@teleporthq/teleport-plugin-next-workflows 0.44.11 → 0.45.0

package/dist/esm/newsletter/helper-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helper-code.js","sourceRoot":"","sources":["../../../src/newsletter/helper-code.ts"],"names":[],"mappings":"AAqBA,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAA;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EACL,+BAA+B,EAC/B,mCAAmC,EACnC,wBAAwB,EACxB,0BAA0B,EAC1B,0CAA0C,EAC1C,kBAAkB,EAClB,0BAA0B,EAC1B,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,oBAAoB,CAAA;AAE3B,oDAAoD;AACpD,MAAM,eAAe,GAAG,OAAO,CAAA;AAE/B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ,EAAE,wBAAwB;IAClC,YAAY,EAAE,iBAAiB;IAC/B,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,CAAC,SAAS,EAAE,aAAa,CAAU;IAC7C,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;IACnC,iBAAiB,EAAE,GAAG;IACtB,kBAAkB,EAAE,KAAK;IACzB,cAAc,EAAE,IAAI;IACpB,cAAc,EAAE,GAAG;IACnB,wEAAwE;IACxE,UAAU,EAAE;QACV,MAAM,EAAE,+BAA+B;QACvC,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,aAAsB;QAC/B,QAAQ,EAAE,UAAU;QACpB,KAAK,EACH,qGAAqG;KACxG;CACF,CAAA;AAED,kDAAkD;AAClD,MAAM,cAAc,GAClB,yGAAyG,CAAA;AAC3G,MAAM,KAAK,GAAG,sBAAsB,CAAA;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,+EAA+E;IAC/E,UAAU,EAAE,UAAU,cAAc,SAAS,KAAK,kFAAkF;IACpI,mEAAmE;IACnE,aAAa,EAAE,eAAe,KAAK,oJAAoJ,cAAc,EAAE;IACvM,gBAAgB,EAAE,eAAe,KAAK,8NAA8N,cAAc,EAAE;IACpR;;;;OAIG;IACH,WAAW,EAAE,UAAU,KAAK,0LAA0L,cAAc,EAAE;IACtO,cAAc,EAAE,UAAU,KAAK,iSAAiS,cAAc,EAAE;IAChV,8DAA8D;IAC9D,OAAO,EAAE,UAAU,KAAK,yNAAyN,cAAc,EAAE;IACjQ,WAAW,EAAE,UAAU,KAAK,+NAA+N,cAAc,EAAE;CAC5Q,CAAA;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,OAAO,EAAE,iCAAiC;IAC1C,IAAI,EACF,2FAA2F;QAC3F,kEAAkE;QAClE,6HAA6H;CAChI,CAAA;AAeD,qEAAqE;AACrE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,KAAc,EAAE,QAAgB,EAAU,EAAE;IACpF,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1D,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACrB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EACzB;QACA,OAAO,QAAQ,CAAA;KAChB;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC1D,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAC3C,OAAO,KAAK,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AAQlF,MAAM,MAAM,GAAG,CAAC,KAAc,EAAa,EAAE;IAC3C,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAA;IAC7F,MAAM,SAAS,GAAsD,EAAE,CAAA;IACvE,MAAM,MAAM,GACV,QAAQ,CAAC,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAC1D,CAAC,CAAE,QAAQ,CAAC,SAAqC;QACjD,CAAC,CAAC,EAAE,CAAA;IACR,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACnD,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAA;QACvF,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAChD,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClB,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;gBAC/D,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAA;SACF;KACF;IACD,OAAO;QACL,OAAO,EAAE,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACrE,IAAI,EAAE,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC5D,SAAS;KACV,CAAA;AACH,CAAC,CAAA;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,6BAA6B,GACxC,0LAA0L,CAAA;AAE5L,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAU,EAAE;IAC1D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,EAAE;QACvD,OAAO,IAAI,CAAA;KACZ;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACtC,OAAO,KAAK,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,IAAI,GAAG,6BAA6B;QACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,6BAA6B,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC9E,CAAC,CAAA;AAED,MAAM,mBAAmB,GAAG,gDAAgD,CAAA;AAE5E;;;;GAIG;AACH,MAAM,qBAAqB,GAAqC;IAC9D,MAAM,EAAE;QACN,iGAAiG;QACjG,oIAAoI;KACrI;IACD,QAAQ,EAAE;QACR,+EAA+E;QAC/E,kHAAkH;KACnH;IACD,QAAQ,EAAE;QACR,iGAAiG;QACjG,wOAAwO;KACzO;IACD,OAAO,EAAE;QACP,yGAAyG;QACzG,wOAAwO;KACzO;CACF,CAAA;AAED;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,QAAuB,EAAU,EAAE;IAC3D,IAAI,IAAI,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAA;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACnE,IAAI,IAAI,EAAE;QACR,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE;YAChC,MAAM,IAAI,KAAK,CAAC,OAAO,QAAQ,iDAAiD,CAAC,CAAA;SAClF;QACD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;KACtC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE;QAC1B,OAAO,IAAI,CAAA;KACZ;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE;QAC5C,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;KAC7F;IACD,OAAO,IAAI,CAAC,OAAO,CACjB,mBAAmB,EACnB,+GAA+G,CAChH,CAAA;AACH,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CAAC,eAAwB,EAAU,EAAE,CAC7D,eAAe;IACb,CAAC,CAAC;;;;;;;;yBAQmB,eAAe,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;EAmBpE;IACE,CAAC,CAAC;0CACoC,CAAA;AAE1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,OAAgC,EAAU,EAAE;IACvF,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAK,EAAsC,CAAA;IACvE,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,IAAI,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IACzF,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IAClF,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QACtB,YAAY,CAAC,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,qCAAqC,CAAC,OAAO,CAAA;QAC5F,YAAY,CAAC,IAAI,GAAG,qCAAqC,CAAC,IAAI,CAAA;KAC/D;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACxE,iDAAiD;IACjD,OAAO,CAAC,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;QACnD,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAA;KACrF;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAK,EAAsC,CAAA;IAEvE,OAAO;;;;;;4BAMmB,wBAAwB,CAAC,eAAe,CAAC;EACnE,0BAA0B,CAAC,eAAe,CAAC;EAE3C,QAAQ;QACN,CAAC,CAAC,iCAAiC,eAAe,gCAAgC;QAClF,CAAC,CAAC,4BACN;;EAEE,wBAAwB,EAAE;;8BAEE,QAAQ,CAAC,YAAY,KAAK,IAAI;wBACpC,QAAQ,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI;qCAC9B,OAAO,CAAC,yBAAyB,KAAK,IAAI;kBAC7D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;oBACpC,IAAI,CAAC,SAAS,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;qBACjE,IAAI,CAAC,SAAS,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;uBAClE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;8BACjB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;8BAC1C,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;2BAC7C,IAAI,CAAC,SAAS,CAAC;QACtC,OAAO,EAAE,YAAY,CAAC,OAAO;QAC7B,IAAI,EAAE,YAAY,CAAC,IAAI;KACxB,CAAC;qCACiC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC;sBACrD,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gCACtD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;0BACvC,IAAI,CAAC,SAAS,CACpC,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAC1E;8BAC2B,IAAI,CAAC,SAAS,CACxC,yBAAyB,CAAC,KAAK,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAClF;0BACuB,IAAI,CAAC,SAAS,CAAC,0BAA0B,CAAC;;;mCAGjC,0BAA0B;;sBAEvC,wBAAwB;2BACnB,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC;+BAC9B,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC;;oCAEjC,IAAI,CAAC,SAAS,CAAC,2BAA2B,CAAC;;wCAEvC,0CAA0C;;;;;wBAK1D,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,QAAQ,CAAC;uBAC7C,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,QAAQ,CAAC;sCAC7B,mBAAmB,CAAC,oBAAoB;kCAC5C,mBAAmB,CAAC,iBAAiB;yBAC9C,mBAAmB,CAAC,cAAc;;YAE/C,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuIjD,mBAAmB;;EAEnB,sBAAsB,EAAE;;EAExB,gBAAgB,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyG1B,iBAAiB,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;8CA0BP,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAyDnE,mBAAmB,CAAC,oBAAoB,GAAG,KAC7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqDA,CAAA;AACD,CAAC,CAAA"}

