@aglyn/aglyn 1.0.0-beta.218 → 1.0.0-beta.220

package/src/lib/app-utils/node-definition-sanitizer.js

@@ -15,17 +15,21 @@
  * limitations under the License.
  */ /**
  * The node-definition sanitizer and the component allowlists (AGL-2939):
- * what a node tree must satisfy before it lands on a canvas that did not
- * author it — a marketplace install, and a tree a model generated. Core
- * rather than the marketplace plugin, because two plugins pass their trees
- * through it and a plugin may not import another plugin's model; the
+ * what a PORTABLE node tree must satisfy — one that lands on a canvas that did
+ * not author it. Today that is a tree installed from another workspace and a
+ * tree a model generated, and the rule is the same for both: whatever reaches
+ * the canvas renders in a site whose author never saw it.
+ *
+ * The platform's rule, so named for what it guards rather than for who asks
+ * (AGL-3080): any plugin that brings a tree in from elsewhere passes it
+ * through here, and a plugin may not import another plugin's model. The
  * marketplace re-exports it under the names its publishers use.
  */ import { _ as _extends } from "@swc/helpers/_/_extends";
 import { matchComponentPropToken } from "./compose-reusable-components.js";
 import { isSafeNodeUrl, SAFE_SRC_PATTERN } from "./node-url-policy.js";
 import { SAFE_HREF_PATTERN } from "./screen-link-value.js";
 /**
- * Component ids publishable to the marketplace. Mirrors the persisted ids in
+ * Component ids a portable tree may hold. Mirrors the persisted ids in
  * plugins-mui (plugin.spec.ts) minus `reusableInstance` — nested
  * instances would smuggle references to another tenant's private
  * definitions — and minus `layoutSlot`, which is layout chrome. Keep sorted.
@@ -42,7 +46,7 @@ import { SAFE_HREF_PATTERN } from "./screen-link-value.js";
  * came to be missing (AGL-1033): every Sections & Blocks preset composes it,
  * so the whole category was unpublishable. `blocks-publishable.spec.ts` walks
  * the presets and fails if this list falls behind them again.
- */ export const MARKETPLACE_COMPONENT_ID_ALLOWLIST = [
+ */ export const PORTABLE_COMPONENT_ID_ALLOWLIST = [
     'form',
     'formField',
     'image',
@@ -76,7 +80,7 @@ import { SAFE_HREF_PATTERN } from "./screen-link-value.js";
  * scripts, so this isn't XSS — it's that arbitrary markup sent from someone
  * else's domain is a phishing and tracking-pixel vector that no amount of
  * render-time sanitization makes reviewable. Keep sorted.
- */ export const MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST = [
+ */ export const PORTABLE_EMAIL_COMPONENT_ID_ALLOWLIST = [
     'emailButton',
     'emailDivider',
     'emailImage',
@@ -108,8 +112,8 @@ import { SAFE_HREF_PATTERN } from "./screen-link-value.js";
  * re-making, and everything rich text can express in an email — a heading, a
  * paragraph, a link, a button — the remaining blocks already express as a
  * structured tree we render ourselves.
- */ export const MARKETPLACE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST = MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST.filter((componentId)=>componentId !== 'emailRichtext');
-/** Serialized definition size cap (Firestore doc limit is 1 MiB). */ export const MARKETPLACE_DEFINITION_MAX_BYTES = 200 * 1024;
+ */ export const PORTABLE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST = PORTABLE_EMAIL_COMPONENT_ID_ALLOWLIST.filter((componentId)=>componentId !== 'emailRichtext');
+/** Serialized definition size cap (Firestore doc limit is 1 MiB). */ export const PORTABLE_DEFINITION_MAX_BYTES = 200 * 1024;
 const KEPT_NODE_KEYS = [
     '$id',
     'componentId',
@@ -123,10 +127,10 @@ const KEPT_NODE_KEYS = [
  * elements' navigable protocols, and https, inline or site-relative images
  * (see `node-url-policy`).
  *
- * Exported under these names for the marketplace's property sanitizer, which
- * holds a published property's Link default to the same rule as a published
- * node's `href`, and an Image default to the `src` rule.
- */ export { SAFE_HREF_PATTERN as MARKETPLACE_SAFE_HREF, SAFE_SRC_PATTERN as MARKETPLACE_SAFE_SRC,  };
+ * Exported under these names for a property sanitizer (the marketplace's is
+ * one), which holds a portable property's Link default to the same rule as a
+ * portable node's `href`, and an Image default to the `src` rule.
+ */ export { SAFE_HREF_PATTERN as PORTABLE_SAFE_HREF, SAFE_SRC_PATTERN as PORTABLE_SAFE_SRC,  };
 /**
  * The property kind whose value may fill each address prop through a binding
  * (AGL-2933): a Link feeds an `href`, an Image a `src`. Each kind's default is
@@ -238,11 +242,11 @@ const KEPT_NODE_KEYS = [
  * that are spread onto the DOM (`dangerouslySetInnerHTML`, `on*`, `href`,
  * `src`) are hardened HERE as well, because publishing hands them to a
  * different org's render tree.
- */ export function sanitizeMarketplaceDefinition(definition, options) {
+ */ export function sanitizePortableDefinition(definition, options) {
     var _ref;
     var _options_extraComponentIds;
     const { rootId, nodes } = definition;
-    const base = (_ref = options == null ? void 0 : options.componentIds) != null ? _ref : MARKETPLACE_COMPONENT_ID_ALLOWLIST;
+    const base = (_ref = options == null ? void 0 : options.componentIds) != null ? _ref : PORTABLE_COMPONENT_ID_ALLOWLIST;
     const allowed = (options == null ? void 0 : (_options_extraComponentIds = options.extraComponentIds) == null ? void 0 : _options_extraComponentIds.length) ? [
         ...base,
         ...options.extraComponentIds
@@ -328,7 +332,7 @@ const KEPT_NODE_KEYS = [
             error: 'Definition is not serializable'
         };
     }
-    if (serialized.length > MARKETPLACE_DEFINITION_MAX_BYTES) {
+    if (serialized.length > PORTABLE_DEFINITION_MAX_BYTES) {
         return {
             ok: false,
             error: 'Definition is too large to publish'
@@ -356,11 +360,11 @@ const KEPT_NODE_KEYS = [
     };
 }
 /**
- * Converts a sanitized marketplace/AI definition (normalized map) into the
+ * Converts a sanitized portable definition (normalized map) into the
  * nested node shape `canvas.addNodeFromPreset` grafts — ids regenerate on
  * insert, so collisions with existing canvas nodes are impossible
  * (AGL-169). A seen-set guards malformed self-referencing trees.
- */ export function marketplaceDefinitionToNested(rootId, nodes) {
+ */ export function portableDefinitionToNested(rootId, nodes) {
     const seen = new Set();
     const build = (id)=>{
         var _node_nodes;
@@ -380,11 +384,11 @@ const KEPT_NODE_KEYS = [
     return build(rootId);
 }
 /**
- * Field types a published dataset schema may declare (AGL-657). Mirrors
+ * Field types a portable dataset schema may declare (AGL-657). Mirrors
  * `DATASET_FIELD_TYPES` in core; duplicated rather than imported to keep this
  * module dependency-free (it is imported by API routes and client components
  * alike), and asserted against the source of truth in the spec.
- */ export const MARKETPLACE_DATASET_FIELD_TYPES = [
+ */ export const PORTABLE_DATASET_FIELD_TYPES = [
     'bool',
     'bytes',
     'coordinates',

package/src/lib/app-utils/node-definition-sanitizer.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/node-definition-sanitizer.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The node-definition sanitizer and the component allowlists (AGL-2939):\n * what a node tree must satisfy before it lands on a canvas that did not\n * author it — a marketplace install, and a tree a model generated. Core\n * rather than the marketplace plugin, because two plugins pass their trees\n * through it and a plugin may not import another plugin's model; the\n * marketplace re-exports it under the names its publishers use.\n */\n\nimport { isFirstPartyMediaSrc } from './media-ref'\nimport { matchComponentPropToken } from './compose-reusable-components'\nimport {\n  isSafeNodeUrl,\n  type NodeUrlProp,\n  SAFE_SRC_PATTERN,\n} from './node-url-policy'\nimport { SAFE_HREF_PATTERN } from './screen-link-value'\n\n/**\n * Component ids publishable to the marketplace. Mirrors the persisted ids in\n * plugins-mui (plugin.spec.ts) minus `reusableInstance` — nested\n * instances would smuggle references to another tenant's private\n * definitions — and minus `layoutSlot`, which is layout chrome. Keep sorted.\n *\n * The rule this list encodes is \"inert and self-contained\": an element that\n * renders from its own props travels to another workspace intact. What stays\n * out is what cannot — raw-HTML escape hatches (`customHtml`), references to\n * another tenant's documents (`reusableInstance`), third-party code\n * (`plugin`), host chrome (`layoutSlot`) and anything bound to the source\n * site's data (`collection`, `product`).\n *\n * It must cover everything the besigner's palette offers under those terms, or\n * the catalogue promises what the exporter refuses — which is how `section`\n * came to be missing (AGL-1033): every Sections & Blocks preset composes it,\n * so the whole category was unpublishable. `blocks-publishable.spec.ts` walks\n * the presets and fails if this list falls behind them again.\n */\nexport const MARKETPLACE_COMPONENT_ID_ALLOWLIST: readonly string[] = [\n  'form',\n  'formField',\n  'image',\n  'muiAppBar',\n  'muiButton',\n  'muiContainer',\n  'muiList',\n  'muiListItem',\n  'muiListItemText',\n  'muiScreenLink',\n  'muiStack',\n  'muiToolbar',\n  'muiTypography',\n  'searchBox',\n  // A semantic wrapper — `<section>`/`<footer>`/`<nav>` plus styling, with no\n  // behaviour and no binding to the site it came from.\n  'section',\n  'socialLinks',\n  'videoEmbed',\n]\n\n/**\n * Email block ids publishable as an `emailTemplate` (AGL-657).\n *\n * A separate list from the page allowlist because the two vocabularies don't\n * overlap — an email design is built entirely from `plugins-email` blocks, and\n * page components (MUI, forms, video) don't survive an email client anyway.\n *\n * `emailHtml` is excluded deliberately, for the same reason `reusableInstance`\n * is excluded above: it is a raw-HTML escape hatch, and a published template\n * lands in another org's OUTGOING CUSTOMER EMAIL. Email clients don't run\n * scripts, so this isn't XSS — it's that arbitrary markup sent from someone\n * else's domain is a phishing and tracking-pixel vector that no amount of\n * render-time sanitization makes reviewable. Keep sorted.\n */\nexport const MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST: readonly string[] = [\n  'emailButton',\n  'emailDivider',\n  'emailImage',\n  'emailProduct',\n  'emailRichtext',\n  'emailSection',\n  'emailSpacer',\n  'emailText',\n]\n\n/**\n * Email block ids publishable as an `emailStarter` — the transactional list\n * minus `emailRichtext`.\n *\n * Derived rather than written out, so a block added to the list above cannot\n * silently miss this one. What it subtracts is the reason it exists.\n *\n * `emailRichtext` holds its content in an `html` prop, and the email renderer's\n * `sanitize` hook defaults to identity with no production caller supplying one\n * — so that prop reaches the recipient's inbox exactly as authored. On a\n * transactional design that is the site's own author writing their own mail. In\n * a STARTER it is a stranger's markup mailed from the shared sending domain\n * under the tenant's From header, which is the raw-HTML escape hatch\n * `emailHtml` was excluded for, wearing a friendlier block name. A remote\n * `<img>` inside it is a tracking pixel that the src policy on `emailImage`\n * would otherwise have caught.\n *\n * Subtracting the block is deliberate rather than sanitizing its markup: an\n * allowlist over someone else's HTML is a judgment we would have to keep\n * re-making, and everything rich text can express in an email — a heading, a\n * paragraph, a link, a button — the remaining blocks already express as a\n * structured tree we render ourselves.