@shopify/hydrogen 2026.4.5 → 2026.10.0-preview.2

package/dist/development/core/request-routing/handle-shopify-routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-shopify-routes.mjs","names":[],"sources":["../../../../src/core/request-routing/handle-shopify-routes.ts"],"sourcesContent":["import { handleProductVariantId } from \"../product/accept-variant-id\";\nimport { handleAjaxApi } from \"./interceptors/ajax-api\";\nimport { handleShopifyApiProxy } from \"./interceptors/api-proxy\";\nimport { handleCheckoutRedirect } from \"./interceptors/checkout\";\nimport { handleMcpProxy } from \"./interceptors/mcp-proxy\";\nimport { handleSfapiProxy } from \"./interceptors/sfapi-proxy\";\nimport { handleWellKnownProxy } from \"./interceptors/well-known\";\nimport { handleShopifyRouteHandlers } from \"./registered-routes\";\nimport type { HydrogenRouteHandler, HydrogenRouteInterceptor } from \"./route-types\";\nimport { safeApplyResponseHeaders } from \"./safe-apply-response-headers\";\n\nconst SHOPIFY_ROUTE_INTERCEPTORS = [\n  handleShopifyApiProxy,\n  handleSfapiProxy,\n  handleProductVariantId,\n  handleShopifyRouteHandlers,\n  handleCheckoutRedirect,\n  handleWellKnownProxy,\n  handleMcpProxy,\n  handleAjaxApi,\n] satisfies readonly HydrogenRouteInterceptor[];\n\n/**\n * Matches a request against Shopify standard routes and any registered handler\n * groups, returning a raw `Response` (redirect or JSON) when one matches, or\n * `null` when none do. Use it as the first step of request handling, before\n * framework routing. Matched responses already include request-context\n * response headers.\n */\nexport const handleShopifyRoutes: HydrogenRouteHandler = (options) => {\n  if (options.requestContext !== options.storefrontClient.requestContext) {\n    throw new Error(\n      \"handleShopifyRoutes must receive the same requestContext used by storefrontClient.\",\n    );\n  }\n\n  const url = new URL(options.request.url);\n\n  for (const interceptor of SHOPIFY_ROUTE_INTERCEPTORS) {\n    const responsePromise = interceptor(url, options);\n    if (!responsePromise) continue;\n\n    return responsePromise.then((response) =>\n      safeApplyResponseHeaders(response, options.requestContext),\n    );\n  }\n\n  return null;\n};\n"],"mappings":";;;;;;;;;;;AAWA,MAAM,6BAA6B;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;;;AASD,MAAa,uBAA6C,YAAY;AACpE,KAAI,QAAQ,mBAAmB,QAAQ,iBAAiB,eACtD,OAAM,IAAI,MACR,qFACD;CAGH,MAAM,MAAM,IAAI,IAAI,QAAQ,QAAQ,IAAI;AAExC,MAAK,MAAM,eAAe,4BAA4B;EACpD,MAAM,kBAAkB,YAAY,KAAK,QAAQ;AACjD,MAAI,CAAC,gBAAiB;AAEtB,SAAO,gBAAgB,MAAM,aAC3B,yBAAyB,UAAU,QAAQ,eAAe,CAC3D;;AAGH,QAAO"}

package/dist/development/core/request-routing/interceptors/admin-redirect.mjs

@@ -0,0 +1,12 @@
+//#region src/core/request-routing/interceptors/admin-redirect.ts
+function handleAdminRedirect({ request, storefrontClient }) {
+	if (new URL(request.url).pathname !== "/admin") return null;
+	return new Response(null, {
+		status: 301,
+		headers: { location: new URL("/admin", storefrontClient.storeUrl).toString() }
+	});
+}
+
+//#endregion
+export { handleAdminRedirect };
+//# sourceMappingURL=admin-redirect.mjs.map

package/dist/development/core/request-routing/interceptors/admin-redirect.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-redirect.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/admin-redirect.ts"],"sourcesContent":["import type { RedirectOptions } from \"../handle-shopify-redirects\";\n\ntype AdminRedirectOptions = Pick<RedirectOptions, \"request\" | \"storefrontClient\">;\n\nexport function handleAdminRedirect({\n  request,\n  storefrontClient,\n}: AdminRedirectOptions): Response | null {\n  const url = new URL(request.url);\n  if (url.pathname !== \"/admin\") return null;\n\n  return new Response(null, {\n    status: 301,\n    headers: { location: new URL(\"/admin\", storefrontClient.storeUrl).toString() },\n  });\n}\n"],"mappings":";AAIA,SAAgB,oBAAoB,EAClC,SACA,oBACwC;AAExC,KAAI,IADY,IAAI,QAAQ,IACrB,CAAC,aAAa,SAAU,QAAO;AAEtC,QAAO,IAAI,SAAS,MAAM;EACxB,QAAQ;EACR,SAAS,EAAE,UAAU,IAAI,IAAI,UAAU,iBAAiB,SAAS,CAAC,UAAU,EAAE;EAC/E,CAAC"}

package/dist/development/core/request-routing/interceptors/ajax-api.mjs

@@ -0,0 +1,16 @@
+import { AJAX_API_REQUEST_HEADER_ALLOWLIST } from "../../headers.mjs";
+import { AJAX_CART_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+
+//#region src/core/request-routing/interceptors/ajax-api.ts
+const rewriteShopifyJsPathname = (pathname) => pathname.replace(/\.js$/i, ".json");
+const handleAjaxApi = createProxyInterceptor({
+	match: AJAX_CART_RE,
+	requestHeaders: { allow: AJAX_API_REQUEST_HEADER_ALLOWLIST },
+	rewritePathname: rewriteShopifyJsPathname,
+	scope: "ajax-api"
+});
+
+//#endregion
+export { handleAjaxApi, rewriteShopifyJsPathname };
+//# sourceMappingURL=ajax-api.mjs.map

package/dist/development/core/request-routing/interceptors/ajax-api.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ajax-api.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/ajax-api.ts"],"sourcesContent":["import { AJAX_API_REQUEST_HEADER_ALLOWLIST } from \"../../headers\";\nimport { AJAX_CART_RE } from \"../../url\";\nimport { createProxyInterceptor } from \"./proxy\";\n\n// Known workaround for Shopify server redirects on `.js` endpoints.\nexport const rewriteShopifyJsPathname = (pathname: string): string =>\n  pathname.replace(/\\.js$/i, \".json\");\n\nexport const handleAjaxApi = createProxyInterceptor({\n  match: AJAX_CART_RE,\n  requestHeaders: { allow: AJAX_API_REQUEST_HEADER_ALLOWLIST },\n  rewritePathname: rewriteShopifyJsPathname,\n  scope: \"ajax-api\",\n});\n"],"mappings":";;;;;AAKA,MAAa,4BAA4B,aACvC,SAAS,QAAQ,UAAU,QAAQ;AAErC,MAAa,gBAAgB,uBAAuB;CAClD,OAAO;CACP,gBAAgB,EAAE,OAAO,mCAAmC;CAC5D,iBAAiB;CACjB,OAAO;CACR,CAAC"}

package/dist/development/core/request-routing/interceptors/api-proxy.mjs

@@ -0,0 +1,20 @@
+import { PROXY_REQUEST_HEADER_DENYLIST } from "../../headers.mjs";
+import { SHOPIFY_API_PROXY_PREFIX, SHOPIFY_API_PROXY_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+import { rewriteShopifyJsPathname } from "./ajax-api.mjs";
+
+//#region src/core/request-routing/interceptors/api-proxy.ts
+const handleShopifyApiProxy = createProxyInterceptor({
+	match: SHOPIFY_API_PROXY_RE,
+	requestHeaders: { deny: PROXY_REQUEST_HEADER_DENYLIST },
+	rewritePathname: (pathname) => {
+		const upstreamPathname = "/" + pathname.slice(SHOPIFY_API_PROXY_PREFIX.length).replace(/^\/+/, "");
+		if (upstreamPathname.startsWith("/cdn/")) throw new Error("CDN proxy is not supported.");
+		return rewriteShopifyJsPathname(upstreamPathname);
+	},
+	scope: "shopify-api-proxy"
+});
+
+//#endregion
+export { handleShopifyApiProxy };
+//# sourceMappingURL=api-proxy.mjs.map

package/dist/development/core/request-routing/interceptors/api-proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-proxy.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/api-proxy.ts"],"sourcesContent":["import { PROXY_REQUEST_HEADER_DENYLIST } from \"../../headers\";\nimport { SHOPIFY_API_PROXY_PREFIX, SHOPIFY_API_PROXY_RE } from \"../../url\";\nimport { rewriteShopifyJsPathname } from \"./ajax-api\";\nimport { createProxyInterceptor } from \"./proxy\";\n\nexport const handleShopifyApiProxy = createProxyInterceptor({\n  match: SHOPIFY_API_PROXY_RE,\n  requestHeaders: { deny: PROXY_REQUEST_HEADER_DENYLIST },\n  rewritePathname: (pathname) => {\n    const upstreamPathname =\n      \"/\" + pathname.slice(SHOPIFY_API_PROXY_PREFIX.length).replace(/^\\/+/, \"\");\n\n    if (upstreamPathname.startsWith(\"/cdn/\")) {\n      throw new Error(\"CDN proxy is not supported.\");\n    }\n\n    return rewriteShopifyJsPathname(upstreamPathname);\n  },\n  scope: \"shopify-api-proxy\",\n});\n"],"mappings":";;;;;;AAKA,MAAa,wBAAwB,uBAAuB;CAC1D,OAAO;CACP,gBAAgB,EAAE,MAAM,+BAA+B;CACvD,kBAAkB,aAAa;EAC7B,MAAM,mBACJ,MAAM,SAAS,MAAM,yBAAyB,OAAO,CAAC,QAAQ,QAAQ,GAAG;AAE3E,MAAI,iBAAiB,WAAW,QAAQ,CACtC,OAAM,IAAI,MAAM,8BAA8B;AAGhD,SAAO,yBAAyB,iBAAiB;;CAEnD,OAAO;CACR,CAAC"}

