@carrierllc/mcp 0.13.22 → 0.13.25

package/templates/storefront/src/app/sitemap.ts

@@ -9,6 +9,7 @@ export default function sitemap(): MetadataRoute.Sitemap {
     { url: `${base}/help`, lastModified: new Date(), changeFrequency: "monthly", priority: 0.5 },
     { url: `${base}/contact`, lastModified: new Date(), changeFrequency: "monthly", priority: 0.4 },
     { url: `${base}/legal/privacy`, lastModified: new Date(), changeFrequency: "yearly", priority: 0.2 },
+    { url: `${base}/legal/acceptable-use`, lastModified: new Date(), changeFrequency: "yearly", priority: 0.2 },
     { url: `${base}/legal/terms`, lastModified: new Date(), changeFrequency: "yearly", priority: 0.2 },
   ];
 }

package/templates/storefront/src/components/checkout/EmbeddedStripeCheckout.tsx

@@ -125,9 +125,11 @@ export function EmbeddedStripeCheckout({ clientSecret, onComplete, onUnavailable
   // passes inline closures does not re-run this effect and open a second
   // Checkout instance against one session.
   const onCompleteRef = useRef(onComplete);
-  onCompleteRef.current = onComplete;
   const onUnavailableRef = useRef(onUnavailable);
-  onUnavailableRef.current = onUnavailable;
+  useEffect(() => {
+    onCompleteRef.current = onComplete;
+    onUnavailableRef.current = onUnavailable;
+  }, [onComplete, onUnavailable]);
 
   useEffect(() => {
     if (!canEmbedStripeCheckout || !clientSecret) return;

package/templates/storefront/src/components/faq/FaqSection.tsx

@@ -69,7 +69,7 @@ export function FaqSection() {
           <FaqItem key={faq.q} q={faq.q} a={faq.a} />
         ))}
         <p className="mt-8 text-center text-sm text-sand-500">
-          Still stuck? WhatsApp {brand.name} — real humans, 24/7.
+          Still stuck? WhatsApp {brand.name}.
         </p>
       </div>
     </section>

package/templates/storefront/src/components/footer/StorefrontFooter.tsx

@@ -31,7 +31,7 @@ export function StorefrontFooter() {
                 rel="noopener noreferrer"
                 className="inline-flex items-center gap-2 rounded-full bg-leaf-500 px-4 py-2 text-sm font-semibold text-white transition-colors hover:bg-leaf-600"
               >
-                WhatsApp · 24/7
+                WhatsApp
               </Link>
               <Link
                 href={buildSupportLink("sms")}
@@ -68,7 +68,7 @@ export function StorefrontFooter() {
           <p className="text-xs text-sand-600">
             © {new Date().getFullYear()} {BRAND.legalName}. All rights reserved.
           </p>
-          <p className="text-xs text-sand-600">Real humans. 24/7.</p>
+          <p className="text-xs text-sand-600">{BRAND.support.hoursLocal}</p>
         </div>
       </div>
     </footer>

package/templates/storefront/src/components/landing/FinalCTA.tsx

@@ -14,7 +14,7 @@ export function FinalCTA() {
           Travel light. Land connected.
         </h2>
         <p className="mx-auto mt-3 max-w-lg text-sm text-white/85">
-          {brand.tagline} Real humans on WhatsApp, 24/7.
+          {brand.tagline}
         </p>
         <Link
           href="/shop"

package/templates/storefront/src/components/landing/HeroSection.tsx

@@ -1,10 +1,11 @@
+import Image from "next/image";
 import Link from "next/link";
 import brand from "@/brand.config";
 
 const STATS = [
   { value: "200+", label: "countries" },
   { value: "<30s", label: "to activate" },
-  { value: "24/7", label: "human support" },
+  { value: "1 business day", label: "reply target" },
 ];
 
 export function HeroSection() {
@@ -67,9 +68,12 @@ export function HeroSection() {
                 key={item.label}
                 className="relative overflow-hidden rounded-2xl border border-sand-200 bg-sand-100 shadow-sm dark:border-sand-800"
               >
-                <img
+                <Image
                   src={item.src}
                   alt={item.label}
+                  width={640}
+                  height={480}
+                  unoptimized
                   className="aspect-[4/3] w-full object-cover"
                 />
                 <figcaption className="absolute inset-x-0 bottom-0 bg-gradient-to-t from-sand-950/70 to-transparent px-3 py-2 text-xs font-medium text-white">

