@withpotter/lib 0.13.0-next.101

package/dist/api/content.d.ts

@@ -0,0 +1,146 @@
+import type { ContentItem, ContentListResponse, ContentItemResponse, CreateContentInput } from './types';
+/**
+ * `list`'s query, named rather than derived.
+ *
+ * `listAll` originally typed this as `Parameters<typeof contentApi.list>[2]`,
+ * which is a reference to the object being declared: TypeScript cannot resolve
+ * that while inferring the literal, so it fell back to `{}` for `list`'s
+ * RETURN type too — and every caller in the app suddenly had no `.data`. A
+ * self-referential type inside an object literal fails silently at the
+ * declaration and loudly everywhere else.
+ */
+export interface ContentListParams {
+    status?: string;
+    /** Server honours `active` (not `status`); false returns drafts. */
+    active?: boolean;
+    featured?: boolean;
+    behaviors?: string[];
+    page?: number;
+    limit?: number;
+    search?: string;
+}
+export declare const contentApi: {
+    /**
+     * List all content of a specific type
+     */
+    list: (tenantSlug: string, contentType: string, params?: ContentListParams) => Promise<ContentListResponse>;
+    /**
+     * Every page of a content type, not the first.
+     *
+     * `list` with `limit: 200` is not "all collections"; it is the first two
+     * hundred, and a merchant past that had the rest silently disappear from a
+     * list that filters and paginates client-side. Reads `meta.pagination.total`
+     * to know when to stop, and stops regardless at CONTENT_PAGE_LIMIT pages.
+     */
+    listAll: (tenantSlug: string, contentType: string, params?: ContentListParams) => Promise<ContentItem[]>;
+    /**
+     * Get a single content item by ID
+     */
+    get: (tenantSlug: string, contentType: string, id: string) => Promise<ContentItemResponse>;
+    /**
+     * Get a single content item by slug
+     */
+    getBySlug: (tenantSlug: string, contentType: string, slug: string) => Promise<ContentItemResponse>;
+    /**
+     * Create a new content item
+     */
+    create: (tenantSlug: string, contentType: string, data: CreateContentInput) => Promise<ContentItemResponse>;
+    /**
+     * Update an existing content item
+     */
+    update: (tenantSlug: string, contentType: string, id: string, data: Partial<CreateContentInput>) => Promise<ContentItemResponse>;
+    /**
+     * Delete a content item
+     */
+    delete: (tenantSlug: string, contentType: string, id: string) => Promise<unknown>;
+    /**
+     * Reorder content items
+     */
+    reorder: (tenantSlug: string, contentType: string, items: {
+        id: string;
+        sortOrder: number;
+    }[]) => Promise<unknown>;
+    /**
+     * Bulk update status — and it has to send `isActive`, not `status`.
+     *
+     * THIS WAS A SILENT NO-OP. The endpoint reads `body.isActive` (a boolean) and
+     * `BulkUpdateStatusUseCase` writes that one column; this client sent
+     * `{ ids, status: 'archived' }`, so `isActive` arrived undefined, Sequelize
+     * skipped the key, and `contentModel.update` wrote nothing. Both bulk
+     * Publish and bulk Archive selected rows, called the API, got a 200 with an
+     * `affected` count, reported success and changed nothing at all.
+     *
+     * It surfaced by trying to archive a product and finding it still in the Live
+     * list afterwards — which read as a UI race and was not one.
+     *
+     * The signature keeps a status word because that is what the call site means,
+     * but only two states are reachable: the column is a boolean, so `archived`
+     * and `draft` are the same write. Anything wanting a real third state needs a
+     * `status` column on content and a use case that sets it.
+     */
+    bulkUpdateStatus: (tenantSlug: string, contentType: string, ids: string[], status: "draft" | "published" | "archived") => Promise<unknown>;
+    /**
+     * Bulk delete
+     */
+    bulkDelete: (tenantSlug: string, contentType: string, ids: string[]) => Promise<unknown>;
+    /**
+     * Assign content to a single customer (Customer Programs)
+     * Pass customerId: null to unassign.
+     */
+    assign: (tenantSlug: string, contentType: string, id: string, customerId: string | null) => Promise<ContentItemResponse>;
+    /**
+     * Bulk-assign content to all active subscribers of a plan or tier.
+     * Returns { created, skipped, failed }.
+     */
+    assignBulk: (tenantSlug: string, contentType: string, id: string, params: {
+        planId?: string;
+        tierId?: string;
+    }) => Promise<{
+        data: {
+            created: number;
+            skipped: number;
+            failed: number;
+        };
+    }>;
+    /**
+     * Create an event series from a parent event.
+     */
+    createSeries: (tenantSlug: string, contentType: string, id: string, recurrence: {
+        frequency: "daily" | "weekly" | "biweekly" | "monthly";
+        interval?: number;
+        occurrences?: number;
+        endDate?: string;
+    }, maxOccurrences?: number) => Promise<{
+        data: {
+            parentId: string;
+            created: number;
+            occurrences: ContentItem[];
+            errors: {
+                date: string;
+                error: string;
+            }[];
+        };
+    }>;
+    /**
+     * List all occurrences in an event series.
