@wix/agent-skills 1.20.0 → 1.20.1

package/skills/wix-headless-fast/references/shared/rest/client.ts

@@ -0,0 +1,155 @@
+// The one auth seam for every Wix REST call — the twin of app/wix/sdk.ts, over fetch. No
+// dependencies. deploy.mjs --stack static copies it flat into js/wix/ next to the core files and
+// strips it to JS (comments kept); a port to another language reads it as the specification.
+// Imports carry the .js suffix so the stripped output runs as browser ESM unchanged.
+//
+// WIX_CLIENT_ID is the public OAuth client id (`appId` in wix.config.json). It is NOT a secret — it
+// only mints anonymous VISITOR tokens — so it is fine in page source. deploy.mjs writes ./config.
+//
+// THE TOKEN IS THE CART. A visitor token is the shopper's identity: their cart lives on it. Mint
+// once per shopper, persist it, refresh it — never mint per request (a fresh token is a new visitor
+// with an empty cart). Where it persists depends on where this code runs:
+//   browser — localStorage, keyed by client id so two sites on one origin don't share a token
+//             (what this file does).
+//   server (a Python/PHP/Go port) — the SHOPPER'S SESSION, one token set per shopper. Never one
+//             process-wide token for everyone: that is one shared cart for all visitors.
+//             This is the only part of a port that isn't line-for-line.
+// docs: https://dev.wix.com/docs/go-headless/coding/authentication/visitors.md
+import { WIX_CLIENT_ID } from "./config.js";
+
+export const WIX_API_BASE = "https://www.wixapis.com";
+const TOKEN_URL = `${WIX_API_BASE}/oauth2/token`;
+const STORAGE_KEY = `wix-visitor-${WIX_CLIENT_ID}`;
+
+export interface Tokens {
+  accessToken: string;
+  refreshToken: string;
+  /** Epoch ms. */
+  expiresAt: number;
+  /** Whose tokens: absent or "visitor" for an anonymous visitor, "member" after a login (a vertical's rest/auth.ts). */
+  role?: "visitor" | "member";
+}
+
+/** Swap this for a server-session-backed store in a port; the browser default is localStorage. */
+export interface TokenStore {
+  load(): Tokens | null;
+  save(tokens: Tokens): void;
+}
+
+let memory: Tokens | null = null;
+export const browserTokenStore: TokenStore = {
+  load() {
+    if (memory) return memory;
+    if (typeof localStorage === "undefined") return null;
+    try {
+      const raw = localStorage.getItem(STORAGE_KEY);
+      if (raw) memory = JSON.parse(raw) as Tokens;
+    } catch {
+      /* disabled or corrupt storage — mint a fresh visitor */
+    }
+    return memory;
+  },
+  save(tokens) {
+    memory = tokens;
+    if (typeof localStorage === "undefined") return;
+    try {
+      localStorage.setItem(STORAGE_KEY, JSON.stringify(tokens));
+    } catch {
+      /* storage full or disabled — the session just won't survive a reload */
+    }
+  },
+};
+let store: TokenStore = browserTokenStore;
+/** A port calls this once with its session-backed store. */
+export function useTokenStore(s: TokenStore): void {
+  store = s;
+}
+
+// POST /oauth2/token — grantType "anonymous" mints a visitor; "refresh_token" renews and KEEPS the
+// identity (a member refresh token yields member tokens); "authorization_code" + codeVerifier turns
+// a login's authorization code into MEMBER tokens (a vertical's rest/auth.ts). `role` records which.
+export async function mintTokens(body: Record<string, string>, role: Tokens["role"] = "visitor"): Promise<Tokens> {
+  const res = await fetch(TOKEN_URL, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ clientId: WIX_CLIENT_ID, ...body }),
+  });
+  if (!res.ok) throw new Error(`Wix auth failed (${res.status}).`);
+  const data = await res.json();
+  return { accessToken: data.access_token, refreshToken: data.refresh_token, expiresAt: Date.now() + data.expires_in * 1000, role };
+}
+
+/** The persisted token set as it is (possibly expired), or null before the first mint. */
+export function loadTokens(): Tokens | null {
+  return store.load();
+}
+
+/** Adopt a token set — a member's after login. Every call from here on runs as that identity. */
+export function setTokens(tokens: Tokens): void {
+  store.save(tokens);
+}
+
+/** Drop the current identity (logout): the next call mints a fresh anonymous visitor. */
+export function clearTokens(): void {
+  store.save({ accessToken: "", refreshToken: "", expiresAt: 0 });
+}
+
+/** A valid access token: cached, refreshed when expired, minted on first use. */
+export async function accessToken(): Promise<string> {
+  const t = store.load();
+  if (t && t.expiresAt - 60_000 > Date.now()) return t.accessToken;
+  let fresh: Tokens | undefined;
+  if (t?.refreshToken) {
+    try {
+      fresh = await mintTokens({ grantType: "refresh_token", refreshToken: t.refreshToken }, t.role ?? "visitor");
+    } catch {
+      /* fall through to a new visitor */
+    }
+  }
+  fresh ??= await mintTokens({ grantType: "anonymous" });
+  store.save(fresh);
+  return fresh.accessToken;
+}
+
+export class WixApiError extends Error {
+  /** The response's `details` as Wix sent it (applicationError, validationError) — for callers that map codes. */
+  public details?: Record<string, any>;
+  constructor(message: string, public status: number, public code?: string, details?: Record<string, any>) {
+    super(message);
+    this.details = details;
+  }
+}
+
+/**
+ * Every Wix call goes through here. `path` is relative to WIX_API_BASE; `query` becomes the query
+ * string (an array repeats the key: fields=A&fields=B). Throws WixApiError on a non-2xx, including
+ * 404 — callers that treat 404 as "not found" catch it. The header carries the RAW access token,
+ * no "Bearer " prefix.
+ */
+export async function wixRequest<T = any>(
+  path: string,
+  { method = "POST", body, query }: { method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE"; body?: unknown; query?: Record<string, string | readonly string[]> } = {},
+): Promise<T> {
+  const url = new URL(path, WIX_API_BASE);
+  for (const [k, v] of Object.entries(query ?? {})) {
+    for (const item of Array.isArray(v) ? v : [v as string]) url.searchParams.append(k, String(item));
+  }
+  const res = await fetch(url, {
+    method,
+    headers: { Authorization: await accessToken(), "Content-Type": "application/json" },
+    body: body === undefined ? undefined : JSON.stringify(body),
+  });
+  if (!res.ok) {
+    let message = "", code: string | undefined, details: Record<string, any> | undefined;
+    try {
+      const j = await res.json();
+      message = j?.message ?? "";
+      code = j?.details?.applicationError?.code;
+      details = j?.details;
+    } catch {
+      /* no JSON body */
+    }
+    throw new WixApiError(message || `${method} ${url.pathname} failed (${res.status}).`, res.status, code, details);
+  }
+  return (res.status === 204 ? null : await res.json()) as T;
+}

