@syntrologie/runtime-sdk 2.18.0 → 2.20.0

package/dist/actions/schema.d.ts

@@ -53,14 +53,20 @@ declare const CtaButtonZ: z.ZodObject<{
     label: z.ZodString;
     actionId: z.ZodString;
     primary: z.ZodOptional<z.ZodBoolean>;
+    href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
 }, "strict", z.ZodTypeAny, {
     label: string;
     actionId: string;
+    target?: "_self" | "_blank" | undefined;
     primary?: boolean | undefined;
+    href?: string | undefined;
 }, {
     label: string;
     actionId: string;
+    target?: "_self" | "_blank" | undefined;
     primary?: boolean | undefined;
+    href?: string | undefined;
 }>;
 /**
  * Tooltip content (schema-safe version).
@@ -73,21 +79,29 @@ declare const TooltipContentZ: z.ZodObject<{
         label: z.ZodString;
         actionId: z.ZodString;
         primary: z.ZodOptional<z.ZodBoolean>;
+        href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+        target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
     }, "strict", z.ZodTypeAny, {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }, {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }>, "many">>;
 }, "strict", z.ZodTypeAny, {
     body: string;
     ctaButtons?: {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }[] | undefined;
     title?: string | undefined;
 }, {
@@ -95,7 +109,9 @@ declare const TooltipContentZ: z.ZodObject<{
     ctaButtons?: {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }[] | undefined;
     title?: string | undefined;
 }>;
@@ -6425,21 +6441,29 @@ declare const TooltipZ: z.ZodObject<{
             label: z.ZodString;
             actionId: z.ZodString;
             primary: z.ZodOptional<z.ZodBoolean>;
+            href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+            target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
         }, "strict", z.ZodTypeAny, {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }, {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }>, "many">>;
     }, "strict", z.ZodTypeAny, {
         body: string;
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         title?: string | undefined;
     }, {
@@ -6447,7 +6471,9 @@ declare const TooltipZ: z.ZodObject<{
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         title?: string | undefined;
     }>;
@@ -6956,7 +6982,9 @@ declare const TooltipZ: z.ZodObject<{
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         title?: string | undefined;
     };
@@ -7059,7 +7087,9 @@ declare const TooltipZ: z.ZodObject<{
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         title?: string | undefined;
     };
@@ -7190,14 +7220,20 @@ declare const ModalZ: z.ZodObject<{
         label: z.ZodString;
         actionId: z.ZodString;
         primary: z.ZodOptional<z.ZodBoolean>;
+        href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+        target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
     }, "strict", z.ZodTypeAny, {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }, {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }>, "many">>;
     waitFor: z.ZodOptional<z.ZodString>;
     label: z.ZodOptional<z.ZodString>;
@@ -7711,7 +7747,9 @@ declare const ModalZ: z.ZodObject<{
     ctaButtons?: {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }[] | undefined;
     label?: string | undefined;
     triggerWhen?: {
@@ -7818,7 +7856,9 @@ declare const ModalZ: z.ZodObject<{
     ctaButtons?: {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }[] | undefined;
     label?: string | undefined;
     triggerWhen?: {
@@ -19839,21 +19879,29 @@ export declare const coreActionStepSchemas: ({
                 label: z.ZodString;
                 actionId: z.ZodString;
                 primary: z.ZodOptional<z.ZodBoolean>;
+                href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
             }, "strict", z.ZodTypeAny, {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }, {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }>, "many">>;
         }, "strict", z.ZodTypeAny, {
             body: string;
             ctaButtons?: {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }[] | undefined;
             title?: string | undefined;
         }, {
@@ -19861,7 +19909,9 @@ export declare const coreActionStepSchemas: ({
             ctaButtons?: {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }[] | undefined;
             title?: string | undefined;
         }>;
@@ -20370,7 +20420,9 @@ export declare const coreActionStepSchemas: ({
             ctaButtons?: {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }[] | undefined;
             title?: string | undefined;
         };
@@ -20473,7 +20525,9 @@ export declare const coreActionStepSchemas: ({
             ctaButtons?: {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }[] | undefined;
             title?: string | undefined;
         };
@@ -20606,14 +20660,20 @@ export declare const coreActionStepSchemas: ({
             label: z.ZodString;
             actionId: z.ZodString;
             primary: z.ZodOptional<z.ZodBoolean>;
+            href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+            target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
         }, "strict", z.ZodTypeAny, {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }, {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }>, "many">>;
         waitFor: z.ZodOptional<z.ZodString>;
         label: z.ZodOptional<z.ZodString>;
@@ -21127,7 +21187,9 @@ export declare const coreActionStepSchemas: ({
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         label?: string | undefined;
         triggerWhen?: {
@@ -21234,7 +21296,9 @@ export declare const coreActionStepSchemas: ({
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         label?: string | undefined;
         triggerWhen?: {

package/dist/actions/schema.js

@@ -31,7 +31,7 @@ import {
   WaitZ,
   WidgetConfigZ,
   coreActionStepSchemas
-} from "../chunk-R7R2ZKZU.js";
+} from "../chunk-FMLX4END.js";
 import "../chunk-44V2AOO4.js";
 import "../chunk-LSU6P3XW.js";
 import "../chunk-5Z66FT5C.js";

package/dist/{chunk-R7R2ZKZU.js → chunk-FMLX4END.js}

@@ -36,10 +36,32 @@ var PlacementZ = z.enum([
   "right-start",
   "right-end"
 ]);
+var SAFE_HREF_PATTERN = /^(?:[/.#?]|[hH][tT][tT][pP][sS]?:\/\/|[mM][aA][iI][lL][tT][oO]:|[tT][eE][lL]:)/;
+var HrefZ = z.string().min(1).regex(SAFE_HREF_PATTERN, {
+  message: "href must start with /, ./, ../, #, ?, http(s)://, mailto:, or tel: \u2014 javascript:, data:, and vbscript: are not allowed"
+}).refine(
+  (s) => {
+    try {
+      const parsed = new URL(s, "https://syntro.local/");
+      return ["http:", "https:", "mailto:", "tel:"].includes(parsed.protocol);
+    } catch {
+      return false;
+    }
+  },
+  { message: "href resolves to an unsupported protocol" }
+);
 var CtaButtonZ = z.object({
-  label: z.string(),
-  actionId: z.string(),
-  primary: z.boolean().optional()
+  label: z.string().describe("Visible button label."),
+  actionId: z.string().describe(
+    'Identifier emitted on action.modal_cta_clicked / action.tooltip_cta_clicked. Use "dismiss" to close the overlay without publishing an event or navigating, even if href is set.'
