@teleporthq/teleport-plugin-next-workflows 0.44.10 → 0.44.17

package/src/graph-utils.ts

@@ -377,6 +377,39 @@ export const collectUsedNodeTypes = (workflows: UIDLWorkflows): Set<string> => {
   return types
 }
 
+/**
+ * The step types of every custom node `nodes` call, and of the custom nodes
+ * those call, recursively. A cron, webhook or automation route runs them in
+ * process (`utils/workflows/custom-nodes.js`) with its own handler map, which
+ * holds a handler only for the types it is generated with.
+ */
+export const collectCalledCustomNodeTypes = (
+  nodes: UIDLWorkflowNode[],
+  customNodes: Record<string, { nodes?: UIDLWorkflowNode[] }> | undefined
+): Set<string> => {
+  const types = new Set<string>()
+  const visited = new Set<string>()
+  const pending = [...nodes]
+  while (pending.length > 0) {
+    const node = pending.pop()
+    if (!node || node.type !== 'general-custom-node') {
+      continue
+    }
+    const customNodeId = (node.config as { customNodeId?: unknown } | undefined)?.customNodeId
+    if (typeof customNodeId !== 'string' || visited.has(customNodeId)) {
+      continue
+    }
+    visited.add(customNodeId)
+    for (const step of (customNodes && customNodes[customNodeId]?.nodes) || []) {
+      if (step) {
+        types.add(step.type)
+        pending.push(step)
+      }
+    }
+  }
+  return types
+}
+
 export const AI_NODE_TYPES = new Set([
   'ai-custom-prompt',
   'ai-sentiment-analysis',

