create-brainerce-store 1.44.1 → 1.45.0

package/dist/index.js

@@ -31,7 +31,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "create-brainerce-store",
-      version: "1.44.1",
+      version: "1.45.0",
       description: "Scaffold a production-ready e-commerce storefront connected to Brainerce",
       bin: {
         "create-brainerce-store": "dist/index.js"
@@ -178,7 +178,7 @@ var BRAINERCE_RUNTIME_DEPS = Object.freeze({
   // (Product.displayPrice / displayCurrency / displaySalePrice attached
   // additively when getProducts is called with a regionId). Scaffolded stores
   // must pin >=1.30 to get the auto-region + tax-estimate methods.
-  brainerce: "^1.30.0",
+  brainerce: "^1.32.0",
   "isomorphic-dompurify": "^3.8.0"
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-brainerce-store",
-  "version": "1.44.1",
+  "version": "1.45.0",
   "description": "Scaffold a production-ready e-commerce storefront connected to Brainerce",
   "bin": {
     "create-brainerce-store": "dist/index.js"

package/templates/nextjs/base/src/components/brainerce-bot.tsx

@@ -1,6 +1,8 @@
 'use client';
 
-import { useEffect } from 'react';
+import { useEffect, useRef } from 'react';
+
+import { useCart } from '@/providers/store-provider';
 
 /**
  * Mounts the Brainerce AI chat widget (the store's shopping assistant).
@@ -10,8 +12,16 @@ import { useEffect } from 'react';
  * Brainerce dashboard (Customers → Storefront Bot). This component renders
  * nothing until the bot is switched Live there, so it is always safe to keep
  * mounted.
+ *
+ * The widget's product cards call `onAddToCart`, which goes through the same
+ * smartAddToCart + refreshCart path as the storefront's own product cards, so
+ * the header cart count stays in sync.
  */
 export function BrainerceBotWidget() {
+  const { refreshCart } = useCart();
+  const refreshCartRef = useRef(refreshCart);
+  refreshCartRef.current = refreshCart;
+
   useEffect(() => {
     const connectionId =
       process.env.NEXT_PUBLIC_BRAINERCE_SALES_CHANNEL_ID ||
@@ -24,6 +34,20 @@ export function BrainerceBotWidget() {
       BrainerceBot.mount({
         connectionId,
         baseUrl: process.env.NEXT_PUBLIC_BRAINERCE_API_URL || undefined,
+        onAddToCart: async ({ productId, variantId, quantity }) => {
+          try {
+            const { getClient } = await import('@/lib/brainerce');
+            await getClient().smartAddToCart({
+              productId,
+              variantId: variantId ?? undefined,
+              quantity,
+            });
+            await refreshCartRef.current();
+            return true;
+          } catch {
+            return false; // widget falls back to the product page
+          }
+        },
       }).then((mounted) => {
         if (cancelled) mounted?.destroy();
         else bot = mounted;

package/templates/nextjs/base/src/middleware.ts.ejs

@@ -19,6 +19,17 @@ function generateNonce(): string {
   return btoa(binary);
 }
 
+// The Brainerce AI chat widget streams chat directly from the browser, so the
+// API origin must be allowed in connect-src (derived from env so local/staging
+// setups work without editing this file).
+function brainerceApiOrigin(): string {
+  try {
+    return new URL(process.env.NEXT_PUBLIC_BRAINERCE_API_URL || 'https://api.brainerce.com').origin;
+  } catch {
+    return 'https://api.brainerce.com';
+  }
+}
+
 function buildCsp(nonce: string): string {
   const isDev = process.env.NODE_ENV === 'development';
   // Next dev uses webpack's eval-source-map devtool, which requires 'unsafe-eval'
@@ -33,7 +44,7 @@ function buildCsp(nonce: string): string {
     "img-src 'self' data: blob: https:",
     "font-src 'self' data:",
     "frame-src 'self' https://meshulam.co.il https://*.meshulam.co.il https://grow.link https://*.grow.link https://grow.security https://*.grow.security https://creditguard.co.il https://*.creditguard.co.il https://js.stripe.com https://hooks.stripe.com https://pay.google.com https://secure.cardcom.solutions https://checkout.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://*.brainerce.com",
-    "connect-src 'self' https://*.meshulam.co.il https://grow.link https://*.grow.link https://*.grow.security https://pay.google.com https://*.stripe.com https://*.creditguard.co.il",
+    `connect-src 'self' ${brainerceApiOrigin()} https://api.brainerce.com https://*.meshulam.co.il https://grow.link https://*.grow.link https://*.grow.security https://pay.google.com https://*.stripe.com https://*.creditguard.co.il`,
     "worker-src 'self' blob:",
     // 'self' (not 'none') so iframe-based payment providers (e.g. Cardcom)
     // can redirect the iframe back to /payment-complete on the storefront
@@ -136,6 +147,17 @@ function generateNonce(): string {
   return btoa(binary);
 }
 
+// The Brainerce AI chat widget streams chat directly from the browser, so the
+// API origin must be allowed in connect-src (derived from env so local/staging
+// setups work without editing this file).
+function brainerceApiOrigin(): string {
+  try {
+    return new URL(process.env.NEXT_PUBLIC_BRAINERCE_API_URL || 'https://api.brainerce.com').origin;
+  } catch {
+    return 'https://api.brainerce.com';
+  }
+}
+
 function buildCsp(nonce: string): string {
   const isDev = process.env.NODE_ENV === 'development';
   // Next dev uses webpack's eval-source-map devtool, which requires 'unsafe-eval'
@@ -150,7 +172,7 @@ function buildCsp(nonce: string): string {
     "img-src 'self' data: blob: https:",
     "font-src 'self' data:",
     "frame-src 'self' https://meshulam.co.il https://*.meshulam.co.il https://grow.link https://*.grow.link https://grow.security https://*.grow.security https://creditguard.co.il https://*.creditguard.co.il https://js.stripe.com https://hooks.stripe.com https://pay.google.com https://secure.cardcom.solutions https://checkout.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://*.brainerce.com",
-    "connect-src 'self' https://*.meshulam.co.il https://grow.link https://*.grow.link https://*.grow.security https://pay.google.com https://*.stripe.com https://*.creditguard.co.il",
+    `connect-src 'self' ${brainerceApiOrigin()} https://api.brainerce.com https://*.meshulam.co.il https://grow.link https://*.grow.link https://*.grow.security https://pay.google.com https://*.stripe.com https://*.creditguard.co.il`,
     "worker-src 'self' blob:",
     // 'self' (not 'none') so iframe-based payment providers (e.g. Cardcom)
     // can redirect the iframe back to /payment-complete on the storefront