@bendyline/docblocks 1.1.2 → 2.0.0

package/dist/host/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/host/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/host/index.d.ts

@@ -3,7 +3,10 @@
  * host. The renderer calls `getDocBlocksHost()` to reach the preload
  * contextBridge; `isElectronHost()` gates desktop-only UI branches.
  */
-export type { DocBlocksHostAPI, DocBlocksHostFsAPI, DocBlocksHostWorkspacesAPI, DocBlocksHostShellAPI, DocBlocksHostFfmpegAPI, DocBlocksHostUpdaterAPI, ElectronWorkspaceInfo, HostEnvironment, MenuCommand, OpenRequest, UpdaterStatus, } from './types.js';
+export type { DocBlocksHostAPI, DocBlocksHostFsAPI, DocBlocksHostExternalAPI, DocBlocksHostWorkspacesAPI, DocBlocksHostShellAPI, DocBlocksHostExportAPI, DocBlocksHostFfmpegAPI, DocBlocksHostUpdaterAPI, DocBlocksHostLifecycleAPI, ElectronWorkspaceInfo, ExternalBinaryCommitResult, HostCloseReason, HostEnvironment, HostExportTargetGrant, HostPrepareCloseRequest, HostPrepareCloseResult, MenuCommand, OpenRequest, UpdateInstallResult, UpdaterStatus, } from './types.js';
+export type { DocBlocksHostGitAPI, GitBranchInfo, GitCapabilities, GitCloneHandle, GitCloneProgress, GitError, GitErrorCode, GitFileAtRevision, GitFileChange, GitFileStatusCode, GitLogEntry, GitLogOptions, GitRemoteInfo, GitRepoDetection, GitResult, GitRevision, GitStatus, } from './git.js';
+export { ELECTRON_FILE_SYSTEM_V2_CAPABILITIES, type DocBlocksHostFsV2API, type HostFileSystemV2OpenRequest, type HostFileSystemV2Result, type HostFileSystemV2WatchMessage, } from './filesystem-v2.js';
+export { HOST_WIRE_LIMITS, isBoundedBytePayload, isBoundedString, isTrustedRendererUrl, parseExternalHttpUrl, parseOpenRequest, } from './wire-policy.js';
 import type { DocBlocksHostAPI } from './types.js';
 /** True when running inside the Electron desktop shell. */
 export declare function isElectronHost(): boolean;

package/dist/host/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,0BAA0B,EAC1B,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,eAAe,EACf,WAAW,EACX,WAAW,EACX,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,2DAA2D;AAC3D,wBAAgB,cAAc,IAAI,OAAO,CASxC;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,IAAI,gBAAgB,CAMnD;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,IAAI,gBAAgB,GAAG,IAAI,CAE/D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EACV,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,0BAA0B,EAC1B,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,uBAAuB,EACvB,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,SAAS,GACV,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,oCAAoC,EACpC,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,4BAA4B,GAClC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,2DAA2D;AAC3D,wBAAgB,cAAc,IAAI,OAAO,CASxC;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,IAAI,gBAAgB,CAMnD;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,IAAI,gBAAgB,GAAG,IAAI,CAE/D"}

package/dist/host/index.js

@@ -3,6 +3,8 @@
  * host. The renderer calls `getDocBlocksHost()` to reach the preload
  * contextBridge; `isElectronHost()` gates desktop-only UI branches.
  */
+export { ELECTRON_FILE_SYSTEM_V2_CAPABILITIES, } from './filesystem-v2.js';
+export { HOST_WIRE_LIMITS, isBoundedBytePayload, isBoundedString, isTrustedRendererUrl, parseExternalHttpUrl, parseOpenRequest, } from './wire-policy.js';
 /** True when running inside the Electron desktop shell. */
 export function isElectronHost() {
     if (typeof globalThis === 'undefined')

