@immediately-run/sdk 0.28.0 → 0.30.0

package/dist/components/HeadingAnchor.cjs

@@ -0,0 +1,45 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var HeadingAnchor_exports = {};
+__export(HeadingAnchor_exports, {
+  HeadingAnchor: () => HeadingAnchor
+});
+module.exports = __toCommonJS(HeadingAnchor_exports);
+var import_jsx_runtime = require("react/jsx-runtime");
+const HeadingAnchor = ({
+  id,
+  ...rest
+}) => {
+  if (!id) return null;
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+    "a",
+    {
+      className: "ir-heading-anchor",
+      href: `#${id}`,
+      "aria-label": "Permalink to this heading",
+      ...rest,
+      children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)("span", { "aria-hidden": "true", children: "#" })
+    }
+  );
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  HeadingAnchor
+});
+//# sourceMappingURL=HeadingAnchor.cjs.map

package/dist/components/HeadingAnchor.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/components/HeadingAnchor.tsx"],"sourcesContent":["import { ReactNode } from 'react';\n\n/**\n * Default MDX `HeadingAnchor` component — the render target for the autolink anchor\n * the transpiler's heading-slug plugin (R3-186, `MARKDOWN_SYNTAX_SPEC §15.4`)\n * prepends to every heading. That plugin sets the heading's own `id` (a text slug,\n * or a `sec-…` section id for a numbered heading, R3-211) and emits\n * `<HeadingAnchor id=\"<that id>\" />` as the heading's first child.\n *\n * It is registered in {@link DEFAULT_MDX_COMPONENTS} so a heading anchor renders\n * even in a plain-markdown repo that never calls `boot({ mdxComponents })` — the\n * MDX missing-reference guard never fires (§11.2 phantom defaults). The markup is\n * semantic and accessible — an `aria`-labelled `<a href=\"#id\">` permalink — but\n * **styling is intentionally minimal** (`§15.4` honesty note): an app supplies CSS\n * targeting the `ir-heading-anchor` class to reveal it on hover / add an icon, or\n * overrides this component via `boot({ mdxComponents: { HeadingAnchor } })` to\n * change the icon, position, or behaviour (e.g. copy-permalink-to-clipboard) of\n * every heading anchor in every content file at once (§15.4 late binding).\n *\n * `id` is the *heading's own* id, so the permalink `#id` is the same URL a reader\n * copies and (for a `sec-…` id) an agent computes from a `§`-citation with zero\n * lookup. A missing/empty `id` (defensive — the plugin always supplies one)\n * renders nothing rather than a dead `#` link.\n */\nexport const HeadingAnchor = ({\n  id,\n  ...rest\n}: {\n  id?: string;\n} & Omit<React.AnchorHTMLAttributes<HTMLAnchorElement>, 'href'>): ReactNode => {\n  if (!id) return null;\n  return (\n    <a\n      className=\"ir-heading-anchor\"\n      href={`#${id}`}\n      aria-label=\"Permalink to this heading\"\n      {...rest}\n    >\n      <span aria-hidden=\"true\">#</span>\n    </a>\n  );\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAsCM;AAdC,MAAM,gBAAgB,CAAC;AAAA,EAC5B;AAAA,EACA,GAAG;AACL,MAE+E;AAC7E,MAAI,CAAC,GAAI,QAAO;AAChB,SACE;AAAA,IAAC;AAAA;AAAA,MACC,WAAU;AAAA,MACV,MAAM,IAAI,EAAE;AAAA,MACZ,cAAW;AAAA,MACV,GAAG;AAAA,MAEJ,sDAAC,UAAK,eAAY,QAAO,eAAC;AAAA;AAAA,EAC5B;AAEJ;","names":[]}

package/dist/components/HeadingAnchor.d.cts

@@ -0,0 +1,29 @@
+import { ReactNode } from 'react';
+
+/**
+ * Default MDX `HeadingAnchor` component — the render target for the autolink anchor
+ * the transpiler's heading-slug plugin (R3-186, `MARKDOWN_SYNTAX_SPEC §15.4`)
+ * prepends to every heading. That plugin sets the heading's own `id` (a text slug,
+ * or a `sec-…` section id for a numbered heading, R3-211) and emits
+ * `<HeadingAnchor id="<that id>" />` as the heading's first child.
+ *
+ * It is registered in {@link DEFAULT_MDX_COMPONENTS} so a heading anchor renders
+ * even in a plain-markdown repo that never calls `boot({ mdxComponents })` — the
+ * MDX missing-reference guard never fires (§11.2 phantom defaults). The markup is
+ * semantic and accessible — an `aria`-labelled `<a href="#id">` permalink — but
+ * **styling is intentionally minimal** (`§15.4` honesty note): an app supplies CSS
+ * targeting the `ir-heading-anchor` class to reveal it on hover / add an icon, or
+ * overrides this component via `boot({ mdxComponents: { HeadingAnchor } })` to
+ * change the icon, position, or behaviour (e.g. copy-permalink-to-clipboard) of
+ * every heading anchor in every content file at once (§15.4 late binding).
+ *
+ * `id` is the *heading's own* id, so the permalink `#id` is the same URL a reader
+ * copies and (for a `sec-…` id) an agent computes from a `§`-citation with zero
+ * lookup. A missing/empty `id` (defensive — the plugin always supplies one)
+ * renders nothing rather than a dead `#` link.
+ */
+declare const HeadingAnchor: ({ id, ...rest }: {
+    id?: string;
+} & Omit<React.AnchorHTMLAttributes<HTMLAnchorElement>, "href">) => ReactNode;
+
+export { HeadingAnchor };

package/dist/components/HeadingAnchor.d.ts

@@ -0,0 +1,29 @@
+import { ReactNode } from 'react';
+
+/**
+ * Default MDX `HeadingAnchor` component — the render target for the autolink anchor
+ * the transpiler's heading-slug plugin (R3-186, `MARKDOWN_SYNTAX_SPEC §15.4`)
+ * prepends to every heading. That plugin sets the heading's own `id` (a text slug,
+ * or a `sec-…` section id for a numbered heading, R3-211) and emits
+ * `<HeadingAnchor id="<that id>" />` as the heading's first child.
+ *
+ * It is registered in {@link DEFAULT_MDX_COMPONENTS} so a heading anchor renders
+ * even in a plain-markdown repo that never calls `boot({ mdxComponents })` — the
+ * MDX missing-reference guard never fires (§11.2 phantom defaults). The markup is
+ * semantic and accessible — an `aria`-labelled `<a href="#id">` permalink — but
+ * **styling is intentionally minimal** (`§15.4` honesty note): an app supplies CSS
+ * targeting the `ir-heading-anchor` class to reveal it on hover / add an icon, or
+ * overrides this component via `boot({ mdxComponents: { HeadingAnchor } })` to
+ * change the icon, position, or behaviour (e.g. copy-permalink-to-clipboard) of
+ * every heading anchor in every content file at once (§15.4 late binding).
+ *
+ * `id` is the *heading's own* id, so the permalink `#id` is the same URL a reader
+ * copies and (for a `sec-…` id) an agent computes from a `§`-citation with zero
+ * lookup. A missing/empty `id` (defensive — the plugin always supplies one)
+ * renders nothing rather than a dead `#` link.
+ */
+declare const HeadingAnchor: ({ id, ...rest }: {
+    id?: string;
+} & Omit<React.AnchorHTMLAttributes<HTMLAnchorElement>, "href">) => ReactNode;
+
+export { HeadingAnchor };

