@cratis/scene.primereact 4.6.0 → 4.8.0

package/dist/cjs/editor/renderSafeNodes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderSafeNodes.js","sources":["../../../editor/renderSafeNodes.tsx"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { createElement, ReactNode } from 'react';\nimport { SafeNode } from './SafeNode';\n\nconst voidTags = new Set(['br', 'hr', 'img']);\n\n/**\n * Renders safe nodes as React elements.\n *\n * Nothing is ever injected as markup: each node becomes an element created from the allowlisted tag name with\n * the validated attributes, and text goes through React's escaping. Links are made `noopener noreferrer` and\n * open in the same context.\n *\n * @param nodes The nodes `sanitizeHtml` returned.\n */\nexport function renderSafeNodes(nodes: SafeNode[]): ReactNode[] {\n    return nodes.map((node, index) => {\n        if (typeof node === 'string') return node;\n        const { class: className, ...attributes } = node.attributes;\n        const properties: Record<string, string | undefined> = { key: String(index), className, ...attributes };\n        if (node.tag === 'a') properties.rel = 'noopener noreferrer';\n        return createElement(node.tag, properties, ...(voidTags.has(node.tag) ? [] : renderSafeNodes(node.children)));\n    });\n}\n"],"names":["voidTags","Set","renderSafeNodes","nodes","map","node","index","class","className","attributes","properties","key","String","tag","rel","createElement","has","children"],"mappings":";;;;AAAA;AACA;AAKA,MAAMA,QAAAA,GAAW,IAAIC,GAAAA,CAAI;AAAC,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA;AAAM,CAAA,CAAA;AAE5C;;;;;;;;IASO,SAASC,eAAAA,CAAgBC,KAAiB,EAAA;AAC7C,IAAA,OAAOA,KAAAA,CAAMC,GAAG,CAAC,CAACC,IAAAA,EAAMC,KAAAA,GAAAA;QACpB,IAAI,OAAOD,IAAAA,KAAS,QAAA,EAAU,OAAOA,IAAAA;QACrC,MAAM,EAAEE,OAAOC,SAAS,EAAE,GAAGC,UAAAA,EAAY,GAAGJ,KAAKI,UAAU;AAC3D,QAAA,MAAMC,UAAAA,GAAiD;AAAEC,YAAAA,GAAAA,EAAKC,MAAAA,CAAON,KAAAA,CAAAA;AAAQE,YAAAA,SAAAA;AAAW,YAAA,GAAGC;AAAW,SAAA;AACtG,QAAA,IAAIJ,KAAKQ,GAAG,KAAK,GAAA,EAAKH,UAAAA,CAAWI,GAAG,GAAG,qBAAA;AACvC,QAAA,qBAAOC,mBAAAA,CAAcV,IAAAA,CAAKQ,GAAG,EAAEH,eAAgBV,QAAAA,CAASgB,GAAG,CAACX,IAAAA,CAAKQ,GAAG,CAAA,GAAI,EAAE,GAAGX,eAAAA,CAAgBG,KAAKY,QAAQ,CAAA,CAAA;AAC9G,IAAA,CAAA,CAAA;AACJ;;"}

package/dist/cjs/editor/safeUrls.js

@@ -0,0 +1,44 @@
+'use strict';
+
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+/** Schemes a link may use. Anything else, `javascript:` and `data:` above all, is dropped. */ const linkProtocols = new Set([
+    'http:',
+    'https:',
+    'mailto:',
+    'tel:'
+]);
+/** The only images that are kept: small raster data URLs. A remote image is a request made just by rendering. */ const rasterDataUrl = /^data:image\/(png|jpeg|gif|webp);base64,[a-z0-9+/]+={0,2}$/i;
+/** Resolved against, to learn which scheme a browser would act on. It is never sent to. */ const placeholderOrigin = 'https://editor.invalid';
+/**
+ * Returns a link target a browser may follow, or `undefined`.
+ *
+ * Browsers strip tabs and newlines from inside a scheme, so the address is judged by what `URL` resolves it to
+ * and not by its text: `java\tscript:` is a `javascript:` link. Relative links and fragments resolve against
+ * an http origin and are kept.
+ *
+ * @param value The authored `href`.
+ */ function safeLinkUrl(value) {
+    const trimmed = value.trim();
+    if (trimmed === '') return undefined;
+    try {
+        return linkProtocols.has(new URL(trimmed, placeholderOrigin).protocol) ? trimmed : undefined;
+    } catch  {
+        return undefined;
+    }
+}
+/**
+ * Returns an image source that may be rendered, or `undefined`.
+ *
+ * Only base64 PNG, JPEG, GIF and WebP data URLs pass. SVG is refused because it can carry script, and an
+ * `http(s)` image is refused because rendering it would contact a server the author named.
+ *
+ * @param value The authored `src`.
+ */ function safeImageUrl(value) {
+    const trimmed = value.trim();
+    return rasterDataUrl.test(trimmed) ? trimmed : undefined;
+}
+
+exports.safeImageUrl = safeImageUrl;
+exports.safeLinkUrl = safeLinkUrl;
+//# sourceMappingURL=safeUrls.js.map

package/dist/cjs/editor/safeUrls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeUrls.js","sources":["../../../editor/safeUrls.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\n/** Schemes a link may use. Anything else, `javascript:` and `data:` above all, is dropped. */\nconst linkProtocols = new Set(['http:', 'https:', 'mailto:', 'tel:']);\n\n/** The only images that are kept: small raster data URLs. A remote image is a request made just by rendering. */\nconst rasterDataUrl = /^data:image\\/(png|jpeg|gif|webp);base64,[a-z0-9+/]+={0,2}$/i;\n\n/** Resolved against, to learn which scheme a browser would act on. It is never sent to. */\nconst placeholderOrigin = 'https://editor.invalid';\n\n/**\n * Returns a link target a browser may follow, or `undefined`.\n *\n * Browsers strip tabs and newlines from inside a scheme, so the address is judged by what `URL` resolves it to\n * and not by its text: `java\\tscript:` is a `javascript:` link. Relative links and fragments resolve against\n * an http origin and are kept.\n *\n * @param value The authored `href`.\n */\nexport function safeLinkUrl(value: string): string | undefined {\n    const trimmed = value.trim();\n    if (trimmed === '') return undefined;\n    try {\n        return linkProtocols.has(new URL(trimmed, placeholderOrigin).protocol) ? trimmed : undefined;\n    } catch {\n        return undefined;\n    }\n}\n\n/**\n * Returns an image source that may be rendered, or `undefined`.\n *\n * Only base64 PNG, JPEG, GIF and WebP data URLs pass. SVG is refused because it can carry script, and an\n * `http(s)` image is refused because rendering it would contact a server the author named.\n *\n * @param value The authored `src`.\n */\nexport function safeImageUrl(value: string): string | undefined {\n    const trimmed = value.trim();\n    return rasterDataUrl.test(trimmed) ? trimmed : undefined;\n}\n"],"names":["linkProtocols","Set","rasterDataUrl","placeholderOrigin","safeLinkUrl","value","trimmed","trim","undefined","has","URL","protocol","safeImageUrl","test"],"mappings":";;AAAA;AACA;AAEA,+FACA,MAAMA,aAAAA,GAAgB,IAAIC,GAAAA,CAAI;AAAC,IAAA,OAAA;AAAS,IAAA,QAAA;AAAU,IAAA,SAAA;AAAW,IAAA;AAAO,CAAA,CAAA;AAEpE,kHACA,MAAMC,aAAAA,GAAgB,6DAAA;AAEtB,4FACA,MAAMC,iBAAAA,GAAoB,wBAAA;AAE1B;;;;;;;;IASO,SAASC,WAAAA,CAAYC,KAAa,EAAA;IACrC,MAAMC,OAAAA,GAAUD,MAAME,IAAI,EAAA;IAC1B,IAAID,OAAAA,KAAY,IAAI,OAAOE,SAAAA;IAC3B,IAAI;QACA,OAAOR,aAAAA,CAAcS,GAAG,CAAC,IAAIC,IAAIJ,OAAAA,EAASH,iBAAAA,CAAAA,CAAmBQ,QAAQ,CAAA,GAAIL,OAAAA,GAAUE,SAAAA;AACvF,IAAA,CAAA,CAAE,OAAM;QACJ,OAAOA,SAAAA;AACX,IAAA;AACJ;AAEA;;;;;;;IAQO,SAASI,YAAAA,CAAaP,KAAa,EAAA;IACtC,MAAMC,OAAAA,GAAUD,MAAME,IAAI,EAAA;AAC1B,IAAA,OAAOL,aAAAA,CAAcW,IAAI,CAACP,OAAAA,CAAAA,GAAWA,OAAAA,GAAUE,SAAAA;AACnD;;;"}

