@riverbankcms/sdk 0.90.1 → 0.92.0

package/dist/server/rendering/server.mjs

@@ -123,6 +123,8 @@ function err(error) {
 
 // ../core/src/branded.ts
 var unsafeAsMediaAssetId = (id) => id;
+var unsafeAsStorageBucketName = (value) => value;
+var unsafeAsStoragePath = (value) => value;
 
 // ../core/src/assert-never.ts
 function assertNever(value, message = "Unexpected variant") {
@@ -177,6 +179,7 @@ function publicEventPricingType(pricing) {
       return "free";
     case "single_paid":
     case "ticket_types":
+    case "sliding_scale":
     case "course":
       return isFreePublicEventPriceDisplay(pricing.display) ? "free" : "paid";
     case "external":
@@ -189,6 +192,7 @@ function publicEventPricingCurrency(pricing) {
     case "free_registration":
     case "single_paid":
     case "ticket_types":
+    case "sliding_scale":
       return pricing.currency;
     case "course":
       return pricing.display.display.currency;
@@ -220,6 +224,8 @@ function formatCoursePriceDisplayLabel(display, options) {
       return `Course (${formatCurrencyAmount(display.amount, display.currency, options)})`;
     case "from":
       return `Course (From ${formatCurrencyAmount(display.amount, display.currency, options)})`;
+    case "range":
+      return `Course (${formatCurrencyAmount(display.minAmount, display.currency, options)} - ${formatCurrencyAmount(display.maxAmount, display.currency, options)})`;
     default:
       return assertNever(display);
   }
@@ -263,11 +269,11 @@ function isValidTimeZone(timeZone) {
 }
 function getSafeTimeZone(timeZone) {
   const normalized = typeof timeZone === "string" ? timeZone.trim() : "";
-  return normalized && isValidTimeZone(normalized) ? normalized : FALLBACK_TIMEZONE;
+  return normalized.length > 0 && isValidTimeZone(normalized) ? normalized : FALLBACK_TIMEZONE;
 }
 function parseStrictBookingTimeZone(timeZone) {
   const normalized = timeZone.trim();
-  if (!normalized || !isValidTimeZone(normalized)) {
+  if (normalized.length === 0 || !isValidTimeZone(normalized)) {
     return null;
   }
   return normalized;
@@ -344,7 +350,7 @@ function parseScheduledBookingDateTime(input) {
   try {
     const startsAt = toUtcIsoDateTimeString(input.startsAt);
     const timeZone = parseStrictBookingTimeZone(input.timeZone);
-    if (!timeZone) {
+    if (timeZone === null) {
       return {
         ok: false,
         field: "timeZone",
@@ -479,10 +485,10 @@ function normalizeLocationAddressText(value) {
     return null;
   }
   const trimmed = value.trim();
-  return trimmed ? trimmed : null;
+  return trimmed.length > 0 ? trimmed : null;
 }
 function hasLocationCoordinates(value) {
-  return typeof value?.lat === "number" && typeof value?.lng === "number";
+  return value != null && typeof value.lat === "number" && typeof value.lng === "number";
 }
 function toLocationCoordinates(value) {
   if (!hasLocationCoordinates(value)) {
@@ -511,6 +517,77 @@ function resolvePlanningDateInput(input = {}) {
   return resolvePlanningNowDate(input);
 }
 
+// ../media-core/src/fileSafety.ts
+var CONTROL_CHARACTER_PATTERN = /[\u0000-\u001f\u007f]/u;
+function containsUnsafePathSegmentCharacter(value) {
+  return value.includes("/") || value.includes("\\") || CONTROL_CHARACTER_PATTERN.test(value);
+}
+function isReservedPathSegment(value) {
+  return value === "." || value === "..";
+}
+function isUnsafePathSegment(segment) {
+  return segment.trim().length === 0 || segment !== segment.trim() || isReservedPathSegment(segment) || containsUnsafePathSegmentCharacter(segment);
+}
+
+// ../media-core/src/fileStorage.ts
+var FILE_STORAGE_BUCKETS = {
+  publicSite: unsafeAsStorageBucketName("media"),
+  privateSite: unsafeAsStorageBucketName("site-files-private"),
+  temporary: unsafeAsStorageBucketName("temp-uploads")
+};
+var PUBLIC_SITE_FILE_STORAGE_BUCKETS = [
+  FILE_STORAGE_BUCKETS.publicSite,
+  // Existing site logo and font uploads predate the unified file buckets.
