@immediately-run/sdk 0.29.0 → 0.31.0

package/dist/safeContent/renderMdast.cjs

@@ -0,0 +1,138 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var renderMdast_exports = {};
+__export(renderMdast_exports, {
+  renderMdast: () => renderMdast
+});
+module.exports = __toCommonJS(renderMdast_exports);
+var import_react = require("react");
+var import_sanitizeUrl = require("./sanitizeUrl");
+var import_wikilink = require("./wikilink");
+function literalProps(attributes) {
+  const props = {};
+  for (const attr of attributes ?? []) {
+    if (attr.type !== "mdxJsxAttribute") continue;
+    if (typeof attr.name !== "string") continue;
+    if (typeof attr.value === "string") props[attr.name] = attr.value;
+    else if (attr.value === null || attr.value === void 0) props[attr.name] = "";
+  }
+  return props;
+}
+let keyCounter = 0;
+const nextKey = () => `sc-${keyCounter++}`;
+function renderWiki(token, resolve) {
+  const label = token.label ?? token.target;
+  const href = resolve?.(token.target);
+  const safe = href !== void 0 ? (0, import_sanitizeUrl.sanitizeUrl)(href) : void 0;
+  if (safe === void 0) return label;
+  return (0, import_react.createElement)("a", { href: safe, "data-wikilink": token.target, key: nextKey() }, label);
+}
+function renderText(value, opts) {
+  const parts = (0, import_wikilink.splitWikiLinks)(value);
+  if (!parts) return value;
+  return parts.map(
+    (p, i) => "text" in p ? (0, import_react.createElement)(import_react.Fragment, { key: `t${i}` }, p.text) : (0, import_react.createElement)(import_react.Fragment, { key: `w${i}` }, renderWiki(p.wiki, opts.resolveWikiLink))
+  );
+}
+function renderChildren(node, opts) {
+  return (node.children ?? []).map((c, i) => renderNode(c, opts, i));
+}
+const HEADING_TAGS = ["h1", "h2", "h3", "h4", "h5", "h6"];
+function renderNode(node, opts, index = 0) {
+  const key = `n${index}`;
+  switch (node.type) {
+    case "root":
+      return (0, import_react.createElement)(import_react.Fragment, { key }, ...renderChildren(node, opts));
+    case "text":
+      return renderText(node.value ?? "", opts);
+    case "paragraph":
+      return (0, import_react.createElement)("p", { key }, ...renderChildren(node, opts));
+    case "heading": {
+      const tag = HEADING_TAGS[Math.min(Math.max((node.depth ?? 1) - 1, 0), 5)];
+      return (0, import_react.createElement)(tag, { key }, ...renderChildren(node, opts));
+    }
+    case "strong":
+      return (0, import_react.createElement)("strong", { key }, ...renderChildren(node, opts));
+    case "emphasis":
+      return (0, import_react.createElement)("em", { key }, ...renderChildren(node, opts));
+    case "delete":
+      return (0, import_react.createElement)("del", { key }, ...renderChildren(node, opts));
+    case "inlineCode":
+      return (0, import_react.createElement)("code", { key }, node.value ?? "");
+    case "code":
+      return (0, import_react.createElement)("pre", { key }, (0, import_react.createElement)("code", null, node.value ?? ""));
+    case "blockquote":
+      return (0, import_react.createElement)("blockquote", { key }, ...renderChildren(node, opts));
+    case "list":
+      return (0, import_react.createElement)(node.ordered ? "ol" : "ul", { key }, ...renderChildren(node, opts));
+    case "listItem":
+      return (0, import_react.createElement)("li", { key }, ...renderChildren(node, opts));
+    case "thematicBreak":
+      return (0, import_react.createElement)("hr", { key });
+    case "break":
+      return (0, import_react.createElement)("br", { key });
+    case "link": {
+      const href = (0, import_sanitizeUrl.sanitizeUrl)(node.url);
+      if (href === void 0) return (0, import_react.createElement)(import_react.Fragment, { key }, ...renderChildren(node, opts));
+      return (0, import_react.createElement)("a", { key, href, title: node.title ?? void 0 }, ...renderChildren(node, opts));
+    }
+    case "image": {
+      const src = (0, import_sanitizeUrl.sanitizeUrl)(node.url);
+      if (src === void 0) return node.alt ? (0, import_react.createElement)(import_react.Fragment, { key }, node.alt) : null;
+      return (0, import_react.createElement)("img", { key, src, alt: node.alt ?? "", title: node.title ?? void 0 });
+    }
+    // GFM tables.
+    case "table":
+      return (0, import_react.createElement)("table", { key }, (0, import_react.createElement)("tbody", null, ...renderChildren(node, opts)));
+    case "tableRow":
+      return (0, import_react.createElement)("tr", { key }, ...renderChildren(node, opts));
+    case "tableCell":
+      return (0, import_react.createElement)("td", { key }, ...renderChildren(node, opts));
+    // Raw HTML (`<script>`, `<div onclick>` at block level) → INERT TEXT. No
+    // `rehype-raw`, never `dangerouslySetInnerHTML`. The literal markup is shown, not run.
+    case "html":
+      return (0, import_react.createElement)(import_react.Fragment, { key }, node.value ?? "");
+    // JSX `<Component/>` syntax → registry lookup by NAME, literal props only.
+    case "mdxJsxFlowElement":
+    case "mdxJsxTextElement": {
+      const name = typeof node.name === "string" ? node.name : "";
+      const Component = name ? opts.components?.[name] : void 0;
+      const children = renderChildren(node, opts);
+      if (!Component) return (0, import_react.createElement)(import_react.Fragment, { key }, ...children);
+      return (0, import_react.createElement)(Component, { key, ...literalProps(node.attributes) }, ...children);
+    }
+    // Inert expression nodes (should not occur — expression extension is off — but be
+    // defensive if a tree from elsewhere carries them): render nothing.
+    case "mdxFlowExpression":
+    case "mdxTextExpression":
+    case "mdxjsEsm":
+      return null;
+    default:
+      return node.children ? (0, import_react.createElement)(import_react.Fragment, { key }, ...renderChildren(node, opts)) : null;
+  }
+}
+function renderMdast(tree, options = {}) {
+  keyCounter = 0;
+  return renderNode(tree, options);
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  renderMdast
+});
+//# sourceMappingURL=renderMdast.cjs.map

