@sixtyninecommerce/client 0.30.0 → 0.32.0

package/dist/web/feed-responder.js

@@ -0,0 +1,81 @@
+/**
+ * Serve a platform-rendered product feed (Google Shopping, Meta, Pinterest,
+ * TikTok) on the storefront's own origin, from any Fetch-API server — the
+ * same fetch-and-serve shape as `createSeoArtifactResponder`, so a merchant
+ * centre only ever sees the storefront domain.
+ *
+ * Three deliberate behaviors, shared with `@sixtyninecommerce/client/next`'s
+ * `createProductFeedHandler`:
+ * - The inbound client User-Agent is NOT forwarded. Merchant centres crawl with
+ *   bot UAs and the platform host is UA-filtered; it must see the storefront
+ *   server, not Googlebot.
+ * - X-Robots-Tag from the platform host is dropped; Cache-Control is replaced
+ *   with the storefront's own policy.
+ * - The upstream body is BUFFERED before the response is constructed. Streaming
+ *   it looks cheaper, but the timeout spans the whole transfer: a feed still
+ *   streaming when the deadline hits aborts MID-BODY, long after the 200 and
+ *   its `Cache-Control` went out, and the CDN then caches truncated — therefore
+ *   unparseable — XML for the full `s-maxage`. Buffering makes that same
+ *   timeout a clean 503 + `Retry-After` that nothing caches. A gzipped catalog
+ *   feed is a few MB; that is the right price for never serving half a feed.
+ */
+import { readPublicArtifact } from '../core/public-artifact.js';
+import { adapterClient } from '../multi-store.js';
+import { failureResponse, notFoundResponse, publicArtifactResponse } from './respond.js';
+export const DEFAULT_FEED_CACHE_CONTROL = 'public, max-age=300, s-maxage=1800, stale-while-revalidate=86400';
+const DEFAULT_TIMEOUT_MS = 30_000;
+/** `arrayBuffer`, not `text`: the bytes go out exactly as the platform encoded them. */
+export function readFeedBytes(response) {
+    return response.arrayBuffer();
+}
+/** The responder both entry points build. Internal: the public factories fix the reader. */
+export function buildProductFeedResponder(client, options, missingTokenMessage, read) {
+    const cacheControl = options?.cacheControl ?? DEFAULT_FEED_CACHE_CONTROL;
+    const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    return async (request, params) => {
+        try {
+            // A store router serves each request from the store it resolves to; a
+            // request that belongs to no store it serves is a plain 404.
+            const resolvedClient = await adapterClient(client, request);
+            if (!resolvedClient)
+                return notFoundResponse();
+            const token = options?.token ?? params?.token;
+            if (!token)
+                throw new Error(missingTokenMessage);
+            const url = resolvedClient.feeds.feedUrl(token);
+            const ifNoneMatch = request.headers.get('if-none-match');
+            const result = await read(resolvedClient)(url, {
+                ...(ifNoneMatch ? { ifNoneMatch } : {}),
+                timeoutMs,
+            });
+            return publicArtifactResponse(result, cacheControl, 'application/xml; charset=utf-8');
+        }
+        catch (error) {
+            return failureResponse(error);
+        }
+    };
+}
+/**
+ * A Fetch-API responder for a product feed. Uses the `fetch` you configured
+ * the client with.
+ *
+ * ```ts
+ * import { createProductFeedResponder } from '@sixtyninecommerce/client/web';
+ *
+ * // GET /product-feed.xml — one fixed feed
+ * const feed = createProductFeedResponder(getClient(), { token: process.env.GOOGLE_FEED_TOKEN });
+ * // GET /feeds/:token.xml — several feeds off one route
+ * const feeds = createProductFeedResponder(getClient());
+ * // feeds(request, { token })
+ * ```
+ *
+ * Several stores in one process: pass the store router and each request is
+ * proxied from the store it resolves to (a request no store serves is a `404`).
+ *
+ * Never throws per request: no token or an upstream failure is a `503` with
+ * `Retry-After`, an unknown feed a `404`.
+ */
+export function createProductFeedResponder(client, options) {
+    return buildProductFeedResponder(client, options, 'createProductFeedResponder requires a feed token — pass options.token or params.token', (resolved) => (url, readOptions) => readPublicArtifact(resolved.context.fetch, url, readFeedBytes, readOptions));
+}
+//# sourceMappingURL=feed-responder.js.map