+     */
+    listSeries: (tenantSlug: string, contentType: string, id: string, options?: {
+        upcoming?: boolean;
+    }) => Promise<{
+        data: {
+            parent: ContentItem;
+            recurrence: {
+                frequency: string;
+                interval?: number;
+                occurrences?: number;
+                endDate?: string;
+            } | null;
+            occurrences: ContentItem[];
+            totalOccurrences: number;
+        };
+    }>;
+    /**
+     * Delete a single series occurrence.
+     */
+    deleteSeriesOccurrence: (tenantSlug: string, contentType: string, parentId: string, childId: string) => Promise<unknown>;
+};

package/dist/api/content.js

@@ -0,0 +1,187 @@
+import { stripNonMediaKeys } from "@withpotter/lib/media-utils";
+import { apiFetch } from "./core";
+const CONTENT_PAGE_SIZE = 200;
+const CONTENT_PAGE_LIMIT = 5;
+const contentApi = {
+  /**
+   * List all content of a specific type
+   */
+  list: (tenantSlug, contentType, params) => {
+    const searchParams = new URLSearchParams();
+    if (params?.status) searchParams.set("status", params.status);
+    if (params?.active !== void 0)
+      searchParams.set("active", String(params.active));
+    if (params?.featured !== void 0)
+      searchParams.set("featured", String(params.featured));
+    if (params?.behaviors?.length)
+      searchParams.set("behaviors", params.behaviors.join(","));
+    if (params?.page) searchParams.set("page", String(params.page));
+    if (params?.limit) searchParams.set("limit", String(params.limit));
+    if (params?.search) searchParams.set("search", params.search);
+    const query = searchParams.toString() ? `?${searchParams.toString()}` : "";
+    return apiFetch(`/content/${contentType}${query}`, {
+      tenantSlug
+    });
+  },
+  /**
+   * Every page of a content type, not the first.
+   *
+   * `list` with `limit: 200` is not "all collections"; it is the first two
+   * hundred, and a merchant past that had the rest silently disappear from a
+   * list that filters and paginates client-side. Reads `meta.pagination.total`
+   * to know when to stop, and stops regardless at CONTENT_PAGE_LIMIT pages.
+   */
+  listAll: async (tenantSlug, contentType, params) => {
+    const limit = params?.limit ?? CONTENT_PAGE_SIZE;
+    const first = await contentApi.list(tenantSlug, contentType, {
+      ...params,
+      limit,
+      page: 1
+    });
+    const items = [...first.data || []];
+    const total = first.meta?.pagination?.total ?? items.length;
+    const pages = Math.min(
+      Math.max(1, Math.ceil(total / limit)),
+      CONTENT_PAGE_LIMIT
+    );
+    if (pages > 1) {
+      const rest = await Promise.all(
+        Array.from(
+          { length: pages - 1 },
+          (_, i) => contentApi.list(tenantSlug, contentType, {
+            ...params,
+            limit,
+            page: i + 2
+          })
+        )
+      );
+      for (const result of rest) items.push(...result.data || []);
+    }
+    return items;
+  },
+  /**
+   * Get a single content item by ID
+   */
+  get: (tenantSlug, contentType, id) => apiFetch(`/content/${contentType}/${id}`, {
+    tenantSlug
+  }),
+  /**
+   * Get a single content item by slug
+   */
+  getBySlug: (tenantSlug, contentType, slug) => apiFetch(`/content/${contentType}/slug/${slug}`, {
+    tenantSlug
+  }),
+  /**
+   * Create a new content item
+   */
+  create: (tenantSlug, contentType, data) => apiFetch(`/content/${contentType}`, {
+    method: "POST",
+    tenantSlug,
+    // See `stripNonMediaKeys`: the API forbids non-whitelisted keys, so one
+    // stray `id` on a media object rejects the entire create.
+    body: JSON.stringify(stripNonMediaKeys(data))
+  }),
+  /**
+   * Update an existing content item
+   */
+  update: (tenantSlug, contentType, id, data) => apiFetch(`/content/${contentType}/${id}`, {
+    method: "PUT",
+    tenantSlug,
+    // Same trap as create: an edit round-trips the media it just read back,
+    // which is exactly where a client-side `id` gets reattached.
+    body: JSON.stringify(stripNonMediaKeys(data))
+  }),
+  /**
+   * Delete a content item
+   */
+  delete: (tenantSlug, contentType, id) => apiFetch(`/content/${contentType}/${id}`, {
+    method: "DELETE",
+    tenantSlug
+  }),
+  /**
+   * Reorder content items
+   */
+  reorder: (tenantSlug, contentType, items) => apiFetch(`/content/${contentType}/reorder`, {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify({ items })
+  }),
+  /**
+   * Bulk update status — and it has to send `isActive`, not `status`.
+   *
+   * THIS WAS A SILENT NO-OP. The endpoint reads `body.isActive` (a boolean) and
+   * `BulkUpdateStatusUseCase` writes that one column; this client sent
+   * `{ ids, status: 'archived' }`, so `isActive` arrived undefined, Sequelize
+   * skipped the key, and `contentModel.update` wrote nothing. Both bulk
+   * Publish and bulk Archive selected rows, called the API, got a 200 with an
+   * `affected` count, reported success and changed nothing at all.
+   *
+   * It surfaced by trying to archive a product and finding it still in the Live
+   * list afterwards — which read as a UI race and was not one.
+   *
+   * The signature keeps a status word because that is what the call site means,
+   * but only two states are reachable: the column is a boolean, so `archived`
+   * and `draft` are the same write. Anything wanting a real third state needs a
+   * `status` column on content and a use case that sets it.
