@shopify/shopify-app-remix 2.8.0 → 2.8.2

package/dist/cjs/server/authenticate/helpers/idempotent-promise-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotent-promise-handler.js","sources":["../../../../../../src/server/authenticate/helpers/idempotent-promise-handler.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAKA,MAAM,iBAAiB,GAAG,KAAK,CAAC;MAEnB,wBAAwB,CAAA;AAGnC,IAAA,WAAA,GAAA;AACE,QAAA,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;KAC9C;AAED,IAAA,MAAM,aAAa,CAAC,EAClB,eAAe,EACf,UAAU,GACoB,EAAA;AAC9B,QAAA,IAAI;AACF,YAAA,IAAI,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE;gBACtC,MAAM,eAAe,EAAE,CAAC;aACzB;SACF;gBAAS;YACR,IAAI,CAAC,qBAAqB,EAAE,CAAC;SAC9B;AAED,QAAA,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;KAC1B;AAEO,IAAA,iBAAiB,CAAC,UAAkB,EAAA;QAC1C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;AACrC,YAAA,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAC7C,YAAA,OAAO,IAAI,CAAC;SACb;AACD,QAAA,OAAO,KAAK,CAAC;KACd;AAEO,IAAA,MAAM,qBAAqB,GAAA;AACjC,QAAA,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,KAAI;YACjD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,iBAAiB,EAAE;AACzC,gBAAA,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;aACxB;AACH,SAAC,CAAC,CAAC;KACJ;AACF;;;;"}

package/dist/cjs/server/authenticate/helpers/reject-bot-request.js

@@ -0,0 +1,23 @@
+'use strict';
+
+var isbot = require('isbot');
+
+const SHOPIFY_POS_USER_AGENT = /Shopify POS\//;
+const SHOPIFY_MOBILE_USER_AGENT = /Shopify Mobile\//;
+const SHOPIFY_USER_AGENTS = [SHOPIFY_POS_USER_AGENT, SHOPIFY_MOBILE_USER_AGENT];
+function respondToBotRequest({ logger }, request) {
+    const userAgent = request.headers.get('User-Agent') ?? '';
+    // We call isbot below to prevent good (self-identifying) bots from triggering auth requests, but there are some
+    // Shopify-specific cases we want to allow that are identified as bots by isbot.
+    if (SHOPIFY_USER_AGENTS.some((agent) => agent.test(userAgent))) {
+        logger.debug('Request is from a Shopify agent, allow');
+        return;
+    }
+    if (isbot.isbot(userAgent)) {
+        logger.debug('Request is from a bot, skipping auth');
+        throw new Response(undefined, { status: 410, statusText: 'Gone' });
+    }
+}
+
+exports.respondToBotRequest = respondToBotRequest;
+//# sourceMappingURL=reject-bot-request.js.map

package/dist/cjs/server/authenticate/helpers/reject-bot-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reject-bot-request.js","sources":["../../../../../../src/server/authenticate/helpers/reject-bot-request.ts"],"sourcesContent":[null],"names":["isbot"],"mappings":";;;;AAIA,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAC/C,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAErD,MAAM,mBAAmB,GAAG,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,CAAC;SAEhE,mBAAmB,CACjC,EAAC,MAAM,EAAc,EACrB,OAAgB,EAAA;AAEhB,IAAA,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;;;AAI1D,IAAA,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE;AAC9D,QAAA,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACvD,OAAO;KACR;AAED,IAAA,IAAIA,WAAK,CAAC,SAAS,CAAC,EAAE;AACpB,QAAA,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;AACrD,QAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAC,CAAC,CAAC;KAClE;AACH;;;;"}

package/dist/cjs/server/authenticate/helpers/respond-to-invalid-session-token.js

@@ -0,0 +1,20 @@
+'use strict';
+
+var redirectToBouncePage = require('../admin/helpers/redirect-to-bounce-page.js');
+var _const = require('../const.js');
+
+function respondToInvalidSessionToken({ params, request, retryRequest = false, }) {
+    const { api, logger, config } = params;
+    const isDocumentRequest = !request.headers.get('authorization');
+    if (isDocumentRequest) {
+        return redirectToBouncePage.redirectToBouncePage({ api, logger, config }, new URL(request.url));
+    }
+    throw new Response(undefined, {
+        status: 401,
+        statusText: 'Unauthorized',
+        headers: retryRequest ? _const.RETRY_INVALID_SESSION_HEADER : {},
+    });
+}
+
+exports.respondToInvalidSessionToken = respondToInvalidSessionToken;
+//# sourceMappingURL=respond-to-invalid-session-token.js.map

package/dist/cjs/server/authenticate/helpers/respond-to-invalid-session-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"respond-to-invalid-session-token.js","sources":["../../../../../../src/server/authenticate/helpers/respond-to-invalid-session-token.ts"],"sourcesContent":[null],"names":["redirectToBouncePage","RETRY_INVALID_SESSION_HEADER"],"mappings":";;;;;AAWM,SAAU,4BAA4B,CAAC,EAC3C,MAAM,EACN,OAAO,EACP,YAAY,GAAG,KAAK,GACe,EAAA;IACnC,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;IAErC,MAAM,iBAAiB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAChE,IAAI,iBAAiB,EAAE;AACrB,QAAA,OAAOA,yCAAoB,CAAC,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;KAC1E;AAED,IAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,QAAA,MAAM,EAAE,GAAG;AACX,QAAA,UAAU,EAAE,cAAc;QAC1B,OAAO,EAAE,YAAY,GAAGC,mCAA4B,GAAG,EAAE;AAC1D,KAAA,CAAC,CAAC;AACL;;;;"}

package/{build/ts → dist/cjs}/server/authenticate/helpers/respond-to-options-request.js

