@shopify/shopify-api 13.0.0 → 14.0.0

package/dist/cjs/rest/admin/2026-07/user.js

@@ -0,0 +1,69 @@
+'use strict';
+
+var base = require('../../base.js');
+var types = require('../../../lib/types.js');
+
+/***********************************************************************************************************************
+* This file is auto-generated. If you have an issue, please create a GitHub issue.                                     *
+***********************************************************************************************************************/
+class User extends base.Base {
+    static apiVersion = types.ApiVersion.July26;
+    static hasOne = {};
+    static hasMany = {};
+    static paths = [
+        { "http_method": "get", "operation": "current", "ids": [], "path": "users/current.json" },
+        { "http_method": "get", "operation": "get", "ids": [], "path": "users.json" },
+        { "http_method": "get", "operation": "get", "ids": ["id"], "path": "users/<id>.json" }
+    ];
+    static resourceNames = [
+        {
+            "singular": "user",
+            "plural": "users"
+        }
+    ];
+    static async find({ session, id }) {
+        const result = await this.baseFind({
+            session: session,
+            urlIds: { "id": id },
+            params: {},
+        });
+        return result.data ? result.data[0] : null;
+    }
+    static async all({ session, limit = null, page_info = null, ...otherArgs }) {
+        const response = await this.baseFind({
+            session: session,
+            urlIds: {},
+            params: { "limit": limit, "page_info": page_info, ...otherArgs },
+        });
+        return response;
+    }
+    static async current({ session, ...otherArgs }) {
+        const response = await this.request({
+            http_method: "get",
+            operation: "current",
+            session: session,
+            urlIds: {},
+            params: { ...otherArgs },
+            body: {},
+            entity: null,
+        });
+        return response ? response.body : null;
+    }
+    account_owner;
+    bio;
+    email;
+    first_name;
+    id;
+    im;
+    last_name;
+    locale;
+    permissions;
+    phone;
+    receive_announcements;
+    screen_name;
+    url;
+    user_type;
+}
+
+exports.User = User;
+//# sourceMappingURL=user.js.map

package/dist/cjs/rest/admin/2026-07/user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.js","sources":["../../../../../../../rest/admin/2026-07/user.ts"],"sourcesContent":["/***********************************************************************************************************************\n* This file is auto-generated. If you have an issue, please create a GitHub issue.                                     *\n***********************************************************************************************************************/\n\nimport {Base, FindAllResponse} from '../../base';\nimport {ResourcePath, ResourceNames} from '../../types';\nimport {Session} from '../../../lib/session/session';\nimport {ApiVersion} from '../../../lib/types';\n\ninterface FindArgs {\n  session: Session;\n  id: number | string;\n}\ninterface AllArgs {\n  [key: string]: unknown;\n  session: Session;\n  limit?: unknown;\n  page_info?: unknown;\n}\ninterface CurrentArgs {\n  [key: string]: unknown;\n  session: Session;\n}\n\nexport class User extends Base {\n  public static apiVersion = ApiVersion.July26;\n\n  protected static hasOne: {[key: string]: typeof Base} = {};\n  protected static hasMany: {[key: string]: typeof Base} = {};\n  protected static paths: ResourcePath[] = [\n    {\"http_method\": \"get\", \"operation\": \"current\", \"ids\": [], \"path\": \"users/current.json\"},\n    {\"http_method\": \"get\", \"operation\": \"get\", \"ids\": [], \"path\": \"users.json\"},\n    {\"http_method\": \"get\", \"operation\": \"get\", \"ids\": [\"id\"], \"path\": \"users/<id>.json\"}\n  ];\n  protected static resourceNames: ResourceNames[] = [\n    {\n      \"singular\": \"user\",\n      \"plural\": \"users\"\n    }\n  ];\n\n  public static async find(\n    {\n      session,\n      id\n    }: FindArgs\n  ): Promise<User | null> {\n    const result = await this.baseFind<User>({\n      session: session,\n      urlIds: {\"id\": id},\n      params: {},\n    });\n    return result.data ? result.data[0] : null;\n  }\n\n  public static async all(\n    {\n      session,\n      limit = null,\n      page_info = null,\n      ...otherArgs\n    }: AllArgs\n  ): Promise<FindAllResponse<User>> {\n    const response = await this.baseFind<User>({\n      session: session,\n      urlIds: {},\n      params: {\"limit\": limit, \"page_info\": page_info, ...otherArgs},\n    });\n\n    return response;\n  }\n\n  public static async current(\n    {\n      session,\n      ...otherArgs\n    }: CurrentArgs\n  ): Promise<unknown> {\n    const response = await this.request<User>({\n      http_method: \"get\",\n      operation: \"current\",\n      session: session,\n      urlIds: {},\n      params: {...otherArgs},\n      body: {},\n      entity: null,\n    });\n\n    return response ? response.body : null;\n  }\n\n  public account_owner: boolean | null;\n  public bio: string | null;\n  public email: string | null;\n  public first_name: string | null;\n  public id: string | null;\n  public im: string | null;\n  public last_name: string | null;\n  public locale: string | null;\n  public permissions: string[] | null;\n  public phone: string | null;\n  public receive_announcements: number | null;\n  public screen_name: string | null;\n  public url: string | null;\n  public user_type: string | null;\n}\n"],"names":["Base","ApiVersion"],"mappings":";;;;;AAAA;;AAEwH;AAsBlH,MAAO,IAAK,SAAQA,SAAI,CAAA;AACrB,IAAA,OAAO,UAAU,GAAGC,gBAAU,CAAC,MAAM;AAElC,IAAA,OAAO,MAAM,GAAiC,EAAE;AAChD,IAAA,OAAO,OAAO,GAAiC,EAAE;IACjD,OAAO,KAAK,GAAmB;AACvC,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAC;AACvF,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAC;AAC3E,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,iBAAiB;KACpF;IACS,OAAO,aAAa,GAAoB;AAChD,QAAA;AACE,YAAA,UAAU,EAAE,MAAM;AAClB,YAAA,QAAQ,EAAE;AACX;KACF;IAEM,aAAa,IAAI,CACtB,EACE,OAAO,EACP,EAAE,EACO,EAAA;AAEX,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAO;AACvC,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAC,IAAI,EAAE,EAAE,EAAC;AAClB,YAAA,MAAM,EAAE,EAAE;AACX,SAAA,CAAC;AACF,QAAA,OAAO,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI;IAC5C;AAEO,IAAA,aAAa,GAAG,CACrB,EACE,OAAO,EACP,KAAK,GAAG,IAAI,EACZ,SAAS,GAAG,IAAI,EAChB,GAAG,SAAS,EACJ,EAAA;AAEV,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAO;AACzC,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,MAAM,EAAE,EAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,SAAS,EAAC;AAC/D,SAAA,CAAC;AAEF,QAAA,OAAO,QAAQ;IACjB;IAEO,aAAa,OAAO,CACzB,EACE,OAAO,EACP,GAAG,SAAS,EACA,EAAA;AAEd,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAO;AACxC,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,SAAS,EAAE,SAAS;AACpB,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,MAAM,EAAE,EAAC,GAAG,SAAS,EAAC;AACtB,YAAA,IAAI,EAAE,EAAE;AACR,YAAA,MAAM,EAAE,IAAI;AACb,SAAA,CAAC;QAEF,OAAO,QAAQ,GAAG,QAAQ,CAAC,IAAI,GAAG,IAAI;IACxC;AAEO,IAAA,aAAa;AACb,IAAA,GAAG;AACH,IAAA,KAAK;AACL,IAAA,UAAU;AACV,IAAA,EAAE;AACF,IAAA,EAAE;AACF,IAAA,SAAS;AACT,IAAA,MAAM;AACN,IAAA,WAAW;AACX,IAAA,KAAK;AACL,IAAA,qBAAqB;AACrB,IAAA,WAAW;AACX,IAAA,GAAG;AACH,IAAA,SAAS;;;;;"}

package/dist/cjs/rest/admin/2026-07/variant.js

@@ -0,0 +1,96 @@
+'use strict';
+
+var base = require('../../base.js');
+var types = require('../../../lib/types.js');
+
+/***********************************************************************************************************************
+* This file is auto-generated. If you have an issue, please create a GitHub issue.                                     *
+***********************************************************************************************************************/
+class Variant extends base.Base {
+    static apiVersion = types.ApiVersion.July26;
+    static hasOne = {};
+    static hasMany = {};
+    static paths = [
+        { "http_method": "delete", "operation": "delete", "ids": ["product_id", "id"], "path": "products/<product_id>/variants/<id>.json" },
+        { "http_method": "get", "operation": "count", "ids": ["product_id"], "path": "products/<product_id>/variants/count.json" },
+        { "http_method": "get", "operation": "get", "ids": ["product_id"], "path": "products/<product_id>/variants.json" },
+        { "http_method": "get", "operation": "get", "ids": ["id"], "path": "variants/<id>.json" },
+        { "http_method": "post", "operation": "post", "ids": ["product_id"], "path": "products/<product_id>/variants.json" },
+        { "http_method": "put", "operation": "put", "ids": ["id"], "path": "variants/<id>.json" }
+    ];
+    static readOnlyAttributes = [
+        "inventory_quantity"
+    ];
+    static resourceNames = [
+        {
+            "singular": "variant",
+            "plural": "variants"
+        }
+    ];
+    static async find({ session, id, fields = null }) {
+        const result = await this.baseFind({
+            session: session,
+            urlIds: { "id": id },
+            params: { "fields": fields },
+        });
+        return result.data ? result.data[0] : null;
+    }
+    static async delete({ session, id, product_id = null }) {
+        const response = await this.request({
+            http_method: "delete",
+            operation: "delete",
+            session: session,
+            urlIds: { "id": id, "product_id": product_id },
+            params: {},
+        });
+        return response ? response.body : null;
+    }
+    static async all({ session, product_id = null, limit = null, presentment_currencies = null, since_id = null, fields = null, ...otherArgs }) {
+        const response = await this.baseFind({
+            session: session,
+            urlIds: { "product_id": product_id },
+            params: { "limit": limit, "presentment_currencies": presentment_currencies, "since_id": since_id, "fields": fields, ...otherArgs },
+        });
+        return response;
+    }
+    static async count({ session, product_id = null, ...otherArgs }) {
+        const response = await this.request({
+            http_method: "get",
+            operation: "count",
+            session: session,
+            urlIds: { "product_id": product_id },
+            params: { ...otherArgs },
+            body: {},
+            entity: null,
+        });
+        return response ? response.body : null;
+    }
+    barcode;
+    compare_at_price;
+    created_at;
+    fulfillment_service;
+    grams;
+    id;
+    image_id;
+    inventory_item_id;
+    inventory_management;
+    inventory_policy;
+    inventory_quantity;
+    old_inventory_quantity;
+    option;
+    position;
+    presentment_prices;
+    price;
+    product_id;
+    requires_shipping;
+    sku;
+    tax_code;
+    taxable;
+    title;
+    updated_at;
+    weight;
+    weight_unit;
+}
+
+exports.Variant = Variant;
+//# sourceMappingURL=variant.js.map

