@bestagentkits/render 0.2.0 → 0.3.0

package/dist/spec/asset-references.js

@@ -0,0 +1,93 @@
+/**
+ * Asset references, found through the prop schema.
+ *
+ * A URL prop flagged with `asset` is something the page loads. Walking the
+ * schema alongside the validated props finds every such reference, at any
+ * depth, with the path the author wrote. The compiler uses the same walk to
+ * build the page's network policy and to reject blocked references at
+ * validation, so the two can never disagree about which values are assets.
+ * Child blocks in slots are their own IR nodes and are walked as such.
+ */
+import { pathIndex, pathKey } from '../diagnostics.js';
+import { isPlainObject } from '../json.js';
+import { capabilityAllowed, isRemote, networkAllows, } from './network-policy.js';
+function walk(schema, value, path, field, found) {
+    if (value === undefined)
+        return;
+    switch (schema.kind) {
+        case 'url':
+            if (schema.asset !== undefined && typeof value === 'string') {
+                found.set(path, {
+                    path,
+                    field,
+                    reference: value,
+                    capability: schema.asset,
+                    rejectBlocked: schema.rejectBlocked === true,
+                });
+            }
+            return;
+        case 'list':
+            if (Array.isArray(value)) {
+                value.forEach((item, index) => {
+                    walk(schema.of, item, pathIndex(path, index), field, found);
+                });
+            }
+            return;
+        case 'object':
+            if (isPlainObject(value)) {
+                for (const [key, fieldSchema] of Object.entries(schema.fields)) {
+                    walk(fieldSchema, value[key], pathKey(path, key), key, found);
+                }
+            }
+            return;
+        case 'record':
+            if (isPlainObject(value)) {
+                for (const [key, item] of Object.entries(value)) {
+                    walk(schema.of, item, pathKey(path, key), key, found);
+                }
+            }
+            return;
+        case 'oneOf':
+            // Every option is walked; an option the value does not fit finds nothing,
+            // and the path-keyed map keeps one entry when two options agree.
+            for (const option of schema.options)
+                walk(option, value, path, field, found);
+            return;
+        default:
+            return;
+    }
+}
+/** Every asset reference in a block's validated props, in schema order. */
+export function assetReferences(props, values, path) {
+    const found = new Map();
+    for (const [key, schema] of Object.entries(props)) {
+        walk(schema, values[key], pathKey(path, key), key, found);
+    }
+    return [...found.values()];
+}
+/**
+ * Origins the page's policy must name so its allowed remote assets load.
+ * Provider allowlists are applied by the renderers, which never emit a
+ * reference the policy does not allow.
+ */
+export function assetOrigins(policy, references) {
+    if (policy === 'deny')
+        return [];
+    const origins = [];
+    for (const { reference, capability } of references) {
+        if (!capabilityAllowed(policy, capability) || !/^https?:/iu.test(reference))
+            continue;
+        try {
+            origins.push(new URL(reference).origin);
+        }
+        catch {
+            // A reference that is not a URL is handled by the block renderer, not here.
+        }
+    }
+    return origins;
+}
+/** True when the reference may load: a local path always may, a remote one through its gate. */
+export function assetAllowed(policy, asset) {
+    return !isRemote(asset.reference) || networkAllows(policy, asset.capability, asset.reference, '');
+}
+//# sourceMappingURL=asset-references.js.map

package/dist/spec/asset-references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-references.js","sourceRoot":"","sources":["../../src/spec/asset-references.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,aAAa,EAAkB,MAAM,YAAY,CAAC;AAE3D,OAAO,EACL,iBAAiB,EACjB,QAAQ,EAER,aAAa,GACd,MAAM,qBAAqB,CAAC;AAa7B,SAAS,IAAI,CACX,MAAkB,EAClB,KAA4B,EAC5B,IAAY,EACZ,KAAa,EACb,KAAkC;IAElC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,KAAK;YACR,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5D,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;oBACd,IAAI;oBACJ,KAAK;oBACL,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,MAAM,CAAC,KAAK;oBACxB,aAAa,EAAE,MAAM,CAAC,aAAa,KAAK,IAAI;iBAC7C,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,KAAK,MAAM;YACT,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;oBAC5B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC9D,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,KAAK,QAAQ;YACX,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/D,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YACD,OAAO;QACT,KAAK,QAAQ;YACX,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;YACD,OAAO;QACT,KAAK,OAAO;YACV,0EAA0E;YAC1E,iEAAiE;YACjE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO;gBAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7E,OAAO;QACT;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAC7B,KAA2C,EAC3C,MAA2C,EAC3C,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAqB,EACrB,UAAqC;IAErC,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,UAAU,EAAE,CAAC;QACnD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS;QACtF,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,YAAY,CAAC,MAAqB,EAAE,KAAqB;IACvE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACpG,CAAC"}