package/dist/host/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,2DAA2D;AAC3D,MAAM,UAAU,cAAc;IAC5B,IAAI,OAAO,UAAU,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,IAAI,GAAI,UAA0C,CAAC,aAAa,CAAC;IACvE,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,OAAQ,IAAyB,CAAC,EAAE,KAAK,QAAQ;QAChD,IAAyB,CAAC,EAAE,KAAK,IAAI,CACvC,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAI,UAAmD,CAAC,aAAa,CAAC;IAChF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,qBAAqB;IACnC,OAAQ,UAAmD,CAAC,aAAa,IAAI,IAAI,CAAC;AACpF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6CH,OAAO,EACL,oCAAoC,GAKrC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAI1B,2DAA2D;AAC3D,MAAM,UAAU,cAAc;IAC5B,IAAI,OAAO,UAAU,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,IAAI,GAAI,UAA0C,CAAC,aAAa,CAAC;IACvE,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,OAAQ,IAAyB,CAAC,EAAE,KAAK,QAAQ;QAChD,IAAyB,CAAC,EAAE,KAAK,IAAI,CACvC,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAI,UAAmD,CAAC,aAAa,CAAC;IAChF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,qBAAqB;IACnC,OAAQ,UAAmD,CAAC,aAAa,IAAI,IAAI,CAAC;AACpF,CAAC"}

