@cyberskill/design 1.4.0 → 1.5.1

package/templates/culture-event-invite/support.js

@@ -769,15 +769,32 @@
       return {};
     }
   };
+  /**
+   * Evaluate DC class source without Function-constructor / eval call sites
+   * (site CSP forbids unsafe-eval; 'unsafe-inline' still allows a synchronous
+   * classic script).
+   */
   function evalDcLogic(src) {
-    //! nosemgrep: eval-and-function-constructor
-    const fn = new Function(
-      "DCLogic",
-      "StreamableLogic",
-      "React",
-      src + '\n;return (typeof Component!=="undefined"&&Component)||undefined;'
-    );
-    return fn(StreamableLogic, StreamableLogic, getReact());
+    const key = "__dcEvalResult_" + Math.random().toString(36).slice(2);
+    window.__DCLogic = StreamableLogic;
+    window.__DCReactForEval = getReact();
+    const safeSrc = String(src).replace(/<\/(script)/gi, "<\\/$1");
+    const el = document.createElement("script");
+    el.text =
+      "var DCLogic=window.__DCLogic,StreamableLogic=window.__DCLogic,React=window.__DCReactForEval;\n" +
+      safeSrc +
+      "\n;window[" +
+      JSON.stringify(key) +
+      ']=(typeof Component!=="undefined"&&Component)||undefined;';
+    (document.documentElement || document.head).appendChild(el);
+    el.remove();
+    const result = window[key];
+    try {
+      delete window[key];
+    } catch (_) {
+      window[key] = void 0;
+    }
+    return result;
   }
 
   // src/component.ts
@@ -1139,13 +1156,22 @@
         }).code : src;
         const module = { exports: {} };
         const before = new Set(Object.keys(window));
-        //! nosemgrep: eval-and-function-constructor
-        new Function("React", "module", "exports", "require", code)(
-          getReact(),
-          module,
-          module.exports,
-          () => ({})
-        );
+        // CSP-safe: run Babel output via inline classic script (no Function ctor).
+        window.__DCReactForEval = getReact();
+        window.__DCModuleTmp = module;
+        const safeCode = String(code).replace(/<\/(script)/gi, "<\\/$1");
+        const el = document.createElement("script");
+        el.text =
+          "(function(React,module,exports,require){\n" +
+          safeCode +
+          "\n})(window.__DCReactForEval,window.__DCModuleTmp,window.__DCModuleTmp.exports,function(){return{};});";
+        (document.documentElement || document.head).appendChild(el);
+        el.remove();
+        try {
+          delete window.__DCModuleTmp;
+        } catch (_) {
+          window.__DCModuleTmp = void 0;
+        }
         const globals = {};
         for (const k of Object.keys(window)) {
           if (!before.has(k) && typeof window[k] === "function") {

package/templates/dashboard/support.js

@@ -769,15 +769,32 @@
       return {};
     }
   };
+  /**
+   * Evaluate DC class source without Function-constructor / eval call sites
+   * (site CSP forbids unsafe-eval; 'unsafe-inline' still allows a synchronous
+   * classic script).
+   */
   function evalDcLogic(src) {
-    //! nosemgrep: eval-and-function-constructor
-    const fn = new Function(
-      "DCLogic",
-      "StreamableLogic",
-      "React",
-      src + '\n;return (typeof Component!=="undefined"&&Component)||undefined;'
-    );
-    return fn(StreamableLogic, StreamableLogic, getReact());
+    const key = "__dcEvalResult_" + Math.random().toString(36).slice(2);
+    window.__DCLogic = StreamableLogic;
+    window.__DCReactForEval = getReact();
+    const safeSrc = String(src).replace(/<\/(script)/gi, "<\\/$1");
+    const el = document.createElement("script");
+    el.text =
+      "var DCLogic=window.__DCLogic,StreamableLogic=window.__DCLogic,React=window.__DCReactForEval;\n" +
+      safeSrc +
+      "\n;window[" +
+      JSON.stringify(key) +
+      ']=(typeof Component!=="undefined"&&Component)||undefined;';
+    (document.documentElement || document.head).appendChild(el);
+    el.remove();
+    const result = window[key];
+    try {
+      delete window[key];
+    } catch (_) {
+      window[key] = void 0;
+    }
+    return result;
   }
 
