@graview/guest 0.1.8 → 0.1.10

package/dist/host/writes.js

@@ -0,0 +1,76 @@
+import { manifestActs } from "./manifest.js";
+/*
+ * WRITES THAT CANNOT LEAK (FR-92).
+ *
+ * A view runs for every member with that member's sight, and its author is
+ * not the member: a chat that read a record somebody else wrote may follow
+ * what was hidden in it. The danger is a view reading what this viewer may
+ * see and writing it where somebody else may see it. So:
+ *
+ *   An act must be named in the view's manifest, or it is refused.
+ *
+ *   Where the app's sight is total — every member sees every record — there
+ *   is nothing to leak, and an act the view asks for from its own code
+ *   applies with the arguments it gives (`sightIsTotal`).
+ *
+ *   Otherwise an act applies only from a press the HOST saw — a trusted
+ *   click on an element the view drew with `data-act` — in that press's own
+ *   handler, and its arguments come only from
+ *     · the record the element is bound to (`data-record`, on it or the
+ *       nearest element around it), one the view was shown;
+ *     · the manifest's constants for the act; and
+ *     · the values of fields the host itself read, each one the viewer
+ *       typed: the last change to it a trusted `input` or `change` event,
+ *       and nothing the view drew changing it since.
+ *   A field whose value the view set — its `value` attribute, a later
+ *   update, a textarea's text, an option's `selected` — is FILLED BY THE
+ *   VIEW, and a press that would carry it is refused. A view's code cannot
+ *   type: what it dispatches lands in its own worker's DOM, never the
+ *   host's, and every event it could cause there is untrusted.
+ *
+ * Either way the act is applied as the viewer, `via: "view:<name>"`, under
+ * the view's allowance, and undoable like any other.
+ *
+ * Pure: no DOM. The host's region reads the press and the fields
+ * (press.ts, fetched with the region's drawing), and judges them there.
+ */
+/** Whether every member of the app sees every record: no sight is declared, or every kind is seen by everybody, whole. */
+export function sightIsTotal(store) {
+    const sees = store.policy?.sees ?? [];
+    if (sees.length === 0)
+        return true;
+    return store.schema.kinds.every((kind) => sees.some((sight) => sight.roles === "*" && !sight.own && sight.kinds.includes(kind)));
+}
+/**
+ * The values the app's own declaration allows an argument — an enum's
+ * options or a literal's values, through `optional()`, `default()` and the
+ * like — or undefined when it declares no such list.
+ */
+export function declaredValues(schema) {
+    let at = schema;
+    for (let depth = 0; depth < 8 && at?._zod?.def; depth += 1) {
+        const def = at._zod.def;
+        if (def["type"] === "enum")
+            return Object.values(def["entries"]);
+        if (def["type"] === "literal")
+            return def["values"];
+        if (!("innerType" in def))
+            return undefined;
+        at = def["innerType"];
+    }
+    return undefined;
+}
+export const refuse = (reason, message) => ({ ok: false, reason, message });
+export function entryFor(manifest, asked) {
+    return manifestActs(manifest).find((one) => (one.as ?? one.act) === asked) ?? manifestActs(manifest).find((one) => one.act === asked && one.as === undefined);
+}
+/** An act the view asked for from its own code (`graview.act`). */
+export function judgeCodeAct(store, manifest, name, args) {
+    const entry = entryFor(manifest, name);
+    if (!entry)
+        return refuse("undeclared", `This view may not ask for “${name}”: its manifest does not name it.`);
+    if (!sightIsTotal(store))
+        return refuse("press-only", "In this app some members may not see some records, so a view's act applies only when you press it.");
+    return { ok: true, name: entry.act, args: { ...args, ...(entry.constants ?? {}) } };
+}
+//# sourceMappingURL=writes.js.map

package/dist/host/writes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writes.js","sourceRoot":"","sources":["../../src/host/writes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAA6C,MAAM,eAAe,CAAC;AAExF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,0HAA0H;AAC1H,MAAM,UAAU,YAAY,CAAsB,KAAe;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAQ,KAAK,CAAC,MAAM,CAAC,KAA2B,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC1J,CAAC;AAkBD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,EAAE,GAAG,MAAkE,CAAC;IAC5E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAA4B,CAAC,CAAC;QAC5F,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,QAAQ,CAAc,CAAC;QACjE,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,EAAE,GAAG,GAAG,CAAC,WAAW,CAAc,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAcD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAoB,EAAE,OAAe,EAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAE1G,MAAM,UAAU,QAAQ,CAAC,QAA4B,EAAE,KAAa;IAClE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;AAChK,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAsB,KAAe,EAAE,QAA4B,EAAE,IAAY,EAAE,IAAuC;IACpJ,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,YAAY,EAAE,8BAA8B,IAAI,mCAAmC,CAAC,CAAC;IAC/G,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,YAAY,EAAE,oGAAoG,CAAC,CAAC;IAC5J,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;AACtF,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { connectGuest } from "./guest.js";
 export type { ConnectGuestOptions, Guest } from "./guest.js";
 export { GUEST_PROTOCOL, GUEST_SANDBOX, OPAQUE_ORIGIN, isGuestReady, isHostHello } from "./protocol.js";
-export type { GuestAct, GuestAnswer, GuestEdge, GuestEvent, GuestNode, GuestProps, GuestReady, GuestRefusal, GuestRequest, HostHello, HostMessage, } from "./protocol.js";
+export type { GuestAct, GuestAnswer, GuestEdge, GuestDomEvent, GuestEvent, GuestNode, GuestPlace, GuestPressed, GuestProps, GuestTheme, GuestReady, GuestRefusal, GuestRequest, HostHello, HostMessage, } from "./protocol.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,YAAY,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACxG,YAAY,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,WAAW,GACZ,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,YAAY,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACxG,YAAY,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,aAAa,EACb,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,WAAW,GACZ,MAAM,eAAe,CAAC"}

package/dist/open-kit.d.ts

@@ -0,0 +1,148 @@
+/**
+ * THE OPEN KIT (FR-90): what a worker view may draw, declared once.
