@shopify/hydrogen 2026.4.5 → 2026.10.0-preview.2

package/dist/core/request-routing/interceptors/admin-redirect.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-redirect.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/admin-redirect.ts"],"sourcesContent":["import type { RedirectOptions } from \"../handle-shopify-redirects\";\n\ntype AdminRedirectOptions = Pick<RedirectOptions, \"request\" | \"storefrontClient\">;\n\nexport function handleAdminRedirect({\n  request,\n  storefrontClient,\n}: AdminRedirectOptions): Response | null {\n  const url = new URL(request.url);\n  if (url.pathname !== \"/admin\") return null;\n\n  return new Response(null, {\n    status: 301,\n    headers: { location: new URL(\"/admin\", storefrontClient.storeUrl).toString() },\n  });\n}\n"],"mappings":";AAIA,SAAgB,oBAAoB,EAClC,SACA,oBACwC;AAExC,KAAI,IADY,IAAI,QAAQ,IACrB,CAAC,aAAa,SAAU,QAAO;AAEtC,QAAO,IAAI,SAAS,MAAM;EACxB,QAAQ;EACR,SAAS,EAAE,UAAU,IAAI,IAAI,UAAU,iBAAiB,SAAS,CAAC,UAAU,EAAE;EAC/E,CAAC"}

package/dist/core/request-routing/interceptors/ajax-api.mjs

@@ -0,0 +1,16 @@
+import { AJAX_API_REQUEST_HEADER_ALLOWLIST } from "../../headers.mjs";
+import { AJAX_CART_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+
+//#region src/core/request-routing/interceptors/ajax-api.ts
+const rewriteShopifyJsPathname = (pathname) => pathname.replace(/\.js$/i, ".json");
+const handleAjaxApi = createProxyInterceptor({
+	match: AJAX_CART_RE,
+	requestHeaders: { allow: AJAX_API_REQUEST_HEADER_ALLOWLIST },
+	rewritePathname: rewriteShopifyJsPathname,
+	scope: "ajax-api"
+});
+
+//#endregion
+export { handleAjaxApi, rewriteShopifyJsPathname };
+//# sourceMappingURL=ajax-api.mjs.map

package/dist/core/request-routing/interceptors/ajax-api.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ajax-api.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/ajax-api.ts"],"sourcesContent":["import { AJAX_API_REQUEST_HEADER_ALLOWLIST } from \"../../headers\";\nimport { AJAX_CART_RE } from \"../../url\";\nimport { createProxyInterceptor } from \"./proxy\";\n\n// Known workaround for Shopify server redirects on `.js` endpoints.\nexport const rewriteShopifyJsPathname = (pathname: string): string =>\n  pathname.replace(/\\.js$/i, \".json\");\n\nexport const handleAjaxApi = createProxyInterceptor({\n  match: AJAX_CART_RE,\n  requestHeaders: { allow: AJAX_API_REQUEST_HEADER_ALLOWLIST },\n  rewritePathname: rewriteShopifyJsPathname,\n  scope: \"ajax-api\",\n});\n"],"mappings":";;;;;AAKA,MAAa,4BAA4B,aACvC,SAAS,QAAQ,UAAU,QAAQ;AAErC,MAAa,gBAAgB,uBAAuB;CAClD,OAAO;CACP,gBAAgB,EAAE,OAAO,mCAAmC;CAC5D,iBAAiB;CACjB,OAAO;CACR,CAAC"}

package/dist/core/request-routing/interceptors/api-proxy.mjs

@@ -0,0 +1,20 @@
+import { PROXY_REQUEST_HEADER_DENYLIST } from "../../headers.mjs";
+import { SHOPIFY_API_PROXY_PREFIX, SHOPIFY_API_PROXY_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+import { rewriteShopifyJsPathname } from "./ajax-api.mjs";
+
+//#region src/core/request-routing/interceptors/api-proxy.ts
+const handleShopifyApiProxy = createProxyInterceptor({
+	match: SHOPIFY_API_PROXY_RE,
+	requestHeaders: { deny: PROXY_REQUEST_HEADER_DENYLIST },
+	rewritePathname: (pathname) => {
+		const upstreamPathname = "/" + pathname.slice(SHOPIFY_API_PROXY_PREFIX.length).replace(/^\/+/, "");
+		if (upstreamPathname.startsWith("/cdn/")) throw new Error("CDN proxy is not supported.");
+		return rewriteShopifyJsPathname(upstreamPathname);
+	},
+	scope: "shopify-api-proxy"
+});
+
+//#endregion
+export { handleShopifyApiProxy };
+//# sourceMappingURL=api-proxy.mjs.map

package/dist/core/request-routing/interceptors/api-proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-proxy.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/api-proxy.ts"],"sourcesContent":["import { PROXY_REQUEST_HEADER_DENYLIST } from \"../../headers\";\nimport { SHOPIFY_API_PROXY_PREFIX, SHOPIFY_API_PROXY_RE } from \"../../url\";\nimport { rewriteShopifyJsPathname } from \"./ajax-api\";\nimport { createProxyInterceptor } from \"./proxy\";\n\nexport const handleShopifyApiProxy = createProxyInterceptor({\n  match: SHOPIFY_API_PROXY_RE,\n  requestHeaders: { deny: PROXY_REQUEST_HEADER_DENYLIST },\n  rewritePathname: (pathname) => {\n    const upstreamPathname =\n      \"/\" + pathname.slice(SHOPIFY_API_PROXY_PREFIX.length).replace(/^\\/+/, \"\");\n\n    if (upstreamPathname.startsWith(\"/cdn/\")) {\n      throw new Error(\"CDN proxy is not supported.\");\n    }\n\n    return rewriteShopifyJsPathname(upstreamPathname);\n  },\n  scope: \"shopify-api-proxy\",\n});\n"],"mappings":";;;;;;AAKA,MAAa,wBAAwB,uBAAuB;CAC1D,OAAO;CACP,gBAAgB,EAAE,MAAM,+BAA+B;CACvD,kBAAkB,aAAa;EAC7B,MAAM,mBACJ,MAAM,SAAS,MAAM,yBAAyB,OAAO,CAAC,QAAQ,QAAQ,GAAG;AAE3E,MAAI,iBAAiB,WAAW,QAAQ,CACtC,OAAM,IAAI,MAAM,8BAA8B;AAGhD,SAAO,yBAAyB,iBAAiB;;CAEnD,OAAO;CACR,CAAC"}

package/dist/core/request-routing/interceptors/checkout.mjs

@@ -0,0 +1,58 @@
+import { getLogger } from "../../logging/logging.mjs";
+import { CHECKOUT_RE, isHydrogenServerHandoffPath } from "../../url.mjs";
+import { getCart, getCartId } from "../../cart/get-cart.mjs";
+
+//#region src/core/request-routing/interceptors/checkout.ts
+const log = getLogger("checkout");
+const MOCK_SHOP_CART_PERMALINK_ORIGIN = "https://demostore.mock.shop";
+const handleCheckoutRedirect = (url, { request, storefrontClient }) => {
+	if (!isHydrogenServerHandoffPath(url.pathname)) return null;
+	if (request.method !== "GET" && request.method !== "HEAD") return Promise.resolve(new Response("Method Not Allowed", { status: 405 }));
+	return (CHECKOUT_RE.test(url.pathname) ? getCheckoutRedirectUrl(request, storefrontClient) : getCartRedirectUrl(request, storefrontClient)).then((redirectUrl) => {
+		if (redirectUrl.pathname !== "/") {
+			mergeSearchParams(redirectUrl, url.searchParams);
+			redirectUrl.searchParams.set("payment", url.searchParams.get("payment") ?? "shop_pay");
+		}
+		return new Response(null, {
+			status: 302,
+			headers: { location: redirectUrl.toString() }
+		});
+	}).catch((error) => {
+		log.error("checkout redirect request failed", { error });
+		const message = error instanceof Error ? error.message : "Internal redirect error";
+		return new Response(JSON.stringify({ error: message }), {
+			status: 502,
+			headers: { "content-type": "application/json" }
+		});
+	});
+};
+async function getCheckoutRedirectUrl(request, storefrontClient) {
+	const cartId = getCartId(request);
+	if (!cartId) return new URL("/", request.url);
+	const result = await getCart(cartId, storefrontClient);
+	return result.cart?.checkoutUrl ? new URL(result.cart.checkoutUrl) : new URL("/", request.url);
+}
+async function getCartRedirectUrl(request, storefrontClient) {
+	const sourceUrl = new URL(request.url);
+	const redirectUrl = new URL(sourceUrl.pathname, getCartPermalinkOrigin(storefrontClient.storeUrl));
+	const cartId = getCartId(request);
+	if (!cartId) return redirectUrl;
+	try {
+		const result = await getCart(cartId, storefrontClient);
+		if (result.cart?.checkoutUrl) mergeSearchParams(redirectUrl, new URL(result.cart.checkoutUrl).searchParams);
+	} catch (error) {
+		log.warn("checkout redirect could not load cart permalink tracking params", { error });
+	}
+	return redirectUrl;
+}
+function getCartPermalinkOrigin(storeUrl) {
+	const url = new URL(storeUrl);
+	return url.hostname === "mock.shop" ? MOCK_SHOP_CART_PERMALINK_ORIGIN : url.origin;
+}
+function mergeSearchParams(target, source) {
+	for (const [key, value] of source) if (!target.searchParams.has(key)) target.searchParams.append(key, value);
+}
+
+//#endregion
+export { handleCheckoutRedirect };
+//# sourceMappingURL=checkout.mjs.map

