shopify-nuxt 0.0.1 → 0.0.3

package/dist/runtime/components/polaris/ShUrlField.vue.d.ts

@@ -2,7 +2,6 @@ type __VLS_Props = {
     autocomplete?: string;
     maxLength?: number;
     minLength?: number;
-    value?: string;
     defaultValue?: string;
     details?: string;
     error?: string;
@@ -14,12 +13,25 @@ type __VLS_Props = {
     disabled?: boolean;
     id?: string;
     name?: string;
+    modelValue?: string;
 };
-declare var __VLS_8: {};
+declare var __VLS_13: {};
 type __VLS_Slots = {} & {
-    default?: (props: typeof __VLS_8) => any;
+    default?: (props: typeof __VLS_13) => any;
 };
-declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {
+    "update:modelValue": (v: string) => void;
+    blur: (event: InputEvent) => void;
+    focus: (event: InputEvent) => void;
+    input: (event: InputEvent) => void;
+    change: (event: InputEvent) => void;
+}, string, import("vue").PublicProps, Readonly<__VLS_Props> & Readonly<{
+    onBlur?: ((event: InputEvent) => any) | undefined;
+    onFocus?: ((event: InputEvent) => any) | undefined;
+    onInput?: ((event: InputEvent) => any) | undefined;
+    onChange?: ((event: InputEvent) => any) | undefined;
+    "onUpdate:modelValue"?: ((v: string) => any) | undefined;
+}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
 declare const __VLS_export: __VLS_WithSlots<typeof __VLS_base, __VLS_Slots>;
 declare const _default: typeof __VLS_export;
 export default _default;

package/dist/runtime/components/polaris/utils.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Merges $attrs with defined (non-undefined) props for forwarding to Polaris custom elements.
+ * With `inheritAttrs: false`, Vue-declared props are stripped from $attrs.
+ * This utility re-adds only the props that were actually passed by the parent,
+ * avoiding setting undefined values on custom elements which can alter their behavior.
+ */
+export declare function usePolarisAttrs(props: Record<string, unknown>, exclude?: string[]): import("vue").ComputedRef<Record<string, unknown>>;

package/dist/runtime/components/polaris/utils.js

@@ -0,0 +1,13 @@
+import { computed, useAttrs } from "vue";
+export function usePolarisAttrs(props, exclude) {
+  const attrs = useAttrs();
+  return computed(() => {
+    const merged = { ...attrs };
+    for (const [key, val] of Object.entries(props)) {
+      if (val !== void 0 && !exclude?.includes(key)) {
+        merged[key] = val;
+      }
+    }
+    return merged;
+  });
+}

package/dist/runtime/composables/useAppBridge.d.ts

@@ -3,6 +3,9 @@ import type { ShopifyGlobal } from '@shopify/app-bridge-types';
  * Returns the `shopify` global variable to use App Bridge APIs
  * such as `toast` and `resourcePicker`.
  *
- * @returns `shopify` variable or a Proxy that throws when incorrectly accessed in a server context
+ * Safe to call in `app.vue` or layouts — returns a lazy proxy that only throws
+ * when a property is actually accessed outside the Shopify admin context.
+ *
+ * @returns `shopify` variable or a Proxy that throws when a property is accessed in an unavailable context
  */
 export declare function useAppBridge(): ShopifyGlobal;

