@aparte/core 0.15.0 → 0.16.0

package/dist/renderers/segments/artifact/binary-file.d.ts

@@ -1,45 +0,0 @@
-import type { AparteArtifactSegment } from '../../../types/index.js';
-/**
- * Module-level cache of sandbox-produced previews keyed by segment.id.
- * Lets re-mounts (branch switch, conversation toggle, persisted reload after
- * a previous mount) restore the preview instantly without re-running the
- * sandbox. Lifetime = current page session; cleared on full reload.
- */
-type CachedPreview = {
-    buffer: Uint8Array | ArrayBuffer;
-    mime: string;
-    name: string;
-    bytes: number;
-    previewHtml: string | null;
-};
-export declare function cacheBinaryArtifact(id: string, entry: CachedPreview): void;
-/**
- * Record every `aparte-artifact-ready` so the binary-artifact path can tell whether
- * it has already asked the host to generate this file — see the dedupe at
- * {@link maybeRehydrateBinaryArtifact}, which is the only reader.
- *
- * ## Why this is a function and not a module-level `addEventListener`
- *
- * It WAS module-level, and it was surviving bundling by luck.
- * `packages/core/package.json` declares `sideEffects` as a short list that does NOT
- * include this file — so the module is advertised to bundlers as side-effect-FREE while
- * carrying a top-level listener, which is a side effect. It was retained only
- * because `artifactRenderer` in the same module is a used binding; a bundler was
- * within its rights to drop the file and the listener with it, and pdf/xlsx/docx
- * artifacts would then stop regenerating in a consumer's production build while
- * every local check stayed green. Verified as surviving today in a real Vite build
- * of the Svelte example — but "it happens to survive" is not a contract.
- *
- * `sideEffects` cannot simply be corrected to name this file, either: the build
- * bundles into a CONTENT-HASHED shared chunk, so there is no stable path to list.
- *
- * Installed from the two registration entry points instead. That is not later in
- * any way that matters: an artifact can only render once a renderer is registered,
- * and the map is read only while rendering one.
- */
-export declare function installArtifactReadyHook(): void;
-export declare function renderBinaryFileArtifact(segment: AparteArtifactSegment, kind: string): string;
-export declare function setupBinaryFileArtifact(element: HTMLElement, segment: AparteArtifactSegment, kind: string): void;
-export declare function updateBinaryFileArtifact(element: HTMLElement, segment: AparteArtifactSegment, isStreaming: boolean): void;
-export {};
-//# sourceMappingURL=binary-file.d.ts.map

package/dist/renderers/segments/artifact/binary-file.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"binary-file.d.ts","sourceRoot":"","sources":["../../../../src/renderers/segments/artifact/binary-file.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAWrE;;;;;GAKG;AACH,KAAK,aAAa,GAAG;IACjB,MAAM,EAAE,UAAU,GAAG,WAAW,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAQF,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAQ1E;AAuBD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAO/C;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAyE7F;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAkJhH;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,OAAO,GAAG,IAAI,CA6BzH"}

package/dist/renderers/segments/artifact/card.d.ts

@@ -1,3 +0,0 @@
-import type { AparteArtifactSegment, AparteSegmentRenderer } from '../../../types/index.js';
-export declare const artifactRenderer: AparteSegmentRenderer<AparteArtifactSegment>;
-//# sourceMappingURL=card.d.ts.map

package/dist/renderers/segments/artifact/card.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"card.d.ts","sourceRoot":"","sources":["../../../../src/renderers/segments/artifact/card.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAkB5F,eAAO,MAAM,gBAAgB,EAAE,qBAAqB,CAAC,qBAAqB,CAyTzE,CAAC"}

package/dist/renderers/segments/artifact/preview-document.d.ts

@@ -1,27 +0,0 @@
-/**
- * What a previewed artifact is allowed to FETCH. Inline script and style are
- * permitted (that IS the preview); no fetch, no XHR, no websocket, no remote image,
- * no font. Without this the sandbox still lets injected code beacon out to any
- * origin, so the policy does real work — measured blocked in Chromium, Firefox and
- * WebKit.
- *
- * WHAT IT DOES NOT STOP, stated because the sentence here used to claim otherwise:
- * the frame NAVIGATING ITSELF. Assigning `location.href` is a navigation, not a
- * fetch, and no directive in this policy governs it — CSP's `navigate-to` was
- * removed from the spec and never shipped, and the parent page's `frame-src` does
- * not apply to a navigation the frame initiates. Reproduced in all three engines;
- * in Firefox and WebKit the frame then RENDERS the attacker's page inside the card,
- * which is a phishing surface as well as an exfiltration channel.
- *
- * What still holds, and is why this is serious rather than fatal: the sandbox has
- * no `allow-same-origin`, so the frame's origin is opaque — it cannot read the host
- * page, its storage, or the API key — and no `allow-forms` or
- * `allow-top-navigation`, so it can neither POST nor move the tab.
- *
- * The honest summary for a consumer: a previewed artifact cannot reach your page or
- * your data, and can phone home once. Previewing model-authored HTML is running
- * untrusted content in a box, not running nothing.
- */
-export declare const PREVIEW_CSP = "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src data:; font-src data:";
-export declare function buildSafePreviewDocument(kind: string, body: string, title: string): string;
-//# sourceMappingURL=preview-document.d.ts.map

package/dist/renderers/segments/artifact/preview-document.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"preview-document.d.ts","sourceRoot":"","sources":["../../../../src/renderers/segments/artifact/preview-document.ts"],"names":[],"mappings":"AA2BA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,WAAW,6GAA6G,CAAC;AAkDtI,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1F"}

package/dist/renderers/segments/artifact/shared.d.ts

@@ -1,29 +0,0 @@
-/**
- * The leaves the artifact card and the binary-file path BOTH use.
- *
- * Scoped by a call-site census, not by intuition. The obvious-looking candidates are
- * not here: `BINARY_FILE_KINDS` reads as shared and is used only by the card (which
- * consults it to delegate), `PREVIEWABLE_KINDS`, `languageForKind` and
- * `downloadTextArtifact` are card-only, and `FILE_ICON_LABEL` and `formatBytes` are
- * binary-only. A first draft of this module took all of them and would have been a
- * grab-bag named for one of its three jobs.
- *
- * What is genuinely shared is small: fence stripping (which the plain code renderer
- * needs too), the kind→label map, and the throttle pair behind the debounced
- * re-highlight.
- */
-/**
- * Strip leading/trailing markdown code fences (``` or ~~~, optional lang tag).
- * Also strips any content that appears after the closing fence (small models
- * frequently duplicate lines after the closing ``` block).
- *
- * Char-based scanner — no regex.
- */
-export declare function stripCodeFences(content: string): string;
-export declare function labelForKind(kind: string): string;
-/** Cap a segmentId→timestamp throttle map so a long session can't grow it without
- *  bound (one entry per streamed segment). Values are timestamps (tiny), so the cap
- *  is generous; delete-then-set refreshes recency, evict the oldest key when full.
- *  Evicting a stale entry costs at most one extra highlight/dispatch — never
- *  incorrect, since both debounce windows are far shorter than the cap horizon. */
-//# sourceMappingURL=shared.d.ts.map

package/dist/renderers/segments/artifact/shared.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/renderers/segments/artifact/shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAsBvD;AAsCD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoBjD;AAED;;;;mFAImF"}