@gradial/aci 0.1.30 → 0.1.31

package/bin/aci.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { spawn } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { chmodSync, existsSync } from 'node:fs';
 import { cp, mkdir, readdir, readFile, rename, stat, writeFile } from 'node:fs/promises';
 import { createRequire } from 'node:module';
 import { basename, dirname, join, relative, resolve } from 'node:path';
@@ -62,6 +62,9 @@ function resolveWorkspaceBinary() {
 }
 
 const binaryPath = resolveBundledBinary() ?? resolvePackagedBinary() ?? resolveWorkspaceBinary();
+if (binaryPath) {
+  try { chmodSync(binaryPath, 0o755); } catch {}
+}
 const fallback = binaryPath ? null : resolveGoFallback();
 
 if (!binaryPath && !fallback) {

package/dist/content/provider.d.ts

@@ -5,6 +5,13 @@ export interface RouteEntry {
     payloadRef: string;
     digest: string;
     fragmentRefs?: string[];
+    variants?: Record<string, RouteVariantEntry>;
+}
+export interface RouteVariantEntry {
+    variantKey: string;
+    payloadRef: string;
+    digest?: string;
+    variantValues?: Record<string, string>;
 }
 export interface FragmentEntry {
     id: string;

package/dist/next/server.js

@@ -10,6 +10,9 @@ export async function getPage(route = '', config = {}) {
     if (runtimeInput)
         return runtimeInput.page;
     const provider = await resolveProviderWithFallback(config);
+    const variantPage = await pageFromFunctionRef(provider);
+    if (variantPage !== null)
+        return variantPage;
     return await provider.getPage(route);
 }
 export async function getSiteConfig(config = {}) {
@@ -53,7 +56,7 @@ export async function getRenderInput(route = '/', config = {}) {
     // Cache shared resources (manifest, siteConfig) but not per-page content
     // Page-level caching is handled by CDN
     const [page, siteConfig] = await Promise.all([
-        provider.getPage(route),
+        pageFromFunctionRef(provider).then((variantPage) => variantPage ?? provider.getPage(route)),
         getCachedSiteConfig(provider),
     ]);
     return {
@@ -73,6 +76,28 @@ export async function getPageRuntimeRenderInput() {
         return null;
     }
 }
+// The personalization edge proxies framework-origin requests with
+// X-Baremetal-Function-Ref naming the exact page payload its decision
+// selected (base or variant). When present, the SSR render must use that
+// payload — otherwise every visitor gets the base page and edge decisioning
+// is cosmetic. The S3 provider only serves refs the release manifest
+// declares.
+const BAREMETAL_FUNCTION_REF_HEADER = 'x-baremetal-function-ref';
+async function pageFromFunctionRef(provider) {
+    if (!(provider instanceof S3ContentProvider))
+        return null;
+    let ref = '';
+    try {
+        const current = await headers();
+        ref = (current.get(BAREMETAL_FUNCTION_REF_HEADER) || '').trim();
+    }
+    catch {
+        return null;
+    }
+    if (!ref)
+        return null;
+    return await provider.getPageByRef(ref);
+}
 export { isPreviewMode } from './preview-mode.js';
 export async function routeFromNextParams(params) {
     if (!params)

package/dist/providers/s3.d.ts

@@ -16,6 +16,13 @@ export declare class S3ContentProvider implements ContentProvider {
     listRoutes(): Promise<RouteEntry[]>;
     getSiteConfig<T = unknown>(): Promise<T>;
     getPage<T = unknown>(route: string): Promise<T>;
+    /**
+     * getPageByRef serves the exact payload the edge selected (the
+     * X-Baremetal-Function-Ref contract): base page or variant. Only refs the
+     * release manifest declares are served — the header names published
+     * content, it cannot address arbitrary keys.
+     */
+    getPageByRef<T = unknown>(payloadRef: string): Promise<T>;
     getFragment<T = unknown>(id: string): Promise<T>;
     getLayout<T = unknown>(name: string): Promise<T>;
     manifest(): Promise<CompiledManifest>;

package/dist/providers/s3.js

@@ -32,6 +32,26 @@ export class S3ContentProvider {
             throw new PageNotFoundError(route, error);
         }
     }
+    /**
+     * getPageByRef serves the exact payload the edge selected (the
+     * X-Baremetal-Function-Ref contract): base page or variant. Only refs the
+     * release manifest declares are served — the header names published
+     * content, it cannot address arbitrary keys.
+     */
+    async getPageByRef(payloadRef) {
+        const manifest = await this.manifest();
+        const known = Object.values(manifest.routes).some((entry) => entry.payloadRef === payloadRef ||
+            Object.values(entry.variants ?? {}).some((variant) => variant.payloadRef === payloadRef));
+        if (!known) {
+            throw new PageNotFoundError(payloadRef);
+        }
+        try {
+            return await this.getJSON(payloadRef);
+        }
+        catch (error) {
+            throw new PageNotFoundError(payloadRef, error);
+        }
+    }
     async getFragment(id) {
         const manifest = await this.manifest();
         const entry = manifest.fragments[id];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradial/aci",
-  "version": "0.1.30",
+  "version": "0.1.31",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/templates/nextjs/template/package.json.tmpl