package/dist/esm/newsletter/newsletter-scope.d.ts

@@ -0,0 +1,65 @@
+import type { ProjectUIDL, UIDLNewsletterSettings } from '@teleporthq/teleport-types';
+/**
+ * The newsletter: a subscriber is a person of the site's `users` table whose
+ * `newsletter_status` is `subscribed` (`pending` waits for the emailed
+ * confirmation link, `unsubscribed` left, NULL was never on it). The generated
+ * app adds people, confirms them and lets them leave on its own server:
+ *
+ * - `utils/newsletter/newsletter.js`, the helper every writer goes through
+ *   (helper-code.ts);
+ * - `pages/api/newsletter/{subscribe,confirm,unsubscribe}.js` (routes-code.ts);
+ * - the `newsletter-subscribe` server node, and the `newsletter-confirm` /
+ *   `newsletter-unsubscribe` client nodes the confirm and unsubscribe pages run.
+ *
+ * All of it is generated only when the project carries `newsletterSettings`
+ * on the TeleportHQ database (v1).
+ */
+export declare const NEWSLETTER_HELPER_FILE_KEY = "newsletter-helper";
+export declare const NEWSLETTER_HELPER_PATH: string[];
+export declare const NEWSLETTER_HELPER_FILE_NAME = "newsletter";
+export declare const NEWSLETTER_ROUTES_FILE_KEY = "newsletter-routes";
+export declare const NEWSLETTER_ROUTES_PATH: string[];
+export declare const NEWSLETTER_SUBSCRIBE_URL = "/api/newsletter/subscribe";
+export declare const NEWSLETTER_CONFIRM_URL = "/api/newsletter/confirm";
+export declare const NEWSLETTER_UNSUBSCRIBE_URL = "/api/newsletter/unsubscribe";
+/** The table the newsletter state lives on (teleport-gui `NEWSLETTER_USER_COLUMNS`). */
+export declare const NEWSLETTER_USERS_TABLE = "users";
+export declare const DEFAULT_NEWSLETTER_CONFIRM_PATH = "/newsletter/confirm";
+export declare const DEFAULT_NEWSLETTER_UNSUBSCRIBE_PATH = "/newsletter/unsubscribe";
+/** `users.newsletter_source` (teleport-gui `NEWSLETTER_SOURCES`). */
+export declare const NEWSLETTER_SOURCES: readonly ["block", "footer", "popup", "signup", "account", "checkout", "booking", "form", "import", "manual", "admin"];
+/**
+ * The sign-up points a visitor's request may name (the public route's body,
+ * the node's config): the owner's own (`import`, `manual`, `admin`) never.
+ * Anything else is `block`.
+ */
+export declare const VISITOR_SIGN_UP_POINTS: readonly ["block", "footer", "popup", "form", "checkout", "booking", "signup", "account"];
+/**
+ * The sign-up points of the site's own pages: what the public sign-up route
+ * takes from its body (anything else is `block`). The checkout, a booking and
+ * the account sign-up subscribe on the server, never through that route.
+ */
+export declare const PUBLIC_ROUTE_SIGN_UP_POINTS: readonly ["block", "footer", "popup", "form"];
+/** Confirmation links an address that opted out may be sent per day. */
+export declare const NEWSLETTER_OPTED_OUT_CONFIRMATIONS_PER_DAY = 1;
+/** Every outcome of a sign-up answers this, in about the same time. */
+export declare const NEWSLETTER_MIN_RESPONSE_MS = 800;
+/** Sign-ups one address may make per hour, and one visitor per hour. */
+export declare const NEWSLETTER_ADDRESS_LIMIT = 5;
+export declare const NEWSLETTER_VISITOR_LIMIT = 5;
+/**
+ * The visitor budget the sign-up route and the sign-up workflows share: the
+ * steps' `visitorLimit.scope`, counted as `visitor-limit:<scope>`.
+ */
+export declare const NEWSLETTER_VISITOR_SCOPE = "newsletter-signup";
+/** The `require` specifier of the helper from a file `relativePrefix` below the project root. */
+export declare const newsletterHelperSpecifier: (relativePrefix: string) => string;
+/**
+ * The project's newsletter settings when the generated app gets the newsletter:
+ * `newsletterSettings` on the TeleportHQ database. Null otherwise (nothing is
+ * generated then).
+ */
+export declare const readNewsletterSettings: (uidl: Pick<ProjectUIDL, 'newsletterSettings'>) => UIDLNewsletterSettings | null;
+/** The sign-up form's ticked consent box also subscribes the person (R-N15). */
+export declare const newsletterSignupSubscribes: (uidl: Pick<ProjectUIDL, 'newsletterSettings'>) => boolean;
+//# sourceMappingURL=newsletter-scope.d.ts.map