+  ),
+  primary: z.boolean().optional().describe("When true, renders as the primary (filled) button. Defaults to false."),
+  href: HrefZ.optional().describe(
+    'URL to navigate to when the button is clicked. Use this to drive users to a destination (product page, signup, etc.) \u2014 set href on a non-dismiss button rather than relying on actionId conventions or content:setAttr tricks. Accepts relative paths ("/product/x"), fragments ("#section"), query strings, and absolute http(s) URLs. javascript:/data:/vbscript: are rejected.'
+  ),
+  target: z.enum(["_self", "_blank"]).optional().describe(
+    'Navigation target. "_self" (default) replaces the current tab; "_blank" opens a new tab with noopener,noreferrer.'
+  )
 }).strict();
 var TooltipContentZ = z.object({
   title: z.string().optional(),
@@ -250,4 +272,4 @@ export {
   TourZ,
   coreActionStepSchemas
 };
-//# sourceMappingURL=chunk-R7R2ZKZU.js.map
+//# sourceMappingURL=chunk-FMLX4END.js.map

package/dist/chunk-FMLX4END.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/actions/schema.ts"],
+  "sourcesContent": ["/**\n * Core Action Zod Schemas\n *\n * Single source of truth for the shape of all 18 core action types.\n * These schemas are converted to JSON Schema during build and merged\n * into the unified canvas-config.schema.json.\n *\n * Design decisions:\n * - `.strict()` on most objects \u2192 `additionalProperties: false` in JSON Schema\n * - Tour/TourStep use `.passthrough()` to allow adaptive-specific extensions (e.g. `workflow`)\n * - Matches `types.ts` exactly (fixes all drift from the old manual JSON defs)\n * - Recursive ActionStep references use `z.any()` as placeholder; the generator\n *   replaces `{}` with `{ \"$ref\": \"#/$defs/actionStep\" }` post-conversion\n */\n\nimport { AuthoringFieldsZ } from '@syntrologie/sdk-contracts';\nimport { z } from 'zod';\nimport { NotificationDeepLinkZ } from '../config/schema';\nimport { TriggerWhenZ } from '../decisions/schema';\n\n// ============================================================================\n// Shared Sub-Types\n// ============================================================================\n\n/**\n * Conditional execution for actions.\n *\n * Actions use `triggerWhen` (DecisionStrategy) exclusively.\n * NOTE: `activation` (with routes/strategy) is for TILES only \u2014 it is evaluated\n * by `runtime.filterTiles()` in useShadowCanvasConfig but is NEVER checked by\n * ActionEngine. Do not add `activation` here; use `triggerWhen` with a\n * `page_url` condition instead.\n */\nconst ActionTriggerZ = {\n  triggerWhen: TriggerWhenZ,\n};\n\n/** Route-scoped anchor identifier */\nconst AnchorIdZ = z\n  .object({\n    selector: z.string(),\n    route: z.union([z.string(), z.array(z.string())]),\n  })\n  .strict();\n\n/** Highlight style configuration */\nconst HighlightStyleZ = z\n  .object({\n    color: z.string().optional(),\n    scrimOpacity: z.number().min(0).max(1).optional(),\n    paddingPx: z.number().optional(),\n    radiusPx: z.number().optional(),\n  })\n  .strict();\n\n/** Badge position relative to anchor */\nconst BadgePositionZ = z.enum(['top-left', 'top-right', 'bottom-left', 'bottom-right']);\n\n/**\n * Floating-ui Placement \u2014 all 12 values.\n * Matches `@floating-ui/dom` `Placement` type.\n */\nconst PlacementZ = z.enum([\n  'top',\n  'top-start',\n  'top-end',\n  'bottom',\n  'bottom-start',\n  'bottom-end',\n  'left',\n  'left-start',\n  'left-end',\n  'right',\n  'right-start',\n  'right-end',\n]);\n\n/**\n * Validates a CTA button href. Allows relative paths (\"/x\", \"./x\", \"../x\"),\n * fragments (\"#x\"), query strings (\"?x\"), absolute http(s) URLs, and\n * mailto:/tel: links. Rejects everything else \u2014 including javascript:, data:,\n * vbscript:, and bypass attempts that embed control characters in the scheme\n * (e.g. \"java\\\\tscript:alert(1)\" \u2014 browsers strip the tab before resolving).\n *\n * Two layers of validation:\n *\n * 1. `.regex()` \u2014 a positive-allowlist pattern. This serializes to JSON\n *    Schema's `pattern` keyword and is enforced at the server-side jsonschema\n *    validation layer (where the Zod `.refine()` doesn't reach). Uses\n *    character classes for case-insensitivity since JSON Schema regex is\n *    ECMA 262 without inline flags.\n *\n * 2. `.refine()` \u2014 runs the input through `new URL()` to canonicalize the\n *    scheme using the same algorithm browsers use, then checks the resolved\n *    protocol against an allowlist. Catches anything the regex misses.\n */\nconst SAFE_HREF_PATTERN =\n  /^(?:[/.#?]