package/dist/core/request-routing/interceptors/checkout.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/checkout.ts"],"sourcesContent":["import type { StorefrontClient } from \"../../../client\";\nimport { getCart, getCartId } from \"../../cart/get-cart\";\nimport { getLogger } from \"../../logging\";\nimport { CHECKOUT_RE, isHydrogenServerHandoffPath } from \"../../url\";\nimport type { HydrogenRouteInterceptor } from \"../route-types\";\n\nconst log = getLogger(\"checkout\");\nconst MOCK_SHOP_CART_PERMALINK_ORIGIN = \"https://demostore.mock.shop\";\n\nexport const handleCheckoutRedirect: HydrogenRouteInterceptor = (\n  url,\n  { request, storefrontClient },\n) => {\n  if (!isHydrogenServerHandoffPath(url.pathname)) {\n    return null;\n  }\n\n  if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n    return Promise.resolve(new Response(\"Method Not Allowed\", { status: 405 }));\n  }\n\n  const redirectUrlPromise = CHECKOUT_RE.test(url.pathname)\n    ? getCheckoutRedirectUrl(request, storefrontClient)\n    : getCartRedirectUrl(request, storefrontClient);\n\n  return redirectUrlPromise\n    .then((redirectUrl) => {\n      if (redirectUrl.pathname !== \"/\") {\n        mergeSearchParams(redirectUrl, url.searchParams);\n        redirectUrl.searchParams.set(\"payment\", url.searchParams.get(\"payment\") ?? \"shop_pay\");\n      }\n\n      return new Response(null, {\n        status: 302,\n        headers: { location: redirectUrl.toString() },\n      });\n    })\n    .catch((error) => {\n      log.error(\"checkout redirect request failed\", { error });\n      const message = error instanceof Error ? error.message : \"Internal redirect error\";\n\n      return new Response(JSON.stringify({ error: message }), {\n        status: 502,\n        headers: { \"content-type\": \"application/json\" },\n      });\n    });\n};\n\nasync function getCheckoutRedirectUrl(\n  request: Request,\n  storefrontClient: StorefrontClient,\n): Promise<URL> {\n  const cartId = getCartId(request);\n  if (!cartId) return new URL(\"/\", request.url);\n\n  const result = await getCart(cartId, storefrontClient);\n  return result.cart?.checkoutUrl ? new URL(result.cart.checkoutUrl) : new URL(\"/\", request.url);\n}\n\nasync function getCartRedirectUrl(\n  request: Request,\n  storefrontClient: StorefrontClient,\n): Promise<URL> {\n  const sourceUrl = new URL(request.url);\n  const redirectUrl = new URL(\n    sourceUrl.pathname,\n    getCartPermalinkOrigin(storefrontClient.storeUrl),\n  );\n\n  const cartId = getCartId(request);\n  if (!cartId) return redirectUrl;\n\n  try {\n    const result = await getCart(cartId, storefrontClient);\n    if (result.cart?.checkoutUrl) {\n      mergeSearchParams(redirectUrl, new URL(result.cart.checkoutUrl).searchParams);\n    }\n  } catch (error) {\n    log.warn(\"checkout redirect could not load cart permalink tracking params\", { error });\n  }\n\n  return redirectUrl;\n}\n\nfunction getCartPermalinkOrigin(storeUrl: string): string {\n  const url = new URL(storeUrl);\n  return url.hostname === \"mock.shop\" ? MOCK_SHOP_CART_PERMALINK_ORIGIN : url.origin;\n}\n\nfunction mergeSearchParams(target: URL, source: URLSearchParams): void {\n  for (const [key, value] of source) {\n    if (!target.searchParams.has(key)) target.searchParams.append(key, value);\n  }\n}\n"],"mappings":";;;;;AAMA,MAAM,MAAM,UAAU,WAAW;AACjC,MAAM,kCAAkC;AAExC,MAAa,0BACX,KACA,EAAE,SAAS,uBACR;AACH,KAAI,CAAC,4BAA4B,IAAI,SAAS,CAC5C,QAAO;AAGT,KAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,OACjD,QAAO,QAAQ,QAAQ,IAAI,SAAS,sBAAsB,EAAE,QAAQ,KAAK,CAAC,CAAC;AAO7E,SAJ2B,YAAY,KAAK,IAAI,SAAS,GACrD,uBAAuB,SAAS,iBAAiB,GACjD,mBAAmB,SAAS,iBAAiB,EAG9C,MAAM,gBAAgB;AACrB,MAAI,YAAY,aAAa,KAAK;AAChC,qBAAkB,aAAa,IAAI,aAAa;AAChD,eAAY,aAAa,IAAI,WAAW,IAAI,aAAa,IAAI,UAAU,IAAI,WAAW;;AAGxF,SAAO,IAAI,SAAS,MAAM;GACxB,QAAQ;GACR,SAAS,EAAE,UAAU,YAAY,UAAU,EAAE;GAC9C,CAAC;GACF,CACD,OAAO,UAAU;AAChB,MAAI,MAAM,oCAAoC,EAAE,OAAO,CAAC;EACxD,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AAEzD,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,SAAS,CAAC,EAAE;GACtD,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CAAC;GACF;;AAGN,eAAe,uBACb,SACA,kBACc;CACd,MAAM,SAAS,UAAU,QAAQ;AACjC,KAAI,CAAC,OAAQ,QAAO,IAAI,IAAI,KAAK,QAAQ,IAAI;CAE7C,MAAM,SAAS,MAAM,QAAQ,QAAQ,iBAAiB;AACtD,QAAO,OAAO,MAAM,cAAc,IAAI,IAAI,OAAO,KAAK,YAAY,GAAG,IAAI,IAAI,KAAK,QAAQ,IAAI;;AAGhG,eAAe,mBACb,SACA,kBACc;CACd,MAAM,YAAY,IAAI,IAAI,QAAQ,IAAI;CACtC,MAAM,cAAc,IAAI,IACtB,UAAU,UACV,uBAAuB,iBAAiB,SAAS,CAClD;CAED,MAAM,SAAS,UAAU,QAAQ;AACjC,KAAI,CAAC,OAAQ,QAAO;AAEpB,KAAI;EACF,MAAM,SAAS,MAAM,QAAQ,QAAQ,iBAAiB;AACtD,MAAI,OAAO,MAAM,YACf,mBAAkB,aAAa,IAAI,IAAI,OAAO,KAAK,YAAY,CAAC,aAAa;UAExE,OAAO;AACd,MAAI,KAAK,mEAAmE,EAAE,OAAO,CAAC;;AAGxF,QAAO;;AAGT,SAAS,uBAAuB,UAA0B;CACxD,MAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAO,IAAI,aAAa,cAAc,kCAAkC,IAAI;;AAG9E,SAAS,kBAAkB,QAAa,QAA+B;AACrE,MAAK,MAAM,CAAC,KAAK,UAAU,OACzB,KAAI,CAAC,OAAO,aAAa,IAAI,IAAI,CAAE,QAAO,aAAa,OAAO,KAAK,MAAM"}

