@carlonicora/nextjs-jsonapi 3.28.2 → 4.0.0

package/dist/{chunk-7B4E42R5.mjs → chunk-3CZ2GK5R.mjs}

@@ -1,23 +1,27 @@
-import {
-  serverRequest
-} from "./chunk-SJLXPHK5.mjs";
 import {
   getServerToken
 } from "./chunk-F5UNXZ3J.mjs";
 import {
+  serverRequest
+} from "./chunk-E2LENTUH.mjs";
+import {
+  getRoleId
+} from "./chunk-PW42LRSL.mjs";
+import {
+  VIEWPORT_COOKIE_NAME,
   checkPermissionsFromServer
-} from "./chunk-E3I4MT53.mjs";
+} from "./chunk-AQZ3T4BR.mjs";
 import {
   ENV,
   JsonApiDataFactory,
   translateResponse
-} from "./chunk-37DMFVLN.mjs";
+} from "./chunk-7SCREMTX.mjs";
 import {
   __name
 } from "./chunk-PAWJFY3S.mjs";
 
 // src/server/cache.ts
-import { revalidateTag } from "next/cache";
+import { revalidateTag, updateTag } from "next/cache";
 async function invalidateCacheTag(tag, profile = "max") {
   revalidateTag(tag, profile);
 }
@@ -28,15 +32,34 @@ async function invalidateCacheTags(tags, profile = "max") {
   }
 }
 __name(invalidateCacheTags, "invalidateCacheTags");
+async function updateCacheTag(tag) {
+  updateTag(tag);
+}
+__name(updateCacheTag, "updateCacheTag");
 
 // src/server/ServerSession.ts
-import { cookies } from "next/headers";
+import { cookies, headers } from "next/headers";
 import { redirect } from "next/navigation";
+import { userAgent } from "next/server";
 import { ungzip } from "pako";
 var ServerSession = class {
   static {
     __name(this, "ServerSession");
   }
+  static async read() {
+    const cookieStore = await cookies();
+    const headerStore = await headers();
+    const token = cookieStore.get("token")?.value || void 0;
+    const roles = cookieStore.get("roles")?.value;
+    const viewportCookie = cookieStore.get(VIEWPORT_COOKIE_NAME)?.value;
+    return {
+      isLogged: !!token,
+      isAdministrator: !!roles && roles.includes(getRoleId().Administrator),
+      token,
+      sidebarOpen: cookieStore.get("sidebar_state")?.value !== "false",
+      isMobile: viewportCookie ? viewportCookie === "1" : userAgent({ headers: headerStore }).device.type === "mobile"
+    };
+  }
   static async isLogged() {
     const cookieStore = await cookies();
     const token = cookieStore.get("token");
@@ -138,7 +161,7 @@ function buildServerUrl(endpoint) {
 __name(buildServerUrl, "buildServerUrl");
 async function ServerJsonApiGet(params) {
   runServerBootstrapper();
-  const token = await getServerToken();
+  const token = params.classKey.cache ? void 0 : await getServerToken();
   const apiResponse = await serverRequest({
     method: "GET",
     url: buildServerUrl(params.endpoint),
@@ -266,6 +289,7 @@ __name(ServerJsonApiDelete, "ServerJsonApiDelete");
 export {
   invalidateCacheTag,
   invalidateCacheTags,
+  updateCacheTag,
   ServerSession,
   configureServerJsonApi,
   getServerApiUrl,
@@ -277,4 +301,4 @@ export {
   ServerJsonApiPatch,
   ServerJsonApiDelete
 };
-//# sourceMappingURL=chunk-7B4E42R5.mjs.map
+//# sourceMappingURL=chunk-3CZ2GK5R.mjs.map