package/dist/cjs/editor/sanitizeHtml.js

@@ -0,0 +1,140 @@
+'use strict';
+
+var safeUrls = require('./safeUrls.js');
+
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+/** Elements that are kept. Every other element is unwrapped: its children stay, the element does not. */ const keptTags = new Set([
+    'p',
+    'div',
+    'span',
+    'br',
+    'hr',
+    'strong',
+    'b',
+    'em',
+    'i',
+    'u',
+    's',
+    'strike',
+    'del',
+    'sub',
+    'sup',
+    'code',
+    'pre',
+    'blockquote',
+    'h1',
+    'h2',
+    'h3',
+    'h4',
+    'h5',
+    'h6',
+    'ul',
+    'ol',
+    'li',
+    'a',
+    'img'
+]);
+/** Elements whose content is never text to show - script, style, embedded documents and form controls. */ const discardedWithContent = new Set([
+    'script',
+    'style',
+    'template',
+    'noscript',
+    'iframe',
+    'frame',
+    'frameset',
+    'object',
+    'embed',
+    'applet',
+    'svg',
+    'math',
+    'audio',
+    'video',
+    'canvas',
+    'textarea',
+    'select',
+    'option',
+    'button',
+    'input',
+    'form',
+    'head',
+    'title',
+    'meta',
+    'link',
+    'base'
+]);
+/** Quill's own formatting classes. They name CSS rules, so a fixed vocabulary is safe and anything else is not kept. */ const formattingClass = /^ql-(align-(center|right|justify)|indent-[1-8]|size-(small|large|huge)|font-(serif|monospace)|direction-rtl)$/;
+const listKinds = new Set([
+    'bullet',
+    'ordered',
+    'checked',
+    'unchecked'
+]);
+/** Deeper than any real document nests. Anything below is flattened to its text. */ const maximumDepth = 64;
+/**
+ * Reduces authored HTML to the part that is safe to render.
+ *
+ * It parses with `DOMParser`, which builds an inert document: nothing in it loads, runs or paints while it is
+ * walked. The walk then keeps only elements from an allowlist and, on those, only the attributes listed
+ * here - a validated `href` or image `src`, Quill's formatting classes and list kind. Event handlers,
+ * `style`, `srcdoc`, unknown elements' attributes and every URL that is not allowed are dropped, and script,
+ * style, SVG, frames and form controls are removed together with their content.
+ *
+ * The result is plain data. Render it with `renderSafeNodes` or serialize it with `serializeSafeNodes`; the
+ * authored string itself is never put into the document.
+ *
+ * @param html The authored HTML.
+ * @returns The safe nodes.
+ * @throws When there is no `DOMParser`. Use `htmlToPlainText` where there is no DOM.
+ */ function sanitizeHtml(html) {
+    if (typeof DOMParser === 'undefined') throw new Error('Sanitizing HTML needs a DOM. Use htmlToPlainText where there is none.');
+    return sanitizeChildren(new DOMParser().parseFromString(html, 'text/html').body, 0);
+}
+function sanitizeChildren(parent, depth) {
+    const nodes = [];
+    for (const child of Array.from(parent.childNodes)){
+        if (child.nodeType === Node.TEXT_NODE) {
+            if (child.textContent !== null && child.textContent !== '') nodes.push(child.textContent);
+        } else if (child.nodeType === Node.ELEMENT_NODE) {
+            nodes.push(...sanitizeElement(child, depth));
+        }
+    }
+    return nodes;
+}
+function sanitizeElement(element, depth) {
+    const tag = element.tagName.toLowerCase();
+    if (discardedWithContent.has(tag)) return [];
+    if (depth >= maximumDepth) return [
+        element.textContent ?? ''
+    ];
+    const children = sanitizeChildren(element, depth + 1);
+    if (!keptTags.has(tag)) return children;
+    const attributes = keptAttributes(tag, element);
+    if (tag === 'img' && attributes.src === undefined) return [];
+    if (tag === 'a' && attributes.href === undefined) return children;
+    return [
+        {
+            tag,
+            attributes,
+            children
+        }
+    ];
+}
+function keptAttributes(tag, element) {
+    const attributes = {};
+    const href = tag === 'a' ? safeUrls.safeLinkUrl(element.getAttribute('href') ?? '') : undefined;
+    if (href !== undefined) attributes.href = href;
+    const source = tag === 'img' ? safeUrls.safeImageUrl(element.getAttribute('src') ?? '') : undefined;
+    if (source !== undefined) {
+        attributes.src = source;
+        attributes.alt = element.getAttribute('alt') ?? '';
+    }
+    const classes = (element.getAttribute('class') ?? '').split(/\s+/).filter((name)=>formattingClass.test(name));
+    if (classes.length > 0) attributes.class = classes.join(' ');
+    const listKind = element.getAttribute('data-list');
+    if (tag === 'li' && listKind !== null && listKinds.has(listKind)) attributes['data-list'] = listKind;
+    return attributes;
+}
+
+exports.sanitizeHtml = sanitizeHtml;
+//# sourceMappingURL=sanitizeHtml.js.map