+ *
+ * Graview Cloud's ADR 0007 put it in one line: safety comes from what a
+ * view can REACH, not from what it can DRAW. So the kit is broad — most of
+ * HTML's sectioning, text, lists, tables, disclosure and form controls,
+ * images, SVG's shapes, paths, text and gradients, and CSS for layout,
+ * colour, type, transitions, keyframes and media queries — and what is left
+ * out is exactly what could fetch, escape the region, or speak for the app:
+ *
+ *   fetch     `<script>`, `<iframe>`, `<object>`, `<embed>`, `<link>`, `<meta>`,
+ *             `<base>`, `<style>` outside the view's own stylesheet, media and
+ *             canvas, SVG `<image>`, `<feImage>`, `<foreignObject>`, SVG `<a>`,
+ *             SMIL (which can rewrite an `href`), every `src`/`href`/`srcset`
+ *             but an image's `data:` or same-origin `blob:` source and an SVG
+ *             reference to `#id` in the view's own drawing, and in CSS every
+ *             `url()` but `url(#id)` on a paint, `@import`, `@font-face`,
+ *             `@namespace`, and every function not on `CSS_FUNCTIONS`
+ *             (`image-set()`, `cross-fade()`, `element()`, `paint()`,
+ *             `attr()`, `expression()`, …).
+ *   escape    `position: fixed` and `sticky`, `:host` and `::slotted`, the
+ *             top layer (`popover`, `<dialog>`), `autofocus`, `accesskey`,
+ *             and `<form>`, whose submission is a navigation.
+ *   speak     `role="alert"`, the landmark roles the app's own chrome uses
+ *             and the elements that carry them (`<nav>`, `<header>`,
+ *             `<footer>`, `<aside>`, `<search>` are drawn as `<div>`, `<output>`
+ *             as `<span>`, and a `<section>` is never named),
+ *             `aria-live="assertive"`, and password and file inputs.
+ *
+ * The host draws from this declaration (host/open-render.ts, with
+ * host/css.ts for every stylesheet, style attribute and SVG paint), and the
+ * worker's runtime reads the same tables to tell an author at once what the
+ * host will not draw (worker/view.ts). Adding an element or an attribute
+ * here makes it drawable on both sides; nothing else changes.
+ *
+ * This module has no imports: a view's runtime carries it and nothing of
+ * the framework.
+ */
+/**
+ * What an attribute's value may be:
+ *
+ *   text      any string, as text (a title, a label, an id)
+ *   number    a finite number
+ *   boolean   present or absent
+ *   oneOf     one of a closed list, compared without case
+ *   css       a CSS value for the property of the attribute's own name (an
+ *             SVG presentation attribute: `fill`, `stroke`, …), sanitised
+ *             as a stylesheet's value is
+ *   geometry  SVG geometry and transforms (`d`, `points`, `viewBox`,
+ *             `transform`): numbers, letters, commas and brackets, never `url`
+ *   image     an image's source: a `data:image/…` URL, or a `blob:` URL of
+ *             the host page's own origin
+ *   fragment  a reference to an element of the view's own drawing: `#id`
+ *   style     a declaration list, sanitised as a stylesheet's declarations
+ */
+export type OpenAttribute = "text" | "number" | "boolean" | "css" | "geometry" | "image" | "fragment" | "style" | {
+    readonly oneOf: readonly string[];
+};
+export interface OpenElement {
+    /** The attributes this element takes beyond its namespace's global ones, by canonical name. */
+    readonly attributes?: Readonly<Record<string, OpenAttribute>>;
+    /** It holds nothing (`img`, `input`, `br`). */
+    readonly empty?: true;
+}
+/** Attributes every HTML element takes. `aria-*` and `data-*` are read by pattern (`isAriaAttribute`, `isDataAttribute`). */
+export declare const HTML_GLOBAL_ATTRIBUTES: Readonly<Record<string, OpenAttribute>>;
+/** The HTML elements a view may draw, by name. */
+export declare const HTML_ELEMENTS: Readonly<Record<string, OpenElement>>;
+/** Attributes every SVG element takes. */
+export declare const SVG_GLOBAL_ATTRIBUTES: Readonly<Record<string, OpenAttribute>>;
+/** The SVG elements a view may draw, by canonical (camel-cased) name. */
+export declare const SVG_ELEMENTS: Readonly<Record<string, OpenElement>>;
+/**
+ * What is refused, and why, for an author and for the tests: none of these
+ * is in the tables above, and a test holds them out. Not the allowlist —
+ * anything not above is refused — but the names a reader looks for.
