@infuro/cms-core 1.0.15 → 1.0.16

package/dist/hooks.cjs

@@ -30,8 +30,10 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/hooks/index.ts
 var hooks_exports = {};
 __export(hooks_exports, {
+  CaptchaProvider: () => CaptchaProvider,
   PluginProvider: () => PluginProvider,
   useAnalytics: () => useAnalytics,
+  useCaptchaPayload: () => useCaptchaPayload,
   useIsMobile: () => useIsMobile,
   usePlugin: () => usePlugin
 });
@@ -84,10 +86,167 @@ function usePlugin(name) {
   if (!ctx) return void 0;
   return ctx.getPlugin(name);
 }
+
+// src/components/CaptchaProvider.tsx
+var import_react4 = require("react");
+var import_jsx_runtime = require("react/jsx-runtime");
+var CaptchaReactContext = (0, import_react4.createContext)(null);
+function loadScript(src) {
+  return new Promise((resolve, reject) => {
+    const base = src.split("?")[0] ?? src;
+    const existing = Array.from(document.querySelectorAll("script[src]")).some(
+      (el) => el.src.startsWith(base)
+    );
+    if (existing) {
+      resolve();
+      return;
+    }
+    const s = document.createElement("script");
+    s.src = src;
+    s.async = true;
+    s.onload = () => resolve();
+    s.onerror = () => reject(new Error("Failed to load script"));
+    document.head.appendChild(s);
+  });
+}
+function CaptchaProvider({ children }) {
+  const [config, setConfig] = (0, import_react4.useState)(null);
+  const [selectedProvider, setSelectedProvider] = (0, import_react4.useState)(null);
+  const [ready, setReady] = (0, import_react4.useState)(false);
+  const turnstileWidgetIdRef = (0, import_react4.useRef)(null);
+  const turnstileContainerRef = (0, import_react4.useRef)(null);
+  const turnstileTokenRef = (0, import_react4.useRef)(null);
+  (0, import_react4.useEffect)(() => {
+    let cancelled = false;
+    fetch("/api/public/captcha-config").then((r) => r.ok ? r.json() : null).then((c) => {
+      if (cancelled || !c) return;
+      setConfig(c);
+      if (c.enabled && c.activeProvider) setSelectedProvider(c.activeProvider);
+    }).catch(() => {
+    }).finally(() => {
+      if (!cancelled) setReady(true);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+  (0, import_react4.useEffect)(() => {
+    if (!config?.enabled || !selectedProvider) return;
+    const siteKeyFor = config.availableProviders.find((p) => p.id === selectedProvider)?.siteKey;
+    if (!siteKeyFor) return;
+    let cancelled = false;
+    (async () => {
+      try {
+        if (selectedProvider === "recaptcha_v3") {
+          await loadScript(
+            `https://www.google.com/recaptcha/api.js?render=${encodeURIComponent(siteKeyFor)}`
+          );
+        } else {
+          await loadScript("https://challenges.cloudflare.com/turnstile/v0/api.js");
+          if (cancelled || !turnstileContainerRef.current || !window.turnstile) return;
+          if (turnstileWidgetIdRef.current) {
+            try {
+              window.turnstile.remove(turnstileWidgetIdRef.current);
+            } catch {
+            }
+            turnstileWidgetIdRef.current = null;
+          }
+          const wid = window.turnstile.render(turnstileContainerRef.current, {
+            sitekey: siteKeyFor,
+            execution: "execute",
+            callback: (token) => {
+              const p = turnstileTokenRef.current;
+              turnstileTokenRef.current = null;
+              p?.resolve(token);
+            },
+            "error-callback": () => {
+              const p = turnstileTokenRef.current;
+              turnstileTokenRef.current = null;
+              p?.reject(new Error("Turnstile error"));
+            },
+            "expired-callback": () => {
+              const p = turnstileTokenRef.current;
+              turnstileTokenRef.current = null;
+              p?.reject(new Error("Turnstile expired"));
+            }
+          });
+          turnstileWidgetIdRef.current = wid;
+        }
+      } catch {
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [config, selectedProvider]);
+  const getCaptchaPayload = (0, import_react4.useCallback)(async () => {
+    if (!config?.enabled || !selectedProvider) return {};
+    const siteKeyFor = config.availableProviders.find((p) => p.id === selectedProvider)?.siteKey;
+    if (!siteKeyFor) return {};
+    if (selectedProvider === "recaptcha_v3") {
+      if (!window.grecaptcha) return {};
+      const token2 = await new Promise((resolve, reject) => {
+        window.grecaptcha.ready(() => {
+          window.grecaptcha.execute(siteKeyFor, { action: "submit" }).then(resolve).catch(reject);
+        });
+      });
+      return { captchaToken: token2, captchaProvider: "recaptcha_v3" };
+    }
+    const wid = turnstileWidgetIdRef.current;
+    if (!wid || !window.turnstile) return {};
+    const token = await new Promise((resolve, reject) => {
+      turnstileTokenRef.current = { resolve, reject };
+      try {
+        window.turnstile.reset(wid);
+        window.turnstile.execute(wid);
+      } catch (e) {
+        turnstileTokenRef.current = null;
+        reject(e instanceof Error ? e : new Error("Turnstile execute failed"));
+      }
+    });
+    return { captchaToken: token, captchaProvider: "turnstile" };
+  }, [config, selectedProvider]);
+  const ctx = (0, import_react4.useMemo)(
+    () => ({
+      config,
+      ready,
+      selectedProvider,
+      setSelectedProvider,
+      getCaptchaPayload
+    }),
+    [config, ready, selectedProvider, getCaptchaPayload]
+  );
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(CaptchaReactContext.Provider, { value: ctx, children: [
+    config?.enabled && config.multipleProviders ? /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { className: "mb-2 text-sm text-muted-foreground max-w-md", children: [
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)("label", { className: "mr-2", htmlFor: "captcha-provider-select", children: "Verification" }),
+      /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+        "select",
+        {
+          id: "captcha-provider-select",
+          className: "border rounded px-2 py-1 bg-background",
+          value: selectedProvider ?? "",
+          onChange: (e) => setSelectedProvider(e.target.value),
+          children: config.availableProviders.map((p) => /* @__PURE__ */ (0, import_jsx_runtime.jsx)("option", { value: p.id, children: p.id === "turnstile" ? "Cloudflare Turnstile" : "Google reCAPTCHA v3" }, p.id))
+        }
+      )
+    ] }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime.jsx)("div", { ref: turnstileContainerRef, className: "hidden", "aria-hidden": true }),
+    children
+  ] });
+}
+function useCaptchaPayload() {
+  const ctx = (0, import_react4.useContext)(CaptchaReactContext);
+  return (0, import_react4.useCallback)(async () => {
+    if (!ctx?.config?.enabled || !ctx.ready) return {};
+    return ctx.getCaptchaPayload();
+  }, [ctx]);
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  CaptchaProvider,
   PluginProvider,
   useAnalytics,
+  useCaptchaPayload,
   useIsMobile,
   usePlugin
 });

