@amplifyup/sdk 0.1.39 → 0.1.41

package/dist/middleware.d.mts

@@ -7,6 +7,7 @@ import { NextRequest, NextResponse } from 'next/server';
 
 declare const AMPLIFY_VARIANT_PREFIX = "/__p";
 declare const AMPLIFY_ANON_COOKIE = "amplifyup_anon_id";
+declare const AMPLIFY_SESSION_COOKIE = "amplifyup_session_id";
 declare const amplifyMiddlewareConfig: {
     matcher: string[];
 };
@@ -19,4 +20,4 @@ declare function amplifyMiddleware(request: NextRequest, options?: {
     trackingId?: string;
 }): Promise<NextResponse>;
 
-export { AMPLIFY_ANON_COOKIE, AMPLIFY_VARIANT_PREFIX, amplifyMiddleware, amplifyMiddlewareConfig };
+export { AMPLIFY_ANON_COOKIE, AMPLIFY_SESSION_COOKIE, AMPLIFY_VARIANT_PREFIX, amplifyMiddleware, amplifyMiddlewareConfig };

package/dist/middleware.d.ts

@@ -7,6 +7,7 @@ import { NextRequest, NextResponse } from 'next/server';
 
 declare const AMPLIFY_VARIANT_PREFIX = "/__p";
 declare const AMPLIFY_ANON_COOKIE = "amplifyup_anon_id";
+declare const AMPLIFY_SESSION_COOKIE = "amplifyup_session_id";
 declare const amplifyMiddlewareConfig: {
     matcher: string[];
 };
@@ -19,4 +20,4 @@ declare function amplifyMiddleware(request: NextRequest, options?: {
     trackingId?: string;
 }): Promise<NextResponse>;
 
-export { AMPLIFY_ANON_COOKIE, AMPLIFY_VARIANT_PREFIX, amplifyMiddleware, amplifyMiddlewareConfig };
+export { AMPLIFY_ANON_COOKIE, AMPLIFY_SESSION_COOKIE, AMPLIFY_VARIANT_PREFIX, amplifyMiddleware, amplifyMiddlewareConfig };

package/dist/middleware.js

@@ -130,6 +130,8 @@ function resolveAmplifyUpUrls(target) {
 // src/middleware.ts
 var AMPLIFY_VARIANT_PREFIX = "/__p";
 var AMPLIFY_ANON_COOKIE = "amplifyup_anon_id";
+var AMPLIFY_SESSION_COOKIE = "amplifyup_session_id";
+var SESSION_MAX_AGE_SECONDS = 30 * 60;
 var amplifyMiddlewareConfig = {
   matcher: ["/((?!api|_next/static|_next/image|favicon.ico|.*\\..*).*)"]
 };
@@ -140,6 +142,17 @@ function generateAnonId() {
   const uuid = typeof crypto !== "undefined" && "randomUUID" in crypto ? crypto.randomUUID() : `${Date.now()}-${Math.random().toString(16).slice(2)}`;
   return `browser_${uuid}`;
 }
+function generateSessionId() {
+  return typeof crypto !== "undefined" && "randomUUID" in crypto ? crypto.randomUUID() : `${Date.now()}-${Math.random().toString(16).slice(2)}`;
+}
+function withSessionCookie(res, existing) {
+  res.cookies.set(AMPLIFY_SESSION_COOKIE, existing || generateSessionId(), {
+    path: "/",
+    maxAge: SESSION_MAX_AGE_SECONDS,
+    sameSite: "lax"
+  });
+  return res;
+}
 async function amplifyMiddleware(request, options) {
   const { pathname, searchParams } = request.nextUrl;
   if (pathname.startsWith("/__preview") || pathname.startsWith(AMPLIFY_VARIANT_PREFIX)) {
@@ -159,6 +172,7 @@ async function amplifyMiddleware(request, options) {
     return server.NextResponse.next();
   }
   const existingAnon = request.cookies.get(AMPLIFY_ANON_COOKIE)?.value || "";
+  const existingSession = request.cookies.get(AMPLIFY_SESSION_COOKIE)?.value || "";
   if (!existingAnon) {
     const res = server.NextResponse.next();
     res.cookies.set(AMPLIFY_ANON_COOKIE, generateAnonId(), {
@@ -166,7 +180,7 @@ async function amplifyMiddleware(request, options) {
       maxAge: 60 * 60 * 24 * 365,
       sameSite: "lax"
     });
-    return res;
+    return withSessionCookie(res, existingSession);
   }
   const target = resolveAmplifyUpTarget();
   const { edgeUrl } = resolveAmplifyUpUrls(target);
@@ -179,18 +193,19 @@ async function amplifyMiddleware(request, options) {
       anonId: existingAnon
     });
     if (isDefaultVariantKeys(variantKeys)) {
-      return server.NextResponse.next();
+      return withSessionCookie(server.NextResponse.next(), existingSession);
     }
     const sig = encodeURIComponent(serializeVariantKeys(variantKeys));
     const url = request.nextUrl.clone();
     url.pathname = pathname === "/" ? `${AMPLIFY_VARIANT_PREFIX}/${sig}` : `${AMPLIFY_VARIANT_PREFIX}/${sig}${pathname}`;
-    return server.NextResponse.rewrite(url);
+    return withSessionCookie(server.NextResponse.rewrite(url), existingSession);
   } catch {
-    return server.NextResponse.next();
+    return withSessionCookie(server.NextResponse.next(), existingSession);
   }
 }
 
 exports.AMPLIFY_ANON_COOKIE = AMPLIFY_ANON_COOKIE;
+exports.AMPLIFY_SESSION_COOKIE = AMPLIFY_SESSION_COOKIE;
 exports.AMPLIFY_VARIANT_PREFIX = AMPLIFY_VARIANT_PREFIX;
 exports.amplifyMiddleware = amplifyMiddleware;
 exports.amplifyMiddlewareConfig = amplifyMiddlewareConfig;

