@chatlychat/react-native 0.0.0-stage → 0.1.1

package/dist/blocks/money.js

@@ -0,0 +1,82 @@
+/**
+ * Money on a card, restated for the published package.
+ *
+ * ── Why this is a copy and not an import ───────────────────────────────
+ *
+ * The canonical implementation is `packages/shared/src/widget-blocks/money.ts`
+ * and this file is deliberately identical in behaviour. `@livechat/shared` is
+ * `private: true` — it is the monorepo's internal package with a hundred
+ * export paths — so a published npm package cannot depend on it. The same
+ * reason `client/types.ts` restates the realtime types rather than importing
+ * them.
+ *
+ * A copy is a drift risk, so it is pinned rather than trusted:
+ * `money.parity.spec.ts` imports BOTH this and the shared original and
+ * asserts they agree over a currency table that includes the cases a
+ * hand-rolled version gets wrong. `check-block-field-parity.mjs` knows about
+ * the second `Intl.NumberFormat` by name, with that spec as the reason.
+ *
+ * ── Minor units, never a float ─────────────────────────────────────────
+ *
+ * `amount` is an integer count of the currency's smallest unit: 4820 is
+ * $48.20, 4820 is also ¥4,820, and 4820 is 4.820 KWD.
+ *
+ * The DIVISOR IS NOT 100. Three currencies have no minor unit (JPY, KRW, VND)
+ * and four have three digits (KWD, BHD, JOD, OMR), so `(amount / 100)`
+ * renders ¥4,820 as "¥48" and 4.820 KWD as "48.200 KWD" — wrong by two orders
+ * of magnitude in opposite directions, and perfect in USD, which is why it
+ * would ship. The digit count is read off the formatter, so a currency added
+ * to CLDR after this was written is right with no table here.
+ *
+ * React Native ships a full ICU on iOS and, since 0.73 with Hermes
+ * `intl` enabled, on Android too. The `catch` below is what covers an engine
+ * without it: a card with an unrecognised currency still shows a price rather
+ * than taking the thread's render down.
+ */
+const CURRENCY_RE = /^[A-Z]{3}$/;
+const isMinor = (v) => typeof v === 'number' && Number.isSafeInteger(v) && v >= 0;
+/** Read a price off a stored card, or null. Refuses what cannot be drawn. */
+export function readMoney(raw) {
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
+        return null;
+    }
+    const bag = raw;
+    const currency = bag['currency'];
+    if (!isMinor(bag['amount']) || typeof currency !== 'string' || !CURRENCY_RE.test(currency)) {
+        return null;
+    }
+    const compareAt = bag['compareAt'];
+    return {
+        amount: bag['amount'],
+        currency,
+        ...(isMinor(compareAt) ? { compareAt } : {}),
+    };
+}
+function minorPerMajor(formatter) {
+    const digits = formatter.resolvedOptions().maximumFractionDigits;
+    return 10 ** (typeof digits === 'number' ? digits : 2);
+}
+/** The locale-free rendition, used as the fallback and for accessibility text. */
+export function moneyToPlainText(money) {
+    return `${money.currency} ${(money.amount / 100).toFixed(2)}`;
+}
+/**
+ * Format one amount in the DEVICE's locale.
+ *
+ * `locale` undefined means "whatever this device is set to", which is the
+ * right default: the app runs on the shopper's phone and a German shopper
+ * reads `48,20 $`.
+ */
+export function formatMoney(money, locale) {
+    try {
+        const formatter = new Intl.NumberFormat(locale, {
+            style: 'currency',
+            currency: money.currency,
+        });
+        return formatter.format(money.amount / minorPerMajor(formatter));
+    }
+    catch {
+        return moneyToPlainText(money);
+    }
+}
+//# sourceMappingURL=money.js.map

package/dist/blocks/money.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"money.js","sourceRoot":"","sources":["../../src/blocks/money.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAWH,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAC1C,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE7D,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;IACnC,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;QACrB,QAAQ;QACR,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,SAA4B;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,EAAE,CAAC,qBAAqB,CAAC;IACjE,OAAO,EAAE,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAAY;IAC3C,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAY,EAAE,MAAe;IACvD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;YAC9C,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/blocks/money.parity.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=money.parity.spec.d.ts.map

package/dist/blocks/money.parity.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"money.parity.spec.d.ts","sourceRoot":"","sources":["../../src/blocks/money.parity.spec.ts"],"names":[],"mappings":""}