package/dist/cjs/rest/admin/2026-07/variant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"variant.js","sources":["../../../../../../../rest/admin/2026-07/variant.ts"],"sourcesContent":["/***********************************************************************************************************************\n* This file is auto-generated. If you have an issue, please create a GitHub issue.                                     *\n***********************************************************************************************************************/\n\nimport {Base, FindAllResponse} from '../../base';\nimport {ResourcePath, ResourceNames} from '../../types';\nimport {Session} from '../../../lib/session/session';\nimport {ApiVersion} from '../../../lib/types';\n\ninterface FindArgs {\n  session: Session;\n  id: number | string;\n  fields?: unknown;\n}\ninterface DeleteArgs {\n  session: Session;\n  id: number | string;\n  product_id?: number | string | null;\n}\ninterface AllArgs {\n  [key: string]: unknown;\n  session: Session;\n  product_id?: number | string | null;\n  limit?: unknown;\n  presentment_currencies?: unknown;\n  since_id?: unknown;\n  fields?: unknown;\n}\ninterface CountArgs {\n  [key: string]: unknown;\n  session: Session;\n  product_id?: number | string | null;\n}\n\nexport class Variant extends Base {\n  public static apiVersion = ApiVersion.July26;\n\n  protected static hasOne: {[key: string]: typeof Base} = {};\n  protected static hasMany: {[key: string]: typeof Base} = {};\n  protected static paths: ResourcePath[] = [\n    {\"http_method\": \"delete\", \"operation\": \"delete\", \"ids\": [\"product_id\", \"id\"], \"path\": \"products/<product_id>/variants/<id>.json\"},\n    {\"http_method\": \"get\", \"operation\": \"count\", \"ids\": [\"product_id\"], \"path\": \"products/<product_id>/variants/count.json\"},\n    {\"http_method\": \"get\", \"operation\": \"get\", \"ids\": [\"product_id\"], \"path\": \"products/<product_id>/variants.json\"},\n    {\"http_method\": \"get\", \"operation\": \"get\", \"ids\": [\"id\"], \"path\": \"variants/<id>.json\"},\n    {\"http_method\": \"post\", \"operation\": \"post\", \"ids\": [\"product_id\"], \"path\": \"products/<product_id>/variants.json\"},\n    {\"http_method\": \"put\", \"operation\": \"put\", \"ids\": [\"id\"], \"path\": \"variants/<id>.json\"}\n  ];\n  protected static readOnlyAttributes: string[] = [\n    \"inventory_quantity\"\n  ];\n  protected static resourceNames: ResourceNames[] = [\n    {\n      \"singular\": \"variant\",\n      \"plural\": \"variants\"\n    }\n  ];\n\n  public static async find(\n    {\n      session,\n      id,\n      fields = null\n    }: FindArgs\n  ): Promise<Variant | null> {\n    const result = await this.baseFind<Variant>({\n      session: session,\n      urlIds: {\"id\": id},\n      params: {\"fields\": fields},\n    });\n    return result.data ? result.data[0] : null;\n  }\n\n  public static async delete(\n    {\n      session,\n      id,\n      product_id = null\n    }: DeleteArgs\n  ): Promise<unknown> {\n    const response = await this.request<Variant>({\n      http_method: \"delete\",\n      operation: \"delete\",\n      session: session,\n      urlIds: {\"id\": id, \"product_id\": product_id},\n      params: {},\n    });\n\n    return response ? response.body : null;\n  }\n\n  public static async all(\n    {\n      session,\n      product_id = null,\n      limit = null,\n      presentment_currencies = null,\n      since_id = null,\n      fields = null,\n      ...otherArgs\n    }: AllArgs\n  ): Promise<FindAllResponse<Variant>> {\n    const response = await this.baseFind<Variant>({\n      session: session,\n      urlIds: {\"product_id\": product_id},\n      params: {\"limit\": limit, \"presentment_currencies\": presentment_currencies, \"since_id\": since_id, \"fields\": fields, ...otherArgs},\n    });\n\n    return response;\n  }\n\n  public static async count(\n    {\n      session,\n      product_id = null,\n      ...otherArgs\n    }: CountArgs\n  ): Promise<unknown> {\n    const response = await this.request<Variant>({\n      http_method: \"get\",\n      operation: \"count\",\n      session: session,\n      urlIds: {\"product_id\": product_id},\n      params: {...otherArgs},\n      body: {},\n      entity: null,\n    });\n\n    return response ? response.body : null;\n  }\n\n  public barcode: string | null;\n  public compare_at_price: string | null;\n  public created_at: string | null;\n  public fulfillment_service: string | null;\n  public grams: number | null;\n  public id: string | null;\n  public image_id: string | null;\n  public inventory_item_id: string | null;\n  public inventory_management: string | null;\n  public inventory_policy: string | null;\n  public inventory_quantity: number | null;\n  public old_inventory_quantity: number | null;\n  public option: {[key: string]: unknown} | null;\n  public position: number | null;\n  public presentment_prices: {[key: string]: unknown}[] | null;\n  public price: string | null;\n  public product_id: string | null;\n  public requires_shipping: boolean | null;\n  public sku: string | null;\n  public tax_code: string | null;\n  public taxable: boolean | null;\n  public title: string | null;\n  public updated_at: string | null;\n  public weight: number | null;\n  public weight_unit: string | null;\n}\n"],"names":["Base","ApiVersion"],"mappings":";;;;;AAAA;;AAEwH;AAgClH,MAAO,OAAQ,SAAQA,SAAI,CAAA;AACxB,IAAA,OAAO,UAAU,GAAGC,gBAAU,CAAC,MAAM;AAElC,IAAA,OAAO,MAAM,GAAiC,EAAE;AAChD,IAAA,OAAO,OAAO,GAAiC,EAAE;IACjD,OAAO,KAAK,GAAmB;AACvC,QAAA,EAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,0CAA0C,EAAC;AACjI,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,2CAA2C,EAAC;AACxH,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,qCAAqC,EAAC;AAChH,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAC;AACvF,QAAA,EAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,qCAAqC,EAAC;AAClH,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB;KACvF;IACS,OAAO,kBAAkB,GAAa;QAC9C;KACD;IACS,OAAO,aAAa,GAAoB;AAChD,QAAA;AACE,YAAA,UAAU,EAAE,SAAS;AACrB,YAAA,QAAQ,EAAE;AACX;KACF;AAEM,IAAA,aAAa,IAAI,CACtB,EACE,OAAO,EACP,EAAE,EACF,MAAM,GAAG,IAAI,EACJ,EAAA;AAEX,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAU;AAC1C,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAC,IAAI,EAAE,EAAE,EAAC;AAClB,YAAA,MAAM,EAAE,EAAC,QAAQ,EAAE,MAAM,EAAC;AAC3B,SAAA,CAAC;AACF,QAAA,OAAO,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI;IAC5C;AAEO,IAAA,aAAa,MAAM,CACxB,EACE,OAAO,EACP,EAAE,EACF,UAAU,GAAG,IAAI,EACN,EAAA;AAEb,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAU;AAC3C,YAAA,WAAW,EAAE,QAAQ;AACrB,YAAA,SAAS,EAAE,QAAQ;AACnB,YAAA,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,EAAC,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,EAAC;AAC5C,YAAA,MAAM,EAAE,EAAE;AACX,SAAA,CAAC;QAEF,OAAO,QAAQ,GAAG,QAAQ,CAAC,IAAI,GAAG,IAAI;IACxC;AAEO,IAAA,aAAa,GAAG,CACrB,EACE,OAAO,EACP,UAAU,GAAG,IAAI,EACjB,KAAK,GAAG,IAAI,EACZ,sBAAsB,GAAG,IAAI,EAC7B,QAAQ,GAAG,IAAI,EACf,MAAM,GAAG,IAAI,EACb,GAAG,SAAS,EACJ,EAAA;AAEV,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAU;AAC5C,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAC,YAAY,EAAE,UAAU,EAAC;YAClC,MAAM,EAAE,EAAC,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,EAAC;AACjI,SAAA,CAAC;AAEF,QAAA,OAAO,QAAQ;IACjB;AAEO,IAAA,aAAa,KAAK,CACvB,EACE,OAAO,EACP,UAAU,GAAG,IAAI,EACjB,GAAG,SAAS,EACF,EAAA;AAEZ,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAU;AAC3C,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,SAAS,EAAE,OAAO;AAClB,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAC,YAAY,EAAE,UAAU,EAAC;AAClC,YAAA,MAAM,EAAE,EAAC,GAAG,SAAS,EAAC;AACtB,YAAA,IAAI,EAAE,EAAE;AACR,YAAA,MAAM,EAAE,IAAI;AACb,SAAA,CAAC;QAEF,OAAO,QAAQ,GAAG,QAAQ,CAAC,IAAI,GAAG,IAAI;IACxC;AAEO,IAAA,OAAO;AACP,IAAA,gBAAgB;AAChB,IAAA,UAAU;AACV,IAAA,mBAAmB;AACnB,IAAA,KAAK;AACL,IAAA,EAAE;AACF,IAAA,QAAQ;AACR,IAAA,iBAAiB;AACjB,IAAA,oBAAoB;AACpB,IAAA,gBAAgB;AAChB,IAAA,kBAAkB;AAClB,IAAA,sBAAsB;AACtB,IAAA,MAAM;AACN,IAAA,QAAQ;AACR,IAAA,kBAAkB;AAClB,IAAA,KAAK;AACL,IAAA,UAAU;AACV,IAAA,iBAAiB;AACjB,IAAA,GAAG;AACH,IAAA,QAAQ;AACR,IAAA,OAAO;AACP,IAAA,KAAK;AACL,IAAA,UAAU;AACV,IAAA,MAAM;AACN,IAAA,WAAW;;;;;"}