package/dist/web/feed-responder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed-responder.js","sourceRoot":"","sources":["../../src/web/feed-responder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAA2B,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,aAAa,EAAyB,MAAM,mBAAmB,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAuBzF,MAAM,CAAC,MAAM,0BAA0B,GACrC,kEAAkE,CAAC;AAErE,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAUlC,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,QAAkB;IAC9C,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB,CACvC,MAAuE,EACvE,OAAgD,EAChD,mBAA2B,EAC3B,IAAqD;IAErD,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,0BAA0B,CAAC;IACzE,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,kBAAkB,CAAC;IAE3D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAqB,EAAE;QAClD,IAAI,CAAC;YACH,sEAAsE;YACtE,6DAA6D;YAC7D,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,cAAc;gBAAE,OAAO,gBAAgB,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,KAAK,CAAC;YAC9C,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC,GAAG,EAAE;gBAC7C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,SAAS;aACV,CAAC,CAAC;YACH,OAAO,sBAAsB,CAAC,MAAM,EAAE,YAAY,EAAE,gCAAgC,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAuE,EACvE,OAAqC;IAErC,OAAO,yBAAyB,CAC9B,MAAM,EACN,OAAO,EACP,uFAAuF,EACvF,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CACjC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,WAAW,CAAC,CAC9E,CAAC;AACJ,CAAC"}

package/dist/web/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `@sixtyninecommerce/client/web` — SEO artifacts, product feeds and redirects
+ * for ANY server that speaks the Fetch API (`Request` in, `Response` out): a
+ * `node:http` adapter, Remix / React Router, Astro, SvelteKit, Hono, Cloudflare
+ * Workers, Deno, Bun. No framework imports; `@sixtyninecommerce/client/next`
+ * wraps these same responders and adds Next's cache tags.
+ *
+ * Each one also takes a store router (`createStorefrontClient({ resolveStore })`)
+ * in place of a client and serves every request from the store it resolves to.
+ *
+ * Every responder is server-side: it holds the client, and a feed token is a
+ * shared secret. None sends a credential upstream — the platform files are
+ * public.
+ */
+export type { SeoArtifact, SeoArtifactResult } from '../seo/artifacts.js';
+export { isSitemapChildFile, SEO_ARTIFACTS } from '../seo/artifacts.js';
+export type { SeoArtifactResponder, SeoArtifactResponderOptions } from './artifact-responder.js';
+export { createSeoArtifactResponder, DEFAULT_ARTIFACT_CACHE_CONTROL, } from './artifact-responder.js';
+export type { ProductFeedResponder, ProductFeedResponderOptions } from './feed-responder.js';
+export { createProductFeedResponder, DEFAULT_FEED_CACHE_CONTROL } from './feed-responder.js';
+export type { MultiStoreRedirectMiddleware, MultiStoreRedirectMiddlewareOptions, RedirectMiddleware, RedirectMiddlewareOptions, } from './redirect-middleware.js';
+export { createRedirectMiddleware } from './redirect-middleware.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/web/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/web/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACxE,YAAY,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC7F,YAAY,EACV,4BAA4B,EAC5B,mCAAmC,EACnC,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/web/index.js

@@ -0,0 +1,19 @@
+/**
+ * `@sixtyninecommerce/client/web` — SEO artifacts, product feeds and redirects
+ * for ANY server that speaks the Fetch API (`Request` in, `Response` out): a
+ * `node:http` adapter, Remix / React Router, Astro, SvelteKit, Hono, Cloudflare
+ * Workers, Deno, Bun. No framework imports; `@sixtyninecommerce/client/next`
+ * wraps these same responders and adds Next's cache tags.
+ *
+ * Each one also takes a store router (`createStorefrontClient({ resolveStore })`)
+ * in place of a client and serves every request from the store it resolves to.
+ *
+ * Every responder is server-side: it holds the client, and a feed token is a
+ * shared secret. None sends a credential upstream — the platform files are
+ * public.
+ */
+export { isSitemapChildFile, SEO_ARTIFACTS } from '../seo/artifacts.js';
+export { createSeoArtifactResponder, DEFAULT_ARTIFACT_CACHE_CONTROL, } from './artifact-responder.js';
+export { createProductFeedResponder, DEFAULT_FEED_CACHE_CONTROL } from './feed-responder.js';
+export { createRedirectMiddleware } from './redirect-middleware.js';
+//# sourceMappingURL=index.js.map