package/dist/components/HeadingAnchor.js

@@ -0,0 +1,21 @@
+import { jsx } from "react/jsx-runtime";
+const HeadingAnchor = ({
+  id,
+  ...rest
+}) => {
+  if (!id) return null;
+  return /* @__PURE__ */ jsx(
+    "a",
+    {
+      className: "ir-heading-anchor",
+      href: `#${id}`,
+      "aria-label": "Permalink to this heading",
+      ...rest,
+      children: /* @__PURE__ */ jsx("span", { "aria-hidden": "true", children: "#" })
+    }
+  );
+};
+export {
+  HeadingAnchor
+};
+//# sourceMappingURL=HeadingAnchor.js.map

package/dist/components/HeadingAnchor.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/components/HeadingAnchor.tsx"],"sourcesContent":["import { ReactNode } from 'react';\n\n/**\n * Default MDX `HeadingAnchor` component — the render target for the autolink anchor\n * the transpiler's heading-slug plugin (R3-186, `MARKDOWN_SYNTAX_SPEC §15.4`)\n * prepends to every heading. That plugin sets the heading's own `id` (a text slug,\n * or a `sec-…` section id for a numbered heading, R3-211) and emits\n * `<HeadingAnchor id=\"<that id>\" />` as the heading's first child.\n *\n * It is registered in {@link DEFAULT_MDX_COMPONENTS} so a heading anchor renders\n * even in a plain-markdown repo that never calls `boot({ mdxComponents })` — the\n * MDX missing-reference guard never fires (§11.2 phantom defaults). The markup is\n * semantic and accessible — an `aria`-labelled `<a href=\"#id\">` permalink — but\n * **styling is intentionally minimal** (`§15.4` honesty note): an app supplies CSS\n * targeting the `ir-heading-anchor` class to reveal it on hover / add an icon, or\n * overrides this component via `boot({ mdxComponents: { HeadingAnchor } })` to\n * change the icon, position, or behaviour (e.g. copy-permalink-to-clipboard) of\n * every heading anchor in every content file at once (§15.4 late binding).\n *\n * `id` is the *heading's own* id, so the permalink `#id` is the same URL a reader\n * copies and (for a `sec-…` id) an agent computes from a `§`-citation with zero\n * lookup. A missing/empty `id` (defensive — the plugin always supplies one)\n * renders nothing rather than a dead `#` link.\n */\nexport const HeadingAnchor = ({\n  id,\n  ...rest\n}: {\n  id?: string;\n} & Omit<React.AnchorHTMLAttributes<HTMLAnchorElement>, 'href'>): ReactNode => {\n  if (!id) return null;\n  return (\n    <a\n      className=\"ir-heading-anchor\"\n      href={`#${id}`}\n      aria-label=\"Permalink to this heading\"\n      {...rest}\n    >\n      <span aria-hidden=\"true\">#</span>\n    </a>\n  );\n};\n"],"mappings":"AAsCM;AAdC,MAAM,gBAAgB,CAAC;AAAA,EAC5B;AAAA,EACA,GAAG;AACL,MAE+E;AAC7E,MAAI,CAAC,GAAI,QAAO;AAChB,SACE;AAAA,IAAC;AAAA;AAAA,MACC,WAAU;AAAA,MACV,MAAM,IAAI,EAAE;AAAA,MACZ,cAAW;AAAA,MACV,GAAG;AAAA,MAEJ,8BAAC,UAAK,eAAY,QAAO,eAAC;AAAA;AAAA,EAC5B;AAEJ;","names":[]}

package/dist/components/MDXComponents.cjs

@@ -20,6 +20,7 @@ var MDXComponents_exports = {};
 __export(MDXComponents_exports, {
   Admonition: () => import_Admonition2.Admonition,
   DEFAULT_MDX_COMPONENTS: () => DEFAULT_MDX_COMPONENTS,
+  HeadingAnchor: () => import_HeadingAnchor2.HeadingAnchor,
   InternalLink: () => import_Link2.InternalLink,
   Link: () => import_Link2.Link,
   WikiLink: () => import_WikiLink2.WikiLink
@@ -27,10 +28,12 @@ __export(MDXComponents_exports, {
 module.exports = __toCommonJS(MDXComponents_exports);
 var import_jsx_runtime = require("react/jsx-runtime");
 var import_Admonition = require("./Admonition");
+var import_HeadingAnchor = require("./HeadingAnchor");
 var import_Link = require("./Link");
 var import_WikiLink = require("./WikiLink");
 var import_Link2 = require("./Link");
 var import_Admonition2 = require("./Admonition");
+var import_HeadingAnchor2 = require("./HeadingAnchor");
 var import_WikiLink2 = require("./WikiLink");
 const DEFAULT_MDX_COMPONENTS = {
   a({
@@ -41,12 +44,14 @@ const DEFAULT_MDX_COMPONENTS = {
     return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_Link.Link, { href, ...properties, children });
   },
   Admonition: import_Admonition.Admonition,
+  HeadingAnchor: import_HeadingAnchor.HeadingAnchor,
   WikiLink: import_WikiLink.WikiLink
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   Admonition,
   DEFAULT_MDX_COMPONENTS,
+  HeadingAnchor,
   InternalLink,
   Link,
   WikiLink

