@evinvest/kitstart 0.8.0 → 0.9.0

package/dist/core/lead.d.ts

@@ -18,7 +18,24 @@ export type SpamVerdict = "honeypot" | "too-fast" | "rate-limited";
 export interface LeadExtra {
     name: string;
     max: number;
+    /**
+     * A free-text note keeps its line breaks. Off by default: every other field
+     * is one line, and a line break posted into one forges a line of the mail.
+     */
+    multiline?: boolean;
 }
+/**
+ * Why a candidate is refused, and the field it is about — `phone`, `locality`,
+ * `need`, `name`, `consent`, an extra's name, or `form` when the rule cannot
+ * say. The field goes back to the form, which shows the error there; `why` is
+ * for the log only, never rendered.
+ */
+export interface LeadRejection {
+    field: string;
+    why: string;
+}
+/** What a rule may answer: a rejection, a bare reason (read as `form`), or `null` to accept. */
+export type LeadVerdict = LeadRejection | string | null;
 /**
  * The form field each core value is posted under. Brand config, not a
  * constant: a page cached before a rename still posts the old names, and a
@@ -35,16 +52,20 @@ export interface LeadSchema<S extends string> {
     wire: LeadWire;
     extras?: readonly LeadExtra[];
     /**
-     * The one rule worth enforcing, as a reason for the log (never rendered), or
-     * `null` to accept. Absent → every candidate is a lead.
+     * The rule a form lead must pass, or `null` to accept. Absent →
+     * `validateLead`: the number the form itself blocks on. A brand adding its
+     * own rule composes it — `lead => validateLead(lead) ?? mine(lead)` — and
+     * the landing contract holds it to the form's phone rule, so the server
+     * never refuses a number the form let through. A bare string is a reason
+     * about the whole form (`field: "form"`).
      */
-    validate?: (lead: LeadCandidate) => string | null;
+    validate?: (lead: LeadCandidate) => LeadVerdict;
     /**
      * The rule for a callback request, which carries a phone and little else —
      * a form's rule would refuse it for the locality it never asked. Absent →
-     * `validateCallbackLead`: a number we can read.
+     * `validateCallbackLead`: a number we can call.
      */
-    validateCallback?: (lead: LeadCandidate) => string | null;
+    validateCallback?: (lead: LeadCandidate) => LeadVerdict;
     /**
      * How the mobile is kept: `typed` (default), exactly as posted, or `e164`,
      * `+33612345678` when it reads as a number and as typed when it does not.
@@ -74,8 +95,23 @@ export interface LeadConsent {
     text: string;
     at: string;
 }
-/** The default callback rule: a phone number that reads as one. */
-export declare function validateCallbackLead(lead: Pick<LeadCandidate, "mobile">): string | null;
+/** The script's id for one submission, minted once and kept across its resends. */
+export declare const SUBMISSION_FIELD = "submission_id";
+export declare const SUBMISSION_ID: RegExp;
+/** The query a refused submission is sent back to the form with: `?lead_error=<field>`. */
+export declare const LEAD_ERROR_PARAM = "lead_error";
+/**
+ * The card's id, posted so a refusal lands back on it (`#devis`, not a
+ * hard-coded `#quote`). Only a slug is ever echoed into the redirect.
+ */
+export declare const CARD_FIELD = "card";
+export declare const CARD_ID: RegExp;
+/** A rule's answer as a rejection: a bare reason, or a field that is not a slug, is about the `form`. */
+export declare function rejectionOf(verdict: LeadVerdict): LeadRejection | null;
