keystone-design-bootstrap 1.0.87 → 1.0.88

package/dist/next/providers/ssr-provider.d.ts

@@ -1,12 +0,0 @@
-import React__default from 'react';
-
-/**
- * React Aria relies on an SSR id provider for deterministic ids between
- * server-rendered HTML and client hydration. Without this, you can get
- * hydration mismatch warnings for `id`/`htmlFor` attributes.
- */
-declare function KeystoneSSRProvider(props: {
-    children: React__default.ReactNode;
-}): React__default.JSX.Element;
-
-export { KeystoneSSRProvider };

package/dist/next/providers/ssr-provider.js

@@ -1,12 +0,0 @@
-"use client";
-
-// src/next/providers/ssr-provider.tsx
-import React from "react";
-import { SSRProvider } from "react-aria";
-function KeystoneSSRProvider(props) {
-  return /* @__PURE__ */ React.createElement(SSRProvider, null, props.children);
-}
-export {
-  KeystoneSSRProvider
-};
-//# sourceMappingURL=ssr-provider.js.map

package/dist/next/providers/ssr-provider.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/next/providers/ssr-provider.tsx"],"sourcesContent":["'use client';\n\nimport React from 'react';\nimport { SSRProvider } from 'react-aria';\n\n/**\n * React Aria relies on an SSR id provider for deterministic ids between\n * server-rendered HTML and client hydration. Without this, you can get\n * hydration mismatch warnings for `id`/`htmlFor` attributes.\n */\nexport function KeystoneSSRProvider(props: { children: React.ReactNode }) {\n  return <SSRProvider>{props.children}</SSRProvider>;\n}\n\n"],"mappings":";;;AAEA,OAAO,WAAW;AAClB,SAAS,mBAAmB;AAOrB,SAAS,oBAAoB,OAAsC;AACxE,SAAO,oCAAC,mBAAa,MAAM,QAAS;AACtC;","names":[]}

package/dist/next/routes/chat.d.ts

@@ -1,26 +0,0 @@
-/**
- * Chat API proxy route handlers for Next.js App Router.
- *
- * Usage in a site/template:
- *   // app/api/chat/route.ts
- *   export { GET, POST } from 'keystone-design-bootstrap/next/routes/chat';
- *
- * Supports both anonymous (session-based) and authenticated (contact-driven) flows.
- * Both flows hit the same backend endpoint (`/public/messages`); the discriminator
- * is whether `identifier` (session string) or `contact_id` (integer) is supplied.
- *
- * Env (server-side only):
- * - API_URL (default: http://localhost:3000/api/v1)
- * - API_KEY
- */
-type JsonResponder = (body: unknown, init?: ResponseInit) => Response;
-declare function createChatRouteHandlers(deps?: {
-    NextResponse?: {
-        json: JsonResponder;
-    };
-}): {
-    POST: (request: Request) => Promise<Response>;
-    GET: (request: Request) => Promise<Response>;
-};
-
-export { createChatRouteHandlers };

package/dist/next/routes/chat.js

@@ -1,160 +0,0 @@
-var __defProp = Object.defineProperty;
-var __defProps = Object.defineProperties;
-var __getOwnPropDescs = Object.getOwnPropertyDescriptors;
-var __getOwnPropSymbols = Object.getOwnPropertySymbols;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __propIsEnum = Object.prototype.propertyIsEnumerable;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __spreadValues = (a, b) => {
-  for (var prop in b || (b = {}))
-    if (__hasOwnProp.call(b, prop))
-      __defNormalProp(a, prop, b[prop]);
-  if (__getOwnPropSymbols)
-    for (var prop of __getOwnPropSymbols(b)) {
-      if (__propIsEnum.call(b, prop))
-        __defNormalProp(a, prop, b[prop]);
-    }
-  return a;
-};
-var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));
-
-// src/next/routes/proxy-headers.ts
-function clientContextHeaders(request) {
-  var _a, _b;
-  const ip = request.headers.get("x-real-ip") || ((_b = (_a = request.headers.get("x-forwarded-for")) == null ? void 0 : _a.split(",")[0]) == null ? void 0 : _b.trim());
-  const ua = request.headers.get("user-agent");
-  const cookieHeader = request.headers.get("cookie") || "";
-  const cookies = Object.fromEntries(
-    cookieHeader.split(";").map((c) => {
-      const [k, ...v] = c.trim().split("=");
-      return [k, v.join("=")];
-    })
-  );
-  const fbp = cookies["_fbp"];
-  const fbc = cookies["_fbc"];
-  const headers = {};
-  if (ip) headers["X-Real-Client-IP"] = ip;
-  if (ua) headers["X-Real-Client-UA"] = ua;
-  if (fbp) headers["X-Meta-FBP"] = fbp;
-  if (fbc) headers["X-Meta-FBC"] = fbc;
-  return headers;
-}
-
-// src/next/routes/chat.ts
-var API_URL = process.env.API_URL || "http://localhost:3000/api/v1";
-var API_KEY = process.env.API_KEY || "";
-var CONSUMER_TOKEN_COOKIE = "ks_consumer_token";
-function cookieValue(cookieHeader, key) {
-  var _a;
-  if (!cookieHeader) return null;
-  const token = (_a = cookieHeader.split(";").map((part) => part.trim()).find((part) => part.startsWith(`${key}=`))) == null ? void 0 : _a.split("=").slice(1).join("=");
-  return token ? decodeURIComponent(token) : null;
-}
-function createChatRouteHandlers(deps) {
-  var _a, _b;
-  const json = (_b = (_a = deps == null ? void 0 : deps.NextResponse) == null ? void 0 : _a.json) != null ? _b : ((body, init) => Response.json(body, init));
-  return {
-    // POST /api/chat — send a message (session-based or contact-driven)
-    POST: async (request) => {
-      try {
-        const body = await request.json();
-        const { identifier, contact_id, body: messageBody, display_name, page_url } = body;
-        if (!messageBody) {
-          return json({ success: false, error: "Message body is required." }, { status: 400 });
-        }
-        if (!identifier && !contact_id) {
-          return json(
-            { success: false, error: "identifier or contact_id is required." },
-            { status: 400 }
-          );
-        }
-        const response = await fetch(`${API_URL}/public/messages`, {
-          method: "POST",
-          headers: __spreadValues({
-            "Content-Type": "application/json",
-            "X-API-Key": API_KEY
-          }, clientContextHeaders(request)),
-          body: JSON.stringify({ identifier, contact_id, body: messageBody, display_name, page_url })
-        });
-        const data = await response.json();
-        if (!response.ok) {
-          return json(
-            { success: false, error: data.error || "Failed to send message. Please try again." },
-            { status: response.status }
-          );
-        }
-        const responseData = data.data || {};
-        const cableUrl = API_URL.replace(/\/api\/v1\/?$/, "").replace(/^http/, "ws") + "/cable";
-        return json({ success: true, data: __spreadProps(__spreadValues({}, responseData), { cable_url: cableUrl }) });
-      } catch (error) {
-        console.error("Chat message error:", error);
-        return json({ success: false, error: "Network error. Please try again later." }, { status: 500 });
-      }
-    },
-    // GET /api/chat?identifier=... or ?contact_id=... — load message history
-    GET: async (request) => {
-      try {
-        const { searchParams } = new URL(request.url);
-        const action = searchParams.get("action");
-        const identifier = searchParams.get("identifier");
-        const contactId = searchParams.get("contact_id");
-        if (action === "realtime_token") {
-          if (!identifier && !contactId) {
-            return json({ success: false, error: "identifier or contact_id is required for realtime token." }, { status: 400 });
-          }
-          const response2 = contactId ? await (async () => {
-            const consumerToken = cookieValue(request.headers.get("cookie"), CONSUMER_TOKEN_COOKIE);
-            if (!consumerToken) {
-              return new Response(JSON.stringify({ error: "Unauthorized" }), {
-                status: 401,
-                headers: { "Content-Type": "application/json" }
-              });
-            }
-            return fetch(
-              `${API_URL}/consumer/me/contacts/${encodeURIComponent(contactId)}/realtime_token`,
-              {
-                headers: __spreadValues({
-                  Authorization: `Bearer ${consumerToken}`
-                }, API_KEY ? { "X-API-Key": API_KEY } : {})
-              }
-            );
-          })() : await fetch(
-            `${API_URL}/public/messages/realtime_token?identifier=${encodeURIComponent(identifier)}`,
-            { headers: { "X-API-Key": API_KEY } }
-          );
-          const data2 = await response2.json();
-          if (!response2.ok) {
-            return json(
-              { success: false, error: data2.error || "Failed to create realtime token." },
-              { status: response2.status }
-            );
-          }
-          const cableUrl = API_URL.replace(/\/api\/v1\/?$/, "").replace(/^http/, "ws") + "/cable";
-          return json({ success: true, data: __spreadProps(__spreadValues({}, data2.data || {}), { cable_url: cableUrl }) });
-        }
-        if (!identifier && !contactId) {
-          return json({ success: false, error: "identifier or contact_id is required." }, { status: 400 });
-        }
-        const query = contactId ? `contact_id=${encodeURIComponent(contactId)}` : `identifier=${encodeURIComponent(identifier)}`;
-        const response = await fetch(`${API_URL}/public/messages?${query}`, {
-          headers: { "X-API-Key": API_KEY }
-        });
-        const data = await response.json();
-        if (!response.ok) {
-          return json(
-            { success: false, error: data.error || "Failed to load messages." },
-            { status: response.status }
-          );
-        }
-        return json({ success: true, data: data.data || [] });
-      } catch (error) {
-        console.error("Chat history error:", error);
-        return json({ success: false, error: "Network error. Please try again later." }, { status: 500 });
-      }
-    }
-  };
-}
-export {
-  createChatRouteHandlers
-};
-//# sourceMappingURL=chat.js.map