package/dist/components/MDXComponents.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/MDXComponents.tsx"],"sourcesContent":["import { ReactNode } from 'react';\nimport { Admonition } from './Admonition';\nimport { Link } from './Link';\nimport { WikiLink } from './WikiLink';\n\n// The link primitives moved to ./Link so WikiLink can reuse Link without a\n// MDXComponents ↔ WikiLink import cycle (check:circular). Re-exported here so the\n// public `Link` / `InternalLink` entry points are unchanged.\nexport { InternalLink, Link } from './Link';\nexport { Admonition } from './Admonition';\nexport type { AdmonitionType } from './Admonition';\nexport { WikiLink } from './WikiLink';\n\n/** Default MDX component overrides passed to {@link MDXProvider} by `boot`. These\n *  are the platform's *phantom defaults* (MARKDOWN_SYNTAX_SPEC §11.2): they are\n *  always present in the provider — even for a plain-markdown repo that never\n *  calls `boot({ mdxComponents })` — so the platform-emitted `Admonition` (§12)\n *  and `WikiLink` (§13) components resolve without the MDX missing-reference guard\n *  firing, and Markdown links route in-app via {@link Link}. An app overrides any\n *  of them by name via `boot({ mdxComponents })`, which *merges* over these\n *  defaults (§11.3) — overriding `WikiLink` alone still keeps `a` and `Admonition`. */\nexport const DEFAULT_MDX_COMPONENTS = {\n  a({\n    href,\n    children,\n    ...properties\n  }: React.DetailedHTMLProps<React.AnchorHTMLAttributes<HTMLAnchorElement>, HTMLAnchorElement>) {\n    return (\n      <Link href={href} {...properties}>\n        {children}\n      </Link>\n    );\n  },\n  Admonition,\n  WikiLink,\n} as Record<string, (props: any) => ReactNode>;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA4BM;AA3BN,wBAA2B;AAC3B,kBAAqB;AACrB,sBAAyB;AAKzB,IAAAA,eAAmC;AACnC,IAAAC,qBAA2B;AAE3B,IAAAC,mBAAyB;AAUlB,MAAM,yBAAyB;AAAA,EACpC,EAAE;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EACL,GAA8F;AAC5F,WACE,4CAAC,oBAAK,MAAa,GAAG,YACnB,UACH;AAAA,EAEJ;AAAA,EACA;AAAA,EACA;AACF;","names":["import_Link","import_Admonition","import_WikiLink"]}
+{"version":3,"sources":["../../src/components/MDXComponents.tsx"],"sourcesContent":["import { ReactNode } from 'react';\nimport { Admonition } from './Admonition';\nimport { HeadingAnchor } from './HeadingAnchor';\nimport { Link } from './Link';\nimport { WikiLink } from './WikiLink';\n\n// The link primitives moved to ./Link so WikiLink can reuse Link without a\n// MDXComponents ↔ WikiLink import cycle (check:circular). Re-exported here so the\n// public `Link` / `InternalLink` entry points are unchanged.\nexport { InternalLink, Link } from './Link';\nexport { Admonition } from './Admonition';\nexport type { AdmonitionType } from './Admonition';\nexport { HeadingAnchor } from './HeadingAnchor';\nexport { WikiLink } from './WikiLink';\n\n/** Default MDX component overrides passed to {@link MDXProvider} by `boot`. These\n *  are the platform's *phantom defaults* (MARKDOWN_SYNTAX_SPEC §11.2): they are\n *  always present in the provider — even for a plain-markdown repo that never\n *  calls `boot({ mdxComponents })` — so the platform-emitted `Admonition` (§12)\n *  and `WikiLink` (§13) components resolve without the MDX missing-reference guard\n *  firing, and Markdown links route in-app via {@link Link}. An app overrides any\n *  of them by name via `boot({ mdxComponents })`, which *merges* over these\n *  defaults (§11.3) — overriding `WikiLink` alone still keeps `a` and `Admonition`. */\nexport const DEFAULT_MDX_COMPONENTS = {\n  a({\n    href,\n    children,\n    ...properties\n  }: React.DetailedHTMLProps<React.AnchorHTMLAttributes<HTMLAnchorElement>, HTMLAnchorElement>) {\n    return (\n      <Link href={href} {...properties}>\n        {children}\n      </Link>\n    );\n  },\n  Admonition,\n  HeadingAnchor,\n  WikiLink,\n} as Record<string, (props: any) => ReactNode>;\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA8BM;AA7BN,wBAA2B;AAC3B,2BAA8B;AAC9B,kBAAqB;AACrB,sBAAyB;AAKzB,IAAAA,eAAmC;AACnC,IAAAC,qBAA2B;AAE3B,IAAAC,wBAA8B;AAC9B,IAAAC,mBAAyB;AAUlB,MAAM,yBAAyB;AAAA,EACpC,EAAE;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EACL,GAA8F;AAC5F,WACE,4CAAC,oBAAK,MAAa,GAAG,YACnB,UACH;AAAA,EAEJ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;","names":["import_Link","import_Admonition","import_HeadingAnchor","import_WikiLink"]}

package/dist/components/MDXComponents.d.cts

@@ -1,6 +1,7 @@
 import { ReactNode } from 'react';
 export { InternalLink, Link } from './Link.cjs';
 export { Admonition, AdmonitionType } from './Admonition.cjs';
+export { HeadingAnchor } from './HeadingAnchor.cjs';
 export { WikiLink } from './WikiLink.cjs';
 
 /** Default MDX component overrides passed to {@link MDXProvider} by `boot`. These

package/dist/components/MDXComponents.d.ts

@@ -1,6 +1,7 @@
 import { ReactNode } from 'react';
 export { InternalLink, Link } from './Link.js';
 export { Admonition, AdmonitionType } from './Admonition.js';
+export { HeadingAnchor } from './HeadingAnchor.js';
 export { WikiLink } from './WikiLink.js';
 
 /** Default MDX component overrides passed to {@link MDXProvider} by `boot`. These

package/dist/components/MDXComponents.js

@@ -1,9 +1,11 @@
 import { jsx } from "react/jsx-runtime";
 import { Admonition } from "./Admonition";
+import { HeadingAnchor } from "./HeadingAnchor";
 import { Link } from "./Link";
 import { WikiLink } from "./WikiLink";
 import { InternalLink, Link as Link2 } from "./Link";
 import { Admonition as Admonition2 } from "./Admonition";
+import { HeadingAnchor as HeadingAnchor2 } from "./HeadingAnchor";
 import { WikiLink as WikiLink2 } from "./WikiLink";
 const DEFAULT_MDX_COMPONENTS = {
   a({
@@ -14,11 +16,13 @@ const DEFAULT_MDX_COMPONENTS = {
     return /* @__PURE__ */ jsx(Link, { href, ...properties, children });
   },
   Admonition,
+  HeadingAnchor,
   WikiLink
 };
 export {
   Admonition2 as Admonition,
   DEFAULT_MDX_COMPONENTS,
+  HeadingAnchor2 as HeadingAnchor,
   InternalLink,
   Link2 as Link,
   WikiLink2 as WikiLink

