@syntrologie/runtime-sdk 2.8.0-canary.202 → 2.8.0-canary.203

package/dist/actions/schema.d.ts

@@ -53,14 +53,20 @@ declare const CtaButtonZ: z.ZodObject<{
     label: z.ZodString;
     actionId: z.ZodString;
     primary: z.ZodOptional<z.ZodBoolean>;
+    href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
 }, "strict", z.ZodTypeAny, {
     label: string;
     actionId: string;
+    target?: "_self" | "_blank" | undefined;
     primary?: boolean | undefined;
+    href?: string | undefined;
 }, {
     label: string;
     actionId: string;
+    target?: "_self" | "_blank" | undefined;
     primary?: boolean | undefined;
+    href?: string | undefined;
 }>;
 /**
  * Tooltip content (schema-safe version).
@@ -73,21 +79,29 @@ declare const TooltipContentZ: z.ZodObject<{
         label: z.ZodString;
         actionId: z.ZodString;
         primary: z.ZodOptional<z.ZodBoolean>;
+        href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+        target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
     }, "strict", z.ZodTypeAny, {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }, {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }>, "many">>;
 }, "strict", z.ZodTypeAny, {
     body: string;
     ctaButtons?: {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }[] | undefined;
     title?: string | undefined;
 }, {
@@ -95,7 +109,9 @@ declare const TooltipContentZ: z.ZodObject<{
     ctaButtons?: {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }[] | undefined;
     title?: string | undefined;
 }>;
@@ -6425,21 +6441,29 @@ declare const TooltipZ: z.ZodObject<{
             label: z.ZodString;
             actionId: z.ZodString;
             primary: z.ZodOptional<z.ZodBoolean>;
+            href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+            target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
         }, "strict", z.ZodTypeAny, {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }, {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }>, "many">>;
     }, "strict", z.ZodTypeAny, {
         body: string;
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         title?: string | undefined;
     }, {
@@ -6447,7 +6471,9 @@ declare const TooltipZ: z.ZodObject<{
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         title?: string | undefined;
     }>;
@@ -6956,7 +6982,9 @@ declare const TooltipZ: z.ZodObject<{
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         title?: string | undefined;
     };
@@ -7059,7 +7087,9 @@ declare const TooltipZ: z.ZodObject<{
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         title?: string | undefined;
     };
@@ -7190,14 +7220,20 @@ declare const ModalZ: z.ZodObject<{
         label: z.ZodString;
         actionId: z.ZodString;
         primary: z.ZodOptional<z.ZodBoolean>;
+        href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+        target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
     }, "strict", z.ZodTypeAny, {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }, {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }>, "many">>;
     waitFor: z.ZodOptional<z.ZodString>;
     label: z.ZodOptional<z.ZodString>;
@@ -7711,7 +7747,9 @@ declare const ModalZ: z.ZodObject<{
     ctaButtons?: {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }[] | undefined;
     label?: string | undefined;
     triggerWhen?: {
@@ -7818,7 +7856,9 @@ declare const ModalZ: z.ZodObject<{
     ctaButtons?: {
         label: string;
         actionId: string;
+        target?: "_self" | "_blank" | undefined;
         primary?: boolean | undefined;
+        href?: string | undefined;
     }[] | undefined;
     label?: string | undefined;
     triggerWhen?: {
@@ -19839,21 +19879,29 @@ export declare const coreActionStepSchemas: ({
                 label: z.ZodString;
                 actionId: z.ZodString;
                 primary: z.ZodOptional<z.ZodBoolean>;
+                href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+                target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
             }, "strict", z.ZodTypeAny, {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }, {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }>, "many">>;
         }, "strict", z.ZodTypeAny, {
