@spree/next 0.10.1 → 0.10.3

package/dist/actions/addresses.js

@@ -1,15 +1,11 @@
 "use server";
-
-// src/actions/addresses.ts
-import { revalidateTag } from "next/cache";
-
-// src/auth-helpers.ts
-import { SpreeError } from "@spree/sdk";
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 
 // src/config.ts
 import { createClient } from "@spree/sdk";
-var _client = null;
-var _config = null;
 function initSpreeNext(config) {
   _config = config;
   _client = createClient({
@@ -37,8 +33,24 @@ function getConfig() {
   }
   return _config;
 }
+var _client, _config;
+var init_config = __esm({
+  "src/config.ts"() {
+    "use strict";
+    _client = null;
+    _config = null;
+  }
+});
+
+// src/actions/addresses.ts
+import { revalidateTag } from "next/cache";
+
+// src/auth-helpers.ts
+init_config();
+import { SpreeError } from "@spree/sdk";
 
 // src/cookies.ts
+init_config();
 import { cookies } from "next/headers";
 var DEFAULT_ACCESS_TOKEN_COOKIE = "_spree_jwt";
 var CART_TOKEN_MAX_AGE = 60 * 60 * 24 * 30;
@@ -117,6 +129,7 @@ async function withAuthRefresh(fn) {
 }
 
 // src/actions/addresses.ts
+init_config();
 async function listAddresses() {
   return withAuthRefresh(async (options) => {
     return getClient().customer.addresses.list(void 0, options);

