@immediately-run/sdk 0.66.0 → 0.68.0

package/dist/safeContent/mdastDeps.js

@@ -10740,6 +10740,427 @@ var remarkHeadingAnchors = (options = {}) => (tree) => {
   }
 };
 var remarkHeadingAnchors_default = remarkHeadingAnchors;
+var LAYOUT_LIMITS = {
+  recordSets: 64,
+  treeEntries: 256,
+  uniqueFanOut: 32,
+  selectGlobLength: 256,
+  wellKnownNames: 16
+};
+var wikiLayout = {
+  version: 1,
+  recordSets: {
+    "roadmap-items": {
+      dir: "/roadmap",
+      select: "R3-*.mdx",
+      record: "mdx-frontmatter",
+      schema: "/roadmap/item.schema.json",
+      id: { from: "filename" },
+      unique: ["roadmap-archive"],
+      wellKnown: {
+        title: "frontmatter.title",
+        status: {
+          from: "frontmatter.status",
+          values: ["available", "in-progress", "in-review", "deferred", "deprioritized", "superseded"],
+          terminal: { value: "done", movesTo: "roadmap-archive" }
+        },
+        order: { from: "frontmatter.order", meaning: "execution" },
+        body: "content"
+      },
+      writable: []
+    },
+    "roadmap-archive": {
+      dir: "/roadmap/archive",
+      select: "R3-*.mdx",
+      record: "mdx-frontmatter",
+      schema: "/roadmap/item.schema.json",
+      id: { from: "filename" },
+      frozen: true
+    },
+    figures: {
+      dir: "/specs/figures",
+      select: "*.png",
+      mediaType: "image/png",
+      id: { from: "filename" }
+    }
+  },
+  tree: {
+    "/roadmap": { purpose: "the live engineering roadmap, one file per work item" },
+    "/roadmap/archive": { purpose: "done items, moved here by the owner's tooling" },
+    "/roadmap/board": { purpose: "the kanban view of /roadmap", bundle: true },
+    "/specs": { purpose: "one spec per area" },
+    "/context": { purpose: "the resident context set and the routed documents" }
+  }
+};
+var limits = LAYOUT_LIMITS;
+var limitCases = () => {
+  const recordSets = {};
+  for (let i = 0; i < limits.recordSets + 1; i++) recordSets[`set${i}`] = { dir: `/d${i}`, select: "*", record: "opaque" };
+  const tree = {};
+  for (let i = 0; i < limits.treeEntries + 1; i++) tree[`/t${i}`] = { purpose: "x" };
+  const unique = Array.from({ length: limits.uniqueFanOut + 1 }, (_, i) => `s${i}`);
+  const wellKnown = {};
+  for (let i = 0; i < limits.wellKnownNames + 1; i++) wellKnown[`k${i}`] = "frontmatter.title";
+  return [
+    {
+      name: "limit: record sets",
+      layout: { version: 1, recordSets },
+      accept: false,
+      diagnostics: ["limit-record-sets"],
+      why: "\xA74a.5 \u2014 more record sets than the bound refuses the whole block"
+    },
+    {
+      name: "limit: tree entries",
+      layout: { version: 1, recordSets: {}, tree },
+      accept: false,
+      diagnostics: ["limit-tree-entries"],
+      why: "\xA74a.5 \u2014 more tree entries than the bound refuses the whole block"
+    },
+    {
+      name: "limit: select glob length",
+      layout: {
+        version: 1,
+        recordSets: { a: { dir: "/a", select: "x".repeat(limits.selectGlobLength + 1), record: "opaque" } }
+      },
+      accept: false,
+      diagnostics: ["limit-select-glob"],
+      why: "\xA74a.5 \u2014 a select glob longer than the bound refuses the whole block"
+    },
+    {
+      name: "limit: unique fan-out",
+      layout: { version: 1, recordSets: { a: { dir: "/a", select: "*", record: "opaque", unique } } },
+      accept: false,
+      diagnostics: ["limit-unique"],
+      why: "\xA74a.5 \u2014 more unique references than the bound refuses the whole block"
+    },
+    {
+      name: "limit: wellKnown names",
+      layout: { version: 1, recordSets: { a: { dir: "/a", select: "*.mdx", record: "mdx-frontmatter", wellKnown } } },
+      accept: false,
+      diagnostics: ["limit-well-known"],
+      why: "\xA74a.5 \u2014 more wellKnown fields than the bound refuses the whole block"
+    }
+  ];
+};
+var BUNDLE_LAYOUT_FIXTURE = [
+  {
+    name: "wiki layout (\xA74a.1)",
+    layout: wikiLayout,
+    accept: true,
+    diagnostics: [],
+    why: "the real producer \u2014 the wiki\u2019s own declaration parses with no diagnostics"
+  },
+  {
+    name: "mediaType list accepted; schema+structured record accepted",
+    layout: {
+      version: 1,