package/dist/cjs/editor/sanitizeHtml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizeHtml.js","sources":["../../../editor/sanitizeHtml.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { SafeElement } from './SafeElement';\nimport { SafeNode } from './SafeNode';\nimport { safeImageUrl, safeLinkUrl } from './safeUrls';\n\n/** Elements that are kept. Every other element is unwrapped: its children stay, the element does not. */\nconst keptTags = new Set([\n    'p', 'div', 'span', 'br', 'hr', 'strong', 'b', 'em', 'i', 'u', 's', 'strike', 'del', 'sub', 'sup', 'code', 'pre', 'blockquote',\n    'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'ul', 'ol', 'li', 'a', 'img',\n]);\n\n/** Elements whose content is never text to show - script, style, embedded documents and form controls. */\nconst discardedWithContent = new Set([\n    'script', 'style', 'template', 'noscript', 'iframe', 'frame', 'frameset', 'object', 'embed', 'applet', 'svg', 'math',\n    'audio', 'video', 'canvas', 'textarea', 'select', 'option', 'button', 'input', 'form', 'head', 'title', 'meta', 'link', 'base',\n]);\n\n/** Quill's own formatting classes. They name CSS rules, so a fixed vocabulary is safe and anything else is not kept. */\nconst formattingClass = /^ql-(align-(center|right|justify)|indent-[1-8]|size-(small|large|huge)|font-(serif|monospace)|direction-rtl)$/;\n\nconst listKinds = new Set(['bullet', 'ordered', 'checked', 'unchecked']);\n\n/** Deeper than any real document nests. Anything below is flattened to its text. */\nconst maximumDepth = 64;\n\n/**\n * Reduces authored HTML to the part that is safe to render.\n *\n * It parses with `DOMParser`, which builds an inert document: nothing in it loads, runs or paints while it is\n * walked. The walk then keeps only elements from an allowlist and, on those, only the attributes listed\n * here - a validated `href` or image `src`, Quill's formatting classes and list kind. Event handlers,\n * `style`, `srcdoc`, unknown elements' attributes and every URL that is not allowed are dropped, and script,\n * style, SVG, frames and form controls are removed together with their content.\n *\n * The result is plain data. Render it with `renderSafeNodes` or serialize it with `serializeSafeNodes`; the\n * authored string itself is never put into the document.\n *\n * @param html The authored HTML.\n * @returns The safe nodes.\n * @throws When there is no `DOMParser`. Use `htmlToPlainText` where there is no DOM.\n */\nexport function sanitizeHtml(html: string): SafeNode[] {\n    if (typeof DOMParser === 'undefined') throw new Error('Sanitizing HTML needs a DOM. Use htmlToPlainText where there is none.');\n    return sanitizeChildren(new DOMParser().parseFromString(html, 'text/html').body, 0);\n}\n\nfunction sanitizeChildren(parent: Node, depth: number): SafeNode[] {\n    const nodes: SafeNode[] = [];\n    for (const child of Array.from(parent.childNodes)) {\n        if (child.nodeType === Node.TEXT_NODE) {\n            if (child.textContent !== null && child.textContent !== '') nodes.push(child.textContent);\n        } else if (child.nodeType === Node.ELEMENT_NODE) {\n            nodes.push(...sanitizeElement(child as Element, depth));\n        }\n    }\n    return nodes;\n}\n\nfunction sanitizeElement(element: Element, depth: number): SafeNode[] {\n    const tag = element.tagName.toLowerCase();\n    if (discardedWithContent.has(tag)) return [];\n    if (depth >= maximumDepth) return [element.textContent ?? ''];\n\n    const children = sanitizeChildren(element, depth + 1);\n    if (!keptTags.has(tag)) return children;\n\n    const attributes = keptAttributes(tag, element);\n    if (tag === 'img' && attributes.src === undefined) return [];\n    if (tag === 'a' && attributes.href === undefined) return children;\n    return [{ tag, attributes, children } satisfies SafeElement];\n}\n\nfunction keptAttributes(tag: string, element: Element): Record<string, string> {\n    const attributes: Record<string, string> = {};\n\n    const href = tag === 'a' ? safeLinkUrl(element.getAttribute('href') ?? '') : undefined;\n    if (href !== undefined) attributes.href = href;\n\n    const source = tag === 'img' ? safeImageUrl(element.getAttribute('src') ?? '') : undefined;\n    if (source !== undefined) {\n        attributes.src = source;\n        attributes.alt = element.getAttribute('alt') ?? '';\n    }\n\n    const classes = (element.getAttribute('class') ?? '').split(/\\s+/).filter(name => formattingClass.test(name));\n    if (classes.length > 0) attributes.class = classes.join(' ');\n\n    const listKind = element.getAttribute('data-list');\n    if (tag === 'li' && listKind !== null && listKinds.has(listKind)) attributes['data-list'] = listKind;\n\n    return attributes;\n}\n"],"names":["keptTags","Set","discardedWithContent","formattingClass","listKinds","maximumDepth","sanitizeHtml","html","DOMParser","Error","sanitizeChildren","parseFromString","body","parent","depth","nodes","child","Array","from","childNodes","nodeType","Node","TEXT_NODE","textContent","push","ELEMENT_NODE","sanitizeElement","element","tag","tagName","toLowerCase","has","children","attributes","keptAttributes","src","undefined","href","safeLinkUrl","getAttribute","source","safeImageUrl","alt","classes","split","filter","name","test","length","class","join","listKind"],"mappings":";;;;AAAA;AACA;AAMA,0GACA,MAAMA,QAAAA,GAAW,IAAIC,GAAAA,CAAI;AACrB,IAAA,GAAA;AAAK,IAAA,KAAA;AAAO,IAAA,MAAA;AAAQ,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA,QAAA;AAAU,IAAA,GAAA;AAAK,IAAA,IAAA;AAAM,IAAA,GAAA;AAAK,IAAA,GAAA;AAAK,IAAA,GAAA;AAAK,IAAA,QAAA;AAAU,IAAA,KAAA;AAAO,IAAA,KAAA;AAAO,IAAA,KAAA;AAAO,IAAA,MAAA;AAAQ,IAAA,KAAA;AAAO,IAAA,YAAA;AAClH,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA,GAAA;AAAK,IAAA;AAC9D,CAAA,CAAA;AAED,2GACA,MAAMC,oBAAAA,GAAuB,IAAID,GAAAA,CAAI;AACjC,IAAA,QAAA;AAAU,IAAA,OAAA;AAAS,IAAA,UAAA;AAAY,IAAA,UAAA;AAAY,IAAA,QAAA;AAAU,IAAA,OAAA;AAAS,IAAA,UAAA;AAAY,IAAA,QAAA;AAAU,IAAA,OAAA;AAAS,IAAA,QAAA;AAAU,IAAA,KAAA;AAAO,IAAA,MAAA;AAC9G,IAAA,OAAA;AAAS,IAAA,OAAA;AAAS,IAAA,QAAA;AAAU,IAAA,UAAA;AAAY,IAAA,QAAA;AAAU,IAAA,QAAA;AAAU,IAAA,QAAA;AAAU,IAAA,OAAA;AAAS,IAAA,MAAA;AAAQ,IAAA,MAAA;AAAQ,IAAA,OAAA;AAAS,IAAA,MAAA;AAAQ,IAAA,MAAA;AAAQ,IAAA;AAC3H,CAAA,CAAA;AAED,yHACA,MAAME,eAAAA,GAAkB,+GAAA;AAExB,MAAMC,SAAAA,GAAY,IAAIH,GAAAA,CAAI;AAAC,IAAA,QAAA;AAAU,IAAA,SAAA;AAAW,IAAA,SAAA;AAAW,IAAA;AAAY,CAAA,CAAA;AAEvE,qFACA,MAAMI,YAAAA,GAAe,EAAA;AAErB;;;;;;;;;;;;;;;IAgBO,SAASC,YAAAA,CAAaC,IAAY,EAAA;AACrC,IAAA,IAAI,OAAOC,SAAAA,KAAc,WAAA,EAAa,MAAM,IAAIC,KAAAA,CAAM,uEAAA,CAAA;IACtD,OAAOC,gBAAAA,CAAiB,IAAIF,SAAAA,EAAAA,CAAYG,eAAe,CAACJ,IAAAA,EAAM,WAAA,CAAA,CAAaK,IAAI,EAAE,CAAA,CAAA;AACrF;AAEA,SAASF,gBAAAA,CAAiBG,MAAY,EAAEC,KAAa,EAAA;AACjD,IAAA,MAAMC,QAAoB,EAAE;AAC5B,IAAA,KAAK,MAAMC,KAAAA,IAASC,KAAAA,CAAMC,IAAI,CAACL,MAAAA,CAAOM,UAAU,CAAA,CAAG;AAC/C,QAAA,IAAIH,KAAAA,CAAMI,QAAQ,KAAKC,IAAAA,CAAKC,SAAS,EAAE;AACnC,YAAA,IAAIN,KAAAA,CAAMO,WAAW,KAAK,IAAA,IAAQP,KAAAA,CAAMO,WAAW,KAAK,EAAA,EAAIR,KAAAA,CAAMS,IAAI,CAACR,KAAAA,CAAMO,WAAW,CAAA;AAC5F,QAAA,CAAA,MAAO,IAAIP,KAAAA,CAAMI,QAAQ,KAAKC,IAAAA,CAAKI,YAAY,EAAE;YAC7CV,KAAAA,CAAMS,IAAI,CAAA,GAAIE,eAAAA,CAAgBV,KAAAA,EAAkBF,KAAAA,CAAAA,CAAAA;AACpD,QAAA;AACJ,IAAA;IACA,OAAOC,KAAAA;AACX;AAEA,SAASW,eAAAA,CAAgBC,OAAgB,EAAEb,KAAa,EAAA;AACpD,IAAA,MAAMc,GAAAA,GAAMD,OAAAA,CAAQE,OAAO,CAACC,WAAW,EAAA;AACvC,IAAA,IAAI5B,oBAAAA,CAAqB6B,GAAG,CAACH,GAAAA,CAAAA,EAAM,OAAO,EAAE;IAC5C,IAAId,KAAAA,IAAST,cAAc,OAAO;AAACsB,QAAAA,OAAAA,CAAQJ,WAAW,IAAI;AAAG,KAAA;IAE7D,MAAMS,QAAAA,GAAWtB,gBAAAA,CAAiBiB,OAAAA,EAASb,KAAAA,GAAQ,CAAA,CAAA;AACnD,IAAA,IAAI,CAACd,QAAAA,CAAS+B,GAAG,CAACH,MAAM,OAAOI,QAAAA;IAE/B,MAAMC,UAAAA,GAAaC,eAAeN,GAAAA,EAAKD,OAAAA,CAAAA;AACvC,IAAA,IAAIC,QAAQ,KAAA,IAASK,UAAAA,CAAWE,GAAG,KAAKC,SAAAA,EAAW,OAAO,EAAE;AAC5D,IAAA,IAAIR,QAAQ,GAAA,IAAOK,UAAAA,CAAWI,IAAI,KAAKD,WAAW,OAAOJ,QAAAA;IACzD,OAAO;AAAC,QAAA;AAAEJ,YAAAA,GAAAA;AAAKK,YAAAA,UAAAA;AAAYD,YAAAA;AAAS;AAAwB,KAAA;AAChE;AAEA,SAASE,cAAAA,CAAeN,GAAW,EAAED,OAAgB,EAAA;AACjD,IAAA,MAAMM,aAAqC,EAAC;IAE5C,MAAMI,IAAAA,GAAOT,QAAQ,GAAA,GAAMU,oBAAAA,CAAYX,QAAQY,YAAY,CAAC,WAAW,EAAA,CAAA,GAAMH,SAAAA;AAC7E,IAAA,IAAIC,IAAAA,KAASD,SAAAA,EAAWH,UAAAA,CAAWI,IAAI,GAAGA,IAAAA;IAE1C,MAAMG,MAAAA,GAASZ,QAAQ,KAAA,GAAQa,qBAAAA,CAAad,QAAQY,YAAY,CAAC,UAAU,EAAA,CAAA,GAAMH,SAAAA;AACjF,IAAA,IAAII,WAAWJ,SAAAA,EAAW;AACtBH,QAAAA,UAAAA,CAAWE,GAAG,GAAGK,MAAAA;AACjBP,QAAAA,UAAAA,CAAWS,GAAG,GAAGf,OAAAA,CAAQY,YAAY,CAAC,KAAA,CAAA,IAAU,EAAA;AACpD,IAAA;AAEA,IAAA,MAAMI,UAAU,CAAChB,QAAQY,YAAY,CAAC,YAAY,EAAC,EAAGK,KAAK,CAAC,OAAOC,MAAM,CAACC,CAAAA,IAAAA,GAAQ3C,eAAAA,CAAgB4C,IAAI,CAACD,IAAAA,CAAAA,CAAAA;IACvG,IAAIH,OAAAA,CAAQK,MAAM,GAAG,CAAA,EAAGf,WAAWgB,KAAK,GAAGN,OAAAA,CAAQO,IAAI,CAAC,GAAA,CAAA;IAExD,MAAMC,QAAAA,GAAWxB,OAAAA,CAAQY,YAAY,CAAC,WAAA,CAAA;IACtC,IAAIX,GAAAA,KAAQ,IAAA,IAAQuB,QAAAA,KAAa,IAAA,IAAQ/C,SAAAA,CAAU2B,GAAG,CAACoB,QAAAA,CAAAA,EAAWlB,UAAU,CAAC,WAAA,CAAY,GAAGkB,QAAAA;IAE5F,OAAOlB,UAAAA;AACX;;"}