+   */
+  bulkUpdateStatus: (tenantSlug, contentType, ids, status) => apiFetch(`/content/${contentType}/bulk/status`, {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify({ ids, isActive: status === "published" })
+  }),
+  /**
+   * Bulk delete
+   */
+  bulkDelete: (tenantSlug, contentType, ids) => apiFetch(`/content/${contentType}/bulk/delete`, {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify({ ids })
+  }),
+  /**
+   * Assign content to a single customer (Customer Programs)
+   * Pass customerId: null to unassign.
+   */
+  assign: (tenantSlug, contentType, id, customerId) => apiFetch(`/content/${contentType}/${id}/assign`, {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify({ customerId })
+  }),
+  /**
+   * Bulk-assign content to all active subscribers of a plan or tier.
+   * Returns { created, skipped, failed }.
+   */
+  assignBulk: (tenantSlug, contentType, id, params) => apiFetch(
+    `/content/${contentType}/${id}/assign-bulk`,
+    {
+      method: "POST",
+      tenantSlug,
+      body: JSON.stringify(params)
+    }
+  ),
+  /**
+   * Create an event series from a parent event.
+   */
+  createSeries: (tenantSlug, contentType, id, recurrence, maxOccurrences) => apiFetch(`/content/${contentType}/${id}/series`, {
+    method: "POST",
+    tenantSlug,
+    body: JSON.stringify({ recurrence, maxOccurrences })
+  }),
+  /**
+   * List all occurrences in an event series.
+   */
+  listSeries: (tenantSlug, contentType, id, options) => apiFetch(
+    `/content/${contentType}/${id}/series${options?.upcoming ? "?upcoming=true" : ""}`,
+    { tenantSlug }
+  ),
+  /**
+   * Delete a single series occurrence.
+   */
+  deleteSeriesOccurrence: (tenantSlug, contentType, parentId, childId) => apiFetch(`/content/${contentType}/${parentId}/series/${childId}`, {
+    method: "DELETE",
+    tenantSlug
+  })
+};
+export {
+  contentApi
+};
+//# sourceMappingURL=content.js.map

package/dist/api/content.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/content.ts"],"sourcesContent":["import { stripNonMediaKeys } from '@withpotter/lib/media-utils';\nimport { apiFetch } from './core';\nimport type {\n  ContentItem,\n  ContentListResponse,\n  ContentItemResponse,\n  CreateContentInput,\n} from './types';\n\n/** Items per request in `listAll`. */\nconst CONTENT_PAGE_SIZE = 200;\n/** Stop after this many pages rather than walking an unbounded library. */\nconst CONTENT_PAGE_LIMIT = 5;\n\n/**\n * `list`'s query, named rather than derived.\n *\n * `listAll` originally typed this as `Parameters<typeof contentApi.list>[2]`,\n * which is a reference to the object being declared: TypeScript cannot resolve\n * that while inferring the literal, so it fell back to `{}` for `list`'s\n * RETURN type too — and every caller in the app suddenly had no `.data`. A\n * self-referential type inside an object literal fails silently at the\n * declaration and loudly everywhere else.\n */\nexport interface ContentListParams {\n  status?: string;\n  /** Server honours `active` (not `status`); false returns drafts. */\n  active?: boolean;\n  featured?: boolean;\n  behaviors?: string[];\n  page?: number;\n  limit?: number;\n  search?: string;\n}\n\nexport const contentApi = {\n  /**\n   * List all content of a specific type\n   */\n  list: (\n    tenantSlug: string,\n    contentType: string,\n    params?: ContentListParams,\n  ): Promise<ContentListResponse> => {\n    const searchParams = new URLSearchParams();\n    if (params?.status) searchParams.set('status', params.status);\n    if (params?.active !== undefined)\n      searchParams.set('active', String(params.active));\n    if (params?.featured !== undefined)\n      searchParams.set('featured', String(params.featured));\n    if (params?.behaviors?.length)\n      searchParams.set('behaviors', params.behaviors.join(','));\n    if (params?.page) searchParams.set('page', String(params.page));\n    if (params?.limit) searchParams.set('limit', String(params.limit));\n    if (params?.search) searchParams.set('search', params.search);\n    const query = searchParams.toString() ? `?${searchParams.toString()}` : '';\n    return apiFetch<ContentListResponse>(`/content/${contentType}${query}`, {\n      tenantSlug,\n    });\n  },\n\n  /**\n   * Every page of a content type, not the first.