+      recordSets: {
+        figures: { dir: "/figures", select: "*.{png,jpg}", mediaType: ["image/png", "image/jpeg"] },
+        manifests: { dir: "/m", select: "*.json", record: "json-file", mediaType: "application/json", schema: "/m/x.schema.json" }
+      }
+    },
+    accept: true,
+    diagnostics: [],
+    why: "a list of media types, and mediaType beside a structured record (permitted and redundant), both accept"
+  },
+  {
+    name: "layoutFrom adopts an owner-pinned default",
+    layout: { version: 1, layoutFrom: { app: "github:immediately-run/grove", commit: "0123abc" } },
+    accept: true,
+    diagnostics: [],
+    why: "the \xA74a.1 alternative \u2014 a provider default instead of an own recordSets/tree block"
+  },
+  {
+    name: 'unknown version degrades to "no layout"',
+    layout: { version: 2, recordSets: {} },
+    accept: false,
+    diagnostics: ["unsupported-version"],
+    why: "\xA74a.5 \u2014 a grammar the parser does not know is refused whole, the bundle still opens"
+  },
+  {
+    name: "not an object",
+    layout: "layout",
+    accept: false,
+    diagnostics: ["layout-not-object"],
+    why: "a non-object layout is malformed"
+  },
+  {
+    name: "neither recordSets nor layoutFrom",
+    layout: { version: 1 },
+    accept: false,
+    diagnostics: ["missing-record-sets"],
+    why: "a layout that declares nothing is malformed"
+  },
+  {
+    name: "recordSets not an object",
+    layout: { version: 1, recordSets: "roadmap" },
+    accept: false,
+    diagnostics: ["record-sets-not-object"],
+    why: "recordSets must be an object"
+  },
+  {
+    name: "layoutFrom and recordSets are mutually exclusive",
+    layout: { version: 1, recordSets: { a: { dir: "/a", select: "*", record: "opaque" } }, layoutFrom: { app: "github:immediately-run/grove", commit: "0123abc" } },
+    accept: true,
+    diagnostics: ["layout-from-conflict"],
+    why: '\xA74a.1 \u2014 layoutFrom is "instead of" an own block; a recordSets wins and layoutFrom is dropped'
+  },
+  {
+    name: "layoutFrom and tree are mutually exclusive",
+    layout: { version: 1, tree: { "/roadmap": { purpose: "x" } }, layoutFrom: { app: "github:immediately-run/grove", commit: "0123abc" } },
+    accept: true,
+    diagnostics: ["layout-from-conflict"],
+    why: '\xA74a.1 \u2014 layoutFrom is "instead of" an own recordSets/tree block; a tree alone triggers the same conflict'
+  },
+  {
+    name: "a trailing slash on a dir is a clamp, not a refusal",
+    layout: { version: 1, recordSets: { roadmap: { dir: "/roadmap/", select: "R3-*.mdx", record: "opaque", mediaType: "text/md" } }, tree: { "/roadmap/": { purpose: "x" } } },
+    accept: true,
+    diagnostics: [],
+    why: "dir/tree tolerate one trailing slash (the spec \xA73 `at: '/items/'` spelling) and normalize it away \u2014 the one accept-and-normalize clamp in the grammar"
+  },
+  {
+    name: "layoutFrom with a revision refused",
+    layout: { version: 1, layoutFrom: { app: "github:immediately-run/grove@main", commit: "0123abc" } },
+    accept: true,
+    diagnostics: ["bad-layout-from"],
+    why: "layoutFrom.app is a revision-less identity; the revision lives in commit (\xA74a.1)"
+  },
+  {
+    name: "reserved record-set name is dropped, the rest survive",
+    layout: JSON.parse(
+      '{"version":1,"recordSets":{"__proto__":{"dir":"/x","select":"*","record":"opaque"},"ok":{"dir":"/y","select":"*","record":"opaque"}}}'
+    ),
+    accept: true,
+    diagnostics: ["reserved-key"],
+    why: "\xA74a.5 key hygiene \u2014 `__proto__` as a record-set name refuses that set, the block still parses"
+  },
+  {
+    name: "reserved wellKnown name refuses",
+    layout: JSON.parse(
+      '{"version":1,"recordSets":{"roadmap":{"dir":"/roadmap","select":"R3-*.mdx","record":"mdx-frontmatter","wellKnown":{"__proto__":"frontmatter.title"}}}}'
+    ),
+    accept: true,
+    diagnostics: ["reserved-key"],
+    why: "a `__proto__` wellKnown key is refused"
+  },
+  {
+    name: "reserved `from` segment refuses",
+    layout: JSON.parse(
+      '{"version":1,"recordSets":{"roadmap":{"dir":"/roadmap","select":"R3-*.mdx","record":"mdx-frontmatter","id":{"from":"frontmatter.__proto__"}}}}'
+    ),
+    accept: true,
