@carlonicora/nextjs-jsonapi 2.0.3 → 2.1.0

package/dist/{chunk-UXJAS6C5.js → chunk-JG7MCYCW.js}

@@ -2,7 +2,7 @@
 
 
 
-var _chunkDS4IBFWAjs = require('./chunk-DS4IBFWA.js');
+var _chunk6YIZX26Tjs = require('./chunk-6YIZX26T.js');
 
 
 var _chunkQWCAOLBDjs = require('./chunk-QWCAOLBD.js');
@@ -216,7 +216,7 @@ var COMPANY_ADMINISTRATOR_ROLE_ID = "2e1eee00-6cba-4506-9059-ccd24e4ea5b0";
 var ACTION_TYPES = ["read", "create", "update", "delete"];
 
 // src/features/rbac/data/RbacService.ts
-var RbacService = class extends _chunkDS4IBFWAjs.AbstractService {
+var RbacService = class extends _chunk6YIZX26Tjs.AbstractService {
   static {
     _chunk7QVYU63Ejs.__name.call(void 0, this, "RbacService");
   }
@@ -227,9 +227,9 @@ var RbacService = class extends _chunkDS4IBFWAjs.AbstractService {
    * Dev-only endpoint — see class header.
    */
   static async fetchMatrix() {
-    const endpoint = new (0, _chunkDS4IBFWAjs.EndpointCreator)({ endpoint: _chunkDS4IBFWAjs.Modules.RbacMatrix }).generate();
+    const endpoint = new (0, _chunk6YIZX26Tjs.EndpointCreator)({ endpoint: _chunk6YIZX26Tjs.Modules.RbacMatrix }).generate();
     const model = await this.callApi({
-      type: _chunkDS4IBFWAjs.Modules.RbacMatrix,
+      type: _chunk6YIZX26Tjs.Modules.RbacMatrix,
       method: "GET" /* GET */,
       endpoint
     });
@@ -249,9 +249,9 @@ var RbacService = class extends _chunkDS4IBFWAjs.AbstractService {
    * Dev-only endpoint — see class header.
    */
   static async saveMatrix(args) {
-    const endpoint = new (0, _chunkDS4IBFWAjs.EndpointCreator)({ endpoint: _chunkDS4IBFWAjs.Modules.RbacMatrix }).generate();
+    const endpoint = new (0, _chunk6YIZX26Tjs.EndpointCreator)({ endpoint: _chunk6YIZX26Tjs.Modules.RbacMatrix }).generate();
     const model = await this.callApi({
-      type: _chunkDS4IBFWAjs.Modules.RbacMatrix,
+      type: _chunk6YIZX26Tjs.Modules.RbacMatrix,
       method: "PUT" /* PUT */,
       endpoint,
       input: args
@@ -296,4 +296,4 @@ var RbacService = class extends _chunkDS4IBFWAjs.AbstractService {
 
 
 exports._getStaticHelpContent = _getStaticHelpContent; exports.configureJsonApi = configureJsonApi; exports.configureClientConfig = configureClientConfig; exports.getApiUrl = getApiUrl; exports.getPublicApiUrl = getPublicApiUrl; exports.getAppUrl = getAppUrl; exports.getTrackablePages = getTrackablePages; exports.getStripePublishableKey = getStripePublishableKey; exports.configureI18n = configureI18n; exports.useI18nRouter = useI18nRouter; exports.useI18nTranslations = useI18nTranslations; exports.getI18nLink = getI18nLink; exports.useI18nLocale = useI18nLocale; exports.useI18nDateFnsLocale = useI18nDateFnsLocale; exports.configureLogin = configureLogin; exports.isDiscordAuthEnabled = isDiscordAuthEnabled; exports.isGoogleAuthEnabled = isGoogleAuthEnabled; exports.isInternalAuthEnabled = isInternalAuthEnabled; exports.isRegistrationAllowed = isRegistrationAllowed; exports.getRegistrationMode = getRegistrationMode; exports.configureRoles = configureRoles; exports.getRoleId = getRoleId; exports.isRolesConfigured = isRolesConfigured; exports.configureWaitlist = configureWaitlist; exports.getWaitlistConfig = getWaitlistConfig; exports.configureReferral = configureReferral; exports.getReferralConfig = getReferralConfig; exports.isReferralEnabled = isReferralEnabled; exports.COMPANY_ADMINISTRATOR_ROLE_ID = COMPANY_ADMINISTRATOR_ROLE_ID; exports.ACTION_TYPES = ACTION_TYPES; exports.RbacService = RbacService;
-//# sourceMappingURL=chunk-UXJAS6C5.js.map
+//# sourceMappingURL=chunk-JG7MCYCW.js.map

package/dist/{chunk-UXJAS6C5.js.map → chunk-JG7MCYCW.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-UXJAS6C5.js","../src/core/registry/helpStore.ts","../src/client/config.ts","../src/i18n/config.ts","../src/login/config.ts","../src/roles/config.ts","../src/features/waitlist/config/waitlist.config.ts","../src/features/referral/config.ts","../src/features/rbac/data/RbacTypes.ts","../src/features/rbac/data/RbacService.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACA;ACDA,IAAM,iBAAA,kBAAmB,MAAA,CAAO,GAAA,CAAI,4BAA4B,CAAA;AAEhE,IAAM,YAAA,EAAc,UAAA;AAIpB,GAAA,CAAI,WAAA,CAAY,gBAAgB,EAAA,IAAM,KAAA,CAAA,EAAW;AAC/C,EAAA,WAAA,CAAY,gBAAgB,EAAA,EAAI,IAAA;AAClC;AAEO,SAAS,qBAAA,CAAsB,GAAA,EAA2B;AAC/D,EAAA,WAAA,CAAY,gBAAgB,EAAA,EAAI,GAAA;AAClC;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAIT,SAAS,qBAAA,CAAA,EAA+C;AAC7D,EAAA,wBAAQ,WAAA,CAAY,gBAAgB,CAAA,UAAkB,MAAA;AACxD;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;ADChB;AACA;AEnBA,IAAI,cAAA,EAOO,IAAA;AAOJ,SAAS,gBAAA,CAAiB,MAAA,EAQxB;AACP,EAAA,MAAM,EAAE,WAAA,EAAa,GAAG,KAAK,EAAA,EAAI,MAAA;AACjC,EAAA,cAAA,EAAgB,IAAA;AAChB,EAAA,GAAA,CAAI,WAAA,EAAa;AACf,IAAA,qBAAA,CAAsB,WAAW,CAAA;AAAA,EACnC;AAEA,EAAA,GAAA,CAAI,MAAA,CAAO,YAAA,EAAc;AACvB,IAAA,8CAAA,MAAgB,CAAO,YAAY,CAAA;AACnC,IAAA,MAAA,CAAO,YAAA,CAAa,CAAA;AAAA,EACtB;AACF;AAnBgB,qCAAA,gBAAA,EAAA,kBAAA,CAAA;AAyBT,SAAS,qBAAA,CAAsB,MAAA,EAI7B;AACP,EAAA,cAAA,EAAgB,MAAA;AAClB;AANgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAgBT,SAAS,SAAA,CAAA,EAAoB;AAClC,EAAA,GAAA,iBAAI,aAAA,2BAAe,QAAA,EAAQ;AACzB,IAAA,OAAO,aAAA,CAAc,MAAA;AAAA,EACvB;AACA,EAAA,GAAA,CAAI,OAAO,QAAA,IAAY,YAAA,mBAAe,OAAA,qBAAQ,GAAA,6BAAK,qBAAA,EAAqB;AACtE,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,mBAAA;AAAA,EACrB;AACA,EAAA,OAAO,EAAA;AACT;AARgB,qCAAA,SAAA,EAAA,WAAA,CAAA;AAkBT,SAAS,eAAA,CAAA,EAA0B;AACxC,EAAA,GAAA,CAAI,OAAO,QAAA,IAAY,YAAA,mBAAe,OAAA,qBAAQ,GAAA,6BAAK,qBAAA,EAAqB;AACtE,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,mBAAA;AAAA,EACrB;AACA,EAAA,OAAO,EAAA;AACT;AALgB,qCAAA,eAAA,EAAA,iBAAA,CAAA;AAUT,SAAS,SAAA,CAAA,EAAoB;AAClC,EAAA,GAAA,iBAAI,aAAA,6BAAe,QAAA,EAAQ;AACzB,IAAA,OAAO,aAAA,CAAc,MAAA;AAAA,EACvB;AACA,EAAA,GAAA,CAAI,OAAO,QAAA,IAAY,YAAA,mBAAe,OAAA,qBAAQ,GAAA,6BAAK,qBAAA,EAAqB;AACtE,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,mBAAA;AAAA,EACrB;AACA,EAAA,GAAA,CAAI,OAAO,OAAA,IAAW,WAAA,EAAa;AACjC,IAAA,OAAO,MAAA,CAAO,QAAA,CAAS,MAAA;AAAA,EACzB;AACA,EAAA,OAAO,EAAA;AACT;AAXgB,qCAAA,SAAA,EAAA,WAAA,CAAA;AAgBT,SAAS,iBAAA,CAAA,EAA6C;AAC3D,EAAA,wCAAO,aAAA,6BAAe,gBAAA,UAAkB,CAAC,GAAA;AAC3C;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAOT,SAAS,uBAAA,CAAA,EAA8C;AAC5D,EAAA,uBAAO,aAAA,+BAAe,sBAAA;AACxB;AAFgB,qCAAA,uBAAA,EAAA,yBAAA,CAAA;AF/BhB;AACA;AGvDA,IAAI,QAAA,EAA6B,IAAA;AAG1B,SAAS,aAAA,CAAc,MAAA,EAA0B;AACtD,EAAA,QAAA,EAAU,MAAA;AACZ;AAFgB,qCAAA,aAAA,EAAA,eAAA,CAAA;AAKT,SAAS,aAAA,CAAA,EAA4B;AAC1C,EAAA,GAAA,CAAI,iBAAC,OAAA,+BAAS,WAAA,EAAW;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,2DAA2D,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,OAAA,CAAQ,SAAA,CAAU,CAAA;AAC3B;AALgB,qCAAA,aAAA,EAAA,eAAA,CAAA;AAOT,SAAS,mBAAA,CAAoB,SAAA,EAA2E;AAC7G,EAAA,GAAA,CAAI,iBAAC,OAAA,+BAAS,iBAAA,EAAiB;AAE7B,IAAA,OAAO,CAAC,GAAA,EAAA,GAAgB,GAAA;AAAA,EAC1B;AACA,EAAA,OAAO,OAAA,CAAQ,eAAA,CAAgB,SAAS,CAAA;AAC1C;AANgB,qCAAA,mBAAA,EAAA,qBAAA,CAAA;AAQT,SAAS,WAAA,CAAA,EAA6B;AAC3C,EAAA,GAAA,CAAI,iBAAC,OAAA,+BAAS,MAAA,EAAM;AAClB,IAAA,MAAM,IAAI,KAAA,CAAM,2DAA2D,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,OAAA,CAAQ,IAAA;AACjB;AALgB,qCAAA,WAAA,EAAA,aAAA,CAAA;AAOT,SAAS,aAAA,CAAA,EAAwB;AACtC,EAAA,GAAA,iBAAI,OAAA,+BAAS,WAAA,EAAW;AACtB,IAAA,OAAO,OAAA,CAAQ,SAAA,CAAU,CAAA;AAAA,EAC3B;AAEA,EAAA,OAAO,IAAA;AACT;AANgB,qCAAA,aAAA,EAAA,eAAA,CAAA;AAQT,SAAS,oBAAA,CAAA,EAA4B;AAC1C,EAAA,GAAA,iBAAI,OAAA,+BAAS,kBAAA,EAAkB;AAC7B,IAAA,OAAO,OAAA,CAAQ,gBAAA,CAAiB,CAAA;AAAA,EAClC;AAEA,EAAA,OAAO,KAAA,CAAA;AACT;AANgB,qCAAA,oBAAA,EAAA,sBAAA,CAAA;AH0DhB;AACA;AI9HA,IAAI,gBAAA,EAA2B,KAAA;AAC/B,IAAI,eAAA,EAA0B,KAAA;AAC9B,IAAI,iBAAA,EAA4B,IAAA;AAChC,IAAI,mBAAA,EAA8B,IAAA;AAClC,IAAI,kBAAA,EAAoD,MAAA;AAYjD,SAAS,cAAA,CAAe,MAAA,EAA2B;AACxD,EAAA,gBAAA,EAAkB,CAAC,CAAC,MAAA,CAAO,eAAA;AAC3B,EAAA,eAAA,EAAiB,CAAC,CAAC,MAAA,CAAO,cAAA;AAC1B,EAAA,iBAAA,mBAAmB,MAAA,CAAO,eAAA,UAAmB,MAAA;AAC7C,EAAA,mBAAA,mBAAqB,MAAA,CAAO,iBAAA,UAAqB,MAAA;AACjD,EAAA,kBAAA,mBAAoB,MAAA,CAAO,gBAAA,UAAoB,QAAA;AACjD;AANgB,qCAAA,cAAA,EAAA,gBAAA,CAAA;AAQT,SAAS,oBAAA,CAAA,EAAgC;AAC9C,EAAA,OAAO,eAAA;AACT;AAFgB,qCAAA,oBAAA,EAAA,sBAAA,CAAA;AAIT,SAAS,mBAAA,CAAA,EAA+B;AAC7C,EAAA,OAAO,cAAA;AACT;AAFgB,qCAAA,mBAAA,EAAA,qBAAA,CAAA;AAIT,SAAS,qBAAA,CAAA,EAAiC;AAC/C,EAAA,OAAO,gBAAA;AACT;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAIT,SAAS,qBAAA,CAAA,EAAiC;AAC/C,EAAA,OAAO,kBAAA;AACT;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAIT,SAAS,mBAAA,CAAA,EAAwC;AACtD,EAAA,OAAO,iBAAA;AACT;AAFgB,qCAAA,mBAAA,EAAA,qBAAA,CAAA;AJwHhB;AACA;AKtJA,IAAI,QAAA,EAA+B,IAAA;AAc5B,SAAS,cAAA,CAAe,MAAA,EAA4B;AACzD,EAAA,QAAA,EAAU,MAAA;AACZ;AAFgB,qCAAA,cAAA,EAAA,gBAAA,CAAA;AAQT,SAAS,SAAA,CAAA,EAA0B;AACxC,EAAA,GAAA,CAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,KAAA,CAAM,6DAA6D,CAAA;AAAA,EAC/E;AACA,EAAA,OAAO,OAAA;AACT;AALgB,qCAAA,SAAA,EAAA,WAAA,CAAA;AAUT,SAAS,iBAAA,CAAA,EAA6B;AAC3C,EAAA,OAAO,QAAA,IAAY,IAAA;AACrB;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;ALuIhB;AACA;AMzJA,IAAI,gBAAA,EAAkC,CAAC,CAAA;AAEhC,SAAS,iBAAA,CAAkB,MAAA,EAA8B;AAC9D,EAAA,gBAAA,EAAkB,MAAA;AACpB;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAIT,SAAS,iBAAA,CAAA,EAAoC;AAClD,EAAA,OAAO,eAAA;AACT;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AN6JhB;AACA;AOjJO,IAAM,wBAAA,EAAoD;AAAA,EAC/D,OAAA,EAAS,KAAA;AAAA,EACT,UAAA,EAAY,eAAA;AAAA,EACZ,UAAA,EAAY,EAAA;AAAA,EACZ,YAAA,EAAc,KAAA;AAAA,EACd,eAAA,EAAiB,EAAA;AAAA,EACjB,YAAA,EAAc;AAChB,CAAA;AAGA,IAAI,gBAAA,EAA4C,EAAE,GAAG,wBAAwB,CAAA;AAgBtE,SAAS,iBAAA,CAAkB,MAAA,EAA8B;AAC9D,EAAA,gBAAA,EAAkB,EAAE,GAAG,uBAAA,EAAyB,GAAG,OAAO,CAAA;AAC5D;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAQT,SAAS,iBAAA,CAAA,EAA8C;AAC5D,EAAA,OAAO,eAAA;AACT;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAOT,SAAS,iBAAA,CAAA,EAA6B;AAC3C,EAAA,OAAO,eAAA,CAAgB,OAAA;AACzB;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AP8HhB;AACA;AQrNO,IAAM,8BAAA,EAAgC,sCAAA;AAMtC,IAAM,aAAA,EAA6B,CAAC,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU,QAAQ,CAAA;ARkN/E;AACA;AStMO,IAAM,YAAA,EAAN,MAAA,QAA0B,iCAAgB;AAAA,EAnBjD,OAmBiD;AAAA,IAAA,qCAAA,IAAA,EAAA,aAAA,CAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO/C,OAAA,MAAa,WAAA,CAAA,EAGV;AACD,IAAA,MAAM,SAAA,EAAW,IAAI,qCAAA,CAAgB,EAAE,QAAA,EAAU,wBAAA,CAAQ,WAAW,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAEhF,IAAA,MAAM,MAAA,EAAQ,MAAM,IAAA,CAAK,OAAA,CAAyB;AAAA,MAChD,IAAA,EAAM,wBAAA,CAAQ,UAAA;AAAA,MACd,MAAA,EAAA,eAAA;AAAA,MACA;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO;AAAA,MACL,MAAA,mBAAQ,KAAA,CAAM,MAAA,UAAU,CAAC,GAAA;AAAA,MACzB,WAAA,mBAAa,KAAA,CAAM,WAAA,UAAe,CAAC;AAAA,IACrC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAA,MAAa,UAAA,CAAW,IAAA,EAK4B;AAClD,IAAA,MAAM,SAAA,EAAW,IAAI,qCAAA,CAAgB,EAAE,QAAA,EAAU,wBAAA,CAAQ,WAAW,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAEhF,IAAA,MAAM,MAAA,EAAQ,MAAM,IAAA,CAAK,OAAA,CAAyB;AAAA,MAChD,IAAA,EAAM,wBAAA,CAAQ,UAAA;AAAA,MACd,MAAA,EAAA,eAAA;AAAA,MACA,QAAA;AAAA,MACA,KAAA,EAAO;AAAA,IACT,CAAC,CAAA;AAED,IAAA,OAAO;AAAA,MACL,YAAA,mBAAc,KAAA,CAAM,YAAA,UAAgB,GAAA;AAAA,MACpC,IAAA,mBAAM,KAAA,CAAM,IAAA,UAAQ;AAAA,IACtB,CAAA;AAAA,EACF;AACF,CAAA;AT8LA;AACA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,g5CAAC","file":"/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-UXJAS6C5.js","sourcesContent":[null,"/**\n * Centralized help-content store accessible from client and server contexts.\n * Uses a globalThis Symbol key to persist across HMR/Turbopack reloads and to\n * bridge between the client-side `configureJsonApi` (in `client/config.ts`)\n * and the HelpProvider context. Holds the brand-only HelpContentConfig.\n *\n * NO external dependencies to avoid circular imports.\n *\n * Pattern mirrors `bootstrapStore.ts`.\n */\n\nconst HELP_CONTENT_KEY = Symbol.for(\"nextjs-jsonapi:helpContent\");\n\nconst globalStore = globalThis as unknown as {\n  [HELP_CONTENT_KEY]?: unknown | null;\n};\n\nif (globalStore[HELP_CONTENT_KEY] === undefined) {\n  globalStore[HELP_CONTENT_KEY] = null;\n}\n\nexport function _setStaticHelpContent(cfg: unknown | null): void {\n  globalStore[HELP_CONTENT_KEY] = cfg;\n}\n\nexport function _getStaticHelpContent<T = unknown>(): T | null {\n  return (globalStore[HELP_CONTENT_KEY] as T | null) ?? null;\n}\n","\"use client\";\n\nimport { ModuleWithPermissions } from \"../permissions/types\";\nimport { setBootstrapper } from \"../core/registry/bootstrapStore\";\nimport { _setStaticHelpContent } from \"../core/registry/helpStore\";\nimport type { HelpContentConfig } from \"../features/help/interfaces/help-content-config.interface\";\n\n// Config storage for client-side contexts\nlet _clientConfig: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n  stripePublishableKey?: string;\n} | null = null;\n\n/**\n * Configure the JSON:API client. This is the main configuration function.\n * This is typically called during app initialization.\n * @param config.helpContent - Optional help-content config (brand only). Forwarded to the help feature's globalThis-backed store; not stored on the client config.\n */\nexport function configureJsonApi(config: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n  stripePublishableKey?: string;\n  helpContent?: HelpContentConfig;\n}): void {\n  const { helpContent, ...rest } = config;\n  _clientConfig = rest;\n  if (helpContent) {\n    _setStaticHelpContent(helpContent);\n  }\n  // Register and call bootstrapper to register all modules\n  if (config.bootstrapper) {\n    setBootstrapper(config.bootstrapper);\n    config.bootstrapper();\n  }\n}\n\n/**\n * Configure the client config. This is typically called during app initialization.\n * @deprecated Use configureJsonApi instead\n */\nexport function configureClientConfig(config: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n}): void {\n  _clientConfig = config;\n}\n\n/**\n * Get the configured API URL.\n *\n * This may resolve to an internal/private host (e.g. a docker-network\n * hostname) when configured to do so for SSR fetches. Do NOT use this for\n * URLs that are rendered into HTML and followed by the browser — use\n * `getPublicApiUrl()` instead.\n */\nexport function getApiUrl(): string {\n  if (_clientConfig?.apiUrl) {\n    return _clientConfig.apiUrl;\n  }\n  if (typeof process !== \"undefined\" && process.env?.NEXT_PUBLIC_API_URL) {\n    return process.env.NEXT_PUBLIC_API_URL;\n  }\n  return \"\";\n}\n\n/**\n * Get the public-facing API URL.\n *\n * Always sourced from `NEXT_PUBLIC_API_URL` so it is identical on server\n * and client, and reachable from the user's browser. Use for any URL that\n * gets rendered into HTML the browser will navigate to (links, redirects,\n * OAuth hrefs).\n */\nexport function getPublicApiUrl(): string {\n  if (typeof process !== \"undefined\" && process.env?.NEXT_PUBLIC_API_URL) {\n    return process.env.NEXT_PUBLIC_API_URL;\n  }\n  return \"\";\n}\n\n/**\n * Get the configured app URL.\n */\nexport function getAppUrl(): string {\n  if (_clientConfig?.appUrl) {\n    return _clientConfig.appUrl;\n  }\n  if (typeof process !== \"undefined\" && process.env?.NEXT_PUBLIC_APP_URL) {\n    return process.env.NEXT_PUBLIC_APP_URL;\n  }\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n  return \"\";\n}\n\n/**\n * Get the configured trackable pages.