@polymorfa/nextjs 0.1.0-dev.20260922094209

package/dist/hono.d.ts

@@ -0,0 +1,15 @@
+import type { PolymorfaHandler } from "./handler.js";
+/**
+ * Serves a Polymorfa handler from Hono (or any framework whose context
+ * exposes the Fetch `Request` as `c.req.raw`):
+ *
+ * ```ts
+ * app.all("/api/polymorfa/*", toHono(handler));
+ * ```
+ */
+export declare function toHono(handler: PolymorfaHandler): (context: {
+    readonly req: {
+        readonly raw: Request;
+    };
+}) => Promise<Response>;
+//# sourceMappingURL=hono.d.ts.map

package/dist/hono.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono.d.ts","sourceRoot":"","sources":["../src/hono.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD;;;;;;;GAOG;AACH,wBAAgB,MAAM,CACpB,OAAO,EAAE,gBAAgB,GACxB,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAE7E"}

package/dist/hono.js

@@ -0,0 +1,11 @@
+/**
+ * Serves a Polymorfa handler from Hono (or any framework whose context
+ * exposes the Fetch `Request` as `c.req.raw`):
+ *
+ * ```ts
+ * app.all("/api/polymorfa/*", toHono(handler));
+ * ```
+ */
+export function toHono(handler) {
+    return (context) => handler.handle(context.req.raw);
+}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { createClientTokenRoute, type ClientTokenClaims, type ClientTokenMint, type ClientTokenRouteOptions, type ClientTokenSubject, } from "./token-route.js";
+export { createMessagingClientTokenMint, type MessagingClientTokenMintOptions, type MessagingClientTokenMintRequest, type CustomerClientTokenAction, type MessagingClientTokenMintResource, } from "./messaging-token-mint.js";
+export { readVerifiedWebhook, type WebhookConstructor, type WebhookRequestOptions, } from "./webhook.js";
+export { createTemplateBuilderRoute, type TemplateBuilderRouteOptions, type TemplateRouteButton, type TemplateRouteDefinition, type TemplateRouteDraft, type TemplateRouteHeader, type TemplateRouteResource, type TemplateRouteSubject, } from "./template-builder-route.js";
+export { createMediaDownloadRoute, INLINE_MEDIA_TYPES, mediaTypeEssence, safeMediaHeaders, type MediaDownloadGrant, type MediaDownloadRouteOptions, type MediaDownloadRouteResource, } from "./media-route.js";
+export { conversationOf, createPolymorfaHandler, type ClientTokenMintInput, type HistoryContact, type HistoryConversation, type HistoryMessage, type HistoryPage, type PolymorfaGrant, type PolymorfaGrantInput, type PolymorfaHandler, type PolymorfaHandlerClient, type PolymorfaHandlerOptions, type PolymorfaPermission, type PolymorfaRouteContext, type PolymorfaRouteHandler, type QuickLinkInput, type RelayEvent, } from "./handler.js";
+export { createDevelopmentInboxStore, type DevelopmentInboxStore, type DevelopmentInboxStoreOptions, } from "./development-store.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,8BAA8B,EAC9B,KAAK,+BAA+B,EACpC,KAAK,+BAA+B,EACpC,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,GACtC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,GAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,0BAA0B,EAC1B,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,UAAU,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,2BAA2B,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,GAClC,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { createClientTokenRoute, } from "./token-route.js";
+export { createMessagingClientTokenMint, } from "./messaging-token-mint.js";
+export { readVerifiedWebhook, } from "./webhook.js";
+export { createTemplateBuilderRoute, } from "./template-builder-route.js";
+export { createMediaDownloadRoute, INLINE_MEDIA_TYPES, mediaTypeEssence, safeMediaHeaders, } from "./media-route.js";
+export { conversationOf, createPolymorfaHandler, } from "./handler.js";
+export { createDevelopmentInboxStore, } from "./development-store.js";

