@bestagentkits/render 0.2.0 → 0.3.0

package/dist/diagram/adapter-markup-fit.js

@@ -0,0 +1,292 @@
+/**
+ * The structural pass over diagram adapter markup.
+ *
+ * Adapter markup is embedded inside the page's own elements, so it must stay a
+ * self-contained fragment: it may not close an element it did not open, leave
+ * one open to swallow the page that follows, switch the HTML parser into a mode
+ * that reads the rest of the page as text, or carry the attributes the page and
+ * its runtime use as hooks. This pass walks the fragment once, in step with how
+ * a browser would tokenize it, and refuses anything it cannot read the same way.
+ *
+ * The same walk fits accepted markup to the page's Content Security Policy:
+ * `<style>` elements are marked for the page style nonce and their stylesheets
+ * are filtered and scoped to the diagram canvas, and inline `style` attributes,
+ * which the policy refuses, are removed and counted.
+ *
+ * Every step either advances past what it read or stops the walk, and no
+ * pattern can scan past the next `<` except a quoted attribute value, so the
+ * walk is linear in the length of the markup.
+ */
+import { filterAdapterStylesheet, scopeAdapterStylesheet } from './adapter-stylesheet-filter.js';
+/**
+ * Attribute that marks an adapter `<style>` element for the page style nonce.
+ *
+ * The nonce is a hash of the finished page stylesheet, which is only known
+ * after every block has rendered, so the renderer marks the element and the
+ * document assembler fills the nonce in (see `src/render/document.ts`). Adapter
+ * markup that contains the marker itself is refused, so every marker on the
+ * page is one this module wrote.
+ */
+export const ADAPTER_STYLE_MARKER = 'data-ak-adapter-style';
+/** HTML whitespace. JavaScript's `\s` also matches characters HTML does not. */
+const WS = '[\\t\\n\\f\\r ]';
+/**
+ * An attribute name. It excludes `<`, so an unterminated tag fails at the next
+ * `<` instead of rescanning the rest of the markup.
+ */
+const ATTRIBUTE_NAME = `[^\\t\\n\\f\\r "'<>/=]+`;
+/** An optional `=` and a quoted or unquoted attribute value. */
+const ATTRIBUTE_VALUE = `(?:${WS}*=${WS}*(?:"[^"]*"|'[^']*'|[^\\t\\n\\f\\r "'=<>\`]+))?`;
+/** A start tag at the current position: name, attribute list, self-closing slash. */
+const START_TAG = new RegExp(`<([A-Za-z][A-Za-z0-9:-]*)((?:${WS}+${ATTRIBUTE_NAME}${ATTRIBUTE_VALUE})*)${WS}*(\\/?)>`, 'yu');
+/** An end tag at the current position. */
+const END_TAG = new RegExp(`</([A-Za-z][A-Za-z0-9:-]*)${WS}*>`, 'yu');
+/** One attribute inside a start tag's attribute list: its name and raw value. */
+const ATTRIBUTE = new RegExp(`${WS}+(${ATTRIBUTE_NAME})(?:${WS}*=${WS}*("[^"]*"|'[^']*'|[^\\t\\n\\f\\r "'=<>\`]+))?`, 'gu');
+/**
+ * A same-document fragment reference, written literally. Character references
+ * are not decoded here, so a value that uses one is refused rather than read.
+ */
+const FRAGMENT_REFERENCE = /^#[A-Za-z0-9_.:-]+$/u;
+/** Attributes, besides any `*:href`, that make the browser fetch or navigate to a URL. */
+const URL_ATTRIBUTES = new Set([
+    'href',
+    'src',
+    'srcset',
+    'poster',
+    'action',
+    'formaction',
+    'background',
+    'data',
+    'codebase',
+    'ping',
+]);
+/** True for an attribute that makes the browser fetch or navigate to a URL. */
+function isUrlAttribute(lowered) {
+    return URL_ATTRIBUTES.has(lowered) || lowered.endsWith(':href');
+}
+/**
+ * SVG animation can write a URL into another attribute after parsing
+ * (`<set attributeName="href" to="https://…">`), so animating a URL attribute
+ * is refused like writing one.
+ */
+function animatesUrlAttribute(lowered, value) {
+    return lowered === 'attributename' && isUrlAttribute(unquote(value).trim().toLowerCase());
+}
+/** An attribute value without its quotes; an attribute with no value is empty. */
+function unquote(value) {
+    if (value === undefined)
+        return '';
+    const first = value[0];
+    return first === '"' || first === "'" ? value.slice(1, -1) : value;
+}
+/**
+ * Elements refused anywhere. Some execute, frame or submit; some switch the
+ * parser into raw text (`plaintext` never ends, so it would swallow the rest
+ * of the page); some merge attributes into the page's own `html` or `body`, or
+ * belong in the document head.
