@bash-app/bash-common 30.224.0 → 30.226.0

package/dist/utils/__tests__/getBackendHost.test.js

@@ -0,0 +1,104 @@
+/**
+ * getBackendHost — chooses the API origin (api.bash.community vs localhost:3500
+ * vs the bundled API_HOST for native Capacitor builds).
+ *
+ * This file pins the contract so a future "let's tidy up env handling" change
+ * doesn't accidentally re-introduce the same class of bug we just fixed in
+ * getFrontendHost (server-only env vars leaking into the browser code path).
+ */
+import { getBackendHost } from "../urlUtils.js";
+const ORIGINAL_WINDOW = globalThis.window;
+function setWindow(loc, capacitor) {
+    globalThis.window = {
+        location: loc,
+        ...(capacitor ? { Capacitor: capacitor } : {}),
+    };
+}
+function clearWindow() {
+    if (ORIGINAL_WINDOW === undefined) {
+        delete globalThis.window;
+    }
+    else {
+        globalThis.window = ORIGINAL_WINDOW;
+    }
+}
+afterEach(() => {
+    clearWindow();
+});
+describe("getBackendHost — local dev", () => {
+    it("returns http://localhost:3500 for localhost (does NOT reuse :3000 from the page)", () => {
+        setWindow({
+            protocol: "http:",
+            hostname: "localhost",
+            host: "localhost:3000",
+            port: "3000",
+        });
+        expect(getBackendHost()).toBe("http://localhost:3500");
+    });
+    it("returns http://127.0.0.1:3500 for 127.0.0.1", () => {
+        setWindow({
+            protocol: "http:",
+            hostname: "127.0.0.1",
+            host: "127.0.0.1:3000",
+            port: "3000",
+        });
+        expect(getBackendHost()).toBe("http://127.0.0.1:3500");
+    });
+    it("uses the LAN IP for 192.168.x.x (so a phone on the same wifi can hit the dev API)", () => {
+        setWindow({
+            protocol: "http:",
+            hostname: "192.168.1.42",
+            host: "192.168.1.42:3000",
+            port: "3000",
+        });
+        expect(getBackendHost()).toBe("http://192.168.1.42:3500");
+    });
+});
+describe("getBackendHost — deployed web", () => {
+    // For deployed web, getBackendHost falls back to API_HOST (compiled in from
+    // process.env.REACT_APP_API at bundle time; defaults to http://localhost:3500
+    // when unset, which is what jest sees here). The contract we pin is "for any
+    // non-local hostname, do NOT derive the API URL from window.location" — that
+    // would silently route prod browsers at api.bash.community… instead of the
+    // configured API_HOST.
+    it("does not derive the backend host from window.location for deployed sites", () => {
+        setWindow({
+            protocol: "https:",
+            hostname: "bash.community",
+            host: "bash.community",
+            port: "",
+        });
+        const result = getBackendHost();
+        expect(result).not.toContain("bash.community:3500");
+        expect(result).not.toContain("bash.community:3000");
+    });
+    it("does not derive the backend host from a QA subdomain either", () => {
+        setWindow({
+            protocol: "https:",
+            hostname: "qa.bash.community",
+            host: "qa.bash.community",
+            port: "",
+        });
+        const result = getBackendHost();
+        expect(result).not.toContain("qa.bash.community:3500");
+    });
+});
+describe("getBackendHost — Capacitor native (iOS / Android)", () => {
+    it("uses the bundled API_HOST when running inside a Capacitor WebView (hostname is 'localhost' but it's not really local dev)", () => {
+        // Capacitor loads from a localhost-like origin inside the WebView. If we
+        // routed to the localhost dev API based on hostname alone, the app would
+        // hit a port that doesn't exist on the device. The native check must win.
+        setWindow({
+            protocol: "capacitor:",
+            hostname: "localhost",
+            host: "localhost",
+            port: "",
+        }, { isNativePlatform: () => true });
+        const result = getBackendHost();
+        // We can't pin the exact value (depends on REACT_APP_API at build time),
+        // but we CAN pin the negative: it must not be the dev-server URL just
+        // because the WebView happens to say hostname=localhost.