package/src/index.ts

@@ -2,6 +2,22 @@ export { createNextWorkflowPlugin } from './workflow-component-plugin'
 export { NextWorkflowProjectPlugin } from './workflow-project-plugin'
 export { nodeRegistry } from './nodes'
 export { splitIntoSegments, getServerSegments, getClientSegments } from './segment-splitter'
+export {
+  SERVER_CUSTOM_NODE_CALLS_VERSION,
+  assertServerBoundCallParameters,
+} from './server-custom-node-call'
+// Every workflow refusal the generator makes at publish, found without
+// generating: the editor's AI tools and its publish ask before a write lands
+// and before a publish goes out.
+export { collectWorkflowPublishRefusals } from './publish-refusals'
+export type { WorkflowPublishRefusal, WorkflowPublishRefusalKind } from './publish-refusals'
+export {
+  findPublicRestrictedSteps,
+  describePublicStepRefusals,
+  customNodeStepReach,
+} from './public-step-guards'
+export type { PublicStepRefusal, CustomNodeStepReach } from './public-step-guards'
+export { describeRefusedSend } from './nodes/email/outbound-message-guard'
 export { collectSegmentStateKeys, ALL_STATE_KEYS } from './segment-context-needs'
 export type { SegmentStateKeys } from './segment-context-needs'
 export { collectSecrets } from './secret-collector'
@@ -24,6 +40,24 @@ export {
 export { generateTriggerCode } from './trigger-generator'
 export { generatePgClientCode, generateLazyPgClientCode } from './pg-client-code'
 export { getDatabaseDriverDependencies } from './auth-generator'
+export { generateAutomationFiles } from './automations/automations-project-plugin'
+export type { AutomationFilesOptions } from './automations/automations-project-plugin'
+export {
+  BUSINESS_EVENT_TRIGGER,
+  automationEventType,
+  collectAutomationWorkflows,
+  AUTOMATIONS_PATH,
+  hasAutomationEventBus,
+  hasAutomationsBus,
+  isAutomationWorkflow,
+} from './automations/automations-scope'
+export {
+  APP_EVENTS_FILE_KEY,
+  APP_EVENTS_FILE_NAME,
+  APP_EVENTS_PATH,
+  ensureAppEventsModule,
+  generateAppEventsModuleCode,
+} from './automations/app-events-source'
 export {
   generateSubscriberAccessHelperModule,
   generateSubscriberAccessRoute,
@@ -33,6 +67,22 @@ export {
   resolveSubscriptionFallbackRoute,
 } from './subscriber-access-route-generator'
 export { ensureSentEmailLogModule } from './sent-email-log'
+export {
+  looksLikeOrderRedemptionStatement,
+  looksLikeSettleOrderStatement,
+} from './ecommerce/place-order-guards'
+export {
+  ensureSecurityRuntimeModule,
+  generateSecurityRuntimeCode,
+  RATE_LIMITS_TABLE,
+  SECURITY_RUNTIME_FILE_KEY,
+  SECURITY_RUNTIME_FILE_NAME,
+  SECURITY_RUNTIME_PATH,
+  securityRuntimeSpecifier,
+  TOO_MANY_REQUESTS_MESSAGE,
+} from './security-runtime'
+// The site's one daily AI budget, shared by the workflow AI nodes and the AI chat.
+export { AI_SITE_CALLS_KEY, AI_SITE_CALLS_PER_DAY } from './nodes/ai/ai-provider-utils'
 export {
   ensureEmailLocaleModule,
   EMAIL_LOCALE_CONFIG_KEY,
@@ -45,6 +95,12 @@ export {
   generateSessionTokenResolverCode,
   generateCommonJsSessionTokenResolverCode,
 } from './session-cookie-resolver'
+// The reset page's token leaves the address (teleport-project-generator-next
+// address-key-keeper.ts).
+export {
+  RESET_TOKEN_STORAGE_KEY,
+  resetTokenKeeperPagePaths,
+} from './password-reset-route-generator'
 export {
   collectUsedNodeTypes,
   projectUsesRealtime,
@@ -54,9 +110,14 @@ export {
 export * from './realtime-generator'
 export { generateInvoiceFiles, resolveInvoiceDataSource } from './invoice'
 export { generateWebhookFiles } from './webhook-generator'
+// How the app's server code calls its own routes: the one bypass-header
+// builder, and NEXTAUTH_URL as the deployment configured it.
+export { generateProtectionBypassHeaderStatements } from './self-call-headers'
+export { CONFIGURED_NEXTAUTH_URL_EXPRESSION } from './configured-nextauth-url'
 export {
   declarePaymentCredentialEnv,
   ensurePaymentDriversModule,
+  isPaymentWebhookConfig,
   readUidlPaymentProviders,
   resolveStorePaymentDriverIds,
 } from './payments'
@@ -66,3 +127,12 @@ export {
 } from './runtime-storage-generator'
 export * from './types'
 export { SCROLL_POINT_PROGRESS, DEFAULT_SCROLL_POINT, resolveScrollPoint } from './scroll-points'
+// The newsletter: its project plugin, and the links' token as the services
+// worker reproduces it (R-N7).
+export { NextNewsletterProjectPlugin } from './newsletter/project-plugin'
+export { newsletterTokenSpec, NEWSLETTER_SQL } from './newsletter/helper-code'
+export {
+  NEWSLETTER_SOURCES,
+  VISITOR_SIGN_UP_POINTS,
+  readNewsletterSettings,
+} from './newsletter/newsletter-scope'

package/src/invoice/api-routes-code.ts

@@ -19,7 +19,10 @@ const INVOICE_ADMIN_ROLES = ['admin']
  * NEXTAUTH_SECRET, so a browser cannot forge it; it is compared in constant
  * time. Everyone else is who their session says they are.
  */
-const INVOICE_CALLER_CODE = `${generateCommonJsSessionTokenResolverCode()}
+const invoiceCallerCode = (
+  projectRoot: string,
+  withRevocation: boolean
+): string => `${generateCommonJsSessionTokenResolverCode(projectRoot, { withRevocation })}
 ${ROLE_OF_TOKEN_CODE}
 
 var INVOICE_ADMIN_ROLES = ${JSON.stringify(INVOICE_ADMIN_ROLES)};
@@ -93,7 +96,10 @@ async function recordInvoiceEmailSent(invoiceData, sender) {
   });
 }`
 
