@carlonicora/nextjs-jsonapi 3.24.2 → 3.25.0

package/dist/server/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/cache.ts","../../src/server/ServerSession.ts","../../src/server/JsonApiServer.ts"],"sourcesContent":["// Server-only utilities (NOT server actions - these cannot be called from client components)\n\nimport { revalidateTag } from \"next/cache\";\n\nexport type CacheProfile = \"seconds\" | \"minutes\" | \"hours\" | \"days\" | \"weeks\" | \"max\" | \"default\";\n\n/**\n * Revalidate a cache tag to invalidate cached data.\n * Next.js 16+ requires a profile parameter.\n *\n * @param tag - The cache tag to invalidate\n * @param profile - The cache profile (defaults to \"max\" for immediate invalidation)\n */\nexport async function invalidateCacheTag(tag: string, profile: CacheProfile = \"max\"): Promise<void> {\n  revalidateTag(tag, profile);\n}\n\n/**\n * Revalidate multiple cache tags.\n *\n * @param tags - Array of cache tags to invalidate\n * @param profile - The cache profile (defaults to \"max\" for immediate invalidation)\n */\nexport async function invalidateCacheTags(tags: string[], profile: CacheProfile = \"max\"): Promise<void> {\n  for (const tag of tags) {\n    revalidateTag(tag, profile);\n  }\n}\n","import { cookies } from \"next/headers\";\nimport { redirect } from \"next/navigation\";\nimport { ungzip } from \"pako\";\nimport { Action, checkPermissionsFromServer, ModuleWithPermissions } from \"../permissions\";\n\nexport class ServerSession {\n  static async isLogged() {\n    const cookieStore = await cookies();\n    const token = cookieStore.get(\"token\");\n\n    if (!token || !token.value) return false;\n    return true;\n  }\n\n  static async companyId() {\n    const cookieStore = await cookies();\n    return cookieStore.get(\"companyId\")?.value ?? \"\";\n  }\n\n  static async userId() {\n    const cookieStore = await cookies();\n    return cookieStore.get(\"userId\")?.value ?? \"\";\n  }\n\n  static async checkPermission<M extends ModuleWithPermissions>(params: { module: M; action: Action; data?: any }) {\n    if (!(await this.hasPermissionToModule(params))) redirect(`/401`);\n  }\n\n  static async hasRole(roleId: string): Promise<boolean> {\n    const cookieStore = await cookies();\n    const roles = cookieStore.get(\"roles\")?.value;\n\n    if (!roles || !roles.includes(roleId)) return false;\n\n    return true;\n  }\n\n  static async hasFeature(featureId: string): Promise<boolean> {\n    const cookieStore = await cookies();\n    const features = cookieStore.get(\"features\")?.value;\n\n    if (!features || !features.includes(featureId)) return false;\n\n    return true;\n  }\n\n  static async hasPermissionToModule<M extends ModuleWithPermissions>(params: {\n    module: M;\n    action: Action;\n    data?: any;\n  }): Promise<boolean> {\n    const cookieStore = await cookies();\n\n    if (params.module.feature) {\n      const features = cookieStore.get(\"features\")?.value;\n\n      if (features && !features.includes(params.module.feature)) return false;\n    }\n\n    const rawModules = cookieStore.get(\"modules\")?.value;\n    if (!rawModules) return false;\n\n    const modules: {\n      id: string;\n      permissions: {\n        create: boolean | string;\n        read: boolean | string;\n        update: boolean | string;\n        delete: boolean | string;\n      };\n    }[] = JSON.parse(ungzip(Buffer.from(rawModules, \"base64\"), { toText: true }));\n\n    const selectedModule = modules.find((module) => module.id === params.module.moduleId);\n\n    return checkPermissionsFromServer({\n      module: params.module,\n      action: params.action,\n      data: params.data,\n      userId: await this.userId(),\n      selectedModule: selectedModule,\n    });\n\n    // if (!selectedModule) return false;\n\n    // if (!selectedModule.permissions[params.action]) return false;\n    // if (typeof selectedModule.permissions[params.action] === \"boolean\")\n    //   return selectedModule.permissions[params.action] as boolean;\n\n    // if (!params.data) return false;\n\n    // return params.data[selectedModule.permissions[params.action] as string] === this.userId;\n  }\n}\n","// Server-only utilities (NOT server actions - these cannot be called from client components)\n\nimport { ENV } from \"../core/env\";\nimport { JsonApiDataFactory } from \"../core/factories/JsonApiDataFactory\";\nimport { ApiRequestDataTypeInterface } from \"../core/interfaces/ApiRequestDataTypeInterface\";\nimport { ApiResponseInterface } from \"../core/interfaces/ApiResponseInterface\";\nimport { translateResponse } from \"../core/utils/translateResponse\";\nimport { ModuleWithPermissions } from \"../permissions/types\";\nimport { serverRequest } from \"./request\";\nimport { getServerToken } from \"./token\";\n\n// Config storage for server contexts\nlet _serverConfig: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n} | null = null;\n\n/**\n * Configure the JSON:API server client.