+/** The default form rule: a number we can call — the one the form blocks on (`phoneProblem`). */
+export declare function validateLead(lead: Pick<LeadCandidate, "mobile">): LeadRejection | null;
+/** The default callback rule: the same number rule, worded for the log. */
+export declare function validateCallbackLead(lead: Pick<LeadCandidate, "mobile">): LeadRejection | null;
 /**
  * A submitted lead. Values are trimmed and capped but not otherwise parsed: a
  * lead that cannot be fully validated is still a lead, and rejecting it loses
@@ -97,7 +133,21 @@ export interface Lead {
     channel?: LeadChannel;
     /** Only on a callback lead: the consent it was posted with. */
     consent?: LeadConsent;
+    /**
+     * The script's id for this submission (`SUBMISSION_FIELD`): a resend after
+     * a lost answer carries the same one, and the store keeps one row per id.
+     * Absent on a plain post, which has no script to mint one.
+     */
+    submissionId?: string;
 }
+/** What the panel may be told of a suspected lead. */
+export type LeadSuspect = "rate_limited" | "too_fast";
+/**
+ * Why a lead the panel receives is suspect, for its `suspect` property, or
+ * nothing for a clean one. Never `honeypot`: a lead that filled the trap is a
+ * bot's, kept in the table and sent nowhere.
+ */
+export declare function suspectOf(lead: Pick<Lead, "spamVerdict">): LeadSuspect | undefined;
 /** The lead's channel, `form` for one that predates the field. */
 export declare function channelOf(lead: Pick<Lead, "channel">): LeadChannel;
 /**
@@ -118,7 +168,16 @@ export type LeadCandidate = Omit<Lead, "spamVerdict" | "consent"> & {
  * (`@evinvest/kitstart/testing`) before `LEADS_DB_URL` may select it.
  */
 export interface LeadStore {
+    /** Rejects a second lead with a `submissionId` the store already holds (a unique index). */
     insert(lead: Lead): Promise<number>;
+    /**
+     * The row a submission id was stored under, read back as a lead, or `null`.
+     * Absent on an adapter that does not dedupe: every post is then a lead.
+     */
+    findSubmission?(submissionId: string): Promise<{
+        id: number;
+        lead: Lead;
+    } | null>;
     count(): Promise<number>;
     /** The schema version the storage stands at after opening. */
     schemaVersion(): Promise<number>;
@@ -129,9 +188,10 @@ export interface LeadStore {
 /**
  * The lead schema's version, shared by every adapter: 1 the Rust server's
  * table (`job`, `zip`, `mobile`, `at`), 2 + the place, 3 + the spam verdict,
- * 4 + the brand's extras, 5 + the channel and the callback's consent. Append only.
+ * 4 + the brand's extras, 5 + the channel and the callback's consent, 6 + the
+ * script's submission id, unique. Append only.
  */
-export declare const LEAD_SCHEMA_VERSION = 5;
+export declare const LEAD_SCHEMA_VERSION = 6;
 /** A field is capped, not rejected: a long answer is still a customer. */
 export declare const MAX_FIELD = 200;
 /**
@@ -140,4 +200,5 @@ export declare const MAX_FIELD = 200;
  * sees it.
  */
 export declare function readCandidate(schema: LeadSchema<string>, form: FormData, placeSlug: string | null): LeadCandidate;
-export declare function validateCandidate(schema: LeadSchema<string>, lead: LeadCandidate): string | null;
+/** The rule the candidate's channel answers to: the field a refusal is about, or `null`. */
+export declare function validateCandidate(schema: LeadSchema<string>, lead: LeadCandidate): LeadRejection | null;

