@bendyline/squisq 1.4.1 → 1.5.1

package/dist/chunk-6ATE2PSM.js

@@ -0,0 +1,344 @@
+import {
+  toMdast
+} from "./chunk-TEEEILMP.js";
+import {
+  formatBlockScalar
+} from "./chunk-HWVFJAAH.js";
+
+// src/markdown/stringify.ts
+import { unified } from "unified";
+import remarkStringify from "remark-stringify";
+import remarkGfm from "remark-gfm";
+import remarkMath from "remark-math";
+import remarkDirective from "remark-directive";
+var defaultProcessor;
+var DQ_RUN = `"(?:[^"\\\\]|\\\\.)*"`;
+var SQ_RUN = `'(?:[^'\\\\]|\\\\.)*'`;
+var ESCAPED_TEMPLATE_SPAN_RE = new RegExp(
+  `\\{\\\\\\[((?:${DQ_RUN}|${SQ_RUN}|\\\\.|[^\\]\\\\])+)\\]\\}`,
+  "g"
+);
+var HEADING_LINE_RE = /^#{1,6} .*$/gm;
+var TRAILING_ESCAPED_PANDOC_SPAN_RE = new RegExp(
+  `\\{(?!\\\\?\\[)((?:${DQ_RUN}|${SQ_RUN}|\\\\.|[^}\\\\])*)\\}(?=\\s*(?:\\{\\[.*)?$)`
+);
+var UNESCAPE_PUNCT_RE = /\\([\\[\]:#.,+=/?;@%$(){}'"-])/g;
+function unescapeMarkdownPunct(text) {
+  return text.replace(UNESCAPE_PUNCT_RE, "$1");
+}
+function stringifyMarkdown(doc, options) {
+  const mdastTree = toMdast(doc);
+  const useDefaults = !options || options.gfm !== false && options.math !== false && options.directive !== false && !options.bullet && !options.bulletOrdered && !options.emphasis && !options.strong && !options.rule && !options.fence && options.setext == null;
+  let processor;
+  if (useDefaults) {
+    if (!defaultProcessor) {
+      defaultProcessor = unified().use(remarkGfm).use(remarkMath).use(remarkDirective).use(remarkStringify, {
+        bullet: "-",
+        bulletOrdered: ".",
+        emphasis: "*",
+        strong: "*",
+        rule: "-",
+        fence: "`",
+        setext: false
+      });
+    }
+    processor = defaultProcessor;
+  } else {
+    processor = unified();
+    if (options?.gfm !== false) {
+      processor = processor.use(remarkGfm);
+    }
+    if (options?.math !== false) {
+      processor = processor.use(remarkMath);
+    }
+    if (options?.directive !== false) {
+      processor = processor.use(remarkDirective);
+    }
+    processor = processor.use(remarkStringify, {
+      bullet: options?.bullet ?? "-",
+      bulletOrdered: options?.bulletOrdered ?? ".",
+      emphasis: options?.emphasis ?? "*",
+      strong: options?.strong ?? "*",
+      rule: options?.rule ?? "-",
+      fence: options?.fence ?? "`",
+      setext: options?.setext ?? false
+    });
+  }
+  const result = processor.stringify(mdastTree);
+  let cleaned = result.replace(
+    ESCAPED_TEMPLATE_SPAN_RE,
+    (_m, inner) => `{[${unescapeMarkdownPunct(inner)}]}`
+  );
+  cleaned = cleaned.replace(
+    HEADING_LINE_RE,
+    (line) => line.replace(
+      TRAILING_ESCAPED_PANDOC_SPAN_RE,
+      (_m, inner) => `{${unescapeMarkdownPunct(inner)}}`
+    )
+  );
+  cleaned = cleaned.replace(/\{(?!\\?\[)[^}]*\}/g, (match) => match.replace(/\\:/g, ":"));
+  if (doc.frontmatter && Object.keys(doc.frontmatter).length > 0) {
+    const yamlLines = Object.entries(doc.frontmatter).map(([k, v]) => {
+      if (typeof v === "string") {
+        return /[\r\n]/.test(v) ? `${k}: ${formatBlockScalar(v.replace(/\r\n?/g, "\n"))}` : `${k}: ${v}`;
+      }
+      return `${k}: ${JSON.stringify(v)}`;
+    });
+    return `---
+${yamlLines.join("\n")}
+---
+
+${cleaned}`;
+  }
+  return cleaned;
+}
+
+// src/markdown/sanitize.ts
+var SAFE_LINK_SCHEMES = /* @__PURE__ */ new Set(["http", "https", "mailto", "tel"]);
+var SAFE_MEDIA_SCHEMES = /* @__PURE__ */ new Set(["http", "https", "blob"]);
+var NEVER_ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["javascript", "vbscript", "data"]);
+var SAFE_DATA_MEDIA_RE = /^data:(?:image\/(?!svg\+xml)[a-z0-9.+-]+|audio\/[a-z0-9.+-]+|video\/[a-z0-9.+-]+);/i;
+var SAFE_TAGS = /* @__PURE__ */ new Set([
+  "a",
+  "abbr",
+  "b",
+  "blockquote",
+  "br",
+  "caption",
+  "cite",
+  "code",
+  "col",
+  "colgroup",
+  "data",
+  "dd",
+  "del",
+  "details",
+  "dfn",
+  "div",
+  "dl",
+  "dt",
+  "em",
+  "figcaption",
+  "figure",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "h5",
+  "h6",
+  "hr",
+  "i",
+  "img",
+  "kbd",
+  "li",
+  "mark",
+  "ol",
+  "p",
+  "pre",
+  "q",
+  "s",
+  "samp",
+  "small",
+  "source",
+  "span",
+  "strong",
+  "sub",
+  "summary",
+  "sup",
+  "table",
+  "tbody",
+  "td",
+  "tfoot",
+  "th",
+  "thead",
+  "time",
+  "tr",
+  "track",
+  "u",
+  "ul",
+  "var",
+  "video",
+  "audio"
+]);
+var DROP_WITH_CONTENT_TAGS = /* @__PURE__ */ new Set([
+  "base",
+  "button",
+  "embed",
+  "form",
+  "iframe",
+  "input",
+  "link",
+  "meta",
+  "object",
+  "option",
+  "script",
+  "select",
+  "style",
+  "svg",
+  "template",
+  "textarea"
+]);
+var GLOBAL_ATTRS = /* @__PURE__ */ new Set(["class", "id", "title", "role"]);
+var TAG_ATTRS = {
+  a: /* @__PURE__ */ new Set(["href", "target", "rel"]),
+  audio: /* @__PURE__ */ new Set(["src", "controls", "preload", "muted", "loop"]),
+  col: /* @__PURE__ */ new Set(["span", "width"]),
