@immediately-run/sdk 0.32.0 → 0.33.0

package/dist/boot.d.cts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { FC, ReactNode } from 'react';
 import { RoutingSpec } from './RoutingSpec.cjs';
 
@@ -39,7 +39,7 @@ type BootProps = {
 declare const TinkerableApp: ({ routingSpec, children, }: {
     routingSpec: RoutingSpec;
     children?: ReactNode;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 /** The default route table when `boot` is called with no `routingSpec`/`children`:
  *  `/` → main content, `/files/<path>` → the file router, else not-found.
  *  Re-expressed with path templates (SANDBOX_ROUTING_SPEC §7); the file path

package/dist/boot.d.ts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { FC, ReactNode } from 'react';
 import { RoutingSpec } from './RoutingSpec.js';
 
@@ -39,7 +39,7 @@ type BootProps = {
 declare const TinkerableApp: ({ routingSpec, children, }: {
     routingSpec: RoutingSpec;
     children?: ReactNode;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 /** The default route table when `boot` is called with no `routingSpec`/`children`:
  *  `/` → main content, `/files/<path>` → the file router, else not-found.
  *  Re-expressed with path templates (SANDBOX_ROUTING_SPEC §7); the file path

package/dist/components/Include.d.cts

@@ -1,4 +1,3 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import { EvaluationContext } from '../sandboxTypes.cjs';
 import { defaultLoadingComponent, defaultErrorComponent } from './defaults.cjs';
@@ -16,7 +15,7 @@ declare const RenderExportedComponentContext: react.Context<RenderFileContextTyp
 declare const RenderExportedComponent: ({ evaluationContextPromise, exportedSymbol, }: {
     evaluationContextPromise: Promise<EvaluationContext>;
     exportedSymbol: string;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 /** Render another repo file's exported component inline, resolving + evaluating it
  *  through the module cache (with Suspense + an error boundary). */
 declare const Include: ({ filename, exportedSymbol, LoadingComponent, ErrorComponent, baseModule, }: {
@@ -25,6 +24,6 @@ declare const Include: ({ filename, exportedSymbol, LoadingComponent, ErrorCompo
     LoadingComponent?: typeof defaultLoadingComponent;
     ErrorComponent?: typeof defaultErrorComponent;
     baseModule?: EvaluationContext;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 
 export { Include, RenderExportedComponent, RenderExportedComponentContext, type RenderFileContextType };

package/dist/components/Include.d.ts

@@ -1,4 +1,3 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import { EvaluationContext } from '../sandboxTypes.js';
 import { defaultLoadingComponent, defaultErrorComponent } from './defaults.js';
@@ -16,7 +15,7 @@ declare const RenderExportedComponentContext: react.Context<RenderFileContextTyp
 declare const RenderExportedComponent: ({ evaluationContextPromise, exportedSymbol, }: {
     evaluationContextPromise: Promise<EvaluationContext>;
     exportedSymbol: string;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 /** Render another repo file's exported component inline, resolving + evaluating it
  *  through the module cache (with Suspense + an error boundary). */
 declare const Include: ({ filename, exportedSymbol, LoadingComponent, ErrorComponent, baseModule, }: {
@@ -25,6 +24,6 @@ declare const Include: ({ filename, exportedSymbol, LoadingComponent, ErrorCompo
     LoadingComponent?: typeof defaultLoadingComponent;
     ErrorComponent?: typeof defaultErrorComponent;
     baseModule?: EvaluationContext;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 
 export { Include, RenderExportedComponent, RenderExportedComponentContext, type RenderFileContextType };

package/dist/components/MainContent.d.cts

@@ -1,16 +1,16 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { defaultLoadingComponent, defaultErrorComponent } from './defaults.cjs';
 import 'react-error-boundary';
 
 declare const MainContentRedirect: ({ filename }: {
     filename: string;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 declare const MainContentInner: ({ candidatesExistPromise, }: {
     candidatesExistPromise: Promise<[string, boolean][]>;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 declare const MainContent: ({ LoadingComponent, ErrorComponent, }?: {
     LoadingComponent?: typeof defaultLoadingComponent;
     ErrorComponent?: typeof defaultErrorComponent;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 
 export { MainContent, MainContentInner, MainContentRedirect };

package/dist/components/MainContent.d.ts

@@ -1,16 +1,16 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { defaultLoadingComponent, defaultErrorComponent } from './defaults.js';
 import 'react-error-boundary';
 
 declare const MainContentRedirect: ({ filename }: {
     filename: string;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 declare const MainContentInner: ({ candidatesExistPromise, }: {
     candidatesExistPromise: Promise<[string, boolean][]>;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 declare const MainContent: ({ LoadingComponent, ErrorComponent, }?: {
     LoadingComponent?: typeof defaultLoadingComponent;
     ErrorComponent?: typeof defaultErrorComponent;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 
 export { MainContent, MainContentInner, MainContentRedirect };