package/dist/middleware.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/edge/fetchVariants.ts","../src/edge/variantKeys.ts","../src/edge/normalizeRoute.ts","../src/targets.ts","../src/middleware.ts"],"names":["orchestratorUrl","NextResponse"],"mappings":";;;;;;;;AAIA,eAAsB,kBAAkB,OAAA,EAOJ;AAClC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC/C,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,IACjC,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,QAAQ,OAAA,CAAQ;AAAA,GACjB,CAAA;AACD,EAAA,MAAM,UAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AACjE,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,KAAA,GAAQ,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,OAAA,CAAQ,aAAa,GAAG,CAAA;AAC3E,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,aAAA,EAAgB,MAAA,CAAO,QAAA,EAAU,CAAA,CAAA,EAAI;AAAA,MACpE,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA,MACtC,KAAA,EAAO,UAAA;AAAA,MACP,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AACD,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,EAAC;AACrB,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAG/C,IAAA,OAAO,IAAA,CAAK,eAAe,OAAO,IAAA,CAAK,gBAAgB,QAAA,GACnD,IAAA,CAAK,cACL,EAAC;AAAA,EACP,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;;;ACjCO,SAAS,qBACd,IAAA,EACQ;AACR,EAAA,IAAI,CAAC,MAAM,OAAO,EAAA;AAClB,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,IAAI,EAAE,IAAA,EAAK;AACvC,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,OAAA,GAAU,KAAK,MAAM,CAAA;AAC3B,IAAA,IAAI,CAAC,OAAA,IAAW,OAAA,KAAY,SAAA,EAAW;AACvC,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,OAAO,CAAA,CAAE,CAAA;AAAA,EACnC;AACA,EAAA,OAAO,KAAA,CAAM,KAAK,GAAG,CAAA;AACvB;AAmBO,SAAS,qBACd,IAAA,EACS;AACT,EAAA,OAAO,oBAAA,CAAqB,IAAI,CAAA,KAAM,EAAA;AACxC;;;ACpCO,SAAS,eAAe,KAAA,EAAuB;AACpD,EAAA,IAAI,IAAA,GAAO,MAAA,CAAO,KAAA,IAAS,EAAE,EAAE,IAAA,EAAK;AACpC,EAAA,IAAI,CAAC,MAAM,OAAO,GAAA;AAElB,EAAA,IAAI;AACF,IAAA,IAAI,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAA,EAAG;AAC9B,MAAA,IAAA,GAAO,IAAI,GAAA,CAAI,IAAI,CAAA,CAAE,QAAA;AAAA,IACvB;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,KAAK,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAClC,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,KAAK,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAElC,EAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAC1C,EAAA,IAAI,KAAK,MAAA,GAAS,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,EAAG;AACzC,IAAA,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,IAAA,IAAQ,GAAA;AACjB;;;ACFA,IAAM,WAAA,GAAc,8BAAA;AACpB,IAAM,YAAA,GAAe,0BAAA;AACrB,IAAM,iBAAA,GAAoB,sBAAA;AAC1B,IAAM,SAAA,GAAY,2BAAA;AAEX,SAAS,kBAAkB,KAAA,EAA+C;AAC/E,EAAA,OAAO,KAAA,KAAU,OAAA,IAAW,KAAA,KAAU,KAAA,IAAS,KAAA,KAAU,YAAA;AAC3D;AAEO,SAAS,yBAAyB,KAAA,EAA8C;AACrF,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAA,GAAU,KAAA;AACrC;AAcO,SAAS,uBAAuB,OAAA,EAInB;AASlB,EAAA,MAAM,YACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AACN,EAAA,IAAI,iBAAA,CAAkB,SAAS,CAAA,EAAG;AAChC,IAAA,OAAO,yBAAyB,SAAS,CAAA;AAAA,EAC3C;AAEA,EAAA,OAAO,YAAA;AACT;AAYA,SAAS,oBAAA,GAA+B;AACtC,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC/D;AAMA,SAAS,cAAA,GAAyB;AAChC,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,6BAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,WAAA,EAAa,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACnD;AAMA,SAAS,YAAA,GAAuB;AAC9B,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,oBAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC/D;AAEO,SAAS,qBAAqB,MAAA,EAAwC;AAC3E,EAAA,IAAI,WAAW,OAAA,EAAS;AACtB,IAAA,MAAMA,mBAAkB,oBAAA,EAAqB;AAC7C,IAAA,MAAM,gBAAgB,cAAA,EAAe;AACrC,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,OAAA;AAAA;AAAA,MAER,eAAA,EAAAA,gBAAAA;AAAA;AAAA,MAEA,aAAA;AAAA,MACA,cAAA,EAAgB,GAAG,aAAa,CAAA,eAAA,CAAA;AAAA,MAChC,SAAS,YAAA;AAAa,KACxB;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GACH,OAAO,OAAA,KAAY,WAAA,IAClB,OAAA,CAAQ,IAAI,6BAAA,EAA+B,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,IAC9D,YAAA;AAEF,EAAA,MAAM,sBACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AAGN,EAAA,MAAM,mBAAA,GACJ,CAAC,CAAC,mBAAA,KACD,mBAAA,CAAoB,SAAS,WAAW,CAAA,IACvC,mBAAA,CAAoB,QAAA,CAAS,WAAW,CAAA,CAAA;AAE5C,EAAA,MAAM,eAAA,GAAkB,uBAAuB,CAAC,mBAAA,GAC5C,oBACA,mBAAA,CAAoB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAEzC,EAAA,MAAM,WAAA,GACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,oBAAA,EAAsB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACnD,MAAA;AACN,EAAA,MAAM,OAAA,GACJ,WAAA,IACA,CAAC,WAAA,CAAY,QAAA,CAAS,WAAW,CAAA,IACjC,CAAC,WAAA,CAAY,QAAA,CAAS,WAAW,CAAA,GAC7B,WAAA,GACA,SAAA;AAEN,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,YAAA;AAAA,IACR,aAAA,EAAe,WAAA;AAAA,IACf,eAAA;AAAA,IACA,cAAA,EAAgB,GAAG,WAAW,CAAA,eAAA,CAAA;AAAA,IAC9B;AAAA,GACF;AACF;;;ACzJO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,mBAAA,GAAsB;AAE5B,IAAM,uBAAA,GAA0B;AAAA,EACrC,OAAA,EAAS,CAAC,2DAA2D;AACvE;AAEA,SAAS,WAAW,OAAA,EAA+B;AACjD,EAAA,OACE,OAAA,CAAQ,QAAQ,GAAA,CAAI,uBAAuB,MAAM,GAAA,IACjD,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,sBAAsB,CAAA,KAAM,OAChD,OAAA,CAAQ,OAAA,CAAQ,IAAI,SAAS,CAAA,KAAM,cACnC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,KAAM,UAAA;AAEvC;AAEA,SAAS,cAAA,GAAyB;AAChC,EAAA,MAAM,IAAA,GACJ,OAAO,MAAA,KAAW,WAAA,IAAe,gBAAgB,MAAA,GAC7C,MAAA,CAAO,UAAA,EAAW,GAClB,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,KAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAC1D,EAAA,OAAO,WAAW,IAAI,CAAA,CAAA;AACxB;AAOA,eAAsB,iBAAA,CACpB,SACA,OAAA,EACuB;AACvB,EAAA,MAAM,EAAE,QAAA,EAAU,YAAA,EAAa,GAAI,OAAA,CAAQ,OAAA;AAE3C,EAAA,IACE,SAAS,UAAA,CAAW,YAAY,KAChC,QAAA,CAAS,UAAA,CAAW,sBAAsB,CAAA,EAC1C;AACA,IAAA,OAAOC,oBAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,SAAA,GACJ,aAAa,GAAA,CAAI,SAAS,MAAM,MAAA,IAChC,YAAA,CAAa,GAAA,CAAI,cAAc,CAAA,KAAM,MAAA;AACvC,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAM;AAClC,IAAA,GAAA,CAAI,QAAA,GAAW,QAAA,KAAa,GAAA,GAAM,YAAA,GAAe,aAAa,QAAQ,CAAA,CAAA;AACtE,IAAA,OAAOA,mBAAA,CAAa,QAAQ,GAAG,CAAA;AAAA,EACjC;AAEA,EAAA,IAAI,UAAA,CAAW,OAAO,CAAA,EAAG;AACvB,IAAA,OAAOA,oBAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,aACJ,OAAA,EAAS,UAAA,KACR,OAAO,YAAA,CAAa,IAAI,YAAY,CAAA,KAAM,QAAA,GACvC,YAAA,CAAa,IAAI,YAAY,CAAA,GAC7B,IAAA,CAAA,IACJ,OAAA,CAAQ,IAAI,iCAAA,IACZ,EAAA;AACF,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAOA,oBAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,mBAAmB,GAAG,KAAA,IAAS,EAAA;AACxE,EAAA,IAAI,CAAC,YAAA,EAAc;AACjB,IAAA,MAAM,GAAA,GAAMA,oBAAa,IAAA,EAAK;AAC9B,IAAA,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,mBAAA,EAAqB,cAAA,EAAe,EAAG;AAAA,MACrD,IAAA,EAAM,GAAA;AAAA,MACN,MAAA,EAAQ,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AAAA,MACvB,QAAA,EAAU;AAAA,KACX,CAAA;AACD,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,MAAM,SAAS,sBAAA,EAAuB;AACtC,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,oBAAA,CAAqB,MAAM,CAAA;AAC/C,EAAA,MAAM,KAAA,GAAQ,eAAe,QAAQ,CAAA;AAErC,EAAA,IAAI;AACF,IAAA,MAAM,WAAA,GAAc,MAAM,iBAAA,CAAkB;AAAA,MAC1C,OAAA;AAAA,MACA,UAAA;AAAA,MACA,KAAA;AAAA,MACA,MAAA,EAAQ;AAAA,KACT,CAAA;AACD,IAAA,IAAI,oBAAA,CAAqB,WAAW,CAAA,EAAG;AACrC,MAAA,OAAOA,oBAAa,IAAA,EAAK;AAAA,IAC3B;AACA,IAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,oBAAA,CAAqB,WAAW,CAAC,CAAA;AAChE,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAM;AAClC,IAAA,GAAA,CAAI,QAAA,GACF,QAAA,KAAa,GAAA,GACT,CAAA,EAAG,sBAAsB,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,GAChC,CAAA,EAAG,sBAAsB,CAAA,CAAA,EAAI,GAAG,GAAG,QAAQ,CAAA,CAAA;AACjD,IAAA,OAAOA,mBAAA,CAAa,QAAQ,GAAG,CAAA;AAAA,EACjC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAOA,oBAAa,IAAA,EAAK;AAAA,EAC3B;AACF","file":"middleware.js","sourcesContent":["/**\n * Lightweight Edge call for Next middleware: variant keys only.\n */\n\nexport async function fetchEdgeVariants(options: {\n  edgeUrl: string;\n  trackingId: string;\n  route: string;\n  anonId: string;\n  fetch?: typeof fetch;\n  timeoutMs?: number;\n}): Promise<Record<string, string>> {\n  const base = options.edgeUrl.replace(/\\/+$/, '');\n  const params = new URLSearchParams({\n    route: options.route,\n    trackingId: options.trackingId,\n    anonId: options.anonId,\n  });\n  const fetchFn = options.fetch ?? globalThis.fetch.bind(globalThis);\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 800);\n  try {\n    const res = await fetchFn(`${base}/v1/variants?${params.toString()}`, {\n      method: 'GET',\n      headers: { Accept: 'application/json' },\n      cache: 'no-store',\n      signal: controller.signal,\n    });\n    if (!res.ok) return {};\n    const body = (await res.json().catch(() => ({}))) as {\n      variantKeys?: Record<string, string>;\n    };\n    return body.variantKeys && typeof body.variantKeys === 'object'\n      ? body.variantKeys\n      : {};\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/**\n * Compact variant-key codec for URLs and Edge `variants` query params.\n * Default variants are omitted so equivalent assignments share one cache entry.\n */\n\nexport function serializeVariantKeys(\n  keys: Record<string, string> | null | undefined\n): string {\n  if (!keys) return '';\n  const parts: string[] = [];\n  const zoneIds = Object.keys(keys).sort();\n  for (const zoneId of zoneIds) {\n    const variant = keys[zoneId];\n    if (!variant || variant === 'default') continue;\n    parts.push(`${zoneId}:${variant}`);\n  }\n  return parts.join(',');\n}\n\nexport function parseVariantKeys(\n  raw: string | null | undefined\n): Record<string, string> {\n  const out: Record<string, string> = {};\n  const text = (raw || '').trim();\n  if (!text) return out;\n  const decoded = safeDecode(text);\n  for (const part of decoded.split(',')) {\n    const i = part.indexOf(':');\n    if (i <= 0) continue;\n    const zoneId = part.slice(0, i).trim();\n    const variant = part.slice(i + 1).trim();\n    if (zoneId && variant) out[zoneId] = variant;\n  }\n  return out;\n}\n\nexport function isDefaultVariantKeys(\n  keys: Record<string, string> | null | undefined\n): boolean {\n  return serializeVariantKeys(keys) === '';\n}\n\nfunction safeDecode(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return value;\n  }\n}\n","/**\n * Normalize a route path for Edge resolve requests.\n * Leading slash, no trailing slash (except root), query/hash stripped.\n */\nexport function normalizeRoute(route: string): string {\n  let path = String(route || '').trim();\n  if (!path) return '/';\n\n  try {\n    if (/^https?:\\/\\//i.test(path)) {\n      path = new URL(path).pathname;\n    }\n  } catch {\n    /* keep path */\n  }\n\n  const q = path.indexOf('?');\n  if (q >= 0) path = path.slice(0, q);\n  const h = path.indexOf('#');\n  if (h >= 0) path = path.slice(0, h);\n\n  if (!path.startsWith('/')) path = `/${path}`;\n  if (path.length > 1 && path.endsWith('/')) {\n    path = path.replace(/\\/+$/, '');\n  }\n  return path || '/';\n}\n","/**\n * AmplifyUp environment targets\n *\n * Two environments only:\n * - local: apps/config from localhost + Neon; events & personalize from AWS development\n * - production: all production AmplifyUp / AWS endpoints\n *\n * Controlled via `config.target` or `NEXT_PUBLIC_AMPLIFYUP_TARGET`.\n * Legacy value `dev` is treated as `local`.\n */\n\nexport type AmplifyUpTarget = 'local' | 'production';\n\n/** Accepted env/config strings (includes legacy `dev` → local). */\nexport type AmplifyUpTargetInput = AmplifyUpTarget | 'dev';\n\nexport interface AmplifyUpUrls {\n  target: AmplifyUpTarget;\n  apiGatewayUrl: string;\n  orchestratorUrl: string;\n  decisionApiUrl: string;\n  edgeUrl: string;\n}\n\nconst AWS_DEV_API = 'https://api-dev.amplifyup.ai';\nconst AWS_PROD_API = 'https://api.amplifyup.ai';\nconst PROD_ORCHESTRATOR = 'https://amplifyup.ai';\nconst PROD_EDGE = 'https://edge.amplifyup.ai';\n\nexport function isAmplifyUpTarget(value: unknown): value is AmplifyUpTargetInput {\n  return value === 'local' || value === 'dev' || value === 'production';\n}\n\nexport function normalizeAmplifyUpTarget(value: AmplifyUpTargetInput): AmplifyUpTarget {\n  return value === 'dev' ? 'local' : value;\n}\n\n/**\n * Resolve which target to use.\n *\n * Priority:\n * 1. explicit config.target\n * 2. config.dev === true → 'local' (local apps + AWS-dev pipeline)\n * 3. NEXT_PUBLIC_AMPLIFYUP_TARGET\n * 4. unset → 'production' (live endpoints — hosting on localhost does NOT imply local)\n *\n * Use `local` only when developing against the AmplifyUp monorepo\n * (set NEXT_PUBLIC_AMPLIFYUP_TARGET=local in .env.local).\n */\nexport function resolveAmplifyUpTarget(options?: {\n  configTarget?: AmplifyUpTargetInput;\n  /** @deprecated Prefer NEXT_PUBLIC_AMPLIFYUP_TARGET=local. When true, resolves to local. */\n  configDev?: boolean;\n}): AmplifyUpTarget {\n  if (options?.configTarget && isAmplifyUpTarget(options.configTarget)) {\n    return normalizeAmplifyUpTarget(options.configTarget);\n  }\n\n  if (options?.configDev === true) {\n    return 'local';\n  }\n\n  const envTarget =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_AMPLIFYUP_TARGET\n      : undefined;\n  if (isAmplifyUpTarget(envTarget)) {\n    return normalizeAmplifyUpTarget(envTarget);\n  }\n\n  return 'production';\n}\n\n/** True when the orchestrator origin is a remote AmplifyUp deployment (not localhost). */\nexport function isRemoteOrchestratorUrl(orchestratorUrl: string): boolean {\n  try {\n    const host = new URL(orchestratorUrl).hostname.toLowerCase();\n    return host !== 'localhost' && host !== '127.0.0.1' && host !== '::1';\n  } catch {\n    return false;\n  }\n}\n\nfunction localOrchestratorUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_ORCHESTRATOR_URL\n      : undefined;\n  return (fromEnv || 'http://localhost:5001').replace(/\\/$/, '');\n}\n\n/**\n * Optional override for the local→AWS-dev API base (events + personalize).\n * Defaults to https://api-dev.amplifyup.ai\n */\nfunction localAwsApiUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_AMPLIFYUP_API_URL\n      : undefined;\n  return (fromEnv || AWS_DEV_API).replace(/\\/$/, '');\n}\n\n/**\n * Optional override for the local Edge Worker URL.\n * Defaults to http://localhost:8787\n */\nfunction localEdgeUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_EDGE_URL\n      : undefined;\n  return (fromEnv || 'http://localhost:8787').replace(/\\/$/, '');\n}\n\nexport function resolveAmplifyUpUrls(target: AmplifyUpTarget): AmplifyUpUrls {\n  if (target === 'local') {\n    const orchestratorUrl = localOrchestratorUrl();\n    const apiGatewayUrl = localAwsApiUrl();\n    return {\n      target: 'local',\n      // Layouts / site config / composer APIs → local orchestrator + Neon\n      orchestratorUrl,\n      // Events + personalize → AWS development stack\n      apiGatewayUrl,\n      decisionApiUrl: `${apiGatewayUrl}/v1/personalize`,\n      edgeUrl: localEdgeUrl(),\n    };\n  }\n\n  const resolvedApi =\n    (typeof process !== 'undefined' &&\n      process.env.NEXT_PUBLIC_AMPLIFYUP_API_URL?.replace(/\\/$/, '')) ||\n    AWS_PROD_API;\n\n  const orchestratorFromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_ORCHESTRATOR_URL\n      : undefined;\n\n  // Production: don't accidentally use a localhost orchestrator URL from a local env file\n  const isLocalOrchestrator =\n    !!orchestratorFromEnv &&\n    (orchestratorFromEnv.includes('localhost') ||\n      orchestratorFromEnv.includes('127.0.0.1'));\n\n  const orchestratorUrl = isLocalOrchestrator || !orchestratorFromEnv\n    ? PROD_ORCHESTRATOR\n    : orchestratorFromEnv.replace(/\\/$/, '');\n\n  const edgeFromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_EDGE_URL?.replace(/\\/$/, '')\n      : undefined;\n  const edgeUrl =\n    edgeFromEnv &&\n    !edgeFromEnv.includes('localhost') &&\n    !edgeFromEnv.includes('127.0.0.1')\n      ? edgeFromEnv\n      : PROD_EDGE;\n\n  return {\n    target: 'production',\n    apiGatewayUrl: resolvedApi,\n    orchestratorUrl,\n    decisionApiUrl: `${resolvedApi}/v1/personalize`,\n    edgeUrl,\n  };\n}\n","/**\n * Next.js middleware: Composer preview rewrite + variant ISR rewrite.\n * Edge-runtime safe (no Node APIs).\n */\n\nimport { NextResponse } from 'next/server';\nimport type { NextRequest } from 'next/server';\nimport { fetchEdgeVariants } from './edge/fetchVariants';\nimport {\n  isDefaultVariantKeys,\n  serializeVariantKeys,\n} from './edge/variantKeys';\nimport { normalizeRoute } from './edge/normalizeRoute';\nimport { resolveAmplifyUpTarget, resolveAmplifyUpUrls } from './targets';\n\nexport const AMPLIFY_VARIANT_PREFIX = '/__p';\nexport const AMPLIFY_ANON_COOKIE = 'amplifyup_anon_id';\n\nexport const amplifyMiddlewareConfig = {\n  matcher: ['/((?!api|_next/static|_next/image|favicon.ico|.*\\\\..*).*)'],\n};\n\nfunction isPrefetch(request: NextRequest): boolean {\n  return (\n    request.headers.get('x-middleware-prefetch') === '1' ||\n    request.headers.get('Next-Router-Prefetch') === '1' ||\n    request.headers.get('purpose') === 'prefetch' ||\n    request.headers.get('Purpose') === 'prefetch'\n  );\n}\n\nfunction generateAnonId(): string {\n  const uuid =\n    typeof crypto !== 'undefined' && 'randomUUID' in crypto\n      ? crypto.randomUUID()\n      : `${Date.now()}-${Math.random().toString(16).slice(2)}`;\n  return `browser_${uuid}`;\n}\n\n/**\n * Preview stays dynamic. Personalized variants rewrite to `/__p/{keys}/…`\n * so Next can SSR the combo once and cache it (ISR). Default traffic is\n * unchanged SSG. Fail open to the default page on Edge errors/timeouts.\n */\nexport async function amplifyMiddleware(\n  request: NextRequest,\n  options?: { trackingId?: string }\n): Promise<NextResponse> {\n  const { pathname, searchParams } = request.nextUrl;\n\n  if (\n    pathname.startsWith('/__preview') ||\n    pathname.startsWith(AMPLIFY_VARIANT_PREFIX)\n  ) {\n    return NextResponse.next();\n  }\n\n  const isPreview =\n    searchParams.get('preview') === 'true' ||\n    searchParams.get('visualEditor') === 'true';\n  if (isPreview) {\n    const url = request.nextUrl.clone();\n    url.pathname = pathname === '/' ? '/__preview' : `/__preview${pathname}`;\n    return NextResponse.rewrite(url);\n  }\n\n  if (isPrefetch(request)) {\n    return NextResponse.next();\n  }\n\n  const trackingId =\n    options?.trackingId ||\n    (typeof searchParams.get('trackingId') === 'string'\n      ? searchParams.get('trackingId')\n      : null) ||\n    process.env.NEXT_PUBLIC_AMPLIFYUP_TRACKING_ID ||\n    '';\n  if (!trackingId) {\n    return NextResponse.next();\n  }\n\n  const existingAnon = request.cookies.get(AMPLIFY_ANON_COOKIE)?.value || '';\n  if (!existingAnon) {\n    const res = NextResponse.next();\n    res.cookies.set(AMPLIFY_ANON_COOKIE, generateAnonId(), {\n      path: '/',\n      maxAge: 60 * 60 * 24 * 365,\n      sameSite: 'lax',\n    });\n    return res;\n  }\n\n  const target = resolveAmplifyUpTarget();\n  const { edgeUrl } = resolveAmplifyUpUrls(target);\n  const route = normalizeRoute(pathname);\n\n  try {\n    const variantKeys = await fetchEdgeVariants({\n      edgeUrl,\n      trackingId,\n      route,\n      anonId: existingAnon,\n    });\n    if (isDefaultVariantKeys(variantKeys)) {\n      return NextResponse.next();\n    }\n    const sig = encodeURIComponent(serializeVariantKeys(variantKeys));\n    const url = request.nextUrl.clone();\n    url.pathname =\n      pathname === '/'\n        ? `${AMPLIFY_VARIANT_PREFIX}/${sig}`\n        : `${AMPLIFY_VARIANT_PREFIX}/${sig}${pathname}`;\n    return NextResponse.rewrite(url);\n  } catch {\n    return NextResponse.next();\n  }\n}\n"]}