-export const generateInvoiceGenerateRouteCode = (settings: UIDLInvoiceSettings): string => {
+export const generateInvoiceGenerateRouteCode = (
+  settings: UIDLInvoiceSettings,
+  options: { withSessionRevocation?: boolean } = {}
+): string => {
   const prefix = settings.invoicePrefix || 'INV-'
   const autoGenerate = settings.autoGenerateOnPayment !== false
   const emailEnabled = settings.emailDelivery?.enabled === true
@@ -127,7 +133,7 @@ var INVOICE_PREFIX = ${JSON.stringify(prefix)};
 // the same order finishes it: longer than any one request lives.
 var UNFINISHED_INVOICE_STALE_SECONDS = 900;
 
-${INVOICE_CALLER_CODE}
+${invoiceCallerCode('../../..', options.withSessionRevocation !== false)}
 ${emailEnabled ? RECORD_INVOICE_EMAIL_CODE : ''}
 
 // ---------------------------------------------------------------------------
@@ -570,7 +576,10 @@ async function emailFirstInvoice(invoiceData, pdfBuffer, order) {
  * route is reached from the merchant's browser only, so it checks the session
  * itself: signed in, with an admin role.
  */
-export const generateInvoiceRegenerateRouteCode = (settings: UIDLInvoiceSettings): string => {
+export const generateInvoiceRegenerateRouteCode = (
+  settings: UIDLInvoiceSettings,
+  options: { withSessionRevocation?: boolean } = {}
+): string => {
   const emailEnabled = settings.emailDelivery?.enabled === true
 
   return `/**
@@ -596,7 +605,9 @@ var emailLocale = require('../../../../utils/email/email-locale');`
     : ''
 }
 
-${generateCommonJsSessionTokenResolverCode()}
+${generateCommonJsSessionTokenResolverCode('../../../..', {
+  withRevocation: options.withSessionRevocation !== false,
+})}
 ${ROLE_OF_TOKEN_CODE}
 
 var REGENERATE_ALLOWED_ROLES = ${JSON.stringify(REGENERATE_INVOICE_ROLES)};
@@ -835,7 +846,9 @@ ${
  * store's server code — and to nobody else, whoever knows the id. An invoice
  * someone may not read answers exactly like one that does not exist.
  */
-export const generateInvoicePdfRouteCode = (): string => {
+export const generateInvoicePdfRouteCode = (
+  options: { withSessionRevocation?: boolean } = {}
+): string => {
   return `/**
  * GET /api/invoices/[id]/pdf
  * Returns the invoice PDF binary for download, to its buyer or the store.
@@ -843,7 +856,7 @@ export const generateInvoicePdfRouteCode = (): string => {
 
 var dataAccess = require('../../../../utils/invoices/data-access');
 
-${INVOICE_CALLER_CODE}
+${invoiceCallerCode('../../../..', options.withSessionRevocation !== false)}
 
 // Postgres refuses an id that is not a UUID ("invalid_text_representation").
 var MALFORMED_ID_ERROR_CODE = '22P02';

package/src/invoice/index.ts

@@ -126,7 +126,9 @@ export const generateInvoiceFiles = (
     }
   }
 
-  const generateRouteCode = generateInvoiceGenerateRouteCode(invoiceSettings)
+  // The session reader checks revocation only in a project with authentication.
+  const readerOptions = { withSessionRevocation: structure.uidl.authentication?.enabled === true }
+  const generateRouteCode = generateInvoiceGenerateRouteCode(invoiceSettings, readerOptions)
   files.set('invoice-generate-route', {
     path: ['pages', 'api', 'invoices'],
     files: [
@@ -138,7 +140,7 @@ export const generateInvoiceFiles = (
     ],
   })
 