@@ -1,10 +1,10 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.respondToOptionsRequest = void 0;
-var ensure_cors_headers_1 = require("./ensure-cors-headers");
+'use strict';
+
+var ensureCorsHeaders = require('./ensure-cors-headers.js');
+
 function respondToOptionsRequest(params, request, corsHeaders) {
     if (request.method === 'OPTIONS') {
-        var ensureCORSHeaders = (0, ensure_cors_headers_1.ensureCORSHeadersFactory)(params, request, corsHeaders);
+        const ensureCORSHeaders = ensureCorsHeaders.ensureCORSHeadersFactory(params, request, corsHeaders);
         throw ensureCORSHeaders(new Response(null, {
             status: 204,
             headers: {
@@ -13,5 +13,6 @@ function respondToOptionsRequest(params, request, corsHeaders) {
         }));
     }
 }
+
 exports.respondToOptionsRequest = respondToOptionsRequest;
-//# sourceMappingURL=respond-to-options-request.js.map
+//# sourceMappingURL=respond-to-options-request.js.map

package/dist/cjs/server/authenticate/helpers/respond-to-options-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"respond-to-options-request.js","sources":["../../../../../../src/server/authenticate/helpers/respond-to-options-request.ts"],"sourcesContent":[null],"names":["ensureCORSHeadersFactory"],"mappings":";;;;SAIgB,uBAAuB,CACrC,MAAmB,EACnB,OAAgB,EAChB,WAAsB,EAAA;AAEtB,IAAA,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE;QAChC,MAAM,iBAAiB,GAAGA,0CAAwB,CAChD,MAAM,EACN,OAAO,EACP,WAAW,CACZ,CAAC;AAEF,QAAA,MAAM,iBAAiB,CACrB,IAAI,QAAQ,CAAC,IAAI,EAAE;AACjB,YAAA,MAAM,EAAE,GAAG;AACX,YAAA,OAAO,EAAE;AACP,gBAAA,wBAAwB,EAAE,MAAM;AACjC,aAAA;AACF,SAAA,CAAC,CACH,CAAC;KACH;AACH;;;;"}

package/dist/cjs/server/authenticate/helpers/validate-session-token.js

@@ -0,0 +1,24 @@
+'use strict';
+
+var respondToInvalidSessionToken = require('./respond-to-invalid-session-token.js');
+
+async function validateSessionToken(params, request, token, { checkAudience = true } = {}) {
+    const { api, logger } = params;
+    logger.debug('Validating session token');
+    try {
+        const payload = await api.session.decodeSessionToken(token, {
+            checkAudience,
+        });
+        logger.debug('Session token is valid', {
+            payload: JSON.stringify(payload),
+        });
+        return payload;
+    }
+    catch (error) {
+        logger.debug(`Failed to validate session token: ${error.message}`);
+        throw respondToInvalidSessionToken.respondToInvalidSessionToken({ params, request, retryRequest: true });
+    }
+}
+
+exports.validateSessionToken = validateSessionToken;
+//# sourceMappingURL=validate-session-token.js.map

package/dist/cjs/server/authenticate/helpers/validate-session-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-session-token.js","sources":["../../../../../../src/server/authenticate/helpers/validate-session-token.ts"],"sourcesContent":[null],"names":["respondToInvalidSessionToken"],"mappings":";;;;AAUO,eAAe,oBAAoB,CACxC,MAAmB,EACnB,OAAgB,EAChB,KAAa,EACb,EAAC,aAAa,GAAG,IAAI,KAAiC,EAAE,EAAA;AAExD,IAAA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAC7B,IAAA,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAEzC,IAAA,IAAI;QACF,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE;YAC1D,aAAa;AACd,SAAA,CAAC,CAAC;AACH,QAAA,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;AACrC,YAAA,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;AACjC,SAAA,CAAC,CAAC;AAEH,QAAA,OAAO,OAAO,CAAC;KAChB;IAAC,OAAO,KAAK,EAAE;QACd,MAAM,CAAC,KAAK,CAAC,CAAA,kCAAA,EAAqC,KAAK,CAAC,OAAO,CAAE,CAAA,CAAC,CAAC;AAEnE,QAAA,MAAMA,yDAA4B,CAAC,EAAC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAC,CAAC,CAAC;KAC3E;AACH;;;;"}

package/dist/cjs/server/authenticate/login/login.js

@@ -0,0 +1,43 @@
+'use strict';
+
+var serverRuntime = require('@remix-run/server-runtime');
+var types = require('../../types.js');
+
+function loginFactory(params) {
+    const { api, config, logger } = params;
+    return async function login(request) {
+        const url = new URL(request.url);
+        const shopParam = url.searchParams.get('shop');
+        if (request.method === 'GET' && !shopParam) {
+            return {};
+        }
+        const shop = shopParam || (await request.formData()).get('shop');
+        if (!shop) {
+            logger.debug('Missing shop parameter', { shop });
+            return { shop: types.LoginErrorType.MissingShop };
+        }
+        const shopWithoutProtocol = shop
+            .replace(/^https?:\/\//, '')
+            .replace(/\/$/, '');
+        const shopWithDomain = shop?.indexOf('.') === -1
+            ? `${shopWithoutProtocol}.myshopify.com`
+            : shopWithoutProtocol;
+        const sanitizedShop = api.utils.sanitizeShop(shopWithDomain);
+        if (!sanitizedShop) {
+            logger.debug('Invalid shop parameter', { shop });
+            return { shop: types.LoginErrorType.InvalidShop };
+        }
+        const authPath = `${config.appUrl}${config.auth.path}?shop=${sanitizedShop}`;
+        const adminPath = api.utils.legacyUrlToShopAdminUrl(sanitizedShop);
+        const installPath = `https://${adminPath}/oauth/install?client_id=${config.apiKey}`;
+        const shouldInstall = config.isEmbeddedApp && config.future.unstable_newEmbeddedAuthStrategy;
+        const redirectUrl = shouldInstall ? installPath : authPath;
+        logger.info(`Redirecting login request to ${redirectUrl}`, {
+            shop: sanitizedShop,
+        });
+        throw serverRuntime.redirect(redirectUrl);
+    };
+}
+
+exports.loginFactory = loginFactory;
+//# sourceMappingURL=login.js.map