\n */\nexport const MARKETPLACE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST: readonly string[] =\n  MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST.filter(\n    (componentId) => componentId !== 'emailRichtext',\n  )\n\n/** Serialized definition size cap (Firestore doc limit is 1 MiB). */\nexport const MARKETPLACE_DEFINITION_MAX_BYTES = 200 * 1024\n\nconst KEPT_NODE_KEYS = [\n  '$id',\n  'componentId',\n  'pluginId',\n  'parentId',\n  'props',\n  'nodes',\n] as const\n\n/**\n * The address rules a published node's `href` and `src` meet — the linking\n * elements' navigable protocols, and https, inline or site-relative images\n * (see `node-url-policy`).\n *\n * Exported under these names for the marketplace's property sanitizer, which\n * holds a published property's Link default to the same rule as a published\n * node's `href`, and an Image default to the `src` rule.\n */\nexport {\n  SAFE_HREF_PATTERN as MARKETPLACE_SAFE_HREF,\n  SAFE_SRC_PATTERN as MARKETPLACE_SAFE_SRC,\n}\n\n/**\n * The property kind whose value may fill each address prop through a binding\n * (AGL-2933): a Link feeds an `href`, an Image a `src`. Each kind's default is\n * held to that prop's own rule wherever a declaration is published, so the\n * binding carries nothing a literal in the same place could not.\n */\nconst URL_PROP_KIND: Readonly<Record<NodeUrlProp, string>> = {\n  href: 'href',\n  src: 'image',\n}\n\n/**\n * Declared property names by the address prop their kind may fill — the\n * index {@link sanitizePublishedNodeProps} reads a binding against.\n */\nfunction urlBindingsOf(\n  declaredProps: ReadonlyArray<{ name?: unknown; type?: unknown }> | undefined,\n): ReadonlyMap<string, NodeUrlProp> {\n  const bindings = new Map<string, NodeUrlProp>()\n  for (const prop of declaredProps ?? []) {\n    if (typeof prop?.name !== 'string' || !prop.name) continue\n    if (prop.type === URL_PROP_KIND.href) bindings.set(prop.name, 'href')\n    else if (prop.type === URL_PROP_KIND.src) bindings.set(prop.name, 'src')\n  }\n  return bindings\n}\n\n/**\n * Strips props a published node must never carry into someone else's site\n * (AGL-784).\n *\n * `Leaf` spreads a node's props straight onto the rendered component, and MUI\n * passes unknown props through to its root DOM element, so whatever survives\n * publishing reaches the DOM of every org that installs the listing. Marketplace\n * components are auto-listed with no review, and `hosts/{h}/components` is\n * writable by any org member, so a hand-crafted doc is a realistic input here.\n *\n * What each stripped key actually does, measured rather than assumed:\n * - `dangerouslySetInnerHTML` is NOT the stored-XSS it looks like — `Leaf`\n *   always passes a children array, so React throws\n *   \"Can only set one of `children` or `props.dangerouslySetInnerHTML`\"\n *   (and the void-element variant for self-closing components like `image`).\n *   That is worse in practice than it sounds: the throw happens during SSR,\n *   which is the AGL-579 failure mode that 500s the page and wedges ISR for\n *   the whole site. One published component would take down every consumer.\n * - `on*` handlers can only survive JSON as strings, which React drops with a\n *   warning. Removed for hygiene, and so a future renderer that does eval-ish\n *   prop handling can't turn them back into a vector.\n * - `href`/`src` get the render-time URL policy applied at publish time too.\n *   React already neutralizes `javascript:` hrefs and the mui components run\n *   SAFE_HREF themselves, so this is defense in depth for any component that\n *   forgets to — cheap, and it keeps the stored artifact honest.\n * - An `href`/`src` that is exactly one `{{prop.*}}` token naming a declared\n *   property of the kind that holds that address — a Link for `href`, an\n *   Image for `src` — is kept as the binding it is (AGL-2933). The token is no\n *   address, so the rule above would refuse it, and every link and image a\n *   component's properties feed would arrive unbound. What it becomes is held\n *   to the same rule twice over: the property's default where the declaration\n *   is published, and whatever value a page sets where the graft substitutes\n *   it (`resolveComponentPropTokens`). A token that is only part of the value,\n *   or names a property of another kind or none, is refused as before.\n *\n * Deliberately shallow: only top-level props are spread onto the DOM. A nested\n * object (`icon: { path }`) is consumed by the component, never spread, so\n * recursing would strip legitimate data for no security gain.\n */\nfunction sanitizePublishedNodeProps(\n  props: Record<string, unknown>,\n  urlBindings: ReadonlyMap<string, NodeUrlProp>,\n): Record<string, unknown> {\n  const safe: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(props)) {\n    if (key === 'dangerouslySetInnerHTML') continue\n    if (/^on[A-Z]/.test(key)) continue\n    if ((key === 'href' || key === 'src') && typeof value === 'string') {\n      const trimmed = value.trim()\n      const bound = matchComponentPropToken(trimmed)\n      const keep =\n        isSafeNodeUrl(key, trimmed) ||\n        (bound !== null && urlBindings.get(bound) === key)\n      if (keep) safe[key] = trimmed\n      continue\n    }\n    safe[key] = value\n  }\n  return safe\n}\n\n/**\n * `nodes` that is still in one of its STORAGE forms rather than a node map\n * (AGL-1395).\n *\n * The two forms `decodeStoredNodes` knows about, tested structurally so this\n * stays a model function with no server import: a byte view — what\n * firebase-admin hands back for a `Bytes` field — and the `{type, data}`\n * envelope `JSON.stringify` makes of a Node `Buffer`, which is what a\n * site-export bundle carries. Neither is a map, and neither is anything the\n * publisher did.\n *\n * The envelope test is deliberately exact, for the reason `decodeStoredNodes`\n * spells out: the alternative reading is a node map with nodes called `type`\n * and `data`, which cannot exist because node-map values are objects.\n */\nfunction isUndecodedNodes(nodes: unknown): boolean {\n  if (ArrayBuffer.isView(nodes)) return true\n  if (typeof nodes !== 'object' || nodes === null || Array.isArray(nodes)) {\n    return false\n  }\n  const value = nodes as { type?: unknown; data?: unknown }\n  return (\n    value.type === 'Buffer' &&\n    Array.isArray(value.data) &&\n    Object.keys(value).length === 2\n  )\n}\n\nexport type MarketplaceDefinitionNodes = Record<\n  string,\n  {\n    $id: string\n    componentId: string\n    pluginId?: string\n    parentId: string | null\n    props?: Record<string, unknown>\n    nodes?: string[]\n  }\n>\n\n/**\n * Validates and strips a host component definition for publishing:\n * - only allowlisted component ids (no reusable instances, no layout chrome)\n * - only the persisted node keys (drops runtime fields like resolvedProps)\n * - the subtree reachable from `rootId` only, and a serialized size cap\n *\n * - per-node prop hardening (see `sanitizePublishedNodeProps`, AGL-784)\n *\n * XSS note: rich-text `html` props stay as-authored here — they are sanitized\n * at render time (sanitize-rich-text allowlist), which also covers definitions\n * written to Firestore directly (see docs/SECURITY_CONTENT_REVIEW.md). Props\n * that are spread onto the DOM (`dangerouslySetInnerHTML`, `on*`, `href`,\n * `src`) are hardened HERE as well, because publishing hands them to a\n * different org's render tree.\n */\nexport function sanitizeMarketplaceDefinition(\n  definition: {\n    rootId: string\n    nodes: Record<string, any>\n  },\n  options?: {\n    /**\n     * Additional component ids permitted for this artifact type.\n     *\n     * `layoutSlot` is excluded from the shared allowlist because a slot in\n     * page content has nowhere to graft — but a published LAYOUT is\n     * meaningless without one (AGL-671). Scoped per call rather than added\n     * globally so page and component publishing stay unchanged.\n     */\n    extraComponentIds?: readonly string[]\n    /**\n     * Replaces the page allowlist outright, for artifact types built from a\n     * disjoint component vocabulary — an email design uses `plugins-email`\n     * blocks and nothing else (AGL-657), so EXTENDING the page list would\n     * green-light a `videoEmbed` or `form` that no email client can render.\n     */\n    componentIds?: readonly string[]\n    /**\n     * The properties the tree declares, as they are published beside it\n     * (AGL-2933). A node's `href` or `src` bound whole to one of the kind that\n     * holds that address is kept — see `sanitizePublishedNodeProps`. Absent\n     * for a tree that declares none, which keeps no binding.\n     */\n    declaredProps?: ReadonlyArray<{ name?: unknown; type?: unknown }>\n  },\n):\n  | { ok: true; rootId: string; nodes: MarketplaceDefinitionNodes }\n  | { ok: false; error: string } {\n  const { rootId, nodes } = definition\n  const base = options?.componentIds ?? MARKETPLACE_COMPONENT_ID_ALLOWLIST\n  const allowed = options?.extraComponentIds?.length\n    ? [...base, ...options.extraComponentIds]\n    : base\n  const urlBindings = urlBindingsOf(options?.declaredProps)\n  // An UNDECODED `nodes` is never the author's fault, so it must not share a\n  // message with a genuinely rootless definition (AGL-1395). Both undecoded\n  // forms — a Node `Buffer` from the Admin SDK, and the `{type:'Buffer'}`\n  // envelope `JSON.stringify` makes of one — reach the root check below as\n  // something with no `_@_` in it, and the answer was \"Definition has no root\n  // node\": a sentence that sends the publisher to redesign a page that is\n  // fine. Callers must run `decodeStoredNodes` first; this says so out loud\n  // rather than letting the next raw read look like a content problem.\n  if (isUndecodedNodes(nodes)) {\n    return {\n      ok: false,\n      error:\n        'This content could not be read — it is stored compressed and was ' +\n        'not decoded before publishing. That is a bug on our side, not a ' +\n        'problem with your design.',\n    }\n  }\n  if (!rootId || !nodes?.[rootId]) {\n    return { ok: false, error: 'Definition has no root node' }\n  }\n  const sanitized: MarketplaceDefinitionNodes = {}\n  /** Set while walking; see the empty-definition check after the loop. */\n  let rootIsWrapper = false\n  const queue = [rootId]\n  while (queue.length) {\n    const id = queue.shift() as string\n    if (sanitized[id]) continue\n    const node = nodes[id]\n    if (!node) return { ok: false, error: `Missing node \"${id}\"` }\n    // The root node is the virtual root-collection wrapper (canvas\n    // `NODE_ROOT_ID` = `_@_`): it declares \"everything inside <body>\" for\n    // drag/drop mapping, not a rendered component, so a `div`/absent\n    // componentId there is structural — not a real component to allowlist\n    // (AGL-783). Exempt ONLY that wrapper shape; a root carrying a real\n    // component id is still checked, so a disallowed component can't be\n    // smuggled in as the root. Every descendant is real content and always\n    // checked below.\n    const isRootWrapper =\n      id === rootId &&\n      (node.componentId == null ||\n        node.componentId === '' ||\n        node.componentId === 'div')\n    if (!isRootWrapper && !allowed.includes(node.componentId)) {\n      return {\n        ok: false,\n        // Says why, not just no (AGL-1033). The bare id was doubly unhelpful:\n        // it is not what the palette calls the element, and it left the author\n        // guessing whether this was a bug or a rule.\n        error:\n          `Component \"${node.componentId}\" cannot be published — a listing may ` +\n          'only contain self-contained presentational elements. Raw HTML, ' +\n          'reusable-component references, plugin elements and anything bound ' +\n          \"to this site's data or layout stay behind.\",\n      }\n    }\n    const plain: any = {}\n    for (const key of KEPT_NODE_KEYS) {\n      if (node[key] !