package/dist/actions/addresses.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/actions/addresses.ts","../../src/auth-helpers.ts","../../src/config.ts","../../src/cookies.ts"],"sourcesContent":["'use server';\n\nimport { revalidateTag } from 'next/cache';\nimport type { Address, AddressParams } from '@spree/sdk';\nimport { withAuthRefresh } from '../auth-helpers';\nimport { getClient } from '../config';\n\n/**\n * List the authenticated customer's addresses.\n */\nexport async function listAddresses(): Promise<{ data: Address[] }> {\n  return withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.list(undefined, options);\n  });\n}\n\n/**\n * Get a single address by ID.\n */\nexport async function getAddress(id: string): Promise<Address> {\n  return withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.get(id, options);\n  });\n}\n\n/**\n * Create a new address for the customer.\n */\nexport async function createAddress(params: AddressParams): Promise<Address> {\n  const result = await withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.create(params, options);\n  });\n  revalidateTag('addresses');\n  return result;\n}\n\n/**\n * Update an existing address.\n */\nexport async function updateAddress(\n  id: string,\n  params: Partial<AddressParams>\n): Promise<Address> {\n  const result = await withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.update(id, params, options);\n  });\n  revalidateTag('addresses');\n  return result;\n}\n\n/**\n * Delete an address.\n */\nexport async function deleteAddress(id: string): Promise<void> {\n  await withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.delete(id, options);\n  });\n  revalidateTag('addresses');\n}\n","import { SpreeError } from '@spree/sdk';\nimport type { RequestOptions } from '@spree/sdk';\nimport { getClient } from './config';\nimport { getAccessToken, setAccessToken, clearAccessToken } from './cookies';\n\n/**\n * Get auth request options from the current JWT token.\n * Proactively refreshes the token if it expires within 1 hour.\n */\nexport async function getAuthOptions(): Promise<RequestOptions> {\n  const token = await getAccessToken();\n  if (!token) {\n    return {};\n  }\n\n  // Check if token is close to expiry by decoding JWT payload\n  try {\n    const payload = JSON.parse(atob(token.split('.')[1]));\n    const exp = payload.exp;\n    const now = Math.floor(Date.now() / 1000);\n\n    // Refresh if token expires in less than 1 hour\n    if (exp && exp - now < 3600) {\n      try {\n        const refreshed = await getClient().auth.refresh({ token });\n        await setAccessToken(refreshed.token);\n        return { token: refreshed.token };\n      } catch {\n        // Refresh failed — use existing token, it might still work\n      }\n    }\n  } catch {\n    // Can't decode JWT — use it as-is, the server will reject if invalid\n  }\n\n  return { token };\n}\n\n/**\n * Execute an authenticated request with automatic token refresh on 401.\n * @param fn - Function that takes RequestOptions and returns a promise\n * @returns The result of the function\n * @throws SpreeError if auth fails after refresh attempt\n */\nexport async function withAuthRefresh<T>(\n  fn: (options: RequestOptions) => Promise<T>\n): Promise<T> {\n  const options = await getAuthOptions();\n\n  if (!options.token) {\n    throw new Error('Not authenticated');\n  }\n\n  try {\n    return await fn(options);\n  } catch (error: unknown) {\n    // If 401, try refreshing the token once\n    if (error instanceof SpreeError && error.status === 401) {\n      try {\n        const refreshed = await getClient().auth.refresh({ token: options.token });\n        await setAccessToken(refreshed.token);\n        return await fn({ token: refreshed.token });\n      } catch {\n        // Refresh failed — clear token and rethrow\n        await clearAccessToken();\n        throw error;\n      }\n    }\n    throw error;\n  }\n}\n","import { createClient, type Client } from '@spree/sdk';\nimport type { SpreeNextConfig } from './types';\n\nlet _client: Client | null = null;\nlet _config: SpreeNextConfig | null = null;\n\n/**\n * Initialize the Spree Next.js integration.\n * Call this once in your app (e.g., in `lib/storefront.ts`).\n * If not called, the client will auto-initialize from SPREE_API_URL and SPREE_PUBLISHABLE_KEY env vars.\n */\nexport function initSpreeNext(config: SpreeNextConfig): void {\n  _config = config;\n  _client = createClient({\n    baseUrl: config.baseUrl,\n    publishableKey: config.publishableKey,\n  });\n}\n\n/**\n * Get the Client instance. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getClient(): Client {\n  if (!_client) {\n    const baseUrl = process.env.SPREE_API_URL;\n    const publishableKey = process.env.SPREE_PUBLISHABLE_KEY;\n    if (baseUrl && publishableKey) {\n      initSpreeNext({ baseUrl, publishableKey });\n    } else {\n      throw new Error(\n        '@spree/next is not configured. Either call initSpreeNext() or set SPREE_API_URL and SPREE_PUBLISHABLE_KEY environment variables.'\n      );\n    }\n  }\n  return _client!;\n}\n\n/**\n * Get the current config. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getConfig(): SpreeNextConfig {\n  if (!_config) {\n    getClient(); // triggers auto-init\n  }\n  return _config!;\n}\n\n/**\n * Reset the client (useful for testing).\n * @internal\n */\nexport function resetClient(): void {\n  _client = null;\n  _config = null;\n}\n","import { cookies } from 'next/headers';\nimport { getConfig } from './config';\n\nconst DEFAULT_CART_COOKIE = '_spree_cart_token';\nconst DEFAULT_ACCESS_TOKEN_COOKIE = '_spree_jwt';\nconst CART_TOKEN_MAX_AGE = 60 * 60 * 24 * 30; // 30 days\nconst ACCESS_TOKEN_MAX_AGE = 60 * 60 * 24 * 7; // 7 days\n\nfunction getCartCookieName(): string {\n  try {\n    return getConfig().cartCookieName ?? DEFAULT_CART_COOKIE;\n  } catch {\n    return DEFAULT_CART_COOKIE;\n  }\n}\n\nfunction getCartIdCookieName(): string {\n  return `${getCartCookieName()}_id`;\n}\n\nfunction getAccessTokenCookieName(): string {\n  try {\n    return getConfig().accessTokenCookieName ?? DEFAULT_ACCESS_TOKEN_COOKIE;\n  } catch {\n    return DEFAULT_ACCESS_TOKEN_COOKIE;\n  }\n}\n\n// --- Cart Token ---\n\nexport async function getCartToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartCookieName())?.value;\n}\n\nexport async function setCartToken(token: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartCookieName(), token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: CART_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearCartToken(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Cart ID (prefixed ID stored alongside token for REST API) ---\n\nexport async function getCartId(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartIdCookieName())?.value;\n}\n\nexport async function setCartId(id: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartIdCookieName(), id, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: CART_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearCartId(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartIdCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Access Token (JWT) ---\n\nexport async function getAccessToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getAccessTokenCookieName())?.value;\n}\n\nexport async function setAccessToken(token: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: ACCESS_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearAccessToken(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Cart Options (combined cart + access tokens for cart/checkout/payment actions) ---\n\nexport async function getCartOptions(): Promise<{\n  spreeToken: string | undefined;\n  token: string | undefined;\n}> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  return { spreeToken, token };\n}\n\n// --- Cart ID (required) ---\n\nexport async function requireCartId(): Promise<string> {\n  const cartId = await getCartId();\n  if (!cartId) throw new Error('No cart found');\n  return cartId;\n}\n"],"mappings":";;;AAEA,SAAS,qBAAqB;;;ACF9B,SAAS,kBAAkB;;;ACA3B,SAAS,oBAAiC;AAG1C,IAAI,UAAyB;AAC7B,IAAI,UAAkC;AAO/B,SAAS,cAAc,QAA+B;AAC3D,YAAU;AACV,YAAU,aAAa;AAAA,IACrB,SAAS,OAAO;AAAA,IAChB,gBAAgB,OAAO;AAAA,EACzB,CAAC;AACH;AAMO,SAAS,YAAoB;AAClC,MAAI,CAAC,SAAS;AACZ,UAAM,UAAU,QAAQ,IAAI;AAC5B,UAAM,iBAAiB,QAAQ,IAAI;AACnC,QAAI,WAAW,gBAAgB;AAC7B,oBAAc,EAAE,SAAS,eAAe,CAAC;AAAA,IAC3C,OAAO;AACL,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,YAA6B;AAC3C,MAAI,CAAC,SAAS;AACZ,cAAU;AAAA,EACZ;AACA,SAAO;AACT;;;AC/CA,SAAS,eAAe;AAIxB,IAAM,8BAA8B;AACpC,IAAM,qBAAqB,KAAK,KAAK,KAAK;AAC1C,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAc5C,SAAS,2BAAmC;AAC1C,MAAI;AACF,WAAO,UAAU,EAAE,yBAAyB;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAwDA,eAAsB,iBAA8C;AAClE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,yBAAyB,CAAC,GAAG;AACtD;AAEA,eAAsB,eAAe,OAA8B;AACjE,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,GAAG,OAAO;AAAA,IACjD,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAsB,mBAAkC;AACtD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,GAAG,IAAI;AAAA,IAC9C,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;;;AF/FA,eAAsB,iBAA0C;AAC9D,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAGA,MAAI;AACF,UAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AACpD,UAAM,MAAM,QAAQ;AACpB,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAGxC,QAAI,OAAO,MAAM,MAAM,MAAM;AAC3B,UAAI;AACF,cAAM,YAAY,MAAM,UAAU,EAAE,KAAK,QAAQ,EAAE,MAAM,CAAC;AAC1D,cAAM,eAAe,UAAU,KAAK;AACpC,eAAO,EAAE,OAAO,UAAU,MAAM;AAAA,MAClC,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO,EAAE,MAAM;AACjB;AAQA,eAAsB,gBACpB,IACY;AACZ,QAAM,UAAU,MAAM,eAAe;AAErC,MAAI,CAAC,QAAQ,OAAO;AAClB,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI;AACF,WAAO,MAAM,GAAG,OAAO;AAAA,EACzB,SAAS,OAAgB;AAEvB,QAAI,iBAAiB,cAAc,MAAM,WAAW,KAAK;AACvD,UAAI;AACF,cAAM,YAAY,MAAM,UAAU,EAAE,KAAK,QAAQ,EAAE,OAAO,QAAQ,MAAM,CAAC;AACzE,cAAM,eAAe,UAAU,KAAK;AACpC,eAAO,MAAM,GAAG,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,MAC5C,QAAQ;AAEN,cAAM,iBAAiB;AACvB,cAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;;;AD5DA,eAAsB,gBAA8C;AAClE,SAAO,gBAAgB,OAAO,YAAY;AACxC,WAAO,UAAU,EAAE,SAAS,UAAU,KAAK,QAAW,OAAO;AAAA,EAC/D,CAAC;AACH;AAKA,eAAsB,WAAW,IAA8B;AAC7D,SAAO,gBAAgB,OAAO,YAAY;AACxC,WAAO,UAAU,EAAE,SAAS,UAAU,IAAI,IAAI,OAAO;AAAA,EACvD,CAAC;AACH;AAKA,eAAsB,cAAc,QAAyC;AAC3E,QAAM,SAAS,MAAM,gBAAgB,OAAO,YAAY;AACtD,WAAO,UAAU,EAAE,SAAS,UAAU,OAAO,QAAQ,OAAO;AAAA,EAC9D,CAAC;AACD,gBAAc,WAAW;AACzB,SAAO;AACT;AAKA,eAAsB,cACpB,IACA,QACkB;AAClB,QAAM,SAAS,MAAM,gBAAgB,OAAO,YAAY;AACtD,WAAO,UAAU,EAAE,SAAS,UAAU,OAAO,IAAI,QAAQ,OAAO;AAAA,EAClE,CAAC;AACD,gBAAc,WAAW;AACzB,SAAO;AACT;AAKA,eAAsB,cAAc,IAA2B;AAC7D,QAAM,gBAAgB,OAAO,YAAY;AACvC,WAAO,UAAU,EAAE,SAAS,UAAU,OAAO,IAAI,OAAO;AAAA,EAC1D,CAAC;AACD,gBAAc,WAAW;AAC3B;","names":[]}
+{"version":3,"sources":["../../src/config.ts","../../src/actions/addresses.ts","../../src/auth-helpers.ts","../../src/cookies.ts"],"sourcesContent":["import { createClient, type Client } from '@spree/sdk';\nimport type { SpreeNextConfig } from './types';\n\nlet _client: Client | null = null;\nlet _config: SpreeNextConfig | null = null;\n\n/**\n * Initialize the Spree Next.js integration.\n * Call this once in your app (e.g., in `lib/storefront.ts`).\n * If not called, the client will auto-initialize from SPREE_API_URL and SPREE_PUBLISHABLE_KEY env vars.\n */\nexport function initSpreeNext(config: SpreeNextConfig): void {\n  _config = config;\n  _client = createClient({\n    baseUrl: config.baseUrl,\n    publishableKey: config.publishableKey,\n  });\n}\n\n/**\n * Get the Client instance. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getClient(): Client {\n  if (!_client) {\n    const baseUrl = process.env.SPREE_API_URL;\n    const publishableKey = process.env.SPREE_PUBLISHABLE_KEY;\n    if (baseUrl && publishableKey) {\n      initSpreeNext({ baseUrl, publishableKey });\n    } else {\n      throw new Error(\n        '@spree/next is not configured. Either call initSpreeNext() or set SPREE_API_URL and SPREE_PUBLISHABLE_KEY environment variables.'\n      );\n    }\n  }\n  return _client!;\n}\n\n/**\n * Get the current config. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getConfig(): SpreeNextConfig {\n  if (!_config) {\n    getClient(); // triggers auto-init\n  }\n  return _config!;\n}\n\n/**\n * Reset the client (useful for testing).\n * @internal\n */\nexport function resetClient(): void {\n  _client = null;\n  _config = null;\n}\n","'use server';\n\nimport { revalidateTag } from 'next/cache';\nimport type { Address, AddressParams } from '@spree/sdk';\nimport { withAuthRefresh } from '../auth-helpers';\nimport { getClient } from '../config';\n\n/**\n * List the authenticated customer's addresses.\n */\nexport async function listAddresses(): Promise<{ data: Address[] }> {\n  return withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.list(undefined, options);\n  });\n}\n\n/**\n * Get a single address by ID.\n */\nexport async function getAddress(id: string): Promise<Address> {\n  return withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.get(id, options);\n  });\n}\n\n/**\n * Create a new address for the customer.\n */\nexport async function createAddress(params: AddressParams): Promise<Address> {\n  const result = await withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.create(params, options);\n  });\n  revalidateTag('addresses');\n  return result;\n}\n\n/**\n * Update an existing address.\n */\nexport async function updateAddress(\n  id: string,\n  params: Partial<AddressParams>\n): Promise<Address> {\n  const result = await withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.update(id, params, options);\n  });\n  revalidateTag('addresses');\n  return result;\n}\n\n/**\n * Delete an address.\n */\nexport async function deleteAddress(id: string): Promise<void> {\n  await withAuthRefresh(async (options) => {\n    return getClient().customer.addresses.delete(id, options);\n  });\n  revalidateTag('addresses');\n}\n","import { SpreeError } from '@spree/sdk';\nimport type { RequestOptions } from '@spree/sdk';\nimport { getClient } from './config';\nimport { getAccessToken, setAccessToken, clearAccessToken } from './cookies';\n\n/**\n * Get auth request options from the current JWT token.\n * Proactively refreshes the token if it expires within 1 hour.\n */\nexport async function getAuthOptions(): Promise<RequestOptions> {\n  const token = await getAccessToken();\n  if (!token) {\n    return {};\n  }\n\n  // Check if token is close to expiry by decoding JWT payload\n  try {\n    const payload = JSON.parse(atob(token.split('.')[1]));\n    const exp = payload.exp;\n    const now = Math.floor(Date.now() / 1000);\n\n    // Refresh if token expires in less than 1 hour\n    if (exp && exp - now < 3600) {\n      try {\n        const refreshed = await getClient().auth.refresh({ token });\n        await setAccessToken(refreshed.token);\n        return { token: refreshed.token };\n      } catch {\n        // Refresh failed — use existing token, it might still work\n      }\n    }\n  } catch {\n    // Can't decode JWT — use it as-is, the server will reject if invalid\n  }\n\n  return { token };\n}\n\n/**\n * Execute an authenticated request with automatic token refresh on 401.\n * @param fn - Function that takes RequestOptions and returns a promise\n * @returns The result of the function\n * @throws SpreeError if auth fails after refresh attempt\n */\nexport async function withAuthRefresh<T>(\n  fn: (options: RequestOptions) => Promise<T>\n): Promise<T> {\n  const options = await getAuthOptions();\n\n  if (!options.token) {\n    throw new Error('Not authenticated');\n  }\n\n  try {\n    return await fn(options);\n  } catch (error: unknown) {\n    // If 401, try refreshing the token once\n    if (error instanceof SpreeError && error.status === 401) {\n      try {\n        const refreshed = await getClient().auth.refresh({ token: options.token });\n        await setAccessToken(refreshed.token);\n        return await fn({ token: refreshed.token });\n      } catch {\n        // Refresh failed — clear token and rethrow\n        await clearAccessToken();\n        throw error;\n      }\n    }\n    throw error;\n  }\n}\n","import { cookies } from 'next/headers';\nimport { getConfig } from './config';\n\nconst DEFAULT_CART_COOKIE = '_spree_cart_token';\nconst DEFAULT_ACCESS_TOKEN_COOKIE = '_spree_jwt';\nconst CART_TOKEN_MAX_AGE = 60 * 60 * 24 * 30; // 30 days\nconst ACCESS_TOKEN_MAX_AGE = 60 * 60 * 24 * 7; // 7 days\n\nfunction getCartCookieName(): string {\n  try {\n    return getConfig().cartCookieName ?? DEFAULT_CART_COOKIE;\n  } catch {\n    return DEFAULT_CART_COOKIE;\n  }\n}\n\nfunction getCartIdCookieName(): string {\n  return `${getCartCookieName()}_id`;\n}\n\nfunction getAccessTokenCookieName(): string {\n  try {\n    return getConfig().accessTokenCookieName ?? DEFAULT_ACCESS_TOKEN_COOKIE;\n  } catch {\n    return DEFAULT_ACCESS_TOKEN_COOKIE;\n  }\n}\n\n// --- Cart Cookies (token + ID always managed together) ---\n\nexport async function getCartToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartCookieName())?.value;\n}\n\nexport async function getCartId(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartIdCookieName())?.value;\n}\n\nexport async function setCartCookies(id: string, token?: string): Promise<void> {\n  const cookieStore = await cookies();\n  const opts = {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax' as const,\n    path: '/',\n    maxAge: CART_TOKEN_MAX_AGE,\n  };\n\n  cookieStore.set(getCartIdCookieName(), id, opts);\n  if (token) {\n    cookieStore.set(getCartCookieName(), token, opts);\n  }\n}\n\nexport async function clearCartCookies(): Promise<void> {\n  const cookieStore = await cookies();\n  const opts = { maxAge: -1, path: '/' };\n  cookieStore.set(getCartCookieName(), '', opts);\n  cookieStore.set(getCartIdCookieName(), '', opts);\n}\n\n// --- Access Token (JWT) ---\n\nexport async function getAccessToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getAccessTokenCookieName())?.value;\n}\n\nexport async function setAccessToken(token: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: ACCESS_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearAccessToken(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Cart Options (combined cart + access tokens for cart/checkout/payment actions) ---\n\nexport async function getCartOptions(): Promise<{\n  spreeToken: string | undefined;\n  token: string | undefined;\n}> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  return { spreeToken, token };\n}\n\n// --- Cart ID (required) ---\n\nexport async function requireCartId(): Promise<string> {\n  const cartId = await getCartId();\n  if (cartId) return cartId;\n\n  // Authenticated user without cart ID cookie — resolve via carts.list()\n  const token = await getAccessToken();\n  if (token) {\n    const { getClient } = await import('./config');\n    const response = await getClient().carts.list({ token });\n    if (response.data.length > 0) {\n      const cart = response.data[0];\n      await setCartCookies(cart.id, cart.token);\n      return cart.id;\n    }\n  }\n\n  throw new Error('No cart found');\n}\n"],"mappings":";;;;;;;AAAA,SAAS,oBAAiC;AAWnC,SAAS,cAAc,QAA+B;AAC3D,YAAU;AACV,YAAU,aAAa;AAAA,IACrB,SAAS,OAAO;AAAA,IAChB,gBAAgB,OAAO;AAAA,EACzB,CAAC;AACH;AAMO,SAAS,YAAoB;AAClC,MAAI,CAAC,SAAS;AACZ,UAAM,UAAU,QAAQ,IAAI;AAC5B,UAAM,iBAAiB,QAAQ,IAAI;AACnC,QAAI,WAAW,gBAAgB;AAC7B,oBAAc,EAAE,SAAS,eAAe,CAAC;AAAA,IAC3C,OAAO;AACL,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,YAA6B;AAC3C,MAAI,CAAC,SAAS;AACZ,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AA/CA,IAGI,SACA;AAJJ;AAAA;AAAA;AAGA,IAAI,UAAyB;AAC7B,IAAI,UAAkC;AAAA;AAAA;;;ACFtC,SAAS,qBAAqB;;;ACA9B;AAFA,SAAS,kBAAkB;;;ACC3B;AADA,SAAS,eAAe;AAIxB,IAAM,8BAA8B;AACpC,IAAM,qBAAqB,KAAK,KAAK,KAAK;AAC1C,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAc5C,SAAS,2BAAmC;AAC1C,MAAI;AACF,WAAO,UAAU,EAAE,yBAAyB;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAuCA,eAAsB,iBAA8C;AAClE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,yBAAyB,CAAC,GAAG;AACtD;AAEA,eAAsB,eAAe,OAA8B;AACjE,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,GAAG,OAAO;AAAA,IACjD,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAsB,mBAAkC;AACtD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,GAAG,IAAI;AAAA,IAC9C,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;;;AD9EA,eAAsB,iBAA0C;AAC9D,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAGA,MAAI;AACF,UAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AACpD,UAAM,MAAM,QAAQ;AACpB,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAGxC,QAAI,OAAO,MAAM,MAAM,MAAM;AAC3B,UAAI;AACF,cAAM,YAAY,MAAM,UAAU,EAAE,KAAK,QAAQ,EAAE,MAAM,CAAC;AAC1D,cAAM,eAAe,UAAU,KAAK;AACpC,eAAO,EAAE,OAAO,UAAU,MAAM;AAAA,MAClC,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO,EAAE,MAAM;AACjB;AAQA,eAAsB,gBACpB,IACY;AACZ,QAAM,UAAU,MAAM,eAAe;AAErC,MAAI,CAAC,QAAQ,OAAO;AAClB,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI;AACF,WAAO,MAAM,GAAG,OAAO;AAAA,EACzB,SAAS,OAAgB;AAEvB,QAAI,iBAAiB,cAAc,MAAM,WAAW,KAAK;AACvD,UAAI;AACF,cAAM,YAAY,MAAM,UAAU,EAAE,KAAK,QAAQ,EAAE,OAAO,QAAQ,MAAM,CAAC;AACzE,cAAM,eAAe,UAAU,KAAK;AACpC,eAAO,MAAM,GAAG,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,MAC5C,QAAQ;AAEN,cAAM,iBAAiB;AACvB,cAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;;;ADjEA;AAKA,eAAsB,gBAA8C;AAClE,SAAO,gBAAgB,OAAO,YAAY;AACxC,WAAO,UAAU,EAAE,SAAS,UAAU,KAAK,QAAW,OAAO;AAAA,EAC/D,CAAC;AACH;AAKA,eAAsB,WAAW,IAA8B;AAC7D,SAAO,gBAAgB,OAAO,YAAY;AACxC,WAAO,UAAU,EAAE,SAAS,UAAU,IAAI,IAAI,OAAO;AAAA,EACvD,CAAC;AACH;AAKA,eAAsB,cAAc,QAAyC;AAC3E,QAAM,SAAS,MAAM,gBAAgB,OAAO,YAAY;AACtD,WAAO,UAAU,EAAE,SAAS,UAAU,OAAO,QAAQ,OAAO;AAAA,EAC9D,CAAC;AACD,gBAAc,WAAW;AACzB,SAAO;AACT;AAKA,eAAsB,cACpB,IACA,QACkB;AAClB,QAAM,SAAS,MAAM,gBAAgB,OAAO,YAAY;AACtD,WAAO,UAAU,EAAE,SAAS,UAAU,OAAO,IAAI,QAAQ,OAAO;AAAA,EAClE,CAAC;AACD,gBAAc,WAAW;AACzB,SAAO;AACT;AAKA,eAAsB,cAAc,IAA2B;AAC7D,QAAM,gBAAgB,OAAO,YAAY;AACvC,WAAO,UAAU,EAAE,SAAS,UAAU,OAAO,IAAI,OAAO;AAAA,EAC1D,CAAC;AACD,gBAAc,WAAW;AAC3B;","names":[]}

package/dist/actions/auth.d.ts

@@ -39,6 +39,8 @@ declare function register(params: {
 }>;
 /**
  * Logout the current user.
+ * Clears all auth and cart cookies to prevent the next guest session
+ * from seeing/modifying the previous user's cart.
  */
 declare function logout(): Promise<void>;
 /**

package/dist/actions/auth.js

@@ -1,12 +1,11 @@
 "use server";
-
-// src/actions/auth.ts
-import { revalidateTag } from "next/cache";
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 
 // src/config.ts
 import { createClient } from "@spree/sdk";
-var _client = null;
-var _config = null;
 function initSpreeNext(config) {
   _config = config;
   _client = createClient({
@@ -34,8 +33,21 @@ function getConfig() {
   }
   return _config;
 }
+var _client, _config;
+var init_config = __esm({
+  "src/config.ts"() {
+    "use strict";
+    _client = null;
+    _config = null;
+  }
+});
+
+// src/actions/auth.ts
+init_config();
+import { revalidateTag } from "next/cache";
 