package/dist/safeContent/renderMdast.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/renderMdast.tsx"],"sourcesContent":["import { createElement, Fragment, type ReactNode } from 'react';\nimport { sanitizeUrl } from './sanitizeUrl';\nimport { splitWikiLinks, type WikiLinkToken } from './wikilink';\nimport type { SafeMdastNode, SafeMdxAttribute } from './parseSafeMdast';\n\n// The mdast→React renderer for the safe content path (TRUST_MODES_SPEC §5.1). PURE\n// and synchronous — it only reads `node.type` off an already-parsed tree, so it\n// carries no ESM dep and is exhaustively unit-testable. Every security property lives\n// here:\n//\n//  - **JSX tags resolve ONLY to a component registry, by name.** A `<Component/>`\n//    node becomes `registry[name]` with **literal string props only**; an unknown tag\n//    renders its children inert (a Fragment, no element) — so author-written `<div\n//    onclick=…>`, `<img onerror=…>`, `<script>` never become an intrinsic element with\n//    attacker attributes. (Block-level raw HTML arrives as an `html` node, below.)\n//  - **Expression attributes are dropped.** `f={fetch(\"/x\")}` / `{...spread}` are\n//    `mdxJsxExpressionAttribute` or object-valued `mdxJsxAttribute`s — never passed to\n//    a component, never evaluated. (There is also no evaluator to reach — parse used\n//    no acorn.)\n//  - **Raw HTML is inert text.** `html` nodes render as their literal string via a\n//    text node — never `dangerouslySetInnerHTML` (no `rehype-raw`).\n//  - **URL-scheme sanitizer** on every `link`/`image` URL (`sanitizeUrl`).\n//  - **Wikilinks resolve in-mount only** via an injected resolver; the renderer never\n//    fetches.\n\nexport interface SafeContentComponents {\n  /** Safe components an app exposes to `<Component/>` syntax (host/app-provided).\n   *  Looked up by the JSX tag name; anything not here renders inert. */\n  [tag: string]: React.ComponentType<Record<string, string>>;\n}\n\nexport interface RenderMdastOptions {\n  /** The component registry for `<Component/>` syntax. Absent ⇒ all JSX tags inert. */\n  components?: SafeContentComponents;\n  /**\n   * Resolve a wikilink target to an href, **within the granted mount only** — a pure,\n   * synchronous, mount-scoped lookup that MUST NOT fetch or reach out of the mount.\n   * Return `undefined` for an unresolvable/out-of-mount target (rendered as inert\n   * text). Absent ⇒ every wikilink renders as inert text.\n   */\n  resolveWikiLink?: (target: string) => string | undefined;\n}\n\n/** Extract the literal string props of a JSX element — `mdxJsxAttribute`s whose value\n *  is a plain string. Expression attributes (object value) and spreads are DROPPED. */\nfunction literalProps(attributes: SafeMdxAttribute[] | undefined): Record<string, string> {\n  const props: Record<string, string> = {};\n  for (const attr of attributes ?? []) {\n    if (attr.type !== 'mdxJsxAttribute') continue; // drop `{...spread}`\n    if (typeof attr.name !== 'string') continue;\n    // A literal attribute's value is a string (or null → boolean-ish `true`). An\n    // expression value is an object (`mdxJsxAttributeValueExpression`) — DROP it: it\n    // is an inert raw string, never a real value, and must never reach a component.\n    if (typeof attr.value === 'string') props[attr.name] = attr.value;\n    else if (attr.value === null || attr.value === undefined) props[attr.name] = '';\n    // object-valued (expression) → skipped\n  }\n  return props;\n}\n\nlet keyCounter = 0;\nconst nextKey = () => `sc-${keyCounter++}`;\n\n/** Render a wikilink token via the in-mount resolver, or inert text when it can't\n *  resolve (never a network call — resolution is the injected mount-scoped callback). */\nfunction renderWiki(token: WikiLinkToken, resolve: RenderMdastOptions['resolveWikiLink']): ReactNode {\n  const label = token.label ?? token.target;\n  const href = resolve?.(token.target);\n  const safe = href !== undefined ? sanitizeUrl(href) : undefined;\n  if (safe === undefined) return label; // inert text — unresolved or out-of-mount\n  return createElement('a', { href: safe, 'data-wikilink': token.target, key: nextKey() }, label);\n}\n\n/** Render a `text` node, splitting any `[[…]]` wikilinks out of it. */\nfunction renderText(value: string, opts: RenderMdastOptions): ReactNode {\n  const parts = splitWikiLinks(value);\n  if (!parts) return value;\n  return parts.map((p, i) =>\n    'text' in p\n      ? createElement(Fragment, { key: `t${i}` }, p.text)\n      : createElement(Fragment, { key: `w${i}` }, renderWiki(p.wiki, opts.resolveWikiLink)),\n  );\n}\n\nfunction renderChildren(node: SafeMdastNode, opts: RenderMdastOptions): ReactNode[] {\n  return (node.children ?? []).map((c, i) => renderNode(c, opts, i));\n}\n\n// Standard mdast block/inline nodes → a FIXED, safe React element. We control every\n// attribute; author input only reaches text content and (sanitized) URLs.\nconst HEADING_TAGS = ['h1', 'h2', 'h3', 'h4', 'h5', 'h6'] as const;\n\nfunction renderNode(node: SafeMdastNode, opts: RenderMdastOptions, index = 0): ReactNode {\n  const key = `n${index}`;\n  switch (node.type) {\n    case 'root':\n      return createElement(Fragment, { key }, ...renderChildren(node, opts));\n    case 'text':\n      return renderText(node.value ?? '', opts);\n    case 'paragraph':\n      return createElement('p', { key }, ...renderChildren(node, opts));\n    case 'heading': {\n      const tag = HEADING_TAGS[Math.min(Math.max((node.depth ?? 1) - 1, 0), 5)];\n      return createElement(tag, { key }, ...renderChildren(node, opts));\n    }\n    case 'strong':\n      return createElement('strong', { key }, ...renderChildren(node, opts));\n    case 'emphasis':\n      return createElement('em', { key }, ...renderChildren(node, opts));\n    case 'delete':\n      return createElement('del', { key }, ...renderChildren(node, opts));\n    case 'inlineCode':\n      return createElement('code', { key }, node.value ?? '');\n    case 'code':\n      return createElement('pre', { key }, createElement('code', null, node.value ?? ''));\n    case 'blockquote':\n      return createElement('blockquote', { key }, ...renderChildren(node, opts));\n    case 'list':\n      return createElement(node.ordered ? 'ol' : 'ul', { key }, ...renderChildren(node, opts));\n    case 'listItem':\n      return createElement('li', { key }, ...renderChildren(node, opts));\n    case 'thematicBreak':\n      return createElement('hr', { key });\n    case 'break':\n      return createElement('br', { key });\n    case 'link': {\n      const href = sanitizeUrl(node.url);\n      // A rejected scheme → render the link TEXT only (inert), never an <a href>.\n      if (href === undefined) return createElement(Fragment, { key }, ...renderChildren(node, opts));\n      return createElement('a', { key, href, title: node.title ?? undefined }, ...renderChildren(node, opts));\n    }\n    case 'image': {\n      const src = sanitizeUrl(node.url);\n      if (src === undefined) return node.alt ? createElement(Fragment, { key }, node.alt) : null;\n      return createElement('img', { key, src, alt: node.alt ?? '', title: node.title ?? undefined });\n    }\n    // GFM tables.\n    case 'table':\n      return createElement('table', { key }, createElement('tbody', null, ...renderChildren(node, opts)));\n    case 'tableRow':\n      return createElement('tr', { key }, ...renderChildren(node, opts));\n    case 'tableCell':\n      return createElement('td', { key }, ...renderChildren(node, opts));\n    // Raw HTML (`<script>`, `<div onclick>` at block level) → INERT TEXT. No\n    // `rehype-raw`, never `dangerouslySetInnerHTML`. The literal markup is shown, not run.\n    case 'html':\n      return createElement(Fragment, { key }, node.value ?? '');\n    // JSX `<Component/>` syntax → registry lookup by NAME, literal props only.\n    case 'mdxJsxFlowElement':\n    case 'mdxJsxTextElement': {\n      const name = typeof node.name === 'string' ? node.name : '';\n      const Component = name ? opts.components?.[name] : undefined;\n      const children = renderChildren(node, opts);\n      // Unknown tag (not in the registry) OR a fragment `<>` → render children inert,\n      // NO element, NO author attributes. This is what neutralizes `<script>`/`<div\n      // onclick>`/`<img onerror>` written as JSX.\n      if (!Component) return createElement(Fragment, { key }, ...children);\n      return createElement(Component, { key, ...literalProps(node.attributes) }, ...children);\n    }\n    // Inert expression nodes (should not occur — expression extension is off — but be\n    // defensive if a tree from elsewhere carries them): render nothing.\n    case 'mdxFlowExpression':\n    case 'mdxTextExpression':\n    case 'mdxjsEsm':\n      return null;\n    default:\n      // Unknown node → render its children (never its raw value as markup).\n      return node.children ? createElement(Fragment, { key }, ...renderChildren(node, opts)) : null;\n  }\n}\n\n/**\n * Render a safe-parsed mdast tree to React. Pure and synchronous; carries every §5.1\n * security property (registry-only JSX, dropped expressions, inert raw HTML, URL\n * sanitizing, in-mount wikilinks). Feed it a tree from {@link parseSafeMdast}.\n */\nexport function renderMdast(tree: SafeMdastNode, options: RenderMdastOptions = {}): ReactNode {\n  keyCounter = 0;\n  return renderNode(tree, options);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAwD;AACxD,yBAA4B;AAC5B,sBAAmD;AA2CnD,SAAS,aAAa,YAAoE;AACxF,QAAM,QAAgC,CAAC;AACvC,aAAW,QAAQ,cAAc,CAAC,GAAG;AACnC,QAAI,KAAK,SAAS,kBAAmB;AACrC,QAAI,OAAO,KAAK,SAAS,SAAU;AAInC,QAAI,OAAO,KAAK,UAAU,SAAU,OAAM,KAAK,IAAI,IAAI,KAAK;AAAA,aACnD,KAAK,UAAU,QAAQ,KAAK,UAAU,OAAW,OAAM,KAAK,IAAI,IAAI;AAAA,EAE/E;AACA,SAAO;AACT;AAEA,IAAI,aAAa;AACjB,MAAM,UAAU,MAAM,MAAM,YAAY;AAIxC,SAAS,WAAW,OAAsB,SAA2D;AACnG,QAAM,QAAQ,MAAM,SAAS,MAAM;AACnC,QAAM,OAAO,UAAU,MAAM,MAAM;AACnC,QAAM,OAAO,SAAS,aAAY,gCAAY,IAAI,IAAI;AACtD,MAAI,SAAS,OAAW,QAAO;AAC/B,aAAO,4BAAc,KAAK,EAAE,MAAM,MAAM,iBAAiB,MAAM,QAAQ,KAAK,QAAQ,EAAE,GAAG,KAAK;AAChG;AAGA,SAAS,WAAW,OAAe,MAAqC;AACtE,QAAM,YAAQ,gCAAe,KAAK;AAClC,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,MAAM;AAAA,IAAI,CAAC,GAAG,MACnB,UAAU,QACN,4BAAc,uBAAU,EAAE,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,IAAI,QAChD,4BAAc,uBAAU,EAAE,KAAK,IAAI,CAAC,GAAG,GAAG,WAAW,EAAE,MAAM,KAAK,eAAe,CAAC;AAAA,EACxF;AACF;AAEA,SAAS,eAAe,MAAqB,MAAuC;AAClF,UAAQ,KAAK,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC;AACnE;AAIA,MAAM,eAAe,CAAC,MAAM,MAAM,MAAM,MAAM,MAAM,IAAI;AAExD,SAAS,WAAW,MAAqB,MAA0B,QAAQ,GAAc;AACvF,QAAM,MAAM,IAAI,KAAK;AACrB,UAAQ,KAAK,MAAM;AAAA,IACjB,KAAK;AACH,iBAAO,4BAAc,uBAAU,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACvE,KAAK;AACH,aAAO,WAAW,KAAK,SAAS,IAAI,IAAI;AAAA,IAC1C,KAAK;AACH,iBAAO,4BAAc,KAAK,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IAClE,KAAK,WAAW;AACd,YAAM,MAAM,aAAa,KAAK,IAAI,KAAK,KAAK,KAAK,SAAS,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;AACxE,iBAAO,4BAAc,KAAK,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IAClE;AAAA,IACA,KAAK;AACH,iBAAO,4BAAc,UAAU,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACvE,KAAK;AACH,iBAAO,4BAAc,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACnE,KAAK;AACH,iBAAO,4BAAc,OAAO,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACpE,KAAK;AACH,iBAAO,4BAAc,QAAQ,EAAE,IAAI,GAAG,KAAK,SAAS,EAAE;AAAA,IACxD,KAAK;AACH,iBAAO,4BAAc,OAAO,EAAE,IAAI,OAAG,4BAAc,QAAQ,MAAM,KAAK,SAAS,EAAE,CAAC;AAAA,IACpF,KAAK;AACH,iBAAO,4BAAc,cAAc,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IAC3E,KAAK;AACH,iBAAO,4BAAc,KAAK,UAAU,OAAO,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACzF,KAAK;AACH,iBAAO,4BAAc,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACnE,KAAK;AACH,iBAAO,4BAAc,MAAM,EAAE,IAAI,CAAC;AAAA,IACpC,KAAK;AACH,iBAAO,4BAAc,MAAM,EAAE,IAAI,CAAC;AAAA,IACpC,KAAK,QAAQ;AACX,YAAM,WAAO,gCAAY,KAAK,GAAG;AAEjC,UAAI,SAAS,OAAW,YAAO,4BAAc,uBAAU,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAC7F,iBAAO,4BAAc,KAAK,EAAE,KAAK,MAAM,OAAO,KAAK,SAAS,OAAU,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACxG;AAAA,IACA,KAAK,SAAS;AACZ,YAAM,UAAM,gCAAY,KAAK,GAAG;AAChC,UAAI,QAAQ,OAAW,QAAO,KAAK,UAAM,4BAAc,uBAAU,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI;AACtF,iBAAO,4BAAc,OAAO,EAAE,KAAK,KAAK,KAAK,KAAK,OAAO,IAAI,OAAO,KAAK,SAAS,OAAU,CAAC;AAAA,IAC/F;AAAA;AAAA,IAEA,KAAK;AACH,iBAAO,4BAAc,SAAS,EAAE,IAAI,OAAG,4BAAc,SAAS,MAAM,GAAG,eAAe,MAAM,IAAI,CAAC,CAAC;AAAA,IACpG,KAAK;AACH,iBAAO,4BAAc,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACnE,KAAK;AACH,iBAAO,4BAAc,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA;AAAA;AAAA,IAGnE,KAAK;AACH,iBAAO,4BAAc,uBAAU,EAAE,IAAI,GAAG,KAAK,SAAS,EAAE;AAAA;AAAA,IAE1D,KAAK;AAAA,IACL,KAAK,qBAAqB;AACxB,YAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACzD,YAAM,YAAY,OAAO,KAAK,aAAa,IAAI,IAAI;AACnD,YAAM,WAAW,eAAe,MAAM,IAAI;AAI1C,UAAI,CAAC,UAAW,YAAO,4BAAc,uBAAU,EAAE,IAAI,GAAG,GAAG,QAAQ;AACnE,iBAAO,4BAAc,WAAW,EAAE,KAAK,GAAG,aAAa,KAAK,UAAU,EAAE,GAAG,GAAG,QAAQ;AAAA,IACxF;AAAA;AAAA;AAAA,IAGA,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AAEE,aAAO,KAAK,eAAW,4BAAc,uBAAU,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC,IAAI;AAAA,EAC7F;AACF;AAOO,SAAS,YAAY,MAAqB,UAA8B,CAAC,GAAc;AAC5F,eAAa;AACb,SAAO,WAAW,MAAM,OAAO;AACjC;","names":[]}

