@changfenhuang/dsh-genui 0.9.8 → 0.9.9

package/lib/index.js

@@ -21,136 +21,8 @@ function wrapSingleComponentRoot(value) {
 	return root;
 }
 //#endregion
-//#region src/client/guard.ts
-/** Hard resource limits enforced by repair (and mirrored at render time). */
-const GENUI_LIMITS = {
-	/** Maximum nesting depth of the component tree. */
-	maxDepth: 8,
-	/** Maximum total nodes across the whole spec. */
-	maxNodes: 200,
-	/** Maximum length of any plain string field. */
-	maxString: 2e3,
-	/** Maximum length of a `code` body. */
-	maxCode: 12e3,
-	/** Maximum length of a mermaid source. */
-	maxMermaid: 8e3,
-	/** Maximum `grid` columns. */
-	maxGridCols: 12,
-	/** Maximum `tabs` count. */
-	maxTabs: 12,
-	/** Maximum `accordion` items. */
-	maxAccordionItems: 24,
-	/** Maximum `list` items. */
-	maxListItems: 50,
-	/** Maximum `select`/`radio` options. */
-	maxOptions: 50,
-	/** Maximum `table` rows / columns. */
-	maxTableRows: 50,
-	maxTableCols: 12,
-	/** Maximum `chart` data points per series. */
-	maxChartPoints: 60,
-	/** Maximum `plot` series and per-series parameters. */
-	maxPlotSeries: 8,
-	maxPlotParams: 6,
-	/** Maximum `scene3d` meshes. */
-	maxMeshes: 5,
-	/** Maximum `quiz` options. */
-	maxQuizOptions: 8,
-	/** Maximum `steps` / `timeline` / `breadcrumb` / `keyvalue` entries. */
-	maxSteps: 24,
-	maxTimelineItems: 24,
-	maxBreadcrumbItems: 12,
-	maxKeyValuePairs: 24,
-	/** Maximum `file-tree` nesting. */
-	maxTreeDepth: 6,
-	/** Maximum `diagram` nodes / edges / zones / focal accents (editorial
-	* complexity budget, mirroring diagram-design's §7 limits). */
-	maxDiagramNodes: 9,
-	maxDiagramEdges: 12,
-	maxDiagramZones: 3,
-	maxDiagramFocal: 2,
-	maxDiagramLabel: 14,
-	/** Maximum depth of an `echart` option object (prevents pathological nested
-	* ECharts configs from stalling the guard walk). */
-	maxEChartOptionDepth: 10,
-	/** Maximum length of any single array inside an `echart` option (prevents
-	* a model from stalling rendering with `series.data` of hundreds of
-	* thousands of points). */
-	maxEChartArrayLen: 500,
-	/** Maximum total entries (object keys + array elements) traversed while
-	* sanitizing an `echart` option. Bounds the walk so a pathologically
-	* large option object cannot stall the guard. */
-	maxEChartOptionNodes: 2e3
-};
-/** Is `v` one of `values`? (enum guard) */
-function inEnum(v, values) {
-	return typeof v === "string" && values.includes(v);
-}
-/** String field: truncate a string to `cap`, or undefined when not a string. */
-function str(v, cap) {
-	return typeof v === "string" ? v.slice(0, cap) : void 0;
-}
-/**
-* Color field: the value lands in an inline `style` (background/stroke) or
-* THREE.Color. Arbitrary CSS values are an exfiltration channel — a model
-* (or a hostile spec) could emit `url(https://attacker/track?...)` and the
-* browser would fetch it. Only formats that name a color pass: hex, rgb/hsl
-* functions, and host design tokens (`var(--dsw-*)`). Anything else degrades
-* to the component's default palette.
-*/
-const SAFE_COLOR_RE = /^(?:#[\da-fA-F]{3,8}|rgba?\([^)]{0,64}\)|hsla?\([^)]{0,64}\)|var\(--dsw-[\w-]+(?:,\s*#[0-9a-fA-F]{3,8})?\))$/;
-function color(v) {
-	if (typeof v !== "string") return void 0;
-	const s = v.trim();
-	return s.length <= 64 && SAFE_COLOR_RE.test(s) ? s : void 0;
-}
-/**
-* Link target field: only http(s) and mailto survive. `javascript:`/`data:`
-* and every other scheme degrade to a plain-text node — the model's link is
-* display, not an execution channel.
-*/
-function safeHref(v) {
-	if (typeof v !== "string") return void 0;
-	const s = v.trim();
-	if (s.length > 2048) return void 0;
-	return /^https?:\/\//i.test(s) || /^mailto:[^@\s]+@[^@\s]+$/i.test(s) ? s : void 0;
-}
-/** Media loads bytes, so accept only browser-reachable http(s) or same-origin
-* relative paths. Active/local schemes and protocol-relative URLs are
-* rejected. The renderer always keeps playback user-controlled. */
-function safeMediaSrc(v) {
-	if (typeof v !== "string") return void 0;
-	const s = v.trim();
-	if (s === "" || s.length > 2048) return void 0;
-	if (/^https?:\/\//i.test(s)) return s;
-	if (/^[a-z][a-z0-9+.-]*:/i.test(s) || /^[/\\]{2}/.test(s)) return void 0;
-	return s;
-}
-/** Finite-number field: clamp into [min, max], or undefined when not finite. */
-function num(v, min, max) {
-	return typeof v === "number" && Number.isFinite(v) ? Math.min(max, Math.max(min, v)) : void 0;
-}
-/** Integer field: clamp into [min, max], or undefined when not a finite integer. */
-function int(v, min, max) {
-	return typeof v === "number" && Number.isFinite(v) ? Math.min(max, Math.max(min, Math.trunc(v))) : void 0;
-}
-/** Optional enum field: the value when it matches, otherwise undefined. */
-function enu(v, values) {
-	return inEnum(v, values) ? v : void 0;
-}
-/** Plain object (not array, not null). */
-function obj$1(v) {
-	return typeof v === "object" && v !== null && !Array.isArray(v) ? v : void 0;
-}
-/**
-* Optional-field spread helper. `exactOptionalPropertyTypes` forbids
-* `{ gap: number | undefined }`; computing the value into a const first and
-* spreading `opt('gap', g)` keeps every optional field either absent or a
-* plain value.
-*/
-function opt(key, value) {
-	return value === void 0 ? {} : { [key]: value };
-}
+//#region src/client/genui-runtime/schema.ts
+/** Canonical enum domains shared by schema validation and repair. */
 const TEXT_SIZES = [
 	"h1",
 	"h2",
@@ -174,7 +46,8 @@ const BADGE_TONES = [
 const INPUT_TYPES = [
 	"text",
 	"email",
-	"password"
+	"password",
+	"color"
 ];
 const CALLOUT_TONES = [
 	"info",
@@ -267,6 +140,880 @@ const ECHART_PRESETS = [
 	"pie",
 	"scatter"
 ];
+const schema = (required, fields, aliases = {}, options = {}) => {
+	const optional = Object.fromEntries(Object.entries(fields).filter(([field]) => field !== "type" && !required.includes(field)));
+	const oneOfRequired = options.oneOfRequired ?? [];
+	const conditionalRequired = options.conditionalRequired ?? [];
+	return {
+		required,
+		fields,
+		optional,
+		aliases,
+		oneOfRequired,
+		conditionalRequired,
+		rules: [...oneOfRequired.map((fieldsInRule) => ({
+			kind: "one-of-required",
+			fields: fieldsInRule
+		})), ...conditionalRequired],
+		enums: options.enums ?? {},
+		nested: options.nested ?? {},
+		...options.validator === void 0 ? {} : { validator: options.validator }
+	};
+};
+const recordSchema = (required, fields, nested = {}, enums = {}) => ({
+	required,
+	fields,
+	enums,
+	nested
+});
+const nodeFields = { type: "string" };
+const chartDatumSchema = recordSchema(["label", "value"], {
+	label: "string",
+	value: "number",
+	color: "string"
+});
+const chartSeriesSchema = recordSchema(["label", "data"], {
+	label: "string",
+	color: "string",
+	data: "array"
+}, { data: chartDatumSchema });
+const stepsRecordSchema = recordSchema(["title"], {
+	title: "string",
+	desc: "string"
+});
+const keyValueRecordSchema = recordSchema(["key", "value"], {
+	key: "string",
+	value: "string"
+});
+const timelineRecordSchema = recordSchema(["title"], {
+	title: "string",
+	desc: "string",
+	time: "string"
+});
+const diffRecordSchema = recordSchema(["path", "newText"], {
+	path: "string",
+	oldText: "string-or-null",
+	newText: "string"
+});
+const plotSeriesSchema = recordSchema(["expr"], {
+	expr: "string",
+	label: "string",
+	color: "string",
+	kind: "string",
+	params: "array"
+}, { params: recordSchema(["name", "value"], {
+	name: "string",
+	value: "number",
+	min: "number",
+	max: "number",
+	step: "number",
+	animateTo: "number",
+	durationMs: "number",
+	loop: "boolean"
+}) }, { kind: PLOT_KINDS });
+const sceneMeshSchema = recordSchema(["shape"], {
+	shape: "string",
+	color: "string",
+	position: "array",
+	rotation: "array",
+	scale: "unknown",
+	size: "unknown"
+}, {}, { shape: MESH_SHAPES });
+function fileTreeRecordSchema(depth) {
+	return recordSchema(["name"], {
+		name: "string",
+		type: "string",
+		children: "array"
+	}, depth > 0 ? { children: fileTreeRecordSchema(depth - 1) } : {}, { type: FILE_TYPES });
+}
+const fileTreeNodeSchema = fileTreeRecordSchema(6);
+const tabHolderSchema = recordSchema(["label", "items"], {
+	label: "string",
+	items: "nodes",
+	content: "nodes"
+});
+const accordionHolderSchema = recordSchema(["title", "items"], {
+	title: "string",
+	items: "nodes"
+});
+const diagramNodeSchema = recordSchema(["id", "label"], {
+	id: "string",
+	label: "string",
+	sub: "string",
+	type: "string",
+	x: "number",
+	y: "number",
+	w: "number",
+	h: "number",
+	tag: "string"
+}, {}, { type: DIAGRAM_NODE_TYPES });
+const diagramEdgeSchema = recordSchema(["from", "to"], {
+	from: "string",
+	to: "string",
+	label: "string",
+	kind: "string",
+	route: "string"
+}, {}, {
+	kind: DIAGRAM_EDGE_KINDS,
+	route: DIAGRAM_ROUTES
+});
+const diagramZoneSchema = recordSchema(["label"], {
+	label: "string",
+	x: "number",
+	y: "number",
+	w: "number",
+	h: "number"
+});
+const diagramThemeSchema = recordSchema([], {
+	paper: "string",
+	"paper-2": "string",
+	ink: "string",
+	muted: "string",
+	soft: "string",
+	rule: "string",
+	accent: "string",
+	"accent-tint": "string",
+	link: "string"
+});
+/** Root GenUI specification metadata used by diagnostics. */
+const GENUI_SPEC_SCHEMA = schema(["items"], {
+	title: "string",
+	gap: "number",
+	panel: "boolean",
+	append: "boolean",
+	items: "nodes"
+});
+/**
+* Native component field metadata.