\n */\nexport function getTrackablePages(): ModuleWithPermissions[] {\n  return _clientConfig?.trackablePages ?? [];\n}\n\n/**\n * Get the configured Stripe publishable key.\n */\nexport function getStripePublishableKey(): string | undefined {\n  return _clientConfig?.stripePublishableKey;\n}\n","import { ComponentType } from \"react\";\n\n// Types for injected hooks\nexport interface I18nRouter {\n  push: (href: string) => void;\n  replace: (href: string) => void;\n  back: () => void;\n  forward: () => void;\n  refresh: () => void;\n  prefetch: (href: string) => void;\n}\n\nexport type UseRouterHook = () => I18nRouter;\nexport type UseTranslationsHook = (namespace?: string) => (key: string, values?: Record<string, any>) => string;\nexport type UseLocaleHook = () => string;\n\nexport type UseDateFnsLocaleHook = () => any; // date-fns Locale type\nexport type LinkComponent = ComponentType<{ href: string; children: React.ReactNode; [key: string]: any }>;\n\nexport interface I18nConfig {\n  useRouter: UseRouterHook;\n  useTranslations: UseTranslationsHook;\n  useLocale?: UseLocaleHook;\n  useDateFnsLocale?: UseDateFnsLocaleHook;\n  Link: LinkComponent;\n  usePathname: () => string;\n}\n\n// Private storage\nlet _config: I18nConfig | null = null;\n\n// Configuration function (called by app at startup)\nexport function configureI18n(config: I18nConfig): void {\n  _config = config;\n}\n\n// Hooks for library components to use\nexport function useI18nRouter(): I18nRouter {\n  if (!_config?.useRouter) {\n    throw new Error(\"i18n not configured. Call configureI18n() at app startup.\");\n  }\n  return _config.useRouter();\n}\n\nexport function useI18nTranslations(namespace?: string): (key: string, values?: Record<string, any>) => string {\n  if (!_config?.useTranslations) {\n    // Fallback: return key as-is (safe for server/client)\n    return (key: string) => key;\n  }\n  return _config.useTranslations(namespace);\n}\n\nexport function getI18nLink(): LinkComponent {\n  if (!_config?.Link) {\n    throw new Error(\"i18n not configured. Call configureI18n() at app startup.\");\n  }\n  return _config.Link;\n}\n\nexport function useI18nLocale(): string {\n  if (_config?.useLocale) {\n    return _config.useLocale();\n  }\n  // Fallback to English (safe for server/client)\n  return \"en\";\n}\n\nexport function useI18nDateFnsLocale(): any {\n  if (_config?.useDateFnsLocale) {\n    return _config.useDateFnsLocale();\n  }\n  // Fallback to undefined (Calendar will use default)\n  return undefined;\n}\n","let _useDiscordAuth: boolean = false;\nlet _useGoogleAuth: boolean = false;\nlet _useInternalAuth: boolean = true;\nlet _allowRegistration: boolean = true;\nlet _registrationMode: \"open\" | \"closed\" | \"waitlist\" = \"open\";\n\nexport type RegistrationMode = \"open\" | \"closed\" | \"waitlist\";\n\nexport interface LoginConfig {\n  discordClientId?: string;\n  googleClientId?: string;\n  useInternalAuth?: boolean;\n  allowRegistration?: boolean;\n  registrationMode?: RegistrationMode;\n}\n\nexport function configureLogin(params: LoginConfig): void {\n  _useDiscordAuth = !!params.discordClientId;\n  _useGoogleAuth = !!params.googleClientId;\n  _useInternalAuth = params.useInternalAuth ?? true;\n  _allowRegistration = params.allowRegistration ?? true;\n  _registrationMode = params.registrationMode ?? \"open\";\n}\n\nexport function isDiscordAuthEnabled(): boolean {\n  return _useDiscordAuth;\n}\n\nexport function isGoogleAuthEnabled(): boolean {\n  return _useGoogleAuth;\n}\n\nexport function isInternalAuthEnabled(): boolean {\n  return _useInternalAuth;\n}\n\nexport function isRegistrationAllowed(): boolean {\n  return _allowRegistration;\n}\n\nexport function getRegistrationMode(): RegistrationMode {\n  return _registrationMode;\n}\n","/**\n * Role ID configuration interface\n * Apps provide their role IDs via configureRoles()\n */\nexport interface RoleIdConfig {\n  Administrator: string;\n  CompanyAdministrator: string;\n  [key: string]: string; // Allow additional roles\n}\n\n// Private storage for the injected role IDs\nlet _roleId: RoleIdConfig | null = null;\n\n/**\n * Configure role IDs for the library\n * Call this at app startup to provide role ID constants\n *\n * @example\n * ```typescript\n * import { configureRoles } from \"@carlonicora/nextjs-jsonapi\";\n * import { RoleId } from \"@phlow/shared\";\n *\n * configureRoles(RoleId);\n * ```\n */\nexport function configureRoles(roleId: RoleIdConfig): void {\n  _roleId = roleId;\n}\n\n/**\n * Get configured role IDs\n * @throws Error if roles not configured\n */\nexport function getRoleId(): RoleIdConfig {\n  if (!_roleId) {\n    throw new Error(\"Roles not configured. Call configureRoles() at app startup.\");\n  }\n  return _roleId;\n}\n\n/**\n * Check if roles have been configured\n */\nexport function isRolesConfigured(): boolean {\n  return _roleId !== null;\n}\n","export type QuestionnaireFieldType = \"text\" | \"textarea\" | \"select\" | \"checkbox\";\n\nexport interface QuestionnaireOption {\n  value: string;\n  label: string;\n  description?: string;\n}\n\nexport interface QuestionnaireField {\n  id: string;\n  type: QuestionnaireFieldType;\n  label: string;\n  description?: string;\n  placeholder?: string;\n  required?: boolean;\n  options?: QuestionnaireOption[];\n}\n\nexport interface WaitlistConfig {\n  questionnaire?: QuestionnaireField[];\n  heroTitle?: string;\n  heroSubtitle?: string;\n  heroDescription?: string;\n  benefits?: string[];\n}\n\nlet _waitlistConfig: WaitlistConfig = {};\n\nexport function configureWaitlist(config: WaitlistConfig): void {\n  _waitlistConfig = config;\n}\n\nexport function getWaitlistConfig(): WaitlistConfig {\n  return _waitlistConfig;\n}\n","/**\n * Configuration interface for frontend referral feature.\n */\nexport interface ReferralConfig {\n  /**\n   * Whether the referral feature is enabled.\n   * When false, components render nothing and hooks return null.\n   * @default false\n   */\n  enabled?: boolean;\n\n  /**\n   * Name of the cookie used to store referral codes.\n   * @default \"referral_code\"\n   */\n  cookieName?: string;\n\n  /**\n   * Number of days the referral cookie is valid.\n   * @default 30\n   */\n  cookieDays?: number;\n\n  /**\n   * Query parameter name for referral code in URL.\n   * @default \"ref\"\n   */\n  urlParamName?: string;\n\n  /**\n   * Base URL for referral links.\n   * @default window.location.origin (client-side only)\n   */\n  referralUrlBase?: string;\n\n  /**\n   * Path to append to base URL for referral links.\n   * @default \"/\"\n   */\n  referralPath?: string;\n}\n\n/**\n * Default configuration values\n */\nexport const DEFAULT_REFERRAL_CONFIG: Required<ReferralConfig> = {\n  enabled: false,\n  cookieName: \"referral_code\",\n  cookieDays: 30,\n  urlParamName: \"ref\",\n  referralUrlBase: \"\",\n  referralPath: \"/\",\n};\n\n// Private storage for configuration\nlet _referralConfig: Required<ReferralConfig> = { ...DEFAULT_REFERRAL_CONFIG };\n\n/**\n * Configure referral feature settings.\n * Call this at app startup to enable and configure referral functionality.\n *\n * @example\n * ```typescript\n * import { configureReferral } from \"@carlonicora/nextjs-jsonapi\";\n *\n * configureReferral({\n *   enabled: process.env.NEXT_PUBLIC_REFERRAL_ENABLED === 'true',\n *   cookieDays: 30,\n * });\n * ```\n */\nexport function configureReferral(config: ReferralConfig): void {\n  _referralConfig = { ...DEFAULT_REFERRAL_CONFIG, ...config };\n}\n\n/**\n * Get the current referral configuration.\n * @internal\n */\nexport function getReferralConfig(): Required<ReferralConfig> {\n  return _referralConfig;\n}\n\n/**\n * Check if referral feature is enabled.