@reflagged/shell 1.9.0 → 1.9.1

package/README.md

@@ -178,7 +178,7 @@ await createNotifier().notify({
 |---|---|---|
 | `heading` | `text`, `level?` 1–3 | sub-headings inside the mail |
 | `text` | `text`, `size?` sm/md/lg, `muted?`, `align?` | paragraphs; line breaks are kept |
-| `button` | `label`, `url`, `variant?` primary/secondary, `align?` | links as buttons (`tel:`/`mailto:` too) |
+| `button` | `label`, `url`, `variant?` primary/secondary, `align?` | actions — https on the booking's or tenant's domain (like `actionUrl`), or `tel:`/`mailto:` |
 | `image` | `src`, `alt`, `width?`, `href?`, `align?` | charts, screenshots — https on the booking's or tenant's domain |
 | `callout` | `tone` neutral/info/success/warning/danger, `title?`, `text?` | status banners; tone colours are fixed, not branded |
 | `facts` | `items[{ label, value }]` | label/value pairs |
@@ -196,8 +196,9 @@ emphasis and links — `[{ text: 'fett', bold: true }, { text: ' und ' },
 { text: 'Link', href: 'https://…' }]`. Markdown is **not** interpreted.
 
 Rules the base enforces (400 with the failing path otherwise): only the
-blocks above, no extra properties, links https/`tel:`/`mailto:`, images from
-the booking's or tenant's domains, at most 200 top-level blocks, 100 kB, and
+blocks above, no extra properties, links https/`tel:`/`mailto:`; images and
+button links only on the booking's or tenant's domains (inline span links may
+point to any https page, e.g. a source), at most 200 top-level blocks, 100 kB, and
 `section`/`row` nested three levels deep. The base also writes a plain-text
 part from the blocks and shows the full mail in the platform inbox. Without
 `blocks`, `body` is rendered as paragraphs as before. Types:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reflagged/shell",
-  "version": "1.9.0",
+  "version": "1.9.1",
   "description": "Shared app shell for Reflagged services — OIDC auth, SSO, app switcher",
   "type": "module",
   "sideEffects": false,

package/src/components/ServiceIcon.tsx

@@ -7,6 +7,7 @@ import {
   Brain,
   Contact,
   Factory,
+  Gauge,
   ListMusic,
   MailPlus,
   MessageSquareText,
@@ -41,6 +42,7 @@ const ICONS: Record<string, LucideIcon> = {
   Brain,
   Contact,
   Factory,
+  Gauge,
   ListMusic,
   MailPlus,
   MessageSquareText,

package/src/lib/notifications/blocks.ts

@@ -11,8 +11,9 @@
  * an invalid block answers 400 with the path of the offending field.
  *
  * Limits: 200 top-level blocks, 100 kB as JSON, `section`/`row` nested at most
- * three levels. Links: https, `tel:` or `mailto:`. Images: https on a domain of
- * the booking or the tenant (anything else would be a tracking pixel).
+ * three levels. Links: https, `tel:` or `mailto:`. Images and button links:
+ * https on a domain of the booking or the tenant (a foreign image is a tracking
+ * pixel, a foreign button a phishing lure); inline span links may go anywhere.
  */
 
 /** A run of text with optional emphasis or a link. */
@@ -43,6 +44,7 @@ export type TextBlock = {
 export type ButtonBlock = {
   type: 'button'
   label: string
+  /** https on a domain of the booking or the tenant, or tel:/mailto:. */
   url: string
   variant?: 'primary' | 'secondary'
   align?: Align