package/dist/runtime/composables/useAppBridge.js

@@ -1,21 +1,32 @@
-const serverProxy = new Proxy(
-  {},
-  {
+function createUnavailableProxy(reason) {
+  return new Proxy({}, {
     get(_, prop) {
-      throw new Error(
-        `shopify.${String(prop)} can't be used in a server environment. You likely need to move this code into an event handler or onMounted.`
-      );
+      if (typeof prop === "symbol" || prop === "then" || prop === "toJSON") {
+        return void 0;
+      }
+      throw new Error(`shopify.${String(prop)} is not available: ${reason}`);
     }
-  }
+  });
+}
+const serverProxy = createUnavailableProxy(
+  "Cannot use App Bridge in a server environment. Move this code into an event handler or onMounted."
+);
+const clientFallbackProxy = createUnavailableProxy(
+  "The shopify global is not defined. You are likely outside the Shopify admin iframe."
 );
 export function useAppBridge() {
   if (typeof window === "undefined") {
     return serverProxy;
   }
-  if (!window.shopify) {
-    throw new Error(
-      "The shopify global is not defined. This likely means the App Bridge script tag was not added correctly to this page"
-    );
-  }
-  return window.shopify;
+  return new Proxy({}, {
+    get(_, prop) {
+      if (typeof prop === "symbol" || prop === "then" || prop === "toJSON") {
+        return void 0;
+      }
+      if (window.shopify) {
+        return window.shopify[prop];
+      }
+      return clientFallbackProxy[prop];
+    }
+  });
 }

package/dist/runtime/composables/useShopifyFetch.js

@@ -1,7 +1,9 @@
 import { useNuxtApp } from "#app";
 export function useShopifyFetch() {
   if (import.meta.server) {
-    throw new Error("useShopifyFetch() can only be used on the client side");
+    return async (_url, _options) => {
+      return { data: null, response: null };
+    };
   }
   const nuxtApp = useNuxtApp();
   return async (url, options = {}) => {

package/dist/runtime/middleware/shopify-auth.js

@@ -1,11 +1,17 @@
-import { defineNuxtRouteMiddleware } from "#app";
+import { defineNuxtRouteMiddleware, useRuntimeConfig } from "#app";
 import { navigateTo } from "nuxt/app";
-export default defineNuxtRouteMiddleware(() => {
-  if (import.meta.server || typeof window === "undefined") {
+export default defineNuxtRouteMiddleware((to) => {
+  const config = useRuntimeConfig().public.shopify;
+  const authPage = config.authPagePath || "/auth";
+  if (import.meta.server) {
+    const shop2 = to.query.shop;
+    if (!shop2) {
+      return navigateTo(authPage);
+    }
     return;
   }
   const shop = window.shopify?.config?.shop;
   if (!shop) {
-    return navigateTo("/auth");
+    return navigateTo(authPage);
   }
 });

package/dist/runtime/pages/auth-login.d.vue.ts

@@ -0,0 +1,3 @@
+declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/pages/auth-login.vue

