@vue-storefront/next 8.0.0-next.3 → 8.0.0-next.6

package/dist/asyncToGenerator-BI_VpA62.cjs

@@ -0,0 +1,32 @@
+//#region \0@oxc-project+runtime@0.115.0/helpers/asyncToGenerator.js
+function asyncGeneratorStep(n, t, e, r, o, a, c) {
+	try {
+		var i = n[a](c), u = i.value;
+	} catch (n) {
+		e(n);
+		return;
+	}
+	i.done ? t(u) : Promise.resolve(u).then(r, o);
+}
+function _asyncToGenerator(n) {
+	return function() {
+		var t = this, e = arguments;
+		return new Promise(function(r, o) {
+			var a = n.apply(t, e);
+			function _next(n) {
+				asyncGeneratorStep(a, r, o, _next, _throw, "next", n);
+			}
+			function _throw(n) {
+				asyncGeneratorStep(a, r, o, _next, _throw, "throw", n);
+			}
+			_next(void 0);
+		});
+	};
+}
+//#endregion
+Object.defineProperty(exports, "_asyncToGenerator", {
+	enumerable: true,
+	get: function() {
+		return _asyncToGenerator;
+	}
+});

package/dist/asyncToGenerator-Co5zHbo3.mjs

@@ -0,0 +1,27 @@
+//#region \0@oxc-project+runtime@0.115.0/helpers/asyncToGenerator.js
+function asyncGeneratorStep(n, t, e, r, o, a, c) {
+	try {
+		var i = n[a](c), u = i.value;
+	} catch (n) {
+		e(n);
+		return;
+	}
+	i.done ? t(u) : Promise.resolve(u).then(r, o);
+}
+function _asyncToGenerator(n) {
+	return function() {
+		var t = this, e = arguments;
+		return new Promise(function(r, o) {
+			var a = n.apply(t, e);
+			function _next(n) {
+				asyncGeneratorStep(a, r, o, _next, _throw, "next", n);
+			}
+			function _throw(n) {
+				asyncGeneratorStep(a, r, o, _next, _throw, "throw", n);
+			}
+			_next(void 0);
+		});
+	};
+}
+//#endregion
+export { _asyncToGenerator as t };

package/dist/client.cjs

@@ -206,7 +206,79 @@ function createAlokaiContext() {
 	}, rest);
 }
 //#endregion
+//#region src/storefront-events.ts
+/**
+* Creates a typed pub/sub for storefront domain events. The app defines its own event map and creates
+* the bound helpers once; modules (analytics, personalization, search) emit and subscribe without the
+* core knowing who listens. Client-only — the subscriber registry is created per call, so emitting from
+* a server component reaches no listeners.
+*
+* @example
+* ```ts
+* 'use client';
+* import { createStorefrontEvents } from '@vue-storefront/next/client';
+*
+* export interface StorefrontEventMap {
+*   'cart:productAdded': { productId: string };
+* }
+*
+* export const { emitStorefrontEvent, subscribeStorefrontEvent, useStorefrontEvent } =
+*   createStorefrontEvents<StorefrontEventMap>();
+* ```
+*/
+function createStorefrontEvents() {
+	const handlers = /* @__PURE__ */ new Map();
+	/**
+	* Emit a domain event. No-op when nothing is subscribed.
+	*/
+	function emitStorefrontEvent(type, payload) {
+		var _handlers$get;
+		(_handlers$get = handlers.get(type)) === null || _handlers$get === void 0 || _handlers$get.forEach((handler) => handler(payload));
+	}
+	/**
+	* Subscribe to a domain event. Returns an unsubscribe function.
+	*/
+	function subscribeStorefrontEvent(type, handler) {
+		var _handlers$get2;
+		const set = (_handlers$get2 = handlers.get(type)) !== null && _handlers$get2 !== void 0 ? _handlers$get2 : /* @__PURE__ */ new Set();
+		set.add(handler);
+		handlers.set(type, set);
+		return () => set.delete(handler);
+	}
+	/**
+	* Subscribe to a domain event for the lifetime of the calling component. The handler is read through
+	* a ref so an inline (unmemoized) handler doesn't re-subscribe on every render.
+	*/
+	function useStorefrontEvent(type, handler) {
+		const handlerRef = (0, react.useRef)(handler);
+		handlerRef.current = handler;
+		(0, react.useEffect)(() => subscribeStorefrontEvent(type, (payload) => handlerRef.current(payload)), [type]);
+	}
+	/**
+	* Emits a domain event once on mount. Lets server-rendered pages (which cannot call the client
+	* emitter directly) announce page-level events such as a PDP view. Give it a `key` tied to the entity
+	* (e.g. the product id + sku) so it remounts — and re-emits — when navigating between same-route
+	* pages. A ref guard keeps React Strict Mode's double-invoked effect (dev) to a single emit per mount.
+	*/
+	function StorefrontEventEmitter({ event, payload }) {
+		const didEmit = (0, react.useRef)(false);
+		(0, react.useEffect)(() => {
+			if (didEmit.current) return;
+			didEmit.current = true;
+			emitStorefrontEvent(event, payload);
+		}, []);
+		return null;
+	}
+	return {
+		emitStorefrontEvent,
+		StorefrontEventEmitter,
+		subscribeStorefrontEvent,
+		useStorefrontEvent
+	};
+}
+//#endregion
 exports.__toESM = __toESM;
 exports.createAlokaiContext = createAlokaiContext;
 exports.createSfStateProvider = createSfStateProvider;
+exports.createStorefrontEvents = createStorefrontEvents;
 exports.env = require_env.env;

