@fewchurs/next 0.0.0-stage → 1.0.1

package/LICENSE

@@ -0,0 +1,41 @@
+Fewchurs SDK License
+
+Copyright (c) 2026 Fewchurs. All rights reserved.
+
+This software and its source code (the "SDK") are proprietary to Fewchurs.
+The source code is published for transparency only. It is not open source.
+
+1. Permitted use. You may install the SDK, unmodified, as an npm
+   dependency of your own applications, and deploy it as part of those
+   applications, including in the bundles they serve to browsers, solely to
+   connect them to the Fewchurs service under a valid Fewchurs account. You
+   may customise its look and text through the props, CSS variables, slots,
+   hooks and stylesheet overrides the SDK documents.
+
+2. Restrictions. Except as allowed in section 1, you may not:
+   a. copy, modify, translate or create derivative works of the SDK;
+   b. distribute, sublicense, sell, rent or lease the SDK on its own or as
+      part of a library, SDK, framework or developer tool;
+   c. use the SDK, or any part of it, to build or run a product or service
+      that competes with Fewchurs, or to connect to any service other than
+      Fewchurs;
+   d. remove or alter any copyright or license notice in the SDK.
+
+3. Ownership. Fewchurs keeps all rights, title and interest in the SDK. No
+   rights are granted except those stated in this license.
+
+4. Termination. This license ends automatically if you breach it, or when
+   your Fewchurs account ends. On termination you must stop deploying new
+   versions of your applications that include the SDK.
+
+5. No warranty. THE SDK IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+   EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+   MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+
+6. Limitation of liability. IN NO EVENT SHALL FEWCHURS BE LIABLE FOR ANY
+   CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT
+   OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SDK OR THE USE
+   OF OR OTHER DEALINGS IN THE SDK.
+
+Your use of the Fewchurs service itself is governed separately by your
+agreement with Fewchurs (https://www.fewchurs.com).

package/README.md

@@ -1,3 +1,34 @@
-# Temporary Holding Version
+# @fewchurs/next
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+A server-rendered Fewchurs feature-request board for the Next.js App Router. The API key stays
+on the server. See the [repository README](../../README.md) for the full guide.
+
+```bash
+pnpm add @fewchurs/next
+```
+
+```dotenv
+FEWCHURS_API_KEY=fr_live_…
+```
+
+```ts
+// app/api/fewchurs/[...route]/route.ts
+export { GET, POST, DELETE } from "@fewchurs/next/handler";
+```
+
+```tsx
+// app/feedback/page.tsx
+import { FewchursBoard } from "@fewchurs/next";
+import "@fewchurs/next/styles.css";
+
+export default function Page() {
+  return <FewchursBoard />;
+}
+```
+
+- `<FewchursBoard initialFeatureId="…">` — opens the board on one request, rendered on the
+  server, for a link straight to it.
+- `createHandler({ apiKey, baseUrl, apiPath, deviceId })` — the proxy, mounted wherever you like.
+- `@fewchurs/next/actions` — `submitFeatureAction`, `voteAction`, `commentAction`, `followAction`
+  for boards built from plain forms.
+- `@fewchurs/next/identity` — the `httpOnly` device-id cookie helpers.

package/dist/actions.d.mts

@@ -0,0 +1,14 @@
+interface ActionResult {
+    ok: boolean;
+    message?: string;
+}
+/**
+ * Server actions for boards built with plain forms — the client board talks to the route
+ * handler instead. Pass `path` when the page should re-render with the new data.
+ */
+declare function submitFeatureAction(formData: FormData): Promise<ActionResult>;
+declare function voteAction(formData: FormData): Promise<ActionResult>;
+declare function commentAction(formData: FormData): Promise<ActionResult>;
+declare function followAction(formData: FormData): Promise<ActionResult>;
+
+export { type ActionResult, commentAction, followAction, submitFeatureAction, voteAction };

package/dist/actions.d.ts

@@ -0,0 +1,14 @@
+interface ActionResult {
+    ok: boolean;
+    message?: string;
+}
+/**
+ * Server actions for boards built with plain forms — the client board talks to the route
+ * handler instead. Pass `path` when the page should re-render with the new data.
+ */
+declare function submitFeatureAction(formData: FormData): Promise<ActionResult>;
+declare function voteAction(formData: FormData): Promise<ActionResult>;
+declare function commentAction(formData: FormData): Promise<ActionResult>;
+declare function followAction(formData: FormData): Promise<ActionResult>;
+
+export { type ActionResult, commentAction, followAction, submitFeatureAction, voteAction };

package/dist/actions.js

@@ -0,0 +1,133 @@
+"use server";
+"use strict";
+"use server";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/actions.ts
+var actions_exports = {};
+__export(actions_exports, {
+  commentAction: () => commentAction,
+  followAction: () => followAction,
+  submitFeatureAction: () => submitFeatureAction,
+  voteAction: () => voteAction
+});
+module.exports = __toCommonJS(actions_exports);
+var import_cache = require("next/cache");
+var import_core3 = require("@fewchurs/react/core");
+
+// src/config.ts
+var import_server_only = require("server-only");
+var import_core = require("@fewchurs/react/core");
+function resolveApiKey(apiKey) {
+  return apiKey ?? process.env.FEWCHURS_API_KEY;
+}
+function resolveBaseUrl(baseUrl) {
+  return baseUrl ?? process.env.FEWCHURS_BASE_URL ?? import_core.DEFAULT_BASE_URL;
+}
+function serverClient(deviceId, config = {}) {
+  const apiKey = resolveApiKey(config.apiKey);
+  if (!apiKey) {
+    throw new Error(
+      "[fewchurs] No API key. Set FEWCHURS_API_KEY in your environment, or pass apiKey to the server component or createHandler()."
+    );
+  }
+  return (0, import_core.createFewchursClient)({
+    apiKey,
+    baseUrl: resolveBaseUrl(config.baseUrl),
+    deviceId,
+    language: config.language
+  });
+}
+
+// src/identity.ts
+var import_server_only2 = require("server-only");
+var import_headers = require("next/headers");
+var import_core2 = require("@fewchurs/react/core");
+
+// src/version.ts
+var SDK_VERSION = "1.0.1";
+
+// src/constants.ts
+var DEVICE_ID_COOKIE = "fewchurs_did";
+var DEVICE_ID_MAX_AGE = 60 * 60 * 24 * 365;
+var SDK_HEADER = `next/${SDK_VERSION}`;
+
+// src/identity.ts
+async function readDeviceId() {
+  const store = await (0, import_headers.cookies)();
+  return store.get(DEVICE_ID_COOKIE)?.value ?? null;
+}
+async function resolveDeviceId(custom) {
+  if (custom) return custom();
+  return await readDeviceId() ?? (0, import_core2.createDeviceId)();
+}
+
+// src/actions.ts
+async function submitFeatureAction(formData) {
+  const client = serverClient(await resolveDeviceId());
+  const result = await client.submitFeature({
+    title: String(formData.get("title") ?? ""),
+    description: String(formData.get("description") ?? ""),
+    email: optional(formData.get("email"))
+  });
+  revalidate(formData);
+  return result.ok ? { ok: true } : { ok: false, message: (0, import_core3.userMessage)(result.error) };
+}
+async function voteAction(formData) {
+  const featureId = String(formData.get("featureId") ?? "");
+  const hasVoted = formData.get("hasVoted") === "true";
+  const client = serverClient(await resolveDeviceId());
+  const result = hasVoted ? await client.unvote(featureId) : await client.vote(featureId);
+  revalidate(formData);
+  return result.ok ? { ok: true } : { ok: false, message: (0, import_core3.userMessage)(result.error) };
+}
+async function commentAction(formData) {
+  const client = serverClient(await resolveDeviceId());
+  const result = await client.createComment({
+    featureId: String(formData.get("featureId") ?? ""),
+    text: String(formData.get("text") ?? ""),
+    authorName: optional(formData.get("authorName"))
+  });
+  revalidate(formData);
+  return result.ok ? { ok: true } : { ok: false, message: (0, import_core3.userMessage)(result.error) };
+}
+async function followAction(formData) {
+  const featureId = String(formData.get("featureId") ?? "");
+  const email = optional(formData.get("email"));
+  const client = serverClient(await resolveDeviceId());
+  const result = email ? await client.follow(featureId, email) : await client.unfollow(featureId);
+  revalidate(formData);
+  return result.ok ? { ok: true } : { ok: false, message: (0, import_core3.userMessage)(result.error) };
+}
+function optional(value) {
+  const text = typeof value === "string" ? value.trim() : "";
+  return text.length > 0 ? text : void 0;
+}
+function revalidate(formData) {
+  const path = formData.get("path");
+  if (typeof path === "string" && path.startsWith("/")) (0, import_cache.revalidatePath)(path);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  commentAction,
+  followAction,
+  submitFeatureAction,
+  voteAction
+});
+//# sourceMappingURL=actions.js.map