package/dist/esm/newsletter/newsletter-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"newsletter-scope.d.ts","sourceRoot":"","sources":["../../../src/newsletter/newsletter-scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AAErF;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,0BAA0B,sBAAsB,CAAA;AAC7D,eAAO,MAAM,sBAAsB,UAA0B,CAAA;AAC7D,eAAO,MAAM,2BAA2B,eAAe,CAAA;AACvD,eAAO,MAAM,0BAA0B,sBAAsB,CAAA;AAC7D,eAAO,MAAM,sBAAsB,UAAiC,CAAA;AAEpE,eAAO,MAAM,wBAAwB,8BAA8B,CAAA;AACnE,eAAO,MAAM,sBAAsB,4BAA4B,CAAA;AAC/D,eAAO,MAAM,0BAA0B,gCAAgC,CAAA;AAEvE,wFAAwF;AACxF,eAAO,MAAM,sBAAsB,UAAU,CAAA;AAE7C,eAAO,MAAM,+BAA+B,wBAAwB,CAAA;AACpE,eAAO,MAAM,mCAAmC,4BAA4B,CAAA;AAE5E,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,wHAYrB,CAAA;AAEV;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,2FASzB,CAAA;AAEV;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,+CAAgD,CAAA;AAExF,wEAAwE;AACxE,eAAO,MAAM,0CAA0C,IAAI,CAAA;AAE3D,uEAAuE;AACvE,eAAO,MAAM,0BAA0B,MAAM,CAAA;AAE7C,wEAAwE;AACxE,eAAO,MAAM,wBAAwB,IAAI,CAAA;AACzC,eAAO,MAAM,wBAAwB,IAAI,CAAA;AACzC;;;GAGG;AACH,eAAO,MAAM,wBAAwB,sBAAsB,CAAA;AAE3D,iGAAiG;AACjG,eAAO,MAAM,yBAAyB,mBAAoB,MAAM,KAAG,MACqB,CAAA;AAExF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,SAC3B,KAAK,WAAW,EAAE,oBAAoB,CAAC,KAC5C,sBAAsB,GAAG,IAS3B,CAAA;AAED,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,SAC/B,KAAK,WAAW,EAAE,oBAAoB,CAAC,KAC5C,OAGF,CAAA"}

package/dist/esm/newsletter/newsletter-scope.js

@@ -0,0 +1,97 @@
+/**
+ * The newsletter: a subscriber is a person of the site's `users` table whose
+ * `newsletter_status` is `subscribed` (`pending` waits for the emailed
+ * confirmation link, `unsubscribed` left, NULL was never on it). The generated
+ * app adds people, confirms them and lets them leave on its own server:
+ *
+ * - `utils/newsletter/newsletter.js`, the helper every writer goes through
+ *   (helper-code.ts);
+ * - `pages/api/newsletter/{subscribe,confirm,unsubscribe}.js` (routes-code.ts);
+ * - the `newsletter-subscribe` server node, and the `newsletter-confirm` /
+ *   `newsletter-unsubscribe` client nodes the confirm and unsubscribe pages run.
+ *
+ * All of it is generated only when the project carries `newsletterSettings`
+ * on the TeleportHQ database (v1).
+ */
+export const NEWSLETTER_HELPER_FILE_KEY = 'newsletter-helper';
+export const NEWSLETTER_HELPER_PATH = ['utils', 'newsletter'];
+export const NEWSLETTER_HELPER_FILE_NAME = 'newsletter';
+export const NEWSLETTER_ROUTES_FILE_KEY = 'newsletter-routes';
+export const NEWSLETTER_ROUTES_PATH = ['pages', 'api', 'newsletter'];
+export const NEWSLETTER_SUBSCRIBE_URL = '/api/newsletter/subscribe';
+export const NEWSLETTER_CONFIRM_URL = '/api/newsletter/confirm';
+export const NEWSLETTER_UNSUBSCRIBE_URL = '/api/newsletter/unsubscribe';
+/** The table the newsletter state lives on (teleport-gui `NEWSLETTER_USER_COLUMNS`). */
+export const NEWSLETTER_USERS_TABLE = 'users';
+export const DEFAULT_NEWSLETTER_CONFIRM_PATH = '/newsletter/confirm';
+export const DEFAULT_NEWSLETTER_UNSUBSCRIBE_PATH = '/newsletter/unsubscribe';
+/** `users.newsletter_source` (teleport-gui `NEWSLETTER_SOURCES`). */
+export const NEWSLETTER_SOURCES = [
+    'block',
+    'footer',
+    'popup',
+    'signup',
+    'account',
+    'checkout',
+    'booking',
+    'form',
+    'import',
+    'manual',
+    'admin',
+];
+/**
+ * The sign-up points a visitor's request may name (the public route's body,
+ * the node's config): the owner's own (`import`, `manual`, `admin`) never.
+ * Anything else is `block`.
+ */
+export const VISITOR_SIGN_UP_POINTS = [
+    'block',
+    'footer',
+    'popup',
+    'form',
+    'checkout',
+    'booking',
+    'signup',
+    'account',
+];
+/**
+ * The sign-up points of the site's own pages: what the public sign-up route
+ * takes from its body (anything else is `block`). The checkout, a booking and
+ * the account sign-up subscribe on the server, never through that route.
+ */
+export const PUBLIC_ROUTE_SIGN_UP_POINTS = ['block', 'footer', 'popup', 'form'];
+/** Confirmation links an address that opted out may be sent per day. */
+export const NEWSLETTER_OPTED_OUT_CONFIRMATIONS_PER_DAY = 1;
+/** Every outcome of a sign-up answers this, in about the same time. */
+export const NEWSLETTER_MIN_RESPONSE_MS = 800;
+/** Sign-ups one address may make per hour, and one visitor per hour. */
+export const NEWSLETTER_ADDRESS_LIMIT = 5;
+export const NEWSLETTER_VISITOR_LIMIT = 5;
+/**
+ * The visitor budget the sign-up route and the sign-up workflows share: the
+ * steps' `visitorLimit.scope`, counted as `visitor-limit:<scope>`.
+ */
+export const NEWSLETTER_VISITOR_SCOPE = 'newsletter-signup';
+/** The `require` specifier of the helper from a file `relativePrefix` below the project root. */
+export const newsletterHelperSpecifier = (relativePrefix) => `${relativePrefix}/${NEWSLETTER_HELPER_PATH.join('/')}/${NEWSLETTER_HELPER_FILE_NAME}`;
+/**
+ * The project's newsletter settings when the generated app gets the newsletter:
+ * `newsletterSettings` on the TeleportHQ database. Null otherwise (nothing is
+ * generated then).
+ */
+export const readNewsletterSettings = (uidl) => {
+    const settings = uidl.newsletterSettings;
+    if (!settings || typeof settings !== 'object') {
+        return null;
+    }
+    if (settings.dataSourceType !== 'teleport' || typeof settings.dataSourceId !== 'string') {
+        return null;
+    }
+    return settings.dataSourceId ? settings : null;
+};
+/** The sign-up form's ticked consent box also subscribes the person (R-N15). */
+export const newsletterSignupSubscribes = (uidl) => {
+    const settings = readNewsletterSettings(uidl);
+    return !!settings && !!settings.signUp && settings.signUp.signupCheckbox === true;
+};
+//# sourceMappingURL=newsletter-scope.js.map

