@evinvest/kitstart 0.10.0 → 0.12.0

package/dist/core/place/live.d.ts

@@ -1,3 +1,4 @@
+import type { BookingConfig, BookingRules } from "../booking/model.js";
 import type { Geo, OpeningHours, Place, PostalAddress, Rating, ServiceArea } from "./types.js";
 /**
  * The live half of a place, as `GET <source>/locations/<slug>` answers it.
@@ -16,12 +17,15 @@ export interface PlaceLive<L extends string> {
     serviceArea?: readonly ServiceArea[];
     hours?: readonly OpeningHours[];
     rating?: Rating;
+    /** Validated with the site's Cal.com hosts; one that does not validate is dropped, the baked one kept. */
+    booking?: BookingConfig;
 }
 /**
  * Drops what does not validate instead of failing the page on one bad field.
- * A landmark counts only when it is given in every one of `locales`.
+ * A landmark counts only when it is given in every one of `locales`; a
+ * `cal_com` booking only on one of `rules.calComHosts` (the site's).
  */
-export declare function parsePlaceLive<L extends string>(body: unknown, locales: readonly L[]): PlaceLive<L>;
+export declare function parsePlaceLive<L extends string>(body: unknown, locales: readonly L[], rules?: BookingRules): PlaceLive<L>;
 /**
  * The live fields over the baked ones. A service-area place takes none of the
  * storefront's: an address, a pin or a photo from the source would give it a

package/dist/core/place/live.js

@@ -1,3 +1,4 @@
+import { BookingConfigError, parseBookingConfig } from "../booking/validate.js";
 import { parseInstant } from "./rating.js";
 const DAYS = ["Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday"];
 const TIME = /^([01]\d|2[0-3]):[0-5]\d$/;
@@ -60,11 +61,24 @@ function landmark(v, locales) {
 function isComplete(record, locales) {
     return locales.every(locale => typeof record[locale] === "string");
 }
+function booking(v, rules) {
+    if (v === undefined || v === null)
+        return undefined;
+    try {
+        return parseBookingConfig(v, rules);
+    }
+    catch (error) {
+        if (error instanceof BookingConfigError)
+            return undefined;
+        throw error;
+    }
+}
 /**
  * Drops what does not validate instead of failing the page on one bad field.
- * A landmark counts only when it is given in every one of `locales`.
+ * A landmark counts only when it is given in every one of `locales`; a
+ * `cal_com` booking only on one of `rules.calComHosts` (the site's).
  */
-export function parsePlaceLive(body, locales) {
+export function parsePlaceLive(body, locales, rules = {}) {
     if (!isObject(body))
         throw new Error("live location: body is not an object");
     const live = {};
@@ -104,6 +118,9 @@ export function parsePlaceLive(body, locales) {
     const r = rating(body.rating);
     if (r)
         live.rating = r;
+    const b = booking(body.booking, rules);
+    if (b)
+        live.booking = b;
     return live;
 }
 /**
@@ -113,6 +130,7 @@ export function parsePlaceLive(body, locales) {
  */
 export function mergeLive(baked, live) {
     const front = baked.presence;
+    const booking = live.booking ?? baked.booking;
     return {
         ...baked,
         presence: front.kind === "storefront"
@@ -128,5 +146,6 @@ export function mergeLive(baked, live) {
         serviceArea: live.serviceArea ?? baked.serviceArea,
         hours: live.hours ?? baked.hours,
         rating: live.rating ?? baked.rating,
+        ...(booking ? { booking } : {}),
     };
 }

package/dist/core/place/types.d.ts

@@ -1,3 +1,4 @@
+import type { BookingConfig } from "../booking/model.js";
 /**
  * The place model. Three words, one each:
  *
@@ -79,6 +80,11 @@ export interface Place<L extends string> {
     hours: readonly OpeningHours[] | null;
     /** Live only. */
     rating: Rating | null;
+    /**
+     * How a priced lead's slot is set (`PlaceLive.booking`, the panel's place
+     * settings); absent → `DEFAULT_BOOKING`, a call (`bookingOf`).
+     */
+    booking?: BookingConfig;
 }
 /** The storefront half of a place, or `null` for a service-area business. */
 export declare function storefrontOf<L extends string>(place: Place<L>): Extract<Presence<L>, {

package/dist/core/place/types.js

@@ -1,16 +1,3 @@
-/**
- * The place model. Three words, one each:
- *
- * - **Place** — the aggregate: one point of the business, baked config merged
- *   with the live source;
- * - **Presence** — how the place exists for a visitor: a storefront with an
- *   address, or a service area with none;
- * - **ServiceArea** — where the van goes.
- *
- * A service-area business has no address *in the type*, so no builder can
- * render one for it by accident — schema.org, the map and the footer all have
- * to ask `presence.kind` first.
- */
 /** The storefront half of a place, or `null` for a service-area business. */
 export function storefrontOf(place) {
     return place.presence.kind === "storefront" ? place.presence : null;

package/dist/core/routing.d.ts

@@ -66,8 +66,9 @@ export declare function parseGoneHeader(value: string | null): {
 };
 /**
  * The routes every landing has outside `[locale]`, which pass untouched: the
- * form target, the OG card, the probe, the sitemap and robots. Anything else
- * without a language but `/_next/…` and the site's `publicFiles` is `gone`.
+ * form target, its booking request (`bookingRoute`) and its price
+ * confirmation (`confirmRoute`), the OG card, the probe, the sitemap and robots. Anything else without a language but
+ * `/_next/…` and the site's `publicFiles` is `gone`.
  */
 export declare const NON_PAGE_ROUTES: readonly string[];
 /** @deprecated The same list as {@link NON_PAGE_ROUTES}, under its old name. */