== undefined) plain[key] = node[key]\n    }\n    // Per-node prop hardening (AGL-784) — see sanitizePublishedNodeProps.\n    if (plain.props && typeof plain.props === 'object') {\n      plain.props = sanitizePublishedNodeProps(plain.props, urlBindings)\n    }\n    plain.$id = id\n    plain.parentId = id === rootId ? null : (node.parentId ?? null)\n    // Give the wrapper an explicit container id so the installed definition\n    // renders its root collection the same way it did on the source site.\n    if (isRootWrapper) {\n      plain.componentId = 'div'\n      rootIsWrapper = true\n    }\n    sanitized[id] = plain\n    if (Array.isArray(node.nodes)) queue.push(...node.nodes)\n  }\n  let serialized: string\n  try {\n    serialized = JSON.stringify(sanitized)\n  } catch {\n    return { ok: false, error: 'Definition is not serializable' }\n  }\n  if (serialized.length > MARKETPLACE_DEFINITION_MAX_BYTES) {\n    return { ok: false, error: 'Definition is too large to publish' }\n  }\n  // An empty definition is not a listing (AGL-1033). Publishing one used to\n  // SUCCEED — the root wrapper alone sanitizes cleanly — so a component whose\n  // content had never been published to its document shipped a blank version\n  // to everyone who installed it, and said nothing. Refusing here is the\n  // \"fail loudly at the point the author understands it\" half.\n  //\n  // Only the WRAPPER case: a definition that is a single real component is a\n  // perfectly good one-element listing, and refusing that would be a different\n  // bug in the other direction.\n  if (rootIsWrapper && Object.keys(sanitized).length <= 1) {\n    return {\n      ok: false,\n      error:\n        'There is nothing to publish — this is empty. If you have edited it ' +\n        'in the designer, publish those changes first, then publish the listing.',\n    }\n  }\n  return { ok: true, rootId, nodes: sanitized }\n}\n\n/**\n * Converts a sanitized marketplace/AI definition (normalized map) into the\n * nested node shape `canvas.addNodeFromPreset` grafts — ids regenerate on\n * insert, so collisions with existing canvas nodes are impossible\n * (AGL-169). A seen-set guards malformed self-referencing trees.\n */\nexport function marketplaceDefinitionToNested(\n  rootId: string,\n  nodes: MarketplaceDefinitionNodes,\n): Record<string, unknown> | null {\n  const seen = new Set<string>()\n  const build = (id: string): Record<string, unknown> | null => {\n    const node = nodes[id]\n    if (!node || seen.has(id)) return null\n    seen.add(id)\n    return {\n      componentId: node.componentId,\n      ...(node.pluginId ? { pluginId: node.pluginId } : {}),\n      ...(node.props ? { props: node.props } : {}),\n      nodes: (node.nodes ?? [])\n        .map(build)\n        .filter((child): child is Record<string, unknown> => Boolean(child)),\n    }\n  }\n  return build(rootId)\n}\n\n/**\n * Field types a published dataset schema may declare (AGL-657). Mirrors\n * `DATASET_FIELD_TYPES` in core; duplicated rather than imported to keep this\n * module dependency-free (it is imported by API routes and client components\n * alike), and asserted against the source of truth in the spec.\n */\nexport const MARKETPLACE_DATASET_FIELD_TYPES: readonly string[] = [\n  'bool',\n  'bytes',\n  'coordinates',\n  'float',\n  'int32',\n  'int64',\n  'map',\n  'nil',\n  'reference',\n  'sorted',\n  'text',\n  'timestamp',\n]\n\n"],"names":["matchComponentPropToken","isSafeNodeUrl","SAFE_SRC_PATTERN","SAFE_HREF_PATTERN","MARKETPLACE_COMPONENT_ID_ALLOWLIST","MARKETPLACE_EMAIL_COMPONENT_ID_ALLOWLIST","MARKETPLACE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST","filter","componentId","MARKETPLACE_DEFINITION_MAX_BYTES","KEPT_NODE_KEYS","MARKETPLACE_SAFE_HREF","MARKETPLACE_SAFE_SRC","URL_PROP_KIND","href","src","urlBindingsOf","declaredProps","bindings","Map","prop","name","type","set","sanitizePublishedNodeProps","props","urlBindings","safe","key","value","Object","entries","test","trimmed","trim","bound","keep","get","isUndecodedNodes","nodes","ArrayBuffer","isView","Array","isArray","data","keys","length","sanitizeMarketplaceDefinition","definition","options","rootId","base","componentIds","allowed","extraComponentIds","ok","error","sanitized","rootIsWrapper","queue","node","id","shift","isRootWrapper","includes","plain","undefined","$id","parentId","push","serialized","JSON","stringify","marketplaceDefinitionToNested","seen","Set","build","has","add","pluginId","map","child","Boolean","MARKETPLACE_DATASET_FIELD_TYPES"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;CAOC;AAGD,SAASA,uBAAuB,QAAQ,mCAA+B;AACvE,SACEC,aAAa,EAEbC,gBAAgB,QACX,uBAAmB;AAC1B,SAASC,iBAAiB,QAAQ,yBAAqB;AAEvD;;;;;;;;;;;;;;;;;;CAkBC,GACD,OAAO,MAAMC,qCAAwD;IACnE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,4EAA4E;IAC5E,qDAAqD;IACrD;IACA;IACA;CACD,CAAA;AAED;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMC,2CAA8D;IACzE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;CAsBC,GACD,OAAO,MAAMC,mDACXD,yCAAyCE,MAAM,CAC7C,CAACC,cAAgBA,gBAAgB,iBAClC;AAEH,mEAAmE,GACnE,OAAO,MAAMC,mCAAmC,MAAM,KAAI;AAE1D,MAAMC,iBAAiB;IACrB;IACA;IACA;IACA;IACA;IACA;CACD;AAED;;;;;;;;CAQC,GACD,SACEP,qBAAqBQ,qBAAqB,EAC1CT,oBAAoBU,oBAAoB,KACzC;AAED;;;;;CAKC,GACD,MAAMC,gBAAuD;IAC3DC,MAAM;IACNC,KAAK;AACP;AAEA;;;CAGC,GACD,SAASC,cACPC,aAA4E;IAE5E,MAAMC,WAAW,IAAIC;IACrB,KAAK,MAAMC,QAAQH,wBAAAA,gBAAiB,EAAE,CAAE;QACtC,IAAI,QAAOG,wBAAAA,KAAMC,IAAI,MAAK,YAAY,CAACD,KAAKC,IAAI,EAAE;QAClD,IAAID,KAAKE,IAAI,KAAKT,cAAcC,IAAI,EAAEI,SAASK,GAAG,CAACH,KAAKC,IAAI,EAAE;aACzD,IAAID,KAAKE,IAAI,KAAKT,cAAcE,GAAG,EAAEG,SAASK,GAAG,CAACH,KAAKC,IAAI,EAAE;IACpE;IACA,OAAOH;AACT;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCC,GACD,SAASM,2BACPC,KAA8B,EAC9BC,WAA6C;IAE7C,MAAMC,OAAgC,CAAC;IACvC,KAAK,MAAM,CAACC,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACN,OAAQ;QAChD,IAAIG,QAAQ,2BAA2B;QACvC,IAAI,WAAWI,IAAI,CAACJ,MAAM;QAC1B,IAAI,AAACA,CAAAA,QAAQ,UAAUA,QAAQ,KAAI,KAAM,OAAOC,UAAU,UAAU;YAClE,MAAMI,UAAUJ,MAAMK,IAAI;YAC1B,MAAMC,QAAQnC,wBAAwBiC;YACtC,MAAMG,OACJnC,cAAc2B,KAAKK,YAClBE,UAAU,QAAQT,YAAYW,GAAG,CAACF,WAAWP;YAChD,IAAIQ,MAAMT,IAAI,CAACC,IAAI,GAAGK;YACtB;QACF;QACAN,IAAI,CAACC,IAAI,GAAGC;IACd;IACA,OAAOF;AACT;AAEA;;;;;;;;;;;;;;CAcC,GACD,SAASW,iBAAiBC,KAAc;IACtC,IAAIC,YAAYC,MAAM,CAACF,QAAQ,OAAO;IACtC,IAAI,OAAOA,UAAU,YAAYA,UAAU,QAAQG,MAAMC,OAAO,CAACJ,QAAQ;QACvE,OAAO;IACT;IACA,MAAMV,QAAQU;IACd,OACEV,MAAMP,IAAI,KAAK,YACfoB,MAAMC,OAAO,CAACd,MAAMe,IAAI,KACxBd,OAAOe,IAAI,CAAChB,OAAOiB,MAAM,KAAK;AAElC;AAcA;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASC,8BACdC,UAGC,EACDC,OAwBC;;QAMeA;IAFhB,MAAM,EAAEC,MAAM,EAAEX,KAAK,EAAE,GAAGS;IAC1B,MAAMG,eAAOF,2BAAAA,QAASG,YAAY,mBAAIhD;IACtC,MAAMiD,UAAUJ,CAAAA,4BAAAA,6BAAAA,QAASK,iBAAiB,qBAA1BL,2BAA4BH,MAAM,IAC9C;WAAIK;WAASF,QAAQK,iBAAiB;KAAC,GACvCH;IACJ,MAAMzB,cAAcV,cAAciC,2BAAAA,QAAShC,aAAa;IACxD,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,qEAAqE;IACrE,IAAIqB,iBAAiBC,QAAQ;QAC3B,OAAO;YACLgB,IAAI;YACJC,OACE,sEACA,qEACA;QACJ;IACF;IACA,IAAI,CAACN,UAAU,EAACX,yBAAAA,KAAO,CAACW,OAAO,GAAE;QAC/B,OAAO;YAAEK,IAAI;YAAOC,OAAO;QAA8B;IAC3D;IACA,MAAMC,YAAwC,CAAC;IAC/C,sEAAsE,GACtE,IAAIC,gBAAgB;IACpB,MAAMC,QAAQ;QAACT;KAAO;IACtB,MAAOS,MAAMb,MAAM,CAAE;YAwCsBc;QAvCzC,MAAMC,KAAKF,MAAMG,KAAK;QACtB,IAAIL,SAAS,CAACI,GAAG,EAAE;QACnB,MAAMD,OAAOrB,KAAK,CAACsB,GAAG;QACtB,IAAI,CAACD,MAAM,OAAO;YAAEL,IAAI;YAAOC,OAAO,CAAC,cAAc,EAAEK,GAAG,CAAC,CAAC;QAAC;QAC7D,+DAA+D;QAC/D,sEAAsE;QACtE,iEAAiE;QACjE,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,iBAAiB;QACjB,MAAME,gBACJF,OAAOX,UACNU,CAAAA,KAAKpD,WAAW,IAAI,QACnBoD,KAAKpD,WAAW,KAAK,MACrBoD,KAAKpD,WAAW,KAAK,KAAI;QAC7B,IAAI,CAACuD,iBAAiB,CAACV,QAAQW,QAAQ,CAACJ,KAAKpD,WAAW,GAAG;YACzD,OAAO;gBACL+C,IAAI;gBACJ,sEAAsE;gBACtE,uEAAuE;gBACvE,6CAA6C;gBAC7CC,OACE,CAAC,WAAW,EAAEI,KAAKpD,WAAW,CAAC,sCAAsC,CAAC,GACtE,oEACA,uEACA;YACJ;QACF;QACA,MAAMyD,QAAa,CAAC;QACpB,KAAK,MAAMrC,OAAOlB,eAAgB;YAChC,IAAIkD,IAAI,CAAChC,IAAI,KAAKsC,WAAWD,KAAK,CAACrC,IAAI,GAAGgC,IAAI,CAAChC,IAAI;QACrD;QACA,sEAAsE;QACtE,IAAIqC,MAAMxC,KAAK,IAAI,OAAOwC,MAAMxC,KAAK,KAAK,UAAU;YAClDwC,MAAMxC,KAAK,GAAGD,2BAA2ByC,MAAMxC,KAAK,EAAEC;QACxD;QACAuC,MAAME,GAAG,GAAGN;QACZI,MAAMG,QAAQ,GAAGP,OAAOX,SAAS,QAAQU,iBAAAA,KAAKQ,QAAQ,YAAbR,iBAAiB;QAC1D,wEAAwE;QACxE,sEAAsE;QACtE,IAAIG,eAAe;YACjBE,MAAMzD,WAAW,GAAG;YACpBkD,gBAAgB;QAClB;QACAD,SAAS,CAACI,GAAG,GAAGI;QAChB,IAAIvB,MAAMC,OAAO,CAACiB,KAAKrB,KAAK,GAAGoB,MAAMU,IAAI,IAAIT,KAAKrB,KAAK;IACzD;IACA,IAAI+B;IACJ,IAAI;QACFA,aAAaC,KAAKC,SAAS,CAACf;IAC9B,EAAE,eAAM;QACN,OAAO;YAAEF,IAAI;YAAOC,OAAO;QAAiC;IAC9D;IACA,IAAIc,WAAWxB,MAAM,GAAGrC,kCAAkC;QACxD,OAAO;YAAE8C,IAAI;YAAOC,OAAO;QAAqC;IAClE;IACA,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,6DAA6D;IAC7D,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,8BAA8B;IAC9B,IAAIE,iBAAiB5B,OAAOe,IAAI,CAACY,WAAWX,MAAM,IAAI,GAAG;QACvD,OAAO;YACLS,IAAI;YACJC,OACE,wEACA;QACJ;IACF;IACA,OAAO;QAAED,IAAI;QAAML;QAAQX,OAAOkB;IAAU;AAC9C;AAEA;;;;;CAKC,GACD,OAAO,SAASgB,8BACdvB,MAAc,EACdX,KAAiC;IAEjC,MAAMmC,OAAO,IAAIC;IACjB,MAAMC,QAAQ,CAACf;YAQHD;QAPV,MAAMA,OAAOrB,KAAK,CAACsB,GAAG;QACtB,IAAI,CAACD,QAAQc,KAAKG,GAAG,CAAChB,KAAK,OAAO;QAClCa,KAAKI,GAAG,CAACjB;QACT,OAAO;YACLrD,aAAaoD,KAAKpD,WAAW;WACzBoD,KAAKmB,QAAQ,GAAG;YAAEA,UAAUnB,KAAKmB,QAAQ;QAAC,IAAI,CAAC,GAC/CnB,KAAKnC,KAAK,GAAG;YAAEA,OAAOmC,KAAKnC,KAAK;QAAC,IAAI,CAAC;YAC1Cc,OAAO,EAACqB,cAAAA,KAAKrB,KAAK,YAAVqB,cAAc,EAAE,EACrBoB,GAAG,CAACJ,OACJrE,MAAM,CAAC,CAAC0E,QAA4CC,QAAQD;;IAEnE;IACA,OAAOL,MAAM1B;AACf;AAEA;;;;;CAKC,GACD,OAAO,MAAMiC,kCAAqD;IAChE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/node-definition-sanitizer.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The node-definition sanitizer and the component allowlists (AGL-2939):\n * what a PORTABLE node tree must satisfy — one that lands on a canvas that did\n * not author it. Today that is a tree installed from another workspace and a\n * tree a model generated, and the rule is the same for both: whatever reaches\n * the canvas renders in a site whose author never saw it.\n *\n * The platform's rule, so named for what it guards rather than for who asks\n * (AGL-3080): any plugin that brings a tree in from elsewhere passes it\n * through here, and a plugin may not import another plugin's model. The\n * marketplace re-exports it under the names its publishers use.\n */\n\nimport { isFirstPartyMediaSrc } from './media-ref'\nimport { matchComponentPropToken } from './compose-reusable-components'\nimport {\n  isSafeNodeUrl,\n  type NodeUrlProp,\n  SAFE_SRC_PATTERN,\n} from './node-url-policy'\nimport { SAFE_HREF_PATTERN } from './screen-link-value'\n\n/**\n * Component ids a portable tree may hold. Mirrors the persisted ids in\n * plugins-mui (plugin.spec.ts) minus `reusableInstance` — nested\n * instances would smuggle references to another tenant's private\n * definitions — and minus `layoutSlot`, which is layout chrome. Keep sorted.\n *\n * The rule this list encodes is \"inert and self-contained\": an element that\n * renders from its own props travels to another workspace intact. What stays\n * out is what cannot — raw-HTML escape hatches (`customHtml`), references to\n * another tenant's documents (`reusableInstance`), third-party code\n * (`plugin`), host chrome (`layoutSlot`) and anything bound to the source\n * site's data (`collection`, `product`).\n *\n * It must cover everything the besigner's palette offers under those terms, or\n * the catalogue promises what the exporter refuses — which is how `section`\n * came to be missing (AGL-1033): every Sections & Blocks preset composes it,\n * so the whole category was unpublishable. `blocks-publishable.spec.ts` walks\n * the presets and fails if this list falls behind them again.\n */\nexport const PORTABLE_COMPONENT_ID_ALLOWLIST: readonly string[] = [\n  'form',\n  'formField',\n  'image',\n  'muiAppBar',\n  'muiButton',\n  'muiContainer',\n  'muiList',\n  'muiListItem',\n  'muiListItemText',\n  'muiScreenLink',\n  'muiStack',\n  'muiToolbar',\n  'muiTypography',\n  'searchBox',\n  // A semantic wrapper — `<section>`/`<footer>`/`<nav>` plus styling, with no\n  // behaviour and no binding to the site it came from.