@ai-gui/core 0.5.0 → 0.6.0

package/dist/index.cjs

@@ -238,6 +238,18 @@ function sanitizeHtml(html, options = {}) {
 	}
 	return dompurify.default.sanitize(html);
 }
+/**
+* Sanitize one piece of rendered HTML, respecting a plugin's claim that it built the markup itself.
+*
+* Shared by every framework binding so the three of them cannot drift apart on what "sanitize"
+* means — and so a diagram is not escaped into its own source text in one of them.
+*/
+function sanitizeRenderedHtml(html, sanitize, trusted = false) {
+	if (sanitize === false) return html;
+	const options = typeof sanitize === "object" ? sanitize : void 0;
+	if (trusted && options?.trustPlugins !== false) return html;
+	return sanitizeHtml(html, options);
+}
 
 //#endregion
 //#region src/debug-events.ts
@@ -2645,5 +2657,6 @@ exports.readableBytes = readableBytes
 exports.repairMarkdown = repairMarkdown
 exports.safeDebugValue = safeDebugValue
 exports.sanitizeHtml = sanitizeHtml
+exports.sanitizeRenderedHtml = sanitizeRenderedHtml
 exports.textLines = textLines
 exports.validateJSONSchema = validateJSONSchema

package/dist/index.d.cts

@@ -36,6 +36,12 @@ interface SanitizeHtmlOptions {
   sanitizer?: (html: string) => string;
   /** Bare SSR either escapes all markup (default) or fails explicitly. */
   ssr?: "escape" | "throw";
+  /**
+   * Whether a plugin may declare its own markup safe, which it does by returning `trusted: true`.
+   * On by default: a plugin is code the host installed, and sanitizing the SVG it drew would
+   * escape it into text. Set to `false` to sanitize every output whatever its origin.
+   */
+  trustPlugins?: boolean;
 }
 /**
  * Sanitize an HTML string, stripping scripts and unsafe attributes.
@@ -46,6 +52,15 @@ interface SanitizeHtmlOptions {
  * markup and never throws.
  */
 declare function sanitizeHtml(html: string, options?: SanitizeHtmlOptions): string;
+/** What a renderer was told to do about sanitizing: nothing, the default, or these options. */
+type SanitizeSetting = boolean | SanitizeHtmlOptions | undefined;
+/**
+ * Sanitize one piece of rendered HTML, respecting a plugin's claim that it built the markup itself.
+ *
+ * Shared by every framework binding so the three of them cannot drift apart on what "sanitize"
+ * means — and so a diagram is not escaped into its own source text in one of them.
+ */
+declare function sanitizeRenderedHtml(html: string, sanitize: SanitizeSetting, trusted?: boolean): string;
 
 //#endregion
 //#region src/debug-events.d.ts
@@ -139,9 +154,21 @@ type Patch = {
   key: string;
 };
 /** Framework-neutral render descriptor returned by plugin node renderers. */
-type RenderOutput = {
+type RenderOutput =
+/**
+ * `trusted` marks markup the plugin built itself rather than markup taken from the model.
+ *
+ * A plugin that renders a diagram returns SVG, and sanitizing SVG escapes it — the reader gets
+ * the source text instead of the picture. Hosts worked around that by matching the plugin's
+ * internal id prefix with a regular expression, which breaks the moment the plugin renames its
+ * ids and lets any model output wearing that prefix through unsanitized. A plugin is code the
+ * host chose to install, so it can say so itself; a host that disagrees sets
+ * `sanitize: { trustPlugins: false }`.
+ */
+{
   kind: "html";
   html: string;
+  trusted?: boolean;
 } | {
   kind: "element";
   tag: string;
@@ -756,4 +783,4 @@ declare function mockModelStream(events: Iterable<ModelStreamEvent> | AsyncItera
 declare function readableBytes(chunks: Iterable<string | Uint8Array> | AsyncIterable<string | Uint8Array>): ReadableStream<Uint8Array>;
 