   // src/component.ts
@@ -1139,13 +1156,22 @@
         }).code : src;
         const module = { exports: {} };
         const before = new Set(Object.keys(window));
-        //! nosemgrep: eval-and-function-constructor
-        new Function("React", "module", "exports", "require", code)(
-          getReact(),
-          module,
-          module.exports,
-          () => ({})
-        );
+        // CSP-safe: run Babel output via inline classic script (no Function ctor).
+        window.__DCReactForEval = getReact();
+        window.__DCModuleTmp = module;
+        const safeCode = String(code).replace(/<\/(script)/gi, "<\\/$1");
+        const el = document.createElement("script");
+        el.text =
+          "(function(React,module,exports,require){\n" +
+          safeCode +
+          "\n})(window.__DCReactForEval,window.__DCModuleTmp,window.__DCModuleTmp.exports,function(){return{};});";
+        (document.documentElement || document.head).appendChild(el);
+        el.remove();
+        try {
+          delete window.__DCModuleTmp;
+        } catch (_) {
+          window.__DCModuleTmp = void 0;
+        }
         const globals = {};
         for (const k of Object.keys(window)) {
           if (!before.has(k) && typeof window[k] === "function") {

package/templates/delivery-change-note/support.js

@@ -769,15 +769,32 @@
       return {};
     }
   };
+  /**
+   * Evaluate DC class source without Function-constructor / eval call sites
+   * (site CSP forbids unsafe-eval; 'unsafe-inline' still allows a synchronous
+   * classic script).
+   */
   function evalDcLogic(src) {
-    //! nosemgrep: eval-and-function-constructor
-    const fn = new Function(
-      "DCLogic",
-      "StreamableLogic",
-      "React",
-      src + '\n;return (typeof Component!=="undefined"&&Component)||undefined;'
-    );
-    return fn(StreamableLogic, StreamableLogic, getReact());
+    const key = "__dcEvalResult_" + Math.random().toString(36).slice(2);
+    window.__DCLogic = StreamableLogic;
+    window.__DCReactForEval = getReact();
+    const safeSrc = String(src).replace(/<\/(script)/gi, "<\\/$1");
+    const el = document.createElement("script");
+    el.text =
+      "var DCLogic=window.__DCLogic,StreamableLogic=window.__DCLogic,React=window.__DCReactForEval;\n" +
+      safeSrc +
+      "\n;window[" +
+      JSON.stringify(key) +
+      ']=(typeof Component!=="undefined"&&Component)||undefined;';
+    (document.documentElement || document.head).appendChild(el);
+    el.remove();
+    const result = window[key];
+    try {
+      delete window[key];
+    } catch (_) {
+      window[key] = void 0;
+    }
+    return result;
   }
 
   // src/component.ts
@@ -1139,13 +1156,22 @@
         }).code : src;
         const module = { exports: {} };
         const before = new Set(Object.keys(window));
-        //! nosemgrep: eval-and-function-constructor
-        new Function("React", "module", "exports", "require", code)(
-          getReact(),
-          module,
-          module.exports,
-          () => ({})
-        );
+        // CSP-safe: run Babel output via inline classic script (no Function ctor).
+        window.__DCReactForEval = getReact();
+        window.__DCModuleTmp = module;
+        const safeCode = String(code).replace(/<\/(script)/gi, "<\\/$1");
+        const el = document.createElement("script");
+        el.text =
+          "(function(React,module,exports,require){\n" +
+          safeCode +
+          "\n})(window.__DCReactForEval,window.__DCModuleTmp,window.__DCModuleTmp.exports,function(){return{};});";
+        (document.documentElement || document.head).appendChild(el);
+        el.remove();
+        try {
+          delete window.__DCModuleTmp;
+        } catch (_) {
+          window.__DCModuleTmp = void 0;
+        }
         const globals = {};
         for (const k of Object.keys(window)) {
           if (!before.has(k) && typeof window[k] === "function") {