package/dist/next/routes/chat.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/next/routes/proxy-headers.ts","../../../src/next/routes/chat.ts"],"sourcesContent":["/**\n * Extracts the real client IP, user-agent, and Meta browser cookies (_fbp / _fbc)\n * from an incoming Next.js route request and returns them as headers to forward\n * to the upstream Rails API.\n *\n * Cloudflare and other load-balancers set x-real-ip (or x-forwarded-for) on\n * inbound requests before they reach the Next.js function. Without this, the\n * Rails API sees the Next.js server IP instead of the real browser IP, which\n * produces inaccurate server-side CAPI signals.\n *\n * _fbp (Meta Browser ID) and _fbc (Meta Click ID) are first-party cookies set by\n * the Meta Pixel. Forwarding them allows the API to store them on the Contact\n * record so they can be included in all subsequent CAPI events — even those fired\n * from background jobs that have no live HTTP request.\n *\n * Convention:\n *   X-Real-Client-IP  — real browser IP\n *   X-Real-Client-UA  — real browser user-agent\n *   X-Meta-FBP        — value of the _fbp cookie\n *   X-Meta-FBC        — value of the _fbc cookie (or built from fbclid param)\n */\nexport function clientContextHeaders(request: Request): Record<string, string> {\n  const ip =\n    request.headers.get('x-real-ip') ||\n    request.headers.get('x-forwarded-for')?.split(',')[0]?.trim();\n  const ua = request.headers.get('user-agent');\n\n  const cookieHeader = request.headers.get('cookie') || '';\n  const cookies = Object.fromEntries(\n    cookieHeader.split(';').map((c) => {\n      const [k, ...v] = c.trim().split('=');\n      return [k, v.join('=')];\n    })\n  );\n  const fbp = cookies['_fbp'];\n  const fbc = cookies['_fbc'];\n\n  const headers: Record<string, string> = {};\n  if (ip) headers['X-Real-Client-IP'] = ip;\n  if (ua) headers['X-Real-Client-UA'] = ua;\n  if (fbp) headers['X-Meta-FBP'] = fbp;\n  if (fbc) headers['X-Meta-FBC'] = fbc;\n  return headers;\n}\n","/**\n * Chat API proxy route handlers for Next.js App Router.\n *\n * Usage in a site/template:\n *   // app/api/chat/route.ts\n *   export { GET, POST } from 'keystone-design-bootstrap/next/routes/chat';\n *\n * Supports both anonymous (session-based) and authenticated (contact-driven) flows.\n * Both flows hit the same backend endpoint (`/public/messages`); the discriminator\n * is whether `identifier` (session string) or `contact_id` (integer) is supplied.\n *\n * Env (server-side only):\n * - API_URL (default: http://localhost:3000/api/v1)\n * - API_KEY\n */\n\n// IMPORTANT:\n// Do NOT import NextRequest/NextResponse here.\n// When `keystone-design-bootstrap` is used as a local file dependency, it may have its own\n// `next` installation under its own `node_modules`, which causes type identity conflicts\n// for route handlers. Instead, export a factory so the consuming app can pass in its\n// own `NextResponse` (from its own `next/server`) while we keep the core logic shared.\n\nimport { clientContextHeaders } from './proxy-headers';\n\nconst API_URL = process.env.API_URL || 'http://localhost:3000/api/v1';\nconst API_KEY = process.env.API_KEY || '';\nconst CONSUMER_TOKEN_COOKIE = 'ks_consumer_token';\n\ntype JsonResponder = (body: unknown, init?: ResponseInit) => Response;\n\nfunction cookieValue(cookieHeader: string | null, key: string): string | null {\n  if (!cookieHeader) return null;\n  const token = cookieHeader\n    .split(';')\n    .map((part) => part.trim())\n    .find((part) => part.startsWith(`${key}=`))\n    ?.split('=')\n    .slice(1)\n    .join('=');\n  return token ? decodeURIComponent(token) : null;\n}\n\nexport function createChatRouteHandlers(deps?: { NextResponse?: { json: JsonResponder } }) {\n  const json: JsonResponder = deps?.NextResponse?.json ?? ((body, init) => Response.json(body, init));\n\n  return {\n    // POST /api/chat — send a message (session-based or contact-driven)\n    POST: async (request: Request): Promise<Response> => {\n      try {\n        const body = await request.json();\n        const { identifier, contact_id, body: messageBody, display_name, page_url } = body;\n\n        if (!messageBody) {\n          return json({ success: false, error: 'Message body is required.' }, { status: 400 });\n        }\n        if (!identifier && !contact_id) {\n          return json(\n            { success: false, error: 'identifier or contact_id is required.' },\n            { status: 400 }\n          );\n        }\n\n        const response = await fetch(`${API_URL}/public/messages`, {\n          method: 'POST',\n          headers: {\n            'Content-Type': 'application/json',\n            'X-API-Key': API_KEY,\n            ...clientContextHeaders(request),\n          },\n          body: JSON.stringify({ identifier, contact_id, body: messageBody, display_name, page_url }),\n        });\n\n        const data = await response.json();\n        if (!response.ok) {\n          return json(\n            { success: false, error: data.error || 'Failed to send message. Please try again.' },\n            { status: response.status }\n          );\n        }\n        const responseData = data.data || {};\n        const cableUrl = API_URL.replace(/\\/api\\/v1\\/?$/, '').replace(/^http/, 'ws') + '/cable';\n        return json({ success: true, data: { ...responseData, cable_url: cableUrl } });\n      } catch (error) {\n        console.error('Chat message error:', error);\n        return json({ success: false, error: 'Network error. Please try again later.' }, { status: 500 });\n      }\n    },\n\n    // GET /api/chat?identifier=... or ?contact_id=... — load message history\n    GET: async (request: Request): Promise<Response> => {\n      try {\n        const { searchParams } = new URL(request.url);\n        const action = searchParams.get('action');\n        const identifier = searchParams.get('identifier');\n        const contactId = searchParams.get('contact_id');\n\n        if (action === 'realtime_token') {\n          if (!identifier && !contactId) {\n            return json({ success: false, error: 'identifier or contact_id is required for realtime token.' }, { status: 400 });\n          }\n\n          const response = contactId\n            ? await (async () => {\n                const consumerToken = cookieValue(request.headers.get('cookie'), CONSUMER_TOKEN_COOKIE);\n                if (!consumerToken) {\n                  return new Response(JSON.stringify({ error: 'Unauthorized' }), {\n                    status: 401,\n                    headers: { 'Content-Type': 'application/json' },\n                  });\n                }\n                return fetch(\n                  `${API_URL}/consumer/me/contacts/${encodeURIComponent(contactId)}/realtime_token`,\n                  {\n                    headers: {\n                      Authorization: `Bearer ${consumerToken}`,\n                      ...