@riverbankcms/sdk 0.91.0 → 0.93.0

package/dist/server/rendering.mjs

@@ -57,65 +57,6 @@ function formatKeyAsLabel(key) {
 // ../blocks/src/system/manifest/fieldValidation/index.ts
 import { z as z4 } from "zod";
 
-// ../blocks/src/system/types/link.ts
-import { z } from "zod";
-var nullableString = z.union([z.string().min(1), z.null()]);
-var resolvedInternalLinkKeys = ["entityId", "entityType", "href", "title", "typeLabel"];
-var internalRouteOnlyLinkSchema = z.object({
-  kind: z.literal("internal"),
-  routeId: z.string().min(1)
-}).passthrough().superRefine((value, ctx) => {
-  const hasResolvedMetadata = resolvedInternalLinkKeys.some((key) => value[key] != null);
-  if (!hasResolvedMetadata) return;
-  ctx.addIssue({
-    code: "custom",
-    message: "Internal links with resolved metadata must include entityId, entityType, href, title, and typeLabel"
-  });
-});
-var internalResolvedLinkSchema = z.object({
-  kind: z.literal("internal"),
-  routeId: z.string().min(1),
-  entityId: z.string().min(1),
-  entityType: z.enum(["page", "content"]),
-  href: z.string().min(1),
-  title: z.string().min(1),
-  typeLabel: z.string().min(1),
-  contentTypeKey: nullableString.optional(),
-  contentTypeName: nullableString.optional(),
-  updatedAt: nullableString.optional()
-}).passthrough();
-var internalLinkSchema = z.union([
-  internalResolvedLinkSchema,
-  internalRouteOnlyLinkSchema
-]);
-var externalLinkSchema = z.object({
-  kind: z.literal("external"),
-  href: z.string().min(1)
-}).passthrough();
-var customLinkSchema = z.object({
-  kind: z.literal("url"),
-  href: z.string().min(1)
-}).passthrough();
-var pageLinkSchema = z.object({
-  kind: z.literal("page"),
-  identifier: z.string().min(1)
-}).passthrough();
-var entryLinkSchema = z.object({
-  kind: z.literal("entry"),
-  contentType: z.string().min(1),
-  identifier: z.string().min(1)
-}).passthrough();
-var linkSchema = z.union([
-  internalLinkSchema,
-  externalLinkSchema,
-  customLinkSchema,
-  pageLinkSchema,
-  entryLinkSchema
-]);
-
-// ../blocks/src/system/manifest/schema.ts
-import { z as z3 } from "zod";
-
 // ../core/src/result.ts
 function ok(value) {
   return { ok: true, value };
@@ -126,6 +67,8 @@ function err(error) {
 
 // ../core/src/branded.ts
 var unsafeAsMediaAssetId = (id) => id;
+var unsafeAsStorageBucketName = (value) => value;
+var unsafeAsStoragePath = (value) => value;
 
 // ../core/src/assert-never.ts
 function assertNever(value, message = "Unexpected variant") {
@@ -180,6 +123,7 @@ function publicEventPricingType(pricing) {
       return "free";
     case "single_paid":
     case "ticket_types":
+    case "sliding_scale":
     case "course":
       return isFreePublicEventPriceDisplay(pricing.display) ? "free" : "paid";
     case "external":
@@ -192,6 +136,7 @@ function publicEventPricingCurrency(pricing) {
     case "free_registration":
     case "single_paid":
     case "ticket_types":
+    case "sliding_scale":
       return pricing.currency;
     case "course":
       return pricing.display.display.currency;
@@ -223,6 +168,8 @@ function formatCoursePriceDisplayLabel(display, options) {
       return `Course (${formatCurrencyAmount(display.amount, display.currency, options)})`;
     case "from":
       return `Course (From ${formatCurrencyAmount(display.amount, display.currency, options)})`;
+    case "range":
+      return `Course (${formatCurrencyAmount(display.minAmount, display.currency, options)} - ${formatCurrencyAmount(display.maxAmount, display.currency, options)})`;