+{"version":3,"sources":["../src/edge/fetchVariants.ts","../src/edge/variantKeys.ts","../src/edge/normalizeRoute.ts","../src/targets.ts","../src/middleware.ts"],"names":["orchestratorUrl","NextResponse"],"mappings":";;;;;;;;AAIA,eAAsB,kBAAkB,OAAA,EAOJ;AAClC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC/C,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,IACjC,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,QAAQ,OAAA,CAAQ;AAAA,GACjB,CAAA;AACD,EAAA,MAAM,UAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AACjE,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,KAAA,GAAQ,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,OAAA,CAAQ,aAAa,GAAG,CAAA;AAC3E,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,aAAA,EAAgB,MAAA,CAAO,QAAA,EAAU,CAAA,CAAA,EAAI;AAAA,MACpE,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA,MACtC,KAAA,EAAO,UAAA;AAAA,MACP,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AACD,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,EAAC;AACrB,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAG/C,IAAA,OAAO,IAAA,CAAK,eAAe,OAAO,IAAA,CAAK,gBAAgB,QAAA,GACnD,IAAA,CAAK,cACL,EAAC;AAAA,EACP,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;;;ACjCO,SAAS,qBACd,IAAA,EACQ;AACR,EAAA,IAAI,CAAC,MAAM,OAAO,EAAA;AAClB,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,IAAI,EAAE,IAAA,EAAK;AACvC,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,OAAA,GAAU,KAAK,MAAM,CAAA;AAC3B,IAAA,IAAI,CAAC,OAAA,IAAW,OAAA,KAAY,SAAA,EAAW;AACvC,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,OAAO,CAAA,CAAE,CAAA;AAAA,EACnC;AACA,EAAA,OAAO,KAAA,CAAM,KAAK,GAAG,CAAA;AACvB;AAmBO,SAAS,qBACd,IAAA,EACS;AACT,EAAA,OAAO,oBAAA,CAAqB,IAAI,CAAA,KAAM,EAAA;AACxC;;;ACpCO,SAAS,eAAe,KAAA,EAAuB;AACpD,EAAA,IAAI,IAAA,GAAO,MAAA,CAAO,KAAA,IAAS,EAAE,EAAE,IAAA,EAAK;AACpC,EAAA,IAAI,CAAC,MAAM,OAAO,GAAA;AAElB,EAAA,IAAI;AACF,IAAA,IAAI,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAA,EAAG;AAC9B,MAAA,IAAA,GAAO,IAAI,GAAA,CAAI,IAAI,CAAA,CAAE,QAAA;AAAA,IACvB;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,KAAK,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAClC,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,KAAK,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAElC,EAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAC1C,EAAA,IAAI,KAAK,MAAA,GAAS,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,EAAG;AACzC,IAAA,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,IAAA,IAAQ,GAAA;AACjB;;;ACFA,IAAM,WAAA,GAAc,8BAAA;AACpB,IAAM,YAAA,GAAe,0BAAA;AACrB,IAAM,iBAAA,GAAoB,sBAAA;AAC1B,IAAM,SAAA,GAAY,2BAAA;AAEX,SAAS,kBAAkB,KAAA,EAA+C;AAC/E,EAAA,OAAO,KAAA,KAAU,OAAA,IAAW,KAAA,KAAU,KAAA,IAAS,KAAA,KAAU,YAAA;AAC3D;AAEO,SAAS,yBAAyB,KAAA,EAA8C;AACrF,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAA,GAAU,KAAA;AACrC;AAcO,SAAS,uBAAuB,OAAA,EAInB;AASlB,EAAA,MAAM,YACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AACN,EAAA,IAAI,iBAAA,CAAkB,SAAS,CAAA,EAAG;AAChC,IAAA,OAAO,yBAAyB,SAAS,CAAA;AAAA,EAC3C;AAEA,EAAA,OAAO,YAAA;AACT;AAYA,SAAS,oBAAA,GAA+B;AACtC,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC/D;AAMA,SAAS,cAAA,GAAyB;AAChC,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,6BAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,WAAA,EAAa,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACnD;AAMA,SAAS,YAAA,GAAuB;AAC9B,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,oBAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC/D;AAEO,SAAS,qBAAqB,MAAA,EAAwC;AAC3E,EAAA,IAAI,WAAW,OAAA,EAAS;AACtB,IAAA,MAAMA,mBAAkB,oBAAA,EAAqB;AAC7C,IAAA,MAAM,gBAAgB,cAAA,EAAe;AACrC,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,OAAA;AAAA;AAAA,MAER,eAAA,EAAAA,gBAAAA;AAAA;AAAA,MAEA,aAAA;AAAA,MACA,cAAA,EAAgB,GAAG,aAAa,CAAA,eAAA,CAAA;AAAA,MAChC,SAAS,YAAA;AAAa,KACxB;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GACH,OAAO,OAAA,KAAY,WAAA,IAClB,OAAA,CAAQ,IAAI,6BAAA,EAA+B,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,IAC9D,YAAA;AAEF,EAAA,MAAM,sBACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AAGN,EAAA,MAAM,mBAAA,GACJ,CAAC,CAAC,mBAAA,KACD,mBAAA,CAAoB,SAAS,WAAW,CAAA,IACvC,mBAAA,CAAoB,QAAA,CAAS,WAAW,CAAA,CAAA;AAE5C,EAAA,MAAM,eAAA,GAAkB,uBAAuB,CAAC,mBAAA,GAC5C,oBACA,mBAAA,CAAoB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAEzC,EAAA,MAAM,WAAA,GACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,oBAAA,EAAsB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACnD,MAAA;AACN,EAAA,MAAM,OAAA,GACJ,WAAA,IACA,CAAC,WAAA,CAAY,QAAA,CAAS,WAAW,CAAA,IACjC,CAAC,WAAA,CAAY,QAAA,CAAS,WAAW,CAAA,GAC7B,WAAA,GACA,SAAA;AAEN,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,YAAA;AAAA,IACR,aAAA,EAAe,WAAA;AAAA,IACf,eAAA;AAAA,IACA,cAAA,EAAgB,GAAG,WAAW,CAAA,eAAA,CAAA;AAAA,IAC9B;AAAA,GACF;AACF;;;ACzJO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,mBAAA,GAAsB;AAC5B,IAAM,sBAAA,GAAyB;AACtC,IAAM,0BAA0B,EAAA,GAAK,EAAA;AAE9B,IAAM,uBAAA,GAA0B;AAAA,EACrC,OAAA,EAAS,CAAC,2DAA2D;AACvE;AAEA,SAAS,WAAW,OAAA,EAA+B;AACjD,EAAA,OACE,OAAA,CAAQ,QAAQ,GAAA,CAAI,uBAAuB,MAAM,GAAA,IACjD,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,sBAAsB,CAAA,KAAM,OAChD,OAAA,CAAQ,OAAA,CAAQ,IAAI,SAAS,CAAA,KAAM,cACnC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,KAAM,UAAA;AAEvC;AAEA,SAAS,cAAA,GAAyB;AAChC,EAAA,MAAM,IAAA,GACJ,OAAO,MAAA,KAAW,WAAA,IAAe,gBAAgB,MAAA,GAC7C,MAAA,CAAO,UAAA,EAAW,GAClB,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,KAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAC1D,EAAA,OAAO,WAAW,IAAI,CAAA,CAAA;AACxB;AAEA,SAAS,iBAAA,GAA4B;AACnC,EAAA,OAAO,OAAO,WAAW,WAAA,IAAe,YAAA,IAAgB,SACpD,MAAA,CAAO,UAAA,KACP,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,KAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAC1D;AAEA,SAAS,iBAAA,CAAkB,KAAmB,QAAA,EAAiC;AAC7E,EAAA,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,sBAAA,EAAwB,QAAA,IAAY,mBAAkB,EAAG;AAAA,IACvE,IAAA,EAAM,GAAA;AAAA,IACN,MAAA,EAAQ,uBAAA;AAAA,IACR,QAAA,EAAU;AAAA,GACX,CAAA;AACD,EAAA,OAAO,GAAA;AACT;AAOA,eAAsB,iBAAA,CACpB,SACA,OAAA,EACuB;AACvB,EAAA,MAAM,EAAE,QAAA,EAAU,YAAA,EAAa,GAAI,OAAA,CAAQ,OAAA;AAE3C,EAAA,IACE,SAAS,UAAA,CAAW,YAAY,KAChC,QAAA,CAAS,UAAA,CAAW,sBAAsB,CAAA,EAC1C;AACA,IAAA,OAAOC,oBAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,SAAA,GACJ,aAAa,GAAA,CAAI,SAAS,MAAM,MAAA,IAChC,YAAA,CAAa,GAAA,CAAI,cAAc,CAAA,KAAM,MAAA;AACvC,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAM;AAClC,IAAA,GAAA,CAAI,QAAA,GAAW,QAAA,KAAa,GAAA,GAAM,YAAA,GAAe,aAAa,QAAQ,CAAA,CAAA;AACtE,IAAA,OAAOA,mBAAA,CAAa,QAAQ,GAAG,CAAA;AAAA,EACjC;AAEA,EAAA,IAAI,UAAA,CAAW,OAAO,CAAA,EAAG;AACvB,IAAA,OAAOA,oBAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,aACJ,OAAA,EAAS,UAAA,KACR,OAAO,YAAA,CAAa,IAAI,YAAY,CAAA,KAAM,QAAA,GACvC,YAAA,CAAa,IAAI,YAAY,CAAA,GAC7B,IAAA,CAAA,IACJ,OAAA,CAAQ,IAAI,iCAAA,IACZ,EAAA;AACF,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAOA,oBAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,mBAAmB,GAAG,KAAA,IAAS,EAAA;AACxE,EAAA,MAAM,kBAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,sBAAsB,GAAG,KAAA,IAAS,EAAA;AAC9E,EAAA,IAAI,CAAC,YAAA,EAAc;AACjB,IAAA,MAAM,GAAA,GAAMA,oBAAa,IAAA,EAAK;AAC9B,IAAA,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,mBAAA,EAAqB,cAAA,EAAe,EAAG;AAAA,MACrD,IAAA,EAAM,GAAA;AAAA,MACN,MAAA,EAAQ,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AAAA,MACvB,QAAA,EAAU;AAAA,KACX,CAAA;AACD,IAAA,OAAO,iBAAA,CAAkB,KAAK,eAAe,CAAA;AAAA,EAC/C;AAEA,EAAA,MAAM,SAAS,sBAAA,EAAuB;AACtC,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,oBAAA,CAAqB,MAAM,CAAA;AAC/C,EAAA,MAAM,KAAA,GAAQ,eAAe,QAAQ,CAAA;AAErC,EAAA,IAAI;AACF,IAAA,MAAM,WAAA,GAAc,MAAM,iBAAA,CAAkB;AAAA,MAC1C,OAAA;AAAA,MACA,UAAA;AAAA,MACA,KAAA;AAAA,MACA,MAAA,EAAQ;AAAA,KACT,CAAA;AACD,IAAA,IAAI,oBAAA,CAAqB,WAAW,CAAA,EAAG;AACrC,MAAA,OAAO,iBAAA,CAAkBA,mBAAA,CAAa,IAAA,EAAK,EAAG,eAAe,CAAA;AAAA,IAC/D;AACA,IAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,oBAAA,CAAqB,WAAW,CAAC,CAAA;AAChE,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAM;AAClC,IAAA,GAAA,CAAI,QAAA,GACF,QAAA,KAAa,GAAA,GACT,CAAA,EAAG,sBAAsB,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,GAChC,CAAA,EAAG,sBAAsB,CAAA,CAAA,EAAI,GAAG,GAAG,QAAQ,CAAA,CAAA;AACjD,IAAA,OAAO,iBAAA,CAAkBA,mBAAA,CAAa,OAAA,CAAQ,GAAG,GAAG,eAAe,CAAA;AAAA,EACrE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,iBAAA,CAAkBA,mBAAA,CAAa,IAAA,EAAK,EAAG,eAAe,CAAA;AAAA,EAC/D;AACF","file":"middleware.js","sourcesContent":["/**\n * Lightweight Edge call for Next middleware: variant keys only.\n */\n\nexport async function fetchEdgeVariants(options: {\n  edgeUrl: string;\n  trackingId: string;\n  route: string;\n  anonId: string;\n  fetch?: typeof fetch;\n  timeoutMs?: number;\n}): Promise<Record<string, string>> {\n  const base = options.edgeUrl.replace(/\\/+$/, '');\n  const params = new URLSearchParams({\n    route: options.route,\n    trackingId: options.trackingId,\n    anonId: options.anonId,\n  });\n  const fetchFn = options.fetch ?? globalThis.fetch.bind(globalThis);\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 800);\n  try {\n    const res = await fetchFn(`${base}/v1/variants?${params.toString()}`, {\n      method: 'GET',\n      headers: { Accept: 'application/json' },\n      cache: 'no-store',\n      signal: controller.signal,\n    });\n    if (!res.ok) return {};\n    const body = (await res.json().catch(() => ({}))) as {\n      variantKeys?: Record<string, string>;\n    };\n    return body.variantKeys && typeof body.variantKeys === 'object'\n      ? body.variantKeys\n      : {};\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/**\n * Compact variant-key codec for URLs and Edge `variants` query params.\n * Default variants are omitted so equivalent assignments share one cache entry.\n */\n\nexport function serializeVariantKeys(\n  keys: Record<string, string> | null | undefined\n): string {\n  if (!keys) return '';\n  const parts: string[] = [];\n  const zoneIds = Object.keys(keys).sort();\n  for (const zoneId of zoneIds) {\n    const variant = keys[zoneId];\n    if (!variant || variant === 'default') continue;\n    parts.push(`${zoneId}:${variant}`);\n  }\n  return parts.join(',');\n}\n\nexport function parseVariantKeys(\n  raw: string | null | undefined\n): Record<string, string> {\n  const out: Record<string, string> = {};\n  const text = (raw || '').trim();\n  if (!text) return out;\n  const decoded = safeDecode(text);\n  for (const part of decoded.split(',')) {\n    const i = part.indexOf(':');\n    if (i <= 0) continue;\n    const zoneId = part.slice(0, i).trim();\n    const variant = part.slice(i + 1).trim();\n    if (zoneId && variant) out[zoneId] = variant;\n  }\n  return out;\n}\n\nexport function isDefaultVariantKeys(\n  keys: Record<string, string> | null | undefined\n): boolean {\n  return serializeVariantKeys(keys) === '';\n}\n\nfunction safeDecode(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return value;\n  }\n}\n","/**\n * Normalize a route path for Edge resolve requests.\n * Leading slash, no trailing slash (except root), query/hash stripped.\n */\nexport function normalizeRoute(route: string): string {\n  let path = String(route || '').trim();\n  if (!path) return '/';\n\n  try {\n    if (/^https?:\\/\\//i.test(path)) {\n      path = new URL(path).pathname;\n    }\n  } catch {\n    /* keep path */\n  }\n\n  const q = path.indexOf('?');\n  if (q >= 0) path = path.slice(0, q);\n  const h = path.indexOf('#');\n  if (h >= 0) path = path.slice(0, h);\n\n  if (!path.startsWith('/')) path = `/${path}`;\n  if (path.length > 1 && path.endsWith('/')) {\n    path = path.replace(/\\/+$/, '');\n  }\n  return path || '/';\n}\n","/**\n * AmplifyUp environment targets\n *\n * Two environments only:\n * - local: apps/config from localhost + Neon; events & personalize from AWS development\n * - production: all production AmplifyUp / AWS endpoints\n *\n * Controlled via `config.target` or `NEXT_PUBLIC_AMPLIFYUP_TARGET`.\n * Legacy value `dev` is treated as `local`.\n */\n\nexport type AmplifyUpTarget = 'local' | 'production';\n\n/** Accepted env/config strings (includes legacy `dev` → local). */\nexport type AmplifyUpTargetInput = AmplifyUpTarget | 'dev';\n\nexport interface AmplifyUpUrls {\n  target: AmplifyUpTarget;\n  apiGatewayUrl: string;\n  orchestratorUrl: string;\n  decisionApiUrl: string;\n  edgeUrl: string;\n}\n\nconst AWS_DEV_API = 'https://api-dev.amplifyup.ai';\nconst AWS_PROD_API = 'https://api.amplifyup.ai';\nconst PROD_ORCHESTRATOR = 'https://amplifyup.ai';\nconst PROD_EDGE = 'https://edge.amplifyup.ai';\n\nexport function isAmplifyUpTarget(value: unknown): value is AmplifyUpTargetInput {\n  return value === 'local' || value === 'dev' || value === 'production';\n}\n\nexport function normalizeAmplifyUpTarget(value: AmplifyUpTargetInput): AmplifyUpTarget {\n  return value === 'dev' ? 'local' : value;\n}\n\n/**\n * Resolve which target to use.\n *\n * Priority:\n * 1. explicit config.target\n * 2. config.dev === true → 'local' (local apps + AWS-dev pipeline)\n * 3. NEXT_PUBLIC_AMPLIFYUP_TARGET\n * 4. unset → 'production' (live endpoints — hosting on localhost does NOT imply local)\n *\n * Use `local` only when developing against the AmplifyUp monorepo\n * (set NEXT_PUBLIC_AMPLIFYUP_TARGET=local in .env.local).\n */\nexport function resolveAmplifyUpTarget(options?: {\n  configTarget?: AmplifyUpTargetInput;\n  /** @deprecated Prefer NEXT_PUBLIC_AMPLIFYUP_TARGET=local. When true, resolves to local. */\n  configDev?: boolean;\n}): AmplifyUpTarget {\n  if (options?.configTarget && isAmplifyUpTarget(options.configTarget)) {\n    return normalizeAmplifyUpTarget(options.configTarget);\n  }\n\n  if (options?.configDev === true) {\n    return 'local';\n  }\n\n  const envTarget =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_AMPLIFYUP_TARGET\n      : undefined;\n  if (isAmplifyUpTarget(envTarget)) {\n    return normalizeAmplifyUpTarget(envTarget);\n  }\n\n  return 'production';\n}\n\n/** True when the orchestrator origin is a remote AmplifyUp deployment (not localhost). */\nexport function isRemoteOrchestratorUrl(orchestratorUrl: string): boolean {\n  try {\n    const host = new URL(orchestratorUrl).hostname.toLowerCase();\n    return host !== 'localhost' && host !== '127.0.0.1' && host !== '::1';\n  } catch {\n    return false;\n  }\n}\n\nfunction localOrchestratorUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_ORCHESTRATOR_URL\n      : undefined;\n  return (fromEnv || 'http://localhost:5001').replace(/\\/$/, '');\n}\n\n/**\n * Optional override for the local→AWS-dev API base (events + personalize).\n * Defaults to https://api-dev.amplifyup.ai\n */\nfunction localAwsApiUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_AMPLIFYUP_API_URL\n      : undefined;\n  return (fromEnv || AWS_DEV_API).replace(/\\/$/, '');\n}\n\n/**\n * Optional override for the local Edge Worker URL.\n * Defaults to http://localhost:8787\n */\nfunction localEdgeUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_EDGE_URL\n      : undefined;\n  return (fromEnv || 'http://localhost:8787').replace(/\\/$/, '');\n}\n\nexport function resolveAmplifyUpUrls(target: AmplifyUpTarget): AmplifyUpUrls {\n  if (target === 'local') {\n    const orchestratorUrl = localOrchestratorUrl();\n    const apiGatewayUrl = localAwsApiUrl();\n    return {\n      target: 'local',\n      // Layouts / site config / composer APIs → local orchestrator + Neon\n      orchestratorUrl,\n      // Events + personalize → AWS development stack\n      apiGatewayUrl,\n      decisionApiUrl: `${apiGatewayUrl}/v1/personalize`,\n      edgeUrl: localEdgeUrl(),\n    };\n  }\n\n  const resolvedApi =\n    (typeof process !== 'undefined' &&\n      process.env.NEXT_PUBLIC_AMPLIFYUP_API_URL?.replace(/\\/$/, '')) ||\n    AWS_PROD_API;\n\n  const orchestratorFromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_ORCHESTRATOR_URL\n      : undefined;\n\n  // Production: don't accidentally use a localhost orchestrator URL from a local env file\n  const isLocalOrchestrator =\n    !!orchestratorFromEnv &&\n    (orchestratorFromEnv.includes('localhost') ||\n      orchestratorFromEnv.includes('127.0.0.1'));\n\n  const orchestratorUrl = isLocalOrchestrator || !orchestratorFromEnv\n    ? PROD_ORCHESTRATOR\n    : orchestratorFromEnv.replace(/\\/$/, '');\n\n  const edgeFromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_EDGE_URL?.replace(/\\/$/, '')\n      : undefined;\n  const edgeUrl =\n    edgeFromEnv &&\n    !edgeFromEnv.includes('localhost') &&\n    !edgeFromEnv.includes('127.0.0.1')\n      ? edgeFromEnv\n      : PROD_EDGE;\n\n  return {\n    target: 'production',\n    apiGatewayUrl: resolvedApi,\n    orchestratorUrl,\n    decisionApiUrl: `${resolvedApi}/v1/personalize`,\n    edgeUrl,\n  };\n}\n","/**\n * Next.js middleware: Composer preview rewrite + variant ISR rewrite.\n * Edge-runtime safe (no Node APIs).\n */\n\nimport { NextResponse } from 'next/server';\nimport type { NextRequest } from 'next/server';\nimport { fetchEdgeVariants } from './edge/fetchVariants';\nimport {\n  isDefaultVariantKeys,\n  serializeVariantKeys,\n} from './edge/variantKeys';\nimport { normalizeRoute } from './edge/normalizeRoute';\nimport { resolveAmplifyUpTarget, resolveAmplifyUpUrls } from './targets';\n\nexport const AMPLIFY_VARIANT_PREFIX = '/__p';\nexport const AMPLIFY_ANON_COOKIE = 'amplifyup_anon_id';\nexport const AMPLIFY_SESSION_COOKIE = 'amplifyup_session_id';\nconst SESSION_MAX_AGE_SECONDS = 30 * 60;\n\nexport const amplifyMiddlewareConfig = {\n  matcher: ['/((?!api|_next/static|_next/image|favicon.ico|.*\\\\..*).*)'],\n};\n\nfunction isPrefetch(request: NextRequest): boolean {\n  return (\n    request.headers.get('x-middleware-prefetch') === '1' ||\n    request.headers.get('Next-Router-Prefetch') === '1' ||\n    request.headers.get('purpose') === 'prefetch' ||\n    request.headers.get('Purpose') === 'prefetch'\n  );\n}\n\nfunction generateAnonId(): string {\n  const uuid =\n    typeof crypto !== 'undefined' && 'randomUUID' in crypto\n      ? crypto.randomUUID()\n      : `${Date.now()}-${Math.random().toString(16).slice(2)}`;\n  return `browser_${uuid}`;\n}\n\nfunction generateSessionId(): string {\n  return typeof crypto !== 'undefined' && 'randomUUID' in crypto\n    ? crypto.randomUUID()\n    : `${Date.now()}-${Math.random().toString(16).slice(2)}`;\n}\n\nfunction withSessionCookie(res: NextResponse, existing?: string): NextResponse {\n  res.cookies.set(AMPLIFY_SESSION_COOKIE, existing || generateSessionId(), {\n    path: '/',\n    maxAge: SESSION_MAX_AGE_SECONDS,\n    sameSite: 'lax',\n  });\n  return res;\n}\n\n/**\n * Preview stays dynamic. Personalized variants rewrite to `/__p/{keys}/…`\n * so Next can SSR the combo once and cache it (ISR). Default traffic is\n * unchanged SSG. Fail open to the default page on Edge errors/timeouts.\n */\nexport async function amplifyMiddleware(\n  request: NextRequest,\n  options?: { trackingId?: string }\n): Promise<NextResponse> {\n  const { pathname, searchParams } = request.nextUrl;\n\n  if (\n    pathname.startsWith('/__preview') ||\n    pathname.startsWith(AMPLIFY_VARIANT_PREFIX)\n  ) {\n    return NextResponse.next();\n  }\n\n  const isPreview =\n    searchParams.get('preview') === 'true' ||\n    searchParams.get('visualEditor') === 'true';\n  if (isPreview) {\n    const url = request.nextUrl.clone();\n    url.pathname = pathname === '/' ? '/__preview' : `/__preview${pathname}`;\n    return NextResponse.rewrite(url);\n  }\n\n  if (isPrefetch(request)) {\n    return NextResponse.next();\n  }\n\n  const trackingId =\n    options?.trackingId ||\n    (typeof searchParams.get('trackingId') === 'string'\n      ? searchParams.get('trackingId')\n      : null) ||\n    process.env.NEXT_PUBLIC_AMPLIFYUP_TRACKING_ID ||\n    '';\n  if (!trackingId) {\n    return NextResponse.next();\n  }\n\n  const existingAnon = request.cookies.get(AMPLIFY_ANON_COOKIE)?.value || '';\n  const existingSession = request.cookies.get(AMPLIFY_SESSION_COOKIE)?.value || '';\n  if (!existingAnon) {\n    const res = NextResponse.next();\n    res.cookies.set(AMPLIFY_ANON_COOKIE, generateAnonId(), {\n      path: '/',\n      maxAge: 60 * 60 * 24 * 365,\n      sameSite: 'lax',\n    });\n    return withSessionCookie(res, existingSession);\n  }\n\n  const target = resolveAmplifyUpTarget();\n  const { edgeUrl } = resolveAmplifyUpUrls(target);\n  const route = normalizeRoute(pathname);\n\n  try {\n    const variantKeys = await fetchEdgeVariants({\n      edgeUrl,\n      trackingId,\n      route,\n      anonId: existingAnon,\n    });\n    if (isDefaultVariantKeys(variantKeys)) {\n      return withSessionCookie(NextResponse.next(), existingSession);\n    }\n    const sig = encodeURIComponent(serializeVariantKeys(variantKeys));\n    const url = request.nextUrl.clone();\n    url.pathname =\n      pathname === '/'\n        ? `${AMPLIFY_VARIANT_PREFIX}/${sig}`\n        : `${AMPLIFY_VARIANT_PREFIX}/${sig}${pathname}`;\n    return withSessionCookie(NextResponse.rewrite(url), existingSession);\n  } catch {\n    return withSessionCookie(NextResponse.next(), existingSession);\n  }\n}\n"]}