package/skills/wix-headless-fast/references/shared/rest/config.ts

@@ -0,0 +1,3 @@
+// Written by install/deploy.mjs --stack static from wix.config.json (or --client-id).
+// The public OAuth client id — not a secret: it only mints anonymous visitor tokens.
+export const WIX_CLIENT_ID: string = "";

package/skills/wix-headless-fast/references/shared/rest/media.ts

@@ -0,0 +1,65 @@
+// Wix media → browser-loadable URLs — the twin of app/wix/media.ts, without the SDK.
+//
+// A media value arrives as either an absolute https://static.wixstatic.com/... URL or a raw
+// `wix:image://v1/<file>/<name>#originWidth=W&originHeight=H` identifier a browser cannot load
+// (ERR_UNKNOWN_URL_SCHEME). The raw form is scaled through this ONE URL shape; any other hand-built
+// form 403s:   https://static.wixstatic.com/media/<file>/v1/fill/w_<W>,h_<H>,al_c,q_90/<file>
+const STATIC = "https://static.wixstatic.com/media";
+const FILL = /\/v1\/fill\/w_\d+,h_\d+/;
+
+export type MediaLike = string | null | undefined | { image?: string | null; url?: string | null };
+
+function rawOf(value: unknown): string {
+  if (!value) return "";
+  if (typeof value === "string") return value;
+  const o = value as { image?: string | null; url?: string | null };
+  return o.image ?? o.url ?? "";
+}
+
+/** Resolve any Wix media value to a URL sized w×h ("" when absent). */
+export function imgSrc(value: unknown, width = 600, height = 600): string {
+  const v = rawOf(value);
+  if (!v) return "";
+  if (v.startsWith("wix:image://")) {
+    const file = v.slice("wix:image://v1/".length).split("/")[0].split("#")[0];
+    return `${STATIC}/${file}/v1/fill/w_${width},h_${height},al_c,q_90/${file}`;
+  }
+  // An absolute Wix media URL (bare, or already scaled to some other size): re-issue it through the
+  // scaler at the requested size, so every image path lands on one shape.
+  const m = v.match(/^https:\/\/static\.wixstatic\.com\/media\/([^/?#]+)/);
+  if (m) return `${STATIC}/${m[1]}/v1/fill/w_${width},h_${height},al_c,q_90/${m[1]}`;
+  return v;
+}
+
+/** srcset candidates at several widths; `ratio` is height/width. "" only when there is no image. */
+export function imgSrcSet(value: unknown, widths: number[] = [320, 480, 640, 960], ratio = 1): string {
+  const v = rawOf(value);
+  if (!v) return "";
+  if (v.startsWith("wix:image://")) return widths.map((w) => `${imgSrc(value, w, Math.round(w * ratio))} ${w}w`).join(", ");
+  if (v.includes("static.wixstatic.com/") && FILL.test(v)) {
+    return widths.map((w) => `${v.replace(FILL, `/v1/fill/w_${w},h_${Math.round(w * ratio)}`)} ${w}w`).join(", ");
+  }
+  return v;
+}
+
+/**
+ * Everything an <img> needs for one Wix image, so a tile can never ship `srcset` without `src`.
+ * Attribute names as HTML spells them — spread into a template or apply with setAttribute:
+ *   `<img ${attrs(imgAttrs(p.imageUrl, "(min-width: 1024px) 25vw, 50vw"))} alt="…">`
+ * `sizes` is the width the image renders at; `ratio` is height/width. {} when there is no image.
+ */
+export function imgAttrs(value: unknown, sizes: string, ratio = 1): Record<string, string> {
+  const src = imgSrc(value, 640, Math.round(640 * ratio));
+  if (!src) return {};
+  return { src, srcset: imgSrcSet(value, undefined, ratio), sizes, loading: "lazy", decoding: "async" };
+}
+
+/** The media identity before scaling — de-duplicate galleries on this, never on a resolved URL. */
+export function mediaKey(value: unknown): string {
+  const v = rawOf(value);
+  if (!v) return "";
+  // The file id, whichever form the value takes — a raw id and a resolved URL of one photo share it.
+  if (v.startsWith("wix:image://")) return v.slice("wix:image://v1/".length).split("/")[0].split("#")[0];
+  const m = v.match(/^https:\/\/static\.wixstatic\.com\/media\/([^/?#]+)/);
+  return m ? m[1] : v;
+}