\n   *\n   * `list` with `limit: 200` is not \"all collections\"; it is the first two\n   * hundred, and a merchant past that had the rest silently disappear from a\n   * list that filters and paginates client-side. Reads `meta.pagination.total`\n   * to know when to stop, and stops regardless at CONTENT_PAGE_LIMIT pages.\n   */\n  listAll: async (\n    tenantSlug: string,\n    contentType: string,\n    params?: ContentListParams,\n  ): Promise<ContentItem[]> => {\n    const limit = params?.limit ?? CONTENT_PAGE_SIZE;\n    const first = await contentApi.list(tenantSlug, contentType, {\n      ...params,\n      limit,\n      page: 1,\n    });\n    const items = [...(first.data || [])];\n    const total = first.meta?.pagination?.total ?? items.length;\n    const pages = Math.min(\n      Math.max(1, Math.ceil(total / limit)),\n      CONTENT_PAGE_LIMIT,\n    );\n    if (pages > 1) {\n      const rest = await Promise.all(\n        Array.from({ length: pages - 1 }, (_, i) =>\n          contentApi.list(tenantSlug, contentType, {\n            ...params,\n            limit,\n            page: i + 2,\n          }),\n        ),\n      );\n      for (const result of rest) items.push(...(result.data || []));\n    }\n    return items;\n  },\n\n  /**\n   * Get a single content item by ID\n   */\n  get: (tenantSlug: string, contentType: string, id: string) =>\n    apiFetch<ContentItemResponse>(`/content/${contentType}/${id}`, {\n      tenantSlug,\n    }),\n\n  /**\n   * Get a single content item by slug\n   */\n  getBySlug: (tenantSlug: string, contentType: string, slug: string) =>\n    apiFetch<ContentItemResponse>(`/content/${contentType}/slug/${slug}`, {\n      tenantSlug,\n    }),\n\n  /**\n   * Create a new content item\n   */\n  create: (tenantSlug: string, contentType: string, data: CreateContentInput) =>\n    apiFetch<ContentItemResponse>(`/content/${contentType}`, {\n      method: 'POST',\n      tenantSlug,\n      // See `stripNonMediaKeys`: the API forbids non-whitelisted keys, so one\n      // stray `id` on a media object rejects the entire create.\n      body: JSON.stringify(stripNonMediaKeys(data)),\n    }),\n\n  /**\n   * Update an existing content item\n   */\n  update: (\n    tenantSlug: string,\n    contentType: string,\n    id: string,\n    data: Partial<CreateContentInput>,\n  ) =>\n    apiFetch<ContentItemResponse>(`/content/${contentType}/${id}`, {\n      method: 'PUT',\n      tenantSlug,\n      // Same trap as create: an edit round-trips the media it just read back,\n      // which is exactly where a client-side `id` gets reattached.\n      body: JSON.stringify(stripNonMediaKeys(data)),\n    }),\n\n  /**\n   * Delete a content item\n   */\n  delete: (tenantSlug: string, contentType: string, id: string) =>\n    apiFetch(`/content/${contentType}/${id}`, {\n      method: 'DELETE',\n      tenantSlug,\n    }),\n\n  /**\n   * Reorder content items\n   */\n  reorder: (\n    tenantSlug: string,\n    contentType: string,\n    items: { id: string; sortOrder: number }[],\n  ) =>\n    apiFetch(`/content/${contentType}/reorder`, {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify({ items }),\n    }),\n\n  /**\n   * Bulk update status — and it has to send `isActive`, not `status`.\n   *\n   * THIS WAS A SILENT NO-OP. The endpoint reads `body.isActive` (a boolean) and\n   * `BulkUpdateStatusUseCase` writes that one column; this client sent\n   * `{ ids, status: 'archived' }`, so `isActive` arrived undefined, Sequelize\n   * skipped the key, and `contentModel.update` wrote nothing. Both bulk\n   * Publish and bulk Archive selected rows, called the API, got a 200 with an\n   * `affected` count, reported success and changed nothing at all.\n   *\n   * It surfaced by trying to archive a product and finding it still in the Live\n   * list afterwards — which read as a UI race and was not one.\n   *\n   * The signature keeps a status word because that is what the call site means,\n   * but only two states are reachable: the column is a boolean, so `archived`\n   * and `draft` are the same write. Anything wanting a real third state needs a\n   * `status` column on content and a use case that sets it.\n   */\n  bulkUpdateStatus: (\n    tenantSlug: string,\n    contentType: string,\n    ids: string[],\n    status: 'draft' | 'published' | 'archived',\n  ) =>\n    apiFetch(`/content/${contentType}/bulk/status`, {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify({ ids, isActive: status === 'published' }),\n    }),\n\n  /**\n   * Bulk delete\n   */\n  bulkDelete: (tenantSlug: string, contentType: string, ids: string[]) =>\n    apiFetch(`/content/${contentType}/bulk/delete`, {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify({ ids }),\n    }),\n\n  /**\n   * Assign content to a single customer (Customer Programs)\n   * Pass customerId: null to unassign.