+*
+* This is intentionally explicit rather than inferred from TypeScript
+* interfaces: the registry is also consumed at runtime by normalization and
+* diagnostics, where erased interfaces are unavailable.
+*/
+const COMPONENT_SCHEMAS = {
+	accordion: schema(["items"], {
+		...nodeFields,
+		items: "array"
+	}, {}, { nested: { items: accordionHolderSchema } }),
+	audio: schema(["src"], {
+		...nodeFields,
+		src: "string",
+		alt: "string",
+		loop: "boolean"
+	}),
+	avatar: schema(["name"], {
+		...nodeFields,
+		name: "string",
+		color: "string"
+	}),
+	badge: schema(["label"], {
+		...nodeFields,
+		label: "string",
+		tone: "string",
+		icon: "string"
+	}, {
+		text: "label",
+		value: "label"
+	}, { enums: { tone: BADGE_TONES } }),
+	breadcrumb: schema(["items"], {
+		...nodeFields,
+		items: "array"
+	}),
+	button: schema(["label"], {
+		...nodeFields,
+		label: "string",
+		tone: "string",
+		full: "boolean",
+		small: "boolean",
+		icon: "string",
+		action: "string"
+	}, {}, { enums: { tone: BUTTON_TONES } }),
+	callout: schema(["content"], {
+		...nodeFields,
+		title: "string",
+		content: "string",
+		tone: "string"
+	}, { kind: "tone" }, { enums: { tone: CALLOUT_TONES } }),
+	card: schema(["items"], {
+		...nodeFields,
+		title: "string",
+		items: "nodes"
+	}, {
+		label: "title",
+		content: "items"
+	}),
+	chart: schema([], {
+		...nodeFields,
+		kind: "string",
+		data: "array",
+		series: "array"
+	}, {}, {
+		oneOfRequired: [["data", "series"]],
+		conditionalRequired: [{
+			kind: "required-if",
+			when: {
+				field: "kind",
+				equals: "line"
+			},
+			required: ["data"]
+		}, {
+			kind: "required-if",
+			when: {
+				field: "kind",
+				equals: "donut"
+			},
+			required: ["data"]
+		}],
+		nested: {
+			data: chartDatumSchema,
+			series: chartSeriesSchema
+		},
+		enums: { kind: CHART_KINDS },
+		validator: { name: "chart-renderability" }
+	}),
+	checkbox: schema(["label"], {
+		...nodeFields,
+		label: "string",
+		checked: "boolean",
+		action: "string",
+		group: "string"
+	}),
+	code: schema(["code"], {
+		...nodeFields,
+		lang: "string",
+		code: "string"
+	}),
+	col: schema(["items"], {
+		...nodeFields,
+		items: "nodes",
+		gap: "number"
+	}),
+	copy: schema(["text"], {
+		...nodeFields,
+		label: "string",
+		text: "string"
+	}),
+	diagram: schema(["kind", "nodes"], {
+		...nodeFields,
+		kind: "string",
+		variant: "string",
+		title: "string",
+		nodes: "array",
+		edges: "array",
+		zones: "array",
+		theme: "object"
+	}, {}, {
+		nested: {
+			nodes: diagramNodeSchema,
+			edges: diagramEdgeSchema,
+			zones: diagramZoneSchema,
+			theme: diagramThemeSchema
+		},
+		enums: {
+			kind: DIAGRAM_KINDS,
+			variant: DIAGRAM_VARIANTS
+		}
+	}),
+	diff: schema(["diffs"], {
+		...nodeFields,
+		diffs: "array"
+	}, {}, { nested: { diffs: diffRecordSchema } }),
+	divider: schema([], nodeFields),
+	echart: schema([], {
+		...nodeFields,
+		title: "string",
+		height: "number",
+		preset: "string",
+		data: "array",
+		series: "array",
+		option: "object"
+	}, {}, {
+		oneOfRequired: [[
+			"option",
+			"data",
+			"series"
+		]],
+		enums: { preset: ECHART_PRESETS }
+	}),
+	"file-tree": schema(["items"], {
+		...nodeFields,
+		items: "array"
+	}, {}, { nested: { items: fileTreeNodeSchema } }),
+	grid: schema(["items"], {
+		...nodeFields,
+		cols: "number",
+		items: "nodes"
+	}),
+	image: schema(["src"], {
+		...nodeFields,
+		src: "string",
+		alt: "string"
+	}),
+	input: schema([], {
+		...nodeFields,
+		label: "string",
+		placeholder: "string",
+		value: "string",
+		inputType: "string",
+		action: "string",
+		id: "string"
+	}, {}, { enums: { inputType: INPUT_TYPES } }),
+	json: schema(["value"], {
+		...nodeFields,
+		value: "unknown"
+	}),
+	keyvalue: schema(["pairs"], {
+		...nodeFields,
+		pairs: "array"
+	}, {}, { nested: { pairs: keyValueRecordSchema } }),
+	link: schema(["label"], {
+		...nodeFields,
+		label: "string",
+		href: "string"
+	}),
+	list: schema(["items"], {
+		...nodeFields,
+		items: "array"
+	}),
+	mermaid: schema(["code"], {
+		...nodeFields,
+		code: "string"
+	}),
+	plot: schema(["series"], {
+		...nodeFields,
+		series: "array",
+		xMin: "number",
+		xMax: "number",
+		yMin: "number",
+		yMax: "number",
+		title: "string"
+	}, {}, { nested: { series: plotSeriesSchema } }),
+	progress: schema(["value"], {
+		...nodeFields,
+		value: "number",
+		label: "string",
+		valueLabel: "string"
+	}),
+	quiz: schema(["question", "options"], {
+		...nodeFields,
+		question: "string",
+		options: "array",
+		explanation: "string",
+		id: "string",
+		action: "string"
+	}),
+	radio: schema(["options"], {
+		...nodeFields,
+		label: "string",
+		options: "array",
+		selected: "number",
+		action: "string",
+		group: "string",
+		answer: "unknown",
+		explanation: "string"
+	}),
+	row: schema(["items"], {
+		...nodeFields,
+		items: "nodes",
+		wrap: "boolean",
+		spacer: "boolean"
+	}),
+	scene3d: schema(["meshes"], {
+		...nodeFields,
+		title: "string",
+		meshes: "array",
+		ambient: "number",
+		background: "string"
+	}, {}, { nested: { meshes: sceneMeshSchema } }),
+	select: schema(["options"], {
+		...nodeFields,
+		label: "string",
+		options: "array",
+		action: "string",
+		selected: "number",
+		id: "string"
+	}),
+	slider: schema([], {
+		...nodeFields,
+		label: "string",
+		min: "number",
+		max: "number",
+		step: "number",
+		value: "number",
+		action: "string",
+		id: "string"
+	}),
+	spacer: schema([], nodeFields),
+	stat: schema(["label", "value"], {
+		...nodeFields,
+		label: "string",
+		value: "string",
+		delta: "string"
+	}),
+	steps: schema(["steps"], {
+		...nodeFields,
+		steps: "array",
+		current: "number"
+	}, { items: "steps" }, { nested: { steps: stepsRecordSchema } }),
+	submit: schema(["label"], {
+		...nodeFields,
+		label: "string",
+		action: "string",
+		resetAction: "string",
+		groups: "array"
+	}),
+	switch: schema(["label"], {
+		...nodeFields,
+		label: "string",
+		checked: "boolean",
+		action: "string"
+	}),
+	table: schema(["columns", "rows"], {
+		...nodeFields,
+		columns: "array",
+		rows: "array"
+	}, {
+		headers: "columns",
+		data: "rows"
+	}),
+	tabs: schema(["tabs"], {
+		...nodeFields,
+		tabs: "array"
+	}, {}, { nested: { tabs: tabHolderSchema } }),
+	text: schema(["content"], {
+		...nodeFields,
+		content: "string",
+		size: "string",
+		center: "boolean"
+	}, { text: "content" }, { enums: { size: TEXT_SIZES } }),
+	textarea: schema([], {
+		...nodeFields,
+		label: "string",
+		placeholder: "string",
+		rows: "number",
+		value: "string",
+		action: "string",
+		id: "string"
+	}),
+	timeline: schema(["items"], {
+		...nodeFields,
+		items: "array"
+	}, {}, { nested: { items: timelineRecordSchema } }),
+	video: schema(["src"], {
+		...nodeFields,
+		src: "string",
+		alt: "string",
+		poster: "string",
+		loop: "boolean",
+		muted: "boolean",
+		aspectRatio: "string"
+	}, {}, { enums: { aspectRatio: MEDIA_ASPECT_RATIOS } })
+};
+const GENUI_NATIVE_TYPES = new Set(Object.keys(COMPONENT_SCHEMAS));
+//#endregion
+//#region src/client/genui-runtime/normalize.ts
+/** Deterministic GenUI alias and structural normalization. */
+function record$1(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function isNode$1(value) {
+	const candidate = record$1(value);
+	return candidate !== void 0 && typeof candidate.type === "string";
+}
+function normalizeAliasFields(value, path, type, warnings) {
+	const definition = COMPONENT_SCHEMAS[type];
+	if (definition === void 0) return value;
+	const out = { ...value };
+	for (const [alias, canonical] of Object.entries(definition.aliases)) {
+		if (!(alias in out)) continue;
+		const aliasPath = `${path}.${alias}`;
+		const keptCanonical = canonical in out;
+		if (!keptCanonical) out[canonical] = out[alias];
+		delete out[alias];
+		warnings.push({
+			kind: "alias",
+			path: aliasPath,
+			message: keptCanonical ? `${aliasPath} is ignored because canonical field '${canonical}' is present` : `${aliasPath} normalized/adopted as '${canonical}'`,
+			type,
+			field: alias,
+			canonical
+		});
+	}
+	return out;
+}
+function normalizeNode(value, path, warnings) {
+	if (!isNode$1(value)) return value;
+	const type = value.type;
+	if (COMPONENT_SCHEMAS[type] === void 0) return value;
+	const out = normalizeAliasFields(value, path, type, warnings);
+	const normalizeNodeValue = (child, childPath) => normalizeNode(child, childPath, warnings);
+	const normalizeNodeArray = (children, childPath) => Array.isArray(children) ? children.map((child, index) => normalizeNodeValue(child, `${childPath}[${index}]`)) : children;
+	if (type === "row" || type === "col" || type === "grid" || type === "card" || type === "file-tree" || type === "timeline" || type === "breadcrumb") {
+		if (type !== "file-tree" && type !== "timeline" && type !== "breadcrumb") out.items = normalizeNodeArray(out.items, `${path}.items`);
+	} else if (type === "list" && Array.isArray(out.items)) out.items = out.items.map((child, index) => isNode$1(child) ? normalizeNodeValue(child, `${path}.items[${index}]`) : child);
+	else if (type === "tabs" && Array.isArray(out.tabs)) out.tabs = out.tabs.map((tab, index) => {
+		const holder = record$1(tab);
+		if (holder === void 0) return tab;
+		const normalizedHolder = { ...holder };
+		if ("content" in normalizedHolder) {
+			const tabPath = `${path}.tabs[${index}].content`;
+			const hasItems = "items" in normalizedHolder;
+			if (!hasItems) normalizedHolder.items = normalizedHolder.content;
+			delete normalizedHolder.content;
+			warnings.push({
+				kind: "alias",
+				path: tabPath,
+				message: hasItems ? `${tabPath} is ignored because canonical field 'items' is present` : `${tabPath} normalized/adopted as 'items'`,
+				type,
+				field: "content",
+				canonical: "items"
+			});
+		}
+		normalizedHolder.items = Array.isArray(normalizedHolder.items) ? normalizedHolder.items.map((child, childIndex) => normalizeNodeValue(child, `${path}.tabs[${index}].items[${childIndex}]`)) : normalizedHolder.items === void 0 ? normalizedHolder.items : [normalizeNodeValue(normalizedHolder.items, `${path}.tabs[${index}].items[0]`)];
+		return normalizedHolder;
+	});
+	else if (type === "accordion" && Array.isArray(out.items)) out.items = out.items.map((item, index) => {
+		const holder = record$1(item);
+		if (holder === void 0) return item;
+		return {
+			...holder,
+			items: Array.isArray(holder.items) ? holder.items.map((child, childIndex) => normalizeNodeValue(child, `${path}.items[${index}].items[${childIndex}]`)) : holder.items
+		};
+	});
+	return out;
+}
+/**
+* Normalize a raw GenUI value into canonical field names.