+ */
+const FORBIDDEN_ELEMENTS = new Set([
+    'script',
+    'iframe',
+    'object',
+    'embed',
+    'form',
+    'base',
+    'foreignobject',
+    'plaintext',
+    'textarea',
+    'xmp',
+    'noembed',
+    'noframes',
+    'noscript',
+    'template',
+    'html',
+    'head',
+    'body',
+    'frameset',
+    'frame',
+    'meta',
+    'link',
+    'math',
+]);
+/** HTML elements that never have content or an end tag. */
+const VOID_ELEMENTS = new Set([
+    'area',
+    'br',
+    'col',
+    'hr',
+    'img',
+    'input',
+    'source',
+    'track',
+    'wbr',
+]);
+/**
+ * HTML elements that, met inside SVG, make the parser close the SVG and carry
+ * on in HTML. The browser's tree would then differ from the markup's nesting,
+ * so they are refused there.
+ */
+const SVG_BREAKOUT_ELEMENTS = new Set([
+    'b',
+    'big',
+    'blockquote',
+    'br',
+    'center',
+    'code',
+    'dd',
+    'div',
+    'dl',
+    'dt',
+    'em',
+    'font',
+    'h1',
+    'h2',
+    'h3',
+    'h4',
+    'h5',
+    'h6',
+    'hr',
+    'i',
+    'img',
+    'li',
+    'listing',
+    'menu',
+    'nobr',
+    'ol',
+    'p',
+    'pre',
+    'ruby',
+    's',
+    'small',
+    'span',
+    'strike',
+    'strong',
+    'sub',
+    'sup',
+    'table',
+    'tt',
+    'u',
+    'ul',
+    'var',
+]);
+/** SVG elements whose content the parser reads as HTML again. */
+const SVG_HTML_INTEGRATION_POINTS = new Set(['title', 'desc']);
+/** Attribute prefix the page and its runtime use as hooks. */
+const RESERVED_ATTRIBUTE_PREFIX = 'data-ak-';
+function refuse(reason) {
+    return { ok: false, reason };
+}
+/**
+ * Walk adapter markup, refuse what cannot be embedded safely, and fit the rest
+ * to the page's Content Security Policy.
+ */
+export function fitAdapterMarkup(markup, scope) {
+    const open = [];
+    const startTag = new RegExp(START_TAG);
+    const endTag = new RegExp(END_TAG);
+    let removedInlineStyles = 0;
+    let fitted = '';
+    let copied = 0;
+    let index = markup.indexOf('<');
+    while (index >= 0) {
+        const next = markup[index + 1] ?? '';
+        if (next === '!' || next === '?')
+            return refuse('comment or markup declaration');
+        if (next === '/') {
+            endTag.lastIndex = index;
+            const match = endTag.exec(markup);
+            if (match === null)
+                return refuse('malformed end tag');
+            const name = (match[1] ?? '').toLowerCase();
+            if (open.pop()?.name !== name)
+                return refuse(`end tag </${name}> without a matching element`);
+            index = markup.indexOf('<', endTag.lastIndex);
+            continue;
+        }
+        if (!/[A-Za-z]/u.test(next)) {
+            // A `<` that cannot start a tag is text to the browser too.
+            index = markup.indexOf('<', index + 1);
+            continue;
+        }
+        startTag.lastIndex = index;
+        const match = startTag.exec(markup);
+        if (match === null)
+            return refuse('malformed tag');
+        const [tag, rawName = '', attributes = '', selfClosing = ''] = match;
+        const name = rawName.toLowerCase();
+        if (FORBIDDEN_ELEMENTS.has(name))
+            return refuse(`${name} element`);
+        const parent = open.at(-1);
+        const inSvg = parent?.svgContent === true;
+        if (inSvg && SVG_BREAKOUT_ELEMENTS.has(name))
+            return refuse(`HTML ${name} element inside svg`);
+        if (!inSvg && name === 'title')
+            return refuse('title element outside svg');
+        const isSvgElement = inSvg || name === 'svg';
+        let reserved;
+        let external;
+        const kept = attributes.replace(ATTRIBUTE, (attribute, attributeName, value) => {
+            const lowered = attributeName.toLowerCase();
+            if (lowered.startsWith(RESERVED_ATTRIBUTE_PREFIX))
+                reserved = lowered;
+            // A drawing may point at its own gradients, markers and symbols, never
+            // at another document, a remote resource or a navigation target.
