@useinsider/guido 3.12.0-beta.975e966 → 3.12.0-beta.9f391a5

package/README.md

@@ -161,6 +161,7 @@ const config: GuidoConfigInput = {
     modulesDisabled?: boolean,    // Default: false - Disable modules panel
     liquidSyntax?: boolean,       // Default: false - Enable Liquid template syntax
     autosave?: boolean,           // Default: false - Show the Auto Save toggle in the header. See wiki/AUTOSAVE.md.
+    allowlistEnabled?: boolean,   // Default: false - Pre-save domain-allowlist check (opt-in). Guido self-serves the block toaster (role lookup, deep-link, copy from window.trans).
   },
 
   // Optional: Callbacks

package/dist/@types/config/schemas.js

@@ -1,11 +1,11 @@
 import { ModuleFolderDefaults as y } from "../../enums/defaults.js";
-import { object as a, number as n, optional as e, string as t, picklist as l, pipe as p, minLength as b, custom as f, boolean as o, array as c, record as k, fallback as C, literal as i, looseObject as g, variant as R, union as h, unknown as s, lazy as T } from "../../node_modules/valibot/dist/index.js";
+import { object as a, number as n, optional as e, string as t, picklist as r, pipe as p, minLength as b, custom as h, boolean as o, array as c, record as k, fallback as C, literal as i, looseObject as g, variant as R, union as f, unknown as s, lazy as T } from "../../node_modules/valibot/dist/index.js";
 const d = {
   /** Promotional/marketing emails */
   PROMOTIONAL: 1,
   /** Transactional/system emails */
   TRANSACTIONAL: 2
-}, r = {
+}, l = {
   /** Standard email campaigns */
   EMAIL: 60,
   /** Architect journey builder */
@@ -38,16 +38,16 @@ const d = {
   ),
   /** Product type identifier */
   productType: e(
-    l([
-      r.EMAIL,
-      r.ARCHITECT,
-      r.UNSUBSCRIBE_PAGES
+    r([
+      l.EMAIL,
+      l.ARCHITECT,
+      l.UNSUBSCRIBE_PAGES
     ]),
-    r.EMAIL
+    l.EMAIL
   ),
   /** Message type (promotional or transactional) */
   messageType: e(
-    l([d.PROMOTIONAL, d.TRANSACTIONAL]),
+    r([d.PROMOTIONAL, d.TRANSACTIONAL]),
     d.PROMOTIONAL
   ),
   /** Display name for the current user */
@@ -76,14 +76,14 @@ const d = {
   children: e(c(S)),
   // eslint-disable-next-line camelcase -- backend field name
   select_items: e(c(S))
-})), P = k(
+})), E = k(
   t(),
   C(c(S), [])
-), D = g({
+), P = g({
   /** Block ID (matches the dictionary key and the legacy HTML element id) */
   id: e(n()),
   /** Decimal places for price display (legacy data may use string or number) */
-  decimalCount: e(h([t(), n()])),
+  decimalCount: e(f([t(), n()])),
   /** Pinned product IDs (empty array when filter-driven) */
   productIds: e(c(s())),
   /** Whether the block requested live products at send time */
@@ -117,14 +117,14 @@ const d = {
   /** Block type marker used by some legacy variants */
   blockType: e(t()),
   /** Size variant marker (legacy data may use string or number) */
-  size: e(h([t(), n()])),
+  size: e(f([t(), n()])),
   /** Vertical responsiveness flag (legacy size=1 variants) */
   verticalResponsiveness: e(o()),
   /** Legacy "Move to next line" price placement toggle (cardPricePlacement.js) */
   isPriceMovedToNextLine: e(o()),
   /** Legacy "Hide if same as discounted" / delete-price-for-zero-sale toggle */
   isPriceDeletedForZeroSale: e(o())
-}), E = a({
+}), D = a({
   /**
    * Legacy recommendation block configs keyed by block ID.
    * Pass this when loading a template authored with the v1
@@ -132,7 +132,7 @@ const d = {
    * strategy, currency, locale, and layout data.
    */
   recommendationConfigs: e(
-    k(t(), D),
+    k(t(), P),
     {}
   )
 }), M = a({
@@ -151,7 +151,7 @@ const d = {
    * (first) partner's leaf attributes into the label→token map that repairs
    * label-form placeholders (`{{ Phone Number }}`) in dropped saved modules.
    */
-  dynamicContentList: e(P, {}),
+  dynamicContentList: e(E, {}),
   /** Valid custom field attribute names from the partner's categorized fields */
   customFieldAttributes: e(c(t()), []),
   /** Selected unsubscribe page IDs */
@@ -159,7 +159,7 @@ const d = {
   /** Force recreate template in Stripo storage (use true when updating externally modified templates) */
   forceRecreate: e(o(), !1),
   /** Migration-only inputs (legacy block configs) */
-  migration: e(E, {})
+  migration: e(D, {})
 }), N = a({
   /** Sender display name */
   senderName: e(t(), ""),
@@ -201,8 +201,10 @@ const d = {
   /** Enable Liquid template syntax */
   liquidSyntax: e(o(), !1),
   /** Enable autosave (3-min interval + tab-hide). User toggles on/off from the header. */
-  autosave: e(o(), !1)
-}), U = l([
+  autosave: e(o(), !1),
+  /** Enable pre-save domain-allowlist validation (opt-in; Guido self-serves the block toaster) */
+  allowlistEnabled: e(o(), !1)
+}), U = r([
   "amp-accordion",
   "amp-carousel",
   "amp-form-controls",
@@ -216,7 +218,7 @@ const d = {
   "text-block",
   "timer-block",
   "video-block"
-]), B = l([
+]), B = r([
   "dynamic-content",
   "checkbox-block",
   "radio-button-block",
@@ -269,7 +271,7 @@ const d = {
   ...m.entries,
   type: i("custom"),
   /** Custom processor function */
-  processor: f(
+  processor: h(
     (u) => typeof u == "function",
     "processor must be a function"
   )
@@ -289,7 +291,7 @@ const d = {
    * Return false to cancel the save operation.
    */
   externalValidation: e(
-    f(
+    h(
       (u) => typeof u == "function",
       "externalValidation must be a function"
     )
@@ -324,7 +326,7 @@ export {
   B as CustomBlockTypeSchema,
   q as CustomRuleSchema,
   U as DefaultBlockTypeSchema,
-  P as DynamicContentListSchema,
+  E as DynamicContentListSchema,
   S as DynamicContentNodeSchema,
   v as DynamicContentSchema,
   O as EditorSchema,
@@ -333,14 +335,14 @@ export {
   F as FeaturesSchema,
   K as GuidoConfigSchema,
   A as IdentitySchema,
-  D as LegacyRecommendationConfigSchema,
+  P as LegacyRecommendationConfigSchema,
   d as MessageType,
   L as PartnerSchema,
-  r as ProductType,
+  l as ProductType,
   _ as RegexRuleSchema,
   j as RemoveRuleSchema,
   H as ReplaceRuleSchema,
-  E as TemplateMigrationSchema,
+  D as TemplateMigrationSchema,
   M as TemplateSchema,
   x as UISchema
 };

