@nfcard/validation 0.23.0 → 0.24.0

package/dist/index.js

@@ -1,5 +1,5 @@
 // src/index.ts
-import { z } from "zod";
+import { z as z2 } from "zod";
 import {
   isTipProviderId,
   normalizeTipHandle,
@@ -448,6 +448,180 @@ function elementPrintability(el, ctx) {
   return out;
 }
 
+// src/profileLayout.ts
+import { z } from "zod";
+import {
+  MAX_DISTINCT_OBJECT_FONTS,
+  MAX_FREE_TEXT_LENGTH,
+  MAX_LAYOUT_OBJECT_OVERRIDES,
+  MAX_OBJECT_ORDER_LENGTH,
+  MAX_OWNED_OBJECTS,
+  FREE_TEXT_ID_RE,
+  PROFILE_SECTIONS,
+  PROFILE_SECTION_IDS,
+  objectKindOf
+} from "@nfcard/types";
+var HEX_RE = /^#[0-9A-Fa-f]{6}$/;
+var OBJECT_ID_SHAPE_RE = /^[A-Za-z0-9_-]{1,32}$/;
+var textObjectStyleSchema = z.object({
+  color: z.string().regex(HEX_RE).optional(),
+  sizeStep: z.enum(["sm", "md", "lg"]).optional(),
+  align: z.enum(["start", "center"]).optional(),
+  weight: z.enum(["normal", "bold"]).optional(),
+  italic: z.boolean().optional(),
+  underline: z.boolean().optional(),
+  // Resolved through the api's font map at render; an unknown key falls
+  // back to the template pairing, so membership is not validated here.
+  fontKey: z.string().min(1).max(64).regex(/^[A-Za-z0-9-]+$/).optional()
+}).strict();
+var imageObjectStyleSchema = z.object({
+  crop: z.object({
+    x: z.number().min(0).max(1),
+    y: z.number().min(0).max(1),
+    zoom: z.number().min(1).max(3)
+  }).strict().optional(),
+  borderColor: z.string().regex(HEX_RE).optional(),
+  borderPx: z.number().int().min(0).max(8).optional(),
+  shape: z.enum(["circle", "rounded", "square"]).optional()
+}).strict();
+var buttonObjectStyleSchema = z.object({
+  bg: z.string().regex(HEX_RE).optional(),
+  variant: z.enum(["solid", "soft", "outline"]).optional()
+}).strict();
+var STYLE_SCHEMA_FOR_KIND = {
+  text: textObjectStyleSchema,
+  freeText: textObjectStyleSchema,
+  image: imageObjectStyleSchema,
+  ctaButton: buttonObjectStyleSchema,
+  linkOut: buttonObjectStyleSchema,
+  action: buttonObjectStyleSchema
+};
+var orderListSchema = z.array(z.string().regex(OBJECT_ID_SHAPE_RE)).max(MAX_OBJECT_ORDER_LENGTH);
+var freeTextObjectSchema = z.object({
+  id: z.string().regex(FREE_TEXT_ID_RE),
+  kind: z.literal("freeText"),
+  section: z.enum(PROFILE_SECTION_IDS),
+  text: z.string().max(2e3).transform((v) => sanitizeText(v, MAX_FREE_TEXT_LENGTH))
+}).strict();
+var profileLayoutSchema = z.object({
+  v: z.literal(1),
+  sectionOrder: z.array(z.enum(PROFILE_SECTION_IDS)).max(PROFILE_SECTION_IDS.length).optional(),
+  objectOrder: z.object(
+    Object.fromEntries(
+      PROFILE_SECTION_IDS.map((id) => [id, orderListSchema.optional()])
+    )
+  ).strict().partial().optional(),
+  objects: z.record(z.string().regex(OBJECT_ID_SHAPE_RE), z.unknown()).optional(),
+  ownedObjects: z.array(freeTextObjectSchema).max(MAX_OWNED_OBJECTS).optional()
+}).strict().superRefine((layout, ctx) => {
+  if (layout.sectionOrder) {
+    const seen = new Set(layout.sectionOrder);
+    if (seen.size !== layout.sectionOrder.length) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["sectionOrder"],
+        message: "duplicate section id"
+      });
+    }
+  }
+  if (layout.objects) {
+    const keys = Object.keys(layout.objects);
+    if (keys.length > MAX_LAYOUT_OBJECT_OVERRIDES) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["objects"],
+        message: `more than ${MAX_LAYOUT_OBJECT_OVERRIDES} overrides`
+      });
+      return;
+    }
+    const fonts = /* @__PURE__ */ new Set();
+    for (const key of keys) {
+      const kind = objectKindOf(key);
+      if (!kind) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["objects", key],
+          message: "unknown object id"
+        });
+        continue;
+      }
+      const styleSchema = STYLE_SCHEMA_FOR_KIND[kind];
+      const override = layout.objects[key];
+      const overrideParsed = z.object({ style: z.unknown().optional() }).strict().safeParse(override);
+      if (!overrideParsed.success) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["objects", key],
+          message: "override must be { style? }"
+        });
+        continue;
+      }
+      const style = overrideParsed.data.style;
+      if (style === void 0) continue;
+      if (!styleSchema) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["objects", key, "style"],
+          message: `kind '${kind}' is not stylable`
+        });
+        continue;
+      }
+      const parsed = styleSchema.safeParse(style);
+      if (!parsed.success) {
+        for (const issue of parsed.error.issues) {
+          ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["objects", key, "style", ...issue.path],
+            message: issue.message
+          });
+        }
+        continue;
+      }
+      const fontKey = parsed.data.fontKey;
+      if (fontKey) fonts.add(fontKey);
+    }
+    if (fonts.size > MAX_DISTINCT_OBJECT_FONTS) {
+      ctx.addIssue({
+        code: z.ZodIssueCode.custom,
+        path: ["objects"],
+        message: `more than ${MAX_DISTINCT_OBJECT_FONTS} distinct fonts`
+      });