+            if (isUrlAttribute(lowered) && !FRAGMENT_REFERENCE.test(unquote(value)))
+                external = lowered;
+            if (animatesUrlAttribute(lowered, value))
+                external = `${lowered}=${unquote(value)}`;
+            if (lowered === 'style') {
+                removedInlineStyles += 1;
+                return '';
+            }
+            return lowered === 'nonce' ? '' : attribute;
+        });
+        if (reserved !== undefined)
+            return refuse(`reserved attribute ${reserved}`);
+        if (external !== undefined) {
+            return refuse(`${external} attribute that is not a same-document #fragment`);
+        }
+        fitted += markup.slice(copied, index);
+        copied = index + tag.length;
+        index = markup.indexOf('<', copied);
+        if (name === 'style') {
+            // In HTML a self-closing style tag still opens a stylesheet, while in SVG
+            // it does not; the two readings disagree, so neither is accepted.
+            if (selfClosing !== '')
+                return refuse('self-closing style element');
+            // The stylesheet must be plain text up to its end tag, so the text
+            // checked here is exactly the text a browser applies.
+            if (index < 0 || !markup.startsWith('</', index)) {
+                return refuse('style element containing markup or missing its end tag');
+            }
+            const filtered = filterAdapterStylesheet(markup.slice(copied, index));
+            if (!filtered.ok)
+                return refuse(filtered.reason);
+            fitted += `<style ${ADAPTER_STYLE_MARKER}${kept}>${scopeAdapterStylesheet(filtered.css, scope)}`;
+            copied = index;
+            open.push({ name, svgContent: false });
+            continue;
+        }
+        fitted += `<${rawName}${kept}${selfClosing === '' ? '' : ' /'}>`;
+        if (selfClosing !== '') {
+            // Only SVG honours a self-closing slash; in HTML the element stays open.
+            if (!isSvgElement && !VOID_ELEMENTS.has(name)) {
+                return refuse(`self-closing HTML ${name} element`);
+            }
+            continue;
+        }
+        if (!isSvgElement && VOID_ELEMENTS.has(name))
+            continue;
+        open.push({
+            name,
+            svgContent: isSvgElement && !SVG_HTML_INTEGRATION_POINTS.has(name),
+        });
+    }
+    const unclosed = open.at(-1);
+    if (unclosed !== undefined)
+        return refuse(`unclosed ${unclosed.name} element`);
+    fitted += markup.slice(copied);
+    return { ok: true, markup: fitted, removedInlineStyles };
+}
+//# sourceMappingURL=adapter-markup-fit.js.map

package/dist/diagram/adapter-markup-fit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-markup-fit.js","sourceRoot":"","sources":["../../src/diagram/adapter-markup-fit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAEjG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAE5D,gFAAgF;AAChF,MAAM,EAAE,GAAG,iBAAiB,CAAC;AAC7B;;;GAGG;AACH,MAAM,cAAc,GAAG,yBAAyB,CAAC;AACjD,gEAAgE;AAChE,MAAM,eAAe,GAAG,MAAM,EAAE,KAAK,EAAE,iDAAiD,CAAC;AACzF,qFAAqF;AACrF,MAAM,SAAS,GAAG,IAAI,MAAM,CAC1B,gCAAgC,EAAE,IAAI,cAAc,GAAG,eAAe,MAAM,EAAE,UAAU,EACxF,IAAI,CACL,CAAC;AACF,0CAA0C;AAC1C,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,6BAA6B,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACtE,iFAAiF;AACjF,MAAM,SAAS,GAAG,IAAI,MAAM,CAC1B,GAAG,EAAE,KAAK,cAAc,OAAO,EAAE,KAAK,EAAE,+CAA+C,EACvF,IAAI,CACL,CAAC;AAEF;;;GAGG;AACH,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAElD,0FAA0F;AAC1F,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,MAAM;IACN,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,YAAY;IACZ,MAAM;IACN,UAAU;IACV,MAAM;CACP,CAAC,CAAC;AAEH,+EAA+E;AAC/E,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,OAAe,EAAE,KAAyB;IACtE,OAAO,OAAO,KAAK,eAAe,IAAI,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,kFAAkF;AAClF,SAAS,OAAO,CAAC,KAAyB;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,eAAe;IACf,WAAW;IACX,UAAU;IACV,KAAK;IACL,SAAS;IACT,UAAU;IACV,UAAU;IACV,UAAU;IACV,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH,2DAA2D;AAC3D,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,MAAM;IACN,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,KAAK;IACL,OAAO;IACP,QAAQ;IACR,OAAO;IACP,KAAK;CACN,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,GAAG;IACH,KAAK;IACL,YAAY;IACZ,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,IAAI;IACJ,KAAK;IACL,