+ */
+export declare const NEVER_DRAWN: {
+    readonly html: readonly ["script", "iframe", "frame", "frameset", "object", "embed", "applet", "portal", "link", "meta", "base", "style", "form", "template", "slot", "noscript", "audio", "video", "source", "track", "picture", "canvas", "dialog", "datalist", "main", "html", "head", "body", "title"];
+    readonly svg: readonly ["image", "feImage", "filter", "foreignObject", "a", "script", "style", "animate", "animateMotion", "animateTransform", "set", "discard", "view", "switch", "cursor", "font-face"];
+    readonly attributes: readonly ["src (outside img)", "href", "xlink:href (outside a #fragment)", "srcset", "sizes", "action", "formaction", "ping", "poster", "background", "on*", "popover", "popovertarget", "autofocus", "accesskey", "contenteditable", "is", "nonce", "autocomplete", "form", "list"];
+};
+/** Roles that would make a view speak as the app's own chrome or notices. */
+export declare const REFUSED_ROLES: readonly ["alert", "alertdialog", "dialog", "banner", "main", "navigation", "contentinfo", "complementary", "search", "form", "region", "application", "status", "log", "marquee", "timer"];
+/**
+ * Elements whose own role is a landmark or a notice's, drawn as an element
+ * with none: what they hold is drawn, but they speak as the app's chrome
+ * (`<nav>` is a navigation landmark, `<header>` a banner, `<output>` a
+ * status) to assistive technology. Setting a role on them cannot cover it:
+ * `role="none"` on a focusable or named element is ignored, and the
+ * landmark comes back. A view's stylesheet reaches them by class, not by
+ * these names.
+ */
+export declare const HTML_DRAWN_AS: Readonly<Record<string, string>>;
+/** Attributes that would name an element: a named `<section>` is a region landmark, so a section is never named. */
+export declare const UNNAMED_ELEMENTS: Readonly<Record<string, readonly string[]>>;
+/** `aria-*`, by pattern. */
+export declare function isAriaAttribute(name: string): boolean;
+/** `data-*`, by pattern. */
+export declare function isDataAttribute(name: string): boolean;
+/**
+ * THE CSS A VIEW MAY WRITE: an allowlist of properties, so a property a
+ * browser ships tomorrow that takes an image is refused until somebody adds
+ * it here, rather than drawn until somebody notices.
+ */
+export declare const CSS_PROPERTIES: readonly string[];
+/**
+ * The CSS functions a value may call. Every one makes a value of its own
+ * arguments; none names a resource. `url()` is not here: it is read apart,
+ * and kept only as `url(#id)` on a property in `CSS_FRAGMENT_PROPERTIES`.
+ */
+export declare const CSS_FUNCTIONS: readonly string[];
+/**
+ * Where `url(#id)` stays: the paints and references an SVG drawing makes
+ * to its own gradients, clip paths, masks and markers. A fragment of the
+ * view's own drawing is resolved in the view's own tree and fetches
+ * nothing; anything else in a `url()` is refused wherever it is written.
+ */
+export declare const CSS_FRAGMENT_PROPERTIES: readonly string[];
+/** The at-rules a stylesheet may hold. `@import`, `@font-face`, `@namespace`, `@property`, `@layer` and the rest are refused. */
+export declare const CSS_AT_RULES: readonly string[];
+/**
+ * The values a property may take when it may take only some: `position`
+ * stays in the region (no `fixed`, no `sticky`), and so does `var()` — a
+ * property held to a list is held to a keyword, so a custom property
+ * cannot carry `fixed` into it.
+ */
+export declare const CSS_KEYWORD_PROPERTIES: Readonly<Record<string, readonly string[]>>;
+/** Selectors a view's stylesheet may not write: each reaches past the view's own tree. */
+export declare const CSS_REFUSED_SELECTORS: readonly string[];
+/** The largest stylesheet, in characters, a view may give. */
+export declare const OPEN_MAX_STYLESHEET = 64000;
+/** The longest attribute value, in characters; geometry (`d`, `points`) may be longer. */
+export declare const OPEN_MAX_ATTRIBUTE = 4000;
+export declare const OPEN_MAX_GEOMETRY = 100000;
+/** The largest image a view may hold, as its `data:` URL's length. */
+export declare const OPEN_MAX_IMAGE = 512000;
+/** The longest text a node may hold, in characters; longer is cut. */
+export declare const OPEN_MAX_TEXT = 10000;
+export declare const HTML_NAMESPACE = "http://www.w3.org/1999/xhtml";
+export declare const SVG_NAMESPACE = "http://www.w3.org/2000/svg";
+export declare function svgElementName(name: string): string | undefined;
+/** The canonical name of an attribute an element takes, from any casing (`viewbox` → `viewBox`), with what it may hold; or undefined. */
+export declare function openAttribute(namespace: "html" | "svg", element: string, name: string): {
+    readonly name: string;
+    readonly kind: OpenAttribute;
+} | undefined;
+//# sourceMappingURL=open-kit.d.ts.map

package/dist/open-kit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-kit.d.ts","sourceRoot":"","sources":["../src/open-kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAExJ,MAAM,WAAW,WAAW;IAC1B,+FAA+F;IAC/F,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9D,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;CACvB;AAKD,6HAA6H;AAC7H,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAe1E,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAuD/D,CAAC;AAWF,0CAA0C;AAC1C,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CASzE,CAAC;AAMF,yEAAyE;AACzE,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CA0B9D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;CAId,CAAC;AAEX,6EAA6E;AAC7E,eAAO,MAAM,aAAa,6LAA8L,CAAC;AAEzN;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAA6F,CAAC;AAEzJ,oHAAoH;AACpH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAA2D,CAAC;AAErI,4BAA4B;AAC5B,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,4BAA4B;AAC5B,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EA6C3C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAW1C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAAkG,CAAC;AAExJ,iIAAiI;AACjI,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAAoD,CAAC;AAE/F;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAK9E,CAAC;AAEF,0FAA0F;AAC1F,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAA8L,CAAC;AAElP,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAC1C,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AACxC,eAAO,MAAM,iBAAiB,SAAU,CAAC;AACzC,sEAAsE;AACtE,eAAO,MAAM,cAAc,SAAU,CAAC;AACtC,sEAAsE;AACtE,eAAO,MAAM,aAAa,QAAS,CAAC;AAEpC,eAAO,MAAM,cAAc,iCAAiC,CAAC;AAC7D,eAAO,MAAM,aAAa,+BAA+B,CAAC;AAI1D,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,yIAAyI;AACzI,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAAG,SAAS,CAW3J"}

package/dist/open-kit.js

@@ -0,0 +1,321 @@
+/**
+ * THE OPEN KIT (FR-90): what a worker view may draw, declared once.
