@immediately-run/sdk 0.49.0 → 0.51.0

package/dist/safeContent/sanitizeUrl.d.ts

@@ -1,9 +1 @@
-/**
- * Return the URL if its scheme is allowed (or it is relative/anchor), else
- * `undefined`. Control chars are stripped first so an obfuscated scheme cannot slip
- * past. A protocol-relative `//host` URL is treated as relative-with-authority and
- * allowed (it inherits the page's https scheme).
- */
-declare function sanitizeUrl(url: unknown): string | undefined;
-
-export { sanitizeUrl };
+export { sanitizeUrl } from '@immediately-run/safe-content';

package/dist/safeContent/sanitizeUrl.js

@@ -1,15 +1,5 @@
 import "../chunk-VHAA22YE.js";
-const SCHEME = /^([a-zA-Z][a-zA-Z0-9+.-]*):/;
-const ALLOWED_SCHEMES = /* @__PURE__ */ new Set(["http", "https", "mailto"]);
-const CONTROL_CHARS = /[\u0000-\u001F\u007F]/g;
-function sanitizeUrl(url) {
-  if (typeof url !== "string") return void 0;
-  const cleaned = url.replace(CONTROL_CHARS, "").trim();
-  if (cleaned === "") return void 0;
-  const m = SCHEME.exec(cleaned);
-  if (!m) return cleaned;
-  return ALLOWED_SCHEMES.has(m[1].toLowerCase()) ? cleaned : void 0;
-}
+import { sanitizeUrl } from "@immediately-run/safe-content";
 export {
   sanitizeUrl
 };

package/dist/safeContent/sanitizeUrl.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/safeContent/sanitizeUrl.ts"],"sourcesContent":["// URL-scheme sanitizer for the safe content renderer (TRUST_MODES_SPEC §5.1,\n// AGENT_AUTHORING §10). A §5.1 residual requirement: link/image URLs in untrusted\n// content are allowlisted to `http`/`https`/`mailto` and relative URLs; every other\n// scheme — `javascript:`, `data:`, `vbscript:`, `file:`, … — is rejected. We do NOT\n// rely on React to neutralize `javascript:` (it does not, on an `<a href>`), so this\n// is the single chokepoint every rendered `href`/`src` passes through.\n\n// A leading `scheme:` per RFC 3986 (`ALPHA *( ALPHA / DIGIT / \"+\" / \"-\" / \".\" )`).\n// Anything before the first `:` that matches this is an absolute-URI scheme; if the\n// URL has no such prefix it is relative (path/query/fragment) and allowed.\nconst SCHEME = /^([a-zA-Z][a-zA-Z0-9+.-]*):/;\nconst ALLOWED_SCHEMES = new Set(['http', 'https', 'mailto']);\n\n// ASCII control chars (0x00–0x1F, 0x7F) that browsers ignore INSIDE a scheme — the\n// `java\\tscript:` / `java\\nscript:` obfuscation — stripped anywhere before testing.\n// eslint-disable-next-line no-control-regex\nconst CONTROL_CHARS = /[\\u0000-\\u001F\\u007F]/g;\n\n/**\n * Return the URL if its scheme is allowed (or it is relative/anchor), else\n * `undefined`. Control chars are stripped first so an obfuscated scheme cannot slip\n * past. A protocol-relative `//host` URL is treated as relative-with-authority and\n * allowed (it inherits the page's https scheme).\n */\nexport function sanitizeUrl(url: unknown): string | undefined {\n  if (typeof url !== 'string') return undefined;\n  const cleaned = url.replace(CONTROL_CHARS, '').trim();\n  if (cleaned === '') return undefined;\n  const m = SCHEME.exec(cleaned);\n  if (!m) return cleaned; // no scheme → relative / anchor / query — allowed\n  return ALLOWED_SCHEMES.has(m[1].toLowerCase()) ? cleaned : undefined;\n}\n"],"mappings":";AAUA,MAAM,SAAS;AACf,MAAM,kBAAkB,oBAAI,IAAI,CAAC,QAAQ,SAAS,QAAQ,CAAC;AAK3D,MAAM,gBAAgB;AAQf,SAAS,YAAY,KAAkC;AAC5D,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,QAAM,UAAU,IAAI,QAAQ,eAAe,EAAE,EAAE,KAAK;AACpD,MAAI,YAAY,GAAI,QAAO;AAC3B,QAAM,IAAI,OAAO,KAAK,OAAO;AAC7B,MAAI,CAAC,EAAG,QAAO;AACf,SAAO,gBAAgB,IAAI,EAAE,CAAC,EAAE,YAAY,CAAC,IAAI,UAAU;AAC7D;","names":[]}
+{"version":3,"sources":["../../src/safeContent/sanitizeUrl.ts"],"sourcesContent":["// R3-279 (phase 3): re-export shim — the implementation lives in\n// `@immediately-run/safe-content`; this subpath keeps working byte-compatibly.\nexport { sanitizeUrl } from '@immediately-run/safe-content';\n"],"mappings":";AAEA,SAAS,mBAAmB;","names":[]}

