@ai-gui/plugin-artifact 0.4.0

package/CHANGELOG.md

@@ -0,0 +1,18 @@
+# @ai-gui/plugin-artifact
+
+## 0.4.0
+
+### Minor Changes
+
+- Add plugin authoring helpers, secure source citation blocks, revisioned artifacts, bounded declarative AI-generated UI trees, molecular structures, and interactive maps.
+
+### Patch Changes
+
+- Updated dependencies
+  - @ai-gui/core@0.4.0
+
+## 0.3.0
+
+### Minor Changes
+
+- Add strict artifact create/update commands, an immutable revisioned store with operation receipts and snapshots, commit-time plugin processing, dynamic prompt guidance, and a safe native DOM artifact workspace.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Liang Li
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,68 @@
+# @ai-gui/plugin-artifact
+
+Secure, framework-neutral artifact commands and a native DOM workspace for AIGUI.
+
+## Install
+
+```sh
+pnpm add @ai-gui/core @ai-gui/plugin-artifact
+```
+
+## Usage
+
+```ts
+import { ArtifactStore, artifact } from "@ai-gui/plugin-artifact"
+
+const store = new ArtifactStore()
+const plugins = [artifact({ store })]
+```
+
+The model may create or fully replace artifact content through closed JSON fences. Mutations are applied synchronously in `onASTCommit`, before adapter patches are dispatched.
+
+````markdown
+```artifact-create
+{
+  "version": 1,
+  "operationId": "create-readme-1",
+  "artifact": {
+    "id": "readme",
+    "title": "Read me",
+    "filename": "README.md",
+    "kind": "markdown",
+    "content": "# Hello"
+  }
+}
+```
+
+```artifact-update
+{
+  "version": 1,
+  "operationId": "update-readme-1",
+  "id": "readme",
+  "baseRevision": 0,
+  "content": "# Updated"
+}
+```
+````
+
+## Security
+
+- Strict JSON with unknown-key and dangerous-key rejection.
+- Safe bounded IDs, operation IDs, titles, filenames, languages, artifact count, per-artifact bytes, and total bytes.
+- Exact revision conflicts and canonical operation-receipt idempotency.
+- Immutable frozen records and atomically validated snapshots.
+- No model delete command, actions, components, network requests, filesystem access, or code execution.
+- Text and code use `textContent`; Markdown uses a small inert DOM renderer with HTTPS-only links; JSON preview is bounded.
+- Invalid command UI is generic and never reflects model input or detailed parser issues.
+- The module is safe to import without browser globals. DOM is accessed only when mounting a workspace.
+
+## Exports
+
+- `ArtifactStore`
+- `artifact(options?)`
+- `artifactPromptSpec(store?)`
+- `parseArtifactCreate(source)` and `parseArtifactUpdate(source)`
+- `serializeArtifactCreate(command)` and `serializeArtifactUpdate(command)`
+- `mountArtifactWorkspace(host, store)`
+- `artifactCss`
+- Artifact commands, records, receipts, snapshots, options, results, listener types, and errors