package/dist/cjs/rest/admin/2026-07/webhook.js

@@ -0,0 +1,78 @@
+'use strict';
+
+var base = require('../../base.js');
+var types = require('../../../lib/types.js');
+
+/***********************************************************************************************************************
+* This file is auto-generated. If you have an issue, please create a GitHub issue.                                     *
+***********************************************************************************************************************/
+class Webhook extends base.Base {
+    static apiVersion = types.ApiVersion.July26;
+    static hasOne = {};
+    static hasMany = {};
+    static paths = [
+        { "http_method": "delete", "operation": "delete", "ids": ["id"], "path": "webhooks/<id>.json" },
+        { "http_method": "get", "operation": "count", "ids": [], "path": "webhooks/count.json" },
+        { "http_method": "get", "operation": "get", "ids": [], "path": "webhooks.json" },
+        { "http_method": "get", "operation": "get", "ids": ["id"], "path": "webhooks/<id>.json" },
+        { "http_method": "post", "operation": "post", "ids": [], "path": "webhooks.json" },
+        { "http_method": "put", "operation": "put", "ids": ["id"], "path": "webhooks/<id>.json" }
+    ];
+    static resourceNames = [
+        {
+            "singular": "webhook",
+            "plural": "webhooks"
+        }
+    ];
+    static async find({ session, id, fields = null }) {
+        const result = await this.baseFind({
+            session: session,
+            urlIds: { "id": id },
+            params: { "fields": fields },
+        });
+        return result.data ? result.data[0] : null;
+    }
+    static async delete({ session, id }) {
+        const response = await this.request({
+            http_method: "delete",
+            operation: "delete",
+            session: session,
+            urlIds: { "id": id },
+            params: {},
+        });
+        return response ? response.body : null;
+    }
+    static async all({ session, address = null, created_at_max = null, created_at_min = null, fields = null, limit = null, since_id = null, topic = null, updated_at_min = null, updated_at_max = null, ...otherArgs }) {
+        const response = await this.baseFind({
+            session: session,
+            urlIds: {},
+            params: { "address": address, "created_at_max": created_at_max, "created_at_min": created_at_min, "fields": fields, "limit": limit, "since_id": since_id, "topic": topic, "updated_at_min": updated_at_min, "updated_at_max": updated_at_max, ...otherArgs },
+        });
+        return response;
+    }
+    static async count({ session, address = null, topic = null, ...otherArgs }) {
+        const response = await this.request({
+            http_method: "get",
+            operation: "count",
+            session: session,
+            urlIds: {},
+            params: { "address": address, "topic": topic, ...otherArgs },
+            body: {},
+            entity: null,
+        });
+        return response ? response.body : null;
+    }
+    address;
+    topic;
+    api_version;
+    created_at;
+    fields;
+    format;
+    id;
+    metafield_namespaces;
+    private_metafield_namespaces;
+    updated_at;
+}
+
+exports.Webhook = Webhook;
+//# sourceMappingURL=webhook.js.map

package/dist/cjs/rest/admin/2026-07/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sources":["../../../../../../../rest/admin/2026-07/webhook.ts"],"sourcesContent":["/***********************************************************************************************************************\n* This file is auto-generated. If you have an issue, please create a GitHub issue.                                     *\n***********************************************************************************************************************/\n\nimport {Base, FindAllResponse} from '../../base';\nimport {ResourcePath, ResourceNames} from '../../types';\nimport {Session} from '../../../lib/session/session';\nimport {ApiVersion} from '../../../lib/types';\n\ninterface FindArgs {\n  session: Session;\n  id: number | string;\n  fields?: unknown;\n}\ninterface DeleteArgs {\n  session: Session;\n  id: number | string;\n}\ninterface AllArgs {\n  [key: string]: unknown;\n  session: Session;\n  address?: unknown;\n  created_at_max?: unknown;\n  created_at_min?: unknown;\n  fields?: unknown;\n  limit?: unknown;\n  since_id?: unknown;\n  topic?: unknown;\n  updated_at_min?: unknown;\n  updated_at_max?: unknown;\n}\ninterface CountArgs {\n  [key: string]: unknown;\n  session: Session;\n  address?: unknown;\n  topic?: unknown;\n}\n\nexport class Webhook extends Base {\n  public static apiVersion = ApiVersion.July26;\n\n  protected static hasOne: {[key: string]: typeof Base} = {};\n  protected static hasMany: {[key: string]: typeof Base} = {};\n  protected static paths: ResourcePath[] = [\n    {\"http_method\": \"delete\", \"operation\": \"delete\", \"ids\": [\"id\"], \"path\": \"webhooks/<id>.json\"},\n    {\"http_method\": \"get\", \"operation\": \"count\", \"ids\": [], \"path\": \"webhooks/count.json\"},\n    {\"http_method\": \"get\", \"operation\": \"get\", \"ids\": [], \"path\": \"webhooks.json\"},\n    {\"http_method\": \"get\", \"operation\": \"get\", \"ids\": [\"id\"], \"path\": \"webhooks/<id>.json\"},\n    {\"http_method\": \"post\", \"operation\": \"post\", \"ids\": [], \"path\": \"webhooks.json\"},\n    {\"http_method\": \"put\", \"operation\": \"put\", \"ids\": [\"id\"], \"path\": \"webhooks/<id>.json\"}\n  ];\n  protected static resourceNames: ResourceNames[] = [\n    {\n      \"singular\": \"webhook\",\n      \"plural\": \"webhooks\"\n    }\n  ];\n\n  public static async find(\n    {\n      session,\n      id,\n      fields = null\n    }: FindArgs\n  ): Promise<Webhook | null> {\n    const result = await this.baseFind<Webhook>({\n      session: session,\n      urlIds: {\"id\": id},\n      params: {\"fields\": fields},\n    });\n    return result.data ? result.data[0] : null;\n  }\n\n  public static async delete(\n    {\n      session,\n      id\n    }: DeleteArgs\n  ): Promise<unknown> {\n    const response = await this.request<Webhook>({\n      http_method: \"delete\",\n      operation: \"delete\",\n      session: session,\n      urlIds: {\"id\": id},\n      params: {},\n    });\n\n    return response ? response.body : null;\n  }\n\n  public static async all(\n    {\n      session,\n      address = null,\n      created_at_max = null,\n      created_at_min = null,\n      fields = null,\n      limit = null,\n      since_id = null,\n      topic = null,\n      updated_at_min = null,\n      updated_at_max = null,\n      ...otherArgs\n    }: AllArgs\n  ): Promise<FindAllResponse<Webhook>> {\n    const response = await this.baseFind<Webhook>({\n      session: session,\n      urlIds: {},\n      params: {\"address\": address, \"created_at_max\": created_at_max, \"created_at_min\": created_at_min, \"fields\": fields, \"limit\": limit, \"since_id\": since_id, \"topic\": topic, \"updated_at_min\": updated_at_min, \"updated_at_max\": updated_at_max, ...otherArgs},\n    });\n\n    return response;\n  }\n\n  public static async count(\n    {\n      session,\n      address = null,\n      topic = null,\n      ...otherArgs\n    }: CountArgs\n  ): Promise<unknown> {\n    const response = await this.request<Webhook>({\n      http_method: \"get\",\n      operation: \"count\",\n      session: session,\n      urlIds: {},\n      params: {\"address\": address, \"topic\": topic, ...otherArgs},\n      body: {},\n      entity: null,\n    });\n\n    return response ? response.body : null;\n  }\n\n  public address: string | null;\n  public topic: string | null;\n  public api_version: string | null;\n  public created_at: string | null;\n  public fields: string[] | null;\n  public format: string | null;\n  public id: string | null;\n  public metafield_namespaces: string[] | null;\n  public private_metafield_namespaces: string[] | null;\n  public updated_at: string | null;\n}\n"],"names":["Base","ApiVersion"],"mappings":";;;;;AAAA;;AAEwH;AAoClH,MAAO,OAAQ,SAAQA,SAAI,CAAA;AACxB,IAAA,OAAO,UAAU,GAAGC,gBAAU,CAAC,MAAM;AAElC,IAAA,OAAO,MAAM,GAAiC,EAAE;AAChD,IAAA,OAAO,OAAO,GAAiC,EAAE;IACjD,OAAO,KAAK,GAAmB;AACvC,QAAA,EAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAC;AAC7F,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAC;AACtF,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAC;AAC9E,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAC;AACvF,QAAA,EAAC,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,eAAe,EAAC;AAChF,QAAA,EAAC,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB;KACvF;IACS,OAAO,aAAa,GAAoB;AAChD,QAAA;AACE,YAAA,UAAU,EAAE,SAAS;AACrB,YAAA,QAAQ,EAAE;AACX;KACF;AAEM,IAAA,aAAa,IAAI,CACtB,EACE,OAAO,EACP,EAAE,EACF,MAAM,GAAG,IAAI,EACJ,EAAA;AAEX,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAU;AAC1C,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAC,IAAI,EAAE,EAAE,EAAC;AAClB,YAAA,MAAM,EAAE,EAAC,QAAQ,EAAE,MAAM,EAAC;AAC3B,SAAA,CAAC;AACF,QAAA,OAAO,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI;IAC5C;IAEO,aAAa,MAAM,CACxB,EACE,OAAO,EACP,EAAE,EACS,EAAA;AAEb,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAU;AAC3C,YAAA,WAAW,EAAE,QAAQ;AACrB,YAAA,SAAS,EAAE,QAAQ;AACnB,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAC,IAAI,EAAE,EAAE,EAAC;AAClB,YAAA,MAAM,EAAE,EAAE;AACX,SAAA,CAAC;QAEF,OAAO,QAAQ,GAAG,QAAQ,CAAC,IAAI,GAAG,IAAI;IACxC;IAEO,aAAa,GAAG,CACrB,EACE,OAAO,EACP,OAAO,GAAG,IAAI,EACd,cAAc,GAAG,IAAI,EACrB,cAAc,GAAG,IAAI,EACrB,MAAM,GAAG,IAAI,EACb,KAAK,GAAG,IAAI,EACZ,QAAQ,GAAG,IAAI,EACf,KAAK,GAAG,IAAI,EACZ,cAAc,GAAG,IAAI,EACrB,cAAc,GAAG,IAAI,EACrB,GAAG,SAAS,EACJ,EAAA;AAEV,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAU;AAC5C,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,MAAM,EAAE,EAAC,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,SAAS,EAAC;AAC3P,SAAA,CAAC;AAEF,QAAA,OAAO,QAAQ;IACjB;AAEO,IAAA,aAAa,KAAK,CACvB,EACE,OAAO,EACP,OAAO,GAAG,IAAI,EACd,KAAK,GAAG,IAAI,EACZ,GAAG,SAAS,EACF,EAAA;AAEZ,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAU;AAC3C,YAAA,WAAW,EAAE,KAAK;AAClB,YAAA,SAAS,EAAE,OAAO;AAClB,YAAA,OAAO,EAAE,OAAO;AAChB,YAAA,MAAM,EAAE,EAAE;AACV,YAAA,MAAM,EAAE,EAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,EAAC;AAC1D,YAAA,IAAI,EAAE,EAAE;AACR,YAAA,MAAM,EAAE,IAAI;AACb,SAAA,CAAC;QAEF,OAAO,QAAQ,GAAG,QAAQ,CAAC,IAAI,GAAG,IAAI;IACxC;AAEO,IAAA,OAAO;AACP,IAAA,KAAK;AACL,IAAA,WAAW;AACX,IAAA,UAAU;AACV,IAAA,MAAM;AACN,IAAA,MAAM;AACN,IAAA,EAAE;AACF,IAAA,oBAAoB;AACpB,IAAA,4BAA4B;AAC5B,IAAA,UAAU;;;;;"}

package/dist/cjs/runtime/crypto/utils.js

@@ -3,12 +3,18 @@
 var error = require('../../lib/error.js');
 var types = require('./types.js');
 