 //#endregion
-export { AIGuiPlugin, ASTNode, ActionAbortedError, ActionAlreadyRegisteredError, ActionContext, ActionDefinition, ActionDestroyedError, ActionDispatchOptions, ActionErrorEvent, ActionEventBase, ActionExecutionError, ActionNotFoundError, ActionRegisterOptions, ActionRegistry, ActionRequest, ActionRuntime, ActionRuntimeError, ActionRuntimeOptions, ActionStartEvent, ActionState, ActionStateListener, ActionStatus, ActionSuccessEvent, ActionTimeoutError, ActionValidationError, BuildSystemPromptOptions, ByteStreamSource, CARD_ID_MAX_LENGTH, CARD_JSON_MAX_DEPTH, CARD_JSON_MAX_NODES, CARD_PATCH_BATCH_MAX_SIZE, CardAction, CardActionError, CardDef, CardJSONError, CardLimitError, CardListener, CardNotFoundError, CardParseResult, CardPatch, CardPatchBatch, CardPatchResult, CardRecord, CardRegistry, CardRevisionConflictError, CardSnapshot, CardSnapshotError, CardStore, CardStoreError, CardStoreListener, CardStoreOptions, CardTypeConflictError, CardValidationError, ChannelSink, Citation, CollectNodeRendererOptions, DebugEmitter, DebugEvent, DebugEventListener, DebugEventTarget, DebugInstrumentationTarget, DebugOptions, DebugRedactContext, DebugSource, ExportImageOptions, ExportedImage, FeedChunk, FeedOptions, FeedSource, JSONSchema, JSONSchemaValidationResult, ModelStreamEvent, MountCardSlotRequest, MountedCardSlot, NodeRenderContext, NodeRenderer, ParseResult, ParserOptions, PartialJSONResult, Patch, PluginCommitContext, RenderMountContext, RenderOutput, Renderer, RendererOptions, SSEEvent, SSEOptions, SafeDebugValueOptions, SanitizeHtmlOptions, SourceBlock, StreamParseOptions, StreamRouter, Usage, applyPatches, buildSystemPrompt, collectNodeRenderers, contentDeltas, createActionRuntime, createParser, createParserWithMetadata, diffAst, downloadImage, exportRenderedImages, exportSVGToImage, getActionKey, getIdleActionState, isCardPatchResult, jsonLines, mockModelStream, ndjson, parsePartialJSON, parseSSE, pluginNodeTypes, readableBytes, repairMarkdown, safeDebugValue, sanitizeHtml, textLines, validateJSONSchema };
+export { AIGuiPlugin, ASTNode, ActionAbortedError, ActionAlreadyRegisteredError, ActionContext, ActionDefinition, ActionDestroyedError, ActionDispatchOptions, ActionErrorEvent, ActionEventBase, ActionExecutionError, ActionNotFoundError, ActionRegisterOptions, ActionRegistry, ActionRequest, ActionRuntime, ActionRuntimeError, ActionRuntimeOptions, ActionStartEvent, ActionState, ActionStateListener, ActionStatus, ActionSuccessEvent, ActionTimeoutError, ActionValidationError, BuildSystemPromptOptions, ByteStreamSource, CARD_ID_MAX_LENGTH, CARD_JSON_MAX_DEPTH, CARD_JSON_MAX_NODES, CARD_PATCH_BATCH_MAX_SIZE, CardAction, CardActionError, CardDef, CardJSONError, CardLimitError, CardListener, CardNotFoundError, CardParseResult, CardPatch, CardPatchBatch, CardPatchResult, CardRecord, CardRegistry, CardRevisionConflictError, CardSnapshot, CardSnapshotError, CardStore, CardStoreError, CardStoreListener, CardStoreOptions, CardTypeConflictError, CardValidationError, ChannelSink, Citation, CollectNodeRendererOptions, DebugEmitter, DebugEvent, DebugEventListener, DebugEventTarget, DebugInstrumentationTarget, DebugOptions, DebugRedactContext, DebugSource, ExportImageOptions, ExportedImage, FeedChunk, FeedOptions, FeedSource, JSONSchema, JSONSchemaValidationResult, ModelStreamEvent, MountCardSlotRequest, MountedCardSlot, NodeRenderContext, NodeRenderer, ParseResult, ParserOptions, PartialJSONResult, Patch, PluginCommitContext, RenderMountContext, RenderOutput, Renderer, RendererOptions, SSEEvent, SSEOptions, SafeDebugValueOptions, SanitizeHtmlOptions, SanitizeSetting, SourceBlock, StreamParseOptions, StreamRouter, Usage, applyPatches, buildSystemPrompt, collectNodeRenderers, contentDeltas, createActionRuntime, createParser, createParserWithMetadata, diffAst, downloadImage, exportRenderedImages, exportSVGToImage, getActionKey, getIdleActionState, isCardPatchResult, jsonLines, mockModelStream, ndjson, parsePartialJSON, parseSSE, pluginNodeTypes, readableBytes, repairMarkdown, safeDebugValue, sanitizeHtml, sanitizeRenderedHtml, textLines, validateJSONSchema };