(API_KEY ? { 'X-API-Key': API_KEY } : {}),\n                    },\n                  }\n                );\n              })()\n            : await fetch(\n                `${API_URL}/public/messages/realtime_token?identifier=${encodeURIComponent(identifier!)}`,\n                { headers: { 'X-API-Key': API_KEY } }\n              );\n          const data = await response.json();\n          if (!response.ok) {\n            return json(\n              { success: false, error: data.error || 'Failed to create realtime token.' },\n              { status: response.status }\n            );\n          }\n\n          const cableUrl = API_URL.replace(/\\/api\\/v1\\/?$/, '').replace(/^http/, 'ws') + '/cable';\n          return json({ success: true, data: { ...(data.data || {}), cable_url: cableUrl } });\n        }\n\n        if (!identifier && !contactId) {\n          return json({ success: false, error: 'identifier or contact_id is required.' }, { status: 400 });\n        }\n\n        const query = contactId\n          ? `contact_id=${encodeURIComponent(contactId)}`\n          : `identifier=${encodeURIComponent(identifier!)}`;\n\n        const response = await fetch(`${API_URL}/public/messages?${query}`, {\n          headers: { 'X-API-Key': API_KEY },\n        });\n\n        const data = await response.json();\n        if (!response.ok) {\n          return json(\n            { success: false, error: data.error || 'Failed to load messages.' },\n            { status: response.status }\n          );\n        }\n        return json({ success: true, data: data.data || [] });\n      } catch (error) {\n        console.error('Chat history error:', error);\n        return json({ success: false, error: 'Network error. Please try again later.' }, { status: 500 });\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBO,SAAS,qBAAqB,SAA0C;AArB/E;AAsBE,QAAM,KACJ,QAAQ,QAAQ,IAAI,WAAW,OAC/B,mBAAQ,QAAQ,IAAI,iBAAiB,MAArC,mBAAwC,MAAM,KAAK,OAAnD,mBAAuD;AACzD,QAAM,KAAK,QAAQ,QAAQ,IAAI,YAAY;AAE3C,QAAM,eAAe,QAAQ,QAAQ,IAAI,QAAQ,KAAK;AACtD,QAAM,UAAU,OAAO;AAAA,IACrB,aAAa,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM;AACjC,YAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG;AACpC,aAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC;AAAA,IACxB,CAAC;AAAA,EACH;AACA,QAAM,MAAM,QAAQ,MAAM;AAC1B,QAAM,MAAM,QAAQ,MAAM;AAE1B,QAAM,UAAkC,CAAC;AACzC,MAAI,GAAI,SAAQ,kBAAkB,IAAI;AACtC,MAAI,GAAI,SAAQ,kBAAkB,IAAI;AACtC,MAAI,IAAK,SAAQ,YAAY,IAAI;AACjC,MAAI,IAAK,SAAQ,YAAY,IAAI;AACjC,SAAO;AACT;;;AClBA,IAAM,UAAU,QAAQ,IAAI,WAAW;AACvC,IAAM,UAAU,QAAQ,IAAI,WAAW;AACvC,IAAM,wBAAwB;AAI9B,SAAS,YAAY,cAA6B,KAA4B;AA/B9E;AAgCE,MAAI,CAAC,aAAc,QAAO;AAC1B,QAAM,SAAQ,kBACX,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,EACzB,KAAK,CAAC,SAAS,KAAK,WAAW,GAAG,GAAG,GAAG,CAAC,MAH9B,mBAIV,MAAM,KACP,MAAM,GACN,KAAK;AACR,SAAO,QAAQ,mBAAmB,KAAK,IAAI;AAC7C;AAEO,SAAS,wBAAwB,MAAmD;AA3C3F;AA4CE,QAAM,QAAsB,wCAAM,iBAAN,mBAAoB,SAApB,aAA6B,CAAC,MAAM,SAAS,SAAS,KAAK,MAAM,IAAI;AAEjG,SAAO;AAAA;AAAA,IAEL,MAAM,OAAO,YAAwC;AACnD,UAAI;AACF,cAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,cAAM,EAAE,YAAY,YAAY,MAAM,aAAa,cAAc,SAAS,IAAI;AAE9E,YAAI,CAAC,aAAa;AAChB,iBAAO,KAAK,EAAE,SAAS,OAAO,OAAO,4BAA4B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QACrF;AACA,YAAI,CAAC,cAAc,CAAC,YAAY;AAC9B,iBAAO;AAAA,YACL,EAAE,SAAS,OAAO,OAAO,wCAAwC;AAAA,YACjE,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AAEA,cAAM,WAAW,MAAM,MAAM,GAAG,OAAO,oBAAoB;AAAA,UACzD,QAAQ;AAAA,UACR,SAAS;AAAA,YACP,gBAAgB;AAAA,YAChB,aAAa;AAAA,aACV,qBAAqB,OAAO;AAAA,UAEjC,MAAM,KAAK,UAAU,EAAE,YAAY,YAAY,MAAM,aAAa,cAAc,SAAS,CAAC;AAAA,QAC5F,CAAC;AAED,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO;AAAA,YACL,EAAE,SAAS,OAAO,OAAO,KAAK,SAAS,4CAA4C;AAAA,YACnF,EAAE,QAAQ,SAAS,OAAO;AAAA,UAC5B;AAAA,QACF;AACA,cAAM,eAAe,KAAK,QAAQ,CAAC;AACnC,cAAM,WAAW,QAAQ,QAAQ,iBAAiB,EAAE,EAAE,QAAQ,SAAS,IAAI,IAAI;AAC/E,eAAO,KAAK,EAAE,SAAS,MAAM,MAAM,iCAAK,eAAL,EAAmB,WAAW,SAAS,GAAE,CAAC;AAAA,MAC/E,SAAS,OAAO;AACd,gBAAQ,MAAM,uBAAuB,KAAK;AAC1C,eAAO,KAAK,EAAE,SAAS,OAAO,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClG;AAAA,IACF;AAAA;AAAA,IAGA,KAAK,OAAO,YAAwC;AAClD,UAAI;AACF,cAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,cAAM,SAAS,aAAa,IAAI,QAAQ;AACxC,cAAM,aAAa,aAAa,IAAI,YAAY;AAChD,cAAM,YAAY,aAAa,IAAI,YAAY;AAE/C,YAAI,WAAW,kBAAkB;AAC/B,cAAI,CAAC,cAAc,CAAC,WAAW;AAC7B,mBAAO,KAAK,EAAE,SAAS,OAAO,OAAO,2DAA2D,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,UACpH;AAEA,gBAAMA,YAAW,YACb,OAAO,YAAY;AACjB,kBAAM,gBAAgB,YAAY,QAAQ,QAAQ,IAAI,QAAQ,GAAG,qBAAqB;AACtF,gBAAI,CAAC,eAAe;AAClB,qBAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,eAAe,CAAC,GAAG;AAAA,gBAC7D,QAAQ;AAAA,gBACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,cAChD,CAAC;AAAA,YACH;AACA,mBAAO;AAAA,cACL,GAAG,OAAO,yBAAyB,mBAAmB,SAAS,CAAC;AAAA,cAChE;AAAA,gBACE,SAAS;AAAA,kBACP,eAAe,UAAU,aAAa;AAAA,mBAClC,UAAU,EAAE,aAAa,QAAQ,IAAI,CAAC;AAAA,cAE9C;AAAA,YACF;AAAA,UACF,GAAG,IACH,MAAM;AAAA,YACJ,GAAG,OAAO,8CAA8C,mBAAmB,UAAW,CAAC;AAAA,YACvF,EAAE,SAAS,EAAE,aAAa,QAAQ,EAAE;AAAA,UACtC;AACJ,gBAAMC,QAAO,MAAMD,UAAS,KAAK;AACjC,cAAI,CAACA,UAAS,IAAI;AAChB,mBAAO;AAAA,cACL,EAAE,SAAS,OAAO,OAAOC,MAAK,SAAS,mCAAmC;AAAA,cAC1E,EAAE,QAAQD,UAAS,OAAO;AAAA,YAC5B;AAAA,UACF;AAEA,gBAAM,WAAW,QAAQ,QAAQ,iBAAiB,EAAE,EAAE,QAAQ,SAAS,IAAI,IAAI;AAC/E,iBAAO,KAAK,EAAE,SAAS,MAAM,MAAM,iCAAMC,MAAK,QAAQ,CAAC,IAApB,EAAwB,WAAW,SAAS,GAAE,CAAC;AAAA,QACpF;AAEA,YAAI,CAAC,cAAc,CAAC,WAAW;AAC7B,iBAAO,KAAK,EAAE,SAAS,OAAO,OAAO,wCAAwC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QACjG;AAEA,cAAM,QAAQ,YACV,cAAc,mBAAmB,SAAS,CAAC,KAC3C,cAAc,mBAAmB,UAAW,CAAC;AAEjD,cAAM,WAAW,MAAM,MAAM,GAAG,OAAO,oBAAoB,KAAK,IAAI;AAAA,UAClE,SAAS,EAAE,aAAa,QAAQ;AAAA,QAClC,CAAC;AAED,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,YAAI,CAAC,SAAS,IAAI;AAChB,iBAAO;AAAA,YACL,EAAE,SAAS,OAAO,OAAO,KAAK,SAAS,2BAA2B;AAAA,YAClE,EAAE,QAAQ,SAAS,OAAO;AAAA,UAC5B;AAAA,QACF;AACA,eAAO,KAAK,EAAE,SAAS,MAAM,MAAM,KAAK,QAAQ,CAAC,EAAE,CAAC;AAAA,MACtD,SAAS,OAAO;AACd,gBAAQ,MAAM,uBAAuB,KAAK;AAC1C,eAAO,KAAK,EAAE,SAAS,OAAO,OAAO,yCAAyC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MAClG;AAAA,IACF;AAAA,EACF;AACF;","names":["response","data"]}