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,KAAK;IACL,IAAI;IACJ,SAAS;IACT,MAAM;IACN,MAAM;IACN,IAAI;IACJ,GAAG;IACH,KAAK;IACL,MAAM;IACN,GAAG;IACH,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,KAAK;IACL,OAAO;IACP,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,KAAK;CACN,CAAC,CAAC;AAEH,iEAAiE;AACjE,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpF,8DAA8D;AAC9D,MAAM,yBAAyB,GAAG,UAAU,CAAC;AAa7C,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,+BAA+B,CAAC,CAAC;QAEjF,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,aAAa,IAAI,8BAA8B,CAAC,CAAC;YAC9F,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,4DAA4D;YAC5D,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,EAAE,EAAE,UAAU,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;QACrE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;QAC1C,IAAI,KAAK,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,IAAI,qBAAqB,CAAC,CAAC;QAC/F,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC;QAE7C,IAAI,QAA4B,CAAC;QACjC,IAAI,QAA4B,CAAC;QACjC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAC7B,SAAS,EACT,CAAC,SAAiB,EAAE,aAAqB,EAAE,KAAc,EAAE,EAAE;YAC3D,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC;gBAAE,QAAQ,GAAG,OAAO,CAAC;YACtE,uEAAuE;YACvE,iEAAiE;YACjE,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAE,QAAQ,GAAG,OAAO,CAAC;YAC5F,IAAI,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC;gBAAE,QAAQ,GAAG,GAAG,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACpF,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;gBACxB,mBAAmB,IAAI,CAAC,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC,CACF,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QAC5E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,GAAG,QAAQ,kDAAkD,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;QAC5B,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEpC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,0EAA0E;YAC1E,kEAAkE;YAClE,IAAI,WAAW,KAAK,EAAE;gBAAE,OAAO,MAAM,CAAC,4BAA4B,CAAC,CAAC;YACpE,mEAAmE;YACnE,sDAAsD;YACtD,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBACjD,OAAO,MAAM,CAAC,wDAAwD,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,IAAI,UAAU,oBAAoB,GAAG,IAAI,IAAI,sBAAsB,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YACjG,MAAM,GAAG,KAAK,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QAED,MAAM,IAAI,IAAI,OAAO,GAAG,IAAI,GAAG,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QACjE,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,yEAAyE;YACzE,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,OAAO,MAAM,CAAC,qBAAqB,IAAI,UAAU,CAAC,CAAC;YACrD,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,YAAY,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACvD,IAAI,CAAC,IAAI,CAAC;YACR,IAAI;YACJ,UAAU,EAAE,YAAY,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,YAAY,QAAQ,CAAC,IAAI,UAAU,CAAC,CAAC;IAC/E,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AAC3D,CAAC"}

package/dist/diagram/adapter-stylesheet-filter.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The stylesheet filter for diagram adapter `<style>` elements.
+ *
+ * Adapter styles receive the page style nonce, so they are live CSS. Two rules
+ * keep them from becoming an escape hatch:
+ *
+ * - **They cannot load anything.** No `@import`, `@font-face` or other at-rule
+ *   beyond `@media`, `@keyframes` and `@supports`; no `url()` except a fragment
+ *   reference such as `url(#gradient)`; no `image-set()` or other function that
+ *   takes a URL; no `expression()`.
+ * - **They cannot reach past their own diagram.** Every accepted stylesheet is
+ *   wrapped in an `@scope` rule rooted at the diagram's canvas, so a selector
+ *   such as `.ak-shell` or `:root` matches nothing outside it. Braces must
+ *   balance, so the stylesheet cannot close that rule early.
+ *
+ * The filter is a deliberately small, conservative scanner rather than a CSS
+ * parser: anything that could hide a token from it is refused outright. That
+ * covers backslash escapes, HTML character references (which an SVG `<style>`
+ * decodes), and markup. Two things typed diagram compilers do emit are removed
+ * rather than refused: comments, each replaced by a space so the tokens on
+ * either side stay apart exactly as the comment kept them, and `!important`,
+ * which would otherwise outrank the page's motion and print guards. Removing
+ * either can only take power away from a declaration. The scanner visits each
+ * character once, so it is linear in the stylesheet's length.