package/dist/components/MountImage.d.cts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ImgHTMLAttributes, ReactNode } from 'react';
 import { SandboxMount } from '../mounts.cjs';
 import '../tasks.cjs';
@@ -37,6 +37,6 @@ interface MountImageProps extends Omit<ImgHTMLAttributes<HTMLImageElement>, 'src
  * />
  * ```
  */
-declare function MountImage({ mount, relPath, type, placeholder, fallback, alt, ...imgProps }: MountImageProps): react_jsx_runtime.JSX.Element;
+declare function MountImage({ mount, relPath, type, placeholder, fallback, alt, ...imgProps }: MountImageProps): react.JSX.Element;
 
 export { MountImage, type MountImageProps };

package/dist/components/MountImage.d.ts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ImgHTMLAttributes, ReactNode } from 'react';
 import { SandboxMount } from '../mounts.js';
 import '../tasks.js';
@@ -37,6 +37,6 @@ interface MountImageProps extends Omit<ImgHTMLAttributes<HTMLImageElement>, 'src
  * />
  * ```
  */
-declare function MountImage({ mount, relPath, type, placeholder, fallback, alt, ...imgProps }: MountImageProps): react_jsx_runtime.JSX.Element;
+declare function MountImage({ mount, relPath, type, placeholder, fallback, alt, ...imgProps }: MountImageProps): react.JSX.Element;
 
 export { MountImage, type MountImageProps };

package/dist/components/Routes.d.cts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode } from 'react';
 import { RouteComponent } from '../RoutingSpec.cjs';
 
@@ -29,6 +29,6 @@ declare const Route: (_props: RouteProps) => null;
 declare const Routes: ({ children, fallback, }: {
     children?: ReactNode;
     fallback?: ReactNode;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 
 export { Route, type RouteProps, Routes };

package/dist/components/Routes.d.ts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode } from 'react';
 import { RouteComponent } from '../RoutingSpec.js';
 
@@ -29,6 +29,6 @@ declare const Route: (_props: RouteProps) => null;
 declare const Routes: ({ children, fallback, }: {
     children?: ReactNode;
     fallback?: ReactNode;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 
 export { Route, type RouteProps, Routes };

package/dist/components/defaults.d.cts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ErrorBoundaryPropsWithRender } from 'react-error-boundary';
 
 /**
@@ -13,7 +13,7 @@ import { ErrorBoundaryPropsWithRender } from 'react-error-boundary';
  * subtle centred spinner that inherits the app's own text colour. The host themes
  * the iframe canvas behind it (sandbox `themeCanvas.ts`), so there is no white.
  */
-declare const defaultLoadingComponent: () => react_jsx_runtime.JSX.Element;
+declare const defaultLoadingComponent: () => react.JSX.Element;
 declare const defaultErrorComponent: ErrorBoundaryPropsWithRender["fallbackRender"];
 
 export { defaultErrorComponent, defaultLoadingComponent };

package/dist/components/defaults.d.ts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ErrorBoundaryPropsWithRender } from 'react-error-boundary';
 
 /**
@@ -13,7 +13,7 @@ import { ErrorBoundaryPropsWithRender } from 'react-error-boundary';
  * subtle centred spinner that inherits the app's own text colour. The host themes
  * the iframe canvas behind it (sandbox `themeCanvas.ts`), so there is no white.
  */
-declare const defaultLoadingComponent: () => react_jsx_runtime.JSX.Element;
+declare const defaultLoadingComponent: () => react.JSX.Element;
 declare const defaultErrorComponent: ErrorBoundaryPropsWithRender["fallbackRender"];
 
 export { defaultErrorComponent, defaultLoadingComponent };

package/dist/components/errors.d.cts

@@ -1,5 +1,5 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 
-declare const ErrorNotFound: () => react_jsx_runtime.JSX.Element;
+declare const ErrorNotFound: () => react.JSX.Element;
 
 export { ErrorNotFound };

package/dist/components/errors.d.ts

@@ -1,5 +1,5 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 
-declare const ErrorNotFound: () => react_jsx_runtime.JSX.Element;
+declare const ErrorNotFound: () => react.JSX.Element;
 
 export { ErrorNotFound };

package/dist/index.d.cts

@@ -34,7 +34,7 @@ export { StreamError, StreamFrame, StreamTransport, consumeStream, protocolStrea
 export { EvaluationContext, FileQueryResult, FilesMetadata, Metadata, MetadataQueryEntry, MetadataQueryFunction, MetadataQueryResult, ModuleExports } from './sandboxTypes.cjs';
 export { SafeContent, SafeContentProps } from './safeContent/SafeContent.cjs';
 export { RenderMdastOptions, SafeContentComponents, renderMdast } from './safeContent/renderMdast.cjs';
-export { SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './safeContent/parseSafeMdast.cjs';
+export { ParseSafeMdastOptions, SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './safeContent/parseSafeMdast.cjs';
 export { sanitizeUrl } from './safeContent/sanitizeUrl.cjs';
 export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from './safeContent/wikilink.cjs';
 export { Admonition, AdmonitionType } from './components/Admonition.cjs';
@@ -46,6 +46,5 @@ export { WikiLink } from './components/WikiLink.cjs';
 import 'react';
 import './TinkerableContext.cjs';
 import './RoutingSpec.cjs';
-import 'react/jsx-runtime';
 import './components/defaults.cjs';
 import 'react-error-boundary';