package/dist/development/core/request-routing/interceptors/checkout.mjs

@@ -0,0 +1,58 @@
+import { getLogger } from "../../logging/logging.mjs";
+import { CHECKOUT_RE, isHydrogenServerHandoffPath } from "../../url.mjs";
+import { getCart, getCartId } from "../../cart/get-cart.mjs";
+
+//#region src/core/request-routing/interceptors/checkout.ts
+const log = getLogger("checkout");
+const MOCK_SHOP_CART_PERMALINK_ORIGIN = "https://demostore.mock.shop";
+const handleCheckoutRedirect = (url, { request, storefrontClient }) => {
+	if (!isHydrogenServerHandoffPath(url.pathname)) return null;
+	if (request.method !== "GET" && request.method !== "HEAD") return Promise.resolve(new Response("Method Not Allowed", { status: 405 }));
+	return (CHECKOUT_RE.test(url.pathname) ? getCheckoutRedirectUrl(request, storefrontClient) : getCartRedirectUrl(request, storefrontClient)).then((redirectUrl) => {
+		if (redirectUrl.pathname !== "/") {
+			mergeSearchParams(redirectUrl, url.searchParams);
+			redirectUrl.searchParams.set("payment", url.searchParams.get("payment") ?? "shop_pay");
+		}
+		return new Response(null, {
+			status: 302,
+			headers: { location: redirectUrl.toString() }
+		});
+	}).catch((error) => {
+		log.error("checkout redirect request failed", { error });
+		const message = error instanceof Error ? error.message : "Internal redirect error";
+		return new Response(JSON.stringify({ error: message }), {
+			status: 502,
+			headers: { "content-type": "application/json" }
+		});
+	});
+};
+async function getCheckoutRedirectUrl(request, storefrontClient) {
+	const cartId = getCartId(request);
+	if (!cartId) return new URL("/", request.url);
+	const result = await getCart(cartId, storefrontClient);
+	return result.cart?.checkoutUrl ? new URL(result.cart.checkoutUrl) : new URL("/", request.url);
+}
+async function getCartRedirectUrl(request, storefrontClient) {
+	const sourceUrl = new URL(request.url);
+	const redirectUrl = new URL(sourceUrl.pathname, getCartPermalinkOrigin(storefrontClient.storeUrl));
+	const cartId = getCartId(request);
+	if (!cartId) return redirectUrl;
+	try {
+		const result = await getCart(cartId, storefrontClient);
+		if (result.cart?.checkoutUrl) mergeSearchParams(redirectUrl, new URL(result.cart.checkoutUrl).searchParams);
+	} catch (error) {
+		log.warn("checkout redirect could not load cart permalink tracking params", { error });
+	}
+	return redirectUrl;
+}
+function getCartPermalinkOrigin(storeUrl) {
+	const url = new URL(storeUrl);
+	return url.hostname === "mock.shop" ? MOCK_SHOP_CART_PERMALINK_ORIGIN : url.origin;
+}
+function mergeSearchParams(target, source) {
+	for (const [key, value] of source) if (!target.searchParams.has(key)) target.searchParams.append(key, value);
+}
+
+//#endregion
+export { handleCheckoutRedirect };
+//# sourceMappingURL=checkout.mjs.map

package/dist/development/core/request-routing/interceptors/checkout.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/checkout.ts"],"sourcesContent":["import type { StorefrontClient } from \"../../../client\";\nimport { getCart, getCartId } from \"../../cart/get-cart\";\nimport { getLogger } from \"../../logging\";\nimport { CHECKOUT_RE, isHydrogenServerHandoffPath } from \"../../url\";\nimport type { HydrogenRouteInterceptor } from \"../route-types\";\n\nconst log = getLogger(\"checkout\");\nconst MOCK_SHOP_CART_PERMALINK_ORIGIN = \"https://demostore.mock.shop\";\n\nexport const handleCheckoutRedirect: HydrogenRouteInterceptor = (\n  url,\n  { request, storefrontClient },\n) => {\n  if (!isHydrogenServerHandoffPath(url.pathname)) {\n    return null;\n  }\n\n  if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n    return Promise.resolve(new Response(\"Method Not Allowed\", { status: 405 }));\n  }\n\n  const redirectUrlPromise = CHECKOUT_RE.test(url.pathname)\n    ? getCheckoutRedirectUrl(request, storefrontClient)\n    : getCartRedirectUrl(request, storefrontClient);\n\n  return redirectUrlPromise\n    .then((redirectUrl) => {\n      if (redirectUrl.pathname !== \"/\") {\n        mergeSearchParams(redirectUrl, url.searchParams);\n        redirectUrl.searchParams.set(\"payment\", url.searchParams.get(\"payment\") ?? \"shop_pay\");\n      }\n\n      return new Response(null, {\n        status: 302,\n        headers: { location: redirectUrl.toString() },\n      });\n    })\n    .catch((error) => {\n      log.error(\"checkout redirect request failed\", { error });\n      const message = error instanceof Error ? error.message : \"Internal redirect error\";\n\n      return new Response(JSON.stringify({ error: message }), {\n        status: 502,\n        headers: { \"content-type\": \"application/json\" },\n      });\n    });\n};\n\nasync function getCheckoutRedirectUrl(\n  request: Request,\n  storefrontClient: StorefrontClient,\n): Promise<URL> {\n  const cartId = getCartId(request);\n  if (!cartId) return new URL(\"/\", request.url);\n\n  const result = await getCart(cartId, storefrontClient);\n  return result.cart?.checkoutUrl ? new URL(result.cart.checkoutUrl) : new URL(\"/\", request.url);\n}\n\nasync function getCartRedirectUrl(\n  request: Request,\n  storefrontClient: StorefrontClient,\n): Promise<URL> {\n  const sourceUrl = new URL(request.url);\n  const redirectUrl = new URL(\n    sourceUrl.pathname,\n    getCartPermalinkOrigin(storefrontClient.storeUrl),\n  );\n\n  const cartId = getCartId(request);\n  if (!cartId) return redirectUrl;\n\n  try {\n    const result = await getCart(cartId, storefrontClient);\n    if (result.cart?.checkoutUrl) {\n      mergeSearchParams(redirectUrl, new URL(result.cart.checkoutUrl).searchParams);\n    }\n  } catch (error) {\n    log.warn(\"checkout redirect could not load cart permalink tracking params\", { error });\n  }\n\n  return redirectUrl;\n}\n\nfunction getCartPermalinkOrigin(storeUrl: string): string {\n  const url = new URL(storeUrl);\n  return url.hostname === \"mock.shop\" ? MOCK_SHOP_CART_PERMALINK_ORIGIN : url.origin;\n}\n\nfunction mergeSearchParams(target: URL, source: URLSearchParams): void {\n  for (const [key, value] of source) {\n    if (!target.searchParams.has(key)) target.searchParams.append(key, value);\n  }\n}\n"],"mappings":";;;;;AAMA,MAAM,MAAM,UAAU,WAAW;AACjC,MAAM,kCAAkC;AAExC,MAAa,0BACX,KACA,EAAE,SAAS,uBACR;AACH,KAAI,CAAC,4BAA4B,IAAI,SAAS,CAC5C,QAAO;AAGT,KAAI,QAAQ,WAAW,SAAS,QAAQ,WAAW,OACjD,QAAO,QAAQ,QAAQ,IAAI,SAAS,sBAAsB,EAAE,QAAQ,KAAK,CAAC,CAAC;AAO7E,SAJ2B,YAAY,KAAK,IAAI,SAAS,GACrD,uBAAuB,SAAS,iBAAiB,GACjD,mBAAmB,SAAS,iBAAiB,EAG9C,MAAM,gBAAgB;AACrB,MAAI,YAAY,aAAa,KAAK;AAChC,qBAAkB,aAAa,IAAI,aAAa;AAChD,eAAY,aAAa,IAAI,WAAW,IAAI,aAAa,IAAI,UAAU,IAAI,WAAW;;AAGxF,SAAO,IAAI,SAAS,MAAM;GACxB,QAAQ;GACR,SAAS,EAAE,UAAU,YAAY,UAAU,EAAE;GAC9C,CAAC;GACF,CACD,OAAO,UAAU;AAChB,MAAI,MAAM,oCAAoC,EAAE,OAAO,CAAC;EACxD,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AAEzD,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,SAAS,CAAC,EAAE;GACtD,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAChD,CAAC;GACF;;AAGN,eAAe,uBACb,SACA,kBACc;CACd,MAAM,SAAS,UAAU,QAAQ;AACjC,KAAI,CAAC,OAAQ,QAAO,IAAI,IAAI,KAAK,QAAQ,IAAI;CAE7C,MAAM,SAAS,MAAM,QAAQ,QAAQ,iBAAiB;AACtD,QAAO,OAAO,MAAM,cAAc,IAAI,IAAI,OAAO,KAAK,YAAY,GAAG,IAAI,IAAI,KAAK,QAAQ,IAAI;;AAGhG,eAAe,mBACb,SACA,kBACc;CACd,MAAM,YAAY,IAAI,IAAI,QAAQ,IAAI;CACtC,MAAM,cAAc,IAAI,IACtB,UAAU,UACV,uBAAuB,iBAAiB,SAAS,CAClD;CAED,MAAM,SAAS,UAAU,QAAQ;AACjC,KAAI,CAAC,OAAQ,QAAO;AAEpB,KAAI;EACF,MAAM,SAAS,MAAM,QAAQ,QAAQ,iBAAiB;AACtD,MAAI,OAAO,MAAM,YACf,mBAAkB,aAAa,IAAI,IAAI,OAAO,KAAK,YAAY,CAAC,aAAa;UAExE,OAAO;AACd,MAAI,KAAK,mEAAmE,EAAE,OAAO,CAAC;;AAGxF,QAAO;;AAGT,SAAS,uBAAuB,UAA0B;CACxD,MAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAO,IAAI,aAAa,cAAc,kCAAkC,IAAI;;AAG9E,SAAS,kBAAkB,QAAa,QAA+B;AACrE,MAAK,MAAM,CAAC,KAAK,UAAU,OACzB,KAAI,CAAC,OAAO,aAAa,IAAI,IAAI,CAAE,QAAO,aAAa,OAAO,KAAK,MAAM"}

