@evinvest/kitstart 0.9.0 → 0.10.0

package/README.md

@@ -13,8 +13,8 @@ stays in the brand.
 
 | Import | Runtime | What |
 |---|---|---|
-| `@evinvest/kitstart` | anywhere (edge, client, server) | `defineSite`, places, routing (`createRouting`), the lead schema and funnel (`createAcceptLead`), antispam, JSON-LD / sitemap / robots builders, analytics events, the copy contract |
-| `@evinvest/kitstart/server` | Node, `server-only` | `createServerEnv`, `createPlaceSource`, the lead store (`openLeadStore` by `LEADS_DB_URL`: `sqlite:` today, `postgres://` a stub that refuses at boot), `checkLeadStore`, `leadNotifier`, `leadWebhook` (signed, outboxed), `sendMail`, `clientKey` |
+| `@evinvest/kitstart` | anywhere (edge, client, server) | `defineSite`, places, routing (`createRouting`), the lead schema and funnel (`createAcceptLead`), the price list (`PricingModel`, `priceOf`, `flowOf`), antispam, JSON-LD / sitemap / robots builders, analytics events, the copy contract |
+| `@evinvest/kitstart/server` | Node, `server-only` | `createServerEnv`, `createPlaceSource`, `createPricingSource`, the lead store (`openLeadStore` by `LEADS_DB_URL`: `sqlite:` today, `postgres://` a stub that refuses at boot), `checkLeadStore`, `leadNotifier`, `leadWebhook` (signed, outboxed), `sendMail`, `clientKey` |
 | `@evinvest/kitstart/proxy` | edge | `createProxy(site)`, `PROXY_MATCHER` |
 | `@evinvest/kitstart/next` | Next server (routes, RSC) | `quoteRoute`, `sitemapRoute`, `robotsRoute`, `ogRoute`, `healthRoute`, `createPlaceLoader`, `loadLocale`, `placeMetadata` / `brandMetadata` / `statusMetadata`, `metadataBase` |
 | `@evinvest/kitstart/next/config` | `next.config.ts`, `vitest.config.ts` | `withLanding`, `buildEnv` and the `assets/` readers |
@@ -45,7 +45,7 @@ brand's `flake.nix` is its own config plus one call — `template/flake.nix` is
 the whole of one:
 
 ```nix
-inputs.ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.9.0"; # the version in package-lock.json
+inputs.ev.url = "github:EV-invest/lib?ref=@evinvest/kitstart-v0.10.0"; # the version in package-lock.json
 inputs.ev.inputs.v_flakes.follows = "v_flakes";
 
 landing = ev.lib.mkLanding {
@@ -231,8 +231,10 @@ it is the plain POST to `/quote` it always was.
 | `labels` | `visible` (default) · `hidden`: every field's label `sr-only` — still the field's accessible name — for a design that draws placeholders |
 | `callbackOpen` | whether the callback starts open; by default only when it leads (the place is closed). `#<id>-callback` opens it either way |
 | `done` | the card after a lead is taken — a node, or `(sent: LeadSent) => node` (`{ channel, phone, name }`), shown in place. Without it, a lead taken goes to the thanks page the route names. Either way a script posts the form itself (asking `/quote` for JSON), so a refusal keeps what was typed; an answer that is not the route's, or no network, submits the form for real; without a script nothing changes (303) |
+| `flows`, `pricing`, `photos` | how each need is sold (`site.lead.flows`), the page's price list (`createPricingSource(site).model()`), and the `quote` needs priced from photos — see [Form variants](#form-variants-quote-estimate-fixed) |
+| `booking` | after a priced lead, in place of "we call you to set the slot": a node or `(sent) => node` — a booking provider's widget, when the brand has one (none ships with the kit) |
 | `head`, `trust` | the brand's heading instead of the title; a slot beside the submit |
-| `className` · `classNames` | the root · its parts: `root`, `head`, `title`, `lede`, `form`, `contact`, `field`, `label`, `control` (every input, the need's select in both states, the callback's phone), `hint`, `error` (a refusal: under the field, or above the submit), `chips`, `chip`, `needs`, `need`, `summary`, `submit`, `trust`, `privacy`, `opening`, `others`, `channel`, `primary`, `callback`, `callbackSummary`, `callbackForm`, `callbackLede`, `callbackSubmit`, `consent`, `done` |
+| `className` · `classNames` | the root · its parts: `root`, `head`, `title`, `lede`, `form`, `contact`, `field`, `label`, `control` (every input, the need's select in both states, the callback's phone), `hint`, `error` (a refusal: under the field, or above the submit), `chips`, `chip`, `needs`, `need`, `summary`, `submit`, `trust`, `privacy`, `opening`, `others`, `channel`, `primary`, `callback`, `callbackSummary`, `callbackForm`, `callbackLede`, `callbackSubmit`, `consent`, `done`, and for the flows `estimate`, `estimateInput`, `estimateLegend`, `estimateOption`, `price`, `priceTotal`, `breakdown`, `priceNote`, `photos`, `priced`, `pricedPrice`, `pricedNote` |
 
 - **Taps.** A need the page knows is not asked again, and a place serving one
   commune fills it: focus the phone, type, send — two taps. `qualify-first`
@@ -312,6 +314,80 @@ it is the plain POST to `/quote` it always was.
   within the 20 % tolerance); the refusals and the shared phone rule are
   2.0 KB of it, sending (the id, the busy state, the retry) 0.6 KB.
 
+### Form variants: quote, estimate, fixed
+
+A need is sold one of three ways, chosen per need — one brand can mix them:
+
+- `quote` — the price is uncertain; the lead asks for one. The form as it was.