             body: string;
             ctaButtons?: {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }[] | undefined;
             title?: string | undefined;
         }, {
@@ -19861,7 +19909,9 @@ export declare const coreActionStepSchemas: ({
             ctaButtons?: {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }[] | undefined;
             title?: string | undefined;
         }>;
@@ -20370,7 +20420,9 @@ export declare const coreActionStepSchemas: ({
             ctaButtons?: {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }[] | undefined;
             title?: string | undefined;
         };
@@ -20473,7 +20525,9 @@ export declare const coreActionStepSchemas: ({
             ctaButtons?: {
                 label: string;
                 actionId: string;
+                target?: "_self" | "_blank" | undefined;
                 primary?: boolean | undefined;
+                href?: string | undefined;
             }[] | undefined;
             title?: string | undefined;
         };
@@ -20606,14 +20660,20 @@ export declare const coreActionStepSchemas: ({
             label: z.ZodString;
             actionId: z.ZodString;
             primary: z.ZodOptional<z.ZodBoolean>;
+            href: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+            target: z.ZodOptional<z.ZodEnum<["_self", "_blank"]>>;
         }, "strict", z.ZodTypeAny, {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }, {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }>, "many">>;
         waitFor: z.ZodOptional<z.ZodString>;
         label: z.ZodOptional<z.ZodString>;
@@ -21127,7 +21187,9 @@ export declare const coreActionStepSchemas: ({
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         label?: string | undefined;
         triggerWhen?: {
@@ -21234,7 +21296,9 @@ export declare const coreActionStepSchemas: ({
         ctaButtons?: {
             label: string;
             actionId: string;
+            target?: "_self" | "_blank" | undefined;
             primary?: boolean | undefined;
+            href?: string | undefined;
         }[] | undefined;
         label?: string | undefined;
         triggerWhen?: {

package/dist/actions/schema.js

@@ -31,7 +31,7 @@ import {
   WaitZ,
   WidgetConfigZ,
   coreActionStepSchemas
-} from "../chunk-R7R2ZKZU.js";
+} from "../chunk-FMLX4END.js";
 import "../chunk-44V2AOO4.js";
 import "../chunk-LSU6P3XW.js";
 import "../chunk-5Z66FT5C.js";

package/dist/{chunk-R7R2ZKZU.js → chunk-FMLX4END.js}

@@ -36,10 +36,32 @@ var PlacementZ = z.enum([
   "right-start",
   "right-end"
 ]);
+var SAFE_HREF_PATTERN = /^(?:[/.#?]|[hH][tT][tT][pP][sS]?:\/\/|[mM][aA][iI][lL][tT][oO]:|[tT][eE][lL]:)/;
+var HrefZ = z.string().min(1).regex(SAFE_HREF_PATTERN, {
+  message: "href must start with /, ./, ../, #, ?, http(s)://, mailto:, or tel: \u2014 javascript:, data:, and vbscript: are not allowed"
+}).refine(
+  (s) => {
+    try {
+      const parsed = new URL(s, "https://syntro.local/");
+      return ["http:", "https:", "mailto:", "tel:"].includes(parsed.protocol);
+    } catch {
+      return false;
+    }
+  },
+  { message: "href resolves to an unsupported protocol" }
+);
 var CtaButtonZ = z.object({
-  label: z.string(),
-  actionId: z.string(),
-  primary: z.boolean().optional()
+  label: z.string().describe("Visible button label."),
+  actionId: z.string().describe(
+    'Identifier emitted on action.modal_cta_clicked / action.tooltip_cta_clicked. Use "dismiss" to close the overlay without publishing an event or navigating, even if href is set.'
+  ),
+  primary: z.boolean().optional().describe("When true, renders as the primary (filled) button. Defaults to false."),
+  href: HrefZ.optional().describe(
+    'URL to navigate to when the button is clicked. Use this to drive users to a destination (product page, signup, etc.) \u2014 set href on a non-dismiss button rather than relying on actionId conventions or content:setAttr tricks. Accepts relative paths ("/product/x"), fragments ("#section"), query strings, and absolute http(s) URLs. javascript:/data:/vbscript: are rejected.'
+  ),
+  target: z.enum(["_self", "_blank"]).optional().describe(
+    'Navigation target. "_self" (default) replaces the current tab; "_blank" opens a new tab with noopener,noreferrer.'