\n  'section',\n  'socialLinks',\n  'videoEmbed',\n]\n\n/**\n * Email block ids publishable as an `emailTemplate` (AGL-657).\n *\n * A separate list from the page allowlist because the two vocabularies don't\n * overlap — an email design is built entirely from `plugins-email` blocks, and\n * page components (MUI, forms, video) don't survive an email client anyway.\n *\n * `emailHtml` is excluded deliberately, for the same reason `reusableInstance`\n * is excluded above: it is a raw-HTML escape hatch, and a published template\n * lands in another org's OUTGOING CUSTOMER EMAIL. Email clients don't run\n * scripts, so this isn't XSS — it's that arbitrary markup sent from someone\n * else's domain is a phishing and tracking-pixel vector that no amount of\n * render-time sanitization makes reviewable. Keep sorted.\n */\nexport const PORTABLE_EMAIL_COMPONENT_ID_ALLOWLIST: readonly string[] = [\n  'emailButton',\n  'emailDivider',\n  'emailImage',\n  'emailProduct',\n  'emailRichtext',\n  'emailSection',\n  'emailSpacer',\n  'emailText',\n]\n\n/**\n * Email block ids publishable as an `emailStarter` — the transactional list\n * minus `emailRichtext`.\n *\n * Derived rather than written out, so a block added to the list above cannot\n * silently miss this one. What it subtracts is the reason it exists.\n *\n * `emailRichtext` holds its content in an `html` prop, and the email renderer's\n * `sanitize` hook defaults to identity with no production caller supplying one\n * — so that prop reaches the recipient's inbox exactly as authored. On a\n * transactional design that is the site's own author writing their own mail. In\n * a STARTER it is a stranger's markup mailed from the shared sending domain\n * under the tenant's From header, which is the raw-HTML escape hatch\n * `emailHtml` was excluded for, wearing a friendlier block name. A remote\n * `<img>` inside it is a tracking pixel that the src policy on `emailImage`\n * would otherwise have caught.\n *\n * Subtracting the block is deliberate rather than sanitizing its markup: an\n * allowlist over someone else's HTML is a judgment we would have to keep\n * re-making, and everything rich text can express in an email — a heading, a\n * paragraph, a link, a button — the remaining blocks already express as a\n * structured tree we render ourselves.\n */\nexport const PORTABLE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST: readonly string[] =\n  PORTABLE_EMAIL_COMPONENT_ID_ALLOWLIST.filter(\n    (componentId) => componentId !== 'emailRichtext',\n  )\n\n/** Serialized definition size cap (Firestore doc limit is 1 MiB). */\nexport const PORTABLE_DEFINITION_MAX_BYTES = 200 * 1024\n\nconst KEPT_NODE_KEYS = [\n  '$id',\n  'componentId',\n  'pluginId',\n  'parentId',\n  'props',\n  'nodes',\n] as const\n\n/**\n * The address rules a published node's `href` and `src` meet — the linking\n * elements' navigable protocols, and https, inline or site-relative images\n * (see `node-url-policy`).\n *\n * Exported under these names for a property sanitizer (the marketplace's is\n * one), which holds a portable property's Link default to the same rule as a\n * portable node's `href`, and an Image default to the `src` rule.\n */\nexport {\n  SAFE_HREF_PATTERN as PORTABLE_SAFE_HREF,\n  SAFE_SRC_PATTERN as PORTABLE_SAFE_SRC,\n}\n\n/**\n * The property kind whose value may fill each address prop through a binding\n * (AGL-2933): a Link feeds an `href`, an Image a `src`. Each kind's default is\n * held to that prop's own rule wherever a declaration is published, so the\n * binding carries nothing a literal in the same place could not.\n */\nconst URL_PROP_KIND: Readonly<Record<NodeUrlProp, string>> = {\n  href: 'href',\n  src: 'image',\n}\n\n/**\n * Declared property names by the address prop their kind may fill — the\n * index {@link sanitizePublishedNodeProps} reads a binding against.\n */\nfunction urlBindingsOf(\n  declaredProps: ReadonlyArray<{ name?: unknown; type?: unknown }> | undefined,\n): ReadonlyMap<string, NodeUrlProp> {\n  const bindings = new Map<string, NodeUrlProp>()\n  for (const prop of declaredProps ?? []) {\n    if (typeof prop?.name !== 'string' || !prop.name) continue\n    if (prop.type === URL_PROP_KIND.href) bindings.set(prop.name, 'href')\n    else if (prop.type === URL_PROP_KIND.src) bindings.set(prop.name, 'src')\n  }\n  return bindings\n}\n\n/**\n * Strips props a published node must never carry into someone else's site\n * (AGL-784).\n *\n * `Leaf` spreads a node's props straight onto the rendered component, and MUI\n * passes unknown props through to its root DOM element, so whatever survives\n * publishing reaches the DOM of every org that installs the listing. Marketplace\n * components are auto-listed with no review, and `hosts/{h}/components` is\n * writable by any org member, so a hand-crafted doc is a realistic input here.\n *\n * What each stripped key actually does, measured rather than assumed:\n * - `dangerouslySetInnerHTML` is NOT the stored-XSS it looks like — `Leaf`\n *   always passes a children array, so React throws\n *   \"Can only set one of `children` or `props.dangerouslySetInnerHTML`\"\n *   (and the void-element variant for self-closing components like `image`).\n *   That is worse in practice than it sounds: the throw happens during SSR,\n *   which is the AGL-579 failure mode that 500s the page and wedges ISR for\n *   the whole site. One published component would take down every consumer.\n * - `on*` handlers can only survive JSON as strings, which React drops with a\n *   warning. Removed for hygiene, and so a future renderer that does eval-ish\n *   prop handling can't turn them back into a vector.\n * - `href`/`src` get the render-time URL policy applied at publish time too.\n *   React already neutralizes `javascript:` hrefs and the mui components run\n *   SAFE_HREF themselves, so this is defense in depth for any component that\n *   forgets to — cheap, and it keeps the stored artifact honest.\n * - An `href`/`src` that is exactly one `{{prop.*}}` token naming a declared\n *   property of the kind that holds that address — a Link for `href`, an\n *   Image for `src` — is kept as the binding it is (AGL-2933). The token is no\n *   address, so the rule above would refuse it, and every link and image a\n *   component's properties feed would arrive unbound. What it becomes is held\n *   to the same rule twice over: the property's default where the declaration\n *   is published, and whatever value a page sets where the graft substitutes\n *   it (`resolveComponentPropTokens`). A token that is only part of the value,\n *   or names a property of another kind or none, is refused as before.\n *\n * Deliberately shallow: only top-level props are spread onto the DOM. A nested\n * object (`icon: { path }`) is consumed by the component, never spread, so\n * recursing would strip legitimate data for no security gain.\n */\nfunction sanitizePublishedNodeProps(\n  props: Record<string, unknown>,\n  urlBindings: ReadonlyMap<string, NodeUrlProp>,\n): Record<string, unknown> {\n  const safe: Record<string, unknown> = {}\n  for (const [key, value] of Object.entries(props)) {\n    if (key === 'dangerouslySetInnerHTML') continue\n    if (/^on[A-Z]/.test(key)) continue\n    if ((key === 'href' || key === 'src') && typeof value === 'string') {\n      const trimmed = value.trim()\n      const bound = matchComponentPropToken(trimmed)\n      const keep =\n        isSafeNodeUrl(key, trimmed) ||\n        (bound !== null && urlBindings.get(bound) === key)\n      if (keep) safe[key] = trimmed\n      continue\n    }\n    safe[key] = value\n  }\n  return safe\n}\n\n/**\n * `nodes` that is still in one of its STORAGE forms rather than a node map\n * (AGL-1395).\n *\n * The two forms `decodeStoredNodes` knows about, tested structurally so this\n * stays a model function with no server import: a byte view — what\n * firebase-admin hands back for a `Bytes` field — and the `{type, data}`\n * envelope `JSON.stringify` makes of a Node `Buffer`, which is what a\n * site-export bundle carries. Neither is a map, and neither is anything the\n * publisher did.\n *\n * The envelope test is deliberately exact, for the reason `decodeStoredNodes`\n * spells out: the alternative reading is a node map with nodes called `type`\n * and `data`, which cannot exist because node-map values are objects.\n */\nfunction isUndecodedNodes(nodes: unknown): boolean {\n  if (ArrayBuffer.isView(nodes)) return true\n  if (typeof nodes !== 'object' || nodes === null || Array.isArray(nodes)) {\n    return false\n  }\n  const value = nodes as { type?: unknown; data?: unknown }\n  return (\n    value.type === 'Buffer' &&\n    Array.isArray(value.data) &&\n    Object.keys(value).length === 2\n  )\n}\n\nexport type PortableDefinitionNodes = Record<\n  string,\n  {\n    $id: string\n    componentId: string\n    pluginId?: string\n    parentId: string | null\n    props?: Record<string, unknown>\n    nodes?: string[]\n  }\n>\n\n/**\n * Validates and strips a host component definition for publishing:\n * - only allowlisted component ids (no reusable instances, no layout chrome)\n * - only the persisted node keys (drops runtime fields like resolvedProps)\n * - the subtree reachable from `rootId` only, and a serialized size cap\n *\n * - per-node prop hardening (see `sanitizePublishedNodeProps`, AGL-784)\n *\n * XSS note: rich-text `html` props stay as-authored here — they are sanitized\n * at render time (sanitize-rich-text allowlist), which also covers definitions\n * written to Firestore directly (see docs/SECURITY_CONTENT_REVIEW.md). Props\n * that are spread onto the DOM (`dangerouslySetInnerHTML`, `on*`, `href`,\n * `src`) are hardened HERE as well, because publishing hands them to a\n * different org's render tree.\n */\nexport function sanitizePortableDefinition(\n  definition: {\n    rootId: string\n    nodes: Record<string, any>\n  },\n  options?: {\n    /**\n     * Additional component ids permitted for this artifact type.\n     *\n     * `layoutSlot` is excluded from the shared allowlist because a slot in\n     * page content has nowhere to graft — but a published LAYOUT is\n     * meaningless without one (AGL-671). Scoped per call rather than added\n     * globally so page and component publishing stay unchanged.\n     */\n    extraComponentIds?: readonly string[]\n    /**\n     * Replaces the page allowlist outright, for artifact types built from a\n     * disjoint component vocabulary — an email design uses `plugins-email`\n     * blocks and nothing else (AGL-657), so EXTENDING the page list would\n     * green-light a `videoEmbed` or `form` that no email client can render.\n     */\n    componentIds?: readonly string[]\n    /**\n     * The properties the tree declares, as they are published beside it\n     * (AGL-2933). A node's `href` or `src` bound whole to one of the kind that\n     * holds that address is kept — see `sanitizePublishedNodeProps`. Absent\n     * for a tree that declares none, which keeps no binding.\n     */\n    declaredProps?: ReadonlyArray<{ name?: unknown; type?: unknown }>\n  },\n):\n  | { ok: true; rootId: string; nodes: PortableDefinitionNodes }\n  | { ok: false; error: string } {\n  const { rootId, nodes } = definition\n  const base = options?.componentIds ?? PORTABLE_COMPONENT_ID_ALLOWLIST\n  const allowed = options?.extraComponentIds?.length\n    ? [...base, ...options.extraComponentIds]\n    : base\n  const urlBindings = urlBindingsOf(options?.declaredProps)\n  // An UNDECODED `nodes` is never the author's fault, so it must not share a\n  // message with a genuinely rootless definition (AGL-1395). Both undecoded\n  // forms — a Node `Buffer` from the Admin SDK, and the `{type:'Buffer'}`\n  // envelope `JSON.stringify` makes of one — reach the root check below as\n  // something with no `_@_` in it, and the answer was \"Definition has no root\n  // node\": a sentence that sends the publisher to redesign a page that is\n  // fine. Callers must run `decodeStoredNodes` first; this says so out loud\n  // rather than letting the next raw read look like a content problem.