package/dist/cjs/editor/serializeSafeNodes.js

@@ -0,0 +1,33 @@
+'use strict';
+
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+const voidTags = new Set([
+    'br',
+    'hr',
+    'img'
+]);
+const escapes = {
+    '&': '&',
+    '<': '&lt;',
+    '>': '&gt;',
+    '"': '&quot;'
+};
+const escape = (text)=>text.replace(/[&<>"]/g, (character)=>escapes[character]);
+/**
+ * Writes safe nodes back out as an HTML string, for an editor that reads HTML.
+ *
+ * Text and attribute values are escaped, and only tags and attributes the allowlist produced are written, so
+ * the string can contain nothing the allowlist did not already accept.
+ *
+ * @param nodes The nodes `sanitizeHtml` returned.
+ */ function serializeSafeNodes(nodes) {
+    return nodes.map((node)=>{
+        if (typeof node === 'string') return escape(node);
+        const attributes = Object.entries(node.attributes).map(([name, value])=>` ${name}="${escape(value)}"`).join('');
+        return voidTags.has(node.tag) ? `<${node.tag}${attributes}>` : `<${node.tag}${attributes}>${serializeSafeNodes(node.children)}</${node.tag}>`;
+    }).join('');
+}
+
+exports.serializeSafeNodes = serializeSafeNodes;
+//# sourceMappingURL=serializeSafeNodes.js.map