package/templates/storefront/src/components/nav/StorefrontNav.tsx

@@ -1,6 +1,7 @@
 "use client";
 
 import { useState } from "react";
+import Image from "next/image";
 import Link from "next/link";
 import { usePathname } from "next/navigation";
 import { SignedIn, SignedOut, UserButton } from "@clerk/nextjs";
@@ -22,7 +23,7 @@ export function StorefrontNav() {
     <header className="fixed inset-x-0 top-0 z-50 border-b border-sand-200/80 bg-sand-50/80 backdrop-blur-md dark:border-sand-800 dark:bg-sand-950/80">
       <div className="mx-auto flex h-16 max-w-6xl items-center justify-between px-4">
         <Link href="/" className="flex items-center gap-2 text-base font-semibold tracking-tight text-sand-900 dark:text-sand-50">
-          <img src="/brand/logo.svg" alt="" width={32} height={32} className="size-8 rounded-lg" />
+          <Image src="/brand/logo.svg" alt="" width={32} height={32} unoptimized className="size-8 rounded-lg" />
           {brand.name}
         </Link>
 

package/templates/storefront/src/components/theme/theme-provider.tsx

@@ -29,30 +29,41 @@ function applyToDocument(theme: Theme) {
   root.style.colorScheme = theme;
 }
 
+function subscribePreference(onChange: () => void) {
+  window.addEventListener("storage", onChange);
+  return () => window.removeEventListener("storage", onChange);
+}
+
+function readPreference(): ThemePreference {
+  try {
+    const stored = window.localStorage.getItem(STORAGE_KEY);
+    if (stored === "light" || stored === "dark" || stored === "system") return stored;
+  } catch {
+    /* private mode */
+  }
+  return "light";
+}
+
+function serverPreference(): ThemePreference {
+  return "light";
+}
+
 export function ThemeProvider({ children }: { children: React.ReactNode }) {
-  const [preference, setPreferenceState] = React.useState<ThemePreference>("light");
-  const [theme, setTheme] = React.useState<Theme>("light");
+  const storedPreference = React.useSyncExternalStore(
+    subscribePreference, readPreference, serverPreference,
+  );
+  // Keep user changes usable even when private mode prevents persistence.
+  const [override, setPreferenceState] = React.useState<ThemePreference | null>(null);
+  const preference = override ?? storedPreference;
+  const theme = resolve(preference);
 
   React.useEffect(() => {
-    try {
-      const stored = window.localStorage.getItem(STORAGE_KEY);
-      if (stored === "light" || stored === "dark" || stored === "system") {
-        setPreferenceState(stored);
-        const next = resolve(stored);
-        setTheme(next);
-        applyToDocument(next);
-        return;
-      }
-    } catch {
-      /* private mode */
-    }
-    applyToDocument("light");
-  }, []);
+    applyToDocument(theme);
+  }, [theme]);
 
   const setPreference = React.useCallback((pref: ThemePreference) => {
     setPreferenceState(pref);
     const next = resolve(pref);
-    setTheme(next);
     applyToDocument(next);
     try {
       window.localStorage.setItem(STORAGE_KEY, pref);

package/templates/storefront/src/lib/checkout-order-claim.ts

@@ -105,18 +105,16 @@ function sessionPurchaserEmail(session: StripeSession): string | null {
 /**
  * Does this Clerk user own the address that paid for the session?
  *
- * `requireVerified` is the difference between two very different questions.
- * Claiming an unclaimed order only needs the addresses on the account, because
- * nobody loses anything. Taking an order off another account needs a verified
- * address, because an unverified one is a string the claimant typed.
+ * Every live claim needs a verified paying address, including the first claim.
+ * An unverified address is just a string the claimant typed; knowing a session
+ * id never grants ownership.
  */
 async function userMatchesSessionPurchaser(
   session: StripeSession,
   userId: string,
-  opts: { requireVerified?: boolean } = {},
 ): Promise<boolean> {
   const purchaserEmail = sessionPurchaserEmail(session);
-  if (!purchaserEmail) return !opts.requireVerified;
+  if (!purchaserEmail) return false;
 
   const client = await clerkClient();
   const user = await client.users.getUser(userId);
@@ -124,7 +122,7 @@ async function userMatchesSessionPurchaser(
   return user.emailAddresses.some(
     (address) =>
       address.emailAddress.toLowerCase() === normalizedPurchaserEmail &&
-      (!opts.requireVerified || address.verification?.status === "verified"),
+      address.verification?.status === "verified",
   );
 }
 