package/dist/web/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/web/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAO7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/web/redirect-middleware.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Middleware factory that applies the tenant's platform-managed redirects, for
+ * any Fetch-API server.
+ *
+ * Framework-neutral by design: it takes a `Request` and returns a plain
+ * `Response` — or `undefined`, meaning "carry on with normal routing" — which
+ * is exactly what a Next.js middleware, a Hono/Workers handler, a SvelteKit
+ * `handle` hook or a `node:http` adapter can use. `@sixtyninecommerce/client/next`
+ * re-exports this same function. It never throws — an unmatched path, a cold
+ * cache or an unreachable platform all resolve to `undefined`.
+ */
+import { type MultiStoreClient } from '../multi-store.js';
+import type { RedirectStore, RedirectStoreConfig } from '../redirects/types.js';
+export interface RedirectMiddlewareOptions extends RedirectStoreConfig {
+    /**
+     * Carry the incoming query string onto the destination. Default true — a
+     * campaign link to a moved page should keep its `utm_*` params. Parameters
+     * the destination already sets win.
+     *
+     * NOTE: this applies to EXTERNAL `https://` destinations too, so the
+     * visitor's query string is handed to that third-party origin. If your URLs
+     * carry anything you would not want a destination site to see, set this to
+     * false — or split those rules onto a middleware instance that has.
+     */
+    preserveQuery?: boolean;
+}
+export interface RedirectMiddleware {
+    /** Returns a redirect Response, or undefined to fall through. */
+    (request: Request): Promise<Response | undefined>;
+    /** The underlying store — call `refresh()` from a revalidation webhook. */
+    readonly store: RedirectStore;
+}
+/** Options of a redirect middleware for several stores in one app. */
+export interface MultiStoreRedirectMiddlewareOptions {
+    /** The store router (`createStorefrontClient({ resolveStore })`). */
+    client: MultiStoreClient;
+    /** See {@link RedirectMiddlewareOptions.preserveQuery}. Default true. */
+    preserveQuery?: boolean;
+    /**
+     * Called when a request's store could not be served — its channel could not
+     * be resolved, say — and when any of the router's stores fails to load its
+     * redirect map (the store keeps serving its last good map; this is the only
+     * signal). The request still falls through to normal routing. A request that
+     * belongs to no store (`STORE_NOT_RESOLVED`, …) is not reported.
+     */
+    onError?: (error: Error) => void;
+}
+/**
+ * A redirect middleware for several stores: each request is matched against
+ * the redirects of the store it resolves to. Each store's map is shared by its
+ * requests; refresh one with `(await client.forStore(code)).redirects.refresh()`.
+ */
+export type MultiStoreRedirectMiddleware = (request: Request) => Promise<Response | undefined>;
+/**
+ * Usage (any Fetch-API server — Next.js App Router: see
+ * `@sixtyninecommerce/client/next`):
+ * ```ts
+ * import { createRedirectMiddleware } from '@sixtyninecommerce/client/web';
+ *
+ * const redirects = createRedirectMiddleware({
+ *   storeCode: process.env.STORE_CODE!,
+ *   pluginsUrl: process.env.PLUGINS_URL,
+ *   onError: (error) => console.error('[redirects]', error),
+ * });
+ *
+ * // Hono: app.use(async (c, next) => (await redirects(c.req.raw)) ?? next());
+ * // Or reuse an initialized client's store: createRedirectMiddleware({ store: client.redirects })
+ * // Several stores in one process: createRedirectMiddleware({ client: storeRouter, onError })
+ * ```
+ */
+export declare function createRedirectMiddleware(options: MultiStoreRedirectMiddlewareOptions): MultiStoreRedirectMiddleware;
+export declare function createRedirectMiddleware(options: RedirectMiddlewareOptions | {
+    store: RedirectStore;
+    preserveQuery?: boolean;
+}): RedirectMiddleware;
+//# sourceMappingURL=redirect-middleware.d.ts.map

