@viu/emporix-sdk 2.30.0 → 2.31.0

package/CHANGELOG.md

@@ -1,5 +1,63 @@
 # @viu/emporix-sdk
 
+## 2.31.0
+
+### Minor Changes
+
+- [#216](https://github.com/viuteam/emporix-sdk/pull/216) [`ca45e50`](https://github.com/viuteam/emporix-sdk/commit/ca45e50bf79ab7d72c51c0687f383bffeecfcf6d) Thanks [@amnael1](https://github.com/amnael1)! - `@viu/emporix-sdk-next` no longer depends on `@viu/emporix-sdk-react`. The peer
+  dependency is gone, and the built package contains zero imports of it.
+
+  A server-first Next app therefore installs **three** packages instead of four,
+  and with them no React and no `@tanstack/react-query` — both are peers of the
+  React bindings, and neither has anything to do with a mode where the browser makes
+  no Emporix calls at all.
+
+  What moved to `@viu/emporix-sdk` (`core/session-storage.ts`), completing the step
+  that started with `STORAGE_KEYS`:
+
+  | Export                                                        | Was                                                     |
+  | ------------------------------------------------------------- | ------------------------------------------------------- |
+  | `EmporixStorage`, `TokenStorage`, `PersistedAnonymousSession` | the session-persistence contract                        |
+  | `parseAnonymousSession`                                       | parses a stored anonymous session                       |
+  | `createCookieBackedStorage`, `CookieIo`                       | the whole key-to-accessor mapping                       |
+  | `createServerStorage`, `ServerCookieJar`                      | an `EmporixStorage` over any cookie jar                 |
+  | `serverAuth`                                                  | customer context when a token is stored, else anonymous |
+
+  None of it imports React — `createServerStorage` fits Next, Remix, SvelteKit,
+  Nitro or a plain Node handler, and it was only ever in the React package because
+  that is where the browser backends live. Those stay: `createMemoryStorage`,
+  `createLocalStorage`, `createSessionStorage`, `createCookieStorage` and the
+  `subscribeAll` listener set are genuinely browser concerns.
+
+  **Nothing to change in your code.** `@viu/emporix-sdk-react` re-exports every
+  moved name from `./storage` and `/ssr`, with one definition only. One type is now
+  derived rather than re-declared: `PersistedAnonymousSession` is
+  `Pick<StoredAnonymousSession, "refreshToken" | "sessionId">`, which is what it
+  always was in practice — the browser adapters deliberately persist only those two
+  fields, while a server store may also keep the access token.
+
+- [#215](https://github.com/viuteam/emporix-sdk/pull/215) [`e9d019d`](https://github.com/viuteam/emporix-sdk/commit/e9d019d4a5bf3238311dab11e5fb856ce5689004) Thanks [@amnael1](https://github.com/amnael1)! - Move the eight session keys into the core SDK: `STORAGE_KEYS` and
+  `EmporixStorageKey` are now exported from `@viu/emporix-sdk`.
+
+  They were never a React concern. The same eight strings are cookie names in a
+  Next `proxy.ts`, Web Storage keys in a browser adapter, and record fields in a
+  server-side session store — but they lived in `@viu/emporix-sdk-react`, which is
+  why `@viu/emporix-sdk-next` depended on the React bindings to name a cookie. Six
+  of the seven files in that package imported nothing else from it.
+
+  Nothing to change in your code. `@viu/emporix-sdk-react` re-exports both from
+  `./storage` and `/ssr`, and `@viu/emporix-sdk-next` still re-exports
+  `STORAGE_KEYS` from `/session`. There is exactly one definition, and a test
+  asserts object identity across all three paths — a copy would be the one drift
+  that silently breaks a session by writing a cookie under one name and reading it
+  under another.
+
+  Measured on the built output: `@viu/emporix-sdk-next` reached for
+  `@viu/emporix-sdk-react` in seven places before, and now does so in one —
+  `server-session.ts`, for `createServerStorage`, `serverAuth` and the
+  `EmporixStorage` type. Removing that last one (and the peer dependency with it) is
+  a follow-up, because it touches a public signature.
+
 ## 2.30.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -595,6 +595,78 @@ var DefaultTokenProvider = class {
   }
 };
 