\n  if (isUndecodedNodes(nodes)) {\n    return {\n      ok: false,\n      error:\n        'This content could not be read — it is stored compressed and was ' +\n        'not decoded before publishing. That is a bug on our side, not a ' +\n        'problem with your design.',\n    }\n  }\n  if (!rootId || !nodes?.[rootId]) {\n    return { ok: false, error: 'Definition has no root node' }\n  }\n  const sanitized: PortableDefinitionNodes = {}\n  /** Set while walking; see the empty-definition check after the loop. */\n  let rootIsWrapper = false\n  const queue = [rootId]\n  while (queue.length) {\n    const id = queue.shift() as string\n    if (sanitized[id]) continue\n    const node = nodes[id]\n    if (!node) return { ok: false, error: `Missing node \"${id}\"` }\n    // The root node is the virtual root-collection wrapper (canvas\n    // `NODE_ROOT_ID` = `_@_`): it declares \"everything inside <body>\" for\n    // drag/drop mapping, not a rendered component, so a `div`/absent\n    // componentId there is structural — not a real component to allowlist\n    // (AGL-783). Exempt ONLY that wrapper shape; a root carrying a real\n    // component id is still checked, so a disallowed component can't be\n    // smuggled in as the root. Every descendant is real content and always\n    // checked below.\n    const isRootWrapper =\n      id === rootId &&\n      (node.componentId == null ||\n        node.componentId === '' ||\n        node.componentId === 'div')\n    if (!isRootWrapper && !allowed.includes(node.componentId)) {\n      return {\n        ok: false,\n        // Says why, not just no (AGL-1033). The bare id was doubly unhelpful:\n        // it is not what the palette calls the element, and it left the author\n        // guessing whether this was a bug or a rule.\n        error:\n          `Component \"${node.componentId}\" cannot be published — a listing may ` +\n          'only contain self-contained presentational elements. Raw HTML, ' +\n          'reusable-component references, plugin elements and anything bound ' +\n          \"to this site's data or layout stay behind.\",\n      }\n    }\n    const plain: any = {}\n    for (const key of KEPT_NODE_KEYS) {\n      if (node[key] !== undefined) plain[key] = node[key]\n    }\n    // Per-node prop hardening (AGL-784) — see sanitizePublishedNodeProps.\n    if (plain.props && typeof plain.props === 'object') {\n      plain.props = sanitizePublishedNodeProps(plain.props, urlBindings)\n    }\n    plain.$id = id\n    plain.parentId = id === rootId ? null : (node.parentId ?? null)\n    // Give the wrapper an explicit container id so the installed definition\n    // renders its root collection the same way it did on the source site.\n    if (isRootWrapper) {\n      plain.componentId = 'div'\n      rootIsWrapper = true\n    }\n    sanitized[id] = plain\n    if (Array.isArray(node.nodes)) queue.push(...node.nodes)\n  }\n  let serialized: string\n  try {\n    serialized = JSON.stringify(sanitized)\n  } catch {\n    return { ok: false, error: 'Definition is not serializable' }\n  }\n  if (serialized.length > PORTABLE_DEFINITION_MAX_BYTES) {\n    return { ok: false, error: 'Definition is too large to publish' }\n  }\n  // An empty definition is not a listing (AGL-1033). Publishing one used to\n  // SUCCEED — the root wrapper alone sanitizes cleanly — so a component whose\n  // content had never been published to its document shipped a blank version\n  // to everyone who installed it, and said nothing. Refusing here is the\n  // \"fail loudly at the point the author understands it\" half.\n  //\n  // Only the WRAPPER case: a definition that is a single real component is a\n  // perfectly good one-element listing, and refusing that would be a different\n  // bug in the other direction.\n  if (rootIsWrapper && Object.keys(sanitized).length <= 1) {\n    return {\n      ok: false,\n      error:\n        'There is nothing to publish — this is empty. If you have edited it ' +\n        'in the designer, publish those changes first, then publish the listing.',\n    }\n  }\n  return { ok: true, rootId, nodes: sanitized }\n}\n\n/**\n * Converts a sanitized portable definition (normalized map) into the\n * nested node shape `canvas.addNodeFromPreset` grafts — ids regenerate on\n * insert, so collisions with existing canvas nodes are impossible\n * (AGL-169). A seen-set guards malformed self-referencing trees.\n */\nexport function portableDefinitionToNested(\n  rootId: string,\n  nodes: PortableDefinitionNodes,\n): Record<string, unknown> | null {\n  const seen = new Set<string>()\n  const build = (id: string): Record<string, unknown> | null => {\n    const node = nodes[id]\n    if (!node || seen.has(id)) return null\n    seen.add(id)\n    return {\n      componentId: node.componentId,\n      ...(node.pluginId ? { pluginId: node.pluginId } : {}),\n      ...(node.props ? { props: node.props } : {}),\n      nodes: (node.nodes ?? [])\n        .map(build)\n        .filter((child): child is Record<string, unknown> => Boolean(child)),\n    }\n  }\n  return build(rootId)\n}\n\n/**\n * Field types a portable dataset schema may declare (AGL-657). Mirrors\n * `DATASET_FIELD_TYPES` in core; duplicated rather than imported to keep this\n * module dependency-free (it is imported by API routes and client components\n * alike), and asserted against the source of truth in the spec.\n */\nexport const PORTABLE_DATASET_FIELD_TYPES: readonly string[] = [\n  'bool',\n  'bytes',\n  'coordinates',\n  'float',\n  'int32',\n  'int64',\n  'map',\n  'nil',\n  'reference',\n  'sorted',\n  'text',\n  'timestamp',\n]\n\n"],"names":["matchComponentPropToken","isSafeNodeUrl","SAFE_SRC_PATTERN","SAFE_HREF_PATTERN","PORTABLE_COMPONENT_ID_ALLOWLIST","PORTABLE_EMAIL_COMPONENT_ID_ALLOWLIST","PORTABLE_EMAIL_STARTER_COMPONENT_ID_ALLOWLIST","filter","componentId","PORTABLE_DEFINITION_MAX_BYTES","KEPT_NODE_KEYS","PORTABLE_SAFE_HREF","PORTABLE_SAFE_SRC","URL_PROP_KIND","href","src","urlBindingsOf","declaredProps","bindings","Map","prop","name","type","set","sanitizePublishedNodeProps","props","urlBindings","safe","key","value","Object","entries","test","trimmed","trim","bound","keep","get","isUndecodedNodes","nodes","ArrayBuffer","isView","Array","isArray","data","keys","length","sanitizePortableDefinition","definition","options","rootId","base","componentIds","allowed","extraComponentIds","ok","error","sanitized","rootIsWrapper","queue","node","id","shift","isRootWrapper","includes","plain","undefined","$id","parentId","push","serialized","JSON","stringify","portableDefinitionToNested","seen","Set","build","has","add","pluginId","map","child","Boolean","PORTABLE_DATASET_FIELD_TYPES"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;CAWC;AAGD,SAASA,uBAAuB,QAAQ,mCAA+B;AACvE,SACEC,aAAa,EAEbC,gBAAgB,QACX,uBAAmB;AAC1B,SAASC,iBAAiB,QAAQ,yBAAqB;AAEvD;;;;;;;;;;;;;;;;;;CAkBC,GACD,OAAO,MAAMC,kCAAqD;IAChE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,4EAA4E;IAC5E,qDAAqD;IACrD;IACA;IACA;CACD,CAAA;AAED;;;;;;;;;;;;;CAaC,GACD,OAAO,MAAMC,wCAA2D;IACtE;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;CAsBC,GACD,OAAO,MAAMC,gDACXD,sCAAsCE,MAAM,CAC1C,CAACC,cAAgBA,gBAAgB,iBAClC;AAEH,mEAAmE,GACnE,OAAO,MAAMC,gCAAgC,MAAM,KAAI;AAEvD,MAAMC,iBAAiB;IACrB;IACA;IACA;IACA;IACA;IACA;CACD;AAED;;;;;;;;CAQC,GACD,SACEP,qBAAqBQ,kBAAkB,EACvCT,oBAAoBU,iBAAiB,KACtC;AAED;;;;;CAKC,GACD,MAAMC,gBAAuD;IAC3DC,MAAM;IACNC,KAAK;AACP;AAEA;;;CAGC,GACD,SAASC,cACPC,aAA4E;IAE5E,MAAMC,WAAW,IAAIC;IACrB,KAAK,MAAMC,QAAQH,wBAAAA,gBAAiB,EAAE,CAAE;QACtC,IAAI,QAAOG,wBAAAA,KAAMC,IAAI,MAAK,YAAY,CAACD,KAAKC,IAAI,EAAE;QAClD,IAAID,KAAKE,IAAI,KAAKT,cAAcC,IAAI,EAAEI,SAASK,GAAG,CAACH,KAAKC,IAAI,EAAE;aACzD,IAAID,KAAKE,IAAI,KAAKT,cAAcE,GAAG,EAAEG,SAASK,GAAG,CAACH,KAAKC,IAAI,EAAE;IACpE;IACA,OAAOH;AACT;AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCC,GACD,SAASM,2BACPC,KAA8B,EAC9BC,WAA6C;IAE7C,MAAMC,OAAgC,CAAC;IACvC,KAAK,MAAM,CAACC,KAAKC,MAAM,IAAIC,OAAOC,OAAO,CAACN,OAAQ;QAChD,IAAIG,QAAQ,2BAA2B;QACvC,IAAI,WAAWI,IAAI,CAACJ,MAAM;QAC1B,IAAI,AAACA,CAAAA,QAAQ,UAAUA,QAAQ,KAAI,KAAM,OAAOC,UAAU,UAAU;YAClE,MAAMI,UAAUJ,MAAMK,IAAI;YAC1B,MAAMC,QAAQnC,wBAAwBiC;YACtC,MAAMG,OACJnC,cAAc2B,KAAKK,YAClBE,UAAU,QAAQT,YAAYW,GAAG,CAACF,WAAWP;YAChD,IAAIQ,MAAMT,IAAI,CAACC,IAAI,GAAGK;YACtB;QACF;QACAN,IAAI,CAACC,IAAI,GAAGC;IACd;IACA,OAAOF;AACT;AAEA;;;;;;;;;;;;;;CAcC,GACD,SAASW,iBAAiBC,KAAc;IACtC,IAAIC,YAAYC,MAAM,CAACF,QAAQ,OAAO;IACtC,IAAI,OAAOA,UAAU,YAAYA,UAAU,QAAQG,MAAMC,OAAO,CAACJ,QAAQ;QACvE,OAAO;IACT;IACA,MAAMV,QAAQU;IACd,OACEV,MAAMP,IAAI,KAAK,YACfoB,MAAMC,OAAO,CAACd,MAAMe,IAAI,KACxBd,OAAOe,IAAI,CAAChB,OAAOiB,MAAM,KAAK;AAElC;AAcA;;;;;;;;;;;;;;CAcC,GACD,OAAO,SAASC,2BACdC,UAGC,EACDC,OAwBC;;QAMeA;IAFhB,MAAM,EAAEC,MAAM,EAAEX,KAAK,EAAE,GAAGS;IAC1B,MAAMG,eAAOF,2BAAAA,QAASG,YAAY,mBAAIhD;IACtC,MAAMiD,UAAUJ,CAAAA,4BAAAA,6BAAAA,QAASK,iBAAiB,qBAA1BL,2BAA4BH,MAAM,IAC9C;WAAIK;WAASF,QAAQK,iBAAiB;KAAC,GACvCH;IACJ,MAAMzB,cAAcV,cAAciC,2BAAAA,QAAShC,aAAa;IACxD,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,qEAAqE;IACrE,IAAIqB,iBAAiBC,QAAQ;QAC3B,OAAO;YACLgB,IAAI;YACJC,OACE,sEACA,qEACA;QACJ;IACF;IACA,IAAI,CAACN,UAAU,EAACX,yBAAAA,KAAO,CAACW,OAAO,GAAE;QAC/B,OAAO;YAAEK,IAAI;YAAOC,OAAO;QAA8B;IAC3D;IACA,MAAMC,YAAqC,CAAC;IAC5C,sEAAsE,GACtE,IAAIC,gBAAgB;IACpB,MAAMC,QAAQ;QAACT;KAAO;IACtB,MAAOS,MAAMb,MAAM,CAAE;YAwCsBc;QAvCzC,MAAMC,KAAKF,MAAMG,KAAK;QACtB,IAAIL,SAAS,CAACI,GAAG,EAAE;QACnB,MAAMD,OAAOrB,KAAK,CAACsB,GAAG;QACtB,IAAI,CAACD,MAAM,OAAO;YAAEL,IAAI;YAAOC,OAAO,CAAC,cAAc,EAAEK,GAAG,CAAC,CAAC;QAAC;QAC7D,+DAA+D;QAC/D,sEAAsE;QACtE,iEAAiE;QACjE,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,iBAAiB;QACjB,MAAME,gBACJF,OAAOX,UACNU,CAAAA,KAAKpD,WAAW,IAAI,QACnBoD,KAAKpD,WAAW,KAAK,MACrBoD,KAAKpD,WAAW,KAAK,KAAI;QAC7B,IAAI,CAACuD,iBAAiB,CAACV,QAAQW,QAAQ,CAACJ,KAAKpD,WAAW,GAAG;YACzD,OAAO;gBACL+C,IAAI;gBACJ,sEAAsE;gBACtE,uEAAuE;gBACvE,6CAA6C;gBAC7CC,OACE,CAAC,WAAW,EAAEI,KAAKpD,WAAW,CAAC,sCAAsC,CAAC,GACtE,oEACA,uEACA;YACJ;QACF;QACA,MAAMyD,QAAa,CAAC;QACpB,KAAK,MAAMrC,OAAOlB,eAAgB;YAChC,IAAIkD,IAAI,CAAChC,IAAI,KAAKsC,WAAWD,KAAK,CAACrC,IAAI,GAAGgC,IAAI,CAAChC,IAAI;QACrD;QACA,sEAAsE;QACtE,IAAIqC,MAAMxC,KAAK,IAAI,OAAOwC,MAAMxC,KAAK,KAAK,UAAU;YAClDwC,MAAMxC,KAAK,GAAGD,2BAA2ByC,MAAMxC,KAAK,EAAEC;QACxD;QACAuC,MAAME,GAAG,GAAGN;QACZI,MAAMG,QAAQ,GAAGP,OAAOX,SAAS,QAAQU,iBAAAA,KAAKQ,QAAQ,YAAbR,iBAAiB;QAC1D,wEAAwE;QACxE,sEAAsE;QACtE,IAAIG,eAAe;YACjBE,MAAMzD,WAAW,GAAG;YACpBkD,gBAAgB;QAClB;QACAD,SAAS,CAACI,GAAG,GAAGI;QAChB,IAAIvB,MAAMC,OAAO,CAACiB,KAAKrB,KAAK,GAAGoB,MAAMU,IAAI,IAAIT,KAAKrB,KAAK;IACzD;IACA,IAAI+B;IACJ,IAAI;QACFA,aAAaC,KAAKC,SAAS,CAACf;IAC9B,EAAE,eAAM;QACN,OAAO;YAAEF,IAAI;YAAOC,OAAO;QAAiC;IAC9D;IACA,IAAIc,WAAWxB,MAAM,GAAGrC,+BAA+B;QACrD,OAAO;YAAE8C,IAAI;YAAOC,OAAO;QAAqC;IAClE;IACA,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,6DAA6D;IAC7D,EAAE;IACF,2EAA2E;IAC3E,6EAA6E;IAC7E,8BAA8B;IAC9B,IAAIE,iBAAiB5B,OAAOe,IAAI,CAACY,WAAWX,MAAM,IAAI,GAAG;QACvD,OAAO;YACLS,IAAI;YACJC,OACE,wEACA;QACJ;IACF;IACA,OAAO;QAAED,IAAI;QAAML;QAAQX,OAAOkB;IAAU;AAC9C;AAEA;;;;;CAKC,GACD,OAAO,SAASgB,2BACdvB,MAAc,EACdX,KAA8B;IAE9B,MAAMmC,OAAO,IAAIC;IACjB,MAAMC,QAAQ,CAACf;YAQHD;QAPV,MAAMA,OAAOrB,KAAK,CAACsB,GAAG;QACtB,IAAI,CAACD,QAAQc,KAAKG,GAAG,CAAChB,KAAK,OAAO;QAClCa,KAAKI,GAAG,CAACjB;QACT,OAAO;YACLrD,aAAaoD,KAAKpD,WAAW;WACzBoD,KAAKmB,QAAQ,GAAG;YAAEA,UAAUnB,KAAKmB,QAAQ;QAAC,IAAI,CAAC,GAC/CnB,KAAKnC,KAAK,GAAG;YAAEA,OAAOmC,KAAKnC,KAAK;QAAC,IAAI,CAAC;YAC1Cc,OAAO,EAACqB,cAAAA,KAAKrB,KAAK,YAAVqB,cAAc,EAAE,EACrBoB,GAAG,CAACJ,OACJrE,MAAM,CAAC,CAAC0E,QAA4CC,QAAQD;;IAEnE;IACA,OAAOL,MAAM1B;AACf;AAEA;;;;;CAKC,GACD,OAAO,MAAMiC,+BAAkD;IAC7D;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;CACD,CAAA"}

package/src/lib/app-utils/node-interactions.d.ts

@@ -14,14 +14,14 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import type { HostAction } from './actions';
+import type { SiteInteraction } from './site-interactions';
 /**
  * Interactions stored on the element that carries them.
