@useinsider/guido 3.12.0-beta.00cbb4c → 3.12.0-beta.1b68f97

package/README.md

@@ -161,11 +161,15 @@ const config: GuidoConfigInput = {
     modulesDisabled?: boolean,    // Default: false - Disable modules panel
     liquidSyntax?: boolean,       // Default: false - Enable Liquid template syntax
     autosave?: boolean,           // Default: false - Show the Auto Save toggle in the header. See wiki/AUTOSAVE.md.
+    allowlistEnabled?: boolean,   // Default: false - Pre-save domain-allowlist check (opt-in). Pair with callbacks.resolveAllowlistToast.
   },
 
   // Optional: Callbacks
   callbacks?: {
     externalValidation?: (data: SavedTemplateDetails) => Promise<boolean>,  // Return false to cancel save
+    // Supplies the block toaster when features.allowlistEnabled blocks a save on a non-allowlisted domain.
+    // The host owns role-gating, the settings deep-link, and copy; Guido renders the result. Return null/void to block silently.
+    resolveAllowlistToast?: (blockedDomains: string[]) => { message: string, actionButton?: { text: string, onClick: () => void } } | null | void,
   },
 
   // Optional: Block configuration

package/dist/@types/config/schemas.js

@@ -1,5 +1,5 @@
 import { ModuleFolderDefaults as y } from "../../enums/defaults.js";
-import { object as a, number as n, optional as e, string as t, picklist as l, pipe as p, minLength as b, custom as f, boolean as o, array as c, record as k, fallback as C, literal as i, looseObject as g, variant as R, union as h, unknown as s, lazy as T } from "../../node_modules/valibot/dist/index.js";
+import { object as a, number as n, optional as e, string as t, picklist as i, pipe as p, minLength as b, custom as S, boolean as o, array as c, record as k, fallback as C, literal as m, looseObject as g, variant as R, union as h, unknown as l, lazy as T } from "../../node_modules/valibot/dist/index.js";
 const d = {
   /** Promotional/marketing emails */
   PROMOTIONAL: 1,
@@ -30,7 +30,7 @@ const d = {
   name: t(),
   /** Fallback font family (e.g., "serif" or "sans-serif") */
   family: t()
-}), L = a({
+}), v = a({
   /** Partner/organization name (required) */
   name: p(
     t(),
@@ -38,7 +38,7 @@ const d = {
   ),
   /** Product type identifier */
   productType: e(
-    l([
+    i([
       r.EMAIL,
       r.ARCHITECT,
       r.UNSUBSCRIBE_PAGES
@@ -47,14 +47,14 @@ const d = {
   ),
   /** Message type (promotional or transactional) */
   messageType: e(
-    l([d.PROMOTIONAL, d.TRANSACTIONAL]),
+    i([d.PROMOTIONAL, d.TRANSACTIONAL]),
     d.PROMOTIONAL
   ),
   /** Display name for the current user */
   username: e(t(), "Guido User"),
   /** Fallback font settings from partner settings — used to match backend size calculation */
   fallbackFont: e(I)
-}), v = a({
+}), L = a({
   /** Display text for the dynamic content */
   text: t(),
   /** Template variable value (e.g., {{username}}) */
@@ -68,40 +68,40 @@ const d = {
       value: t()
     })
   )
-}), S = T(() => g({
+}), f = T(() => g({
   text: e(t()),
   // eslint-disable-next-line camelcase -- backend field name
   tag_text: e(t()),
   value: e(t()),
-  children: e(c(S)),
+  children: e(c(f)),
   // eslint-disable-next-line camelcase -- backend field name
-  select_items: e(c(S))
-})), P = k(
+  select_items: e(c(f))
+})), E = k(
   t(),
-  C(c(S), [])
-), D = g({
+  C(c(f), [])
+), P = g({
   /** Block ID (matches the dictionary key and the legacy HTML element id) */
   id: e(n()),