package/dist/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/actions.ts","../src/config.ts","../src/identity.ts","../src/version.ts","../src/constants.ts"],"sourcesContent":["\"use server\";\n\nimport { revalidatePath } from \"next/cache\";\nimport { userMessage } from \"@fewchurs/react/core\";\nimport { serverClient } from \"./config\";\nimport { resolveDeviceId } from \"./identity\";\n\nexport interface ActionResult {\n  ok: boolean;\n  message?: string;\n}\n\n/**\n * Server actions for boards built with plain forms — the client board talks to the route\n * handler instead. Pass `path` when the page should re-render with the new data.\n */\nexport async function submitFeatureAction(formData: FormData): Promise<ActionResult> {\n  const client = serverClient(await resolveDeviceId());\n  const result = await client.submitFeature({\n    title: String(formData.get(\"title\") ?? \"\"),\n    description: String(formData.get(\"description\") ?? \"\"),\n    email: optional(formData.get(\"email\")),\n  });\n\n  revalidate(formData);\n  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };\n}\n\nexport async function voteAction(formData: FormData): Promise<ActionResult> {\n  const featureId = String(formData.get(\"featureId\") ?? \"\");\n  const hasVoted = formData.get(\"hasVoted\") === \"true\";\n  const client = serverClient(await resolveDeviceId());\n  const result = hasVoted ? await client.unvote(featureId) : await client.vote(featureId);\n\n  revalidate(formData);\n  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };\n}\n\nexport async function commentAction(formData: FormData): Promise<ActionResult> {\n  const client = serverClient(await resolveDeviceId());\n  const result = await client.createComment({\n    featureId: String(formData.get(\"featureId\") ?? \"\"),\n    text: String(formData.get(\"text\") ?? \"\"),\n    authorName: optional(formData.get(\"authorName\")),\n  });\n\n  revalidate(formData);\n  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };\n}\n\nexport async function followAction(formData: FormData): Promise<ActionResult> {\n  const featureId = String(formData.get(\"featureId\") ?? \"\");\n  const email = optional(formData.get(\"email\"));\n  const client = serverClient(await resolveDeviceId());\n  const result = email ? await client.follow(featureId, email) : await client.unfollow(featureId);\n\n  revalidate(formData);\n  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };\n}\n\nfunction optional(value: FormDataEntryValue | null): string | undefined {\n  const text = typeof value === \"string\" ? value.trim() : \"\";\n  return text.length > 0 ? text : undefined;\n}\n\nfunction revalidate(formData: FormData): void {\n  const path = formData.get(\"path\");\n  if (typeof path === \"string\" && path.startsWith(\"/\")) revalidatePath(path);\n}\n","import \"server-only\";\nimport { createFewchursClient, DEFAULT_BASE_URL, type FewchursClient } from \"@fewchurs/react/core\";\n\nexport const DEFAULT_API_PATH = \"/api/fewchurs\";\n\nexport interface ServerConfig {\n  apiKey?: string;\n  baseUrl?: string;\n  language?: string;\n}\n\nexport function resolveApiKey(apiKey?: string): string | undefined {\n  return apiKey ?? process.env.FEWCHURS_API_KEY;\n}\n\nexport function resolveBaseUrl(baseUrl?: string): string {\n  return baseUrl ?? process.env.FEWCHURS_BASE_URL ?? DEFAULT_BASE_URL;\n}\n\nexport function resolveApiPath(apiPath?: string): string {\n  return (apiPath ?? process.env.FEWCHURS_API_PATH ?? DEFAULT_API_PATH).replace(/\\/$/, \"\");\n}\n\nexport function serverClient(deviceId: string | null, config: ServerConfig = {}): FewchursClient {\n  const apiKey = resolveApiKey(config.apiKey);\n  if (!apiKey) {\n    throw new Error(\n      \"[fewchurs] No API key. Set FEWCHURS_API_KEY in your environment, or pass apiKey to the server component or createHandler().\",\n    );\n  }\n\n  return createFewchursClient({\n    apiKey,\n    baseUrl: resolveBaseUrl(config.baseUrl),\n    deviceId,\n    language: config.language,\n  });\n}\n","import \"server-only\";\nimport { cookies } from \"next/headers\";\nimport { createDeviceId } from \"@fewchurs/react/core\";\nimport { DEVICE_ID_COOKIE, DEVICE_ID_MAX_AGE } from \"./constants\";\n\nexport { DEVICE_ID_COOKIE, DEVICE_ID_MAX_AGE };\n\nexport type DeviceIdResolver = () => string | Promise<string>;\n\n/** The visitor's id, or null when nothing has been stored for them yet. */\nexport async function readDeviceId(): Promise<string | null> {\n  const store = await cookies();\n  return store.get(DEVICE_ID_COOKIE)?.value ?? null;\n}\n\n/**\n * Reads the cookie, falling back to a fresh id. The value is not persisted here: a server\n * component cannot set cookies, so the route handler stores it on the first request instead.\n */\nexport async function resolveDeviceId(custom?: DeviceIdResolver): Promise<string> {\n  if (custom) return custom();\n  return (await readDeviceId()) ?? createDeviceId();\n}\n\nexport function deviceIdCookie(deviceId: string): {\n  name: string;\n  value: string;\n  options: {\n    httpOnly: true;\n    sameSite: \"lax\";\n    path: string;\n    maxAge: number;\n    secure: boolean;\n  };\n} {\n  return {\n    name: DEVICE_ID_COOKIE,\n    value: deviceId,\n    options: {\n      httpOnly: true,\n      sameSite: \"lax\",\n      path: \"/\",\n      maxAge: DEVICE_ID_MAX_AGE,\n      secure: process.env.NODE_ENV === \"production\",\n    },\n  };\n}\n\nexport { createDeviceId };\n","// Generated by tools/stamp-version.mjs from @fewchurs/next's package.json. Do not edit by hand.\nexport const SDK_VERSION = \"1.0.1\";\n","import { SDK_VERSION } from \"./version\";\n\nexport const DEVICE_ID_COOKIE = \"fewchurs_did\";\nexport const DEVICE_ID_MAX_AGE = 60 * 60 * 24 * 365;\nexport { SDK_VERSION };\nexport const SDK_HEADER = `next/${SDK_VERSION}`;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,mBAA+B;AAC/B,IAAAA,eAA4B;;;ACH5B,yBAAO;AACP,kBAA4E;AAUrE,SAAS,cAAc,QAAqC;AACjE,SAAO,UAAU,QAAQ,IAAI;AAC/B;AAEO,SAAS,eAAe,SAA0B;AACvD,SAAO,WAAW,QAAQ,IAAI,qBAAqB;AACrD;AAMO,SAAS,aAAa,UAAyB,SAAuB,CAAC,GAAmB;AAC/F,QAAM,SAAS,cAAc,OAAO,MAAM;AAC1C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,aAAO,kCAAqB;AAAA,IAC1B;AAAA,IACA,SAAS,eAAe,OAAO,OAAO;AAAA,IACtC;AAAA,IACA,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;;;ACrCA,IAAAC,sBAAO;AACP,qBAAwB;AACxB,IAAAC,eAA+B;;;ACDxB,IAAM,cAAc;;;ACCpB,IAAM,mBAAmB;AACzB,IAAM,oBAAoB,KAAK,KAAK,KAAK;AAEzC,IAAM,aAAa,QAAQ,WAAW;;;AFK7C,eAAsB,eAAuC;AAC3D,QAAM,QAAQ,UAAM,wBAAQ;AAC5B,SAAO,MAAM,IAAI,gBAAgB,GAAG,SAAS;AAC/C;AAMA,eAAsB,gBAAgB,QAA4C;AAChF,MAAI,OAAQ,QAAO,OAAO;AAC1B,SAAQ,MAAM,aAAa,SAAM,6BAAe;AAClD;;;AFNA,eAAsB,oBAAoB,UAA2C;AACnF,QAAM,SAAS,aAAa,MAAM,gBAAgB,CAAC;AACnD,QAAM,SAAS,MAAM,OAAO,cAAc;AAAA,IACxC,OAAO,OAAO,SAAS,IAAI,OAAO,KAAK,EAAE;AAAA,IACzC,aAAa,OAAO,SAAS,IAAI,aAAa,KAAK,EAAE;AAAA,IACrD,OAAO,SAAS,SAAS,IAAI,OAAO,CAAC;AAAA,EACvC,CAAC;AAED,aAAW,QAAQ;AACnB,SAAO,OAAO,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,aAAS,0BAAY,OAAO,KAAK,EAAE;AACpF;AAEA,eAAsB,WAAW,UAA2C;AAC1E,QAAM,YAAY,OAAO,SAAS,IAAI,WAAW,KAAK,EAAE;AACxD,QAAM,WAAW,SAAS,IAAI,UAAU,MAAM;AAC9C,QAAM,SAAS,aAAa,MAAM,gBAAgB,CAAC;AACnD,QAAM,SAAS,WAAW,MAAM,OAAO,OAAO,SAAS,IAAI,MAAM,OAAO,KAAK,SAAS;AAEtF,aAAW,QAAQ;AACnB,SAAO,OAAO,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,aAAS,0BAAY,OAAO,KAAK,EAAE;AACpF;AAEA,eAAsB,cAAc,UAA2C;AAC7E,QAAM,SAAS,aAAa,MAAM,gBAAgB,CAAC;AACnD,QAAM,SAAS,MAAM,OAAO,cAAc;AAAA,IACxC,WAAW,OAAO,SAAS,IAAI,WAAW,KAAK,EAAE;AAAA,IACjD,MAAM,OAAO,SAAS,IAAI,MAAM,KAAK,EAAE;AAAA,IACvC,YAAY,SAAS,SAAS,IAAI,YAAY,CAAC;AAAA,EACjD,CAAC;AAED,aAAW,QAAQ;AACnB,SAAO,OAAO,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,aAAS,0BAAY,OAAO,KAAK,EAAE;AACpF;AAEA,eAAsB,aAAa,UAA2C;AAC5E,QAAM,YAAY,OAAO,SAAS,IAAI,WAAW,KAAK,EAAE;AACxD,QAAM,QAAQ,SAAS,SAAS,IAAI,OAAO,CAAC;AAC5C,QAAM,SAAS,aAAa,MAAM,gBAAgB,CAAC;AACnD,QAAM,SAAS,QAAQ,MAAM,OAAO,OAAO,WAAW,KAAK,IAAI,MAAM,OAAO,SAAS,SAAS;AAE9F,aAAW,QAAQ;AACnB,SAAO,OAAO,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,aAAS,0BAAY,OAAO,KAAK,EAAE;AACpF;AAEA,SAAS,SAAS,OAAsD;AACtE,QAAM,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACxD,SAAO,KAAK,SAAS,IAAI,OAAO;AAClC;AAEA,SAAS,WAAW,UAA0B;AAC5C,QAAM,OAAO,SAAS,IAAI,MAAM;AAChC,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG,EAAG,kCAAe,IAAI;AAC3E;","names":["import_core","import_server_only","import_core"]}