package/dist/index.d.ts

@@ -36,6 +36,12 @@ interface SanitizeHtmlOptions {
   sanitizer?: (html: string) => string;
   /** Bare SSR either escapes all markup (default) or fails explicitly. */
   ssr?: "escape" | "throw";
+  /**
+   * Whether a plugin may declare its own markup safe, which it does by returning `trusted: true`.
+   * On by default: a plugin is code the host installed, and sanitizing the SVG it drew would
+   * escape it into text. Set to `false` to sanitize every output whatever its origin.
+   */
+  trustPlugins?: boolean;
 }
 /**
  * Sanitize an HTML string, stripping scripts and unsafe attributes.
@@ -46,6 +52,15 @@ interface SanitizeHtmlOptions {
  * markup and never throws.
  */
 declare function sanitizeHtml(html: string, options?: SanitizeHtmlOptions): string;
+/** What a renderer was told to do about sanitizing: nothing, the default, or these options. */
+type SanitizeSetting = boolean | SanitizeHtmlOptions | undefined;
+/**
+ * Sanitize one piece of rendered HTML, respecting a plugin's claim that it built the markup itself.
+ *
+ * Shared by every framework binding so the three of them cannot drift apart on what "sanitize"
+ * means — and so a diagram is not escaped into its own source text in one of them.
+ */
+declare function sanitizeRenderedHtml(html: string, sanitize: SanitizeSetting, trusted?: boolean): string;
 
 //#endregion
 //#region src/debug-events.d.ts
@@ -139,9 +154,21 @@ type Patch = {
   key: string;
 };
 /** Framework-neutral render descriptor returned by plugin node renderers. */
-type RenderOutput = {
+type RenderOutput =
+/**
+ * `trusted` marks markup the plugin built itself rather than markup taken from the model.
+ *
+ * A plugin that renders a diagram returns SVG, and sanitizing SVG escapes it — the reader gets
+ * the source text instead of the picture. Hosts worked around that by matching the plugin's
+ * internal id prefix with a regular expression, which breaks the moment the plugin renames its
+ * ids and lets any model output wearing that prefix through unsanitized. A plugin is code the
+ * host chose to install, so it can say so itself; a host that disagrees sets
+ * `sanitize: { trustPlugins: false }`.
+ */
+{
   kind: "html";
   html: string;
+  trusted?: boolean;
 } | {
   kind: "element";
   tag: string;
@@ -756,4 +783,4 @@ declare function mockModelStream(events: Iterable<ModelStreamEvent> | AsyncItera
 declare function readableBytes(chunks: Iterable<string | Uint8Array> | AsyncIterable<string | Uint8Array>): ReadableStream<Uint8Array>;
 