package/dist/blocks/money.parity.spec.js

@@ -0,0 +1,87 @@
+/**
+ * The RN copy of the money formatter against the canonical one.
+ *
+ * ── Why a parity spec and not an import ────────────────────────────────
+ *
+ * `@livechat/shared` is `private: true`, so the published package cannot
+ * depend on it and `blocks/money.ts` is a deliberate copy. A copy with no
+ * test is a copy that drifts, and the drift is invisible: both versions look
+ * right in USD, and the cases they disagree on are the ones a hand-rolled
+ * divisor gets wrong.
+ *
+ * The shared package is a DEV dependency, so nothing here ships.
+ *
+ * This is the control that justifies the second `Intl.NumberFormat` in the
+ * repo — see `check-block-field-parity.mjs`, which otherwise fails the build
+ * on one.
+ */
+import { formatMoney as sharedFormat, moneyToPlainText as sharedPlain, readMoney as sharedRead, } from '@livechat/shared/widget-blocks';
+import { describe, expect, it } from 'vitest';
+import { formatMoney, moneyToPlainText, readMoney } from './money';
+/**
+ * Every shape worth disagreeing about.
+ *
+ * The three zero-decimal currencies and the four three-decimal ones are the
+ * whole point: a `/ 100` divisor is wrong by 100× for JPY and by 10× for KWD,
+ * and right for USD.
+ */
+const CASES = [
+    { amount: 4820, currency: 'USD' },
+    { amount: 4820, currency: 'EUR' },
+    { amount: 4820, currency: 'GBP' },
+    { amount: 4820, currency: 'JPY' },
+    { amount: 4820, currency: 'KRW' },
+    { amount: 4820, currency: 'VND' },
+    { amount: 4820, currency: 'KWD' },
+    { amount: 4820, currency: 'BHD' },
+    { amount: 4820, currency: 'JOD' },
+    { amount: 4820, currency: 'OMR' },
+    { amount: 0, currency: 'USD' },
+    { amount: 1, currency: 'USD' },
+    { amount: 100000000, currency: 'USD' },
+    { amount: 4820, currency: 'ZZZ' },
+];
+const LOCALES = [undefined, 'en-US', 'de-DE', 'ja-JP', 'ar-EG'];
+describe('RN money formatter ≡ shared money formatter', () => {
+    it('formats every currency identically, in every locale', () => {
+        for (const money of CASES) {
+            for (const locale of LOCALES) {
+                expect(formatMoney(money, locale)).toBe(sharedFormat(money, locale));
+            }
+        }
+    });
+    it('agrees on the locale-free rendition', () => {
+        for (const money of CASES) {
+            expect(moneyToPlainText(money)).toBe(sharedPlain(money));
+        }
+    });
+    it('agrees on what is readable, and on what is refused', () => {
+        const raws = [
+            { amount: 4820, currency: 'USD' },
+            { amount: 4820, currency: 'USD', compareAt: 6000 },
+            // Refused: a float, a negative, a lower-case code, a string amount, a
+            // non-object. Each would reach a shopper as `NaN` or as a price off by
+            // orders of magnitude.
+            { amount: 48.2, currency: 'USD' },
+            { amount: -1, currency: 'USD' },
+            { amount: 4820, currency: 'usd' },
+            { amount: '4820', currency: 'USD' },
+            { currency: 'USD' },
+            { amount: 4820 },
+            null,
+            [],
+            'nope',
+            { amount: 4820, currency: 'USD', compareAt: -3 },
+        ];
+        for (const raw of raws) {
+            expect(readMoney(raw)).toEqual(sharedRead(raw));
+        }
+    });
+    it('is a real comparison — the shared module is actually loaded', () => {
+        // A parity spec whose import resolved to the local copy would pass
+        // trivially and forever.
+        expect(sharedFormat).not.toBe(formatMoney);
+        expect(sharedFormat({ amount: 4820, currency: 'JPY' }, 'en-US')).toBe('¥4,820');
+    });
+});
+//# sourceMappingURL=money.parity.spec.js.map