package/dist/next/routes/consumer-auth.d.ts

@@ -1,33 +0,0 @@
-/**
- * Consumer auth API route handlers for Next.js App Router.
- *
- * Usage in a customer site:
- *   // app/api/consumer/[action]/route.ts
- *   import { NextResponse } from 'next/server';
- *   import { createConsumerAuthHandlers } from 'keystone-design-bootstrap/next/routes/consumer-auth';
- *   export const { POST } = createConsumerAuthHandlers({ NextResponse });
- *
- * Handles: initiate, login, signup, send_code, verify_code, passwordless_auth, logout
- *
- * Env (server-side only):
- * - API_URL (default: http://localhost:3000/api/v1)
- * - API_KEY
- */
-type NextResponseLike = {
-    json: (body: unknown, init?: ResponseInit) => any;
-};
-/**
- * Creates a single POST handler that routes to the correct auth action based on
- * the dynamic `[action]` path segment.
- */
-declare function createConsumerAuthHandlers({ NextResponse }: {
-    NextResponse: NextResponseLike;
-}): {
-    POST: (request: Request, context: {
-        params: Promise<{
-            action: string;
-        }>;
-    }) => Promise<Response>;
-};
-
-export { createConsumerAuthHandlers };

package/dist/next/routes/consumer-auth.js

@@ -1,254 +0,0 @@
-var __defProp = Object.defineProperty;
-var __getOwnPropSymbols = Object.getOwnPropertySymbols;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __propIsEnum = Object.prototype.propertyIsEnumerable;
-var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
-var __spreadValues = (a, b) => {
-  for (var prop in b || (b = {}))
-    if (__hasOwnProp.call(b, prop))
-      __defNormalProp(a, prop, b[prop]);
-  if (__getOwnPropSymbols)
-    for (var prop of __getOwnPropSymbols(b)) {
-      if (__propIsEnum.call(b, prop))
-        __defNormalProp(a, prop, b[prop]);
-    }
-  return a;
-};
-
-// src/lib/consumer-session.ts
-var CONSUMER_TOKEN_COOKIE = "ks_consumer_token";
-
-// src/next/routes/proxy-headers.ts
-function clientContextHeaders(request) {
-  var _a, _b;
-  const ip = request.headers.get("x-real-ip") || ((_b = (_a = request.headers.get("x-forwarded-for")) == null ? void 0 : _a.split(",")[0]) == null ? void 0 : _b.trim());
-  const ua = request.headers.get("user-agent");
-  const cookieHeader = request.headers.get("cookie") || "";
-  const cookies = Object.fromEntries(
-    cookieHeader.split(";").map((c) => {
-      const [k, ...v] = c.trim().split("=");
-      return [k, v.join("=")];
-    })
-  );
-  const fbp = cookies["_fbp"];
-  const fbc = cookies["_fbc"];
-  const headers = {};
-  if (ip) headers["X-Real-Client-IP"] = ip;
-  if (ua) headers["X-Real-Client-UA"] = ua;
-  if (fbp) headers["X-Meta-FBP"] = fbp;
-  if (fbc) headers["X-Meta-FBC"] = fbc;
-  return headers;
-}
-
-// src/next/routes/consumer-auth.ts
-var COOKIE_MAX_AGE = 60 * 60 * 24 * 30;
-function getApiUrl() {
-  return process.env.API_URL || "http://localhost:3000/api/v1";
-}
-function getApiKey() {
-  return process.env.API_KEY || "";
-}
-function apiHeaders(request) {
-  const key = getApiKey();
-  return __spreadValues(__spreadValues({
-    "Content-Type": "application/json"
-  }, key ? { "X-API-Key": key } : {}), request ? clientContextHeaders(request) : {});
-}
-async function handleInitiate(request, NR) {
-  var _a;
-  const body = await request.json().catch(() => ({}));
-  const { email, phone } = body;
-  if (!email && !phone) {
-    return NR.json({ exists: null });
-  }
-  try {
-    const res = await fetch(`${getApiUrl()}/consumer/auth/initiate`, {
-      method: "POST",
-      headers: apiHeaders(request),
-      body: JSON.stringify({ email: email || void 0, phone: phone || void 0 })
-    });
-    if (res.status === 404) return NR.json({ exists: false });
-    if (!res.ok) return NR.json({ exists: null });
-    const json = await res.json().catch(() => ({}));
-    const data = json.data;
-    return NR.json({
-      exists: true,
-      firstName: (_a = data == null ? void 0 : data.first_name) != null ? _a : void 0,
-      hasPassword: (data == null ? void 0 : data.has_password) != null ? Boolean(data.has_password) : true
-    });
-  } catch (e) {
-    return NR.json({ exists: null });
-  }
-}
-async function handleLogin(request, NR) {
-  var _a;
-  const body = await request.json().catch(() => ({}));
-  const { email, phone, password } = body;
-  if (!email && !phone) return NR.json({ error: "Email or phone is required." }, { status: 422 });
-  if (!password) return NR.json({ error: "Password is required." }, { status: 422 });
-  const res = await fetch(`${getApiUrl()}/consumer/auth/login`, {
-    method: "POST",
-    headers: apiHeaders(request),
-    body: JSON.stringify({ email: email || void 0, phone: phone || void 0, password })
-  });
-  const json = await res.json().catch(() => ({}));
-  if (!res.ok) {
-    return NR.json(
-      { error: json.error || "Login failed. Please try again.", code: json.code },
-      { status: res.status }
-    );
-  }
-  const token = (_a = json.data) == null ? void 0 : _a.token;
-  if (!token) return NR.json({ error: "No token received." }, { status: 500 });
-  const response = NR.json({});
-  response.cookies.set(CONSUMER_TOKEN_COOKIE, token, {
-    httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
-    sameSite: "lax",
-    path: "/",
-    maxAge: COOKIE_MAX_AGE
-  });
-  return response;
-}
-async function handleSignup(request, NR) {
-  var _a, _b, _c;
-  const body = await request.json().catch(() => ({}));
-  const { email, phone, password, password_confirmation, first_name, last_name } = body;
-  if (!email && !phone) return NR.json({ error: "Email or phone is required." }, { status: 422 });
-  const res = await fetch(`${getApiUrl()}/consumer/auth/signup`, {
-    method: "POST",
-    headers: apiHeaders(request),
-    body: JSON.stringify({
-      email: email || void 0,
-      phone: phone || void 0,
-      password,
-      password_confirmation,
-      first_name: first_name || void 0,
-      last_name: last_name || void 0
-    })
-  });
-  const json = await res.json().catch(() => ({}));
-  if (!res.ok) {
-    return NR.json({ error: json.error || "Signup failed. Please try again." }, { status: res.status });
-  }
-  const token = (_a = json.data) == null ? void 0 : _a.token;
-  if (!token) return NR.json({ error: "No token received." }, { status: 500 });
-  const response = NR.json({ claimed: (_c = (_b = json.data) == null ? void 0 : _b.claimed) != null ? _c : false });
-  response.cookies.set(CONSUMER_TOKEN_COOKIE, token, {
-    httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
-    sameSite: "lax",
-    path: "/",
-    maxAge: COOKIE_MAX_AGE
-  });
-  return response;
-}
-async function handleSendCode(request, NR) {
-  var _a, _b;
-  const body = await request.json().catch(() => ({}));
-  const { phone } = body;
-  if (!phone) return NR.json({ error: "Phone is required." }, { status: 422 });
-  const res = await fetch(`${getApiUrl()}/consumer/auth/send_code`, {
-    method: "POST",
-    headers: apiHeaders(request),
-    body: JSON.stringify({ phone })
-  });
-  const json = await res.json().catch(() => ({}));
-  if (!res.ok) {
-    return NR.json(
-      {
-        error: json.error || "Failed to send verification code. Please try again.",
-        code: json.code,
-        retry_in_seconds: json.retry_in_seconds
-      },
-      { status: res.status }
-    );
-  }
-  return NR.json({
-    resend_available_at: (_b = (_a = json.data) == null ? void 0 : _a.resend_available_at) != null ? _b : null
-  });
-}
-async function handleVerifyCode(request, NR) {
-  var _a, _b, _c, _d, _e, _f, _g;
-  const body = await request.json().catch(() => ({}));
-  const { phone, code } = body;
-  if (!phone || !code) return NR.json({ error: "Phone and code are required." }, { status: 422 });
-  const res = await fetch(`${getApiUrl()}/consumer/auth/verify_code`, {
-    method: "POST",
-    headers: apiHeaders(request),
-    body: JSON.stringify({ phone, code })
-  });
-  const json = await res.json().catch(() => ({}));
-  if (!res.ok) {
-    return NR.json(
-      { error: json.error || "Verification failed. Please try again.", code: json.code },
-      { status: res.status }
-    );
-  }
-  return NR.json({
-    verification_token: (_a = json.data) == null ? void 0 : _a.verification_token,
-    first_name: (_c = (_b = json.data) == null ? void 0 : _b.first_name) != null ? _c : "",
-    last_name: (_e = (_d = json.data) == null ? void 0 : _d.last_name) != null ? _e : "",
-    email: (_g = (_f = json.data) == null ? void 0 : _f.email) != null ? _g : ""
-  });
-}
-async function handlePasswordlessAuth(request, NR) {
-  var _a;
-  const body = await request.json().catch(() => ({}));
-  const { phone, verification_token, first_name, last_name, email } = body;
-  if (!phone) return NR.json({ error: "Phone is required." }, { status: 422 });
-  if (!verification_token) return NR.json({ error: "Verification token is required." }, { status: 422 });
-  if (!first_name || !last_name || !email) {
-    return NR.json({ error: "First name, last name, and email are required." }, { status: 422 });
-  }
-  const res = await fetch(`${getApiUrl()}/consumer/auth/passwordless_auth`, {
-    method: "POST",
-    headers: apiHeaders(request),
-    body: JSON.stringify({
-      phone,
-      verification_token,
-      first_name,
-      last_name,
-      email
-    })
-  });
-  const json = await res.json().catch(() => ({}));
-  if (!res.ok) {
-    return NR.json({ error: json.error || "Authentication failed. Please try again." }, { status: res.status });
-  }
-  const token = (_a = json.data) == null ? void 0 : _a.token;
-  if (!token) return NR.json({ error: "No token received." }, { status: 500 });
-  const response = NR.json({});
-  response.cookies.set(CONSUMER_TOKEN_COOKIE, token, {
-    httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
-    sameSite: "lax",
-    path: "/",
-    maxAge: COOKIE_MAX_AGE
-  });
-  return response;
-}
-async function handleLogout(_request, NR) {
-  const response = NR.json({ success: true });
-  response.cookies.delete(CONSUMER_TOKEN_COOKIE);
-  return response;
-}
-function createConsumerAuthHandlers({ NextResponse }) {
-  return {
-    POST: async (request, context) => {
-      const { action } = await context.params;
-      if (action === "initiate") return handleInitiate(request, NextResponse);
-      if (action === "login") return handleLogin(request, NextResponse);
-      if (action === "signup") return handleSignup(request, NextResponse);
-      if (action === "send_code") return handleSendCode(request, NextResponse);
-      if (action === "verify_code") return handleVerifyCode(request, NextResponse);
-      if (action === "passwordless_auth") return handlePasswordlessAuth(request, NextResponse);
-      if (action === "logout") return handleLogout(request, NextResponse);
-      return NextResponse.json({ error: "Not found" }, { status: 404 });
-    }
-  };
-}
-export {
-  createConsumerAuthHandlers
-};
-//# sourceMappingURL=consumer-auth.js.map