package/dist/safeContent/wikilink.cjs

@@ -18,43 +18,11 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var wikilink_exports = {};
 __export(wikilink_exports, {
-  parseWikiInner: () => parseWikiInner,
-  splitWikiLinks: () => splitWikiLinks
+  parseWikiInner: () => import_safe_content.parseWikiInner,
+  splitWikiLinks: () => import_safe_content.splitWikiLinks
 });
 module.exports = __toCommonJS(wikilink_exports);
-const WIKILINK = /\[\[([^[\]]+)\]\]/g;
-function parseWikiInner(inner) {
-  const pipe = inner.indexOf("|");
-  let target;
-  let label;
-  if (pipe === -1) {
-    target = inner.trim();
-  } else {
-    label = inner.slice(0, pipe).trim();
-    target = inner.slice(pipe + 1).trim();
-  }
-  if (target === "") return null;
-  return label ? { target, label } : { target };
-}
-function splitWikiLinks(value) {
-  if (value.indexOf("[[") === -1) return null;
-  const out = [];
-  let lastIndex = 0;
-  let produced = false;
-  WIKILINK.lastIndex = 0;
-  let match;
-  while ((match = WIKILINK.exec(value)) !== null) {
-    const token = parseWikiInner(match[1]);
-    if (!token) continue;
-    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });
-    out.push({ wiki: token });
-    lastIndex = match.index + match[0].length;
-    produced = true;
-  }
-  if (!produced) return null;
-  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });
-  return out;
-}
+var import_safe_content = require("@immediately-run/safe-content");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   parseWikiInner,