+- `estimate` — the price follows from a few enum answers (zone, bedrooms,
+  surface band, frequency), shown live as the visitor taps; then the slot.
+- `fixed` — one price for a well-defined job, shown as is; then the slot.
+
+```ts
+// shared/config/lead.ts — the form and the route read the same map
+export const LEAD: LeadSchema<Subject> = { …, flows: { standard: "estimate", deep: "quote" } };
+// shared/config/site.ts — the baked price list
+export const site = defineSite({ …, lead: LEAD, pricing: PRICING });
+// shared/config/env.ts — the live one, from the place source's base URL
+export const pricing = createPricingSource(site, { baseUrl: () => serverEnv().locationsApiUrl });
+// app/quote/route.ts
+export const POST = quoteRoute(site, { env: serverEnv, notifier, pricing, unavailable });
+// the page: <LeadCapture … flows={LEAD.flows} pricing={await pricing.model()} photos={["deep"]} />
+```
+
+- **The price list** (`PricingModel`) is JSON: `format` 1, `currency` `EUR`
+  (TTC), `validFrom`, `roundToCents`, `minimumCents`, `inputs` (`add` in
+  cents, `multiply` and `discount` in basis points, labels per locale) and
+  `needs` (`{ kind: "estimate", baseCents, inputs }` or `{ kind: "fixed",
+  cents }`). `priceOf(model, need, answers) → { cents, breakdown } | null`
+  is integer cents throughout, rounding half up at every product, then to
+  `roundToCents`, then the minimum. The rules and the shared fixtures the
+  panel holds its own port to are in
+  [`test/fixtures/pricing/`](./test/fixtures/pricing/README.md).
+  `defineSite` refuses a baked model that does not validate or lacks a label
+  in one of the site's locales.
+- **The live list** (`createPricingSource`): `GET <base>/pricing`, TTL
+  600 s, 3 s timeout; an unreachable source, a non-200, a body that is not
+  JSON or a model that does not validate (for every locale of the site) all
+  serve the baked model, logged — whole or not at all, never half a model.
+  `{}` is "nothing set": the baked model, quietly.
+- **A need runs its flow only when the list prices it so** (`flowOf`): an
+  `estimate` the model cannot price — no model, a remote model without the
+  need — is a `quote`. So a flow the brand has not switched on is never run
+  by a posted field.
+- **The form.** An estimate's questions are a tile per answer (touch-sized
+  radios posted as `estimate_<input>`), required once the script runs; the
+  price box (`aria-live`) shows the total and the lines that made it, or
+  what is missing — never "from". A fixed need shows its price. Either
+  submits as `bookSubmit` ("Réserver"). Without a script the answers still
+  post and the server prices them; the live price needs the script.
+- **The server prices the lead itself.** `/quote` reads the posted answers
+  for the need's inputs only and runs the same `priceOf`; a posted amount is
+  never read. The lead is stored with `flow`, `price.cents`,
+  `price.validFrom` and an estimate's `price.inputs` (schema 7: `flow`,
+  `quoted_cents`, `pricing_valid_from`, `estimate_inputs`). An estimate
+  whose answers do not price (a stale page, a forged answer) is kept as a
+  `quote` — never refused. A callback has no flow.
+- **After a priced lead** the card stays: the script's answer carries the
+  server's `cents` and the lead's reference (`lead`, `leadRef`:
+  `lead-<row>-<8 hex>`), and the card confirms the price (`sentPrice`) and
+  promises a call to set the slot (`slotCallback`) — or shows the brand's
+  `booking`. The lead is stored first, so an abandoned booking is still a
+  lead to call. A `quote` need, and any callback, behave as before.
+- **Photos.** A `quote` need listed in `photos` offers "Envoyez des photos"
+  — a WhatsApp link with the need in the message — when the place has
+  WhatsApp; the callback stays where it is.
+- **Words.** `LEAD_CAPTURE_TEXT` carries them (`priceTitle`, `pricePending`,
+  `priceNote`, `priceBase`, `priceRounding`, `priceMinimum`, `bookSubmit`,
+  `sentPrice`, `slotCallback`, `photos*`); optional in `LeadCaptureText`, so
+  a brand's own text from before them falls back to the kit's in the page's
+  language (`flowTextOf`).