package/dist/spec/bounds.d.ts

@@ -24,6 +24,12 @@ export declare const LIMITS: {
     readonly maxStringLength: 2000;
     /** Length of multiline text. */
     readonly maxTextLength: 50000;
+    /** Named datasets; enforced with the dataset's path by `validateDatasets`. */
+    readonly maxDatasets: 20;
+    /** Rows in one dataset or inline `data` list. */
+    readonly maxDatasetRows: 200;
+    /** Distinct fields across one dataset's rows. */
+    readonly maxDatasetFields: 32;
 };
 export interface BoundsReport {
     blocks: number;

package/dist/spec/bounds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bounds.d.ts","sourceRoot":"","sources":["../../src/spec/bounds.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,mBAAmB,CAAC;AAG3E,eAAO,MAAM,MAAM;IACjB,wDAAwD;;IAExD,gEAAgE;;IAEhE,iFAAiF;;IAEjF,6CAA6C;;IAE7C,gCAAgC;;IAEhC,iDAAiD;;IAEjD,sCAAsC;;IAEtC,gCAAgC;;CAExB,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AA4ED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,GAAG,YAAY,CAyC5E"}
+{"version":3,"file":"bounds.d.ts","sourceRoot":"","sources":["../../src/spec/bounds.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,mBAAmB,CAAC;AAG3E,eAAO,MAAM,MAAM;IACjB,wDAAwD;;IAExD,gEAAgE;;IAEhE,iFAAiF;;IAEjF,6CAA6C;;IAE7C,gCAAgC;;IAEhC,iDAAiD;;IAEjD,sCAAsC;;IAEtC,gCAAgC;;IAEhC,8EAA8E;;IAE9E,iDAAiD;;IAEjD,iDAAiD;;CAEzC,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AA4ED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,GAAG,YAAY,CAyC5E"}

package/dist/spec/bounds.js

@@ -6,6 +6,7 @@
  * platform limit, because the same code runs in a CLI, in a library caller, and
  * inside a worker with a bounded memory budget and a request-size ceiling.
  */
+import { DATA_LIMITS } from '../data/dataset-types.js';
 import { pathIndex, pathKey } from '../diagnostics.js';
 import { isPlainObject } from '../json.js';
 export const LIMITS = {
@@ -25,6 +26,12 @@ export const LIMITS = {
     maxStringLength: 2_000,
     /** Length of multiline text. */
     maxTextLength: 50_000,
+    /** Named datasets; enforced with the dataset's path by `validateDatasets`. */
+    maxDatasets: DATA_LIMITS.maxDatasets,
+    /** Rows in one dataset or inline `data` list. */
+    maxDatasetRows: DATA_LIMITS.maxRows,
+    /** Distinct fields across one dataset's rows. */
+    maxDatasetFields: DATA_LIMITS.maxFields,
 };
 function walk(value, path, depth, state) {
     if (depth > state.depth)