+    diagnostics: ["reserved-key"],
+    why: "a `from` path whose segment is `__proto__` is refused"
+  },
+  {
+    name: "reserved record-set name `constructor` refuses",
+    layout: JSON.parse(
+      '{"version":1,"recordSets":{"constructor":{"dir":"/x","select":"*","record":"opaque","mediaType":"image/png"},"ok":{"dir":"/y","select":"*","record":"opaque","mediaType":"image/png"}}}'
+    ),
+    accept: true,
+    diagnostics: ["reserved-key"],
+    why: "\xA74a.5 \u2014 `constructor` in the record-set namespace is refused (the whole RESERVED_KEYS class, not only __proto__)"
+  },
+  {
+    name: "reserved record-set name `prototype` refuses",
+    layout: JSON.parse(
+      '{"version":1,"recordSets":{"prototype":{"dir":"/x","select":"*","record":"opaque","mediaType":"image/png"}}}'
+    ),
+    accept: true,
+    diagnostics: ["reserved-key"],
+    why: "\xA74a.5 \u2014 `prototype` in the record-set namespace is refused"
+  },
+  {
+    name: "the full closed wellKnown vocabulary accepts",
+    layout: {
+      version: 1,
+      recordSets: {
+        docs: {
+          dir: "/docs",
+          select: "*.mdx",
+          record: "mdx-frontmatter",
+          schema: "/docs/doc.schema.json",
+          wellKnown: {
+            title: "frontmatter.title",
+            body: "content",
+            status: { from: "frontmatter.status", values: ["draft", "published"] },
+            order: { from: "frontmatter.order", meaning: "display" },
+            labels: "frontmatter.tags",
+            date: "frontmatter.date",
+            summary: "frontmatter.summary"
+          }
+        }
+      }
+    },
+    accept: true,
+    diagnostics: [],
+    why: "\xA74a.1 \u2014 every one of the seven well-known names parses (labels/date/summary are input here, not just favourites)"
+  },
+  {
+    name: "schema $fs: refused",
+    layout: {
+      version: 1,
+      recordSets: { roadmap: { dir: "/roadmap", select: "R3-*.mdx", record: "mdx-frontmatter", schema: "$fs:/x.json" } }
+    },
+    accept: true,
+    diagnostics: ["bad-schema"],
+    why: "\xA74a.1 \u2014 a schema MUST be bundle-intrinsic; `$fs:` is refused here"
+  },
+  {
+    name: "schema on a mediaType-only (opaque) record set refused",
+    layout: {
+      version: 1,
+      recordSets: { figures: { dir: "/figures", select: "*.png", mediaType: "image/png", schema: "/f.schema.json" } }
+    },
+    accept: true,
+    diagnostics: ["schema-on-opaque"],
+    why: "schema on an opaque record set is a refusal diagnostic (\xA74a.1)"
+  },
+  {
+    name: "bad mediaType refused (uppercase + parameters)",
+    layout: { version: 1, recordSets: { figures: { dir: "/figures", select: "*.png", mediaType: "Image/PNG; q=1" } } },
+    accept: true,
+    diagnostics: ["bad-media-type"],
+    why: "\xA74a.1 \u2014 lowercase RFC 6838 token pair only, no parameters, no registry lookup"
+  },
+  {
+    name: "bad directory refused (traversal)",
+    layout: { version: 1, recordSets: { roadmap: { dir: "/../escape", select: "*", record: "opaque" } } },
+    accept: true,
+    diagnostics: ["bad-dir"],
+    why: "a `dir` with `..` is refused, not clamped \u2014 a layout is a description"
+  },
+  {
+    name: "bad select refused (separator)",
+    layout: { version: 1, recordSets: { roadmap: { dir: "/roadmap", select: "../*.mdx", record: "mdx-frontmatter" } } },
+    accept: true,
+    diagnostics: ["bad-select"],
+    why: "select is a non-recursive basename glob \u2014 separators and `..` are refused"
+  },
+  {
+    name: "bad record grammar refused",
+    layout: { version: 1, recordSets: { roadmap: { dir: "/roadmap", select: "R3-*.mdx", record: "yaml" } } },
+    accept: true,
+    diagnostics: ["bad-record"],
+    why: "record must be one of the closed set"
+  },
+  {
+    name: "a wellKnown name outside the closed vocabulary is refused",
+    layout: JSON.parse(
+      '{"version":1,"recordSets":{"roadmap":{"dir":"/roadmap","select":"R3-*.mdx","record":"mdx-frontmatter","wellKnown":{"banana":"frontmatter.title"}}}}'
+    ),
+    accept: true,
+    diagnostics: ["bad-well-known"],
+    why: "\xA74a.1 \u2014 wellKnown is a closed vocabulary; an unknown name is refused"
+  },
+  {
+    name: "wellKnown structure on the wrong field is refused",
