@graview/guest 0.1.9 → 0.1.12

package/dist/host/writes.d.ts

@@ -0,0 +1,49 @@
+import type { AnySchema, Store } from "@graview/core";
+import type { GuestRefusal } from "../protocol.js";
+import { type ManifestAct, type WorkerViewManifest } from "./manifest.js";
+/** Whether every member of the app sees every record: no sight is declared, or every kind is seen by everybody, whole. */
+export declare function sightIsTotal<S extends AnySchema>(store: Store<S>): boolean;
+/** A field the host read, at the moment of a press. */
+export interface PressedField {
+    readonly name: string;
+    readonly value: string | number | boolean;
+    /** The viewer typed it: the last change was theirs, and the view has not set it since. */
+    readonly typed: boolean;
+    /** It holds nothing, and nobody has touched it. */
+    readonly empty: boolean;
+    /**
+     * It is a pick — a radio, a select — whose value is the view's own words:
+     * the viewer chose it, but did not write it. Taken only as a value the
+     * app itself declares for the argument, or a record the view was shown.
+     */
+    readonly chosen?: true;
+}
+/**
+ * The values the app's own declaration allows an argument — an enum's
+ * options or a literal's values, through `optional()`, `default()` and the
+ * like — or undefined when it declares no such list.
+ */
+export declare function declaredValues(schema: unknown): readonly unknown[] | undefined;
+/** A press the host saw on an element bound to an act. */
+export interface Press {
+    /** What the view called the act (`data-act`). */
+    readonly as: string;
+    /** The record the element is bound to (`data-record`), if any. */
+    readonly record?: string;
+    /** The fields in the press's scope, read by the host. */
+    readonly fields: readonly PressedField[];
+}
+export type Judged = {
+    readonly ok: true;
+    readonly name: string;
+    readonly args: Record<string, unknown>;
+} | {
+    readonly ok: false;
+    readonly reason: GuestRefusal;
+    readonly message: string;
+};
+export declare const refuse: (reason: GuestRefusal, message: string) => Judged;
+export declare function entryFor(manifest: WorkerViewManifest, asked: string): ManifestAct | undefined;
+/** An act the view asked for from its own code (`graview.act`). */
+export declare function judgeCodeAct<S extends AnySchema>(store: Store<S>, manifest: WorkerViewManifest, name: string, args: Readonly<Record<string, unknown>>): Judged;
+//# sourceMappingURL=writes.d.ts.map

package/dist/host/writes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writes.d.ts","sourceRoot":"","sources":["../../src/host/writes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAgB,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAsCxF,0HAA0H;AAC1H,wBAAgB,YAAY,CAAC,CAAC,SAAS,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAI1E;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC1C,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,mDAAmD;IACnD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,OAAO,EAAE,GAAG,SAAS,CAU9E;AAED,0DAA0D;AAC1D,MAAM,WAAW,KAAK;IACpB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC;CAC1C;AAED,MAAM,MAAM,MAAM,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5L,eAAO,MAAM,MAAM,GAAI,QAAQ,YAAY,EAAE,SAAS,MAAM,KAAG,MAA0C,CAAC;AAE1G,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAE7F;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,CAAC,SAAS,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAK9J"}