+*
+* Only deterministic aliases and structural aliases are changed. Resource
+* limits, type repair, security filtering, and semantic validation remain in
+* the guard layer. Unknown component types are returned opaque.
+*
+* @param value - Raw GenUI spec or bare native component.
+* @returns Canonical value and stable alias diagnostics.
+*/
+function normalizeGenuiSpec(value) {
+	const warnings = [];
+	const root = record$1(value);
+	if (root === void 0) return {
+		value,
+		warnings
+	};
+	const out = { ...root };
+	if (Array.isArray(out.items)) out.items = out.items.map((item, index) => normalizeNode(item, `items[${index}]`, warnings));
+	else if (typeof out.type === "string") return {
+		value: normalizeNode(out, "spec", warnings),
+		warnings
+	};
+	return {
+		value: out,
+		warnings
+	};
+}
+//#endregion
+//#region src/client/genui-runtime/diagnostics.ts
+/** GenUI runtime diagnostics for aliases and unknown fields. */
+function record(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function isNode(value) {
+	const candidate = record(value);
+	return candidate !== void 0 && typeof candidate.type === "string";
+}
+function visitNativeNodes(value, path, visit) {
+	if (!isNode(value)) return;
+	const type = value.type;
+	const definition = COMPONENT_SCHEMAS[type];
+	if (definition === void 0) return;
+	visit(value, path, definition);
+	const children = (child, childPath) => visitNativeNodes(child, childPath, visit);
+	if ((type === "row" || type === "col" || type === "grid" || type === "card") && Array.isArray(value.items)) value.items.forEach((child, index) => children(child, `${path}.items[${index}]`));
+	else if (type === "list" && Array.isArray(value.items)) value.items.forEach((child, index) => children(child, `${path}.items[${index}]`));
+	else if (type === "tabs" && Array.isArray(value.tabs)) value.tabs.forEach((tab, index) => {
+		const holder = record(tab);
+		if (holder === void 0) return;
+		if (Array.isArray(holder.items)) holder.items.forEach((child, childIndex) => children(child, `${path}.tabs[${index}].items[${childIndex}]`));
+		else children(holder.items, `${path}.tabs[${index}].items`);
+	});
+	else if (type === "accordion" && Array.isArray(value.items)) value.items.forEach((item, index) => {
+		const holder = record(item);
+		if (holder?.items !== void 0 && Array.isArray(holder.items)) holder.items.forEach((child, childIndex) => children(child, `${path}.items[${index}].items[${childIndex}]`));
+	});
+}
+function pushUnknownField(warnings, path, field, type) {
+	warnings.push({
+		kind: "unknown-field",
+		path: `${path}.${field}`,
+		message: `${path}.${field}: unknown field for '${type}'`,
+		type,
+		field
+	});
+}
+function diagnoseRecordFields(value, path, definition, type, warnings) {
+	const holder = record(value);
+	if (holder === void 0) return;
+	for (const field of Object.keys(holder)) {
+		if (field in definition.fields) continue;
+		pushUnknownField(warnings, path, field, type);
+	}
+	for (const [field, nested] of Object.entries(definition.nested)) {
+		const nestedValue = holder[field];
+		if (Array.isArray(nestedValue)) nestedValue.forEach((item, index) => diagnoseRecordFields(item, `${path}.${field}[${index}]`, nested, type, warnings));
+		else if (nestedValue !== void 0) diagnoseRecordFields(nestedValue, `${path}.${field}`, nested, type, warnings);
+	}
+}
+function diagnoseNestedFields(node, path, definition, warnings) {
+	for (const [field, nested] of Object.entries(definition.nested)) {
+		const nestedValue = node[field];
+		if (Array.isArray(nestedValue)) nestedValue.forEach((item, index) => diagnoseRecordFields(item, `${path}.${field}[${index}]`, nested, node.type, warnings));
+		else if (nestedValue !== void 0) diagnoseRecordFields(nestedValue, `${path}.${field}`, nested, node.type, warnings);
+	}
+}
+/**
+* Diagnose unknown direct fields on native nodes.
+*
+* Unknown types are intentionally skipped so custom renderers retain their
+* opaque extension payloads. Native unknown fields are warnings, not errors.
+*
+* @param value - Canonical or raw GenUI value.
+* @returns Stable field diagnostics in tree order.
+*/
+function diagnoseUnknownGenuiFields(value) {
+	const warnings = [];
+	const root = record(value);
+	if (root === void 0) return warnings;
+	const visit = (node, path, definition) => {
+		for (const field of Object.keys(node)) {
+			if (field === "type" || field in definition.fields) continue;
+			pushUnknownField(warnings, path, field, node.type);
+		}
+		diagnoseNestedFields(node, path, definition, warnings);
+	};
+	if (Array.isArray(root.items)) {
+		for (const field of Object.keys(root)) {
+			if (field in GENUI_SPEC_SCHEMA.fields) continue;
+			pushUnknownField(warnings, "spec", field, "spec");
+		}
+		root.items.forEach((item, index) => visitNativeNodes(item, `items[${index}]`, visit));
+	} else if (typeof root.type === "string") visitNativeNodes(root, "spec", visit);
+	else for (const field of Object.keys(root)) {
+		if (field in GENUI_SPEC_SCHEMA.fields) continue;
+		pushUnknownField(warnings, "spec", field, "spec");
+	}
+	return warnings;
+}
+//#endregion
+//#region src/client/genui-runtime/limits.ts
+/** Resource limits shared by GenUI repair, validation, and rendering. */
+const GENUI_LIMITS = {
+	/** Maximum nesting depth of the component tree. */
+	maxDepth: 8,
+	/** Maximum total nodes across the whole spec. */
+	maxNodes: 200,
+	/** Maximum length of any plain string field. */
+	maxString: 2e3,
+	/** Maximum length of a `code` body. */
+	maxCode: 12e3,
+	/** Maximum length of a mermaid source. */
+	maxMermaid: 8e3,
+	/** Maximum `grid` columns. */
+	maxGridCols: 12,
+	/** Maximum `tabs` count. */
+	maxTabs: 12,
+	/** Maximum `accordion` items. */
+	maxAccordionItems: 24,
+	/** Maximum `list` items. */
+	maxListItems: 50,
+	/** Maximum `select`/`radio` options. */
+	maxOptions: 50,
+	/** Maximum `table` rows / columns. */
+	maxTableRows: 50,
+	maxTableCols: 12,
+	/** Maximum `chart` data points per series. */
+	maxChartPoints: 60,
+	/** Maximum `plot` series and per-series parameters. */
+	maxPlotSeries: 8,
+	maxPlotParams: 6,
+	/** Maximum `scene3d` meshes. */
+	maxMeshes: 5,
+	/** Maximum `quiz` options. */
+	maxQuizOptions: 8,
+	/** Maximum `steps` / `timeline` / `breadcrumb` / `keyvalue` entries. */
+	maxSteps: 24,
+	maxTimelineItems: 24,
+	maxBreadcrumbItems: 12,
+	maxKeyValuePairs: 24,
+	/** Maximum `file-tree` nesting. */
+	maxTreeDepth: 6,
+	/** Maximum `diagram` nodes / edges / zones / focal accents. */
+	maxDiagramNodes: 9,
+	maxDiagramEdges: 12,
+	maxDiagramZones: 3,
+	maxDiagramFocal: 2,
+	maxDiagramLabel: 14,
+	/** Maximum depth of an `echart` option object. */
+	maxEChartOptionDepth: 10,
+	/** Maximum length of any single array inside an `echart` option. */
+	maxEChartArrayLen: 500,
+	/** Maximum entries traversed while sanitizing an `echart` option. */
+	maxEChartOptionNodes: 2e3
+};
+//#endregion
+//#region src/client/genui-runtime/value-utils.ts
+/** Shared primitive sanitizers used by the GenUI guard. */
+/** Is `value` one of `values`? */
+function inEnum(value, values) {
+	return typeof value === "string" && values.includes(value);
+}
+/** String field: truncate a string to `cap`, or undefined when not a string. */
+function str(value, cap) {
+	return typeof value === "string" ? value.slice(0, cap) : void 0;
+}
+/**
+* Color field: the value lands in an inline `style` (background/stroke) or
+* THREE.Color. Arbitrary CSS values are an exfiltration channel, so only
+* literal color formats and host design tokens are accepted.
