@useinsider/guido 3.12.0-beta.4e0547f → 3.12.0-beta.66af948

package/dist/composables/useStripo.js

@@ -1,44 +1,31 @@
-import { useActionsApi as L } from "./useActionsApi.js";
+import { useActionsApi as x } from "./useActionsApi.js";
 import { useBlocksConfig as O } from "./useBlocksConfig.js";
 import { useConfig as q } from "./useConfig.js";
 import { useCustomInterfaceAppearance as H } from "./useCustomInterfaceAppearance.js";
-import { useFullStoryBridge as N } from "./useFullStoryBridge.js";
-import { useModuleDynamicContentRepair as j } from "./useModuleDynamicContentRepair.js";
+import { useFullStoryBridge as L } from "./useFullStoryBridge.js";
+import { useModuleDynamicContentRepair as N } from "./useModuleDynamicContentRepair.js";
 import { useStripoEventHandler as z } from "./useStripoEventHandler.js";
 import { useStripoNotifications as $ } from "./useStripoNotifications.js";
 import { useToaster as G } from "./useToaster.js";
 import { localePatch as J } from "../config/i18n/index.js";
-import { en as w } from "../config/i18n/en/index.js";
+import { en as E } from "../config/i18n/en/index.js";
 import { ToasterTypeOptions as X } from "../enums/toaster.js";
-import { useStripoApi as K } from "../services/stripoApi.js";
-import Q from "../static/styles/customEditorStyle.css.js";
-import { useEditorStore as b } from "../stores/editor.js";
-import { buildMergeTagEntries as W, flattenDynamicContentList as Y } from "../utils/genericUtil.js";
-import Z from "../package.json.js";
-let n = null;
-const Ct = () => {
-  const { features: c, template: u, isFeatureEnabled: m } = q(), { handleError: p, showToaster: k } = G(), { getToken: T, getCustomFonts: v, getSyncModulesStatus: B } = K(), { handleEvent: F } = z(), { handleModuleAdd: M } = j(), { getStripoBlocksConfig: A } = O(), { getStripoNotifications: V } = $(), f = () => n || (n = new Promise((i, s) => {
-    var l;
-    if (document.getElementById("UiEditorScript")) {
-      i();
-      return;
-    }
-    const o = Z.guido, r = `https://email-static.useinsider.com/guido/${(l = o == null ? void 0 : o.stripo) == null ? void 0 : l.version}/UIEditor.js`, t = document.createElement("script");
-    t.id = "UiEditorScript", t.type = "module", t.src = r, t.onload = () => i(), t.onerror = () => {
-      t.remove(), s(new Error(`Failed to load Stripo UIEditor script from S3: ${r}`));
-    }, document.body.appendChild(t);
-  }), n.catch(() => {
-    n = null;
-  }), n), _ = async (i, s, o, a = [], r = !1) => {
-    var y, E, h, C;
-    const t = b(), { html: l, css: D } = i, { baseBlocks: g, extensions: R } = await A(), S = ((y = c.value) == null ? void 0 : y.displayConditions) ?? !0, P = ((E = c.value) == null ? void 0 : E.modulesDisabled) ?? !1, U = ((h = u.value) == null ? void 0 : h.forceRecreate) ?? !1;
+import { useStripoApi as j } from "../services/stripoApi.js";
+import K from "../static/styles/customEditorStyle.css.js";
+import { useEditorStore as w } from "../stores/editor.js";
+import { buildMergeTagEntries as Q, flattenDynamicContentList as W } from "../utils/genericUtil.js";
+import Y from "../package.json.js";
+const he = (b, l) => {
+  const { features: c, template: u, isFeatureEnabled: m } = q(), { handleError: p, showToaster: k } = G(), { getToken: T, getCustomFonts: v, getSyncModulesStatus: B } = j(), { handleEvent: F } = z(), { handleModuleAdd: M } = N(), { getStripoBlocksConfig: A } = O(), { getStripoNotifications: V } = $(), _ = async (n, i = [], r = !1) => {
+    var S, y, h, C;
+    const e = w(), { html: f, css: a } = n, { baseBlocks: o, extensions: d } = await A(), g = ((S = c.value) == null ? void 0 : S.displayConditions) ?? !0, P = ((y = c.value) == null ? void 0 : y.modulesDisabled) ?? !1, I = ((h = u.value) == null ? void 0 : h.forceRecreate) ?? !1;
     await window.UIEditor.initEditor(
       document.querySelector("#guido-editor"),
       {
-        metadata: s,
-        html: l,
-        css: D,
-        forceRecreate: U,
+        metadata: b,
+        html: f,
+        css: a,
+        forceRecreate: I,
         locale: "en",
         undoButtonSelector: "#guido__undo-button",
         redoButtonSelector: "#guido__redo-button",
@@ -48,9 +35,9 @@ const Ct = () => {
         customAppearanceMergetags: !m("liquidSyntax"),
         customAppearanceMergetagsBorderColor: "#f1f3fe",
         customAppearanceMergetagsBackgroundColor: "#f1f3fe",
-        customViewStyles: Q,
-        conditionsEnabled: S,
-        customConditionsEnabled: S,
+        customViewStyles: K,
+        conditionsEnabled: g,
+        customConditionsEnabled: g,
         enableXSSSecurity: !0,
         modulesDisabled: P,
         syncModulesEnabled: r,