 // src/cookies.ts
+init_config();
 import { cookies } from "next/headers";
 var DEFAULT_CART_COOKIE = "_spree_cart_token";
 var DEFAULT_ACCESS_TOKEN_COOKIE = "_spree_jwt";
@@ -66,6 +78,12 @@ async function getCartId() {
   const cookieStore = await cookies();
   return cookieStore.get(getCartIdCookieName())?.value;
 }
+async function clearCartCookies() {
+  const cookieStore = await cookies();
+  const opts = { maxAge: -1, path: "/" };
+  cookieStore.set(getCartCookieName(), "", opts);
+  cookieStore.set(getCartIdCookieName(), "", opts);
+}
 async function getAccessToken() {
   const cookieStore = await cookies();
   return cookieStore.get(getAccessTokenCookieName())?.value;
@@ -89,6 +107,7 @@ async function clearAccessToken() {
 }
 
 // src/auth-helpers.ts
+init_config();
 import { SpreeError } from "@spree/sdk";
 async function getAuthOptions() {
   const token = await getAccessToken();
@@ -186,6 +205,7 @@ async function register(params) {
 }
 async function logout() {
   await clearAccessToken();
+  await clearCartCookies();
   revalidateTag("customer");
   revalidateTag("cart");
   revalidateTag("addresses");