package/dist/web/redirect-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-middleware.d.ts","sourceRoot":"","sources":["../../src/web/redirect-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAkB,KAAK,gBAAgB,EAAmB,MAAM,mBAAmB,CAAC;AAE3F,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGhF,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACpE;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAGD,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;IAClD,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;CAC/B;AAGD,sEAAsE;AACtE,MAAM,WAAW,mCAAmC;IAClD,qEAAqE;IACrE,MAAM,EAAE,gBAAgB,CAAC;IACzB,yEAAyE;IACzE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;CAClC;AAGD;;;;GAIG;AACH,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC;AAsB/F;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,mCAAmC,GAC3C,4BAA4B,CAAC;AAChC,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GAAG;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACrF,kBAAkB,CAAC"}

package/dist/web/redirect-middleware.js

@@ -0,0 +1,94 @@
+/**
+ * Middleware factory that applies the tenant's platform-managed redirects, for
+ * any Fetch-API server.
+ *
+ * Framework-neutral by design: it takes a `Request` and returns a plain
+ * `Response` — or `undefined`, meaning "carry on with normal routing" — which
+ * is exactly what a Next.js middleware, a Hono/Workers handler, a SvelteKit
+ * `handle` hook or a `node:http` adapter can use. `@sixtyninecommerce/client/next`
+ * re-exports this same function. It never throws — an unmatched path, a cold
+ * cache or an unreachable platform all resolve to `undefined`.
+ */
+import { isStoreRefusal, onRedirectError } from '../multi-store.js';
+import { createRedirectStore } from '../redirects/store.js';
+/**
+ * Build the destination URL against the request origin, so a stored path
+ * redirects on the storefront's own host and an absolute `https://` target
+ * leaves it.
+ */
+function resolveTarget(to, request, preserveQuery) {
+    const requestUrl = new URL(request.url);
+    const target = new URL(to, requestUrl.origin);
+    if (preserveQuery) {
+        for (const [key, value] of requestUrl.searchParams) {
+            if (!target.searchParams.has(key)) {
+                target.searchParams.append(key, value);
+            }
+        }
+    }
+    return target.toString();
+}
+export function createRedirectMiddleware(options) {
+    const preserveQuery = options.preserveQuery ?? true;
+    if ('client' in options)
+        return multiStoreRedirects(options, preserveQuery);
+    const store = 'store' in options ? options.store : createRedirectStore(options);
+    const middleware = async (request) => {
+        let pathname;
+        try {
+            pathname = new URL(request.url).pathname;
+        }
+        catch {
+            return undefined;
+        }
+        const match = await store.match(pathname);
+        if (!match)
+            return undefined;
+        return new Response(null, {
+            status: match.status,
+            headers: { Location: resolveTarget(match.to, request, preserveQuery) },
+        });
+    };
+    return Object.assign(middleware, { store });
+}
+function multiStoreRedirects(options, preserveQuery) {
+    if (options.onError)
+        onRedirectError(options.client, options.onError);
+    return async (request) => {
+        let pathname;
+        try {
+            pathname = new URL(request.url).pathname;
+        }
+        catch {
+            return undefined;
+        }
+        let store;
+        try {
+            store = (await options.client.forRequest(request)).redirects;
+        }
+        catch (error) {
+            // Never throws, like the single-store middleware: a request no store
+            // serves is the page's to answer, and an outage must not take routing down.
+            if (!isStoreRefusal(error)) {
+                const failure = error instanceof Error ? error : new Error(String(error));
+                try {
+                    options.onError?.(failure);
+                }
+                catch (listenerError) {
+                    // A throwing logger must not turn "fall through" into a rejected
+                    // middleware (a 500 on every page) — nor hide what it was handed.
+                    console.warn(`[@sixtyninecommerce/client] the redirect onError handler threw while reporting: ${failure.message}`, listenerError);
+                }
+            }
+            return undefined;
+        }
+        const match = await store.match(pathname);
+        if (!match)
+            return undefined;
+        return new Response(null, {
+            status: match.status,
+            headers: { Location: resolveTarget(match.to, request, preserveQuery) },
+        });
+    };
+}
+//# sourceMappingURL=redirect-middleware.js.map

