@bestagentkits/render 0.2.0 → 0.3.0

package/dist/data/transform-pipeline.js

@@ -0,0 +1,234 @@
+/**
+ * Bounded, deterministic dataset transforms.
+ *
+ * A transform is data, not an expression: a fixed pipeline of five optional
+ * stages that always run in the same order (filter → groupBy → sort → select →
+ * limit). Comparison never consults a locale, and sorting is stable, so the same
+ * rows and the same transform always produce the same rows in the same order.
+ */
+import { fieldValue } from './dataset-types.js';
+export const FILTER_OPERATORS = [
+    'equals',
+    'notEquals',
+    'in',
+    'gt',
+    'gte',
+    'lt',
+    'lte',
+];
+export const AGGREGATES = ['count', 'sum', 'mean', 'min', 'max'];
+export const TRANSFORM_LIMITS = { maxFilters: 8, maxSortKeys: 3, maxSelect: 24 };
+const SCALAR = {
+    kind: 'json',
+    description: 'A string, number, boolean, or null.',
+    maxBytes: 1_000,
+    schemaRef: '#/$defs/dataScalar',
+};
+const FIELD = { kind: 'string', required: true, maxLength: 64 };
+const SORT_KEY = {
+    kind: 'object',
+    fields: {
+        by: FIELD,
+        direction: { kind: 'string', enum: ['asc', 'desc'], default: 'asc' },
+    },
+};
+/** Prop schema for `transform`: used for validation, the JSON Schema, and describe. */
+export const TRANSFORM_PROP_SCHEMA = {
+    kind: 'object',
+    description: 'Bounded reshaping applied in a fixed order: filter, groupBy, sort, select, limit. No expressions.',
+    fields: {
+        filter: {
+            kind: 'list',
+            minItems: 1,
+            maxItems: TRANSFORM_LIMITS.maxFilters,
+            description: 'Clauses combined with AND; each names a field and exactly one operator.',
+            of: {
+                kind: 'object',
+                fields: {
+                    field: FIELD,
+                    equals: SCALAR,
+                    notEquals: SCALAR,
+                    in: { kind: 'list', of: SCALAR, minItems: 1, maxItems: 20 },
+                    gt: { kind: 'number' },
+                    gte: { kind: 'number' },
+                    lt: { kind: 'number' },
+                    lte: { kind: 'number' },
+                },
+            },
+        },
+        groupBy: {
+            kind: 'object',
+            description: 'One row per distinct value of `field`, in first-seen order.',
+            fields: {
+                field: FIELD,
+                aggregate: { kind: 'string', required: true, enum: AGGREGATES },
+                value: { kind: 'string', maxLength: 64, description: 'Numeric field to aggregate.' },
+                as: { kind: 'string', maxLength: 64, description: 'Name of the aggregate field.' },
+            },
+        },
+        sort: {
+            kind: 'oneOf',
+            description: 'One sort key, or up to three applied in order. Sorting is stable.',
+            options: [
+                SORT_KEY,
+                { kind: 'list', of: SORT_KEY, minItems: 1, maxItems: TRANSFORM_LIMITS.maxSortKeys },
+            ],
+        },
+        select: {
+            kind: 'list',
+            of: { kind: 'string', maxLength: 64 },
+            minItems: 1,
+            maxItems: TRANSFORM_LIMITS.maxSelect,
+            description: 'Fields to keep, in this order.',
+        },
+        limit: { kind: 'number', integer: true, min: 1, max: 200 },
+    },
+};
+/** The output field name of a groupBy aggregate. */
+export function aggregateField(groupBy) {
+    if (groupBy.as !== undefined)
+        return groupBy.as;
+    if (groupBy.aggregate === 'count' || groupBy.value === undefined)
+        return 'count';
+    return groupBy.value;
+}
+function typeRank(value) {
+    if (typeof value === 'number')
+        return 0;
+    if (typeof value === 'string')
+        return 1;
+    return 2;
+}
+/**
+ * Compare two scalars for an ascending sort, ignoring nulls (callers place
+ * nulls). Numbers compare numerically, strings by UTF-16 code unit, booleans
+ * false before true, and across types number < string < boolean.
+ */
+function compareNonNull(left, right) {
+    const rankDifference = typeRank(left) - typeRank(right);
+    if (rankDifference !== 0)
+        return rankDifference;
+    if (typeof left === 'number' && typeof right === 'number')
+        return left - right;
+    if (left === right)
+        return 0;
+    if (typeof left === 'boolean')