package/dist/components/organisms/header/ViewOptions.vue.js

@@ -10,9 +10,9 @@ var n = function() {
   r,
   !1,
   null,
-  "10599c37"
+  "195ab6d4"
 );
-const d = a.exports;
+const c = a.exports;
 export {
-  d as default
+  c as default
 };

package/dist/components/organisms/header/version-history/ViewOptions.vue.js

@@ -10,7 +10,7 @@ var n = function() {
   r,
   !1,
   null,
-  "38eb0a73"
+  "d405ca59"
 );
 const d = a.exports;
 export {

package/dist/composables/useAllowlistToast.js

@@ -0,0 +1,21 @@
+import { base64EncodeWithSpecialChars as o } from "../utils/base64.js";
+import { useTranslations as a } from "./useTranslations.js";
+import { useUserRole as i } from "./useUserRole.js";
+const s = {
+  MANAGE: "journey-builder.domain-allowlist-warning",
+  NON_MANAGE: "settings.allow-list-warning-not-admin-architect",
+  ADD_BUTTON: "settings.allow-list-warning-add-button"
+}, l = (t) => `/settings?openAddModal=true&type=domain&values=${o(t)}#security`, w = () => {
+  const t = a(), { getIsManageUser: n } = i();
+  return { resolveAllowlistToast: async (e) => await n() ? {
+    message: t(s.MANAGE),
+    actionButton: {
+      text: t(s.ADD_BUTTON),
+      onClick: () => window.open(l(e.join(",")), "_blank")
+    }
+  } : { message: t(s.NON_MANAGE) } };
+};
+export {
+  l as buildAllowlistSettingsUrl,
+  w as useAllowlistToast
+};

