@teleporthq/teleport-plugin-next-workflows 0.43.67 → 0.43.69

package/dist/cjs/pg-client-code.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.generatePgClientCode = void 0;
+exports.generateLazyPgClientCode = exports.generatePgClientCode = void 0;
 /**
  * Shared generated Postgres-client boilerplate (SSL handling + `getClient()`)
  * for generated API routes that talk to the project database directly. Mirrors
@@ -72,4 +72,30 @@ const getClient = () => {
   );
 };`;
 exports.generatePgClientCode = generatePgClientCode;
+const PG_REQUIRE_LINE = "const { Client } = require('pg');";
+/**
+ * `generatePgClientCode()` with the driver loaded on first use instead of at
+ * module load, plus the `__loadPg()` loader it calls (null when `pg` is not
+ * installed). A module that some projects require without a Postgres driver —
+ * the sent-email ledger, the push subscription store — would otherwise fail
+ * the build of every route that imports it ("Collecting page data").
+ * `new Client(opts)` keeps working: a constructor that returns an object
+ * yields that object.
+ */
+const generateLazyPgClientCode = () => {
+    const code = (0, exports.generatePgClientCode)();
+    if (!code.startsWith(PG_REQUIRE_LINE)) {
+        throw new Error('generatePgClientCode() no longer starts with the pg require line');
+    }
+    return `var __pg = null;
+var __pgLoadFailed = false;
+function __loadPg() {
+  if (__pg || __pgLoadFailed) return __pg;
+  try { __pg = require('pg'); } catch (_e) { __pgLoadFailed = true; __pg = null; }
+  return __pg;
+}
+
+${code.replace(PG_REQUIRE_LINE, 'function Client(opts) { var pg = __loadPg(); return new pg.Client(opts); }')}`;
+};
+exports.generateLazyPgClientCode = generateLazyPgClientCode;
 //# sourceMappingURL=pg-client-code.js.map

package/dist/cjs/pg-client-code.js.map

@@ -1 +1 @@
-{"version":3,"file":"pg-client-code.js","sourceRoot":"","sources":["../../src/pg-client-code.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACI,MAAM,oBAAoB,GAAG,GAAW,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4D/C,CAAA;AA5DU,QAAA,oBAAoB,wBA4D9B"}
+{"version":3,"file":"pg-client-code.js","sourceRoot":"","sources":["../../src/pg-client-code.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACI,MAAM,oBAAoB,GAAG,GAAW,EAAE,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4D/C,CAAA;AA5DU,QAAA,oBAAoB,wBA4D9B;AAEH,MAAM,eAAe,GAAG,mCAAmC,CAAA;AAE3D;;;;;;;;GAQG;AACI,MAAM,wBAAwB,GAAG,GAAW,EAAE;IACnD,MAAM,IAAI,GAAG,IAAA,4BAAoB,GAAE,CAAA;IACnC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE;QACrC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;KACpF;IACD,OAAO;;;;;;;;EAQP,IAAI,CAAC,OAAO,CACZ,eAAe,EACf,4EAA4E,CAC7E,EAAE,CAAA;AACH,CAAC,CAAA;AAjBY,QAAA,wBAAwB,4BAiBpC"}

package/dist/cjs/runtime-storage-generator.d.ts

@@ -17,5 +17,33 @@ export declare const needsRuntimeStorageRoute: (usedNodeTypes: Set<string>) => b
  * Changing one without the other breaks that ordering — a test pins it.
  */
 export declare const UPLOAD_PROXY_TIMEOUT_MS = 120000;
+/**
+ * Who may upload what through `/api/runtime-storage/upload`.
+ *
+ * The route stores files in the merchant's runtime storage, on the merchant's
+ * quota, at a public URL. It used to forward whatever arrived — any type, any
+ * size, any `private` flag — and the storage worker checked the file against
+ * `allowedMimeTypes` / `maxFileSize` fields the same request supplied, so the
+ * caller set its own limits.
+ *
+ * - The store's own server code (the invoice PDF upload presents the app
+ *   secret) and a signed-in admin (the admin panel's image, asset and
+ *   digital-product uploaders) upload as before: any type, private included.
+ * - Everyone else — a shopper's review photos, profile photo, a product
+ *   option's print file, the upload widget on a public page — gets the limits
+ *   of THIS route: the image and PDF types those uploaders accept, each file
+ *   proven by its first bytes (never SVG: it runs script where it is served),
+ *   at most VISITOR_MAX_FILE_BYTES per file and VISITOR_MAX_FILES per request,
+ *   and never a private file. The fields the request sends can only narrow that.
+ *
+ * A signed-out visitor is NOT refused: a product option's file is chosen before
+ * the shopper decides whether to sign in (its custom node is declared
+ * guest-scoped), and the upload widget may sit on a public page. Refusing
+ * guests here would break both; the per-file proof and caps are what bound them.
+ */
+export declare const TRUSTED_UPLOAD_ROLES: ReadonlyArray<string>;
+export declare const VISITOR_UPLOAD_MIME_TYPES: ReadonlyArray<string>;
+export declare const VISITOR_MAX_FILE_BYTES: number;
+export declare const VISITOR_MAX_FILES = 10;
 export declare const generateRuntimeStorageUploadRoute: () => string;
 //# sourceMappingURL=runtime-storage-generator.d.ts.map

package/dist/cjs/runtime-storage-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-storage-generator.d.ts","sourceRoot":"","sources":["../../src/runtime-storage-generator.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,wBAAwB,kBAAmB,IAAI,MAAM,CAAC,KAAG,OAOrE,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,uBAAuB,SAAS,CAAA;AAE7C,eAAO,MAAM,iCAAiC,QAAO,MAyFpD,CAAA"}
+{"version":3,"file":"runtime-storage-generator.d.ts","sourceRoot":"","sources":["../../src/runtime-storage-generator.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,wBAAwB,kBAAmB,IAAI,MAAM,CAAC,KAAG,OAOrE,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,uBAAuB,SAAS,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAa,CAAA;AACpE,eAAO,MAAM,yBAAyB,EAAE,aAAa,CAAC,MAAM,CAM3D,CAAA;AACD,eAAO,MAAM,sBAAsB,QAAkB,CAAA;AACrD,eAAO,MAAM,iBAAiB,KAAK,CAAA;AAEnC,eAAO,MAAM,iCAAiC,QAAO,MAgSpD,CAAA"}

