@jigs.design/runtime 0.1.1 → 0.2.0

package/README.md

@@ -1,29 +1,26 @@
 # @jigs.design/runtime
 
-The layer the server and the browser share: the program format, the types on the wire, the sandboxed runtime, and the tree store. It imports neither the compiler nor the prompt.
+The sandbox a program runs in: the frame document and its content security policy, the worker runtime, and the tree store the page draws from. The types it speaks are in `@jigs.design/protocol`, its only dependency. It imports neither the compiler nor the prompt.
 
-`@jigs.design/server`, `@jigs.design/client` and `@jigs.design/react` re-export the shared types, so most code imports them from one of those.
+`@jigs.design/client` uses the tree store and the policy; `@jigs.design/server` serves the frame. An app rarely imports it directly.
 
 ## Entry points
 
-| Entry                        | What it holds                                                                                                                                                                                                                                                                   |
-| ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `@jigs.design/runtime`       | `Program`, `SessionEvent`, `Message`, `Diagnostic` and the other shared types; the frame protocol (`HostMessage`, `FrameMessage`, `Op`); the JSON checks the browser runs; `createTreeStore` with its caps `MAX_NODES`, `MAX_OPS` and `MAX_TEXT`; the image and link allowlists |
-| `@jigs.design/runtime/frame` | The sandbox frame document, its content security policy, the worker runtime, and `WATCHDOG_MS` and `HEARTBEAT_MS`. The server serves it                                                                                                                                         |
+| Entry                        | What it holds                                                                                                                           |
+| ---------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
+| `@jigs.design/runtime`       | `createTreeStore` with its caps `MAX_NODES`, `MAX_OPS` and `MAX_TEXT`, the `TreeNode` and `TreeStore` types, and `frameSecurityPolicy`  |
+| `@jigs.design/runtime/frame` | The sandbox frame document, its content security policy, the worker runtime, and `WATCHDOG_MS` and `HEARTBEAT_MS`. The server serves it |
 
 ## How a program runs
 
-The server serves the frame document from its route. The frame starts a worker and runs the compiled program there, with a watchdog that kills a program that stops answering. The worker sends tree ops to the page, where the tree store applies them, within the same caps on nodes, ops and text the worker keeps, and the view draws the tree. Functions never leave the worker; they cross as ids. The browser checks every value from the server with `parse.ts`, since it imports no schema library.
+The server serves the frame document from its route. The frame starts a worker and runs the compiled program there, with a watchdog that kills a program that stops answering. The worker sends tree ops to the page, where the tree store applies them, within the same caps on nodes, ops and text the worker keeps, and the view draws the tree. Functions never leave the worker; they cross as ids. The worker and the frame's runner ship as `Function.prototype.toString()` text, so `scripts/sandbox-check.ts` boots the built output after every build.
 
 ## Source
 
-- `src/types.ts`: the shared types and `PROGRAM_FORMAT`.
-- `src/protocol.ts`: messages between the page, the frame and the worker.
-- `src/parse.ts`: checks for JSON arriving in the browser.
 - `src/frame.ts`, `src/frame-policy.ts`: the frame document and its policy.
 - `src/runtime-core.ts`: the runtime inside the worker.
 - `src/tree-store.ts`: the tree the view draws.
-- `src/urls.ts`, `src/validate.ts`: allowed images and links, and prop checks.
+- `src/validate.ts`: prop checks against the program's schemas.
 