package/dist/host/types.d.ts

@@ -6,36 +6,42 @@
  * bridge. The Electron preload script exposes an implementation matching
  * this shape; the React renderer calls it through `window.docBlocksHost`.
  */
-import type { FileSystemEntry, FileMeta } from '../filesystem/types.js';
-/** Filesystem operations scoped to a registered absolute root path. */
+import type { FileCommitResult, FileSystemEntry, FileMeta } from '../filesystem/types.js';
+import type { DocBlocksHostFsV2API } from './filesystem-v2.js';
+import type { DocBlocksHostGitAPI } from './git.js';
+/** Filesystem operations scoped to a main-owned registered workspace id. */
 export interface DocBlocksHostFsAPI {
-    readFile(rootPath: string, path: string): Promise<string | null>;
-    writeFile(rootPath: string, path: string, content: string): Promise<void>;
-    delete(rootPath: string, path: string): Promise<void>;
-    rename(rootPath: string, oldPath: string, newPath: string): Promise<void>;
-    readDirectory(rootPath: string, path: string): Promise<FileSystemEntry[]>;
-    exists(rootPath: string, path: string): Promise<boolean>;
-    createDirectory(rootPath: string, path: string): Promise<void>;
-    stat(rootPath: string, path: string): Promise<FileMeta | null>;
-    readBinary(rootPath: string, path: string): Promise<ArrayBuffer | null>;
-    writeBinary(rootPath: string, path: string, data: ArrayBuffer | Uint8Array): Promise<void>;
+    readFile(workspaceId: string, path: string): Promise<string | null>;
+    writeFile(workspaceId: string, path: string, content: string): Promise<void>;
+    commitFile(workspaceId: string, path: string, content: string, expectedContent: string | null): Promise<FileCommitResult>;
+    delete(workspaceId: string, path: string): Promise<void>;
+    rename(workspaceId: string, oldPath: string, newPath: string): Promise<void>;
+    readDirectory(workspaceId: string, path: string): Promise<FileSystemEntry[]>;
+    exists(workspaceId: string, path: string): Promise<boolean>;
+    createDirectory(workspaceId: string, path: string): Promise<void>;
+    stat(workspaceId: string, path: string): Promise<FileMeta | null>;
+    readBinary(workspaceId: string, path: string): Promise<ArrayBuffer | null>;
+    writeBinary(workspaceId: string, path: string, data: ArrayBuffer | Uint8Array): Promise<void>;
     /**
      * Subscribe to change notifications for a watched root. Returns an
      * unsubscribe function. The main process uses chokidar under the hood.
      */
-    watch(rootPath: string, onChange: (path: string) => void): () => void;
+    watch(workspaceId: string, onChange: (path: string) => void): () => void;
 }
 /** Descriptor returned for an Electron-managed workspace (backed by a folder). */
 export interface ElectronWorkspaceInfo {
     id: string;
     name: string;
+    /** Display/persistence metadata only. Privileged host calls accept `id`, never this path. */
     rootPath: string;
 }
 /** Workspace-management operations exposed to the renderer. */
 export interface DocBlocksHostWorkspacesAPI {
+    /** List only folders already persisted as trusted main-process roots. */
+    list(): Promise<ElectronWorkspaceInfo[]>;
     /**
-     * Return the default workspace (creating ~/Documents/DocBlocks on first
-     * call, or the user's configured default).
+     * Return the default workspace (creating DocBlocks inside the operating
+     * system's Documents folder on first call, or the user's configured default).
      */
     getDefault(): Promise<ElectronWorkspaceInfo>;
     /**
@@ -44,33 +50,43 @@ export interface DocBlocksHostWorkspacesAPI {
      */
     pickFolder(): Promise<ElectronWorkspaceInfo | null>;
     /**
-     * Re-register a previously known workspace so its rootPath is trusted
-     * for subsequent fs calls. Called on app startup for persisted
-     * electron-native workspaces before any fs operation.
+     * Re-register a previously picker-approved workspace by main-owned id.
+     * Called on app startup before any filesystem operation.
      */
-    register(info: ElectronWorkspaceInfo): Promise<void>;
+    register(workspaceId: string): Promise<void>;
     /** Remove a workspace from the trusted whitelist. */
     unregister(id: string): Promise<void>;
 }
 /** Shell operations — reveal in Finder/Explorer, open external URLs. */
 export interface DocBlocksHostShellAPI {
-    /** Reveal a file (by absolute path) in the OS file manager. */
-    revealInFolder(absolutePath: string): Promise<void>;
+    /** Reveal a registered workspace root or one root-relative entry. */
+    revealInFolder(workspaceId: string, workspacePath?: string): Promise<void>;
     /** Open a URL in the default browser. */
     openExternal(url: string): Promise<void>;
 }
+/** Exact, main-owned export authority. The display path is never authority. */
+export interface HostExportTargetGrant {
+    /** Null means this is a display-only suggestion and save must show a picker. */
+    grantId: string | null;
+    displayPath: string;
+}
+/** Native export target selection and binary file writing. */
+export interface DocBlocksHostExportAPI {
+    /** Resolve an exact remembered grant or a display-only host suggestion. */
+    resolveTarget(documentId: string, filename: string): Promise<HostExportTargetGrant>;
+    /** Open the native Save dialog and remember the selected target. */
+    pickTarget(documentId: string, filename: string, currentGrantId?: string | null): Promise<HostExportTargetGrant | null>;
+    /** Write only to an exact target granted by the main process. */
+    save(documentId: string, filename: string, grantId: string | null, data: ArrayBuffer | Uint8Array): Promise<HostExportTargetGrant | null>;
+}
 /** System ffmpeg detection and invocation. */