package/dist/web/redirect-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-middleware.js","sourceRoot":"","sources":["../../src/web/redirect-middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,cAAc,EAAyB,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAmD5D;;;;GAIG;AACH,SAAS,aAAa,CAAC,EAAU,EAAE,OAAgB,EAAE,aAAsB;IACzE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAE9C,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAyBD,MAAM,UAAU,wBAAwB,CACtC,OAGuC;IAEvC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;IACpD,IAAI,QAAQ,IAAI,OAAO;QAAE,OAAO,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC5E,MAAM,KAAK,GACT,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAA8B,CAAC,CAAC;IAE3F,MAAM,UAAU,GAAG,KAAK,EAAE,OAAgB,EAAiC,EAAE;QAC3E,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAuB,CAAC;AACpE,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAA4C,EAC5C,aAAsB;IAEtB,IAAI,OAAO,CAAC,OAAO;QAAE,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,OAAO,KAAK,EAAE,OAAgB,EAAiC,EAAE;QAC/D,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,4EAA4E;YAC5E,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1E,IAAI,CAAC;oBACH,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC7B,CAAC;gBAAC,OAAO,aAAa,EAAE,CAAC;oBACvB,iEAAiE;oBACjE,kEAAkE;oBAClE,OAAO,CAAC,IAAI,CACV,mFAAmF,OAAO,CAAC,OAAO,EAAE,EACpG,aAAa,CACd,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/web/respond.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Turn a public-artifact read into the `Response` a storefront serves. Shared
+ * by every `/web` responder and, through them, every `/next` handler, so the
+ * two entry points cannot drift on a status, a header or a body.
+ */
+import { type PublicArtifactRead } from '../core/public-artifact.js';
+export declare function notFoundResponse(): Response;
+/**
+ * The `503` for a request that failed before or during the read. The body is
+ * the error's message: what a developer wiring the route needs to see (a
+ * missing feed token, a timeout), and never a credential — nothing on this
+ * path holds one.
+ */
+export declare function failureResponse(error: unknown): Response;
+/**
+ * `ETag` is echoed on a `304` as well as a `200` (RFC 9110 §15.4.5): a cache
+ * revalidating its copy keeps the validator it is told is still current.
+ */
+export declare function publicArtifactResponse<Body extends string | ArrayBuffer>(result: PublicArtifactRead<Body>, cacheControl: string, defaultContentType: string): Response;
+//# sourceMappingURL=respond.d.ts.map

package/dist/web/respond.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"respond.d.ts","sourceRoot":"","sources":["../../src/web/respond.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAgC,KAAK,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEnG,wBAAgB,gBAAgB,IAAI,QAAQ,CAE3C;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAKxD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,SAAS,MAAM,GAAG,WAAW,EACtE,MAAM,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAChC,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,MAAM,GACzB,QAAQ,CAuBV"}