package/dist/core/routing.js

@@ -70,10 +70,11 @@ export function parseGoneHeader(value) {
 }
 /**
  * The routes every landing has outside `[locale]`, which pass untouched: the
- * form target, the OG card, the probe, the sitemap and robots. Anything else
- * without a language but `/_next/…` and the site's `publicFiles` is `gone`.
+ * form target, its booking request (`bookingRoute`) and its price
+ * confirmation (`confirmRoute`), the OG card, the probe, the sitemap and robots. Anything else without a language but
+ * `/_next/…` and the site's `publicFiles` is `gone`.
  */
-export const NON_PAGE_ROUTES = ["/quote", "/og", "/health", "/sitemap.xml", "/robots.txt"];
+export const NON_PAGE_ROUTES = ["/quote", "/quote/booking", "/quote/confirm", "/og", "/health", "/sitemap.xml", "/robots.txt"];
 /** @deprecated The same list as {@link NON_PAGE_ROUTES}, under its old name. */
 export const PASS_PATHS = NON_PAGE_ROUTES;
 function isInfrastructure(pathname, publicFiles) {

package/dist/core/site.d.ts

@@ -1,4 +1,5 @@
 import type { LocaleRegistry } from "@evinvest/i18n";
+import type { BookingRules } from "./booking/model.js";
 import type { LeadSchema } from "./lead.js";
 import type { PublicationPolicy } from "./place/publication.js";
 import type { Place } from "./place/types.js";
@@ -69,6 +70,13 @@ export interface SiteConfig<L extends string, P extends string> {
      * down, or serves nothing valid. Absent → every need is a `quote` then.
      */
     pricing?: PricingModel;
+    /**
+     * The booking rules a place's `booking` is held to, baked or live:
+     * `calComHosts` are the Cal.com hosts a `cal_com` page may be on — the
+     * hosted cloud by default (`DEFAULT_CAL_COM_HOSTS`); a brand on its own
+     * Cal.com lists both, `["cal.com", "cal.brand.fr"]`.
+     */
+    booking?: BookingRules;
     legacyRedirects?: readonly LegacyRedirect<L>[];
     /**
      * Paths the brand serves as files besides the routes every landing has

package/dist/core/site.js

@@ -1,3 +1,4 @@
+import { bookingConfigProblems, calComHostsProblems } from "./booking/validate.js";
 import { pricingProblemsFor } from "./pricing/validate.js";
 export function defineSite(config) {
     const pageKeys = Object.keys(config.pages).filter((k) => Object.hasOwn(config.pages, k));
@@ -35,6 +36,20 @@ export function defineSite(config) {
         if (problems.length > 0)
             throw new Error(`defineSite: pricing: ${problems.join("; ")}`);
     }
+    const calComHosts = config.booking?.calComHosts;
+    if (calComHosts) {
+        const problems = calComHostsProblems(calComHosts);
+        if (problems.length > 0)
+            throw new Error(`defineSite: booking.${problems.join("; ")}`);
+    }
+    for (const place of config.places) {
+        // Baked into the build: a booking the live source would refuse must not ship.
+        if (place.booking === undefined)
+            continue;
+        const problems = bookingConfigProblems(place.booking, config.booking ?? {});
+        if (problems.length > 0)
+            throw new Error(`defineSite: place "${place.slug}": ${problems.join("; ")}`);
+    }
     for (const need of Object.keys(config.lead.flows ?? {})) {
         if (!config.lead.subjects.includes(need))
             throw new Error(`defineSite: lead.flows names "${need}", which is not one of lead.subjects`);

