@zappie/sdk 0.1.9 → 0.1.11

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @zappie/sdk
 
+## 0.1.11
+
+### Patch Changes
+
+- edfc401: Audit storefront dependencies and widen secret scanning to tracked files, Worker output, server bundles and optional Git history.
+
+## 0.1.10
+
+### Patch Changes
+
+- 488e47d: A delivery checkout keeps its region and the rider's note.
+
+  - `@zappie/sdk`: `createCheckout().open()` sends the delivery note as `fulfilment.instructions`, the field the API reads. Before, it was sent inside the address, where the API ignored it, so the rider never saw the note.
+  - `@zappie/kit` and the starter: the checkout button's request now carries `delivery_region_id`, so a chosen or pre-filled delivery region reaches the payment session. The `checkout-button` registry item is 1.0.2.
+
 ## 0.1.9
 
 ### Patch Changes

package/dist/checkout/client.js

@@ -17,6 +17,21 @@ async function error(response) {
     value.issues
   );
 }
+function checkoutBody(body) {
+  const address = body.fulfilment.address;
+  if (!address) {
+    return body;
+  }
+  const { line2: _line2, instructions, ...rest } = address;
+  return {
+    ...body,
+    fulfilment: {
+      ...body.fulfilment,
+      ...body.fulfilment.instructions === void 0 && instructions ? { instructions } : {},
+      address: rest
+    }
+  };
+}
 function createCheckout(options = {}) {
   const base = (options.customerBase ?? DEFAULT_CUSTOMER_BASE).replace(
     /\/+$/,
@@ -48,7 +63,7 @@ function createCheckout(options = {}) {
           "Content-Type": "application/json",
           "Idempotency-Key": idempotencyKey
         },
-        body: JSON.stringify(body)
+        body: JSON.stringify(checkoutBody(body))
       });
       if (!session.url) {
         throw new ZappieError(