     default:
       return assertNever(display);
   }
@@ -514,6 +461,77 @@ function resolvePlanningDateInput(input = {}) {
   return resolvePlanningNowDate(input);
 }
 
+// ../media-core/src/fileSafety.ts
+var CONTROL_CHARACTER_PATTERN = /[\u0000-\u001f\u007f]/u;
+function containsUnsafePathSegmentCharacter(value) {
+  return value.includes("/") || value.includes("\\") || CONTROL_CHARACTER_PATTERN.test(value);
+}
+function isReservedPathSegment(value) {
+  return value === "." || value === "..";
+}
+function isUnsafePathSegment(segment) {
+  return segment.trim().length === 0 || segment !== segment.trim() || isReservedPathSegment(segment) || containsUnsafePathSegmentCharacter(segment);
+}
+
+// ../media-core/src/fileStorage.ts
+var FILE_STORAGE_BUCKETS = {
+  publicSite: unsafeAsStorageBucketName("media"),
+  privateSite: unsafeAsStorageBucketName("site-files-private"),
+  temporary: unsafeAsStorageBucketName("temp-uploads")
+};
+var PUBLIC_SITE_FILE_STORAGE_BUCKETS = [
+  FILE_STORAGE_BUCKETS.publicSite,
+  // Existing site logo and font uploads predate the unified file buckets.
+  unsafeAsStorageBucketName("site-assets"),
+  unsafeAsStorageBucketName("site-fonts")
+];
+var PRIVATE_SITE_FILE_BUCKET_MIME_TYPES = [
+  "application/pdf",
+  "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  "text/plain",
+  "application/rtf",
+  "text/rtf",
+  "image/jpeg",
+  "image/png",
+  "image/webp",
+  "image/gif",
+  "image/avif",
+  "image/heic",
+  "image/heif",
+  "image/svg+xml",
+  "text/csv",
+  "application/csv",
+  "application/vnd.ms-excel",
+  "application/zip",
+  "application/x-zip-compressed",
+  "audio/mpeg",
+  "audio/mp4",
+  "audio/wav",
+  "audio/x-wav",
+  "audio/ogg",
+  "audio/webm",
+  "audio/flac",
+  "video/mp4",
+  "video/webm",
+  "video/quicktime"
+];
+var TEMP_UPLOAD_BUCKET_MIME_TYPES = [
+  ...PRIVATE_SITE_FILE_BUCKET_MIME_TYPES,
+  "font/woff2",
+  "application/font-woff2",
+  "application/x-font-woff2",
+  "application/octet-stream"
+];
+function parseStoragePath(value) {
+  return joinStoragePathSegments(value.split("/"));
+}
+function joinStoragePathSegments(segments) {
+  if (segments.some(isUnsafePathSegment)) {
+    return err("unsafe-path-segment");
+  }
+  return ok(unsafeAsStoragePath(segments.join("/")));
+}
+
 // ../media-core/src/typeGuards.ts
 function isRecord(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
@@ -530,10 +548,10 @@ var RELATIVE_STORAGE_PATH_PREFIXES = [
   "imports/"
 ];
 function isRelativeDirectImageStoragePath(storagePath) {
-  return RELATIVE_STORAGE_PATH_PREFIXES.some((prefix) => storagePath.startsWith(prefix));
+  return RELATIVE_STORAGE_PATH_PREFIXES.some((prefix) => storagePath.startsWith(prefix)) && parseStoragePath(storagePath).ok;
 }
 function isSiteScopedDirectImageStoragePath(storagePath) {
-  return storagePath.startsWith("sites/");
+  return storagePath.startsWith("sites/") && parseStoragePath(storagePath).ok;
 }
 function encodeStoragePath(storagePath) {
   return storagePath.split("/").map((segment) => encodeURIComponent(segment)).join("/");
@@ -789,6 +807,82 @@ function mediaIdentifierOrFallback(current, fallback2) {
   return fallback2 ?? (typeof current === "string" ? current : void 0);
 }
 
+// ../media-core/src/legacyMediaValue.ts
+function legacyStringMediaTypeForField(field) {
+  if (field.type === "file") {
+    return field.fileKinds?.[0] ?? "document";
+  }
+  return field.mediaKinds?.[0] ?? "image";
+}
+function normalizeLegacyStringMediaValueForField(value, field) {