  *
  * An interaction is what an ELEMENT does — clicked, hovered, scrolled into
- * view. A host action is what the SITE does — an order was placed, a form was
- * submitted. Both compile to the same runtime shape, and until now both were
- * stored the same way too, as rows in `hosts/{hostId}/actions` bound to an
+ * view. A site-wide one listens for what the SITE does — an order was placed,
+ * a form was submitted. Both are the same shape (`site-interactions.ts`),
+ * and until now both were stored the same way too, as rows in `hosts/{hostId}/actions` bound to an
  * element by selector. That made an interaction a site-wide object that
  * merely happened to point at one element, with all four consequences an
  * author would be surprised by: it did not publish or roll back with its
@@ -42,10 +42,10 @@ import type { HostAction } from './actions';
  * the copy binds to the copy, which is the whole reason for moving the
  * storage.
  */
-export interface NodeInteraction extends Omit<HostAction, 'trigger'> {
+export interface NodeInteraction extends Omit<SiteInteraction, 'trigger'> {
     /** Stable within its node, so an edit updates rather than appends. */
     id: string;
-    trigger: Omit<HostAction['trigger'], 'selector'>;
+    trigger: Omit<SiteInteraction['trigger'], 'selector'>;
 }
 /** Cap per element. Ten triggers on one button is a bug, not a design. */
 export declare const NODE_MAX_INTERACTIONS = 10;
@@ -88,7 +88,7 @@ export interface CollectedNodeInteraction {
      * are) treats them as the separate things they are.
      */
     id: string;
-    action: HostAction;
+    action: SiteInteraction;
 }
 export declare function collectNodeInteractions(nodes: Iterable<InteractionNode | null | undefined>): CollectedNodeInteraction[];
 /**

package/src/lib/app-utils/node-interactions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/node-interactions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { HostAction } from './actions'\n\n/**\n * Interactions stored on the element that carries them.\n *\n * An interaction is what an ELEMENT does — clicked, hovered, scrolled into\n * view. A host action is what the SITE does — an order was placed, a form was\n * submitted. Both compile to the same runtime shape, and until now both were\n * stored the same way too, as rows in `hosts/{hostId}/actions` bound to an\n * element by selector. That made an interaction a site-wide object that\n * merely happened to point at one element, with all four consequences an\n * author would be surprised by: it did not publish or roll back with its\n * screen, it did not travel with a copied component or a packaged template,\n * deleting the element orphaned it, and it cluttered the site's automation\n * list with a nav menu's hover timing.\n *\n * Here the node owns them, so all four answer themselves — the node is the\n * thing that versions, travels, and is deleted.\n *\n * ## The selector is not stored\n *\n * `trigger.selector` is derived from the node's id at compose time, never\n * persisted. A stored selector is a second name for the element that can\n * disagree with the first: a duplicate, a re-key, or a paste into another\n * document would carry a selector still naming the ORIGINAL element, and the\n * interaction would silently drive someone else's button. Deriving it means\n * the copy binds to the copy, which is the whole reason for moving the\n * storage.\n */\nexport interface NodeInteraction extends Omit<HostAction, 'trigger'> {\n  /** Stable within its node, so an edit updates rather than appends. */\n  id: string\n  trigger: Omit<HostAction['trigger'], 'selector'>\n}\n\n/** Cap per element. Ten triggers on one button is a bug, not a design. */\nexport const NODE_MAX_INTERACTIONS = 10\n\n/** The selector the renderer stamps for a node, and the runtime targets. */\nexport function nodeInteractionSelector(nodeId: string): string {\n  return `[data-aglyn=\"leaf:${nodeId}\"]`\n}\n\n/** The node a derived selector names, or undefined for anything else. */\nexport function nodeIdFromInteractionSelector(\n  selector: unknown,\n): string | undefined {\n  const match = /^\\[data-aglyn=\"leaf:(.+)\"\\]$/.exec(String(selector ?? ''))\n  return match?.[1] || undefined\n}\n\n/**\n * The prefix that makes a collected id say where it lives.\n *\n * Every surface that can toggle, edit or delete an interaction is handed an\n * id and nothing else, and there are now two places one can be stored. A\n * self-describing id is what lets those surfaces route without a second\n * lookup — and, more to the point, without GUESSING, which during the\n * migration would mean writing a node interaction into the actions\n * collection or vice versa.\n */\nexport const NODE_INTERACTION_ID_PREFIX = 'node:'\n\n/** The node and interaction a collected id names, or null for a host action. */\nexport function parseNodeInteractionId(\n  id: unknown,\n): { nodeId: string; interactionId: string } | null {\n  const value = String(id ?? '')\n  if (!value.startsWith(NODE_INTERACTION_ID_PREFIX)) return null\n  const rest = value.slice(NODE_INTERACTION_ID_PREFIX.length)\n  // The node id comes first and cannot contain a colon; the interaction id\n  // takes the remainder, so a colon inside one survives the round trip.\n  const separator = rest.indexOf(':')\n  if (separator <= 0 || separator === rest.length - 1) return null\n  return {\n    nodeId: rest.slice(0, separator),\n    interactionId: rest.slice(separator + 1),\n  }\n}\n\n/** The collected id for one interaction on one node. */\nexport function nodeInteractionId(\n  nodeId: string,\n  interactionId: string,\n): string {\n  return `${NODE_INTERACTION_ID_PREFIX}${nodeId}:${interactionId}`\n}\n\n/** Minimal node shape this module reads; the canvas node satisfies it. */\nexport interface InteractionNode {\n  $id?: string\n  interactions?: NodeInteraction[] | null\n  /** Denormalized children. Ids are the normalized form and carry nothing. */\n  nodes?: unknown\n}\n\n/**\n * Every node in a DENORMALIZED tree, depth-first, parents before children.\n *\n * Composition is what makes this the right input: a layout's chrome and a\n * reusable component's internals are grafted in by then, and their node ids\n * are the graft ids the renderer actually stamps. Collecting from the raw\n * screen document instead would derive a selector for an id that is never on\n * the page — which is the same bug as a stored selector, arrived at from the\n * other direction.\n *\n * A normalized tree (children as id strings) yields only the node it was\n * given; there is nothing to follow, and guessing at a lookup table this\n * module does not have would be worse than answering honestly.\n */\n/** A single node rather than a map of them: it names itself. */\nfunction isInteractionNodeLike(value: unknown): boolean {\n  return (\n    !!value &&\n    typeof value === 'object' &&\n    typeof (value as { $id?: unknown }).$id === 'string'\n  )\n}\n\nexport function* walkInteractionNodes(\n  root: InteractionNode | null | undefined,\n): Generator<InteractionNode> {\n  /*\n   * A NORMALIZED map is the shape the tenant actually composes.\n   *\n   * `composeScreenNodes` returns `{ [id]: node }` with children as id\n   * STRINGS, and the enricher handed that straight here. The old code took\n   * the map itself for a node: it carries no `$id` and no `interactions`, its\n   * `nodes` property does not exist, so the walk yielded one useless object\n   * and stopped. Every node interaction on every published page was dropped —\n   * silently, because an empty automation list is what a page with none looks\n   * like.\n   *\n   * A map is recognisable without guessing: no `$id`, no `nodes` array, and\n   * every value an object carrying its own `$id`. Yielding its values is\n   * exact rather than a lookup this module would have to invent — the map is\n   * already flat, so there is nothing to follow.\n   */\n  if (root && typeof root === 'object' && !isInteractionNodeLike(root)) {\n    const values = Object.values(root as Record<string, unknown>)\n    if (values.length && values.every((v) => isInteractionNodeLike(v))) {\n      for (const node of values) yield node as InteractionNode\n      return\n    }\n  }\n  if (!root || typeof root !== 'object') return\n  yield root\n  const children = (root as { nodes?: unknown }).nodes\n  if (!Array.isArray(children)) return\n  for (const child of children) {\n    if (child && typeof child === 'object') {\n      yield* walkInteractionNodes(child as InteractionNode)\n    }\n  }\n}\n\n/** One interaction resolved into the runtime's own shape. */\nexport interface CollectedNodeInteraction {\n  /**\n   * Namespaced with the node id, so two elements carrying the same preset —\n   * two Dropdown Panels inserted from the same source — cannot collide, and\n   * so a runtime keyed on this id (the once-per-visitor and cooldown caps\n   * are) treats them as the separate things they are.\n   */\n  id: string\n  action: HostAction\n}\n\n/**\n * Every interaction in a composed tree, in the runtime's shape.\n *\n * Order follows the nodes, which is document order — a page with two\n * elements listening for the same event fires them in the order they appear,\n * which is the only ordering an author can predict.\n *\n * Disabled interactions are kept, not dropped. The compiler downstream is the\n * one place that decides what runs (it also applies the plan trims), and two\n * places deciding is how a step gets dropped for a reason nobody can find.\n */\n/**\n * Step selectors, re-pointed at the ids the graft actually stamped.\n *\n * A trigger needs no help: the node IS the selector, derived above from the\n * composed id. A STEP is different — it names another element, and it was\n * written when the component was authored, so it holds that component's own\n * id. Grafting an instance re-stamps every id with the instance's prefix, so\n * `[data-aglyn=\"leaf:panel\"]` names nothing on a page that renders\n * `leaf:cmp__inst__panel`, and a mega menu opens nothing.\n *\n * Rewritten only when the bare id is absent AND exactly the prefixed sibling\n * is present: an interaction that legitimately targets a page-level element\n * from inside a component keeps working, and an unresolvable selector is left\n * exactly as written rather than pointed somewhere plausible.\n */\nfunction regraftStepSelectors(\n  steps: HostAction['steps'],\n  nodeId: string,\n  present: ReadonlySet<string>,\n): HostAction['steps'] {\n  const boundary = nodeId.lastIndexOf('__')\n  if (boundary < 0) return steps\n  const prefix = nodeId.slice(0, boundary + 2)\n  if (!prefix) return steps\n  return (steps ?? []).map((step) => {\n    const targetId = nodeIdFromInteractionSelector(\n      (step as { selector?: unknown })?.selector,\n    )\n    if (!targetId || present.has(targetId)) return step\n    const grafted = `${prefix}${targetId}`\n    if (!present.has(grafted)) return step\n    return { ...step, selector: nodeInteractionSelector(grafted) }\n  }) as HostAction['steps']\n}\n\nexport function collectNodeInteractions(\n  nodes: Iterable<InteractionNode | null | undefined>,\n): CollectedNodeInteraction[] {\n  const collected: CollectedNodeInteraction[] = []\n  const all = [...nodes]\n  const present = new Set(\n    all.map((node) => node?.