package/dist/checkout/client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/checkout/client.ts"],
-  "sourcesContent": ["import { apiError, requestWithRetry, wait } from \"../internal/customer-http\";\nimport { CheckoutError } from \"./error\";\nimport { ZappieError } from \"./sdk\";\nimport { mapCheckoutSession } from \"./session\";\nimport type {\n  AwaitCompletionOptions,\n  CheckoutClientOptions,\n  CheckoutCompletion,\n  CheckoutRequest,\n  CheckoutSession,\n  OpenCheckoutSession,\n} from \"./types\";\n\nconst DEFAULT_CUSTOMER_BASE = \"/_zappie/api\";\n\nasync function error(response: Response): Promise<CheckoutError> {\n  const value = await apiError(\n    response,\n    `The checkout service answered ${response.status}`,\n  );\n  return new CheckoutError(\n    response.status,\n    value.apiCode,\n    value.message,\n    value.param,\n    value.issues,\n  );\n}\n\n/**\n * Create a client that opens checkout sessions, reads them and polls for completion.\n *\n * @param options - Override the default `/_zappie/api` base or fetch implementation.\n * @returns A checkout client. Retain each idempotency key when retrying the same cart.\n */\nexport function createCheckout(options: CheckoutClientOptions = {}) {\n  const base = (options.customerBase ?? DEFAULT_CUSTOMER_BASE).replace(\n    /\\/+$/,\n    \"\",\n  );\n  const fetcher = options.fetch ?? globalThis.fetch;\n  const request = async (\n    path: string,\n    init: RequestInit,\n  ): Promise<CheckoutSession> => {\n    const response = await requestWithRetry(\n      fetcher,\n      base + path,\n      init,\n      \"Could not reach checkout\",\n    );\n    if (!response.ok) {\n      throw await error(response);\n    }\n    return mapCheckoutSession(await response.json());\n  };\n  const read = (id: string, signal?: AbortSignal) =>\n    request(`/checkout/sessions/${encodeURIComponent(id)}`, {\n      method: \"GET\",\n      ...(signal ? { signal } : {}),\n    });\n  return {\n    /** The caller retains this key and reuses it when retrying the same cart. */\n    async open(\n      body: CheckoutRequest,\n      idempotencyKey: string,\n    ): Promise<OpenCheckoutSession> {\n      const session = await request(\"/checkout/sessions\", {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          \"Idempotency-Key\": idempotencyKey,\n        },\n        body: JSON.stringify(body),\n      });\n      if (!session.url) {\n        throw new ZappieError(\n          \"server_error\",\n          \"Checkout session has no payment URL\",\n        );\n      }\n      globalThis.__zappieEmit?.(\"checkout:open\", session);\n      return { ...session, url: session.url };\n    },\n    session(id: string): Promise<CheckoutSession> {\n      return read(id);\n    },\n    async awaitCompletion(\n      id: string,\n      options: AwaitCompletionOptions = {},\n    ): Promise<CheckoutCompletion> {\n      const interval = options.intervalMs ?? 3_000;\n      if (!Number.isFinite(interval) || interval < 0) {\n        throw new ZappieError(\n          \"invalid_request\",\n          \"intervalMs cannot be negative\",\n        );\n      }\n      for (;;) {\n        options.signal?.throwIfAborted();\n        try {\n          const session = await read(id, options.signal);\n          if (session.status === \"completed\" && session.order_id) {\n            globalThis.__zappieEmit?.(\"checkout:completed\", session);\n            return {\n              ...session,\n              status: \"completed\",\n              order_id: session.order_id,\n            };\n          }\n          if (session.status === \"expired\" || session.status === \"cancelled\") {\n            return { ...session, status: session.status };\n          }\n        } catch (failure) {\n          options.signal?.throwIfAborted();\n          if (\n            failure instanceof ZappieError &&\n            failure.status !== undefined &&\n            failure.status >= 400 &&\n            failure.status < 500\n          ) {\n            throw failure;\n          }\n        }\n        await wait(interval, options.signal);\n      }\n    },\n  };\n}\n\n/**\n * The session creation, lookup and completion methods returned by createCheckout.\n */\nexport type CheckoutClient = ReturnType<typeof createCheckout>;\n"],
-  "mappings": ";AAAA,SAAS,UAAU,kBAAkB,YAAY;AACjD,SAAS,qBAAqB;AAC9B,SAAS,mBAAmB;AAC5B,SAAS,0BAA0B;AAUnC,IAAM,wBAAwB;AAE9B,eAAe,MAAM,UAA4C;AAC/D,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA,iCAAiC,SAAS,MAAM;AAAA,EAClD;AACA,SAAO,IAAI;AAAA,IACT,SAAS;AAAA,IACT,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACF;AAQO,SAAS,eAAe,UAAiC,CAAC,GAAG;AAClE,QAAM,QAAQ,QAAQ,gBAAgB,uBAAuB;AAAA,IAC3D;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,SAAS,WAAW;AAC5C,QAAM,UAAU,OACd,MACA,SAC6B;AAC7B,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,MAAM,QAAQ;AAAA,IAC5B;AACA,WAAO,mBAAmB,MAAM,SAAS,KAAK,CAAC;AAAA,EACjD;AACA,QAAM,OAAO,CAAC,IAAY,WACxB,QAAQ,sBAAsB,mBAAmB,EAAE,CAAC,IAAI;AAAA,IACtD,QAAQ;AAAA,IACR,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7B,CAAC;AACH,SAAO;AAAA;AAAA,IAEL,MAAM,KACJ,MACA,gBAC8B;AAC9B,YAAM,UAAU,MAAM,QAAQ,sBAAsB;AAAA,QAClD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,mBAAmB;AAAA,QACrB;AAAA,QACA,MAAM,KAAK,UAAU,IAAI;AAAA,MAC3B,CAAC;AACD,UAAI,CAAC,QAAQ,KAAK;AAChB,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAW,eAAe,iBAAiB,OAAO;AAClD,aAAO,EAAE,GAAG,SAAS,KAAK,QAAQ,IAAI;AAAA,IACxC;AAAA,IACA,QAAQ,IAAsC;AAC5C,aAAO,KAAK,EAAE;AAAA,IAChB;AAAA,IACA,MAAM,gBACJ,IACAA,WAAkC,CAAC,GACN;AAC7B,YAAM,WAAWA,SAAQ,cAAc;AACvC,UAAI,CAAC,OAAO,SAAS,QAAQ,KAAK,WAAW,GAAG;AAC9C,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAS;AACP,QAAAA,SAAQ,QAAQ,eAAe;AAC/B,YAAI;AACF,gBAAM,UAAU,MAAM,KAAK,IAAIA,SAAQ,MAAM;AAC7C,cAAI,QAAQ,WAAW,eAAe,QAAQ,UAAU;AACtD,uBAAW,eAAe,sBAAsB,OAAO;AACvD,mBAAO;AAAA,cACL,GAAG;AAAA,cACH,QAAQ;AAAA,cACR,UAAU,QAAQ;AAAA,YACpB;AAAA,UACF;AACA,cAAI,QAAQ,WAAW,aAAa,QAAQ,WAAW,aAAa;AAClE,mBAAO,EAAE,GAAG,SAAS,QAAQ,QAAQ,OAAO;AAAA,UAC9C;AAAA,QACF,SAAS,SAAS;AAChB,UAAAA,SAAQ,QAAQ,eAAe;AAC/B,cACE,mBAAmB,eACnB,QAAQ,WAAW,UACnB,QAAQ,UAAU,OAClB,QAAQ,SAAS,KACjB;AACA,kBAAM;AAAA,UACR;AAAA,QACF;AACA,cAAM,KAAK,UAAUA,SAAQ,MAAM;AAAA,MACrC;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { apiError, requestWithRetry, wait } from \"../internal/customer-http\";\nimport { CheckoutError } from \"./error\";\nimport { ZappieError } from \"./sdk\";\nimport { mapCheckoutSession } from \"./session\";\nimport type {\n  AwaitCompletionOptions,\n  CheckoutClientOptions,\n  CheckoutCompletion,\n  CheckoutRequest,\n  CheckoutSession,\n  OpenCheckoutSession,\n} from \"./types\";\n\nconst DEFAULT_CUSTOMER_BASE = \"/_zappie/api\";\n\nasync function error(response: Response): Promise<CheckoutError> {\n  const value = await apiError(\n    response,\n    `The checkout service answered ${response.status}`,\n  );\n  return new CheckoutError(\n    response.status,\n    value.apiCode,\n    value.message,\n    value.param,\n    value.issues,\n  );\n}\n\n// REST reads the rider note from fulfilment.instructions and accepts only its listed address\n// fields, while a cart's wire fulfilment keeps the note on the address.\nfunction checkoutBody(body: CheckoutRequest): CheckoutRequest {\n  const address = body.fulfilment.address as\n    | (CheckoutRequest[\"fulfilment\"][\"address\"] & {\n        line2?: string;\n        instructions?: string;\n      })\n    | undefined;\n  if (!address) {\n    return body;\n  }\n  const { line2: _line2, instructions, ...rest } = address;\n  return {\n    ...body,\n    fulfilment: {\n      ...body.fulfilment,\n      ...(body.fulfilment.instructions === undefined && instructions\n        ? { instructions }\n        : {}),\n      address: rest,\n    },\n  };\n}\n\n/**\n * Create a client that opens checkout sessions, reads them and polls for completion.\n *\n * @param options - Override the default `/_zappie/api` base or fetch implementation.\n * @returns A checkout client. Retain each idempotency key when retrying the same cart.\n */\nexport function createCheckout(options: CheckoutClientOptions = {}) {\n  const base = (options.customerBase ?? DEFAULT_CUSTOMER_BASE).replace(\n    /\\/+$/,\n    \"\",\n  );\n  const fetcher = options.fetch ?? globalThis.fetch;\n  const request = async (\n    path: string,\n    init: RequestInit,\n  ): Promise<CheckoutSession> => {\n    const response = await requestWithRetry(\n      fetcher,\n      base + path,\n      init,\n      \"Could not reach checkout\",\n    );\n    if (!response.ok) {\n      throw await error(response);\n    }\n    return mapCheckoutSession(await response.json());\n  };\n  const read = (id: string, signal?: AbortSignal) =>\n    request(`/checkout/sessions/${encodeURIComponent(id)}`, {\n      method: \"GET\",\n      ...(signal ? { signal } : {}),\n    });\n  return {\n    /** The caller retains this key and reuses it when retrying the same cart. */\n    async open(\n      body: CheckoutRequest,\n      idempotencyKey: string,\n    ): Promise<OpenCheckoutSession> {\n      const session = await request(\"/checkout/sessions\", {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\",\n          \"Idempotency-Key\": idempotencyKey,\n        },\n        body: JSON.stringify(checkoutBody(body)),\n      });\n      if (!session.url) {\n        throw new ZappieError(\n          \"server_error\",\n          \"Checkout session has no payment URL\",\n        );\n      }\n      globalThis.__zappieEmit?.(\"checkout:open\", session);\n      return { ...session, url: session.url };\n    },\n    session(id: string): Promise<CheckoutSession> {\n      return read(id);\n    },\n    async awaitCompletion(\n      id: string,\n      options: AwaitCompletionOptions = {},\n    ): Promise<CheckoutCompletion> {\n      const interval = options.intervalMs ?? 3_000;\n      if (!Number.isFinite(interval) || interval < 0) {\n        throw new ZappieError(\n          \"invalid_request\",\n          \"intervalMs cannot be negative\",\n        );\n      }\n      for (;;) {\n        options.signal?.throwIfAborted();\n        try {\n          const session = await read(id, options.signal);\n          if (session.status === \"completed\" && session.order_id) {\n            globalThis.__zappieEmit?.(\"checkout:completed\", session);\n            return {\n              ...session,\n              status: \"completed\",\n              order_id: session.order_id,\n            };\n          }\n          if (session.status === \"expired\" || session.status === \"cancelled\") {\n            return { ...session, status: session.status };\n          }\n        } catch (failure) {\n          options.signal?.throwIfAborted();\n          if (\n            failure instanceof ZappieError &&\n            failure.status !== undefined &&\n            failure.status >= 400 &&\n            failure.status < 500\n          ) {\n            throw failure;\n          }\n        }\n        await wait(interval, options.signal);\n      }\n    },\n  };\n}\n\n/**\n * The session creation, lookup and completion methods returned by createCheckout.\n */\nexport type CheckoutClient = ReturnType<typeof createCheckout>;\n"],
+  "mappings": ";AAAA,SAAS,UAAU,kBAAkB,YAAY;AACjD,SAAS,qBAAqB;AAC9B,SAAS,mBAAmB;AAC5B,SAAS,0BAA0B;AAUnC,IAAM,wBAAwB;AAE9B,eAAe,MAAM,UAA4C;AAC/D,QAAM,QAAQ,MAAM;AAAA,IAClB;AAAA,IACA,iCAAiC,SAAS,MAAM;AAAA,EAClD;AACA,SAAO,IAAI;AAAA,IACT,SAAS;AAAA,IACT,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACF;AAIA,SAAS,aAAa,MAAwC;AAC5D,QAAM,UAAU,KAAK,WAAW;AAMhC,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,QAAM,EAAE,OAAO,QAAQ,cAAc,GAAG,KAAK,IAAI;AACjD,SAAO;AAAA,IACL,GAAG;AAAA,IACH,YAAY;AAAA,MACV,GAAG,KAAK;AAAA,MACR,GAAI,KAAK,WAAW,iBAAiB,UAAa,eAC9C,EAAE,aAAa,IACf,CAAC;AAAA,MACL,SAAS;AAAA,IACX;AAAA,EACF;AACF;AAQO,SAAS,eAAe,UAAiC,CAAC,GAAG;AAClE,QAAM,QAAQ,QAAQ,gBAAgB,uBAAuB;AAAA,IAC3D;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,QAAQ,SAAS,WAAW;AAC5C,QAAM,UAAU,OACd,MACA,SAC6B;AAC7B,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA;AAAA,IACF;AACA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,MAAM,MAAM,QAAQ;AAAA,IAC5B;AACA,WAAO,mBAAmB,MAAM,SAAS,KAAK,CAAC;AAAA,EACjD;AACA,QAAM,OAAO,CAAC,IAAY,WACxB,QAAQ,sBAAsB,mBAAmB,EAAE,CAAC,IAAI;AAAA,IACtD,QAAQ;AAAA,IACR,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,EAC7B,CAAC;AACH,SAAO;AAAA;AAAA,IAEL,MAAM,KACJ,MACA,gBAC8B;AAC9B,YAAM,UAAU,MAAM,QAAQ,sBAAsB;AAAA,QAClD,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,UAChB,mBAAmB;AAAA,QACrB;AAAA,QACA,MAAM,KAAK,UAAU,aAAa,IAAI,CAAC;AAAA,MACzC,CAAC;AACD,UAAI,CAAC,QAAQ,KAAK;AAChB,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAW,eAAe,iBAAiB,OAAO;AAClD,aAAO,EAAE,GAAG,SAAS,KAAK,QAAQ,IAAI;AAAA,IACxC;AAAA,IACA,QAAQ,IAAsC;AAC5C,aAAO,KAAK,EAAE;AAAA,IAChB;AAAA,IACA,MAAM,gBACJ,IACAA,WAAkC,CAAC,GACN;AAC7B,YAAM,WAAWA,SAAQ,cAAc;AACvC,UAAI,CAAC,OAAO,SAAS,QAAQ,KAAK,WAAW,GAAG;AAC9C,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,QACF;AAAA,MACF;AACA,iBAAS;AACP,QAAAA,SAAQ,QAAQ,eAAe;AAC/B,YAAI;AACF,gBAAM,UAAU,MAAM,KAAK,IAAIA,SAAQ,MAAM;AAC7C,cAAI,QAAQ,WAAW,eAAe,QAAQ,UAAU;AACtD,uBAAW,eAAe,sBAAsB,OAAO;AACvD,mBAAO;AAAA,cACL,GAAG;AAAA,cACH,QAAQ;AAAA,cACR,UAAU,QAAQ;AAAA,YACpB;AAAA,UACF;AACA,cAAI,QAAQ,WAAW,aAAa,QAAQ,WAAW,aAAa;AAClE,mBAAO,EAAE,GAAG,SAAS,QAAQ,QAAQ,OAAO;AAAA,UAC9C;AAAA,QACF,SAAS,SAAS;AAChB,UAAAA,SAAQ,QAAQ,eAAe;AAC/B,cACE,mBAAmB,eACnB,QAAQ,WAAW,UACnB,QAAQ,UAAU,OAClB,QAAQ,SAAS,KACjB;AACA,kBAAM;AAAA,UACR;AAAA,QACF;AACA,cAAM,KAAK,UAAUA,SAAQ,MAAM;AAAA,MACrC;AAAA,IACF;AAAA,EACF;AACF;",
   "names": ["options"]
 }

