@teleporthq/teleport-plugin-next-workflows 0.45.5 → 0.45.8

package/__tests__/account-delete-password-check.test.ts

@@ -86,6 +86,45 @@ describe('deleting an account with a password', () => {
     expect(withoutPepper.status).toBe(403)
   })
 
+  it('checks with the project’s own pepper first, and still with the old one, as sign-in does', async () => {
+    const env = { AUTH_PEPPER: 'pepper-1', AUTH_PEPPER_SECRET: 'secret-1' }
+    // Signed up, or signed in (rehashed), after the deploy provisioned the secret.
+    const current = await runAccountDeleteRoute({
+      userRow: userRow(storedHashOf(PASSWORD, 'secret-1')),
+      tables: TABLES,
+      requestBody: { password: PASSWORD },
+      env,
+    })
+    expect(current.status).toBe(200)
+
+    // Not signed in since: the hash is still on the old pepper.
+    const earlier = await runAccountDeleteRoute({
+      userRow: userRow(storedHashOf(PASSWORD, 'pepper-1')),
+      tables: TABLES,
+      requestBody: { password: PASSWORD },
+      env,
+    })
+    expect(earlier.status).toBe(200)
+
+    const wrong = await runAccountDeleteRoute({
+      userRow: userRow(storedHashOf(PASSWORD, 'secret-1')),
+      tables: TABLES,
+      requestBody: { password: 'not it' },
+      env,
+    })
+    expect(wrong.status).toBe(403)
+  })
+
+  it('takes an unresolved secret placeholder for no secret', async () => {
+    const run = await runAccountDeleteRoute({
+      userRow: userRow(storedHashOf(PASSWORD, 'pepper-1')),
+      tables: TABLES,
+      requestBody: { password: PASSWORD },
+      env: { AUTH_PEPPER: 'pepper-1', AUTH_PEPPER_SECRET: 'teleporthq.secrets.AUTH_PEPPER_SECRET' },
+    })
+    expect(run.status).toBe(200)
+  })
+
   it('refuses any password for an account that has none stored (a social sign-in)', async () => {
     const run = await runAccountDeleteRoute({
       userRow: userRow(null),

package/__tests__/analytics-track-outcome.test.ts

@@ -176,6 +176,62 @@ describe('analytics-track-outcome node', () => {
     })
   })
 
+  describe('server: an outcome the analytics service takes only from a browser', () => {
+    // The service's server endpoint counts `purchase` and `booking_made` alone;
+    // a lead, sign-up, newsletter, search or custom outcome comes from the page.
+    const configured = (calls: Array<{ body: string }>) =>
+      evalHandler(generator.generateServerHandler?.() ?? '', {
+        globalThis: {
+          process: {
+            env: {
+              NEXT_PUBLIC_TELEPORT_ANALYTICS_URL: 'https://analytics.example',
+              NEXT_PUBLIC_TELEPORT_ANALYTICS_KEY: 'tpa_key',
+              TELEPORT_ANALYTICS_SERVER_KEY: 'tpas_secret',
+            },
+          },
+        },
+        fetch: (_url: string, init: { body: string }) => {
+          calls.push(init)
+          return Promise.resolve({ status: 202 })
+        },
+        AbortController: undefined,
+      })
+
+    let warn: jest.SpyInstance
+    beforeEach(() => {
+      warn = jest.spyOn(console, 'warn').mockImplementation(() => undefined)
+    })
+    afterEach(() => warn.mockRestore())
+
+    it('is refused as browser-only, with the reason in the logs, and never sent', async () => {
+      const calls: Array<{ body: string }> = []
+      const report = configured(calls)
+      for (const name of ['lead', 'signup', 'newsletter', 'search', 'custom:demo_booked']) {
+        expect(await report({ name }, {})).toEqual({ sent: false, reason: 'browser-only' })
+        expect(await report({ name, outcomeId: 'row-1' }, {})).toEqual({
+          sent: false,
+          reason: 'browser-only',
+        })
+      }
+      expect(calls).toEqual([])
+      expect(warn).toHaveBeenCalledWith(
+        '[analytics] the "lead" outcome was not reported: only a visitor\'s browser can report it, never a server step'
+      )
+    })
+
+    it('says so in the logs when a money outcome has no id to report', async () => {
+      const calls: Array<{ body: string }> = []
+      expect(await configured(calls)({ name: 'booking_made', value: '40' }, {})).toEqual({
+        sent: false,
+        reason: 'no-outcome-id',
+      })
+      expect(calls).toEqual([])
+      expect(warn).toHaveBeenCalledWith(
+        '[analytics] the "booking_made" outcome was not reported: it has no order or booking id'
+      )
+    })
+  })
+
   it('server: answers not-configured without the key and never throws on a network failure', async () => {
     const unconfigured = evalHandler(generator.generateServerHandler?.() ?? '', {
       globalThis: { process: { env: {} } },