+- **Events.** `lead_estimate_shown {need, cents_bucket}` once per need and
+  price band (`centsBucket`: `"7500-10000"`), never the price.
+- **Weight.** About 3.9 KB gz of first-load JS on the template's place page
+  (166,459 → 170,375 B against its 158,000 B target: +7.8 %, within the 20 %
+  tolerance).
+
 Tailwind v4 does not scan `node_modules`; the brand's `globals.css` names the
 package:
 
@@ -399,7 +475,9 @@ chooses per visitor answer `Cache-Control: private, no-store`.
   `LEAD_SCHEMA_VERSION` on open. SQLite keeps the Rust server's columns
   (`job`, `zip`, `mobile`) and recognises every earlier table in place.
   Schema 6 adds `submission_id` under a unique index (where present): one
-  row per script submission, read back by `findSubmission`.
+  row per script submission, read back by `findSubmission`. Schema 7 adds
+  the flow and the price a lead was taken at (`flow`, `quoted_cents`,
+  `pricing_valid_from`, `estimate_inputs`), all nullable.
 - **Mail is checked at boot.** With `SMTP_URL` set, `leadNotifier` throws when
   it is built if the URL is malformed (the error never repeats it), there is
   no sender (`LEAD_NOTIFY_FROM`, or `leads@<domain>`) or no recipient
@@ -465,6 +543,15 @@ export const POST = quoteRoute(site, { env: serverEnv, notifier, webhook, unavai
   suspect, for the body's `suspect` property. Off by default, and to stay off
   until the panel's `lead.created` accepts the property: it refuses an
   unknown one, and the outbox would park the lead. Off, nothing changes.
+- **The sale: `panelFlow`, off.** With `leadWebhook(…, { panelFlow: true })`
+  `ctx.flow` says how the need was sold (`panelFlowOf(lead)`), and
+  `panelFlowProperties(ctx.flow)` writes it as `lead.created`'s properties:
+  `flow`; `quoted_cents` and `pricing_valid_from` together, for `estimate`
+  and `fixed` only; `estimate_inputs` (input → answer, slugs, at most 12)
+  for an `estimate` that asked anything. Off by default, and to stay off
+  until the panel accepts them — it refuses unknown properties, and the
+  outbox would park the lead. `ctx.leadRef` is the lead's reference the page
+  was answered with, whatever the switch.
 - **The rate limit** is `LEAD_RATE_LIMIT` (`<count>/<seconds>`): 5 per 10
   minutes per address in production, 100 outside it, where every request of
   a local stack shares one address. Outside production a lead held back as

package/dist/core/accept.d.ts

@@ -1,5 +1,6 @@
 import { type RateLimiter } from "./antispam.js";
 import { type Lead, type LeadChannel } from "./lead.js";
+import type { PricingModel } from "./pricing/model.js";
 import type { Site } from "./site.js";
 /** Hidden fields the form carries besides what the visitor types. */
 export declare const LOCATION_FIELD = "location";
@@ -14,10 +15,14 @@ export interface SubmitTags {
     variant?: string;
 }
 export type Outcome<L extends string> = 
-/** `duplicate`: a resend of a submission already stored — answered as the first was, nothing sent again. */
+/**
+ * `ref`: the lead's public reference (`leadRef`). `duplicate`: a resend of
+ * a submission already stored — answered as the first was, nothing sent again.
+ */
 {
     kind: "stored";
     id: number;
+    ref: string;
     lead: Lead;
     locale: L;
     formId: string;
@@ -56,7 +61,14 @@ export interface AcceptDeps {
     enqueue?: (lead: Lead, id: number, meta: {
         locale: string;
         formId: string;
+        leadRef: string;
     }) => void;
+    /**
+     * The price list to price an `estimate` or `fixed` lead with
+     * (`createPricingSource(…).model`); absent → `site.pricing`. A failure is
+     * no model: the lead is kept as a `quote`, never refused.
+     */
+    pricing?: () => Promise<PricingModel | null>;
     /**
      * Queue a rate-limited lead too, for the panel to show as suspect
      * (`LeadWebhookOptions.panelSuspect`). Off: it waits in the table, as before.
@@ -68,6 +80,16 @@ export interface AcceptDeps {
     now: number;
     log: Pick<Console, "warn" | "error">;
 }
+/**
+ * The lead's public reference, `lead-<row>-<8 hex>`: the one the script's
+ * answer gives the page (`LeadSent.lead`) and the webhook offers the panel
+ * (`LeadWebhookContext.leadRef`), so whatever the page does next — a booking,
+ * once there is a provider — can name its lead. The
+ * row id for a person matching it to the mail; the tag because row ids start
+ * over if the leads file is ever recreated. Seeded by the submission id when
+ * there is one, so a resend is answered with the same reference.
+ */
+export declare function leadRef(id: number, seed: string): string;
 /**
  * The funnel's commit point, independent of HTTP. Order is the invariant:
  * validate → screen → **insert** → (deferred) notify and capture.