+  colgroup: /* @__PURE__ */ new Set(["span"]),
+  data: /* @__PURE__ */ new Set(["value"]),
+  img: /* @__PURE__ */ new Set(["src", "alt", "width", "height", "loading", "decoding"]),
+  li: /* @__PURE__ */ new Set(["value"]),
+  ol: /* @__PURE__ */ new Set(["start", "type"]),
+  q: /* @__PURE__ */ new Set(["cite"]),
+  source: /* @__PURE__ */ new Set(["src", "type", "media"]),
+  td: /* @__PURE__ */ new Set(["colspan", "rowspan", "align"]),
+  th: /* @__PURE__ */ new Set(["colspan", "rowspan", "align", "scope"]),
+  time: /* @__PURE__ */ new Set(["datetime"]),
+  track: /* @__PURE__ */ new Set(["src", "kind", "label", "srclang", "default"]),
+  video: /* @__PURE__ */ new Set([
+    "src",
+    "poster",
+    "width",
+    "height",
+    "controls",
+    "preload",
+    "muted",
+    "loop",
+    "playsinline"
+  ])
+};
+var SAFE_ATTR_NAME_RE = /^[a-z][a-z0-9:_.-]*$/;
+var SAFE_OL_TYPES = /* @__PURE__ */ new Set(["1", "a", "A", "i", "I"]);
+var SAFE_PRELOAD_VALUES = /* @__PURE__ */ new Set(["none", "metadata", "auto"]);
+var SAFE_TRACK_KINDS = /* @__PURE__ */ new Set(["subtitles", "captions", "descriptions", "chapters", "metadata"]);
+function sanitizeUrl(url, kind = "link", options) {
+  if (typeof url !== "string") return null;
+  const trimmed = url.trim();
+  if (!trimmed) return null;
+  const compact = stripUrlSchemeNoise(trimmed);
+  const colon = compact.indexOf(":");
+  const firstPathChar = firstIndexOfAny(compact, ["/", "?", "#"]);
+  const hasScheme = colon >= 0 && (firstPathChar < 0 || colon < firstPathChar);
+  if (!hasScheme) return trimmed;
+  const scheme = compact.slice(0, colon).toLowerCase();
+  if (kind === "media") {
+    if (scheme === "data") return SAFE_DATA_MEDIA_RE.test(compact) ? trimmed : null;
+    return SAFE_MEDIA_SCHEMES.has(scheme) ? trimmed : null;
+  }
+  if (SAFE_LINK_SCHEMES.has(scheme)) return trimmed;
+  if (options?.extraLinkSchemes?.includes(scheme) && !NEVER_ALLOWED_SCHEMES.has(scheme)) {
+    return trimmed;
+  }
+  return null;
+}
+function sanitizeHtmlNodes(nodes) {
+  const out = [];
+  for (const node of nodes) {
+    out.push(...sanitizeHtmlNode(node));
+  }
+  return out;
+}
+function sanitizeHtmlNode(node) {
+  switch (node.type) {
+    case "htmlText":
+      return [node];
+    case "htmlComment":
+      return [];
+    case "htmlElement":
+      return sanitizeHtmlElement(node);
+  }
+}
+function sanitizeHtmlElement(node) {
+  const tag = node.tagName.toLowerCase();
+  if (DROP_WITH_CONTENT_TAGS.has(tag)) return [];
+  const children = sanitizeHtmlNodes(node.children);
+  if (!SAFE_TAGS.has(tag)) return children;
+  return [
+    {
+      type: "htmlElement",
+      tagName: tag,
+      attributes: sanitizeAttrs(tag, node.attributes),
+      children,
+      selfClosing: node.selfClosing
+    }
+  ];
+}
+function sanitizeAttrs(tag, attrs) {
+  const out = {};
+  for (const [rawName, rawValue] of Object.entries(attrs)) {
+    const name = rawName.toLowerCase();
+    if (!isAllowedAttr(tag, name)) continue;
+    const value = String(rawValue);
+    const safeValue = sanitizeAttrValue(tag, name, value);
+    if (safeValue === null) continue;
+    out[name] = safeValue;
+  }
+  if (tag === "a" && out.target === "_blank") {
+    out.rel = ensureRelTokens(out.rel, ["noopener", "noreferrer"]);
+  }
+  return out;
+}
+function isAllowedAttr(tag, name) {
+  if (!SAFE_ATTR_NAME_RE.test(name)) return false;
+  if (name.startsWith("on")) return false;
+  if (name.startsWith("aria-") || name.startsWith("data-")) return true;
+  if (GLOBAL_ATTRS.has(name)) return true;
+  return TAG_ATTRS[tag]?.has(name) ?? false;
+}
+function sanitizeAttrValue(tag, name, value) {
+  if (name === "href") return sanitizeUrl(value, "link");
+  if (name === "src" || name === "poster") return sanitizeUrl(value, "media");
+  if ((name === "width" || name === "height" || name === "span" || name === "colspan" || name === "rowspan" || name === "value") && !isNonNegativeInteger(value)) {
+    return null;
+  }
+  if (name === "start" && !isInteger(value)) return null;
+  if (name === "type" && tag === "ol" && !SAFE_OL_TYPES.has(value)) return null;
+  if (name === "preload" && !SAFE_PRELOAD_VALUES.has(value)) return null;
+  if (name === "kind" && tag === "track" && !SAFE_TRACK_KINDS.has(value)) return null;
+  if (name === "align" && value !== "left" && value !== "right" && value !== "center") return null;
+  if (name === "target")
+    return value === "_blank" || value === "_self" || value === "_parent" || value === "_top" ? value : null;
+  if (name === "rel") return sanitizeRel(value);
+  return value;
+}
+function sanitizeRel(value) {
+  return relTokens(value).join(" ");
+}
+function ensureRelTokens(value, required) {
+  const tokens = new Set(value ? relTokens(value) : []);
+  for (const token of required) tokens.add(token);
+  return Array.from(tokens).join(" ");
+}
+function relTokens(value) {