package/dist/blocks/money.parity.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"money.parity.spec.js","sourceRoot":"","sources":["../../src/blocks/money.parity.spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,WAAW,IAAI,YAAY,EAC3B,gBAAgB,IAAI,WAAW,EAC/B,SAAS,IAAI,UAAU,GACxB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,KAAK,GAAG;IACZ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;IACjC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9B,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC9B,EAAE,MAAM,EAAE,SAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;IACxC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;CACzB,CAAC;AAEX,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAEzE,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAc;YACtB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;YAClD,sEAAsE;YACtE,uEAAuE;YACvE,uBAAuB;YACvB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC/B,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;YACjC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE;YACnC,EAAE,QAAQ,EAAE,KAAK,EAAE;YACnB,EAAE,MAAM,EAAE,IAAI,EAAE;YAChB,IAAI;YACJ,EAAE;YACF,MAAM;YACN,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE;SACjD,CAAC;QACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,mEAAmE;QACnE,yBAAyB;QACzB,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/blocks/read-envelope.d.ts

@@ -0,0 +1,15 @@
+import type { WidgetBlocksEnvelope, WidgetCanvas } from './types';
+/** `https:` and nothing else. Mirrors `isSafeMediaSrc` in the shared guard. */
+export declare function isSafeMediaSrc(src: string): boolean;
+export declare function readBlocksEnvelope(raw: unknown): WidgetBlocksEnvelope | null;
+/**
+ * Read a stored canvas.
+ *
+ * Looser than the block reader on one point and stricter on another. Looser:
+ * a canvas with no fields and no actions still renders, because a step can be
+ * a read-only confirmation. Stricter: `canvasId` is required, because it is
+ * what a submission is posted against — a canvas without one is a form with
+ * nowhere to go, which is worse than no form.
+ */
+export declare function readCanvas(raw: unknown): WidgetCanvas | null;
+//# sourceMappingURL=read-envelope.d.ts.map

package/dist/blocks/read-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-envelope.d.ts","sourceRoot":"","sources":["../../src/blocks/read-envelope.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAA6B,oBAAoB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAO7F,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAenD;AAqHD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,oBAAoB,GAAG,IAAI,CAM5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAoB5D"}

