@carlonicora/nextjs-jsonapi 3.28.1 → 4.0.0

package/dist/{chunk-SJLXPHK5.mjs → chunk-E2LENTUH.mjs}

@@ -3,17 +3,27 @@ import {
 } from "./chunk-PAWJFY3S.mjs";
 
 // src/server/request.ts
-var cacheLifeToSeconds = {
-  seconds: 1,
-  minutes: 60,
-  hours: 3600,
-  days: 86400,
-  weeks: 604800,
-  max: 31536e3,
-  // 1 year
-  default: 60
-};
+import { cachedServerGet, statusFromDigest } from "@carlonicora/nextjs-jsonapi/cached-get";
 async function serverRequest(params) {
+  if (params.method === "GET" && params.cache) {
+    try {
+      return await cachedServerGet({
+        url: params.url,
+        cache: params.cache,
+        language: params.language,
+        companyId: params.companyId,
+        additionalHeaders: params.additionalHeaders
+      });
+    } catch (error) {
+      const status = statusFromDigest(error) ?? 503;
+      return {
+        data: void 0,
+        ok: false,
+        status,
+        statusText: status === 503 ? "Service Unavailable" : ""
+      };
+    }
+  }
   const response = {
     data: void 0,
     ok: false,
@@ -52,21 +62,9 @@ async function serverRequest(params) {
     requestBody = JSON.stringify(params.body);
     additionalHeaders["Content-Type"] = "application/json";
   }
-  const nextOptions = {};
-  if (params.cache) {
-    if (params.cache in cacheLifeToSeconds) {
-      nextOptions.revalidate = cacheLifeToSeconds[params.cache];
-    } else {
-      nextOptions.tags = [params.cache];
-      nextOptions.revalidate = 60;
-    }
-  } else {
-    nextOptions.revalidate = 0;
-  }
   const options = {
     method: params.method,
-    headers: { Accept: "application/json", ...additionalHeaders },
-    next: nextOptions
+    headers: { Accept: "application/json", ...additionalHeaders }
   };
   if (requestBody !== void 0) {
     options.body = requestBody;
@@ -97,4 +95,4 @@ __name(serverRequest, "serverRequest");
 export {
   serverRequest
 };
-//# sourceMappingURL=chunk-SJLXPHK5.mjs.map
+//# sourceMappingURL=chunk-E2LENTUH.mjs.map

package/dist/chunk-E2LENTUH.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/request.ts"],"sourcesContent":["// Server-only utilities (NOT server actions - these cannot be called from client components)\n\nimport { ApiData } from \"../core/interfaces/ApiData\";\n// Through the package's own export, not \"./cachedGet\": the `react-server` condition gives\n// server code the real `\"use cache\"` function and every other bundle a stub. A relative\n// import would put `\"use cache\"` into the client bundles that reach this module.\nimport { cachedServerGet, statusFromDigest } from \"@carlonicora/nextjs-jsonapi/cached-get\";\n\nexport interface ServerRequestParams {\n  method: string;\n  url: string;\n  token?: string;\n  cache?: string;\n  body?: any;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  companyId?: string;\n  language: string;\n  additionalHeaders?: Record<string, string>;\n}\n\n/**\n * Server-side request.\n *\n * - A GET with a `cache` value goes through `cachedServerGet`, a token-free `\"use cache\"`\n *   function. The token is never sent on that path.\n * - Everything else (uncached GET, POST, PUT, PATCH, DELETE) is a plain uncached `fetch`\n *   that sends the token.\n */\nexport async function serverRequest(params: ServerRequestParams): Promise<ApiData> {\n  if (params.method === \"GET\" && params.cache) {\n    try {\n      return await cachedServerGet({\n        url: params.url,\n        cache: params.cache,\n        language: params.language,\n        companyId: params.companyId,\n        additionalHeaders: params.additionalHeaders,\n      });\n    } catch (error) {\n      // The cached function throws on failure so Next does not store it. Convert it back\n      // here, outside the cache scope. In production only `digest` survives the boundary.\n      const status = statusFromDigest(error) ?? 503;\n      return {\n        data: undefined,\n        ok: false,\n        status,\n        statusText: status === 503 ? \"Service Unavailable\" : \"\",\n      };\n    }\n  }\n\n  const response: ApiData = {\n    data: undefined,\n    ok: false,\n    status: 0,\n    statusText: \"\",\n  };\n\n  const additionalHeaders: Record<string, string> = { ...params.additionalHeaders };\n\n  if (params.companyId) {\n    additionalHeaders[\"x-companyid\"] = params.companyId;\n  }\n  additionalHeaders[\"x-language\"] = params.language;\n\n  let requestBody: BodyInit | undefined = undefined;\n\n  if (params.files) {\n    const formData = new FormData();\n    if (params.body && typeof params.body === \"object\") {\n      for (const key in params.body) {\n        if (Object.prototype.hasOwnProperty.call(params.body, key)) {\n          formData.append(\n            key,\n            typeof params.body[key] === \"object\" ? JSON.stringify(params.body[key]) : params.body[key],\n          );\n        }\n      }\n    }\n\n    if (params.files instanceof Blob) {\n      formData.append(\"file\", params.files);\n    } else if (typeof params.files === \"object\" && params.files !== null) {\n      for (const key in params.files) {\n        if (Object.prototype.hasOwnProperty.call(params.files, key)) {\n          formData.append(key, params.files[key]);\n        }\n      }\n    }\n\n    requestBody = formData;\n  } else if (params.body !== undefined) {\n    requestBody = JSON.stringify(params.body);\n    additionalHeaders[\"Content-Type\"] = \"application/json\";\n  }\n\n  const options: RequestInit = {\n    method: params.method,\n    headers: { Accept: \"application/json\", ...additionalHeaders },\n  };\n\n  if (requestBody !== undefined) {\n    options.body = requestBody;\n  }\n\n  if (params.token) {\n    options.headers = { ...options.headers, Authorization: `Bearer ${params.token}` };\n  }\n\n  try {\n    const apiResponse = await fetch(params.url, options);\n\n    response.ok = apiResponse.ok;\n    response.status = apiResponse.status;\n    response.statusText = apiResponse.statusText;\n    try {\n      response.data = await apiResponse.json();\n    } catch {\n      response.data = undefined;\n    }\n  } catch {\n    // fetch() only throws when the API could not be reached at all (server\n    // down, DNS, connection refused). Report it as 503 so consumers can tell\n    // \"API unreachable\" apart from a 500 the API actually returned.\n    response.ok = false;\n    response.status = 503;\n    response.statusText = \"Service Unavailable\";\n    response.data = undefined;\n  }\n\n  return response;\n}\n"],"mappings":";;;;;AAMA,SAAS,iBAAiB,wBAAwB;AAsBlD,eAAsB,cAAc,QAA+C;AACjF,MAAI,OAAO,WAAW,SAAS,OAAO,OAAO;AAC3C,QAAI;AACF,aAAO,MAAM,gBAAgB;AAAA,QAC3B,KAAK,OAAO;AAAA,QACZ,OAAO,OAAO;AAAA,QACd,UAAU,OAAO;AAAA,QACjB,WAAW,OAAO;AAAA,QAClB,mBAAmB,OAAO;AAAA,MAC5B,CAAC;AAAA,IACH,SAAS,OAAO;AAGd,YAAM,SAAS,iBAAiB,KAAK,KAAK;AAC1C,aAAO;AAAA,QACL,MAAM;AAAA,QACN,IAAI;AAAA,QACJ;AAAA,QACA,YAAY,WAAW,MAAM,wBAAwB;AAAA,MACvD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAoB;AAAA,IACxB,MAAM;AAAA,IACN,IAAI;AAAA,IACJ,QAAQ;AAAA,IACR,YAAY;AAAA,EACd;AAEA,QAAM,oBAA4C,EAAE,GAAG,OAAO,kBAAkB;AAEhF,MAAI,OAAO,WAAW;AACpB,sBAAkB,aAAa,IAAI,OAAO;AAAA,EAC5C;AACA,oBAAkB,YAAY,IAAI,OAAO;AAEzC,MAAI,cAAoC;AAExC,MAAI,OAAO,OAAO;AAChB,UAAM,WAAW,IAAI,SAAS;AAC9B,QAAI,OAAO,QAAQ,OAAO,OAAO,SAAS,UAAU;AAClD,iBAAW,OAAO,OAAO,MAAM;AAC7B,YAAI,OAAO,UAAU,eAAe,KAAK,OAAO,MAAM,GAAG,GAAG;AAC1D,mBAAS;AAAA,YACP;AAAA,YACA,OAAO,OAAO,KAAK,GAAG,MAAM,WAAW,KAAK,UAAU,OAAO,KAAK,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG;AAAA,UAC3F;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI,OAAO,iBAAiB,MAAM;AAChC,eAAS,OAAO,QAAQ,OAAO,KAAK;AAAA,IACtC,WAAW,OAAO,OAAO,UAAU,YAAY,OAAO,UAAU,MAAM;AACpE,iBAAW,OAAO,OAAO,OAAO;AAC9B,YAAI,OAAO,UAAU,eAAe,KAAK,OAAO,OAAO,GAAG,GAAG;AAC3D,mBAAS,OAAO,KAAK,OAAO,MAAM,GAAG,CAAC;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAEA,kBAAc;AAAA,EAChB,WAAW,OAAO,SAAS,QAAW;AACpC,kBAAc,KAAK,UAAU,OAAO,IAAI;AACxC,sBAAkB,cAAc,IAAI;AAAA,EACtC;AAEA,QAAM,UAAuB;AAAA,IAC3B,QAAQ,OAAO;AAAA,IACf,SAAS,EAAE,QAAQ,oBAAoB,GAAG,kBAAkB;AAAA,EAC9D;AAEA,MAAI,gBAAgB,QAAW;AAC7B,YAAQ,OAAO;AAAA,EACjB;AAEA,MAAI,OAAO,OAAO;AAChB,YAAQ,UAAU,EAAE,GAAG,QAAQ,SAAS,eAAe,UAAU,OAAO,KAAK,GAAG;AAAA,EAClF;AAEA,MAAI;AACF,UAAM,cAAc,MAAM,MAAM,OAAO,KAAK,OAAO;AAEnD,aAAS,KAAK,YAAY;AAC1B,aAAS,SAAS,YAAY;AAC9B,aAAS,aAAa,YAAY;AAClC,QAAI;AACF,eAAS,OAAO,MAAM,YAAY,KAAK;AAAA,IACzC,QAAQ;AACN,eAAS,OAAO;AAAA,IAClB;AAAA,EACF,QAAQ;AAIN,aAAS,KAAK;AACd,aAAS,SAAS;AAClB,aAAS,aAAa;AACtB,aAAS,OAAO;AAAA,EAClB;AAEA,SAAO;AACT;AAvGsB;","names":[]}