package/dist/esm/newsletter/newsletter-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"newsletter-scope.js","sourceRoot":"","sources":["../../../src/newsletter/newsletter-scope.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAA;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;AAC7D,MAAM,CAAC,MAAM,2BAA2B,GAAG,YAAY,CAAA;AACvD,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAAmB,CAAA;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAA;AAEpE,MAAM,CAAC,MAAM,wBAAwB,GAAG,2BAA2B,CAAA;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAA;AAC/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAA;AAEvE,wFAAwF;AACxF,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAA;AAE7C,MAAM,CAAC,MAAM,+BAA+B,GAAG,qBAAqB,CAAA;AACpE,MAAM,CAAC,MAAM,mCAAmC,GAAG,yBAAyB,CAAA;AAE5E,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,OAAO;CACC,CAAA;AAEV;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,UAAU;IACV,SAAS;IACT,QAAQ;IACR,SAAS;CACD,CAAA;AAEV;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAU,CAAA;AAExF,wEAAwE;AACxE,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAA;AAE3D,uEAAuE;AACvE,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAA;AAE7C,wEAAwE;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AACzC;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAA;AAE3D,iGAAiG;AACjG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,cAAsB,EAAU,EAAE,CAC1E,GAAG,cAAc,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,2BAA2B,EAAE,CAAA;AAExF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,IAA6C,EACd,EAAE;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAA;IACxC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE;QAC7C,OAAO,IAAI,CAAA;KACZ;IACD,IAAI,QAAQ,CAAC,cAAc,KAAK,UAAU,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAAE;QACvF,OAAO,IAAI,CAAA;KACZ;IACD,OAAO,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;AAChD,CAAC,CAAA;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,IAA6C,EACpC,EAAE;IACX,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC7C,OAAO,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,CAAA;AACnF,CAAC,CAAA"}

package/dist/esm/newsletter/project-plugin.d.ts

@@ -0,0 +1,18 @@
+import { ProjectPlugin, ProjectPluginStructure } from '@teleporthq/teleport-types';
+/**
+ * The newsletter's generated side (see newsletter-scope.ts): the helper
+ * `utils/newsletter/newsletter.js` and the routes
+ * `pages/api/newsletter/{subscribe,confirm,unsubscribe}.js`, with the modules
+ * they require (the security runtime, the email locale, the sent-email log
+ * when a provider sends) and the provider's and Postgres's packages.
+ *
+ * Only for a project that carries `newsletterSettings` on the TeleportHQ
+ * database; every other project is left byte for byte as it was. Runs after
+ * the workflow project plugin, whose routes (the sign-up route's consent box,
+ * the `newsletter-subscribe` node) require the helper.
+ */
+export declare class NextNewsletterProjectPlugin implements ProjectPlugin {
+    runBefore(structure: ProjectPluginStructure): Promise<ProjectPluginStructure>;
+    runAfter(structure: ProjectPluginStructure): Promise<ProjectPluginStructure>;
+}
+//# sourceMappingURL=project-plugin.d.ts.map

package/dist/esm/newsletter/project-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-plugin.d.ts","sourceRoot":"","sources":["../../../src/newsletter/project-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,aAAa,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AA0B5F;;;;;;;;;;;GAWG;AACH,qBAAa,2BAA4B,YAAW,aAAa;IACzD,SAAS,CAAC,SAAS,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAI7E,QAAQ,CAAC,SAAS,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA6DnF"}

package/dist/esm/newsletter/project-plugin.js

@@ -0,0 +1,93 @@
+import { FileType } from '@teleporthq/teleport-types';
+import { getDatabaseDriverDependencies } from '../auth-generator';
+import { hasAutomationsBus } from '../automations/automations-scope';
+import { ensureEmailLocaleModule } from '../email-locale';
+import { collectWorkflowNodeConfigs } from '../password-reset-route-generator';
+import { ensureSecurityRuntimeModule } from '../security-runtime';
+import { ensureSentEmailLogModule } from '../sent-email-log';
+import { SUPPORTED_EMAIL_PROVIDERS, transactionalEmailDependencies, } from '../transactional-email-code';
+import { generateNewsletterHelperCode } from './helper-code';
+import { NEWSLETTER_HELPER_FILE_KEY, NEWSLETTER_HELPER_FILE_NAME, NEWSLETTER_HELPER_PATH, NEWSLETTER_ROUTES_FILE_KEY, NEWSLETTER_ROUTES_PATH, readNewsletterSettings, } from './newsletter-scope';
+import { generateNewsletterConfirmRoute, generateNewsletterSubscribeRoute, generateNewsletterUnsubscribeRoute, } from './routes-code';
+/**
+ * The newsletter's generated side (see newsletter-scope.ts): the helper
+ * `utils/newsletter/newsletter.js` and the routes
+ * `pages/api/newsletter/{subscribe,confirm,unsubscribe}.js`, with the modules
+ * they require (the security runtime, the email locale, the sent-email log
+ * when a provider sends) and the provider's and Postgres's packages.
+ *
+ * Only for a project that carries `newsletterSettings` on the TeleportHQ
+ * database; every other project is left byte for byte as it was. Runs after
+ * the workflow project plugin, whose routes (the sign-up route's consent box,
+ * the `newsletter-subscribe` node) require the helper.
+ */
+export class NextNewsletterProjectPlugin {
+    async runBefore(structure) {
+        return structure;
+    }
+    async runAfter(structure) {
+        const { uidl, files, dependencies } = structure;
+        const settings = readNewsletterSettings(uidl);
+        if (!settings) {
+            return structure;
+        }
+        ensureSecurityRuntimeModule(structure);
+        ensureEmailLocaleModule(structure);
+        const provider = settings.email &&
+            settings.email.provider &&
+            SUPPORTED_EMAIL_PROVIDERS.has(settings.email.provider)
+            ? settings.email.provider
+            : null;
+        const packages = Object.assign(Object.assign({}, getDatabaseDriverDependencies('teleport')), transactionalEmailDependencies(provider));
+        for (const [pkg, version] of Object.entries(packages)) {
+            if (!dependencies[pkg]) {
+                dependencies[pkg] = version;
+            }
+        }
+        if (provider) {
+            ensureSentEmailLogModule(structure);
+        }
+        files.set(NEWSLETTER_HELPER_FILE_KEY, {
+            path: NEWSLETTER_HELPER_PATH,
+            files: [
+                {
+                    name: NEWSLETTER_HELPER_FILE_NAME,
+                    fileType: FileType.JS,
+                    content: generateNewsletterHelperCode({
+                        settings,
+                        siteName: uidl.name || '',
+                        withAutomations: hasAutomationsBus(uidl),
+                        signupSendsAccountWelcome: signupSendsAccountWelcome(uidl.workflows),
+                    }),
+                },
+            ],
+        });
+        files.set(NEWSLETTER_ROUTES_FILE_KEY, {
+            path: NEWSLETTER_ROUTES_PATH,
+            files: [
+                { name: 'subscribe', fileType: FileType.JS, content: generateNewsletterSubscribeRoute() },
+                { name: 'confirm', fileType: FileType.JS, content: generateNewsletterConfirmRoute() },
+                {
+                    name: 'unsubscribe',
+                    fileType: FileType.JS,
+                    content: generateNewsletterUnsubscribeRoute(),
+                },
+            ],
+        });
+        // The published admin panel does not send. Scheduling is a row edit on the
+        // site, then an unauthenticated hint. No service token is declared.
+        return structure;
+    }
+}
+/**
+ * Whether the sign-up route sends the account's welcome email: the project's
+ * `account-signup` node names a provider and a body (the route bakes the same
+ * first config, generateSignupRouteFile).
+ */
+const signupSendsAccountWelcome = (workflows) => {
+    const config = collectWorkflowNodeConfigs(workflows, 'account-signup')[0] || {};
+    const nodeType = typeof config.emailProvider === 'string' ? config.emailProvider : '';
+    const provider = nodeType.startsWith('email-') ? nodeType.slice('email-'.length) : '';
+    return SUPPORTED_EMAIL_PROVIDERS.has(provider) && typeof config.body === 'string' && !!config.body;
+};
+//# sourceMappingURL=project-plugin.js.map

