@zenky/storefront-vue 0.10.0 → 0.10.3

package/dist/{chunk-OQLU7FSR.js → chunk-G2X4SBCO.js}

@@ -1,14 +1,14 @@
-import { useCartCredentials, usePromotionsChecker } from './chunk-4MJKN7PL.js';
+import { useCartCredentials, usePromotionsChecker } from './chunk-N3NOTJUC.js';
 import { createRuntimeState } from './chunk-5QCUH3FF.js';
 import { useCatalogStore } from './chunk-Z3IW4ODZ.js';
 import { usePromotionsStore } from './chunk-BWUKMWHL.js';
-import { useStoreProfileStore, useAuthStore } from './chunk-PWHIDGKW.js';
-import { getRemoteCatalog } from './chunk-EYRCAUUP.js';
-import { useCartStore, useOrderSettingsStore } from './chunk-VL3T36VM.js';
+import { useStoreProfileStore, useAuthStore } from './chunk-TEG7EL4N.js';
+import { getRemoteCatalog } from './chunk-E3G7NGCH.js';
+import { useCartStore, useOrderSettingsStore } from './chunk-FFBZKQRV.js';
 import { useRuntime } from './chunk-V3VVDQIR.js';
 import { minorToMajor, majorToMinor } from './chunk-RO25KNM5.js';
 import { PaymentMethod, OrderAuthenticationMethod, DeliveryMethod, OrderCartCheckerResultAction, RecaptchaAction } from '@zenky/storefront-api';
-import { computed, ref, watch, watchEffect, getCurrentScope, onScopeDispose, toValue } from 'vue';
+import { ref, computed, watch, watchEffect, getCurrentScope, onScopeDispose, toValue } from 'vue';
 import { storeToRefs } from 'pinia';
 
 // src/cart/constants.ts
@@ -95,16 +95,70 @@ function buildCashChangePresets({
 }
 
 // src/cart/logCartError.ts
+var REDACTED = "[REDACTED]";
+var MAX_LOG_DEPTH = 6;
+var MAX_ARRAY_ITEMS = 25;
+var MAX_OBJECT_KEYS = 50;
+var SENSITIVE_KEY_PARTS = [
+  "authorization",
+  "cookie",
+  "credential",
+  "password",
+  "recaptcha",
+  "secret",
+  "token"
+];
+var SENSITIVE_EXACT_KEYS = /* @__PURE__ */ new Set(["cvc", "cvv", "otp", "pan", "pin"]);
+var SENSITIVE_ASSIGNMENT = /((?:authorization|cookie|password|recaptcha|secret|(?:api|access|auth|card|order|refresh)[_-]?token|token)\s*[=:]\s*["']?)([^\s,"';&}\]]+)/gi;
+var SENSITIVE_QUERY_PARAM = /([?&#](?:authorization|password|recaptcha|secret|(?:api|access|auth|card|order|refresh)[_-]?token|token)=)([^&#\s]+)/gi;
+var BEARER_TOKEN = /(bearer\s+)[a-z0-9._~+/=-]+/gi;
+function isSensitiveKey(key) {
+  const normalized = key.replace(/[^a-z0-9]/gi, "").toLowerCase();
+  return SENSITIVE_EXACT_KEYS.has(normalized) || normalized.includes("confirmationcode") || normalized.includes("verificationcode") || SENSITIVE_KEY_PARTS.some((part) => normalized.includes(part));
+}
+function sanitizeString(value) {
+  return value.replace(BEARER_TOKEN, `$1${REDACTED}`).replace(SENSITIVE_QUERY_PARAM, `$1${REDACTED}`).replace(SENSITIVE_ASSIGNMENT, `$1${REDACTED}`);
+}
+function sanitizeLogValue(value, depth = 0, seen = /* @__PURE__ */ new WeakSet()) {
+  if (typeof value === "string") return sanitizeString(value);
+  if (value === null || typeof value !== "object") return value;
+  if (depth >= MAX_LOG_DEPTH) return "[TRUNCATED]";
+  if (seen.has(value)) return "[CIRCULAR]";
+  seen.add(value);
+  if (Array.isArray(value)) {
+    const sanitized = value.slice(0, MAX_ARRAY_ITEMS).map((item) => sanitizeLogValue(item, depth + 1, seen));
+    if (value.length > MAX_ARRAY_ITEMS) sanitized.push("[TRUNCATED]");
+    return sanitized;
+  }
+  const result = {};
+  if (value instanceof Error) {
+    result.name = sanitizeString(value.name);
+    result.message = sanitizeString(value.message);
+  }
+  let allEntries;
+  try {
+    allEntries = Object.entries(value);
+  } catch {
+    return "[UNSERIALIZABLE]";
+  }
+  const entries = allEntries.slice(0, MAX_OBJECT_KEYS);
+  for (const [key, nestedValue] of entries) {
+    if (key === "name" || key === "message") continue;
+    result[key] = isSensitiveKey(key) ? REDACTED : sanitizeLogValue(nestedValue, depth + 1, seen);
+  }
+  if (allEntries.length > MAX_OBJECT_KEYS) result.__truncated__ = true;
