@cunpingtai/webad-react-ad-scripts 0.1.0 → 0.2.1

package/dist/index.js

@@ -14528,6 +14528,73 @@ function date4(params) {
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// ../shared-contract/src/adsterra.ts
+var PLACEMENT_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var CONTAINER_ID = /^[A-Za-z][A-Za-z0-9:_-]{0,127}$/;
+var ZONE_KEY = /^[A-Za-z0-9]{1,128}$/;
+var PARAM_KEY = /^[A-Za-z0-9_-]{1,64}$/;
+var MAX_URL_LENGTH = 2048;
+var AdsterraValueSchema = external_exports.union([
+  external_exports.string().max(256),
+  external_exports.number().finite(),
+  external_exports.boolean()
+]);
+var AdsterraParamsSchema = external_exports.record(external_exports.string().regex(PARAM_KEY), AdsterraValueSchema).refine((params) => Object.keys(params).length <= 16, {
+  message: "Adsterra params must contain at most 16 entries"
+});
+var ManagedAdsterraUrlSchema = external_exports.string().min(1).max(MAX_URL_LENGTH).refine(isSafeManagedUrl, { message: "Invalid managed Adsterra URL" });
+var AdsterraBannerPlacementSchema = external_exports.object({
+  kind: external_exports.literal("banner"),
+  scriptSrc: ManagedAdsterraUrlSchema,
+  zoneKey: external_exports.string().regex(ZONE_KEY),
+  width: external_exports.number().int().min(1).max(2048),
+  height: external_exports.number().int().min(1).max(2048),
+  params: AdsterraParamsSchema
+}).strict();
+var AdsterraNativePlacementSchema = external_exports.object({
+  kind: external_exports.literal("native"),
+  scriptSrc: ManagedAdsterraUrlSchema,
+  containerId: external_exports.string().regex(CONTAINER_ID)
+}).strict();
+var AdsterraPlacementSchema = external_exports.discriminatedUnion("kind", [
+  AdsterraBannerPlacementSchema,
+  AdsterraNativePlacementSchema
+]);
+var AdsterraPlacementsSchema = external_exports.record(
+  external_exports.string().min(1).max(80).regex(PLACEMENT_NAME),
+  AdsterraPlacementSchema
+).refine((placements) => Object.keys(placements).length <= 64, {
+  message: "A site may contain at most 64 Adsterra placements"
+});
+var ManagedScriptSchema = external_exports.object({ scriptSrc: ManagedAdsterraUrlSchema }).strict();
+var ManagedSmartlinkSchema = external_exports.object({ href: ManagedAdsterraUrlSchema }).strict();
+var SiteAdsterraConfigSchema = external_exports.object({
+  placements: AdsterraPlacementsSchema,
+  socialBar: ManagedScriptSchema.optional(),
+  popunder: ManagedScriptSchema.optional(),
+  smartlink: ManagedSmartlinkSchema.optional()
+}).strict();
+function isSafeManagedUrl(value) {
+  if (/\s/.test(value) || value.includes("#") || hasExplicitPort(value)) {
+    return false;
+  }
+  try {
+    const url2 = new URL(value);
+    return url2.protocol === "https:" && url2.username === "" && url2.password === "" && url2.port === "" && url2.hash === "";
+  } catch {
+    return false;
+  }
+}
+function hasExplicitPort(value) {
+  const schemeEnd = value.indexOf(":");
+  if (schemeEnd < 0) return false;
+  const remainder = value.slice(schemeEnd + 1).replace(/^[\\/]+/, "");
+  const authorityEnd = remainder.search(/[\\/?#]/);
+  const authority = authorityEnd < 0 ? remainder : remainder.slice(0, authorityEnd);
+  const host = authority.slice(authority.lastIndexOf("@") + 1);
+  return host.startsWith("[") ? host.includes("]:") : host.includes(":");
+}
+
 // ../shared-contract/src/schemas.ts
 var ScriptDescriptorSchema = external_exports.object({
   id: external_exports.string().min(1).max(80),
@@ -14565,7 +14632,8 @@ var SiteConfigSchema = external_exports.object({
   enabled: external_exports.boolean(),
   mode: external_exports.union([external_exports.enum(AD_MODES), external_exports.literal("inherit")]),
   aliases: external_exports.array(external_exports.string()).max(32),
-  providers: ProviderOverridesSchema
+  providers: ProviderOverridesSchema,
+  adsterra: SiteAdsterraConfigSchema.optional()
