@withpotter/lib 0.13.0-next.101

package/dist/business-intents.js

@@ -0,0 +1,142 @@
+import {
+  Store,
+  CalendarClock,
+  House,
+  CookingPot,
+  ChefHat,
+  BadgeCheck,
+  FileDown,
+  TicketCheck,
+  FileSignature,
+  MailPlus,
+  Package
+} from "lucide-react";
+import { getAllIntentConfigs } from "./intents";
+import { resolveBehaviorsFromIntents } from "./resolve-enabled-behaviors";
+const PRESENTATION = {
+  "sell-products": {
+    label: "Retail",
+    setupLabel: "Products & retail",
+    setupDescription: "Online shops, boutiques, makers",
+    shortLabel: "Retail",
+    verbPhrase: "sells products",
+    description: "Physical goods, fashion, retail items",
+    icon: Store,
+    color: "#F59E0B"
+  },
+  "take-bookings": {
+    label: "Services",
+    setupLabel: "Services & appointments",
+    setupDescription: "Medical, wellness, consultants",
+    shortLabel: "Services",
+    verbPhrase: "takes bookings",
+    description: "Services, consultations, sessions",
+    icon: CalendarClock,
+    color: "#E91E8C"
+  },
+  "rent-property": {
+    label: "Property & rentals",
+    setupLabel: "Property & rentals",
+    setupDescription: "Short-lets, venues, vacation homes",
+    shortLabel: "Property & rentals",
+    verbPhrase: "rents out property",
+    description: "Short-lets, vacation rentals, venues",
+    icon: House,
+    color: "#8B5CF6"
+  },
+  "food-orders": {
+    label: "Food & delivery",
+    setupLabel: "Food & delivery",
+    setupDescription: "Restaurants, cafes, food businesses",
+    shortLabel: "Food & delivery",
+    verbPhrase: "takes food orders",
+    description: "Restaurants, cafes, food delivery",
+    icon: CookingPot,
+    color: "#FF6B35"
+  },
+  "dine-in": {
+    label: "Restaurant",
+    setupLabel: "Restaurant & hospitality",
+    setupDescription: "Dine-in, tables, running tabs",
+    shortLabel: "Restaurant",
+    verbPhrase: "runs a dine-in service",
+    description: "Tables, running tabs, settle the bill",
+    icon: ChefHat,
+    color: "#0E8F80"
+  },
+  subscriptions: {
+    label: "Memberships",
+    setupLabel: "Memberships & community",
+    setupDescription: "Clubs, communities, recurring plans",
+    shortLabel: "Memberships",
+    verbPhrase: "offers memberships",
+    description: "Recurring plans, membership access",
+    icon: BadgeCheck,
+    color: "#10B981"
+  },
+  "digital-products": {
+    label: "Digital products",
+    setupLabel: "Creators & digital products",
+    setupDescription: "Streamers, educators, downloads",
+    shortLabel: "Digital products",
+    verbPhrase: "sells digital products",
+    description: "Downloads, files, digital content",
+    icon: FileDown,
+    color: "#3B82F6"
+  },
+  "event-tickets": {
+    label: "Events",
+    setupLabel: "Events & experiences",
+    setupDescription: "Shows, conferences, workshops",
+    shortLabel: "Events",
+    verbPhrase: "sells event tickets",
+    description: "Events, shows, conferences",
+    icon: TicketCheck,
+    color: "#6366F1"
+  },
+  "send-invoices": {
+    label: "Invoicing",
+    setupLabel: "Invoicing & professional services",
+    setupDescription: "Agencies, freelancers, contractors",
+    shortLabel: "Invoicing",
+    verbPhrase: "bills clients",
+    description: "Services, freelance, agencies",
+    icon: FileSignature,
+    color: "#0EA5E9"
+  },
+  // Registered in the intent registry but missing here, so it fell through to
+  // the grey Package fallback: the one archetype where nothing is bought showed
+  // up unstyled and unnamed next to nine that were.
+  "capture-leads": {
+    label: "Enquiries",
+    setupLabel: "Enquiries & leads",
+    setupDescription: "Quotes, applications, consultations",
+    shortLabel: "Enquiries",
+    verbPhrase: "takes enquiries",
+    description: "Viewings, quotes, admissions, consultations",
+    icon: MailPlus,
+    color: "#D97706"
+  }
+};
+const DEFAULT_COLOR = "#6B7280";
+const INTENT_CARDS = getAllIntentConfigs().map(
+  (config) => {
+    const presentation = PRESENTATION[config.key];
+    return {
+      id: config.key,
+      label: presentation?.label ?? config.label,
+      setupLabel: presentation?.setupLabel,
+      setupDescription: presentation?.setupDescription,
+      shortLabel: presentation?.shortLabel ?? config.label,
+      verbPhrase: presentation?.verbPhrase ?? config.label.toLowerCase(),
+      description: presentation?.description ?? config.description,
+      icon: presentation?.icon ?? Package,
+      color: presentation?.color ?? DEFAULT_COLOR,
+      behaviors: resolveBehaviorsFromIntents([config.key])
+    };
+  }
+);
+export {
+  INTENT_CARDS
+};
+//# sourceMappingURL=business-intents.js.map