+  unsafeAsStorageBucketName("site-assets"),
+  unsafeAsStorageBucketName("site-fonts")
+];
+var PRIVATE_SITE_FILE_BUCKET_MIME_TYPES = [
+  "application/pdf",
+  "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  "text/plain",
+  "application/rtf",
+  "text/rtf",
+  "image/jpeg",
+  "image/png",
+  "image/webp",
+  "image/gif",
+  "image/avif",
+  "image/heic",
+  "image/heif",
+  "image/svg+xml",
+  "text/csv",
+  "application/csv",
+  "application/vnd.ms-excel",
+  "application/zip",
+  "application/x-zip-compressed",
+  "audio/mpeg",
+  "audio/mp4",
+  "audio/wav",
+  "audio/x-wav",
+  "audio/ogg",
+  "audio/webm",
+  "audio/flac",
+  "video/mp4",
+  "video/webm",
+  "video/quicktime"
+];
+var TEMP_UPLOAD_BUCKET_MIME_TYPES = [
+  ...PRIVATE_SITE_FILE_BUCKET_MIME_TYPES,
+  "font/woff2",
+  "application/font-woff2",
+  "application/x-font-woff2",
+  "application/octet-stream"
+];
+function parseStoragePath(value) {
+  return joinStoragePathSegments(value.split("/"));
+}
+function joinStoragePathSegments(segments) {
+  if (segments.some(isUnsafePathSegment)) {
+    return err("unsafe-path-segment");
+  }
+  return ok(unsafeAsStoragePath(segments.join("/")));
+}
+
 // ../media-core/src/typeGuards.ts
 function isRecord(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
@@ -527,10 +604,10 @@ var RELATIVE_STORAGE_PATH_PREFIXES = [
   "imports/"
 ];
 function isRelativeDirectImageStoragePath(storagePath) {
-  return RELATIVE_STORAGE_PATH_PREFIXES.some((prefix) => storagePath.startsWith(prefix));
+  return RELATIVE_STORAGE_PATH_PREFIXES.some((prefix) => storagePath.startsWith(prefix)) && parseStoragePath(storagePath).ok;
 }
 function isSiteScopedDirectImageStoragePath(storagePath) {
-  return storagePath.startsWith("sites/");
+  return storagePath.startsWith("sites/") && parseStoragePath(storagePath).ok;
 }
 function encodeStoragePath(storagePath) {
   return storagePath.split("/").map((segment) => encodeURIComponent(segment)).join("/");
@@ -3003,6 +3080,21 @@ function fieldPlanToZod(plan, options = {}) {
     }
   });
 }
+function fieldPresenceForPlan(plan) {
+  return plan.required ? { kind: "required" } : { kind: "optional" };
+}
+function fieldPlanToObjectPropertyZod(plan, options = {}) {
+  const schema = fieldPlanToZod(plan, options);
+  const presence = fieldPresenceForPlan(plan);
+  switch (presence.kind) {
+    case "required":
+      return schema;
+    case "optional":
+      return schema.optional();
+    default:
+      return assertNever2(presence);
+  }
+}
 function addFieldIssueToZodContext(zodCtx, validationIssue, rootPath) {
   const message = fieldIssueToMessage(validationIssue);
   const path = relativeZodIssuePath(validationIssue.path, rootPath);
@@ -3215,7 +3307,7 @@ function createManifestValidator(manifestOrFields, options = {}) {
 function deriveContentZodFromPlans(plans, options) {
   const shape = {};
   for (const plan of plans) {
-    shape[plan.fieldId] = fieldPlanToZod(plan, options);
+    shape[plan.fieldId] = fieldPlanToObjectPropertyZod(plan, options);
   }
   return z5.object(shape).catchall(z5.unknown()).passthrough();
 }
@@ -26324,9 +26416,12 @@ var coursePricingOptionSchema = z43.object({
 });
 var coursePricingSchema = z43.object({
   bookingRequirement: z43.enum(["none", "required"]),
-  pricingStrategy: z43.enum(["free", "single", "tiered"]),
+  pricingStrategy: z43.enum(["free", "single", "tiered", "sliding_scale"]),
   currency: z43.string(),
   singlePriceAmount: z43.number().nullable(),
+  slidingMinAmount: z43.number().nullable().optional(),
+  slidingMaxAmount: z43.number().nullable().optional(),
+  slidingSuggestedAmount: z43.number().nullable().optional(),
   paymentTerms: blockBookingPaymentTermsSchema,
   options: z43.array(coursePricingOptionSchema)
 });
@@ -26480,6 +26575,19 @@ var publicEventPricingSchema = z44.discriminatedUnion("kind", [
     ticketTypes: z44.array(publicEventTicketTypeSchema),
     display: publicEventTicketTypePriceDisplaySchema
   }),
+  z44.object({
+    kind: z44.literal("sliding_scale"),
+    minAmount: z44.number(),
+    maxAmount: z44.number(),
+    suggestedAmount: z44.number().nullable(),
+    currency: z44.string(),
+    display: z44.object({
+      kind: z44.literal("range"),
+      minAmount: z44.number(),
+      maxAmount: z44.number(),
+      currency: z44.string()
+    })
+  }),
   z44.object({
     kind: z44.literal("course"),
     display: z44.object({ kind: z44.literal("course"), display: publicCoursePriceDisplaySchema })
