@jini-ai/ui 0.1.2 → 0.3.0

package/dist/renderers/renderers/markdown.js

@@ -0,0 +1,126 @@
+/**
+ * Markdown → sanitized HTML for artifact rendering. Verbatim port of
+ * `apps/web/src/artifacts/markdown.ts` in the origin project — no
+ * product-specific logic in the original, just table-pipe-escaping + a few HTML
+ * post-processing passes (safe external links, table wrapper class,
+ * alignment-attribute → CSS). See `source-map.md`.
+ */
+import { micromark } from 'micromark';
+import { gfm, gfmHtml } from 'micromark-extension-gfm';
+import { resolveArtifactManifest } from '../registry.js';
+export function renderMarkdownToSafeHtml(markdown) {
+    return postProcessMarkdownHtml(micromark(escapeTableCodePipes(markdown), {
+        extensions: [gfm()],
+        htmlExtensions: [gfmHtml()],
+    }));
+}
+function escapeTableCodePipes(markdown) {
+    const lines = markdown.replace(/\r\n/g, '\n').split('\n');
+    let inFence = false;
+    let inTable = false;
+    return lines
+        .map((line, index) => {
+        if (/^\s*(```|~~~)/.test(line)) {
+            inFence = !inFence;
+            inTable = false;
+            return line;
+        }
+        if (inFence)
+            return line;
+        const startsTable = isLikelyTableHeader(line) && isTableDelimiter(lines[index + 1] ?? '');
+        if (startsTable) {
+            inTable = true;
+            return escapeCodeSpanPipes(line);
+        }
+        if (!inTable)
+            return line;
+        if (!line.includes('|') || isTableDelimiter(line)) {
+            if (!isTableDelimiter(line))
+                inTable = false;
+            return line;
+        }
+        return escapeCodeSpanPipes(line);
+    })
+        .join('\n');
+}
+function isLikelyTableHeader(line) {
+    return line.includes('|') && line.trim().replace(/^\|/, '').replace(/\|$/, '').includes('|');
+}
+function isTableDelimiter(line) {
+    const trimmed = line.trim();
+    if (!trimmed.includes('-') || !trimmed.includes('|'))
+        return false;
+    const cells = trimmed.replace(/^\|/, '').replace(/\|$/, '').split('|');
+    return cells.length > 1 && cells.every((cell) => /^:?-{3,}:?$/.test(cell.trim()));
+}
+function escapeCodeSpanPipes(line) {
+    if (!line.includes('|') || !line.includes('`'))
+        return line;
+    return line.replace(/`([^`]*\|[^`]*)`/g, (_match, code) => `\`${code.replace(/\|/g, '\\|')}\``);
+}
+function postProcessMarkdownHtml(html) {
+    let out = html.trim();
+    out = out.replace(/>\n+</g, '><');
+    out = out.replace(/<pre><code([^>]*)>([\s\S]*?)\n<\/code><\/pre>/g, '<pre><code$1>$2</code></pre>');
+    out = out.replace(/<blockquote><p>([\s\S]*?)<\/p><\/blockquote>/g, '<blockquote>$1</blockquote>');
+    out = out.replace(/\salign="(left|center|right)"/g, ' style="text-align:$1"');
+    out = out.replace(/<table>/g, '<div class="md-table-wrap"><table class="md-table">');
+    out = out.replace(/<\/table>/g, '</table></div>');
+    out = out.replace(/<a href="([^"]*)">([\s\S]*?)<\/a>/g, (_match, rawHref, body) => {
+        const href = normalizeSafeHref(rawHref);
+        if (!href)
+            return body;
+        const safeHref = escapeHtmlAttribute(href);
+        const rel = safeHref.startsWith('#') ? '' : ' rel="noreferrer noopener" target="_blank"';
+        return `<a href="${safeHref}"${rel}>${body}</a>`;
+    });
+    return out;
+}
+function normalizeSafeHref(href) {
+    const decoded = decodeHref(href);
+    const stripped = decoded.replace(/[!"')}\],.;:\s]+$/, '');
+    if (stripped.startsWith('#') ||
+        stripped.startsWith('/') ||
+        stripped.startsWith('./') ||
+        stripped.startsWith('../') ||
+        /^https?:\/\//i.test(stripped) ||
+        /^mailto:/i.test(stripped)) {
+        return stripped;
+    }
+    return null;
+}
+function decodeHref(href) {
+    const htmlDecoded = href
+        .replace(/&amp;/g, '&')
+        .replace(/&quot;/g, '"')
+        .replace(/&#39;/g, "'")
+        .replace(/&lt;/g, '<')
+        .replace(/&gt;/g, '>');
+    try {
+        return decodeURIComponent(htmlDecoded);
+    }
+    catch {
+        return htmlDecoded;
+    }
+}
+function escapeHtmlAttribute(value) {
+    return value
+        .replace(/&/g, '&amp;')
+        .replace(/"/g, '&quot;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+}
+export const MarkdownRenderer = {
+    id: 'markdown',
+    supportsStreaming: true,
+    renderPartial: renderMarkdownToSafeHtml,
+    canRender: ({ file }) => {
+        const manifest = resolveArtifactManifest(file);
+        if (!manifest)
+            return false;
+        if (manifest.renderer === 'markdown' || manifest.kind === 'markdown-document')
+            return true;
+        return file.kind === 'text' && /\.md$/i.test(file.name);
+    },
+};
+//# sourceMappingURL=markdown.js.map