@@ -62,50 +49,50 @@ const Ct = () => {
         selectElementAfterDrop: !0,
         sameFontSizeForOutlook: !0,
         allowedScriptSourceDomains: "https://email-static.useinsider.com https://edge.fullstory.com https://rs.fullstory.com",
-        ...g ? { baseBlocks: g } : {},
+        ...o ? { baseBlocks: o } : {},
         editorFonts: {
           showDefaultStandardFonts: !0,
           showDefaultNotStandardFonts: !0,
-          customFonts: a
+          customFonts: i
         },
         mergeTags: [
           {
-            entries: W(
-              o.preselectedDynamicContentList,
-              Y((C = u.value) == null ? void 0 : C.dynamicContentList),
+            entries: Q(
+              l.preselectedDynamicContentList,
+              W((C = u.value) == null ? void 0 : C.dynamicContentList),
               m("liquidSyntax")
             )
           }
         ],
-        async onTokenRefreshRequest(e) {
+        async onTokenRefreshRequest(t) {
           try {
-            const d = await T();
-            e(d);
-          } catch (d) {
-            p(d, "Failed to refresh token");
+            const s = await T();
+            t(s);
+          } catch (s) {
+            p(s, "Failed to refresh token");
           }
         },
         onTemplateLoaded() {
           try {
-            const { importCss: e } = H(), { activateCustomViewStyles: d, updateTimerInClonedTemplate: I } = L(), { injectFullStory: x } = N();
-            e(), d(), x(), I(), o.onReady(), t.isStripoInitialized = !0, t.loadingStatus = !1, setTimeout(() => {
-              t.hasChanges = !1;
+            const { importCss: t } = H(), { activateCustomViewStyles: s, updateTimerInClonedTemplate: R } = x(), { injectFullStory: U } = L();
+            t(), s(), U(), R(), l.onReady(), e.isStripoInitialized = !0, e.loadingStatus = !1, setTimeout(() => {
+              e.hasChanges = !1;
             }, 1e3);
-          } catch (e) {
-            p(e, "Failed to load custom interface appearance");
+          } catch (t) {
+            p(t, "Failed to load custom interface appearance");
           }
         },
-        onCodeEditorVisibilityChanged(e) {
-          t.isCodeEditorOpen = e;
+        onCodeEditorVisibilityChanged(t) {
+          e.isCodeEditorOpen = t;
         },
-        onEditorVisualModeChanged(e) {
-          t.editorVisualMode = e.toLowerCase();
+        onEditorVisualModeChanged(t) {
+          e.editorVisualMode = t.toLowerCase();
         },
-        onVersionHistoryVisibilityChanged(e) {
-          t.isVersionHistoryOpen = e;
+        onVersionHistoryVisibilityChanged(t) {
+          e.isVersionHistoryOpen = t;
         },
         onDataChanged() {
-          t.hasChanges = !0;
+          e.hasChanges = !0;
         },
         onEvent: F,
         onModuleAdd: M,
@@ -115,35 +102,45 @@ const Ct = () => {
           ".in-on-board-wrapper",
           ".in-drawer__container"
         ],
-        extensions: R,
+        extensions: d,
         localePatch: J
       }
     );
-  };
-  return { initPlugin: async (i, s, o) => {
-    const a = b();
+  }, D = (n) => new Promise((i, r) => {
+    var d;
+    if (document.getElementById("UiEditorScript")) {
+      Promise.resolve(n()).then(i, r);
+      return;
+    }
+    const e = Y.guido, a = `https://email-static.useinsider.com/guido/${(d = e == null ? void 0 : e.stripo) == null ? void 0 : d.version}/UIEditor.js`, o = document.createElement("script");
+    o.id = "UiEditorScript", o.type = "module", o.src = a, o.onload = () => {
+      Promise.resolve(n()).then(i, r);
+    }, o.onerror = () => {
+      r(new Error(`Failed to load Stripo UIEditor script from S3: ${a}`));
+    }, document.body.appendChild(o);
+  });
+  return { initPlugin: async (n) => {
+    const i = w();
     try {
-      await f();
-      const [r, t] = await Promise.all([
-        v(),
-        B()
-      ]);
-      a.syncModulesEnabled = t, await _(i, s, o, r, t);
+      await D(async () => {
+        const [r, e] = await Promise.all([
+          v(),
+          B()
+        ]);
+        i.syncModulesEnabled = e, await _(n, r, e);
+      });
     } catch {
-      a.loadingStatus = !1, k({
+      i.loadingStatus = !1, k({
         type: X.Error,
-        message: w["An error has occurred. Please report the error code to support."],
+        message: E["An error has occurred. Please report the error code to support."],
         actionButton: {
-          text: w["Reload page"],
+          text: E["Reload page"],
           onClick: () => window.location.reload()
         }
       });
     }
-  }, preloadRuntime: () => {
-    f().catch(() => {
-    });
   } };
 };
 export {
-  Ct as useStripo
+  he as useStripo
 };