package/dist/composables/useSave.js

@@ -1,32 +1,52 @@
-import { useActionsApi as H } from "./useActionsApi.js";
-import { useConfig as y } from "./useConfig.js";
-import { useSaveStart as w, useSaveComplete as k } from "./useGuidoActions.js";
+import { useActionsApi as x } from "./useActionsApi.js";
+import { useConfig as k } from "./useConfig.js";
+import { useSaveStart as B, useSaveComplete as E } from "./useGuidoActions.js";
 import { useSyncModuleExtractor as q } from "./useSyncModuleExtractor.js";
+import { ToasterTypeOptions as A } from "../enums/toaster.js";
 import { useStripoApi as C } from "../services/stripoApi.js";
-import { useTemplatePreparation as E } from "../utils/templatePreparation.js";
-import { useHtmlValidator as B } from "./useHtmlValidator.js";
-import { useCouponBlockValidator as L } from "./validators/useCouponBlockValidator.js";
-import { useLiquidValidator as P } from "./validators/useLiquidValidator.js";
-import { useUnsubscribeBlockValidator as U } from "./validators/useUnsubscribeBlockValidator.js";
-const K = () => {
-  const o = w(), s = k(), { validateHtml: r } = B(), { validateLiquidSyntax: l } = P(), { validateCouponBlockTags: n } = L(), { validateUnsubscribeBlockUniqueness: d, validateUnsubscribeBlockHasTemplate: c } = U(), { callbacks: i, isFeatureEnabled: u } = y(), { extractSyncModuleData: m } = q(), { setSyncModuleUnsubscriptionPages: p } = C(), { editorSave: v } = H();
-  return { save: async (f = !1, S = !1) => {
-    var a;
-    o();
-    const { prepareTemplateDetails: V } = E(), t = await V();
-    if (!n(t.compiledHtml) || !d(t.compiledHtml) || !c(t.compiledHtml))
+import { useTemplatePreparation as D } from "../utils/templatePreparation.js";
+import { useAllowlistToast as L } from "./useAllowlistToast.js";
+import { useHtmlValidator as P } from "./useHtmlValidator.js";
+import { useToaster as U } from "./useToaster.js";
+import { useAllowlistValidator as M } from "./validators/useAllowlistValidator.js";
+import { useCouponBlockValidator as h } from "./validators/useCouponBlockValidator.js";
+import { useLiquidValidator as F } from "./validators/useLiquidValidator.js";
+import { useUnsubscribeBlockValidator as O } from "./validators/useUnsubscribeBlockValidator.js";
+const ot = () => {
+  const l = B(), n = E(), { validateHtml: m } = P(), { validateLiquidSyntax: c } = F(), { validateCouponBlockTags: d } = h(), { validateUnsubscribeBlockUniqueness: u, validateUnsubscribeBlockHasTemplate: p } = O(), { callbacks: e, isFeatureEnabled: a } = k(), { extractSyncModuleData: f } = q(), { setSyncModuleUnsubscriptionPages: v } = C(), { editorSave: w } = x(), { showToaster: S } = U(), { getBlockedDomains: b } = M(), { resolveAllowlistToast: V } = L();
+  return { save: async (y = !1, s = !1) => {
+    var r;
+    l();
+    const { prepareTemplateDetails: H } = D(), t = await H();
+    if (!d(t.compiledHtml) || !u(t.compiledHtml) || !p(t.compiledHtml))
       return;
-    if (u("liquidSyntax")) {
-      if (!await l(t.compiledHtml))
+    if (a("liquidSyntax")) {
+      if (!await c(t.compiledHtml))
         return;
-    } else if (!await r(t.compiledHtml, t.dynamicContentList, !0))
+    } else if (!await m(t.compiledHtml, t.dynamicContentList, !0))
       return;
-    if ((a = i.value) != null && a.externalValidation && !await i.value.externalValidation(t) || !await v())
+    if ((r = e.value) != null && r.externalValidation && !await e.value.externalValidation(t))
       return;
-    const { unsubscribePayload: b, stripoModules: x } = m(t.rawHtml);
-    return await p(b), t.modules = x, f || s({ ...t, silent: S }), t;
+    if (a("allowlistEnabled")) {
+      const o = await b(t.compiledHtml, t.css);
+      if (o.length) {
+        if (!s) {
+          const i = await V(o);
+          i != null && i.message && S({
+            type: A.Warning,
+            message: i.message,
+            actionButton: i.actionButton
+          });
+        }
+        return;
+      }
+    }
+    if (!await w())
+      return;
+    const { unsubscribePayload: T, stripoModules: g } = f(t.rawHtml);
+    return await v(T), t.modules = g, y || n({ ...t, silent: s }), t;
   } };
 };
 export {
-  K as useSave
+  ot as useSave
 };

package/dist/composables/useUserRole.js

@@ -0,0 +1,13 @@
+import { RoleEnums as t } from "../enums/roles.js";
+import { useHttp as o } from "./useHttp.js";
+const s = "/get-user-role-and-email";
+let r = null, n = null;
+const f = () => {
+  const { get: l } = o();
+  return { getIsManageUser: async () => r !== null ? r : (n || (n = l(s).then(({ data: e }) => (r = (e == null ? void 0 : e.role) === t.MANAGE_USERS, r)).catch((e) => (console.error("[GUIDO_ALLOWLIST] role fetch failed", e), !1)).finally(() => {
+    n = null;
+  })), n) };
+};
+export {
+  f as useUserRole
+};