+    }
+  }
+  if (layout.ownedObjects) {
+    const ids = /* @__PURE__ */ new Set();
+    layout.ownedObjects.forEach((obj, i) => {
+      if (ids.has(obj.id)) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["ownedObjects", i, "id"],
+          message: "duplicate freeText id"
+        });
+      }
+      ids.add(obj.id);
+      if (!PROFILE_SECTIONS[obj.section].hosts.includes("freeText")) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["ownedObjects", i, "section"],
+          message: `section '${obj.section}' does not host freeText`
+        });
+      }
+      if (obj.text.length === 0) {
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["ownedObjects", i, "text"],
+          message: "empty after sanitisation"
+        });
+      }
+    });
+  }
+});
+function safeProfileLayout(value) {
+  if (value === void 0 || value === null) return null;
+  const parsed = profileLayoutSchema.safeParse(value);
+  return parsed.success ? parsed.data : null;
+}
+
 // src/index.ts
 var WEB_HOSTNAME_RE = /^(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z]{2,}$/i;
 function isWebAddress(value) {
@@ -464,7 +638,7 @@ function isWebAddress(value) {
   const hostPart = value.split(/[/?#]/, 1)[0];
   return WEB_HOSTNAME_RE.test(hostPart);
 }
-var webAddressSchema = z.string().refine(isWebAddress, "invalidUrl").optional().or(z.literal(""));
+var webAddressSchema = z2.string().refine(isWebAddress, "invalidUrl").optional().or(z2.literal(""));
 function stripUnsafeChars(s) {
   return s.replace(/[-<>"'`\\]/g, "").trim();
 }
@@ -489,8 +663,8 @@ function sanitizeText(raw, max = 50) {
   const noTags = raw.replace(/<[^>]*>/g, "").replace(/[-]/g, "");
   return noTags.trim().slice(0, max);
 }
-var secureUrl = z.string().max(2048).optional().or(z.literal("")).transform((v) => sanitizeHttpUrl(v));
-var socialLinksSchema = z.object({
+var secureUrl = z2.string().max(2048).optional().or(z2.literal("")).transform((v) => sanitizeHttpUrl(v));
+var socialLinksSchema = z2.object({
   facebook: secureUrl,
   linkedin: secureUrl,
   instagram: secureUrl,
@@ -498,10 +672,10 @@ var socialLinksSchema = z.object({
   youtube: secureUrl,
   tiktok: secureUrl,
   customUrl: secureUrl,
-  customUrlLabel: z.string().max(80).optional().or(z.literal("")).transform((v) => sanitizeText(v ?? "", 50))
+  customUrlLabel: z2.string().max(80).optional().or(z2.literal("")).transform((v) => sanitizeText(v ?? "", 50))
 });
-var overrideUrl = z.string().max(2048).transform((v) => sanitizeHttpUrl(v)).optional();
-var socialOverridesSchema = z.object({
+var overrideUrl = z2.string().max(2048).transform((v) => sanitizeHttpUrl(v)).optional();
+var socialOverridesSchema = z2.object({
   facebook: overrideUrl,
   linkedin: overrideUrl,
   instagram: overrideUrl,
@@ -512,47 +686,47 @@ var socialOverridesSchema = z.object({
   youtube: overrideUrl,
   tiktok: overrideUrl,
   customUrl: overrideUrl,
-  customUrlLabel: z.string().max(100).transform((v) => sanitizeText(v, 80)).optional()
+  customUrlLabel: z2.string().max(100).transform((v) => sanitizeText(v, 80)).optional()
 });
-var userDataSchema = z.object({
+var userDataSchema = z2.object({
   // First/last name became optional — visitors can save with just an
   // email and fill names in later. Format guards still apply once
   // filled.
-  firstName: z.string().max(100).optional().or(z.literal("")),
-  lastName: z.string().max(100).optional().or(z.literal("")),
-  position: z.string().max(100).optional().or(z.literal("")),
-  email: z.string().email("invalidEmail"),
-  phone: z.string().regex(/^[+]?[\d\s\-().]{6,20}$/, "invalidPhone").optional().or(z.literal("")),
+  firstName: z2.string().max(100).optional().or(z2.literal("")),
+  lastName: z2.string().max(100).optional().or(z2.literal("")),
+  position: z2.string().max(100).optional().or(z2.literal("")),
+  email: z2.string().email("invalidEmail"),
+  phone: z2.string().regex(/^[+]?[\d\s\-().]{6,20}$/, "invalidPhone").optional().or(z2.literal("")),
   // ISO 3166-1 alpha-2 country code paired with `phone`. Persisted alongside
   // the local number so the digital profile renderer (and the VCF generator)
   // can prepend the correct E.164 calling prefix, e.g. `+36 20 123 4567`.
   // Must be part of the base schema — Zod strips unknown keys in strict mode,
   // which would otherwise silently drop the ISO code on wizard submit and
   // leave every brand-new profile without a country prefix.
-  phoneCountryCode: z.string().max(5).optional().or(z.literal("")),
-  location: z.string().max(200).optional().or(z.literal("")),
-  company: z.string().max(100).optional().or(z.literal("")),
+  phoneCountryCode: z2.string().max(5).optional().or(z2.literal("")),
+  location: z2.string().max(200).optional().or(z2.literal("")),
+  company: z2.string().max(100).optional().or(z2.literal("")),
   // Stored scheme-less (`www.foxhome.hu`); see webAddressSchema above.
   website: webAddressSchema,
   // FOXHOLE — promoted from digitalConfig.contentOverrides.bio when
   // the digital text-override layer was retired.