package/dist/chunk-EBEXWN3I.mjs

@@ -0,0 +1,17 @@
+import {
+  __name
+} from "./chunk-PAWJFY3S.mjs";
+
+// src/server/cacheDigest.ts
+function statusFromDigest(error) {
+  const digest = error?.digest;
+  if (typeof digest !== "string") return void 0;
+  const match = /^HTTP_(\d+)$/.exec(digest);
+  return match ? Number(match[1]) : void 0;
+}
+__name(statusFromDigest, "statusFromDigest");
+
+export {
+  statusFromDigest
+};
+//# sourceMappingURL=chunk-EBEXWN3I.mjs.map

package/dist/chunk-EBEXWN3I.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/cacheDigest.ts"],"sourcesContent":["// Shared by `cachedGet.ts` and its client stub, so `serverRequest` reads the status\n// back the same way whichever one the bundler resolved.\n\n/** Reads the HTTP status from an `HTTP_<status>` digest, or `undefined` when there is none. */\nexport function statusFromDigest(error: unknown): number | undefined {\n  const digest = (error as { digest?: unknown } | null | undefined)?.digest;\n  if (typeof digest !== \"string\") return undefined;\n  const match = /^HTTP_(\\d+)$/.exec(digest);\n  return match ? Number(match[1]) : undefined;\n}\n"],"mappings":";;;;;AAIO,SAAS,iBAAiB,OAAoC;AACnE,QAAM,SAAU,OAAmD;AACnE,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,QAAM,QAAQ,eAAe,KAAK,MAAM;AACxC,SAAO,QAAQ,OAAO,MAAM,CAAC,CAAC,IAAI;AACpC;AALgB;","names":[]}

package/dist/chunk-G4JR3SFV.js

@@ -0,0 +1,28 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunk7QVYU63Ejs = require('./chunk-7QVYU63E.js');
+
+// src/roles/config.ts
+var _roleId = null;
+function configureRoles(roleId) {
+  _roleId = roleId;
+}
+_chunk7QVYU63Ejs.__name.call(void 0, configureRoles, "configureRoles");
+function getRoleId() {
+  if (!_roleId) {
+    throw new Error("Roles not configured. Call configureRoles() at app startup.");
+  }
+  return _roleId;
+}
+_chunk7QVYU63Ejs.__name.call(void 0, getRoleId, "getRoleId");
+function isRolesConfigured() {
+  return _roleId !== null;
+}
+_chunk7QVYU63Ejs.__name.call(void 0, isRolesConfigured, "isRolesConfigured");
+
+
+
+
+
+exports.configureRoles = configureRoles; exports.getRoleId = getRoleId; exports.isRolesConfigured = isRolesConfigured;
+//# sourceMappingURL=chunk-G4JR3SFV.js.map