package/dist/actions/auth.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/actions/auth.ts","../../src/config.ts","../../src/cookies.ts","../../src/auth-helpers.ts"],"sourcesContent":["'use server';\n\nimport { revalidateTag } from 'next/cache';\nimport type { Customer } from '@spree/sdk';\nimport { getClient } from '../config';\nimport { setAccessToken, clearAccessToken, getAccessToken, getCartToken, getCartId } from '../cookies';\nimport { withAuthRefresh } from '../auth-helpers';\n\n/**\n * Login with email and password.\n * Automatically associates any guest cart with the authenticated user.\n */\nexport async function login(\n  email: string,\n  password: string\n): Promise<{ success: boolean; user?: { id: string; email: string; first_name?: string | null; last_name?: string | null }; error?: string }> {\n  try {\n    const result = await getClient().auth.login({ email, password });\n    await setAccessToken(result.token);\n\n    // Associate guest cart if one exists\n    const cartToken = await getCartToken();\n    const cartId = await getCartId();\n    if (cartToken && cartId) {\n      try {\n        await getClient().carts.associate(cartId, {\n          token: result.token,\n          spreeToken: cartToken,\n        });\n      } catch {\n        // Cart association failure is non-fatal\n      }\n    }\n\n    revalidateTag('customer');\n    revalidateTag('cart');\n    return { success: true, user: result.user };\n  } catch (error) {\n    return {\n      success: false,\n      error: error instanceof Error ? error.message : 'Invalid email or password',\n    };\n  }\n}\n\n/**\n * Register a new customer account.\n * Automatically associates any guest cart with the new account.\n */\nexport async function register(\n  params: {\n    email: string;\n    password: string;\n    password_confirmation: string;\n    first_name?: string;\n    last_name?: string;\n    phone?: string;\n    accepts_email_marketing?: boolean;\n    metadata?: Record<string, unknown>;\n  }\n): Promise<{ success: boolean; user?: { id: string; email: string; first_name?: string | null; last_name?: string | null }; error?: string }> {\n  try {\n    const result = await getClient().customers.create(params);\n    await setAccessToken(result.token);\n\n    // Associate guest cart\n    const cartToken = await getCartToken();\n    const cartId = await getCartId();\n    if (cartToken && cartId) {\n      try {\n        await getClient().carts.associate(cartId, {\n          token: result.token,\n          spreeToken: cartToken,\n        });\n      } catch {\n        // Non-fatal\n      }\n    }\n\n    revalidateTag('customer');\n    revalidateTag('cart');\n    return { success: true, user: result.user };\n  } catch (error) {\n    return {\n      success: false,\n      error: error instanceof Error ? error.message : 'Registration failed',\n    };\n  }\n}\n\n/**\n * Logout the current user.\n */\nexport async function logout(): Promise<void> {\n  await clearAccessToken();\n  revalidateTag('customer');\n  revalidateTag('cart');\n  revalidateTag('addresses');\n  revalidateTag('credit-cards');\n}\n\n/**\n * Get the currently authenticated customer. Returns null if not logged in.\n */\nexport async function getCustomer(): Promise<Customer | null> {\n  const token = await getAccessToken();\n  if (!token) return null;\n\n  try {\n    return await withAuthRefresh(async (options) => {\n      return getClient().customer.get(options);\n    });\n  } catch {\n    await clearAccessToken();\n    return null;\n  }\n}\n\n/**\n * Update the current customer's profile.\n */\nexport async function updateCustomer(\n  data: {\n    first_name?: string;\n    last_name?: string;\n    email?: string;\n    password?: string;\n    password_confirmation?: string;\n    /** Required when changing email or password */\n    current_password?: string;\n    phone?: string;\n    accepts_email_marketing?: boolean;\n    metadata?: Record<string, unknown>;\n  }\n): Promise<Customer> {\n  const result = await withAuthRefresh(async (options) => {\n    return getClient().customer.update(data, options);\n  });\n  revalidateTag('customer');\n  return result;\n}\n","import { createClient, type Client } from '@spree/sdk';\nimport type { SpreeNextConfig } from './types';\n\nlet _client: Client | null = null;\nlet _config: SpreeNextConfig | null = null;\n\n/**\n * Initialize the Spree Next.js integration.\n * Call this once in your app (e.g., in `lib/storefront.ts`).\n * If not called, the client will auto-initialize from SPREE_API_URL and SPREE_PUBLISHABLE_KEY env vars.\n */\nexport function initSpreeNext(config: SpreeNextConfig): void {\n  _config = config;\n  _client = createClient({\n    baseUrl: config.baseUrl,\n    publishableKey: config.publishableKey,\n  });\n}\n\n/**\n * Get the Client instance. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getClient(): Client {\n  if (!_client) {\n    const baseUrl = process.env.SPREE_API_URL;\n    const publishableKey = process.env.SPREE_PUBLISHABLE_KEY;\n    if (baseUrl && publishableKey) {\n      initSpreeNext({ baseUrl, publishableKey });\n    } else {\n      throw new Error(\n        '@spree/next is not configured. Either call initSpreeNext() or set SPREE_API_URL and SPREE_PUBLISHABLE_KEY environment variables.'\n      );\n    }\n  }\n  return _client!;\n}\n\n/**\n * Get the current config. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getConfig(): SpreeNextConfig {\n  if (!_config) {\n    getClient(); // triggers auto-init\n  }\n  return _config!;\n}\n\n/**\n * Reset the client (useful for testing).\n * @internal\n */\nexport function resetClient(): void {\n  _client = null;\n  _config = null;\n}\n","import { cookies } from 'next/headers';\nimport { getConfig } from './config';\n\nconst DEFAULT_CART_COOKIE = '_spree_cart_token';\nconst DEFAULT_ACCESS_TOKEN_COOKIE = '_spree_jwt';\nconst CART_TOKEN_MAX_AGE = 60 * 60 * 24 * 30; // 30 days\nconst ACCESS_TOKEN_MAX_AGE = 60 * 60 * 24 * 7; // 7 days\n\nfunction getCartCookieName(): string {\n  try {\n    return getConfig().cartCookieName ?? DEFAULT_CART_COOKIE;\n  } catch {\n    return DEFAULT_CART_COOKIE;\n  }\n}\n\nfunction getCartIdCookieName(): string {\n  return `${getCartCookieName()}_id`;\n}\n\nfunction getAccessTokenCookieName(): string {\n  try {\n    return getConfig().accessTokenCookieName ?? DEFAULT_ACCESS_TOKEN_COOKIE;\n  } catch {\n    return DEFAULT_ACCESS_TOKEN_COOKIE;\n  }\n}\n\n// --- Cart Token ---\n\nexport async function getCartToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartCookieName())?.value;\n}\n\nexport async function setCartToken(token: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartCookieName(), token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: CART_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearCartToken(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Cart ID (prefixed ID stored alongside token for REST API) ---\n\nexport async function getCartId(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartIdCookieName())?.value;\n}\n\nexport async function setCartId(id: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartIdCookieName(), id, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: CART_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearCartId(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartIdCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Access Token (JWT) ---\n\nexport async function getAccessToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getAccessTokenCookieName())?.value;\n}\n\nexport async function setAccessToken(token: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: ACCESS_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearAccessToken(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Cart Options (combined cart + access tokens for cart/checkout/payment actions) ---\n\nexport async function getCartOptions(): Promise<{\n  spreeToken: string | undefined;\n  token: string | undefined;\n}> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  return { spreeToken, token };\n}\n\n// --- Cart ID (required) ---\n\nexport async function requireCartId(): Promise<string> {\n  const cartId = await getCartId();\n  if (!cartId) throw new Error('No cart found');\n  return cartId;\n}\n","import { SpreeError } from '@spree/sdk';\nimport type { RequestOptions } from '@spree/sdk';\nimport { getClient } from './config';\nimport { getAccessToken, setAccessToken, clearAccessToken } from './cookies';\n\n/**\n * Get auth request options from the current JWT token.\n * Proactively refreshes the token if it expires within 1 hour.\n */\nexport async function getAuthOptions(): Promise<RequestOptions> {\n  const token = await getAccessToken();\n  if (!token) {\n    return {};\n  }\n\n  // Check if token is close to expiry by decoding JWT payload\n  try {\n    const payload = JSON.parse(atob(token.split('.')[1]));\n    const exp = payload.exp;\n    const now = Math.floor(Date.now() / 1000);\n\n    // Refresh if token expires in less than 1 hour\n    if (exp && exp - now < 3600) {\n      try {\n        const refreshed = await getClient().auth.refresh({ token });\n        await setAccessToken(refreshed.token);\n        return { token: refreshed.token };\n      } catch {\n        // Refresh failed — use existing token, it might still work\n      }\n    }\n  } catch {\n    // Can't decode JWT — use it as-is, the server will reject if invalid\n  }\n\n  return { token };\n}\n\n/**\n * Execute an authenticated request with automatic token refresh on 401.\n * @param fn - Function that takes RequestOptions and returns a promise\n * @returns The result of the function\n * @throws SpreeError if auth fails after refresh attempt\n */\nexport async function withAuthRefresh<T>(\n  fn: (options: RequestOptions) => Promise<T>\n): Promise<T> {\n  const options = await getAuthOptions();\n\n  if (!options.token) {\n    throw new Error('Not authenticated');\n  }\n\n  try {\n    return await fn(options);\n  } catch (error: unknown) {\n    // If 401, try refreshing the token once\n    if (error instanceof SpreeError && error.status === 401) {\n      try {\n        const refreshed = await getClient().auth.refresh({ token: options.token });\n        await setAccessToken(refreshed.token);\n        return await fn({ token: refreshed.token });\n      } catch {\n        // Refresh failed — clear token and rethrow\n        await clearAccessToken();\n        throw error;\n      }\n    }\n    throw error;\n  }\n}\n"],"mappings":";;;AAEA,SAAS,qBAAqB;;;ACF9B,SAAS,oBAAiC;AAG1C,IAAI,UAAyB;AAC7B,IAAI,UAAkC;AAO/B,SAAS,cAAc,QAA+B;AAC3D,YAAU;AACV,YAAU,aAAa;AAAA,IACrB,SAAS,OAAO;AAAA,IAChB,gBAAgB,OAAO;AAAA,EACzB,CAAC;AACH;AAMO,SAAS,YAAoB;AAClC,MAAI,CAAC,SAAS;AACZ,UAAM,UAAU,QAAQ,IAAI;AAC5B,UAAM,iBAAiB,QAAQ,IAAI;AACnC,QAAI,WAAW,gBAAgB;AAC7B,oBAAc,EAAE,SAAS,eAAe,CAAC;AAAA,IAC3C,OAAO;AACL,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,YAA6B;AAC3C,MAAI,CAAC,SAAS;AACZ,cAAU;AAAA,EACZ;AACA,SAAO;AACT;;;AC/CA,SAAS,eAAe;AAGxB,IAAM,sBAAsB;AAC5B,IAAM,8BAA8B;AACpC,IAAM,qBAAqB,KAAK,KAAK,KAAK;AAC1C,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,SAAS,oBAA4B;AACnC,MAAI;AACF,WAAO,UAAU,EAAE,kBAAkB;AAAA,EACvC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAA8B;AACrC,SAAO,GAAG,kBAAkB,CAAC;AAC/B;AAEA,SAAS,2BAAmC;AAC1C,MAAI;AACF,WAAO,UAAU,EAAE,yBAAyB;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,eAA4C;AAChE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,kBAAkB,CAAC,GAAG;AAC/C;AAuBA,eAAsB,YAAyC;AAC7D,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,oBAAoB,CAAC,GAAG;AACjD;AAuBA,eAAsB,iBAA8C;AAClE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,yBAAyB,CAAC,GAAG;AACtD;AAEA,eAAsB,eAAe,OAA8B;AACjE,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,GAAG,OAAO;AAAA,IACjD,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAsB,mBAAkC;AACtD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,GAAG,IAAI;AAAA,IAC9C,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;;;ACxGA,SAAS,kBAAkB;AAS3B,eAAsB,iBAA0C;AAC9D,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAGA,MAAI;AACF,UAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AACpD,UAAM,MAAM,QAAQ;AACpB,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAGxC,QAAI,OAAO,MAAM,MAAM,MAAM;AAC3B,UAAI;AACF,cAAM,YAAY,MAAM,UAAU,EAAE,KAAK,QAAQ,EAAE,MAAM,CAAC;AAC1D,cAAM,eAAe,UAAU,KAAK;AACpC,eAAO,EAAE,OAAO,UAAU,MAAM;AAAA,MAClC,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO,EAAE,MAAM;AACjB;AAQA,eAAsB,gBACpB,IACY;AACZ,QAAM,UAAU,MAAM,eAAe;AAErC,MAAI,CAAC,QAAQ,OAAO;AAClB,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI;AACF,WAAO,MAAM,GAAG,OAAO;AAAA,EACzB,SAAS,OAAgB;AAEvB,QAAI,iBAAiB,cAAc,MAAM,WAAW,KAAK;AACvD,UAAI;AACF,cAAM,YAAY,MAAM,UAAU,EAAE,KAAK,QAAQ,EAAE,OAAO,QAAQ,MAAM,CAAC;AACzE,cAAM,eAAe,UAAU,KAAK;AACpC,eAAO,MAAM,GAAG,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,MAC5C,QAAQ;AAEN,cAAM,iBAAiB;AACvB,cAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;;;AH1DA,eAAsB,MACpB,OACA,UAC4I;AAC5I,MAAI;AACF,UAAM,SAAS,MAAM,UAAU,EAAE,KAAK,MAAM,EAAE,OAAO,SAAS,CAAC;AAC/D,UAAM,eAAe,OAAO,KAAK;AAGjC,UAAM,YAAY,MAAM,aAAa;AACrC,UAAM,SAAS,MAAM,UAAU;AAC/B,QAAI,aAAa,QAAQ;AACvB,UAAI;AACF,cAAM,UAAU,EAAE,MAAM,UAAU,QAAQ;AAAA,UACxC,OAAO,OAAO;AAAA,UACd,YAAY;AAAA,QACd,CAAC;AAAA,MACH,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,kBAAc,UAAU;AACxB,kBAAc,MAAM;AACpB,WAAO,EAAE,SAAS,MAAM,MAAM,OAAO,KAAK;AAAA,EAC5C,SAAS,OAAO;AACd,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD;AAAA,EACF;AACF;AAMA,eAAsB,SACpB,QAU4I;AAC5I,MAAI;AACF,UAAM,SAAS,MAAM,UAAU,EAAE,UAAU,OAAO,MAAM;AACxD,UAAM,eAAe,OAAO,KAAK;AAGjC,UAAM,YAAY,MAAM,aAAa;AACrC,UAAM,SAAS,MAAM,UAAU;AAC/B,QAAI,aAAa,QAAQ;AACvB,UAAI;AACF,cAAM,UAAU,EAAE,MAAM,UAAU,QAAQ;AAAA,UACxC,OAAO,OAAO;AAAA,UACd,YAAY;AAAA,QACd,CAAC;AAAA,MACH,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,kBAAc,UAAU;AACxB,kBAAc,MAAM;AACpB,WAAO,EAAE,SAAS,MAAM,MAAM,OAAO,KAAK;AAAA,EAC5C,SAAS,OAAO;AACd,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD;AAAA,EACF;AACF;AAKA,eAAsB,SAAwB;AAC5C,QAAM,iBAAiB;AACvB,gBAAc,UAAU;AACxB,gBAAc,MAAM;AACpB,gBAAc,WAAW;AACzB,gBAAc,cAAc;AAC9B;AAKA,eAAsB,cAAwC;AAC5D,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,MAAO,QAAO;AAEnB,MAAI;AACF,WAAO,MAAM,gBAAgB,OAAO,YAAY;AAC9C,aAAO,UAAU,EAAE,SAAS,IAAI,OAAO;AAAA,IACzC,CAAC;AAAA,EACH,QAAQ;AACN,UAAM,iBAAiB;AACvB,WAAO;AAAA,EACT;AACF;AAKA,eAAsB,eACpB,MAYmB;AACnB,QAAM,SAAS,MAAM,gBAAgB,OAAO,YAAY;AACtD,WAAO,UAAU,EAAE,SAAS,OAAO,MAAM,OAAO;AAAA,EAClD,CAAC;AACD,gBAAc,UAAU;AACxB,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/config.ts","../../src/actions/auth.ts","../../src/cookies.ts","../../src/auth-helpers.ts"],"sourcesContent":["import { createClient, type Client } from '@spree/sdk';\nimport type { SpreeNextConfig } from './types';\n\nlet _client: Client | null = null;\nlet _config: SpreeNextConfig | null = null;\n\n/**\n * Initialize the Spree Next.js integration.\n * Call this once in your app (e.g., in `lib/storefront.ts`).\n * If not called, the client will auto-initialize from SPREE_API_URL and SPREE_PUBLISHABLE_KEY env vars.\n */\nexport function initSpreeNext(config: SpreeNextConfig): void {\n  _config = config;\n  _client = createClient({\n    baseUrl: config.baseUrl,\n    publishableKey: config.publishableKey,\n  });\n}\n\n/**\n * Get the Client instance. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getClient(): Client {\n  if (!_client) {\n    const baseUrl = process.env.SPREE_API_URL;\n    const publishableKey = process.env.SPREE_PUBLISHABLE_KEY;\n    if (baseUrl && publishableKey) {\n      initSpreeNext({ baseUrl, publishableKey });\n    } else {\n      throw new Error(\n        '@spree/next is not configured. Either call initSpreeNext() or set SPREE_API_URL and SPREE_PUBLISHABLE_KEY environment variables.'\n      );\n    }\n  }\n  return _client!;\n}\n\n/**\n * Get the current config. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getConfig(): SpreeNextConfig {\n  if (!_config) {\n    getClient(); // triggers auto-init\n  }\n  return _config!;\n}\n\n/**\n * Reset the client (useful for testing).\n * @internal\n */\nexport function resetClient(): void {\n  _client = null;\n  _config = null;\n}\n","'use server';\n\nimport { revalidateTag } from 'next/cache';\nimport type { Customer } from '@spree/sdk';\nimport { getClient } from '../config';\nimport { setAccessToken, clearAccessToken, getAccessToken, getCartToken, getCartId, clearCartCookies } from '../cookies';\nimport { withAuthRefresh } from '../auth-helpers';\n\n/**\n * Login with email and password.\n * Automatically associates any guest cart with the authenticated user.\n */\nexport async function login(\n  email: string,\n  password: string\n): Promise<{ success: boolean; user?: { id: string; email: string; first_name?: string | null; last_name?: string | null }; error?: string }> {\n  try {\n    const result = await getClient().auth.login({ email, password });\n    await setAccessToken(result.token);\n\n    // Associate guest cart if one exists\n    const cartToken = await getCartToken();\n    const cartId = await getCartId();\n    if (cartToken && cartId) {\n      try {\n        await getClient().carts.associate(cartId, {\n          token: result.token,\n          spreeToken: cartToken,\n        });\n      } catch {\n        // Cart association failure is non-fatal\n      }\n    }\n\n    revalidateTag('customer');\n    revalidateTag('cart');\n    return { success: true, user: result.user };\n  } catch (error) {\n    return {\n      success: false,\n      error: error instanceof Error ? error.message : 'Invalid email or password',\n    };\n  }\n}\n\n/**\n * Register a new customer account.\n * Automatically associates any guest cart with the new account.\n */\nexport async function register(\n  params: {\n    email: string;\n    password: string;\n    password_confirmation: string;\n    first_name?: string;\n    last_name?: string;\n    phone?: string;\n    accepts_email_marketing?: boolean;\n    metadata?: Record<string, unknown>;\n  }\n): Promise<{ success: boolean; user?: { id: string; email: string; first_name?: string | null; last_name?: string | null }; error?: string }> {\n  try {\n    const result = await getClient().customers.create(params);\n    await setAccessToken(result.token);\n\n    // Associate guest cart\n    const cartToken = await getCartToken();\n    const cartId = await getCartId();\n    if (cartToken && cartId) {\n      try {\n        await getClient().carts.associate(cartId, {\n          token: result.token,\n          spreeToken: cartToken,\n        });\n      } catch {\n        // Non-fatal\n      }\n    }\n\n    revalidateTag('customer');\n    revalidateTag('cart');\n    return { success: true, user: result.user };\n  } catch (error) {\n    return {\n      success: false,\n      error: error instanceof Error ? error.message : 'Registration failed',\n    };\n  }\n}\n\n/**\n * Logout the current user.\n * Clears all auth and cart cookies to prevent the next guest session\n * from seeing/modifying the previous user's cart.\n */\nexport async function logout(): Promise<void> {\n  await clearAccessToken();\n  await clearCartCookies();\n  revalidateTag('customer');\n  revalidateTag('cart');\n  revalidateTag('addresses');\n  revalidateTag('credit-cards');\n}\n\n/**\n * Get the currently authenticated customer. Returns null if not logged in.\n */\nexport async function getCustomer(): Promise<Customer | null> {\n  const token = await getAccessToken();\n  if (!token) return null;\n\n  try {\n    return await withAuthRefresh(async (options) => {\n      return getClient().customer.get(options);\n    });\n  } catch {\n    await clearAccessToken();\n    return null;\n  }\n}\n\n/**\n * Update the current customer's profile.\n */\nexport async function updateCustomer(\n  data: {\n    first_name?: string;\n    last_name?: string;\n    email?: string;\n    password?: string;\n    password_confirmation?: string;\n    /** Required when changing email or password */\n    current_password?: string;\n    phone?: string;\n    accepts_email_marketing?: boolean;\n    metadata?: Record<string, unknown>;\n  }\n): Promise<Customer> {\n  const result = await withAuthRefresh(async (options) => {\n    return getClient().customer.update(data, options);\n  });\n  revalidateTag('customer');\n  return result;\n}\n","import { cookies } from 'next/headers';\nimport { getConfig } from './config';\n\nconst DEFAULT_CART_COOKIE = '_spree_cart_token';\nconst DEFAULT_ACCESS_TOKEN_COOKIE = '_spree_jwt';\nconst CART_TOKEN_MAX_AGE = 60 * 60 * 24 * 30; // 30 days\nconst ACCESS_TOKEN_MAX_AGE = 60 * 60 * 24 * 7; // 7 days\n\nfunction getCartCookieName(): string {\n  try {\n    return getConfig().cartCookieName ?? DEFAULT_CART_COOKIE;\n  } catch {\n    return DEFAULT_CART_COOKIE;\n  }\n}\n\nfunction getCartIdCookieName(): string {\n  return `${getCartCookieName()}_id`;\n}\n\nfunction getAccessTokenCookieName(): string {\n  try {\n    return getConfig().accessTokenCookieName ?? DEFAULT_ACCESS_TOKEN_COOKIE;\n  } catch {\n    return DEFAULT_ACCESS_TOKEN_COOKIE;\n  }\n}\n\n// --- Cart Cookies (token + ID always managed together) ---\n\nexport async function getCartToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartCookieName())?.value;\n}\n\nexport async function getCartId(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartIdCookieName())?.value;\n}\n\nexport async function setCartCookies(id: string, token?: string): Promise<void> {\n  const cookieStore = await cookies();\n  const opts = {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax' as const,\n    path: '/',\n    maxAge: CART_TOKEN_MAX_AGE,\n  };\n\n  cookieStore.set(getCartIdCookieName(), id, opts);\n  if (token) {\n    cookieStore.set(getCartCookieName(), token, opts);\n  }\n}\n\nexport async function clearCartCookies(): Promise<void> {\n  const cookieStore = await cookies();\n  const opts = { maxAge: -1, path: '/' };\n  cookieStore.set(getCartCookieName(), '', opts);\n  cookieStore.set(getCartIdCookieName(), '', opts);\n}\n\n// --- Access Token (JWT) ---\n\nexport async function getAccessToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getAccessTokenCookieName())?.value;\n}\n\nexport async function setAccessToken(token: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: ACCESS_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearAccessToken(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Cart Options (combined cart + access tokens for cart/checkout/payment actions) ---\n\nexport async function getCartOptions(): Promise<{\n  spreeToken: string | undefined;\n  token: string | undefined;\n}> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  return { spreeToken, token };\n}\n\n// --- Cart ID (required) ---\n\nexport async function requireCartId(): Promise<string> {\n  const cartId = await getCartId();\n  if (cartId) return cartId;\n\n  // Authenticated user without cart ID cookie — resolve via carts.list()\n  const token = await getAccessToken();\n  if (token) {\n    const { getClient } = await import('./config');\n    const response = await getClient().carts.list({ token });\n    if (response.data.length > 0) {\n      const cart = response.data[0];\n      await setCartCookies(cart.id, cart.token);\n      return cart.id;\n    }\n  }\n\n  throw new Error('No cart found');\n}\n","import { SpreeError } from '@spree/sdk';\nimport type { RequestOptions } from '@spree/sdk';\nimport { getClient } from './config';\nimport { getAccessToken, setAccessToken, clearAccessToken } from './cookies';\n\n/**\n * Get auth request options from the current JWT token.\n * Proactively refreshes the token if it expires within 1 hour.\n */\nexport async function getAuthOptions(): Promise<RequestOptions> {\n  const token = await getAccessToken();\n  if (!token) {\n    return {};\n  }\n\n  // Check if token is close to expiry by decoding JWT payload\n  try {\n    const payload = JSON.parse(atob(token.split('.')[1]));\n    const exp = payload.exp;\n    const now = Math.floor(Date.now() / 1000);\n\n    // Refresh if token expires in less than 1 hour\n    if (exp && exp - now < 3600) {\n      try {\n        const refreshed = await getClient().auth.refresh({ token });\n        await setAccessToken(refreshed.token);\n        return { token: refreshed.token };\n      } catch {\n        // Refresh failed — use existing token, it might still work\n      }\n    }\n  } catch {\n    // Can't decode JWT — use it as-is, the server will reject if invalid\n  }\n\n  return { token };\n}\n\n/**\n * Execute an authenticated request with automatic token refresh on 401.\n * @param fn - Function that takes RequestOptions and returns a promise\n * @returns The result of the function\n * @throws SpreeError if auth fails after refresh attempt\n */\nexport async function withAuthRefresh<T>(\n  fn: (options: RequestOptions) => Promise<T>\n): Promise<T> {\n  const options = await getAuthOptions();\n\n  if (!options.token) {\n    throw new Error('Not authenticated');\n  }\n\n  try {\n    return await fn(options);\n  } catch (error: unknown) {\n    // If 401, try refreshing the token once\n    if (error instanceof SpreeError && error.status === 401) {\n      try {\n        const refreshed = await getClient().auth.refresh({ token: options.token });\n        await setAccessToken(refreshed.token);\n        return await fn({ token: refreshed.token });\n      } catch {\n        // Refresh failed — clear token and rethrow\n        await clearAccessToken();\n        throw error;\n      }\n    }\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;AAAA,SAAS,oBAAiC;AAWnC,SAAS,cAAc,QAA+B;AAC3D,YAAU;AACV,YAAU,aAAa;AAAA,IACrB,SAAS,OAAO;AAAA,IAChB,gBAAgB,OAAO;AAAA,EACzB,CAAC;AACH;AAMO,SAAS,YAAoB;AAClC,MAAI,CAAC,SAAS;AACZ,UAAM,UAAU,QAAQ,IAAI;AAC5B,UAAM,iBAAiB,QAAQ,IAAI;AACnC,QAAI,WAAW,gBAAgB;AAC7B,oBAAc,EAAE,SAAS,eAAe,CAAC;AAAA,IAC3C,OAAO;AACL,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,YAA6B;AAC3C,MAAI,CAAC,SAAS;AACZ,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AA/CA,IAGI,SACA;AAJJ;AAAA;AAAA;AAGA,IAAI,UAAyB;AAC7B,IAAI,UAAkC;AAAA;AAAA;;;ACAtC;AAFA,SAAS,qBAAqB;;;ACD9B;AADA,SAAS,eAAe;AAGxB,IAAM,sBAAsB;AAC5B,IAAM,8BAA8B;AACpC,IAAM,qBAAqB,KAAK,KAAK,KAAK;AAC1C,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,SAAS,oBAA4B;AACnC,MAAI;AACF,WAAO,UAAU,EAAE,kBAAkB;AAAA,EACvC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAA8B;AACrC,SAAO,GAAG,kBAAkB,CAAC;AAC/B;AAEA,SAAS,2BAAmC;AAC1C,MAAI;AACF,WAAO,UAAU,EAAE,yBAAyB;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,eAA4C;AAChE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,kBAAkB,CAAC,GAAG;AAC/C;AAEA,eAAsB,YAAyC;AAC7D,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,oBAAoB,CAAC,GAAG;AACjD;AAkBA,eAAsB,mBAAkC;AACtD,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,OAAO,EAAE,QAAQ,IAAI,MAAM,IAAI;AACrC,cAAY,IAAI,kBAAkB,GAAG,IAAI,IAAI;AAC7C,cAAY,IAAI,oBAAoB,GAAG,IAAI,IAAI;AACjD;AAIA,eAAsB,iBAA8C;AAClE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,yBAAyB,CAAC,GAAG;AACtD;AAEA,eAAsB,eAAe,OAA8B;AACjE,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,GAAG,OAAO;AAAA,IACjD,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAsB,mBAAkC;AACtD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,yBAAyB,GAAG,IAAI;AAAA,IAC9C,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;;;ACrFA;AAFA,SAAS,kBAAkB;AAS3B,eAAsB,iBAA0C;AAC9D,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAGA,MAAI;AACF,UAAM,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;AACpD,UAAM,MAAM,QAAQ;AACpB,UAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI;AAGxC,QAAI,OAAO,MAAM,MAAM,MAAM;AAC3B,UAAI;AACF,cAAM,YAAY,MAAM,UAAU,EAAE,KAAK,QAAQ,EAAE,MAAM,CAAC;AAC1D,cAAM,eAAe,UAAU,KAAK;AACpC,eAAO,EAAE,OAAO,UAAU,MAAM;AAAA,MAClC,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO,EAAE,MAAM;AACjB;AAQA,eAAsB,gBACpB,IACY;AACZ,QAAM,UAAU,MAAM,eAAe;AAErC,MAAI,CAAC,QAAQ,OAAO;AAClB,UAAM,IAAI,MAAM,mBAAmB;AAAA,EACrC;AAEA,MAAI;AACF,WAAO,MAAM,GAAG,OAAO;AAAA,EACzB,SAAS,OAAgB;AAEvB,QAAI,iBAAiB,cAAc,MAAM,WAAW,KAAK;AACvD,UAAI;AACF,cAAM,YAAY,MAAM,UAAU,EAAE,KAAK,QAAQ,EAAE,OAAO,QAAQ,MAAM,CAAC;AACzE,cAAM,eAAe,UAAU,KAAK;AACpC,eAAO,MAAM,GAAG,EAAE,OAAO,UAAU,MAAM,CAAC;AAAA,MAC5C,QAAQ;AAEN,cAAM,iBAAiB;AACvB,cAAM;AAAA,MACR;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;;;AF1DA,eAAsB,MACpB,OACA,UAC4I;AAC5I,MAAI;AACF,UAAM,SAAS,MAAM,UAAU,EAAE,KAAK,MAAM,EAAE,OAAO,SAAS,CAAC;AAC/D,UAAM,eAAe,OAAO,KAAK;AAGjC,UAAM,YAAY,MAAM,aAAa;AACrC,UAAM,SAAS,MAAM,UAAU;AAC/B,QAAI,aAAa,QAAQ;AACvB,UAAI;AACF,cAAM,UAAU,EAAE,MAAM,UAAU,QAAQ;AAAA,UACxC,OAAO,OAAO;AAAA,UACd,YAAY;AAAA,QACd,CAAC;AAAA,MACH,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,kBAAc,UAAU;AACxB,kBAAc,MAAM;AACpB,WAAO,EAAE,SAAS,MAAM,MAAM,OAAO,KAAK;AAAA,EAC5C,SAAS,OAAO;AACd,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD;AAAA,EACF;AACF;AAMA,eAAsB,SACpB,QAU4I;AAC5I,MAAI;AACF,UAAM,SAAS,MAAM,UAAU,EAAE,UAAU,OAAO,MAAM;AACxD,UAAM,eAAe,OAAO,KAAK;AAGjC,UAAM,YAAY,MAAM,aAAa;AACrC,UAAM,SAAS,MAAM,UAAU;AAC/B,QAAI,aAAa,QAAQ;AACvB,UAAI;AACF,cAAM,UAAU,EAAE,MAAM,UAAU,QAAQ;AAAA,UACxC,OAAO,OAAO;AAAA,UACd,YAAY;AAAA,QACd,CAAC;AAAA,MACH,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,kBAAc,UAAU;AACxB,kBAAc,MAAM;AACpB,WAAO,EAAE,SAAS,MAAM,MAAM,OAAO,KAAK;AAAA,EAC5C,SAAS,OAAO;AACd,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD;AAAA,EACF;AACF;AAOA,eAAsB,SAAwB;AAC5C,QAAM,iBAAiB;AACvB,QAAM,iBAAiB;AACvB,gBAAc,UAAU;AACxB,gBAAc,MAAM;AACpB,gBAAc,WAAW;AACzB,gBAAc,cAAc;AAC9B;AAKA,eAAsB,cAAwC;AAC5D,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,MAAO,QAAO;AAEnB,MAAI;AACF,WAAO,MAAM,gBAAgB,OAAO,YAAY;AAC9C,aAAO,UAAU,EAAE,SAAS,IAAI,OAAO;AAAA,IACzC,CAAC;AAAA,EACH,QAAQ;AACN,UAAM,iBAAiB;AACvB,WAAO;AAAA,EACT;AACF;AAKA,eAAsB,eACpB,MAYmB;AACnB,QAAM,SAAS,MAAM,gBAAgB,OAAO,YAAY;AACtD,WAAO,UAAU,EAAE,SAAS,OAAO,MAAM,OAAO;AAAA,EAClD,CAAC;AACD,gBAAc,UAAU;AACxB,SAAO;AACT;","names":[]}

