeader[] = [];\n\n  for (let index = 0; index < headers.length; index += HEADER_PAIR_SIZE) {\n    const name = headers[index];\n    const value = headers[index + 1];\n    if (typeof name === \"string\" && isHttp1OnlyHeader(name)) continue;\n\n    sanitizedHeaders.push(name);\n    if (value !== undefined) sanitizedHeaders.push(value);\n  }\n\n  return sanitizedHeaders;\n}\n\nfunction isHttp1OnlyHeader(name: string) {\n  return HTTP1_ONLY_RESPONSE_HEADERS.has(name.toLowerCase());\n}\n"],"mappings":";;;;;;;;;AAgBA,MAAa,uBAAuB;CAClC,MAAM;CACN,MAAM;CACP;AAED,MAAM,mBAAmB;AACzB,MAAM,8BAA8B,IAAI,IAAI;CAC1C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AACF,MAAM,oDAAoC,IAAI,KAAa;AAC3D,MAAM,+CAA+B,IAAI,KAAa;;;;AAmCtD,SAAgB,WAAW,SAA8C;CACvE,MAAM,WAAW,QAAQ,UAAU,0BAA0B,QAAQ,GAAG;CACxE,IAAI;CAEJ,MAAM,4BAA4B;AAChC,MAAI,CAAC,SAAU;AAEf,uBAAqB,qBAAqB,SAAS;AACnD,SAAO;;CAGT,MAAM,2BAA2B;AAC/B,MAAI,CAAC,YAAY,CAAC,sBAAsB,SAAS,CAAE;AAEnD,uBAAqB;AAErB,SAAO;GACL,MAAM,SAAS;GACf,MAAM,SAAS;GACf,OAAO;IACL,MAAM,SAAS;IACf,KAAK,SAAS;IACf;GACF;;AAGH,QAAO;EACL,MAAM;EACN,KAAK,EAAE,oBAAoB;EAC3B,MAAM,OAAO,SAAkB,KAAgB;AAC7C,OAAI,YAAY,IAAI,YAAY,WAAW,CAAC,IAAI,WAE9C;QAAI,CAAC,MAD+B,uBAAuB,SAAS,CACxC;cACnB,YAAY,CAAC,sBAAsB,SAAS,CACrD;GAGF,MAAM,eAAe,qBAAqB;AAC1C,OAAI,CAAC,YAAY,CAAC,aAAc;AAEhC,UAAO,EACL,QAAQ;IACN,cAAc,CAAC,SAAS,KAAK;IAC7B,MAAM,SAAS;IACf,MAAM,SAAS;IACf,YAAY;IACZ,OAAO;KAEL,eAAe,CAAC,WAAW;KAC3B,MAAM,aAAa;KACnB,KAAK,aAAa;KACnB;IACD,KAAK;KACH,MAAM,SAAS;KACf,UAAU;KACX;IACF,EACF;;EAEH,gBAAgB,QAAQ;AACtB,OAAI,CAAC,YAAY,CAAC,sBAAsB,SAAS,CAAE;AAEnD,wBAAqB;AACrB,6BAA0B,QAAQ,SAAS;;EAE9C;;;;;;;;AAWH,eAAsB,oBAAoB,UAAsC,EAAE,EAAE;CAClF,MAAM,WAAW,0BAA0B;EAAE,SAAS;EAAM,GAAG;EAAS,CAAC;AAEzE,KAAI,CAAC,sBAAsB,SAAS,CAClC,OAAM,sBAAsB,SAAS;AAGvC,QAAO;EACL,MAAM,SAAS;EACf,UAAU,SAAS;EACnB,SAAS,SAAS;EACnB;;AAeH,SAAS,0BAA0B,SAAgD;CACjF,MAAM,OAAO,QAAQ,QAAQ,qBAAqB;CAClD,MAAM,uBAAuB,KAAK,SAAS,EAAE,YAAY,YAAY,QAAQ;AAE7E,QAAO;EACL;EACA,MAAM,QAAQ,QAAQ,qBAAqB;EAC3C,UAAU,uBAAuB,QAAQ,YAAY,KAAK,sBAAsB,GAAG,KAAK,MAAM,CAAC;EAC/F,SAAS,uBACP,QAAQ,WAAW,KAAK,sBAAsB,GAAG,KAAK,UAAU,CACjE;EACF;;AAGH,SAAS,uBAAuB,MAAoB;AAClD,KAAI,gBAAgB,IAAK,QAAO,cAAc,KAAK;AACnD,KAAI,SAAS,IAAK,QAAO,SAAS;AAClC,KAAI,KAAK,WAAW,KAAK,CAAE,QAAO,QAAQ,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;AACnE,QAAO,WAAW,KAAK,GAAG,OAAO,QAAQ,KAAK;;AAGhD,SAAS,sBAAsB,UAA8B;AAC3D,QAAO,WAAW,SAAS,SAAS,IAAI,WAAW,SAAS,QAAQ;;AAGtE,eAAe,uBAAuB