package/dist/chunk-G4JR3SFV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-G4JR3SFV.js","../src/roles/config.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACA;ACOA,IAAI,QAAA,EAA+B,IAAA;AAc5B,SAAS,cAAA,CAAe,MAAA,EAA4B;AACzD,EAAA,QAAA,EAAU,MAAA;AACZ;AAFgB,qCAAA,cAAA,EAAA,gBAAA,CAAA;AAQT,SAAS,SAAA,CAAA,EAA0B;AACxC,EAAA,GAAA,CAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,KAAA,CAAM,6DAA6D,CAAA;AAAA,EAC/E;AACA,EAAA,OAAO,OAAA;AACT;AALgB,qCAAA,SAAA,EAAA,WAAA,CAAA;AAUT,SAAS,iBAAA,CAAA,EAA6B;AAC3C,EAAA,OAAO,QAAA,IAAY,IAAA;AACrB;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;ADtBhB;AACA;AACE;AACA;AACA;AACF,sHAAC","file":"/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-G4JR3SFV.js","sourcesContent":[null,"/**\n * Role ID configuration interface\n * Apps provide their role IDs via configureRoles()\n */\nexport interface RoleIdConfig {\n  Administrator: string;\n  CompanyAdministrator: string;\n  [key: string]: string; // Allow additional roles\n}\n\n// Private storage for the injected role IDs\nlet _roleId: RoleIdConfig | null = null;\n\n/**\n * Configure role IDs for the library\n * Call this at app startup to provide role ID constants\n *\n * @example\n * ```typescript\n * import { configureRoles } from \"@carlonicora/nextjs-jsonapi\";\n * import { RoleId } from \"@phlow/shared\";\n *\n * configureRoles(RoleId);\n * ```\n */\nexport function configureRoles(roleId: RoleIdConfig): void {\n  _roleId = roleId;\n}\n\n/**\n * Get configured role IDs\n * @throws Error if roles not configured\n */\nexport function getRoleId(): RoleIdConfig {\n  if (!_roleId) {\n    throw new Error(\"Roles not configured. Call configureRoles() at app startup.\");\n  }\n  return _roleId;\n}\n\n/**\n * Check if roles have been configured\n */\nexport function isRolesConfigured(): boolean {\n  return _roleId !== null;\n}\n"]}

package/dist/chunk-IK65TDQH.js

@@ -0,0 +1,15 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/server/cacheProfiles.ts
+var CACHE_PROFILES = [
+  "seconds",
+  "minutes",
+  "hours",
+  "days",
+  "weeks",
+  "max",
+  "default"
+];
+
+
+
+exports.CACHE_PROFILES = CACHE_PROFILES;
+//# sourceMappingURL=chunk-IK65TDQH.js.map

package/dist/chunk-IK65TDQH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-IK65TDQH.js","../src/server/cacheProfiles.ts"],"names":[],"mappings":"AAAA;ACMO,IAAM,eAAA,EAA0C;AAAA,EACrD,SAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EACA,KAAA;AAAA,EACA;AACF,CAAA;ADJA;AACA;AACE;AACF,wCAAC","file":"/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-IK65TDQH.js","sourcesContent":[null,"// Plain constants, no `next/cache` import: `cachedGet.ts` reads them, and this file\n// keeps `revalidateTag`/`updateTag` (in `cache.ts`) out of every graph that loads it.\n\nexport type CacheProfile = \"seconds\" | \"minutes\" | \"hours\" | \"days\" | \"weeks\" | \"max\" | \"default\";\n\n/** The built-in `cacheLife` profile names. A module `cache` value outside this list is treated as a tag. */\nexport const CACHE_PROFILES: readonly CacheProfile[] = [\n  \"seconds\",\n  \"minutes\",\n  \"hours\",\n  \"days\",\n  \"weeks\",\n  \"max\",\n  \"default\",\n];\n"]}

package/dist/{chunk-GHFMKH3M.js → chunk-JEQ34Z5E.js}

@@ -1,17 +1,21 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunk5TRFNKJSjs = require('./chunk-5TRFNKJS.js');
+var _chunkYUO55Q5Ajs = require('./chunk-YUO55Q5A.js');
 
 
-var _chunkYUO55Q5Ajs = require('./chunk-YUO55Q5A.js');
+var _chunk6TUB7Y6Tjs = require('./chunk-6TUB7Y6T.js');
+
+
+var _chunkG4JR3SFVjs = require('./chunk-G4JR3SFV.js');
+
 
 
-var _chunkCAKOFJZDjs = require('./chunk-CAKOFJZD.js');
+var _chunk6OFANJTEjs = require('./chunk-6OFANJTE.js');
 
 
 
 
-var _chunk26MQIJNBjs = require('./chunk-26MQIJNB.js');
+var _chunkWGVNJXZOjs = require('./chunk-WGVNJXZO.js');
 
 
 var _chunk7QVYU63Ejs = require('./chunk-7QVYU63E.js');
@@ -28,15 +32,34 @@ async function invalidateCacheTags(tags, profile = "max") {
   }
 }
 _chunk7QVYU63Ejs.__name.call(void 0, invalidateCacheTags, "invalidateCacheTags");
+async function updateCacheTag(tag) {
+  _cache.updateTag.call(void 0, tag);
+}
+_chunk7QVYU63Ejs.__name.call(void 0, updateCacheTag, "updateCacheTag");
 