-  bio: z.string().max(500).optional().or(z.literal("")),
-  profilePhotoUrl: z.string().url().optional().or(z.literal("")),
-  companyLogoUrl: z.string().url().optional().or(z.literal("")),
+  bio: z2.string().max(500).optional().or(z2.literal("")),
+  profilePhotoUrl: z2.string().url().optional().or(z2.literal("")),
+  companyLogoUrl: z2.string().url().optional().or(z2.literal("")),
   socialLinks: socialLinksSchema.optional()
 });
-var cardElementsSchema = z.object({
-  showName: z.boolean(),
-  showPosition: z.boolean(),
-  showEmail: z.boolean(),
-  showPhone: z.boolean(),
-  showCompany: z.boolean(),
-  showLogo: z.boolean(),
-  showQr: z.boolean(),
-  showPhoto: z.boolean()
+var cardElementsSchema = z2.object({
+  showName: z2.boolean(),
+  showPosition: z2.boolean(),
+  showEmail: z2.boolean(),
+  showPhone: z2.boolean(),
+  showCompany: z2.boolean(),
+  showLogo: z2.boolean(),
+  showQr: z2.boolean(),
+  showPhoto: z2.boolean()
 });
-var materialSchema = z.enum(["plastic", "3dprint_standard", "metal", "bamboo"]);
-var comboIdSchema = z.enum([
+var materialSchema = z2.enum(["plastic", "3dprint_standard", "metal", "bamboo"]);
+var comboIdSchema = z2.enum([
   "A1",
   "A2",
   "B1",
@@ -564,154 +738,154 @@ var comboIdSchema = z.enum([
   "E1",
   "E2"
 ]);
-var contactDetailTogglesSchema = z.object({
-  showEmail: z.boolean().optional(),
-  showPhone: z.boolean().optional(),
-  showLocation: z.boolean().optional()
+var contactDetailTogglesSchema = z2.object({
+  showEmail: z2.boolean().optional(),
+  showPhone: z2.boolean().optional(),
+  showLocation: z2.boolean().optional()
 });
-var physicalContentOverridesSchema = z.object({
-  displayName: z.string().max(100).optional().or(z.literal("")),
-  company: z.string().max(100).optional().or(z.literal("")),
-  position: z.string().max(200).optional().or(z.literal("")),
-  email: z.string().email().optional().or(z.literal("")),
-  phone: z.string().max(30).optional().or(z.literal("")),
+var physicalContentOverridesSchema = z2.object({
+  displayName: z2.string().max(100).optional().or(z2.literal("")),
+  company: z2.string().max(100).optional().or(z2.literal("")),
+  position: z2.string().max(200).optional().or(z2.literal("")),
+  email: z2.string().email().optional().or(z2.literal("")),
+  phone: z2.string().max(30).optional().or(z2.literal("")),
   // Paired ISO code so the override phone can still get a `+XX ` prefix.
   // See ContentOverrides.phoneCountryCode in @nfcard/types.
-  phoneCountryCode: z.string().max(5).optional().or(z.literal("")),
-  location: z.string().max(200).optional().or(z.literal(""))
+  phoneCountryCode: z2.string().max(5).optional().or(z2.literal("")),
+  location: z2.string().max(200).optional().or(z2.literal(""))
 });
-var hexColorSchema = z.string().regex(/^#[0-9A-Fa-f]{6}$/, "invalidHexColour");
-var cellSidesSchema = z.number().int().refine((s) => s === 0 || s >= 3 && s <= 8, { message: "cellSidesRange" });
-var chipSidesSchema = z.number().int().refine((s) => s === -1 || s === 0 || s >= 3 && s <= 8, { message: "cellSidesRange" });
-var chipAxisSchema = z.union([z.literal(0), z.literal(1), z.literal(2)]);
-var cardDesignMaterialSchema = z.enum(["3dprint_standard", "metal", "bamboo"]);
-var patternFamilySchema = z.enum(["radial", "gradient", "wave", "spiral"]);
-var cardDesignPatternSchema = z.object({
+var hexColorSchema = z2.string().regex(/^#[0-9A-Fa-f]{6}$/, "invalidHexColour");
+var cellSidesSchema = z2.number().int().refine((s) => s === 0 || s >= 3 && s <= 8, { message: "cellSidesRange" });
+var chipSidesSchema = z2.number().int().refine((s) => s === -1 || s === 0 || s >= 3 && s <= 8, { message: "cellSidesRange" });
+var chipAxisSchema = z2.union([z2.literal(0), z2.literal(1), z2.literal(2)]);
+var cardDesignMaterialSchema = z2.enum(["3dprint_standard", "metal", "bamboo"]);
+var patternFamilySchema = z2.enum(["radial", "gradient", "wave", "spiral"]);
+var cardDesignPatternSchema = z2.object({
   family: patternFamilySchema,
-  variant: z.enum(["pulse", "bell"]),
-  density: z.number().min(0).max(1),
-  holeMinMm: z.number().positive(),
-  holeMaxMm: z.number().positive(),
-  intensity: z.number().min(0).max(1),
+  variant: z2.enum(["pulse", "bell"]),
+  density: z2.number().min(0).max(1),
+  holeMinMm: z2.number().positive(),
+  holeMaxMm: z2.number().positive(),
+  intensity: z2.number().min(0).max(1),
   cellShape: cellSidesSchema,
-  cellRotationDeg: z.number(),
+  cellRotationDeg: z2.number(),
   chipShape: chipSidesSchema,
-  chipRotationDeg: z.number()
+  chipRotationDeg: z2.number()
 }).refine((p) => p.holeMinMm <= p.holeMaxMm, { message: "holeMinGtMax", path: ["holeMinMm"] });
-var elementTransformSchema = z.object({
-  xMm: z.number(),
-  yMm: z.number(),
-  rotationDeg: z.number(),
-  scale: z.number().positive(),
-  z: z.number()
+var elementTransformSchema = z2.object({
+  xMm: z2.number(),
+  yMm: z2.number(),
+  rotationDeg: z2.number(),
+  scale: z2.number().positive(),
+  z: z2.number()
 });
-var elementRoleSchema = z.enum(["text", "accent"]);
+var elementRoleSchema = z2.enum(["text", "accent"]);
 var baseElementFields = {
-  id: z.string().min(1),
+  id: z2.string().min(1),
   transform: elementTransformSchema,
-  face: z.enum(["front", "back"]).optional(),
-  locked: z.boolean().optional(),
-  colour: z.string().optional()
+  face: z2.enum(["front", "back"]).optional(),
+  locked: z2.boolean().optional(),
+  colour: z2.string().optional()
