@bendyline/squisq 2.1.0 → 2.2.0

package/dist/index.js

@@ -23,8 +23,8 @@ import {
   reanchorSession,
   traceWordPosAt,
   vadStep
-} from "./chunk-XNLB57UD.js";
-import "./chunk-ET53IIEP.js";
+} from "./chunk-DYPMOPIW.js";
+import "./chunk-2L55443L.js";
 import {
   DEFAULT_TRANSFORM_STYLE_ID,
   analyzeBlocks,
@@ -34,12 +34,12 @@ import {
   getTransformStyleIds,
   getTransformStyleSummaries,
   resolveTransformStyle
-} from "./chunk-ILWDXLUK.js";
+} from "./chunk-RS5AP3J4.js";
 import {
   extractContent,
   mapElementToBlock,
   stripMarkdown
-} from "./chunk-Q7LROV2H.js";
+} from "./chunk-NKNMGIIN.js";
 import {
   DocumentVersionManager,
   VERSIONS_PREFIX,
@@ -52,7 +52,7 @@ import {
   readVersion,
   revertToVersion,
   saveVersion
-} from "./chunk-JOQYPRDZ.js";
+} from "./chunk-7YEZFHLS.js";
 import {
   appendPointer,
   arrayItemKind,
@@ -62,6 +62,7 @@ import {
   evaluateWhen,
   getByPointer,
   inferSchema,
+  isSafeConditionRegex,
   pointerSegments,
   primaryType,
   resolveFlag,
@@ -69,7 +70,7 @@ import {
   resolveRef,
   setByPointer,
   toPointer
-} from "./chunk-VYFRI7R6.js";
+} from "./chunk-32R2RZAO.js";
 import {
   IMAGE_EDIT_ASSETS_PREFIX,
   IMAGE_EDIT_DEFAULT_BASENAME,
@@ -96,21 +97,21 @@ import {
   touch,
   updateLayer,
   writeImageEditDoc
-} from "./chunk-5DKBFXPY.js";
+} from "./chunk-6ECMNUIP.js";
 import {
   VERSION_TIMESTAMP_PATTERN,
   formatVersionTimestamp,
   parseVersionTimestamp
-} from "./chunk-S7A5D7ZJ.js";
-import "./chunk-PGGGKYWG.js";
+} from "./chunk-OPO5K4DZ.js";
+import "./chunk-WV5ARNDA.js";
 import {
   hasIconMarker,
   iconClass,
   iconMarker,
   splitIconMarkers,
   stripIconMarkers
-} from "./chunk-2UQOHYE2.js";
-import "./chunk-ZLQKNOZQ.js";
+} from "./chunk-7ZAAICW4.js";
+import "./chunk-XWNNA3KE.js";
 import {
   STARTER_THEME,
   accentToColorScheme,
@@ -122,7 +123,7 @@ import {
   getSegmentAtTime,
   parseTheme,
   serializeTheme
-} from "./chunk-QUUPYOSP.js";
+} from "./chunk-CB45YGAM.js";
 import {
   calculateBearing,
   decodeGeohash,
@@ -134,7 +135,7 @@ import {
   getGeohashPrefix,
   getNeighbors,
   haversineDistance
-} from "./chunk-GZY66SDN.js";
+} from "./chunk-R3KTTOMS.js";
 import {
   PAGE_BASE_CSS,
   applyNarrationTiming,
@@ -163,7 +164,7 @@ import {
   sectionExtractors,
   validateMarkdownDoc,
   validateMarkdownSource
-} from "./chunk-OTKVFVL6.js";
+} from "./chunk-I2O6W7DX.js";
 import {
   ASCII_CHAR_H,
   ASCII_CHAR_W,
@@ -284,7 +285,7 @@ import {
   wrapWithPersistentLayers,
   writeCustomTemplatesToFrontmatter,
   writeCustomThemesToFrontmatter
-} from "./chunk-JI77MGAK.js";
+} from "./chunk-7ARJZYQY.js";
 import {
   PATH_SHAPE_KINDS,
   anchorPoint,
@@ -297,7 +298,7 @@ import {
