@riverbankcms/sdk 0.60.16 → 0.62.2

package/dist/client/bookings.mjs

@@ -86,7 +86,7 @@ function ze() {
     /* @__PURE__ */ Te(P)
   );
 }
-function z5(e) {
+function z11(e) {
   if (L) {
     if (/* @__PURE__ */ Te(P) !== null)
       throw Tt(), Je;
@@ -2115,12 +2115,12 @@ function ha(e, t) {
   var mt = we(Dr, 2);
   let Pr;
   var We = X(mt);
-  en(We), We.__change = ui, z5(mt);
+  en(We), We.__change = ui, z11(mt);
   var Ut = we(mt, 2), wi = X(Ut);
   {
     var pi = (n) => {
       var u = na(), _ = Gr(u), y = X(_);
-      Ge(y, () => c(re).verified), z5(_);
+      Ge(y, () => c(re).verified), z11(_);
       var T = we(_, 2);
       en(T), Pe(() => {
         se(T, "name", V()), jo(T, c(Le));
@@ -2129,10 +2129,10 @@ function ha(e, t) {
       {
         var _ = (T) => {
           var E = ia(), p = X(E);
-          Ge(p, () => c(re).verifying), z5(E), ne(T, E);
+          Ge(p, () => c(re).verifying), z11(E), ne(T, E);
         }, y = (T) => {
           var E = oa(), p = X(E);
-          Ge(p, () => c(re).label), z5(E), Pe(() => se(E, "for", c(cr))), ne(T, E);
+          Ge(p, () => c(re).label), z11(E), Pe(() => se(E, "for", c(cr))), ne(T, E);
         };
         $e(
           n,
@@ -2147,18 +2147,18 @@ function ha(e, t) {
       c(C) === b.VERIFIED ? n(pi) : n(bi, false);
     });
   }
-  z5(Ut);
+  z11(Ut);
   var yi = we(Ut, 2);
   {
     var Ei = (n) => {
       var u = aa(), _ = X(u);
-      se(_, "href", sr), z5(u), Pe(() => se(_, "aria-label", c(re).ariaLinkLabel)), ne(n, u);
+      se(_, "href", sr), z11(u), Pe(() => se(_, "aria-label", c(re).ariaLinkLabel)), ne(n, u);
     };
     $e(yi, (n) => {
       (N() !== true || c(Dt)) && n(Ei);
     });
   }
-  z5(Mt);
+  z11(Mt);
   var Or = we(Mt, 2);
   {
     var xi = (n) => {
@@ -2166,16 +2166,16 @@ function ha(e, t) {
       {
         var y = (E) => {
           var p = la(), x = X(p);
-          Ge(x, () => c(re).expired), z5(p), Pe(() => se(p, "title", c(He))), ne(E, p);
+          Ge(x, () => c(re).expired), z11(p), Pe(() => se(p, "title", c(He))), ne(E, p);
         }, T = (E) => {
           var p = sa(), x = X(p);
-          Ge(x, () => c(re).error), z5(p), Pe(() => se(p, "title", c(He))), ne(E, p);
+          Ge(x, () => c(re).error), z11(p), Pe(() => se(p, "title", c(He))), ne(E, p);
         };
         $e(_, (E) => {
           c(C) === b.EXPIRED ? E(y) : E(T, false);
         });
       }
-      z5(u), ne(n, u);
+      z11(u), ne(n, u);
     };
     $e(Or, (n) => {
       (c(He) || c(C) === b.EXPIRED) && n(xi);
@@ -2185,7 +2185,7 @@ function ha(e, t) {
   {
     var $i = (n) => {
       var u = ua(), _ = X(u), y = X(_);
-      Ge(y, () => c(re).footer), z5(_), z5(u), ne(n, u);
+      Ge(y, () => c(re).footer), z11(_), z11(u), ne(n, u);
     };
     $e(Fr, (n) => {
       c(re).footer && (k() !== true || c(Dt)) && n($i);
@@ -2201,7 +2201,7 @@ function ha(e, t) {
       v() && n(Ci);
     });
   }
-  return z5(ot), nn(ot, (n) => D(B, n), () => c(B)), Pe(
+  return z11(ot), nn(ot, (n) => D(B, n), () => c(B)), Pe(
     (n) => {
       se(ot, "data-state", c(C)), se(ot, "data-floating", v()), Pr = Fo(mt, 1, "altcha-checkbox", null, Pr, n), se(We, "id", c(cr)), We.required = r2() !== "onsubmit" && (!v() || r2() !== "off");
     },
@@ -4397,6 +4397,303 @@ function getBookingSuccessMessage(successMessage) {
   return successMessage?.trim() || "Your appointment has been booked! Check your email for confirmation.";
 }
 
+// ../theme-core/src/inputs/types.ts
+import { z as z5 } from "zod";