   /** Decimal places for price display (legacy data may use string or number) */
   decimalCount: e(h([t(), n()])),
   /** Pinned product IDs (empty array when filter-driven) */
-  productIds: e(c(s())),
+  productIds: e(c(l())),
   /** Whether the block requested live products at send time */
   sendProductRequestFlag: e(o()),
   /** Whether to randomize product order */
   shuffleProducts: e(o()),
   /** Filter rules driving product selection */
-  filters: e(c(s())),
+  filters: e(c(l())),
   /** Currency code (e.g. 'EUR') — sometimes absent in legacy data */
   currency: e(t()),
   /** Currency display settings (separators, alignment, decimals) */
-  currencySettings: e(s()),
+  currencySettings: e(l()),
   /** Locale (e.g. 'nl_NL') */
   language: e(t()),
   /** Recommendation strategy key (e.g. 'newArrivals') */
   strategy: e(t()),
   /** Snapshot of products as rendered by the legacy block */
-  recommendedProducts: e(c(s())),
+  recommendedProducts: e(c(l())),
   /** Number of product cards per row */
   cardsInRow: e(n()),
   /** Mobile-only padding (right) */
@@ -124,7 +124,7 @@ const d = {
   isPriceMovedToNextLine: e(o()),
   /** Legacy "Hide if same as discounted" / delete-price-for-zero-sale toggle */
   isPriceDeletedForZeroSale: e(o())
-}), E = a({
+}), D = a({
   /**
    * Legacy recommendation block configs keyed by block ID.
    * Pass this when loading a template authored with the v1
@@ -132,7 +132,7 @@ const d = {
    * strategy, currency, locale, and layout data.
    */
   recommendationConfigs: e(
-    k(t(), D),
+    k(t(), P),
     {}
   )
 }), M = a({
@@ -142,7 +142,7 @@ const d = {
   css: e(t(), ""),
   /** Preselected dynamic content items */
   preselectedDynamicContent: e(
-    c(v),
+    c(L),
     []
   ),
   /**
@@ -151,7 +151,7 @@ const d = {
    * (first) partner's leaf attributes into the label→token map that repairs
    * label-form placeholders (`{{ Phone Number }}`) in dropped saved modules.
    */
-  dynamicContentList: e(P, {}),
+  dynamicContentList: e(E, {}),
   /** Valid custom field attribute names from the partner's categorized fields */
   customFieldAttributes: e(c(t()), []),
   /** Selected unsubscribe page IDs */
@@ -159,7 +159,7 @@ const d = {
   /** Force recreate template in Stripo storage (use true when updating externally modified templates) */
   forceRecreate: e(o(), !1),
   /** Migration-only inputs (legacy block configs) */
-  migration: e(E, {})
+  migration: e(D, {})
 }), N = a({
   /** Sender display name */
   senderName: e(t(), ""),
@@ -201,8 +201,10 @@ const d = {
   /** Enable Liquid template syntax */
   liquidSyntax: e(o(), !1),
   /** Enable autosave (3-min interval + tab-hide). User toggles on/off from the header. */
-  autosave: e(o(), !1)
-}), U = l([
+  autosave: e(o(), !1),
+  /** Enable pre-save domain-allowlist validation (opt-in; host supplies the block toaster via callbacks.resolveAllowlistToast) */
+  allowlistEnabled: e(o(), !1)
+}), w = i([
   "amp-accordion",
   "amp-carousel",
   "amp-form-controls",
@@ -216,7 +218,7 @@ const d = {
   "text-block",
   "timer-block",
   "video-block"
-]), B = l([
+]), U = i([
   "dynamic-content",
   "checkbox-block",
   "radio-button-block",
@@ -224,18 +226,18 @@ const d = {
   "unsubscribe-block",
   "coupon-block",
   "items-block"
-]), w = a({
+]), B = a({
   /** Default blocks to exclude from the editor */
   excludeDefaults: e(
-    c(U),
+    c(w),
     []
   ),
   /** Custom blocks to include in the editor */