package/dist/client.d.cts

@@ -40,4 +40,41 @@ import { SDKApi } from "@alokai/connect/sdk";
  */
 declare function createAlokaiContext<TSdk extends SDKApi<any>, TSfContract extends SfContract>(): CreateSdkContextReturn<TSdk, TSfContract>;
 //#endregion
-export { type CreateSdkContextReturn, Maybe, SfContract, SfState, SfStateProps, createAlokaiContext, createSfStateProvider, env };
+//#region src/storefront-events.d.ts
+/**
+ * Handler for a storefront event of type `TType` in the event map `TMap`.
+ */
+type StorefrontEventHandler<TMap, TType extends keyof TMap> = (payload: TMap[TType]) => void;
+/**
+ * Creates a typed pub/sub for storefront domain events. The app defines its own event map and creates
+ * the bound helpers once; modules (analytics, personalization, search) emit and subscribe without the
+ * core knowing who listens. Client-only — the subscriber registry is created per call, so emitting from
+ * a server component reaches no listeners.
+ *
+ * @example
+ * ```ts
+ * 'use client';
+ * import { createStorefrontEvents } from '@vue-storefront/next/client';
+ *
+ * export interface StorefrontEventMap {
+ *   'cart:productAdded': { productId: string };
+ * }
+ *
+ * export const { emitStorefrontEvent, subscribeStorefrontEvent, useStorefrontEvent } =
+ *   createStorefrontEvents<StorefrontEventMap>();
+ * ```
+ */
+declare function createStorefrontEvents<TMap>(): {
+  emitStorefrontEvent: <TType extends keyof TMap>(type: TType, payload: TMap[TType]) => void;
+  StorefrontEventEmitter: <TType extends keyof TMap>({
+    event,
+    payload
+  }: {
+    event: TType;
+    payload: TMap[TType];
+  }) => null;
+  subscribeStorefrontEvent: <TType extends keyof TMap>(type: TType, handler: StorefrontEventHandler<TMap, TType>) => () => void;
+  useStorefrontEvent: <TType extends keyof TMap>(type: TType, handler: StorefrontEventHandler<TMap, TType>) => void;
+};
+//#endregion
+export { type CreateSdkContextReturn, Maybe, SfContract, SfState, SfStateProps, StorefrontEventHandler, createAlokaiContext, createSfStateProvider, createStorefrontEvents, env };

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { c as SfContract, d as createSfStateProvider, l as SfState, r as CreateSdkContextReturn, s as Maybe, t as env, u as SfStateProps } from "./index-BPhD221E.mjs";
+import { c as SfContract, d as createSfStateProvider, l as SfState, r as CreateSdkContextReturn, s as Maybe, t as env, u as SfStateProps } from "./index-7rf5ab-V.mjs";
 import { SDKApi } from "@alokai/connect/sdk";
 