package/dist/core/request-routing/interceptors/mcp-proxy.mjs

@@ -0,0 +1,23 @@
+import { MCP_REQUEST_HEADER_ALLOWLIST } from "../../headers.mjs";
+import { MCP_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+
+//#region src/core/request-routing/interceptors/mcp-proxy.ts
+const JSON_RPC_INTERNAL_ERROR = -32603;
+const handleMcpProxy = createProxyInterceptor({
+	match: MCP_RE,
+	requestHeaders: { allow: MCP_REQUEST_HEADER_ALLOWLIST },
+	formatError: (message) => ({
+		jsonrpc: "2.0",
+		error: {
+			code: JSON_RPC_INTERNAL_ERROR,
+			message
+		},
+		id: null
+	}),
+	scope: "mcp-proxy"
+});
+
+//#endregion
+export { handleMcpProxy };
+//# sourceMappingURL=mcp-proxy.mjs.map

package/dist/core/request-routing/interceptors/mcp-proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/mcp-proxy.ts"],"sourcesContent":["import { MCP_REQUEST_HEADER_ALLOWLIST } from \"../../headers\";\nimport { MCP_RE } from \"../../url\";\nimport { createProxyInterceptor } from \"./proxy\";\n\nconst JSON_RPC_INTERNAL_ERROR = -32603;\n\nexport const handleMcpProxy = createProxyInterceptor({\n  match: MCP_RE,\n  requestHeaders: { allow: MCP_REQUEST_HEADER_ALLOWLIST },\n  formatError: (message) => ({\n    jsonrpc: \"2.0\",\n    error: { code: JSON_RPC_INTERNAL_ERROR, message },\n    id: null,\n  }),\n  scope: \"mcp-proxy\",\n});\n"],"mappings":";;;;;AAIA,MAAM,0BAA0B;AAEhC,MAAa,iBAAiB,uBAAuB;CACnD,OAAO;CACP,gBAAgB,EAAE,OAAO,8BAA8B;CACvD,cAAc,aAAa;EACzB,SAAS;EACT,OAAO;GAAE,MAAM;GAAyB;GAAS;EACjD,IAAI;EACL;CACD,OAAO;CACR,CAAC"}

package/dist/core/request-routing/interceptors/proxy.mjs

@@ -0,0 +1,73 @@
+import { getLogger } from "../../logging/logging.mjs";
+import { extractHeaders } from "../../headers.mjs";
+
+//#region src/core/request-routing/interceptors/proxy.ts
+const PROXY_TIMEOUT_MS = 3e4;
+function createProxyInterceptor(descriptor) {
+	const log = getLogger(descriptor.scope);
+	const formatError = descriptor.formatError ?? defaultFormatError;
+	return (url, options) => {
+		const { request, storefrontClient } = options;
+		if (!descriptor.match.test(url.pathname)) return null;
+		if (descriptor.methods && !descriptor.methods.includes(request.method)) return null;
+		let upstreamUrl;
+		let init;
+		try {
+			const upstreamPathname = descriptor.rewritePathname?.(url.pathname) ?? url.pathname;
+			upstreamUrl = new URL(upstreamPathname + url.search, storefrontClient.storeUrl);
+			const forwardedHeaders = createProxyRequestHeaders(descriptor, request);
+			options.requestContext.applyStorefrontRequestHeaders(forwardedHeaders);
+			descriptor.requestHeaders.prepare?.(forwardedHeaders, options, url);
+			init = {
+				method: request.method,
+				body: request.body,
+				headers: forwardedHeaders,
+				signal: AbortSignal.timeout(descriptor.timeoutMs ?? PROXY_TIMEOUT_MS),
+				redirect: descriptor.redirect ?? "manual"
+			};
+			if (request.body) init.duplex = "half";
+		} catch (error) {
+			log.error("request failed", { error });
+			return Promise.resolve(createProxyErrorResponse(error, 500, formatError));
+		}
+		return fetch(upstreamUrl, init).then((upstreamResponse) => {
+			const headers = createProxyResponseHeaders(upstreamResponse.headers);
+			descriptor.responseHeaders?.prepare?.(headers, options, url);
+			options.requestContext.consumeStorefrontResponseHeaders(headers);
+			return new Response(upstreamResponse.body, {
+				status: upstreamResponse.status,
+				statusText: upstreamResponse.statusText,
+				headers
+			});
+		}).catch((error) => {
+			log.error("request failed", { error });
+			return createProxyErrorResponse(error, 502, formatError);
+		});
+	};
+}
+function defaultFormatError(message) {
+	return { error: message };
+}
+function createProxyErrorResponse(error, status, formatError) {
+	const message = error instanceof Error ? error.message : "Internal proxy error";
+	return new Response(JSON.stringify(formatError(message)), {
+		status,
+		headers: { "content-type": "application/json" }
+	});
+}
+function createProxyRequestHeaders(descriptor, request) {
+	const { allow, deny } = descriptor.requestHeaders;
+	const headers = allow ? new Headers(extractHeaders((key) => request.headers.get(key), allow)) : new Headers(request.headers);
+	for (const header of deny ?? []) headers.delete(header);
+	return headers;
+}
+function createProxyResponseHeaders(upstreamHeaders) {
+	const headers = new Headers(upstreamHeaders);
+	headers.delete("content-encoding");
+	headers.delete("content-length");
+	return headers;
+}
+
+//#endregion
+export { createProxyInterceptor, createProxyResponseHeaders };
+//# sourceMappingURL=proxy.mjs.map