   includeCustoms: e(
-    c(B),
+    c(U),
     []
   )
-}), m = a({
+}), u = a({
   /** Unique identifier for the rule */
   id: t(),
   /** Human-readable description */
@@ -243,8 +245,8 @@ const d = {
   /** Priority for rule ordering (lower = earlier) */
   priority: n()
 }), H = a({
-  ...m.entries,
-  type: i("replace"),
+  ...u.entries,
+  type: m("replace"),
   /** String to search for */
   search: t(),
   /** Replacement string */
@@ -252,8 +254,8 @@ const d = {
   /** Replace all occurrences (default: false) */
   replaceAll: e(o())
 }), _ = a({
-  ...m.entries,
-  type: i("regex"),
+  ...u.entries,
+  type: m("regex"),
   /** Regex pattern string */
   pattern: t(),
   /** Replacement string (supports $1, $2, etc.) */
@@ -261,16 +263,16 @@ const d = {
   /** Regex flags (e.g., 'gi') */
   flags: e(t())
 }), j = a({
-  ...m.entries,
-  type: i("remove"),
+  ...u.entries,
+  type: m("remove"),
   /** Strings or patterns to remove */
   targets: c(t())
 }), q = a({
-  ...m.entries,
-  type: i("custom"),
+  ...u.entries,
+  type: m("custom"),
   /** Custom processor function */
-  processor: f(
-    (u) => typeof u == "function",
+  processor: S(
+    (s) => typeof s == "function",
     "processor must be a function"
   )
 }), G = R("type", [
@@ -289,17 +291,28 @@ const d = {
    * Return false to cancel the save operation.
    */
   externalValidation: e(
-    f(
-      (u) => typeof u == "function",
+    S(
+      (s) => typeof s == "function",
       "externalValidation must be a function"
     )
+  ),
+  /**
+   * Resolves the block toaster's content when the domain-allowlist check (features.allowlistEnabled)
+   * blocks a save. Host-supplied so role-gating, the settings deep-link, and copy stay host-side.
+   * Returning null/void blocks the save with no toaster.
+   */
+  resolveAllowlistToast: e(
+    S(
+      (s) => typeof s == "function",
+      "resolveAllowlistToast must be a function"
+    )
   )
 }), K = a({
   // Required sections
   /** Identity configuration (required) */
   identity: A,
   /** Partner configuration (required) */
-  partner: L,
+  partner: v,
   // Optional sections (with defaults)
   /** Template content and presets */
   template: e(M, {}),
@@ -310,37 +323,37 @@ const d = {
   /** Feature toggles */
   features: e(F, {}),
   /** Block configuration */
-  blocks: e(w, {}),
+  blocks: e(B, {}),
   /** Compiler configuration */
   compiler: e(V, {}),
   /** Callbacks and event handlers */
   callbacks: e(z, {})
 });
 export {
-  w as BlocksSchema,
+  B as BlocksSchema,
   z as CallbacksSchema,
   G as CompilerRuleSchema,
   V as CompilerSchema,
-  B as CustomBlockTypeSchema,
+  U as CustomBlockTypeSchema,
   q as CustomRuleSchema,
-  U as DefaultBlockTypeSchema,
-  P as DynamicContentListSchema,
-  S as DynamicContentNodeSchema,
-  v as DynamicContentSchema,
+  w as DefaultBlockTypeSchema,
+  E as DynamicContentListSchema,
+  f as DynamicContentNodeSchema,
+  L as DynamicContentSchema,
   O as EditorSchema,
   N as EmailHeaderSchema,
   I as FallbackFontSchema,
   F as FeaturesSchema,
   K as GuidoConfigSchema,
   A as IdentitySchema,
-  D as LegacyRecommendationConfigSchema,
+  P as LegacyRecommendationConfigSchema,
   d as MessageType,
-  L as PartnerSchema,
+  v as PartnerSchema,
   r as ProductType,
   _ as RegexRuleSchema,
   j as RemoveRuleSchema,
   H as ReplaceRuleSchema,
-  E as TemplateMigrationSchema,
+  D as TemplateMigrationSchema,
   M as TemplateSchema,
   x as UISchema
 };