package/dist/safeContent/renderMdast.d.cts

@@ -0,0 +1,27 @@
+import { ReactNode } from 'react';
+import { SafeMdastNode } from './parseSafeMdast.cjs';
+
+interface SafeContentComponents {
+    /** Safe components an app exposes to `<Component/>` syntax (host/app-provided).
+     *  Looked up by the JSX tag name; anything not here renders inert. */
+    [tag: string]: React.ComponentType<Record<string, string>>;
+}
+interface RenderMdastOptions {
+    /** The component registry for `<Component/>` syntax. Absent ⇒ all JSX tags inert. */
+    components?: SafeContentComponents;
+    /**
+     * Resolve a wikilink target to an href, **within the granted mount only** — a pure,
+     * synchronous, mount-scoped lookup that MUST NOT fetch or reach out of the mount.
+     * Return `undefined` for an unresolvable/out-of-mount target (rendered as inert
+     * text). Absent ⇒ every wikilink renders as inert text.
+     */
+    resolveWikiLink?: (target: string) => string | undefined;
+}
+/**
+ * Render a safe-parsed mdast tree to React. Pure and synchronous; carries every §5.1
+ * security property (registry-only JSX, dropped expressions, inert raw HTML, URL
+ * sanitizing, in-mount wikilinks). Feed it a tree from {@link parseSafeMdast}.
+ */
+declare function renderMdast(tree: SafeMdastNode, options?: RenderMdastOptions): ReactNode;
+
+export { type RenderMdastOptions, type SafeContentComponents, renderMdast };

package/dist/safeContent/renderMdast.d.ts

@@ -0,0 +1,27 @@
+import { ReactNode } from 'react';
+import { SafeMdastNode } from './parseSafeMdast.js';
+
+interface SafeContentComponents {
+    /** Safe components an app exposes to `<Component/>` syntax (host/app-provided).
+     *  Looked up by the JSX tag name; anything not here renders inert. */
+    [tag: string]: React.ComponentType<Record<string, string>>;
+}
+interface RenderMdastOptions {
+    /** The component registry for `<Component/>` syntax. Absent ⇒ all JSX tags inert. */
+    components?: SafeContentComponents;
+    /**
+     * Resolve a wikilink target to an href, **within the granted mount only** — a pure,
+     * synchronous, mount-scoped lookup that MUST NOT fetch or reach out of the mount.
+     * Return `undefined` for an unresolvable/out-of-mount target (rendered as inert
+     * text). Absent ⇒ every wikilink renders as inert text.
+     */
+    resolveWikiLink?: (target: string) => string | undefined;
+}
+/**
+ * Render a safe-parsed mdast tree to React. Pure and synchronous; carries every §5.1
+ * security property (registry-only JSX, dropped expressions, inert raw HTML, URL
+ * sanitizing, in-mount wikilinks). Feed it a tree from {@link parseSafeMdast}.
+ */
+declare function renderMdast(tree: SafeMdastNode, options?: RenderMdastOptions): ReactNode;
+
+export { type RenderMdastOptions, type SafeContentComponents, renderMdast };

