@withpotter/lib 0.13.0-next.101

package/dist/permission-catalog-fallback.js

@@ -0,0 +1,147 @@
+const FALLBACK_PERMISSION_CATALOG = [
+  {
+    key: "canManageProducts",
+    label: "Manage products",
+    group: "Products",
+    description: "Create, edit and delete products."
+  },
+  {
+    key: "canViewProducts",
+    label: "View products",
+    group: "Products"
+  },
+  {
+    key: "canManageOrders",
+    label: "Manage orders",
+    group: "Orders",
+    description: "Fulfil, refund and cancel orders."
+  },
+  {
+    key: "canViewOrders",
+    label: "View orders",
+    group: "Orders"
+  },
+  {
+    key: "canManageMembers",
+    label: "Manage customers",
+    group: "Customers"
+  },
+  {
+    key: "canViewMembers",
+    label: "View customers",
+    group: "Customers"
+  },
+  {
+    key: "canManageDiscounts",
+    label: "Manage discounts",
+    group: "Discounts"
+  },
+  {
+    key: "canViewDiscounts",
+    label: "View discounts",
+    group: "Discounts"
+  },
+  {
+    key: "canManageReviews",
+    label: "Manage reviews",
+    group: "Reviews"
+  },
+  {
+    key: "canViewReviews",
+    label: "View reviews",
+    group: "Reviews"
+  },
+  {
+    key: "canManageAnalytics",
+    label: "Manage analytics",
+    group: "Analytics",
+    description: "Configure tracked events, export reports and manage custom dashboards."
+  },
+  {
+    key: "canViewAnalytics",
+    label: "View analytics",
+    group: "Analytics"
+  },
+  {
+    key: "canManageFinance",
+    label: "Manage finance",
+    group: "Finance",
+    description: "Manage payouts, connected bank accounts and refund adjustments."
+  },
+  {
+    key: "canViewFinance",
+    label: "View finance",
+    group: "Finance",
+    description: "See revenue, transactions, invoices and finance dashboards."
+  },
+  {
+    key: "canApproveMoneyMovement",
+    label: "Approve money movement",
+    group: "Finance",
+    description: "Send money out of the wallet."
+  },
+  {
+    key: "canManageBusinessProfile",
+    label: "Manage business profile",
+    group: "Business Profile",
+    description: "Edit the workspace's name, contact details, logo and description."
+  },
+  {
+    key: "canManageSettings",
+    label: "Manage settings",
+    group: "Settings",
+    description: "Change storefront, payments and shipping settings."
+  },
+  {
+    key: "canManageDomains",
+    label: "Manage domains",
+    group: "Domains",
+    description: "Purchase, connect, verify and delete domains."
+  },
+  {
+    key: "canManageEditor",
+    label: "Use the editor",
+    group: "Editor",
+    description: "Author storefront changes via the visual editor and Ask AI."
+  },
+  {
+    key: "canManageBlog",
+    label: "Manage blog",
+    group: "Blog",
+    description: "Create, edit and delete blog posts, moderate comments."
+  },
+  {
+    key: "canViewBlog",
+    label: "View blog",
+    group: "Blog"
+  },
+  {
+    key: "canManageTeam",
+    label: "Manage team & roles",
+    group: "Team",
+    description: "Invite members, change roles, and edit permission definitions."
+  },
+  {
+    key: "canManageCommunications",
+    label: "Manage communications",
+    group: "Communications"
+  },
+  {
+    key: "canViewCommunications",
+    label: "View communications",
+    group: "Communications"
+  }
+];
+const FALLBACK_PERMISSION_GROUPS = Array.from(
+  new Set(FALLBACK_PERMISSION_CATALOG.map((item) => item.group))
+);
+const FALLBACK_PERMISSION_CATALOG_RESPONSE = {
+  items: FALLBACK_PERMISSION_CATALOG,
+  groups: FALLBACK_PERMISSION_GROUPS
+};
+export {
+  FALLBACK_PERMISSION_CATALOG,
+  FALLBACK_PERMISSION_CATALOG_RESPONSE,
+  FALLBACK_PERMISSION_GROUPS
+};
+//# sourceMappingURL=permission-catalog-fallback.js.map

package/dist/permission-catalog-fallback.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/permission-catalog-fallback.ts"],"sourcesContent":["/**\n * Client-side fallback for the permission catalog served by\n * `GET /team/permissions/catalog`.\n *\n * The api owns the canonical list (see\n * `api/src/modules/team/permission-catalog.ts`). This file mirrors it so\n * the role editor is usable even when the endpoint is unreachable\n * (e.g. staging api mid-deploy, dashboard preview pointing at an older\n * api build). If the api response differs, the api wins — this file is\n * only consulted when the network call fails.\n *\n * Keys MUST stay in sync with the api's `TeamPermissions` interface.\n */\nimport type {\n  PermissionCatalogItem,\n  PermissionCatalogResponse,\n} from '@withpotter/lib/api/types';\n\nexport const FALLBACK_PERMISSION_CATALOG: PermissionCatalogItem[] = [\n  {\n    key: 'canManageProducts',\n    label: 'Manage products',\n    group: 'Products',\n    description: 'Create, edit and delete products.',\n  },\n  {\n    key: 'canViewProducts',\n    label: 'View products',\n    group: 'Products',\n  },\n  {\n    key: 'canManageOrders',\n    label: 'Manage orders',\n    group: 'Orders',\n    description: 'Fulfil, refund and cancel orders.',\n  },\n  {\n    key: 'canViewOrders',\n    label: 'View orders',\n    group: 'Orders',\n  },\n  {\n    key: 'canManageMembers',\n    label: 'Manage customers',\n    group: 'Customers',\n  },\n  {\n    key: 'canViewMembers',\n    label: 'View customers',\n    group: 'Customers',\n  },\n  {\n    key: 'canManageDiscounts',\n    label: 'Manage discounts',\n    group: 'Discounts',\n  },\n  {\n    key: 'canViewDiscounts',\n    label: 'View discounts',\n    group: 'Discounts',\n  },\n  {\n    key: 'canManageReviews',\n    label: 'Manage reviews',\n    group: 'Reviews',\n  },\n  {\n    key: 'canViewReviews',\n    label: 'View reviews',\n    group: 'Reviews',\n  },\n  {\n    key: 'canManageAnalytics',\n    label: 'Manage analytics',\n    group: 'Analytics',\n    description:\n      'Configure tracked events, export reports and manage custom dashboards.',\n  },\n  {\n    key: 'canViewAnalytics',\n    label: 'View analytics',\n    group: 'Analytics',\n  },\n  {\n    key: 'canManageFinance',\n    label: 'Manage finance',\n    group: 'Finance',\n    description:\n      'Manage payouts, connected bank accounts and refund adjustments.',\n  },\n  {\n    key: 'canViewFinance',\n    label: 'View finance',\n    group: 'Finance',\n    description: 'See revenue, transactions, invoices and finance dashboards.',\n  },\n  {\n    key: 'canApproveMoneyMovement',\n    label: 'Approve money movement',\n    group: 'Finance',\n    description: 'Send money out of the wallet.',\n  },\n  {\n    key: 'canManageBusinessProfile',\n    label: 'Manage business profile',\n    group: 'Business Profile',\n    description:\n      \"Edit the workspace's name, contact details, logo and description.\",\n  },\n  {\n    key: 'canManageSettings',\n    label: 'Manage settings',\n    group: 'Settings',\n    description: 'Change storefront, payments and shipping settings.',\n  },\n  {\n    key: 'canManageDomains',\n    label: 'Manage domains',\n    group: 'Domains',\n    description: 'Purchase, connect, verify and delete domains.',\n  },\n  {\n    key: 'canManageEditor',\n    label: 'Use the editor',\n    group: 'Editor',\n    description: 'Author storefront changes via the visual editor and Ask AI.',\n  },\n  {\n    key: 'canManageBlog',\n    label: 'Manage blog',\n    group: 'Blog',\n    description: 'Create, edit and delete blog posts, moderate comments.',\n  },\n  {\n    key: 'canViewBlog',\n    label: 'View blog',\n    group: 'Blog',\n  },\n  {\n    key: 'canManageTeam',\n    label: 'Manage team & roles',\n    group: 'Team',\n    description:\n      'Invite members, change roles, and edit permission definitions.',\n  },\n  {\n    key: 'canManageCommunications',\n    label: 'Manage communications',\n    group: 'Communications',\n  },\n  {\n    key: 'canViewCommunications',\n    label: 'View communications',\n    group: 'Communications',\n  },\n];\n\nexport const FALLBACK_PERMISSION_GROUPS: string[] = Array.from(\n  new Set(FALLBACK_PERMISSION_CATALOG.map((item) => item.group)),\n);\n\nexport const FALLBACK_PERMISSION_CATALOG_RESPONSE: PermissionCatalogResponse = {\n  items: FALLBACK_PERMISSION_CATALOG,\n  groups: FALLBACK_PERMISSION_GROUPS,\n};\n"],"mappings":"AAkBO,MAAM,8BAAuD;AAAA,EAClE;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EACf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aACE;AAAA,EACJ;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EACJ;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EACJ;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EACf;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EACJ;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AAAA,EACA;AAAA,IACE,KAAK;AAAA,IACL,OAAO;AAAA,IACP,OAAO;AAAA,EACT;AACF;AAEO,MAAM,6BAAuC,MAAM;AAAA,EACxD,IAAI,IAAI,4BAA4B,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;AAC/D;AAEO,MAAM,uCAAkE;AAAA,EAC7E,OAAO;AAAA,EACP,QAAQ;AACV;","names":[]}