package/dist/cjs/editor/serializeSafeNodes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializeSafeNodes.js","sources":["../../../editor/serializeSafeNodes.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { SafeNode } from './SafeNode';\n\nconst voidTags = new Set(['br', 'hr', 'img']);\n\nconst escapes: Record<string, string> = { '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;' };\n\nconst escape = (text: string) => text.replace(/[&<>\"]/g, character => escapes[character]);\n\n/**\n * Writes safe nodes back out as an HTML string, for an editor that reads HTML.\n *\n * Text and attribute values are escaped, and only tags and attributes the allowlist produced are written, so\n * the string can contain nothing the allowlist did not already accept.\n *\n * @param nodes The nodes `sanitizeHtml` returned.\n */\nexport function serializeSafeNodes(nodes: SafeNode[]): string {\n    return nodes.map(node => {\n        if (typeof node === 'string') return escape(node);\n        const attributes = Object.entries(node.attributes).map(([name, value]) => ` ${name}=\"${escape(value)}\"`).join('');\n        return voidTags.has(node.tag) ? `<${node.tag}${attributes}>` : `<${node.tag}${attributes}>${serializeSafeNodes(node.children)}</${node.tag}>`;\n    }).join('');\n}\n"],"names":["voidTags","Set","escapes","escape","text","replace","character","serializeSafeNodes","nodes","map","node","attributes","Object","entries","name","value","join","has","tag","children"],"mappings":";;AAAA;AACA;AAIA,MAAMA,QAAAA,GAAW,IAAIC,GAAAA,CAAI;AAAC,IAAA,IAAA;AAAM,IAAA,IAAA;AAAM,IAAA;AAAM,CAAA,CAAA;AAE5C,MAAMC,OAAAA,GAAkC;IAAE,GAAA,EAAK,OAAA;IAAS,GAAA,EAAK,MAAA;IAAQ,GAAA,EAAK,MAAA;IAAQ,GAAA,EAAK;AAAS,CAAA;AAEhG,MAAMC,MAAAA,GAAS,CAACC,IAAAA,GAAiBA,IAAAA,CAAKC,OAAO,CAAC,SAAA,EAAWC,CAAAA,SAAAA,GAAaJ,OAAO,CAACI,SAAAA,CAAU,CAAA;AAExF;;;;;;;IAQO,SAASC,kBAAAA,CAAmBC,KAAiB,EAAA;IAChD,OAAOA,KAAAA,CAAMC,GAAG,CAACC,CAAAA,IAAAA,GAAAA;AACb,QAAA,IAAI,OAAOA,IAAAA,KAAS,QAAA,EAAU,OAAOP,MAAAA,CAAOO,IAAAA,CAAAA;QAC5C,MAAMC,UAAAA,GAAaC,MAAAA,CAAOC,OAAO,CAACH,IAAAA,CAAKC,UAAU,CAAA,CAAEF,GAAG,CAAC,CAAC,CAACK,IAAAA,EAAMC,KAAAA,CAAM,GAAK,CAAC,CAAC,EAAED,IAAAA,CAAK,EAAE,EAAEX,MAAAA,CAAOY,KAAAA,CAAAA,CAAO,CAAC,CAAC,CAAA,CAAEC,IAAI,CAAC,EAAA,CAAA;AAC9G,QAAA,OAAOhB,QAAAA,CAASiB,GAAG,CAACP,IAAAA,CAAKQ,GAAG,CAAA,GAAI,CAAC,CAAC,EAAER,KAAKQ,GAAG,CAAA,EAAGP,UAAAA,CAAW,CAAC,CAAC,GAAG,CAAC,CAAC,EAAED,KAAKQ,GAAG,CAAA,EAAGP,UAAAA,CAAW,CAAC,EAAEJ,kBAAAA,CAAmBG,IAAAA,CAAKS,QAAQ,CAAA,CAAE,EAAE,EAAET,IAAAA,CAAKQ,GAAG,CAAC,CAAC,CAAC;AACjJ,IAAA,CAAA,CAAA,CAAGF,IAAI,CAAC,EAAA,CAAA;AACZ;;"}

package/dist/cjs/editor/toolbarLayout.js

@@ -0,0 +1,35 @@
+'use strict';
+
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+/** The formats the toolbar offers. Content in other formats is still shown, but cannot be produced here. */ const toolbarLayout = [
+    [
+        'bold',
+        'italic',
+        'underline'
+    ],
+    [
+        {
+            header: [
+                1,
+                2,
+                3,
+                false
+            ]
+        }
+    ],
+    [
+        {
+            list: 'ordered'
+        },
+        {
+            list: 'bullet'
+        }
+    ],
+    [
+        'link'
+    ]
+];
+
+exports.toolbarLayout = toolbarLayout;
+//# sourceMappingURL=toolbarLayout.js.map

package/dist/cjs/editor/toolbarLayout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolbarLayout.js","sources":["../../../editor/toolbarLayout.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\n/** The formats the toolbar offers. Content in other formats is still shown, but cannot be produced here. */\nexport const toolbarLayout: (string | Record<string, unknown>)[][] = [\n    ['bold', 'italic', 'underline'],\n    [{ header: [1, 2, 3, false] }],\n    [{ list: 'ordered' }, { list: 'bullet' }],\n    ['link'],\n];\n"],"names":["toolbarLayout","header","list"],"mappings":";;AAAA;AACA;AAEA,6GACO,MAAMA,aAAAA,GAAwD;AACjE,IAAA;AAAC,QAAA,MAAA;AAAQ,QAAA,QAAA;AAAU,QAAA;AAAY,KAAA;AAC/B,IAAA;AAAC,QAAA;YAAEC,MAAAA,EAAQ;AAAC,gBAAA,CAAA;AAAG,gBAAA,CAAA;AAAG,gBAAA,CAAA;AAAG,gBAAA;AAAM;AAAC;AAAE,KAAA;AAC9B,IAAA;AAAC,QAAA;YAAEC,IAAAA,EAAM;AAAU,SAAA;AAAG,QAAA;YAAEA,IAAAA,EAAM;AAAS;AAAE,KAAA;AACzC,IAAA;AAAC,QAAA;AAAO;;;"}

package/dist/cjs/editor/useQuillEditor.js

@@ -0,0 +1,137 @@
+'use strict';
+
+var react = require('react');
+var applyHtml = require('./applyHtml.js');
+var characterCount = require('./characterCount.js');
+var toolbarLayout = require('./toolbarLayout.js');
+
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+const idle = {
+    ready: false,
+    failure: undefined,
+    characters: 0
+};
+/**
+ * Builds and owns a Quill editor inside an element React leaves alone.
+ *
+ * The editor is constructed once per loader and toolbar setting, in a container this hook creates and
+ * removes itself. React renders the host with no children, so a re-render can never wipe what Quill built -
+ * the failure of rendering the authored HTML as the host's children and then letting Quill take it over.
+ *
+ * Everything else is applied to the live editor without rebuilding it:
+ * - a changed `html` replaces the content silently, and only when the authored value really changed, so a
+ *   user's edit survives an unrelated property change;
+ * - `editable`, the placeholder and the accessible name update in place;
+ * - the `text-change` listener is removed, and the toolbar and surface with the container, when the editor
+ *   is rebuilt or the control unmounts.
+ *
+ * Only a user edit calls `onUserChange`.
+ */ function useQuillEditor(options) {
+    const { loader, host, html, showHeader, editable, placeholder, ariaLabel } = options;
+    const [state, setState] = react.useState(idle);
+    const quillReference = react.useRef(undefined);
+    const appliedHtml = react.useRef(html);
+    const latest = react.useRef(options);
+    latest.current = options;
+    react.useEffect(()=>{
+        const container = host.current;
+        if (loader === undefined || container === null) return undefined;
+        let disposed = false;
+        let dispose;
+        loader().then((loaded)=>{
+            if (disposed) return;
+            const Quill = typeof loaded === 'function' ? loaded : loaded.default;
+            const surface = container.ownerDocument.createElement('div');
+            container.appendChild(surface);
+            const quill = new Quill(surface, {
+                theme: 'snow',
+                modules: {
+                    toolbar: showHeader ? toolbarLayout.toolbarLayout : false
+                },
+                placeholder: latest.current.placeholder,
+                readOnly: !latest.current.editable
+            });
+            applyHtml.applyHtml(quill, latest.current.html);
+            appliedHtml.current = latest.current.html;
+            const changed = (_delta, _previous, source)=>{
+                if (source === 'silent') return;
+                setState((current)=>({
+                        ...current,
+                        characters: characterCount.characterCount(quill)
+                    }));
+                if (source === 'user') latest.current.onUserChange();
+            };
+            quill.on('text-change', changed);
+            quillReference.current = quill;
+            dispose = ()=>{
+                quill.off('text-change', changed);
+                quillReference.current = undefined;
+                container.replaceChildren();
+            };
+            setState({
+                ready: true,
+                failure: undefined,
+                characters: characterCount.characterCount(quill)
+            });
+        }).catch((error)=>{
+            if (!disposed) setState({
+                ...idle,
+                failure: error instanceof Error ? error.message : String(error)
+            });
+        });
+        return ()=>{
+            disposed = true;
+            dispose?.();
+            setState(idle);
+        };
+    }, [
+        loader,
+        host,
+        showHeader
+    ]);
+    react.useEffect(()=>{
+        const quill = quillReference.current;
+        if (!state.ready || quill === undefined || html === appliedHtml.current) return;
+        appliedHtml.current = html;
+        applyHtml.applyHtml(quill, html);
+        setState((current)=>({
+                ...current,
+                characters: characterCount.characterCount(quill)
+            }));
+    }, [
+        html,
+        state.ready
+    ]);
+    react.useEffect(()=>{
+        const quill = quillReference.current;
+        if (!state.ready || quill === undefined) return;
+        quill.enable(editable);
+        quill.root.setAttribute('aria-readonly', String(!editable));
+        const toolbar = quill.getModule('toolbar');
+        toolbar?.container?.querySelectorAll('button, select').forEach((control)=>{
+            if (editable) control.removeAttribute('disabled');
+            else control.setAttribute('disabled', '');
+        });
+    }, [
+        editable,
+        state.ready
+    ]);
+    react.useEffect(()=>{
+        const quill = quillReference.current;
+        if (!state.ready || quill === undefined) return;
+        quill.root.setAttribute('role', 'textbox');
+        quill.root.setAttribute('aria-multiline', 'true');
+        quill.root.setAttribute('aria-label', ariaLabel);
+        if (placeholder === undefined) quill.root.removeAttribute('data-placeholder');
+        else quill.root.setAttribute('data-placeholder', placeholder);
+    }, [
+        ariaLabel,
+        placeholder,
+        state.ready
+    ]);
+    return state;
+}
+
+exports.useQuillEditor = useQuillEditor;
+//# sourceMappingURL=useQuillEditor.js.map