package/dist/composables/validators/useAllowlistValidator.js

@@ -0,0 +1,37 @@
+import { base64EncodeWithSpecialChars as w } from "../../utils/base64.js";
+import { useHttp as h } from "../useHttp.js";
+const p = "/allowlist/check-single-item", u = /(?:https?:\/\/|www\.)[^\s"'<>()]+/gi, L = /&quot;\/\//gi, a = /* @__PURE__ */ new Set(), O = () => {
+  const { get: i } = h(), l = (e, s) => {
+    const r = `${e || ""} ${s || ""}`.replace(L, "https://").match(u) || [], t = /* @__PURE__ */ new Set();
+    return r.forEach((n) => {
+      const d = /^https?:\/\//i.test(n) ? n : `https://${n}`;
+      try {
+        const { hostname: c } = new URL(d);
+        c && t.add(c.replace(/^www\./i, "").toLowerCase());
+      } catch {
+      }
+    }), [...t];
+  }, m = async (e) => {
+    if (a.has(e))
+      return !0;
+    try {
+      const s = encodeURIComponent(w(`https://${e}`)), { data: o } = await i(`${p}?item=${s}&type=domain`), r = o.type === "success";
+      return r && a.add(e), r;
+    } catch (s) {
+      return console.error("[GUIDO_ALLOWLIST] isDomainAllowlisted failed", e, s), !0;
+    }
+  };
+  return { getBlockedDomains: async (e, s) => {
+    try {
+      const o = l(e, s);
+      return o.length ? (await Promise.all(
+        o.map(async (t) => ({ domain: t, allowlisted: await m(t) }))
+      )).filter((t) => !t.allowlisted).map((t) => t.domain) : [];
+    } catch (o) {
+      return console.error("[GUIDO_ALLOWLIST] getBlockedDomains failed", o), [];
+    }
+  } };
+};
+export {
+  O as useAllowlistValidator
+};

package/dist/enums/roles.js

@@ -0,0 +1,4 @@
+var e = /* @__PURE__ */ ((r) => (r.MANAGE_USERS = "manage-users", r))(e || {});
+export {
+  e as RoleEnums
+};