 }).strict();
 var SnapshotSchema = external_exports.object({
   schemaVersion: external_exports.literal(1),
@@ -14584,7 +14652,8 @@ var PublicConfigSchema = external_exports.object({
   mode: external_exports.enum(AD_MODES),
   allowedScriptHosts: external_exports.array(external_exports.string().min(1).max(253)).max(64),
   scripts: external_exports.array(ScriptDescriptorSchema).max(32),
-  ttlSeconds: external_exports.number().int().min(0).max(300)
+  ttlSeconds: external_exports.number().int().min(0).max(300),
+  adsterra: SiteAdsterraConfigSchema.optional()
 }).strict();
 
 // ../shared-contract/src/hostname.ts
@@ -14775,10 +14844,10 @@ function requestConfig(endpoint, host, timeoutMs) {
 
 // src/validation.ts
 var SLOT_ID = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-var CONTAINER_ID = /^[A-Za-z][A-Za-z0-9:_-]{0,127}$/;
-var ZONE_KEY = /^[A-Za-z0-9]{1,128}$/;
-var PARAM_KEY = /^[A-Za-z0-9_-]{1,64}$/;
-var MAX_URL_LENGTH = 2048;
+var CONTAINER_ID2 = /^[A-Za-z][A-Za-z0-9:_-]{0,127}$/;
+var ZONE_KEY2 = /^[A-Za-z0-9]{1,128}$/;
+var PARAM_KEY2 = /^[A-Za-z0-9_-]{1,64}$/;
+var MAX_URL_LENGTH2 = 2048;
 function validatePageKey(value) {
   if (typeof value !== "string" || value.length < 1 || value.length > 2048) {
     throw new Error("invalid pageKey");
@@ -14791,13 +14860,13 @@ function validateSlotId(value) {
   }
   return value;
 }
-function validateScriptUrl(value, allowedHosts) {
+function validateComponentScriptUrl(value) {
   const url2 = parseAbsoluteUrl(value, "scriptSrc");
   if (url2.protocol !== "https:") {
     throw new Error("scriptSrc must use HTTPS");
   }
-  if (!allowedHosts.some((host) => host.toLowerCase() === url2.hostname)) {
-    throw new Error("scriptSrc hostname is not allowed");
+  if (/[\t\n\r]/.test(value) || value.includes("#") || hasExplicitPort2(value)) {
+    throw new Error("invalid scriptSrc");
   }
   return url2.toString();
 }
@@ -14809,13 +14878,13 @@ function validateSmartlinkUrl(value) {
   return url2.toString();
 }
 function validateContainerId(value) {
-  if (typeof value !== "string" || !CONTAINER_ID.test(value)) {
+  if (typeof value !== "string" || !CONTAINER_ID2.test(value)) {
     throw new Error("invalid containerId");
   }
   return value;
 }
 function validateZoneKey(value) {
-  if (typeof value !== "string" || !ZONE_KEY.test(value)) {
+  if (typeof value !== "string" || !ZONE_KEY2.test(value)) {
     throw new Error("invalid zoneKey");
   }
   return value;
@@ -14838,7 +14907,7 @@ function validateParams(params) {
     throw new Error("invalid params");
   }
   for (const [key, value] of entries) {
-    if (!PARAM_KEY.test(key)) {
+    if (!PARAM_KEY2.test(key)) {
       throw new Error("invalid params");
     }
     if (typeof value === "string") {
@@ -14860,7 +14929,7 @@ function validateParams(params) {
   return { ...params };
 }
 function parseAbsoluteUrl(value, name) {
-  if (typeof value !== "string" || value.length < 1 || value.length > MAX_URL_LENGTH) {
+  if (typeof value !== "string" || value.length < 1 || value.length > MAX_URL_LENGTH2) {
     throw new Error(`invalid ${name}`);
   }
   let url2;
@@ -14874,6 +14943,21 @@ function parseAbsoluteUrl(value, name) {
   }
   return url2;
 }
+function hasExplicitPort2(value) {
+  const source = value.trim();
+  const schemeEnd = source.indexOf(":");
+  if (schemeEnd < 0) {
+    return false;
+  }
+  const remainder = source.slice(schemeEnd + 1).replace(/^[\\/]+/, "");
+  const authorityEnd = remainder.search(/[\\/?#]/);
+  const authority = authorityEnd < 0 ? remainder : remainder.slice(0, authorityEnd);
+  const host = authority.slice(authority.lastIndexOf("@") + 1);
+  if (host.startsWith("[")) {
+    return host.includes("]:");
+  }
+  return host.includes(":");
+}
 function validDimension(value) {
   return Number.isSafeInteger(value) && value >= 1 && value <= 2048;
 }