@@ -0,0 +1,90 @@
+<script setup>
+import { navigateTo, useRuntimeConfig } from "#app";
+import { definePageMeta, ref } from "#imports";
+definePageMeta({
+  layout: false
+});
+const shop = ref("");
+const error = ref("");
+const loading = ref(false);
+async function handleSubmit() {
+  error.value = "";
+  const value = shop.value.trim();
+  if (!value) {
+    error.value = "Please enter your shop domain";
+    return;
+  }
+  loading.value = true;
+  try {
+    const config = useRuntimeConfig();
+    const authPrefix = config.public.shopify.authPathPrefix;
+    const domain = value.includes(".myshopify.com") ? value : `${value}.myshopify.com`;
+    await navigateTo(`${authPrefix}?shop=${encodeURIComponent(domain)}`, {
+      external: true
+    });
+  } catch (e) {
+    error.value = e.message || "Something went wrong";
+    loading.value = false;
+  }
+}
+</script>
+
+<template>
+  <div class="shopify-login">
+    <div class="shopify-login-card">
+      <div class="shopify-login-header">
+        <svg
+          xmlns="http://www.w3.org/2000/svg"
+          width="44"
+          height="44"
+          viewBox="0 0 256 292"
+        >
+          <path
+            fill="#95bf46"
+            d="M223.774 57.34c-.201-1.46-1.48-2.268-2.537-2.357a19614 19614 0 0 0-23.383-1.743s-15.507-15.395-17.209-17.099c-1.703-1.703-5.029-1.185-6.32-.805c-.19.056-3.388 1.043-8.678 2.68c-5.18-14.906-14.322-28.604-30.405-28.604c-.444 0-.901.018-1.358.044C129.31 3.407 123.644.779 118.75.779c-37.465 0-55.364 46.835-60.976 70.635c-14.558 4.511-24.9 7.718-26.221 8.133c-8.126 2.549-8.383 2.805-9.45 10.462C21.3 95.806.038 260.235.038 260.235l165.678 31.042l89.77-19.42S223.973 58.8 223.775 57.34M156.49 40.848l-14.019 4.339c.005-.988.01-1.96.01-3.023c0-9.264-1.286-16.723-3.349-22.636c8.287 1.04 13.806 10.469 17.358 21.32m-27.638-19.483c2.304 5.773 3.802 14.058 3.802 25.238c0 .572-.005 1.095-.01 1.624c-9.117 2.824-19.024 5.89-28.953 8.966c5.575-21.516 16.025-31.908 25.161-35.828m-11.131-10.537c1.617 0 3.246.549 4.805 1.622c-12.007 5.65-24.877 19.88-30.312 48.297l-22.886 7.088C75.694 46.16 90.81 10.828 117.72 10.828"
+          />
+          <path
+            fill="#5e8e3e"
+            d="M221.237 54.983a19614 19614 0 0 0-23.383-1.743s-15.507-15.395-17.209-17.099c-.637-.634-1.496-.959-2.394-1.099l-12.527 256.233l89.762-19.418S223.972 58.8 223.774 57.34c-.201-1.46-1.48-2.268-2.537-2.357"
+          />
+          <path
+            fill="#fff"
+            d="m135.242 104.585l-11.069 32.926s-9.698-5.176-21.586-5.176c-17.428 0-18.305 10.937-18.305 13.693c0 15.038 39.2 20.8 39.2 56.024c0 27.713-17.577 45.558-41.277 45.558c-28.44 0-42.984-17.7-42.984-17.7l7.615-25.16s14.95 12.835 27.565 12.835c8.243 0 11.596-6.49 11.596-11.232c0-19.616-32.16-20.491-32.16-52.724c0-27.129 19.472-53.382 58.778-53.382c15.145 0 22.627 4.338 22.627 4.338"
+          />
+        </svg>
+
+        <h1>Log in</h1>
+        <p>Enter your shop domain to log in or install this app.</p>
+      </div>
+
+      <form class="shopify-login-form" @submit.prevent="handleSubmit">
+        <div class="shopify-login-field">
+          <label for="shop">Shop domain</label>
+          <div class="shopify-login-input-wrapper">
+            <input
+              id="shop"
+              v-model="shop"
+              type="text"
+              placeholder="my-shop"
+              autocomplete="off"
+              autocapitalize="off"
+              :disabled="loading"
+            />
+            <span class="shopify-login-suffix">.myshopify.com</span>
+          </div>
+          <p v-if="error" class="shopify-login-error">
+            {{ error }}
+          </p>
+        </div>
+
+        <button type="submit" class="shopify-login-button" :disabled="loading">
+          {{ loading ? "Redirecting..." : "Log in" }}
+        </button>
+      </form>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.shopify-login{align-items:center;background:#f6f6f7;display:flex;font-family:-apple-system,BlinkMacSystemFont,San Francisco,Segoe UI,Roboto,Helvetica Neue,sans-serif;justify-content:center;min-height:100svh}.shopify-login-card{background:#fff;border-radius:12px;box-shadow:0 1px 3px rgba(0,0,0,.08),0 4px 12px rgba(0,0,0,.04);max-width:400px;padding:2.5rem;width:100%}.shopify-login-header{margin-bottom:2rem;text-align:center}.shopify-login-header h1{color:#202223;font-size:1.5rem;font-weight:600;margin:0 0 .5rem}.shopify-login-header p{color:#6d7175;font-size:.875rem;line-height:1.4;margin:0}.shopify-login-form{display:flex;flex-direction:column;gap:1.25rem}.shopify-login-field label{color:#202223;display:block;font-size:.875rem;font-weight:500;margin-bottom:.375rem}.shopify-login-input-wrapper{border:1px solid #c9cccf;border-radius:8px;display:flex;overflow:hidden;transition:border-color .1s}.shopify-login-input-wrapper:focus-within{border-color:#005bd3;box-shadow:0 0 0 1px #005bd3}.shopify-login-input-wrapper input{border:none;color:#202223;flex:1;font-size:.875rem;min-width:0;outline:none;padding:.625rem .75rem}.shopify-login-input-wrapper input::-moz-placeholder{color:#b5b5b5}.shopify-login-input-wrapper input::placeholder{color:#b5b5b5}.shopify-login-suffix{align-items:center;background:#f6f6f7;border-left:1px solid #c9cccf;color:#6d7175;display:flex;font-size:.875rem;padding:0 .75rem;white-space:nowrap}.shopify-login-error{color:#d72c0d;font-size:.8125rem;margin:.375rem 0 0}.shopify-login-button{background:#008060;border:none;border-radius:8px;color:#fff;cursor:pointer;font-size:.875rem;font-weight:600;padding:.625rem 1rem;transition:background .1s}.shopify-login-button:hover:not(:disabled){background:#006e52}.shopify-login-button:disabled{cursor:not-allowed;opacity:.6}
+</style>