\n * Call this in your Bootstrapper or server initialization.\n */\nexport function configureServerJsonApi(config: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n}): void {\n  _serverConfig = config;\n  if (config.bootstrapper) {\n    config.bootstrapper();\n  }\n}\n\nexport function getServerApiUrl(): string {\n  if (_serverConfig?.apiUrl) {\n    return _serverConfig.apiUrl;\n  }\n  const envUrl = ENV.API_URL;\n  if (!envUrl) {\n    throw new Error(\n      \"API URL not configured. Use configureServerJsonApi() or set NEXT_PUBLIC_API_URL environment variable.\",\n    );\n  }\n  return envUrl;\n}\n\nexport function getServerAppUrl(): string {\n  if (_serverConfig?.appUrl) {\n    return _serverConfig.appUrl;\n  }\n  const envUrl = ENV.APP_URL;\n  if (!envUrl) {\n    throw new Error(\n      \"App URL not configured. Use configureServerJsonApi({ appUrl }) or set NEXT_PUBLIC_ADDRESS environment variable.\",\n    );\n  }\n  return envUrl.trim().replace(/\\/+$/, \"\");\n}\n\nexport function getServerTrackablePages(): ModuleWithPermissions[] {\n  return _serverConfig?.trackablePages ?? [];\n}\n\nfunction runServerBootstrapper(): void {\n  if (_serverConfig?.bootstrapper) {\n    _serverConfig.bootstrapper();\n  }\n}\n\nfunction buildServerUrl(endpoint: string): string {\n  const apiUrl = getServerApiUrl();\n  return endpoint.startsWith(\"http\") ? endpoint : `${apiUrl}${endpoint}`;\n}\n\nexport async function ServerJsonApiGet(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  language: string;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  const apiResponse = await serverRequest({\n    method: \"GET\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    cache: params.classKey.cache,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n    paginationHandler: async (endpoint: string) =>\n      ServerJsonApiGet({\n        classKey: params.classKey,\n        endpoint,\n        companyId: params.companyId,\n        language: params.language,\n      }),\n  });\n}\n\nexport async function ServerJsonApiPost(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  body?: any;\n  overridesJsonApiCreation?: boolean;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  language: string;\n  responseType?: ApiRequestDataTypeInterface;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  let body = params.body;\n  if (!body) {\n    body = {};\n  } else if (params.overridesJsonApiCreation !== true) {\n    body = JsonApiDataFactory.create(params.classKey, body);\n  }\n\n  const apiResponse = await serverRequest({\n    method: \"POST\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    body,\n    files: params.files,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n\nexport async function ServerJsonApiPut(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  body?: any;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  language: string;\n  responseType?: ApiRequestDataTypeInterface;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  let body = params.body;\n  if (!body) {\n    body = {};\n  } else {\n    body = JsonApiDataFactory.create(params.classKey, body);\n  }\n\n  const apiResponse = await serverRequest({\n    method: \"PUT\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    body,\n    files: params.files,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n\nexport async function ServerJsonApiPatch(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  body?: any;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  overridesJsonApiCreation?: boolean;\n  responseType?: ApiRequestDataTypeInterface;\n  language: string;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  let body = params.body;\n  if (!body) {\n    body = {};\n  } else if (params.overridesJsonApiCreation !