package/dist/development/core/request-routing/interceptors/graphiql.mjs

@@ -0,0 +1,46 @@
+import { _taggedTemplateLiteral } from "../../../_virtual/_@oxc-project_runtime@0.127.0/helpers/taggedTemplateLiteral.mjs";
+
+//#region src/core/request-routing/interceptors/graphiql.ts
+var _templateObject;
+const DEV_SCHEMA_FETCH_TIMEOUT_MS = 1e4;
+const handleGraphiql = (url, { request, storefrontClient, graphiql: graphiqlOptions }) => {
+	if (request.method !== "GET" || url.pathname !== "/graphiql") return null;
+	return createGraphiqlResponse(storefrontClient, graphiqlOptions);
+};
+async function createGraphiqlResponse(storefrontClient, graphiqlOptions) {
+	const schemas = {};
+	schemas.storefront = {
+		name: "Storefront API",
+		authHeader: "X-Shopify-Storefront-Access-Token",
+		apiUrl: `${storefrontClient.storeUrl}/api/unstable/graphql.json`,
+		icon: "SF"
+	};
+	if (graphiqlOptions?.customerAccount) {
+		const { apiUrl, accessToken, schemaUrl } = graphiqlOptions.customerAccount;
+		try {
+			const schemaJson = await (await fetch(schemaUrl, { signal: AbortSignal.timeout(DEV_SCHEMA_FETCH_TIMEOUT_MS) })).json();
+			if (typeof schemaJson === "object" && schemaJson !== null) schemas["customer-account"] = {
+				name: "Customer Account API",
+				value: schemaJson,
+				authHeader: "Authorization",
+				accessToken,
+				apiUrl,
+				icon: "CA"
+			};
+		} catch {}
+	}
+	const favicon = "https://avatars.githubusercontent.com/u/12972006?s=48&v=4";
+	const html = String.raw;
+	return new Response(html(_templateObject || (_templateObject = _taggedTemplateLiteral([
+		"\n      <!DOCTYPE html>\n      <html lang=\"en\">\n        <head>\n          <title>GraphiQL</title>\n          <link rel=\"icon\" type=\"image/x-icon\" href=\"",
+		"\" />\n          <meta charset=\"utf-8\" />\n          <style>\n            body {\n              height: 100%;\n              margin: 0;\n              width: 100%;\n              overflow: hidden;\n              background-color: hsl(219, 29%, 18%);\n            }\n            #graphiql {\n              height: 100vh;\n            }\n            #graphiql > .placeholder {\n              color: slategray;\n              width: fit-content;\n              margin: 40px auto;\n              font-family: Arial;\n            }\n            .graphiql-api-toolbar-label {\n              position: absolute;\n              bottom: -6px;\n              right: -4px;\n              font-size: 8px;\n            }\n          </style>\n          <link rel=\"stylesheet\" href=\"https://esm.sh/graphiql/dist/style.css\" />\n          <link rel=\"stylesheet\" href=\"https://esm.sh/@graphiql/plugin-explorer/dist/style.css\" />\n          <script type=\"importmap\">\n            {\n              \"imports\": {\n                \"react\": \"https://esm.sh/react@19.1.0\",\n                \"react/jsx-runtime\": \"https://esm.sh/react@19.1.0/jsx-runtime\",\n                \"react-dom\": \"https://esm.sh/react-dom@19.1.0\",\n                \"react-dom/client\": \"https://esm.sh/react-dom@19.1.0/client\",\n                \"graphql\": \"https://esm.sh/graphql@16.11.0\",\n                \"graphiql\": \"https://esm.sh/graphiql?standalone&external=react,react-dom,@graphiql/react,graphql\",\n                \"@graphiql/plugin-explorer\": \"https://esm.sh/@graphiql/plugin-explorer?standalone&external=react,@graphiql/react,graphql\",\n                \"@graphiql/react\": \"https://esm.sh/@graphiql/react?standalone&external=react,react-dom,graphql\",\n                \"@graphiql/toolkit\": \"https://esm.sh/@graphiql/toolkit?standalone&external=graphql\"\n              }\n            }\n          <\/script>\n          <script type=\"module\">\n            import React from \"react\";\n            import ReactDOM from \"react-dom/client\";\n            import { GraphiQL, HISTORY_PLUGIN } from \"graphiql\";\n            import { createGraphiQLFetcher } from \"@graphiql/toolkit\";\n            import { explorerPlugin } from \"@graphiql/plugin-explorer\";\n            import { ToolbarButton } from \"@graphiql/react\";\n            import createJSONWorker from \"https://esm.sh/monaco-editor/esm/vs/language/json/json.worker.js?worker\";\n            import createGraphQLWorker from \"https://esm.sh/monaco-graphql/esm/graphql.worker.js?worker\";\n            import createEditorWorker from \"https://esm.sh/monaco-editor/esm/vs/editor/editor.worker.js?worker\";\n            import { parse, print } from \"graphql\";\n\n            globalThis.MonacoEnvironment = {\n              getWorker(_workerId, label) {\n                switch (label) {\n                  case \"json\":\n                    return createJSONWorker();\n                  case \"graphql\":\n                    return createGraphQLWorker();\n                }\n                return createEditorWorker();\n              },\n            };\n\n            const windowUrl = new URL(document.URL);\n            const startingSchemaKey = windowUrl.searchParams.get(\"schema\") || \"storefront\";\n\n            let initialQuery = \"{ shop { name } }\";\n            if (windowUrl.searchParams.has(\"query\")) {\n              initialQuery = decodeURIComponent(windowUrl.searchParams.get(\"query\") ?? initialQuery);\n            }\n\n            initialQuery = print(parse(initialQuery));\n\n            let variables;\n            if (windowUrl.searchParams.has(\"variables\")) {\n              variables = decodeURIComponent(windowUrl.searchParams.get(\"variables\") ?? \"\");\n            }\n\n            if (variables) {\n              variables = JSON.stringify(JSON.parse(variables), null, 2);\n            }\n\n            const schemas = ",
+		";\n\n            let lastActiveTabIndex = -1;\n            let lastTabAmount = -1;\n\n            const TAB_STATE_KEY = \"graphiql:tabState\";\n            const storage = {\n              getTabState: () => JSON.parse(localStorage.getItem(TAB_STATE_KEY)),\n              setTabState: (state) => localStorage.setItem(TAB_STATE_KEY, JSON.stringify(state)),\n            };\n\n            let nextSchemaKey;\n\n            function App() {\n              const [activeSchema, setActiveSchema] = React.useState(startingSchemaKey);\n\n              const schema = schemas[activeSchema];\n\n              if (!schema) {\n                throw new Error(\"No schema found for \" + activeSchema);\n              }\n\n              const requestHeaders = schema.accessToken\n                ? { [schema.authHeader]: schema.accessToken }\n                : {};\n\n              const fetcher = createGraphiQLFetcher({\n                url: schema.apiUrl,\n                headers: requestHeaders,\n                enableIncrementalDelivery: false,\n              });\n\n              function createJsonFetcher(options, httpFetch) {\n                if (activeSchema === \"storefront\") {\n                  return fetcher(options, httpFetch);\n                } else {\n                  if (options.operationName === \"IntrospectionQuery\") {\n                    return { data: schema.value };\n                  } else {\n                    return fetcher(options, httpFetch);\n                  }\n                }\n              }\n\n              const keys = Object.keys(schemas);\n\n              function onTabChange(state) {\n                const { activeTabIndex, tabs } = state;\n                const activeTab = tabs[activeTabIndex];\n\n                if (activeTabIndex === lastActiveTabIndex && lastTabAmount === tabs.length) {\n                  if (nextSchemaKey && activeTab && activeTab.schemaKey !== nextSchemaKey) {\n                    activeTab.schemaKey = nextSchemaKey;\n                    nextSchemaKey = undefined;\n                    storage.setTabState(state);\n                    setTimeout(() => storage.setTabState(state), 500);\n                  }\n                  return;\n                }\n\n                if (activeTab) {\n                  if (!activeTab.schemaKey) {\n                    if (lastTabAmount < tabs.length) {\n                      activeTab.schemaKey = activeSchema;\n                      storage.setTabState(state);\n                    }\n                  }\n\n                  const nextSchema = activeTab.schemaKey || \"storefront\";\n\n                  if (nextSchema !== activeSchema) {\n                    setActiveSchema(nextSchema);\n                  }\n                }\n\n                lastActiveTabIndex = activeTabIndex;\n                lastTabAmount = tabs.length;\n              }\n\n              const plugins = [HISTORY_PLUGIN, explorerPlugin()];\n\n              const props = {\n                fetcher: createJsonFetcher,\n                defaultEditorToolsVisibility: true,\n                initialQuery,\n                variables,\n                schema: schema.value,\n                plugins,\n                onTabChange,\n              };\n\n              function toggleSelectedApi() {\n                const activeKeyIndex = keys.indexOf(activeSchema);\n                nextSchemaKey = keys[(activeKeyIndex + 1) % keys.length];\n                if (nextSchemaKey) setActiveSchema(nextSchemaKey);\n              }\n\n              const CustomToolbar = React.createElement(GraphiQL.Toolbar, { key: \"Custom Toolbar\" }, [\n                React.createElement(\n                  ToolbarButton,\n                  {\n                    key: \"api-wrapper\",\n                    onClick: toggleSelectedApi,\n                    label: \"Toggle between different API schemas\",\n                  },\n                  [\n                    React.createElement(\"div\", { key: \"icon\", style: { textAlign: \"center\" } }, [\n                      schema.icon,\n                      React.createElement(\n                        \"div\",\n                        {\n                          key: \"icon-label\",\n                          className: \"graphiql-api-toolbar-label\",\n                        },\n                        \"API\",\n                      ),\n                    ]),\n                  ],\n                ),\n              ]);\n\n              const CustomLogo = React.createElement(GraphiQL.Logo, { key: \"Logo replacement\" }, [\n                React.createElement(\n                  \"div\",\n                  {\n                    key: \"Logo wrapper\",\n                    style: { display: \"flex\", alignItems: \"center\" },\n                  },\n                  [\n                    React.createElement(\n                      \"div\",\n                      {\n                        key: \"api\",\n                        className: \"graphiql-logo\",\n                        style: { paddingRight: 0, whiteSpace: \"nowrap\" },\n                      },\n                      [schema.name],\n                    ),\n                    React.createElement(GraphiQL.Logo, { key: \"logo\" }),\n                  ],\n                ),\n              ]);\n\n              return React.createElement(GraphiQL, props, [CustomToolbar, CustomLogo]);\n            }\n\n            const container = document.getElementById(\"graphiql\");\n            const root = ReactDOM.createRoot(container);\n            root.render(React.createElement(App));\n          <\/script>\n        </head>\n        <body>\n          <div id=\"graphiql\">\n            <div class=\"placeholder\">Loading GraphiQL...</div>\n          </div>\n        </body>\n      </html>\n    "
+	])), favicon, JSON.stringify(schemas).replace(/</g, "\\u003c")), {
+		status: 200,
+		headers: { "content-type": "text/html" }
+	});
+}
+
+//#endregion
+export { handleGraphiql };
+//# sourceMappingURL=graphiql.mjs.map