+  )
 }).strict();
 var TooltipContentZ = z.object({
   title: z.string().optional(),
@@ -250,4 +272,4 @@ export {
   TourZ,
   coreActionStepSchemas
 };
-//# sourceMappingURL=chunk-R7R2ZKZU.js.map
+//# sourceMappingURL=chunk-FMLX4END.js.map

package/dist/chunk-FMLX4END.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/actions/schema.ts"],
+  "sourcesContent": ["/**\n * Core Action Zod Schemas\n *\n * Single source of truth for the shape of all 18 core action types.\n * These schemas are converted to JSON Schema during build and merged\n * into the unified canvas-config.schema.json.\n *\n * Design decisions:\n * - `.strict()` on most objects \u2192 `additionalProperties: false` in JSON Schema\n * - Tour/TourStep use `.passthrough()` to allow adaptive-specific extensions (e.g. `workflow`)\n * - Matches `types.ts` exactly (fixes all drift from the old manual JSON defs)\n * - Recursive ActionStep references use `z.any()` as placeholder; the generator\n *   replaces `{}` with `{ \"$ref\": \"#/$defs/actionStep\" }` post-conversion\n */\n\nimport { AuthoringFieldsZ } from '@syntrologie/sdk-contracts';\nimport { z } from 'zod';\nimport { NotificationDeepLinkZ } from '../config/schema';\nimport { TriggerWhenZ } from '../decisions/schema';\n\n// ============================================================================\n// Shared Sub-Types\n// ============================================================================\n\n/**\n * Conditional execution for actions.\n *\n * Actions use `triggerWhen` (DecisionStrategy) exclusively.\n * NOTE: `activation` (with routes/strategy) is for TILES only \u2014 it is evaluated\n * by `runtime.filterTiles()` in useShadowCanvasConfig but is NEVER checked by\n * ActionEngine. Do not add `activation` here; use `triggerWhen` with a\n * `page_url` condition instead.\n */\nconst ActionTriggerZ = {\n  triggerWhen: TriggerWhenZ,\n};\n\n/** Route-scoped anchor identifier */\nconst AnchorIdZ = z\n  .object({\n    selector: z.string(),\n    route: z.union([z.string(), z.array(z.string())]),\n  })\n  .strict();\n\n/** Highlight style configuration */\nconst HighlightStyleZ = z\n  .object({\n    color: z.string().optional(),\n    scrimOpacity: z.number().min(0).max(1).optional(),\n    paddingPx: z.number().optional(),\n    radiusPx: z.number().optional(),\n  })\n  .strict();\n\n/** Badge position relative to anchor */\nconst BadgePositionZ = z.enum(['top-left', 'top-right', 'bottom-left', 'bottom-right']);\n\n/**\n * Floating-ui Placement \u2014 all 12 values.\n * Matches `@floating-ui/dom` `Placement` type.\n */\nconst PlacementZ = z.enum([\n  'top',\n  'top-start',\n  'top-end',\n  'bottom',\n  'bottom-start',\n  'bottom-end',\n  'left',\n  'left-start',\n  'left-end',\n  'right',\n  'right-start',\n  'right-end',\n]);\n\n/**\n * Validates a CTA button href. Allows relative paths (\"/x\", \"./x\", \"../x\"),\n * fragments (\"#x\"), query strings (\"?x\"), absolute http(s) URLs, and\n * mailto:/tel: links. Rejects everything else \u2014 including javascript:, data:,\n * vbscript:, and bypass attempts that embed control characters in the scheme\n * (e.g. \"java\\\\tscript:alert(1)\" \u2014 browsers strip the tab before resolving).\n *\n * Two layers of validation:\n *\n * 1. `.regex()` \u2014 a positive-allowlist pattern. This serializes to JSON\n *    Schema's `pattern` keyword and is enforced at the server-side jsonschema\n *    validation layer (where the Zod `.refine()` doesn't reach). Uses\n *    character classes for case-insensitivity since JSON Schema regex is\n *    ECMA 262 without inline flags.\n *\n * 2. `.refine()` \u2014 runs the input through `new URL()` to canonicalize the\n *    scheme using the same algorithm browsers use, then checks the resolved\n *    protocol against an allowlist. Catches anything the regex misses.\n */\nconst SAFE_HREF_PATTERN =\n  /^(?:[/.#?]