package/templates/delivery-kickoff/support.js

@@ -769,15 +769,32 @@
       return {};
     }
   };
+  /**
+   * Evaluate DC class source without Function-constructor / eval call sites
+   * (site CSP forbids unsafe-eval; 'unsafe-inline' still allows a synchronous
+   * classic script).
+   */
   function evalDcLogic(src) {
-    //! nosemgrep: eval-and-function-constructor
-    const fn = new Function(
-      "DCLogic",
-      "StreamableLogic",
-      "React",
-      src + '\n;return (typeof Component!=="undefined"&&Component)||undefined;'
-    );
-    return fn(StreamableLogic, StreamableLogic, getReact());
+    const key = "__dcEvalResult_" + Math.random().toString(36).slice(2);
+    window.__DCLogic = StreamableLogic;
+    window.__DCReactForEval = getReact();
+    const safeSrc = String(src).replace(/<\/(script)/gi, "<\\/$1");
+    const el = document.createElement("script");
+    el.text =
+      "var DCLogic=window.__DCLogic,StreamableLogic=window.__DCLogic,React=window.__DCReactForEval;\n" +
+      safeSrc +
+      "\n;window[" +
+      JSON.stringify(key) +
+      ']=(typeof Component!=="undefined"&&Component)||undefined;';
+    (document.documentElement || document.head).appendChild(el);
+    el.remove();
+    const result = window[key];
+    try {
+      delete window[key];
+    } catch (_) {
+      window[key] = void 0;
+    }
+    return result;
   }
 
   // src/component.ts
@@ -1139,13 +1156,22 @@
         }).code : src;
         const module = { exports: {} };
         const before = new Set(Object.keys(window));
-        //! nosemgrep: eval-and-function-constructor
-        new Function("React", "module", "exports", "require", code)(
-          getReact(),
-          module,
-          module.exports,
-          () => ({})
-        );
+        // CSP-safe: run Babel output via inline classic script (no Function ctor).
+        window.__DCReactForEval = getReact();
+        window.__DCModuleTmp = module;
+        const safeCode = String(code).replace(/<\/(script)/gi, "<\\/$1");
+        const el = document.createElement("script");
+        el.text =
+          "(function(React,module,exports,require){\n" +
+          safeCode +
+          "\n})(window.__DCReactForEval,window.__DCModuleTmp,window.__DCModuleTmp.exports,function(){return{};});";
+        (document.documentElement || document.head).appendChild(el);
+        el.remove();
+        try {
+          delete window.__DCModuleTmp;
+        } catch (_) {
+          window.__DCModuleTmp = void 0;
+        }
         const globals = {};
         for (const k of Object.keys(window)) {
           if (!before.has(k) && typeof window[k] === "function") {

package/templates/delivery-qbr-deck/support.js

@@ -769,15 +769,32 @@
       return {};
     }
   };
+  /**
+   * Evaluate DC class source without Function-constructor / eval call sites
+   * (site CSP forbids unsafe-eval; 'unsafe-inline' still allows a synchronous
+   * classic script).
+   */
   function evalDcLogic(src) {
-    //! nosemgrep: eval-and-function-constructor
-    const fn = new Function(
-      "DCLogic",
-      "StreamableLogic",
-      "React",
-      src + '\n;return (typeof Component!=="undefined"&&Component)||undefined;'
-    );
-    return fn(StreamableLogic, StreamableLogic, getReact());
+    const key = "__dcEvalResult_" + Math.random().toString(36).slice(2);
+    window.__DCLogic = StreamableLogic;
+    window.__DCReactForEval = getReact();
+    const safeSrc = String(src).replace(/<\/(script)/gi, "<\\/$1");
+    const el = document.createElement("script");
+    el.text =
+      "var DCLogic=window.__DCLogic,StreamableLogic=window.__DCLogic,React=window.__DCReactForEval;\n" +
+      safeSrc +
+      "\n;window[" +
+      JSON.stringify(key) +
+      ']=(typeof Component!=="undefined"&&Component)||undefined;';
+    (document.documentElement || document.head).appendChild(el);
+    el.remove();
+    const result = window[key];
+    try {
+      delete window[key];
+    } catch (_) {
+      window[key] = void 0;
+    }
+    return result;
   }
 