package/dist/core/request-routing/interceptors/proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/proxy.ts"],"sourcesContent":["import { extractHeaders } from \"../../headers\";\nimport { getLogger } from \"../../logging\";\nimport type { HydrogenRouteInterceptor, HydrogenRoutesOptions } from \"../route-types\";\n\nconst PROXY_TIMEOUT_MS = 30_000;\n\ntype PrepareHeaders = (headers: Headers, options: HydrogenRoutesOptions, url: URL) => void;\n\ntype ProxyRequestHeaderOptions = (\n  | { allow: readonly string[]; deny?: never }\n  | { allow?: never; deny: readonly string[] }\n) & {\n  prepare?: PrepareHeaders;\n};\n\ntype ProxyResponseHeaderOptions = {\n  prepare?: PrepareHeaders;\n};\n\ntype ProxyDescriptor = {\n  match: RegExp;\n  methods?: readonly string[];\n  formatError?: (message: string) => unknown;\n  redirect?: RequestRedirect;\n  scope: string;\n  timeoutMs?: number;\n  rewritePathname?: (pathname: string) => string;\n  requestHeaders: ProxyRequestHeaderOptions;\n  responseHeaders?: ProxyResponseHeaderOptions;\n};\n\nexport function createProxyInterceptor(descriptor: ProxyDescriptor): HydrogenRouteInterceptor {\n  const log = getLogger(descriptor.scope);\n  const formatError = descriptor.formatError ?? defaultFormatError;\n\n  return (url, options) => {\n    const { request, storefrontClient } = options;\n    if (!descriptor.match.test(url.pathname)) return null;\n    if (descriptor.methods && !descriptor.methods.includes(request.method)) return null;\n\n    let upstreamUrl: URL;\n    let init: RequestInit & { duplex?: \"half\" };\n    try {\n      const upstreamPathname = descriptor.rewritePathname?.(url.pathname) ?? url.pathname;\n      upstreamUrl = new URL(upstreamPathname + url.search, storefrontClient.storeUrl);\n      const forwardedHeaders = createProxyRequestHeaders(descriptor, request);\n      options.requestContext.applyStorefrontRequestHeaders(forwardedHeaders);\n      descriptor.requestHeaders.prepare?.(forwardedHeaders, options, url);\n\n      init = {\n        method: request.method,\n        body: request.body,\n        headers: forwardedHeaders,\n        signal: AbortSignal.timeout(descriptor.timeoutMs ?? PROXY_TIMEOUT_MS),\n        redirect: descriptor.redirect ?? \"manual\",\n      };\n\n      // Node's fetch requires this when forwarding a streaming request body.\n      if (request.body) init.duplex = \"half\";\n    } catch (error) {\n      log.error(\"request failed\", { error });\n      return Promise.resolve(createProxyErrorResponse(error, 500, formatError));\n    }\n\n    return fetch(upstreamUrl, init)\n      .then((upstreamResponse) => {\n        const headers = createProxyResponseHeaders(upstreamResponse.headers);\n        descriptor.responseHeaders?.prepare?.(headers, options, url);\n        options.requestContext.consumeStorefrontResponseHeaders(headers);\n\n        return new Response(upstreamResponse.body, {\n          status: upstreamResponse.status,\n          statusText: upstreamResponse.statusText,\n          headers,\n        });\n      })\n      .catch((error) => {\n        log.error(\"request failed\", { error });\n        return createProxyErrorResponse(error, 502, formatError);\n      });\n  };\n}\n\nfunction defaultFormatError(message: string): { error: string } {\n  return { error: message };\n}\n\nfunction createProxyErrorResponse(\n  error: unknown,\n  status: number,\n  formatError: (message: string) => unknown,\n): Response {\n  const message = error instanceof Error ? error.message : \"Internal proxy error\";\n  return new Response(JSON.stringify(formatError(message)), {\n    status,\n    headers: { \"content-type\": \"application/json\" },\n  });\n}\n\nfunction createProxyRequestHeaders(descriptor: ProxyDescriptor, request: Request): Headers {\n  const { allow, deny } = descriptor.requestHeaders;\n  const headers = allow\n    ? new Headers(extractHeaders((key) => request.headers.get(key), allow))\n    : new Headers(request.headers);\n  for (const header of deny ?? []) headers.delete(header);\n  return headers;\n}\n\nexport function createProxyResponseHeaders(upstreamHeaders: Headers): Headers {\n  const headers = new Headers(upstreamHeaders);\n  headers.delete(\"content-encoding\");\n  headers.delete(\"content-length\");\n  return headers;\n}\n"],"mappings":";;;;AAIA,MAAM,mBAAmB;AA2BzB,SAAgB,uBAAuB,YAAuD;CAC5F,MAAM,MAAM,UAAU,WAAW,MAAM;CACvC,MAAM,cAAc,WAAW,eAAe;AAE9C,SAAQ,KAAK,YAAY;EACvB,MAAM,EAAE,SAAS,qBAAqB;AACtC,MAAI,CAAC,WAAW,MAAM,KAAK,IAAI,SAAS,CAAE,QAAO;AACjD,MAAI,WAAW,WAAW,CAAC,WAAW,QAAQ,SAAS,QAAQ,OAAO,CAAE,QAAO;EAE/E,IAAI;EACJ,IAAI;AACJ,MAAI;GACF,MAAM,mBAAmB,WAAW,kBAAkB,IAAI,SAAS,IAAI,IAAI;AAC3E,iBAAc,IAAI,IAAI,mBAAmB,IAAI,QAAQ,iBAAiB,SAAS;GAC/E,MAAM,mBAAmB,0BAA0B,YAAY,QAAQ;AACvE,WAAQ,eAAe,8BAA8B,iBAAiB;AACtE,cAAW,eAAe,UAAU,kBAAkB,SAAS,IAAI;AAEnE,UAAO;IACL,QAAQ,QAAQ;IAChB,MAAM,QAAQ;IACd,SAAS;IACT,QAAQ,YAAY,QAAQ,WAAW,aAAa,iBAAiB;IACrE,UAAU,WAAW,YAAY;IAClC;AAGD,OAAI,QAAQ,KAAM,MAAK,SAAS;WACzB,OAAO;AACd,OAAI,MAAM,kBAAkB,EAAE,OAAO,CAAC;AACtC,UAAO,QAAQ,QAAQ,yBAAyB,OAAO,KAAK,YAAY,CAAC;;AAG3E,SAAO,MAAM,aAAa,KAAK,CAC5B,MAAM,qBAAqB;GAC1B,MAAM,UAAU,2BAA2B,iBAAiB,QAAQ;AACpE,cAAW,iBAAiB,UAAU,SAAS,SAAS,IAAI;AAC5D,WAAQ,eAAe,iCAAiC,QAAQ;AAEhE,UAAO,IAAI,SAAS,iBAAiB,MAAM;IACzC,QAAQ,iBAAiB;IACzB,YAAY,iBAAiB;IAC7B;IACD,CAAC;IACF,CACD,OAAO,UAAU;AAChB,OAAI,MAAM,kBAAkB,EAAE,OAAO,CAAC;AACtC,UAAO,yBAAyB,OAAO,KAAK,YAAY;IACxD;;;AAIR,SAAS,mBAAmB,SAAoC;AAC9D,QAAO,EAAE,OAAO,SAAS;;AAG3B,SAAS,yBACP,OACA,QACA,aACU;CACV,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAO,IAAI,SAAS,KAAK,UAAU,YAAY,QAAQ,CAAC,EAAE;EACxD;EACA,SAAS,EAAE,gBAAgB,oBAAoB;EAChD,CAAC;;AAGJ,SAAS,0BAA0B,YAA6B,SAA2B;CACzF,MAAM,EAAE,OAAO,SAAS,WAAW;CACnC,MAAM,UAAU,QACZ,IAAI,QAAQ,gBAAgB,QAAQ,QAAQ,QAAQ,IAAI,IAAI,EAAE,MAAM,CAAC,GACrE,IAAI,QAAQ,QAAQ,QAAQ;AAChC,MAAK,MAAM,UAAU,QAAQ,EAAE,CAAE,SAAQ,OAAO,OAAO;AACvD,QAAO;;AAGT,SAAgB,2BAA2B,iBAAmC;CAC5E,MAAM,UAAU,IAAI,QAAQ,gBAAgB;AAC5C,SAAQ,OAAO,mBAAmB;AAClC,SAAQ,OAAO,iBAAiB;AAChC,QAAO"}

package/dist/core/request-routing/interceptors/query-param-redirect.mjs

@@ -0,0 +1,22 @@
+//#region src/core/request-routing/interceptors/query-param-redirect.ts
+function handleQueryParamRedirect(request) {
+	const url = new URL(request.url);
+	const redirectTo = url.searchParams.get("return_to") || url.searchParams.get("redirect");
+	if (!redirectTo) return null;
+	if (!isSameOrigin(request.url, redirectTo)) return null;
+	return new Response(null, {
+		status: 301,
+		headers: { location: redirectTo }
+	});
+}
+function isSameOrigin(requestUrl, redirectUrl) {
+	try {
+		return new URL(requestUrl).origin === new URL(redirectUrl, requestUrl).origin;
+	} catch {
+		return false;
+	}
+}
+
+//#endregion
+export { handleQueryParamRedirect };
+//# sourceMappingURL=query-param-redirect.mjs.map

package/dist/core/request-routing/interceptors/query-param-redirect.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-param-redirect.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/query-param-redirect.ts"],"sourcesContent":["export function handleQueryParamRedirect(request: Request): Response | null {\n  const url = new URL(request.url);\n  const redirectTo = url.searchParams.get(\"return_to\") || url.searchParams.get(\"redirect\");\n\n  if (!redirectTo) return null;\n  if (!isSameOrigin(request.url, redirectTo)) return null;\n\n  return new Response(null, {\n    status: 301,\n    headers: { location: redirectTo },\n  });\n}\n\nfunction isSameOrigin(requestUrl: string, redirectUrl: string): boolean {\n  try {\n    return new URL(requestUrl).origin === new URL(redirectUrl, requestUrl).origin;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";AAAA,SAAgB,yBAAyB,SAAmC;CAC1E,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;CAChC,MAAM,aAAa,IAAI,aAAa,IAAI,YAAY,IAAI,IAAI,aAAa,IAAI,WAAW;AAExF,KAAI,CAAC,WAAY,QAAO;AACxB,KAAI,CAAC,aAAa,QAAQ,KAAK,WAAW,CAAE,QAAO;AAEnD,QAAO,IAAI,SAAS,MAAM;EACxB,QAAQ;EACR,SAAS,EAAE,UAAU,YAAY;EAClC,CAAC;;AAGJ,SAAS,aAAa,YAAoB,aAA8B;AACtE,KAAI;AACF,SAAO,IAAI,IAAI,WAAW,CAAC,WAAW,IAAI,IAAI,aAAa,WAAW,CAAC;SACjE;AACN,SAAO"}