|[hH][tT][tT][pP][sS]?:\\/\\/|[mM][aA][iI][lL][tT][oO]:|[tT][eE][lL]:)/;\n\nconst HrefZ = z\n  .string()\n  .min(1)\n  .regex(SAFE_HREF_PATTERN, {\n    message:\n      'href must start with /, ./, ../, #, ?, http(s)://, mailto:, or tel: \u2014 javascript:, data:, and vbscript: are not allowed',\n  })\n  .refine(\n    (s) => {\n      try {\n        const parsed = new URL(s, 'https://syntro.local/');\n        return ['http:', 'https:', 'mailto:', 'tel:'].includes(parsed.protocol);\n      } catch {\n        return false;\n      }\n    },\n    { message: 'href resolves to an unsupported protocol' }\n  );\n\n/** CTA button configuration for tooltips/modals */\nconst CtaButtonZ = z\n  .object({\n    label: z.string().describe('Visible button label.'),\n    actionId: z\n      .string()\n      .describe(\n        'Identifier emitted on action.modal_cta_clicked / action.tooltip_cta_clicked. Use \"dismiss\" to close the overlay without publishing an event or navigating, even if href is set.'\n      ),\n    primary: z\n      .boolean()\n      .optional()\n      .describe('When true, renders as the primary (filled) button. Defaults to false.'),\n    href: HrefZ.optional().describe(\n      'URL to navigate to when the button is clicked. Use this to drive users to a destination (product page, signup, etc.) \u2014 set href on a non-dismiss button rather than relying on actionId conventions or content:setAttr tricks. Accepts relative paths (\"/product/x\"), fragments (\"#section\"), query strings, and absolute http(s) URLs. javascript:/data:/vbscript: are rejected.'\n    ),\n    target: z\n      .enum(['_self', '_blank'])\n      .optional()\n      .describe(\n        'Navigation target. \"_self\" (default) replaces the current tab; \"_blank\" opens a new tab with noopener,noreferrer.'\n      ),\n  })\n  .strict();\n\n/**\n * Tooltip content (schema-safe version).\n * Omits `cta` (legacy field with recursive ActionStep; never in JSON schema).\n */\nconst TooltipContentZ = z\n  .object({\n    title: z.string().optional(),\n    body: z.string(),\n    ctaButtons: z.array(CtaButtonZ).optional(),\n  })\n  .strict();\n\n/** Modal content configuration */\nconst ModalContentZ = z\n  .object({\n    title: z.string().optional(),\n    body: z.string(),\n  })\n  .strict();\n\n/** Position where HTML/content should be inserted */\nconst InsertPositionZ = z.enum(['before', 'after', 'prepend', 'append', 'replace']);\n\n/** Tooltip trigger mode */\nconst TooltipTriggerZ = z.enum(['immediate', 'hover', 'click']);\n\n/** Widget configuration for surface mounting */\nconst WidgetConfigZ = z\n  .object({\n    widgetId: z.string(),\n    props: z.record(z.unknown()).optional(),\n    priority: z.number().optional(),\n  })\n  .strict();\n\n/**\n * Tour step (schema-safe version).\n * Uses `z.any()` for the `action` field \u2014 the generator replaces it with a $ref.\n */\nconst TourStepForSchemaZ = z\n  .object({\n    id: z.string(),\n    action: z.any(),\n    route: z.string().optional(),\n    onAction: z.record(z.string()).optional(),\n  })\n  .passthrough();\n\n// ============================================================================\n// ScrollBehavior / ScrollLogicalPosition (DOM built-in types as Zod enums)\n// ============================================================================\n\nconst ScrollBehaviorZ = z.enum(['auto', 'smooth', 'instant']);\nconst ScrollLogicalPositionZ = z.enum(['start', 'center', 'end', 'nearest']);\n\n// ============================================================================\n// Core Action Schemas (18 total)\n// ============================================================================\n\n// --- Content Actions ---\n\nconst SetTextZ = z\n  .object({\n    kind: z.literal('content:setText'),\n    anchorId: AnchorIdZ,\n    text: z.string(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst SetAttrZ = z\n  .object({\n    kind: z.literal('content:setAttr'),\n    