package/dist/components/MDXComponents.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/components/MDXComponents.tsx"],"sourcesContent":["import { ReactNode } from 'react';\nimport { Admonition } from './Admonition';\nimport { Link } from './Link';\nimport { WikiLink } from './WikiLink';\n\n// The link primitives moved to ./Link so WikiLink can reuse Link without a\n// MDXComponents ↔ WikiLink import cycle (check:circular). Re-exported here so the\n// public `Link` / `InternalLink` entry points are unchanged.\nexport { InternalLink, Link } from './Link';\nexport { Admonition } from './Admonition';\nexport type { AdmonitionType } from './Admonition';\nexport { WikiLink } from './WikiLink';\n\n/** Default MDX component overrides passed to {@link MDXProvider} by `boot`. These\n *  are the platform's *phantom defaults* (MARKDOWN_SYNTAX_SPEC §11.2): they are\n *  always present in the provider — even for a plain-markdown repo that never\n *  calls `boot({ mdxComponents })` — so the platform-emitted `Admonition` (§12)\n *  and `WikiLink` (§13) components resolve without the MDX missing-reference guard\n *  firing, and Markdown links route in-app via {@link Link}. An app overrides any\n *  of them by name via `boot({ mdxComponents })`, which *merges* over these\n *  defaults (§11.3) — overriding `WikiLink` alone still keeps `a` and `Admonition`. */\nexport const DEFAULT_MDX_COMPONENTS = {\n  a({\n    href,\n    children,\n    ...properties\n  }: React.DetailedHTMLProps<React.AnchorHTMLAttributes<HTMLAnchorElement>, HTMLAnchorElement>) {\n    return (\n      <Link href={href} {...properties}>\n        {children}\n      </Link>\n    );\n  },\n  Admonition,\n  WikiLink,\n} as Record<string, (props: any) => ReactNode>;\n"],"mappings":"AA4BM;AA3BN,SAAS,kBAAkB;AAC3B,SAAS,YAAY;AACrB,SAAS,gBAAgB;AAKzB,SAAS,cAAc,QAAAA,aAAY;AACnC,SAAS,cAAAC,mBAAkB;AAE3B,SAAS,YAAAC,iBAAgB;AAUlB,MAAM,yBAAyB;AAAA,EACpC,EAAE;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EACL,GAA8F;AAC5F,WACE,oBAAC,QAAK,MAAa,GAAG,YACnB,UACH;AAAA,EAEJ;AAAA,EACA;AAAA,EACA;AACF;","names":["Link","Admonition","WikiLink"]}
+{"version":3,"sources":["../../src/components/MDXComponents.tsx"],"sourcesContent":["import { ReactNode } from 'react';\nimport { Admonition } from './Admonition';\nimport { HeadingAnchor } from './HeadingAnchor';\nimport { Link } from './Link';\nimport { WikiLink } from './WikiLink';\n\n// The link primitives moved to ./Link so WikiLink can reuse Link without a\n// MDXComponents ↔ WikiLink import cycle (check:circular). Re-exported here so the\n// public `Link` / `InternalLink` entry points are unchanged.\nexport { InternalLink, Link } from './Link';\nexport { Admonition } from './Admonition';\nexport type { AdmonitionType } from './Admonition';\nexport { HeadingAnchor } from './HeadingAnchor';\nexport { WikiLink } from './WikiLink';\n\n/** Default MDX component overrides passed to {@link MDXProvider} by `boot`. These\n *  are the platform's *phantom defaults* (MARKDOWN_SYNTAX_SPEC §11.2): they are\n *  always present in the provider — even for a plain-markdown repo that never\n *  calls `boot({ mdxComponents })` — so the platform-emitted `Admonition` (§12)\n *  and `WikiLink` (§13) components resolve without the MDX missing-reference guard\n *  firing, and Markdown links route in-app via {@link Link}. An app overrides any\n *  of them by name via `boot({ mdxComponents })`, which *merges* over these\n *  defaults (§11.3) — overriding `WikiLink` alone still keeps `a` and `Admonition`. */\nexport const DEFAULT_MDX_COMPONENTS = {\n  a({\n    href,\n    children,\n    ...properties\n  }: React.DetailedHTMLProps<React.AnchorHTMLAttributes<HTMLAnchorElement>, HTMLAnchorElement>) {\n    return (\n      <Link href={href} {...properties}>\n        {children}\n      </Link>\n    );\n  },\n  Admonition,\n  HeadingAnchor,\n  WikiLink,\n} as Record<string, (props: any) => ReactNode>;\n"],"mappings":"AA8BM;AA7BN,SAAS,kBAAkB;AAC3B,SAAS,qBAAqB;AAC9B,SAAS,YAAY;AACrB,SAAS,gBAAgB;AAKzB,SAAS,cAAc,QAAAA,aAAY;AACnC,SAAS,cAAAC,mBAAkB;AAE3B,SAAS,iBAAAC,sBAAqB;AAC9B,SAAS,YAAAC,iBAAgB;AAUlB,MAAM,yBAAyB;AAAA,EACpC,EAAE;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,EACL,GAA8F;AAC5F,WACE,oBAAC,QAAK,MAAa,GAAG,YACnB,UACH;AAAA,EAEJ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;","names":["Link","Admonition","HeadingAnchor","WikiLink"]}