@@ -26896,7 +27004,7 @@ function isRecord6(value) {
 }
 function isPublicEventPricing(value) {
   if (!isRecord6(value) || typeof value.kind !== "string") return false;
-  return value.kind === "drop_in" || value.kind === "free_registration" || value.kind === "single_paid" || value.kind === "ticket_types" || value.kind === "course" || value.kind === "external";
+  return value.kind === "drop_in" || value.kind === "free_registration" || value.kind === "single_paid" || value.kind === "sliding_scale" || value.kind === "ticket_types" || value.kind === "course" || value.kind === "external";
 }
 function isPublicEventTicketType(value) {
   return isRecord6(value) && typeof value.id === "string";
@@ -27513,7 +27621,9 @@ function getSelectableCoursePricingOptionsForNow(course, now) {
     return left.name.localeCompare(right.name);
   });
 }
-function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {}) {
+function resolveCoursePricingState(course, selectedPricingOptionId, selectedSlidingAmountOrNowInput, nowInput = {}) {
+  const selectedSlidingAmount = typeof selectedSlidingAmountOrNowInput === "number" || selectedSlidingAmountOrNowInput === null ? selectedSlidingAmountOrNowInput : null;
+  const effectiveNowInput = typeof selectedSlidingAmountOrNowInput === "object" && selectedSlidingAmountOrNowInput !== null ? selectedSlidingAmountOrNowInput : nowInput;
   const currency = course.pricing?.currency ?? course.currency;
   if (!course.pricing) {
     const legacyAmount = course.priceCents ?? 0;
@@ -27523,6 +27633,8 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
       selectableOptions: [],
       requiresSelection: false,
       selectedOption: null,
+      slidingScale: null,
+      selectedSlidingAmount: null,
       selectedPriceAmount: legacyAmount,
       selectedRequiresPayment: legacyAmount > 0,
       hasPaidSelection: legacyAmount > 0,
@@ -27537,6 +27649,8 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
         selectableOptions: [],
         requiresSelection: false,
         selectedOption: null,
+        slidingScale: null,
+        selectedSlidingAmount: null,
         selectedPriceAmount: 0,
         selectedRequiresPayment: false,
         hasPaidSelection: false,
@@ -27550,6 +27664,8 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
         selectableOptions: [],
         requiresSelection: false,
         selectedOption: null,
+        slidingScale: null,
+        selectedSlidingAmount: null,
         selectedPriceAmount: amount,
         selectedRequiresPayment: amount > 0,
         hasPaidSelection: amount > 0,
@@ -27559,7 +27675,7 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
     case "tiered": {
       const selectableOptions = getSelectableCoursePricingOptionsForNow(
         course,
-        resolvePlanningDateInput(nowInput)
+        resolvePlanningDateInput(effectiveNowInput)
       );
       const selectedOption = (selectedPricingOptionId ? selectableOptions.find((option) => option.id === selectedPricingOptionId) : null) ?? (selectableOptions.length === 1 ? selectableOptions[0] ?? null : null);
       const lowestAmount = selectableOptions.reduce((lowest, option) => {
@@ -27575,12 +27691,51 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
         selectableOptions,
         requiresSelection: selectableOptions.length > 1,
         selectedOption,
+        slidingScale: null,
+        selectedSlidingAmount: null,
         selectedPriceAmount: selectedOption?.priceAmount ?? null,
         selectedRequiresPayment: (selectedOption?.priceAmount ?? 0) > 0,
         hasPaidSelection: selectableOptions.some((option) => option.priceAmount > 0),
         hasFreeSelection: selectableOptions.some((option) => option.priceAmount === 0)
       };
     }
+    case "sliding_scale": {
+      const minAmount = course.pricing.slidingMinAmount ?? null;
+      const maxAmount = course.pricing.slidingMaxAmount ?? null;
+      if (minAmount === null || maxAmount === null || minAmount < 0 || maxAmount < minAmount) {
+        return {
+          currency,
+          display: { kind: "unavailable", currency },
+          selectableOptions: [],
+          requiresSelection: true,
+          selectedOption: null,
+          slidingScale: null,
+          selectedSlidingAmount: null,
+          selectedPriceAmount: null,
+          selectedRequiresPayment: false,
+          hasPaidSelection: false,
+          hasFreeSelection: false
