@glossarist/concept-browser 0.7.114 → 0.7.116

package/src/__tests__/scripts/build-integration.test.ts

@@ -10,12 +10,12 @@ function parseTurtle(text: string): Store {
 }
 
 function runInline(code: string): string {
-  return execFileSync('node', ['--input-type=module', '-e', code], { encoding: 'utf8' }).toString();
+  return execFileSync('node', ['--import', 'tsx', '--input-type=module', '-e', code], { encoding: 'utf8' }).toString();
 }
 
 describe('WS F Layer 8 — build pipeline integration', () => {
-  it('vocab-turtle.mjs produces parseable Turtle with 7 schemes', () => {
-    const out = runInline(`import { buildVocabularyTurtle } from './scripts/lib/vocab-turtle.mjs'; console.log(await buildVocabularyTurtle());`);
+  it('vocab-turtle.ts produces parseable Turtle with 7 schemes', () => {
+    const out = runInline(`import { buildVocabularyTurtle } from './scripts/lib/vocab-turtle'; console.log(await buildVocabularyTurtle());`);
     const store = parseTurtle(out);
     const schemes = [...store].filter(q =>
       q.predicate.value === 'http://www.w3.org/1999/02/22-rdf-syntax-ns#type' &&
@@ -24,9 +24,9 @@ describe('WS F Layer 8 — build pipeline integration', () => {
     expect(schemes.length).toBe(7);
   });
 
-  it('dataset-turtle.mjs produces parseable dcat:Dataset', () => {
+  it('dataset-turtle.ts produces parseable dcat:Dataset', () => {
     const out = runInline(`
-      import { buildDatasetTurtle } from './scripts/lib/dataset-turtle.mjs';
+      import { buildDatasetTurtle } from './scripts/lib/dataset-turtle';
       console.log(await buildDatasetTurtle({
         datasetIri: 'https://glossarist.org/test/',
         registerId: 'test', title: 'Test', modified: '2026-06-28',
@@ -42,9 +42,9 @@ describe('WS F Layer 8 — build pipeline integration', () => {
     expect(types).toContain('http://www.w3.org/2004/02/skos/core#ConceptScheme');
   });
 
-  it('build-activity-turtle.mjs produces parseable prov:Activity', () => {
+  it('build-activity-turtle.ts produces parseable prov:Activity', () => {
     const out = runInline(`
-      import { buildActivityTurtle } from './scripts/lib/build-activity-turtle.mjs';
+      import { buildActivityTurtle } from './scripts/lib/build-activity-turtle';
       console.log(await buildActivityTurtle({
         baseUri: 'https://glossarist.org',
         runId: 'test', startedAt: '2026-01-01T00:00:00Z', endedAt: '2026-01-01T00:05:00Z',
@@ -59,9 +59,9 @@ describe('WS F Layer 8 — build pipeline integration', () => {
     expect(activities.length).toBe(1);
   });
 
-  it('agents-turtle.mjs produces parseable foaf:Person', () => {
+  it('agents-turtle.ts produces parseable foaf:Person', () => {
     const out = runInline(`
-      import { buildAgentsTurtle } from './scripts/lib/agents-turtle.mjs';
+      import { buildAgentsTurtle } from './scripts/lib/agents-turtle';
       console.log(await buildAgentsTurtle([{ name: 'Ada Lovelace', role: 'Editor', organization: 'Royal Society' }], 'https://glossarist.org/agent', 'https://glossarist.org/org'));
     `);
     const store = parseTurtle(out);
@@ -72,9 +72,9 @@ describe('WS F Layer 8 — build pipeline integration', () => {
     expect(persons.length).toBe(1);
   });
 