package/dist/config/index.d.ts

@@ -24,6 +24,14 @@ type ZappieSiteConfig = {
     packages?: {
         allow?: string[];
     };
+    /** Time-bounded acknowledgements for advisories that have no fixed version. */
+    audit?: {
+        ignore?: {
+            id: string;
+            reason: string;
+            until: string;
+        }[];
+    };
     outbound?: {
         allow?: string[];
     };

package/dist/customer/react.d.ts

@@ -1,6 +1,6 @@
 import * as _zappie_sdk_customer from '@zappie/sdk/customer';
 import { CustomerClient, SessionCustomer } from '@zappie/sdk/customer';
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode } from 'react';
 
 /**
@@ -10,7 +10,7 @@ import { ReactNode } from 'react';
 declare function CustomerProvider({ client, children, }: {
     client: CustomerClient;
     children: ReactNode;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 /**
  * Subscribe to the nearest CustomerProvider and return auth state, customer and session actions.
  * Throws if you have not mounted a CustomerProvider.

package/dist/debug.js

@@ -1,5 +1,5 @@
 // src/debug.ts
-var VERSION = true ? "0.1.9" : "0.0.0-development";
+var VERSION = true ? "0.1.11" : "0.0.0-development";
 function installDebug(client) {
   if (typeof window === "undefined" || client.mode !== "test") {
     return;