package/dist/development/core/request-routing/interceptors/graphiql.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphiql.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/graphiql.ts"],"sourcesContent":["import type { StorefrontClient } from \"../../../client\";\nimport type { GraphiQLOptions } from \"../../types\";\nimport type { HydrogenRouteInterceptor } from \"../route-types\";\n\nconst DEV_SCHEMA_FETCH_TIMEOUT_MS = 10_000;\n\ntype GraphiqlRouteOptions = {\n  graphiql?: GraphiQLOptions;\n};\n\nexport const handleGraphiql: HydrogenRouteInterceptor<GraphiqlRouteOptions> = (\n  url,\n  { request, storefrontClient, graphiql: graphiqlOptions },\n) => {\n  if (request.method !== \"GET\" || url.pathname !== \"/graphiql\") return null;\n\n  return createGraphiqlResponse(storefrontClient, graphiqlOptions);\n};\n\nasync function createGraphiqlResponse(\n  storefrontClient: StorefrontClient,\n  graphiqlOptions?: GraphiQLOptions,\n): Promise<Response> {\n  const schemas: Record<\n    string,\n    {\n      name: string;\n      value?: object;\n      accessToken?: string;\n      authHeader: string;\n      apiUrl: string;\n      icon: string;\n    }\n  > = {};\n\n  const sfapiUrl = `${storefrontClient.storeUrl}/api/unstable/graphql.json`;\n\n  schemas.storefront = {\n    name: \"Storefront API\",\n    authHeader: \"X-Shopify-Storefront-Access-Token\",\n    apiUrl: sfapiUrl,\n    icon: \"SF\",\n  };\n\n  if (graphiqlOptions?.customerAccount) {\n    const { apiUrl, accessToken, schemaUrl } = graphiqlOptions.customerAccount;\n\n    try {\n      const schemaResponse = await fetch(schemaUrl, {\n        signal: AbortSignal.timeout(DEV_SCHEMA_FETCH_TIMEOUT_MS),\n      });\n      const schemaJson: unknown = await schemaResponse.json();\n\n      if (typeof schemaJson === \"object\" && schemaJson !== null) {\n        schemas[\"customer-account\"] = {\n          name: \"Customer Account API\",\n          value: schemaJson as object,\n          authHeader: \"Authorization\",\n          accessToken,\n          apiUrl,\n          icon: \"CA\",\n        };\n      }\n    } catch {\n      // CAAPI schema unavailable — skip the tab silently\n    }\n  }\n\n  const favicon = \"https://avatars.githubusercontent.com/u/12972006?s=48&v=4\";\n\n  const html = String.raw;\n\n  return new Response(\n    html`\n      <!DOCTYPE html>\n      <html lang=\"en\">\n        <head>\n          <title>GraphiQL</title>\n          <link rel=\"icon\" type=\"image/x-icon\" href=\"${favicon}\" />\n          <meta charset=\"utf-8\" />\n          <style>\n            body {\n              height: 100%;\n              margin: 0;\n              width: 100%;\n              overflow: hidden;\n              background-color: hsl(219, 29%, 18%);\n            }\n            #graphiql {\n              height: 100vh;\n            }\n            #graphiql > .placeholder {\n              color: slategray;\n              width: fit-content;\n              margin: 40px auto;\n              font-family: Arial;\n            }\n            .graphiql-api-toolbar-label {\n              position: absolute;\n              bottom: -6px;\n              right: -4px;\n              font-size: 8px;\n            }\n          </style>\n          <link rel=\"stylesheet\" href=\"https://esm.sh/graphiql/dist/style.css\" />\n          <link rel=\"stylesheet\" href=\"https://esm.sh/@graphiql/plugin-explorer/dist/style.css\" />\n          <script type=\"importmap\">\n            {\n              \"imports\": {\n                \"react\": \"https://esm.sh/react@19.1.0\",\n                \"react/jsx-runtime\": \"https://esm.sh/react@19.1.0/jsx-runtime\",\n                \"react-dom\": \"https://esm.sh/react-dom@19.1.0\",\n                \"react-dom/client\": \"https://esm.sh/react-dom@19.1.0/client\",\n                \"graphql\": \"https://esm.sh/graphql@16.11.0\",\n                \"graphiql\": \"https://esm.sh/graphiql?standalone&external=react,react-dom,@graphiql/react,graphql\",\n                \"@graphiql/plugin-explorer\": \"https://esm.sh/@graphiql/plugin-explorer?standalone&external=react,@graphiql/react,graphql\",\n                \"@graphiql/react\": \"https://esm.sh/@graphiql/react?standalone&external=react,react-dom,graphql\",\n                \"@graphiql/toolkit\": \"https://esm.sh/@graphiql/toolkit?standalone&external=graphql\"\n              }\n            }\n          </script>\n          <script type=\"module\">\n            import React from \"react\";\n            import ReactDOM from \"react-dom/client\";\n            import { GraphiQL, HISTORY_PLUGIN } from \"graphiql\";\n            import { createGraphiQLFetcher } from \"@graphiql/toolkit\";\n            import { explorerPlugin } from \"@graphiql/plugin-explorer\";\n            import { ToolbarButton } from \"@graphiql/react\";\n            import createJSONWorker from \"https://esm.sh/monaco-editor/esm/vs/language/json/json.worker.js?worker\";\n            import createGraphQLWorker from \"https://esm.sh/monaco-graphql/esm/graphql.worker.js?worker\";\n            import createEditorWorker from \"https://esm.sh/monaco-editor/esm/vs/editor/editor.worker.js?worker\";\n            import { parse, print } from \"graphql\";\n\n            globalThis.MonacoEnvironment = {\n              getWorker(_workerId, label) {\n                switch (label) {\n                  case \"json\":\n                    return createJSONWorker();\n                  case \"graphql\":\n                    return createGraphQLWorker();\n                }\n                return createEditorWorker();\n              },\n            };\n\n            const windowUrl = new URL(document.URL);\n            const startingSchemaKey = windowUrl.searchParams.get(\"schema\") || \"storefront\";\n\n            let initialQuery = \"{ shop { name } }\";\n            if (windowUrl.searchParams.has(\"query\")) {\n              initialQuery = decodeURIComponent(windowUrl.searchParams.get(\"query\") ?? initialQuery);\n            }\n\n            initialQuery = print(parse(initialQuery));\n\n            let variables;\n            if (windowUrl.searchParams.has(\"variables\")) {\n              variables = decodeURIComponent(windowUrl.searchParams.get(\"variables\") ?? \"\");\n            }\n\n            if (variables) {\n              variables = JSON.stringify(JSON.parse(variables), null, 2);\n            }\n\n            const schemas = ${JSON.stringify(schemas).replace(/</g, '\\\\u003c')};\n\n            let lastActiveTabIndex = -1;\n            let lastTabAmount = -1;\n\n            const TAB_STATE_KEY = \"graphiql:tabState\";\n            const storage = {\n              getTabState: () => JSON.parse(localStorage.getItem(TAB_STATE_KEY)),\n              setTabState: (state) => localStorage.setItem(TAB_STATE_KEY, JSON.stringify(state)),\n            };\n\n            let nextSchemaKey;\n\n            function App() {\n              const [activeSchema, setActiveSchema] = React.useState(startingSchemaKey);\n\n              const schema = schemas[activeSchema];\n\n              if (!schema) {\n                throw new Error(\"No schema found for \" + activeSchema);\n              }\n\n              const requestHeaders = schema.accessToken\n                ? { [schema.authHeader]: schema.accessToken }\n                : {};\n\n              const fetcher = createGraphiQLFetcher({\n                url: schema.apiUrl,\n                headers: requestHeaders,\n                enableIncrementalDelivery: false,\n              });\n\n              function createJsonFetcher(options, httpFetch) {\n                if (activeSchema === \"storefront\") {\n                  return fetcher(options, httpFetch);\n                } else {\n                  if (options.operationName === \"IntrospectionQuery\") {\n                    return { data: schema.value };\n                  } else {\n                    return fetcher(options, httpFetch);\n                  }\n                }\n              }\n\n              const keys = Object.keys(schemas);\n\n              function onTabChange(state) {\n                const { activeTabIndex, tabs } = state;\n                const activeTab = tabs[activeTabIndex];\n\n                if (activeTabIndex === lastActiveTabIndex && lastTabAmount === tabs.length) {\n                  if (nextSchemaKey && activeTab && activeTab.schemaKey !== nextSchemaKey) {\n                    activeTab.schemaKey = nextSchemaKey;\n                    nextSchemaKey = undefined;\n                    storage.setTabState(state);\n                    setTimeout(() => storage.setTabState(state), 500);\n                  }\n                  return;\n                }\n\n                if (activeTab) {\n                  if (!activeTab.schemaKey) {\n                    if (lastTabAmount < tabs.length) {\n                      activeTab.schemaKey = activeSchema;\n                      storage.setTabState(state);\n                    }\n                  }\n\n                  const nextSchema = activeTab.schemaKey || \"storefront\";\n\n                  if (nextSchema !== activeSchema) {\n                    setActiveSchema(nextSchema);\n                  }\n                }\n\n                lastActiveTabIndex = activeTabIndex;\n                lastTabAmount = tabs.length;\n              }\n\n              const plugins = [HISTORY_PLUGIN, explorerPlugin()];\n\n              const props = {\n                fetcher: createJsonFetcher,\n                defaultEditorToolsVisibility: true,\n                initialQuery,\n                variables,\n                schema: schema.value,\n                plugins,\n                onTabChange,\n              };\n\n              function toggleSelectedApi() {\n                const activeKeyIndex = keys.indexOf(activeSchema);\n                nextSchemaKey = keys[(activeKeyIndex + 1) % keys.length];\n                if (nextSchemaKey) setActiveSchema(nextSchemaKey);\n              }\n\n              const CustomToolbar = React.createElement(GraphiQL.Toolbar, { key: \"Custom Toolbar\" }, [\n                React.createElement(\n                  ToolbarButton,\n                  {\n                    key: \"api-wrapper\",\n                    onClick: toggleSelectedApi,\n                    label: \"Toggle between different API schemas\",\n                  },\n                  [\n                    React.createElement(\"div\", { key: \"icon\", style: { textAlign: \"center\" } }, [\n                      schema.icon,\n                      React.createElement(\n                        \"div\",\n                        {\n                          key: \"icon-label\",\n                          className: \"graphiql-api-toolbar-label\",\n                        },\n                        \"API\",\n                      ),\n                    ]),\n                  ],\n                ),\n              ]);\n\n              const CustomLogo = React.createElement(GraphiQL.Logo, { key: \"Logo replacement\" }, [\n                React.createElement(\n                  \"div\",\n                  {\n                    key: \"Logo wrapper\",\n                    style: { display: \"flex\", alignItems: \"center\" },\n                  },\n                  [\n                    React.createElement(\n                      \"div\",\n                      {\n                        key: \"api\",\n                        className: \"graphiql-logo\",\n                        style: { paddingRight: 0, whiteSpace: \"nowrap\" },\n                      },\n                      [schema.name],\n                    ),\n                    React.createElement(GraphiQL.Logo, { key: \"logo\" }),\n                  ],\n                ),\n              ]);\n\n              return React.createElement(GraphiQL, props, [CustomToolbar, CustomLogo]);\n            }\n\n            const container = document.getElementById(\"graphiql\");\n            const root = ReactDOM.createRoot(container);\n            root.render(React.createElement(App));\n          </script>\n        </head>\n        <body>\n          <div id=\"graphiql\">\n            <div class=\"placeholder\">Loading GraphiQL...</div>\n          </div>\n        </body>\n      </html>\n    `,\n    { status: 200, headers: { \"content-type\": \"text/html\" } },\n  );\n}\n"],"mappings":";;;;AAIA,MAAM,8BAA8B;AAMpC,MAAa,kBACX,KACA,EAAE,SAAS,kBAAkB,UAAU,sBACpC;AACH,KAAI,QAAQ,WAAW,SAAS,IAAI,aAAa,YAAa,QAAO;AAErE,QAAO,uBAAuB,kBAAkB,gBAAgB;;AAGlE,eAAe,uBACb,kBACA,iBACmB;CACnB,MAAM,UAUF,EAAE;AAIN,SAAQ,aAAa;EACnB,MAAM;EACN,YAAY;EACZ,QAAQ,GALU,iBAAiB,SAAS;EAM5C,MAAM;EACP;AAED,KAAI,iBAAiB,iBAAiB;EACpC,MAAM,EAAE,QAAQ,aAAa,cAAc,gBAAgB;AAE3D,MAAI;GAIF,MAAM,aAAsB,OAAM,MAHL,MAAM,WAAW,EAC5C,QAAQ,YAAY,QAAQ,4BAA4B,EACzD,CAAC,EAC+C,MAAM;AAEvD,OAAI,OAAO,eAAe,YAAY,eAAe,KACnD,SAAQ,sBAAsB;IAC5B,MAAM;IACN,OAAO;IACP,YAAY;IACZ;IACA;IACA,MAAM;IACP;UAEG;;CAKV,MAAM,UAAU;CAEhB,MAAM,OAAO,OAAO;AAEpB,QAAO,IAAI,SACT;;;;MAKmD,SAsFzB,KAAK,UAAU,QAAQ,CAAC,QAAQ,MAAM,UAAU,CA6JzE,EACD;EAAE,QAAQ;EAAK,SAAS,EAAE,gBAAgB,aAAa;EAAE,CAC1D"}