package/dist/index.cjs

@@ -49,6 +49,7 @@ __reExport(index_exports, require("./ready"), module.exports);
 __reExport(index_exports, require("./loading"), module.exports);
 __reExport(index_exports, require("./protocolStream"), module.exports);
 __reExport(index_exports, require("./sandboxTypes"), module.exports);
+__reExport(index_exports, require("./safeContent"), module.exports);
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ...require("./MDXProvider"),
@@ -84,6 +85,7 @@ __reExport(index_exports, require("./sandboxTypes"), module.exports);
   ...require("./ready"),
   ...require("./loading"),
   ...require("./protocolStream"),
-  ...require("./sandboxTypes")
+  ...require("./sandboxTypes"),
+  ...require("./safeContent")
 });
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export * from \"./MDXProvider\";\nexport * from \"./routing\";\nexport * from \"./boot\";\nexport * from './components/Include';\nexport * from './components/MDXComponents';\nexport * from './components/MountImage';\nexport * from './components/Routes';\nexport * from './hooks'\nexport * from './auth';\nexport * from './theme';\nexport * from './editorContext';\nexport * from './editor';\nexport * from './formFactor';\nexport * from './region';\nexport * from './mounts';\nexport * from './contribute';\nexport * from './catalog';\nexport * from './ipc';\nexport * from './dnd';\nexport * from './netFetch';\nexport * from './secrets';\nexport * from './llm';\nexport * from './diagnostics';\nexport * from './vcs';\nexport * from './onFsChange';\nexport * from './fs';\nexport * from './debug';\nexport * from './tasks';\nexport * from './runtime';\nexport * from './irMarkers';\nexport * from './ready';\nexport * from './loading';\nexport * from './protocolStream';\nexport * from './sandboxTypes';\n"],"mappings":";;;;;;;;;;;;;;;AAAA;AAAA;AAAA,0BAAc,0BAAd;AACA,0BAAc,sBADd;AAEA,0BAAc,mBAFd;AAGA,0BAAc,iCAHd;AAIA,0BAAc,uCAJd;AAKA,0BAAc,oCALd;AAMA,0BAAc,gCANd;AAOA,0BAAc,oBAPd;AAQA,0BAAc,mBARd;AASA,0BAAc,oBATd;AAUA,0BAAc,4BAVd;AAWA,0BAAc,qBAXd;AAYA,0BAAc,yBAZd;AAaA,0BAAc,qBAbd;AAcA,0BAAc,qBAdd;AAeA,0BAAc,yBAfd;AAgBA,0BAAc,sBAhBd;AAiBA,0BAAc,kBAjBd;AAkBA,0BAAc,kBAlBd;AAmBA,0BAAc,uBAnBd;AAoBA,0BAAc,sBApBd;AAqBA,0BAAc,kBArBd;AAsBA,0BAAc,0BAtBd;AAuBA,0BAAc,kBAvBd;AAwBA,0BAAc,yBAxBd;AAyBA,0BAAc,iBAzBd;AA0BA,0BAAc,oBA1Bd;AA2BA,0BAAc,oBA3Bd;AA4BA,0BAAc,sBA5Bd;AA6BA,0BAAc,wBA7Bd;AA8BA,0BAAc,oBA9Bd;AA+BA,0BAAc,sBA/Bd;AAgCA,0BAAc,6BAhCd;AAiCA,0BAAc,2BAjCd;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export * from \"./MDXProvider\";\nexport * from \"./routing\";\nexport * from \"./boot\";\nexport * from './components/Include';\nexport * from './components/MDXComponents';\nexport * from './components/MountImage';\nexport * from './components/Routes';\nexport * from './hooks'\nexport * from './auth';\nexport * from './theme';\nexport * from './editorContext';\nexport * from './editor';\nexport * from './formFactor';\nexport * from './region';\nexport * from './mounts';\nexport * from './contribute';\nexport * from './catalog';\nexport * from './ipc';\nexport * from './dnd';\nexport * from './netFetch';\nexport * from './secrets';\nexport * from './llm';\nexport * from './diagnostics';\nexport * from './vcs';\nexport * from './onFsChange';\nexport * from './fs';\nexport * from './debug';\nexport * from './tasks';\nexport * from './runtime';\nexport * from './irMarkers';\nexport * from './ready';\nexport * from './loading';\nexport * from './protocolStream';\nexport * from './sandboxTypes';\nexport * from './safeContent';\n"],"mappings":";;;;;;;;;;;;;;;AAAA;AAAA;AAAA,0BAAc,0BAAd;AACA,0BAAc,sBADd;AAEA,0BAAc,mBAFd;AAGA,0BAAc,iCAHd;AAIA,0BAAc,uCAJd;AAKA,0BAAc,oCALd;AAMA,0BAAc,gCANd;AAOA,0BAAc,oBAPd;AAQA,0BAAc,mBARd;AASA,0BAAc,oBATd;AAUA,0BAAc,4BAVd;AAWA,0BAAc,qBAXd;AAYA,0BAAc,yBAZd;AAaA,0BAAc,qBAbd;AAcA,0BAAc,qBAdd;AAeA,0BAAc,yBAfd;AAgBA,0BAAc,sBAhBd;AAiBA,0BAAc,kBAjBd;AAkBA,0BAAc,kBAlBd;AAmBA,0BAAc,uBAnBd;AAoBA,0BAAc,sBApBd;AAqBA,0BAAc,kBArBd;AAsBA,0BAAc,0BAtBd;AAuBA,0BAAc,kBAvBd;AAwBA,0BAAc,yBAxBd;AAyBA,0BAAc,iBAzBd;AA0BA,0BAAc,oBA1Bd;AA2BA,0BAAc,oBA3Bd;AA4BA,0BAAc,sBA5Bd;AA6BA,0BAAc,wBA7Bd;AA8BA,0BAAc,oBA9Bd;AA+BA,0BAAc,sBA/Bd;AAgCA,0BAAc,6BAhCd;AAiCA,0BAAc,2BAjCd;AAkCA,0BAAc,0BAlCd;","names":[]}

package/dist/index.d.cts

@@ -32,7 +32,13 @@ export { ReadyState, __resetReady, __setReadyDeps, getReadyState, onReady, repor
 export { LOADING_TIMINGS, LoadingRegion, Skeleton, SkeletonArchetype, SkeletonRow, Spinner } from './loading.cjs';
 export { StreamError, StreamFrame, StreamTransport, consumeStream, protocolStream } from './protocolStream.cjs';
 export { EvaluationContext, FileQueryResult, FilesMetadata, Metadata, MetadataQueryEntry, MetadataQueryFunction, MetadataQueryResult, ModuleExports } from './sandboxTypes.cjs';
+export { SafeContent, SafeContentProps } from './safeContent/SafeContent.cjs';
+export { RenderMdastOptions, SafeContentComponents, renderMdast } from './safeContent/renderMdast.cjs';
+export { SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './safeContent/parseSafeMdast.cjs';
+export { sanitizeUrl } from './safeContent/sanitizeUrl.cjs';
+export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from './safeContent/wikilink.cjs';
 export { Admonition, AdmonitionType } from './components/Admonition.cjs';
+export { HeadingAnchor } from './components/HeadingAnchor.cjs';
 export { ImmediatelyRunGlobal, getHostRuntime } from './hostRuntime.cjs';
 export { InternalLink, Link } from './components/Link.cjs';
 export { SDK_VERSION } from './version.cjs';

package/dist/index.d.ts

@@ -32,7 +32,13 @@ export { ReadyState, __resetReady, __setReadyDeps, getReadyState, onReady, repor
 export { LOADING_TIMINGS, LoadingRegion, Skeleton, SkeletonArchetype, SkeletonRow, Spinner } from './loading.js';
 export { StreamError, StreamFrame, StreamTransport, consumeStream, protocolStream } from './protocolStream.js';
 export { EvaluationContext, FileQueryResult, FilesMetadata, Metadata, MetadataQueryEntry, MetadataQueryFunction, MetadataQueryResult, ModuleExports } from './sandboxTypes.js';
+export { SafeContent, SafeContentProps } from './safeContent/SafeContent.js';
+export { RenderMdastOptions, SafeContentComponents, renderMdast } from './safeContent/renderMdast.js';
+export { SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './safeContent/parseSafeMdast.js';
+export { sanitizeUrl } from './safeContent/sanitizeUrl.js';
+export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from './safeContent/wikilink.js';
 export { Admonition, AdmonitionType } from './components/Admonition.js';
+export { HeadingAnchor } from './components/HeadingAnchor.js';
 export { ImmediatelyRunGlobal, getHostRuntime } from './hostRuntime.js';
 export { InternalLink, Link } from './components/Link.js';
 export { SDK_VERSION } from './version.js';

