@useinsider/guido 3.12.0 → 3.13.0-beta.4a55a9f

package/dist/composables/useAllowlist.js

@@ -0,0 +1,50 @@
+import { useAllowlistApi as A } from "../services/allowlistApi.js";
+import { base64EncodeWithSpecialChars as p } from "../utils/base64.js";
+import { useTranslations as h } from "./useTranslations.js";
+import { useUserRole as D } from "./useUserRole.js";
+const f = /(?:https?:\/\/|www\.)[^\s"'<>()]+/gi, E = /&quot;\/\//gi, i = {
+  MANAGE: "journey-builder.domain-allowlist-warning",
+  NON_MANAGE: "settings.allow-list-warning-not-admin-architect",
+  ADD_BUTTON: "settings.allow-list-warning-add-button"
+}, w = /* @__PURE__ */ new Set(), O = (n) => `/settings?openAddModal=true&type=domain&values=${p(n)}#security`, M = () => {
+  const { checkDomain: n } = A(), { getIsManageUser: l } = D(), a = h(), d = (t, s) => {
+    const c = `${t || ""} ${s || ""}`.replace(E, "https://").match(f) || [], e = /* @__PURE__ */ new Set();
+    return c.forEach((r) => {
+      const g = /^https?:\/\//i.test(r) ? r : `https://${r}`;
+      try {
+        const { hostname: u } = new URL(g);
+        u && e.add(u.replace(/^www\./i, "").toLowerCase());
+      } catch {
+      }
+    }), [...e];
+  }, m = async (t) => {
+    if (w.has(t))
+      return !0;
+    try {
+      const s = await n(t);
+      return s && w.add(t), s;
+    } catch (s) {
+      return console.error("[GUIDO_ALLOWLIST] isDomainAllowlisted failed", t, s), !0;
+    }
+  };
+  return { getBlockedDomains: async (t, s) => {
+    try {
+      const o = d(t, s);
+      return o.length ? (await Promise.all(
+        o.map(async (e) => ({ domain: e, allowlisted: await m(e) }))
+      )).filter((e) => !e.allowlisted).map((e) => e.domain) : [];
+    } catch (o) {
+      return console.error("[GUIDO_ALLOWLIST] getBlockedDomains failed", o), [];
+    }
+  }, resolveToast: async (t) => await l() ? {
+    message: a(i.MANAGE),
+    actionButton: {
+      text: a(i.ADD_BUTTON),
+      onClick: () => window.open(O(t.join(",")), "_blank")
+    }
+  } : { message: a(i.NON_MANAGE) } };
+};
+export {
+  O as buildAllowlistSettingsUrl,
+  M as useAllowlist
+};

package/dist/composables/usePreviewInteractionGuard.js

@@ -1,17 +1,42 @@
-const o = ["click", "auxclick", "submit"], c = (t) => {
-  t.preventDefault(), t.stopPropagation();
-}, a = () => ({ blockPreviewInteractions: (r) => {
+import { URLS as o, MERGE_TAGS as a } from "../enums/unsubscribe.js";
+import { UNSUBSCRIBE_LINK_SELECTOR as i } from "../extensions/Blocks/Unsubscribe/utils/constants.js";
+import { BASE_SAFE_URL_SCHEMES as u } from "../utils/urlSchemes.js";
+const E = ["click", "auxclick"], d = [
+  ...Object.values(a),
+  o.UNSUBSCRIBE_URL,
+  o.PREFERENCES_URL
+], l = (e) => {
+  if (e.matches(i))
+    return !0;
+  const r = e.getAttribute("href") ?? "";
+  return d.some((t) => r.includes(t));
+}, S = [...u, "tel:", "sms:"], f = (e) => {
+  const r = (e.getAttribute("href") ?? "").trim();
+  return r === "" || r.startsWith("#") || r.startsWith("{{") ? !1 : S.includes(e.protocol);
+}, m = (e) => {
+  var t, n;
+  const r = (n = (t = e.target) == null ? void 0 : t.closest) == null ? void 0 : n.call(t, "a");
+  if (r) {
+    if (l(r) || !f(r)) {
+      e.preventDefault(), e.stopPropagation();
+      return;
+    }
+    r.setAttribute("target", "_blank"), r.setAttribute("rel", "noopener noreferrer");
+  }
+}, R = (e) => {
+  e.preventDefault(), e.stopPropagation();
+}, s = /* @__PURE__ */ new WeakSet(), c = "guidoPreviewGuarded", g = () => ({ guardPreviewInteractions: (r) => {
   try {
-    const e = r.contentDocument;
-    if (!e)
+    const t = r.contentDocument;
+    if (!t || s.has(t))
       return;
-    o.forEach((n) => {
-      e.addEventListener(n, c, !0);
-    });
-  } catch (e) {
-    console.warn("[usePreviewInteractionGuard] Could not guard preview iframe:", e);
+    delete t.documentElement.dataset[c], E.forEach((n) => {
+      t.addEventListener(n, m, !0);
+    }), t.addEventListener("submit", R, !0), s.add(t), t.documentElement.dataset[c] = "true";
+  } catch (t) {
+    console.warn("[usePreviewInteractionGuard] Could not guard preview iframe:", t);
   }
 } });
 export {
-  a as usePreviewInteractionGuard
+  g as usePreviewInteractionGuard
 };