package/dist/guido.css

@@ -1 +1 @@
-.gap-16[data-v-5553d071],.gap-16[data-v-0e1b0c54]{gap:16px}[data-v-73199fa4] .in-button-v2__wrapper{line-height:0}[data-v-22226124] .in-segments-wrapper__button_selected,[data-v-22226124] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb;color:#0010ac;border-color:#0010ac}[data-v-2cb418af] .in-progress-wrapper__progress p span:last-child{display:none!important}[data-v-2cb418af] .in-progress-description-status{display:none!important}.view-options-wrapper[data-v-10599c37]{position:relative;display:inline-block}.new-tag[data-v-10599c37]{position:absolute;top:-8px;right:-16px;z-index:10}[data-v-10599c37] .guido__view-option-selection-desktop svg,[data-v-10599c37] .guido__view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-10599c37] .in-segments-wrapper__button_selected,[data-v-10599c37] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}.editor-toolbar[data-v-173c3a40]{gap:4px}.version-history-item[data-v-ee4b9c3f]{flex-basis:200px}.version-history[data-v-fad98586]{gap:8px}.version-history__toolbar[data-v-fad98586]{gap:4px}.view-options-wrapper[data-v-38eb0a73]{position:relative;display:inline-block}.new-tag[data-v-38eb0a73]{position:absolute;top:-8px;right:-16px;z-index:10}[data-v-38eb0a73] .guido__verion-history-view-option-selection-desktop svg,[data-v-38eb0a73] .guido__verion-history-view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-38eb0a73] .in-segments-wrapper__button_selected,[data-v-38eb0a73] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}.auto-save-toggle[data-v-2c964af4]{position:relative}.auto-save-toggle__info-box[data-v-2c964af4]{position:absolute;top:100%;left:0;z-index:10;width:280px}.editor-actions[data-v-6e711fd7]{gap:4px}.header-wrapper[data-v-d11dd577]{min-width:1000px}.guido-loading__wrapper[data-v-07c4b2d8]{height:100%;top:75px!important;bottom:0!important}.guido-editor__wrapper[data-v-50dac6de]{--ribbon-offset: 0px;position:relative;width:100%;height:calc(100vh - 128px - var(--ribbon-offset))}.guido-editor__container[data-v-50dac6de]{width:100%;height:calc(100vh - 128px - var(--ribbon-offset))}.guido-editor__no-header[data-v-50dac6de]{height:calc(100vh - 75px - var(--ribbon-offset))}[data-v-293f1c47] .in-breadcrumb-wrapper__links{cursor:pointer}.templates-wrapper[data-v-91a26acd]{gap:16px;grid-template-columns:repeat(3,1fr)}.templates-wrapper .template-wrapper[data-v-91a26acd]{cursor:pointer}.templates-wrapper .template-wrapper .template-container[data-v-91a26acd]{height:274px;padding:2px;transition:none}.templates-wrapper .template-wrapper .template-container.selected[data-v-91a26acd]{padding:1px}.templates-wrapper .template-wrapper .template-container .thumbnail[data-v-91a26acd]{object-fit:cover;transform:scale(1)}[data-v-b9a93c6e] .guido__verion-history-view-option-selection-desktop svg,[data-v-b9a93c6e] .guido__verion-history-view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-b9a93c6e] .in-segments-wrapper__button_selected,[data-v-b9a93c6e] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}.error-list[data-v-c3fd5d4b]{gap:16px}.desktop-browser-header[data-v-d86c5af5]{height:79px;min-height:79px}.desktop-browser-header__left[data-v-d86c5af5]{-webkit-user-drag:none;height:79px;width:378px}.desktop-browser-header__center[data-v-d86c5af5]{height:79px;background-repeat:repeat-x;background-size:auto 100%;background-position:left top}.desktop-browser-header__right[data-v-d86c5af5]{-webkit-user-drag:none;height:79px;width:112px}.desktop-preview[data-v-cf946232]{min-width:602px;height:70vh;min-height:583px;border-radius:10px}.desktop-preview iframe[data-v-cf946232]{min-height:504px}.iframe-wrapper[data-v-f255b2bb]{width:258px}.iframe-scaled[data-v-f255b2bb]{width:320px;height:124.0310077519%;transform:scale(.80625);transform-origin:top left}.cropped-text[data-v-eb3d05d7]{width:220px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.mobile-preview-wrapper__phone[data-v-3f472f96]{width:282px}.mobile-preview-wrapper__phone img[data-v-3f472f96]{object-fit:cover;border-radius:44px}.mobile-preview-wrapper__content[data-v-3f472f96]{width:258px;height:450px;left:12px}[data-v-6bcaca8a] .vueperslides__parallax-wrapper{padding-bottom:110px!important}[data-v-f16f20f8] .vueperslides__bullets{pointer-events:none!important}[data-v-f16f20f8] .vueperslides__parallax-wrapper{padding-bottom:110px!important}[data-v-bb3cca55] .vueperslides__bullets{pointer-events:none!important}[data-v-bb3cca55] .vueperslides__parallax-wrapper{height:110px!important;padding-bottom:110px!important}[data-v-b09e80c4] .vueperslides__bullets{pointer-events:none!important}[data-v-b09e80c4] .vueperslides__parallax-wrapper{height:110px!important;padding-bottom:110px!important}[data-v-9bdef600] .vueperslides__parallax-wrapper{padding-bottom:110px!important}