   shapePath,
   snapEndpoints,
   snapPoints
-} from "./chunk-TUWMK62B.js";
+} from "./chunk-PUS54YU6.js";
 import {
   ASCII_DIAGRAM_FENCE_LANGS,
   ASCII_TIMELINE_FENCE_LANGS,
@@ -322,12 +323,12 @@ import {
   parseWrappedFlowTimeline,
   profileBlockContents,
   recommendTemplatesForBlock
-} from "./chunk-5UYI3RJB.js";
+} from "./chunk-FDYDYL77.js";
 import {
   defaultPageStyle,
   getDocPlaybackDuration,
   resolveMediaSchedule
-} from "./chunk-VWCJ2WXC.js";
+} from "./chunk-2ZWIXGAC.js";
 import {
   AVAILABLE_FONT_STACKS,
   DARK_SURFACE,
@@ -381,7 +382,7 @@ import {
   resolveTheme,
   validateTheme,
   withAlpha
-} from "./chunk-JHZWYRSW.js";
+} from "./chunk-C33GTPUZ.js";
 import {
   DEFAULT_DOC_FONT,
   DEFAULT_TITLE_FONT,
@@ -398,7 +399,7 @@ import {
   isTemplateBlock,
   scaledFontSize,
   scaledFontSize2
-} from "./chunk-5J4HKRJF.js";
+} from "./chunk-BAOV476U.js";
 import {
   LocalForageAdapter,
   LocalStorageAdapter,
@@ -408,19 +409,31 @@ import {
   createMediaProviderFromContainer,
   findDocumentPath,
   scopeContainer
-} from "./chunk-VR7UPJ7C.js";
+} from "./chunk-FCG3BIZN.js";
 import {
+  DEFAULT_INTERACTIVE_RESOURCE_POLICY,
+  DEFAULT_RESOURCE_MAX_BYTES,
+  DEFAULT_RESOURCE_TIMEOUT_MS,
+  LOCAL_ONLY_RESOURCE_POLICY,
+  ResourcePolicyError,
+  fetchResourceBytes,
+  isResourceUrlAllowed,
   sanitizeHtmlNodes,
   sanitizeUrl,
   stringifyMarkdown
-} from "./chunk-R2GC6RLD.js";
+} from "./chunk-3IGPAPQ7.js";
 import {
+  DEFAULT_MARKDOWN_SAFETY_LIMITS,
+  MarkdownLimitError,
+  assertMarkdownDocumentWithinLimits,
+  assertMarkdownSourceWithinLimits,
   fromMdast,
   parseMarkdown,
   parsePandocAttrTokens,
+  resolveMarkdownSafetyLimits,
   serializePandocAttributes,
   toMdast
-} from "./chunk-66QO7XFB.js";
+} from "./chunk-ACZOVWX3.js";
 import {
   BLOCK_META_KEY_DESCRIPTORS,
   KNOWN_BLOCK_META_KEYS,
@@ -432,7 +445,7 @@ import {
   splitKeyValueToken,
   tokenizeAttrTokens,
   unquoteAttrValue
-} from "./chunk-R2YZTCLO.js";
+} from "./chunk-ZQKZSJAX.js";
 import {
   ICONS,
   canonicalIconToken,
@@ -440,7 +453,7 @@ import {
   looksLikeIconToken,
   resolveIcon,
   suggestIcons
-} from "./chunk-DBS6RIFL.js";
+} from "./chunk-7N4G32LG.js";
 import {
   countNodes,
   createDocument,
@@ -448,6 +461,7 @@ import {
   findNodesByType,
   formatBlockScalar,
   formatFrontmatterValue,
+  formatFrontmatterYaml,
   getChildren,
   inferDocumentTitle,
   parseFrontmatter,
@@ -457,7 +471,7 @@ import {
   setFrontmatterValues,
   stringifyHtmlNodes,
   walkMarkdownTree
-} from "./chunk-AMIR72JP.js";
+} from "./chunk-BCCXTMN5.js";
 import {
   DEFAULT_TRANSITION_DURATION_SECONDS,
   TRANSITION_DIRECTIONS,
@@ -467,12 +481,12 @@ import {