\n   */\n  assign: (\n    tenantSlug: string,\n    contentType: string,\n    id: string,\n    customerId: string | null,\n  ) =>\n    apiFetch<ContentItemResponse>(`/content/${contentType}/${id}/assign`, {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify({ customerId }),\n    }),\n\n  /**\n   * Bulk-assign content to all active subscribers of a plan or tier.\n   * Returns { created, skipped, failed }.\n   */\n  assignBulk: (\n    tenantSlug: string,\n    contentType: string,\n    id: string,\n    params: { planId?: string; tierId?: string },\n  ) =>\n    apiFetch<{ data: { created: number; skipped: number; failed: number } }>(\n      `/content/${contentType}/${id}/assign-bulk`,\n      {\n        method: 'POST',\n        tenantSlug,\n        body: JSON.stringify(params),\n      },\n    ),\n\n  /**\n   * Create an event series from a parent event.\n   */\n  createSeries: (\n    tenantSlug: string,\n    contentType: string,\n    id: string,\n    recurrence: {\n      frequency: 'daily' | 'weekly' | 'biweekly' | 'monthly';\n      interval?: number;\n      occurrences?: number;\n      endDate?: string;\n    },\n    maxOccurrences?: number,\n  ) =>\n    apiFetch<{\n      data: {\n        parentId: string;\n        created: number;\n        occurrences: ContentItem[];\n        errors: { date: string; error: string }[];\n      };\n    }>(`/content/${contentType}/${id}/series`, {\n      method: 'POST',\n      tenantSlug,\n      body: JSON.stringify({ recurrence, maxOccurrences }),\n    }),\n\n  /**\n   * List all occurrences in an event series.\n   */\n  listSeries: (\n    tenantSlug: string,\n    contentType: string,\n    id: string,\n    options?: { upcoming?: boolean },\n  ) =>\n    apiFetch<{\n      data: {\n        parent: ContentItem;\n        recurrence: {\n          frequency: string;\n          interval?: number;\n          occurrences?: number;\n          endDate?: string;\n        } | null;\n        occurrences: ContentItem[];\n        totalOccurrences: number;\n      };\n    }>(\n      `/content/${contentType}/${id}/series${options?.upcoming ? '?upcoming=true' : ''}`,\n      { tenantSlug },\n    ),\n\n  /**\n   * Delete a single series occurrence.\n   */\n  deleteSeriesOccurrence: (\n    tenantSlug: string,\n    contentType: string,\n    parentId: string,\n    childId: string,\n  ) =>\n    apiFetch(`/content/${contentType}/${parentId}/series/${childId}`, {\n      method: 'DELETE',\n      tenantSlug,\n    }),\n};\n\n// ============================================\n// BOOKINGS API (special endpoint, not under /content)\n// ============================================\n"],"mappings":"AAAA,SAAS,yBAAyB;AAClC,SAAS,gBAAgB;AASzB,MAAM,oBAAoB;AAE1B,MAAM,qBAAqB;AAuBpB,MAAM,aAAa;AAAA;AAAA;AAAA;AAAA,EAIxB,MAAM,CACJ,YACA,aACA,WACiC;AACjC,UAAM,eAAe,IAAI,gBAAgB;AACzC,QAAI,QAAQ,OAAQ,cAAa,IAAI,UAAU,OAAO,MAAM;AAC5D,QAAI,QAAQ,WAAW;AACrB,mBAAa,IAAI,UAAU,OAAO,OAAO,MAAM,CAAC;AAClD,QAAI,QAAQ,aAAa;AACvB,mBAAa,IAAI,YAAY,OAAO,OAAO,QAAQ,CAAC;AACtD,QAAI,QAAQ,WAAW;AACrB,mBAAa,IAAI,aAAa,OAAO,UAAU,KAAK,GAAG,CAAC;AAC1D,QAAI,QAAQ,KAAM,cAAa,IAAI,QAAQ,OAAO,OAAO,IAAI,CAAC;AAC9D,QAAI,QAAQ,MAAO,cAAa,IAAI,SAAS,OAAO,OAAO,KAAK,CAAC;AACjE,QAAI,QAAQ,OAAQ,cAAa,IAAI,UAAU,OAAO,MAAM;AAC5D,UAAM,QAAQ,aAAa,SAAS,IAAI,IAAI,aAAa,SAAS,CAAC,KAAK;AACxE,WAAO,SAA8B,YAAY,WAAW,GAAG,KAAK,IAAI;AAAA,MACtE;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,SAAS,OACP,YACA,aACA,WAC2B;AAC3B,UAAM,QAAQ,QAAQ,SAAS;AAC/B,UAAM,QAAQ,MAAM,WAAW,KAAK,YAAY,aAAa;AAAA,MAC3D,GAAG;AAAA,MACH;AAAA,MACA,MAAM;AAAA,IACR,CAAC;AACD,UAAM,QAAQ,CAAC,GAAI,MAAM,QAAQ,CAAC,CAAE;AACpC,UAAM,QAAQ,MAAM,MAAM,YAAY,SAAS,MAAM;AACrD,UAAM,QAAQ,KAAK;AAAA,MACjB,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,KAAK,CAAC;AAAA,MACpC;AAAA,IACF;AACA,QAAI,QAAQ,GAAG;AACb,YAAM,OAAO,MAAM,QAAQ;AAAA,QACzB,MAAM;AAAA,UAAK,EAAE,QAAQ,QAAQ,EAAE;AAAA,UAAG,CAAC,GAAG,MACpC,WAAW,KAAK,YAAY,aAAa;AAAA,YACvC,GAAG;AAAA,YACH;AAAA,YACA,MAAM,IAAI;AAAA,UACZ,CAAC;AAAA,QACH;AAAA,MACF;AACA,iBAAW,UAAU,KAAM,OAAM,KAAK,GAAI,OAAO,QAAQ,CAAC,CAAE;AAAA,IAC9D;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,KAAK,CAAC,YAAoB,aAAqB,OAC7C,SAA8B,YAAY,WAAW,IAAI,EAAE,IAAI;AAAA,IAC7D;AAAA,EACF,CAAC;AAAA;AAAA;AAAA;AAAA,EAKH,WAAW,CAAC,YAAoB,aAAqB,SACnD,SAA8B,YAAY,WAAW,SAAS,IAAI,IAAI;AAAA