package/dist/cjs/server/authenticate/login/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sources":["../../../../../../src/server/authenticate/login/login.ts"],"sourcesContent":[null],"names":["LoginErrorType","redirect"],"mappings":";;;;;AAIM,SAAU,YAAY,CAAC,MAAmB,EAAA;IAC9C,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAErC,IAAA,OAAO,eAAe,KAAK,CAAC,OAAgB,EAAA;QAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE;AAC1C,YAAA,OAAO,EAAE,CAAC;SACX;AAED,QAAA,MAAM,IAAI,GACR,SAAS,IAAK,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,MAAM,CAAY,CAAC;QAElE,IAAI,CAAC,IAAI,EAAE;YACT,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;AAC/C,YAAA,OAAO,EAAC,IAAI,EAAEA,oBAAc,CAAC,WAAW,EAAC,CAAC;SAC3C;QAED,MAAM,mBAAmB,GAAG,IAAI;AAC7B,aAAA,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;AAC3B,aAAA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,MAAM,cAAc,GAClB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;cACrB,CAAG,EAAA,mBAAmB,CAAgB,cAAA,CAAA;cACtC,mBAAmB,CAAC;QAC1B,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAE7D,IAAI,CAAC,aAAa,EAAE;YAClB,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;AAC/C,YAAA,OAAO,EAAC,IAAI,EAAEA,oBAAc,CAAC,WAAW,EAAC,CAAC;SAC3C;AAED,QAAA,MAAM,QAAQ,GAAG,CAAG,EAAA,MAAM,CAAC,MAAM,CAAA,EAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAS,MAAA,EAAA,aAAa,EAAE,CAAC;QAE7E,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,CAAW,QAAA,EAAA,SAAS,4BAA4B,MAAM,CAAC,MAAM,CAAA,CAAE,CAAC;QAEpF,MAAM,aAAa,GACjB,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,CAAC,gCAAgC,CAAC;QACzE,MAAM,WAAW,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE3D,QAAA,MAAM,CAAC,IAAI,CAAC,CAAgC,6BAAA,EAAA,WAAW,EAAE,EAAE;AACzD,YAAA,IAAI,EAAE,aAAa;AACpB,SAAA,CAAC,CAAC;AAEH,QAAA,MAAMC,sBAAQ,CAAC,WAAW,CAAC,CAAC;AAC9B,KAAC,CAAC;AACJ;;;;"}

package/dist/cjs/server/authenticate/public/appProxy/authenticate.js

@@ -0,0 +1,95 @@
+'use strict';
+
+var factory = require('../../../clients/admin/factory.js');
+var factory$1 = require('../../../clients/storefront/factory.js');
+
+function authenticateAppProxyFactory(params) {
+    const { api, config, logger } = params;
+    return async function authenticate(request) {
+        logger.info('Authenticating app proxy request');
+        const url = new URL(request.url);
+        if (!(await validateAppProxyHmac(params, url))) {
+            logger.info('App proxy request has invalid signature');
+            throw new Response(undefined, {
+                status: 400,
+                statusText: 'Bad Request',
+            });
+        }
+        const shop = url.searchParams.get('shop');
+        const sessionId = api.session.getOfflineId(shop);
+        const session = await config.sessionStorage.loadSession(sessionId);
+        if (!session) {
+            const context = {
+                liquid,
+                session: undefined,
+                admin: undefined,
+                storefront: undefined,
+            };
+            return context;
+        }
+        const context = {
+            liquid,
+            session,
+            admin: factory.adminClientFactory({ params, session }),
+            storefront: factory$1.storefrontClientFactory({ params, session }),
+        };
+        return context;
+    };
+}
+const liquid = (body, initAndOptions) => {
+    const processedBody = processLiquidBody(body);
+    if (typeof initAndOptions !== 'object') {
+        return new Response(processedBody, {
+            status: initAndOptions || 200,
+            headers: {
+                'Content-Type': 'application/liquid',
+            },
+        });
+    }
+    const { layout, ...responseInit } = initAndOptions || {};
+    const responseBody = layout === false ? `{% layout none %} ${processedBody}` : processedBody;
+    const headers = new Headers(responseInit.headers);
+    headers.set('Content-Type', 'application/liquid');
+    return new Response(responseBody, {
+        ...responseInit,
+        headers,
+    });
+};
+async function validateAppProxyHmac(params, url) {
+    const { api, logger } = params;
+    try {
+        let searchParams = new URLSearchParams(url.search);
+        if (!searchParams.get('index')) {
+            searchParams.delete('index');
+        }
+        let isValid = await api.utils.validateHmac(Object.fromEntries(searchParams.entries()), { signator: 'appProxy' });
+        if (!isValid) {
+            const cleanPath = url.pathname
+                .replace(/^\//, '')
+                .replace(/\/$/, '')
+                .replaceAll('/', '.');
+            const data = `routes%2F${cleanPath}`;
+            searchParams = new URLSearchParams(`?_data=${data}&${searchParams.toString().replace(/^\?/, '')}`);
+            isValid = await api.utils.validateHmac(Object.fromEntries(searchParams.entries()), { signator: 'appProxy' });
+            if (!isValid) {
+                const searchParams = new URLSearchParams(`?_data=${data}._index&${url.search.replace(/^\?/, '')}`);
+                isValid = await api.utils.validateHmac(Object.fromEntries(searchParams.entries()), { signator: 'appProxy' });
+            }
+        }
+        return isValid;
+    }
+    catch (error) {
+        logger.info(error.message);
+        throw new Response(undefined, { status: 400, statusText: 'Bad Request' });
+    }
+}
+function processLiquidBody(body) {
+    return (body
+        // Add trailing slashes to relative form action URLs
+        .replaceAll(/<(form[^>]+)action="(\/[^"?]+)(\?[^"]+)?">/g, '<$1action="$2/$3">')
+        // Add trailing slashes to relative link href URLs
+        .replaceAll(/<(a[^>]+)href="(\/[^"?]+)(\?[^"]+)?">/g, '<$1href="$2/$3">'));
+}
+
+exports.authenticateAppProxyFactory = authenticateAppProxyFactory;
+//# sourceMappingURL=authenticate.js.map