package/dist/host/writes.js

@@ -0,0 +1,76 @@
+import { manifestActs } from "./manifest.js";
+/*
+ * WRITES THAT CANNOT LEAK (FR-92).
+ *
+ * A view runs for every member with that member's sight, and its author is
+ * not the member: a chat that read a record somebody else wrote may follow
+ * what was hidden in it. The danger is a view reading what this viewer may
+ * see and writing it where somebody else may see it. So:
+ *
+ *   An act must be named in the view's manifest, or it is refused.
+ *
+ *   Where the app's sight is total — every member sees every record — there
+ *   is nothing to leak, and an act the view asks for from its own code
+ *   applies with the arguments it gives (`sightIsTotal`).
+ *
+ *   Otherwise an act applies only from a press the HOST saw — a trusted
+ *   click on an element the view drew with `data-act` — in that press's own
+ *   handler, and its arguments come only from
+ *     · the record the element is bound to (`data-record`, on it or the
+ *       nearest element around it), one the view was shown;
+ *     · the manifest's constants for the act; and
+ *     · the values of fields the host itself read, each one the viewer
+ *       typed: the last change to it a trusted `input` or `change` event,
+ *       and nothing the view drew changing it since.
+ *   A field whose value the view set — its `value` attribute, a later
+ *   update, a textarea's text, an option's `selected` — is FILLED BY THE
+ *   VIEW, and a press that would carry it is refused. A view's code cannot
+ *   type: what it dispatches lands in its own worker's DOM, never the
+ *   host's, and every event it could cause there is untrusted.
+ *
+ * Either way the act is applied as the viewer, `via: "view:<name>"`, under
+ * the view's allowance, and undoable like any other.
+ *
+ * Pure: no DOM. The host's region reads the press and the fields
+ * (press.ts, fetched with the region's drawing), and judges them there.
+ */
+/** Whether every member of the app sees every record: no sight is declared, or every kind is seen by everybody, whole. */
+export function sightIsTotal(store) {
+    const sees = store.policy?.sees ?? [];
+    if (sees.length === 0)
+        return true;
+    return store.schema.kinds.every((kind) => sees.some((sight) => sight.roles === "*" && !sight.own && sight.kinds.includes(kind)));
+}
+/**
+ * The values the app's own declaration allows an argument — an enum's
+ * options or a literal's values, through `optional()`, `default()` and the
+ * like — or undefined when it declares no such list.
+ */
+export function declaredValues(schema) {
+    let at = schema;
+    for (let depth = 0; depth < 8 && at?._zod?.def; depth += 1) {
+        const def = at._zod.def;
+        if (def["type"] === "enum")
+            return Object.values(def["entries"]);
+        if (def["type"] === "literal")
+            return def["values"];
+        if (!("innerType" in def))
+            return undefined;
+        at = def["innerType"];
+    }
+    return undefined;
+}
+export const refuse = (reason, message) => ({ ok: false, reason, message });
+export function entryFor(manifest, asked) {
+    return manifestActs(manifest).find((one) => (one.as ?? one.act) === asked) ?? manifestActs(manifest).find((one) => one.act === asked && one.as === undefined);
+}
+/** An act the view asked for from its own code (`graview.act`). */
+export function judgeCodeAct(store, manifest, name, args) {
+    const entry = entryFor(manifest, name);
+    if (!entry)
+        return refuse("undeclared", `This view may not ask for “${name}”: its manifest does not name it.`);
+    if (!sightIsTotal(store))
+        return refuse("press-only", "In this app some members may not see some records, so a view's act applies only when you press it.");
+    return { ok: true, name: entry.act, args: { ...args, ...(entry.constants ?? {}) } };
+}
+//# sourceMappingURL=writes.js.map

package/dist/host/writes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writes.js","sourceRoot":"","sources":["../../src/host/writes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAA6C,MAAM,eAAe,CAAC;AAExF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,0HAA0H;AAC1H,MAAM,UAAU,YAAY,CAAsB,KAAe;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAQ,KAAK,CAAC,MAAM,CAAC,KAA2B,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC1J,CAAC;AAkBD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAe;IAC5C,IAAI,EAAE,GAAG,MAAkE,CAAC;IAC5E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QACxB,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAA4B,CAAC,CAAC;QAC5F,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,QAAQ,CAAc,CAAC;QACjE,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,EAAE,GAAG,GAAG,CAAC,WAAW,CAAc,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAcD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,MAAoB,EAAE,OAAe,EAAU,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAE1G,MAAM,UAAU,QAAQ,CAAC,QAA4B,EAAE,KAAa;IAClE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;AAChK,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAsB,KAAe,EAAE,QAA4B,EAAE,IAAY,EAAE,IAAuC;IACpJ,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,YAAY,EAAE,8BAA8B,IAAI,mCAAmC,CAAC,CAAC;IAC/G,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,YAAY,EAAE,oGAAoG,CAAC,CAAC;IAC5J,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;AACtF,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { connectGuest } from "./guest.js";
 export type { ConnectGuestOptions, Guest } from "./guest.js";
 export { GUEST_PROTOCOL, GUEST_SANDBOX, OPAQUE_ORIGIN, isGuestReady, isHostHello } from "./protocol.js";
-export type { GuestAct, GuestAnswer, GuestEdge, GuestEvent, GuestNode, GuestProps, GuestReady, GuestRefusal, GuestRequest, HostHello, HostMessage, } from "./protocol.js";
+export type { GuestAct, GuestAnswer, GuestEdge, GuestDomEvent, GuestEvent, GuestNode, GuestPlace, GuestPressed, GuestProps, GuestTheme, GuestReady, GuestRefusal, GuestRequest, HostHello, HostMessage, } from "./protocol.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,YAAY,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACxG,YAAY,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,WAAW,GACZ,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,YAAY,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACxG,YAAY,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,aAAa,EACb,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,WAAW,GACZ,MAAM,eAAe,CAAC"}