+    layout: JSON.parse(
+      '{"version":1,"recordSets":{"roadmap":{"dir":"/roadmap","select":"R3-*.mdx","record":"mdx-frontmatter","wellKnown":{"title":{"from":"frontmatter.title","values":["a"]}}}}}'
+    ),
+    accept: true,
+    diagnostics: ["bad-well-known"],
+    why: "`values`/`terminal` belong to status only, `meaning` to order only"
+  },
+  {
+    name: "an opaque record set may only name filename/mtime/size in wellKnown",
+    layout: {
+      version: 1,
+      recordSets: {
+        figures: { dir: "/figures", select: "*.png", mediaType: "image/png", wellKnown: { title: "frontmatter.title" } }
+      }
+    },
+    accept: true,
+    diagnostics: ["bad-well-known"],
+    why: "\xA74a.1 \u2014 there is no record to read on an opaque set, so the source is filename/mtime/size"
+  },
+  {
+    name: "missing select refused",
+    layout: { version: 1, recordSets: { roadmap: { dir: "/roadmap", record: "mdx-frontmatter" } } },
+    accept: true,
+    diagnostics: ["missing-select"],
+    why: "\xA74a.1 \u2014 a record set is a directory plus a select glob"
+  },
+  {
+    name: "missing record grammar (record/mediaType) refused",
+    layout: { version: 1, recordSets: { roadmap: { dir: "/roadmap", select: "R3-*.mdx" } } },
+    accept: true,
+    diagnostics: ["missing-record"],
+    why: "\xA74a.1 \u2014 a record set must declare record or mediaType; neither means the block does not say what a record is"
+  },
+  {
+    name: "a schema alone names no grammar",
+    layout: { version: 1, recordSets: { roadmap: { dir: "/roadmap", select: "R3-*.mdx", schema: "/roadmap/item.schema.json" } } },
+    accept: true,
+    diagnostics: ["missing-record"],
+    why: "a schema with no record grammar is refused \u2014 the consumer could not choose mdx-frontmatter vs json-file"
+  },
+  {
+    name: "record set value not an object",
+    layout: { version: 1, recordSets: { a: 42 } },
+    accept: true,
+    diagnostics: ["bad-record-set"],
+    why: "a record set entry must be an object"
+  },
+  {
+    name: "bad recursive refused",
+    layout: { version: 1, recordSets: { a: { dir: "/a", select: "*.mdx", record: "mdx-frontmatter", recursive: "yes" } } },
+    accept: true,
+    diagnostics: ["bad-recursive"],
+    why: "recursive must be a boolean"
+  },
+  {
+    name: "bad id refused",
+    layout: { version: 1, recordSets: { a: { dir: "/a", select: "*.mdx", record: "mdx-frontmatter", id: { from: 42 } } } },
+    accept: true,
+    diagnostics: ["bad-id"],
+    why: "id.from must be a safe `from` path"
+  },
+  {
+    name: "bad unique refused",
+    layout: { version: 1, recordSets: { a: { dir: "/a", select: "*.mdx", record: "mdx-frontmatter", unique: "roadmap-archive" } } },
+    accept: true,
+    diagnostics: ["bad-unique"],
+    why: "unique must be an array of safe record-set names"
+  },
+  {
+    name: "bad wellKnown (not an object) refused",
+    layout: { version: 1, recordSets: { a: { dir: "/a", select: "*.mdx", record: "mdx-frontmatter", wellKnown: "title" } } },
+    accept: true,
+    diagnostics: ["bad-well-known"],
+    why: "wellKnown must be an object"
+  },
+  {
+    name: "bad writable refused",
+    layout: { version: 1, recordSets: { a: { dir: "/a", select: "*.mdx", record: "mdx-frontmatter", writable: "status" } } },
+    accept: true,
+    diagnostics: ["bad-writable"],
+    why: "writable must be an array of strings"
+  },
+  {
+    name: "bad frozen refused",
+    layout: { version: 1, recordSets: { a: { dir: "/a", select: "*.mdx", record: "mdx-frontmatter", frozen: "yes" } } },
+    accept: true,
+    diagnostics: ["bad-frozen"],
+    why: "frozen must be a boolean"
+  },
+  {
+    name: "tree not an object",
+    layout: { version: 1, recordSets: {}, tree: "roadmap" },
+    accept: true,
+    diagnostics: ["bad-tree"],
+    why: "tree must be an object"
+  },
+  {
+    name: "bad tree entry refused",
+    layout: { version: 1, recordSets: {}, tree: { "/roadmap": "purpose" } },
+    accept: true,
+    diagnostics: ["bad-tree-entry"],
+    why: "each tree entry must be an object"
+  },
+  ...limitCases()
+];
 var WIKILINK = /\[\[([^[\]]+)\]\]/g;
 function toWikiLink(inner) {
   const pipe = inner.indexOf("|");