package/dist/composables/useRecommendationPreview.js

@@ -1,111 +1,112 @@
-import { BLOCK_ROOT_SELECTOR as S, CURRENCY_ATTR as p, CONTAINER_SELECTOR as O } from "../extensions/Blocks/Recommendation/constants/selectors.js";
-import { useRecommendationExtensionStore as h } from "../extensions/Blocks/Recommendation/store/recommendation.js";
-import { formatPrice as E } from "../extensions/Blocks/Recommendation/utils/priceFormatter.js";
-const f = `${S}[recommendation-id]`, C = ".product-old-price", R = /\{\{(?:reco_)?(\d+_\d+_[a-zA-Z0-9_.]+)\}\}/g, T = new RegExp(
+import { BLOCK_ROOT_SELECTOR as f, CURRENCY_ATTR as A, CONTAINER_SELECTOR as O } from "../extensions/Blocks/Recommendation/constants/selectors.js";
+import { useRecommendationExtensionStore as C } from "../extensions/Blocks/Recommendation/store/recommendation.js";
+import { formatPrice as _ } from "../extensions/Blocks/Recommendation/utils/priceFormatter.js";
+import { BASE_SAFE_URL_SCHEMES as R } from "../utils/urlSchemes.js";
+const S = `${f}[recommendation-id]`, h = ".product-old-price", T = /\{\{(?:reco_)?(\d+_\d+_[a-zA-Z0-9_.]+)\}\}/g, b = new RegExp(
   "\\{%\\s*if\\s+([\\s\\S]+?)\\s*%\\}([\\s\\S]*?)(?:\\{%\\s*else\\s*%\\}([\\s\\S]*?))?\\{%\\s*endif\\s*%\\}",
   "g"
 );
-function b(e) {
+function L(e) {
   return e.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
 }
-function _(e) {
-  var s;
-  const n = (s = e.replace(/[\u0000-\u0020]+/g, "").toLowerCase().match(/^([a-z][a-z0-9+.-]*):/)) == null ? void 0 : s[1];
-  return n && n !== "http" && n !== "https" && n !== "mailto" ? "" : e;
+function g(e) {
+  var c;
+  const i = (c = e.replace(/[\u0000-\u0020]+/g, "").toLowerCase().match(/^([a-z][a-z0-9+.-]*):/)) == null ? void 0 : c[1];
+  return i && !R.includes(`${i}:`) ? "" : e;
 }
 function N(e) {
-  const t = e.getAttribute(p.CURRENCY) || "USD", n = e.getAttribute(p.DECIMAL_SEPARATOR) || ".", s = e.getAttribute(p.THOUSAND_SEPARATOR) || ",";
+  const t = e.getAttribute(A.CURRENCY) || "USD", i = e.getAttribute(A.DECIMAL_SEPARATOR) || ".", c = e.getAttribute(A.THOUSAND_SEPARATOR) || ",";
   return {
     code: t,
-    symbol: e.getAttribute(p.SYMBOL) || t,
-    alignment: e.getAttribute(p.ALIGNMENT) === "0" ? "before" : "after",
-    decimalCount: parseInt(e.getAttribute(p.DECIMAL_COUNT) || "2") || 2,
-    decimalSeparator: n,
-    thousandSeparator: s
+    symbol: e.getAttribute(A.SYMBOL) || t,
+    alignment: e.getAttribute(A.ALIGNMENT) === "0" ? "before" : "after",
+    decimalCount: parseInt(e.getAttribute(A.DECIMAL_COUNT) || "2") || 2,
+    decimalSeparator: i,
+    thousandSeparator: c
   };
 }
-function g(e, t) {
+function E(e, t) {
   return (e == null ? void 0 : e[t]) ?? Object.values(e ?? {})[0] ?? 0;
 }
-function L(e, t) {