package/dist/core/lead.js

@@ -9,7 +9,7 @@
  * `LeadSchema.wire` names the posted fields (a page cached before a rename
  * still delivers) — both deliberate departures from the first design.
  */
-import { isPlausiblePhone, normalizePhone } from "./phone.js";
+import { normalizePhone, phoneProblem } from "./phone.js";
 export const LEAD_CHANNELS = ["form", "callback"];
 export const CHANNEL_FIELD = "channel";
 /**
@@ -20,9 +20,47 @@ export const CHANNEL_FIELD = "channel";
 export const CONSENT_FIELD = "consent";
 /** Longer than any consent sentence; past it, the text is cut, not refused. */
 export const MAX_CONSENT = 500;
-/** The default callback rule: a phone number that reads as one. */
+/** The script's id for one submission, minted once and kept across its resends. */
+export const SUBMISSION_FIELD = "submission_id";
+export const SUBMISSION_ID = /^[A-Za-z0-9-]{16,64}$/;
+/** The query a refused submission is sent back to the form with: `?lead_error=<field>`. */
+export const LEAD_ERROR_PARAM = "lead_error";
+/**
+ * The card's id, posted so a refusal lands back on it (`#devis`, not a
+ * hard-coded `#quote`). Only a slug is ever echoed into the redirect.
+ */
+export const CARD_FIELD = "card";
+export const CARD_ID = /^[a-z0-9-]{1,64}$/;
+/** A field as a refusal names it: a short slug, or the whole `form`. */
+const FIELD_SLUG = /^[a-z][a-z0-9_]{0,31}$/;
+/** A rule's answer as a rejection: a bare reason, or a field that is not a slug, is about the `form`. */
+export function rejectionOf(verdict) {
+    if (verdict === null)
+        return null;
+    if (typeof verdict === "string")
+        return { field: "form", why: verdict };
+    return FIELD_SLUG.test(verdict.field) ? verdict : { field: "form", why: verdict.why };
+}
+/** The default form rule: a number we can call — the one the form blocks on (`phoneProblem`). */
+export function validateLead(lead) {
+    const problem = phoneProblem(lead.mobile);
+    return problem === null ? null : { field: "phone", why: problem === "required" ? "a phone number" : "a phone number we can call" };
+}
+/** The default callback rule: the same number rule, worded for the log. */
 export function validateCallbackLead(lead) {
-    return isPlausiblePhone(lead.mobile) ? null : "a phone number to call back";
+    return phoneProblem(lead.mobile) === null ? null : { field: "phone", why: "a phone number to call back" };
+}
+/**
+ * Why a lead the panel receives is suspect, for its `suspect` property, or
+ * nothing for a clean one. Never `honeypot`: a lead that filled the trap is a
+ * bot's, kept in the table and sent nowhere.
+ */
+export function suspectOf(lead) {
+    if (lead.spamVerdict === "rate-limited")
+        return "rate_limited";
+    if (lead.spamVerdict === "too-fast")
+        return "too_fast";
+    return undefined;
 }
 /** The lead's channel, `form` for one that predates the field. */
 export function channelOf(lead) {
@@ -31,14 +69,27 @@ export function channelOf(lead) {
 /**
  * The lead schema's version, shared by every adapter: 1 the Rust server's
  * table (`job`, `zip`, `mobile`, `at`), 2 + the place, 3 + the spam verdict,
- * 4 + the brand's extras, 5 + the channel and the callback's consent. Append only.
+ * 4 + the brand's extras, 5 + the channel and the callback's consent, 6 + the
+ * script's submission id, unique. Append only.
  */
-export const LEAD_SCHEMA_VERSION = 5;
+export const LEAD_SCHEMA_VERSION = 6;
 /** A field is capped, not rejected: a long answer is still a customer. */
 export const MAX_FIELD = 200;
-function field(form, name, max) {
+// C0 and C1 controls, DEL, and the Unicode line and paragraph separators.
+const CONTROL = /[\u0000-\u001f\u007f-\u009f\u2028\u2029]+/g;
+// The same less the line feed: what a multi-line note keeps.
+const CONTROL_BUT_NEWLINE = /[\u0000-\u0009\u000b-\u001f\u007f-\u009f\u2028\u2029]+/g;
+/**
+ * A posted value, trimmed and capped. One line unless `multiline`: a line
+ * break or a control character posted into a one-line field (`63130\nMobile
+ * : 07…`) would forge a line of the mail, so each run becomes one space.
+ */
+function field(form, name, max, multiline = false) {
     const value = form.get(name);
-    return typeof value === "string" ? value.trim().slice(0, max) : null;
+    if (typeof value !== "string")
+        return null;
+    const clean = multiline ? value.replace(/\r\n?/g, "\n").replace(CONTROL_BUT_NEWLINE, "") : value.replace(CONTROL, " ").replace(/ {2,}/g, " ");
+    return clean.trim().slice(0, max);
 }
 /**
  * The candidate a form posted, read through the schema's field names. Under
@@ -48,13 +99,14 @@ function field(form, name, max) {
 export function readCandidate(schema, form, placeSlug) {
     const extras = {};
     for (const extra of schema.extras ?? []) {
-        const value = field(form, extra.name, extra.max);
+        const value = field(form, extra.name, extra.max, extra.multiline);
         if (value)
             extras[extra.name] = value;
     }
     const mobile = field(form, schema.wire.mobile, MAX_FIELD) ?? "";
     const callback = form.get(CHANNEL_FIELD) === "callback";
     const consent = callback ? field(form, CONSENT_FIELD, MAX_CONSENT) : null;
+    const submission = field(form, SUBMISSION_FIELD, 64);
     return {
         subject: field(form, schema.wire.subject, MAX_FIELD) ?? "",
         locality: field(form, schema.wire.locality, MAX_FIELD) ?? "",
@@ -63,14 +115,16 @@ export function readCandidate(schema, form, placeSlug) {
         placeSlug,
         channel: callback ? "callback" : "form",
         ...(consent ? { consentText: consent } : {}),
+        ...(submission && SUBMISSION_ID.test(submission) ? { submissionId: submission } : {}),
     };
 }
+/** The rule the candidate's channel answers to: the field a refusal is about, or `null`. */
 export function validateCandidate(schema, lead) {
     if (channelOf(lead) === "callback") {
         // Not the brand's to waive: calling someone back needs their word for it.
         if (!lead.consentText)
-            return "consent to be called back";
-        return (schema.validateCallback ?? validateCallbackLead)(lead);
+            return { field: "consent", why: "consent to be called back" };
+        return rejectionOf((schema.validateCallback ?? validateCallbackLead)(lead));
     }
-    return schema.validate?.(lead) ?? null;
+    return rejectionOf((schema.validate ?? validateLead)(lead));
 }