== true) {\n    body = JsonApiDataFactory.create(params.classKey, body);\n  }\n\n  const apiResponse = await serverRequest({\n    method: \"PATCH\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    body,\n    files: params.files,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n\nexport async function ServerJsonApiDelete(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  language: string;\n  responseType?: ApiRequestDataTypeInterface;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  const apiResponse = await serverRequest({\n    method: \"DELETE\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA,SAAS,qBAAqB;AAW9B,eAAsB,mBAAmB,KAAa,UAAwB,OAAsB;AAClG,gBAAc,KAAK,OAAO;AAC5B;AAFsB;AAUtB,eAAsB,oBAAoB,MAAgB,UAAwB,OAAsB;AACtG,aAAW,OAAO,MAAM;AACtB,kBAAc,KAAK,OAAO;AAAA,EAC5B;AACF;AAJsB;;;ACvBtB,SAAS,eAAe;AACxB,SAAS,gBAAgB;AACzB,SAAS,cAAc;AAGhB,IAAM,gBAAN,MAAoB;AAAA,EAL3B,OAK2B;AAAA;AAAA;AAAA,EACzB,aAAa,WAAW;AACtB,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,QAAQ,YAAY,IAAI,OAAO;AAErC,QAAI,CAAC,SAAS,CAAC,MAAM,MAAO,QAAO;AACnC,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,YAAY;AACvB,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,WAAW,GAAG,SAAS;AAAA,EAChD;AAAA,EAEA,aAAa,SAAS;AACpB,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,QAAQ,GAAG,SAAS;AAAA,EAC7C;AAAA,EAEA,aAAa,gBAAiD,QAAmD;AAC/G,QAAI,CAAE,MAAM,KAAK,sBAAsB,MAAM,EAAI,UAAS,MAAM;AAAA,EAClE;AAAA,EAEA,aAAa,QAAQ,QAAkC;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,QAAQ,YAAY,IAAI,OAAO,GAAG;AAExC,QAAI,CAAC,SAAS,CAAC,MAAM,SAAS,MAAM,EAAG,QAAO;AAE9C,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,WAAW,WAAqC;AAC3D,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,WAAW,YAAY,IAAI,UAAU,GAAG;AAE9C,QAAI,CAAC,YAAY,CAAC,SAAS,SAAS,SAAS,EAAG,QAAO;AAEvD,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,sBAAuD,QAI/C;AACnB,UAAM,cAAc,MAAM,QAAQ;AAElC,QAAI,OAAO,OAAO,SAAS;AACzB,YAAM,WAAW,YAAY,IAAI,UAAU,GAAG;AAE9C,UAAI,YAAY,CAAC,SAAS,SAAS,OAAO,OAAO,OAAO,EAAG,QAAO;AAAA,IACpE;AAEA,UAAM,aAAa,YAAY,IAAI,SAAS,GAAG;AAC/C,QAAI,CAAC,WAAY,QAAO;AAExB,UAAM,UAQA,KAAK,MAAM,OAAO,OAAO,KAAK,YAAY,QAAQ,GAAG,EAAE,QAAQ,KAAK,CAAC,CAAC;AAE5E,UAAM,iBAAiB,QAAQ,KAAK,CAAC,WAAW,OAAO,OAAO,OAAO,OAAO,QAAQ;AAEpF,WAAO,2BAA2B;AAAA,MAChC,QAAQ,OAAO;AAAA,MACf,QAAQ,OAAO;AAAA,MACf,MAAM,OAAO;AAAA,MACb,QAAQ,MAAM,KAAK,OAAO;AAAA,MAC1B;AAAA,IACF,CAAC;AAAA,EAWH;AACF;;;AChFA,IAAI,gBAMO;AAMJ,SAAS,uBAAuB,QAM9B;AACP,kBAAgB;AAChB,MAAI,OAAO,cAAc;AACvB,WAAO,aAAa;AAAA,EACtB;AACF;AAXgB;AAaT,SAAS,kBAA0B;AACxC,MAAI,eAAe,QAAQ;AACzB,WAAO,cAAc;AAAA,EACvB;AACA,QAAM,SAAS,IAAI;AACnB,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAXgB;AAaT,SAAS,kBAA0B;AACxC,MAAI,eAAe,QAAQ;AACzB,WAAO,cAAc;AAAA,EACvB;AACA,QAAM,SAAS,IAAI;AACnB,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,OAAO,KAAK,EAAE,QAAQ,QAAQ,EAAE;AACzC;AAXgB;AAaT,SAAS,0BAAmD;AACjE,SAAO,eAAe,kBAAkB,CAAC;AAC3C;AAFgB;AAIhB,SAAS,wBAA8B;AACrC,MAAI,eAAe,cAAc;AAC/B,kBAAc,aAAa;AAAA,EAC7B;AACF;AAJS;AAMT,SAAS,eAAe,UAA0B;AAChD,QAAM,SAAS,gBAAgB;AAC/B,SAAO,SAAS,WAAW,MAAM,IAAI,WAAW,GAAG,MAAM,GAAG,QAAQ;AACtE;AAHS;AAKT,eAAsB,iBAAiB,QAKL;AAChC,wBAAsB;AACtB,QAAM,QAAQ,MAAM,eAAe;AAEnC,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA,OAAO,OAAO,SAAS;AAAA,IACvB,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO;AAAA,IACjB;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,8BAAO,aACxB,iBAAiB;AAAA,MACf,UAAU,OAAO;AAAA,MACjB;AAAA,MACA,WAAW,OAAO;AAAA,MAClB,UAAU,OAAO;AAAA,IACnB,CAAC,GANgB;AAAA,EAOrB,CAAC;AACH;AAhCsB;AAkCtB,eAAsB,kBAAkB,QASN;AAChC,wBAAsB;AACtB,QAAM,QAAQ,MAAM,eAAe;AAEnC,MAAI,OAAO,OAAO;AAClB,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV,WAAW,OAAO,6BAA6B,MAAM;AACnD,WAAO,mBAAmB,OAAO,OAAO,UAAU,IAAI;AAAA,EACxD;AAEA,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO,gBAAgB,OAAO;AAAA,IACxC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AArCsB;AAuCtB,eAAsB,iBAAiB,QAQL;AAChC,wBAAsB;AACtB,QAAM,QAAQ,MAAM,eAAe;AAEnC,MAAI,OAAO,OAAO;AAClB,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV,OAAO;AACL,WAAO,mBAAmB,OAAO,OAAO,UAAU,IAAI;AAAA,EACxD;AAEA,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO,gBAAgB,OAAO;AAAA,IACxC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AApCsB;AAsCtB,eAAsB,mBAAmB,QASP;AAChC,wBAAsB;AACtB,QAAM,QAAQ,MAAM,eAAe;AAEnC,MAAI,OAAO,OAAO;AAClB,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV,WAAW,OAAO,6BAA6B,MAAM;AACnD,WAAO,mBAAmB,OAAO,OAAO,UAAU,IAAI;AAAA,EACxD;AAEA,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO,gBAAgB,OAAO;AAAA,IACxC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AArCsB;AAuCtB,eAAsB,oBAAoB,QAMR;AAChC,wBAAsB;AACtB,QAAM,QAAQ,MAAM,eAAe;AAEnC,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO,gBAAgB,OAAO;AAAA,IACxC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AAzBsB;","names":[]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{types-bsm8Fp55.d.ts → types-Cn153-mH.d.ts}