 //#endregion
-export { AIGuiPlugin, ASTNode, ActionAbortedError, ActionAlreadyRegisteredError, ActionContext, ActionDefinition, ActionDestroyedError, ActionDispatchOptions, ActionErrorEvent, ActionEventBase, ActionExecutionError, ActionNotFoundError, ActionRegisterOptions, ActionRegistry, ActionRequest, ActionRuntime, ActionRuntimeError, ActionRuntimeOptions, ActionStartEvent, ActionState, ActionStateListener, ActionStatus, ActionSuccessEvent, ActionTimeoutError, ActionValidationError, BuildSystemPromptOptions, ByteStreamSource, CARD_ID_MAX_LENGTH, CARD_JSON_MAX_DEPTH, CARD_JSON_MAX_NODES, CARD_PATCH_BATCH_MAX_SIZE, CardAction, CardActionError, CardDef, CardJSONError, CardLimitError, CardListener, CardNotFoundError, CardParseResult, CardPatch, CardPatchBatch, CardPatchResult, CardRecord, CardRegistry, CardRevisionConflictError, CardSnapshot, CardSnapshotError, CardStore, CardStoreError, CardStoreListener, CardStoreOptions, CardTypeConflictError, CardValidationError, ChannelSink, Citation, CollectNodeRendererOptions, DebugEmitter, DebugEvent, DebugEventListener, DebugEventTarget, DebugInstrumentationTarget, DebugOptions, DebugRedactContext, DebugSource, ExportImageOptions, ExportedImage, FeedChunk, FeedOptions, FeedSource, JSONSchema, JSONSchemaValidationResult, ModelStreamEvent, MountCardSlotRequest, MountedCardSlot, NodeRenderContext, NodeRenderer, ParseResult, ParserOptions, PartialJSONResult, Patch, PluginCommitContext, RenderMountContext, RenderOutput, Renderer, RendererOptions, SSEEvent, SSEOptions, SafeDebugValueOptions, SanitizeHtmlOptions, SourceBlock, StreamParseOptions, StreamRouter, Usage, applyPatches, buildSystemPrompt, collectNodeRenderers, contentDeltas, createActionRuntime, createParser, createParserWithMetadata, diffAst, downloadImage, exportRenderedImages, exportSVGToImage, getActionKey, getIdleActionState, isCardPatchResult, jsonLines, mockModelStream, ndjson, parsePartialJSON, parseSSE, pluginNodeTypes, readableBytes, repairMarkdown, safeDebugValue, sanitizeHtml, textLines, validateJSONSchema };
+export { AIGuiPlugin, ASTNode, ActionAbortedError, ActionAlreadyRegisteredError, ActionContext, ActionDefinition, ActionDestroyedError, ActionDispatchOptions, ActionErrorEvent, ActionEventBase, ActionExecutionError, ActionNotFoundError, ActionRegisterOptions, ActionRegistry, ActionRequest, ActionRuntime, ActionRuntimeError, ActionRuntimeOptions, ActionStartEvent, ActionState, ActionStateListener, ActionStatus, ActionSuccessEvent, ActionTimeoutError, ActionValidationError, BuildSystemPromptOptions, ByteStreamSource, CARD_ID_MAX_LENGTH, CARD_JSON_MAX_DEPTH, CARD_JSON_MAX_NODES, CARD_PATCH_BATCH_MAX_SIZE, CardAction, CardActionError, CardDef, CardJSONError, CardLimitError, CardListener, CardNotFoundError, CardParseResult, CardPatch, CardPatchBatch, CardPatchResult, CardRecord, CardRegistry, CardRevisionConflictError, CardSnapshot, CardSnapshotError, CardStore, CardStoreError, CardStoreListener, CardStoreOptions, CardTypeConflictError, CardValidationError, ChannelSink, Citation, CollectNodeRendererOptions, DebugEmitter, DebugEvent, DebugEventListener, DebugEventTarget, DebugInstrumentationTarget, DebugOptions, DebugRedactContext, DebugSource, ExportImageOptions, ExportedImage, FeedChunk, FeedOptions, FeedSource, JSONSchema, JSONSchemaValidationResult, ModelStreamEvent, MountCardSlotRequest, MountedCardSlot, NodeRenderContext, NodeRenderer, ParseResult, ParserOptions, PartialJSONResult, Patch, PluginCommitContext, RenderMountContext, RenderOutput, Renderer, RendererOptions, SSEEvent, SSEOptions, SafeDebugValueOptions, SanitizeHtmlOptions, SanitizeSetting, SourceBlock, StreamParseOptions, StreamRouter, Usage, applyPatches, buildSystemPrompt, collectNodeRenderers, contentDeltas, createActionRuntime, createParser, createParserWithMetadata, diffAst, downloadImage, exportRenderedImages, exportSVGToImage, getActionKey, getIdleActionState, isCardPatchResult, jsonLines, mockModelStream, ndjson, parsePartialJSON, parseSSE, pluginNodeTypes, readableBytes, repairMarkdown, safeDebugValue, sanitizeHtml, sanitizeRenderedHtml, textLines, validateJSONSchema };