package/dist/open-kit.d.ts

@@ -0,0 +1,148 @@
+/**
+ * THE OPEN KIT (FR-90): what a worker view may draw, declared once.
+ *
+ * Graview Cloud's ADR 0007 put it in one line: safety comes from what a
+ * view can REACH, not from what it can DRAW. So the kit is broad — most of
+ * HTML's sectioning, text, lists, tables, disclosure and form controls,
+ * images, SVG's shapes, paths, text and gradients, and CSS for layout,
+ * colour, type, transitions, keyframes and media queries — and what is left
+ * out is exactly what could fetch, escape the region, or speak for the app:
+ *
+ *   fetch     `<script>`, `<iframe>`, `<object>`, `<embed>`, `<link>`, `<meta>`,
+ *             `<base>`, `<style>` outside the view's own stylesheet, media and
+ *             canvas, SVG `<image>`, `<feImage>`, `<foreignObject>`, SVG `<a>`,
+ *             SMIL (which can rewrite an `href`), every `src`/`href`/`srcset`
+ *             but an image's `data:` or same-origin `blob:` source and an SVG
+ *             reference to `#id` in the view's own drawing, and in CSS every
+ *             `url()` but `url(#id)` on a paint, `@import`, `@font-face`,
+ *             `@namespace`, and every function not on `CSS_FUNCTIONS`
+ *             (`image-set()`, `cross-fade()`, `element()`, `paint()`,
+ *             `attr()`, `expression()`, …).
+ *   escape    `position: fixed` and `sticky`, `:host` and `::slotted`, the
+ *             top layer (`popover`, `<dialog>`), `autofocus`, `accesskey`,
+ *             and `<form>`, whose submission is a navigation.
+ *   speak     `role="alert"`, the landmark roles the app's own chrome uses
+ *             and the elements that carry them (`<nav>`, `<header>`,
+ *             `<footer>`, `<aside>`, `<search>` are drawn as `<div>`, `<output>`
+ *             as `<span>`, and a `<section>` is never named),
+ *             `aria-live="assertive"`, and password and file inputs.
+ *
+ * The host draws from this declaration (host/open-render.ts, with
+ * host/css.ts for every stylesheet, style attribute and SVG paint), and the
+ * worker's runtime reads the same tables to tell an author at once what the
+ * host will not draw (worker/view.ts). Adding an element or an attribute
+ * here makes it drawable on both sides; nothing else changes.
+ *
+ * This module has no imports: a view's runtime carries it and nothing of
+ * the framework.
+ */
+/**
+ * What an attribute's value may be:
+ *
+ *   text      any string, as text (a title, a label, an id)
+ *   number    a finite number
+ *   boolean   present or absent
+ *   oneOf     one of a closed list, compared without case
+ *   css       a CSS value for the property of the attribute's own name (an
+ *             SVG presentation attribute: `fill`, `stroke`, …), sanitised
+ *             as a stylesheet's value is
+ *   geometry  SVG geometry and transforms (`d`, `points`, `viewBox`,
+ *             `transform`): numbers, letters, commas and brackets, never `url`
+ *   image     an image's source: a `data:image/…` URL, or a `blob:` URL of
+ *             the host page's own origin
+ *   fragment  a reference to an element of the view's own drawing: `#id`
+ *   style     a declaration list, sanitised as a stylesheet's declarations
+ */
+export type OpenAttribute = "text" | "number" | "boolean" | "css" | "geometry" | "image" | "fragment" | "style" | {
+    readonly oneOf: readonly string[];
+};
+export interface OpenElement {
+    /** The attributes this element takes beyond its namespace's global ones, by canonical name. */
+    readonly attributes?: Readonly<Record<string, OpenAttribute>>;
+    /** It holds nothing (`img`, `input`, `br`). */
+    readonly empty?: true;
+}
+/** Attributes every HTML element takes. `aria-*` and `data-*` are read by pattern (`isAriaAttribute`, `isDataAttribute`). */
+export declare const HTML_GLOBAL_ATTRIBUTES: Readonly<Record<string, OpenAttribute>>;
+/** The HTML elements a view may draw, by name. */
+export declare const HTML_ELEMENTS: Readonly<Record<string, OpenElement>>;
+/** Attributes every SVG element takes. */
+export declare const SVG_GLOBAL_ATTRIBUTES: Readonly<Record<string, OpenAttribute>>;
+/** The SVG elements a view may draw, by canonical (camel-cased) name. */
+export declare const SVG_ELEMENTS: Readonly<Record<string, OpenElement>>;
+/**
+ * What is refused, and why, for an author and for the tests: none of these
+ * is in the tables above, and a test holds them out. Not the allowlist —
+ * anything not above is refused — but the names a reader looks for.
+ */
+export declare const NEVER_DRAWN: {