package/dist/index.d.ts

@@ -34,7 +34,7 @@ export { StreamError, StreamFrame, StreamTransport, consumeStream, protocolStrea
 export { EvaluationContext, FileQueryResult, FilesMetadata, Metadata, MetadataQueryEntry, MetadataQueryFunction, MetadataQueryResult, ModuleExports } from './sandboxTypes.js';
 export { SafeContent, SafeContentProps } from './safeContent/SafeContent.js';
 export { RenderMdastOptions, SafeContentComponents, renderMdast } from './safeContent/renderMdast.js';
-export { SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './safeContent/parseSafeMdast.js';
+export { ParseSafeMdastOptions, SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './safeContent/parseSafeMdast.js';
 export { sanitizeUrl } from './safeContent/sanitizeUrl.js';
 export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from './safeContent/wikilink.js';
 export { Admonition, AdmonitionType } from './components/Admonition.js';
@@ -46,6 +46,5 @@ export { WikiLink } from './components/WikiLink.js';
 import 'react';
 import './TinkerableContext.js';
 import './RoutingSpec.js';
-import 'react/jsx-runtime';
 import './components/defaults.js';
 import 'react-error-boundary';

package/dist/loading.d.cts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode, CSSProperties } from 'react';
 
 /** Loading timing constants, matching the host (LOADING_UX_SPEC §3, the 2026-06-22
@@ -18,14 +18,14 @@ declare function SkeletonRow({ width, height, style, }: {
     width?: number | string;
     height?: number | string;
     style?: CSSProperties;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 /** A shaped, in-app skeleton matching the host archetypes — for an app's own lazy
  *  region (e.g. `<Suspense fallback={<Skeleton archetype="panel.list" />}>`).
  *  Decorative (`aria-hidden`); pair it with `aria-busy` on the region it stands in. */
 declare function Skeleton({ archetype, style, }: {
     archetype?: SkeletonArchetype;
     style?: CSSProperties;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 /** An indeterminate spinner for waits where a shaped skeleton doesn't fit (a pending
  *  button, a small inline fetch). Wired to the host's ~150 ms-before-spin rule: it
  *  renders nothing until the threshold, so a fast wait shows no flash. Reduced motion
@@ -34,7 +34,7 @@ declare function Spinner({ size, thresholdMs, label, }: {
     size?: number;
     thresholdMs?: number;
     label?: string;
-}): react_jsx_runtime.JSX.Element | null;
+}): react.JSX.Element | null;
 /** Wrap an in-app region whose content is still loading: shows a centered spinner
  *  (past the 150 ms floor) with `aria-busy`, then reveals `children`. For a shaped
  *  wait, pass a `<Skeleton>` as `fallback` instead. App a11y only — not host chrome. */
@@ -43,6 +43,6 @@ declare function LoadingRegion({ loading, fallback, label, children, }: {
     fallback?: ReactNode;
     label?: string;
     children?: ReactNode;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 
 export { LOADING_TIMINGS, LoadingRegion, Skeleton, type SkeletonArchetype, SkeletonRow, Spinner };

package/dist/loading.d.ts

@@ -1,4 +1,4 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
+import * as react from 'react';
 import { ReactNode, CSSProperties } from 'react';
 
 /** Loading timing constants, matching the host (LOADING_UX_SPEC §3, the 2026-06-22
@@ -18,14 +18,14 @@ declare function SkeletonRow({ width, height, style, }: {
     width?: number | string;
     height?: number | string;
     style?: CSSProperties;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 /** A shaped, in-app skeleton matching the host archetypes — for an app's own lazy
  *  region (e.g. `<Suspense fallback={<Skeleton archetype="panel.list" />}>`).
  *  Decorative (`aria-hidden`); pair it with `aria-busy` on the region it stands in. */
 declare function Skeleton({ archetype, style, }: {
     archetype?: SkeletonArchetype;
     style?: CSSProperties;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 /** An indeterminate spinner for waits where a shaped skeleton doesn't fit (a pending
  *  button, a small inline fetch). Wired to the host's ~150 ms-before-spin rule: it
  *  renders nothing until the threshold, so a fast wait shows no flash. Reduced motion
@@ -34,7 +34,7 @@ declare function Spinner({ size, thresholdMs, label, }: {
     size?: number;
     thresholdMs?: number;
     label?: string;
-}): react_jsx_runtime.JSX.Element | null;
+}): react.JSX.Element | null;
 /** Wrap an in-app region whose content is still loading: shows a centered spinner
  *  (past the 150 ms floor) with `aria-busy`, then reveals `children`. For a shaped
  *  wait, pass a `<Skeleton>` as `fallback` instead. App a11y only — not host chrome. */
@@ -43,6 +43,6 @@ declare function LoadingRegion({ loading, fallback, label, children, }: {
     fallback?: ReactNode;
     label?: string;
     children?: ReactNode;
-}): react_jsx_runtime.JSX.Element;
+}): react.JSX.Element;
 
 export { LOADING_TIMINGS, LoadingRegion, Skeleton, type SkeletonArchetype, SkeletonRow, Spinner };