   normalizeTransitionType,
   resolveBlockTransition,
   resolveTransitionDuration
-} from "./chunk-QE7TWGVT.js";
-import "./chunk-DNJKBAI7.js";
+} from "./chunk-4VOD55SX.js";
+import "./chunk-YZNGMV3G.js";
 import {
   estimateNarrationTime,
   estimateReadingTime
-} from "./chunk-4X3JQXNM.js";
+} from "./chunk-XOFT65EX.js";
 import {
   DEFAULT_WORDS_PER_SECOND,
   calculatePrefixDuration,
@@ -480,12 +494,12 @@ import {
   estimateNarrationDuration,
   estimateSpokenWordCount,
   estimateTimeFromText
-} from "./chunk-3E5F2XMR.js";
-import "./chunk-V543AI2F.js";
+} from "./chunk-67L6WRJN.js";
+import "./chunk-QKPXHDLR.js";
 import {
   SeededRandom,
   hashString
-} from "./chunk-FVTQSNR7.js";
+} from "./chunk-XRW6P7IF.js";
 export {
   ASCII_CHAR_H,
   ASCII_CHAR_W,
@@ -499,9 +513,13 @@ export {
   DEFAULT_ALIGN_CONFIG,
   DEFAULT_DOC_FONT,
   DEFAULT_FEATURE_CONFIG,
+  DEFAULT_INTERACTIVE_RESOURCE_POLICY,
   DEFAULT_LAYOUT,
+  DEFAULT_MARKDOWN_SAFETY_LIMITS,
   DEFAULT_NUCLEI_CONFIG,
   DEFAULT_PACING_CONFIG,
+  DEFAULT_RESOURCE_MAX_BYTES,
+  DEFAULT_RESOURCE_TIMEOUT_MS,
   DEFAULT_THEME,
   DEFAULT_THEME_ID,
   DEFAULT_TITLE_FONT,
@@ -525,8 +543,10 @@ export {
   ImageEditVersionManager,
   KNOWN_BLOCK_META_KEYS,
   LIGHT_SURFACE,
+  LOCAL_ONLY_RESOURCE_POLICY,
   LocalForageAdapter,
   LocalStorageAdapter,
+  MarkdownLimitError,
   MemoryContentContainer,
   MemoryStorageAdapter,
   PAGE_ACCENT_STRATEGIES,
@@ -549,6 +569,7 @@ export {
   PAGE_SECTION_SPACINGS,
   PAGE_SHADOWS,
   PATH_SHAPE_KINDS,
+  ResourcePolicyError,
   SHAPE_NAMES,
   STARTER_THEME,
   ScopedContentContainer,
@@ -580,6 +601,8 @@ export {
   asciiDiagramFromTemplateData,
   asciiDiagramToTemplateData,
   asciiTimelineToTemplateData,
+  assertMarkdownDocumentWithinLimits,
+  assertMarkdownSourceWithinLimits,
   assertTheme,
   bandpassRun,
   buildGoogleFontsUrl,
@@ -674,6 +697,7 @@ export {
   factCard,
   fallbackBlockLayers,
   featureStep,
+  fetchResourceBytes,
   findDocumentPath,
   findFirstList,
   findFirstTable,
@@ -684,6 +708,7 @@ export {
   fontStack,
   formatBlockScalar,
   formatFrontmatterValue,
+  formatFrontmatterYaml,
   formatVersionTimestamp,
   fromMdast,
   fullBleedQuote,
@@ -750,6 +775,8 @@ export {
   isHex,
   isPersistentLayerTemplate,
   isRepairableDiagram,
+  isResourceUrlAllowed,
+  isSafeConditionRegex,
   isShapeName,
   isTemplateBlock,
   isTemplatedPageBlock,
@@ -840,6 +867,7 @@ export {
   resolveFontFamily,
   resolveIcon,
   resolveJsonFormTheme,
+  resolveMarkdownSafetyLimits,
   resolveMediaSchedule,
   resolvePageBlock,
   resolvePageStyle,
@@ -917,4 +945,3 @@ export {
   writeCustomThemesToFrontmatter,
   writeImageEditDoc
 };
-//# sourceMappingURL=index.js.map