+ *
+ * Graview Cloud's ADR 0007 put it in one line: safety comes from what a
+ * view can REACH, not from what it can DRAW. So the kit is broad — most of
+ * HTML's sectioning, text, lists, tables, disclosure and form controls,
+ * images, SVG's shapes, paths, text and gradients, and CSS for layout,
+ * colour, type, transitions, keyframes and media queries — and what is left
+ * out is exactly what could fetch, escape the region, or speak for the app:
+ *
+ *   fetch     `<script>`, `<iframe>`, `<object>`, `<embed>`, `<link>`, `<meta>`,
+ *             `<base>`, `<style>` outside the view's own stylesheet, media and
+ *             canvas, SVG `<image>`, `<feImage>`, `<foreignObject>`, SVG `<a>`,
+ *             SMIL (which can rewrite an `href`), every `src`/`href`/`srcset`
+ *             but an image's `data:` or same-origin `blob:` source and an SVG
+ *             reference to `#id` in the view's own drawing, and in CSS every
+ *             `url()` but `url(#id)` on a paint, `@import`, `@font-face`,
+ *             `@namespace`, and every function not on `CSS_FUNCTIONS`
+ *             (`image-set()`, `cross-fade()`, `element()`, `paint()`,
+ *             `attr()`, `expression()`, …).
+ *   escape    `position: fixed` and `sticky`, `:host` and `::slotted`, the
+ *             top layer (`popover`, `<dialog>`), `autofocus`, `accesskey`,
+ *             and `<form>`, whose submission is a navigation.
+ *   speak     `role="alert"`, the landmark roles the app's own chrome uses
+ *             and the elements that carry them (`<nav>`, `<header>`,
+ *             `<footer>`, `<aside>`, `<search>` are drawn as `<div>`, `<output>`
+ *             as `<span>`, and a `<section>` is never named),
+ *             `aria-live="assertive"`, and password and file inputs.
+ *
+ * The host draws from this declaration (host/open-render.ts, with
+ * host/css.ts for every stylesheet, style attribute and SVG paint), and the
+ * worker's runtime reads the same tables to tell an author at once what the
+ * host will not draw (worker/view.ts). Adding an element or an attribute
+ * here makes it drawable on both sides; nothing else changes.
+ *
+ * This module has no imports: a view's runtime carries it and nothing of
+ * the framework.
+ */
+const none = {};
+const empty = { empty: true };
+/** Attributes every HTML element takes. `aria-*` and `data-*` are read by pattern (`isAriaAttribute`, `isDataAttribute`). */
+export const HTML_GLOBAL_ATTRIBUTES = {
+    id: "text",
+    class: "text",
+    title: "text",
+    lang: "text",
+    dir: { oneOf: ["ltr", "rtl", "auto"] },
+    hidden: "text",
+    /* -1 or 0: a view orders its own controls by where it draws them, never ahead of the app's. */
+    tabindex: { oneOf: ["-1", "0"] },
+    role: "text",
+    style: "style",
+    translate: { oneOf: ["yes", "no"] },
+    spellcheck: { oneOf: ["true", "false"] },
+    draggable: { oneOf: ["true", "false"] },
+    inert: "boolean",
+};
+/** The HTML elements a view may draw, by name. */
+export const HTML_ELEMENTS = {
+    // sectioning and grouping
+    div: none, section: none, article: none, aside: none, header: none, footer: none, nav: none, hgroup: none, search: none, address: none,
+    figure: none, figcaption: none, blockquote: none, p: none, pre: none, hr: empty, br: empty, wbr: empty,
+    h1: none, h2: none, h3: none, h4: none, h5: none, h6: none,
+    // text
+    span: none, strong: none, em: none, b: none, i: none, u: none, s: none, small: none, mark: none, abbr: none, cite: none, q: none,
+    code: none, kbd: none, samp: none, var: none, sub: none, sup: none, dfn: none, bdi: none, bdo: none, ruby: none, rt: none, rp: none,
+    time: { attributes: { datetime: "text" } },
+    data: { attributes: { value: "text" } },
+    del: { attributes: { datetime: "text" } },
+    ins: { attributes: { datetime: "text" } },
+    /* A link goes to a record or a place of this app, never to an address (FR-93): it has no `href` to give. */
+    a: none,
+    // lists
+    ul: none, menu: none, dl: none, dt: none, dd: none,
+    ol: { attributes: { start: "number", reversed: "boolean", type: { oneOf: ["1", "a", "A", "i", "I"] } } },
+    li: { attributes: { value: "number" } },
+    // tables
+    table: none, caption: none, thead: none, tbody: none, tfoot: none, tr: none,
+    colgroup: { attributes: { span: "number" } },
+    col: { attributes: { span: "number" }, empty: true },
+    th: { attributes: { colspan: "number", rowspan: "number", headers: "text", scope: { oneOf: ["row", "col", "rowgroup", "colgroup"] }, abbr: "text" } },
+    td: { attributes: { colspan: "number", rowspan: "number", headers: "text" } },
+    // disclosure
+    details: { attributes: { open: "boolean", name: "text" } },
+    summary: none,
+    // controls: no form, so nothing is ever submitted
+    button: { attributes: { type: { oneOf: ["button"] }, disabled: "boolean", name: "text", value: "text" } },
+    input: {
+        empty: true,
+        attributes: {
+            /*
+             * Never password or file (a view does not ask for either), image (it has a src), hidden or submit.