package/dist/core/phone.d.ts

@@ -1,17 +1,28 @@
 /**
- * A phone number as the funnel keeps it: E.164 when the typed value is one we
- * can read, otherwise exactly as typed. Soft by design — a number we cannot
- * parse is still a way to reach someone, and refusing it loses the customer.
+ * A phone number as the funnel reads it: E.164 when the typed value is a
+ * number someone can be reached on, otherwise `null`.
  *
- * Only the French national plan is read (every brand of the vertical is in
- * France): `06 12 34 56 78`, `+33 (0)6 …`, `0033 6 …` and a mobile typed
- * without its trunk zero (`6 12 34 56 78`) all become `+33612345678`. Any
- * other international number is compacted (`+44 7911 123456` →
- * `+447911123456`); anything else is `null`.
+ * Only the French national plan is read closely (every brand of the vertical
+ * is in France): ten digits from `0[1-9]` — `06 12 34 56 78`, `+33 (0)6 …`,
+ * `0033 6 …`, a mobile typed without its trunk zero (`6 12 34 56 78`) — all
+ * become `+33612345678`. Any other international number is a plausible E.164,
+ * 8 to 15 digits after the `+`, compacted (`+44 7911 123456` →
+ * `+447911123456`). Full-width digits read as digits; a run of one digit
+ * (`00 00 00 00 00`, `06 66 66 66 66`) is a refusal to give a number, not one.
  */
 export declare function normalizePhone(raw: string): string | null;
-/** Whether a typed number reads as one — the form's soft check, never a block. */
+/**
+ * Whether a typed number is one we can call back — the one rule the form,
+ * the callback and the server share (`phoneProblem`, `validateLead`).
+ */
 export declare function isPlausiblePhone(raw: string): boolean;
+/**
+ * What is wrong with a typed number, or `null`: `required` when nothing was
+ * typed, `invalid` when it is not a number we can call. The form blocks on it
+ * in the page's words and the server refuses on it — one rule, so a number
+ * the form lets through is never refused behind the visitor's back.
+ */
+export declare function phoneProblem(raw: string): "required" | "invalid" | null;
 /**
  * A French mobile (`+33 6…`, `+33 7…`) — the one kind an SMS reaches. A
  * landline answers a text with silence, so the channel is not offered for it.

