@useinsider/guido 3.12.0-beta.ea5b317 → 3.12.0-beta.eb4ca1c

package/README.md

@@ -161,11 +161,16 @@ const config: GuidoConfigInput = {
     modulesDisabled?: boolean,    // Default: false - Disable modules panel
     liquidSyntax?: boolean,       // Default: false - Enable Liquid template syntax
     autosave?: boolean,           // Default: false - Show the Auto Save toggle in the header. See wiki/AUTOSAVE.md.
+    allowlistEnabled?: boolean,   // Default: false - Pre-save domain-allowlist check (opt-in). Guido self-serves the block toaster (see below).
   },
 
   // Optional: Callbacks
   callbacks?: {
     externalValidation?: (data: SavedTemplateDetails) => Promise<boolean>,  // Return false to cancel save
+    // OPTIONAL override for the allowlist block toaster. By default Guido self-serves it: it resolves the user
+    // role via /get-user-role-and-email, builds the settings deep-link, and reads copy from window.trans — so
+    // consumers only set features.allowlistEnabled. Supply this only to replace that content; null/void keeps the default.
+    resolveAllowlistToast?: (blockedDomains: string[]) => { message: string, actionButton?: { text: string, onClick: () => void } } | null | void,
   },
 
   // Optional: Block configuration

package/dist/@types/config/schemas.js

@@ -1,5 +1,5 @@
 import { ModuleFolderDefaults as y } from "../../enums/defaults.js";
-import { object as a, number as n, optional as e, string as t, picklist as l, pipe as p, minLength as b, custom as f, boolean as o, array as c, record as k, fallback as C, literal as i, looseObject as g, variant as R, union as h, unknown as s, lazy as T } from "../../node_modules/valibot/dist/index.js";
+import { object as a, number as n, optional as e, string as t, picklist as i, pipe as p, minLength as b, custom as S, boolean as o, array as c, record as k, fallback as C, literal as m, looseObject as g, variant as R, union as h, unknown as l, lazy as T } from "../../node_modules/valibot/dist/index.js";
 const d = {
   /** Promotional/marketing emails */
   PROMOTIONAL: 1,
@@ -30,7 +30,7 @@ const d = {
   name: t(),
   /** Fallback font family (e.g., "serif" or "sans-serif") */
   family: t()
-}), L = a({
+}), v = a({
   /** Partner/organization name (required) */
   name: p(
     t(),
@@ -38,7 +38,7 @@ const d = {
   ),
   /** Product type identifier */
   productType: e(
-    l([
+    i([
       r.EMAIL,
       r.ARCHITECT,
       r.UNSUBSCRIBE_PAGES
@@ -47,14 +47,14 @@ const d = {
   ),
   /** Message type (promotional or transactional) */
   messageType: e(
-    l([d.PROMOTIONAL, d.TRANSACTIONAL]),
+    i([d.PROMOTIONAL, d.TRANSACTIONAL]),
     d.PROMOTIONAL
   ),
   /** Display name for the current user */
   username: e(t(), "Guido User"),
   /** Fallback font settings from partner settings — used to match backend size calculation */
   fallbackFont: e(I)
-}), v = a({
+}), L = a({
   /** Display text for the dynamic content */
   text: t(),
   /** Template variable value (e.g., {{username}}) */
@@ -68,40 +68,40 @@ const d = {
       value: t()
     })
   )
-}), S = T(() => g({
+}), f = T(() => g({
   text: e(t()),
   // eslint-disable-next-line camelcase -- backend field name
   tag_text: e(t()),
   value: e(t()),
-  children: e(c(S)),
+  children: e(c(f)),
   // eslint-disable-next-line camelcase -- backend field name
-  select_items: e(c(S))
-})), P = k(
+  select_items: e(c(f))
+})), E = k(
   t(),
-  C(c(S), [])
-), D = g({
+  C(c(f), [])
+), P = g({
   /** Block ID (matches the dictionary key and the legacy HTML element id) */