@@ -191,13 +189,6 @@ export async function claimCheckoutOrder(
        * Without that, anyone who learned a session id could take someone
        * else's order by typing their email into a new account.
        */
-      const ownsPayingAddress = await userMatchesSessionPurchaser(session, userId, {
-        requireVerified: true,
-      });
-      if (!ownsPayingAddress) {
-        return { ok: false, status: 403, error: "This order is linked to another account" };
-      }
-
       const moved = await setStripeClaimedBy(sessionId, userId);
       if (!moved) {
         return { ok: false, status: 502, error: "Failed to claim order" };

package/templates/storefront/src/lib/order-route-guard.ts

@@ -45,6 +45,40 @@ export async function guardOrderRoute(
   return { ok: true, userId, orderId };
 }
 
+/**
+ * Server-side fulfilment call for the guarded proxy actions. The tenant comes
+ * only from deployment configuration, never from the caller's query/body.
+ * Keep the unscoped behavior for standalone shops; hosted orders require the
+ * slug upstream, which refuses a missing or mismatched tenant with 404.
+ */
+export async function orderActionCall<T>(
+  orderId: string,
+  action: "usage" | "top-up-options" | "cancel",
+): Promise<{ ok: true; data: T } | { ok: false; reason: OrderLookupError }> {
+  const base = (process.env.NEXT_PUBLIC_CARRIER_API_URL ?? "").replace(/\/+$/, "");
+  if (!base) return { ok: false, reason: "unconfigured" };
+  if (!/^[A-Za-z0-9_-]{1,256}$/.test(orderId)) return { ok: false, reason: "not-found" };
+
+  const headers: Record<string, string> = { Accept: "application/json" };
+  const key = process.env.CARRIER_API_KEY;
+  if (key) headers.Authorization = `Bearer ${key}`;
+  try {
+    const url = new URL(`${base}/api/orders/${encodeURIComponent(orderId)}/${action}`);
+    const slug = process.env.NEXT_PUBLIC_STOREFRONT_SLUG;
+    if (slug) url.searchParams.set("storefront", slug);
+    const response = await fetch(url.toString(), {
+      method: action === "cancel" ? "POST" : "GET",
+      headers,
+      cache: "no-store",
+    });
+    if (response.status === 404) return { ok: false, reason: "not-found" };
+    if (!response.ok) return { ok: false, reason: "upstream-error" };
+    return { ok: true, data: (await response.json()) as T };
+  } catch {
+    return { ok: false, reason: "network-error" };
+  }
+}
+
 /**
  * One fulfilment failure, as customer copy plus a status.
  *

package/templates/storefront/src/middleware.ts

@@ -1,3 +1,8 @@
+// Keep the middleware.ts convention (not Next 16's proxy.ts). proxy.ts always
+// runs on the Node.js runtime, and @opennextjs/cloudflare rejects Node.js
+// middleware ("Node.js middleware is not currently supported"), which broke
+// the template's cf:build in the npm Release job. middleware.ts still runs on
+// the Edge runtime that the Cloudflare/OpenNext build supports.
 import { clerkMiddleware, createRouteMatcher } from "@clerk/nextjs/server";
 
 const isPublicRoute = createRouteMatcher([

package/templates/storefront/src/vendor/carrier/client.ts

@@ -102,6 +102,14 @@ function apiKey(): string {
   return process.env.CARRIER_API_KEY ?? "";
 }
 
+/** Order tenant scope comes only from deployment config, never buyer input. */
+function orderPath(orderId: string, action = ""): string | null {
+  const path = `/api/orders/${encodeURIComponent(orderId)}${action}`;
+  const slug = process.env.NEXT_PUBLIC_STOREFRONT_SLUG;
+  if (slug && !/^[a-z0-9](?:[a-z0-9-]{0,38}[a-z0-9])?$/.test(slug)) return null;
+  return slug ? `${path}?storefront=${encodeURIComponent(slug)}` : path;
+}
+
 function sampleCatalog(reason: CatalogDegradedReason): TemplateCatalog {
   return { templates: MOCK_TEMPLATES, source: "sample", reason };
 }
@@ -190,12 +198,15 @@ export async function fetchOrder(orderId: string): Promise<OrderLookup> {
   if (!base) return { ok: false, reason: "unconfigured" };
   if (!/^[A-Za-z0-9_-]{1,256}$/.test(orderId)) return { ok: false, reason: "not-found" };
 