package/dist/core/phone.js

@@ -1,35 +1,59 @@
 /**
- * A phone number as the funnel keeps it: E.164 when the typed value is one we
- * can read, otherwise exactly as typed. Soft by design — a number we cannot
- * parse is still a way to reach someone, and refusing it loses the customer.
+ * A phone number as the funnel reads it: E.164 when the typed value is a
+ * number someone can be reached on, otherwise `null`.
  *
- * Only the French national plan is read (every brand of the vertical is in
- * France): `06 12 34 56 78`, `+33 (0)6 …`, `0033 6 …` and a mobile typed
- * without its trunk zero (`6 12 34 56 78`) all become `+33612345678`. Any
- * other international number is compacted (`+44 7911 123456` →
- * `+447911123456`); anything else is `null`.
+ * Only the French national plan is read closely (every brand of the vertical
+ * is in France): ten digits from `0[1-9]` — `06 12 34 56 78`, `+33 (0)6 …`,
+ * `0033 6 …`, a mobile typed without its trunk zero (`6 12 34 56 78`) — all
+ * become `+33612345678`. Any other international number is a plausible E.164,
+ * 8 to 15 digits after the `+`, compacted (`+44 7911 123456` →
+ * `+447911123456`). Full-width digits read as digits; a run of one digit
+ * (`00 00 00 00 00`, `06 66 66 66 66`) is a refusal to give a number, not one.
  */
 export function normalizePhone(raw) {
-    let s = raw.replace(/\(0\)/g, "").replace(/[\s.\-()/ ]/g, "");
+    // NFKC: a Japanese or Chinese keyboard types full-width digits and `＋`,
+    // and a pasted number may carry no-break spaces. `\s` takes those too.
+    let s = raw.normalize("NFKC").replace(/\(0\)/g, "").replace(/[\s.\-()/]/g, "");
     if (s.startsWith("00"))
         s = `+${s.slice(2)}`;
+    let e164 = null;
     if (s.startsWith("+33")) {
         const national = /^\+330?([1-9]\d{8})$/.exec(s);
-        return national ? `+33${national[1]}` : null;
+        e164 = national ? `+33${national[1]}` : null;
     }
-    const trunk = /^0([1-9]\d{8})$/.exec(s);
-    if (trunk)
-        return `+33${trunk[1]}`;
-    if (/^[1-9]\d{8}$/.test(s))
-        return `+33${s}`;
-    if (/^\+[1-9]\d{7,14}$/.test(s))
-        return s;
-    return null;
+    else {
+        const trunk = /^0([1-9]\d{8})$/.exec(s);
+        if (trunk)
+            e164 = `+33${trunk[1]}`;
+        else if (/^[1-9]\d{8}$/.test(s))
+            e164 = `+33${s}`;
+        else if (/^\+[1-9]\d{7,14}$/.test(s))
+            e164 = s;
+    }
+    if (e164 === null)
+        return null;
+    // The subscriber's digits: past `+33` for a French number, past `+` otherwise.
+    const subscriber = e164.startsWith("+33") ? e164.slice(3) : e164.slice(1);
+    return /^(\d)\1+$/.test(subscriber) ? null : e164;
 }
-/** Whether a typed number reads as one — the form's soft check, never a block. */
+/**
+ * Whether a typed number is one we can call back — the one rule the form,
+ * the callback and the server share (`phoneProblem`, `validateLead`).
+ */
 export function isPlausiblePhone(raw) {
     return normalizePhone(raw) !== null;
 }
+/**
+ * What is wrong with a typed number, or `null`: `required` when nothing was
+ * typed, `invalid` when it is not a number we can call. The form blocks on it
+ * in the page's words and the server refuses on it — one rule, so a number
+ * the form lets through is never refused behind the visitor's back.
+ */
+export function phoneProblem(raw) {
+    if (raw.trim() === "")
+        return "required";
+    return isPlausiblePhone(raw) ? null : "invalid";
+}
 /**
  * A French mobile (`+33 6…`, `+33 7…`) — the one kind an SMS reaches. A
  * landline answers a text with silence, so the channel is not offered for it.

package/dist/core/status.d.ts

@@ -1,3 +1,4 @@
+import { type LeadChannel } from "./lead.js";
 import type { Place } from "./place/types.js";
 import { type Site } from "./site.js";
 /**
@@ -16,6 +17,16 @@ export interface StatusTarget<L extends string> {
     retry: string;
     langHrefs: Record<L, string>;
 }
+/**
+ * The thanks page's suffix: a callback's carries `?channel=callback`, so the
+ * page can promise a call instead of the quote's SMS.
+ */
+export declare function thanksSuffix(channel?: LeadChannel): string;
+/**
+ * Which lead the thanks page thanks for, from its query — a page's
+ * `searchParams` or a `URLSearchParams`. Anything but `callback` is `form`.
+ */
+export declare function thanksChannel(search: URLSearchParams | Readonly<Record<string, string | string[] | undefined>>): LeadChannel;
 /**
  * The brand's own status target from two facts — for a client boundary
  * (`error.tsx`, the `notFound()` boundary), which must not import the site
@@ -27,6 +38,7 @@ export declare function brandStatusTarget<L extends string>(facts: {
 }, locale: L, options?: {
     retry?: string;
     thanks?: boolean;
+    channel?: LeadChannel;
 }): StatusTarget<L>;
 /**
  * Server side — the global not-found page, a thank-you page: the target for
@@ -44,4 +56,5 @@ export declare function statusTarget<L extends string, P extends string>(site: S
 }, options?: {
     retry?: string;
     thanks?: boolean;
+    channel?: LeadChannel;
 }): StatusTarget<L>;