package/skills/wix-headless-fast/references/storefront/INSTRUCTIONS.md

@@ -8,25 +8,31 @@ be exact. You never write commerce code; you never skip designing the store.
 
 ## The file map (deployed into `src/`)
 
-**Don't read the shipped files** — this table and the contracts below are everything you
-need. Open a shipped file's source **only** on a real fallback: a runtime error, or a field
-this playbook doesn't cover. Files you edit: `SiteLayout.astro` and `styles/global.css`.
+**On Astro and React the shipped files are tested and work as they are** — this table and the
+contracts below are everything you need to use them, so don't spend the run reading their source;
+wire them and build your surfaces. Reading them is the right move when something is off (a runtime
+error, a field this playbook doesn't cover) or when the brief wants a behaviour they don't offer —
+then read the file that owns it and change or extend it. On `lib`, `static`, and a port the
+components don't deploy at all, and each wiring section below opens with the files to read before
+writing their equivalents. Files you edit: `SiteLayout.astro` and `styles/global.css`.
 Files you **create** (skeletons below): the shop, category, and PDP pages with their island
 components, plus your home page.
 
 | file | what it is |
 |---|---|
 | `wix/config.ts` · `wix/sdk.ts` | shared auth seam (deploy configures it — nothing to set by hand) |
-| `wix/media.ts` · `wix/money.ts` | `imgSrc()` / `imgSrcSet()` / `formatMoney()` — already used by everything shipped; `imgSrcSet` + `sizes` for responsive tiles |
+| `wix/media.ts` · `wix/money.ts` | `imgAttrs(url, sizes)` — every `<img>` attribute for a DTO image (`src`, `srcSet`, `sizes`, lazy): `<img {...imgAttrs(p.imageUrl, "25vw")} alt={p.name} />`; `imgSrc()` / `imgSrcSet()` / `formatMoney()` underneath, already used by everything shipped |
 | `wix/storefront/types.ts` | the DTOs (`ProductSummary`, `ProductDetail`, `Cart`, `Category`, `Facet`) — contracts inlined below |
-| `wix/storefront/catalog.ts` | `searchCatalog` (sort/filter/facets/search + cursor paging + result count, all server-side), `fetchFacets`, `fetchProducts`, `fetchProductsByCategory`, `fetchProductBySlug`, `fetchCategories`, `fetchCategoryBySlug`, `resolveVariant` |
+| `wix/storefront/catalog.ts` | `searchCatalog` (sort/filter/facets/search + cursor paging + result count, all server-side), `fetchFacets`, `fetchProducts`, `fetchProductsByCategory`, `fetchProductBySlug`, `fetchCategories`, `fetchCategoryBySlug`, `resolveVariant` — the transport; the rules and DTO mappers are in `catalog-core.ts` / `cart-core.ts` beside it (shared with the REST layer) |
 | `wix/storefront/cart.ts` · `cart-store.ts` | Cart V2 + shared cart state (module store — spans Astro islands) |
+| `wix/storefront/shop-store.ts` · `product-detail-store.ts` | the listing and product-detail state machines, framework-free (`createShopStore()`, `createProductDetailStore()` — `getState`/`subscribe` + actions, one instance per surface); the hooks below bind them to React, every other stack uses them directly |
 | `hooks/storefront/useCart.ts` | cart state + actions — contract below |
-| `hooks/storefront/useShop.ts` | listing: category scope, sort, filters, option facets, result count, paging — contract below |
-| `hooks/storefront/useProductDetail.ts` | option selection → variant resolution → add-to-cart — contract below |
+| `hooks/storefront/useShop.ts` | React binding of `shop-store.ts`: category scope, sort, filters, option facets, result count, paging — contract below |
+| `hooks/storefront/useProductDetail.ts` | React binding of `product-detail-store.ts`: option selection → variant resolution → add-to-cart — contract below |
 | `components/storefront/CartButton.tsx` · `CartDrawer.tsx` | header badge + slide-over cart — **wire as-is** (drawer once per page) |
 | `components/storefront/FilterPanel.tsx` | the gallery's filter LAYOUT — toolbar (result count, sort), active chips, then a 16rem sidebar of collapsible groups (price as a two-handle slider bounded by the catalog's real prices, availability, one group per option facet with swatches/pills) beside YOUR results; a bottom sheet under `md` — **wire as-is** in your `ShopView`, your grid as its children: `<FilterPanel shop={shop}>…grid…</FilterPanel>` |
 | `components/storefront/QuickAdd.tsx` | the tile's purchase control — one click for a product with no options, a picker anchored to the tile (bottom sheet on small screens) for one with options, the product page for free-text customization — **wire as-is** as the last row of every tile's text block (`<QuickAdd product={p} />`) |
+| `components/storefront/OptionPicker.tsx` | the purchase controls for one product — option groups (swatches/pills, sold-out choices disabled), choice and text modifiers, an optional quantity stepper, the buy button gated by `useProductDetail` with its plain reason, "Pre-order" when pre-orderable — **wire as-is** in your PDP (`<OptionPicker detail={d} showQuantity />`); QuickAdd's picker is this same component |
 | `components/storefront/ShopView.tsx` · `ProductDetailView.tsx` | **don't ship — YOU create them** (skeletons below): the client islands your shop, category, and PDP pages mount |
 | `styles/global.css` | **the design system**: Tailwind v4 + the `@theme` token block (colors, radii, fonts — same token family as the official Wix templates). Everything, shipped and yours, styles from these tokens |
 