package/dist/chunk-3CZ2GK5R.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/cache.ts","../src/server/ServerSession.ts","../src/server/JsonApiServer.ts"],"sourcesContent":["// Server-only utilities (NOT server actions - these cannot be called from client components)\n\nimport { revalidateTag, updateTag } from \"next/cache\";\n\nimport type { CacheProfile } from \"./cacheProfiles\";\n\nexport { CACHE_PROFILES, type CacheProfile } from \"./cacheProfiles\";\n\n/**\n * Revalidate a cache tag to invalidate cached data.\n * Next.js 16+ requires a profile parameter.\n *\n * With `\"max\"` the tagged entries are marked stale and served stale-while-revalidate\n * (a one-year window): the next request still gets the old data while fresh data loads\n * in the background. It is not an immediate invalidation. A Server Action that must\n * read its own write uses `updateCacheTag` instead.\n *\n * @param tag - The cache tag to invalidate\n * @param profile - The cache profile whose `expire` bounds how long stale data may be served (defaults to \"max\")\n */\nexport async function invalidateCacheTag(tag: string, profile: CacheProfile = \"max\"): Promise<void> {\n  revalidateTag(tag, profile);\n}\n\n/**\n * Revalidate multiple cache tags.\n *\n * @param tags - Array of cache tags to invalidate\n * @param profile - The cache profile, see `invalidateCacheTag` (defaults to \"max\", stale-while-revalidate)\n */\nexport async function invalidateCacheTags(tags: string[], profile: CacheProfile = \"max\"): Promise<void> {\n  for (const tag of tags) {\n    revalidateTag(tag, profile);\n  }\n}\n\n/**\n * Expire a cache tag immediately, so the same request reads fresh data (read-your-own-writes).\n * Wraps `updateTag`, which works in Server Actions only. Route Handlers use `invalidateCacheTag`.\n *\n * @param tag - The cache tag to expire\n */\nexport async function updateCacheTag(tag: string): Promise<void> {\n  updateTag(tag);\n}\n","import { cookies, headers } from \"next/headers\";\nimport { redirect } from \"next/navigation\";\nimport { userAgent } from \"next/server\";\nimport { ungzip } from \"pako\";\nimport { Action, checkPermissionsFromServer, ModuleWithPermissions } from \"../permissions\";\nimport { getRoleId } from \"../roles/config\";\nimport { VIEWPORT_COOKIE_NAME } from \"../utils/use-mobile\";\n\nexport interface SessionSnapshot {\n  isLogged: boolean;\n  isAdministrator: boolean;\n  token?: string;\n  sidebarOpen: boolean;\n  isMobile: boolean;\n}\n\nexport class ServerSession {\n  static async read(): Promise<SessionSnapshot> {\n    const cookieStore = await cookies();\n    const headerStore = await headers();\n\n    const token = cookieStore.get(\"token\")?.value || undefined;\n    const roles = cookieStore.get(\"roles\")?.value;\n    const viewportCookie = cookieStore.get(VIEWPORT_COOKIE_NAME)?.value;\n\n    return {\n      isLogged: !!token,\n      isAdministrator: !!roles && roles.includes(getRoleId().Administrator),\n      token,\n      sidebarOpen: cookieStore.get(\"sidebar_state\")?.value !== \"false\",\n      isMobile: viewportCookie ? viewportCookie === \"1\" : userAgent({ headers: headerStore }).device.type === \"mobile\",\n    };\n  }\n\n  static async isLogged() {\n    const cookieStore = await cookies();\n    const token = cookieStore.get(\"token\");\n\n    if (!token || !token.value) return false;\n    return true;\n  }\n\n  static async companyId() {\n    const cookieStore = await cookies();\n    return cookieStore.get(\"companyId\")?.value ?? \"\";\n  }\n\n  static async userId() {\n    const cookieStore = await cookies();\n    return cookieStore.get(\"userId\")?.value ?? \"\";\n  }\n\n  static async checkPermission<M extends ModuleWithPermissions>(params: { module: M; action: Action; data?: any }) {\n    if (!(await this.hasPermissionToModule(params))) redirect(`/401`);\n  }\n\n  static async hasRole(roleId: string): Promise<boolean> {\n    const cookieStore = await cookies();\n    const roles = cookieStore.get(\"roles\")?.value;\n\n    if (!roles || !roles.includes(roleId)) return false;\n\n    return true;\n  }\n\n  static async hasFeature(featureId: string): Promise<boolean> {\n    const cookieStore = await cookies();\n    const features = cookieStore.get(\"features\")?.value;\n\n    if (!features || !features.includes(featureId)) return false;\n\n    return true;\n  }\n\n  static async hasPermissionToModule<M extends ModuleWithPermissions>(params: {\n    module: M;\n    action: Action;\n    data?: any;\n  }): Promise<boolean> {\n    const cookieStore = await cookies();\n\n    if (params.module.feature) {\n      const features = cookieStore.get(\"features\")?.value;\n\n      if (features && !features.includes(params.module.feature)) return false;\n    }\n\n    const rawModules = cookieStore.get(\"modules\")?.value;\n    if (!rawModules) return false;\n\n    const modules: {\n      id: string;\n      permissions: {\n        create: boolean | string;\n        read: boolean | string;\n        update: boolean | string;\n        delete: boolean | string;\n      };\n    }[] = JSON.parse(ungzip(Buffer.from(rawModules, \"base64\"), { toText: true }));\n\n    const selectedModule = modules.find((module) => module.id === params.module.moduleId);\n\n    return checkPermissionsFromServer({\n      module: params.module,\n      action: params.action,\n      data: params.data,\n      userId: await this.userId(),\n      selectedModule: selectedModule,\n    });\n\n    // if (!selectedModule) return false;\n\n    // if (!selectedModule.permissions[params.action]) return false;\n    // if (typeof selectedModule.permissions[params.action] === \"boolean\")\n    //   return selectedModule.permissions[params.action] as boolean;\n\n    // if (!params.data) return false;\n\n    // return params.data[selectedModule.permissions[params.action] as string] === this.userId;\n  }\n}\n","// Server-only utilities (NOT server actions - these cannot be called from client components)\n\nimport { ENV } from \"../core/env\";\nimport { JsonApiDataFactory } from \"../core/factories/JsonApiDataFactory\";\nimport { ApiRequestDataTypeInterface } from \"../core/interfaces/ApiRequestDataTypeInterface\";\nimport { ApiResponseInterface } from \"../core/interfaces/ApiResponseInterface\";\nimport { translateResponse } from \"../core/utils/translateResponse\";\nimport { ModuleWithPermissions } from \"../permissions/types\";\nimport { serverRequest } from \"./request\";\nimport { getServerToken } from \"./token\";\n\n// Config storage for server contexts\nlet _serverConfig: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n} | null = null;\n\n/**\n * Configure the JSON:API server client.\n * Call this in your Bootstrapper or server initialization.\n */\nexport function configureServerJsonApi(config: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n}): void {\n  _serverConfig = config;\n  if (config.bootstrapper) {\n    config.bootstrapper();\n  }\n}\n\nexport function getServerApiUrl(): string {\n  if (_serverConfig?.apiUrl) {\n    return _serverConfig.apiUrl;\n  }\n  const envUrl = ENV.API_URL;\n  if (!envUrl) {\n    throw new Error(\n      \"API URL not configured. Use configureServerJsonApi() or set NEXT_PUBLIC_API_URL environment variable.\",\n    );\n  }\n  return envUrl;\n}\n\nexport function getServerAppUrl(): string {\n  if (_serverConfig?.appUrl) {\n    return _serverConfig.appUrl;\n  }\n  const envUrl = ENV.APP_URL;\n  if (!envUrl) {\n    throw new Error(\n      \"App URL not configured. Use configureServerJsonApi({ appUrl }) or set NEXT_PUBLIC_ADDRESS environment variable.\",\n    );\n  }\n  return envUrl.trim().replace(/\\/+$/, \"\");\n}\n\nexport function getServerTrackablePages(): ModuleWithPermissions[] {\n  return _serverConfig?.trackablePages ?? [];\n}\n\nfunction runServerBootstrapper(): void {\n  if (_serverConfig?.bootstrapper) {\n    _serverConfig.bootstrapper();\n  }\n}\n\nfunction buildServerUrl(endpoint: string): string {\n  const apiUrl = getServerApiUrl();\n  return endpoint.startsWith(\"http\") ? endpoint : `${apiUrl}${endpoint}`;\n}\n\nexport async function ServerJsonApiGet(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  language: string;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  // A cached GET never sends the token, so it must not read the cookie either:\n  // the read would make a public page dynamic.