package/dist/actions.mjs

@@ -0,0 +1,106 @@
+"use server";
+"use server";
+
+// src/actions.ts
+import { revalidatePath } from "next/cache";
+import { userMessage } from "@fewchurs/react/core";
+
+// src/config.ts
+import "server-only";
+import { createFewchursClient, DEFAULT_BASE_URL } from "@fewchurs/react/core";
+function resolveApiKey(apiKey) {
+  return apiKey ?? process.env.FEWCHURS_API_KEY;
+}
+function resolveBaseUrl(baseUrl) {
+  return baseUrl ?? process.env.FEWCHURS_BASE_URL ?? DEFAULT_BASE_URL;
+}
+function serverClient(deviceId, config = {}) {
+  const apiKey = resolveApiKey(config.apiKey);
+  if (!apiKey) {
+    throw new Error(
+      "[fewchurs] No API key. Set FEWCHURS_API_KEY in your environment, or pass apiKey to the server component or createHandler()."
+    );
+  }
+  return createFewchursClient({
+    apiKey,
+    baseUrl: resolveBaseUrl(config.baseUrl),
+    deviceId,
+    language: config.language
+  });
+}
+
+// src/identity.ts
+import "server-only";
+import { cookies } from "next/headers";
+import { createDeviceId } from "@fewchurs/react/core";
+
+// src/version.ts
+var SDK_VERSION = "1.0.1";
+
+// src/constants.ts
+var DEVICE_ID_COOKIE = "fewchurs_did";
+var DEVICE_ID_MAX_AGE = 60 * 60 * 24 * 365;
+var SDK_HEADER = `next/${SDK_VERSION}`;
+
+// src/identity.ts
+async function readDeviceId() {
+  const store = await cookies();
+  return store.get(DEVICE_ID_COOKIE)?.value ?? null;
+}
+async function resolveDeviceId(custom) {
+  if (custom) return custom();
+  return await readDeviceId() ?? createDeviceId();
+}
+
+// src/actions.ts
+async function submitFeatureAction(formData) {
+  const client = serverClient(await resolveDeviceId());
+  const result = await client.submitFeature({
+    title: String(formData.get("title") ?? ""),
+    description: String(formData.get("description") ?? ""),
+    email: optional(formData.get("email"))
+  });
+  revalidate(formData);
+  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };
+}
+async function voteAction(formData) {
+  const featureId = String(formData.get("featureId") ?? "");
+  const hasVoted = formData.get("hasVoted") === "true";
+  const client = serverClient(await resolveDeviceId());
+  const result = hasVoted ? await client.unvote(featureId) : await client.vote(featureId);
+  revalidate(formData);
+  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };
+}
+async function commentAction(formData) {
+  const client = serverClient(await resolveDeviceId());
+  const result = await client.createComment({
+    featureId: String(formData.get("featureId") ?? ""),
+    text: String(formData.get("text") ?? ""),
+    authorName: optional(formData.get("authorName"))
+  });
+  revalidate(formData);
+  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };
+}
+async function followAction(formData) {
+  const featureId = String(formData.get("featureId") ?? "");
+  const email = optional(formData.get("email"));
+  const client = serverClient(await resolveDeviceId());
+  const result = email ? await client.follow(featureId, email) : await client.unfollow(featureId);
+  revalidate(formData);
+  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };
+}
+function optional(value) {
+  const text = typeof value === "string" ? value.trim() : "";
+  return text.length > 0 ? text : void 0;
+}
+function revalidate(formData) {
+  const path = formData.get("path");
+  if (typeof path === "string" && path.startsWith("/")) revalidatePath(path);
+}
+export {
+  commentAction,
+  followAction,
+  submitFeatureAction,
+  voteAction
+};
+//# sourceMappingURL=actions.mjs.map