,UAAgD;AACpF,KAAI,sBAAsB,SAAS,CAAE,QAAO;AAI5C,KAAI,yBAAyB,CAC3B,QAAO,sBACL,UACA,yGACD;AAGH,KAAI,CAAE,MAAM,+BAA+B,SAAS,KAAK,CACvD,QAAO,sBACL,UACA,uFACD;AAGH,KAAI;AACF,QAAM,sBAAsB,SAAS;AACrC,SAAO;UACA,OAAO;AACd,SAAO,sBACL,UACA,iDAAiD,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GACxG;;;AAIL,SAAS,sBAAsB,UAA8B,kBAA2B;CACtF,MAAM,eAAe,CAAC,SAAS,UAAU,SAAS,QAAQ,CAAC,QAAQ,SAAS,CAAC,WAAW,KAAK,CAAC;AAC9F,KAAI,aAAa,WAAW,EAAG,QAAO;CAEtC,MAAM,UAAU,gCAAgC,UAAU,cAAc,iBAAiB;AACzF,KAAI,CAAC,kCAAkC,IAAI,QAAQ,EAAE;AACnD,oCAAkC,IAAI,QAAQ;AAC9C,UAAQ,YAAY,SAAS,EAAE,MAAM,6BAA6B,CAAC;;AAErE,QAAO;;AAGT,SAAS,gCACP,EAAE,UAAU,MAAM,WAClB,cACA,kBACA;CACA,MAAM,yBAAyB,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,SAAS,EAAE,QAAQ,QAAQ,CAAC,CAAC,CAAC;CAClF,MAAM,sBAAsB,qBAAqB,SAAY,EAAE,GAAG,CAAC,IAAI,iBAAiB;AAExF,QAAO;EACL;EACA,GAAG,aAAa,KAAK,SAAS,KAAK,OAAO;EAC1C,GAAG;EACH;EACA;EACA,kBAAkB;EAClB,kBAAkB;EAClB;EACA;EACA;EACA;EACA;EACA;EACA;EACA,cAAc,uBAAuB,IAAI,WAAW,CAAC,KAAK,IAAI;EAC9D,uBAAuB,WAAW,SAAS,CAAC,aAAa,WAAW,QAAQ,CAAC,GAAG,WAAW,KAAK;EACjG,CAAC,KAAK,KAAK;;AAGd,SAAS,qBAAqB,UAA0D;AACtF,QAAO;EACL,MAAM,oBAAoB,UAAU,eAAe,SAAS,SAAS;EACrE,KAAK,oBAAoB,UAAU,eAAe,SAAS,QAAQ;EACpE;;AAGH,SAAS,oBAAoB,UAA8B,OAAe,MAAc;AACtF,KAAI;AACF,SAAO,aAAa,KAAK;UAClB,OAAO;AACd,QAAM,IAAI,MAAM,2BAA2B,UAAU,OAAO,MAAM,MAAM,EAAE,EAAE,OAAO,OAAO,CAAC;;;AAI/F,SAAS,2BACP,EAAE,UAAU,MAAM,WAClB,OACA,MACA,OACA;CACA,MAAM,yBAAyB,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,SAAS,EAAE,QAAQ,QAAQ,CAAC,CAAC,CAAC;CAClF,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAErE,QAAO;EACL,mCAAmC,MAAM;EACzC,KAAK;EACL,WAAW;EACX;EACA;EACA,kBAAkB;EAClB,kBAAkB;EAClB;EACA;EACA;EACA;EACA,cAAc,uBAAuB,IAAI,WAAW,CAAC,KAAK,IAAI;EAC9D,uBAAuB,WAAW,SAAS,CAAC,aAAa,WAAW,QAAQ,CAAC,GAAG,WAAW,KAAK;EACjG,CAAC,KAAK,KAAK;;AAGd,SAAS,WAAW,OAAe;AACjC,QAAO,IAAI,MAAM,WAAW,KAAK,QAAQ,CAAC;;AAG5C,SAAS,0BAA0B,QAAuB,UAA8B;CAItF,MAAM,yBAAyB;EAC7B,MAAM,UAAU,OAAO,YAAY,SAAS;AAC5C,SAAO,WAAW,OAAO,YAAY,WAAW,QAAQ,OAAO,SAAS;;AAG1E,QAAO,YAAY,KAAK,SAAS,UAAU,SAAS;AAClD,UAAQ,QAAQ,wBACd,QAAQ,QAAQ,QAAQ,GAAG,SAAS,KAAK,GAAG,kBAAkB;AAChE,UAAQ,QAAQ,yBAAyB;AACzC,gCAA8B,SAAS;AACvC,QAAM;GACN;CAEF,MAAM,kCAAkC;EACtC,MAAM,OAAO,kBAAkB;EAC/B,MAAM,cAAc,GAAG,OAAO,OAAO,KAAK,GAAG,SAAS,KAAK,GAAG;AAC9D,MAAI,6BAA6B,IAAI,YAAY,CAAE;AACnD,+BAA6B,IAAI,YAAY;AAE7C,EAAK,6BAA6B;GAChC,QAAQ,OAAO,OAAO;GACtB,MAAM,OAAO,OAAO;GACpB,MAAM,2BAA2B,SAAS,MAAM,KAAK;GACtD,CAAC;;AAGJ,KAAI,OAAO,WACT,QAAO,WAAW,KAAK,aAAa,0BAA0B;KAE9D,4BAA2B;;AAI/B,SAAS,8BAA8B,UAA0B;CAC/D,MAAM,oBAAoB,SAAS,UAAU,KAAK,SAAS;AAE3D,UAAS,aACP,YACA,wBACA,YACG;AACH,+BAA6B,SAAS;AAEtC,MAAI,OAAO,2BAA2B,SACpC,QAAO,kBACL,YACA,wBACA,yBAAyB,QAAQ,CAClC;AAGH,SAAO,kBAAkB,YAAY,yBAAyB,uBAAuB,CAAC;;;AAI1F,SAAS,6BAA6B,UAA0B;AAC9D,MAAK,MAAM,UAAU,4BACnB,UAAS,aAAa,OAAO;;AAIjC,SAAS,yBAAyB,SAAiE;AACjG,KAAI,MAAM,QAAQ,QAAQ,CAAE,QAAO,oBAAoB,QAAQ;AAC/D,KAAI,QAAS,QAAO,qBAAqB,QAAQ;AACjD,QAAO;;AAGT,SAAS,qBAAqB,SAA8B;CAC1D,MAAM,mBAAwC,EAAE;AAEhD,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,QAAQ,CACjD,KAAI,CAAC,kBAAkB,KAAK,CAAE,kBAAiB,QAAQ;AAGzD,QAAO;;AAGT,SAAS,oBAAoB,SAA+B;CAC1D,MAAM,mBAAyC,EAAE;AAEjD,MAAK,IAAI,QAAQ,GAAG,QAAQ,QAAQ,QAAQ,SAAS,kBAAkB;EACrE,MAAM,OAAO,QAAQ;EACrB,MAAM,QAAQ,QAAQ,QAAQ;AAC9B,MAAI,OAAO,SAAS,YAAY,kBAAkB,KAAK,CAAE;AAEzD,mBAAiB,KAAK,KAAK;AAC3B,MAAI,UAAU,OAAW,kBAAiB,KAAK,MAAM;;AAGvD,QAAO;;AAGT,SAAS,kBAAkB,MAAc;AACvC,QAAO,4BAA4B,IAAI,KAAK,aAAa,CAAC"}

package/dist/vite/mkcert.mjs

@@ -2,9 +2,9 @@ import { consoleLogger, getLogger } from "../core/logging/logging.mjs";
 import { existsSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
+import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
-import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 
 //#region src/vite/mkcert.ts
 const log = getLogger("local-https");

package/dist/vue/cart.d.mts

@@ -1,5 +1,5 @@
 import { CartData, CartState } from "../core/cart/state.mjs";
-import { CartStore, CreateCartStoreOptions } from "../core/cart/cart.mjs";
+import { CartActions, CreateCartStoreOptions } from "../core/cart/cart.mjs";
 import { CartFormRegister } from "../core/cart/form.mjs";
 import { CartDataFromHandlers } from "../core/cart/server-handlers.mjs";
 import { ComputedRef, PropType, ShallowRef } from "vue";
@@ -18,8 +18,6 @@ type TypedCartProvider<TData extends CartData> = {
     };
   };
 };
-/** Actions for reconciling cart state after updates outside Standard Actions. */
-type CartActions = Pick<CartStore, "refresh">;
 type TypedCartComponents<TData extends CartData> = {
   CartProvider: TypedCartProvider<TData>;
   useCart: TypedUseCart<TData>;
@@ -27,12 +25,73 @@ type TypedCartComponents<TData extends CartData> = {
   useCartActions: typeof useCartActions;
   useCartForm: typeof useCartForm;
 };
+/**
+ * Returns cart actions for reconciling state after out-of-band mutations.