package/dist/hooks.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hooks/index.ts","../src/hooks/use-mobile.ts","../src/hooks/use-analytics.ts","../src/hooks/use-plugin.ts"],"sourcesContent":["export { useIsMobile } from './use-mobile';\nexport { useAnalytics } from './use-analytics';\nexport { usePlugin, PluginProvider } from './use-plugin';\n","import { useState, useEffect } from 'react';\n\nconst MOBILE_BREAKPOINT = 768;\n\nexport function useIsMobile(): boolean {\n  const [isMobile, setIsMobile] = useState<boolean | undefined>(undefined);\n\n  useEffect(() => {\n    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);\n    const onChange = () => setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    mql.addEventListener('change', onChange);\n    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    return () => mql.removeEventListener('change', onChange);\n  }, []);\n\n  return !!isMobile;\n}\n","import { useEffect } from 'react';\n\n/**\n * Call from app with pathname from usePathname() (next/navigation).\n * Disables tracking on admin routes when pathname starts with /admin.\n */\nexport function useAnalytics(pathname: string | null): { isAdminRoute: boolean; shouldTrack: boolean } {\n  const isAdminRoute = pathname != null && pathname.startsWith('/admin');\n\n  useEffect(() => {\n    if (isAdminRoute && typeof window !== 'undefined') {\n      if (typeof (window as unknown as { gtag?: () => void }).gtag === 'function') {\n        (window as unknown as { gtag: () => void }).gtag = () => {};\n      }\n      if (Array.isArray((window as unknown as { dataLayer?: unknown[] }).dataLayer)) {\n        (window as unknown as { dataLayer: unknown[] }).dataLayer = [];\n      }\n    }\n  }, [isAdminRoute]);\n\n  return { isAdminRoute, shouldTrack: !isAdminRoute };\n}\n","import React, { createContext, useContext, type ReactNode } from 'react';\n\nconst PluginContext = createContext<{ getPlugin: <T>(name: string) => T | undefined } | null>(null);\n\nexport function PluginProvider({\n  getPlugin,\n  children,\n}: {\n  getPlugin: <T>(name: string) => T | undefined;\n  children: ReactNode;\n}) {\n  return React.createElement(PluginContext.Provider, { value: { getPlugin } }, children);\n}\n\nexport function usePlugin<T = unknown>(name: string): T | undefined {\n  const ctx = useContext(PluginContext);\n  if (!ctx) return undefined;\n  return ctx.getPlugin<T>(name);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,mBAAoC;AAEpC,IAAM,oBAAoB;AAEnB,SAAS,cAAuB;AACrC,QAAM,CAAC,UAAU,WAAW,QAAI,uBAA8B,MAAS;AAEvE,8BAAU,MAAM;AACd,UAAM,MAAM,OAAO,WAAW,eAAe,oBAAoB,CAAC,KAAK;AACvE,UAAM,WAAW,MAAM,YAAY,OAAO,aAAa,iBAAiB;AACxE,QAAI,iBAAiB,UAAU,QAAQ;AACvC,gBAAY,OAAO,aAAa,iBAAiB;AACjD,WAAO,MAAM,IAAI,oBAAoB,UAAU,QAAQ;AAAA,EACzD,GAAG,CAAC,CAAC;AAEL,SAAO,CAAC,CAAC;AACX;;;AChBA,IAAAA,gBAA0B;AAMnB,SAAS,aAAa,UAA0E;AACrG,QAAM,eAAe,YAAY,QAAQ,SAAS,WAAW,QAAQ;AAErE,+BAAU,MAAM;AACd,QAAI,gBAAgB,OAAO,WAAW,aAAa;AACjD,UAAI,OAAQ,OAA4C,SAAS,YAAY;AAC3E,QAAC,OAA2C,OAAO,MAAM;AAAA,QAAC;AAAA,MAC5D;AACA,UAAI,MAAM,QAAS,OAAgD,SAAS,GAAG;AAC7E,QAAC,OAA+C,YAAY,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO,EAAE,cAAc,aAAa,CAAC,aAAa;AACpD;;;ACrBA,IAAAC,gBAAiE;AAEjE,IAAM,oBAAgB,6BAAwE,IAAI;AAE3F,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAGG;AACD,SAAO,cAAAC,QAAM,cAAc,cAAc,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,QAAQ;AACvF;AAEO,SAAS,UAAuB,MAA6B;AAClE,QAAM,UAAM,0BAAW,aAAa;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,UAAa,IAAI;AAC9B;","names":["import_react","import_react","React"]}
+{"version":3,"sources":["../src/hooks/index.ts","../src/hooks/use-mobile.ts","../src/hooks/use-analytics.ts","../src/hooks/use-plugin.ts","../src/components/CaptchaProvider.tsx"],"sourcesContent":["export { useIsMobile } from './use-mobile';\nexport { useAnalytics } from './use-analytics';\nexport { usePlugin, PluginProvider } from './use-plugin';\nexport { CaptchaProvider, useCaptchaPayload } from '../components/CaptchaProvider';\n","import { useState, useEffect } from 'react';\n\nconst MOBILE_BREAKPOINT = 768;\n\nexport function useIsMobile(): boolean {\n  const [isMobile, setIsMobile] = useState<boolean | undefined>(undefined);\n\n  useEffect(() => {\n    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);\n    const onChange = () => setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    mql.addEventListener('change', onChange);\n    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    return () => mql.removeEventListener('change', onChange);\n  }, []);\n\n  return !!isMobile;\n}\n","import { useEffect } from 'react';\n\n/**\n * Call from app with pathname from usePathname() (next/navigation).\n * Disables tracking on admin routes when pathname starts with /admin.\n */\nexport function useAnalytics(pathname: string | null): { isAdminRoute: boolean; shouldTrack: boolean } {\n  const isAdminRoute = pathname != null && pathname.startsWith('/admin');\n\n  useEffect(() => {\n    if (isAdminRoute && typeof window !== 'undefined') {\n      if (typeof (window as unknown as { gtag?: () => void }).gtag === 'function') {\n        (window as unknown as { gtag: () => void }).gtag = () => {};\n      }\n      if (Array.isArray((window as unknown as { dataLayer?: unknown[] }).dataLayer)) {\n        (window as unknown as { dataLayer: unknown[] }).dataLayer = [];\n      }\n    }\n  }, [isAdminRoute]);\n\n  return { isAdminRoute, shouldTrack: !isAdminRoute };\n}\n","import React, { createContext, useContext, type ReactNode } from 'react';\n\nconst PluginContext = createContext<{ getPlugin: <T>(name: string) => T | undefined } | null>(null);\n\nexport function PluginProvider({\n  getPlugin,\n  children,\n}: {\n  getPlugin: <T>(name: string) => T | undefined;\n  children: ReactNode;\n}) {\n  return React.createElement(PluginContext.Provider, { value: { getPlugin } }, children);\n}\n\nexport function usePlugin<T = unknown>(name: string): T | undefined {\n  const ctx = useContext(PluginContext);\n  if (!ctx) return undefined;\n  return ctx.getPlugin<T>(name);\n}\n","'use client';\n\nimport React, {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from 'react';\nimport type { CaptchaPublicConfig, CaptchaProviderId } from '../plugins/captcha';\n\ndeclare global {\n  interface Window {\n    turnstile?: {\n      render: (el: HTMLElement | string, opts: Record<string, unknown>) => string;\n      execute: (id: string) => void;\n      reset: (id: string) => void;\n      remove: (id: string) => void;\n    };\n    grecaptcha?: {\n      ready: (fn: () => void) => void;\n      execute: (siteKey: string, opts: { action: string }) => Promise<string>;\n    };\n  }\n}\n\ntype CaptchaCtx = {\n  config: CaptchaPublicConfig | null;\n  ready: boolean;\n  selectedProvider: CaptchaProviderId | null;\n  setSelectedProvider: (p: CaptchaProviderId) => void;\n  getCaptchaPayload: () => Promise<Record<string, string>>;\n};\n\nconst CaptchaReactContext = createContext<CaptchaCtx | null>(null);\n\nfunction loadScript(src: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const base = src.split('?')[0] ?? src;\n    const existing = Array.from(document.querySelectorAll('script[src]')).some((el) =>\n      (el as HTMLScriptElement).src.startsWith(base)\n    );\n    if (existing) {\n      resolve();\n      return;\n    }\n    const s = document.createElement('script');\n    s.src = src;\n    s.async = true;\n    s.onload = () => resolve();\n    s.onerror = () => reject(new Error('Failed to load script'));\n    document.head.appendChild(s);\n  });\n}\n\nexport function CaptchaProvider({ children }: { children: React.ReactNode }) {\n  const [config, setConfig] = useState<CaptchaPublicConfig | null>(null);\n  const [selectedProvider, setSelectedProvider] = useState<CaptchaProviderId | null>(null);\n  const [ready, setReady] = useState(false);\n  const turnstileWidgetIdRef = useRef<string | null>(null);\n  const turnstileContainerRef = useRef<HTMLDivElement | null>(null);\n  const turnstileTokenRef = useRef<{\n    resolve: (t: string) => void;\n    reject: (e: Error) => void;\n  } | null>(null);\n\n  useEffect(() => {\n    let cancelled = false;\n    fetch('/api/public/captcha-config')\n      .then((r) => (r.ok ? r.json() : null))\n      .then((c: CaptchaPublicConfig | null) => {\n        if (cancelled || !c) return;\n        setConfig(c);\n        if (c.enabled && c.activeProvider) setSelectedProvider(c.activeProvider);\n      })\n      .catch(() => {})\n      .finally(() => {\n        if (!cancelled) setReady(true);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, []);\n\n  useEffect(() => {\n    if (!config?.enabled || !selectedProvider) return;\n    const siteKeyFor = config.availableProviders.find((p) => p.id === selectedProvider)?.siteKey;\n    if (!siteKeyFor) return;\n\n    let cancelled = false;\n    (async () => {\n      try {\n        if (selectedProvider === 'recaptcha_v3') {\n          await loadScript(\n            `https://www.google.com/recaptcha/api.js?render=${encodeURIComponent(siteKeyFor)}`\n          );\n        } else {\n          await loadScript('https://challenges.cloudflare.com/turnstile/v0/api.js');\n          if (cancelled || !turnstileContainerRef.current || !window.turnstile) return;\n          if (turnstileWidgetIdRef.current) {\n            try {\n              window.turnstile.remove(turnstileWidgetIdRef.current);\n            } catch {\n              /* ignore */\n            }\n            turnstileWidgetIdRef.current = null;\n          }\n          const wid = window.turnstile.render(turnstileContainerRef.current, {\n            sitekey: siteKeyFor,\n            execution: 'execute',\n            callback: (token: string) => {\n              const p = turnstileTokenRef.current;\n              turnstileTokenRef.current = null;\n              p?.resolve(token);\n            },\n            'error-callback': () => {\n              const p = turnstileTokenRef.current;\n              turnstileTokenRef.current = null;\n              p?.reject(new Error('Turnstile error'));\n            },\n            'expired-callback': () => {\n              const p = turnstileTokenRef.current;\n              turnstileTokenRef.current = null;\n              p?.reject(new Error('Turnstile expired'));\n            },\n          });\n          turnstileWidgetIdRef.current = wid;\n        }\n      } catch {\n        /* ignore */\n      }\n    })();\n    return () => {\n      cancelled = true;\n    };\n  }, [config, selectedProvider]);\n\n  const getCaptchaPayload = useCallback(async (): Promise<Record<string, string>> => {\n    if (!config?.enabled || !selectedProvider) return {};\n    const siteKeyFor = config.availableProviders.find((p) => p.id === selectedProvider)?.siteKey;\n    if (!siteKeyFor) return {};\n\n    if (selectedProvider === 'recaptcha_v3') {\n      if (!window.grecaptcha) return {};\n      const token = await new Promise<string>((resolve, reject) => {\n        window.grecaptcha!.ready(() => {\n          window.grecaptcha!.execute(siteKeyFor, { action: 'submit' }).then(resolve).catch(reject);\n        });\n      });\n      return { captchaToken: token, captchaProvider: 'recaptcha_v3' };\n    }\n\n    const wid = turnstileWidgetIdRef.current;\n    if (!wid || !window.turnstile) return {};\n    const token = await new Promise<string>((resolve, reject) => {\n      turnstileTokenRef.current = { resolve, reject };\n      try {\n        window.turnstile!.reset(wid);\n        window.turnstile!.execute(wid);\n      } catch (e) {\n        turnstileTokenRef.current = null;\n        reject(e instanceof Error ? e : new Error('Turnstile execute failed'));\n      }\n    });\n    return { captchaToken: token, captchaProvider: 'turnstile' };\n  }, [config, selectedProvider]);\n\n  const ctx = useMemo<CaptchaCtx>(\n    () => ({\n      config,\n      ready,\n      selectedProvider,\n      setSelectedProvider,\n      getCaptchaPayload,\n    }),\n    [config, ready, selectedProvider, getCaptchaPayload]\n  );\n\n  return (\n    <CaptchaReactContext.Provider value={ctx}>\n      {config?.enabled && config.multipleProviders ? (\n        <div className=\"mb-2 text-sm text-muted-foreground max-w-md\">\n          <label className=\"mr-2\" htmlFor=\"captcha-provider-select\">\n            Verification\n          </label>\n          <select\n            id=\"captcha-provider-select\"\n            className=\"border rounded px-2 py-1 bg-background\"\n            value={selectedProvider ?? ''}\n            onChange={(e) => setSelectedProvider(e.target.value as CaptchaProviderId)}\n          >\n            {config.availableProviders.map((p) => (\n              <option key={p.id} value={p.id}>\n                {p.id === 'turnstile' ? 'Cloudflare Turnstile' : 'Google reCAPTCHA v3'}\n              </option>\n            ))}\n          </select>\n        </div>\n      ) : null}\n      <div ref={turnstileContainerRef} className=\"hidden\" aria-hidden />\n      {children}\n    </CaptchaReactContext.Provider>\n  );\n}\n\n/** Returns a function that resolves to captcha fields for JSON bodies, or {} if disabled / not ready. */\nexport function useCaptchaPayload(): () => Promise<Record<string, string>> {\n  const ctx = useContext(CaptchaReactContext);\n  return useCallback(async () => {\n    if (!ctx?.config?.enabled || !ctx.ready) return {};\n    return ctx.getCaptchaPayload();\n  }, [ctx]);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,mBAAoC;AAEpC,IAAM,oBAAoB;AAEnB,SAAS,cAAuB;AACrC,QAAM,CAAC,UAAU,WAAW,QAAI,uBAA8B,MAAS;AAEvE,8BAAU,MAAM;AACd,UAAM,MAAM,OAAO,WAAW,eAAe,oBAAoB,CAAC,KAAK;AACvE,UAAM,WAAW,MAAM,YAAY,OAAO,aAAa,iBAAiB;AACxE,QAAI,iBAAiB,UAAU,QAAQ;AACvC,gBAAY,OAAO,aAAa,iBAAiB;AACjD,WAAO,MAAM,IAAI,oBAAoB,UAAU,QAAQ;AAAA,EACzD,GAAG,CAAC,CAAC;AAEL,SAAO,CAAC,CAAC;AACX;;;AChBA,IAAAA,gBAA0B;AAMnB,SAAS,aAAa,UAA0E;AACrG,QAAM,eAAe,YAAY,QAAQ,SAAS,WAAW,QAAQ;AAErE,+BAAU,MAAM;AACd,QAAI,gBAAgB,OAAO,WAAW,aAAa;AACjD,UAAI,OAAQ,OAA4C,SAAS,YAAY;AAC3E,QAAC,OAA2C,OAAO,MAAM;AAAA,QAAC;AAAA,MAC5D;AACA,UAAI,MAAM,QAAS,OAAgD,SAAS,GAAG;AAC7E,QAAC,OAA+C,YAAY,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO,EAAE,cAAc,aAAa,CAAC,aAAa;AACpD;;;ACrBA,IAAAC,gBAAiE;AAEjE,IAAM,oBAAgB,6BAAwE,IAAI;AAE3F,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAGG;AACD,SAAO,cAAAC,QAAM,cAAc,cAAc,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,QAAQ;AACvF;AAEO,SAAS,UAAuB,MAA6B;AAClE,QAAM,UAAM,0BAAW,aAAa;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,UAAa,IAAI;AAC9B;;;AChBA,IAAAC,gBAQO;AA6KC;AAnJR,IAAM,0BAAsB,6BAAiC,IAAI;AAEjE,SAAS,WAAW,KAA4B;AAC9C,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,OAAO,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAClC,UAAM,WAAW,MAAM,KAAK,SAAS,iBAAiB,aAAa,CAAC,EAAE;AAAA,MAAK,CAAC,OACzE,GAAyB,IAAI,WAAW,IAAI;AAAA,IAC/C;AACA,QAAI,UAAU;AACZ,cAAQ;AACR;AAAA,IACF;AACA,UAAM,IAAI,SAAS,cAAc,QAAQ;AACzC,MAAE,MAAM;AACR,MAAE,QAAQ;AACV,MAAE,SAAS,MAAM,QAAQ;AACzB,MAAE,UAAU,MAAM,OAAO,IAAI,MAAM,uBAAuB,CAAC;AAC3D,aAAS,KAAK,YAAY,CAAC;AAAA,EAC7B,CAAC;AACH;AAEO,SAAS,gBAAgB,EAAE,SAAS,GAAkC;AAC3E,QAAM,CAAC,QAAQ,SAAS,QAAI,wBAAqC,IAAI;AACrE,QAAM,CAAC,kBAAkB,mBAAmB,QAAI,wBAAmC,IAAI;AACvF,QAAM,CAAC,OAAO,QAAQ,QAAI,wBAAS,KAAK;AACxC,QAAM,2BAAuB,sBAAsB,IAAI;AACvD,QAAM,4BAAwB,sBAA8B,IAAI;AAChE,QAAM,wBAAoB,sBAGhB,IAAI;AAEd,+BAAU,MAAM;AACd,QAAI,YAAY;AAChB,UAAM,4BAA4B,EAC/B,KAAK,CAAC,MAAO,EAAE,KAAK,EAAE,KAAK,IAAI,IAAK,EACpC,KAAK,CAAC,MAAkC;AACvC,UAAI,aAAa,CAAC,EAAG;AACrB,gBAAU,CAAC;AACX,UAAI,EAAE,WAAW,EAAE,eAAgB,qBAAoB,EAAE,cAAc;AAAA,IACzE,CAAC,EACA,MAAM,MAAM;AAAA,IAAC,CAAC,EACd,QAAQ,MAAM;AACb,UAAI,CAAC,UAAW,UAAS,IAAI;AAAA,IAC/B,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,+BAAU,MAAM;AACd,QAAI,CAAC,QAAQ,WAAW,CAAC,iBAAkB;AAC3C,UAAM,aAAa,OAAO,mBAAmB,KAAK,CAAC,MAAM,EAAE,OAAO,gBAAgB,GAAG;AACrF,QAAI,CAAC,WAAY;AAEjB,QAAI,YAAY;AAChB,KAAC,YAAY;AACX,UAAI;AACF,YAAI,qBAAqB,gBAAgB;AACvC,gBAAM;AAAA,YACJ,kDAAkD,mBAAmB,UAAU,CAAC;AAAA,UAClF;AAAA,QACF,OAAO;AACL,gBAAM,WAAW,uDAAuD;AACxE,cAAI,aAAa,CAAC,sBAAsB,WAAW,CAAC,OAAO,UAAW;AACtE,cAAI,qBAAqB,SAAS;AAChC,gBAAI;AACF,qBAAO,UAAU,OAAO,qBAAqB,OAAO;AAAA,YACtD,QAAQ;AAAA,YAER;AACA,iCAAqB,UAAU;AAAA,UACjC;AACA,gBAAM,MAAM,OAAO,UAAU,OAAO,sBAAsB,SAAS;AAAA,YACjE,SAAS;AAAA,YACT,WAAW;AAAA,YACX,UAAU,CAAC,UAAkB;AAC3B,oBAAM,IAAI,kBAAkB;AAC5B,gCAAkB,UAAU;AAC5B,iBAAG,QAAQ,KAAK;AAAA,YAClB;AAAA,YACA,kBAAkB,MAAM;AACtB,oBAAM,IAAI,kBAAkB;AAC5B,gCAAkB,UAAU;AAC5B,iBAAG,OAAO,IAAI,MAAM,iBAAiB,CAAC;AAAA,YACxC;AAAA,YACA,oBAAoB,MAAM;AACxB,oBAAM,IAAI,kBAAkB;AAC5B,gCAAkB,UAAU;AAC5B,iBAAG,OAAO,IAAI,MAAM,mBAAmB,CAAC;AAAA,YAC1C;AAAA,UACF,CAAC;AACD,+BAAqB,UAAU;AAAA,QACjC;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF,GAAG;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,QAAQ,gBAAgB,CAAC;AAE7B,QAAM,wBAAoB,2BAAY,YAA6C;AACjF,QAAI,CAAC,QAAQ,WAAW,CAAC,iBAAkB,QAAO,CAAC;AACnD,UAAM,aAAa,OAAO,mBAAmB,KAAK,CAAC,MAAM,EAAE,OAAO,gBAAgB,GAAG;AACrF,QAAI,CAAC,WAAY,QAAO,CAAC;AAEzB,QAAI,qBAAqB,gBAAgB;AACvC,UAAI,CAAC,OAAO,WAAY,QAAO,CAAC;AAChC,YAAMC,SAAQ,MAAM,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC3D,eAAO,WAAY,MAAM,MAAM;AAC7B,iBAAO,WAAY,QAAQ,YAAY,EAAE,QAAQ,SAAS,CAAC,EAAE,KAAK,OAAO,EAAE,MAAM,MAAM;AAAA,QACzF,CAAC;AAAA,MACH,CAAC;AACD,aAAO,EAAE,cAAcA,QAAO,iBAAiB,eAAe;AAAA,IAChE;AAEA,UAAM,MAAM,qBAAqB;AACjC,QAAI,CAAC,OAAO,CAAC,OAAO,UAAW,QAAO,CAAC;AACvC,UAAM,QAAQ,MAAM,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC3D,wBAAkB,UAAU,EAAE,SAAS,OAAO;AAC9C,UAAI;AACF,eAAO,UAAW,MAAM,GAAG;AAC3B,eAAO,UAAW,QAAQ,GAAG;AAAA,MAC/B,SAAS,GAAG;AACV,0BAAkB,UAAU;AAC5B,eAAO,aAAa,QAAQ,IAAI,IAAI,MAAM,0BAA0B,CAAC;AAAA,MACvE;AAAA,IACF,CAAC;AACD,WAAO,EAAE,cAAc,OAAO,iBAAiB,YAAY;AAAA,EAC7D,GAAG,CAAC,QAAQ,gBAAgB,CAAC;AAE7B,QAAM,UAAM;AAAA,IACV,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,OAAO,kBAAkB,iBAAiB;AAAA,EACrD;AAEA,SACE,6CAAC,oBAAoB,UAApB,EAA6B,OAAO,KAClC;AAAA,YAAQ,WAAW,OAAO,oBACzB,6CAAC,SAAI,WAAU,+CACb;AAAA,kDAAC,WAAM,WAAU,QAAO,SAAQ,2BAA0B,0BAE1D;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,WAAU;AAAA,UACV,OAAO,oBAAoB;AAAA,UAC3B,UAAU,CAAC,MAAM,oBAAoB,EAAE,OAAO,KAA0B;AAAA,UAEvE,iBAAO,mBAAmB,IAAI,CAAC,MAC9B,4CAAC,YAAkB,OAAO,EAAE,IACzB,YAAE,OAAO,cAAc,yBAAyB,yBADtC,EAAE,EAEf,CACD;AAAA;AAAA,MACH;AAAA,OACF,IACE;AAAA,IACJ,4CAAC,SAAI,KAAK,uBAAuB,WAAU,UAAS,eAAW,MAAC;AAAA,IAC/D;AAAA,KACH;AAEJ;AAGO,SAAS,oBAA2D;AACzE,QAAM,UAAM,0BAAW,mBAAmB;AAC1C,aAAO,2BAAY,YAAY;AAC7B,QAAI,CAAC,KAAK,QAAQ,WAAW,CAAC,IAAI,MAAO,QAAO,CAAC;AACjD,WAAO,IAAI,kBAAkB;AAAA,EAC/B,GAAG,CAAC,GAAG,CAAC;AACV;","names":["import_react","import_react","React","import_react","token"]}