package/dist/components/organisms/email-preview/desktop-preview/DesktopPreview.vue.js

@@ -15,7 +15,7 @@ var a = function() {
   i,
   !1,
   null,
-  "06afaecb"
+  "cf946232"
 );
 const f = n.exports;
 export {

package/dist/components/organisms/email-preview/desktop-preview/DesktopPreview.vue2.js

@@ -1,24 +1,24 @@
-import { defineComponent as u, ref as a, onMounted as p, onBeforeUnmount as l, nextTick as v } from "vue";
-import { usePreviewInteractionGuard as d } from "../../../../composables/usePreviewInteractionGuard.js";
+import { defineComponent as u, ref as a, onMounted as p, onBeforeUnmount as l, nextTick as d } from "vue";
+import { usePreviewInteractionGuard as v } from "../../../../composables/usePreviewInteractionGuard.js";
 import { useTranslations as _ } from "../../../../composables/useTranslations.js";
 import { usePreviewStore as w } from "../../../../stores/preview.js";
 import I from "./DesktopBrowserHeader.vue.js";
 const C = /* @__PURE__ */ u({
   __name: "DesktopPreview",
-  setup(k) {
-    const i = _(), { blockPreviewInteractions: t } = d(), o = a(), n = a(!1), c = w();
+  setup(P) {
+    const i = _(), { guardPreviewInteractions: t } = v(), o = a(), r = a(!1), c = w();
     let e = null;
     const f = (m) => {
       t(m.target);
-    }, r = () => {
+    }, n = () => {
       o.value && (e = new ResizeObserver(() => {
-      }), e.observe(o.value), v(() => {
-        n.value = !0;
+      }), e.observe(o.value), d(() => {
+        r.value = !0;
       }));
     }, s = () => {
       e == null || e.disconnect();
     };
-    return p(r), l(s), { __sfc: !0, trans: i, blockPreviewInteractions: t, containerRef: o, isContainerReady: n, previewStore: c, resizeObserver: e, onIframeLoad: f, initIframe: r, cleanIframe: s, DesktopBrowserHeader: I };
+    return p(n), l(s), { __sfc: !0, trans: i, guardPreviewInteractions: t, containerRef: o, isContainerReady: r, previewStore: c, resizeObserver: e, onIframeLoad: f, initIframe: n, cleanIframe: s, DesktopBrowserHeader: I };
   }
 });
 export {

package/dist/components/organisms/email-preview/mobile-preview/ContentView.vue.js

@@ -1,20 +1,20 @@
 import e from "./ContentView.vue2.js";
 /* empty css                 */
 import n from "../../../../_virtual/_plugin-vue2_normalizer.js";
-var c = function() {
+var o = function() {
   var t = this, s = t._self._c, a = t._self._setupProxy;
   return s("div", { staticClass: "w-1 h-1 b-c-4 d-f f-d-c" }, [s("div", { staticClass: "d-f j-c-s-b a-i-c p-2 h-6-s" }, [s("div", { staticClass: "d-f a-i-c cur-p", on: { click: function(l) {
     return t.$emit("back-to-inbox");
   } } }, [s(a.InIcons, { staticClass: "f-s-3 i-c-7", attrs: { name: "line-chevron-left" } }), s("span", { staticClass: "ml-2 f-s-1 f-w-400 l-h-1 t-c-7" }, [t._v(t._s(a.trans("newsletter.inbox")))])], 1), s("div", { staticClass: "d-f a-i-c" }, [s(a.InIcons, { staticClass: "i-c-52", attrs: { name: "line-chevron-down" } }), s(a.InIcons, { staticClass: "ml-1 i-c-52", attrs: { name: "line-chevron-up" } })], 1)]), s("div", { staticClass: "iframe-wrapper f-g-1 o-h" }, [s("iframe", { ref: "iframeRef", staticClass: "iframe-scaled d-b b-c-4 bor-s-n", attrs: { sandbox: "allow-same-origin allow-popups allow-forms allow-scripts allow-popups-to-escape-sandbox", srcdoc: a.previewStore.previewHtml }, on: { load: a.onLoad } })])]);
-}, o = [], i = /* @__PURE__ */ n(
+}, i = [], r = /* @__PURE__ */ n(
   e,
-  c,
   o,
+  i,
   !1,
   null,
-  "cbafc185"
+  "f255b2bb"
 );
-const d = i.exports;
+const d = r.exports;
 export {
   d as default
 };

package/dist/components/organisms/email-preview/mobile-preview/ContentView.vue2.js