package/dist/index.d.ts

@@ -6,18 +6,19 @@
 export { assertLaunchable, bakedPlace, cardFact, contactOf, defineSite, ogLocaleOf, openLaunchBlockers, perLocale, type BrandFacts, type LegacyRedirect, type OwnerTodo, type PageSuffix, type Site, type SiteConfig, type Topology, } from "./core/site.js";
 export { createPlaceView, DEFAULT_TIME_ZONE, freshRating, isOpenAt, nextOpening, parseInstant, isPublished, mergeLive, parsePlaceLive, placeHref, placeOrigin, placeUrl, publicationGaps, RATING_MAX_AGE_DAYS, servedLocalities, SERVICE_AREA_GATE, siteOrigin, STOREFRONT_GATE, storefrontOf, type DayOfWeek, type Geo, type LinkBase, type LinkMode, type Opening, type OpeningHours, type OriginFacts, type Place, type PlaceLive, type PlaceView, type PostalAddress, type Presence, type PublicationField, type PublicationPolicy, type Rating, type ServiceArea, } from "./core/place/index.js";
 export { createRouting, GONE, GONE_HEADER, gonePath, goneHeader, HOST_MARK, LANG_COOKIE, LANG_COOKIE_MAX_AGE, NON_PAGE_ROUTES, parseGoneHeader, parsePlaceParam, PASS_PATHS, placeParam, pointSuffixes, THANKS, type Decision, type RequestFacts, type Routing, } from "./core/routing.js";
-export { CARD_FIELD, CARD_ID, CHANNEL_FIELD, channelOf, CONSENT_FIELD, LEAD_CHANNELS, LEAD_ERROR_PARAM, LEAD_SCHEMA_VERSION, MAX_CONSENT, MAX_FIELD, readCandidate, rejectionOf, suspectOf, SUBMISSION_FIELD, SUBMISSION_ID, validateCallbackLead, validateCandidate, validateLead, type Lead, type LeadCandidate, type LeadChannel, type LeadConsent, type LeadExtra, type LeadPrice, type LeadRejection, type LeadSchema, type LeadStore, type LeadSuspect, type LeadVerdict, type LeadWire, type SpamVerdict, } from "./core/lead.js";
+export { CARD_FIELD, CARD_ID, CHANNEL_FIELD, channelOf, CONSENT_FIELD, LEAD_CHANNELS, LEAD_ERROR_PARAM, LEAD_CARD_PARAM, leadErrorFor, leadErrorOf, LEAD_SCHEMA_VERSION, MAX_CONSENT, MAX_FIELD, readCandidate, rejectionOf, suspectOf, SUBMISSION_FIELD, SUBMISSION_ID, validateCallbackLead, validateCandidate, validateLead, type Lead, type LeadCandidate, type LeadChannel, type LeadError, type PageLeadError, type LeadConsent, type LeadExtra, type LeadPrice, type LeadRejection, type LeadSchema, type LeadStore, type LeadSuspect, type LeadVerdict, type LeadWire, type SpamVerdict, } from "./core/lead.js";
 export { isMobilePhone, isPlausiblePhone, normalizePhone, phoneProblem } from "./core/phone.js";
 export { CENTS_BUCKETS, centsBucket, ESTIMATE_FIELD_PREFIX, estimateField, flowOf, labelOf, LEAD_FLOWS, mulBp, parsePricingModel, priceOf, PRICING_CURRENCY, PRICING_FORMAT, PRICING_LIMITS, PricingModelError, pricingProblems, pricingProblemsFor, readEstimateInputs, roundTo, type AddOption, type DiscountOption, type LeadFlow, type LeadFlows, type MultiplyOption, type NeedPricing, type Price, type PriceLine, type PricingInput, type PricingInputKind, type PricingInputs, type PricingLabels, type PricingModel, } from "./core/pricing/index.js";
 export { flowTextOf, LEAD_CAPTURE_TEXT, type LeadCaptureFlowText, type LeadCaptureText } from "./core/lead-capture-text.js";
 export { fillText, formatCents, openingText } from "./core/lead-capture-format.js";
 export { channelHref, resolveChannels, smsHref, type CaptureChannel, type ChannelFacts, type ChannelOptions, type ResolvedChannels, } from "./core/channels.js";
 export { checkTiming, HONEYPOT_FIELD, LEGACY_HONEYPOT_FIELDS, MIN_FILL_MS, RATE_LIMIT_MAX_KEYS, RateLimiter, RENDERED_AT_FIELD, screen, type Screening, } from "./core/antispam.js";
-export { createAcceptLead, EXPERIMENT_FIELD, FORM_ID_FIELD, leadRef, LOCALE_FIELD, LOCATION_FIELD, VARIANT_FIELD, type AcceptDeps, type Outcome, type SubmitTags, } from "./core/accept.js";
+export { createAcceptLead, ANALYTICS_ID_FIELD, EXPERIMENT_FIELD, FORM_ID_FIELD, leadRef, LOCALE_FIELD, LOCATION_FIELD, PRICE_CHANGED, SHOWN_CENTS_FIELD, VARIANT_FIELD, type AcceptDeps, type Outcome, type SubmitTags, } from "./core/accept.js";
 export { areaServedNodes, breadcrumbNode, businessId, businessNode, faqPageNode, offerNodes, organizationId, organizationNode, placeGraph, websiteId, type OfferInput, type PageGraphCopy, type QuestionAnswer, } from "./core/seo/ld.js";
 export { AI_CRAWLERS, ogImageUrl, robotsFor, sitemapFor, type RobotsFile, type RobotsRule, type SitemapEntry, } from "./core/seo/sitemap.js";
-export { ALLOWED_PROPS, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, type AnalyticsTarget, type IntentChannel, type LeadField, type LeadStep, } from "./core/analytics.js";
+export { ALLOWED_PROPS, ANALYTICS_ID, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, type AnalyticsTarget, type IntentChannel, type LeadField, type LeadStep, } from "./core/analytics.js";
 export type { CallBarText, CopySlice, CoreText, PageMetaCopy, QuoteFormCopy, Said, StatusAction, StatusCopy, StatusScreenText, } from "./core/content.js";
+export { BOOKING_LIMITS, BOOKING_PROVIDERS, BOOKING_STATUSES, BookingConfigError, bookingConfigProblems, BOOKING_EXPERIMENT, bookingHref, bookingOf, bookingRequestedProperties, bookingRequestProblems, calComHostsProblems, DEFAULT_BOOKING, DEFAULT_CAL_COM_HOSTS, isBookingProvider, isLeadRef, isPageProvider, isPreferredPart, parseBookingConfig, parseBookingRequest, PREFERRED_PARTS, type BookingChoice, type BookingConfig, type BookingPrefill, type BookingProvider, type BookingRequest, type BookingRequestedProperties, type BookingRules, type BookingStatus, type OpenBookingConfig, type PageProvider, type PreferredPart, } from "./core/booking/index.js";
 export { brandStatusTarget, statusTarget, thanksChannel, thanksSuffix, type StatusTarget } from "./core/status.js";
 export { createLocaleRegistry, type LocaleRegistry } from "@evinvest/i18n";
 export { contactChannel, ldCompact, localBusiness, telHref, whatsappHref, type ContactChannel, type JsonLdNode, } from "@evinvest/marketing";