package/dist/hooks.d.cts

@@ -1,4 +1,5 @@
 import React, { ReactNode } from 'react';
+import * as react_jsx_runtime from 'react/jsx-runtime';
 
 declare function useIsMobile(): boolean;
 
@@ -19,4 +20,26 @@ declare function PluginProvider({ getPlugin, children, }: {
 } | null>>;
 declare function usePlugin<T = unknown>(name: string): T | undefined;
 
-export { PluginProvider, useAnalytics, useIsMobile, usePlugin };
+declare global {
+    interface Window {
+        turnstile?: {
+            render: (el: HTMLElement | string, opts: Record<string, unknown>) => string;
+            execute: (id: string) => void;
+            reset: (id: string) => void;
+            remove: (id: string) => void;
+        };
+        grecaptcha?: {
+            ready: (fn: () => void) => void;
+            execute: (siteKey: string, opts: {
+                action: string;
+            }) => Promise<string>;
+        };
+    }
+}
+declare function CaptchaProvider({ children }: {
+    children: React.ReactNode;
+}): react_jsx_runtime.JSX.Element;
+/** Returns a function that resolves to captcha fields for JSON bodies, or {} if disabled / not ready. */
+declare function useCaptchaPayload(): () => Promise<Record<string, string>>;
+
+export { CaptchaProvider, PluginProvider, useAnalytics, useCaptchaPayload, useIsMobile, usePlugin };

package/dist/hooks.d.ts

@@ -1,4 +1,5 @@
 import React, { ReactNode } from 'react';
+import * as react_jsx_runtime from 'react/jsx-runtime';
 
 declare function useIsMobile(): boolean;
 
@@ -19,4 +20,26 @@ declare function PluginProvider({ getPlugin, children, }: {
 } | null>>;
 declare function usePlugin<T = unknown>(name: string): T | undefined;
 
-export { PluginProvider, useAnalytics, useIsMobile, usePlugin };
+declare global {
+    interface Window {
+        turnstile?: {
+            render: (el: HTMLElement | string, opts: Record<string, unknown>) => string;
+            execute: (id: string) => void;
+            reset: (id: string) => void;
+            remove: (id: string) => void;
+        };
+        grecaptcha?: {
+            ready: (fn: () => void) => void;
+            execute: (siteKey: string, opts: {
+                action: string;
+            }) => Promise<string>;
+        };
+    }
+}
+declare function CaptchaProvider({ children }: {
+    children: React.ReactNode;
+}): react_jsx_runtime.JSX.Element;
+/** Returns a function that resolves to captcha fields for JSON bodies, or {} if disabled / not ready. */
+declare function useCaptchaPayload(): () => Promise<Record<string, string>>;
+
+export { CaptchaProvider, PluginProvider, useAnalytics, useCaptchaPayload, useIsMobile, usePlugin };

package/dist/hooks.js

@@ -45,9 +45,174 @@ function usePlugin(name) {
   if (!ctx) return void 0;
   return ctx.getPlugin(name);
 }
+
+// src/components/CaptchaProvider.tsx
+import {
+  createContext as createContext2,
+  useCallback,
+  useContext as useContext2,
+  useEffect as useEffect3,
+  useMemo,
+  useRef,
+  useState as useState2
+} from "react";
+import { jsx, jsxs } from "react/jsx-runtime";
+var CaptchaReactContext = createContext2(null);
+function loadScript(src) {
+  return new Promise((resolve, reject) => {
+    const base = src.split("?")[0] ?? src;
+    const existing = Array.from(document.querySelectorAll("script[src]")).some(
+      (el) => el.src.startsWith(base)
+    );
+    if (existing) {
+      resolve();
+      return;
+    }
+    const s = document.createElement("script");
+    s.src = src;
+    s.async = true;
+    s.onload = () => resolve();
+    s.onerror = () => reject(new Error("Failed to load script"));
+    document.head.appendChild(s);
+  });
+}
+function CaptchaProvider({ children }) {
+  const [config, setConfig] = useState2(null);
+  const [selectedProvider, setSelectedProvider] = useState2(null);
+  const [ready, setReady] = useState2(false);
+  const turnstileWidgetIdRef = useRef(null);
+  const turnstileContainerRef = useRef(null);
+  const turnstileTokenRef = useRef(null);
+  useEffect3(() => {
+    let cancelled = false;
+    fetch("/api/public/captcha-config").then((r) => r.ok ? r.json() : null).then((c) => {
+      if (cancelled || !c) return;
+      setConfig(c);
+      if (c.enabled && c.activeProvider) setSelectedProvider(c.activeProvider);
+    }).catch(() => {
+    }).finally(() => {
+      if (!cancelled) setReady(true);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+  useEffect3(() => {
+    if (!config?.enabled || !selectedProvider) return;
+    const siteKeyFor = config.availableProviders.find((p) => p.id === selectedProvider)?.siteKey;
+    if (!siteKeyFor) return;
+    let cancelled = false;
+    (async () => {
+      try {
+        if (selectedProvider === "recaptcha_v3") {
+          await loadScript(
+            `https://www.google.com/recaptcha/api.js?render=${encodeURIComponent(siteKeyFor)}`
+          );
+        } else {
+          await loadScript("https://challenges.cloudflare.com/turnstile/v0/api.js");
+          if (cancelled || !turnstileContainerRef.current || !window.turnstile) return;
+          if (turnstileWidgetIdRef.current) {
+            try {
+              window.turnstile.remove(turnstileWidgetIdRef.current);
+            } catch {
+            }
+            turnstileWidgetIdRef.current = null;
+          }
+          const wid = window.turnstile.render(turnstileContainerRef.current, {
+            sitekey: siteKeyFor,
+            execution: "execute",
+            callback: (token) => {
+              const p = turnstileTokenRef.current;
+              turnstileTokenRef.current = null;
+              p?.resolve(token);
+            },
+            "error-callback": () => {
+              const p = turnstileTokenRef.current;
+              turnstileTokenRef.current = null;
+              p?.reject(new Error("Turnstile error"));
+            },
+            "expired-callback": () => {
+              const p = turnstileTokenRef.current;
+              turnstileTokenRef.current = null;
+              p?.reject(new Error("Turnstile expired"));
+            }
+          });
+          turnstileWidgetIdRef.current = wid;
+        }
+      } catch {
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [config, selectedProvider]);
+  const getCaptchaPayload = useCallback(async () => {
+    if (!config?.enabled || !selectedProvider) return {};
+    const siteKeyFor = config.availableProviders.find((p) => p.id === selectedProvider)?.siteKey;
+    if (!siteKeyFor) return {};
+    if (selectedProvider === "recaptcha_v3") {
+      if (!window.grecaptcha) return {};
+      const token2 = await new Promise((resolve, reject) => {
+        window.grecaptcha.ready(() => {
+          window.grecaptcha.execute(siteKeyFor, { action: "submit" }).then(resolve).catch(reject);
+        });
+      });
+      return { captchaToken: token2, captchaProvider: "recaptcha_v3" };
+    }
+    const wid = turnstileWidgetIdRef.current;
+    if (!wid || !window.turnstile) return {};
+    const token = await new Promise((resolve, reject) => {
+      turnstileTokenRef.current = { resolve, reject };
+      try {
+        window.turnstile.reset(wid);
+        window.turnstile.execute(wid);
+      } catch (e) {
+        turnstileTokenRef.current = null;
+        reject(e instanceof Error ? e : new Error("Turnstile execute failed"));
+      }
+    });
+    return { captchaToken: token, captchaProvider: "turnstile" };
+  }, [config, selectedProvider]);
+  const ctx = useMemo(
+    () => ({
+      config,
+      ready,
+      selectedProvider,
+      setSelectedProvider,
+      getCaptchaPayload
+    }),
+    [config, ready, selectedProvider, getCaptchaPayload]
+  );
+  return /* @__PURE__ */ jsxs(CaptchaReactContext.Provider, { value: ctx, children: [
+    config?.enabled && config.multipleProviders ? /* @__PURE__ */ jsxs("div", { className: "mb-2 text-sm text-muted-foreground max-w-md", children: [
+      /* @__PURE__ */ jsx("label", { className: "mr-2", htmlFor: "captcha-provider-select", children: "Verification" }),
+      /* @__PURE__ */ jsx(
+        "select",
+        {
+          id: "captcha-provider-select",
+          className: "border rounded px-2 py-1 bg-background",
+          value: selectedProvider ?? "",
+          onChange: (e) => setSelectedProvider(e.target.value),
+          children: config.availableProviders.map((p) => /* @__PURE__ */ jsx("option", { value: p.id, children: p.id === "turnstile" ? "Cloudflare Turnstile" : "Google reCAPTCHA v3" }, p.id))
+        }
+      )
+    ] }) : null,
+    /* @__PURE__ */ jsx("div", { ref: turnstileContainerRef, className: "hidden", "aria-hidden": true }),
+    children
+  ] });
+}
+function useCaptchaPayload() {
+  const ctx = useContext2(CaptchaReactContext);
+  return useCallback(async () => {
+    if (!ctx?.config?.enabled || !ctx.ready) return {};
+    return ctx.getCaptchaPayload();
+  }, [ctx]);
+}
 export {
+  CaptchaProvider,
   PluginProvider,
   useAnalytics,
+  useCaptchaPayload,
   useIsMobile,
   usePlugin
 };