package/dist/cjs/server/authenticate/public/appProxy/authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.js","sources":["../../../../../../../src/server/authenticate/public/appProxy/authenticate.ts"],"sourcesContent":[null],"names":["adminClientFactory","storefrontClientFactory"],"mappings":";;;;;AAYM,SAAU,2BAA2B,CAEzC,MAAmB,EAAA;IACnB,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAErC,IAAA,OAAO,eAAe,YAAY,CAChC,OAAO,EAAA;AAEP,QAAA,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAEhD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEjC,IAAI,EAAE,MAAM,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE;AAC9C,YAAA,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;AACvD,YAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,gBAAA,MAAM,EAAE,GAAG;AACX,gBAAA,UAAU,EAAE,aAAa;AAC1B,aAAA,CAAC,CAAC;SACJ;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAEnE,IAAI,CAAC,OAAO,EAAE;AACZ,YAAA,MAAM,OAAO,GAAoB;gBAC/B,MAAM;AACN,gBAAA,OAAO,EAAE,SAAS;AAClB,gBAAA,KAAK,EAAE,SAAS;AAChB,gBAAA,UAAU,EAAE,SAAS;aACtB,CAAC;AAEF,YAAA,OAAO,OAAO,CAAC;SAChB;AAED,QAAA,MAAM,OAAO,GAA0C;YACrD,MAAM;YACN,OAAO;YACP,KAAK,EAAEA,0BAAkB,CAAC,EAAC,MAAM,EAAE,OAAO,EAAC,CAAC;YAC5C,UAAU,EAAEC,iCAAuB,CAAC,EAAC,MAAM,EAAE,OAAO,EAAC,CAAC;SACvD,CAAC;AAEF,QAAA,OAAO,OAAO,CAAC;AACjB,KAAC,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAA2B,CAAC,IAAI,EAAE,cAAc,KAAI;AAC9D,IAAA,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAE9C,IAAA,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE;AACtC,QAAA,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE;YACjC,MAAM,EAAE,cAAc,IAAI,GAAG;AAC7B,YAAA,OAAO,EAAE;AACP,gBAAA,cAAc,EAAE,oBAAoB;AACrC,aAAA;AACF,SAAA,CAAC,CAAC;KACJ;IAED,MAAM,EAAC,MAAM,EAAE,GAAG,YAAY,EAAC,GAAG,cAAc,IAAI,EAAE,CAAC;AACvD,IAAA,MAAM,YAAY,GAChB,MAAM,KAAK,KAAK,GAAG,CAAA,kBAAA,EAAqB,aAAa,CAAE,CAAA,GAAG,aAAa,CAAC;IAE1E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;AAClD,IAAA,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;AAElD,IAAA,OAAO,IAAI,QAAQ,CAAC,YAAY,EAAE;AAChC,QAAA,GAAG,YAAY;QACf,OAAO;AACR,KAAA,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,oBAAoB,CACjC,MAAmB,EACnB,GAAQ,EAAA;AAER,IAAA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAE7B,IAAA,IAAI;QACF,IAAI,YAAY,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;AAC9B,YAAA,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;SAC9B;QAED,IAAI,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,CACxC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,EAC1C,EAAC,QAAQ,EAAE,UAAU,EAAC,CACvB,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE;AACZ,YAAA,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ;AAC3B,iBAAA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAClB,iBAAA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAClB,iBAAA,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACxB,YAAA,MAAM,IAAI,GAAG,CAAY,SAAA,EAAA,SAAS,EAAE,CAAC;YAErC,YAAY,GAAG,IAAI,eAAe,CAChC,UAAU,IAAI,CAAA,CAAA,EAAI,YAAY,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA,CAAE,CAC/D,CAAC;YAEF,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,CACpC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,EAC1C,EAAC,QAAQ,EAAE,UAAU,EAAC,CACvB,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE;gBACZ,MAAM,YAAY,GAAG,IAAI,eAAe,CACtC,CAAU,OAAA,EAAA,IAAI,WAAW,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA,CAAE,CACzD,CAAC;gBAEF,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,CACpC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,EAC1C,EAAC,QAAQ,EAAE,UAAU,EAAC,CACvB,CAAC;aACH;SACF;AAED,QAAA,OAAO,OAAO,CAAC;KAChB;IAAC,OAAO,KAAK,EAAE;AACd,QAAA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,QAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,aAAa,EAAC,CAAC,CAAC;KACzE;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAA;AACrC,IAAA,QACE,IAAI;;AAED,SAAA,UAAU,CACT,6CAA6C,EAC7C,oBAAoB,CACrB;;AAEA,SAAA,UAAU,CAAC,wCAAwC,EAAE,kBAAkB,CAAC,EAC3E;AACJ;;;;"}