|[hH][tT][tT][pP][sS]?:\\/\\/|[mM][aA][iI][lL][tT][oO]:|[tT][eE][lL]:)/;\n\nconst HrefZ = z\n  .string()\n  .min(1)\n  .regex(SAFE_HREF_PATTERN, {\n    message:\n      'href must start with /, ./, ../, #, ?, http(s)://, mailto:, or tel: \u2014 javascript:, data:, and vbscript: are not allowed',\n  })\n  .refine(\n    (s) => {\n      try {\n        const parsed = new URL(s, 'https://syntro.local/');\n        return ['http:', 'https:', 'mailto:', 'tel:'].includes(parsed.protocol);\n      } catch {\n        return false;\n      }\n    },\n    { message: 'href resolves to an unsupported protocol' }\n  );\n\n/** CTA button configuration for tooltips/modals */\nconst CtaButtonZ = z\n  .object({\n    label: z.string().describe('Visible button label.'),\n    actionId: z\n      .string()\n      .describe(\n        'Identifier emitted on action.modal_cta_clicked / action.tooltip_cta_clicked. Use \"dismiss\" to close the overlay without publishing an event or navigating, even if href is set.'\n      ),\n    primary: z\n      .boolean()\n      .optional()\n      .describe('When true, renders as the primary (filled) button. Defaults to false.'),\n    href: HrefZ.optional().describe(\n      'URL to navigate to when the button is clicked. Use this to drive users to a destination (product page, signup, etc.) \u2014 set href on a non-dismiss button rather than relying on actionId conventions or content:setAttr tricks. Accepts relative paths (\"/product/x\"), fragments (\"#section\"), query strings, and absolute http(s) URLs. javascript:/data:/vbscript: are rejected.'\n    ),\n    target: z\n      .enum(['_self', '_blank'])\n      .optional()\n      .describe(\n        'Navigation target. \"_self\" (default) replaces the current tab; \"_blank\" opens a new tab with noopener,noreferrer.'\n      ),\n  })\n  .strict();\n\n/**\n * Tooltip content (schema-safe version).\n * Omits `cta` (legacy field with recursive ActionStep; never in JSON schema).\n */\nconst TooltipContentZ = z\n  .object({\n    title: z.string().optional(),\n    body: z.string(),\n    ctaButtons: z.array(CtaButtonZ).optional(),\n  })\n  .strict();\n\n/** Modal content configuration */\nconst ModalContentZ = z\n  .object({\n    title: z.string().optional(),\n    body: z.string(),\n  })\n  .strict();\n\n/** Position where HTML/content should be inserted */\nconst InsertPositionZ = z.enum(['before', 'after', 'prepend', 'append', 'replace']);\n\n/** Tooltip trigger mode */\nconst TooltipTriggerZ = z.enum(['immediate', 'hover', 'click']);\n\n/** Widget configuration for surface mounting */\nconst WidgetConfigZ = z\n  .object({\n    widgetId: z.string(),\n    props: z.record(z.unknown()).optional(),\n    priority: z.number().optional(),\n  })\n  .strict();\n\n/**\n * Tour step (schema-safe version).\n * Uses `z.any()` for the `action` field \u2014 the generator replaces it with a $ref.\n */\nconst TourStepForSchemaZ = z\n  .object({\n    id: z.string(),\n    action: z.any(),\n    route: z.string().optional(),\n    onAction: z.record(z.string()).optional(),\n  })\n  .passthrough();\n\n// ============================================================================\n// ScrollBehavior / ScrollLogicalPosition (DOM built-in types as Zod enums)\n// ============================================================================\n\nconst ScrollBehaviorZ = z.enum(['auto', 'smooth', 'instant']);\nconst ScrollLogicalPositionZ = z.enum(['start', 'center', 'end', 'nearest']);\n\n// ============================================================================\n// Core Action Schemas (18 total)\n// ============================================================================\n\n// --- Content Actions ---\n\nconst SetTextZ = z\n  .object({\n    kind: z.literal('content:setText'),\n    anchorId: AnchorIdZ,\n    text: z.string(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst SetAttrZ = z\n  .object({\n    kind: z.literal('content:setAttr'),\n    anchorId: AnchorIdZ,\n    attr: z.string(),\n    value: z.string(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst AddClassZ = z\n  .object({\n    kind: z.literal('content:addClass'),\n    anchorId: AnchorIdZ,\n    className: z.string(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst RemoveClassZ = z\n  .object({\n    kind: z.literal('content:removeClass'),\n    anchorId: AnchorIdZ,\n    className: z.string(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst SetStyleZ = z\n  .object({\n    kind: z.literal('content:setStyle'),\n    anchorId: AnchorIdZ,\n    styles: z.record(z.string()),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst InsertHtmlZ = z\n  .object({\n    kind: z.literal('content:insertHtml'),\n    anchorId: AnchorIdZ,\n    html: z.string(),\n    position: InsertPositionZ,\n    deepLink: NotificationDeepLinkZ.optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n// --- Overlay Actions ---\n\nconst HighlightZ = z\n  .object({\n    kind: z.literal('overlays:highlight'),\n    anchorId: AnchorIdZ,\n    style: HighlightStyleZ.optional(),\n    duration: z.number().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst PulseZ = z\n  .object({\n    kind: z.literal('overlays:pulse'),\n    anchorId: AnchorIdZ,\n    duration: z.number().