package/dist/safeContent/wikilink.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/safeContent/wikilink.ts"],"sourcesContent":["// Wikilink parsing for the safe content renderer (TRUST_MODES_SPEC §5.1). A §5.1\n// residual: wikilinks resolve **only within the granted mount, never a fetch**. The\n// kernel's executable pipeline compiles `[[target]]`/`[[label|target]]` to a\n// `<WikiLink>` component (transpiler `remarkWikiLinks`, MARKDOWN_SYNTAX_SPEC §13); the\n// SAFE renderer parses raw source, so it splits `[[…]]` out of text itself with the\n// same byte-local rule and hands the raw target/label to an injected, **in-mount**\n// resolver. The renderer never fetches; resolution is the consumer's mount-scoped\n// callback (or, absent one, the link renders as inert text).\n\n// Inner content up to the closing `]]`, forbidding `[`/`]` so nested brackets can't\n// be swallowed. Global — a text run may hold several.\nconst WIKILINK = /\\[\\[([^[\\]]+)\\]\\]/g;\n\nexport interface WikiLinkToken {\n  /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */\n  target: string;\n  /** The explicit label, or undefined (the component derives one). */\n  label?: string;\n}\n\nexport type WikiPart = { text: string } | { wiki: WikiLinkToken };\n\n/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target\n *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */\nexport function parseWikiInner(inner: string): WikiLinkToken | null {\n  const pipe = inner.indexOf('|');\n  let target: string;\n  let label: string | undefined;\n  if (pipe === -1) {\n    target = inner.trim();\n  } else {\n    label = inner.slice(0, pipe).trim();\n    target = inner.slice(pipe + 1).trim();\n  }\n  if (target === '') return null;\n  return label ? { target, label } : { target };\n}\n\n/**\n * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`\n * when there is no usable wiki-link (so the caller keeps the text node untouched).\n */\nexport function splitWikiLinks(value: string): WikiPart[] | null {\n  if (value.indexOf('[[') === -1) return null;\n  const out: WikiPart[] = [];\n  let lastIndex = 0;\n  let produced = false;\n  WIKILINK.lastIndex = 0;\n  let match: RegExpExecArray | null;\n  while ((match = WIKILINK.exec(value)) !== null) {\n    const token = parseWikiInner(match[1]);\n    if (!token) continue; // empty target → keep the literal `[[…]]`\n    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });\n    out.push({ wiki: token });\n    lastIndex = match.index + match[0].length;\n    produced = true;\n  }\n  if (!produced) return null;\n  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });\n  return out;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWA,MAAM,WAAW;AAaV,SAAS,eAAe,OAAqC;AAClE,QAAM,OAAO,MAAM,QAAQ,GAAG;AAC9B,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS,IAAI;AACf,aAAS,MAAM,KAAK;AAAA,EACtB,OAAO;AACL,YAAQ,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK;AAClC,aAAS,MAAM,MAAM,OAAO,CAAC,EAAE,KAAK;AAAA,EACtC;AACA,MAAI,WAAW,GAAI,QAAO;AAC1B,SAAO,QAAQ,EAAE,QAAQ,MAAM,IAAI,EAAE,OAAO;AAC9C;AAMO,SAAS,eAAe,OAAkC;AAC/D,MAAI,MAAM,QAAQ,IAAI,MAAM,GAAI,QAAO;AACvC,QAAM,MAAkB,CAAC;AACzB,MAAI,YAAY;AAChB,MAAI,WAAW;AACf,WAAS,YAAY;AACrB,MAAI;AACJ,UAAQ,QAAQ,SAAS,KAAK,KAAK,OAAO,MAAM;AAC9C,UAAM,QAAQ,eAAe,MAAM,CAAC,CAAC;AACrC,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,UAAW,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,WAAW,MAAM,KAAK,EAAE,CAAC;AACnF,QAAI,KAAK,EAAE,MAAM,MAAM,CAAC;AACxB,gBAAY,MAAM,QAAQ,MAAM,CAAC,EAAE;AACnC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,YAAY,MAAM,OAAQ,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,SAAS,EAAE,CAAC;AACvE,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/safeContent/wikilink.ts"],"sourcesContent":["// R3-279 (phase 3): re-export shim — the implementation lives in\n// `@immediately-run/safe-content`; this subpath keeps working byte-compatibly.\nexport { splitWikiLinks, parseWikiInner } from '@immediately-run/safe-content';\nexport type { WikiLinkToken, WikiPart } from '@immediately-run/safe-content';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAEA,0BAA+C;","names":[]}

package/dist/safeContent/wikilink.d.cts

@@ -1,21 +1 @@
-interface WikiLinkToken {
-    /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */
-    target: string;
-    /** The explicit label, or undefined (the component derives one). */
-    label?: string;
-}
-type WikiPart = {
-    text: string;
-} | {
-    wiki: WikiLinkToken;
-};
-/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target
- *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */
-declare function parseWikiInner(inner: string): WikiLinkToken | null;
-/**
- * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`
- * when there is no usable wiki-link (so the caller keeps the text node untouched).
- */
-declare function splitWikiLinks(value: string): WikiPart[] | null;
-
-export { type WikiLinkToken, type WikiPart, parseWikiInner, splitWikiLinks };
+export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from '@immediately-run/safe-content';