+var inputSystemSchema = z5.object({
+  // Base styling (applied to all inputs)
+  base: z5.object({
+    background: z5.union([
+      z5.object({
+        type: z5.literal("solid"),
+        colorToken: z5.string()
+      }),
+      z5.object({
+        type: z5.literal("transparent")
+      })
+    ]),
+    textColorToken: z5.string(),
+    border: z5.object({
+      widthClass: z5.string(),
+      // e.g., 'border', 'border-2'
+      colorToken: z5.string(),
+      style: z5.enum(["all", "underline"]).optional()
+    }),
+    corners: z5.enum(["square", "soft", "rounded", "pill"]).nullable(),
+    // null = inherit from theme.corners
+    shadow: z5.object({
+      elevation: z5.enum(["none", "low", "medium"]),
+      softness: z5.enum(["soft", "crisp", "hard"]).nullable()
+    }).nullable(),
+    spacing: z5.enum(["compact", "cozy", "medium", "comfortable"]),
+    // padding inside inputs
+    fontSize: z5.enum(["sm", "base", "lg"])
+  }),
+  // Label styling
+  label: z5.object({
+    textColorToken: z5.string(),
+    fontWeight: z5.enum(["regular", "medium", "semibold", "bold", "black"]),
+    fontSize: z5.enum(["2xs", "xs", "sm", "base"]),
+    textTransform: z5.enum(["none", "uppercase", "lowercase", "capitalize"]).optional(),
+    letterSpacing: z5.enum(["normal", "wide", "wider", "widest"]).optional(),
+    opacity: z5.number().min(0.2).max(1).optional()
+  }),
+  // Focus state
+  focus: z5.object({
+    ringColorToken: z5.string(),
+    ringWidth: z5.enum(["0", "1", "2", "3"]),
+    borderColorToken: z5.string().optional()
+    // Change border color on focus
+  }),
+  // Error state (for validation feedback)
+  error: z5.object({
+    borderColorToken: z5.string(),
+    textColorToken: z5.string()
+  }),
+  // Disabled state
+  disabled: z5.object({
+    backgroundColorToken: z5.string(),
+    textColorToken: z5.string(),
+    opacity: z5.number().min(0.3).max(0.7)
+  })
+});
+
+// ../theme-core/src/navigation/types.ts
+import { z as z7 } from "zod";
+
+// ../theme-core/src/interactive/baseSchema.ts
+import { z as z6 } from "zod";
+var interactiveTypographySchema = z6.object({
+  /** Font family source */
+  typography: z6.enum(["body", "heading"]).default("body"),
+  /** Font weight */
+  fontWeight: z6.enum(["regular", "medium", "semibold", "bold"]).default("medium"),
+  /** Text transform */
+  textTransform: z6.enum(["none", "uppercase", "capitalize"]).default("none"),
+  /** Italic style */
+  italic: z6.boolean().default(false)
+});
+var effectApplicationSchema2 = z6.object({
+  /** Effect preset ID */
+  effectId: z6.string(),
+  /** User-provided customization options */
+  options: z6.record(z6.string(), z6.any()).optional()
+});
+var effectCompositionSchema = z6.object({
+  /** Effects always applied */
+  base: z6.array(effectApplicationSchema2).optional(),
+  /** Effects applied on hover */
+  hover: z6.array(effectApplicationSchema2).optional(),
+  /** Effects applied on active/pressed */
+  active: z6.array(effectApplicationSchema2).optional(),
+  /** Effects applied on focus */
+  focus: z6.array(effectApplicationSchema2).optional()
+});
+
+// ../theme-core/src/navigation/types.ts
+var navLinkPaddingSchema = z7.enum(["none", "compact", "default"]);
+var navLinkPaddingXSchema = z7.enum(["none", "tight", "compact", "default", "relaxed", "spacious"]);
+var navLinkBorderRadiusSchema = z7.enum(["none", "sm", "md", "full"]);
+var navLinkTextSizeSchema = z7.enum(["xs", "sm", "base", "lg"]);
+var navLinkLetterSpacingSchema = z7.enum(["normal", "wide", "wider", "widest"]);