package/dist/core/accept.js

@@ -1,6 +1,8 @@
 import { experimentProps } from "./analytics.js";
 import { HONEYPOT_FIELD, LEGACY_HONEYPOT_FIELDS, RENDERED_AT_FIELD, screen } from "./antispam.js";
 import { channelOf, MAX_FIELD, readCandidate, validateCandidate } from "./lead.js";
+import { flowOf, readEstimateInputs } from "./pricing/flow.js";
+import { priceOf } from "./pricing/price.js";
 /** Hidden fields the form carries besides what the visitor types. */
 export const LOCATION_FIELD = "location";
 export const LOCALE_FIELD = "locale";
@@ -13,6 +15,55 @@ function field(form, name) {
     const value = form.get(name);
     return typeof value === "string" ? value.trim().slice(0, MAX_FIELD) : null;
 }
+/** FNV-1a, 32 bits, as 8 hex: a tag, not a secret — the core has no `node:crypto`. */
+function tag(seed) {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < seed.length; i++)
+        h = Math.imul(h ^ seed.charCodeAt(i), 0x01000193);
+    return (h >>> 0).toString(16).padStart(8, "0");
+}
+/**
+ * The lead's public reference, `lead-<row>-<8 hex>`: the one the script's
+ * answer gives the page (`LeadSent.lead`) and the webhook offers the panel
+ * (`LeadWebhookContext.leadRef`), so whatever the page does next — a booking,
+ * once there is a provider — can name its lead. The
+ * row id for a person matching it to the mail; the tag because row ids start
+ * over if the leads file is ever recreated. Seeded by the submission id when
+ * there is one, so a resend is answered with the same reference.
+ */
+export function leadRef(id, seed) {
+    return `lead-${id}-${tag(seed)}`;
+}
+/**
+ * How the lead's need is sold and at what price — the server's own number,
+ * from the posted answers through the same `priceOf` the form showed; a
+ * posted amount is never read. A callback asks for a call, not a price: no
+ * flow. An estimate whose answers do not price (a stale form, a tampered
+ * field) is kept as a `quote`: the customer is still a customer.
+ */
+async function priced(site, form, lead, deps) {
+    const flows = site.lead.flows;
+    if (!flows || channelOf(lead) === "callback")
+        return {};
+    let model;
+    try {
+        model = deps.pricing ? await deps.pricing() : (site.pricing ?? null);
+    }
+    catch (error) {
+        deps.log.error("quote: the price list could not be read; the lead is kept as a quote", error);
+        model = null;
+    }
+    const flow = flowOf(flows, model, lead.subject);
+    if (flow === "quote" || !model)
+        return { flow: "quote" };
+    const inputs = flow === "estimate" ? readEstimateInputs(model, lead.subject, name => field(form, name)) : {};
+    const price = priceOf(model, lead.subject, inputs);
+    if (!price) {
+        deps.log.warn(`quote: an ${flow} for ${lead.subject} did not price from what was posted; kept as a quote`);
+        return { flow: "quote" };
+    }
+    return { flow, price: { cents: price.cents, validFrom: model.validFrom, ...(flow === "estimate" ? { inputs } : {}) } };
+}
 /**
  * The funnel's commit point, independent of HTTP. Order is the invariant:
  * validate → screen → **insert** → (deferred) notify and capture.
@@ -60,7 +111,8 @@ async function accept(site, form, clientKey, deps) {
     // second row, no second mail, the limit not spent again.
     const prior = await stored(candidate.submissionId, deps);
     if (prior)
-        return { kind: "stored", id: prior.id, lead: prior.lead, locale, formId, duplicate: true };
+        return { kind: "stored", id: prior.id, ref: leadRef(prior.id, candidate.submissionId ?? ""), lead: prior.lead, locale, formId, duplicate: true };
+    const sale = await priced(site, form, candidate, deps);
     // After validation, so a typo corrected and resent does not spend the limit.
     const verdict = screen({
         honeypot: [HONEYPOT_FIELD, ...LEGACY_HONEYPOT_FIELDS].map(name => field(form, name)).find(v => v) ?? null,
@@ -72,6 +124,7 @@ async function accept(site, form, clientKey, deps) {
     const { consentText, ...rest } = candidate;
     const lead = {
         ...rest,
+        ...sale,
         spamVerdict: verdict === "ok" ? null : verdict,
         // Stamped by the server: the moment it accepted the consent with the lead.