 export interface DocBlocksHostFfmpegAPI {
     /** True if `ffmpeg` is available on PATH (or bundled). */
     available(): Promise<boolean>;
     /** Version string from `ffmpeg -version`, or null if unavailable. */
     version(): Promise<string | null>;
-    /**
-     * Render a markdown file at the given absolute path to MP4 using the
-     * existing squisq-video CLI pipeline. Returns the absolute path to the
-     * produced MP4 file, or throws on failure.
-     */
-    renderVideo(markdownAbsolutePath: string, options: {
+    /** Render a physically contained workspace-relative Markdown file to MP4. */
+    renderVideo(workspaceId: string, markdownPath: string, options: {
         fps?: number;
         quality?: 'draft' | 'normal' | 'high';
     }): Promise<string>;
@@ -85,12 +101,13 @@ export interface DocBlocksHostUpdaterAPI {
      * Quit the app and apply a downloaded update. Should only be called
      * after an `UpdaterStatus` of kind `'downloaded'` has been observed.
      */
-    quitAndInstall(): Promise<void>;
+    quitAndInstall(): Promise<UpdateInstallResult>;
     /**
      * Subscribe to updater status events. Returns an unsubscribe function.
      */
     onStatus(listener: (status: UpdaterStatus) => void): () => void;
 }
+export type UpdateInstallResult = 'installing' | 'cancelled' | 'not-ready';
 export type UpdaterStatus = {
     kind: 'checking';
 } | {
@@ -113,28 +130,94 @@ export type UpdaterStatus = {
     message: string;
 };
 /** Menu-command events pushed from the main process to the renderer. */
-export type MenuCommand = 'file:new' | 'file:openFolder' | 'file:revealWorkspace' | 'file:settings' | 'help:about' | 'help:checkForUpdates' | 'help:viewOnGitHub';
-/** Deep-link event resolved by the host into a trusted workspace file. */
-export interface OpenRequest {
+export type MenuCommand = 'file:new' | 'file:openFolder' | 'file:revealWorkspace' | 'file:settings' | 'git:commit' | 'git:push' | 'git:pull' | 'git:fetch' | 'git:newBranch' | 'git:switchBranch' | 'git:history' | 'git:clone' | 'git:openOnRemote' | 'git:createPullRequest' | 'help:about' | 'help:checkForUpdates' | 'help:viewOnGitHub';
+/**
+ * OS open-file / deep-link event resolved by the host.
+ * - 'workspace-file': a file inside an already-registered workspace.
+ * - 'external-file': a loose markdown file outside any workspace — opened in a
+ *   transient workspace and saved through an opaque resource grant.
+ * - 'external-bundle': a `.dbk`/zip bundle — unpacked into a transient
+ *   workspace and re-zipped through an opaque resource grant on save.
+ */
+export type OpenRequest = {
     kind: 'workspace-file';
     workspaceId: string;
     /** Slash-prefixed path relative to the workspace root. */
     path: string;
+} | {
+    kind: 'external-file';
+    resourceId: string;
+    name: string;
+} | {
+    kind: 'external-bundle';
+    resourceId: string;
+    name: string;
+};
+/**
+ * Read/write access to individual OS files the user has explicitly opened
+ * (via "Open With" / deep link), outside the workspace-root whitelist. The
+ * main process gates these with owner-scoped, exact-file capabilities.
+ */
+export interface DocBlocksHostExternalAPI {
+    readText(resourceId: string): Promise<string | null>;
+    readBinary(resourceId: string): Promise<ArrayBuffer | null>;
+    writeText(resourceId: string, content: string): Promise<void>;
+    writeBinary(resourceId: string, data: ArrayBuffer | Uint8Array): Promise<void>;
+    commitText(resourceId: string, content: string, expectedContent: string | null): Promise<FileCommitResult>;
+    commitBinary(resourceId: string, data: ArrayBuffer | Uint8Array, expectedVersion: string | null): Promise<ExternalBinaryCommitResult>;
+    /** Revoke one external resource when its transient document is closed. */
+    revoke(resourceId: string): Promise<void>;
 }
+export type ExternalBinaryCommitResult = {
+    status: 'committed';
+    version: string;
+} | {
+    status: 'conflict';
+    version: string | null;
+    data: ArrayBuffer | null;
+};
 /** Environment metadata provided by the host. */
 export interface HostEnvironment {
     platform: 'darwin' | 'win32' | 'linux';
     appVersion: string;
     isDev: boolean;
 }
+export type HostCloseReason = 'window-close' | 'app-quit' | 'update-install' | 'reload' | 'force-reload';
+export interface HostPrepareCloseRequest {
+    requestId: string;
+    reason: HostCloseReason;
+    /** Absolute epoch-millisecond deadline chosen by the main process. */
+    deadline: number;
+}
+export type HostPrepareCloseResult = {
+    status: 'ready';
+    persistedRevision: number;
+} | {
+    status: 'blocked';
+    code: 'save-failed' | 'external-conflict' | 'not-ready';
+    message: string;
+};
+/**
+ * Main-owned close handshake. Preload privately correlates replies; the
+ * renderer never chooses request or window identifiers.
+ */
+export interface DocBlocksHostLifecycleAPI {
+    onPrepareClose(listener: (request: HostPrepareCloseRequest) => Promise<HostPrepareCloseResult>): () => void;
+    onCancelClose(listener: (requestId: string) => void): () => void;
+}
 /** The full DocBlocks desktop host API. */
 export interface DocBlocksHostAPI {
     env: HostEnvironment;
     fs: DocBlocksHostFsAPI;
+    fsV2: DocBlocksHostFsV2API;
+    external: DocBlocksHostExternalAPI;
     workspaces: DocBlocksHostWorkspacesAPI;
     shell: DocBlocksHostShellAPI;
+    exports: DocBlocksHostExportAPI;
     ffmpeg: DocBlocksHostFfmpegAPI;
+    git: DocBlocksHostGitAPI;
     updater: DocBlocksHostUpdaterAPI;
+    lifecycle: DocBlocksHostLifecycleAPI;
     /**
      * Subscribe to menu commands dispatched by the native menu.
      * Returns an unsubscribe function.