package/dist/next/routes/consumer-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../../src/lib/consumer-session.ts","../../../src/next/routes/proxy-headers.ts","../../../src/next/routes/consumer-auth.ts"],"sourcesContent":["/**\n * Server-side consumer session helpers.\n * Runs on the server only — accepts the JWT token read from cookies by the page component.\n */\n\nexport const CONSUMER_TOKEN_COOKIE = 'ks_consumer_token';\n\nimport type { Consumer, ConversationSummary, Message, ContactSummary } from '../types/api/consumer';\nexport type { Consumer, ConversationSummary, Message, ContactSummary };\n\nfunction getApiUrl(): string {\n  return process.env.API_URL || 'http://localhost:3000/api/v1';\n}\n\nasync function consumerFetch<T>(path: string, token: string): Promise<T | null> {\n  try {\n    const res = await fetch(`${getApiUrl()}${path}`, {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${token}`,\n      },\n      cache: 'no-store',\n    });\n    if (!res.ok) return null;\n    const json = await res.json();\n    return (json.data ?? json) as T;\n  } catch {\n    return null;\n  }\n}\n\nexport async function fetchConsumerMe(token: string): Promise<Consumer | null> {\n  return consumerFetch<Consumer>('/consumer/me', token);\n}\n\nexport async function fetchConsumerConversations(token: string): Promise<ConversationSummary[]> {\n  const apiKey = process.env.API_KEY;\n  const headers: Record<string, string> = {\n    'Content-Type': 'application/json',\n    Authorization: `Bearer ${token}`,\n    ...(apiKey ? { 'X-API-Key': apiKey } : {}),\n  };\n  try {\n    const res = await fetch(`${getApiUrl()}/consumer/me/conversations`, { headers, cache: 'no-store' });\n    if (!res.ok) return [];\n    const json = await res.json();\n    return (json.data ?? []) as ConversationSummary[];\n  } catch {\n    return [];\n  }\n}\n\nexport async function fetchConsumerMessages(\n  token: string,\n  contactId: number\n): Promise<{ messages: Message[]; contact: ContactSummary | null }> {\n  try {\n    const res = await fetch(\n      `${getApiUrl()}/consumer/me/contacts/${contactId}/messages?per_page=100`,\n      {\n        headers: { Authorization: `Bearer ${token}` },\n        cache: 'no-store',\n      }\n    );\n    if (!res.ok) return { messages: [], contact: null };\n    const json = await res.json();\n    return {\n      messages: (json.data ?? []) as Message[],\n      contact: (json.contact ?? null) as ContactSummary | null,\n    };\n  } catch {\n    return { messages: [], contact: null };\n  }\n}\n","/**\n * Extracts the real client IP, user-agent, and Meta browser cookies (_fbp / _fbc)\n * from an incoming Next.js route request and returns them as headers to forward\n * to the upstream Rails API.\n *\n * Cloudflare and other load-balancers set x-real-ip (or x-forwarded-for) on\n * inbound requests before they reach the Next.js function. Without this, the\n * Rails API sees the Next.js server IP instead of the real browser IP, which\n * produces inaccurate server-side CAPI signals.\n *\n * _fbp (Meta Browser ID) and _fbc (Meta Click ID) are first-party cookies set by\n * the Meta Pixel. Forwarding them allows the API to store them on the Contact\n * record so they can be included in all subsequent CAPI events — even those fired\n * from background jobs that have no live HTTP request.\n *\n * Convention:\n *   X-Real-Client-IP  — real browser IP\n *   X-Real-Client-UA  — real browser user-agent\n *   X-Meta-FBP        — value of the _fbp cookie\n *   X-Meta-FBC        — value of the _fbc cookie (or built from fbclid param)\n */\nexport function clientContextHeaders(request: Request): Record<string, string> {\n  const ip =\n    request.headers.get('x-real-ip') ||\n    request.headers.get('x-forwarded-for')?.split(',')[0]?.trim();\n  const ua = request.headers.get('user-agent');\n\n  const cookieHeader = request.headers.get('cookie') || '';\n  const cookies = Object.fromEntries(\n    cookieHeader.split(';').map((c) => {\n      const [k, ...v] = c.trim().split('=');\n      return [k, v.join('=')];\n    })\n  );\n  const fbp = cookies['_fbp'];\n  const fbc = cookies['_fbc'];\n\n  const headers: Record<string, string> = {};\n  if (ip) headers['X-Real-Client-IP'] = ip;\n  if (ua) headers['X-Real-Client-UA'] = ua;\n  if (fbp) headers['X-Meta-FBP'] = fbp;\n  if (fbc) headers['X-Meta-FBC'] = fbc;\n  return headers;\n}\n","/**\n * Consumer auth API route handlers for Next.js App Router.\n *\n * Usage in a customer site:\n *   // app/api/consumer/[action]/route.ts\n *   import { NextResponse } from 'next/server';\n *   import { createConsumerAuthHandlers } from 'keystone-design-bootstrap/next/routes/consumer-auth';\n *   export const { POST } = createConsumerAuthHandlers({ NextResponse });\n *\n * Handles: initiate, login, signup, send_code, verify_code, passwordless_auth, logout\n *\n * Env (server-side only):\n * - API_URL (default: http://localhost:3000/api/v1)\n * - API_KEY\n */\n\nimport { CONSUMER_TOKEN_COOKIE } from '../../lib/consumer-session';\nimport { clientContextHeaders } from './proxy-headers';\n\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\ntype NextResponseLike = { json: (body: unknown, init?: ResponseInit) => any };\n\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 30; // 30 days\n\nfunction getApiUrl(): string {\n  return process.env.API_URL || 'http://localhost:3000/api/v1';\n}\n\nfunction getApiKey(): string {\n  return process.env.API_KEY || '';\n}\n\nfunction apiHeaders(request?: Request): Record<string, string> {\n  const key = getApiKey();\n  return {\n    'Content-Type': 'application/json',\n    ...(key ? { 'X-API-Key': key } : {}),\n    ...(request ? clientContextHeaders(request) : {}),\n  };\n}\n\n// POST /api/consumer/initiate\n// Looks up an existing user by email or phone, creating a Contact if needed.\n// Returns { exists, firstName, hasPassword }.\nasync function handleInitiate(request: Request, NR: NextResponseLike): Promise<Response> {\n  const body = await request.json().catch(() => ({})) as Record<string, unknown>;\n  const { email, phone } = body;\n\n  if (!email && !phone) {\n    return NR.json({ exists: null });\n  }\n\n  try {\n    const res = await fetch(`${getApiUrl()}/consumer/auth/initiate`, {\n      method: 'POST',\n      headers: apiHeaders(request),\n      body: JSON.stringify({ email: email || undefined, phone: phone || undefined }),\n    });\n\n    if (res.status === 404) return NR.json({ exists: false });\n    if (!res.ok) return NR.json({ exists: null });\n\n    const json = await res.json().catch(() => ({}));\n    const data = json.data as Record<string, unknown> | undefined;\n    return NR.json({\n      exists: true,\n      firstName: data?.first_name ?? undefined,\n      hasPassword: data?.has_password != null ? Boolean(data.has_password) : true,\n    });\n  } catch {\n    return NR.json({ exists: null });\n  }\n}\n\n// POST /api/consumer/login\n// Authenticates an existing user. Sets HttpOnly JWT cookie on success.\n// Returns {} on success or { error, code } on failure.