package/dist/web/respond.js

@@ -0,0 +1,52 @@
+/**
+ * Turn a public-artifact read into the `Response` a storefront serves. Shared
+ * by every `/web` responder and, through them, every `/next` handler, so the
+ * two entry points cannot drift on a status, a header or a body.
+ */
+import { ARTIFACT_RETRY_AFTER_SECONDS } from '../core/public-artifact.js';
+export function notFoundResponse() {
+    return new Response('Not found', { status: 404, headers: { 'Content-Type': 'text/plain' } });
+}
+/**
+ * The `503` for a request that failed before or during the read. The body is
+ * the error's message: what a developer wiring the route needs to see (a
+ * missing feed token, a timeout), and never a credential — nothing on this
+ * path holds one.
+ */
+export function failureResponse(error) {
+    return new Response(error instanceof Error ? error.message : 'Proxy failed', {
+        status: 503,
+        headers: { 'Content-Type': 'text/plain', 'Retry-After': String(ARTIFACT_RETRY_AFTER_SECONDS) },
+    });
+}
+/**
+ * `ETag` is echoed on a `304` as well as a `200` (RFC 9110 §15.4.5): a cache
+ * revalidating its copy keeps the validator it is told is still current.
+ */
+export function publicArtifactResponse(result, cacheControl, defaultContentType) {
+    switch (result.status) {
+        case 200: {
+            const headers = {
+                'Content-Type': result.contentType ?? defaultContentType,
+                'Cache-Control': cacheControl,
+            };
+            if (result.etag)
+                headers.ETag = result.etag;
+            return new Response(result.body, { status: 200, headers });
+        }
+        case 304: {
+            const headers = { 'Cache-Control': cacheControl };
+            if (result.etag)
+                headers.ETag = result.etag;
+            return new Response(null, { status: 304, headers });
+        }
+        case 404:
+            return notFoundResponse();
+        case 503:
+            return new Response(result.error ?? 'Upstream unavailable', {
+                status: 503,
+                headers: { 'Content-Type': 'text/plain', 'Retry-After': String(result.retryAfterSeconds) },
+            });
+    }
+}
+//# sourceMappingURL=respond.js.map

package/dist/web/respond.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"respond.js","sourceRoot":"","sources":["../../src/web/respond.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,4BAA4B,EAA2B,MAAM,4BAA4B,CAAC;AAEnG,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,IAAI,QAAQ,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE;QAC3E,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,4BAA4B,CAAC,EAAE;KAC/F,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAgC,EAChC,YAAoB,EACpB,kBAA0B;IAE1B,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,OAAO,GAA2B;gBACtC,cAAc,EAAE,MAAM,CAAC,WAAW,IAAI,kBAAkB;gBACxD,eAAe,EAAE,YAAY;aAC9B,CAAC;YACF,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAC5C,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,OAAO,GAA2B,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;YAC1E,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAC5C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,GAAG;YACN,OAAO,gBAAgB,EAAE,CAAC;QAC5B,KAAK,GAAG;YACN,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,sBAAsB,EAAE;gBAC1D,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE;aAC3F,CAAC,CAAC;IACP,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sixtyninecommerce/client",
-  "version": "0.30.0",
+  "version": "0.32.0",
   "description": "JavaScript/TypeScript client for sixtynine-commerce storefronts",
   "homepage": "https://github.com/SIXTYNINE-digital/sixtynine-commerce-engine/tree/main/packages/storefront-client#readme",
   "repository": {
@@ -31,9 +31,17 @@
       "types": "./dist/next/index.d.ts",
       "import": "./dist/next/index.js"
     },
+    "./web": {
+      "types": "./dist/web/index.d.ts",
+      "import": "./dist/web/index.js"
+    },
     "./admin": {
       "types": "./dist/admin/index.d.ts",
       "import": "./dist/admin/index.js"
+    },
+    "./types": {
+      "types": "./dist/generated/shop.d.ts",
+      "import": "./dist/generated/shop.js"
     }
   },
   "license": "MIT",
@@ -52,10 +60,16 @@
     "access": "public"
   },
   "dependencies": {
-    "@sixtyninecommerce/core": "^0.4.0"
+    "@sixtyninecommerce/core": "^0.6.0"
   },
   "devDependencies": {
+    "@graphql-codegen/add": "7.0.0",
+    "@graphql-codegen/cli": "7.0.0",
+    "@graphql-codegen/typescript": "5.0.10",
+    "@graphql-codegen/typescript-operations": "5.1.0",
     "@types/node": "22.19.7",
+    "graphql": "16.14.0",
+    "openapi-typescript": "7.13.0",
     "typescript": "5.9.3",
     "vitest": "4.1.6",
     "@sixtynine-digital/commerce-shared": "0.0.0"
@@ -64,6 +78,8 @@
     "build": "rm -rf dist && tsc -p tsconfig.build.json",
     "dev": "tsc -p tsconfig.build.json --watch",
     "typecheck": "tsc --noEmit",
+    "codegen": "graphql-codegen --config codegen.ts",
+    "codegen:check": "graphql-codegen --config codegen.ts --check",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:unit": "vitest run",