         ...(consentText ? { consent: { text: consentText, at: new Date(deps.now).toISOString() } } : {}),
@@ -84,10 +137,11 @@ async function accept(site, form, clientKey, deps) {
         // Two posts of one submission raced past the lookup; the unique index let one in.
         const winner = await stored(candidate.submissionId, deps);
         if (winner)
-            return { kind: "stored", id: winner.id, lead: winner.lead, locale, formId, duplicate: true };
+            return { kind: "stored", id: winner.id, ref: leadRef(winner.id, candidate.submissionId ?? ""), lead: winner.lead, locale, formId, duplicate: true };
         deps.log.error(`quote: the lead store rejected a submission for ${slug ?? "no point"}`, error);
         return { kind: "failed", locale, slug };
     }
+    const ref = leadRef(id, candidate.submissionId ?? `${id}:${deps.now}`);
     // The render stamp comes from the client, so it only marks: a `too-fast`
     // lead (or one from a page cached before the stamp existed) is still sent
     // on, flagged. The honeypot and the rate limit are the server's own
@@ -96,7 +150,7 @@ async function accept(site, form, clientKey, deps) {
         if (!deps.enqueue)
             return;
         try {
-            deps.enqueue(lead, id, { locale, formId });
+            deps.enqueue(lead, id, { locale, formId, leadRef: ref });
         }
         catch (error) {
             deps.log.error(`quote: lead ${id} is stored but could not be queued for its webhook`, error);
@@ -107,7 +161,7 @@ async function accept(site, form, clientKey, deps) {
         deps.log.warn(`quote: lead ${id} stored as suspected spam (${lead.spamVerdict}); not notified${marked ? ", queued marked suspect" : ""}`);
         if (marked)
             queue();
-        return { kind: "stored", id, lead, locale, formId };
+        return { kind: "stored", id, ref, lead, locale, formId };
     }
     queue();
     deps.defer(async () => {
@@ -120,5 +174,5 @@ async function accept(site, form, clientKey, deps) {
     });
     const tags = experimentProps(field(form, EXPERIMENT_FIELD), field(form, VARIANT_FIELD));
     deps.defer(() => deps.capture(lead, formId, tags));
-    return { kind: "stored", id, lead, locale, formId };
+    return { kind: "stored", id, ref, lead, locale, formId };
 }

package/dist/core/analytics.d.ts

@@ -16,6 +16,7 @@ export declare const EVENTS: {
     readonly formStep: "lead_form_step";
     readonly submitError: "lead_form_submit_error";
     readonly formReject: "lead_form_reject";
+    readonly estimateShown: "lead_estimate_shown";
 };
 export type IntentChannel = "form_open" | "whatsapp" | "phone" | "sms" | "callback" | "booking";
 /**
@@ -32,7 +33,7 @@ export type LeadStep = "need" | "contact";
  * throws, prod drops) rather than by review. `experiment` and `variant` are
  * the site's assignment, passed in; `field` is a field's role, never its value.
  */
-export declare const ALLOWED_PROPS: readonly ["brand_id", "location_id", "source", "device", "channel", "form_id", "experiment", "variant", "field", "step", "layout", "reason", "blocking"];
+export declare const ALLOWED_PROPS: readonly ["brand_id", "location_id", "source", "device", "channel", "form_id", "experiment", "variant", "field", "step", "layout", "reason", "blocking", "need", "cents_bucket"];
 /** What an experiment's assignment looks like on the wire: short slugs, nothing a person typed. */
 export declare const EXPERIMENT_SLUG: RegExp;
 /** An experiment's assignment as event properties, or nothing when it is not a pair of slugs. */

package/dist/core/analytics.js

@@ -21,6 +21,9 @@ export const EVENTS = {
     submitError: "lead_form_submit_error",
     // The server's refusal (`reason`, the `field`): the visitor was sent back.
     formReject: "lead_form_reject",
+    // An estimate's price, shown for a full set of answers: the need and the
+    // price's band (`centsBucket`), never the price — once per band and need.
+    estimateShown: "lead_estimate_shown",
 };
 /**
  * Every property name an event may carry. A customer's phone or address comes
@@ -44,6 +47,10 @@ export const ALLOWED_PROPS = [
     "reason",
     // A field error that blocked the submit (`true`), or a hint (`false`).
     "blocking",
+    // The brand's subject slug.
+    "need",
+    // A price's band, `"5000-7500"` (`centsBucket`) — never the price.
+    "cents_bucket",
 ];
 /** What an experiment's assignment looks like on the wire: short slugs, nothing a person typed. */
 export const EXPERIMENT_SLUG = /^[a-z0-9_-]{1,32}$/;

package/dist/core/lead-capture-format.d.ts

@@ -4,3 +4,9 @@ import type { Opening } from "./place/hours.js";
 export declare function fillText(template: string, values: Readonly<Record<string, string>>): string;
 /** The promise of the next opening, from real hours — or `null`, never an invented one. */
 export declare function openingText(opening: Opening | null, text: Pick<LeadCaptureText, "openingToday" | "openingTomorrow" | "openingLater">, locale: string): string | null;
+/**
+ * Cents as the page's language writes euros: `84 €`, `84,50 €`, `€84.50`.
+ * Whole euros drop the cents a rounded price never has; a signed line of a
+ * breakdown is `+8,50 €` / `−9,35 €`.