 ## Docs
 

package/dist/index.d.ts

@@ -1,7 +1,3 @@
 import { frameSecurityPolicy } from "./frame-policy.js";
-import { ChatBlock, ChatBlockStatus, ChildrenKind, ComponentSchema, Diagnostic, DiagnosticFix, Invalidation, JsonValue, Message, NumberPropSchema, PROGRAM_FORMAT, PickleErrorCode, PickleErrorData, ProcedureEntry, ProcedureKind, Program, PropSchema, SessionBody, SessionEvent, SessionOptions, Span, pickleErrorCodes } from "./types.js";
-import { FrameMessage, HostMessage, MutationCall, MutationResult, Op, QueryRead, QueryResult, ROOT_ID, Row, RuntimeError, WireArg, WireValue, WorkerMessage } from "./protocol.js";
-import { parseErrorData, parseInvalidations, parseProgram, parseSessionEvent } from "./parse.js";
 import { MAX_NODES, MAX_OPS, MAX_TEXT, TreeNode, TreeStore, createTreeStore } from "./tree-store.js";
-import { isAllowedImage, isAllowedLink, isImageHostEntry, normalizeImageHost } from "./urls.js";
-export { type ChatBlock, type ChatBlockStatus, type ChildrenKind, type ComponentSchema, type Diagnostic, type DiagnosticFix, type FrameMessage, type HostMessage, type Invalidation, type JsonValue, MAX_NODES, MAX_OPS, MAX_TEXT, type Message, type MutationCall, type MutationResult, type NumberPropSchema, type Op, PROGRAM_FORMAT, type PickleErrorCode, type PickleErrorData, type ProcedureEntry, type ProcedureKind, type Program, type PropSchema, type QueryRead, type QueryResult, ROOT_ID, type Row, type RuntimeError, type SessionBody, type SessionEvent, type SessionOptions, type Span, type TreeNode, type TreeStore, type WireArg, type WireValue, type WorkerMessage, createTreeStore, frameSecurityPolicy, isAllowedImage, isAllowedLink, isImageHostEntry, normalizeImageHost, parseErrorData, parseInvalidations, parseProgram, parseSessionEvent, pickleErrorCodes };
+export { MAX_NODES, MAX_OPS, MAX_TEXT, type TreeNode, type TreeStore, createTreeStore, frameSecurityPolicy };

package/dist/index.js

@@ -1,7 +1,3 @@
-import { PROGRAM_FORMAT, pickleErrorCodes } from "./types.js";
-import { ROOT_ID } from "./protocol.js";
 import { frameSecurityPolicy } from "./frame-policy.js";
-import { parseErrorData, parseInvalidations, parseProgram, parseSessionEvent } from "./parse.js";
-import { isAllowedImage, isAllowedLink, isImageHostEntry, normalizeImageHost } from "./urls.js";
 import { MAX_NODES, MAX_OPS, MAX_TEXT, createTreeStore } from "./tree-store.js";
-export { MAX_NODES, MAX_OPS, MAX_TEXT, PROGRAM_FORMAT, ROOT_ID, createTreeStore, frameSecurityPolicy, isAllowedImage, isAllowedLink, isImageHostEntry, normalizeImageHost, parseErrorData, parseInvalidations, parseProgram, parseSessionEvent, pickleErrorCodes };
+export { MAX_NODES, MAX_OPS, MAX_TEXT, createTreeStore, frameSecurityPolicy };

package/dist/runtime-core.d.ts

@@ -1,4 +1,4 @@
-import { HostMessage, WorkerMessage } from "./protocol.js";
+import { HostMessage, WorkerMessage } from "@jigs.design/protocol";
 //#region src/runtime-core.d.ts
 export interface Runtime {
   handle: (message: HostMessage) => void;
@@ -11,7 +11,7 @@ export interface Runtime {
  * and fine). `FunctionCtor` is passed in because the worker removes dynamic
  * code evaluation from its globals before any program runs.
  *
- * A small React-style reconciler: programs build a tree with `__pickle.jsx`,
+ * A small React-style reconciler: programs build a tree with `__jigs.jsx`,
  * the runtime diffs it against the previous render by position and type, and
  * posts the differences as `Op`s. Each render also reports the queries it read
  * and the mutations its handlers called; the page runs those through the