package/dist/middleware.mjs

@@ -128,6 +128,8 @@ function resolveAmplifyUpUrls(target) {
 // src/middleware.ts
 var AMPLIFY_VARIANT_PREFIX = "/__p";
 var AMPLIFY_ANON_COOKIE = "amplifyup_anon_id";
+var AMPLIFY_SESSION_COOKIE = "amplifyup_session_id";
+var SESSION_MAX_AGE_SECONDS = 30 * 60;
 var amplifyMiddlewareConfig = {
   matcher: ["/((?!api|_next/static|_next/image|favicon.ico|.*\\..*).*)"]
 };
@@ -138,6 +140,17 @@ function generateAnonId() {
   const uuid = typeof crypto !== "undefined" && "randomUUID" in crypto ? crypto.randomUUID() : `${Date.now()}-${Math.random().toString(16).slice(2)}`;
   return `browser_${uuid}`;
 }
+function generateSessionId() {
+  return typeof crypto !== "undefined" && "randomUUID" in crypto ? crypto.randomUUID() : `${Date.now()}-${Math.random().toString(16).slice(2)}`;
+}
+function withSessionCookie(res, existing) {
+  res.cookies.set(AMPLIFY_SESSION_COOKIE, existing || generateSessionId(), {
+    path: "/",
+    maxAge: SESSION_MAX_AGE_SECONDS,
+    sameSite: "lax"
+  });
+  return res;
+}
 async function amplifyMiddleware(request, options) {
   const { pathname, searchParams } = request.nextUrl;
   if (pathname.startsWith("/__preview") || pathname.startsWith(AMPLIFY_VARIANT_PREFIX)) {
@@ -157,6 +170,7 @@ async function amplifyMiddleware(request, options) {
     return NextResponse.next();
   }
   const existingAnon = request.cookies.get(AMPLIFY_ANON_COOKIE)?.value || "";
+  const existingSession = request.cookies.get(AMPLIFY_SESSION_COOKIE)?.value || "";
   if (!existingAnon) {
     const res = NextResponse.next();
     res.cookies.set(AMPLIFY_ANON_COOKIE, generateAnonId(), {
@@ -164,7 +178,7 @@ async function amplifyMiddleware(request, options) {
       maxAge: 60 * 60 * 24 * 365,
       sameSite: "lax"
     });
-    return res;
+    return withSessionCookie(res, existingSession);
   }
   const target = resolveAmplifyUpTarget();
   const { edgeUrl } = resolveAmplifyUpUrls(target);
@@ -177,17 +191,17 @@ async function amplifyMiddleware(request, options) {
       anonId: existingAnon
     });
     if (isDefaultVariantKeys(variantKeys)) {
-      return NextResponse.next();
+      return withSessionCookie(NextResponse.next(), existingSession);
     }
     const sig = encodeURIComponent(serializeVariantKeys(variantKeys));
     const url = request.nextUrl.clone();
     url.pathname = pathname === "/" ? `${AMPLIFY_VARIANT_PREFIX}/${sig}` : `${AMPLIFY_VARIANT_PREFIX}/${sig}${pathname}`;
-    return NextResponse.rewrite(url);
+    return withSessionCookie(NextResponse.rewrite(url), existingSession);
   } catch {
-    return NextResponse.next();
+    return withSessionCookie(NextResponse.next(), existingSession);
   }
 }
 