package/dist/jsonForm/index.d.ts

@@ -1,5 +1,5 @@
-import { b1 as Theme, aT as SurfaceScheme } from '../Doc-DynJleo-.js';
-import '../types-BwMPl2CB.js';
+import { b1 as Theme, aT as SurfaceScheme } from '../Doc-BubIpWsp.js';
+import '../types-CUNc9biN.js';
 
 /**
  * JSON Form types — Squisq's hint vocabulary layered on JSON Schema.
@@ -146,6 +146,13 @@ declare function arrayItemKind(schema: SquisqAnnotatedSchema): 'object' | 'primi
  * renderers call this on every render with fresh data.
  */
 
+/**
+ * Reject regex features that cannot be evaluated with a predictable cost in
+ * JavaScript's backtracking engine. JSON Form conditions are intended for
+ * small validation-style matches, so a conservative false negative is safer
+ * than allowing authored schemas to freeze the render thread.
+ */
+declare function isSafeConditionRegex(pattern: string): boolean;
 declare function evaluateWhen(when: SquisqWhen, rootData: unknown): boolean;
 /**
  * Resolve a `boolean | SquisqWhen` flag (used by `hidden`/`disabled`)
@@ -233,4 +240,4 @@ declare function buildJsonFormTokens(theme: Theme | undefined, surface: SurfaceS
  */
 declare function resolveJsonFormTheme(theme: Theme | undefined, surface: SurfaceScheme | undefined): Theme;
 
-export { type BuildJsonFormTokensOptions, type ControlKind, type InferSchemaOptions, type JsonFormValidationError, type JsonFormValidator, type SquisqAnnotatedSchema, type SquisqHints, type SquisqWhen, appendPointer, arrayItemKind, buildJsonFormTokens, chooseControl, escapePointerSegment, evaluateWhen, getByPointer, inferSchema, pointerSegments, primaryType, resolveFlag, resolveJsonFormTheme, resolveRef, setByPointer, toPointer };
+export { type BuildJsonFormTokensOptions, type ControlKind, type InferSchemaOptions, type JsonFormValidationError, type JsonFormValidator, type SquisqAnnotatedSchema, type SquisqHints, type SquisqWhen, appendPointer, arrayItemKind, buildJsonFormTokens, chooseControl, escapePointerSegment, evaluateWhen, getByPointer, inferSchema, isSafeConditionRegex, pointerSegments, primaryType, resolveFlag, resolveJsonFormTheme, resolveRef, setByPointer, toPointer };

package/dist/jsonForm/index.js

@@ -7,6 +7,7 @@ import {
   evaluateWhen,
   getByPointer,
   inferSchema,
+  isSafeConditionRegex,
   pointerSegments,
   primaryType,
   resolveFlag,
@@ -14,12 +15,12 @@ import {
   resolveRef,
   setByPointer,
   toPointer
-} from "../chunk-VYFRI7R6.js";
-import "../chunk-QUUPYOSP.js";
-import "../chunk-VWCJ2WXC.js";
-import "../chunk-JHZWYRSW.js";
-import "../chunk-5J4HKRJF.js";
-import "../chunk-QE7TWGVT.js";
+} from "../chunk-32R2RZAO.js";
+import "../chunk-CB45YGAM.js";
+import "../chunk-2ZWIXGAC.js";
+import "../chunk-C33GTPUZ.js";
+import "../chunk-BAOV476U.js";
+import "../chunk-4VOD55SX.js";
 export {
   appendPointer,
   arrayItemKind,
@@ -29,6 +30,7 @@ export {
   evaluateWhen,
   getByPointer,
   inferSchema,
+  isSafeConditionRegex,
   pointerSegments,
   primaryType,
   resolveFlag,
@@ -37,4 +39,3 @@ export {
   setByPointer,
   toPointer
 };
-//# sourceMappingURL=index.js.map