+        expect(result).toBe(process.env.REACT_APP_API ?? "http://localhost:3500");
+    });
+});
+//# sourceMappingURL=getBackendHost.test.js.map

package/dist/utils/__tests__/getBackendHost.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getBackendHost.test.js","sourceRoot":"","sources":["../../../src/utils/__tests__/getBackendHost.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAWhD,MAAM,eAAe,GAAI,UAAmC,CAAC,MAAM,CAAC;AAEpE,SAAS,SAAS,CAAC,GAAuB,EAAE,SAAyB;IAEjE,UAGD,CAAC,MAAM,GAAG;QACT,QAAQ,EAAE,GAAG;QACb,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAQ,UAAmC,CAAC,MAAM,CAAC;IACrD,CAAC;SAAM,CAAC;QACL,UAAmC,CAAC,MAAM,GAAG,eAAe,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,WAAW,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,SAAS,CAAC;YACR,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,SAAS,CAAC;YACR,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,SAAS,CAAC;YACR,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,uBAAuB;IACvB,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,SAAS,CAAC;YACR,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,gBAAgB;YAC1B,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,SAAS,CAAC;YACR,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,mBAAmB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,2HAA2H,EAAE,GAAG,EAAE;QACnI,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,SAAS,CACP;YACE,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,EAAE;SACT,EACD,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CACjC,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,yEAAyE;QACzE,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,uBAAuB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/__tests__/getFrontendHost.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=getFrontendHost.test.d.ts.map

package/dist/utils/__tests__/getFrontendHost.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFrontendHost.test.d.ts","sourceRoot":"","sources":["../../../src/utils/__tests__/getFrontendHost.test.ts"],"names":[],"mappings":""}

package/dist/utils/__tests__/getFrontendHost.test.js

@@ -0,0 +1,207 @@
+/**
+ * getFrontendHost — the single source of truth for the URL prefix that goes
+ * into every shareable Bash link (SharePopup, embed snippets, LinkedIn
+ * Announce, Facebook event helper, QR codes…).
+ *
+ * THE BUG THIS FILE PINS
+ * ----------------------
+ * Pre-fix, getFrontendHost() called isProduction() which inspects
+ * process.env.ENVIRONMENT / BASH_ENV / NODE_ENV. Those env vars are server-
+ * only — Vite's envPlugin only inlines REACT_APP_* / VITE_* / NODE_ENV /
+ * PUBLIC_URL into the browser bundle. As a result, in the production browser
+ * `process.env.ENVIRONMENT` is undefined → isProduction() returns false →
+ * getFrontendHost() falls into the dev branch → appends ":3000" to whatever
+ * hostname the user is on. Real user-visible breakage:
+ *
+ *     https://bash.community:3000/bash/cmo3...-empanada-fest-slc?ref=...
+ *
+ * Facebook / iMessage / LinkedIn cannot fetch a preview because :3000 isn't
+ * publicly reachable, and the link itself looks broken to recipients.
+ *
+ * THE CONTRACT WE PIN
+ * -------------------
+ *   localhost / 127.0.0.1 / 192.168.x.x  → preserve the dev port (3000 default)
+ *   <anything else>                       → use window.location.host AS-IS
+ *                                           (no port appending, no env-var dependency)
+ *
+ * Browser-hostname-driven, not env-var-driven, so the answer is correct
+ * regardless of how CI sets ENVIRONMENT / BASH_ENV.
+ */
+import { getFrontendHost } from "../urlUtils.js";
+const ORIGINAL_WINDOW = globalThis.window;
+function setLocation(loc) {
+    globalThis.window = {
+        location: loc,
+    };
+}
+function clearLocation() {
+    if (ORIGINAL_WINDOW === undefined) {
+        delete globalThis.window;
+    }
+    else {
+        globalThis.window = ORIGINAL_WINDOW;
+    }
+}
+afterEach(() => {
+    clearLocation();
+});
+// ============================================================================
+// PRODUCTION (the regression we're fixing)
+// ============================================================================
+describe("getFrontendHost — production (the share-link bug)", () => {
+    it("returns 'https://bash.community' for the production domain (NO :3000)", () => {
+        setLocation({
+            protocol: "https:",
+            hostname: "bash.community",
+            host: "bash.community",
+            port: "",
+        });
+        const host = getFrontendHost();
+        expect(host).toBe("https://bash.community");
+        expect(host).not.toMatch(/:3000/);
+    });
+    it("does NOT append :3000 to bash.community even if the bundle has no ENVIRONMENT env var", () => {
+        // Simulate the production browser bundle: ENVIRONMENT/BASH_ENV are NOT inlined.
