@riverbankcms/sdk 0.91.0 → 0.92.0

package/dist/server/next.mjs

@@ -6481,6 +6481,8 @@ function err(error) {
 
 // ../core/src/branded.ts
 var unsafeAsMediaAssetId = (id) => id;
+var unsafeAsStorageBucketName = (value) => value;
+var unsafeAsStoragePath = (value) => value;
 
 // ../core/src/assert-never.ts
 function assertNever(value, message = "Unexpected variant") {
@@ -6535,6 +6537,7 @@ function publicEventPricingType(pricing) {
       return "free";
     case "single_paid":
     case "ticket_types":
+    case "sliding_scale":
     case "course":
       return isFreePublicEventPriceDisplay(pricing.display) ? "free" : "paid";
     case "external":
@@ -6547,6 +6550,7 @@ function publicEventPricingCurrency(pricing) {
     case "free_registration":
     case "single_paid":
     case "ticket_types":
+    case "sliding_scale":
       return pricing.currency;
     case "course":
       return pricing.display.display.currency;
@@ -6578,6 +6582,8 @@ function formatCoursePriceDisplayLabel(display, options) {
       return `Course (${formatCurrencyAmount(display.amount, display.currency, options)})`;
     case "from":
       return `Course (From ${formatCurrencyAmount(display.amount, display.currency, options)})`;
+    case "range":
+      return `Course (${formatCurrencyAmount(display.minAmount, display.currency, options)} - ${formatCurrencyAmount(display.maxAmount, display.currency, options)})`;
     default:
       return assertNever(display);
   }
@@ -7087,6 +7093,77 @@ var linkSchema = z3.union([
 // ../blocks/src/system/manifest/schema.ts
 import { z as z5 } from "zod";
 