package/dist/index.js

@@ -6,17 +6,18 @@
 export { assertLaunchable, bakedPlace, cardFact, contactOf, defineSite, ogLocaleOf, openLaunchBlockers, perLocale, } from "./core/site.js";
 export { createPlaceView, DEFAULT_TIME_ZONE, freshRating, isOpenAt, nextOpening, parseInstant, isPublished, mergeLive, parsePlaceLive, placeHref, placeOrigin, placeUrl, publicationGaps, RATING_MAX_AGE_DAYS, servedLocalities, SERVICE_AREA_GATE, siteOrigin, STOREFRONT_GATE, storefrontOf, } from "./core/place/index.js";
 export { createRouting, GONE, GONE_HEADER, gonePath, goneHeader, HOST_MARK, LANG_COOKIE, LANG_COOKIE_MAX_AGE, NON_PAGE_ROUTES, parseGoneHeader, parsePlaceParam, PASS_PATHS, placeParam, pointSuffixes, THANKS, } from "./core/routing.js";
-export { CARD_FIELD, CARD_ID, CHANNEL_FIELD, channelOf, CONSENT_FIELD, LEAD_CHANNELS, LEAD_ERROR_PARAM, LEAD_SCHEMA_VERSION, MAX_CONSENT, MAX_FIELD, readCandidate, rejectionOf, suspectOf, SUBMISSION_FIELD, SUBMISSION_ID, validateCallbackLead, validateCandidate, validateLead, } from "./core/lead.js";
+export { CARD_FIELD, CARD_ID, CHANNEL_FIELD, channelOf, CONSENT_FIELD, LEAD_CHANNELS, LEAD_ERROR_PARAM, LEAD_CARD_PARAM, leadErrorFor, leadErrorOf, LEAD_SCHEMA_VERSION, MAX_CONSENT, MAX_FIELD, readCandidate, rejectionOf, suspectOf, SUBMISSION_FIELD, SUBMISSION_ID, validateCallbackLead, validateCandidate, validateLead, } from "./core/lead.js";
 export { isMobilePhone, isPlausiblePhone, normalizePhone, phoneProblem } from "./core/phone.js";
 export { CENTS_BUCKETS, centsBucket, ESTIMATE_FIELD_PREFIX, estimateField, flowOf, labelOf, LEAD_FLOWS, mulBp, parsePricingModel, priceOf, PRICING_CURRENCY, PRICING_FORMAT, PRICING_LIMITS, PricingModelError, pricingProblems, pricingProblemsFor, readEstimateInputs, roundTo, } from "./core/pricing/index.js";
 export { flowTextOf, LEAD_CAPTURE_TEXT } from "./core/lead-capture-text.js";
 export { fillText, formatCents, openingText } from "./core/lead-capture-format.js";
 export { channelHref, resolveChannels, smsHref, } from "./core/channels.js";
 export { checkTiming, HONEYPOT_FIELD, LEGACY_HONEYPOT_FIELDS, MIN_FILL_MS, RATE_LIMIT_MAX_KEYS, RateLimiter, RENDERED_AT_FIELD, screen, } from "./core/antispam.js";
-export { createAcceptLead, EXPERIMENT_FIELD, FORM_ID_FIELD, leadRef, LOCALE_FIELD, LOCATION_FIELD, VARIANT_FIELD, } from "./core/accept.js";
+export { createAcceptLead, ANALYTICS_ID_FIELD, EXPERIMENT_FIELD, FORM_ID_FIELD, leadRef, LOCALE_FIELD, LOCATION_FIELD, PRICE_CHANGED, SHOWN_CENTS_FIELD, VARIANT_FIELD, } from "./core/accept.js";
 export { areaServedNodes, breadcrumbNode, businessId, businessNode, faqPageNode, offerNodes, organizationId, organizationNode, placeGraph, websiteId, } from "./core/seo/ld.js";
 export { AI_CRAWLERS, ogImageUrl, robotsFor, sitemapFor, } from "./core/seo/sitemap.js";
-export { ALLOWED_PROPS, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, } from "./core/analytics.js";
+export { ALLOWED_PROPS, ANALYTICS_ID, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, } from "./core/analytics.js";
+export { BOOKING_LIMITS, BOOKING_PROVIDERS, BOOKING_STATUSES, BookingConfigError, bookingConfigProblems, BOOKING_EXPERIMENT, bookingHref, bookingOf, bookingRequestedProperties, bookingRequestProblems, calComHostsProblems, DEFAULT_BOOKING, DEFAULT_CAL_COM_HOSTS, isBookingProvider, isLeadRef, isPageProvider, isPreferredPart, parseBookingConfig, parseBookingRequest, PREFERRED_PARTS, } from "./core/booking/index.js";
 export { brandStatusTarget, statusTarget, thanksChannel, thanksSuffix } from "./core/status.js";
 // A landing needs these beside the machinery; re-exported by name so a brand
 // imports one package and the list here is the whole surface.