+        const origEnv = process.env.ENVIRONMENT;
+        const origBashEnv = process.env.BASH_ENV;
+        const origNodeEnv = process.env.NODE_ENV;
+        try {
+            delete process.env.ENVIRONMENT;
+            delete process.env.BASH_ENV;
+            // Vite would replace process.env.NODE_ENV with "production" at build time.
+            process.env.NODE_ENV = "production";
+            setLocation({
+                protocol: "https:",
+                hostname: "bash.community",
+                host: "bash.community",
+                port: "",
+            });
+            expect(getFrontendHost()).toBe("https://bash.community");
+        }
+        finally {
+            if (origEnv === undefined) {
+                delete process.env.ENVIRONMENT;
+            }
+            else {
+                process.env.ENVIRONMENT = origEnv;
+            }
+            if (origBashEnv === undefined) {
+                delete process.env.BASH_ENV;
+            }
+            else {
+                process.env.BASH_ENV = origBashEnv;
+            }
+            if (origNodeEnv === undefined) {
+                delete process.env.NODE_ENV;
+            }
+            else {
+                process.env.NODE_ENV = origNodeEnv;
+            }
+        }
+    });
+    it("works for the QA subdomain (qa.bash.community → no :3000)", () => {
+        setLocation({
+            protocol: "https:",
+            hostname: "qa.bash.community",
+            host: "qa.bash.community",
+            port: "",
+        });
+        expect(getFrontendHost()).toBe("https://qa.bash.community");
+    });
+    it("works for any vanity subdomain (org.bash.community → no :3000)", () => {
+        setLocation({
+            protocol: "https:",
+            hostname: "myorg.bash.community",
+            host: "myorg.bash.community",
+            port: "",
+        });
+        expect(getFrontendHost()).toBe("https://myorg.bash.community");
+    });
+    it("preserves an EXPLICIT non-default port if the deployed site is running on one", () => {
+        // (uncommon but legal — e.g. preview deploy on :8080)
+        setLocation({
+            protocol: "https:",
+            hostname: "preview.bash.community",
+            host: "preview.bash.community:8080",
+            port: "8080",
+        });
+        expect(getFrontendHost()).toBe("https://preview.bash.community:8080");
+    });
+});
+// ============================================================================
+// LOCAL DEV (must keep working)
+// ============================================================================
+describe("getFrontendHost — local development", () => {
+    it("returns http://localhost:3000 for hostname=localhost", () => {
+        setLocation({
+            protocol: "http:",
+            hostname: "localhost",
+            host: "localhost:3000",
+            port: "3000",
+        });
+        expect(getFrontendHost()).toBe("http://localhost:3000");
+    });
+    it("returns http://127.0.0.1:3000 for hostname=127.0.0.1", () => {
+        setLocation({
+            protocol: "http:",
+            hostname: "127.0.0.1",
+            host: "127.0.0.1:3000",
+            port: "3000",
+        });
+        expect(getFrontendHost()).toBe("http://127.0.0.1:3000");
+    });
+    it("returns the LAN-IP dev URL with :3000 for 192.168.x.x (mobile-on-same-wifi dev)", () => {
+        setLocation({
+            protocol: "http:",
+            hostname: "192.168.1.42",
+            host: "192.168.1.42:3000",
+            port: "3000",
+        });
+        expect(getFrontendHost()).toBe("http://192.168.1.42:3000");
+    });
+});
+// ============================================================================
+// NGROK / TUNNELS (deployed-equivalent — should NOT get :3000)
+// ============================================================================
+describe("getFrontendHost — ngrok / public tunnels", () => {
+    it("does NOT append :3000 to an ngrok-free.dev tunnel hostname", () => {
+        // ngrok forwards port 443 publicly to the local :3000; the link Facebook
+        // crawls must hit the public 443, never the local 3000.