@@ -1,24 +1,24 @@
-import { defineComponent as m, ref as a } from "vue";
+import { defineComponent as c, ref as a } from "vue";
 import { usePreviewInteractionGuard as f } from "../../../../composables/usePreviewInteractionGuard.js";
 import { useResponsivePreview as p } from "../../../../composables/useResponsivePreview.js";
 import { useTranslations as u } from "../../../../composables/useTranslations.js";
 import { usePreviewStore as v } from "../../../../stores/preview.js";
-import { InIcons as P } from "@useinsider/design-system-vue";
-const g = /* @__PURE__ */ m({
+import { InIcons as d } from "@useinsider/design-system-vue";
+const b = /* @__PURE__ */ c({
   __name: "ContentView",
   emits: ["back-to-inbox"],
-  setup(_) {
-    const c = u(), t = v(), r = a(), { setupResponsivePreview: n } = p(), { blockPreviewInteractions: s } = f(), i = (e) => {
+  setup(P) {
+    const m = u(), r = v(), t = a(), { setupResponsivePreview: n } = p(), { guardPreviewInteractions: s } = f(), i = (e) => {
       ["transform", "transform-origin", "height"].forEach((o) => {
         e.documentElement.style.removeProperty(o);
       });
     };
-    return { __sfc: !0, trans: c, previewStore: t, iframeRef: r, setupResponsivePreview: n, blockPreviewInteractions: s, clearAMPTransforms: i, onLoad: () => {
-      const e = r.value, o = e == null ? void 0 : e.contentDocument;
-      o && (n(e), s(e), t.isAMPResponsive && i(o));
-    }, InIcons: P };
+    return { __sfc: !0, trans: m, previewStore: r, iframeRef: t, setupResponsivePreview: n, guardPreviewInteractions: s, clearAMPTransforms: i, onLoad: () => {
+      const e = t.value, o = e == null ? void 0 : e.contentDocument;
+      o && (n(e), s(e), r.isAMPResponsive && i(o));
+    }, InIcons: d };
   }
 });
 export {
-  g as default
+  b as default
 };

package/dist/components/organisms/header/ViewOptions.vue.js

@@ -10,9 +10,9 @@ var n = function() {
   r,
   !1,
   null,
-  "10599c37"
+  "195ab6d4"
 );
-const d = a.exports;
+const c = a.exports;
 export {
-  d as default
+  c as default
 };

package/dist/components/organisms/header/version-history/ViewOptions.vue.js

@@ -10,7 +10,7 @@ var n = function() {
   r,
   !1,
   null,
-  "38eb0a73"
+  "d405ca59"
 );
 const d = a.exports;
 export {

package/dist/composables/usePreviewInteractionGuard.js

@@ -1,17 +1,42 @@
-const o = ["click", "auxclick", "submit"], c = (t) => {
-  t.preventDefault(), t.stopPropagation();
-}, a = () => ({ blockPreviewInteractions: (r) => {
+import { URLS as o, MERGE_TAGS as a } from "../enums/unsubscribe.js";
+import { UNSUBSCRIBE_LINK_SELECTOR as i } from "../extensions/Blocks/Unsubscribe/utils/constants.js";
+import { BASE_SAFE_URL_SCHEMES as u } from "../utils/urlSchemes.js";
+const E = ["click", "auxclick"], d = [
+  ...Object.values(a),
+  o.UNSUBSCRIBE_URL,
+  o.PREFERENCES_URL
+], l = (e) => {
+  if (e.matches(i))
+    return !0;
+  const r = e.getAttribute("href") ?? "";
+  return d.some((t) => r.includes(t));
+}, S = [...u, "tel:", "sms:"], f = (e) => {
+  const r = (e.getAttribute("href") ?? "").trim();
+  return r === "" || r.startsWith("#") || r.startsWith("{{") ? !1 : S.includes(e.protocol);
+}, m = (e) => {
+  var t, n;
+  const r = (n = (t = e.target) == null ? void 0 : t.closest) == null ? void 0 : n.call(t, "a");
+  if (r) {
+    if (l(r) || !f(r)) {
+      e.preventDefault(), e.stopPropagation();
+      return;
+    }
+    r.setAttribute("target", "_blank"), r.setAttribute("rel", "noopener noreferrer");
+  }
+}, R = (e) => {
+  e.preventDefault(), e.stopPropagation();
+}, s = /* @__PURE__ */ new WeakSet(), c = "guidoPreviewGuarded", g = () => ({ guardPreviewInteractions: (r) => {
   try {
-    const e = r.contentDocument;
-    if (!e)
+    const t = r.contentDocument;
+    if (!t || s.has(t))
       return;
-    o.forEach((n) => {
-      e.addEventListener(n, c, !0);
-    });
-  } catch (e) {
-    console.warn("[usePreviewInteractionGuard] Could not guard preview iframe:", e);
+    delete t.documentElement.dataset[c], E.forEach((n) => {
+      t.addEventListener(n, m, !0);
+    }), t.addEventListener("submit", R, !0), s.add(t), t.documentElement.dataset[c] = "true";
+  } catch (t) {
+    console.warn("[usePreviewInteractionGuard] Could not guard preview iframe:", t);
   }
 } });
 export {
-  a as usePreviewInteractionGuard
+  g as usePreviewInteractionGuard
 };