+ */
+/**
+ * Keyframes names the page itself defines. Keyframes are page-wide even inside
+ * `@scope`, so an adapter must not redefine them. A unit test keeps this list
+ * equal to the names in the compiler's stylesheets.
+ */
+export declare const PAGE_KEYFRAMES_NAMES: ReadonlySet<string>;
+/** An accepted stylesheet with its comments removed, or the reason it was refused. */
+export type FilteredStylesheet = {
+    readonly ok: true;
+    readonly css: string;
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+/**
+ * Filter the stylesheet text of one adapter `<style>` element.
+ *
+ * Returns the stylesheet with its comments removed, or the rejection reason.
+ */
+export declare function filterAdapterStylesheet(css: string): FilteredStylesheet;
+/** Attribute naming the canvas element an adapter stylesheet is scoped to. */
+export declare const ADAPTER_SCOPE_ATTRIBUTE = "data-ak-diagram-scope";
+/**
+ * Wrap an accepted adapter stylesheet so it applies only inside its canvas.
+ *
+ * Inside `@scope`, a selector without `:scope` or `&` is read as a descendant
+ * of the scope root, and no selector can match an element outside the root.
+ * `scope` is a token from `[A-Za-z0-9_-]`, so it needs no CSS escaping.
+ */
+export declare function scopeAdapterStylesheet(css: string, scope: string): string;
+//# sourceMappingURL=adapter-stylesheet-filter.d.ts.map

package/dist/diagram/adapter-stylesheet-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-stylesheet-filter.d.ts","sourceRoot":"","sources":["../../src/diagram/adapter-stylesheet-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAyBH;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAgBnD,CAAC;AAuDH,sFAAsF;AACtF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAIvE;AAwGD,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAE/D;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzE"}

package/dist/diagram/adapter-stylesheet-filter.js

@@ -0,0 +1,245 @@
+/**
+ * The stylesheet filter for diagram adapter `<style>` elements.
+ *
+ * Adapter styles receive the page style nonce, so they are live CSS. Two rules
+ * keep them from becoming an escape hatch:
+ *
+ * - **They cannot load anything.** No `@import`, `@font-face` or other at-rule
+ *   beyond `@media`, `@keyframes` and `@supports`; no `url()` except a fragment
+ *   reference such as `url(#gradient)`; no `image-set()` or other function that
+ *   takes a URL; no `expression()`.
+ * - **They cannot reach past their own diagram.** Every accepted stylesheet is
+ *   wrapped in an `@scope` rule rooted at the diagram's canvas, so a selector
+ *   such as `.ak-shell` or `:root` matches nothing outside it. Braces must
+ *   balance, so the stylesheet cannot close that rule early.
+ *
+ * The filter is a deliberately small, conservative scanner rather than a CSS
+ * parser: anything that could hide a token from it is refused outright. That
+ * covers backslash escapes, HTML character references (which an SVG `<style>`
+ * decodes), and markup. Two things typed diagram compilers do emit are removed
+ * rather than refused: comments, each replaced by a space so the tokens on
+ * either side stay apart exactly as the comment kept them, and `!important`,
+ * which would otherwise outrank the page's motion and print guards. Removing
+ * either can only take power away from a declaration. The scanner visits each
+ * character once, so it is linear in the stylesheet's length.
+ */
+/** At-rules an adapter stylesheet may use. Every other at-rule is refused. */
+const ALLOWED_AT_RULES = new Set(['media', 'keyframes', 'supports']);
+/**
+ * CSS functions that fetch a resource, take a URL as a string, or run code.
+ * `url()` is handled separately, because a fragment reference is allowed.
+ */
+const FORBIDDEN_FUNCTIONS = new Set([
+    'image-set',
+    '-webkit-image-set',
+    'image',
+    'src',
+    'cross-fade',
+    '-webkit-cross-fade',
+    'element',
+    '-moz-element',
+    'paint',
+    'expression',
+]);
+/** The argument of an allowed `url()`: a same-document fragment reference only. */
+const FRAGMENT_URL_ARGUMENT = /^[\t\n\f\r ]*(["']?)#[A-Za-z0-9_-]+\1[\t\n\f\r ]*$/u;
+/**
+ * Keyframes names the page itself defines. Keyframes are page-wide even inside
+ * `@scope`, so an adapter must not redefine them. A unit test keeps this list
+ * equal to the names in the compiler's stylesheets.