+    readonly html: readonly ["script", "iframe", "frame", "frameset", "object", "embed", "applet", "portal", "link", "meta", "base", "style", "form", "template", "slot", "noscript", "audio", "video", "source", "track", "picture", "canvas", "dialog", "datalist", "main", "html", "head", "body", "title"];
+    readonly svg: readonly ["image", "feImage", "filter", "foreignObject", "a", "script", "style", "animate", "animateMotion", "animateTransform", "set", "discard", "view", "switch", "cursor", "font-face"];
+    readonly attributes: readonly ["src (outside img)", "href", "xlink:href (outside a #fragment)", "srcset", "sizes", "action", "formaction", "ping", "poster", "background", "on*", "popover", "popovertarget", "autofocus", "accesskey", "contenteditable", "is", "nonce", "autocomplete", "form", "list"];
+};
+/** Roles that would make a view speak as the app's own chrome or notices. */
+export declare const REFUSED_ROLES: readonly ["alert", "alertdialog", "dialog", "banner", "main", "navigation", "contentinfo", "complementary", "search", "form", "region", "application", "status", "log", "marquee", "timer"];
+/**
+ * Elements whose own role is a landmark or a notice's, drawn as an element
+ * with none: what they hold is drawn, but they speak as the app's chrome
+ * (`<nav>` is a navigation landmark, `<header>` a banner, `<output>` a
+ * status) to assistive technology. Setting a role on them cannot cover it:
+ * `role="none"` on a focusable or named element is ignored, and the
+ * landmark comes back. A view's stylesheet reaches them by class, not by
+ * these names.
+ */
+export declare const HTML_DRAWN_AS: Readonly<Record<string, string>>;
+/** Attributes that would name an element: a named `<section>` is a region landmark, so a section is never named. */
+export declare const UNNAMED_ELEMENTS: Readonly<Record<string, readonly string[]>>;
+/** `aria-*`, by pattern. */
+export declare function isAriaAttribute(name: string): boolean;
+/** `data-*`, by pattern. */
+export declare function isDataAttribute(name: string): boolean;
+/**
+ * THE CSS A VIEW MAY WRITE: an allowlist of properties, so a property a
+ * browser ships tomorrow that takes an image is refused until somebody adds
+ * it here, rather than drawn until somebody notices.
+ */
+export declare const CSS_PROPERTIES: readonly string[];
+/**
+ * The CSS functions a value may call. Every one makes a value of its own
+ * arguments; none names a resource. `url()` is not here: it is read apart,
+ * and kept only as `url(#id)` on a property in `CSS_FRAGMENT_PROPERTIES`.
+ */
+export declare const CSS_FUNCTIONS: readonly string[];
+/**
+ * Where `url(#id)` stays: the paints and references an SVG drawing makes
+ * to its own gradients, clip paths, masks and markers. A fragment of the
+ * view's own drawing is resolved in the view's own tree and fetches
+ * nothing; anything else in a `url()` is refused wherever it is written.
+ */
+export declare const CSS_FRAGMENT_PROPERTIES: readonly string[];
+/** The at-rules a stylesheet may hold. `@import`, `@font-face`, `@namespace`, `@property`, `@layer` and the rest are refused. */
+export declare const CSS_AT_RULES: readonly string[];
+/**
+ * The values a property may take when it may take only some: `position`
+ * stays in the region (no `fixed`, no `sticky`), and so does `var()` — a
+ * property held to a list is held to a keyword, so a custom property
+ * cannot carry `fixed` into it.
+ */
+export declare const CSS_KEYWORD_PROPERTIES: Readonly<Record<string, readonly string[]>>;
+/** Selectors a view's stylesheet may not write: each reaches past the view's own tree. */
+export declare const CSS_REFUSED_SELECTORS: readonly string[];
+/** The largest stylesheet, in characters, a view may give. */
+export declare const OPEN_MAX_STYLESHEET = 64000;
+/** The longest attribute value, in characters; geometry (`d`, `points`) may be longer. */
+export declare const OPEN_MAX_ATTRIBUTE = 4000;
+export declare const OPEN_MAX_GEOMETRY = 100000;
+/** The largest image a view may hold, as its `data:` URL's length. */
+export declare const OPEN_MAX_IMAGE = 512000;
+/** The longest text a node may hold, in characters; longer is cut. */
+export declare const OPEN_MAX_TEXT = 10000;
+export declare const HTML_NAMESPACE = "http://www.w3.org/1999/xhtml";
+export declare const SVG_NAMESPACE = "http://www.w3.org/2000/svg";
+export declare function svgElementName(name: string): string | undefined;
+/** The canonical name of an attribute an element takes, from any casing (`viewbox` → `viewBox`), with what it may hold; or undefined. */
+export declare function openAttribute(namespace: "html" | "svg", element: string, name: string): {
+    readonly name: string;
+    readonly kind: OpenAttribute;
+} | undefined;
+//# sourceMappingURL=open-kit.d.ts.map