package/dist/cjs/editor/useQuillEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useQuillEditor.js","sources":["../../../editor/useQuillEditor.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { useEffect, useRef, useState } from 'react';\nimport { QuillConstructor } from './QuillConstructor';\nimport { QuillEditorOptions } from './QuillEditorOptions';\nimport { QuillEditorState } from './QuillEditorState';\nimport { QuillInstance } from './QuillInstance';\nimport { applyHtml } from './applyHtml';\nimport { characterCount } from './characterCount';\nimport { toolbarLayout } from './toolbarLayout';\n\nconst idle: QuillEditorState = { ready: false, failure: undefined, characters: 0 };\n\n/**\n * Builds and owns a Quill editor inside an element React leaves alone.\n *\n * The editor is constructed once per loader and toolbar setting, in a container this hook creates and\n * removes itself. React renders the host with no children, so a re-render can never wipe what Quill built -\n * the failure of rendering the authored HTML as the host's children and then letting Quill take it over.\n *\n * Everything else is applied to the live editor without rebuilding it:\n * - a changed `html` replaces the content silently, and only when the authored value really changed, so a\n *   user's edit survives an unrelated property change;\n * - `editable`, the placeholder and the accessible name update in place;\n * - the `text-change` listener is removed, and the toolbar and surface with the container, when the editor\n *   is rebuilt or the control unmounts.\n *\n * Only a user edit calls `onUserChange`.\n */\nexport function useQuillEditor(options: QuillEditorOptions): QuillEditorState {\n    const { loader, host, html, showHeader, editable, placeholder, ariaLabel } = options;\n    const [state, setState] = useState<QuillEditorState>(idle);\n    const quillReference = useRef<QuillInstance | undefined>(undefined);\n    const appliedHtml = useRef(html);\n    const latest = useRef(options);\n    latest.current = options;\n\n    useEffect(() => {\n        const container = host.current;\n        if (loader === undefined || container === null) return undefined;\n\n        let disposed = false;\n        let dispose: (() => void) | undefined;\n\n        loader().then(loaded => {\n            if (disposed) return;\n            const Quill: QuillConstructor = typeof loaded === 'function' ? loaded : loaded.default;\n            const surface = container.ownerDocument.createElement('div');\n            container.appendChild(surface);\n            const quill = new Quill(surface, {\n                theme: 'snow',\n                modules: { toolbar: showHeader ? toolbarLayout : false },\n                placeholder: latest.current.placeholder,\n                readOnly: !latest.current.editable,\n            });\n\n            applyHtml(quill, latest.current.html);\n            appliedHtml.current = latest.current.html;\n            const changed = (_delta: unknown, _previous: unknown, source: string) => {\n                if (source === 'silent') return;\n                setState(current => ({ ...current, characters: characterCount(quill) }));\n                if (source === 'user') latest.current.onUserChange();\n            };\n\n            quill.on('text-change', changed);\n            quillReference.current = quill;\n            dispose = () => {\n                quill.off('text-change', changed);\n                quillReference.current = undefined;\n                container.replaceChildren();\n            };\n            setState({ ready: true, failure: undefined, characters: characterCount(quill) });\n        }).catch((error: unknown) => {\n            if (!disposed) setState({ ...idle, failure: error instanceof Error ? error.message : String(error) });\n        });\n\n        return () => {\n            disposed = true;\n            dispose?.();\n            setState(idle);\n        };\n    }, [loader, host, showHeader]);\n\n    useEffect(() => {\n        const quill = quillReference.current;\n        if (!state.ready || quill === undefined || html === appliedHtml.current) return;\n        appliedHtml.current = html;\n        applyHtml(quill, html);\n        setState(current => ({ ...current, characters: characterCount(quill) }));\n    }, [html, state.ready]);\n\n    useEffect(() => {\n        const quill = quillReference.current;\n        if (!state.ready || quill === undefined) return;\n        quill.enable(editable);\n        quill.root.setAttribute('aria-readonly', String(!editable));\n        const toolbar = quill.getModule('toolbar') as { container?: HTMLElement } | undefined;\n        toolbar?.container?.querySelectorAll('button, select').forEach(control => {\n            if (editable) control.removeAttribute('disabled'); else control.setAttribute('disabled', '');\n        });\n    }, [editable, state.ready]);\n\n    useEffect(() => {\n        const quill = quillReference.current;\n        if (!state.ready || quill === undefined) return;\n        quill.root.setAttribute('role', 'textbox');\n        quill.root.setAttribute('aria-multiline', 'true');\n        