+ */
+export const PAGE_KEYFRAMES_NAMES = new Set([
+    'ak-aurora',
+    'ak-caret',
+    'ak-draw',
+    'ak-drift',
+    'ak-enter',
+    'ak-fade',
+    'ak-line-in',
+    'ak-marquee',
+    'ak-reading',
+    'ak-reveal',
+    'ak-rise',
+    'ak-scroll-edges',
+    'ak-settle',
+    'ak-tilt',
+    'ak-type',
+]);
+/** `!important`, with the whitespace CSS allows between its two parts. */
+const IMPORTANT = /^![\t\n\f\r ]*important/iu;
+const CLOSERS = { '{': '}', '(': ')', '[': ']' };
+function isIdentCharacter(character) {
+    const code = character.charCodeAt(0);
+    return ((code >= 0x61 && code <= 0x7a) || // a-z
+        (code >= 0x41 && code <= 0x5a) || // A-Z
+        (code >= 0x30 && code <= 0x39) || // 0-9
+        character === '-' ||
+        character === '_' ||
+        code >= 0x80);
+}
+function isCssWhitespace(character) {
+    return (character === ' ' ||
+        character === '\t' ||
+        character === '\n' ||
+        character === '\r' ||
+        character === '\f');
+}
+/** True when `&` at this position would start an HTML character reference. */
+function startsCharacterReference(css, index) {
+    const next = css[index + 1] ?? '';
+    return next === '#' || (next !== '' && /[A-Za-z0-9]/u.test(next));
+}
+/** End index (exclusive) of the identifier that starts at `start`. */
+function identifierEnd(css, start) {
+    let end = start;
+    while (end < css.length && isIdentCharacter(css[end] ?? ''))
+        end += 1;
+    return end;
+}
+/**
+ * Check one character that may appear anywhere, including inside a string.
+ * Returns a rejection reason, or `undefined` when the character is harmless.
+ */
+function hiddenTokenReason(css, index) {
+    const character = css[index];
+    if (character === '<')
+        return 'markup inside a style element';
+    if (character === '&' && startsCharacterReference(css, index)) {
+        return 'character reference inside a style element';
+    }
+    return undefined;
+}
+/**
+ * Filter the stylesheet text of one adapter `<style>` element.
+ *
+ * Returns the stylesheet with its comments removed, or the rejection reason.
+ */
+export function filterAdapterStylesheet(css) {
+    const reason = scanAdapterStylesheet(css);
+    if (typeof reason === 'string')
+        return { ok: false, reason };
+    return { ok: true, css: reason.css };
+}
+function scanAdapterStylesheet(css) {
+    // An escape can spell any token, so it is refused before anything is read.
+    if (css.includes('\\'))
+        return 'CSS escape';
+    const open = [];
+    let cleaned = '';
+    let copied = 0;
+    let index = 0;
+    while (index < css.length) {
+        const character = css[index] ?? '';
+        const hidden = hiddenTokenReason(css, index);
+        if (hidden !== undefined)
+            return hidden;
+        if (character === '/' && css[index + 1] === '*') {
+            // A comment runs to the first `*/`. Its text is scanned too: in an SVG
+            // `<style>` a character reference such as `&#42;` could otherwise end the
+            // comment for the browser earlier than it ends here.
+            const end = css.indexOf('*/', index + 2);
+            if (end < 0)
+                return 'unterminated CSS comment';
+            for (let cursor = index + 2; cursor < end; cursor += 1) {
+                const inner = hiddenTokenReason(css, cursor);
+                if (inner !== undefined)
+                    return inner;
+            }
+            cleaned += `${css.slice(copied, index)} `;
+            index = end + 2;
+            copied = index;
+            continue;
+        }
+        if (character === '!') {
+            const important = IMPORTANT.exec(css.slice(index, index + 32));
+            if (important === null)
+                return 'CSS ! other than !important';
+            cleaned += css.slice(copied, index);
+            index += important[0].length;
+            copied = index;
+            continue;
+        }
+        if (character === '"' || character === "'") {
+            // A string runs to its matching quote on the same line. Its content is
+            // inert, but it is still scanned for the characters that hide tokens.