anchorId: AnchorIdZ,\n    attr: z.string(),\n    value: z.string(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst AddClassZ = z\n  .object({\n    kind: z.literal('content:addClass'),\n    anchorId: AnchorIdZ,\n    className: z.string(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst RemoveClassZ = z\n  .object({\n    kind: z.literal('content:removeClass'),\n    anchorId: AnchorIdZ,\n    className: z.string(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst SetStyleZ = z\n  .object({\n    kind: z.literal('content:setStyle'),\n    anchorId: AnchorIdZ,\n    styles: z.record(z.string()),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst InsertHtmlZ = z\n  .object({\n    kind: z.literal('content:insertHtml'),\n    anchorId: AnchorIdZ,\n    html: z.string(),\n    position: InsertPositionZ,\n    deepLink: NotificationDeepLinkZ.optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n// --- Overlay Actions ---\n\nconst HighlightZ = z\n  .object({\n    kind: z.literal('overlays:highlight'),\n    anchorId: AnchorIdZ,\n    style: HighlightStyleZ.optional(),\n    duration: z.number().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst PulseZ = z\n  .object({\n    kind: z.literal('overlays:pulse'),\n    anchorId: AnchorIdZ,\n    duration: z.number().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst BadgeZ = z\n  .object({\n    kind: z.literal('overlays:badge'),\n    anchorId: AnchorIdZ,\n    content: z.string(),\n    position: BadgePositionZ.optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst TooltipZ = z\n  .object({\n    kind: z.literal('overlays:tooltip'),\n    anchorId: AnchorIdZ,\n    content: TooltipContentZ,\n    trigger: TooltipTriggerZ.optional(),\n    placement: PlacementZ.optional(),\n    waitFor: z.string().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst ModalZ = z\n  .object({\n    kind: z.literal('overlays:modal'),\n    content: ModalContentZ,\n    size: z.enum(['sm', 'md', 'lg']).optional(),\n    blocking: z.boolean().optional(),\n    scrim: z\n      .object({\n        opacity: z.number().min(0).max(1).optional(),\n      })\n      .strict()\n      .optional(),\n    dismiss: z\n      .object({\n        onEsc: z.boolean().optional(),\n        closeButton: z.boolean().optional(),\n        timeoutMs: z.number().min(0).optional(),\n      })\n      .strict()\n      .optional(),\n    ctaButtons: z.array(CtaButtonZ).optional(),\n    waitFor: z.string().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n// --- Navigation Actions ---\n\nconst ScrollToZ = z\n  .object({\n    kind: z.literal('navigation:scrollTo'),\n    anchorId: AnchorIdZ,\n    behavior: ScrollBehaviorZ.optional(),\n    block: ScrollLogicalPositionZ.optional(),\n    inline: ScrollLogicalPositionZ.optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst NavigateZ = z\n  .object({\n    kind: z.literal('navigation:navigate'),\n    url: z.string(),\n    target: z.enum(['_self', '_blank']).optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n// --- Core Primitives ---\n\nconst MountWidgetZ = z\n  .object({\n    kind: z.literal('core:mountWidget'),\n    slot: z.string(),\n    widget: WidgetConfigZ,\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\nconst WaitZ = z\n  .object({\n    kind: z.literal('core:wait'),\n    durationMs: z.number().min(0).optional(),\n    event: z.string().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n/**\n * Sequence \u2014 executes actions serially.\n * `actions` uses `z.any()` as placeholder for recursive ActionStep refs.\n */\nconst SequenceZ = z\n  .object({\n    kind: z.literal('core:sequence'),\n    actions: z.array(z.any()),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n/**\n * Parallel \u2014 executes actions concurrently.\n * `actions` uses `z.any()` as placeholder for recursive ActionStep refs.