package/dist/spec/bounds.js.map

@@ -1 +1 @@
-{"version":3,"file":"bounds.js","sourceRoot":"","sources":["../../src/spec/bounds.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAsB,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,wDAAwD;IACxD,QAAQ,EAAE,EAAE;IACZ,gEAAgE;IAChE,SAAS,EAAE,GAAG;IACd,iFAAiF;IACjF,QAAQ,EAAE,MAAM;IAChB,6CAA6C;IAC7C,kBAAkB,EAAE,SAAS;IAC7B,gCAAgC;IAChC,YAAY,EAAE,GAAG;IACjB,iDAAiD;IACjD,UAAU,EAAE,GAAG;IACf,sCAAsC;IACtC,eAAe,EAAE,KAAK;IACtB,gCAAgC;IAChC,aAAa,EAAE,MAAM;CACb,CAAC;AAgBX,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY,EAAE,KAAa,EAAE,KAAgB;IACzE,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC7C,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvD,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC;QAC9B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,IAAI;YACJ,OAAO,EAAE,kBAAkB,KAAK,0BAA0B,MAAM,CAAC,QAAQ,EAAE;SAC5E,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,aAAa;YAAE,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IAExD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,WAAW;YAAE,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YACvC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,IAAI;gBACJ,OAAO,EAAE,YAAY,KAAK,CAAC,MAAM,oBAAoB,MAAM,CAAC,YAAY,EAAE;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO;IAClC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7D,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC;QAC9B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,IAAI;YACJ,OAAO,EAAE,0BAA0B,MAAM,CAAC,QAAQ,UAAU;SAC7D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBAChE,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC;gBAC/B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBACZ,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,+BAA+B,MAAM,CAAC,SAAS,SAAS;iBAClE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBACZ,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,oBAAoB,KAAK,CAAC,MAAM,sBAAsB,MAAM,CAAC,SAAS,EAAE;iBAClF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,GAAkB;IAC5D,MAAM,KAAK,GAAc;QACvB,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;QACd,GAAG;QACH,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;KAC1D,CAAC;IAEF,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;IAChC,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,eAAe,KAAK,CAAC,KAAK,+BAA+B,MAAM,CAAC,kBAAkB,EAAE;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAE3B,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"bounds.js","sourceRoot":"","sources":["../../src/spec/bounds.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAsB,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,wDAAwD;IACxD,QAAQ,EAAE,EAAE;IACZ,gEAAgE;IAChE,SAAS,EAAE,GAAG;IACd,iFAAiF;IACjF,QAAQ,EAAE,MAAM;IAChB,6CAA6C;IAC7C,kBAAkB,EAAE,SAAS;IAC7B,gCAAgC;IAChC,YAAY,EAAE,GAAG;IACjB,iDAAiD;IACjD,UAAU,EAAE,GAAG;IACf,sCAAsC;IACtC,eAAe,EAAE,KAAK;IACtB,gCAAgC;IAChC,aAAa,EAAE,MAAM;IACrB,8EAA8E;IAC9E,WAAW,EAAE,WAAW,CAAC,WAAW;IACpC,iDAAiD;IACjD,cAAc,EAAE,WAAW,CAAC,OAAO;IACnC,iDAAiD;IACjD,gBAAgB,EAAE,WAAW,CAAC,SAAS;CAC/B,CAAC;AAgBX,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY,EAAE,KAAa,EAAE,KAAgB;IACzE,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC7C,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvD,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC;QAC9B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,IAAI;YACJ,OAAO,EAAE,kBAAkB,KAAK,0BAA0B,MAAM,CAAC,QAAQ,EAAE;SAC5E,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,aAAa;YAAE,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IAExD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,WAAW;YAAE,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YACvC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,IAAI;gBACJ,OAAO,EAAE,YAAY,KAAK,CAAC,MAAM,oBAAoB,MAAM,CAAC,YAAY,EAAE;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO;IAClC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7D,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC;QAC9B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACZ,IAAI,EAAE,mBAAmB;YACzB,IAAI;YACJ,OAAO,EAAE,0BAA0B,MAAM,CAAC,QAAQ,UAAU;SAC7D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;YAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBAChE,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC;gBAC/B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBACZ,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,+BAA+B,MAAM,CAAC,SAAS,SAAS;iBAClE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;gBACpC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBACZ,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,oBAAoB,KAAK,CAAC,MAAM,sBAAsB,MAAM,CAAC,SAAS,EAAE;iBAClF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,GAAkB;IAC5D,MAAM,KAAK,GAAc;QACvB,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC;QACR,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,CAAC;QACd,GAAG;QACH,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;KAC1D,CAAC;IAEF,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;IAChC,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,eAAe,KAAK,CAAC,KAAK,+BAA+B,MAAM,CAAC,kBAAkB,EAAE;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAE3B,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;AACJ,CAAC"}