+*/
+const SAFE_COLOR_RE = /^(?:#[\da-fA-F]{3,8}|rgba?\([^)]{0,64}\)|hsla?\([^)]{0,64}\)|var\(--dsw-[\w-]+(?:,\s*#[0-9a-fA-F]{3,8})?\))$/;
+function color(value) {
+	if (typeof value !== "string") return void 0;
+	const normalized = value.trim();
+	return normalized.length <= 64 && SAFE_COLOR_RE.test(normalized) ? normalized : void 0;
+}
+/** Keep only http(s) and mailto link targets. */
+function safeHref(value) {
+	if (typeof value !== "string") return void 0;
+	const normalized = value.trim();
+	if (normalized.length > 2048) return void 0;
+	return /^https?:\/\//i.test(normalized) || /^mailto:[^@\s]+@[^@\s]+$/i.test(normalized) ? normalized : void 0;
+}
+/** Keep browser-reachable http(s) or same-origin relative media paths. */
+function safeMediaSrc(value) {
+	if (typeof value !== "string") return void 0;
+	const normalized = value.trim();
+	if (normalized === "" || normalized.length > 2048) return void 0;
+	if (/^https?:\/\//i.test(normalized)) return normalized;
+	if (/^[a-z][a-z0-9+.-]*:/i.test(normalized) || /^[/\\]{2}/.test(normalized)) return void 0;
+	return normalized;
+}
+/** Finite-number field: clamp into [min, max], or undefined when not finite. */
+function num(value, min, max) {
+	return typeof value === "number" && Number.isFinite(value) ? Math.min(max, Math.max(min, value)) : void 0;
+}
+/** Integer field: clamp into [min, max], or undefined when not a finite number. */
+function int(value, min, max) {
+	return typeof value === "number" && Number.isFinite(value) ? Math.min(max, Math.max(min, Math.trunc(value))) : void 0;
+}
+/** Optional enum field: the value when it matches, otherwise undefined. */
+function enu(value, values) {
+	return inEnum(value, values) ? value : void 0;
+}
+/** Plain object (not array, not null). */
+function obj(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+/** Preserve an optional field only when its value exists. */
+function opt(key, value) {
+	return value === void 0 ? {} : { [key]: value };
+}
+//#endregion
+//#region src/client/guard.ts
+function fieldKindMatches(value, kind) {
+	switch (kind) {
+		case "string": return typeof value === "string";
+		case "string-or-null": return value === null || typeof value === "string";
+		case "number": return typeof value === "number" && Number.isFinite(value);
+		case "boolean": return typeof value === "boolean";
+		case "nodes": return Array.isArray(value);
+		case "array": return Array.isArray(value);
+		case "object": return obj(value) !== void 0;
+		case "unknown": return true;
+	}
+}
+function fieldKindLabel(kind) {
+	switch (kind) {
+		case "string-or-null": return "a string or null";
+		case "number": return "a finite number";
+		case "boolean": return "a boolean";
+		case "nodes":
+		case "array": return "an array";
+		case "object": return "an object";
+		case "unknown": return "a value";
+		default: return "a string";
+	}
+}
+/** Detect an existing field diagnostic using both canonical and legacy messages. */
+function hasFieldError(errors, at, field) {
+	return errors.some((error) => error.startsWith(`${at}.${field} `) || error.includes(`'${field}'`) || error.includes(`requires ${field}`));
+}
+/** Validate present fields against the runtime schema without duplicating errors. */
+function validateSchemaFieldKinds(value, at, definition, errors, excludedFields = []) {
+	for (const [field, kind] of Object.entries(definition.fields)) {
+		if (excludedFields.includes(field) || value[field] === void 0) continue;
+		if (!fieldKindMatches(value[field], kind) && !hasFieldError(errors, at, field)) errors.push(`${at}.${field} must be ${fieldKindLabel(kind)}`);
+	}
+	for (const [field, values] of Object.entries(definition.enums)) {
+		if (excludedFields.includes(field) || value[field] === void 0 || !fieldKindMatches(value[field], "string")) continue;
+		if (!values.includes(value[field]) && !hasFieldError(errors, at, field)) errors.push(`${at}.${field} must be one of ${values.join(", ")}`);
+	}
+}
+/** Validate one schema-declared nested record and all records below it. */
+function validateRecordSchema(value, at, definition, errors) {
+	const holder = obj(value);
+	if (holder === void 0) {
+		errors.push(`${at} must be an object`);
+		return;
+	}
+	for (const field of definition.required) {
+		const kind = definition.fields[field];
+		if (holder[field] === void 0) {
+			if (!hasFieldError(errors, at, field)) errors.push(`${at}: requires ${field}${kind === void 0 ? "" : ` (${fieldKindLabel(kind)})`}`);
+		} else if (kind !== void 0 && !fieldKindMatches(holder[field], kind)) {
+			if (!hasFieldError(errors, at, field)) errors.push(`${at}.${field} must be ${fieldKindLabel(kind)}`);
+		}
+	}
+	for (const [field, kind] of Object.entries(definition.fields)) if (holder[field] !== void 0 && !fieldKindMatches(holder[field], kind)) {
+		if (!hasFieldError(errors, at, field)) errors.push(`${at}.${field} must be ${fieldKindLabel(kind)}`);
+	}
+	for (const [field, values] of Object.entries(definition.enums)) if (holder[field] !== void 0 && typeof holder[field] === "string" && !values.includes(holder[field])) {
+		if (!hasFieldError(errors, at, field)) errors.push(`${at}.${field} must be one of ${values.join(", ")}`);
+	}
+	for (const [field, nested] of Object.entries(definition.nested)) {
+		const nestedValue = holder[field];
+		if (nestedValue === void 0) continue;
+		if (Array.isArray(nestedValue)) nestedValue.forEach((item, index) => validateRecordSchema(item, `${at}.${field}[${index}]`, nested, errors));
+		else validateRecordSchema(nestedValue, `${at}.${field}`, nested, errors);
+	}
+}
+/** Validate registry-declared nested records before repair can discard them. */
+function validateNestedRecordSchemas(value, at, definition, errors) {
+	for (const [field, nested] of Object.entries(definition.nested)) {
+		const nestedValue = value[field];
+		if (nestedValue === void 0) continue;
+		if (Array.isArray(nestedValue)) nestedValue.forEach((item, index) => validateRecordSchema(item, `${at}.${field}[${index}]`, nested, errors));
+		else validateRecordSchema(nestedValue, `${at}.${field}`, nested, errors);
+	}
+}
+/** Validate the registry-declared presence and primitive shape of a native node. */
+function validateRegistryFields(value, at, definition, errors) {
+	const type = String(value.type);
+	const alreadyReported = (field) => hasFieldError(errors, at, field);
+	for (const field of definition.required) {
+		const kind = definition.fields[field];
+		if (kind === void 0 || value[field] === void 0) {
+			if (!alreadyReported(field)) errors.push(`${at}: type '${type}' requires ${field}${kind === void 0 ? "" : ` (${fieldKindLabel(kind)})`}`);
+			continue;
+		}
+		if (!fieldKindMatches(value[field], kind) && !alreadyReported(field)) errors.push(`${at}.${field} must be ${fieldKindLabel(kind)}`);
+	}
+	validateSchemaFieldKinds(value, at, definition, errors, ["type"]);
+	for (const group of definition.oneOfRequired) if (!group.some((field) => value[field] !== void 0) && !errors.some((error) => error.includes(`requires ${group.join(" or ")}`))) errors.push(`${at}: type '${type}' requires one of ${group.join(" or ")}`);
+	for (const rule of definition.conditionalRequired) {
+		if (value[rule.when.field] !== rule.when.equals) continue;
+		for (const field of rule.required) if (value[field] === void 0 && !alreadyReported(field)) errors.push(`${at}: type '${type}' requires ${field}${rule.message === void 0 ? "" : ` (${rule.message})`}`);
+	}
+	validateNestedRecordSchemas(value, at, definition, errors);
+}
 /** Walk `list` with the shared node budget; drops invalid entries. */
 function repairItems(list, ctx, depth) {
 	if (!Array.isArray(list)) return [];
@@ -281,7 +1028,7 @@ function repairItems(list, ctx, depth) {
 }
 function repairNode(value, ctx, depth) {
 	if (depth > GENUI_LIMITS.maxDepth) return null;
-	const v = obj$1(value);
+	const v = obj(value);
 	if (v === void 0) return null;
 	const type = v.type;
 	if (typeof type !== "string") return null;
@@ -358,7 +1105,8 @@ function repairNode(value, ctx, depth) {
 				type: "checkbox",
 				label,
 				...opt("checked", v.checked === true ? true : void 0),
-				...opt("action", str(v.action, 200))
+				...opt("action", str(v.action, 200)),
+				...opt("group", str(v.group, 200))
 			};
 		}
 		case "link": {
@@ -730,7 +1478,7 @@ function repairListItems(v, cap, ctx, depth) {
 			out.push(item.slice(0, GENUI_LIMITS.maxString));
 			continue;
 		}
-		const o = obj$1(item);
+		const o = obj(item);
 		const title = o === void 0 ? void 0 : str(o.title, GENUI_LIMITS.maxString);
 		if (title !== void 0) {
 			out.push({
@@ -769,7 +1517,7 @@ function repairChartData(v, cap) {
 	const out = [];
 	for (const datum of v) {
 		if (out.length >= cap) break;
-		const o = obj$1(datum);
+		const o = obj(datum);
 		const label = o === void 0 ? void 0 : str(o.label, 128);
 		const value = o === void 0 ? void 0 : num(o.value, -0xe8d4a51000, 0xe8d4a51000);
 		if (label === void 0 || value === void 0) continue;
@@ -786,7 +1534,7 @@ function repairSeries(v, cap, pointCap) {
 	const out = [];
 	for (const s of v) {
 		if (out.length >= cap) break;
-		const o = obj$1(s);
+		const o = obj(s);
 		const label = o === void 0 ? void 0 : str(o.label, 128);
 		const data = o === void 0 ? void 0 : repairChartData(o.data, pointCap);
 		if (label === void 0 || data === void 0) continue;
@@ -803,7 +1551,7 @@ function repairTabs(v, ctx, depth) {
 	const out = [];
 	for (const tab of v) {
 		if (out.length >= GENUI_LIMITS.maxTabs) break;
-		const o = obj$1(tab);
+		const o = obj(tab);
 		const label = o === void 0 ? void 0 : str(o.label, 128);
 		if (label === void 0 || o === void 0) continue;
 		const rawItems = o.items !== void 0 ? o.items : o.content !== void 0 ? Array.isArray(o.content) ? o.content : [o.content] : void 0;
@@ -816,7 +1564,7 @@ function repairTabs(v, ctx, depth) {
 }
 /** Header text for an object-shaped table column ({title,key} antd style). */
 function columnHeaderText(c) {
-	const o = obj$1(c);
+	const o = obj(c);
 	if (o === void 0) return String(c);
 	for (const k of [
 		"title",
@@ -831,7 +1579,7 @@ function columnHeaderText(c) {
 }