package/dist/host/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAExE,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC/D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACxE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3F;;;OAGG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACvE;AAED,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,+DAA+D;AAC/D,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7C;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,qDAAqD;IACrD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,wEAAwE;AACxE,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,yCAAyC;IACzC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACrC,0DAA0D;IAC1D,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,qEAAqE;IACrE,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClC;;;;OAIG;IACH,WAAW,CACT,oBAAoB,EAAE,MAAM,EAC5B,OAAO,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;KAAE,GAC/D,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,4BAA4B;AAC5B,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,kCAAkC;IAClC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACjE;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,wEAAwE;AACxE,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,iBAAiB,GACjB,sBAAsB,GACtB,eAAe,GACf,YAAY,GACZ,sBAAsB,GACtB,mBAAmB,CAAC;AAExB,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,eAAe,CAAC;IACrB,EAAE,EAAE,kBAAkB,CAAC;IACvB,UAAU,EAAE,0BAA0B,CAAC;IACvC,KAAK,EAAE,qBAAqB,CAAC;IAC7B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,uBAAuB,CAAC;IACjC;;;OAGG;IACH,aAAa,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAChE;;;OAGG;IACH,aAAa,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACrE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAEpD,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpE,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,UAAU,CACR,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,GAAG,IAAI,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7E,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAClE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC3E,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F;;;OAGG;IACH,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC1E;AAED,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,+DAA+D;AAC/D,MAAM,WAAW,0BAA0B;IACzC,yEAAyE;IACzE,IAAI,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACzC;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7C;;;OAGG;IACH,UAAU,IAAI,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,qDAAqD;IACrD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,wEAAwE;AACxE,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,yCAAyC;IACzC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB;IACpC,gFAAgF;IAChF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,8DAA8D;AAC9D,MAAM,WAAW,sBAAsB;IACrC,2EAA2E;IAC3E,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACpF,oEAAoE;IACpE,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,GAC7B,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACzC,iEAAiE;IACjE,IAAI,CACF,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,IAAI,EAAE,WAAW,GAAG,UAAU,GAC7B,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;CAC1C;AAED,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACrC,0DAA0D;IAC1D,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,qEAAqE;IACrE,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClC,6EAA6E;IAC7E,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;KAAE,GAC/D,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,4BAA4B;AAC5B,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,kCAAkC;IAClC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B;;;OAGG;IACH,cAAc,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/C;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACjE;AAED,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,WAAW,GAAG,WAAW,CAAC;AAE3E,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,wEAAwE;AACxE,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,iBAAiB,GACjB,sBAAsB,GACtB,eAAe,GACf,YAAY,GACZ,UAAU,GACV,UAAU,GACV,WAAW,GACX,eAAe,GACf,kBAAkB,GAClB,aAAa,GACb,WAAW,GACX,kBAAkB,GAClB,uBAAuB,GACvB,YAAY,GACZ,sBAAsB,GACtB,mBAAmB,CAAC;AAExB;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GACnB;IACE,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAElE;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrD,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC5D,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,GAAG,IAAI,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,YAAY,CACV,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,WAAW,GAAG,UAAU,EAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACvC,0EAA0E;IAC1E,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,MAAM,MAAM,0BAA0B,GAClC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;CAAE,CAAC;AAE7E,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,eAAe,GACvB,cAAc,GACd,UAAU,GACV,gBAAgB,GAChB,QAAQ,GACR,cAAc,CAAC;AAEnB,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GAC9C;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE,aAAa,GAAG,mBAAmB,GAAG,WAAW,CAAC;IACxD,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,cAAc,CACZ,QAAQ,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,sBAAsB,CAAC,GAC9E,MAAM,IAAI,CAAC;IACd,aAAa,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAClE;AAED,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,eAAe,CAAC;IACrB,EAAE,EAAE,kBAAkB,CAAC;IACvB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,EAAE,wBAAwB,CAAC;IACnC,UAAU,EAAE,0BAA0B,CAAC;IACvC,KAAK,EAAE,qBAAqB,CAAC;IAC7B,OAAO,EAAE,sBAAsB,CAAC;IAChC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,GAAG,EAAE,mBAAmB,CAAC;IACzB,OAAO,EAAE,uBAAuB,CAAC;IACjC,SAAS,EAAE,yBAAyB,CAAC;IACrC;;;OAGG;IACH,aAAa,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAChE;;;OAGG;IACH,aAAa,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CACrE"}