\n */\nconst ParallelZ = z\n  .object({\n    kind: z.literal('core:parallel'),\n    actions: z.array(z.any()),\n    waitFor: z.enum(['all', 'any']).optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .strict();\n\n/**\n * Tour \u2014 orchestrate sequential steps with cross-page state.\n * `steps` contains TourStepForSchemaZ which uses z.any() for step.action.\n */\nconst TourZ = z\n  .object({\n    kind: z.literal('overlays:tour'),\n    tourId: z.string(),\n    steps: z.array(TourStepForSchemaZ).min(1),\n    startStep: z.string().optional(),\n    autoStart: z.boolean().optional(),\n    label: z.string().optional(),\n  })\n  .extend(ActionTriggerZ)\n  .extend(AuthoringFieldsZ)\n  .passthrough();\n\n// ============================================================================\n// Export: Array for unified schema generation\n// ============================================================================\n\n/**\n * All 18 core action step schemas for unified JSON Schema generation.\n * The generator imports this array and converts each to JSON Schema,\n * then merges them into `$defs` and `actionStep.oneOf`.\n *\n * `defName` values match the existing `$defs` keys for backward compat.\n */\nexport const coreActionStepSchemas = [\n  { defName: 'setText', schema: SetTextZ },\n  { defName: 'setAttr', schema: SetAttrZ },\n  { defName: 'addClass', schema: AddClassZ },\n  { defName: 'removeClass', schema: RemoveClassZ },\n  { defName: 'setStyle', schema: SetStyleZ },\n  { defName: 'insertHtml', schema: InsertHtmlZ },\n  { defName: 'highlight', schema: HighlightZ },\n  { defName: 'pulse', schema: PulseZ },\n  { defName: 'badge', schema: BadgeZ },\n  { defName: 'tooltip', schema: TooltipZ },\n  { defName: 'modal', schema: ModalZ },\n  { defName: 'scrollTo', schema: ScrollToZ },\n  { defName: 'navigate', schema: NavigateZ },\n  { defName: 'mountWidget', schema: MountWidgetZ },\n  { defName: 'wait', schema: WaitZ },\n  { defName: 'sequence', schema: SequenceZ },\n  { defName: 'parallel', schema: ParallelZ },\n  { defName: 'tour', schema: TourZ },\n];\n\n// ============================================================================\n// Named Exports (for unit tests and direct usage)\n// ============================================================================\n\nexport {\n  AddClassZ,\n  // Sub-types\n  AnchorIdZ,\n  BadgePositionZ,\n  BadgeZ,\n  CtaButtonZ,\n  HighlightStyleZ,\n  HighlightZ,\n  InsertHtmlZ,\n  InsertPositionZ,\n  ModalContentZ,\n  ModalZ,\n  MountWidgetZ,\n  NavigateZ,\n  ParallelZ,\n  PlacementZ,\n  PulseZ,\n  RemoveClassZ,\n  ScrollBehaviorZ,\n  ScrollLogicalPositionZ,\n  ScrollToZ,\n  SequenceZ,\n  SetAttrZ,\n  SetStyleZ,\n  // Actions\n  SetTextZ,\n  TooltipContentZ,\n  TooltipTriggerZ,\n  TooltipZ,\n  TourStepForSchemaZ,\n  TourZ,\n  WaitZ,\n  WidgetConfigZ,\n};\n"],
+  "mappings": ";;;;;;;;;AAgBA,SAAS,SAAS;AAiBlB,IAAM,iBAAiB;AAAA,EACrB,aAAa;AACf;AAGA,IAAM,YAAY,EACf,OAAO;AAAA,EACN,UAAU,EAAE,OAAO;AAAA,EACnB,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC,EACA,OAAO;AAGV,IAAM,kBAAkB,EACrB,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC,EACA,OAAO;AAGV,IAAM,iBAAiB,EAAE,KAAK,CAAC,YAAY,aAAa,eAAe,cAAc,CAAC;AAMtF,IAAM,aAAa,EAAE,KAAK;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAqBD,IAAM,oBACJ;AAEF,IAAM,QAAQ,EACX,OAAO,EACP,IAAI,CAAC,EACL,MAAM,mBAAmB;AAAA,EACxB,SACE;AACJ,CAAC,EACA;AAAA,EACC,CAAC,MAAM;AACL,QAAI;AACF,YAAM,SAAS,IAAI,IAAI,GAAG,uBAAuB;AACjD,aAAO,CAAC,SAAS,UAAU,WAAW,MAAM,EAAE,SAAS,OAAO,QAAQ;AAAA,IACxE,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,EAAE,SAAS,2CAA2C;AACxD;AAGF,IAAM,aAAa,EAChB,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS,uBAAuB;AAAA,EAClD,UAAU,EACP,OAAO,EACP;AAAA,IACC;AAAA,EACF;AAAA,EACF,SAAS,EACN,QAAQ,EACR,SAAS,EACT,SAAS,uEAAuE;AAAA,EACnF,MAAM,MAAM,SAAS,EAAE;AAAA,IACrB;AAAA,EACF;AAAA,EACA,QAAQ,EACL,KAAK,CAAC,SAAS,QAAQ,CAAC,EACxB,SAAS,EACT;AAAA,IACC;AAAA,EACF;AACJ,CAAC,EACA,OAAO;AAMV,IAAM,kBAAkB,EACrB,