package/dist/cjs/runtime-storage-generator.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.generateRuntimeStorageUploadRoute = exports.UPLOAD_PROXY_TIMEOUT_MS = exports.needsRuntimeStorageRoute = void 0;
+exports.generateRuntimeStorageUploadRoute = exports.VISITOR_MAX_FILES = exports.VISITOR_MAX_FILE_BYTES = exports.VISITOR_UPLOAD_MIME_TYPES = exports.TRUSTED_UPLOAD_ROLES = exports.UPLOAD_PROXY_TIMEOUT_MS = exports.needsRuntimeStorageRoute = void 0;
+const session_cookie_resolver_1 = require("./session-cookie-resolver");
+const workflow_auth_generator_1 = require("./workflow-auth-generator");
 const FILE_STORAGE_NODE_TYPES = new Set([
     'file-storage-upload',
     'file-storage-list',
@@ -34,6 +36,40 @@ exports.needsRuntimeStorageRoute = needsRuntimeStorageRoute;
  * Changing one without the other breaks that ordering — a test pins it.
  */
 exports.UPLOAD_PROXY_TIMEOUT_MS = 120000;
+/**
+ * Who may upload what through `/api/runtime-storage/upload`.
+ *
+ * The route stores files in the merchant's runtime storage, on the merchant's
+ * quota, at a public URL. It used to forward whatever arrived — any type, any
+ * size, any `private` flag — and the storage worker checked the file against
+ * `allowedMimeTypes` / `maxFileSize` fields the same request supplied, so the
+ * caller set its own limits.
+ *
+ * - The store's own server code (the invoice PDF upload presents the app
+ *   secret) and a signed-in admin (the admin panel's image, asset and
+ *   digital-product uploaders) upload as before: any type, private included.
+ * - Everyone else — a shopper's review photos, profile photo, a product
+ *   option's print file, the upload widget on a public page — gets the limits
+ *   of THIS route: the image and PDF types those uploaders accept, each file
+ *   proven by its first bytes (never SVG: it runs script where it is served),
+ *   at most VISITOR_MAX_FILE_BYTES per file and VISITOR_MAX_FILES per request,
+ *   and never a private file. The fields the request sends can only narrow that.
+ *
+ * A signed-out visitor is NOT refused: a product option's file is chosen before
+ * the shopper decides whether to sign in (its custom node is declared
+ * guest-scoped), and the upload widget may sit on a public page. Refusing
+ * guests here would break both; the per-file proof and caps are what bound them.
+ */
+exports.TRUSTED_UPLOAD_ROLES = ['admin'];
+exports.VISITOR_UPLOAD_MIME_TYPES = [
+    'image/jpeg',
+    'image/png',
+    'image/webp',
+    'image/gif',
+    'application/pdf',
+];
+exports.VISITOR_MAX_FILE_BYTES = 5 * 1024 * 1024;
+exports.VISITOR_MAX_FILES = 10;
 const generateRuntimeStorageUploadRoute = () => {
     return `var RUNTIME_STORAGE_URL = process.env.RUNTIME_STORAGE_URL;
 var RUNTIME_STORAGE_API_KEY = process.env.RUNTIME_STORAGE_API_KEY;
@@ -43,6 +79,165 @@ var RUNTIME_STORAGE_PROJECT_ID = process.env.RUNTIME_STORAGE_PROJECT_ID;
 // must become a 504, never a request the browser waits on forever.
 var UPLOAD_TIMEOUT_MS = ${exports.UPLOAD_PROXY_TIMEOUT_MS};
 