package/dist/esm/newsletter/project-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-plugin.js","sourceRoot":"","sources":["../../../src/newsletter/project-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAyC,MAAM,4BAA4B,CAAA;AAC5F,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAA;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAA;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EACL,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAA;AAC5D,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,eAAe,CAAA;AAEtB;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,2BAA2B;IACtC,KAAK,CAAC,SAAS,CAAC,SAAiC;QAC/C,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiC;QAC9C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,SAAS,CAAA;QAC/C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;QAC7C,IAAI,CAAC,QAAQ,EAAE;YACb,OAAO,SAAS,CAAA;SACjB;QAED,2BAA2B,CAAC,SAAS,CAAC,CAAA;QACtC,uBAAuB,CAAC,SAAS,CAAC,CAAA;QAClC,MAAM,QAAQ,GACZ,QAAQ,CAAC,KAAK;YACd,QAAQ,CAAC,KAAK,CAAC,QAAQ;YACvB,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;YACpD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ;YACzB,CAAC,CAAC,IAAI,CAAA;QACV,MAAM,QAAQ,mCACT,6BAA6B,CAAC,UAAU,CAAC,GACzC,8BAA8B,CAAC,QAAQ,CAAC,CAC5C,CAAA;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YACrD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;gBACtB,YAAY,CAAC,GAAG,CAAC,GAAG,OAAO,CAAA;aAC5B;SACF;QACD,IAAI,QAAQ,EAAE;YACZ,wBAAwB,CAAC,SAAS,CAAC,CAAA;SACpC;QAED,KAAK,CAAC,GAAG,CAAC,0BAA0B,EAAE;YACpC,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE;gBACL;oBACE,IAAI,EAAE,2BAA2B;oBACjC,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBACrB,OAAO,EAAE,4BAA4B,CAAC;wBACpC,QAAQ;wBACR,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;wBACzB,eAAe,EAAE,iBAAiB,CAAC,IAAI,CAAC;wBACxC,yBAAyB,EAAE,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC;qBACrE,CAAC;iBACH;aACF;SACF,CAAC,CAAA;QAEF,KAAK,CAAC,GAAG,CAAC,0BAA0B,EAAE;YACpC,IAAI,EAAE,sBAAsB;YAC5B,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE;gBACzF,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE;gBACrF;oBACE,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBACrB,OAAO,EAAE,kCAAkC,EAAE;iBAC9C;aACF;SACF,CAAC,CAAA;QAEF,2EAA2E;QAC3E,oEAAoE;QACpE,OAAO,SAAS,CAAA;IAClB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,CAChC,SAAqE,EAC5D,EAAE;IACX,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/E,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAA;IACrF,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACrF,OAAO,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAA;AACpG,CAAC,CAAA"}

package/dist/esm/newsletter/routes-code.d.ts

@@ -0,0 +1,6 @@
+/** Confirm and unsubscribe attempts per visitor per hour. */
+export declare const NEWSLETTER_LINK_VISITOR_LIMIT = 30;
+export declare const generateNewsletterSubscribeRoute: () => string;
+export declare const generateNewsletterConfirmRoute: () => string;
+export declare const generateNewsletterUnsubscribeRoute: () => string;
+//# sourceMappingURL=routes-code.d.ts.map

package/dist/esm/newsletter/routes-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes-code.d.ts","sourceRoot":"","sources":["../../../src/newsletter/routes-code.ts"],"names":[],"mappings":"AA0BA,6DAA6D;AAC7D,eAAO,MAAM,6BAA6B,KAAK,CAAA;AAoB/C,eAAO,MAAM,gCAAgC,QAAO,MAuCnD,CAAA;AAED,eAAO,MAAM,8BAA8B,QAAO,MAqBjD,CAAA;AAED,eAAO,MAAM,kCAAkC,QAAO,MA0ErD,CAAA"}