+var navLinkStyleSchema = z7.object({
+  /** Display name for the style */
+  name: z7.string().min(1).max(30).optional(),
+  /** Typography settings (inherited from interactive base) */
+  ...interactiveTypographySchema.shape,
+  /** Text color token */
+  colorToken: z7.string().default("text"),
+  /** Optional text size override */
+  textSize: navLinkTextSizeSchema.optional(),
+  /** Optional letter spacing override */
+  letterSpacing: navLinkLetterSpacingSchema.optional(),
+  /** Hover/active color token (for color-change effects) */
+  hoverColorToken: z7.string().nullable().optional(),
+  /** Padding preset */
+  padding: navLinkPaddingSchema.default("compact"),
+  /** Horizontal padding override (overrides horizontal component of padding preset) */
+  paddingX: navLinkPaddingXSchema.optional(),
+  /** Border radius (for capsule/pill styles) */
+  borderRadius: navLinkBorderRadiusSchema.default("none"),
+  /** Composable effects */
+  effects: effectCompositionSchema.optional()
+});
+
+// ../theme-core/src/customCss/validation.ts
+import { z as z8 } from "zod";
+var FORBIDDEN_SELECTORS = [":root", "html", "body"];
+var UNIVERSAL_SELECTOR = "*";
+var REMOTE_URL_PATTERN = /url\s*\(\s*['"]?(https?:|\/\/)/i;
+var JAVASCRIPT_URL_PATTERN = /javascript\s*:/i;
+function isForbiddenSelectorPart(part) {
+  const normalized = part.toLowerCase().trim();
+  if (!normalized) return true;
+  if (normalized === UNIVERSAL_SELECTOR || normalized.startsWith("* ") || normalized.endsWith(" *") || normalized.includes(" * ")) {
+    return true;
+  }
+  for (const forbidden of FORBIDDEN_SELECTORS) {
+    if (normalized === forbidden) return true;
+    if (normalized.startsWith(forbidden + " ")) return true;
+    if (normalized.startsWith(forbidden + ">")) return true;
+    if (normalized.startsWith(forbidden + "+")) return true;
+    if (normalized.startsWith(forbidden + "~")) return true;
+    if (normalized.startsWith(forbidden + ".")) return true;
+    if (normalized.startsWith(forbidden + "#")) return true;
+    if (normalized.startsWith(forbidden + "[")) return true;
+    if (normalized.startsWith(forbidden + ":") && !normalized.startsWith(forbidden + "::")) return true;
+  }
+  return false;
+}
+function hasScopeEscapingSiblingCombinator(selector) {
+  const normalized = selector.trim();
+  return /&\s*[+~]/.test(normalized);
+}
+function containsForbiddenSelector(selector) {
+  const normalized = selector.toLowerCase().trim();
+  if (!normalized) return true;
+  if (hasScopeEscapingSiblingCombinator(selector)) {
+    return true;
+  }
+  const parts = normalized.split(",");
+  for (const part of parts) {
+    if (isForbiddenSelectorPart(part)) {
+      return true;
+    }
+  }
+  return false;
+}
+var selectorSchema = z8.string().min(1, "Selector cannot be empty").max(200, "Selector too long (max 200 characters)").refine(
+  (s) => !containsForbiddenSelector(s),
+  { message: "Global selectors (:root, html, body, *) are not allowed" }
+);
+function containsRemoteUrl(value) {
+  return REMOTE_URL_PATTERN.test(value);
+}
+function containsJavascriptUrl(value) {
+  return JAVASCRIPT_URL_PATTERN.test(value);
+}
+var declarationValueSchema = z8.string().max(500, "Declaration value too long (max 500 characters)").refine(
+  (v) => !containsRemoteUrl(v),
+  { message: "Remote url() references are not allowed. Use local paths, data URIs, or fragment IDs." }
+).refine(
+  (v) => !containsJavascriptUrl(v),
+  { message: "javascript: URLs are not allowed" }
+);
+var declarationsSchema = z8.record(