package/dist/blocks/read-envelope.js

@@ -0,0 +1,196 @@
+/**
+ * Read a stored block envelope, refusing what cannot be drawn.
+ *
+ * Mirrors `packages/shared/src/widget-blocks/read-envelope.ts` exactly, and
+ * `read-envelope.parity.spec.ts` asserts that over a table of accepted and
+ * refused shapes. See `blocks/money.ts` for why this package restates rather
+ * than imports.
+ *
+ * ── The contract, which is the same on every renderer ──────────────────
+ *
+ * Never throw, never render a hole. A row written before a field was
+ * validated — or by a future server this client does not know about — must
+ * produce the most of the message that CAN be drawn, not an exception and not
+ * a blank space. So:
+ *
+ *   an unreadable BLOCK is dropped, the rest of the message renders;
+ *   an unsafe card image drops the IMAGE, not the card;
+ *   an unreadable price drops the PRICE, because `formatMoney` handed a
+ *     string renders `NaN` at a shopper;
+ *   an unknown `type` is expected rather than exceptional — an old app meets
+ *     a newer server — and is dropped silently.
+ *
+ * ── The media guard ────────────────────────────────────────────────────
+ *
+ * `https:` only, no control characters, no untrimmed string, length capped.
+ * React Native's `Image` will happily fetch `http:` and `data:`, and a card
+ * is authored by whoever holds an API key — so the same refusal the widget
+ * applies in a browser applies here. There is no `javascript:` hazard in an
+ * `Image` source, but `http:` on a phone is a downgrade a shopper cannot see
+ * and `file:` is the device's own disk.
+ */
+import { readMoney } from './money';
+import { BLOCK_PROTOCOL_VERSION } from './types';
+const isBag = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const str = (v) => typeof v === 'string' && v.length > 0;
+/** `https:` and nothing else. Mirrors `isSafeMediaSrc` in the shared guard. */
+export function isSafeMediaSrc(src) {
+    if (src.length === 0 || src.length > 2000) {
+        return false;
+    }
+    // eslint-disable-next-line no-control-regex -- matching control characters IS the check
+    if (/[\u0000-\u001F\u007F]/.test(src) || src !== src.trim()) {
+        return false;
+    }
+    let parsed;
+    try {
+        parsed = new URL(src);
+    }
+    catch {
+        return false;
+    }
+    return parsed.protocol === 'https:';
+}
+function readAction(raw) {
+    if (!isBag(raw) || !str(raw['label'])) {
+        return null;
+    }
+    switch (raw['kind']) {
+        case 'url':
+            // An `href` is opened with `Linking.openURL`, which will launch any
+            // scheme the OS has a handler for — so the same https-only rule.
+            return str(raw['href']) && isSafeMediaSrc(raw['href'])
+                ? raw
+                : null;
+        case 'postback':
+            return str(raw['value']) ? raw : null;
+        case 'host_event':
+            return str(raw['event']) ? raw : null;
+        case 'step':
+            return str(raw['canvasId']) ? raw : null;
+        case 'copy':
+            return str(raw['text']) ? raw : null;
+        default:
+            return null;
+    }
+}
+function readActions(raw) {
+    return Array.isArray(raw) ? raw.map(readAction).filter((a) => a !== null) : [];
+}
+function readPairs(raw) {
+    return Array.isArray(raw)
+        ? raw.filter((f) => isBag(f) && str(f['label']) && str(f['value']))
+        : [];
+}
+function readCard(raw) {
+    if (!isBag(raw) || !str(raw['title'])) {
+        return null;
+    }
+    const card = {
+        ...raw,
+        actions: readActions(raw['actions']),
+        fields: readPairs(raw['fields']),
+    };
+    if (card['image'] !== undefined && !(str(card['image']) && isSafeMediaSrc(card['image']))) {
+        delete card['image'];
+    }
+    if (card['price'] !== undefined) {
+        const price = readMoney(card['price']);
+        if (price === null) {
+            delete card['price'];
+        }
+        else {
+            card['price'] = price;
+        }
+    }
+    return card;
+}
+function readBlock(raw) {
+    if (!isBag(raw)) {
+        return null;
+    }
+    switch (raw['type']) {
+        case 'text':
+            return str(raw['markdown']) ? raw : null;
+        case 'media':
+            // Unlike a card's image, a media block IS its image: nothing is left to
+            // render once the src is refused, so the block goes.
+            return str(raw['url']) &&
+                isSafeMediaSrc(raw['url']) &&
+                str(raw['alt']) &&
+                (raw['kind'] === 'image' || raw['kind'] === 'video')
+                ? raw
+                : null;
+        case 'fields': {
+            const items = readPairs(raw['items']);
+            return items.length > 0 ? { ...raw, items } : null;
+        }
+        case 'card': {
+            const card = readCard(raw);
+            return card === null ? null : card;
+        }
+        case 'card_grid': {
+            const cards = Array.isArray(raw['cards'])
+                ? raw['cards'].map(readCard).filter((c) => c !== null)
+                : [];
+            if (cards.length === 0) {
+                return null;
+            }
+            const grid = { ...raw, cards };
+            if (grid['layout'] !== 'grid' && grid['layout'] !== 'carousel') {
+                delete grid['layout'];
+            }
+            return grid;
+        }
+        case 'actions': {
+            const actions = readActions(raw['actions']);
+            return actions.length > 0 ? { ...raw, actions } : null;
+        }
+        case 'quick_replies': {
+            const options = readPairs(raw['options']);
+            return options.length > 0 ? { ...raw, options } : null;
+        }
+        case 'status':
+            // `id` is required: a status block exists to be patched.
+            return str(raw['id']) && str(raw['text']) ? raw : null;
+        case 'divider':
+            return raw;
+        default:
+            return null;
+    }
+}
+export function readBlocksEnvelope(raw) {
+    if (!isBag(raw) || raw['v'] !== BLOCK_PROTOCOL_VERSION || !Array.isArray(raw['blocks'])) {
+        return null;
+    }
+    const blocks = raw['blocks'].map(readBlock).filter((b) => b !== null);
+    return blocks.length > 0 ? { v: BLOCK_PROTOCOL_VERSION, blocks } : null;
+}
+/**
+ * Read a stored canvas.
+ *
+ * Looser than the block reader on one point and stricter on another. Looser:
+ * a canvas with no fields and no actions still renders, because a step can be
+ * a read-only confirmation. Stricter: `canvasId` is required, because it is
+ * what a submission is posted against — a canvas without one is a form with
+ * nowhere to go, which is worse than no form.
+ */
+export function readCanvas(raw) {
+    if (!isBag(raw) || raw['v'] !== BLOCK_PROTOCOL_VERSION || !str(raw['canvasId'])) {
+        return null;
+    }
+    const fields = Array.isArray(raw['fields'])
+        ? raw['fields'].filter((f) => isBag(f) && str(f['name']) && str(f['label']) && str(f['type']))
+        : [];
+    const actions = Array.isArray(raw['actions'])
+        ? raw['actions'].filter((a) => isBag(a) &&
+            str(a['id']) &&
+            str(a['label']) &&
+            (a['kind'] === 'submit' || a['kind'] === 'cancel'))
+        : [];
+    const blocks = Array.isArray(raw['blocks'])
+        ? raw['blocks'].map(readBlock).filter((b) => b !== null)
+        : [];
+    return { ...raw, fields, actions, blocks };
+}
+//# sourceMappingURL=read-envelope.js.map