package/dist/spec/conditions.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `visibleWhen`: show a block only while a page state value matches.
+ *
+ * A condition is data, never an expression: one state path, one operator from
+ * a closed list, and scalar operands. The compiler evaluates it against the
+ * initial `state` so the emitted markup already shows the initial view (with
+ * scripts off, in print and in a screenshot), and the runtime re-evaluates the
+ * same condition after every state change. `evaluateCondition` here and
+ * `evalCondition` in the runtime's state part must agree exactly.
+ */
+import { type DataScalar } from '../data/dataset-types.js';
+import { type DiagnosticBag } from '../diagnostics.js';
+import { type JsonValue } from '../json.js';
+export type Condition = {
+    path: string;
+    op: 'equals' | 'notEquals';
+    value: DataScalar;
+} | {
+    path: string;
+    op: 'in' | 'notIn';
+    value: DataScalar[];
+} | {
+    path: string;
+    op: 'truthy' | 'falsy';
+};
+export declare const CONDITION_OPERATORS: readonly ["equals", "notEquals", "in", "notIn", "truthy", "falsy"];
+/** Values an `in` or `notIn` list may hold. */
+export declare const MAX_CONDITION_VALUES = 20;
+/** JSON Schema for `visibleWhen`: the path plus exactly one operator. */
+export declare const CONDITION_JSON_SCHEMA: Record<string, unknown>;
+/**
+ * Validate an author condition, `{ path: state.metric, equals: cost }`. Exactly
+ * one operator key. A path whose first key is not declared in `state` is a
+ * warning: the condition reads as unset until an action sets it.
+ */
+export declare function validateCondition(value: unknown, path: string, bag: DiagnosticBag, state: Record<string, JsonValue>): Condition | undefined;
+/**
+ * Evaluate a condition against a state snapshot. Strict equality, list
+ * membership by strict equality, and JavaScript truthiness: the same rules
+ * the runtime applies after every state change.
+ */
+export declare function evaluateCondition(condition: Condition, state: Record<string, JsonValue>): boolean;
+//# sourceMappingURL=conditions.d.ts.map

package/dist/spec/conditions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditions.d.ts","sourceRoot":"","sources":["../../src/spec/conditions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,UAAU,EAAgB,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,KAAK,aAAa,EAAsB,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAG3D,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,QAAQ,GAAG,WAAW,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,GAAG,OAAO,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAA;CAAE,CAAC;AAE7C,eAAO,MAAM,mBAAmB,oEAOtB,CAAC;AAGX,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAIvC,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CA0BzD,CAAC;AAmCF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAC/B,SAAS,GAAG,SAAS,CA8DvB;AAYD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,OAAO,CAgBjG"}