-async function createSHA256HMAC(secret, payload, returnFormat = types.HashFormat.Base64) {
-    const cryptoLib = typeof crypto?.webcrypto === 'undefined'
+const enc = new TextEncoder();
+function getCryptoLib() {
+    return typeof crypto?.webcrypto === 'undefined'
         ? crypto
         : crypto.webcrypto;
-    const enc = new TextEncoder();
-    const key = await cryptoLib.subtle.importKey('raw', enc.encode(secret), {
+}
+function hmacKeyData(secret) {
+    return typeof secret === 'string' ? enc.encode(secret) : secret;
+}
+async function createSHA256HMAC(secret, payload, returnFormat = types.HashFormat.Base64) {
+    const cryptoLib = getCryptoLib();
+    const key = await cryptoLib.subtle.importKey('raw', hmacKeyData(secret), {
         name: 'HMAC',
         hash: { name: 'SHA-256' },
     }, false, ['sign']);
@@ -17,6 +23,16 @@ async function createSHA256HMAC(secret, payload, returnFormat = types.HashFormat
         ? asBase64(signature)
         : asHex(signature);
 }
+async function deriveSHA256HMACKey(secret, info) {
+    const cryptoLib = getCryptoLib();
+    const keyMaterial = await cryptoLib.subtle.importKey('raw', enc.encode(secret), 'HKDF', false, ['deriveBits']);
+    return cryptoLib.subtle.deriveBits({
+        name: 'HKDF',
+        hash: 'SHA-256',
+        salt: new Uint8Array(0),
+        info: enc.encode(info),
+    }, keyMaterial, 256);
+}
 function asHex(buffer) {
     return [...new Uint8Array(buffer)]
         .map((byte) => byte.toString(16).padStart(2, '0'))
@@ -63,5 +79,6 @@ function hashString(str, returnFormat) {
 exports.asBase64 = asBase64;
 exports.asHex = asHex;
 exports.createSHA256HMAC = createSHA256HMAC;
+exports.deriveSHA256HMACKey = deriveSHA256HMACKey;
 exports.hashString = hashString;
 //# sourceMappingURL=utils.js.map

package/dist/cjs/runtime/crypto/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sources":["../../../../../../runtime/crypto/utils.ts"],"sourcesContent":["import {ShopifyError} from '../../lib/error';\n\nimport {HashFormat} from './types';\n\nexport async function createSHA256HMAC(\n  secret: string,\n  payload: string,\n  returnFormat: HashFormat = HashFormat.Base64,\n): Promise<string> {\n  const cryptoLib =\n    typeof (crypto as any)?.webcrypto === 'undefined'\n      ? crypto\n      : (crypto as any).webcrypto;\n\n  const enc = new TextEncoder();\n  const key = await cryptoLib.subtle.importKey(\n    'raw',\n    enc.encode(secret),\n    {\n      name: 'HMAC',\n      hash: {name: 'SHA-256'},\n    },\n    false,\n    ['sign'],\n  );\n\n  const signature = await cryptoLib.subtle.sign(\n    'HMAC',\n    key,\n    enc.encode(payload),\n  );\n  return returnFormat === HashFormat.Base64\n    ? asBase64(signature)\n    : asHex(signature);\n}\n\nexport function asHex(buffer: ArrayBuffer): string {\n  return [...new Uint8Array(buffer)]\n    .map((byte) => byte.toString(16).padStart(2, '0'))\n    .join('');\n}\n\nconst LookupTable =\n  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';\nexport function asBase64(buffer: ArrayBuffer): string {\n  let output = '';\n\n  const input = new Uint8Array(buffer);\n  for (let i = 0; i < input.length; ) {\n    const byte1 = input[i++];\n    const byte2 = input[i++];\n    const byte3 = input[i++];\n\n    const enc1 = byte1 >> 2;\n    const enc2 = ((byte1 & 0b00000011) << 4) | (byte2 >> 4);\n    let enc3 = ((byte2 & 0b00001111) << 2) | (byte3 >> 6);\n    let enc4 = byte3 & 0b00111111;\n\n    if (isNaN(byte2)) {\n      enc3 = 64;\n    }\n    if (isNaN(byte3)) {\n      enc4 = 64;\n    }\n\n    output +=\n      LookupTable[enc1] +\n      LookupTable[enc2] +\n      LookupTable[enc3] +\n      LookupTable[enc4];\n  }\n  return output;\n}\n\nexport function hashString(str: string, returnFormat: HashFormat): string {\n  const buffer = new TextEncoder().encode(str);\n\n  switch (returnFormat) {\n    case HashFormat.Base64:\n      return asBase64(buffer);\n    case HashFormat.Hex:\n      return asHex(buffer);\n    default:\n      throw new ShopifyError(`Unrecognized hash format '${returnFormat}'`);\n  }\n}\n"],"names":["HashFormat","ShopifyError"],"mappings":";;;;;AAIO,eAAe,gBAAgB,CACpC,MAAc,EACd,OAAe,EACf,YAAA,GAA2BA,gBAAU,CAAC,MAAM,EAAA;AAE5C,IAAA,MAAM,SAAS,GACb,OAAQ,MAAc,EAAE,SAAS,KAAK;AACpC,UAAE;AACF,UAAG,MAAc,CAAC,SAAS;AAE/B,IAAA,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE;AAC7B,IAAA,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EACL,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAClB;AACE,QAAA,IAAI,EAAE,MAAM;AACZ,QAAA,IAAI,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;AACxB,KAAA,EACD,KAAK,EACL,CAAC,MAAM,CAAC,CACT;IAED,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAC3C,MAAM,EACN,GAAG,EACH,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACpB;AACD,IAAA,OAAO,YAAY,KAAKA,gBAAU,CAAC;AACjC,UAAE,QAAQ,CAAC,SAAS;AACpB,UAAE,KAAK,CAAC,SAAS,CAAC;AACtB;AAEM,SAAU,KAAK,CAAC,MAAmB,EAAA;AACvC,IAAA,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC;AAC9B,SAAA,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;SAChD,IAAI,CAAC,EAAE,CAAC;AACb;AAEA,MAAM,WAAW,GACf,mEAAmE;AAC/D,SAAU,QAAQ,CAAC,MAAmB,EAAA;IAC1C,IAAI,MAAM,GAAG,EAAE;AAEf,IAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAI;AAClC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;AACxB,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;AACxB,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;AAExB,QAAA,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC;AACvB,QAAA,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,UAAU,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AACvD,QAAA,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,UAAU,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AACrD,QAAA,IAAI,IAAI,GAAG,KAAK,GAAG,UAAU;AAE7B,QAAA,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE;YAChB,IAAI,GAAG,EAAE;QACX;AACA,QAAA,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE;YAChB,IAAI,GAAG,EAAE;QACX;QAEA,MAAM;YACJ,WAAW,CAAC,IAAI,CAAC;gBACjB,WAAW,CAAC,IAAI,CAAC;gBACjB,WAAW,CAAC,IAAI,CAAC;gBACjB,WAAW,CAAC,IAAI,CAAC;IACrB;AACA,IAAA,OAAO,MAAM;AACf;AAEM,SAAU,UAAU,CAAC,GAAW,EAAE,YAAwB,EAAA;IAC9D,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;IAE5C,QAAQ,YAAY;QAClB,KAAKA,gBAAU,CAAC,MAAM;AACpB,YAAA,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,KAAKA,gBAAU,CAAC,GAAG;AACjB,YAAA,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,QAAA;AACE,YAAA,MAAM,IAAIC,kBAAY,CAAC,6BAA6B,YAAY,CAAA,CAAA,CAAG,CAAC;;AAE1E;;;;;;;"}
+{"version":3,"file":"utils.js","sources":["../../../../../../runtime/crypto/utils.ts"],"sourcesContent":["import {ShopifyError} from '../../lib/error';\n\nimport {HashFormat} from './types';\n\ntype HMACSecret = string | ArrayBuffer;\n\nconst enc = new TextEncoder();\n\nfunction getCryptoLib(): Crypto {\n  return typeof (crypto as any)?.webcrypto === 'undefined'\n    ? crypto\n    : (crypto as any).webcrypto;\n}\n\nfunction hmacKeyData(secret: HMACSecret): BufferSource {\n  return typeof secret === 'string' ? enc.encode(secret) : secret;\n}\n\nexport async function createSHA256HMAC(\n  secret: HMACSecret,\n  payload: string,\n  returnFormat: HashFormat = HashFormat.Base64,\n): Promise<string> {\n  const cryptoLib = getCryptoLib();\n  const key = await cryptoLib.subtle.importKey(\n    'raw',\n    hmacKeyData(secret),\n    {\n      name: 'HMAC',\n      hash: {name: 'SHA-256'},\n    },\n    false,\n    ['sign'],\n  );\n\n  const signature = await cryptoLib.subtle.sign(\n    'HMAC',\n    key,\n    enc.encode(payload),\n  );\n  return returnFormat === HashFormat.Base64\n    ? asBase64(signature)\n    : asHex(signature);\n}\n\nexport async function deriveSHA256HMACKey(\n  secret: string,\n  info: string,\n): Promise<ArrayBuffer> {\n  const cryptoLib = getCryptoLib();\n  const keyMaterial = await cryptoLib.subtle.importKey(\n    'raw',\n    enc.encode(secret),\n    'HKDF',\n    false,\n    ['deriveBits'],\n  );\n\n  return cryptoLib.subtle.deriveBits(\n    {\n      name: 'HKDF',\n      hash: 'SHA-256',\n      salt: new Uint8Array(0),\n      info: enc.encode(info),\n    },\n    keyMaterial,\n    256,\n  );\n}\n\nexport function asHex(buffer: ArrayBuffer | Uint8Array): string {\n  return [...new Uint8Array(buffer)]\n    .map((byte) => byte.toString(16).padStart(2, '0'))\n    .join('');\n}\n\nconst LookupTable =\n  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';\nexport function asBase64(buffer: ArrayBuffer | Uint8Array): string {\n  let output = '';\n\n  const input = new Uint8Array(buffer);\n  for (let i = 0; i < input.length;) {\n    const byte1 = input[i++];\n    const byte2 = input[i++];\n    const byte3 = input[i++];\n\n    const enc1 = byte1 >> 2;\n    const enc2 = ((byte1 & 0b00000011) << 4) | (byte2 >> 4);\n    let enc3 = ((byte2 & 0b00001111) << 2) | (byte3 >> 6);\n    let enc4 = byte3 & 0b00111111;\n\n    if (isNaN(byte2)) {\n      enc3 = 64;\n    }\n    if (isNaN(byte3)) {\n      enc4 = 64;\n    }\n\n    output +=\n      LookupTable[enc1] +\n      LookupTable[enc2] +\n      LookupTable[enc3] +\n      LookupTable[enc4];\n  }\n  return output;\n}\n\nexport function hashString(str: string, returnFormat: HashFormat): string {\n  const buffer = new TextEncoder().encode(str);\n\n  switch (returnFormat) {\n    case HashFormat.Base64:\n      return asBase64(buffer);\n    case HashFormat.Hex:\n      return asHex(buffer);\n    default:\n      throw new ShopifyError(`Unrecognized hash format '${returnFormat}'`);\n  }\n}\n"],"names":["HashFormat","ShopifyError"],"mappings":";;;;;AAMA,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE;AAE7B,SAAS,YAAY,GAAA;AACnB,IAAA,OAAO,OAAQ,MAAc,EAAE,SAAS,KAAK;AAC3C,UAAE;AACF,UAAG,MAAc,CAAC,SAAS;AAC/B;AAEA,SAAS,WAAW,CAAC,MAAkB,EAAA;AACrC,IAAA,OAAO,OAAO,MAAM,KAAK,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM;AACjE;AAEO,eAAe,gBAAgB,CACpC,MAAkB,EAClB,OAAe,EACf,YAAA,GAA2BA,gBAAU,CAAC,MAAM,EAAA;AAE5C,IAAA,MAAM,SAAS,GAAG,YAAY,EAAE;AAChC,IAAA,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EACL,WAAW,CAAC,MAAM,CAAC,EACnB;AACE,QAAA,IAAI,EAAE,MAAM;AACZ,QAAA,IAAI,EAAE,EAAC,IAAI,EAAE,SAAS,EAAC;AACxB,KAAA,EACD,KAAK,EACL,CAAC,MAAM,CAAC,CACT;IAED,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAC3C,MAAM,EACN,GAAG,EACH,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CACpB;AACD,IAAA,OAAO,YAAY,KAAKA,gBAAU,CAAC;AACjC,UAAE,QAAQ,CAAC,SAAS;AACpB,UAAE,KAAK,CAAC,SAAS,CAAC;AACtB;AAEO,eAAe,mBAAmB,CACvC,MAAc,EACd,IAAY,EAAA;AAEZ,IAAA,MAAM,SAAS,GAAG,YAAY,EAAE;IAChC,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAClD,KAAK,EACL,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAClB,MAAM,EACN,KAAK,EACL,CAAC,YAAY,CAAC,CACf;AAED,IAAA,OAAO,SAAS,CAAC,MAAM,CAAC,UAAU,CAChC;AACE,QAAA,IAAI,EAAE,MAAM;AACZ,QAAA,IAAI,EAAE,SAAS;AACf,QAAA,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;AACvB,QAAA,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;AACvB,KAAA,EACD,WAAW,EACX,GAAG,CACJ;AACH;AAEM,SAAU,KAAK,CAAC,MAAgC,EAAA;AACpD,IAAA,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC;AAC9B,SAAA,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;SAChD,IAAI,CAAC,EAAE,CAAC;AACb;AAEA,MAAM,WAAW,GACf,mEAAmE;AAC/D,SAAU,QAAQ,CAAC,MAAgC,EAAA;IACvD,IAAI,MAAM,GAAG,EAAE;AAEf,IAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG;AACjC,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;AACxB,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;AACxB,QAAA,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;AAExB,QAAA,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC;AACvB,QAAA,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,UAAU,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AACvD,QAAA,IAAI,IAAI,GAAG,CAAC,CAAC,KAAK,GAAG,UAAU,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AACrD,QAAA,IAAI,IAAI,GAAG,KAAK,GAAG,UAAU;AAE7B,QAAA,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE;YAChB,IAAI,GAAG,EAAE;QACX;AACA,QAAA,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE;YAChB,IAAI,GAAG,EAAE;QACX;QAEA,MAAM;YACJ,WAAW,CAAC,IAAI,CAAC;gBACjB,WAAW,CAAC,IAAI,CAAC;gBACjB,WAAW,CAAC,IAAI,CAAC;gBACjB,WAAW,CAAC,IAAI,CAAC;IACrB;AACA,IAAA,OAAO,MAAM;AACf;AAEM,SAAU,UAAU,CAAC,GAAW,EAAE,YAAwB,EAAA;IAC9D,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;IAE5C,QAAQ,YAAY;QAClB,KAAKA,gBAAU,CAAC,MAAM;AACpB,YAAA,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,KAAKA,gBAAU,CAAC,GAAG;AACjB,YAAA,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,QAAA;AACE,YAAA,MAAM,IAAIC,kBAAY,CAAC,6BAA6B,YAAY,CAAA,CAAA,CAAG,CAAC;;AAE1E;;;;;;;;"}