package/__tests__/public-step-guards.test.ts

@@ -3,6 +3,7 @@ import adminFileWorkflows from './fixtures/admin-file-workflows.json'
 import {
   PUBLIC_STEP_REFUSAL_CODE,
   PublicStepRefusalError,
+  assertNoPublicRestrictedSteps,
   findPublicRestrictedSteps,
 } from '../src/public-step-guards'
 
@@ -234,6 +235,31 @@ describe('restricted steps on a public route', () => {
     expect(error).toBeInstanceOf(PublicStepRefusalError)
   })
 
+  it('on a site without sign-in, says to enable authentication before any role can be asked', () => {
+    const workflows = {
+      workflows: { w1: pageWorkflow([node('n1', 'file-storage-delete', 'Delete Upload')]) },
+    }
+    const refusedWith = (authentication: unknown): string => {
+      try {
+        assertNoPublicRestrictedSteps(workflows, authentication as never)
+      } catch (error) {
+        return shownSentence(error as Error)
+      }
+      throw new Error('not refused')
+    }
+
+    for (const withoutSignIn of [refusedWith(null), refusedWith({ enabled: false, roles: [] })]) {
+      expect(withoutSignIn).toContain('"Delete Upload"')
+      expect(withoutSignIn).toContain('has no sign-in')
+      expect(withoutSignIn).toContain('enable authentication')
+      expect(withoutSignIn).not.toContain('let only the role')
+      expect(withoutSignIn.length).toBeLessThanOrEqual(400)
+    }
+    const withSignIn = refusedWith({ enabled: true, roles: ['admin', 'user'] })
+    expect(withSignIn).toContain('let only the role "admin" start it')
+    expect(withSignIn).not.toContain('has no sign-in')
+  })
+
   it('stays one short sentence for many steps', () => {
     const nodes = Array.from({ length: 12 }, (_, i) =>
       node(