-  it('bibliography-turtle.mjs produces parseable dcterms:BibliographicResource', () => {
+  it('bibliography-turtle.ts produces parseable dcterms:BibliographicResource', () => {
     const out = runInline(`
-      import { buildBibliographyTurtle } from './scripts/lib/bibliography-turtle.mjs';
+      import { buildBibliographyTurtle } from './scripts/lib/bibliography-turtle';
       console.log(await buildBibliographyTurtle('test', { iso704: { reference: 'ISO 704' } }, 'https://glossarist.org'));
     `);
     const store = parseTurtle(out);
@@ -85,9 +85,9 @@ describe('WS F Layer 8 — build pipeline integration', () => {
     expect(bibs.length).toBe(1);
   });
 
-  it('version-turtle.mjs produces parseable prov:Entity chain', () => {
+  it('version-turtle.ts produces parseable prov:Entity chain', () => {
     const out = runInline(`
-      import { buildVersionHistoryTurtle } from './scripts/lib/version-turtle.mjs';
+      import { buildVersionHistoryTurtle } from './scripts/lib/version-turtle';
       console.log(await buildVersionHistoryTurtle({
         registerId: 'test', datasetIri: 'https://glossarist.org/test/',
         versions: [
@@ -113,12 +113,12 @@ describe('WS F Layer 8 — build pipeline integration', () => {
 
   it('all six emitters produce parseable output in a single subprocess', () => {
     const out = runInline(`
-      import { buildVocabularyTurtle } from './scripts/lib/vocab-turtle.mjs';
-      import { buildDatasetTurtle } from './scripts/lib/dataset-turtle.mjs';
-      import { buildActivityTurtle } from './scripts/lib/build-activity-turtle.mjs';
-      import { buildAgentsTurtle } from './scripts/lib/agents-turtle.mjs';
-      import { buildBibliographyTurtle } from './scripts/lib/bibliography-turtle.mjs';
-      import { buildVersionHistoryTurtle } from './scripts/lib/version-turtle.mjs';
+      import { buildVocabularyTurtle } from './scripts/lib/vocab-turtle';
+      import { buildDatasetTurtle } from './scripts/lib/dataset-turtle';
+      import { buildActivityTurtle } from './scripts/lib/build-activity-turtle';
+      import { buildAgentsTurtle } from './scripts/lib/agents-turtle';
+      import { buildBibliographyTurtle } from './scripts/lib/bibliography-turtle';
+      import { buildVersionHistoryTurtle } from './scripts/lib/version-turtle';
       const parts = [
         await buildVocabularyTurtle(),
         await buildDatasetTurtle({ datasetIri: 'https://glossarist.org/test/', registerId: 'test', title: 't', modified: '2026-01-01', languages: ['eng'], distributions: [], topConceptUris: [], sections: [] }),

package/src/__tests__/scripts/dataset-turtle.test.ts

@@ -1,6 +1,6 @@
 import { describe, it, expect } from 'vitest';
 import { Parser, Store } from 'n3';
-import { buildDatasetTurtle } from '../../../scripts/lib/dataset-turtle.mjs';
+import { buildDatasetTurtle } from '../../../scripts/lib/dataset-turtle';
 
 const BASE = 'https://glossarist.org/dataset';
 

package/src/__tests__/scripts/migrate-v1-to-v3.test.ts

@@ -5,7 +5,7 @@ import {
   migrateRelation,
   migrateConceptData,
   isAlreadyMigrated,
-} from '../../../scripts/migrate-v1-to-v3.mjs';
+} from '../../../scripts/migrate-v1-to-v3';
 
 describe('migrate-v1-to-v3 pure conversion', () => {
   describe('isV1PartitiveRelation', () => {

package/src/__tests__/scripts/normalize-yaml.test.ts

@@ -2,7 +2,7 @@ import { describe, it, expect, beforeEach, afterEach } from 'vitest';
 import { mkdtempSync, writeFileSync, readFileSync, rmSync, mkdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { tmpdir } from 'node:os';
-import { normalizeYaml } from '../../../scripts/normalize-yaml.mjs';
+import { normalizeYaml } from '../../../scripts/normalize-yaml';
 
 const NFC_STRING = 'café';
 const NON_NFC_STRING = 'café';