package/dist/business-intents.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/business-intents.ts"],"sourcesContent":["import {\n  Store,\n  CalendarClock,\n  House,\n  CookingPot,\n  ChefHat,\n  BadgeCheck,\n  FileDown,\n  TicketCheck,\n  FileSignature,\n  MailPlus,\n  Package,\n} from 'lucide-react';\nimport { getAllIntentConfigs } from './intents';\nimport { resolveBehaviorsFromIntents } from './resolve-enabled-behaviors';\n\n/**\n * The money-models a merchant picks from — shared by every surface that asks\n * \"how do you make money?\" (signup, onboarding / add-business, the quick\n * create-business modal, and the mobile screens).\n *\n * MEMBERSHIP COMES FROM THE INTENT REGISTRY, not a hand-kept array. Two lists\n * of the same nine things drift: register an archetype and it would appear in\n * Settings → Features but silently not at signup, so nobody could ever choose\n * it. Behaviors are read from the same resolver the dashboard and storefront\n * use, so a card can't promise a capability the app won't switch on.\n *\n * What IS hand-written here is voice. The registry labels are navigation nouns\n * (\"Take Bookings\"); onboarding asks a question and wants a sentence (\"Take\n * bookings or appointments\"). Presentation below, truth above.\n */\nexport interface IntentCard {\n  id: string;\n  label: string;\n  /** Setup-specific profile wording; the underlying intent remains capability-based. */\n  setupLabel?: string;\n  setupDescription?: string;\n  /** A bare noun for prose and lists, where the onboarding sentence stutters. */\n  shortLabel: string;\n  /** Third-person verb phrase, for stating the business back in a sentence. */\n  verbPhrase: string;\n  description: string;\n  icon: React.ElementType;\n  color: string;\n  behaviors: string[];\n}\n\ninterface IntentPresentation {\n  label: string;\n  setupLabel?: string;\n  setupDescription?: string;\n  shortLabel: string;\n  verbPhrase: string;\n  description: string;\n  icon: React.ElementType;\n  color: string;\n}\n\nconst PRESENTATION: Record<string, IntentPresentation> = {\n  'sell-products': {\n    label: 'Retail',\n    setupLabel: 'Products & retail',\n    setupDescription: 'Online shops, boutiques, makers',\n    shortLabel: 'Retail',\n    verbPhrase: 'sells products',\n    description: 'Physical goods, fashion, retail items',\n    icon: Store,\n    color: '#F59E0B',\n  },\n  'take-bookings': {\n    label: 'Services',\n    setupLabel: 'Services & appointments',\n    setupDescription: 'Medical, wellness, consultants',\n    shortLabel: 'Services',\n    verbPhrase: 'takes bookings',\n    description: 'Services, consultations, sessions',\n    icon: CalendarClock,\n    color: '#E91E8C',\n  },\n  'rent-property': {\n    label: 'Property & rentals',\n    setupLabel: 'Property & rentals',\n    setupDescription: 'Short-lets, venues, vacation homes',\n    shortLabel: 'Property & rentals',\n    verbPhrase: 'rents out property',\n    description: 'Short-lets, vacation rentals, venues',\n    icon: House,\n    color: '#8B5CF6',\n  },\n  'food-orders': {\n    label: 'Food & delivery',\n    setupLabel: 'Food & delivery',\n    setupDescription: 'Restaurants, cafes, food businesses',\n    shortLabel: 'Food & delivery',\n    verbPhrase: 'takes food orders',\n    description: 'Restaurants, cafes, food delivery',\n    icon: CookingPot,\n    color: '#FF6B35',\n  },\n  'dine-in': {\n    label: 'Restaurant',\n    setupLabel: 'Restaurant & hospitality',\n    setupDescription: 'Dine-in, tables, running tabs',\n    shortLabel: 'Restaurant',\n    verbPhrase: 'runs a dine-in service',\n    description: 'Tables, running tabs, settle the bill',\n    icon: ChefHat,\n    color: '#0E8F80',\n  },\n  subscriptions: {\n    label: 'Memberships',\n    setupLabel: 'Memberships & community',\n    setupDescription: 'Clubs, communities, recurring plans',\n    shortLabel: 'Memberships',\n    verbPhrase: 'offers memberships',\n    description: 'Recurring plans, membership access',\n    icon: BadgeCheck,\n    color: '#10B981',\n  },\n  'digital-products': {\n    label: 'Digital products',\n    setupLabel: 'Creators & digital products',\n    setupDescription: 'Streamers, educators, downloads',\n    shortLabel: 'Digital products',\n    verbPhrase: 'sells digital products',\n    description: 'Downloads, files, digital content',\n    icon: FileDown,\n    color: '#3B82F6',\n  },\n  'event-tickets': {\n    label: 'Events',\n    setupLabel: 'Events & experiences',\n    setupDescription: 'Shows, conferences, workshops',\n    shortLabel: 'Events',\n    verbPhrase: 'sells event tickets',\n    description: 'Events, shows, conferences',\n    icon: TicketCheck,\n    color: '#6366F1',\n  },\n  'send-invoices': {\n    label: 'Invoicing',\n    setupLabel: 'Invoicing & professional services',\n    setupDescription: 'Agencies, freelancers, contractors',\n    shortLabel: 'Invoicing',\n    verbPhrase: 'bills clients',\n    description: 'Services, freelance, agencies',\n    icon: FileSignature,\n    color: '#0EA5E9',\n  },\n  // Registered in the intent registry but missing here, so it fell through to\n  // the grey Package fallback: the one archetype where nothing is bought showed\n  // up unstyled and unnamed next to nine that were.\n  'capture-leads': {\n    label: 'Enquiries',\n    setupLabel: 'Enquiries & leads',\n    setupDescription: 'Quotes, applications, consultations',\n    shortLabel: 'Enquiries',\n    verbPhrase: 'takes enquiries',\n    description: 'Viewings, quotes, admissions, consultations',\n    icon: MailPlus,\n    color: '#D97706',\n  },\n};\n\n/** Neutral fallback so a newly registered archetype still shows up, unstyled\n *  rather than missing, until someone writes its onboarding sentence. */\nconst DEFAULT_COLOR = '#6B7280';\n\nexport const INTENT_CARDS: IntentCard[] = getAllIntentConfigs().map(\n  (config) => {\n    const presentation = PRESENTATION[config.key];\n    return {\n      id: config.key,\n      label: presentation?.label ?? config.label,\n      setupLabel: presentation?.setupLabel,\n      setupDescription: presentation?.setupDescription,\n      shortLabel: presentation?.shortLabel ?? config.label,\n      verbPhrase: presentation?.verbPhrase ?? config.label.toLowerCase(),\n      description: presentation?.description ?? config.description,\n      icon: presentation?.icon ?? Package,\n      color: presentation?.color ?? DEFAULT_COLOR,\n      behaviors: resolveBehaviorsFromIntents([config.key]),\n    };\n  },\n);\n"],"mappings":"AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,2BAA2B;AACpC,SAAS,mCAAmC;AA4C5C,MAAM,eAAmD;AAAA,EACvD,iBAAiB;AAAA,IACf,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,iBAAiB;AAAA,IACf,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,iBAAiB;AAAA,IACf,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,eAAe;AAAA,IACb,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,WAAW;AAAA,IACT,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,eAAe;AAAA,IACb,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,oBAAoB;AAAA,IAClB,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,iBAAiB;AAAA,IACf,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,iBAAiB;AAAA,IACf,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAIA,iBAAiB;AAAA,IACf,OAAO;AAAA,IACP,YAAY;AAAA,IACZ,kBAAkB;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AACF;AAIA,MAAM,gBAAgB;AAEf,MAAM,eAA6B,oBAAoB,EAAE;AAAA,EAC9D,CAAC,WAAW;AACV,UAAM,eAAe,aAAa,OAAO,GAAG;AAC5C,WAAO;AAAA,MACL,IAAI,OAAO;AAAA,MACX,OAAO,cAAc,SAAS,OAAO;AAAA,MACrC,YAAY,cAAc;AAAA,MAC1B,kBAAkB,cAAc;AAAA,MAChC,YAAY,cAAc,cAAc,OAAO;AAAA,MAC/C,YAAY,cAAc,cAAc,OAAO,MAAM,YAAY;AAAA,MACjE,aAAa,cAAc,eAAe,OAAO;AAAA,MACjD,MAAM,cAAc,QAAQ;AAAA,MAC5B,OAAO,cAAc,SAAS;AAAA,MAC9B,WAAW,4BAA4B,CAAC,OAAO,GAAG,CAAC;AAAA,IACrD;AAAA,EACF;AACF;","names":[]}