package/dist/blocks/read-envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-envelope.js","sourceRoot":"","sources":["../../src/blocks/read-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAMjD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACjG,MAAM,GAAG,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAE/E,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,wFAAwF;IACxF,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACtC,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpB,KAAK,KAAK;YACR,oEAAoE;YACpE,iEAAiE;YACjE,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACpD,CAAC,CAAE,GAA+B;gBAClC,CAAC,CAAC,IAAI,CAAC;QACX,KAAK,UAAU;YACb,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,KAAK,YAAY;YACf,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,MAAM,CACR,CAAC,CAAC,EAAyC,EAAE,CAC3C,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CACjD;QACH,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAQ;QAChB,GAAG,GAAG;QACN,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;KACjC,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAE,GAA8B,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,KAAK,OAAO;YACV,wEAAwE;YACxE,qDAAqD;YACrD,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACpB,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC1B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACf,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC;gBACpD,CAAC,CAAE,GAA8B;gBACjC,CAAC,CAAC,IAAI,CAAC;QACX,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;QACjF,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC3B,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAA+B,CAAC;QACjE,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACvC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAY,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAQ,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC;YACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;YACD,OAAO,IAA8B,CAAC;QACxC,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC5C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,GAAG,GAAG,EAAE,OAAO,EAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,GAAG,GAAG,EAAE,OAAO,EAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,CAAC;QACD,KAAK,QAAQ;YACX,yDAAyD;YACzD,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAE,GAA8B,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,KAAK,SAAS;YACZ,OAAO,GAA6B,CAAC;QACvC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,sBAAsB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,sBAAsB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9F,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CACnB,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,CAAC;YACR,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACZ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACf,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CACrD;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QAC1E,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,GAAI,GAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAA6B,CAAC;AACpF,CAAC"}

package/dist/blocks/read-envelope.parity.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=read-envelope.parity.spec.d.ts.map

package/dist/blocks/read-envelope.parity.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-envelope.parity.spec.d.ts","sourceRoot":"","sources":["../../src/blocks/read-envelope.parity.spec.ts"],"names":[],"mappings":""}