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst BadgeZ = z\n  .object({\n    kind: z.literal('overlays:badge'),\n    anchorId: AnchorIdZ,\n    content: z.string(),\n    position: BadgePositionZ.optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst TooltipZ = z\n  .object({\n    kind: z.literal('overlays:tooltip'),\n    anchorId: AnchorIdZ,\n    content: TooltipContentZ,\n    trigger: TooltipTriggerZ.optional(),\n    placement: PlacementZ.optional(),\n    waitFor: z.string().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst ModalZ = z\n  .object({\n    kind: z.literal('overlays:modal'),\n    content: ModalContentZ,\n    size: z.enum(['sm', 'md', 'lg']).optional(),\n    blocking: z.boolean().optional(),\n    scrim: z\n      .object({\n        opacity: z.number().min(0).max(1).optional(),\n      })\n      .strict()\n      .optional(),\n    dismiss: z\n      .object({\n        onEsc: z.boolean().optional(),\n        closeButton: z.boolean().optional(),\n        timeoutMs: z.number().min(0).optional(),\n      })\n      .strict()\n      .optional(),\n    ctaButtons: z.array(CtaButtonZ).optional(),\n    waitFor: z.string().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n// --- Navigation Actions ---\n\nconst ScrollToZ = z\n  .object({\n    kind: z.literal('navigation:scrollTo'),\n    anchorId: AnchorIdZ,\n    behavior: ScrollBehaviorZ.optional(),\n    block: ScrollLogicalPositionZ.optional(),\n    inline: ScrollLogicalPositionZ.optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst NavigateZ = z\n  .object({\n    kind: z.literal('navigation:navigate'),\n    url: z.string(),\n    target: z.enum(['_self', '_blank']).optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n// --- Core Primitives ---\n\nconst MountWidgetZ = z\n  .object({\n    kind: z.literal('core:mountWidget'),\n    slot: z.string(),\n    widget: WidgetConfigZ,\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst WaitZ = z\n  .object({\n    kind: z.literal('core:wait'),\n    durationMs: z.number().min(0).optional(),\n    event: z.string().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n/**\n * Sequence \u2014 executes actions serially.\n * `actions` uses `z.any()` as placeholder for recursive ActionStep refs.\n */\nconst SequenceZ = z\n  .object({\n    kind: z.literal('core:sequence'),\n    actions: z.array(z.any()),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n/**\n * Parallel \u2014 executes actions concurrently.\n * `actions` uses `z.any()` as placeholder for recursive ActionStep refs.\n */\nconst ParallelZ = z\n  .object({\n    kind: z.literal('core:parallel'),\n    actions: z.array(z.any()),\n    waitFor: z.enum(['all', 'any']).optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n/**\n * Tour \u2014 orchestrate sequential steps with cross-page state.\n * `steps` contains TourStepForSchemaZ which uses z.any() for step.action.\n */\nconst TourZ = z\n  .object({\n    kind: z.literal('overlays:tour'),\n    tourId: z.string(),\n    steps: z.array(TourStepForSchemaZ).min(1),\n    startStep: z.string().optional(),\n    autoStart: z.boolean().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .passthrough();\n\n// ============================================================================\n// Export: Array for unified schema generation\n// ============================================================================\n\n/**\n * All 18 core action step schemas for unified JSON Schema generation.\n * The generator imports this array and converts each to JSON Schema,\n * then merges them into `$defs` and `actionStep.oneOf`.\n *\n * `defName` values match the existing `$defs` keys for backward compat.\n */\nexport const coreActionStepSchemas = [\n  { defName: 'setText', schema: SetTextZ },\n  { defName: 'setAttr', schema: SetAttrZ },\n  { defName: 'addClass', schema: AddClassZ },\n  { defName: 'removeClass', schema: RemoveClassZ },\n  { defName: 'setStyle', schema: SetStyleZ },\n  { defName: 'insertHtml', schema: InsertHtmlZ },\n  { defName: 'highlight', schema: HighlightZ },\n  { defName: 'pulse', schema: PulseZ },\n  { defName: 'badge', schema: BadgeZ },\n  { defName: 'tooltip', schema: TooltipZ },\n  { defName: 'modal', schema: ModalZ },\n  { defName: 'scrollTo', schema: ScrollToZ },\n  { defName: 'navigate', schema: NavigateZ },\n  { defName: 'mountWidget', schema: MountWidgetZ },\n  { defName: 'wait', schema: WaitZ },\n  { defName: 'sequence', schema: SequenceZ },\n  { defName: 'parallel', schema: ParallelZ },\n  { defName: 'tour', schema: TourZ },\n];\n\n// ============================================================================\n// Named Exports (for unit tests and direct usage)\n// ============================================================================\n\nexport {\n  AddClassZ,\n  // Sub-types\n  AnchorIdZ,\n  BadgePositionZ,\n  BadgeZ,\n  CtaButtonZ,\n  HighlightStyleZ,\n  HighlightZ,\n  InsertHtmlZ,\n  InsertPositionZ,\n  ModalContentZ,\n  ModalZ,\n  MountWidgetZ,\n  NavigateZ,\n  ParallelZ,\n  PlacementZ,\n  PulseZ,\n  RemoveClassZ,\n  ScrollBehaviorZ,\n  ScrollLogicalPositionZ,\n  ScrollToZ,\n  SequenceZ,\n  SetAttrZ,\n  SetStyleZ,\n  // Actions\n  SetTextZ,\n  TooltipContentZ,\n  TooltipTriggerZ,\n  TooltipZ,\n  TourStepForSchemaZ,\n  TourZ,\n  WaitZ,\n  WidgetConfigZ,\n};\n"],