package/dist/next/booking-route.d.ts

@@ -0,0 +1,31 @@
+import type { LeadStore } from "../core/lead.js";
+import type { ServerEnv } from "../server/env.js";
+import type { LeadWebhook } from "../server/lead-webhook.js";
+/**
+ * `app/quote/booking/route.ts` — the page's word that a priced lead asked for
+ * a slot: `booking.requested@1` to the panel, after the lead's `lead.created`,
+ * through the same outbox. `LeadCapture` posts it when the visitor opens a
+ * booking page (`link`, `cal_com`) or sends a `manual` preference.
+ *
+ * ```ts
+ * export const dynamic = "force-dynamic";
+ * export const POST = bookingRoute({ env: serverEnv, webhook });
+ * ```
+ *
+ * The body is JSON: `booking.requested@1`'s properties (`lead_ref`,
+ * `provider`, `preferred_date?`, `preferred_part?`) plus `submission`, the
+ * form's submission id. The id is what proves the post comes from the page
+ * that sent the lead: it is a random UUID only that page knew, and the lead's
+ * reference is derived from it — a guessed `lead_ref` alone books nothing.
+ * Answers `200 { ok: true, queued }`; `queued` is `false` when the switch is
+ * off (`panelBooking`) or the lead already asked.
+ */
+export interface BookingRouteDeps {
+    env: () => Pick<ServerEnv, "leadsDb">;
+    /** The same webhook the quote route queues `lead.created` on. */
+    webhook?: () => LeadWebhook | null;
+    store?: () => LeadStore;
+    now?: () => number;
+    log?: Pick<Console, "warn" | "error">;
+}
+export declare function bookingRoute(deps: BookingRouteDeps): (request: Request) => Promise<Response>;

package/dist/next/booking-route.js

@@ -0,0 +1,97 @@
+import { leadRef } from "../core/accept.js";
+import { bookingRequestProblems, parseBookingRequest } from "../core/booking/validate.js";
+import { openLeadStore } from "../server/lead-store.js";
+const MAX_BODY = 4 * 1024;
+const DAY_MS = 86_400_000;
+/** How far ahead a preferred day may be; a day already past (a day's slack for time zones) is refused. */
+const MAX_AHEAD_DAYS = 366;
+const SUBMISSION = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+function json(status, body) {
+    return new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json", "Cache-Control": "no-store" } });
+}
+const isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+function inWindow(day, now) {
+    const at = Date.parse(`${day}T00:00:00Z`);
+    return at >= now - 2 * DAY_MS && at <= now + MAX_AHEAD_DAYS * DAY_MS;
+}
+/** The body as text, or `null` past `MAX_BODY` — counted as it arrives, since a chunked body has no length. */
+async function readCapped(request) {
+    if (Number(request.headers.get("content-length") ?? 0) > MAX_BODY)
+        return null;
+    if (!request.body)
+        return "";
+    const reader = request.body.getReader();
+    const chunks = [];
+    let size = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        size += value.byteLength;
+        if (size > MAX_BODY) {
+            await reader.cancel();
+            return null;
+        }
+        chunks.push(value);
+    }
+    const decoder = new TextDecoder();
+    return chunks.map(c => decoder.decode(c, { stream: true })).join("") + decoder.decode();
+}
+export function bookingRoute(deps) {
+    const log = deps.log ?? console;
+    const now = deps.now ?? Date.now;
+    let store;
+    let webhook;
+    return async (request) => {
+        // A cross-origin page cannot send this type without a preflight, which
+        // this route never answers: the JSON type is the CSRF check.
+        if (!(request.headers.get("content-type") ?? "").startsWith("application/json"))
+            return json(415, { ok: false });
+        const text = await readCapped(request);
+        if (text === null)
+            return json(413, { ok: false });
+        let body;
+        try {
+            body = JSON.parse(text);
+        }
+        catch {
+            return json(400, { ok: false });
+        }
+        if (!isObject(body))
+            return json(400, { ok: false });
+        const { submission, ...properties } = body;
+        if (typeof submission !== "string" || !SUBMISSION.test(submission))
+            return json(422, { ok: false });
+        if (bookingRequestProblems(properties).length > 0)
+            return json(422, { ok: false });
+        const booking = parseBookingRequest(properties);
+        if (booking.preferredDate !== undefined && !inWindow(booking.preferredDate, now()))
+            return json(422, { ok: false });
+        let found;
+        try {
+            store ??= deps.store ? deps.store() : openLeadStore(deps.env().leadsDb);
+            if (!store.findSubmission)
+                return json(501, { ok: false });
+            found = await store.findSubmission(submission);
+        }
+        catch (error) {
+            log.error("booking: the lead store could not be read", error);
+            return json(503, { ok: false });
+        }
+        if (!found || leadRef(found.id, submission) !== booking.leadRef)
+            return json(404, { ok: false });
+        // Booking follows a priced lead; a quote's slot is set on the call.
+        if (found.lead.flow !== "estimate" && found.lead.flow !== "fixed")
+            return json(409, { ok: false });
+        if (webhook === undefined) {
+            webhook = deps.webhook?.() ?? null;
+            webhook?.start();
+        }
+        // Sent by the outbox's own timer, like a lead's retry: the visitor waits for nothing.
+        const queued = webhook?.requestBooking?.(booking) ?? { kind: "off" };
+        // The lead stays in the leads file for a person; the panel never heard of it.
+        if (queued.kind === "unqueued")
+            log.warn(`booking: lead ${found.id} asked for a ${booking.provider} slot but was never sent to the panel; not queued`);
+        return json(200, { ok: true, queued: queued.kind === "queued" });
+    };
+}