+${(0, session_cookie_resolver_1.generateCommonJsSessionTokenResolverCode)()}
+${workflow_auth_generator_1.ROLE_OF_TOKEN_CODE}
+
+// What a visitor may upload — see TRUSTED_UPLOAD_ROLES in the generator.
+var TRUSTED_UPLOAD_ROLES = ${JSON.stringify(exports.TRUSTED_UPLOAD_ROLES)};
+var VISITOR_UPLOAD_MIME_TYPES = ${JSON.stringify(exports.VISITOR_UPLOAD_MIME_TYPES)};
+var VISITOR_MAX_FILE_BYTES = ${exports.VISITOR_MAX_FILE_BYTES};
+var VISITOR_MAX_FILES = ${exports.VISITOR_MAX_FILES};
+// The files plus room for the form's own fields and part headers.
+var VISITOR_MAX_REQUEST_BYTES = VISITOR_MAX_FILES * VISITOR_MAX_FILE_BYTES + 256 * 1024;
+
+var CRLF = Buffer.from([13, 10]);
+var BLANK_LINE = Buffer.from([13, 10, 13, 10]);
+
+// Only server code can read NEXTAUTH_SECRET, so a browser cannot present it.
+function presentsAppSecret(req) {
+  var given = req && req.headers ? req.headers['x-internal-data-secret'] : '';
+  var expected = process.env.NEXTAUTH_SECRET;
+  if (typeof given !== 'string' || !given || !expected) return false;
+  var a = Buffer.from(given);
+  var b = Buffer.from(String(expected));
+  return a.length === b.length && require('crypto').timingSafeEqual(a, b);
+}
+
+async function isTrustedUploader(req) {
+  if (presentsAppSecret(req)) return true;
+  var token = null;
+  try {
+    token = await __tqSessionToken(req);
+  } catch (e) {
+    token = null;
+  }
+  var role = roleOf(token);
+  return !!role && TRUSTED_UPLOAD_ROLES.indexOf(role) !== -1;
+}
+
+function refuse(res, status, code, message) {
+  res.status(status).json({ error: code, message: message });
+}
+
+// The whole request body, or an error with code UPLOAD_TOO_LARGE past limit.
+function readBody(req, limit) {
+  return new Promise(function (resolve, reject) {
+    var chunks = [];
+    var size = 0;
+    var settled = false;
+    req.on('data', function (chunk) {
+      if (settled) return;
+      size += chunk.length;
+      if (size > limit) {
+        settled = true;
+        var err = new Error('Upload too large');
+        err.code = 'UPLOAD_TOO_LARGE';
+        reject(err);
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on('end', function () {
+      if (settled) return;
+      settled = true;
+      resolve(Buffer.concat(chunks));
+    });
+    req.on('error', function (err) {
+      if (settled) return;
+      settled = true;
+      reject(err);
+    });
+  });
+}
+
+function multipartBoundary(contentType) {
+  var match = /boundary=(?:"([^"]+)"|([^;]+))/i.exec(String(contentType || ''));
+  return match ? (match[1] || match[2] || '').trim() : '';
+}
+
+function readPart(headerText, data) {
+  var part = { name: '', filename: null, type: '', data: data };
+  var lines = headerText.split(String.fromCharCode(13, 10));
+  for (var i = 0; i < lines.length; i++) {
+    var colon = lines[i].indexOf(':');
+    if (colon <= 0) continue;
+    var key = lines[i].slice(0, colon).trim().toLowerCase();
+    var value = lines[i].slice(colon + 1).trim();
+    if (key === 'content-disposition') {
+      var name = /[; ]name="([^"]*)"/i.exec(value);
+      var filename = /filename="([^"]*)"/i.exec(value);
+      part.name = name ? name[1] : '';
+      part.filename = filename ? filename[1] : null;
+    } else if (key === 'content-type') {
+      part.type = value.split(';')[0].trim().toLowerCase();
+    }
+  }
+  return part;
+}
+
+// The form's parts, or null when the body is not well-formed multipart.
+function parseMultipart(body, boundary) {
+  var delimiter = Buffer.from('--' + boundary);
+  var separator = Buffer.concat([CRLF, delimiter]);
+  var start = body.indexOf(delimiter);
+  if (start === -1) return null;
+  var parts = [];
+  var cursor = start + delimiter.length;
+  while (cursor + 1 < body.length) {
+    // '--' closes the form; CRLF opens the next part.
+    if (body[cursor] === 45 && body[cursor + 1] === 45) return parts;
+    if (body[cursor] !== 13 || body[cursor + 1] !== 10) return null;
+    var headerEnd = body.indexOf(BLANK_LINE, cursor + 2);
+    if (headerEnd === -1) return null;
+    var next = body.indexOf(separator, headerEnd + 4);
+    if (next === -1) return null;
+    parts.push(readPart(body.slice(cursor + 2, headerEnd).toString('utf8'), body.slice(headerEnd + 4, next)));
+    cursor = next + separator.length;
+  }
+  return null;
+}
+
+// What a file IS, by its first bytes — never what the request says it is.
+function sniffMimeType(data) {
+  var head = data.slice(0, 12).toString('latin1');
+  if (data.length >= 3 && data[0] === 255 && data[1] === 216 && data[2] === 255) return 'image/jpeg';
+  if (head.slice(0, 8) === String.fromCharCode(137, 80, 78, 71, 13, 10, 26, 10)) return 'image/png';
+  if (head.slice(0, 6) === 'GIF87a' || head.slice(0, 6) === 'GIF89a') return 'image/gif';
+  if (head.slice(0, 4) === 'RIFF' && head.slice(8, 12) === 'WEBP') return 'image/webp';
+  if (head.slice(0, 5) === '%PDF-') return 'application/pdf';
+  return '';
+}
+
+var DECLARED_TYPE_ALIASES = { 'image/jpg': 'image/jpeg', 'image/pjpeg': 'image/jpeg' };
+
+// null when a visitor may upload this form, else the refusal.
+function visitorUploadRefusal(parts) {
+  var files = 0;
+  for (var i = 0; i < parts.length; i++) {
+    var part = parts[i];
+    if (part.filename === null) {
+      if (part.name === 'private' && String(part.data.toString('utf8')).trim() === 'true') {
+        return { status: 403, code: 'UPLOAD_PRIVATE_FORBIDDEN', message: 'Only the store can upload private files.' };
+      }
+      continue;
+    }
+    files += 1;
+    if (files > VISITOR_MAX_FILES) {
+      return { status: 413, code: 'TOO_MANY_FILES', message: 'At most ' + VISITOR_MAX_FILES + ' files can be uploaded at once.' };
+    }
+    if (part.data.length > VISITOR_MAX_FILE_BYTES) {
+      return { status: 413, code: 'FILE_TOO_LARGE', message: 'Each file can be at most ' + Math.floor(VISITOR_MAX_FILE_BYTES / 1048576) + ' MB.' };
+    }
+    var actual = sniffMimeType(part.data);
+    var declared = DECLARED_TYPE_ALIASES[part.type] || part.type;
+    var declaredMatches = !declared || declared === 'application/octet-stream' || declared === actual;
+    if (!actual || VISITOR_UPLOAD_MIME_TYPES.indexOf(actual) === -1 || !declaredMatches) {
+      return { status: 415, code: 'FILE_TYPE_NOT_ALLOWED', message: 'Only JPG, PNG, WEBP, GIF and PDF files can be uploaded.' };
+    }
+  }
+  return null;
+}
+
 module.exports = async function handler(req, res) {
   if (req.method !== 'POST') {
     res.status(405).json({ error: 'Method not allowed' });
@@ -54,6 +249,44 @@ module.exports = async function handler(req, res) {
     return;
   }
 
+  var trusted = await isTrustedUploader(req);
+  var body = req;
+  var contentLength = req.headers['content-length'];
+
+  if (!trusted) {
+    var declaredLength = parseInt(contentLength, 10);
+    if (!isNaN(declaredLength) && declaredLength > VISITOR_MAX_REQUEST_BYTES) {
+      refuse(res, 413, 'UPLOAD_TOO_LARGE', 'The upload is too large.');
+      return;
+    }
+    var boundary = multipartBoundary(req.headers['content-type']);
+    if (!boundary) {
+      refuse(res, 400, 'UPLOAD_INVALID', 'The upload is not a file form.');
+      return;
+    }
+    try {
+      body = await readBody(req, VISITOR_MAX_REQUEST_BYTES);
+    } catch (readErr) {
+      if (readErr && readErr.code === 'UPLOAD_TOO_LARGE') {
+        refuse(res, 413, 'UPLOAD_TOO_LARGE', 'The upload is too large.');
+      } else {
+        refuse(res, 400, 'UPLOAD_INVALID', 'The upload could not be read.');
+      }
+      return;
+    }
+    var parts = parseMultipart(body, boundary);
+    if (!parts) {
+      refuse(res, 400, 'UPLOAD_INVALID', 'The upload is not a file form.');
+      return;
+    }
+    var refusal = visitorUploadRefusal(parts);
+    if (refusal) {
+      refuse(res, refusal.status, refusal.code, refusal.message);
+      return;
+    }
+    contentLength = String(body.length);
+  }
+
   var controller = new AbortController();
   var timedOut = false;
   var timer = setTimeout(function () {
@@ -71,14 +304,16 @@ module.exports = async function handler(req, res) {
     if (req.headers['content-type']) {
       headers['content-type'] = req.headers['content-type'];
     }
-    if (req.headers['content-length']) {
-      headers['content-length'] = req.headers['content-length'];
+    if (contentLength) {
+      headers['content-length'] = contentLength;
     }
 
     var storageRes = await fetch(targetUrl, {
       method: 'POST',
       headers: headers,
-      body: req,
+      // A trusted caller's form is streamed through untouched; a visitor's was
+      // read in full to be checked, and is forwarded byte for byte.
+      body: body,
       duplex: 'half',
       signal: controller.signal,
     });
@@ -114,7 +349,7 @@ module.exports = async function handler(req, res) {
     console.error('Runtime storage upload proxy error:', err);
     res.status(502).json({
       error: 'UPLOAD_PROXY_FAILED',
-      message: (err && err.message) || 'Upload proxy failed',
+      message: 'The upload could not be completed. Please try again.',
     });
   } finally {
     clearTimeout(timer);