package/dist/permission-change.d.ts

@@ -0,0 +1,42 @@
+import type { PermissionKey } from './use-permissions';
+/**
+ * What changed about someone's access, in the words they will recognise.
+ *
+ * Permissions used to be fetched once per tenant and never again, so a change
+ * only landed when a person happened to reload. That was fixed — a returning
+ * tab re-asks — and the fix created this problem: a staff member's sidebar can
+ * now change WHILE THEY ARE WORKING. Rows appear and disappear with no
+ * explanation, possibly with a customer standing in front of them.
+ *
+ * Reported by AREA rather than by permission key, because "canManageDiscounts"
+ * is the database's word. An area is the row they will notice going missing.
+ *
+ * Administration switches are excluded on purpose: nobody's shift is
+ * interrupted by gaining `canManageDomains`, and listing it would turn a
+ * useful sentence into a changelog.
+ */
+export interface PermissionChange {
+    /** Area labels this person can now reach and could not before. */
+    gained: string[];
+    /** Area labels they could reach and now cannot. */
+    lost: string[];
+}
+type PermissionMap = Partial<Record<PermissionKey, boolean>>;
+/**
+ * Returns null when nothing a person would notice has changed.
+ *
+ * Null rather than an empty object so callers cannot accidentally announce a
+ * change of nothing — the two lists being empty is the common case on every
+ * refetch, and a notice that fires on every window focus would be worse than
+ * the silence it replaces.
+ */
+export declare function diffPermissions(before: PermissionMap | null, after: PermissionMap): PermissionChange | null;
+/**
+ * One sentence describing the change.
+ *
+ * Losing access leads whenever both happen. Someone who gained Discounts and
+ * lost Money needs to hear about the Money — that is the one that will stop
+ * them mid-task, and burying it after good news is how a notice gets skimmed.
+ */
+export declare function describePermissionChange(change: PermissionChange): string;
+export {};

package/dist/permission-change.js

@@ -0,0 +1,33 @@
+import { PERMISSION_AREAS } from "./team-roles";
+function reaches(map, area) {
+  return Boolean(area.view && map[area.view] || map[area.manage]);
+}
+function diffPermissions(before, after) {
+  if (!before) return null;
+  const gained = [];
+  const lost = [];
+  for (const area of PERMISSION_AREAS) {
+    if (area.advanced) continue;
+    const had = reaches(before, area);
+    const has = reaches(after, area);
+    if (has && !had) gained.push(area.label);
+    if (!has && had) lost.push(area.label);
+  }
+  if (gained.length === 0 && lost.length === 0) return null;
+  return { gained, lost };
+}
+function describePermissionChange(change) {
+  const list = (items) => items.length === 1 ? items[0] : `${items.slice(0, -1).join(", ")} and ${items[items.length - 1]}`;
+  if (change.lost.length && change.gained.length) {
+    return `You no longer have ${list(change.lost)}, and you now have ${list(
+      change.gained
+    )}.`;
+  }
+  if (change.lost.length) return `You no longer have ${list(change.lost)}.`;
+  return `You now have ${list(change.gained)}.`;
+}
+export {
+  describePermissionChange,
+  diffPermissions
+};
+//# sourceMappingURL=permission-change.js.map