package/dist/renderers/renderers/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../../src/renderers/renderers/markdown.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAyB,MAAM,gBAAgB,CAAC;AAEhF,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,OAAO,uBAAuB,CAC5B,SAAS,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE;QACxC,UAAU,EAAE,CAAC,GAAG,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC,OAAO,EAAE,CAAC;KAC5B,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,GAAG,CAAC,OAAO,CAAC;YACnB,OAAO,GAAG,KAAK,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBAAE,OAAO,GAAG,KAAK,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY;IAC3C,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gDAAgD,EAAE,8BAA8B,CAAC,CAAC;IACpG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,+CAA+C,EAAE,6BAA6B,CAAC,CAAC;IAClG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,gCAAgC,EAAE,wBAAwB,CAAC,CAAC;IAC9E,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,qDAAqD,CAAC,CAAC;IACrF,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAClD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,CAAC,MAAM,EAAE,OAAe,EAAE,IAAY,EAAE,EAAE;QAChG,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,4CAA4C,CAAC;QACzF,OAAO,YAAY,QAAQ,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC;IACnD,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IAC1D,IACE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QACxB,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QACxB,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAC1B,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC1B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,WAAW,GAAG,IAAI;SACrB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAqB;IAChD,EAAE,EAAE,UAAU;IACd,iBAAiB,EAAE,IAAI;IACvB,aAAa,EAAE,wBAAwB;IACvC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,IAAI,KAAK,mBAAmB;YAAE,OAAO,IAAI,CAAC;QAC3F,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;CACF,CAAC"}

package/dist/renderers/renderers/react-component.d.ts

@@ -0,0 +1,10 @@
+import { type ArtifactRenderer } from '../registry.js';
+/**
+ * Matches artifacts whose manifest declares a React-component renderer.
+ * This registry entry only resolves *which* renderer applies — it does not
+ * itself evaluate/mount arbitrary React source (that requires a sandboxed
+ * eval strategy that is inherently host-specific); a host supplies the
+ * actual render function via `ArtifactView`'s `slots.renderers['react-component']`.
+ */
+export declare const ReactComponentRenderer: ArtifactRenderer;
+//# sourceMappingURL=react-component.d.ts.map

package/dist/renderers/renderers/react-component.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-component.d.ts","sourceRoot":"","sources":["../../../src/renderers/renderers/react-component.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEhF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAQpC,CAAC"}