+  const tokens = value.split(/\s+/).map((token) => token.trim().toLowerCase()).filter(Boolean).filter((token) => /^[a-z0-9_-]+$/.test(token));
+  return Array.from(new Set(tokens));
+}
+function isInteger(value) {
+  return /^-?\d+$/.test(value.trim());
+}
+function isNonNegativeInteger(value) {
+  return /^\d+$/.test(value.trim());
+}
+function firstIndexOfAny(value, needles) {
+  let result = -1;
+  for (const needle of needles) {
+    const index = value.indexOf(needle);
+    if (index >= 0 && (result < 0 || index < result)) result = index;
+  }
+  return result;
+}
+function stripUrlSchemeNoise(value) {
+  let out = "";
+  for (const char of value) {
+    const code = char.charCodeAt(0);
+    if (code <= 32 || code === 127 || char.trim() === "") continue;
+    out += char;
+  }
+  return out;
+}
+
+export {
+  stringifyMarkdown,
+  sanitizeUrl,
+  sanitizeHtmlNodes
+};
+//# sourceMappingURL=chunk-6ATE2PSM.js.map

package/dist/chunk-6ATE2PSM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/markdown/stringify.ts","../src/markdown/sanitize.ts"],"sourcesContent":["/**\n * JSON → Markdown Serializer\n *\n * Converts a MarkdownDocument JSON structure back to a markdown string\n * using the unified/remark ecosystem with GFM, math, and directive extensions.\n */\n\nimport { unified } from 'unified';\nimport remarkStringify from 'remark-stringify';\nimport remarkGfm from 'remark-gfm';\nimport remarkMath from 'remark-math';\nimport remarkDirective from 'remark-directive';\nimport type { MarkdownDocument, StringifyOptions } from './types.js';\nimport { toMdast } from './convert.js';\nimport { formatBlockScalar } from './utils.js';\n\n// Cache the default processor (all extensions, default formatting) to avoid rebuilding on every call.\nlet defaultProcessor: any;\n\n// ============================================\n// Annotation-span unescaping\n// ============================================\n\n// Quoted runs as they appear in remark-stringify output. Backslashes inside\n// the span are doubled by remark (a literal `\\` before punctuation becomes\n// `\\\\`), so `\\\\.` covers both authored escapes and remark's own.\nconst DQ_RUN = `\"(?:[^\"\\\\\\\\]|\\\\\\\\.)*\"`;\nconst SQ_RUN = `'(?:[^'\\\\\\\\]|\\\\\\\\.)*'`;\n\n/**\n * A `{[…]}` template-annotation (or inline-icon) span as it appears in\n * remark output: `{\\[inner]}`, where `inner` may contain backslash escapes\n * and quoted runs (which may themselves contain `]`).\n */\nconst ESCAPED_TEMPLATE_SPAN_RE = new RegExp(\n  `\\\\{\\\\\\\\\\\\[((?:${DQ_RUN}|${SQ_RUN}|\\\\\\\\.|[^\\\\]\\\\\\\\])+)\\\\]\\\\}`,\n  'g',\n);\n\n/** A heading line (annotations are only emitted trailing on headings). */\nconst HEADING_LINE_RE = /^#{1,6} .*$/gm;\n\n/**\n * The trailing Pandoc `{…}` span on a heading line, possibly followed by an\n * already-unescaped `{[…]}` template span (canonical emit order).\n */\nconst TRAILING_ESCAPED_PANDOC_SPAN_RE = new RegExp(\n  `\\\\{(?!\\\\\\\\?\\\\[)((?:${DQ_RUN}|${SQ_RUN}|\\\\\\\\.|[^}\\\\\\\\])*)\\\\}(?=\\\\s*(?:\\\\{\\\\[.*)?$)`,\n);\n\n/**\n * Backslash+punctuation pairs that are safe to unescape inside an\n * annotation span: the bare character re-parses as literal text in\n * trailing-heading position, so removing the backslash is purely\n * cosmetic and round-trips.\n *\n * Deliberately EXCLUDED (left escaped in the emitted markdown): emphasis\n * and other inline-construct openers (`*`, `_`, `` ` ``, `~`, `<`, `>`,\n * `&`, `!`, `|`, `^`). Unescaping those could make remark-parse split the\n * heading's text run into inline nodes on reparse, which would hide the\n * annotation from the extractor. remark-parse resolves the surviving\n * `\\X` escapes back to bare characters, so values still round-trip —\n * the escapes are a cosmetic cost only.\n *\n * Pairs are consumed left to right, so an authored `\\\"` that remark\n * doubled to `\\\\\"` correctly comes back as `\\\"`.\n */\nconst UNESCAPE_PUNCT_RE = /\\\\([\\\\[\\]:#.,+=/?;@%$(){}'\"-])/g;\n\nfunction unescapeMarkdownPunct(text: string): string {\n  return text.replace(UNESCAPE_PUNCT_RE, '$1');\n}\n\n/**\n * Serialize a MarkdownDocument back to a markdown string.\n *\n * All extensions (GFM, math, directives) are enabled by default.\n * Use the `options` parameter to control formatting and disable extensions.\n *\n * @param doc - The MarkdownDocument to serialize\n * @param options - Serialization options (formatting, extensions)\n * @returns A markdown string\n *\n * @example\n * ```ts\n * const doc: MarkdownDocument = {\n *   type: 'document',\n *   children: [\n *     { type: 'heading', depth: 1, children: [{ type: 'text', value: 'Hello' }] },\n *     { type: 'paragraph', children: [{ type: 'text', value: 'World' }] },\n *   ],\n * };\n * const md = stringifyMarkdown(doc);\n * // '# Hello\\n\\nWorld\\n'\n * ```\n */\nexport function stringifyMarkdown(doc: MarkdownDocument, options?: StringifyOptions): string {\n  // Convert MarkdownDocument → mdast tree\n  const mdastTree = toMdast(doc);\n\n  // Use cached default processor when all extensions and default formatting are used.