package/dist/runtime-core.js

@@ -7,7 +7,7 @@
 * and fine). `FunctionCtor` is passed in because the worker removes dynamic
 * code evaluation from its globals before any program runs.
 *
-* A small React-style reconciler: programs build a tree with `__pickle.jsx`,
+* A small React-style reconciler: programs build a tree with `__jigs.jsx`,
 * the runtime diffs it against the previous render by position and type, and
 * posts the differences as `Op`s. Each render also reports the queries it read
 * and the mutations its handlers called; the page runs those through the
@@ -244,7 +244,7 @@ function createRuntime(post, FunctionCtor) {
 			status: state.status
 		});
 	};
-	const Pickle = Object.freeze({
+	const Jigs = Object.freeze({
 		render: (element) => {
 			rootElement = element;
 		},
@@ -325,7 +325,7 @@ function createRuntime(post, FunctionCtor) {
 			componentDepth--;
 		}
 	};
-	const pickle = Object.freeze({
+	const jigs = Object.freeze({
 		call: callComponent,
 		each,
 		Fragment: FRAGMENT,
@@ -335,7 +335,7 @@ function createRuntime(post, FunctionCtor) {
 			type
 		})
 	});
-	const pickleSafe = (evaluate, fallback, line) => {
+	const jigsSafe = (evaluate, fallback, line) => {
 		try {
 			return evaluate();
 		} catch (error) {
@@ -591,7 +591,7 @@ function createRuntime(post, FunctionCtor) {
 		reads = /* @__PURE__ */ new Map();
 		const next = [];
 		try {
-			run(Pickle, pickle, pickleSafe);
+			run(Jigs, jigs, jigsSafe);
 			expand(rootElement, next);
 		} catch (error) {
 			reads = previousReads;
@@ -682,7 +682,7 @@ function createRuntime(post, FunctionCtor) {
 				unstableSites.clear();
 				querySites = /* @__PURE__ */ new Map();
 				try {
-					candidate = new FunctionCtor("Pickle", "__pickle", "__pickleSafe", message.code);
+					candidate = new FunctionCtor("Jigs", "__jigs", "__jigsSafe", message.code);
 				} catch (error) {
 					prose = previousProse;
 					procedures = previousProcedures;

package/dist/tree-store.d.ts

@@ -1,5 +1,4 @@
-import { ComponentSchema } from "./types.js";
-import { Op, WireValue } from "./protocol.js";
+import { ComponentSchema, Op, WireValue } from "@jigs.design/protocol";
 //#region src/tree-store.d.ts
 export interface TreeNode {
   children: ReadonlyArray<number>;

package/dist/tree-store.js

@@ -1,5 +1,5 @@
-import "./protocol.js";
 import { acceptsProp } from "./validate.js";
+import { ROOT_ID } from "@jigs.design/protocol";
 //#region src/tree-store.ts
 const ROOT_TYPE = "#root";
 const TEXT_TYPE = "#text";
@@ -46,7 +46,7 @@ function isWellFormed(op) {
 }
 const rootNode = () => ({
 	children: [],
-	id: 0,
+	id: ROOT_ID,
 	props: {},
 	text: "",
 	type: ROOT_TYPE
@@ -107,7 +107,7 @@ const MAX_WALK_STEPS = 64 * MAX_OPS;
 * `useSyncExternalStore` snapshot.
 */
 function createTreeStore() {
-	const nodes = /* @__PURE__ */ new Map([[0, rootNode()]]);
+	const nodes = /* @__PURE__ */ new Map([[ROOT_ID, rootNode()]]);
 	const parents = /* @__PURE__ */ new Map();
 	/** Children being rebuilt by the current `apply`, by parent. */
 	const drafts = /* @__PURE__ */ new Map();
@@ -216,7 +216,7 @@ function createTreeStore() {
 		reportTooMany();
 		for (let index = created.length - 1; index >= 0; index--) {
 			if (nodes.size <= 10001) break;
-			const id = created[index] ?? 0;
+			const id = created[index] ?? ROOT_ID;
 			if (nodes.has(id)) {
 				parents.delete(id);
 				removeSubtree(id);
@@ -230,7 +230,7 @@ function createTreeStore() {
 			return;
 		}
 		if (op.op === "create" || op.op === "createText") {
-			if (op.id === 0 || nodes.has(op.id)) {
+			if (op.id === ROOT_ID || nodes.has(op.id)) {
 				report("The sandbox reused a node id; the operation was dropped");
 				return;
 			}
@@ -276,13 +276,13 @@ function createTreeStore() {
 				} : node);
 				return;
 			case "place":
-				if (!nodes.has(op.id) || !nodes.has(op.parent) || op.id === 0 || isWithin(op.parent, op.id)) return;
+				if (!nodes.has(op.id) || !nodes.has(op.parent) || op.id === ROOT_ID || isWithin(op.parent, op.id)) return;
 				detach(op.id);
 				if (!insert(draftOf(op.parent), op.id, op.index)) slow++;
 				parents.set(op.id, op.parent);
 				return;
 			case "remove":
-				if (op.id === 0) return;
+				if (op.id === ROOT_ID) return;
 				detach(op.id);
 				removeSubtree(op.id);
 				return;
@@ -320,7 +320,7 @@ function createTreeStore() {
 			nodes.clear();
 			parents.clear();
 			drafts.clear();
-			nodes.set(0, rootNode());
+			nodes.set(ROOT_ID, rootNode());
 			issues = [];
 			notify();
 		},