package/dist/safeContent/renderMdast.js

@@ -0,0 +1,114 @@
+import { createElement, Fragment } from "react";
+import { sanitizeUrl } from "./sanitizeUrl";
+import { splitWikiLinks } from "./wikilink";
+function literalProps(attributes) {
+  const props = {};
+  for (const attr of attributes ?? []) {
+    if (attr.type !== "mdxJsxAttribute") continue;
+    if (typeof attr.name !== "string") continue;
+    if (typeof attr.value === "string") props[attr.name] = attr.value;
+    else if (attr.value === null || attr.value === void 0) props[attr.name] = "";
+  }
+  return props;
+}
+let keyCounter = 0;
+const nextKey = () => `sc-${keyCounter++}`;
+function renderWiki(token, resolve) {
+  const label = token.label ?? token.target;
+  const href = resolve?.(token.target);
+  const safe = href !== void 0 ? sanitizeUrl(href) : void 0;
+  if (safe === void 0) return label;
+  return createElement("a", { href: safe, "data-wikilink": token.target, key: nextKey() }, label);
+}
+function renderText(value, opts) {
+  const parts = splitWikiLinks(value);
+  if (!parts) return value;
+  return parts.map(
+    (p, i) => "text" in p ? createElement(Fragment, { key: `t${i}` }, p.text) : createElement(Fragment, { key: `w${i}` }, renderWiki(p.wiki, opts.resolveWikiLink))
+  );
+}
+function renderChildren(node, opts) {
+  return (node.children ?? []).map((c, i) => renderNode(c, opts, i));
+}
+const HEADING_TAGS = ["h1", "h2", "h3", "h4", "h5", "h6"];
+function renderNode(node, opts, index = 0) {
+  const key = `n${index}`;
+  switch (node.type) {
+    case "root":
+      return createElement(Fragment, { key }, ...renderChildren(node, opts));
+    case "text":
+      return renderText(node.value ?? "", opts);
+    case "paragraph":
+      return createElement("p", { key }, ...renderChildren(node, opts));
+    case "heading": {
+      const tag = HEADING_TAGS[Math.min(Math.max((node.depth ?? 1) - 1, 0), 5)];
+      return createElement(tag, { key }, ...renderChildren(node, opts));
+    }
+    case "strong":
+      return createElement("strong", { key }, ...renderChildren(node, opts));
+    case "emphasis":
+      return createElement("em", { key }, ...renderChildren(node, opts));
+    case "delete":
+      return createElement("del", { key }, ...renderChildren(node, opts));
+    case "inlineCode":
+      return createElement("code", { key }, node.value ?? "");
+    case "code":
+      return createElement("pre", { key }, createElement("code", null, node.value ?? ""));
+    case "blockquote":
+      return createElement("blockquote", { key }, ...renderChildren(node, opts));
+    case "list":
+      return createElement(node.ordered ? "ol" : "ul", { key }, ...renderChildren(node, opts));
+    case "listItem":
+      return createElement("li", { key }, ...renderChildren(node, opts));
+    case "thematicBreak":
+      return createElement("hr", { key });
+    case "break":
+      return createElement("br", { key });
+    case "link": {
+      const href = sanitizeUrl(node.url);
+      if (href === void 0) return createElement(Fragment, { key }, ...renderChildren(node, opts));
+      return createElement("a", { key, href, title: node.title ?? void 0 }, ...renderChildren(node, opts));
+    }
+    case "image": {
+      const src = sanitizeUrl(node.url);
+      if (src === void 0) return node.alt ? createElement(Fragment, { key }, node.alt) : null;
+      return createElement("img", { key, src, alt: node.alt ?? "", title: node.title ?? void 0 });
+    }
+    // GFM tables.
+    case "table":
+      return createElement("table", { key }, createElement("tbody", null, ...renderChildren(node, opts)));
+    case "tableRow":
+      return createElement("tr", { key }, ...renderChildren(node, opts));
+    case "tableCell":
+      return createElement("td", { key }, ...renderChildren(node, opts));
+    // Raw HTML (`<script>`, `<div onclick>` at block level) → INERT TEXT. No
+    // `rehype-raw`, never `dangerouslySetInnerHTML`. The literal markup is shown, not run.
+    case "html":
+      return createElement(Fragment, { key }, node.value ?? "");
+    // JSX `<Component/>` syntax → registry lookup by NAME, literal props only.
+    case "mdxJsxFlowElement":
+    case "mdxJsxTextElement": {
+      const name = typeof node.name === "string" ? node.name : "";
+      const Component = name ? opts.components?.[name] : void 0;
+      const children = renderChildren(node, opts);
+      if (!Component) return createElement(Fragment, { key }, ...children);
+      return createElement(Component, { key, ...literalProps(node.attributes) }, ...children);
+    }
+    // Inert expression nodes (should not occur — expression extension is off — but be
+    // defensive if a tree from elsewhere carries them): render nothing.
+    case "mdxFlowExpression":
+    case "mdxTextExpression":
+    case "mdxjsEsm":
+      return null;
+    default:
+      return node.children ? createElement(Fragment, { key }, ...renderChildren(node, opts)) : null;
+  }
+}
+function renderMdast(tree, options = {}) {
+  keyCounter = 0;
+  return renderNode(tree, options);
+}
+export {
+  renderMdast
+};
+//# sourceMappingURL=renderMdast.js.map