package/dist/permission-change.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/permission-change.ts"],"sourcesContent":["import { PERMISSION_AREAS } from './team-roles';\nimport type { PermissionKey } from './use-permissions';\n\n/**\n * What changed about someone's access, in the words they will recognise.\n *\n * Permissions used to be fetched once per tenant and never again, so a change\n * only landed when a person happened to reload. That was fixed — a returning\n * tab re-asks — and the fix created this problem: a staff member's sidebar can\n * now change WHILE THEY ARE WORKING. Rows appear and disappear with no\n * explanation, possibly with a customer standing in front of them.\n *\n * Reported by AREA rather than by permission key, because \"canManageDiscounts\"\n * is the database's word. An area is the row they will notice going missing.\n *\n * Administration switches are excluded on purpose: nobody's shift is\n * interrupted by gaining `canManageDomains`, and listing it would turn a\n * useful sentence into a changelog.\n */\nexport interface PermissionChange {\n  /** Area labels this person can now reach and could not before. */\n  gained: string[];\n  /** Area labels they could reach and now cannot. */\n  lost: string[];\n}\n\ntype PermissionMap = Partial<Record<PermissionKey, boolean>>;\n\nfunction reaches(map: PermissionMap, area: (typeof PERMISSION_AREAS)[number]) {\n  return Boolean((area.view && map[area.view]) || map[area.manage]);\n}\n\n/**\n * Returns null when nothing a person would notice has changed.\n *\n * Null rather than an empty object so callers cannot accidentally announce a\n * change of nothing — the two lists being empty is the common case on every\n * refetch, and a notice that fires on every window focus would be worse than\n * the silence it replaces.\n */\nexport function diffPermissions(\n  before: PermissionMap | null,\n  after: PermissionMap,\n): PermissionChange | null {\n  // No baseline means this is the first load, not a change. Announcing \"you\n  // gained 6 areas\" to someone who just signed in would be nonsense.\n  if (!before) return null;\n\n  const gained: string[] = [];\n  const lost: string[] = [];\n\n  for (const area of PERMISSION_AREAS) {\n    if (area.advanced) continue;\n    const had = reaches(before, area);\n    const has = reaches(after, area);\n    if (has && !had) gained.push(area.label);\n    if (!has && had) lost.push(area.label);\n  }\n\n  if (gained.length === 0 && lost.length === 0) return null;\n  return { gained, lost };\n}\n\n/**\n * One sentence describing the change.\n *\n * Losing access leads whenever both happen. Someone who gained Discounts and\n * lost Money needs to hear about the Money — that is the one that will stop\n * them mid-task, and burying it after good news is how a notice gets skimmed.\n */\nexport function describePermissionChange(change: PermissionChange): string {\n  const list = (items: string[]) =>\n    items.length === 1\n      ? items[0]\n      : `${items.slice(0, -1).join(', ')} and ${items[items.length - 1]}`;\n\n  if (change.lost.length && change.gained.length) {\n    return `You no longer have ${list(change.lost)}, and you now have ${list(\n      change.gained,\n    )}.`;\n  }\n  if (change.lost.length) return `You no longer have ${list(change.lost)}.`;\n  return `You now have ${list(change.gained)}.`;\n}\n"],"mappings":"AAAA,SAAS,wBAAwB;AA4BjC,SAAS,QAAQ,KAAoB,MAAyC;AAC5E,SAAO,QAAS,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAM,IAAI,KAAK,MAAM,CAAC;AAClE;AAUO,SAAS,gBACd,QACA,OACyB;AAGzB,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,SAAmB,CAAC;AAC1B,QAAM,OAAiB,CAAC;AAExB,aAAW,QAAQ,kBAAkB;AACnC,QAAI,KAAK,SAAU;AACnB,UAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,UAAM,MAAM,QAAQ,OAAO,IAAI;AAC/B,QAAI,OAAO,CAAC,IAAK,QAAO,KAAK,KAAK,KAAK;AACvC,QAAI,CAAC,OAAO,IAAK,MAAK,KAAK,KAAK,KAAK;AAAA,EACvC;AAEA,MAAI,OAAO,WAAW,KAAK,KAAK,WAAW,EAAG,QAAO;AACrD,SAAO,EAAE,QAAQ,KAAK;AACxB;AASO,SAAS,yBAAyB,QAAkC;AACzE,QAAM,OAAO,CAAC,UACZ,MAAM,WAAW,IACb,MAAM,CAAC,IACP,GAAG,MAAM,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,QAAQ,MAAM,MAAM,SAAS,CAAC,CAAC;AAErE,MAAI,OAAO,KAAK,UAAU,OAAO,OAAO,QAAQ;AAC9C,WAAO,sBAAsB,KAAK,OAAO,IAAI,CAAC,sBAAsB;AAAA,MAClE,OAAO;AAAA,IACT,CAAC;AAAA,EACH;AACA,MAAI,OAAO,KAAK,OAAQ,QAAO,sBAAsB,KAAK,OAAO,IAAI,CAAC;AACtE,SAAO,gBAAgB,KAAK,OAAO,MAAM,CAAC;AAC5C;","names":[]}

package/dist/phone.d.ts

@@ -0,0 +1,16 @@
+/**
+ * One spelling of a phone number, so two of them can be compared.
+ *
+ * The mirror of `@shared/phone` in potter-api, and it has to stay the mirror:
+ * the API stores a contact as digits with the country code resolved, and this
+ * dashboard compares its own audience against that list. If the two rules
+ * disagree, every comparison silently returns nothing — a merchant would be
+ * told their whole list is unreachable, with no error anywhere to explain it.
+ *
+ * A merchant types `0801 234 5678`, the storefront saves `+2348012345678`, and
+ * WhatsApp hands back `2348012345678`. All three are one person.
+ */
+/** Digits only, no leading `+`, country code resolved. */
+export declare function toE164Digits(phone: string | null | undefined): string;
+/** The same number, written the way a person reads it back. */
+export declare function toE164(phone: string | null | undefined): string;

package/dist/phone.js

@@ -0,0 +1,20 @@
+const NG_LOCAL = /^0\d{10}$/;
+function toE164Digits(phone) {
+  if (!phone) return "";
+  const trimmed = phone.trim().replace(/^whatsapp:/i, "");
+  const hadPlus = trimmed.startsWith("+");
+  const digits = trimmed.replace(/\D/g, "");
+  if (!digits) return "";
+  if (hadPlus) return digits;
+  if (NG_LOCAL.test(digits)) return `234${digits.slice(1)}`;
+  return digits;
+}
+function toE164(phone) {
+  const digits = toE164Digits(phone);
+  return digits ? `+${digits}` : "";
+}
+export {
+  toE164,
+  toE164Digits
+};
+//# sourceMappingURL=phone.js.map

package/dist/phone.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/phone.ts"],"sourcesContent":["/**\n * One spelling of a phone number, so two of them can be compared.\n *\n * The mirror of `@shared/phone` in potter-api, and it has to stay the mirror:\n * the API stores a contact as digits with the country code resolved, and this\n * dashboard compares its own audience against that list. If the two rules\n * disagree, every comparison silently returns nothing — a merchant would be\n * told their whole list is unreachable, with no error anywhere to explain it.\n *\n * A merchant types `0801 234 5678`, the storefront saves `+2348012345678`, and\n * WhatsApp hands back `2348012345678`. All three are one person.\n */\n\n/** A local Nigerian number: 11 digits beginning 0. */\nconst NG_LOCAL = /^0\\d{10}$/;\n\n/** Digits only, no leading `+`, country code resolved. */\nexport function toE164Digits(phone: string | null | undefined): string {\n  if (!phone) return '';\n\n  const trimmed = phone.trim().replace(/^whatsapp:/i, '');\n  const hadPlus = trimmed.startsWith('+');\n  const digits = trimmed.replace(/\\D/g, '');\n\n  if (!digits) return '';\n\n  // Written with a country code already. Trust it — guessing on top of an\n  // explicit `+` is how a valid international number gets mangled.\n  if (hadPlus) return digits;\n\n  if (NG_LOCAL.test(digits)) return `234${digits.slice(1)}`;\n\n  return digits;\n}\n\n/** The same number, written the way a person reads it back. */\nexport function toE164(phone: string | null | undefined): string {\n  const digits = toE164Digits(phone);\n  return digits ? `+${digits}` : '';\n}\n"],"mappings":"AAcA,MAAM,WAAW;AAGV,SAAS,aAAa,OAA0C;AACrE,MAAI,CAAC,MAAO,QAAO;AAEnB,QAAM,UAAU,MAAM,KAAK,EAAE,QAAQ,eAAe,EAAE;AACtD,QAAM,UAAU,QAAQ,WAAW,GAAG;AACtC,QAAM,SAAS,QAAQ,QAAQ,OAAO,EAAE;AAExC,MAAI,CAAC,OAAQ,QAAO;AAIpB,MAAI,QAAS,QAAO;AAEpB,MAAI,SAAS,KAAK,MAAM,EAAG,QAAO,MAAM,OAAO,MAAM,CAAC,CAAC;AAEvD,SAAO;AACT;AAGO,SAAS,OAAO,OAA0C;AAC/D,QAAM,SAAS,aAAa,KAAK;AACjC,SAAO,SAAS,IAAI,MAAM,KAAK;AACjC;","names":[]}