-  const n = g(e.original_price, t), s = g(e.price, t), o = n > 0 ? Math.round((n - s) / n * 100) : 0;
-  return o > 0 ? `${o}%` : "0%";
+function $(e, t) {
+  const i = E(e.original_price, t), c = E(e.price, t), n = i > 0 ? Math.round((i - c) / i * 100) : 0;
+  return n > 0 ? `${n}%` : "0%";
 }
-function P(e, t, n, s, o, a) {
-  s.forEach((i, c) => {
-    const r = (m) => `${n}_${c}_${m}`, u = E({ price: g(i.price, o.code), currency: o }), l = E({ price: g(i.original_price, o.code), currency: o }), d = L(i, o.code);
-    e.set(r("name"), i.name ?? ""), e.set(r("image_url"), _(i.image_url ?? "")), e.set(r("url"), _(i.url ?? "")), e.set(r("item_id"), i.item_id ?? ""), e.set(r("currency"), ""), e.set(r("price"), u), e.set(r("original_price"), l), e.set(r("discount"), d), e.set(r("omnibus_price"), l), e.set(r("omnibus_discount"), d), a && u === l && t.add(`${n}_${c}`), Object.entries(i.product_attributes ?? {}).forEach(([m, A]) => {
-      e.set(r(`product_attribute.${m}`), String(A)), e.set(r(m), String(A));
+function P(e, t, i, c, n, a) {
+  c.forEach((o, s) => {
+    const r = (m) => `${i}_${s}_${m}`, u = _({ price: E(o.price, n.code), currency: n }), l = _({ price: E(o.original_price, n.code), currency: n }), d = $(o, n.code);
+    e.set(r("name"), o.name ?? ""), e.set(r("image_url"), g(o.image_url ?? "")), e.set(r("url"), g(o.url ?? "")), e.set(r("item_id"), o.item_id ?? ""), e.set(r("currency"), ""), e.set(r("price"), u), e.set(r("original_price"), l), e.set(r("discount"), d), e.set(r("omnibus_price"), l), e.set(r("omnibus_discount"), d), a && u === l && t.add(`${i}_${s}`), Object.entries(o.product_attributes ?? {}).forEach(([m, p]) => {
+      e.set(r(`product_attribute.${m}`), String(p)), e.set(r(m), String(p));
     });
   });
 }
-function $(e, t) {
-  const n = e.match(/^(.+?)\s*(!=|==)\s*"([^"]*)"$/);
-  if (!n)
+function z(e, t) {
+  const i = e.match(/^(.+?)\s*(!=|==)\s*"([^"]*)"$/);
+  if (!i)
     return !0;
-  const [, s, o, a] = n, i = t.get(s.trim()) ?? "";
-  return o === "!=" ? i !== a : i === a;
+  const [, c, n, a] = i, o = t.get(c.trim()) ?? "";
+  return n === "!=" ? o !== a : o === a;
 }
-function z(e, t) {
+function w(e, t) {
   return e.replace(
-    T,
-    (n, s, o, a) => s.split(/\s+and\s+/).every((c) => $(c.trim(), t)) ? o : a ?? ""
+    b,
+    (i, c, n, a) => c.split(/\s+and\s+/).every((s) => z(s.trim(), t)) ? n : a ?? ""
   );
 }
-function w(e) {
+function D(e) {
   let t = e;
   for (; t.children.length === 1; )
     [t] = t.children;
   return t;
 }
-function D(e, t) {
-  var i;
+function I(e, t) {
+  var o;
   if (!t.size)
     return e;
-  const n = e.replaceAll("{%", "<!--{%").replaceAll("%}", "%}-->"), s = new DOMParser().parseFromString(n, "text/html");
-  s.querySelectorAll(f).forEach((c) => {