\n  const useDefaults =\n    !options ||\n    (options.gfm !== false &&\n      options.math !== false &&\n      options.directive !== false &&\n      !options.bullet &&\n      !options.bulletOrdered &&\n      !options.emphasis &&\n      !options.strong &&\n      !options.rule &&\n      !options.fence &&\n      options.setext == null);\n\n  let processor: any;\n\n  if (useDefaults) {\n    if (!defaultProcessor) {\n      defaultProcessor = unified()\n        .use(remarkGfm)\n        .use(remarkMath)\n        .use(remarkDirective)\n        .use(remarkStringify, {\n          bullet: '-',\n          bulletOrdered: '.',\n          emphasis: '*',\n          strong: '*',\n          rule: '-',\n          fence: '`',\n          setext: false,\n        });\n    }\n    processor = defaultProcessor;\n  } else {\n    // Build a custom processor with requested options.\n    // unified's .use() chaining changes the generic signature each time,\n    // making strict typing impractical — use a widened Processor type.\n    processor = unified();\n\n    if (options?.gfm !== false) {\n      processor = processor.use(remarkGfm);\n    }\n    if (options?.math !== false) {\n      processor = processor.use(remarkMath);\n    }\n    if (options?.directive !== false) {\n      processor = processor.use(remarkDirective);\n    }\n\n    processor = processor.use(remarkStringify, {\n      bullet: options?.bullet ?? '-',\n      bulletOrdered: options?.bulletOrdered ?? '.',\n      emphasis: options?.emphasis ?? '*',\n      strong: options?.strong ?? '*',\n      rule: options?.rule ?? '-',\n      fence: options?.fence ?? '`',\n      setext: options?.setext ?? false,\n    });\n  }\n\n  // Stringify mdast → markdown string\n  const result = processor.stringify(mdastTree) as string;\n\n  // remark-stringify backslash-escapes markdown-significant characters in\n  // text nodes (`[` to prevent link syntax, `:` for directives, `*`/`_` for\n  // emphasis, a literal `\\` before punctuation, …). Our annotations are\n  // injected as plain text, so their interiors come back escaped. Undo that\n  // inside `{[…]}` template-annotation spans: removing one backslash from\n  // each backslash+punctuation pair (left to right) exactly inverts\n  // remark's escaping — including restoring an authored `\\\"` that remark\n  // doubled to `\\\\\"`. The span regex understands quoted values, so a\n  // quoted `]` doesn't terminate the span.\n  let cleaned = result.replace(\n    ESCAPED_TEMPLATE_SPAN_RE,\n    (_m, inner: string) => `{[${unescapeMarkdownPunct(inner)}]}`,\n  );\n\n  // Same treatment for the trailing Pandoc `{…}` attribute block on heading\n  // lines (canonical emit order is Pandoc block then template annotation,\n  // so the span sits at end-of-line or just before a `{[…]}` span).\n  cleaned = cleaned.replace(HEADING_LINE_RE, (line) =>\n    line.replace(\n      TRAILING_ESCAPED_PANDOC_SPAN_RE,\n      (_m, inner: string) => `{${unescapeMarkdownPunct(inner)}}`,\n    ),\n  );\n\n  // remark-directive escapes `:` in text (since `:name` would round-trip as\n  // a text directive). Inside any other Pandoc-style `{…}` brace span, `:`\n  // is purely a value separator (e.g. `connectsTo=foo:flow`), so unescape\n  // it to keep round-trips lossless. The negative lookahead skips `{[…]}`\n  // template annotations — those are handled above.\n  cleaned = cleaned.replace(/\\{(?!\\\\?\\[)[^}]*\\}/g, (match) => match.replace(/\\\\:/g, ':'));\n\n  // Prepend YAML frontmatter if present\n  if (doc.frontmatter && Object.keys(doc.frontmatter).length > 0) {\n    const yamlLines = Object.entries(doc.frontmatter).map(([k, v]) => {\n      if (typeof v === 'string') {\n        // Multi-line strings emit as a YAML literal block scalar, matching\n        // `formatFrontmatterValue` / `setFrontmatterValues` so both paths\n        // agree; single-line strings stay verbatim as before.\n        return /[\\r\\n]/.test(v)\n          ? `${k}: ${formatBlockScalar(v.replace(/\\r\\n?/g, '\\n'))}`\n          : `${k}: ${v}`;\n      }\n      return `${k}: ${JSON.stringify(v)}`;\n    });\n    return `---\\n${yamlLines.join('\\n')}\\n---\\n\\n${cleaned}`;\n  }\n\n  return cleaned;\n}\n","import type { HtmlElement, HtmlNode } from './types.js';\n\nexport type HtmlPolicy = 'strip' | 'sanitize' | 'trusted';\n\nexport type UrlKind = 'link' | 'media';\n\nconst SAFE_LINK_SCHEMES = new Set(['http', 'https', 'mailto', 'tel']);\nconst SAFE_MEDIA_SCHEMES = new Set(['http', 'https', 'blob']);\n\n/** Schemes that can execute script — never allowed, even via extraLinkSchemes. */\nconst NEVER_ALLOWED_SCHEMES = new Set(['javascript', 'vbscript', 'data']);\n\nexport interface SanitizeUrlOptions {\n  /**\n   * Extra lowercase schemes allowed for `kind: 'link'` — the host-app escape\n   * hatch for custom link protocols it intercepts itself (e.g. an app-internal\n   * navigation scheme). Executable schemes are refused regardless.