package/dist/debug.js.map

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../src/debug.ts"],
   "sourcesContent": ["import type { StoredLine } from \"./cart/storage\";\nimport type { CartLineInput, Quote } from \"./cart/types\";\nimport type { Zappie } from \"./client\";\nimport type { Branch, Menu } from \"./models\";\n\n// Inline like VERSION in index.ts: tsup fills in the version from package.json.\ndeclare const __ZAPPIE_SDK_VERSION__: string | undefined;\nconst VERSION =\n  typeof __ZAPPIE_SDK_VERSION__ === \"string\"\n    ? __ZAPPIE_SDK_VERSION__\n    : \"0.0.0-development\";\n\nexport type DebugEvent = {\n  name: string;\n  detail: unknown;\n  at: string;\n};\n\nexport type ZappieDebug = {\n  version: string;\n  store: string;\n  /** Read this cart's branch and full menu through its client. */\n  catalogue(): Promise<{ menu: Menu; branch: Branch }>;\n  cart: (() => ReturnType<Zappie[\"cart\"][\"getSnapshot\"]>) & {\n    /**\n     * Save test cart lines for the next reload. Reload to reconcile them with today's menu.\n     * Your unitPrice is only a local estimate, like a price edited in browser storage.\n     * The server re-prices every line and never trusts this estimate.\n     */\n    inject(input: {\n      lines: (CartLineInput & Pick<StoredLine, \"unitPrice\">)[];\n    }): Promise<void>;\n  };\n  quote: () => Quote | undefined;\n  events: DebugEvent[];\n};\n\ndeclare global {\n  interface Window {\n    __zappie?: ZappieDebug;\n  }\n  // On globalThis so the lazy checkout and customer entries can reach it\n  // with the shortest possible call; in a browser it is window's.\n  var __zappieEmit: ((name: string, detail: unknown) => void) | undefined;\n}\n\nexport function installDebug(client: Zappie) {\n  if (typeof window === \"undefined\" || client.mode !== \"test\") {\n    return;\n  }\n  const events: DebugEvent[] = [];\n  let quote: Quote | undefined;\n  const emit = (name: string, detail: unknown) => {\n    const event = { name, detail, at: new Date().toISOString() };\n    events.push(event);\n    window.dispatchEvent(new CustomEvent(\"zappie:event\", { detail: event }));\n  };\n  globalThis.__zappieEmit = emit;\n  window.__zappie = {\n    version: VERSION,\n    store: client.config.store,\n    async catalogue() {\n      await client.cart.hydrate();\n      const branch = (await client.store.get()).branches.find(\n        (value) => value.id === client.cart.getSnapshot().branchId,\n      )!;\n      return { branch, menu: await client.menu.get({ branch: branch.id }) };\n    },\n    cart: Object.assign(() => client.cart.getSnapshot(), {\n      async inject(input: {\n        lines: (CartLineInput & Pick<StoredLine, \"unitPrice\">)[];\n      }) {\n        await client.cart.hydrate();\n        if (\n          input.lines.length > 100 ||\n          input.lines.some(\n            (line) =>\n              !Number.isInteger(line.quantity ?? 1) ||\n              (line.quantity ?? 1) < 1 ||\n              (line.quantity ?? 1) > 99,\n          )\n        ) {\n          throw new Error(\n            \"Use up to 100 cart lines with whole quantities from 1 to 99.\",\n          );\n        }\n        const snapshot = client.cart.getSnapshot();\n        const value = {\n          v: 1,\n          menuVersion: client._internal.cartCatalogue()!.version,\n          updatedAt: Date.now(),\n          fulfilment: snapshot.fulfilment,\n          promoCode: snapshot.promoCode,\n          lines: input.lines.map((line, index) => ({\n            ...line,\n            id: `debug_${index}`,\n            name: line.itemId,\n            quantity: line.quantity ?? 1,\n            choices: (line.choices ?? []).map((choice) => ({\n              ...choice,\n              quantity: choice.quantity ?? 1,\n            })),\n            inputs: line.inputs ?? {},\n            addedAt: new Date().toISOString(),\n          })),\n        };\n        const scope = client.config.cart?.storageScope;\n        (client.config.storage ?? window.localStorage).setItem(\n          `zappie:cart:v1:${client.config.store}:${snapshot.branchId}${scope ? `:${scope}` : \"\"}`,\n          JSON.stringify(value),\n        );\n      },\n    }),\n    quote: () => quote,\n    events,\n  };\n  client.on(\"add_to_cart\", (detail) => emit(\"add_to_cart\", detail));\n  client.cart.subscribe(() => {\n    const state = client.cart.state;\n    const next = \"quote\" in state ? state.quote : undefined;\n    if (next && next !== quote) {\n      quote = next;\n      emit(\"quote\", next);\n    }\n  });\n}\n"],
-  "mappings": ";AAOA,IAAM,UACJ,OACI,UACA;AAoCC,SAAS,aAAa,QAAgB;AAC3C,MAAI,OAAO,WAAW,eAAe,OAAO,SAAS,QAAQ;AAC3D;AAAA,EACF;AACA,QAAM,SAAuB,CAAC;AAC9B,MAAI;AACJ,QAAM,OAAO,CAAC,MAAc,WAAoB;AAC9C,UAAM,QAAQ,EAAE,MAAM,QAAQ,KAAI,oBAAI,KAAK,GAAE,YAAY,EAAE;AAC3D,WAAO,KAAK,KAAK;AACjB,WAAO,cAAc,IAAI,YAAY,gBAAgB,EAAE,QAAQ,MAAM,CAAC,CAAC;AAAA,EACzE;AACA,aAAW,eAAe;AAC1B,SAAO,WAAW;AAAA,IAChB,SAAS;AAAA,IACT,OAAO,OAAO,OAAO;AAAA,IACrB,MAAM,YAAY;AAChB,YAAM,OAAO,KAAK,QAAQ;AAC1B,YAAM,UAAU,MAAM,OAAO,MAAM,IAAI,GAAG,SAAS;AAAA,QACjD,CAAC,UAAU,MAAM,OAAO,OAAO,KAAK,YAAY,EAAE;AAAA,MACpD;AACA,aAAO,EAAE,QAAQ,MAAM,MAAM,OAAO,KAAK,IAAI,EAAE,QAAQ,OAAO,GAAG,CAAC,EAAE;AAAA,IACtE;AAAA,IACA,MAAM,OAAO,OAAO,MAAM,OAAO,KAAK,YAAY,GAAG;AAAA,MACnD,MAAM,OAAO,OAEV;AACD,cAAM,OAAO,KAAK,QAAQ;AAC1B,YACE,MAAM,MAAM,SAAS,OACrB,MAAM,MAAM;AAAA,UACV,CAAC,SACC,CAAC,OAAO,UAAU,KAAK,YAAY,CAAC,MACnC,KAAK,YAAY,KAAK,MACtB,KAAK,YAAY,KAAK;AAAA,QAC3B,GACA;AACA,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA,cAAM,WAAW,OAAO,KAAK,YAAY;AACzC,cAAM,QAAQ;AAAA,UACZ,GAAG;AAAA,UACH,aAAa,OAAO,UAAU,cAAc,EAAG;AAAA,UAC/C,WAAW,KAAK,IAAI;AAAA,UACpB,YAAY,SAAS;AAAA,UACrB,WAAW,SAAS;AAAA,UACpB,OAAO,MAAM,MAAM,IAAI,CAAC,MAAM,WAAW;AAAA,YACvC,GAAG;AAAA,YACH,IAAI,SAAS,KAAK;AAAA,YAClB,MAAM,KAAK;AAAA,YACX,UAAU,KAAK,YAAY;AAAA,YAC3B,UAAU,KAAK,WAAW,CAAC,GAAG,IAAI,CAAC,YAAY;AAAA,cAC7C,GAAG;AAAA,cACH,UAAU,OAAO,YAAY;AAAA,YAC/B,EAAE;AAAA,YACF,QAAQ,KAAK,UAAU,CAAC;AAAA,YACxB,UAAS,oBAAI,KAAK,GAAE,YAAY;AAAA,UAClC,EAAE;AAAA,QACJ;AACA,cAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,SAAC,OAAO,OAAO,WAAW,OAAO,cAAc;AAAA,UAC7C,kBAAkB,OAAO,OAAO,KAAK,IAAI,SAAS,QAAQ,GAAG,QAAQ,IAAI,KAAK,KAAK,EAAE;AAAA,UACrF,KAAK,UAAU,KAAK;AAAA,QACtB;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,OAAO,MAAM;AAAA,IACb;AAAA,EACF;AACA,SAAO,GAAG,eAAe,CAAC,WAAW,KAAK,eAAe,MAAM,CAAC;AAChE,SAAO,KAAK,UAAU,MAAM;AAC1B,UAAM,QAAQ,OAAO,KAAK;AAC1B,UAAM,OAAO,WAAW,QAAQ,MAAM,QAAQ;AAC9C,QAAI,QAAQ,SAAS,OAAO;AAC1B,cAAQ;AACR,WAAK,SAAS,IAAI;AAAA,IACpB;AAAA,EACF,CAAC;AACH;",
+  "mappings": ";AAOA,IAAM,UACJ,OACI,WACA;AAoCC,SAAS,aAAa,QAAgB;AAC3C,MAAI,OAAO,WAAW,eAAe,OAAO,SAAS,QAAQ;AAC3D;AAAA,EACF;AACA,QAAM,SAAuB,CAAC;AAC9B,MAAI;AACJ,QAAM,OAAO,CAAC,MAAc,WAAoB;AAC9C,UAAM,QAAQ,EAAE,MAAM,QAAQ,KAAI,oBAAI,KAAK,GAAE,YAAY,EAAE;AAC3D,WAAO,KAAK,KAAK;AACjB,WAAO,cAAc,IAAI,YAAY,gBAAgB,EAAE,QAAQ,MAAM,CAAC,CAAC;AAAA,EACzE;AACA,aAAW,eAAe;AAC1B,SAAO,WAAW;AAAA,IAChB,SAAS;AAAA,IACT,OAAO,OAAO,OAAO;AAAA,IACrB,MAAM,YAAY;AAChB,YAAM,OAAO,KAAK,QAAQ;AAC1B,YAAM,UAAU,MAAM,OAAO,MAAM,IAAI,GAAG,SAAS;AAAA,QACjD,CAAC,UAAU,MAAM,OAAO,OAAO,KAAK,YAAY,EAAE;AAAA,MACpD;AACA,aAAO,EAAE,QAAQ,MAAM,MAAM,OAAO,KAAK,IAAI,EAAE,QAAQ,OAAO,GAAG,CAAC,EAAE;AAAA,IACtE;AAAA,IACA,MAAM,OAAO,OAAO,MAAM,OAAO,KAAK,YAAY,GAAG;AAAA,MACnD,MAAM,OAAO,OAEV;AACD,cAAM,OAAO,KAAK,QAAQ;AAC1B,YACE,MAAM,MAAM,SAAS,OACrB,MAAM,MAAM;AAAA,UACV,CAAC,SACC,CAAC,OAAO,UAAU,KAAK,YAAY,CAAC,MACnC,KAAK,YAAY,KAAK,MACtB,KAAK,YAAY,KAAK;AAAA,QAC3B,GACA;AACA,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA,cAAM,WAAW,OAAO,KAAK,YAAY;AACzC,cAAM,QAAQ;AAAA,UACZ,GAAG;AAAA,UACH,aAAa,OAAO,UAAU,cAAc,EAAG;AAAA,UAC/C,WAAW,KAAK,IAAI;AAAA,UACpB,YAAY,SAAS;AAAA,UACrB,WAAW,SAAS;AAAA,UACpB,OAAO,MAAM,MAAM,IAAI,CAAC,MAAM,WAAW;AAAA,YACvC,GAAG;AAAA,YACH,IAAI,SAAS,KAAK;AAAA,YAClB,MAAM,KAAK;AAAA,YACX,UAAU,KAAK,YAAY;AAAA,YAC3B,UAAU,KAAK,WAAW,CAAC,GAAG,IAAI,CAAC,YAAY;AAAA,cAC7C,GAAG;AAAA,cACH,UAAU,OAAO,YAAY;AAAA,YAC/B,EAAE;AAAA,YACF,QAAQ,KAAK,UAAU,CAAC;AAAA,YACxB,UAAS,oBAAI,KAAK,GAAE,YAAY;AAAA,UAClC,EAAE;AAAA,QACJ;AACA,cAAM,QAAQ,OAAO,OAAO,MAAM;AAClC,SAAC,OAAO,OAAO,WAAW,OAAO,cAAc;AAAA,UAC7C,kBAAkB,OAAO,OAAO,KAAK,IAAI,SAAS,QAAQ,GAAG,QAAQ,IAAI,KAAK,KAAK,EAAE;AAAA,UACrF,KAAK,UAAU,KAAK;AAAA,QACtB;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,OAAO,MAAM;AAAA,IACb;AAAA,EACF;AACA,SAAO,GAAG,eAAe,CAAC,WAAW,KAAK,eAAe,MAAM,CAAC;AAChE,SAAO,KAAK,UAAU,MAAM;AAC1B,UAAM,QAAQ,OAAO,KAAK;AAC1B,UAAM,OAAO,WAAW,QAAQ,MAAM,QAAQ;AAC9C,QAAI,QAAQ,SAAS,OAAO;AAC1B,cAAQ;AACR,WAAK,SAAS,IAAI;AAAA,IACpB;AAAA,EACF,CAAC;AACH;",
   "names": []
 }

package/dist/index.js

@@ -10,7 +10,7 @@ import { previewItem } from "./cart/preview.js";
 import { estimateUnitPrice } from "./cart/price.js";
 import { resolveSourceMenu } from "./cart/source-menu.js";
 import { validateLine } from "./cart/validate.js";
-var VERSION = true ? "0.1.9" : "0.0.0-development";
+var VERSION = true ? "0.1.11" : "0.0.0-development";
 export {
   API_VERSION,
   RestTransport,

