@syntrologie/adapt-overlays 2.19.0 → 2.20.0

package/dist/cta-navigation.d.ts

@@ -0,0 +1,38 @@
+/**
+ * CTA navigation helper.
+ *
+ * Shared between modal and tooltip executors so the rules for "should this
+ * button navigate, and how" live in one place.
+ */
+/**
+ * Returns true if the href is safe to pass to window.location.assign or
+ * window.open.
+ *
+ * Uses the URL parser rather than string prefix matching, because browsers
+ * strip embedded control characters (\\t, \\n, \\r, etc.) from schemes before
+ * resolving — so a naive `.trim().toLowerCase().startsWith('javascript:')`
+ * check is bypassed by inputs like `"java\\tscript:alert(1)"`. Running the
+ * input through `new URL()` first canonicalizes the scheme using the same
+ * algorithm the browser uses, then we check the resolved protocol against an
+ * allowlist (http/https/mailto/tel).
+ *
+ * This is defense-in-depth — the schema layer should already have rejected
+ * unsafe values via Zod regex + refine, but SDK consumers building configs
+ * outside the parser should still be safe at runtime.
+ */
+export declare function isSafeNavigationHref(href: string): boolean;
+export interface NavigateCtaInput {
+    actionId: string;
+    href?: string;
+    target?: '_self' | '_blank';
+}
+/**
+ * Navigate per the CTA's href/target. Returns true if a navigation was
+ * performed (caller can use this to decide whether to also destroy the
+ * overlay). Returns false for: missing href, dismiss action, or unsafe href.
+ *
+ * Callers should publish their telemetry event BEFORE calling this so a
+ * full-page navigation doesn't drop the click event in flight.
+ */
+export declare function navigateForCta(input: NavigateCtaInput): boolean;
+//# sourceMappingURL=cta-navigation.d.ts.map

package/dist/cta-navigation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cta-navigation.d.ts","sourceRoot":"","sources":["../src/cta-navigation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAU1D;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAW/D"}

package/dist/modal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"modal.d.ts","sourceRoot":"","sources":["../src/modal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAkB,WAAW,EAAE,MAAM,SAAS,CAAC;AAW3E;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,cAAc,CAAC,WAAW,CAkOpD,CAAC"}
+{"version":3,"file":"modal.d.ts","sourceRoot":"","sources":["../src/modal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAkB,WAAW,EAAE,MAAM,SAAS,CAAC;AAW3E;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,cAAc,CAAC,WAAW,CAwOpD,CAAC"}

package/dist/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EAEX,eAAe,EACf,WAAW,EACX,aAAa,EACd,MAAM,SAAS,CAAC;AAIjB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;AAGrC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAMvE;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,cAAc,CAAC,eAAe,CAsE5D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,cAAc,CAAC,WAAW,CA0GpD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,cAAc,CAAC,WAAW,CAoGpD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,cAAc,CAAC,aAAa,CAwFxD,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;EAQZ,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkBnB,CAAC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EAEX,eAAe,EACf,WAAW,EACX,aAAa,EACd,MAAM,SAAS,CAAC;AAIjB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;AAGrC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAMvE;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,cAAc,CAAC,eAAe,CAsE5D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,cAAc,CAAC,WAAW,CA0GpD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,EAAE,cAAc,CAAC,WAAW,CAoGpD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,cAAc,CAAC,aAAa,CA4FxD,CAAC;AAMF;;;GAGG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;EAQZ,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkBnB,CAAC"}

package/dist/runtime.js

@@ -436,6 +436,30 @@ var executeCelebrate = async (action, context) => {
   };
 };
 
+// src/cta-navigation.ts
+var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:"]);
+function isSafeNavigationHref(href) {
+  if (typeof href !== "string" || href.trim().length === 0) return false;
+  let parsed;
+  try {
+    parsed = new URL(href, "https://syntro.local/");
+  } catch {
+    return false;
+  }
+  return ALLOWED_PROTOCOLS.has(parsed.protocol);
+}
+function navigateForCta(input) {
+  if (input.actionId === "dismiss") return false;
+  if (!input.href || !isSafeNavigationHref(input.href)) return false;
+  const href = input.href;
+  if (input.target === "_blank") {
+    window.open(href, "_blank", "noopener,noreferrer");
+  } else {
+    window.location.assign(href);
+  }
+  return true;
+}
+
 // src/executors/tour.ts
 var ACTIVE_TOUR_KEY = "syntro_active_tour";
 var activeTours = /* @__PURE__ */ new Map();
@@ -1416,10 +1440,16 @@ var executeModal = async (action, context) => {
     const actionId = btn.getAttribute("data-syntro-action");
     if (actionId) {
       actionClicked = actionId;
+      const matchingBtn = ctaButtons?.find((b) => b.actionId === actionId);
+      const href = matchingBtn?.href;
       context.publishEvent("action.modal_cta_clicked", {
-        actionId
+        actionId,
+        ...href ? { href } : {}
       });
       handle.destroy();
+      if (matchingBtn) {
+        navigateForCta(matchingBtn);
+      }
     }
   };
   actionBtns.forEach((btn) => btn.addEventListener("click", actionHandler));
@@ -2594,8 +2624,12 @@ var executeTooltip = async (action, context) => {
           context.publishEvent("action.tooltip_cta_clicked", {
             anchorId: action.anchorId,
             actionId,
-            label: clickedBtn.label
+            label: clickedBtn.label,
+            ...clickedBtn.href ? { href: clickedBtn.href } : {}
           });
+          handle.destroy();
+          navigateForCta(clickedBtn);
+          return;
         }
       }
       handle.destroy();