-export { AMPLIFY_ANON_COOKIE, AMPLIFY_VARIANT_PREFIX, amplifyMiddleware, amplifyMiddlewareConfig };
+export { AMPLIFY_ANON_COOKIE, AMPLIFY_SESSION_COOKIE, AMPLIFY_VARIANT_PREFIX, amplifyMiddleware, amplifyMiddlewareConfig };
 //# sourceMappingURL=middleware.mjs.map
 //# sourceMappingURL=middleware.mjs.map

package/dist/middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/edge/fetchVariants.ts","../src/edge/variantKeys.ts","../src/edge/normalizeRoute.ts","../src/targets.ts","../src/middleware.ts"],"names":["orchestratorUrl"],"mappings":";;;;;;AAIA,eAAsB,kBAAkB,OAAA,EAOJ;AAClC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC/C,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,IACjC,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,QAAQ,OAAA,CAAQ;AAAA,GACjB,CAAA;AACD,EAAA,MAAM,UAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AACjE,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,KAAA,GAAQ,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,OAAA,CAAQ,aAAa,GAAG,CAAA;AAC3E,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,aAAA,EAAgB,MAAA,CAAO,QAAA,EAAU,CAAA,CAAA,EAAI;AAAA,MACpE,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA,MACtC,KAAA,EAAO,UAAA;AAAA,MACP,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AACD,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,EAAC;AACrB,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAG/C,IAAA,OAAO,IAAA,CAAK,eAAe,OAAO,IAAA,CAAK,gBAAgB,QAAA,GACnD,IAAA,CAAK,cACL,EAAC;AAAA,EACP,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;;;ACjCO,SAAS,qBACd,IAAA,EACQ;AACR,EAAA,IAAI,CAAC,MAAM,OAAO,EAAA;AAClB,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,IAAI,EAAE,IAAA,EAAK;AACvC,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,OAAA,GAAU,KAAK,MAAM,CAAA;AAC3B,IAAA,IAAI,CAAC,OAAA,IAAW,OAAA,KAAY,SAAA,EAAW;AACvC,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,OAAO,CAAA,CAAE,CAAA;AAAA,EACnC;AACA,EAAA,OAAO,KAAA,CAAM,KAAK,GAAG,CAAA;AACvB;AAmBO,SAAS,qBACd,IAAA,EACS;AACT,EAAA,OAAO,oBAAA,CAAqB,IAAI,CAAA,KAAM,EAAA;AACxC;;;ACpCO,SAAS,eAAe,KAAA,EAAuB;AACpD,EAAA,IAAI,IAAA,GAAO,MAAA,CAAO,KAAA,IAAS,EAAE,EAAE,IAAA,EAAK;AACpC,EAAA,IAAI,CAAC,MAAM,OAAO,GAAA;AAElB,EAAA,IAAI;AACF,IAAA,IAAI,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAA,EAAG;AAC9B,MAAA,IAAA,GAAO,IAAI,GAAA,CAAI,IAAI,CAAA,CAAE,QAAA;AAAA,IACvB;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,KAAK,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAClC,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,KAAK,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAElC,EAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAC1C,EAAA,IAAI,KAAK,MAAA,GAAS,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,EAAG;AACzC,IAAA,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,IAAA,IAAQ,GAAA;AACjB;;;ACFA,IAAM,WAAA,GAAc,8BAAA;AACpB,IAAM,YAAA,GAAe,0BAAA;AACrB,IAAM,iBAAA,GAAoB,sBAAA;AAC1B,IAAM,SAAA,GAAY,2BAAA;AAEX,SAAS,kBAAkB,KAAA,EAA+C;AAC/E,EAAA,OAAO,KAAA,KAAU,OAAA,IAAW,KAAA,KAAU,KAAA,IAAS,KAAA,KAAU,YAAA;AAC3D;AAEO,SAAS,yBAAyB,KAAA,EAA8C;AACrF,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAA,GAAU,KAAA;AACrC;AAcO,SAAS,uBAAuB,OAAA,EAInB;AASlB,EAAA,MAAM,YACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AACN,EAAA,IAAI,iBAAA,CAAkB,SAAS,CAAA,EAAG;AAChC,IAAA,OAAO,yBAAyB,SAAS,CAAA;AAAA,EAC3C;AAEA,EAAA,OAAO,YAAA;AACT;AAYA,SAAS,oBAAA,GAA+B;AACtC,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC/D;AAMA,SAAS,cAAA,GAAyB;AAChC,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,6BAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,WAAA,EAAa,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACnD;AAMA,SAAS,YAAA,GAAuB;AAC9B,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,oBAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC/D;AAEO,SAAS,qBAAqB,MAAA,EAAwC;AAC3E,EAAA,IAAI,WAAW,OAAA,EAAS;AACtB,IAAA,MAAMA,mBAAkB,oBAAA,EAAqB;AAC7C,IAAA,MAAM,gBAAgB,cAAA,EAAe;AACrC,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,OAAA;AAAA;AAAA,MAER,eAAA,EAAAA,gBAAAA;AAAA;AAAA,MAEA,aAAA;AAAA,MACA,cAAA,EAAgB,GAAG,aAAa,CAAA,eAAA,CAAA;AAAA,MAChC,SAAS,YAAA;AAAa,KACxB;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GACH,OAAO,OAAA,KAAY,WAAA,IAClB,OAAA,CAAQ,IAAI,6BAAA,EAA+B,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,IAC9D,YAAA;AAEF,EAAA,MAAM,sBACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AAGN,EAAA,MAAM,mBAAA,GACJ,CAAC,CAAC,mBAAA,KACD,mBAAA,CAAoB,SAAS,WAAW,CAAA,IACvC,mBAAA,CAAoB,QAAA,CAAS,WAAW,CAAA,CAAA;AAE5C,EAAA,MAAM,eAAA,GAAkB,uBAAuB,CAAC,mBAAA,GAC5C,oBACA,mBAAA,CAAoB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAEzC,EAAA,MAAM,WAAA,GACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,oBAAA,EAAsB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACnD,MAAA;AACN,EAAA,MAAM,OAAA,GACJ,WAAA,IACA,CAAC,WAAA,CAAY,QAAA,CAAS,WAAW,CAAA,IACjC,CAAC,WAAA,CAAY,QAAA,CAAS,WAAW,CAAA,GAC7B,WAAA,GACA,SAAA;AAEN,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,YAAA;AAAA,IACR,aAAA,EAAe,WAAA;AAAA,IACf,eAAA;AAAA,IACA,cAAA,EAAgB,GAAG,WAAW,CAAA,eAAA,CAAA;AAAA,IAC9B;AAAA,GACF;AACF;;;ACzJO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,mBAAA,GAAsB;AAE5B,IAAM,uBAAA,GAA0B;AAAA,EACrC,OAAA,EAAS,CAAC,2DAA2D;AACvE;AAEA,SAAS,WAAW,OAAA,EAA+B;AACjD,EAAA,OACE,OAAA,CAAQ,QAAQ,GAAA,CAAI,uBAAuB,MAAM,GAAA,IACjD,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,sBAAsB,CAAA,KAAM,OAChD,OAAA,CAAQ,OAAA,CAAQ,IAAI,SAAS,CAAA,KAAM,cACnC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,KAAM,UAAA;AAEvC;AAEA,SAAS,cAAA,GAAyB;AAChC,EAAA,MAAM,IAAA,GACJ,OAAO,MAAA,KAAW,WAAA,IAAe,gBAAgB,MAAA,GAC7C,MAAA,CAAO,UAAA,EAAW,GAClB,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,KAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAC1D,EAAA,OAAO,WAAW,IAAI,CAAA,CAAA;AACxB;AAOA,eAAsB,iBAAA,CACpB,SACA,OAAA,EACuB;AACvB,EAAA,MAAM,EAAE,QAAA,EAAU,YAAA,EAAa,GAAI,OAAA,CAAQ,OAAA;AAE3C,EAAA,IACE,SAAS,UAAA,CAAW,YAAY,KAChC,QAAA,CAAS,UAAA,CAAW,sBAAsB,CAAA,EAC1C;AACA,IAAA,OAAO,aAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,SAAA,GACJ,aAAa,GAAA,CAAI,SAAS,MAAM,MAAA,IAChC,YAAA,CAAa,GAAA,CAAI,cAAc,CAAA,KAAM,MAAA;AACvC,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAM;AAClC,IAAA,GAAA,CAAI,QAAA,GAAW,QAAA,KAAa,GAAA,GAAM,YAAA,GAAe,aAAa,QAAQ,CAAA,CAAA;AACtE,IAAA,OAAO,YAAA,CAAa,QAAQ,GAAG,CAAA;AAAA,EACjC;AAEA,EAAA,IAAI,UAAA,CAAW,OAAO,CAAA,EAAG;AACvB,IAAA,OAAO,aAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,aACJ,OAAA,EAAS,UAAA,KACR,OAAO,YAAA,CAAa,IAAI,YAAY,CAAA,KAAM,QAAA,GACvC,YAAA,CAAa,IAAI,YAAY,CAAA,GAC7B,IAAA,CAAA,IACJ,OAAA,CAAQ,IAAI,iCAAA,IACZ,EAAA;AACF,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,aAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,mBAAmB,GAAG,KAAA,IAAS,EAAA;AACxE,EAAA,IAAI,CAAC,YAAA,EAAc;AACjB,IAAA,MAAM,GAAA,GAAM,aAAa,IAAA,EAAK;AAC9B,IAAA,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,mBAAA,EAAqB,cAAA,EAAe,EAAG;AAAA,MACrD,IAAA,EAAM,GAAA;AAAA,MACN,MAAA,EAAQ,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AAAA,MACvB,QAAA,EAAU;AAAA,KACX,CAAA;AACD,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,MAAM,SAAS,sBAAA,EAAuB;AACtC,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,oBAAA,CAAqB,MAAM,CAAA;AAC/C,EAAA,MAAM,KAAA,GAAQ,eAAe,QAAQ,CAAA;AAErC,EAAA,IAAI;AACF,IAAA,MAAM,WAAA,GAAc,MAAM,iBAAA,CAAkB;AAAA,MAC1C,OAAA;AAAA,MACA,UAAA;AAAA,MACA,KAAA;AAAA,MACA,MAAA,EAAQ;AAAA,KACT,CAAA;AACD,IAAA,IAAI,oBAAA,CAAqB,WAAW,CAAA,EAAG;AACrC,MAAA,OAAO,aAAa,IAAA,EAAK;AAAA,IAC3B;AACA,IAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,oBAAA,CAAqB,WAAW,CAAC,CAAA;AAChE,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAM;AAClC,IAAA,GAAA,CAAI,QAAA,GACF,QAAA,KAAa,GAAA,GACT,CAAA,EAAG,sBAAsB,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,GAChC,CAAA,EAAG,sBAAsB,CAAA,CAAA,EAAI,GAAG,GAAG,QAAQ,CAAA,CAAA;AACjD,IAAA,OAAO,YAAA,CAAa,QAAQ,GAAG,CAAA;AAAA,EACjC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,aAAa,IAAA,EAAK;AAAA,EAC3B;AACF","file":"middleware.mjs","sourcesContent":["/**\n * Lightweight Edge call for Next middleware: variant keys only.\n */\n\nexport async function fetchEdgeVariants(options: {\n  edgeUrl: string;\n  trackingId: string;\n  route: string;\n  anonId: string;\n  fetch?: typeof fetch;\n  timeoutMs?: number;\n}): Promise<Record<string, string>> {\n  const base = options.edgeUrl.replace(/\\/+$/, '');\n  const params = new URLSearchParams({\n    route: options.route,\n    trackingId: options.trackingId,\n    anonId: options.anonId,\n  });\n  const fetchFn = options.fetch ?? globalThis.fetch.bind(globalThis);\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 800);\n  try {\n    const res = await fetchFn(`${base}/v1/variants?${params.toString()}`, {\n      method: 'GET',\n      headers: { Accept: 'application/json' },\n      cache: 'no-store',\n      signal: controller.signal,\n    });\n    if (!res.ok) return {};\n    const body = (await res.json().catch(() => ({}))) as {\n      variantKeys?: Record<string, string>;\n    };\n    return body.variantKeys && typeof body.variantKeys === 'object'\n      ? body.variantKeys\n      : {};\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/**\n * Compact variant-key codec for URLs and Edge `variants` query params.\n * Default variants are omitted so equivalent assignments share one cache entry.\n */\n\nexport function serializeVariantKeys(\n  keys: Record<string, string> | null | undefined\n): string {\n  if (!keys) return '';\n  const parts: string[] = [];\n  const zoneIds = Object.keys(keys).sort();\n  for (const zoneId of zoneIds) {\n    const variant = keys[zoneId];\n    if (!variant || variant === 'default') continue;\n    parts.push(`${zoneId}:${variant}`);\n  }\n  return parts.join(',');\n}\n\nexport function parseVariantKeys(\n  raw: string | null | undefined\n): Record<string, string> {\n  const out: Record<string, string> = {};\n  const text = (raw || '').trim();\n  if (!text) return out;\n  const decoded = safeDecode(text);\n  for (const part of decoded.split(',')) {\n    const i = part.indexOf(':');\n    if (i <= 0) continue;\n    const zoneId = part.slice(0, i).trim();\n    const variant = part.slice(i + 1).trim();\n    if (zoneId && variant) out[zoneId] = variant;\n  }\n  return out;\n}\n\nexport function isDefaultVariantKeys(\n  keys: Record<string, string> | null | undefined\n): boolean {\n  return serializeVariantKeys(keys) === '';\n}\n\nfunction safeDecode(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return value;\n  }\n}\n","/**\n * Normalize a route path for Edge resolve requests.\n * Leading slash, no trailing slash (except root), query/hash stripped.\n */\nexport function normalizeRoute(route: string): string {\n  let path = String(route || '').trim();\n  if (!path) return '/';\n\n  try {\n    if (/^https?:\\/\\//i.test(path)) {\n      path = new URL(path).pathname;\n    }\n  } catch {\n    /* keep path */\n  }\n\n  const q = path.indexOf('?');\n  if (q >= 0) path = path.slice(0, q);\n  const h = path.indexOf('#');\n  if (h >= 0) path = path.slice(0, h);\n\n  if (!path.startsWith('/')) path = `/${path}`;\n  if (path.length > 1 && path.endsWith('/')) {\n    path = path.replace(/\\/+$/, '');\n  }\n  return path || '/';\n}\n","/**\n * AmplifyUp environment targets\n *\n * Two environments only:\n * - local: apps/config from localhost + Neon; events & personalize from AWS development\n * - production: all production AmplifyUp / AWS endpoints\n *\n * Controlled via `config.target` or `NEXT_PUBLIC_AMPLIFYUP_TARGET`.\n * Legacy value `dev` is treated as `local`.\n */\n\nexport type AmplifyUpTarget = 'local' | 'production';\n\n/** Accepted env/config strings (includes legacy `dev` → local). */\nexport type AmplifyUpTargetInput = AmplifyUpTarget | 'dev';\n\nexport interface AmplifyUpUrls {\n  target: AmplifyUpTarget;\n  apiGatewayUrl: string;\n  orchestratorUrl: string;\n  decisionApiUrl: string;\n  edgeUrl: string;\n}\n\nconst AWS_DEV_API = 'https://api-dev.amplifyup.ai';\nconst AWS_PROD_API = 'https://api.amplifyup.ai';\nconst PROD_ORCHESTRATOR = 'https://amplifyup.ai';\nconst PROD_EDGE = 'https://edge.amplifyup.ai';\n\nexport function isAmplifyUpTarget(value: unknown): value is AmplifyUpTargetInput {\n  return value === 'local' || value === 'dev' || value === 'production';\n}\n\nexport function normalizeAmplifyUpTarget(value: AmplifyUpTargetInput): AmplifyUpTarget {\n  return value === 'dev' ? 'local' : value;\n}\n\n/**\n * Resolve which target to use.\n *\n * Priority:\n * 1. explicit config.target\n * 2. config.dev === true → 'local' (local apps + AWS-dev pipeline)\n * 3. NEXT_PUBLIC_AMPLIFYUP_TARGET\n * 4. unset → 'production' (live endpoints — hosting on localhost does NOT imply local)\n *\n * Use `local` only when developing against the AmplifyUp monorepo\n * (set NEXT_PUBLIC_AMPLIFYUP_TARGET=local in .env.local).\n */\nexport function resolveAmplifyUpTarget(options?: {\n  configTarget?: AmplifyUpTargetInput;\n  /** @deprecated Prefer NEXT_PUBLIC_AMPLIFYUP_TARGET=local. When true, resolves to local. */\n  configDev?: boolean;\n}): AmplifyUpTarget {\n  if (options?.configTarget && isAmplifyUpTarget(options.configTarget)) {\n    return normalizeAmplifyUpTarget(options.configTarget);\n  }\n\n  if (options?.configDev === true) {\n    return 'local';\n  }\n\n  const envTarget =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_AMPLIFYUP_TARGET\n      : undefined;\n  if (isAmplifyUpTarget(envTarget)) {\n    return normalizeAmplifyUpTarget(envTarget);\n  }\n\n  return 'production';\n}\n\n/** True when the orchestrator origin is a remote AmplifyUp deployment (not localhost). */\nexport function isRemoteOrchestratorUrl(orchestratorUrl: string): boolean {\n  try {\n    const host = new URL(orchestratorUrl).hostname.toLowerCase();\n    return host !== 'localhost' && host !