package/dist/capability-context.d.ts

@@ -0,0 +1,63 @@
+import { type ReactNode } from 'react';
+/**
+ * Parse a raw capability string into a set. Returns `null` when the input is
+ * `null`/`undefined` (capabilities unknown → callers should treat as permissive);
+ * an explicit empty string yields an empty set (known, but nothing entitled).
+ */
+export declare function parseCapabilities(raw?: string | null): Set<string> | null;
+export interface CapabilitySet {
+    /**
+     * Whether the box published a capability list. `false` means the box has not
+     * been re-activated with a capability-aware box-cli, so `has()` is permissive.
+     */
+    known: boolean;
+    /** Resolved capability keys (sorted). Empty when `known` is `false`. */
+    keys: string[];
+    /**
+     * Whether a capability key is entitled. Permissive (`true`) when the set is
+     * unknown, so un-migrated boxes keep their full nav/data surface.
+     */
+    has(key: string): boolean;
+    /** Whether **every** given key is entitled (permissive when unknown). */
+    hasAll(keys: string[]): boolean;
+    /** Whether **any** given key is entitled (permissive when unknown). */
+    hasAny(keys: string[]): boolean;
+}
+/**
+ * Provide an explicit capability set. Optional — `useCapabilities()` falls back
+ * to the `NEXT_PUBLIC_BOX_CAPABILITIES` env value when no provider is mounted, so
+ * nav/data/route gating works without any app-shell wiring. Pass `value` to
+ * override (e.g. in tests or a server-driven set); pass `null` to force the
+ * permissive "unknown" state.
+ */
+export declare function CapabilityProvider({ value, children, }: {
+    value?: string | string[] | null;
+    children: ReactNode;
+}): import("react").JSX.Element;
+/**
+ * Read the box's capability set. Uses the nearest `CapabilityProvider` when one
+ * is mounted, otherwise the build-time env value. Always returns a usable set —
+ * never throws — so callers can gate unconditionally.
+ */
+export declare function useCapabilities(): CapabilitySet;
+/**
+ * Dashboard route prefix → capability key(s) required to view it. Longest prefix
+ * wins. Routes not listed (overview, settings, account, workspaces) have no
+ * capability gate. Keep aligned with the nav `moduleCapabilities` map in
+ * `use-platform-modules`.
+ */
+export declare const ROUTE_CAPABILITIES: Array<{
+    prefix: string;
+    capability: string | string[];
+}>;
+/**
+ * Resolve the capability key(s) a dashboard route requires, or `null` when the
+ * route is ungated (core). Matches by longest prefix so nested routes inherit
+ * their section's gate.
+ */
+export declare function routeCapability(pathname: string): string | string[] | null;
+/**
+ * Whether the box is entitled to view a given dashboard route. Permissive for
+ * ungated routes and for boxes with an unknown capability set.
+ */
+export declare function useRouteAllowed(pathname: string): boolean;

package/dist/capability-context.js

@@ -0,0 +1,84 @@
+"use client";
+import { jsx } from "react/jsx-runtime";
+import {
+  createContext,
+  useContext,
+  useMemo
+} from "react";
+const RAW_ENV = process.env.NEXT_PUBLIC_BOX_CAPABILITIES;
+function parseCapabilities(raw) {
+  if (raw == null) return null;
+  const keys = raw.split(",").map((s) => s.trim()).filter(Boolean);
+  return new Set(keys);
+}
+function buildCapabilitySet(caps) {
+  const has = (key) => caps === null ? true : caps.has(key);
+  return {
+    known: caps !== null,
+    keys: caps === null ? [] : [...caps].sort(),
+    has,
+    hasAll: (keys) => keys.every(has),
+    hasAny: (keys) => caps === null ? true : keys.some((k) => caps.has(k))
+  };
+}
+const ENV_CAPABILITIES = buildCapabilitySet(parseCapabilities(RAW_ENV));
+const CapabilityContext = createContext(null);
+function CapabilityProvider({
+  value,
+  children
+}) {
+  const set = useMemo(() => {
+    if (value === void 0) return ENV_CAPABILITIES;
+    const raw = Array.isArray(value) ? value.join(",") : value;
+    return buildCapabilitySet(parseCapabilities(raw));
+  }, [value]);
+  return /* @__PURE__ */ jsx(CapabilityContext.Provider, { value: set, children });
+}
+function useCapabilities() {
+  return useContext(CapabilityContext) ?? ENV_CAPABILITIES;
+}
+const ROUTE_CAPABILITIES = [
+  { prefix: "/dashboard/analytics", capability: "analytics" },
+  { prefix: "/dashboard/bookings", capability: "bookings" },
+  { prefix: "/dashboard/resources", capability: "bookings" },
+  { prefix: "/dashboard/invoices", capability: "invoices" },
+  { prefix: "/dashboard/subscriptions", capability: "subscriptions" },
+  { prefix: "/dashboard/reviews", capability: "reviews" },
+  { prefix: "/dashboard/loyalty", capability: "loyalty" },
+  { prefix: "/dashboard/customers", capability: "customers" },
+  { prefix: "/dashboard/orders", capability: "orders" },
+  { prefix: "/dashboard/catalog", capability: "catalog" },
+  { prefix: "/dashboard/collections", capability: "catalog" },
+  { prefix: "/dashboard/discounts", capability: "discounts" },
+  { prefix: "/dashboard/giftcards", capability: "giftcards" },
+  { prefix: "/dashboard/blog", capability: "blog" },
+  {
+    prefix: "/dashboard/finance",
+    capability: ["settlements", "payments", "invoices"]
+  }
+];
+function routeCapability(pathname) {
+  let match = null;
+  for (const entry of ROUTE_CAPABILITIES) {
+    if (pathname === entry.prefix || pathname.startsWith(`${entry.prefix}/`)) {
+      if (!match || entry.prefix.length > match.prefix.length) match = entry;
+    }
+  }
+  return match ? match.capability : null;
+}
+function useRouteAllowed(pathname) {
+  const capabilities = useCapabilities();
+  const required = routeCapability(pathname);
+  if (!required) return true;
+  const gates = Array.isArray(required) ? required : [required];
+  return capabilities.hasAny(gates);
+}
+export {
+  CapabilityProvider,
+  ROUTE_CAPABILITIES,
+  parseCapabilities,
+  routeCapability,
+  useCapabilities,
+  useRouteAllowed
+};
+//# sourceMappingURL=capability-context.js.map