package/dist/index.js

@@ -32,4 +32,5 @@ export * from "./ready";
 export * from "./loading";
 export * from "./protocolStream";
 export * from "./sandboxTypes";
+export * from "./safeContent";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export * from \"./MDXProvider\";\nexport * from \"./routing\";\nexport * from \"./boot\";\nexport * from './components/Include';\nexport * from './components/MDXComponents';\nexport * from './components/MountImage';\nexport * from './components/Routes';\nexport * from './hooks'\nexport * from './auth';\nexport * from './theme';\nexport * from './editorContext';\nexport * from './editor';\nexport * from './formFactor';\nexport * from './region';\nexport * from './mounts';\nexport * from './contribute';\nexport * from './catalog';\nexport * from './ipc';\nexport * from './dnd';\nexport * from './netFetch';\nexport * from './secrets';\nexport * from './llm';\nexport * from './diagnostics';\nexport * from './vcs';\nexport * from './onFsChange';\nexport * from './fs';\nexport * from './debug';\nexport * from './tasks';\nexport * from './runtime';\nexport * from './irMarkers';\nexport * from './ready';\nexport * from './loading';\nexport * from './protocolStream';\nexport * from './sandboxTypes';\n"],"mappings":"AAAA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export * from \"./MDXProvider\";\nexport * from \"./routing\";\nexport * from \"./boot\";\nexport * from './components/Include';\nexport * from './components/MDXComponents';\nexport * from './components/MountImage';\nexport * from './components/Routes';\nexport * from './hooks'\nexport * from './auth';\nexport * from './theme';\nexport * from './editorContext';\nexport * from './editor';\nexport * from './formFactor';\nexport * from './region';\nexport * from './mounts';\nexport * from './contribute';\nexport * from './catalog';\nexport * from './ipc';\nexport * from './dnd';\nexport * from './netFetch';\nexport * from './secrets';\nexport * from './llm';\nexport * from './diagnostics';\nexport * from './vcs';\nexport * from './onFsChange';\nexport * from './fs';\nexport * from './debug';\nexport * from './tasks';\nexport * from './runtime';\nexport * from './irMarkers';\nexport * from './ready';\nexport * from './loading';\nexport * from './protocolStream';\nexport * from './sandboxTypes';\nexport * from './safeContent';\n"],"mappings":"AAAA,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;AACd,cAAc;","names":[]}

package/dist/safeContent/SafeContent.cjs

@@ -0,0 +1,54 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var SafeContent_exports = {};
+__export(SafeContent_exports, {
+  SafeContent: () => SafeContent
+});
+module.exports = __toCommonJS(SafeContent_exports);
+var import_react = require("react");
+var import_parseSafeMdast = require("./parseSafeMdast");
+var import_renderMdast = require("./renderMdast");
+function SafeContent({ source, fallback = null, ...options }) {
+  const [tree, setTree] = (0, import_react.useState)(null);
+  const runId = (0, import_react.useRef)(0);
+  (0, import_react.useEffect)(() => {
+    const id = ++runId.current;
+    setTree(null);
+    let cancelled = false;
+    (0, import_parseSafeMdast.parseSafeMdast)(source).then((parsed) => {
+      if (!cancelled && runId.current === id) setTree(parsed);
+    }).catch(() => {
+      if (!cancelled && runId.current === id) setTree(null);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [source]);
+  const rendered = (0, import_react.useMemo)(
+    () => tree ? (0, import_renderMdast.renderMdast)(tree, options) : null,
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    [tree, options.components, options.resolveWikiLink]
+  );
+  return tree ? rendered : fallback;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  SafeContent
+});
+//# sourceMappingURL=SafeContent.cjs.map

package/dist/safeContent/SafeContent.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/SafeContent.tsx"],"sourcesContent":["import { useEffect, useMemo, useRef, useState, type ReactNode } from 'react';\nimport { parseSafeMdast } from './parseSafeMdast';\nimport { renderMdast, type RenderMdastOptions } from './renderMdast';\n\n// `<SafeContent>` — the host/SDK-owned safe renderer (TRUST_MODES_SPEC §5.1,\n// AGENT_AUTHORING §10). An interpreter app renders untrusted Markdown/MDX-syntax\n// content — a shared board's body, a multi-writer wiki entry — through THIS component\n// so **no author JavaScript ever executes** while `<Component/>` syntax still reaches\n// the app's own safe components. It is the mandatory terminal for the MDX-from-mount\n// gate: a shared board is a multi-writer (M3) source, and compiled/executable MDX\n// would run board-author code with the app's authority (the WHITEBOARD §8 blast\n// radius this gate bounds).\n//\n// The parse (no-acorn, ESM-only deps) is async, so this renders a small placeholder\n// until the tree is ready, then the pure synchronous `renderMdast`. Parsing is keyed\n// on the source string; a changed source re-parses, and a stale async result is\n// discarded (the ref guard) so a fast source swap can't paint the wrong content.\n\nexport interface SafeContentProps extends RenderMdastOptions {\n  /** The untrusted Markdown/MDX-syntax source to render as data. */\n  source: string;\n  /** Rendered while the async parse is in flight (default: nothing). */\n  fallback?: ReactNode;\n}\n\nexport function SafeContent({ source, fallback = null, ...options }: SafeContentProps): ReactNode {\n  const [tree, setTree] = useState<Awaited<ReturnType<typeof parseSafeMdast>> | null>(null);\n  const runId = useRef(0);\n\n  useEffect(() => {\n    const id = ++runId.current;\n    setTree(null);\n    let cancelled = false;\n    parseSafeMdast(source)\n      .then((parsed) => {\n        // Discard a stale result (source changed / unmounted) so we never paint the\n        // wrong tree — the render-as-data guarantee also needs the RIGHT data shown.\n        if (!cancelled && runId.current === id) setTree(parsed);\n      })\n      .catch(() => {\n        if (!cancelled && runId.current === id) setTree(null);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [source]);\n\n  // `renderMdast` is pure; memoise on the tree + the option identities the caller\n  // passes. (Callers should memoise `components`/`resolveWikiLink` themselves for a\n  // stable identity; changing them re-renders, which is correct.)\n  const rendered = useMemo(\n    () => (tree ? renderMdast(tree, options) : null),\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [tree, options.components, options.resolveWikiLink],\n  );\n\n  return tree ? rendered : fallback;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAqE;AACrE,4BAA+B;AAC/B,yBAAqD;AAuB9C,SAAS,YAAY,EAAE,QAAQ,WAAW,MAAM,GAAG,QAAQ,GAAgC;AAChG,QAAM,CAAC,MAAM,OAAO,QAAI,uBAA4D,IAAI;AACxF,QAAM,YAAQ,qBAAO,CAAC;AAEtB,8BAAU,MAAM;AACd,UAAM,KAAK,EAAE,MAAM;AACnB,YAAQ,IAAI;AACZ,QAAI,YAAY;AAChB,8CAAe,MAAM,EAClB,KAAK,CAAC,WAAW;AAGhB,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,MAAM;AAAA,IACxD,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,IAAI;AAAA,IACtD,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAKX,QAAM,eAAW;AAAA,IACf,MAAO,WAAO,gCAAY,MAAM,OAAO,IAAI;AAAA;AAAA,IAE3C,CAAC,MAAM,QAAQ,YAAY,QAAQ,eAAe;AAAA,EACpD;AAEA,SAAO,OAAO,WAAW;AAC3B;","names":[]}