package/dist/media-route.d.ts

@@ -0,0 +1,76 @@
+/** Structural subset of `MessagingClient["media"]` used by the route. */
+export interface MediaDownloadRouteResource {
+    downloadStream(mediaId: string, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<{
+        readonly body: ReadableStream<Uint8Array>;
+        readonly contentType?: string;
+        readonly contentLength?: number;
+        readonly filename?: string;
+    }>;
+    downloadUrl(mediaId: string, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<{
+        readonly streamed: false;
+        readonly url: string;
+    } | {
+        readonly streamed: true;
+        readonly url: undefined;
+    }>;
+    downloadFromWhatsApp?(input: {
+        readonly type: string;
+        readonly media?: string;
+    }, options?: {
+        readonly signal?: AbortSignal;
+    }): Promise<{
+        readonly body: ReadableStream<Uint8Array>;
+        readonly mimetype: string;
+        readonly fileName?: string;
+        readonly fileLength?: number;
+    }>;
+}
+/** What the caller may download, decided by `authorize`. */
+export type MediaDownloadGrant = {
+    /** Polymorfa media ID, for `redirect` and `proxy` modes. */
+    readonly mediaId: string;
+    /** Overrides the upstream filename in `Content-Disposition`. */
+    readonly filename?: string;
+} | {
+    /**
+     * Stored message webhook fields, for `whatsapp` mode. `media` contains
+     * a decryption key: load it from your own storage, never from the
+     * request.
+     */
+    readonly message: {
+        readonly type: string;
+        readonly media: string;
+    };
+    readonly filename?: string;
+};
+export interface MediaDownloadRouteOptions {
+    /**
+     * Required. Authenticate the request and return what it may download, or
+     * `null` to deny. Resolve the media from your own records rather than
+     * trusting an ID supplied by the browser. Throwing also denies.
+     */
+    readonly authorize: (request: Request) => Promise<MediaDownloadGrant | null> | MediaDownloadGrant | null;
+    /** A server-side `MessagingClient`. */
+    readonly client: {
+        readonly media: MediaDownloadRouteResource;
+    };
+    /**
+     * `redirect` answers 302 to a short-lived signed storage URL (and proxies
+     * when the API streams instead). `proxy` streams bytes through this route.
+     * `whatsapp` downloads and decrypts from the WhatsApp CDN server-side.
+     */
+    readonly mode: "redirect" | "proxy" | "whatsapp";
+}
+/** Types rendered inline. Everything else is served as an attachment. */
+export declare const INLINE_MEDIA_TYPES: ReadonlySet<string>;
+/** Creates a Next.js App Router-compatible GET route without importing Next.js. */
+export declare function createMediaDownloadRoute(options: MediaDownloadRouteOptions): (request: Request) => Promise<Response>;
+/** Returns the lowercase MIME essence, or undefined when malformed. */
+export declare function mediaTypeEssence(value: string | undefined): string | undefined;
+/** Builds the safe response headers used by proxied media. */
+export declare function safeMediaHeaders(contentType: string | undefined, filename: string | undefined, contentLength?: number): Record<string, string>;
+//# sourceMappingURL=media-route.d.ts.map

package/dist/media-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media-route.d.ts","sourceRoot":"","sources":["../src/media-route.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,MAAM,WAAW,0BAA0B;IACzC,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC1C,OAAO,CAAC;QACT,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;IACH,WAAW,CACT,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC1C,OAAO,CACN;QAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAClD;QAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAA;KAAE,CACvD,CAAC;IACF,oBAAoB,CAAC,CACnB,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EACzD,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC1C,OAAO,CAAC;QACT,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC,CAAC;CACJ;AAED,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAC1B;IACE,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IACE;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEN,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,CAClB,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,kBAAkB,GAAG,IAAI,CAAC;IACpE,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAA;KAAE,CAAC;IAChE;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;CAClD;AAED,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAiBjD,CAAC;AASH,mFAAmF;AACnF,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,yBAAyB,GACjC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAgFzC;AAqBD,uEAAuE;AACvE,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,GAAG,SAAS,CAMpB;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,aAAa,CAAC,EAAE,MAAM,GACrB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB"}