package/dist/index.js.map

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../src/index.ts"],
   "sourcesContent": ["// tsup replaces __ZAPPIE_SDK_VERSION__ with package.json's version. Source run\n// without a build, as in a plain Node script, gets the development label.\n// Kept inline, not in a shared module, so the core chunks don't split differently.\ndeclare const __ZAPPIE_SDK_VERSION__: string | undefined;\n\n/** The installed @zappie/sdk version. */\nexport const VERSION: string =\n  typeof __ZAPPIE_SDK_VERSION__ === \"string\"\n    ? __ZAPPIE_SDK_VERSION__\n    : \"0.0.0-development\";\nexport { createZappie } from \"./client\";\nexport type {\n  MenuFulfilment,\n  MenuReadOptions,\n  MenuResource,\n  ReadOptions,\n  StoreResource,\n  Zappie,\n  ZappieEvents,\n} from \"./client\";\nexport { API_VERSION } from \"./config\";\nexport type {\n  StorageLike,\n  ZappieConfig as ZappieClientOptions,\n  ZappieConfig,\n} from \"./config\";\nexport { ZappieError, isZappieError } from \"./errors\";\nexport type { ErrorDetails, ZappieErrorCode } from \"./errors\";\nexport * from \"./models\";\nexport { format, money } from \"./money\";\nexport type { Currency, Formatters, Money, MoneyFormatOptions } from \"./money\";\nexport { RestTransport } from \"./transport/rest\";\nexport type { RestTransportOptions } from \"./transport/rest\";\nexport type {\n  MenuResponse,\n  MenuVersion,\n  RequestCtx,\n  SearchPage,\n  SearchRequest,\n  Transport,\n} from \"./transport/types\";\n\nexport { ZappieCartError } from \"./cart/errors\";\nexport { previewItem } from \"./cart/preview\";\nexport { estimateUnitPrice } from \"./cart/price\";\nexport { resolveSourceMenu } from \"./cart/source-menu\";\nexport type * from \"./cart/types\";\nexport { validateLine } from \"./cart/validate\";\n"],
-  "mappings": ";AAUA,SAAS,oBAAoB;AAU7B,SAAS,mBAAmB;AAM5B,SAAS,aAAa,qBAAqB;AAE3C,cAAc;AACd,SAAS,QAAQ,aAAa;AAE9B,SAAS,qBAAqB;AAW9B,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAC5B,SAAS,yBAAyB;AAClC,SAAS,yBAAyB;AAElC,SAAS,oBAAoB;AAzCtB,IAAM,UACX,OACI,UACA;",
+  "mappings": ";AAUA,SAAS,oBAAoB;AAU7B,SAAS,mBAAmB;AAM5B,SAAS,aAAa,qBAAqB;AAE3C,cAAc;AACd,SAAS,QAAQ,aAAa;AAE9B,SAAS,qBAAqB;AAW9B,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAC5B,SAAS,yBAAyB;AAClC,SAAS,yBAAyB;AAElC,SAAS,oBAAoB;AAzCtB,IAAM,UACX,OACI,WACA;",
   "names": []
 }

package/dist/react/index.d.ts

@@ -1,7 +1,7 @@
 export { VERSION } from '../index.js';
 import { I as Item, a as Menu, S as Store, M as Money } from '../models-D__QbqEd.js';
 import { a as ZappieError, Z as Zappie } from '../client-DzUauU-b.js';
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode } from 'react';
 import { d as CartModule, C as CartLine, c as CartFulfilment, e as CartState, f as CartIssue } from '../types-gQXU2gEA.js';
 
@@ -35,7 +35,7 @@ declare function ZappieProvider({ client, initialData, children, }: {
         menu?: Menu;
     };
     children: ReactNode;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 /** Read your storefront client from the nearest ZappieProvider. */
 declare function useZappie(): Zappie;
 

package/dist/site-config/types.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/site-config/types.ts"],
-  "sourcesContent": ["/**\n * Default site budgets: 200 KB gzipped JavaScript, 50 KB gzipped CSS and 2500 ms LCP.\n */\nexport const DEFAULT_BUDGETS = {\n  jsKbGz: 200,\n  cssKbGz: 50,\n  lcpMs: 2500,\n} as const;\n\n/**\n * Package names and patterns allowed globally without a site-specific allowlist entry.\n */\nexport const GLOBAL_PACKAGE_ALLOWLIST = [\n  \"react\",\n  \"react-dom\",\n  \"react-router\",\n  \"@react-router/*\",\n  \"@zappie/*\",\n  \"tailwindcss\",\n  \"@tailwindcss/*\",\n  \"clsx\",\n  \"tailwind-merge\",\n  \"class-variance-authority\",\n  \"lucide-react\",\n  \"date-fns\",\n  \"embla-carousel-react\",\n  \"framer-motion/motion\",\n  \"zod\",\n  \"@radix-ui/*\",\n  \"sonner\",\n  \"vaul\",\n] as const;\n\n/**\n * The store, theme and optional build policies you export from zappie.config.ts.\n */\nexport type ZappieSiteConfig = {\n  store: string;\n  branches?: string[];\n  theme: string;\n  prerender?: string[];\n  menu?: { hiddenCategories?: string[] };\n  packages?: { allow?: string[] };\n  outbound?: { allow?: string[] };\n  /** Each budget left out uses DEFAULT_BUDGETS. */\n  budgets?: {\n    jsKbGz?: number;\n    cssKbGz?: number;\n    lcpMs?: number;\n    override?: { reason: string };\n  };\n  /** Records explained exceptions to storefront readiness checks. */\n  readiness?: {\n    /** Lets this site skip the initial route discovery requirement. */\n    routeDiscovery?: {\n      /** Explains why this site does not use initial route discovery. */\n      optOut: {\n        /** States the constraint that prevents initial route discovery. */\n        reason: string;\n      };\n    };\n  };\n  analytics?: { forward?: { ga4?: string; metaPixel?: string } };\n};\n\n/**\n * A configuration diagnostic with its field path, stable code, message and severity.\n */\nexport type ConfigIssue = {\n  path: string;\n  code:\n    | \"invalid_type\"\n    | \"missing_required\"\n    | \"unknown_key\"\n    | \"invalid_format\"\n    | \"duplicate\"\n    | \"redundant_allowlist\"\n    | \"budget_override\";\n  message: string;\n  severity: \"error\" | \"warning\";\n};\n\n/**\n * Configuration validation results. Warnings alone do not make valid false.\n */\nexport type ConfigValidation = { valid: boolean; issues: ConfigIssue[] };\n"],
+  "sourcesContent": ["/**\n * Default site budgets: 200 KB gzipped JavaScript, 50 KB gzipped CSS and 2500 ms LCP.\n */\nexport const DEFAULT_BUDGETS = {\n  jsKbGz: 200,\n  cssKbGz: 50,\n  lcpMs: 2500,\n} as const;\n\n/**\n * Package names and patterns allowed globally without a site-specific allowlist entry.\n */\nexport const GLOBAL_PACKAGE_ALLOWLIST = [\n  \"react\",\n  \"react-dom\",\n  \"react-router\",\n  \"@react-router/*\",\n  \"@zappie/*\",\n  \"tailwindcss\",\n  \"@tailwindcss/*\",\n  \"clsx\",\n  \"tailwind-merge\",\n  \"class-variance-authority\",\n  \"lucide-react\",\n  \"date-fns\",\n  \"embla-carousel-react\",\n  \"framer-motion/motion\",\n  \"zod\",\n  \"@radix-ui/*\",\n  \"sonner\",\n  \"vaul\",\n] as const;\n\n/**\n * The store, theme and optional build policies you export from zappie.config.ts.\n */\nexport type ZappieSiteConfig = {\n  store: string;\n  branches?: string[];\n  theme: string;\n  prerender?: string[];\n  menu?: { hiddenCategories?: string[] };\n  packages?: { allow?: string[] };\n  /** Time-bounded acknowledgements for advisories that have no fixed version. */\n  audit?: {\n    ignore?: { id: string; reason: string; until: string }[];\n  };\n  outbound?: { allow?: string[] };\n  /** Each budget left out uses DEFAULT_BUDGETS. */\n  budgets?: {\n    jsKbGz?: number;\n    cssKbGz?: number;\n    lcpMs?: number;\n    override?: { reason: string };\n  };\n  /** Records explained exceptions to storefront readiness checks. */\n  readiness?: {\n    /** Lets this site skip the initial route discovery requirement. */\n    routeDiscovery?: {\n      /** Explains why this site does not use initial route discovery. */\n      optOut: {\n        /** States the constraint that prevents initial route discovery. */\n        reason: string;\n      };\n    };\n  };\n  analytics?: { forward?: { ga4?: string; metaPixel?: string } };\n};\n\n/**\n * A configuration diagnostic with its field path, stable code, message and severity.\n */\nexport type ConfigIssue = {\n  path: string;\n  code:\n    | \"invalid_type\"\n    | \"missing_required\"\n    | \"unknown_key\"\n    | \"invalid_format\"\n    | \"duplicate\"\n    | \"redundant_allowlist\"\n    | \"budget_override\";\n  message: string;\n  severity: \"error\" | \"warning\";\n};\n\n/**\n * Configuration validation results. Warnings alone do not make valid false.\n */\nexport type ConfigValidation = { valid: boolean; issues: ConfigIssue[] };\n"],
   "mappings": ";AAGO,IAAM,kBAAkB;AAAA,EAC7B,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,OAAO;AACT;AAKO,IAAM,2BAA2B;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
   "names": []
 }

package/dist/site-config/validate.js

@@ -15,6 +15,7 @@ var rootKeys = [
   "prerender",
   "menu",
   "packages",
+  "audit",
   "outbound",
   "budgets",
   "readiness",