package/dist/cjs/runtime-storage-generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-storage-generator.js","sourceRoot":"","sources":["../../src/runtime-storage-generator.ts"],"names":[],"mappings":";;;AAAA,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,qBAAqB;IACrB,mBAAmB;IACnB,0BAA0B;IAC1B,qBAAqB;CACtB,CAAC,CAAA;AAEK,MAAM,wBAAwB,GAAG,CAAC,aAA0B,EAAW,EAAE;IAC9E,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE;QAC9B,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACnC,OAAO,IAAI,CAAA;SACZ;KACF;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAPY,QAAA,wBAAwB,4BAOpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,uBAAuB,GAAG,MAAM,CAAA;AAEtC,MAAM,iCAAiC,GAAG,GAAW,EAAE;IAC5D,OAAO;;;;;;0BAMiB,+BAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiFhD,CAAA;AACD,CAAC,CAAA;AAzFY,QAAA,iCAAiC,qCAyF7C"}
+{"version":3,"file":"runtime-storage-generator.js","sourceRoot":"","sources":["../../src/runtime-storage-generator.ts"],"names":[],"mappings":";;;AAAA,uEAAoF;AACpF,uEAA8D;AAE9D,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,qBAAqB;IACrB,mBAAmB;IACnB,0BAA0B;IAC1B,qBAAqB;CACtB,CAAC,CAAA;AAEK,MAAM,wBAAwB,GAAG,CAAC,aAA0B,EAAW,EAAE;IAC9E,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE;QAC9B,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACnC,OAAO,IAAI,CAAA;SACZ;KACF;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAPY,QAAA,wBAAwB,4BAOpC;AAED;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,uBAAuB,GAAG,MAAM,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACU,QAAA,oBAAoB,GAA0B,CAAC,OAAO,CAAC,CAAA;AACvD,QAAA,yBAAyB,GAA0B;IAC9D,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,WAAW;IACX,iBAAiB;CAClB,CAAA;AACY,QAAA,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACxC,QAAA,iBAAiB,GAAG,EAAE,CAAA;AAE5B,MAAM,iCAAiC,GAAG,GAAW,EAAE;IAC5D,OAAO;;;;;;0BAMiB,+BAAuB;;EAE/C,IAAA,kEAAwC,GAAE;EAC1C,4CAAkB;;;6BAGS,IAAI,CAAC,SAAS,CAAC,4BAAoB,CAAC;kCAC/B,IAAI,CAAC,SAAS,CAAC,iCAAyB,CAAC;+BAC5C,8BAAsB;0BAC3B,yBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+Q1C,CAAA;AACD,CAAC,CAAA;AAhSY,QAAA,iCAAiC,qCAgS7C"}

package/dist/cjs/secret-collector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secret-collector.d.ts","sourceRoot":"","sources":["../../src/secret-collector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAA4C,MAAM,4BAA4B,CAAA;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAuCrC,eAAO,MAAM,cAAc,cAAe,aAAa,KAAG,WAAW,EAmCpE,CAAA;AAqCD,eAAO,MAAM,sBAAsB,WACzB,OAAO,MAAM,EAAE,OAAO,CAAC,YACrB,MAAM,UACR,MAAM,WACL,WAAW,EAAE,KACrB,OAAO,MAAM,EAAE,OAAO,CAYxB,CAAA;AAwBD,eAAO,MAAM,8BAA8B,cAAe,aAAa,KAAG,MAAM,EA2C/E,CAAA"}
+{"version":3,"file":"secret-collector.d.ts","sourceRoot":"","sources":["../../src/secret-collector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAA4C,MAAM,4BAA4B,CAAA;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AA4CrC,eAAO,MAAM,cAAc,cAAe,aAAa,KAAG,WAAW,EAmCpE,CAAA;AAqCD,eAAO,MAAM,sBAAsB,WACzB,OAAO,MAAM,EAAE,OAAO,CAAC,YACrB,MAAM,UACR,MAAM,WACL,WAAW,EAAE,KACrB,OAAO,MAAM,EAAE,OAAO,CAYxB,CAAA;AAwBD,eAAO,MAAM,8BAA8B,cAAe,aAAa,KAAG,MAAM,EA2C/E,CAAA"}

package/dist/cjs/secret-collector.js

@@ -24,11 +24,16 @@ const KNOWN_SECRET_FIELDS = {
     // Same credentials as the charge: a refund goes back through the provider
     // that took the money.
     'payment-refund': ['secretKey', 'clientId', 'clientSecret'],
-    'payment-subscribe-to-plan': ['secretKey'],
-    'payment-cancel-plan': ['secretKey'],
+    // A subscription's plan and the merchant's cancel / pause / resume go back
+    // through the provider that bills it; Stripe needs no plan.
+    'payment-ensure-subscription-plan': ['clientId', 'clientSecret'],
+    'payment-manage-subscription': ['secretKey', 'clientId', 'clientSecret'],
+    // The subscriber's billing page at the same provider.
+    'payment-billing-portal': ['secretKey', 'clientId', 'clientSecret'],
+    // Closing an order's open checkout goes back through the provider that opened it.
+    'payment-close-checkout': ['secretKey', 'clientId', 'clientSecret'],
     'payment-create-customer': ['secretKey', 'clientId', 'clientSecret'],
     'payment-create-product': ['secretKey'],
-    'payment-create-subscription': ['secretKey'],
     'payment-get-customer': ['secretKey'],
     'payment-get-product': ['secretKey'],
     'payment-list-customers': ['secretKey'],