package/dist/cjs/runtime/http/cookies.js

@@ -5,6 +5,23 @@ var utils = require('./utils.js');
 var headers = require('./headers.js');
 
 // import type {Headers} from "./headers";
+const COOKIE_SIGNING_INFO = 'shopify-app-js/cookie-signing/v1';
+async function createCookieSignature(key, value) {
+    const cookieSigningKey = await utils$1.deriveSHA256HMACKey(key, COOKIE_SIGNING_INFO);
+    return utils$1.createSHA256HMAC(cookieSigningKey, value);
+}
+const signatureEncoder = new TextEncoder();
+function safelyCompareSignatures(signatureA, signatureB) {
+    const buffA = signatureEncoder.encode(signatureA);
+    const buffB = signatureEncoder.encode(signatureB);
+    if (buffA.length !== buffB.length)
+        return false;
+    let out = 0;
+    for (let i = 0; i < buffA.length; i++) {
+        out |= buffA[i] ^ buffB[i];
+    }
+    return out === 0;
+}
 class Cookies {
     response;
     static parseCookies(hdrs) {
@@ -100,7 +117,7 @@ class Cookies {
         }
         this.set(name, value, opts);
         const sigName = `${name}.sig`;
-        const signature = await utils$1.createSHA256HMAC(this.keys[0], value);
+        const signature = await createCookieSignature(this.keys[0], value);
         this.set(sigName, signature, opts);
         this.updateHeader();
     }
@@ -117,8 +134,9 @@ class Cookies {
             this.deleteInvalidCookies(cookieName, signedCookieName);
             return false;
         }
-        const allCheckSignatures = await Promise.all(this.keys.map((key) => utils$1.createSHA256HMAC(key, cookieValue)));
-        if (!allCheckSignatures.includes(signature)) {
+        const allCheckSignatures = await Promise.all(this.keys.map((key) => createCookieSignature(key, cookieValue)));
+        const validSignature = allCheckSignatures.some((checkSignature) => safelyCompareSignatures(checkSignature, signature));
+        if (!validSignature) {
             this.deleteInvalidCookies(cookieName, signedCookieName);
             return false;
         }