 /** Row key for an object-shaped column, mirroring columnHeaderText's order. */
 function columnKeyOf(c) {
-	const o = obj$1(c);
+	const o = obj(c);
 	if (o === void 0) return void 0;
 	for (const k of [
 		"key",
@@ -857,13 +1605,13 @@ function repairPlotSeries(v, cap) {
 	const out = [];
 	for (const s of v) {
 		if (out.length >= cap) break;
-		const o = obj$1(s);
+		const o = obj(s);
 		const expr = o === void 0 ? void 0 : str(o.expr, 512);
 		if (expr === void 0 || o === void 0) continue;
 		const params = [];
 		if (Array.isArray(o.params)) for (const p of o.params) {
 			if (params.length >= GENUI_LIMITS.maxPlotParams) break;
-			const po = obj$1(p);
+			const po = obj(p);
 			const name = po === void 0 ? void 0 : str(po.name, 64);
 			const value = po === void 0 ? void 0 : num(po.value, -1e9, 1e9);
 			if (name === void 0 || value === void 0) continue;
@@ -893,7 +1641,7 @@ function repairSteps(v) {
 	const out = [];
 	for (const s of v) {
 		if (out.length >= GENUI_LIMITS.maxSteps) break;
-		const o = obj$1(s);
+		const o = obj(s);
 		const title = o === void 0 ? void 0 : str(o.title, 256);
 		if (title === void 0) continue;
 		out.push({
@@ -908,7 +1656,7 @@ function repairPairs(v, cap) {
 	const out = [];
 	for (const p of v) {
 		if (out.length >= cap) break;
-		const o = obj$1(p);
+		const o = obj(p);
 		const key = o === void 0 ? void 0 : str(o.key, 256);
 		const value = o === void 0 ? void 0 : str(o.value, GENUI_LIMITS.maxString);
 		if (key === void 0 || value === void 0) continue;
@@ -924,7 +1672,7 @@ function repairDiffs(v) {
 	const out = [];
 	for (const d of v) {
 		if (out.length >= 24) break;
-		const o = obj$1(d);
+		const o = obj(d);
 		const path = o === void 0 ? void 0 : str(o.path, 1024);
 		const newText = o === void 0 ? void 0 : str(o.newText, 2e4);
 		if (path === void 0 || newText === void 0) continue;
@@ -942,7 +1690,7 @@ function repairAccordion(v, ctx, depth) {
 	const out = [];
 	for (const item of v) {
 		if (out.length >= GENUI_LIMITS.maxAccordionItems) break;
-		const o = obj$1(item);
+		const o = obj(item);
 		const title = o === void 0 ? void 0 : str(o.title, 256);
 		if (title === void 0 || o === void 0) continue;
 		out.push({
@@ -957,7 +1705,7 @@ function repairMeshes(v) {
 	const out = [];
 	for (const m of v) {
 		if (out.length >= GENUI_LIMITS.maxMeshes) break;
-		const o = obj$1(m);
+		const o = obj(m);
 		const shape = o === void 0 ? void 0 : enu(o.shape, MESH_SHAPES);
 		if (shape === void 0) continue;
 		const scale = o === void 0 ? void 0 : num(o.scale, -1e6, 1e6) ?? tuple3(o.scale);
@@ -993,7 +1741,7 @@ function repairDiagramNodes(v) {
 	const seen = /* @__PURE__ */ new Set();
 	for (const raw of v) {
 		if (out.length >= GENUI_LIMITS.maxDiagramNodes) break;
-		const o = obj$1(raw);
+		const o = obj(raw);
 		if (o === void 0) continue;
 		const id = str(o.id, 128);
 		const label = str(o.label, GENUI_LIMITS.maxString);
@@ -1025,7 +1773,7 @@ function repairDiagramEdges(v) {
 	const out = [];
 	for (const raw of v) {
 		if (out.length >= GENUI_LIMITS.maxDiagramEdges) break;
-		const o = obj$1(raw);
+		const o = obj(raw);
 		if (o === void 0) continue;
 		const from = str(o.from, 128);
 		const to = str(o.to, 128);
@@ -1041,7 +1789,7 @@ function repairDiagramEdges(v) {
 	return out;
 }
 function repairDiagramTheme(v) {
-	const o = obj$1(v);
+	const o = obj(v);
 	if (o === void 0) return void 0;
 	const out = {};
 	for (const key of [
@@ -1066,7 +1814,7 @@ function repairDiagramZones(v) {
 	const out = [];
 	for (const raw of v) {
 		if (out.length >= GENUI_LIMITS.maxDiagramZones) break;
-		const o = obj$1(raw);
+		const o = obj(raw);
 		if (o === void 0) continue;
 		const label = str(o.label, 64);
 		if (label === void 0) continue;
@@ -1081,7 +1829,7 @@ function repairDiagramZones(v) {
 	return out;
 }
 function repairDiagram(v) {
-	const o = obj$1(v);
+	const o = obj(v);
 	if (o === void 0) return null;
 	const kind = enu(o.kind, DIAGRAM_KINDS);
 	if (kind === void 0) return null;
@@ -1107,7 +1855,7 @@ function repairTimeline(v, cap) {
 	const out = [];
 	for (const item of v) {
 		if (out.length >= cap) break;
-		const o = obj$1(item);
+		const o = obj(item);
 		const title = o === void 0 ? void 0 : str(o.title, 256);
 		if (title === void 0) continue;
 		out.push({
@@ -1126,7 +1874,7 @@ function walkTree(v, cap, depthLeft) {
 	const out = [];
 	for (const item of v) {
 		if (out.length >= cap) break;
-		const o = obj$1(item);
+		const o = obj(item);
 		const name = o === void 0 ? void 0 : str(o.name, 256);
 		if (name === void 0) continue;
 		const children = o !== void 0 && depthLeft > 0 && Array.isArray(o.children) ? walkTree(o.children, cap, depthLeft - 1) : void 0;
@@ -1143,7 +1891,7 @@ function repairQuizOptions(v, answer) {
 	const out = [];
 	for (const optItem of v) {
 		if (out.length >= GENUI_LIMITS.maxQuizOptions) break;
-		const o = obj$1(optItem);
+		const o = obj(optItem);
 		const label = typeof optItem === "string" ? str(optItem, 512) : o === void 0 ? void 0 : str(o.label, 512);
 		if (label === void 0) continue;
 		out.push({
@@ -1210,7 +1958,7 @@ function sanitizeEChartOption(v, depth, budget) {
 		}
 		return arr.length > 0 ? arr : void 0;
 	}
-	const o = obj$1(v);
+	const o = obj(v);
 	if (o === void 0) return void 0;
 	const out = {};
 	for (const [key, val] of Object.entries(o)) {
@@ -1229,13 +1977,13 @@ function sanitizeEChartOption(v, depth, budget) {
 * dropping/clamping/truncating. Idempotent: repairing a repaired spec is a
 * no-op.
 */
-function repairGenuiSpec(value) {
-	const v = obj$1(value);
+function repairCanonicalGenuiSpec(value) {
+	const v = obj(value);
 	if (v === void 0) return null;
 	if (!Array.isArray(v.items)) {
 		const wrapped = wrapSingleComponentRoot(value);
 		if (wrapped === null) return null;
-		return repairGenuiSpec(wrapped);
+		return repairCanonicalGenuiSpec(wrapped);
 	}
 	const ctx = { remaining: GENUI_LIMITS.maxNodes };
 	return {
@@ -1262,81 +2010,34 @@ function countGenuiNodes(value, cap = Number.POSITIVE_INFINITY) {
 		for (const item of list) {
 			if (count >= cap) return;
 			count += 1;
-			const v = obj$1(item);
+			const v = obj(item);
 			if (v === void 0) continue;
 			if (v.type === "tabs" && Array.isArray(v.tabs)) for (const t of v.tabs) {
 				if (count >= cap) return;
-				const to = obj$1(t);
+				const to = obj(t);
 				if (to !== void 0) walk(to.items);
 			}
 			else if (v.type === "accordion" && Array.isArray(v.items)) for (const it of v.items) {
 				if (count >= cap) return;
-				const io = obj$1(it);
+				const io = obj(it);
 				if (io !== void 0) walk(io.items);
 			}
 			else if ((v.type === "row" || v.type === "col" || v.type === "grid" || v.type === "card") && Array.isArray(v.items)) walk(v.items);
-			else if (v.type === "file-tree" && Array.isArray(v.items)) walk(v.items);
-			else if (v.type === "list" && Array.isArray(v.items)) for (const li of v.items) {
+			else if (v.type === "file-tree") {} else if (v.type === "list" && Array.isArray(v.items)) for (const li of v.items) {
 				if (count >= cap) return;
-				const lo = obj$1(li);
+				const lo = obj(li);
 				if (lo !== void 0 && typeof lo.type === "string") walk([lo]);
 			}
 		}
 	};
-	const root = obj$1(value);
+	const root = obj(value);
 	walk(root === void 0 ? [] : root.items);
 	return count;
 }
 /** Every white-listed node `type`. Keep in sync with the repairNode switch —
 * validate_dsh_ui uses it to tell declared GenUI nodes apart from unrelated
 * `"type"` strings (e.g. file-tree's `{type:'file'}` children). */
-const GENUI_NODE_TYPES = /* @__PURE__ */ new Set([
-	"accordion",
-	"audio",
-	"avatar",
-	"badge",
-	"breadcrumb",
-	"button",
-	"callout",
-	"card",
-	"chart",
-	"checkbox",
-	"code",
-	"col",
-	"copy",
-	"diff",
-	"divider",
-	"file-tree",
-	"grid",
-	"image",
-	"input",
-	"json",
-	"keyvalue",
-	"link",
-	"list",
-	"mermaid",
-	"plot",
-	"progress",
-	"quiz",
-	"radio",
-	"row",
-	"scene3d",
-	"select",
-	"slider",
-	"spacer",
-	"stat",
-	"steps",
-	"submit",
-	"switch",
-	"table",
-	"tabs",
-	"text",
-	"textarea",
-	"timeline",
-	"video",
-	"echart",
-	"diagram"
-]);
+const GENUI_NODE_TYPES = GENUI_NATIVE_TYPES;
 /**
 * Visit and count declared nodes in a raw spec tree: objects whose `type` is a
 * white-listed string, descending the same containers `countGenuiNodes`
@@ -1346,7 +2047,7 @@ const GENUI_NODE_TYPES = /* @__PURE__ */ new Set([
 function visitDeclaredGenuiNodes(value, cap, visit) {
 	let count = 0;
 	const declared = (candidate) => {
-		const o = obj$1(candidate);
+		const o = obj(candidate);
 		return o !== void 0 && typeof o.type === "string" && GENUI_NODE_TYPES.has(o.type);
 	};
 	function walk(list, path) {
@@ -1358,7 +2059,7 @@ function visitDeclaredGenuiNodes(value, cap, visit) {
 	}
 	function walkNode(item, at) {
 		if (count >= cap || !declared(item)) return;
-		const v = obj$1(item);
+		const v = obj(item);
 		if (v === void 0) return;
 		count += 1;
 		visit(v, at);
@@ -1368,13 +2069,13 @@ function visitDeclaredGenuiNodes(value, cap, visit) {
 		else if (v.type === "list" && Array.isArray(v.items)) for (let row = 0; row < v.items.length; row++) walkNode(v.items[row], `${at}.items[${row}]`);
 	}
 	function walkItemsOf(holder, path) {
-		const o = obj$1(holder);
+		const o = obj(holder);
 		if (o === void 0) return;
 		const items = o.items !== void 0 ? o.items : o.content;
 		if (Array.isArray(items)) walk(items, `${path}.items`);
 		else walkNode(items, `${path}.items`);
 	}
-	const root = obj$1(value);
+	const root = obj(value);
 	if (root === void 0) return count;
 	if (!Array.isArray(root.items) && declared(value)) walkNode(value, "spec");
 	else walk(root.items, "items");
@@ -1389,23 +2090,106 @@ function visitDeclaredGenuiNodes(value, cap, visit) {
 function countDeclaredGenuiNodes(value, cap = Number.POSITIVE_INFINITY) {
 	return visitDeclaredGenuiNodes(value, cap, () => {});
 }
+/** Count native nodes that survived repair, excluding opaque custom nodes. */
+function countRenderedNativeGenuiNodes(value, cap = Number.POSITIVE_INFINITY) {
+	return countDeclaredGenuiNodes(value, cap);
+}
 /**
-* Return field-level chart errors without changing other repairable component families.