package/__tests__/server-job-self-calls-absolute.test.ts

@@ -0,0 +1,430 @@
+/* tslint:disable:function-constructor no-any */
+import * as http from 'http'
+import { AddressInfo } from 'net'
+import * as nodePath from 'path'
+import * as vm from 'vm'
+import { NextWorkflowProjectPlugin } from '../src/workflow-project-plugin'
+import { generateHandlerFunction } from '../src/api-route-generator'
+import { withEnv } from './_helpers/fake-fetch'
+
+/**
+ * A scheduled workflow on a published site failed every run with HTTP 500
+ * "Failed to parse URL from /api/data/<id>/raw-query": its data step called the
+ * site's own data API by a relative address, which a browser resolves against
+ * the page and Node's fetch refuses. A server job has no page, so each route
+ * that runs one hands its steps the absolute origin (`context.__baseUrl`).
+ *
+ * Every kind of server job is run here as the deployment runs it — the
+ * generated files, Node's own fetch, and a real HTTP server standing in for the
+ * site — so a relative self-call fails exactly as it did in production.
+ */
+
+const DS = 'ds-store'
+const ref = (nodeId: string, path: string[]) => ({ type: 'workflowContext', nodeId, path })
+
+const CART_ROWS = [{ cart_id: 'cart-1', email: 'a@shop.test' }]
+
+/** The predefined "Abandoned Cart Reminder", reduced to its database steps. */
+const CART_REMINDER = {
+  id: 'wf-cart-reminder',
+  name: 'Abandoned Cart Reminder',
+  trigger: {
+    type: 'event-cron-triggered',
+    nodeId: 't',
+    scope: 'global',
+    config: { schedule: '0 * * * *', urlPath: 'cron_cartreminder' },
+  },
+  nodes: [
+    {
+      id: 'scan',
+      type: 'data-raw-query',
+      label: 'Scan Abandoned Carts',
+      config: {
+        dataSourceId: DS,
+        query:
+          'SELECT c.id AS cart_id FROM teleport_cart c WHERE c.updated_at < NOW() - make_interval(hours => $1::int)',
+        params: ['2'],
+      },
+      stepNumber: 1,
+    },
+    {
+      id: 'loop',
+      type: 'general-loop',
+      label: 'Loop Over Each Abandoned Cart',
+      config: { loopType: 'forEach', collection: ref('scan', ['result']), itemVariable: 'cart' },
+      stepNumber: 2,
+    },
+    {
+      id: 'record',
+      type: 'data-create-item',
+      label: 'Record Abandoned Cart',
+      config: {
+        dataSourceId: DS,
+        tableName: 'teleport_abandoned_carts',
+        columnMappings: [{ column: 'cart_id', value: ref('loop', ['currentItem', 'cart_id']) }],
+      },
+      stepNumber: 3,
+    },
+  ],
+  edges: [
+    { id: 'e1', source: 't', target: 'scan' },
+    { id: 'e2', source: 'scan', target: 'loop' },
+    {
+      id: 'e3',
+      source: 'loop',
+      target: 'record',
+      sourceHandle: 'loop',
+      targetHandle: 'loop-body-in',
+    },
+    {
+      id: 'e4',
+      source: 'record',
+      target: 'loop',
+      sourceHandle: 'loop-body-out',
+      targetHandle: 'loop-back',
+    },
+  ],
+}
+
+/** A shared step the store's jobs call: its database read runs in its own server segment route. */
+const RELEASE_NODE = {
+  id: 'cn-release',
+  name: 'Release Expired Holds',
+  parameters: [] as unknown[],
+  nodes: [
+    {
+      id: 'release-query',
+      type: 'data-raw-query',
+      label: 'Release Expired Holds',
+      config: { dataSourceId: DS, query: "UPDATE teleport_orders SET status = 'expired'" },
+      stepNumber: 0,
+    },
+  ],
+  edges: [] as unknown[],
+}
+
+const callRelease = (id: string, stepNumber: number) => ({
+  id,
+  type: 'general-custom-node',
+  label: 'Release Expired Holds',
+  config: { customNodeId: 'cn-release', parameters: [] as unknown[] },
+  stepNumber,
+})
+
+const RELEASE_CRON = {
+  id: 'wf-release',
+  name: 'Release Abandoned Checkouts',
+  trigger: {
+    type: 'event-cron-triggered',
+    nodeId: 't',
+    scope: 'global',
+    config: { schedule: '*/15 * * * *', urlPath: 'cron_release' },
+  },
+  nodes: [callRelease('release-call', 1)],
+  edges: [{ id: 'r1', source: 't', target: 'release-call' }],
+}
+
+const SYNC_WEBHOOK = {
+  id: 'wf-sync',
+  name: 'Inventory Sync',
+  trigger: { type: 'event-webhook-received', nodeId: 't', scope: 'global', config: {} },
+  webhookConfig: { urlPath: 'webhooks/inventory-sync', httpMethod: 'POST' },
+  nodes: [
+    {
+      id: 'sync-query',
+      type: 'data-raw-query',
+      label: 'Read Stock',
+      config: { dataSourceId: DS, query: 'SELECT id, stock FROM teleport_products' },
+      stepNumber: 1,
+    },
+  ],
+  edges: [{ id: 's1', source: 't', target: 'sync-query' }],
+}
+
+const ORDER_AUTOMATION = {
+  id: 'wf-order-placed',
+  name: 'When an order is placed',
+  trigger: { type: 'event-business-event', nodeId: 't', scope: 'global', config: {} },
+  nodes: [
+    {
+      id: 'auto-query',
+      type: 'data-raw-query',