package/dist/validate.js

@@ -1,4 +1,4 @@
-import { isAllowedImage, isAllowedLink } from "./urls.js";
+import { isAllowedImage, isAllowedLink } from "@jigs.design/protocol";
 //#region src/validate.ts
 const MAX_ROWS = 500;
 const MAX_ROW_KEYS = 20;

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@jigs.design/runtime",
-  "version": "0.1.1",
-  "description": "The program format, the types the server and the browser share, the sandboxed runtime, and the tree store.",
+  "version": "0.2.0",
+  "description": "The sandbox: the frame document, the worker runtime that runs a compiled program, and the tree store the page draws from.",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/yoamomonstruos/pickle.git",
+    "url": "git+https://github.com/yoamomonstruos/jigs.git",
     "directory": "packages/runtime"
   },
   "type": "module",
@@ -27,5 +27,8 @@
   },
   "publishConfig": {
     "access": "public"
+  },
+  "dependencies": {
+    "@jigs.design/protocol": "0.2.0"
   }
 }

package/dist/parse.d.ts

@@ -1,9 +0,0 @@
-import { Invalidation, PickleErrorData, Program, SessionEvent } from "./types.js";
-//#region src/parse.d.ts
-export declare function parseErrorData(value: unknown): PickleErrorData | null;
-/** The `invalidate` list of a mutation's reply. */
-export declare function parseInvalidations(value: unknown): ReadonlyArray<Invalidation> | null;
-export declare function parseProgram(value: unknown): Program | null;
-/** One session event from its JSON text, or null when it is not one. */
-export declare function parseSessionEvent(text: string): SessionEvent | null;
-//#endregion