package/dist/runtime/pages/auth-login.vue.d.ts

@@ -0,0 +1,3 @@
+declare const __VLS_export: import("vue").DefineComponent<{}, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<{}> & Readonly<{}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, true, {}, any>;
+declare const _default: typeof __VLS_export;
+export default _default;

package/dist/runtime/server/index.d.ts

@@ -1,2 +1,4 @@
 export { configureShopify, getShopifyApi, getResolvedConfig, getSessionStorage } from './services/shopify.js';
 export { registerShopifyWebhooks } from './utils/register-webhooks.js';
+export { createAdminApiContext, createStorefrontApiContext } from './utils/clients.js';
+export type { AdminApiContext, StorefrontApiContext, GraphQLClient, GraphQLQueryOptions, GraphQLResponse } from './utils/clients.js';

package/dist/runtime/server/index.js

@@ -5,3 +5,7 @@ export {
   getSessionStorage
 } from "./services/shopify.js";
 export { registerShopifyWebhooks } from "./utils/register-webhooks.js";
+export {
+  createAdminApiContext,
+  createStorefrontApiContext
+} from "./utils/clients.js";

package/dist/runtime/server/plugins/shopify-defaults.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Built-in Nitro plugin that initializes Shopify with default MemorySessionStorage.
+ *
+ * If the user calls `configureShopify()` in their own server plugin,
+ * it will override these defaults (configureShopify resets cached singletons).
+ */
+declare const _default: any;
+export default _default;

package/dist/runtime/server/plugins/shopify-defaults.js

@@ -0,0 +1,12 @@
+import { MemorySessionStorage } from "@shopify/shopify-app-session-storage-memory";
+import { configureShopify, getResolvedConfig } from "../services/shopify.js";
+export default defineNitroPlugin(() => {
+  try {
+    const config = getResolvedConfig();
+    if (config.sessionStorage) return;
+  } catch {
+  }
+  configureShopify({
+    sessionStorage: new MemorySessionStorage()
+  });
+});

package/dist/runtime/server/routes/auth-callback.d.ts

@@ -2,5 +2,5 @@
  * Handle the OAuth callback from Shopify.
  * Validates the callback, stores the session, and redirects to the app.
  */
-declare const _default: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<import("h3").HTTPResponse>>;
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
 export default _default;

package/dist/runtime/server/routes/auth-exit-iframe.d.ts

@@ -2,5 +2,5 @@
  * Render the exit-iframe page.
  * This page uses App Bridge to redirect the user out of the auth iframe.
  */
-declare const _default: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<string>>;
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<string>>;
 export default _default;

package/dist/runtime/server/routes/auth-session-token.d.ts

@@ -3,5 +3,5 @@
  * For embedded apps, this page loads App Bridge which provides a session token
  * via a search param, then redirects back to the original request.
  */
-declare const _default: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<string>>;
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<string>>;
 export default _default;