package/dist/spec/conditions.js

@@ -0,0 +1,179 @@
+/**
+ * `visibleWhen`: show a block only while a page state value matches.
+ *
+ * A condition is data, never an expression: one state path, one operator from
+ * a closed list, and scalar operands. The compiler evaluates it against the
+ * initial `state` so the emitted markup already shows the initial view (with
+ * scripts off, in print and in a screenshot), and the runtime re-evaluates the
+ * same condition after every state change. `evaluateCondition` here and
+ * `evalCondition` in the runtime's state part must agree exactly.
+ */
+import { isDataScalar } from '../data/dataset-types.js';
+import { pathIndex, pathKey } from '../diagnostics.js';
+import { isPlainObject } from '../json.js';
+import { isSafeStatePath, STATE_PATH_PATTERN } from '../registry/actions.js';
+export const CONDITION_OPERATORS = [
+    'equals',
+    'notEquals',
+    'in',
+    'notIn',
+    'truthy',
+    'falsy',
+];
+/** Values an `in` or `notIn` list may hold. */
+export const MAX_CONDITION_VALUES = 20;
+const CONDITION_KEYS = ['path', ...CONDITION_OPERATORS];
+/** JSON Schema for `visibleWhen`: the path plus exactly one operator. */
+export const CONDITION_JSON_SCHEMA = {
+    type: 'object',
+    description: 'Show the block only while a state value matches. Exactly one operator.',
+    additionalProperties: false,
+    required: ['path'],
+    minProperties: 2,
+    maxProperties: 2,
+    properties: {
+        path: { type: 'string', pattern: STATE_PATH_PATTERN.source },
+        equals: { $ref: '#/$defs/dataScalar' },
+        notEquals: { $ref: '#/$defs/dataScalar' },
+        in: {
+            type: 'array',
+            minItems: 1,
+            maxItems: MAX_CONDITION_VALUES,
+            items: { $ref: '#/$defs/dataScalar' },
+        },
+        notIn: {
+            type: 'array',
+            minItems: 1,
+            maxItems: MAX_CONDITION_VALUES,
+            items: { $ref: '#/$defs/dataScalar' },
+        },
+        truthy: { const: true },
+        falsy: { const: true },
+    },
+};
+function isOperator(key) {
+    return CONDITION_OPERATORS.includes(key);
+}
+function operand(op, value, path, bag) {
+    const fail = (message, at = path) => {
+        bag.add({ code: 'SPEC_VALIDATION_ERROR', path: at, message });
+        return { ok: false };
+    };
+    if (op === 'truthy' || op === 'falsy') {
+        return value === true ? { ok: true } : fail(`"${op}" takes the value true`);
+    }
+    if (op === 'equals' || op === 'notEquals') {
+        return isDataScalar(value)
+            ? { ok: true, value }
+            : fail(`"${op}" takes a string, number, boolean, or null`);
+    }
+    if (!Array.isArray(value) || value.length === 0 || value.length > MAX_CONDITION_VALUES) {
+        return fail(`"${op}" takes a list of 1-${MAX_CONDITION_VALUES} values`);
+    }
+    for (let index = 0; index < value.length; index += 1) {
+        if (!isDataScalar(value[index])) {
+            return fail('expected a string, number, boolean, or null', pathIndex(path, index));
+        }
+    }
+    return { ok: true, value: value };
+}
+/**
+ * Validate an author condition, `{ path: state.metric, equals: cost }`. Exactly
+ * one operator key. A path whose first key is not declared in `state` is a
+ * warning: the condition reads as unset until an action sets it.
+ */
+export function validateCondition(value, path, bag, state) {
+    if (!isPlainObject(value)) {
+        bag.add({
+            code: 'SPEC_VALIDATION_ERROR',
+            path,
+            message: 'expected a condition such as { path: state.view, equals: table }',
+        });
+        return undefined;
+    }
+    let valid = true;
+    for (const key of Object.keys(value)) {
+        if (CONDITION_KEYS.includes(key))
+            continue;
+        valid = false;
+        bag.add({
+            code: 'SPEC_VALIDATION_ERROR',
+            path: pathKey(path, key),
+            message: `unknown condition field "${key}"`,
+            details: { allowed: [...CONDITION_KEYS] },
+        });
+    }
+    const statePath = value.path;
+    const pathAt = pathKey(path, 'path');
+    if (typeof statePath !== 'string' || !isSafeStatePath(statePath)) {
+        valid = false;
+        bag.add({
+            code: 'SPEC_VALIDATION_ERROR',
+            path: pathAt,
+            message: `"${String(statePath)}" is not a state path of the form state.<key>[.<key>...]`,
+        });
+    }
+    const operators = Object.keys(value).filter(isOperator);
+    const op = operators[0];
+    if (operators.length !== 1 || op === undefined) {
+        bag.add({
+            code: 'SPEC_VALIDATION_ERROR',
+            path,
+            message: `a condition needs exactly one operator, found ${operators.length}`,
+            details: { allowed: [...CONDITION_OPERATORS] },
+        });
+        return undefined;
+    }
+    const checked = operand(op, value[op], pathKey(path, op), bag);
+    if (!valid || !checked.ok || typeof statePath !== 'string')
+        return undefined;
+    const firstKey = statePath.split('.')[1] ?? '';
+    if (!Object.hasOwn(state, firstKey)) {
+        bag.add({
+            code: 'SPEC_VALIDATION_ERROR',
+            severity: 'warning',
+            path: pathAt,
+            message: `"state.${firstKey}" is not declared in state, so the condition starts unset`,
+            details: { known: Object.keys(state) },
+        });
+    }
+    if (op === 'truthy' || op === 'falsy')
+        return { path: statePath, op };
+    if (op === 'in' || op === 'notIn') {
+        return { path: statePath, op, value: checked.value };
+    }
+    return { path: statePath, op, value: checked.value };
+}
+/** Read a `state.` path; a missing key reads as undefined, like the runtime's `readPath`. */
+function readStatePath(path, state) {
+    let cursor = state;
+    for (const part of path.split('.').slice(1)) {
+        if (!isPlainObject(cursor))
+            return undefined;
+        cursor = Object.hasOwn(cursor, part) ? cursor[part] : undefined;
+    }
+    return cursor;
+}
+/**
+ * Evaluate a condition against a state snapshot. Strict equality, list
+ * membership by strict equality, and JavaScript truthiness: the same rules
+ * the runtime applies after every state change.
+ */
+export function evaluateCondition(condition, state) {
+    const value = readStatePath(condition.path, state);
+    switch (condition.op) {
+        case 'equals':
+            return value === condition.value;
+        case 'notEquals':
+            return value !== condition.value;
+        case 'in':
+            return condition.value.some((candidate) => candidate === value);
+        case 'notIn':
+            return !condition.value.some((candidate) => candidate === value);
+        case 'truthy':
+            return Boolean(value);
+        case 'falsy':
+            return !value;
+    }
+}
+//# sourceMappingURL=conditions.js.map