+        setLocation({
+            protocol: "https:",
+            hostname: "abc-123.ngrok-free.dev",
+            host: "abc-123.ngrok-free.dev",
+            port: "",
+        });
+        expect(getFrontendHost()).toBe("https://abc-123.ngrok-free.dev");
+    });
+    it("does NOT append :3000 to a .lhr.life tunnel", () => {
+        setLocation({
+            protocol: "https:",
+            hostname: "myapp.lhr.life",
+            host: "myapp.lhr.life",
+            port: "",
+        });
+        expect(getFrontendHost()).toBe("https://myapp.lhr.life");
+    });
+});
+// ============================================================================
+// SHARE-URL ASSEMBLY (the exact concatenation SharePopup performs)
+// ============================================================================
+describe("getFrontendHost — composed share URL (SharePopup integration)", () => {
+    it("composes the canonical share URL Facebook can crawl", () => {
+        setLocation({
+            protocol: "https:",
+            hostname: "bash.community",
+            host: "bash.community",
+            port: "",
+        });
+        const host = getFrontendHost();
+        const path = "/bash/evt_123-empanada-fest-slc";
+        const fullShareUrl = host + path;
+        expect(fullShareUrl).toBe("https://bash.community/bash/evt_123-empanada-fest-slc");
+        // Hard guard — this is the literal regression we're preventing.
+        expect(fullShareUrl).not.toMatch(/bash\.community:3000/);
+    });
+});
+//# sourceMappingURL=getFrontendHost.test.js.map

package/dist/utils/__tests__/getFrontendHost.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getFrontendHost.test.js","sourceRoot":"","sources":["../../../src/utils/__tests__/getFrontendHost.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AASjD,MAAM,eAAe,GAAI,UAAmC,CAAC,MAAM,CAAC;AAEpE,SAAS,WAAW,CAAC,GAAuB;IACzC,UAAsE,CAAC,MAAM,GAAG;QAC/E,QAAQ,EAAE,GAAG;KACd,CAAC;AACJ,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAQ,UAAmC,CAAC,MAAM,CAAC;IACrD,CAAC;SAAM,CAAC;QACL,UAAmC,CAAC,MAAM,GAAG,eAAe,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,aAAa,EAAE,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,2CAA2C;AAC3C,+EAA+E;AAE/E,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,WAAW,CAAC;YACV,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,gBAAgB;YAC1B,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,gFAAgF;QAChF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACxC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC5B,2EAA2E;YAC1E,OAAO,CAAC,GAA6B,CAAC,QAAQ,GAAG,YAAY,CAAC;YAE/D,WAAW,CAAC;gBACV,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,gBAAgB;gBAC1B,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,EAAE;aACT,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;YACpC,CAAC;YACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC;YACrC,CAAC;YACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,OAAQ,OAAO,CAAC,GAA6B,CAAC,QAAQ,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACL,OAAO,CAAC,GAA6B,CAAC,QAAQ,GAAG,WAAW,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,WAAW,CAAC;YACV,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,mBAAmB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,WAAW,CAAC;YACV,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,sBAAsB;YAChC,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,sDAAsD;QACtD,WAAW,CAAC;YACV,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,wBAAwB;YAClC,IAAI,EAAE,6BAA6B;YACnC,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,gCAAgC;AAChC,+EAA+E;AAE/E,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,WAAW,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,WAAW,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,WAAW,CAAC;YACV,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,+DAA+D;AAC/D,+EAA+E;AAE/E,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,yEAAyE;QACzE,wDAAwD;QACxD,WAAW,CAAC;YACV,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,wBAAwB;YAClC,IAAI,EAAE,wBAAwB;YAC9B,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,WAAW,CAAC;YACV,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,gBAAgB;YAC1B,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,mEAAmE;AACnE,+EAA+E;AAE/E,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,WAAW,CAAC;YACV,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,gBAAgB;YAC1B,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,iCAAiC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC;QAEjC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CACvB,uDAAuD,CACxD,CAAC;QACF,gEAAgE;QAChE,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/__tests__/promoCodesUtils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=promoCodesUtils.test.d.ts.map

package/dist/utils/__tests__/promoCodesUtils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promoCodesUtils.test.d.ts","sourceRoot":"","sources":["../../../src/utils/__tests__/promoCodesUtils.test.ts"],"names":[],"mappings":""}

package/dist/utils/__tests__/promoCodesUtils.test.js

@@ -0,0 +1,183 @@
+/**
+ * promoCodesUtils — locate / aggregate / re-distribute promo codes across a
+ * BashEvent's ticket tiers.
+ *
+ * These three helpers are tiny but they sit on the path between checkout
+ * UI ↔ pricing engine. A bug in `findPromoCodeFromBashEvent` would cause a
+ * promo to silently fail to apply at checkout (lost revenue / angry user).
+ * A bug in `updatePromoCodesOnBashEventTicketTiers` would scramble which
+ * tier a promo code belongs to after edits in the host wizard.