+      label: 'Read The Order',
+      config: { dataSourceId: DS, query: 'SELECT id FROM teleport_orders LIMIT 1' },
+      stepNumber: 1,
+    },
+  ],
+  edges: [{ id: 'a1', source: 't', target: 'auto-query' }],
+}
+
+const ENV: Record<string, string | undefined> = {
+  NEXTAUTH_SECRET: 'app-secret',
+  NEXTAUTH_URL: undefined,
+  TELEPORT_CRON_ALLOW_UNSIGNED: 'true',
+  TELEPORT_CRON_SECRET: undefined,
+  VERCEL: undefined,
+  VERCEL_AUTOMATION_BYPASS_SECRET: undefined,
+}
+
+const generateFiles = async (): Promise<Map<string, string>> => {
+  const structure: any = {
+    uidl: {
+      name: 'Store',
+      globals: { settings: { title: 'Store', language: 'en' }, env: { NEXTAUTH_SECRET: 'k' } },
+      root: {
+        name: 'Root',
+        stateDefinitions: {
+          route: { type: 'string', defaultValue: 'Home', values: [{ value: 'Home' }] },
+        },
+        node: { type: 'element', content: { elementType: 'container', children: [] } },
+      },
+      components: {},
+      dataSources: { [DS]: { id: DS, type: 'teleport', name: 'Store', config: {} } },
+      workflows: {
+        workflows: JSON.parse(
+          JSON.stringify({
+            [CART_REMINDER.id]: CART_REMINDER,
+            [RELEASE_CRON.id]: RELEASE_CRON,
+            [SYNC_WEBHOOK.id]: SYNC_WEBHOOK,
+          })
+        ),
+        customNodes: JSON.parse(JSON.stringify({ [RELEASE_NODE.id]: RELEASE_NODE })),
+      },
+    },
+    strategy: { pages: { options: {} } },
+    files: new Map(),
+    dependencies: {},
+    devDependencies: {},
+  }
+  await new NextWorkflowProjectPlugin().runAfter(structure)
+  const files = new Map<string, string>()
+  for (const entry of structure.files.values()) {
+    for (const file of entry.files) {
+      files.set(
+        [...entry.path, `${file.name}.${file.fileType || 'js'}`].join('/'),
+        String(file.content)
+      )
+    }
+  }
+  files.set(
+    'lib/automations/handlers/wf-order-placed.js',
+    generateHandlerFunction(JSON.parse(JSON.stringify(ORDER_AUTOMATION)), {
+      [RELEASE_NODE.id]: RELEASE_NODE,
+    } as any)
+  )
+  return files
+}
+
+interface Reply {
+  status: number
+  body: any
+}
+
+interface Site {
+  origin: string
+  /** Every request the site received: its path and the Host it was sent to. */
+  received: Array<{ path: string; host: string }>
+  call: (routeFile: string, body?: unknown) => Promise<Reply>
+  load: (path: string) => any
+}
+
+/**
+ * The generated files served by a real HTTP server: the data API answers with
+ * rows, and a call to one of the site's own workflow routes runs that route.
+ */
+const startSite = async (files: Map<string, string>): Promise<Site & { close: () => void }> => {
+  let origin = ''
+  const received: Site['received'] = []
+  const cache = new Map<string, { exports: any }>()
+  const overrides: Record<string, unknown> = {
+    'lib/automations/store.js': {
+      appBaseUrl: () => origin,
+      saveWait: async (): Promise<void> => undefined,
+    },
+  }
+
+  const load = (path: string): any => {
+    if (Object.prototype.hasOwnProperty.call(overrides, path)) {
+      return overrides[path]
+    }
+    const cached = cache.get(path)
+    if (cached) {
+      return cached.exports
+    }
+    const source = files.get(path)
+    if (source === undefined) {
+      throw new Error(`Cannot find module '${path}'`)
+    }
+    const module = { exports: {} as any }
+    cache.set(path, module)
+    const dir = nodePath.posix.dirname(path)
+    const localRequire = (id: string): unknown => {
+      if (id.startsWith('.')) {
+        const joined = nodePath.posix.normalize(nodePath.posix.join(dir, id))
+        const found = [joined, `${joined}.js`, `${joined}/index.js`].find(
+          (candidate) =>
+            files.has(candidate) || Object.prototype.hasOwnProperty.call(overrides, candidate)
+        )
+        return load(found || `${joined}.js`)
+      }
+      if (id === 'next-auth/jwt') {
+        return { getToken: async (): Promise<null> => null }
+      }
+      // eslint-disable-next-line @typescript-eslint/no-var-requires
+      return require(id)
+    }
+    new Function('module', 'exports', 'require', source)(module, module.exports, localRequire)
+    return module.exports
+  }
+
+  const run = async (
+    routeFile: string,
+    headers: Record<string, string | string[] | undefined>,
+    body: unknown
+  ): Promise<Reply> => {
+    const reply: Reply = { status: 200, body: null }
+    const res: any = {
+      setHeader: (): any => res,
+      status(code: number) {
+        reply.status = code
+        return res
+      },
+      json(payload: unknown) {
+        reply.body = payload
+        return res
+      },
+      end() {
+        return res
+      },
+    }