package/dist/host/wire-policy.d.ts

@@ -0,0 +1,22 @@
+import type { OpenRequest } from './types.js';
+/** Quantitative limits shared by privileged host boundaries. */
+export declare const HOST_WIRE_LIMITS: Readonly<{
+    identifierCharacters: 256;
+    labelCharacters: 1024;
+    pathCharacters: 4096;
+    urlCharacters: 8192;
+    messageCharacters: 2000;
+    documentCharacters: number;
+    binaryBytes: number;
+    base64Characters: number;
+    arrayEntries: 10000;
+}>;
+export declare function isBoundedString(value: unknown, maximumCharacters: number, minimumCharacters?: number): value is string;
+export declare function isBoundedBytePayload(value: unknown, maximumBytes?: number): value is ArrayBuffer | Uint8Array;
+/** Parse one exact, bounded main-to-renderer open request. */
+export declare function parseOpenRequest(value: unknown): OpenRequest | null;
+/** Return one canonical HTTP(S) URL, or null when external navigation is unsafe. */
+export declare function parseExternalHttpUrl(value: unknown): string | null;
+/** True only for the packaged renderer origin or the exact configured dev origin. */
+export declare function isTrustedRendererUrl(value: unknown, developmentOrigin?: string): boolean;
+//# sourceMappingURL=wire-policy.d.ts.map

package/dist/host/wire-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-policy.d.ts","sourceRoot":"","sources":["../../src/host/wire-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,gEAAgE;AAChE,eAAO,MAAM,gBAAgB;;;;;;;;;;EAU3B,CAAC;AAUH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,iBAAiB,EAAE,MAAM,EACzB,iBAAiB,SAAI,GACpB,KAAK,IAAI,MAAM,CAOjB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,YAAY,SAA+B,GAC1C,KAAK,IAAI,WAAW,GAAG,UAAU,CAKnC;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAmBnE;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWlE;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAmBxF"}

package/dist/host/wire-policy.js

@@ -0,0 +1,92 @@
+/** Quantitative limits shared by privileged host boundaries. */
+export const HOST_WIRE_LIMITS = Object.freeze({
+    identifierCharacters: 256,
+    labelCharacters: 1024,
+    pathCharacters: 4096,
+    urlCharacters: 8192,
+    messageCharacters: 2000,
+    documentCharacters: 20 * 1024 * 1024,
+    binaryBytes: 100 * 1024 * 1024,
+    base64Characters: 140 * 1024 * 1024,
+    arrayEntries: 10000,
+});
+function hasExactKeys(value, keys) {
+    const actual = Object.keys(value);
+    return (actual.length === keys.length &&
+        keys.every((key) => Object.prototype.hasOwnProperty.call(value, key)));
+}
+export function isBoundedString(value, maximumCharacters, minimumCharacters = 0) {
+    return (typeof value === 'string' &&
+        value.length >= minimumCharacters &&
+        value.length <= maximumCharacters &&
+        !value.includes('\0'));
+}
+export function isBoundedBytePayload(value, maximumBytes = HOST_WIRE_LIMITS.binaryBytes) {
+    return ((value instanceof ArrayBuffer || value instanceof Uint8Array) &&
+        value.byteLength <= maximumBytes);
+}
+/** Parse one exact, bounded main-to-renderer open request. */
+export function parseOpenRequest(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return null;
+    const record = value;
+    if (record.kind === 'workspace-file') {
+        if (!hasExactKeys(record, ['kind', 'workspaceId', 'path']))
+            return null;
+        if (!isBoundedString(record.workspaceId, HOST_WIRE_LIMITS.identifierCharacters, 1))
+            return null;
+        if (!isBoundedString(record.path, HOST_WIRE_LIMITS.pathCharacters, 1))
+            return null;
+        return { kind: 'workspace-file', workspaceId: record.workspaceId, path: record.path };
+    }
+    if (record.kind === 'external-file' || record.kind === 'external-bundle') {
+        if (!hasExactKeys(record, ['kind', 'resourceId', 'name']))
+            return null;
+        if (!isBoundedString(record.resourceId, HOST_WIRE_LIMITS.identifierCharacters, 1))
+            return null;
+        if (!isBoundedString(record.name, HOST_WIRE_LIMITS.labelCharacters, 1))
+            return null;
+        return { kind: record.kind, resourceId: record.resourceId, name: record.name };
+    }
+    return null;
+}
+/** Return one canonical HTTP(S) URL, or null when external navigation is unsafe. */
+export function parseExternalHttpUrl(value) {
+    if (!isBoundedString(value, HOST_WIRE_LIMITS.urlCharacters, 1))
+        return null;
+    try {
+        const url = new URL(value);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            return null;
+        if (url.username || url.password)
+            return null;
+        const canonical = url.href;
+        return canonical.length <= HOST_WIRE_LIMITS.urlCharacters ? canonical : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** True only for the packaged renderer origin or the exact configured dev origin. */
+export function isTrustedRendererUrl(value, developmentOrigin) {
+    if (!isBoundedString(value, HOST_WIRE_LIMITS.urlCharacters, 1))
+        return false;
+    try {
+        const url = new URL(value);
+        if (url.protocol === 'app:' &&
+            url.hostname === 'docblocks' &&
+            url.port === '' &&
+            url.username === '' &&
+            url.password === '') {
+            return true;
+        }
+        if (!developmentOrigin)
+            return false;
+        const trustedDevelopmentOrigin = new URL(developmentOrigin);
+        return url.origin === trustedDevelopmentOrigin.origin;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=wire-policy.js.map