package/dist/actions.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/actions.ts","../src/config.ts","../src/identity.ts","../src/version.ts","../src/constants.ts"],"sourcesContent":["\"use server\";\n\nimport { revalidatePath } from \"next/cache\";\nimport { userMessage } from \"@fewchurs/react/core\";\nimport { serverClient } from \"./config\";\nimport { resolveDeviceId } from \"./identity\";\n\nexport interface ActionResult {\n  ok: boolean;\n  message?: string;\n}\n\n/**\n * Server actions for boards built with plain forms — the client board talks to the route\n * handler instead. Pass `path` when the page should re-render with the new data.\n */\nexport async function submitFeatureAction(formData: FormData): Promise<ActionResult> {\n  const client = serverClient(await resolveDeviceId());\n  const result = await client.submitFeature({\n    title: String(formData.get(\"title\") ?? \"\"),\n    description: String(formData.get(\"description\") ?? \"\"),\n    email: optional(formData.get(\"email\")),\n  });\n\n  revalidate(formData);\n  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };\n}\n\nexport async function voteAction(formData: FormData): Promise<ActionResult> {\n  const featureId = String(formData.get(\"featureId\") ?? \"\");\n  const hasVoted = formData.get(\"hasVoted\") === \"true\";\n  const client = serverClient(await resolveDeviceId());\n  const result = hasVoted ? await client.unvote(featureId) : await client.vote(featureId);\n\n  revalidate(formData);\n  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };\n}\n\nexport async function commentAction(formData: FormData): Promise<ActionResult> {\n  const client = serverClient(await resolveDeviceId());\n  const result = await client.createComment({\n    featureId: String(formData.get(\"featureId\") ?? \"\"),\n    text: String(formData.get(\"text\") ?? \"\"),\n    authorName: optional(formData.get(\"authorName\")),\n  });\n\n  revalidate(formData);\n  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };\n}\n\nexport async function followAction(formData: FormData): Promise<ActionResult> {\n  const featureId = String(formData.get(\"featureId\") ?? \"\");\n  const email = optional(formData.get(\"email\"));\n  const client = serverClient(await resolveDeviceId());\n  const result = email ? await client.follow(featureId, email) : await client.unfollow(featureId);\n\n  revalidate(formData);\n  return result.ok ? { ok: true } : { ok: false, message: userMessage(result.error) };\n}\n\nfunction optional(value: FormDataEntryValue | null): string | undefined {\n  const text = typeof value === \"string\" ? value.trim() : \"\";\n  return text.length > 0 ? text : undefined;\n}\n\nfunction revalidate(formData: FormData): void {\n  const path = formData.get(\"path\");\n  if (typeof path === \"string\" && path.startsWith(\"/\")) revalidatePath(path);\n}\n","import \"server-only\";\nimport { createFewchursClient, DEFAULT_BASE_URL, type FewchursClient } from \"@fewchurs/react/core\";\n\nexport const DEFAULT_API_PATH = \"/api/fewchurs\";\n\nexport interface ServerConfig {\n  apiKey?: string;\n  baseUrl?: string;\n  language?: string;\n}\n\nexport function resolveApiKey(apiKey?: string): string | undefined {\n  return apiKey ?? process.env.FEWCHURS_API_KEY;\n}\n\nexport function resolveBaseUrl(baseUrl?: string): string {\n  return baseUrl ?? process.env.FEWCHURS_BASE_URL ?? DEFAULT_BASE_URL;\n}\n\nexport function resolveApiPath(apiPath?: string): string {\n  return (apiPath ?? process.env.FEWCHURS_API_PATH ?? DEFAULT_API_PATH).replace(/\\/$/, \"\");\n}\n\nexport function serverClient(deviceId: string | null, config: ServerConfig = {}): FewchursClient {\n  const apiKey = resolveApiKey(config.apiKey);\n  if (!apiKey) {\n    throw new Error(\n      \"[fewchurs] No API key. Set FEWCHURS_API_KEY in your environment, or pass apiKey to the server component or createHandler().\",\n    );\n  }\n\n  return createFewchursClient({\n    apiKey,\n    baseUrl: resolveBaseUrl(config.baseUrl),\n    deviceId,\n    language: config.language,\n  });\n}\n","import \"server-only\";\nimport { cookies } from \"next/headers\";\nimport { createDeviceId } from \"@fewchurs/react/core\";\nimport { DEVICE_ID_COOKIE, DEVICE_ID_MAX_AGE } from \"./constants\";\n\nexport { DEVICE_ID_COOKIE, DEVICE_ID_MAX_AGE };\n\nexport type DeviceIdResolver = () => string | Promise<string>;\n\n/** The visitor's id, or null when nothing has been stored for them yet. */\nexport async function readDeviceId(): Promise<string | null> {\n  const store = await cookies();\n  return store.get(DEVICE_ID_COOKIE)?.value ?? null;\n}\n\n/**\n * Reads the cookie, falling back to a fresh id. The value is not persisted here: a server\n * component cannot set cookies, so the route handler stores it on the first request instead.\n */\nexport async function resolveDeviceId(custom?: DeviceIdResolver): Promise<string> {\n  if (custom) return custom();\n  return (await readDeviceId()) ?? createDeviceId();\n}\n\nexport function deviceIdCookie(deviceId: string): {\n  name: string;\n  value: string;\n  options: {\n    httpOnly: true;\n    sameSite: \"lax\";\n    path: string;\n    maxAge: number;\n    secure: boolean;\n  };\n} {\n  return {\n    name: DEVICE_ID_COOKIE,\n    value: deviceId,\n    options: {\n      httpOnly: true,\n      sameSite: \"lax\",\n      path: \"/\",\n      maxAge: DEVICE_ID_MAX_AGE,\n      secure: process.env.NODE_ENV === \"production\",\n    },\n  };\n}\n\nexport { createDeviceId };\n","// Generated by tools/stamp-version.mjs from @fewchurs/next's package.json. Do not edit by hand.\nexport const SDK_VERSION = \"1.0.1\";\n","import { SDK_VERSION } from \"./version\";\n\nexport const DEVICE_ID_COOKIE = \"fewchurs_did\";\nexport const DEVICE_ID_MAX_AGE = 60 * 60 * 24 * 365;\nexport { SDK_VERSION };\nexport const SDK_HEADER = `next/${SDK_VERSION}`;\n"],"mappings":";;;;AAEA,SAAS,sBAAsB;AAC/B,SAAS,mBAAmB;;;ACH5B,OAAO;AACP,SAAS,sBAAsB,wBAA6C;AAUrE,SAAS,cAAc,QAAqC;AACjE,SAAO,UAAU,QAAQ,IAAI;AAC/B;AAEO,SAAS,eAAe,SAA0B;AACvD,SAAO,WAAW,QAAQ,IAAI,qBAAqB;AACrD;AAMO,SAAS,aAAa,UAAyB,SAAuB,CAAC,GAAmB;AAC/F,QAAM,SAAS,cAAc,OAAO,MAAM;AAC1C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO,qBAAqB;AAAA,IAC1B;AAAA,IACA,SAAS,eAAe,OAAO,OAAO;AAAA,IACtC;AAAA,IACA,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;;;ACrCA,OAAO;AACP,SAAS,eAAe;AACxB,SAAS,sBAAsB;;;ACDxB,IAAM,cAAc;;;ACCpB,IAAM,mBAAmB;AACzB,IAAM,oBAAoB,KAAK,KAAK,KAAK;AAEzC,IAAM,aAAa,QAAQ,WAAW;;;AFK7C,eAAsB,eAAuC;AAC3D,QAAM,QAAQ,MAAM,QAAQ;AAC5B,SAAO,MAAM,IAAI,gBAAgB,GAAG,SAAS;AAC/C;AAMA,eAAsB,gBAAgB,QAA4C;AAChF,MAAI,OAAQ,QAAO,OAAO;AAC1B,SAAQ,MAAM,aAAa,KAAM,eAAe;AAClD;;;AFNA,eAAsB,oBAAoB,UAA2C;AACnF,QAAM,SAAS,aAAa,MAAM,gBAAgB,CAAC;AACnD,QAAM,SAAS,MAAM,OAAO,cAAc;AAAA,IACxC,OAAO,OAAO,SAAS,IAAI,OAAO,KAAK,EAAE;AAAA,IACzC,aAAa,OAAO,SAAS,IAAI,aAAa,KAAK,EAAE;AAAA,IACrD,OAAO,SAAS,SAAS,IAAI,OAAO,CAAC;AAAA,EACvC,CAAC;AAED,aAAW,QAAQ;AACnB,SAAO,OAAO,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,SAAS,YAAY,OAAO,KAAK,EAAE;AACpF;AAEA,eAAsB,WAAW,UAA2C;AAC1E,QAAM,YAAY,OAAO,SAAS,IAAI,WAAW,KAAK,EAAE;AACxD,QAAM,WAAW,SAAS,IAAI,UAAU,MAAM;AAC9C,QAAM,SAAS,aAAa,MAAM,gBAAgB,CAAC;AACnD,QAAM,SAAS,WAAW,MAAM,OAAO,OAAO,SAAS,IAAI,MAAM,OAAO,KAAK,SAAS;AAEtF,aAAW,QAAQ;AACnB,SAAO,OAAO,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,SAAS,YAAY,OAAO,KAAK,EAAE;AACpF;AAEA,eAAsB,cAAc,UAA2C;AAC7E,QAAM,SAAS,aAAa,MAAM,gBAAgB,CAAC;AACnD,QAAM,SAAS,MAAM,OAAO,cAAc;AAAA,IACxC,WAAW,OAAO,SAAS,IAAI,WAAW,KAAK,EAAE;AAAA,IACjD,MAAM,OAAO,SAAS,IAAI,MAAM,KAAK,EAAE;AAAA,IACvC,YAAY,SAAS,SAAS,IAAI,YAAY,CAAC;AAAA,EACjD,CAAC;AAED,aAAW,QAAQ;AACnB,SAAO,OAAO,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,SAAS,YAAY,OAAO,KAAK,EAAE;AACpF;AAEA,eAAsB,aAAa,UAA2C;AAC5E,QAAM,YAAY,OAAO,SAAS,IAAI,WAAW,KAAK,EAAE;AACxD,QAAM,QAAQ,SAAS,SAAS,IAAI,OAAO,CAAC;AAC5C,QAAM,SAAS,aAAa,MAAM,gBAAgB,CAAC;AACnD,QAAM,SAAS,QAAQ,MAAM,OAAO,OAAO,WAAW,KAAK,IAAI,MAAM,OAAO,SAAS,SAAS;AAE9F,aAAW,QAAQ;AACnB,SAAO,OAAO,KAAK,EAAE,IAAI,KAAK,IAAI,EAAE,IAAI,OAAO,SAAS,YAAY,OAAO,KAAK,EAAE;AACpF;AAEA,SAAS,SAAS,OAAsD;AACtE,QAAM,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACxD,SAAO,KAAK,SAAS,IAAI,OAAO;AAClC;AAEA,SAAS,WAAW,UAA0B;AAC5C,QAAM,OAAO,SAAS,IAAI,MAAM;AAChC,MAAI,OAAO,SAAS,YAAY,KAAK,WAAW,GAAG,EAAG,gBAAe,IAAI;AAC3E;","names":[]}