+ */
+import { findPromoCodeFromBashEvent, getPromoCodesFromBashEvent, updatePromoCodesOnBashEventTicketTiers, } from "../promoCodesUtils.js";
+function makePromo(id, ticketTierId, overrides = {}) {
+    return {
+        id,
+        ticketTierId,
+        code: `CODE-${id}`,
+        discountPercent: 10,
+        discountAmount: null,
+        maxRedemptions: null,
+        redemptionCount: 0,
+        expiresAt: null,
+        createdAt: new Date(0),
+        updatedAt: new Date(0),
+        ...overrides,
+    };
+}
+function makeTier(id, promoCodes) {
+    return {
+        id,
+        title: `Tier ${id}`,
+        promoCodes,
+    };
+}
+function makeBashEvent(tiers) {
+    return { ticketTiers: tiers };
+}
+// ============================================================================
+// findPromoCodeFromBashEvent
+// ============================================================================
+describe("findPromoCodeFromBashEvent", () => {
+    it("returns undefined when promoCodeId is undefined (no lookup attempted)", () => {
+        const bash = makeBashEvent([makeTier("t1", [makePromo("p1", "t1")])]);
+        expect(findPromoCodeFromBashEvent(bash, undefined)).toBeUndefined();
+    });
+    it("returns undefined when promoCodeId is the empty string (falsy guard)", () => {
+        const bash = makeBashEvent([makeTier("t1", [makePromo("p1", "t1")])]);
+        expect(findPromoCodeFromBashEvent(bash, "")).toBeUndefined();
+    });
+    it("returns undefined when bashEvent is null", () => {
+        expect(findPromoCodeFromBashEvent(null, "p1")).toBeUndefined();
+    });
+    it("returns undefined when bashEvent is undefined", () => {
+        expect(findPromoCodeFromBashEvent(undefined, "p1")).toBeUndefined();
+    });
+    it("returns undefined when ticketTiers is empty", () => {
+        expect(findPromoCodeFromBashEvent(makeBashEvent([]), "p1")).toBeUndefined();
+    });
+    it("finds a promo on the FIRST tier", () => {
+        const promo = makePromo("p1", "t1");
+        const bash = makeBashEvent([
+            makeTier("t1", [promo]),
+            makeTier("t2", [makePromo("p2", "t2")]),
+        ]);
+        expect(findPromoCodeFromBashEvent(bash, "p1")).toBe(promo);
+    });
+    it("finds a promo on a NON-FIRST tier (iterates across tiers)", () => {
+        const promo = makePromo("p2", "t2");
+        const bash = makeBashEvent([
+            makeTier("t1", [makePromo("p1", "t1")]),
+            makeTier("t2", [promo]),
+        ]);
+        expect(findPromoCodeFromBashEvent(bash, "p2")).toBe(promo);
+    });
+    it("returns the FIRST match if the same id appears on multiple tiers (defensive — shouldn't happen but guard the order)", () => {
+        const dupOnT1 = makePromo("dup", "t1");
+        const dupOnT2 = makePromo("dup", "t2");
+        const bash = makeBashEvent([
+            makeTier("t1", [dupOnT1]),
+            makeTier("t2", [dupOnT2]),
+        ]);
+        expect(findPromoCodeFromBashEvent(bash, "dup")).toBe(dupOnT1);
+    });
+    it("returns undefined when promoCodeId doesn't match any tier's promo", () => {
+        const bash = makeBashEvent([makeTier("t1", [makePromo("p1", "t1")])]);
+        expect(findPromoCodeFromBashEvent(bash, "missing")).toBeUndefined();
+    });
+    it("does not throw when a tier has no promoCodes array (defensive)", () => {
+        const tier = { id: "t1", promoCodes: [] };
+        expect(() => findPromoCodeFromBashEvent(makeBashEvent([tier]), "p1")).not.toThrow();
+    });
+});
+// ============================================================================
+// getPromoCodesFromBashEvent
+// ============================================================================
+describe("getPromoCodesFromBashEvent", () => {
+    it("returns [] when bashEvent is null", () => {
+        expect(getPromoCodesFromBashEvent(null)).toEqual([]);
+    });
+    it("returns [] when bashEvent is undefined", () => {
+        expect(getPromoCodesFromBashEvent(undefined)).toEqual([]);
+    });
+    it("returns [] when there are no ticket tiers", () => {
+        expect(getPromoCodesFromBashEvent(makeBashEvent([]))).toEqual([]);
+    });
+    it("returns [] when no tier has any promo codes", () => {
+        const bash = makeBashEvent([makeTier("t1", []), makeTier("t2", [])]);
+        expect(getPromoCodesFromBashEvent(bash)).toEqual([]);
+    });
+    it("flattens promo codes across multiple tiers in tier order", () => {