+  return result;
+}
 function logCartError({ scope, context }, e) {
   const err = e?.err;
+  const safeContext = sanitizeLogValue(context);
   console.error(`[${scope}] failed`, {
-    ...context ?? {},
+    ...safeContext ?? {},
     httpCode: err?.http_code,
     errorCode: err?.error_code,
-    message: err?.message,
-    meta: err?.meta,
-    // raw — полный объект ошибки на случай нестандартных полей
-    raw: e
+    message: sanitizeLogValue(err?.message),
+    meta: sanitizeLogValue(err?.meta),
+    error: sanitizeLogValue(e)
   });
 }
 function getCartErrorCode(e) {
@@ -115,7 +169,7 @@ function getCartErrorHttpCode(e) {
 }
 function getValidationErrors(e) {
   const err = e?.err;
-  if (!err || err.error_code !== "validation") return {};
+  if (err?.error_code !== "validation") return {};
   const meta = err.meta;
   return meta?.errors ?? {};
 }
@@ -337,7 +391,7 @@ function useCartAddressSync() {
       const response = await sdk.customer.getAddresses(storeId, void 0, requestedToken);
       addresses = response.items ?? [];
     } catch (e) {
-      console.error("[address-sync] failed to fetch saved addresses", e);
+      logCartError({ scope: "address-sync", context: { storeId } }, e);
       return;
     }
     if (!authStore.isAuthenticated || authStore.token !== requestedToken) return;
@@ -381,9 +435,13 @@ var ORDER_INCLUDES = [
   "variants.product.images",
   "variants.product.categories",
   "variants.modifiers.modifier",
-  "variants.modifiers.modifiers_group"
+  "variants.modifiers.modifiers_group",
+  // Ограничения позиций (#32): is_blocking для сообщений в корзине и блокировки чекаута.
+  "variants.restrictions"
 ].join(",");
 var ORDER_WITH = { with: ORDER_INCLUDES };
+var RUM_MARK_CART_INIT = "rum:cart:init";
+var RUM_METRIC_CART_INIT = "rum_cart_init_seconds";
 var getInitializationState = createRuntimeState(() => ({ promise: null }));
 function useCartInitialization(credentials, sdk) {
   const cartStore = useCartStore();
@@ -406,10 +464,17 @@ function useCartInitialization(credentials, sdk) {
       const settings = await sdk.orders.getOrderSettings(storeId, orderCredentials);
       cartStore.setOrderSettings(settings);
     } catch (e) {
-      console.error("[cart] Failed to load order settings", e);
+      logCartError(
+        {
+          scope: "cart-load-order-settings",
+          context: { orderId: cartStore.credentials?.id }
+        },
+        e
+      );
     }
   }
   async function _doInitialize() {
+    runtime.rum?.mark(RUM_MARK_CART_INIT);
     cartStore.setInitializing(true);
     try {
       if (credentials.orderIdCookie.value && credentials.orderTokenCookie.value) {
@@ -448,6 +513,7 @@ function useCartInitialization(credentials, sdk) {
         }
       }
       cartStore.setInitializing(false);
+      runtime.rum?.measure(RUM_METRIC_CART_INIT, RUM_MARK_CART_INIT);
     }
   }
   function initializeOrder() {
@@ -493,9 +559,13 @@ function useOrderBonuses(deps = {}) {
         activity.begin("bonuses");
         try {
           const orderCredentials = credentials.getCredentials();
-          const updatedOrder = await sdk.orders.setOrderPayments(storeId, orderCredentials, {
-            payments: [...additionalPayments, bonusesPayment]
-          });
+          const updatedOrder = await sdk.orders.setOrderPayments(
+            storeId,
+            orderCredentials,
+            {
+              payments: [...additionalPayments, bonusesPayment]
+            }
+          );
           if (isStale()) return;
           if (Array.isArray(updatedOrder)) {
             cartStore.setOrderPaymentsState(updatedOrder);
@@ -527,9 +597,13 @@ function useOrderBonuses(deps = {}) {
         activity.begin("bonuses");
         try {
           const orderCredentials = credentials.getCredentials();