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,OAAO;AAAA,EACf,YAAY,EAAE,MAAM,UAAU,EAAE,SAAS;AAC3C,CAAC,EACA,OAAO;AAGV,IAAM,gBAAgB,EACnB,OAAO;AAAA,EACN,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,MAAM,EAAE,OAAO;AACjB,CAAC,EACA,OAAO;AAGV,IAAM,kBAAkB,EAAE,KAAK,CAAC,UAAU,SAAS,WAAW,UAAU,SAAS,CAAC;AAGlF,IAAM,kBAAkB,EAAE,KAAK,CAAC,aAAa,SAAS,OAAO,CAAC;AAG9D,IAAM,gBAAgB,EACnB,OAAO;AAAA,EACN,UAAU,EAAE,OAAO;AAAA,EACnB,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACtC,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC,EACA,OAAO;AAMV,IAAM,qBAAqB,EACxB,OAAO;AAAA,EACN,IAAI,EAAE,OAAO;AAAA,EACb,QAAQ,EAAE,IAAI;AAAA,EACd,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,SAAS;AAC1C,CAAC,EACA,YAAY;AAMf,IAAM,kBAAkB,EAAE,KAAK,CAAC,QAAQ,UAAU,SAAS,CAAC;AAC5D,IAAM,yBAAyB,EAAE,KAAK,CAAC,SAAS,UAAU,OAAO,SAAS,CAAC;AAQ3E,IAAM,WAAW,EACd,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,iBAAiB;AAAA,EACjC,UAAU;AAAA,EACV,MAAM,EAAE,OAAO;AAAA,EACf,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,WAAW,EACd,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,iBAAiB;AAAA,EACjC,UAAU;AAAA,EACV,MAAM,EAAE,OAAO;AAAA,EACf,OAAO,EAAE,OAAO;AAAA,EAChB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,EAClC,UAAU;AAAA,EACV,WAAW,EAAE,OAAO;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,eAAe,EAClB,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,qBAAqB;AAAA,EACrC,UAAU;AAAA,EACV,WAAW,EAAE,OAAO;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,EAClC,UAAU;AAAA,EACV,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,cAAc,EACjB,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,oBAAoB;AAAA,EACpC,UAAU;AAAA,EACV,MAAM,EAAE,OAAO;AAAA,EACf,UAAU;AAAA,EACV,UAAU,sBAAsB,SAAS;AAAA,EACzC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAIV,IAAM,aAAa,EAChB,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,oBAAoB;AAAA,EACpC,UAAU;AAAA,EACV,OAAO,gBAAgB,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,SAAS,EACZ,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,EAChC,UAAU;AAAA,EACV,UAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,SAAS,EACZ,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,EAChC,UAAU;AAAA,EACV,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU,eAAe,SAAS;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,WAAW,EACd,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,EAClC,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS,gBAAgB,SAAS;AAAA,EAClC,WAAW,WAAW,SAAS;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,SAAS,EACZ,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,EAChC,SAAS;AAAA,EACT,MAAM,EAAE,KAAK,CAAC,MAAM,MAAM,IAAI,CAAC,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,OAAO,EACJ,OAAO;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC7C,CAAC,EACA,OAAO,EACP,SAAS;AAAA,EACZ,SAAS,EACN,OAAO;AAAA,IACN,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC5B,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,IAClC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACxC,CAAC,EACA,OAAO,EACP,SAAS;AAAA,EACZ,YAAY,EAAE,MAAM,UAAU,EAAE,SAAS;AAAA,EACzC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAIV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,qBAAqB;AAAA,EACrC,UAAU;AAAA,EACV,UAAU,gBAAgB,SAAS;AAAA,EACnC,OAAO,uBAAuB,SAAS;AAAA,EACvC,QAAQ,uBAAuB,SAAS;AAAA,EACxC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,qBAAqB;AAAA,EACrC,KAAK,EAAE,OAAO;AAAA,EACd,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC7C,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAIV,IAAM,eAAe,EAClB,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,kBAAkB;AAAA,EAClC,MAAM,EAAE,OAAO;AAAA,EACf,QAAQ;AAAA,EACR,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAEV,IAAM,QAAQ,EACX,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,WAAW;AAAA,EAC3B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAMV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,eAAe;AAAA,EAC/B,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