package/src/__tests__/scripts/turtle-escape.test.ts

@@ -1,5 +1,5 @@
 import { describe, it, expect } from 'vitest';
-import { ttlLit, ttlPrefixed, ttlIri, assertValidIri } from '../../../scripts/lib/turtle-escape.mjs';
+import { ttlLit, ttlPrefixed, ttlIri, assertValidIri } from '../../../scripts/lib/turtle-escape';
 
 describe('D1/D2 — Turtle escaping hardening', () => {
   describe('ttlLit', () => {

package/src/__tests__/scripts/validate-yaml.test.ts

@@ -0,0 +1,76 @@
+import { describe, it, expect } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { validateYaml } from '../../../scripts/validate-yaml';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const SCHEMA_PATH = resolve(__dirname, '..', '..', '..', 'data', 'concept-model', 'shapes', 'glossarist.concept.yaml.schema.json');
+const schema = JSON.parse(readFileSync(SCHEMA_PATH, 'utf8'));
+
+describe('validate-yaml', () => {
+  it('accepts a valid concept with termid and localization', () => {
+    const yaml = `
+termid: '1'
+eng:
+  terms:
+    - designation: measurement unit
+      normative_status: preferred
+  definition:
+    - content: A concept used as a basis for comparison.
+`;
+    const result = validateYaml(yaml, schema);
+    if (!result.valid) console.log('Errors:', result.errors);
+    expect(result.valid).toBe(true);
+  });
+
+  it('rejects a concept without termid', () => {
+    const yaml = `
+eng:
+  terms:
+    - designation: missing id
+`;
+    const result = validateYaml(yaml, schema);
+    expect(result.valid).toBe(false);
+    expect(result.errors.some(e => e.message.includes('termid'))).toBe(true);
+  });
+
+  it('accepts managed concept format with underscore fields', () => {
+    const yaml = `
+termid: '5'
+_domains:
+  - physics
+_status: valid
+`;
+    const result = validateYaml(yaml, schema);
+    if (!result.valid) console.log('Errors:', result.errors);
+    expect(result.valid).toBe(true);
+  });
+
+  it('accepts partitive relations with MECE axes', () => {
+    const yaml = `
+termid: '3'
+_partitiveRelations:
+  - type: hasPart
+    members:
+      - ref: part-a
+        presence: required
+        count: exactly_one
+`;
+    const result = validateYaml(yaml, schema);
+    if (!result.valid) console.log('Errors:', result.errors);
+    expect(result.valid).toBe(true);
+  });
+
+  it('rejects non-string termid', () => {
+    const yaml = `
+termid: 12345
+eng:
+  terms:
+    - designation: test
+`;
+    const result = validateYaml(yaml, schema);
+    expect(result.valid).toBe(false);
+  });
+});
+

package/src/__tests__/scripts/version-turtle.test.ts

@@ -1,6 +1,6 @@
 import { describe, it, expect } from 'vitest';
 import { Parser, Store } from 'n3';
-import { buildVersionTurtle, buildVersionHistoryTurtle } from '../../../scripts/lib/version-turtle.mjs';
+import { buildVersionTurtle, buildVersionHistoryTurtle } from '../../../scripts/lib/version-turtle';
 
 function parse(turtle: string): Store {
   const parser = new Parser({ format: 'Turtle' });

package/src/__tests__/scripts/vocab-turtle.test.ts

@@ -1,6 +1,6 @@
 import { describe, it, expect } from 'vitest';
 import { Parser, Store } from 'n3';
-import { buildVocabularyTurtle, listVocabSchemes } from '../../../scripts/lib/vocab-turtle.mjs';
+import { buildVocabularyTurtle, listVocabSchemes } from '../../../scripts/lib/vocab-turtle';
 
 function parse(turtle: string): Store {
   const parser = new Parser({ format: 'Turtle' });

package/src/__tests__/scripts-syntax.test.ts

@@ -9,11 +9,11 @@ const repoRoot = path.resolve(
 );
 