package/dist/renderers/renderers/react-component.js

@@ -0,0 +1,19 @@
+import { resolveArtifactManifest } from '../registry.js';
+/**
+ * Matches artifacts whose manifest declares a React-component renderer.
+ * This registry entry only resolves *which* renderer applies — it does not
+ * itself evaluate/mount arbitrary React source (that requires a sandboxed
+ * eval strategy that is inherently host-specific); a host supplies the
+ * actual render function via `ArtifactView`'s `slots.renderers['react-component']`.
+ */
+export const ReactComponentRenderer = {
+    id: 'react-component',
+    supportsStreaming: false,
+    canRender: ({ file }) => {
+        const manifest = resolveArtifactManifest(file);
+        if (!manifest)
+            return false;
+        return manifest.kind === 'react-component' || manifest.renderer === 'react-component';
+    },
+};
+//# sourceMappingURL=react-component.js.map

package/dist/renderers/renderers/react-component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-component.js","sourceRoot":"","sources":["../../../src/renderers/renderers/react-component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAyB,MAAM,gBAAgB,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqB;IACtD,EAAE,EAAE,iBAAiB;IACrB,iBAAiB,EAAE,KAAK;IACxB,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,OAAO,QAAQ,CAAC,IAAI,KAAK,iBAAiB,IAAI,QAAQ,CAAC,QAAQ,KAAK,iBAAiB,CAAC;IACxF,CAAC;CACF,CAAC"}

package/dist/renderers/renderers/svg.d.ts

@@ -0,0 +1,3 @@
+import { type ArtifactRenderer } from '../registry.js';
+export declare const SvgRenderer: ArtifactRenderer;
+//# sourceMappingURL=svg.d.ts.map

package/dist/renderers/renderers/svg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"svg.d.ts","sourceRoot":"","sources":["../../../src/renderers/renderers/svg.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEhF,eAAO,MAAM,WAAW,EAAE,gBASzB,CAAC"}

package/dist/renderers/renderers/svg.js

@@ -0,0 +1,14 @@
+import { resolveArtifactManifest } from '../registry.js';
+export const SvgRenderer = {
+    id: 'svg',
+    supportsStreaming: false,
+    canRender: ({ file }) => {
+        const manifest = resolveArtifactManifest(file);
+        if (!manifest)
+            return false;
+        if (manifest.renderer === 'svg' || manifest.kind === 'svg')
+            return true;
+        return (file.kind === 'image' || file.kind === 'sketch') && /\.svg$/i.test(file.name);
+    },
+};
+//# sourceMappingURL=svg.js.map

package/dist/renderers/renderers/svg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"svg.js","sourceRoot":"","sources":["../../../src/renderers/renderers/svg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAyB,MAAM,gBAAgB,CAAC;AAEhF,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C,EAAE,EAAE,KAAK;IACT,iBAAiB,EAAE,KAAK;IACxB,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxF,CAAC;CACF,CAAC"}

package/dist/renderers/sandbox-bridge.d.ts

@@ -0,0 +1,44 @@
+import { type RefObject } from 'react';
+import type { SandboxBridgeHandler, SandboxBridgeMessage } from './types.js';
+export interface UseSandboxBridgeOptions {
+    /** Ref to the sandboxed iframe this bridge talks to. */
+    iframeRef: RefObject<HTMLIFrameElement | null>;
+    /**
+     * Handlers keyed by `message.type`. A message whose `type` has no
+     * registered handler is ignored. Re-registering with a new object every
+     * render is fine — the latest handlers are always used without
+     * re-attaching the underlying `message` listener (see the effect-deps
+     * note below).
+     */
+    handlers: Record<string, SandboxBridgeHandler>;
+    /**
+     * Restrict outbound `postMessage` (and — since a same-document sandboxed
+     * `srcDoc` iframe has an opaque `"null"` origin that can't be checked
+     * positionally — inbound acceptance) to a specific origin. Omit to post
+     * with `'*'`; inbound messages are still scoped by verifying
+     * `event.source` is this exact iframe's `contentWindow`, not by origin.
+     */
+    targetOrigin?: string;
+}
+export interface SandboxBridge {
+    /** Post a message to the sandboxed iframe's `contentWindow`. No-op if the iframe isn't mounted yet. */
+    post(message: SandboxBridgeMessage): void;
+}
+/**
+ * Wire a `window` `message` listener scoped to one sandboxed iframe: every
+ * inbound message is checked against `event.source === iframe.contentWindow`
+ * before being dispatched (by `message.type`) to a registered handler, and
+ * `post()` sends a message to that same iframe. This is deliberately just
+ * the transport — it carries no message *vocabulary* of its own. A
+ * consuming feature (deck navigation, comment pinning, an inspector panel,
+ * …) defines its own message shapes and registers handlers for them.
+ *
+ * The listener is attached once per mount, not re-attached whenever
+ * `handlers` changes identity (a fresh object literal every render is the
+ * common case) — the latest `handlers`/`targetOrigin` are read through a
+ * ref on every incoming message instead, avoiding the churn (and, if a
+ * caller's handler closes over `useT()`'s `t`, the infinite-render-loop
+ * gotcha) of listing them as effect dependencies.
+ */
+export declare function useSandboxBridge(options: UseSandboxBridgeOptions): SandboxBridge;
+//# sourceMappingURL=sandbox-bridge.d.ts.map