;AAAA,EACxB,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAMV,IAAM,YAAY,EACf,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,eAAe;AAAA,EAC/B,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC;AAAA,EACxB,SAAS,EAAE,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,SAAS;AAAA,EACzC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,OAAO;AAMV,IAAM,QAAQ,EACX,OAAO;AAAA,EACN,MAAM,EAAE,QAAQ,eAAe;AAAA,EAC/B,QAAQ,EAAE,OAAO;AAAA,EACjB,OAAO,EAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC;AAAA,EACxC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,SAAS;AAC7B,CAAC,EACA,OAAO,cAAc,EACrB,OAAO,gBAAgB,EACvB,YAAY;AAaR,IAAM,wBAAwB;AAAA,EACnC,EAAE,SAAS,WAAW,QAAQ,SAAS;AAAA,EACvC,EAAE,SAAS,WAAW,QAAQ,SAAS;AAAA,EACvC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,eAAe,QAAQ,aAAa;AAAA,EAC/C,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,cAAc,QAAQ,YAAY;AAAA,EAC7C,EAAE,SAAS,aAAa,QAAQ,WAAW;AAAA,EAC3C,EAAE,SAAS,SAAS,QAAQ,OAAO;AAAA,EACnC,EAAE,SAAS,SAAS,QAAQ,OAAO;AAAA,EACnC,EAAE,SAAS,WAAW,QAAQ,SAAS;AAAA,EACvC,EAAE,SAAS,SAAS,QAAQ,OAAO;AAAA,EACnC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,eAAe,QAAQ,aAAa;AAAA,EAC/C,EAAE,SAAS,QAAQ,QAAQ,MAAM;AAAA,EACjC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,YAAY,QAAQ,UAAU;AAAA,EACzC,EAAE,SAAS,QAAQ,QAAQ,MAAM;AACnC;",
+  "names": []
+}

package/dist/index.js

@@ -36,7 +36,7 @@ import {
   WaitZ,
   WidgetConfigZ,
   coreActionStepSchemas
-} from "./chunk-R7R2ZKZU.js";
+} from "./chunk-FMLX4END.js";
 import "./chunk-44V2AOO4.js";
 import {
   ActivationConfigZ,
@@ -967,6 +967,28 @@ var executeCelebrate = async (action, context) => {
     }
   };
 };
+var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:", "mailto:", "tel:"]);
+function isSafeNavigationHref(href) {
+  if (typeof href !== "string" || href.trim().length === 0) return false;
+  let parsed;
+  try {
+    parsed = new URL(href, "https://syntro.local/");
+  } catch {
+    return false;
+  }
+  return ALLOWED_PROTOCOLS.has(parsed.protocol);
+}
+function navigateForCta(input) {
+  if (input.actionId === "dismiss") return false;
+  if (!input.href || !isSafeNavigationHref(input.href)) return false;
+  const href = input.href;
+  if (input.target === "_blank") {
+    window.open(href, "_blank", "noopener,noreferrer");
+  } else {
+    window.location.assign(href);
+  }
+  return true;
+}
 var ACTIVE_TOUR_KEY = "syntro_active_tour";
 var activeTours = /* @__PURE__ */ new Map();
 function getTourState(tourId) {
@@ -1942,10 +1964,16 @@ var executeModal = async (action, context) => {
     const actionId = btn.getAttribute("data-syntro-action");
     if (actionId) {
       actionClicked = actionId;
+      const matchingBtn = ctaButtons == null ? void 0 : ctaButtons.find((b2) => b2.actionId === actionId);
+      const href = matchingBtn == null ? void 0 : matchingBtn.href;
       context.publishEvent("action.modal_cta_clicked", {
-        actionId
+        actionId,
+        ...href ? { href } : {}
       });
       handle.destroy();
+      if (matchingBtn) {
+        navigateForCta(matchingBtn);
+      }
     }
   };
   actionBtns.forEach((btn) => btn.addEventListener("click", actionHandler));
@@ -3110,8 +3138,12 @@ var executeTooltip = async (action, context) => {
           context.publishEvent("action.tooltip_cta_clicked", {
             anchorId: action.anchorId,
             actionId,
-            label: clickedBtn.label
+            label: clickedBtn.label,
+            ...clickedBtn.href ? { href: clickedBtn.href } : {}
           });
+          handle.destroy();
+          navigateForCta(clickedBtn);
+          return;
         }
       }
       handle.destroy();
@@ -9903,7 +9935,7 @@ function bindWebVitals(reporter, options) {
 }
 
 // src/version.ts
-var SDK_VERSION = "2.8.0-canary.202";
+var SDK_VERSION = "2.8.0-canary.203";
 
 // src/types.ts
 var SDK_SCHEMA_VERSION = "2.0";