+// src/core/session-keys.ts
+var STORAGE_KEYS = {
+  customerToken: "emporix.customerToken",
+  cartId: "emporix.cartId",
+  anonymousSession: "emporix.anonymousSession",
+  siteCode: "emporix.siteCode",
+  language: "emporix.language",
+  activeLegalEntityId: "emporix.activeLegalEntityId",
+  refreshToken: "emporix.refreshToken",
+  saasToken: "emporix.saasToken"
+};
+
+// src/core/session-storage.ts
+function parseAnonymousSession(raw) {
+  if (raw === null) return null;
+  try {
+    const parsed = JSON.parse(raw);
+    return typeof parsed.refreshToken === "string" && typeof parsed.sessionId === "string" ? { refreshToken: parsed.refreshToken, sessionId: parsed.sessionId } : null;
+  } catch {
+    return null;
+  }
+}
+function createCookieBackedStorage(io, opts = {}) {
+  const tokenName = opts.tokenName ?? STORAGE_KEYS.customerToken;
+  const notify = opts.notify;
+  const warned = /* @__PURE__ */ new Set();
+  const write = (name, value, key) => {
+    if (io.set === void 0) {
+      if (!warned.has(key)) {
+        warned.add(key);
+        console.warn(
+          `[emporix] storage is read-only; ignoring write to "${key}". Provide a \`set\` accessor to enable writes (e.g. from a Server Action).`
+        );
+      }
+      return;
+    }
+    io.set(name, value);
+    notify?.(key);
+  };
+  return {
+    getCustomerToken: () => io.get(tokenName),
+    setCustomerToken: (t) => write(tokenName, t, "customerToken"),
+    getCartId: () => io.get(STORAGE_KEYS.cartId),
+    setCartId: (id) => write(STORAGE_KEYS.cartId, id, "cartId"),
+    getAnonymousSession: () => parseAnonymousSession(io.get(STORAGE_KEYS.anonymousSession)),
+    setAnonymousSession: (s) => write(
+      STORAGE_KEYS.anonymousSession,
+      s === null ? null : JSON.stringify({ refreshToken: s.refreshToken, sessionId: s.sessionId }),
+      "anonymousSession"
+    ),
+    getSiteCode: () => io.get(STORAGE_KEYS.siteCode),
+    setSiteCode: (code) => write(STORAGE_KEYS.siteCode, code, "siteCode"),
+    getLanguage: () => io.get(STORAGE_KEYS.language),
+    setLanguage: (l) => write(STORAGE_KEYS.language, l, "language"),
+    getActiveLegalEntityId: () => io.get(STORAGE_KEYS.activeLegalEntityId),
+    setActiveLegalEntityId: (id) => write(STORAGE_KEYS.activeLegalEntityId, id, "activeLegalEntityId"),
+    getRefreshToken: () => io.get(STORAGE_KEYS.refreshToken),
+    setRefreshToken: (t) => write(STORAGE_KEYS.refreshToken, t, "refreshToken"),
+    getSaasToken: () => io.get(STORAGE_KEYS.saasToken),
+    setSaasToken: (t) => write(STORAGE_KEYS.saasToken, t, "saasToken")
+  };
+}
+function createServerStorage(jar) {
+  return createCookieBackedStorage(
+    jar.set !== void 0 ? { get: jar.get, set: jar.set } : { get: jar.get }
+  );
+}
+function serverAuth(storage) {
+  const token = storage.getCustomerToken();
+  return token !== null ? auth.customer(token) : auth.anonymous();
+}
+
 // src/core/sse.ts
 function parseFrame(frame) {
   const ev = { data: "" };
@@ -893,7 +965,7 @@ var HttpClient = class {
 };
 
 // package.json
-var version = "2.30.0";
+var version = "2.31.0";
 
 // src/version.ts
 var SDK_VERSION = version;
@@ -8516,6 +8588,7 @@ exports.QuoteService = QuoteService;
 exports.RagIndexerService = RagIndexerService;
 exports.ReturnsService = ReturnsService;
 exports.RewardPointsService = RewardPointsService;
+exports.STORAGE_KEYS = STORAGE_KEYS;
 exports.SalesOrdersService = SalesOrdersService;
 exports.SchemaService = SchemaService;
 exports.SegmentService = SegmentService;
@@ -8532,17 +8605,21 @@ exports.VendorService = VendorService;
 exports.WebhookService = WebhookService;
 exports.auth = auth;
 exports.createConsoleLogger = createConsoleLogger;
+exports.createCookieBackedStorage = createCookieBackedStorage;
 exports.createCore = createCore;
 exports.createEmporixClient = createEmporixClient;
 exports.createNoopLogger = createNoopLogger;
+exports.createServerStorage = createServerStorage;
 exports.errorFromResponse = errorFromResponse;
 exports.iterateAll = iterateAll;
+exports.parseAnonymousSession = parseAnonymousSession;
 exports.pickFee = pickFee;
 exports.productIdFromYrn = productIdFromYrn;
 exports.redact = redact;
 exports.resolveQuery = resolveQuery;
 exports.resolveToken = resolveToken;
 exports.resolveZone = resolveZone;
+exports.serverAuth = serverAuth;
 exports.validateConfig = validateConfig;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map