package/dist/markdown/index.d.ts

@@ -1,6 +1,6 @@
-import { V as ParseOptions, m as MarkdownDocument, W as StringifyOptions, H as HeadingAttributes, d as HtmlNode, I as MarkdownNode } from '../types-BwMPl2CB.js';
-export { a as HeadingTemplateAnnotation, b as HtmlComment, c as HtmlElement, e as HtmlText, M as MarkdownBlockNode, f as MarkdownBlockquote, g as MarkdownBreak, h as MarkdownCodeBlock, i as MarkdownContainerDirective, j as MarkdownDefinitionDescription, k as MarkdownDefinitionList, l as MarkdownDefinitionTerm, n as MarkdownEmphasis, o as MarkdownFootnoteDefinition, p as MarkdownFootnoteReference, q as MarkdownHeading, r as MarkdownHtmlBlock, s as MarkdownImage, t as MarkdownImageReference, u as MarkdownInlineCode, v as MarkdownInlineHtml, w as MarkdownInlineMath, x as MarkdownInlineNode, y as MarkdownLeafDirective, z as MarkdownLink, A as MarkdownLinkDefinition, B as MarkdownLinkReference, C as MarkdownList, E as MarkdownListItem, F as MarkdownMathBlock, G as MarkdownMention, J as MarkdownParagraph, K as MarkdownPoint, L as MarkdownSourcePosition, N as MarkdownStrikethrough, O as MarkdownStrong, P as MarkdownTable, Q as MarkdownTableCell, R as MarkdownTableRow, S as MarkdownText, T as MarkdownTextDirective, U as MarkdownThematicBreak } from '../types-BwMPl2CB.js';
-export { B as BLOCK_META_KEY_DESCRIPTORS, a as BlockMetaKeyDescriptor, K as KNOWN_BLOCK_META_KEYS, b as KnownBlockMetaKey, p as parseTimeSeconds } from '../annotationCoercion-Dr_DY9Hx.js';
+import { Y as ParseOptions, n as MarkdownDocument, Z as StringifyOptions, H as HeadingAttributes, e as HtmlNode, K as MarkdownNode } from '../types-CUNc9biN.js';
+export { D as DEFAULT_MARKDOWN_SAFETY_LIMITS, b as HeadingTemplateAnnotation, c as HtmlComment, d as HtmlElement, f as HtmlText, M as MarkdownBlockNode, g as MarkdownBlockquote, h as MarkdownBreak, i as MarkdownCodeBlock, j as MarkdownContainerDirective, k as MarkdownDefinitionDescription, l as MarkdownDefinitionList, m as MarkdownDefinitionTerm, o as MarkdownEmphasis, p as MarkdownFootnoteDefinition, q as MarkdownFootnoteReference, r as MarkdownHeading, s as MarkdownHtmlBlock, t as MarkdownImage, u as MarkdownImageReference, v as MarkdownInlineCode, w as MarkdownInlineHtml, x as MarkdownInlineMath, y as MarkdownInlineNode, z as MarkdownLeafDirective, A as MarkdownLimitError, B as MarkdownLink, C as MarkdownLinkDefinition, E as MarkdownLinkReference, F as MarkdownList, G as MarkdownListItem, I as MarkdownMathBlock, J as MarkdownMention, L as MarkdownParagraph, N as MarkdownPoint, O as MarkdownSafetyLimits, P as MarkdownSourcePosition, Q as MarkdownStrikethrough, R as MarkdownStrong, S as MarkdownTable, T as MarkdownTableCell, U as MarkdownTableRow, V as MarkdownText, W as MarkdownTextDirective, X as MarkdownThematicBreak, a3 as assertMarkdownDocumentWithinLimits, a4 as assertMarkdownSourceWithinLimits, a9 as resolveMarkdownSafetyLimits } from '../types-CUNc9biN.js';
+export { B as BLOCK_META_KEY_DESCRIPTORS, a as BlockMetaKeyDescriptor, K as KNOWN_BLOCK_META_KEYS, b as KnownBlockMetaKey, p as parseTimeSeconds } from '../annotationCoercion-PtRQhk5V.js';
 
 /**
  * Markdown → JSON Parser
@@ -296,6 +296,59 @@ declare function sanitizeUrl(url: string | null | undefined, kind?: UrlKind, opt
  */
 declare function sanitizeHtmlNodes(nodes: HtmlNode[]): HtmlNode[];
 