@@ -14919,6 +15003,13 @@ function AdsProvider({
         mounted = false;
       };
     }
+    if (isLocalHostname(window.location.hostname)) {
+      setPlan(null);
+      emit({ state: "disabled", mode: "none" });
+      return () => {
+        mounted = false;
+      };
+    }
     const load = async () => {
       setPlan(null);
       emit({ state: "loading-config" });
@@ -14983,6 +15074,10 @@ function AdsProvider({
   }, [nonce, plan, providerId, validatedPageKey]);
   return /* @__PURE__ */ jsx(AdsContext.Provider, { value: context, children });
 }
+function isLocalHostname(hostname3) {
+  const normalized = hostname3.toLowerCase();
+  return normalized === "localhost" || normalized.endsWith(".localhost") || normalized === "127.0.0.1" || normalized === "[::1]" || normalized === "::1";
+}
 
 // src/AdsterraBanner.tsx
 import { useEffect as useEffect2, useRef as useRef2 } from "react";
@@ -15051,12 +15146,7 @@ function isFormatAllowed(mode, format) {
 // src/AdsterraBanner.tsx
 import { jsx as jsx2 } from "react/jsx-runtime";
 function AdsterraBanner({
-  slotId,
-  scriptSrc,
-  zoneKey,
-  width,
-  height,
-  params,
+  placement,
   className,
   style
 }) {
@@ -15065,14 +15155,17 @@ function AdsterraBanner({
   let validated;
   if (context !== null && isFormatAllowed(context.plan.mode, "banner")) {
     try {
-      validateSlotId(slotId);
-      const dimensions = validateDimensions(width, height);
-      validated = {
-        src: validateScriptUrl(scriptSrc, context.plan.allowedScriptHosts),
-        zoneKey: validateZoneKey(zoneKey),
-        ...dimensions,
-        params: validateParams(params)
-      };
+      validateSlotId(placement);
+      const managed = context.plan.adsterra?.placements[placement];
+      if (managed?.kind === "banner") {
+        const dimensions = validateDimensions(managed.width, managed.height);
+        validated = {
+          src: validateComponentScriptUrl(managed.scriptSrc),
+          zoneKey: validateZoneKey(managed.zoneKey),
+          ...dimensions,
+          params: validateParams(managed.params)
+        };
+      }
     } catch {
       validated = void 0;
     }
@@ -15082,7 +15175,12 @@ function AdsterraBanner({
     if (context === null || validated === void 0 || container === null) {
       return;
     }
-    if (!claimPageSlot(document, context.providerId, context.pageViewId, slotId)) {
+    if (!claimPageSlot(
+      document,
+      context.providerId,
+      context.pageViewId,
+      placement
+    )) {
       return;
     }
     void enqueueBanner(document, async () => {
@@ -15103,7 +15201,7 @@ function AdsterraBanner({
         await appendBannerScript(
           container,
           validated.src,
-          slotId,
+          placement,
           context.nonce
         );
       } finally {
@@ -15114,7 +15212,7 @@ function AdsterraBanner({
         }
       }
     }).catch(() => void 0);
-  }, [context, slotId, validated]);
+  }, [context, placement, validated]);
   if (validated === void 0) {
     return null;
   }
@@ -15122,7 +15220,7 @@ function AdsterraBanner({
     "div",
     {
       ref: containerRef,
-      "data-webad-banner-slot": slotId,
+      "data-webad-banner-slot": placement,
       className,
       style: { ...style, width: validated.width, minHeight: validated.height }
     }
@@ -15152,9 +15250,7 @@ function appendBannerScript(container, src, slotId, nonce) {
 import { useEffect as useEffect3, useRef as useRef3 } from "react";
 import { jsx as jsx3 } from "react/jsx-runtime";
 function AdsterraNativeBanner({
-  slotId,
-  scriptSrc,
-  containerId,
+  placement,
   className,
   style
 }) {
@@ -15164,12 +15260,12 @@ function AdsterraNativeBanner({
   let validatedContainerId = null;
   if (context !== null && isFormatAllowed(context.plan.mode, "native-banner")) {
     try {
-      validateSlotId(slotId);