-* @param value - raw GenUI spec.
-* @returns chart semantic errors in tree order.
+* Validate a raw spec value against the white list and limits, collecting
+* human-readable problems. Unlike repair this never mutates: it is a
+* diagnostic for tests and tooling. Unknown `type`s are reported (a plugin
+* custom type is valid only when a renderer is registered — the guard cannot
+* know, so it flags them as warnings).
 */
-function validateGenuiChartSemantics(value) {
+function validateCanonicalGenuiSpec(value) {
 	const errors = [];
-	visitDeclaredGenuiNodes(value, GENUI_LIMITS.maxNodes + 1, (node, at) => {
-		if (node.type !== "chart") return;
-		validateChartNode(node, at, errors);
-	});
-	return errors;
+	const v = obj(value);
+	if (v === void 0) return {
+		ok: false,
+		errors: ["spec root must be an object"]
+	};
+	if (!Array.isArray(v.items)) {
+		const wrapped = wrapSingleComponentRoot(value);
+		if (wrapped !== null) return validateCanonicalGenuiSpec(wrapped);
+		return {
+			ok: false,
+			errors: ["spec.items must be an array"]
+		};
+	}
+	validateSchemaFieldKinds(v, "spec", GENUI_SPEC_SCHEMA, errors, ["items"]);
+	let count = 0;
+	let capped = false;
+	const walk = (list, depth, path) => {
+		if (capped) return;
+		if (!Array.isArray(list)) {
+			errors.push(`${path} must be an array`);
+			return;
+		}
+		for (let i = 0; i < list.length; i++) {
+			if (capped || count >= GENUI_LIMITS.maxNodes) {
+				if (!capped) {
+					errors.push(`spec exceeds ${GENUI_LIMITS.maxNodes} nodes; tail elided`);
+					capped = true;
+				}
+				return;
+			}
+			count += 1;
+			const at = `${path}[${i}]`;
+			validateNode(list[i], depth, at, errors, walk);
+		}
+	};
+	walk(v.items, 0, "items");
+	return {
+		ok: errors.length === 0,
+		errors
+	};
+}
+/**
+* Run the shared canonical GenUI pipeline.
+*
+* The pipeline normalizes aliases, applies the existing deterministic repair
+* and security filters, validates the canonical input, and reports native
+* declarations that disappeared during repair. Custom nodes stay opaque and
+* do not participate in native unknown-field diagnostics.
+*
+* @param value - Raw GenUI spec or bare component.
+* @returns Canonical input, repaired output, diagnostics, and node counts.
+*/
+function processGenuiSpec(value) {
+	const normalized = normalizeGenuiSpec(value);
+	const repaired = repairCanonicalGenuiSpec(normalized.value);
+	const validation = validateCanonicalGenuiSpec(normalized.value);
+	const declaredNativeCount = countDeclaredGenuiNodes(normalized.value, GENUI_LIMITS.maxNodes + 1);
+	const renderedNativeCount = repaired === null ? 0 : countRenderedNativeGenuiNodes(repaired);
+	const renderedTotalCount = repaired === null ? 0 : countGenuiNodes(repaired);
+	const errors = validation.errors.filter((error) => !error.includes(": unknown type "));
+	if (declaredNativeCount > renderedNativeCount) errors.push(`repair dropped ${declaredNativeCount - renderedNativeCount} declared native node(s): declared ${declaredNativeCount}, rendered ${renderedNativeCount}`);
+	return {
+		value: normalized.value,
+		normalized: normalized.value,
+		repaired,
+		spec: repaired,
+		errors,
+		warnings: [...normalized.warnings, ...diagnoseUnknownGenuiFields(normalized.value)],
+		declaredCount: declaredNativeCount,
+		renderedCount: renderedTotalCount,
+		declaredNativeCount,
+		renderedNativeCount,
+		renderedTotalCount
+	};
+}
+/** Return whether the only process errors describe an intentional budget tail cut. */
+function isIntentionalBudgetCut(processed) {
+	return processed.errors.length > 0 && processed.errors.every((error) => error.startsWith("spec exceeds ") || error.startsWith("repair dropped ")) && processed.renderedNativeCount === GENUI_LIMITS.maxNodes && processed.declaredNativeCount === GENUI_LIMITS.maxNodes + 1;
+}
+/** Decide whether a repaired spec is safe to expose to any GenUI renderer. */
+function isRenderableProcess(processed) {
+	return processed.spec !== null && (processed.errors.length === 0 || isIntentionalBudgetCut(processed));
 }
 function validateChartData(value, at, errors) {
 	if (!Array.isArray(value)) return;
 	for (let index = 0; index < value.length; index++) {
-		const datum = obj$1(value[index]);
+		const datum = obj(value[index]);
 		const path = `${at}[${index}]`;
 		if (datum === void 0) {
 			errors.push(`${path} must be an object`);
@@ -1419,7 +2203,7 @@ function validateChartData(value, at, errors) {
 function validateChartSeries(value, at, errors) {
 	if (!Array.isArray(value)) return;
 	for (let index = 0; index < value.length; index++) {
-		const series = obj$1(value[index]);
+		const series = obj(value[index]);
 		const path = `${at}[${index}]`;
 		if (series === void 0) {
 			errors.push(`${path} must be an object`);
@@ -1437,9 +2221,220 @@ function validateChartNode(v, at, errors) {
 	if (v.data !== void 0 && !Array.isArray(v.data)) errors.push(`${at}.data must be an array`);
 	if (v.series !== void 0 && !Array.isArray(v.series)) errors.push(`${at}.series must be an array`);
 	if (v.kind !== void 0 && (typeof v.kind !== "string" || !CHART_KINDS.includes(v.kind))) errors.push(`${at}.kind must be bars, line, or donut`);
+	const kind = v.kind === void 0 ? "bars" : v.kind;
+	if (Array.isArray(v.data) && v.data.length === 0) errors.push(`${at}.data must not be empty`);
+	if (Array.isArray(v.series)) {
+		if (v.series.length === 0) errors.push(`${at}.series must not be empty`);
+		if (kind === "line" || kind === "donut") errors.push(`${at}.series is only supported for bars`);
+		for (let index = 0; index < v.series.length; index++) {
+			const series = obj(v.series[index]);
+			if (series !== void 0 && Array.isArray(series.data) && series.data.length === 0) errors.push(`${at}.series[${index}].data must not be empty`);
+		}
+	}
+	if ((kind === "line" || kind === "donut") && v.data === void 0) errors.push(`${at}.data is required for ${kind}`);
 	validateChartData(v.data, `${at}.data`, errors);
 	validateChartSeries(v.series, `${at}.series`, errors);
 }
+/** Validate table rows before repair can silently remove malformed cells. */
+function validateTableRows(value, at, errors) {
+	if (!Array.isArray(value)) return;
+	for (let rowIndex = 0; rowIndex < value.length; rowIndex++) {
+		const row = value[rowIndex];
+		if (obj(row) !== void 0) continue;
+		if (!Array.isArray(row)) {
+			errors.push(`${at}[${rowIndex}] must be an array or object`);
+			continue;
+		}
+		for (let cellIndex = 0; cellIndex < row.length; cellIndex++) {
+			const cell = row[cellIndex];
+			if (typeof cell !== "string" && (typeof cell !== "number" || !Number.isFinite(cell))) errors.push(`${at}[${rowIndex}][${cellIndex}] must be a string or finite number`);
+		}
+	}
+}
+function validateNode(value, depth, at, errors, walk) {
+	if (depth > GENUI_LIMITS.maxDepth) {
+		errors.push(`${at}: exceeds max depth ${GENUI_LIMITS.maxDepth}`);
+		return;
+	}
+	const v = obj(value);
+	if (v === void 0) {
+		errors.push(`${at}: must be an object`);
+		return;
+	}
+	const type = v.type;
+	if (typeof type !== "string") {
+		errors.push(`${at}: missing string 'type'`);
+		return;
+	}
+	const isStr = (name) => {
+		if (v[name] !== void 0 && typeof v[name] !== "string") errors.push(`${at}: '${name}' must be a string`);
+	};
+	const isNum = (name) => {
+		if (v[name] !== void 0 && (typeof v[name] !== "number" || !Number.isFinite(v[name]))) errors.push(`${at}: '${name}' must be a finite number`);
+	};
+	switch (type) {
+		case "text":
+			if (typeof v.content !== "string" && typeof v.text !== "string") errors.push(`${at}: type 'text' requires content or text (string)`);
+			isStr("content");
+			isStr("text");
+			break;
+		case "row":
+		case "col":
+		case "card":
+		case "grid":
+			if (!Array.isArray(v.items)) errors.push(`${at}: type '${type}' requires items (array)`);
+			walk(v.items, depth + 1, `${at}.items`);
+			if (type === "grid") isNum("cols");
+			break;
+		case "button":
+		case "checkbox":
+		case "link":
+		case "switch":
+			if (typeof v.label !== "string") errors.push(`${at}: type '${type}' requires label (string)`);
+			isStr("label");
+			break;
+		case "image":
+		case "audio":
+		case "video":
+			if (typeof v.src !== "string") errors.push(`${at}: type '${type}' requires src (string)`);
+			isStr("src");
+			isStr("alt");