package/dist/development/core/request-routing/interceptors/mcp-proxy.mjs

@@ -0,0 +1,23 @@
+import { MCP_REQUEST_HEADER_ALLOWLIST } from "../../headers.mjs";
+import { MCP_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+
+//#region src/core/request-routing/interceptors/mcp-proxy.ts
+const JSON_RPC_INTERNAL_ERROR = -32603;
+const handleMcpProxy = createProxyInterceptor({
+	match: MCP_RE,
+	requestHeaders: { allow: MCP_REQUEST_HEADER_ALLOWLIST },
+	formatError: (message) => ({
+		jsonrpc: "2.0",
+		error: {
+			code: JSON_RPC_INTERNAL_ERROR,
+			message
+		},
+		id: null
+	}),
+	scope: "mcp-proxy"
+});
+
+//#endregion
+export { handleMcpProxy };
+//# sourceMappingURL=mcp-proxy.mjs.map

package/dist/development/core/request-routing/interceptors/mcp-proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/mcp-proxy.ts"],"sourcesContent":["import { MCP_REQUEST_HEADER_ALLOWLIST } from \"../../headers\";\nimport { MCP_RE } from \"../../url\";\nimport { createProxyInterceptor } from \"./proxy\";\n\nconst JSON_RPC_INTERNAL_ERROR = -32603;\n\nexport const handleMcpProxy = createProxyInterceptor({\n  match: MCP_RE,\n  requestHeaders: { allow: MCP_REQUEST_HEADER_ALLOWLIST },\n  formatError: (message) => ({\n    jsonrpc: \"2.0\",\n    error: { code: JSON_RPC_INTERNAL_ERROR, message },\n    id: null,\n  }),\n  scope: \"mcp-proxy\",\n});\n"],"mappings":";;;;;AAIA,MAAM,0BAA0B;AAEhC,MAAa,iBAAiB,uBAAuB;CACnD,OAAO;CACP,gBAAgB,EAAE,OAAO,8BAA8B;CACvD,cAAc,aAAa;EACzB,SAAS;EACT,OAAO;GAAE,MAAM;GAAyB;GAAS;EACjD,IAAI;EACL;CACD,OAAO;CACR,CAAC"}

package/dist/development/core/request-routing/interceptors/proxy.mjs

@@ -0,0 +1,73 @@
+import { getLogger } from "../../logging/logging.mjs";
+import { extractHeaders } from "../../headers.mjs";
+
+//#region src/core/request-routing/interceptors/proxy.ts
+const PROXY_TIMEOUT_MS = 3e4;
+function createProxyInterceptor(descriptor) {
+	const log = getLogger(descriptor.scope);
+	const formatError = descriptor.formatError ?? defaultFormatError;
+	return (url, options) => {
+		const { request, storefrontClient } = options;
+		if (!descriptor.match.test(url.pathname)) return null;
+		if (descriptor.methods && !descriptor.methods.includes(request.method)) return null;
+		let upstreamUrl;
+		let init;
+		try {
+			const upstreamPathname = descriptor.rewritePathname?.(url.pathname) ?? url.pathname;
+			upstreamUrl = new URL(upstreamPathname + url.search, storefrontClient.storeUrl);
+			const forwardedHeaders = createProxyRequestHeaders(descriptor, request);
+			options.requestContext.applyStorefrontRequestHeaders(forwardedHeaders);
+			descriptor.requestHeaders.prepare?.(forwardedHeaders, options, url);
+			init = {
+				method: request.method,
+				body: request.body,
+				headers: forwardedHeaders,
+				signal: AbortSignal.timeout(descriptor.timeoutMs ?? PROXY_TIMEOUT_MS),
+				redirect: descriptor.redirect ?? "manual"
+			};
+			if (request.body) init.duplex = "half";
+		} catch (error) {
+			log.error("request failed", { error });
+			return Promise.resolve(createProxyErrorResponse(error, 500, formatError));
+		}
+		return fetch(upstreamUrl, init).then((upstreamResponse) => {
+			const headers = createProxyResponseHeaders(upstreamResponse.headers);
+			descriptor.responseHeaders?.prepare?.(headers, options, url);
+			options.requestContext.consumeStorefrontResponseHeaders(headers);
+			return new Response(upstreamResponse.body, {
+				status: upstreamResponse.status,
+				statusText: upstreamResponse.statusText,
+				headers
+			});
+		}).catch((error) => {
+			log.error("request failed", { error });
+			return createProxyErrorResponse(error, 502, formatError);
+		});
+	};
+}
+function defaultFormatError(message) {
+	return { error: message };
+}
+function createProxyErrorResponse(error, status, formatError) {
+	const message = error instanceof Error ? error.message : "Internal proxy error";
+	return new Response(JSON.stringify(formatError(message)), {
+		status,
+		headers: { "content-type": "application/json" }
+	});
+}
+function createProxyRequestHeaders(descriptor, request) {
+	const { allow, deny } = descriptor.requestHeaders;
+	const headers = allow ? new Headers(extractHeaders((key) => request.headers.get(key), allow)) : new Headers(request.headers);
+	for (const header of deny ?? []) headers.delete(header);
+	return headers;
+}
+function createProxyResponseHeaders(upstreamHeaders) {
+	const headers = new Headers(upstreamHeaders);
+	headers.delete("content-encoding");
+	headers.delete("content-length");
+	return headers;
+}
+
+//#endregion
+export { createProxyInterceptor, createProxyResponseHeaders };
+//# sourceMappingURL=proxy.mjs.map