,IACpE;AAAA,EACF,CAAC;AAAA;AAAA;AAAA;AAAA,EAKH,QAAQ,CAAC,YAAoB,aAAqB,SAChD,SAA8B,YAAY,WAAW,IAAI;AAAA,IACvD,QAAQ;AAAA,IACR;AAAA;AAAA;AAAA,IAGA,MAAM,KAAK,UAAU,kBAAkB,IAAI,CAAC;AAAA,EAC9C,CAAC;AAAA;AAAA;AAAA;AAAA,EAKH,QAAQ,CACN,YACA,aACA,IACA,SAEA,SAA8B,YAAY,WAAW,IAAI,EAAE,IAAI;AAAA,IAC7D,QAAQ;AAAA,IACR;AAAA;AAAA;AAAA,IAGA,MAAM,KAAK,UAAU,kBAAkB,IAAI,CAAC;AAAA,EAC9C,CAAC;AAAA;AAAA;AAAA;AAAA,EAKH,QAAQ,CAAC,YAAoB,aAAqB,OAChD,SAAS,YAAY,WAAW,IAAI,EAAE,IAAI;AAAA,IACxC,QAAQ;AAAA,IACR;AAAA,EACF,CAAC;AAAA;AAAA;AAAA;AAAA,EAKH,SAAS,CACP,YACA,aACA,UAEA,SAAS,YAAY,WAAW,YAAY;AAAA,IAC1C,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,EAChC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoBH,kBAAkB,CAChB,YACA,aACA,KACA,WAEA,SAAS,YAAY,WAAW,gBAAgB;AAAA,IAC9C,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,KAAK,UAAU,WAAW,YAAY,CAAC;AAAA,EAChE,CAAC;AAAA;AAAA;AAAA;AAAA,EAKH,YAAY,CAAC,YAAoB,aAAqB,QACpD,SAAS,YAAY,WAAW,gBAAgB;AAAA,IAC9C,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,IAAI,CAAC;AAAA,EAC9B,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMH,QAAQ,CACN,YACA,aACA,IACA,eAEA,SAA8B,YAAY,WAAW,IAAI,EAAE,WAAW;AAAA,IACpE,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,WAAW,CAAC;AAAA,EACrC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMH,YAAY,CACV,YACA,aACA,IACA,WAEA;AAAA,IACE,YAAY,WAAW,IAAI,EAAE;AAAA,IAC7B;AAAA,MACE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,MAAM;AAAA,IAC7B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKF,cAAc,CACZ,YACA,aACA,IACA,YAMA,mBAEA,SAOG,YAAY,WAAW,IAAI,EAAE,WAAW;AAAA,IACzC,QAAQ;AAAA,IACR;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,YAAY,eAAe,CAAC;AAAA,EACrD,CAAC;AAAA;AAAA;AAAA;AAAA,EAKH,YAAY,CACV,YACA,aACA,IACA,YAEA;AAAA,IAaE,YAAY,WAAW,IAAI,EAAE,UAAU,SAAS,WAAW,mBAAmB,EAAE;AAAA,IAChF,EAAE,WAAW;AAAA,EACf;AAAA;AAAA;AAAA;AAAA,EAKF,wBAAwB,CACtB,YACA,aACA,UACA,YAEA,SAAS,YAAY,WAAW,IAAI,QAAQ,WAAW,OAAO,IAAI;AAAA,IAChE,QAAQ;AAAA,IACR;AAAA,EACF,CAAC;AACL;","names":[]}

package/dist/api/conversations.d.ts

@@ -0,0 +1,79 @@
+/**
+ * WhatsApp conversations — the half of the Inbox that was typed in by hand.
+ *
+ * The Inbox has always said it holds "everything a customer said to you", and
+ * it held two things a customer wrote on OUR surfaces: an enquiry form and a
+ * review. The channel they actually use in this market was represented by a
+ * dropdown value on "Log enquiry", where a merchant re-typed a message they had
+ * already read on their phone.
+ */
+export type ConversationDirection = 'inbound' | 'outbound';
+export interface ConversationMessage {
+    id: string;
+    direction: ConversationDirection;
+    body: string;
+    mediaUrl: string | null;
+    mediaType: string | null;
+    readAt: string | null;
+    createdAt: string;
+}
+export interface ConversationThread {
+    /** Digits, country code resolved — the way the API stores a contact. */
+    contact: string;
+    memberId: string | null;
+    memberName: string | null;
+    lastMessageAt: string;
+    lastInboundAt: string | null;
+    lastBody: string;
+    lastDirection: ConversationDirection;
+    unread: number;
+    /**
+     * Whether WhatsApp will still accept a free-form reply.
+     *
+     * Computed by the API against the same clock its reachable-contacts count
+     * uses, rather than derived here from `lastInboundAt` — two answers to "is
+     * this open" drifting by a request's worth of time would show a merchant an
+     * open reply box on a conversation the send would then refuse.
+     */
+    windowOpen: boolean;
+}
+export declare const conversationsApi: {
+    /**
+     * Two numbers for the sidebar. Its own route rather than a count taken from
+     * `threads`, which reads every conversation a business has — the sidebar
+     * renders on every page.
+     */
+    unread: (tenantSlug: string) => Promise<{
+        threads: number;
+        messages: number;
+    }>;
+    threads: (tenantSlug: string) => Promise<{
+        threads: ConversationThread[];
+    }>;
+    thread: (tenantSlug: string, contact: string) => Promise<{
+        contact: string;
+        messages: ConversationMessage[];
+    }>;
+    markRead: (tenantSlug: string, contact: string) => Promise<{
+        marked: number;
+    }>;
+    reply: (tenantSlug: string, contact: string, body: string, mediaUrl?: string) => Promise<{
+        sent: boolean;
+        messageId: string | null;
+    }>;
+};
+/**
+ * Whether an attachment is something a browser can load.