package/dist/hooks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/hooks/use-mobile.ts","../src/hooks/use-analytics.ts","../src/hooks/use-plugin.ts"],"sourcesContent":["import { useState, useEffect } from 'react';\n\nconst MOBILE_BREAKPOINT = 768;\n\nexport function useIsMobile(): boolean {\n  const [isMobile, setIsMobile] = useState<boolean | undefined>(undefined);\n\n  useEffect(() => {\n    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);\n    const onChange = () => setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    mql.addEventListener('change', onChange);\n    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    return () => mql.removeEventListener('change', onChange);\n  }, []);\n\n  return !!isMobile;\n}\n","import { useEffect } from 'react';\n\n/**\n * Call from app with pathname from usePathname() (next/navigation).\n * Disables tracking on admin routes when pathname starts with /admin.\n */\nexport function useAnalytics(pathname: string | null): { isAdminRoute: boolean; shouldTrack: boolean } {\n  const isAdminRoute = pathname != null && pathname.startsWith('/admin');\n\n  useEffect(() => {\n    if (isAdminRoute && typeof window !== 'undefined') {\n      if (typeof (window as unknown as { gtag?: () => void }).gtag === 'function') {\n        (window as unknown as { gtag: () => void }).gtag = () => {};\n      }\n      if (Array.isArray((window as unknown as { dataLayer?: unknown[] }).dataLayer)) {\n        (window as unknown as { dataLayer: unknown[] }).dataLayer = [];\n      }\n    }\n  }, [isAdminRoute]);\n\n  return { isAdminRoute, shouldTrack: !isAdminRoute };\n}\n","import React, { createContext, useContext, type ReactNode } from 'react';\n\nconst PluginContext = createContext<{ getPlugin: <T>(name: string) => T | undefined } | null>(null);\n\nexport function PluginProvider({\n  getPlugin,\n  children,\n}: {\n  getPlugin: <T>(name: string) => T | undefined;\n  children: ReactNode;\n}) {\n  return React.createElement(PluginContext.Provider, { value: { getPlugin } }, children);\n}\n\nexport function usePlugin<T = unknown>(name: string): T | undefined {\n  const ctx = useContext(PluginContext);\n  if (!ctx) return undefined;\n  return ctx.getPlugin<T>(name);\n}\n"],"mappings":";AAAA,SAAS,UAAU,iBAAiB;AAEpC,IAAM,oBAAoB;AAEnB,SAAS,cAAuB;AACrC,QAAM,CAAC,UAAU,WAAW,IAAI,SAA8B,MAAS;AAEvE,YAAU,MAAM;AACd,UAAM,MAAM,OAAO,WAAW,eAAe,oBAAoB,CAAC,KAAK;AACvE,UAAM,WAAW,MAAM,YAAY,OAAO,aAAa,iBAAiB;AACxE,QAAI,iBAAiB,UAAU,QAAQ;AACvC,gBAAY,OAAO,aAAa,iBAAiB;AACjD,WAAO,MAAM,IAAI,oBAAoB,UAAU,QAAQ;AAAA,EACzD,GAAG,CAAC,CAAC;AAEL,SAAO,CAAC,CAAC;AACX;;;AChBA,SAAS,aAAAA,kBAAiB;AAMnB,SAAS,aAAa,UAA0E;AACrG,QAAM,eAAe,YAAY,QAAQ,SAAS,WAAW,QAAQ;AAErE,EAAAA,WAAU,MAAM;AACd,QAAI,gBAAgB,OAAO,WAAW,aAAa;AACjD,UAAI,OAAQ,OAA4C,SAAS,YAAY;AAC3E,QAAC,OAA2C,OAAO,MAAM;AAAA,QAAC;AAAA,MAC5D;AACA,UAAI,MAAM,QAAS,OAAgD,SAAS,GAAG;AAC7E,QAAC,OAA+C,YAAY,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO,EAAE,cAAc,aAAa,CAAC,aAAa;AACpD;;;ACrBA,OAAO,SAAS,eAAe,kBAAkC;AAEjE,IAAM,gBAAgB,cAAwE,IAAI;AAE3F,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAGG;AACD,SAAO,MAAM,cAAc,cAAc,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,QAAQ;AACvF;AAEO,SAAS,UAAuB,MAA6B;AAClE,QAAM,MAAM,WAAW,aAAa;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,UAAa,IAAI;AAC9B;","names":["useEffect"]}
+{"version":3,"sources":["../src/hooks/use-mobile.ts","../src/hooks/use-analytics.ts","../src/hooks/use-plugin.ts","../src/components/CaptchaProvider.tsx"],"sourcesContent":["import { useState, useEffect } from 'react';\n\nconst MOBILE_BREAKPOINT = 768;\n\nexport function useIsMobile(): boolean {\n  const [isMobile, setIsMobile] = useState<boolean | undefined>(undefined);\n\n  useEffect(() => {\n    const mql = window.matchMedia(`(max-width: ${MOBILE_BREAKPOINT - 1}px)`);\n    const onChange = () => setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    mql.addEventListener('change', onChange);\n    setIsMobile(window.innerWidth < MOBILE_BREAKPOINT);\n    return () => mql.removeEventListener('change', onChange);\n  }, []);\n\n  return !!isMobile;\n}\n","import { useEffect } from 'react';\n\n/**\n * Call from app with pathname from usePathname() (next/navigation).\n * Disables tracking on admin routes when pathname starts with /admin.\n */\nexport function useAnalytics(pathname: string | null): { isAdminRoute: boolean; shouldTrack: boolean } {\n  const isAdminRoute = pathname != null && pathname.startsWith('/admin');\n\n  useEffect(() => {\n    if (isAdminRoute && typeof window !== 'undefined') {\n      if (typeof (window as unknown as { gtag?: () => void }).gtag === 'function') {\n        (window as unknown as { gtag: () => void }).gtag = () => {};\n      }\n      if (Array.isArray((window as unknown as { dataLayer?: unknown[] }).dataLayer)) {\n        (window as unknown as { dataLayer: unknown[] }).dataLayer = [];\n      }\n    }\n  }, [isAdminRoute]);\n\n  return { isAdminRoute, shouldTrack: !isAdminRoute };\n}\n","import React, { createContext, useContext, type ReactNode } from 'react';\n\nconst PluginContext = createContext<{ getPlugin: <T>(name: string) => T | undefined } | null>(null);\n\nexport function PluginProvider({\n  getPlugin,\n  children,\n}: {\n  getPlugin: <T>(name: string) => T | undefined;\n  children: ReactNode;\n}) {\n  return React.createElement(PluginContext.Provider, { value: { getPlugin } }, children);\n}\n\nexport function usePlugin<T = unknown>(name: string): T | undefined {\n  const ctx = useContext(PluginContext);\n  if (!ctx) return undefined;\n  return ctx.getPlugin<T>(name);\n}\n","'use client';\n\nimport React, {\n  createContext,\n  useCallback,\n  useContext,\n  useEffect,\n  useMemo,\n  useRef,\n  useState,\n} from 'react';\nimport type { CaptchaPublicConfig, CaptchaProviderId } from '../plugins/captcha';\n\ndeclare global {\n  interface Window {\n    turnstile?: {\n      render: (el: HTMLElement | string, opts: Record<string, unknown>) => string;\n      execute: (id: string) => void;\n      reset: (id: string) => void;\n      remove: (id: string) => void;\n    };\n    grecaptcha?: {\n      ready: (fn: () => void) => void;\n      execute: (siteKey: string, opts: { action: string }) => Promise<string>;\n    };\n  }\n}\n\ntype CaptchaCtx = {\n  config: CaptchaPublicConfig | null;\n  ready: boolean;\n  selectedProvider: CaptchaProviderId | null;\n  setSelectedProvider: (p: CaptchaProviderId) => void;\n  getCaptchaPayload: () => Promise<Record<string, string>>;\n};\n\nconst CaptchaReactContext = createContext<CaptchaCtx | null>(null);\n\nfunction loadScript(src: string): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const base = src.split('?')[0] ?? src;\n    const existing = Array.from(document.querySelectorAll('script[src]')).some((el) =>\n      (el as HTMLScriptElement).src.startsWith(base)\n    );\n    if (existing) {\n      resolve();\n      return;\n    }\n    const s = document.createElement('script');\n    s.src = src;\n    s.async = true;\n    s.onload = () => resolve();\n    s.onerror = () => reject(new Error('Failed to load script'));\n    document.head.appendChild(s);\n  });\n}\n\nexport function CaptchaProvider({ children }: { children: React.ReactNode }) {\n  const [config, setConfig] = useState<CaptchaPublicConfig | null>(null);\n  const [selectedProvider, setSelectedProvider] = useState<CaptchaProviderId | null>(null);\n  const [ready, setReady] = useState(false);\n  const turnstileWidgetIdRef = useRef<string | null>(null);\n  const turnstileContainerRef = useRef<HTMLDivElement | null>(null);\n  const turnstileTokenRef = useRef<{\n    resolve: (t: string) => void;\n    reject: (e: Error) => void;\n  } | null>(null);\n\n  useEffect(() => {\n    let cancelled = false;\n    fetch('/api/public/captcha-config')\n      .then((r) => (r.ok ? r.json() : null))\n      .then((c: CaptchaPublicConfig | null) => {\n        if (cancelled || !c) return;\n        setConfig(c);\n        if (c.enabled && c.activeProvider) setSelectedProvider(c.activeProvider);\n      })\n      .catch(() => {})\n      .finally(() => {\n        if (!cancelled) setReady(true);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, []);\n\n  useEffect(() => {\n    if (!config?.enabled || !selectedProvider) return;\n    const siteKeyFor = config.availableProviders.find((p) => p.id === selectedProvider)?.siteKey;\n    if (!siteKeyFor) return;\n\n    let cancelled = false;\n    (async () => {\n      try {\n        if (selectedProvider === 'recaptcha_v3') {\n          await loadScript(\n            `https://www.google.com/recaptcha/api.js?render=${encodeURIComponent(siteKeyFor)}`\n          );\n        } else {\n          await loadScript('https://challenges.cloudflare.com/turnstile/v0/api.js');\n          if (cancelled || !turnstileContainerRef.current || !window.turnstile) return;\n          if (turnstileWidgetIdRef.current) {\n            try {\n              window.turnstile.remove(turnstileWidgetIdRef.current);\n            } catch {\n              /* ignore */\n            }\n            turnstileWidgetIdRef.current = null;\n          }\n          