-    const r = Number(c.getAttribute("recommendation-id"));
+  const i = e.replaceAll("{%", "<!--{%").replaceAll("%}", "%}-->"), c = new DOMParser().parseFromString(i, "text/html");
+  c.querySelectorAll(S).forEach((s) => {
+    const r = Number(s.getAttribute("recommendation-id"));
     if (!Number.isFinite(r))
       return;
-    const u = c.querySelectorAll(O);
-    (u.length ? Array.from(u) : [c]).forEach((d) => {
-      d.querySelectorAll(C).forEach((m, A) => {
-        t.has(`${r}_${A}`) && (w(m).textContent = "");
+    const u = s.querySelectorAll(O);
+    (u.length ? Array.from(u) : [s]).forEach((d) => {
+      d.querySelectorAll(h).forEach((m, p) => {
+        t.has(`${r}_${p}`) && (D(m).textContent = "");
       });
     });
   });
-  const o = (i = e.match(/<!DOCTYPE[^>]*>/i)) == null ? void 0 : i[0];
-  return ((o ? `${o}
-` : "") + s.documentElement.outerHTML).replaceAll("<!--{%", "{%").replaceAll("%}-->", "%}").replaceAll("&lt;!--{%", "{%").replaceAll("%}--&gt;", "%}");
+  const n = (o = e.match(/<!DOCTYPE[^>]*>/i)) == null ? void 0 : o[0];
+  return ((n ? `${n}
+` : "") + c.documentElement.outerHTML).replaceAll("<!--{%", "{%").replaceAll("%}-->", "%}").replaceAll("&lt;!--{%", "{%").replaceAll("%}--&gt;", "%}");
 }
-function I(e) {
+function y(e) {
   if (!e || !e.includes("recommendation-block-v2"))
     return e;
-  const t = h(), n = new DOMParser().parseFromString(e, "text/html"), s = Array.from(n.querySelectorAll(f)), o = /* @__PURE__ */ new Map(), a = /* @__PURE__ */ new Set();
-  if (s.forEach((c) => {
+  const t = C(), i = new DOMParser().parseFromString(e, "text/html"), c = Array.from(i.querySelectorAll(S)), n = /* @__PURE__ */ new Map(), a = /* @__PURE__ */ new Set();
+  if (c.forEach((s) => {
     var l;
-    const r = Number(c.getAttribute("recommendation-id"));
+    const r = Number(s.getAttribute("recommendation-id"));
     if (!Number.isFinite(r))
       return;
     const u = ((l = t.blockStates[r]) == null ? void 0 : l.recommendationProducts) ?? [];
     u.length && P(
-      o,
+      n,
       a,
       r,
       u,
-      N(c),
-      c.getAttribute("hide-price") === "true"
+      N(s),
+      s.getAttribute("hide-price") === "true"
     );
-  }), !o.size)
+  }), !n.size)
     return e;
-  let i = D(e, a);
-  return i = i.replace(
-    R,
-    (c, r) => o.has(r) ? b(o.get(r)) : c
-  ), i = z(i, o), i;
+  let o = I(e, a);
+  return o = o.replace(
+    T,
+    (s, r) => n.has(r) ? L(n.get(r)) : s
+  ), o = w(o, n), o;
 }
-const q = () => ({ substituteRecommendationPreview: I });
+const q = () => ({ substituteRecommendationPreview: y });
 export {
-  I as substituteRecommendationPreview,
+  y as substituteRecommendationPreview,
   q as useRecommendationPreview
 };