package/dist/index.js

@@ -214,6 +214,18 @@ function sanitizeHtml(html, options = {}) {
 	}
 	return DOMPurify.sanitize(html);
 }
+/**
+* Sanitize one piece of rendered HTML, respecting a plugin's claim that it built the markup itself.
+*
+* Shared by every framework binding so the three of them cannot drift apart on what "sanitize"
+* means — and so a diagram is not escaped into its own source text in one of them.
+*/
+function sanitizeRenderedHtml(html, sanitize, trusted = false) {
+	if (sanitize === false) return html;
+	const options = typeof sanitize === "object" ? sanitize : void 0;
+	if (trusted && options?.trustPlugins !== false) return html;
+	return sanitizeHtml(html, options);
+}
 
 //#endregion
 //#region src/debug-events.ts
@@ -2570,4 +2582,4 @@ function delay(ms, signal) {
 }
 
 //#endregion
-export { ActionAbortedError, ActionAlreadyRegisteredError, ActionDestroyedError, ActionExecutionError, ActionNotFoundError, ActionRegistry, ActionRuntime, ActionRuntimeError, ActionTimeoutError, ActionValidationError, CARD_ID_MAX_LENGTH, CARD_JSON_MAX_DEPTH, CARD_JSON_MAX_NODES, CARD_PATCH_BATCH_MAX_SIZE, CardJSONError, CardLimitError, CardNotFoundError, CardRegistry, CardRevisionConflictError, CardSnapshotError, CardStore, CardStoreError, CardTypeConflictError, CardValidationError, DebugEmitter, Renderer, StreamRouter, applyPatches, buildSystemPrompt, collectNodeRenderers, contentDeltas, createActionRuntime, createParser, createParserWithMetadata, diffAst, downloadImage, exportRenderedImages, exportSVGToImage, getActionKey, getIdleActionState, isCardPatchResult, jsonLines, mockModelStream, ndjson, parsePartialJSON, parseSSE, pluginNodeTypes, readableBytes, repairMarkdown, safeDebugValue, sanitizeHtml, textLines, validateJSONSchema };
+export { ActionAbortedError, ActionAlreadyRegisteredError, ActionDestroyedError, ActionExecutionError, ActionNotFoundError, ActionRegistry, ActionRuntime, ActionRuntimeError, ActionTimeoutError, ActionValidationError, CARD_ID_MAX_LENGTH, CARD_JSON_MAX_DEPTH, CARD_JSON_MAX_NODES, CARD_PATCH_BATCH_MAX_SIZE, CardJSONError, CardLimitError, CardNotFoundError, CardRegistry, CardRevisionConflictError, CardSnapshotError, CardStore, CardStoreError, CardTypeConflictError, CardValidationError, DebugEmitter, Renderer, StreamRouter, applyPatches, buildSystemPrompt, collectNodeRenderers, contentDeltas, createActionRuntime, createParser, createParserWithMetadata, diffAst, downloadImage, exportRenderedImages, exportSVGToImage, getActionKey, getIdleActionState, isCardPatchResult, jsonLines, mockModelStream, ndjson, parsePartialJSON, parseSSE, pluginNodeTypes, readableBytes, repairMarkdown, safeDebugValue, sanitizeHtml, sanitizeRenderedHtml, textLines, validateJSONSchema };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-gui/core",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Headless streaming renderer core for LLM-generated UI — markdown/JSON repair, card registry, AST diff, plugin engine, sanitizer.",
   "keywords": [
     "llm",