 //#region src/alokai-provider.d.ts
@@ -40,4 +40,41 @@ import { SDKApi } from "@alokai/connect/sdk";
  */
 declare function createAlokaiContext<TSdk extends SDKApi<any>, TSfContract extends SfContract>(): CreateSdkContextReturn<TSdk, TSfContract>;
 //#endregion
-export { type CreateSdkContextReturn, Maybe, SfContract, SfState, SfStateProps, createAlokaiContext, createSfStateProvider, env };
+//#region src/storefront-events.d.ts
+/**
+ * Handler for a storefront event of type `TType` in the event map `TMap`.
+ */
+type StorefrontEventHandler<TMap, TType extends keyof TMap> = (payload: TMap[TType]) => void;
+/**
+ * Creates a typed pub/sub for storefront domain events. The app defines its own event map and creates
+ * the bound helpers once; modules (analytics, personalization, search) emit and subscribe without the
+ * core knowing who listens. Client-only — the subscriber registry is created per call, so emitting from
+ * a server component reaches no listeners.
+ *
+ * @example
+ * ```ts
+ * 'use client';
+ * import { createStorefrontEvents } from '@vue-storefront/next/client';
+ *
+ * export interface StorefrontEventMap {
+ *   'cart:productAdded': { productId: string };
+ * }
+ *
+ * export const { emitStorefrontEvent, subscribeStorefrontEvent, useStorefrontEvent } =
+ *   createStorefrontEvents<StorefrontEventMap>();
+ * ```
+ */
+declare function createStorefrontEvents<TMap>(): {
+  emitStorefrontEvent: <TType extends keyof TMap>(type: TType, payload: TMap[TType]) => void;
+  StorefrontEventEmitter: <TType extends keyof TMap>({
+    event,
+    payload
+  }: {
+    event: TType;
+    payload: TMap[TType];
+  }) => null;
+  subscribeStorefrontEvent: <TType extends keyof TMap>(type: TType, handler: StorefrontEventHandler<TMap, TType>) => () => void;
+  useStorefrontEvent: <TType extends keyof TMap>(type: TType, handler: StorefrontEventHandler<TMap, TType>) => void;
+};
+//#endregion
+export { type CreateSdkContextReturn, Maybe, SfContract, SfState, SfStateProps, StorefrontEventHandler, createAlokaiContext, createSfStateProvider, createStorefrontEvents, env };

package/dist/client.mjs

@@ -2,7 +2,7 @@
 import { n as _objectSpread2, r as PUBLIC_ENV_KEY, t as env } from "./env-9UiGUnbx.mjs";
 import { AlokaiInstrumentation } from "@alokai/instrumentation-next-component";
 import Script from "next/script";
-import React, { createContext, useContext, useRef } from "react";
+import React, { createContext, useContext, useEffect, useRef } from "react";
 import { createStore, useStore } from "zustand";
 //#region src/env/get-public-env.ts
 /**
@@ -181,4 +181,75 @@ function createAlokaiContext() {
 	}, rest);
 }
 //#endregion
-export { createAlokaiContext, createSfStateProvider, env };
+//#region src/storefront-events.ts
+/**
+* Creates a typed pub/sub for storefront domain events. The app defines its own event map and creates
+* the bound helpers once; modules (analytics, personalization, search) emit and subscribe without the
+* core knowing who listens. Client-only — the subscriber registry is created per call, so emitting from
+* a server component reaches no listeners.
+*
+* @example
+* ```ts
+* 'use client';
+* import { createStorefrontEvents } from '@vue-storefront/next/client';
+*
+* export interface StorefrontEventMap {
+*   'cart:productAdded': { productId: string };
+* }
+*
+* export const { emitStorefrontEvent, subscribeStorefrontEvent, useStorefrontEvent } =
+*   createStorefrontEvents<StorefrontEventMap>();
+* ```
+*/
+function createStorefrontEvents() {
+	const handlers = /* @__PURE__ */ new Map();
+	/**
+	* Emit a domain event. No-op when nothing is subscribed.
+	*/
+	function emitStorefrontEvent(type, payload) {
+		var _handlers$get;
+		(_handlers$get = handlers.get(type)) === null || _handlers$get === void 0 || _handlers$get.forEach((handler) => handler(payload));
+	}
+	/**
+	* Subscribe to a domain event. Returns an unsubscribe function.
+	*/
+	function subscribeStorefrontEvent(type, handler) {
+		var _handlers$get2;
+		const set = (_handlers$get2 = handlers.get(type)) !== null && _handlers$get2 !== void 0 ? _handlers$get2 : /* @__PURE__ */ new Set();
+		set.add(handler);
+		handlers.set(type, set);
+		return () => set.delete(handler);
+	}
+	/**
+	* Subscribe to a domain event for the lifetime of the calling component. The handler is read through
+	* a ref so an inline (unmemoized) handler doesn't re-subscribe on every render.
+	*/
+	function useStorefrontEvent(type, handler) {
+		const handlerRef = useRef(handler);
+		handlerRef.current = handler;
+		useEffect(() => subscribeStorefrontEvent(type, (payload) => handlerRef.current(payload)), [type]);
+	}
+	/**
+	* Emits a domain event once on mount. Lets server-rendered pages (which cannot call the client
+	* emitter directly) announce page-level events such as a PDP view. Give it a `key` tied to the entity
+	* (e.g. the product id + sku) so it remounts — and re-emits — when navigating between same-route
+	* pages. A ref guard keeps React Strict Mode's double-invoked effect (dev) to a single emit per mount.
+	*/
+	function StorefrontEventEmitter({ event, payload }) {
+		const didEmit = useRef(false);
+		useEffect(() => {
+			if (didEmit.current) return;
+			didEmit.current = true;
+			emitStorefrontEvent(event, payload);
+		}, []);
+		return null;
+	}
+	return {
+		emitStorefrontEvent,
+		StorefrontEventEmitter,
+		subscribeStorefrontEvent,
+		useStorefrontEvent
+	};
+}
+//#endregion
+export { createAlokaiContext, createSfStateProvider, createStorefrontEvents, env };