package/dist/next/confirm-route.d.ts

@@ -0,0 +1,39 @@
+import { type LeadCaptureText } from "../core/lead-capture-text.js";
+import { type Site } from "../core/site.js";
+import type { PricingSource } from "../server/pricing-source.js";
+/**
+ * `app/quote/confirm/route.ts` — where a form posted without a script lands
+ * when the price it showed has changed (`price_changed`). Its page may be a
+ * cached render (ISR) that still shows the old price, so sending it back there
+ * would refuse every resubmit; this page is never cached. It prices the
+ * answers afresh, says the price changed, and asks to confirm: a form posting
+ * to `/quote` with the fresh price as `shown_cents`.
+ *
+ * ```ts
+ * export const dynamic = "force-dynamic";
+ * export const GET = confirmRoute(site, { pricing });
+ * ```
+ *
+ * The URL carries only what the visitor chose — the need, the answers, the
+ * page's ids and the price they saw — never what they typed: the phone and
+ * the postcode are asked again. A brand's extra fields are not carried.
+ */
+export interface ConfirmRouteDeps<L extends string> {
+    /** The price list the quote route prices with; absent → `site.pricing`. */
+    pricing?: PricingSource;
+    /** The form's words; the kit's in the page's language by default. */
+    text?: (locale: L) => LeadCaptureText;
+    /** The quote route's path; `/quote`. */
+    action?: string;
+    now?: () => number;
+}
+export declare const CONFIRM_PATH = "/quote/confirm";
+/** The price the visitor saw, in the confirmation's query. */
+export declare const SHOWN_PARAM = "shown";
+/**
+ * The confirmation's query for a refused form: the fields the visitor chose
+ * and the page's own ids, slugs only, and the price shown. Used by the quote
+ * route; nothing typed goes in it.
+ */
+export declare function confirmQuery(site: Pick<Site<string, string>, "lead">, form: FormData): URLSearchParams;
+export declare function confirmRoute<L extends string, P extends string>(site: Site<L, P>, deps?: ConfirmRouteDeps<L>): (request: Request) => Promise<Response>;