 };
-var qrModeSchema = z.enum(["redirect", "raw"]).optional();
-var cardElementSchema = z.discriminatedUnion("type", [
-  z.object({ ...baseElementFields, type: z.literal("chip"), shape: chipSidesSchema }),
-  z.object({ ...baseElementFields, type: z.literal("text"), text: z.string(), sizeMm: z.number().positive(), weight: z.number(), role: elementRoleSchema, fontKey: z.string().optional(), italic: z.boolean().optional(), underline: z.boolean().optional() }),
-  z.object({ ...baseElementFields, type: z.literal("qr"), url: z.string().url("invalidUrl").or(z.literal("")).optional(), mode: qrModeSchema, sizeMm: z.number().positive(), frameRole: elementRoleSchema, moduleRole: elementRoleSchema }),
-  z.object({ ...baseElementFields, type: z.literal("image"), assetRef: z.string().min(1), widthMm: z.number().positive(), heightMm: z.number().positive(), role: elementRoleSchema, bgRemoved: z.boolean().optional(), svgOverrides: z.array(z.string().optional()).optional() }),
-  z.object({ ...baseElementFields, type: z.literal("logo"), assetRef: z.string().min(1), widthMm: z.number().positive(), heightMm: z.number().positive(), role: elementRoleSchema })
+var qrModeSchema = z2.enum(["redirect", "raw"]).optional();
+var cardElementSchema = z2.discriminatedUnion("type", [
+  z2.object({ ...baseElementFields, type: z2.literal("chip"), shape: chipSidesSchema }),
+  z2.object({ ...baseElementFields, type: z2.literal("text"), text: z2.string(), sizeMm: z2.number().positive(), weight: z2.number(), role: elementRoleSchema, fontKey: z2.string().optional(), italic: z2.boolean().optional(), underline: z2.boolean().optional() }),
+  z2.object({ ...baseElementFields, type: z2.literal("qr"), url: z2.string().url("invalidUrl").or(z2.literal("")).optional(), mode: qrModeSchema, sizeMm: z2.number().positive(), frameRole: elementRoleSchema, moduleRole: elementRoleSchema }),
+  z2.object({ ...baseElementFields, type: z2.literal("image"), assetRef: z2.string().min(1), widthMm: z2.number().positive(), heightMm: z2.number().positive(), role: elementRoleSchema, bgRemoved: z2.boolean().optional(), svgOverrides: z2.array(z2.string().optional()).optional() }),
+  z2.object({ ...baseElementFields, type: z2.literal("logo"), assetRef: z2.string().min(1), widthMm: z2.number().positive(), heightMm: z2.number().positive(), role: elementRoleSchema })
 ]);
-var cardAssetSchema = z.object({
-  id: z.string().min(1),
-  kind: z.enum(["vector", "raster"]),
-  svg: z.string().optional(),
-  rasterDataUrl: z.string().optional(),
-  rasterBgDataUrl: z.string().optional(),
-  rasterAspect: z.number().optional(),
-  svgColours: z.array(z.string()).optional(),
-  svgFils: z.array(z.string()).optional()
+var cardAssetSchema = z2.object({
+  id: z2.string().min(1),
+  kind: z2.enum(["vector", "raster"]),
+  svg: z2.string().optional(),
+  rasterDataUrl: z2.string().optional(),
+  rasterBgDataUrl: z2.string().optional(),
+  rasterAspect: z2.number().optional(),
+  svgColours: z2.array(z2.string()).optional(),
+  svgFils: z2.array(z2.string()).optional()
 });
-var cardDesignSchema = z.object({
+var cardDesignSchema = z2.object({
   material: cardDesignMaterialSchema,
-  designType: z.enum(["template", "custom"]),
-  templateId: z.string().optional(),
-  thicknessMm: z.number().positive(),
+  designType: z2.enum(["template", "custom"]),
+  templateId: z2.string().optional(),
+  thicknessMm: z2.number().positive(),
   pattern: cardDesignPatternSchema.nullable(),
-  layout: z.object({ chipAnchor: z.object({ col: chipAxisSchema, row: chipAxisSchema }) }),
+  layout: z2.object({ chipAnchor: z2.object({ col: chipAxisSchema, row: chipAxisSchema }) }),
   // Exactly three role-keyed bodies (≤3 distinct is therefore guaranteed —
   // cardgen's max-3-print-bodies rule).
-  filaments: z.object({ background: hexColorSchema, text: hexColorSchema, accent: hexColorSchema }),
-  content: z.object({
-    lines: z.array(
-      z.object({
-        text: z.string(),
-        sizeMm: z.number().positive(),
-        weight: z.number(),
-        role: z.enum(["text", "accent"])
+  filaments: z2.object({ background: hexColorSchema, text: hexColorSchema, accent: hexColorSchema }),
+  content: z2.object({
+    lines: z2.array(
+      z2.object({
+        text: z2.string(),
+        sizeMm: z2.number().positive(),
+        weight: z2.number(),
+        role: z2.enum(["text", "accent"])
       })
     )
   }).optional(),
   // NFCARD-561 -- `mode` makes "point to profile" DATA, not a string match; when it is
   // 'redirect' the url is absent and the API substitutes the card's own /r/{code}?src=qr.
   // Optional throughout: prod holds persisted designs with neither field.
-  qr: z.object({ enabled: z.boolean(), url: z.string().url("invalidUrl").or(z.literal("")).optional(), mode: qrModeSchema }).optional(),
-  logo: z.object({ svg: z.string().optional(), svgPath: z.string().optional() }).optional(),
-  wordmark: z.boolean().optional(),
-  contentFace: z.enum(["top", "bottom"]).optional(),
+  qr: z2.object({ enabled: z2.boolean(), url: z2.string().url("invalidUrl").or(z2.literal("")).optional(), mode: qrModeSchema }).optional(),
+  logo: z2.object({ svg: z2.string().optional(), svgPath: z2.string().optional() }).optional(),
+  wordmark: z2.boolean().optional(),
+  contentFace: z2.enum(["top", "bottom"]).optional(),
   // NFCARD-197/198 -- additive free-transform layer (optional; absent = legacy grid).