package/dist/chunk-KPJHLDQU.mjs

@@ -0,0 +1,145 @@
+import {
+  DEVICE_ID_COOKIE,
+  DEVICE_ID_MAX_AGE,
+  SDK_HEADER
+} from "./chunk-W6QR6DEB.mjs";
+
+// src/handler.ts
+import "server-only";
+import { createDeviceId } from "@fewchurs/react/core";
+
+// src/config.ts
+import "server-only";
+import { createFewchursClient, DEFAULT_BASE_URL } from "@fewchurs/react/core";
+var DEFAULT_API_PATH = "/api/fewchurs";
+function resolveApiKey(apiKey) {
+  return apiKey ?? process.env.FEWCHURS_API_KEY;
+}
+function resolveBaseUrl(baseUrl) {
+  return baseUrl ?? process.env.FEWCHURS_BASE_URL ?? DEFAULT_BASE_URL;
+}
+function resolveApiPath(apiPath) {
+  return (apiPath ?? process.env.FEWCHURS_API_PATH ?? DEFAULT_API_PATH).replace(/\/$/, "");
+}
+function serverClient(deviceId, config = {}) {
+  const apiKey = resolveApiKey(config.apiKey);
+  if (!apiKey) {
+    throw new Error(
+      "[fewchurs] No API key. Set FEWCHURS_API_KEY in your environment, or pass apiKey to the server component or createHandler()."
+    );
+  }
+  return createFewchursClient({
+    apiKey,
+    baseUrl: resolveBaseUrl(config.baseUrl),
+    deviceId,
+    language: config.language
+  });
+}
+
+// src/handler.ts
+var ALLOWED = [
+  { method: "GET", pattern: /^config$/ },
+  { method: "GET", pattern: /^features$/ },
+  { method: "POST", pattern: /^features$/ },
+  { method: "GET", pattern: /^features\/[^/]+$/ },
+  { method: "POST", pattern: /^features\/[^/]+\/vote$/ },
+  { method: "DELETE", pattern: /^features\/[^/]+\/vote$/ },
+  { method: "POST", pattern: /^features\/[^/]+\/follow$/ },
+  { method: "DELETE", pattern: /^features\/[^/]+\/follow$/ },
+  { method: "GET", pattern: /^features\/[^/]+\/comments$/ },
+  { method: "POST", pattern: /^comments$/ }
+];
+var DEVICE_ID_PATTERN = /^[A-Za-z0-9_-]{8,128}$/;
+function createHandler(options = {}) {
+  async function handle(request, context) {
+    const path = await routePath(request, context, resolveApiPath(options.apiPath));
+    if (!ALLOWED.some((route) => route.method === request.method && route.pattern.test(path))) {
+      return json({ error: { code: "not_found", message: "Unknown Fewchurs route." } }, 404);
+    }
+    const apiKey = resolveApiKey(options.apiKey);
+    if (!apiKey) {
+      console.error(
+        "[fewchurs] No API key. Set FEWCHURS_API_KEY, or pass apiKey to createHandler()."
+      );
+      return json({ error: { code: "internal", message: "Fewchurs is not configured." } }, 500);
+    }
+    const cookieValue = readCookie(request, DEVICE_ID_COOKIE);
+    const custom = options.deviceId ? await options.deviceId() : null;
+    const deviceId = custom ?? cookieValue ?? claimedDeviceId(request) ?? createDeviceId();
+    const target = `${resolveBaseUrl(options.baseUrl)}/${path}${new URL(request.url).search}`;
+    const headers = {
+      Authorization: `Bearer ${apiKey}`,
+      "X-Device-Id": deviceId,
+      "X-Fewchurs-Sdk": request.headers.get("x-fewchurs-sdk") ?? SDK_HEADER,
+      Accept: "application/json"
+    };
+    const language = request.headers.get("accept-language");
+    if (language) headers["Accept-Language"] = language;
+    const body = request.method === "GET" ? void 0 : await request.text();
+    if (body) headers["Content-Type"] = "application/json";
+    let upstream;
+    try {
+      upstream = await fetch(target, { method: request.method, headers, body, cache: "no-store" });
+    } catch {
+      return json({ error: { code: "internal", message: "Could not reach Fewchurs." } }, 502);
+    }
+    const response = new Response(await upstream.text(), {
+      status: upstream.status,
+      headers: { "Content-Type": "application/json", "Cache-Control": "no-store" }
+    });
+    if (!custom && deviceId !== cookieValue) {
+      response.headers.append("Set-Cookie", serializeCookie(deviceId));
+    }
+    return response;
+  }
+  return { GET: handle, POST: handle, DELETE: handle };
+}
+var defaultHandler = createHandler();
+var GET = defaultHandler.GET;
+var POST = defaultHandler.POST;
+var DELETE = defaultHandler.DELETE;
+async function routePath(request, context, apiPath) {
+  const params = await context?.params;
+  if (params?.route?.length) return params.route.map(encodeURIComponent).join("/");
+  const { pathname } = new URL(request.url);
+  const index = pathname.indexOf(apiPath);
+  return index === -1 ? "" : pathname.slice(index + apiPath.length).replace(/^\//, "");
+}
+function claimedDeviceId(request) {
+  const claimed = request.headers.get("x-device-id");
+  return claimed && DEVICE_ID_PATTERN.test(claimed) ? claimed : null;
+}
+function readCookie(request, name) {
+  const header = request.headers.get("cookie");
+  if (!header) return null;
+  const match = header.match(new RegExp(`(?:^|;\\s*)${name}=([^;]*)`));
+  return match?.[1] ? decodeURIComponent(match[1]) : null;
+}
+function serializeCookie(deviceId) {
+  const parts = [
+    `${DEVICE_ID_COOKIE}=${encodeURIComponent(deviceId)}`,
+    "Path=/",
+    `Max-Age=${DEVICE_ID_MAX_AGE}`,
+    "HttpOnly",
+    "SameSite=Lax"
+  ];
+  if (process.env.NODE_ENV === "production") parts.push("Secure");
+  return parts.join("; ");
+}
+function json(body, status) {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "Content-Type": "application/json", "Cache-Control": "no-store" }
+  });
+}
+
+export {
+  DEFAULT_API_PATH,
+  resolveApiPath,
+  serverClient,
+  createHandler,
+  GET,
+  POST,
+  DELETE
+};
+//# sourceMappingURL=chunk-KPJHLDQU.mjs.map