package/dist/site-config/validate.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/site-config/validate.ts"],
-  "sourcesContent": ["import {\n  globallyAllowed,\n  hostname,\n  nonblank,\n  packageName,\n  record,\n  unknownKeys,\n} from \"./helpers\";\nimport { analytics, budgets, nested } from \"./sections\";\nimport type { ConfigIssue, ConfigValidation } from \"./types\";\n\nconst rootKeys = [\n  \"store\",\n  \"branches\",\n  \"theme\",\n  \"prerender\",\n  \"menu\",\n  \"packages\",\n  \"outbound\",\n  \"budgets\",\n  \"readiness\",\n  \"analytics\",\n] as const;\n\n/**\n * Validate a site configuration and collect errors and warnings without changing it.\n * Checks required fields, unknown keys, allowlists, budgets and analytics settings.\n *\n * @param input - The configuration value to inspect.\n * @returns Diagnostics and a valid flag that is true when there are no errors.\n */\nexport function validateConfig(input: unknown): ConfigValidation {\n  const issues: ConfigIssue[] = [];\n  const issue = (value: ConfigIssue) => issues.push(value);\n  const error = (path: string, code: ConfigIssue[\"code\"], message: string) =>\n    issue({ path, code, message, severity: \"error\" });\n  if (!record(input)) {\n    return {\n      valid: false,\n      issues: [\n        {\n          path: \"$\",\n          code: \"invalid_type\",\n          message:\n            \"Expected a configuration object. Export an object from zappie.config.ts.\",\n          severity: \"error\",\n        },\n      ],\n    };\n  }\n  unknownKeys(input, rootKeys, \"\", issue);\n  requiredSlug(input.store, \"store\", error);\n  theme(input.theme, error);\n  stringList(input.branches, \"branches\", error, {\n    nonempty: true,\n    unique: true,\n    slug: true,\n  });\n  paths(input.prerender, error);\n  nested(input.menu, \"menu\", [\"hiddenCategories\"], issue, (value) => {\n    stringList(value.hiddenCategories, \"menu.hiddenCategories\", error);\n  });\n  nested(input.packages, \"packages\", [\"allow\"], issue, (value) => {\n    const allow = stringList(value.allow, \"packages.allow\", error);\n    allow?.forEach((name, index) => {\n      if (globallyAllowed(name)) {\n        issue({\n          path: `packages.allow[${index}]`,\n          code: \"redundant_allowlist\",\n          message: `${name} is already globally allowed. Remove it from packages.allow.`,\n          severity: \"warning\",\n        });\n      } else if (!packageName(name)) {\n        error(\n          `packages.allow[${index}]`,\n          \"invalid_format\",\n          \"Expected a lowercase npm package name. Use a package name such as lucide-react or @scope/name.\",\n        );\n      }\n    });\n  });\n  nested(input.outbound, \"outbound\", [\"allow\"], issue, (value) => {\n    const allow = stringList(value.allow, \"outbound.allow\", error);\n    allow?.forEach((host, index) => {\n      if (!hostname(host)) {\n        error(\n          `outbound.allow[${index}]`,\n          \"invalid_format\",\n          \"Expected a hostname or leading *. subdomain pattern without a scheme, path, port or IP. Use a value such as api.example.com.\",\n        );\n      }\n    });\n  });\n  budgets(input.budgets, issue, error);\n  nested(\n    input.readiness,\n    \"readiness\",\n    [\"routeDiscovery\"],\n    issue,\n    (readiness) => {\n      nested(\n        readiness.routeDiscovery,\n        \"readiness.routeDiscovery\",\n        [\"optOut\"],\n        issue,\n        (routeDiscovery) => {\n          nested(\n            routeDiscovery.optOut,\n            \"readiness.routeDiscovery.optOut\",\n            [\"reason\"],\n            issue,\n            (optOut) => {\n              if (typeof optOut.reason !== \"string\" || !optOut.reason.trim()) {\n                error(\n                  \"readiness.routeDiscovery.optOut.reason\",\n                  \"invalid_format\",\n                  \"Expected a non-blank reason. Explain why the site disables initial route discovery.\",\n                );\n              }\n            },\n          );\n        },\n      );\n    },\n  );\n  analytics(input.analytics, issue, error);\n  return {\n    valid: !issues.some((entry) => entry.severity === \"error\"),\n    issues,\n  };\n}\n\ntype AddError = (\n  path: string,\n  code: ConfigIssue[\"code\"],\n  message: string,\n) => void;\n\nfunction requiredSlug(value: unknown, path: string, error: AddError) {\n  if (!nonblank(value)) {\n    error(\n      path,\n      value === undefined ? \"missing_required\" : \"invalid_type\",\n      `Expected a non-empty storefront slug. Set ${path} to the slug used by createZappie().`,\n    );\n  }\n}\n\nfunction theme(value: unknown, error: AddError) {\n  if (typeof value !== \"string\") {\n    error(\n      \"theme\",\n      value === undefined ? \"missing_required\" : \"invalid_type\",\n      \"Expected a relative .json path. Set theme to a value such as ./theme.json.\",\n    );\n  } else if (\n    !/\\.json$/.test(value) ||\n    /^(?:[a-z][a-z\\d+.-]*:|\\/|\\\\)/i.test(value) ||\n    value.includes(\"\\\\\")\n  ) {\n    error(\n      \"theme\",\n      \"invalid_format\",\n      \"Expected a relative .json path. Use a value such as ./theme.json.\",\n    );\n  }\n}\n\nfunction stringList(\n  value: unknown,\n  path: string,\n  error: AddError,\n  options: { nonempty?: boolean; unique?: boolean; slug?: boolean } = {},\n) {\n  if (value === undefined) {\n    return undefined;\n  }\n  if (\n    !Array.isArray(value) ||\n    value.some((entry) => typeof entry !== \"string\")\n  ) {\n    error(\n      path,\n      \"invalid_type\",\n      `Expected an array of strings. Set ${path} to string values.`,\n    );\n    return undefined;\n  }\n  if (options.nonempty && value.length === 0) {\n    error(\n      path,\n      \"invalid_format\",\n      `Expected at least one value. Add a value to ${path} or remove the field.`,\n    );\n  }\n  value.forEach((entry, index) => {\n    if (options.slug && !nonblank(entry)) {\n      error(\n        `${path}[${index}]`,\n        \"invalid_format\",\n        \"Expected a non-empty branch slug. Remove the empty value or use a branch slug.\",\n      );\n    }\n  });\n  if (options.unique && new Set(value).size !== value.length) {\n    error(\n      path,\n      \"duplicate\",\n      `Expected unique values. Remove duplicates from ${path}.`,\n    );\n  }\n  return value;\n}\n\nfunction paths(value: unknown, error: AddError) {\n  const values = stringList(value, \"prerender\", error, { unique: true });\n  values?.forEach((path, index) => {\n    if (!path.startsWith(\"/\")) {\n      error(\n        `prerender[${index}]`,\n        \"invalid_format\",\n        \"Expected a route starting with /. Prefix the route with /.\",\n      );\n    }\n  });\n}\n"],