+  if (typeof value !== "string") return value;
+  const src = value.trim();
+  if (!src) return value;
+  return {
+    type: legacyStringMediaTypeForField(field),
+    src
+  };
+}
+
+// ../blocks/src/system/types/link.ts
+import { z } from "zod";
+var nullableString = z.union([z.string().min(1), z.null()]);
+var resolvedInternalLinkKeys = ["entityId", "entityType", "href", "title", "typeLabel"];
+var internalRouteOnlyLinkSchema = z.object({
+  kind: z.literal("internal"),
+  routeId: z.string().min(1)
+}).passthrough().superRefine((value, ctx) => {
+  const hasResolvedMetadata = resolvedInternalLinkKeys.some((key) => value[key] != null);
+  if (!hasResolvedMetadata) return;
+  ctx.addIssue({
+    code: "custom",
+    message: "Internal links with resolved metadata must include entityId, entityType, href, title, and typeLabel"
+  });
+});
+var internalResolvedLinkSchema = z.object({
+  kind: z.literal("internal"),
+  routeId: z.string().min(1),
+  entityId: z.string().min(1),
+  entityType: z.enum(["page", "content"]),
+  href: z.string().min(1),
+  title: z.string().min(1),
+  typeLabel: z.string().min(1),
+  contentTypeKey: nullableString.optional(),
+  contentTypeName: nullableString.optional(),
+  updatedAt: nullableString.optional()
+}).passthrough();
+var internalLinkSchema = z.union([
+  internalResolvedLinkSchema,
+  internalRouteOnlyLinkSchema
+]);
+var externalLinkSchema = z.object({
+  kind: z.literal("external"),
+  href: z.string().min(1)
+}).passthrough();
+var customLinkSchema = z.object({
+  kind: z.literal("url"),
+  href: z.string().min(1)
+}).passthrough();
+var pageLinkSchema = z.object({
+  kind: z.literal("page"),
+  identifier: z.string().min(1)
+}).passthrough();
+var entryLinkSchema = z.object({
+  kind: z.literal("entry"),
+  contentType: z.string().min(1),
+  identifier: z.string().min(1)
+}).passthrough();
+var linkSchema = z.union([
+  internalLinkSchema,
+  externalLinkSchema,
+  customLinkSchema,
+  pageLinkSchema,
+  entryLinkSchema
+]);
+
+// ../blocks/src/system/manifest/schema.ts
+import { z as z3 } from "zod";
+
 // ../blocks/src/system/node/schema.ts
 import { z as z2 } from "zod";
 var transformStepSchema = z2.object({
@@ -2549,7 +2643,10 @@ function deriveFieldValidationPlan(field, path = [field.id]) {
       return makePlan("richText", "object", field, path, required, commonConstraints(required, { kind: "richTextDoc" }));
     case "media":
     case "file":
-      return makePlan("media", "object", field, path, required, commonConstraints(required, { kind: "mediaObject" }));
+      return {
+        ...makePlan("media", "object", field, path, required, commonConstraints(required, { kind: "mediaObject" })),
+        legacyStringType: legacyStringMediaTypeForField(field)
+      };
     case "link":
       return makePlan("link", "object", field, path, required, commonConstraints(required, { kind: "linkObject" }));
     case "boolean":
@@ -2734,15 +2831,23 @@ function normalizeFieldValue(plan, value, ctx) {
       return normalizeRepeaterItems(plan, value, ctx);
     case "boolean":
     case "richText":
-    case "media":
     case "link":
     case "select":
     case "passthrough":
       return value;
+    case "media":
+      return normalizeMediaInput(plan, value);
     default:
       return assertNever2(plan);
   }
 }
+function normalizeMediaInput(plan, value) {
+  return normalizeLegacyStringMediaValueForField(value, {
+    type: plan.fieldType,
+    mediaKinds: plan.fieldType === "media" ? [plan.legacyStringType] : void 0,
