create-brainerce-store 1.52.4 → 1.53.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Brainerce Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.js

@@ -31,7 +31,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "create-brainerce-store",
-      version: "1.52.4",
+      version: "1.53.0",
       description: "Scaffold a production-ready e-commerce storefront connected to Brainerce",
       bin: {
         "create-brainerce-store": "dist/index.js"
@@ -180,7 +180,9 @@ var BRAINERCE_RUNTIME_DEPS = Object.freeze({
   // must pin >=1.30 to get the auto-region + tax-estimate methods.
   // 1.44 adds the order-level `notes` field to SetShippingAddressDto /
   // SetCheckoutCustomerDto — the scaffolded checkout form types depend on it.
-  brainerce: "^1.44.0",
+  // 1.46 adds getAddressSuggestions/getAddressDetails — the scaffolded
+  // checkout form's address-autocomplete typeahead calls these directly.
+  brainerce: "^1.46.0",
   "isomorphic-dompurify": "^3.8.0"
 });
 

package/messages/en.json

@@ -258,6 +258,8 @@
     "selectRegion": "Select region",
     "address": "Address",
     "streetAddress": "Street address",
+    "searchingAddress": "Searching…",
+    "outsideDeliveryZone": "This address is outside our regular delivery zones. You can still continue — we'll confirm delivery by phone.",
     "apartmentSuite": "Apartment, suite, etc.",
     "aptPlaceholder": "Apt, suite, unit, etc. (optional)",
     "city": "City",

package/messages/he.json

@@ -258,6 +258,8 @@
     "selectRegion": "בחרו מחוז",
     "address": "כתובת",
     "streetAddress": "רחוב ומספר",
+    "searchingAddress": "מחפש…",
+    "outsideDeliveryZone": "הכתובת הזו מחוץ לאזורי המשלוח הרגילים שלנו. ניתן להמשיך — ניצור איתך קשר טלפוני לתיאום המשלוח.",
     "apartmentSuite": "דירה, קומה וכו׳",
     "aptPlaceholder": "דירה, קומה, כניסה (אופציונלי)",
     "city": "עיר",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-brainerce-store",
-  "version": "1.52.4",
+  "version": "1.53.0",
   "description": "Scaffold a production-ready e-commerce storefront connected to Brainerce",
   "bin": {
     "create-brainerce-store": "dist/index.js"