package/dist/cjs/server/authenticate/public/checkout/authenticate.js

@@ -0,0 +1,33 @@
+'use strict';
+
+var ensureCorsHeaders = require('../../helpers/ensure-cors-headers.js');
+var validateSessionToken = require('../../helpers/validate-session-token.js');
+var getSessionTokenHeader = require('../../helpers/get-session-token-header.js');
+var rejectBotRequest = require('../../helpers/reject-bot-request.js');
+var respondToOptionsRequest = require('../../helpers/respond-to-options-request.js');
+require('@remix-run/server-runtime');
+
+function authenticateCheckoutFactory(params) {
+    return async function authenticateCheckout(request, options = {}) {
+        const { logger } = params;
+        const corsHeaders = options.corsHeaders ?? [];
+        rejectBotRequest.respondToBotRequest(params, request);
+        respondToOptionsRequest.respondToOptionsRequest(params, request, corsHeaders);
+        const sessionTokenHeader = getSessionTokenHeader.getSessionTokenHeader(request);
+        logger.info('Authenticating checkout request');
+        if (!sessionTokenHeader) {
+            logger.debug('Request did not contain a session token');
+            throw new Response(undefined, {
+                status: 401,
+                statusText: 'Unauthorized',
+            });
+        }
+        return {
+            sessionToken: await validateSessionToken.validateSessionToken(params, request, sessionTokenHeader, { checkAudience: false }),
+            cors: ensureCorsHeaders.ensureCORSHeadersFactory(params, request, corsHeaders),
+        };
+    };
+}
+
+exports.authenticateCheckoutFactory = authenticateCheckoutFactory;
+//# sourceMappingURL=authenticate.js.map

package/dist/cjs/server/authenticate/public/checkout/authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.js","sources":["../../../../../../../src/server/authenticate/public/checkout/authenticate.ts"],"sourcesContent":[null],"names":["respondToBotRequest","respondToOptionsRequest","getSessionTokenHeader","validateSessionToken","ensureCORSHeadersFactory"],"mappings":";;;;;;;;;AAWM,SAAU,2BAA2B,CACzC,MAAmB,EAAA;IAEnB,OAAO,eAAe,oBAAoB,CACxC,OAAO,EACP,OAAO,GAAG,EAAE,EAAA;AAEZ,QAAA,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,CAAC;AAExB,QAAA,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;AAE9C,QAAAA,oCAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACrC,QAAAC,+CAAuB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAEtD,QAAA,MAAM,kBAAkB,GAAGC,2CAAqB,CAAC,OAAO,CAAC,CAAC;AAE1D,QAAA,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAE/C,IAAI,CAAC,kBAAkB,EAAE;AACvB,YAAA,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;AACxD,YAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,gBAAA,MAAM,EAAE,GAAG;AACX,gBAAA,UAAU,EAAE,cAAc;AAC3B,aAAA,CAAC,CAAC;SACJ;QAED,OAAO;AACL,YAAA,YAAY,EAAE,MAAMC,yCAAoB,CACtC,MAAM,EACN,OAAO,EACP,kBAAkB,EAClB,EAAC,aAAa,EAAE,KAAK,EAAC,CACvB;YACD,IAAI,EAAEC,0CAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;SAC7D,CAAC;AACJ,KAAC,CAAC;AACJ;;;;"}

package/{build/ts → dist/cjs}/server/authenticate/public/factory.js

@@ -1,20 +1,20 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.authenticatePublicFactory = void 0;
-var authenticate_1 = require("./checkout/authenticate");
-var authenticate_2 = require("./appProxy/authenticate");
+'use strict';
+
+var authenticate = require('./checkout/authenticate.js');
+var authenticate$1 = require('./appProxy/authenticate.js');
+
 function authenticatePublicFactory(params) {
-    var logger = params.logger, config = params.config;
-    var authenticateCheckout = (0, authenticate_1.authenticateCheckoutFactory)(params);
-    var authenticateAppProxy = (0, authenticate_2.authenticateAppProxyFactory)(params);
+    const { logger, config } = params;
+    const authenticateCheckout = authenticate.authenticateCheckoutFactory(params);
+    const authenticateAppProxy = authenticate$1.authenticateAppProxyFactory(params);
     if (config.future.v3_authenticatePublic) {
-        var context = {
+        const context = {
             checkout: authenticateCheckout,
             appProxy: authenticateAppProxy,
         };
         return context;
     }
-    var authenticatePublic = function (request, options) {
+    const authenticatePublic = (request, options) => {
         logger.deprecated('3.0.0', 'authenticate.public() will be deprecated in v3. Use authenticate.public.checkout() instead.');
         return authenticateCheckout(request, options);
     };
@@ -22,5 +22,6 @@ function authenticatePublicFactory(params) {
     authenticatePublic.appProxy = authenticateAppProxy;
     return authenticatePublic;
 }
+
 exports.authenticatePublicFactory = authenticatePublicFactory;
-//# sourceMappingURL=factory.js.map
+//# sourceMappingURL=factory.js.map