package/dist/parse.js

@@ -1,150 +0,0 @@
-import { pickleErrorCodes } from "./types.js";
-//#region src/parse.ts
-const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-const isString = (value) => typeof value === "string";
-const isStringList = (value) => Array.isArray(value) && value.every(isString);
-function recordOf(value, item) {
-	if (!isRecord(value)) return null;
-	const out = {};
-	for (const [key, entry] of Object.entries(value)) {
-		const parsed = item(entry);
-		if (parsed === null) return null;
-		out[key] = parsed;
-	}
-	return out;
-}
-const isErrorCode = (value) => pickleErrorCodes.some((code) => code === value);
-function parseErrorData(value) {
-	if (!isRecord(value) || !isErrorCode(value.code) || !isString(value.message)) return null;
-	return {
-		code: value.code,
-		message: value.message
-	};
-}
-function parseInvalidation(value) {
-	if (!isRecord(value) || !isString(value.name)) return null;
-	if (!("input" in value)) return { name: value.name };
-	return {
-		input: value.input,
-		name: value.name
-	};
-}
-/** The `invalidate` list of a mutation's reply. */
-function parseInvalidations(value) {
-	if (!Array.isArray(value)) return null;
-	const out = [];
-	for (const entry of value) {
-		const parsed = parseInvalidation(entry);
-		if (parsed === null) return null;
-		out.push(parsed);
-	}
-	return out;
-}
-function parsePropSchema(value) {
-	if (!isRecord(value)) return null;
-	switch (value.kind) {
-		case "boolean":
-		case "handler":
-		case "image":
-		case "link":
-		case "list":
-		case "string": return { kind: value.kind };
-		case "enum": return isStringList(value.values) ? {
-			kind: "enum",
-			values: value.values
-		} : null;
-		case "number": {
-			const schema = { kind: "number" };
-			if (typeof value.min === "number") schema.min = value.min;
-			if (typeof value.max === "number") schema.max = value.max;
-			return schema;
-		}
-		default: return null;
-	}
-}
-const isChildrenKind = (value) => value === "block" || value === "inline" || value === "none";
-function parseComponentSchema(value) {
-	if (!isRecord(value) || !isChildrenKind(value.children)) return null;
-	const props = recordOf(value.props, parsePropSchema);
-	return props === null ? null : {
-		children: value.children,
-		props
-	};
-}
-function parseProcedure(value) {
-	if (!isRecord(value) || value.kind !== "query" && value.kind !== "mutation" && value.kind !== "action" || !isStringList(value.invalidates)) return null;
-	return {
-		invalidates: value.invalidates,
-		kind: value.kind
-	};
-}
-function parseProgram(value) {
-	if (!isRecord(value) || value.format !== 1 || !isString(value.code) || !isStringList(value.imageHosts)) return null;
-	const components = recordOf(value.components, parseComponentSchema);
-	const procedures = recordOf(value.procedures, parseProcedure);
-	const prose = recordOf(value.prose, (entry) => isString(entry) ? entry : null);
-	if (components === null || procedures === null || prose === null) return null;
-	return {
-		code: value.code,
-		components,
-		format: 1,
-		imageHosts: value.imageHosts,
-		procedures,
-		prose
-	};
-}
-function parseDiagnostic(value) {
-	if (!isRecord(value) || !isString(value.code) || !isString(value.message) || value.severity !== "error" && value.severity !== "warning" && value.severity !== "info" && value.severity !== "hint" || !isRecord(value.span) || typeof value.span.line !== "number") return null;
-	return {
-		code: value.code,
-		message: value.message,
-		severity: value.severity,
-		span: { line: value.span.line }
-	};
-}
-/** The diagnostics that parse; one the browser cannot read is skipped, not the event. */
-function parseDiagnostics(value) {
-	if (!Array.isArray(value)) return null;
-	return value.flatMap((entry) => {
-		const parsed = parseDiagnostic(entry);
-		return parsed === null ? [] : [parsed];
-	});
-}
-/** One session event from its JSON text, or null when it is not one. */
-function parseSessionEvent(text) {
-	let value;
-	try {
-		value = JSON.parse(text);
-	} catch {
-		return null;
-	}
-	if (!isRecord(value)) return null;
-	if (value.type === "error") {
-		const error = parseErrorData(value.error);
-		return error === null ? null : {
-			error,
-			type: "error"
-		};
-	}
-	const diagnostics = parseDiagnostics(value.diagnostics);
-	if (diagnostics === null || typeof value.revision !== "number") return null;
-	if (value.type === "program") {
-		const program = parseProgram(value.program);
-		return program === null ? null : {
-			diagnostics,
-			fresh: value.fresh === true,
-			program,
-			revision: value.revision,
-			type: "program"
-		};
-	}
-	if (value.type === "done" && isString(value.source)) return {
-		diagnostics,
-		revision: value.revision,
-		source: value.source,
-		type: "done"
-	};
-	return null;
-}
-//#endregion
-export { parseErrorData, parseInvalidations, parseProgram, parseSessionEvent };