+             * No `list`: a suggestion the person picks from a view's `<datalist>` is typed by the browser, trusted,
+             * and would pass the view's words off as theirs (FR-92).
+             */
+            type: { oneOf: ["text", "search", "number", "range", "checkbox", "radio", "date", "time", "datetime-local", "month", "week", "color", "email", "tel", "url"] },
+            name: "text", value: "text", placeholder: "text", min: "text", max: "text", step: "text", checked: "boolean", disabled: "boolean",
+            readonly: "boolean", required: "boolean", maxlength: "number", minlength: "number", size: "number", pattern: "text",
+            multiple: "boolean", inputmode: "text", enterkeyhint: "text",
+        },
+    },
+    select: { attributes: { name: "text", disabled: "boolean", multiple: "boolean", required: "boolean", size: "number" } },
+    option: { attributes: { value: "text", selected: "boolean", disabled: "boolean", label: "text" } },
+    optgroup: { attributes: { label: "text", disabled: "boolean" } },
+    textarea: { attributes: { name: "text", placeholder: "text", rows: "number", cols: "number", disabled: "boolean", readonly: "boolean", required: "boolean", maxlength: "number", minlength: "number", wrap: { oneOf: ["soft", "hard", "off"] } } },
+    label: { attributes: { for: "text" } },
+    fieldset: { attributes: { disabled: "boolean", name: "text" } },
+    legend: none,
+    output: none,
+    meter: { attributes: { value: "number", min: "number", max: "number", low: "number", high: "number", optimum: "number" } },
+    progress: { attributes: { value: "number", max: "number" } },
+    // images, held in the drawing: data: or the host's own blob:
+    img: { empty: true, attributes: { src: "image", alt: "text", width: "number", height: "number", decoding: { oneOf: ["async", "sync", "auto"] } } },
+};
+/** SVG's presentation attributes: CSS properties, sanitised as a stylesheet's are. */
+const PRESENTATION = [
+    "fill", "fill-opacity", "fill-rule", "stroke", "stroke-width", "stroke-linecap", "stroke-linejoin", "stroke-dasharray", "stroke-dashoffset",
+    "stroke-opacity", "stroke-miterlimit", "opacity", "color", "display", "visibility", "transform-origin", "clip-path", "clip-rule",
+    "marker-start", "marker-mid", "marker-end", "font-family", "font-size", "font-weight", "font-style", "text-anchor", "dominant-baseline",
+    "alignment-baseline", "letter-spacing", "text-decoration", "paint-order", "vector-effect", "shape-rendering", "pointer-events",
+    "stop-color", "stop-opacity", "overflow", "mask",
+];
+/** Attributes every SVG element takes. */
+export const SVG_GLOBAL_ATTRIBUTES = {
+    id: "text",
+    class: "text",
+    style: "style",
+    lang: "text",
+    role: "text",
+    tabindex: { oneOf: ["-1", "0"] },
+    transform: "geometry",
+    ...Object.fromEntries(PRESENTATION.map((name) => [name, "css"])),
+};
+const box = { x: "geometry", y: "geometry", width: "geometry", height: "geometry" };
+const viewport = { viewBox: "geometry", preserveAspectRatio: "geometry" };
+const gradient = { gradientUnits: { oneOf: ["userSpaceOnUse", "objectBoundingBox"] }, gradientTransform: "geometry", spreadMethod: { oneOf: ["pad", "reflect", "repeat"] }, href: "fragment" };
+/** The SVG elements a view may draw, by canonical (camel-cased) name. */
+export const SVG_ELEMENTS = {
+    svg: { attributes: { ...box, ...viewport } },
+    g: none,
+    defs: none,
+    symbol: { attributes: { ...box, ...viewport, refX: "geometry", refY: "geometry" } },
+    /* `use` within the drawing only: `#id`, never a document of its own. */
+    use: { attributes: { ...box, href: "fragment" } },
+    title: none,
+    desc: none,
+    path: { attributes: { d: "geometry", pathLength: "number" } },
+    rect: { attributes: { ...box, rx: "geometry", ry: "geometry", pathLength: "number" } },
+    circle: { attributes: { cx: "geometry", cy: "geometry", r: "geometry", pathLength: "number" } },
+    ellipse: { attributes: { cx: "geometry", cy: "geometry", rx: "geometry", ry: "geometry", pathLength: "number" } },
+    line: { attributes: { x1: "geometry", y1: "geometry", x2: "geometry", y2: "geometry", pathLength: "number" } },
+    polyline: { attributes: { points: "geometry", pathLength: "number" } },