package/dist/moduleCache.d.cts

@@ -1,4 +1,3 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import { ReactNode } from 'react';
 import { EvaluationContext } from './sandboxTypes.cjs';
@@ -15,6 +14,6 @@ declare const ModuleCacheContext: react.Context<ModuleCache | null>;
 declare const ModuleCacheContextProvider: ({ children, moduleCache }: {
     children: ReactNode;
     moduleCache: ModuleCache;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 
 export { ModuleCache, ModuleCacheContext, ModuleCacheContextProvider };

package/dist/moduleCache.d.ts

@@ -1,4 +1,3 @@
-import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import { ReactNode } from 'react';
 import { EvaluationContext } from './sandboxTypes.js';
@@ -15,6 +14,6 @@ declare const ModuleCacheContext: react.Context<ModuleCache | null>;
 declare const ModuleCacheContextProvider: ({ children, moduleCache }: {
     children: ReactNode;
     moduleCache: ModuleCache;
-}) => react_jsx_runtime.JSX.Element;
+}) => react.JSX.Element;
 
 export { ModuleCache, ModuleCacheContext, ModuleCacheContextProvider };

package/dist/safeContent/SafeContent.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/safeContent/SafeContent.tsx"],"sourcesContent":["import { useEffect, useMemo, useRef, useState, type ReactNode } from 'react';\nimport { parseSafeMdast } from './parseSafeMdast';\nimport { renderMdast, type RenderMdastOptions } from './renderMdast';\n\n// `<SafeContent>` — the host/SDK-owned safe renderer (TRUST_MODES_SPEC §5.1,\n// AGENT_AUTHORING §10). An interpreter app renders untrusted Markdown/MDX-syntax\n// content — a shared board's body, a multi-writer wiki entry — through THIS component\n// so **no author JavaScript ever executes** while `<Component/>` syntax still reaches\n// the app's own safe components. It is the mandatory terminal for the MDX-from-mount\n// gate: a shared board is a multi-writer (M3) source, and compiled/executable MDX\n// would run board-author code with the app's authority (the WHITEBOARD §8 blast\n// radius this gate bounds).\n//\n// The parse (no-acorn, ESM-only deps) is async, so this renders a small placeholder\n// until the tree is ready, then the pure synchronous `renderMdast`. Parsing is keyed\n// on the source string; a changed source re-parses, and a stale async result is\n// discarded (the ref guard) so a fast source swap can't paint the wrong content.\n\nexport interface SafeContentProps extends RenderMdastOptions {\n  /** The untrusted Markdown/MDX-syntax source to render as data. */\n  source: string;\n  /** Rendered while the async parse is in flight (default: nothing). */\n  fallback?: ReactNode;\n}\n\nexport function SafeContent({ source, fallback = null, ...options }: SafeContentProps): ReactNode {\n  const [tree, setTree] = useState<Awaited<ReturnType<typeof parseSafeMdast>> | null>(null);\n  const runId = useRef(0);\n\n  useEffect(() => {\n    const id = ++runId.current;\n    setTree(null);\n    let cancelled = false;\n    parseSafeMdast(source)\n      .then((parsed) => {\n        // Discard a stale result (source changed / unmounted) so we never paint the\n        // wrong tree — the render-as-data guarantee also needs the RIGHT data shown.\n        if (!cancelled && runId.current === id) setTree(parsed);\n      })\n      .catch(() => {\n        if (!cancelled && runId.current === id) setTree(null);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [source]);\n\n  // `renderMdast` is pure; memoise on the tree + the option identities the caller\n  // passes. (Callers should memoise `components`/`resolveWikiLink` themselves for a\n  // stable identity; changing them re-renders, which is correct.)\n  const rendered = useMemo(\n    () => (tree ? renderMdast(tree, options) : null),\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [tree, options.components, options.resolveWikiLink],\n  );\n\n  return tree ? rendered : fallback;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAqE;AACrE,4BAA+B;AAC/B,yBAAqD;AAuB9C,SAAS,YAAY,EAAE,QAAQ,WAAW,MAAM,GAAG,QAAQ,GAAgC;AAChG,QAAM,CAAC,MAAM,OAAO,QAAI,uBAA4D,IAAI;AACxF,QAAM,YAAQ,qBAAO,CAAC;AAEtB,8BAAU,MAAM;AACd,UAAM,KAAK,EAAE,MAAM;AACnB,YAAQ,IAAI;AACZ,QAAI,YAAY;AAChB,8CAAe,MAAM,EAClB,KAAK,CAAC,WAAW;AAGhB,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,MAAM;AAAA,IACxD,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,IAAI;AAAA,IACtD,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAKX,QAAM,eAAW;AAAA,IACf,MAAO,WAAO,gCAAY,MAAM,OAAO,IAAI;AAAA;AAAA,IAE3C,CAAC,MAAM,QAAQ,YAAY,QAAQ,eAAe;AAAA,EACpD;AAEA,SAAO,OAAO,WAAW;AAC3B;","names":[]}