package/dist/cjs/secret-collector.js.map

@@ -1 +1 @@
-{"version":3,"file":"secret-collector.js","sourceRoot":"","sources":["../../src/secret-collector.ts"],"names":[],"mappings":";;;AAEA,mCAAsC;AAEtC,MAAM,mBAAmB,GAA6B;IACpD,kBAAkB,EAAE,CAAC,OAAO,CAAC;IAC7B,uBAAuB,EAAE,CAAC,OAAO,CAAC;IAClC,kBAAkB,EAAE,CAAC,OAAO,CAAC;IAC7B,oBAAoB,EAAE,CAAC,OAAO,CAAC;IAC/B,mBAAmB,EAAE,CAAC,OAAO,CAAC;IAC9B,oBAAoB,EAAE,CAAC,OAAO,CAAC;IAC/B,4BAA4B,EAAE,CAAC,OAAO,CAAC;IACvC,kBAAkB,EAAE,CAAC,QAAQ,CAAC;IAC9B,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC3B,gBAAgB,EAAE,CAAC,aAAa,CAAC;IACjC,cAAc,EAAE,CAAC,QAAQ,CAAC;IAC1B,gBAAgB,EAAE,CAAC,QAAQ,CAAC;IAC5B,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC3B,aAAa,EAAE,CAAC,QAAQ,CAAC;IACzB,YAAY,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;IACzC,YAAY,EAAE,CAAC,aAAa,CAAC;IAC7B,sBAAsB,EAAE,EAAE;IAC1B,qBAAqB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;IAChE,0EAA0E;IAC1E,uBAAuB;IACvB,gBAAgB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;IAC3D,2BAA2B,EAAE,CAAC,WAAW,CAAC;IAC1C,qBAAqB,EAAE,CAAC,WAAW,CAAC;IACpC,yBAAyB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;IACpE,wBAAwB,EAAE,CAAC,WAAW,CAAC;IACvC,6BAA6B,EAAE,CAAC,WAAW,CAAC;IAC5C,sBAAsB,EAAE,CAAC,WAAW,CAAC;IACrC,qBAAqB,EAAE,CAAC,WAAW,CAAC;IACpC,wBAAwB,EAAE,CAAC,WAAW,CAAC;IACvC,oBAAoB,EAAE,CAAC,WAAW,CAAC;IACnC,uBAAuB,EAAE,CAAC,WAAW,CAAC;IACtC,4BAA4B,EAAE,CAAC,WAAW,CAAC;IAC3C,yBAAyB,EAAE,CAAC,WAAW,CAAC;CACzC,CAAA;AAEM,MAAM,cAAc,GAAG,CAAC,SAAwB,EAAiB,EAAE;IACxE,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IAErC,MAAM,WAAW,GAAG,CAAC,IAAsB,EAAE,EAAE;QAC7C,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE;gBACxE,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;gBAChE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;oBAChC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;oBAC3B,OAAO,CAAC,IAAI,CAAC;wBACX,UAAU;wBACV,KAAK,EAAE,KAAe;wBACtB,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,SAAS,EAAE,KAAK;qBACjB,CAAC,CAAA;iBACH;aACF;SACF;IACH,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,SAAS,CAAC,SAA0D,CAAA;IACzF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QACzC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,IAAI,SAAS,CAAC,WAAW,EAAE;QACzB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,EAA0B,EAAE,EAAE;YAC1E,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;KACH;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAnCY,QAAA,cAAc,kBAmC1B;AAED,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAY,EAAE;IAC5D,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE;QACjC,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAA;KACrC;IAED,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE;QACvC,MAAM,SAAS,GAAG,oBAAY,CAAC,QAAQ,CAAC,CAAA;QACxC,IAAI,SAAS,IAAI,cAAc,IAAI,SAAS,EAAE;YAC5C,OAAQ,SAAiB,CAAC,YAAY,IAAI,EAAE,CAAA;SAC7C;QACD,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,CAAA;KACvD;IAED,OAAO,EAAE,CAAA;AACX,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAE,MAAc,EAAU,EAAE;IACzF,MAAM,MAAM,GAAG,iBAAiB,CAAA;IAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC1D,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACpE,MAAM,MAAM,GAAG,MAAM;SAClB,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;SACf,WAAW,EAAE,CAAA;IAChB,OAAO,GAAG,MAAM,IAAI,QAAQ,IAAI,SAAS,IAAI,MAAM,EAAE,CAAA;AACvD,CAAC,CAAA;AAED,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IACzD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAAiC,CAAC,IAAI,KAAK,iBAAiB,CAC9D,CAAA;AACH,CAAC,CAAA;AAEM,MAAM,sBAAsB,GAAG,CACpC,MAA+B,EAC/B,QAAgB,EAChB,MAAc,EACd,OAAsB,EACG,EAAE;IAC3B,MAAM,MAAM,qBAAQ,MAAM,CAAE,CAAA;IAC5B,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IAErD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAA;QAChF,IAAI,MAAM,EAAE;YACV,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAA;SAClC;KACF;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAjBY,QAAA,sBAAsB,0BAiBlC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,CAAC,KAAc,EAAwC,EAAE;IACvF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QACvC,OAAO,KAAK,CAAA;KACb;IACD,MAAM,CAAC,GAAG,KAAgF,CAAA;IAC1F,OAAO,CACL,CAAC,CAAC,IAAI,KAAK,SAAS;QACpB,CAAC,CAAC,CAAC,CAAC,OAAO;QACX,CAAC,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ;QACpC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,CACjC,CAAA;AACH,CAAC,CAAA;AAEM,MAAM,8BAA8B,GAAG,CAAC,SAAwB,EAAY,EAAE;IACnF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE;QAC/C,OAAO,EAAE,CAAA;KACV;IAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;QACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;YACvC,OAAM;SACP;QACD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE;YAClC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC3B,OAAM;SACP;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACxB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACnB,OAAM;SACP;QACD,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,CAAC,IAAsB,EAAE,EAAE;QAC7C,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE;YACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;SAClB;IACH,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAmD,CAAA;IAClG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QACzC,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE;YACjC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;SAC9B;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAA2C,CAAA;IAC3F,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,EAAE,IAAK,EAAgD,CAAC,KAAK,CAAA;QAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC1B,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;SAC7B;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC,CAAA;AA3CY,QAAA,8BAA8B,kCA2C1C"}
+{"version":3,"file":"secret-collector.js","sourceRoot":"","sources":["../../src/secret-collector.ts"],"names":[],"mappings":";;;AAEA,mCAAsC;AAEtC,MAAM,mBAAmB,GAA6B;IACpD,kBAAkB,EAAE,CAAC,OAAO,CAAC;IAC7B,uBAAuB,EAAE,CAAC,OAAO,CAAC;IAClC,kBAAkB,EAAE,CAAC,OAAO,CAAC;IAC7B,oBAAoB,EAAE,CAAC,OAAO,CAAC;IAC/B,mBAAmB,EAAE,CAAC,OAAO,CAAC;IAC9B,oBAAoB,EAAE,CAAC,OAAO,CAAC;IAC/B,4BAA4B,EAAE,CAAC,OAAO,CAAC;IACvC,kBAAkB,EAAE,CAAC,QAAQ,CAAC;IAC9B,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC3B,gBAAgB,EAAE,CAAC,aAAa,CAAC;IACjC,cAAc,EAAE,CAAC,QAAQ,CAAC;IAC1B,gBAAgB,EAAE,CAAC,QAAQ,CAAC;IAC5B,eAAe,EAAE,CAAC,QAAQ,CAAC;IAC3B,aAAa,EAAE,CAAC,QAAQ,CAAC;IACzB,YAAY,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;IACzC,YAAY,EAAE,CAAC,aAAa,CAAC;IAC7B,sBAAsB,EAAE,EAAE;IAC1B,qBAAqB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;IAChE,0EAA0E;IAC1E,uBAAuB;IACvB,gBAAgB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;IAC3D,2EAA2E;IAC3E,4DAA4D;IAC5D,kCAAkC,EAAE,CAAC,UAAU,EAAE,cAAc,CAAC;IAChE,6BAA6B,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;IACxE,sDAAsD;IACtD,wBAAwB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;IACnE,kFAAkF;IAClF,wBAAwB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;IACnE,yBAAyB,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC;IACpE,wBAAwB,EAAE,CAAC,WAAW,CAAC;IACvC,sBAAsB,EAAE,CAAC,WAAW,CAAC;IACrC,qBAAqB,EAAE,CAAC,WAAW,CAAC;IACpC,wBAAwB,EAAE,CAAC,WAAW,CAAC;IACvC,oBAAoB,EAAE,CAAC,WAAW,CAAC;IACnC,uBAAuB,EAAE,CAAC,WAAW,CAAC;IACtC,4BAA4B,EAAE,CAAC,WAAW,CAAC;IAC3C,yBAAyB,EAAE,CAAC,WAAW,CAAC;CACzC,CAAA;AAEM,MAAM,cAAc,GAAG,CAAC,SAAwB,EAAiB,EAAE;IACxE,MAAM,OAAO,GAAkB,EAAE,CAAA;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IAErC,MAAM,WAAW,GAAG,CAAC,IAAsB,EAAE,EAAE;QAC7C,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAChC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE;gBACxE,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;gBAChE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;oBAChC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;oBAC3B,OAAO,CAAC,IAAI,CAAC;wBACX,UAAU;wBACV,KAAK,EAAE,KAAe;wBACtB,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,SAAS,EAAE,KAAK;qBACjB,CAAC,CAAA;iBACH;aACF;SACF;IACH,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,SAAS,CAAC,SAA0D,CAAA;IACzF,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QACzC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,IAAI,SAAS,CAAC,WAAW,EAAE;QACzB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,EAA0B,EAAE,EAAE;YAC1E,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QAC/B,CAAC,CAAC,CAAA;KACH;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAnCY,QAAA,cAAc,kBAmC1B;AAED,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAY,EAAE;IAC5D,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE;QACjC,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAA;KACrC;IAED,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE;QACvC,MAAM,SAAS,GAAG,oBAAY,CAAC,QAAQ,CAAC,CAAA;QACxC,IAAI,SAAS,IAAI,cAAc,IAAI,SAAS,EAAE;YAC5C,OAAQ,SAAiB,CAAC,YAAY,IAAI,EAAE,CAAA;SAC7C;QACD,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,CAAC,CAAA;KACvD;IAED,OAAO,EAAE,CAAA;AACX,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAE,MAAc,EAAU,EAAE;IACzF,MAAM,MAAM,GAAG,iBAAiB,CAAA;IAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;IAC1D,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;IACpE,MAAM,MAAM,GAAG,MAAM;SAClB,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;SACf,WAAW,EAAE,CAAA;IAChB,OAAO,GAAG,MAAM,IAAI,QAAQ,IAAI,SAAS,IAAI,MAAM,EAAE,CAAA;AACvD,CAAC,CAAA;AAED,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAW,EAAE;IACzD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAAiC,CAAC,IAAI,KAAK,iBAAiB,CAC9D,CAAA;AACH,CAAC,CAAA;AAEM,MAAM,sBAAsB,GAAG,CACpC,MAA+B,EAC/B,QAAgB,EAChB,MAAc,EACd,OAAsB,EACG,EAAE;IAC3B,MAAM,MAAM,qBAAQ,MAAM,CAAE,CAAA;IAC5B,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IAErD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAA;QAChF,IAAI,MAAM,EAAE;YACV,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAA;SAClC;KACF;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAjBY,QAAA,sBAAsB,0BAiBlC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,yDAAyD;AACzD,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,CAAC,KAAc,EAAwC,EAAE;IACvF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QACvC,OAAO,KAAK,CAAA;KACb;IACD,MAAM,CAAC,GAAG,KAAgF,CAAA;IAC1F,OAAO,CACL,CAAC,CAAC,IAAI,KAAK,SAAS;QACpB,CAAC,CAAC,CAAC,CAAC,OAAO;QACX,CAAC,CAAC,OAAO,CAAC,aAAa,KAAK,QAAQ;QACpC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,CACjC,CAAA;AACH,CAAC,CAAA;AAEM,MAAM,8BAA8B,GAAG,CAAC,SAAwB,EAAY,EAAE;IACnF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE;QAC/C,OAAO,EAAE,CAAA;KACV;IAED,MAAM,IAAI,GAAG,CAAC,KAAc,EAAQ,EAAE;QACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;YACvC,OAAM;SACP;QACD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE;YAClC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAC3B,OAAM;SACP;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACxB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACnB,OAAM;SACP;QACD,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,CAAC,IAAsB,EAAE,EAAE;QAC7C,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE;YACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;SAClB;IACH,CAAC,CAAA;IAED,MAAM,YAAY,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAmD,CAAA;IAClG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QACzC,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE;YACjC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;SAC9B;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,CAAC,SAAS,CAAC,WAAW,IAAI,EAAE,CAA2C,CAAA;IAC3F,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,EAAE,IAAK,EAAgD,CAAC,KAAK,CAAA;QAC7E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAC1B,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;SAC7B;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC,CAAA;AA3CY,QAAA,8BAA8B,kCA2C1C"}