package/dist/core/status.js

@@ -1,6 +1,23 @@
+import { CHANNEL_FIELD } from "./lead.js";
 import { createPlaceView } from "./place/view.js";
 import { parsePlaceParam, THANKS } from "./routing.js";
 import { bakedPlace, contactOf, perLocale } from "./site.js";
+/**
+ * The thanks page's suffix: a callback's carries `?channel=callback`, so the
+ * page can promise a call instead of the quote's SMS.
+ */
+export function thanksSuffix(channel = "form") {
+    return channel === "callback" ? `${THANKS}?${CHANNEL_FIELD}=callback` : THANKS;
+}
+/**
+ * Which lead the thanks page thanks for, from its query — a page's
+ * `searchParams` or a `URLSearchParams`. Anything but `callback` is `form`.
+ */
+export function thanksChannel(search) {
+    const raw = search instanceof URLSearchParams ? search.get(CHANNEL_FIELD) : search[CHANNEL_FIELD];
+    const value = Array.isArray(raw) ? raw[0] : raw;
+    return value === "callback" ? "callback" : "form";
+}
 function complete(r, locales) {
     return locales.every(l => typeof r[l] === "string");
 }
@@ -10,7 +27,7 @@ function complete(r, locales) {
  * config: it would carry every place into every page's bundle.
  */
 export function brandStatusTarget(facts, locale, options = {}) {
-    const suffix = options.thanks ? THANKS : "";
+    const suffix = options.thanks ? thanksSuffix(options.channel) : "";
     const langHrefs = {};
     for (const l of facts.locales)
         langHrefs[l] = `/${l}${suffix}`;
@@ -37,7 +54,7 @@ export function brandStatusTarget(facts, locale, options = {}) {
  */
 export function statusTarget(site, params, options = {}) {
     const locale = typeof params.locale === "string" && site.i18n.isLocale(params.locale) ? params.locale : site.i18n.defaultLocale;
-    const suffix = options.thanks ? THANKS : "";
+    const suffix = options.thanks ? thanksSuffix(options.channel) : "";
     const param = typeof params.location === "string" ? parsePlaceParam(params.location) : null;
     const place = param ? (bakedPlace(site, param.slug) ?? null) : null;
     if (place && param) {