const wid = window.turnstile.render(turnstileContainerRef.current, {\n            sitekey: siteKeyFor,\n            execution: 'execute',\n            callback: (token: string) => {\n              const p = turnstileTokenRef.current;\n              turnstileTokenRef.current = null;\n              p?.resolve(token);\n            },\n            'error-callback': () => {\n              const p = turnstileTokenRef.current;\n              turnstileTokenRef.current = null;\n              p?.reject(new Error('Turnstile error'));\n            },\n            'expired-callback': () => {\n              const p = turnstileTokenRef.current;\n              turnstileTokenRef.current = null;\n              p?.reject(new Error('Turnstile expired'));\n            },\n          });\n          turnstileWidgetIdRef.current = wid;\n        }\n      } catch {\n        /* ignore */\n      }\n    })();\n    return () => {\n      cancelled = true;\n    };\n  }, [config, selectedProvider]);\n\n  const getCaptchaPayload = useCallback(async (): Promise<Record<string, string>> => {\n    if (!config?.enabled || !selectedProvider) return {};\n    const siteKeyFor = config.availableProviders.find((p) => p.id === selectedProvider)?.siteKey;\n    if (!siteKeyFor) return {};\n\n    if (selectedProvider === 'recaptcha_v3') {\n      if (!window.grecaptcha) return {};\n      const token = await new Promise<string>((resolve, reject) => {\n        window.grecaptcha!.ready(() => {\n          window.grecaptcha!.execute(siteKeyFor, { action: 'submit' }).then(resolve).catch(reject);\n        });\n      });\n      return { captchaToken: token, captchaProvider: 'recaptcha_v3' };\n    }\n\n    const wid = turnstileWidgetIdRef.current;\n    if (!wid || !window.turnstile) return {};\n    const token = await new Promise<string>((resolve, reject) => {\n      turnstileTokenRef.current = { resolve, reject };\n      try {\n        window.turnstile!.reset(wid);\n        window.turnstile!.execute(wid);\n      } catch (e) {\n        turnstileTokenRef.current = null;\n        reject(e instanceof Error ? e : new Error('Turnstile execute failed'));\n      }\n    });\n    return { captchaToken: token, captchaProvider: 'turnstile' };\n  }, [config, selectedProvider]);\n\n  const ctx = useMemo<CaptchaCtx>(\n    () => ({\n      config,\n      ready,\n      selectedProvider,\n      setSelectedProvider,\n      getCaptchaPayload,\n    }),\n    [config, ready, selectedProvider, getCaptchaPayload]\n  );\n\n  return (\n    <CaptchaReactContext.Provider value={ctx}>\n      {config?.enabled && config.multipleProviders ? (\n        <div className=\"mb-2 text-sm text-muted-foreground max-w-md\">\n          <label className=\"mr-2\" htmlFor=\"captcha-provider-select\">\n            Verification\n          </label>\n          <select\n            id=\"captcha-provider-select\"\n            className=\"border rounded px-2 py-1 bg-background\"\n            value={selectedProvider ?? ''}\n            onChange={(e) => setSelectedProvider(e.target.value as CaptchaProviderId)}\n          >\n            {config.availableProviders.map((p) => (\n              <option key={p.id} value={p.id}>\n                {p.id === 'turnstile' ? 'Cloudflare Turnstile' : 'Google reCAPTCHA v3'}\n              </option>\n            ))}\n          </select>\n        </div>\n      ) : null}\n      <div ref={turnstileContainerRef} className=\"hidden\" aria-hidden />\n      {children}\n    </CaptchaReactContext.Provider>\n  );\n}\n\n/** Returns a function that resolves to captcha fields for JSON bodies, or {} if disabled / not ready. */\nexport function useCaptchaPayload(): () => Promise<Record<string, string>> {\n  const ctx = useContext(CaptchaReactContext);\n  return useCallback(async () => {\n    if (!ctx?.config?.enabled || !ctx.ready) return {};\n    return ctx.getCaptchaPayload();\n  }, [ctx]);\n}\n"],"mappings":";AAAA,SAAS,UAAU,iBAAiB;AAEpC,IAAM,oBAAoB;AAEnB,SAAS,cAAuB;AACrC,QAAM,CAAC,UAAU,WAAW,IAAI,SAA8B,MAAS;AAEvE,YAAU,MAAM;AACd,UAAM,MAAM,OAAO,WAAW,eAAe,oBAAoB,CAAC,KAAK;AACvE,UAAM,WAAW,MAAM,YAAY,OAAO,aAAa,iBAAiB;AACxE,QAAI,iBAAiB,UAAU,QAAQ;AACvC,gBAAY,OAAO,aAAa,iBAAiB;AACjD,WAAO,MAAM,IAAI,oBAAoB,UAAU,QAAQ;AAAA,EACzD,GAAG,CAAC,CAAC;AAEL,SAAO,CAAC,CAAC;AACX;;;AChBA,SAAS,aAAAA,kBAAiB;AAMnB,SAAS,aAAa,UAA0E;AACrG,QAAM,eAAe,YAAY,QAAQ,SAAS,WAAW,QAAQ;AAErE,EAAAA,WAAU,MAAM;AACd,QAAI,gBAAgB,OAAO,WAAW,aAAa;AACjD,UAAI,OAAQ,OAA4C,SAAS,YAAY;AAC3E,QAAC,OAA2C,OAAO,MAAM;AAAA,QAAC;AAAA,MAC5D;AACA,UAAI,MAAM,QAAS,OAAgD,SAAS,GAAG;AAC7E,QAAC,OAA+C,YAAY,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF,GAAG,CAAC,YAAY,CAAC;AAEjB,SAAO,EAAE,cAAc,aAAa,CAAC,aAAa;AACpD;;;ACrBA,OAAO,SAAS,eAAe,kBAAkC;AAEjE,IAAM,gBAAgB,cAAwE,IAAI;AAE3F,SAAS,eAAe;AAAA,EAC7B;AAAA,EACA;AACF,GAGG;AACD,SAAO,MAAM,cAAc,cAAc,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,QAAQ;AACvF;AAEO,SAAS,UAAuB,MAA6B;AAClE,QAAM,MAAM,WAAW,aAAa;AACpC,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,IAAI,UAAa,IAAI;AAC9B;;;AChBA;AAAA,EACE,iBAAAC;AAAA,EACA;AAAA,EACA,cAAAC;AAAA,EACA,aAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAAC;AAAA,OACK;AA6KC,SACE,KADF;AAnJR,IAAM,sBAAsBH,eAAiC,IAAI;AAEjE,SAAS,WAAW,KAA4B;AAC9C,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,OAAO,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAClC,UAAM,WAAW,MAAM,KAAK,SAAS,iBAAiB,aAAa,CAAC,EAAE;AAAA,MAAK,CAAC,OACzE,GAAyB,IAAI,WAAW,IAAI;AAAA,IAC/C;AACA,QAAI,UAAU;AACZ,cAAQ;AACR;AAAA,IACF;AACA,UAAM,IAAI,SAAS,cAAc,QAAQ;AACzC,MAAE,MAAM;AACR,MAAE,QAAQ;AACV,MAAE,SAAS,MAAM,QAAQ;AACzB,MAAE,UAAU,MAAM,OAAO,IAAI,MAAM,uBAAuB,CAAC;AAC3D,aAAS,KAAK,YAAY,CAAC;AAAA,EAC7B,CAAC;AACH;AAEO,SAAS,gBAAgB,EAAE,SAAS,GAAkC;AAC3E,QAAM,CAAC,QAAQ,SAAS,IAAIG,UAAqC,IAAI;AACrE,QAAM,CAAC,kBAAkB,mBAAmB,IAAIA,UAAmC,IAAI;AACvF,QAAM,CAAC,OAAO,QAAQ,IAAIA,UAAS,KAAK;AACxC,QAAM,uBAAuB,OAAsB,IAAI;AACvD,QAAM,wBAAwB,OAA8B,IAAI;AAChE,QAAM,oBAAoB,OAGhB,IAAI;AAEd,EAAAD,WAAU,MAAM;AACd,QAAI,YAAY;AAChB,UAAM,4BAA4B,EAC/B,KAAK,CAAC,MAAO,EAAE,KAAK,EAAE,KAAK,IAAI,IAAK,EACpC,KAAK,CAAC,MAAkC;AACvC,UAAI,aAAa,CAAC,EAAG;AACrB,gBAAU,CAAC;AACX,UAAI,EAAE,WAAW,EAAE,eAAgB,qBAAoB,EAAE,cAAc;AAAA,IACzE,CAAC,EACA,MAAM,MAAM;AAAA,IAAC,CAAC,EACd,QAAQ,MAAM;AACb,UAAI,CAAC,UAAW,UAAS,IAAI;AAAA,IAC/B,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,CAAC;AAEL,EAAAA,WAAU,MAAM;AACd,QAAI,CAAC,QAAQ,WAAW,CAAC,iBAAkB;AAC3C,UAAM,aAAa,OAAO,mBAAmB,KAAK,CAAC,MAAM,EAAE,OAAO,gBAAgB,GAAG;AACrF,QAAI,CAAC,WAAY;AAEjB,QAAI,YAAY;AAChB,KAAC,YAAY;AACX,UAAI;AACF,YAAI,qBAAqB,gBAAgB;AACvC,gBAAM;AAAA,YACJ,kDAAkD,mBAAmB,UAAU,CAAC;AAAA,UAClF;AAAA,QACF,OAAO;AACL,gBAAM,WAAW,uDAAuD;AACxE,cAAI,aAAa,CAAC,sBAAsB,WAAW,CAAC,OAAO,UAAW;AACtE,cAAI,qBAAqB,SAAS;AAChC,gBAAI;AACF,qBAAO,UAAU,OAAO,qBAAqB,OAAO;AAAA,YACtD,QAAQ;AAAA,YAER;AACA,iCAAqB,UAAU;AAAA,UACjC;AACA,gBAAM,MAAM,OAAO,UAAU,OAAO,sBAAsB,SAAS;AAAA,YACjE,SAAS;AAAA,YACT,WAAW;AAAA,YACX,UAAU,CAAC,UAAkB;AAC3B,oBAAM,IAAI,kBAAkB;AAC5B,gCAAkB,UAAU;AAC5B,iBAAG,QAAQ,KAAK;AAAA,YAClB;AAAA,YACA,kBAAkB,MAAM;AACtB,oBAAM,IAAI,kBAAkB;AAC5B,gCAAkB,UAAU;AAC5B,iBAAG,OAAO,IAAI,MAAM,iBAAiB,CAAC;AAAA,YACxC;AAAA,YACA,oBAAoB,MAAM;AACxB,oBAAM,IAAI,kBAAkB;AAC5B,gCAAkB,UAAU;AAC5B,iBAAG,OAAO,IAAI,MAAM,mBAAmB,CAAC;AAAA,YAC1C;AAAA,UACF,CAAC;AACD,+BAAqB,UAAU;AAAA,QACjC;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF,GAAG;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,QAAQ,gBAAgB,CAAC;AAE7B,QAAM,oBAAoB,YAAY,YAA6C;AACjF,QAAI,CAAC,QAAQ,WAAW,CAAC,iBAAkB,QAAO,CAAC;AACnD,UAAM,aAAa,OAAO,mBAAmB,KAAK,CAAC,MAAM,EAAE,OAAO,gBAAgB,GAAG;AACrF,QAAI,CAAC,WAAY,QAAO,CAAC;AAEzB,QAAI,qBAAqB,gBAAgB;AACvC,UAAI,CAAC,OAAO,WAAY,QAAO,CAAC;AAChC,YAAME,SAAQ,MAAM,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC3D,eAAO,WAAY,MAAM,MAAM;AAC7B,iBAAO,WAAY,QAAQ,YAAY,EAAE,QAAQ,SAAS,CAAC,EAAE,KAAK,OAAO,EAAE,MAAM,MAAM;AAAA,QACzF,CAAC;AAAA,MACH,CAAC;AACD,aAAO,EAAE,cAAcA,QAAO,iBAAiB,eAAe;AAAA,IAChE;AAEA,UAAM,MAAM,qBAAqB;AACjC,QAAI,CAAC,OAAO,CAAC,OAAO,UAAW,QAAO,CAAC;AACvC,UAAM,QAAQ,MAAM,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC3D,wBAAkB,UAAU,EAAE,SAAS,OAAO;AAC9C,UAAI;AACF,eAAO,UAAW,MAAM,GAAG;AAC3B,eAAO,UAAW,QAAQ,GAAG;AAAA,MAC/B,SAAS,GAAG;AACV,0BAAkB,UAAU;AAC5B,eAAO,aAAa,QAAQ,IAAI,IAAI,MAAM,0BAA0B,CAAC;AAAA,MACvE;AAAA,IACF,CAAC;AACD,WAAO,EAAE,cAAc,OAAO,iBAAiB,YAAY;AAAA,EAC7D,GAAG,CAAC,QAAQ,gBAAgB,CAAC;AAE7B,QAAM,MAAM;AAAA,IACV,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,IACA,CAAC,QAAQ,OAAO,kBAAkB,iBAAiB;AAAA,EACrD;AAEA,SACE,qBAAC,oBAAoB,UAApB,EAA6B,OAAO,KAClC;AAAA,YAAQ,WAAW,OAAO,oBACzB,qBAAC,SAAI,WAAU,+CACb;AAAA,0BAAC,WAAM,WAAU,QAAO,SAAQ,2BAA0B,0BAE1D;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,IAAG;AAAA,UACH,WAAU;AAAA,UACV,OAAO,oBAAoB;AAAA,UAC3B,UAAU,CAAC,MAAM,oBAAoB,EAAE,OAAO,KAA0B;AAAA,UAEvE,iBAAO,mBAAmB,IAAI,CAAC,MAC9B,oBAAC,YAAkB,OAAO,EAAE,IACzB,YAAE,OAAO,cAAc,yBAAyB,yBADtC,EAAE,EAEf,CACD;AAAA;AAAA,MACH;AAAA,OACF,IACE;AAAA,IACJ,oBAAC,SAAI,KAAK,uBAAuB,WAAU,UAAS,eAAW,MAAC;AAAA,IAC/D;AAAA,KACH;AAEJ;AAGO,SAAS,oBAA2D;AACzE,QAAM,MAAMH,YAAW,mBAAmB;AAC1C,SAAO,YAAY,YAAY;AAC7B,QAAI,CAAC,KAAK,QAAQ,WAAW,CAAC,IAAI,MAAO,QAAO,CAAC;AACjD,WAAO,IAAI,kBAAkB;AAAA,EAC/B,GAAG,CAAC,GAAG,CAAC;AACV;","names":["useEffect","createContext","useContext","useEffect","useState","token"]}