package/dist/core/request-routing/interceptors/sfapi-proxy.mjs

@@ -0,0 +1,27 @@
+import { SFAPI_REQUEST_HEADER_ALLOWLIST, STOREFRONT_BUYER_IP_HEADER, STOREFRONT_ID_HEADER } from "../../headers.mjs";
+import { SFAPI_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+
+//#region src/core/request-routing/interceptors/sfapi-proxy.ts
+const handleSfapiProxy = createProxyInterceptor({
+	match: SFAPI_RE,
+	requestHeaders: {
+		allow: SFAPI_REQUEST_HEADER_ALLOWLIST,
+		prepare: (headers, { requestContext, storefrontClient }) => {
+			headers.delete(STOREFRONT_ID_HEADER);
+			if (storefrontClient.storefrontId) headers.set(STOREFRONT_ID_HEADER, storefrontClient.storefrontId);
+			headers.delete(STOREFRONT_BUYER_IP_HEADER);
+			const { buyerIp } = requestContext;
+			if (buyerIp) {
+				headers.set(STOREFRONT_BUYER_IP_HEADER, buyerIp);
+				return;
+			}
+			if (storefrontClient.type === "private") throw new Error("requestContext.buyerIp is required for private Storefront API proxy requests");
+		}
+	},
+	scope: "sfapi-proxy"
+});
+
+//#endregion
+export { handleSfapiProxy };
+//# sourceMappingURL=sfapi-proxy.mjs.map

package/dist/core/request-routing/interceptors/sfapi-proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sfapi-proxy.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/sfapi-proxy.ts"],"sourcesContent":["import {\n  SFAPI_REQUEST_HEADER_ALLOWLIST,\n  STOREFRONT_BUYER_IP_HEADER,\n  STOREFRONT_ID_HEADER,\n} from \"../../headers\";\nimport { SFAPI_RE } from \"../../url\";\nimport { createProxyInterceptor } from \"./proxy\";\n\nexport const handleSfapiProxy = createProxyInterceptor({\n  match: SFAPI_RE,\n  requestHeaders: {\n    allow: SFAPI_REQUEST_HEADER_ALLOWLIST,\n    prepare: (headers, { requestContext, storefrontClient }) => {\n      headers.delete(STOREFRONT_ID_HEADER);\n      if (storefrontClient.storefrontId) {\n        headers.set(STOREFRONT_ID_HEADER, storefrontClient.storefrontId);\n      }\n\n      headers.delete(STOREFRONT_BUYER_IP_HEADER);\n      const { buyerIp } = requestContext;\n      if (buyerIp) {\n        headers.set(STOREFRONT_BUYER_IP_HEADER, buyerIp);\n        return;\n      }\n      if (storefrontClient.type === \"private\") {\n        throw new Error(\n          \"requestContext.buyerIp is required for private Storefront API proxy requests\",\n        );\n      }\n    },\n  },\n  scope: \"sfapi-proxy\",\n});\n"],"mappings":";;;;;AAQA,MAAa,mBAAmB,uBAAuB;CACrD,OAAO;CACP,gBAAgB;EACd,OAAO;EACP,UAAU,SAAS,EAAE,gBAAgB,uBAAuB;AAC1D,WAAQ,OAAO,qBAAqB;AACpC,OAAI,iBAAiB,aACnB,SAAQ,IAAI,sBAAsB,iBAAiB,aAAa;AAGlE,WAAQ,OAAO,2BAA2B;GAC1C,MAAM,EAAE,YAAY;AACpB,OAAI,SAAS;AACX,YAAQ,IAAI,4BAA4B,QAAQ;AAChD;;AAEF,OAAI,iBAAiB,SAAS,UAC5B,OAAM,IAAI,MACR,+EACD;;EAGN;CACD,OAAO;CACR,CAAC"}

package/dist/core/request-routing/interceptors/standard-routes.mjs

@@ -0,0 +1,19 @@
+import { getStandardRouteTarget, isStandardRouteSelfRedirect } from "../../standard-routes/redirects.mjs";
+import { createRedirectLocation, createRedirectResponse } from "./url-redirects.mjs";
+
+//#region src/core/request-routing/interceptors/standard-routes.ts
+function handleStandardRouteRedirects({ request, storefrontClient, routeTemplates }) {
+	const url = new URL(request.url);
+	const target = getStandardRouteTarget({
+		pathname: url.pathname,
+		pathPrefix: storefrontClient.requestContext.i18n.pathPrefix,
+		routeTemplates
+	});
+	if (!target) return null;
+	const location = createRedirectLocation(target, url.searchParams);
+	return isStandardRouteSelfRedirect(request.url, location) ? null : createRedirectResponse(location);
+}
+
+//#endregion
+export { handleStandardRouteRedirects };
+//# sourceMappingURL=standard-routes.mjs.map

package/dist/core/request-routing/interceptors/standard-routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-routes.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/standard-routes.ts"],"sourcesContent":["import type { StorefrontClient } from \"../../../client\";\nimport {\n  getStandardRouteTarget,\n  isStandardRouteSelfRedirect,\n  type ShopifyRouteTemplates,\n} from \"../../standard-routes/index\";\nimport { createRedirectLocation, createRedirectResponse } from \"./url-redirects\";\n\nexport function handleStandardRouteRedirects({\n  request,\n  storefrontClient,\n  routeTemplates,\n}: {\n  request: Request;\n  storefrontClient: StorefrontClient;\n  routeTemplates: ShopifyRouteTemplates;\n}): Response | null {\n  const url = new URL(request.url);\n  const target = getStandardRouteTarget({\n    pathname: url.pathname,\n    pathPrefix: storefrontClient.requestContext.i18n.pathPrefix,\n    routeTemplates,\n  });\n\n  if (!target) return null;\n\n  const location = createRedirectLocation(target, url.searchParams);\n\n  return isStandardRouteSelfRedirect(request.url, location)\n    ? null\n    : createRedirectResponse(location);\n}\n"],"mappings":";;;;AAQA,SAAgB,6BAA6B,EAC3C,SACA,kBACA,kBAKkB;CAClB,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;CAChC,MAAM,SAAS,uBAAuB;EACpC,UAAU,IAAI;EACd,YAAY,iBAAiB,eAAe,KAAK;EACjD;EACD,CAAC;AAEF,KAAI,CAAC,OAAQ,QAAO;CAEpB,MAAM,WAAW,uBAAuB,QAAQ,IAAI,aAAa;AAEjE,QAAO,4BAA4B,QAAQ,KAAK,SAAS,GACrD,OACA,uBAAuB,SAAS"}

package/dist/core/request-routing/interceptors/url-redirects.mjs

@@ -0,0 +1,27 @@
+import { gql } from "../../../graphql/graphql.mjs";
+
+//#region src/core/request-routing/interceptors/url-redirects.ts
+const REDIRECT_QUERY = gql(`query redirects($query:String){urlRedirects(first:1 query:$query){edges{node{target}}}}`);
+const PLACEHOLDER_BASE = "https://0.0.0.0";
+async function handleUrlRedirects({ request, storefrontClient }) {
+	const { pathname, searchParams } = new URL(request.url);
+	const queryPath = pathname.toLowerCase().replace(/\/+$/, "");
+	const target = (await storefrontClient.graphql(REDIRECT_QUERY, { variables: { query: `path:${queryPath}` } })).data?.urlRedirects?.edges[0]?.node.target;
+	if (!target) return null;
+	return createRedirectResponse(createRedirectLocation(target, searchParams));
+}
+function createRedirectLocation(location, searchParams) {
+	const url = new URL(location, PLACEHOLDER_BASE);
+	for (const [key, value] of searchParams) url.searchParams.append(key, value);
+	return url.toString().replace(PLACEHOLDER_BASE, "");
+}
+function createRedirectResponse(location, status = 301) {
+	return new Response(null, {
+		status,
+		headers: { location }
+	});
+}
+
+//#endregion
+export { createRedirectLocation, createRedirectResponse, handleUrlRedirects };
+//# sourceMappingURL=url-redirects.mjs.map