package/dist/safeContent/renderMdast.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/renderMdast.tsx"],"sourcesContent":["import { createElement, Fragment, type ReactNode } from 'react';\nimport { sanitizeUrl } from './sanitizeUrl';\nimport { splitWikiLinks, type WikiLinkToken } from './wikilink';\nimport type { SafeMdastNode, SafeMdxAttribute } from './parseSafeMdast';\n\n// The mdast→React renderer for the safe content path (TRUST_MODES_SPEC §5.1). PURE\n// and synchronous — it only reads `node.type` off an already-parsed tree, so it\n// carries no ESM dep and is exhaustively unit-testable. Every security property lives\n// here:\n//\n//  - **JSX tags resolve ONLY to a component registry, by name.** A `<Component/>`\n//    node becomes `registry[name]` with **literal string props only**; an unknown tag\n//    renders its children inert (a Fragment, no element) — so author-written `<div\n//    onclick=…>`, `<img onerror=…>`, `<script>` never become an intrinsic element with\n//    attacker attributes. (Block-level raw HTML arrives as an `html` node, below.)\n//  - **Expression attributes are dropped.** `f={fetch(\"/x\")}` / `{...spread}` are\n//    `mdxJsxExpressionAttribute` or object-valued `mdxJsxAttribute`s — never passed to\n//    a component, never evaluated. (There is also no evaluator to reach — parse used\n//    no acorn.)\n//  - **Raw HTML is inert text.** `html` nodes render as their literal string via a\n//    text node — never `dangerouslySetInnerHTML` (no `rehype-raw`).\n//  - **URL-scheme sanitizer** on every `link`/`image` URL (`sanitizeUrl`).\n//  - **Wikilinks resolve in-mount only** via an injected resolver; the renderer never\n//    fetches.\n\nexport interface SafeContentComponents {\n  /** Safe components an app exposes to `<Component/>` syntax (host/app-provided).\n   *  Looked up by the JSX tag name; anything not here renders inert. */\n  [tag: string]: React.ComponentType<Record<string, string>>;\n}\n\nexport interface RenderMdastOptions {\n  /** The component registry for `<Component/>` syntax. Absent ⇒ all JSX tags inert. */\n  components?: SafeContentComponents;\n  /**\n   * Resolve a wikilink target to an href, **within the granted mount only** — a pure,\n   * synchronous, mount-scoped lookup that MUST NOT fetch or reach out of the mount.\n   * Return `undefined` for an unresolvable/out-of-mount target (rendered as inert\n   * text). Absent ⇒ every wikilink renders as inert text.\n   */\n  resolveWikiLink?: (target: string) => string | undefined;\n}\n\n/** Extract the literal string props of a JSX element — `mdxJsxAttribute`s whose value\n *  is a plain string. Expression attributes (object value) and spreads are DROPPED. */\nfunction literalProps(attributes: SafeMdxAttribute[] | undefined): Record<string, string> {\n  const props: Record<string, string> = {};\n  for (const attr of attributes ?? []) {\n    if (attr.type !== 'mdxJsxAttribute') continue; // drop `{...spread}`\n    if (typeof attr.name !== 'string') continue;\n    // A literal attribute's value is a string (or null → boolean-ish `true`). An\n    // expression value is an object (`mdxJsxAttributeValueExpression`) — DROP it: it\n    // is an inert raw string, never a real value, and must never reach a component.\n    if (typeof attr.value === 'string') props[attr.name] = attr.value;\n    else if (attr.value === null || attr.value === undefined) props[attr.name] = '';\n    // object-valued (expression) → skipped\n  }\n  return props;\n}\n\nlet keyCounter = 0;\nconst nextKey = () => `sc-${keyCounter++}`;\n\n/** Render a wikilink token via the in-mount resolver, or inert text when it can't\n *  resolve (never a network call — resolution is the injected mount-scoped callback). */\nfunction renderWiki(token: WikiLinkToken, resolve: RenderMdastOptions['resolveWikiLink']): ReactNode {\n  const label = token.label ?? token.target;\n  const href = resolve?.(token.target);\n  const safe = href !== undefined ? sanitizeUrl(href) : undefined;\n  if (safe === undefined) return label; // inert text — unresolved or out-of-mount\n  return createElement('a', { href: safe, 'data-wikilink': token.target, key: nextKey() }, label);\n}\n\n/** Render a `text` node, splitting any `[[…]]` wikilinks out of it. */\nfunction renderText(value: string, opts: RenderMdastOptions): ReactNode {\n  const parts = splitWikiLinks(value);\n  if (!parts) return value;\n  return parts.map((p, i) =>\n    'text' in p\n      ? createElement(Fragment, { key: `t${i}` }, p.text)\n      : createElement(Fragment, { key: `w${i}` }, renderWiki(p.wiki, opts.resolveWikiLink)),\n  );\n}\n\nfunction renderChildren(node: SafeMdastNode, opts: RenderMdastOptions): ReactNode[] {\n  return (node.children ?? []).map((c, i) => renderNode(c, opts, i));\n}\n\n// Standard mdast block/inline nodes → a FIXED, safe React element. We control every\n// attribute; author input only reaches text content and (sanitized) URLs.\nconst HEADING_TAGS = ['h1', 'h2', 'h3', 'h4', 'h5', 'h6'] as const;\n\nfunction renderNode(node: SafeMdastNode, opts: RenderMdastOptions, index = 0): ReactNode {\n  const key = `n${index}`;\n  switch (node.type) {\n    case 'root':\n      return createElement(Fragment, { key }, ...renderChildren(node, opts));\n    case 'text':\n      return renderText(node.value ?? '', opts);\n    case 'paragraph':\n      return createElement('p', { key }, ...renderChildren(node, opts));\n    case 'heading': {\n      const tag = HEADING_TAGS[Math.min(Math.max((node.depth ?? 1) - 1, 0), 5)];\n      return createElement(tag, { key }, ...renderChildren(node, opts));\n    }\n    case 'strong':\n      return createElement('strong', { key }, ...renderChildren(node, opts));\n    case 'emphasis':\n      return createElement('em', { key }, ...renderChildren(node, opts));\n    case 'delete':\n      return createElement('del', { key }, ...renderChildren(node, opts));\n    case 'inlineCode':\n      return createElement('code', { key }, node.value ?? '');\n    case 'code':\n      return createElement('pre', { key }, createElement('code', null, node.value ?? ''));\n    case 'blockquote':\n      return createElement('blockquote', { key }, ...renderChildren(node, opts));\n    case 'list':\n      return createElement(node.ordered ? 'ol' : 'ul', { key }, ...renderChildren(node, opts));\n    case 'listItem':\n      return createElement('li', { key }, ...renderChildren(node, opts));\n    case 'thematicBreak':\n      return createElement('hr', { key });\n    case 'break':\n      return createElement('br', { key });\n    case 'link': {\n      const href = sanitizeUrl(node.url);\n      // A rejected scheme → render the link TEXT only (inert), never an <a href>.\n      if (href === undefined) return createElement(Fragment, { key }, ...renderChildren(node, opts));\n      return createElement('a', { key, href, title: node.title ?? undefined }, ...renderChildren(node, opts));\n    }\n    case 'image': {\n      const src = sanitizeUrl(node.url);\n      if (src === undefined) return node.alt ? createElement(Fragment, { key }, node.alt) : null;\n      return createElement('img', { key, src, alt: node.alt ?? '', title: node.title ?? undefined });\n    }\n    // GFM tables.\n    case 'table':\n      return createElement('table', { key }, createElement('tbody', null, ...renderChildren(node, opts)));\n    case 'tableRow':\n      return createElement('tr', { key }, ...renderChildren(node, opts));\n    case 'tableCell':\n      return createElement('td', { key }, ...renderChildren(node, opts));\n    // Raw HTML (`<script>`, `<div onclick>` at block level) → INERT TEXT. No\n    // `rehype-raw`, never `dangerouslySetInnerHTML`. The literal markup is shown, not run.\n    case 'html':\n      return createElement(Fragment, { key }, node.value ?? '');\n    // JSX `<Component/>` syntax → registry lookup by NAME, literal props only.\n    case 'mdxJsxFlowElement':\n    case 'mdxJsxTextElement': {\n      const name = typeof node.name === 'string' ? node.name : '';\n      const Component = name ? opts.components?.[name] : undefined;\n      const children = renderChildren(node, opts);\n      // Unknown tag (not in the registry) OR a fragment `<>` → render children inert,\n      // NO element, NO author attributes. This is what neutralizes `<script>`/`<div\n      // onclick>`/`<img onerror>` written as JSX.\n      if (!Component) return createElement(Fragment, { key }, ...children);\n      return createElement(Component, { key, ...literalProps(node.attributes) }, ...children);\n    }\n    // Inert expression nodes (should not occur — expression extension is off — but be\n    // defensive if a tree from elsewhere carries them): render nothing.\n    case 'mdxFlowExpression':\n    case 'mdxTextExpression':\n    case 'mdxjsEsm':\n      return null;\n    default:\n      // Unknown node → render its children (never its raw value as markup).\n      return node.children ? createElement(Fragment, { key }, ...renderChildren(node, opts)) : null;\n  }\n}\n\n/**\n * Render a safe-parsed mdast tree to React. Pure and synchronous; carries every §5.1\n * security property (registry-only JSX, dropped expressions, inert raw HTML, URL\n * sanitizing, in-mount wikilinks). Feed it a tree from {@link parseSafeMdast}.\n */\nexport function renderMdast(tree: SafeMdastNode, options: RenderMdastOptions = {}): ReactNode {\n  keyCounter = 0;\n  return renderNode(tree, options);\n}\n"],"mappings":"AAAA,SAAS,eAAe,gBAAgC;AACxD,SAAS,mBAAmB;AAC5B,SAAS,sBAA0C;AA2CnD,SAAS,aAAa,YAAoE;AACxF,QAAM,QAAgC,CAAC;AACvC,aAAW,QAAQ,cAAc,CAAC,GAAG;AACnC,QAAI,KAAK,SAAS,kBAAmB;AACrC,QAAI,OAAO,KAAK,SAAS,SAAU;AAInC,QAAI,OAAO,KAAK,UAAU,SAAU,OAAM,KAAK,IAAI,IAAI,KAAK;AAAA,aACnD,KAAK,UAAU,QAAQ,KAAK,UAAU,OAAW,OAAM,KAAK,IAAI,IAAI;AAAA,EAE/E;AACA,SAAO;AACT;AAEA,IAAI,aAAa;AACjB,MAAM,UAAU,MAAM,MAAM,YAAY;AAIxC,SAAS,WAAW,OAAsB,SAA2D;AACnG,QAAM,QAAQ,MAAM,SAAS,MAAM;AACnC,QAAM,OAAO,UAAU,MAAM,MAAM;AACnC,QAAM,OAAO,SAAS,SAAY,YAAY,IAAI,IAAI;AACtD,MAAI,SAAS,OAAW,QAAO;AAC/B,SAAO,cAAc,KAAK,EAAE,MAAM,MAAM,iBAAiB,MAAM,QAAQ,KAAK,QAAQ,EAAE,GAAG,KAAK;AAChG;AAGA,SAAS,WAAW,OAAe,MAAqC;AACtE,QAAM,QAAQ,eAAe,KAAK;AAClC,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,MAAM;AAAA,IAAI,CAAC,GAAG,MACnB,UAAU,IACN,cAAc,UAAU,EAAE,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,IAAI,IAChD,cAAc,UAAU,EAAE,KAAK,IAAI,CAAC,GAAG,GAAG,WAAW,EAAE,MAAM,KAAK,eAAe,CAAC;AAAA,EACxF;AACF;AAEA,SAAS,eAAe,MAAqB,MAAuC;AAClF,UAAQ,KAAK,YAAY,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC;AACnE;AAIA,MAAM,eAAe,CAAC,MAAM,MAAM,MAAM,MAAM,MAAM,IAAI;AAExD,SAAS,WAAW,MAAqB,MAA0B,QAAQ,GAAc;AACvF,QAAM,MAAM,IAAI,KAAK;AACrB,UAAQ,KAAK,MAAM;AAAA,IACjB,KAAK;AACH,aAAO,cAAc,UAAU,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACvE,KAAK;AACH,aAAO,WAAW,KAAK,SAAS,IAAI,IAAI;AAAA,IAC1C,KAAK;AACH,aAAO,cAAc,KAAK,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IAClE,KAAK,WAAW;AACd,YAAM,MAAM,aAAa,KAAK,IAAI,KAAK,KAAK,KAAK,SAAS,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;AACxE,aAAO,cAAc,KAAK,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IAClE;AAAA,IACA,KAAK;AACH,aAAO,cAAc,UAAU,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACvE,KAAK;AACH,aAAO,cAAc,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACnE,KAAK;AACH,aAAO,cAAc,OAAO,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACpE,KAAK;AACH,aAAO,cAAc,QAAQ,EAAE,IAAI,GAAG,KAAK,SAAS,EAAE;AAAA,IACxD,KAAK;AACH,aAAO,cAAc,OAAO,EAAE,IAAI,GAAG,cAAc,QAAQ,MAAM,KAAK,SAAS,EAAE,CAAC;AAAA,IACpF,KAAK;AACH,aAAO,cAAc,cAAc,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IAC3E,KAAK;AACH,aAAO,cAAc,KAAK,UAAU,OAAO,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACzF,KAAK;AACH,aAAO,cAAc,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACnE,KAAK;AACH,aAAO,cAAc,MAAM,EAAE,IAAI,CAAC;AAAA,IACpC,KAAK;AACH,aAAO,cAAc,MAAM,EAAE,IAAI,CAAC;AAAA,IACpC,KAAK,QAAQ;AACX,YAAM,OAAO,YAAY,KAAK,GAAG;AAEjC,UAAI,SAAS,OAAW,QAAO,cAAc,UAAU,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAC7F,aAAO,cAAc,KAAK,EAAE,KAAK,MAAM,OAAO,KAAK,SAAS,OAAU,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACxG;AAAA,IACA,KAAK,SAAS;AACZ,YAAM,MAAM,YAAY,KAAK,GAAG;AAChC,UAAI,QAAQ,OAAW,QAAO,KAAK,MAAM,cAAc,UAAU,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI;AACtF,aAAO,cAAc,OAAO,EAAE,KAAK,KAAK,KAAK,KAAK,OAAO,IAAI,OAAO,KAAK,SAAS,OAAU,CAAC;AAAA,IAC/F;AAAA;AAAA,IAEA,KAAK;AACH,aAAO,cAAc,SAAS,EAAE,IAAI,GAAG,cAAc,SAAS,MAAM,GAAG,eAAe,MAAM,IAAI,CAAC,CAAC;AAAA,IACpG,KAAK;AACH,aAAO,cAAc,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA,IACnE,KAAK;AACH,aAAO,cAAc,MAAM,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC;AAAA;AAAA;AAAA,IAGnE,KAAK;AACH,aAAO,cAAc,UAAU,EAAE,IAAI,GAAG,KAAK,SAAS,EAAE;AAAA;AAAA,IAE1D,KAAK;AAAA,IACL,KAAK,qBAAqB;AACxB,YAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACzD,YAAM,YAAY,OAAO,KAAK,aAAa,IAAI,IAAI;AACnD,YAAM,WAAW,eAAe,MAAM,IAAI;AAI1C,UAAI,CAAC,UAAW,QAAO,cAAc,UAAU,EAAE,IAAI,GAAG,GAAG,QAAQ;AACnE,aAAO,cAAc,WAAW,EAAE,KAAK,GAAG,aAAa,KAAK,UAAU,EAAE,GAAG,GAAG,QAAQ;AAAA,IACxF;AAAA;AAAA;AAAA,IAGA,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AAEE,aAAO,KAAK,WAAW,cAAc,UAAU,EAAE,IAAI,GAAG,GAAG,eAAe,MAAM,IAAI,CAAC,IAAI;AAAA,EAC7F;AACF;AAOO,SAAS,YAAY,MAAqB,UAA8B,CAAC,GAAc;AAC5F,eAAa;AACb,SAAO,WAAW,MAAM,OAAO;AACjC;","names":[]}