@@ -74,7 +80,9 @@ of its category. Then, by default:
 - **Home:** what the store sells and one shopping action in the first screen; real products under
   truthful headings ("Best Sellers" needs data behind it); not a repeat of the shop page. A
   category tile or link on the home page goes to that category's page (`/category/<slug>`) —
-  never to an anchor on the shop page that every tile shares.
+  never to an anchor on the shop page that every tile shares — and its image is a product from
+  THAT category (fetched with the category filter) or the category's own image, never a
+  positional guess into the all-products list.
 - **Shop:** a real product card — image, name, price, link — in the first screen; the shipped
   `FilterPanel` around the grid (toolbar, then a filter sidebar beside the results on desktop and
   a sheet on phones) — a store with any filterable catalog ships it, not "when it fits"; the
@@ -88,7 +96,12 @@ of its category. Then, by default:
 - **Cart:** the shipped drawer — it opens after every add, and checkout is a button in it.
 - **Overlays you build** (quick-add, mobile nav, filters): mount at the document root (a fixed
   panel inside the `backdrop-blur` header gets clipped), lock background scroll, close on Escape,
-  return focus on close — as the shipped `CartDrawer` does.
+  return focus on close — as the shipped `CartDrawer` does. An anchored picker is positioned
+  inside its tile, not `fixed` with computed offsets. If you add dismiss-on-outside-click, decide
+  inside/outside before anything re-renders (a capture-phase listener), or a click on a swatch
+  that re-renders the panel reads as "outside" and closes it.
+- **A page whose slug resolves to nothing** (category, product) shows only the not-found state —
+  no heading, toolbar, or empty grid rendered around it.
 - **Copy:** nothing the merchant didn't supply — no invented reviews, scarcity, or delivery
   promises; no Wix IDs or technical words in visible text.
 
@@ -160,6 +173,10 @@ only when the catalog has them — never fabricated; `wix-docs` has their contra
 
 ### The pages and islands you create — skeletons
 
+The class names in these skeletons are the Astro/React spelling of layout rules that hold on
+every stack, and each rule is also named in words beside its classes. On a stack where the shipped
+components don't deploy (`lib`, `static`, a port), keep the rule and write it in your own CSS.
+
 Nothing renders until you write these — the store IS your work. Each page is a thin SSR shell
 (fetch → DTO props → island); each island is a thin view over a hook. The pages' frontmatter
 is **machinery, not design** — reproduce it as the skeletons show, exactly. Hooks first,
@@ -308,6 +325,7 @@ if (!product) {
 import { useShop } from "../../hooks/storefront/useShop";
 import FilterPanel from "./FilterPanel";
 import QuickAdd from "./QuickAdd";
+import { imgAttrs } from "../../wix/media";
 import type { Category, ProductSummary } from "../../wix/storefront/types";
 