package/dist/composables/useUserRole.js

@@ -0,0 +1,12 @@
+import { RoleEnums as t } from "../enums/roles.js";
+import { useAllowlistApi as s } from "../services/allowlistApi.js";
+let e = null, l = null;
+const c = () => {
+  const { getUserRole: n } = s();
+  return { getIsManageUser: async () => e !== null ? e : (l || (l = n().then((r) => (e = r === t.MANAGE_USERS, e)).catch((r) => (console.error("[GUIDO_ALLOWLIST] role fetch failed", r), !1)).finally(() => {
+    l = null;
+  })), l) };
+};
+export {
+  c as useUserRole
+};

package/dist/enums/roles.js

@@ -0,0 +1,4 @@
+var e = /* @__PURE__ */ ((r) => (r.MANAGE_USERS = "manage-users", r))(e || {});
+export {
+  e as RoleEnums
+};

package/dist/guido.css

@@ -1 +1 @@
-.gap-16[data-v-5553d071],.gap-16[data-v-0e1b0c54]{gap:16px}[data-v-73199fa4] .in-button-v2__wrapper{line-height:0}[data-v-22226124] .in-segments-wrapper__button_selected,[data-v-22226124] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb;color:#0010ac;border-color:#0010ac}[data-v-2cb418af] .in-progress-wrapper__progress p span:last-child{display:none!important}[data-v-2cb418af] .in-progress-description-status{display:none!important}.view-options-wrapper[data-v-195ab6d4]{position:relative;display:inline-block}.new-tag[data-v-195ab6d4]{position:absolute;top:-8px;right:-16px;z-index:10}[data-v-195ab6d4] .guido__view-option-selection-desktop svg,[data-v-195ab6d4] .guido__view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-195ab6d4] .in-segments-wrapper__button_selected,[data-v-195ab6d4] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}[data-v-195ab6d4] .in-tooltip-wrapper__icon{cursor:pointer}.editor-toolbar[data-v-173c3a40]{gap:4px}.version-history-item[data-v-ee4b9c3f]{flex-basis:200px}.version-history[data-v-fad98586]{gap:8px}.version-history__toolbar[data-v-fad98586]{gap:4px}.view-options-wrapper[data-v-d405ca59]{position:relative;display:inline-block}.new-tag[data-v-d405ca59]{position:absolute;top:-8px;right:-16px;z-index:10}[data-v-d405ca59] .guido__verion-history-view-option-selection-desktop svg,[data-v-d405ca59] .guido__verion-history-view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-d405ca59] .in-segments-wrapper__button_selected,[data-v-d405ca59] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}[data-v-d405ca59] .in-tooltip-wrapper__icon{cursor:pointer}.auto-save-toggle[data-v-2c964af4]{position:relative}.auto-save-toggle__info-box[data-v-2c964af4]{position:absolute;top:100%;left:0;z-index:10;width:280px}.editor-actions[data-v-6e711fd7]{gap:4px}.header-wrapper[data-v-d11dd577]{min-width:1000px}.guido-loading__wrapper[data-v-07c4b2d8]{height:100%;top:75px!important;bottom:0!important}.guido-editor__wrapper[data-v-daf7d5f8]{--ribbon-offset: 0px;position:relative;width:100%;height:calc(100vh - 128px - var(--ribbon-offset))}.guido-editor__container[data-v-daf7d5f8]{width:100%;height:calc(100vh - 128px - var(--ribbon-offset))}.guido-editor__no-header[data-v-daf7d5f8]{height:calc(100vh - 75px - var(--ribbon-offset))}[data-v-293f1c47] .in-breadcrumb-wrapper__links{cursor:pointer}.templates-wrapper[data-v-91a26acd]{gap:16px;grid-template-columns:repeat(3,1fr)}.templates-wrapper .template-wrapper[data-v-91a26acd]{cursor:pointer}.templates-wrapper .template-wrapper .template-container[data-v-91a26acd]{height:274px;padding:2px;transition:none}.templates-wrapper .template-wrapper .template-container.selected[data-v-91a26acd]{padding:1px}.templates-wrapper .template-wrapper .template-container .thumbnail[data-v-91a26acd]{object-fit:cover;transform:scale(1)}[data-v-b9a93c6e] .guido__verion-history-view-option-selection-desktop svg,[data-v-b9a93c6e] .guido__verion-history-view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-b9a93c6e] .in-segments-wrapper__button_selected,[data-v-b9a93c6e] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}.error-list[data-v-c3fd5d4b]{gap:16px}.desktop-browser-header[data-v-d86c5af5]{height:79px;min-height:79px}.desktop-browser-header__left[data-v-d86c5af5]{-webkit-user-drag:none;height:79px;width:378px}.desktop-browser-header__center[data-v-d86c5af5]{height:79px;background-repeat:repeat-x;background-size:auto 100%;background-position:left top}.desktop-browser-header__right[data-v-d86c5af5]{-webkit-user-drag:none;height:79px;width:112px}.desktop-preview[data-v-cf946232]{min-width:602px;height:70vh;min-height:583px;border-radius:10px}.desktop-preview iframe[data-v-cf946232]{min-height:504px}.iframe-wrapper[data-v-f255b2bb]{width:258px}.iframe-scaled[data-v-f255b2bb]{width:320px;height:124.0310077519%;transform:scale(.80625);transform-origin:top left}.cropped-text[data-v-eb3d05d7]{width:220px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.mobile-preview-wrapper__phone[data-v-3f472f96]{width:282px}.mobile-preview-wrapper__phone img[data-v-3f472f96]{object-fit:cover;border-radius:44px}.mobile-preview-wrapper__content[data-v-3f472f96]{width:258px;height:450px;left:12px}[data-v-6bcaca8a] .vueperslides__parallax-wrapper{padding-bottom:110px!important}[data-v-f16f20f8] .vueperslides__bullets{pointer-events:none!important}[data-v-f16f20f8] .vueperslides__parallax-wrapper{padding-bottom:110px!important}[data-v-bb3cca55] .vueperslides__bullets{pointer-events:none!important}[data-v-bb3cca55] .vueperslides__parallax-wrapper{height:110px!important;padding-bottom:110px!important}[data-v-b09e80c4] .vueperslides__bullets{pointer-events:none!important}[data-v-b09e80c4] .vueperslides__parallax-wrapper{height:110px!important;padding-bottom:110px!important}[data-v-9bdef600] .vueperslides__parallax-wrapper{padding-bottom:110px!important}
+.gap-16[data-v-5553d071],.gap-16[data-v-0e1b0c54]{gap:16px}[data-v-73199fa4] .in-button-v2__wrapper{line-height:0}[data-v-22226124] .in-segments-wrapper__button_selected,[data-v-22226124] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb;color:#0010ac;border-color:#0010ac}[data-v-2cb418af] .in-progress-wrapper__progress p span:last-child{display:none!important}[data-v-2cb418af] .in-progress-description-status{display:none!important}.view-options-wrapper[data-v-195ab6d4]{position:relative;display:inline-block}.new-tag[data-v-195ab6d4]{position:absolute;top:-8px;right:-16px;z-index:10}[data-v-195ab6d4] .guido__view-option-selection-desktop svg,[data-v-195ab6d4] .guido__view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-195ab6d4] .in-segments-wrapper__button_selected,[data-v-195ab6d4] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}[data-v-195ab6d4] .in-tooltip-wrapper__icon{cursor:pointer}.editor-toolbar[data-v-173c3a40]{gap:4px}.version-history-item[data-v-ee4b9c3f]{flex-basis:200px}.version-history[data-v-fad98586]{gap:8px}.version-history__toolbar[data-v-fad98586]{gap:4px}.view-options-wrapper[data-v-d405ca59]{position:relative;display:inline-block}.new-tag[data-v-d405ca59]{position:absolute;top:-8px;right:-16px;z-index:10}[data-v-d405ca59] .guido__verion-history-view-option-selection-desktop