-  "mappings": ";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,SAAS,cAAc;AAG3C,IAAM,WAAW;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AASO,SAAS,eAAe,OAAkC;AAC/D,QAAM,SAAwB,CAAC;AAC/B,QAAM,QAAQ,CAAC,UAAuB,OAAO,KAAK,KAAK;AACvD,QAAM,QAAQ,CAAC,MAAc,MAA2B,YACtD,MAAM,EAAE,MAAM,MAAM,SAAS,UAAU,QAAQ,CAAC;AAClD,MAAI,CAAC,OAAO,KAAK,GAAG;AAClB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SACE;AAAA,UACF,UAAU;AAAA,QACZ;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,cAAY,OAAO,UAAU,IAAI,KAAK;AACtC,eAAa,MAAM,OAAO,SAAS,KAAK;AACxC,QAAM,MAAM,OAAO,KAAK;AACxB,aAAW,MAAM,UAAU,YAAY,OAAO;AAAA,IAC5C,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACD,QAAM,MAAM,WAAW,KAAK;AAC5B,SAAO,MAAM,MAAM,QAAQ,CAAC,kBAAkB,GAAG,OAAO,CAAC,UAAU;AACjE,eAAW,MAAM,kBAAkB,yBAAyB,KAAK;AAAA,EACnE,CAAC;AACD,SAAO,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,OAAO,CAAC,UAAU;AAC9D,UAAM,QAAQ,WAAW,MAAM,OAAO,kBAAkB,KAAK;AAC7D,WAAO,QAAQ,CAAC,MAAM,UAAU;AAC9B,UAAI,gBAAgB,IAAI,GAAG;AACzB,cAAM;AAAA,UACJ,MAAM,kBAAkB,KAAK;AAAA,UAC7B,MAAM;AAAA,UACN,SAAS,GAAG,IAAI;AAAA,UAChB,UAAU;AAAA,QACZ,CAAC;AAAA,MACH,WAAW,CAAC,YAAY,IAAI,GAAG;AAC7B;AAAA,UACE,kBAAkB,KAAK;AAAA,UACvB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACD,SAAO,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,OAAO,CAAC,UAAU;AAC9D,UAAM,QAAQ,WAAW,MAAM,OAAO,kBAAkB,KAAK;AAC7D,WAAO,QAAQ,CAAC,MAAM,UAAU;AAC9B,UAAI,CAAC,SAAS,IAAI,GAAG;AACnB;AAAA,UACE,kBAAkB,KAAK;AAAA,UACvB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACD,UAAQ,MAAM,SAAS,OAAO,KAAK;AACnC;AAAA,IACE,MAAM;AAAA,IACN;AAAA,IACA,CAAC,gBAAgB;AAAA,IACjB;AAAA,IACA,CAAC,cAAc;AACb;AAAA,QACE,UAAU;AAAA,QACV;AAAA,QACA,CAAC,QAAQ;AAAA,QACT;AAAA,QACA,CAAC,mBAAmB;AAClB;AAAA,YACE,eAAe;AAAA,YACf;AAAA,YACA,CAAC,QAAQ;AAAA,YACT;AAAA,YACA,CAAC,WAAW;AACV,kBAAI,OAAO,OAAO,WAAW,YAAY,CAAC,OAAO,OAAO,KAAK,GAAG;AAC9D;AAAA,kBACE;AAAA,kBACA;AAAA,kBACA;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,YAAU,MAAM,WAAW,OAAO,KAAK;AACvC,SAAO;AAAA,IACL,OAAO,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,aAAa,OAAO;AAAA,IACzD;AAAA,EACF;AACF;AAQA,SAAS,aAAa,OAAgB,MAAc,OAAiB;AACnE,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,MACE;AAAA,MACA,UAAU,SAAY,qBAAqB;AAAA,MAC3C,6CAA6C,IAAI;AAAA,IACnD;AAAA,EACF;AACF;AAEA,SAAS,MAAM,OAAgB,OAAiB;AAC9C,MAAI,OAAO,UAAU,UAAU;AAC7B;AAAA,MACE;AAAA,MACA,UAAU,SAAY,qBAAqB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF,WACE,CAAC,UAAU,KAAK,KAAK,KACrB,gCAAgC,KAAK,KAAK,KAC1C,MAAM,SAAS,IAAI,GACnB;AACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,WACP,OACA,MACA,OACA,UAAoE,CAAC,GACrE;AACA,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AACA,MACE,CAAC,MAAM,QAAQ,KAAK,KACpB,MAAM,KAAK,CAAC,UAAU,OAAO,UAAU,QAAQ,GAC/C;AACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,qCAAqC,IAAI;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,YAAY,MAAM,WAAW,GAAG;AAC1C;AAAA,MACE;AAAA,MACA;AAAA,MACA,+CAA+C,IAAI;AAAA,IACrD;AAAA,EACF;AACA,QAAM,QAAQ,CAAC,OAAO,UAAU;AAC9B,QAAI,QAAQ,QAAQ,CAAC,SAAS,KAAK,GAAG;AACpC;AAAA,QACE,GAAG,IAAI,IAAI,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACD,MAAI,QAAQ,UAAU,IAAI,IAAI,KAAK,EAAE,SAAS,MAAM,QAAQ;AAC1D;AAAA,MACE;AAAA,MACA;AAAA,MACA,kDAAkD,IAAI;AAAA,IACxD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,MAAM,OAAgB,OAAiB;AAC9C,QAAM,SAAS,WAAW,OAAO,aAAa,OAAO,EAAE,QAAQ,KAAK,CAAC;AACrE,UAAQ,QAAQ,CAAC,MAAM,UAAU;AAC/B,QAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB;AAAA,QACE,aAAa,KAAK;AAAA,QAClB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;",
+  "sourcesContent": ["import {\n  globallyAllowed,\n  hostname,\n  nonblank,\n  packageName,\n  record,\n  unknownKeys,\n} from \"./helpers\";\nimport { analytics, budgets, nested } from \"./sections\";\nimport type { ConfigIssue, ConfigValidation } from \"./types\";\n\nconst rootKeys = [\n  \"store\",\n  \"branches\",\n  \"theme\",\n  \"prerender\",\n  \"menu\",\n  \"packages\",\n  \"audit\",\n  \"outbound\",\n  \"budgets\",\n  \"readiness\",\n  \"analytics\",\n] as const;\n\n/**\n * Validate a site configuration and collect errors and warnings without changing it.\n * Checks required fields, unknown keys, allowlists, budgets and analytics settings.\n *\n * @param input - The configuration value to inspect.\n * @returns Diagnostics and a valid flag that is true when there are no errors.\n */\nexport function validateConfig(input: unknown): ConfigValidation {\n  const issues: ConfigIssue[] = [];\n  const issue = (value: ConfigIssue) => issues.push(value);\n  const error = (path: string, code: ConfigIssue[\"code\"], message: string) =>\n    issue({ path, code, message, severity: \"error\" });\n  if (!record(input)) {\n    return {\n      valid: false,\n      issues: [\n        {\n          path: \"$\",\n          code: \"invalid_type\",\n          message:\n            \"Expected a configuration object. Export an object from zappie.config.ts.\",\n          severity: \"error\",\n        },\n      ],\n    };\n  }\n  unknownKeys(input, rootKeys, \"\", issue);\n  requiredSlug(input.store, \"store\", error);\n  theme(input.theme, error);\n  stringList(input.branches, \"branches\", error, {\n    nonempty: true,\n    unique: true,\n    slug: true,\n  });\n  paths(input.prerender, error);\n  nested(input.menu, \"menu\", [\"hiddenCategories\"], issue, (value) => {\n    stringList(value.hiddenCategories, \"menu.hiddenCategories\", error);\n  });\n  nested(input.packages, \"packages\", [\"allow\"], issue, (value) => {\n    const allow = stringList(value.allow, \"packages.allow\", error);\n    allow?.forEach((name, index) => {\n      if (globallyAllowed(name)) {\n        issue({\n          path: `packages.allow[${index}]`,\n          code: \"redundant_allowlist\",\n          message: `${name} is already globally allowed. Remove it from packages.allow.`,\n          severity: \"warning\",\n        });\n      } else if (!packageName(name)) {\n        error(\n          `packages.allow[${index}]`,\n          \"invalid_format\",\n          \"Expected a lowercase npm package name. Use a package name such as lucide-react or @scope/name.\",\n        );\n      }\n    });\n  });\n  nested(input.outbound, \"outbound\", [\"allow\"], issue, (value) => {\n    const allow = stringList(value.allow, \"outbound.allow\", error);\n    allow?.forEach((host, index) => {\n      if (!hostname(host)) {\n        error(\n          `outbound.allow[${index}]`,\n          \"invalid_format\",\n          \"Expected a hostname or leading *. subdomain pattern without a scheme, path, port or IP. Use a value such as api.example.com.\",\n        );\n      }\n    });\n  });\n  budgets(input.budgets, issue, error);\n  nested(\n    input.readiness,\n    \"readiness\",\n    [\"routeDiscovery\"],\n    issue,\n    (readiness) => {\n      nested(\n        readiness.routeDiscovery,\n        \"readiness.routeDiscovery\",\n        [\"optOut\"],\n        issue,\n        (routeDiscovery) => {\n          nested(\n            routeDiscovery.optOut,\n            \"readiness.routeDiscovery.optOut\",\n            [\"reason\"],\n            issue,\n            (optOut) => {\n              if (typeof optOut.reason !== \"string\" || !optOut.reason.trim()) {\n                error(\n                  \"readiness.routeDiscovery.optOut.reason\",\n                  \"invalid_format\",\n                  \"Expected a non-blank reason. Explain why the site disables initial route discovery.