 // src/server/ServerSession.ts
 var _headers = require('next/headers');
 var _navigation = require('next/navigation');
+var _server = require('next/server');
 var _pako = require('pako');
 var ServerSession = class {
   static {
     _chunk7QVYU63Ejs.__name.call(void 0, this, "ServerSession");
   }
+  static async read() {
+    const cookieStore = await _headers.cookies.call(void 0, );
+    const headerStore = await _headers.headers.call(void 0, );
+    const token = _optionalChain([cookieStore, 'access', _ => _.get, 'call', _2 => _2("token"), 'optionalAccess', _3 => _3.value]) || void 0;
+    const roles = _optionalChain([cookieStore, 'access', _4 => _4.get, 'call', _5 => _5("roles"), 'optionalAccess', _6 => _6.value]);
+    const viewportCookie = _optionalChain([cookieStore, 'access', _7 => _7.get, 'call', _8 => _8(_chunk6OFANJTEjs.VIEWPORT_COOKIE_NAME), 'optionalAccess', _9 => _9.value]);
+    return {
+      isLogged: !!token,
+      isAdministrator: !!roles && roles.includes(_chunkG4JR3SFVjs.getRoleId.call(void 0, ).Administrator),
+      token,
+      sidebarOpen: _optionalChain([cookieStore, 'access', _10 => _10.get, 'call', _11 => _11("sidebar_state"), 'optionalAccess', _12 => _12.value]) !== "false",
+      isMobile: viewportCookie ? viewportCookie === "1" : _server.userAgent.call(void 0, { headers: headerStore }).device.type === "mobile"
+    };
+  }
   static async isLogged() {
     const cookieStore = await _headers.cookies.call(void 0, );
     const token = cookieStore.get("token");
@@ -45,38 +68,38 @@ var ServerSession = class {
   }
   static async companyId() {
     const cookieStore = await _headers.cookies.call(void 0, );
-    return _nullishCoalesce(_optionalChain([cookieStore, 'access', _ => _.get, 'call', _2 => _2("companyId"), 'optionalAccess', _3 => _3.value]), () => ( ""));
+    return _nullishCoalesce(_optionalChain([cookieStore, 'access', _13 => _13.get, 'call', _14 => _14("companyId"), 'optionalAccess', _15 => _15.value]), () => ( ""));
   }
   static async userId() {
     const cookieStore = await _headers.cookies.call(void 0, );
-    return _nullishCoalesce(_optionalChain([cookieStore, 'access', _4 => _4.get, 'call', _5 => _5("userId"), 'optionalAccess', _6 => _6.value]), () => ( ""));
+    return _nullishCoalesce(_optionalChain([cookieStore, 'access', _16 => _16.get, 'call', _17 => _17("userId"), 'optionalAccess', _18 => _18.value]), () => ( ""));
   }
   static async checkPermission(params) {
     if (!await this.hasPermissionToModule(params)) _navigation.redirect.call(void 0, `/401`);
   }
   static async hasRole(roleId) {
     const cookieStore = await _headers.cookies.call(void 0, );
-    const roles = _optionalChain([cookieStore, 'access', _7 => _7.get, 'call', _8 => _8("roles"), 'optionalAccess', _9 => _9.value]);
+    const roles = _optionalChain([cookieStore, 'access', _19 => _19.get, 'call', _20 => _20("roles"), 'optionalAccess', _21 => _21.value]);
     if (!roles || !roles.includes(roleId)) return false;
     return true;
   }
   static async hasFeature(featureId) {
     const cookieStore = await _headers.cookies.call(void 0, );
-    const features = _optionalChain([cookieStore, 'access', _10 => _10.get, 'call', _11 => _11("features"), 'optionalAccess', _12 => _12.value]);
+    const features = _optionalChain([cookieStore, 'access', _22 => _22.get, 'call', _23 => _23("features"), 'optionalAccess', _24 => _24.value]);
     if (!features || !features.includes(featureId)) return false;
     return true;
   }
   static async hasPermissionToModule(params) {
     const cookieStore = await _headers.cookies.call(void 0, );
     if (params.module.feature) {
-      const features = _optionalChain([cookieStore, 'access', _13 => _13.get, 'call', _14 => _14("features"), 'optionalAccess', _15 => _15.value]);
+      const features = _optionalChain([cookieStore, 'access', _25 => _25.get, 'call', _26 => _26("features"), 'optionalAccess', _27 => _27.value]);
       if (features && !features.includes(params.module.feature)) return false;
     }
-    const rawModules = _optionalChain([cookieStore, 'access', _16 => _16.get, 'call', _17 => _17("modules"), 'optionalAccess', _18 => _18.value]);
+    const rawModules = _optionalChain([cookieStore, 'access', _28 => _28.get, 'call', _29 => _29("modules"), 'optionalAccess', _30 => _30.value]);
     if (!rawModules) return false;
     const modules = JSON.parse(_pako.ungzip.call(void 0, Buffer.from(rawModules, "base64"), { toText: true }));
     const selectedModule = modules.find((module) => module.id === params.module.moduleId);
-    return _chunkCAKOFJZDjs.checkPermissionsFromServer.call(void 0, {
+    return _chunk6OFANJTEjs.checkPermissionsFromServer.call(void 0, {
       module: params.module,
       action: params.action,
       data: params.data,
@@ -96,10 +119,10 @@ function configureServerJsonApi(config) {
 }
 _chunk7QVYU63Ejs.__name.call(void 0, configureServerJsonApi, "configureServerJsonApi");
 function getServerApiUrl() {
-  if (_optionalChain([_serverConfig, 'optionalAccess', _19 => _19.apiUrl])) {
+  if (_optionalChain([_serverConfig, 'optionalAccess', _31 => _31.apiUrl])) {
     return _serverConfig.apiUrl;
   }
-  const envUrl = _chunk26MQIJNBjs.ENV.API_URL;
+  const envUrl = _chunkWGVNJXZOjs.ENV.API_URL;
   if (!envUrl) {
     throw new Error(
       "API URL not configured. Use configureServerJsonApi() or set NEXT_PUBLIC_API_URL environment variable."
@@ -109,10 +132,10 @@ function getServerApiUrl() {
 }
 _chunk7QVYU63Ejs.__name.call(void 0, getServerApiUrl, "getServerApiUrl");
 function getServerAppUrl() {
-  if (_optionalChain([_serverConfig, 'optionalAccess', _20 => _20.appUrl])) {
+  if (_optionalChain([_serverConfig, 'optionalAccess', _32 => _32.appUrl])) {
     return _serverConfig.appUrl;
   }
-  const envUrl = _chunk26MQIJNBjs.ENV.APP_URL;
+  const envUrl = _chunkWGVNJXZOjs.ENV.APP_URL;
   if (!envUrl) {
     throw new Error(
       "App URL not configured. Use configureServerJsonApi({ appUrl }) or set NEXT_PUBLIC_ADDRESS environment variable."
@@ -122,11 +145,11 @@ function getServerAppUrl() {
 }
 _chunk7QVYU63Ejs.__name.call(void 0, getServerAppUrl, "getServerAppUrl");
 function getServerTrackablePages() {
-  return _nullishCoalesce(_optionalChain([_serverConfig, 'optionalAccess', _21 => _21.trackablePages]), () => ( []));
+  return _nullishCoalesce(_optionalChain([_serverConfig, 'optionalAccess', _33 => _33.trackablePages]), () => ( []));
 }
 _chunk7QVYU63Ejs.__name.call(void 0, getServerTrackablePages, "getServerTrackablePages");
 function runServerBootstrapper() {
-  if (_optionalChain([_serverConfig, 'optionalAccess', _22 => _22.bootstrapper])) {
+  if (_optionalChain([_serverConfig, 'optionalAccess', _34 => _34.bootstrapper])) {
     _serverConfig.bootstrapper();
   }
 }
@@ -138,17 +161,17 @@ function buildServerUrl(endpoint) {
 _chunk7QVYU63Ejs.__name.call(void 0, buildServerUrl, "buildServerUrl");
 async function ServerJsonApiGet(params) {
   runServerBootstrapper();
-  const token = await _chunkYUO55Q5Ajs.getServerToken.call(void 0, );
-  const apiResponse = await _chunk5TRFNKJSjs.serverRequest.call(void 0, {
+  const token = params.classKey.cache ? void 0 : await _chunkYUO55Q5Ajs.getServerToken.call(void 0, );
+  const apiResponse = await _chunk6TUB7Y6Tjs.serverRequest.call(void 0, {
     method: "GET",
     url: buildServerUrl(params.endpoint),
     token,
     cache: params.classKey.cache,
     companyId: params.companyId,
     language: params.language,
-    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _23 => _23.additionalHeaders])
+    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _35 => _35.additionalHeaders])
   });
-  return _chunk26MQIJNBjs.translateResponse.call(void 0, {
+  return _chunkWGVNJXZOjs.translateResponse.call(void 0, {
     classKey: params.classKey,
     apiResponse,
     companyId: params.companyId,
@@ -169,9 +192,9 @@ async function ServerJsonApiPost(params) {
   if (!body) {
     body = {};
   } else if (params.overridesJsonApiCreation !== true) {
-    body = _chunk26MQIJNBjs.JsonApiDataFactory.create(params.classKey, body);
+    body = _chunkWGVNJXZOjs.JsonApiDataFactory.create(params.classKey, body);
   }
-  const apiResponse = await _chunk5TRFNKJSjs.serverRequest.call(void 0, {
+  const apiResponse = await _chunk6TUB7Y6Tjs.serverRequest.call(void 0, {
     method: "POST",
     url: buildServerUrl(params.endpoint),
     token,
@@ -179,9 +202,9 @@ async function ServerJsonApiPost(params) {
     files: params.files,
     companyId: params.companyId,
     language: params.language,
-    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _24 => _24.additionalHeaders])
+    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _36 => _36.additionalHeaders])
   });
-  return _chunk26MQIJNBjs.translateResponse.call(void 0, {
+  return _chunkWGVNJXZOjs.translateResponse.call(void 0, {
     classKey: _nullishCoalesce(params.responseType, () => ( params.classKey)),
     apiResponse,
     companyId: params.companyId,
@@ -196,9 +219,9 @@ async function ServerJsonApiPut(params) {
   if (!body) {
     body = {};
   } else {
-    body = _chunk26MQIJNBjs.JsonApiDataFactory.create(params.classKey, body);
+    body = _chunkWGVNJXZOjs.JsonApiDataFactory.create(params.classKey, body);
   }
-  const apiResponse = await _chunk5TRFNKJSjs.serverRequest.call(void 0, {
+  const apiResponse = await _chunk6TUB7Y6Tjs.serverRequest.call(void 0, {
     method: "PUT",
     url: buildServerUrl(params.endpoint),
     token,
@@ -206,9 +229,9 @@ async function ServerJsonApiPut(params) {
     files: params.files,
     companyId: params.companyId,
     language: params.language,
-    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _25 => _25.additionalHeaders])
+    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _37 => _37.additionalHeaders])
   });
-  return _chunk26MQIJNBjs.translateResponse.call(void 0, {
+  return _chunkWGVNJXZOjs.translateResponse.call(void 0, {
     classKey: _nullishCoalesce(params.responseType, () => ( params.classKey)),
     apiResponse,
     companyId: params.companyId,
@@ -223,9 +246,9 @@ async function ServerJsonApiPatch(params) {
   if (!body) {
     body = {};
   } else if (params.overridesJsonApiCreation !== true) {
-    body = _chunk26MQIJNBjs.JsonApiDataFactory.create(params.classKey, body);
+    body = _chunkWGVNJXZOjs.JsonApiDataFactory.create(params.classKey, body);
   }
-  const apiResponse = await _chunk5TRFNKJSjs.serverRequest.call(void 0, {
+  const apiResponse = await _chunk6TUB7Y6Tjs.serverRequest.call(void 0, {
     method: "PATCH",
     url: buildServerUrl(params.endpoint),
     token,
@@ -233,9 +256,9 @@ async function ServerJsonApiPatch(params) {
     files: params.files,
     companyId: params.companyId,
     language: params.language,
-    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _26 => _26.additionalHeaders])
+    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _38 => _38.additionalHeaders])
   });
-  return _chunk26MQIJNBjs.translateResponse.call(void 0, {
+  return _chunkWGVNJXZOjs.translateResponse.call(void 0, {
     classKey: _nullishCoalesce(params.responseType, () => ( params.classKey)),
     apiResponse,
     companyId: params.companyId,
@@ -246,15 +269,15 @@ _chunk7QVYU63Ejs.__name.call(void 0, ServerJsonApiPatch, "ServerJsonApiPatch");
 async function ServerJsonApiDelete(params) {
   runServerBootstrapper();
   const token = await _chunkYUO55Q5Ajs.getServerToken.call(void 0, );
-  const apiResponse = await _chunk5TRFNKJSjs.serverRequest.call(void 0, {
+  const apiResponse = await _chunk6TUB7Y6Tjs.serverRequest.call(void 0, {
     method: "DELETE",
     url: buildServerUrl(params.endpoint),
     token,
     companyId: params.companyId,
     language: params.language,
-    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _27 => _27.additionalHeaders])
+    additionalHeaders: _optionalChain([_serverConfig, 'optionalAccess', _39 => _39.additionalHeaders])
   });
-  return _chunk26MQIJNBjs.translateResponse.call(void 0, {
+  return _chunkWGVNJXZOjs.translateResponse.call(void 0, {
     classKey: _nullishCoalesce(params.responseType, () => ( params.classKey)),
     apiResponse,
     companyId: params.companyId,
@@ -276,5 +299,6 @@ _chunk7QVYU63Ejs.__name.call(void 0, ServerJsonApiDelete, "ServerJsonApiDelete")
 