== '127.0.0.1' && host !== '::1';\n  } catch {\n    return false;\n  }\n}\n\nfunction localOrchestratorUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_ORCHESTRATOR_URL\n      : undefined;\n  return (fromEnv || 'http://localhost:5001').replace(/\\/$/, '');\n}\n\n/**\n * Optional override for the local→AWS-dev API base (events + personalize).\n * Defaults to https://api-dev.amplifyup.ai\n */\nfunction localAwsApiUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_AMPLIFYUP_API_URL\n      : undefined;\n  return (fromEnv || AWS_DEV_API).replace(/\\/$/, '');\n}\n\n/**\n * Optional override for the local Edge Worker URL.\n * Defaults to http://localhost:8787\n */\nfunction localEdgeUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_EDGE_URL\n      : undefined;\n  return (fromEnv || 'http://localhost:8787').replace(/\\/$/, '');\n}\n\nexport function resolveAmplifyUpUrls(target: AmplifyUpTarget): AmplifyUpUrls {\n  if (target === 'local') {\n    const orchestratorUrl = localOrchestratorUrl();\n    const apiGatewayUrl = localAwsApiUrl();\n    return {\n      target: 'local',\n      // Layouts / site config / composer APIs → local orchestrator + Neon\n      orchestratorUrl,\n      // Events + personalize → AWS development stack\n      apiGatewayUrl,\n      decisionApiUrl: `${apiGatewayUrl}/v1/personalize`,\n      edgeUrl: localEdgeUrl(),\n    };\n  }\n\n  const resolvedApi =\n    (typeof process !== 'undefined' &&\n      process.env.NEXT_PUBLIC_AMPLIFYUP_API_URL?.replace(/\\/$/, '')) ||\n    AWS_PROD_API;\n\n  const orchestratorFromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_ORCHESTRATOR_URL\n      : undefined;\n\n  // Production: don't accidentally use a localhost orchestrator URL from a local env file\n  const isLocalOrchestrator =\n    !!orchestratorFromEnv &&\n    (orchestratorFromEnv.includes('localhost') ||\n      orchestratorFromEnv.includes('127.0.0.1'));\n\n  const orchestratorUrl = isLocalOrchestrator || !orchestratorFromEnv\n    ? PROD_ORCHESTRATOR\n    : orchestratorFromEnv.replace(/\\/$/, '');\n\n  const edgeFromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_EDGE_URL?.replace(/\\/$/, '')\n      : undefined;\n  const edgeUrl =\n    edgeFromEnv &&\n    !edgeFromEnv.includes('localhost') &&\n    !edgeFromEnv.includes('127.0.0.1')\n      ? edgeFromEnv\n      : PROD_EDGE;\n\n  return {\n    target: 'production',\n    apiGatewayUrl: resolvedApi,\n    orchestratorUrl,\n    decisionApiUrl: `${resolvedApi}/v1/personalize`,\n    edgeUrl,\n  };\n}\n","/**\n * Next.js middleware: Composer preview rewrite + variant ISR rewrite.\n * Edge-runtime safe (no Node APIs).\n */\n\nimport { NextResponse } from 'next/server';\nimport type { NextRequest } from 'next/server';\nimport { fetchEdgeVariants } from './edge/fetchVariants';\nimport {\n  isDefaultVariantKeys,\n  serializeVariantKeys,\n} from './edge/variantKeys';\nimport { normalizeRoute } from './edge/normalizeRoute';\nimport { resolveAmplifyUpTarget, resolveAmplifyUpUrls } from './targets';\n\nexport const AMPLIFY_VARIANT_PREFIX = '/__p';\nexport const AMPLIFY_ANON_COOKIE = 'amplifyup_anon_id';\n\nexport const amplifyMiddlewareConfig = {\n  matcher: ['/((?!api|_next/static|_next/image|favicon.ico|.*\\\\..*).*)'],\n};\n\nfunction isPrefetch(request: NextRequest): boolean {\n  return (\n    request.headers.get('x-middleware-prefetch') === '1' ||\n    request.headers.get('Next-Router-Prefetch') === '1' ||\n    request.headers.get('purpose') === 'prefetch' ||\n    request.headers.get('Purpose') === 'prefetch'\n  );\n}\n\nfunction generateAnonId(): string {\n  const uuid =\n    typeof crypto !== 'undefined' && 'randomUUID' in crypto\n      ? crypto.randomUUID()\n      : `${Date.now()}-${Math.random().toString(16).slice(2)}`;\n  return `browser_${uuid}`;\n}\n\n/**\n * Preview stays dynamic. Personalized variants rewrite to `/__p/{keys}/…`\n * so Next can SSR the combo once and cache it (ISR). Default traffic is\n * unchanged SSG. Fail open to the default page on Edge errors/timeouts.\n */\nexport async function amplifyMiddleware(\n  request: NextRequest,\n  options?: { trackingId?: string }\n): Promise<NextResponse> {\n  const { pathname, searchParams } = request.nextUrl;\n\n  if (\n    pathname.startsWith('/__preview') ||\n    pathname.startsWith(AMPLIFY_VARIANT_PREFIX)\n  ) {\n    return NextResponse.next();\n  }\n\n  const isPreview =\n    searchParams.get('preview') === 'true' ||\n    searchParams.get('visualEditor') === 'true';\n  if (isPreview) {\n    const url = request.nextUrl.clone();\n    url.pathname = pathname === '/' ? '/__preview' : `/__preview${pathname}`;\n    return NextResponse.rewrite(url);\n  }\n\n  if (isPrefetch(request)) {\n    return NextResponse.next();\n  }\n\n  const trackingId =\n    options?.trackingId ||\n    (typeof searchParams.get('trackingId') === 'string'\n      ? searchParams.get('trackingId')\n      : null) ||\n    process.env.NEXT_PUBLIC_AMPLIFYUP_TRACKING_ID ||\n    '';\n  if (!trackingId) {\n    return NextResponse.next();\n  }\n\n  const existingAnon = request.cookies.get(AMPLIFY_ANON_COOKIE)?.value || '';\n  if (!existingAnon) {\n    const res = NextResponse.next();\n    res.cookies.set(AMPLIFY_ANON_COOKIE, generateAnonId(), {\n      path: '/',\n      maxAge: 60 * 60 * 24 * 365,\n      sameSite: 'lax',\n    });\n    return res;\n  }\n\n  const target = resolveAmplifyUpTarget();\n  const { edgeUrl } = resolveAmplifyUpUrls(target);\n  const route = normalizeRoute(pathname);\n\n  try {\n    const variantKeys = await fetchEdgeVariants({\n      edgeUrl,\n      trackingId,\n      route,\n      anonId: existingAnon,\n    });\n    if (isDefaultVariantKeys(variantKeys)) {\n      return NextResponse.next();\n    }\n    const sig = encodeURIComponent(serializeVariantKeys(variantKeys));\n    const url = request.nextUrl.clone();\n    url.pathname =\n      pathname === '/'\n        ? `${AMPLIFY_VARIANT_PREFIX}/${sig}`\n        : `${AMPLIFY_VARIANT_PREFIX}/${sig}${pathname}`;\n    return NextResponse.rewrite(url);\n  } catch {\n    return NextResponse.next();\n  }\n}\n"]}
+{"version":3,"sources":["../src/edge/fetchVariants.ts","../src/edge/variantKeys.ts","../src/edge/normalizeRoute.ts","../src/targets.ts","../src/middleware.ts"],"names":["orchestratorUrl"],"mappings":";;;;;;AAIA,eAAsB,kBAAkB,OAAA,EAOJ;AAClC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,QAAQ,EAAE,CAAA;AAC/C,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB;AAAA,IACjC,OAAO,OAAA,CAAQ,KAAA;AAAA,IACf,YAAY,OAAA,CAAQ,UAAA;AAAA,IACpB,QAAQ,OAAA,CAAQ;AAAA,GACjB,CAAA;AACD,EAAA,MAAM,UAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA,CAAM,KAAK,UAAU,CAAA;AACjE,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,KAAA,GAAQ,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,OAAA,CAAQ,aAAa,GAAG,CAAA;AAC3E,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,aAAA,EAAgB,MAAA,CAAO,QAAA,EAAU,CAAA,CAAA,EAAI;AAAA,MACpE,MAAA,EAAQ,KAAA;AAAA,MACR,OAAA,EAAS,EAAE,MAAA,EAAQ,kBAAA,EAAmB;AAAA,MACtC,KAAA,EAAO,UAAA;AAAA,MACP,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AACD,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,OAAO,EAAC;AACrB,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,GAAO,KAAA,CAAM,OAAO,EAAC,CAAE,CAAA;AAG/C,IAAA,OAAO,IAAA,CAAK,eAAe,OAAO,IAAA,CAAK,gBAAgB,QAAA,GACnD,IAAA,CAAK,cACL,EAAC;AAAA,EACP,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;;;ACjCO,SAAS,qBACd,IAAA,EACQ;AACR,EAAA,IAAI,CAAC,MAAM,OAAO,EAAA;AAClB,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,IAAI,EAAE,IAAA,EAAK;AACvC,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,IAAA,MAAM,OAAA,GAAU,KAAK,MAAM,CAAA;AAC3B,IAAA,IAAI,CAAC,OAAA,IAAW,OAAA,KAAY,SAAA,EAAW;AACvC,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,OAAO,CAAA,CAAE,CAAA;AAAA,EACnC;AACA,EAAA,OAAO,KAAA,CAAM,KAAK,GAAG,CAAA;AACvB;AAmBO,SAAS,qBACd,IAAA,EACS;AACT,EAAA,OAAO,oBAAA,CAAqB,IAAI,CAAA,KAAM,EAAA;AACxC;;;ACpCO,SAAS,eAAe,KAAA,EAAuB;AACpD,EAAA,IAAI,IAAA,GAAO,MAAA,CAAO,KAAA,IAAS,EAAE,EAAE,IAAA,EAAK;AACpC,EAAA,IAAI,CAAC,MAAM,OAAO,GAAA;AAElB,EAAA,IAAI;AACF,IAAA,IAAI,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAA,EAAG;AAC9B,MAAA,IAAA,GAAO,IAAI,GAAA,CAAI,IAAI,CAAA,CAAE,QAAA;AAAA,IACvB;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,KAAK,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAClC,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAC1B,EAAA,IAAI,KAAK,CAAA,EAAG,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,CAAA;AAElC,EAAA,IAAI,CAAC,IAAA,CAAK,UAAA,CAAW,GAAG,CAAA,EAAG,IAAA,GAAO,IAAI,IAAI,CAAA,CAAA;AAC1C,EAAA,IAAI,KAAK,MAAA,GAAS,CAAA,IAAK,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,EAAG;AACzC,IAAA,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAAA,EAChC;AACA,EAAA,OAAO,IAAA,IAAQ,GAAA;AACjB;;;ACFA,IAAM,WAAA,GAAc,8BAAA;AACpB,IAAM,YAAA,GAAe,0BAAA;AACrB,IAAM,iBAAA,GAAoB,sBAAA;AAC1B,IAAM,SAAA,GAAY,2BAAA;AAEX,SAAS,kBAAkB,KAAA,EAA+C;AAC/E,EAAA,OAAO,KAAA,KAAU,OAAA,IAAW,KAAA,KAAU,KAAA,IAAS,KAAA,KAAU,YAAA;AAC3D;AAEO,SAAS,yBAAyB,KAAA,EAA8C;AACrF,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAA,GAAU,KAAA;AACrC;AAcO,SAAS,uBAAuB,OAAA,EAInB;AASlB,EAAA,MAAM,YACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AACN,EAAA,IAAI,iBAAA,CAAkB,SAAS,CAAA,EAAG;AAChC,IAAA,OAAO,yBAAyB,SAAS,CAAA;AAAA,EAC3C;AAEA,EAAA,OAAO,YAAA;AACT;AAYA,SAAS,oBAAA,GAA+B;AACtC,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC/D;AAMA,SAAS,cAAA,GAAyB;AAChC,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,6BAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,WAAA,EAAa,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AACnD;AAMA,SAAS,YAAA,GAAuB;AAC9B,EAAA,MAAM,UACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,oBAAA,GACZ,MAAA;AACN,EAAA,OAAA,CAAQ,OAAA,IAAW,uBAAA,EAAyB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA;AAC/D;AAEO,SAAS,qBAAqB,MAAA,EAAwC;AAC3E,EAAA,IAAI,WAAW,OAAA,EAAS;AACtB,IAAA,MAAMA,mBAAkB,oBAAA,EAAqB;AAC7C,IAAA,MAAM,gBAAgB,cAAA,EAAe;AACrC,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,OAAA;AAAA;AAAA,MAER,eAAA,EAAAA,gBAAAA;AAAA;AAAA,MAEA,aAAA;AAAA,MACA,cAAA,EAAgB,GAAG,aAAa,CAAA,eAAA,CAAA;AAAA,MAChC,SAAS,YAAA;AAAa,KACxB;AAAA,EACF;AAEA,EAAA,MAAM,WAAA,GACH,OAAO,OAAA,KAAY,WAAA,IAClB,OAAA,CAAQ,IAAI,6BAAA,EAA+B,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,IAC9D,YAAA;AAEF,EAAA,MAAM,sBACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,4BAAA,GACZ,MAAA;AAGN,EAAA,MAAM,mBAAA,GACJ,CAAC,CAAC,mBAAA,KACD,mBAAA,CAAoB,SAAS,WAAW,CAAA,IACvC,mBAAA,CAAoB,QAAA,CAAS,WAAW,CAAA,CAAA;AAE5C,EAAA,MAAM,eAAA,GAAkB,uBAAuB,CAAC,mBAAA,GAC5C,oBACA,mBAAA,CAAoB,OAAA,CAAQ,OAAO,EAAE,CAAA;AAEzC,EAAA,MAAM,WAAA,GACJ,OAAO,OAAA,KAAY,WAAA,GACf,OAAA,CAAQ,IAAI,oBAAA,EAAsB,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACnD,MAAA;AACN,EAAA,MAAM,OAAA,GACJ,WAAA,IACA,CAAC,WAAA,CAAY,QAAA,CAAS,WAAW,CAAA,IACjC,CAAC,WAAA,CAAY,QAAA,CAAS,WAAW,CAAA,GAC7B,WAAA,GACA,SAAA;AAEN,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,YAAA;AAAA,IACR,aAAA,EAAe,WAAA;AAAA,IACf,eAAA;AAAA,IACA,cAAA,EAAgB,GAAG,WAAW,CAAA,eAAA,CAAA;AAAA,IAC9B;AAAA,GACF;AACF;;;ACzJO,IAAM,sBAAA,GAAyB;AAC/B,IAAM,mBAAA,GAAsB;AAC5B,IAAM,sBAAA,GAAyB;AACtC,IAAM,0BAA0B,EAAA,GAAK,EAAA;AAE9B,IAAM,uBAAA,GAA0B;AAAA,EACrC,OAAA,EAAS,CAAC,2DAA2D;AACvE;AAEA,SAAS,WAAW,OAAA,EAA+B;AACjD,EAAA,OACE,OAAA,CAAQ,QAAQ,GAAA,CAAI,uBAAuB,MAAM,GAAA,IACjD,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,sBAAsB,CAAA,KAAM,OAChD,OAAA,CAAQ,OAAA,CAAQ,IAAI,SAAS,CAAA,KAAM,cACnC,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,KAAM,UAAA;AAEvC;AAEA,SAAS,cAAA,GAAyB;AAChC,EAAA,MAAM,IAAA,GACJ,OAAO,MAAA,KAAW,WAAA,IAAe,gBAAgB,MAAA,GAC7C,MAAA,CAAO,UAAA,EAAW,GAClB,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,KAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAC1D,EAAA,OAAO,WAAW,IAAI,CAAA,CAAA;AACxB;AAEA,SAAS,iBAAA,GAA4B;AACnC,EAAA,OAAO,OAAO,WAAW,WAAA,IAAe,YAAA,IAAgB,SACpD,MAAA,CAAO,UAAA,KACP,CAAA,EAAG,IAAA,CAAK,KAAK,CAAA,CAAA,EAAI,KAAK,MAAA,EAAO,CAAE,SAAS,EAAE,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA,CAAA;AAC1D;AAEA,SAAS,iBAAA,CAAkB,KAAmB,QAAA,EAAiC;AAC7E,EAAA,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,sBAAA,EAAwB,QAAA,IAAY,mBAAkB,EAAG;AAAA,IACvE,IAAA,EAAM,GAAA;AAAA,IACN,MAAA,EAAQ,uBAAA;AAAA,IACR,QAAA,EAAU;AAAA,GACX,CAAA;AACD,EAAA,OAAO,GAAA;AACT;AAOA,eAAsB,iBAAA,CACpB,SACA,OAAA,EACuB;AACvB,EAAA,MAAM,EAAE,QAAA,EAAU,YAAA,EAAa,GAAI,OAAA,CAAQ,OAAA;AAE3C,EAAA,IACE,SAAS,UAAA,CAAW,YAAY,KAChC,QAAA,CAAS,UAAA,CAAW,sBAAsB,CAAA,EAC1C;AACA,IAAA,OAAO,aAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,SAAA,GACJ,aAAa,GAAA,CAAI,SAAS,MAAM,MAAA,IAChC,YAAA,CAAa,GAAA,CAAI,cAAc,CAAA,KAAM,MAAA;AACvC,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAM;AAClC,IAAA,GAAA,CAAI,QAAA,GAAW,QAAA,KAAa,GAAA,GAAM,YAAA,GAAe,aAAa,QAAQ,CAAA,CAAA;AACtE,IAAA,OAAO,YAAA,CAAa,QAAQ,GAAG,CAAA;AAAA,EACjC;AAEA,EAAA,IAAI,UAAA,CAAW,OAAO,CAAA,EAAG;AACvB,IAAA,OAAO,aAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,aACJ,OAAA,EAAS,UAAA,KACR,OAAO,YAAA,CAAa,IAAI,YAAY,CAAA,KAAM,QAAA,GACvC,YAAA,CAAa,IAAI,YAAY,CAAA,GAC7B,IAAA,CAAA,IACJ,OAAA,CAAQ,IAAI,iCAAA,IACZ,EAAA;AACF,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,OAAO,aAAa,IAAA,EAAK;AAAA,EAC3B;AAEA,EAAA,MAAM,eAAe,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,mBAAmB,GAAG,KAAA,IAAS,EAAA;AACxE,EAAA,MAAM,kBAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,sBAAsB,GAAG,KAAA,IAAS,EAAA;AAC9E,EAAA,IAAI,CAAC,YAAA,EAAc;AACjB,IAAA,MAAM,GAAA,GAAM,aAAa,IAAA,EAAK;AAC9B,IAAA,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,mBAAA,EAAqB,cAAA,EAAe,EAAG;AAAA,MACrD,IAAA,EAAM,GAAA;AAAA,MACN,MAAA,EAAQ,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAA;AAAA,MACvB,QAAA,EAAU;AAAA,KACX,CAAA;AACD,IAAA,OAAO,iBAAA,CAAkB,KAAK,eAAe,CAAA;AAAA,EAC/C;AAEA,EAAA,MAAM,SAAS,sBAAA,EAAuB;AACtC,EAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,oBAAA,CAAqB,MAAM,CAAA;AAC/C,EAAA,MAAM,KAAA,GAAQ,eAAe,QAAQ,CAAA;AAErC,EAAA,IAAI;AACF,IAAA,MAAM,WAAA,GAAc,MAAM,iBAAA,CAAkB;AAAA,MAC1C,OAAA;AAAA,MACA,UAAA;AAAA,MACA,KAAA;AAAA,MACA,MAAA,EAAQ;AAAA,KACT,CAAA;AACD,IAAA,IAAI,oBAAA,CAAqB,WAAW,CAAA,EAAG;AACrC,MAAA,OAAO,iBAAA,CAAkB,YAAA,CAAa,IAAA,EAAK,EAAG,eAAe,CAAA;AAAA,IAC/D;AACA,IAAA,MAAM,GAAA,GAAM,kBAAA,CAAmB,oBAAA,CAAqB,WAAW,CAAC,CAAA;AAChE,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAM;AAClC,IAAA,GAAA,CAAI,QAAA,GACF,QAAA,KAAa,GAAA,GACT,CAAA,EAAG,sBAAsB,CAAA,CAAA,EAAI,GAAG,CAAA,CAAA,GAChC,CAAA,EAAG,sBAAsB,CAAA,CAAA,EAAI,GAAG,GAAG,QAAQ,CAAA,CAAA;AACjD,IAAA,OAAO,iBAAA,CAAkB,YAAA,CAAa,OAAA,CAAQ,GAAG,GAAG,eAAe,CAAA;AAAA,EACrE,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,iBAAA,CAAkB,YAAA,CAAa,IAAA,EAAK,EAAG,eAAe,CAAA;AAAA,EAC/D;AACF","file":"middleware.mjs","sourcesContent":["/**\n * Lightweight Edge call for Next middleware: variant keys only.