-  elements: z.array(cardElementSchema).optional(),
-  assets: z.array(cardAssetSchema).optional(),
-  contractVersion: z.number().int().positive().optional()
+  elements: z2.array(cardElementSchema).optional(),
+  assets: z2.array(cardAssetSchema).optional(),
+  contractVersion: z2.number().int().positive().optional()
 }).superRefine((cd, ctx) => {
   const els = cd.elements;
   if (!els || els.length === 0) return;
   if (cd.designType !== "custom") {
-    ctx.addIssue({ code: z.ZodIssueCode.custom, message: "elementsCustomOnly", path: ["elements"] });
+    ctx.addIssue({ code: z2.ZodIssueCode.custom, message: "elementsCustomOnly", path: ["elements"] });
   }
   if (cd.contractVersion !== 2) {
-    ctx.addIssue({ code: z.ZodIssueCode.custom, message: "contractVersionRequired", path: ["contractVersion"] });
+    ctx.addIssue({ code: z2.ZodIssueCode.custom, message: "contractVersionRequired", path: ["contractVersion"] });
   }
   const seen = /* @__PURE__ */ new Set();
   for (const el of els) {
     if (seen.has(el.id)) {
-      ctx.addIssue({ code: z.ZodIssueCode.custom, message: "duplicateElementId", path: ["elements"] });
+      ctx.addIssue({ code: z2.ZodIssueCode.custom, message: "duplicateElementId", path: ["elements"] });
     }
     seen.add(el.id);
   }
   const chips = els.filter((e) => e.type === "chip");
   if (chips.length !== 1) {
-    ctx.addIssue({ code: z.ZodIssueCode.custom, message: "exactlyOneChip", path: ["elements"] });
+    ctx.addIssue({ code: z2.ZodIssueCode.custom, message: "exactlyOneChip", path: ["elements"] });
   }
   if (chips.length === 1) {
     const chip = chips[0];
     const near = mmToNearestChipAnchor({ x: chip.transform.xMm, y: chip.transform.yMm });
     if (near.col !== cd.layout.chipAnchor.col || near.row !== cd.layout.chipAnchor.row) {
-      ctx.addIssue({ code: z.ZodIssueCode.custom, message: "chipAnchorDualWriteMismatch", path: ["layout", "chipAnchor"] });
+      ctx.addIssue({ code: z2.ZodIssueCode.custom, message: "chipAnchorDualWriteMismatch", path: ["layout", "chipAnchor"] });
     }
   }
   const assetsById = new Map((cd.assets ?? []).map((a) => [a.id, a]));
   for (const el of els) {
     for (const viol of elementPrintability(el, { assetsById })) {
-      ctx.addIssue({ code: z.ZodIssueCode.custom, message: viol.code, path: ["elements"] });
+      ctx.addIssue({ code: z2.ZodIssueCode.custom, message: viol.code, path: ["elements"] });
     }
   }
 });
-var physicalConfigSchema = z.object({
+var physicalConfigSchema = z2.object({
   material: materialSchema,
-  colour: z.string().regex(/^#[0-9A-Fa-f]{6}$/, "invalidHexColour").optional(),
+  colour: z2.string().regex(/^#[0-9A-Fa-f]{6}$/, "invalidHexColour").optional(),
   comboId: comboIdSchema,
   frontElements: cardElementsSchema,
   backElements: cardElementsSchema,
-  qrTargetUrl: z.string().url("invalidUrl").optional().or(z.literal("")),
-  customDesignRequest: z.string().max(2e3).optional().or(z.literal("")),
+  qrTargetUrl: z2.string().url("invalidUrl").optional().or(z2.literal("")),
+  customDesignRequest: z2.string().max(2e3).optional().or(z2.literal("")),
   frontContactToggles: contactDetailTogglesSchema.optional(),
   backContactToggles: contactDetailTogglesSchema.optional(),
   contentOverrides: physicalContentOverridesSchema.optional(),
-  companyLogoUrl: z.string().url().optional().or(z.literal("")),
+  companyLogoUrl: z2.string().url().optional().or(z2.literal("")),
   // NFCARD PVC 2D pipeline: free-transform elements + image assets ride
   // top-level (PVC has no cardDesign). Whitelisted so they aren't stripped.
-  elements: z.array(cardElementSchema).optional(),
-  assets: z.array(cardAssetSchema).optional(),
+  elements: z2.array(cardElementSchema).optional(),
+  assets: z2.array(cardAssetSchema).optional(),
   // Nested so it isn't stripped (this object has no .passthrough()). Optional
   // → legacy configs + the PVC path persist with no cardDesign block.
   cardDesign: cardDesignSchema.optional()
@@ -725,27 +899,27 @@ var physicalConfigSchema = z.object({
   message: "cardDesignMaterialMismatch",
   path: ["cardDesign", "material"]
 });
-var digitalVisibilitySchema = z.object({
-  showName: z.boolean().optional(),
-  showPosition: z.boolean().optional(),
-  showCompany: z.boolean().optional(),
-  showEmail: z.boolean().optional(),
-  showPhone: z.boolean().optional(),
-  showWebsite: z.boolean().optional(),
-  showLocation: z.boolean().optional(),
-  showBio: z.boolean().optional(),
-  showSocialLinks: z.boolean().optional(),
-  showLogo: z.boolean().optional()
+var digitalVisibilitySchema = z2.object({
+  showName: z2.boolean().optional(),
+  showPosition: z2.boolean().optional(),
+  showCompany: z2.boolean().optional(),
+  showEmail: z2.boolean().optional(),
+  showPhone: z2.boolean().optional(),
+  showWebsite: z2.boolean().optional(),
+  showLocation: z2.boolean().optional(),
+  showBio: z2.boolean().optional(),
+  showSocialLinks: z2.boolean().optional(),
+  showLogo: z2.boolean().optional()
 });
 var MAX_CTA_BUTTONS = 5;
-var ctaButtonSchema = z.object({
-  label: z.string().max(2048).optional().or(z.literal("")).transform((v) => sanitizeText(v ?? "", 40)),
-  url: z.string().max(2048).optional().or(z.literal("")).transform((v) => sanitizeHttpUrl(v))
+var ctaButtonSchema = z2.object({
+  label: z2.string().max(2048).optional().or(z2.literal("")).transform((v) => sanitizeText(v ?? "", 40)),
+  url: z2.string().max(2048).optional().or(z2.literal("")).transform((v) => sanitizeHttpUrl(v))
 });
-var ctaButtonsSchema = z.array(ctaButtonSchema).max(50).transform(
+var ctaButtonsSchema = z2.array(ctaButtonSchema).max(50).transform(