package/dist/cjs/security-scanner.d.ts

@@ -17,7 +17,16 @@
  *   - teleport-gui/packages/workflow-schema/src/security/protected-env-names.ts
  *   - teleport-services-worker/src/modules/vercel/security/protected-env-names.ts
  */
-export declare const PROTECTED_ENV_NAMES: readonly ["TELEPORT_DB_CONNECTION_STRING", "RUNTIME_STORAGE_API_KEY", "RUNTIME_STORAGE_PROJECT_ID", "TELEPORT_PROJECT_TOKEN", "REALTIME_SERVER_API_KEY", "REALTIME_SERVER_URL", "PDF_SERVICE_URL", "PDF_SERVICE_API_KEY"];
+export declare const PROTECTED_ENV_NAMES: readonly ["TELEPORT_DB_CONNECTION_STRING", "RUNTIME_STORAGE_API_KEY", "RUNTIME_STORAGE_PROJECT_ID", "TELEPORT_PROJECT_TOKEN", "REALTIME_SERVER_API_KEY", "REALTIME_SERVER_URL", "PDF_SERVICE_URL", "PDF_SERVICE_API_KEY", "TELEPORT_CRON_SECRET", "TELEPORT_CRON_SECRET_PREVIOUS"];
+/**
+ * The merchant's payment-provider credentials, under the name a deploy writes
+ * (`STRIPE_SECRET_KEY`) or the one the editor stores (`CONFIGURATION_STRIPE_…`,
+ * numbered on a second save). Only the store's payment drivers read them: a
+ * server script that could would hand the merchant's API key to any visitor.
+ * Mirror of the GUI's `PROTECTED_ENV_NAME_PATTERN`; the runtime guard in
+ * `general-custom-js.ts` denies the same names.
+ */
+export declare const PROTECTED_ENV_NAME_PATTERN: RegExp;
 export interface CodegenSecurityViolation {
     workflowId: string;
     workflowName?: string;