package/dist/media-route.js

@@ -0,0 +1,151 @@
+/** Types rendered inline. Everything else is served as an attachment. */
+export const INLINE_MEDIA_TYPES = new Set([
+    "image/jpeg",
+    "image/png",
+    "image/gif",
+    "image/webp",
+    "image/avif",
+    "audio/mpeg",
+    "audio/ogg",
+    "audio/aac",
+    "audio/mp4",
+    "audio/wav",
+    "audio/webm",
+    "video/mp4",
+    "video/webm",
+    "video/ogg",
+    "video/3gpp",
+    "video/quicktime",
+]);
+const baseHeaders = {
+    "Cache-Control": "private, no-store",
+    Vary: "Cookie, Authorization",
+    "X-Content-Type-Options": "nosniff",
+    "Referrer-Policy": "no-referrer",
+};
+/** Creates a Next.js App Router-compatible GET route without importing Next.js. */
+export function createMediaDownloadRoute(options) {
+    if (typeof options.authorize !== "function") {
+        throw new TypeError("authorize must be a function.");
+    }
+    if (typeof options.client?.media?.downloadStream !== "function" ||
+        typeof options.client.media.downloadUrl !== "function") {
+        throw new TypeError("client must be a Polymorfa MessagingClient.");
+    }
+    if (!["redirect", "proxy", "whatsapp"].includes(options.mode)) {
+        throw new TypeError("mode must be redirect, proxy, or whatsapp.");
+    }
+    if (options.mode === "whatsapp" &&
+        typeof options.client.media.downloadFromWhatsApp !== "function") {
+        throw new TypeError("client.media.downloadFromWhatsApp is required.");
+    }
+    const media = options.client.media;
+    return async (request) => {
+        if (request.method !== "GET") {
+            return jsonError(405, "method_not_allowed", "Use GET.", {
+                Allow: "GET",
+            });
+        }
+        let grant;
+        try {
+            grant = await options.authorize(request);
+        }
+        catch {
+            grant = null;
+        }
+        if (!isGrant(grant, options.mode)) {
+            return jsonError(403, "forbidden", "You cannot download this media.");
+        }
+        const signal = request.signal;
+        try {
+            if (options.mode === "whatsapp" && "message" in grant) {
+                const download = await media.downloadFromWhatsApp(grant.message, {
+                    signal,
+                });
+                return proxied(download.body, download.mimetype, grant.filename ?? download.fileName, undefined);
+            }
+            if (!("mediaId" in grant)) {
+                return jsonError(403, "forbidden", "You cannot download this media.");
+            }
+            if (options.mode === "redirect") {
+                const target = await media.downloadUrl(grant.mediaId, { signal });
+                if (!target.streamed) {
+                    return new Response(null, {
+                        status: 302,
+                        headers: { ...baseHeaders, Location: target.url },
+                    });
+                }
+            }
+            const download = await media.downloadStream(grant.mediaId, { signal });
+            return proxied(download.body, download.contentType, grant.filename ?? download.filename, download.contentLength);
+        }
+        catch (error) {
+            const status = error?.status;
+            if (status === 404) {
+                return jsonError(404, "not_found", "Media not found.");
+            }
+            return jsonError(502, "media_unavailable", "The media could not be downloaded.");
+        }
+    };
+}
+function isGrant(grant, mode) {
+    if (typeof grant !== "object" || grant === null)
+        return false;
+    if (mode === "whatsapp") {
+        return ("message" in grant &&
+            typeof grant.message?.media === "string" &&
+            typeof grant.message.type === "string");
+    }
+    return ("mediaId" in grant &&
+        typeof grant.mediaId === "string" &&
+        grant.mediaId.length > 0);
+}
+/** Returns the lowercase MIME essence, or undefined when malformed. */
+export function mediaTypeEssence(value) {
+    const essence = value?.split(";")[0]?.trim().toLowerCase();
+    return essence !== undefined &&
+        /^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/.test(essence)
+        ? essence
+        : undefined;
+}
+/** Builds the safe response headers used by proxied media. */
+export function safeMediaHeaders(contentType, filename, contentLength) {
+    const essence = mediaTypeEssence(contentType);
+    const inline = essence !== undefined && INLINE_MEDIA_TYPES.has(essence);
+    const headers = {
+        ...baseHeaders,
+        "Content-Type": inline ? essence : "application/octet-stream",
+        "Content-Security-Policy": "sandbox",
+        "Content-Disposition": contentDisposition(inline ? "inline" : "attachment", filename),
+    };
+    if (contentLength !== undefined && Number.isSafeInteger(contentLength)) {
+        headers["Content-Length"] = String(contentLength);
+    }
+    return headers;
+}
+function proxied(body, contentType, filename, contentLength) {
+    return new Response(body, {
+        status: 200,
+        headers: safeMediaHeaders(contentType, filename, contentLength),
+    });
+}
+function contentDisposition(type, filename) {
+    if (filename === undefined)
+        return type;
+    const clean = Array.from(filename)
+        .filter((character) => {
+        const code = character.charCodeAt(0);
+        return code >= 0x20 && code !== 0x7f;
+    })
+        .join("")
+        .replace(/[\\/]/g, "_")
+        .slice(0, 255);
+    if (clean.length === 0)
+        return type;
+    const ascii = clean.replace(/[^\x20-\x7e]/g, "_").replace(/["\\]/g, "_");
+    const encoded = encodeURIComponent(clean).replace(/['()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+    return `${type}; filename="${ascii}"; filename*=UTF-8''${encoded}`;
+}
+function jsonError(status, code, message, headers = {}) {
+    return Response.json({ error: { code, message } }, { status, headers: { ...baseHeaders, ...headers } });
+}