package/dist/chunk-KPJHLDQU.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/handler.ts","../src/config.ts"],"sourcesContent":["import \"server-only\";\nimport { createDeviceId } from \"@fewchurs/react/core\";\nimport { resolveApiKey, resolveApiPath, resolveBaseUrl } from \"./config\";\nimport { DEVICE_ID_COOKIE, DEVICE_ID_MAX_AGE, SDK_HEADER } from \"./constants\";\nimport type { DeviceIdResolver } from \"./identity\";\n\nexport interface HandlerOptions {\n  apiKey?: string;\n  baseUrl?: string;\n  /** Where the handler is mounted, when it is not `/api/fewchurs`. */\n  apiPath?: string;\n  /** Return a stable, hashed id for the signed-in visitor so votes follow the account. */\n  deviceId?: DeviceIdResolver;\n}\n\ntype RouteParams = { route?: string[] };\n\n/** What Next passes: a Promise in 15, a plain object in 14. Both are awaited the same way. */\ntype IncomingContext = { params?: RouteParams | Promise<RouteParams> };\n\n// Next 15's route check wants a required second argument whose `params` is a Promise. The\n// handler itself takes `IncomingContext`, so Next 14's plain object still works at runtime.\ntype RouteContext = { params: Promise<RouteParams> };\n\nexport type RouteHandler = (request: Request, context: RouteContext) => Promise<Response>;\n\n/** Only the endpoints the board needs: everything else is a 404, not a proxy to the API. */\nconst ALLOWED: Array<{ method: string; pattern: RegExp }> = [\n  { method: \"GET\", pattern: /^config$/ },\n  { method: \"GET\", pattern: /^features$/ },\n  { method: \"POST\", pattern: /^features$/ },\n  { method: \"GET\", pattern: /^features\\/[^/]+$/ },\n  { method: \"POST\", pattern: /^features\\/[^/]+\\/vote$/ },\n  { method: \"DELETE\", pattern: /^features\\/[^/]+\\/vote$/ },\n  { method: \"POST\", pattern: /^features\\/[^/]+\\/follow$/ },\n  { method: \"DELETE\", pattern: /^features\\/[^/]+\\/follow$/ },\n  { method: \"GET\", pattern: /^features\\/[^/]+\\/comments$/ },\n  { method: \"POST\", pattern: /^comments$/ },\n];\n\nconst DEVICE_ID_PATTERN = /^[A-Za-z0-9_-]{8,128}$/;\n\nexport function createHandler(options: HandlerOptions = {}): {\n  GET: RouteHandler;\n  POST: RouteHandler;\n  DELETE: RouteHandler;\n} {\n  async function handle(request: Request, context?: IncomingContext): Promise<Response> {\n    const path = await routePath(request, context, resolveApiPath(options.apiPath));\n\n    if (!ALLOWED.some((route) => route.method === request.method && route.pattern.test(path))) {\n      return json({ error: { code: \"not_found\", message: \"Unknown Fewchurs route.\" } }, 404);\n    }\n\n    const apiKey = resolveApiKey(options.apiKey);\n    if (!apiKey) {\n      console.error(\n        \"[fewchurs] No API key. Set FEWCHURS_API_KEY, or pass apiKey to createHandler().\",\n      );\n      return json({ error: { code: \"internal\", message: \"Fewchurs is not configured.\" } }, 500);\n    }\n\n    const cookieValue = readCookie(request, DEVICE_ID_COOKIE);\n    const custom = options.deviceId ? await options.deviceId() : null;\n    const deviceId = custom ?? cookieValue ?? claimedDeviceId(request) ?? createDeviceId();\n\n    const target = `${resolveBaseUrl(options.baseUrl)}/${path}${new URL(request.url).search}`;\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${apiKey}`,\n      \"X-Device-Id\": deviceId,\n      \"X-Fewchurs-Sdk\": request.headers.get(\"x-fewchurs-sdk\") ?? SDK_HEADER,\n      Accept: \"application/json\",\n    };\n    const language = request.headers.get(\"accept-language\");\n    if (language) headers[\"Accept-Language\"] = language;\n\n    const body = request.method === \"GET\" ? undefined : await request.text();\n    if (body) headers[\"Content-Type\"] = \"application/json\";\n\n    let upstream: Response;\n    try {\n      upstream = await fetch(target, { method: request.method, headers, body, cache: \"no-store\" });\n    } catch {\n      return json({ error: { code: \"internal\", message: \"Could not reach Fewchurs.\" } }, 502);\n    }\n\n    const response = new Response(await upstream.text(), {\n      status: upstream.status,\n      headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" },\n    });\n\n    // A visitor keeps the same id across requests without the browser ever seeing the key,\n    // and an httpOnly cookie means page scripts cannot read or change it either.\n    if (!custom && deviceId !== cookieValue) {\n      response.headers.append(\"Set-Cookie\", serializeCookie(deviceId));\n    }\n\n    return response;\n  }\n\n  return { GET: handle, POST: handle, DELETE: handle };\n}\n\nconst defaultHandler = createHandler();\n\nexport const GET = defaultHandler.GET;\nexport const POST = defaultHandler.POST;\nexport const DELETE = defaultHandler.DELETE;\n\nasync function routePath(\n  request: Request,\n  context: IncomingContext | undefined,\n  apiPath: string,\n): Promise<string> {\n  const params = await context?.params;\n  if (params?.route?.length) return params.route.map(encodeURIComponent).join(\"/\");\n\n  const { pathname } = new URL(request.url);\n  const index = pathname.indexOf(apiPath);\n  return index === -1 ? \"\" : pathname.slice(index + apiPath.length).replace(/^\\//, \"\");\n}\n\n/**\n * The first request from a server-rendered board carries the id the page was rendered with,\n * so adopting it keeps the server's `hasVoted` answers and the browser's in agreement.