package/dist/{index-BiagwMjV.d.ts → index-C85X7cc7.d.ts}

@@ -164,6 +164,11 @@ interface DashboardStatsConfig extends CmsHandlersBase {
     requirePermission?: (req: Request, permission: string) => Promise<Response | null>;
 }
 declare function createDashboardStatsHandler(config: DashboardStatsConfig): (req: Request) => Promise<Response>;
+interface EcommerceAnalyticsConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap;
+}
+declare function createEcommerceAnalyticsHandler(config: EcommerceAnalyticsConfig): (req: Request) => Promise<Response>;
 interface AnalyticsHandlerConfig extends CmsHandlersBase {
     getAnalyticsData?: (days: number) => Promise<unknown>;
     getPropertyId?: () => ({
@@ -189,8 +194,13 @@ interface UploadHandlerConfig extends CmsHandlersBase {
     localUploadDir?: string;
     allowedTypes?: string[];
     maxSizeBytes?: number;
+    /** Resolve folder chain for `parentId` (merged from createCmsApiHandler when omitted). */
+    dataSource?: DataSource;
+    entityMap?: EntityMap;
 }
 declare function createUploadHandler(config: UploadHandlerConfig): (req: Request) => Promise<Response>;
+/** POST /api/media/extract/:id — expand a zip media row into folders/files under the zip’s parent folder. */
+declare function createMediaZipExtractHandler(config: UploadHandlerConfig): (_req: Request, zipMediaId: string) => Promise<Response>;
 interface BlogBySlugConfig extends CmsHandlersBase {
     dataSource: DataSource;
     entityMap: EntityMap;
@@ -299,7 +309,7 @@ interface ChatApiConfig extends CmsHandlersBase {
 }
 
 /**
- * Single CMS API handler: dashboard, analytics, upload, blog/form by slug, users API, user auth, CRUD. Mount once (e.g. app/api/[[...path]]/route.ts).
+ * Single CMS API handler: dashboard, analytics, upload, media zip extract, blog/form by slug, users API, user auth, CRUD. Mount once (e.g. app/api/[[...path]]/route.ts).
  */
 
 /** CMS instance with getPlugin; when provided, analytics and userAuth.sendEmail can be resolved from plugins when not passed. */
@@ -324,6 +334,8 @@ interface CmsApiHandlerConfig {
     userAuth?: UserAuthApiConfig;
     /** GET /api/dashboard/stats */
     dashboard?: DashboardStatsConfig;
+    /** GET /api/dashboard/ecommerce */
+    ecommerceAnalytics?: EcommerceAnalyticsConfig;
     /** GET /api/analytics. If omitted and getCms is set, uses getCms().getPlugin('analytics'). */
     analytics?: AnalyticsHandlerConfig;
     /** POST /api/upload (S3 or local) */
@@ -392,4 +404,4 @@ declare function createStorefrontApiHandler(config: StorefrontApiConfig): {
     handle(method: string, path: string[], req: Request): Promise<Response>;
 };
 