package/dist/esm/newsletter/routes-code.js

@@ -0,0 +1,175 @@
+/**
+ * The newsletter's public routes, `pages/api/newsletter/*.js`. Each makes its
+ * decision through the helper (`utils/newsletter/newsletter.js`), never from
+ * what the browser claims beyond the address or the link's token.
+ *
+ * - `subscribe` — POST `{ email, website, signUpPoint }`: `website` is the
+ *   form's honeypot; `signUpPoint` one of the site pages' own (`block`,
+ *   `footer`, `popup`, `form`), else `block`; errors are logged by code and
+ *   message only (never a database row); every answer is `{ ok: true, pending }`, after at least
+ *   `NEWSLETTER_MIN_RESPONSE_MS`, whatever happened to the address.
+ * - `confirm` — POST `{ token }` → `{ ok, email? }`.
+ * - `unsubscribe` — POST `{ token }` → `{ ok, email? }`; a GET with `?t=`
+ *   (a click in a mail client) answers a small page whose button POSTs it, so a
+ *   link scanner that opens every link unsubscribes nobody.
+ */
+import { securityRuntimeSpecifier } from '../security-runtime/security-runtime-code';
+import { NEWSLETTER_UNSUBSCRIBE_URL, NEWSLETTER_VISITOR_LIMIT, NEWSLETTER_VISITOR_SCOPE, newsletterHelperSpecifier, } from './newsletter-scope';
+/** From `pages/api/newsletter/` to the project root. */
+const RELATIVE_PREFIX = '../../..';
+/** Confirm and unsubscribe attempts per visitor per hour. */
+export const NEWSLETTER_LINK_VISITOR_LIMIT = 30;
+const ROUTE_PREAMBLE = `var __security = require('${securityRuntimeSpecifier(RELATIVE_PREFIX)}');
+var __newsletter = require('${newsletterHelperSpecifier(RELATIVE_PREFIX)}');
+
+function readBody(req) {
+  var body = req.body;
+  if (typeof body === 'string') {
+    try { body = JSON.parse(body); } catch (e) { body = null; }
+  }
+  return body && typeof body === 'object' ? body : {};
+}`;
+const methodGuard = (methods) => `  if (${methods
+    .map((method) => `req.method !== '${method}'`)
+    .join(' && ')}) {
+    res.setHeader('Allow', '${methods.join(', ')}');
+    return res.status(405).json({ error: 'Method not allowed' });
+  }`;
+export const generateNewsletterSubscribeRoute = () => `${ROUTE_PREAMBLE}
+
+module.exports = async function handler(req, res) {
+${methodGuard(['POST'])}
+  // ${NEWSLETTER_VISITOR_LIMIT} sign-ups per visitor per hour, one budget with the sign-up
+  // workflows' steps (their visitorLimit scope '${NEWSLETTER_VISITOR_SCOPE}').
+  if (!(await __security.rateLimitRequest(req, res, { scope: 'visitor-limit:${NEWSLETTER_VISITOR_SCOPE}', limit: ${NEWSLETTER_VISITOR_LIMIT}, windowSeconds: 3600 }))) {
+    return;
+  }
+  var startedAt = Date.now();
+  var body = readBody(req);
+  var answer = __newsletter.publicSubscribeAnswer();
+  // The honeypot: a field people never see, which a bot fills. It is thanked
+  // like a person and nothing is written.
+  var trap = body.website == null ? '' : String(body.website).trim();
+  if (trap) {
+    await __newsletter.waitUntilElapsed(startedAt, __newsletter.NEWSLETTER_MIN_RESPONSE_MS);
+    return res.status(200).json(answer);
+  }
+  var email = __newsletter.normalizeEmail(body.email);
+  if (!email) {
+    return res.status(400).json({ error: 'Enter a valid email address.' });
+  }
+  try {
+    await __newsletter.withNewsletterDb(function (db) {
+      return __newsletter.subscribeNewsletterPerson({
+        db: db,
+        email: email,
+        // Only the site pages' own points: the server-side ones are never a visitor's.
+        signUpPoint: __newsletter.publicRouteSignUpPoint(body.signUpPoint),
+        req: req,
+      });
+    });
+  } catch (err) {
+    return __security.sendClientError(res, 503, 'We could not add you to the newsletter. Please try again in a moment.', __newsletter.safeError(err));
+  }
+  await __newsletter.waitUntilElapsed(startedAt, __newsletter.NEWSLETTER_MIN_RESPONSE_MS);
+  return res.status(200).json(answer);
+};
+`;
+export const generateNewsletterConfirmRoute = () => `${ROUTE_PREAMBLE}
+
+module.exports = async function handler(req, res) {
+${methodGuard(['POST'])}
+  if (!(await __security.rateLimitRequest(req, res, { scope: 'newsletter-confirm', limit: ${NEWSLETTER_LINK_VISITOR_LIMIT}, windowSeconds: 3600 }))) {
+    return;
+  }
+  var body = readBody(req);
+  var token = typeof body.token === 'string' ? body.token : '';
+  if (!token) {
+    return res.status(200).json({ ok: false });
+  }
+  try {
+    var result = await __newsletter.withNewsletterDb(function (db) {
+      return __newsletter.confirmNewsletter({ db: db, token: token, req: req });
+    });
+    return res.status(200).json(result.ok ? { ok: true, email: result.email } : { ok: false });
+  } catch (err) {
+    return __security.sendClientError(res, 503, 'We could not confirm the subscription. Please try again in a moment.', __newsletter.safeError(err));
+  }
+};
+`;
+export const generateNewsletterUnsubscribeRoute = () => `${ROUTE_PREAMBLE}
+
+function escapeHtml(value) {
+  return String(value == null ? '' : value)
+    .replace(/&/g, '&')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;');
+}
+
+// The page a mail client's click lands on: plain, never indexed, never cached.
+function sendPage(res, status, title, message, form) {
+  res.statusCode = status;
+  res.setHeader('Content-Type', 'text/html; charset=utf-8');
+  res.setHeader('Cache-Control', 'no-store');
+  res.setHeader('Referrer-Policy', 'no-referrer');
+  res.setHeader('X-Robots-Tag', 'noindex');
+  res.end(
+    '<!doctype html><html lang="en"><head><meta charset="utf-8">' +
+    '<meta name="viewport" content="width=device-width, initial-scale=1">' +
+    '<meta name="robots" content="noindex"><title>' + escapeHtml(title) + '</title>' +
+    '<style>body{font-family:system-ui,-apple-system,sans-serif;max-width:480px;margin:15vh auto;padding:0 16px;color:#111;line-height:1.5}' +
+    'button{font:inherit;padding:10px 18px;border:0;border-radius:6px;background:#111;color:#fff;cursor:pointer}</style>' +
+    '</head><body><h1>' + escapeHtml(title) + '</h1><p>' + escapeHtml(message) + '</p>' + (form || '') + '</body></html>'
+  );
+}
+
+var NOT_A_LINK = 'This unsubscribe link does not work. Use the link in a newer email from us.';
+
+module.exports = async function handler(req, res) {
+${methodGuard(['GET', 'POST'])}
+  if (!(await __security.rateLimitRequest(req, res, { scope: 'newsletter-unsubscribe', limit: ${NEWSLETTER_LINK_VISITOR_LIMIT}, windowSeconds: 3600 }))) {
+    return;
+  }
+  if (req.method === 'GET') {
+    // Opening the link changes nothing: the button does.
+    var linkToken = req.query && typeof req.query.t === 'string' ? req.query.t : '';
+    if (!__newsletter.verifyNewsletterToken(linkToken, 'unsubscribe')) {
+      return sendPage(res, 200, 'Link not valid', NOT_A_LINK, '');
+    }
+    return sendPage(
+      res,
+      200,
+      'Unsubscribe',
+      'Stop receiving the newsletter at this address?',
+      '<form method="post" action="${NEWSLETTER_UNSUBSCRIBE_URL}"><input type="hidden" name="t" value="' +
+        escapeHtml(linkToken) + '"><button type="submit">Unsubscribe</button></form>'
+    );
+  }
+  var body = readBody(req);
+  var fromForm = String((req.headers && req.headers['content-type']) || '').indexOf('application/x-www-form-urlencoded') !== -1;
+  var token = typeof body.token === 'string' ? body.token : typeof body.t === 'string' ? body.t : '';
+  var result = { ok: false };
+  try {
+    if (token) {
+      result = await __newsletter.withNewsletterDb(function (db) {
+        return __newsletter.unsubscribeNewsletter({ db: db, token: token, req: req });
+      });
+    }
+  } catch (err) {
+    if (fromForm) {
+      console.error('[newsletter] unsubscribe failed:', __newsletter.safeError(err));
+      return sendPage(res, 503, 'Please try again', 'We could not unsubscribe you just now. Please try again in a moment.', '');
+    }
+    return __security.sendClientError(res, 503, 'We could not unsubscribe you. Please try again in a moment.', __newsletter.safeError(err));
+  }
+  if (fromForm) {
+    return result.ok
+      ? sendPage(res, 200, "You're unsubscribed", 'You will not receive the newsletter at this address any more.', '')
+      : sendPage(res, 200, 'Link not valid', NOT_A_LINK, '');
+  }
+  return res.status(200).json(result.ok ? { ok: true, email: result.email } : { ok: false });
+};
+`;
+//# sourceMappingURL=routes-code.js.map