package/dist/development/core/request-routing/interceptors/proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/proxy.ts"],"sourcesContent":["import { extractHeaders } from \"../../headers\";\nimport { getLogger } from \"../../logging\";\nimport type { HydrogenRouteInterceptor, HydrogenRoutesOptions } from \"../route-types\";\n\nconst PROXY_TIMEOUT_MS = 30_000;\n\ntype PrepareHeaders = (headers: Headers, options: HydrogenRoutesOptions, url: URL) => void;\n\ntype ProxyRequestHeaderOptions = (\n  | { allow: readonly string[]; deny?: never }\n  | { allow?: never; deny: readonly string[] }\n) & {\n  prepare?: PrepareHeaders;\n};\n\ntype ProxyResponseHeaderOptions = {\n  prepare?: PrepareHeaders;\n};\n\ntype ProxyDescriptor = {\n  match: RegExp;\n  methods?: readonly string[];\n  formatError?: (message: string) => unknown;\n  redirect?: RequestRedirect;\n  scope: string;\n  timeoutMs?: number;\n  rewritePathname?: (pathname: string) => string;\n  requestHeaders: ProxyRequestHeaderOptions;\n  responseHeaders?: ProxyResponseHeaderOptions;\n};\n\nexport function createProxyInterceptor(descriptor: ProxyDescriptor): HydrogenRouteInterceptor {\n  const log = getLogger(descriptor.scope);\n  const formatError = descriptor.formatError ?? defaultFormatError;\n\n  return (url, options) => {\n    const { request, storefrontClient } = options;\n    if (!descriptor.match.test(url.pathname)) return null;\n    if (descriptor.methods && !descriptor.methods.includes(request.method)) return null;\n\n    let upstreamUrl: URL;\n    let init: RequestInit & { duplex?: \"half\" };\n    try {\n      const upstreamPathname = descriptor.rewritePathname?.(url.pathname) ?? url.pathname;\n      upstreamUrl = new URL(upstreamPathname + url.search, storefrontClient.storeUrl);\n      const forwardedHeaders = createProxyRequestHeaders(descriptor, request);\n      options.requestContext.applyStorefrontRequestHeaders(forwardedHeaders);\n      descriptor.requestHeaders.prepare?.(forwardedHeaders, options, url);\n\n      init = {\n        method: request.method,\n        body: request.body,\n        headers: forwardedHeaders,\n        signal: AbortSignal.timeout(descriptor.timeoutMs ?? PROXY_TIMEOUT_MS),\n        redirect: descriptor.redirect ?? \"manual\",\n      };\n\n      // Node's fetch requires this when forwarding a streaming request body.\n      if (request.body) init.duplex = \"half\";\n    } catch (error) {\n      log.error(\"request failed\", { error });\n      return Promise.resolve(createProxyErrorResponse(error, 500, formatError));\n    }\n\n    return fetch(upstreamUrl, init)\n      .then((upstreamResponse) => {\n        const headers = createProxyResponseHeaders(upstreamResponse.headers);\n        descriptor.responseHeaders?.prepare?.(headers, options, url);\n        options.requestContext.consumeStorefrontResponseHeaders(headers);\n\n        return new Response(upstreamResponse.body, {\n          status: upstreamResponse.status,\n          statusText: upstreamResponse.statusText,\n          headers,\n        });\n      })\n      .catch((error) => {\n        log.error(\"request failed\", { error });\n        return createProxyErrorResponse(error, 502, formatError);\n      });\n  };\n}\n\nfunction defaultFormatError(message: string): { error: string } {\n  return { error: message };\n}\n\nfunction createProxyErrorResponse(\n  error: unknown,\n  status: number,\n  formatError: (message: string) => unknown,\n): Response {\n  const message = error instanceof Error ? error.message : \"Internal proxy error\";\n  return new Response(JSON.stringify(formatError(message)), {\n    status,\n    headers: { \"content-type\": \"application/json\" },\n  });\n}\n\nfunction createProxyRequestHeaders(descriptor: ProxyDescriptor, request: Request): Headers {\n  const { allow, deny } = descriptor.requestHeaders;\n  const headers = allow\n    ? new Headers(extractHeaders((key) => request.headers.get(key), allow))\n    : new Headers(request.headers);\n  for (const header of deny ?? []) headers.delete(header);\n  return headers;\n}\n\nexport function createProxyResponseHeaders(upstreamHeaders: Headers): Headers {\n  const headers = new Headers(upstreamHeaders);\n  headers.delete(\"content-encoding\");\n  headers.delete(\"content-length\");\n  return headers;\n}\n"],"mappings":";;;;AAIA,MAAM,mBAAmB;AA2BzB,SAAgB,uBAAuB,YAAuD;CAC5F,MAAM,MAAM,UAAU,WAAW,MAAM;CACvC,MAAM,cAAc,WAAW,eAAe;AAE9C,SAAQ,KAAK,YAAY;EACvB,MAAM,EAAE,SAAS,qBAAqB;AACtC,MAAI,CAAC,WAAW,MAAM,KAAK,IAAI,SAAS,CAAE,QAAO;AACjD,MAAI,WAAW,WAAW,CAAC,WAAW,QAAQ,SAAS,QAAQ,OAAO,CAAE,QAAO;EAE/E,IAAI;EACJ,IAAI;AACJ,MAAI;GACF,MAAM,mBAAmB,WAAW,kBAAkB,IAAI,SAAS,IAAI,IAAI;AAC3E,iBAAc,IAAI,IAAI,mBAAmB,IAAI,QAAQ,iBAAiB,SAAS;GAC/E,MAAM,mBAAmB,0BAA0B,YAAY,QAAQ;AACvE,WAAQ,eAAe,8BAA8B,iBAAiB;AACtE,cAAW,eAAe,UAAU,kBAAkB,SAAS,IAAI;AAEnE,UAAO;IACL,QAAQ,QAAQ;IAChB,MAAM,QAAQ;IACd,SAAS;IACT,QAAQ,YAAY,QAAQ,WAAW,aAAa,iBAAiB;IACrE,UAAU,WAAW,YAAY;IAClC;AAGD,OAAI,QAAQ,KAAM,MAAK,SAAS;WACzB,OAAO;AACd,OAAI,MAAM,kBAAkB,EAAE,OAAO,CAAC;AACtC,UAAO,QAAQ,QAAQ,yBAAyB,OAAO,KAAK,YAAY,CAAC;;AAG3E,SAAO,MAAM,aAAa,KAAK,CAC5B,MAAM,qBAAqB;GAC1B,MAAM,UAAU,2BAA2B,iBAAiB,QAAQ;AACpE,cAAW,iBAAiB,UAAU,SAAS,SAAS,IAAI;AAC5D,WAAQ,eAAe,iCAAiC,QAAQ;AAEhE,UAAO,IAAI,SAAS,iBAAiB,MAAM;IACzC,QAAQ,iBAAiB;IACzB,YAAY,iBAAiB;IAC7B;IACD,CAAC;IACF,CACD,OAAO,UAAU;AAChB,OAAI,MAAM,kBAAkB,EAAE,OAAO,CAAC;AACtC,UAAO,yBAAyB,OAAO,KAAK,YAAY;IACxD;;;AAIR,SAAS,mBAAmB,SAAoC;AAC9D,QAAO,EAAE,OAAO,SAAS;;AAG3B,SAAS,yBACP,OACA,QACA,aACU;CACV,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,QAAO,IAAI,SAAS,KAAK,UAAU,YAAY,QAAQ,CAAC,EAAE;EACxD;EACA,SAAS,EAAE,gBAAgB,oBAAoB;EAChD,CAAC;;AAGJ,SAAS,0BAA0B,YAA6B,SAA2B;CACzF,MAAM,EAAE,OAAO,SAAS,WAAW;CACnC,MAAM,UAAU,QACZ,IAAI,QAAQ,gBAAgB,QAAQ,QAAQ,QAAQ,IAAI,IAAI,EAAE,MAAM,CAAC,GACrE,IAAI,QAAQ,QAAQ,QAAQ;AAChC,MAAK,MAAM,UAAU,QAAQ,EAAE,CAAE,SAAQ,OAAO,OAAO;AACvD,QAAO;;AAGT,SAAgB,2BAA2B,iBAAmC;CAC5E,MAAM,UAAU,IAAI,QAAQ,gBAAgB;AAC5C,SAAQ,OAAO,mBAAmB;AAClC,SAAQ,OAAO,iBAAiB;AAChC,QAAO"}

package/dist/development/core/request-routing/interceptors/query-param-redirect.mjs