quill.root.setAttribute('aria-label', ariaLabel);\n        if (placeholder === undefined) quill.root.removeAttribute('data-placeholder'); else quill.root.setAttribute('data-placeholder', placeholder);\n    }, [ariaLabel, placeholder, state.ready]);\n\n    return state;\n}\n"],"names":["idle","ready","failure","undefined","characters","useQuillEditor","options","loader","host","html","showHeader","editable","placeholder","ariaLabel","state","setState","useState","quillReference","useRef","appliedHtml","latest","current","useEffect","container","disposed","dispose","then","loaded","Quill","default","surface","ownerDocument","createElement","appendChild","quill","theme","modules","toolbar","toolbarLayout","readOnly","applyHtml","changed","_delta","_previous","source","characterCount","onUserChange","on","off","replaceChildren","catch","error","Error","message","String","enable","root","setAttribute","getModule","querySelectorAll","forEach","control","removeAttribute"],"mappings":";;;;;;;AAAA;AACA;AAWA,MAAMA,IAAAA,GAAyB;IAAEC,KAAAA,EAAO,KAAA;IAAOC,OAAAA,EAASC,SAAAA;IAAWC,UAAAA,EAAY;AAAE,CAAA;AAEjF;;;;;;;;;;;;;;;IAgBO,SAASC,cAAAA,CAAeC,OAA2B,EAAA;AACtD,IAAA,MAAM,EAAEC,MAAM,EAAEC,IAAI,EAAEC,IAAI,EAAEC,UAAU,EAAEC,QAAQ,EAAEC,WAAW,EAAEC,SAAS,EAAE,GAAGP,OAAAA;AAC7E,IAAA,MAAM,CAACQ,KAAAA,EAAOC,QAAAA,CAAS,GAAGC,cAAAA,CAA2BhB,IAAAA,CAAAA;AACrD,IAAA,MAAMiB,iBAAiBC,YAAAA,CAAkCf,SAAAA,CAAAA;AACzD,IAAA,MAAMgB,cAAcD,YAAAA,CAAOT,IAAAA,CAAAA;AAC3B,IAAA,MAAMW,SAASF,YAAAA,CAAOZ,OAAAA,CAAAA;AACtBc,IAAAA,MAAAA,CAAOC,OAAO,GAAGf,OAAAA;IAEjBgB,eAAAA,CAAU,IAAA;QACN,MAAMC,SAAAA,GAAYf,KAAKa,OAAO;AAC9B,QAAA,IAAId,MAAAA,KAAWJ,SAAAA,IAAaoB,SAAAA,KAAc,IAAA,EAAM,OAAOpB,SAAAA;AAEvD,QAAA,IAAIqB,QAAAA,GAAW,KAAA;QACf,IAAIC,OAAAA;QAEJlB,MAAAA,EAAAA,CAASmB,IAAI,CAACC,CAAAA,MAAAA,GAAAA;AACV,YAAA,IAAIH,QAAAA,EAAU;AACd,YAAA,MAAMI,QAA0B,OAAOD,MAAAA,KAAW,UAAA,GAAaA,MAAAA,GAASA,OAAOE,OAAO;AACtF,YAAA,MAAMC,OAAAA,GAAUP,SAAAA,CAAUQ,aAAa,CAACC,aAAa,CAAC,KAAA,CAAA;AACtDT,YAAAA,SAAAA,CAAUU,WAAW,CAACH,OAAAA,CAAAA;YACtB,MAAMI,KAAAA,GAAQ,IAAIN,KAAAA,CAAME,OAAAA,EAAS;gBAC7BK,KAAAA,EAAO,MAAA;gBACPC,OAAAA,EAAS;AAAEC,oBAAAA,OAAAA,EAAS3B,aAAa4B,2BAAAA,GAAgB;AAAM,iBAAA;gBACvD1B,WAAAA,EAAaQ,MAAAA,CAAOC,OAAO,CAACT,WAAW;AACvC2B,gBAAAA,QAAAA,EAAU,CAACnB,MAAAA,CAAOC,OAAO,CAACV;AAC9B,aAAA,CAAA;AAEA6B,YAAAA,mBAAAA,CAAUN,KAAAA,EAAOd,MAAAA,CAAOC,OAAO,CAACZ,IAAI,CAAA;AACpCU,YAAAA,WAAAA,CAAYE,OAAO,GAAGD,MAAAA,CAAOC,OAAO,CAACZ,IAAI;YACzC,MAAMgC,OAAAA,GAAU,CAACC,MAAAA,EAAiBC,SAAAA,EAAoBC,MAAAA,GAAAA;AAClD,gBAAA,IAAIA,WAAW,QAAA,EAAU;gBACzB7B,QAAAA,CAASM,CAAAA,WAAY;AAAE,wBAAA,GAAGA,OAAO;AAAEjB,wBAAAA,UAAAA,EAAYyC,6BAAAA,CAAeX,KAAAA;qBAAO,CAAA,CAAA;AACrE,gBAAA,IAAIU,MAAAA,KAAW,MAAA,EAAQxB,MAAAA,CAAOC,OAAO,CAACyB,YAAY,EAAA;AACtD,YAAA,CAAA;YAEAZ,KAAAA,CAAMa,EAAE,CAAC,aAAA,EAAeN,OAAAA,CAAAA;AACxBxB,YAAAA,cAAAA,CAAeI,OAAO,GAAGa,KAAAA;YACzBT,OAAAA,GAAU,IAAA;gBACNS,KAAAA,CAAMc,GAAG,CAAC,aAAA,EAAeP,OAAAA,CAAAA;AACzBxB,gBAAAA,cAAAA,CAAeI,OAAO,GAAGlB,SAAAA;AACzBoB,gBAAAA,SAAAA,CAAU0B,eAAe,EAAA;AAC7B,YAAA,CAAA;YACAlC,QAAAA,CAAS;gBAAEd,KAAAA,EAAO,IAAA;gBAAMC,OAAAA,EAASC,SAAAA;AAAWC,gBAAAA,UAAAA,EAAYyC,6BAAAA,CAAeX,KAAAA;AAAO,aAAA,CAAA;QAClF,CAAA,CAAA,CAAGgB,KAAK,CAAC,CAACC,KAAAA,GAAAA;YACN,IAAI,CAAC3B,UAAUT,QAAAA,CAAS;AAAE,gBAAA,GAAGf,IAAI;AAAEE,gBAAAA,OAAAA,EAASiD,KAAAA,YAAiBC,KAAAA,GAAQD,KAAAA,CAAME,OAAO,GAAGC,MAAAA,CAAOH,KAAAA;AAAO,aAAA,CAAA;AACvG,QAAA,CAAA,CAAA;QAEA,OAAO,IAAA;YACH3B,QAAAA,GAAW,IAAA;AACXC,YAAAA,OAAAA,IAAAA;YACAV,QAAAA,CAASf,IAAAA,CAAAA;AACb,QAAA,CAAA;IACJ,CAAA,EAAG;AAACO,QAAAA,MAAAA;AAAQC,QAAAA,IAAAA;AAAME,QAAAA;AAAW,KAAA,CAAA;IAE7BY,eAAAA,CAAU,IAAA;QACN,MAAMY,KAAAA,GAAQjB,eAAeI,OAAO;QACpC,IAAI,CAACP,MAAMb,KAAK,IAAIiC,UAAU/B,SAAAA,IAAaM,IAAAA,KAASU,WAAAA,CAAYE,OAAO,EAAE;AACzEF,QAAAA,WAAAA,CAAYE,OAAO,GAAGZ,IAAAA;AACtB+B,QAAAA,mBAAAA,CAAUN,KAAAA,EAAOzB,IAAAA,CAAAA;QACjBM,QAAAA,CAASM,CAAAA,WAAY;AAAE,gBAAA,GAAGA,OAAO;AAAEjB,gBAAAA,UAAAA,EAAYyC,6BAAAA,CAAeX,KAAAA;aAAO,CAAA,CAAA;IACzE,CAAA,EAAG;AAACzB,QAAAA,IAAAA;AAAMK,QAAAA,KAAAA,CAAMb;AAAM,KAAA,CAAA;IAEtBqB,eAAAA,CAAU,IAAA;QACN,MAAMY,KAAAA,GAAQjB,eAAeI,OAAO;AACpC,QAAA,IAAI,CAACP,KAAAA,CAAMb,KAAK,IAAIiC,UAAU/B,SAAAA,EAAW;AACzC+B,QAAAA,KAAAA,CAAMqB,MAAM,CAAC5C,QAAAA,CAAAA;AACbuB,QAAAA,KAAAA,CAAMsB,IAAI,CAACC,YAAY,CAAC,eAAA,EAAiBH,OAAO,CAAC3C,QAAAA,CAAAA,CAAAA;QACjD,MAAM0B,OAAAA,GAAUH,KAAAA,CAAMwB,SAAS,CAAC,SAAA,CAAA;AAChCrB,QAAAA,OAAAA,EAASd,SAAAA,EAAWoC,gBAAAA,CAAiB,gBAAA,CAAA,CAAkBC,OAAAA,CAAQC,CAAAA,OAAAA,GAAAA;YAC3D,IAAIlD,QAAAA,EAAUkD,OAAAA,CAAQC,eAAe,CAAC,UAAA,CAAA;iBAAkBD,OAAAA,CAAQJ,YAAY,CAAC,UAAA,EAAY,EAAA,CAAA;AAC7F,QAAA,CAAA,CAAA;IACJ,CAAA,EAAG;AAAC9C,QAAAA,QAAAA;AAAUG,QAAAA,KAAAA,CAAMb;AAAM,KAAA,CAAA;IAE1BqB,eAAAA,CAAU,IAAA;QACN,MAAMY,KAAAA,GAAQjB,eAAeI,OAAO;AACpC,QAAA,IAAI,CAACP,KAAAA,CAAMb,KAAK,IAAIiC,UAAU/B,SAAAA,EAAW;AACzC+B,QAAAA,KAAAA,CAAMsB,IAAI,CAACC,YAAY,CAAC,MAAA,EAAQ,SAAA,CAAA;AAChCvB,QAAAA,KAAAA,CAAMsB,IAAI,CAACC,YAAY,CAAC,gBAAA,EAAkB,MAAA,CAAA;AAC1CvB,QAAAA,KAAAA,CAAMsB,IAAI,CAACC,YAAY,CAAC,YAAA,EAAc5C,SAAAA,CAAAA;AACtC,QAAA,IAAID,gBAAgBT,SAAAA,EAAW+B,KAAAA,CAAMsB,IAAI,CAACM,eAAe,CAAC,kBAAA,CAAA;AAA0B5B,aAAAA,KAAAA,CAAMsB,IAAI,CAACC,YAAY,CAAC,kBAAA,EAAoB7C,WAAAA,CAAAA;IACpI,CAAA,EAAG;AAACC,QAAAA,SAAAA;AAAWD,QAAAA,WAAAA;AAAaE,QAAAA,KAAAA,CAAMb;AAAM,KAAA,CAAA;IAExC,OAAOa,KAAAA;AACX;;"}