\nasync function handleLogin(request: Request, NR: NextResponseLike): Promise<Response> {\n  const body = await request.json().catch(() => ({})) as Record<string, string>;\n  const { email, phone, password } = body;\n\n  if (!email && !phone) return NR.json({ error: 'Email or phone is required.' }, { status: 422 });\n  if (!password) return NR.json({ error: 'Password is required.' }, { status: 422 });\n\n  const res = await fetch(`${getApiUrl()}/consumer/auth/login`, {\n    method: 'POST',\n    headers: apiHeaders(request),\n    body: JSON.stringify({ email: email || undefined, phone: phone || undefined, password }),\n  });\n\n  const json = await res.json().catch(() => ({}));\n  if (!res.ok) {\n    return NR.json(\n      { error: json.error || 'Login failed. Please try again.', code: json.code },\n      { status: res.status }\n    );\n  }\n\n  const token = json.data?.token;\n  if (!token) return NR.json({ error: 'No token received.' }, { status: 500 });\n\n  const response = NR.json({});\n  response.cookies.set(CONSUMER_TOKEN_COOKIE, token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: COOKIE_MAX_AGE,\n  });\n  return response;\n}\n\n// POST /api/consumer/signup\n// Creates a new account (or claims an existing contact). Sets HttpOnly JWT cookie on success.\n// Returns {} on success or { error } on failure.\nasync function handleSignup(request: Request, NR: NextResponseLike): Promise<Response> {\n  const body = await request.json().catch(() => ({})) as Record<string, string>;\n  const { email, phone, password, password_confirmation, first_name, last_name } = body;\n\n  if (!email && !phone) return NR.json({ error: 'Email or phone is required.' }, { status: 422 });\n\n  const res = await fetch(`${getApiUrl()}/consumer/auth/signup`, {\n    method: 'POST',\n    headers: apiHeaders(request),\n    body: JSON.stringify({\n      email: email || undefined,\n      phone: phone || undefined,\n      password,\n      password_confirmation,\n      first_name: first_name || undefined,\n      last_name: last_name || undefined,\n    }),\n  });\n\n  const json = await res.json().catch(() => ({}));\n  if (!res.ok) {\n    return NR.json({ error: json.error || 'Signup failed. Please try again.' }, { status: res.status });\n  }\n\n  const token = json.data?.token;\n  if (!token) return NR.json({ error: 'No token received.' }, { status: 500 });\n\n  const response = NR.json({ claimed: json.data?.claimed ?? false });\n  response.cookies.set(CONSUMER_TOKEN_COOKIE, token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: COOKIE_MAX_AGE,\n  });\n  return response;\n}\n\n// POST /api/consumer/send_code\n// Sends a 4-digit SMS verification code for passwordless login/signup.\nasync function handleSendCode(request: Request, NR: NextResponseLike): Promise<Response> {\n  const body = await request.json().catch(() => ({})) as Record<string, string>;\n  const { phone } = body;\n  if (!phone) return NR.json({ error: 'Phone is required.' }, { status: 422 });\n\n  const res = await fetch(`${getApiUrl()}/consumer/auth/send_code`, {\n    method: 'POST',\n    headers: apiHeaders(request),\n    body: JSON.stringify({ phone }),\n  });\n\n  const json = await res.json().catch(() => ({}));\n  if (!res.ok) {\n    return NR.json(\n      {\n        error: json.error || 'Failed to send verification code. Please try again.',\n        code: json.code,\n        retry_in_seconds: json.retry_in_seconds,\n      },\n      { status: res.status }\n    );\n  }\n\n  return NR.json({\n    resend_available_at: json.data?.resend_available_at ?? null,\n  });\n}\n\n// POST /api/consumer/verify_code\n// Verifies the SMS code and returns a short-lived verification token.\nasync function handleVerifyCode(request: Request, NR: NextResponseLike): Promise<Response> {\n  const body = await request.json().catch(() => ({})) as Record<string, string>;\n  const { phone, code } = body;\n  if (!phone || !code) return NR.json({ error: 'Phone and code are required.' }, { status: 422 });\n\n  const res = await fetch(`${getApiUrl()}/consumer/auth/verify_code`, {\n    method: 'POST',\n    headers: apiHeaders(request),\n    body: JSON.stringify({ phone, code }),\n  });\n\n  const json = await res.json().catch(() => ({}));\n  if (!res.ok) {\n    return NR.json(\n      { error: json.error || 'Verification failed. Please try again.', code: json.code },\n      { status: res.status }\n    );\n  }\n\n  return NR.json({\n    verification_token: json.data?.verification_token,\n    first_name: json.data?.first_name ?? '',\n    last_name: json.data?.last_name ?? '',\n    email: json.data?.email ?? '',\n  });\n}\n\n// POST /api/consumer/passwordless_auth\n// Completes passwordless auth and sets HttpOnly JWT cookie.\nasync function handlePasswordlessAuth(request: Request, NR: NextResponseLike): Promise<Response> {\n  const body = await request.json().catch(() => ({})) as Record<string, string>;\n  const { phone, verification_token, first_name, last_name, email } = body;\n\n  if (!phone) return NR.json({ error: 'Phone is required.' }, { status: 422 });\n  if (!verification_token) return NR.json({ error: 'Verification token is required.' }, { status: 422 });\n  if (!first_name || !last_name || !email) {\n    return NR.json({ error: 'First name, last name, and email are required.' }, { status: 422 });\n  }\n\n  const res = await fetch(`${getApiUrl()}/consumer/auth/passwordless_auth`, {\n    method: 'POST',\n    headers: apiHeaders(request),\n    body: JSON.stringify({\n      phone,\n      verification_token,\n      first_name,\n      last_name,\n      email,\n    }),\n  });\n\n  const json = await res.json().catch(() => ({}));\n  if (!res.ok) {\n    return NR.json({ error: json.error || 'Authentication failed. Please try again.' }, { status: res.status });\n  }\n\n  const token = json.data?.token;\n  if (!token) return NR.json({ error: 'No token received.' }, { status: 500 });\n\n  const response = NR.json({});\n  response.cookies.set(CONSUMER_TOKEN_COOKIE, token, {\n    httpOnly: true,\n    secure: process.env.NODE_ENV === 'production',\n    sameSite: 'lax',\n    path: '/',\n    maxAge: COOKIE_MAX_AGE,\n  });\n  return response;\n}\n\n// POST /api/consumer/logout\n// Clears the JWT cookie.\nasync function handleLogout(_request: Request, NR: NextResponseLike): Promise<Response> {\n  const response = NR.json({ success: true });\n  response.cookies.delete(CONSUMER_TOKEN_COOKIE);\n  return response;\n}\n\n/**\n * Creates a single POST handler that routes to the correct auth action based on\n * the dynamic `[action]` path segment.