package/dist/next/confirm-route.js

@@ -0,0 +1,118 @@
+import { EXPERIMENT_FIELD, FORM_ID_FIELD, LOCALE_FIELD, LOCATION_FIELD, SHOWN_CENTS_FIELD, VARIANT_FIELD } from "../core/accept.js";
+import { HONEYPOT_FIELD, RENDERED_AT_FIELD } from "../core/antispam.js";
+import { CARD_FIELD, CARD_ID, SUBMISSION_FIELD, SUBMISSION_ID } from "../core/lead.js";
+import { fillText, formatCents } from "../core/lead-capture-format.js";
+import { flowTextOf, LEAD_CAPTURE_TEXT } from "../core/lead-capture-text.js";
+import { createPlaceView } from "../core/place/view.js";
+import { estimateField, flowOf, readEstimateInputs } from "../core/pricing/flow.js";
+import { PRICING_LIMITS } from "../core/pricing/model.js";
+import { priceOf } from "../core/pricing/price.js";
+import { createRouting } from "../core/routing.js";
+import { bakedPlace } from "../core/site.js";
+export const CONFIRM_PATH = "/quote/confirm";
+/** The price the visitor saw, in the confirmation's query. */
+export const SHOWN_PARAM = "shown";
+const escape = (s) => s.replace(/[&<>"']/g, c => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c] ?? c);
+const SLUG = /^[a-z0-9_-]{1,40}$/;
+const CENTS = /^\d{1,12}$/;
+/**
+ * The confirmation's query for a refused form: the fields the visitor chose
+ * and the page's own ids, slugs only, and the price shown. Used by the quote
+ * route; nothing typed goes in it.
+ */
+export function confirmQuery(site, form) {
+    const query = new URLSearchParams();
+    const keep = (name, test) => {
+        const value = form.get(name);
+        if (typeof value === "string" && test.test(value))
+            query.set(name, value);
+    };
+    for (const name of [LOCALE_FIELD, LOCATION_FIELD, FORM_ID_FIELD, EXPERIMENT_FIELD, VARIANT_FIELD])
+        keep(name, SLUG);
+    keep(CARD_FIELD, CARD_ID);
+    keep(SUBMISSION_FIELD, SUBMISSION_ID);
+    const subject = form.get(site.lead.wire.subject);
+    if (typeof subject === "string" && site.lead.subjects.includes(subject))
+        query.set(site.lead.wire.subject, subject);
+    for (const [name, value] of form) {
+        if (name.startsWith("estimate_") && typeof value === "string" && PRICING_LIMITS.slug.test(value) && SLUG.test(name.slice("estimate_".length)))
+            query.set(name, value);
+    }
+    const shown = form.get(SHOWN_CENTS_FIELD);
+    if (typeof shown === "string" && CENTS.test(shown))
+        query.set(SHOWN_PARAM, shown);
+    return query;
+}
+function page(lang, title, body) {
+    const html = `<!doctype html><html lang="${escape(lang)}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><title>${escape(title)}</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:2rem auto;padding:0 1rem;line-height:1.5">${body}</body></html>`;
+    return new Response(html, { status: 200, headers: { "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store", "X-Robots-Tag": "noindex" } });
+}
+export function confirmRoute(site, deps = {}) {
+    const routing = createRouting(site);
+    const action = deps.action ?? "/quote";
+    const now = deps.now ?? Date.now;
+    return async (request) => {
+        const url = new URL(request.url);
+        const q = (name) => url.searchParams.get(name);
+        const rawLocale = q(LOCALE_FIELD);
+        const locale = site.i18n.isLocale(rawLocale) ? rawLocale : site.i18n.defaultLocale;
+        const rawSlug = q(LOCATION_FIELD);
+        const place = rawSlug ? bakedPlace(site, rawSlug) : undefined;
+        const card = q(CARD_FIELD);
+        const anchor = card !== null && CARD_ID.test(card) ? card : "quote";
+        const host = request.headers.get("host") ?? url.host;
+        const back = () => {
+            const mode = place && routing.hostSlug(host) === place.slug ? "host" : "path";
+            const location = place ? createPlaceView(site, place, locale, mode).href(`#${anchor}`) : `/${locale}#${anchor}`;
+            return new Response(null, { status: 303, headers: { Location: location, "Cache-Control": "no-store" } });
+        };
+        const need = q(site.lead.wire.subject);
+        if (need === null)
+            return back();
+        let model;
+        try {
+            model = deps.pricing ? await deps.pricing.model() : (site.pricing ?? null);
+        }
+        catch {
+            model = null;
+        }
+        const flow = flowOf(site.lead.flows, model, need);
+        if (flow === "quote" || !model)
+            return back();
+        const inputs = flow === "estimate" ? readEstimateInputs(model, need, name => q(name)) : {};
+        const price = priceOf(model, need, inputs);
+        if (!price)
+            return back();
+        const kit = locale.startsWith("en") ? LEAD_CAPTURE_TEXT.en : LEAD_CAPTURE_TEXT.fr;
+        const base = deps.text?.(locale) ?? kit;
+        const flowText = flowTextOf(base, locale);
+        const fresh = formatCents(price.cents, locale);
+        const shown = q(SHOWN_PARAM);
+        const said = shown !== null && CENTS.test(shown) ? fillText(flowText.priceChanged, { price: fresh, shown: formatCents(Number(shown), locale) }) : flowText.priceChangedGeneric;
+        const hidden = [
+            [site.lead.wire.subject, need],
+            ...Object.entries(inputs).map(([input, option]) => [estimateField(input), option]),
+            [SHOWN_CENTS_FIELD, String(price.cents)],
+            [RENDERED_AT_FIELD, String(now())],
+        ];
+        for (const name of [LOCALE_FIELD, LOCATION_FIELD, FORM_ID_FIELD, EXPERIMENT_FIELD, VARIANT_FIELD, CARD_FIELD, SUBMISSION_FIELD]) {
+            const value = q(name);
+            if (value !== null)
+                hidden.push([name, value]);
+        }
+        const field = (name, label, type, autocomplete) => `<p><label for="${escape(name)}">${escape(label)}</label><br><input id="${escape(name)}" name="${escape(name)}" type="${type}" autocomplete="${autocomplete}" required style="font-size:1rem;padding:.5rem;width:100%"></p>`;
+        const body = [
+            `<h1>${escape(flowText.priceTitle)} : ${escape(fresh)}</h1>`,
+            `<p role="alert">${escape(said)}</p>`,
+            `<p>${escape(flowText.priceNote)}</p>`,
+            `<form method="post" action="${escape(action)}">`,
+            ...hidden.map(([name, value]) => `<input type="hidden" name="${escape(name)}" value="${escape(value)}">`),
+            `<input type="text" name="${HONEYPOT_FIELD}" tabindex="-1" autocomplete="off" value="" aria-hidden="true" style="position:absolute;left:-9999px">`,
+            field(site.lead.wire.locality, base.localityLabel, "text", "postal-code"),
+            field(site.lead.wire.mobile, base.phoneLabel, "tel", "tel"),
+            `<p><button type="submit" style="font-size:1rem;padding:.75rem 1.5rem">${escape(flowText.bookSubmit)}</button></p>`,
+            "</form>",
+        ].join("");
+        return page(site.i18n.hreflangOf(locale), flowText.priceTitle, body);
+    };
+}

package/dist/next/index.d.ts

@@ -10,3 +10,5 @@ export { healthRoute, robotsRoute, sitemapRoute } from "./routes.js";
 export { ogRoute, type OgCard, type OgFont, type OgOptions } from "./og.js";
 export { ogPalette, type OgColours } from "./og-palette.js";
 export { quoteRoute, type QuoteRouteDeps, type UnavailableCopy } from "./quote-route.js";
+export { bookingRoute, type BookingRouteDeps } from "./booking-route.js";
+export { CONFIRM_PATH, confirmQuery, confirmRoute, SHOWN_PARAM, type ConfirmRouteDeps } from "./confirm-route.js";

package/dist/next/index.js

@@ -10,3 +10,5 @@ export { healthRoute, robotsRoute, sitemapRoute } from "./routes.js";
 export { ogRoute } from "./og.js";
 export { ogPalette } from "./og-palette.js";
 export { quoteRoute } from "./quote-route.js";
+export { bookingRoute } from "./booking-route.js";
+export { CONFIRM_PATH, confirmQuery, confirmRoute, SHOWN_PARAM } from "./confirm-route.js";