+  const path = orderPath(orderId);
+  if (path === null) return { ok: false, reason: "unconfigured" };
+
   const headers: Record<string, string> = { Accept: "application/json" };
   const key = apiKey();
   if (key) headers.Authorization = `Bearer ${key}`;
 
   try {
-    const res = await fetch(`${base}/api/orders/${encodeURIComponent(orderId)}`, {
+    const res = await fetch(`${base}${path}`, {
       headers,
       cache: "no-store",
     });
@@ -228,12 +239,15 @@ async function orderScopedCall<T>(
   if (!base) return { ok: false, reason: "unconfigured" };
   if (!/^[A-Za-z0-9_-]{1,256}$/.test(orderId)) return { ok: false, reason: "not-found" };
 
+  const scopedPath = orderPath(orderId, path);
+  if (scopedPath === null) return { ok: false, reason: "unconfigured" };
+
   const headers: Record<string, string> = { Accept: "application/json", ...(init?.headers as Record<string, string>) };
   const key = apiKey();
   if (key) headers.Authorization = `Bearer ${key}`;
 
   try {
-    const res = await fetch(`${base}/api/orders/${encodeURIComponent(orderId)}${path}`, {
+    const res = await fetch(`${base}${scopedPath}`, {
       ...init,
       headers,
       cache: "no-store",

package/templates/storefront/src/vendor/carrier/types.ts

@@ -6,6 +6,8 @@ export interface SkuTemplate {
   name: string;
   description: string;
   dataGb: number;
+  /** Only an explicit true value proves an unlimited allowance. */
+  unlimited?: boolean;
   validityDays: number;
   price_cents: number;
   currency: string;
@@ -86,6 +88,8 @@ export interface TopUpOption {
   id: TemplateId;
   name: string;
   dataGb: number;
+  /** Only an explicit true value proves an unlimited allowance. */
+  unlimited?: boolean;
   validityDays: number;
   price_cents: number;
   currency: string;

package/templates/storefront/src/vendor/geo/index.ts

@@ -22,18 +22,18 @@ export function formatPrice(cents: number, currency = "EUR", locale = "en"): str
 /**
  * A plan's data allowance as a shopper reads it.
  *
- * Zero is not "0 GB" — an unmetered plan is the thing the customer is being
- * sold, and printing a zero next to a price reads as a broken row.
+ * An explicit catalog flag proves unlimited; zero or missing data does not.
  */
-export function formatDataAllowance(dataGb: number): string {
-  if (!Number.isFinite(dataGb) || dataGb <= 0) return "Unlimited data";
+export function formatDataAllowance(dataGb: number, unlimited = false): string {
+  if (unlimited === true) return "Unlimited data";
+  if (!Number.isFinite(dataGb) || dataGb <= 0) return "Allowance not specified";
   if (dataGb < 1) return `${Math.round(dataGb * 1024)} MB data`;
   return `${Number.isInteger(dataGb) ? dataGb : dataGb.toFixed(1)} GB data`;
 }
 
 /** A plan's validity window, singular-aware. */
 export function formatValidity(validityDays: number): string {
-  if (!Number.isFinite(validityDays) || validityDays <= 0) return "No expiry";
+  if (!Number.isFinite(validityDays) || validityDays <= 0) return "Validity not specified";
   if (validityDays === 1) return "1 day";
   if (validityDays % 7 === 0 && validityDays >= 7) {
     const weeks = validityDays / 7;

package/templates/storefront/src/vendor/ui/brand.ts

@@ -21,7 +21,7 @@ export const BRAND = {
     whatsapp: brand.supportWhatsapp,
     sms: brand.supportWhatsapp,
     statusUrl: brand.supportUrl,
-    hoursLocal: "24/7",
+    hoursLocal: "We reply within one business day",
     responseTimeMinutes: 5,
   },
   social: brand.social,