package/dist/renderers/sandbox-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-bridge.d.ts","sourceRoot":"","sources":["../../src/renderers/sandbox-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkC,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AACvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7E,MAAM,WAAW,uBAAuB;IACtC,wDAAwD;IACxD,SAAS,EAAE,SAAS,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC/C;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,uGAAuG;IACvG,IAAI,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC3C;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,aAAa,CA8BhF"}

package/dist/renderers/sandbox-bridge.js

@@ -0,0 +1,46 @@
+import { useCallback, useEffect, useRef } from 'react';
+/**
+ * Wire a `window` `message` listener scoped to one sandboxed iframe: every
+ * inbound message is checked against `event.source === iframe.contentWindow`
+ * before being dispatched (by `message.type`) to a registered handler, and
+ * `post()` sends a message to that same iframe. This is deliberately just
+ * the transport — it carries no message *vocabulary* of its own. A
+ * consuming feature (deck navigation, comment pinning, an inspector panel,
+ * …) defines its own message shapes and registers handlers for them.
+ *
+ * The listener is attached once per mount, not re-attached whenever
+ * `handlers` changes identity (a fresh object literal every render is the
+ * common case) — the latest `handlers`/`targetOrigin` are read through a
+ * ref on every incoming message instead, avoiding the churn (and, if a
+ * caller's handler closes over `useT()`'s `t`, the infinite-render-loop
+ * gotcha) of listing them as effect dependencies.
+ */
+export function useSandboxBridge(options) {
+    const { iframeRef } = options;
+    const optionsRef = useRef(options);
+    optionsRef.current = options;
+    useEffect(() => {
+        function onMessage(event) {
+            const iframe = iframeRef.current;
+            if (!iframe || event.source !== iframe.contentWindow)
+                return;
+            const data = event.data;
+            if (!data || typeof data.type !== 'string')
+                return;
+            const handler = optionsRef.current.handlers[data.type];
+            handler?.(data);
+        }
+        window.addEventListener('message', onMessage);
+        return () => window.removeEventListener('message', onMessage);
+        // eslint-disable-next-line react-hooks/exhaustive-deps
+    }, [iframeRef]);
+    const post = useCallback((message) => {
+        const iframe = iframeRef.current;
+        const contentWindow = iframe?.contentWindow;
+        if (!contentWindow)
+            return;
+        contentWindow.postMessage(message, optionsRef.current.targetOrigin ?? '*');
+    }, [iframeRef]);
+    return { post };
+}
+//# sourceMappingURL=sandbox-bridge.js.map

package/dist/renderers/sandbox-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-bridge.js","sourceRoot":"","sources":["../../src/renderers/sandbox-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAkB,MAAM,OAAO,CAAC;AA6BvE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAE7B,SAAS,CAAC,GAAG,EAAE;QACb,SAAS,SAAS,CAAC,KAAmB;YACpC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC;YACjC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,aAAa;gBAAE,OAAO;YAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,IAA+C,CAAC;YACnE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO;YACnD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9D,uDAAuD;IACzD,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhB,MAAM,IAAI,GAAG,WAAW,CACtB,CAAC,OAA6B,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC;QACjC,MAAM,aAAa,GAAG,MAAM,EAAE,aAAa,CAAC;QAC5C,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3B,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC,EACD,CAAC,SAAS,CAAC,CACZ,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC"}