+/**
+ * Caller-owned policy for resources referenced by a document.
+ *
+ * The core package deliberately does not decide whether a document is trusted.
+ * Interactive hosts can keep the browser-compatible default, restrict remote
+ * hosts, or provide a local-only policy. Headless/server callers should use the
+ * local-only policy unless they have an explicit, audited allow-list.
+ */
+interface ResourcePolicy {
+    /** Permit http(s) and protocol-relative URLs. Default: true. */
+    allowRemote?: boolean;
+    /** Permit relative and root-relative URLs. Default: true. */
+    allowRelative?: boolean;
+    /** Permit blob: URLs. Default: true. */
+    allowBlob?: boolean;
+    /** Permit image/audio/video data: URLs. Default: true. */
+    allowData?: boolean;
+    /** Exact hosts or `*.example.com` suffixes allowed for remote URLs. */
+    allowedHosts?: readonly string[];
+    /** Maximum bytes read by one bounded fetch. Default: 64 MiB. */
+    maxBytes?: number;
+    /** Maximum time for one bounded fetch. Default: 15 seconds. */
+    timeoutMs?: number;
+}
+declare const DEFAULT_RESOURCE_MAX_BYTES: number;
+declare const DEFAULT_RESOURCE_TIMEOUT_MS = 15000;
+declare const DEFAULT_INTERACTIVE_RESOURCE_POLICY: Readonly<Required<ResourcePolicy>>;
+declare const LOCAL_ONLY_RESOURCE_POLICY: Readonly<Required<ResourcePolicy>>;
+declare class ResourcePolicyError extends Error {
+    readonly code: 'RESOURCE_BLOCKED' | 'RESOURCE_TOO_LARGE' | 'RESOURCE_TIMEOUT';
+    constructor(code: ResourcePolicyError['code'], message: string);
+}
+interface FetchResourceBytesOptions {
+    policy?: ResourcePolicy;
+    signal?: AbortSignal;
+    /** Optional fetch implementation for tests or non-browser runtimes. */
+    fetch?: typeof globalThis.fetch;
+    /** Reject successful responses whose Content-Type does not match a prefix. */
+    contentTypePrefixes?: readonly string[];
+}
+interface FetchedResource {
+    bytes: Uint8Array;
+    contentType: string;
+    finalUrl: string;
+}
+/** Return whether a document resource URL is admitted by a policy. */
+declare function isResourceUrlAllowed(input: string | null | undefined, policy?: ResourcePolicy): boolean;
+/**
+ * Fetch a document-controlled resource without buffering unbounded data.
+ * Redirect destinations are revalidated after fetch follows them.
+ */
+declare function fetchResourceBytes(input: string, options?: FetchResourceBytesOptions): Promise<FetchedResource>;
+
 /**
  * Markdown Tree Utilities
  *
@@ -360,9 +413,10 @@ declare function countNodes(node: MarkdownNode): number;
 /**
  * Parse a YAML frontmatter string into a key-value record.
  *
- * Handles simple `key: value` pairs common in markdown frontmatter.
- * Values are trimmed; quoted strings have their quotes removed.
- * Returns `null` if parsing fails or the input is empty.
+ * Handles the subset documented above: nested mappings, block sequences,
+ * quoted and block scalars, booleans/null, and conservatively-coerced
+ * numbers. Returns `null` when the input is empty or carries no mapping
+ * keys at all.
  *
  * @param yaml - The raw YAML string (without the `---` delimiters)
  * @returns A record of string keys to parsed values, or null
@@ -378,6 +432,15 @@ declare function parseFrontmatter(yaml: string): Record<string, unknown> | null;
 declare function formatBlockScalar(value: string): string;
 /** Quote a frontmatter scalar so it round-trips cleanly through `parseFrontmatter`. */
 declare function formatFrontmatterValue(value: string | number | boolean): string;
+/**
+ * Serialize a frontmatter record to YAML (without the `---` delimiters).
+ *
+ * The write half of the round-trip pair documented above: nested objects
+ * become nested block mappings and arrays become block sequences, so
+ * structured frontmatter reads back as the same structure with the same
+ * types. Returns an empty string when nothing is writable.
+ */
+declare function formatFrontmatterYaml(frontmatter: Record<string, unknown>): string;
 /**
  * Update a markdown source string's YAML frontmatter block, applying the
  * given key/value updates. A `null` or `undefined` value removes the key.
@@ -386,10 +449,11 @@ declare function formatFrontmatterValue(value: string | number | boolean): strin
  * exists, the source is returned unchanged.
  *
  * Existing key order is preserved; new keys are appended in the order
- * they appear in `updates`. The simple parser used here handles plain
- * `key: value` pairs only — comments, multi-line scalars, and nested
- * structures are left untouched (we only rewrite lines whose key matches
- * one in `updates`).
+ * they appear in `updates`. Rewriting is **node-aware**: a key whose value
+ * is a block scalar or a nested map/sequence owns its indented body, so
+ * removing or replacing it takes the whole node with it, and body lines are
+ * never mistaken for top-level keys (an indented `name: X` inside another
+ * key's block scalar stays put even when `name` is being updated).
  *
  * @param source - The markdown source string.
  * @param updates - Map of key → new value (or null/undefined to remove).
@@ -435,4 +499,4 @@ declare function readFrontmatterThemeId(frontmatter: Record<string, unknown> | u
  */
 declare function plainTextFromInlineHtml(html: string): string;
 