+{"version":3,"sources":["../../src/safeContent/SafeContent.tsx"],"sourcesContent":["import { useEffect, useMemo, useRef, useState, type ReactNode } from 'react';\nimport { parseSafeMdast } from './parseSafeMdast';\nimport { renderMdast, type RenderMdastOptions } from './renderMdast';\n\n// R3-213 — sharing the component map: `parseSafeMdast` runs the SAME kernel remark\n// plugins the compiled path uses, so it emits `<Admonition>` / `<WikiLink>` /\n// `<HeadingAnchor>` element nodes. To render them identically to the compiled path (and\n// so pick up the R3-212 fragment resolver + scroll), an interpreter app passes the SAME\n// `DEFAULT_MDX_COMPONENTS` it hands `boot({ mdxComponents })` as this component's\n// `components` — that shared map IS the uniformity (no forked second component set). We\n// deliberately do NOT import DEFAULT_MDX_COMPONENTS here: the safe renderer is a lean,\n// dep-light security primitive (render-as-data, no evaluator, ESM-clean for the e2e\n// bundle), and must not pull the full component library into its module graph.\n\n// `<SafeContent>` — the host/SDK-owned safe renderer (TRUST_MODES_SPEC §5.1,\n// AGENT_AUTHORING §10). An interpreter app renders untrusted Markdown/MDX-syntax\n// content — a shared board's body, a multi-writer wiki entry — through THIS component\n// so **no author JavaScript ever executes** while `<Component/>` syntax still reaches\n// the app's own safe components. It is the mandatory terminal for the MDX-from-mount\n// gate: a shared board is a multi-writer (M3) source, and compiled/executable MDX\n// would run board-author code with the app's authority (the WHITEBOARD §8 blast\n// radius this gate bounds).\n//\n// The parse (no-acorn, ESM-only deps) is async, so this renders a small placeholder\n// until the tree is ready, then the pure synchronous `renderMdast`. Parsing is keyed\n// on the source string; a changed source re-parses, and a stale async result is\n// discarded (the ref guard) so a fast source swap can't paint the wrong content.\n\nexport interface SafeContentProps extends RenderMdastOptions {\n  /** The untrusted Markdown/MDX-syntax source to render as data. */\n  source: string;\n  /** Rendered while the async parse is in flight (default: nothing). */\n  fallback?: ReactNode;\n}\n\nexport function SafeContent({ source, fallback = null, ...options }: SafeContentProps): ReactNode {\n  const [tree, setTree] = useState<Awaited<ReturnType<typeof parseSafeMdast>> | null>(null);\n  const runId = useRef(0);\n\n  useEffect(() => {\n    const id = ++runId.current;\n    setTree(null);\n    let cancelled = false;\n    parseSafeMdast(source)\n      .then((parsed) => {\n        // Discard a stale result (source changed / unmounted) so we never paint the\n        // wrong tree — the render-as-data guarantee also needs the RIGHT data shown.\n        if (!cancelled && runId.current === id) setTree(parsed);\n      })\n      .catch(() => {\n        if (!cancelled && runId.current === id) setTree(null);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [source]);\n\n  // `renderMdast` is pure; memoise on the tree + the option identities the caller\n  // passes. (Callers should memoise `components`/`resolveWikiLink` themselves for a\n  // stable identity; changing them re-renders, which is correct.)\n  const rendered = useMemo(\n    () => (tree ? renderMdast(tree, options) : null),\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [tree, options.components, options.resolveWikiLink],\n  );\n\n  return tree ? rendered : fallback;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAqE;AACrE,4BAA+B;AAC/B,yBAAqD;AAiC9C,SAAS,YAAY,EAAE,QAAQ,WAAW,MAAM,GAAG,QAAQ,GAAgC;AAChG,QAAM,CAAC,MAAM,OAAO,QAAI,uBAA4D,IAAI;AACxF,QAAM,YAAQ,qBAAO,CAAC;AAEtB,8BAAU,MAAM;AACd,UAAM,KAAK,EAAE,MAAM;AACnB,YAAQ,IAAI;AACZ,QAAI,YAAY;AAChB,8CAAe,MAAM,EAClB,KAAK,CAAC,WAAW;AAGhB,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,MAAM;AAAA,IACxD,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,IAAI;AAAA,IACtD,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAKX,QAAM,eAAW;AAAA,IACf,MAAO,WAAO,gCAAY,MAAM,OAAO,IAAI;AAAA;AAAA,IAE3C,CAAC,MAAM,QAAQ,YAAY,QAAQ,eAAe;AAAA,EACpD;AAEA,SAAO,OAAO,WAAW;AAC3B;","names":[]}