package/dist/next/quote-route.js

@@ -1,8 +1,9 @@
 import { after } from "next/server.js";
-import { createAcceptLead, EXPERIMENT_FIELD, VARIANT_FIELD } from "../core/accept.js";
+import { CONFIRM_PATH, confirmQuery } from "./confirm-route.js";
+import { createAcceptLead, EXPERIMENT_FIELD, PRICE_CHANGED, VARIANT_FIELD } from "../core/accept.js";
 import { analyticsSink, EVENTS, experimentProps } from "../core/analytics.js";
 import { RateLimiter } from "../core/antispam.js";
-import { CARD_FIELD, CARD_ID, channelOf, LEAD_ERROR_PARAM } from "../core/lead.js";
+import { CARD_FIELD, CARD_ID, channelOf, LEAD_CARD_PARAM, LEAD_ERROR_PARAM } from "../core/lead.js";
 import { createPlaceView } from "../core/place/view.js";
 import { createRouting } from "../core/routing.js";
 import { bakedPlace, contactOf } from "../core/site.js";
@@ -115,7 +116,10 @@ export function quoteRoute(site, deps) {
             query.set("need", subject);
         const posted = form.get(CARD_FIELD);
         const card = typeof posted === "string" && CARD_ID.test(posted) ? posted : anchor;
-        return `?${query}#${card}${channel === "callback" ? "-callback" : ""}`;
+        const target = `${card}${channel === "callback" ? "-callback" : ""}`;
+        // The fragment never reaches the server: the query names the card too.
+        query.set(LEAD_CARD_PARAM, target);
+        return `?${query}#${target}`;
     }
     /** Self-contained: the thing that failed may be the thing that renders pages. */
     function unavailable(slug, locale) {
@@ -189,13 +193,18 @@ export function quoteRoute(site, deps) {
             case "invalid": {
                 const tags = experimentProps(text(form, EXPERIMENT_FIELD), text(form, VARIANT_FIELD));
                 // The field's role and why — never what was typed.
-                const props = { form_id: outcome.formId, channel: outcome.channel, field: outcome.field, reason: "invalid", ...tags };
+                const repriced = outcome.field === PRICE_CHANGED;
+                const props = { form_id: outcome.formId, channel: outcome.channel, field: outcome.field, reason: repriced ? PRICE_CHANGED : "invalid", ...tags };
                 if (env.posthogKey) {
                     const sink = analyticsSink({ key: env.posthogKey, host: env.posthogHost, brandId: site.brand.id }, outcome.slug);
                     defer(() => sink.capture(EVENTS.formReject, props));
                 }
                 if (scripted)
-                    return json(422, { ok: false, field: outcome.field });
+                    return json(422, { ok: false, field: outcome.field, ...(repriced && outcome.cents !== undefined ? { reason: PRICE_CHANGED, cents: outcome.cents } : {}) });
+                // The card's page may be a cached render still showing the old price:
+                // a plain post confirms on a page that is never cached instead.
+                if (repriced)
+                    return seeOther(`${CONFIRM_PATH}?${confirmQuery(site, form)}`);
                 return seeOther(href(request, outcome.slug, outcome.locale, refused(form, outcome.field, outcome.channel)));
             }
             case "failed":

package/dist/react/AnalyticsBoundary.js

@@ -2,9 +2,10 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { ContactLinkTracker } from "@evinvest/marketing/tracker";
 import { usePathname } from "next/navigation.js";
-import { useEffect, useMemo } from "react";
+import { useEffect, useMemo, useState } from "react";
 import { analyticsSink, countsAsPageView, EVENTS, experimentProps } from "../core/analytics.js";
-import { AnalyticsSinkContext, experimentOf } from "./analytics-context.js";
+import { AnalyticsIdContext, AnalyticsSinkContext, experimentOf } from "./analytics-context.js";
+import { newSubmissionId } from "./use-lead-submit.js";
 /**
  * `data-intent` on a link or button marks a conversion intent that is not a
  * contact link — or one the tracker cannot classify (`sms:`).
@@ -35,7 +36,10 @@ function source() {
 export function AnalyticsBoundary({ target, placeSlug, children }) {
     // On the target's values: a server layout hands a fresh object every render.
     const { key, host, brandId } = target;
-    const sink = useMemo(() => analyticsSink({ key, host, brandId }, placeSlug), [key, host, brandId, placeSlug]);
+    // One visitor for the boundary's life, in memory only: a sink rebuilt for
+    // another place keeps it, and a lead posted from the page can name it.
+    const [distinctId] = useState(newSubmissionId);
+    const sink = useMemo(() => analyticsSink({ key, host, brandId }, placeSlug, distinctId), [key, host, brandId, placeSlug, distinctId]);
     const pathname = usePathname();
     useEffect(() => {
         if (!countsAsPageView(pathname))
@@ -57,5 +61,5 @@ export function AnalyticsBoundary({ target, placeSlug, children }) {
     }, [sink]);
     // A link inside an experiment's island (`LeadCapture`) carries the
     // assignment on itself, which is what the tracker reads.
-    return (_jsx(AnalyticsSinkContext.Provider, { value: sink, children: _jsx(ContactLinkTracker, { channels: ["phone", "whatsapp"], onContact: ({ channel, data }) => sink.capture(EVENTS.intent, { channel, ...experimentProps(data["experiment"], data["variant"]) }, { transport: "beacon" }), children: children }) }));
+    return (_jsx(AnalyticsIdContext.Provider, { value: key ? distinctId : null, children: _jsx(AnalyticsSinkContext.Provider, { value: sink, children: _jsx(ContactLinkTracker, { channels: ["phone", "whatsapp"], onContact: ({ channel, data }) => sink.capture(EVENTS.intent, { channel, ...experimentProps(data["experiment"], data["variant"]) }, { transport: "beacon" }), children: children }) }) }));
 }