package/dist/composables/useSave.js

@@ -1,32 +1,51 @@
-import { useActionsApi as H } from "./useActionsApi.js";
-import { useConfig as y } from "./useConfig.js";
-import { useSaveStart as w, useSaveComplete as k } from "./useGuidoActions.js";
+import { useActionsApi as T } from "./useActionsApi.js";
+import { useConfig as k } from "./useConfig.js";
+import { useSaveStart as B, useSaveComplete as E } from "./useGuidoActions.js";
 import { useSyncModuleExtractor as q } from "./useSyncModuleExtractor.js";
-import { useStripoApi as C } from "../services/stripoApi.js";
-import { useTemplatePreparation as E } from "../utils/templatePreparation.js";
-import { useHtmlValidator as B } from "./useHtmlValidator.js";
-import { useCouponBlockValidator as L } from "./validators/useCouponBlockValidator.js";
-import { useLiquidValidator as P } from "./validators/useLiquidValidator.js";
-import { useUnsubscribeBlockValidator as U } from "./validators/useUnsubscribeBlockValidator.js";
-const K = () => {
-  const o = w(), s = k(), { validateHtml: r } = B(), { validateLiquidSyntax: l } = P(), { validateCouponBlockTags: n } = L(), { validateUnsubscribeBlockUniqueness: d, validateUnsubscribeBlockHasTemplate: c } = U(), { callbacks: i, isFeatureEnabled: u } = y(), { extractSyncModuleData: m } = q(), { setSyncModuleUnsubscriptionPages: p } = C(), { editorSave: v } = H();
-  return { save: async (f = !1, S = !1) => {
-    var a;
-    o();
-    const { prepareTemplateDetails: V } = E(), t = await V();
-    if (!n(t.compiledHtml) || !d(t.compiledHtml) || !c(t.compiledHtml))
+import { ToasterTypeOptions as C } from "../enums/toaster.js";
+import { useStripoApi as D } from "../services/stripoApi.js";
+import { useTemplatePreparation as L } from "../utils/templatePreparation.js";
+import { useAllowlist as P } from "./useAllowlist.js";
+import { useHtmlValidator as U } from "./useHtmlValidator.js";
+import { useToaster as A } from "./useToaster.js";
+import { useCouponBlockValidator as M } from "./validators/useCouponBlockValidator.js";
+import { useLiquidValidator as h } from "./validators/useLiquidValidator.js";
+import { useUnsubscribeBlockValidator as F } from "./validators/useUnsubscribeBlockValidator.js";
+const $ = () => {
+  const n = B(), l = E(), { validateHtml: c } = U(), { validateLiquidSyntax: d } = h(), { validateCouponBlockTags: m } = M(), { validateUnsubscribeBlockUniqueness: u, validateUnsubscribeBlockHasTemplate: p } = F(), { callbacks: e, isFeatureEnabled: a } = k(), { extractSyncModuleData: f } = q(), { setSyncModuleUnsubscriptionPages: v } = D(), { editorSave: S } = T(), { showToaster: b } = A(), { getBlockedDomains: w, resolveToast: V } = P();
+  return { save: async (y = !1, s = !1) => {
+    var r;
+    n();
+    const { prepareTemplateDetails: H } = L(), t = await H();
+    if (!m(t.compiledHtml) || !u(t.compiledHtml) || !p(t.compiledHtml))
       return;
-    if (u("liquidSyntax")) {
-      if (!await l(t.compiledHtml))
+    if (a("liquidSyntax")) {
+      if (!await d(t.compiledHtml))
         return;
-    } else if (!await r(t.compiledHtml, t.dynamicContentList, !0))
+    } else if (!await c(t.compiledHtml, t.dynamicContentList, !0))
       return;
-    if ((a = i.value) != null && a.externalValidation && !await i.value.externalValidation(t) || !await v())
+    if ((r = e.value) != null && r.externalValidation && !await e.value.externalValidation(t))
       return;
-    const { unsubscribePayload: b, stripoModules: x } = m(t.rawHtml);
-    return await p(b), t.modules = x, f || s({ ...t, silent: S }), t;
+    if (a("allowlistEnabled")) {
+      const i = await w(t.compiledHtml, t.css);
+      if (i.length) {
+        if (!s) {
+          const o = await V(i);
+          o != null && o.message && b({
+            type: C.Warning,
+            message: o.message,
+            actionButton: o.actionButton
+          });
+        }
+        return;
+      }
+    }
+    if (!await S())
+      return;
+    const { unsubscribePayload: g, stripoModules: x } = f(t.rawHtml);
+    return await v(g), t.modules = x, y || l({ ...t, silent: s }), t;
   } };
 };
 export {
-  K as useSave
+  $ as useSave
 };