package/dist/actions/cart.d.ts

@@ -59,7 +59,8 @@ declare function applyCoupon(code: string): Promise<Cart>;
 declare function removeCoupon(code: string): Promise<Cart>;
 /**
  * Complete the checkout and place the order.
+ * @param explicitCartId - Optional cart ID to complete. If not provided, uses the cart cookie.
  */
-declare function complete(): Promise<Order>;
+declare function complete(explicitCartId?: string): Promise<Order>;
 
 export { addItem, applyCoupon, associateCart, clearCart, complete, getCart, getOrCreateCart, getShipments, removeCoupon, removeItem, selectShippingRate, updateCart, updateItem };

package/dist/actions/cart.js

@@ -1,12 +1,23 @@
 "use server";
-
-// src/actions/cart.ts
-import { revalidateTag } from "next/cache";
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
 
 // src/config.ts
+var config_exports = {};
+__export(config_exports, {
+  getClient: () => getClient,
+  getConfig: () => getConfig,
+  initSpreeNext: () => initSpreeNext,
+  resetClient: () => resetClient
+});
 import { createClient } from "@spree/sdk";
-var _client = null;
-var _config = null;
 function initSpreeNext(config) {
   _config = config;
   _client = createClient({
@@ -34,8 +45,25 @@ function getConfig() {
   }
   return _config;
 }
+function resetClient() {
+  _client = null;
+  _config = null;
+}
+var _client, _config;
+var init_config = __esm({
+  "src/config.ts"() {
+    "use strict";
+    _client = null;
+    _config = null;
+  }
+});
+
+// src/actions/cart.ts
+init_config();
+import { revalidateTag } from "next/cache";
 
 // src/cookies.ts
+init_config();
 import { cookies } from "next/headers";
 var DEFAULT_CART_COOKIE = "_spree_cart_token";
 var DEFAULT_ACCESS_TOKEN_COOKIE = "_spree_jwt";
@@ -62,43 +90,29 @@ async function getCartToken() {
   const cookieStore = await cookies();
   return cookieStore.get(getCartCookieName())?.value;
 }
-async function setCartToken(token) {
-  const cookieStore = await cookies();
-  cookieStore.set(getCartCookieName(), token, {
-    httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
-    sameSite: "lax",
-    path: "/",
-    maxAge: CART_TOKEN_MAX_AGE
-  });
-}
-async function clearCartToken() {
-  const cookieStore = await cookies();
-  cookieStore.set(getCartCookieName(), "", {
-    maxAge: -1,
-    path: "/"
-  });
-}
 async function getCartId() {
   const cookieStore = await cookies();
   return cookieStore.get(getCartIdCookieName())?.value;
 }
-async function setCartId(id) {
+async function setCartCookies(id, token) {
   const cookieStore = await cookies();
-  cookieStore.set(getCartIdCookieName(), id, {
+  const opts = {
     httpOnly: true,
     secure: process.env.NODE_ENV === "production",
     sameSite: "lax",
     path: "/",
     maxAge: CART_TOKEN_MAX_AGE
-  });
+  };
+  cookieStore.set(getCartIdCookieName(), id, opts);
+  if (token) {
+    cookieStore.set(getCartCookieName(), token, opts);
+  }
 }
-async function clearCartId() {
+async function clearCartCookies() {
   const cookieStore = await cookies();
-  cookieStore.set(getCartIdCookieName(), "", {
-    maxAge: -1,
-    path: "/"
-  });
+  const opts = { maxAge: -1, path: "/" };
+  cookieStore.set(getCartCookieName(), "", opts);
+  cookieStore.set(getCartIdCookieName(), "", opts);
 }
 async function getAccessToken() {
   const cookieStore = await cookies();
@@ -111,8 +125,18 @@ async function getCartOptions() {
 }
 async function requireCartId() {
   const cartId = await getCartId();
-  if (!cartId) throw new Error("No cart found");
-  return cartId;
+  if (cartId) return cartId;
+  const token = await getAccessToken();
+  if (token) {
+    const { getClient: getClient2 } = await Promise.resolve().then(() => (init_config(), config_exports));
+    const response = await getClient2().carts.list({ token });
+    if (response.data.length > 0) {
+      const cart = response.data[0];
+      await setCartCookies(cart.id, cart.token);
+      return cart.id;
+    }
+  }
+  throw new Error("No cart found");
 }
 