   // src/component.ts
@@ -1139,13 +1156,22 @@
         }).code : src;
         const module = { exports: {} };
         const before = new Set(Object.keys(window));
-        //! nosemgrep: eval-and-function-constructor
-        new Function("React", "module", "exports", "require", code)(
-          getReact(),
-          module,
-          module.exports,
-          () => ({})
-        );
+        // CSP-safe: run Babel output via inline classic script (no Function ctor).
+        window.__DCReactForEval = getReact();
+        window.__DCModuleTmp = module;
+        const safeCode = String(code).replace(/<\/(script)/gi, "<\\/$1");
+        const el = document.createElement("script");
+        el.text =
+          "(function(React,module,exports,require){\n" +
+          safeCode +
+          "\n})(window.__DCReactForEval,window.__DCModuleTmp,window.__DCModuleTmp.exports,function(){return{};});";
+        (document.documentElement || document.head).appendChild(el);
+        el.remove();
+        try {
+          delete window.__DCModuleTmp;
+        } catch (_) {
+          window.__DCModuleTmp = void 0;
+        }
         const globals = {};
         for (const k of Object.keys(window)) {
           if (!before.has(k) && typeof window[k] === "function") {

package/templates/delivery-runbook/support.js

@@ -769,15 +769,32 @@
       return {};
     }
   };
+  /**
+   * Evaluate DC class source without Function-constructor / eval call sites
+   * (site CSP forbids unsafe-eval; 'unsafe-inline' still allows a synchronous
+   * classic script).
+   */
   function evalDcLogic(src) {
-    //! nosemgrep: eval-and-function-constructor
-    const fn = new Function(
-      "DCLogic",
-      "StreamableLogic",
-      "React",
-      src + '\n;return (typeof Component!=="undefined"&&Component)||undefined;'
-    );
-    return fn(StreamableLogic, StreamableLogic, getReact());
+    const key = "__dcEvalResult_" + Math.random().toString(36).slice(2);
+    window.__DCLogic = StreamableLogic;
+    window.__DCReactForEval = getReact();
+    const safeSrc = String(src).replace(/<\/(script)/gi, "<\\/$1");
+    const el = document.createElement("script");
+    el.text =
+      "var DCLogic=window.__DCLogic,StreamableLogic=window.__DCLogic,React=window.__DCReactForEval;\n" +
+      safeSrc +
+      "\n;window[" +
+      JSON.stringify(key) +
+      ']=(typeof Component!=="undefined"&&Component)||undefined;';
+    (document.documentElement || document.head).appendChild(el);
+    el.remove();
+    const result = window[key];
+    try {
+      delete window[key];
+    } catch (_) {
+      window[key] = void 0;
+    }
+    return result;
   }
 
   // src/component.ts
@@ -1139,13 +1156,22 @@
         }).code : src;
         const module = { exports: {} };
         const before = new Set(Object.keys(window));
-        //! nosemgrep: eval-and-function-constructor
-        new Function("React", "module", "exports", "require", code)(
-          getReact(),
-          module,
-          module.exports,
-          () => ({})
-        );
+        // CSP-safe: run Babel output via inline classic script (no Function ctor).
+        window.__DCReactForEval = getReact();
+        window.__DCModuleTmp = module;
+        const safeCode = String(code).replace(/<\/(script)/gi, "<\\/$1");
+        const el = document.createElement("script");
+        el.text =
+          "(function(React,module,exports,require){\n" +
+          safeCode +
+          "\n})(window.__DCReactForEval,window.__DCModuleTmp,window.__DCModuleTmp.exports,function(){return{};});";
+        (document.documentElement || document.head).appendChild(el);
+        el.remove();
+        try {
+          delete window.__DCModuleTmp;
+        } catch (_) {
+          window.__DCModuleTmp = void 0;
+        }
         const globals = {};
         for (const k of Object.keys(window)) {
           if (!before.has(k) && typeof window[k] === "function") {

package/templates/delivery-status-email/support.js

@@ -769,15 +769,32 @@
       return {};
     }
   };
+  /**
+   * Evaluate DC class source without Function-constructor / eval call sites
+   * (site CSP forbids unsafe-eval; 'unsafe-inline' still allows a synchronous
+   * classic script).
+   */
   function evalDcLogic(src) {
-    //! nosemgrep: eval-and-function-constructor
-    const fn = new Function(
-      "DCLogic",
-      "StreamableLogic",
-      "React",
-      src + '\n;return (typeof Component!=="undefined"&&Component)||undefined;'
-    );
-    return fn(StreamableLogic, StreamableLogic, getReact());
+    const key = "__dcEvalResult_" + Math.random().toString(36).slice(2);
+    window.__DCLogic = StreamableLogic;
+    window.__DCReactForEval = getReact();
+    const safeSrc = String(src).replace(/<\/(script)/gi, "<\\/$1");
+    const el = document.createElement("script");
+    el.text =
+      "var DCLogic=window.__DCLogic,StreamableLogic=window.__DCLogic,React=window.__DCReactForEval;\n" +
+      safeSrc +
+      "\n;window[" +
+      JSON.stringify(key) +
+      ']=(typeof Component!=="undefined"&&Component)||undefined;';
+    (document.documentElement || document.head).appendChild(el);
+    el.remove();
+    const result = window[key];
+    try {
+      delete window[key];
+    } catch (_) {
+      window[key] = void 0;
+    }
+    return result;
   }
 