package/dist/capability-context.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/capability-context.tsx"],"sourcesContent":["'use client';\n\nimport {\n  createContext,\n  useContext,\n  useMemo,\n  type ReactNode,\n} from 'react';\n\n/**\n * Capability gating for the dashboard.\n *\n * A **capability** is a stable, UI-facing key (e.g. `bookings`, `analytics`,\n * `subscriptions`) that says whether the box is entitled to a given surface.\n * `box activate` resolves the set from the license's entitled engine packages\n * and writes it to the console build as `NEXT_PUBLIC_BOX_CAPABILITIES`\n * (comma-separated). This module is the console-side *consumer* of that list —\n * it never owns the key→engine map (that lives in box-cli, the single emitter).\n *\n * Backward-compatibility contract: a box that was activated by an older box-cli\n * has **no** `NEXT_PUBLIC_BOX_CAPABILITIES` value. In that case the set is\n * \"unknown\" and `has()` is **permissive** (returns `true` for every key) so the\n * dashboard behaves exactly as it did before capability gating existed. Gating\n * only takes effect once a box re-activates with a capability-aware box-cli.\n */\n\n/** Raw build-time env value. `NEXT_PUBLIC_*` is inlined by Next at build. */\nconst RAW_ENV: string | undefined = process.env.NEXT_PUBLIC_BOX_CAPABILITIES;\n\n/**\n * Parse a raw capability string into a set. Returns `null` when the input is\n * `null`/`undefined` (capabilities unknown → callers should treat as permissive);\n * an explicit empty string yields an empty set (known, but nothing entitled).\n */\nexport function parseCapabilities(raw?: string | null): Set<string> | null {\n  if (raw == null) return null;\n  const keys = raw\n    .split(',')\n    .map((s) => s.trim())\n    .filter(Boolean);\n  return new Set(keys);\n}\n\nexport interface CapabilitySet {\n  /**\n   * Whether the box published a capability list. `false` means the box has not\n   * been re-activated with a capability-aware box-cli, so `has()` is permissive.\n   */\n  known: boolean;\n  /** Resolved capability keys (sorted). Empty when `known` is `false`. */\n  keys: string[];\n  /**\n   * Whether a capability key is entitled. Permissive (`true`) when the set is\n   * unknown, so un-migrated boxes keep their full nav/data surface.\n   */\n  has(key: string): boolean;\n  /** Whether **every** given key is entitled (permissive when unknown). */\n  hasAll(keys: string[]): boolean;\n  /** Whether **any** given key is entitled (permissive when unknown). */\n  hasAny(keys: string[]): boolean;\n}\n\nfunction buildCapabilitySet(caps: Set<string> | null): CapabilitySet {\n  const has = (key: string) => (caps === null ? true : caps.has(key));\n  return {\n    known: caps !== null,\n    keys: caps === null ? [] : [...caps].sort(),\n    has,\n    hasAll: (keys) => keys.every(has),\n    hasAny: (keys) => (caps === null ? true : keys.some((k) => caps.has(k))),\n  };\n}\n\n/** Capability set derived from the build-time env — the provider-less default. */\nconst ENV_CAPABILITIES = buildCapabilitySet(parseCapabilities(RAW_ENV));\n\nconst CapabilityContext = createContext<CapabilitySet | null>(null);\n\n/**\n * Provide an explicit capability set. Optional — `useCapabilities()` falls back\n * to the `NEXT_PUBLIC_BOX_CAPABILITIES` env value when no provider is mounted, so\n * nav/data/route gating works without any app-shell wiring. Pass `value` to\n * override (e.g. in tests or a server-driven set); pass `null` to force the\n * permissive \"unknown\" state.\n */\nexport function CapabilityProvider({\n  value,\n  children,\n}: {\n  value?: string | string[] | null;\n  children: ReactNode;\n}) {\n  const set = useMemo(() => {\n    if (value === undefined) return ENV_CAPABILITIES;\n    const raw = Array.isArray(value) ? value.join(',') : value;\n    return buildCapabilitySet(parseCapabilities(raw));\n  }, [value]);\n  return (\n    <CapabilityContext.Provider value={set}>\n      {children}\n    </CapabilityContext.Provider>\n  );\n}\n\n/**\n * Read the box's capability set. Uses the nearest `CapabilityProvider` when one\n * is mounted, otherwise the build-time env value. Always returns a usable set —\n * never throws — so callers can gate unconditionally.\n */\nexport function useCapabilities(): CapabilitySet {\n  return useContext(CapabilityContext) ?? ENV_CAPABILITIES;\n}\n\n/**\n * Dashboard route prefix → capability key(s) required to view it. Longest prefix\n * wins. Routes not listed (overview, settings, account, workspaces) have no\n * capability gate. Keep aligned with the nav `moduleCapabilities` map in\n * `use-platform-modules`.