-      validatedContainerId = validateContainerId(containerId);
-      validatedSrc = validateScriptUrl(
-        scriptSrc,
-        context.plan.allowedScriptHosts
-      );
+      validateSlotId(placement);
+      const managed = context.plan.adsterra?.placements[placement];
+      if (managed?.kind === "native") {
+        validatedContainerId = validateContainerId(managed.containerId);
+        validatedSrc = validateComponentScriptUrl(managed.scriptSrc);
+      }
     } catch {
       validatedSrc = null;
       validatedContainerId = null;
@@ -15180,19 +15276,24 @@ function AdsterraNativeBanner({
     if (context === null || validatedSrc === null || validatedContainerId === null || container === null || document.getElementById(validatedContainerId) !== container) {
       return;
     }
-    if (!claimPageSlot(document, context.providerId, context.pageViewId, slotId)) {
+    if (!claimPageSlot(
+      document,
+      context.providerId,
+      context.pageViewId,
+      placement
+    )) {
       return;
     }
     const script = document.createElement("script");
     script.src = validatedSrc;
     script.async = true;
     script.dataset.cfasync = "false";
-    script.dataset.webadSlotId = slotId;
+    script.dataset.webadSlotId = placement;
     if (context.nonce !== void 0) {
       script.nonce = context.nonce;
     }
     container.append(script);
-  }, [context, slotId, validatedContainerId, validatedSrc]);
+  }, [context, placement, validatedContainerId, validatedSrc]);
   if (validatedSrc === null || validatedContainerId === null) {
     return null;
   }
@@ -15210,7 +15311,6 @@ function AdsterraNativeBanner({
 // src/AdsterraSmartlink.tsx
 import { jsx as jsx4 } from "react/jsx-runtime";
 function AdsterraSmartlink({
-  href,
   children,
   target = "_blank",
   className
@@ -15221,6 +15321,8 @@ function AdsterraSmartlink({
   }
   let validatedHref;
   try {
+    const href = context.plan.adsterra?.smartlink?.href;
+    if (href === void 0) return null;
     validatedHref = validateSmartlinkUrl(href);
   } catch {
     return null;
@@ -15240,25 +15342,24 @@ function AdsterraSmartlink({
 // src/page-scripts.tsx
 import { useEffect as useEffect4 } from "react";
 import { jsx as jsx5 } from "react/jsx-runtime";
-function AdsterraSocialBar(props) {
-  return /* @__PURE__ */ jsx5(PageScript, { ...props, format: "social-bar", target: "body" });
+function AdsterraSocialBar(_props) {
+  return /* @__PURE__ */ jsx5(PageScript, { format: "social-bar", target: "body" });
 }
-function AdsterraPopunder(props) {
-  return /* @__PURE__ */ jsx5(PageScript, { ...props, format: "popunder", target: "head" });
+function AdsterraPopunder(_props) {
+  return /* @__PURE__ */ jsx5(PageScript, { format: "popunder", target: "head" });
 }
-function PageScript({ format, slotId, scriptSrc, target }) {
+function PageScript({ format, target }) {
   const context = useAdsContext();
+  const slotId = format === "social-bar" ? "global-social-bar" : "global-popunder";
   useEffect4(() => {
     if (context === null || !isFormatAllowed(context.plan.mode, format)) {
       return;
     }
     let validatedSrc;
     try {
-      validateSlotId(slotId);
-      validatedSrc = validateScriptUrl(
-        scriptSrc,
-        context.plan.allowedScriptHosts
-      );
+      const managed = format === "social-bar" ? context.plan.adsterra?.socialBar : context.plan.adsterra?.popunder;
+      if (managed === void 0) return;
+      validatedSrc = validateComponentScriptUrl(managed.scriptSrc);
     } catch {
       return;
     }
@@ -15274,7 +15375,7 @@ function PageScript({ format, slotId, scriptSrc, target }) {
       script.nonce = context.nonce;
     }
     document[target].append(script);
-  }, [context, format, scriptSrc, slotId, target]);
+  }, [context, format, slotId, target]);
   return null;
 }
 export {