+// ../media-core/src/fileSafety.ts
+var CONTROL_CHARACTER_PATTERN = /[\u0000-\u001f\u007f]/u;
+function containsUnsafePathSegmentCharacter(value) {
+  return value.includes("/") || value.includes("\\") || CONTROL_CHARACTER_PATTERN.test(value);
+}
+function isReservedPathSegment(value) {
+  return value === "." || value === "..";
+}
+function isUnsafePathSegment(segment) {
+  return segment.trim().length === 0 || segment !== segment.trim() || isReservedPathSegment(segment) || containsUnsafePathSegmentCharacter(segment);
+}
+
+// ../media-core/src/fileStorage.ts
+var FILE_STORAGE_BUCKETS = {
+  publicSite: unsafeAsStorageBucketName("media"),
+  privateSite: unsafeAsStorageBucketName("site-files-private"),
+  temporary: unsafeAsStorageBucketName("temp-uploads")
+};
+var PUBLIC_SITE_FILE_STORAGE_BUCKETS = [
+  FILE_STORAGE_BUCKETS.publicSite,
+  // Existing site logo and font uploads predate the unified file buckets.
+  unsafeAsStorageBucketName("site-assets"),
+  unsafeAsStorageBucketName("site-fonts")
+];
+var PRIVATE_SITE_FILE_BUCKET_MIME_TYPES = [
+  "application/pdf",
+  "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  "text/plain",
+  "application/rtf",
+  "text/rtf",
+  "image/jpeg",
+  "image/png",
+  "image/webp",
+  "image/gif",
+  "image/avif",
+  "image/heic",
+  "image/heif",
+  "image/svg+xml",
+  "text/csv",
+  "application/csv",
+  "application/vnd.ms-excel",
+  "application/zip",
+  "application/x-zip-compressed",
+  "audio/mpeg",
+  "audio/mp4",
+  "audio/wav",
+  "audio/x-wav",
+  "audio/ogg",
+  "audio/webm",
+  "audio/flac",
+  "video/mp4",
+  "video/webm",
+  "video/quicktime"
+];
+var TEMP_UPLOAD_BUCKET_MIME_TYPES = [
+  ...PRIVATE_SITE_FILE_BUCKET_MIME_TYPES,
+  "font/woff2",
+  "application/font-woff2",
+  "application/x-font-woff2",
+  "application/octet-stream"
+];
+function parseStoragePath(value) {
+  return joinStoragePathSegments(value.split("/"));
+}
+function joinStoragePathSegments(segments) {
+  if (segments.some(isUnsafePathSegment)) {
+    return err("unsafe-path-segment");
+  }
+  return ok(unsafeAsStoragePath(segments.join("/")));
+}
+
 // ../media-core/src/typeGuards.ts
 function isRecord(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
@@ -7103,10 +7180,10 @@ var RELATIVE_STORAGE_PATH_PREFIXES = [
   "imports/"
 ];
 function isRelativeDirectImageStoragePath(storagePath) {
-  return RELATIVE_STORAGE_PATH_PREFIXES.some((prefix) => storagePath.startsWith(prefix));
+  return RELATIVE_STORAGE_PATH_PREFIXES.some((prefix) => storagePath.startsWith(prefix)) && parseStoragePath(storagePath).ok;
 }
 function isSiteScopedDirectImageStoragePath(storagePath) {
-  return storagePath.startsWith("sites/");
+  return storagePath.startsWith("sites/") && parseStoragePath(storagePath).ok;
 }
 function encodeStoragePath(storagePath) {
   return storagePath.split("/").map((segment) => encodeURIComponent(segment)).join("/");
@@ -9579,6 +9656,21 @@ function fieldPlanToZod(plan, options = {}) {
     }
   });
 }
+function fieldPresenceForPlan(plan) {
+  return plan.required ? { kind: "required" } : { kind: "optional" };
+}
+function fieldPlanToObjectPropertyZod(plan, options = {}) {
+  const schema = fieldPlanToZod(plan, options);
+  const presence = fieldPresenceForPlan(plan);
+  switch (presence.kind) {
+    case "required":
+      return schema;
+    case "optional":
+      return schema.optional();
+    default:
+      return assertNever2(presence);
+  }
+}
 function addFieldIssueToZodContext(zodCtx, validationIssue, rootPath) {
   const message = fieldIssueToMessage(validationIssue);
   const path = relativeZodIssuePath(validationIssue.path, rootPath);
@@ -9791,7 +9883,7 @@ function createManifestValidator(manifestOrFields, options = {}) {
 function deriveContentZodFromPlans(plans, options) {
   const shape = {};
   for (const plan of plans) {
-    shape[plan.fieldId] = fieldPlanToZod(plan, options);
+    shape[plan.fieldId] = fieldPlanToObjectPropertyZod(plan, options);
   }
   return z7.object(shape).catchall(z7.unknown()).passthrough();
 }
@@ -32900,9 +32992,12 @@ var coursePricingOptionSchema = z45.object({
 });
 var coursePricingSchema = z45.object({
   bookingRequirement: z45.enum(["none", "required"]),
-  pricingStrategy: z45.enum(["free", "single", "tiered"]),
+  pricingStrategy: z45.enum(["free", "single", "tiered", "sliding_scale"]),
   currency: z45.string(),
   singlePriceAmount: z45.number().nullable(),
+  slidingMinAmount: z45.number().nullable().optional(),
+  slidingMaxAmount: z45.number().nullable().optional(),
+  slidingSuggestedAmount: z45.number().nullable().optional(),
   paymentTerms: blockBookingPaymentTermsSchema,
   options: z45.array(coursePricingOptionSchema)
 });
@@ -33056,6 +33151,19 @@ var publicEventPricingSchema = z46.discriminatedUnion("kind", [
     ticketTypes: z46.array(publicEventTicketTypeSchema),
     display: publicEventTicketTypePriceDisplaySchema
   }),
+  z46.object({
+    kind: z46.literal("sliding_scale"),
+    minAmount: z46.number(),
+    maxAmount: z46.number(),
+    suggestedAmount: z46.number().nullable(),
+    currency: z46.string(),
+    display: z46.object({
+      kind: z46.literal("range"),
+      minAmount: z46.number(),
+      maxAmount: z46.number(),
+      currency: z46.string()
+    })
+  }),
   z46.object({
     kind: z46.literal("course"),
     display: z46.object({ kind: z46.literal("course"), display: publicCoursePriceDisplaySchema })
@@ -33472,7 +33580,7 @@ function isRecord6(value) {
 }
 function isPublicEventPricing(value) {
   if (!isRecord6(value) || typeof value.kind !== "string") return false;
-  return value.kind === "drop_in" || value.kind === "free_registration" || value.kind === "single_paid" || value.kind === "ticket_types" || value.kind === "course" || value.kind === "external";
+  return value.kind === "drop_in" || value.kind === "free_registration" || value.kind === "single_paid" || value.kind === "sliding_scale" || value.kind === "ticket_types" || value.kind === "course" || value.kind === "external";
 }
 function isPublicEventTicketType(value) {