package/dist/safeContent/sanitizeUrl.cjs

@@ -0,0 +1,39 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var sanitizeUrl_exports = {};
+__export(sanitizeUrl_exports, {
+  sanitizeUrl: () => sanitizeUrl
+});
+module.exports = __toCommonJS(sanitizeUrl_exports);
+const SCHEME = /^([a-zA-Z][a-zA-Z0-9+.-]*):/;
+const ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["http", "https", "mailto"]);
+const CONTROL_CHARS = /[\u0000-\u001F\u007F]/g;
+function sanitizeUrl(url) {
+  if (typeof url !== "string") return void 0;
+  const cleaned = url.replace(CONTROL_CHARS, "").trim();
+  if (cleaned === "") return void 0;
+  const m = SCHEME.exec(cleaned);
+  if (!m) return cleaned;
+  return ALLOWED_SCHEMES.has(m[1].toLowerCase()) ? cleaned : void 0;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  sanitizeUrl
+});
+//# sourceMappingURL=sanitizeUrl.cjs.map

package/dist/safeContent/sanitizeUrl.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/sanitizeUrl.ts"],"sourcesContent":["// URL-scheme sanitizer for the safe content renderer (TRUST_MODES_SPEC §5.1,\n// AGENT_AUTHORING §10). A §5.1 residual requirement: link/image URLs in untrusted\n// content are allowlisted to `http`/`https`/`mailto` and relative URLs; every other\n// scheme — `javascript:`, `data:`, `vbscript:`, `file:`, … — is rejected. We do NOT\n// rely on React to neutralize `javascript:` (it does not, on an `<a href>`), so this\n// is the single chokepoint every rendered `href`/`src` passes through.\n\n// A leading `scheme:` per RFC 3986 (`ALPHA *( ALPHA / DIGIT / \"+\" / \"-\" / \".\" )`).\n// Anything before the first `:` that matches this is an absolute-URI scheme; if the\n// URL has no such prefix it is relative (path/query/fragment) and allowed.\nconst SCHEME = /^([a-zA-Z][a-zA-Z0-9+.-]*):/;\nconst ALLOWED_SCHEMES = new Set(['http', 'https', 'mailto']);\n\n// ASCII control chars (0x00–0x1F, 0x7F) that browsers ignore INSIDE a scheme — the\n// `java\\tscript:` / `java\\nscript:` obfuscation — stripped anywhere before testing.\n// eslint-disable-next-line no-control-regex\nconst CONTROL_CHARS = /[\\u0000-\\u001F\\u007F]/g;\n\n/**\n * Return the URL if its scheme is allowed (or it is relative/anchor), else\n * `undefined`. Control chars are stripped first so an obfuscated scheme cannot slip\n * past. A protocol-relative `//host` URL is treated as relative-with-authority and\n * allowed (it inherits the page's https scheme).\n */\nexport function sanitizeUrl(url: unknown): string | undefined {\n  if (typeof url !== 'string') return undefined;\n  const cleaned = url.replace(CONTROL_CHARS, '').trim();\n  if (cleaned === '') return undefined;\n  const m = SCHEME.exec(cleaned);\n  if (!m) return cleaned; // no scheme → relative / anchor / query — allowed\n  return ALLOWED_SCHEMES.has(m[1].toLowerCase()) ? cleaned : undefined;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAUA,MAAM,SAAS;AACf,MAAM,kBAAkB,oBAAI,IAAI,CAAC,QAAQ,SAAS,QAAQ,CAAC;AAK3D,MAAM,gBAAgB;AAQf,SAAS,YAAY,KAAkC;AAC5D,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,UAAU,IAAI,QAAQ,eAAe,EAAE,EAAE,KAAK;AACpD,MAAI,YAAY,GAAI,QAAO;AAC3B,QAAM,IAAI,OAAO,KAAK,OAAO;AAC7B,MAAI,CAAC,EAAG,QAAO;AACf,SAAO,gBAAgB,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,IAAI,UAAU;AAC7D;","names":[]}