package/dist/cjs/security-scanner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security-scanner.d.ts","sourceRoot":"","sources":["../../src/security-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,mBAAmB,2NAStB,CAAA;AAEV,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;aACjB,UAAU,EAAE,wBAAwB,EAAE;gBAAtC,UAAU,EAAE,wBAAwB,EAAE;CAWnE;AAED,UAAU,gBAAgB;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3B;AAED,UAAU,YAAY;IACpB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAC3B;AAED,UAAU,kBAAkB;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,GAAG,IAAI,CA2BjG"}
+{"version":3,"file":"security-scanner.d.ts","sourceRoot":"","sources":["../../src/security-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,mBAAmB,oRAWtB,CAAA;AAEV;;;;;;;GAOG;AACH,eAAO,MAAM,0BAA0B,QACqD,CAAA;AAE5F,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,oBAAqB,SAAQ,KAAK;aACjB,UAAU,EAAE,wBAAwB,EAAE;gBAAtC,UAAU,EAAE,wBAAwB,EAAE;CAWnE;AAED,UAAU,gBAAgB;IACxB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3B;AAED,UAAU,YAAY;IACpB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAC3B;AAED,UAAU,kBAAkB;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;CACzC;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,GAAG,IAAI,CA2BjG"}

package/dist/cjs/security-scanner.js

@@ -19,7 +19,7 @@
  *   - teleport-services-worker/src/modules/vercel/security/protected-env-names.ts
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertWorkflowsAreSecure = exports.CodegenSecurityError = exports.PROTECTED_ENV_NAMES = void 0;
+exports.assertWorkflowsAreSecure = exports.CodegenSecurityError = exports.PROTECTED_ENV_NAME_PATTERN = exports.PROTECTED_ENV_NAMES = void 0;
 exports.PROTECTED_ENV_NAMES = [
     'TELEPORT_DB_CONNECTION_STRING',
     'RUNTIME_STORAGE_API_KEY',
@@ -29,7 +29,18 @@ exports.PROTECTED_ENV_NAMES = [
     'REALTIME_SERVER_URL',
     'PDF_SERVICE_URL',
     'PDF_SERVICE_API_KEY',
+    'TELEPORT_CRON_SECRET',
+    'TELEPORT_CRON_SECRET_PREVIOUS',
 ];
+/**
+ * The merchant's payment-provider credentials, under the name a deploy writes
+ * (`STRIPE_SECRET_KEY`) or the one the editor stores (`CONFIGURATION_STRIPE_…`,
+ * numbered on a second save). Only the store's payment drivers read them: a
+ * server script that could would hand the merchant's API key to any visitor.
+ * Mirror of the GUI's `PROTECTED_ENV_NAME_PATTERN`; the runtime guard in
+ * `general-custom-js.ts` denies the same names.
+ */
+exports.PROTECTED_ENV_NAME_PATTERN = /^(?:CONFIGURATION_)?(?:STRIPE|PAYPAL|MOLLIE|RAZORPAY|SQUARE|PADDLE|COINGATE)_[A-Z0-9_]+$/;
 class CodegenSecurityError extends Error {
     constructor(violations) {
         super(`Codegen blocked by ${violations.length} security violation${violations.length === 1 ? '' : 's'}`);
@@ -97,6 +108,13 @@ function scanForObviousViolations(rawCode) {
             });
         }
     }
+    const credentialNames = (code.match(/\b[A-Z][A-Z0-9_]+\b/g) || []).filter((word) => exports.PROTECTED_ENV_NAME_PATTERN.test(word));
+    for (const name of Array.from(new Set(credentialNames))) {
+        out.push({
+            rule: 'protected-env-access',
+            message: `references payment credential "${name}"`,
+        });
+    }
     if (/\beval\s*\(/.test(code)) {
         out.push({ rule: 'sandbox-escape-eval', message: 'calls eval(...)' });
     }