package/dist/protocol.d.ts

@@ -1,132 +0,0 @@
-import { PickleErrorData, ProcedureEntry } from "./types.js";
-//#region src/protocol.d.ts
-/**
- * Prop value on the wire. Functions never leave the worker; they travel as
- * `{ fn }` ids. Lists of plain objects travel as `{ rows }`.
- */
-export type WireValue = boolean | number | string | {
-  fn: string;
-} | {
-  rows: ReadonlyArray<Row>;
-};
-/** One row of a list prop: flat fields only. */
-export type Row = Readonly<Record<string, boolean | number | string | null>>;
-export type WireArg = boolean | number | string;
-/** The props of one node on the wire. */
-export type WireProps = Record<string, WireValue>;
-/** UI operations produced by the worker's reconciler. The root container has id 0. */
-export type Op = {
-  id: number;
-  op: "create";
-  props: WireProps;
-  type: string;
-} | {
-  id: number;
-  op: "createText";
-  text: string;
-} | {
-  id: number;
-  index: number;
-  op: "place";
-  parent: number;
-} | {
-  id: number;
-  op: "remove";
-} | {
-  id: number;
-  op: "set";
-  props: Record<string, WireValue | null>;
-} | {
-  id: number;
-  op: "text";
-  text: string;
-};
-export interface RuntimeError {
-  line: number | null;
-  message: string;
-}
-/** A query as the program sees it from `useQuery`. */
-export type QueryResult = {
-  data: null;
-  error: null;
-  status: "pending";
-} | {
-  data: unknown;
-  error: null;
-  status: "success";
-} | {
-  data: null;
-  error: PickleErrorData;
-  status: "error";
-};
-/** How a mutation settled. */
-export type MutationResult = {
-  data: unknown;
-  status: "success";
-} | {
-  error: PickleErrorData;
-  status: "error";
-};
-/** A query the program read during a render. `key` is stable for a name and input. */
-export interface QueryRead {
-  input: unknown;
-  key: string;
-  name: string;
-}
-/** A `mutate()` call made inside a handler. */
-export interface MutationCall {
-  id: number;
-  input: unknown;
-  name: string;
-}
-/** Page to worker. */
-export type HostMessage = {
-  args: ReadonlyArray<WireArg>;
-  fn: string;
-  seq: number;
-  type: "call";
-} | {
-  id: number;
-  result: MutationResult;
-  seq: number;
-  type: "mutation";
-} | {
-  key: string;
-  result: QueryResult;
-  seq: number;
-  type: "query";
-} | {
-  code: string;
-  /** Drop the state and mutation statuses of the program before. */
-  fresh: boolean;
-  procedures: Readonly<Record<string, ProcedureEntry>>;
-  prose: Readonly<Record<string, string>>;
-  seq: number;
-  type: "update";
-};
-/** Worker to page. */
-export type WorkerMessage = {
-  errors: Array<RuntimeError>;
-  mutations: Array<MutationCall>;
-  ops: Array<Op>;
-  queries: Array<QueryRead>;
-  seq: number;
-  type: "result";
-} | {
-  message: string;
-  seq: number;
-  type: "failed";
-};
-/** What the frame sends to the page. */
-export type FrameMessage = WorkerMessage | {
-  seq: number;
-  type: "quarantined";
-} | {
-  type: "ready";
-} |
-/** The frame's own security policy is not in force, so it will not run. */
-{
-  type: "unprotected";
-};
-export declare const ROOT_ID = 0;
-//#endregion

package/dist/protocol.js

@@ -1,4 +0,0 @@
-//#region src/protocol.ts
-const ROOT_ID = 0;
-//#endregion
-export { ROOT_ID };