package/dist/cjs/runtime/http/cookies.js.map

@@ -1 +1 @@
-{"version":3,"file":"cookies.js","sources":["../../../../../../runtime/http/cookies.ts"],"sourcesContent":["// import type {Headers} from \"./headers\";\nimport {createSHA256HMAC} from '../crypto/utils';\n\nimport {splitN} from './utils';\nimport {getHeader, getHeaders, removeHeader, addHeader} from './headers';\n\nimport type {NormalizedRequest, NormalizedResponse} from '.';\n\nexport interface CookieData {\n  name: string;\n  value: string;\n  /**\n   * a number representing the milliseconds from Date.now() for expiry\n   */\n  maxAge?: number;\n  /**\n   * a Date object indicating the cookie's expiration\n   * date (expires at the end of session by default).\n   */\n  expires?: Date;\n  /**\n   * a string indicating the path of the cookie (/ by default).\n   */\n  path?: string;\n  /**\n   * a string indicating the domain of the cookie (no default).\n   */\n  domain?: string;\n  /**\n   * a boolean indicating whether the cookie is only to be sent\n   * over HTTPS (false by default for HTTP, true by default for HTTPS).\n   */\n  secure?: boolean;\n  /**\n   * a boolean indicating whether the cookie is only to be sent over HTTP(S),\n   * and not made available to client JavaScript (true by default).\n   */\n  httpOnly?: boolean;\n  /**\n   * a boolean or string indicating whether the cookie is a \"same site\" cookie (false by default).\n   * This can be set to 'strict', 'lax', or true (which maps to 'strict').\n   */\n  sameSite?: 'strict' | 'lax' | 'none';\n}\n\nexport type CookieJar = Record<string, CookieData>;\ninterface CookiesOptions {\n  keys: string[];\n  // Ignored. Only for type-compatibility with the node package for now.\n  secure: boolean;\n}\nexport class Cookies {\n  static parseCookies(hdrs: string[]): CookieJar {\n    const entries = hdrs\n      .filter((hdr) => hdr.trim().length > 0)\n      .map((cookieDef) => {\n        const [keyval, ...opts] = cookieDef.split(';');\n        const [name, value] = splitN(keyval, '=', 2).map((value) =>\n          value.trim(),\n        );\n        return [\n          name,\n          {\n            name,\n            value,\n            ...Object.fromEntries(\n              opts.map((opt) =>\n                splitN(opt, '=', 2).map((value) => value.trim()),\n              ),\n            ),\n          },\n        ];\n      });\n    const jar = Object.fromEntries(entries) as CookieJar;\n    for (const cookie of Object.values(jar)) {\n      if (typeof cookie.expires === 'string') {\n        cookie.expires = new Date(cookie.expires);\n      }\n    }\n    return jar;\n  }\n\n  static encodeCookie(data: CookieData): string {\n    let result = '';\n    result += `${data.name}=${data.value};`;\n    result += Object.entries(data)\n      .filter(([key]) => !['name', 'value', 'expires'].includes(key))\n      .map(([key, value]) => `${key}=${value}`)\n      .join('; ');\n    if (data.expires) {\n      result += ';';\n      result += `expires=${data.expires.toUTCString()}`;\n    }\n    return result;\n  }\n\n  receivedCookieJar: CookieJar = {};\n  outgoingCookieJar: CookieJar = {};\n  private keys: string[] = [];\n\n  constructor(\n    request: NormalizedRequest,\n    public response: NormalizedResponse,\n    {keys = []}: Partial<CookiesOptions> = {},\n  ) {\n    if (keys) this.keys = keys;\n\n    const cookieReqHdr = getHeader(request.headers, 'Cookie') ?? '';\n    this.receivedCookieJar = Cookies.parseCookies(cookieReqHdr.split(';'));\n    const cookieResHdr = getHeaders(response.headers, 'Set-Cookie') ?? [];\n    this.outgoingCookieJar = Cookies.parseCookies(cookieResHdr);\n  }\n\n  toHeaders(): string[] {\n    return Object.values(this.outgoingCookieJar).map((cookie) =>\n      Cookies.encodeCookie(cookie),\n    );\n  }\n\n  updateHeader() {\n    if (!this.response.headers) {\n      this.response.headers = {};\n    }\n    removeHeader(this.response.headers, 'Set-Cookie');\n    this.toHeaders().map((hdr) =>\n      addHeader(this.response.headers!, 'Set-Cookie', hdr),\n    );\n  }\n\n  get(name: string): string | undefined {\n    return this.receivedCookieJar[name]?.value;\n  }\n\n  deleteCookie(name: string) {\n    this.set(name, '', {\n      path: '/',\n      expires: new Date(0),\n    });\n  }\n\n  async getAndVerify(name: string): Promise<string | undefined> {\n    const value = this.get(name);\n    if (!value) return undefined;\n    if (!(await this.isSignedCookieValid(name))) {\n      return undefined;\n    }\n    return value;\n  }\n\n  private get canSign() {\n    return this.keys?.length > 0;\n  }\n\n  set(name: string, value: string, opts: Partial<CookieData> = {}): void {\n    this.outgoingCookieJar[name] = {\n      ...opts,\n      name,\n      value,\n    };\n    this.updateHeader();\n  }\n\n  async setAndSign(\n    name: string,\n    value: string,\n    opts: Partial<CookieData> = {},\n  ): Promise<void> {\n    if (!this.canSign) {\n      throw Error('No keys provided for signing.');\n    }\n    this.set(name, value, opts);\n    const sigName = `${name}.sig`;\n    const signature = await createSHA256HMAC(this.keys[0], value);\n    this.set(sigName, signature, opts);\n    this.updateHeader();\n  }\n\n  async isSignedCookieValid(cookieName: string): Promise<boolean> {\n    const signedCookieName = `${cookieName}.sig`;\n    if (\n      !this.cookieExists(cookieName) ||\n      !this.cookieExists(signedCookieName)\n    ) {\n      this.deleteInvalidCookies(cookieName, signedCookieName);\n      return false;\n    }\n    const cookieValue = this.get(cookieName);\n    const signature = this.get(signedCookieName);\n\n    if (!cookieValue || !signature) {\n      this.deleteInvalidCookies(cookieName, signedCookieName);\n      return false;\n    }\n\n    const allCheckSignatures = await Promise.all(\n      this.keys.map((key) => createSHA256HMAC(key, cookieValue)),\n    );\n\n    if (!allCheckSignatures.includes(signature)) {\n      this.deleteInvalidCookies(cookieName, signedCookieName);\n      return false;\n    }\n\n    return true;\n  }\n\n  private cookieExists(cookieName: string) {\n    return Boolean(this.get(cookieName));\n  }\n\n  private deleteInvalidCookies(...cookieNames: string[]): void {\n    cookieNames.forEach((cookieName) => this.deleteCookie(cookieName));\n  }\n}\n"],"names":["splitN","getHeader","getHeaders","removeHeader","addHeader","createSHA256HMAC"],"mappings":";;;;;;AAAA;MAmDa,OAAO,CAAA;AAmDT,IAAA,QAAA;IAlDT,OAAO,YAAY,CAAC,IAAc,EAAA;QAChC,MAAM,OAAO,GAAG;AACb,aAAA,MAAM,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;AACrC,aAAA,GAAG,CAAC,CAAC,SAAS,KAAI;AACjB,YAAA,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC;YAC9C,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAGA,YAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KACrD,KAAK,CAAC,IAAI,EAAE,CACb;YACD,OAAO;gBACL,IAAI;AACJ,gBAAA;oBACE,IAAI;oBACJ,KAAK;AACL,oBAAA,GAAG,MAAM,CAAC,WAAW,CACnB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KACXA,YAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CACjD,CACF;AACF,iBAAA;aACF;AACH,QAAA,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAc;QACpD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;AACvC,YAAA,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE;gBACtC,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC3C;QACF;AACA,QAAA,OAAO,GAAG;IACZ;IAEA,OAAO,YAAY,CAAC,IAAgB,EAAA;QAClC,IAAI,MAAM,GAAG,EAAE;QACf,MAAM,IAAI,CAAA,EAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAA,CAAA,CAAG;AACvC,QAAA,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI;aAC1B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;AAC7D,aAAA,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,KAAK,EAAE;aACvC,IAAI,CAAC,IAAI,CAAC;AACb,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE;YAChB,MAAM,IAAI,GAAG;YACb,MAAM,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAA,CAAE;QACnD;AACA,QAAA,OAAO,MAAM;IACf;IAEA,iBAAiB,GAAc,EAAE;IACjC,iBAAiB,GAAc,EAAE;IACzB,IAAI,GAAa,EAAE;IAE3B,WAAA,CACE,OAA0B,EACnB,QAA4B,EACnC,EAAC,IAAI,GAAG,EAAE,EAAA,GAA6B,EAAE,EAAA;QADlC,IAAA,CAAA,QAAQ,GAAR,QAAQ;AAGf,QAAA,IAAI,IAAI;AAAE,YAAA,IAAI,CAAC,IAAI,GAAG,IAAI;AAE1B,QAAA,MAAM,YAAY,GAAGC,iBAAS,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;AAC/D,QAAA,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACtE,QAAA,MAAM,YAAY,GAAGC,kBAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE;QACrE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC;IAC7D;IAEA,SAAS,GAAA;QACP,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KACtD,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAC7B;IACH;IAEA,YAAY,GAAA;AACV,QAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;AAC1B,YAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,EAAE;QAC5B;QACAC,oBAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,KACvBC,iBAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,CACrD;IACH;AAEA,IAAA,GAAG,CAAC,IAAY,EAAA;QACd,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK;IAC5C;AAEA,IAAA,YAAY,CAAC,IAAY,EAAA;AACvB,QAAA,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE;AACjB,YAAA,IAAI,EAAE,GAAG;AACT,YAAA,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;AACrB,SAAA,CAAC;IACJ;IAEA,MAAM,YAAY,CAAC,IAAY,EAAA;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5B,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,SAAS;QAC5B,IAAI,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE;AAC3C,YAAA,OAAO,SAAS;QAClB;AACA,QAAA,OAAO,KAAK;IACd;AAEA,IAAA,IAAY,OAAO,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC;IAC9B;AAEA,IAAA,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,OAA4B,EAAE,EAAA;AAC7D,QAAA,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG;AAC7B,YAAA,GAAG,IAAI;YACP,IAAI;YACJ,KAAK;SACN;QACD,IAAI,CAAC,YAAY,EAAE;IACrB;IAEA,MAAM,UAAU,CACd,IAAY,EACZ,KAAa,EACb,OAA4B,EAAE,EAAA;AAE9B,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AACjB,YAAA,MAAM,KAAK,CAAC,+BAA+B,CAAC;QAC9C;QACA,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;AAC3B,QAAA,MAAM,OAAO,GAAG,CAAA,EAAG,IAAI,MAAM;AAC7B,QAAA,MAAM,SAAS,GAAG,MAAMC,wBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC;QAClC,IAAI,CAAC,YAAY,EAAE;IACrB;IAEA,MAAM,mBAAmB,CAAC,UAAkB,EAAA;AAC1C,QAAA,MAAM,gBAAgB,GAAG,CAAA,EAAG,UAAU,MAAM;AAC5C,QAAA,IACE,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;AAC9B,YAAA,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EACpC;AACA,YAAA,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,CAAC;AACvD,YAAA,OAAO,KAAK;QACd;QACA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAE5C,QAAA,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE;AAC9B,YAAA,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,CAAC;AACvD,YAAA,OAAO,KAAK;QACd;QAEA,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KAAKA,wBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAC3D;QAED,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;AAC3C,YAAA,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,CAAC;AACvD,YAAA,OAAO,KAAK;QACd;AAEA,QAAA,OAAO,IAAI;IACb;AAEQ,IAAA,YAAY,CAAC,UAAkB,EAAA;QACrC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC;IAEQ,oBAAoB,CAAC,GAAG,WAAqB,EAAA;AACnD,QAAA,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACpE;AACD;;;;"}