package/dist/index.d.ts

@@ -6,8 +6,8 @@
 export { assertLaunchable, bakedPlace, cardFact, contactOf, defineSite, ogLocaleOf, openLaunchBlockers, perLocale, type BrandFacts, type LegacyRedirect, type OwnerTodo, type PageSuffix, type Site, type SiteConfig, type Topology, } from "./core/site.js";
 export { createPlaceView, DEFAULT_TIME_ZONE, freshRating, isOpenAt, nextOpening, parseInstant, isPublished, mergeLive, parsePlaceLive, placeHref, placeOrigin, placeUrl, publicationGaps, RATING_MAX_AGE_DAYS, servedLocalities, SERVICE_AREA_GATE, siteOrigin, STOREFRONT_GATE, storefrontOf, type DayOfWeek, type Geo, type LinkBase, type LinkMode, type Opening, type OpeningHours, type OriginFacts, type Place, type PlaceLive, type PlaceView, type PostalAddress, type Presence, type PublicationField, type PublicationPolicy, type Rating, type ServiceArea, } from "./core/place/index.js";
 export { createRouting, GONE, GONE_HEADER, gonePath, goneHeader, HOST_MARK, LANG_COOKIE, LANG_COOKIE_MAX_AGE, NON_PAGE_ROUTES, parseGoneHeader, parsePlaceParam, PASS_PATHS, placeParam, pointSuffixes, THANKS, type Decision, type RequestFacts, type Routing, } from "./core/routing.js";
-export { CHANNEL_FIELD, channelOf, CONSENT_FIELD, LEAD_CHANNELS, LEAD_SCHEMA_VERSION, MAX_CONSENT, MAX_FIELD, readCandidate, validateCallbackLead, validateCandidate, type Lead, type LeadCandidate, type LeadChannel, type LeadConsent, type LeadExtra, type LeadSchema, type LeadStore, type LeadWire, type SpamVerdict, } from "./core/lead.js";
-export { isMobilePhone, isPlausiblePhone, normalizePhone } from "./core/phone.js";
+export { CARD_FIELD, CARD_ID, CHANNEL_FIELD, channelOf, CONSENT_FIELD, LEAD_CHANNELS, LEAD_ERROR_PARAM, LEAD_SCHEMA_VERSION, MAX_CONSENT, MAX_FIELD, readCandidate, rejectionOf, suspectOf, SUBMISSION_FIELD, SUBMISSION_ID, validateCallbackLead, validateCandidate, validateLead, type Lead, type LeadCandidate, type LeadChannel, type LeadConsent, type LeadExtra, type LeadRejection, type LeadSchema, type LeadStore, type LeadSuspect, type LeadVerdict, type LeadWire, type SpamVerdict, } from "./core/lead.js";
+export { isMobilePhone, isPlausiblePhone, normalizePhone, phoneProblem } from "./core/phone.js";
 export { LEAD_CAPTURE_TEXT, type LeadCaptureText } from "./core/lead-capture-text.js";
 export { fillText, openingText } from "./core/lead-capture-format.js";
 export { channelHref, resolveChannels, smsHref, type CaptureChannel, type ChannelFacts, type ChannelOptions, type ResolvedChannels, } from "./core/channels.js";
@@ -17,7 +17,7 @@ export { areaServedNodes, breadcrumbNode, businessId, businessNode, faqPageNode,
 export { AI_CRAWLERS, ogImageUrl, robotsFor, sitemapFor, type RobotsFile, type RobotsRule, type SitemapEntry, } from "./core/seo/sitemap.js";
 export { ALLOWED_PROPS, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, type AnalyticsTarget, type IntentChannel, type LeadField, type LeadStep, } from "./core/analytics.js";
 export type { CallBarText, CopySlice, CoreText, PageMetaCopy, QuoteFormCopy, Said, StatusAction, StatusCopy, StatusScreenText, } from "./core/content.js";
-export { brandStatusTarget, statusTarget, type StatusTarget } from "./core/status.js";
+export { brandStatusTarget, statusTarget, thanksChannel, thanksSuffix, type StatusTarget } from "./core/status.js";
 export { createLocaleRegistry, type LocaleRegistry } from "@evinvest/i18n";
 export { contactChannel, ldCompact, localBusiness, telHref, whatsappHref, type ContactChannel, type JsonLdNode, } from "@evinvest/marketing";
 export { createBeaconSink, noopSink, type AnalyticsSink } from "@evinvest/analytics";