\n  const token = params.classKey.cache ? undefined : await getServerToken();\n\n  const apiResponse = await serverRequest({\n    method: \"GET\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    cache: params.classKey.cache,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n    paginationHandler: async (endpoint: string) =>\n      ServerJsonApiGet({\n        classKey: params.classKey,\n        endpoint,\n        companyId: params.companyId,\n        language: params.language,\n      }),\n  });\n}\n\nexport async function ServerJsonApiPost(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  body?: any;\n  overridesJsonApiCreation?: boolean;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  language: string;\n  responseType?: ApiRequestDataTypeInterface;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  let body = params.body;\n  if (!body) {\n    body = {};\n  } else if (params.overridesJsonApiCreation !== true) {\n    body = JsonApiDataFactory.create(params.classKey, body);\n  }\n\n  const apiResponse = await serverRequest({\n    method: \"POST\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    body,\n    files: params.files,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n\nexport async function ServerJsonApiPut(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  body?: any;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  language: string;\n  responseType?: ApiRequestDataTypeInterface;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  let body = params.body;\n  if (!body) {\n    body = {};\n  } else {\n    body = JsonApiDataFactory.create(params.classKey, body);\n  }\n\n  const apiResponse = await serverRequest({\n    method: \"PUT\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    body,\n    files: params.files,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n\nexport async function ServerJsonApiPatch(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  body?: any;\n  files?: { [key: string]: File | Blob } | File | Blob;\n  overridesJsonApiCreation?: boolean;\n  responseType?: ApiRequestDataTypeInterface;\n  language: string;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  let body = params.body;\n  if (!body) {\n    body = {};\n  } else if (params.overridesJsonApiCreation !== true) {\n    body = JsonApiDataFactory.create(params.classKey, body);\n  }\n\n  const apiResponse = await serverRequest({\n    method: \"PATCH\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    body,\n    files: params.files,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n\nexport async function ServerJsonApiDelete(params: {\n  classKey: ApiRequestDataTypeInterface;\n  endpoint: string;\n  companyId?: string;\n  language: string;\n  responseType?: ApiRequestDataTypeInterface;\n}): Promise<ApiResponseInterface> {\n  runServerBootstrapper();\n  const token = await getServerToken();\n\n  const apiResponse = await serverRequest({\n    method: \"DELETE\",\n    url: buildServerUrl(params.endpoint),\n    token,\n    companyId: params.companyId,\n    language: params.language,\n    additionalHeaders: _serverConfig?.additionalHeaders,\n  });\n\n  return translateResponse({\n    classKey: params.responseType ?? params.classKey,\n    apiResponse,\n    companyId: params.companyId,\n    language: params.language,\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAEA,SAAS,eAAe,iBAAiB;AAkBzC,eAAsB,mBAAmB,KAAa,UAAwB,OAAsB;AAClG,gBAAc,KAAK,OAAO;AAC5B;AAFsB;AAUtB,eAAsB,oBAAoB,MAAgB,UAAwB,OAAsB;AACtG,aAAW,OAAO,MAAM;AACtB,kBAAc,KAAK,OAAO;AAAA,EAC5B;AACF;AAJsB;AAYtB,eAAsB,eAAe,KAA4B;AAC/D,YAAU,GAAG;AACf;AAFsB;;;AC1CtB,SAAS,SAAS,eAAe;AACjC,SAAS,gBAAgB;AACzB,SAAS,iBAAiB;AAC1B,SAAS,cAAc;AAahB,IAAM,gBAAN,MAAoB;AAAA,EAhB3B,OAgB2B;AAAA;AAAA;AAAA,EACzB,aAAa,OAAiC;AAC5C,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,cAAc,MAAM,QAAQ;AAElC,UAAM,QAAQ,YAAY,IAAI,OAAO,GAAG,SAAS;AACjD,UAAM,QAAQ,YAAY,IAAI,OAAO,GAAG;AACxC,UAAM,iBAAiB,YAAY,IAAI,oBAAoB,GAAG;AAE9D,WAAO;AAAA,MACL,UAAU,CAAC,CAAC;AAAA,MACZ,iBAAiB,CAAC,CAAC,SAAS,MAAM,SAAS,UAAU,EAAE,aAAa;AAAA,MACpE;AAAA,MACA,aAAa,YAAY,IAAI,eAAe,GAAG,UAAU;AAAA,MACzD,UAAU,iBAAiB,mBAAmB,MAAM,UAAU,EAAE,SAAS,YAAY,CAAC,EAAE,OAAO,SAAS;AAAA,IAC1G;AAAA,EACF;AAAA,EAEA,aAAa,WAAW;AACtB,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,QAAQ,YAAY,IAAI,OAAO;AAErC,QAAI,CAAC,SAAS,CAAC,MAAM,MAAO,QAAO;AACnC,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,YAAY;AACvB,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,WAAW,GAAG,SAAS;AAAA,EAChD;AAAA,EAEA,aAAa,SAAS;AACpB,UAAM,cAAc,MAAM,QAAQ;AAClC,WAAO,YAAY,IAAI,QAAQ,GAAG,SAAS;AAAA,EAC7C;AAAA,EAEA,aAAa,gBAAiD,QAAmD;AAC/G,QAAI,CAAE,MAAM,KAAK,sBAAsB,MAAM,EAAI,UAAS,MAAM;AAAA,EAClE;AAAA,EAEA,aAAa,QAAQ,QAAkC;AACrD,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,QAAQ,YAAY,IAAI,OAAO,GAAG;AAExC,QAAI,CAAC,SAAS,CAAC,MAAM,SAAS,MAAM,EAAG,QAAO;AAE9C,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,WAAW,WAAqC;AAC3D,UAAM,cAAc,MAAM,QAAQ;AAClC,UAAM,WAAW,YAAY,IAAI,UAAU,GAAG;AAE9C,QAAI,CAAC,YAAY,CAAC,SAAS,SAAS,SAAS,EAAG,QAAO;AAEvD,WAAO;AAAA,EACT;AAAA,EAEA,aAAa,sBAAuD,QAI/C;AACnB,UAAM,cAAc,MAAM,QAAQ;AAElC,QAAI,OAAO,OAAO,SAAS;AACzB,YAAM,WAAW,YAAY,IAAI,UAAU,GAAG;AAE9C,UAAI,YAAY,CAAC,SAAS,SAAS,OAAO,OAAO,OAAO,EAAG,QAAO;AAAA,IACpE;AAEA,UAAM,aAAa,YAAY,IAAI,SAAS,GAAG;AAC/C,QAAI,CAAC,WAAY,QAAO;AAExB,UAAM,UAQA,KAAK,MAAM,OAAO,OAAO,KAAK,YAAY,QAAQ,GAAG,EAAE,QAAQ,KAAK,CAAC,CAAC;AAE5E,UAAM,iBAAiB,QAAQ,KAAK,CAAC,WAAW,OAAO,OAAO,OAAO,OAAO,QAAQ;AAEpF,WAAO,2BAA2B;AAAA,MAChC,QAAQ,OAAO;AAAA,MACf,QAAQ,OAAO;AAAA,MACf,MAAM,OAAO;AAAA,MACb,QAAQ,MAAM,KAAK,OAAO;AAAA,MAC1B;AAAA,IACF,CAAC;AAAA,EAWH;AACF;;;AC5GA,IAAI,gBAMO;AAMJ,SAAS,uBAAuB,QAM9B;AACP,kBAAgB;AAChB,MAAI,OAAO,cAAc;AACvB,WAAO,aAAa;AAAA,EACtB;AACF;AAXgB;AAaT,SAAS,kBAA0B;AACxC,MAAI,eAAe,QAAQ;AACzB,WAAO,cAAc;AAAA,EACvB;AACA,QAAM,SAAS,IAAI;AACnB,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAXgB;AAaT,SAAS,kBAA0B;AACxC,MAAI,eAAe,QAAQ;AACzB,WAAO,cAAc;AAAA,EACvB;AACA,QAAM,SAAS,IAAI;AACnB,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,SAAO,OAAO,KAAK,EAAE,QAAQ,QAAQ,EAAE;AACzC;AAXgB;AAaT,SAAS,0BAAmD;AACjE,SAAO,eAAe,kBAAkB,CAAC;AAC3C;AAFgB;AAIhB,SAAS,wBAA8B;AACrC,MAAI,eAAe,cAAc;AAC/B,kBAAc,aAAa;AAAA,EAC7B;AACF;AAJS;AAMT,SAAS,eAAe,UAA0B;AAChD,QAAM,SAAS,gBAAgB;AAC/B,SAAO,SAAS,WAAW,MAAM,IAAI,WAAW,GAAG,MAAM,GAAG,QAAQ;AACtE;AAHS;AAKT,eAAsB,iBAAiB,QAKL;AAChC,wBAAsB;AAGtB,QAAM,QAAQ,OAAO,SAAS,QAAQ,SAAY,MAAM,eAAe;AAEvE,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA,OAAO,OAAO,SAAS;AAAA,IACvB,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO;AAAA,IACjB;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,8BAAO,aACxB,iBAAiB;AAAA,MACf,UAAU,OAAO;AAAA,MACjB;AAAA,MACA,WAAW,OAAO;AAAA,MAClB,UAAU,OAAO;AAAA,IACnB,CAAC,GANgB;AAAA,EAOrB,CAAC;AACH;AAlCsB;AAoCtB,eAAsB,kBAAkB,QASN;AAChC,wBAAsB;AACtB,QAAM,QAAQ,MAAM,eAAe;AAEnC,MAAI,OAAO,OAAO;AAClB,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV,WAAW,OAAO,6BAA6B,MAAM;AACnD,WAAO,mBAAmB,OAAO,OAAO,UAAU,IAAI;AAAA,EACxD;AAEA,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO,gBAAgB,OAAO;AAAA,IACxC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AArCsB;AAuCtB,eAAsB,iBAAiB,QAQL;AAChC,wBAAsB;AACtB,QAAM,QAAQ,MAAM,eAAe;AAEnC,MAAI,OAAO,OAAO;AAClB,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV,OAAO;AACL,WAAO,mBAAmB,OAAO,OAAO,UAAU,IAAI;AAAA,EACxD;AAEA,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO,gBAAgB,OAAO;AAAA,IACxC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AApCsB;AAsCtB,eAAsB,mBAAmB,QASP;AAChC,wBAAsB;AACtB,QAAM,QAAQ,MAAM,eAAe;AAEnC,MAAI,OAAO,OAAO;AAClB,MAAI,CAAC,MAAM;AACT,WAAO,CAAC;AAAA,EACV,WAAW,OAAO,6BAA6B,MAAM;AACnD,WAAO,mBAAmB,OAAO,OAAO,UAAU,IAAI;AAAA,EACxD;AAEA,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA;AAAA,IACA,OAAO,OAAO;AAAA,IACd,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO,gBAAgB,OAAO;AAAA,IACxC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AArCsB;AAuCtB,eAAsB,oBAAoB,QAMR;AAChC,wBAAsB;AACtB,QAAM,QAAQ,MAAM,eAAe;AAEnC,QAAM,cAAc,MAAM,cAAc;AAAA,IACtC,QAAQ;AAAA,IACR,KAAK,eAAe,OAAO,QAAQ;AAAA,IACnC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,mBAAmB,eAAe;AAAA,EACpC,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,UAAU,OAAO,gBAAgB,OAAO;AAAA,IACxC;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;AAzBsB;","names":[]}