   (arr) => arr.filter((b) => b.url !== "" && b.label !== "").slice(0, MAX_CTA_BUTTONS)
 );
-var tipJarSchema = z.unknown().transform((raw) => {
+var tipJarSchema = z2.unknown().transform((raw) => {
   if (!raw || typeof raw !== "object") return void 0;
   const rec = raw;
   if (!isTipProviderId(rec.provider)) return void 0;
@@ -754,7 +928,7 @@ var tipJarSchema = z.unknown().transform((raw) => {
   const label = typeof rec.label === "string" ? sanitizeText(rec.label, 40) : "";
   return label ? { provider: rec.provider, handle, label } : { provider: rec.provider, handle };
 });
-var bookingSchema = z.unknown().transform((raw) => {
+var bookingSchema = z2.unknown().transform((raw) => {
   if (!raw || typeof raw !== "object") return void 0;
   const rec = raw;
   if (!isBookingProviderId(rec.provider)) return void 0;
@@ -763,7 +937,7 @@ var bookingSchema = z.unknown().transform((raw) => {
   const label = typeof rec.label === "string" ? sanitizeText(rec.label, 40) : "";
   return label ? { provider: rec.provider, handle, label } : { provider: rec.provider, handle };
 });
-var profileBackgroundSchema = z.unknown().transform((raw) => {
+var profileBackgroundSchema = z2.unknown().transform((raw) => {
   if (!raw || typeof raw !== "object") return void 0;
   const rec = raw;
   if (rec.kind === "solid") return { kind: "solid" };
@@ -775,15 +949,15 @@ var profileBackgroundSchema = z.unknown().transform((raw) => {
   const angleDeg = typeof rec.angleDeg === "number" && Number.isFinite(rec.angleDeg) ? (Math.round(rec.angleDeg) % 360 + 360) % 360 : void 0;
   return angleDeg === void 0 ? { kind: "gradient", from, to } : { kind: "gradient", from, to, angleDeg };
 });
-var digitalConfigSchema = z.object({
-  templateId: z.enum(["minimal", "bold", "card", "aurora", "classic", "spotlight", "marquee", "riso"]),
-  accentColor: z.string().regex(/^#[0-9A-Fa-f]{6}$/),
-  primaryColor: z.string().regex(/^#[0-9A-Fa-f]{6}$/).optional(),
-  secondaryColor: z.string().regex(/^#[0-9A-Fa-f]{6}$/).optional(),
-  textColor: z.string().regex(/^#[0-9A-Fa-f]{6}$/).optional(),
-  fontKey: z.string().min(1),
-  showAvatar: z.boolean(),
-  avatarMode: z.enum(["photo", "monogram", "none"]).optional(),
+var digitalConfigSchema = z2.object({
+  templateId: z2.enum(["minimal", "bold", "card", "aurora", "classic", "spotlight", "marquee", "riso"]),
+  accentColor: z2.string().regex(/^#[0-9A-Fa-f]{6}$/),
+  primaryColor: z2.string().regex(/^#[0-9A-Fa-f]{6}$/).optional(),
+  secondaryColor: z2.string().regex(/^#[0-9A-Fa-f]{6}$/).optional(),
+  textColor: z2.string().regex(/^#[0-9A-Fa-f]{6}$/).optional(),
+  fontKey: z2.string().min(1),
+  showAvatar: z2.boolean(),
+  avatarMode: z2.enum(["photo", "monogram", "none"]).optional(),
   visibility: digitalVisibilitySchema.optional(),
   // FOXHOLE — `contentOverrides` was removed when the wizard started
   // editing userData directly inside the digital step. The bio that
@@ -798,131 +972,136 @@ var digitalConfigSchema = z.object({
   booking: bookingSchema.optional(),
   // NFCARD-641 — absent means solid `secondaryColor`, so every profile that
   // exists today validates unchanged and no backfill is needed.
-  background: profileBackgroundSchema.optional()
+  background: profileBackgroundSchema.optional(),
+  // NFCARD-656 — arrangement + per-object style intent. Absent for every
+  // profile that predates the object model; absence and { v: 1 } paint the
+  // same page (deriveProfileLayout), so no backfill and nothing existing
+  // revalidates differently.
+  layout: profileLayoutSchema.optional()
 });
-var entrySourceSchema = z.object({
-  output: z.enum(["with-card", "digital-only"]).optional(),
-  entryFlow: z.enum(["order", "try"]).optional(),
-  ref: z.string().max(64).optional(),
-  path: z.string().max(256).optional(),
-  referrer: z.string().max(256).optional(),
+var entrySourceSchema = z2.object({
+  output: z2.enum(["with-card", "digital-only"]).optional(),
+  entryFlow: z2.enum(["order", "try"]).optional(),
+  ref: z2.string().max(64).optional(),
+  path: z2.string().max(256).optional(),
+  referrer: z2.string().max(256).optional(),
   // NFCARD-393 - the design deep-link preselects (material implies the
   // with-card entry; template additionally names a TEMPLATE_DESIGNS id).
   material: materialSchema.optional(),
-  template: z.string().max(64).optional(),
-  utm: z.record(z.string().max(64), z.string().max(256)).refine((o) => Object.keys(o).length <= 10, "too many utm params").optional()
+  template: z2.string().max(64).optional(),
+  utm: z2.record(z2.string().max(64), z2.string().max(256)).refine((o) => Object.keys(o).length <= 10, "too many utm params").optional()
 }).strict();
-var configurationCreateSchema = z.object({
-  sessionId: z.string().uuid(),
+var configurationCreateSchema = z2.object({
+  sessionId: z2.string().uuid(),
   userData: userDataSchema,
   physicalConfig: physicalConfigSchema,
   digitalConfig: digitalConfigSchema,
-  quantity: z.number().int().min(1).max(1e3).default(1),
+  quantity: z2.number().int().min(1).max(1e3).default(1),
   // FOXHOLE-684: free→card upgrade. When set, fulfilment attaches this
   // existing (free-tier) profile to the new card instead of creating a
   // fresh default one. Optional — the normal order flow omits it.
-  existingProfileId: z.string().uuid().optional(),
+  existingProfileId: z2.string().uuid().optional(),
   // NFCARD-3: on the Template design path, the chosen TEMPLATE_DESIGNS id
   // (a slug, e.g. "tpl-pvc-white"). Carries the explicit template reference
   // for fulfilment alongside the comboId already baked into physicalConfig.
   // Optional — Custom orders omit it.