+			if (type === "video") isStr("poster");
+			break;
+		case "slider":
+			isStr("label");
+			isNum("min");
+			isNum("max");
+			isNum("step");
+			isNum("value");
+			break;
+		case "input":
+		case "textarea":
+			isStr("label");
+			isStr("placeholder");
+			isStr("value");
+			break;
+		case "select":
+		case "radio":
+			if (!Array.isArray(v.options)) errors.push(`${at}: type '${type}' requires options (array)`);
+			break;
+		case "submit":
+			if (typeof v.label !== "string") errors.push(`${at}: type 'submit' requires label (string)`);
+			break;
+		case "badge":
+			if (typeof v.label !== "string" && typeof v.text !== "string" && typeof v.value !== "string") errors.push(`${at}: type 'badge' requires label, text, or value (string)`);
+			isStr("label");
+			isStr("text");
+			isStr("value");
+			break;
+		case "stat":
+			if (typeof v.label !== "string") errors.push(`${at}: type 'stat' requires label (string)`);
+			if (typeof v.value !== "string") errors.push(`${at}: type 'stat' requires value (string)`);
+			isStr("delta");
+			break;
+		case "progress":
+			if (typeof v.value !== "number" || !Number.isFinite(v.value) || v.value < 0 || v.value > 100) errors.push(`${at}: type 'progress' requires value (number 0..100)`);
+			isNum("value");
+			break;
+		case "avatar":
+			if (typeof v.name !== "string") errors.push(`${at}: type 'avatar' requires name (string)`);
+			break;
+		case "list":
+			if (!Array.isArray(v.items)) errors.push(`${at}: type 'list' requires items (array)`);
+			if (Array.isArray(v.items)) for (let i = 0; i < v.items.length; i++) {
+				const item = obj(v.items[i]);
+				if (item !== void 0 && typeof item.type === "string") validateNode(item, depth + 1, `${at}.items[${i}]`, errors, walk);
+			}
+			break;
+		case "table":
+			if (!Array.isArray(v.columns)) errors.push(`${at}: type 'table' requires columns (array)`);
+			if (!Array.isArray(v.rows)) errors.push(`${at}: type 'table' requires rows (array)`);
+			validateTableRows(v.rows, `${at}.rows`, errors);
+			break;
+		case "chart":
+			validateChartNode(v, at, errors);
+			break;
+		case "tabs":
+			if (!Array.isArray(v.tabs)) errors.push(`${at}: type 'tabs' requires tabs (array)`);
+			if (Array.isArray(v.tabs)) for (let i = 0; i < v.tabs.length; i++) {
+				const t = obj(v.tabs[i]);
+				if (t === void 0) {
+					errors.push(`${at}.tabs[${i}] must be an object`);
+					continue;
+				}
+				if (typeof t.label !== "string") errors.push(`${at}.tabs[${i}].label must be a string`);
+				walk(t.items, depth + 1, `${at}.tabs[${i}].items`);
+			}
+			break;
+		case "plot":
+			if (!Array.isArray(v.series)) errors.push(`${at}: type 'plot' requires series (array)`);
+			break;
+		case "callout":
+			if (typeof v.content !== "string") errors.push(`${at}: type 'callout' requires content (string)`);
+			break;
+		case "steps":
+			if (!Array.isArray(v.steps)) errors.push(`${at}: type 'steps' requires steps (array)`);
+			break;
+		case "keyvalue":
+			if (!Array.isArray(v.pairs)) errors.push(`${at}: type 'keyvalue' requires pairs (array)`);
+			break;
+		case "diff":
+			if (!Array.isArray(v.diffs)) errors.push(`${at}: type 'diff' requires diffs (array)`);
+			break;
+		case "json":
+			if (!("value" in v)) errors.push(`${at}: type 'json' requires value`);
+			break;
+		case "code":
+			if (typeof v.code !== "string") errors.push(`${at}: type 'code' requires code (string)`);
+			break;
+		case "accordion":
+			if (!Array.isArray(v.items)) errors.push(`${at}: type 'accordion' requires items (array)`);
+			if (Array.isArray(v.items)) for (let i = 0; i < v.items.length; i++) {
+				const item = obj(v.items[i]);
+				if (item === void 0) {
+					errors.push(`${at}.items[${i}] must be an object`);
+					continue;
+				}
+				if (typeof item.title !== "string") errors.push(`${at}.items[${i}].title must be a string`);
+				walk(item.items, depth + 1, `${at}.items[${i}].items`);
+			}
+			break;
+		case "copy":
+			if (typeof v.text !== "string") errors.push(`${at}: type 'copy' requires text (string)`);
+			break;
+		case "mermaid":
+			if (typeof v.code !== "string") errors.push(`${at}: type 'mermaid' requires code (string)`);
+			break;
+		case "scene3d":
+			if (!Array.isArray(v.meshes)) errors.push(`${at}: type 'scene3d' requires meshes (array)`);
+			break;
+		case "timeline":
+			if (!Array.isArray(v.items)) errors.push(`${at}: type 'timeline' requires items (array)`);
+			break;
+		case "file-tree":
+			if (!Array.isArray(v.items)) errors.push(`${at}: type 'file-tree' requires items (array)`);
+			break;
+		case "breadcrumb":
+			if (!Array.isArray(v.items)) errors.push(`${at}: type 'breadcrumb' requires items (array)`);
+			break;
+		case "quiz":
+			if (typeof v.question !== "string") errors.push(`${at}: type 'quiz' requires question (string)`);
+			if (!Array.isArray(v.options)) errors.push(`${at}: type 'quiz' requires options (array)`);
+			break;
+		case "diagram":
+			if (typeof v.kind !== "string") errors.push(`${at}: type 'diagram' requires kind (string)`);
+			if (!Array.isArray(v.nodes)) errors.push(`${at}: type 'diagram' requires nodes (array)`);
+			if (v.edges !== void 0 && !Array.isArray(v.edges)) errors.push(`${at}: type 'diagram' requires edges (array) when present`);
+			break;
+		case "echart":
+			if (v.option === void 0 && v.data === void 0 && v.series === void 0) errors.push(`${at}: type 'echart' requires option, data, or series`);
+			isNum("height");
+			break;
+		default: errors.push(`${at}: unknown type '${type}' (custom renderer?)`);
+	}
+	const definition = COMPONENT_SCHEMAS[type];
+	if (definition !== void 0) validateRegistryFields(v, at, definition, errors);
+}
 //#endregion
 //#region src/shared/fence-repair.ts
 /**
@@ -1550,83 +2545,6 @@ function completeFenceJson(raw) {
 	}
 }
 //#endregion
-//#region src/plugin/chart-contract.ts
-/** Plain object helper for raw model-authored specs. */
-function obj(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
-}
-/**
-* Visit chart nodes through the component-bearing containers understood by
-* the GenUI guard. This deliberately does not recursively inspect arbitrary
-* objects (for example `json.value` or `echart.option`), where a nested
-* `{type:"chart"}` is data rather than a GenUI node.
-*/
-function visitChartNodes(value, visit) {
-	function walkNode(value, at) {
-		const node = obj(value);
-		if (node === void 0 || typeof node.type !== "string") return;
-		if (node.type === "chart") visit(node, at);
-		if ((node.type === "row" || node.type === "col" || node.type === "grid" || node.type === "card") && Array.isArray(node.items)) {
-			walk(node.items, `${at}.items`);
-			return;
-		}
-		if (node.type === "tabs" && Array.isArray(node.tabs)) {
-			for (let index = 0; index < node.tabs.length; index++) {
-				const tab = obj(node.tabs[index]);
-				if (tab === void 0) continue;
-				const items = tab.items !== void 0 ? tab.items : tab.content;
-				if (Array.isArray(items)) walk(items, `${at}.tabs[${index}].items`);
-				else walkNode(items, `${at}.tabs[${index}].items`);
-			}
-			return;
-		}
-		if (node.type === "accordion" && Array.isArray(node.items)) {
-			for (let index = 0; index < node.items.length; index++) {
-				const item = obj(node.items[index]);
-				if (item === void 0) continue;
-				const items = item.items !== void 0 ? item.items : item.content;
-				if (Array.isArray(items)) walk(items, `${at}.items[${index}].items`);
-				else walkNode(items, `${at}.items[${index}].items`);
-			}
-			return;
-		}
-		if (node.type === "list" && Array.isArray(node.items)) for (let index = 0; index < node.items.length; index++) walkNode(node.items[index], `${at}.items[${index}]`);
-	}
-	function walk(list, path) {
-		if (!Array.isArray(list)) return;
-		for (let index = 0; index < list.length; index++) walkNode(list[index], `${path}[${index}]`);
-	}
-	const root = obj(value);
-	if (root === void 0) return;
-	if (!Array.isArray(root.items) && root.type === "chart") walkNode(root, "spec");
-	else walk(root.items, "items");
-}
-/**
-* Validate the native chart contract all the way to something the renderer
-* can actually draw. The shared guard still owns field/type validation; this
-* layer adds renderer-specific invariants that would otherwise produce an
-* empty line/donut chart or a grouped-bars shell with no points.