package/dist/renderers/sandboxed-document.d.ts

@@ -0,0 +1,34 @@
+import type { SandboxedDocumentOptions, SandboxedDocumentResult } from './types.js';
+/** Whether `html` already looks like a full document (starts with `<!doctype>` or `<html>`), vs. a bare fragment. */
+export declare function isFullHtmlDocument(html: string): boolean;
+/** Wrap a bare HTML fragment in a minimal document shell. Leaves an already-full document untouched. */
+export declare function wrapFragmentAsDocument(html: string): string;
+/** Inject a `<base href>` tag into the document's `<head>`, synthesizing a `<head>` if none exists. */
+export declare function injectBaseHref(doc: string, baseHref: string): string;
+/**
+ * Script that shims `localStorage`/`sessionStorage` with an in-memory store
+ * when the real Storage API throws, and intercepts `<a href>` clicks so
+ * hash-only links scroll within the document (instead of attempting a
+ * sandboxed top-level navigation) and `target="_blank"` links open via
+ * `window.open` behind an `http:`/`https:`/`mailto:` scheme allow-list
+ * (instead of being silently blocked by the iframe sandbox).
+ */
+export declare function buildStorageShimScript(): string;
+/**
+ * Script that suppresses `focus()` calls (on `window` or any element) that
+ * aren't the direct result of a real pointer/keyboard event within the
+ * last second, so embedded content can't steal keyboard focus away from
+ * the host page around it.
+ */
+export declare function buildFocusGuardScript(): string;
+/**
+ * Build a sandboxed-iframe-ready HTML document from arbitrary artifact
+ * HTML: wraps a bare fragment in a minimal document shell, then optionally
+ * injects a `<base href>`, the storage/link-interception shim, and the
+ * focus guard. This is the generic core only — it carries no annotation,
+ * deck-navigation, or collaboration bridge; those layer their own
+ * `postMessage` protocol on top via `useSandboxBridge` in a consuming
+ * feature.
+ */
+export declare function buildSandboxedDocument(html: string, options?: SandboxedDocumentOptions): SandboxedDocumentResult;
+//# sourceMappingURL=sandboxed-document.d.ts.map

package/dist/renderers/sandboxed-document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxed-document.d.ts","sourceRoot":"","sources":["../../src/renderers/sandboxed-document.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEpF,qHAAqH;AACrH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGxD;AAED,wGAAwG;AACxG,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAU3D;AAED,uGAAuG;AACvG,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKpE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAwD/C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CAgC9C;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,wBAA6B,GACrC,uBAAuB,CAUzB"}