svg,[data-v-d405ca59] .guido__verion-history-view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-d405ca59] .in-segments-wrapper__button_selected,[data-v-d405ca59] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}[data-v-d405ca59] .in-tooltip-wrapper__icon{cursor:pointer}.auto-save-toggle[data-v-2c964af4]{position:relative}.auto-save-toggle__info-box[data-v-2c964af4]{position:absolute;top:100%;left:0;z-index:10;width:280px}.editor-actions[data-v-6e711fd7]{gap:4px}.header-wrapper[data-v-d11dd577]{min-width:1000px}.guido-loading__wrapper[data-v-07c4b2d8]{height:100%;top:75px!important;bottom:0!important}.guido-editor__wrapper[data-v-50dac6de]{--ribbon-offset: 0px;position:relative;width:100%;height:calc(100vh - 128px - var(--ribbon-offset))}.guido-editor__container[data-v-50dac6de]{width:100%;height:calc(100vh - 128px - var(--ribbon-offset))}.guido-editor__no-header[data-v-50dac6de]{height:calc(100vh - 75px - var(--ribbon-offset))}[data-v-293f1c47] .in-breadcrumb-wrapper__links{cursor:pointer}.templates-wrapper[data-v-91a26acd]{gap:16px;grid-template-columns:repeat(3,1fr)}.templates-wrapper .template-wrapper[data-v-91a26acd]{cursor:pointer}.templates-wrapper .template-wrapper .template-container[data-v-91a26acd]{height:274px;padding:2px;transition:none}.templates-wrapper .template-wrapper .template-container.selected[data-v-91a26acd]{padding:1px}.templates-wrapper .template-wrapper .template-container .thumbnail[data-v-91a26acd]{object-fit:cover;transform:scale(1)}[data-v-b9a93c6e] .guido__verion-history-view-option-selection-desktop svg,[data-v-b9a93c6e] .guido__verion-history-view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-b9a93c6e] .in-segments-wrapper__button_selected,[data-v-b9a93c6e] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}.error-list[data-v-c3fd5d4b]{gap:16px}.desktop-browser-header[data-v-d86c5af5]{height:79px;min-height:79px}.desktop-browser-header__left[data-v-d86c5af5]{-webkit-user-drag:none;height:79px;width:378px}.desktop-browser-header__center[data-v-d86c5af5]{height:79px;background-repeat:repeat-x;background-size:auto 100%;background-position:left top}.desktop-browser-header__right[data-v-d86c5af5]{-webkit-user-drag:none;height:79px;width:112px}.desktop-preview[data-v-cf946232]{min-width:602px;height:70vh;min-height:583px;border-radius:10px}.desktop-preview iframe[data-v-cf946232]{min-height:504px}.iframe-wrapper[data-v-f255b2bb]{width:258px}.iframe-scaled[data-v-f255b2bb]{width:320px;height:124.0310077519%;transform:scale(.80625);transform-origin:top left}.cropped-text[data-v-eb3d05d7]{width:220px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.mobile-preview-wrapper__phone[data-v-3f472f96]{width:282px}.mobile-preview-wrapper__phone img[data-v-3f472f96]{object-fit:cover;border-radius:44px}.mobile-preview-wrapper__content[data-v-3f472f96]{width:258px;height:450px;left:12px}[data-v-6bcaca8a] .vueperslides__parallax-wrapper{padding-bottom:110px!important}[data-v-f16f20f8] .vueperslides__bullets{pointer-events:none!important}[data-v-f16f20f8] .vueperslides__parallax-wrapper{padding-bottom:110px!important}[data-v-bb3cca55] .vueperslides__bullets{pointer-events:none!important}[data-v-bb3cca55] .vueperslides__parallax-wrapper{height:110px!important;padding-bottom:110px!important}[data-v-b09e80c4] .vueperslides__bullets{pointer-events:none!important}[data-v-b09e80c4] .vueperslides__parallax-wrapper{height:110px!important;padding-bottom:110px!important}[data-v-9bdef600] .vueperslides__parallax-wrapper{padding-bottom:110px!important}