\n */\n\nexport async function fetchEdgeVariants(options: {\n  edgeUrl: string;\n  trackingId: string;\n  route: string;\n  anonId: string;\n  fetch?: typeof fetch;\n  timeoutMs?: number;\n}): Promise<Record<string, string>> {\n  const base = options.edgeUrl.replace(/\\/+$/, '');\n  const params = new URLSearchParams({\n    route: options.route,\n    trackingId: options.trackingId,\n    anonId: options.anonId,\n  });\n  const fetchFn = options.fetch ?? globalThis.fetch.bind(globalThis);\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 800);\n  try {\n    const res = await fetchFn(`${base}/v1/variants?${params.toString()}`, {\n      method: 'GET',\n      headers: { Accept: 'application/json' },\n      cache: 'no-store',\n      signal: controller.signal,\n    });\n    if (!res.ok) return {};\n    const body = (await res.json().catch(() => ({}))) as {\n      variantKeys?: Record<string, string>;\n    };\n    return body.variantKeys && typeof body.variantKeys === 'object'\n      ? body.variantKeys\n      : {};\n  } finally {\n    clearTimeout(timer);\n  }\n}\n","/**\n * Compact variant-key codec for URLs and Edge `variants` query params.\n * Default variants are omitted so equivalent assignments share one cache entry.\n */\n\nexport function serializeVariantKeys(\n  keys: Record<string, string> | null | undefined\n): string {\n  if (!keys) return '';\n  const parts: string[] = [];\n  const zoneIds = Object.keys(keys).sort();\n  for (const zoneId of zoneIds) {\n    const variant = keys[zoneId];\n    if (!variant || variant === 'default') continue;\n    parts.push(`${zoneId}:${variant}`);\n  }\n  return parts.join(',');\n}\n\nexport function parseVariantKeys(\n  raw: string | null | undefined\n): Record<string, string> {\n  const out: Record<string, string> = {};\n  const text = (raw || '').trim();\n  if (!text) return out;\n  const decoded = safeDecode(text);\n  for (const part of decoded.split(',')) {\n    const i = part.indexOf(':');\n    if (i <= 0) continue;\n    const zoneId = part.slice(0, i).trim();\n    const variant = part.slice(i + 1).trim();\n    if (zoneId && variant) out[zoneId] = variant;\n  }\n  return out;\n}\n\nexport function isDefaultVariantKeys(\n  keys: Record<string, string> | null | undefined\n): boolean {\n  return serializeVariantKeys(keys) === '';\n}\n\nfunction safeDecode(value: string): string {\n  try {\n    return decodeURIComponent(value);\n  } catch {\n    return value;\n  }\n}\n","/**\n * Normalize a route path for Edge resolve requests.\n * Leading slash, no trailing slash (except root), query/hash stripped.\n */\nexport function normalizeRoute(route: string): string {\n  let path = String(route || '').trim();\n  if (!path) return '/';\n\n  try {\n    if (/^https?:\\/\\//i.test(path)) {\n      path = new URL(path).pathname;\n    }\n  } catch {\n    /* keep path */\n  }\n\n  const q = path.indexOf('?');\n  if (q >= 0) path = path.slice(0, q);\n  const h = path.indexOf('#');\n  if (h >= 0) path = path.slice(0, h);\n\n  if (!path.startsWith('/')) path = `/${path}`;\n  if (path.length > 1 && path.endsWith('/')) {\n    path = path.replace(/\\/+$/, '');\n  }\n  return path || '/';\n}\n","/**\n * AmplifyUp environment targets\n *\n * Two environments only:\n * - local: apps/config from localhost + Neon; events & personalize from AWS development\n * - production: all production AmplifyUp / AWS endpoints\n *\n * Controlled via `config.target` or `NEXT_PUBLIC_AMPLIFYUP_TARGET`.\n * Legacy value `dev` is treated as `local`.\n */\n\nexport type AmplifyUpTarget = 'local' | 'production';\n\n/** Accepted env/config strings (includes legacy `dev` → local). */\nexport type AmplifyUpTargetInput = AmplifyUpTarget | 'dev';\n\nexport interface AmplifyUpUrls {\n  target: AmplifyUpTarget;\n  apiGatewayUrl: string;\n  orchestratorUrl: string;\n  decisionApiUrl: string;\n  edgeUrl: string;\n}\n\nconst AWS_DEV_API = 'https://api-dev.amplifyup.ai';\nconst AWS_PROD_API = 'https://api.amplifyup.ai';\nconst PROD_ORCHESTRATOR = 'https://amplifyup.ai';\nconst PROD_EDGE = 'https://edge.amplifyup.ai';\n\nexport function isAmplifyUpTarget(value: unknown): value is AmplifyUpTargetInput {\n  return value === 'local' || value === 'dev' || value === 'production';\n}\n\nexport function normalizeAmplifyUpTarget(value: AmplifyUpTargetInput): AmplifyUpTarget {\n  return value === 'dev' ? 'local' : value;\n}\n\n/**\n * Resolve which target to use.\n *\n * Priority:\n * 1. explicit config.target\n * 2. config.dev === true → 'local' (local apps + AWS-dev pipeline)\n * 3. NEXT_PUBLIC_AMPLIFYUP_TARGET\n * 4. unset → 'production' (live endpoints — hosting on localhost does NOT imply local)\n *\n * Use `local` only when developing against the AmplifyUp monorepo\n * (set NEXT_PUBLIC_AMPLIFYUP_TARGET=local in .env.local).\n */\nexport function resolveAmplifyUpTarget(options?: {\n  configTarget?: AmplifyUpTargetInput;\n  /** @deprecated Prefer NEXT_PUBLIC_AMPLIFYUP_TARGET=local. When true, resolves to local. */\n  configDev?: boolean;\n}): AmplifyUpTarget {\n  if (options?.configTarget && isAmplifyUpTarget(options.configTarget)) {\n    return normalizeAmplifyUpTarget(options.configTarget);\n  }\n\n  if (options?.configDev === true) {\n    return 'local';\n  }\n\n  const envTarget =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_AMPLIFYUP_TARGET\n      : undefined;\n  if (isAmplifyUpTarget(envTarget)) {\n    return normalizeAmplifyUpTarget(envTarget);\n  }\n\n  return 'production';\n}\n\n/** True when the orchestrator origin is a remote AmplifyUp deployment (not localhost). */\nexport function isRemoteOrchestratorUrl(orchestratorUrl: string): boolean {\n  try {\n    const host = new URL(orchestratorUrl).hostname.toLowerCase();\n    return host !== 'localhost' && host !== '127.0.0.1' && host !== '::1';\n  } catch {\n    return false;\n  }\n}\n\nfunction localOrchestratorUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_ORCHESTRATOR_URL\n      : undefined;\n  return (fromEnv || 'http://localhost:5001').replace(/\\/$/, '');\n}\n\n/**\n * Optional override for the local→AWS-dev API base (events + personalize).\n * Defaults to https://api-dev.amplifyup.ai\n */\nfunction localAwsApiUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_AMPLIFYUP_API_URL\n      : undefined;\n  return (fromEnv || AWS_DEV_API).replace(/\\/$/, '');\n}\n\n/**\n * Optional override for the local Edge Worker URL.\n * Defaults to http://localhost:8787\n */\nfunction localEdgeUrl(): string {\n  const fromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_EDGE_URL\n      : undefined;\n  return (fromEnv || 'http://localhost:8787').replace(/\\/$/, '');\n}\n\nexport function resolveAmplifyUpUrls(target: AmplifyUpTarget): AmplifyUpUrls {\n  if (target === 'local') {\n    const orchestratorUrl = localOrchestratorUrl();\n    const apiGatewayUrl = localAwsApiUrl();\n    return {\n      target: 'local',\n      // Layouts / site config / composer APIs → local orchestrator + Neon\n      orchestratorUrl,\n      // Events + personalize → AWS development stack\n      apiGatewayUrl,\n      decisionApiUrl: `${apiGatewayUrl}/v1/personalize`,\n      edgeUrl: localEdgeUrl(),\n    };\n  }\n\n  const resolvedApi =\n    (typeof process !== 'undefined' &&\n      process.env.NEXT_PUBLIC_AMPLIFYUP_API_URL?.replace(/\\/$/, '')) ||\n    AWS_PROD_API;\n\n  const orchestratorFromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_ORCHESTRATOR_URL\n      : undefined;\n\n  // Production: don't accidentally use a localhost orchestrator URL from a local env file\n  const isLocalOrchestrator =\n    !!orchestratorFromEnv &&\n    (orchestratorFromEnv.includes('localhost') ||\n      orchestratorFromEnv.includes('127.0.0.1'));\n\n  const orchestratorUrl = isLocalOrchestrator || !orchestratorFromEnv\n    ? PROD_ORCHESTRATOR\n    : orchestratorFromEnv.replace(/\\/$/, '');\n\n  const edgeFromEnv =\n    typeof process !== 'undefined'\n      ? process.env.NEXT_PUBLIC_EDGE_URL?.replace(/\\/$/, '')\n      : undefined;\n  const edgeUrl =\n    edgeFromEnv &&\n    !edgeFromEnv.includes('localhost') &&\n    !edgeFromEnv.includes('127.0.0.1')\n      ? edgeFromEnv\n      : PROD_EDGE;\n\n  return {\n    target: 'production',\n    apiGatewayUrl: resolvedApi,\n    orchestratorUrl,\n    decisionApiUrl: `${resolvedApi}/v1/personalize`,\n    edgeUrl,\n  };\n}\n","/**\n * Next.js middleware: Composer preview rewrite + variant ISR rewrite.\n * Edge-runtime safe (no Node APIs).\n */\n\nimport { NextResponse } from 'next/server';\nimport type { NextRequest } from 'next/server';\nimport { fetchEdgeVariants } from './edge/fetchVariants';\nimport {\n  isDefaultVariantKeys,\n  serializeVariantKeys,\n} from './edge/variantKeys';\nimport { normalizeRoute } from './edge/normalizeRoute';\nimport { resolveAmplifyUpTarget, resolveAmplifyUpUrls } from './targets';\n\nexport const AMPLIFY_VARIANT_PREFIX = '/__p';\nexport const AMPLIFY_ANON_COOKIE = 'amplifyup_anon_id';\nexport const AMPLIFY_SESSION_COOKIE = 'amplifyup_session_id';\nconst SESSION_MAX_AGE_SECONDS = 30 * 60;\n\nexport const amplifyMiddlewareConfig = {\n  matcher: ['/((?!api|_next/static|_next/image|favicon.ico|.*\\\\..*).*)'],\n};\n\nfunction isPrefetch(request: NextRequest): boolean {\n  return (\n    request.headers.get('x-middleware-prefetch') === '1' ||\n    request.headers.get('Next-Router-Prefetch') === '1' ||\n    request.headers.get('purpose') === 'prefetch' ||\n    request.headers.get('Purpose') === 'prefetch'\n  );\n}\n\nfunction generateAnonId(): string {\n  const uuid =\n    typeof crypto !== 'undefined' && 'randomUUID' in crypto\n      ? crypto.randomUUID()\n      : `${Date.now()}-${Math.random().toString(16).slice(2)}`;\n  return `browser_${uuid}`;\n}\n\nfunction generateSessionId(): string {\n  return typeof crypto !== 'undefined' && 'randomUUID' in crypto\n    ? crypto.randomUUID()\n    : `${Date.now()}-${Math.random().toString(16).slice(2)}`;\n}\n\nfunction withSessionCookie(res: NextResponse, existing?: string): NextResponse {\n  res.cookies.set(AMPLIFY_SESSION_COOKIE, existing || generateSessionId(), {\n    path: '/',\n    maxAge: SESSION_MAX_AGE_SECONDS,\n    sameSite: 'lax',\n  });\n  return res;\n}\n\n/**\n * Preview stays dynamic. Personalized variants rewrite to `/__p/{keys}/…`\n * so Next can SSR the combo once and cache it (ISR). Default traffic is\n * unchanged SSG. Fail open to the default page on Edge errors/timeouts.\n */\nexport async function amplifyMiddleware(\n  request: NextRequest,\n  options?: { trackingId?: string }\n): Promise<NextResponse> {\n  const { pathname, searchParams } = request.nextUrl;\n\n  if (\n    pathname.startsWith('/__preview') ||\n    pathname.startsWith(AMPLIFY_VARIANT_PREFIX)\n  ) {\n    return NextResponse.next();\n  }\n\n  const isPreview =\n    searchParams.get('preview') === 'true' ||\n    searchParams.get('visualEditor') === 'true';\n  if (isPreview) {\n    const url = request.nextUrl.clone();\n    url.pathname = pathname === '/' ? '/__preview' : `/__preview${pathname}`;\n    return NextResponse.rewrite(url);\n  }\n\n  if (isPrefetch(request)) {\n    return NextResponse.next();\n  }\n\n  const trackingId =\n    options?.trackingId ||\n    (typeof searchParams.get('trackingId') === 'string'\n      ? searchParams.get('trackingId')\n      : null) ||\n    process.env.NEXT_PUBLIC_AMPLIFYUP_TRACKING_ID ||\n    '';\n  if (!trackingId) {\n    return NextResponse.next();\n  }\n\n  const existingAnon = request.cookies.get(AMPLIFY_ANON_COOKIE)?.value || '';\n  const existingSession = request.cookies.get(AMPLIFY_SESSION_COOKIE)?.value || '';\n  if (!existingAnon) {\n    const res = NextResponse.next();\n    res.cookies.set(AMPLIFY_ANON_COOKIE, generateAnonId(), {\n      path: '/',\n      maxAge: 60 * 60 * 24 * 365,\n      sameSite: 'lax',\n    });\n    return withSessionCookie(res, existingSession);\n  }\n\n  const target = resolveAmplifyUpTarget();\n  const { edgeUrl } = resolveAmplifyUpUrls(target);\n  const route = normalizeRoute(pathname);\n\n  try {\n    const variantKeys = await fetchEdgeVariants({\n      edgeUrl,\n      trackingId,\n      route,\n      anonId: existingAnon,\n    });\n    if (isDefaultVariantKeys(variantKeys)) {\n      return withSessionCookie(NextResponse.next(), existingSession);\n    }\n    const sig = encodeURIComponent(serializeVariantKeys(variantKeys));\n    const url = request.nextUrl.clone();\n    url.pathname =\n      pathname === '/'\n        ? `${AMPLIFY_VARIANT_PREFIX}/${sig}`\n        : `${AMPLIFY_VARIANT_PREFIX}/${sig}${pathname}`;\n    return withSessionCookie(NextResponse.rewrite(url), existingSession);\n  } catch {\n    return withSessionCookie(NextResponse.next(), existingSession);\n  }\n}\n"]}