@@ -0,0 +1,22 @@
+//#region src/core/request-routing/interceptors/query-param-redirect.ts
+function handleQueryParamRedirect(request) {
+	const url = new URL(request.url);
+	const redirectTo = url.searchParams.get("return_to") || url.searchParams.get("redirect");
+	if (!redirectTo) return null;
+	if (!isSameOrigin(request.url, redirectTo)) return null;
+	return new Response(null, {
+		status: 301,
+		headers: { location: redirectTo }
+	});
+}
+function isSameOrigin(requestUrl, redirectUrl) {
+	try {
+		return new URL(requestUrl).origin === new URL(redirectUrl, requestUrl).origin;
+	} catch {
+		return false;
+	}
+}
+
+//#endregion
+export { handleQueryParamRedirect };
+//# sourceMappingURL=query-param-redirect.mjs.map

package/dist/development/core/request-routing/interceptors/query-param-redirect.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-param-redirect.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/query-param-redirect.ts"],"sourcesContent":["export function handleQueryParamRedirect(request: Request): Response | null {\n  const url = new URL(request.url);\n  const redirectTo = url.searchParams.get(\"return_to\") || url.searchParams.get(\"redirect\");\n\n  if (!redirectTo) return null;\n  if (!isSameOrigin(request.url, redirectTo)) return null;\n\n  return new Response(null, {\n    status: 301,\n    headers: { location: redirectTo },\n  });\n}\n\nfunction isSameOrigin(requestUrl: string, redirectUrl: string): boolean {\n  try {\n    return new URL(requestUrl).origin === new URL(redirectUrl, requestUrl).origin;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";AAAA,SAAgB,yBAAyB,SAAmC;CAC1E,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;CAChC,MAAM,aAAa,IAAI,aAAa,IAAI,YAAY,IAAI,IAAI,aAAa,IAAI,WAAW;AAExF,KAAI,CAAC,WAAY,QAAO;AACxB,KAAI,CAAC,aAAa,QAAQ,KAAK,WAAW,CAAE,QAAO;AAEnD,QAAO,IAAI,SAAS,MAAM;EACxB,QAAQ;EACR,SAAS,EAAE,UAAU,YAAY;EAClC,CAAC;;AAGJ,SAAS,aAAa,YAAoB,aAA8B;AACtE,KAAI;AACF,SAAO,IAAI,IAAI,WAAW,CAAC,WAAW,IAAI,IAAI,aAAa,WAAW,CAAC;SACjE;AACN,SAAO"}

package/dist/development/core/request-routing/interceptors/sfapi-proxy.mjs

@@ -0,0 +1,27 @@
+import { SFAPI_REQUEST_HEADER_ALLOWLIST, STOREFRONT_BUYER_IP_HEADER, STOREFRONT_ID_HEADER } from "../../headers.mjs";
+import { SFAPI_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+
+//#region src/core/request-routing/interceptors/sfapi-proxy.ts
+const handleSfapiProxy = createProxyInterceptor({
+	match: SFAPI_RE,
+	requestHeaders: {
+		allow: SFAPI_REQUEST_HEADER_ALLOWLIST,
+		prepare: (headers, { requestContext, storefrontClient }) => {
+			headers.delete(STOREFRONT_ID_HEADER);
+			if (storefrontClient.storefrontId) headers.set(STOREFRONT_ID_HEADER, storefrontClient.storefrontId);
+			headers.delete(STOREFRONT_BUYER_IP_HEADER);
+			const { buyerIp } = requestContext;
+			if (buyerIp) {
+				headers.set(STOREFRONT_BUYER_IP_HEADER, buyerIp);
+				return;
+			}
+			if (storefrontClient.type === "private") throw new Error("requestContext.buyerIp is required for private Storefront API proxy requests");
+		}
+	},
+	scope: "sfapi-proxy"
+});
+
+//#endregion
+export { handleSfapiProxy };
+//# sourceMappingURL=sfapi-proxy.mjs.map

package/dist/development/core/request-routing/interceptors/sfapi-proxy.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sfapi-proxy.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/sfapi-proxy.ts"],"sourcesContent":["import {\n  SFAPI_REQUEST_HEADER_ALLOWLIST,\n  STOREFRONT_BUYER_IP_HEADER,\n  STOREFRONT_ID_HEADER,\n} from \"../../headers\";\nimport { SFAPI_RE } from \"../../url\";\nimport { createProxyInterceptor } from \"./proxy\";\n\nexport const handleSfapiProxy = createProxyInterceptor({\n  match: SFAPI_RE,\n  requestHeaders: {\n    allow: SFAPI_REQUEST_HEADER_ALLOWLIST,\n    prepare: (headers, { requestContext, storefrontClient }) => {\n      headers.delete(STOREFRONT_ID_HEADER);\n      if (storefrontClient.storefrontId) {\n        headers.set(STOREFRONT_ID_HEADER, storefrontClient.storefrontId);\n      }\n\n      headers.delete(STOREFRONT_BUYER_IP_HEADER);\n      const { buyerIp } = requestContext;\n      if (buyerIp) {\n        headers.set(STOREFRONT_BUYER_IP_HEADER, buyerIp);\n        return;\n      }\n      if (storefrontClient.type === \"private\") {\n        throw new Error(\n          \"requestContext.buyerIp is required for private Storefront API proxy requests\",\n        );\n      }\n    },\n  },\n  scope: \"sfapi-proxy\",\n});\n"],"mappings":";;;;;AAQA,MAAa,mBAAmB,uBAAuB;CACrD,OAAO;CACP,gBAAgB;EACd,OAAO;EACP,UAAU,SAAS,EAAE,gBAAgB,uBAAuB;AAC1D,WAAQ,OAAO,qBAAqB;AACpC,OAAI,iBAAiB,aACnB,SAAQ,IAAI,sBAAsB,iBAAiB,aAAa;AAGlE,WAAQ,OAAO,2BAA2B;GAC1C,MAAM,EAAE,YAAY;AACpB,OAAI,SAAS;AACX,YAAQ,IAAI,4BAA4B,QAAQ;AAChD;;AAEF,OAAI,iBAAiB,SAAS,UAC5B,OAAM,IAAI,MACR,+EACD;;EAGN;CACD,OAAO;CACR,CAAC"}

package/dist/development/core/request-routing/interceptors/standard-routes.mjs

@@ -0,0 +1,19 @@
+import { getStandardRouteTarget, isStandardRouteSelfRedirect } from "../../standard-routes/redirects.mjs";
+import { createRedirectLocation, createRedirectResponse } from "./url-redirects.mjs";
+
+//#region src/core/request-routing/interceptors/standard-routes.ts
+function handleStandardRouteRedirects({ request, storefrontClient, routeTemplates }) {
+	const url = new URL(request.url);
+	const target = getStandardRouteTarget({
+		pathname: url.pathname,
+		pathPrefix: storefrontClient.requestContext.i18n.pathPrefix,
+		routeTemplates
+	});
+	if (!target) return null;
+	const location = createRedirectLocation(target, url.searchParams);
+	return isStandardRouteSelfRedirect(request.url, location) ? null : createRedirectResponse(location);
+}
+
+//#endregion
+export { handleStandardRouteRedirects };
+//# sourceMappingURL=standard-routes.mjs.map

package/dist/development/core/request-routing/interceptors/standard-routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-routes.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/standard-routes.ts"],"sourcesContent":["import type { StorefrontClient } from \"../../../client\";\nimport {\n  getStandardRouteTarget,\n  isStandardRouteSelfRedirect,\n  type ShopifyRouteTemplates,\n} from \"../../standard-routes/index\";\nimport { createRedirectLocation, createRedirectResponse } from \"./url-redirects\";\n\nexport function handleStandardRouteRedirects({\n  request,\n  storefrontClient,\n  routeTemplates,\n}: {\n  request: Request;\n  storefrontClient: StorefrontClient;\n  routeTemplates: ShopifyRouteTemplates;\n}): Response | null {\n  const url = new URL(request.url);\n  const target = getStandardRouteTarget({\n    pathname: url.pathname,\n    pathPrefix: storefrontClient.requestContext.i18n.pathPrefix,\n    routeTemplates,\n  });\n\n  if (!target) return null;\n\n  const location = createRedirectLocation(target, url.searchParams);\n\n  return isStandardRouteSelfRedirect(request.url, location)\n    ? null\n    : createRedirectResponse(location);\n}\n"],"mappings":";;;;AAQA,SAAgB,6BAA6B,EAC3C,SACA,kBACA,kBAKkB;CAClB,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;CAChC,MAAM,SAAS,uBAAuB;EACpC,UAAU,IAAI;EACd,YAAY,iBAAiB,eAAe,KAAK;EACjD;EACD,CAAC;AAEF,KAAI,CAAC,OAAQ,QAAO;CAEpB,MAAM,WAAW,uBAAuB,QAAQ,IAAI,aAAa;AAEjE,QAAO,4BAA4B,QAAQ,KAAK,SAAS,GACrD,OACA,uBAAuB,SAAS"}

package/dist/development/core/request-routing/interceptors/url-redirects.mjs

@@ -0,0 +1,27 @@
+import { gql } from "../../../graphql/graphql.mjs";
+
+//#region src/core/request-routing/interceptors/url-redirects.ts
+const REDIRECT_QUERY = gql(`query redirects($query:String){urlRedirects(first:1 query:$query){edges{node{target}}}}`);
+const PLACEHOLDER_BASE = "https://0.0.0.0";
+async function handleUrlRedirects({ request, storefrontClient }) {
+	const { pathname, searchParams } = new URL(request.url);
+	const queryPath = pathname.toLowerCase().replace(/\/+$/, "");
+	const target = (await storefrontClient.graphql(REDIRECT_QUERY, { variables: { query: `path:${queryPath}` } })).data?.urlRedirects?.edges[0]?.node.target;
+	if (!target) return null;
+	return createRedirectResponse(createRedirectLocation(target, searchParams));
+}
+function createRedirectLocation(location, searchParams) {
+	const url = new URL(location, PLACEHOLDER_BASE);
+	for (const [key, value] of searchParams) url.searchParams.append(key, value);
+	return url.toString().replace(PLACEHOLDER_BASE, "");
+}
+function createRedirectResponse(location, status = 301) {
+	return new Response(null, {
+		status,
+		headers: { location }
+	});
+}
+
+//#endregion
+export { createRedirectLocation, createRedirectResponse, handleUrlRedirects };
+//# sourceMappingURL=url-redirects.mjs.map