package/dist/safeContent/sanitizeUrl.d.cts

@@ -0,0 +1,9 @@
+/**
+ * Return the URL if its scheme is allowed (or it is relative/anchor), else
+ * `undefined`. Control chars are stripped first so an obfuscated scheme cannot slip
+ * past. A protocol-relative `//host` URL is treated as relative-with-authority and
+ * allowed (it inherits the page's https scheme).
+ */
+declare function sanitizeUrl(url: unknown): string | undefined;
+
+export { sanitizeUrl };

package/dist/safeContent/sanitizeUrl.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Return the URL if its scheme is allowed (or it is relative/anchor), else
+ * `undefined`. Control chars are stripped first so an obfuscated scheme cannot slip
+ * past. A protocol-relative `//host` URL is treated as relative-with-authority and
+ * allowed (it inherits the page's https scheme).
+ */
+declare function sanitizeUrl(url: unknown): string | undefined;
+
+export { sanitizeUrl };

package/dist/safeContent/sanitizeUrl.js

@@ -0,0 +1,15 @@
+const SCHEME = /^([a-zA-Z][a-zA-Z0-9+.-]*):/;
+const ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["http", "https", "mailto"]);
+const CONTROL_CHARS = /[\u0000-\u001F\u007F]/g;
+function sanitizeUrl(url) {
+  if (typeof url !== "string") return void 0;
+  const cleaned = url.replace(CONTROL_CHARS, "").trim();
+  if (cleaned === "") return void 0;
+  const m = SCHEME.exec(cleaned);
+  if (!m) return cleaned;
+  return ALLOWED_SCHEMES.has(m[1].toLowerCase()) ? cleaned : void 0;
+}
+export {
+  sanitizeUrl
+};
+//# sourceMappingURL=sanitizeUrl.js.map

package/dist/safeContent/sanitizeUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/sanitizeUrl.ts"],"sourcesContent":["// URL-scheme sanitizer for the safe content renderer (TRUST_MODES_SPEC §5.1,\n// AGENT_AUTHORING §10). A §5.1 residual requirement: link/image URLs in untrusted\n// content are allowlisted to `http`/`https`/`mailto` and relative URLs; every other\n// scheme — `javascript:`, `data:`, `vbscript:`, `file:`, … — is rejected. We do NOT\n// rely on React to neutralize `javascript:` (it does not, on an `<a href>`), so this\n// is the single chokepoint every rendered `href`/`src` passes through.\n\n// A leading `scheme:` per RFC 3986 (`ALPHA *( ALPHA / DIGIT / \"+\" / \"-\" / \".\" )`).\n// Anything before the first `:` that matches this is an absolute-URI scheme; if the\n// URL has no such prefix it is relative (path/query/fragment) and allowed.\nconst SCHEME = /^([a-zA-Z][a-zA-Z0-9+.-]*):/;\nconst ALLOWED_SCHEMES = new Set(['http', 'https', 'mailto']);\n\n// ASCII control chars (0x00–0x1F, 0x7F) that browsers ignore INSIDE a scheme — the\n// `java\\tscript:` / `java\\nscript:` obfuscation — stripped anywhere before testing.\n// eslint-disable-next-line no-control-regex\nconst CONTROL_CHARS = /[\\u0000-\\u001F\\u007F]/g;\n\n/**\n * Return the URL if its scheme is allowed (or it is relative/anchor), else\n * `undefined`. Control chars are stripped first so an obfuscated scheme cannot slip\n * past. A protocol-relative `//host` URL is treated as relative-with-authority and\n * allowed (it inherits the page's https scheme).\n */\nexport function sanitizeUrl(url: unknown): string | undefined {\n  if (typeof url !== 'string') return undefined;\n  const cleaned = url.replace(CONTROL_CHARS, '').trim();\n  if (cleaned === '') return undefined;\n  const m = SCHEME.exec(cleaned);\n  if (!m) return cleaned; // no scheme → relative / anchor / query — allowed\n  return ALLOWED_SCHEMES.has(m[1].toLowerCase()) ? cleaned : undefined;\n}\n"],"mappings":"AAUA,MAAM,SAAS;AACf,MAAM,kBAAkB,oBAAI,IAAI,CAAC,QAAQ,SAAS,QAAQ,CAAC;AAK3D,MAAM,gBAAgB;AAQf,SAAS,YAAY,KAAkC;AAC5D,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,UAAU,IAAI,QAAQ,eAAe,EAAE,EAAE,KAAK;AACpD,MAAI,YAAY,GAAI,QAAO;AAC3B,QAAM,IAAI,OAAO,KAAK,OAAO;AAC7B,MAAI,CAAC,EAAG,QAAO;AACf,SAAO,gBAAgB,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,IAAI,UAAU;AAC7D;","names":[]}

package/dist/safeContent/wikilink.cjs

@@ -0,0 +1,63 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var wikilink_exports = {};
+__export(wikilink_exports, {
+  parseWikiInner: () => parseWikiInner,
+  splitWikiLinks: () => splitWikiLinks
+});
+module.exports = __toCommonJS(wikilink_exports);
+const WIKILINK = /\[\[([^[\]]+)\]\]/g;
+function parseWikiInner(inner) {
+  const pipe = inner.indexOf("|");
+  let target;
+  let label;
+  if (pipe === -1) {
+    target = inner.trim();
+  } else {
+    label = inner.slice(0, pipe).trim();
+    target = inner.slice(pipe + 1).trim();
+  }
+  if (target === "") return null;
+  return label ? { target, label } : { target };
+}
+function splitWikiLinks(value) {
+  if (value.indexOf("[[") === -1) return null;
+  const out = [];
+  let lastIndex = 0;
+  let produced = false;
+  WIKILINK.lastIndex = 0;
+  let match;
+  while ((match = WIKILINK.exec(value)) !== null) {
+    const token = parseWikiInner(match[1]);
+    if (!token) continue;
+    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });
+    out.push({ wiki: token });
+    lastIndex = match.index + match[0].length;
+    produced = true;
+  }
+  if (!produced) return null;
+  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });
+  return out;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  parseWikiInner,
+  splitWikiLinks
+});
+//# sourceMappingURL=wikilink.cjs.map

package/dist/safeContent/wikilink.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/wikilink.ts"],"sourcesContent":["// Wikilink parsing for the safe content renderer (TRUST_MODES_SPEC §5.1). A §5.1\n// residual: wikilinks resolve **only within the granted mount, never a fetch**. The\n// kernel's executable pipeline compiles `[[target]]`/`[[label|target]]` to a\n// `<WikiLink>` component (transpiler `remarkWikiLinks`, MARKDOWN_SYNTAX_SPEC §13); the\n// SAFE renderer parses raw source, so it splits `[[…]]` out of text itself with the\n// same byte-local rule and hands the raw target/label to an injected, **in-mount**\n// resolver. The renderer never fetches; resolution is the consumer's mount-scoped\n// callback (or, absent one, the link renders as inert text).\n\n// Inner content up to the closing `]]`, forbidding `[`/`]` so nested brackets can't\n// be swallowed. Global — a text run may hold several.\nconst WIKILINK = /\\[\\[([^[\\]]+)\\]\\]/g;\n\nexport interface WikiLinkToken {\n  /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */\n  target: string;\n  /** The explicit label, or undefined (the component derives one). */\n  label?: string;\n}\n\nexport type WikiPart = { text: string } | { wiki: WikiLinkToken };\n\n/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target\n *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */\nexport function parseWikiInner(inner: string): WikiLinkToken | null {\n  const pipe = inner.indexOf('|');\n  let target: string;\n  let label: string | undefined;\n  if (pipe === -1) {\n    target = inner.trim();\n  } else {\n    label = inner.slice(0, pipe).trim();\n    target = inner.slice(pipe + 1).trim();\n  }\n  if (target === '') return null;\n  return label ? { target, label } : { target };\n}\n\n/**\n * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`\n * when there is no usable wiki-link (so the caller keeps the text node untouched).\n */\nexport function splitWikiLinks(value: string): WikiPart[] | null {\n  if (value.indexOf('[[') === -1) return null;\n  const out: WikiPart[] = [];\n  let lastIndex = 0;\n  let produced = false;\n  WIKILINK.lastIndex = 0;\n  let match: RegExpExecArray | null;\n  while ((match = WIKILINK.exec(value)) !== null) {\n    const token = parseWikiInner(match[1]);\n    if (!token) continue; // empty target → keep the literal `[[…]]`\n    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });\n    out.push({ wiki: token });\n    lastIndex = match.index + match[0].length;\n    produced = true;\n  }\n  if (!produced) return null;\n  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });\n  return out;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA,MAAM,WAAW;AAaV,SAAS,eAAe,OAAqC;AAClE,QAAM,OAAO,MAAM,QAAQ,GAAG;AAC9B,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS,IAAI;AACf,aAAS,MAAM,KAAK;AAAA,EACtB,OAAO;AACL,YAAQ,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK;AAClC,aAAS,MAAM,MAAM,OAAO,CAAC,EAAE,KAAK;AAAA,EACtC;AACA,MAAI,WAAW,GAAI,QAAO;AAC1B,SAAO,QAAQ,EAAE,QAAQ,MAAM,IAAI,EAAE,OAAO;AAC9C;AAMO,SAAS,eAAe,OAAkC;AAC/D,MAAI,MAAM,QAAQ,IAAI,MAAM,GAAI,QAAO;AACvC,QAAM,MAAkB,CAAC;AACzB,MAAI,YAAY;AAChB,MAAI,WAAW;AACf,WAAS,YAAY;AACrB,MAAI;AACJ,UAAQ,QAAQ,SAAS,KAAK,KAAK,OAAO,MAAM;AAC9C,UAAM,QAAQ,eAAe,MAAM,CAAC,CAAC;AACrC,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,UAAW,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,WAAW,MAAM,KAAK,EAAE,CAAC;AACnF,QAAI,KAAK,EAAE,MAAM,MAAM,CAAC;AACxB,gBAAY,MAAM,QAAQ,MAAM,CAAC,EAAE;AACnC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,YAAY,MAAM,OAAQ,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,SAAS,EAAE,CAAC;AACvE,SAAO;AACT;","names":[]}

