@immediately-run/sdk 0.28.0 → 0.30.0

package/dist/safeContent/wikilink.cjs

@@ -0,0 +1,63 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var wikilink_exports = {};
+__export(wikilink_exports, {
+  parseWikiInner: () => parseWikiInner,
+  splitWikiLinks: () => splitWikiLinks
+});
+module.exports = __toCommonJS(wikilink_exports);
+const WIKILINK = /\[\[([^[\]]+)\]\]/g;
+function parseWikiInner(inner) {
+  const pipe = inner.indexOf("|");
+  let target;
+  let label;
+  if (pipe === -1) {
+    target = inner.trim();
+  } else {
+    label = inner.slice(0, pipe).trim();
+    target = inner.slice(pipe + 1).trim();
+  }
+  if (target === "") return null;
+  return label ? { target, label } : { target };
+}
+function splitWikiLinks(value) {
+  if (value.indexOf("[[") === -1) return null;
+  const out = [];
+  let lastIndex = 0;
+  let produced = false;
+  WIKILINK.lastIndex = 0;
+  let match;
+  while ((match = WIKILINK.exec(value)) !== null) {
+    const token = parseWikiInner(match[1]);
+    if (!token) continue;
+    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });
+    out.push({ wiki: token });
+    lastIndex = match.index + match[0].length;
+    produced = true;
+  }
+  if (!produced) return null;
+  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });
+  return out;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  parseWikiInner,
+  splitWikiLinks
+});
+//# sourceMappingURL=wikilink.cjs.map

package/dist/safeContent/wikilink.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/wikilink.ts"],"sourcesContent":["// Wikilink parsing for the safe content renderer (TRUST_MODES_SPEC §5.1). A §5.1\n// residual: wikilinks resolve **only within the granted mount, never a fetch**. The\n// kernel's executable pipeline compiles `[[target]]`/`[[label|target]]` to a\n// `<WikiLink>` component (transpiler `remarkWikiLinks`, MARKDOWN_SYNTAX_SPEC §13); the\n// SAFE renderer parses raw source, so it splits `[[…]]` out of text itself with the\n// same byte-local rule and hands the raw target/label to an injected, **in-mount**\n// resolver. The renderer never fetches; resolution is the consumer's mount-scoped\n// callback (or, absent one, the link renders as inert text).\n\n// Inner content up to the closing `]]`, forbidding `[`/`]` so nested brackets can't\n// be swallowed. Global — a text run may hold several.\nconst WIKILINK = /\\[\\[([^[\\]]+)\\]\\]/g;\n\nexport interface WikiLinkToken {\n  /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */\n  target: string;\n  /** The explicit label, or undefined (the component derives one). */\n  label?: string;\n}\n\nexport type WikiPart = { text: string } | { wiki: WikiLinkToken };\n\n/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target\n *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */\nexport function parseWikiInner(inner: string): WikiLinkToken | null {\n  const pipe = inner.indexOf('|');\n  let target: string;\n  let label: string | undefined;\n  if (pipe === -1) {\n    target = inner.trim();\n  } else {\n    label = inner.slice(0, pipe).trim();\n    target = inner.slice(pipe + 1).trim();\n  }\n  if (target === '') return null;\n  return label ? { target, label } : { target };\n}\n\n/**\n * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`\n * when there is no usable wiki-link (so the caller keeps the text node untouched).\n */\nexport function splitWikiLinks(value: string): WikiPart[] | null {\n  if (value.indexOf('[[') === -1) return null;\n  const out: WikiPart[] = [];\n  let lastIndex = 0;\n  let produced = false;\n  WIKILINK.lastIndex = 0;\n  let match: RegExpExecArray | null;\n  while ((match = WIKILINK.exec(value)) !== null) {\n    const token = parseWikiInner(match[1]);\n    if (!token) continue; // empty target → keep the literal `[[…]]`\n    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });\n    out.push({ wiki: token });\n    lastIndex = match.index + match[0].length;\n    produced = true;\n  }\n  if (!produced) return null;\n  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });\n  return out;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA,MAAM,WAAW;AAaV,SAAS,eAAe,OAAqC;AAClE,QAAM,OAAO,MAAM,QAAQ,GAAG;AAC9B,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS,IAAI;AACf,aAAS,MAAM,KAAK;AAAA,EACtB,OAAO;AACL,YAAQ,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK;AAClC,aAAS,MAAM,MAAM,OAAO,CAAC,EAAE,KAAK;AAAA,EACtC;AACA,MAAI,WAAW,GAAI,QAAO;AAC1B,SAAO,QAAQ,EAAE,QAAQ,MAAM,IAAI,EAAE,OAAO;AAC9C;AAMO,SAAS,eAAe,OAAkC;AAC/D,MAAI,MAAM,QAAQ,IAAI,MAAM,GAAI,QAAO;AACvC,QAAM,MAAkB,CAAC;AACzB,MAAI,YAAY;AAChB,MAAI,WAAW;AACf,WAAS,YAAY;AACrB,MAAI;AACJ,UAAQ,QAAQ,SAAS,KAAK,KAAK,OAAO,MAAM;AAC9C,UAAM,QAAQ,eAAe,MAAM,CAAC,CAAC;AACrC,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,UAAW,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,WAAW,MAAM,KAAK,EAAE,CAAC;AACnF,QAAI,KAAK,EAAE,MAAM,MAAM,CAAC;AACxB,gBAAY,MAAM,QAAQ,MAAM,CAAC,EAAE;AACnC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,YAAY,MAAM,OAAQ,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,SAAS,EAAE,CAAC;AACvE,SAAO;AACT;","names":[]}