+ *
+ * Currently exposes {@link CartStore.refresh} — call it after server-side cart
+ * mutations that bypass the form system.
+ *
+ * @example
+ * ```vue
+ * <script setup>
+ * const { refresh } = useCartActions();
+ *
+ * async function handleServerAction() {
+ *   await createCartOnServer();
+ *   refresh();
+ * }
+ * </script>
+ * ```
+ */
 declare function useCartActions(): CartActions;
+/**
+ * Subscribes the {@link CartStore} to the analytics event dispatcher.
+ *
+ * Call once near the root of your app. Starts tracking on mount via `onMounted`
+ * and cleans up via `onScopeDispose`.
+ *
+ * @example
+ * ```vue
+ * <script setup>
+ * useCartAnalytics();
+ * </script>
+ * ```
+ */
 declare function useCartAnalytics(): void;
+/**
+ * Returns form props, a field register function, and reactive pending state
+ * for building cart forms in Vue.
+ *
+ * Unlike the React hook, the Vue variant includes `isPending` — a reactive
+ * object with `initial` (`ComputedRef<boolean>`) for the initial cart load
+ * and `lines(lineId?)` for checking per-line or any-line pending state.
+ *
+ * Note: `interactive: true` returns numeric input attributes but does **not**
+ * auto-submit on change — that behavior requires `attachQuantityInput`, which
+ * is only wired by the React adapter.
+ *
+ * @example
+ * ```vue
+ * <script setup>
+ * const { formProps, register, isPending } = useCartForm();
+ * </script>
+ *
+ * <template>
+ *   <form v-bind="formProps()">
+ *     <input v-bind="register('lineId', { value: line.id })" />
+ *     <input v-bind="register('quantity', { value: line.quantity })" />
+ *     <button v-bind="register('set')" />
+ *     <button v-bind="register('increase')">+</button>
+ *     <button v-bind="register('decrease')">−</button>
+ *     <span v-if="isPending.lines(line.id)">Updating…</span>
+ *   </form>
+ * </template>
+ * ```
+ */
 declare function useCartForm(): {
   formProps: (opts?: {
-    beforeSubmit?: (e: Event) => void;
-    afterSubmit?: (e: Event) => void;
+    beforeSubmit?: (e: SubmitEvent) => void;
+    afterSubmit?: (e: SubmitEvent) => void;
   }) => Record<string, unknown>;
   register: CartFormRegister;
   isPending: {
@@ -40,7 +99,27 @@ declare function useCartForm(): {
     lines: (lineId?: string) => boolean;
   };
 };
+/**
+ * Factory that returns typed cart components and composables matched to your
+ * server handler's cart query shape.
+ *
+ * The generic `THandlers` parameter is inferred from your `createCartServerHandlers`
+ * call, so every composable's {@link CartState} carries your custom cart fields.
+ *
+ * @example
+ * ```ts
+ * import type { cartServerHandlers } from "./server/cart.server";
+ *
+ * const {
+ *   CartProvider,
+ *   useCart,
+ *   useOptionalCart,
+ *   useCartActions,
+ *   useCartForm,
+ * } = createCartComponents<typeof cartServerHandlers>();
+ * ```
+ */
 declare function createCartComponents<THandlers>(): TypedCartComponents<CartDataFromHandlers<THandlers>>;
 //#endregion
-export { CartActions, createCartComponents, useCartActions, useCartAnalytics };
+export { createCartComponents, useCartActions, useCartAnalytics };
 //# sourceMappingURL=cart.d.mts.map

package/dist/vue/cart.mjs

@@ -25,6 +25,20 @@ function useCartStore(composableName = "useCartStore") {
 function useOptionalCartStore() {
 	return inject(CartStoreKey, null);
 }
+/**
+* Vue component that creates and manages a {@link CartStore} instance.