+    polygon: { attributes: { points: "geometry", pathLength: "number" } },
+    text: { attributes: { x: "geometry", y: "geometry", dx: "geometry", dy: "geometry", rotate: "geometry", textLength: "geometry", lengthAdjust: { oneOf: ["spacing", "spacingAndGlyphs"] } } },
+    tspan: { attributes: { x: "geometry", y: "geometry", dx: "geometry", dy: "geometry", rotate: "geometry", textLength: "geometry" } },
+    textPath: { attributes: { href: "fragment", startOffset: "geometry", method: { oneOf: ["align", "stretch"] }, spacing: { oneOf: ["auto", "exact"] }, side: { oneOf: ["left", "right"] } } },
+    linearGradient: { attributes: { x1: "geometry", y1: "geometry", x2: "geometry", y2: "geometry", ...gradient } },
+    radialGradient: { attributes: { cx: "geometry", cy: "geometry", r: "geometry", fx: "geometry", fy: "geometry", fr: "geometry", ...gradient } },
+    stop: { attributes: { offset: "geometry" } },
+    clipPath: { attributes: { clipPathUnits: { oneOf: ["userSpaceOnUse", "objectBoundingBox"] } } },
+    mask: { attributes: { ...box, maskUnits: { oneOf: ["userSpaceOnUse", "objectBoundingBox"] }, maskContentUnits: { oneOf: ["userSpaceOnUse", "objectBoundingBox"] } } },
+    pattern: { attributes: { ...box, ...viewport, patternUnits: { oneOf: ["userSpaceOnUse", "objectBoundingBox"] }, patternContentUnits: { oneOf: ["userSpaceOnUse", "objectBoundingBox"] }, patternTransform: "geometry", href: "fragment" } },
+    marker: { attributes: { ...viewport, markerWidth: "geometry", markerHeight: "geometry", refX: "geometry", refY: "geometry", orient: "geometry", markerUnits: { oneOf: ["strokeWidth", "userSpaceOnUse"] } } },
+};
+/**
+ * What is refused, and why, for an author and for the tests: none of these
+ * is in the tables above, and a test holds them out. Not the allowlist —
+ * anything not above is refused — but the names a reader looks for.
+ */
+export const NEVER_DRAWN = {
+    html: ["script", "iframe", "frame", "frameset", "object", "embed", "applet", "portal", "link", "meta", "base", "style", "form", "template", "slot", "noscript", "audio", "video", "source", "track", "picture", "canvas", "dialog", "datalist", "main", "html", "head", "body", "title"],
+    svg: ["image", "feImage", "filter", "foreignObject", "a", "script", "style", "animate", "animateMotion", "animateTransform", "set", "discard", "view", "switch", "cursor", "font-face"],
+    attributes: ["src (outside img)", "href", "xlink:href (outside a #fragment)", "srcset", "sizes", "action", "formaction", "ping", "poster", "background", "on*", "popover", "popovertarget", "autofocus", "accesskey", "contenteditable", "is", "nonce", "autocomplete", "form", "list"],
+};
+/** Roles that would make a view speak as the app's own chrome or notices. */
+export const REFUSED_ROLES = ["alert", "alertdialog", "dialog", "banner", "main", "navigation", "contentinfo", "complementary", "search", "form", "region", "application", "status", "log", "marquee", "timer"];
+/**
+ * Elements whose own role is a landmark or a notice's, drawn as an element
+ * with none: what they hold is drawn, but they speak as the app's chrome
+ * (`<nav>` is a navigation landmark, `<header>` a banner, `<output>` a
+ * status) to assistive technology. Setting a role on them cannot cover it:
+ * `role="none"` on a focusable or named element is ignored, and the
+ * landmark comes back. A view's stylesheet reaches them by class, not by
+ * these names.
+ */
+export const HTML_DRAWN_AS = { nav: "div", header: "div", footer: "div", aside: "div", search: "div", output: "span" };
+/** Attributes that would name an element: a named `<section>` is a region landmark, so a section is never named. */
+export const UNNAMED_ELEMENTS = { section: ["aria-label", "aria-labelledby", "title"] };
+/** `aria-*`, by pattern. */
+export function isAriaAttribute(name) {
+    return /^aria-[a-z]+$/.test(name);
+}
+/** `data-*`, by pattern. */
+export function isDataAttribute(name) {
+    return /^data-[a-z0-9][a-z0-9_.-]*$/.test(name);
+}
+/**
+ * THE CSS A VIEW MAY WRITE: an allowlist of properties, so a property a
+ * browser ships tomorrow that takes an image is refused until somebody adds
+ * it here, rather than drawn until somebody notices.