package/dist/safeContent/wikilink.d.cts

@@ -0,0 +1,21 @@
+interface WikiLinkToken {
+    /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */
+    target: string;
+    /** The explicit label, or undefined (the component derives one). */
+    label?: string;
+}
+type WikiPart = {
+    text: string;
+} | {
+    wiki: WikiLinkToken;
+};
+/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target
+ *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */
+declare function parseWikiInner(inner: string): WikiLinkToken | null;
+/**
+ * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`
+ * when there is no usable wiki-link (so the caller keeps the text node untouched).
+ */
+declare function splitWikiLinks(value: string): WikiPart[] | null;
+
+export { type WikiLinkToken, type WikiPart, parseWikiInner, splitWikiLinks };

package/dist/safeContent/wikilink.d.ts

@@ -0,0 +1,21 @@
+interface WikiLinkToken {
+    /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */
+    target: string;
+    /** The explicit label, or undefined (the component derives one). */
+    label?: string;
+}
+type WikiPart = {
+    text: string;
+} | {
+    wiki: WikiLinkToken;
+};
+/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target
+ *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */
+declare function parseWikiInner(inner: string): WikiLinkToken | null;
+/**
+ * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`
+ * when there is no usable wiki-link (so the caller keeps the text node untouched).
+ */
+declare function splitWikiLinks(value: string): WikiPart[] | null;
+
+export { type WikiLinkToken, type WikiPart, parseWikiInner, splitWikiLinks };

package/dist/safeContent/wikilink.js

@@ -0,0 +1,38 @@
+const WIKILINK = /\[\[([^[\]]+)\]\]/g;
+function parseWikiInner(inner) {
+  const pipe = inner.indexOf("|");
+  let target;
+  let label;
+  if (pipe === -1) {
+    target = inner.trim();
+  } else {
+    label = inner.slice(0, pipe).trim();
+    target = inner.slice(pipe + 1).trim();
+  }
+  if (target === "") return null;
+  return label ? { target, label } : { target };
+}
+function splitWikiLinks(value) {
+  if (value.indexOf("[[") === -1) return null;
+  const out = [];
+  let lastIndex = 0;
+  let produced = false;
+  WIKILINK.lastIndex = 0;
+  let match;
+  while ((match = WIKILINK.exec(value)) !== null) {
+    const token = parseWikiInner(match[1]);
+    if (!token) continue;
+    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });
+    out.push({ wiki: token });
+    lastIndex = match.index + match[0].length;
+    produced = true;
+  }
+  if (!produced) return null;
+  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });
+  return out;
+}
+export {
+  parseWikiInner,
+  splitWikiLinks
+};
+//# sourceMappingURL=wikilink.js.map

