@orangelogic/design-system 4.28.0 → 4.29.0

package/library/packages/tools/src/fetch-image/fetch-image.d.ts

@@ -42,6 +42,34 @@ export declare function isSupportedImageExtension(extension: string): boolean;
  * Every other format is already transcoded, so this only gates the original.
  */
 export declare function canServeOriginalAsImage(docType: string | undefined, extension: string): boolean;
+/**
+ * Picks the delivery URL for one item out of the requested `path_*` fields.
+ *
+ * Under `Auto` the extension decides the proxy; under a manual format an animated source
+ * still takes `path_TRX` so it is not flattened. `path_TR1` closes every branch — it is
+ * always transcoded, so it works for any source.
+ *
+ * The chosen URL is the untransformed path from the API, so this is where the `.auto`
+ * marker belongs: every branch returns through `pick`, and the caller only adds a `/t/`
+ * segment afterwards.
+ */
+/** @internal Exported for focused unit coverage of proxy selection. */
+export declare function resolveItemSrc({ autoFormat, buildSrcset, docType, extension, format, item, manualFormat, size, useExpiringAssetUrls, }: {
+    autoFormat: boolean;
+    buildSrcset: boolean;
+    docType: string | undefined;
+    extension: string | undefined;
+    format: string | undefined;
+    item: Record<string, string | undefined>;
+    manualFormat: boolean;
+    size: string | undefined;
+    useExpiringAssetUrls: boolean;
+}): {
+    maxHeight?: string;
+    maxWidth?: string;
+    src?: string;
+    srcset?: string;
+};
 export declare class FetchImageController implements ReactiveController {
     private readonly host;
     private data;

package/library/packages/utils/src/asset-url-mode/asset-url-mode.d.ts

@@ -0,0 +1,22 @@
+export declare const EXPIRING_ASSET_PRIMARY_PATH_FIELD = "path_TR1";
+export declare const EXPIRING_ASSET_FALLBACK_PATH_FIELD = "path_TRX";
+type AssetUrlModeTarget = object | null | undefined;
+/** Only stable, non-expiring asset URLs are safe to serialize into page content. */
+export declare function isPersistableAssetUrl(url: string | null | undefined): boolean;
+/** Whether a stored URL already matches the requested permanent/signed delivery mode. */
+export declare function isAssetUrlReusableForMode(url: string | null | undefined, useExpiringAssetUrls: boolean): boolean;
+/** Manual image formats are irrelevant when signed URL delivery takes precedence. */
+export declare function isAssetFormatRequiredForMode(manualFormat: boolean, useExpiringAssetUrls: boolean): boolean;
+/** Set the mode on the window/realm that will perform asset resolution. */
+export declare function setExpiringAssetUrlMode(enabled: boolean, target?: AssetUrlModeTarget): void;
+/** Whether signed asset URLs must be preserved instead of permanently resolved or transformed. */
+export declare function isExpiringAssetUrlMode(target?: AssetUrlModeTarget): boolean;
+/** The value to pass as `getPermanentAssetsPaths`. */
+export declare function resolveGetPermanentAssetsPaths(target?: AssetUrlModeTarget): boolean;
+/**
+ * Pick an unmodified signed image path without applying the configured/automatic format.
+ * Animated GIFs prefer their original TRX path; other assets use the safe TR1 raster path.
+ * TRX remains the last fallback when TR1 is unavailable and the original can render directly.
+ */
+export declare function resolveExpiringAssetPathField(asset: Record<string, unknown>, canUseOriginal: boolean, extension?: string): string | undefined;
+export {};

package/library/packages/utils/src/asset-url-mode/index.d.ts

@@ -0,0 +1 @@
+export * from './asset-url-mode';

package/library/packages/utils/src/url/url.d.ts

@@ -42,6 +42,13 @@ export declare function appendQueryParam(url: string, key: string, value: string
  * carry an expiry marker once they can no longer be served
  */
 export declare function isExpiredAssetUrl(url: string | null | undefined): boolean;
+/**
+ * Reads the plaintext expiry (Unix seconds) an expiring asset URL carries, or null when it has none.
+ *
+ * A hint only: the server re-validates the signed token, so a tampered value cannot extend access — the
+ * worst a caller achieves is a needless recovery or a stale URL.
+ */
+export declare function readAssetTokenExpiry(url: string | null | undefined): number | null;
 export declare function isValidUrl(urlString: string): boolean;
 export declare const RELATIVE_URL_REGEX: string;
 export declare const URL_VALIDATION_REGEX: string;