@@ -17,9 +17,7 @@
     "build:storybook": "storybook build"
   },
   "dependencies": {
-    "@c15t/nextjs": "^2.1.0",
     "@gradial/aci": "{{aciVersion}}",
-    "js-yaml": "^4.1.1",
     "next": "^15.1.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"

package/templates/nextjs/template/src/app/layout.tsx

@@ -1,8 +1,6 @@
 import type { ReactNode } from 'react';
 import { Inter, Space_Grotesk } from 'next/font/google';
 import { DevRefresh } from '@gradial/aci/next';
-import { ConsentManager } from '@/app/_components/ConsentManager';
-import '@c15t/nextjs/styles.css';
 import '@/design-system/styles.css';
 
 const inter = Inter({
@@ -23,7 +21,7 @@ export default function Layout({ children }: { children: ReactNode }) {
   return (
     <html lang="en" className={`${inter.variable} ${spaceGrotesk.variable}`}>
       <body>
-        <ConsentManager>{children}</ConsentManager>
+        {children}
         <DevRefresh />
       </body>
     </html>

package/templates/nextjs/template/src/app/_components/ConsentManager.tsx

@@ -1,132 +0,0 @@
-'use client';
-
-import {
-  ConsentBanner,
-  ConsentDialog,
-  ConsentManagerProvider,
-  useConsentManager,
-  type ConsentManagerProviderProps,
-} from '@c15t/nextjs';
-import { useEffect, useMemo, type ReactNode } from 'react';
-
-// Hosted c15t backend (consent.io or self-hosted). Unset = offline mode:
-// consent is stored client-side and no network calls are made.
-const C15T_BACKEND_URL = process.env.NEXT_PUBLIC_C15T_BACKEND_URL;
-
-// The CMP's own categories. The mapping from categories to the Gradial
-// personalization purpose lives in .content/config/site.json
-// (personalization.consentCategories), not here.
-const CONSENT_CATEGORIES = ['necessary', 'measurement', 'marketing'] as const;
-
-// ---------------------------------------------------------------------------
-// Gradial collect bridge
-//
-// The Gradial collect SDK's c15t preset (the site config's
-// `personalization.consentPreset: "c15t"`, emitted as
-// `data-aci-consent="c15t"` on the collect tag) reads
-// `window.c15t = { consents, onConsentChange }`. c15t itself does not
-// publish that shape, so this bridge mirrors the store onto it — only after
-// a real visitor decision (`consentInfo` set), never for pre-decision
-// defaults, so the SDK cannot mistake an untouched banner for a withdrawal.
-// ---------------------------------------------------------------------------
-
-type Consents = Record<string, boolean>;
-type ConsentListener = (payload: { consents: Consents }) => void;
-
-declare global {
-  interface Window {
-    c15t?: {
-      consents?: Consents;
-      onConsentChange?: (cb: ConsentListener) => void;
-    };
-  }
-}
-
-const consentListeners: ConsentListener[] = [];
-
-function publishAciConsents(consents: Consents): void {
-  const bridge = (window.c15t ??= {});
-  bridge.consents = consents;
-  bridge.onConsentChange ??= (cb: ConsentListener) => {
-    consentListeners.push(cb);
-  };
-  for (const listener of [...consentListeners]) {
-    listener({ consents });
-  }
-}
-
-function AciConsentBridge() {
-  const { consents, consentInfo } = useConsentManager();
-  useEffect(() => {
-    if (!consentInfo || !consents) return;
-    publishAciConsents(consents as Consents);
-  }, [consents, consentInfo]);
-  return null;
-}
-
-// ---------------------------------------------------------------------------
-// Consent manager
-// ---------------------------------------------------------------------------
-
-function getConsentOptions(): ConsentManagerProviderProps['options'] {
-  const baseOptions = {
-    consentCategories: [...CONSENT_CATEGORIES],
-    legalLinks: {
-      privacyPolicy: {
-        href: '/privacy/',
-        target: '_self' as const,
-        label: 'Privacy policy',
-      },
-    },
-  };
-
-  if (C15T_BACKEND_URL) {
-    return {
-      ...baseOptions,
-      mode: 'hosted',
-      backendURL: C15T_BACKEND_URL,
-    };
-  }
-
-  return {
-    ...baseOptions,
-    mode: 'offline',
-    offlinePolicy: {
-      policyPacks: [
-        {
-          id: 'default-opt-in',
-          match: { isDefault: true },
-          consent: {
-            model: 'opt-in',
-            categories: [...CONSENT_CATEGORIES],
-          },
-          ui: { mode: 'banner' },
-        },
-      ],
-    },
-  };
-}
-
-export function ConsentManager({ children }: { children: ReactNode }) {
-  const options = useMemo(() => getConsentOptions(), []);
-
-  return (
-    <ConsentManagerProvider options={options}>
-      {children}
-      <AciConsentBridge />
-      <ConsentBanner
-        title="Cookie preferences"
-        description="We use cookies to keep the site working, measure performance, and support marketing."
-        acceptButtonText="Accept all"
-        rejectButtonText="Reject all"
-        customizeButtonText="Customize"
-        legalLinks={['privacyPolicy']}
-        layout={[['reject', 'accept'], 'customize']}
-        primaryButton="accept"
-        scrollLock={false}
-        hideBranding
-      />
-      <ConsentDialog legalLinks={['privacyPolicy']} scrollLock trapFocus hideBranding />
-    </ConsentManagerProvider>
-  );
-}