+        return left ? 1 : -1;
+    return left < right ? -1 : 1;
+}
+/** Comparator for one key: nulls sort last in both directions. */
+export function compareScalars(left, right, direction = 'asc') {
+    if (left === null && right === null)
+        return 0;
+    if (left === null)
+        return 1;
+    if (right === null)
+        return -1;
+    const order = compareNonNull(left, right);
+    return direction === 'desc' ? -order : order;
+}
+function matchesClause(row, clause) {
+    const value = fieldValue(row, clause.field);
+    if (clause.equals !== undefined)
+        return value === clause.equals;
+    if (clause.notEquals !== undefined)
+        return value !== clause.notEquals;
+    if (clause.in !== undefined)
+        return clause.in.includes(value);
+    if (typeof value !== 'number')
+        return false;
+    if (clause.gt !== undefined)
+        return value > clause.gt;
+    if (clause.gte !== undefined)
+        return value >= clause.gte;
+    if (clause.lt !== undefined)
+        return value < clause.lt;
+    if (clause.lte !== undefined)
+        return value <= clause.lte;
+    return true;
+}
+function numbersOf(rows, field) {
+    const values = [];
+    for (const row of rows) {
+        const value = fieldValue(row, field);
+        if (typeof value === 'number')
+            values.push(value);
+    }
+    return values;
+}
+function aggregate(rows, groupBy) {
+    if (groupBy.aggregate === 'count')
+        return rows.length;
+    const values = numbersOf(rows, groupBy.value ?? '');
+    if (groupBy.aggregate === 'sum')
+        return values.reduce((total, value) => total + value, 0);
+    if (values.length === 0)
+        return null;
+    if (groupBy.aggregate === 'mean') {
+        // IEEE arithmetic, unrounded: only formatting rounds.
+        return values.reduce((total, value) => total + value, 0) / values.length;
+    }
+    return groupBy.aggregate === 'min' ? Math.min(...values) : Math.max(...values);
+}
+function groupRows(rows, groupBy) {
+    const groups = new Map();
+    for (const row of rows) {
+        const key = fieldValue(row, groupBy.field);
+        // Type-tagged so the number 1 and the string "1" stay separate groups.
+        const tag = `${key === null ? 'null' : typeof key}:${String(key)}`;
+        const group = groups.get(tag);
+        if (group === undefined)
+            groups.set(tag, { key, rows: [row] });
+        else
+            group.rows.push(row);
+    }
+    const output = aggregateField(groupBy);
+    return [...groups.values()].map((group) => ({
+        [groupBy.field]: group.key,
+        [output]: aggregate(group.rows, groupBy),
+    }));
+}
+export function sortKeys(sort) {
+    if (sort === undefined)
+        return [];
+    return Array.isArray(sort) ? sort : [sort];
+}
+function sortRows(rows, keys) {
+    return rows
+        .map((row, index) => ({ row, index }))
+        .sort((left, right) => {
+        for (const key of keys) {
+            const order = compareScalars(fieldValue(left.row, key.by), fieldValue(right.row, key.by), key.direction ?? 'asc');
+            if (order !== 0)
+                return order;
+        }
+        return left.index - right.index;
+    })
+        .map((entry) => entry.row);
+}
+function selectFields(rows, fields) {
+    // fromEntries defines own properties, so no field name can reach a prototype.
+    return rows.map((row) => Object.fromEntries(fields.map((field) => [field, fieldValue(row, field)])));
+}
+/**
+ * Apply a validated transform. Pure: the input rows are never mutated.
+ * Fixed order: filter → groupBy → sort → select → limit.
+ */
+export function applyTransform(rows, spec) {
+    let result = [...rows];
+    if (spec.filter !== undefined && spec.filter.length > 0) {
+        const clauses = spec.filter;
+        result = result.filter((row) => clauses.every((clause) => matchesClause(row, clause)));
+    }
+    if (spec.groupBy !== undefined)
+        result = groupRows(result, spec.groupBy);
+    const keys = sortKeys(spec.sort);
+    if (keys.length > 0)
+        result = sortRows(result, keys);
+    if (spec.select !== undefined)
+        result = selectFields(result, spec.select);
+    if (spec.limit !== undefined)
+        result = result.slice(0, spec.limit);
+    return result;
+}
+//# sourceMappingURL=transform-pipeline.js.map