package/dist/core/request-routing/interceptors/url-redirects.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-redirects.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/url-redirects.ts"],"sourcesContent":["import { gql } from \"../../../graphql\";\nimport type { RedirectOptions } from \"../handle-shopify-redirects\";\n\ntype UrlRedirectOptions = Pick<RedirectOptions, \"request\" | \"storefrontClient\">;\n\nconst REDIRECT_QUERY = gql(`\n  query redirects($query: String) {\n    urlRedirects(first: 1, query: $query) {\n      edges {\n        node {\n          target\n        }\n      }\n    }\n  }\n`);\n\n// Used as a base for `new URL()` when constructing relative redirect URLs.\n// Stripped from the output — only needed because `new URL` requires a base for relative paths.\nconst PLACEHOLDER_BASE = \"https://0.0.0.0\";\n\nexport async function handleUrlRedirects({\n  request,\n  storefrontClient,\n}: UrlRedirectOptions): Promise<Response | null> {\n  const url = new URL(request.url);\n  const { pathname, searchParams } = url;\n\n  const queryPath = pathname.toLowerCase().replace(/\\/+$/, \"\");\n  const result = await storefrontClient.graphql(REDIRECT_QUERY, {\n    variables: { query: `path:${queryPath}` },\n  });\n\n  const target = result.data?.urlRedirects?.edges[0]?.node.target;\n  if (!target) return null;\n\n  return createRedirectResponse(createRedirectLocation(target, searchParams));\n}\n\nexport function createRedirectLocation(location: string, searchParams: URLSearchParams): string {\n  const url = new URL(location, PLACEHOLDER_BASE);\n\n  for (const [key, value] of searchParams) {\n    url.searchParams.append(key, value);\n  }\n\n  return url.toString().replace(PLACEHOLDER_BASE, \"\");\n}\n\nexport function createRedirectResponse(location: string, status: number = 301): Response {\n  return new Response(null, {\n    status,\n    headers: { location },\n  });\n}\n"],"mappings":";;;AAKA,MAAA,iBAAA,IAAA,0FAUA;AAIA,MAAA,mBAAA;AAEA,eAAA,mBAAA,EACA,SACA,oBACA;CAEA,MAAA,EAAA,UAAA,iBAAA,IADA,IAAA,QAAA,IACA;CAEA,MAAA,YAAA,SAAA,aAAA,CAAA,QAAA,QAAA,GAAA;CAKA,MAAA,UAAA,MAJA,iBAAA,QAAA,gBAAA,EACA,WAAA,EAAA,OAAA,QAAA,aAAA,EACA,CAAA,EAEA,MAAA,cAAA,MAAA,IAAA,KAAA;AACA,KAAA,CAAA,OAAA,QAAA;AAEA,QAAA,uBAAA,uBAAA,QAAA,aAAA,CAAA;;AAGA,SAAA,uBAAA,UAAA,cAAA;CACA,MAAA,MAAA,IAAA,IAAA,UAAA,iBAAA;AAEA,MAAA,MAAA,CAAA,KAAA,UAAA,aACA,KAAA,aAAA,OAAA,KAAA,MAAA;AAGA,QAAA,IAAA,UAAA,CAAA,QAAA,kBAAA,GAAA;;AAGA,SAAA,uBAAA,UAAA,SAAA,KAAA;AACA,QAAA,IAAA,SAAA,MAAA;EACA;EACA,SAAA,EAAA,UAAA;EACA,CAAA"}

package/dist/core/request-routing/interceptors/well-known.mjs

@@ -0,0 +1,22 @@
+import { PROXY_REQUEST_HEADER_DENYLIST } from "../../headers.mjs";
+import { WELL_KNOWN_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+
+//#region src/core/request-routing/interceptors/well-known.ts
+/**
+* Proxies allowlisted Shopify `.well-known` resources through the headless
+* storefront origin to the Online Store, so first-party services (Apple Pay
+* domain verification, Frontend Event Collector ingress) behave the same way
+* they do on Online Store storefronts. See {@link WELL_KNOWN_RE} for the
+* allowlist.
+*/
+const handleWellKnownProxy = createProxyInterceptor({
+	match: WELL_KNOWN_RE,
+	requestHeaders: { deny: PROXY_REQUEST_HEADER_DENYLIST },
+	redirect: "follow",
+	scope: "well-known-proxy"
+});
+
+//#endregion
+export { handleWellKnownProxy };
+//# sourceMappingURL=well-known.mjs.map

package/dist/core/request-routing/interceptors/well-known.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"well-known.mjs","names":[],"sources":["../../../../src/core/request-routing/interceptors/well-known.ts"],"sourcesContent":["import { PROXY_REQUEST_HEADER_DENYLIST } from \"../../headers\";\nimport { WELL_KNOWN_RE } from \"../../url\";\nimport { createProxyInterceptor } from \"./proxy\";\n\n/**\n * Proxies allowlisted Shopify `.well-known` resources through the headless\n * storefront origin to the Online Store, so first-party services (Apple Pay\n * domain verification, Frontend Event Collector ingress) behave the same way\n * they do on Online Store storefronts. See {@link WELL_KNOWN_RE} for the\n * allowlist.\n */\nexport const handleWellKnownProxy = createProxyInterceptor({\n  match: WELL_KNOWN_RE,\n  requestHeaders: { deny: PROXY_REQUEST_HEADER_DENYLIST },\n  redirect: \"follow\",\n  scope: \"well-known-proxy\",\n});\n"],"mappings":";;;;;;;;;;;;AAWA,MAAa,uBAAuB,uBAAuB;CACzD,OAAO;CACP,gBAAgB,EAAE,MAAM,+BAA+B;CACvD,UAAU;CACV,OAAO;CACR,CAAC"}

package/dist/core/request-routing/registered-routes.d.mts

@@ -0,0 +1,7 @@
+import { CallableRouteHandler, ShopifyRedirectStatus, ShopifyRouteError, ShopifyRouteErrorResult, ShopifyRouteHandler, ShopifyRouteHandlerContext, ShopifyRouteHandlerGroup, ShopifyRouteHandlerResult, ShopifyRouteJsonResult, ShopifyRouteRedirectResult, ShopifyRouteSessionManager } from "./route-types.mjs";
+
+//#region src/core/request-routing/registered-routes.d.ts
+declare function createShopifyRouteHandler<const TPathname extends string, const TMethod extends string>(pathname: TPathname, method: TMethod, handler: (context: ShopifyRouteHandlerContext) => Promise<ShopifyRouteHandlerResult>): ShopifyRouteHandler<TPathname, TMethod>;
+//#endregion
+export { createShopifyRouteHandler };
+//# sourceMappingURL=registered-routes.d.mts.map