package/dist/blocks/read-envelope.parity.spec.js

@@ -0,0 +1,146 @@
+/**
+ * The RN envelope reader against the canonical one.
+ *
+ * ── What this is really guarding ───────────────────────────────────────
+ *
+ * A reader that is slightly more permissive than the server's is a renderer
+ * that draws something the rest of the product refuses — and a reader that is
+ * slightly stricter silently drops content the shopper was supposed to see.
+ * Neither produces an error anywhere. The two readers are separate files
+ * because `@livechat/shared` is private and cannot be a runtime dependency of
+ * a published package, so this is the only thing that keeps them the same.
+ *
+ * Every case below is a shape a real author can produce. The refusals matter
+ * more than the acceptances: they are the ones that would otherwise reach a
+ * phone as a blank space, a broken image, or `NaN` where a price goes.
+ */
+import { readBlocksEnvelope as sharedRead } from '@livechat/shared/widget-blocks';
+import { describe, expect, it } from 'vitest';
+import { readBlocksEnvelope } from './read-envelope';
+const env = (...blocks) => ({ v: 1, blocks });
+const CASES = [
+    { why: 'a plain text block', raw: env({ type: 'text', markdown: 'hello' }) },
+    { why: 'text with no markdown is dropped', raw: env({ type: 'text' }) },
+    {
+        why: 'an https image',
+        raw: env({ type: 'media', kind: 'image', url: 'https://cdn.test/a.png', alt: 'a' }),
+    },
+    {
+        why: 'an http image is refused — the block IS its image',
+        raw: env({ type: 'media', kind: 'image', url: 'http://cdn.test/a.png', alt: 'a' }),
+    },
+    {
+        why: 'a media block with no alt is refused',
+        raw: env({ type: 'media', kind: 'image', url: 'https://cdn.test/a.png' }),
+    },
+    {
+        why: 'an unknown media kind is refused',
+        raw: env({ type: 'media', kind: 'audio', url: 'https://cdn.test/a.mp3', alt: 'a' }),
+    },
+    {
+        why: 'fields with one readable pair',
+        raw: env({ type: 'fields', items: [{ label: 'a', value: 'b' }] }),
+    },
+    {
+        why: 'fields with no readable pair is dropped',
+        raw: env({ type: 'fields', items: [{ label: 'a' }] }),
+    },
+    { why: 'a card', raw: env({ type: 'card', title: 'Hat', subtitle: 'wool' }) },
+    { why: 'a card with no title is dropped', raw: env({ type: 'card', subtitle: 'wool' }) },
+    {
+        why: 'an unsafe card image drops the IMAGE, not the card',
+        raw: env({ type: 'card', title: 'Hat', image: 'javascript:alert(1)' }),
+    },
+    {
+        why: 'an unreadable price drops the PRICE, not the card',
+        raw: env({ type: 'card', title: 'Hat', price: { amount: 48.2, currency: 'USD' } }),
+    },
+    {
+        why: 'a readable price is normalised',
+        raw: env({
+            type: 'card',
+            title: 'Hat',
+            price: { amount: 4820, currency: 'USD', compareAt: 6000 },
+        }),
+    },
+    {
+        why: 'a carousel keeps its layout',
+        raw: env({ type: 'card_grid', layout: 'carousel', cards: [{ title: 'a' }, { title: 'b' }] }),
+    },
+    {
+        why: 'an unknown layout is dropped so the grid stacks',
+        raw: env({ type: 'card_grid', layout: 'spiral', cards: [{ title: 'a' }] }),
+    },
+    { why: 'an empty grid is dropped', raw: env({ type: 'card_grid', cards: [] }) },
+    {
+        why: 'a grid drops only the unreadable cards',
+        raw: env({ type: 'card_grid', cards: [{ title: 'a' }, { subtitle: 'no title' }] }),
+    },
+    {
+        why: 'quick replies',
+        raw: env({ type: 'quick_replies', options: [{ label: 'a', value: 'b' }] }),
+    },
+    {
+        why: 'quick replies with nothing readable is dropped',
+        raw: env({ type: 'quick_replies', options: [] }),
+    },
+    { why: 'a status block', raw: env({ type: 'status', id: 's1', text: 'Looking…' }) },
+    { why: 'a status block with no id is dropped', raw: env({ type: 'status', text: 'Looking…' }) },
+    { why: 'a divider', raw: env({ type: 'divider' }) },
+    { why: 'an unknown type is dropped silently', raw: env({ type: 'hologram', spin: true }) },
+    {
+        why: 'the wrong protocol version is refused whole',
+        raw: { v: 2, blocks: [{ type: 'divider' }] },
+    },
+    { why: 'no blocks at all is null, not an empty envelope', raw: env() },
+    { why: 'a non-object is null', raw: 'nope' },
+    { why: 'null is null', raw: null },
+    {
+        why: 'a postback action',
+        raw: env({ type: 'actions', actions: [{ kind: 'postback', label: 'Yes', value: 'yes' }] }),
+    },
+    {
+        why: 'a host_event action — the one the native app exists for',
+        raw: env({ type: 'actions', actions: [{ kind: 'host_event', label: 'Pay', event: 'pay' }] }),
+    },
+    {
+        why: 'an action with no label is dropped',
+        raw: env({ type: 'actions', actions: [{ kind: 'postback', value: 'yes' }] }),
+    },
+    {
+        why: 'an actions block with nothing readable is dropped',
+        raw: env({ type: 'actions', actions: [{ kind: 'teleport', label: 'Go' }] }),
+    },
+];
+describe('RN block reader ≡ shared block reader', () => {
+    for (const c of CASES) {
+        it(c.why, () => {
+            expect(readBlocksEnvelope(c.raw)).toEqual(sharedRead(c.raw));
+        });
+    }
+    it('is a real comparison — the shared module is actually loaded', () => {
+        expect(sharedRead).not.toBe(readBlocksEnvelope);
+        expect(sharedRead(env({ type: 'divider' }))).toEqual({ v: 1, blocks: [{ type: 'divider' }] });
+    });
+    /**
+     * The ONE place the two readers differ, stated as a test so it cannot drift
+     * into an accident.
+     *
+     * A `url` action is opened here with `Linking.openURL`, which launches
+     * whatever scheme the OS has a handler for — `tel:`, `itms-apps:`, a
+     * third-party app's own scheme. In a browser the widget's own href policy
+     * (`permittedDecodedHref`) runs at RENDER time and admits a wider set
+     * safely because an `<a>` is inert until clicked and the browser itself
+     * refuses the dangerous schemes. On a phone neither is true, so this reader
+     * refuses anything but `https:` at READ time.
+     */
+    it('refuses a non-https url action that the shared reader admits', () => {
+        const raw = env({
+            type: 'actions',
+            actions: [{ kind: 'url', label: 'Call', href: 'tel:+15550100' }],
+        });
+        expect(sharedRead(raw)).not.toBeNull();
+        expect(readBlocksEnvelope(raw)).toBeNull();
+    });
+});
+//# sourceMappingURL=read-envelope.parity.spec.js.map