+    fileKinds: plan.fieldType === "file" ? [plan.legacyStringType] : void 0
+  });
+}
 function normalizeObjectChildren(children, value, ctx) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return value;
   const normalized = {
@@ -3006,6 +3111,21 @@ function fieldPlanToZod(plan, options = {}) {
     }
   });
 }
+function fieldPresenceForPlan(plan) {
+  return plan.required ? { kind: "required" } : { kind: "optional" };
+}
+function fieldPlanToObjectPropertyZod(plan, options = {}) {
+  const schema = fieldPlanToZod(plan, options);
+  const presence = fieldPresenceForPlan(plan);
+  switch (presence.kind) {
+    case "required":
+      return schema;
+    case "optional":
+      return schema.optional();
+    default:
+      return assertNever2(presence);
+  }
+}
 function addFieldIssueToZodContext(zodCtx, validationIssue, rootPath) {
   const message = fieldIssueToMessage(validationIssue);
   const path = relativeZodIssuePath(validationIssue.path, rootPath);
@@ -3218,7 +3338,7 @@ function createManifestValidator(manifestOrFields, options = {}) {
 function deriveContentZodFromPlans(plans, options) {
   const shape = {};
   for (const plan of plans) {
-    shape[plan.fieldId] = fieldPlanToZod(plan, options);
+    shape[plan.fieldId] = fieldPlanToObjectPropertyZod(plan, options);
   }
   return z5.object(shape).catchall(z5.unknown()).passthrough();
 }
@@ -26327,9 +26447,12 @@ var coursePricingOptionSchema = z43.object({
 });
 var coursePricingSchema = z43.object({
   bookingRequirement: z43.enum(["none", "required"]),
-  pricingStrategy: z43.enum(["free", "single", "tiered"]),
+  pricingStrategy: z43.enum(["free", "single", "tiered", "sliding_scale"]),
   currency: z43.string(),
   singlePriceAmount: z43.number().nullable(),
+  slidingMinAmount: z43.number().nullable().optional(),
+  slidingMaxAmount: z43.number().nullable().optional(),
+  slidingSuggestedAmount: z43.number().nullable().optional(),
   paymentTerms: blockBookingPaymentTermsSchema,
   options: z43.array(coursePricingOptionSchema)
 });
@@ -26483,6 +26606,19 @@ var publicEventPricingSchema = z44.discriminatedUnion("kind", [
     ticketTypes: z44.array(publicEventTicketTypeSchema),
     display: publicEventTicketTypePriceDisplaySchema
   }),
+  z44.object({
+    kind: z44.literal("sliding_scale"),
+    minAmount: z44.number(),
+    maxAmount: z44.number(),
+    suggestedAmount: z44.number().nullable(),
+    currency: z44.string(),
+    display: z44.object({
+      kind: z44.literal("range"),
+      minAmount: z44.number(),
+      maxAmount: z44.number(),
+      currency: z44.string()
+    })
+  }),
   z44.object({
     kind: z44.literal("course"),
     display: z44.object({ kind: z44.literal("course"), display: publicCoursePriceDisplaySchema })
@@ -26899,7 +27035,7 @@ function isRecord6(value) {
 }
 function isPublicEventPricing(value) {
   if (!isRecord6(value) || typeof value.kind !== "string") return false;
-  return value.kind === "drop_in" || value.kind === "free_registration" || value.kind === "single_paid" || value.kind === "ticket_types" || value.kind === "course" || value.kind === "external";
+  return value.kind === "drop_in" || value.kind === "free_registration" || value.kind === "single_paid" || value.kind === "sliding_scale" || value.kind === "ticket_types" || value.kind === "course" || value.kind === "external";
 }
 function isPublicEventTicketType(value) {
   return isRecord6(value) && typeof value.id === "string";