package/dist/core/request-routing/registered-routes.mjs

@@ -0,0 +1,72 @@
+//#region src/core/request-routing/registered-routes.ts
+const HTTP_OK_STATUS = 200;
+const HTTP_SEE_OTHER_STATUS = 303;
+const HTTP_METHOD_NOT_ALLOWED_STATUS = 405;
+const HTTP_BAD_REQUEST_STATUS = 400;
+const VALID_REDIRECT_STATUSES = [
+	301,
+	302,
+	303,
+	307,
+	308
+];
+function createShopifyRouteHandler(pathname, method, handler) {
+	return createCallableRouteHandler(pathname, method, handler);
+}
+function createCallableRouteHandler(pathname, method, handler) {
+	return Object.assign(handler, {
+		pathname,
+		method
+	});
+}
+const handleShopifyRouteHandlers = (url, { request, sessionManager, storefrontClient, requestContext, handlers = [] }) => {
+	const context = {
+		request,
+		sessionManager,
+		storefrontClient,
+		requestContext
+	};
+	const routeHandlers = handlers.flatMap((group) => Object.values(group));
+	if (routeHandlers.length === 0) return null;
+	const pathMatches = routeHandlers.filter((entry) => entry.pathname === url.pathname);
+	if (pathMatches.length === 0) return null;
+	const match = pathMatches.find((candidate) => candidate.method === request.method);
+	if (!match) return Promise.resolve(new Response("Method Not Allowed", { status: HTTP_METHOD_NOT_ALLOWED_STATUS }));
+	return match(context).then((result) => createShopifyRouteResponse(result, request));
+};
+function createShopifyRouteResponse(result, request) {
+	if (result.type === "redirect") {
+		const headers = new Headers(result.headers);
+		headers.set("location", resolveRedirectLocation(result.location, request));
+		return new Response(null, {
+			status: getRedirectStatus(result.status),
+			headers
+		});
+	}
+	if (result.type === "error") {
+		const headers = new Headers(result.headers);
+		headers.set("content-type", "application/json");
+		return new Response(JSON.stringify({ error: result.error }), {
+			status: result.status ?? HTTP_BAD_REQUEST_STATUS,
+			headers
+		});
+	}
+	const headers = new Headers(result.headers);
+	headers.set("content-type", "application/json");
+	return new Response(JSON.stringify(result.data), {
+		status: HTTP_OK_STATUS,
+		headers
+	});
+}
+function getRedirectStatus(status) {
+	const redirectStatus = status ?? HTTP_SEE_OTHER_STATUS;
+	if (VALID_REDIRECT_STATUSES.some((validStatus) => validStatus === redirectStatus)) return redirectStatus;
+	throw new Error(`Invalid Shopify route redirect status ${redirectStatus}. Expected one of: ${VALID_REDIRECT_STATUSES.join(", ")}.`);
+}
+function resolveRedirectLocation(location, request) {
+	return new URL(location, new URL(request.url).origin).toString();
+}
+
+//#endregion
+export { createCallableRouteHandler, createShopifyRouteHandler, handleShopifyRouteHandlers };
+//# sourceMappingURL=registered-routes.mjs.map

package/dist/core/request-routing/registered-routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"registered-routes.mjs","names":[],"sources":["../../../src/core/request-routing/registered-routes.ts"],"sourcesContent":["import type {\n  CallableRouteHandler,\n  HydrogenRouteInterceptor,\n  ShopifyRouteHandler,\n  ShopifyRouteHandlerContext,\n  ShopifyRouteHandlerResult,\n  ShopifyRedirectStatus,\n} from \"./route-types\";\n\nexport type {\n  CallableRouteHandler,\n  ShopifyRouteError,\n  ShopifyRouteErrorResult,\n  ShopifyRouteHandler,\n  ShopifyRouteHandlerContext,\n  ShopifyRouteHandlerGroup,\n  ShopifyRouteHandlerResult,\n  ShopifyRouteJsonResult,\n  ShopifyRouteRedirectResult,\n  ShopifyRedirectStatus,\n  ShopifyRouteSessionManager,\n} from \"./route-types\";\n\nconst HTTP_OK_STATUS = 200;\nconst HTTP_SEE_OTHER_STATUS = 303;\nconst HTTP_METHOD_NOT_ALLOWED_STATUS = 405;\nconst HTTP_BAD_REQUEST_STATUS = 400;\nconst VALID_REDIRECT_STATUSES = [\n  301, 302, 303, 307, 308,\n] as const satisfies readonly ShopifyRedirectStatus[];\n\nexport function createShopifyRouteHandler<\n  const TPathname extends string,\n  const TMethod extends string,\n>(\n  pathname: TPathname,\n  method: TMethod,\n  handler: (context: ShopifyRouteHandlerContext) => Promise<ShopifyRouteHandlerResult>,\n): ShopifyRouteHandler<TPathname, TMethod> {\n  return createCallableRouteHandler(pathname, method, handler);\n}\n\nexport function createCallableRouteHandler<\n  const TPathname extends string,\n  const TMethod extends string,\n  TContext,\n  TResult,\n>(\n  pathname: TPathname,\n  method: TMethod,\n  handler: (context: TContext) => Promise<TResult>,\n): CallableRouteHandler<TContext, TResult, TPathname, TMethod> {\n  return Object.assign(handler, { pathname, method });\n}\n\nexport const handleShopifyRouteHandlers: HydrogenRouteInterceptor = (\n  url,\n  { request, sessionManager, storefrontClient, requestContext, handlers = [] },\n) => {\n  const context = { request, sessionManager, storefrontClient, requestContext };\n  const routeHandlers = handlers.flatMap((group) => Object.values(group));\n  if (routeHandlers.length === 0) return null;\n\n  const pathMatches = routeHandlers.filter((entry) => entry.pathname === url.pathname);\n  if (pathMatches.length === 0) return null;\n\n  const match = pathMatches.find((candidate) => candidate.method === request.method);\n  if (!match)\n    return Promise.resolve(\n      new Response(\"Method Not Allowed\", { status: HTTP_METHOD_NOT_ALLOWED_STATUS }),\n    );\n\n  return match(context).then((result) => createShopifyRouteResponse(result, request));\n};\n\nfunction createShopifyRouteResponse(result: ShopifyRouteHandlerResult, request: Request): Response {\n  if (result.type === \"redirect\") {\n    const headers = new Headers(result.headers);\n    headers.set(\"location\", resolveRedirectLocation(result.location, request));\n    return new Response(null, {\n      status: getRedirectStatus(result.status),\n      headers,\n    });\n  }\n\n  if (result.type === \"error\") {\n    const headers = new Headers(result.headers);\n    headers.set(\"content-type\", \"application/json\");\n    return new Response(JSON.stringify({ error: result.error }), {\n      status: result.status ?? HTTP_BAD_REQUEST_STATUS,\n      headers,\n    });\n  }\n\n  const headers = new Headers(result.headers);\n  headers.set(\"content-type\", \"application/json\");\n  return new Response(JSON.stringify(result.data), {\n    status: HTTP_OK_STATUS,\n    headers,\n  });\n}\n\nfunction getRedirectStatus(status: ShopifyRedirectStatus | undefined): ShopifyRedirectStatus {\n  const redirectStatus = status ?? HTTP_SEE_OTHER_STATUS;\n  if (VALID_REDIRECT_STATUSES.some((validStatus) => validStatus === redirectStatus)) {\n    return redirectStatus;\n  }\n\n  throw new Error(\n    `Invalid Shopify route redirect status ${redirectStatus}. Expected one of: ${VALID_REDIRECT_STATUSES.join(\", \")}.`,\n  );\n}\n\nfunction resolveRedirectLocation(location: string, request: Request): string {\n  // Absolute Location headers are the best common denominator: browsers accept\n  // relative redirects, but framework proxy runtimes like Next.js can require\n  // absolute URLs when returning a Response from middleware/proxy code.\n  return new URL(location, new URL(request.url).origin).toString();\n}\n"],"mappings":";AAuBA,MAAM,iBAAiB;AACvB,MAAM,wBAAwB;AAC9B,MAAM,iCAAiC;AACvC,MAAM,0BAA0B;AAChC,MAAM,0BAA0B;CAC9B;CAAK;CAAK;CAAK;CAAK;CACrB;AAED,SAAgB,0BAId,UACA,QACA,SACyC;AACzC,QAAO,2BAA2B,UAAU,QAAQ,QAAQ;;AAG9D,SAAgB,2BAMd,UACA,QACA,SAC6D;AAC7D,QAAO,OAAO,OAAO,SAAS;EAAE;EAAU;EAAQ,CAAC;;AAGrD,MAAa,8BACX,KACA,EAAE,SAAS,gBAAgB,kBAAkB,gBAAgB,WAAW,EAAE,OACvE;CACH,MAAM,UAAU;EAAE;EAAS;EAAgB;EAAkB;EAAgB;CAC7E,MAAM,gBAAgB,SAAS,SAAS,UAAU,OAAO,OAAO,MAAM,CAAC;AACvE,KAAI,cAAc,WAAW,EAAG,QAAO;CAEvC,MAAM,cAAc,cAAc,QAAQ,UAAU,MAAM,aAAa,IAAI,SAAS;AACpF,KAAI,YAAY,WAAW,EAAG,QAAO;CAErC,MAAM,QAAQ,YAAY,MAAM,cAAc,UAAU,WAAW,QAAQ,OAAO;AAClF,KAAI,CAAC,MACH,QAAO,QAAQ,QACb,IAAI,SAAS,sBAAsB,EAAE,QAAQ,gCAAgC,CAAC,CAC/E;AAEH,QAAO,MAAM,QAAQ,CAAC,MAAM,WAAW,2BAA2B,QAAQ,QAAQ,CAAC;;AAGrF,SAAS,2BAA2B,QAAmC,SAA4B;AACjG,KAAI,OAAO,SAAS,YAAY;EAC9B,MAAM,UAAU,IAAI,QAAQ,OAAO,QAAQ;AAC3C,UAAQ,IAAI,YAAY,wBAAwB,OAAO,UAAU,QAAQ,CAAC;AAC1E,SAAO,IAAI,SAAS,MAAM;GACxB,QAAQ,kBAAkB,OAAO,OAAO;GACxC;GACD,CAAC;;AAGJ,KAAI,OAAO,SAAS,SAAS;EAC3B,MAAM,UAAU,IAAI,QAAQ,OAAO,QAAQ;AAC3C,UAAQ,IAAI,gBAAgB,mBAAmB;AAC/C,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,OAAO,OAAO,CAAC,EAAE;GAC3D,QAAQ,OAAO,UAAU;GACzB;GACD,CAAC;;CAGJ,MAAM,UAAU,IAAI,QAAQ,OAAO,QAAQ;AAC3C,SAAQ,IAAI,gBAAgB,mBAAmB;AAC/C,QAAO,IAAI,SAAS,KAAK,UAAU,OAAO,KAAK,EAAE;EAC/C,QAAQ;EACR;EACD,CAAC;;AAGJ,SAAS,kBAAkB,QAAkE;CAC3F,MAAM,iBAAiB,UAAU;AACjC,KAAI,wBAAwB,MAAM,gBAAgB,gBAAgB,eAAe,CAC/E,QAAO;AAGT,OAAM,IAAI,MACR,yCAAyC,eAAe,qBAAqB,wBAAwB,KAAK,KAAK,CAAC,GACjH;;AAGH,SAAS,wBAAwB,UAAkB,SAA0B;AAI3E,QAAO,IAAI,IAAI,UAAU,IAAI,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU"}