package/dist/spec/conditions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conditions.js","sourceRoot":"","sources":["../../src/spec/conditions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAmB,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAsB,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAkB,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAO7E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,QAAQ;IACR,WAAW;IACX,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,OAAO;CACC,CAAC;AAGX,+CAA+C;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC,MAAM,cAAc,GAAsB,CAAC,MAAM,EAAE,GAAG,mBAAmB,CAAC,CAAC;AAE3E,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAA4B;IAC5D,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,wEAAwE;IACrF,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,MAAM,CAAC;IAClB,aAAa,EAAE,CAAC;IAChB,aAAa,EAAE,CAAC;IAChB,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,MAAM,EAAE;QAC5D,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;QACtC,SAAS,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;QACzC,EAAE,EAAE;YACF,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,oBAAoB;YAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;SACtC;QACD,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,CAAC;YACX,QAAQ,EAAE,oBAAoB;YAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;SACtC;QACD,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;QACvB,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;KACvB;CACF,CAAC;AAEF,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAQ,mBAAyC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,OAAO,CACd,EAAqB,EACrB,KAAc,EACd,IAAY,EACZ,GAAkB;IAElB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,GAAG,IAAI,EAAiB,EAAE;QACzD,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC,CAAC;IACF,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QAC1C,OAAO,YAAY,CAAC,KAAK,CAAC;YACxB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;YACrB,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACvF,OAAO,IAAI,CAAC,IAAI,EAAE,uBAAuB,oBAAoB,SAAS,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,6CAA6C,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAqB,EAAE,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAc,EACd,IAAY,EACZ,GAAkB,EAClB,KAAgC;IAEhC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,uBAAuB;YAC7B,IAAI;YACJ,OAAO,EAAE,kEAAkE;SAC5E,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,KAAK,GAAG,KAAK,CAAC;QACd,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;YACxB,OAAO,EAAE,4BAA4B,GAAG,GAAG;YAC3C,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,cAAc,CAAC,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,KAAK,GAAG,KAAK,CAAC;QACd,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,0DAA0D;SACzF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QAC/C,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,uBAAuB;YAC7B,IAAI;YACJ,OAAO,EAAE,iDAAiD,SAAS,CAAC,MAAM,EAAE;YAC5E,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,mBAAmB,CAAC,EAAE;SAC/C,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE7E,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,GAAG,CAAC;YACN,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,UAAU,QAAQ,2DAA2D;YACtF,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACtE,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAqB,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAmB,EAAE,CAAC;AACrE,CAAC;AAED,6FAA6F;AAC7F,SAAS,aAAa,CAAC,IAAY,EAAE,KAAgC;IACnE,IAAI,MAAM,GAA0B,KAAK,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,MAAoC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAoB,EAAE,KAAgC;IACtF,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,QAAQ,SAAS,CAAC,EAAE,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC;QACnC,KAAK,WAAW;YACd,OAAO,KAAK,KAAK,SAAS,CAAC,KAAK,CAAC;QACnC,KAAK,IAAI;YACP,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;QAClE,KAAK,OAAO;YACV,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;QACnE,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,KAAK,OAAO;YACV,OAAO,CAAC,KAAK,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/spec/network-policy.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The network gate for remote references.
+ *
+ * Validation and rendering both decide whether a remote reference may load, so
+ * the decision lives here, below both, and the two can never disagree about
+ * what a page's `policy.network` allows.
+ */
+import type { NetworkPolicy } from '../ir.js';
+/** The capabilities a remote reference can be gated by. */
+export type MediaCapability = 'images' | 'media';
+export declare function isRemote(reference: string): boolean;
+export declare function capabilityAllowed(policy: NetworkPolicy, capability: string): boolean;
+/**
+ * Decide whether a remote reference may be loaded.
+ *
+ * Two gates apply. The capability must be opted into, and when the page declares
+ * a provider allowlist the reference's host must belong to one of those
+ * providers. A block that names a provider itself requires that provider to be
+ * allowlisted, so a spec cannot promote an arbitrary host to trusted by
+ * labelling it "youtube".
+ */
+export declare function networkAllows(policy: NetworkPolicy, capability: MediaCapability, reference: string, provider: string): boolean;
+/**
+ * Why a remote reference was held back. The page may deny the network outright,
+ * leave the capability out, or allow it only for other hosts.
+ */
+export declare function blockedReason(policy: NetworkPolicy, capability: MediaCapability): string;
+/**
+ * True when a still image reference (a poster, for example) may be emitted: a
+ * local path always may, a remote one only through the `images` gate.
+ */
+export declare function imageReferenceAllowed(policy: NetworkPolicy, reference: string): boolean;
+//# sourceMappingURL=network-policy.d.ts.map