\",\n                );\n              }\n            },\n          );\n        },\n      );\n    },\n  );\n  analytics(input.analytics, issue, error);\n  return {\n    valid: !issues.some((entry) => entry.severity === \"error\"),\n    issues,\n  };\n}\n\ntype AddError = (\n  path: string,\n  code: ConfigIssue[\"code\"],\n  message: string,\n) => void;\n\nfunction requiredSlug(value: unknown, path: string, error: AddError) {\n  if (!nonblank(value)) {\n    error(\n      path,\n      value === undefined ? \"missing_required\" : \"invalid_type\",\n      `Expected a non-empty storefront slug. Set ${path} to the slug used by createZappie().`,\n    );\n  }\n}\n\nfunction theme(value: unknown, error: AddError) {\n  if (typeof value !== \"string\") {\n    error(\n      \"theme\",\n      value === undefined ? \"missing_required\" : \"invalid_type\",\n      \"Expected a relative .json path. Set theme to a value such as ./theme.json.\",\n    );\n  } else if (\n    !/\\.json$/.test(value) ||\n    /^(?:[a-z][a-z\\d+.-]*:|\\/|\\\\)/i.test(value) ||\n    value.includes(\"\\\\\")\n  ) {\n    error(\n      \"theme\",\n      \"invalid_format\",\n      \"Expected a relative .json path. Use a value such as ./theme.json.\",\n    );\n  }\n}\n\nfunction stringList(\n  value: unknown,\n  path: string,\n  error: AddError,\n  options: { nonempty?: boolean; unique?: boolean; slug?: boolean } = {},\n) {\n  if (value === undefined) {\n    return undefined;\n  }\n  if (\n    !Array.isArray(value) ||\n    value.some((entry) => typeof entry !== \"string\")\n  ) {\n    error(\n      path,\n      \"invalid_type\",\n      `Expected an array of strings. Set ${path} to string values.`,\n    );\n    return undefined;\n  }\n  if (options.nonempty && value.length === 0) {\n    error(\n      path,\n      \"invalid_format\",\n      `Expected at least one value. Add a value to ${path} or remove the field.`,\n    );\n  }\n  value.forEach((entry, index) => {\n    if (options.slug && !nonblank(entry)) {\n      error(\n        `${path}[${index}]`,\n        \"invalid_format\",\n        \"Expected a non-empty branch slug. Remove the empty value or use a branch slug.\",\n      );\n    }\n  });\n  if (options.unique && new Set(value).size !== value.length) {\n    error(\n      path,\n      \"duplicate\",\n      `Expected unique values. Remove duplicates from ${path}.`,\n    );\n  }\n  return value;\n}\n\nfunction paths(value: unknown, error: AddError) {\n  const values = stringList(value, \"prerender\", error, { unique: true });\n  values?.forEach((path, index) => {\n    if (!path.startsWith(\"/\")) {\n      error(\n        `prerender[${index}]`,\n        \"invalid_format\",\n        \"Expected a route starting with /. Prefix the route with /.\",\n      );\n    }\n  });\n}\n"],
+  "mappings": ";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,SAAS,cAAc;AAG3C,IAAM,WAAW;AAAA,EACf;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AASO,SAAS,eAAe,OAAkC;AAC/D,QAAM,SAAwB,CAAC;AAC/B,QAAM,QAAQ,CAAC,UAAuB,OAAO,KAAK,KAAK;AACvD,QAAM,QAAQ,CAAC,MAAc,MAA2B,YACtD,MAAM,EAAE,MAAM,MAAM,SAAS,UAAU,QAAQ,CAAC;AAClD,MAAI,CAAC,OAAO,KAAK,GAAG;AAClB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SACE;AAAA,UACF,UAAU;AAAA,QACZ;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,cAAY,OAAO,UAAU,IAAI,KAAK;AACtC,eAAa,MAAM,OAAO,SAAS,KAAK;AACxC,QAAM,MAAM,OAAO,KAAK;AACxB,aAAW,MAAM,UAAU,YAAY,OAAO;AAAA,IAC5C,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACD,QAAM,MAAM,WAAW,KAAK;AAC5B,SAAO,MAAM,MAAM,QAAQ,CAAC,kBAAkB,GAAG,OAAO,CAAC,UAAU;AACjE,eAAW,MAAM,kBAAkB,yBAAyB,KAAK;AAAA,EACnE,CAAC;AACD,SAAO,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,OAAO,CAAC,UAAU;AAC9D,UAAM,QAAQ,WAAW,MAAM,OAAO,kBAAkB,KAAK;AAC7D,WAAO,QAAQ,CAAC,MAAM,UAAU;AAC9B,UAAI,gBAAgB,IAAI,GAAG;AACzB,cAAM;AAAA,UACJ,MAAM,kBAAkB,KAAK;AAAA,UAC7B,MAAM;AAAA,UACN,SAAS,GAAG,IAAI;AAAA,UAChB,UAAU;AAAA,QACZ,CAAC;AAAA,MACH,WAAW,CAAC,YAAY,IAAI,GAAG;AAC7B;AAAA,UACE,kBAAkB,KAAK;AAAA,UACvB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACD,SAAO,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,OAAO,CAAC,UAAU;AAC9D,UAAM,QAAQ,WAAW,MAAM,OAAO,kBAAkB,KAAK;AAC7D,WAAO,QAAQ,CAAC,MAAM,UAAU;AAC9B,UAAI,CAAC,SAAS,IAAI,GAAG;AACnB;AAAA,UACE,kBAAkB,KAAK;AAAA,UACvB;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACD,UAAQ,MAAM,SAAS,OAAO,KAAK;AACnC;AAAA,IACE,MAAM;AAAA,IACN;AAAA,IACA,CAAC,gBAAgB;AAAA,IACjB;AAAA,IACA,CAAC,cAAc;AACb;AAAA,QACE,UAAU;AAAA,QACV;AAAA,QACA,CAAC,QAAQ;AAAA,QACT;AAAA,QACA,CAAC,mBAAmB;AAClB;AAAA,YACE,eAAe;AAAA,YACf;AAAA,YACA,CAAC,QAAQ;AAAA,YACT;AAAA,YACA,CAAC,WAAW;AACV,kBAAI,OAAO,OAAO,WAAW,YAAY,CAAC,OAAO,OAAO,KAAK,GAAG;AAC9D;AAAA,kBACE;AAAA,kBACA;AAAA,kBACA;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,YAAU,MAAM,WAAW,OAAO,KAAK;AACvC,SAAO;AAAA,IACL,OAAO,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,aAAa,OAAO;AAAA,IACzD;AAAA,EACF;AACF;AAQA,SAAS,aAAa,OAAgB,MAAc,OAAiB;AACnE,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,MACE;AAAA,MACA,UAAU,SAAY,qBAAqB;AAAA,MAC3C,6CAA6C,IAAI;AAAA,IACnD;AAAA,EACF;AACF;AAEA,SAAS,MAAM,OAAgB,OAAiB;AAC9C,MAAI,OAAO,UAAU,UAAU;AAC7B;AAAA,MACE;AAAA,MACA,UAAU,SAAY,qBAAqB;AAAA,MAC3C;AAAA,IACF;AAAA,EACF,WACE,CAAC,UAAU,KAAK,KAAK,KACrB,gCAAgC,KAAK,KAAK,KAC1C,MAAM,SAAS,IAAI,GACnB;AACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,WACP,OACA,MACA,OACA,UAAoE,CAAC,GACrE;AACA,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AACA,MACE,CAAC,MAAM,QAAQ,KAAK,KACpB,MAAM,KAAK,CAAC,UAAU,OAAO,UAAU,QAAQ,GAC/C;AACA;AAAA,MACE;AAAA,MACA;AAAA,MACA,qCAAqC,IAAI;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,YAAY,MAAM,WAAW,GAAG;AAC1C;AAAA,MACE;AAAA,MACA;AAAA,MACA,+CAA+C,IAAI;AAAA,IACrD;AAAA,EACF;AACA,QAAM,QAAQ,CAAC,OAAO,UAAU;AAC9B,QAAI,QAAQ,QAAQ,CAAC,SAAS,KAAK,GAAG;AACpC;AAAA,QACE,GAAG,IAAI,IAAI,KAAK;AAAA,QAChB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACD,MAAI,QAAQ,UAAU,IAAI,IAAI,KAAK,EAAE,SAAS,MAAM,QAAQ;AAC1D;AAAA,MACE;AAAA,MACA;AAAA,MACA,kDAAkD,IAAI;AAAA,IACxD;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,MAAM,OAAgB,OAAiB;AAC9C,QAAM,SAAS,WAAW,OAAO,aAAa,OAAO,EAAE,QAAQ,KAAK,CAAC;AACrE,UAAQ,QAAQ,CAAC,MAAM,UAAU;AAC/B,QAAI,CAAC,KAAK,WAAW,GAAG,GAAG;AACzB;AAAA,QACE,aAAa,KAAK;AAAA,QAClB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;",
   "names": []
 }

package/dist/template/react.d.ts

@@ -1,12 +1,12 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { TemplateMode } from '@zappie/sdk/template';
+import * as react from 'react';
 import { ReactNode } from 'react';
+import { TemplateMode } from '@zappie/sdk/template';
 
 /** Supply the host-controlled template mode and editor bridge to a storefront. */
 declare function TemplateSettingsProvider({ mode, children, }: {
     mode: TemplateMode;
     children: ReactNode;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 /** Read effective merchant settings over the defaults declared by a template. */
 declare function useTemplateSettings<T extends Record<string, unknown>>(defaults: T): T;
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zappie/sdk",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "Typed, framework-agnostic client for Zappie menus, carts, checkout, auth and events.",
   "type": "module",
   "sideEffects": false,