+  "mappings": ";;;;;;;;;AAgBA,SAAS,SAAS;AAiBlB,IAAM,iBAAiB;AAAA,EACrB,aAAa;AACf;AAGA,IAAM,YAAY,EACf,OAAO;AAAA,EACN,UAAU,EAAE,OAAO;AAAA,EACnB,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC,EACA,OAAO;AAGV,IAAM,kBAAkB,EACrB,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC,EACA,OAAO;AAGV,IAAM,iBAAiB,EAAE,KAAK,CAAC,YAAY,aAAa,eAAe,cAAc,CAAC;AAMtF,IAAM,aAAa,EAAE,KAAK;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAqBD,IAAM,oBACJ;AAEF,IAAM,QAAQ,EACX,OAAO,EACP,IAAI,CAAC,EACL,MAAM,mBAAmB;AAAA,EACxB,SACE;AACJ,CAAC,EACA;AAAA,EACC,CAAC,MAAM;AACL,QAAI;AACF,YAAM,SAAS,IAAI,IAAI,GAAG,uBAAuB;AACjD,aAAO,CAAC,SAAS,UAAU,WAAW,MAAM,EAAE,SAAS,OAAO,QAAQ;AAAA,IACxE,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,EAAE,SAAS,2CAA2C;AACxD;AAGF,IAAM,aAAa,EAChB,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS,uBAAuB;AAAA,EAClD,UAAU,EACP,OAAO,EACP;AAAA,IACC;AAAA,EACF;AAAA,EACF,SAAS,EACN,QAAQ,EACR,SAAS,EACT,SAAS,uEAAuE;AAAA,EACnF,MAAM,MAAM,SAAS,EAAE;AAAA,IACrB;AAAA,EACF;AAAA,EACA,QAAQ,EACL,KAAK,CAAC,SAAS,QAAQ,CAAC,EACxB,SAAS,EACT;AAAA,IACC;AAAA,EACF;AACJ,CAAC,EACA,OAAO;AAMV,IAAM,kBAAkB,EACrB,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,MAAM,UAAU,EAAE,SAAS;AAC3C,CAAC,EACA,OAAO;AAGV,IAAM,gBAAgB,EACnB,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,OAAO;AACjB,CAAC,EACA,OAAO;AAGV,IAAM,kBAAkB,EAAE,KAAK,CAAC,UAAU,SAAS,WAAW,UAAU,SAAS,CAAC;AAGlF,IAAM,kBAAkB,EAAE,KAAK,CAAC,aAAa,SAAS,OAAO,CAAC;AAG9D,IAAM,gBAAgB,EACnB,OAAO;AAAA,EACN,UAAU,EAAE,OAAO;AAAA,EACnB,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC,EACA,OAAO;AAMV,IAAM,qBAAqB,EACxB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,QAAQ,EAAE,IAAI;AAAA,EACd,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS;AAC1C,CAAC,EACA,YAAY;AAMf,IAAM,kBAAkB,EAAE,KAAK,CAAC,QAAQ,UAAU,SAAS,CAAC;AAC5D,IAAM,yBAAyB,EAAE,KAAK,CAAC,SAAS,UAAU,OAAO,SAAS,CAAC;AAQ3E,IAAM,WAAW,EACd,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,iBAAiB;AAAA,EACjC,UAAU;AAAA,EACV,MAAM,EAAE,OAAO;AAAA,EACf,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,WAAW,EACd,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,iBAAiB;AAAA,EACjC,UAAU;AAAA,EACV,MAAM,EAAE,OAAO;AAAA,EACf,OAAO,EAAE,OAAO;AAAA,EAChB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,EAClC,UAAU;AAAA,EACV,WAAW,EAAE,OAAO;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,eAAe,EAClB,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,qBAAqB;AAAA,EACrC,UAAU;AAAA,EACV,WAAW,EAAE,OAAO;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,EAClC,UAAU;AAAA,EACV,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,cAAc,EACjB,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,oBAAoB;AAAA,EACpC,UAAU;AAAA,EACV,MAAM,EAAE,OAAO;AAAA,EACf,UAAU;AAAA,EACV,UAAU,sBAAsB,SAAS;AAAA,EACzC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAIV,IAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,oBAAoB;AAAA,EACpC,UAAU;AAAA,EACV,OAAO,gBAAgB,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,SAAS,EACZ,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,EAChC,UAAU;AAAA,EACV,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,SAAS,EACZ,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,EAChC,UAAU;AAAA,EACV,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU,eAAe,SAAS;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,WAAW,EACd,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,EAClC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS,gBAAgB,SAAS;AAAA,EAClC,WAAW,WAAW,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,SAAS,EACZ,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,EAChC,SAAS;AAAA,EACT,MAAM,EAAE,KAAK,CAAC,MAAM,MAAM,IAAI,CAAC,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,OAAO,EACJ,OAAO;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC7C,CAAC,EACA,OAAO,EACP,SAAS;AAAA,EACZ,SAAS,EACN,OAAO;AAAA,IACN,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC5B,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,IAClC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACxC,CAAC,EACA,OAAO,EACP,SAAS;AAAA,EACZ,YAAY,EAAE,MAAM,UAAU,EAAE,SAAS;AAAA,EACzC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAIV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,qBAAqB;AAAA,EACrC,UAAU;AAAA,EACV,UAAU,gBAAgB,SAAS;AAAA,EACnC,OAAO,uBAAuB,SAAS;AAAA,EACvC,QAAQ,uBAAuB,SAAS;AAAA,EACxC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,qBAAqB;AAAA,EACrC,KAAK,EAAE,OAAO;AAAA,EACd,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC7C,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAIV,IAAM,eAAe,EAClB,