   id: e(n()),
   /** Decimal places for price display (legacy data may use string or number) */
   decimalCount: e(h([t(), n()])),
   /** Pinned product IDs (empty array when filter-driven) */
-  productIds: e(c(s())),
+  productIds: e(c(l())),
   /** Whether the block requested live products at send time */
   sendProductRequestFlag: e(o()),
   /** Whether to randomize product order */
   shuffleProducts: e(o()),
   /** Filter rules driving product selection */
-  filters: e(c(s())),
+  filters: e(c(l())),
   /** Currency code (e.g. 'EUR') — sometimes absent in legacy data */
   currency: e(t()),
   /** Currency display settings (separators, alignment, decimals) */
-  currencySettings: e(s()),
+  currencySettings: e(l()),
   /** Locale (e.g. 'nl_NL') */
   language: e(t()),
   /** Recommendation strategy key (e.g. 'newArrivals') */
   strategy: e(t()),
   /** Snapshot of products as rendered by the legacy block */
-  recommendedProducts: e(c(s())),
+  recommendedProducts: e(c(l())),
   /** Number of product cards per row */
   cardsInRow: e(n()),
   /** Mobile-only padding (right) */
@@ -124,7 +124,7 @@ const d = {
   isPriceMovedToNextLine: e(o()),
   /** Legacy "Hide if same as discounted" / delete-price-for-zero-sale toggle */
   isPriceDeletedForZeroSale: e(o())
-}), E = a({
+}), D = a({
   /**
    * Legacy recommendation block configs keyed by block ID.
    * Pass this when loading a template authored with the v1
@@ -132,7 +132,7 @@ const d = {
    * strategy, currency, locale, and layout data.
    */
   recommendationConfigs: e(
-    k(t(), D),
+    k(t(), P),
     {}
   )
 }), M = a({
@@ -142,7 +142,7 @@ const d = {
   css: e(t(), ""),
   /** Preselected dynamic content items */
   preselectedDynamicContent: e(
-    c(v),
+    c(L),
     []
   ),
   /**
@@ -151,7 +151,7 @@ const d = {
    * (first) partner's leaf attributes into the label→token map that repairs
    * label-form placeholders (`{{ Phone Number }}`) in dropped saved modules.
    */
-  dynamicContentList: e(P, {}),
+  dynamicContentList: e(E, {}),
   /** Valid custom field attribute names from the partner's categorized fields */
   customFieldAttributes: e(c(t()), []),
   /** Selected unsubscribe page IDs */
@@ -159,7 +159,7 @@ const d = {
   /** Force recreate template in Stripo storage (use true when updating externally modified templates) */
   forceRecreate: e(o(), !1),
   /** Migration-only inputs (legacy block configs) */
-  migration: e(E, {})
+  migration: e(D, {})
 }), N = a({
   /** Sender display name */
   senderName: e(t(), ""),
@@ -201,8 +201,10 @@ const d = {
   /** Enable Liquid template syntax */
   liquidSyntax: e(o(), !1),
   /** Enable autosave (3-min interval + tab-hide). User toggles on/off from the header. */
-  autosave: e(o(), !1)
-}), U = l([
+  autosave: e(o(), !1),
+  /** Enable pre-save domain-allowlist validation (opt-in; host supplies the block toaster via callbacks.resolveAllowlistToast) */
+  allowlistEnabled: e(o(), !1)
+}), w = i([
   "amp-accordion",
   "amp-carousel",
   "amp-form-controls",
@@ -216,7 +218,7 @@ const d = {
   "text-block",
   "timer-block",
   "video-block"
-]), B = l([
+]), U = i([
   "dynamic-content",
   "checkbox-block",
   "radio-button-block",
@@ -224,18 +226,18 @@ const d = {
   "unsubscribe-block",
   "coupon-block",
   "items-block"
-]), w = a({
+]), B = a({
   /** Default blocks to exclude from the editor */
   excludeDefaults: e(
-    c(U),
+    c(w),
     []
   ),
   /** Custom blocks to include in the editor */
   includeCustoms: e(
-    c(B),
+    c(U),
     []
   )