+*
+* Calls {@link CartStore.connect} on mount and {@link CartStore.destroy} on unmount.
+* All cart composables (`useCart`, `useCartForm`, `useCartActions`) must be
+* descendants of this component.
+*
+* @example
+* ```vue
+* <CartProvider :initialData="{ cart: loaderData.cart }">
+*   <App />
+* </CartProvider>
+* ```
+*/
 const CartProvider = defineComponent({
 	name: "CartProvider",
 	props: { initialData: {
@@ -47,9 +61,40 @@ const CartProvider = defineComponent({
 function useCart(selector, isEqual) {
 	return useCartSelector(useCartStore("useCart"), selector ?? ((state) => state), isEqual);
 }
+/**
+* Returns cart actions for reconciling state after out-of-band mutations.
+*
+* Currently exposes {@link CartStore.refresh} — call it after server-side cart
+* mutations that bypass the form system.
+*
+* @example
+* ```vue
+* <script setup>
+* const { refresh } = useCartActions();
+*
+* async function handleServerAction() {
+*   await createCartOnServer();
+*   refresh();
+* }
+* <\/script>
+* ```
+*/
 function useCartActions() {
 	return { refresh: useCartStore("useCartActions").refresh };
 }
+/**
+* Subscribes the {@link CartStore} to the analytics event dispatcher.
+*
+* Call once near the root of your app. Starts tracking on mount via `onMounted`
+* and cleans up via `onScopeDispose`.
+*
+* @example
+* ```vue
+* <script setup>
+* useCartAnalytics();
+* <\/script>
+* ```
+*/
 function useCartAnalytics() {
 	const store = useCartStore("useCartAnalytics");
 	let stopTracking;
@@ -76,6 +121,36 @@ function useCartSelector(store, selector, isEqual) {
 	}));
 	return selected;
 }
+/**
+* Returns form props, a field register function, and reactive pending state
+* for building cart forms in Vue.
+*
+* Unlike the React hook, the Vue variant includes `isPending` — a reactive
+* object with `initial` (`ComputedRef<boolean>`) for the initial cart load
+* and `lines(lineId?)` for checking per-line or any-line pending state.
+*
+* Note: `interactive: true` returns numeric input attributes but does **not**
+* auto-submit on change — that behavior requires `attachQuantityInput`, which
+* is only wired by the React adapter.
+*
+* @example
+* ```vue
+* <script setup>
+* const { formProps, register, isPending } = useCartForm();
+* <\/script>
+*
+* <template>
+*   <form v-bind="formProps()">
+*     <input v-bind="register('lineId', { value: line.id })" />
+*     <input v-bind="register('quantity', { value: line.quantity })" />
+*     <button v-bind="register('set')" />
+*     <button v-bind="register('increase')">+</button>
+*     <button v-bind="register('decrease')">−</button>
+*     <span v-if="isPending.lines(line.id)">Updating…</span>
+*   </form>
+* </template>
+* ```
+*/
 function useCartForm() {
 	const store = useCartStore("useCartForm");
 	const loading = useCart((s) => s.loading);
@@ -101,6 +176,26 @@ function useCartForm() {
 		}
 	};
 }
+/**
+* Factory that returns typed cart components and composables matched to your
+* server handler's cart query shape.
+*
+* The generic `THandlers` parameter is inferred from your `createCartServerHandlers`
+* call, so every composable's {@link CartState} carries your custom cart fields.
+*
+* @example
+* ```ts
+* import type { cartServerHandlers } from "./server/cart.server";
+*
+* const {
+*   CartProvider,
+*   useCart,
+*   useOptionalCart,
+*   useCartActions,
+*   useCartForm,
+* } = createCartComponents<typeof cartServerHandlers>();
+* ```
+*/
 function createCartComponents() {
 	const TypedCartProvider = createTypedCartProvider();
 	const useTypedCart = ((selector, isEqual) => {