package/dist/safeContent/SafeContent.d.cts

@@ -0,0 +1,13 @@
+import { ReactNode } from 'react';
+import { RenderMdastOptions } from './renderMdast.cjs';
+import './parseSafeMdast.cjs';
+
+interface SafeContentProps extends RenderMdastOptions {
+    /** The untrusted Markdown/MDX-syntax source to render as data. */
+    source: string;
+    /** Rendered while the async parse is in flight (default: nothing). */
+    fallback?: ReactNode;
+}
+declare function SafeContent({ source, fallback, ...options }: SafeContentProps): ReactNode;
+
+export { SafeContent, type SafeContentProps };

package/dist/safeContent/SafeContent.d.ts

@@ -0,0 +1,13 @@
+import { ReactNode } from 'react';
+import { RenderMdastOptions } from './renderMdast.js';
+import './parseSafeMdast.js';
+
+interface SafeContentProps extends RenderMdastOptions {
+    /** The untrusted Markdown/MDX-syntax source to render as data. */
+    source: string;
+    /** Rendered while the async parse is in flight (default: nothing). */
+    fallback?: ReactNode;
+}
+declare function SafeContent({ source, fallback, ...options }: SafeContentProps): ReactNode;
+
+export { SafeContent, type SafeContentProps };

package/dist/safeContent/SafeContent.js

@@ -0,0 +1,30 @@
+import { useEffect, useMemo, useRef, useState } from "react";
+import { parseSafeMdast } from "./parseSafeMdast";
+import { renderMdast } from "./renderMdast";
+function SafeContent({ source, fallback = null, ...options }) {
+  const [tree, setTree] = useState(null);
+  const runId = useRef(0);
+  useEffect(() => {
+    const id = ++runId.current;
+    setTree(null);
+    let cancelled = false;
+    parseSafeMdast(source).then((parsed) => {
+      if (!cancelled && runId.current === id) setTree(parsed);
+    }).catch(() => {
+      if (!cancelled && runId.current === id) setTree(null);
+    });
+    return () => {
+      cancelled = true;
+    };
+  }, [source]);
+  const rendered = useMemo(
+    () => tree ? renderMdast(tree, options) : null,
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    [tree, options.components, options.resolveWikiLink]
+  );
+  return tree ? rendered : fallback;
+}
+export {
+  SafeContent
+};
+//# sourceMappingURL=SafeContent.js.map

package/dist/safeContent/SafeContent.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/SafeContent.tsx"],"sourcesContent":["import { useEffect, useMemo, useRef, useState, type ReactNode } from 'react';\nimport { parseSafeMdast } from './parseSafeMdast';\nimport { renderMdast, type RenderMdastOptions } from './renderMdast';\n\n// `<SafeContent>` — the host/SDK-owned safe renderer (TRUST_MODES_SPEC §5.1,\n// AGENT_AUTHORING §10). An interpreter app renders untrusted Markdown/MDX-syntax\n// content — a shared board's body, a multi-writer wiki entry — through THIS component\n// so **no author JavaScript ever executes** while `<Component/>` syntax still reaches\n// the app's own safe components. It is the mandatory terminal for the MDX-from-mount\n// gate: a shared board is a multi-writer (M3) source, and compiled/executable MDX\n// would run board-author code with the app's authority (the WHITEBOARD §8 blast\n// radius this gate bounds).\n//\n// The parse (no-acorn, ESM-only deps) is async, so this renders a small placeholder\n// until the tree is ready, then the pure synchronous `renderMdast`. Parsing is keyed\n// on the source string; a changed source re-parses, and a stale async result is\n// discarded (the ref guard) so a fast source swap can't paint the wrong content.\n\nexport interface SafeContentProps extends RenderMdastOptions {\n  /** The untrusted Markdown/MDX-syntax source to render as data. */\n  source: string;\n  /** Rendered while the async parse is in flight (default: nothing). */\n  fallback?: ReactNode;\n}\n\nexport function SafeContent({ source, fallback = null, ...options }: SafeContentProps): ReactNode {\n  const [tree, setTree] = useState<Awaited<ReturnType<typeof parseSafeMdast>> | null>(null);\n  const runId = useRef(0);\n\n  useEffect(() => {\n    const id = ++runId.current;\n    setTree(null);\n    let cancelled = false;\n    parseSafeMdast(source)\n      .then((parsed) => {\n        // Discard a stale result (source changed / unmounted) so we never paint the\n        // wrong tree — the render-as-data guarantee also needs the RIGHT data shown.\n        if (!cancelled && runId.current === id) setTree(parsed);\n      })\n      .catch(() => {\n        if (!cancelled && runId.current === id) setTree(null);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [source]);\n\n  // `renderMdast` is pure; memoise on the tree + the option identities the caller\n  // passes. (Callers should memoise `components`/`resolveWikiLink` themselves for a\n  // stable identity; changing them re-renders, which is correct.)\n  const rendered = useMemo(\n    () => (tree ? renderMdast(tree, options) : null),\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [tree, options.components, options.resolveWikiLink],\n  );\n\n  return tree ? rendered : fallback;\n}\n"],"mappings":"AAAA,SAAS,WAAW,SAAS,QAAQ,gBAAgC;AACrE,SAAS,sBAAsB;AAC/B,SAAS,mBAA4C;AAuB9C,SAAS,YAAY,EAAE,QAAQ,WAAW,MAAM,GAAG,QAAQ,GAAgC;AAChG,QAAM,CAAC,MAAM,OAAO,IAAI,SAA4D,IAAI;AACxF,QAAM,QAAQ,OAAO,CAAC;AAEtB,YAAU,MAAM;AACd,UAAM,KAAK,EAAE,MAAM;AACnB,YAAQ,IAAI;AACZ,QAAI,YAAY;AAChB,mBAAe,MAAM,EAClB,KAAK,CAAC,WAAW;AAGhB,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,MAAM;AAAA,IACxD,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,IAAI;AAAA,IACtD,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAKX,QAAM,WAAW;AAAA,IACf,MAAO,OAAO,YAAY,MAAM,OAAO,IAAI;AAAA;AAAA,IAE3C,CAAC,MAAM,QAAQ,YAAY,QAAQ,eAAe;AAAA,EACpD;AAEA,SAAO,OAAO,WAAW;AAC3B;","names":[]}

package/dist/safeContent/index.cjs

@@ -0,0 +1,43 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var safeContent_exports = {};
+__export(safeContent_exports, {
+  SafeContent: () => import_SafeContent.SafeContent,
+  parseSafeMdast: () => import_parseSafeMdast.parseSafeMdast,
+  parseWikiInner: () => import_wikilink.parseWikiInner,
+  renderMdast: () => import_renderMdast.renderMdast,
+  sanitizeUrl: () => import_sanitizeUrl.sanitizeUrl,
+  splitWikiLinks: () => import_wikilink.splitWikiLinks
+});
+module.exports = __toCommonJS(safeContent_exports);
+var import_SafeContent = require("./SafeContent");
+var import_renderMdast = require("./renderMdast");
+var import_parseSafeMdast = require("./parseSafeMdast");
+var import_sanitizeUrl = require("./sanitizeUrl");
+var import_wikilink = require("./wikilink");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  SafeContent,
+  parseSafeMdast,
+  parseWikiInner,
+  renderMdast,
+  sanitizeUrl,
+  splitWikiLinks
+});
+//# sourceMappingURL=index.cjs.map