package/dist/development/core/request-routing/interceptors/url-redirects.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-redirects.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/url-redirects.ts"],"sourcesContent":["import { gql } from \"../../../graphql\";\nimport type { RedirectOptions } from \"../handle-shopify-redirects\";\n\ntype UrlRedirectOptions = Pick<RedirectOptions, \"request\" | \"storefrontClient\">;\n\nconst REDIRECT_QUERY = gql(`\n  query redirects($query: String) {\n    urlRedirects(first: 1, query: $query) {\n      edges {\n        node {\n          target\n        }\n      }\n    }\n  }\n`);\n\n// Used as a base for `new URL()` when constructing relative redirect URLs.\n// Stripped from the output — only needed because `new URL` requires a base for relative paths.\nconst PLACEHOLDER_BASE = \"https://0.0.0.0\";\n\nexport async function handleUrlRedirects({\n  request,\n  storefrontClient,\n}: UrlRedirectOptions): Promise<Response | null> {\n  const url = new URL(request.url);\n  const { pathname, searchParams } = url;\n\n  const queryPath = pathname.toLowerCase().replace(/\\/+$/, \"\");\n  const result = await storefrontClient.graphql(REDIRECT_QUERY, {\n    variables: { query: `path:${queryPath}` },\n  });\n\n  const target = result.data?.urlRedirects?.edges[0]?.node.target;\n  if (!target) return null;\n\n  return createRedirectResponse(createRedirectLocation(target, searchParams));\n}\n\nexport function createRedirectLocation(location: string, searchParams: URLSearchParams): string {\n  const url = new URL(location, PLACEHOLDER_BASE);\n\n  for (const [key, value] of searchParams) {\n    url.searchParams.append(key, value);\n  }\n\n  return url.toString().replace(PLACEHOLDER_BASE, \"\");\n}\n\nexport function createRedirectResponse(location: string, status: number = 301): Response {\n  return new Response(null, {\n    status,\n    headers: { location },\n  });\n}\n"],"mappings":";;;AAKA,MAAA,iBAAA,IAAA,0FAUA;AAIA,MAAA,mBAAA;AAEA,eAAA,mBAAA,EACA,SACA,oBACA;CAEA,MAAA,EAAA,UAAA,iBAAA,IADA,IAAA,QAAA,IACA;CAEA,MAAA,YAAA,SAAA,aAAA,CAAA,QAAA,QAAA,GAAA;CAKA,MAAA,UAAA,MAJA,iBAAA,QAAA,gBAAA,EACA,WAAA,EAAA,OAAA,QAAA,aAAA,EACA,CAAA,EAEA,MAAA,cAAA,MAAA,IAAA,KAAA;AACA,KAAA,CAAA,OAAA,QAAA;AAEA,QAAA,uBAAA,uBAAA,QAAA,aAAA,CAAA;;AAGA,SAAA,uBAAA,UAAA,cAAA;CACA,MAAA,MAAA,IAAA,IAAA,UAAA,iBAAA;AAEA,MAAA,MAAA,CAAA,KAAA,UAAA,aACA,KAAA,aAAA,OAAA,KAAA,MAAA;AAGA,QAAA,IAAA,UAAA,CAAA,QAAA,kBAAA,GAAA;;AAGA,SAAA,uBAAA,UAAA,SAAA,KAAA;AACA,QAAA,IAAA,SAAA,MAAA;EACA;EACA,SAAA,EAAA,UAAA;EACA,CAAA"}

package/dist/development/core/request-routing/interceptors/well-known.mjs

@@ -0,0 +1,22 @@
+import { PROXY_REQUEST_HEADER_DENYLIST } from "../../headers.mjs";
+import { WELL_KNOWN_RE } from "../../url.mjs";
+import { createProxyInterceptor } from "./proxy.mjs";
+
+//#region src/core/request-routing/interceptors/well-known.ts
+/**
+* Proxies allowlisted Shopify `.well-known` resources through the headless
+* storefront origin to the Online Store, so first-party services (Apple Pay
+* domain verification, Frontend Event Collector ingress) behave the same way
+* they do on Online Store storefronts. See {@link WELL_KNOWN_RE} for the
+* allowlist.
+*/
+const handleWellKnownProxy = createProxyInterceptor({
+	match: WELL_KNOWN_RE,
+	requestHeaders: { deny: PROXY_REQUEST_HEADER_DENYLIST },
+	redirect: "follow",
+	scope: "well-known-proxy"
+});
+
+//#endregion
+export { handleWellKnownProxy };
+//# sourceMappingURL=well-known.mjs.map

package/dist/development/core/request-routing/interceptors/well-known.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"well-known.mjs","names":[],"sources":["../../../../../src/core/request-routing/interceptors/well-known.ts"],"sourcesContent":["import { PROXY_REQUEST_HEADER_DENYLIST } from \"../../headers\";\nimport { WELL_KNOWN_RE } from \"../../url\";\nimport { createProxyInterceptor } from \"./proxy\";\n\n/**\n * Proxies allowlisted Shopify `.well-known` resources through the headless\n * storefront origin to the Online Store, so first-party services (Apple Pay\n * domain verification, Frontend Event Collector ingress) behave the same way\n * they do on Online Store storefronts. See {@link WELL_KNOWN_RE} for the\n * allowlist.\n */\nexport const handleWellKnownProxy = createProxyInterceptor({\n  match: WELL_KNOWN_RE,\n  requestHeaders: { deny: PROXY_REQUEST_HEADER_DENYLIST },\n  redirect: \"follow\",\n  scope: \"well-known-proxy\",\n});\n"],"mappings":";;;;;;;;;;;;AAWA,MAAa,uBAAuB,uBAAuB;CACzD,OAAO;CACP,gBAAgB,EAAE,MAAM,+BAA+B;CACvD,UAAU;CACV,OAAO;CACR,CAAC"}

package/dist/development/core/request-routing/registered-routes.d.mts

@@ -0,0 +1,7 @@
+import { CallableRouteHandler, ShopifyRedirectStatus, ShopifyRouteError, ShopifyRouteErrorResult, ShopifyRouteHandler, ShopifyRouteHandlerContext, ShopifyRouteHandlerGroup, ShopifyRouteHandlerResult, ShopifyRouteJsonResult, ShopifyRouteRedirectResult, ShopifyRouteSessionManager } from "./route-types.mjs";
+
+//#region src/core/request-routing/registered-routes.d.ts
+declare function createShopifyRouteHandler<const TPathname extends string, const TMethod extends string>(pathname: TPathname, method: TMethod, handler: (context: ShopifyRouteHandlerContext) => Promise<ShopifyRouteHandlerResult>): ShopifyRouteHandler<TPathname, TMethod>;
+//#endregion
+export { createShopifyRouteHandler };
+//# sourceMappingURL=registered-routes.d.mts.map

package/dist/development/core/request-routing/registered-routes.mjs

@@ -0,0 +1,72 @@
+//#region src/core/request-routing/registered-routes.ts
+const HTTP_OK_STATUS = 200;
+const HTTP_SEE_OTHER_STATUS = 303;
+const HTTP_METHOD_NOT_ALLOWED_STATUS = 405;
+const HTTP_BAD_REQUEST_STATUS = 400;
+const VALID_REDIRECT_STATUSES = [
+	301,
+	302,
+	303,
+	307,
+	308
+];
+function createShopifyRouteHandler(pathname, method, handler) {
+	return createCallableRouteHandler(pathname, method, handler);
+}
+function createCallableRouteHandler(pathname, method, handler) {
+	return Object.assign(handler, {
+		pathname,
+		method
+	});
+}
+const handleShopifyRouteHandlers = (url, { request, sessionManager, storefrontClient, requestContext, handlers = [] }) => {
+	const context = {
+		request,
+		sessionManager,
+		storefrontClient,
+		requestContext
+	};
+	const routeHandlers = handlers.flatMap((group) => Object.values(group));
+	if (routeHandlers.length === 0) return null;
+	const pathMatches = routeHandlers.filter((entry) => entry.pathname === url.pathname);
+	if (pathMatches.length === 0) return null;
+	const match = pathMatches.find((candidate) => candidate.method === request.method);
+	if (!match) return Promise.resolve(new Response("Method Not Allowed", { status: HTTP_METHOD_NOT_ALLOWED_STATUS }));
+	return match(context).then((result) => createShopifyRouteResponse(result, request));
+};
+function createShopifyRouteResponse(result, request) {
+	if (result.type === "redirect") {
+		const headers = new Headers(result.headers);
+		headers.set("location", resolveRedirectLocation(result.location, request));
+		return new Response(null, {
+			status: getRedirectStatus(result.status),
+			headers
+		});
+	}
+	if (result.type === "error") {
+		const headers = new Headers(result.headers);
+		headers.set("content-type", "application/json");
+		return new Response(JSON.stringify({ error: result.error }), {
+			status: result.status ?? HTTP_BAD_REQUEST_STATUS,
+			headers
+		});
+	}
+	const headers = new Headers(result.headers);
+	headers.set("content-type", "application/json");
+	return new Response(JSON.stringify(result.data), {
+		status: HTTP_OK_STATUS,
+		headers
+	});
+}
+function getRedirectStatus(status) {
+	const redirectStatus = status ?? HTTP_SEE_OTHER_STATUS;
+	if (VALID_REDIRECT_STATUSES.some((validStatus) => validStatus === redirectStatus)) return redirectStatus;
+	throw new Error(`Invalid Shopify route redirect status ${redirectStatus}. Expected one of: ${VALID_REDIRECT_STATUSES.join(", ")}.`);
+}
+function resolveRedirectLocation(location, request) {
+	return new URL(location, new URL(request.url).origin).toString();
+}
+
+//#endregion
+export { createCallableRouteHandler, createShopifyRouteHandler, handleShopifyRouteHandlers };
+//# sourceMappingURL=registered-routes.mjs.map