package/dist/index.cjs

@@ -1,6 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_env = require("./env-BK6gqfbp.cjs");
 require("./client.cjs");
+const require_asyncToGenerator = require("./asyncToGenerator-BI_VpA62.cjs");
 let _alokai_connect_logger = require("@alokai/connect/logger");
 let _alokai_connect_sdk = require("@alokai/connect/sdk");
 //#region src/logger/injectMetadata.ts
@@ -82,12 +83,9 @@ function deriveMediaHostEnvName(hostKey) {
 	return `NEXT_PUBLIC_${hostKey.replaceAll("-", "_").toUpperCase()}_MEDIA_HOST`;
 }
 const HOST_KEY_PATTERN = /^(?=.*[a-z])[a-z0-9-]+$/;
-const ENV_NAME_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
 function resolveHost(key, config) {
-	var _config$mediaHostEnvN, _config$variant, _config$buildUpstream, _config$cacheControl, _config$encodePath;
+	var _config$variant, _config$buildUpstream, _config$cacheControl, _config$encodePath;
 	if (!HOST_KEY_PATTERN.test(key)) throw new Error(`Invalid image optimizer host key "${key}". Use lowercase letters, digits and hyphens only - the key becomes a URL segment and an env variable name fragment.`);
-	const mediaHostEnvName = (_config$mediaHostEnvN = config.mediaHostEnvName) !== null && _config$mediaHostEnvN !== void 0 ? _config$mediaHostEnvN : deriveMediaHostEnvName(key);
-	if (!ENV_NAME_PATTERN.test(mediaHostEnvName)) throw new Error(`Invalid mediaHostEnvName "${mediaHostEnvName}" for host "${key}". Pass the NAME of the env variable (e.g. "NEXT_PUBLIC_CT_MEDIA_HOST"), not its value.`);
 	const variant = variants[(_config$variant = config.variant) !== null && _config$variant !== void 0 ? _config$variant : "default"];
 	return {
 		buildUpstreamUrl: (_config$buildUpstream = config.buildUpstreamUrl) !== null && _config$buildUpstream !== void 0 ? _config$buildUpstream : variant.buildUpstreamUrl,
@@ -95,33 +93,7 @@ function resolveHost(key, config) {
 		encodePath: (_config$encodePath = config.encodePath) !== null && _config$encodePath !== void 0 ? _config$encodePath : variant.encodePath,
 		key,
 		loader: config.loader,
-		mediaHostEnvName
-	};
-}
-//#endregion
-//#region \0@oxc-project+runtime@0.115.0/helpers/asyncToGenerator.js
-function asyncGeneratorStep(n, t, e, r, o, a, c) {
-	try {
-		var i = n[a](c), u = i.value;
-	} catch (n) {
-		e(n);
-		return;
-	}
-	i.done ? t(u) : Promise.resolve(u).then(r, o);
-}
-function _asyncToGenerator(n) {
-	return function() {
-		var t = this, e = arguments;
-		return new Promise(function(r, o) {
-			var a = n.apply(t, e);
-			function _next(n) {
-				asyncGeneratorStep(a, r, o, _next, _throw, "next", n);
-			}
-			function _throw(n) {
-				asyncGeneratorStep(a, r, o, _next, _throw, "throw", n);
-			}
-			_next(void 0);
-		});
+		mediaHostEnvName: deriveMediaHostEnvName(key)
 	};
 }
 //#endregion
@@ -168,11 +140,15 @@ function createImageOptimizer(config) {
 		"the media host URL, e.g. \"ct\" reads NEXT_PUBLIC_CT_MEDIA_HOST."
 	].join("\n"));
 	const hosts = resolveHosts(config.hosts);
+	const warnedMissingHosts = /* @__PURE__ */ new Set();
 	function loader({ quality, src, width }) {
 		for (const host of hosts) {
 			const mediaHost = require_env.env(host.mediaHostEnvName);
 			if (!mediaHost) {
-				getLogger().warning(`${host.mediaHostEnvName} is not defined, skipping image optimization for host "${host.key}".`);
+				if (!warnedMissingHosts.has(host.key)) {
+					warnedMissingHosts.add(host.key);
+					getLogger().warning(`${host.mediaHostEnvName} is not defined, skipping image optimization for host "${host.key}".`);