package/dist/plan-access.d.ts

@@ -0,0 +1,39 @@
+import type { Entitlements, MerchantPlan } from "./pricing-plans-types";
+/**
+ * Which features a page needs, whether the merchant's plan has them, and the
+ * plan that would unlock them. Pages map to feature keys through the
+ * dashboard's own capability table (`ROUTE_CAPABILITIES`): the plan feature
+ * keys are those capability keys.
+ */
+/** Settings › Billing › Plan, where a merchant changes plan. */
+export declare const PLAN_PAGE = "/dashboard/settings/billing/subscription";
+/** The feature names merchants read; the same list as the engine catalogue. */
+export declare const FEATURE_NAMES: Record<string, string>;
+export declare const featureName: (key: string) => string;
+/** The feature keys a dashboard page needs (any one of them opens it). */
+export declare function routeFeatures(pathname: string): string[];
+/**
+ * The features a page is locked behind, or null when the merchant may use
+ * it. Unknown entitlements (no plan yet, an engine without plans) lock
+ * nothing.
+ */
+export declare function lockedFeatures(pathname: string, entitlements: Entitlements | null | undefined): string[] | null;
+export interface Unlock {
+    plan: MerchantPlan;
+    /** The price in the merchant's currency, when the plan has one. */
+    amountMinor: string | null;
+}
+/**
+ * The cheapest public plan, other than the merchant's own, that includes any
+ * of these features. Cheapest in the merchant's currency; a plan without a
+ * price there comes after every plan with one.
+ */
+export declare function unlockingPlan(features: string[], plans: MerchantPlan[], currency: string | null, currentPlanId?: string | null): Unlock | null;
+/**
+ * The capability keys a merchant may see in the menu: the box's own set
+ * narrowed to what their plan includes. Null leaves the box's set alone.
+ */
+export declare function planCapabilityKeys(entitlements: Entitlements | null | undefined, box: {
+    known: boolean;
+    keys: string[];
+}): string[] | null;

package/dist/plan-access.js

@@ -0,0 +1,57 @@
+import { routeCapability } from "./capability-context";
+import { compareMinor } from "./plan-price";
+const PLAN_PAGE = "/dashboard/settings/billing/subscription";
+const FEATURE_NAMES = {
+  orders: "Orders",
+  catalog: "Catalog",
+  customers: "Customers",
+  discounts: "Discounts",
+  giftcards: "Gift cards",
+  loyalty: "Loyalty",
+  reviews: "Reviews",
+  blog: "Blog",
+  bookings: "Bookings",
+  subscriptions: "Subscriptions",
+  invoices: "Invoices",
+  payments: "Payments",
+  settlements: "Settlements",
+  shipping: "Shipping",
+  analytics: "Analytics",
+  team_members: "Team members"
+};
+const featureName = (key) => FEATURE_NAMES[key] ?? key.replace(/_/g, " ");
+function routeFeatures(pathname) {
+  const required = routeCapability(pathname);
+  if (!required) return [];
+  return Array.isArray(required) ? required : [required];
+}
+function lockedFeatures(pathname, entitlements) {
+  const needed = routeFeatures(pathname);
+  if (!entitlements || !needed.length) return null;
+  return needed.some((key) => entitlements[key]?.included) ? null : needed;
+}
+function unlockingPlan(features, plans, currency, currentPlanId = null) {
+  const candidates = plans.filter((p) => p.id !== currentPlanId).filter((p) => features.some((key) => p.features[key]?.included)).map((plan) => ({
+    plan,
+    amountMinor: currency ? plan.prices[currency] ?? null : null
+  }));
+  candidates.sort((a, b) => compareMinor(a.amountMinor, b.amountMinor));
+  return candidates[0] ?? null;
+}
+function planCapabilityKeys(entitlements, box) {
+  if (!entitlements) return null;
+  const inPlan = Object.keys(entitlements).filter(
+    (key) => entitlements[key]?.included
+  );
+  return box.known ? box.keys.filter((key) => inPlan.includes(key)) : inPlan;
+}
+export {
+  FEATURE_NAMES,
+  PLAN_PAGE,
+  featureName,
+  lockedFeatures,
+  planCapabilityKeys,
+  routeFeatures,
+  unlockingPlan
+};
+//# sourceMappingURL=plan-access.js.map