\n */\nfunction claimedDeviceId(request: Request): string | null {\n  const claimed = request.headers.get(\"x-device-id\");\n  return claimed && DEVICE_ID_PATTERN.test(claimed) ? claimed : null;\n}\n\nfunction readCookie(request: Request, name: string): string | null {\n  const header = request.headers.get(\"cookie\");\n  if (!header) return null;\n  const match = header.match(new RegExp(`(?:^|;\\\\s*)${name}=([^;]*)`));\n  return match?.[1] ? decodeURIComponent(match[1]) : null;\n}\n\nfunction serializeCookie(deviceId: string): string {\n  const parts = [\n    `${DEVICE_ID_COOKIE}=${encodeURIComponent(deviceId)}`,\n    \"Path=/\",\n    `Max-Age=${DEVICE_ID_MAX_AGE}`,\n    \"HttpOnly\",\n    \"SameSite=Lax\",\n  ];\n  if (process.env.NODE_ENV === \"production\") parts.push(\"Secure\");\n  return parts.join(\"; \");\n}\n\nfunction json(body: unknown, status: number): Response {\n  return new Response(JSON.stringify(body), {\n    status,\n    headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" },\n  });\n}\n","import \"server-only\";\nimport { createFewchursClient, DEFAULT_BASE_URL, type FewchursClient } from \"@fewchurs/react/core\";\n\nexport const DEFAULT_API_PATH = \"/api/fewchurs\";\n\nexport interface ServerConfig {\n  apiKey?: string;\n  baseUrl?: string;\n  language?: string;\n}\n\nexport function resolveApiKey(apiKey?: string): string | undefined {\n  return apiKey ?? process.env.FEWCHURS_API_KEY;\n}\n\nexport function resolveBaseUrl(baseUrl?: string): string {\n  return baseUrl ?? process.env.FEWCHURS_BASE_URL ?? DEFAULT_BASE_URL;\n}\n\nexport function resolveApiPath(apiPath?: string): string {\n  return (apiPath ?? process.env.FEWCHURS_API_PATH ?? DEFAULT_API_PATH).replace(/\\/$/, \"\");\n}\n\nexport function serverClient(deviceId: string | null, config: ServerConfig = {}): FewchursClient {\n  const apiKey = resolveApiKey(config.apiKey);\n  if (!apiKey) {\n    throw new Error(\n      \"[fewchurs] No API key. Set FEWCHURS_API_KEY in your environment, or pass apiKey to the server component or createHandler().\",\n    );\n  }\n\n  return createFewchursClient({\n    apiKey,\n    baseUrl: resolveBaseUrl(config.baseUrl),\n    deviceId,\n    language: config.language,\n  });\n}\n"],"mappings":";;;;;;;AAAA,OAAO;AACP,SAAS,sBAAsB;;;ACD/B,OAAO;AACP,SAAS,sBAAsB,wBAA6C;AAErE,IAAM,mBAAmB;AAQzB,SAAS,cAAc,QAAqC;AACjE,SAAO,UAAU,QAAQ,IAAI;AAC/B;AAEO,SAAS,eAAe,SAA0B;AACvD,SAAO,WAAW,QAAQ,IAAI,qBAAqB;AACrD;AAEO,SAAS,eAAe,SAA0B;AACvD,UAAQ,WAAW,QAAQ,IAAI,qBAAqB,kBAAkB,QAAQ,OAAO,EAAE;AACzF;AAEO,SAAS,aAAa,UAAyB,SAAuB,CAAC,GAAmB;AAC/F,QAAM,SAAS,cAAc,OAAO,MAAM;AAC1C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO,qBAAqB;AAAA,IAC1B;AAAA,IACA,SAAS,eAAe,OAAO,OAAO;AAAA,IACtC;AAAA,IACA,UAAU,OAAO;AAAA,EACnB,CAAC;AACH;;;ADVA,IAAM,UAAsD;AAAA,EAC1D,EAAE,QAAQ,OAAO,SAAS,WAAW;AAAA,EACrC,EAAE,QAAQ,OAAO,SAAS,aAAa;AAAA,EACvC,EAAE,QAAQ,QAAQ,SAAS,aAAa;AAAA,EACxC,EAAE,QAAQ,OAAO,SAAS,oBAAoB;AAAA,EAC9C,EAAE,QAAQ,QAAQ,SAAS,0BAA0B;AAAA,EACrD,EAAE,QAAQ,UAAU,SAAS,0BAA0B;AAAA,EACvD,EAAE,QAAQ,QAAQ,SAAS,4BAA4B;AAAA,EACvD,EAAE,QAAQ,UAAU,SAAS,4BAA4B;AAAA,EACzD,EAAE,QAAQ,OAAO,SAAS,8BAA8B;AAAA,EACxD,EAAE,QAAQ,QAAQ,SAAS,aAAa;AAC1C;AAEA,IAAM,oBAAoB;AAEnB,SAAS,cAAc,UAA0B,CAAC,GAIvD;AACA,iBAAe,OAAO,SAAkB,SAA8C;AACpF,UAAM,OAAO,MAAM,UAAU,SAAS,SAAS,eAAe,QAAQ,OAAO,CAAC;AAE9E,QAAI,CAAC,QAAQ,KAAK,CAAC,UAAU,MAAM,WAAW,QAAQ,UAAU,MAAM,QAAQ,KAAK,IAAI,CAAC,GAAG;AACzF,aAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,SAAS,0BAA0B,EAAE,GAAG,GAAG;AAAA,IACvF;AAEA,UAAM,SAAS,cAAc,QAAQ,MAAM;AAC3C,QAAI,CAAC,QAAQ;AACX,cAAQ;AAAA,QACN;AAAA,MACF;AACA,aAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,SAAS,8BAA8B,EAAE,GAAG,GAAG;AAAA,IAC1F;AAEA,UAAM,cAAc,WAAW,SAAS,gBAAgB;AACxD,UAAM,SAAS,QAAQ,WAAW,MAAM,QAAQ,SAAS,IAAI;AAC7D,UAAM,WAAW,UAAU,eAAe,gBAAgB,OAAO,KAAK,eAAe;AAErF,UAAM,SAAS,GAAG,eAAe,QAAQ,OAAO,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,GAAG,EAAE,MAAM;AACvF,UAAM,UAAkC;AAAA,MACtC,eAAe,UAAU,MAAM;AAAA,MAC/B,eAAe;AAAA,MACf,kBAAkB,QAAQ,QAAQ,IAAI,gBAAgB,KAAK;AAAA,MAC3D,QAAQ;AAAA,IACV;AACA,UAAM,WAAW,QAAQ,QAAQ,IAAI,iBAAiB;AACtD,QAAI,SAAU,SAAQ,iBAAiB,IAAI;AAE3C,UAAM,OAAO,QAAQ,WAAW,QAAQ,SAAY,MAAM,QAAQ,KAAK;AACvE,QAAI,KAAM,SAAQ,cAAc,IAAI;AAEpC,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,MAAM,QAAQ,EAAE,QAAQ,QAAQ,QAAQ,SAAS,MAAM,OAAO,WAAW,CAAC;AAAA,IAC7F,QAAQ;AACN,aAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,SAAS,4BAA4B,EAAE,GAAG,GAAG;AAAA,IACxF;AAEA,UAAM,WAAW,IAAI,SAAS,MAAM,SAAS,KAAK,GAAG;AAAA,MACnD,QAAQ,SAAS;AAAA,MACjB,SAAS,EAAE,gBAAgB,oBAAoB,iBAAiB,WAAW;AAAA,IAC7E,CAAC;AAID,QAAI,CAAC,UAAU,aAAa,aAAa;AACvC,eAAS,QAAQ,OAAO,cAAc,gBAAgB,QAAQ,CAAC;AAAA,IACjE;AAEA,WAAO;AAAA,EACT;AAEA,SAAO,EAAE,KAAK,QAAQ,MAAM,QAAQ,QAAQ,OAAO;AACrD;AAEA,IAAM,iBAAiB,cAAc;AAE9B,IAAM,MAAM,eAAe;AAC3B,IAAM,OAAO,eAAe;AAC5B,IAAM,SAAS,eAAe;AAErC,eAAe,UACb,SACA,SACA,SACiB;AACjB,QAAM,SAAS,MAAM,SAAS;AAC9B,MAAI,QAAQ,OAAO,OAAQ,QAAO,OAAO,MAAM,IAAI,kBAAkB,EAAE,KAAK,GAAG;AAE/E,QAAM,EAAE,SAAS,IAAI,IAAI,IAAI,QAAQ,GAAG;AACxC,QAAM,QAAQ,SAAS,QAAQ,OAAO;AACtC,SAAO,UAAU,KAAK,KAAK,SAAS,MAAM,QAAQ,QAAQ,MAAM,EAAE,QAAQ,OAAO,EAAE;AACrF;AAMA,SAAS,gBAAgB,SAAiC;AACxD,QAAM,UAAU,QAAQ,QAAQ,IAAI,aAAa;AACjD,SAAO,WAAW,kBAAkB,KAAK,OAAO,IAAI,UAAU;AAChE;AAEA,SAAS,WAAW,SAAkB,MAA6B;AACjE,QAAM,SAAS,QAAQ,QAAQ,IAAI,QAAQ;AAC3C,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,QAAQ,OAAO,MAAM,IAAI,OAAO,cAAc,IAAI,UAAU,CAAC;AACnE,SAAO,QAAQ,CAAC,IAAI,mBAAmB,MAAM,CAAC,CAAC,IAAI;AACrD;AAEA,SAAS,gBAAgB,UAA0B;AACjD,QAAM,QAAQ;AAAA,IACZ,GAAG,gBAAgB,IAAI,mBAAmB,QAAQ,CAAC;AAAA,IACnD;AAAA,IACA,WAAW,iBAAiB;AAAA,IAC5B;AAAA,IACA;AAAA,EACF;AACA,MAAI,QAAQ,IAAI,aAAa,aAAc,OAAM,KAAK,QAAQ;AAC9D,SAAO,MAAM,KAAK,IAAI;AACxB;AAEA,SAAS,KAAK,MAAe,QAA0B;AACrD,SAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;AAAA,IACxC;AAAA,IACA,SAAS,EAAE,gBAAgB,oBAAoB,iBAAiB,WAAW;AAAA,EAC7E,CAAC;AACH;","names":[]}