+  z8.string().min(1).max(100),
+  // property name
+  declarationValueSchema
+  // property value
+);
+var customCssRuleSchema = z8.object({
+  id: z8.string().min(1, "Rule ID is required").max(50, "Rule ID too long"),
+  selector: selectorSchema,
+  declarations: declarationsSchema
+});
+var blockCustomCssRuleSchema = customCssRuleSchema.extend({
+  blockKind: z8.string().min(1, "Block kind is required").max(50, "Block kind too long")
+});
+var customCssRulesSchema = z8.array(customCssRuleSchema).optional();
+var blockCustomCssRulesSchema = z8.array(blockCustomCssRuleSchema).optional();
+
+// ../theme-core/src/customCss/atRuleValidation.ts
+import { z as z9 } from "zod";
+var KEYFRAME_OFFSET_PATTERN = /^(from|to|\d{1,3}%)$/i;
+var ANIMATION_NAME_PATTERN = /^[a-zA-Z_-][a-zA-Z0-9_-]*$/;
+var BLOCKED_AT_RULES = ["@import", "@charset"];
+var BLOCKED_AT_RULE_PATTERN = /@(?:import|charset)\b/i;
+var ruleIdSchema = z9.string().min(1, "Rule ID is required").max(50, "Rule ID too long");
+var nestedRuleSchema = z9.object({
+  selector: selectorSchema,
+  declarations: declarationsSchema
+});
+function isValidKeyframeOffset(offset) {
+  const trimmed = offset.trim().toLowerCase();
+  if (trimmed === "from" || trimmed === "to") return true;
+  const match = trimmed.match(/^(\d{1,3})%$/);
+  if (!match || match[1] === void 0) return false;
+  const value = parseInt(match[1], 10);
+  return value >= 0 && value <= 100;
+}
+var keyframeOffsetSchema = z9.string().transform((offset) => offset.trim()).refine(
+  (offset) => KEYFRAME_OFFSET_PATTERN.test(offset),
+  { message: 'Invalid keyframe offset. Use percentages (0%, 50%, 100%) or "from"/"to"' }
+).refine(
+  isValidKeyframeOffset,
+  { message: "Keyframe offset must be between 0% and 100%" }
+);
+var animationNameSchema = z9.string().min(1, "Animation name is required").max(50, "Animation name too long").refine(
+  (name) => ANIMATION_NAME_PATTERN.test(name),
+  { message: "Invalid animation name. Use letters, numbers, dashes, underscores (start with letter, dash, or underscore)" }
+);
+var keyframeSchema = z9.object({
+  offset: keyframeOffsetSchema,
+  declarations: declarationsSchema
+});
+var keyframesAtRuleSchema = z9.object({
+  id: ruleIdSchema,
+  type: z9.literal("keyframes"),
+  name: animationNameSchema,
+  frames: z9.array(keyframeSchema).min(1, "At least one keyframe is required")
+});
+var fontFaceDeclarationsSchema = z9.record(z9.string().min(1).max(100), declarationValueSchema).refine(
+  (decls) => "fontFamily" in decls || "font-family" in decls,
+  { message: "font-family is required in @font-face" }
+);
+var fontFaceAtRuleSchema = z9.object({
+  id: ruleIdSchema,
+  type: z9.literal("font-face"),
+  declarations: fontFaceDeclarationsSchema
+});
+var mediaQuerySchema = z9.string().min(1, "Media query is required").max(200, "Media query too long");
+var mediaAtRuleSchema = z9.object({
+  id: ruleIdSchema,
+  type: z9.literal("media"),
+  query: mediaQuerySchema,
+  rules: z9.array(nestedRuleSchema).min(1, "At least one rule is required")
+});
+var supportsConditionSchema = z9.string().min(1, "Supports condition is required").max(200, "Supports condition too long");
+var supportsAtRuleSchema = z9.object({
+  id: ruleIdSchema,
+  type: z9.literal("supports"),
+  condition: supportsConditionSchema,
+  rules: z9.array(nestedRuleSchema).min(1, "At least one rule is required")
+});
+function containsBlockedAtRule(css) {
+  return BLOCKED_AT_RULE_PATTERN.test(css);
+}