package/dist/data/transform-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform-pipeline.js","sourceRoot":"","sources":["../../src/data/transform-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAiC,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAG/E,MAAM,CAAC,MAAM,gBAAgB,GAA8B;IACzD,QAAQ;IACR,WAAW;IACX,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;CACN,CAAC;AAcF,MAAM,CAAC,MAAM,UAAU,GAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AA4BvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAW,CAAC;AAE1F,MAAM,MAAM,GAAe;IACzB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,qCAAqC;IAClD,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,oBAAoB;CAChC,CAAC;AACF,MAAM,KAAK,GAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC5E,MAAM,QAAQ,GAAe;IAC3B,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE;QACN,EAAE,EAAE,KAAK;QACT,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE;KACrE;CACF,CAAC;AAEF,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,IAAI,EAAE,QAAQ;IACd,WAAW,EACT,mGAAmG;IACrG,MAAM,EAAE;QACN,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,gBAAgB,CAAC,UAAU;YACrC,WAAW,EAAE,yEAAyE;YACtF,EAAE,EAAE;gBACF,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE;oBACN,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,MAAM;oBACd,SAAS,EAAE,MAAM;oBACjB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;oBAC3D,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACtB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACvB,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACtB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBACxB;aACF;SACF;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,6DAA6D;YAC1E,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC/D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,6BAA6B,EAAE;gBACpF,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE;aACnF;SACF;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,mEAAmE;YAChF,OAAO,EAAE;gBACP,QAAQ;gBACR,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,WAAW,EAAE;aACpF;SACF;QACD,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE;YACrC,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,gBAAgB,CAAC,SAAS;YACpC,WAAW,EAAE,gCAAgC;SAC9C;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;KAC3D;CACF,CAAC;AAEF,oDAAoD;AACpD,MAAM,UAAU,cAAc,CAAC,OAAoB;IACjD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACjF,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAA+B,EAAE,KAAgC;IACvF,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,cAAc,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,GAAG,KAAK,CAAC;IAC/E,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC7B,IAAI,OAAO,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,cAAc,CAC5B,IAAgB,EAChB,KAAiB,EACjB,YAA4B,KAAK;IAEjC,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,MAAoB;IACvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC;IAChE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,CAAC;IACtE,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC;IACtD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC;IACzD,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC;IACtD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC;IACzD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB,EAAE,KAAa;IACxD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB,EAAE,OAAoB;IAC/D,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACjC,sDAAsD;QACtD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3E,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB,EAAE,OAAoB;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgD,CAAC;IACvE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3C,uEAAuE;QACvE,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;;YAC1D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG;QAC1B,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC;KACzC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAA2B;IAClD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAwB,EAAE,IAAwB;IAClE,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;SACrC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,cAAc,CAC1B,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,EAC5B,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,EAC7B,GAAG,CAAC,SAAS,IAAI,KAAK,CACvB,CAAC;YACF,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAClC,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB,EAAE,MAAyB;IACvE,8EAA8E;IAC9E,OAAO,IAAI,CAAC,GAAG,CACb,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAY,CAC/F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAe,EAAE,IAAmB;IACjE,IAAI,MAAM,GAAc,CAAC,GAAG,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5B,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/data/validate-datasets.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Validation of the `datasets` envelope and of inline `data` rows.
+ *
+ * Rows are untrusted input like every other spec value: they are bounded,
+ * scalar-only, and keyed by plain identifiers. Forbidden key names (`style`,
+ * `template`, ...) are already reported by the document-wide forbidden-key scan,
+ * which runs before this, so they are not repeated here.
+ */
+import { type DiagnosticBag } from '../diagnostics.js';
+import { type DataRow } from './dataset-types.js';
+/**
+ * Validate a list of rows. Returns the valid rows; an invalid cell drops only
+ * that cell, so one mistake yields one diagnostic instead of a cascade of
+ * unknown-field reports further down.
+ */
+export declare function validateRows(value: unknown, path: string, bag: DiagnosticBag): DataRow[];
+/**
+ * Validate the top-level `datasets` map. Returns the valid datasets by name, in
+ * declaration order.
+ */
+export declare function validateDatasets(value: unknown, path: string, bag: DiagnosticBag): Record<string, DataRow[]>;
+//# sourceMappingURL=validate-datasets.d.ts.map