+ */
+export const CSS_PROPERTIES = [
+    // box and layout
+    "display", "position", "top", "right", "bottom", "left", "inset", "inset-block", "inset-inline", "inset-block-start", "inset-block-end", "inset-inline-start", "inset-inline-end",
+    "width", "height", "min-width", "min-height", "max-width", "max-height", "inline-size", "block-size", "min-inline-size", "min-block-size", "max-inline-size", "max-block-size",
+    "margin", "margin-top", "margin-right", "margin-bottom", "margin-left", "margin-block", "margin-inline", "margin-block-start", "margin-block-end", "margin-inline-start", "margin-inline-end",
+    "padding", "padding-top", "padding-right", "padding-bottom", "padding-left", "padding-block", "padding-inline", "padding-block-start", "padding-block-end", "padding-inline-start", "padding-inline-end",
+    "box-sizing", "overflow", "overflow-x", "overflow-y", "overflow-wrap", "float", "clear", "z-index", "aspect-ratio", "object-fit", "object-position", "vertical-align",
+    "isolation", "contain", "container", "container-type", "container-name", "content-visibility",
+    // flex and grid
+    "flex", "flex-direction", "flex-wrap", "flex-flow", "flex-grow", "flex-shrink", "flex-basis", "order",
+    "grid", "grid-template", "grid-template-columns", "grid-template-rows", "grid-template-areas", "grid-auto-columns", "grid-auto-rows", "grid-auto-flow",
+    "grid-area", "grid-column", "grid-row", "grid-column-start", "grid-column-end", "grid-row-start", "grid-row-end",
+    "gap", "row-gap", "column-gap", "align-items", "align-content", "align-self", "justify-items", "justify-content", "justify-self", "place-items", "place-content", "place-self",
+    "columns", "column-count", "column-width", "column-rule", "column-rule-color", "column-rule-style", "column-rule-width", "column-span", "column-fill",
+    // colour and surface
+    "color", "background", "background-color", "background-image", "background-position", "background-position-x", "background-position-y", "background-size", "background-repeat",
+    "background-origin", "background-clip", "background-attachment", "background-blend-mode",
+    "border", "border-top", "border-right", "border-bottom", "border-left", "border-block", "border-inline", "border-block-start", "border-block-end", "border-inline-start", "border-inline-end",
+    "border-width", "border-style", "border-color", "border-top-width", "border-right-width", "border-bottom-width", "border-left-width",
+    "border-top-style", "border-right-style", "border-bottom-style", "border-left-style", "border-top-color", "border-right-color", "border-bottom-color", "border-left-color",
+    "border-radius", "border-top-left-radius", "border-top-right-radius", "border-bottom-right-radius", "border-bottom-left-radius",
+    "border-start-start-radius", "border-start-end-radius", "border-end-start-radius", "border-end-end-radius", "border-collapse", "border-spacing",
+    "outline", "outline-width", "outline-style", "outline-color", "outline-offset", "box-shadow", "opacity", "visibility", "mix-blend-mode", "filter", "backdrop-filter",
+    "clip-path", "accent-color", "caret-color", "color-scheme", "appearance", "-webkit-appearance",
+    // type
+    "font", "font-family", "font-size", "font-weight", "font-style", "font-stretch", "font-variant", "font-variant-numeric", "font-variant-caps", "font-variant-ligatures",
+    "font-feature-settings", "font-variation-settings", "font-kerning", "font-optical-sizing", "font-size-adjust", "font-synthesis",
+    "line-height", "letter-spacing", "word-spacing", "text-align", "text-align-last", "text-indent", "text-transform", "text-decoration", "text-decoration-line",
+    "text-decoration-color", "text-decoration-style", "text-decoration-thickness", "text-underline-offset", "text-underline-position", "text-shadow", "text-overflow",
+    "text-wrap", "text-wrap-mode", "text-wrap-style", "white-space", "white-space-collapse", "word-break", "line-break", "hyphens", "tab-size", "direction", "unicode-bidi", "writing-mode",
+    "text-orientation", "text-rendering", "-webkit-font-smoothing", "-webkit-line-clamp", "-webkit-box-orient", "line-clamp", "-webkit-text-fill-color", "-webkit-background-clip",
+    "list-style", "list-style-type", "list-style-position", "content", "quotes", "counter-reset", "counter-increment", "counter-set",
+    "table-layout", "caption-side", "empty-cells",
+    // motion
+    "transform", "transform-origin", "transform-box", "transform-style", "translate", "rotate", "scale", "perspective", "perspective-origin", "backface-visibility",
+    "transition", "transition-property", "transition-duration", "transition-timing-function", "transition-delay", "transition-behavior",
+    "animation", "animation-name", "animation-duration", "animation-timing-function", "animation-delay", "animation-iteration-count", "animation-direction",
+    "animation-fill-mode", "animation-play-state", "animation-composition", "will-change",
+    // interaction
+    "cursor", "pointer-events", "user-select", "-webkit-user-select", "touch-action", "resize", "scroll-behavior", "overscroll-behavior", "overscroll-behavior-x", "overscroll-behavior-y",
+    "scroll-snap-type", "scroll-snap-align", "scroll-snap-stop", "scroll-margin", "scroll-padding", "scrollbar-width", "scrollbar-color", "scrollbar-gutter",
+    // SVG
+    "fill", "fill-opacity", "fill-rule", "stroke", "stroke-width", "stroke-linecap", "stroke-linejoin", "stroke-dasharray", "stroke-dashoffset", "stroke-opacity", "stroke-miterlimit",
+    "stop-color", "stop-opacity", "clip-rule", "marker", "marker-start", "marker-mid", "marker-end", "paint-order", "vector-effect", "shape-rendering", "text-anchor",
+    "dominant-baseline", "alignment-baseline", "r", "cx", "cy", "rx", "ry", "x", "y", "d", "mask",
+];
+/**
+ * The CSS functions a value may call. Every one makes a value of its own
+ * arguments; none names a resource. `url()` is not here: it is read apart,
+ * and kept only as `url(#id)` on a property in `CSS_FRAGMENT_PROPERTIES`.