   // src/component.ts
@@ -1139,13 +1156,22 @@
         }).code : src;
         const module = { exports: {} };
         const before = new Set(Object.keys(window));
-        //! nosemgrep: eval-and-function-constructor
-        new Function("React", "module", "exports", "require", code)(
-          getReact(),
-          module,
-          module.exports,
-          () => ({})
-        );
+        // CSP-safe: run Babel output via inline classic script (no Function ctor).
+        window.__DCReactForEval = getReact();
+        window.__DCModuleTmp = module;
+        const safeCode = String(code).replace(/<\/(script)/gi, "<\\/$1");
+        const el = document.createElement("script");
+        el.text =
+          "(function(React,module,exports,require){\n" +
+          safeCode +
+          "\n})(window.__DCReactForEval,window.__DCModuleTmp,window.__DCModuleTmp.exports,function(){return{};});";
+        (document.documentElement || document.head).appendChild(el);
+        el.remove();
+        try {
+          delete window.__DCModuleTmp;
+        } catch (_) {
+          window.__DCModuleTmp = void 0;
+        }
         const globals = {};
         for (const k of Object.keys(window)) {
           if (!before.has(k) && typeof window[k] === "function") {

package/templates/doc-style-guide/support.js

@@ -769,15 +769,32 @@
       return {};
     }
   };
+  /**
+   * Evaluate DC class source without Function-constructor / eval call sites
+   * (site CSP forbids unsafe-eval; 'unsafe-inline' still allows a synchronous
+   * classic script).
+   */
   function evalDcLogic(src) {
-    //! nosemgrep: eval-and-function-constructor
-    const fn = new Function(
-      "DCLogic",
-      "StreamableLogic",
-      "React",
-      src + '\n;return (typeof Component!=="undefined"&&Component)||undefined;'
-    );
-    return fn(StreamableLogic, StreamableLogic, getReact());
+    const key = "__dcEvalResult_" + Math.random().toString(36).slice(2);
+    window.__DCLogic = StreamableLogic;
+    window.__DCReactForEval = getReact();
+    const safeSrc = String(src).replace(/<\/(script)/gi, "<\\/$1");
+    const el = document.createElement("script");
+    el.text =
+      "var DCLogic=window.__DCLogic,StreamableLogic=window.__DCLogic,React=window.__DCReactForEval;\n" +
+      safeSrc +
+      "\n;window[" +
+      JSON.stringify(key) +
+      ']=(typeof Component!=="undefined"&&Component)||undefined;';
+    (document.documentElement || document.head).appendChild(el);
+    el.remove();
+    const result = window[key];
+    try {
+      delete window[key];
+    } catch (_) {
+      window[key] = void 0;
+    }
+    return result;
   }
 
   // src/component.ts
@@ -1139,13 +1156,22 @@
         }).code : src;
         const module = { exports: {} };
         const before = new Set(Object.keys(window));
-        //! nosemgrep: eval-and-function-constructor
-        new Function("React", "module", "exports", "require", code)(
-          getReact(),
-          module,
-          module.exports,
-          () => ({})
-        );
+        // CSP-safe: run Babel output via inline classic script (no Function ctor).
+        window.__DCReactForEval = getReact();
+        window.__DCModuleTmp = module;
+        const safeCode = String(code).replace(/<\/(script)/gi, "<\\/$1");
+        const el = document.createElement("script");
+        el.text =
+          "(function(React,module,exports,require){\n" +
+          safeCode +
+          "\n})(window.__DCReactForEval,window.__DCModuleTmp,window.__DCModuleTmp.exports,function(){return{};});";
+        (document.documentElement || document.head).appendChild(el);
+        el.remove();
+        try {
+          delete window.__DCModuleTmp;
+        } catch (_) {
+          window.__DCModuleTmp = void 0;
+        }
         const globals = {};
         for (const k of Object.keys(window)) {
           if (!before.has(k) && typeof window[k] === "function") {