package/dist/services/allowlistApi.js

@@ -0,0 +1,15 @@
+import { useHttp as n } from "../composables/useHttp.js";
+import { base64EncodeWithSpecialChars as c } from "../utils/base64.js";
+const i = "/allowlist/check-single-item", r = "/get-user-role-and-email", u = () => {
+  const { get: t } = n();
+  return { checkDomain: async (e) => {
+    const o = encodeURIComponent(c(`https://${e}`)), { data: s } = await t(`${i}?item=${o}&type=domain`);
+    return s.type === "success";
+  }, getUserRole: async () => {
+    const { data: e } = await t(r);
+    return e == null ? void 0 : e.role;
+  } };
+};
+export {
+  u as useAllowlistApi
+};

package/dist/services/stripoApi.js

@@ -1,9 +1,13 @@
-import { useHttp as d } from "../composables/useHttp.js";
-import { useToaster as m } from "../composables/useToaster.js";
-import { MAX_DEFAULT_TEMPLATE_ID as y } from "../enums/defaults.js";
-import { useBlankTemplate as f } from "./blankTemplate.js";
-const D = () => {
-  const { get: s, post: u } = d(), { handleError: r } = m(), { getBlankTemplate: o } = f();
+import { useHttp as m } from "../composables/useHttp.js";
+import { useToaster as y } from "../composables/useToaster.js";
+import { MAX_DEFAULT_TEMPLATE_ID as f } from "../enums/defaults.js";
+import { useBlankTemplate as g } from "./blankTemplate.js";
+const l = () => ({
+  id: 0,
+  stripoId: 0,
+  unsubscriptionPreferencePages: []
+}), D = () => {
+  const { get: s, post: u } = m(), { handleError: r } = y(), { getBlankTemplate: n } = g();
   return {
     getToken: async () => {
       try {
@@ -26,13 +30,13 @@ const D = () => {
     },
     getDefaultTemplate: async () => {
       try {
-        const t = new URLSearchParams(window.location.search), e = t.get("default-template"), l = t.get("master"), n = e ? parseInt(e) : 0, i = n >= 1 && n <= y ? n : 0;
-        if (!i && !l)
-          return await o();
-        const p = `/stripo/default-template/${i}`, { data: c } = await s(p), a = typeof c == "string" ? JSON.parse(c) : c;
-        return !a || typeof a != "object" || !("html" in a) || !("css" in a) ? await o() : a;
+        const t = new URLSearchParams(window.location.search), e = t.get("default-template"), p = t.get("master"), o = e ? parseInt(e) : 0, i = o >= 1 && o <= f ? o : 0;
+        if (!i && !p)
+          return await n();
+        const d = `/stripo/default-template/${i}`, { data: c } = await s(d), a = typeof c == "string" ? JSON.parse(c) : c;
+        return !a || typeof a != "object" || !("html" in a) || !("css" in a) ? await n() : a;
       } catch (t) {
-        return r(t, "Failed to fetch default template"), o();
+        return r(t, "Failed to fetch default template"), n();
       }
     },
     getSyncModulesStatus: async () => {
@@ -53,13 +57,9 @@ const D = () => {
     getSyncModule: async (t) => {
       try {
         const { data: e } = await s(`/stripo/stripo-modules/${t}/get`);
-        return e;
+        return Array.isArray(e == null ? void 0 : e.unsubscriptionPreferencePages) ? e : l();
       } catch (e) {
-        return r(e, "Failed to get sync module"), {
-          id: 0,
-          stripoId: 0,
-          unsubscriptionPreferencePages: []
-        };
+        return r(e, "Failed to get sync module"), l();
       }
     },
     setSyncModuleUnsubscriptionPages: async (t) => {