package/dist/runtime/server/routes/auth.d.ts

@@ -2,5 +2,5 @@
  * Handle the initial auth request.
  * For token exchange flow (embedded apps), this redirects to Shopify OAuth.
  */
-declare const _default: import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<import("h3").HTTPResponse>>;
+declare const _default: import("h3").EventHandler<import("h3").EventHandlerRequest, Promise<void>>;
 export default _default;

package/dist/runtime/server/services/shopify.js

@@ -10,7 +10,7 @@ let _resolvedConfig = null;
 let _runtimeConfig = null;
 const LIBRARY_VERSION = "1.0.0";
 export function configureShopify(config) {
-  _runtimeConfig = config;
+  _runtimeConfig = { ..._runtimeConfig, ...config };
   _shopifyApi = null;
   _resolvedConfig = null;
 }
@@ -49,7 +49,7 @@ export function getShopifyApi() {
 export function getResolvedConfig() {
   if (_resolvedConfig) return _resolvedConfig;
   const nuxtConfig = useRuntimeConfig();
-  const moduleOpts = nuxtConfig.shopify || {};
+  const moduleOpts = nuxtConfig.shopify;
   const runtime = _runtimeConfig || {};
   const authPathPrefix = moduleOpts.authPathPrefix || "/_shopify/auth";
   const auth = {
@@ -62,7 +62,7 @@ export function getResolvedConfig() {
   _resolvedConfig = {
     apiKey: moduleOpts.apiKey || "",
     apiSecretKey: moduleOpts.apiSecretKey || "",
-    scopes: moduleOpts.scopes || [],
+    scopes: moduleOpts.scopes,
     appUrl: moduleOpts.appUrl || "",
     apiVersion: moduleOpts.apiVersion || "2025-01",
     authPathPrefix,

package/dist/runtime/server/utils/authenticate-admin.js

@@ -15,6 +15,8 @@ import {
   renderAppBridgePage
 } from "./helpers.js";
 import { AppDistribution } from "../../types.js";
+const OnlineAccessToken = "urn:shopify:params:oauth:token-type:online-access-token";
+const OfflineAccessToken = "urn:shopify:params:oauth:token-type:offline-access-token";
 export async function useShopifyAdmin(event) {
   const api = getShopifyApi();
   const config = getResolvedConfig();
@@ -131,17 +133,30 @@ export async function useShopifyAdmin(event) {
   };
 }
 async function performTokenExchange(api, config, sessionStorage, shop, sessionToken) {
-  const { session: onlineSession } = await api.auth.tokenExchange({
-    shop,
-    sessionToken,
-    requestedTokenType: config.useOnlineTokens ? "online" : "offline"
-  });
+  let onlineSession;
+  try {
+    const result = await api.auth.tokenExchange({
+      shop,
+      sessionToken,
+      requestedTokenType: config.useOnlineTokens ? OnlineAccessToken : OfflineAccessToken
+    });
+    onlineSession = result.session;
+  } catch (error) {
+    console.error("[shopify-nuxt] Token exchange failed:", {
+      shop,
+      requestedTokenType: config.useOnlineTokens ? OnlineAccessToken : OfflineAccessToken,
+      scopes: api.config.scopes?.toString(),
+      responseBody: error?.response?.body,
+      message: error?.message
+    });
+    throw error;
+  }
   await sessionStorage.storeSession(onlineSession);
   if (config.useOnlineTokens) {
     const { session: offlineSession } = await api.auth.tokenExchange({
       shop,
       sessionToken,
-      requestedTokenType: "offline"
+      requestedTokenType: OfflineAccessToken
     });
     await sessionStorage.storeSession(offlineSession);
   }