   return isRecord6(value) && typeof value.id === "string";
@@ -34089,7 +34197,9 @@ function getSelectableCoursePricingOptionsForNow(course, now) {
     return left.name.localeCompare(right.name);
   });
 }
-function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {}) {
+function resolveCoursePricingState(course, selectedPricingOptionId, selectedSlidingAmountOrNowInput, nowInput = {}) {
+  const selectedSlidingAmount = typeof selectedSlidingAmountOrNowInput === "number" || selectedSlidingAmountOrNowInput === null ? selectedSlidingAmountOrNowInput : null;
+  const effectiveNowInput = typeof selectedSlidingAmountOrNowInput === "object" && selectedSlidingAmountOrNowInput !== null ? selectedSlidingAmountOrNowInput : nowInput;
   const currency = course.pricing?.currency ?? course.currency;
   if (!course.pricing) {
     const legacyAmount = course.priceCents ?? 0;
@@ -34099,6 +34209,8 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
       selectableOptions: [],
       requiresSelection: false,
       selectedOption: null,
+      slidingScale: null,
+      selectedSlidingAmount: null,
       selectedPriceAmount: legacyAmount,
       selectedRequiresPayment: legacyAmount > 0,
       hasPaidSelection: legacyAmount > 0,
@@ -34113,6 +34225,8 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
         selectableOptions: [],
         requiresSelection: false,
         selectedOption: null,
+        slidingScale: null,
+        selectedSlidingAmount: null,
         selectedPriceAmount: 0,
         selectedRequiresPayment: false,
         hasPaidSelection: false,
@@ -34126,6 +34240,8 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
         selectableOptions: [],
         requiresSelection: false,
         selectedOption: null,
+        slidingScale: null,
+        selectedSlidingAmount: null,
         selectedPriceAmount: amount,
         selectedRequiresPayment: amount > 0,
         hasPaidSelection: amount > 0,
@@ -34135,7 +34251,7 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
     case "tiered": {
       const selectableOptions = getSelectableCoursePricingOptionsForNow(
         course,
-        resolvePlanningDateInput(nowInput)
+        resolvePlanningDateInput(effectiveNowInput)
       );
       const selectedOption = (selectedPricingOptionId ? selectableOptions.find((option) => option.id === selectedPricingOptionId) : null) ?? (selectableOptions.length === 1 ? selectableOptions[0] ?? null : null);
       const lowestAmount = selectableOptions.reduce((lowest, option) => {
@@ -34151,12 +34267,51 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
         selectableOptions,
         requiresSelection: selectableOptions.length > 1,
         selectedOption,
+        slidingScale: null,
+        selectedSlidingAmount: null,
         selectedPriceAmount: selectedOption?.priceAmount ?? null,
         selectedRequiresPayment: (selectedOption?.priceAmount ?? 0) > 0,
         hasPaidSelection: selectableOptions.some((option) => option.priceAmount > 0),
         hasFreeSelection: selectableOptions.some((option) => option.priceAmount === 0)
       };
     }
+    case "sliding_scale": {
+      const minAmount = course.pricing.slidingMinAmount ?? null;
+      const maxAmount = course.pricing.slidingMaxAmount ?? null;
+      if (minAmount === null || maxAmount === null || minAmount < 0 || maxAmount < minAmount) {
+        return {
+          currency,
+          display: { kind: "unavailable", currency },
+          selectableOptions: [],
+          requiresSelection: true,
+          selectedOption: null,
+          slidingScale: null,
+          selectedSlidingAmount: null,
+          selectedPriceAmount: null,
+          selectedRequiresPayment: false,
+          hasPaidSelection: false,
+          hasFreeSelection: false
+        };
+      }
+      const normalizedSelectedAmount = typeof selectedSlidingAmount === "number" && Number.isFinite(selectedSlidingAmount) ? selectedSlidingAmount : null;
+      return {
+        currency,
+        display: { kind: "range", minAmount, maxAmount, currency },
+        selectableOptions: [],
+        requiresSelection: normalizedSelectedAmount === null,
+        selectedOption: null,
+        slidingScale: {
+          minAmount,
+          maxAmount,
+          suggestedAmount: course.pricing.slidingSuggestedAmount ?? null
+        },
+        selectedSlidingAmount: normalizedSelectedAmount,
+        selectedPriceAmount: normalizedSelectedAmount,
+        selectedRequiresPayment: (normalizedSelectedAmount ?? 0) > 0,
+        hasPaidSelection: maxAmount > 0,
+        hasFreeSelection: minAmount === 0
+      };
+    }
   }
 }
 function formatCoursePriceDisplay(display, locale) {
@@ -46636,6 +46791,7 @@ var bookingServiceSchema = z66.object({
   title: z66.string(),
   description: z66.string().nullable().optional().transform((value) => value ?? void 0),
   durationMinutes: z66.number().optional(),
+  pricing: z66.custom().optional(),
   priceAmount: z66.number().nullable().optional(),
   priceCurrency: z66.string().nullable().optional(),
   paymentTerms: blockBookingPaymentTermsSchema.optional(),
@@ -67808,6 +67964,7 @@ var CANONICAL_REFUND_CONFLICT_CODES = [
 ];
 var CANONICAL_REFUND_PLANNER_ERROR_CODES = [
   ...CANONICAL_REFUND_CONFLICT_CODES,
+  "invalid_amount",
   "amount_exceeds_remaining",
   "pass_revoke_requires_full_refund",
   "refund_failed"
@@ -67834,6 +67991,7 @@ var CUSTOMER_MEMBERSHIP_PAYMENT_REFUND_FAILED_CODES = [
 // ../api/src/bookingRefundOutcomes.ts
 var STANDARD_LINE_ITEM_REFUND_INVALID_CODES = [
   "missing_amount",
+  "invalid_amount",
   "amount_exceeds_remaining",
   "credit_refunds_disabled",
   "missing_credit_customer",
@@ -67848,6 +68006,7 @@ var EVENT_ATTENDEE_REFUND_INVALID_CODES = [
 var MANAGED_PRODUCT_REFUND_INVALID_CODES = [
   "credit_refunds_disabled",
   "not_refundable",
+  "invalid_amount",
   "amount_exceeds_remaining"
 ];
 var CUSTOMER_PASS_REFUND_INVALID_CODES = [
@@ -70879,7 +71038,7 @@ var CircuitOpenError = class extends Error {
 };
 