package/dist/plan-access.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/plan-access.ts"],"sourcesContent":["import { routeCapability } from \"./capability-context\";\nimport { compareMinor } from \"./plan-price\";\nimport type { Entitlements, MerchantPlan } from \"./pricing-plans-types\";\n\n/**\n * Which features a page needs, whether the merchant's plan has them, and the\n * plan that would unlock them. Pages map to feature keys through the\n * dashboard's own capability table (`ROUTE_CAPABILITIES`): the plan feature\n * keys are those capability keys.\n */\n\n/** Settings › Billing › Plan, where a merchant changes plan. */\nexport const PLAN_PAGE = \"/dashboard/settings/billing/subscription\";\n\n/** The feature names merchants read; the same list as the engine catalogue. */\nexport const FEATURE_NAMES: Record<string, string> = {\n  orders: \"Orders\",\n  catalog: \"Catalog\",\n  customers: \"Customers\",\n  discounts: \"Discounts\",\n  giftcards: \"Gift cards\",\n  loyalty: \"Loyalty\",\n  reviews: \"Reviews\",\n  blog: \"Blog\",\n  bookings: \"Bookings\",\n  subscriptions: \"Subscriptions\",\n  invoices: \"Invoices\",\n  payments: \"Payments\",\n  settlements: \"Settlements\",\n  shipping: \"Shipping\",\n  analytics: \"Analytics\",\n  team_members: \"Team members\",\n};\n\nexport const featureName = (key: string) =>\n  FEATURE_NAMES[key] ?? key.replace(/_/g, \" \");\n\n/** The feature keys a dashboard page needs (any one of them opens it). */\nexport function routeFeatures(pathname: string): string[] {\n  const required = routeCapability(pathname);\n\n  if (!required) return [];\n\n  return Array.isArray(required) ? required : [required];\n}\n\n/**\n * The features a page is locked behind, or null when the merchant may use\n * it. Unknown entitlements (no plan yet, an engine without plans) lock\n * nothing.\n */\nexport function lockedFeatures(\n  pathname: string,\n  entitlements: Entitlements | null | undefined\n): string[] | null {\n  const needed = routeFeatures(pathname);\n\n  if (!entitlements || !needed.length) return null;\n\n  return needed.some((key) => entitlements[key]?.included) ? null : needed;\n}\n\nexport interface Unlock {\n  plan: MerchantPlan;\n  /** The price in the merchant's currency, when the plan has one. */\n  amountMinor: string | null;\n}\n\n/**\n * The cheapest public plan, other than the merchant's own, that includes any\n * of these features. Cheapest in the merchant's currency; a plan without a\n * price there comes after every plan with one.\n */\nexport function unlockingPlan(\n  features: string[],\n  plans: MerchantPlan[],\n  currency: string | null,\n  currentPlanId: string | null = null\n): Unlock | null {\n  const candidates = plans\n    .filter((p) => p.id !== currentPlanId)\n    .filter((p) => features.some((key) => p.features[key]?.included))\n    .map((plan) => ({\n      plan,\n      amountMinor: currency ? plan.prices[currency] ?? null : null,\n    }));\n\n  candidates.sort((a, b) => compareMinor(a.amountMinor, b.amountMinor));\n\n  return candidates[0] ?? null;\n}\n\n/**\n * The capability keys a merchant may see in the menu: the box's own set\n * narrowed to what their plan includes. Null leaves the box's set alone.\n */\nexport function planCapabilityKeys(\n  entitlements: Entitlements | null | undefined,\n  box: { known: boolean; keys: string[] }\n): string[] | null {\n  if (!entitlements) return null;\n\n  const inPlan = Object.keys(entitlements).filter(\n    (key) => entitlements[key]?.included\n  );\n\n  return box.known ? box.keys.filter((key) => inPlan.includes(key)) : inPlan;\n}\n"],"mappings":"AAAA,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAWtB,MAAM,YAAY;AAGlB,MAAM,gBAAwC;AAAA,EACnD,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,WAAW;AAAA,EACX,WAAW;AAAA,EACX,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,MAAM;AAAA,EACN,UAAU;AAAA,EACV,eAAe;AAAA,EACf,UAAU;AAAA,EACV,UAAU;AAAA,EACV,aAAa;AAAA,EACb,UAAU;AAAA,EACV,WAAW;AAAA,EACX,cAAc;AAChB;AAEO,MAAM,cAAc,CAAC,QAC1B,cAAc,GAAG,KAAK,IAAI,QAAQ,MAAM,GAAG;AAGtC,SAAS,cAAc,UAA4B;AACxD,QAAM,WAAW,gBAAgB,QAAQ;AAEzC,MAAI,CAAC,SAAU,QAAO,CAAC;AAEvB,SAAO,MAAM,QAAQ,QAAQ,IAAI,WAAW,CAAC,QAAQ;AACvD;AAOO,SAAS,eACd,UACA,cACiB;AACjB,QAAM,SAAS,cAAc,QAAQ;AAErC,MAAI,CAAC,gBAAgB,CAAC,OAAO,OAAQ,QAAO;AAE5C,SAAO,OAAO,KAAK,CAAC,QAAQ,aAAa,GAAG,GAAG,QAAQ,IAAI,OAAO;AACpE;AAaO,SAAS,cACd,UACA,OACA,UACA,gBAA+B,MAChB;AACf,QAAM,aAAa,MAChB,OAAO,CAAC,MAAM,EAAE,OAAO,aAAa,EACpC,OAAO,CAAC,MAAM,SAAS,KAAK,CAAC,QAAQ,EAAE,SAAS,GAAG,GAAG,QAAQ,CAAC,EAC/D,IAAI,CAAC,UAAU;AAAA,IACd;AAAA,IACA,aAAa,WAAW,KAAK,OAAO,QAAQ,KAAK,OAAO;AAAA,EAC1D,EAAE;AAEJ,aAAW,KAAK,CAAC,GAAG,MAAM,aAAa,EAAE,aAAa,EAAE,WAAW,CAAC;AAEpE,SAAO,WAAW,CAAC,KAAK;AAC1B;AAMO,SAAS,mBACd,cACA,KACiB;AACjB,MAAI,CAAC,aAAc,QAAO;AAE1B,QAAM,SAAS,OAAO,KAAK,YAAY,EAAE;AAAA,IACvC,CAAC,QAAQ,aAAa,GAAG,GAAG;AAAA,EAC9B;AAEA,SAAO,IAAI,QAAQ,IAAI,KAAK,OAAO,CAAC,QAAQ,OAAO,SAAS,GAAG,CAAC,IAAI;AACtE;","names":[]}

package/dist/plan-card-api.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Paying the Olive plan by card, through the payment gateway's hosted checkout. The card is
+ * entered on the gateway's page and never reaches the dashboard or the engine.
+ */
+export type PlanCardStatus = "pending" | "active" | "failed" | "replaced";
+export interface PlanCardView {
+    reference: string;
+    status: PlanCardStatus;
+    /** What the plan costs a month, in minor units of `currency`. */
+    amountMinor: string;
+    currency: string;
+    paidAt: string | null;
+}
+export interface PlanCardState {
+    /** Whether this merchant can pay by card: the gateway is on, the plan is linked and priced. */
+    available: boolean;
+    /** The card paying now, or the latest attempt. */
+    card: PlanCardView | null;
+}
+export declare const PLAN_CARD_KEY: string[];
+export declare const planCardApi: {
+    state: () => Promise<PlanCardState>;
+    /** Starts the gateway's checkout: send the merchant to `checkoutUrl`. */
+    start: () => Promise<{
+        checkoutUrl: string;
+        reference: string;
+    }>;
+    /** After the merchant comes back: asks the gateway what happened and records it. */
+    confirm: (reference: string) => Promise<PlanCardView | null>;
+};
+/** What the page says about a card, in one sentence. */
+export declare function planCardLine(card: PlanCardView | null, amountText: string): string;
+/** The address to leave the card return in: `?card=<reference>` is read and removed. */
+export declare const CARD_RETURN_PARAM = "card";