-          const updatedOrder = await sdk.orders.setOrderPayments(storeId, orderCredentials, {
-            payments: mainPayment ? [mainPayment] : []
-          });
+          const updatedOrder = await sdk.orders.setOrderPayments(
+            storeId,
+            orderCredentials,
+            {
+              payments: mainPayment ? [mainPayment] : []
+            }
+          );
           if (isStale()) return;
           if (Array.isArray(updatedOrder)) {
             cartStore.setOrderPaymentsState(updatedOrder);
@@ -807,7 +881,6 @@ function useCartCustomerAttachment(cache) {
       await sdk.orders.setOrderCustomer(storeId, credentials, {
         phone: { number: authStore.phone ?? "", country: authStore.countryCode }
       });
-      console.log("[cart] customer attached to order");
       const fresh = await sdk.orders.getOrder(storeId, credentials, ORDER_WITH);
       if (!authStore.isAuthenticated || authStore.token !== requestedToken) return;
       if (cartStore.order?.id !== requestedOrderId) return;
@@ -823,7 +896,13 @@ function useCartCustomerAttachment(cache) {
         }
       }
     } catch (e) {
-      console.error("[cart] failed to attach customer to order", e);
+      logCartError(
+        {
+          scope: "cart-customer-attach",
+          context: { orderId: requestedOrderId }
+        },
+        e
+      );
       if (notifyOnPhoneChange) {
         notifier.error("\u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u043E\u0431\u043D\u043E\u0432\u0438\u0442\u044C \u043A\u043E\u043D\u0442\u0430\u043A\u0442\u043D\u044B\u0435 \u0434\u0430\u043D\u043D\u044B\u0435 \u043F\u043E\u0441\u043B\u0435 \u0432\u0445\u043E\u0434\u0430");
       }
@@ -843,7 +922,13 @@ function useCartCustomerAttachment(cache) {
       cartStore.setOrder(fresh);
       cache.clear();
     } catch (e) {
-      console.error("[cart] failed to refresh order after logout", e);
+      logCartError(
+        {
+          scope: "cart-customer-refresh-after-logout",
+          context: { orderId: requestedOrderId }
+        },
+        e
+      );
     }
   }
   watch(
@@ -1162,7 +1247,7 @@ function useOrderPromocode(deps = {}) {
       logCartError(
         {
           scope: "promocode-apply",
-          context: { code: trimmed, orderId: cartStore.credentials?.id }
+          context: { codeLength: trimmed.length, orderId: cartStore.credentials?.id }
         },
         e
       );
@@ -1195,7 +1280,7 @@ function useOrderPromocode(deps = {}) {
         {
           scope: "promocode-remove",
           context: {
-            code: applied.value?.promocode,
+            codeLength: applied.value?.promocode?.length,
             orderId: cartStore.credentials?.id
           }
         },
@@ -1293,7 +1378,13 @@ function useCartDeliveryAttachment() {
         if (!recovered) orderSettings.setSelectedAddress(null, null, null);
         return;
       }
-      console.error("[cart-delivery-attach] failed", result.error);
+      logCartError(
+        {
+          scope: "cart-delivery-attach",
+          context: { orderId: cartStore.credentials?.id }
+        },
+        result.error
+      );
     }
   }
   watch(
@@ -1835,7 +1926,86 @@ function useOrderChannel() {
     });
   }
 }
+var getGateState = createRuntimeState(() => ({
+  isOpen: ref(false),
+  blocking: ref([]),
+  product: ref(null),
+  resolver: null
+}));
+function useRestrictionGate() {
+  const state = getGateState(useRuntime());
+  function settle(confirmed) {
+    state.isOpen.value = false;
+    const resolve = state.resolver;
+    state.resolver = null;
+    resolve?.(confirmed);
+  }
+  function confirmBlocking(items, gateProduct) {
+    settle(false);
+    state.blocking.value = items;
+    state.product.value = gateProduct;
+    state.isOpen.value = true;
+    return new Promise((resolve) => {