package/dist/index.js

@@ -6,8 +6,8 @@
 export { assertLaunchable, bakedPlace, cardFact, contactOf, defineSite, ogLocaleOf, openLaunchBlockers, perLocale, } from "./core/site.js";
 export { createPlaceView, DEFAULT_TIME_ZONE, freshRating, isOpenAt, nextOpening, parseInstant, isPublished, mergeLive, parsePlaceLive, placeHref, placeOrigin, placeUrl, publicationGaps, RATING_MAX_AGE_DAYS, servedLocalities, SERVICE_AREA_GATE, siteOrigin, STOREFRONT_GATE, storefrontOf, } from "./core/place/index.js";
 export { createRouting, GONE, GONE_HEADER, gonePath, goneHeader, HOST_MARK, LANG_COOKIE, LANG_COOKIE_MAX_AGE, NON_PAGE_ROUTES, parseGoneHeader, parsePlaceParam, PASS_PATHS, placeParam, pointSuffixes, THANKS, } from "./core/routing.js";
-export { CHANNEL_FIELD, channelOf, CONSENT_FIELD, LEAD_CHANNELS, LEAD_SCHEMA_VERSION, MAX_CONSENT, MAX_FIELD, readCandidate, validateCallbackLead, validateCandidate, } from "./core/lead.js";
-export { isMobilePhone, isPlausiblePhone, normalizePhone } from "./core/phone.js";
+export { CARD_FIELD, CARD_ID, CHANNEL_FIELD, channelOf, CONSENT_FIELD, LEAD_CHANNELS, LEAD_ERROR_PARAM, LEAD_SCHEMA_VERSION, MAX_CONSENT, MAX_FIELD, readCandidate, rejectionOf, suspectOf, SUBMISSION_FIELD, SUBMISSION_ID, validateCallbackLead, validateCandidate, validateLead, } from "./core/lead.js";
+export { isMobilePhone, isPlausiblePhone, normalizePhone, phoneProblem } from "./core/phone.js";
 export { LEAD_CAPTURE_TEXT } from "./core/lead-capture-text.js";
 export { fillText, openingText } from "./core/lead-capture-format.js";
 export { channelHref, resolveChannels, smsHref, } from "./core/channels.js";
@@ -16,7 +16,7 @@ export { createAcceptLead, EXPERIMENT_FIELD, FORM_ID_FIELD, LOCALE_FIELD, LOCATI
 export { areaServedNodes, breadcrumbNode, businessId, businessNode, faqPageNode, offerNodes, organizationId, organizationNode, placeGraph, websiteId, } from "./core/seo/ld.js";
 export { AI_CRAWLERS, ogImageUrl, robotsFor, sitemapFor, } from "./core/seo/sitemap.js";
 export { ALLOWED_PROPS, analyticsSink, countsAsPageView, EVENTS, EXPERIMENT_SLUG, experimentProps, } from "./core/analytics.js";
-export { brandStatusTarget, statusTarget } from "./core/status.js";
+export { brandStatusTarget, statusTarget, thanksChannel, thanksSuffix } from "./core/status.js";
 // A landing needs these beside the machinery; re-exported by name so a brand
 // imports one package and the list here is the whole surface.
 export { createLocaleRegistry } from "@evinvest/i18n";

package/dist/next/quote-route.d.ts

@@ -8,10 +8,14 @@ import type { LeadNotifier } from "../server/notify.js";
 /**
  * `app/quote/route.ts` — the no-JS path, and the one that has to keep working:
  * a plain form POST answered with a 303, so a refresh does not resubmit.
+ * A refused lead goes back to its card with the field to fix
+ * (`/fr?lead_error=phone#devis`); a script asking for JSON (`Accept:
+ * application/json`) is answered `422 { ok: false, field }` instead, and
+ * `200 { ok: true, location }` for a lead taken.
  *
  * ```ts
  * export const dynamic = "force-dynamic";
- * export const POST = quoteRoute(site, { env: serverEnv, notifier, webhook, unavailable });
+ * export const POST = quoteRoute(site, { env: serverEnv, notifier, webhook, unavailable, anchor: "devis" });
  * ```
  */
 export interface UnavailableCopy {
@@ -21,7 +25,8 @@ export interface UnavailableCopy {
     callLabel: string;
 }
 export interface QuoteRouteDeps<L extends string> {
-    env: () => Pick<ServerEnv, "leadsDb" | "posthogKey" | "posthogHost" | "trustedProxy">;
+    /** `production` and `leadRateLimit` may be left out (a test's env): production's limit, no development warnings. */
+    env: () => Pick<ServerEnv, "leadsDb" | "posthogKey" | "posthogHost" | "trustedProxy"> & Partial<Pick<ServerEnv, "production" | "leadRateLimit">>;
     /** Built once (and at boot, by the brand) so a missing sender fails startup, not a lead. */
     notifier: () => LeadNotifier;
     /**
@@ -35,7 +40,15 @@ export interface QuoteRouteDeps<L extends string> {
     unavailable: (locale: L, place: Place<L> | null) => UnavailableCopy;
     /** Opened on first use (`next build` imports the route); defaults to `LEADS_DB_URL`'s. */
     store?: () => LeadStore;
+    /** Defaults to `env().leadRateLimit`, built on the first lead. */
     limiter?: RateLimiter;
+    /**
+     * The card's id a refused lead is sent back to, when the form did not post
+     * its own (`card`, which `LeadCapture` does): `quote` by default, the
+     * `LeadCapture` default. A slug, `[a-z0-9-]`; a callback lands on
+     * `<anchor>-callback`.
+     */
+    anchor?: string;
     /** Work after the response; `after` from `next/server` by default. */
     defer?: (task: () => Promise<void> | void) => void;
     now?: () => number;