package/dist/cjs/file/FileUploadContext.js

@@ -0,0 +1,13 @@
+'use strict';
+
+var react = require('react');
+
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+/** Without a provider an upload goes only to the page's own origin and the control makes the request itself. */ const FileUploadContext = react.createContext({
+    handler: undefined,
+    allowedOrigins: []
+});
+
+exports.FileUploadContext = FileUploadContext;
+//# sourceMappingURL=FileUploadContext.js.map

package/dist/cjs/file/FileUploadContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileUploadContext.js","sources":["../../../file/FileUploadContext.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { createContext } from 'react';\nimport { FileUploadHandler } from './FileUploadHandler';\n\n/** What a host provides to the file uploads inside it. */\nexport interface FileUploadContextValue {\n    /** The host-owned upload effect, when it owns the effect. */\n    handler: FileUploadHandler | undefined;\n\n    /** The origins, besides the page's own, an upload may be sent to. */\n    allowedOrigins: readonly string[];\n}\n\n/** Without a provider an upload goes only to the page's own origin and the control makes the request itself. */\nexport const FileUploadContext = createContext<FileUploadContextValue>({ handler: undefined, allowedOrigins: [] });\n"],"names":["FileUploadContext","createContext","handler","undefined","allowedOrigins"],"mappings":";;;;AAAA;AACA;AAcA,iHACO,MAAMA,iBAAAA,GAAoBC,mBAAAA,CAAsC;IAAEC,OAAAA,EAASC,SAAAA;AAAWC,IAAAA,cAAAA,EAAgB;AAAG,CAAA;;"}

package/dist/cjs/file/FileUploadHandlerProvider.js

@@ -0,0 +1,25 @@
+'use strict';
+
+var jsxRuntime = require('react/jsx-runtime');
+var react = require('react');
+var FileUploadContext = require('./FileUploadContext.js');
+
+/**
+ * Makes a host's upload effect and origin policy available without coupling the Scene package to that host's
+ * server client.
+ */ function FileUploadHandlerProvider({ handler, allowedOrigins = [], children }) {
+    const value = react.useMemo(()=>({
+            handler,
+            allowedOrigins
+        }), [
+        handler,
+        allowedOrigins
+    ]);
+    return /*#__PURE__*/ jsxRuntime.jsx(FileUploadContext.FileUploadContext.Provider, {
+        value: value,
+        children: children
+    });
+}
+
+exports.FileUploadHandlerProvider = FileUploadHandlerProvider;
+//# sourceMappingURL=FileUploadHandlerProvider.js.map

package/dist/cjs/file/FileUploadHandlerProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileUploadHandlerProvider.js","sources":["../../../file/FileUploadHandlerProvider.tsx"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { ReactNode, useMemo } from 'react';\nimport { FileUploadContext } from './FileUploadContext';\nimport { FileUploadHandler } from './FileUploadHandler';\n\nexport interface FileUploadHandlerProviderProps {\n    /**\n     * The host-owned upload effect available to the enclosed Scene surface. When omitted the control posts the\n     * files itself, to the authored address, under the origin policy.\n     */\n    handler?: FileUploadHandler;\n\n    /**\n     * Origins besides the page's own that an authored upload address may name, for example\n     * `['https://files.example.com']`. An address on any other origin is refused before anything is sent - to\n     * the handler as well. Cookies are never sent to these origins.\n     */\n    allowedOrigins?: readonly string[];\n\n    /** The surface whose file uploads the host configures. */\n    children: ReactNode;\n}\n\n/**\n * Makes a host's upload effect and origin policy available without coupling the Scene package to that host's\n * server client.\n */\nexport function FileUploadHandlerProvider({ handler, allowedOrigins = [], children }: FileUploadHandlerProviderProps) {\n    const value = useMemo(() => ({ handler, allowedOrigins }), [handler, allowedOrigins]);\n    return <FileUploadContext.Provider value={value}>{children}</FileUploadContext.Provider>;\n}\n"],"names":["FileUploadHandlerProvider","handler","allowedOrigins","children","value","useMemo","_jsx","FileUploadContext","Provider"],"mappings":";;;;;;AAyBA;;;IAIO,SAASA,yBAAAA,CAA0B,EAAEC,OAAO,EAAEC,cAAAA,GAAiB,EAAE,EAAEC,QAAQ,EAAkC,EAAA;IAChH,MAAMC,KAAAA,GAAQC,aAAAA,CAAQ,KAAO;AAAEJ,YAAAA,OAAAA;AAASC,YAAAA;AAAe,SAAA,CAAA,EAAI;AAACD,QAAAA,OAAAA;AAASC,QAAAA;AAAe,KAAA,CAAA;IACpF,qBAAOI,cAAA,CAACC,oCAAkBC,QAAQ,EAAA;QAACJ,KAAAA,EAAOA,KAAAA;AAAQD,QAAAA,QAAAA,EAAAA;;AACtD;;"}

package/dist/cjs/file/FileUploadMode.js

@@ -0,0 +1,13 @@
+'use strict';
+
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+/** The canonical operating modes for a file upload control. */ var FileUploadMode = /*#__PURE__*/ function(FileUploadMode) {
+    FileUploadMode["Advanced"] = "advanced";
+    FileUploadMode["Basic"] = "basic";
+    FileUploadMode["Auto"] = "auto";
+    return FileUploadMode;
+}({});
+
+exports.FileUploadMode = FileUploadMode;
+//# sourceMappingURL=FileUploadMode.js.map

package/dist/cjs/file/FileUploadMode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileUploadMode.js","sources":["../../../file/FileUploadMode.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\n/** The canonical operating modes for a file upload control. */\nexport enum FileUploadMode {\n    Advanced = 'advanced',\n    Basic = 'basic',\n    Auto = 'auto',\n}\n"],"names":["FileUploadMode"],"mappings":";;AAAA;AACA;AAEA,gEACO,IAAKA,cAAAA,iBAAAA,SAAAA,cAAAA,EAAAA;;;;AAAAA,IAAAA,OAAAA,cAAAA;AAIX,CAAA,CAAA,EAAA;;"}