+var rawCssSchema = z9.string().min(1, "CSS is required").max(5e3, "Raw CSS too long (max 5000 characters)").refine(
+  (css) => css.trim().startsWith("@"),
+  { message: "Raw at-rule must start with @" }
+).refine(
+  (css) => !containsBlockedAtRule(css),
+  { message: `Blocked at-rules: ${BLOCKED_AT_RULES.join(", ")}. Use typed at-rules or local assets instead.` }
+);
+var rawAtRuleSchema = z9.object({
+  id: ruleIdSchema,
+  type: z9.literal("raw"),
+  css: rawCssSchema
+});
+var customCssAtRuleSchema = z9.discriminatedUnion("type", [
+  keyframesAtRuleSchema,
+  fontFaceAtRuleSchema,
+  mediaAtRuleSchema,
+  supportsAtRuleSchema,
+  rawAtRuleSchema
+]);
+var customCssAtRulesSchema = z9.array(customCssAtRuleSchema).optional();
+
+// ../theme-core/src/shared/componentStyles.ts
+import { z as z10 } from "zod";
+var componentBorderSchema = z10.object({
+  width: z10.enum(["none", "hairline", "thin", "medium", "thick"]).default("none"),
+  style: z10.enum(["solid", "dashed"]).default("solid"),
+  colorToken: z10.string().optional()
+  // defaults to "border" if not set
+});
+var componentShadowSchema = z10.object({
+  elevation: z10.enum(["none", "sm", "md", "lg", "xl", "2xl"]).default("sm")
+});
+
 // ../theme-core/src/tokens/blockColorTokens.ts
 var blockColorTokenNames = [
   "text",
@@ -7425,127 +7722,6 @@ var BookingFormClient = ({
 // ../theme-core/src/ClientThemeScope.tsx
 import { useMemo as useMemo6 } from "react";
 
-// ../theme-core/src/inputs/types.ts
-import { z as z6 } from "zod";
-var inputSystemSchema = z6.object({
-  // Base styling (applied to all inputs)
-  base: z6.object({
-    background: z6.union([
-      z6.object({
-        type: z6.literal("solid"),
-        colorToken: z6.string()
-      }),
-      z6.object({
-        type: z6.literal("transparent")
-      })
-    ]),
-    textColorToken: z6.string(),
-    border: z6.object({
-      widthClass: z6.string(),
-      // e.g., 'border', 'border-2'
-      colorToken: z6.string(),
-      style: z6.enum(["all", "underline"]).optional()
-    }),
-    corners: z6.enum(["square", "soft", "rounded", "pill"]).nullable(),
-    // null = inherit from theme.corners
-    shadow: z6.object({
-      elevation: z6.enum(["none", "low", "medium"]),
-      softness: z6.enum(["soft", "crisp", "hard"]).nullable()
-    }).nullable(),
-    spacing: z6.enum(["compact", "cozy", "medium", "comfortable"]),
-    // padding inside inputs
-    fontSize: z6.enum(["sm", "base", "lg"])
-  }),
-  // Label styling
-  label: z6.object({
-    textColorToken: z6.string(),
-    fontWeight: z6.enum(["regular", "medium", "semibold", "bold", "black"]),
-    fontSize: z6.enum(["2xs", "xs", "sm", "base"]),
-    textTransform: z6.enum(["none", "uppercase", "lowercase", "capitalize"]).optional(),
-    letterSpacing: z6.enum(["normal", "wide", "wider", "widest"]).optional(),
-    opacity: z6.number().min(0.2).max(1).optional()
-  }),
-  // Focus state
-  focus: z6.object({
-    ringColorToken: z6.string(),
-    ringWidth: z6.enum(["0", "1", "2", "3"]),
-    borderColorToken: z6.string().optional()
-    // Change border color on focus
-  }),
-  // Error state (for validation feedback)
-  error: z6.object({
-    borderColorToken: z6.string(),
-    textColorToken: z6.string()
-  }),
-  // Disabled state
-  disabled: z6.object({
-    backgroundColorToken: z6.string(),
-    textColorToken: z6.string(),
-    opacity: z6.number().min(0.3).max(0.7)
-  })
-});
-
-// ../theme-core/src/navigation/types.ts
-import { z as z8 } from "zod";
-
-// ../theme-core/src/interactive/baseSchema.ts
-import { z as z7 } from "zod";