+ */
+export declare function formatCents(cents: number, locale: string, signed?: boolean): string;

package/dist/core/lead-capture-format.js

@@ -30,3 +30,16 @@ export function openingText(opening, text, locale) {
         return fillText(text.openingTomorrow, { time });
     return fillText(text.openingLater, { time, day: weekdayText(opening.day, locale) });
 }
+/**
+ * Cents as the page's language writes euros: `84 €`, `84,50 €`, `€84.50`.
+ * Whole euros drop the cents a rounded price never has; a signed line of a
+ * breakdown is `+8,50 €` / `−9,35 €`.
+ */
+export function formatCents(cents, locale, signed = false) {
+    const digits = cents % 100 === 0 ? 0 : 2;
+    const format = new Intl.NumberFormat(locale, { style: "currency", currency: "EUR", minimumFractionDigits: digits, maximumFractionDigits: digits });
+    const text = format.format(Math.abs(cents) / 100);
+    if (!signed)
+        return cents < 0 ? `−${text}` : text;
+    return `${cents < 0 ? "−" : "+"}${text}`;
+}

package/dist/core/lead-capture-text.d.ts

@@ -7,8 +7,12 @@
  * The kit ships French and English (`LEAD_CAPTURE_TEXT`) so every brand asks
  * in the same words and an experiment's arms differ only in what it tests; a
  * brand overrides a key by spreading: `{ ...LEAD_CAPTURE_TEXT.fr, submit: "…" }`.
+ *
+ * The flows' words (`LeadCaptureFlowText`) are optional here so a brand's own
+ * text object written before them still type-checks; a key left out falls
+ * back to the kit's, in the page's language (`flowTextOf`).
  */
-export interface LeadCaptureText {
+export interface LeadCaptureText extends Partial<LeadCaptureFlowText> {
     title: string;
     lede: string;
     needLabel: string;
@@ -78,4 +82,31 @@ export interface LeadCaptureText {
     /** The honeypot's label — read only by a bot filling every field. */
     honeypotLabel: string;
 }
+/** What the `estimate` and `fixed` flows, the photos ask and the booking print. */
+export interface LeadCaptureFlowText {
+    /** Heads the live price. */
+    priceTitle: string;
+    /** In place of the price until every input is answered. */
+    pricePending: string;
+    /** Under the price: what it includes and when it is paid. */
+    priceNote: string;
+    /** The breakdown's first line: the need's base. */
+    priceBase: string;
+    priceRounding: string;
+    priceMinimum: string;
+    /** The submit of a priced need. */
+    bookSubmit: string;
+    /** The in-card success of a priced lead; `{price}` the server's. */
+    sentPrice: string;
+    /** After a priced lead: the slot is set by a call (no booking provider yet). */
+    slotCallback: string;
+    /** A `quote` need that is priced from photos: the ask, and its WhatsApp link. */
+    photosTitle: string;
+    photosLede: string;
+    photosCta: string;
+    /** The WhatsApp message, `{need}` the need's label. */
+    photosMessage: string;
+}
 export declare const LEAD_CAPTURE_TEXT: Readonly<Record<"fr" | "en", LeadCaptureText>>;
+/** The flows' words for a page: the brand's, else the kit's in its language (English for `en*`, French otherwise). */
+export declare function flowTextOf(text: LeadCaptureText, locale: string): LeadCaptureFlowText;

package/dist/core/lead-capture-text.js

@@ -1,4 +1,35 @@
+const FR_FLOW = {
+    priceTitle: "Votre prix",
+    pricePending: "Répondez aux questions pour voir le prix.",
+    priceNote: "Prix TTC pour ces réponses, payé après la prestation.",
+    priceBase: "Prix de base",
+    priceRounding: "Arrondi",
+    priceMinimum: "Minimum de prestation",
+    bookSubmit: "Réserver",
+    sentPrice: "Demande enregistrée au prix de {price}.",
+    slotCallback: "Nous vous rappelons pour fixer le créneau.",
+    photosTitle: "Envoyez des photos",
+    photosLede: "Pour ce besoin, quelques photos nous permettent de vous donner un prix juste.",
+    photosCta: "Envoyer des photos sur WhatsApp",
+    photosMessage: "Bonjour, voici des photos pour : {need}.",
+};
+const EN_FLOW = {
+    priceTitle: "Your price",
+    pricePending: "Answer the questions to see the price.",
+    priceNote: "Price incl. VAT for these answers, paid after the job.",
+    priceBase: "Base price",
+    priceRounding: "Rounding",
+    priceMinimum: "Minimum charge",
+    bookSubmit: "Book",
+    sentPrice: "Request saved at {price}.",
+    slotCallback: "We will call you to set the slot.",
+    photosTitle: "Send photos",
+    photosLede: "For this job, a few photos let us give you a fair price.",
+    photosCta: "Send photos on WhatsApp",
+    photosMessage: "Hello, here are photos for: {need}.",
+};
 const FR = {
+    ...FR_FLOW,
     title: "Recevoir un prix",
     lede: "Réponse rapide, sans engagement.",
     needLabel: "Votre besoin",
@@ -37,6 +68,7 @@ const FR = {
     honeypotLabel: "Site web",
 };
 const EN = {
+    ...EN_FLOW,
     title: "Get a price",
     lede: "A quick answer, no commitment.",
     needLabel: "What you need",
@@ -75,3 +107,14 @@ const EN = {
     honeypotLabel: "Website",
 };
 export const LEAD_CAPTURE_TEXT = { fr: FR, en: EN };
+/** The flows' words for a page: the brand's, else the kit's in its language (English for `en*`, French otherwise). */
+export function flowTextOf(text, locale) {
+    const kit = locale.startsWith("en") ? EN_FLOW : FR_FLOW;
+    const out = { ...kit };
+    for (const key of Object.keys(kit)) {
+        const own = text[key];
+        if (own !== undefined)
+            out[key] = own;
+    }
+    return out;
+}

package/dist/core/lead.d.ts

@@ -9,6 +9,8 @@
  * `LeadSchema.wire` names the posted fields (a page cached before a rename
  * still delivers) — both deliberate departures from the first design.