 
 
-exports.invalidateCacheTag = invalidateCacheTag; exports.invalidateCacheTags = invalidateCacheTags; exports.ServerSession = ServerSession; exports.configureServerJsonApi = configureServerJsonApi; exports.getServerApiUrl = getServerApiUrl; exports.getServerAppUrl = getServerAppUrl; exports.getServerTrackablePages = getServerTrackablePages; exports.ServerJsonApiGet = ServerJsonApiGet; exports.ServerJsonApiPost = ServerJsonApiPost; exports.ServerJsonApiPut = ServerJsonApiPut; exports.ServerJsonApiPatch = ServerJsonApiPatch; exports.ServerJsonApiDelete = ServerJsonApiDelete;
-//# sourceMappingURL=chunk-GHFMKH3M.js.map
+
+exports.invalidateCacheTag = invalidateCacheTag; exports.invalidateCacheTags = invalidateCacheTags; exports.updateCacheTag = updateCacheTag; exports.ServerSession = ServerSession; exports.configureServerJsonApi = configureServerJsonApi; exports.getServerApiUrl = getServerApiUrl; exports.getServerAppUrl = getServerAppUrl; exports.getServerTrackablePages = getServerTrackablePages; exports.ServerJsonApiGet = ServerJsonApiGet; exports.ServerJsonApiPost = ServerJsonApiPost; exports.ServerJsonApiPut = ServerJsonApiPut; exports.ServerJsonApiPatch = ServerJsonApiPatch; exports.ServerJsonApiDelete = ServerJsonApiDelete;
+//# sourceMappingURL=chunk-JEQ34Z5E.js.map