package/dist/messaging-token-mint.d.ts

@@ -0,0 +1,40 @@
+import type { ClientTokenMint, ClientTokenSubject } from "./token-route.js";
+/** Actions a Customer-scoped client token can carry in `allow`. */
+export type CustomerClientTokenAction = "send_message" | "send_reaction" | "send_typing" | "send_seen" | "read_presence" | "subscribe_presence" | "read_contact";
+/**
+ * What `resolve` returns: a token for one `session`, or (beta) for the
+ * numbers one `customer` owns, optionally narrowed by `allow`.
+ */
+export type MessagingClientTokenMintRequest = {
+    readonly session: string;
+    readonly ephemeralId: string;
+    readonly ttlSeconds?: number;
+    readonly customer?: never;
+    readonly allow?: never;
+} | {
+    /** Polymorfa Customer ID. Never pass your own external ID. */
+    readonly customer: string;
+    readonly allow?: readonly CustomerClientTokenAction[];
+    readonly ephemeralId: string;
+    readonly ttlSeconds?: number;
+    readonly session?: never;
+};
+export interface MessagingClientTokenMintResource {
+    mint(input: MessagingClientTokenMintRequest, options: {
+        readonly signal: AbortSignal;
+    }): Promise<{
+        readonly data: {
+            readonly success: true;
+            readonly data: {
+                readonly token: string;
+                readonly expiresAt: string;
+            };
+        };
+    }>;
+}
+export interface MessagingClientTokenMintOptions {
+    readonly clientTokens: MessagingClientTokenMintResource;
+    readonly resolve: (subject: ClientTokenSubject, request: Request) => MessagingClientTokenMintRequest | Promise<MessagingClientTokenMintRequest>;
+}
+export declare function createMessagingClientTokenMint(options: MessagingClientTokenMintOptions): ClientTokenMint;
+//# sourceMappingURL=messaging-token-mint.d.ts.map

package/dist/messaging-token-mint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging-token-mint.d.ts","sourceRoot":"","sources":["../src/messaging-token-mint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,eAAe,EACf,kBAAkB,EACnB,MAAM,kBAAkB,CAAC;AAE1B,mEAAmE;AACnE,MAAM,MAAM,yBAAyB,GACjC,cAAc,GACd,eAAe,GACf,aAAa,GACb,WAAW,GACX,eAAe,GACf,oBAAoB,GACpB,cAAc,CAAC;AAEnB;;;GAGG;AACH,MAAM,MAAM,+BAA+B,GACvC;IACE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACxB,GACD;IACE,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,gCAAgC;IAC/C,IAAI,CACF,KAAK,EAAE,+BAA+B,EACtC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACxC,OAAO,CAAC;QACT,QAAQ,CAAC,IAAI,EAAE;YACb,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;YACvB,QAAQ,CAAC,IAAI,EAAE;gBACb,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;aAC5B,CAAC;SACH,CAAC;KACH,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,YAAY,EAAE,gCAAgC,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,CAChB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,OAAO,KAEhB,+BAA+B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;CAC9E;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,+BAA+B,GACvC,eAAe,CAmCjB"}