 // src/version.ts
-var SDK_VERSION = "0.91.0";
+var SDK_VERSION = "0.92.0";
 
 // src/next/content-load-failure.ts
 var SdkContentLoadError = RiverbankContentLoadError;

package/dist/server/page-converter.mjs

@@ -101,6 +101,7 @@ function publicEventPricingType(pricing) {
       return "free";
     case "single_paid":
     case "ticket_types":
+    case "sliding_scale":
     case "course":
       return isFreePublicEventPriceDisplay(pricing.display) ? "free" : "paid";
     case "external":
@@ -19282,9 +19283,12 @@ var coursePricingOptionSchema = z35.object({
 });
 var coursePricingSchema = z35.object({
   bookingRequirement: z35.enum(["none", "required"]),
-  pricingStrategy: z35.enum(["free", "single", "tiered"]),
+  pricingStrategy: z35.enum(["free", "single", "tiered", "sliding_scale"]),
   currency: z35.string(),
   singlePriceAmount: z35.number().nullable(),
+  slidingMinAmount: z35.number().nullable().optional(),
+  slidingMaxAmount: z35.number().nullable().optional(),
+  slidingSuggestedAmount: z35.number().nullable().optional(),
   paymentTerms: blockBookingPaymentTermsSchema,
   options: z35.array(coursePricingOptionSchema)
 });
@@ -19438,6 +19442,19 @@ var publicEventPricingSchema = z36.discriminatedUnion("kind", [
     ticketTypes: z36.array(publicEventTicketTypeSchema),
     display: publicEventTicketTypePriceDisplaySchema
   }),
+  z36.object({
+    kind: z36.literal("sliding_scale"),
+    minAmount: z36.number(),
+    maxAmount: z36.number(),
+    suggestedAmount: z36.number().nullable(),
+    currency: z36.string(),
+    display: z36.object({
+      kind: z36.literal("range"),
+      minAmount: z36.number(),
+      maxAmount: z36.number(),
+      currency: z36.string()
+    })
+  }),
   z36.object({
     kind: z36.literal("course"),
     display: z36.object({ kind: z36.literal("course"), display: publicCoursePriceDisplaySchema })
@@ -19854,7 +19871,7 @@ function isRecord3(value) {
 }
 function isPublicEventPricing(value) {
   if (!isRecord3(value) || typeof value.kind !== "string") return false;
-  return value.kind === "drop_in" || value.kind === "free_registration" || value.kind === "single_paid" || value.kind === "ticket_types" || value.kind === "course" || value.kind === "external";
+  return value.kind === "drop_in" || value.kind === "free_registration" || value.kind === "single_paid" || value.kind === "sliding_scale" || value.kind === "ticket_types" || value.kind === "course" || value.kind === "external";
 }
 function isPublicEventTicketType(value) {
   return isRecord3(value) && typeof value.id === "string";

package/dist/server/prebuild.mjs

@@ -4,7 +4,7 @@ import * as path from "path";
 import * as crypto from "crypto";
 
 // src/version.ts
-var SDK_VERSION = "0.91.0";
+var SDK_VERSION = "0.92.0";
 
 // src/constants.ts
 var PREBUILD_PAGE_SIZE = 50;