 // src/actions/cart.ts
@@ -129,15 +153,13 @@ async function getCart() {
       const response = await getClient().carts.list({ token });
       if (response.data.length > 0) {
         const cart = response.data[0];
-        await setCartId(cart.id);
-        if (cart.token) await setCartToken(cart.token);
+        await setCartCookies(cart.id, cart.token);
         return cart;
       }
     }
     return null;
   } catch {
-    await clearCartToken();
-    await clearCartId();
+    await clearCartCookies();
     return null;
   }
 }
@@ -147,10 +169,7 @@ async function getOrCreateCart(params) {
   const token = await getAccessToken();
   const cartParams = params && Object.keys(params).length > 0 ? params : void 0;
   const cart = await getClient().carts.create(cartParams, token ? { token } : void 0);
-  if (cart.token) {
-    await setCartToken(cart.token);
-  }
-  await setCartId(cart.id);
+  await setCartCookies(cart.id, cart.token);
   revalidateTag("cart");
   return cart;
 }
@@ -186,8 +205,7 @@ async function removeItem(lineItemId) {
   return cart;
 }
 async function clearCart() {
-  await clearCartToken();
-  await clearCartId();
+  await clearCartCookies();
   revalidateTag("cart");
 }
 async function associateCart() {
@@ -200,8 +218,7 @@ async function associateCart() {
     revalidateTag("cart");
     return result;
   } catch {
-    await clearCartToken();
-    await clearCartId();
+    await clearCartCookies();
     revalidateTag("cart");
     return null;
   }
@@ -246,9 +263,9 @@ async function removeCoupon(code) {
   revalidateTag("cart");
   return result;
 }
-async function complete() {
+async function complete(explicitCartId) {
   const options = await getCartOptions();
-  const cartId = await requireCartId();
+  const cartId = explicitCartId ?? await requireCartId();
   const result = await getClient().carts.complete(cartId, options);
   revalidateTag("checkout");
   revalidateTag("cart");