package/dist/{chunk-4Z45NYPR.js → chunk-5W5MN7JP.js}

@@ -2,11 +2,11 @@
 
 
 
-var _chunkCAKOFJZDjs = require('./chunk-CAKOFJZD.js');
+var _chunk6OFANJTEjs = require('./chunk-6OFANJTE.js');
 
 
 
-var _chunk26MQIJNBjs = require('./chunk-26MQIJNB.js');
+var _chunkWGVNJXZOjs = require('./chunk-WGVNJXZO.js');
 
 
 var _chunk7QVYU63Ejs = require('./chunk-7QVYU63E.js');
@@ -35,7 +35,7 @@ function configureJsonApi(config) {
     _setStaticHelpContent(helpContent);
   }
   if (config.bootstrapper) {
-    _chunk26MQIJNBjs.setBootstrapper.call(void 0, config.bootstrapper);
+    _chunkWGVNJXZOjs.setBootstrapper.call(void 0, config.bootstrapper);
     config.bootstrapper();
   }
 }
@@ -48,19 +48,19 @@ function getApiUrl() {
   if (_optionalChain([_clientConfig, 'optionalAccess', _ => _.apiUrl])) {
     return _clientConfig.apiUrl;
   }
-  return _chunk26MQIJNBjs.ENV.API_URL;
+  return _chunkWGVNJXZOjs.ENV.API_URL;
 }
 _chunk7QVYU63Ejs.__name.call(void 0, getApiUrl, "getApiUrl");
 function getPublicApiUrl() {
-  return _chunk26MQIJNBjs.ENV.API_URL;
+  return _chunkWGVNJXZOjs.ENV.API_URL;
 }
 _chunk7QVYU63Ejs.__name.call(void 0, getPublicApiUrl, "getPublicApiUrl");
 function getAppUrl() {
   if (_optionalChain([_clientConfig, 'optionalAccess', _2 => _2.appUrl])) {
     return _clientConfig.appUrl;
   }
-  if (_chunk26MQIJNBjs.ENV.APP_URL_ALTERNATE) {
-    return _chunk26MQIJNBjs.ENV.APP_URL_ALTERNATE;
+  if (_chunkWGVNJXZOjs.ENV.APP_URL_ALTERNATE) {
+    return _chunkWGVNJXZOjs.ENV.APP_URL_ALTERNATE;
   }
   if (typeof window !== "undefined") {
     return window.location.origin;
@@ -77,48 +77,6 @@ function getStripePublishableKey() {
 }
 _chunk7QVYU63Ejs.__name.call(void 0, getStripePublishableKey, "getStripePublishableKey");
 
-// src/i18n/config.ts
-var _config = null;
-function configureI18n(config) {
-  _config = config;
-}
-_chunk7QVYU63Ejs.__name.call(void 0, configureI18n, "configureI18n");
-function useI18nRouter() {
-  if (!_optionalChain([_config, 'optionalAccess', _5 => _5.useRouter])) {
-    throw new Error("i18n not configured. Call configureI18n() at app startup.");
-  }
-  return _config.useRouter();
-}
-_chunk7QVYU63Ejs.__name.call(void 0, useI18nRouter, "useI18nRouter");
-function useI18nTranslations(namespace) {
-  if (!_optionalChain([_config, 'optionalAccess', _6 => _6.useTranslations])) {
-    return (key) => key;
-  }
-  return _config.useTranslations(namespace);
-}
-_chunk7QVYU63Ejs.__name.call(void 0, useI18nTranslations, "useI18nTranslations");
-function getI18nLink() {
-  if (!_optionalChain([_config, 'optionalAccess', _7 => _7.Link])) {
-    throw new Error("i18n not configured. Call configureI18n() at app startup.");
-  }
-  return _config.Link;
-}
-_chunk7QVYU63Ejs.__name.call(void 0, getI18nLink, "getI18nLink");
-function useI18nLocale() {
-  if (_optionalChain([_config, 'optionalAccess', _8 => _8.useLocale])) {
-    return _config.useLocale();
-  }
-  return "en";
-}
-_chunk7QVYU63Ejs.__name.call(void 0, useI18nLocale, "useI18nLocale");
-function useI18nDateFnsLocale() {
-  if (_optionalChain([_config, 'optionalAccess', _9 => _9.useDateFnsLocale])) {
-    return _config.useDateFnsLocale();
-  }
-  return void 0;
-}
-_chunk7QVYU63Ejs.__name.call(void 0, useI18nDateFnsLocale, "useI18nDateFnsLocale");
-
 // src/login/config.ts
 var _useDiscordAuth = false;
 var _useGoogleAuth = false;
@@ -154,24 +112,6 @@ function getRegistrationMode() {
 }
 _chunk7QVYU63Ejs.__name.call(void 0, getRegistrationMode, "getRegistrationMode");
 
-// src/roles/config.ts
-var _roleId = null;
-function configureRoles(roleId) {
-  _roleId = roleId;
-}
-_chunk7QVYU63Ejs.__name.call(void 0, configureRoles, "configureRoles");
-function getRoleId() {
-  if (!_roleId) {
-    throw new Error("Roles not configured. Call configureRoles() at app startup.");
-  }
-  return _roleId;
-}
-_chunk7QVYU63Ejs.__name.call(void 0, getRoleId, "getRoleId");
-function isRolesConfigured() {
-  return _roleId !== null;
-}
-_chunk7QVYU63Ejs.__name.call(void 0, isRolesConfigured, "isRolesConfigured");
-
 // src/features/waitlist/config/waitlist.config.ts
 var _waitlistConfig = {};
 function configureWaitlist(config) {
@@ -211,7 +151,7 @@ var COMPANY_ADMINISTRATOR_ROLE_ID = "2e1eee00-6cba-4506-9059-ccd24e4ea5b0";
 var ACTION_TYPES = ["read", "create", "update", "delete"];
 