package/dist/types.d.ts

@@ -1,168 +0,0 @@
-//#region src/types.d.ts
-/**
- * Types the server and the browser share. The server builds these values;
- * the browser receives them as JSON and checks them with `parse.ts`.
- */
-/** The version of the program format. The runtime refuses any other. */
-export declare const PROGRAM_FORMAT = 1;
-export declare const pickleErrorCodes: readonly ["BAD_INPUT", "UNAUTHORIZED", "FORBIDDEN", "NOT_FOUND", "CONFLICT", "RATE_LIMITED", "INTERNAL", "UNKNOWN_PROCEDURE", "UNAVAILABLE", "NETWORK", "DECLINED"];
-export type PickleErrorCode = (typeof pickleErrorCodes)[number];
-/** A failure as the spec and the browser see it. */
-export interface PickleErrorData {
-  code: PickleErrorCode;
-  message: string;
-}
-/**
- * Where a diagnostic points. Every span has a line; one about something the
- * compiler can place in the source also has its range, as offsets into the
- * source the line counts (JavaScript string indices), and the column of its
- * start.
- */
-export interface Span {
-  /** 1-based, on `line`. */
-  column?: number;
-  /** Just past the range. */
-  end?: number;
-  line: number;
-  /** The range's first character. */
-  start?: number;
-}
-/**
- * A rewrite that makes a diagnostic's problem go away: replace each edit's
- * span with its text. The server attaches one only when there is a single
- * way to write it, and applies it itself, so its diagnostic is `info`.
- */
-export interface DiagnosticFix {
-  edits: Array<{
-    span: Span;
-    text: string;
-  }>;
-  title: string;
-}
-export interface Diagnostic {
-  code: string;
-  fix?: DiagnosticFix;
-  message: string;
-  /** `error` marks something the compiler had to change; the program still runs. */
-  severity: "error" | "hint" | "info" | "warning";
-  span: Span;
-}
-export interface NumberPropSchema {
-  kind: "number";
-  max?: number;
-  min?: number;
-}
-/** How the view checks one prop before a registry component sees it. */
-export type PropSchema = {
-  kind: "boolean";
-} | {
-  kind: "enum";
-  values: ReadonlyArray<string>;
-} | {
-  kind: "handler";
-} | {
-  kind: "image";
-} | {
-  kind: "link";
-} | {
-  kind: "list";
-} | NumberPropSchema | {
-  kind: "string";
-};
-export type ChildrenKind = "block" | "inline" | "none";
-export interface ComponentSchema {
-  children: ChildrenKind;
-  props: Readonly<Record<string, PropSchema>>;
-}
-/** `action` is a mutation the embedding page handles instead of the server. */
-export type ProcedureKind = "action" | "mutation" | "query";
-export interface ProcedureEntry {
-  invalidates: ReadonlyArray<string>;
-  kind: ProcedureKind;
-}
-/**
- * One query a mutation refreshed, as the server sends it with the mutation's
- * data. Without `input`, every input of the query refetches. With it, only
- * the queries whose input contains those values.
- */
-export interface Invalidation {
-  input?: JsonValue;
-  name: string;
-}
-/**
- * A compiled spec. Opaque to apps: pass it from the server to the view and
- * nowhere else. The view trusts its schemas and image hosts.
- */
-export interface Program {
-  code: string;
-  /** Prop schemas of the components the program draws. */
-  components: Readonly<Record<string, ComponentSchema>>;
-  format: typeof PROGRAM_FORMAT;
-  imageHosts: ReadonlyArray<string>;
-  /** Procedures the program calls, with their kind and `invalidates` list. */
-  procedures: Readonly<Record<string, ProcedureEntry>>;
-  /** Text nodes pulled out of the code, so a prose edit swaps a table. */
-  prose: Readonly<Record<string, string>>;
-}
-export interface Message {
-  content: string;
-  role: "assistant" | "user";
-}
-export type SessionEvent = {
-  diagnostics: ReadonlyArray<Diagnostic>;
-  /**
-   * True on the first program of a new UI: the model wrote a whole
-   * document rather than editing the last one, or a stored one was
-   * restored. The view starts it from fresh state.
-   */
-  fresh: boolean;
-  program: Program;
-  revision: number;
-  type: "program";
-} | {
-  diagnostics: ReadonlyArray<Diagnostic>;
-  revision: number;
-  source: string;
-  type: "done";
-} | {
-  error: PickleErrorData;
-  type: "error";
-};
-/**
- * Where a chat block is: still arriving, being repaired after it closed with
- * errors, or final.
- */
-export type ChatBlockStatus = "done" | "repairing" | "streaming";
-/**
- * A pickle in a chat reply: one fenced `pickle` block, compiled on its own.
- * The server sends it again whenever its program changes, under the same
- * `key`.
- */
-export interface ChatBlock {
-  /** Lines refer to `source`, which starts with its pragma line. */
-  diagnostics: ReadonlyArray<Diagnostic>;
-  /** Set when the block could not be built, e.g. an edit to a missing UI. */
-  error?: PickleErrorData;
-  /** The id the model gave the block, e.g. "monthly-spending". */
-  id: string;
-  /** `${id}@${version}`: unique in a conversation. */
-  key: string;
-  program: Program;
-  /** The checked source, with its pragma. Store this, not the program. */
-  source: string;
-  status: ChatBlockStatus;
-  /** 1 for the first block with this id in the conversation, then 2, 3… */
-  version: number;
-}
-/** A value that travels as JSON. */
-export type JsonValue = boolean | null | number | string | ReadonlyArray<JsonValue> | {
-  readonly [key: string]: JsonValue;
-};
-/** App options sent with a turn; the server parses them with its `options` schema. */
-export type SessionOptions = Readonly<Record<string, JsonValue>>;
-/** What a session request carries. */
-export interface SessionBody {
-  messages: ReadonlyArray<Message>;
-  options?: SessionOptions;
-}
-//#endregion