$id).filter((id): id is string => !!id),\n  )\n  for (const node of all) {\n    const nodeId = node?.$id\n    if (!nodeId || !Array.isArray(node?.interactions)) continue\n    let index = 0\n    for (const interaction of node.interactions) {\n      if (index >= NODE_MAX_INTERACTIONS) break\n      if (!interaction?.trigger?.event) continue\n      index += 1\n      collected.push({\n        id: nodeInteractionId(nodeId, interaction.id || String(index)),\n        action: {\n          ...interaction,\n          ...(Array.isArray((interaction as { steps?: unknown }).steps)\n            ? {\n                steps: regraftStepSelectors(\n                  (interaction as unknown as HostAction).steps,\n                  nodeId,\n                  present,\n                ),\n              }\n            : {}),\n          trigger: {\n            ...interaction.trigger,\n            // Derived here and nowhere else — see the note above on why it\n            // is not stored.\n            selector: nodeInteractionSelector(nodeId),\n          },\n        } as HostAction,\n      })\n    }\n  }\n  return collected\n}\n\n/**\n * The interactions on one node with one entry added or replaced.\n *\n * Returns a new array; never mutates the one passed in, which is a MobX\n * observable on the canvas and a plain array everywhere else.\n */\nexport function upsertNodeInteraction(\n  interactions: readonly NodeInteraction[] | undefined,\n  interaction: NodeInteraction,\n): NodeInteraction[] {\n  const current = interactions ?? []\n  const existing = current.findIndex((entry) => entry.id === interaction.id)\n  if (existing < 0) return [...current, interaction].slice(0, NODE_MAX_INTERACTIONS)\n  const next = [...current]\n  next[existing] = interaction\n  return next\n}\n\n/** The interactions on one node with one removed. */\nexport function removeNodeInteraction(\n  interactions: readonly NodeInteraction[] | undefined,\n  id: string,\n): NodeInteraction[] {\n  return (interactions ?? []).filter((entry) => entry.id !== id)\n}\n"],"names":["NODE_MAX_INTERACTIONS","nodeInteractionSelector","nodeId","nodeIdFromInteractionSelector","selector","match","exec","String","undefined","NODE_INTERACTION_ID_PREFIX","parseNodeInteractionId","id","value","startsWith","rest","slice","length","separator","indexOf","interactionId","nodeInteractionId","isInteractionNodeLike","$id","walkInteractionNodes","root","values","Object","every","v","node","children","nodes","Array","isArray","child","regraftStepSelectors","steps","present","boundary","lastIndexOf","prefix","map","step","targetId","has","grafted","collectNodeInteractions","collected","all","Set","filter","interactions","index","interaction","trigger","event","push","action","upsertNodeInteraction","current","existing","findIndex","entry","next","removeNodeInteraction"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAqCD,wEAAwE,GACxE,OAAO,MAAMA,wBAAwB,GAAE;AAEvC,0EAA0E,GAC1E,OAAO,SAASC,wBAAwBC,MAAc;IACpD,OAAO,CAAC,kBAAkB,EAAEA,OAAO,EAAE,CAAC;AACxC;AAEA,uEAAuE,GACvE,OAAO,SAASC,8BACdC,QAAiB;IAEjB,MAAMC,QAAQ,+BAA+BC,IAAI,CAACC,OAAOH,mBAAAA,WAAY;IACrE,OAAOC,CAAAA,yBAAAA,KAAO,CAAC,EAAE,KAAIG;AACvB;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMC,6BAA6B,QAAO;AAEjD,8EAA8E,GAC9E,OAAO,SAASC,uBACdC,EAAW;IAEX,MAAMC,QAAQL,OAAOI,aAAAA,KAAM;IAC3B,IAAI,CAACC,MAAMC,UAAU,CAACJ,6BAA6B,OAAO;IAC1D,MAAMK,OAAOF,MAAMG,KAAK,CAACN,2BAA2BO,MAAM;IAC1D,yEAAyE;IACzE,sEAAsE;IACtE,MAAMC,YAAYH,KAAKI,OAAO,CAAC;IAC/B,IAAID,aAAa,KAAKA,cAAcH,KAAKE,MAAM,GAAG,GAAG,OAAO;IAC5D,OAAO;QACLd,QAAQY,KAAKC,KAAK,CAAC,GAAGE;QACtBE,eAAeL,KAAKC,KAAK,CAACE,YAAY;IACxC;AACF;AAEA,sDAAsD,GACtD,OAAO,SAASG,kBACdlB,MAAc,EACdiB,aAAqB;IAErB,OAAO,GAAGV,6BAA6BP,OAAO,CAAC,EAAEiB,eAAe;AAClE;AAUA;;;;;;;;;;;;;CAaC,GACD,8DAA8D,GAC9D,SAASE,sBAAsBT,KAAc;IAC3C,OACE,CAAC,CAACA,SACF,OAAOA,UAAU,YACjB,OAAO,AAACA,MAA4BU,GAAG,KAAK;AAEhD;AAEA,OAAO,UAAUC,qBACfC,IAAwC;IAExC;;;;;;;;;;;;;;;GAeC,GACD,IAAIA,QAAQ,OAAOA,SAAS,YAAY,CAACH,sBAAsBG,OAAO;QACpE,MAAMC,SAASC,OAAOD,MAAM,CAACD;QAC7B,IAAIC,OAAOT,MAAM,IAAIS,OAAOE,KAAK,CAAC,CAACC,IAAMP,sBAAsBO,KAAK;YAClE,KAAK,MAAMC,QAAQJ,OAAQ,MAAMI;YACjC;QACF;IACF;IACA,IAAI,CAACL,QAAQ,OAAOA,SAAS,UAAU;IACvC,MAAMA;IACN,MAAMM,WAAW,AAACN,KAA6BO,KAAK;IACpD,IAAI,CAACC,MAAMC,OAAO,CAACH,WAAW;IAC9B,KAAK,MAAMI,SAASJ,SAAU;QAC5B,IAAII,SAAS,OAAOA,UAAU,UAAU;YACtC,OAAOX,qBAAqBW;QAC9B;IACF;AACF;AAcA;;;;;;;;;;CAUC,GACD;;;;;;;;;;;;;;CAcC,GACD,SAASC,qBACPC,KAA0B,EAC1BlC,MAAc,EACdmC,OAA4B;IAE5B,MAAMC,WAAWpC,OAAOqC,WAAW,CAAC;IACpC,IAAID,WAAW,GAAG,OAAOF;IACzB,MAAMI,SAAStC,OAAOa,KAAK,CAAC,GAAGuB,WAAW;IAC1C,IAAI,CAACE,QAAQ,OAAOJ;IACpB,OAAO,CAACA,gBAAAA,QAAS,EAAE,EAAEK,GAAG,CAAC,CAACC;QACxB,MAAMC,WAAWxC,8BACduC,wBAAD,AAACA,KAAiCtC,QAAQ;QAE5C,IAAI,CAACuC,YAAYN,QAAQO,GAAG,CAACD,WAAW,OAAOD;QAC/C,MAAMG,UAAU,GAAGL,SAASG,UAAU;QACtC,IAAI,CAACN,QAAQO,GAAG,CAACC,UAAU,OAAOH;QAClC,OAAO,aAAKA;YAAMtC,UAAUH,wBAAwB4C;;IACtD;AACF;AAEA,OAAO,SAASC,wBACdf,KAAmD;IAEnD,MAAMgB,YAAwC,EAAE;IAChD,MAAMC,MAAM;WAAIjB;KAAM;IACtB,MAAMM,UAAU,IAAIY,IAClBD,IAAIP,GAAG,CAAC,CAACZ,OAASA,wBAAAA,KAAMP,GAAG,EAAE4B,MAAM,CAAC,CAACvC,KAAqB,CAAC,CAACA;IAE9D,KAAK,MAAMkB,QAAQmB,IAAK;QACtB,MAAM9C,SAAS2B,wBAAAA,KAAMP,GAAG;QACxB,IAAI,CAACpB,UAAU,CAAC8B,MAAMC,OAAO,CAACJ,wBAAAA,KAAMsB,YAAY,GAAG;QACnD,IAAIC,QAAQ;QACZ,KAAK,MAAMC,eAAexB,KAAKsB,YAAY,CAAE;gBAEtCE;YADL,IAAID,SAASpD,uBAAuB;YACpC,IAAI,EAACqD,gCAAAA,uBAAAA,YAAaC,OAAO,qBAApBD,qBAAsBE,KAAK,GAAE;YAClCH,SAAS;YACTL,UAAUS,IAAI,CAAC;gBACb7C,IAAIS,kBAAkBlB,QAAQmD,YAAY1C,EAAE,IAAIJ,OAAO6C;gBACvDK,QAAQ,aACHJ,aACCrB,MAAMC,OAAO,CAAC,AAACoB,YAAoCjB,KAAK,IACxD;oBACEA,OAAOD,qBACL,AAACkB,YAAsCjB,KAAK,EAC5ClC,QACAmC;gBAEJ,IACA,CAAC;oBACLiB,SAAS,aACJD,YAAYC,OAAO;wBACtB,+DAA+D;wBAC/D,iBAAiB;wBACjBlD,UAAUH,wBAAwBC;;;YAGxC;QACF;IACF;IACA,OAAO6C;AACT;AAEA;;;;;CAKC,GACD,OAAO,SAASW,sBACdP,YAAoD,EACpDE,WAA4B;IAE5B,MAAMM,UAAUR,uBAAAA,eAAgB,EAAE;IAClC,MAAMS,WAAWD,QAAQE,SAAS,CAAC,CAACC,QAAUA,MAAMnD,EAAE,KAAK0C,YAAY1C,EAAE;IACzE,IAAIiD,WAAW,GAAG,OAAO;WAAID;QAASN;KAAY,CAACtC,KAAK,CAAC,GAAGf;IAC5D,MAAM+D,OAAO;WAAIJ;KAAQ;IACzBI,IAAI,CAACH,SAAS,GAAGP;IACjB,OAAOU;AACT;AAEA,mDAAmD,GACnD,OAAO,SAASC,sBACdb,YAAoD,EACpDxC,EAAU;IAEV,OAAO,CAACwC,uBAAAA,eAAgB,EAAE,EAAED,MAAM,CAAC,CAACY,QAAUA,MAAMnD,EAAE,KAAKA;AAC7D"}
+{"version":3,"sources":["../../../../../../libs/aglyn/src/lib/app-utils/node-interactions.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { SiteInteraction } from './site-interactions'\n\n/**\n * Interactions stored on the element that carries them.\n *\n * An interaction is what an ELEMENT does — clicked, hovered, scrolled into\n * view. A site-wide one listens for what the SITE does — an order was placed,\n * a form was submitted. Both are the same shape (`site-interactions.ts`),\n * and until now both were stored the same way too, as rows in `hosts/{hostId}/actions` bound to an\n * element by selector. That made an interaction a site-wide object that\n * merely happened to point at one element, with all four consequences an\n * author would be surprised by: it did not publish or roll back with its\n * screen, it did not travel with a copied component or a packaged template,\n * deleting the element orphaned it, and it cluttered the site's automation\n * list with a nav menu's hover timing.\n *\n * Here the node owns them, so all four answer themselves — the node is the\n * thing that versions, travels, and is deleted.\n *\n * ## The selector is not stored\n *\n * `trigger.selector` is derived from the node's id at compose time, never\n * persisted. A stored selector is a second name for the element that can\n * disagree with the first: a duplicate, a re-key, or a paste into another\n * document would carry a selector still naming the ORIGINAL element, and the\n * interaction would silently drive someone else's button. Deriving it means\n * the copy binds to the copy, which is the whole reason for moving the\n * storage.\n */\nexport interface NodeInteraction extends Omit<SiteInteraction, 'trigger'> {\n  /** Stable within its node, so an edit updates rather than appends. */\n  id: string\n  trigger: Omit<SiteInteraction['trigger'], 'selector'>\n}\n\n/** Cap per element. Ten triggers on one button is a bug, not a design. */\nexport const NODE_MAX_INTERACTIONS = 10\n\n/** The selector the renderer stamps for a node, and the runtime targets. */\nexport function nodeInteractionSelector(nodeId: string): string {\n  return `[data-aglyn=\"leaf:${nodeId}\"]`\n}\n\n/** The node a derived selector names, or undefined for anything else. */\nexport function nodeIdFromInteractionSelector(\n  selector: unknown,\n): string | undefined {\n  const match = /^\\[data-aglyn=\"leaf:(.+)\"\\]$/.exec(String(selector ?? ''))\n  return match?.[1] || undefined\n}\n\n/**\n * The prefix that makes a collected id say where it lives.\n *\n * Every surface that can toggle, edit or delete an interaction is handed an\n * id and nothing else, and there are now two places one can be stored. A\n * self-describing id is what lets those surfaces route without a second\n * lookup — and, more to the point, without GUESSING, which during the\n * migration would mean writing a node interaction into the actions\n * collection or vice versa.\n */\nexport const NODE_INTERACTION_ID_PREFIX = 'node:'\n\n/** The node and interaction a collected id names, or null for a host action. */\nexport function parseNodeInteractionId(\n  id: unknown,\n): { nodeId: string; interactionId: string } | null {\n  const value = String(id ?? '')\n  if (!value.startsWith(NODE_INTERACTION_ID_PREFIX)) return null\n  const rest = value.slice(NODE_INTERACTION_ID_PREFIX.length)\n  // The node id comes first and cannot contain a colon; the interaction id\n  // takes the remainder, so a colon inside one survives the round trip.\n  const separator = rest.indexOf(':')\n  if (separator <= 0 || separator === rest.length - 1) return null\n  return {\n    nodeId: rest.slice(0, separator),\n    interactionId: rest.slice(separator + 1),\n  }\n}\n\n/** The collected id for one interaction on one node. */\nexport function nodeInteractionId(\n  nodeId: string,\n  interactionId: string,\n): string {\n  return `${NODE_INTERACTION_ID_PREFIX}${nodeId}:${interactionId}`\n}\n\n/** Minimal node shape this module reads; the canvas node satisfies it. */\nexport interface InteractionNode {\n  $id?: string\n  interactions?: NodeInteraction[] | null\n  /** Denormalized children. Ids are the normalized form and carry nothing. */\n  nodes?: unknown\n}\n\n/**\n * Every node in a DENORMALIZED tree, depth-first, parents before children.\n *\n * Composition is what makes this the right input: a layout's chrome and a\n * reusable component's internals are grafted in by then, and their node ids\n * are the graft ids the renderer actually stamps. Collecting from the raw\n * screen document instead would derive a selector for an id that is never on\n * the page — which is the same bug as a stored selector, arrived at from the\n * other direction.