 // src/features/rbac/data/RbacService.ts
-var RbacService = class extends _chunkCAKOFJZDjs.AbstractService {
+var RbacService = class extends _chunk6OFANJTEjs.AbstractService {
   static {
     _chunk7QVYU63Ejs.__name.call(void 0, this, "RbacService");
   }
@@ -222,9 +162,9 @@ var RbacService = class extends _chunkCAKOFJZDjs.AbstractService {
    * Dev-only endpoint — see class header.
    */
   static async fetchMatrix() {
-    const endpoint = new (0, _chunkCAKOFJZDjs.EndpointCreator)({ endpoint: _chunkCAKOFJZDjs.Modules.RbacMatrix }).generate();
+    const endpoint = new (0, _chunk6OFANJTEjs.EndpointCreator)({ endpoint: _chunk6OFANJTEjs.Modules.RbacMatrix }).generate();
     const model = await this.callApi({
-      type: _chunkCAKOFJZDjs.Modules.RbacMatrix,
+      type: _chunk6OFANJTEjs.Modules.RbacMatrix,
       method: "GET" /* GET */,
       endpoint
     });
@@ -244,9 +184,9 @@ var RbacService = class extends _chunkCAKOFJZDjs.AbstractService {
    * Dev-only endpoint — see class header.
    */
   static async saveMatrix(args) {
-    const endpoint = new (0, _chunkCAKOFJZDjs.EndpointCreator)({ endpoint: _chunkCAKOFJZDjs.Modules.RbacMatrix }).generate();
+    const endpoint = new (0, _chunk6OFANJTEjs.EndpointCreator)({ endpoint: _chunk6OFANJTEjs.Modules.RbacMatrix }).generate();
     const model = await this.callApi({
-      type: _chunkCAKOFJZDjs.Modules.RbacMatrix,
+      type: _chunk6OFANJTEjs.Modules.RbacMatrix,
       method: "PUT" /* PUT */,
       endpoint,
       input: args
@@ -281,14 +221,5 @@ var RbacService = class extends _chunkCAKOFJZDjs.AbstractService {
 
 
 
-
-
-
-
-
-
-
-
-
-exports._getStaticHelpContent = _getStaticHelpContent; exports.configureJsonApi = configureJsonApi; exports.configureClientConfig = configureClientConfig; exports.getApiUrl = getApiUrl; exports.getPublicApiUrl = getPublicApiUrl; exports.getAppUrl = getAppUrl; exports.getTrackablePages = getTrackablePages; exports.getStripePublishableKey = getStripePublishableKey; exports.configureI18n = configureI18n; exports.useI18nRouter = useI18nRouter; exports.useI18nTranslations = useI18nTranslations; exports.getI18nLink = getI18nLink; exports.useI18nLocale = useI18nLocale; exports.useI18nDateFnsLocale = useI18nDateFnsLocale; exports.configureLogin = configureLogin; exports.isDiscordAuthEnabled = isDiscordAuthEnabled; exports.isGoogleAuthEnabled = isGoogleAuthEnabled; exports.isInternalAuthEnabled = isInternalAuthEnabled; exports.isRegistrationAllowed = isRegistrationAllowed; exports.getRegistrationMode = getRegistrationMode; exports.configureRoles = configureRoles; exports.getRoleId = getRoleId; exports.isRolesConfigured = isRolesConfigured; exports.configureWaitlist = configureWaitlist; exports.getWaitlistConfig = getWaitlistConfig; exports.configureReferral = configureReferral; exports.getReferralConfig = getReferralConfig; exports.isReferralEnabled = isReferralEnabled; exports.COMPANY_ADMINISTRATOR_ROLE_ID = COMPANY_ADMINISTRATOR_ROLE_ID; exports.ACTION_TYPES = ACTION_TYPES; exports.RbacService = RbacService;
-//# sourceMappingURL=chunk-4Z45NYPR.js.map
+exports._getStaticHelpContent = _getStaticHelpContent; exports.configureJsonApi = configureJsonApi; exports.configureClientConfig = configureClientConfig; exports.getApiUrl = getApiUrl; exports.getPublicApiUrl = getPublicApiUrl; exports.getAppUrl = getAppUrl; exports.getTrackablePages = getTrackablePages; exports.getStripePublishableKey = getStripePublishableKey; exports.configureLogin = configureLogin; exports.isDiscordAuthEnabled = isDiscordAuthEnabled; exports.isGoogleAuthEnabled = isGoogleAuthEnabled; exports.isInternalAuthEnabled = isInternalAuthEnabled; exports.isRegistrationAllowed = isRegistrationAllowed; exports.getRegistrationMode = getRegistrationMode; exports.configureWaitlist = configureWaitlist; exports.getWaitlistConfig = getWaitlistConfig; exports.configureReferral = configureReferral; exports.getReferralConfig = getReferralConfig; exports.isReferralEnabled = isReferralEnabled; exports.COMPANY_ADMINISTRATOR_ROLE_ID = COMPANY_ADMINISTRATOR_ROLE_ID; exports.ACTION_TYPES = ACTION_TYPES; exports.RbacService = RbacService;
+//# sourceMappingURL=chunk-5W5MN7JP.js.map