+            let cursor = index + 1;
+            while (cursor < css.length && css[cursor] !== character) {
+                const inner = css[cursor] ?? '';
+                if (inner === '\n' || inner === '\r' || inner === '\f')
+                    return 'unterminated CSS string';
+                const reason = hiddenTokenReason(css, cursor);
+                if (reason !== undefined)
+                    return reason;
+                cursor += 1;
+            }
+            if (cursor >= css.length)
+                return 'unterminated CSS string';
+            index = cursor + 1;
+            continue;
+        }
+        if (character === '@') {
+            const nameEnd = identifierEnd(css, index + 1);
+            const name = css.slice(index + 1, nameEnd).toLowerCase();
+            if (!ALLOWED_AT_RULES.has(name))
+                return name === '' ? 'CSS at-rule' : `CSS @${name}`;
+            if (name === 'keyframes') {
+                let cursor = nameEnd;
+                while (cursor < css.length && isCssWhitespace(css[cursor] ?? ''))
+                    cursor += 1;
+                const quoted = css[cursor] === '"' || css[cursor] === "'";
+                const keyframesStart = quoted ? cursor + 1 : cursor;
+                const keyframesName = css
+                    .slice(keyframesStart, identifierEnd(css, keyframesStart))
+                    .toLowerCase();
+                if (PAGE_KEYFRAMES_NAMES.has(keyframesName)) {
+                    return 'CSS @keyframes name reserved by the page';
+                }
+            }
+            index = nameEnd;
+            continue;
+        }
+        if (isIdentCharacter(character)) {
+            const end = identifierEnd(css, index);
+            if (css[end] === '(') {
+                const name = css.slice(index, end).toLowerCase();
+                if (FORBIDDEN_FUNCTIONS.has(name))
+                    return `CSS ${name}()`;
+                if (name === 'url') {
+                    const close = css.indexOf(')', end + 1);
+                    if (close < 0 || !FRAGMENT_URL_ARGUMENT.test(css.slice(end + 1, close))) {
+                        return 'CSS url() other than a fragment reference';
+                    }
+                    index = close + 1;
+                    continue;
+                }
+            }
+            index = end;
+            continue;
+        }
+        const closer = CLOSERS[character];
+        if (closer !== undefined) {
+            open.push(closer);
+        }
+        else if (character === '}' || character === ')' || character === ']') {
+            if (open.pop() !== character)
+                return 'unbalanced CSS brackets';
+        }
+        index += 1;
+    }
+    if (open.length > 0)
+        return 'unbalanced CSS brackets';
+    return { css: cleaned + css.slice(copied) };
+}
+/** Attribute naming the canvas element an adapter stylesheet is scoped to. */
+export const ADAPTER_SCOPE_ATTRIBUTE = 'data-ak-diagram-scope';
+/**
+ * Wrap an accepted adapter stylesheet so it applies only inside its canvas.
+ *
+ * Inside `@scope`, a selector without `:scope` or `&` is read as a descendant
+ * of the scope root, and no selector can match an element outside the root.
+ * `scope` is a token from `[A-Za-z0-9_-]`, so it needs no CSS escaping.
+ */
+export function scopeAdapterStylesheet(css, scope) {
+    return `@scope (.ak-diagram-canvas[${ADAPTER_SCOPE_ATTRIBUTE}="${scope}"]){${css}}`;
+}
+//# sourceMappingURL=adapter-stylesheet-filter.js.map

package/dist/diagram/adapter-stylesheet-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-stylesheet-filter.js","sourceRoot":"","sources":["../../src/diagram/adapter-stylesheet-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,8EAA8E;AAC9E,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1F;;;GAGG;AACH,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IACvD,WAAW;IACX,mBAAmB;IACnB,OAAO;IACP,KAAK;IACL,YAAY;IACZ,oBAAoB;IACpB,SAAS;IACT,cAAc;IACd,OAAO;IACP,YAAY;CACb,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,qBAAqB,GAAG,qDAAqD,CAAC;AAEpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,WAAW;IACX,UAAU;IACV,SAAS;IACT,UAAU;IACV,UAAU;IACV,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,SAAS;IACT,iBAAiB;IACjB,WAAW;IACX,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAE9C,MAAM,OAAO,GAAqC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEnF,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,CACL,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,MAAM;QACxC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,MAAM;QACxC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,MAAM;QACxC,SAAS,KAAK,GAAG;QACjB,SAAS,KAAK,GAAG;QACjB,IAAI,IAAI,IAAI,CACb,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,OAAO,CACL,SAAS,KAAK,GAAG;QACjB,SAAS,KAAK,IAAI;QAClB,SAAS,KAAK,IAAI;QAClB,SAAS,KAAK,IAAI;QAClB,SAAS,KAAK,IAAI,CACnB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,wBAAwB,CAAC,GAAW,EAAE,KAAa;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAC,GAAW,EAAE,KAAa;IAC/C