-var interactiveTypographySchema = z7.object({
-  /** Font family source */
-  typography: z7.enum(["body", "heading"]).default("body"),
-  /** Font weight */
-  fontWeight: z7.enum(["regular", "medium", "semibold", "bold"]).default("medium"),
-  /** Text transform */
-  textTransform: z7.enum(["none", "uppercase", "capitalize"]).default("none"),
-  /** Italic style */
-  italic: z7.boolean().default(false)
-});
-var effectApplicationSchema2 = z7.object({
-  /** Effect preset ID */
-  effectId: z7.string(),
-  /** User-provided customization options */
-  options: z7.record(z7.string(), z7.any()).optional()
-});
-var effectCompositionSchema = z7.object({
-  /** Effects always applied */
-  base: z7.array(effectApplicationSchema2).optional(),
-  /** Effects applied on hover */
-  hover: z7.array(effectApplicationSchema2).optional(),
-  /** Effects applied on active/pressed */
-  active: z7.array(effectApplicationSchema2).optional(),
-  /** Effects applied on focus */
-  focus: z7.array(effectApplicationSchema2).optional()
-});
-
-// ../theme-core/src/navigation/types.ts
-var navLinkPaddingSchema = z8.enum(["none", "compact", "default"]);
-var navLinkPaddingXSchema = z8.enum(["none", "tight", "compact", "default", "relaxed", "spacious"]);
-var navLinkBorderRadiusSchema = z8.enum(["none", "sm", "md", "full"]);
-var navLinkTextSizeSchema = z8.enum(["xs", "sm", "base", "lg"]);
-var navLinkLetterSpacingSchema = z8.enum(["normal", "wide", "wider", "widest"]);
-var navLinkStyleSchema = z8.object({
-  /** Display name for the style */
-  name: z8.string().min(1).max(30).optional(),
-  /** Typography settings (inherited from interactive base) */
-  ...interactiveTypographySchema.shape,
-  /** Text color token */
-  colorToken: z8.string().default("text"),
-  /** Optional text size override */
-  textSize: navLinkTextSizeSchema.optional(),
-  /** Optional letter spacing override */
-  letterSpacing: navLinkLetterSpacingSchema.optional(),
-  /** Hover/active color token (for color-change effects) */
-  hoverColorToken: z8.string().nullable().optional(),
-  /** Padding preset */
-  padding: navLinkPaddingSchema.default("compact"),
-  /** Horizontal padding override (overrides horizontal component of padding preset) */
-  paddingX: navLinkPaddingXSchema.optional(),
-  /** Border radius (for capsule/pill styles) */
-  borderRadius: navLinkBorderRadiusSchema.default("none"),
-  /** Composable effects */
-  effects: effectCompositionSchema.optional()
-});
-
 // ../theme-core/src/navigation/presets.ts
 var NAV_LINK_PRESETS = {
   /**
@@ -7690,18 +7866,6 @@ var NAV_LINK_PRESETS = {
 };
 var NAV_LINK_PRESET_IDS = Object.keys(NAV_LINK_PRESETS);
 
-// ../theme-core/src/shared/componentStyles.ts
-import { z as z9 } from "zod";
-var componentBorderSchema = z9.object({
-  width: z9.enum(["none", "hairline", "thin", "medium", "thick"]).default("none"),
-  style: z9.enum(["solid", "dashed"]).default("solid"),
-  colorToken: z9.string().optional()
-  // defaults to "border" if not set
-});
-var componentShadowSchema = z9.object({
-  elevation: z9.enum(["none", "sm", "md", "lg", "xl", "2xl"]).default("sm")
-});
-
 // ../theme-core/src/layout/generateLayoutCss.ts
 var waveTransitionMask = svgDataUrl(
   "<svg viewBox='0 0 1440 72' xmlns='http://www.w3.org/2000/svg' preserveAspectRatio='none'><path d='M0 72V46C130 55 260 24 420 30C590 36 690 62 860 42C1035 21 1160 47 1305 36C1365 31 1415 33 1440 38V72H0Z' fill='white'/></svg>"
@@ -8159,170 +8323,6 @@ blockVarRegistry.set("testimonials", generateTestimonialsVars);