@@ -98,4 +98,4 @@ type ModuleFactory = (params: {
     }>;
 }) => ModuleWithPermissions;
 
-export { Action as A, type ModuleWithPermissions as M, type PageUrl as P, type ModuleFactory as a, type PermissionCheck as b, type ModulePermissionDefinition as c, type ModuleDefinition as d, type PermissionConfig as e, type PermissionModule as f, type PermissionUser as g };
+export { Action as A, type ModuleFactory as M, type PageUrl as P, type ModuleWithPermissions as a, type PermissionCheck as b, type ModulePermissionDefinition as c, type ModuleDefinition as d, type PermissionConfig as e, type PermissionModule as f, type PermissionUser as g };

package/dist/{types-Bq_UA8Lg.d.mts → types-D0uLYV2P.d.mts}

@@ -98,4 +98,4 @@ type ModuleFactory = (params: {
     }>;
 }) => ModuleWithPermissions;
 
-export { Action as A, type ModuleWithPermissions as M, type PageUrl as P, type ModuleFactory as a, type PermissionCheck as b, type ModulePermissionDefinition as c, type ModuleDefinition as d, type PermissionConfig as e, type PermissionModule as f, type PermissionUser as g };
+export { Action as A, type ModuleFactory as M, type PageUrl as P, type ModuleWithPermissions as a, type PermissionCheck as b, type ModulePermissionDefinition as c, type ModuleDefinition as d, type PermissionConfig as e, type PermissionModule as f, type PermissionUser as g };

package/dist/{usePageUrlGenerator-J_ECv-oQ.d.ts → usePageUrlGenerator-B-3FRKBD.d.ts}

@@ -1,4 +1,4 @@
-import { P as PageUrl } from './types-bsm8Fp55.js';
+import { P as PageUrl } from './types-Cn153-mH.js';
 
 declare function usePageUrlGenerator(): (params: {
     page?: PageUrl | string;

package/dist/{usePageUrlGenerator-uKBjAKqC.d.mts → usePageUrlGenerator-CCJ_cdQy.d.mts}

@@ -1,4 +1,4 @@
-import { P as PageUrl } from './types-Bq_UA8Lg.mjs';
+import { P as PageUrl } from './types-D0uLYV2P.mjs';
 
 declare function usePageUrlGenerator(): (params: {
     page?: PageUrl | string;

package/dist/{useSocket-BcH7l7B8.d.mts → useSocket-B9gTbuCj.d.mts}

@@ -1,4 +1,4 @@
-import { N as NotificationInterface } from './notification.interface-MnRt1Tjm.mjs';
+import { N as NotificationInterface } from './notification.interface-P_pNfzZQ.mjs';
 
 interface UseSocketOptions {
     token: string;

package/dist/{useSocket-DCZd_eJk.d.ts → useSocket-BHVIyigI.d.ts}

@@ -1,4 +1,4 @@
-import { N as NotificationInterface } from './notification.interface-CjzV_KII.js';
+import { N as NotificationInterface } from './notification.interface-BNCvnVCW.js';
 
 interface UseSocketOptions {
     token: string;

package/dist/{notification.interface-MnRt1Tjm.d.mts → user.interface-CSaGWFbg.d.mts}

@@ -97,34 +97,4 @@ interface UserInterface extends ApiDataInterface {
     get modules(): ModuleInterface[];
 }
 