package/dist/chunk-5W5MN7JP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-5W5MN7JP.js","../src/core/registry/helpStore.ts","../src/client/config.ts","../src/login/config.ts","../src/features/waitlist/config/waitlist.config.ts","../src/features/referral/config.ts","../src/features/rbac/data/RbacTypes.ts","../src/features/rbac/data/RbacService.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACF,sDAA4B;AAC5B;AACE;AACA;AACF,sDAA4B;AAC5B;AACE;AACF,sDAA4B;AAC5B;AACA;ACFA,IAAM,iBAAA,kBAAmB,MAAA,CAAO,GAAA,CAAI,4BAA4B,CAAA;AAEhE,IAAM,YAAA,EAAc,UAAA;AAIpB,GAAA,CAAI,WAAA,CAAY,gBAAgB,EAAA,IAAM,KAAA,CAAA,EAAW;AAC/C,EAAA,WAAA,CAAY,gBAAgB,EAAA,EAAI,IAAA;AAClC;AAEO,SAAS,qBAAA,CAAsB,GAAA,EAA2B;AAC/D,EAAA,WAAA,CAAY,gBAAgB,EAAA,EAAI,GAAA;AAClC;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAIT,SAAS,qBAAA,CAAA,EAA+C;AAC7D,EAAA,wBAAQ,WAAA,CAAY,gBAAgB,CAAA,UAAkB,MAAA;AACxD;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;ADEhB;AACA;AEnBA,IAAI,cAAA,EAOO,IAAA;AAOJ,SAAS,gBAAA,CAAiB,MAAA,EAQxB;AACP,EAAA,MAAM,EAAE,WAAA,EAAa,GAAG,KAAK,EAAA,EAAI,MAAA;AACjC,EAAA,cAAA,EAAgB,IAAA;AAChB,EAAA,GAAA,CAAI,WAAA,EAAa;AACf,IAAA,qBAAA,CAAsB,WAAW,CAAA;AAAA,EACnC;AAEA,EAAA,GAAA,CAAI,MAAA,CAAO,YAAA,EAAc;AACvB,IAAA,8CAAA,MAAgB,CAAO,YAAY,CAAA;AACnC,IAAA,MAAA,CAAO,YAAA,CAAa,CAAA;AAAA,EACtB;AACF;AAnBgB,qCAAA,gBAAA,EAAA,kBAAA,CAAA;AAyBT,SAAS,qBAAA,CAAsB,MAAA,EAI7B;AACP,EAAA,cAAA,EAAgB,MAAA;AAClB;AANgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAgBT,SAAS,SAAA,CAAA,EAAoB;AAClC,EAAA,GAAA,iBAAI,aAAA,2BAAe,QAAA,EAAQ;AACzB,IAAA,OAAO,aAAA,CAAc,MAAA;AAAA,EACvB;AACA,EAAA,OAAO,oBAAA,CAAI,OAAA;AACb;AALgB,qCAAA,SAAA,EAAA,WAAA,CAAA;AAeT,SAAS,eAAA,CAAA,EAA0B;AACxC,EAAA,OAAO,oBAAA,CAAI,OAAA;AACb;AAFgB,qCAAA,eAAA,EAAA,iBAAA,CAAA;AAOT,SAAS,SAAA,CAAA,EAAoB;AAClC,EAAA,GAAA,iBAAI,aAAA,6BAAe,QAAA,EAAQ;AACzB,IAAA,OAAO,aAAA,CAAc,MAAA;AAAA,EACvB;AACA,EAAA,GAAA,CAAI,oBAAA,CAAI,iBAAA,EAAmB;AACzB,IAAA,OAAO,oBAAA,CAAI,iBAAA;AAAA,EACb;AACA,EAAA,GAAA,CAAI,OAAO,OAAA,IAAW,WAAA,EAAa;AACjC,IAAA,OAAO,MAAA,CAAO,QAAA,CAAS,MAAA;AAAA,EACzB;AACA,EAAA,OAAO,EAAA;AACT;AAXgB,qCAAA,SAAA,EAAA,WAAA,CAAA;AAgBT,SAAS,iBAAA,CAAA,EAA6C;AAC3D,EAAA,wCAAO,aAAA,6BAAe,gBAAA,UAAkB,CAAC,GAAA;AAC3C;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAOT,SAAS,uBAAA,CAAA,EAA8C;AAC5D,EAAA,uBAAO,aAAA,6BAAe,sBAAA;AACxB;AAFgB,qCAAA,uBAAA,EAAA,yBAAA,CAAA;AF/BhB;AACA;AG/EA,IAAI,gBAAA,EAA2B,KAAA;AAC/B,IAAI,eAAA,EAA0B,KAAA;AAC9B,IAAI,iBAAA,EAA4B,IAAA;AAChC,IAAI,mBAAA,EAA8B,IAAA;AAClC,IAAI,kBAAA,EAAoD,MAAA;AAYjD,SAAS,cAAA,CAAe,MAAA,EAA2B;AACxD,EAAA,gBAAA,EAAkB,CAAC,CAAC,MAAA,CAAO,eAAA;AAC3B,EAAA,eAAA,EAAiB,CAAC,CAAC,MAAA,CAAO,cAAA;AAC1B,EAAA,iBAAA,mBAAmB,MAAA,CAAO,eAAA,UAAmB,MAAA;AAC7C,EAAA,mBAAA,mBAAqB,MAAA,CAAO,iBAAA,UAAqB,MAAA;AACjD,EAAA,kBAAA,mBAAoB,MAAA,CAAO,gBAAA,UAAoB,QAAA;AACjD;AANgB,qCAAA,cAAA,EAAA,gBAAA,CAAA;AAQT,SAAS,oBAAA,CAAA,EAAgC;AAC9C,EAAA,OAAO,eAAA;AACT;AAFgB,qCAAA,oBAAA,EAAA,sBAAA,CAAA;AAIT,SAAS,mBAAA,CAAA,EAA+B;AAC7C,EAAA,OAAO,cAAA;AACT;AAFgB,qCAAA,mBAAA,EAAA,qBAAA,CAAA;AAIT,SAAS,qBAAA,CAAA,EAAiC;AAC/C,EAAA,OAAO,gBAAA;AACT;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAIT,SAAS,qBAAA,CAAA,EAAiC;AAC/C,EAAA,OAAO,kBAAA;AACT;AAFgB,qCAAA,qBAAA,EAAA,uBAAA,CAAA;AAIT,SAAS,mBAAA,CAAA,EAAwC;AACtD,EAAA,OAAO,iBAAA;AACT;AAFgB,qCAAA,mBAAA,EAAA,qBAAA,CAAA;AHyEhB;AACA;AIxFA,IAAI,gBAAA,EAAkC,CAAC,CAAA;AAEhC,SAAS,iBAAA,CAAkB,MAAA,EAA8B;AAC9D,EAAA,gBAAA,EAAkB,MAAA;AACpB;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAIT,SAAS,iBAAA,CAAA,EAAoC;AAClD,EAAA,OAAO,eAAA;AACT;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AJ4FhB;AACA;AKhFO,IAAM,wBAAA,EAAoD;AAAA,EAC/D,OAAA,EAAS,KAAA;AAAA,EACT,UAAA,EAAY,eAAA;AAAA,EACZ,UAAA,EAAY,EAAA;AAAA,EACZ,YAAA,EAAc,KAAA;AAAA,EACd,eAAA,EAAiB,EAAA;AAAA,EACjB,YAAA,EAAc;AAChB,CAAA;AAGA,IAAI,gBAAA,EAA4C,EAAE,GAAG,wBAAwB,CAAA;AAgBtE,SAAS,iBAAA,CAAkB,MAAA,EAA8B;AAC9D,EAAA,gBAAA,EAAkB,EAAE,GAAG,uBAAA,EAAyB,GAAG,OAAO,CAAA;AAC5D;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAQT,SAAS,iBAAA,CAAA,EAA8C;AAC5D,EAAA,OAAO,eAAA;AACT;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AAOT,SAAS,iBAAA,CAAA,EAA6B;AAC3C,EAAA,OAAO,eAAA,CAAgB,OAAA;AACzB;AAFgB,qCAAA,iBAAA,EAAA,mBAAA,CAAA;AL6DhB;AACA;AMpJO,IAAM,8BAAA,EAAgC,sCAAA;AAMtC,IAAM,aAAA,EAA6B,CAAC,MAAA,EAAQ,QAAA,EAAU,QAAA,EAAU,QAAQ,CAAA;ANiJ/E;AACA;AOrIO,IAAM,YAAA,EAAN,MAAA,QAA0B,iCAAgB;AAAA,EAnBjD,OAmBiD;AAAA,IAAA,qCAAA,IAAA,EAAA,aAAA,CAAA;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO/C,OAAA,MAAa,WAAA,CAAA,EAGV;AACD,IAAA,MAAM,SAAA,EAAW,IAAI,qCAAA,CAAgB,EAAE,QAAA,EAAU,wBAAA,CAAQ,WAAW,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAEhF,IAAA,MAAM,MAAA,EAAQ,MAAM,IAAA,CAAK,OAAA,CAAyB;AAAA,MAChD,IAAA,EAAM,wBAAA,CAAQ,UAAA;AAAA,MACd,MAAA,EAAA,eAAA;AAAA,MACA;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO;AAAA,MACL,MAAA,mBAAQ,KAAA,CAAM,MAAA,UAAU,CAAC,GAAA;AAAA,MACzB,WAAA,mBAAa,KAAA,CAAM,WAAA,UAAe,CAAC;AAAA,IACrC,CAAA;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,OAAA,MAAa,UAAA,CAAW,IAAA,EAK4B;AAClD,IAAA,MAAM,SAAA,EAAW,IAAI,qCAAA,CAAgB,EAAE,QAAA,EAAU,wBAAA,CAAQ,WAAW,CAAC,CAAA,CAAE,QAAA,CAAS,CAAA;AAEhF,IAAA,MAAM,MAAA,EAAQ,MAAM,IAAA,CAAK,OAAA,CAAyB;AAAA,MAChD,IAAA,EAAM,wBAAA,CAAQ,UAAA;AAAA,MACd,MAAA,EAAA,eAAA;AAAA,MACA,QAAA;AAAA,MACA,KAAA,EAAO;AAAA,IACT,CAAC,CAAA;AAED,IAAA,OAAO;AAAA,MACL,YAAA,mBAAc,KAAA,CAAM,YAAA,UAAgB,GAAA;AAAA,MACpC,IAAA,mBAAM,KAAA,CAAM,IAAA,UAAQ;AAAA,IACtB,CAAA;AAAA,EACF;AACF,CAAA;AP6HA;AACA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,yhCAAC","file":"/home/runner/work/nextjs-jsonapi/nextjs-jsonapi/dist/chunk-5W5MN7JP.js","sourcesContent":[null,"/**\n * Centralized help-content store accessible from client and server contexts.\n * Uses a globalThis Symbol key to persist across HMR/Turbopack reloads and to\n * bridge between the client-side `configureJsonApi` (in `client/config.ts`)\n * and the HelpProvider context. Holds the brand-only HelpContentConfig.\n *\n * NO external dependencies to avoid circular imports.\n *\n * Pattern mirrors `bootstrapStore.ts`.