+.gap-16[data-v-5553d071],.gap-16[data-v-0e1b0c54]{gap:16px}[data-v-73199fa4] .in-button-v2__wrapper{line-height:0}[data-v-22226124] .in-segments-wrapper__button_selected,[data-v-22226124] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb;color:#0010ac;border-color:#0010ac}[data-v-2cb418af] .in-progress-wrapper__progress p span:last-child{display:none!important}[data-v-2cb418af] .in-progress-description-status{display:none!important}.view-options-wrapper[data-v-195ab6d4]{position:relative;display:inline-block}.new-tag[data-v-195ab6d4]{position:absolute;top:-8px;right:-16px;z-index:10}[data-v-195ab6d4] .guido__view-option-selection-desktop svg,[data-v-195ab6d4] .guido__view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-195ab6d4] .in-segments-wrapper__button_selected,[data-v-195ab6d4] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}[data-v-195ab6d4] .in-tooltip-wrapper__icon{cursor:pointer}.editor-toolbar[data-v-173c3a40]{gap:4px}.version-history-item[data-v-ee4b9c3f]{flex-basis:200px}.version-history[data-v-fad98586]{gap:8px}.version-history__toolbar[data-v-fad98586]{gap:4px}.view-options-wrapper[data-v-d405ca59]{position:relative;display:inline-block}.new-tag[data-v-d405ca59]{position:absolute;top:-8px;right:-16px;z-index:10}[data-v-d405ca59] .guido__verion-history-view-option-selection-desktop svg,[data-v-d405ca59] .guido__verion-history-view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-d405ca59] .in-segments-wrapper__button_selected,[data-v-d405ca59] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}[data-v-d405ca59] .in-tooltip-wrapper__icon{cursor:pointer}.auto-save-toggle[data-v-2c964af4]{position:relative}.auto-save-toggle__info-box[data-v-2c964af4]{position:absolute;top:100%;left:0;z-index:10;width:280px}.editor-actions[data-v-6e711fd7]{gap:4px}.header-wrapper[data-v-d11dd577]{min-width:1000px}.guido-loading__wrapper[data-v-07c4b2d8]{height:100%;top:75px!important;bottom:0!important}.guido-editor__wrapper[data-v-50dac6de]{--ribbon-offset: 0px;position:relative;width:100%;height:calc(100vh - 128px - var(--ribbon-offset))}.guido-editor__container[data-v-50dac6de]{width:100%;height:calc(100vh - 128px - var(--ribbon-offset))}.guido-editor__no-header[data-v-50dac6de]{height:calc(100vh - 75px - var(--ribbon-offset))}[data-v-293f1c47] .in-breadcrumb-wrapper__links{cursor:pointer}.templates-wrapper[data-v-91a26acd]{gap:16px;grid-template-columns:repeat(3,1fr)}.templates-wrapper .template-wrapper[data-v-91a26acd]{cursor:pointer}.templates-wrapper .template-wrapper .template-container[data-v-91a26acd]{height:274px;padding:2px;transition:none}.templates-wrapper .template-wrapper .template-container.selected[data-v-91a26acd]{padding:1px}.templates-wrapper .template-wrapper .template-container .thumbnail[data-v-91a26acd]{object-fit:cover;transform:scale(1)}[data-v-b9a93c6e] .guido__verion-history-view-option-selection-desktop svg,[data-v-b9a93c6e] .guido__verion-history-view-option-selection-mobile svg{margin:0 0 0 2px}[data-v-b9a93c6e] .in-segments-wrapper__button_selected,[data-v-b9a93c6e] .in-segments-wrapper__button_selected:hover{background-color:#dae1fb}.error-list[data-v-c3fd5d4b]{gap:16px}.desktop-browser-header[data-v-d86c5af5]{height:79px;min-height:79px}.desktop-browser-header__left[data-v-d86c5af5]{-webkit-user-drag:none;height:79px;width:378px}.desktop-browser-header__center[data-v-d86c5af5]{height:79px;background-repeat:repeat-x;background-size:auto 100%;background-position:left top}.desktop-browser-header__right[data-v-d86c5af5]{-webkit-user-drag:none;height:79px;width:112px}.desktop-preview[data-v-cf946232]{min-width:602px;height:70vh;min-height:583px;border-radius:10px}.desktop-preview iframe[data-v-cf946232]{min-height:504px}.iframe-wrapper[data-v-f255b2bb]{width:258px}.iframe-scaled[data-v-f255b2bb]{width:320px;height:124.0310077519%;transform:scale(.80625);transform-origin:top left}.cropped-text[data-v-eb3d05d7]{width:220px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.mobile-preview-wrapper__phone[data-v-3f472f96]{width:282px}.mobile-preview-wrapper__phone img[data-v-3f472f96]{object-fit:cover;border-radius:44px}.mobile-preview-wrapper__content[data-v-3f472f96]{width:258px;height:450px;left:12px}[data-v-6bcaca8a] .vueperslides__parallax-wrapper{padding-bottom:110px!important}[data-v-f16f20f8] .vueperslides__bullets{pointer-events:none!important}[data-v-f16f20f8] .vueperslides__parallax-wrapper{padding-bottom:110px!important}[data-v-bb3cca55] .vueperslides__bullets{pointer-events:none!important}[data-v-bb3cca55] .vueperslides__parallax-wrapper{height:110px!important;padding-bottom:110px!important}[data-v-b09e80c4] .vueperslides__bullets{pointer-events:none!important}[data-v-b09e80c4] .vueperslides__parallax-wrapper{height:110px!important;padding-bottom:110px!important}[data-v-9bdef600] .vueperslides__parallax-wrapper{padding-bottom:110px!important}