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,EAClC,MAAM,EAAE,OAAO;AAAA,EACf,QAAQ;AAAA,EACR,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,QAAQ,EACX,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,WAAW;AAAA,EAC3B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAMV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,eAAe;AAAA,EAC/B,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;AAAA,EACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAMV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,eAAe;AAAA,EAC/B,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;AAAA,EACxB,SAAS,EAAE,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,SAAS;AAAA,EACzC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAMV,IAAM,QAAQ,EACX,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,eAAe;AAAA,EAC/B,QAAQ,EAAE,OAAO;AAAA,EACjB,OAAO,EAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC;AAAA,EACxC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,YAAY;AAaR,IAAM,wBAAwB;AAAA,EACnC,EAAE,SAAS,WAAW,QAAQ,SAAS;AAAA,EACvC,EAAE,SAAS,WAAW,QAAQ,SAAS;AAAA,EACvC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,eAAe,QAAQ,aAAa;AAAA,EAC/C,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,cAAc,QAAQ,YAAY;AAAA,EAC7C,EAAE,SAAS,aAAa,QAAQ,WAAW;AAAA,EAC3C,EAAE,SAAS,SAAS,QAAQ,OAAO;AAAA,EACnC,EAAE,SAAS,SAAS,QAAQ,OAAO;AAAA,EACnC,EAAE,SAAS,WAAW,QAAQ,SAAS;AAAA,EACvC,EAAE,SAAS,SAAS,QAAQ,OAAO;AAAA,EACnC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,eAAe,QAAQ,aAAa;AAAA,EAC/C,EAAE,SAAS,QAAQ,QAAQ,MAAM;AAAA,EACjC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,QAAQ,QAAQ,MAAM;AACnC;",
+  "names": []
+}

package/dist/index.js

@@ -36,7 +36,7 @@ import {
   WaitZ,
   WidgetConfigZ,
   coreActionStepSchemas
-} from "./chunk-R7R2ZKZU.js";
+} from "./chunk-FMLX4END.js";
 import "./chunk-44V2AOO4.js";
 import {
   ActivationConfigZ,
@@ -967,6 +967,28 @@ var executeCelebrate = async (action, context) => {
     }
   };
 };
+var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:"]);
+function isSafeNavigationHref(href) {
+  if (typeof href !== "string" || href.trim().length === 0) return false;
+  let parsed;
+  try {
+    parsed = new URL(href, "https://syntro.local/");
+  } catch {
+    return false;
+  }
+  return ALLOWED_PROTOCOLS.has(parsed.protocol);
+}
+function navigateForCta(input) {
+  if (input.actionId === "dismiss") return false;
+  if (!input.href || !isSafeNavigationHref(input.href)) return false;
+  const href = input.href;
+  if (input.target === "_blank") {
+    window.open(href, "_blank", "noopener,noreferrer");
+  } else {
+    window.location.assign(href);
+  }
+  return true;
+}
 var ACTIVE_TOUR_KEY = "syntro_active_tour";
 var activeTours = /* @__PURE__ */ new Map();
 function getTourState(tourId) {
@@ -1942,10 +1964,16 @@ var executeModal = async (action, context) => {
     const actionId = btn.getAttribute("data-syntro-action");
     if (actionId) {
       actionClicked = actionId;
+      const matchingBtn = ctaButtons == null ? void 0 : ctaButtons.find((b2) => b2.actionId === actionId);
+      const href = matchingBtn == null ? void 0 : matchingBtn.href;
       context.publishEvent("action.modal_cta_clicked", {
-        actionId
+        actionId,
+        ...href ? { href } : {}
       });
       handle.destroy();
+      if (matchingBtn) {
+        navigateForCta(matchingBtn);
+      }
     }
   };
   actionBtns.forEach((btn) => btn.addEventListener("click", actionHandler));
@@ -3110,8 +3138,12 @@ var executeTooltip = async (action, context) => {
           context.publishEvent("action.tooltip_cta_clicked", {
             anchorId: action.anchorId,
             actionId,
-            label: clickedBtn.label
+            label: clickedBtn.label,
+            ...clickedBtn.href ? { href: clickedBtn.href } : {}
           });
+          handle.destroy();
+          navigateForCta(clickedBtn);
+          return;
         }
       }
       handle.destroy();
@@ -9590,6 +9622,10 @@ var HealthReporter = class {
     __publicField(this, "timer", null);
     __publicField(this, "pagehideHandler", null);
     __publicField(this, "runtime", null);
+    /** Cleanup function for adapters that registered side effects (e.g. the
+     *  web-vitals long-task observer). Called from `stop()` so SPA re-init
+     *  via `initHealthReporter` doesn't accumulate observers. */
+    __publicField(this, "adapterCleanup", null);
     var _a3;
     this.resource = config.resource;
     this.flushIntervalMs = (_a3 = config.flushIntervalMs) != null ? _a3 : 6e4;
@@ -9602,6 +9638,15 @@ var HealthReporter = class {
   bindRuntime(binding) {
     this.runtime = binding;
   }
+  /**
+   * Register a cleanup function to run on `stop()`. Used by adapters
+   * (e.g. webVitalsAdapter) that need to release per-bind resources
+   * like PerformanceObservers. Replaces any prior cleanup — only one
+   * adapter cleanup is tracked.