+ *
+ * Neither provider hands over a public URL: Twilio's needs Twilio's
+ * credentials on every request and Meta gives an id that has to be exchanged
+ * for a short-lived signed link. The API re-hosts inbound media after storing
+ * the message, so anything still wearing a provider shape is one whose
+ * download has not landed — or failed, which is allowed. Pointing an `<img>`
+ * at either would draw a broken image where a customer's photo should be, and
+ * a broken image reads as a lost message.
+ *
+ * The same rule as `isHostedMedia` in potter-api, and it has to stay the same:
+ * the two decide the same question on either side of the wire.
+ */
+export declare function isRenderableMedia(url: string | null): url is string;

package/dist/api/conversations.js

@@ -0,0 +1,41 @@
+import { apiFetch } from "./core";
+const conversationsApi = {
+  /**
+   * Two numbers for the sidebar. Its own route rather than a count taken from
+   * `threads`, which reads every conversation a business has — the sidebar
+   * renders on every page.
+   */
+  unread: (tenantSlug) => apiFetch(
+    "/communications/whatsapp/unread",
+    { tenantSlug }
+  ),
+  threads: (tenantSlug) => apiFetch(
+    "/communications/whatsapp/threads",
+    { tenantSlug }
+  ),
+  thread: (tenantSlug, contact) => apiFetch(
+    `/communications/whatsapp/threads/${encodeURIComponent(contact)}`,
+    { tenantSlug }
+  ),
+  markRead: (tenantSlug, contact) => apiFetch(
+    `/communications/whatsapp/threads/${encodeURIComponent(contact)}/read`,
+    { method: "POST", tenantSlug }
+  ),
+  reply: (tenantSlug, contact, body, mediaUrl) => apiFetch(
+    `/communications/whatsapp/threads/${encodeURIComponent(contact)}/reply`,
+    {
+      method: "POST",
+      tenantSlug,
+      body: JSON.stringify({ body, mediaUrl })
+    }
+  )
+};
+function isRenderableMedia(url) {
+  if (!url) return false;
+  return !url.startsWith("meta:") && !url.includes("api.twilio.com");
+}
+export {
+  conversationsApi,
+  isRenderableMedia
+};
+//# sourceMappingURL=conversations.js.map

package/dist/api/conversations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/conversations.ts"],"sourcesContent":["import { apiFetch } from './core';\n\n/**\n * WhatsApp conversations — the half of the Inbox that was typed in by hand.\n *\n * The Inbox has always said it holds \"everything a customer said to you\", and\n * it held two things a customer wrote on OUR surfaces: an enquiry form and a\n * review. The channel they actually use in this market was represented by a\n * dropdown value on \"Log enquiry\", where a merchant re-typed a message they had\n * already read on their phone.\n */\n\nexport type ConversationDirection = 'inbound' | 'outbound';\n\nexport interface ConversationMessage {\n  id: string;\n  direction: ConversationDirection;\n  body: string;\n  mediaUrl: string | null;\n  mediaType: string | null;\n  readAt: string | null;\n  createdAt: string;\n}\n\nexport interface ConversationThread {\n  /** Digits, country code resolved — the way the API stores a contact. */\n  contact: string;\n  memberId: string | null;\n  memberName: string | null;\n  lastMessageAt: string;\n  lastInboundAt: string | null;\n  lastBody: string;\n  lastDirection: ConversationDirection;\n  unread: number;\n  /**\n   * Whether WhatsApp will still accept a free-form reply.\n   *\n   * Computed by the API against the same clock its reachable-contacts count\n   * uses, rather than derived here from `lastInboundAt` — two answers to \"is\n   * this open\" drifting by a request's worth of time would show a merchant an\n   * open reply box on a conversation the send would then refuse.\n   */\n  windowOpen: boolean;\n}\n\nexport const conversationsApi = {\n  /**\n   * Two numbers for the sidebar. Its own route rather than a count taken from\n   * `threads`, which reads every conversation a business has — the sidebar\n   * renders on every page.\n   */\n  unread: (tenantSlug: string) =>\n    apiFetch<{ threads: number; messages: number }>(\n      '/communications/whatsapp/unread',\n      { tenantSlug },\n    ),\n\n  threads: (tenantSlug: string) =>\n    apiFetch<{ threads: ConversationThread[] }>(\n      '/communications/whatsapp/threads',\n      { tenantSlug },\n    ),\n\n  thread: (tenantSlug: string, contact: string) =>\n    apiFetch<{ contact: string; messages: ConversationMessage[] }>(\n      `/communications/whatsapp/threads/${encodeURIComponent(contact)}`,\n      { tenantSlug },\n    ),\n\n  markRead: (tenantSlug: string, contact: string) =>\n    apiFetch<{ marked: number }>(\n      `/communications/whatsapp/threads/${encodeURIComponent(contact)}/read`,\n      { method: 'POST', tenantSlug },\n    ),\n\n  reply: (\n    tenantSlug: string,\n    contact: string,\n    body: string,\n    mediaUrl?: string,\n  ) =>\n    apiFetch<{ sent: boolean; messageId: string | null }>(\n      `/communications/whatsapp/threads/${encodeURIComponent(contact)}/reply`,\n      {\n        method: 'POST',\n        tenantSlug,\n        body: JSON.stringify({ body, mediaUrl }),\n      },\n    ),\n};\n\n/**\n * Whether an attachment is something a browser can load.