-export { type AnalyticsHandlerConfig as A, type BlogBySlugConfig as B, type CompanyDetails as C, type DashboardStatsConfig as D, type EmailTemplateResult as E, type ForgotPasswordConfig as F, type GetPublicSettingsGroupConfig as G, createFormBySlugHandler as H, type InviteAcceptConfig as I, createInviteAcceptHandler as J, createSetPasswordHandler as K, createSettingsApiHandlers as L, createStorefrontApiHandler as M, createUploadHandler as N, type OrderPlacedLineItem as O, createUserAuthApiRouter as P, createUserAvatarHandler as Q, createUserProfileHandler as R, type StorageService as S, type TemplateContext as T, type UploadHandlerConfig as U, createUsersApiHandlers as V, getCompanyDetailsFromSettings as W, getPublicSettingsGroup as X, mergeEmailLayoutCompanyDetails as Y, type EmailTemplateName as a, type EntityMap as b, type AuthHandlersConfig as c, type ChangePasswordConfig as d, type CmsApiHandlerConfig as e, type CmsGetter as f, type CrudHandlerOptions as g, type FormBySlugConfig as h, type GetPublicSettingsGroupDataSource as i, type SetPasswordConfig as j, type SettingsApiConfig as k, type SocialLinkItem as l, type StorefrontApiConfig as m, type StorefrontOtpFlags as n, type UserAuthApiConfig as o, type UserAvatarConfig as p, type UserProfileConfig as q, type UsersApiConfig as r, createAnalyticsHandlers as s, createBlogBySlugHandler as t, createChangePasswordHandler as u, createCmsApiHandler as v, createCrudByIdHandler as w, createCrudHandler as x, createDashboardStatsHandler as y, createForgotPasswordHandler as z };
+export { mergeEmailLayoutCompanyDetails as $, type AnalyticsHandlerConfig as A, type BlogBySlugConfig as B, type CompanyDetails as C, type DashboardStatsConfig as D, type EmailTemplateResult as E, type ForgotPasswordConfig as F, type GetPublicSettingsGroupConfig as G, createEcommerceAnalyticsHandler as H, type InviteAcceptConfig as I, createForgotPasswordHandler as J, createFormBySlugHandler as K, createInviteAcceptHandler as L, createMediaZipExtractHandler as M, createSetPasswordHandler as N, type OrderPlacedLineItem as O, createSettingsApiHandlers as P, createStorefrontApiHandler as Q, createUploadHandler as R, type StorageService as S, type TemplateContext as T, type UploadHandlerConfig as U, createUserAuthApiRouter as V, createUserAvatarHandler as W, createUserProfileHandler as X, createUsersApiHandlers as Y, getCompanyDetailsFromSettings as Z, getPublicSettingsGroup as _, type EmailTemplateName as a, type EntityMap as b, type AuthHandlersConfig as c, type ChangePasswordConfig as d, type CmsApiHandlerConfig as e, type CmsGetter as f, type CrudHandlerOptions as g, type EcommerceAnalyticsConfig as h, type FormBySlugConfig as i, type GetPublicSettingsGroupDataSource as j, type SetPasswordConfig as k, type SettingsApiConfig as l, type SocialLinkItem as m, type StorefrontApiConfig as n, type StorefrontOtpFlags as o, type UserAuthApiConfig as p, type UserAvatarConfig as q, type UserProfileConfig as r, type UsersApiConfig as s, createAnalyticsHandlers as t, createBlogBySlugHandler as u, createChangePasswordHandler as v, createCmsApiHandler as w, createCrudByIdHandler as x, createCrudHandler as y, createDashboardStatsHandler as z };

package/dist/{index-BQnqJ7EO.d.cts → index-h42MoUNq.d.cts}

@@ -164,6 +164,11 @@ interface DashboardStatsConfig extends CmsHandlersBase {
     requirePermission?: (req: Request, permission: string) => Promise<Response | null>;
 }
 declare function createDashboardStatsHandler(config: DashboardStatsConfig): (req: Request) => Promise<Response>;
+interface EcommerceAnalyticsConfig extends CmsHandlersBase {
+    dataSource: DataSource;
+    entityMap: EntityMap;
+}
+declare function createEcommerceAnalyticsHandler(config: EcommerceAnalyticsConfig): (req: Request) => Promise<Response>;
 interface AnalyticsHandlerConfig extends CmsHandlersBase {
     getAnalyticsData?: (days: number) => Promise<unknown>;
     getPropertyId?: () => ({
@@ -189,8 +194,13 @@ interface UploadHandlerConfig extends CmsHandlersBase {
     localUploadDir?: string;
     allowedTypes?: string[];
     maxSizeBytes?: number;
+    /** Resolve folder chain for `parentId` (merged from createCmsApiHandler when omitted). */
+    dataSource?: DataSource;
+    entityMap?: EntityMap;
 }
 declare function createUploadHandler(config: UploadHandlerConfig): (req: Request) => Promise<Response>;
+/** POST /api/media/extract/:id — expand a zip media row into folders/files under the zip’s parent folder. */
+declare function createMediaZipExtractHandler(config: UploadHandlerConfig): (_req: Request, zipMediaId: string) => Promise<Response>;
 interface BlogBySlugConfig extends CmsHandlersBase {
     dataSource: DataSource;
     entityMap: EntityMap;
@@ -299,7 +309,7 @@ interface ChatApiConfig extends CmsHandlersBase {
 }
 
 /**
- * Single CMS API handler: dashboard, analytics, upload, blog/form by slug, users API, user auth, CRUD. Mount once (e.g. app/api/[[...path]]/route.ts).
+ * Single CMS API handler: dashboard, analytics, upload, media zip extract, blog/form by slug, users API, user auth, CRUD. Mount once (e.g. app/api/[[...path]]/route.ts).
  */
 
 /** CMS instance with getPlugin; when provided, analytics and userAuth.sendEmail can be resolved from plugins when not passed. */
@@ -324,6 +334,8 @@ interface CmsApiHandlerConfig {
     userAuth?: UserAuthApiConfig;
     /** GET /api/dashboard/stats */
     dashboard?: DashboardStatsConfig;
+    /** GET /api/dashboard/ecommerce */
+    ecommerceAnalytics?: EcommerceAnalyticsConfig;
     /** GET /api/analytics. If omitted and getCms is set, uses getCms().getPlugin('analytics'). */
     analytics?: AnalyticsHandlerConfig;
     /** POST /api/upload (S3 or local) */
@@ -392,4 +404,4 @@ declare function createStorefrontApiHandler(config: StorefrontApiConfig): {
     handle(method: string, path: string[], req: Request): Promise<Response>;
 };
 
-export { type AnalyticsHandlerConfig as A, type BlogBySlugConfig as B, type CompanyDetails as C, type DashboardStatsConfig as D, type EmailTemplateResult as E, type ForgotPasswordConfig as F, type GetPublicSettingsGroupConfig as G, createFormBySlugHandler as H, type InviteAcceptConfig as I, createInviteAcceptHandler as J, createSetPasswordHandler as K, createSettingsApiHandlers as L, createStorefrontApiHandler as M, createUploadHandler as N, type OrderPlacedLineItem as O, createUserAuthApiRouter as P, createUserAvatarHandler as Q, createUserProfileHandler as R, type StorageService as S, type TemplateContext as T, type UploadHandlerConfig as U, createUsersApiHandlers as V, getCompanyDetailsFromSettings as W, getPublicSettingsGroup as X, mergeEmailLayoutCompanyDetails as Y, type EmailTemplateName as a, type EntityMap as b, type AuthHandlersConfig as c, type ChangePasswordConfig as d, type CmsApiHandlerConfig as e, type CmsGetter as f, type CrudHandlerOptions as g, type FormBySlugConfig as h, type GetPublicSettingsGroupDataSource as i, type SetPasswordConfig as j, type SettingsApiConfig as k, type SocialLinkItem as l, type StorefrontApiConfig as m, type StorefrontOtpFlags as n, type UserAuthApiConfig as o, type UserAvatarConfig as p, type UserProfileConfig as q, type UsersApiConfig as r, createAnalyticsHandlers as s, createBlogBySlugHandler as t, createChangePasswordHandler as u, createCmsApiHandler as v, createCrudByIdHandler as w, createCrudHandler as x, createDashboardStatsHandler as y, createForgotPasswordHandler as z };
+export { mergeEmailLayoutCompanyDetails as $, type AnalyticsHandlerConfig as A, type BlogBySlugConfig as B, type CompanyDetails as C, type DashboardStatsConfig as D, type EmailTemplateResult as E, type ForgotPasswordConfig as F, type GetPublicSettingsGroupConfig as G, createEcommerceAnalyticsHandler as H, type InviteAcceptConfig as I, createForgotPasswordHandler as J, createFormBySlugHandler as K, createInviteAcceptHandler as L, createMediaZipExtractHandler as M, createSetPasswordHandler as N, type OrderPlacedLineItem as O, createSettingsApiHandlers as P, createStorefrontApiHandler as Q, createUploadHandler as R, type StorageService as S, type TemplateContext as T, type UploadHandlerConfig as U, createUserAuthApiRouter as V, createUserAvatarHandler as W, createUserProfileHandler as X, createUsersApiHandlers as Y, getCompanyDetailsFromSettings as Z, getPublicSettingsGroup as _, type EmailTemplateName as a, type EntityMap as b, type AuthHandlersConfig as c, type ChangePasswordConfig as d, type CmsApiHandlerConfig as e, type CmsGetter as f, type CrudHandlerOptions as g, type EcommerceAnalyticsConfig as h, type FormBySlugConfig as i, type GetPublicSettingsGroupDataSource as j, type SetPasswordConfig as k, type SettingsApiConfig as l, type SocialLinkItem as m, type StorefrontApiConfig as n, type StorefrontOtpFlags as o, type UserAuthApiConfig as p, type UserAvatarConfig as q, type UserProfileConfig as r, type UsersApiConfig as s, createAnalyticsHandlers as t, createBlogBySlugHandler as u, createChangePasswordHandler as v, createCmsApiHandler as w, createCrudByIdHandler as x, createCrudHandler as y, createDashboardStatsHandler as z };