package/dist/safeContent/wikilink.d.ts

@@ -1,21 +1 @@
-interface WikiLinkToken {
-    /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */
-    target: string;
-    /** The explicit label, or undefined (the component derives one). */
-    label?: string;
-}
-type WikiPart = {
-    text: string;
-} | {
-    wiki: WikiLinkToken;
-};
-/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target
- *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */
-declare function parseWikiInner(inner: string): WikiLinkToken | null;
-/**
- * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`
- * when there is no usable wiki-link (so the caller keeps the text node untouched).
- */
-declare function splitWikiLinks(value: string): WikiPart[] | null;
-
-export { type WikiLinkToken, type WikiPart, parseWikiInner, splitWikiLinks };
+export { WikiLinkToken, WikiPart, parseWikiInner, splitWikiLinks } from '@immediately-run/safe-content';

package/dist/safeContent/wikilink.js

@@ -1,37 +1,5 @@
 import "../chunk-VHAA22YE.js";
-const WIKILINK = /\[\[([^[\]]+)\]\]/g;
-function parseWikiInner(inner) {
-  const pipe = inner.indexOf("|");
-  let target;
-  let label;
-  if (pipe === -1) {
-    target = inner.trim();
-  } else {
-    label = inner.slice(0, pipe).trim();
-    target = inner.slice(pipe + 1).trim();
-  }
-  if (target === "") return null;
-  return label ? { target, label } : { target };
-}
-function splitWikiLinks(value) {
-  if (value.indexOf("[[") === -1) return null;
-  const out = [];
-  let lastIndex = 0;
-  let produced = false;
-  WIKILINK.lastIndex = 0;
-  let match;
-  while ((match = WIKILINK.exec(value)) !== null) {
-    const token = parseWikiInner(match[1]);
-    if (!token) continue;
-    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });
-    out.push({ wiki: token });
-    lastIndex = match.index + match[0].length;
-    produced = true;
-  }
-  if (!produced) return null;
-  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });
-  return out;
-}
+import { splitWikiLinks, parseWikiInner } from "@immediately-run/safe-content";
 export {
   parseWikiInner,
   splitWikiLinks