-  physicalTemplateId: z.string().min(1).max(64).optional(),
+  physicalTemplateId: z2.string().min(1).max(64).optional(),
   // NFCARD-392 - optional entry-attribution blob (see entrySourceSchema).
   // Create-only by design: first touch wins, so the update schema does
   // not accept it.
   entrySource: entrySourceSchema.optional()
 });
-var configurationUpdateSchema = z.object({
+var configurationUpdateSchema = z2.object({
   userData: userDataSchema.optional(),
   physicalConfig: physicalConfigSchema.optional(),
   digitalConfig: digitalConfigSchema.optional(),
-  quantity: z.number().int().min(1).max(1e3).optional(),
-  existingProfileId: z.string().uuid().optional(),
-  physicalTemplateId: z.string().min(1).max(64).optional()
+  quantity: z2.number().int().min(1).max(1e3).optional(),
+  existingProfileId: z2.string().uuid().optional(),
+  physicalTemplateId: z2.string().min(1).max(64).optional()
 });
-var createOrderSchema = z.object({
-  configurationId: z.string().uuid(),
-  discountCode: z.string().min(1).max(50).optional(),
+var createOrderSchema = z2.object({
+  configurationId: z2.string().uuid(),
+  discountCode: z2.string().min(1).max(50).optional(),
   // FOXHOLE-714 — Template or Custom design path. Picks which side
   // of the Price.templatePriceCents / customPriceCents split applies
   // and which Stripe Price ID the Checkout line item references.
-  designType: z.enum(["template", "custom"])
+  designType: z2.enum(["template", "custom"])
 });
-var cardUpdateSchema = z.object({
+var cardUpdateSchema = z2.object({
   digitalConfigOverride: digitalConfigSchema.partial().extend({
-    profilePhotoUrl: z.string().url().optional().or(z.literal("")),
-    companyLogoUrl: z.string().url().optional().or(z.literal(""))
+    profilePhotoUrl: z2.string().url().optional().or(z2.literal("")),
+    companyLogoUrl: z2.string().url().optional().or(z2.literal(""))
   }).partial().optional(),
-  status: z.enum(["active", "suspended", "archived"]).optional()
+  status: z2.enum(["active", "suspended", "archived"]).optional()
 });
-var adminCardCreateSchema = z.object({
-  targetUserId: z.string().min(1),
+var adminCardCreateSchema = z2.object({
+  targetUserId: z2.string().min(1),
   userData: userDataSchema,
   digitalConfig: digitalConfigSchema,
   physicalConfig: physicalConfigSchema.optional()
 });
-var profileVisibilitySchema = z.enum(["public", "private", "link_only"]);
+var profileVisibilitySchema = z2.enum(["public", "private", "link_only"]);
 var profileUserDataSchema = userDataSchema.extend({
-  email: z.string().email("invalidEmail").optional().or(z.literal(""))
+  email: z2.string().email("invalidEmail").optional().or(z2.literal(""))
 });
-var profileCreateSchema = z.object({
+var profileCreateSchema = z2.object({
   // Optional (FOXHOLE-684). When present, the card gets a CardProfile slot
   // pointing to the new profile (subject to the 3-slot cap). When absent,
   // a standalone (cardless) free-tier profile is created — used by the
   // free signup path; no slot is allocated.
-  cardId: z.string().uuid("required").optional(),
+  cardId: z2.string().uuid("required").optional(),
   // Optional (NFCARD-128): a free profile can be created label-less — the owner
   // sets the label later in the editor (label/icon are paid-only). Empty/absent
   // is stored as null, so the hub tile falls back to the profile's displayName.
-  label: z.string().max(50).optional().or(z.literal("")),
-  icon: z.string().max(10).optional().or(z.literal("")),
+  label: z2.string().max(50).optional().or(z2.literal("")),
+  icon: z2.string().max(10).optional().or(z2.literal("")),
   userData: profileUserDataSchema,
   digitalConfig: digitalConfigSchema,
   visibility: profileVisibilitySchema.default("public"),
-  accessPin: z.string().min(4, "pinTooShort").max(8, "pinTooLong").regex(/^\d+$/, "pinDigitsOnly").optional().or(z.literal(""))
+  accessPin: z2.string().min(4, "pinTooShort").max(8, "pinTooLong").regex(/^\d+$/, "pinDigitsOnly").optional().or(z2.literal(""))
 });
-var signupWithProfileSchema = z.object({
-  email: z.string().email("invalidEmail"),
-  password: z.string().min(8, "passwordTooShort").max(128, "passwordTooLong"),
-  name: z.string().min(1).max(120).optional().or(z.literal("")),
+var signupWithProfileSchema = z2.object({
+  email: z2.string().email("invalidEmail"),
+  password: z2.string().min(8, "passwordTooShort").max(128, "passwordTooLong"),
+  name: z2.string().min(1).max(120).optional().or(z2.literal("")),
   // Must be explicitly true — the ÁSZF checkbox is mandatory.