package/dist/messaging-token-mint.js

@@ -0,0 +1,38 @@
+export function createMessagingClientTokenMint(options) {
+    if (typeof options.clientTokens?.mint !== "function" ||
+        typeof options.resolve !== "function") {
+        throw new TypeError("clientTokens.mint and resolve must be functions.");
+    }
+    return async (subject, request) => {
+        const input = await options.resolve(subject, request);
+        validateInput(input);
+        const response = await options.clientTokens.mint(input, {
+            signal: request.signal,
+        });
+        const token = response.data?.data?.token;
+        const expiresAt = Date.parse(response.data?.data?.expiresAt ?? "");
+        if (typeof token !== "string" ||
+            !token.startsWith("pmfa_ct_") ||
+            token.length <= "pmfa_ct_".length ||
+            !Number.isFinite(expiresAt)) {
+            throw new TypeError("The server SDK returned an invalid client token response.");
+        }
+        return Object.freeze({
+            value: token,
+            audience: "browser",
+            expiresAt,
+        });
+    };
+}
+function validateInput(input) {
+    const hasSession = typeof input.session === "string" && input.session.length > 0;
+    const hasCustomer = typeof input.customer === "string" && input.customer.length > 0;
+    if (hasSession === hasCustomer ||
+        typeof input.ephemeralId !== "string" ||
+        input.ephemeralId.length === 0) {
+        throw new TypeError("Exactly one of session or customer, and an ephemeralId, are required to mint a client token.");
+    }
+    if (input.allow !== undefined && !hasCustomer) {
+        throw new TypeError("allow is only supported for Customer-scoped client tokens.");
+    }
+}