+{"version":3,"file":"cookies.js","sources":["../../../../../../runtime/http/cookies.ts"],"sourcesContent":["// import type {Headers} from \"./headers\";\nimport {createSHA256HMAC, deriveSHA256HMACKey} from '../crypto/utils';\n\nimport {splitN} from './utils';\nimport {getHeader, getHeaders, removeHeader, addHeader} from './headers';\n\nimport type {NormalizedRequest, NormalizedResponse} from '.';\n\nexport interface CookieData {\n  name: string;\n  value: string;\n  /**\n   * a number representing the milliseconds from Date.now() for expiry\n   */\n  maxAge?: number;\n  /**\n   * a Date object indicating the cookie's expiration\n   * date (expires at the end of session by default).\n   */\n  expires?: Date;\n  /**\n   * a string indicating the path of the cookie (/ by default).\n   */\n  path?: string;\n  /**\n   * a string indicating the domain of the cookie (no default).\n   */\n  domain?: string;\n  /**\n   * a boolean indicating whether the cookie is only to be sent\n   * over HTTPS (false by default for HTTP, true by default for HTTPS).\n   */\n  secure?: boolean;\n  /**\n   * a boolean indicating whether the cookie is only to be sent over HTTP(S),\n   * and not made available to client JavaScript (true by default).\n   */\n  httpOnly?: boolean;\n  /**\n   * a boolean or string indicating whether the cookie is a \"same site\" cookie (false by default).\n   * This can be set to 'strict', 'lax', or true (which maps to 'strict').\n   */\n  sameSite?: 'strict' | 'lax' | 'none';\n}\n\nexport type CookieJar = Record<string, CookieData>;\n\nconst COOKIE_SIGNING_INFO = 'shopify-app-js/cookie-signing/v1';\n\nasync function createCookieSignature(\n  key: string,\n  value: string,\n): Promise<string> {\n  const cookieSigningKey = await deriveSHA256HMACKey(key, COOKIE_SIGNING_INFO);\n  return createSHA256HMAC(cookieSigningKey, value);\n}\n\nconst signatureEncoder = new TextEncoder();\n\nfunction safelyCompareSignatures(signatureA: string, signatureB: string) {\n  const buffA = signatureEncoder.encode(signatureA);\n  const buffB = signatureEncoder.encode(signatureB);\n\n  if (buffA.length !== buffB.length) return false;\n\n  let out = 0;\n  for (let i = 0; i < buffA.length; i++) {\n    out |= buffA[i] ^ buffB[i];\n  }\n\n  return out === 0;\n}\n\ninterface CookiesOptions {\n  keys: string[];\n  // Ignored. Only for type-compatibility with the node package for now.\n  secure: boolean;\n}\nexport class Cookies {\n  static parseCookies(hdrs: string[]): CookieJar {\n    const entries = hdrs\n      .filter((hdr) => hdr.trim().length > 0)\n      .map((cookieDef) => {\n        const [keyval, ...opts] = cookieDef.split(';');\n        const [name, value] = splitN(keyval, '=', 2).map((value) =>\n          value.trim(),\n        );\n        return [\n          name,\n          {\n            name,\n            value,\n            ...Object.fromEntries(\n              opts.map((opt) =>\n                splitN(opt, '=', 2).map((value) => value.trim()),\n              ),\n            ),\n          },\n        ];\n      });\n    const jar = Object.fromEntries(entries) as CookieJar;\n    for (const cookie of Object.values(jar)) {\n      if (typeof cookie.expires === 'string') {\n        cookie.expires = new Date(cookie.expires);\n      }\n    }\n    return jar;\n  }\n\n  static encodeCookie(data: CookieData): string {\n    let result = '';\n    result += `${data.name}=${data.value};`;\n    result += Object.entries(data)\n      .filter(([key]) => !['name', 'value', 'expires'].includes(key))\n      .map(([key, value]) => `${key}=${value}`)\n      .join('; ');\n    if (data.expires) {\n      result += ';';\n      result += `expires=${data.expires.toUTCString()}`;\n    }\n    return result;\n  }\n\n  receivedCookieJar: CookieJar = {};\n  outgoingCookieJar: CookieJar = {};\n  private keys: string[] = [];\n\n  constructor(\n    request: NormalizedRequest,\n    public response: NormalizedResponse,\n    {keys = []}: Partial<CookiesOptions> = {},\n  ) {\n    if (keys) this.keys = keys;\n\n    const cookieReqHdr = getHeader(request.headers, 'Cookie') ?? '';\n    this.receivedCookieJar = Cookies.parseCookies(cookieReqHdr.split(';'));\n    const cookieResHdr = getHeaders(response.headers, 'Set-Cookie') ?? [];\n    this.outgoingCookieJar = Cookies.parseCookies(cookieResHdr);\n  }\n\n  toHeaders(): string[] {\n    return Object.values(this.outgoingCookieJar).map((cookie) =>\n      Cookies.encodeCookie(cookie),\n    );\n  }\n\n  updateHeader() {\n    if (!this.response.headers) {\n      this.response.headers = {};\n    }\n    removeHeader(this.response.headers, 'Set-Cookie');\n    this.toHeaders().map((hdr) =>\n      addHeader(this.response.headers!, 'Set-Cookie', hdr),\n    );\n  }\n\n  get(name: string): string | undefined {\n    return this.receivedCookieJar[name]?.value;\n  }\n\n  deleteCookie(name: string) {\n    this.set(name, '', {\n      path: '/',\n      expires: new Date(0),\n    });\n  }\n\n  async getAndVerify(name: string): Promise<string | undefined> {\n    const value = this.get(name);\n    if (!value) return undefined;\n    if (!(await this.isSignedCookieValid(name))) {\n      return undefined;\n    }\n    return value;\n  }\n\n  private get canSign() {\n    return this.keys?.length > 0;\n  }\n\n  set(name: string, value: string, opts: Partial<CookieData> = {}): void {\n    this.outgoingCookieJar[name] = {\n      ...opts,\n      name,\n      value,\n    };\n    this.updateHeader();\n  }\n\n  async setAndSign(\n    name: string,\n    value: string,\n    opts: Partial<CookieData> = {},\n  ): Promise<void> {\n    if (!this.canSign) {\n      throw Error('No keys provided for signing.');\n    }\n    this.set(name, value, opts);\n    const sigName = `${name}.sig`;\n    const signature = await createCookieSignature(this.keys[0], value);\n    this.set(sigName, signature, opts);\n    this.updateHeader();\n  }\n\n  async isSignedCookieValid(cookieName: string): Promise<boolean> {\n    const signedCookieName = `${cookieName}.sig`;\n    if (\n      !this.cookieExists(cookieName) ||\n      !this.cookieExists(signedCookieName)\n    ) {\n      this.deleteInvalidCookies(cookieName, signedCookieName);\n      return false;\n    }\n    const cookieValue = this.get(cookieName);\n    const signature = this.get(signedCookieName);\n\n    if (!cookieValue || !signature) {\n      this.deleteInvalidCookies(cookieName, signedCookieName);\n      return false;\n    }\n\n    const allCheckSignatures = await Promise.all(\n      this.keys.map((key) => createCookieSignature(key, cookieValue)),\n    );\n\n    const validSignature = allCheckSignatures.some((checkSignature) =>\n      safelyCompareSignatures(checkSignature, signature),\n    );\n\n    if (!validSignature) {\n      this.deleteInvalidCookies(cookieName, signedCookieName);\n      return false;\n    }\n\n    return true;\n  }\n\n  private cookieExists(cookieName: string) {\n    return Boolean(this.get(cookieName));\n  }\n\n  private deleteInvalidCookies(...cookieNames: string[]): void {\n    cookieNames.forEach((cookieName) => this.deleteCookie(cookieName));\n  }\n}\n"],"names":["deriveSHA256HMACKey","createSHA256HMAC","splitN","getHeader","getHeaders","removeHeader","addHeader"],"mappings":";;;;;;AAAA;AA+CA,MAAM,mBAAmB,GAAG,kCAAkC;AAE9D,eAAe,qBAAqB,CAClC,GAAW,EACX,KAAa,EAAA;IAEb,MAAM,gBAAgB,GAAG,MAAMA,2BAAmB,CAAC,GAAG,EAAE,mBAAmB,CAAC;AAC5E,IAAA,OAAOC,wBAAgB,CAAC,gBAAgB,EAAE,KAAK,CAAC;AAClD;AAEA,MAAM,gBAAgB,GAAG,IAAI,WAAW,EAAE;AAE1C,SAAS,uBAAuB,CAAC,UAAkB,EAAE,UAAkB,EAAA;IACrE,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC;IACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC;AAEjD,IAAA,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;AAAE,QAAA,OAAO,KAAK;IAE/C,IAAI,GAAG,GAAG,CAAC;AACX,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACrC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAC5B;IAEA,OAAO,GAAG,KAAK,CAAC;AAClB;MAOa,OAAO,CAAA;AAmDT,IAAA,QAAA;IAlDT,OAAO,YAAY,CAAC,IAAc,EAAA;QAChC,MAAM,OAAO,GAAG;AACb,aAAA,MAAM,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;AACrC,aAAA,GAAG,CAAC,CAAC,SAAS,KAAI;AACjB,YAAA,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC;YAC9C,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAGC,YAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KACrD,KAAK,CAAC,IAAI,EAAE,CACb;YACD,OAAO;gBACL,IAAI;AACJ,gBAAA;oBACE,IAAI;oBACJ,KAAK;AACL,oBAAA,GAAG,MAAM,CAAC,WAAW,CACnB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KACXA,YAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CACjD,CACF;AACF,iBAAA;aACF;AACH,QAAA,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAc;QACpD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;AACvC,YAAA,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE;gBACtC,MAAM,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC3C;QACF;AACA,QAAA,OAAO,GAAG;IACZ;IAEA,OAAO,YAAY,CAAC,IAAgB,EAAA;QAClC,IAAI,MAAM,GAAG,EAAE;QACf,MAAM,IAAI,CAAA,EAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAA,CAAA,CAAG;AACvC,QAAA,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI;aAC1B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;AAC7D,aAAA,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,KAAK,EAAE;aACvC,IAAI,CAAC,IAAI,CAAC;AACb,QAAA,IAAI,IAAI,CAAC,OAAO,EAAE;YAChB,MAAM,IAAI,GAAG;YACb,MAAM,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAA,CAAE;QACnD;AACA,QAAA,OAAO,MAAM;IACf;IAEA,iBAAiB,GAAc,EAAE;IACjC,iBAAiB,GAAc,EAAE;IACzB,IAAI,GAAa,EAAE;IAE3B,WAAA,CACE,OAA0B,EACnB,QAA4B,EACnC,EAAC,IAAI,GAAG,EAAE,EAAA,GAA6B,EAAE,EAAA;QADlC,IAAA,CAAA,QAAQ,GAAR,QAAQ;AAGf,QAAA,IAAI,IAAI;AAAE,YAAA,IAAI,CAAC,IAAI,GAAG,IAAI;AAE1B,QAAA,MAAM,YAAY,GAAGC,iBAAS,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;AAC/D,QAAA,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACtE,QAAA,MAAM,YAAY,GAAGC,kBAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE;QACrE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC;IAC7D;IAEA,SAAS,GAAA;QACP,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,KACtD,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAC7B;IACH;IAEA,YAAY,GAAA;AACV,QAAA,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;AAC1B,YAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,GAAG,EAAE;QAC5B;QACAC,oBAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;QACjD,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,KACvBC,iBAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,CACrD;IACH;AAEA,IAAA,GAAG,CAAC,IAAY,EAAA;QACd,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK;IAC5C;AAEA,IAAA,YAAY,CAAC,IAAY,EAAA;AACvB,QAAA,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE;AACjB,YAAA,IAAI,EAAE,GAAG;AACT,YAAA,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;AACrB,SAAA,CAAC;IACJ;IAEA,MAAM,YAAY,CAAC,IAAY,EAAA;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5B,QAAA,IAAI,CAAC,KAAK;AAAE,YAAA,OAAO,SAAS;QAC5B,IAAI,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,EAAE;AAC3C,YAAA,OAAO,SAAS;QAClB;AACA,QAAA,OAAO,KAAK;IACd;AAEA,IAAA,IAAY,OAAO,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC;IAC9B;AAEA,IAAA,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,OAA4B,EAAE,EAAA;AAC7D,QAAA,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG;AAC7B,YAAA,GAAG,IAAI;YACP,IAAI;YACJ,KAAK;SACN;QACD,IAAI,CAAC,YAAY,EAAE;IACrB;IAEA,MAAM,UAAU,CACd,IAAY,EACZ,KAAa,EACb,OAA4B,EAAE,EAAA;AAE9B,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;AACjB,YAAA,MAAM,KAAK,CAAC,+BAA+B,CAAC;QAC9C;QACA,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC;AAC3B,QAAA,MAAM,OAAO,GAAG,CAAA,EAAG,IAAI,MAAM;AAC7B,QAAA,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC;QAClC,IAAI,CAAC,YAAY,EAAE;IACrB;IAEA,MAAM,mBAAmB,CAAC,UAAkB,EAAA;AAC1C,QAAA,MAAM,gBAAgB,GAAG,CAAA,EAAG,UAAU,MAAM;AAC5C,QAAA,IACE,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;AAC9B,YAAA,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,EACpC;AACA,YAAA,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,CAAC;AACvD,YAAA,OAAO,KAAK;QACd;QACA,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAE5C,QAAA,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE;AAC9B,YAAA,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,CAAC;AACvD,YAAA,OAAO,KAAK;QACd;QAEA,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,qBAAqB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAChE;AAED,QAAA,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,cAAc,KAC5D,uBAAuB,CAAC,cAAc,EAAE,SAAS,CAAC,CACnD;QAED,IAAI,CAAC,cAAc,EAAE;AACnB,YAAA,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,gBAAgB,CAAC;AACvD,YAAA,OAAO,KAAK;QACd;AAEA,QAAA,OAAO,IAAI;IACb;AAEQ,IAAA,YAAY,CAAC,UAAkB,EAAA;QACrC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC;IAEQ,oBAAoB,CAAC,GAAG,WAAqB,EAAA;AACnD,QAAA,WAAW,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACpE;AACD;;;;"}