 describe('scripts syntax gate', () => {
-  it('`npm run check:scripts` exits 0 (every .mjs/.js/.cjs in scripts/ and cli/ parses)', () => {
+  it('`npm run check:scripts` exits 0 (every .ts/.mjs/.js/.cjs in scripts/ and cli/ parses)', () => {
     const result = spawnSync(
       process.execPath,
-      [path.join(repoRoot, 'scripts', 'check-syntax.mjs')],
-      { encoding: 'utf8' },
+      ['--import', 'tsx', path.join(repoRoot, 'scripts', 'check-syntax.ts')],
+      { encoding: 'utf8', timeout: 60000 },
     );
 
     if (result.status !== 0) {
@@ -24,5 +24,5 @@ describe('scripts syntax gate', () => {
 
     expect(result.status).toBe(0);
     expect(result.stdout).toMatch(/syntax OK:/);
-  });
+  }, 120000);
 });

package/src/__tests__/use-rdf-document.test.ts

@@ -1,10 +1,9 @@
-// @ts-nocheck — TODO.typescript/12: remove after glossarist TS migration
 import { describe, it, expect } from 'vitest';
 import { ref } from 'vue';
 import { Concept } from 'glossarist';
 import { useRdfDocument } from '../components/use-rdf-document';
 
-function makeConcept(): Concept {
+function makeConcept(): any {
   return Concept.fromJSON({
     id: '3.1.1',
     uri: 'https://glossarist.org/test/concept/3.1.1',
@@ -24,7 +23,7 @@ function makeConcept(): Concept {
   });
 }
 
-function makeConceptWithNonVerbal(): Concept {
+function makeConceptWithNonVerbal(): any {
   return Concept.fromJSON({
     id: '3.1.2',
     uri: 'https://glossarist.org/test/concept/3.1.2',

package/src/__tests__/utils/content-renderer-xss.test.ts

@@ -0,0 +1,57 @@
+import { describe, it, expect } from 'vitest';
+import { renderContent } from '../../utils/content-renderer';
+
+describe('content-renderer XSS protection', () => {
+  it('blocks javascript: URLs in {{link:}} (no anchor tag)', () => {
+    const html = renderContent('{{link:javascript:alert(1)}}', {});
+    expect(html).not.toContain('<a');
+    expect(html).not.toContain('href=');
+  });
+
+  it('blocks javascript: URLs in {{link:}} with label (renders as text)', () => {
+    const html = renderContent('{{link:javascript:alert(1), click me}}', {});
+    expect(html).not.toContain('<a');
+    expect(html).not.toContain('href=');
+    expect(html).toContain('click me');
+  });
+
+  it('blocks data: URLs in {{link:}} (no anchor tag)', () => {
+    const html = renderContent('{{link:data:text/html,<script>alert(1)</script>}}', {});
+    expect(html).not.toContain('<a');
+    expect(html).not.toContain('href=');
+    expect(html).not.toContain('<script>');
+  });
+
+  it('allows https: URLs in {{link:}}', () => {
+    const html = renderContent('{{link:https://example.com}}', {});
+    expect(html).toContain('href="https://example.com"');
+  });
+
+  it('blocks javascript: URLs in {{image:}} (no img tag)', () => {
+    const html = renderContent('{{image:javascript:alert(1)}}', {});
+    expect(html).not.toContain('<img');
+  });
+
+  it('blocks data: URLs in {{image:}} (no img tag with executable src)', () => {
+    const html = renderContent('{{image:data:text/html,<script>}}', {});
+    expect(html).not.toContain('<img');
+    expect(html).not.toContain('data:text/html');
+  });
+
+  it('allows relative paths in {{image:}}', () => {
+    const html = renderContent('{{image:diagram.png}}', {});
+    expect(html).toContain('src="diagram.png"');
+  });
+
+  it('escapes HTML in unordered list items', () => {
+    const html = renderContent('* <script>alert(1)</script>\n* safe item', {});
+    expect(html).not.toContain('<script>');
+    expect(html).toContain('&lt;script&gt;');
+  });
+
+  it('escapes HTML in ordered list items', () => {
+    const html = renderContent('1. <img onerror=alert(1)>\n2. safe', {});
+    expect(html).not.toContain('<img onerror');
+    expect(html).toContain('&lt;img');
+  });
+});