+    const handler = load(routeFile)
+    await (handler.default || handler)(
+      {
+        method: 'POST',
+        url: '/' + routeFile.replace(/^pages\//, '').replace(/\.js$/, ''),
+        query: {},
+        headers,
+        body,
+      },
+      res
+    )
+    return reply
+  }
+
+  const server = http.createServer((req, res) => {
+    const chunks: Buffer[] = []
+    req.on('data', (chunk: Buffer) => chunks.push(chunk))
+    req.on('end', async () => {
+      const path = new URL(req.url || '/', 'http://site').pathname
+      received.push({ path, host: String(req.headers.host) })
+      const text = Buffer.concat(chunks).toString('utf8')
+      const body = text ? JSON.parse(text) : undefined
+      let reply: Reply = { status: 404, body: { error: 'not found' } }
+      if (/^\/api\/data\/[^/]+\/[^/]+$/.test(path)) {
+        reply = { status: 200, body: { success: true, rows: CART_ROWS, data: CART_ROWS[0] } }
+      } else if (files.has(`pages${path}.js`)) {
+        reply = await run(`pages${path}.js`, req.headers, body)
+      }
+      res.statusCode = reply.status
+      res.setHeader('content-type', 'application/json')
+      res.end(JSON.stringify(reply.body))
+    })
+  })
+  await new Promise<void>((resolve) => server.listen(0, '127.0.0.1', resolve))
+  const { port } = server.address() as AddressInfo
+  origin = `http://127.0.0.1:${port}`
+
+  return {
+    origin,
+    received,
+    load,
+    call: (routeFile, body = {}) =>
+      run(routeFile, { host: `127.0.0.1:${port}`, 'content-type': 'application/json' }, body),
+    close: () => server.close(),
+  }
+}
+
+// Node's own fetch (undici), as the deployment has it: the one that refuses a
+// relative address. Jest's sandbox has no global fetch of its own.
+const nodeFetch = vm.runInThisContext('fetch')
+
+const silenced = async <T>(run: () => Promise<T>): Promise<T> => {
+  const sink = console as unknown as Record<string, unknown>
+  const levels = ['warn', 'error', 'log', 'info']
+  const saved = levels.map((level) => sink[level])
+  levels.forEach((level) => {
+    sink[level] = (): undefined => undefined
+  })
+  try {
+    return await run()
+  } finally {
+    levels.forEach((level, index) => {
+      sink[level] = saved[index]
+    })
+  }
+}
+
+const onSite = async <T>(run: (site: Site) => Promise<T>): Promise<T> => {
+  const site = await startSite(await generateFiles())
+  const scope = globalThis as any
+  const previous = scope.fetch
+  scope.fetch = nodeFetch
+  try {
+    return await withEnv(ENV, () => silenced(() => run(site)))
+  } finally {
+    scope.fetch = previous
+    site.close()
+  }
+}
+
+/** The paths the site received, each asserted to have come to its own address. */
+const selfCalls = (site: Site): string[] => {
+  const host = new URL(site.origin).host
+  site.received.forEach((call) => expect(call.host).toBe(host))
+  return site.received.map((call) => call.path)
+}
+
+const webhookDelivery = (payload: unknown) => Buffer.from(JSON.stringify(payload))
+
+describe("a server job calls the site's own routes by their absolute address", () => {
+  it('a scheduled workflow reads with a raw query, then records each row', async () => {
+    await onSite(async (site) => {
+      const reply = await site.call('pages/api/workflows/cron_cartreminder.js')
+
+      expect(reply).toEqual({ status: 200, body: expect.objectContaining({ success: true }) })
+      expect(selfCalls(site)).toEqual([`/api/data/${DS}/raw-query`, `/api/data/${DS}/create`])
+    })
+  })
+
+  it("a scheduled workflow runs a shared step whose query is in that step's own route", async () => {
+    await onSite(async (site) => {
+      const reply = await site.call('pages/api/workflows/cron_release.js')
+
+      expect(reply).toEqual({ status: 200, body: expect.objectContaining({ success: true }) })
+      const [segmentRoute, ...rest] = selfCalls(site)
+      expect(segmentRoute).toMatch(/^\/api\/workflows\/release-expired-holds-/)
+      expect(rest).toEqual([`/api/data/${DS}/raw-query`])
+    })
+  })
+
+  it('a webhook reads with a raw query', async () => {
+    await onSite(async (site) => {
+      const reply = await site.call(
+        'pages/api/webhooks/inventory-sync.js',
+        webhookDelivery({ event: 'stock' })
+      )
+
+      expect(reply).toEqual({ status: 200, body: { received: true } })
+      expect(selfCalls(site)).toEqual([`/api/data/${DS}/raw-query`])
+    })
+  })
+
+  it('an automation reads with a raw query', async () => {
+    await onSite(async (site) => {
+      const handler = site.load('lib/automations/handlers/wf-order-placed.js')
+      await handler.run({ event: { id: 'e1', type: 'order-placed' }, order: { id: 'o1' } }, {})
+
+      expect(selfCalls(site)).toEqual([`/api/data/${DS}/raw-query`])
+    })
+  })
+})