  */
+import type { LeadFlow, LeadFlows } from "./pricing/flow.js";
+import type { PricingInputs } from "./pricing/model.js";
 /** Why a submission was kept but not acted on. `null` is a clean lead. */
 export type SpamVerdict = "honeypot" | "too-fast" | "rate-limited";
 /**
@@ -73,6 +75,13 @@ export interface LeadSchema<S extends string> {
      * number as typed.
      */
     mobileFormat?: "typed" | "e164";
+    /**
+     * How each need is sold (`quote` | `estimate` | `fixed`); a need left out
+     * is a `quote`. The form and the server read the same map, and a need runs
+     * its flow only when the price list prices it that way (`flowOf`) — so a
+     * flow the brand has not switched on is never run by a posted field.
+     */
+    flows?: LeadFlows;
 }
 /**
  * How the lead was asked for: the quote form, or "call me back" — the form cut
@@ -139,6 +148,25 @@ export interface Lead {
      * Absent on a plain post, which has no script to mint one.
      */
     submissionId?: string;
+    /**
+     * How the need was sold, when the brand sells by flow (`LeadSchema.flows`)
+     * and the lead came through the form; absent otherwise — a callback, or a
+     * lead from before the field existed.
+     */
+    flow?: LeadFlow;
+    /** Only on an `estimate` or `fixed` lead: the price the server computed. */
+    price?: LeadPrice;
+}
+/**
+ * The price a lead was taken at — the server's own number, from the posted
+ * answers, never a posted amount — and the model it came from.
+ */
+export interface LeadPrice {
+    cents: number;
+    /** The model's `validFrom`, `YYYY-MM-DD`. */
+    validFrom: string;
+    /** An estimate's answers, input id → option id; absent for a fixed price. */
+    inputs?: PricingInputs;
 }
 /** What the panel may be told of a suspected lead. */
 export type LeadSuspect = "rate_limited" | "too_fast";
@@ -154,7 +182,7 @@ export declare function channelOf(lead: Pick<Lead, "channel">): LeadChannel;
  * What the form posted, before the funnel judges it: the consent is the
  * posted sentence, and the funnel stamps when it accepted it.
  */
-export type LeadCandidate = Omit<Lead, "spamVerdict" | "consent"> & {
+export type LeadCandidate = Omit<Lead, "spamVerdict" | "consent" | "flow" | "price"> & {
     consentText?: string;
 };
 /**
@@ -189,9 +217,10 @@ export interface LeadStore {
  * The lead schema's version, shared by every adapter: 1 the Rust server's
  * table (`job`, `zip`, `mobile`, `at`), 2 + the place, 3 + the spam verdict,
  * 4 + the brand's extras, 5 + the channel and the callback's consent, 6 + the
- * script's submission id, unique. Append only.
+ * script's submission id, unique, 7 + the flow and the price it was taken at.
+ * Append only.
  */
-export declare const LEAD_SCHEMA_VERSION = 6;
+export declare const LEAD_SCHEMA_VERSION = 7;
 /** A field is capped, not rejected: a long answer is still a customer. */
 export declare const MAX_FIELD = 200;
 /**

package/dist/core/lead.js

@@ -70,9 +70,10 @@ export function channelOf(lead) {
  * The lead schema's version, shared by every adapter: 1 the Rust server's
  * table (`job`, `zip`, `mobile`, `at`), 2 + the place, 3 + the spam verdict,
  * 4 + the brand's extras, 5 + the channel and the callback's consent, 6 + the
- * script's submission id, unique. Append only.
+ * script's submission id, unique, 7 + the flow and the price it was taken at.
+ * Append only.
  */
-export const LEAD_SCHEMA_VERSION = 6;
+export const LEAD_SCHEMA_VERSION = 7;
 /** A field is capped, not rejected: a long answer is still a customer. */
 export const MAX_FIELD = 200;
 // C0 and C1 controls, DEL, and the Unicode line and paragraph separators.