package/dist/cjs/server/authenticate/public/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sources":["../../../../../../src/server/authenticate/public/factory.ts"],"sourcesContent":[null],"names":["authenticateCheckoutFactory","authenticateAppProxyFactory"],"mappings":";;;;;AAcM,SAAU,yBAAyB,CAGvC,MAAmB,EAAA;AACnB,IAAA,MAAM,EAAC,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAEhC,IAAA,MAAM,oBAAoB,GAAGA,wCAA2B,CAAC,MAAM,CAAC,CAAC;AACjE,IAAA,MAAM,oBAAoB,GAAGC,0CAA2B,CAAY,MAAM,CAAC,CAAC;AAE5E,IAAA,IAAI,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE;AACvC,QAAA,MAAM,OAAO,GAA6B;AACxC,YAAA,QAAQ,EAAE,oBAAoB;AAC9B,YAAA,QAAQ,EAAE,oBAAoB;SAC/B,CAAC;AAEF,QAAA,OAAO,OAAqC,CAAC;KAC9C;AAED,IAAA,MAAM,kBAAkB,GAA6B,CACnD,OAAgB,EAChB,OAAoC,KAClC;AACF,QAAA,MAAM,CAAC,UAAU,CACf,OAAO,EACP,6FAA6F,CAC9F,CAAC;AAEF,QAAA,OAAO,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAChD,KAAC,CAAC;AAEF,IAAA,kBAAkB,CAAC,QAAQ,GAAG,oBAAoB,CAAC;AACnD,IAAA,kBAAkB,CAAC,QAAQ,GAAG,oBAAoB,CAAC;AAEnD,IAAA,OAAO,kBAAkB,CAAC;AAC5B;;;;"}

package/dist/cjs/server/authenticate/webhooks/authenticate.js

@@ -0,0 +1,85 @@
+'use strict';
+
+var shopifyApi = require('@shopify/shopify-api');
+var factory = require('../../clients/admin/factory.js');
+require('@remix-run/server-runtime');
+var handleClientError = require('../admin/helpers/handle-client-error.js');
+
+function authenticateWebhookFactory(params) {
+    const { api, config, logger } = params;
+    return async function authenticate(request) {
+        if (request.method !== 'POST') {
+            logger.debug('Received a non-POST request for a webhook. Only POST requests are allowed.', { url: request.url, method: request.method });
+            throw new Response(undefined, {
+                status: 405,
+                statusText: 'Method not allowed',
+            });
+        }
+        const rawBody = await request.text();
+        const check = await api.webhooks.validate({
+            rawBody,
+            rawRequest: request,
+        });
+        if (!check.valid) {
+            if (check.reason === shopifyApi.WebhookValidationErrorReason.InvalidHmac) {
+                logger.debug('Webhook HMAC validation failed', check);
+                throw new Response(undefined, {
+                    status: 401,
+                    statusText: 'Unauthorized',
+                });
+            }
+            else {
+                logger.debug('Webhook validation failed', check);
+                throw new Response(undefined, { status: 400, statusText: 'Bad Request' });
+            }
+        }
+        const sessionId = api.session.getOfflineId(check.domain);
+        const session = await config.sessionStorage.loadSession(sessionId);
+        const webhookContext = {
+            apiVersion: check.apiVersion,
+            shop: check.domain,
+            topic: check.topic,
+            webhookId: check.webhookId,
+            payload: JSON.parse(rawBody),
+            subTopic: check.subTopic || undefined,
+            session: undefined,
+            admin: undefined,
+        };
+        if (!session) {
+            return webhookContext;
+        }
+        let admin;
+        if (config.future.v3_webhookAdminContext) {
+            admin = factory.adminClientFactory({
+                params,
+                session,
+                handleClientError: handleClientError.handleClientErrorFactory({ request }),
+            });
+        }
+        else {
+            const restClient = new api.clients.Rest({
+                session,
+                apiVersion: check.apiVersion,
+            });
+            const graphqlClient = new api.clients.Graphql({
+                session,
+                apiVersion: check.apiVersion,
+            });
+            Object.entries(api.rest).forEach(([name, resource]) => {
+                Reflect.set(restClient, name, resource);
+            });
+            admin = {
+                rest: restClient,
+                graphql: graphqlClient,
+            };
+        }
+        return {
+            ...webhookContext,
+            session,
+            admin: admin,
+        };
+    };
+}
+
+exports.authenticateWebhookFactory = authenticateWebhookFactory;
+//# sourceMappingURL=authenticate.js.map