package/src/__tests__/validate-shacl.test.ts

@@ -4,7 +4,7 @@ import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
-const SCRIPT = join(__dirname, '..', '..', 'scripts', 'validate-shacl.mjs');
+const SCRIPT = join(__dirname, '..', '..', 'scripts', 'validate-shacl.ts');
 const FIXTURES = join(__dirname, '..', '__fixtures__', 'shacl');
 const SHAPES = join(__dirname, '..', '__fixtures__', 'concept-shape.ttl');
 
@@ -31,13 +31,13 @@ function execCaught(cmd: string, args: string[], opts: Parameters<typeof execFil
 }
 
 function runValidate(dataDir: string, { env, shapes }: RunOptions = {}): RunResult {
-  return execCaught('node', [SCRIPT, '--shapes', shapes ?? SHAPES, dataDir], {
+  return execCaught('node', ['--import', 'tsx', SCRIPT, '--shapes', shapes ?? SHAPES, dataDir], {
     env: { ...process.env, ...env },
   });
 }
 
 function runValidateRaw(args: string[], { env }: RunOptions = {}): RunResult {
-  return execCaught('node', [SCRIPT, ...args], {
+  return execCaught('node', ['--import', 'tsx', SCRIPT, ...args], {
     env: { ...process.env, ...env },
     stdio: ['ignore', 'pipe', 'pipe'],
   });

package/src/adapters/wire/index.ts

@@ -0,0 +1,69 @@
+/**
+ * Wire-format types barrel — single import path for all wire types.
+ *
+ * Three MECE layers:
+ *   - YAML author format (INPUT to build pipeline)
+ *   - JSON-LD browser format (OUTPUT of build pipeline)
+ *   - Manifest / site-config metadata
+ *
+ * Usage:
+ *   import type { HarmonizedConcept, JsonLdConcept, Manifest } from '@/adapters/wire'
+ *
+ * Or layer-specific:
+ *   import type { HarmonizedConcept } from '@/adapters/wire/yaml'
+ *   import type { JsonLdConcept } from '@/adapters/wire/jsonld'
+ */
+
+// YAML author format — what dataset authors write
+export type {
+  YamlContent,
+  YamlTerm,
+  YamlOrigin,
+  YamlGrammarInfo,
+  YamlSource,
+  YamlDate,
+  YamlRelation,
+  YamlPartitiveMember,
+  YamlPartitiveRelation,
+  YamlGenericRelation,
+  YamlLocalization,
+  HarmonizedConcept,
+  YamlManagedConceptDoc,
+  YamlManifestSection,
+  YamlManifest,
+  YamlBibliographyEntry,
+  YamlNewsFrontmatter,
+  YamlContentPage,
+  ShaclConstraint,
+  PrefixMap,
+} from '../../../scripts/lib/yaml-types';
+
+// JSON-LD browser format — what the SPA reads
+export type {
+  JsonLdContent,
+  JsonLdDate,
+  JsonLdPronunciation,
+  JsonLdGrammarInfo,
+  JsonLdRef,
+  JsonLdLocality,
+  JsonLdOrigin,
+  JsonLdSource,
+  JsonLdRelated,
+  JsonLdDesignation,
+  JsonLdLocalizedConcept,
+  JsonLdPartitiveMember,
+  JsonLdPartitiveRelation,
+  JsonLdConcept,
+} from '../jsonld-types';
+
+// Manifest + summary types
+export type {
+  Manifest,
+  ManifestSection,
+  ConceptSummary,
+  CitationClassification,
+  CiteResolution,
+} from '../types';
+
+// Wire-key constants (runtime value, not just type)
+export { GL } from '../wire-keys';