+        };
+      }
+      const normalizedSelectedAmount = typeof selectedSlidingAmount === "number" && Number.isFinite(selectedSlidingAmount) ? selectedSlidingAmount : null;
+      return {
+        currency,
+        display: { kind: "range", minAmount, maxAmount, currency },
+        selectableOptions: [],
+        requiresSelection: normalizedSelectedAmount === null,
+        selectedOption: null,
+        slidingScale: {
+          minAmount,
+          maxAmount,
+          suggestedAmount: course.pricing.slidingSuggestedAmount ?? null
+        },
+        selectedSlidingAmount: normalizedSelectedAmount,
+        selectedPriceAmount: normalizedSelectedAmount,
+        selectedRequiresPayment: (normalizedSelectedAmount ?? 0) > 0,
+        hasPaidSelection: maxAmount > 0,
+        hasFreeSelection: minAmount === 0
+      };
+    }
   }
 }
 function formatCoursePriceDisplay(display, locale) {
@@ -28507,7 +28662,7 @@ function formatCalendarTitle(viewDate, view, days, monthNames = MONTH_NAMES) {
   if (view === "week") {
     const weekStart = days[0];
     const weekEnd = days[6];
-    if (!weekStart || !weekEnd) {
+    if (weekStart === void 0 || weekEnd === void 0) {
       return `${monthNames[viewDate.getMonth()] ?? ""} ${viewDate.getFullYear()}`;
     }
     const startMonth = monthNames[weekStart.getMonth()] ?? "";
@@ -28613,7 +28768,9 @@ function getLocalDateKey(isoTimestamp, timeZone) {
   const year = parts.find((part) => part.type === "year")?.value;
   const month = parts.find((part) => part.type === "month")?.value;
   const day = parts.find((part) => part.type === "day")?.value;
-  if (!year || !month || !day) return null;
+  if (year === void 0 || year.length === 0) return null;
+  if (month === void 0 || month.length === 0) return null;
+  if (day === void 0 || day.length === 0) return null;
   return `${year}-${month}-${day}`;
 }
 var validTimeZoneCache = /* @__PURE__ */ new Map();
@@ -28870,7 +29027,7 @@ function enumerateDateKeys(startDateKey, endDateKey) {
 }
 function parseDateKey(dateKey) {
   const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(dateKey);
-  if (!match) {
+  if (match === null) {
     throw new Error(`Invalid timetable date key: ${dateKey}`);
   }
   const [, year, month, day] = match;
@@ -28890,7 +29047,7 @@ function groupItemsByDate(items, accessors) {
     const dateKey = getLocalDateKey(startsAt, timeZone);
     if (dateKey == null) continue;
     const existing = grouped.get(dateKey);
-    if (existing) {
+    if (existing !== void 0) {
       existing.push(item);
     } else {
       grouped.set(dateKey, [item]);
@@ -37958,11 +38115,11 @@ function extractRouteUpdatedAt(candidate) {
 }
 function resolveRouteTargetForStage(routeIdValue, routes, stageInput) {
   const routeId = typeof routeIdValue === "string" ? routeIdValue : null;
-  if (!routeId || !routes) return null;
+  if (routeId === null || routeId.length === 0 || routes === void 0) return null;
   const routeEntry = routes[routeId];
   if (!isRouteVisibleInStage(routeEntry, stageInput)) return null;
   const href = extractRouteHref(routeEntry, stageInput);
-  if (!href) return null;
+  if (href === null) return null;
   return {
     routeId,
     href,
@@ -40033,6 +40190,7 @@ var bookingServiceSchema = z64.object({
   title: z64.string(),
   description: z64.string().nullable().optional().transform((value) => value ?? void 0),
   durationMinutes: z64.number().optional(),
+  pricing: z64.custom().optional(),
   priceAmount: z64.number().nullable().optional(),
   priceCurrency: z64.string().nullable().optional(),
   paymentTerms: blockBookingPaymentTermsSchema.optional(),
@@ -68172,6 +68330,7 @@ var CANONICAL_REFUND_CONFLICT_CODES = [
 ];
 var CANONICAL_REFUND_PLANNER_ERROR_CODES = [
   ...CANONICAL_REFUND_CONFLICT_CODES,
+  "invalid_amount",
   "amount_exceeds_remaining",
   "pass_revoke_requires_full_refund",
   "refund_failed"
@@ -68198,6 +68357,7 @@ var CUSTOMER_MEMBERSHIP_PAYMENT_REFUND_FAILED_CODES = [
 // ../api/src/bookingRefundOutcomes.ts
 var STANDARD_LINE_ITEM_REFUND_INVALID_CODES = [
   "missing_amount",
+  "invalid_amount",
   "amount_exceeds_remaining",
   "credit_refunds_disabled",
   "missing_credit_customer",
@@ -68212,6 +68372,7 @@ var EVENT_ATTENDEE_REFUND_INVALID_CODES = [
 var MANAGED_PRODUCT_REFUND_INVALID_CODES = [
   "credit_refunds_disabled",
   "not_refundable",
+  "invalid_amount",
   "amount_exceeds_remaining"
 ];
 var CUSTOMER_PASS_REFUND_INVALID_CODES = [