package/dist/cjs/account-delete-route-generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-delete-route-generator.d.ts","sourceRoot":"","sources":["../../src/account-delete-route-generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAcxE,MAAM,WAAW,yBAAyB;IAExC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAI3B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IAGtB,kBAAkB,CAAC,EAAE,2BAA2B,CAAA;IAEhD,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAG5B,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAID,eAAO,MAAM,8BAA8B,+CAAiC,CAAA;AAE5E,eAAO,MAAM,0BAA0B,aAAa,yBAAyB,KAAQ,MAwbpF,CAAA"}
+{"version":3,"file":"account-delete-route-generator.d.ts","sourceRoot":"","sources":["../../src/account-delete-route-generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AAcxE,MAAM,WAAW,yBAAyB;IAExC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAI3B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IAGtB,kBAAkB,CAAC,EAAE,2BAA2B,CAAA;IAEhD,QAAQ,CAAC,EAAE,MAAM,CAAA;IAEjB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAG5B,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAID,eAAO,MAAM,8BAA8B,+CAAiC,CAAA;AAE5E,eAAO,MAAM,0BAA0B,aAAa,yBAAyB,KAAQ,MAicpF,CAAA"}

package/dist/cjs/account-delete-route-generator.js

@@ -275,19 +275,28 @@ function readRequestPassword(req) {
   return String(body.password);
 }
 
-// The sign-in check (utils/auth/hash-password.js verifyPassword): bcrypt over
-// the SHA-256 of the password and AUTH_PEPPER. An account without a stored
-// password (a social sign-in) matches no password.
+// The sign-in check (utils/auth/hash-password.js checkPassword): bcrypt over
+// the SHA-256 of the password and a pepper, the project's own
+// (AUTH_PEPPER_SECRET) first, then the one every earlier hash used
+// (AUTH_PEPPER). An account without a stored password (a social sign-in)
+// matches no password.
 function passwordMatches(password, storedHash) {
   if (!storedHash || password.length > 1000) { return false; }
   var bcrypt = require('bcryptjs');
   var crypto = require('crypto');
-  var prepared = crypto.createHash('sha256').update(password + (process.env.AUTH_PEPPER || '')).digest('base64');
-  try {
-    return bcrypt.compareSync(prepared, String(storedHash));
-  } catch (e) {
-    return false;
+  var secret = process.env.AUTH_PEPPER_SECRET;
+  var peppers = typeof secret === 'string' && secret && secret.indexOf('teleporthq.secrets.') !== 0
+    ? [secret, process.env.AUTH_PEPPER || '']
+    : [process.env.AUTH_PEPPER || ''];
+  for (var i = 0; i < peppers.length; i++) {
+    var prepared = crypto.createHash('sha256').update(password + peppers[i]).digest('base64');
+    try {
+      if (bcrypt.compareSync(prepared, String(storedHash))) { return true; }
+    } catch (e) {
+      return false;
+    }
   }
+  return false;
 }
 