package/dist/plan-card-api.js

@@ -0,0 +1,30 @@
+import { apiFetch } from "./api";
+const PLAN_CARD_KEY = ["pricing", "subscription", "card"];
+const planCardApi = {
+  state: () => apiFetch("/pricing/subscription/card"),
+  /** Starts the gateway's checkout: send the merchant to `checkoutUrl`. */
+  start: () => apiFetch("/pricing/subscription/card", {
+    method: "POST",
+    body: JSON.stringify({})
+  }),
+  /** After the merchant comes back: asks the gateway what happened and records it. */
+  confirm: (reference) => apiFetch("/pricing/subscription/card/confirm", {
+    method: "POST",
+    body: JSON.stringify({ reference })
+  })
+};
+function planCardLine(card, amountText) {
+  if (!card) return "Pay your plan by card instead of from your wallet.";
+  if (card.status === "active") return `Your plan is paid by card: ${amountText} a month.`;
+  if (card.status === "pending") return "Waiting for the card payment to finish.";
+  if (card.status === "failed") return "Your last card payment did not go through.";
+  return "Pay your plan by card instead of from your wallet.";
+}
+const CARD_RETURN_PARAM = "card";
+export {
+  CARD_RETURN_PARAM,
+  PLAN_CARD_KEY,
+  planCardApi,
+  planCardLine
+};
+//# sourceMappingURL=plan-card-api.js.map

package/dist/plan-card-api.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/plan-card-api.ts"],"sourcesContent":["import { apiFetch } from \"./api\";\n\n/**\n * Paying the Olive plan by card, through the payment gateway's hosted checkout. The card is\n * entered on the gateway's page and never reaches the dashboard or the engine.\n */\nexport type PlanCardStatus = \"pending\" | \"active\" | \"failed\" | \"replaced\";\n\nexport interface PlanCardView {\n  reference: string;\n  status: PlanCardStatus;\n  /** What the plan costs a month, in minor units of `currency`. */\n  amountMinor: string;\n  currency: string;\n  paidAt: string | null;\n}\n\nexport interface PlanCardState {\n  /** Whether this merchant can pay by card: the gateway is on, the plan is linked and priced. */\n  available: boolean;\n  /** The card paying now, or the latest attempt. */\n  card: PlanCardView | null;\n}\n\nexport const PLAN_CARD_KEY = [\"pricing\", \"subscription\", \"card\"];\n\nexport const planCardApi = {\n  state: () => apiFetch<PlanCardState>(\"/pricing/subscription/card\"),\n\n  /** Starts the gateway's checkout: send the merchant to `checkoutUrl`. */\n  start: () =>\n    apiFetch<{ checkoutUrl: string; reference: string }>(\"/pricing/subscription/card\", {\n      method: \"POST\",\n      body: JSON.stringify({}),\n    }),\n\n  /** After the merchant comes back: asks the gateway what happened and records it. */\n  confirm: (reference: string) =>\n    apiFetch<PlanCardView | null>(\"/pricing/subscription/card/confirm\", {\n      method: \"POST\",\n      body: JSON.stringify({ reference }),\n    }),\n};\n\n/** What the page says about a card, in one sentence. */\nexport function planCardLine(card: PlanCardView | null, amountText: string): string {\n  if (!card) return \"Pay your plan by card instead of from your wallet.\";\n  if (card.status === \"active\") return `Your plan is paid by card: ${amountText} a month.`;\n  if (card.status === \"pending\") return \"Waiting for the card payment to finish.\";\n  if (card.status === \"failed\") return \"Your last card payment did not go through.\";\n\n  return \"Pay your plan by card instead of from your wallet.\";\n}\n\n/** The address to leave the card return in: `?card=<reference>` is read and removed. */\nexport const CARD_RETURN_PARAM = \"card\";\n"],"mappings":"AAAA,SAAS,gBAAgB;AAwBlB,MAAM,gBAAgB,CAAC,WAAW,gBAAgB,MAAM;AAExD,MAAM,cAAc;AAAA,EACzB,OAAO,MAAM,SAAwB,4BAA4B;AAAA;AAAA,EAGjE,OAAO,MACL,SAAqD,8BAA8B;AAAA,IACjF,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,CAAC,CAAC;AAAA,EACzB,CAAC;AAAA;AAAA,EAGH,SAAS,CAAC,cACR,SAA8B,sCAAsC;AAAA,IAClE,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,EAAE,UAAU,CAAC;AAAA,EACpC,CAAC;AACL;AAGO,SAAS,aAAa,MAA2B,YAA4B;AAClF,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,KAAK,WAAW,SAAU,QAAO,8BAA8B,UAAU;AAC7E,MAAI,KAAK,WAAW,UAAW,QAAO;AACtC,MAAI,KAAK,WAAW,SAAU,QAAO;AAErC,SAAO;AACT;AAGO,MAAM,oBAAoB;","names":[]}

package/dist/plan-price.d.ts

@@ -0,0 +1,34 @@
+import type { Prices } from "./admin-pricing-api";
+/**
+ * "₦15,000" from "1500000" NGN. With the exponent the API sent, the digits
+ * are split there; without one, Intl's own exponent for the code is used.
+ */
+export declare function formatPlanPrice(minor: string, currency: string, exponent?: number | null): string;
+/** NGN first, then the rest by code. */
+export declare const byCurrency: (a: string, b: string) => number;
+/**
+ * The one price to show for a plan whose prices are plain numbers in major
+ * units: naira when the plan has a naira price, then the preferred currency
+ * if it has one, then the first other currency by code. Never a conversion,
+ * and the currency comes back with the amount so it is never shown under
+ * another currency's sign.
+ */
+export declare function pickPlanPrice(prices: Record<string, number> | null | undefined, preferred?: string | null): {
+    currency: string;
+    amount: number;
+} | null;
+/**
+ * The price lines to show. Asked for one currency (the single price a
+ * merchant sees): a plan with a naira price shows just that, else the
+ * currency asked for if the plan has it, else every currency it has. Asked
+ * for none, every currency it has, one line each, naira first. The exponent
+ * only applies to the currency asked for.
+ */
+export declare function planPriceLines(prices: Prices, currency?: string | null, exponent?: number | null): string[];
+/** "₦15,000 a month", or "₦15,000 a month · $10 a month" across currencies. */
+export declare function planPriceText(prices: Prices, currency?: string | null, exponent?: number | null): string;
+/**
+ * Orders two minor-unit amounts as bigints: negative when `a` is cheaper.
+ * A missing amount sorts after any amount.
+ */
+export declare function compareMinor(a: string | null | undefined, b: string | null | undefined): number;