package/dist/services/stripoApi.js

@@ -1,9 +1,13 @@
-import { useHttp as d } from "../composables/useHttp.js";
-import { useToaster as m } from "../composables/useToaster.js";
-import { MAX_DEFAULT_TEMPLATE_ID as y } from "../enums/defaults.js";
-import { useBlankTemplate as f } from "./blankTemplate.js";
-const D = () => {
-  const { get: s, post: u } = d(), { handleError: r } = m(), { getBlankTemplate: o } = f();
+import { useHttp as m } from "../composables/useHttp.js";
+import { useToaster as y } from "../composables/useToaster.js";
+import { MAX_DEFAULT_TEMPLATE_ID as f } from "../enums/defaults.js";
+import { useBlankTemplate as g } from "./blankTemplate.js";
+const l = () => ({
+  id: 0,
+  stripoId: 0,
+  unsubscriptionPreferencePages: []
+}), D = () => {
+  const { get: s, post: u } = m(), { handleError: r } = y(), { getBlankTemplate: n } = g();
   return {
     getToken: async () => {
       try {
@@ -26,13 +30,13 @@ const D = () => {
     },
     getDefaultTemplate: async () => {
       try {
-        const t = new URLSearchParams(window.location.search), e = t.get("default-template"), l = t.get("master"), n = e ? parseInt(e) : 0, i = n >= 1 && n <= y ? n : 0;
-        if (!i && !l)
-          return await o();
-        const p = `/stripo/default-template/${i}`, { data: c } = await s(p), a = typeof c == "string" ? JSON.parse(c) : c;
-        return !a || typeof a != "object" || !("html" in a) || !("css" in a) ? await o() : a;
+        const t = new URLSearchParams(window.location.search), e = t.get("default-template"), p = t.get("master"), o = e ? parseInt(e) : 0, i = o >= 1 && o <= f ? o : 0;
+        if (!i && !p)
+          return await n();
+        const d = `/stripo/default-template/${i}`, { data: c } = await s(d), a = typeof c == "string" ? JSON.parse(c) : c;
+        return !a || typeof a != "object" || !("html" in a) || !("css" in a) ? await n() : a;
       } catch (t) {
-        return r(t, "Failed to fetch default template"), o();
+        return r(t, "Failed to fetch default template"), n();
       }
     },
     getSyncModulesStatus: async () => {
@@ -53,13 +57,9 @@ const D = () => {
     getSyncModule: async (t) => {
       try {
         const { data: e } = await s(`/stripo/stripo-modules/${t}/get`);
-        return e;
+        return Array.isArray(e == null ? void 0 : e.unsubscriptionPreferencePages) ? e : l();
       } catch (e) {
-        return r(e, "Failed to get sync module"), {
-          id: 0,
-          stripoId: 0,
-          unsubscriptionPreferencePages: []
-        };
+        return r(e, "Failed to get sync module"), l();
       }
     },
     setSyncModuleUnsubscriptionPages: async (t) => {

package/dist/src/@types/config/schemas.d.ts

@@ -7,6 +7,7 @@
  */
 import type { DynamicContentNode } from '../generic';
 import type { SavedTemplateDetails } from '../stripo';
+import type { ActionButton } from '../toaster';
 import * as v from 'valibot';
 /**
  * Handler function for external validation before save
@@ -14,6 +15,16 @@ import * as v from 'valibot';
  * @returns Promise<boolean> - true if valid, false to cancel save
  */
 export type ExternalValidationHandler = (data: Omit<SavedTemplateDetails, 'metadata'>) => Promise<boolean>;
+/**
+ * Content for the domain-allowlist block toaster. Guido self-serves this (see
+ * useAllowlistToast): it resolves the user role via /get-user-role-and-email, builds the
+ * settings deep-link, and pulls copy from window.trans. `actionButton.onClick` runs the
+ * action (e.g. the "Add to allowlist" deep-link).
+ */
+export interface AllowlistToastContent {
+    message: string;
+    actionButton?: ActionButton;
+}
 /**
  * Message type constants for email templates
  */
@@ -377,6 +388,8 @@ export declare const FeaturesSchema: v.ObjectSchema<{
     readonly liquidSyntax: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
     /** Enable autosave (3-min interval + tab-hide). User toggles on/off from the header. */
     readonly autosave: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
+    /** Enable pre-save domain-allowlist validation (opt-in; Guido self-serves the block toaster) */
+    readonly allowlistEnabled: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
 }, undefined>;
 /**
  * Default block types available in Stripo
@@ -764,6 +777,8 @@ export declare const GuidoConfigSchema: v.ObjectSchema<{
         readonly liquidSyntax: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
         /** Enable autosave (3-min interval + tab-hide). User toggles on/off from the header. */
         readonly autosave: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
+        /** Enable pre-save domain-allowlist validation (opt-in; Guido self-serves the block toaster) */
+        readonly allowlistEnabled: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
     }, undefined>, {}>;
     /** Block configuration */
     readonly blocks: v.OptionalSchema<v.ObjectSchema<{

package/dist/src/composables/useAllowlistToast.d.ts

@@ -0,0 +1,17 @@
+import type { AllowlistToastContent } from '@@/Types/config/schemas';
+/**
+ * Builds the "Add to allowlist" InOne Settings deep-link (Security tab, add-domain modal
+ * prefilled). The route is identical across InOne products, so Guido builds it generically.
+ * @param value - domain(s) to prefill; base64-encoded into the `values` query param.
+ */
+export declare const buildAllowlistSettingsUrl: (value: string) => string;
+/**
+ * Builds the domain-allowlist block-toaster content Guido renders when a save is blocked.
+ * Guido owns the whole toaster: it resolves the user role itself (useUserRole → the shared
+ * /get-user-role-and-email endpoint) and pulls copy from window.trans, so consumers only need
+ * to set features.allowlistEnabled. Manage users get the "Add to allowlist" deep-link button;
+ * everyone else gets a message-only warning. SD-143197.
+ */
+export declare const useAllowlistToast: () => {
+    resolveAllowlistToast: (blockedDomains: string[]) => Promise<AllowlistToastContent>;
+};