-export { HeadingAttributes, HtmlNode, type HtmlPolicy, MarkdownDocument, MarkdownNode, ParseOptions, type SanitizeUrlOptions, StringifyOptions, type TrailingAnnotationMatch, type UrlKind, countNodes, createDocument, extractPlainText, findNodesByType, formatBlockScalar, formatFrontmatterValue, fromMdast, getChildren, inferDocumentTitle, matchTrailingPandocAttr, matchTrailingTemplateAnnotation, needsQuoting, parseFrontmatter, parseHtmlToNodes, parseMarkdown, parsePandocAttrTokens, plainTextFromInlineHtml, quoteAttrValue, readFrontmatterThemeId, sanitizeHtmlNodes, sanitizeUrl, serializePandocAttributes, setFrontmatterValues, splitKeyValueToken, stringifyHtmlNodes, stringifyMarkdown, toMdast, tokenizeAttrTokens, unquoteAttrValue, walkMarkdownTree };
+export { DEFAULT_INTERACTIVE_RESOURCE_POLICY, DEFAULT_RESOURCE_MAX_BYTES, DEFAULT_RESOURCE_TIMEOUT_MS, type FetchResourceBytesOptions, type FetchedResource, HeadingAttributes, HtmlNode, type HtmlPolicy, LOCAL_ONLY_RESOURCE_POLICY, MarkdownDocument, MarkdownNode, ParseOptions, type ResourcePolicy, ResourcePolicyError, type SanitizeUrlOptions, StringifyOptions, type TrailingAnnotationMatch, type UrlKind, countNodes, createDocument, extractPlainText, fetchResourceBytes, findNodesByType, formatBlockScalar, formatFrontmatterValue, formatFrontmatterYaml, fromMdast, getChildren, inferDocumentTitle, isResourceUrlAllowed, matchTrailingPandocAttr, matchTrailingTemplateAnnotation, needsQuoting, parseFrontmatter, parseHtmlToNodes, parseMarkdown, parsePandocAttrTokens, plainTextFromInlineHtml, quoteAttrValue, readFrontmatterThemeId, sanitizeHtmlNodes, sanitizeUrl, serializePandocAttributes, setFrontmatterValues, splitKeyValueToken, stringifyHtmlNodes, stringifyMarkdown, toMdast, tokenizeAttrTokens, unquoteAttrValue, walkMarkdownTree };

package/dist/markdown/index.js

@@ -1,15 +1,27 @@
 import {
+  DEFAULT_INTERACTIVE_RESOURCE_POLICY,
+  DEFAULT_RESOURCE_MAX_BYTES,
+  DEFAULT_RESOURCE_TIMEOUT_MS,
+  LOCAL_ONLY_RESOURCE_POLICY,
+  ResourcePolicyError,
+  fetchResourceBytes,
+  isResourceUrlAllowed,
   sanitizeHtmlNodes,
   sanitizeUrl,
   stringifyMarkdown
-} from "../chunk-R2GC6RLD.js";
+} from "../chunk-3IGPAPQ7.js";
 import {
+  DEFAULT_MARKDOWN_SAFETY_LIMITS,
+  MarkdownLimitError,
+  assertMarkdownDocumentWithinLimits,
+  assertMarkdownSourceWithinLimits,
   fromMdast,
   parseMarkdown,
   parsePandocAttrTokens,
+  resolveMarkdownSafetyLimits,
   serializePandocAttributes,
   toMdast
-} from "../chunk-66QO7XFB.js";
+} from "../chunk-ACZOVWX3.js";
 import {
   BLOCK_META_KEY_DESCRIPTORS,
   KNOWN_BLOCK_META_KEYS,
@@ -21,8 +33,8 @@ import {
   splitKeyValueToken,
   tokenizeAttrTokens,
   unquoteAttrValue
-} from "../chunk-R2YZTCLO.js";
-import "../chunk-DBS6RIFL.js";
+} from "../chunk-ZQKZSJAX.js";
+import "../chunk-7N4G32LG.js";
 import {
   countNodes,
   createDocument,
@@ -30,6 +42,7 @@ import {
   findNodesByType,
   formatBlockScalar,
   formatFrontmatterValue,
+  formatFrontmatterYaml,
   getChildren,
   inferDocumentTitle,
   parseFrontmatter,
@@ -39,20 +52,32 @@ import {
   setFrontmatterValues,
   stringifyHtmlNodes,
   walkMarkdownTree
-} from "../chunk-AMIR72JP.js";
-import "../chunk-QE7TWGVT.js";
+} from "../chunk-BCCXTMN5.js";
+import "../chunk-4VOD55SX.js";
 export {
   BLOCK_META_KEY_DESCRIPTORS,
+  DEFAULT_INTERACTIVE_RESOURCE_POLICY,
+  DEFAULT_MARKDOWN_SAFETY_LIMITS,
+  DEFAULT_RESOURCE_MAX_BYTES,
+  DEFAULT_RESOURCE_TIMEOUT_MS,
   KNOWN_BLOCK_META_KEYS,
+  LOCAL_ONLY_RESOURCE_POLICY,
+  MarkdownLimitError,
+  ResourcePolicyError,
+  assertMarkdownDocumentWithinLimits,
+  assertMarkdownSourceWithinLimits,
   countNodes,
   createDocument,
   extractPlainText,
+  fetchResourceBytes,
   findNodesByType,
   formatBlockScalar,
   formatFrontmatterValue,
+  formatFrontmatterYaml,
   fromMdast,
   getChildren,
   inferDocumentTitle,
+  isResourceUrlAllowed,
   matchTrailingPandocAttr,
   matchTrailingTemplateAnnotation,
   needsQuoting,
@@ -64,6 +89,7 @@ export {
   plainTextFromInlineHtml,
   quoteAttrValue,
   readFrontmatterThemeId,
+  resolveMarkdownSafetyLimits,
   sanitizeHtmlNodes,
   sanitizeUrl,
   serializePandocAttributes,
@@ -76,4 +102,3 @@ export {
   unquoteAttrValue,
   walkMarkdownTree
 };
-//# sourceMappingURL=index.js.map