+				}
 				continue;
 			}
 			const normalizedHost = mediaHost.replace(/\/$/, "");
@@ -196,7 +172,7 @@ function createImageOptimizer(config) {
 		return _GET.apply(this, arguments);
 	}
 	function _GET() {
-		_GET = _asyncToGenerator(function* (_request, { params }) {
+		_GET = require_asyncToGenerator._asyncToGenerator(function* (_request, { params }) {
 			var _env, _upstream$headers$get;
 			const { host: hostKey, path } = yield params;
 			const host = hosts.find((entry) => entry.key === hostKey);
@@ -206,11 +182,12 @@ function createImageOptimizer(config) {
 			if (!mediaHost) return errorResponse(`${host.mediaHostEnvName} is not defined`, 500);
 			let upstream;
 			try {
-				upstream = yield fetch(host.buildUpstreamUrl(mediaHost, path));
+				upstream = yield fetch(host.buildUpstreamUrl(mediaHost, path), { redirect: "manual" });
 			} catch (error) {
 				getLogger().error(`Failed to fetch upstream image for host "${hostKey}": ${String(error)}`);
 				return errorResponse("Failed to fetch upstream image", 502);
 			}
+			if (upstream.status >= 300 && upstream.status < 400) return errorResponse("Upstream redirect is not allowed", 502);
 			return new Response(upstream.body, {
 				headers: {
 					"cache-control": upstream.ok ? host.cacheControl : ERROR_CACHE_CONTROL,
@@ -311,7 +288,7 @@ function normalizeRequestHeaders(requestHeaders) {
 }
 function resolveDynamicContext(context) {
 	return require_env._objectSpread2(require_env._objectSpread2({}, context), {}, { getRequestHeaders() {
-		return _asyncToGenerator(function* () {
+		return require_asyncToGenerator._asyncToGenerator(function* () {
 			var _context$getRequestHe;
 			const normalizedHeaders = normalizeRequestHeaders(yield (_context$getRequestHe = context.getRequestHeaders) === null || _context$getRequestHe === void 0 ? void 0 : _context$getRequestHe.call(context));
 			const requestHeaders = Object.fromEntries(Object.entries(normalizedHeaders).filter(([key]) => !BLACKLISTED_HEADERS.has(key)));

package/dist/index.d.cts

@@ -35,7 +35,7 @@ type ImageOptimizerHostConfig = ImageOptimizerDelegatedHostConfig | ImageOptimiz
  * delegated to the given loader and never proxied, so the proxy-side options
  * do not apply.
  */
-interface ImageOptimizerDelegatedHostConfig extends ImageOptimizerHostBaseConfig {
+interface ImageOptimizerDelegatedHostConfig {
   buildUpstreamUrl?: never;
   cacheControl?: never;
   encodePath?: never;
@@ -50,7 +50,7 @@ interface ImageOptimizerDelegatedHostConfig extends ImageOptimizerHostBaseConfig
  * Host proxied through `/img-proxy/{key}/...` so the image CDN in front of
  * the storefront (Alokai Image Optimizer) can transform the response.
  */
-interface ImageOptimizerProxiedHostConfig extends ImageOptimizerHostBaseConfig {
+interface ImageOptimizerProxiedHostConfig {
   /** Server-side hook overriding the variant's upstream URL reconstruction. */
   buildUpstreamUrl?: BuildUpstreamUrlHook;
   /**
@@ -71,15 +71,6 @@ interface ImageOptimizerProxiedHostConfig extends ImageOptimizerHostBaseConfig {
    */
   variant?: ImageOptimizerVariant;
 }
-interface ImageOptimizerHostBaseConfig {
-  /**
-   * NAME of the env variable holding the media host URL (not the URL
-   * itself).
-   *
-   * @default `NEXT_PUBLIC_{KEY}_MEDIA_HOST` derived from the host key
-   */
-  mediaHostEnvName?: string;
-}
 type ImageOptimizerVariant = "default" | "sapcc";
 /**
  * Builds the path emitted after `/img-proxy/{key}` on the loader (client)