+      state.resolver = resolve;
+    });
+  }
+  return {
+    isOpen: state.isOpen,
+    blocking: state.blocking,
+    product: state.product,
+    confirmBlocking,
+    confirm: () => settle(true),
+    cancel: () => settle(false)
+  };
+}
+
+// src/cart/useRestrictedAddToCart.ts
+function useRestrictedAddToCart() {
+  const { sdk } = useRuntime();
+  const profileStore = useStoreProfileStore();
+  const { addToCart } = useStorefrontCart();
+  const { confirmBlocking, isOpen: gateIsOpen } = useRestrictionGate();
+  async function checkRestrictionsAllowed(product, alreadyInCart) {
+    if (alreadyInCart || !product.restrictions?.length) return true;
+    const storeId = profileStore.store?.id;
+    const cityId = profileStore.city?.id;
+    if (!storeId || !cityId) return true;
+    let blocking = [];
+    try {
+      const url = sdk.client.getStoreUrl(storeId, `/products/${product.id}/restrictions`, {
+        city_id: cityId,
+        stock_id: profileStore.stock?.id ?? void 0
+      });
+      const response = await sdk.client.request("GET", url);
+      blocking = (response?.data ?? []).filter((item) => item.is_blocking);
+    } catch (error) {
+      logCartError({ scope: "restrictions-check", context: { productId: product.id } }, error);
+      return true;
+    }
+    if (!blocking.length) return true;
+    if (gateIsOpen.value) return false;
+    return confirmBlocking(blocking, {
+      name: product.name ?? "",
+      image: product.images?.[0] ?? null
+    });
+  }
+  async function addWithRestrictionCheck(product, request, alreadyInCart) {
+    if (await checkRestrictionsAllowed(product, alreadyInCart)) {
+      await addToCart(request);
+    }
+  }
+  return { checkRestrictionsAllowed, addWithRestrictionCheck };
+}
+function useVisibleCartVariants() {
+  const cartStore = useCartStore();
+  return computed(
+    () => cartStore.variants.filter((variant) => {
+      const delta = cartStore.lineOptimistic[variantLineKey(variant)] ?? 0;
+      return variant.quantity + delta > 0;
+    })
+  );
+}
 
-export { CASH_DENOMINATIONS_MAJOR, DEFAULT_ROUND_STEPS_MAJOR, ORDER_EVENTS, ORDER_WITH, buildCartLineKey, buildCashChangePresets, buildMainPaymentRequest, getCartErrorCode, getCartErrorHttpCode, getCartErrorMessage, getCashDenominationsMinor, getDefaultRoundStepsMinor, getValidationErrors, logCartError, normalizeAddress, useBonusesReconciliation, useCartAddressSync, useCartCustomerAttachment, useCartDeliveryAttachment, useCartInitialization, useCartMutation, useCartOperations, useCartQuantities, useCartRecalculation, useCartStockWatcher, useCheckoutFlow, useCheckoutSubmit, useCustomerAttach, useOnlinePaymentRetry, useOrderBonuses, useOrderChannel, useOrderDelivery, useOrderPromocode, useOrderSettings, useOrderTotal, usePaymentSelection, useStorefrontCart, variantLineKey };
-//# sourceMappingURL=chunk-OQLU7FSR.js.map
-//# sourceMappingURL=chunk-OQLU7FSR.js.map
+export { CASH_DENOMINATIONS_MAJOR, DEFAULT_ROUND_STEPS_MAJOR, ORDER_EVENTS, ORDER_WITH, buildCartLineKey, buildCashChangePresets, buildMainPaymentRequest, getCartErrorCode, getCartErrorHttpCode, getCartErrorMessage, getCashDenominationsMinor, getDefaultRoundStepsMinor, getValidationErrors, logCartError, normalizeAddress, useBonusesReconciliation, useCartAddressSync, useCartCustomerAttachment, useCartDeliveryAttachment, useCartInitialization, useCartMutation, useCartOperations, useCartQuantities, useCartRecalculation, useCartStockWatcher, useCheckoutFlow, useCheckoutSubmit, useCustomerAttach, useOnlinePaymentRetry, useOrderBonuses, useOrderChannel, useOrderDelivery, useOrderPromocode, useOrderSettings, useOrderTotal, usePaymentSelection, useRestrictedAddToCart, useRestrictionGate, useStorefrontCart, useVisibleCartVariants, variantLineKey };
+//# sourceMappingURL=chunk-G2X4SBCO.js.map
+//# sourceMappingURL=chunk-G2X4SBCO.js.map