-type ContentInput = {
-    id: string;
-    name?: string;
-    authorId?: string;
-    editorIds?: string[];
-};
-interface ContentInterface extends ApiDataInterface {
-    get contentType(): string | undefined;
-    get name(): string;
-    get abstract(): string | undefined;
-    get tldr(): string | undefined;
-    get aiStatus(): string;
-    get relevance(): number | undefined;
-    get author(): UserInterface;
-    get editors(): UserInterface[];
-}
-
-type NotificationInput = {
-    id: string;
-    isRead: boolean;
-};
-interface NotificationInterface extends ApiDataInterface {
-    get notificationType(): string;
-    get isRead(): boolean;
-    get message(): string | undefined;
-    get actionUrl(): string | undefined;
-    get actor(): ApiDataInterface | undefined;
-    get subject(): ApiDataInterface | undefined;
-}
-
-export type { ContentInterface as C, NotificationInterface as N, RoleInput as R, UserInterface as U, ContentInput as a, CompanyInput as b, CompanyInterface as c, NotificationInput as d, RoleInterface as e, UserInput as f };
+export type { CompanyInput as C, RoleInput as R, UserInterface as U, CompanyInterface as a, RoleInterface as b, UserInput as c };

package/dist/{notification.interface-CjzV_KII.d.ts → user.interface-CrmwJLYW.d.ts}

@@ -97,34 +97,4 @@ interface UserInterface extends ApiDataInterface {
     get modules(): ModuleInterface[];
 }
 
-type ContentInput = {
-    id: string;
-    name?: string;
-    authorId?: string;
-    editorIds?: string[];
-};
-interface ContentInterface extends ApiDataInterface {
-    get contentType(): string | undefined;
-    get name(): string;
-    get abstract(): string | undefined;
-    get tldr(): string | undefined;
-    get aiStatus(): string;
-    get relevance(): number | undefined;
-    get author(): UserInterface;
-    get editors(): UserInterface[];
-}
-
-type NotificationInput = {
-    id: string;
-    isRead: boolean;
-};
-interface NotificationInterface extends ApiDataInterface {
-    get notificationType(): string;
-    get isRead(): boolean;
-    get message(): string | undefined;
-    get actionUrl(): string | undefined;
-    get actor(): ApiDataInterface | undefined;
-    get subject(): ApiDataInterface | undefined;
-}
-
-export type { ContentInterface as C, NotificationInterface as N, RoleInput as R, UserInterface as U, ContentInput as a, CompanyInput as b, CompanyInterface as c, NotificationInput as d, RoleInterface as e, UserInput as f };
+export type { CompanyInput as C, RoleInput as R, UserInterface as U, CompanyInterface as a, RoleInterface as b, UserInput as c };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@carlonicora/nextjs-jsonapi",
-  "version": "3.24.2",
+  "version": "3.25.0",
   "description": "Next.js JSON:API client with server/client support and caching",
   "author": "Carlo Nicora",
   "license": "GPL-3.0-or-later",
@@ -67,6 +67,16 @@
       "types": "./dist/features/tokenusage/index.d.ts",
       "import": "./dist/features/tokenusage/index.mjs",
       "require": "./dist/features/tokenusage/index.js"
+    },
+    "./analytics": {
+      "types": "./dist/features/analytics/index.d.ts",
+      "import": "./dist/features/analytics/index.mjs",
+      "require": "./dist/features/analytics/index.js"
+    },
+    "./analytics/server": {
+      "types": "./dist/features/analytics/server.d.ts",
+      "import": "./dist/features/analytics/server.mjs",
+      "require": "./dist/features/analytics/server.js"
     }
   },
   "scripts": {

package/src/client/index.ts

@@ -21,6 +21,7 @@ import { useRoleTableStructure } from "../features/role/hooks";
 import { useUserTableStructure } from "../features/user/hooks";
 import { useStripePriceTableStructure } from "../features/billing/stripe-price/hooks/useStripePriceTableStructure";
 import { useStripeProductTableStructure } from "../features/billing/stripe-product/hooks/useStripeProductTableStructure";
+import { useWaitlistTableStructure } from "../features/waitlist/hooks/useWaitlistTableStructure";
 import { registerTableGenerator } from "../hooks";
 
 export * from "../features/content/hooks";
@@ -34,4 +35,5 @@ registerTableGenerator("users", useUserTableStructure);
 registerTableGenerator("companies", useCompanyTableStructure);
 registerTableGenerator("stripe-products", useStripeProductTableStructure);
 registerTableGenerator("stripe-prices", useStripePriceTableStructure);
+registerTableGenerator("waitlists", useWaitlistTableStructure);
 // Note: Content registration moved to app-level to support app-specific cellTopic

package/src/core/index.ts

@@ -113,6 +113,10 @@ export * from "../features/tokenusage/tokenusage-admin.module";
 // rationale as the line above: a bootstrapper needs it, and it must not drag
 // the feature's recharts client bundle in.
 export * from "../features/tokenusage/tokenusage.modules";
+// The analytics module bundle. Same placement rationale as the tokenusage lines
+// above: a bootstrapper needs it, and it must not drag the feature's client
+// bundle in.
+export * from "../features/analytics/analytics.modules";
 // configureTokenUsage() is called from the app's bootstrap file, which is
 // evaluated on the server as well as the client. Reaching it through the
 // client-marked ./tokenusage barrel makes it a client function, and calling one

package/src/core/registry/ModuleRegistry.ts

@@ -73,6 +73,13 @@ export interface FoundationModuleDefinitions {
   TokenUsageReportSummary: ModuleWithPermissions;
   TokenUsageReportTimeline: ModuleWithPermissions;
   TokenUsageReportBreakdown: ModuleWithPermissions;
+  // First-party web analytics modules (tracker + administrative dashboard)
+  AnalyticsEvent: ModuleWithPermissions;
+  AnalyticsSummary: ModuleWithPermissions;
+  AnalyticsTimeline: ModuleWithPermissions;
+  AnalyticsBreakdown: ModuleWithPermissions;
+  AnalyticsSession: ModuleWithPermissions;
+  AnalyticsPageView: ModuleWithPermissions;
 }
 