\n */\nexport function isReferralEnabled(): boolean {\n  return _referralConfig.enabled;\n}\n","export const COMPANY_ADMINISTRATOR_ROLE_ID = \"2e1eee00-6cba-4506-9059-ccd24e4ea5b0\";\n\nexport type PermissionValue = boolean | string;\n\nexport type ActionType = \"read\" | \"create\" | \"update\" | \"delete\";\n\nexport const ACTION_TYPES: ActionType[] = [\"read\", \"create\", \"update\", \"delete\"];\n\n/** The permissions object shape used by both Module and PermissionMapping entities */\nexport type PermissionsMap = {\n  create?: PermissionValue;\n  read?: PermissionValue;\n  update?: PermissionValue;\n  delete?: PermissionValue;\n};\n\n/**\n * Declarative-RBAC matrix types.\n *\n * Mirror of the library types defined in\n * `packages/nestjs-neo4jsonapi/src/foundations/rbac/dsl/types.ts`.\n * Frontend does not import from backend, so the shape is redefined here.\n *\n * A `PermToken` represents a single permission entry:\n *  - `scope: true`  → unconditional (e.g. full read of the module)\n *  - `scope: false` → nothing (rarely used, mostly a placeholder)\n *  - `scope: \"path\"` → scoped by relationship path (e.g. \"orders.account\")\n */\nexport type PermToken = { action: string; scope: boolean | string };\n\n/**\n * A per-module block of the matrix. Always has a `default` row (permissions\n * granted to every role). Additional keys are role IDs → role-specific\n * permission tokens that are unioned with `default` to produce the effective\n * permissions for that role in that module.\n */\nexport type RbacModuleBlock = { default: PermToken[] } & Record<string, PermToken[]>;\n\n/**\n * The full RBAC matrix as served by the dev endpoint `GET /_dev/rbac/matrix`.\n * Keys are module IDs; values are module blocks.\n */\nexport type RbacMatrix = Record<string, RbacModuleBlock>;\n","import { AbstractService, EndpointCreator, HttpMethod, Modules } from \"../../../core\";\nimport type { RbacMatrixModel } from \"./RbacMatrixModel\";\nimport type { RbacMatrix } from \"./RbacTypes\";\n\n/**\n * RbacService — fetches RBAC configuration for the admin UI.\n *\n * Declarative-matrix methods (`fetchMatrix`, `saveMatrix`) talk to the\n * dev-only endpoints added in\n * `packages/nestjs-neo4jsonapi/.../rbac-dev.controller.ts`. The controller\n * speaks JSON:API (singleton resource with `type: \"rbac-matrix\"`, `id:\n * \"singleton\"`), so these methods go through the standard `callApi()`\n * pipeline like every other service in the codebase.\n *\n * The backend only registers these routes when `devMode` is enabled on\n * `RbacModule.register` (see `apps/api/src/features/features.modules.ts`).\n * In production the routes return 404; callers should guard with a dev-mode\n * check.\n */\nexport class RbacService extends AbstractService {\n  /**\n   * Fetch the current RBAC matrix plus each module's known BFS relationship\n   * paths (used by the permission picker as scope suggestions).\n   *\n   * Dev-only endpoint — see class header.\n   */\n  static async fetchMatrix(): Promise<{\n    matrix: RbacMatrix;\n    modulePaths: Record<string, readonly string[]>;\n  }> {\n    const endpoint = new EndpointCreator({ endpoint: Modules.RbacMatrix }).generate();\n\n    const model = await this.callApi<RbacMatrixModel>({\n      type: Modules.RbacMatrix,\n      method: HttpMethod.GET,\n      endpoint,\n    });\n\n    return {\n      matrix: model.matrix ?? {},\n      modulePaths: model.modulePaths ?? {},\n    };\n  }\n\n  /**\n   * Persist a matrix back to the declarative `permissions.ts` file.\n   *\n   * The backend serializes the matrix to formatted TypeScript using the\n   * provided `roleNames` / `moduleNames` lookup tables (so the emitted file\n   * references `RoleId.X` / `ModuleId.X` rather than raw UUIDs) and writes\n   * it to `outputPath` (absolute, or relative to the repo root).\n   *\n   * Dev-only endpoint — see class header.\n   */\n  static async saveMatrix(args: {\n    matrix: RbacMatrix;\n    roleNames: Record<string, string>;\n    moduleNames: Record<string, string>;\n    outputPath: string;\n  }): Promise<{ bytesWritten: number; path: string }> {\n    const endpoint = new EndpointCreator({ endpoint: Modules.RbacMatrix }).generate();\n\n    const model = await this.callApi<RbacMatrixModel>({\n      type: Modules.RbacMatrix,\n      method: HttpMethod.PUT,\n      endpoint,\n      input: args,\n    });\n\n    return {\n      bytesWritten: model.bytesWritten ?? 0,\n      path: model.path ?? \"\",\n    };\n  }\n}\n"]}
+{"version":3,"sources":["/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-JG7MCYCW.js","../src/core/registry/helpStore.ts","../src/client/config.ts","../src/i18n/config.ts","../src/login/config.ts","../src/roles/config.ts","../src/features/waitlist/config/waitlist.config.ts","../src/features/referral/config.ts","../src/features/rbac/data/RbacTypes.ts","../src/features/rbac/data/RbacService.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACA;ACDA,IAAM,iBAAA,kBAAmB,MAAA,CAAO,GAAA,CAAI,4BAA4B,CAAA;AAEhE,IAAM,YAAA,EAAc,UAAA;AAIpB,GAAA,CAAI,WAAA,CAAY,gBAAgB,EAAA,IAAM,KAAA,CAAA,EAAW;AAC/C,EAAA,WAAA,CAAY,gBAAgB,EAAA,EAAI,IAAA;AAClC;AAEO,SAAS,qBAAA,CAAsB,GAAA,EAA2B;AAC/D,EAAA,WAAA,CAAY,gBAAgB,EAAA,EAAI,GAAA;AAClC;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAIT,SAAS,qBAAA,CAAA,EAA+C;AAC7D,EAAA,wBAAQ,WAAA,CAAY,gBAAgB,CAAA,UAAkB,MAAA;AACxD;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;ADChB;AACA;AEnBA,IAAI,cAAA,EAOO,IAAA;AAOJ,SAAS,gBAAA,CAAiB,MAAA,EAQxB;AACP,EAAA,MAAM,EAAE,WAAA,EAAa,GAAG,KAAK,EAAA,EAAI,MAAA;AACjC,EAAA,cAAA,EAAgB,IAAA;AAChB,EAAA,GAAA,CAAI,WAAA,EAAa;AACf,IAAA,qBAAA,CAAsB,WAAW,CAAA;AAAA,EACnC;AAEA,EAAA,GAAA,CAAI,MAAA,CAAO,YAAA,EAAc;AACvB,IAAA,8CAAA,MAAgB,CAAO,YAAY,CAAA;AACnC,IAAA,MAAA,CAAO,YAAA,CAAa,CAAA;AAAA,EACtB;AACF;AAnBgB,qCAAA,gBAAA,EAAA,kBAAA,CAAA;AAyBT,SAAS,qBAAA,CAAsB,MAAA,EAI7B;AACP,EAAA,cAAA,EAAgB,MAAA;AAClB;AANgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAgBT,SAAS,SAAA,CAAA,EAAoB;AAClC,EAAA,GAAA,iBAAI,aAAA,2BAAe,QAAA,EAAQ;AACzB,IAAA,OAAO,aAAA,CAAc,MAAA;AAAA,EACvB;AACA,EAAA,GAAA,CAAI,OAAO,QAAA,IAAY,YAAA,mBAAe,OAAA,qBAAQ,GAAA,6BAAK,qBAAA,EAAqB;AACtE,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,mBAAA;AAAA,EACrB;AACA,EAAA,OAAO,EAAA;AACT;AARgB,qCAAA,SAAA,EAAA,WAAA,CAAA;AAkBT,SAAS,eAAA,CAAA,EAA0B;AACxC,EAAA,GAAA,CAAI,OAAO,QAAA,IAAY,YAAA,mBAAe,OAAA,qBAAQ,GAAA,6BAAK,qBAAA,EAAqB;AACtE,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,mBAAA;AAAA,EACrB;AACA,EAAA,OAAO,EAAA;AACT;AALgB,qCAAA,eAAA,EAAA,iBAAA,CAAA;AAUT,SAAS,SAAA,CAAA,EAAoB;AAClC,EAAA,GAAA,iBAAI,aAAA,6BAAe,QAAA,EAAQ;AACzB,IAAA,OAAO,aAAA,CAAc,MAAA;AAAA,EACvB;AACA,EAAA,GAAA,CAAI,OAAO,QAAA,IAAY,YAAA,mBAAe,OAAA,qBAAQ,GAAA,6BAAK,qBAAA,EAAqB;AACtE,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,mBAAA;AAAA,EACrB;AACA,EAAA,GAAA,CAAI,OAAO,OAAA,IAAW,WAAA,EAAa;AACjC,IAAA,OAAO,MAAA,CAAO,QAAA,CAAS,MAAA;AAAA,EACzB;AACA,EAAA,OAAO,EAAA;AACT;AAXgB,qCAAA,SAAA,EAAA,WAAA,CAAA;AAgBT,SAAS,iBAAA,CAAA,EAA6C;AAC3D,EAAA,wCAAO,aAAA,6BAAe,gBAAA,UAAkB,CAAC,GAAA;AAC3C;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAOT,SAAS,uBAAA,CAAA,EAA8C;AAC5D,EAAA,uBAAO,aAAA,+BAAe,sBAAA;AACxB;AAFgB,qCAAA,uBAAA,EAAA,yBAAA,CAAA;AF/BhB;AACA;AGvDA,IAAI,QAAA,EAA6B,IAAA;AAG1B,SAAS,aAAA,CAAc,MAAA,EAA0B;AACtD,EAAA,QAAA,EAAU,MAAA;AACZ;AAFgB,qCAAA,aAAA,EAAA,eAAA,CAAA;AAKT,SAAS,aAAA,CAAA,EAA4B;AAC1C,EAAA,GAAA,CAAI,iBAAC,OAAA,+BAAS,WAAA,EAAW;AACvB,IAAA,MAAM,IAAI,KAAA,CAAM,2DAA2D,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,OAAA,CAAQ,SAAA,CAAU,CAAA;AAC3B;AALgB,qCAAA,aAAA,EAAA,eAAA,CAAA;AAOT,SAAS,mBAAA,CAAoB,SAAA,EAA2E;AAC7G,EAAA,GAAA,CAAI,iBAAC,OAAA,+BAAS,iBAAA,EAAiB;AAE7B,IAAA,OAAO,CAAC,GAAA,EAAA,GAAgB,GAAA;AAAA,EAC1B;AACA,EAAA,OAAO,OAAA,CAAQ,eAAA,CAAgB,SAAS,CAAA;AAC1C;AANgB,qCAAA,mBAAA,EAAA,qBAAA,CAAA;AAQT,SAAS,WAAA,CAAA,EAA6B;AAC3C,EAAA,GAAA,CAAI,iBAAC,OAAA,+BAAS,MAAA,EAAM;AAClB,IAAA,MAAM,IAAI,KAAA,CAAM,2DAA2D,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,OAAA,CAAQ,IAAA;AACjB;AALgB,qCAAA,WAAA,EAAA,aAAA,CAAA;AAOT,SAAS,aAAA,CAAA,EAAwB;AACtC,EAAA,GAAA,iBAAI,OAAA,+BAAS,WAAA,EAAW;AACtB,IAAA,OAAO,OAAA,CAAQ,SAAA,CAAU,CAAA;AAAA,EAC3B;AAEA,EAAA,OAAO,IAAA;AACT;AANgB,qCAAA,aAAA,EAAA,eAAA,CAAA;AAQT,SAAS,oBAAA,CAAA,EAA4B;AAC1C,EAAA,GAAA,iBAAI,OAAA,+BAAS,kBAAA,EAAkB;AAC7B,IAAA,OAAO,OAAA,CAAQ,gBAAA,CAAiB,CAAA;AAAA,EAClC;AAEA,EAAA,OAAO,KAAA,CAAA;AACT;AANgB,qCAAA,oBAAA,EAAA,sBAAA,CAAA;AH0DhB;AACA;AI9HA,IAAI,gBAAA,EAA2B,KAAA;AAC/B,IAAI,eAAA,EAA0B,KAAA;AAC9B,IAAI,iBAAA,EAA4B,IAAA;AAChC,IAAI,mBAAA,EAA8B,IAAA;AAClC,IAAI,kBAAA,EAAoD,MAAA;AAYjD,SAAS,cAAA,CAAe,MAAA,EAA2B;AACxD,EAAA,gBAAA,EAAkB,CAAC,CAAC,MAAA,CAAO,eAAA;AAC3B,EAAA,eAAA,EAAiB,CAAC,CAAC,MAAA,CAAO,cAAA;AAC1B,EAAA,iBAAA,mBAAmB,MAAA,CAAO,eAAA,UAAmB,MAAA;AAC7C,EAAA,mBAAA,mBAAqB,MAAA,CAAO,iBAAA,UAAqB,MAAA;AACjD,EAAA,kBAAA,mBAAoB,MAAA,CAAO,gBAAA,UAAoB,QAAA;AACjD;AANgB,qCAAA,cAAA,EAAA,gBAAA,CAAA;AAQT,SAAS,oBAAA,CAAA,EAAgC;AAC9C,EAAA,OAAO,eAAA;AACT;AAFgB,qCAAA,oBAAA,EAAA,sBAAA,CAAA;AAIT,SAAS,mBAAA,CAAA,EAA+B;AAC7C,EAAA,OAAO,cAAA;AACT;AAFgB,qCAAA,mBAAA,EAAA,qBAAA,CAAA;AAIT,SAAS,qBAAA,CAAA,EAAiC;AAC/C,EAAA,OAAO,gBAAA;AACT;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAIT,SAAS,qBAAA,CAAA,EAAiC;AAC/C,EAAA,OAAO,kBAAA;AACT;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAIT,SAAS,mBAAA,CAAA,EAAwC;AACtD,EAAA,OAAO,iBAAA;AACT;AAFgB,qCAAA,mBAAA,EAAA,qBAAA,CAAA;AJwHhB;AACA;AKtJA,IAAI,QAAA,EAA+B,IAAA;AAc5B,SAAS,cAAA,CAAe,MAAA,EAA4B;AACzD,EAAA,QAAA,EAAU,MAAA;AACZ;AAFgB,qCAAA,cAAA,EAAA,gBAAA,CAAA;AAQT,SAAS,SAAA,CAAA,EAA0B;AACxC,EAAA,GAAA,CAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,KAAA,CAAM,6DAA6D,CAAA;AAAA,EAC/E;AACA,EAAA,OAAO,OAAA;AACT;AALgB,qCAAA,SAAA,EAAA,WAAA,CAAA;AAUT,SAAS,iBAAA,CAAA,EAA6B;AAC3C,EAAA,OAAO,QAAA,IAAY,IAAA;AACrB;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;ALuIhB;AACA;AMzJA,IAAI,gBAAA,EAAkC,CAAC,CAAA;AAEhC,SAAS,iBAAA,CAAkB,MAAA,EAA8B;AAC9D,EAAA,gBAAA,EAAkB,MAAA;AACpB;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAIT,SAAS,iBAAA,CAAA,EAAoC;AAClD,EAAA,OAAO,eAAA;AACT;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AN6JhB;AACA;AOjJO,IAAM,wBAAA,EAAoD;AAAA,EAC/D,OAAA,EAAS,KAAA;AAAA,EACT,UAAA,EAAY,eAAA;AAAA,EACZ,UAAA,EAAY,EAAA;AAAA,EACZ,YAAA,EAAc,KAAA;AAAA,EACd,eAAA,EAAiB,EAAA;AAAA,EACjB,YAAA,EAAc;AAChB,CAAA;AAGA,IAAI,gBAAA,EAA4C,EAAE,GAAG,wBAAwB,CAAA;AAgBtE,SAAS,iBAAA,CAAkB,MAAA,EAA8B;AAC9D,EAAA,gBAAA,EAAkB,EAAE,GAAG,uBAAA,EAAyB,GAAG,OAAO,CAAA;AAC5D;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAQT,SAAS,iBAAA,CAAA,EAA8C;AAC5D,EAAA,OAAO,eAAA;AACT;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAOT,SAAS,iBAAA,CAAA,EAA6B;AAC3C,EAAA,OAAO,eAAA,CAAgB,OAAA;AACzB;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AP8HhB;AACA;AQrNO,IAAM,8BAAA,EAAgC,sCAAA;AAMtC,IAAM,aAAA,EAA6B,CAAC,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU,QAAQ,CAAA;ARkN/E;AACA;AStMO,IAAM,YAAA,EAAN,MAAA,QAA0B,iCAAgB;AAAA,EAnBjD,OAmBiD;AAAA,IAAA,qCAAA,IAAA,EAAA,aAAA,CAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO/C,OAAA,MAAa,WAAA,CAAA,EAGV;AACD,IAAA,MAAM,SAAA,EAAW,IAAI,qCAAA,CAAgB,EAAE,QAAA,EAAU,wBAAA,CAAQ,WAAW,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAEhF,IAAA,MAAM,MAAA,EAAQ,MAAM,IAAA,CAAK,OAAA,CAAyB;AAAA,MAChD,IAAA,EAAM,wBAAA,CAAQ,UAAA;AAAA,MACd,MAAA,EAAA,eAAA;AAAA,MACA;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO;AAAA,MACL,MAAA,mBAAQ,KAAA,CAAM,MAAA,UAAU,CAAC,GAAA;AAAA,MACzB,WAAA,mBAAa,KAAA,CAAM,WAAA,UAAe,CAAC;AAAA,IACrC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAA,MAAa,UAAA,CAAW,IAAA,EAK4B;AAClD,IAAA,MAAM,SAAA,EAAW,IAAI,qCAAA,CAAgB,EAAE,QAAA,EAAU,wBAAA,CAAQ,WAAW,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAEhF,IAAA,MAAM,MAAA,EAAQ,MAAM,IAAA,CAAK,OAAA,CAAyB;AAAA,MAChD,IAAA,EAAM,wBAAA,CAAQ,UAAA;AAAA,MACd,MAAA,EAAA,eAAA;AAAA,MACA,QAAA;AAAA,MACA,KAAA,EAAO;AAAA,IACT,CAAC,CAAA;AAED,IAAA,OAAO;AAAA,MACL,YAAA,mBAAc,KAAA,CAAM,YAAA,UAAgB,GAAA;AAAA,MACpC,IAAA,mBAAM,KAAA,CAAM,IAAA,UAAQ;AAAA,IACtB,CAAA;AAAA,EACF;AACF,CAAA;AT8LA;AACA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,g5CAAC","file":"/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-JG7MCYCW.js","sourcesContent":[null,"/**\n * Centralized help-content store accessible from client and server contexts.\n * Uses a globalThis Symbol key to persist across HMR/Turbopack reloads and to\n * bridge between the client-side `configureJsonApi` (in `client/config.ts`)\n * and the HelpProvider context. Holds the brand-only HelpContentConfig.\n *\n * NO external dependencies to avoid circular imports.\n *\n * Pattern mirrors `bootstrapStore.ts`.\n */\n\nconst HELP_CONTENT_KEY = Symbol.for(\"nextjs-jsonapi:helpContent\");\n\nconst globalStore = globalThis as unknown as {\n  [HELP_CONTENT_KEY]?: unknown | null;\n};\n\nif (globalStore[HELP_CONTENT_KEY] === undefined) {\n  globalStore[HELP_CONTENT_KEY] = null;\n}\n\nexport function _setStaticHelpContent(cfg: unknown | null): void {\n  globalStore[HELP_CONTENT_KEY] = cfg;\n}\n\nexport function _getStaticHelpContent<T = unknown>(): T | null {\n  return (globalStore[HELP_CONTENT_KEY] as T | null) ?? null;\n}\n","\"use client\";\n\nimport { ModuleWithPermissions } from \"../permissions/types\";\nimport { setBootstrapper } from \"../core/registry/bootstrapStore\";\nimport { _setStaticHelpContent } from \"../core/registry/helpStore\";\nimport type { HelpContentConfig } from \"../features/help/interfaces/help-content-config.interface\";\n\n// Config storage for client-side contexts\nlet _clientConfig: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n  stripePublishableKey?: string;\n} | null = null;\n\n/**\n * Configure the JSON:API client. This is the main configuration function.\n * This is typically called during app initialization.\n * @param config.helpContent - Optional help-content config (brand only). Forwarded to the help feature's globalThis-backed store; not stored on the client config.\n */\nexport function configureJsonApi(config: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n  stripePublishableKey?: string;\n  helpContent?: HelpContentConfig;\n}): void {\n  const { helpContent, ...rest } = config;\n  _clientConfig = rest;\n  if (helpContent) {\n    _setStaticHelpContent(helpContent);\n  }\n  // Register and call bootstrapper to register all modules\n  if (config.bootstrapper) {\n    setBootstrapper(config.bootstrapper);\n    config.bootstrapper();\n  }\n}\n\n/**\n * Configure the client config. This is typically called during app initialization.\n * @deprecated Use configureJsonApi instead\n */\nexport function configureClientConfig(config: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n}): void {\n  _clientConfig = config;\n}\n\n/**\n * Get the configured API URL.\n *\n * This may resolve to an internal/private host (e.g. a docker-network\n * hostname) when configured to do so for SSR fetches. Do NOT use this for\n * URLs that are rendered into HTML and followed by the browser — use\n * `getPublicApiUrl()` instead.\n */\nexport function getApiUrl(): string {\n  if (_clientConfig?.apiUrl) {\n    return _clientConfig.apiUrl;\n  }\n  if (typeof process !== \"undefined\" && process.env?.NEXT_PUBLIC_API_URL) {\n    return process.env.NEXT_PUBLIC_API_URL;\n  }\n  return \"\";\n}\n\n/**\n * Get the public-facing API URL.