package/dist/safeContent/wikilink.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/safeContent/wikilink.ts"],"sourcesContent":["// Wikilink parsing for the safe content renderer (TRUST_MODES_SPEC §5.1). A §5.1\n// residual: wikilinks resolve **only within the granted mount, never a fetch**. The\n// kernel's executable pipeline compiles `[[target]]`/`[[label|target]]` to a\n// `<WikiLink>` component (transpiler `remarkWikiLinks`, MARKDOWN_SYNTAX_SPEC §13); the\n// SAFE renderer parses raw source, so it splits `[[…]]` out of text itself with the\n// same byte-local rule and hands the raw target/label to an injected, **in-mount**\n// resolver. The renderer never fetches; resolution is the consumer's mount-scoped\n// callback (or, absent one, the link renders as inert text).\n\n// Inner content up to the closing `]]`, forbidding `[`/`]` so nested brackets can't\n// be swallowed. Global — a text run may hold several.\nconst WIKILINK = /\\[\\[([^[\\]]+)\\]\\]/g;\n\nexport interface WikiLinkToken {\n  /** The raw target path, verbatim (relative or absolute; resolved in-mount only). */\n  target: string;\n  /** The explicit label, or undefined (the component derives one). */\n  label?: string;\n}\n\nexport type WikiPart = { text: string } | { wiki: WikiLinkToken };\n\n/** Parse the `[[label|target]]` / `[[target]]` inner text (label first, then target\n *  — the §13.1 order), or `null` for an empty target (leave the literal `[[…]]`). */\nexport function parseWikiInner(inner: string): WikiLinkToken | null {\n  const pipe = inner.indexOf('|');\n  let target: string;\n  let label: string | undefined;\n  if (pipe === -1) {\n    target = inner.trim();\n  } else {\n    label = inner.slice(0, pipe).trim();\n    target = inner.slice(pipe + 1).trim();\n  }\n  if (target === '') return null;\n  return label ? { target, label } : { target };\n}\n\n/**\n * Split a text string on its `[[…]]` runs into ordered text / wiki parts, or `null`\n * when there is no usable wiki-link (so the caller keeps the text node untouched).\n */\nexport function splitWikiLinks(value: string): WikiPart[] | null {\n  if (value.indexOf('[[') === -1) return null;\n  const out: WikiPart[] = [];\n  let lastIndex = 0;\n  let produced = false;\n  WIKILINK.lastIndex = 0;\n  let match: RegExpExecArray | null;\n  while ((match = WIKILINK.exec(value)) !== null) {\n    const token = parseWikiInner(match[1]);\n    if (!token) continue; // empty target → keep the literal `[[…]]`\n    if (match.index > lastIndex) out.push({ text: value.slice(lastIndex, match.index) });\n    out.push({ wiki: token });\n    lastIndex = match.index + match[0].length;\n    produced = true;\n  }\n  if (!produced) return null;\n  if (lastIndex < value.length) out.push({ text: value.slice(lastIndex) });\n  return out;\n}\n"],"mappings":";AAWA,MAAM,WAAW;AAaV,SAAS,eAAe,OAAqC;AAClE,QAAM,OAAO,MAAM,QAAQ,GAAG;AAC9B,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS,IAAI;AACf,aAAS,MAAM,KAAK;AAAA,EACtB,OAAO;AACL,YAAQ,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK;AAClC,aAAS,MAAM,MAAM,OAAO,CAAC,EAAE,KAAK;AAAA,EACtC;AACA,MAAI,WAAW,GAAI,QAAO;AAC1B,SAAO,QAAQ,EAAE,QAAQ,MAAM,IAAI,EAAE,OAAO;AAC9C;AAMO,SAAS,eAAe,OAAkC;AAC/D,MAAI,MAAM,QAAQ,IAAI,MAAM,GAAI,QAAO;AACvC,QAAM,MAAkB,CAAC;AACzB,MAAI,YAAY;AAChB,MAAI,WAAW;AACf,WAAS,YAAY;AACrB,MAAI;AACJ,UAAQ,QAAQ,SAAS,KAAK,KAAK,OAAO,MAAM;AAC9C,UAAM,QAAQ,eAAe,MAAM,CAAC,CAAC;AACrC,QAAI,CAAC,MAAO;AACZ,QAAI,MAAM,QAAQ,UAAW,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,WAAW,MAAM,KAAK,EAAE,CAAC;AACnF,QAAI,KAAK,EAAE,MAAM,MAAM,CAAC;AACxB,gBAAY,MAAM,QAAQ,MAAM,CAAC,EAAE;AACnC,eAAW;AAAA,EACb;AACA,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,YAAY,MAAM,OAAQ,KAAI,KAAK,EAAE,MAAM,MAAM,MAAM,SAAS,EAAE,CAAC;AACvE,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/safeContent/wikilink.ts"],"sourcesContent":["// R3-279 (phase 3): re-export shim — the implementation lives in\n// `@immediately-run/safe-content`; this subpath keeps working byte-compatibly.\nexport { splitWikiLinks, parseWikiInner } from '@immediately-run/safe-content';\nexport type { WikiLinkToken, WikiPart } from '@immediately-run/safe-content';\n"],"mappings":";AAEA,SAAS,gBAAgB,sBAAsB;","names":[]}

package/dist/version.cjs

@@ -21,7 +21,7 @@ __export(version_exports, {
   SDK_VERSION: () => SDK_VERSION
 });
 module.exports = __toCommonJS(version_exports);
-const SDK_VERSION = "0.49.0";
+const SDK_VERSION = "0.51.0";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   SDK_VERSION

package/dist/version.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.49.0';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,MAAM,cAAc;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.51.0';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,MAAM,cAAc;","names":[]}

package/dist/version.d.cts

@@ -1,4 +1,4 @@
 /** This SDK's package version, baked from package.json at build (SP2-6). */
-declare const SDK_VERSION = "0.49.0";
+declare const SDK_VERSION = "0.51.0";
 
 export { SDK_VERSION };

package/dist/version.d.ts

@@ -1,4 +1,4 @@
 /** This SDK's package version, baked from package.json at build (SP2-6). */
-declare const SDK_VERSION = "0.49.0";
+declare const SDK_VERSION = "0.51.0";
 