package/dist/composables/useStripo.js

@@ -1,31 +1,44 @@
-import { useActionsApi as x } from "./useActionsApi.js";
+import { useActionsApi as L } from "./useActionsApi.js";
 import { useBlocksConfig as O } from "./useBlocksConfig.js";
 import { useConfig as q } from "./useConfig.js";
 import { useCustomInterfaceAppearance as H } from "./useCustomInterfaceAppearance.js";
-import { useFullStoryBridge as L } from "./useFullStoryBridge.js";
-import { useModuleDynamicContentRepair as N } from "./useModuleDynamicContentRepair.js";
+import { useFullStoryBridge as N } from "./useFullStoryBridge.js";
+import { useModuleDynamicContentRepair as j } from "./useModuleDynamicContentRepair.js";
 import { useStripoEventHandler as z } from "./useStripoEventHandler.js";
 import { useStripoNotifications as $ } from "./useStripoNotifications.js";
 import { useToaster as G } from "./useToaster.js";
 import { localePatch as J } from "../config/i18n/index.js";
-import { en as E } from "../config/i18n/en/index.js";
+import { en as w } from "../config/i18n/en/index.js";
 import { ToasterTypeOptions as X } from "../enums/toaster.js";
-import { useStripoApi as j } from "../services/stripoApi.js";
-import K from "../static/styles/customEditorStyle.css.js";
-import { useEditorStore as w } from "../stores/editor.js";
-import { buildMergeTagEntries as Q, flattenDynamicContentList as W } from "../utils/genericUtil.js";
-import Y from "../package.json.js";
-const he = (b, l) => {
-  const { features: c, template: u, isFeatureEnabled: m } = q(), { handleError: p, showToaster: k } = G(), { getToken: T, getCustomFonts: v, getSyncModulesStatus: B } = j(), { handleEvent: F } = z(), { handleModuleAdd: M } = N(), { getStripoBlocksConfig: A } = O(), { getStripoNotifications: V } = $(), _ = async (n, i = [], r = !1) => {
-    var S, y, h, C;
-    const e = w(), { html: f, css: a } = n, { baseBlocks: o, extensions: d } = await A(), g = ((S = c.value) == null ? void 0 : S.displayConditions) ?? !0, P = ((y = c.value) == null ? void 0 : y.modulesDisabled) ?? !1, I = ((h = u.value) == null ? void 0 : h.forceRecreate) ?? !1;
+import { useStripoApi as K } from "../services/stripoApi.js";
+import Q from "../static/styles/customEditorStyle.css.js";
+import { useEditorStore as b } from "../stores/editor.js";
+import { buildMergeTagEntries as W, flattenDynamicContentList as Y } from "../utils/genericUtil.js";
+import Z from "../package.json.js";
+let n = null;
+const Ct = () => {
+  const { features: c, template: u, isFeatureEnabled: m } = q(), { handleError: p, showToaster: k } = G(), { getToken: T, getCustomFonts: v, getSyncModulesStatus: B } = K(), { handleEvent: F } = z(), { handleModuleAdd: M } = j(), { getStripoBlocksConfig: A } = O(), { getStripoNotifications: V } = $(), f = () => n || (n = new Promise((i, s) => {
+    var l;
+    if (document.getElementById("UiEditorScript")) {
+      i();
+      return;
+    }
+    const o = Z.guido, r = `https://email-static.useinsider.com/guido/${(l = o == null ? void 0 : o.stripo) == null ? void 0 : l.version}/UIEditor.js`, t = document.createElement("script");
+    t.id = "UiEditorScript", t.type = "module", t.src = r, t.onload = () => i(), t.onerror = () => {
+      t.remove(), s(new Error(`Failed to load Stripo UIEditor script from S3: ${r}`));
+    }, document.body.appendChild(t);
+  }), n.catch(() => {
+    n = null;
+  }), n), _ = async (i, s, o, a = [], r = !1) => {
+    var y, E, h, C;
+    const t = b(), { html: l, css: D } = i, { baseBlocks: g, extensions: R } = await A(), S = ((y = c.value) == null ? void 0 : y.displayConditions) ?? !0, P = ((E = c.value) == null ? void 0 : E.modulesDisabled) ?? !1, U = ((h = u.value) == null ? void 0 : h.forceRecreate) ?? !1;
     await window.UIEditor.initEditor(
       document.querySelector("#guido-editor"),
       {
-        metadata: b,
-        html: f,
-        css: a,
-        forceRecreate: I,
+        metadata: s,
+        html: l,
+        css: D,
+        forceRecreate: U,
         locale: "en",
         undoButtonSelector: "#guido__undo-button",
         redoButtonSelector: "#guido__redo-button",
@@ -35,9 +48,9 @@ const he = (b, l) => {
         customAppearanceMergetags: !m("liquidSyntax"),
         customAppearanceMergetagsBorderColor: "#f1f3fe",
         customAppearanceMergetagsBackgroundColor: "#f1f3fe",
-        customViewStyles: K,
-        conditionsEnabled: g,
-        customConditionsEnabled: g,
+        customViewStyles: Q,
+        conditionsEnabled: S,
+        customConditionsEnabled: S,
         enableXSSSecurity: !0,
         modulesDisabled: P,
         syncModulesEnabled: r,
@@ -49,50 +62,50 @@ const he = (b, l) => {