package/dist/open-kit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-kit.d.ts","sourceRoot":"","sources":["../src/open-kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAExJ,MAAM,WAAW,WAAW;IAC1B,+FAA+F;IAC/F,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9D,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;CACvB;AAKD,6HAA6H;AAC7H,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAe1E,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAuD/D,CAAC;AAWF,0CAA0C;AAC1C,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CASzE,CAAC;AAMF,yEAAyE;AACzE,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CA0B9D,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;CAId,CAAC;AAEX,6EAA6E;AAC7E,eAAO,MAAM,aAAa,6LAA8L,CAAC;AAEzN;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAA6F,CAAC;AAEzJ,oHAAoH;AACpH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAA2D,CAAC;AAErI,4BAA4B;AAC5B,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,4BAA4B;AAC5B,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EA6C3C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAW1C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAAkG,CAAC;AAExJ,iIAAiI;AACjI,eAAO,MAAM,YAAY,EAAE,SAAS,MAAM,EAAoD,CAAC;AAE/F;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAK9E,CAAC;AAEF,0FAA0F;AAC1F,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAA8L,CAAC;AAElP,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAC1C,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AACxC,eAAO,MAAM,iBAAiB,SAAU,CAAC;AACzC,sEAAsE;AACtE,eAAO,MAAM,cAAc,SAAU,CAAC;AACtC,sEAAsE;AACtE,eAAO,MAAM,aAAa,QAAS,CAAC;AAEpC,eAAO,MAAM,cAAc,iCAAiC,CAAC;AAC7D,eAAO,MAAM,aAAa,+BAA+B,CAAC;AAI1D,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,yIAAyI;AACzI,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAAG,SAAS,CAW3J"}