\n */\n\nconst HELP_CONTENT_KEY = Symbol.for(\"nextjs-jsonapi:helpContent\");\n\nconst globalStore = globalThis as unknown as {\n  [HELP_CONTENT_KEY]?: unknown | null;\n};\n\nif (globalStore[HELP_CONTENT_KEY] === undefined) {\n  globalStore[HELP_CONTENT_KEY] = null;\n}\n\nexport function _setStaticHelpContent(cfg: unknown | null): void {\n  globalStore[HELP_CONTENT_KEY] = cfg;\n}\n\nexport function _getStaticHelpContent<T = unknown>(): T | null {\n  return (globalStore[HELP_CONTENT_KEY] as T | null) ?? null;\n}\n","\"use client\";\n\nimport { ModuleWithPermissions } from \"../permissions/types\";\nimport { ENV } from \"../core/env\";\nimport { setBootstrapper } from \"../core/registry/bootstrapStore\";\nimport { _setStaticHelpContent } from \"../core/registry/helpStore\";\nimport type { HelpContentConfig } from \"../features/help/interfaces/help-content-config.interface\";\n\n// Config storage for client-side contexts\nlet _clientConfig: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n  stripePublishableKey?: string;\n} | null = null;\n\n/**\n * Configure the JSON:API client. This is the main configuration function.\n * This is typically called during app initialization.\n * @param config.helpContent - Optional help-content config (brand only). Forwarded to the help feature's globalThis-backed store; not stored on the client config.\n */\nexport function configureJsonApi(config: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n  bootstrapper?: () => void;\n  additionalHeaders?: Record<string, string>;\n  stripePublishableKey?: string;\n  helpContent?: HelpContentConfig;\n}): void {\n  const { helpContent, ...rest } = config;\n  _clientConfig = rest;\n  if (helpContent) {\n    _setStaticHelpContent(helpContent);\n  }\n  // Register and call bootstrapper to register all modules\n  if (config.bootstrapper) {\n    setBootstrapper(config.bootstrapper);\n    config.bootstrapper();\n  }\n}\n\n/**\n * Configure the client config. This is typically called during app initialization.\n * @deprecated Use configureJsonApi instead\n */\nexport function configureClientConfig(config: {\n  apiUrl: string;\n  appUrl?: string;\n  trackablePages?: ModuleWithPermissions[];\n}): void {\n  _clientConfig = config;\n}\n\n/**\n * Get the configured API URL.\n *\n * This may resolve to an internal/private host (e.g. a docker-network\n * hostname) when configured to do so for SSR fetches. Do NOT use this for\n * URLs that are rendered into HTML and followed by the browser — use\n * `getPublicApiUrl()` instead.\n */\nexport function getApiUrl(): string {\n  if (_clientConfig?.apiUrl) {\n    return _clientConfig.apiUrl;\n  }\n  return ENV.API_URL;\n}\n\n/**\n * Get the public-facing API URL.\n *\n * Always sourced from `NEXT_PUBLIC_API_URL` so it is identical on server\n * and client, and reachable from the user's browser. Use for any URL that\n * gets rendered into HTML the browser will navigate to (links, redirects,\n * OAuth hrefs).\n */\nexport function getPublicApiUrl(): string {\n  return ENV.API_URL;\n}\n\n/**\n * Get the configured app URL.\n */\nexport function getAppUrl(): string {\n  if (_clientConfig?.appUrl) {\n    return _clientConfig.appUrl;\n  }\n  if (ENV.APP_URL_ALTERNATE) {\n    return ENV.APP_URL_ALTERNATE;\n  }\n  if (typeof window !== \"undefined\") {\n    return window.location.origin;\n  }\n  return \"\";\n}\n\n/**\n * Get the configured trackable pages.\n */\nexport function getTrackablePages(): ModuleWithPermissions[] {\n  return _clientConfig?.trackablePages ?? [];\n}\n\n/**\n * Get the configured Stripe publishable key.\n */\nexport function getStripePublishableKey(): string | undefined {\n  return _clientConfig?.stripePublishableKey;\n}\n","let _useDiscordAuth: boolean = false;\nlet _useGoogleAuth: boolean = false;\nlet _useInternalAuth: boolean = true;\nlet _allowRegistration: boolean = true;\nlet _registrationMode: \"open\" | \"closed\" | \"waitlist\" = \"open\";\n\nexport type RegistrationMode = \"open\" | \"closed\" | \"waitlist\";\n\nexport interface LoginConfig {\n  discordClientId?: string;\n  googleClientId?: string;\n  useInternalAuth?: boolean;\n  allowRegistration?: boolean;\n  registrationMode?: RegistrationMode;\n}\n\nexport function configureLogin(params: LoginConfig): void {\n  _useDiscordAuth = !!params.discordClientId;\n  _useGoogleAuth = !!params.googleClientId;\n  _useInternalAuth = params.useInternalAuth ?? true;\n  _allowRegistration = params.allowRegistration ?? true;\n  _registrationMode = params.registrationMode ?? \"open\";\n}\n\nexport function isDiscordAuthEnabled(): boolean {\n  return _useDiscordAuth;\n}\n\nexport function isGoogleAuthEnabled(): boolean {\n  return _useGoogleAuth;\n}\n\nexport function isInternalAuthEnabled(): boolean {\n  return _useInternalAuth;\n}\n\nexport function isRegistrationAllowed(): boolean {\n  return _allowRegistration;\n}\n\nexport function getRegistrationMode(): RegistrationMode {\n  return _registrationMode;\n}\n","export type QuestionnaireFieldType = \"text\" | \"textarea\" | \"select\" | \"checkbox\";\n\nexport interface QuestionnaireOption {\n  value: string;\n  label: string;\n  description?: string;\n}\n\nexport interface QuestionnaireField {\n  id: string;\n  type: QuestionnaireFieldType;\n  label: string;\n  description?: string;\n  placeholder?: string;\n  required?: boolean;\n  options?: QuestionnaireOption[];\n}\n\nexport interface WaitlistConfig {\n  questionnaire?: QuestionnaireField[];\n  heroTitle?: string;\n  heroSubtitle?: string;\n  heroDescription?: string;\n  benefits?: string[];\n}\n\nlet _waitlistConfig: WaitlistConfig = {};\n\nexport function configureWaitlist(config: WaitlistConfig): void {\n  _waitlistConfig = config;\n}\n\nexport function getWaitlistConfig(): WaitlistConfig {\n  return _waitlistConfig;\n}\n","/**\n * Configuration interface for frontend referral feature.\n */\nexport interface ReferralConfig {\n  /**\n   * Whether the referral feature is enabled.\n   * When false, components render nothing and hooks return null.\n   * @default false\n   */\n  enabled?: boolean;\n\n  /**\n   * Name of the cookie used to store referral codes.\n   * @default \"referral_code\"\n   */\n  cookieName?: string;\n\n  /**\n   * Number of days the referral cookie is valid.