@@ -27516,7 +27652,9 @@ function getSelectableCoursePricingOptionsForNow(course, now) {
     return left.name.localeCompare(right.name);
   });
 }
-function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {}) {
+function resolveCoursePricingState(course, selectedPricingOptionId, selectedSlidingAmountOrNowInput, nowInput = {}) {
+  const selectedSlidingAmount = typeof selectedSlidingAmountOrNowInput === "number" || selectedSlidingAmountOrNowInput === null ? selectedSlidingAmountOrNowInput : null;
+  const effectiveNowInput = typeof selectedSlidingAmountOrNowInput === "object" && selectedSlidingAmountOrNowInput !== null ? selectedSlidingAmountOrNowInput : nowInput;
   const currency = course.pricing?.currency ?? course.currency;
   if (!course.pricing) {
     const legacyAmount = course.priceCents ?? 0;
@@ -27526,6 +27664,8 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
       selectableOptions: [],
       requiresSelection: false,
       selectedOption: null,
+      slidingScale: null,
+      selectedSlidingAmount: null,
       selectedPriceAmount: legacyAmount,
       selectedRequiresPayment: legacyAmount > 0,
       hasPaidSelection: legacyAmount > 0,
@@ -27540,6 +27680,8 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
         selectableOptions: [],
         requiresSelection: false,
         selectedOption: null,
+        slidingScale: null,
+        selectedSlidingAmount: null,
         selectedPriceAmount: 0,
         selectedRequiresPayment: false,
         hasPaidSelection: false,
@@ -27553,6 +27695,8 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
         selectableOptions: [],
         requiresSelection: false,
         selectedOption: null,
+        slidingScale: null,
+        selectedSlidingAmount: null,
         selectedPriceAmount: amount,
         selectedRequiresPayment: amount > 0,
         hasPaidSelection: amount > 0,
@@ -27562,7 +27706,7 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
     case "tiered": {
       const selectableOptions = getSelectableCoursePricingOptionsForNow(
         course,
-        resolvePlanningDateInput(nowInput)
+        resolvePlanningDateInput(effectiveNowInput)
       );
       const selectedOption = (selectedPricingOptionId ? selectableOptions.find((option) => option.id === selectedPricingOptionId) : null) ?? (selectableOptions.length === 1 ? selectableOptions[0] ?? null : null);
       const lowestAmount = selectableOptions.reduce((lowest, option) => {
@@ -27578,12 +27722,51 @@ function resolveCoursePricingState(course, selectedPricingOptionId, nowInput = {
         selectableOptions,
         requiresSelection: selectableOptions.length > 1,
         selectedOption,
+        slidingScale: null,
+        selectedSlidingAmount: null,
         selectedPriceAmount: selectedOption?.priceAmount ?? null,
         selectedRequiresPayment: (selectedOption?.priceAmount ?? 0) > 0,
         hasPaidSelection: selectableOptions.some((option) => option.priceAmount > 0),
         hasFreeSelection: selectableOptions.some((option) => option.priceAmount === 0)
       };
     }
+    case "sliding_scale": {
+      const minAmount = course.pricing.slidingMinAmount ?? null;
+      const maxAmount = course.pricing.slidingMaxAmount ?? null;
+      if (minAmount === null || maxAmount === null || minAmount < 0 || maxAmount < minAmount) {
+        return {
+          currency,
+          display: { kind: "unavailable", currency },
+          selectableOptions: [],
+          requiresSelection: true,
+          selectedOption: null,