package/dist/cjs/server/authenticate/webhooks/authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.js","sources":["../../../../../../src/server/authenticate/webhooks/authenticate.ts"],"sourcesContent":[null],"names":["WebhookValidationErrorReason","adminClientFactory","handleClientErrorFactory"],"mappings":";;;;;;;AAmBM,SAAU,0BAA0B,CAIxC,MAAmB,EAAA;IACnB,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAErC,IAAA,OAAO,eAAe,YAAY,CAChC,OAAgB,EAAA;AAEhB,QAAA,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE;AAC7B,YAAA,MAAM,CAAC,KAAK,CACV,4EAA4E,EAC5E,EAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAC,CAC3C,CAAC;AACF,YAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,gBAAA,MAAM,EAAE,GAAG;AACX,gBAAA,UAAU,EAAE,oBAAoB;AACjC,aAAA,CAAC,CAAC;SACJ;AAED,QAAA,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAErC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACxC,OAAO;AACP,YAAA,UAAU,EAAE,OAAO;AACpB,SAAA,CAAC,CAAC;AAEH,QAAA,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;YAChB,IAAI,KAAK,CAAC,MAAM,KAAKA,uCAA4B,CAAC,WAAW,EAAE;AAC7D,gBAAA,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;AACtD,gBAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,oBAAA,MAAM,EAAE,GAAG;AACX,oBAAA,UAAU,EAAE,cAAc;AAC3B,iBAAA,CAAC,CAAC;aACJ;iBAAM;AACL,gBAAA,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;AACjD,gBAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,aAAa,EAAC,CAAC,CAAC;aACzE;SACF;AAED,QAAA,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;AACnE,QAAA,MAAM,cAAc,GAAyC;YAC3D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,IAAI,EAAE,KAAK,CAAC,MAAM;YAClB,KAAK,EAAE,KAAK,CAAC,KAAe;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;AAC1B,YAAA,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;AAC5B,YAAA,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;AACrC,YAAA,OAAO,EAAE,SAAS;AAClB,YAAA,KAAK,EAAE,SAAS;SACjB,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE;AACZ,YAAA,OAAO,cAAc,CAAC;SACvB;AAED,QAAA,IAAI,KAEuC,CAAC;AAC5C,QAAA,IAAI,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE;YACxC,KAAK,GAAGC,0BAAkB,CAAY;gBACpC,MAAM;gBACN,OAAO;AACP,gBAAA,iBAAiB,EAAEC,0CAAwB,CAAC,EAAC,OAAO,EAAC,CAAC;AACvD,aAAA,CAAC,CAAC;SACJ;aAAM;YACL,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;gBACtC,OAAO;gBACP,UAAU,EAAE,KAAK,CAAC,UAAwB;AAC3C,aAAA,CAAC,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC5C,OAAO;gBACP,UAAU,EAAE,KAAK,CAAC,UAAwB;AAC3C,aAAA,CAAC,CAAC;AAEH,YAAA,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAI;gBACpD,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC1C,aAAC,CAAC,CAAC;AAEH,YAAA,KAAK,GAAG;AACN,gBAAA,IAAI,EAAE,UAA2C;AACjD,gBAAA,OAAO,EAAE,aAAa;aACvB,CAAC;SACH;QAED,OAAO;AACL,YAAA,GAAG,cAAc;YACjB,OAAO;AACP,YAAA,KAAK,EAAE,KAA+C;SACvD,CAAC;AACJ,KAAC,CAAC;AACJ;;;;"}

package/dist/cjs/server/authenticate/webhooks/register.js

@@ -0,0 +1,45 @@
+'use strict';
+
+function registerWebhooksFactory({ api, logger }) {
+    return async function registerWebhooks({ session }) {
+        return api.webhooks
+            .register({ session })
+            .then((response) => {
+            Object.entries(response).forEach(([topic, topicResults]) => {
+                topicResults.forEach(({ success, ...rest }) => {
+                    if (success) {
+                        logger.debug('Registered webhook', {
+                            topic,
+                            shop: session.shop,
+                            operation: rest.operation,
+                        });
+                    }
+                    else {
+                        logger.error('Failed to register webhook', {
+                            topic,
+                            shop: session.shop,
+                            result: JSON.stringify(rest.result),
+                        });
+                    }
+                });
+            });
+            return response;
+        })
+            .catch((error) => {
+            const graphQLErrors = error.body?.errors?.graphQLErrors || [];
+            const throttled = graphQLErrors.find(({ extensions: { code } }) => code === 'THROTTLED');
+            if (throttled) {
+                logger.error('Failed to register webhooks', {
+                    shop: session.shop,
+                    error: JSON.stringify(error),
+                });
+            }
+            else {
+                throw error;
+            }
+        });
+    };
+}
+
+exports.registerWebhooksFactory = registerWebhooksFactory;
+//# sourceMappingURL=register.js.map

package/dist/cjs/server/authenticate/webhooks/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sources":["../../../../../../src/server/authenticate/webhooks/register.ts"],"sourcesContent":[null],"names":[],"mappings":";;SAIgB,uBAAuB,CAAC,EAAC,GAAG,EAAE,MAAM,EAAc,EAAA;AAChE,IAAA,OAAO,eAAe,gBAAgB,CAAC,EAAC,OAAO,EAA0B,EAAA;QACvE,OAAO,GAAG,CAAC,QAAQ;AAChB,aAAA,QAAQ,CAAC,EAAC,OAAO,EAAC,CAAC;AACnB,aAAA,IAAI,CAAC,CAAC,QAAQ,KAAI;AACjB,YAAA,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,KAAI;gBACzD,YAAY,CAAC,OAAO,CAAC,CAAC,EAAC,OAAO,EAAE,GAAG,IAAI,EAAC,KAAI;oBAC1C,IAAI,OAAO,EAAE;AACX,wBAAA,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;4BACjC,KAAK;4BACL,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,SAAS,EAAE,IAAI,CAAC,SAAS;AAC1B,yBAAA,CAAC,CAAC;qBACJ;yBAAM;AACL,wBAAA,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;4BACzC,KAAK;4BACL,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;AACpC,yBAAA,CAAC,CAAC;qBACJ;AACH,iBAAC,CAAC,CAAC;AACL,aAAC,CAAC,CAAC;AAEH,YAAA,OAAO,QAAQ,CAAC;AAClB,SAAC,CAAC;AACD,aAAA,KAAK,CAAC,CAAC,KAAK,KAAI;YACf,MAAM,aAAa,GACjB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;YAE1C,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAClC,CAAC,EAAC,UAAU,EAAE,EAAC,IAAI,EAAC,EAAC,KAAK,IAAI,KAAK,WAAW,CAC/C,CAAC;YAEF,IAAI,SAAS,EAAE;AACb,gBAAA,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;oBAC1C,IAAI,EAAE,OAAO,CAAC,IAAI;AAClB,oBAAA,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;AAC7B,iBAAA,CAAC,CAAC;aACJ;iBAAM;AACL,gBAAA,MAAM,KAAK,CAAC;aACb;AACH,SAAC,CAAC,CAAC;AACP,KAAC,CAAC;AACJ;;;;"}