package/dist/esm/newsletter/routes-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes-code.js","sourceRoot":"","sources":["../../../src/newsletter/routes-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAA;AACpF,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAA;AAE3B,wDAAwD;AACxD,MAAM,eAAe,GAAG,UAAU,CAAA;AAElC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAA;AAE/C,MAAM,cAAc,GAAG,6BAA6B,wBAAwB,CAAC,eAAe,CAAC;8BAC/D,yBAAyB,CAAC,eAAe,CAAC;;;;;;;;EAQtE,CAAA;AAEF,MAAM,WAAW,GAAG,CAAC,OAAiB,EAAU,EAAE,CAAC,SAAS,OAAO;KAChE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,MAAM,GAAG,CAAC;KAC7C,IAAI,CAAC,MAAM,CAAC;8BACe,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;;IAE5C,CAAA;AAEJ,MAAM,CAAC,MAAM,gCAAgC,GAAG,GAAW,EAAE,CAAC,GAAG,cAAc;;;EAG7E,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;OAChB,wBAAwB;mDACoB,wBAAwB;8EACG,wBAAwB,aAAa,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiC1I,CAAA;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAW,EAAE,CAAC,GAAG,cAAc;;;EAG3E,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;4FACqE,6BAA6B;;;;;;;;;;;;;;;;;CAiBxH,CAAA;AAED,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAW,EAAE,CAAC,GAAG,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+B/E,WAAW,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gGACkE,6BAA6B;;;;;;;;;;;;;;qCAcxF,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4B9D,CAAA"}

package/dist/esm/nodes/account/account-compare-passwords.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-compare-passwords.d.ts","sourceRoot":"","sources":["../../../../src/nodes/account/account-compare-passwords.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAmB,MAAM,UAAU,CAAA;AAiDhE,eAAO,MAAM,uBAAuB,EAAE,oBASrC,CAAA"}
+{"version":3,"file":"account-compare-passwords.d.ts","sourceRoot":"","sources":["../../../../src/nodes/account/account-compare-passwords.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAmB,MAAM,UAAU,CAAA;AA4DhE,eAAO,MAAM,uBAAuB,EAAE,oBASrC,CAAA"}

package/dist/esm/nodes/account/account-compare-passwords.js

@@ -26,12 +26,22 @@ async function account_compare_passwords(config, context) {
     const __nodeRequire = typeof __non_webpack_require__ !== 'undefined' ? __non_webpack_require__ : require;
     const bcrypt = __nodeRequire('bcryptjs');
     const crypto = __nodeRequire('crypto');
-    const PEPPER = globalThis.process.env.AUTH_PEPPER || '';
-    const sha = crypto
-        .createHash('sha256')
-        .update(passwordStr + PEPPER)
-        .digest('base64');
-    const isMatch = bcrypt.compareSync(sha, hashStr);
+    // The project's own pepper (AUTH_PEPPER_SECRET) first, then the one every
+    // earlier hash used (AUTH_PEPPER) — as utils/auth/hash-password.
+    const env = globalThis.process.env;
+    const secretPepper = typeof env.AUTH_PEPPER_SECRET === 'string' &&
+        env.AUTH_PEPPER_SECRET.indexOf('teleporthq.secrets.') !== 0
+        ? env.AUTH_PEPPER_SECRET
+        : '';
+    const peppers = secretPepper ? [secretPepper, env.AUTH_PEPPER || ''] : [env.AUTH_PEPPER || ''];
+    let isMatch = false;
+    for (let i = 0; i < peppers.length && !isMatch; i++) {
+        const sha = crypto
+            .createHash('sha256')
+            .update(passwordStr + peppers[i])
+            .digest('base64');
+        isMatch = bcrypt.compareSync(sha, hashStr);
+    }
     // `isMatch` is the contract key; `match` is a defensive alias for any
     // workflow that reads `.match` (the delete-account template did).
     return { isMatch, match: isMatch };

package/dist/esm/nodes/account/account-compare-passwords.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-compare-passwords.js","sourceRoot":"","sources":["../../../../src/nodes/account/account-compare-passwords.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,UAAU,CAAA;AAEhE,KAAK,UAAU,yBAAyB,CAAC,MAAW,EAAE,OAAgC;IACpF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IAExB,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;KACxC;IAED,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;KACpC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAE5B,IAAI,WAAW,CAAC,MAAM,GAAG,IAAI,EAAE;QAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;KACnD;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;KACxC;IAED,yEAAyE;IACzE,mEAAmE;IACnE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,aAAa,GACjB,OAAO,uBAAuB,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAA;IACpF,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IAEtC,MAAM,MAAM,GAAI,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAA;IAChE,MAAM,GAAG,GAAG,MAAM;SACf,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC;SAC5B,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnB,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAEhD,sEAAsE;IACtE,kEAAkE;IAClE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAyB;IAC3D,QAAQ,EAAE,2BAA2B;IACrC,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE;QACZ,QAAQ,EAAE,QAAQ;KACnB;IACD,eAAe;QACb,OAAO,eAAe,CAAC,yBAAyB,CAAC,CAAA;IACnD,CAAC;CACF,CAAA"}
+{"version":3,"file":"account-compare-passwords.js","sourceRoot":"","sources":["../../../../src/nodes/account/account-compare-passwords.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,UAAU,CAAA;AAEhE,KAAK,UAAU,yBAAyB,CAAC,MAAW,EAAE,OAAgC;IACpF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IAExB,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;KACxC;IAED,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;KACpC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAE5B,IAAI,WAAW,CAAC,MAAM,GAAG,IAAI,EAAE;QAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;KACnD;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;QACxB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;KACxC;IAED,yEAAyE;IACzE,mEAAmE;IACnE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,aAAa,GACjB,OAAO,uBAAuB,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAA;IACpF,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IAEtC,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,GAAG,GAAI,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAA;IAC3C,MAAM,YAAY,GAChB,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ;QAC1C,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC;QACzD,CAAC,CAAC,GAAG,CAAC,kBAAkB;QACxB,CAAC,CAAC,EAAE,CAAA;IACR,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;IAC9F,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM;aACf,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;aAChC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACnB,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;KAC3C;IAED,sEAAsE;IACtE,kEAAkE;IAClE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAyB;IAC3D,QAAQ,EAAE,2BAA2B;IACrC,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE;QACZ,QAAQ,EAAE,QAAQ;KACnB;IACD,eAAe;QACb,OAAO,eAAe,CAAC,yBAAyB,CAAC,CAAA;IACnD,CAAC;CACF,CAAA"}