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { a as CreateSdkReturn, i as CreateSdkOptions, n as Config, o as InjectedContext, t as env } from "./index-BPhD221E.mjs";
+import { a as CreateSdkReturn, i as CreateSdkOptions, n as Config, o as InjectedContext, t as env } from "./index-7rf5ab-V.mjs";
 import * as _alokai_connect_logger0 from "@alokai/connect/logger";
 import { buildModule, defineGetConfigSwitcherHeader } from "@alokai/connect/sdk";
 import { ImageLoaderProps } from "next/image";
@@ -35,7 +35,7 @@ type ImageOptimizerHostConfig = ImageOptimizerDelegatedHostConfig | ImageOptimiz
  * delegated to the given loader and never proxied, so the proxy-side options
  * do not apply.
  */
-interface ImageOptimizerDelegatedHostConfig extends ImageOptimizerHostBaseConfig {
+interface ImageOptimizerDelegatedHostConfig {
   buildUpstreamUrl?: never;
   cacheControl?: never;
   encodePath?: never;
@@ -50,7 +50,7 @@ interface ImageOptimizerDelegatedHostConfig extends ImageOptimizerHostBaseConfig
  * Host proxied through `/img-proxy/{key}/...` so the image CDN in front of
  * the storefront (Alokai Image Optimizer) can transform the response.
  */
-interface ImageOptimizerProxiedHostConfig extends ImageOptimizerHostBaseConfig {
+interface ImageOptimizerProxiedHostConfig {
   /** Server-side hook overriding the variant's upstream URL reconstruction. */
   buildUpstreamUrl?: BuildUpstreamUrlHook;
   /**
@@ -71,15 +71,6 @@ interface ImageOptimizerProxiedHostConfig extends ImageOptimizerHostBaseConfig {
    */
   variant?: ImageOptimizerVariant;
 }
-interface ImageOptimizerHostBaseConfig {
-  /**
-   * NAME of the env variable holding the media host URL (not the URL
-   * itself).
-   *
-   * @default `NEXT_PUBLIC_{KEY}_MEDIA_HOST` derived from the host key
-   */
-  mediaHostEnvName?: string;
-}
 type ImageOptimizerVariant = "default" | "sapcc";
 /**
  * Builds the path emitted after `/img-proxy/{key}` on the loader (client)