 blockVarRegistry.set("course-details", generateCourseDetailsVars);
 blockVarRegistry.set("course-registration", generateCourseRegistrationVars);
 
-// ../theme-core/src/customCss/validation.ts
-import { z as z10 } from "zod";
-var FORBIDDEN_SELECTORS = [":root", "html", "body"];
-var UNIVERSAL_SELECTOR = "*";
-var REMOTE_URL_PATTERN = /url\s*\(\s*['"]?(https?:|\/\/)/i;
-var JAVASCRIPT_URL_PATTERN = /javascript\s*:/i;
-function isForbiddenSelectorPart(part) {
-  const normalized = part.toLowerCase().trim();
-  if (!normalized) return true;
-  if (normalized === UNIVERSAL_SELECTOR || normalized.startsWith("* ") || normalized.endsWith(" *") || normalized.includes(" * ")) {
-    return true;
-  }
-  for (const forbidden of FORBIDDEN_SELECTORS) {
-    if (normalized === forbidden) return true;
-    if (normalized.startsWith(forbidden + " ")) return true;
-    if (normalized.startsWith(forbidden + ">")) return true;
-    if (normalized.startsWith(forbidden + "+")) return true;
-    if (normalized.startsWith(forbidden + "~")) return true;
-    if (normalized.startsWith(forbidden + ".")) return true;
-    if (normalized.startsWith(forbidden + "#")) return true;
-    if (normalized.startsWith(forbidden + "[")) return true;
-    if (normalized.startsWith(forbidden + ":") && !normalized.startsWith(forbidden + "::")) return true;
-  }
-  return false;
-}
-function hasScopeEscapingSiblingCombinator(selector) {
-  const normalized = selector.trim();
-  return /&\s*[+~]/.test(normalized);
-}
-function containsForbiddenSelector(selector) {
-  const normalized = selector.toLowerCase().trim();
-  if (!normalized) return true;
-  if (hasScopeEscapingSiblingCombinator(selector)) {
-    return true;
-  }
-  const parts = normalized.split(",");
-  for (const part of parts) {
-    if (isForbiddenSelectorPart(part)) {
-      return true;
-    }
-  }
-  return false;
-}
-var selectorSchema = z10.string().min(1, "Selector cannot be empty").max(200, "Selector too long (max 200 characters)").refine(
-  (s) => !containsForbiddenSelector(s),
-  { message: "Global selectors (:root, html, body, *) are not allowed" }
-);
-function containsRemoteUrl(value) {
-  return REMOTE_URL_PATTERN.test(value);
-}
-function containsJavascriptUrl(value) {
-  return JAVASCRIPT_URL_PATTERN.test(value);
-}
-var declarationValueSchema = z10.string().max(500, "Declaration value too long (max 500 characters)").refine(
-  (v) => !containsRemoteUrl(v),
-  { message: "Remote url() references are not allowed. Use local paths, data URIs, or fragment IDs." }
-).refine(
-  (v) => !containsJavascriptUrl(v),
-  { message: "javascript: URLs are not allowed" }
-);
-var declarationsSchema = z10.record(
-  z10.string().min(1).max(100),
-  // property name
-  declarationValueSchema
-  // property value
-);
-var customCssRuleSchema = z10.object({
-  id: z10.string().min(1, "Rule ID is required").max(50, "Rule ID too long"),
-  selector: selectorSchema,
-  declarations: declarationsSchema
-});
-var blockCustomCssRuleSchema = customCssRuleSchema.extend({
-  blockKind: z10.string().min(1, "Block kind is required").max(50, "Block kind too long")
-});
-var customCssRulesSchema = z10.array(customCssRuleSchema).optional();
-var blockCustomCssRulesSchema = z10.array(blockCustomCssRuleSchema).optional();
-
-// ../theme-core/src/customCss/atRuleValidation.ts
-import { z as z11 } from "zod";
-var KEYFRAME_OFFSET_PATTERN = /^(from|to|\d{1,3}%)$/i;
-var ANIMATION_NAME_PATTERN = /^[a-zA-Z_-][a-zA-Z0-9_-]*$/;
-var BLOCKED_AT_RULES = ["@import", "@charset"];