 export { SDK_VERSION };

package/dist/version.js

@@ -1,5 +1,5 @@
 import "./chunk-VHAA22YE.js";
-const SDK_VERSION = "0.49.0";
+const SDK_VERSION = "0.51.0";
 export {
   SDK_VERSION
 };

package/dist/version.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.49.0';\n"],"mappings":";AAIO,MAAM,cAAc;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.51.0';\n"],"mappings":";AAIO,MAAM,cAAc;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@immediately-run/sdk",
-  "version": "0.49.0",
+  "version": "0.51.0",
   "description": "Runtime SDK for code executing inside an immediately.run sandbox.",
   "license": "MIT",
   "repository": "github:immediately-run/immediately-run-sdk",
@@ -36,7 +36,7 @@
     "protocol:check": "node scripts/check-protocol-snapshot.mjs",
     "verify:codegen-parity": "node scripts/codegen-prototype/verify-drift.mjs --self-test && node scripts/codegen-prototype/verify-drift.mjs && node scripts/codegen-prototype/verify.streams.mjs --self-test && node scripts/codegen-prototype/verify.streams.mjs",
     "api:update": "node scripts/check-api-stability.mjs --update",
-    "verify": "npm run format:check && npm run check:circular && npm run build && npm test && npm run test:safe-content && npm run test:metadata-e2e && npm run api:check && npm run compat:selftest && npm run compat:previous && npm run protocol:check && npm run protocol:selftest && npm run check:ambient:selftest && npm run check:ambient && npm run check:selfhost:selftest && npm run check:selfhost && npm run verify:codegen-parity",
+    "verify": "npm run format:check && npm run check:circular && npm run check:bundler:selftest && npm run check:bundler && npm run build && npm test && npm run test:safe-content && npm run test:metadata-e2e && npm run api:check && npm run compat:selftest && npm run compat:previous && npm run protocol:check && npm run protocol:selftest && npm run check:ambient:selftest && npm run check:ambient && npm run check:selfhost:selftest && npm run check:selfhost && npm run verify:codegen-parity",
     "docs": "typedoc --json docs/api.json && node scripts/gen-llms.mjs",
     "prepublishOnly": "npm run check:circular && npm run build && npm run api:check",
     "test:safe-content": "node scripts/build-safecontent-e2e.mjs && node --test test/safeContent.e2e.mjs",
@@ -47,6 +47,8 @@
     "check:selfhost": "node scripts/build-selfhost.mjs .selfhost-check && node scripts/check-selfhost-resolvable.mjs --dir .selfhost-check",
     "check:selfhost:selftest": "node scripts/check-selfhost-resolvable.mjs --self-test",
     "prepare": "git config core.hooksPath .githooks || true",
+    "check:bundler": "node scripts/check-bundler-reads.mjs",
+    "check:bundler:selftest": "node scripts/check-bundler-reads.mjs --self-test",
     "check:ambient": "node scripts/check-ambient-types.mjs",
     "check:ambient:selftest": "node scripts/check-ambient-types.mjs --self-test"
   },
@@ -57,10 +59,11 @@
   "dependencies": {
     "@immediately-run/platform-constants": "0.2.0",
     "@immediately-run/sandbox-protocol": "0.4.0",
-    "react-error-boundary": "^6.0.0"
+    "react-error-boundary": "^6.0.0",
+    "@immediately-run/safe-content": "0.1.0",
+    "@immediately-run/mdx-plugins": "0.5.0"
   },
   "devDependencies": {
-    "@immediately-run/mdx-plugins": "^0.1.0",
     "@immediately-run/prettier-config": "0.1.0",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/react": "^16.3.2",
@@ -83,7 +86,8 @@
     "ts-node": "^10.9.2",
     "tsup": "^8.0.0",
     "typedoc": "^0.27.0",
-    "typescript": "^5.6.0"
+    "typescript": "^5.6.0",
+    "unified": "^11.0.5"
   },
   "prettier": "@immediately-run/prettier-config"
 }