 export default function ShopView(props: {
@@ -329,23 +347,37 @@ export default function ShopView(props: {
   //   • error → a short inline message (retry() re-runs the query)
   //   • products === null (or loading) → skeleton tiles; [] → your honest empty state, and a
   //     distinct "no products match these filters" with clearFilters() when hasActiveFilters
-  //   • else YOUR grid of YOUR tiles (ProductSummary contract above): image (hoverImageUrl on
-  //     hover; imgSrcSet + sizes for responsive delivery), name, price — a range when
+  //   • else YOUR grid of YOUR tiles (ProductSummary contract above): image via
+  //     <img {...imgAttrs(p.imageUrl, "(min-width: 768px) 25vw, 50vw")} alt={p.name} /> — src,
+  //     srcSet, sizes and lazy loading in one spread, so a tile never ships srcSet without src;
+  //     an empty imageUrl gives {} — render your placeholder then; hoverImageUrl
+  //     on hover — name, price — a range when
   //     price !== maxPrice, else price + labelled compareAtPrice — EVERY ribbon from ribbons,
   //     swatches as small color dots when present (else optionsSummary as text); tile links to
   //     `/products/${p.slug}`; and <QuickAdd product={p} /> as the LAST ROW of the tile's text
   //     block, under name and price, full width — the shipped buy control (direct add / option
   //     picker / product page, decided from the product). It is a direct child of the tile root,
   //     which carries `relative`: the picker anchors to that root and takes the tile's width.
-  //     Never overlay the control on the image or float it between image and text, and never
-  //     wrap it in a smaller positioned box (the picker would inherit that box's width).
+  //     THE TILE ROOT IS A <div className="relative flex flex-col">, NOT THE LINK: the <a> wraps
+  //     the image and the name/price, and <QuickAdd> sits beside it as the flex column's last child
+  //     (it pins itself to the bottom with mt-auto). A button inside an <a> is invalid HTML and its
+  //     click navigates to the product page instead of adding.
+  //   • ROW RHYTHM: the grid stretches every tile in a row to the tallest; with the tile a flex
+  //     column and the control pinned to the bottom, the buy buttons share one baseline across the
+  //     row even when one tile has swatches, a struck price, or a two-line name and its neighbours
+  //     don't. Put the swatches between price and control; never let them push only that tile's
+  //     button down. Never overlay the control on the image or float it
+  //     between image and text, and never wrap it in a smaller positioned box (the picker would
+  //     inherit that box's width).
+  //   • the name WRAPS (`min-w-0`, `break-words`) — no `truncate` / `line-clamp-1`: a shopper reads
+  //     "Red Velvet Cupcake 4-Pack", not "Red Velvet Cupc…"; price on its own line under it.
   //   • badges come ONLY from p.ribbons. Do NOT render a "Sale" badge because compareAtPrice
   //     is set — the struck price already says it, and a product the merchant ribboned "Sale"
   //     would show the badge twice.
-  //   • name and price on SEPARATE lines (`min-w-0`, the name may wrap) — never one flex row
-  //     where a long name and a price range fight for width and the price gets clipped at 390px.
-  //     Keep the page intro short enough that a full tile (image, name, price) is in the first
-  //     screen, also on a short desktop window.
+  //   • name and price on SEPARATE lines — never one flex row where a long name and a price
+  //     range fight for width and the price gets clipped at 390px. Keep the page intro short
+  //     enough that a full tile (image, name, price) is in the first screen, also on a short
+  //     desktop window.
   //   • hasMore → your "load more" control calling loadMore() (disabled while loadingMore)
 }
 ```
@@ -354,6 +386,7 @@ export default function ShopView(props: {
 // src/components/storefront/ProductDetailView.tsx — YOU build the whole PDP surface;
 // your [slug].astro mounts it with the server-fetched product.
 import { useProductDetail } from "../../hooks/storefront/useProductDetail";
+import OptionPicker from "./OptionPicker";
 import type { ProductDetail } from "../../wix/storefront/types";
 
 export default function ProductDetailView(props: {
@@ -374,13 +407,10 @@ export default function ProductDetailView(props: {
   //     • name, EVERY ribbon (d.product.ribbons), live d.price (the range until every option
   //       is picked) with d.compareAtPrice as a labelled "was" when present — never invent one;
   //       descriptionHtml rendered as HTML, then d.product.infoSections as sections/accordions
-  //     • option controls from d.optionGroups → d.selectOption(optionName, choiceName)
-  //       (isColor → real swatches via colorCode; disable out-of-stock choices);
-  //       modifiers from d.product.modifiers → d.setModifier(key, value), "*" = mandatory
-  //     • quantity (d.quantity / d.setQuantity), then the buy button gated by d.canAdd
-  //       ONLY — never resolve variants yourself — calling d.add(); label it "Pre-order" when
-  //       d.isPreorder; while disabled, render d.blockedReason beside it as neutral guidance
-  //       (not error styling); d.adding disables, d.error renders inline
+  //     • <OptionPicker detail={d} showQuantity /> right under the price — the shipped option
+  //       groups (swatches for a color option, sold-out choices disabled), modifiers, quantity,
+  //       and the buy button gated by the hook with its plain reason, "Pre-order" when it applies,
+  //       the add error inline. Never resolve variants or gate the button yourself.
   //     • in the first screen at mobile AND desktop: the image, name, price, the first choice,
   //       and the button with its reason — a shopper decides without scrolling. On a phone that
   //       means the primary image is a bounded band, not a full-height hero: e.g. the gallery
@@ -390,6 +420,31 @@ export default function ProductDetailView(props: {
 }
 ```
 