\n *\n * A normalized tree (children as id strings) yields only the node it was\n * given; there is nothing to follow, and guessing at a lookup table this\n * module does not have would be worse than answering honestly.\n */\n/** A single node rather than a map of them: it names itself. */\nfunction isInteractionNodeLike(value: unknown): boolean {\n  return (\n    !!value &&\n    typeof value === 'object' &&\n    typeof (value as { $id?: unknown }).$id === 'string'\n  )\n}\n\nexport function* walkInteractionNodes(\n  root: InteractionNode | null | undefined,\n): Generator<InteractionNode> {\n  /*\n   * A NORMALIZED map is the shape the tenant actually composes.\n   *\n   * `composeScreenNodes` returns `{ [id]: node }` with children as id\n   * STRINGS, and the enricher handed that straight here. The old code took\n   * the map itself for a node: it carries no `$id` and no `interactions`, its\n   * `nodes` property does not exist, so the walk yielded one useless object\n   * and stopped. Every node interaction on every published page was dropped —\n   * silently, because an empty automation list is what a page with none looks\n   * like.\n   *\n   * A map is recognisable without guessing: no `$id`, no `nodes` array, and\n   * every value an object carrying its own `$id`. Yielding its values is\n   * exact rather than a lookup this module would have to invent — the map is\n   * already flat, so there is nothing to follow.\n   */\n  if (root && typeof root === 'object' && !isInteractionNodeLike(root)) {\n    const values = Object.values(root as Record<string, unknown>)\n    if (values.length && values.every((v) => isInteractionNodeLike(v))) {\n      for (const node of values) yield node as InteractionNode\n      return\n    }\n  }\n  if (!root || typeof root !== 'object') return\n  yield root\n  const children = (root as { nodes?: unknown }).nodes\n  if (!Array.isArray(children)) return\n  for (const child of children) {\n    if (child && typeof child === 'object') {\n      yield* walkInteractionNodes(child as InteractionNode)\n    }\n  }\n}\n\n/** One interaction resolved into the runtime's own shape. */\nexport interface CollectedNodeInteraction {\n  /**\n   * Namespaced with the node id, so two elements carrying the same preset —\n   * two Dropdown Panels inserted from the same source — cannot collide, and\n   * so a runtime keyed on this id (the once-per-visitor and cooldown caps\n   * are) treats them as the separate things they are.\n   */\n  id: string\n  action: SiteInteraction\n}\n\n/**\n * Every interaction in a composed tree, in the runtime's shape.\n *\n * Order follows the nodes, which is document order — a page with two\n * elements listening for the same event fires them in the order they appear,\n * which is the only ordering an author can predict.\n *\n * Disabled interactions are kept, not dropped. The compiler downstream is the\n * one place that decides what runs (it also applies the plan trims), and two\n * places deciding is how a step gets dropped for a reason nobody can find.\n */\n/**\n * Step selectors, re-pointed at the ids the graft actually stamped.\n *\n * A trigger needs no help: the node IS the selector, derived above from the\n * composed id. A STEP is different — it names another element, and it was\n * written when the component was authored, so it holds that component's own\n * id. Grafting an instance re-stamps every id with the instance's prefix, so\n * `[data-aglyn=\"leaf:panel\"]` names nothing on a page that renders\n * `leaf:cmp__inst__panel`, and a mega menu opens nothing.\n *\n * Rewritten only when the bare id is absent AND exactly the prefixed sibling\n * is present: an interaction that legitimately targets a page-level element\n * from inside a component keeps working, and an unresolvable selector is left\n * exactly as written rather than pointed somewhere plausible.\n */\nfunction regraftStepSelectors(\n  steps: SiteInteraction['steps'],\n  nodeId: string,\n  present: ReadonlySet<string>,\n): SiteInteraction['steps'] {\n  const boundary = nodeId.lastIndexOf('__')\n  if (boundary < 0) return steps\n  const prefix = nodeId.slice(0, boundary + 2)\n  if (!prefix) return steps\n  return (steps ?? []).map((step) => {\n    const targetId = nodeIdFromInteractionSelector(\n      (step as { selector?: unknown })?.selector,\n    )\n    if (!targetId || present.has(targetId)) return step\n    const grafted = `${prefix}${targetId}`\n    if (!present.has(grafted)) return step\n    return { ...step, selector: nodeInteractionSelector(grafted) }\n  }) as SiteInteraction['steps']\n}\n\nexport function collectNodeInteractions(\n  nodes: Iterable<InteractionNode | null | undefined>,\n): CollectedNodeInteraction[] {\n  const collected: CollectedNodeInteraction[] = []\n  const all = [...nodes]\n  const present = new Set(\n    all.map((node) => node?.$id).filter((id): id is string => !!id),\n  )\n  for (const node of all) {\n    const nodeId = node?.$id\n    if (!nodeId || !Array.isArray(node?.interactions)) continue\n    let index = 0\n    for (const interaction of node.interactions) {\n      if (index >= NODE_MAX_INTERACTIONS) break\n      if (!interaction?.trigger?.event) continue\n      index += 1\n      collected.push({\n        id: nodeInteractionId(nodeId, interaction.id || String(index)),\n        action: {\n          ...interaction,\n          ...(Array.isArray((interaction as { steps?: unknown }).steps)\n            ? {\n                steps: regraftStepSelectors(\n                  (interaction as unknown as SiteInteraction).steps,\n                  nodeId,\n                  present,\n                ),\n              }\n            : {}),\n          trigger: {\n            ...interaction.trigger,\n            // Derived here and nowhere else — see the note above on why it\n            // is not stored.\n            selector: nodeInteractionSelector(nodeId),\n          },\n        } as SiteInteraction,\n      })\n    }\n  }\n  return collected\n}\n\n/**\n * The interactions on one node with one entry added or replaced.\n *\n * Returns a new array; never mutates the one passed in, which is a MobX\n * observable on the canvas and a plain array everywhere else.\n */\nexport function upsertNodeInteraction(\n  interactions: readonly NodeInteraction[] | undefined,\n  interaction: NodeInteraction,\n): NodeInteraction[] {\n  const current = interactions ?? []\n  const existing = current.findIndex((entry) => entry.id === interaction.id)\n  if (existing < 0) return [...current, interaction].slice(0, NODE_MAX_INTERACTIONS)\n  const next = [...current]\n  next[existing] = interaction\n  return next\n}\n\n/** The interactions on one node with one removed. */\nexport function removeNodeInteraction(\n  interactions: readonly NodeInteraction[] | undefined,\n  id: string,\n): NodeInteraction[] {\n  return (interactions ?? []).filter((entry) => entry.id !== id)\n}\n"],"names":["NODE_MAX_INTERACTIONS","nodeInteractionSelector","nodeId","nodeIdFromInteractionSelector","selector","match","exec","String","undefined","NODE_INTERACTION_ID_PREFIX","parseNodeInteractionId","id","value","startsWith","rest","slice","length","separator","indexOf","interactionId","nodeInteractionId","isInteractionNodeLike","$id","walkInteractionNodes","root","values","Object","every","v","node","children","nodes","Array","isArray","child","regraftStepSelectors","steps","present","boundary","lastIndexOf","prefix","map","step","targetId","has","grafted","collectNodeInteractions","collected","all","Set","filter","interactions","index","interaction","trigger","event","push","action","upsertNodeInteraction","current","existing","findIndex","entry","next","removeNodeInteraction"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAqCD,wEAAwE,GACxE,OAAO,MAAMA,wBAAwB,GAAE;AAEvC,0EAA0E,GAC1E,OAAO,SAASC,wBAAwBC,MAAc;IACpD,OAAO,CAAC,kBAAkB,EAAEA,OAAO,EAAE,CAAC;AACxC;AAEA,uEAAuE,GACvE,OAAO,SAASC,8BACdC,QAAiB;IAEjB,MAAMC,QAAQ,+BAA+BC,IAAI,CAACC,OAAOH,mBAAAA,WAAY;IACrE,OAAOC,CAAAA,yBAAAA,KAAO,CAAC,EAAE,KAAIG;AACvB;AAEA;;;;;;;;;CASC,GACD,OAAO,MAAMC,6BAA6B,QAAO;AAEjD,8EAA8E,GAC9E,OAAO,SAASC,uBACdC,EAAW;IAEX,MAAMC,QAAQL,OAAOI,aAAAA,KAAM;IAC3B,IAAI,CAACC,MAAMC,UAAU,CAACJ,6BAA6B,OAAO;IAC1D,MAAMK,OAAOF,MAAMG,KAAK,CAACN,2BAA2BO,MAAM;IAC1D,yEAAyE;IACzE,sEAAsE;IACtE,MAAMC,YAAYH,KAAKI,OAAO,CAAC;IAC/B,IAAID,aAAa,KAAKA,cAAcH,KAAKE,MAAM,GAAG,GAAG,OAAO;IAC5D,OAAO;QACLd,QAAQY,KAAKC,KAAK,CAAC,GAAGE;QACtBE,eAAeL,KAAKC,KAAK,CAACE,YAAY;IACxC;AACF;AAEA,sDAAsD,GACtD,OAAO,SAASG,kBACdlB,MAAc,EACdiB,aAAqB;IAErB,OAAO,GAAGV,6BAA6BP,OAAO,CAAC,EAAEiB,eAAe;AAClE;AAUA;;;;;;;;;;;;;CAaC,GACD,8DAA8D,GAC9D,SAASE,sBAAsBT,KAAc;IAC3C,OACE,CAAC,CAACA,SACF,OAAOA,UAAU,YACjB,OAAO,AAACA,MAA4BU,GAAG,KAAK;AAEhD;AAEA,OAAO,UAAUC,qBACfC,IAAwC;IAExC;;;;;;;;;;;;;;;GAeC,GACD,IAAIA,QAAQ,OAAOA,SAAS,YAAY,CAACH,sBAAsBG,OAAO;QACpE,MAAMC,SAASC,OAAOD,MAAM,CAACD;QAC7B,IAAIC,OAAOT,MAAM,IAAIS,OAAOE,KAAK,CAAC,CAACC,IAAMP,sBAAsBO,KAAK;YAClE,KAAK,MAAMC,QAAQJ,OAAQ,MAAMI;YACjC;QACF;IACF;IACA,IAAI,CAACL,QAAQ,OAAOA,SAAS,UAAU;IACvC,MAAMA;IACN,MAAMM,WAAW,AAACN,KAA6BO,KAAK;IACpD,IAAI,CAACC,MAAMC,OAAO,CAACH,WAAW;IAC9B,KAAK,MAAMI,SAASJ,SAAU;QAC5B,IAAII,SAAS,OAAOA,UAAU,UAAU;YACtC,OAAOX,qBAAqBW;QAC9B;IACF;AACF;AAcA;;;;;;;;;;CAUC,GACD;;;;;;;;;;;;;;CAcC,GACD,SAASC,qBACPC,KAA+B,EAC/BlC,MAAc,EACdmC,OAA4B;IAE5B,MAAMC,WAAWpC,OAAOqC,WAAW,CAAC;IACpC,IAAID,WAAW,GAAG,OAAOF;IACzB,MAAMI,SAAStC,OAAOa,KAAK,CAAC,GAAGuB,WAAW;IAC1C,IAAI,CAACE,QAAQ,OAAOJ;IACpB,OAAO,CAACA,gBAAAA,QAAS,EAAE,EAAEK,GAAG,CAAC,CAACC;QACxB,MAAMC,WAAWxC,8BACduC,wBAAD,AAACA,KAAiCtC,QAAQ;QAE5C,IAAI,CAACuC,YAAYN,QAAQO,GAAG,CAACD,WAAW,OAAOD;QAC/C,MAAMG,UAAU,GAAGL,SAASG,UAAU;QACtC,IAAI,CAACN,QAAQO,GAAG,CAACC,UAAU,OAAOH;QAClC,OAAO,aAAKA;YAAMtC,UAAUH,wBAAwB4C;;IACtD;AACF;AAEA,OAAO,SAASC,wBACdf,KAAmD;IAEnD,MAAMgB,YAAwC,EAAE;IAChD,MAAMC,MAAM;WAAIjB;KAAM;IACtB,MAAMM,UAAU,IAAIY,IAClBD,IAAIP,GAAG,CAAC,CAACZ,OAASA,wBAAAA,KAAMP,GAAG,EAAE4B,MAAM,CAAC,CAACvC,KAAqB,CAAC,CAACA;IAE9D,KAAK,MAAMkB,QAAQmB,IAAK;QACtB,MAAM9C,SAAS2B,wBAAAA,KAAMP,GAAG;QACxB,IAAI,CAACpB,UAAU,CAAC8B,MAAMC,OAAO,CAACJ,wBAAAA,KAAMsB,YAAY,GAAG;QACnD,IAAIC,QAAQ;QACZ,KAAK,MAAMC,eAAexB,KAAKsB,YAAY,CAAE;gBAEtCE;YADL,IAAID,SAASpD,uBAAuB;YACpC,IAAI,EAACqD,gCAAAA,uBAAAA,YAAaC,OAAO,qBAApBD,qBAAsBE,KAAK,GAAE;YAClCH,SAAS;YACTL,UAAUS,IAAI,CAAC;gBACb7C,IAAIS,kBAAkBlB,QAAQmD,YAAY1C,EAAE,IAAIJ,OAAO6C;gBACvDK,QAAQ,aACHJ,aACCrB,MAAMC,OAAO,CAAC,AAACoB,YAAoCjB,KAAK,IACxD;oBACEA,OAAOD,qBACL,AAACkB,YAA2CjB,KAAK,EACjDlC,QACAmC;gBAEJ,IACA,CAAC;oBACLiB,SAAS,aACJD,YAAYC,OAAO;wBACtB,+DAA+D;wBAC/D,iBAAiB;wBACjBlD,UAAUH,wBAAwBC;;;YAGxC;QACF;IACF;IACA,OAAO6C;AACT;AAEA;;;;;CAKC,GACD,OAAO,SAASW,sBACdP,YAAoD,EACpDE,WAA4B;IAE5B,MAAMM,UAAUR,uBAAAA,eAAgB,EAAE;IAClC,MAAMS,WAAWD,QAAQE,SAAS,CAAC,CAACC,QAAUA,MAAMnD,EAAE,KAAK0C,YAAY1C,EAAE;IACzE,IAAIiD,WAAW,GAAG,OAAO;WAAID;QAASN;KAAY,CAACtC,KAAK,CAAC,GAAGf;IAC5D,MAAM+D,OAAO;WAAIJ;KAAQ;IACzBI,IAAI,CAACH,SAAS,GAAGP;IACjB,OAAOU;AACT;AAEA,mDAAmD,GACnD,OAAO,SAASC,sBACdb,YAAoD,EACpDxC,EAAU;IAEV,OAAO,CAACwC,uBAAAA,eAAgB,EAAE,EAAED,MAAM,CAAC,CAACY,QAAUA,MAAMnD,EAAE,KAAKA;AAC7D"}