 // App-specific modules - apps will augment this interface ONLY

package/src/features/__tests__/i18n-keys.contract.spec.ts

@@ -34,6 +34,7 @@ const DECLARED_FOR_APP_RENDERED_SURFACES = new Set<string>([
   "administration.token_usage.description",
   "administration.users.description",
   "administration.ai_connections.description",
+  "analytics.admin.description",
   "handbook.chat.delete_confirm",
   "handbook.chat.rename_placeholder",
   "handbook.contents.title",

package/src/features/analytics/__tests__/server-entry.spec.tsx

@@ -0,0 +1,64 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { AnalyticsAdminPageContainer, AnalyticsJourneyPageContainer } from "../index";
+import { AnalyticsAdminPage, AnalyticsJourneyPage } from "../server-entry";
+
+const mocks = vi.hoisted(() => ({
+  hasRole: vi.fn(),
+  redirect: vi.fn((url: string) => {
+    // next/navigation's redirect throws to stop rendering; mirror that.
+    throw new Error(`NEXT_REDIRECT:${url}`);
+  }),
+}));
+
+// ServerSession reads next/headers cookies, which only exist inside a request.
+vi.mock("../../../server", () => ({
+  ServerSession: { hasRole: mocks.hasRole },
+}));
+
+vi.mock("next/navigation", () => ({
+  redirect: mocks.redirect,
+}));
+
+describe("analytics server entry", () => {
+  beforeEach(() => {
+    vi.clearAllMocks();
+  });
+
+  it("AnalyticsAdminPage renders the admin container for the role holder", async () => {
+    mocks.hasRole.mockResolvedValue(true);
+
+    const element = await AnalyticsAdminPage({
+      adminRoleId: "role-admin",
+      pageUrl: "/admin/stats",
+      sessionPageUrl: "/admin/stats/sessions",
+    });
+
+    expect(mocks.hasRole).toHaveBeenCalledWith("role-admin");
+    expect(element.type).toBe(AnalyticsAdminPageContainer);
+    expect(element.props).toEqual({ pageUrl: "/admin/stats", sessionPageUrl: "/admin/stats/sessions" });
+  });
+
+  it("AnalyticsAdminPage redirects to `/` by default without the role", async () => {
+    mocks.hasRole.mockResolvedValue(false);
+
+    await expect(AnalyticsAdminPage({ adminRoleId: "role-admin" })).rejects.toThrow("NEXT_REDIRECT:/");
+    expect(mocks.redirect).toHaveBeenCalledWith("/");
+  });
+
+  it("AnalyticsJourneyPage renders the journey container for the role holder", async () => {
+    mocks.hasRole.mockResolvedValue(true);
+
+    const element = await AnalyticsJourneyPage({ adminRoleId: "role-admin", sessionId: "s1", pageUrl: "/admin/stats" });
+
+    expect(element.type).toBe(AnalyticsJourneyPageContainer);
+    expect(element.props).toEqual({ sessionId: "s1", pageUrl: "/admin/stats" });
+  });
+
+  it("AnalyticsJourneyPage redirects to deniedRedirect without the role", async () => {
+    mocks.hasRole.mockResolvedValue(false);
+
+    await expect(
+      AnalyticsJourneyPage({ adminRoleId: "role-admin", sessionId: "s1", deniedRedirect: "/401" }),
+    ).rejects.toThrow("NEXT_REDIRECT:/401");
+  });
+});