package/dist/chunk-QULKPZB4.mjs

@@ -0,0 +1,38 @@
+import {
+  DEVICE_ID_COOKIE,
+  DEVICE_ID_MAX_AGE
+} from "./chunk-W6QR6DEB.mjs";
+
+// src/identity.ts
+import "server-only";
+import { cookies } from "next/headers";
+import { createDeviceId } from "@fewchurs/react/core";
+async function readDeviceId() {
+  const store = await cookies();
+  return store.get(DEVICE_ID_COOKIE)?.value ?? null;
+}
+async function resolveDeviceId(custom) {
+  if (custom) return custom();
+  return await readDeviceId() ?? createDeviceId();
+}
+function deviceIdCookie(deviceId) {
+  return {
+    name: DEVICE_ID_COOKIE,
+    value: deviceId,
+    options: {
+      httpOnly: true,
+      sameSite: "lax",
+      path: "/",
+      maxAge: DEVICE_ID_MAX_AGE,
+      secure: process.env.NODE_ENV === "production"
+    }
+  };
+}
+
+export {
+  createDeviceId,
+  readDeviceId,
+  resolveDeviceId,
+  deviceIdCookie
+};
+//# sourceMappingURL=chunk-QULKPZB4.mjs.map

package/dist/chunk-QULKPZB4.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/identity.ts"],"sourcesContent":["import \"server-only\";\nimport { cookies } from \"next/headers\";\nimport { createDeviceId } from \"@fewchurs/react/core\";\nimport { DEVICE_ID_COOKIE, DEVICE_ID_MAX_AGE } from \"./constants\";\n\nexport { DEVICE_ID_COOKIE, DEVICE_ID_MAX_AGE };\n\nexport type DeviceIdResolver = () => string | Promise<string>;\n\n/** The visitor's id, or null when nothing has been stored for them yet. */\nexport async function readDeviceId(): Promise<string | null> {\n  const store = await cookies();\n  return store.get(DEVICE_ID_COOKIE)?.value ?? null;\n}\n\n/**\n * Reads the cookie, falling back to a fresh id. The value is not persisted here: a server\n * component cannot set cookies, so the route handler stores it on the first request instead.\n */\nexport async function resolveDeviceId(custom?: DeviceIdResolver): Promise<string> {\n  if (custom) return custom();\n  return (await readDeviceId()) ?? createDeviceId();\n}\n\nexport function deviceIdCookie(deviceId: string): {\n  name: string;\n  value: string;\n  options: {\n    httpOnly: true;\n    sameSite: \"lax\";\n    path: string;\n    maxAge: number;\n    secure: boolean;\n  };\n} {\n  return {\n    name: DEVICE_ID_COOKIE,\n    value: deviceId,\n    options: {\n      httpOnly: true,\n      sameSite: \"lax\",\n      path: \"/\",\n      maxAge: DEVICE_ID_MAX_AGE,\n      secure: process.env.NODE_ENV === \"production\",\n    },\n  };\n}\n\nexport { createDeviceId };\n"],"mappings":";;;;;;AAAA,OAAO;AACP,SAAS,eAAe;AACxB,SAAS,sBAAsB;AAQ/B,eAAsB,eAAuC;AAC3D,QAAM,QAAQ,MAAM,QAAQ;AAC5B,SAAO,MAAM,IAAI,gBAAgB,GAAG,SAAS;AAC/C;AAMA,eAAsB,gBAAgB,QAA4C;AAChF,MAAI,OAAQ,QAAO,OAAO;AAC1B,SAAQ,MAAM,aAAa,KAAM,eAAe;AAClD;AAEO,SAAS,eAAe,UAU7B;AACA,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,SAAS;AAAA,MACP,UAAU;AAAA,MACV,UAAU;AAAA,MACV,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACnC;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-W6QR6DEB.mjs

@@ -0,0 +1,14 @@
+// src/version.ts
+var SDK_VERSION = "1.0.1";
+
+// src/constants.ts
+var DEVICE_ID_COOKIE = "fewchurs_did";
+var DEVICE_ID_MAX_AGE = 60 * 60 * 24 * 365;
+var SDK_HEADER = `next/${SDK_VERSION}`;
+
+export {
+  DEVICE_ID_COOKIE,
+  DEVICE_ID_MAX_AGE,
+  SDK_HEADER
+};
+//# sourceMappingURL=chunk-W6QR6DEB.mjs.map

package/dist/chunk-W6QR6DEB.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/version.ts","../src/constants.ts"],"sourcesContent":["// Generated by tools/stamp-version.mjs from @fewchurs/next's package.json. Do not edit by hand.\nexport const SDK_VERSION = \"1.0.1\";\n","import { SDK_VERSION } from \"./version\";\n\nexport const DEVICE_ID_COOKIE = \"fewchurs_did\";\nexport const DEVICE_ID_MAX_AGE = 60 * 60 * 24 * 365;\nexport { SDK_VERSION };\nexport const SDK_HEADER = `next/${SDK_VERSION}`;\n"],"mappings":";AACO,IAAM,cAAc;;;ACCpB,IAAM,mBAAmB;AACzB,IAAM,oBAAoB,KAAK,KAAK,KAAK;AAEzC,IAAM,aAAa,QAAQ,WAAW;","names":[]}

package/dist/handler.d.mts

@@ -0,0 +1,28 @@
+import { DeviceIdResolver } from './identity.mjs';
+import '@fewchurs/react/core';
+
+interface HandlerOptions {
+    apiKey?: string;
+    baseUrl?: string;
+    /** Where the handler is mounted, when it is not `/api/fewchurs`. */
+    apiPath?: string;
+    /** Return a stable, hashed id for the signed-in visitor so votes follow the account. */
+    deviceId?: DeviceIdResolver;
+}
+type RouteParams = {
+    route?: string[];
+};
+type RouteContext = {
+    params: Promise<RouteParams>;
+};
+type RouteHandler = (request: Request, context: RouteContext) => Promise<Response>;
+declare function createHandler(options?: HandlerOptions): {
+    GET: RouteHandler;
+    POST: RouteHandler;
+    DELETE: RouteHandler;
+};
+declare const GET: RouteHandler;
+declare const POST: RouteHandler;
+declare const DELETE: RouteHandler;
+
+export { DELETE, GET, type HandlerOptions, POST, type RouteHandler, createHandler };