+   */
+  attachAdapterCleanup(cleanup) {
+    this.adapterCleanup = cleanup;
+  }
   increment(signal, by = 1) {
     var _a3;
     this.counters.set(signal, ((_a3 = this.counters.get(signal)) != null ? _a3 : 0) + by);
@@ -9697,6 +9742,13 @@ var HealthReporter = class {
       window.removeEventListener("pagehide", this.pagehideHandler);
       this.pagehideHandler = null;
     }
+    if (this.adapterCleanup !== null) {
+      try {
+        this.adapterCleanup();
+      } catch {
+      }
+      this.adapterCleanup = null;
+    }
   }
 };
 function percentile(sortedAsc, q2) {
@@ -9801,8 +9853,89 @@ function createOtlpEmitter(cfg) {
   };
 }
 
+// src/observability/sdkScriptUrl.ts
+function detect() {
+  var _a3;
+  if (typeof document === "undefined") return void 0;
+  const cs = document.currentScript;
+  if (cs && cs.src) return cs.src;
+  try {
+    const scripts = Array.from(document.scripts);
+    for (let i = scripts.length - 1; i >= 0; i -= 1) {
+      const src = (_a3 = scripts[i]) == null ? void 0 : _a3.src;
+      if (typeof src === "string" && (src.includes("runtime-sdk") || src.includes("smart-canvas"))) {
+        return src;
+      }
+    }
+  } catch {
+  }
+  return void 0;
+}
+var SDK_SCRIPT_URL = detect();
+function getSdkScriptUrlPrefix() {
+  if (!SDK_SCRIPT_URL) return void 0;
+  const lastSlash = SDK_SCRIPT_URL.lastIndexOf("/");
+  if (lastSlash === -1) return void 0;
+  return SDK_SCRIPT_URL.substring(0, lastSlash + 1);
+}
+
+// src/observability/webVitalsAdapter.ts
+import { onCLS, onFCP, onINP, onLCP, onTTFB } from "web-vitals";
+var VITALS_BOUND_FLAG = "__syntro_vitals_bound";
+var VITALS_CURRENT_REPORTER = "__syntro_vitals_current_reporter";
+function bindWebVitals(reporter, options) {
+  if (typeof window === "undefined") return () => {
+  };
+  const w2 = window;
+  w2[VITALS_CURRENT_REPORTER] = reporter;
+  let longTaskObserver = null;
+  const prefix = options == null ? void 0 : options.attributedScriptUrlPrefix;
+  if (prefix && "PerformanceObserver" in window) {
+    try {
+      longTaskObserver = new PerformanceObserver((list) => {
+        const current = w2[VITALS_CURRENT_REPORTER];
+        if (!current) return;
+        for (const entry of list.getEntries()) {
+          const attribution = entry.attribution;
+          if (!attribution) continue;
+          const matched = attribution.some((a) => {
+            var _a3, _b;
+            const src = (_b = (_a3 = a.containerSrc) != null ? _a3 : a.name) != null ? _b : "";
+            return src.startsWith(prefix);
+          });
+          if (matched) {
+            current.increment("longtasks_self_count");
+            current.increment("longtasks_self_blocking_ms", Math.round(entry.duration));
+          }
+        }
+      });
+      longTaskObserver.observe({ type: "longtask", buffered: true });
+    } catch {
+      longTaskObserver = null;
+    }
+  }
+  if (!w2[VITALS_BOUND_FLAG]) {
+    w2[VITALS_BOUND_FLAG] = true;
+    const recordMs = (signal) => (metric) => {
+      const current = w2[VITALS_CURRENT_REPORTER];
+      current == null ? void 0 : current.recordHistogram(signal, metric.value);
+    };
+    onLCP(recordMs("lcp_ms"));
+    onINP(recordMs("inp_ms"));
+    onFCP(recordMs("fcp_ms"));
+    onTTFB(recordMs("ttfb_ms"));
+    onCLS((metric) => {
+      const current = w2[VITALS_CURRENT_REPORTER];
+      current == null ? void 0 : current.recordHistogram("cls_score", metric.value);
+    });
+  }
+  return () => {
+    longTaskObserver == null ? void 0 : longTaskObserver.disconnect();
+  };
+}
+
 // src/version.ts
-var SDK_VERSION = "2.18.0";
+var SDK_VERSION = "2.20.0";
 
 // src/types.ts
 var SDK_SCHEMA_VERSION = "2.0";
@@ -18200,7 +18333,7 @@ function createTelemetryClient(provider, config) {
 
 // src/bootstrap-runtime.ts
 async function _initCore(options) {
-  var _a3, _b, _c, _d, _e2, _f, _g, _h, _i, _j, _k, _l, _m;
+  var _a3, _b, _c, _d, _e2, _f, _g, _h, _i, _j, _k, _l, _m, _n;
   initLogger();
   debug("Syntro Bootstrap", "====== INIT ======");
   debug("Syntro Bootstrap", "Options:", {
@@ -18267,7 +18400,7 @@ async function _initCore(options) {
   if (payload != null && payload.obd !== true && telemetryHost) {
     try {
       const otlpEndpoint = `${telemetryHost.replace(/\/$/, "")}/sdk-otel/v1/logs`;
-      initHealthReporter({
+      const reporter = initHealthReporter({
         resource: {
           serviceName: "syntro-runtime-sdk",
           serviceVersion: SDK_VERSION,
@@ -18278,14 +18411,17 @@ async function _initCore(options) {