         selectElementAfterDrop: !0,
         sameFontSizeForOutlook: !0,
         allowedScriptSourceDomains: "https://email-static.useinsider.com https://edge.fullstory.com https://rs.fullstory.com",
-        ...o ? { baseBlocks: o } : {},
+        ...g ? { baseBlocks: g } : {},
         editorFonts: {
           showDefaultStandardFonts: !0,
           showDefaultNotStandardFonts: !0,
-          customFonts: i
+          customFonts: a
         },
         mergeTags: [
           {
-            entries: Q(
-              l.preselectedDynamicContentList,
-              W((C = u.value) == null ? void 0 : C.dynamicContentList),
+            entries: W(
+              o.preselectedDynamicContentList,
+              Y((C = u.value) == null ? void 0 : C.dynamicContentList),
               m("liquidSyntax")
             )
           }
         ],
-        async onTokenRefreshRequest(t) {
+        async onTokenRefreshRequest(e) {
           try {
-            const s = await T();
-            t(s);
-          } catch (s) {
-            p(s, "Failed to refresh token");
+            const d = await T();
+            e(d);
+          } catch (d) {
+            p(d, "Failed to refresh token");
           }
         },
         onTemplateLoaded() {
           try {
-            const { importCss: t } = H(), { activateCustomViewStyles: s, updateTimerInClonedTemplate: R } = x(), { injectFullStory: U } = L();
-            t(), s(), U(), R(), l.onReady(), e.isStripoInitialized = !0, e.loadingStatus = !1, setTimeout(() => {
-              e.hasChanges = !1;
+            const { importCss: e } = H(), { activateCustomViewStyles: d, updateTimerInClonedTemplate: I } = L(), { injectFullStory: x } = N();
+            e(), d(), x(), I(), o.onReady(), t.isStripoInitialized = !0, t.loadingStatus = !1, setTimeout(() => {
+              t.hasChanges = !1;
             }, 1e3);
-          } catch (t) {
-            p(t, "Failed to load custom interface appearance");
+          } catch (e) {
+            p(e, "Failed to load custom interface appearance");
           }
         },
-        onCodeEditorVisibilityChanged(t) {
-          e.isCodeEditorOpen = t;
+        onCodeEditorVisibilityChanged(e) {
+          t.isCodeEditorOpen = e;
         },
-        onEditorVisualModeChanged(t) {
-          e.editorVisualMode = t.toLowerCase();
+        onEditorVisualModeChanged(e) {
+          t.editorVisualMode = e.toLowerCase();
         },
-        onVersionHistoryVisibilityChanged(t) {
-          e.isVersionHistoryOpen = t;
+        onVersionHistoryVisibilityChanged(e) {
+          t.isVersionHistoryOpen = e;
         },
         onDataChanged() {
-          e.hasChanges = !0;
+          t.hasChanges = !0;
         },
         onEvent: F,
         onModuleAdd: M,
@@ -102,45 +115,35 @@ const he = (b, l) => {
           ".in-on-board-wrapper",
           ".in-drawer__container"
         ],
-        extensions: d,
+        extensions: R,
         localePatch: J
       }
     );
-  }, D = (n) => new Promise((i, r) => {
-    var d;
-    if (document.getElementById("UiEditorScript")) {
-      Promise.resolve(n()).then(i, r);
-      return;
-    }
-    const e = Y.guido, a = `https://email-static.useinsider.com/guido/${(d = e == null ? void 0 : e.stripo) == null ? void 0 : d.version}/UIEditor.js`, o = document.createElement("script");
-    o.id = "UiEditorScript", o.type = "module", o.src = a, o.onload = () => {
-      Promise.resolve(n()).then(i, r);
-    }, o.onerror = () => {
-      r(new Error(`Failed to load Stripo UIEditor script from S3: ${a}`));
-    }, document.body.appendChild(o);
-  });
-  return { initPlugin: async (n) => {
-    const i = w();
+  };
+  return { initPlugin: async (i, s, o) => {
+    const a = b();
     try {
-      await D(async () => {
-        const [r, e] = await Promise.all([
-          v(),
-          B()
-        ]);
-        i.syncModulesEnabled = e, await _(n, r, e);
-      });
+      await f();
+      const [r, t] = await Promise.all([
+        v(),
+        B()
+      ]);
+      a.syncModulesEnabled = t, await _(i, s, o, r, t);
     } catch {
-      i.loadingStatus = !1, k({
+      a.loadingStatus = !1, k({
         type: X.Error,
-        message: E["An error has occurred. Please report the error code to support."],
+        message: w["An error has occurred. Please report the error code to support."],
         actionButton: {
-          text: E["Reload page"],
+          text: w["Reload page"],
           onClick: () => window.location.reload()
         }
       });
     }
+  }, preloadRuntime: () => {
+    f().catch(() => {
+    });
   } };
 };
 export {
-  he as useStripo
+  Ct as useStripo
 };