-var BLOCKED_AT_RULE_PATTERN = /@(?:import|charset)\b/i;
-var ruleIdSchema = z11.string().min(1, "Rule ID is required").max(50, "Rule ID too long");
-var nestedRuleSchema = z11.object({
-  selector: selectorSchema,
-  declarations: declarationsSchema
-});
-function isValidKeyframeOffset(offset) {
-  const trimmed = offset.trim().toLowerCase();
-  if (trimmed === "from" || trimmed === "to") return true;
-  const match = trimmed.match(/^(\d{1,3})%$/);
-  if (!match || match[1] === void 0) return false;
-  const value = parseInt(match[1], 10);
-  return value >= 0 && value <= 100;
-}
-var keyframeOffsetSchema = z11.string().transform((offset) => offset.trim()).refine(
-  (offset) => KEYFRAME_OFFSET_PATTERN.test(offset),
-  { message: 'Invalid keyframe offset. Use percentages (0%, 50%, 100%) or "from"/"to"' }
-).refine(
-  isValidKeyframeOffset,
-  { message: "Keyframe offset must be between 0% and 100%" }
-);
-var animationNameSchema = z11.string().min(1, "Animation name is required").max(50, "Animation name too long").refine(
-  (name) => ANIMATION_NAME_PATTERN.test(name),
-  { message: "Invalid animation name. Use letters, numbers, dashes, underscores (start with letter, dash, or underscore)" }
-);
-var keyframeSchema = z11.object({
-  offset: keyframeOffsetSchema,
-  declarations: declarationsSchema
-});
-var keyframesAtRuleSchema = z11.object({
-  id: ruleIdSchema,
-  type: z11.literal("keyframes"),
-  name: animationNameSchema,
-  frames: z11.array(keyframeSchema).min(1, "At least one keyframe is required")
-});
-var fontFaceDeclarationsSchema = z11.record(z11.string().min(1).max(100), declarationValueSchema).refine(
-  (decls) => "fontFamily" in decls || "font-family" in decls,
-  { message: "font-family is required in @font-face" }
-);
-var fontFaceAtRuleSchema = z11.object({
-  id: ruleIdSchema,
-  type: z11.literal("font-face"),
-  declarations: fontFaceDeclarationsSchema
-});
-var mediaQuerySchema = z11.string().min(1, "Media query is required").max(200, "Media query too long");
-var mediaAtRuleSchema = z11.object({
-  id: ruleIdSchema,
-  type: z11.literal("media"),
-  query: mediaQuerySchema,
-  rules: z11.array(nestedRuleSchema).min(1, "At least one rule is required")
-});
-var supportsConditionSchema = z11.string().min(1, "Supports condition is required").max(200, "Supports condition too long");
-var supportsAtRuleSchema = z11.object({
-  id: ruleIdSchema,
-  type: z11.literal("supports"),
-  condition: supportsConditionSchema,
-  rules: z11.array(nestedRuleSchema).min(1, "At least one rule is required")
-});
-function containsBlockedAtRule(css) {
-  return BLOCKED_AT_RULE_PATTERN.test(css);
-}
-var rawCssSchema = z11.string().min(1, "CSS is required").max(5e3, "Raw CSS too long (max 5000 characters)").refine(
-  (css) => css.trim().startsWith("@"),
-  { message: "Raw at-rule must start with @" }
-).refine(
-  (css) => !containsBlockedAtRule(css),
-  { message: `Blocked at-rules: ${BLOCKED_AT_RULES.join(", ")}. Use typed at-rules or local assets instead.` }
-);
-var rawAtRuleSchema = z11.object({
-  id: ruleIdSchema,
-  type: z11.literal("raw"),
-  css: rawCssSchema
-});
-var customCssAtRuleSchema = z11.discriminatedUnion("type", [
-  keyframesAtRuleSchema,
-  fontFaceAtRuleSchema,
-  mediaAtRuleSchema,
-  supportsAtRuleSchema,
-  rawAtRuleSchema
-]);
-var customCssAtRulesSchema = z11.array(customCssAtRuleSchema).optional();
-
 // ../theme-core/src/responsiveMode.ts
 var THEME_RESPONSIVE_MODE_ATTR = "data-rb-responsive-mode";
 function escapeRegExp(value) {