\n *\n * Always sourced from `NEXT_PUBLIC_API_URL` so it is identical on server\n * and client, and reachable from the user's browser. Use for any URL that\n * gets rendered into HTML the browser will navigate to (links, redirects,\n * OAuth hrefs).\n */\nexport function getPublicApiUrl(): string {\n  if (typeof process !== \"undefined\" && process.env?.NEXT_PUBLIC_API_URL) {\n    return process.env.NEXT_PUBLIC_API_URL;\n  }\n  return \"\";\n}\n\n/**\n * Get the configured app URL.\n */\nexport function getAppUrl(): string {\n  if (_clientConfig?.appUrl) {\n    return _clientConfig.appUrl;\n  }\n  if (typeof process !== \"undefined\" && process.env?.NEXT_PUBLIC_APP_URL) {\n    return process.env.NEXT_PUBLIC_APP_URL;\n  }\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n  return \"\";\n}\n\n/**\n * Get the configured trackable pages.\n */\nexport function getTrackablePages(): ModuleWithPermissions[] {\n  return _clientConfig?.trackablePages ?? [];\n}\n\n/**\n * Get the configured Stripe publishable key.\n */\nexport function getStripePublishableKey(): string | undefined {\n  return _clientConfig?.stripePublishableKey;\n}\n","import { ComponentType } from \"react\";\n\n// Types for injected hooks\nexport interface I18nRouter {\n  push: (href: string) => void;\n  replace: (href: string) => void;\n  back: () => void;\n  forward: () => void;\n  refresh: () => void;\n  prefetch: (href: string) => void;\n}\n\nexport type UseRouterHook = () => I18nRouter;\nexport type UseTranslationsHook = (namespace?: string) => (key: string, values?: Record<string, any>) => string;\nexport type UseLocaleHook = () => string;\n\nexport type UseDateFnsLocaleHook = () => any; // date-fns Locale type\nexport type LinkComponent = ComponentType<{ href: string; children: React.ReactNode; [key: string]: any }>;\n\nexport interface I18nConfig {\n  useRouter: UseRouterHook;\n  useTranslations: UseTranslationsHook;\n  useLocale?: UseLocaleHook;\n  useDateFnsLocale?: UseDateFnsLocaleHook;\n  Link: LinkComponent;\n  usePathname: () => string;\n}\n\n// Private storage\nlet _config: I18nConfig | null = null;\n\n// Configuration function (called by app at startup)\nexport function configureI18n(config: I18nConfig): void {\n  _config = config;\n}\n\n// Hooks for library components to use\nexport function useI18nRouter(): I18nRouter {\n  if (!_config?.useRouter) {\n    throw new Error(\"i18n not configured. Call configureI18n() at app startup.\");\n  }\n  return _config.useRouter();\n}\n\nexport function useI18nTranslations(namespace?: string): (key: string, values?: Record<string, any>) => string {\n  if (!_config?.useTranslations) {\n    // Fallback: return key as-is (safe for server/client)\n    return (key: string) => key;\n  }\n  return _config.useTranslations(namespace);\n}\n\nexport function getI18nLink(): LinkComponent {\n  if (!_config?.Link) {\n    throw new Error(\"i18n not configured. Call configureI18n() at app startup.\");\n  }\n  return _config.Link;\n}\n\nexport function useI18nLocale(): string {\n  if (_config?.useLocale) {\n    return _config.useLocale();\n  }\n  // Fallback to English (safe for server/client)\n  return \"en\";\n}\n\nexport function useI18nDateFnsLocale(): any {\n  if (_config?.useDateFnsLocale) {\n    return _config.useDateFnsLocale();\n  }\n  // Fallback to undefined (Calendar will use default)\n  return undefined;\n}\n","let _useDiscordAuth: boolean = false;\nlet _useGoogleAuth: boolean = false;\nlet _useInternalAuth: boolean = true;\nlet _allowRegistration: boolean = true;\nlet _registrationMode: \"open\" | \"closed\" | \"waitlist\" = \"open\";\n\nexport type RegistrationMode = \"open\" | \"closed\" | \"waitlist\";\n\nexport interface LoginConfig {\n  discordClientId?: string;\n  googleClientId?: string;\n  useInternalAuth?: boolean;\n  allowRegistration?: boolean;\n  registrationMode?: RegistrationMode;\n}\n\nexport function configureLogin(params: LoginConfig): void {\n  _useDiscordAuth = !!params.discordClientId;\n  _useGoogleAuth = !!params.googleClientId;\n  _useInternalAuth = params.useInternalAuth ?? true;\n  _allowRegistration = params.allowRegistration ?? true;\n  _registrationMode = params.registrationMode ?? \"open\";\n}\n\nexport function isDiscordAuthEnabled(): boolean {\n  return _useDiscordAuth;\n}\n\nexport function isGoogleAuthEnabled(): boolean {\n  return _useGoogleAuth;\n}\n\nexport function isInternalAuthEnabled(): boolean {\n  return _useInternalAuth;\n}\n\nexport function isRegistrationAllowed(): boolean {\n  return _allowRegistration;\n}\n\nexport function getRegistrationMode(): RegistrationMode {\n  return _registrationMode;\n}\n","/**\n * Role ID configuration interface\n * Apps provide their role IDs via configureRoles()\n */\nexport interface RoleIdConfig {\n  Administrator: string;\n  CompanyAdministrator: string;\n  [key: string]: string; // Allow additional roles\n}\n\n// Private storage for the injected role IDs\nlet _roleId: RoleIdConfig | null = null;\n\n/**\n * Configure role IDs for the library\n * Call this at app startup to provide role ID constants\n *\n * @example\n * ```typescript\n * import { configureRoles } from \"@carlonicora/nextjs-jsonapi\";\n * import { RoleId } from \"@phlow/shared\";\n *\n * configureRoles(RoleId);\n * ```\n */\nexport function configureRoles(roleId: RoleIdConfig): void {\n  _roleId = roleId;\n}\n\n/**\n * Get configured role IDs\n * @throws Error if roles not configured\n */\nexport function getRoleId(): RoleIdConfig {\n  if (!_roleId) {\n    throw new Error(\"Roles not configured. Call configureRoles() at app startup.\");\n  }\n  return _roleId;\n}\n\n/**\n * Check if roles have been configured\n */\nexport function isRolesConfigured(): boolean {\n  return _roleId !== null;\n}\n","export type QuestionnaireFieldType = \"text\" | \"textarea\" | \"select\" | \"checkbox\";\n\nexport interface QuestionnaireOption {\n  value: string;\n  label: string;\n  description?: string;\n}\n\nexport interface QuestionnaireField {\n  id: string;\n  type: QuestionnaireFieldType;\n  label: string;\n  description?: string;\n  placeholder?: string;\n  required?: boolean;\n  options?: QuestionnaireOption[];\n}\n\nexport interface WaitlistConfig {\n  questionnaire?: QuestionnaireField[];\n  heroTitle?: string;\n  heroSubtitle?: string;\n  heroDescription?: string;\n  benefits?: string[];\n}\n\nlet _waitlistConfig: WaitlistConfig = {};\n\nexport function configureWaitlist(config: WaitlistConfig): void {\n  _waitlistConfig = config;\n}\n\nexport function getWaitlistConfig(): WaitlistConfig {\n  return _waitlistConfig;\n}\n","/**\n * Configuration interface for frontend referral feature.\n */\nexport interface ReferralConfig {\n  /**\n   * Whether the referral feature is enabled.\n   * When false, components render nothing and hooks return null.\n   * @default false\n   */\n  enabled?: boolean;\n\n  /**\n   * Name of the cookie used to store referral codes.\n   * @default \"referral_code\"\n   */\n  cookieName?: string;\n\n  /**\n   * Number of days the referral cookie is valid.\n   * @default 30\n   */\n  cookieDays?: number;\n\n  /**\n   * Query parameter name for referral code in URL.\n   * @default \"ref\"\n   */\n  urlParamName?: string;\n\n  /**\n   * Base URL for referral links.\n   * @default window.location.origin (client-side only)\n   */\n  referralUrlBase?: string;\n\n  /**\n   * Path to append to base URL for referral links.