-}), m = a({
+}), u = a({
   /** Unique identifier for the rule */
   id: t(),
   /** Human-readable description */
@@ -243,8 +245,8 @@ const d = {
   /** Priority for rule ordering (lower = earlier) */
   priority: n()
 }), H = a({
-  ...m.entries,
-  type: i("replace"),
+  ...u.entries,
+  type: m("replace"),
   /** String to search for */
   search: t(),
   /** Replacement string */
@@ -252,8 +254,8 @@ const d = {
   /** Replace all occurrences (default: false) */
   replaceAll: e(o())
 }), _ = a({
-  ...m.entries,
-  type: i("regex"),
+  ...u.entries,
+  type: m("regex"),
   /** Regex pattern string */
   pattern: t(),
   /** Replacement string (supports $1, $2, etc.) */
@@ -261,16 +263,16 @@ const d = {
   /** Regex flags (e.g., 'gi') */
   flags: e(t())
 }), j = a({
-  ...m.entries,
-  type: i("remove"),
+  ...u.entries,
+  type: m("remove"),
   /** Strings or patterns to remove */
   targets: c(t())
 }), q = a({
-  ...m.entries,
-  type: i("custom"),
+  ...u.entries,
+  type: m("custom"),
   /** Custom processor function */
-  processor: f(
-    (u) => typeof u == "function",
+  processor: S(
+    (s) => typeof s == "function",
     "processor must be a function"
   )
 }), G = R("type", [
@@ -289,17 +291,29 @@ const d = {
    * Return false to cancel the save operation.
    */
   externalValidation: e(
-    f(
-      (u) => typeof u == "function",
+    S(
+      (s) => typeof s == "function",
       "externalValidation must be a function"
     )
+  ),
+  /**
+   * OPTIONAL override for the domain-allowlist block toaster (features.allowlistEnabled). By
+   * default Guido self-serves the toaster — resolves the user role via /get-user-role-and-email,
+   * builds the settings deep-link, and reads copy from window.trans — so consumers only flip the
+   * flag. Supply this only to replace that content. Returning null/void keeps Guido's default.
+   */
+  resolveAllowlistToast: e(
+    S(
+      (s) => typeof s == "function",
+      "resolveAllowlistToast must be a function"
+    )
   )
 }), K = a({
   // Required sections
   /** Identity configuration (required) */
   identity: A,
   /** Partner configuration (required) */
-  partner: L,
+  partner: v,
   // Optional sections (with defaults)
   /** Template content and presets */
   template: e(M, {}),
@@ -310,37 +324,37 @@ const d = {
   /** Feature toggles */
   features: e(F, {}),
   /** Block configuration */
-  blocks: e(w, {}),
+  blocks: e(B, {}),
   /** Compiler configuration */
   compiler: e(V, {}),
   /** Callbacks and event handlers */
   callbacks: e(z, {})
 });
 export {
-  w as BlocksSchema,
+  B as BlocksSchema,
   z as CallbacksSchema,
   G as CompilerRuleSchema,
   V as CompilerSchema,
-  B as CustomBlockTypeSchema,
+  U as CustomBlockTypeSchema,
   q as CustomRuleSchema,
-  U as DefaultBlockTypeSchema,
-  P as DynamicContentListSchema,
-  S as DynamicContentNodeSchema,
-  v as DynamicContentSchema,
+  w as DefaultBlockTypeSchema,
+  E as DynamicContentListSchema,
+  f as DynamicContentNodeSchema,
+  L as DynamicContentSchema,
   O as EditorSchema,
   N as EmailHeaderSchema,
   I as FallbackFontSchema,
   F as FeaturesSchema,
   K as GuidoConfigSchema,
   A as IdentitySchema,
-  D as LegacyRecommendationConfigSchema,
+  P as LegacyRecommendationConfigSchema,
   d as MessageType,
-  L as PartnerSchema,
+  v as PartnerSchema,
   r as ProductType,
   _ as RegexRuleSchema,
   j as RemoveRuleSchema,
   H as ReplaceRuleSchema,
-  E as TemplateMigrationSchema,
+  D as TemplateMigrationSchema,
   M as TemplateSchema,
   x as UISchema
 };