package/templates/doc-suite-index/DocSuiteIndex.dc.html

@@ -32,7 +32,11 @@
       <div style="color:var(--cs-accent);font-size:13px;letter-spacing:0.5em;margin-top:10px">◆ ◆ ◆</div>
     </div>
     <p style="font-size:13.5px;line-height:1.5;margin:0 0 2px">Tài liệu này gộp Danh mục và Hướng dẫn sử dụng thành một. Phần I liệt kê mọi mẫu trong hệ thống, chia theo nhóm. Phần II hướng dẫn cách dùng: vòng đời lao động, tài liệu nào có hiệu lực kỷ luật, quy tắc trình bày, và cách thêm mẫu mới. Chi tiết trình bày nằm trong <i>Cẩm nang Trình bày</i>; các dạng khung nằm trong <i>Mẫu tài liệu</i>.</p>
-    <p style="font-size:12px;line-height:1.45;color:var(--cs-doc-slate);font-style:italic;margin:0 0 16px">This document merges the Suite Index and the Usage Guide. Part I lists every template in the system, by group. Part II covers how to use them: the employment lifecycle, which documents carry disciplinary force, the presentation rules, and how to add a new template. Presentation detail lives in the <i>Style Guide</i>; the frames live in <i>Document Templates</i>.</p>
+    <p style="font-size:12px;line-height:1.45;color:var(--cs-doc-slate);font-style:italic;margin:0 0 10px">This document merges the Suite Index and the Usage Guide. Part I lists every template in the system, by group. Part II covers how to use them: the employment lifecycle, which documents carry disciplinary force, the presentation rules, and how to add a new template. Presentation detail lives in the <i>Style Guide</i>; the frames live in <i>Document Templates</i>.</p>
+    <p style="font-size:12.5px;line-height:1.5;margin:0 0 2px">Bộ tài liệu gồm các mẫu đang hoạt động, chia theo vòng đời lao động. Mọi mẫu đều song ngữ, dùng chung một bộ token trình bày. Phiếu xác nhận đã nhận tài liệu (Acknowledgement of Receipt) là bằng chứng then chốt làm cho các quy tắc có hiệu lực thi hành; Quy chế lương thưởng (Compensation &amp; Reward Regulation) là khung phải được công bố; Phụ lục Đãi ngộ (Total Rewards Appendix) ghi con số của từng cá nhân. Hồ sơ xử lý kỷ luật lao động gồm 4 phần: biên bản → thông báo → biên bản họp → quyết định.</p>
+    <p style="font-size:11.5px;line-height:1.45;color:var(--cs-doc-slate);font-style:italic;margin:0 0 8px">Every template is bilingual and shares one presentation token set. Acknowledgement of Receipt (ESSENTIAL — the evidence that makes the rules enforceable); Compensation &amp; Reward Regulation (the scheme; must be published); Total Rewards Appendix (the individual's numbers). The disciplinary case file has four parts: minutes → notice → hearing minutes → decision.</p>
+    <p style="font-size:12.5px;line-height:1.5;margin:0 0 2px"><b>I · CÒN THIẾU — ƯU TIÊN BỔ SUNG</b> / <i style="color:var(--cs-doc-slate)">I · Gaps — to be added, by priority</i>: không còn mẫu trống trong bộ — <i style="color:var(--cs-doc-slate)">No templates outstanding</i>. Priority A is a legal must-have in the suite where counsel so marks it.</p>
+    <p style="font-size:11.5px;line-height:1.45;color:var(--cs-doc-slate);font-style:italic;margin:0 0 16px">Source DOCX gap list closed; catalogue above is the live inventory.</p>
 
     <h2 class="cs-avoid" style="font-size:16px;font-weight:800;color:var(--cs-color-brand-umber);margin:0 0 8px;padding-bottom:4px;border-bottom:2px solid var(--cs-color-brand-umber)">PHẦN I · DANH MỤC TÀI LIỆU <span style="font-weight:400;font-size:12px;color:var(--cs-doc-slate);font-style:italic">Part I · Document catalogue</span></h2>
     <sc-for list="{{ sections }}" as="sec" hint-placeholder-count="10">