+ */
+export const CSS_FUNCTIONS = [
+    "var", "env", "calc", "min", "max", "clamp", "round", "mod", "rem", "abs", "sign", "sin", "cos", "tan", "asin", "acos", "atan", "atan2", "pow", "sqrt", "hypot", "log", "exp",
+    "rgb", "rgba", "hsl", "hsla", "hwb", "lab", "lch", "oklab", "oklch", "color", "color-mix", "light-dark",
+    "linear-gradient", "radial-gradient", "conic-gradient", "repeating-linear-gradient", "repeating-radial-gradient", "repeating-conic-gradient",
+    "translate", "translatex", "translatey", "translatez", "translate3d", "rotate", "rotatex", "rotatey", "rotatez", "rotate3d", "scale", "scalex", "scaley", "scalez", "scale3d",
+    "skew", "skewx", "skewy", "matrix", "matrix3d", "perspective",
+    "cubic-bezier", "steps", "linear",
+    "repeat", "minmax", "fit-content",
+    "blur", "brightness", "contrast", "drop-shadow", "grayscale", "hue-rotate", "invert", "saturate", "sepia", "opacity",
+    "circle", "ellipse", "inset", "polygon", "path", "xywh", "rect",
+    "counter", "counters",
+];
+/**
+ * Where `url(#id)` stays: the paints and references an SVG drawing makes
+ * to its own gradients, clip paths, masks and markers. A fragment of the
+ * view's own drawing is resolved in the view's own tree and fetches
+ * nothing; anything else in a `url()` is refused wherever it is written.
+ */
+export const CSS_FRAGMENT_PROPERTIES = ["fill", "stroke", "clip-path", "mask", "marker", "marker-start", "marker-mid", "marker-end"];
+/** The at-rules a stylesheet may hold. `@import`, `@font-face`, `@namespace`, `@property`, `@layer` and the rest are refused. */
+export const CSS_AT_RULES = ["media", "supports", "container", "keyframes"];
+/**
+ * The values a property may take when it may take only some: `position`
+ * stays in the region (no `fixed`, no `sticky`), and so does `var()` — a
+ * property held to a list is held to a keyword, so a custom property
+ * cannot carry `fixed` into it.
+ */
+export const CSS_KEYWORD_PROPERTIES = {
+    position: ["static", "relative", "absolute"],
+    /* Never `base-select`: a customizable select's picker is drawn in the top layer, over the whole page, styled by the view (Chrome 135+). */
+    appearance: ["auto", "none", "menulist-button", "textfield"],
+    "-webkit-appearance": ["auto", "none", "menulist-button", "textfield"],
+};
+/** Selectors a view's stylesheet may not write: each reaches past the view's own tree. */
+export const CSS_REFUSED_SELECTORS = ["host", "host-context", "slotted", "part", "backdrop", "picker", "view-transition", "view-transition-group", "view-transition-image-pair", "view-transition-old", "view-transition-new"];
+/** The largest stylesheet, in characters, a view may give. */
+export const OPEN_MAX_STYLESHEET = 64_000;
+/** The longest attribute value, in characters; geometry (`d`, `points`) may be longer. */
+export const OPEN_MAX_ATTRIBUTE = 4_000;
+export const OPEN_MAX_GEOMETRY = 100_000;
+/** The largest image a view may hold, as its `data:` URL's length. */
+export const OPEN_MAX_IMAGE = 512_000;
+/** The longest text a node may hold, in characters; longer is cut. */
+export const OPEN_MAX_TEXT = 10_000;
+export const HTML_NAMESPACE = "http://www.w3.org/1999/xhtml";
+export const SVG_NAMESPACE = "http://www.w3.org/2000/svg";
+/** An SVG element's canonical name from any casing of it (`lineargradient` → `linearGradient`). */
+const SVG_NAMES = new Map(Object.keys(SVG_ELEMENTS).map((name) => [name.toLowerCase(), name]));
+export function svgElementName(name) {
+    return SVG_NAMES.get(name.toLowerCase());
+}
+/** The canonical name of an attribute an element takes, from any casing (`viewbox` → `viewBox`), with what it may hold; or undefined. */
+export function openAttribute(namespace, element, name) {
+    const lower = name.toLowerCase();
+    const tables = namespace === "html" ? [HTML_ELEMENTS[element]?.attributes, HTML_GLOBAL_ATTRIBUTES] : [SVG_ELEMENTS[element]?.attributes, SVG_GLOBAL_ATTRIBUTES];
+    /* `xlink:href` is SVG 1's `href`; it is drawn as SVG 2's. */
+    const asked = namespace === "svg" && lower === "xlink:href" ? "href" : lower;
+    for (const table of tables) {
+        if (!table)
+            continue;
+        for (const [canonical, kind] of Object.entries(table))
+            if (canonical.toLowerCase() === asked)
+                return { name: canonical, kind };
+    }
+    if (isAriaAttribute(lower) || isDataAttribute(lower))
+        return { name: lower, kind: "text" };
+    return undefined;
+}
+//# sourceMappingURL=open-kit.js.map