\n */\nexport function createConsumerAuthHandlers({ NextResponse }: { NextResponse: NextResponseLike }) {\n  return {\n    POST: async (\n      request: Request,\n      context: { params: Promise<{ action: string }> }\n    ): Promise<Response> => {\n      const { action } = await context.params;\n      if (action === 'initiate') return handleInitiate(request, NextResponse);\n      if (action === 'login') return handleLogin(request, NextResponse);\n      if (action === 'signup') return handleSignup(request, NextResponse);\n      if (action === 'send_code') return handleSendCode(request, NextResponse);\n      if (action === 'verify_code') return handleVerifyCode(request, NextResponse);\n      if (action === 'passwordless_auth') return handlePasswordlessAuth(request, NextResponse);\n      if (action === 'logout') return handleLogout(request, NextResponse);\n      return NextResponse.json({ error: 'Not found' }, { status: 404 });\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAKO,IAAM,wBAAwB;;;ACgB9B,SAAS,qBAAqB,SAA0C;AArB/E;AAsBE,QAAM,KACJ,QAAQ,QAAQ,IAAI,WAAW,OAC/B,mBAAQ,QAAQ,IAAI,iBAAiB,MAArC,mBAAwC,MAAM,KAAK,OAAnD,mBAAuD;AACzD,QAAM,KAAK,QAAQ,QAAQ,IAAI,YAAY;AAE3C,QAAM,eAAe,QAAQ,QAAQ,IAAI,QAAQ,KAAK;AACtD,QAAM,UAAU,OAAO;AAAA,IACrB,aAAa,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM;AACjC,YAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG;AACpC,aAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC;AAAA,IACxB,CAAC;AAAA,EACH;AACA,QAAM,MAAM,QAAQ,MAAM;AAC1B,QAAM,MAAM,QAAQ,MAAM;AAE1B,QAAM,UAAkC,CAAC;AACzC,MAAI,GAAI,SAAQ,kBAAkB,IAAI;AACtC,MAAI,GAAI,SAAQ,kBAAkB,IAAI;AACtC,MAAI,IAAK,SAAQ,YAAY,IAAI;AACjC,MAAI,IAAK,SAAQ,YAAY,IAAI;AACjC,SAAO;AACT;;;ACrBA,IAAM,iBAAiB,KAAK,KAAK,KAAK;AAEtC,SAAS,YAAoB;AAC3B,SAAO,QAAQ,IAAI,WAAW;AAChC;AAEA,SAAS,YAAoB;AAC3B,SAAO,QAAQ,IAAI,WAAW;AAChC;AAEA,SAAS,WAAW,SAA2C;AAC7D,QAAM,MAAM,UAAU;AACtB,SAAO;AAAA,IACL,gBAAgB;AAAA,KACZ,MAAM,EAAE,aAAa,IAAI,IAAI,CAAC,IAC9B,UAAU,qBAAqB,OAAO,IAAI,CAAC;AAEnD;AAKA,eAAe,eAAe,SAAkB,IAAyC;AA5CzF;AA6CE,QAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,QAAM,EAAE,OAAO,MAAM,IAAI;AAEzB,MAAI,CAAC,SAAS,CAAC,OAAO;AACpB,WAAO,GAAG,KAAK,EAAE,QAAQ,KAAK,CAAC;AAAA,EACjC;AAEA,MAAI;AACF,UAAM,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,2BAA2B;AAAA,MAC/D,QAAQ;AAAA,MACR,SAAS,WAAW,OAAO;AAAA,MAC3B,MAAM,KAAK,UAAU,EAAE,OAAO,SAAS,QAAW,OAAO,SAAS,OAAU,CAAC;AAAA,IAC/E,CAAC;AAED,QAAI,IAAI,WAAW,IAAK,QAAO,GAAG,KAAK,EAAE,QAAQ,MAAM,CAAC;AACxD,QAAI,CAAC,IAAI,GAAI,QAAO,GAAG,KAAK,EAAE,QAAQ,KAAK,CAAC;AAE5C,UAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,UAAM,OAAO,KAAK;AAClB,WAAO,GAAG,KAAK;AAAA,MACb,QAAQ;AAAA,MACR,YAAW,kCAAM,eAAN,YAAoB;AAAA,MAC/B,cAAa,6BAAM,iBAAgB,OAAO,QAAQ,KAAK,YAAY,IAAI;AAAA,IACzE,CAAC;AAAA,EACH,SAAQ;AACN,WAAO,GAAG,KAAK,EAAE,QAAQ,KAAK,CAAC;AAAA,EACjC;AACF;AAKA,eAAe,YAAY,SAAkB,IAAyC;AA7EtF;AA8EE,QAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,QAAM,EAAE,OAAO,OAAO,SAAS,IAAI;AAEnC,MAAI,CAAC,SAAS,CAAC,MAAO,QAAO,GAAG,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC9F,MAAI,CAAC,SAAU,QAAO,GAAG,KAAK,EAAE,OAAO,wBAAwB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEjF,QAAM,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,wBAAwB;AAAA,IAC5D,QAAQ;AAAA,IACR,SAAS,WAAW,OAAO;AAAA,IAC3B,MAAM,KAAK,UAAU,EAAE,OAAO,SAAS,QAAW,OAAO,SAAS,QAAW,SAAS,CAAC;AAAA,EACzF,CAAC;AAED,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,MAAI,CAAC,IAAI,IAAI;AACX,WAAO,GAAG;AAAA,MACR,EAAE,OAAO,KAAK,SAAS,mCAAmC,MAAM,KAAK,KAAK;AAAA,MAC1E,EAAE,QAAQ,IAAI,OAAO;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,SAAQ,UAAK,SAAL,mBAAW;AACzB,MAAI,CAAC,MAAO,QAAO,GAAG,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE3E,QAAM,WAAW,GAAG,KAAK,CAAC,CAAC;AAC3B,WAAS,QAAQ,IAAI,uBAAuB,OAAO;AAAA,IACjD,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACD,SAAO;AACT;AAKA,eAAe,aAAa,SAAkB,IAAyC;AAnHvF;AAoHE,QAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,QAAM,EAAE,OAAO,OAAO,UAAU,uBAAuB,YAAY,UAAU,IAAI;AAEjF,MAAI,CAAC,SAAS,CAAC,MAAO,QAAO,GAAG,KAAK,EAAE,OAAO,8BAA8B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9F,QAAM,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,yBAAyB;AAAA,IAC7D,QAAQ;AAAA,IACR,SAAS,WAAW,OAAO;AAAA,IAC3B,MAAM,KAAK,UAAU;AAAA,MACnB,OAAO,SAAS;AAAA,MAChB,OAAO,SAAS;AAAA,MAChB;AAAA,MACA;AAAA,MACA,YAAY,cAAc;AAAA,MAC1B,WAAW,aAAa;AAAA,IAC1B,CAAC;AAAA,EACH,CAAC;AAED,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,MAAI,CAAC,IAAI,IAAI;AACX,WAAO,GAAG,KAAK,EAAE,OAAO,KAAK,SAAS,mCAAmC,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,EACpG;AAEA,QAAM,SAAQ,UAAK,SAAL,mBAAW;AACzB,MAAI,CAAC,MAAO,QAAO,GAAG,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE3E,QAAM,WAAW,GAAG,KAAK,EAAE,UAAS,gBAAK,SAAL,mBAAW,YAAX,YAAsB,MAAM,CAAC;AACjE,WAAS,QAAQ,IAAI,uBAAuB,OAAO;AAAA,IACjD,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACD,SAAO;AACT;AAIA,eAAe,eAAe,SAAkB,IAAyC;AA3JzF;AA4JE,QAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,QAAM,EAAE,MAAM,IAAI;AAClB,MAAI,CAAC,MAAO,QAAO,GAAG,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE3E,QAAM,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,4BAA4B;AAAA,IAChE,QAAQ;AAAA,IACR,SAAS,WAAW,OAAO;AAAA,IAC3B,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,EAChC,CAAC;AAED,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,MAAI,CAAC,IAAI,IAAI;AACX,WAAO,GAAG;AAAA,MACR;AAAA,QACE,OAAO,KAAK,SAAS;AAAA,QACrB,MAAM,KAAK;AAAA,QACX,kBAAkB,KAAK;AAAA,MACzB;AAAA,MACA,EAAE,QAAQ,IAAI,OAAO;AAAA,IACvB;AAAA,EACF;AAEA,SAAO,GAAG,KAAK;AAAA,IACb,sBAAqB,gBAAK,SAAL,mBAAW,wBAAX,YAAkC;AAAA,EACzD,CAAC;AACH;AAIA,eAAe,iBAAiB,SAAkB,IAAyC;AAzL3F;AA0LE,QAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,QAAM,EAAE,OAAO,KAAK,IAAI;AACxB,MAAI,CAAC,SAAS,CAAC,KAAM,QAAO,GAAG,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9F,QAAM,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,8BAA8B;AAAA,IAClE,QAAQ;AAAA,IACR,SAAS,WAAW,OAAO;AAAA,IAC3B,MAAM,KAAK,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,EACtC,CAAC;AAED,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,MAAI,CAAC,IAAI,IAAI;AACX,WAAO,GAAG;AAAA,MACR,EAAE,OAAO,KAAK,SAAS,0CAA0C,MAAM,KAAK,KAAK;AAAA,MACjF,EAAE,QAAQ,IAAI,OAAO;AAAA,IACvB;AAAA,EACF;AAEA,SAAO,GAAG,KAAK;AAAA,IACb,qBAAoB,UAAK,SAAL,mBAAW;AAAA,IAC/B,aAAY,gBAAK,SAAL,mBAAW,eAAX,YAAyB;AAAA,IACrC,YAAW,gBAAK,SAAL,mBAAW,cAAX,YAAwB;AAAA,IACnC,QAAO,gBAAK,SAAL,mBAAW,UAAX,YAAoB;AAAA,EAC7B,CAAC;AACH;AAIA,eAAe,uBAAuB,SAAkB,IAAyC;AAtNjG;AAuNE,QAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAClD,QAAM,EAAE,OAAO,oBAAoB,YAAY,WAAW,MAAM,IAAI;AAEpE,MAAI,CAAC,MAAO,QAAO,GAAG,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAC3E,MAAI,CAAC,mBAAoB,QAAO,GAAG,KAAK,EAAE,OAAO,kCAAkC,GAAG,EAAE,QAAQ,IAAI,CAAC;AACrG,MAAI,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO;AACvC,WAAO,GAAG,KAAK,EAAE,OAAO,iDAAiD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC7F;AAEA,QAAM,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,oCAAoC;AAAA,IACxE,QAAQ;AAAA,IACR,SAAS,WAAW,OAAO;AAAA,IAC3B,MAAM,KAAK,UAAU;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,QAAM,OAAO,MAAM,IAAI,KAAK,EAAE,MAAM,OAAO,CAAC,EAAE;AAC9C,MAAI,CAAC,IAAI,IAAI;AACX,WAAO,GAAG,KAAK,EAAE,OAAO,KAAK,SAAS,2CAA2C,GAAG,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,EAC5G;AAEA,QAAM,SAAQ,UAAK,SAAL,mBAAW;AACzB,MAAI,CAAC,MAAO,QAAO,GAAG,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE3E,QAAM,WAAW,GAAG,KAAK,CAAC,CAAC;AAC3B,WAAS,QAAQ,IAAI,uBAAuB,OAAO;AAAA,IACjD,UAAU;AAAA,IACV,QAAQ,QAAQ,IAAI,aAAa;AAAA,IACjC,UAAU;AAAA,IACV,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC;AACD,SAAO;AACT;AAIA,eAAe,aAAa,UAAmB,IAAyC;AACtF,QAAM,WAAW,GAAG,KAAK,EAAE,SAAS,KAAK,CAAC;AAC1C,WAAS,QAAQ,OAAO,qBAAqB;AAC7C,SAAO;AACT;AAMO,SAAS,2BAA2B,EAAE,aAAa,GAAuC;AAC/F,SAAO;AAAA,IACL,MAAM,OACJ,SACA,YACsB;AACtB,YAAM,EAAE,OAAO,IAAI,MAAM,QAAQ;AACjC,UAAI,WAAW,WAAY,QAAO,eAAe,SAAS,YAAY;AACtE,UAAI,WAAW,QAAS,QAAO,YAAY,SAAS,YAAY;AAChE,UAAI,WAAW,SAAU,QAAO,aAAa,SAAS,YAAY;AAClE,UAAI,WAAW,YAAa,QAAO,eAAe,SAAS,YAAY;AACvE,UAAI,WAAW,cAAe,QAAO,iBAAiB,SAAS,YAAY;AAC3E,UAAI,WAAW,oBAAqB,QAAO,uBAAuB,SAAS,YAAY;AACvF,UAAI,WAAW,SAAU,QAAO,aAAa,SAAS,YAAY;AAClE,aAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAAA,EACF;AACF;","names":[]}