package/dist/runtime/server/utils/clients.d.ts

@@ -1,9 +1,23 @@
-import type { Session, Shopify } from '@shopify/shopify-api';
+import type { Session, Shopify, ApiVersion } from '@shopify/shopify-api';
+import type { AdminOperations, AllOperations, ApiClientRequestOptions, ReturnData, FetchResponseBody, ResponseWithType } from '@shopify/admin-api-client';
+import type { StorefrontOperations } from '@shopify/storefront-api-client';
+export interface GraphQLQueryOptions<Operation extends keyof Operations, Operations extends AllOperations> {
+    /** The variables to pass to the operation. */
+    variables?: ApiClientRequestOptions<Operation, Operations>['variables'];
+    /** The version of the API to use for the request. */
+    apiVersion?: ApiVersion;
+    /** Additional headers to include in the request. */
+    headers?: Record<string, string>;
+    /** The total number of times to try the request if it fails. */
+    tries?: number;
+    /** An optional AbortSignal to cancel the request. */
+    signal?: AbortSignal;
+}
+export type GraphQLResponse<Operation extends keyof Operations, Operations extends AllOperations> = ResponseWithType<FetchResponseBody<ReturnData<Operation, Operations>>>;
+export type GraphQLClient<Operations extends AllOperations> = <Operation extends keyof Operations>(query: Operation, options?: GraphQLQueryOptions<Operation, Operations>) => Promise<GraphQLResponse<Operation, Operations>>;
 export interface AdminApiContext {
-    /** Make a GraphQL request to the Shopify Admin API */
-    graphql: (query: string, options?: {
-        variables?: Record<string, any>;
-    }) => Promise<any>;
+    /** Make a typed GraphQL request to the Shopify Admin API */
+    graphql: GraphQLClient<AdminOperations>;
     /** Make a REST request to the Shopify Admin API */
     rest: {
         get: (params: {
@@ -22,4 +36,9 @@ export interface AdminApiContext {
         }) => Promise<any>;
     };
 }
+export interface StorefrontApiContext {
+    /** Make a typed GraphQL request to the Shopify Storefront API */
+    graphql: GraphQLClient<StorefrontOperations>;
+}
 export declare function createAdminApiContext(api: Shopify, session: Session, onError?: (error: any) => void): AdminApiContext;
+export declare function createStorefrontApiContext(api: Shopify, session: Session, onError?: (error: any) => void): StorefrontApiContext;

package/dist/runtime/server/utils/clients.js

@@ -3,9 +3,11 @@ export function createAdminApiContext(api, session, onError) {
     const client = new api.clients.Graphql({ session });
     try {
       const response = await client.request(query, {
-        variables: options?.variables
+        variables: options?.variables,
+        retries: options?.tries,
+        headers: options?.headers
       });
-      return response;
+      return new Response(JSON.stringify(response));
     } catch (error) {
       if (onError) onError(error);
       throw error;
@@ -34,3 +36,20 @@ export function createAdminApiContext(api, session, onError) {
     }
   };
 }
+export function createStorefrontApiContext(api, session, onError) {
+  const graphql = async (query, options) => {
+    const client = new api.clients.Storefront({ session });
+    try {
+      const response = await client.request(query, {
+        variables: options?.variables,
+        retries: options?.tries,
+        headers: options?.headers
+      });
+      return new Response(JSON.stringify(response));
+    } catch (error) {
+      if (onError) onError(error);
+      throw error;
+    }
+  };
+  return { graphql };
+}

package/dist/runtime/server/utils/helpers.js

@@ -1,9 +1,5 @@
-import {
-  getHeader,
-  getQuery,
-  setResponseHeader,
-  readRawBody
-} from "h3";
+import { getHeader, getQuery, setResponseHeader, readRawBody } from "h3";
+import { isbot } from "isbot";
 import { getShopifyApi, getResolvedConfig } from "../services/shopify.js";
 export function getSessionTokenHeader(event) {
   const authHeader = getHeader(event, "authorization");
@@ -31,16 +27,22 @@ export async function validateSessionToken(sessionToken) {
 export function ensureCORSHeaders(event) {
   const config = getResolvedConfig();
   setResponseHeader(event, "Access-Control-Allow-Origin", config.appUrl);
-  setResponseHeader(event, "Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS");
-  setResponseHeader(event, "Access-Control-Allow-Headers", "Content-Type, Authorization");
+  setResponseHeader(
+    event,
+    "Access-Control-Allow-Methods",
+    "GET, POST, PUT, DELETE, OPTIONS"
+  );
+  setResponseHeader(
+    event,
+    "Access-Control-Allow-Headers",
+    "Content-Type, Authorization"
+  );
   setResponseHeader(event, "Access-Control-Allow-Credentials", "true");
 }
 export function isBotRequest(event) {
   const ua = getHeader(event, "user-agent") || "";
   try {
-    const isbotModule = require("isbot");
-    const isbotFn = isbotModule.isbot || isbotModule.default || isbotModule;
-    return typeof isbotFn === "function" ? isbotFn(ua) : false;
+    return isbot(ua);
   } catch {
     return false;
   }