package/dist/index.mjs

@@ -1,4 +1,5 @@
 import { n as _objectSpread2, t as env } from "./env-9UiGUnbx.mjs";
+import { t as _asyncToGenerator } from "./asyncToGenerator-Co5zHbo3.mjs";
 import { LoggerFactory, LoggerType } from "@alokai/connect/logger";
 import { buildModule, defineGetConfigSwitcherHeader, initSDK, middlewareModule } from "@alokai/connect/sdk";
 //#region src/logger/injectMetadata.ts
@@ -80,12 +81,9 @@ function deriveMediaHostEnvName(hostKey) {
 	return `NEXT_PUBLIC_${hostKey.replaceAll("-", "_").toUpperCase()}_MEDIA_HOST`;
 }
 const HOST_KEY_PATTERN = /^(?=.*[a-z])[a-z0-9-]+$/;
-const ENV_NAME_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
 function resolveHost(key, config) {
-	var _config$mediaHostEnvN, _config$variant, _config$buildUpstream, _config$cacheControl, _config$encodePath;
+	var _config$variant, _config$buildUpstream, _config$cacheControl, _config$encodePath;
 	if (!HOST_KEY_PATTERN.test(key)) throw new Error(`Invalid image optimizer host key "${key}". Use lowercase letters, digits and hyphens only - the key becomes a URL segment and an env variable name fragment.`);
-	const mediaHostEnvName = (_config$mediaHostEnvN = config.mediaHostEnvName) !== null && _config$mediaHostEnvN !== void 0 ? _config$mediaHostEnvN : deriveMediaHostEnvName(key);
-	if (!ENV_NAME_PATTERN.test(mediaHostEnvName)) throw new Error(`Invalid mediaHostEnvName "${mediaHostEnvName}" for host "${key}". Pass the NAME of the env variable (e.g. "NEXT_PUBLIC_CT_MEDIA_HOST"), not its value.`);
 	const variant = variants[(_config$variant = config.variant) !== null && _config$variant !== void 0 ? _config$variant : "default"];
 	return {
 		buildUpstreamUrl: (_config$buildUpstream = config.buildUpstreamUrl) !== null && _config$buildUpstream !== void 0 ? _config$buildUpstream : variant.buildUpstreamUrl,
@@ -93,33 +91,7 @@ function resolveHost(key, config) {
 		encodePath: (_config$encodePath = config.encodePath) !== null && _config$encodePath !== void 0 ? _config$encodePath : variant.encodePath,
 		key,
 		loader: config.loader,
-		mediaHostEnvName
-	};
-}
-//#endregion
-//#region \0@oxc-project+runtime@0.115.0/helpers/asyncToGenerator.js
-function asyncGeneratorStep(n, t, e, r, o, a, c) {
-	try {
-		var i = n[a](c), u = i.value;
-	} catch (n) {
-		e(n);
-		return;
-	}
-	i.done ? t(u) : Promise.resolve(u).then(r, o);
-}
-function _asyncToGenerator(n) {
-	return function() {
-		var t = this, e = arguments;
-		return new Promise(function(r, o) {
-			var a = n.apply(t, e);
-			function _next(n) {
-				asyncGeneratorStep(a, r, o, _next, _throw, "next", n);
-			}
-			function _throw(n) {
-				asyncGeneratorStep(a, r, o, _next, _throw, "throw", n);
-			}
-			_next(void 0);
-		});
+		mediaHostEnvName: deriveMediaHostEnvName(key)
 	};
 }
 //#endregion
@@ -166,11 +138,15 @@ function createImageOptimizer(config) {
 		"the media host URL, e.g. \"ct\" reads NEXT_PUBLIC_CT_MEDIA_HOST."
 	].join("\n"));
 	const hosts = resolveHosts(config.hosts);
+	const warnedMissingHosts = /* @__PURE__ */ new Set();
 	function loader({ quality, src, width }) {
 		for (const host of hosts) {
 			const mediaHost = env(host.mediaHostEnvName);
 			if (!mediaHost) {
-				getLogger().warning(`${host.mediaHostEnvName} is not defined, skipping image optimization for host "${host.key}".`);
+				if (!warnedMissingHosts.has(host.key)) {
+					warnedMissingHosts.add(host.key);
+					getLogger().warning(`${host.mediaHostEnvName} is not defined, skipping image optimization for host "${host.key}".`);
+				}
 				continue;
 			}
 			const normalizedHost = mediaHost.replace(/\/$/, "");
@@ -204,11 +180,12 @@ function createImageOptimizer(config) {
 			if (!mediaHost) return errorResponse(`${host.mediaHostEnvName} is not defined`, 500);
 			let upstream;
 			try {
-				upstream = yield fetch(host.buildUpstreamUrl(mediaHost, path));
+				upstream = yield fetch(host.buildUpstreamUrl(mediaHost, path), { redirect: "manual" });
 			} catch (error) {
 				getLogger().error(`Failed to fetch upstream image for host "${hostKey}": ${String(error)}`);
 				return errorResponse("Failed to fetch upstream image", 502);
 			}
+			if (upstream.status >= 300 && upstream.status < 400) return errorResponse("Upstream redirect is not allowed", 502);
 			return new Response(upstream.body, {
 				headers: {
 					"cache-control": upstream.ok ? host.cacheControl : ERROR_CACHE_CONTROL,