package/dist/safeContent/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/index.ts"],"sourcesContent":["// Safe content rendering — non-executable MDX (TRUST_MODES_SPEC §5.1, AGENT_AUTHORING\n// §10). The host/SDK-owned renderer an INTERPRETER app uses to render untrusted\n// Markdown/MDX-syntax content as data, with **no evaluator anywhere in the pipeline**.\n// This is the mandatory terminal for the MDX-from-mount gate (§10 delta 1) — a shared\n// (multi-writer / M3) board or wiki entry MUST render through here, never compiled MDX.\n//\n// It is a **T2 tool, not a platform gate**: it stops content executing as code; it does\n// not certify anything to the host, and CO-4 data-fencing is still required for anything\n// that *reads* the content (the agent case).\n\nexport { SafeContent } from './SafeContent';\nexport type { SafeContentProps } from './SafeContent';\nexport { renderMdast } from './renderMdast';\nexport type {\n  RenderMdastOptions,\n  SafeContentComponents,\n} from './renderMdast';\nexport { parseSafeMdast } from './parseSafeMdast';\nexport type { SafeMdastNode, SafeMdxAttribute } from './parseSafeMdast';\nexport { sanitizeUrl } from './sanitizeUrl';\nexport { splitWikiLinks, parseWikiInner } from './wikilink';\nexport type { WikiLinkToken, WikiPart } from './wikilink';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUA,yBAA4B;AAE5B,yBAA4B;AAK5B,4BAA+B;AAE/B,yBAA4B;AAC5B,sBAA+C;","names":[]}

package/dist/safeContent/index.d.cts

@@ -0,0 +1,6 @@
+export { SafeContent, SafeContentProps } from './SafeContent.cjs';
+export { RenderMdastOptions, SafeContentComponents, renderMdast } from './renderMdast.cjs';
+export { SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './parseSafeMdast.cjs';
+export { sanitizeUrl } from './sanitizeUrl.cjs';
+export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from './wikilink.cjs';
+import 'react';

package/dist/safeContent/index.d.ts

@@ -0,0 +1,6 @@
+export { SafeContent, SafeContentProps } from './SafeContent.js';
+export { RenderMdastOptions, SafeContentComponents, renderMdast } from './renderMdast.js';
+export { SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './parseSafeMdast.js';
+export { sanitizeUrl } from './sanitizeUrl.js';
+export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from './wikilink.js';
+import 'react';

package/dist/safeContent/index.js

@@ -0,0 +1,14 @@
+import { SafeContent } from "./SafeContent";
+import { renderMdast } from "./renderMdast";
+import { parseSafeMdast } from "./parseSafeMdast";
+import { sanitizeUrl } from "./sanitizeUrl";
+import { splitWikiLinks, parseWikiInner } from "./wikilink";
+export {
+  SafeContent,
+  parseSafeMdast,
+  parseWikiInner,
+  renderMdast,
+  sanitizeUrl,
+  splitWikiLinks
+};
+//# sourceMappingURL=index.js.map

package/dist/safeContent/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/index.ts"],"sourcesContent":["// Safe content rendering — non-executable MDX (TRUST_MODES_SPEC §5.1, AGENT_AUTHORING\n// §10). The host/SDK-owned renderer an INTERPRETER app uses to render untrusted\n// Markdown/MDX-syntax content as data, with **no evaluator anywhere in the pipeline**.\n// This is the mandatory terminal for the MDX-from-mount gate (§10 delta 1) — a shared\n// (multi-writer / M3) board or wiki entry MUST render through here, never compiled MDX.\n//\n// It is a **T2 tool, not a platform gate**: it stops content executing as code; it does\n// not certify anything to the host, and CO-4 data-fencing is still required for anything\n// that *reads* the content (the agent case).\n\nexport { SafeContent } from './SafeContent';\nexport type { SafeContentProps } from './SafeContent';\nexport { renderMdast } from './renderMdast';\nexport type {\n  RenderMdastOptions,\n  SafeContentComponents,\n} from './renderMdast';\nexport { parseSafeMdast } from './parseSafeMdast';\nexport type { SafeMdastNode, SafeMdxAttribute } from './parseSafeMdast';\nexport { sanitizeUrl } from './sanitizeUrl';\nexport { splitWikiLinks, parseWikiInner } from './wikilink';\nexport type { WikiLinkToken, WikiPart } from './wikilink';\n"],"mappings":"AAUA,SAAS,mBAAmB;AAE5B,SAAS,mBAAmB;AAK5B,SAAS,sBAAsB;AAE/B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB,sBAAsB;","names":[]}

package/dist/safeContent/parseSafeMdast.cjs

@@ -0,0 +1,69 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var parseSafeMdast_exports = {};
+__export(parseSafeMdast_exports, {
+  parseSafeMdast: () => parseSafeMdast
+});
+module.exports = __toCommonJS(parseSafeMdast_exports);
+let depsPromise = null;
+function loadDeps() {
+  if (!depsPromise) {
+    depsPromise = Promise.all([
+      import("mdast-util-from-markdown"),
+      import("micromark-extension-mdx-jsx"),
+      import("mdast-util-mdx-jsx"),
+      import("micromark-extension-gfm"),
+      import("mdast-util-gfm")
+    ]).then(
+      ([fromMd, mdxJsxExt, mdxJsxMdast, gfmExt, gfmMdast]) => ({
+        fromMarkdown: fromMd.fromMarkdown,
+        mdxJsx: mdxJsxExt.mdxJsx,
+        mdxJsxFromMarkdown: mdxJsxMdast.mdxJsxFromMarkdown,
+        gfm: gfmExt.gfm,
+        gfmFromMarkdown: gfmMdast.gfmFromMarkdown
+      })
+    );
+  }
+  return depsPromise;
+}
+async function parseSafeMdast(source) {
+  const { fromMarkdown, mdxJsx, mdxJsxFromMarkdown, gfm, gfmFromMarkdown } = await loadDeps();
+  return fromMarkdown(source, {
+    // `mdxJsx()` WITHOUT an acorn option → JSX tags + literal attrs; expressions are
+    // raw strings, never estree. The mdx *expression* extension is intentionally
+    // absent, so `{…}` in body text stays literal. GFM for tables/task-lists.
+    extensions: [mdxJsx(), gfm()],
+    mdastExtensions: [mdxJsxFromMarkdown(), gfmFromMarkdown()]
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  parseSafeMdast
+});
+//# sourceMappingURL=parseSafeMdast.cjs.map