\n   * @default \"/\"\n   */\n  referralPath?: string;\n}\n\n/**\n * Default configuration values\n */\nexport const DEFAULT_REFERRAL_CONFIG: Required<ReferralConfig> = {\n  enabled: false,\n  cookieName: \"referral_code\",\n  cookieDays: 30,\n  urlParamName: \"ref\",\n  referralUrlBase: \"\",\n  referralPath: \"/\",\n};\n\n// Private storage for configuration\nlet _referralConfig: Required<ReferralConfig> = { ...DEFAULT_REFERRAL_CONFIG };\n\n/**\n * Configure referral feature settings.\n * Call this at app startup to enable and configure referral functionality.\n *\n * @example\n * ```typescript\n * import { configureReferral } from \"@carlonicora/nextjs-jsonapi\";\n *\n * configureReferral({\n *   enabled: process.env.NEXT_PUBLIC_REFERRAL_ENABLED === 'true',\n *   cookieDays: 30,\n * });\n * ```\n */\nexport function configureReferral(config: ReferralConfig): void {\n  _referralConfig = { ...DEFAULT_REFERRAL_CONFIG, ...config };\n}\n\n/**\n * Get the current referral configuration.\n * @internal\n */\nexport function getReferralConfig(): Required<ReferralConfig> {\n  return _referralConfig;\n}\n\n/**\n * Check if referral feature is enabled.\n */\nexport function isReferralEnabled(): boolean {\n  return _referralConfig.enabled;\n}\n","export const COMPANY_ADMINISTRATOR_ROLE_ID = \"2e1eee00-6cba-4506-9059-ccd24e4ea5b0\";\n\nexport type PermissionValue = boolean | string;\n\nexport type ActionType = \"read\" | \"create\" | \"update\" | \"delete\";\n\nexport const ACTION_TYPES: ActionType[] = [\"read\", \"create\", \"update\", \"delete\"];\n\n/** The permissions object shape used by both Module and PermissionMapping entities */\nexport type PermissionsMap = {\n  create?: PermissionValue;\n  read?: PermissionValue;\n  update?: PermissionValue;\n  delete?: PermissionValue;\n};\n\n/**\n * Declarative-RBAC matrix types.\n *\n * Mirror of the library types defined in\n * `packages/nestjs-neo4jsonapi/src/foundations/rbac/dsl/types.ts`.\n * Frontend does not import from backend, so the shape is redefined here.\n *\n * A `PermToken` represents a single permission entry:\n *  - `scope: true`  → unconditional (e.g. full read of the module)\n *  - `scope: false` → nothing (rarely used, mostly a placeholder)\n *  - `scope: \"path\"` → scoped by relationship path (e.g. \"orders.account\")\n */\nexport type PermToken = { action: string; scope: boolean | string };\n\n/**\n * A per-module block of the matrix. Always has a `default` row (permissions\n * granted to every role). Additional keys are role IDs → role-specific\n * permission tokens that are unioned with `default` to produce the effective\n * permissions for that role in that module.\n */\nexport type RbacModuleBlock = { default: PermToken[] } & Record<string, PermToken[]>;\n\n/**\n * The full RBAC matrix as served by the dev endpoint `GET /_dev/rbac/matrix`.\n * Keys are module IDs; values are module blocks.\n */\nexport type RbacMatrix = Record<string, RbacModuleBlock>;\n","import { AbstractService, EndpointCreator, HttpMethod, Modules } from \"../../../core\";\nimport type { RbacMatrixModel } from \"./RbacMatrixModel\";\nimport type { RbacMatrix } from \"./RbacTypes\";\n\n/**\n * RbacService — fetches RBAC configuration for the admin UI.\n *\n * Declarative-matrix methods (`fetchMatrix`, `saveMatrix`) talk to the\n * dev-only endpoints added in\n * `packages/nestjs-neo4jsonapi/.../rbac-dev.controller.ts`. The controller\n * speaks JSON:API (singleton resource with `type: \"rbac-matrix\"`, `id:\n * \"singleton\"`), so these methods go through the standard `callApi()`\n * pipeline like every other service in the codebase.\n *\n * The backend only registers these routes when `devMode` is enabled on\n * `RbacModule.register` (see `apps/api/src/features/features.modules.ts`).\n * In production the routes return 404; callers should guard with a dev-mode\n * check.\n */\nexport class RbacService extends AbstractService {\n  /**\n   * Fetch the current RBAC matrix plus each module's known BFS relationship\n   * paths (used by the permission picker as scope suggestions).\n   *\n   * Dev-only endpoint — see class header.\n   */\n  static async fetchMatrix(): Promise<{\n    matrix: RbacMatrix;\n    modulePaths: Record<string, readonly string[]>;\n  }> {\n    const endpoint = new EndpointCreator({ endpoint: Modules.RbacMatrix }).generate();\n\n    const model = await this.callApi<RbacMatrixModel>({\n      type: Modules.RbacMatrix,\n      method: HttpMethod.GET,\n      endpoint,\n    });\n\n    return {\n      matrix: model.matrix ?? {},\n      modulePaths: model.modulePaths ?? {},\n    };\n  }\n\n  /**\n   * Persist a matrix back to the declarative `permissions.ts` file.\n   *\n   * The backend serializes the matrix to formatted TypeScript using the\n   * provided `roleNames` / `moduleNames` lookup tables (so the emitted file\n   * references `RoleId.X` / `ModuleId.X` rather than raw UUIDs) and writes\n   * it to `outputPath` (absolute, or relative to the repo root).\n   *\n   * Dev-only endpoint — see class header.\n   */\n  static async saveMatrix(args: {\n    matrix: RbacMatrix;\n    roleNames: Record<string, string>;\n    moduleNames: Record<string, string>;\n    outputPath: string;\n  }): Promise<{ bytesWritten: number; path: string }> {\n    const endpoint = new EndpointCreator({ endpoint: Modules.RbacMatrix }).generate();\n\n    const model = await this.callApi<RbacMatrixModel>({\n      type: Modules.RbacMatrix,\n      method: HttpMethod.PUT,\n      endpoint,\n      input: args,\n    });\n\n    return {\n      bytesWritten: model.bytesWritten ?? 0,\n      path: model.path ?? \"\",\n    };\n  }\n}\n"]}

package/dist/{chunk-HN5ED7OF.mjs → chunk-MAWTFEY3.mjs}

@@ -2,7 +2,7 @@ import {
   AbstractService,
   EndpointCreator,
   Modules
-} from "./chunk-BIL2WQEV.mjs";
+} from "./chunk-P5TMD7GK.mjs";
 import {
   setBootstrapper
 } from "./chunk-Z2CB63VG.mjs";
@@ -296,4 +296,4 @@ export {
   ACTION_TYPES,
   RbacService
 };
-//# sourceMappingURL=chunk-HN5ED7OF.mjs.map
+//# sourceMappingURL=chunk-MAWTFEY3.mjs.map

package/dist/{chunk-BIL2WQEV.mjs → chunk-P5TMD7GK.mjs}

@@ -5637,6 +5637,8 @@ var Assistant = class extends AbstractApiData {
   _title;
   _messageCount;
   _engine;
+  _boundContentType;
+  _boundContentId;
   get title() {
     return this._title ?? "";
   }
@@ -5646,6 +5648,12 @@ var Assistant = class extends AbstractApiData {
   get engine() {
     return this._engine;
   }
+  get boundContentType() {
+    return this._boundContentType;
+  }
+  get boundContentId() {
+    return this._boundContentId;
+  }
   rehydrate(data) {
     super.rehydrate(data);
     this._title = data.jsonApi.attributes?.title;
@@ -5653,6 +5661,10 @@ var Assistant = class extends AbstractApiData {
     const fromMeta = data.jsonApi.meta?.messageCount;
     const fromAttrs = data.jsonApi.attributes?.messageCount;
     this._messageCount = typeof fromMeta === "number" ? fromMeta : typeof fromAttrs === "number" ? fromAttrs : 0;
+    const contentLinkage = data.jsonApi.relationships?.content?.data;
+    const boundContent = Array.isArray(contentLinkage) ? contentLinkage[0] : contentLinkage;
+    this._boundContentType = boundContent?.type;
+    this._boundContentId = boundContent?.id;
     return this;
   }
   createJsonApi(data) {
@@ -5660,11 +5672,20 @@ var Assistant = class extends AbstractApiData {
       data: {
         type: Modules.Assistant.name,
         attributes: {
-          content: data.firstMessage,
+          // narr8 convention for BlockNote-backed fields: the document travels
+          // as a JSON string in the entity's own string attribute, exactly as
+          // Npc.description does (`JSON.stringify` out, `JSON.parse` back).