package/library/react-web-component.d.ts

@@ -2272,6 +2272,10 @@
           * When overflow-variant is "dropdown", keeps a selected hidden tab visible next to the trigger.
         */
         promoteActiveOverflowTab?: boolean;
+        /**
+          * When set to true, the `cx-tab-show` event will be emitted when the user selects the active tab again, even if the active tab is not changed.
+        */
+        forceOnChange?: boolean;
         /**
           * Make localization attributes reactive eslint-disable-next-line lit/no-native-attributes
         */
@@ -9596,6 +9600,10 @@
           * The asset transformations applied to the background image.
         */
         backgroundTransformations?: CxColumnTransformation[];
+        /**
+          * 
+        */
+        siteBuilderToken?: string;
         /**
           * The object-fit-style crop applied to the background image.
         */
@@ -9678,6 +9686,10 @@
           * The asset transformations applied to the background image.
         */
         backgroundTransformations?: CxColumnGroupTransformation[];
+        /**
+          * 
+        */
+        siteBuilderToken?: string;
         /**
           * Make localization attributes reactive eslint-disable-next-line lit/no-native-attributes
         */
@@ -10448,7 +10460,7 @@
         preRender?: boolean;
             }
             /**
-              * The `cx-content-builder` component is used to create and manage content blocks in a CMS.<br/> Set `enable-asset-format-controls` to expose the asset format, transformation, download-format, and asset-format-picker controls on image, video, gallery, carousel, column-group, and timeline blocks. Off by default.<br/> `default-image-format`, `default-video-poster-format`, `default-timeline-format`, `default-gallery-format` and `default-carousel-format` are retained for backward compatibility but no longer do anything: every block type now starts in `Auto` and derives its proxy from the asset's own file extension.<br/> Several regions of one canvas page can be edited at once: `container-selector` / `initial-data` describe the implicit `page-content` section and `sections` adds more (for CMS5, the `hero` masthead). Each section is mounted inside its own host container of the canvas document and read back with `getSectionContent(id)`; `html()` / `json()` keep returning the page content.
+              * The `cx-content-builder` component is used to create and manage content blocks in a CMS.<br/> Set `enable-asset-format-controls` to expose the asset format, transformation, download-format, and asset-format-picker controls on image, video, gallery, carousel, column-group, and timeline blocks. Off by default. When `use-expiring-asset-urls` is also set, expiring URLs take precedence and the incompatible format and transformation controls stay disabled.<br/> `default-image-format`, `default-video-poster-format`, `default-timeline-format`, `default-gallery-format` and `default-carousel-format` are retained for backward compatibility but no longer do anything: every block type now starts in `Auto` and derives its proxy from the asset's own file extension.<br/> Several regions of one canvas page can be edited at once: `container-selector` / `initial-data` describe the implicit `page-content` section and `sections` adds more (for CMS5, the `hero` masthead). Each section is mounted inside its own host container of the canvas document and read back with `getSectionContent(id)`; `html()` / `json()` keep returning the page content.
             */
             interface CxContentBuilderAttributes extends HTMLAttributes<CxContentBuilder> {
               
@@ -10496,6 +10508,10 @@
           * Whether to expose the asset format / transformation / download-format / asset-format-picker controls in the per-block config sidebar for image, video, gallery, carousel, and timeline blocks. <br/>@default false
         */
         enableAssetFormatControls?: boolean;
+        /**
+          * Whether the server mints expiring asset URLs for this instance (42ASN5). When set, resolutions stop asking for permanent asset paths, which on the server would create the permanent anonymous link this feature removes. When this and `enable-asset-format-controls` are both true, expiring URLs take precedence and the incompatible controls stay disabled.
+        */
+        useExpiringAssetUrls?: boolean;
         /**
           * Whether the content builder emits `ol:ui-metric` events timing each user action, for collection as browser OpenTelemetry histograms. <br/> Off by default: when false no timers are armed and no events are dispatched, so an unmonitored site pays nothing for this being here. <br/>@default false
         */
@@ -10562,6 +10578,10 @@
           * Page-scoped security-bypass token, stamped by the server on this element in read-mode HTML. The viewer uses it for its batched Search call and distributes it to its record-id children (which consume it as `siteBuilderToken`). Empty on authenticated/preview pages.
         */
         securityBypassToken?: string;
+        /**
+          * Whether the server minted expiring asset URLs for this page (42ASN5). When present, resolutions must not ask for permanent asset paths — on the server that request creates the permanent anonymous link this feature removes. Set from the host attribute, same as `security-bypass-token`.
+        */
+        useExpiringAssetUrls?: boolean;
         /**
           * Make localization attributes reactive eslint-disable-next-line lit/no-native-attributes
         */
@@ -11516,6 +11536,10 @@
           * Whether to expose asset format / transformation / download-format / asset-format-picker controls for image, video, gallery, carousel, and timeline blocks. Should match the host `cx-content-builder` setting. <br/>@default false
         */
         enableAssetFormatControls?: boolean;
+        /**
+          * Whether the server mints expiring asset URLs for this instance (42ASN5). When set, resolutions stop asking for permanent asset paths, which on the server would create the permanent anonymous link this feature removes. When this and `enable-asset-format-controls` are both true, expiring URLs take precedence and the incompatible controls stay disabled.
+        */
+        useExpiringAssetUrls?: boolean;
         /**
           * Exposes the font family / style / weight pickers in the block config sidebar. Should match the host `cx-content-builder` setting. <br/>@default false
         */