package/dist/safeContent/wikilink.d.cts

@@ -0,0 +1,21 @@
+interface WikiLinkToken {
+    /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */
+    target: string;
+    /** The explicit label, or undefined (the component derives one). */
+    label?: string;
+}
+type WikiPart = {
+    text: string;
+} | {
+    wiki: WikiLinkToken;
+};
+/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target
+ *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */
+declare function parseWikiInner(inner: string): WikiLinkToken | null;
+/**
+ * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`
+ * when there is no usable wiki-link (so the caller keeps the text node untouched).
+ */
+declare function splitWikiLinks(value: string): WikiPart[] | null;
+
+export { type WikiLinkToken, type WikiPart, parseWikiInner, splitWikiLinks };

package/dist/safeContent/wikilink.d.ts

@@ -0,0 +1,21 @@
+interface WikiLinkToken {
+    /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */
+    target: string;
+    /** The explicit label, or undefined (the component derives one). */
+    label?: string;
+}
+type WikiPart = {
+    text: string;
+} | {
+    wiki: WikiLinkToken;
+};
+/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target
+ *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */
+declare function parseWikiInner(inner: string): WikiLinkToken | null;
+/**
+ * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`
+ * when there is no usable wiki-link (so the caller keeps the text node untouched).
+ */
+declare function splitWikiLinks(value: string): WikiPart[] | null;
+
+export { type WikiLinkToken, type WikiPart, parseWikiInner, splitWikiLinks };

package/dist/safeContent/wikilink.js

@@ -0,0 +1,38 @@
+const WIKILINK = /\[\[([^[\]]+)\]\]/g;
+function parseWikiInner(inner) {
+  const pipe = inner.indexOf("|");
+  let target;
+  let label;
+  if (pipe === -1) {
+    target = inner.trim();
+  } else {
+    label = inner.slice(0, pipe).trim();
+    target = inner.slice(pipe + 1).trim();
+  }
+  if (target === "") return null;
+  return label ? { target, label } : { target };
+}
+function splitWikiLinks(value) {
+  if (value.indexOf("[[") === -1) return null;
+  const out = [];
+  let lastIndex = 0;
+  let produced = false;
+  WIKILINK.lastIndex = 0;
+  let match;
+  while ((match = WIKILINK.exec(value)) !== null) {
+    const token = parseWikiInner(match[1]);
+    if (!token) continue;
+    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });
+    out.push({ wiki: token });
+    lastIndex = match.index + match[0].length;
+    produced = true;
+  }
+  if (!produced) return null;
+  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });
+  return out;
+}
+export {
+  parseWikiInner,
+  splitWikiLinks
+};
+//# sourceMappingURL=wikilink.js.map

package/dist/safeContent/wikilink.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/safeContent/wikilink.ts"],"sourcesContent":["// Wikilink parsing for the safe content renderer (TRUST_MODES_SPEC §5.1). A §5.1\n// residual: wikilinks resolve **only within the granted mount, never a fetch**. The\n// kernel's executable pipeline compiles `[[target]]`/`[[label|target]]` to a\n// `<WikiLink>` component (transpiler `remarkWikiLinks`, MARKDOWN_SYNTAX_SPEC §13); the\n// SAFE renderer parses raw source, so it splits `[[…]]` out of text itself with the\n// same byte-local rule and hands the raw target/label to an injected, **in-mount**\n// resolver. The renderer never fetches; resolution is the consumer's mount-scoped\n// callback (or, absent one, the link renders as inert text).\n\n// Inner content up to the closing `]]`, forbidding `[`/`]` so nested brackets can't\n// be swallowed. Global — a text run may hold several.\nconst WIKILINK = /\\[\\[([^[\\]]+)\\]\\]/g;\n\nexport interface WikiLinkToken {\n  /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */\n  target: string;\n  /** The explicit label, or undefined (the component derives one). */\n  label?: string;\n}\n\nexport type WikiPart = { text: string } | { wiki: WikiLinkToken };\n\n/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target\n *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */\nexport function parseWikiInner(inner: string): WikiLinkToken | null {\n  const pipe = inner.indexOf('|');\n  let target: string;\n  let label: string | undefined;\n  if (pipe === -1) {\n    target = inner.trim();\n  } else {\n    label = inner.slice(0, pipe).trim();\n    target = inner.slice(pipe + 1).trim();\n  }\n  if (target === '') return null;\n  return label ? { target, label } : { target };\n}\n\n/**\n * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`\n * when there is no usable wiki-link (so the caller keeps the text node untouched).\n */\nexport function splitWikiLinks(value: string): WikiPart[] | null {\n  if (value.indexOf('[[') === -1) return null;\n  const out: WikiPart[] = [];\n  let lastIndex = 0;\n  let produced = false;\n  WIKILINK.lastIndex = 0;\n  let match: RegExpExecArray | null;\n  while ((match = WIKILINK.exec(value)) !== null) {\n    const token = parseWikiInner(match[1]);\n    if (!token) continue; // empty target → keep the literal `[[…]]`\n    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });\n    out.push({ wiki: token });\n    lastIndex = match.index + match[0].length;\n    produced = true;\n  }\n  if (!produced) return null;\n  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });\n  return out;\n}\n"],"mappings":"AAWA,MAAM,WAAW;AAaV,SAAS,eAAe,OAAqC;AAClE,QAAM,OAAO,MAAM,QAAQ,GAAG;AAC9B,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS,IAAI;AACf,aAAS,MAAM,KAAK;AAAA,EACtB,OAAO;AACL,YAAQ,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK;AAClC,aAAS,MAAM,MAAM,OAAO,CAAC,EAAE,KAAK;AAAA,EACtC;AACA,MAAI,WAAW,GAAI,QAAO;AAC1B,SAAO,QAAQ,EAAE,QAAQ,MAAM,IAAI,EAAE,OAAO;AAC9C;AAMO,SAAS,eAAe,OAAkC;AAC/D,MAAI,MAAM,QAAQ,IAAI,MAAM,GAAI,QAAO;AACvC,QAAM,MAAkB,CAAC;AACzB,MAAI,YAAY;AAChB,MAAI,WAAW;AACf,WAAS,YAAY;AACrB,MAAI;AACJ,UAAQ,QAAQ,SAAS,KAAK,KAAK,OAAO,MAAM;AAC9C,UAAM,QAAQ,eAAe,MAAM,CAAC,CAAC;AACrC,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,UAAW,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,WAAW,MAAM,KAAK,EAAE,CAAC;AACnF,QAAI,KAAK,EAAE,MAAM,MAAM,CAAC;AACxB,gBAAY,MAAM,QAAQ,MAAM,CAAC,EAAE;AACnC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,YAAY,MAAM,OAAQ,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,SAAS,EAAE,CAAC;AACvE,SAAO;AACT;","names":[]}