package/dist/spec/network-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-policy.d.ts","sourceRoot":"","sources":["../../src/spec/network-policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAG9C,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,CAAC;AAEjD,wBAAgB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAGpF;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,eAAe,EAC3B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAST;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,eAAe,GAAG,MAAM,CAIxF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAEvF"}

package/dist/spec/network-policy.js

@@ -0,0 +1,57 @@
+/**
+ * The network gate for remote references.
+ *
+ * Validation and rendering both decide whether a remote reference may load, so
+ * the decision lives here, below both, and the two can never disagree about
+ * what a page's `policy.network` allows.
+ */
+import { hostMatchesAnyProvider, hostMatchesProvider } from './providers.js';
+export function isRemote(reference) {
+    return /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(reference);
+}
+export function capabilityAllowed(policy, capability) {
+    if (policy === 'deny')
+        return false;
+    return policy.allow.includes(capability);
+}
+/**
+ * Decide whether a remote reference may be loaded.
+ *
+ * Two gates apply. The capability must be opted into, and when the page declares
+ * a provider allowlist the reference's host must belong to one of those
+ * providers. A block that names a provider itself requires that provider to be
+ * allowlisted, so a spec cannot promote an arbitrary host to trusted by
+ * labelling it "youtube".
+ */
+export function networkAllows(policy, capability, reference, provider) {
+    if (!capabilityAllowed(policy, capability))
+        return false;
+    if (policy === 'deny')
+        return false;
+    const declared = policy.providers ?? [];
+    if (provider !== '') {
+        return declared.includes(provider) && hostMatchesProvider(provider, reference);
+    }
+    if (declared.length === 0)
+        return true;
+    return hostMatchesAnyProvider(declared, reference);
+}
+/**
+ * Why a remote reference was held back. The page may deny the network outright,
+ * leave the capability out, or allow it only for other hosts.
+ */
+export function blockedReason(policy, capability) {
+    if (policy === 'deny')
+        return 'the page denies network access';
+    if (!capabilityAllowed(policy, capability))
+        return `the page does not allow remote ${capability}`;
+    return 'its host is not on the page’s provider allowlist';
+}
+/**
+ * True when a still image reference (a poster, for example) may be emitted: a
+ * local path always may, a remote one only through the `images` gate.
+ */
+export function imageReferenceAllowed(policy, reference) {
+    return !isRemote(reference) || networkAllows(policy, 'images', reference, '');
+}
+//# sourceMappingURL=network-policy.js.map