package/src/features/analytics/analytics.modules.ts

@@ -0,0 +1,30 @@
+import { ModuleFactory, ModuleWithPermissions } from "../../permissions";
+import { AnalyticsBreakdown } from "./data/analytics-breakdown";
+import { AnalyticsEvent } from "./data/analytics-event";
+import { AnalyticsPageView } from "./data/analytics-page-view";
+import { AnalyticsSession } from "./data/analytics-session";
+import { AnalyticsSummary } from "./data/analytics-summary";
+import { AnalyticsTimeline } from "./data/analytics-timeline";
+
+/**
+ * Every resource behind the analytics tracker and dashboard, as one object a
+ * consuming app spreads into its `allModules`. Same rationale as
+ * `tokenUsageModules`: one spread cannot be partially done, and a forgotten
+ * name is `undefined` at runtime even though `Modules.X` typechecks.
+ *
+ * `AnalyticsPageView` is only a child segment: the service builds
+ * `analytics/administration/sessions/{id}/pageviews` with EndpointCreator's
+ * `childEndpoint`. None has a pageUrl — these are not navigable resources.
+ *
+ * `satisfies` keeps the constraint without widening the return type to an
+ * index signature (see tokenusage.modules.ts).
+ */
+export const analyticsModules = (factory: ModuleFactory) =>
+  ({
+    AnalyticsEvent: factory({ name: "analytics/events", model: AnalyticsEvent }),
+    AnalyticsSummary: factory({ name: "analytics/administration/summary", model: AnalyticsSummary }),
+    AnalyticsTimeline: factory({ name: "analytics/administration/timeline", model: AnalyticsTimeline }),
+    AnalyticsBreakdown: factory({ name: "analytics/administration/breakdown", model: AnalyticsBreakdown }),
+    AnalyticsSession: factory({ name: "analytics/administration/sessions", model: AnalyticsSession }),
+    AnalyticsPageView: factory({ name: "pageviews", model: AnalyticsPageView }),
+  }) satisfies Record<string, ModuleWithPermissions>;

package/src/features/analytics/components/AnalyticsAdminContainer.tsx

@@ -0,0 +1,97 @@
+"use client";
+
+import { useTranslations } from "next-intl";
+import { RoundPageContainer } from "../../../components";
+import { Card, CardContent, CardHeader, CardTitle } from "../../../shadcnui";
+import { useAnalyticsAdmin } from "../contexts/AnalyticsAdminContext";
+import { AnalyticsAdminTiles } from "./AnalyticsAdminTiles";
+import { AnalyticsBreakdownTable } from "./AnalyticsBreakdownTable";
+import { AnalyticsSessionsTable } from "./AnalyticsSessionsTable";
+import { AnalyticsTimelineChart } from "./AnalyticsTimelineChart";
+
+/**
+ * Page body for the administrative analytics dashboard.
+ *
+ * Stateless by design — every value it renders comes from
+ * `useAnalyticsAdmin()`. The filter bar is deliberately NOT here: it belongs to
+ * the page title bar, which `RoundPageContainer` fills from `SharedContext`, so
+ * the provider publishes it (see AnalyticsAdminContext).
+ */
+export function AnalyticsAdminContainer() {
+  const t = useTranslations();
+  const {
+    summary,
+    timeline,
+    breakdowns,
+    sessions,
+    loadMoreSessions,
+    hasMoreSessions,
+    sessionPageUrl,
+    isLoading,
+    error,
+  } = useAnalyticsAdmin();
+
+  if (error) {
+    return (
+      <RoundPageContainer fullWidth forceHeader>
+        <div className="p-4">
+          <Card>
+            <CardContent>
+              <p className="text-destructive text-xs/relaxed">{error}</p>
+            </CardContent>
+          </Card>
+        </div>
+      </RoundPageContainer>
+    );
+  }
+
+  // Loading renders nothing in the body: the title bar (with the filter bar) is
+  // already mounted, so a spinner would only make the controls jump on arrival.
+  if (isLoading) return <RoundPageContainer fullWidth forceHeader />;
+
+  return (
+    <RoundPageContainer fullWidth forceHeader>
+      <div className="flex w-full flex-col gap-4 p-4">
+        <div className="flex flex-col gap-2">
+          <AnalyticsAdminTiles summary={summary} />
+          {/* Days past the raw-event retention are served from daily summaries.
+              Whether the window reaches them is the backend's knowledge, not the
+              client's, so the caption is always shown. */}
+          <p className="text-muted-foreground text-xs">{t("analytics.admin.tiles.summarised_note")}</p>
+        </div>
+
+        <Card>
+          <CardHeader>
+            <CardTitle>{t("analytics.admin.panels.over_time")}</CardTitle>
+          </CardHeader>
+          <CardContent>
+            <AnalyticsTimelineChart rows={timeline} />
+          </CardContent>
+        </Card>
+
+        <Card>
+          <CardHeader>
+            <CardTitle>{t("analytics.admin.panels.breakdown")}</CardTitle>
+          </CardHeader>
+          <CardContent>
+            <AnalyticsBreakdownTable breakdowns={breakdowns} />
+          </CardContent>
+        </Card>
+
+        <Card>
+          <CardHeader>
+            <CardTitle>{t("analytics.admin.panels.sessions")}</CardTitle>
+          </CardHeader>
+          <CardContent>
+            <AnalyticsSessionsTable
+              rows={sessions}
+              sessionPageUrl={sessionPageUrl}
+              onLoadMore={loadMoreSessions}
+              hasMore={hasMoreSessions}
+            />
+          </CardContent>
+        </Card>
+      </div>
+    </RoundPageContainer>
+  );
+}