+          // The server detects the shape and derives the stored markdown.
+          content: data.contentBlocks !== void 0 ? JSON.stringify(data.contentBlocks) : data.firstMessage,
           ...data.title !== void 0 ? { title: data.title } : {},
           ...data.howToMode !== void 0 ? { howToMode: data.howToMode } : {},
           ...data.limitToHowToId !== void 0 ? { limitToHowToId: data.limitToHowToId } : {}
-        }
+        },
+        ...data.boundContent !== void 0 ? {
+          relationships: {
+            content: { data: { type: data.boundContent.type, id: data.boundContent.id } }
+          }
+        } : {}
       },
       included: []
     };
@@ -5803,7 +5824,11 @@ var AssistantMessage = class _AssistantMessage extends AbstractApiData {
       data: {
         type: Modules.AssistantMessage.name,
         attributes: {
-          content: params.content,
+          // narr8 convention for BlockNote-backed fields: the document travels
+          // as a JSON string in the field's own string attribute (see
+          // Npc.description). The server detects the shape and derives the
+          // stored markdown from it.
+          content: params.contentBlocks !== void 0 ? JSON.stringify(params.contentBlocks) : params.content,
           ...params.howToMode !== void 0 ? { howToMode: params.howToMode } : {},
           ...params.limitToHowToId !== void 0 ? { limitToHowToId: params.limitToHowToId } : {}
         }
@@ -5844,9 +5869,16 @@ var AssistantService = class extends AbstractService {
       endpoint: new EndpointCreator({ endpoint: Modules.Assistant, id: params.id }).generate()
     });
   }
+  /**
+   * Lists threads. `boundType`/`boundId` narrow the list to the threads bound
+   * to one resource (e.g. a campaign), so a scoped surface never shows the
+   * user's unrelated threads.
+   */
   static async findMany(params = {}) {
     const endpoint = new EndpointCreator({ endpoint: Modules.Assistant });
     if (params.fetchAll) endpoint.addAdditionalParam("fetchAll", "true");
+    if (params.boundType) endpoint.addAdditionalParam("boundType", params.boundType);
+    if (params.boundId) endpoint.addAdditionalParam("boundId", params.boundId);
     return this.callApi({
       type: Modules.Assistant,
       method: "GET" /* GET */,
@@ -5895,7 +5927,8 @@ var AssistantService = class extends AbstractService {
       input: message.createAppendMessageJsonApi({
         content: params.content,
         howToMode: params.howToMode,
-        limitToHowToId: params.limitToHowToId
+        limitToHowToId: params.limitToHowToId,
+        contentBlocks: params.contentBlocks
       }),
       overridesJsonApiCreation: true
     });
@@ -5916,7 +5949,10 @@ var AssistantService = class extends AbstractService {
         id: params.assistantId,
         childEndpoint: Modules.AssistantMessage
       }).generate(),
-      input: message.createAppendMessageJsonApi({ content: params.content }),
+      input: message.createAppendMessageJsonApi({
+        content: params.content,
+        contentBlocks: params.contentBlocks
+      }),
       overridesJsonApiCreation: true
     });
   }
@@ -6024,6 +6060,119 @@ var AssistantMessageService = class extends AbstractService {
   }
 };
 
+// src/features/assistant-action/AssistantActionModule.ts
+import { ShieldCheckIcon } from "lucide-react";
+
+// src/features/assistant-action/data/AssistantAction.ts
+var AssistantAction = class extends AbstractApiData {
+  static {
+    __name(this, "AssistantAction");
+  }
+  _status;
+  _toolName;
+  _summary;
+  _resolvedAt;
+  _expiresAt;
+  get status() {
+    return this._status ?? "expired";
+  }
+  get toolName() {
+    return this._toolName ?? "";
+  }
+  get summary() {
+    return this._summary ?? "";
+  }
+  get resolvedAt() {
+    return this._resolvedAt;
+  }
+  get expiresAt() {
+    return this._expiresAt;
+  }
+  rehydrate(data) {
+    super.rehydrate(data);
+    this._status = data.jsonApi.attributes.status;
+    this._toolName = data.jsonApi.attributes.toolName;
+    this._summary = data.jsonApi.attributes.summary;
+    this._resolvedAt = data.jsonApi.attributes.resolvedAt ? new Date(data.jsonApi.attributes.resolvedAt) : void 0;
+    this._expiresAt = data.jsonApi.attributes.expiresAt ? new Date(data.jsonApi.attributes.expiresAt) : void 0;
+    return this;
+  }
+  /**
+   * Minimal payload (id only): the frontend never POSTs assistant actions —
+   * approve/deny are body-less POSTs handled by AssistantActionService.
+   */
+  createJsonApi(data) {
+    return {
+      data: {
+        type: Modules.AssistantAction.name,
+        id: data.id,
+        attributes: {}
+      },
+      included: []
+    };
+  }
+};
+
+// src/features/assistant-action/AssistantActionModule.ts
+var AssistantActionModule = /* @__PURE__ */ __name((factory) => factory({
+  pageUrl: "/assistant-actions",
+  name: "assistant-actions",
+  model: AssistantAction,
+  identifier: ["summary"],
+  moduleId: "e3c27517-bac0-43cb-adff-cc20c4210c12",
+  icon: ShieldCheckIcon
+}), "AssistantActionModule");
+
+// src/features/assistant-action/data/AssistantActionService.ts
+var AssistantActionService = class extends AbstractService {
+  static {
+    __name(this, "AssistantActionService");
+  }
+  /**
+   * GET single assistant action by ID
+   */
+  static async findOne(params) {
+    return this.callApi({
+      type: Modules.AssistantAction,
+      method: "GET" /* GET */,
+      endpoint: new EndpointCreator({
+        endpoint: Modules.AssistantAction,
+        id: params.id
+      }).generate()
+    });
+  }
+  /**
+   * POST (body-less) approve action — resumes the paused run and
+   * returns the resumed assistant message.
+   */
+  static async approve(params) {
+    return this.callApi({
+      type: Modules.AssistantMessage,
+      method: "POST" /* POST */,
+      endpoint: new EndpointCreator({
+        endpoint: Modules.AssistantAction,
+        id: params.id,
+        childEndpoint: "approve"
+      }).generate()
+    });
+  }
+  /**
+   * POST (body-less) deny action — resumes the paused run with a denial and
+   * returns the resumed assistant message.
+   */
+  static async deny(params) {
+    return this.callApi({
+      type: Modules.AssistantMessage,
+      method: "POST" /* POST */,
+      endpoint: new EndpointCreator({
+        endpoint: Modules.AssistantAction,
+        id: params.id,
+        childEndpoint: "deny"
+      }).generate()
+    });
+  }
+};
+
 // src/features/chunk/ChunkModule.ts
 import { FileTextIcon } from "lucide-react";
 
@@ -8158,6 +8307,9 @@ export {
   AssistantService,
   AssistantMessageModule,
   AssistantMessageService,
+  AssistantAction,
+  AssistantActionModule,
+  AssistantActionService,
   Chunk,
   ChunkModule,
   Feature,
@@ -8215,4 +8367,4 @@ export {
   AuditLogService,
   AuditLogModule
 };
-//# sourceMappingURL=chunk-BIL2WQEV.mjs.map
+//# sourceMappingURL=chunk-P5TMD7GK.mjs.map