\n   * @default 30\n   */\n  cookieDays?: number;\n\n  /**\n   * Query parameter name for referral code in URL.\n   * @default \"ref\"\n   */\n  urlParamName?: string;\n\n  /**\n   * Base URL for referral links.\n   * @default window.location.origin (client-side only)\n   */\n  referralUrlBase?: string;\n\n  /**\n   * Path to append to base URL for referral links.\n   * @default \"/\"\n   */\n  referralPath?: string;\n}\n\n/**\n * Default configuration values\n */\nexport const DEFAULT_REFERRAL_CONFIG: Required<ReferralConfig> = {\n  enabled: false,\n  cookieName: \"referral_code\",\n  cookieDays: 30,\n  urlParamName: \"ref\",\n  referralUrlBase: \"\",\n  referralPath: \"/\",\n};\n\n// Private storage for configuration\nlet _referralConfig: Required<ReferralConfig> = { ...DEFAULT_REFERRAL_CONFIG };\n\n/**\n * Configure referral feature settings.\n * Call this at app startup to enable and configure referral functionality.\n *\n * @example\n * ```typescript\n * import { configureReferral } from \"@carlonicora/nextjs-jsonapi\";\n *\n * configureReferral({\n *   enabled: process.env.NEXT_PUBLIC_REFERRAL_ENABLED === 'true',\n *   cookieDays: 30,\n * });\n * ```\n */\nexport function configureReferral(config: ReferralConfig): void {\n  _referralConfig = { ...DEFAULT_REFERRAL_CONFIG, ...config };\n}\n\n/**\n * Get the current referral configuration.\n * @internal\n */\nexport function getReferralConfig(): Required<ReferralConfig> {\n  return _referralConfig;\n}\n\n/**\n * Check if referral feature is enabled.\n */\nexport function isReferralEnabled(): boolean {\n  return _referralConfig.enabled;\n}\n","export const COMPANY_ADMINISTRATOR_ROLE_ID = \"2e1eee00-6cba-4506-9059-ccd24e4ea5b0\";\n\nexport type PermissionValue = boolean | string;\n\nexport type ActionType = \"read\" | \"create\" | \"update\" | \"delete\";\n\nexport const ACTION_TYPES: ActionType[] = [\"read\", \"create\", \"update\", \"delete\"];\n\n/** The permissions object shape used by both Module and PermissionMapping entities */\nexport type PermissionsMap = {\n  create?: PermissionValue;\n  read?: PermissionValue;\n  update?: PermissionValue;\n  delete?: PermissionValue;\n};\n\n/**\n * Declarative-RBAC matrix types.\n *\n * Mirror of the library types defined in\n * `packages/nestjs-neo4jsonapi/src/foundations/rbac/dsl/types.ts`.\n * Frontend does not import from backend, so the shape is redefined here.\n *\n * A `PermToken` represents a single permission entry:\n *  - `scope: true`  → unconditional (e.g. full read of the module)\n *  - `scope: false` → nothing (rarely used, mostly a placeholder)\n *  - `scope: \"path\"` → scoped by relationship path (e.g. \"orders.account\")\n */\nexport type PermToken = { action: string; scope: boolean | string };\n\n/**\n * A per-module block of the matrix. Always has a `default` row (permissions\n * granted to every role). Additional keys are role IDs → role-specific\n * permission tokens that are unioned with `default` to produce the effective\n * permissions for that role in that module.\n */\nexport type RbacModuleBlock = { default: PermToken[] } & Record<string, PermToken[]>;\n\n/**\n * The full RBAC matrix as served by the dev endpoint `GET /_dev/rbac/matrix`.\n * Keys are module IDs; values are module blocks.\n */\nexport type RbacMatrix = Record<string, RbacModuleBlock>;\n","import { AbstractService, EndpointCreator, HttpMethod, Modules } from \"../../../core\";\nimport type { RbacMatrixModel } from \"./RbacMatrixModel\";\nimport type { RbacMatrix } from \"./RbacTypes\";\n\n/**\n * RbacService — fetches RBAC configuration for the admin UI.\n *\n * Declarative-matrix methods (`fetchMatrix`, `saveMatrix`) talk to the\n * dev-only endpoints added in\n * `packages/nestjs-neo4jsonapi/.../rbac-dev.controller.ts`. The controller\n * speaks JSON:API (singleton resource with `type: \"rbac-matrix\"`, `id:\n * \"singleton\"`), so these methods go through the standard `callApi()`\n * pipeline like every other service in the codebase.\n *\n * The backend only registers these routes when `devMode` is enabled on\n * `RbacModule.register` (see `apps/api/src/features/features.modules.ts`).\n * In production the routes return 404; callers should guard with a dev-mode\n * check.\n */\nexport class RbacService extends AbstractService {\n  /**\n   * Fetch the current RBAC matrix plus each module's known BFS relationship\n   * paths (used by the permission picker as scope suggestions).\n   *\n   * Dev-only endpoint — see class header.\n   */\n  static async fetchMatrix(): Promise<{\n    matrix: RbacMatrix;\n    modulePaths: Record<string, readonly string[]>;\n  }> {\n    const endpoint = new EndpointCreator({ endpoint: Modules.RbacMatrix }).generate();\n\n    const model = await this.callApi<RbacMatrixModel>({\n      type: Modules.RbacMatrix,\n      method: HttpMethod.GET,\n      endpoint,\n    });\n\n    return {\n      matrix: model.matrix ?? {},\n      modulePaths: model.modulePaths ?? {},\n    };\n  }\n\n  /**\n   * Persist a matrix back to the declarative `permissions.ts` file.\n   *\n   * The backend serializes the matrix to formatted TypeScript using the\n   * provided `roleNames` / `moduleNames` lookup tables (so the emitted file\n   * references `RoleId.X` / `ModuleId.X` rather than raw UUIDs) and writes\n   * it to `outputPath` (absolute, or relative to the repo root).\n   *\n   * Dev-only endpoint — see class header.\n   */\n  static async saveMatrix(args: {\n    matrix: RbacMatrix;\n    roleNames: Record<string, string>;\n    moduleNames: Record<string, string>;\n    outputPath: string;\n  }): Promise<{ bytesWritten: number; path: string }> {\n    const endpoint = new EndpointCreator({ endpoint: Modules.RbacMatrix }).generate();\n\n    const model = await this.callApi<RbacMatrixModel>({\n      type: Modules.RbacMatrix,\n      method: HttpMethod.PUT,\n      endpoint,\n      input: args,\n    });\n\n    return {\n      bytesWritten: model.bytesWritten ?? 0,\n      path: model.path ?? \"\",\n    };\n  }\n}\n"]}