\n   */\n  extraLinkSchemes?: readonly string[];\n}\n\nconst SAFE_DATA_MEDIA_RE =\n  /^data:(?:image\\/(?!svg\\+xml)[a-z0-9.+-]+|audio\\/[a-z0-9.+-]+|video\\/[a-z0-9.+-]+);/i;\n\nconst SAFE_TAGS = new Set([\n  'a',\n  'abbr',\n  'b',\n  'blockquote',\n  'br',\n  'caption',\n  'cite',\n  'code',\n  'col',\n  'colgroup',\n  'data',\n  'dd',\n  'del',\n  'details',\n  'dfn',\n  'div',\n  'dl',\n  'dt',\n  'em',\n  'figcaption',\n  'figure',\n  'h1',\n  'h2',\n  'h3',\n  'h4',\n  'h5',\n  'h6',\n  'hr',\n  'i',\n  'img',\n  'kbd',\n  'li',\n  'mark',\n  'ol',\n  'p',\n  'pre',\n  'q',\n  's',\n  'samp',\n  'small',\n  'source',\n  'span',\n  'strong',\n  'sub',\n  'summary',\n  'sup',\n  'table',\n  'tbody',\n  'td',\n  'tfoot',\n  'th',\n  'thead',\n  'time',\n  'tr',\n  'track',\n  'u',\n  'ul',\n  'var',\n  'video',\n  'audio',\n]);\n\nconst DROP_WITH_CONTENT_TAGS = new Set([\n  'base',\n  'button',\n  'embed',\n  'form',\n  'iframe',\n  'input',\n  'link',\n  'meta',\n  'object',\n  'option',\n  'script',\n  'select',\n  'style',\n  'svg',\n  'template',\n  'textarea',\n]);\n\nconst GLOBAL_ATTRS = new Set(['class', 'id', 'title', 'role']);\n\nconst TAG_ATTRS: Record<string, Set<string>> = {\n  a: new Set(['href', 'target', 'rel']),\n  audio: new Set(['src', 'controls', 'preload', 'muted', 'loop']),\n  col: new Set(['span', 'width']),\n  colgroup: new Set(['span']),\n  data: new Set(['value']),\n  img: new Set(['src', 'alt', 'width', 'height', 'loading', 'decoding']),\n  li: new Set(['value']),\n  ol: new Set(['start', 'type']),\n  q: new Set(['cite']),\n  source: new Set(['src', 'type', 'media']),\n  td: new Set(['colspan', 'rowspan', 'align']),\n  th: new Set(['colspan', 'rowspan', 'align', 'scope']),\n  time: new Set(['datetime']),\n  track: new Set(['src', 'kind', 'label', 'srclang', 'default']),\n  video: new Set([\n    'src',\n    'poster',\n    'width',\n    'height',\n    'controls',\n    'preload',\n    'muted',\n    'loop',\n    'playsinline',\n  ]),\n};\n\nconst SAFE_ATTR_NAME_RE = /^[a-z][a-z0-9:_.-]*$/;\nconst SAFE_OL_TYPES = new Set(['1', 'a', 'A', 'i', 'I']);\nconst SAFE_PRELOAD_VALUES = new Set(['none', 'metadata', 'auto']);\nconst SAFE_TRACK_KINDS = new Set(['subtitles', 'captions', 'descriptions', 'chapters', 'metadata']);\n\n/**\n * Sanitize a URL for a rendered link or media attribute.\n *\n * Relative URLs are allowed. Absolute URLs are restricted to schemes that\n * cannot execute script in a document context. Media URLs additionally allow\n * `blob:` and image/audio/video `data:` URLs because Squisq uses both for\n * browser-local media previews and self-contained exports.\n */\nexport function sanitizeUrl(\n  url: string | null | undefined,\n  kind: UrlKind = 'link',\n  options?: SanitizeUrlOptions,\n): string | null {\n  if (typeof url !== 'string') return null;\n\n  const trimmed = url.trim();\n  if (!trimmed) return null;\n\n  const compact = stripUrlSchemeNoise(trimmed);\n  const colon = compact.indexOf(':');\n  const firstPathChar = firstIndexOfAny(compact, ['/', '?', '#']);\n  const hasScheme = colon >= 0 && (firstPathChar < 0 || colon < firstPathChar);\n\n  if (!hasScheme) return trimmed;\n\n  const scheme = compact.slice(0, colon).toLowerCase();\n  if (kind === 'media') {\n    if (scheme === 'data') return SAFE_DATA_MEDIA_RE.test(compact) ? trimmed : null;\n    return SAFE_MEDIA_SCHEMES.has(scheme) ? trimmed : null;\n  }\n\n  if (SAFE_LINK_SCHEMES.has(scheme)) return trimmed;\n  if (options?.extraLinkSchemes?.includes(scheme) && !NEVER_ALLOWED_SCHEMES.has(scheme)) {\n    return trimmed;\n  }\n  return null;\n}\n\n/**\n * Return a sanitized copy of an HtmlNode tree. The original parsed tree is left\n * untouched so markdown stringify can still preserve source fidelity.\n */\nexport function sanitizeHtmlNodes(nodes: HtmlNode[]): HtmlNode[] {\n  const out: HtmlNode[] = [];\n  for (const node of nodes) {\n    out.push(...sanitizeHtmlNode(node));\n  }\n  return out;\n}\n\nfunction sanitizeHtmlNode(node: HtmlNode): HtmlNode[] {\n  switch (node.type) {\n    case 'htmlText':\n      return [node];\n    case 'htmlComment':\n      return [];\n    case 'htmlElement':\n      return sanitizeHtmlElement(node);\n  }\n}\n\nfunction sanitizeHtmlElement(node: HtmlElement): HtmlNode[] {\n  const tag = node.tagName.toLowerCase();\n\n  if (DROP_WITH_CONTENT_TAGS.has(tag)) return [];\n\n  const children = sanitizeHtmlNodes(node.children);\n  if (!SAFE_TAGS.has(tag)) return children;\n\n  return [\n    {\n      type: 'htmlElement',\n      tagName: tag,\n      attributes: sanitizeAttrs(tag, node.attributes),\n      children,\n      selfClosing: node.selfClosing,\n    },\n  ];\n}\n\nfunction sanitizeAttrs(tag: string, attrs: Record<string, string>): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const [rawName, rawValue] of Object.entries(attrs)) {\n    const name = rawName.toLowerCase();\n    if (!isAllowedAttr(tag, name)) continue;\n\n    const value = String(rawValue);\n    const safeValue = sanitizeAttrValue(tag, name, value);\n    if (safeValue === null) continue;\n    out[name] = safeValue;\n  }\n  if (tag === 'a' && out.target === '_blank') {\n    out.rel = ensureRelTokens(out.rel, ['noopener', 'noreferrer']);\n  }\n  return out;\n}\n\nfunction isAllowedAttr(tag: string, name: string): boolean {\n  if (!SAFE_ATTR_NAME_RE.test(name)) return false;\n  if (name.startsWith('on')) return false;\n  if (name.startsWith('aria-') || name.startsWith('data-')) return true;\n  if (GLOBAL_ATTRS.has(name)) return true;\n  return TAG_ATTRS[tag]?.has(name) ?? false;\n}\n\nfunction sanitizeAttrValue(tag: string, name: string, value: string): string | null {\n  if (name === 'href') return sanitizeUrl(value, 'link');\n  if (name === 'src' || name === 'poster') return sanitizeUrl(value, 'media');\n  if (\n    (name === 'width' ||\n      name === 'height' ||\n      name === 'span' ||\n      name === 'colspan' ||\n      name === 'rowspan' ||\n      name === 'value') &&\n    !isNonNegativeInteger(value)\n  ) {\n    return null;\n  }\n  if (name === 'start' && !isInteger(value)) return null;\n  if (name === 'type' && tag === 'ol' && !SAFE_OL_TYPES.has(value)) return null;\n  if (name === 'preload' && !SAFE_PRELOAD_VALUES.has(value)) return null;\n  if (name === 'kind' && tag === 'track' && !SAFE_TRACK_KINDS.has(value)) return null;\n  if (name === 'align' && value !== 'left' && value !== 'right' && value !== 'center') return null;\n  if (name === 'target')\n    return value === '_blank' || value === '_self' || value === '_parent' || value === '_top'\n      ? value\n      : null;\n  if (name === 'rel') return sanitizeRel(value);\n  return value;\n}\n\nfunction sanitizeRel(value: string): string {\n  return relTokens(value).join(' ');\n}\n\nfunction ensureRelTokens(value: string | undefined, required: string[]): string {\n  const tokens = new Set(value ? relTokens(value) : []);\n  for (const token of required) tokens.add(token);\n  return Array.from(tokens).join(' ');\n}\n\nfunction relTokens(value: string): string[] {\n  const tokens = value\n    .split(/\\s+/)\n    .map((token) => token.trim().toLowerCase())\n    .filter(Boolean)\n    .filter((token) => /^[a-z0-9_-]+$/.test(token));\n  return Array.from(new Set(tokens));\n}\n\nfunction isInteger(value: string): boolean {\n  return /^-?\\d+$/.test(value.trim());\n}\n\nfunction isNonNegativeInteger(value: string): boolean {\n  return /^\\d+$/.test(value.trim());\n}\n\nfunction firstIndexOfAny(value: string, needles: string[]): number {\n  let result = -1;\n  for (const needle of needles) {\n    const index = value.indexOf(needle);\n    if (index >= 0 && (result < 0 || index < result)) result = index;\n  }\n  return result;\n}\n\nfunction stripUrlSchemeNoise(value: string): string {\n  let out = '';\n  for (const char of value) {\n    const code = char.charCodeAt(0);\n    if (code <= 0x20 || code === 0x7f || char.trim() === '') continue;\n    out += char;\n  }\n  return out;\n}\n"],"mappings":";;;;;;;;AAOA,SAAS,eAAe;AACxB,OAAO,qBAAqB;AAC5B,OAAO,eAAe;AACtB,OAAO,gBAAgB;AACvB,OAAO,qBAAqB;AAM5B,IAAI;AASJ,IAAM,SAAS;AACf,IAAM,SAAS;AAOf,IAAM,2BAA2B,IAAI;AAAA,EACnC,iBAAiB,MAAM,IAAI,MAAM;AAAA,EACjC;AACF;AAGA,IAAM,kBAAkB;AAMxB,IAAM,kCAAkC,IAAI;AAAA,EAC1C,sBAAsB,MAAM,IAAI,MAAM;AACxC;AAmBA,IAAM,oBAAoB;AAE1B,SAAS,sBAAsB,MAAsB;AACnD,SAAO,KAAK,QAAQ,mBAAmB,IAAI;AAC7C;AAyBO,SAAS,kBAAkB,KAAuB,SAAoC;AAE3F,QAAM,YAAY,QAAQ,GAAG;AAG7B,QAAM,cACJ,CAAC,WACA,QAAQ,QAAQ,SACf,QAAQ,SAAS,SACjB,QAAQ,cAAc,SACtB,CAAC,QAAQ,UACT,CAAC,QAAQ,iBACT,CAAC,QAAQ,YACT,CAAC,QAAQ,UACT,CAAC,QAAQ,QACT,CAAC,QAAQ,SACT,QAAQ,UAAU;AAEtB,MAAI;AAEJ,MAAI,aAAa;AACf,QAAI,CAAC,kBAAkB;AACrB,yBAAmB,QAAQ,EACxB,IAAI,SAAS,EACb,IAAI,UAAU,EACd,IAAI,eAAe,EACnB,IAAI,iBAAiB;AAAA,QACpB,QAAQ;AAAA,QACR,eAAe;AAAA,QACf,UAAU;AAAA,QACV,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,OAAO;AAAA,QACP,QAAQ;AAAA,MACV,CAAC;AAAA,IACL;AACA,gBAAY;AAAA,EACd,OAAO;AAIL,gBAAY,QAAQ;AAEpB,QAAI,SAAS,QAAQ,OAAO;AAC1B,kBAAY,UAAU,IAAI,SAAS;AAAA,IACrC;AACA,QAAI,SAAS,SAAS,OAAO;AAC3B,kBAAY,UAAU,IAAI,UAAU;AAAA,IACtC;AACA,QAAI,SAAS,cAAc,OAAO;AAChC,kBAAY,UAAU,IAAI,eAAe;AAAA,IAC3C;AAEA,gBAAY,UAAU,IAAI,iBAAiB;AAAA,MACzC,QAAQ,SAAS,UAAU;AAAA,MAC3B,eAAe,SAAS,iBAAiB;AAAA,MACzC,UAAU,SAAS,YAAY;AAAA,MAC/B,QAAQ,SAAS,UAAU;AAAA,MAC3B,MAAM,SAAS,QAAQ;AAAA,MACvB,OAAO,SAAS,SAAS;AAAA,MACzB,QAAQ,SAAS,UAAU;AAAA,IAC7B,CAAC;AAAA,EACH;AAGA,QAAM,SAAS,UAAU,UAAU,SAAS;AAW5C,MAAI,UAAU,OAAO;AAAA,IACnB;AAAA,IACA,CAAC,IAAI,UAAkB,KAAK,sBAAsB,KAAK,CAAC;AAAA,EAC1D;AAKA,YAAU,QAAQ;AAAA,IAAQ;AAAA,IAAiB,CAAC,SAC1C,KAAK;AAAA,MACH;AAAA,MACA,CAAC,IAAI,UAAkB,IAAI,sBAAsB,KAAK,CAAC;AAAA,IACzD;AAAA,EACF;AAOA,YAAU,QAAQ,QAAQ,uBAAuB,CAAC,UAAU,MAAM,QAAQ,QAAQ,GAAG,CAAC;AAGtF,MAAI,IAAI,eAAe,OAAO,KAAK,IAAI,WAAW,EAAE,SAAS,GAAG;AAC9D,UAAM,YAAY,OAAO,QAAQ,IAAI,WAAW,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;AAChE,UAAI,OAAO,MAAM,UAAU;AAIzB,eAAO,SAAS,KAAK,CAAC,IAClB,GAAG,CAAC,KAAK,kBAAkB,EAAE,QAAQ,UAAU,IAAI,CAAC,CAAC,KACrD,GAAG,CAAC,KAAK,CAAC;AAAA,MAChB;AACA,aAAO,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;AAAA,IACnC,CAAC;AACD,WAAO;AAAA,EAAQ,UAAU,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA,EAAY,OAAO;AAAA,EACxD;AAEA,SAAO;AACT;;;AC7MA,IAAM,oBAAoB,oBAAI,IAAI,CAAC,QAAQ,SAAS,UAAU,KAAK,CAAC;AACpE,IAAM,qBAAqB,oBAAI,IAAI,CAAC,QAAQ,SAAS,MAAM,CAAC;AAG5D,IAAM,wBAAwB,oBAAI,IAAI,CAAC,cAAc,YAAY,MAAM,CAAC;AAWxE,IAAM,qBACJ;AAEF,IAAM,YAAY,oBAAI,IAAI;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,yBAAyB,oBAAI,IAAI;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,eAAe,oBAAI,IAAI,CAAC,SAAS,MAAM,SAAS,MAAM,CAAC;AAE7D,IAAM,YAAyC;AAAA,EAC7C,GAAG,oBAAI,IAAI,CAAC,QAAQ,UAAU,KAAK,CAAC;AAAA,EACpC,OAAO,oBAAI,IAAI,CAAC,OAAO,YAAY,WAAW,SAAS,MAAM,CAAC;AAAA,EAC9D,KAAK,oBAAI,IAAI,CAAC,QAAQ,OAAO,CAAC;AAAA,EAC9B,UAAU,oBAAI,IAAI,CAAC,MAAM,CAAC;AAAA,EAC1B,MAAM,oBAAI,IAAI,CAAC,OAAO,CAAC;AAAA,EACvB,KAAK,oBAAI,IAAI,CAAC,OAAO,OAAO,SAAS,UAAU,WAAW,UAAU,CAAC;AAAA,EACrE,IAAI,oBAAI,IAAI,CAAC,OAAO,CAAC;AAAA,EACrB,IAAI,oBAAI,IAAI,CAAC,SAAS,MAAM,CAAC;AAAA,EAC7B,GAAG,oBAAI,IAAI,CAAC,MAAM,CAAC;AAAA,EACnB,QAAQ,oBAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,CAAC;AAAA,EACxC,IAAI,oBAAI,IAAI,CAAC,WAAW,WAAW,OAAO,CAAC;AAAA,EAC3C,IAAI,oBAAI,IAAI,CAAC,WAAW,WAAW,SAAS,OAAO,CAAC;AAAA,EACpD,MAAM,oBAAI,IAAI,CAAC,UAAU,CAAC;AAAA,EAC1B,OAAO,oBAAI,IAAI,CAAC,OAAO,QAAQ,SAAS,WAAW,SAAS,CAAC;AAAA,EAC7D,OAAO,oBAAI,IAAI;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAEA,IAAM,oBAAoB;AAC1B,IAAM,gBAAgB,oBAAI,IAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,CAAC;AACvD,IAAM,sBAAsB,oBAAI,IAAI,CAAC,QAAQ,YAAY,MAAM,CAAC;AAChE,IAAM,mBAAmB,oBAAI,IAAI,CAAC,aAAa,YAAY,gBAAgB,YAAY,UAAU,CAAC;AAU3F,SAAS,YACd,KACA,OAAgB,QAChB,SACe;AACf,MAAI,OAAO,QAAQ,SAAU,QAAO;AAEpC,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,UAAU,oBAAoB,OAAO;AAC3C,QAAM,QAAQ,QAAQ,QAAQ,GAAG;AACjC,QAAM,gBAAgB,gBAAgB,SAAS,CAAC,KAAK,KAAK,GAAG,CAAC;AAC9D,QAAM,YAAY,SAAS,MAAM,gBAAgB,KAAK,QAAQ;AAE9D,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,SAAS,QAAQ,MAAM,GAAG,KAAK,EAAE,YAAY;AACnD,MAAI,SAAS,SAAS;AACpB,QAAI,WAAW,OAAQ,QAAO,mBAAmB,KAAK,OAAO,IAAI,UAAU;AAC3E,WAAO,mBAAmB,IAAI,MAAM,IAAI,UAAU;AAAA,EACpD;AAEA,MAAI,kBAAkB,IAAI,MAAM,EAAG,QAAO;AAC1C,MAAI,SAAS,kBAAkB,SAAS,MAAM,KAAK,CAAC,sBAAsB,IAAI,MAAM,GAAG;AACrF,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAMO,SAAS,kBAAkB,OAA+B;AAC/D,QAAM,MAAkB,CAAC;AACzB,aAAW,QAAQ,OAAO;AACxB,QAAI,KAAK,GAAG,iBAAiB,IAAI,CAAC;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,MAA4B;AACpD,UAAQ,KAAK,MAAM;AAAA,IACjB,KAAK;AACH,aAAO,CAAC,IAAI;AAAA,IACd,KAAK;AACH,aAAO,CAAC;AAAA,IACV,KAAK;AACH,aAAO,oBAAoB,IAAI;AAAA,EACnC;AACF;AAEA,SAAS,oBAAoB,MAA+B;AAC1D,QAAM,MAAM,KAAK,QAAQ,YAAY;AAErC,MAAI,uBAAuB,IAAI,GAAG,EAAG,QAAO,CAAC;AAE7C,QAAM,WAAW,kBAAkB,KAAK,QAAQ;AAChD,MAAI,CAAC,UAAU,IAAI,GAAG,EAAG,QAAO;AAEhC,SAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,SAAS;AAAA,MACT,YAAY,cAAc,KAAK,KAAK,UAAU;AAAA,MAC9C;AAAA,MACA,aAAa,KAAK;AAAA,IACpB;AAAA,EACF;AACF;AAEA,SAAS,cAAc,KAAa,OAAuD;AACzF,QAAM,MAA8B,CAAC;AACrC,aAAW,CAAC,SAAS,QAAQ,KAAK,OAAO,QAAQ,KAAK,GAAG;AACvD,UAAM,OAAO,QAAQ,YAAY;AACjC,QAAI,CAAC,cAAc,KAAK,IAAI,EAAG;AAE/B,UAAM,QAAQ,OAAO,QAAQ;AAC7B,UAAM,YAAY,kBAAkB,KAAK,MAAM,KAAK;AACpD,QAAI,cAAc,KAAM;AACxB,QAAI,IAAI,IAAI;AAAA,EACd;AACA,MAAI,QAAQ,OAAO,IAAI,WAAW,UAAU;AAC1C,QAAI,MAAM,gBAAgB,IAAI,KAAK,CAAC,YAAY,YAAY,CAAC;AAAA,EAC/D;AACA,SAAO;AACT;AAEA,SAAS,cAAc,KAAa,MAAuB;AACzD,MAAI,CAAC,kBAAkB,KAAK,IAAI,EAAG,QAAO;AAC1C,MAAI,KAAK,WAAW,IAAI,EAAG,QAAO;AAClC,MAAI,KAAK,WAAW,OAAO,KAAK,KAAK,WAAW,OAAO,EAAG,QAAO;AACjE,MAAI,aAAa,IAAI,IAAI,EAAG,QAAO;AACnC,SAAO,UAAU,GAAG,GAAG,IAAI,IAAI,KAAK;AACtC;AAEA,SAAS,kBAAkB,KAAa,MAAc,OAA8B;AAClF,MAAI,SAAS,OAAQ,QAAO,YAAY,OAAO,MAAM;AACrD,MAAI,SAAS,SAAS,SAAS,SAAU,QAAO,YAAY,OAAO,OAAO;AAC1E,OACG,SAAS,WACR,SAAS,YACT,SAAS,UACT,SAAS,aACT,SAAS,aACT,SAAS,YACX,CAAC,qBAAqB,KAAK,GAC3B;AACA,WAAO;AAAA,EACT;AACA,MAAI,SAAS,WAAW,CAAC,UAAU,KAAK,EAAG,QAAO;AAClD,MAAI,SAAS,UAAU,QAAQ,QAAQ,CAAC,cAAc,IAAI,KAAK,EAAG,QAAO;AACzE,MAAI,SAAS,aAAa,CAAC,oBAAoB,IAAI,KAAK,EAAG,QAAO;AAClE,MAAI,SAAS,UAAU,QAAQ,WAAW,CAAC,iBAAiB,IAAI,KAAK,EAAG,QAAO;AAC/E,MAAI,SAAS,WAAW,UAAU,UAAU,UAAU,WAAW,UAAU,SAAU,QAAO;AAC5F,MAAI,SAAS;AACX,WAAO,UAAU,YAAY,UAAU,WAAW,UAAU,aAAa,UAAU,SAC/E,QACA;AACN,MAAI,SAAS,MAAO,QAAO,YAAY,KAAK;AAC5C,SAAO;AACT;AAEA,SAAS,YAAY,OAAuB;AAC1C,SAAO,UAAU,KAAK,EAAE,KAAK,GAAG;AAClC;AAEA,SAAS,gBAAgB,OAA2B,UAA4B;AAC9E,QAAM,SAAS,IAAI,IAAI,QAAQ,UAAU,KAAK,IAAI,CAAC,CAAC;AACpD,aAAW,SAAS,SAAU,QAAO,IAAI,KAAK;AAC9C,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,GAAG;AACpC;AAEA,SAAS,UAAU,OAAyB;AAC1C,QAAM,SAAS,MACZ,MAAM,KAAK,EACX,IAAI,CAAC,UAAU,MAAM,KAAK,EAAE,YAAY,CAAC,EACzC,OAAO,OAAO,EACd,OAAO,CAAC,UAAU,gBAAgB,KAAK,KAAK,CAAC;AAChD,SAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC;AACnC;AAEA,SAAS,UAAU,OAAwB;AACzC,SAAO,UAAU,KAAK,MAAM,KAAK,CAAC;AACpC;AAEA,SAAS,qBAAqB,OAAwB;AACpD,SAAO,QAAQ,KAAK,MAAM,KAAK,CAAC;AAClC;AAEA,SAAS,gBAAgB,OAAe,SAA2B;AACjE,MAAI,SAAS;AACb,aAAW,UAAU,SAAS;AAC5B,UAAM,QAAQ,MAAM,QAAQ,MAAM;AAClC,QAAI,SAAS,MAAM,SAAS,KAAK,QAAQ,QAAS,UAAS;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAuB;AAClD,MAAI,MAAM;AACV,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,KAAK,WAAW,CAAC;AAC9B,QAAI,QAAQ,MAAQ,SAAS,OAAQ,KAAK,KAAK,MAAM,GAAI;AACzD,WAAO;AAAA,EACT;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-57CVQCFX.js → chunk-A4O7GIWE.js}

