@weaverse/hydrogen 5.16.2 → 5.16.3

package/dist/index.mjs

@@ -251,6 +251,67 @@ function hasWeaverseStudio(window2) {
   return "weaverseStudio" in window2 && typeof window2.weaverseStudio === "object";
 }
 
+// src/utils/studio-script-src.ts
+var DEFAULT_WEAVERSE_HOST = "https://studio.weaverse.io";
+var TRUSTED_STUDIO_DOMAINS = ["weaverse.io", "weaverse.dev"];
+function isLoopbackHostname(hostname) {
+  return hostname === "localhost" || hostname === "127.0.0.1" || hostname.endsWith(".localhost");
+}
+function isTrustedStudioHost(host, options) {
+  let parsed;
+  try {
+    parsed = new URL(host);
+  } catch {
+    return false;
+  }
+  let { hostname, protocol } = parsed;
+  if (options?.allowLoopback && isLoopbackHostname(hostname)) {
+    return protocol === "http:" || protocol === "https:";
+  }
+  if (protocol !== "https:") {
+    return false;
+  }
+  return TRUSTED_STUDIO_DOMAINS.some(
+    (domain) => hostname === domain || hostname.endsWith(`.${domain}`)
+  );
+}
+function getStudioScriptSrc(mode) {
+  let {
+    isDesignMode,
+    isPreviewMode,
+    isRevisionPreview,
+    weaverseHost,
+    weaverseVersion
+  } = mode;
+  let base = `${weaverseHost}/static/studio/hydrogen`;
+  let version = `?v=${weaverseVersion}`;
+  if (isRevisionPreview || isPreviewMode) {
+    return `${base}/preview.js${version}`;
+  }
+  if (isDesignMode) {
+    return `${base}/index.js${version}`;
+  }
+  return null;
+}
+function resolveStudioScriptSrc(search, storefrontHostname = "") {
+  let params = new URLSearchParams(search);
+  let last = (key) => params.getAll(key).at(-1);
+  let host = last("weaverseHost");
+  if (host) {
+    let allowLoopback = isLoopbackHostname(storefrontHostname);
+    if (!isTrustedStudioHost(host, { allowLoopback })) {
+      return null;
+    }
+  }
+  return getStudioScriptSrc({
+    isDesignMode: last("isDesignMode") === "true",
+    isPreviewMode: last("isPreviewMode") === "true",
+    isRevisionPreview: params.has("__revisionId"),
+    weaverseHost: host || DEFAULT_WEAVERSE_HOST,
+    weaverseVersion: last("weaverseVersion") || ""
+  });
+}
+
 // src/utils/index.ts
 var warnedTypes = /* @__PURE__ */ new Set();
 function logOnce(type, message) {
@@ -314,8 +375,9 @@ function getWeaverseConfigs(request, env) {
   let url = new URL(request.url);
   let isRevisionPreview = url.searchParams.has("__revisionId");
   let configuredWeaverseHost = WEAVERSE_HOST || envFromProcess.WEAVERSE_HOST;
-  let resolvedWeaverseHost = weaverseHost || configuredWeaverseHost || "https://studio.weaverse.io";
-  let resolvedWeaverseApiBase = weaverseHost ? weaverseHost : WEAVERSE_PUBLIC_API_BASE || envFromProcess.WEAVERSE_PUBLIC_API_BASE || (configuredWeaverseHost && configuredWeaverseHost !== "https://studio.weaverse.io" ? configuredWeaverseHost : "https://api.weaverse.io");
+  let trustedUrlHost = typeof weaverseHost === "string" && isTrustedStudioHost(weaverseHost) ? weaverseHost : "";
+  let resolvedWeaverseHost = trustedUrlHost || configuredWeaverseHost || "https://studio.weaverse.io";
+  let resolvedWeaverseApiBase = trustedUrlHost ? trustedUrlHost : WEAVERSE_PUBLIC_API_BASE || envFromProcess.WEAVERSE_PUBLIC_API_BASE || (configuredWeaverseHost && configuredWeaverseHost !== "https://studio.weaverse.io" ? configuredWeaverseHost : "https://api.weaverse.io");
   return {