package/dist/core/pricing/flow.d.ts

@@ -0,0 +1,27 @@
+import type { PricingInputs, PricingModel } from "./model.js";
+/**
+ * How a need is sold. `quote`: the price is uncertain, the lead asks for one.
+ * `estimate`: the price follows from a few enum answers, shown live, then a
+ * slot is booked. `fixed`: one price for a well-defined job, then a slot.
+ * Chosen per need, not per site: one brand can mix them.
+ */
+export type LeadFlow = "quote" | "estimate" | "fixed";
+export declare const LEAD_FLOWS: readonly LeadFlow[];
+/** A brand's flows by subject slug; a need left out is a `quote`. */
+export type LeadFlows = Readonly<Record<string, LeadFlow>>;
+/**
+ * The flow a need actually runs: the brand's, when the model prices the need
+ * that way — an `estimate` the model cannot price (a remote model without
+ * it, no model at all) is a `quote`, never a form with no price. The form and
+ * the server both ask this, so they agree on what was shown.
+ */
+export declare function flowOf(flows: LeadFlows | undefined, model: PricingModel | null, need: string | undefined): LeadFlow;
+/** The form field an estimate's input is posted under: `estimate_<input id>`. */
+export declare const ESTIMATE_FIELD_PREFIX = "estimate_";
+export declare const estimateField: (input: string) => string;
+/**
+ * The answers a form posted for the need's inputs — only those, and only
+ * slugs. Read by the server, which prices them itself: a posted amount, if
+ * any, is never read.
+ */
+export declare function readEstimateInputs(model: PricingModel, need: string, get: (field: string) => string | null): PricingInputs;

package/dist/core/pricing/flow.js

@@ -0,0 +1,37 @@
+import { PRICING_LIMITS } from "./model.js";
+export const LEAD_FLOWS = ["quote", "estimate", "fixed"];
+/**
+ * The flow a need actually runs: the brand's, when the model prices the need
+ * that way — an `estimate` the model cannot price (a remote model without
+ * it, no model at all) is a `quote`, never a form with no price. The form and
+ * the server both ask this, so they agree on what was shown.
+ */
+export function flowOf(flows, model, need) {
+    if (!flows || !model || need === undefined || !Object.hasOwn(flows, need))
+        return "quote";
+    const wanted = flows[need];
+    if (wanted === undefined || wanted === "quote")
+        return "quote";
+    const pricing = Object.hasOwn(model.needs, need) ? model.needs[need] : undefined;
+    return pricing?.kind === wanted ? wanted : "quote";
+}
+/** The form field an estimate's input is posted under: `estimate_<input id>`. */
+export const ESTIMATE_FIELD_PREFIX = "estimate_";
+export const estimateField = (input) => `${ESTIMATE_FIELD_PREFIX}${input}`;
+/**
+ * The answers a form posted for the need's inputs — only those, and only
+ * slugs. Read by the server, which prices them itself: a posted amount, if
+ * any, is never read.
+ */
+export function readEstimateInputs(model, need, get) {
+    const pricing = Object.hasOwn(model.needs, need) ? model.needs[need] : undefined;
+    if (pricing?.kind !== "estimate")
+        return {};
+    const out = {};
+    for (const id of pricing.inputs) {
+        const value = get(estimateField(id))?.trim();
+        if (value && PRICING_LIMITS.slug.test(value))
+            out[id] = value;
+    }
+    return out;
+}

package/dist/core/pricing/index.d.ts

@@ -0,0 +1,4 @@
+export { PRICING_CURRENCY, PRICING_FORMAT, PRICING_LIMITS, type AddOption, type DiscountOption, type MultiplyOption, type NeedPricing, type Price, type PriceLine, type PricingInput, type PricingInputKind, type PricingInputs, type PricingLabels, type PricingModel, } from "./model.js";
+export { CENTS_BUCKETS, centsBucket, mulBp, priceOf, roundTo } from "./price.js";
+export { labelOf, parsePricingModel, PricingModelError, pricingProblems, pricingProblemsFor } from "./validate.js";
+export { ESTIMATE_FIELD_PREFIX, estimateField, flowOf, LEAD_FLOWS, readEstimateInputs, type LeadFlow, type LeadFlows } from "./flow.js";

package/dist/core/pricing/index.js

@@ -0,0 +1,4 @@
+export { PRICING_CURRENCY, PRICING_FORMAT, PRICING_LIMITS, } from "./model.js";
+export { CENTS_BUCKETS, centsBucket, mulBp, priceOf, roundTo } from "./price.js";
+export { labelOf, parsePricingModel, PricingModelError, pricingProblems, pricingProblemsFor } from "./validate.js";
+export { ESTIMATE_FIELD_PREFIX, estimateField, flowOf, LEAD_FLOWS, readEstimateInputs } from "./flow.js";