 ${(0, transactional_email_code_1.generateFillTemplateFn)()}

package/dist/cjs/account-delete-route-generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-delete-route-generator.js","sourceRoot":"","sources":["../../src/account-delete-route-generator.ts"],"names":[],"mappings":";;;AA2BA,iEAA0D;AAC1D,qDAAuD;AACvD,uEAAoF;AACpF,yEAOmC;AACnC,qDAAsF;AA0BtF,+EAA+E;AAC/E,oFAAoF;AACvE,QAAA,8BAA8B,GAAG,yDAA8B,CAAA;AAErE,MAAM,0BAA0B,GAAG,CAAC,UAAqC,EAAE,EAAU,EAAE;IAC5F,MAAM,cAAc,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAA;IAC5D,MAAM,QAAQ,GACZ,OAAO,CAAC,aAAa,IAAI,oDAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3E,CAAC,CAAC,OAAO,CAAC,aAAa;QACvB,CAAC,CAAC,IAAI,CAAA;IACV,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,IAAI,yCAAyC,CAAA;IAC1E,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,KAAK,IAAI,CAAA;IAExD,OAAO,GAAG,IAAA,qCAAoB,GAAE;EAChC,IAAA,kEAAwC,GAAE;2BACjB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;oBACrC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;gCAC1B,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;yBAC1C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;qBAC5B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;0BAClC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;gCAChC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;wBACxD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,IAAI,+BAA+B,CAAC;0BACrE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;0BAC3C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;EACxE,IAAA,qDAA0B,EAAC,UAAU,CAAC;;;;;;;;;;;KAWnC,sCAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyHxB,8BAAY,CAAC,+BAA+B,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkI9C,IAAA,iDAAsB,GAAE;;EAExB,IAAA,uDAA4B,EAAC;QAC7B,MAAM,EAAE,0BAA0B;QAClC,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,iBAAiB;QAC5B,cAAc,EAAE,iBAAiB;KAClC,CAAC;;EAEA,IAAA,uDAA4B,EAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,iBAAiB;QAC5B,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,4BAA4B;QACvC,cAAc,EAAE,UAAU;QAC1B,uBAAuB,EAAE,IAAI;KAC9B,CAAC;;;;;;;;;;;;;;;;;EAkBA,eAAe;QACb,CAAC,CAAC,IAAA,6CAA4B,EAAC,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC1F,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;;;;;;EA0BE,eAAe;QACb,CAAC,CAAC;;CAEL;QACG,CAAC,CAAC,EACN;;;;;;;;;;;EAWE,eAAe,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+D/D,QAAQ;QACN,CAAC,CAAC;;CAEL;QACG,CAAC,CAAC,EACN,GACI,eAAe;QACb,CAAC,CAAC;;CAEP;QACK,CAAC,CAAC,EACN;;;CAGD,CAAA;AACD,CAAC,CAAA;AAxbY,QAAA,0BAA0B,8BAwbtC"}
+{"version":3,"file":"account-delete-route-generator.js","sourceRoot":"","sources":["../../src/account-delete-route-generator.ts"],"names":[],"mappings":";;;AA2BA,iEAA0D;AAC1D,qDAAuD;AACvD,uEAAoF;AACpF,yEAOmC;AACnC,qDAAsF;AA0BtF,+EAA+E;AAC/E,oFAAoF;AACvE,QAAA,8BAA8B,GAAG,yDAA8B,CAAA;AAErE,MAAM,0BAA0B,GAAG,CAAC,UAAqC,EAAE,EAAU,EAAE;IAC5F,MAAM,cAAc,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAA;IAC5D,MAAM,QAAQ,GACZ,OAAO,CAAC,aAAa,IAAI,oDAAyB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3E,CAAC,CAAC,OAAO,CAAC,aAAa;QACvB,CAAC,CAAC,IAAI,CAAA;IACV,MAAM,mBAAmB,GACvB,OAAO,CAAC,mBAAmB,IAAI,yCAAyC,CAAA;IAC1E,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,KAAK,IAAI,CAAA;IAExD,OAAO,GAAG,IAAA,qCAAoB,GAAE;EAChC,IAAA,kEAAwC,GAAE;2BACjB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;oBACrC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;gCAC1B,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;yBAC1C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;qBAC5B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;0BAClC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;gCAChC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;wBACxD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,IAAI,+BAA+B,CAAC;0BACrE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;0BAC3C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;EACxE,IAAA,qDAA0B,EAAC,UAAU,CAAC;;;;;;;;;;;KAWnC,sCAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyHxB,8BAAY,CAAC,+BAA+B,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2I9C,IAAA,iDAAsB,GAAE;;EAExB,IAAA,uDAA4B,EAAC;QAC7B,MAAM,EAAE,0BAA0B;QAClC,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,iBAAiB;QAC5B,cAAc,EAAE,iBAAiB;KAClC,CAAC;;EAEA,IAAA,uDAA4B,EAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,iBAAiB;QAC5B,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,4BAA4B;QACvC,cAAc,EAAE,UAAU;QAC1B,uBAAuB,EAAE,IAAI;KAC9B,CAAC;;;;;;;;;;;;;;;;;EAkBA,eAAe;QACb,CAAC,CAAC,IAAA,6CAA4B,EAAC,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC1F,CAAC,CAAC,EACN;;;;;;;;;;;;;;;;;;;;;;;;;EA0BE,eAAe;QACb,CAAC,CAAC;;CAEL;QACG,CAAC,CAAC,EACN;;;;;;;;;;;EAWE,eAAe,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+D/D,QAAQ;QACN,CAAC,CAAC;;CAEL;QACG,CAAC,CAAC,EACN,GACI,eAAe;QACb,CAAC,CAAC;;CAEP;QACK,CAAC,CAAC,EACN;;;CAGD,CAAA;AACD,CAAC,CAAA;AAjcY,QAAA,0BAA0B,8BAictC"}