package/dist/esm/nodes/account/account-delete-current.js

@@ -77,7 +77,7 @@ export const accountDeleteCurrent = {
     executionEnv: 'client',
     isTerminal: true,
     dependencies: {
-        'next-auth': '^4.24.0',
+        'next-auth': '4.24.15',
     },
     generateHandler() {
         return handlerToString(account_delete_current);

package/dist/esm/nodes/account/account-get-current.js

@@ -143,7 +143,7 @@ export const accountGetCurrent = {
     nodeType: 'account-get-current',
     executionEnv: 'client',
     dependencies: {
-        'next-auth': '^4.24.0',
+        'next-auth': '4.24.15',
     },
     generateHandler() {
         return handlerToString(account_get_current);

package/dist/esm/nodes/account/account-hash-password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-hash-password.d.ts","sourceRoot":"","sources":["../../../../src/nodes/account/account-hash-password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAmB,MAAM,UAAU,CAAA;AA8ChE,eAAO,MAAM,mBAAmB,EAAE,oBAUjC,CAAA"}
+{"version":3,"file":"account-hash-password.d.ts","sourceRoot":"","sources":["../../../../src/nodes/account/account-hash-password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAmB,MAAM,UAAU,CAAA;AA8DhE,eAAO,MAAM,mBAAmB,EAAE,oBAUjC,CAAA"}

package/dist/esm/nodes/account/account-hash-password.js

@@ -9,8 +9,13 @@ async function account_hash_password(config, context) {
     if (passwordStr.length === 0) {
         throw new Error('Password cannot be empty');
     }
-    if (passwordStr.length > 1000) {
-        throw new Error('Password exceeds maximum length');
+    // The password a site accepts (the sign-up and reset routes apply the same).
+    if (passwordStr.length < 8) {
+        throw new Error('Password must be at least 8 characters');
+    }
+    if (passwordStr.length > 1000 ||
+        globalThis.Buffer.byteLength(passwordStr, 'utf8') > 128) {
+        throw new Error('Password is too long (at most 128 bytes)');
     }
     if (!Number.isInteger(saltRounds) || saltRounds < 4 || saltRounds > 31) {
         throw new Error('Salt rounds must be an integer between 4 and 31');
@@ -25,7 +30,14 @@ async function account_hash_password(config, context) {
     const __nodeRequire = typeof __non_webpack_require__ !== 'undefined' ? __non_webpack_require__ : require;
     const bcrypt = __nodeRequire('bcryptjs');
     const crypto = __nodeRequire('crypto');
-    const PEPPER = globalThis.process.env.AUTH_PEPPER || '';
+    // The project's own pepper (AUTH_PEPPER_SECRET) when the deployment has one,
+    // else the one every earlier hash used (AUTH_PEPPER) — as utils/auth/hash-password.
+    const env = globalThis.process.env;
+    const secretPepper = typeof env.AUTH_PEPPER_SECRET === 'string' &&
+        env.AUTH_PEPPER_SECRET.indexOf('teleporthq.secrets.') !== 0
+        ? env.AUTH_PEPPER_SECRET
+        : '';
+    const PEPPER = secretPepper || env.AUTH_PEPPER || '';
     const sha = crypto
         .createHash('sha256')
         .update(passwordStr + PEPPER)

package/dist/esm/nodes/account/account-hash-password.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-hash-password.js","sourceRoot":"","sources":["../../../../src/nodes/account/account-hash-password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,UAAU,CAAA;AAEhE,KAAK,UAAU,qBAAqB,CAAC,MAAW,EAAE,OAAgC;IAChF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAEnF,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;KACxC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IAEpC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;QAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;KAC5C;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,IAAI,EAAE;QAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;KACnD;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,EAAE,EAAE;QACtE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;KACnE;IAED,yEAAyE;IACzE,mEAAmE;IACnE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,aAAa,GACjB,OAAO,uBAAuB,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAA;IACpF,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IAEtC,MAAM,MAAM,GAAI,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAA;IAChE,MAAM,GAAG,GAAG,MAAM;SACf,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC;SAC5B,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IAE7C,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAyB;IACvD,QAAQ,EAAE,uBAAuB;IACjC,YAAY,EAAE,QAAQ;IACtB,kBAAkB,EAAE,IAAI;IACxB,YAAY,EAAE;QACZ,QAAQ,EAAE,QAAQ;KACnB;IACD,eAAe;QACb,OAAO,eAAe,CAAC,qBAAqB,CAAC,CAAA;IAC/C,CAAC;CACF,CAAA"}
+{"version":3,"file":"account-hash-password.js","sourceRoot":"","sources":["../../../../src/nodes/account/account-hash-password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,UAAU,CAAA;AAEhE,KAAK,UAAU,qBAAqB,CAAC,MAAW,EAAE,OAAgC;IAChF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAEnF,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;KACxC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IAEpC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE;QAC5B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;KAC5C;IAED,6EAA6E;IAC7E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;QAC1B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;KAC1D;IAED,IACE,WAAW,CAAC,MAAM,GAAG,IAAI;QACxB,UAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,GAAG,EAChE;QACA,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;KAC5D;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,EAAE,EAAE;QACtE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;KACnE;IAED,yEAAyE;IACzE,mEAAmE;IACnE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,aAAa,GACjB,OAAO,uBAAuB,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAA;IACpF,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IAEtC,6EAA6E;IAC7E,oFAAoF;IACpF,MAAM,GAAG,GAAI,UAAkB,CAAC,OAAO,CAAC,GAAG,CAAA;IAC3C,MAAM,YAAY,GAChB,OAAO,GAAG,CAAC,kBAAkB,KAAK,QAAQ;QAC1C,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC;QACzD,CAAC,CAAC,GAAG,CAAC,kBAAkB;QACxB,CAAC,CAAC,EAAE,CAAA;IACR,MAAM,MAAM,GAAG,YAAY,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAA;IACpD,MAAM,GAAG,GAAG,MAAM;SACf,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC;SAC5B,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IAE7C,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAyB;IACvD,QAAQ,EAAE,uBAAuB;IACjC,YAAY,EAAE,QAAQ;IACtB,kBAAkB,EAAE,IAAI;IACxB,YAAY,EAAE;QACZ,QAAQ,EAAE,QAAQ;KACnB;IACD,eAAe;QACb,OAAO,eAAe,CAAC,qBAAqB,CAAC,CAAA;IAC/C,CAAC;CACF,CAAA"}