\n */\nexport const ROUTE_CAPABILITIES: Array<{\n  prefix: string;\n  capability: string | string[];\n}> = [\n  { prefix: '/dashboard/analytics', capability: 'analytics' },\n  { prefix: '/dashboard/bookings', capability: 'bookings' },\n  { prefix: '/dashboard/resources', capability: 'bookings' },\n  { prefix: '/dashboard/invoices', capability: 'invoices' },\n  { prefix: '/dashboard/subscriptions', capability: 'subscriptions' },\n  { prefix: '/dashboard/reviews', capability: 'reviews' },\n  { prefix: '/dashboard/loyalty', capability: 'loyalty' },\n  { prefix: '/dashboard/customers', capability: 'customers' },\n  { prefix: '/dashboard/orders', capability: 'orders' },\n  { prefix: '/dashboard/catalog', capability: 'catalog' },\n  { prefix: '/dashboard/collections', capability: 'catalog' },\n  { prefix: '/dashboard/discounts', capability: 'discounts' },\n  { prefix: '/dashboard/giftcards', capability: 'giftcards' },\n  { prefix: '/dashboard/blog', capability: 'blog' },\n  {\n    prefix: '/dashboard/finance',\n    capability: ['settlements', 'payments', 'invoices'],\n  },\n];\n\n/**\n * Resolve the capability key(s) a dashboard route requires, or `null` when the\n * route is ungated (core). Matches by longest prefix so nested routes inherit\n * their section's gate.\n */\nexport function routeCapability(pathname: string): string | string[] | null {\n  let match: { prefix: string; capability: string | string[] } | null = null;\n  for (const entry of ROUTE_CAPABILITIES) {\n    if (pathname === entry.prefix || pathname.startsWith(`${entry.prefix}/`)) {\n      if (!match || entry.prefix.length > match.prefix.length) match = entry;\n    }\n  }\n  return match ? match.capability : null;\n}\n\n/**\n * Whether the box is entitled to view a given dashboard route. Permissive for\n * ungated routes and for boxes with an unknown capability set.\n */\nexport function useRouteAllowed(pathname: string): boolean {\n  const capabilities = useCapabilities();\n  const required = routeCapability(pathname);\n  if (!required) return true;\n  const gates = Array.isArray(required) ? required : [required];\n  return capabilities.hasAny(gates);\n}\n"],"mappings":";AAkGI;AAhGJ;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAoBP,MAAM,UAA8B,QAAQ,IAAI;AAOzC,SAAS,kBAAkB,KAAyC;AACzE,MAAI,OAAO,KAAM,QAAO;AACxB,QAAM,OAAO,IACV,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,SAAO,IAAI,IAAI,IAAI;AACrB;AAqBA,SAAS,mBAAmB,MAAyC;AACnE,QAAM,MAAM,CAAC,QAAiB,SAAS,OAAO,OAAO,KAAK,IAAI,GAAG;AACjE,SAAO;AAAA,IACL,OAAO,SAAS;AAAA,IAChB,MAAM,SAAS,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,KAAK;AAAA,IAC1C;AAAA,IACA,QAAQ,CAAC,SAAS,KAAK,MAAM,GAAG;AAAA,IAChC,QAAQ,CAAC,SAAU,SAAS,OAAO,OAAO,KAAK,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;AAAA,EACxE;AACF;AAGA,MAAM,mBAAmB,mBAAmB,kBAAkB,OAAO,CAAC;AAEtE,MAAM,oBAAoB,cAAoC,IAAI;AAS3D,SAAS,mBAAmB;AAAA,EACjC;AAAA,EACA;AACF,GAGG;AACD,QAAM,MAAM,QAAQ,MAAM;AACxB,QAAI,UAAU,OAAW,QAAO;AAChC,UAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,GAAG,IAAI;AACrD,WAAO,mBAAmB,kBAAkB,GAAG,CAAC;AAAA,EAClD,GAAG,CAAC,KAAK,CAAC;AACV,SACE,oBAAC,kBAAkB,UAAlB,EAA2B,OAAO,KAChC,UACH;AAEJ;AAOO,SAAS,kBAAiC;AAC/C,SAAO,WAAW,iBAAiB,KAAK;AAC1C;AAQO,MAAM,qBAGR;AAAA,EACH,EAAE,QAAQ,wBAAwB,YAAY,YAAY;AAAA,EAC1D,EAAE,QAAQ,uBAAuB,YAAY,WAAW;AAAA,EACxD,EAAE,QAAQ,wBAAwB,YAAY,WAAW;AAAA,EACzD,EAAE,QAAQ,uBAAuB,YAAY,WAAW;AAAA,EACxD,EAAE,QAAQ,4BAA4B,YAAY,gBAAgB;AAAA,EAClE,EAAE,QAAQ,sBAAsB,YAAY,UAAU;AAAA,EACtD,EAAE,QAAQ,sBAAsB,YAAY,UAAU;AAAA,EACtD,EAAE,QAAQ,wBAAwB,YAAY,YAAY;AAAA,EAC1D,EAAE,QAAQ,qBAAqB,YAAY,SAAS;AAAA,EACpD,EAAE,QAAQ,sBAAsB,YAAY,UAAU;AAAA,EACtD,EAAE,QAAQ,0BAA0B,YAAY,UAAU;AAAA,EAC1D,EAAE,QAAQ,wBAAwB,YAAY,YAAY;AAAA,EAC1D,EAAE,QAAQ,wBAAwB,YAAY,YAAY;AAAA,EAC1D,EAAE,QAAQ,mBAAmB,YAAY,OAAO;AAAA,EAChD;AAAA,IACE,QAAQ;AAAA,IACR,YAAY,CAAC,eAAe,YAAY,UAAU;AAAA,EACpD;AACF;AAOO,SAAS,gBAAgB,UAA4C;AAC1E,MAAI,QAAkE;AACtE,aAAW,SAAS,oBAAoB;AACtC,QAAI,aAAa,MAAM,UAAU,SAAS,WAAW,GAAG,MAAM,MAAM,GAAG,GAAG;AACxE,UAAI,CAAC,SAAS,MAAM,OAAO,SAAS,MAAM,OAAO,OAAQ,SAAQ;AAAA,IACnE;AAAA,EACF;AACA,SAAO,QAAQ,MAAM,aAAa;AACpC;AAMO,SAAS,gBAAgB,UAA2B;AACzD,QAAM,eAAe,gBAAgB;AACrC,QAAM,WAAW,gBAAgB,QAAQ;AACzC,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,QAAQ,MAAM,QAAQ,QAAQ,IAAI,WAAW,CAAC,QAAQ;AAC5D,SAAO,aAAa,OAAO,KAAK;AAClC;","names":[]}