package/dist/cjs/runtime/http/index.js

@@ -1,6 +1,6 @@
 'use strict';
 
-require('../crypto/types.js');
+var cookies = require('./cookies.js');
 
 function isOK(resp) {
     // https://fetch.spec.whatwg.org/#ok-status
@@ -42,6 +42,7 @@ function setAbstractConvertHeadersFunc(func) {
     exports.abstractConvertHeaders = func;
 }
 
+exports.Cookies = cookies.Cookies;
 exports.isOK = isOK;
 exports.setAbstractConvertHeadersFunc = setAbstractConvertHeadersFunc;
 exports.setAbstractConvertIncomingResponseFunc = setAbstractConvertIncomingResponseFunc;

package/dist/cjs/runtime/http/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../../../../../../runtime/http/index.ts"],"sourcesContent":["import type {\n  AbstractFetchFunc,\n  AbstractConvertRequestFunc,\n  AbstractConvertIncomingResponseFunc,\n  AbstractConvertResponseFunc,\n  NormalizedResponse,\n  AbstractConvertHeadersFunc,\n} from './types';\n\nexport * from './cookies';\nexport * from './headers';\nexport * from './utils';\n\nexport * from './types';\n\nexport function isOK(resp: NormalizedResponse) {\n  // https://fetch.spec.whatwg.org/#ok-status\n  return resp.statusCode >= 200 && resp.statusCode <= 299;\n}\n\n// We ignore mutable export linting errors because we explicitly want these abstract functions to be overwritten.\n\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractFetch: AbstractFetchFunc = () => {\n  throw new Error(\n    \"Missing adapter implementation for 'abstractFetch' - make sure to import the appropriate adapter for your platform\",\n  );\n};\nexport function setAbstractFetchFunc(func: AbstractFetchFunc) {\n  abstractFetch = func;\n}\n\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractConvertRequest: AbstractConvertRequestFunc = () => {\n  throw new Error(\n    \"Missing adapter implementation for 'abstractConvertRequest' - make sure to import the appropriate adapter for your platform\",\n  );\n};\nexport function setAbstractConvertRequestFunc(\n  func: AbstractConvertRequestFunc,\n) {\n  abstractConvertRequest = func;\n}\n\n// By default we just return an empty NormalizedResponse because not all adapters will need to convert an incoming response\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractConvertIncomingResponse: AbstractConvertIncomingResponseFunc =\n  () => Promise.resolve({} as NormalizedResponse);\nexport function setAbstractConvertIncomingResponseFunc(\n  func: AbstractConvertIncomingResponseFunc,\n) {\n  abstractConvertIncomingResponse = func;\n}\n\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractConvertResponse: AbstractConvertResponseFunc = () => {\n  throw new Error(\n    \"Missing adapter implementation for 'abstractConvertResponse' - make sure to import the appropriate adapter for your platform\",\n  );\n};\nexport function setAbstractConvertResponseFunc(\n  func: AbstractConvertResponseFunc,\n) {\n  abstractConvertResponse = func;\n}\n\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractConvertHeaders: AbstractConvertHeadersFunc = () => {\n  throw new Error(\n    \"Missing adapter implementation for 'abstractConvertHeaders' - make sure to import the appropriate adapter for your platform\",\n  );\n};\nexport function setAbstractConvertHeadersFunc(\n  func: AbstractConvertHeadersFunc,\n) {\n  abstractConvertHeaders = func;\n}\n"],"names":["abstractFetch","abstractConvertRequest","abstractConvertIncomingResponse","abstractConvertResponse","abstractConvertHeaders"],"mappings":";;;;AAeM,SAAU,IAAI,CAAC,IAAwB,EAAA;;IAE3C,OAAO,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG;AACzD;AAEA;AAEA;AACWA,qBAAa,GAAsB,MAAK;AACjD,IAAA,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH;AACH;AACM,SAAU,oBAAoB,CAAC,IAAuB,EAAA;IAC1DA,qBAAa,GAAG,IAAI;AACtB;AAEA;AACWC,8BAAsB,GAA+B,MAAK;AACnE,IAAA,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H;AACH;AACM,SAAU,6BAA6B,CAC3C,IAAgC,EAAA;IAEhCA,8BAAsB,GAAG,IAAI;AAC/B;AAEA;AACA;AACWC,uCAA+B,GACxC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAwB;AAC1C,SAAU,sCAAsC,CACpD,IAAyC,EAAA;IAEzCA,uCAA+B,GAAG,IAAI;AACxC;AAEA;AACWC,+BAAuB,GAAgC,MAAK;AACrE,IAAA,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H;AACH;AACM,SAAU,8BAA8B,CAC5C,IAAiC,EAAA;IAEjCA,+BAAuB,GAAG,IAAI;AAChC;AAEA;AACWC,8BAAsB,GAA+B,MAAK;AACnE,IAAA,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H;AACH;AACM,SAAU,6BAA6B,CAC3C,IAAgC,EAAA;IAEhCA,8BAAsB,GAAG,IAAI;AAC/B;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":["../../../../../../runtime/http/index.ts"],"sourcesContent":["import type {\n  AbstractFetchFunc,\n  AbstractConvertRequestFunc,\n  AbstractConvertIncomingResponseFunc,\n  AbstractConvertResponseFunc,\n  NormalizedResponse,\n  AbstractConvertHeadersFunc,\n} from './types';\n\nexport * from './cookies';\nexport * from './headers';\nexport * from './utils';\n\nexport * from './types';\n\nexport function isOK(resp: NormalizedResponse) {\n  // https://fetch.spec.whatwg.org/#ok-status\n  return resp.statusCode >= 200 && resp.statusCode <= 299;\n}\n\n// We ignore mutable export linting errors because we explicitly want these abstract functions to be overwritten.\n\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractFetch: AbstractFetchFunc = () => {\n  throw new Error(\n    \"Missing adapter implementation for 'abstractFetch' - make sure to import the appropriate adapter for your platform\",\n  );\n};\nexport function setAbstractFetchFunc(func: AbstractFetchFunc) {\n  abstractFetch = func;\n}\n\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractConvertRequest: AbstractConvertRequestFunc = () => {\n  throw new Error(\n    \"Missing adapter implementation for 'abstractConvertRequest' - make sure to import the appropriate adapter for your platform\",\n  );\n};\nexport function setAbstractConvertRequestFunc(\n  func: AbstractConvertRequestFunc,\n) {\n  abstractConvertRequest = func;\n}\n\n// By default we just return an empty NormalizedResponse because not all adapters will need to convert an incoming response\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractConvertIncomingResponse: AbstractConvertIncomingResponseFunc =\n  () => Promise.resolve({} as NormalizedResponse);\nexport function setAbstractConvertIncomingResponseFunc(\n  func: AbstractConvertIncomingResponseFunc,\n) {\n  abstractConvertIncomingResponse = func;\n}\n\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractConvertResponse: AbstractConvertResponseFunc = () => {\n  throw new Error(\n    \"Missing adapter implementation for 'abstractConvertResponse' - make sure to import the appropriate adapter for your platform\",\n  );\n};\nexport function setAbstractConvertResponseFunc(\n  func: AbstractConvertResponseFunc,\n) {\n  abstractConvertResponse = func;\n}\n\n// eslint-disable-next-line import/no-mutable-exports\nexport let abstractConvertHeaders: AbstractConvertHeadersFunc = () => {\n  throw new Error(\n    \"Missing adapter implementation for 'abstractConvertHeaders' - make sure to import the appropriate adapter for your platform\",\n  );\n};\nexport function setAbstractConvertHeadersFunc(\n  func: AbstractConvertHeadersFunc,\n) {\n  abstractConvertHeaders = func;\n}\n"],"names":["abstractFetch","abstractConvertRequest","abstractConvertIncomingResponse","abstractConvertResponse","abstractConvertHeaders"],"mappings":";;;;AAeM,SAAU,IAAI,CAAC,IAAwB,EAAA;;IAE3C,OAAO,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG;AACzD;AAEA;AAEA;AACWA,qBAAa,GAAsB,MAAK;AACjD,IAAA,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH;AACH;AACM,SAAU,oBAAoB,CAAC,IAAuB,EAAA;IAC1DA,qBAAa,GAAG,IAAI;AACtB;AAEA;AACWC,8BAAsB,GAA+B,MAAK;AACnE,IAAA,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H;AACH;AACM,SAAU,6BAA6B,CAC3C,IAAgC,EAAA;IAEhCA,8BAAsB,GAAG,IAAI;AAC/B;AAEA;AACA;AACWC,uCAA+B,GACxC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAwB;AAC1C,SAAU,sCAAsC,CACpD,IAAyC,EAAA;IAEzCA,uCAA+B,GAAG,IAAI;AACxC;AAEA;AACWC,+BAAuB,GAAgC,MAAK;AACrE,IAAA,MAAM,IAAI,KAAK,CACb,8HAA8H,CAC/H;AACH;AACM,SAAU,8BAA8B,CAC5C,IAAiC,EAAA;IAEjCA,+BAAuB,GAAG,IAAI;AAChC;AAEA;AACWC,8BAAsB,GAA+B,MAAK;AACnE,IAAA,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H;AACH;AACM,SAAU,6BAA6B,CAC3C,IAAgC,EAAA;IAEhCA,8BAAsB,GAAG,IAAI;AAC/B;;;;;;;;;;"}

package/dist/cjs/runtime/index.js

@@ -43,6 +43,7 @@ Object.defineProperty(exports, "HashFormat", {
 exports.asBase64 = utils.asBase64;
 exports.asHex = utils.asHex;
 exports.createSHA256HMAC = utils.createSHA256HMAC;
+exports.deriveSHA256HMACKey = utils.deriveSHA256HMACKey;
 exports.hashString = utils.hashString;
 Object.defineProperty(exports, "abstractRuntimeString", {
 	enumerable: true,

package/dist/cjs/runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}