package/dist/chunk-JEQ34Z5E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-JEQ34Z5E.js","../src/server/cache.ts","../src/server/ServerSession.ts","../src/server/JsonApiServer.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACA;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACA;ACpBA,mCAAyC;AAkBzC,MAAA,SAAsB,kBAAA,CAAmB,GAAA,EAAa,QAAA,EAAwB,KAAA,EAAsB;AAClG,EAAA,kCAAA,GAAc,EAAK,OAAO,CAAA;AAC5B;AAFsB,qCAAA,kBAAA,EAAA,oBAAA,CAAA;AAUtB,MAAA,SAAsB,mBAAA,CAAoB,IAAA,EAAgB,QAAA,EAAwB,KAAA,EAAsB;AACtG,EAAA,IAAA,CAAA,MAAW,IAAA,GAAO,IAAA,EAAM;AACtB,IAAA,kCAAA,GAAc,EAAK,OAAO,CAAA;AAAA,EAC5B;AACF;AAJsB,qCAAA,mBAAA,EAAA,qBAAA,CAAA;AAYtB,MAAA,SAAsB,cAAA,CAAe,GAAA,EAA4B;AAC/D,EAAA,8BAAA,GAAa,CAAA;AACf;AAFsB,qCAAA,cAAA,EAAA,gBAAA,CAAA;ADJtB;AACA;AEvCA,uCAAiC;AACjC,6CAAyB;AACzB,qCAA0B;AAC1B,4BAAuB;AAahB,IAAM,cAAA,EAAN,MAAoB;AAAA,EAhB3B,OAgB2B;AAAA,IAAA,qCAAA,IAAA,EAAA,eAAA,CAAA;AAAA,EAAA;AAAA,EACzB,OAAA,MAAa,IAAA,CAAA,EAAiC;AAC5C,IAAA,MAAM,YAAA,EAAc,MAAM,8BAAA,CAAQ;AAClC,IAAA,MAAM,YAAA,EAAc,MAAM,8BAAA,CAAQ;AAElC,IAAA,MAAM,MAAA,kBAAQ,WAAA,mBAAY,GAAA,mBAAI,OAAO,CAAA,6BAAG,QAAA,GAAS,KAAA,CAAA;AACjD,IAAA,MAAM,MAAA,kBAAQ,WAAA,qBAAY,GAAA,mBAAI,OAAO,CAAA,6BAAG,OAAA;AACxC,IAAA,MAAM,eAAA,kBAAiB,WAAA,qBAAY,GAAA,mBAAI,qCAAoB,CAAA,6BAAG,OAAA;AAE9D,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,CAAC,CAAC,KAAA;AAAA,MACZ,eAAA,EAAiB,CAAC,CAAC,MAAA,GAAS,KAAA,CAAM,QAAA,CAAS,wCAAA,CAAU,CAAE,aAAa,CAAA;AAAA,MACpE,KAAA;AAAA,MACA,WAAA,kBAAa,WAAA,uBAAY,GAAA,qBAAI,eAAe,CAAA,+BAAG,QAAA,IAAU,OAAA;AAAA,MACzD,QAAA,EAAU,eAAA,EAAiB,eAAA,IAAmB,IAAA,EAAM,+BAAA,EAAY,OAAA,EAAS,YAAY,CAAC,CAAA,CAAE,MAAA,CAAO,KAAA,IAAS;AAAA,IAC1G,CAAA;AAAA,EACF;AAAA,EAEA,OAAA,MAAa,QAAA,CAAA,EAAW;AACtB,IAAA,MAAM,YAAA,EAAc,MAAM,8BAAA,CAAQ;AAClC,IAAA,MAAM,MAAA,EAAQ,WAAA,CAAY,GAAA,CAAI,OAAO,CAAA;AAErC,IAAA,GAAA,CAAI,CAAC,MAAA,GAAS,CAAC,KAAA,CAAM,KAAA,EAAO,OAAO,KAAA;AACnC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,OAAA,MAAa,SAAA,CAAA,EAAY;AACvB,IAAA,MAAM,YAAA,EAAc,MAAM,8BAAA,CAAQ;AAClC,IAAA,wCAAO,WAAA,uBAAY,GAAA,qBAAI,WAAW,CAAA,+BAAG,OAAA,UAAS,IAAA;AAAA,EAChD;AAAA,EAEA,OAAA,MAAa,MAAA,CAAA,EAAS;AACpB,IAAA,MAAM,YAAA,EAAc,MAAM,8BAAA,CAAQ;AAClC,IAAA,wCAAO,WAAA,uBAAY,GAAA,qBAAI,QAAQ,CAAA,+BAAG,OAAA,UAAS,IAAA;AAAA,EAC7C;AAAA,EAEA,OAAA,MAAa,eAAA,CAAiD,MAAA,EAAmD;AAC/G,IAAA,GAAA,CAAI,CAAE,MAAM,IAAA,CAAK,qBAAA,CAAsB,MAAM,CAAA,EAAI,kCAAA,CAAS,IAAA,CAAM,CAAA;AAAA,EAClE;AAAA,EAEA,OAAA,MAAa,OAAA,CAAQ,MAAA,EAAkC;AACrD,IAAA,MAAM,YAAA,EAAc,MAAM,8BAAA,CAAQ;AAClC,IAAA,MAAM,MAAA,kBAAQ,WAAA,uBAAY,GAAA,qBAAI,OAAO,CAAA,+BAAG,OAAA;AAExC,IAAA,GAAA,CAAI,CAAC,MAAA,GAAS,CAAC,KAAA,CAAM,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,KAAA;AAE9C,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,OAAA,MAAa,UAAA,CAAW,SAAA,EAAqC;AAC3D,IAAA,MAAM,YAAA,EAAc,MAAM,8BAAA,CAAQ;AAClC,IAAA,MAAM,SAAA,kBAAW,WAAA,uBAAY,GAAA,qBAAI,UAAU,CAAA,+BAAG,OAAA;AAE9C,IAAA,GAAA,CAAI,CAAC,SAAA,GAAY,CAAC,QAAA,CAAS,QAAA,CAAS,SAAS,CAAA,EAAG,OAAO,KAAA;AAEvD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,OAAA,MAAa,qBAAA,CAAuD,MAAA,EAI/C;AACnB,IAAA,MAAM,YAAA,EAAc,MAAM,8BAAA,CAAQ;AAElC,IAAA,GAAA,CAAI,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS;AACzB,MAAA,MAAM,SAAA,kBAAW,WAAA,uBAAY,GAAA,qBAAI,UAAU,CAAA,+BAAG,OAAA;AAE9C,MAAA,GAAA,CAAI,SAAA,GAAY,CAAC,QAAA,CAAS,QAAA,CAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA,EAAG,OAAO,KAAA;AAAA,IACpE;AAEA,IAAA,MAAM,WAAA,kBAAa,WAAA,uBAAY,GAAA,qBAAI,SAAS,CAAA,+BAAG,OAAA;AAC/C,IAAA,GAAA,CAAI,CAAC,UAAA,EAAY,OAAO,KAAA;AAExB,IAAA,MAAM,QAAA,EAQA,IAAA,CAAK,KAAA,CAAM,0BAAA,MAAO,CAAO,IAAA,CAAK,UAAA,EAAY,QAAQ,CAAA,EAAG,EAAE,MAAA,EAAQ,KAAK,CAAC,CAAC,CAAA;AAE5E,IAAA,MAAM,eAAA,EAAiB,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAA,EAAA,GAAW,MAAA,CAAO,GAAA,IAAO,MAAA,CAAO,MAAA,CAAO,QAAQ,CAAA;AAEpF,IAAA,OAAO,yDAAA;AAA2B,MAChC,MAAA,EAAQ,MAAA,CAAO,MAAA;AAAA,MACf,MAAA,EAAQ,MAAA,CAAO,MAAA;AAAA,MACf,IAAA,EAAM,MAAA,CAAO,IAAA;AAAA,MACb,MAAA,EAAQ,MAAM,IAAA,CAAK,MAAA,CAAO,CAAA;AAAA,MAC1B;AAAA,IACF,CAAC,CAAA;AAAA,EAWH;AACF,CAAA;AFVA;AACA;AGnGA,IAAI,cAAA,EAMO,IAAA;AAMJ,SAAS,sBAAA,CAAuB,MAAA,EAM9B;AACP,EAAA,cAAA,EAAgB,MAAA;AAChB,EAAA,GAAA,CAAI,MAAA,CAAO,YAAA,EAAc;AACvB,IAAA,MAAA,CAAO,YAAA,CAAa,CAAA;AAAA,EACtB;AACF;AAXgB,qCAAA,sBAAA,EAAA,wBAAA,CAAA;AAaT,SAAS,eAAA,CAAA,EAA0B;AACxC,EAAA,GAAA,iBAAI,aAAA,+BAAe,QAAA,EAAQ;AACzB,IAAA,OAAO,aAAA,CAAc,MAAA;AAAA,EACvB;AACA,EAAA,MAAM,OAAA,EAAS,oBAAA,CAAI,OAAA;AACnB,EAAA,GAAA,CAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAXgB,qCAAA,eAAA,EAAA,iBAAA,CAAA;AAaT,SAAS,eAAA,CAAA,EAA0B;AACxC,EAAA,GAAA,iBAAI,aAAA,+BAAe,QAAA,EAAQ;AACzB,IAAA,OAAO,aAAA,CAAc,MAAA;AAAA,EACvB;AACA,EAAA,MAAM,OAAA,EAAS,oBAAA,CAAI,OAAA;AACnB,EAAA,GAAA,CAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,EACF;AACA,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACzC;AAXgB,qCAAA,eAAA,EAAA,iBAAA,CAAA;AAaT,SAAS,uBAAA,CAAA,EAAmD;AACjE,EAAA,wCAAO,aAAA,+BAAe,gBAAA,UAAkB,CAAC,GAAA;AAC3C;AAFgB,qCAAA,uBAAA,EAAA,yBAAA,CAAA;AAIhB,SAAS,qBAAA,CAAA,EAA8B;AACrC,EAAA,GAAA,iBAAI,aAAA,+BAAe,cAAA,EAAc;AAC/B,IAAA,aAAA,CAAc,YAAA,CAAa,CAAA;AAAA,EAC7B;AACF;AAJS,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAMT,SAAS,cAAA,CAAe,QAAA,EAA0B;AAChD,EAAA,MAAM,OAAA,EAAS,eAAA,CAAgB,CAAA;AAC/B,EAAA,OAAO,QAAA,CAAS,UAAA,CAAW,MAAM,EAAA,EAAI,SAAA,EAAW,CAAA,EAAA;AAClD;AAHS;AAUyB;AACV,EAAA;AAG4B,EAAA;AAEV,EAAA;AAC9B,IAAA;AAC2B,IAAA;AACnC,IAAA;AACuB,IAAA;AACL,IAAA;AACD,IAAA;AACiB,IAAA;AACnC,EAAA;AAEwB,EAAA;AACN,IAAA;AACjB,IAAA;AACkB,IAAA;AACD,IAAA;AACE,IAAA;AAEE,MAAA;AACjB,MAAA;AACkB,MAAA;AACD,MAAA;AALF,IAAA;AAOpB,EAAA;AACH;AAlCsB;AA6CY;AACV,EAAA;AACa,EAAA;AAEjB,EAAA;AACP,EAAA;AACD,IAAA;AACqC,EAAA;AACL,IAAA;AAC1C,EAAA;AAEwC,EAAA;AAC9B,IAAA;AAC2B,IAAA;AACnC,IAAA;AACA,IAAA;AACc,IAAA;AACI,IAAA;AACD,IAAA;AACiB,IAAA;AACnC,EAAA;AAEwB,EAAA;AACiB,IAAA;AACxC,IAAA;AACkB,IAAA;AACD,IAAA;AAClB,EAAA;AACH;AArCsB;AA+CY;AACV,EAAA;AACa,EAAA;AAEjB,EAAA;AACP,EAAA;AACD,IAAA;AACH,EAAA;AACmC,IAAA;AAC1C,EAAA;AAEwC,EAAA;AAC9B,IAAA;AAC2B,IAAA;AACnC,IAAA;AACA,IAAA;AACc,IAAA;AACI,IAAA;AACD,IAAA;AACiB,IAAA;AACnC,EAAA;AAEwB,EAAA;AACiB,IAAA;AACxC,IAAA;AACkB,IAAA;AACD,IAAA;AAClB,EAAA;AACH;AApCsB;AA+CY;AACV,EAAA;AACa,EAAA;AAEjB,EAAA;AACP,EAAA;AACD,IAAA;AACqC,EAAA;AACL,IAAA;AAC1C,EAAA;AAEwC,EAAA;AAC9B,IAAA;AAC2B,IAAA;AACnC,IAAA;AACA,IAAA;AACc,IAAA;AACI,IAAA;AACD,IAAA;AACiB,IAAA;AACnC,EAAA;AAEwB,EAAA;AACiB,IAAA;AACxC,IAAA;AACkB,IAAA;AACD,IAAA;AAClB,EAAA;AACH;AArCsB;AA6CY;AACV,EAAA;AACa,EAAA;AAEK,EAAA;AAC9B,IAAA;AAC2B,IAAA;AACnC,IAAA;AACkB,IAAA;AACD,IAAA;AACiB,IAAA;AACnC,EAAA;AAEwB,EAAA;AACiB,IAAA;AACxC,IAAA;AACkB,IAAA;AACD,IAAA;AAClB,EAAA;AACH;AAzBsB;AHyD6B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-JEQ34Z5E.js","sourcesContent":[null,"// Server-only