package/dist/cjs/security-scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"security-scanner.js","sourceRoot":"","sources":["../../src/security-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAEU,QAAA,mBAAmB,GAAG;IACjC,+BAA+B;IAC/B,yBAAyB;IACzB,4BAA4B;IAC5B,wBAAwB;IACxB,yBAAyB;IACzB,qBAAqB;IACrB,iBAAiB;IACjB,qBAAqB;CACb,CAAA;AAUV,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAA4B,UAAsC;QAChE,KAAK,CACH,sBAAsB,UAAU,CAAC,MAAM,sBACrC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACjC,EAAE,CACH,CAAA;QALyB,eAAU,GAAV,UAAU,CAA4B;QAMhE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;QAClC,sEAAsE;QACtE,iEAAiE;QACjE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAA;IAC7D,CAAC;CACF;AAZD,oDAYC;AAiBD;;;;;;;GAOG;AACH,SAAgB,wBAAwB,CAAC,kBAAkD;;IACzF,IAAI,CAAC,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,SAAS,CAAA;QAAE,OAAM;IAC1C,MAAM,UAAU,GAA+B,EAAE,CAAA;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE;QACrE,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC;YAAE,SAAQ;QAC7C,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE;YAC3B,MAAM,aAAa,GAAG,IAIrB,CAAA;YACD,IAAI,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,IAAI,MAAK,mBAAmB;gBAAE,SAAQ;YACzD,MAAM,IAAI,GAAG,MAAA,aAAa,CAAC,MAAM,0CAAE,IAAI,CAAA;YACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAQ;YACtD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;YAC/C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;gBAC9B,UAAU,CAAC,IAAI,CAAC;oBACd,UAAU,EAAE,IAAI;oBAChB,YAAY,EAAE,EAAE,CAAC,IAAI;oBACrB,MAAM,EAAE,MAAA,aAAa,CAAC,EAAE,mCAAI,GAAG;oBAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CAAA;aACH;SACF;KACF;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAA;AACvE,CAAC;AA3BD,4DA2BC;AAOD;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,GAAG,GAAqB,EAAE,CAAA;IAChC,MAAM,IAAI,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAA;IAEnD,KAAK,MAAM,IAAI,IAAI,2BAAmB,EAAE;QACtC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC1C,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,yCAAyC,IAAI,GAAG;aAC1D,CAAC,CAAA;SACH;KACF;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAA;KACtE;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC3C,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAA;KACH;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAA;KAC5E;IACD,IACE,kIAAkI,CAAC,IAAI,CACrI,IAAI,CACL,EACD;QACA,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAA;KACH;IACD,IACE,iIAAiI,CAAC,IAAI,CACpI,IAAI,CACL,EACD;QACA,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAA;KACH;IACD,IAAI,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACnE,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAA;KACH;IACD,kCAAkC;IAClC,IACE,sIAAsI,CAAC,IAAI,CACzI,IAAI,CACL;QACD,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC;QACpD,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC;QACrD,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QACtC,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC/E;QACA,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAA;KACH;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAa;IAClD,IAAI,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAChF,QAAQ,GAAG,QAAQ;SAChB,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;SACnF,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;SACjF,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACpF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,QAAQ;QAAE,OAAO,EAAE,CAAA;IACpE,IAAI;QACF,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;KAClC;IAAC,WAAM;QACN,OAAO,EAAE,CAAA;KACV;AACH,CAAC"}
+{"version":3,"file":"security-scanner.js","sourceRoot":"","sources":["../../src/security-scanner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAEU,QAAA,mBAAmB,GAAG;IACjC,+BAA+B;IAC/B,yBAAyB;IACzB,4BAA4B;IAC5B,wBAAwB;IACxB,yBAAyB;IACzB,qBAAqB;IACrB,iBAAiB;IACjB,qBAAqB;IACrB,sBAAsB;IACtB,+BAA+B;CACvB,CAAA;AAEV;;;;;;;GAOG;AACU,QAAA,0BAA0B,GACrC,0FAA0F,CAAA;AAU5F,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAA4B,UAAsC;QAChE,KAAK,CACH,sBAAsB,UAAU,CAAC,MAAM,sBACrC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACjC,EAAE,CACH,CAAA;QALyB,eAAU,GAAV,UAAU,CAA4B;QAMhE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;QAClC,sEAAsE;QACtE,iEAAiE;QACjE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAA;IAC7D,CAAC;CACF;AAZD,oDAYC;AAiBD;;;;;;;GAOG;AACH,SAAgB,wBAAwB,CAAC,kBAAkD;;IACzF,IAAI,CAAC,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,SAAS,CAAA;QAAE,OAAM;IAC1C,MAAM,UAAU,GAA+B,EAAE,CAAA;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE;QACrE,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC;YAAE,SAAQ;QAC7C,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE;YAC3B,MAAM,aAAa,GAAG,IAIrB,CAAA;YACD,IAAI,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,IAAI,MAAK,mBAAmB;gBAAE,SAAQ;YACzD,MAAM,IAAI,GAAG,MAAA,aAAa,CAAC,MAAM,0CAAE,IAAI,CAAA;YACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,SAAQ;YACtD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;YAC/C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE;gBAC9B,UAAU,CAAC,IAAI,CAAC;oBACd,UAAU,EAAE,IAAI;oBAChB,YAAY,EAAE,EAAE,CAAC,IAAI;oBACrB,MAAM,EAAE,MAAA,aAAa,CAAC,EAAE,mCAAI,GAAG;oBAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;iBACzB,CAAC,CAAA;aACH;SACF;KACF;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAA;AACvE,CAAC;AA3BD,4DA2BC;AAOD;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,GAAG,GAAqB,EAAE,CAAA;IAChC,MAAM,IAAI,GAAG,6BAA6B,CAAC,OAAO,CAAC,CAAA;IAEnD,KAAK,MAAM,IAAI,IAAI,2BAAmB,EAAE;QACtC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC1C,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,yCAAyC,IAAI,GAAG;aAC1D,CAAC,CAAA;SACH;KACF;IACD,MAAM,eAAe,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACjF,kCAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CACtC,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE;QACvD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,kCAAkC,IAAI,GAAG;SACnD,CAAC,CAAA;KACH;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAA;KACtE;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC3C,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAA;KACH;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAA;KAC5E;IACD,IACE,kIAAkI,CAAC,IAAI,CACrI,IAAI,CACL,EACD;QACA,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,qCAAqC;SAC/C,CAAC,CAAA;KACH;IACD,IACE,iIAAiI,CAAC,IAAI,CACpI,IAAI,CACL,EACD;QACA,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAA;KACH;IACD,IAAI,oDAAoD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACnE,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAA;KACH;IACD,kCAAkC;IAClC,IACE,sIAAsI,CAAC,IAAI,CACzI,IAAI,CACL;QACD,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC;QACpD,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC;QACrD,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;QACtC,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC/E;QACA,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAA;KACH;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAa;IAClD,IAAI,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAChF,QAAQ,GAAG,QAAQ;SAChB,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;SACnF,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;SACjF,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IACpF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,QAAQ;QAAE,OAAO,EAAE,CAAA;IACpE,IAAI;QACF,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;KAClC;IAAC,WAAM;QACN,OAAO,EAAE,CAAA;KACV;AACH,CAAC"}

package/dist/cjs/segment-context-needs.d.ts

@@ -0,0 +1,38 @@
+import { UIDLCustomWorkflowNode, UIDLWorkflowNode } from '@teleporthq/teleport-types';
+/**
+ * Which of the page's state a server segment can read.
+ *
+ * The browser hands a server segment the workflow context it holds, and that
+ * context carries `__stateValues` — a snapshot of EVERY state the page has,
+ * once at the top level and once inside the trigger context. A checkout page
+ * holds its country list, its cart and its order history there; a voucher
+ * check reads none of it, yet every request shipped all of it, and every
+ * reply echoed it back.
+ *
+ * What a server segment can read off that bag is fixed when the app is
+ * generated, because a server node reads page state only through these:
+ *   - a whole-string `{{state.<name>...}}` template token
+ *     (`resolveTemplateTokenString`), or `{{Current User.id}}`, which reads
+ *     `currentUser`;
+ *   - a `workflowContext` reference whose path walks through `__stateValues`;
+ *   - a JS expression evaluated against the context (an expression condition,
+ *     an expression switch, a while / until loop), which can name the bag —
+ *     any string that mentions it is taken as reading all of it;
+ *   - a custom node it calls, whose own nodes may do any of the above; the
+ *     custom node's inner server segments prune for themselves, but they can
+ *     only prune what the calling segment carried, so the need is transitive.
+ * A custom-JS node cannot: the bag is a reserved key its handler never exposes.
+ *
+ * The client runtime keeps exactly these entries in the request
+ * (`pruneContext`); '*' keeps the whole bag, as before.
+ */
+/** Every state entry travels — an expression may read any of them. */
+export declare const ALL_STATE_KEYS = "*";
+export type SegmentStateKeys = string[] | typeof ALL_STATE_KEYS;
+/**
+ * The page-state names the given nodes — and, transitively, the custom nodes
+ * they call — can read, sorted; or '*' when one of them evaluates an
+ * expression that may read the whole bag.
+ */
+export declare const collectSegmentStateKeys: (nodes: UIDLWorkflowNode[], customNodes: Record<string, UIDLCustomWorkflowNode> | undefined) => SegmentStateKeys;
+//# sourceMappingURL=segment-context-needs.d.ts.map

package/dist/cjs/segment-context-needs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"segment-context-needs.d.ts","sourceRoot":"","sources":["../../src/segment-context-needs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAErF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,sEAAsE;AACtE,eAAO,MAAM,cAAc,MAAM,CAAA;AAEjC,MAAM,MAAM,gBAAgB,GAAG,MAAM,EAAE,GAAG,OAAO,cAAc,CAAA;AAsG/D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,UAC3B,gBAAgB,EAAE,eACZ,OAAO,MAAM,EAAE,sBAAsB,CAAC,GAAG,SAAS,KAC9D,gBAIF,CAAA"}