package/templates/nextjs/base/next.config.ts

@@ -1,76 +1,86 @@
-import type { NextConfig } from 'next';
-import { OPTIMIZED_IMAGE_HOSTS } from './src/core/lib/image-hosts';
-
-// Build-time invariant — fail loud if NEXT_PUBLIC_STORE_CURRENCY is missing
-// for a production build. Next.js inlines NEXT_PUBLIC_* into the client
-// bundle at `next build` time; once inlined, the value cannot be patched at
-// deploy time. A missing env here is the root cause of non-USD stores ending
-// up with `$5,096` baked into their HTML (and indexed by Googlebot).
-//
-// In dev (`next dev`) we only warn, so local-only experiments don't break.
-if (!process.env.NEXT_PUBLIC_STORE_CURRENCY) {
-  const msg =
-    'NEXT_PUBLIC_STORE_CURRENCY is not set.\n' +
-    'Next.js inlines NEXT_PUBLIC_* vars into the client bundle at build time;\n' +
-    'a missing value will silently fall back to USD in storefront price displays\n' +
-    'and ship that to search-engine crawlers. Set it in .env.local (written by\n' +
-    'create-brainerce-store) or in your CI / hosting build env (Coolify / Vercel).';
-  if (process.env.NODE_ENV === 'production') {
-    throw new Error(`[next.config] ${msg}`);
-  } else {
-    console.warn(`[next.config] warning: ${msg}`);
-  }
-}
-
-const nextConfig: NextConfig = {
-  // isomorphic-dompurify ships jsdom, which at runtime reads stylesheet files
-  // from its own package directory. Webpack bundling breaks those relative
-  // lookups — loading it externally from node_modules keeps the paths intact.
-  serverExternalPackages: ['isomorphic-dompurify'],
-  images: {
-    // The storefront is a consumer of the Brainerce API — it has to render
-    // whatever image URLs the API returns. In practice those URLs are
-    // usually on cdn.brainerce.com, but a product/variant can still carry a
-    // raw upstream-merchant URL (WooCommerce, Shopify, self-hosted) while
-    // its image-import job is pending or failed. Rather than allowlist every
-    // possible merchant host (or hard-fail on them), only cdn.brainerce.com
-    // goes through the server-side optimizer; components render product/blog
-    // images via `CdnImage` (src/ui/shared/cdn-image.tsx), which
-    // detects any other host and renders it `unoptimized` — an unresized
-    // direct-from-origin fetch, same as this template's prior behavior —
-    // instead of next/image throwing on an unconfigured hostname. No
-    // server-side fetching of unknown hosts → no SSRF/DoS surface on this
-    // Next server.
-    remotePatterns: OPTIMIZED_IMAGE_HOSTS.map((hostname) => ({
-      protocol: 'https' as const,
-      hostname,
-      pathname: '/**',
-    })),
-  },
-  async headers() {
-    return [
-      {
-        source: '/(.*)',
-        headers: [
-          {
-            key: 'Strict-Transport-Security',
-            value: 'max-age=63072000; includeSubDomains; preload',
-          },
-          { key: 'X-Content-Type-Options', value: 'nosniff' },
-          // SAMEORIGIN (not DENY) so iframe-based payment providers (e.g. Cardcom)
-          // can redirect the iframe back to /payment-complete on the storefront
-          // itself after a successful charge — the postMessage relay needs the
-          // parent frame to be able to render our own same-origin page.
-          { key: 'X-Frame-Options', value: 'SAMEORIGIN' },
-          { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' },
-          {
-            key: 'Permissions-Policy',
-            value: 'camera=(), microphone=(), geolocation=(), interest-cohort=()',
-          },
-        ],
-      },
-    ];
-  },
-};
-
-export default nextConfig;
+import type { NextConfig } from 'next';
+import { OPTIMIZED_IMAGE_HOSTS } from './src/core/lib/image-hosts';
+
+// Build-time invariant — fail loud if NEXT_PUBLIC_STORE_CURRENCY is missing
+// for a production build. Next.js inlines NEXT_PUBLIC_* into the client
+// bundle at `next build` time; once inlined, the value cannot be patched at
+// deploy time. A missing env here is the root cause of non-USD stores ending
+// up with `$5,096` baked into their HTML (and indexed by Googlebot).
+//
+// In dev (`next dev`) we only warn, so local-only experiments don't break.
+if (!process.env.NEXT_PUBLIC_STORE_CURRENCY) {
+  const msg =
+    'NEXT_PUBLIC_STORE_CURRENCY is not set.\n' +
+    'Next.js inlines NEXT_PUBLIC_* vars into the client bundle at build time;\n' +
+    'a missing value will silently fall back to USD in storefront price displays\n' +
+    'and ship that to search-engine crawlers. Set it in .env.local (written by\n' +
+    'create-brainerce-store) or in your CI / hosting build env (Coolify / Vercel).';
+  if (process.env.NODE_ENV === 'production') {
+    throw new Error(`[next.config] ${msg}`);
+  } else {
+    console.warn(`[next.config] warning: ${msg}`);
+  }
+}
+
+const nextConfig: NextConfig = {
+  // isomorphic-dompurify ships jsdom, which at runtime reads stylesheet files
+  // from its own package directory. Webpack bundling breaks those relative
+  // lookups — loading it externally from node_modules keeps the paths intact.
+  //
+  // brainerce (the SDK) is imported across both the server and client
+  // compilation boundaries in ~60 files, including the [locale]/layout.tsx
+  // route (see generateStaticParams below) whose static params are resolved
+  // by a separate jest-worker child process in `next dev` (webpack). That
+  // worker requires the compiled page against the vendor-chunks manifest
+  // while the main dev server may still be writing it, which can throw
+  // "Cannot find module './vendor-chunks/brainerce.js'". Excluding it from
+  // server bundling (loaded externally from node_modules instead) avoids the
+  // race.
+  serverExternalPackages: ['isomorphic-dompurify', 'brainerce'],
+  images: {
+    // The storefront is a consumer of the Brainerce API — it has to render
+    // whatever image URLs the API returns. In practice those URLs are
+    // usually on cdn.brainerce.com, but a product/variant can still carry a
+    // raw upstream-merchant URL (WooCommerce, Shopify, self-hosted) while
+    // its image-import job is pending or failed. Rather than allowlist every
+    // possible merchant host (or hard-fail on them), only cdn.brainerce.com
+    // goes through the server-side optimizer; components render product/blog
+    // images via `CdnImage` (src/ui/shared/cdn-image.tsx), which
+    // detects any other host and renders it `unoptimized` — an unresized
+    // direct-from-origin fetch, same as this template's prior behavior —
+    // instead of next/image throwing on an unconfigured hostname. No
+    // server-side fetching of unknown hosts → no SSRF/DoS surface on this
+    // Next server.
+    remotePatterns: OPTIMIZED_IMAGE_HOSTS.map((hostname) => ({
+      protocol: 'https' as const,
+      hostname,
+      pathname: '/**',
+    })),
+  },
+  async headers() {
+    return [
+      {
+        source: '/(.*)',
+        headers: [
+          {
+            key: 'Strict-Transport-Security',
+            value: 'max-age=63072000; includeSubDomains; preload',
+          },
+          { key: 'X-Content-Type-Options', value: 'nosniff' },
+          // SAMEORIGIN (not DENY) so iframe-based payment providers (e.g. Cardcom)
+          // can redirect the iframe back to /payment-complete on the storefront
+          // itself after a successful charge — the postMessage relay needs the
+          // parent frame to be able to render our own same-origin page.
+          { key: 'X-Frame-Options', value: 'SAMEORIGIN' },
+          { key: 'Referrer-Policy', value: 'strict-origin-when-cross-origin' },
+          {
+            key: 'Permissions-Policy',
+            value: 'camera=(), microphone=(), geolocation=(), interest-cohort=()',
+          },
+        ],
+      },
+    ];
+  },
+};
+
+export default nextConfig;