+### The reference files for stacks where the components don't deploy
+
+On `lib`, `static`, and a port, nothing under `components/` or `hooks/` arrives. The state
+machines behind the hooks do arrive — `wix/storefront/shop-store.ts`, `product-detail-store.ts`,
+`cart-store.ts` — so you never rewrite them: create a store per surface, `subscribe`, render from
+`getState()`, call its actions. Their `*State` interfaces are the render contract; read those.
+What you write is the rendering — grid, product page, picker, filter panel, drawer — and for that
+read these first; they are tested code for exactly that behaviour, and rewriting them from the
+prose above is where the bugs come from:
+
+1. `components/storefront/QuickAdd.tsx` — the three purchase paths decided from the summary DTO;
+   the panel is positioned inside the tile (the tile is `relative`), a bottom sheet on small
+   screens, never `fixed` with computed offsets; it closes on Escape, the close button, a
+   successful add, or the scrim — there is NO outside-click handler (one that runs after a
+   re-render sees the clicked swatch detached and closes on every pick).
+2. `components/storefront/OptionPicker.tsx` — the purchase controls as working code: swatches vs
+   pills, sold-out choices disabled, quantity, the gated button with its reason and the
+   "Pre-order" label; the PDP and the tile picker share it.
+3. `components/storefront/CartDrawer.tsx` — the overlay contract as working code: root-level,
+   scrim, scroll lock, Escape, focus in and back.
+4. `components/storefront/FilterPanel.tsx` — inline commits at once, the sheet stages until Apply;
+   the price pair commits only when valid.
+
+All under `references/storefront/app/`.
+
 ### Wiring — Astro (default)
 
 1. Set the `@theme` tokens (one edit); brand `SiteLayout.astro` (one pass).
@@ -398,6 +453,88 @@ export default function ProductDetailView(props: {
    SSR props; browser-state widgets (cart) are `client:only="react"`.
 3. Write `pages/index.astro` (home) on `SiteLayout`.
 