package/dist/src/@types/config/schemas.d.ts

@@ -7,6 +7,7 @@
  */
 import type { DynamicContentNode } from '../generic';
 import type { SavedTemplateDetails } from '../stripo';
+import type { ActionButton } from '../toaster';
 import * as v from 'valibot';
 /**
  * Handler function for external validation before save
@@ -14,6 +15,16 @@ import * as v from 'valibot';
  * @returns Promise<boolean> - true if valid, false to cancel save
  */
 export type ExternalValidationHandler = (data: Omit<SavedTemplateDetails, 'metadata'>) => Promise<boolean>;
+/**
+ * Content for the domain-allowlist block toaster. Guido self-serves this (see
+ * useAllowlist): it resolves the user role via /get-user-role-and-email, builds the
+ * settings deep-link, and pulls copy from window.trans. `actionButton.onClick` runs the
+ * action (e.g. the "Add to allowlist" deep-link).
+ */
+export interface AllowlistToastContent {
+    message: string;
+    actionButton?: ActionButton;
+}
 /**
  * Message type constants for email templates
  */
@@ -377,6 +388,8 @@ export declare const FeaturesSchema: v.ObjectSchema<{
     readonly liquidSyntax: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
     /** Enable autosave (3-min interval + tab-hide). User toggles on/off from the header. */
     readonly autosave: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
+    /** Enable pre-save domain-allowlist validation (opt-in; Guido self-serves the block toaster) */
+    readonly allowlistEnabled: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
 }, undefined>;
 /**
  * Default block types available in Stripo
@@ -764,6 +777,8 @@ export declare const GuidoConfigSchema: v.ObjectSchema<{
         readonly liquidSyntax: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
         /** Enable autosave (3-min interval + tab-hide). User toggles on/off from the header. */
         readonly autosave: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
+        /** Enable pre-save domain-allowlist validation (opt-in; Guido self-serves the block toaster) */
+        readonly allowlistEnabled: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
     }, undefined>, {}>;
     /** Block configuration */
     readonly blocks: v.OptionalSchema<v.ObjectSchema<{

package/dist/src/components/Guido.vue.d.ts

@@ -4,12 +4,8 @@ import type { SavedTemplateDetails } from '@@/Types/stripo';
 type __VLS_Props = {
     /** Guido configuration object */
     config: GuidoConfigInput;
-    /** Host data readiness. Runtime still preloads on mount; only config init waits. Defaults true for v-if-gated call sites. */
-    ready?: boolean;
 };
-declare const _default: import("vue").DefineComponent<__VLS_WithDefaults<__VLS_TypePropsToOption<__VLS_Props>, {
-    ready: boolean;
-}>, {
+declare const _default: import("vue").DefineComponent<__VLS_TypePropsToOption<__VLS_Props>, {
     dynamicContent: {
         insert: (data: DynamicContent) => void;
         close: () => void;
@@ -34,17 +30,8 @@ declare const _default: import("vue").DefineComponent<__VLS_WithDefaults<__VLS_T
     ready: () => void;
     "onboarding:finished": () => void;
     "test-email:click": () => void;
-}, string, Readonly<import("vue").ExtractPropTypes<__VLS_WithDefaults<__VLS_TypePropsToOption<__VLS_Props>, {
-    ready: boolean;
-}>>>, {
-    ready: boolean;
-}>;
+}, string, Readonly<import("vue").ExtractPropTypes<__VLS_TypePropsToOption<__VLS_Props>>>, {}>;
 export default _default;
-type __VLS_WithDefaults<P, D> = {
-    [K in keyof Pick<P, keyof P>]: K extends keyof D ? __VLS_PrettifyLocal<P[K] & {
-        default: D[K];
-    }> : P[K];
-};
 type __VLS_NonUndefinedable<T> = T extends undefined ? never : T;
 type __VLS_TypePropsToOption<T> = {
     [K in keyof T]-?: {} extends Pick<T, K> ? {
@@ -54,6 +41,3 @@ type __VLS_TypePropsToOption<T> = {
         required: true;
     };
 };
-type __VLS_PrettifyLocal<T> = {
-    [K in keyof T]: T[K];
-} & {};