package/dist/data/validate-datasets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-datasets.d.ts","sourceRoot":"","sources":["../../src/data/validate-datasets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,mBAAmB,CAAC;AAG3E,OAAO,EAAe,KAAK,OAAO,EAAmC,MAAM,oBAAoB,CAAC;AAEhG;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,EAAE,CAgFxF;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,aAAa,GACjB,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAiC3B"}

package/dist/data/validate-datasets.js

@@ -0,0 +1,137 @@
+/**
+ * Validation of the `datasets` envelope and of inline `data` rows.
+ *
+ * Rows are untrusted input like every other spec value: they are bounded,
+ * scalar-only, and keyed by plain identifiers. Forbidden key names (`style`,
+ * `template`, ...) are already reported by the document-wide forbidden-key scan,
+ * which runs before this, so they are not repeated here.
+ */
+import { pathIndex, pathKey } from '../diagnostics.js';
+import { isPlainObject } from '../json.js';
+import { NODE_ID_PATTERN } from '../registry/prop-schema.js';
+import { DATA_LIMITS, FIELD_KEY_PATTERN, isDataScalar } from './dataset-types.js';
+/**
+ * Validate a list of rows. Returns the valid rows; an invalid cell drops only
+ * that cell, so one mistake yields one diagnostic instead of a cascade of
+ * unknown-field reports further down.
+ */
+export function validateRows(value, path, bag) {
+    if (!Array.isArray(value)) {
+        bag.add({ code: 'SPEC_VALIDATION_ERROR', path, message: 'expected a list of rows' });
+        return [];
+    }
+    if (value.length === 0) {
+        bag.add({ code: 'SPEC_VALIDATION_ERROR', path, message: 'a dataset needs at least one row' });
+        return [];
+    }
+    if (value.length > DATA_LIMITS.maxRows) {
+        bag.add({
+            code: 'SPEC_BOUNDS_ERROR',
+            path,
+            message: `dataset has ${value.length} rows, limit is ${DATA_LIMITS.maxRows}`,
+        });
+        return [];
+    }
+    const rows = [];
+    const fields = new Set();
+    let fieldOverflowReported = false;
+    for (let index = 0; index < value.length; index += 1) {
+        const rowPath = pathIndex(path, index);
+        const raw = value[index];
+        if (!isPlainObject(raw)) {
+            bag.add({ code: 'SPEC_VALIDATION_ERROR', path: rowPath, message: 'expected a row object' });
+            continue;
+        }
+        const row = {};
+        for (const [key, cell] of Object.entries(raw)) {
+            const cellPath = pathKey(rowPath, key);
+            if (!FIELD_KEY_PATTERN.test(key)) {
+                bag.add({
+                    code: 'SPEC_VALIDATION_ERROR',
+                    path: cellPath,
+                    message: `"${key}" is not a valid field name (letters, digits, "_" and "-", 64 max, not starting with a digit or dash, not __proto__, constructor or prototype)`,
+                });
+                continue;
+            }
+            if (!isDataScalar(cell)) {
+                bag.add({
+                    code: 'SPEC_VALIDATION_ERROR',
+                    path: cellPath,
+                    message: 'a dataset value must be a string, a finite number, a boolean, or null',
+                });
+                continue;
+            }
+            if (typeof cell === 'string' && cell.length > DATA_LIMITS.maxStringLength) {
+                bag.add({
+                    code: 'SPEC_BOUNDS_ERROR',
+                    path: cellPath,
+                    message: `string is ${cell.length} characters, limit is ${DATA_LIMITS.maxStringLength}`,
+                });
+                continue;
+            }
+            if (typeof cell === 'string' && cell.includes('\u0000')) {
+                bag.add({
+                    code: 'SPEC_VALIDATION_ERROR',
+                    path: cellPath,
+                    message: 'string contains a NUL character',
+                });
+                continue;
+            }
+            if (!fields.has(key) && fields.size >= DATA_LIMITS.maxFields) {
+                if (!fieldOverflowReported) {
+                    fieldOverflowReported = true;
+                    bag.add({
+                        code: 'SPEC_BOUNDS_ERROR',
+                        path: cellPath,
+                        message: `dataset declares more than ${DATA_LIMITS.maxFields} fields`,
+                    });
+                }
+                continue;
+            }
+            fields.add(key);
+            row[key] = cell;
+        }
+        rows.push(row);
+    }
+    return rows;
+}
+/**
+ * Validate the top-level `datasets` map. Returns the valid datasets by name, in
+ * declaration order.
+ */
+export function validateDatasets(value, path, bag) {
+    const datasets = {};
+    if (value === undefined)
+        return datasets;
+    if (!isPlainObject(value)) {
+        bag.add({
+            code: 'SPEC_VALIDATION_ERROR',
+            path,
+            message: 'expected a map of dataset names to row lists',
+        });
+        return datasets;
+    }
+    const names = Object.keys(value);
+    if (names.length > DATA_LIMITS.maxDatasets) {
+        bag.add({
+            code: 'SPEC_BOUNDS_ERROR',
+            path,
+            message: `spec declares ${names.length} datasets, limit is ${DATA_LIMITS.maxDatasets}`,
+        });
+        return datasets;
+    }
+    for (const name of names) {
+        const datasetPath = pathKey(path, name);
+        if (!NODE_ID_PATTERN.test(name)) {
+            bag.add({
+                code: 'SPEC_VALIDATION_ERROR',
+                path: datasetPath,
+                message: `"${name}" is not a valid dataset name (lowercase letters, digits and dashes, 64 max)`,
+            });
+            continue;
+        }
+        datasets[name] = validateRows(value[name], datasetPath, bag);
+    }
+    return datasets;
+}
+//# sourceMappingURL=validate-datasets.js.map