package/dist/template-builder-route.d.ts

@@ -0,0 +1,123 @@
+export interface TemplateRouteSubject {
+    readonly userId: string;
+    readonly projectId?: string;
+    readonly organizationId?: string;
+}
+export type TemplateRouteHeader = {
+    readonly format: "none";
+} | {
+    readonly format: "text";
+    readonly text: string;
+} | {
+    readonly format: "image" | "video" | "document";
+    readonly example?: string;
+    readonly filename?: string;
+} | {
+    readonly format: "location";
+    readonly example?: {
+        readonly latitude: number;
+        readonly longitude: number;
+        readonly name?: string;
+        readonly address?: string;
+    };
+};
+export type TemplateRouteButton = {
+    readonly type: "quick_reply";
+    readonly text: string;
+} | {
+    readonly type: "url";
+    readonly text: string;
+    readonly url: string;
+} | {
+    readonly type: "phone";
+    readonly text: string;
+    readonly phone: string;
+} | {
+    readonly type: "copy_code";
+    readonly text?: string;
+    readonly example?: string;
+};
+export interface TemplateRouteDefinition {
+    readonly version: 1;
+    readonly kind: "standard" | "carousel" | "authentication" | "limited_time_offer";
+    readonly category: "MARKETING" | "UTILITY" | "AUTHENTICATION";
+    readonly language: string;
+    readonly header?: TemplateRouteHeader;
+    readonly body: string;
+    readonly footer?: string;
+    readonly buttons?: readonly TemplateRouteButton[];
+    readonly carousel?: {
+        readonly cards: readonly {
+            readonly header: Extract<TemplateRouteHeader, {
+                readonly format: "image" | "video" | "document";
+            }>;
+            readonly body: string;
+            readonly buttons?: readonly TemplateRouteButton[];
+        }[];
+    };
+    readonly authentication?: {
+        readonly otpType: "copy_code" | "one_tap";
+        readonly codeExample?: string;
+        readonly addSecurityRecommendation?: boolean;
+        readonly codeExpirationMinutes?: number;
+    };
+    readonly limitedTimeOffer?: {
+        readonly text: string;
+        readonly hasExpiration: boolean;
+    };
+    readonly variables: readonly {
+        readonly name: string;
+        readonly type: "text" | "number" | "currency" | "date_time";
+        readonly example: string;
+    }[];
+}
+export interface TemplateRouteDraft {
+    readonly name: string;
+    readonly definition: TemplateRouteDefinition;
+    readonly sampleValues?: Readonly<Record<string, string>>;
+}
+interface SdkResponse<T> {
+    readonly data: {
+        readonly success: boolean;
+        readonly data: T;
+    };
+}
+export interface TemplateRouteResource {
+    /** Enables the `list` action. */
+    list?(projectSlug: string, options: {
+        readonly signal: AbortSignal;
+    }): Promise<SdkResponse<unknown>>;
+    create(projectSlug: string, body: TemplateRouteDraft, options: {
+        readonly signal: AbortSignal;
+    }): Promise<SdkResponse<unknown>>;
+    retrieve(projectSlug: string, templateId: string, options: {
+        readonly signal: AbortSignal;
+    }): Promise<SdkResponse<unknown>>;
+    update(projectSlug: string, templateId: string, body: TemplateRouteDraft, options: {
+        readonly signal: AbortSignal;
+    }): Promise<SdkResponse<unknown>>;
+    delete(projectSlug: string, templateId: string, options: {
+        readonly signal: AbortSignal;
+    }): Promise<unknown>;
+    preview(projectSlug: string, templateId: string, body: {
+        readonly values?: Readonly<Record<string, string>>;
+        readonly surface?: "cloud" | "whatsmeow" | "sandbox";
+    }, options: {
+        readonly signal: AbortSignal;
+    }): Promise<SdkResponse<unknown>>;
+    submit(projectSlug: string, templateId: string, body: {
+        readonly session: string;
+    }, options: {
+        readonly signal: AbortSignal;
+    }): Promise<SdkResponse<unknown>>;
+}
+export interface TemplateBuilderRouteOptions {
+    readonly templates: TemplateRouteResource;
+    readonly authorize: (request: Request) => TemplateRouteSubject | null | Promise<TemplateRouteSubject | null>;
+    readonly resolveProjectSlug: (subject: TemplateRouteSubject, request: Request) => string | Promise<string>;
+    readonly resolveSubmissionSession: (subject: TemplateRouteSubject, request: Request) => string | Promise<string>;
+}
+/** Creates a Next.js App Router-compatible, application-mediated template route. */
+export declare function createTemplateBuilderRoute(options: TemplateBuilderRouteOptions): (request: Request) => Promise<Response>;
+export {};
+//# sourceMappingURL=template-builder-route.d.ts.map

package/dist/template-builder-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-builder-route.d.ts","sourceRoot":"","sources":["../src/template-builder-route.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClD;IACE,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACzE;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEN,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,IAAI,EACX,UAAU,GAAG,UAAU,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;IACpE,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,GAAG,gBAAgB,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,KAAK,EAAE,SAAS;YACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CACtB,mBAAmB,EACnB;gBAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,UAAU,CAAA;aAAE,CACpD,CAAC;YACF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;SACnD,EAAE,CAAC;KACL,CAAC;IACF,QAAQ,CAAC,cAAc,CAAC,EAAE;QACxB,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;QAC7C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,CAAC;IACF,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;KACjC,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,SAAS;QAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;QAC5D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC1D;AAED,UAAU,WAAW,CAAC,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC;CAChE;AAED,MAAM,WAAW,qBAAqB;IACpC,iCAAiC;IACjC,IAAI,CAAC,CACH,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACxC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACjC,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACxC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACjC,QAAQ,CACN,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACxC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACjC,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,kBAAkB,EACxB,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACxC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACjC,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACxC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,CACL,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE;QACJ,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;KACtD,EACD,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACxC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;IACjC,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAClC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GACxC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,CAClB,OAAO,EAAE,OAAO,KACb,oBAAoB,GAAG,IAAI,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IACxE,QAAQ,CAAC,kBAAkB,EAAE,CAC3B,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,OAAO,KACb,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,QAAQ,CAAC,wBAAwB,EAAE,CACjC,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,OAAO,KACb,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/B;AAmBD,oFAAoF;AACpF,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAoHzC"}