package/dist/src/composables/useAllowlist.d.ts

@@ -0,0 +1,18 @@
+import type { AllowlistToastContent } from '@@/Types/config/schemas';
+/**
+ * Builds the "Add to allowlist" InOne Settings deep-link (Security tab, add-domain modal
+ * prefilled). The route is identical across InOne products, so Guido builds it generically.
+ * @param value - domain(s) to prefill; base64-encoded into the `values` query param.
+ */
+export declare const buildAllowlistSettingsUrl: (value: string) => string;
+/**
+ * Domain-allowlist feature composable. Extracts every external domain from the compiled
+ * HTML/CSS and asks the backend (via allowlistApi) whether each is allowlisted, so an
+ * un-allowlisted link can block the save BEFORE anything is persisted; and builds the
+ * role-gated block-toaster content Guido renders. Gated by `features.allowlistEnabled` in
+ * useSave — consumers only flip the flag. SD-143197.
+ */
+export declare const useAllowlist: () => {
+    getBlockedDomains: (html: string, css: string) => Promise<string[]>;
+    resolveToast: (blockedDomains: string[]) => Promise<AllowlistToastContent>;
+};

package/dist/src/composables/useConfig.d.ts

@@ -96,6 +96,7 @@ export declare const useConfig: () => {
             modulesDisabled: boolean;
             liquidSyntax: boolean;
             autosave: boolean;
+            allowlistEnabled: boolean;
         };
         blocks: {
             excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -227,6 +228,7 @@ export declare const useConfig: () => {
         modulesDisabled: boolean;
         liquidSyntax: boolean;
         autosave: boolean;
+        allowlistEnabled: boolean;
     } | null>;
     blocks: import("vue").ComputedRef<{
         excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];

package/dist/src/composables/useStripo.d.ts

@@ -1,5 +1,4 @@
 import type { Metadata, Options, Template } from '@@/Types/stripo';
-export declare const useStripo: () => {
-    initPlugin: (template: Template, metadata: Metadata, options: Options) => Promise<void>;
-    preloadRuntime: () => void;
+export declare const useStripo: (metadata: Metadata, options: Options) => {
+    initPlugin: (template: Template) => Promise<void>;
 };

package/dist/src/composables/useUserRole.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Resolves whether the current user may manage the partner's domain allowlist, via the shared
+ * InOne endpoint GET /get-user-role-and-email (allowlistApi.getUserRole). Fail-open: on any
+ * error the user is treated as non-manage (message-only toaster, no "Add to allowlist" deep-link
+ * they may not be able to use).
+ */
+export declare const useUserRole: () => {
+    getIsManageUser: () => Promise<boolean>;
+};

package/dist/src/enums/roles.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Insider user-role aliases — the kebab-case wire values returned by
+ * GET /get-user-role-and-email (the same set honey-badger's RoleEnums defines).
+ * Only the manage-user role is needed in Guido: it gates the "Add to allowlist"
+ * action in the domain-allowlist block toaster. SD-143197.
+ */
+export declare enum RoleEnums {
+    MANAGE_USERS = "manage-users"
+}

package/dist/src/services/allowlistApi.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Backend calls behind the domain-allowlist feature. Thin transport layer: it owns the
+ * endpoints, encoding, and response shape, and lets callers (useAllowlist / useUserRole) apply
+ * the caching + fail-open policy — mirroring how validators/saveAsTemplate delegates its check
+ * to templateLibraryApi.
+ */
+export declare const useAllowlistApi: () => {
+    checkDomain: (domain: string) => Promise<boolean>;
+    getUserRole: () => Promise<string | undefined>;
+};