package/dist/runtime/server/utils/unauthenticated-storefront.d.ts

@@ -1,9 +1,5 @@
+import type { StorefrontApiContext } from './clients.js';
 import type { Session } from '@shopify/shopify-api';
-export interface StorefrontApiContext {
-    graphql: (query: string, options?: {
-        variables?: Record<string, any>;
-    }) => Promise<any>;
-}
 /**
  * Get an unauthenticated Storefront API context for a given shop.
  *

package/dist/runtime/server/utils/unauthenticated-storefront.js

@@ -1,4 +1,5 @@
 import { getShopifyApi, getSessionStorage } from "../services/shopify.js";
+import { createStorefrontApiContext } from "./clients.js";
 export async function useShopifyUnauthenticatedStorefront(shop) {
   const api = getShopifyApi();
   const sessionStorage = getSessionStorage();
@@ -9,13 +10,6 @@ export async function useShopifyUnauthenticatedStorefront(shop) {
       `No offline session found for shop "${shop}". The shop must install the app first.`
     );
   }
-  const storefront = {
-    graphql: async (query, options) => {
-      const client = new api.clients.Storefront({ session });
-      return client.request(query, {
-        variables: options?.variables
-      });
-    }
-  };
+  const storefront = createStorefrontApiContext(api, session);
   return { storefront, session };
 }

package/dist/runtime/types.d.ts

@@ -19,8 +19,9 @@ export interface ModuleOptions {
     apiSecretKey: string;
     /**
      * The scopes your app needs from the Shopify API.
+     * Optional — Shopify reads scopes from `shopify.app.toml` with managed install.
      */
-    scopes: string[];
+    scopes?: string[];
     /**
      * The URL your app is running on. In development, this is typically a tunnel URL.
      * Can also be set via `NUXT_SHOPIFY_APP_URL` env var.
@@ -46,6 +47,13 @@ export interface ModuleOptions {
      * @default false
      */
     useOnlineTokens?: boolean;
+    /**
+     * Path to a custom Vue page component for the `/auth` login page.
+     * Set to `false` to disable the built-in auth page entirely.
+     * When not set, a default login page with a shop domain input is provided.
+     * @default undefined (uses built-in page)
+     */
+    authPage?: string | false;
 }
 export type WebhookConfig = Record<string, WebhookHandler | WebhookHandler[]>;
 export interface AfterAuthOptions {
@@ -124,13 +132,36 @@ export interface AuthConfig {
     patchSessionTokenPath: string;
     loginPath: string;
 }
-export interface ResolvedConfig {
+export interface ShopifyServerConfig {
     apiKey: string;
     apiSecretKey: string;
     scopes: string[];
     appUrl: string;
     apiVersion: string;
     authPathPrefix: string;
+    distribution: string;
+    useOnlineTokens: boolean;
+}
+export interface ShopifyPublicConfig {
+    apiKey: string;
+    authPagePath: string;
+    authPathPrefix: string;
+}
+declare module 'nuxt/schema' {
+    interface RuntimeConfig {
+        shopify: ShopifyServerConfig;
+    }
+    interface PublicRuntimeConfig {
+        shopify: ShopifyPublicConfig;
+    }
+}
+export interface ResolvedConfig {
+    apiKey: string;
+    apiSecretKey: string;
+    scopes?: string[];
+    appUrl: string;
+    apiVersion: string;
+    authPathPrefix: string;
     distribution: AppDistribution;
     useOnlineTokens: boolean;
     auth: AuthConfig;