package/dist/data/validate-datasets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-datasets.js","sourceRoot":"","sources":["../../src/data/validate-datasets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAsB,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAgB,iBAAiB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEhG;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,GAAkB;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACrF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;QACvC,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI;YACJ,OAAO,EAAE,eAAe,KAAK,CAAC,MAAM,mBAAmB,WAAW,CAAC,OAAO,EAAE;SAC7E,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,qBAAqB,GAAG,KAAK,CAAC;IAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAY,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,GAAG,CAAC;oBACN,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,IAAI,GAAG,gJAAgJ;iBACjK,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,GAAG,CAAC;oBACN,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,uEAAuE;iBACjF,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,eAAe,EAAE,CAAC;gBAC1E,GAAG,CAAC,GAAG,CAAC;oBACN,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,aAAa,IAAI,CAAC,MAAM,yBAAyB,WAAW,CAAC,eAAe,EAAE;iBACxF,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,GAAG,CAAC;oBACN,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iCAAiC;iBAC3C,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC7D,IAAI,CAAC,qBAAqB,EAAE,CAAC;oBAC3B,qBAAqB,GAAG,IAAI,CAAC;oBAC7B,GAAG,CAAC,GAAG,CAAC;wBACN,IAAI,EAAE,mBAAmB;wBACzB,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,8BAA8B,WAAW,CAAC,SAAS,SAAS;qBACtE,CAAC,CAAC;gBACL,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAc,EACd,IAAY,EACZ,GAAkB;IAElB,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,uBAAuB;YAC7B,IAAI;YACJ,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI;YACJ,OAAO,EAAE,iBAAiB,KAAK,CAAC,MAAM,uBAAuB,WAAW,CAAC,WAAW,EAAE;SACvF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,GAAG,CAAC;gBACN,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,IAAI,IAAI,8EAA8E;aAChG,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/diagram/adapter-markup-fit.d.ts

@@ -0,0 +1,44 @@
+/**
+ * The structural pass over diagram adapter markup.
+ *
+ * Adapter markup is embedded inside the page's own elements, so it must stay a
+ * self-contained fragment: it may not close an element it did not open, leave
+ * one open to swallow the page that follows, switch the HTML parser into a mode
+ * that reads the rest of the page as text, or carry the attributes the page and
+ * its runtime use as hooks. This pass walks the fragment once, in step with how
+ * a browser would tokenize it, and refuses anything it cannot read the same way.
+ *
+ * The same walk fits accepted markup to the page's Content Security Policy:
+ * `<style>` elements are marked for the page style nonce and their stylesheets
+ * are filtered and scoped to the diagram canvas, and inline `style` attributes,
+ * which the policy refuses, are removed and counted.
+ *
+ * Every step either advances past what it read or stops the walk, and no
+ * pattern can scan past the next `<` except a quoted attribute value, so the
+ * walk is linear in the length of the markup.
+ */
+/**
+ * Attribute that marks an adapter `<style>` element for the page style nonce.
+ *
+ * The nonce is a hash of the finished page stylesheet, which is only known
+ * after every block has rendered, so the renderer marks the element and the
+ * document assembler fills the nonce in (see `src/render/document.ts`). Adapter
+ * markup that contains the marker itself is refused, so every marker on the
+ * page is one this module wrote.
+ */
+export declare const ADAPTER_STYLE_MARKER = "data-ak-adapter-style";
+/** Markup fitted to the page policy, or the reason it could not be. */
+export type FittedMarkup = {
+    readonly ok: true;
+    readonly markup: string;
+    readonly removedInlineStyles: number;
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+/**
+ * Walk adapter markup, refuse what cannot be embedded safely, and fit the rest
+ * to the page's Content Security Policy.
+ */
+export declare function fitAdapterMarkup(markup: string, scope: string): FittedMarkup;
+//# sourceMappingURL=adapter-markup-fit.d.ts.map

package/dist/diagram/adapter-markup-fit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-markup-fit.d.ts","sourceRoot":"","sources":["../../src/diagram/adapter-markup-fit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAoK5D,uEAAuE;AACvE,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GACpF;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAYpD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAyG5E"}