package/dist/carriers.d.ts

@@ -0,0 +1,83 @@
+/**
+ * The couriers a merchant hands a parcel to, and where their codes lead.
+ *
+ * Box does not track parcels. There is no carrier integration and there is
+ * not going to be one: it is a per-carrier, per-country treadmill that would
+ * make us responsible for a package we never touch. What we can do completely
+ * is record the handover and point the customer at the one page that knows.
+ *
+ * So a tracking number's whole job is to become a link. Asking the merchant to
+ * paste that link themselves was asking them to do work we can do from the
+ * code and the carrier's name, which is why `trackingUrl` used to be a fourth
+ * text box that was almost always left empty.
+ *
+ * This list is a convenience, never a gate. `OTHER_CARRIER` keeps the free-text
+ * path open for the courier nobody has heard of and the one that starts
+ * operating next month.
+ */
+export interface Carrier {
+    /** Stable key. Not shown. */
+    id: string;
+    /** What the merchant calls them, and what lands in `order.carrier`. */
+    name: string;
+    /**
+     * Builds the page that knows where the parcel is.
+     *
+     * Undefined where the carrier has no public lookup — plenty of couriers
+     * answer on WhatsApp and nowhere else. A carrier without one is not lesser;
+     * it just means the code stays a code and is shown rather than linked.
+     */
+    trackingUrl?: (code: string) => string;
+    /**
+     * A mark for the picker, served from `public/`.
+     *
+     * Sourced from each carrier's own site (favicon / touch icon), normalised
+     * to 64px PNG and served from `public/couriers/`. Local rather than
+     * hotlinked, so the grid does not depend on a third party being up and no
+     * request leaves the page to render a picker.
+     *
+     * Still optional, and two carriers still have none: DHL and Aramex publish
+     * nothing above 16px, which is unusable at this size. They keep the
+     * monogram — as does any local courier a merchant adds through "Another",
+     * who will never have a logo either. The fallback is permanent, not a
+     * placeholder.
+     */
+    logo?: string;
+    /**
+     * The tile's colour when there is no logo. A courier a merchant reaches for
+     * daily should be findable by shape and colour before the name is read.
+     */
+    tint?: string;
+}
+/** The sentinel the picker uses for "not on this list". */
+export declare const OTHER_CARRIER = "other";
+/**
+ * Ordered roughly by how often a Nigerian merchant reaches for them, since
+ * that is who is standing at the counter. The international four are last
+ * because a shop that exports uses exactly those and nothing else.
+ *
+ * The on-demand names — Chowdeck, Glovo, Bolt Food, Gokada, MAX.ng, Errandlr —
+ * are here because a restaurant or a shop sending same-day is not calling DHL,
+ * and a list that omits them is a list that sends every one of those merchants
+ * to "Another courier" to type a name the software already knows. None of them
+ * carries a `trackingUrl`: they are tracked in their own app and the merchant
+ * is told by phone, which is precisely why that field is optional.
+ */
+export declare const CARRIERS: Carrier[];
+/**
+ * Finds a carrier by the name stored on the order.
+ *
+ * Matched on name rather than id because `order.carrier` is a free-text column
+ * and always has been — orders written before this list existed hold "GIG" or
+ * "dhl" typed by hand, and those should still light up as links. Anything that
+ * does not match is simply a carrier we do not know, which is allowed.
+ */
+export declare function findCarrier(name: string | null | undefined): Carrier | null;
+/**
+ * The page that knows where this parcel is, or null.
+ *
+ * A URL the merchant typed themselves always wins: they were looking at the
+ * carrier's site when they pasted it, and a template we guessed from a name
+ * has no business overruling that.
+ */
+export declare function resolveTrackingUrl(carrier: string | null | undefined, code: string | null | undefined, explicitUrl?: string | null): string | null;

package/dist/carriers.js

@@ -0,0 +1,124 @@
+const OTHER_CARRIER = "other";
+const CARRIERS = [
+  {
+    id: "gig",
+    logo: "/couriers/gig.png",
+    tint: "#0B7A3B",
+    name: "GIG Logistics",
+    trackingUrl: (code) => `https://giglogistics.com/tracking?waybill=${encodeURIComponent(code)}`
+  },
+  {
+    id: "kwik",
+    logo: "/couriers/kwik.png",
+    tint: "#E8462C",
+    name: "Kwik Delivery",
+    trackingUrl: (code) => `https://kwik.delivery/track/${encodeURIComponent(code)}`
+  },
+  {
+    id: "sendbox",
+    logo: "/couriers/sendbox.png",
+    tint: "#1B54F0",
+    name: "Sendbox",
+    trackingUrl: (code) => `https://sendbox.co/tracking?code=${encodeURIComponent(code)}`
+  },
+  {
+    id: "fez",
+    logo: "/couriers/fez.png",
+    tint: "#7A3BE8",
+    name: "Fez Delivery",
+    trackingUrl: (code) => `https://fezdelivery.co/track?order=${encodeURIComponent(code)}`
+  },
+  {
+    id: "nipost",
+    logo: "/couriers/nipost.png",
+    tint: "#0F7B6C",
+    name: "NIPOST",
+    trackingUrl: (code) => `https://www.nipost.gov.ng/TrackNTrace?id=${encodeURIComponent(code)}`
+  },
+  {
+    id: "chowdeck",
+    logo: "/couriers/chowdeck.png",
+    tint: "#0F9D58",
+    name: "Chowdeck"
+    // No public waybill lookup: the rider is tracked in Chowdeck's own app and
+    // the merchant is told by phone. `trackingUrl` is optional for exactly this.
+  },
+  {
+    id: "glovo",
+    logo: "/couriers/glovo.png",
+    tint: "#F5C518",
+    name: "Glovo"
+  },
+  {
+    id: "boltfood",
+    logo: "/couriers/boltfood.png",
+    tint: "#34D186",
+    name: "Bolt Food"
+  },
+  {
+    id: "gokada",
+    logo: "/couriers/gokada.png",
+    tint: "#E8342C",
+    name: "Gokada"
+  },
+  {
+    id: "maxng",
+    logo: "/couriers/maxng.png",
+    tint: "#1B1B1B",
+    name: "MAX.ng"
+  },
+  {
+    id: "errandlr",
+    logo: "/couriers/errandlr.png",
+    tint: "#2B59FF",
+    name: "Errandlr"
+  },
+  {
+    id: "dhl",
+    tint: "#D40511",
+    name: "DHL",
+    trackingUrl: (code) => `https://www.dhl.com/ng-en/home/tracking.html?tracking-id=${encodeURIComponent(code)}`
+  },
+  {
+    id: "fedex",
+    logo: "/couriers/fedex.png",
+    tint: "#4D148C",
+    name: "FedEx",
+    trackingUrl: (code) => `https://www.fedex.com/fedextrack/?trknbr=${encodeURIComponent(code)}`
+  },
+  {
+    id: "ups",
+    logo: "/couriers/ups.png",
+    tint: "#5A3A1B",
+    name: "UPS",
+    trackingUrl: (code) => `https://www.ups.com/track?tracknum=${encodeURIComponent(code)}`
+  },
+  {
+    id: "aramex",
+    name: "Aramex",
+    trackingUrl: (code) => `https://www.aramex.com/track/results?ShipmentNumber=${encodeURIComponent(code)}`
+  }
+];
+function findCarrier(name) {
+  if (!name) return null;
+  const needle = name.trim().toLowerCase();
+  return CARRIERS.find((c) => c.name.toLowerCase() === needle || c.id === needle) ?? // "GIG" against "GIG Logistics", "DHL Express" against "DHL". A merchant
+  // typing the short name is the common case, so a prefix match on either
+  // side is worth more than exactness here.
+  CARRIERS.find(
+    (c) => c.name.toLowerCase().startsWith(needle) || needle.startsWith(c.name.toLowerCase())
+  ) ?? null;
+}
+function resolveTrackingUrl(carrier, code, explicitUrl) {
+  if (explicitUrl) return explicitUrl;
+  if (!code) return null;
+  const match = findCarrier(carrier);
+  return match?.trackingUrl?.(code.trim()) ?? null;
+}
+export {
+  CARRIERS,
+  OTHER_CARRIER,
+  findCarrier,
+  resolveTrackingUrl
+};
+//# sourceMappingURL=carriers.js.map