package/dist/cjs/nodes/analytics/analytics-track-outcome.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analytics-track-outcome.d.ts","sourceRoot":"","sources":["../../../../src/nodes/analytics/analytics-track-outcome.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAkH/C,eAAO,MAAM,qBAAqB,EAAE,oBASnC,CAAA"}
+{"version":3,"file":"analytics-track-outcome.d.ts","sourceRoot":"","sources":["../../../../src/nodes/analytics/analytics-track-outcome.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AA8H/C,eAAO,MAAM,qBAAqB,EAAE,oBASnC,CAAA"}

package/dist/cjs/nodes/analytics/analytics-track-outcome.js

@@ -21,6 +21,13 @@ exports.analyticsTrackOutcome = void 0;
  * the visitor id is the tracker's alone: a browser may still hold a persistent
  * id from before its consent was withdrawn.
  *
+ * The service takes exactly the money outcomes from a server, each with the
+ * order or booking id it dedupes a retried report on, and every other outcome
+ * from a browser only. So on the server any other name is refused as
+ * `browser-only` (an automation, a webhook or a cron has no visitor's page to
+ * report it from), and a money outcome without an id as `no-outcome-id`: an id
+ * made up here would count a retried report twice. Both say why in the logs.
+ *
  * Never throws: an outcome that cannot be reported answers `{ sent: false }`
  * and the workflow continues — analytics must never cost a sale.
  */
@@ -56,6 +63,10 @@ const SERVER_BODY = `async function analytics_track_outcome(config, context) {
   if (!name) {
     return { sent: false, reason: 'no-name' };
   }
+  if (${JSON.stringify(SERVER_ONLY_OUTCOMES)}.indexOf(name) === -1) {
+    console.warn('[analytics] the "' + name + '" outcome was not reported: only a visitor\\'s browser can report it, never a server step');
+    return { sent: false, reason: 'browser-only' };
+  }
   // \`globalThis.process\` (member access): webpack rewrites a bare \`process\`.
   var env = globalThis.process && globalThis.process.env;
   var baseUrl = (env && env.NEXT_PUBLIC_TELEPORT_ANALYTICS_URL) || '';
@@ -66,6 +77,7 @@ const SERVER_BODY = `async function analytics_track_outcome(config, context) {
   }
   // The service dedupes on this id and drops an outcome without one.
   if (config.outcomeId == null || config.outcomeId === '') {
+    console.warn('[analytics] the "' + name + '" outcome was not reported: it has no order or booking id');
     return { sent: false, reason: 'no-outcome-id' };
   }
   var ids = context && context.__tpa && typeof context.__tpa === 'object' ? context.__tpa : {};

package/dist/cjs/nodes/analytics/analytics-track-outcome.js.map

@@ -1 +1 @@
-{"version":3,"file":"analytics-track-outcome.js","sourceRoot":"","sources":["../../../../src/nodes/analytics/analytics-track-outcome.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,oBAAoB,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;AAEzD,MAAM,WAAW,GAAG;;;;;QAKZ,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC;;;;;;;;;;;;;;;;;;;;EAoB1C,CAAA;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0DlB,CAAA;AAEW,QAAA,qBAAqB,GAAyB;IACzD,QAAQ,EAAE,yBAAyB;IACnC,YAAY,EAAE,WAAW;IACzB,eAAe;QACb,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,qBAAqB;QACnB,OAAO,WAAW,CAAA;IACpB,CAAC;CACF,CAAA"}
+{"version":3,"file":"analytics-track-outcome.js","sourceRoot":"","sources":["../../../../src/nodes/analytics/analytics-track-outcome.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,oBAAoB,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAA;AAEzD,MAAM,WAAW,GAAG;;;;;QAKZ,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC;;;;;;;;;;;;;;;;;;;;EAoB1C,CAAA;AAEF,MAAM,WAAW,GAAG;;;;;QAKZ,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0D1C,CAAA;AAEW,QAAA,qBAAqB,GAAyB;IACzD,QAAQ,EAAE,yBAAyB;IACnC,YAAY,EAAE,WAAW;IACzB,eAAe;QACb,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,qBAAqB;QACnB,OAAO,WAAW,CAAA;IACpB,CAAC;CACF,CAAA"}