package/dist/core/request-routing/route-types.d.mts

@@ -0,0 +1,56 @@
+import { ShopifyRequestContext } from "../request-context.mjs";
+import { StorefrontClient } from "../../client/types.mjs";
+import { ShopifyRouteTemplates } from "../standard-routes/types.mjs";
+
+//#region src/core/request-routing/route-types.d.ts
+type Awaitable<T> = T | Promise<T>;
+type ShopifyRouteSessionManager = {
+  getSessionOrigin(): Awaitable<string>;
+  getSessionItem(key: string): Awaitable<unknown>;
+  setSessionItem(key: string, value: unknown): Awaitable<void>;
+  removeSessionItem(key: string): Awaitable<void>;
+  commit?(): Awaitable<HeadersInit | void>;
+};
+type ShopifyRouteHandlerContext = {
+  request: Request;
+  sessionManager: ShopifyRouteSessionManager;
+  storefrontClient: StorefrontClient;
+  requestContext: ShopifyRequestContext;
+};
+type ShopifyRouteJsonResult<TData = unknown> = {
+  type: "json";
+  data: TData;
+  headers?: HeadersInit;
+};
+type ShopifyRedirectStatus = 301 | 302 | 303 | 307 | 308;
+type ShopifyRouteRedirectResult = {
+  type: "redirect";
+  location: string; /** HTTP redirect status. Defaults to 303 (See Other). */
+  status?: ShopifyRedirectStatus;
+  headers?: HeadersInit;
+};
+type ShopifyRouteError = {
+  code: string;
+  message: string;
+};
+type ShopifyRouteErrorResult<TError extends ShopifyRouteError = ShopifyRouteError> = {
+  type: "error";
+  error: TError;
+  status?: number;
+  headers?: HeadersInit;
+};
+type ShopifyRouteHandlerResult<TData = unknown, TError extends ShopifyRouteError = ShopifyRouteError> = ShopifyRouteJsonResult<TData> | ShopifyRouteRedirectResult | ShopifyRouteErrorResult<TError>;
+type CallableRouteHandler<TContext, TResult, TPathname extends string = string, TMethod extends string = string> = ((context: TContext) => Promise<TResult>) & {
+  readonly pathname: TPathname;
+  readonly method: TMethod;
+};
+type ShopifyRouteHandler<TPathname extends string = string, TMethod extends string = string> = CallableRouteHandler<ShopifyRouteHandlerContext, ShopifyRouteHandlerResult, TPathname, TMethod>;
+type ShopifyRouteHandlerGroup = Record<string, ShopifyRouteHandler>;
+type HydrogenRoutesOptions = ShopifyRouteHandlerContext & {
+  routeTemplates?: ShopifyRouteTemplates;
+  handlers?: readonly ShopifyRouteHandlerGroup[];
+};
+type HydrogenRouteHandler<TExtraOptions extends object = object> = (options: HydrogenRoutesOptions & TExtraOptions) => null | Promise<Response>;
+//#endregion
+export { CallableRouteHandler, HydrogenRouteHandler, ShopifyRedirectStatus, ShopifyRouteError, ShopifyRouteErrorResult, ShopifyRouteHandler, ShopifyRouteHandlerContext, ShopifyRouteHandlerGroup, ShopifyRouteHandlerResult, ShopifyRouteJsonResult, ShopifyRouteRedirectResult, ShopifyRouteSessionManager };
+//# sourceMappingURL=route-types.d.mts.map

package/dist/core/request-routing/safe-apply-response-headers.mjs

@@ -0,0 +1,16 @@
+//#region src/core/request-routing/safe-apply-response-headers.ts
+function safeApplyResponseHeaders(response, requestContext) {
+	try {
+		requestContext.applyResponseHeaders(response.headers);
+		return response;
+	} catch (error) {
+		if (!(error instanceof TypeError)) throw error;
+	}
+	const mutableResponse = new Response(response.body, response);
+	requestContext.applyResponseHeaders(mutableResponse.headers);
+	return mutableResponse;
+}
+
+//#endregion
+export { safeApplyResponseHeaders };
+//# sourceMappingURL=safe-apply-response-headers.mjs.map

package/dist/core/request-routing/safe-apply-response-headers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-apply-response-headers.mjs","names":[],"sources":["../../../src/core/request-routing/safe-apply-response-headers.ts"],"sourcesContent":["import type { ShopifyRequestContext } from \"../request-context\";\n\nexport function safeApplyResponseHeaders(\n  response: Response,\n  requestContext: Pick<ShopifyRequestContext, \"applyResponseHeaders\">,\n): Response {\n  try {\n    requestContext.applyResponseHeaders(response.headers);\n    return response;\n  } catch (error) {\n    if (!(error instanceof TypeError)) throw error;\n  }\n\n  const mutableResponse = new Response(response.body, response);\n  requestContext.applyResponseHeaders(mutableResponse.headers);\n  return mutableResponse;\n}\n"],"mappings":";AAEA,SAAgB,yBACd,UACA,gBACU;AACV,KAAI;AACF,iBAAe,qBAAqB,SAAS,QAAQ;AACrD,SAAO;UACA,OAAO;AACd,MAAI,EAAE,iBAAiB,WAAY,OAAM;;CAG3C,MAAM,kBAAkB,IAAI,SAAS,SAAS,MAAM,SAAS;AAC7D,gBAAe,qBAAqB,gBAAgB,QAAQ;AAC5D,QAAO"}