package/dist/carriers.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/carriers.ts"],"sourcesContent":["/**\n * The couriers a merchant hands a parcel to, and where their codes lead.\n *\n * Box does not track parcels. There is no carrier integration and there is\n * not going to be one: it is a per-carrier, per-country treadmill that would\n * make us responsible for a package we never touch. What we can do completely\n * is record the handover and point the customer at the one page that knows.\n *\n * So a tracking number's whole job is to become a link. Asking the merchant to\n * paste that link themselves was asking them to do work we can do from the\n * code and the carrier's name, which is why `trackingUrl` used to be a fourth\n * text box that was almost always left empty.\n *\n * This list is a convenience, never a gate. `OTHER_CARRIER` keeps the free-text\n * path open for the courier nobody has heard of and the one that starts\n * operating next month.\n */\n\nexport interface Carrier {\n  /** Stable key. Not shown. */\n  id: string;\n  /** What the merchant calls them, and what lands in `order.carrier`. */\n  name: string;\n  /**\n   * Builds the page that knows where the parcel is.\n   *\n   * Undefined where the carrier has no public lookup — plenty of couriers\n   * answer on WhatsApp and nowhere else. A carrier without one is not lesser;\n   * it just means the code stays a code and is shown rather than linked.\n   */\n  trackingUrl?: (code: string) => string;\n  /**\n   * A mark for the picker, served from `public/`.\n   *\n   * Sourced from each carrier's own site (favicon / touch icon), normalised\n   * to 64px PNG and served from `public/couriers/`. Local rather than\n   * hotlinked, so the grid does not depend on a third party being up and no\n   * request leaves the page to render a picker.\n   *\n   * Still optional, and two carriers still have none: DHL and Aramex publish\n   * nothing above 16px, which is unusable at this size. They keep the\n   * monogram — as does any local courier a merchant adds through \"Another\",\n   * who will never have a logo either. The fallback is permanent, not a\n   * placeholder.\n   */\n  logo?: string;\n  /**\n   * The tile's colour when there is no logo. A courier a merchant reaches for\n   * daily should be findable by shape and colour before the name is read.\n   */\n  tint?: string;\n}\n\n/** The sentinel the picker uses for \"not on this list\". */\nexport const OTHER_CARRIER = 'other';\n\n/**\n * Ordered roughly by how often a Nigerian merchant reaches for them, since\n * that is who is standing at the counter. The international four are last\n * because a shop that exports uses exactly those and nothing else.\n *\n * The on-demand names — Chowdeck, Glovo, Bolt Food, Gokada, MAX.ng, Errandlr —\n * are here because a restaurant or a shop sending same-day is not calling DHL,\n * and a list that omits them is a list that sends every one of those merchants\n * to \"Another courier\" to type a name the software already knows. None of them\n * carries a `trackingUrl`: they are tracked in their own app and the merchant\n * is told by phone, which is precisely why that field is optional.\n */\nexport const CARRIERS: Carrier[] = [\n  {\n    id: 'gig',\n    logo: '/couriers/gig.png',\n    tint: '#0B7A3B',\n    name: 'GIG Logistics',\n    trackingUrl: (code) =>\n      `https://giglogistics.com/tracking?waybill=${encodeURIComponent(code)}`,\n  },\n  {\n    id: 'kwik',\n    logo: '/couriers/kwik.png',\n    tint: '#E8462C',\n    name: 'Kwik Delivery',\n    trackingUrl: (code) =>\n      `https://kwik.delivery/track/${encodeURIComponent(code)}`,\n  },\n  {\n    id: 'sendbox',\n    logo: '/couriers/sendbox.png',\n    tint: '#1B54F0',\n    name: 'Sendbox',\n    trackingUrl: (code) =>\n      `https://sendbox.co/tracking?code=${encodeURIComponent(code)}`,\n  },\n  {\n    id: 'fez',\n    logo: '/couriers/fez.png',\n    tint: '#7A3BE8',\n    name: 'Fez Delivery',\n    trackingUrl: (code) =>\n      `https://fezdelivery.co/track?order=${encodeURIComponent(code)}`,\n  },\n  {\n    id: 'nipost',\n    logo: '/couriers/nipost.png',\n    tint: '#0F7B6C',\n    name: 'NIPOST',\n    trackingUrl: (code) =>\n      `https://www.nipost.gov.ng/TrackNTrace?id=${encodeURIComponent(code)}`,\n  },\n  {\n    id: 'chowdeck',\n    logo: '/couriers/chowdeck.png',\n    tint: '#0F9D58',\n    name: 'Chowdeck',\n    // No public waybill lookup: the rider is tracked in Chowdeck's own app and\n    // the merchant is told by phone. `trackingUrl` is optional for exactly this.\n  },\n  {\n    id: 'glovo',\n    logo: '/couriers/glovo.png',\n    tint: '#F5C518',\n    name: 'Glovo',\n  },\n  {\n    id: 'boltfood',\n    logo: '/couriers/boltfood.png',\n    tint: '#34D186',\n    name: 'Bolt Food',\n  },\n  {\n    id: 'gokada',\n    logo: '/couriers/gokada.png',\n    tint: '#E8342C',\n    name: 'Gokada',\n  },\n  {\n    id: 'maxng',\n    logo: '/couriers/maxng.png',\n    tint: '#1B1B1B',\n    name: 'MAX.ng',\n  },\n  {\n    id: 'errandlr',\n    logo: '/couriers/errandlr.png',\n    tint: '#2B59FF',\n    name: 'Errandlr',\n  },\n  {\n    id: 'dhl',\n    tint: '#D40511',\n    name: 'DHL',\n    trackingUrl: (code) =>\n      `https://www.dhl.com/ng-en/home/tracking.html?tracking-id=${encodeURIComponent(code)}`,\n  },\n  {\n    id: 'fedex',\n    logo: '/couriers/fedex.png',\n    tint: '#4D148C',\n    name: 'FedEx',\n    trackingUrl: (code) =>\n      `https://www.fedex.com/fedextrack/?trknbr=${encodeURIComponent(code)}`,\n  },\n  {\n    id: 'ups',\n    logo: '/couriers/ups.png',\n    tint: '#5A3A1B',\n    name: 'UPS',\n    trackingUrl: (code) =>\n      `https://www.ups.com/track?tracknum=${encodeURIComponent(code)}`,\n  },\n  {\n    id: 'aramex',\n    name: 'Aramex',\n    trackingUrl: (code) =>\n      `https://www.aramex.com/track/results?ShipmentNumber=${encodeURIComponent(code)}`,\n  },\n];\n\n/**\n * Finds a carrier by the name stored on the order.\n *\n * Matched on name rather than id because `order.carrier` is a free-text column\n * and always has been — orders written before this list existed hold \"GIG\" or\n * \"dhl\" typed by hand, and those should still light up as links. Anything that\n * does not match is simply a carrier we do not know, which is allowed.\n */\nexport function findCarrier(name: string | null | undefined): Carrier | null {\n  if (!name) return null;\n  const needle = name.trim().toLowerCase();\n  return (\n    CARRIERS.find((c) => c.name.toLowerCase() === needle || c.id === needle) ??\n    // \"GIG\" against \"GIG Logistics\", \"DHL Express\" against \"DHL\". A merchant\n    // typing the short name is the common case, so a prefix match on either\n    // side is worth more than exactness here.\n    CARRIERS.find(\n      (c) =>\n        c.name.toLowerCase().startsWith(needle) ||\n        needle.startsWith(c.name.toLowerCase()),\n    ) ??\n    null\n  );\n}\n\n/**\n * The page that knows where this parcel is, or null.\n *\n * A URL the merchant typed themselves always wins: they were looking at the\n * carrier's site when they pasted it, and a template we guessed from a name\n * has no business overruling that.\n */\nexport function resolveTrackingUrl(\n  carrier: string | null | undefined,\n  code: string | null | undefined,\n  explicitUrl?: string | null,\n): string | null {\n  if (explicitUrl) return explicitUrl;\n  if (!code) return null;\n  const match = findCarrier(carrier);\n  return match?.trackingUrl?.(code.trim()) ?? null;\n}\n"],"mappings":"AAsDO,MAAM,gBAAgB;AActB,MAAM,WAAsB;AAAA,EACjC;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa,CAAC,SACZ,6CAA6C,mBAAmB,IAAI,CAAC;AAAA,EACzE;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa,CAAC,SACZ,+BAA+B,mBAAmB,IAAI,CAAC;AAAA,EAC3D;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa,CAAC,SACZ,oCAAoC,mBAAmB,IAAI,CAAC;AAAA,EAChE;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa,CAAC,SACZ,sCAAsC,mBAAmB,IAAI,CAAC;AAAA,EAClE;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa,CAAC,SACZ,4CAA4C,mBAAmB,IAAI,CAAC;AAAA,EACxE;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA;AAAA;AAAA,EAGR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa,CAAC,SACZ,4DAA4D,mBAAmB,IAAI,CAAC;AAAA,EACxF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa,CAAC,SACZ,4CAA4C,mBAAmB,IAAI,CAAC;AAAA,EACxE;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa,CAAC,SACZ,sCAAsC,mBAAmB,IAAI,CAAC;AAAA,EAClE;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa,CAAC,SACZ,uDAAuD,mBAAmB,IAAI,CAAC;AAAA,EACnF;AACF;AAUO,SAAS,YAAY,MAAiD;AAC3E,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,SAAS,KAAK,KAAK,EAAE,YAAY;AACvC,SACE,SAAS,KAAK,CAAC,MAAM,EAAE,KAAK,YAAY,MAAM,UAAU,EAAE,OAAO,MAAM;AAAA;AAAA;AAAA,EAIvE,SAAS;AAAA,IACP,CAAC,MACC,EAAE,KAAK,YAAY,EAAE,WAAW,MAAM,KACtC,OAAO,WAAW,EAAE,KAAK,YAAY,CAAC;AAAA,EAC1C,KACA;AAEJ;AASO,SAAS,mBACd,SACA,MACA,aACe;AACf,MAAI,YAAa,QAAO;AACxB,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,YAAY,OAAO;AACjC,SAAO,OAAO,cAAc,KAAK,KAAK,CAAC,KAAK;AAC9C;","names":[]}