package/dist/blocks/read-envelope.parity.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-envelope.parity.spec.js","sourceRoot":"","sources":["../../src/blocks/read-envelope.parity.spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,kBAAkB,IAAI,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,GAAG,GAAG,CAAC,GAAG,MAAiB,EAAW,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAElE,MAAM,KAAK,GAAyC;IAClD,EAAE,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE;IAC5E,EAAE,GAAG,EAAE,kCAAkC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;IACvE;QACE,GAAG,EAAE,gBAAgB;QACrB,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;KACpF;IACD;QACE,GAAG,EAAE,mDAAmD;QACxD,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,uBAAuB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;KACnF;IACD;QACE,GAAG,EAAE,sCAAsC;QAC3C,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,wBAAwB,EAAE,CAAC;KAC1E;IACD;QACE,GAAG,EAAE,kCAAkC;QACvC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;KACpF;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KAClE;IACD;QACE,GAAG,EAAE,yCAAyC;QAC9C,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KACtD;IACD,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE;IAC7E,EAAE,GAAG,EAAE,iCAAiC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE;IACxF;QACE,GAAG,EAAE,oDAAoD;QACzD,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;KACvE;IACD;QACE,GAAG,EAAE,mDAAmD;QACxD,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;KACnF;IACD;QACE,GAAG,EAAE,gCAAgC;QACrC,GAAG,EAAE,GAAG,CAAC;YACP,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;SAC1D,CAAC;KACH;IACD;QACE,GAAG,EAAE,6BAA6B;QAClC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KAC7F;IACD;QACE,GAAG,EAAE,iDAAiD;QACtD,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KAC3E;IACD,EAAE,GAAG,EAAE,0BAA0B,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE;IAC/E;QACE,GAAG,EAAE,wCAAwC;QAC7C,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;KACnF;IACD;QACE,GAAG,EAAE,eAAe;QACpB,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KAC3E;IACD;QACE,GAAG,EAAE,gDAAgD;QACrD,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;KACjD;IACD,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE;IACnF,EAAE,GAAG,EAAE,sCAAsC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE;IAC/F,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;IACnD,EAAE,GAAG,EAAE,qCAAqC,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE;IAC1F;QACE,GAAG,EAAE,6CAA6C;QAClD,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;KAC7C;IACD,EAAE,GAAG,EAAE,iDAAiD,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACtE,EAAE,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,MAAM,EAAE;IAC5C,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,EAAE;IAClC;QACE,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;KAC3F;IACD;QACE,GAAG,EAAE,yDAAyD;QAC9D,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;KAC7F;IACD;QACE,GAAG,EAAE,oCAAoC;QACzC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;KAC7E;IACD;QACE,GAAG,EAAE,mDAAmD;QACxD,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;KAC5E;CACF,CAAC;AAEF,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE;YACb,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAChD,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH;;;;;;;;;;;OAWG;IACH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,GAAG,GAAG,GAAG,CAAC;YACd,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}