@rokt/dcui-orchestrator 1.2.1-rc.47 → 1.2.1-rc.49

package/dist/libraries/dcui-components/src/components/style-mapper/combiners/escape-css-string.d.ts

@@ -1,9 +1,11 @@
 /**
  * Escapes the characters that can end or escape a double-quoted CSS string:
  * a double quote and a backslash get a backslash in front, and a CSS newline
- * (LF, CR, FF) becomes its hex escape with a space terminator. A value written
- * into url("...") then stays inside the quotes even when the validator in
- * front of it lets one of them through.
+ * (LF, CR, FF) or a NUL becomes its hex escape with a space terminator. The
+ * css writer's parser (stylis) ends a quoted string at a raw NUL; the escape
+ * `\0 ` is read by the browser as U+FFFD, the code point CSS gives a NUL. A
+ * value written into url("...") then stays inside the quotes even when the
+ * validator in front of it lets one of them through.
  *
  * A colon and a semicolon become their hex escapes too. The css writer
  * (Emotion) scans the whole style string for `label:<name>` and appends the

package/dist/libraries/dcui-components/src/utils/index.d.ts

@@ -2,6 +2,7 @@ export * from './apply-image-dimension-bounding';
 export * from './get-disabled-attributes';
 export * from './is-escape-hatch';
 export * from './is-touch-device';
+export * from './link-schemes';
 export * from './merge-styles-with-defaults';
 export * from './node-factories';
 export * from './responsive-css';

package/dist/libraries/dcui-components/src/utils/link-schemes.d.ts

@@ -0,0 +1,35 @@
+/**
+ * True when the url parses to a scheme that runs script. No base is needed: a
+ * relative href resolves to the page's own scheme, so it can never be one.
+ */
+export declare function isScriptUrl(url: string): boolean;
+/**
+ * A relative href ("#anchor", "/path") resolves against base, the page the
+ * plugin runs in. With no base only an absolute url can pass, because nothing
+ * says what the relative one would open.
+ */
+export declare function isNavigableUrl(url: string, base?: string): boolean;
+/**
+ * What the asserts throw, so a catch block can tell the guard's refusal from
+ * a failed open and report it under REFUSED_LINK_SCHEME rather than
+ * FAILED_TO_OPEN_LINK. The message names the scheme for whoever reads that
+ * report.
+ */
+export declare class RefusedLinkError extends Error {
+    constructor(message: string);
+}
+export declare function isRefusedLink(err: unknown): err is RefusedLinkError;
+export declare function assertNavigableUrl(url: string, base?: string): void;
+export declare function assertNotScriptUrl(url: string, base?: string): void;
+/**
+ * The html a rich text renders has passed the sanitiser, but an entity in an
+ * href ("javascript:", "java	script:") is decoded by the browser
+ * only after that check. This parses the html the way the browser will, into
+ * an inert template, and removes every anchor href whose decoded scheme runs
+ * script. Html with nothing to remove is returned exactly as it came.
+ *
+ * Call it on the final string, after every regex pass that rewrites tags. An
+ * older serialiser writes "<" raw inside an attribute value, so a pass that
+ * runs after it can turn an href's text into a tag with its own attributes.
+ */
+export declare function dropScriptHrefs(html: string): string;

package/dist/libraries/layout-renderer-utils/src/sagas/error/error-codes.d.ts

@@ -1,6 +1,7 @@
 export declare const INVALID_RESPONSE_OBJECT = "INVALID_RESPONSE_OBJECT";
 export declare const INVALID_MODULE_NAME = "INVALID_MODULE_NAME";
 export declare const FAILED_TO_OPEN_LINK = "FAILED_TO_OPEN_LINK";
+export declare const REFUSED_LINK_SCHEME = "REFUSED_LINK_SCHEME";
 export declare const LINK_OPEN_RESULT = "LINK_OPEN_RESULT";
 export declare const FAILED_TO_ISSUE_SIGNAL = "FAILED_TO_ISSUE_SIGNAL";
 export declare const FAILED_TO_CLOSE_PLUGIN = "FAILED_TO_CLOSE_PLUGIN";
@@ -18,3 +19,4 @@ export declare const FAILED_TO_ESTABLISH_PARTNER_VALIDATION = "FAILED_TO_ESTABLI
 export declare const PARTNER_VALIDATION_UPDATE_FAILED = "PARTNER_VALIDATION_UPDATE_FAILED";
 export declare const CART_SERVICE_RESPONSE_ERROR = "CART_SERVICE_RESPONSE_ERROR";
 export declare const UNSUPPORTED_LAYOUT_ACTION = "UNSUPPORTED_LAYOUT_ACTION";
+export declare const INVALID_GROUP_SIZE = "INVALID_GROUP_SIZE";

package/dist/libraries/layout-renderer-utils/src/sagas/utils/index.d.ts

@@ -14,6 +14,7 @@ declare const _default: {
             partner: import("../../../../../index").PartnerInteractionService;
         };
     }, injectedWindow?: Pick<Window, "top" | "open" | "RoktWebViewSDK"> & {
+        location?: Pick<Location, "href">;
         navigator?: Omit<Navigator, "userActivation"> & {
             userActivation?: UserActivation;
         };

package/dist/libraries/layout-renderer-utils/src/sagas/utils/links.d.ts

@@ -23,6 +23,7 @@ export type HandleUnavailable = {
 };
 export declare function isHandleUnavailable(value: unknown): value is HandleUnavailable;
 type InjectedWindow = Pick<Window, 'top' | 'open' | 'RoktWebViewSDK'> & {
+    location?: Pick<Location, 'href'>;
     navigator?: Omit<Navigator, 'userActivation'> & {
         userActivation?: UserActivation;
     };

package/dist/libraries/orchestrator/src/sagas/utils/distribution.d.ts

@@ -22,3 +22,9 @@ export declare function getDistributionViewableItems(distribution: Distribution
  * value the reducer already uses when a layout names no group size.
  */
 export declare function normaliseGroupSize(value: number | undefined): number;
+/**
+ * True when normaliseGroupSize uses a value other than the one the layout
+ * configured, the case the plugin saga reports as INVALID_GROUP_SIZE. A
+ * missing entry is a layout that names no group size, not a changed one.
+ */
+export declare function isGroupSizeChanged(value: number | undefined): boolean;

package/dist/libraries/orchestrator/src/sagas/utils/index.d.ts

@@ -4,5 +4,6 @@ declare const _default: {
     getDistribution(layout: import("@rokt/dcui-layout-schema").LayoutSchemaModel): distributionUtils.Distribution | undefined;
     getDistributionViewableItems(distribution: distributionUtils.Distribution | undefined): Array<number> | undefined;
     normaliseGroupSize(value: number | undefined): number;
+    isGroupSizeChanged(value: number | undefined): boolean;
 };
 export default _default;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rokt/dcui-orchestrator",
-  "version": "1.2.1-rc.47",
+  "version": "1.2.1-rc.49",
   "description": "Rokt's DCUI rendering process",
   "main": "dist/index.cjs",
   "module": "dist/index.js",