package/dist/server.cjs

@@ -0,0 +1,23 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("./client.cjs");
+const require_asyncToGenerator = require("./asyncToGenerator-BI_VpA62.cjs");
+let next_headers = require("next/headers");
+//#region src/current-path.ts
+/**
+* Returns the current request path (`pathname` + `search`) inside a Server Component, as exposed by
+* {@link createAlokaiMiddleware} on the request headers. Reading it through this helper keeps the
+* underlying header names (`x-pathname` / `x-search`) an implementation detail of the framework.
+*/
+function getCurrentPath() {
+	return _getCurrentPath.apply(this, arguments);
+}
+function _getCurrentPath() {
+	_getCurrentPath = require_asyncToGenerator._asyncToGenerator(function* () {
+		var _requestHeaders$get, _requestHeaders$get2;
+		const requestHeaders = yield (0, next_headers.headers)();
+		return `${(_requestHeaders$get = requestHeaders.get("x-pathname")) !== null && _requestHeaders$get !== void 0 ? _requestHeaders$get : ""}${(_requestHeaders$get2 = requestHeaders.get("x-search")) !== null && _requestHeaders$get2 !== void 0 ? _requestHeaders$get2 : ""}`;
+	});
+	return _getCurrentPath.apply(this, arguments);
+}
+//#endregion
+exports.getCurrentPath = getCurrentPath;

package/dist/server.d.cts

@@ -0,0 +1,9 @@
+//#region src/current-path.d.ts
+/**
+ * Returns the current request path (`pathname` + `search`) inside a Server Component, as exposed by
+ * {@link createAlokaiMiddleware} on the request headers. Reading it through this helper keeps the
+ * underlying header names (`x-pathname` / `x-search`) an implementation detail of the framework.
+ */
+declare function getCurrentPath(): Promise<string>;
+//#endregion
+export { getCurrentPath };

package/dist/server.d.mts

@@ -0,0 +1,9 @@
+//#region src/current-path.d.ts
+/**
+ * Returns the current request path (`pathname` + `search`) inside a Server Component, as exposed by
+ * {@link createAlokaiMiddleware} on the request headers. Reading it through this helper keeps the
+ * underlying header names (`x-pathname` / `x-search`) an implementation detail of the framework.
+ */
+declare function getCurrentPath(): Promise<string>;
+//#endregion
+export { getCurrentPath };

package/dist/server.mjs

@@ -0,0 +1,21 @@
+import { t as _asyncToGenerator } from "./asyncToGenerator-Co5zHbo3.mjs";
+import { headers } from "next/headers";
+//#region src/current-path.ts
+/**
+* Returns the current request path (`pathname` + `search`) inside a Server Component, as exposed by
+* {@link createAlokaiMiddleware} on the request headers. Reading it through this helper keeps the
+* underlying header names (`x-pathname` / `x-search`) an implementation detail of the framework.
+*/
+function getCurrentPath() {
+	return _getCurrentPath.apply(this, arguments);
+}
+function _getCurrentPath() {
+	_getCurrentPath = _asyncToGenerator(function* () {
+		var _requestHeaders$get, _requestHeaders$get2;
+		const requestHeaders = yield headers();
+		return `${(_requestHeaders$get = requestHeaders.get("x-pathname")) !== null && _requestHeaders$get !== void 0 ? _requestHeaders$get : ""}${(_requestHeaders$get2 = requestHeaders.get("x-search")) !== null && _requestHeaders$get2 !== void 0 ? _requestHeaders$get2 : ""}`;
+	});
+	return _getCurrentPath.apply(this, arguments);
+}
+//#endregion
+export { getCurrentPath };

package/package.json

@@ -6,7 +6,7 @@
     "type": "git",
     "url": "git+https://github.com/vuestorefront/enterprise.git"
   },
-  "version": "8.0.0-next.3",
+  "version": "8.0.0-next.6",
   "exports": {
     ".": {
       "types": "./dist/index.d.mts",
@@ -17,6 +17,11 @@
       "types": "./dist/client.d.mts",
       "import": "./dist/client.mjs",
       "require": "./dist/client.cjs"
+    },
+    "./server": {
+      "types": "./dist/server.d.mts",
+      "import": "./dist/server.mjs",
+      "require": "./dist/server.cjs"
     }
   },
   "files": [
@@ -35,7 +40,7 @@
     "zustand": "^4.5.4"
   },
   "devDependencies": {
-    "@alokai/connect": "2.3.0-next.7",
+    "@alokai/connect": "2.3.0-next.10",
     "@shared/typescript-config": "1.0.0",
     "@types/react": "^19",
     "@types/react-dom": "^19",
@@ -50,7 +55,7 @@
     "vitest": "4.0.18"
   },
   "peerDependencies": {
-    "@alokai/connect": "2.3.0-next.7",
+    "@alokai/connect": "2.3.0-next.10",
     "next": "^16.0.0",
     "react": "^19.0.0"
   },