// Reads the CSRF token from the standard tag every // boboko host renders in its layout . Kept as its own module so both // checkout controllers share one source. export function csrfToken() { return document.querySelector('meta[name="csrf-token"]')?.getAttribute('content') || '' }