+          slidingScale: null,
+          selectedSlidingAmount: null,
+          selectedPriceAmount: null,
+          selectedRequiresPayment: false,
+          hasPaidSelection: false,
+          hasFreeSelection: false
+        };
+      }
+      const normalizedSelectedAmount = typeof selectedSlidingAmount === "number" && Number.isFinite(selectedSlidingAmount) ? selectedSlidingAmount : null;
+      return {
+        currency,
+        display: { kind: "range", minAmount, maxAmount, currency },
+        selectableOptions: [],
+        requiresSelection: normalizedSelectedAmount === null,
+        selectedOption: null,
+        slidingScale: {
+          minAmount,
+          maxAmount,
+          suggestedAmount: course.pricing.slidingSuggestedAmount ?? null
+        },
+        selectedSlidingAmount: normalizedSelectedAmount,
+        selectedPriceAmount: normalizedSelectedAmount,
+        selectedRequiresPayment: (normalizedSelectedAmount ?? 0) > 0,
+        hasPaidSelection: maxAmount > 0,
+        hasFreeSelection: minAmount === 0
+      };
+    }
   }
 }
 function formatCoursePriceDisplay(display, locale) {
@@ -40069,6 +40252,7 @@ var bookingServiceSchema = z64.object({
   title: z64.string(),
   description: z64.string().nullable().optional().transform((value) => value ?? void 0),
   durationMinutes: z64.number().optional(),
+  pricing: z64.custom().optional(),
   priceAmount: z64.number().nullable().optional(),
   priceCurrency: z64.string().nullable().optional(),
   paymentTerms: blockBookingPaymentTermsSchema.optional(),
@@ -68216,6 +68400,38 @@ var NAMED_SURFACE_IDS = SURFACE_IDS.filter(
   (surfaceId) => surfaceId !== DEFAULT_SURFACE_ID
 );
 
+// ../api/src/common/envelope.ts
+var API_ERROR_CODES = [
+  "auth:unauthenticated",
+  "auth:token_expired",
+  "auth:token_invalid",
+  "auth:forbidden",
+  "auth:mfa_required",
+  "auth:sudo_required",
+  "auth:insufficient_permissions",
+  "auth:impersonation_restricted",
+  "validation:invalid_input",
+  "validation:missing_field",
+  "validation:invalid_format",
+  "validation:payload_too_large",
+  "resource:not_found",
+  "resource:already_exists",
+  "resource:conflict",
+  "resource:gone",
+  "rate_limit:exceeded",
+  "billing:payment_required",
+  "billing:plan_limit_exceeded",
+  "billing:pass_redemption_failed",
+  "server:internal_error",
+  "server:unavailable",
+  "external:service_error",
+  "external:registrar_orphaned_contact_profile",
+  "network:connection_error",
+  "network:timeout",
+  "network:dns_error"
+];
+var API_ERROR_CODE_SET = new Set(API_ERROR_CODES);
+
 // ../api/src/customerMembershipOutcomes.ts
 var CANONICAL_REFUND_CONFLICT_CODES = [
   "already_refunded",
@@ -68225,6 +68441,7 @@ var CANONICAL_REFUND_CONFLICT_CODES = [
 ];
 var CANONICAL_REFUND_PLANNER_ERROR_CODES = [
   ...CANONICAL_REFUND_CONFLICT_CODES,
+  "invalid_amount",
   "amount_exceeds_remaining",
   "pass_revoke_requires_full_refund",
   "refund_failed"
@@ -68251,6 +68468,7 @@ var CUSTOMER_MEMBERSHIP_PAYMENT_REFUND_FAILED_CODES = [
 // ../api/src/bookingRefundOutcomes.ts
 var STANDARD_LINE_ITEM_REFUND_INVALID_CODES = [
   "missing_amount",
+  "invalid_amount",
   "amount_exceeds_remaining",
   "credit_refunds_disabled",
   "missing_credit_customer",
@@ -68265,6 +68483,7 @@ var EVENT_ATTENDEE_REFUND_INVALID_CODES = [
 var MANAGED_PRODUCT_REFUND_INVALID_CODES = [
   "credit_refunds_disabled",
   "not_refundable",
+  "invalid_amount",
   "amount_exceeds_remaining"
 ];
 var CUSTOMER_PASS_REFUND_INVALID_CODES = [