+### Wiring — another JS framework (`--stack lib`: Vue, Svelte, Solid, plain Vite)
+
+Read the reference files listed above before writing any surface.
+
+`deploy.mjs storefront --stack lib` put the data layer in `src/wix/` and nothing else: `sdk.ts`
+(the visitor client, configured with the public client id), `media.ts`, `money.ts`, and
+`wix/storefront/` — `catalog.ts`, `cart.ts`, `types.ts`, the `*-core.ts` rules, and the three
+stores `shop-store.ts`, `product-detail-store.ts`, `cart-store.ts`. None of it is React. The
+hooks and components don't ship on this stack; the stores replace the hooks, and you write the
+components in your framework to the contracts on this page:
+
+- bind the stores with your framework's external-store primitive (Vue: `shallowRef` updated in
+  `subscribe`; Svelte: `readable(store.getState(), (set) => store.subscribe(() => set(store.getState())))`;
+  Solid: a signal set in `subscribe`). `createShopStore(options)` per listing (`start()` when
+  mounted, `stop()` when unmounted), `createProductDetailStore({ initial | slug })` per product
+  surface, the cart store as-is (module-level). State in, actions out — exactly the hooks'
+  contracts above;
+- your filter panel, quick add, and cart drawer to the contracts in "What a complete storefront
+  shows" — the shipped `FilterPanel.tsx`, `QuickAdd.tsx`, `CartDrawer.tsx` are readable as
+  behaviour specs (the overlay contract, the three purchase paths, the sidebar/sheet split).
+
+Routes `/shop`, `/category/:slug` (via `fetchCategoryBySlug`, null → your 404), `/products/:slug`;
+dev server on 4321; a static build goes through `npx @wix/cli@latest release` with
+`site.outputDirectory` pointing at the build folder, an SSR build is hosted by you. Item-page tags
+from the entity's `seoData`.
+
+### Wiring — static site (`--stack static`, no bundler)
+
+Read the reference files listed above before writing any surface.
+
+`deploy.mjs storefront --stack static --out site` put the REST layer in `site/js/wix/` (browser
+ESM, the `.ts` beside each `.js` for reading). Everything the visitor loads lives under `site/` —
+pages, styles, `js/` — and `wix.config.json`'s `site.outputDirectory` is `"./site"`; the project
+root (config, plan, seed output) is never the upload. Same function names and DTOs as the table
+above, so the contracts on this page hold unchanged: `searchCatalog`, `fetchFacetData`, `fetchProductBySlug`,
+`fetchCategories`, `fetchCategoryBySlug`, `resolveVariant` from `./js/wix/catalog.js`;
+`fetchCart`, `addToCart`, `updateQuantity`, `removeLine`, `checkoutUrl` from `./js/wix/cart.js`.
+The state machines ship too: `createShopStore` from `./js/wix/shop-store.js` (the listing —
+selection, facets, URL sync, cursor paging; `start()` once the page is up), `createProductDetailStore`
+from `./js/wix/product-detail-store.js` (the PDP and every quick-add picker — selections start
+empty, `resolveVariant`, `canAdd`/`blockedReason`, `add()`), and `./js/wix/cart-store.js` (the
+cart, `subscribeCart`/`getCartState`, `addLine`, `updateLineQuantity`, `removeCartLine`,
+`goToCheckout`, `setCartOpen`). No components ship — you write the rendering in plain JS: one
+render function per surface that reads `getState()`, called from `subscribe`, with the
+surface's controls calling the store's actions. The drawer opens after every add on its own;
+overlays follow the CartDrawer contract (root-level, scroll lock, Escape, focus back). Pages are
+`shop.html`, `category.html?slug=…`,
+`product.html?slug=…`. Set `document.title` and the meta description from the entity's `seoData`
+once it loads, on the product AND category pages. The visitor token persists in `localStorage` on
+its own; never mint per page. `npx @wix/cli@latest release` uploads `site/`.
+
+### Wiring — server-rendered, another language (Flask, Laravel, Rails, …)
+
+Read the reference files listed above before writing any surface.
+
+Run `deploy.mjs storefront --stack static` in the project folder anyway: `js/wix/` is both the
+browser-side code and the readable spec. Then split by where the call runs. **Reads on the
+server:** port `js/wix/catalog.ts` and `catalog-core.ts` to your language — the same six functions
+returning the same DTO shapes as dicts, one anonymous visitor token per process for these public
+reads (mint and refresh per `client.ts`) — and render shop, category, and PDP in your templates to
+the contracts above, so product names and prices are in the HTML; item-page tags from the entity's
+`seoData`. **Buying in the browser:** the cart drawer on `./js/wix/cart-store.js`, the PDP's
+option picker and the tile's quick add on `./js/wix/product-detail-store.js` (pass the product's
+slug, or the rendered `ProductDetail` as `initial` in a JSON script tag), exactly as the static
+wiring above — the browser owns the shopper's visitor token, so the server never handles
+per-shopper tokens. Routes stay `/shop`, `/category/<slug>`, `/products/<slug>`. Add your public https origin
+to the OAuth app's allowed domains before checkout can return.
+
+**Pre-rendered (Frozen-Flask, Pelican, any static-site generator) → Wix-hosted.** Same port for
+the reads, run at build time with one anonymous token; the generator must emit every product and
+category page (a URL generator over `fetchCategories()` plus a full `searchCatalog` walk by
+cursor — never only the first page). Run `deploy.mjs storefront --stack static --out <build dir>`
+so `js/wix/` is inside the output the pages import from, point `site.outputDirectory` at that
+folder, `wix release`. Pages sit at different depths (`/`, `/category/…`, `/products/…`): give
+the templates one base path to `js/wix/` (a template variable, or root-relative `/js/wix/…`),
+never a relative `./js/wix/` — it breaks one level down. The frozen grid is the first paint; the
+shop's sort, filters, facets, search, and load-more still run client-side on it through
+`createShopStore()` from `./js/wix/shop-store.js`, exactly as on a static site, so the gallery
+contract above applies. Close
+with the live URL, the rebuild + release command, and one line for the owner: dashboard edits to
+the catalog reach the site when that command runs; cart and checkout are live regardless.
+
 ### Wiring — React SPA (Vite etc.)
 