package/dist/safeContent/SafeContent.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/safeContent/SafeContent.tsx"],"sourcesContent":["import { useEffect, useMemo, useRef, useState, type ReactNode } from 'react';\nimport { parseSafeMdast } from './parseSafeMdast';\nimport { renderMdast, type RenderMdastOptions } from './renderMdast';\n\n// `<SafeContent>` — the host/SDK-owned safe renderer (TRUST_MODES_SPEC §5.1,\n// AGENT_AUTHORING §10). An interpreter app renders untrusted Markdown/MDX-syntax\n// content — a shared board's body, a multi-writer wiki entry — through THIS component\n// so **no author JavaScript ever executes** while `<Component/>` syntax still reaches\n// the app's own safe components. It is the mandatory terminal for the MDX-from-mount\n// gate: a shared board is a multi-writer (M3) source, and compiled/executable MDX\n// would run board-author code with the app's authority (the WHITEBOARD §8 blast\n// radius this gate bounds).\n//\n// The parse (no-acorn, ESM-only deps) is async, so this renders a small placeholder\n// until the tree is ready, then the pure synchronous `renderMdast`. Parsing is keyed\n// on the source string; a changed source re-parses, and a stale async result is\n// discarded (the ref guard) so a fast source swap can't paint the wrong content.\n\nexport interface SafeContentProps extends RenderMdastOptions {\n  /** The untrusted Markdown/MDX-syntax source to render as data. */\n  source: string;\n  /** Rendered while the async parse is in flight (default: nothing). */\n  fallback?: ReactNode;\n}\n\nexport function SafeContent({ source, fallback = null, ...options }: SafeContentProps): ReactNode {\n  const [tree, setTree] = useState<Awaited<ReturnType<typeof parseSafeMdast>> | null>(null);\n  const runId = useRef(0);\n\n  useEffect(() => {\n    const id = ++runId.current;\n    setTree(null);\n    let cancelled = false;\n    parseSafeMdast(source)\n      .then((parsed) => {\n        // Discard a stale result (source changed / unmounted) so we never paint the\n        // wrong tree — the render-as-data guarantee also needs the RIGHT data shown.\n        if (!cancelled && runId.current === id) setTree(parsed);\n      })\n      .catch(() => {\n        if (!cancelled && runId.current === id) setTree(null);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [source]);\n\n  // `renderMdast` is pure; memoise on the tree + the option identities the caller\n  // passes. (Callers should memoise `components`/`resolveWikiLink` themselves for a\n  // stable identity; changing them re-renders, which is correct.)\n  const rendered = useMemo(\n    () => (tree ? renderMdast(tree, options) : null),\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [tree, options.components, options.resolveWikiLink],\n  );\n\n  return tree ? rendered : fallback;\n}\n"],"mappings":"AAAA,SAAS,WAAW,SAAS,QAAQ,gBAAgC;AACrE,SAAS,sBAAsB;AAC/B,SAAS,mBAA4C;AAuB9C,SAAS,YAAY,EAAE,QAAQ,WAAW,MAAM,GAAG,QAAQ,GAAgC;AAChG,QAAM,CAAC,MAAM,OAAO,IAAI,SAA4D,IAAI;AACxF,QAAM,QAAQ,OAAO,CAAC;AAEtB,YAAU,MAAM;AACd,UAAM,KAAK,EAAE,MAAM;AACnB,YAAQ,IAAI;AACZ,QAAI,YAAY;AAChB,mBAAe,MAAM,EAClB,KAAK,CAAC,WAAW;AAGhB,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,MAAM;AAAA,IACxD,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,IAAI;AAAA,IACtD,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAKX,QAAM,WAAW;AAAA,IACf,MAAO,OAAO,YAAY,MAAM,OAAO,IAAI;AAAA;AAAA,IAE3C,CAAC,MAAM,QAAQ,YAAY,QAAQ,eAAe;AAAA,EACpD;AAEA,SAAO,OAAO,WAAW;AAC3B;","names":[]}
+{"version":3,"sources":["../../src/safeContent/SafeContent.tsx"],"sourcesContent":["import { useEffect, useMemo, useRef, useState, type ReactNode } from 'react';\nimport { parseSafeMdast } from './parseSafeMdast';\nimport { renderMdast, type RenderMdastOptions } from './renderMdast';\n\n// R3-213 — sharing the component map: `parseSafeMdast` runs the SAME kernel remark\n// plugins the compiled path uses, so it emits `<Admonition>` / `<WikiLink>` /\n// `<HeadingAnchor>` element nodes. To render them identically to the compiled path (and\n// so pick up the R3-212 fragment resolver + scroll), an interpreter app passes the SAME\n// `DEFAULT_MDX_COMPONENTS` it hands `boot({ mdxComponents })` as this component's\n// `components` — that shared map IS the uniformity (no forked second component set). We\n// deliberately do NOT import DEFAULT_MDX_COMPONENTS here: the safe renderer is a lean,\n// dep-light security primitive (render-as-data, no evaluator, ESM-clean for the e2e\n// bundle), and must not pull the full component library into its module graph.\n\n// `<SafeContent>` — the host/SDK-owned safe renderer (TRUST_MODES_SPEC §5.1,\n// AGENT_AUTHORING §10). An interpreter app renders untrusted Markdown/MDX-syntax\n// content — a shared board's body, a multi-writer wiki entry — through THIS component\n// so **no author JavaScript ever executes** while `<Component/>` syntax still reaches\n// the app's own safe components. It is the mandatory terminal for the MDX-from-mount\n// gate: a shared board is a multi-writer (M3) source, and compiled/executable MDX\n// would run board-author code with the app's authority (the WHITEBOARD §8 blast\n// radius this gate bounds).\n//\n// The parse (no-acorn, ESM-only deps) is async, so this renders a small placeholder\n// until the tree is ready, then the pure synchronous `renderMdast`. Parsing is keyed\n// on the source string; a changed source re-parses, and a stale async result is\n// discarded (the ref guard) so a fast source swap can't paint the wrong content.\n\nexport interface SafeContentProps extends RenderMdastOptions {\n  /** The untrusted Markdown/MDX-syntax source to render as data. */\n  source: string;\n  /** Rendered while the async parse is in flight (default: nothing). */\n  fallback?: ReactNode;\n}\n\nexport function SafeContent({ source, fallback = null, ...options }: SafeContentProps): ReactNode {\n  const [tree, setTree] = useState<Awaited<ReturnType<typeof parseSafeMdast>> | null>(null);\n  const runId = useRef(0);\n\n  useEffect(() => {\n    const id = ++runId.current;\n    setTree(null);\n    let cancelled = false;\n    parseSafeMdast(source)\n      .then((parsed) => {\n        // Discard a stale result (source changed / unmounted) so we never paint the\n        // wrong tree — the render-as-data guarantee also needs the RIGHT data shown.\n        if (!cancelled && runId.current === id) setTree(parsed);\n      })\n      .catch(() => {\n        if (!cancelled && runId.current === id) setTree(null);\n      });\n    return () => {\n      cancelled = true;\n    };\n  }, [source]);\n\n  // `renderMdast` is pure; memoise on the tree + the option identities the caller\n  // passes. (Callers should memoise `components`/`resolveWikiLink` themselves for a\n  // stable identity; changing them re-renders, which is correct.)\n  const rendered = useMemo(\n    () => (tree ? renderMdast(tree, options) : null),\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n    [tree, options.components, options.resolveWikiLink],\n  );\n\n  return tree ? rendered : fallback;\n}\n"],"mappings":"AAAA,SAAS,WAAW,SAAS,QAAQ,gBAAgC;AACrE,SAAS,sBAAsB;AAC/B,SAAS,mBAA4C;AAiC9C,SAAS,YAAY,EAAE,QAAQ,WAAW,MAAM,GAAG,QAAQ,GAAgC;AAChG,QAAM,CAAC,MAAM,OAAO,IAAI,SAA4D,IAAI;AACxF,QAAM,QAAQ,OAAO,CAAC;AAEtB,YAAU,MAAM;AACd,UAAM,KAAK,EAAE,MAAM;AACnB,YAAQ,IAAI;AACZ,QAAI,YAAY;AAChB,mBAAe,MAAM,EAClB,KAAK,CAAC,WAAW;AAGhB,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,MAAM;AAAA,IACxD,CAAC,EACA,MAAM,MAAM;AACX,UAAI,CAAC,aAAa,MAAM,YAAY,GAAI,SAAQ,IAAI;AAAA,IACtD,CAAC;AACH,WAAO,MAAM;AACX,kBAAY;AAAA,IACd;AAAA,EACF,GAAG,CAAC,MAAM,CAAC;AAKX,QAAM,WAAW;AAAA,IACf,MAAO,OAAO,YAAY,MAAM,OAAO,IAAI;AAAA;AAAA,IAE3C,CAAC,MAAM,QAAQ,YAAY,QAAQ,eAAe;AAAA,EACpD;AAEA,SAAO,OAAO,WAAW;AAC3B;","names":[]}