package/dist/actions/cart.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/actions/cart.ts","../../src/config.ts","../../src/cookies.ts"],"sourcesContent":["'use server';\n\nimport { revalidateTag } from 'next/cache';\nimport type { Cart, Order, Shipment, CreateCartParams, UpdateCartParams, ListResponse } from '@spree/sdk';\nimport { getClient } from '../config';\nimport {\n  getCartToken, setCartToken, clearCartToken,\n  getCartId, setCartId, clearCartId,\n  getAccessToken,\n  getCartOptions, requireCartId,\n} from '../cookies';\n\n/**\n * Get the current cart. Returns null if no cart exists.\n */\nexport async function getCart(): Promise<Cart | null> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  const cartId = await getCartId();\n\n  if (!cartId && !token) return null;\n\n  try {\n    if (cartId) {\n      return await getClient().carts.get(cartId, { spreeToken, token });\n    }\n\n    // Authenticated user without stored cart ID — find their most recent cart\n    if (token) {\n      const response = await getClient().carts.list({ token });\n      if (response.data.length > 0) {\n        const cart = response.data[0];\n        await setCartId(cart.id);\n        if (cart.token) await setCartToken(cart.token);\n        return cart;\n      }\n    }\n\n    return null;\n  } catch {\n    // Cart not found (e.g., order was completed) — clear stale cookies\n    await clearCartToken();\n    await clearCartId();\n    return null;\n  }\n}\n\n/**\n * Get existing cart or create a new one.\n * @param params - Optional cart creation params (metadata, items)\n */\nexport async function getOrCreateCart(\n  params?: CreateCartParams\n): Promise<Cart> {\n  const existing = await getCart();\n  if (existing) return existing;\n\n  const token = await getAccessToken();\n  const cartParams = params && Object.keys(params).length > 0 ? params : undefined;\n  const cart = await getClient().carts.create(cartParams, token ? { token } : undefined);\n\n  if (cart.token) {\n    await setCartToken(cart.token);\n  }\n  await setCartId(cart.id);\n\n  revalidateTag('cart');\n  return cart;\n}\n\n/**\n * Add an item to the cart. Creates a cart if none exists.\n * Returns the updated cart with recalculated totals.\n */\nexport async function addItem(\n  variantId: string,\n  quantity: number = 1,\n  metadata?: Record<string, unknown>\n): Promise<Cart> {\n  const cart = await getOrCreateCart();\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n\n  const updatedCart = await getClient().carts.items.create(\n    cart.id,\n    { variant_id: variantId, quantity, metadata },\n    { spreeToken, token }\n  );\n\n  revalidateTag('cart');\n  return updatedCart;\n}\n\n/**\n * Update a line item in the cart (quantity and/or metadata).\n * Returns the updated cart with recalculated totals.\n */\nexport async function updateItem(\n  lineItemId: string,\n  params: { quantity?: number; metadata?: Record<string, unknown> }\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n\n  const cart = await getClient().carts.items.update(\n    cartId,\n    lineItemId,\n    params,\n    options\n  );\n\n  revalidateTag('cart');\n  return cart;\n}\n\n/**\n * Remove a line item from the cart.\n * Returns the updated cart with recalculated totals.\n */\nexport async function removeItem(lineItemId: string): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n\n  const cart = await getClient().carts.items.delete(cartId, lineItemId, options);\n\n  revalidateTag('cart');\n  return cart;\n}\n\n/**\n * Clear the cart (abandons the current cart).\n */\nexport async function clearCart(): Promise<void> {\n  await clearCartToken();\n  await clearCartId();\n  revalidateTag('cart');\n}\n\n/**\n * Associate a guest cart with the currently authenticated user.\n * Call this after login/register when the user has an existing guest cart.\n */\nexport async function associateCart(): Promise<Cart | null> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  const cartId = await getCartId();\n  if (!cartId || !token) return null;\n\n  try {\n    const result = await getClient().carts.associate(cartId, { spreeToken, token });\n    revalidateTag('cart');\n    return result;\n  } catch {\n    // Cart might already belong to another user — clear it\n    await clearCartToken();\n    await clearCartId();\n    revalidateTag('cart');\n    return null;\n  }\n}\n\n/**\n * Update cart info (email, addresses, special instructions).\n */\nexport async function updateCart(\n  params: UpdateCartParams\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  const result = await getClient().carts.update(cartId, params, options);\n  revalidateTag('checkout');\n  return result;\n}\n\n/**\n * Get shipments with shipping rates for the current cart.\n */\nexport async function getShipments(): Promise<ListResponse<Shipment>> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  return getClient().carts.shipments.list(cartId, options);\n}\n\n/**\n * Select a shipping rate for a shipment.\n * Returns the updated cart with recalculated totals.\n */\nexport async function selectShippingRate(\n  shipmentId: string,\n  shippingRateId: string\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  const result = await getClient().carts.shipments.update(\n    cartId,\n    shipmentId,\n    { selected_shipping_rate_id: shippingRateId },\n    options\n  );\n  revalidateTag('checkout');\n  return result;\n}\n\n/**\n * Apply a coupon code to the cart.\n */\nexport async function applyCoupon(\n  code: string\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  const result = await getClient().carts.couponCodes.apply(cartId, code, options);\n  revalidateTag('checkout');\n  revalidateTag('cart');\n  return result;\n}\n\n/**\n * Remove a coupon code from the cart.\n */\nexport async function removeCoupon(\n  code: string\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  const result = await getClient().carts.couponCodes.remove(cartId, code, options);\n  revalidateTag('checkout');\n  revalidateTag('cart');\n  return result;\n}\n\n/**\n * Complete the checkout and place the order.\n */\nexport async function complete(): Promise<Order> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  const result = await getClient().carts.complete(cartId, options);\n  revalidateTag('checkout');\n  revalidateTag('cart');\n  return result;\n}\n","import { createClient, type Client } from '@spree/sdk';\nimport type { SpreeNextConfig } from './types';\n\nlet _client: Client | null = null;\nlet _config: SpreeNextConfig | null = null;\n\n/**\n * Initialize the Spree Next.js integration.\n * Call this once in your app (e.g., in `lib/storefront.ts`).\n * If not called, the client will auto-initialize from SPREE_API_URL and SPREE_PUBLISHABLE_KEY env vars.\n */\nexport function initSpreeNext(config: SpreeNextConfig): void {\n  _config = config;\n  _client = createClient({\n    baseUrl: config.baseUrl,\n    publishableKey: config.publishableKey,\n  });\n}\n\n/**\n * Get the Client instance. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getClient(): Client {\n  if (!_client) {\n    const baseUrl = process.env.SPREE_API_URL;\n    const publishableKey = process.env.SPREE_PUBLISHABLE_KEY;\n    if (baseUrl && publishableKey) {\n      initSpreeNext({ baseUrl, publishableKey });\n    } else {\n      throw new Error(\n        '@spree/next is not configured. Either call initSpreeNext() or set SPREE_API_URL and SPREE_PUBLISHABLE_KEY environment variables.'\n      );\n    }\n  }\n  return _client!;\n}\n\n/**\n * Get the current config. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getConfig(): SpreeNextConfig {\n  if (!_config) {\n    getClient(); // triggers auto-init\n  }\n  return _config!;\n}\n\n/**\n * Reset the client (useful for testing).\n * @internal\n */\nexport function resetClient(): void {\n  _client = null;\n  _config = null;\n}\n","import { cookies } from 'next/headers';\nimport { getConfig } from './config';\n\nconst DEFAULT_CART_COOKIE = '_spree_cart_token';\nconst DEFAULT_ACCESS_TOKEN_COOKIE = '_spree_jwt';\nconst CART_TOKEN_MAX_AGE = 60 * 60 * 24 * 30; // 30 days\nconst ACCESS_TOKEN_MAX_AGE = 60 * 60 * 24 * 7; // 7 days\n\nfunction getCartCookieName(): string {\n  try {\n    return getConfig().cartCookieName ?? DEFAULT_CART_COOKIE;\n  } catch {\n    return DEFAULT_CART_COOKIE;\n  }\n}\n\nfunction getCartIdCookieName(): string {\n  return `${getCartCookieName()}_id`;\n}\n\nfunction getAccessTokenCookieName(): string {\n  try {\n    return getConfig().accessTokenCookieName ?? DEFAULT_ACCESS_TOKEN_COOKIE;\n  } catch {\n    return DEFAULT_ACCESS_TOKEN_COOKIE;\n  }\n}\n\n// --- Cart Token ---\n\nexport async function getCartToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartCookieName())?.value;\n}\n\nexport async function setCartToken(token: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartCookieName(), token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: CART_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearCartToken(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Cart ID (prefixed ID stored alongside token for REST API) ---\n\nexport async function getCartId(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartIdCookieName())?.value;\n}\n\nexport async function setCartId(id: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartIdCookieName(), id, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: CART_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearCartId(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getCartIdCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Access Token (JWT) ---\n\nexport async function getAccessToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getAccessTokenCookieName())?.value;\n}\n\nexport async function setAccessToken(token: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: ACCESS_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearAccessToken(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Cart Options (combined cart + access tokens for cart/checkout/payment actions) ---\n\nexport async function getCartOptions(): Promise<{\n  spreeToken: string | undefined;\n  token: string | undefined;\n}> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  return { spreeToken, token };\n}\n\n// --- Cart ID (required) ---\n\nexport async function requireCartId(): Promise<string> {\n  const cartId = await getCartId();\n  if (!cartId) throw new Error('No cart found');\n  return cartId;\n}\n"],"mappings":";;;AAEA,SAAS,qBAAqB;;;ACF9B,SAAS,oBAAiC;AAG1C,IAAI,UAAyB;AAC7B,IAAI,UAAkC;AAO/B,SAAS,cAAc,QAA+B;AAC3D,YAAU;AACV,YAAU,aAAa;AAAA,IACrB,SAAS,OAAO;AAAA,IAChB,gBAAgB,OAAO;AAAA,EACzB,CAAC;AACH;AAMO,SAAS,YAAoB;AAClC,MAAI,CAAC,SAAS;AACZ,UAAM,UAAU,QAAQ,IAAI;AAC5B,UAAM,iBAAiB,QAAQ,IAAI;AACnC,QAAI,WAAW,gBAAgB;AAC7B,oBAAc,EAAE,SAAS,eAAe,CAAC;AAAA,IAC3C,OAAO;AACL,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,YAA6B;AAC3C,MAAI,CAAC,SAAS;AACZ,cAAU;AAAA,EACZ;AACA,SAAO;AACT;;;AC/CA,SAAS,eAAe;AAGxB,IAAM,sBAAsB;AAC5B,IAAM,8BAA8B;AACpC,IAAM,qBAAqB,KAAK,KAAK,KAAK;AAC1C,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,SAAS,oBAA4B;AACnC,MAAI;AACF,WAAO,UAAU,EAAE,kBAAkB;AAAA,EACvC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAA8B;AACrC,SAAO,GAAG,kBAAkB,CAAC;AAC/B;AAEA,SAAS,2BAAmC;AAC1C,MAAI;AACF,WAAO,UAAU,EAAE,yBAAyB;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,eAA4C;AAChE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,kBAAkB,CAAC,GAAG;AAC/C;AAEA,eAAsB,aAAa,OAA8B;AAC/D,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,kBAAkB,GAAG,OAAO;AAAA,IAC1C,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAsB,iBAAgC;AACpD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,kBAAkB,GAAG,IAAI;AAAA,IACvC,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;AAIA,eAAsB,YAAyC;AAC7D,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,oBAAoB,CAAC,GAAG;AACjD;AAEA,eAAsB,UAAU,IAA2B;AACzD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,oBAAoB,GAAG,IAAI;AAAA,IACzC,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACH;AAEA,eAAsB,cAA6B;AACjD,QAAM,cAAc,MAAM,QAAQ;AAClC,cAAY,IAAI,oBAAoB,GAAG,IAAI;AAAA,IACzC,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACH;AAIA,eAAsB,iBAA8C;AAClE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,yBAAyB,CAAC,GAAG;AACtD;AAuBA,eAAsB,iBAGnB;AACD,QAAM,aAAa,MAAM,aAAa;AACtC,QAAM,QAAQ,MAAM,eAAe;AACnC,SAAO,EAAE,YAAY,MAAM;AAC7B;AAIA,eAAsB,gBAAiC;AACrD,QAAM,SAAS,MAAM,UAAU;AAC/B,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,eAAe;AAC5C,SAAO;AACT;;;AF5GA,eAAsB,UAAgC;AACpD,QAAM,aAAa,MAAM,aAAa;AACtC,QAAM,QAAQ,MAAM,eAAe;AACnC,QAAM,SAAS,MAAM,UAAU;AAE/B,MAAI,CAAC,UAAU,CAAC,MAAO,QAAO;AAE9B,MAAI;AACF,QAAI,QAAQ;AACV,aAAO,MAAM,UAAU,EAAE,MAAM,IAAI,QAAQ,EAAE,YAAY,MAAM,CAAC;AAAA,IAClE;AAGA,QAAI,OAAO;AACT,YAAM,WAAW,MAAM,UAAU,EAAE,MAAM,KAAK,EAAE,MAAM,CAAC;AACvD,UAAI,SAAS,KAAK,SAAS,GAAG;AAC5B,cAAM,OAAO,SAAS,KAAK,CAAC;AAC5B,cAAM,UAAU,KAAK,EAAE;AACvB,YAAI,KAAK,MAAO,OAAM,aAAa,KAAK,KAAK;AAC7C,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT,QAAQ;AAEN,UAAM,eAAe;AACrB,UAAM,YAAY;AAClB,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,gBACpB,QACe;AACf,QAAM,WAAW,MAAM,QAAQ;AAC/B,MAAI,SAAU,QAAO;AAErB,QAAM,QAAQ,MAAM,eAAe;AACnC,QAAM,aAAa,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACvE,QAAM,OAAO,MAAM,UAAU,EAAE,MAAM,OAAO,YAAY,QAAQ,EAAE,MAAM,IAAI,MAAS;AAErF,MAAI,KAAK,OAAO;AACd,UAAM,aAAa,KAAK,KAAK;AAAA,EAC/B;AACA,QAAM,UAAU,KAAK,EAAE;AAEvB,gBAAc,MAAM;AACpB,SAAO;AACT;AAMA,eAAsB,QACpB,WACA,WAAmB,GACnB,UACe;AACf,QAAM,OAAO,MAAM,gBAAgB;AACnC,QAAM,aAAa,MAAM,aAAa;AACtC,QAAM,QAAQ,MAAM,eAAe;AAEnC,QAAM,cAAc,MAAM,UAAU,EAAE,MAAM,MAAM;AAAA,IAChD,KAAK;AAAA,IACL,EAAE,YAAY,WAAW,UAAU,SAAS;AAAA,IAC5C,EAAE,YAAY,MAAM;AAAA,EACtB;AAEA,gBAAc,MAAM;AACpB,SAAO;AACT;AAMA,eAAsB,WACpB,YACA,QACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AAEnC,QAAM,OAAO,MAAM,UAAU,EAAE,MAAM,MAAM;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,gBAAc,MAAM;AACpB,SAAO;AACT;AAMA,eAAsB,WAAW,YAAmC;AAClE,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AAEnC,QAAM,OAAO,MAAM,UAAU,EAAE,MAAM,MAAM,OAAO,QAAQ,YAAY,OAAO;AAE7E,gBAAc,MAAM;AACpB,SAAO;AACT;AAKA,eAAsB,YAA2B;AAC/C,QAAM,eAAe;AACrB,QAAM,YAAY;AAClB,gBAAc,MAAM;AACtB;AAMA,eAAsB,gBAAsC;AAC1D,QAAM,aAAa,MAAM,aAAa;AACtC,QAAM,QAAQ,MAAM,eAAe;AACnC,QAAM,SAAS,MAAM,UAAU;AAC/B,MAAI,CAAC,UAAU,CAAC,MAAO,QAAO;AAE9B,MAAI;AACF,UAAM,SAAS,MAAM,UAAU,EAAE,MAAM,UAAU,QAAQ,EAAE,YAAY,MAAM,CAAC;AAC9E,kBAAc,MAAM;AACpB,WAAO;AAAA,EACT,QAAQ;AAEN,UAAM,eAAe;AACrB,UAAM,YAAY;AAClB,kBAAc,MAAM;AACpB,WAAO;AAAA,EACT;AACF;AAKA,eAAsB,WACpB,QACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,OAAO,QAAQ,QAAQ,OAAO;AACrE,gBAAc,UAAU;AACxB,SAAO;AACT;AAKA,eAAsB,eAAgD;AACpE,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,SAAO,UAAU,EAAE,MAAM,UAAU,KAAK,QAAQ,OAAO;AACzD;AAMA,eAAsB,mBACpB,YACA,gBACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,UAAU;AAAA,IAC/C;AAAA,IACA;AAAA,IACA,EAAE,2BAA2B,eAAe;AAAA,IAC5C;AAAA,EACF;AACA,gBAAc,UAAU;AACxB,SAAO;AACT;AAKA,eAAsB,YACpB,MACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,YAAY,MAAM,QAAQ,MAAM,OAAO;AAC9E,gBAAc,UAAU;AACxB,gBAAc,MAAM;AACpB,SAAO;AACT;AAKA,eAAsB,aACpB,MACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,YAAY,OAAO,QAAQ,MAAM,OAAO;AAC/E,gBAAc,UAAU;AACxB,gBAAc,MAAM;AACpB,SAAO;AACT;AAKA,eAAsB,WAA2B;AAC/C,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,SAAS,QAAQ,OAAO;AAC/D,gBAAc,UAAU;AACxB,gBAAc,MAAM;AACpB,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/config.ts","../../src/actions/cart.ts","../../src/cookies.ts"],"sourcesContent":["import { createClient, type Client } from '@spree/sdk';\nimport type { SpreeNextConfig } from './types';\n\nlet _client: Client | null = null;\nlet _config: SpreeNextConfig | null = null;\n\n/**\n * Initialize the Spree Next.js integration.\n * Call this once in your app (e.g., in `lib/storefront.ts`).\n * If not called, the client will auto-initialize from SPREE_API_URL and SPREE_PUBLISHABLE_KEY env vars.\n */\nexport function initSpreeNext(config: SpreeNextConfig): void {\n  _config = config;\n  _client = createClient({\n    baseUrl: config.baseUrl,\n    publishableKey: config.publishableKey,\n  });\n}\n\n/**\n * Get the Client instance. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getClient(): Client {\n  if (!_client) {\n    const baseUrl = process.env.SPREE_API_URL;\n    const publishableKey = process.env.SPREE_PUBLISHABLE_KEY;\n    if (baseUrl && publishableKey) {\n      initSpreeNext({ baseUrl, publishableKey });\n    } else {\n      throw new Error(\n        '@spree/next is not configured. Either call initSpreeNext() or set SPREE_API_URL and SPREE_PUBLISHABLE_KEY environment variables.'\n      );\n    }\n  }\n  return _client!;\n}\n\n/**\n * Get the current config. Auto-initializes from env vars if needed.\n * @internal\n */\nexport function getConfig(): SpreeNextConfig {\n  if (!_config) {\n    getClient(); // triggers auto-init\n  }\n  return _config!;\n}\n\n/**\n * Reset the client (useful for testing).\n * @internal\n */\nexport function resetClient(): void {\n  _client = null;\n  _config = null;\n}\n","'use server';\n\nimport { revalidateTag } from 'next/cache';\nimport type { Cart, Order, Shipment, CreateCartParams, UpdateCartParams, ListResponse } from '@spree/sdk';\nimport { getClient } from '../config';\nimport {\n  getCartToken, getCartId,\n  setCartCookies, clearCartCookies,\n  getAccessToken,\n  getCartOptions, requireCartId,\n} from '../cookies';\n\n/**\n * Get the current cart. Returns null if no cart exists.\n */\nexport async function getCart(): Promise<Cart | null> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  const cartId = await getCartId();\n\n  if (!cartId && !token) return null;\n\n  try {\n    if (cartId) {\n      return await getClient().carts.get(cartId, { spreeToken, token });\n    }\n\n    // Authenticated user without stored cart ID — find their most recent cart\n    if (token) {\n      const response = await getClient().carts.list({ token });\n      if (response.data.length > 0) {\n        const cart = response.data[0];\n        await setCartCookies(cart.id, cart.token);\n        return cart;\n      }\n    }\n\n    return null;\n  } catch {\n    // Cart not found (e.g., order was completed) — clear stale cookies\n    await clearCartCookies();\n    return null;\n  }\n}\n\n/**\n * Get existing cart or create a new one.\n * @param params - Optional cart creation params (metadata, items)\n */\nexport async function getOrCreateCart(\n  params?: CreateCartParams\n): Promise<Cart> {\n  const existing = await getCart();\n  if (existing) return existing;\n\n  const token = await getAccessToken();\n  const cartParams = params && Object.keys(params).length > 0 ? params : undefined;\n  const cart = await getClient().carts.create(cartParams, token ? { token } : undefined);\n\n  await setCartCookies(cart.id, cart.token);\n\n  revalidateTag('cart');\n  return cart;\n}\n\n/**\n * Add an item to the cart. Creates a cart if none exists.\n * Returns the updated cart with recalculated totals.\n */\nexport async function addItem(\n  variantId: string,\n  quantity: number = 1,\n  metadata?: Record<string, unknown>\n): Promise<Cart> {\n  const cart = await getOrCreateCart();\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n\n  const updatedCart = await getClient().carts.items.create(\n    cart.id,\n    { variant_id: variantId, quantity, metadata },\n    { spreeToken, token }\n  );\n\n  revalidateTag('cart');\n  return updatedCart;\n}\n\n/**\n * Update a line item in the cart (quantity and/or metadata).\n * Returns the updated cart with recalculated totals.\n */\nexport async function updateItem(\n  lineItemId: string,\n  params: { quantity?: number; metadata?: Record<string, unknown> }\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n\n  const cart = await getClient().carts.items.update(\n    cartId,\n    lineItemId,\n    params,\n    options\n  );\n\n  revalidateTag('cart');\n  return cart;\n}\n\n/**\n * Remove a line item from the cart.\n * Returns the updated cart with recalculated totals.\n */\nexport async function removeItem(lineItemId: string): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n\n  const cart = await getClient().carts.items.delete(cartId, lineItemId, options);\n\n  revalidateTag('cart');\n  return cart;\n}\n\n/**\n * Clear the cart (abandons the current cart).\n */\nexport async function clearCart(): Promise<void> {\n  await clearCartCookies();\n  revalidateTag('cart');\n}\n\n/**\n * Associate a guest cart with the currently authenticated user.\n * Call this after login/register when the user has an existing guest cart.\n */\nexport async function associateCart(): Promise<Cart | null> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  const cartId = await getCartId();\n  if (!cartId || !token) return null;\n\n  try {\n    const result = await getClient().carts.associate(cartId, { spreeToken, token });\n    revalidateTag('cart');\n    return result;\n  } catch {\n    // Cart might already belong to another user — clear it\n    await clearCartCookies();\n    revalidateTag('cart');\n    return null;\n  }\n}\n\n/**\n * Update cart info (email, addresses, special instructions).\n */\nexport async function updateCart(\n  params: UpdateCartParams\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  const result = await getClient().carts.update(cartId, params, options);\n  revalidateTag('checkout');\n  return result;\n}\n\n/**\n * Get shipments with shipping rates for the current cart.\n */\nexport async function getShipments(): Promise<ListResponse<Shipment>> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  return getClient().carts.shipments.list(cartId, options);\n}\n\n/**\n * Select a shipping rate for a shipment.\n * Returns the updated cart with recalculated totals.\n */\nexport async function selectShippingRate(\n  shipmentId: string,\n  shippingRateId: string\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  const result = await getClient().carts.shipments.update(\n    cartId,\n    shipmentId,\n    { selected_shipping_rate_id: shippingRateId },\n    options\n  );\n  revalidateTag('checkout');\n  return result;\n}\n\n/**\n * Apply a coupon code to the cart.\n */\nexport async function applyCoupon(\n  code: string\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  const result = await getClient().carts.couponCodes.apply(cartId, code, options);\n  revalidateTag('checkout');\n  revalidateTag('cart');\n  return result;\n}\n\n/**\n * Remove a coupon code from the cart.\n */\nexport async function removeCoupon(\n  code: string\n): Promise<Cart> {\n  const options = await getCartOptions();\n  const cartId = await requireCartId();\n  const result = await getClient().carts.couponCodes.remove(cartId, code, options);\n  revalidateTag('checkout');\n  revalidateTag('cart');\n  return result;\n}\n\n/**\n * Complete the checkout and place the order.\n * @param explicitCartId - Optional cart ID to complete. If not provided, uses the cart cookie.\n */\nexport async function complete(explicitCartId?: string): Promise<Order> {\n  const options = await getCartOptions();\n  const cartId = explicitCartId ?? await requireCartId();\n  const result = await getClient().carts.complete(cartId, options);\n  revalidateTag('checkout');\n  revalidateTag('cart');\n  return result;\n}\n","import { cookies } from 'next/headers';\nimport { getConfig } from './config';\n\nconst DEFAULT_CART_COOKIE = '_spree_cart_token';\nconst DEFAULT_ACCESS_TOKEN_COOKIE = '_spree_jwt';\nconst CART_TOKEN_MAX_AGE = 60 * 60 * 24 * 30; // 30 days\nconst ACCESS_TOKEN_MAX_AGE = 60 * 60 * 24 * 7; // 7 days\n\nfunction getCartCookieName(): string {\n  try {\n    return getConfig().cartCookieName ?? DEFAULT_CART_COOKIE;\n  } catch {\n    return DEFAULT_CART_COOKIE;\n  }\n}\n\nfunction getCartIdCookieName(): string {\n  return `${getCartCookieName()}_id`;\n}\n\nfunction getAccessTokenCookieName(): string {\n  try {\n    return getConfig().accessTokenCookieName ?? DEFAULT_ACCESS_TOKEN_COOKIE;\n  } catch {\n    return DEFAULT_ACCESS_TOKEN_COOKIE;\n  }\n}\n\n// --- Cart Cookies (token + ID always managed together) ---\n\nexport async function getCartToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartCookieName())?.value;\n}\n\nexport async function getCartId(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getCartIdCookieName())?.value;\n}\n\nexport async function setCartCookies(id: string, token?: string): Promise<void> {\n  const cookieStore = await cookies();\n  const opts = {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax' as const,\n    path: '/',\n    maxAge: CART_TOKEN_MAX_AGE,\n  };\n\n  cookieStore.set(getCartIdCookieName(), id, opts);\n  if (token) {\n    cookieStore.set(getCartCookieName(), token, opts);\n  }\n}\n\nexport async function clearCartCookies(): Promise<void> {\n  const cookieStore = await cookies();\n  const opts = { maxAge: -1, path: '/' };\n  cookieStore.set(getCartCookieName(), '', opts);\n  cookieStore.set(getCartIdCookieName(), '', opts);\n}\n\n// --- Access Token (JWT) ---\n\nexport async function getAccessToken(): Promise<string | undefined> {\n  const cookieStore = await cookies();\n  return cookieStore.get(getAccessTokenCookieName())?.value;\n}\n\nexport async function setAccessToken(token: string): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: ACCESS_TOKEN_MAX_AGE,\n  });\n}\n\nexport async function clearAccessToken(): Promise<void> {\n  const cookieStore = await cookies();\n  cookieStore.set(getAccessTokenCookieName(), '', {\n    maxAge: -1,\n    path: '/',\n  });\n}\n\n// --- Cart Options (combined cart + access tokens for cart/checkout/payment actions) ---\n\nexport async function getCartOptions(): Promise<{\n  spreeToken: string | undefined;\n  token: string | undefined;\n}> {\n  const spreeToken = await getCartToken();\n  const token = await getAccessToken();\n  return { spreeToken, token };\n}\n\n// --- Cart ID (required) ---\n\nexport async function requireCartId(): Promise<string> {\n  const cartId = await getCartId();\n  if (cartId) return cartId;\n\n  // Authenticated user without cart ID cookie — resolve via carts.list()\n  const token = await getAccessToken();\n  if (token) {\n    const { getClient } = await import('./config');\n    const response = await getClient().carts.list({ token });\n    if (response.data.length > 0) {\n      const cart = response.data[0];\n      await setCartCookies(cart.id, cart.token);\n      return cart.id;\n    }\n  }\n\n  throw new Error('No cart found');\n}\n"],"mappings":";;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAAS,oBAAiC;AAWnC,SAAS,cAAc,QAA+B;AAC3D,YAAU;AACV,YAAU,aAAa;AAAA,IACrB,SAAS,OAAO;AAAA,IAChB,gBAAgB,OAAO;AAAA,EACzB,CAAC;AACH;AAMO,SAAS,YAAoB;AAClC,MAAI,CAAC,SAAS;AACZ,UAAM,UAAU,QAAQ,IAAI;AAC5B,UAAM,iBAAiB,QAAQ,IAAI;AACnC,QAAI,WAAW,gBAAgB;AAC7B,oBAAc,EAAE,SAAS,eAAe,CAAC;AAAA,IAC3C,OAAO;AACL,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAMO,SAAS,YAA6B;AAC3C,MAAI,CAAC,SAAS;AACZ,cAAU;AAAA,EACZ;AACA,SAAO;AACT;AAMO,SAAS,cAAoB;AAClC,YAAU;AACV,YAAU;AACZ;AAxDA,IAGI,SACA;AAJJ;AAAA;AAAA;AAGA,IAAI,UAAyB;AAC7B,IAAI,UAAkC;AAAA;AAAA;;;ACAtC;AAFA,SAAS,qBAAqB;;;ACD9B;AADA,SAAS,eAAe;AAGxB,IAAM,sBAAsB;AAC5B,IAAM,8BAA8B;AACpC,IAAM,qBAAqB,KAAK,KAAK,KAAK;AAC1C,IAAM,uBAAuB,KAAK,KAAK,KAAK;AAE5C,SAAS,oBAA4B;AACnC,MAAI;AACF,WAAO,UAAU,EAAE,kBAAkB;AAAA,EACvC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAA8B;AACrC,SAAO,GAAG,kBAAkB,CAAC;AAC/B;AAEA,SAAS,2BAAmC;AAC1C,MAAI;AACF,WAAO,UAAU,EAAE,yBAAyB;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIA,eAAsB,eAA4C;AAChE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,kBAAkB,CAAC,GAAG;AAC/C;AAEA,eAAsB,YAAyC;AAC7D,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,oBAAoB,CAAC,GAAG;AACjD;AAEA,eAAsB,eAAe,IAAY,OAA+B;AAC9E,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,OAAO;AAAA,IACX,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV;AAEA,cAAY,IAAI,oBAAoB,GAAG,IAAI,IAAI;AAC/C,MAAI,OAAO;AACT,gBAAY,IAAI,kBAAkB,GAAG,OAAO,IAAI;AAAA,EAClD;AACF;AAEA,eAAsB,mBAAkC;AACtD,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,OAAO,EAAE,QAAQ,IAAI,MAAM,IAAI;AACrC,cAAY,IAAI,kBAAkB,GAAG,IAAI,IAAI;AAC7C,cAAY,IAAI,oBAAoB,GAAG,IAAI,IAAI;AACjD;AAIA,eAAsB,iBAA8C;AAClE,QAAM,cAAc,MAAM,QAAQ;AAClC,SAAO,YAAY,IAAI,yBAAyB,CAAC,GAAG;AACtD;AAuBA,eAAsB,iBAGnB;AACD,QAAM,aAAa,MAAM,aAAa;AACtC,QAAM,QAAQ,MAAM,eAAe;AACnC,SAAO,EAAE,YAAY,MAAM;AAC7B;AAIA,eAAsB,gBAAiC;AACrD,QAAM,SAAS,MAAM,UAAU;AAC/B,MAAI,OAAQ,QAAO;AAGnB,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,OAAO;AACT,UAAM,EAAE,WAAAA,WAAU,IAAI,MAAM;AAC5B,UAAM,WAAW,MAAMA,WAAU,EAAE,MAAM,KAAK,EAAE,MAAM,CAAC;AACvD,QAAI,SAAS,KAAK,SAAS,GAAG;AAC5B,YAAM,OAAO,SAAS,KAAK,CAAC;AAC5B,YAAM,eAAe,KAAK,IAAI,KAAK,KAAK;AACxC,aAAO,KAAK;AAAA,IACd;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,eAAe;AACjC;;;ADxGA,eAAsB,UAAgC;AACpD,QAAM,aAAa,MAAM,aAAa;AACtC,QAAM,QAAQ,MAAM,eAAe;AACnC,QAAM,SAAS,MAAM,UAAU;AAE/B,MAAI,CAAC,UAAU,CAAC,MAAO,QAAO;AAE9B,MAAI;AACF,QAAI,QAAQ;AACV,aAAO,MAAM,UAAU,EAAE,MAAM,IAAI,QAAQ,EAAE,YAAY,MAAM,CAAC;AAAA,IAClE;AAGA,QAAI,OAAO;AACT,YAAM,WAAW,MAAM,UAAU,EAAE,MAAM,KAAK,EAAE,MAAM,CAAC;AACvD,UAAI,SAAS,KAAK,SAAS,GAAG;AAC5B,cAAM,OAAO,SAAS,KAAK,CAAC;AAC5B,cAAM,eAAe,KAAK,IAAI,KAAK,KAAK;AACxC,eAAO;AAAA,MACT;AAAA,IACF;AAEA,WAAO;AAAA,EACT,QAAQ;AAEN,UAAM,iBAAiB;AACvB,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,gBACpB,QACe;AACf,QAAM,WAAW,MAAM,QAAQ;AAC/B,MAAI,SAAU,QAAO;AAErB,QAAM,QAAQ,MAAM,eAAe;AACnC,QAAM,aAAa,UAAU,OAAO,KAAK,MAAM,EAAE,SAAS,IAAI,SAAS;AACvE,QAAM,OAAO,MAAM,UAAU,EAAE,MAAM,OAAO,YAAY,QAAQ,EAAE,MAAM,IAAI,MAAS;AAErF,QAAM,eAAe,KAAK,IAAI,KAAK,KAAK;AAExC,gBAAc,MAAM;AACpB,SAAO;AACT;AAMA,eAAsB,QACpB,WACA,WAAmB,GACnB,UACe;AACf,QAAM,OAAO,MAAM,gBAAgB;AACnC,QAAM,aAAa,MAAM,aAAa;AACtC,QAAM,QAAQ,MAAM,eAAe;AAEnC,QAAM,cAAc,MAAM,UAAU,EAAE,MAAM,MAAM;AAAA,IAChD,KAAK;AAAA,IACL,EAAE,YAAY,WAAW,UAAU,SAAS;AAAA,IAC5C,EAAE,YAAY,MAAM;AAAA,EACtB;AAEA,gBAAc,MAAM;AACpB,SAAO;AACT;AAMA,eAAsB,WACpB,YACA,QACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AAEnC,QAAM,OAAO,MAAM,UAAU,EAAE,MAAM,MAAM;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,gBAAc,MAAM;AACpB,SAAO;AACT;AAMA,eAAsB,WAAW,YAAmC;AAClE,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AAEnC,QAAM,OAAO,MAAM,UAAU,EAAE,MAAM,MAAM,OAAO,QAAQ,YAAY,OAAO;AAE7E,gBAAc,MAAM;AACpB,SAAO;AACT;AAKA,eAAsB,YAA2B;AAC/C,QAAM,iBAAiB;AACvB,gBAAc,MAAM;AACtB;AAMA,eAAsB,gBAAsC;AAC1D,QAAM,aAAa,MAAM,aAAa;AACtC,QAAM,QAAQ,MAAM,eAAe;AACnC,QAAM,SAAS,MAAM,UAAU;AAC/B,MAAI,CAAC,UAAU,CAAC,MAAO,QAAO;AAE9B,MAAI;AACF,UAAM,SAAS,MAAM,UAAU,EAAE,MAAM,UAAU,QAAQ,EAAE,YAAY,MAAM,CAAC;AAC9E,kBAAc,MAAM;AACpB,WAAO;AAAA,EACT,QAAQ;AAEN,UAAM,iBAAiB;AACvB,kBAAc,MAAM;AACpB,WAAO;AAAA,EACT;AACF;AAKA,eAAsB,WACpB,QACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,OAAO,QAAQ,QAAQ,OAAO;AACrE,gBAAc,UAAU;AACxB,SAAO;AACT;AAKA,eAAsB,eAAgD;AACpE,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,SAAO,UAAU,EAAE,MAAM,UAAU,KAAK,QAAQ,OAAO;AACzD;AAMA,eAAsB,mBACpB,YACA,gBACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,UAAU;AAAA,IAC/C;AAAA,IACA;AAAA,IACA,EAAE,2BAA2B,eAAe;AAAA,IAC5C;AAAA,EACF;AACA,gBAAc,UAAU;AACxB,SAAO;AACT;AAKA,eAAsB,YACpB,MACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,YAAY,MAAM,QAAQ,MAAM,OAAO;AAC9E,gBAAc,UAAU;AACxB,gBAAc,MAAM;AACpB,SAAO;AACT;AAKA,eAAsB,aACpB,MACe;AACf,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,MAAM,cAAc;AACnC,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,YAAY,OAAO,QAAQ,MAAM,OAAO;AAC/E,gBAAc,UAAU;AACxB,gBAAc,MAAM;AACpB,SAAO;AACT;AAMA,eAAsB,SAAS,gBAAyC;AACtE,QAAM,UAAU,MAAM,eAAe;AACrC,QAAM,SAAS,kBAAkB,MAAM,cAAc;AACrD,QAAM,SAAS,MAAM,UAAU,EAAE,MAAM,SAAS,QAAQ,OAAO;AAC/D,gBAAc,UAAU;AACxB,gBAAc,MAAM;AACpB,SAAO;AACT;","names":["getClient"]}