package/dist/{materializePageSection-DDzubQXo.d.ts → materializePageSection-wSLA2A1g.d.ts}

@@ -1,5 +1,5 @@
-import { B as Block, at as PageSectionKind, ar as PageEmphasis, b3 as ThemeColorScheme, ap as PageBackground, b1 as Theme, bq as ViewportConfig, p as CustomTemplateDefinition, aR as StartBlockConfig, F as Doc, b4 as ThemePageStyle } from './Doc-DynJleo-.js';
-import { M as MarkdownBlockNode } from './types-BwMPl2CB.js';
+import { B as Block, at as PageSectionKind, ar as PageEmphasis, b3 as ThemeColorScheme, ap as PageBackground, b1 as Theme, bq as ViewportConfig, p as CustomTemplateDefinition, aR as StartBlockConfig, F as Doc, b4 as ThemePageStyle } from './Doc-BubIpWsp.js';
+import { M as MarkdownBlockNode } from './types-CUNc9biN.js';
 
 /**
  * PageSection — the framework-agnostic block model for Page (linear) mode.

package/dist/narration/index.d.ts

@@ -1,5 +1,5 @@
-import { F as Doc, e as AudioBookmark } from '../Doc-DynJleo-.js';
-import '../types-BwMPl2CB.js';
+import { F as Doc, e as AudioBookmark } from '../Doc-BubIpWsp.js';
+import '../types-CUNc9biN.js';
 
 /**
  * Shared types + tuning configs for the narration engine.
@@ -175,6 +175,12 @@ interface PacingConfig {
 }
 declare const DEFAULT_PACING_CONFIG: PacingConfig;
 interface AlignConfig {
+    /** Maximum take duration accepted by the batch aligner. */
+    maxDurationSec: number;
+    /** Maximum PCM samples accepted by the batch aligner. */
+    maxPcmSamples: number;
+    /** Maximum script tokens accepted by the batch aligner. */
+    maxScriptTokens: number;
     /** Fine analysis hop for the offline pass (s). */
     hopSec: number;
     /** Non-speech runs at least this long become GAP events (s). */
@@ -549,6 +555,8 @@ interface AlignInput {
     script: NarrationScript;
     /** Live prompter trace recorded during the take, if any. */
     trace?: NarrationTrace;
+    /** Cancel before expensive alignment phases. */
+    signal?: AbortSignal;
 }
 declare function alignNarration(input: AlignInput, config?: Partial<AlignConfig>): NarrationAlignment;
 
@@ -592,7 +600,12 @@ interface NarrationTimingJsonV3 {
     /** Per-word timings: { id: `word-${i}`, time, charOffset, textFragment }. */
     bookmarks: AudioBookmark[];
     blocks: NarrationTimingBlock[];
-    /** Start skew of the companion camera recording, when one exists. */
+    /**
+     * SIGNED start skew of the companion camera recording, when one exists:
+     * `cameraStart - audioStart`, in seconds. Negative when the camera pipeline
+     * began first — which is reachable, since the two `MediaRecorder`s report
+     * their start asynchronously and independently.
+     */
     cameraOffsetSec?: number;
     /** Provenance of the timing data. */
     generator?: {