\n *\n * Neither provider hands over a public URL: Twilio's needs Twilio's\n * credentials on every request and Meta gives an id that has to be exchanged\n * for a short-lived signed link. The API re-hosts inbound media after storing\n * the message, so anything still wearing a provider shape is one whose\n * download has not landed — or failed, which is allowed. Pointing an `<img>`\n * at either would draw a broken image where a customer's photo should be, and\n * a broken image reads as a lost message.\n *\n * The same rule as `isHostedMedia` in potter-api, and it has to stay the same:\n * the two decide the same question on either side of the wire.\n */\nexport function isRenderableMedia(url: string | null): url is string {\n  if (!url) return false;\n  return !url.startsWith('meta:') && !url.includes('api.twilio.com');\n}\n"],"mappings":"AAAA,SAAS,gBAAgB;AA6ClB,MAAM,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM9B,QAAQ,CAAC,eACP;AAAA,IACE;AAAA,IACA,EAAE,WAAW;AAAA,EACf;AAAA,EAEF,SAAS,CAAC,eACR;AAAA,IACE;AAAA,IACA,EAAE,WAAW;AAAA,EACf;AAAA,EAEF,QAAQ,CAAC,YAAoB,YAC3B;AAAA,IACE,oCAAoC,mBAAmB,OAAO,CAAC;AAAA,IAC/D,EAAE,WAAW;AAAA,EACf;AAAA,EAEF,UAAU,CAAC,YAAoB,YAC7B;AAAA,IACE,oCAAoC,mBAAmB,OAAO,CAAC;AAAA,IAC/D,EAAE,QAAQ,QAAQ,WAAW;AAAA,EAC/B;AAAA,EAEF,OAAO,CACL,YACA,SACA,MACA,aAEA;AAAA,IACE,oCAAoC,mBAAmB,OAAO,CAAC;AAAA,IAC/D;AAAA,MACE,QAAQ;AAAA,MACR;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAAA,IACzC;AAAA,EACF;AACJ;AAgBO,SAAS,kBAAkB,KAAmC;AACnE,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,CAAC,IAAI,WAAW,OAAO,KAAK,CAAC,IAAI,SAAS,gBAAgB;AACnE;","names":[]}

package/dist/api/core.d.ts

@@ -0,0 +1,62 @@
+/**
+ * The shared plumbing every API module needs: auth token, CSRF, the bounce
+ * guard, and apiFetch itself.
+ *
+ * Split out of the old 7,657-line src/lib/api.ts. That file was imported by
+ * 405 files, so touching any endpoint invalidated all of them, and a route
+ * that wanted one call pulled the whole surface.
+ */
+export declare const IS_BROWSER: boolean;
+import type { FetchOptions } from './types';
+export declare const getApiUrl: () => string;
+export declare function getAccountId(): string | null;
+export declare function getCsrfToken(): string | null;
+/**
+ * Thrown when the API rejects the session (401). Typed so a caller can tell an
+ * expired session apart from a genuine empty result — the distinction the whole
+ * dashboard was previously unable to make.
+ */
+export declare class SessionExpiredError extends Error {
+    constructor();
+}
+export declare class ApiRequestError extends Error {
+    readonly status: number;
+    readonly details?: unknown | undefined;
+    constructor(message: string, status: number, details?: unknown | undefined);
+}
+export { AUTH_ROUTES, isSessionExpiryResponse } from './session-scope';
+/**
+ * Where we last sent someone to log in, and when. Bouncing to login is a full
+ * page load, so the in-memory guard above resets every time — it cannot see a
+ * loop. This can.
+ */
+/**
+ * Where we last sent someone to log in, and when. Bouncing to login is a full
+ * page load, so the in-memory guard above resets every time — it cannot see a
+ * loop. This can.
+ */
+export declare const BOUNCE_KEY = "pb_session_bounce";
+/** Two bounces off the same path inside this window is a loop, not a login. */
+/** Two bounces off the same path inside this window is a loop, not a login. */
+export declare const BOUNCE_WINDOW_MS = 15000;
+/**
+ * True when we already bounced this path to login and are right back on it.
+ *
+ * That combination means the session is fine — login only returns you here if
+ * it recognises you — and some single endpoint is answering 401 for its own
+ * reasons (a missing tenant header, say). Bouncing again just repeats the
+ * round trip forever, which the merchant sees as a page that reloads and
+ * reloads. Better to let that one panel fail and leave the page standing.
+ */
+/**
+ * True when we already bounced this path to login and are right back on it.
+ *
+ * That combination means the session is fine — login only returns you here if
+ * it recognises you — and some single endpoint is answering 401 for its own
+ * reasons (a missing tenant header, say). Bouncing again just repeats the
+ * round trip forever, which the merchant sees as a page that reloads and
+ * reloads. Better to let that one panel fail and leave the page standing.
+ */
+export declare function bouncedRecently(path: string): boolean;
+export declare function recordBounce(path: string): void;
+export declare function apiFetch<T = unknown>(endpoint: string, options?: FetchOptions): Promise<T>;