+        const p1 = makePromo("p1", "t1");
+        const p2 = makePromo("p2", "t2");
+        const p3 = makePromo("p3", "t2");
+        const bash = makeBashEvent([
+            makeTier("t1", [p1]),
+            makeTier("t2", [p2, p3]),
+        ]);
+        expect(getPromoCodesFromBashEvent(bash)).toEqual([p1, p2, p3]);
+    });
+    it("skips tiers with empty promoCodes (filter step)", () => {
+        const p1 = makePromo("p1", "t1");
+        const bash = makeBashEvent([
+            makeTier("t1", [p1]),
+            makeTier("t2", []),
+            makeTier("t3", [makePromo("p3", "t3")]),
+        ]);
+        const all = getPromoCodesFromBashEvent(bash);
+        expect(all.map((p) => p.id)).toEqual(["p1", "p3"]);
+    });
+});
+// ============================================================================
+// updatePromoCodesOnBashEventTicketTiers
+// ============================================================================
+describe("updatePromoCodesOnBashEventTicketTiers", () => {
+    it("re-buckets promos onto tiers by ticketTierId (mutates in place)", () => {
+        const bash = makeBashEvent([
+            makeTier("t1", []),
+            makeTier("t2", []),
+        ]);
+        const promos = [
+            makePromo("p1", "t1"),
+            makePromo("p2", "t2"),
+            makePromo("p3", "t1"),
+        ];
+        updatePromoCodesOnBashEventTicketTiers(bash, promos);
+        expect(bash.ticketTiers?.[0].promoCodes.map((p) => p.id)).toEqual([
+            "p1",
+            "p3",
+        ]);
+        expect(bash.ticketTiers?.[1].promoCodes.map((p) => p.id)).toEqual(["p2"]);
+    });
+    it("REPLACES existing promo codes on each tier (not appended)", () => {
+        const oldPromo = makePromo("old", "t1");
+        const bash = makeBashEvent([makeTier("t1", [oldPromo])]);
+        updatePromoCodesOnBashEventTicketTiers(bash, [makePromo("new", "t1")]);
+        expect(bash.ticketTiers?.[0].promoCodes.map((p) => p.id)).toEqual([
+            "new",
+        ]);
+    });
+    it("clears tiers that have no matching promos in the new list", () => {
+        const bash = makeBashEvent([
+            makeTier("t1", [makePromo("oldA", "t1")]),
+            makeTier("t2", [makePromo("oldB", "t2")]),
+        ]);
+        updatePromoCodesOnBashEventTicketTiers(bash, [makePromo("newA", "t1")]);
+        expect(bash.ticketTiers?.[0].promoCodes.map((p) => p.id)).toEqual([
+            "newA",
+        ]);
+        expect(bash.ticketTiers?.[1].promoCodes).toEqual([]);
+    });
+    it("ignores promos whose ticketTierId doesn't match any tier on the event (orphans dropped)", () => {
+        const bash = makeBashEvent([makeTier("t1", [])]);
+        updatePromoCodesOnBashEventTicketTiers(bash, [
+            makePromo("p1", "t1"),
+            makePromo("orphan", "tDoesNotExist"),
+        ]);
+        expect(bash.ticketTiers?.[0].promoCodes.map((p) => p.id)).toEqual(["p1"]);
+    });
+    it("is a no-op when ticketTiers is undefined", () => {
+        const bash = { ticketTiers: undefined };
+        expect(() => updatePromoCodesOnBashEventTicketTiers(bash, [makePromo("p1", "t1")])).not.toThrow();
+    });
+});
+//# sourceMappingURL=promoCodesUtils.test.js.map

package/dist/utils/__tests__/promoCodesUtils.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promoCodesUtils.test.js","sourceRoot":"","sources":["../../../src/utils/__tests__/promoCodesUtils.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAO/B,SAAS,SAAS,CAChB,EAAU,EACV,YAAoB,EACpB,YAAyC,EAAE;IAE3C,OAAO;QACL,EAAE;QACF,YAAY;QACZ,IAAI,EAAE,QAAQ,EAAE,EAAE;QAClB,eAAe,EAAE,EAAE;QACnB,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,CAAC;QAClB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;QACtB,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;QACtB,GAAG,SAAS;KACoB,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CACf,EAAU,EACV,UAAgC;IAEhC,OAAO;QACL,EAAE;QACF,KAAK,EAAE,QAAQ,EAAE,EAAE;QACnB,UAAU;KACiB,CAAC;AAChC,CAAC;AAED,SAAS,aAAa,CAAC,KAAsB;IAC3C,OAAO,EAAE,WAAW,EAAE,KAAK,EAA6B,CAAC;AAC3D,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,0BAA0B,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CACJ,0BAA0B,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CACpD,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,aAAa,CAAC;YACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;YACvB,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,aAAa,CAAC;YACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