package/dist/spec/network-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-policy.js","sourceRoot":"","sources":["../../src/spec/network-policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAK7E,MAAM,UAAU,QAAQ,CAAC,SAAiB;IACxC,OAAO,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAqB,EAAE,UAAkB;IACzE,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAqB,EACrB,UAA2B,EAC3B,SAAiB,EACjB,QAAgB;IAEhB,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;IACxC,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,sBAAsB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAAqB,EAAE,UAA2B;IAC9E,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,gCAAgC,CAAC;IAC/D,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC;QAAE,OAAO,kCAAkC,UAAU,EAAE,CAAC;IAClG,OAAO,kDAAkD,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAqB,EAAE,SAAiB;IAC5E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC"}

package/dist/spec/normalize.d.ts

@@ -9,6 +9,7 @@
  */
 import { type Diagnostic } from '../diagnostics.js';
 import type { IrDocument } from '../ir.js';
+import type { BlockRegistry } from '../registry/block-module.js';
 import { type BoundsReport } from './bounds.js';
 import { type ParseOptions } from './parse.js';
 export interface NormalizeResult {
@@ -17,13 +18,17 @@ export interface NormalizeResult {
     bounds: BoundsReport;
 }
 export declare const NETWORK_CAPABILITIES: readonly ["media", "fonts", "images"];
+export interface NormalizeOptions extends ParseOptions {
+    /** Internal: the block registry to normalize against. Defaults to the built-in one. */
+    registry?: BlockRegistry;
+}
 /** Build the IR without throwing: diagnostics are returned, not raised. */
-export declare function normalizeSpec(input: unknown, options?: ParseOptions): NormalizeResult;
+export declare function normalizeSpec(input: unknown, options?: NormalizeOptions): NormalizeResult;
 /**
  * Normalize or throw.
  *
  * The thrown error carries the first error's code and path, and lists every
  * diagnostic in `details.diagnostics` so a caller can render a full report.
  */
-export declare function normalize(input: unknown, options?: ParseOptions): IrDocument;
+export declare function normalize(input: unknown, options?: NormalizeOptions): IrDocument;
 //# sourceMappingURL=normalize.d.ts.map

package/dist/spec/normalize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../src/spec/normalize.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,UAAU,EAAqC,MAAM,mBAAmB,CAAC;AAGvF,OAAO,KAAK,EAAE,UAAU,EAAmB,MAAM,UAAU,CAAC;AAO5D,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,aAAa,CAAC;AAG7D,OAAO,EAAE,KAAK,YAAY,EAAa,MAAM,YAAY,CAAC;AAG1D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,UAAU,CAAC;IACf,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,CAAC;CACtB;AAKD,eAAO,MAAM,oBAAoB,uCAAwC,CAAC;AAkmB1E,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,YAAiB,GAAG,eAAe,CA+EzF;AAqBD;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,YAAiB,GAAG,UAAU,CAchF"}
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../src/spec/normalize.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EAAE,KAAK,UAAU,EAAqC,MAAM,mBAAmB,CAAC;AAGvF,OAAO,KAAK,EAAE,UAAU,EAAkC,MAAM,UAAU,CAAC;AAE3E,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,6BAA6B,CAAC;AAS/E,OAAO,EAAE,KAAK,YAAY,EAAuB,MAAM,aAAa,CAAC;AAKrE,OAAO,EAAE,KAAK,YAAY,EAAa,MAAM,YAAY,CAAC;AAG1D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,UAAU,CAAC;IACf,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,CAAC;CACtB;AAMD,eAAO,MAAM,oBAAoB,uCAAwC,CAAC;AAW1E,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IACpD,uFAAuF;IACvF,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAmvBD,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,gBAAqB,GAAG,eAAe,CAyG7F;AAsBD;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,gBAAqB,GAAG,UAAU,CAcpF"}