package/dist/actions/credit-cards.js

@@ -1,15 +1,11 @@
 "use server";
-
-// src/actions/credit-cards.ts
-import { revalidateTag } from "next/cache";
-
-// src/auth-helpers.ts
-import { SpreeError } from "@spree/sdk";
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __esm = (fn, res) => function __init() {
+  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+};
 
 // src/config.ts
 import { createClient } from "@spree/sdk";
-var _client = null;
-var _config = null;
 function initSpreeNext(config) {
   _config = config;
   _client = createClient({
@@ -37,8 +33,24 @@ function getConfig() {
   }
   return _config;
 }
+var _client, _config;
+var init_config = __esm({
+  "src/config.ts"() {
+    "use strict";
+    _client = null;
+    _config = null;
+  }
+});
+
+// src/actions/credit-cards.ts
+import { revalidateTag } from "next/cache";
+
+// src/auth-helpers.ts
+init_config();
+import { SpreeError } from "@spree/sdk";
 
 // src/cookies.ts
+init_config();
 import { cookies } from "next/headers";
 var DEFAULT_ACCESS_TOKEN_COOKIE = "_spree_jwt";
 var CART_TOKEN_MAX_AGE = 60 * 60 * 24 * 30;
@@ -117,6 +129,7 @@ async function withAuthRefresh(fn) {
 }
 
 // src/actions/credit-cards.ts
+init_config();
 async function listCreditCards() {
   return withAuthRefresh(async (options) => {
     return getClient().customer.creditCards.list(void 0, options);