package/dist/plan-price.js

@@ -0,0 +1,57 @@
+import { formatMinor } from "./money-minor";
+const fixed = (currency, exponent) => new Intl.NumberFormat("en", {
+  style: "currency",
+  currency,
+  currencyDisplay: "narrowSymbol",
+  minimumFractionDigits: exponent,
+  maximumFractionDigits: exponent
+});
+function formatPlanPrice(minor, currency, exponent) {
+  if (exponent === void 0 || exponent === null) {
+    return formatMinor(minor, currency, { trimZeros: true });
+  }
+  const digits = minor.replace(/^0+(?=\d)/, "").padStart(exponent + 1, "0");
+  const whole = digits.slice(0, digits.length - exponent);
+  const fraction = digits.slice(digits.length - exponent);
+  const decimal = fraction ? `${whole}.${fraction}` : whole;
+  let text;
+  try {
+    text = fixed(currency, exponent).format(decimal);
+  } catch {
+    text = `${currency} ${decimal}`;
+  }
+  return text.replace(/[.,]0+(?=\D*$)/, "");
+}
+const byCurrency = (a, b) => a === "NGN" ? -1 : b === "NGN" ? 1 : a.localeCompare(b);
+function pickPlanPrice(prices, preferred) {
+  if (!prices) return null;
+  const code = prices["NGN"] !== void 0 ? "NGN" : preferred && prices[preferred] !== void 0 ? preferred : Object.keys(prices).sort((a, b) => a.localeCompare(b))[0];
+  return code === void 0 ? null : { currency: code, amount: prices[code] };
+}
+function planPriceLines(prices, currency, exponent) {
+  if (currency && prices["NGN"] !== void 0) {
+    return [formatPlanPrice(prices["NGN"], "NGN", currency === "NGN" ? exponent : void 0)];
+  }
+  if (currency && prices[currency] !== void 0) {
+    return [formatPlanPrice(prices[currency], currency, exponent)];
+  }
+  return Object.keys(prices).sort(byCurrency).map((code) => formatPlanPrice(prices[code], code));
+}
+function planPriceText(prices, currency, exponent) {
+  const lines = planPriceLines(prices, currency, exponent);
+  return lines.length ? lines.map((l) => `${l} a month`).join(" \xB7 ") : "No price";
+}
+function compareMinor(a, b) {
+  if (a == null || b == null) return a == null ? b == null ? 0 : 1 : -1;
+  const diff = BigInt(a) - BigInt(b);
+  return diff < BigInt(0) ? -1 : diff > BigInt(0) ? 1 : 0;
+}
+export {
+  byCurrency,
+  compareMinor,
+  formatPlanPrice,
+  pickPlanPrice,
+  planPriceLines,
+  planPriceText
+};
+//# sourceMappingURL=plan-price.js.map

package/dist/plan-price.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/plan-price.ts"],"sourcesContent":["import { formatMinor } from \"./money-minor\";\nimport type { Prices } from \"./admin-pricing-api\";\n\n/**\n * Plan prices as people read them. Amounts stay minor-unit strings and are\n * split at the currency's exponent as text: never divided by 100, never\n * added across currencies.\n */\n\nconst fixed = (currency: string, exponent: number) =>\n  new Intl.NumberFormat(\"en\", {\n    style: \"currency\",\n    currency,\n    currencyDisplay: \"narrowSymbol\",\n    minimumFractionDigits: exponent,\n    maximumFractionDigits: exponent,\n  });\n\n/**\n * \"₦15,000\" from \"1500000\" NGN. With the exponent the API sent, the digits\n * are split there; without one, Intl's own exponent for the code is used.\n */\nexport function formatPlanPrice(\n  minor: string,\n  currency: string,\n  exponent?: number | null\n): string {\n  if (exponent === undefined || exponent === null) {\n    return formatMinor(minor, currency, { trimZeros: true });\n  }\n\n  const digits = minor.replace(/^0+(?=\\d)/, \"\").padStart(exponent + 1, \"0\");\n  const whole = digits.slice(0, digits.length - exponent);\n  const fraction = digits.slice(digits.length - exponent);\n  const decimal = fraction ? `${whole}.${fraction}` : whole;\n  let text: string;\n\n  try {\n    text = fixed(currency, exponent).format(decimal as unknown as number);\n  } catch {\n    text = `${currency} ${decimal}`;\n  }\n\n  return text.replace(/[.,]0+(?=\\D*$)/, \"\");\n}\n\n/** NGN first, then the rest by code. */\nexport const byCurrency = (a: string, b: string) =>\n  a === \"NGN\" ? -1 : b === \"NGN\" ? 1 : a.localeCompare(b);\n\n/**\n * The one price to show for a plan whose prices are plain numbers in major\n * units: naira when the plan has a naira price, then the preferred currency\n * if it has one, then the first other currency by code. Never a conversion,\n * and the currency comes back with the amount so it is never shown under\n * another currency's sign.\n */\nexport function pickPlanPrice(\n  prices: Record<string, number> | null | undefined,\n  preferred?: string | null\n): { currency: string; amount: number } | null {\n  if (!prices) return null;\n\n  const code =\n    prices[\"NGN\"] !== undefined\n      ? \"NGN\"\n      : preferred && prices[preferred] !== undefined\n        ? preferred\n        : Object.keys(prices).sort((a, b) => a.localeCompare(b))[0];\n\n  return code === undefined ? null : { currency: code, amount: prices[code] as number };\n}\n\n/**\n * The price lines to show. Asked for one currency (the single price a\n * merchant sees): a plan with a naira price shows just that, else the\n * currency asked for if the plan has it, else every currency it has. Asked\n * for none, every currency it has, one line each, naira first. The exponent\n * only applies to the currency asked for.\n */\nexport function planPriceLines(\n  prices: Prices,\n  currency?: string | null,\n  exponent?: number | null\n): string[] {\n  if (currency && prices[\"NGN\"] !== undefined) {\n    return [formatPlanPrice(prices[\"NGN\"], \"NGN\", currency === \"NGN\" ? exponent : undefined)];\n  }\n\n  if (currency && prices[currency] !== undefined) {\n    return [formatPlanPrice(prices[currency], currency, exponent)];\n  }\n\n  return Object.keys(prices)\n    .sort(byCurrency)\n    .map((code) => formatPlanPrice(prices[code], code));\n}\n\n/** \"₦15,000 a month\", or \"₦15,000 a month · $10 a month\" across currencies. */\nexport function planPriceText(\n  prices: Prices,\n  currency?: string | null,\n  exponent?: number | null\n): string {\n  const lines = planPriceLines(prices, currency, exponent);\n\n  return lines.length ? lines.map((l) => `${l} a month`).join(\" · \") : \"No price\";\n}\n\n/**\n * Orders two minor-unit amounts as bigints: negative when `a` is cheaper.\n * A missing amount sorts after any amount.\n */\nexport function compareMinor(\n  a: string | null | undefined,\n  b: string | null | undefined\n): number {\n  if (a == null || b == null) return a == null ? (b == null ? 0 : 1) : -1;\n\n  const diff = BigInt(a) - BigInt(b);\n\n  return diff < BigInt(0) ? -1 : diff > BigInt(0) ? 1 : 0;\n}\n"],"mappings":"AAAA,SAAS,mBAAmB;AAS5B,MAAM,QAAQ,CAAC,UAAkB,aAC/B,IAAI,KAAK,aAAa,MAAM;AAAA,EAC1B,OAAO;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA,EACjB,uBAAuB;AAAA,EACvB,uBAAuB;AACzB,CAAC;AAMI,SAAS,gBACd,OACA,UACA,UACQ;AACR,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,WAAO,YAAY,OAAO,UAAU,EAAE,WAAW,KAAK,CAAC;AAAA,EACzD;AAEA,QAAM,SAAS,MAAM,QAAQ,aAAa,EAAE,EAAE,SAAS,WAAW,GAAG,GAAG;AACxE,QAAM,QAAQ,OAAO,MAAM,GAAG,OAAO,SAAS,QAAQ;AACtD,QAAM,WAAW,OAAO,MAAM,OAAO,SAAS,QAAQ;AACtD,QAAM,UAAU,WAAW,GAAG,KAAK,IAAI,QAAQ,KAAK;AACpD,MAAI;AAEJ,MAAI;AACF,WAAO,MAAM,UAAU,QAAQ,EAAE,OAAO,OAA4B;AAAA,EACtE,QAAQ;AACN,WAAO,GAAG,QAAQ,IAAI,OAAO;AAAA,EAC/B;AAEA,SAAO,KAAK,QAAQ,kBAAkB,EAAE;AAC1C;AAGO,MAAM,aAAa,CAAC,GAAW,MACpC,MAAM,QAAQ,KAAK,MAAM,QAAQ,IAAI,EAAE,cAAc,CAAC;AASjD,SAAS,cACd,QACA,WAC6C;AAC7C,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,OACJ,OAAO,KAAK,MAAM,SACd,QACA,aAAa,OAAO,SAAS,MAAM,SACjC,YACA,OAAO,KAAK,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;AAEhE,SAAO,SAAS,SAAY,OAAO,EAAE,UAAU,MAAM,QAAQ,OAAO,IAAI,EAAY;AACtF;AASO,SAAS,eACd,QACA,UACA,UACU;AACV,MAAI,YAAY,OAAO,KAAK,MAAM,QAAW;AAC3C,WAAO,CAAC,gBAAgB,OAAO,KAAK,GAAG,OAAO,aAAa,QAAQ,WAAW,MAAS,CAAC;AAAA,EAC1F;AAEA,MAAI,YAAY,OAAO,QAAQ,MAAM,QAAW;AAC9C,WAAO,CAAC,gBAAgB,OAAO,QAAQ,GAAG,UAAU,QAAQ,CAAC;AAAA,EAC/D;AAEA,SAAO,OAAO,KAAK,MAAM,EACtB,KAAK,UAAU,EACf,IAAI,CAAC,SAAS,gBAAgB,OAAO,IAAI,GAAG,IAAI,CAAC;AACtD;AAGO,SAAS,cACd,QACA,UACA,UACQ;AACR,QAAM,QAAQ,eAAe,QAAQ,UAAU,QAAQ;AAEvD,SAAO,MAAM,SAAS,MAAM,IAAI,CAAC,MAAM,GAAG,CAAC,UAAU,EAAE,KAAK,QAAK,IAAI;AACvE;AAMO,SAAS,aACd,GACA,GACQ;AACR,MAAI,KAAK,QAAQ,KAAK,KAAM,QAAO,KAAK,OAAQ,KAAK,OAAO,IAAI,IAAK;AAErE,QAAM,OAAO,OAAO,CAAC,IAAI,OAAO,CAAC;AAEjC,SAAO,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,OAAO,CAAC,IAAI,IAAI;AACxD;","names":[]}