     projectId: weaverseProjectId || WEAVERSE_PROJECT_ID || envFromProcess.WEAVERSE_PROJECT_ID || "",
     weaverseHost: resolvedWeaverseHost,
@@ -720,6 +782,16 @@ function waitForStudio() {
     check();
   });
 }
+function useStudioConnect() {
+  let { search } = useLocation();
+  useEffect(() => {
+    let hostname = typeof window === "undefined" ? "" : window.location.hostname;
+    let src = resolveStudioScriptSrc(search, hostname);
+    if (src) {
+      loadScript(src).catch(console.error);
+    }
+  }, [search]);
+}
 function useStudio(weaverse) {
   let { revalidate } = useRevalidator();
   let navigation = useNavigation();
@@ -735,22 +807,31 @@ function useStudio(weaverse) {
     isRevisionPreview
   } = weaverse;
   useEffect(() => {
-    if (navigation.state === "idle") {
-      if (isRevisionPreview || isPreviewMode) {
-        let previewSrc = `${weaverseHost}/static/studio/hydrogen/preview.js?v=${weaverseVersion}`;
-        loadScript(previewSrc).catch(console.error);
-      } else if (isDesignMode) {
-        weaverse.internal = {
-          ...weaverse.internal,
-          navigate,
-          revalidate,
-          merchantOverrides,
-          themeSettingsStore,
-          themeTextStore
-        };
-        let studioSrc = `${weaverseHost}/static/studio/hydrogen/index.js?v=${weaverseVersion}`;
-        loadScript(studioSrc).then(waitForStudio).then((studio) => studio?.init(weaverse)).catch(console.error);
-      }
+    if (navigation.state !== "idle") {
+      return;
+    }
+    let src = getStudioScriptSrc({
+      isDesignMode,
+      isPreviewMode,
+      isRevisionPreview,
+      weaverseHost,
+      weaverseVersion
+    });
+    if (!src) {
+      return;
+    }
+    if (isRevisionPreview || isPreviewMode) {
+      loadScript(src).catch(console.error);
+    } else {
+      weaverse.internal = {
+        ...weaverse.internal,
+        navigate,
+        revalidate,
+        merchantOverrides,
+        themeSettingsStore,
+        themeTextStore
+      };
+      loadScript(src).then(waitForStudio).then((studio) => studio?.init(weaverse)).catch(console.error);
     }
   }, [pathname, search, navigation.state]);
   usePixel(weaverse);
@@ -959,6 +1040,10 @@ var StudioBridge = memo(({ context }) => {
   useStudio(context);
   return null;
 });
+var StudioConnect = memo(() => {
+  useStudioConnect();
+  return null;
+});
 var registeredComponentLists = /* @__PURE__ */ new WeakSet();
 function RenderRoot(props) {
   const { data, components, dataContext } = props;
@@ -1046,14 +1131,17 @@ function withWeaverse(Component, options) {
     if (!themeTextStoreRef.current) {
       themeTextStoreRef.current = new ThemeTextStore();
     }
-    return /* @__PURE__ */ jsx(ThemeSettingsStoreContext.Provider, { value: themeSettingsStore, children: /* @__PURE__ */ jsx(
+    return /* @__PURE__ */ jsx(ThemeSettingsStoreContext.Provider, { value: themeSettingsStore, children: /* @__PURE__ */ jsxs(
       ThemeTextProvider,
       {
         merchantOverrides: themeTextData.merchantOverrides,
         staticContent: themeTextData.staticContent,
         t: options?.t,
         themeTextStore: themeTextStoreRef.current,
-        children: /* @__PURE__ */ jsx(Component, { ...props })
+        children: [
+          /* @__PURE__ */ jsx(StudioConnect, {}),
+          /* @__PURE__ */ jsx(Component, { ...props })
+        ]
       }
     ) });
   };