utilities (NOT server actions - these cannot be called from client components)\n\nimport { revalidateTag, updateTag } from \"next/cache\";\n\nimport type { CacheProfile } from \"./cacheProfiles\";\n\nexport { CACHE_PROFILES, type CacheProfile } from \"./cacheProfiles\";\n\n/**\n * Revalidate a cache tag to invalidate cached data.\n * Next.js 16+ requires a profile parameter.\n *\n * With `\"max\"` the tagged entries are marked stale and served stale-while-revalidate\n * (a one-year window): the next request still gets the old data while fresh data loads\n * in the background. It is not an immediate invalidation. A Server Action that must\n * read its own write uses `updateCacheTag` instead.\n *\n * @param tag - The cache tag to invalidate\n * @param profile - The cache profile whose `expire` bounds how long stale data may be served (defaults to \"max\")\n */\nexport async function invalidateCacheTag(tag: string, profile: CacheProfile = \"max\"): Promise<void> {\n  revalidateTag(tag, profile);\n}\n\n/**\n * Revalidate multiple cache tags.\n *\n * @param tags - Array of cache tags to invalidate\n * @param profile - The cache profile, see `invalidateCacheTag` (defaults to \"max\", stale-while-revalidate)\n */\nexport async function invalidateCacheTags(tags: string[], profile: CacheProfile = \"max\"): Promise<void> {\n  for (const tag of tags) {\n    revalidateTag(tag, profile);\n  }\n}\n\n/**\n * Expire a cache tag immediately, so the same request reads fresh data (read-your-own-writes).\n * Wraps `updateTag`, which works in Server Actions only. Route Handlers use `invalidateCacheTag`.\n *\n * @param tag - The cache tag to expire\n */\nexport async function updateCacheTag(tag: string): Promise<void> {\n  updateTag(tag);\n}\n","import { cookies, headers } from \"next/headers\";\nimport { redirect } from \"next/navigation\";\nimport { userAgent } from \"next/server\";\nimport { ungzip } from \"pako\";\nimport { Action, checkPermissionsFromServer, ModuleWithPermissions } from \"../permissions\";\nimport { getRoleId } from \"../roles/config\";\nimport { VIEWPORT_COOKIE_NAME } from \"../utils/use-mobile\";\n\nexport interface SessionSnapshot {\n  isLogged: boolean;\n  isAdministrator: boolean;\n  token?: string;\n  sidebarOpen: boolean;\n  isMobile: boolean;\n}\n\nexport class ServerSession {\n  static async read(): Promise<SessionSnapshot> {\n    const cookieStore = await cookies();\n    const headerStore = await headers();\n\n    const token = cookieStore.get(\"token\")?.value || undefined;\n    const roles = cookieStore.get(\"roles\")?.value;\n    const viewportCookie = cookieStore.get(VIEWPORT_COOKIE_NAME)?.value;\n\n    return {\n      isLogged: !!token,\n      isAdministrator: !!roles && roles.includes(getRoleId().Administrator),\n      token,\n      sidebarOpen: cookieStore.get(\"sidebar_state\")?.value !== \"false\",\n      isMobile: viewportCookie ? viewportCookie === \"1\" : userAgent({ headers: headerStore }).device.type === \"mobile\",\n    };\n  }\n\n  static async isLogged() {\n    const cookieStore = await cookies();\n    const token = cookieStore.get(\"token\");\n\n    if (!token || !token.value) return false;\n    return true;\n  }\n\n  static async companyId() {\n    const cookieStore = await cookies();\n    return cookieStore.get(\"companyId\")?.value ?? \"\";\n  }\n\n  static async userId() {\n    const cookieStore = await cookies();\n    return cookieStore.get(\"userId\")?.value ?? \"\";\n  }\n\n  static async checkPermission<M extends ModuleWithPermissions>(params: { module: M; action: Action; data?: any }) {\n    if (!(await this.hasPermissionToModule(params))) redirect(`/401`);\n  }\n\n  static async hasRole(roleId: string): Promise<boolean> {\n    const cookieStore = await cookies();\n    const roles = cookieStore.get(\"roles\")?.value;\n\n    if (!roles || !roles.includes(roleId)) return false;\n\n    return true;\n  }\n\n  static async hasFeature(featureId: string): Promise<boolean> {\n    const cookieStore = await cookies();\n    const features = cookieStore.get(\"features\")?.value;\n\n    if (!features || !features.includes(featureId)) return false;\n\n    return true;\n  }\n\n  static async hasPermissionToModule<M extends ModuleWithPermissions>(params: {\n    module: M;\n    action: Action;\n    data?: any;\n  }): Promise<boolean> {\n    const cookieStore = await cookies();\n\n    if (params.module.feature) {\n      const features = cookieStore.get(\"features\")?.value;\n\n      if (features && !features.includes(params.module.feature)) return false;\n    }\n\n    const rawModules = cookieStore.get(\"modules\")?.value;\n    if (!rawModules) return false;\n\n    const modules: {\n      id: string;\n      permissions: {\n        create: boolean | string;\n        read: boolean | string;\n        update: boolean | string;\n        delete: boolean | string;\n      };\n    }[] = JSON.parse(ungzip(Buffer.from(rawModules, \"base64\"), { toText: true }));\n\n    const selectedModule = modules.find((module) => module.id === params.module.moduleId);\n\n    return checkPermissionsFromServer({\n      module: params.module,\n      action: params.action,\n      data: params.data,\n      userId: await this.userId(),\n      selectedModule: selectedModule,\n    });\n\n    // if (!selectedModule) return false;\n\n    // if (!selectedModule.permissions[params.action]) return false;\n    // if (typeof selectedModule.permissions[params.action] === \"boolean\")\n    //   return selectedModule.permissions[params.action] as boolean;\n\n    // if (!params.data) return false;\n\n    // return params.data[selectedModule.permissions[params.action] as string] === this.userId;\n  }\n}\n","// Server-only utilities (NOT server actions - these cannot be called from client components)\n\nimport { ENV } from \"../core/env\";\nimport { JsonApiDataFactory } from \"../core/factories/JsonApiDataFactory\";\nimport { ApiRequestDataTypeInterface } from \"../core/interfaces/ApiRequestDataTypeInterface\";\nimport { ApiResponseInterface } from \"../core/interfaces/ApiResponseInterface\";\nimport { translateResponse } from \"../core/utils/translateResponse\";\nimport { ModuleWithPermissions } from \"../permissions/types\";\nimport { serverRequest } from \"./request\";\nimport { getServerToken } from \"./token\";\n\n// Config storage for server contexts\nlet _serverConfig: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n} | null = null;\n\n/**\n * Configure the JSON:API server client.\n * Call this in your Bootstrapper or server initialization.\n */\nexport function configureServerJsonApi(config: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n}): void {\n  _serverConfig = config;\n  if (config.bootstrapper) {\n    config.bootstrapper();\n  }\n}\n\nexport function getServerApiUrl(): string {\n  if (_serverConfig?.apiUrl) {\n    return _serverConfig.apiUrl;\n  }\n  const envUrl = ENV.API_URL;\n  if (!envUrl) {\n    throw new Error(\n      \"API URL not configured. Use configureServerJsonApi() or set NEXT_PUBLIC_API_URL environment variable.\",\n    );\n  }\n  return envUrl;\n}\n\nexport function getServerAppUrl(): string {\n  if (_serverConfig?.appUrl) {\n    return _serverConfig.appUrl;\n  }\n  const envUrl = ENV.APP_URL;\n  if (!envUrl) {\n    throw new Error(\n      \"App URL not configured. Use configureServerJsonApi({ appUrl }) or set NEXT_PUBLIC_ADDRESS environment variable.\",\n    );\n  }\n  return envUrl.trim().replace(/\\/+$/, \"\");\n}\n\nexport function getServerTrackablePages(): ModuleWithPermissions[] {\n  return _serverConfig?.trackablePages ?? [];\n}\n\nfunction runServerBootstrapper(): void {\n  if (_serverConfig?.bootstrapper) {\n    _serverConfig.bootstrapper();\n  }\n}\n\nfunction buildServerUrl(endpoint: string): string {\n  const apiUrl = getServerApiUrl();\n  return endpoint.startsWith(\"http\") ? endpoint : `${apiUrl}${endpoint}`;\n}\n\nexport async function ServerJsonApiGet(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  language: string;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  // A cached GET never sends the token, so it must not read the cookie either:\n  // the read would make a public page dynamic.\n  const token = params.classKey.cache ? undefined : await getServerToken();\n\n  const apiResponse = await serverRequest({\n    method: \"GET\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    cache: params.classKey.cache,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n    paginationHandler: async (endpoint: string) =>\n      ServerJsonApiGet({\n        classKey: params.classKey,\n        endpoint,\n        companyId: params.companyId,\n        language: params.language,\n      }),\n  });\n}\n\nexport async function ServerJsonApiPost(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  body?: any;\n  overridesJsonApiCreation?: boolean;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  language: string;\n  responseType?: ApiRequestDataTypeInterface;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  let body = params.body;\n  if (!body) {\n    body = {};\n  } else if (params.overridesJsonApiCreation !== true) {\n    body = JsonApiDataFactory.create(params.classKey, body);\n  }\n\n  const apiResponse = await serverRequest({\n    method: \"POST\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    body,\n    files: params.files,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n\nexport async function ServerJsonApiPut(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  body?: any;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  language: string;\n  responseType?: ApiRequestDataTypeInterface;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  let body = params.body;\n  if (!body) {\n    body = {};\n  } else {\n    body = JsonApiDataFactory.create(params.classKey, body);\n  }\n\n  const apiResponse = await serverRequest({\n    method: \"PUT\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    body,\n    files: params.files,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n\nexport async function ServerJsonApiPatch(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  body?: any;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  overridesJsonApiCreation?: boolean;\n  responseType?: ApiRequestDataTypeInterface;\n  language: string;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  let body = params.body;\n  if (!body) {\n    body = {};\n  } else if (params.overridesJsonApiCreation !== true) {\n    body = JsonApiDataFactory.create(params.classKey, body);\n  }\n\n  const apiResponse = await serverRequest({\n    method: \"PATCH\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    body,\n    files: params.files,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n\nexport async function ServerJsonApiDelete(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  language: string;\n  responseType?: ApiRequestDataTypeInterface;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  const apiResponse = await serverRequest({\n    method: \"DELETE\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n"]}