package/dist/components/organisms/email-preview/desktop-preview/DesktopPreview.vue.js

@@ -15,7 +15,7 @@ var a = function() {
   i,
   !1,
   null,
-  "06afaecb"
+  "cf946232"
 );
 const f = n.exports;
 export {

package/dist/components/organisms/email-preview/desktop-preview/DesktopPreview.vue2.js

@@ -1,24 +1,24 @@
-import { defineComponent as u, ref as a, onMounted as p, onBeforeUnmount as l, nextTick as v } from "vue";
-import { usePreviewInteractionGuard as d } from "../../../../composables/usePreviewInteractionGuard.js";
+import { defineComponent as u, ref as a, onMounted as p, onBeforeUnmount as l, nextTick as d } from "vue";
+import { usePreviewInteractionGuard as v } from "../../../../composables/usePreviewInteractionGuard.js";
 import { useTranslations as _ } from "../../../../composables/useTranslations.js";
 import { usePreviewStore as w } from "../../../../stores/preview.js";
 import I from "./DesktopBrowserHeader.vue.js";
 const C = /* @__PURE__ */ u({
   __name: "DesktopPreview",
-  setup(k) {
-    const i = _(), { blockPreviewInteractions: t } = d(), o = a(), n = a(!1), c = w();
+  setup(P) {
+    const i = _(), { guardPreviewInteractions: t } = v(), o = a(), r = a(!1), c = w();
     let e = null;
     const f = (m) => {
       t(m.target);
-    }, r = () => {
+    }, n = () => {
       o.value && (e = new ResizeObserver(() => {
-      }), e.observe(o.value), v(() => {
-        n.value = !0;
+      }), e.observe(o.value), d(() => {
+        r.value = !0;
       }));
     }, s = () => {
       e == null || e.disconnect();
     };
-    return p(r), l(s), { __sfc: !0, trans: i, blockPreviewInteractions: t, containerRef: o, isContainerReady: n, previewStore: c, resizeObserver: e, onIframeLoad: f, initIframe: r, cleanIframe: s, DesktopBrowserHeader: I };
+    return p(n), l(s), { __sfc: !0, trans: i, guardPreviewInteractions: t, containerRef: o, isContainerReady: r, previewStore: c, resizeObserver: e, onIframeLoad: f, initIframe: n, cleanIframe: s, DesktopBrowserHeader: I };
   }
 });
 export {

package/dist/components/organisms/email-preview/mobile-preview/ContentView.vue.js

@@ -1,20 +1,20 @@
 import e from "./ContentView.vue2.js";
 /* empty css                 */
 import n from "../../../../_virtual/_plugin-vue2_normalizer.js";
-var c = function() {
+var o = function() {
   var t = this, s = t._self._c, a = t._self._setupProxy;
   return s("div", { staticClass: "w-1 h-1 b-c-4 d-f f-d-c" }, [s("div", { staticClass: "d-f j-c-s-b a-i-c p-2 h-6-s" }, [s("div", { staticClass: "d-f a-i-c cur-p", on: { click: function(l) {
     return t.$emit("back-to-inbox");
   } } }, [s(a.InIcons, { staticClass: "f-s-3 i-c-7", attrs: { name: "line-chevron-left" } }), s("span", { staticClass: "ml-2 f-s-1 f-w-400 l-h-1 t-c-7" }, [t._v(t._s(a.trans("newsletter.inbox")))])], 1), s("div", { staticClass: "d-f a-i-c" }, [s(a.InIcons, { staticClass: "i-c-52", attrs: { name: "line-chevron-down" } }), s(a.InIcons, { staticClass: "ml-1 i-c-52", attrs: { name: "line-chevron-up" } })], 1)]), s("div", { staticClass: "iframe-wrapper f-g-1 o-h" }, [s("iframe", { ref: "iframeRef", staticClass: "iframe-scaled d-b b-c-4 bor-s-n", attrs: { sandbox: "allow-same-origin allow-popups allow-forms allow-scripts allow-popups-to-escape-sandbox", srcdoc: a.previewStore.previewHtml }, on: { load: a.onLoad } })])]);
-}, o = [], i = /* @__PURE__ */ n(
+}, i = [], r = /* @__PURE__ */ n(
   e,
-  c,
   o,
+  i,
   !1,
   null,
-  "cbafc185"
+  "f255b2bb"
 );
-const d = i.exports;
+const d = r.exports;
 export {
   d as default
 };

package/dist/components/organisms/email-preview/mobile-preview/ContentView.vue2.js

@@ -1,24 +1,24 @@
-import { defineComponent as m, ref as a } from "vue";
+import { defineComponent as c, ref as a } from "vue";
 import { usePreviewInteractionGuard as f } from "../../../../composables/usePreviewInteractionGuard.js";
 import { useResponsivePreview as p } from "../../../../composables/useResponsivePreview.js";
 import { useTranslations as u } from "../../../../composables/useTranslations.js";
 import { usePreviewStore as v } from "../../../../stores/preview.js";
-import { InIcons as P } from "@useinsider/design-system-vue";
-const g = /* @__PURE__ */ m({
+import { InIcons as d } from "@useinsider/design-system-vue";
+const b = /* @__PURE__ */ c({
   __name: "ContentView",
   emits: ["back-to-inbox"],
-  setup(_) {
-    const c = u(), t = v(), r = a(), { setupResponsivePreview: n } = p(), { blockPreviewInteractions: s } = f(), i = (e) => {
+  setup(P) {
+    const m = u(), r = v(), t = a(), { setupResponsivePreview: n } = p(), { guardPreviewInteractions: s } = f(), i = (e) => {
       ["transform", "transform-origin", "height"].forEach((o) => {
         e.documentElement.style.removeProperty(o);
       });
     };
-    return { __sfc: !0, trans: c, previewStore: t, iframeRef: r, setupResponsivePreview: n, blockPreviewInteractions: s, clearAMPTransforms: i, onLoad: () => {
-      const e = r.value, o = e == null ? void 0 : e.contentDocument;
-      o && (n(e), s(e), t.isAMPResponsive && i(o));
-    }, InIcons: P };
+    return { __sfc: !0, trans: m, previewStore: r, iframeRef: t, setupResponsivePreview: n, guardPreviewInteractions: s, clearAMPTransforms: i, onLoad: () => {
+      const e = t.value, o = e == null ? void 0 : e.contentDocument;
+      o && (n(e), s(e), r.isAMPResponsive && i(o));
+    }, InIcons: d };
   }
 });
 export {
-  g as default
+  b as default
 };