YACvC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qHAAqH,EAAE,GAAG,EAAE;QAC7H,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,aAAa,CAAC;YACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;YACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,0BAA0B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAA8B,CAAC;QACtE,MAAM,CAAC,GAAG,EAAE,CACV,0BAA0B,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CACxD,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,0BAA0B,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,aAAa,CAAC;YACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACpB,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,aAAa,CAAC;YACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACpB,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,yCAAyC;AACzC,+EAA+E;AAE/E,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,IAAI,GAAG,aAAa,CAAC;YACzB,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG;YACb,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;YACrB,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;YACrB,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;SACtB,CAAC;QAEF,sCAAsC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAErD,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,IAAI;YACJ,IAAI;SACL,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzD,sCAAsC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,KAAK;SACN,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,aAAa,CAAC;YACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YACzC,QAAQ,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;SAC1C,CAAC,CAAC;QAEH,sCAAsC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAExE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,MAAM;SACP,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACjD,sCAAsC,CAAC,IAAI,EAAE;YAC3C,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC;YACrB,SAAS,CAAC,QAAQ,EAAE,eAAe,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,SAAS,EAA6B,CAAC;QACnE,MAAM,CAAC,GAAG,EAAE,CACV,sCAAsC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CACtE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/__tests__/qrCodeUtils.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=qrCodeUtils.test.d.ts.map

package/dist/utils/__tests__/qrCodeUtils.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qrCodeUtils.test.d.ts","sourceRoot":"","sources":["../../../src/utils/__tests__/qrCodeUtils.test.ts"],"names":[],"mappings":""}

package/dist/utils/__tests__/qrCodeUtils.test.js

@@ -0,0 +1,99 @@
+/**
+ * qrCodeUtils — URL builders for the *navigable* `/ticket-details` deep
+ * links that get encoded into ticket QR codes (and createQrCodeImage that
+ * renders them as PNG data URLs).
+ *
+ * The contract these tests pin (consumed by the door-scan flow, ticket
+ * emails, and tier-share QR codes):
+ *
+ *   bashEventPrismaCheckoutQrCodeUrl(eventId, checkoutId)
+ *     → "/ticket-details/{eventId}/{checkoutId}"
+ *
+ *   bashEventQrCodeUrl(eventId)                                     → "/ticket-details/{eventId}"
+ *   bashEventQrCodeUrl(eventId, tierId)                             → "/ticket-details/{eventId}/ticket-tier/{tierId}"
+ *   bashEventQrCodeUrl(eventId, tierId, ticketId)                   → "/ticket-details/{eventId}/ticket/{ticketId}"   (ticketId WINS over tierId)
+ *   bashEventQrCodeUrl(eventId, _, _, slug)                         → "/ticket-details/{eventId}-{slug}"               (slug version of the deep link)
+ *
+ *   createQrCodeImage(data) → Promise<"data:image/png;base64,...">
+ *
+ * Bugs in any of these route door-scanners to the wrong page (= entry chaos).
+ */
+import { bashEventPrismaCheckoutQrCodeUrl, bashEventQrCodeUrl, createQrCodeImage, } from "../qrCodeUtils.js";
+// ============================================================================
+// bashEventPrismaCheckoutQrCodeUrl — checkout-id deep link
+// ============================================================================
+describe("bashEventPrismaCheckoutQrCodeUrl", () => {
+    it("composes /ticket-details/{eventId}/{checkoutId}", () => {
+        expect(bashEventPrismaCheckoutQrCodeUrl("evt_123", "co_456")).toBe("/ticket-details/evt_123/co_456");
+    });
+    it("does NOT throw on null/undefined inputs (downstream link is broken-but-safe)", () => {
+        // The current contract just stringifies via template literal, so we pin
+        // the literal output rather than asserting an exception.