-  acceptedTerms: z.literal(true),
-  marketingOptIn: z.boolean().optional().default(false),
-  captchaToken: z.string().max(4096).optional().or(z.literal("")),
-  preferredLanguage: z.enum(["hu", "en"]).optional().default("hu"),
-  label: z.string().min(1, "required").max(50).optional().or(z.literal("")),
+  acceptedTerms: z2.literal(true),
+  marketingOptIn: z2.boolean().optional().default(false),
+  captchaToken: z2.string().max(4096).optional().or(z2.literal("")),
+  preferredLanguage: z2.enum(["hu", "en"]).optional().default("hu"),
+  label: z2.string().min(1, "required").max(50).optional().or(z2.literal("")),
   userData: profileUserDataSchema,
   digitalConfig: digitalConfigSchema
 });
-var profileUpdateSchema = z.object({
-  label: z.string().min(1).max(50).optional(),
-  icon: z.string().max(10).optional().or(z.literal("")),
+var profileUpdateSchema = z2.object({
+  label: z2.string().min(1).max(50).optional(),
+  icon: z2.string().max(10).optional().or(z2.literal("")),
   userData: profileUserDataSchema.optional(),
   digitalConfig: digitalConfigSchema.partial().extend({
-    profilePhotoUrl: z.string().url().optional().or(z.literal("")),
-    companyLogoUrl: z.string().url().optional().or(z.literal(""))
+    profilePhotoUrl: z2.string().url().optional().or(z2.literal("")),
+    companyLogoUrl: z2.string().url().optional().or(z2.literal(""))
   }).partial().optional(),
   visibility: profileVisibilitySchema.optional(),
-  accessPin: z.string().min(4, "pinTooShort").max(8, "pinTooLong").regex(/^\d+$/, "pinDigitsOnly").optional().or(z.literal(""))
+  accessPin: z2.string().min(4, "pinTooShort").max(8, "pinTooLong").regex(/^\d+$/, "pinDigitsOnly").optional().or(z2.literal(""))
 });
-var profilePinVerifySchema = z.object({
-  pin: z.string().min(4).max(8)
+var profilePinVerifySchema = z2.object({
+  pin: z2.string().min(4).max(8)
 });
-var profileAccessTokenCreateSchema = z.object({
-  label: z.string().max(100).optional().or(z.literal("")),
-  expiresAt: z.string().datetime().optional().or(z.literal(""))
+var profileAccessTokenCreateSchema = z2.object({
+  label: z2.string().max(100).optional().or(z2.literal("")),
+  expiresAt: z2.string().datetime().optional().or(z2.literal(""))
 });
-var cardProfileUpdateSchema = z.object({
-  profiles: z.array(
-    z.object({
-      profileId: z.string().uuid(),
-      sortOrder: z.number().int().min(0),
-      isDefault: z.boolean()
+var cardProfileUpdateSchema = z2.object({
+  profiles: z2.array(
+    z2.object({
+      profileId: z2.string().uuid(),
+      sortOrder: z2.number().int().min(0),
+      isDefault: z2.boolean()
     })
   )
 });
-var hexColor = z.string().regex(/^#[0-9A-Fa-f]{6}$/, "invalidHexColour");
-var httpsOnlyUrl = z.string().url("invalidUrl").refine(
+var hexColor = z2.string().regex(/^#[0-9A-Fa-f]{6}$/, "invalidHexColour");
+var httpsOnlyUrl = z2.string().url("invalidUrl").refine(
   (v) => {
     try {
       const u = new URL(v);
@@ -933,35 +1112,35 @@ var httpsOnlyUrl = z.string().url("invalidUrl").refine(
   },
   { message: "invalidUrl" }
 );
-var hubConfigSchema = z.object({
-  displayName: z.string().max(80).optional().or(z.literal("")),
-  subtitle: z.string().max(120).optional().or(z.literal("")),
-  avatarMode: z.enum(["auto", "image", "monogram"]).optional(),
-  avatarUrl: httpsOnlyUrl.optional().or(z.literal("")),
-  monogramText: z.string().max(2).optional().or(z.literal("")),
+var hubConfigSchema = z2.object({
+  displayName: z2.string().max(80).optional().or(z2.literal("")),
+  subtitle: z2.string().max(120).optional().or(z2.literal("")),
+  avatarMode: z2.enum(["auto", "image", "monogram"]).optional(),
+  avatarUrl: httpsOnlyUrl.optional().or(z2.literal("")),
+  monogramText: z2.string().max(2).optional().or(z2.literal("")),
   accentColor: hexColor.optional(),
   backgroundColor: hexColor.optional(),
   textColor: hexColor.optional(),
   tileBackgroundColor: hexColor.optional(),
   tileBorderColor: hexColor.optional(),
-  fontKey: z.string().min(1).max(50).optional(),
-  footerText: z.string().max(140).optional().or(z.literal(""))
+  fontKey: z2.string().min(1).max(50).optional(),
+  footerText: z2.string().max(140).optional().or(z2.literal(""))
 });
-var hubProfilesUpdateSchema = z.object({
-  profiles: z.array(
-    z.object({
-      profileId: z.string().uuid(),
-      sortOrder: z.number().int().min(0),
-      isDefault: z.boolean().optional(),
-      hiddenFromHub: z.boolean().optional()
+var hubProfilesUpdateSchema = z2.object({
+  profiles: z2.array(
+    z2.object({
+      profileId: z2.string().uuid(),
+      sortOrder: z2.number().int().min(0),
+      isDefault: z2.boolean().optional(),
+      hiddenFromHub: z2.boolean().optional()
     })
   )
 });
-var contactExchangeSchema = z.object({
-  name: z.string().min(1, "required").max(100),
-  email: z.string().email("invalidEmail").optional().or(z.literal("")),
-  phone: z.string().regex(/^[+]?[\d\s\-().]{6,20}$/, "invalidPhone").optional().or(z.literal("")),
-  notes: z.string().max(500).optional().or(z.literal(""))
+var contactExchangeSchema = z2.object({
+  name: z2.string().min(1, "required").max(100),
+  email: z2.string().email("invalidEmail").optional().or(z2.literal("")),
+  phone: z2.string().regex(/^[+]?[\d\s\-().]{6,20}$/, "invalidPhone").optional().or(z2.literal("")),
+  notes: z2.string().max(500).optional().or(z2.literal(""))
 });
 function formatZodErrors(error) {
   const errors = {};
@@ -1011,6 +1190,7 @@ export {
   TEXT_MIN_EM_MM,
   adminCardCreateSchema,
   bookingSchema,
+  buttonObjectStyleSchema,
   cardAssetSchema,
   cardDesignMaterialSchema,
   cardDesignPatternSchema,
@@ -1038,6 +1218,7 @@ export {
   footprintOf,
   hubConfigSchema,
   hubProfilesUpdateSchema,
+  imageObjectStyleSchema,
   isFiniteTransform,
   materialSchema,
   mmToNearestChipAnchor,
@@ -1048,17 +1229,20 @@ export {
   profileAccessTokenCreateSchema,
   profileBackgroundSchema,
   profileCreateSchema,
+  profileLayoutSchema,
   profilePinVerifySchema,
   profileUpdateSchema,
   profileUserDataSchema,
   profileVisibilitySchema,
   qrModeSchema,
+  safeProfileLayout,
   sanitizeHttpUrl,
   sanitizeText,
   signupWithProfileSchema,
   socialLinksSchema,
   socialOverridesSchema,
   textAdvanceEm,
+  textObjectStyleSchema,
   tipJarSchema,
   userDataSchema,
   validateConfiguration,