package/dist/post-login-target.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Where a signed-in visitor goes, and whether getting there costs a reload.
+ *
+ * `redirect` used to be handed straight to `window.location.href`. For a
+ * foreign URL that is right; for an in-app path it throws away the running
+ * application and re-boots auth from cold — and once the dashboard began
+ * sending its own path here when a session could not be confirmed, that was a
+ * reload loop rather than a round trip.
+ *
+ * ANYTHING NOT PROVABLY SAFE GOES TO THE DASHBOARD.
+ *
+ * `redirect` arrives in the query string, which means anybody can put anything
+ * in it and send someone the link. The first version of this only asked
+ * whether the value started with a slash, so every other shape fell through to
+ * `window.location.href = redirect` — an open redirect to any site on the
+ * internet off a potter.com URL, which is the classic phishing setup, and
+ * `javascript:` on top of it. A login screen is exactly the page attackers
+ * want that on.
+ *
+ * So the rule inverts: a value is followed only if it is recognisably a path
+ * inside this app, and everything else goes to the dashboard.
+ */
+/** Always an in-app path, so every caller can navigate with the router. */
+export declare function postLoginTarget(redirect: string | null | undefined): string;

package/dist/post-login-target.js

@@ -0,0 +1,12 @@
+function postLoginTarget(redirect) {
+  const fallback = "/dashboard";
+  if (!redirect) return fallback;
+  if (redirect.startsWith("/") && !redirect.startsWith("//") && !redirect.startsWith("/\\")) {
+    return redirect;
+  }
+  return fallback;
+}
+export {
+  postLoginTarget
+};
+//# sourceMappingURL=post-login-target.js.map

package/dist/post-login-target.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/post-login-target.ts"],"sourcesContent":["/**\n * Where a signed-in visitor goes, and whether getting there costs a reload.\n *\n * `redirect` used to be handed straight to `window.location.href`. For a\n * foreign URL that is right; for an in-app path it throws away the running\n * application and re-boots auth from cold — and once the dashboard began\n * sending its own path here when a session could not be confirmed, that was a\n * reload loop rather than a round trip.\n *\n * ANYTHING NOT PROVABLY SAFE GOES TO THE DASHBOARD.\n *\n * `redirect` arrives in the query string, which means anybody can put anything\n * in it and send someone the link. The first version of this only asked\n * whether the value started with a slash, so every other shape fell through to\n * `window.location.href = redirect` — an open redirect to any site on the\n * internet off a potter.com URL, which is the classic phishing setup, and\n * `javascript:` on top of it. A login screen is exactly the page attackers\n * want that on.\n *\n * So the rule inverts: a value is followed only if it is recognisably a path\n * inside this app, and everything else goes to the dashboard.\n */\n\n/** Always an in-app path, so every caller can navigate with the router. */\nexport function postLoginTarget(redirect: string | null | undefined): string {\n  const fallback = '/dashboard';\n  if (!redirect) return fallback;\n\n  /**\n   * An in-app path. `//host` and `/\\host` are excluded deliberately: both\n   * start with a slash, both look relative, and both are absolute URLs to\n   * somebody else's origin — the backslash form because browsers normalise it.\n   */\n  if (\n    redirect.startsWith('/') &&\n    !redirect.startsWith('//') &&\n    !redirect.startsWith('/\\\\')\n  ) {\n    return redirect;\n  }\n\n  /**\n   * Anything else is discarded, including well-formed absolute URLs.\n   *\n   * Every caller in this app passes a path — the check-in screen, the invite\n   * screen, the dashboard's own session redirect. Nothing needs to hand off to\n   * another origin, so there is no allowlist to maintain and no lookalike\n   * domain to get wrong. If a cross-origin handoff is ever wanted it should be\n   * added deliberately, with the hosts written down, rather than inherited\n   * from a branch nobody uses.\n   */\n  return fallback;\n}\n"],"mappings":"AAwBO,SAAS,gBAAgB,UAA6C;AAC3E,QAAM,WAAW;AACjB,MAAI,CAAC,SAAU,QAAO;AAOtB,MACE,SAAS,WAAW,GAAG,KACvB,CAAC,SAAS,WAAW,IAAI,KACzB,CAAC,SAAS,WAAW,KAAK,GAC1B;AACA,WAAO;AAAA,EACT;AAYA,SAAO;AACT;","names":[]}