package/dist/safeContent/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/safeContent/index.ts"],"sourcesContent":["// Safe content rendering — non-executable MDX (TRUST_MODES_SPEC §5.1, AGENT_AUTHORING\n// §10). The host/SDK-owned renderer an INTERPRETER app uses to render untrusted\n// Markdown/MDX-syntax content as data, with **no evaluator anywhere in the pipeline**.\n// This is the mandatory terminal for the MDX-from-mount gate (§10 delta 1) — a shared\n// (multi-writer / M3) board or wiki entry MUST render through here, never compiled MDX.\n//\n// It is a **T2 tool, not a platform gate**: it stops content executing as code; it does\n// not certify anything to the host, and CO-4 data-fencing is still required for anything\n// that *reads* the content (the agent case).\n\nexport { SafeContent } from './SafeContent';\nexport type { SafeContentProps } from './SafeContent';\nexport { renderMdast } from './renderMdast';\nexport type {\n  RenderMdastOptions,\n  SafeContentComponents,\n} from './renderMdast';\nexport { parseSafeMdast } from './parseSafeMdast';\nexport type { SafeMdastNode, SafeMdxAttribute } from './parseSafeMdast';\nexport { sanitizeUrl } from './sanitizeUrl';\nexport { splitWikiLinks, parseWikiInner } from './wikilink';\nexport type { WikiLinkToken, WikiPart } from './wikilink';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUA,yBAA4B;AAE5B,yBAA4B;AAK5B,4BAA+B;AAE/B,yBAA4B;AAC5B,sBAA+C;","names":[]}
+{"version":3,"sources":["../../src/safeContent/index.ts"],"sourcesContent":["// Safe content rendering — non-executable MDX (TRUST_MODES_SPEC §5.1, AGENT_AUTHORING\n// §10). The host/SDK-owned renderer an INTERPRETER app uses to render untrusted\n// Markdown/MDX-syntax content as data, with **no evaluator anywhere in the pipeline**.\n// This is the mandatory terminal for the MDX-from-mount gate (§10 delta 1) — a shared\n// (multi-writer / M3) board or wiki entry MUST render through here, never compiled MDX.\n//\n// It is a **T2 tool, not a platform gate**: it stops content executing as code; it does\n// not certify anything to the host, and CO-4 data-fencing is still required for anything\n// that *reads* the content (the agent case).\n\nexport { SafeContent } from './SafeContent';\nexport type { SafeContentProps } from './SafeContent';\nexport { renderMdast } from './renderMdast';\nexport type {\n  RenderMdastOptions,\n  SafeContentComponents,\n} from './renderMdast';\nexport { parseSafeMdast } from './parseSafeMdast';\nexport type { SafeMdastNode, SafeMdxAttribute, ParseSafeMdastOptions } from './parseSafeMdast';\nexport { sanitizeUrl } from './sanitizeUrl';\nexport { splitWikiLinks, parseWikiInner } from './wikilink';\nexport type { WikiLinkToken, WikiPart } from './wikilink';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUA,yBAA4B;AAE5B,yBAA4B;AAK5B,4BAA+B;AAE/B,yBAA4B;AAC5B,sBAA+C;","names":[]}