-  const pdfRouteCode = generateInvoicePdfRouteCode()
+  const pdfRouteCode = generateInvoicePdfRouteCode(readerOptions)
   files.set('invoice-pdf-route', {
     path: ['pages', 'api', 'invoices', '[id]'],
     files: [
@@ -157,7 +159,7 @@ export const generateInvoiceFiles = (
       {
         name: 'regenerate',
         fileType: FileType.JS,
-        content: generateInvoiceRegenerateRouteCode(invoiceSettings),
+        content: generateInvoiceRegenerateRouteCode(invoiceSettings, readerOptions),
       },
     ],
   })
@@ -167,9 +169,9 @@ export const generateInvoiceFiles = (
   // root) instead of launching Chromium in-process. No puppeteer-core
   // or @sparticuz/chromium in the generated bundle — that saved ~48 MB
   // and the associated cold-start + memory cost on every deployment.
-  // Env wiring: `PDF_SERVICE_URL` and `PDF_SERVICE_API_KEY` are
-  // registered below and populated by the services-worker Vercel
-  // controller at deploy time.
+  // Env wiring: `PDF_SERVICE_URL`, `PDF_SERVICE_API_KEY` (the project's
+  // own key) and `PDF_SERVICE_PROJECT_ID` are registered below and
+  // populated by the services-worker Vercel controller at deploy time.
   const pdfEnvUidl = structure.uidl
   if (!pdfEnvUidl.globals) {
     ;(pdfEnvUidl as any).globals = { settings: { language: 'en' }, assets: [], env: {} }
@@ -183,6 +185,9 @@ export const generateInvoiceFiles = (
   if (!pdfEnvUidl.globals.env.PDF_SERVICE_API_KEY) {
     pdfEnvUidl.globals.env.PDF_SERVICE_API_KEY = ''
   }
+  if (!pdfEnvUidl.globals.env.PDF_SERVICE_PROJECT_ID) {
+    pdfEnvUidl.globals.env.PDF_SERVICE_PROJECT_ID = ''
+  }
 
   const dbDeps = getDatabaseDriverDependencies(dataSourceType)
   for (const [pkg, version] of Object.entries(dbDeps)) {

package/src/invoice/invoice-assembly-code.ts

@@ -1,6 +1,8 @@
 import { UIDLInvoiceSettings } from '@teleporthq/teleport-types'
 import { ProductOptions } from '@teleporthq/teleport-shared'
 import { REGIONAL_INVOICE_TAX_CODE } from './regional-invoice-tax-code'
+import { CONFIGURED_NEXTAUTH_URL_EXPRESSION } from '../configured-nextauth-url'
+import { generateSelfCallHeadersCode } from '../self-call-headers'
 
 /**
  * `utils/invoices/invoice-assembly.js` — turns an order, and whatever a caller
@@ -117,14 +119,15 @@ function isLoopbackHost(host) {
 // not depend on it: on Vercel the request's host (the domain Vercel routed to
 // this deployment); elsewhere NEXTAUTH_URL's origin when it is set — except
 // that a local server on another port than a local NEXTAUTH_URL keeps its own
-// loopback address.
+// loopback address. NEXTAUTH_URL is read as configured, never as the auth
+// route rewrote it from a request (configured-nextauth-url.ts).
 function requestBaseUrl(req) {
   var headers = (req && req.headers) || {};
   var host = headers.host || '';
   var proto = headers['x-forwarded-proto'] || (isLoopbackHost(host) ? 'http' : 'https');
   var requestOrigin = String(proto).split(',')[0].trim() + '://' + host;
   if (process.env.VERCEL) return requestOrigin;
-  var configured = String(process.env.NEXTAUTH_URL || '').trim();
+  var configured = String(${CONFIGURED_NEXTAUTH_URL_EXPRESSION} || '').trim();
   if (!configured) return requestOrigin;
   var origin;
   try { origin = new URL(configured).origin; } catch (e) { return requestOrigin; }
@@ -153,6 +156,8 @@ function requestBaseUrl(req) {
 // \`baseUrl\` is the live request origin (see \`requestBaseUrl\`). The
 // self-fetch pattern is necessary because the routes run server-side, where
 // Node's undici fetch rejects relative URLs.
+${generateSelfCallHeadersCode()}
+
 async function uploadInvoicePdfToRuntimeStorage(pdfBuffer, fileName, baseUrl) {
   if (!baseUrl) {
     console.error('[invoice] Runtime storage: cannot compute proxy URL (baseUrl missing). Skipping upload.');
@@ -173,7 +178,7 @@ async function uploadInvoicePdfToRuntimeStorage(pdfBuffer, fileName, baseUrl) {
     // it puts on a visitor's upload; only server code can present the secret.
     var res = await fetch(proxyUrl, {
       method: 'POST',
-      headers: { 'x-internal-data-secret': process.env.NEXTAUTH_SECRET || '' },
+      headers: __selfCallHeaders({}),
       body: form,
     });
     var data = {};