@@ -7,7 +7,7 @@ import {
   oklchSetChroma,
   pickContrastingText,
   relativeLuminance
-} from "./chunk-B4EEON3N.js";
+} from "./chunk-KKNUBQ6Y.js";
 
 // src/schemas/Doc.ts
 function calculateDuration(audio) {
@@ -39,29 +39,74 @@ function getCaptionAtTime(captions, time) {
   }
   return null;
 }
-function validateDoc(script) {
-  const errors = [];
-  if (!script.articleId) {
-    errors.push("Missing articleId");
-  }
-  if (!script.blocks || script.blocks.length === 0) {
-    errors.push("No blocks defined");
-  }
-  if (!script.audio || !script.audio.segments || script.audio.segments.length === 0) {
-    errors.push("No audio segments defined");
+
+// src/schemas/Media.ts
+function flatten(blocks, out = []) {
+  for (const b of blocks) {
+    out.push(b);
+    if (b.children && b.children.length > 0) flatten(b.children, out);
   }
-  const totalDuration = script.duration;
-  let covered = 0;
-  for (const block of script.blocks) {
-    if (block.startTime > covered + 0.1) {
-      errors.push(`Gap in blocks: ${covered}s to ${block.startTime}s`);
+  return out;
+}
+function clipLength(clip) {
+  if (clip.clipEnd == null) return null;
+  return Math.max(0, clip.clipEnd - (clip.clipStart ?? 0));
+}
+function baseTimelineEnd(doc) {
+  const blockEnd = flatten(doc.blocks).reduce(
+    (max, b) => Math.max(max, b.startTime + b.duration),
+    0
+  );
+  return Math.max(doc.duration ?? 0, blockEnd);
+}
+function resolveMediaSchedule(doc) {
+  const out = [];
+  const docEnd = baseTimelineEnd(doc);
+  for (const block of flatten(doc.blocks)) {
+    const blockEnd = block.startTime + block.duration;
+    for (const clip of block.media ?? []) {
+      const start = block.startTime + clip.startAt;
+      const len = clipLength(clip);
+      let end;
+      if (clip.spillover) {
+        end = len != null ? start + len : blockEnd;
+      } else {
+        end = len != null ? Math.min(start + len, blockEnd) : blockEnd;
+      }
+      out.push({
+        id: clip.id,
+        src: clip.src,
+        kind: clip.kind,
+        absoluteStart: start,
+        absoluteEnd: Math.max(start, end),
+        sourceIn: clip.clipStart ?? 0,
+        anchor: "block",
+        blockId: block.id,
+        ...clip.sourceLine != null ? { sourceLine: clip.sourceLine } : {}
+      });
     }
-    covered = Math.max(covered, block.startTime + block.duration);
   }
-  if (covered < totalDuration - 0.1) {
-    errors.push(`Blocks end at ${covered}s but audio is ${totalDuration}s`);
+  for (const clip of doc.documentMedia ?? []) {
+    const start = clip.startAt;
+    const len = clipLength(clip);
+    const end = len != null ? start + len : docEnd;
+    out.push({
+      id: clip.id,
+      src: clip.src,
+      kind: clip.kind,
+      absoluteStart: start,
+      absoluteEnd: Math.max(start, end),
+      sourceIn: clip.clipStart ?? 0,
+      anchor: "document",
+      ...clip.sourceLine != null ? { sourceLine: clip.sourceLine } : {}
+    });
   }
-  return errors;
+  return out;
+}
+function getDocPlaybackDuration(doc) {
+  const base = baseTimelineEnd(doc);
+  const mediaEnd = resolveMediaSchedule(doc).reduce((max, c) => Math.max(max, c.absoluteEnd), 0);
+  return Math.max(base, mediaEnd);
 }
 
 // src/schemas/themeCompile.ts
@@ -142,8 +187,10 @@ function deriveColorPalette(seeds, partialColors = {}, opts = {}) {
   };
 }
 function compileTheme(partial, opts = {}) {
-  const merged = createTheme(STARTER_THEME, partial);
+  const base = opts.base ?? STARTER_THEME;
+  const merged = createTheme(base, partial);
   merged.schemaVersion = THEME_SCHEMA_VERSION;
+  if (opts.base && !merged.basedOn) merged.basedOn = opts.base.id;
   const partialTypography = partial.typography;
   if (partialTypography) {
     if (partialTypography.titleFont !== void 0) {
@@ -156,6 +203,9 @@ function compileTheme(partial, opts = {}) {
       merged.typography.monoFont = partialTypography.monoFont;
     }
   }
+  if (partial.colorSchemes !== void 0) {
+    merged.colorSchemes = partial.colorSchemes;
+  }
   if (merged.seedColors) {
     const partialColors = partial.colors ?? {};
     merged.colors = deriveColorPalette(merged.seedColors, partialColors, {
@@ -183,11 +233,12 @@ export {
   getSegmentAtTime,
   getBlockAtTime,
   getCaptionAtTime,
-  validateDoc,
+  resolveMediaSchedule,
+  getDocPlaybackDuration,
   STARTER_THEME,
   deriveColorPalette,
   compileTheme,
   parseTheme,
   serializeTheme
 };
-//# sourceMappingURL=chunk-57CVQCFX.js.map
+//# sourceMappingURL=chunk-A4O7GIWE.js.map