+        expect(bashEventPrismaCheckoutQrCodeUrl(null, null)).toBe("/ticket-details/null/null");
+        expect(bashEventPrismaCheckoutQrCodeUrl(undefined, undefined)).toBe("/ticket-details/undefined/undefined");
+    });
+});
+// ============================================================================
+// bashEventQrCodeUrl — base / tier / ticket / slug variants
+// ============================================================================
+describe("bashEventQrCodeUrl", () => {
+    describe("base url (no tier, no ticket, no slug)", () => {
+        it("returns /ticket-details/{eventId}", () => {
+            expect(bashEventQrCodeUrl("evt_1")).toBe("/ticket-details/evt_1");
+        });
+    });
+    describe("with ticketTierId", () => {
+        it("appends /ticket-tier/{tierId}", () => {
+            expect(bashEventQrCodeUrl("evt_1", "tier_a")).toBe("/ticket-details/evt_1/ticket-tier/tier_a");
+        });
+        it("ignores null ticketId in favor of tier", () => {
+            expect(bashEventQrCodeUrl("evt_1", "tier_a", null)).toBe("/ticket-details/evt_1/ticket-tier/tier_a");
+        });
+    });
+    describe("with ticketId (the door-scan link)", () => {
+        it("appends /ticket/{ticketId}", () => {
+            expect(bashEventQrCodeUrl("evt_1", undefined, "ticket_xyz")).toBe("/ticket-details/evt_1/ticket/ticket_xyz");
+        });
+        it("PREFERS ticketId over ticketTierId when both are provided", () => {
+            // Tickets are more specific than tiers; the deep link must resolve to the
+            // individual ticket (otherwise the door scanner can't validate redemption).
+            expect(bashEventQrCodeUrl("evt_1", "tier_a", "ticket_xyz")).toBe("/ticket-details/evt_1/ticket/ticket_xyz");
+        });
+    });
+    describe("with slug", () => {
+        it("uses the slugged base (`/ticket-details/{eventId}-{slug}`)", () => {
+            expect(bashEventQrCodeUrl("evt_1", undefined, undefined, "summer-rave")).toBe("/ticket-details/evt_1-summer-rave");
+        });
+        it("appends ticketId on the slugged base", () => {
+            expect(bashEventQrCodeUrl("evt_1", undefined, "ticket_xyz", "summer-rave")).toBe("/ticket-details/evt_1-summer-rave/ticket/ticket_xyz");
+        });
+        it("appends ticket-tier on the slugged base when no ticketId", () => {
+            expect(bashEventQrCodeUrl("evt_1", "tier_a", undefined, "summer-rave")).toBe("/ticket-details/evt_1-summer-rave/ticket-tier/tier_a");
+        });
+        it("falls back to non-slug base when slug is null", () => {
+            expect(bashEventQrCodeUrl("evt_1", null, null, null)).toBe("/ticket-details/evt_1");
+        });
+    });
+});
+// ============================================================================
+// createQrCodeImage — PNG data URL
+// ============================================================================
+describe("createQrCodeImage", () => {
+    it("returns a base64-encoded PNG data URL", async () => {
+        const dataUrl = await createQrCodeImage("https://bash.app/ticket-details/evt_1/ticket/abc");
+        expect(dataUrl).toMatch(/^data:image\/png;base64,/);
+        // Sanity: a real QR image will have *meaningful* base64 length, not a few bytes.
+        expect(dataUrl.length).toBeGreaterThan(200);
+    });
+    it("produces a deterministic PNG for the same input (no nonce / timestamp leakage)", async () => {
+        const a = await createQrCodeImage("ticket://abc");
+        const b = await createQrCodeImage("ticket://abc");
+        expect(a).toBe(b);
+    });
+    it("produces DIFFERENT output for different payloads", async () => {
+        const a = await createQrCodeImage("ticket://abc");
+        const b = await createQrCodeImage("ticket://xyz");
+        expect(a).not.toBe(b);
+    });
+});
+//# sourceMappingURL=qrCodeUtils.test.js.map