package/src/invoice/pdf-generator-code.ts

@@ -38,7 +38,8 @@ export const generatePdfGeneratorCode = (
  * Invoice PDF Generator
  * Walks the user-authored \`invoice-template\` UIDL component → HTML,
  * then delegates rendering to a shared external PDF microservice over
- * HTTP (configured via \`PDF_SERVICE_URL\` + \`PDF_SERVICE_API_KEY\`).
+ * HTTP (configured via \`PDF_SERVICE_URL\`, \`PDF_SERVICE_API_KEY\` and
+ * \`PDF_SERVICE_PROJECT_ID\`).
  * Used to launch Puppeteer locally; that renderer was moved out of
  * every deployed project to trim the serverless bundle by ~48 MB.
  */

package/src/invoice/pdf-service-client-code.ts

@@ -25,11 +25,15 @@ export const generatePdfServiceClientCode = (): string => {
 // reservation for the next request for the order to finish.
 //
 // Contract:
-//   - Config via \`process.env.PDF_SERVICE_URL\` and
-//     \`process.env.PDF_SERVICE_API_KEY\` (read at call time, not module
+//   - Config via \`process.env.PDF_SERVICE_URL\`,
+//     \`process.env.PDF_SERVICE_API_KEY\` and
+//     \`process.env.PDF_SERVICE_PROJECT_ID\` (read at call time, not module
 //     load, so dev misconfiguration fails loud at render rather than
 //     at \`require()\`).
-//   - Auth header: \`X-Pdf-Service-Key: <key>\` (shared static key).
+//   - Auth headers: \`X-Pdf-Service-Key: <key>\` (this project's own key,
+//     derived by the platform at deploy time) and
+//     \`X-Pdf-Service-Project: <project id>\`, which the service checks the
+//     key against. A deploy without a project id sends the key alone.
 //   - 60 s client-side abort. The service's default per-attempt timeout
 //     is 45 s; operators who tune the service down to ~15 s/attempt can
 //     fit 3 full retries inside this window.
@@ -50,6 +54,7 @@ function sanitizePdfFilename(raw) {
 async function callPdfService(html, invoiceData) {
   var pdfServiceUrl = process.env.PDF_SERVICE_URL;
   var pdfServiceKey = process.env.PDF_SERVICE_API_KEY;
+  var pdfServiceProjectId = process.env.PDF_SERVICE_PROJECT_ID;
 
   if (!pdfServiceUrl) {
     throw new Error('PDF_SERVICE_URL is not configured. Set it in the project env vars (the Vercel controller injects it at deploy time from the services-worker env).');
@@ -79,15 +84,18 @@ async function callPdfService(html, invoiceData) {
   var abortCtrl = new AbortController();
   var timer = setTimeout(function () { abortCtrl.abort(); }, timeoutMs);
 
+  var requestHeaders = {
+    'Content-Type': 'application/json',
+    'X-Pdf-Service-Key': pdfServiceKey,
+  };
+  if (pdfServiceProjectId) requestHeaders['X-Pdf-Service-Project'] = pdfServiceProjectId;
+
   var response;
   try {
     console.info('[invoice-pdf] POST ' + endpoint + ' htmlBytes=' + (html ? html.length : 0) + ' filename=' + filename + ' timeoutMs=' + timeoutMs);
     response = await fetch(endpoint, {
       method: 'POST',
-      headers: {
-        'Content-Type': 'application/json',
-        'X-Pdf-Service-Key': pdfServiceKey,
-      },
+      headers: requestHeaders,
       body: JSON.stringify(requestBody),
       signal: abortCtrl.signal,
     });