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAAE,GAAG,IAAI,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,GAAW,EAAE,KAAa;IACnD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,+BAA+B,CAAC;IAC9D,IAAI,SAAS,KAAK,GAAG,IAAI,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,4CAA4C,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC7D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,2EAA2E;IAC3E,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IAC5C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,IAAI,SAAS,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAChD,uEAAuE;YACvE,0EAA0E;YAC1E,qDAAqD;YACrD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,0BAA0B,CAAC;YAC/C,KAAK,IAAI,MAAM,GAAG,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC7C,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,KAAK,CAAC;YACxC,CAAC;YACD,OAAO,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC;YAC1C,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;YAChB,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/D,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,6BAA6B,CAAC;YAC7D,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACpC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7B,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC3C,uEAAuE;YACvE,sEAAsE;YACtE,IAAI,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;YACvB,OAAO,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO,yBAAyB,CAAC;gBACzF,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC9C,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,MAAM,CAAC;gBACxC,MAAM,IAAI,CAAC,CAAC;YACd,CAAC;YACD,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,yBAAyB,CAAC;YAC3D,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QAED,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACzD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;YACrF,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,IAAI,MAAM,GAAG,OAAO,CAAC;gBACrB,OAAO,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBAAE,MAAM,IAAI,CAAC,CAAC;gBAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;gBAC1D,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACpD,MAAM,aAAa,GAAG,GAAG;qBACtB,KAAK,CAAC,cAAc,EAAE,aAAa,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;qBACzD,WAAW,EAAE,CAAC;gBACjB,IAAI,oBAAoB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC5C,OAAO,0CAA0C,CAAC;gBACpD,CAAC;YACH,CAAC;YACD,KAAK,GAAG,OAAO,CAAC;YAChB,SAAS;QACX,CAAC;QAED,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBACjD,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO,OAAO,IAAI,IAAI,CAAC;gBAC1D,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;oBACnB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;oBACxC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;wBACxE,OAAO,2CAA2C,CAAC;oBACrD,CAAC;oBACD,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;oBAClB,SAAS;gBACX,CAAC;YACH,CAAC;YACD,KAAK,GAAG,GAAG,CAAC;YACZ,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACvE,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,SAAS;gBAAE,OAAO,yBAAyB,CAAC;QACjE,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,yBAAyB,CAAC;IACtD,OAAO,EAAE,GAAG,EAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,KAAa;IAC/D,OAAO,8BAA8B,uBAAuB,KAAK,KAAK,OAAO,GAAG,GAAG,CAAC;AACtF,CAAC"}

package/dist/diagram/adapter.d.ts

@@ -17,6 +17,11 @@
  *   "verified before it reaches the artifact".
  * - The fallback text is always emitted, so the diagram's content is available
  *   to assistive technology and to a reader whose adapter is not installed.
+ * - Accepted markup is fitted to the page's Content Security Policy: its
+ *   `<style>` elements are marked to receive the page style nonce, and inline
+ *   `style` attributes, which that policy refuses, are removed and reported.
+ * - Adapter stylesheets are filtered so they cannot load anything, and scoped
+ *   to the diagram's own canvas so they cannot restyle the page.
  */
 import type { JsonValue } from '../json.js';
 export interface DiagramRenderRequest {
@@ -46,10 +51,22 @@ export interface DiagramAdapterResult {
     readonly adapter: string;
     /** Set when the adapter produced output that the trust boundary rejected. */
     readonly rejected?: string;
+    /**
+     * Number of inline `style` attributes removed from accepted markup. The page
+     * policy would refuse them anyway; the count lets the compiler say so.
+     */
+    readonly removedInlineStyles?: number;
+    /**
+     * Token the accepted markup's stylesheets are scoped to. The embedding page
+     * wraps the markup in an element with the class `ak-diagram-canvas` and a
+     * `data-ak-diagram-scope` attribute set to this token.
+     */
+    readonly scope?: string;
 }
 export declare const DIAGRAM_ADAPTER_CONTRACT_VERSION: 1;
 /** Bound on adapter output, so a runaway adapter cannot inflate the artifact. */
 export declare const MAX_DIAGRAM_MARKUP_BYTES: number;
+export { ADAPTER_STYLE_MARKER } from './adapter-markup-fit.js';
 export interface AdapterMarkupCheck {
     readonly ok: boolean;
     readonly reason?: string;