package/dist/host/wire-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-policy.js","sourceRoot":"","sources":["../../src/host/wire-policy.ts"],"names":[],"mappings":"AAEA,gEAAgE;AAChE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,oBAAoB,EAAE,GAAG;IACzB,eAAe,EAAE,IAAK;IACtB,cAAc,EAAE,IAAK;IACrB,aAAa,EAAE,IAAK;IACpB,iBAAiB,EAAE,IAAK;IACxB,kBAAkB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IACpC,WAAW,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IAC9B,gBAAgB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACnC,YAAY,EAAE,KAAM;CACrB,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,KAA8B,EAAE,IAAuB;IAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAC7B,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,iBAAyB,EACzB,iBAAiB,GAAG,CAAC;IAErB,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,IAAI,iBAAiB;QACjC,KAAK,CAAC,MAAM,IAAI,iBAAiB;QACjC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,YAAY,GAAG,gBAAgB,CAAC,WAAW;IAE3C,OAAO,CACL,CAAC,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,UAAU,CAAC;QAC7D,KAAK,CAAC,UAAU,IAAI,YAAY,CACjC,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,MAAM,GAAG,KAAgC,CAAC;IAEhD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACxE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAChG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,cAAc,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnF,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACxF,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACzE,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,oBAAoB,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/F,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,eAAe,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACjF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC;QAC3B,OAAO,SAAS,CAAC,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,iBAA0B;IAC7E,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,MAAM;YACvB,GAAG,CAAC,QAAQ,KAAK,WAAW;YAC5B,GAAG,CAAC,IAAI,KAAK,EAAE;YACf,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,QAAQ,KAAK,EAAE,EACnB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,iBAAiB;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC5D,OAAO,GAAG,CAAC,MAAM,KAAK,wBAAwB,CAAC,MAAM,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,9 +1,10 @@
 /**
  * @bendyline/docblocks — Core package
  *
- * Re-exports filesystem, workspace, and host modules for convenience.
+ * Re-exports filesystem, document, workspace, and host modules for convenience.
  */
 export * from './filesystem/index.js';
+export * from './document/index.js';
 export * from './workspace/index.js';
 export * from './host/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC"}

package/dist/index.js

@@ -1,9 +1,10 @@
 /**
  * @bendyline/docblocks — Core package
  *
- * Re-exports filesystem, workspace, and host modules for convenience.
+ * Re-exports filesystem, document, workspace, and host modules for convenience.
  */
 export * from './filesystem/index.js';
+export * from './document/index.js';
 export * from './workspace/index.js';
 export * from './host/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC"}

package/dist/mcp/index.d.ts

@@ -0,0 +1,4 @@
+/** Exact, bounded wire contracts shared by DocBlocks MCP implementations. */
+export * from './types.js';
+export * from './wire.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}

package/dist/mcp/index.js

@@ -0,0 +1,4 @@
+/** Exact, bounded wire contracts shared by DocBlocks MCP implementations. */
+export * from './types.js';
+export * from './wire.js';
+//# sourceMappingURL=index.js.map

package/dist/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}