package/dist/composables/useTranslations.js

@@ -1,18 +1,20 @@
+import "../@types/config/schemas.js";
+import { DEFAULT_EDITOR } from "../@types/config/defaults.js";
 import memoize from "../node_modules/lodash-es/memoize.js";
 import { ref } from "vue";
 import { useConfig } from "./useConfig.js";
 const useTranslations = () => {
   var o, e;
-  const { config } = useConfig(), translationsPath = ((e = (o = config.value) == null ? void 0 : o.editor) == null ? void 0 : e.translationsPath) || "window.trans.en", translations = ref(eval(translationsPath)), trans = (n, t) => {
-    const r = translations.value[n];
-    return r ? t ? Object.entries(t).reduce(
+  const { config } = useConfig(), translationsPath = ((e = (o = config.value) == null ? void 0 : o.editor) == null ? void 0 : e.translationsPath) || DEFAULT_EDITOR.translationsPath, translations = ref(eval(translationsPath)), trans = (t, n) => {
+    const r = translations.value[t];
+    return r ? n ? Object.entries(n).reduce(
       (s, [i, a]) => s.replace(new RegExp(`{${i}}`, "g"), String(a)),
       r
-    ) : r : (console.warn(`Translation key not found: ${n}`), n);
+    ) : r : (console.warn(`Translation key not found: ${t}`), t);
   };
   return memoize(
     trans,
-    (n, t) => !t || Object.keys(t).length === 0 ? n : JSON.stringify({ key: n, params: t })
+    (t, n) => !n || Object.keys(n).length === 0 ? t : JSON.stringify({ key: t, params: n })
   );
 };
 export {

package/dist/composables/useUserRole.js

@@ -0,0 +1,12 @@
+import { RoleEnums as t } from "../enums/roles.js";
+import { useAllowlistApi as s } from "../services/allowlistApi.js";
+let e = null, l = null;
+const c = () => {
+  const { getUserRole: n } = s();
+  return { getIsManageUser: async () => e !== null ? e : (l || (l = n().then((r) => (e = r === t.MANAGE_USERS, e)).catch((r) => (console.error("[GUIDO_ALLOWLIST] role fetch failed", r), !1)).finally(() => {
+    l = null;
+  })), l) };
+};
+export {
+  c as useUserRole
+};

package/dist/enums/roles.js

@@ -0,0 +1,4 @@
+var e = /* @__PURE__ */ ((r) => (r.MANAGE_USERS = "manage-users", r))(e || {});
+export {
+  e as RoleEnums
+};