 Import `./styles/global.css` once at the app entry (needs `@tailwindcss/vite` in the vite
@@ -415,16 +552,19 @@ client id into `wix/config.ts`; nothing else to configure.
   internals or re-derive a request shape. Extend by calling the exports or adding a new
   function in `wix/storefront/` for what they don't cover (API contracts: the `wix-docs` skill).
 - **Selection→cart goes through `useProductDetail`** — never add a product with options by
-  picking `variants[0]`, and never gate `canAdd` yourself. In the gallery that is the shipped
-  `QuickAdd` — a tile never adds a product with options itself, and never hides the buy path
+  picking `variants[0]`, and never gate `canAdd` yourself. On the PDP that is the shipped
+  `OptionPicker`; in the gallery the shipped `QuickAdd` — a tile never adds a product with options itself, and never hides the buy path
   behind "go to the product page" for a product that has no options.
 - **Filters are the shipped `FilterPanel`** — mounted in the gallery whenever the store has a
   catalog to filter; not rebuilt with fewer controls, not dropped because the brief didn't ask.
 - **Categories are pages** — `/category/[slug]` with its SEO block, linked from the chrome; a
   category that exists only as a state toggle on `/shop` has no URL to share or index.
 - Don't wrap shipped calls in your own API routes — they run client-side by design.
-- Theme via the `@theme` tokens; your markup uses Tailwind utilities on the same tokens. No
-  parallel theme files, no hardcoded palette values in components.
+- Where the shipped components deploy (Astro, React): theme via the `@theme` tokens, and your
+  markup uses Tailwind utilities on the same tokens — one design system across shipped and written
+  code. No parallel theme files, no hardcoded palette values in components. Where they don't
+  (`lib`, `static`, a port): style with whatever your stack does well, on one token set of your
+  own; the rule that survives is the token set, not Tailwind.
 - Checkout only through the shipped cart (`checkout()`) — never a hand-built checkout URL.
 - Live data or an honest empty state — never mock products, prices, reviews, or counts.
 - **Prices and ribbons come from the DTOs as-is** — no computed percent-off, no "Sale" badge
@@ -446,44 +586,23 @@ client id into `wix/config.ts`; nothing else to configure.
 
 ## Point the user to their dashboard
 
-Give the owner the dashboard, products, and categories links — **the deploy step's JSON
-output already printed them ready-made** (`dashboardUrl`, `productsUrl`, `categoriesUrl`);
-copy, don't re-derive. Real payments additionally need a premium plan + a connected payment
-method (dashboard) — mention it, don't treat it as a code failure.
+Hand the owner these links — `{siteId}` is `siteId` in `wix.config.json` (the deploy JSON also prints
+`dashboardUrl`, `productsUrl`, `categoriesUrl`); an entity id fills the placeholder from the seed result.
+
+| page | `https://manage.wix.com/dashboard/{siteId}/` + |
+|---|---|
+| Products | `wix-stores/products` |
+| Edit a product | `wix-stores/products/product/{productId}` |
+| Categories | `wix-stores/categories/list` |
+| Inventory | `wix-stores/inventory` |
+| Orders | `ecom-platform/orders-list` |
+| Store settings | `wix-stores/settings` |
+
+Real payments additionally need a premium plan + a connected payment method (Settings → Accept
+payments) — mention it, don't treat it as a code failure.
 
 ## Seeding
 
 Per `seed/SEED.md` — a plain-data `plan.json` into `seed-store.mjs`, run from the project
 root. Independent of the frontend work; seed a catalog that exercises the UI (≥1 product with
 a color option, ≥1 on sale, an image per product) unless the brief says otherwise.
-
-## Verify (before declaring done)
-
-- [ ] `/shop` renders live products SSR (view-source shows product names) through **your**
-      grid/card; the `FilterPanel` shows the result count, and on desktop a sidebar beside the
-      grid with the price slider and this catalog's facets (a Color option → swatches); category links lead to `/category/<slug>`, which renders scoped and
-      carries the SEO tags in view-source; an unknown slug is a 404; empty catalog shows your
-      honest empty state.
-- [ ] Shop first screen: at 1280×720 and at 390px wide, at least one full tile — image, name,
-      price — is visible without scrolling; the tile with the longest product name and a price
-      range shows the whole price at 390px, nothing clipped.
-- [ ] Tiles: the buy control sits under name and price (not over the image); a product with no
-      options adds to the cart in one click; a product with options opens the picker across the
-      full tile width (a bottom sheet at 390px wide) and adds the chosen variant; the drawer
-      opens after either.
-- [ ] Your PDP at 390px wide: image, name, price, the first option, and the buy button are all
-      visible before scrolling. Color options render as swatches, the button shows
-      `blockedReason` ("Choose Size") until every option is picked, the price is the range until then and the variant's
-      price after, a sale shows the labelled "was", a sold-out combination reads "Out of stock",
-      a pre-orderable one reads "Pre-order".
-- [ ] Cards: every ribbon renders; a multi-price product shows a range with no struck price; a
-      product with a color option shows its swatches.
-- [ ] PDP gallery: one thumbnail per distinct photo — never two selectors leading to the same image.
-- [ ] Cart: a subscription line shows its plan terms under the product name.
-- [ ] Cart: add / quantity ± / remove work; badge count is live; subtotal shows; cart survives
-      a reload (same visitor token).
-- [ ] Checkout button redirects to Wix-hosted checkout.
-- [ ] PDP view-source carries the SEO tags (Astro).
-- [ ] Shop/PDP/home are YOUR designs on the tokens; the data-layer/hook/cart files are
-      unedited.
-- [ ] Dashboard links handed to the owner.