package/dist/safeContent/wikilink.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/wikilink.ts"],"sourcesContent":["// Wikilink parsing for the safe content renderer (TRUST_MODES_SPEC §5.1). A §5.1\n// residual: wikilinks resolve **only within the granted mount, never a fetch**. The\n// kernel's executable pipeline compiles `[[target]]`/`[[label|target]]` to a\n// `<WikiLink>` component (transpiler `remarkWikiLinks`, MARKDOWN_SYNTAX_SPEC §13); the\n// SAFE renderer parses raw source, so it splits `[[…]]` out of text itself with the\n// same byte-local rule and hands the raw target/label to an injected, **in-mount**\n// resolver. The renderer never fetches; resolution is the consumer's mount-scoped\n// callback (or, absent one, the link renders as inert text).\n\n// Inner content up to the closing `]]`, forbidding `[`/`]` so nested brackets can't\n// be swallowed. Global — a text run may hold several.\nconst WIKILINK = /\\[\\[([^[\\]]+)\\]\\]/g;\n\nexport interface WikiLinkToken {\n  /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */\n  target: string;\n  /** The explicit label, or undefined (the component derives one). */\n  label?: string;\n}\n\nexport type WikiPart = { text: string } | { wiki: WikiLinkToken };\n\n/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target\n *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */\nexport function parseWikiInner(inner: string): WikiLinkToken | null {\n  const pipe = inner.indexOf('|');\n  let target: string;\n  let label: string | undefined;\n  if (pipe === -1) {\n    target = inner.trim();\n  } else {\n    label = inner.slice(0, pipe).trim();\n    target = inner.slice(pipe + 1).trim();\n  }\n  if (target === '') return null;\n  return label ? { target, label } : { target };\n}\n\n/**\n * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`\n * when there is no usable wiki-link (so the caller keeps the text node untouched).\n */\nexport function splitWikiLinks(value: string): WikiPart[] | null {\n  if (value.indexOf('[[') === -1) return null;\n  const out: WikiPart[] = [];\n  let lastIndex = 0;\n  let produced = false;\n  WIKILINK.lastIndex = 0;\n  let match: RegExpExecArray | null;\n  while ((match = WIKILINK.exec(value)) !== null) {\n    const token = parseWikiInner(match[1]);\n    if (!token) continue; // empty target → keep the literal `[[…]]`\n    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });\n    out.push({ wiki: token });\n    lastIndex = match.index + match[0].length;\n    produced = true;\n  }\n  if (!produced) return null;\n  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });\n  return out;\n}\n"],"mappings":"AAWA,MAAM,WAAW;AAaV,SAAS,eAAe,OAAqC;AAClE,QAAM,OAAO,MAAM,QAAQ,GAAG;AAC9B,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS,IAAI;AACf,aAAS,MAAM,KAAK;AAAA,EACtB,OAAO;AACL,YAAQ,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK;AAClC,aAAS,MAAM,MAAM,OAAO,CAAC,EAAE,KAAK;AAAA,EACtC;AACA,MAAI,WAAW,GAAI,QAAO;AAC1B,SAAO,QAAQ,EAAE,QAAQ,MAAM,IAAI,EAAE,OAAO;AAC9C;AAMO,SAAS,eAAe,OAAkC;AAC/D,MAAI,MAAM,QAAQ,IAAI,MAAM,GAAI,QAAO;AACvC,QAAM,MAAkB,CAAC;AACzB,MAAI,YAAY;AAChB,MAAI,WAAW;AACf,WAAS,YAAY;AACrB,MAAI;AACJ,UAAQ,QAAQ,SAAS,KAAK,KAAK,OAAO,MAAM;AAC9C,UAAM,QAAQ,eAAe,MAAM,CAAC,CAAC;AACrC,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,UAAW,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,WAAW,MAAM,KAAK,EAAE,CAAC;AACnF,QAAI,KAAK,EAAE,MAAM,MAAM,CAAC;AACxB,gBAAY,MAAM,QAAQ,MAAM,CAAC,EAAE;AACnC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,YAAY,MAAM,OAAQ,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,SAAS,EAAE,CAAC;AACvE,SAAO;AACT;","names":[]}

package/dist/version.cjs

@@ -21,7 +21,7 @@ __export(version_exports, {
   SDK_VERSION: () => SDK_VERSION
 });
 module.exports = __toCommonJS(version_exports);
-const SDK_VERSION = "0.28.0";
+const SDK_VERSION = "0.30.0";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   SDK_VERSION

package/dist/version.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.28.0';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,MAAM,cAAc;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.30.0';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,MAAM,cAAc;","names":[]}

package/dist/version.d.cts

@@ -1,4 +1,4 @@
 /** This SDK's package version, baked from package.json at build (SP2-6). */
-declare const SDK_VERSION = "0.28.0";
+declare const SDK_VERSION = "0.30.0";
 
 export { SDK_VERSION };

package/dist/version.d.ts

@@ -1,4 +1,4 @@
 /** This SDK's package version, baked from package.json at build (SP2-6). */
-declare const SDK_VERSION = "0.28.0";
+declare const SDK_VERSION = "0.30.0";
 
 export { SDK_VERSION };

package/dist/version.js

@@ -1,4 +1,4 @@
-const SDK_VERSION = "0.28.0";
+const SDK_VERSION = "0.30.0";
 export {
   SDK_VERSION
 };

package/dist/version.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.28.0';\n"],"mappings":"AAIO,MAAM,cAAc;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.30.0';\n"],"mappings":"AAIO,MAAM,cAAc;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@immediately-run/sdk",
-  "version": "0.28.0",
+  "version": "0.30.0",
   "description": "Runtime SDK for code executing inside an immediately.run sandbox.",
   "license": "MIT",
   "repository": "github:immediately-run/immediately-run-sdk",
@@ -32,15 +32,21 @@
     "check:circular": "node scripts/check-circular.mjs",
     "api:check": "node scripts/check-api-stability.mjs",
     "api:update": "node scripts/check-api-stability.mjs --update",
-    "verify": "npm run check:circular && npm test && npm run build && npm run api:check",
+    "verify": "npm run check:circular && npm test && npm run test:safe-content && npm run build && npm run api:check",
     "docs": "typedoc --json docs/api.json && node scripts/gen-llms.mjs",
-    "prepublishOnly": "npm run check:circular && npm run build && npm run api:check"
+    "prepublishOnly": "npm run check:circular && npm run build && npm run api:check",
+    "test:safe-content": "node scripts/build-safecontent-e2e.mjs && node --test test/safeContent.e2e.mjs"
   },
   "peerDependencies": {
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "dependencies": {
+    "mdast-util-from-markdown": "^2.0.3",
+    "mdast-util-gfm": "^3.1.0",
+    "mdast-util-mdx-jsx": "^3.2.0",
+    "micromark-extension-gfm": "^3.0.0",
+    "micromark-extension-mdx-jsx": "^3.0.2",
     "react-error-boundary": "^6.0.0"
   },
   "devDependencies": {