package/dist/commerce-build/api.d.ts

@@ -0,0 +1,29 @@
+import type { BuildReadinessV1, BusinessProfileRevisionView, CommerceDeploymentView, CommerceLaunchView, CapabilityPlanV1, CommerceCompileResult, CommerceBuildView, CommerceSpecV1, LaunchProposalReceipt, PreviewJobView, SourceEvidence, SourceKind, VerificationJobView } from './contracts';
+export interface StartCommerceBuildInput {
+    description: string;
+    websiteUrl?: string;
+    files: File[];
+    images: File[];
+}
+export { CommerceBuildRequestError, parseCommerceBuildSseFrame, streamCommerceBuildTurn, type CommerceBuildTurnResult, } from './turn-streaming';
+export declare function buildStartCommerceBuildFormData(input: StartCommerceBuildInput): FormData;
+export declare function createCommerceBuild(tenantSlug: string, input: StartCommerceBuildInput): Promise<CommerceBuildView>;
+export declare function getCommerceBuild(tenantSlug: string, buildId: string): Promise<CommerceBuildView>;
+export declare function getCurrentCommerceBuild(tenantSlug: string): Promise<CommerceBuildView | null>;
+export declare function acceptCommerceBuildProfile(tenantSlug: string, buildId: string, profileRevision: number): Promise<CommerceBuildView>;
+export declare function compileCommerceBuild(tenantSlug: string, buildId: string, profileRevision: number): Promise<CommerceCompileResult>;
+export declare function createCommerceBuildPreview(tenantSlug: string, buildId: string, specRevision: number): Promise<PreviewJobView>;
+export declare function verifyCommerceBuild(tenantSlug: string, buildId: string, previewId: string): Promise<VerificationJobView>;
+export declare function proposeCommerceBuildLaunch(tenantSlug: string, buildId: string, input: {
+    specRevision: number;
+    readinessRevision: number;
+}): Promise<LaunchProposalReceipt>;
+export declare function resolveCurrentProfile(build: CommerceBuildView | null | undefined): BusinessProfileRevisionView | null;
+export declare function resolveCurrentSpec(build: CommerceBuildView | null | undefined): CommerceSpecV1 | null;
+export declare function resolveCurrentPlan(build: CommerceBuildView | null | undefined): CapabilityPlanV1 | null;
+export declare function resolveCurrentPreview(build: CommerceBuildView | null | undefined): PreviewJobView | null;
+export declare function resolveCurrentReadiness(build: CommerceBuildView | null | undefined): BuildReadinessV1 | null;
+export declare function resolveCurrentVerification(build: CommerceBuildView | null | undefined): VerificationJobView | null;
+export declare function resolveCurrentLaunch(build: CommerceBuildView | null | undefined): CommerceLaunchView | null;
+export declare function resolveCurrentDeployment(build: CommerceBuildView | null | undefined): CommerceDeploymentView | null;
+export declare function countEvidenceByKind(evidence: SourceEvidence[]): Record<SourceKind, number>;