-*/
-function validateRenderableChartSemantics(value) {
-	const errors = validateGenuiChartSemantics(value);
-	visitChartNodes(value, (node, at) => {
-		const kind = node.kind === void 0 ? "bars" : node.kind;
-		if (Array.isArray(node.data) && node.data.length === 0) errors.push(`${at}.data must not be empty`);
-		if (Array.isArray(node.series)) {
-			if (node.series.length === 0) errors.push(`${at}.series must not be empty`);
-			for (let index = 0; index < node.series.length; index++) {
-				const series = obj(node.series[index]);
-				if (series !== void 0 && Array.isArray(series.data) && series.data.length === 0) errors.push(`${at}.series[${index}].data must not be empty`);
-			}
-		}
-		if (kind === "line" || kind === "donut") {
-			if (node.series !== void 0) errors.push(`${at}.series is only supported for bars`);
-			if (node.data === void 0) errors.push(`${at}.data is required for ${kind}`);
-		}
-	});
-	return errors;
-}
-//#endregion
 //#region src/plugin/tool.ts
 /**
 * Arguments schema: an open `spec` slot. The schema must NOT reject anything
@@ -1731,17 +2649,37 @@ function parseSpecJson(raw, shape) {
 		return;
 	}
 }
-/** Total node count of a repaired spec — the shared guard traversal
-* (`countGenuiNodes`) so the tool reports the SAME number the panel fold and
-* validation use. A local walker used to under-count specs whose content
-* lives inside tabs/accordion/file-tree (their children are not `.items`). */
-function countNodes(spec) {
-	return countGenuiNodes(spec, GENUI_LIMITS.maxNodes);
+/** Process a raw tool value once for all render-time decisions. */
+function processRenderableValue(value) {
+	return processGenuiSpec(value);
+}
+/** Render process diagnostics as stable model-facing warning lines. */
+function formatProcessWarnings(processed) {
+	return processed.warnings.map((warning) => {
+		if (warning.kind === "alias" && warning.canonical !== void 0) {
+			const separator = warning.path.lastIndexOf(".");
+			const canonicalPath = `${separator < 0 ? "" : warning.path.slice(0, separator + 1)}${warning.canonical}`;
+			return warning.message.includes("ignored") ? `⚠️ 已忽略别名字段：${warning.path} → ${canonicalPath}（ignored because canonical field '${warning.canonical}' is present）` : `⚠️ 已规范化字段：${warning.path} → ${canonicalPath}（normalized/adopted as '${warning.canonical}'）`;
+		}
+		return `⚠️ ${warning.message}`;
+	});
+}
+/** Format chart-specific process errors while keeping other schema errors generic. */
+function formatProcessFailure(processed) {
+	const chartErrors = processed.errors.filter((error) => /(?:variant is unsupported|kind must be bars, line, or donut|requires data or series|(?:data|series) is required for|(?:\.data|\.series)(?:\[\d+\])?(?:\.(?:data|label|value|color))? must|series is only supported for bars)/.test(error));
+	return chartErrors.length === 0 ? void 0 : `❌ chart 字段验证失败：\n- ${chartErrors.join("\n- ")}`;
+}
+/** Return the legacy validation text for a process that dropped native nodes. */
+function droppedNodeFailure(processed) {
+	if (!processed.errors.some((error) => error.startsWith("repair dropped "))) return void 0;
+	const dropped = processed.declaredNativeCount - processed.renderedNativeCount;
+	return `❌ 验证未通过：检测到声明了 ${processed.declaredNativeCount} 个组件，但仅成功解析出 ${processed.renderedNativeCount} 个（有 ${dropped} 个组件因字段格式异常被丢弃）。常见原因：table 的 columns/rows 不是二维字符串数组、tabs 的 items/content 缺失、嵌套组件字段类型不符。请修正后重新验证。`;
 }
 /** Tool-call title shared by the pending and completed presentations. */
 function cardTitle(args) {
-	const spec = repairGenuiSpec(specOf(args));
-	return spec === null ? void 0 : `渲染 UI：${spec.title ?? "未命名"}`;
+	const processed = processRenderableValue(specOf(args));
+	if (!isRenderableProcess(processed) || processed.spec === null) return void 0;
+	return `渲染 UI：${processed.spec.title ?? "未命名"}`;
 }
 /**
 * Build the render_ui tool definition. Registered by the plugin node half;
@@ -1761,16 +2699,18 @@ function createRenderUiTool() {
 				}];
 			},
 			presentationMeta(args) {
-				return repairGenuiSpec(specOf(args));
+				const processed = processRenderableValue(specOf(args));
+				return isRenderableProcess(processed) ? processed.spec : null;
 			}
 		},
 		async execute(args) {
-			const input = specOf(args);
-			const chartErrors = validateRenderableChartSemantics(input);
-			if (chartErrors.length > 0) throw new Error("render_ui spec invalid: " + chartErrors.join("; "));
-			const spec = repairGenuiSpec(input);
-			if (spec === null) return "render_ui：spec 无效 —— 根对象需要 \"items\" 数组（组件树白名单见系统提示词），请修正后重试。";
-			return `已渲染 UI「${spec.title ?? "未命名"}」（${countNodes(spec)} 个组件）。用户现在可以看到这张卡片；组件带 action 时，用户交互会以 [genui-action] 消息发回给你，届时请重新渲染更新后的界面。`;
+			const processed = processRenderableValue(specOf(args));
+			if (processed.spec === null) return "render_ui：spec 无效 —— 根对象需要 \"items\" 数组（组件树白名单见系统提示词），请修正后重试。";
+			if (!isRenderableProcess(processed)) throw new Error("render_ui spec invalid: " + processed.errors.join("; "));
+			const title = processed.spec.title ?? "未命名";
+			const warnings = formatProcessWarnings(processed);
+			const warningText = warnings.length === 0 ? "" : `\n${warnings.join("\n")}`;
+			return `已渲染 UI「${title}」（${processed.renderedCount} 个组件）。用户现在可以看到这张卡片；组件带 action 时，用户交互会以 [genui-action] 消息发回给你，届时请重新渲染更新后的界面。${warningText}`;
 		},
 		presentCall(args) {
 			const title = cardTitle(args);
@@ -1871,11 +2811,6 @@ function bracketDiagnostic(raw) {
 	return diffs.length === 0 ? "" : `  括号计数：${diffs.join("；")}（长表格最易在收尾处错位，如把 ]]}]} 写成 ]}]}]}）\n`;
 }
 const COMMON_CAUSES = "常见原因：① 收尾括号错位/缺失（{ 与 }、[ 与 ] 数量不相等）② 字符串值内用了半角引号 \"（中文引语请用 “” 或 「」）③ 尾随逗号 ④ 字符串未闭合";
-/** Return the model-facing chart field failure for one parsed fence body. */
-function chartValidationFailure(value) {
-	const errors = validateRenderableChartSemantics(value);
-	return errors.length === 0 ? void 0 : `❌ chart 字段验证失败：\n- ${errors.join("\n- ")}`;
-}
 /** Build the validate_dsh_ui tool definition (registered alongside render_ui). */
 function createValidateDshUiTool() {
 	return {
@@ -1904,21 +2839,23 @@ function createValidateDshUiTool() {
 				const detail = error instanceof Error ? error.message : String(error);
 				const repaired = completeFenceJson(raw);
 				if (repaired !== null) {
-					const repairedValue = JSON.parse(repaired.text);
-					const chartFailure = chartValidationFailure(repairedValue);
+					const processed = processRenderableValue(JSON.parse(repaired.text));
+					const chartFailure = formatProcessFailure(processed);
 					if (chartFailure !== void 0) return chartFailure;
-					if (repairGenuiSpec(repairedValue) !== null) return `❌ dsh-ui 围栏 JSON 解析失败：${detail}。\n${bracketDiagnostic(raw)}  已自动修复 ${repaired.repairs} 处，下面是修复后的 JSON，直接作为围栏正文发出即可（无需再验证）：\n\`\`\`\n${repaired.text}\n\`\`\``;
+					if (processed.spec !== null && processed.errors.length === 0) {
+						const warnings = formatProcessWarnings(processed);
+						const warningText = warnings.length === 0 ? "" : `${warnings.join("\n")}\n`;
+						return `❌ dsh-ui 围栏 JSON 解析失败：${detail}。\n${bracketDiagnostic(raw)}${warningText}  已自动修复 ${repaired.repairs} 处，下面是修复后的 JSON，直接作为围栏正文发出即可（无需再验证）：\n\`\`\`\n${repaired.text}\n\`\`\``;
+					}
 				}
 				return `❌ dsh-ui 围栏 JSON 解析失败：${detail}。\n${bracketDiagnostic(raw)}  自动修复未能恢复（结构损坏），请按错误信息修正后重新调用本工具验证，通过后再发出围栏。\n${COMMON_CAUSES}`;
 			}
-			const chartFailure = chartValidationFailure(parsed);
+			const processed = processRenderableValue(parsed);
+			const chartFailure = formatProcessFailure(processed);
 			if (chartFailure !== void 0) return chartFailure;
-			const spec = repairGenuiSpec(parsed);
-			if (spec === null) return "❌ 不是合法 GenUI spec：根对象需要 \"items\" 数组，且每个节点 type 必须在白名单内（见系统提示词）。请修正后重新验证。";
-			const validCount = countNodes(spec);
-			const declaredCount = countDeclaredGenuiNodes(parsed, GENUI_LIMITS.maxNodes + 1);
-			if (declaredCount > validCount) return `❌ 验证未通过：检测到声明了 ${declaredCount} 个组件，但仅成功解析出 ${validCount} 个（有 ${declaredCount - validCount} 个组件因字段格式异常被丢弃）。常见原因：table 的 columns/rows 不是二维字符串数组、tabs 的 items/content 缺失、嵌套组件字段类型不符。请修正后重新验证。`;
-			return `✅ dsh-ui spec 合法（${validCount} 个组件），可以发出围栏。`;
+			if (processed.spec === null || processed.errors.length > 0) return droppedNodeFailure(processed) ?? `❌ 不是合法 GenUI spec：${processed.errors.join("；") || "根对象需要 \"items\" 数组，且每个节点 type 必须在白名单内（见系统提示词）"}。请修正后重新验证。`;
+			const warnings = formatProcessWarnings(processed);
+			return [`✅ dsh-ui spec 合法（${processed.renderedCount} 个组件），可以发出围栏。`, ...warnings].join("\n");
 		},
 		presentCall() {
 			return {
@@ -1937,8 +2874,6 @@ function createValidateDshUiTool() {
 }
 //#endregion
 //#region src/plugin/index.ts
-/** Convention: tool guidance uses 100–199; bash's section is 104. */
-const GENUI_SECTION_ORDER = 105;
 /**
 * The mermaid/three engines ship as standalone IIFE bundles under
 * `lib/assets/` and are fetched by the client ONLY when a spec needs them.
@@ -2074,7 +3009,7 @@ function bundledSkillProvider() {
 function apply(ctx) {
 	ctx.systemPrompt.section({
 		name: "genui:fence",
-		order: 105,
+		order: ctx.systemPrompt.getSectionOrder("STRUCTURED_OUTPUT"),
 		text: GENUI_SECTION_TEXT
 	});
 	let registered = false;
@@ -2111,4 +3046,4 @@ function apply(ctx) {
 	});
 }
 //#endregion
-export { GENUI_SECTION_ORDER, GENUI_SECTION_TEXT, apply, inject };
+export { GENUI_SECTION_TEXT, apply, inject };