package/dist/{query-6BmINKLR.d.mts → query-BMsorj0k.d.ts}

@@ -1,4 +1,4 @@
-import { f as AmplifyUpTarget } from './types-CBoVIFI8.mjs';
+import { f as AmplifyUpTarget } from './types-DUP8Lb7R.js';
 
 /**
  * On-request variant selection (tier 3).
@@ -27,6 +27,7 @@ interface FetchEdgeSelectOptions {
     site?: string;
     view: string;
     anonId: string;
+    sessionId?: string;
     zones?: string[];
     /** Request-local facts the edge cannot observe (app version, screen class). */
     context?: Record<string, unknown>;
@@ -39,6 +40,7 @@ interface SelectVariantsOptions {
     site?: string;
     view: string;
     anonId: string;
+    sessionId?: string;
     zones?: string[];
     context?: Record<string, unknown>;
     target?: AmplifyUpTarget;

package/dist/{query-DjIuJ71C.d.ts → query-CraXKhi7.d.mts}

@@ -1,4 +1,4 @@
-import { f as AmplifyUpTarget } from './types-CBoVIFI8.js';
+import { f as AmplifyUpTarget } from './types-DUP8Lb7R.mjs';
 
 /**
  * On-request variant selection (tier 3).
@@ -27,6 +27,7 @@ interface FetchEdgeSelectOptions {
     site?: string;
     view: string;
     anonId: string;
+    sessionId?: string;
     zones?: string[];
     /** Request-local facts the edge cannot observe (app version, screen class). */
     context?: Record<string, unknown>;
@@ -39,6 +40,7 @@ interface SelectVariantsOptions {
     site?: string;
     view: string;
     anonId: string;
+    sessionId?: string;
     zones?: string[];
     context?: Record<string, unknown>;
     target?: AmplifyUpTarget;

package/dist/react.d.mts

@@ -1,9 +1,9 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React, { ReactNode } from 'react';
-import { P as PageConfig, b as AmplifyUpConfig, C as ContentSource, A as AmplifyContentMeta } from './types-CBoVIFI8.mjs';
-export { Z as ZoneConfig } from './types-CBoVIFI8.mjs';
+import { P as PageConfig, b as AmplifyUpConfig, C as ContentSource, A as AmplifyContentMeta } from './types-DUP8Lb7R.mjs';
+export { Z as ZoneConfig } from './types-DUP8Lb7R.mjs';
 export { AmplifyRenderer } from './AmplifyRenderer.mjs';
-export { Q as QueryContentError, e as QueryContentOptions, k as QueryFilter, l as QueryFilterOp, i as QueryPagination, h as QueryResult, m as QuerySort, j as QuerySpec, S as SelectVariantsError, a as SelectVariantsOptions, b as SelectVariantsResult, n as nextPageSpec, q as queryContent, d as searchSpec, s as selectVariants } from './query-6BmINKLR.mjs';
+export { Q as QueryContentError, e as QueryContentOptions, k as QueryFilter, l as QueryFilterOp, i as QueryPagination, h as QueryResult, m as QuerySort, j as QuerySpec, S as SelectVariantsError, a as SelectVariantsOptions, b as SelectVariantsResult, n as nextPageSpec, q as queryContent, d as searchSpec, s as selectVariants } from './query-CraXKhi7.mjs';
 export { i as isComposerPreview, a as isPreviewRequest, b as isWorkingContentRequest } from './preview-_vHmzRen.mjs';
 export { fetchPageConfigServer } from './server.mjs';
 

package/dist/react.d.ts

@@ -1,9 +1,9 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import React, { ReactNode } from 'react';
-import { P as PageConfig, b as AmplifyUpConfig, C as ContentSource, A as AmplifyContentMeta } from './types-CBoVIFI8.js';
-export { Z as ZoneConfig } from './types-CBoVIFI8.js';
+import { P as PageConfig, b as AmplifyUpConfig, C as ContentSource, A as AmplifyContentMeta } from './types-DUP8Lb7R.js';
+export { Z as ZoneConfig } from './types-DUP8Lb7R.js';
 export { AmplifyRenderer } from './AmplifyRenderer.js';
-export { Q as QueryContentError, e as QueryContentOptions, k as QueryFilter, l as QueryFilterOp, i as QueryPagination, h as QueryResult, m as QuerySort, j as QuerySpec, S as SelectVariantsError, a as SelectVariantsOptions, b as SelectVariantsResult, n as nextPageSpec, q as queryContent, d as searchSpec, s as selectVariants } from './query-DjIuJ71C.js';
+export { Q as QueryContentError, e as QueryContentOptions, k as QueryFilter, l as QueryFilterOp, i as QueryPagination, h as QueryResult, m as QuerySort, j as QuerySpec, S as SelectVariantsError, a as SelectVariantsOptions, b as SelectVariantsResult, n as nextPageSpec, q as queryContent, d as searchSpec, s as selectVariants } from './query-BMsorj0k.js';
 export { i as isComposerPreview, a as isPreviewRequest, b as isWorkingContentRequest } from './preview-_vHmzRen.js';
 export { fetchPageConfigServer } from './server.js';