package/dist/composables/useAllowlistToast.js

@@ -0,0 +1,21 @@
+import { base64EncodeWithSpecialChars as o } from "../utils/base64.js";
+import { useTranslations as a } from "./useTranslations.js";
+import { useUserRole as i } from "./useUserRole.js";
+const s = {
+  MANAGE: "journey-builder.domain-allowlist-warning",
+  NON_MANAGE: "settings.allow-list-warning-not-admin-architect",
+  ADD_BUTTON: "settings.allow-list-warning-add-button"
+}, l = (t) => `/settings?openAddModal=true&type=domain&values=${o(t)}#security`, w = () => {
+  const t = a(), { getIsManageUser: n } = i();
+  return { resolveAllowlistToast: async (e) => await n() ? {
+    message: t(s.MANAGE),
+    actionButton: {
+      text: t(s.ADD_BUTTON),
+      onClick: () => window.open(l(e.join(",")), "_blank")
+    }
+  } : { message: t(s.NON_MANAGE) } };
+};
+export {
+  l as buildAllowlistSettingsUrl,
+  w as useAllowlistToast
+};

package/dist/composables/usePreviewInteractionGuard.js

@@ -1,17 +1,42 @@
-const o = ["click", "auxclick", "submit"], c = (t) => {
-  t.preventDefault(), t.stopPropagation();
-}, a = () => ({ blockPreviewInteractions: (r) => {
+import { URLS as o, MERGE_TAGS as a } from "../enums/unsubscribe.js";
+import { UNSUBSCRIBE_LINK_SELECTOR as i } from "../extensions/Blocks/Unsubscribe/utils/constants.js";
+import { BASE_SAFE_URL_SCHEMES as u } from "../utils/urlSchemes.js";
+const E = ["click", "auxclick"], d = [
+  ...Object.values(a),
+  o.UNSUBSCRIBE_URL,
+  o.PREFERENCES_URL
+], l = (e) => {
+  if (e.matches(i))
+    return !0;
+  const r = e.getAttribute("href") ?? "";
+  return d.some((t) => r.includes(t));
+}, S = [...u, "tel:", "sms:"], f = (e) => {
+  const r = (e.getAttribute("href") ?? "").trim();
+  return r === "" || r.startsWith("#") || r.startsWith("{{") ? !1 : S.includes(e.protocol);
+}, m = (e) => {
+  var t, n;
+  const r = (n = (t = e.target) == null ? void 0 : t.closest) == null ? void 0 : n.call(t, "a");
+  if (r) {
+    if (l(r) || !f(r)) {
+      e.preventDefault(), e.stopPropagation();
+      return;
+    }
+    r.setAttribute("target", "_blank"), r.setAttribute("rel", "noopener noreferrer");
+  }
+}, R = (e) => {
+  e.preventDefault(), e.stopPropagation();
+}, s = /* @__PURE__ */ new WeakSet(), c = "guidoPreviewGuarded", g = () => ({ guardPreviewInteractions: (r) => {
   try {
-    const e = r.contentDocument;
-    if (!e)
+    const t = r.contentDocument;
+    if (!t || s.has(t))
       return;
-    o.forEach((n) => {
-      e.addEventListener(n, c, !0);
-    });
-  } catch (e) {
-    console.warn("[usePreviewInteractionGuard] Could not guard preview iframe:", e);
+    delete t.documentElement.dataset[c], E.forEach((n) => {
+      t.addEventListener(n, m, !0);
+    }), t.addEventListener("submit", R, !0), s.add(t), t.documentElement.dataset[c] = "true";
+  } catch (t) {
+    console.warn("[usePreviewInteractionGuard] Could not guard preview iframe:", t);
   }
 } });
 export {
-  a as usePreviewInteractionGuard
+  g as usePreviewInteractionGuard
 };