package/dist/types.js

@@ -1,22 +0,0 @@
-//#region src/types.ts
-/**
-* Types the server and the browser share. The server builds these values;
-* the browser receives them as JSON and checks them with `parse.ts`.
-*/
-/** The version of the program format. The runtime refuses any other. */
-const PROGRAM_FORMAT = 1;
-const pickleErrorCodes = [
-	"BAD_INPUT",
-	"UNAUTHORIZED",
-	"FORBIDDEN",
-	"NOT_FOUND",
-	"CONFLICT",
-	"RATE_LIMITED",
-	"INTERNAL",
-	"UNKNOWN_PROCEDURE",
-	"UNAVAILABLE",
-	"NETWORK",
-	"DECLINED"
-];
-//#endregion
-export { PROGRAM_FORMAT, pickleErrorCodes };

package/dist/urls.d.ts

@@ -1,14 +0,0 @@
-//#region src/urls.d.ts
-/**
- * A hostname, or `*.example.com` for its subdomains (not the apex),
- * optionally followed by a path prefix that ends in `/`, such as
- * `images.example.com/products/`.
- */
-export declare function isImageHostEntry(entry: string): boolean;
-/** The entry with its host lowercased; the path keeps its case. */
-export declare function normalizeImageHost(entry: string): string;
-/** An `https` URL with no credentials or port, on one of `hosts`. */
-export declare function isAllowedImage(src: string, hosts: ReadonlyArray<string>): boolean;
-/** An absolute `http` or `https` URL. Anything else, such as `javascript:`, is refused. */
-export declare function isAllowedLink(href: string): boolean;
-//#endregion

package/dist/urls.js

@@ -1,59 +0,0 @@
-//#region src/urls.ts
-const HOST = /^(\*\.)?[a-z0-9-]+(\.[a-z0-9-]+)*$/;
-const PATH_PREFIX = /^\/(?:[A-Za-z0-9._~!$&'()*+,;=:@%/-]*\/)?$/;
-/** An image host entry split into its host and optional path prefix. */
-function splitEntry(entry) {
-	const slash = entry.indexOf("/");
-	return slash === -1 ? {
-		host: entry.toLowerCase(),
-		path: "/"
-	} : {
-		host: entry.slice(0, slash).toLowerCase(),
-		path: entry.slice(slash)
-	};
-}
-/**
-* A hostname, or `*.example.com` for its subdomains (not the apex),
-* optionally followed by a path prefix that ends in `/`, such as
-* `images.example.com/products/`.
-*/
-function isImageHostEntry(entry) {
-	const parts = splitEntry(entry);
-	return HOST.test(parts.host) && PATH_PREFIX.test(parts.path);
-}
-/** The entry with its host lowercased; the path keeps its case. */
-function normalizeImageHost(entry) {
-	const parts = splitEntry(entry);
-	return entry.includes("/") ? `${parts.host}${parts.path}` : parts.host;
-}
-/**
-* An encoded `/`, `\`, `.` or `%`: a server that decodes it after matching can
-* be walked out of the prefix with `..%2F`, or with `..%252F` if it decodes
-* twice, and the URL parser leaves it alone. So a prefix can't serve object
-* keys that hold an encoded `/`, such as Firebase Storage's `o/a%2Fb.jpg`.
-*/
-const ENCODED_SEPARATOR = /%(?:2f|5c|2e|25)/i;
-function matchesHost(url, entry) {
-	if (!isImageHostEntry(entry)) return false;
-	const parts = splitEntry(entry);
-	return (parts.host.startsWith("*.") ? url.hostname.endsWith(parts.host.slice(1)) : url.hostname === parts.host) && url.pathname.startsWith(parts.path) && (parts.path === "/" || !ENCODED_SEPARATOR.test(url.pathname));
-}
-function parseUrl(text) {
-	try {
-		return new URL(text);
-	} catch {
-		return null;
-	}
-}
-/** An `https` URL with no credentials or port, on one of `hosts`. */
-function isAllowedImage(src, hosts) {
-	const url = parseUrl(src);
-	return url !== null && url.protocol === "https:" && url.username === "" && url.password === "" && url.port === "" && hosts.some((entry) => matchesHost(url, entry));
-}
-/** An absolute `http` or `https` URL. Anything else, such as `javascript:`, is refused. */
-function isAllowedLink(href) {
-	const url = parseUrl(href);
-	return url !== null && (url.protocol === "https:" || url.protocol === "http:") && url.username === "" && url.password === "";
-}
-//#endregion
-export { isAllowedImage, isAllowedLink, isImageHostEntry, normalizeImageHost };