package/src/features/analytics/components/AnalyticsAdminFilterBar.tsx

@@ -0,0 +1,117 @@
+"use client";
+
+import { useTranslations } from "next-intl";
+import { DateRangeSelector } from "../../../components/forms/DateRangeSelector";
+import { Button } from "../../../shadcnui";
+import { cn } from "../../../utils";
+import {
+  ANALYTICS_GRANULARITIES,
+  ANALYTICS_SECTIONS,
+  type AnalyticsGranularity,
+  type AnalyticsSection,
+} from "../data/analytics.types";
+
+type FilterState = {
+  from: string;
+  to: string;
+  section: AnalyticsSection;
+  granularity: AnalyticsGranularity;
+};
+
+type Props = FilterState & {
+  /** Receives ONLY the keys that changed. */
+  onChange: (next: Partial<FilterState>) => void;
+};
+
+/**
+ * The single control row above the KPI tiles.
+ *
+ * It is deliberately stateless: every control reports the one key it changed and
+ * the owning context re-fetches. Keeping the whole filter state in one place is
+ * what lets the page issue a single coordinated batch of requests instead of one
+ * per control.
+ */
+export function AnalyticsAdminFilterBar({ section, granularity, onChange }: Props) {
+  const t = useTranslations();
+
+  const sectionLabels: Record<AnalyticsSection, string> = {
+    all: t("analytics.admin.filter.section_all"),
+    public: t("analytics.admin.filter.section_public"),
+    app: t("analytics.admin.filter.section_app"),
+  };
+
+  const granularityLabels: Record<AnalyticsGranularity, string> = {
+    day: t("analytics.admin.filter.granularity_day"),
+    week: t("analytics.admin.filter.granularity_week"),
+    month: t("analytics.admin.filter.granularity_month"),
+  };
+
+  return (
+    <div className="flex flex-wrap items-center gap-2">
+      <DateRangeSelector
+        onDateChange={(range) => {
+          if (!range?.from || !range?.to) return;
+          onChange({ from: range.from.toISOString(), to: range.to.toISOString() });
+        }}
+      />
+
+      <Segmented
+        ariaLabel={t("analytics.admin.filter.section")}
+        value={section}
+        options={ANALYTICS_SECTIONS.map((value) => ({ value, label: sectionLabels[value] }))}
+        onSelect={(value) => onChange({ section: value })}
+      />
+
+      <Segmented
+        ariaLabel={t("analytics.admin.filter.granularity")}
+        value={granularity}
+        options={ANALYTICS_GRANULARITIES.map((value) => ({ value, label: granularityLabels[value] }))}
+        onSelect={(value) => onChange({ granularity: value })}
+      />
+    </div>
+  );
+}
+
+/**
+ * A segmented control built from plain Buttons.
+ *
+ * The design system has no ToggleGroup primitive, and Base UI triggers may never
+ * wrap a Button, so the segmented look is composed from Buttons directly — the
+ * selected segment takes the solid variant, the rest stay ghosts.
+ */
+function Segmented<T extends string>({
+  ariaLabel,
+  value,
+  options,
+  onSelect,
+}: {
+  ariaLabel: string;
+  value: T;
+  options: { value: T; label: string }[];
+  onSelect: (value: T) => void;
+}) {
+  return (
+    <div
+      role="group"
+      aria-label={ariaLabel}
+      className="border-border inline-flex items-center gap-0.5 rounded-md border p-0.5"
+    >
+      {options.map((option) => {
+        const selected = option.value === value;
+        return (
+          <Button
+            key={option.value}
+            type="button"
+            size="sm"
+            variant={selected ? "default" : "ghost"}
+            aria-pressed={selected}
+            className={cn(!selected && "text-muted-foreground")}
+            onClick={() => onSelect(option.value)}
+          >
+            {option.label}
+          </Button>
+        );
+      })}
+    </div>
+  );
+}

package/src/features/analytics/components/AnalyticsAdminPageContainer.tsx

@@ -0,0 +1,25 @@
+"use client";
+
+import { AnalyticsAdminProvider } from "../contexts/AnalyticsAdminContext";
+import { AnalyticsAdminContainer } from "./AnalyticsAdminContainer";
+
+type Props = {
+  /** Route the breadcrumb links back to. Defaults to the provider's default. */
+  pageUrl?: string;
+  /** Base route of the journey page each session row links to. */
+  sessionPageUrl?: string;
+};
+
+/**
+ * The whole administrative analytics page as one client component, so a host
+ * app's server page renders a single element. `AnalyticsAdminContainer` owns
+ * the `RoundPageContainer`; the provider sits above it because it publishes the
+ * filter bar into the title bar.
+ */
+export function AnalyticsAdminPageContainer({ pageUrl, sessionPageUrl }: Props) {
+  return (
+    <AnalyticsAdminProvider pageUrl={pageUrl} sessionPageUrl={sessionPageUrl}>
+      <AnalyticsAdminContainer />
+    </AnalyticsAdminProvider>
+  );
+}