package/dist/version.cjs

@@ -21,7 +21,7 @@ __export(version_exports, {
   SDK_VERSION: () => SDK_VERSION
 });
 module.exports = __toCommonJS(version_exports);
-const SDK_VERSION = "0.66.0";
+const SDK_VERSION = "0.68.0";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   SDK_VERSION

package/dist/version.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.66.0';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,MAAM,cAAc;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.68.0';\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,MAAM,cAAc;","names":[]}

package/dist/version.d.cts

@@ -1,4 +1,4 @@
 /** This SDK's package version, baked from package.json at build (SP2-6). */
-declare const SDK_VERSION = "0.66.0";
+declare const SDK_VERSION = "0.68.0";
 
 export { SDK_VERSION };

package/dist/version.d.ts

@@ -1,4 +1,4 @@
 /** This SDK's package version, baked from package.json at build (SP2-6). */
-declare const SDK_VERSION = "0.66.0";
+declare const SDK_VERSION = "0.68.0";
 
 export { SDK_VERSION };

package/dist/version.js

@@ -1,5 +1,5 @@
 import "./chunk-VHAA22YE.js";
-const SDK_VERSION = "0.66.0";
+const SDK_VERSION = "0.68.0";
 export {
   SDK_VERSION
 };

package/dist/version.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.66.0';\n"],"mappings":";AAIO,MAAM,cAAc;","names":[]}
+{"version":3,"sources":["../src/version.ts"],"sourcesContent":["// GENERATED by scripts/gen-version.mjs from package.json — do not edit by hand.\n// Regenerated on every build (prebuild); kept honest by version.test.ts.\n\n/** This SDK's package version, baked from package.json at build (SP2-6). */\nexport const SDK_VERSION = '0.68.0';\n"],"mappings":";AAIO,MAAM,cAAc;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@immediately-run/sdk",
-  "version": "0.66.0",
+  "version": "0.68.0",
   "description": "Runtime SDK for code executing inside an immediately.run sandbox.",
   "license": "MIT",
   "repository": "github:immediately-run/immediately-run-sdk",
@@ -64,10 +64,10 @@
     "react-dom": "^19.0.0"
   },
   "dependencies": {
-    "@immediately-run/mdx-plugins": "0.5.0",
+    "@immediately-run/mdx-plugins": "0.7.1",
     "@immediately-run/platform-constants": "0.2.0",
     "@immediately-run/safe-content": "0.1.0",
-    "@immediately-run/sandbox-protocol": "0.10.2",
+    "@immediately-run/sandbox-protocol": "0.10.5",
     "react-error-boundary": "^6.0.0"
   },
   "devDependencies": {