package/dist/cjs/server/boundary/error.js

@@ -0,0 +1,14 @@
+'use strict';
+
+var jsxRuntime = require('react/jsx-runtime');
+
+function errorBoundary(error) {
+    if (error.constructor.name === 'ErrorResponse' ||
+        error.constructor.name === 'ErrorResponseImpl') {
+        return (jsxRuntime.jsx("div", { dangerouslySetInnerHTML: { __html: error.data || 'Handling response' } }));
+    }
+    throw error;
+}
+
+exports.errorBoundary = errorBoundary;
+//# sourceMappingURL=error.js.map

package/dist/cjs/server/boundary/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sources":["../../../../../src/server/boundary/error.tsx"],"sourcesContent":[null],"names":["_jsx"],"mappings":";;;;AAAM,SAAU,aAAa,CAAC,KAAU,EAAA;AACtC,IAAA,IACE,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,eAAe;AAC1C,QAAA,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,mBAAmB,EAC9C;AACA,QAAA,QACEA,cAAA,CAAA,KAAA,EAAA,EACE,uBAAuB,EAAE,EAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,mBAAmB,EAAC,EAAA,CACpE,EACF;KACH;AAED,IAAA,MAAM,KAAK,CAAC;AACd;;;;"}

package/dist/cjs/server/boundary/headers.js

@@ -0,0 +1,16 @@
+'use strict';
+
+function headersBoundary(headers) {
+    const { parentHeaders, loaderHeaders, actionHeaders, errorHeaders } = headers;
+    if (errorHeaders && Array.from(errorHeaders.entries()).length > 0) {
+        return errorHeaders;
+    }
+    return new Headers([
+        ...(parentHeaders ? Array.from(parentHeaders.entries()) : []),
+        ...(loaderHeaders ? Array.from(loaderHeaders.entries()) : []),
+        ...(actionHeaders ? Array.from(actionHeaders.entries()) : []),
+    ]);
+}
+
+exports.headersBoundary = headersBoundary;
+//# sourceMappingURL=headers.js.map

package/dist/cjs/server/boundary/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sources":["../../../../../src/server/boundary/headers.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAEM,SAAU,eAAe,CAAC,OAAoB,EAAA;IAClD,MAAM,EAAC,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAC,GAAG,OAAO,CAAC;AAE5E,IAAA,IAAI,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;AACjE,QAAA,OAAO,YAAY,CAAC;KACrB;IAED,OAAO,IAAI,OAAO,CAAC;AACjB,QAAA,IAAI,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE;AAC5D,QAAA,IAAI,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE;AAC5D,QAAA,IAAI,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE;AAC7D,KAAA,CAAC,CAAC;AACL;;;;"}

package/{build/ts → dist/cjs}/server/boundary/index.js

@@ -1,12 +1,12 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.boundary = void 0;
-var headers_1 = require("./headers");
-var error_1 = require("./error");
+'use strict';
+
+var headers = require('./headers.js');
+var error = require('./error.js');
+
 /**
  * A collection of functions that handle the necessary code for error boundaries in routes using authenticate.admin.
  */
-exports.boundary = {
+const boundary = {
     /**
      * A function that handles errors or thrown responses.
      *
@@ -21,7 +21,7 @@ exports.boundary = {
      * }
      * ```
      */
-    error: error_1.errorBoundary,
+    error: error.errorBoundary,
     /**
      * A function that sets the appropriate document response headers.
      *
@@ -36,6 +36,8 @@ exports.boundary = {
      * };
      * ```
      */
-    headers: headers_1.headersBoundary,
+    headers: headers.headersBoundary,
 };
-//# sourceMappingURL=index.js.map
+
+exports.boundary = boundary;
+//# sourceMappingURL=index.js.map

package/dist/cjs/server/boundary/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../../src/server/boundary/index.ts"],"sourcesContent":[null],"names":["errorBoundary","headersBoundary"],"mappings":";;;;;AAGA;;AAEG;AACU,MAAA,QAAQ,GAAG;AACtB;;;;;;;;;;;;;AAaG;AACH,IAAA,KAAK,EAAEA,mBAAa;AAEpB;;;;;;;;;;;;;AAaG;AACH,IAAA,OAAO,EAAEC,uBAAe;;;;;"}

package/dist/cjs/server/clients/admin/factory.js

@@ -0,0 +1,18 @@
+'use strict';
+
+var graphql = require('./graphql.js');
+var rest = require('./rest.js');
+
+function adminClientFactory({ params, handleClientError, session, }) {
+    return {
+        rest: rest.restClientFactory({
+            params,
+            session,
+            handleClientError,
+        }),
+        graphql: graphql.graphqlClientFactory({ params, session, handleClientError }),
+    };
+}
+
+exports.adminClientFactory = adminClientFactory;
+//# sourceMappingURL=factory.js.map

package/dist/cjs/server/clients/admin/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sources":["../../../../../../src/server/clients/admin/factory.ts"],"sourcesContent":[null],"names":["restClientFactory","graphqlClientFactory"],"mappings":";;;;;AAcM,SAAU,kBAAkB,CAEhC,EACA,MAAM,EACN,iBAAiB,EACjB,OAAO,GACW,EAAA;IAClB,OAAO;QACL,IAAI,EAAEA,sBAAiB,CAAY;YACjC,MAAM;YACN,OAAO;YACP,iBAAiB;SAClB,CAAC;QACF,OAAO,EAAEC,4BAAoB,CAAC,EAAC,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAC,CAAC;KACpE,CAAC;AACJ;;;;"}