package/dist/src/composables/useConfig.d.ts

@@ -96,6 +96,7 @@ export declare const useConfig: () => {
             modulesDisabled: boolean;
             liquidSyntax: boolean;
             autosave: boolean;
+            allowlistEnabled: boolean;
         };
         blocks: {
             excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -227,6 +228,7 @@ export declare const useConfig: () => {
         modulesDisabled: boolean;
         liquidSyntax: boolean;
         autosave: boolean;
+        allowlistEnabled: boolean;
     } | null>;
     blocks: import("vue").ComputedRef<{
         excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];

package/dist/src/composables/useUserRole.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Resolves whether the current user may manage the partner's domain allowlist, via the shared
+ * InOne endpoint GET /get-user-role-and-email. Fail-open: on any error the user is treated as
+ * non-manage (message-only toaster, no "Add to allowlist" deep-link they may not be able to use).
+ */
+export declare const useUserRole: () => {
+    getIsManageUser: () => Promise<boolean>;
+};

package/dist/src/composables/validators/useAllowlistValidator.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Pre-save domain-allowlist validation. Extracts every external domain from the compiled
+ * HTML/CSS and asks the backend whether each is allowlisted, so an un-allowlisted link can
+ * block the save BEFORE anything is persisted. Gated by `features.allowlistEnabled` in
+ * `useSave`; the block toaster is rendered by Guido from host-supplied content.
+ */
+export declare const useAllowlistValidator: () => {
+    getBlockedDomains: (html: string, css: string) => Promise<string[]>;
+};

package/dist/src/enums/roles.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Insider user-role aliases — the kebab-case wire values returned by
+ * GET /get-user-role-and-email (the same set honey-badger's RoleEnums defines).
+ * Only the manage-user role is needed in Guido: it gates the "Add to allowlist"
+ * action in the domain-allowlist block toaster. SD-143197.
+ */
+export declare enum RoleEnums {
+    MANAGE_USERS = "manage-users"
+}

package/dist/src/stores/config.d.ts

@@ -101,6 +101,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -238,6 +239,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -375,6 +377,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -512,6 +515,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -649,6 +653,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -786,6 +791,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -923,6 +929,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -1060,6 +1067,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -1197,6 +1205,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -1334,6 +1343,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -1471,6 +1481,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -1608,6 +1619,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -1745,6 +1757,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -1882,6 +1895,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -2019,6 +2033,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -2156,6 +2171,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -2293,6 +2309,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];
@@ -2430,6 +2447,7 @@ export declare const useConfigStore: import("pinia").StoreDefinition<"guido-conf
                 modulesDisabled: boolean;
                 liquidSyntax: boolean;
                 autosave: boolean;
+                allowlistEnabled: boolean;
             };
             blocks: {
                 excludeDefaults: ("amp-accordion" | "amp-carousel" | "amp-form-controls" | "banner-block" | "button-block" | "html-block" | "image-block" | "menu-block" | "social-block" | "spacer-block" | "text-block" | "timer-block" | "video-block")[];

package/dist/static/styles/components/base-input.css.js

@@ -3,8 +3,12 @@ const n = `.base-input {
     border-radius: 4px;
     background-color: var(--guido-color-gray-0);
     align-items: center;
-    height: 40px;
-    max-height: 40px;
+    /* 40px is a floor, never a cap: \`.base-input\` is shared by every settings field,
+       including Stripo's own auto-height inputs (e.g. the link field) that expand on
+       focus. A fixed max-height clamped their inner box; keep 40px only as the floor. */
+    min-height: 40px;
+    height: auto;
+    max-height: none;
     box-sizing: content-box;
     outline: none;
     resize: vertical;
@@ -36,11 +40,6 @@ ue-contenteditable .base-input {
     line-height: 24px;
 }
 
-/* Image link input is auto-height; lift the fixed 40px cap so it can grow. */
-ue-contenteditable.link-autoheight-contenteditable .base-input {
-    max-height: none;
-}
-
 ue-icon-component.icon-button.icon-clear-input {
     right: 2px;
     top: 2px;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@useinsider/guido",
-  "version": "3.12.0-beta.975e966",
+  "version": "3.12.0-beta.9f391a5",
   "description": "Guido is a Vue + TypeScript wrapper for Email Plugin. Easily embed the email editor in your Vue applications.",
   "main": "./dist/guido.umd.cjs",
   "module": "./dist/library.js",
@@ -44,7 +44,7 @@
   "license": "ISC",
   "dependencies": {
     "@stripoinc/ui-editor-extensions": "3.8.0",
-    "@useinsider/design-system-vue": "2.0.0",
+    "@useinsider/design-system-vue": "1.3.0",
     "@vueuse/core": "11.3.0",
     "lodash-es": "4.17.21",
     "pinia": "2.3.1",