         },
         emit: createOtlpEmitter({ endpoint: otlpEndpoint })
       });
+      const attributedScriptUrlPrefix = (_c = getSdkScriptUrlPrefix()) != null ? _c : "https://cdn.syntrologie.com/runtime-sdk/";
+      const cleanup = bindWebVitals(reporter, { attributedScriptUrlPrefix });
+      reporter.attachAdapterCleanup(cleanup);
     } catch {
     }
   }
-  const editorUrl = getEnvVar("NEXT_PUBLIC_SYNTRO_EDITOR_URL") || getEnvVar("VITE_SYNTRO_EDITOR_URL") || ((_c = options.canvas) == null ? void 0 : _c.editorUrl);
+  const editorUrl = getEnvVar("NEXT_PUBLIC_SYNTRO_EDITOR_URL") || getEnvVar("VITE_SYNTRO_EDITOR_URL") || ((_d = options.canvas) == null ? void 0 : _d.editorUrl);
   const geoHost = (payload == null ? void 0 : payload.g) || getEnvVar("NEXT_PUBLIC_SYNTRO_GEO_HOST") || getEnvVar("VITE_SYNTRO_GEO_HOST") || GEO_DEFAULT_HOST;
   const cachedSegmentAttrs = loadCachedSegmentAttributes();
   const browserMetadata = collectBrowserMetadata();
-  const appSignalsInit = (_d = options.appSignalsInit) != null ? _d : {};
+  const appSignalsInit = (_e2 = options.appSignalsInit) != null ? _e2 : {};
   const phaseOneAttrs = { ...browserMetadata, ...cachedSegmentAttrs, ...appSignalsInit };
   debug("Syntro Bootstrap", "Phase 1: Browser metadata:", browserMetadata);
   debug("Syntro Bootstrap", "Phase 1: Cached segment attributes:", cachedSegmentAttrs);
@@ -18429,7 +18565,7 @@ async function _initCore(options) {
     });
     console.log(`[Syntro Bootstrap] Telemetry client created (${provider}) with EventBus wiring`);
     if (Object.keys(appSignalsInit).length > 0) {
-      (_e2 = telemetry.track) == null ? void 0 : _e2.call(telemetry, "app_signals_init", appSignalsInit);
+      (_f = telemetry.track) == null ? void 0 : _f.call(telemetry, "app_signals_init", appSignalsInit);
       debug("Syntro Bootstrap", "Tracked app signals event:", appSignalsInit);
     }
     const telemetryForCapture = telemetry;
@@ -18487,7 +18623,7 @@ async function _initCore(options) {
     if ((platformAdapter == null ? void 0 : platformAdapter.name) === "shopify" && telemetryHost) {
       try {
         shopifyPixelBridge = new ShopifyPixelBridge({
-          distinctId: (_g = (_f = telemetry.getDistinctId) == null ? void 0 : _f.call(telemetry)) != null ? _g : "",
+          distinctId: (_h = (_g = telemetry.getDistinctId) == null ? void 0 : _g.call(telemetry)) != null ? _h : "",
           telemetryHost,
           telemetryKey: payload.t
         });
@@ -18575,7 +18711,7 @@ async function _initCore(options) {
       debug("Syntro Bootstrap", "auto-load of adaptive-mcp failed (non-fatal):", err);
     });
   }
-  const registeredApps = (_j = (_i = (_h = runtime5.apps).list) == null ? void 0 : _i.call(_h)) != null ? _j : [];
+  const registeredApps = (_k = (_j = (_i = runtime5.apps).list) == null ? void 0 : _j.call(_i)) != null ? _k : [];
   console.log(
     `[DIAG] Activation loop: ${registeredApps.length} apps in registry:`,
     registeredApps.map((a) => `${a.manifest.id}(${a.state})`).join(", ")
@@ -18606,13 +18742,13 @@ async function _initCore(options) {
   if (experiments && Object.keys(geoData).length > 0) {
     const mergedAttrs = { ...browserMetadata, ...geoData, ...appSignalsInit };
     debug("Syntro Bootstrap", "Merging geo data into GrowthBook attributes:", geoData);
-    (_k = experiments.setAttributes) == null ? void 0 : _k.call(experiments, mergedAttrs);
+    (_l = experiments.setAttributes) == null ? void 0 : _l.call(experiments, mergedAttrs);
   }
   const mcpHost = await mcpPromise;
   if (mcpHost && experiments) {
     browserMetadata.surface_type = "mcp-app";
     browserMetadata.surface_host = mcpHost.name;
-    (_l = experiments.setAttributes) == null ? void 0 : _l.call(experiments, { ...browserMetadata, ...geoData });
+    (_m = experiments.setAttributes) == null ? void 0 : _m.call(experiments, { ...browserMetadata, ...geoData });
     runtime5.context.setSurfaceType("mcp-app");
     runtime5.context.setSurfaceHost(mcpHost.name);
     debug("Syntro Bootstrap", "MCP App detected:", mcpHost.name);
@@ -18621,7 +18757,7 @@ async function _initCore(options) {
   if (options.fetcher) {
     baseFetcher = options.fetcher;
   } else if (payload == null ? void 0 : payload.f) {
-    const configFetcher = createConfigFetcher(payload.f, (_m = payload.o) != null ? _m : {});
+    const configFetcher = createConfigFetcher(payload.f, (_n = payload.o) != null ? _n : {});
     baseFetcher = async () => {
       var _a4;
       const result = await configFetcher.fetch();