package/dist/next/routes/form.d.ts

@@ -1,37 +0,0 @@
-/**
- * Form submission proxy route handler for Next.js App Router.
- *
- * Usage in a site/template:
- *   // app/api/form/route.ts
- *   export { POST } from 'keystone-design-bootstrap/next/routes/form';
- *
- * Env (server-side only):
- * - API_URL (default: http://localhost:3000/api/v1)
- * - API_KEY
- *
- * ## Meta Pixel + CAPI tracking for custom forms
- *
- * POST body must include `formType: 'lead'` for conversion tracking to fire:
- *   - Server-side: the API automatically fires a CAPI Lead event (no extra work needed).
- *   - Client-side: the response includes `eventId` for browser/server deduplication.
- *     After a successful response, call these two functions from 'keystone-design-bootstrap/tracking':
- *
- *     const result = await response.json();
- *     if (result.success) {
- *       await setPixelUserData({ email, phone });               // hash + store identity for the session
- *       firePixelEvent('Lead', undefined, result.eventId);      // fire fbq('track', 'Lead') with server event ID for dedup
- *     }
- *
- * Both tracking calls are silent no-ops when no Meta Pixel is configured for the site.
- * Non-lead form types (e.g. 'job_application') do not fire any tracking events.
- */
-type JsonResponder = (body: unknown, init?: ResponseInit) => Response;
-declare function createFormRouteHandlers(deps?: {
-    NextResponse?: {
-        json: JsonResponder;
-    };
-}): {
-    POST: (request: Request) => Promise<Response>;
-};
-
-export { createFormRouteHandlers };