package/dist/safeContent/index.d.cts

@@ -1,6 +1,6 @@
 export { SafeContent, SafeContentProps } from './SafeContent.cjs';
 export { RenderMdastOptions, SafeContentComponents, renderMdast } from './renderMdast.cjs';
-export { SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './parseSafeMdast.cjs';
+export { ParseSafeMdastOptions, SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './parseSafeMdast.cjs';
 export { sanitizeUrl } from './sanitizeUrl.cjs';
 export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from './wikilink.cjs';
 import 'react';

package/dist/safeContent/index.d.ts

@@ -1,6 +1,6 @@
 export { SafeContent, SafeContentProps } from './SafeContent.js';
 export { RenderMdastOptions, SafeContentComponents, renderMdast } from './renderMdast.js';
-export { SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './parseSafeMdast.js';
+export { ParseSafeMdastOptions, SafeMdastNode, SafeMdxAttribute, parseSafeMdast } from './parseSafeMdast.js';
 export { sanitizeUrl } from './sanitizeUrl.js';
 export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from './wikilink.js';
 import 'react';

package/dist/safeContent/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/safeContent/index.ts"],"sourcesContent":["// Safe content rendering — non-executable MDX (TRUST_MODES_SPEC §5.1, AGENT_AUTHORING\n// §10). The host/SDK-owned renderer an INTERPRETER app uses to render untrusted\n// Markdown/MDX-syntax content as data, with **no evaluator anywhere in the pipeline**.\n// This is the mandatory terminal for the MDX-from-mount gate (§10 delta 1) — a shared\n// (multi-writer / M3) board or wiki entry MUST render through here, never compiled MDX.\n//\n// It is a **T2 tool, not a platform gate**: it stops content executing as code; it does\n// not certify anything to the host, and CO-4 data-fencing is still required for anything\n// that *reads* the content (the agent case).\n\nexport { SafeContent } from './SafeContent';\nexport type { SafeContentProps } from './SafeContent';\nexport { renderMdast } from './renderMdast';\nexport type {\n  RenderMdastOptions,\n  SafeContentComponents,\n} from './renderMdast';\nexport { parseSafeMdast } from './parseSafeMdast';\nexport type { SafeMdastNode, SafeMdxAttribute } from './parseSafeMdast';\nexport { sanitizeUrl } from './sanitizeUrl';\nexport { splitWikiLinks, parseWikiInner } from './wikilink';\nexport type { WikiLinkToken, WikiPart } from './wikilink';\n"],"mappings":"AAUA,SAAS,mBAAmB;AAE5B,SAAS,mBAAmB;AAK5B,SAAS,sBAAsB;AAE/B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB,sBAAsB;","names":[]}
+{"version":3,"sources":["../../src/safeContent/index.ts"],"sourcesContent":["// Safe content rendering — non-executable MDX (TRUST_MODES_SPEC §5.1, AGENT_AUTHORING\n// §10). The host/SDK-owned renderer an INTERPRETER app uses to render untrusted\n// Markdown/MDX-syntax content as data, with **no evaluator anywhere in the pipeline**.\n// This is the mandatory terminal for the MDX-from-mount gate (§10 delta 1) — a shared\n// (multi-writer / M3) board or wiki entry MUST render through here, never compiled MDX.\n//\n// It is a **T2 tool, not a platform gate**: it stops content executing as code; it does\n// not certify anything to the host, and CO-4 data-fencing is still required for anything\n// that *reads* the content (the agent case).\n\nexport { SafeContent } from './SafeContent';\nexport type { SafeContentProps } from './SafeContent';\nexport { renderMdast } from './renderMdast';\nexport type {\n  RenderMdastOptions,\n  SafeContentComponents,\n} from './renderMdast';\nexport { parseSafeMdast } from './parseSafeMdast';\nexport type { SafeMdastNode, SafeMdxAttribute, ParseSafeMdastOptions } from './parseSafeMdast';\nexport { sanitizeUrl } from './sanitizeUrl';\nexport { splitWikiLinks, parseWikiInner } from './wikilink';\nexport type { WikiLinkToken, WikiPart } from './wikilink';\n"],"mappings":"AAUA,SAAS,mBAAmB;AAE5B,SAAS,mBAAmB;AAK5B,SAAS,sBAAsB;AAE/B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB,sBAAsB;","names":[]}