package/dist/renderers/sandboxed-document.js

@@ -0,0 +1,152 @@
+import { escapeHtmlAttribute, injectAfterHeadOpen, injectBeforeHeadEnd } from './html-utils.js';
+/** Whether `html` already looks like a full document (starts with `<!doctype>` or `<html>`), vs. a bare fragment. */
+export function isFullHtmlDocument(html) {
+    const head = html.trimStart().slice(0, 64).toLowerCase();
+    return head.startsWith('<!doctype') || head.startsWith('<html');
+}
+/** Wrap a bare HTML fragment in a minimal document shell. Leaves an already-full document untouched. */
+export function wrapFragmentAsDocument(html) {
+    if (isFullHtmlDocument(html))
+        return html;
+    return `<!doctype html>
+<html>
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+  </head>
+  <body>${html}</body>
+</html>`;
+}
+/** Inject a `<base href>` tag into the document's `<head>`, synthesizing a `<head>` if none exists. */
+export function injectBaseHref(doc, baseHref) {
+    const tag = `<base href="${escapeHtmlAttribute(baseHref)}">`;
+    if (/<head[^>]*>/i.test(doc))
+        return doc.replace(/<head[^>]*>/i, (m) => `${m}${tag}`);
+    if (/<html[^>]*>/i.test(doc))
+        return doc.replace(/<html[^>]*>/i, (m) => `${m}<head>${tag}</head>`);
+    return tag + doc;
+}
+/**
+ * Script that shims `localStorage`/`sessionStorage` with an in-memory store
+ * when the real Storage API throws, and intercepts `<a href>` clicks so
+ * hash-only links scroll within the document (instead of attempting a
+ * sandboxed top-level navigation) and `target="_blank"` links open via
+ * `window.open` behind an `http:`/`https:`/`mailto:` scheme allow-list
+ * (instead of being silently blocked by the iframe sandbox).
+ */
+export function buildStorageShimScript() {
+    return `<script data-jini-sandbox-shim>(function(){
+  function makeStore(){
+    var data = {};
+    var api = {
+      getItem: function(k){ return Object.prototype.hasOwnProperty.call(data, k) ? data[k] : null; },
+      setItem: function(k, v){ data[k] = String(v); },
+      removeItem: function(k){ delete data[k]; },
+      clear: function(){ data = {}; },
+      key: function(i){ return Object.keys(data)[i] || null; }
+    };
+    Object.defineProperty(api, 'length', { get: function(){ return Object.keys(data).length; } });
+    return api;
+  }
+  function tryShim(name){
+    var works = false;
+    try { works = !!window[name] && typeof window[name].getItem === 'function'; void window[name].length; }
+    catch (_) { works = false; }
+    if (works) return;
+    try { Object.defineProperty(window, name, { configurable: true, value: makeStore() }); }
+    catch (_) { try { window[name] = makeStore(); } catch (__) {} }
+  }
+  tryShim('localStorage');
+  tryShim('sessionStorage');
+  document.addEventListener('click', function(e){
+    if (!e.target || !(e.target instanceof Element)) return;
+    var link = e.target.closest('a[href]');
+    if (!link) return;
+    var href = link.getAttribute('href');
+    if (href === null) return;
+    var isAnchor = href.indexOf('#') === 0 || href === '';
+    if (isAnchor) {
+      e.preventDefault();
+      if (href === '' || href === '#') {
+        window.scrollTo({ top: 0 });
+        history.replaceState(null, '', ' ');
+      } else {
+        var targetId = href.slice(1);
+        var target = targetId ? document.getElementById(targetId) : null;
+        if (target) {
+          target.scrollIntoView();
+          location.hash === href && history.replaceState(null, '', ' ');
+          location.hash = href;
+        }
+      }
+    } else if (link.getAttribute('target') === '_blank') {
+      e.preventDefault();
+      var safe = false;
+      try {
+        var url = new URL(href, location.href);
+        safe = url.protocol === 'http:' || url.protocol === 'https:' || url.protocol === 'mailto:';
+      } catch (_) {}
+      safe && window.open(href, '_blank', 'noopener,noreferrer');
+    }
+  });
+})();</script>`;
+}
+/**
+ * Script that suppresses `focus()` calls (on `window` or any element) that
+ * aren't the direct result of a real pointer/keyboard event within the
+ * last second, so embedded content can't steal keyboard focus away from
+ * the host page around it.
+ */
+export function buildFocusGuardScript() {
+    return `<script data-jini-focus-guard>(function(){
+  var lastTrustedInputAt = 0;
+  function userActivated(){
+    return Date.now() - lastTrustedInputAt < 1000;
+  }
+  function markTrustedInput(event){
+    if (event && event.isTrusted) lastTrustedInputAt = Date.now();
+  }
+  document.addEventListener('pointerdown', markTrustedInput, true);
+  document.addEventListener('keydown', markTrustedInput, true);
+  try {
+    var nativeWindowFocus = window.focus && window.focus.bind(window);
+    Object.defineProperty(window, 'focus', {
+      configurable: true,
+      writable: true,
+      value: function(){
+        if (userActivated() && nativeWindowFocus) return nativeWindowFocus();
+      }
+    });
+  } catch (_) {}
+  try {
+    var nativeElementFocus = HTMLElement.prototype.focus;
+    Object.defineProperty(HTMLElement.prototype, 'focus', {
+      configurable: true,
+      writable: true,
+      value: function(options){
+        if (userActivated()) return nativeElementFocus.call(this, options);
+      }
+    });
+  } catch (_) {}
+})();</script>`;
+}
+/**
+ * Build a sandboxed-iframe-ready HTML document from arbitrary artifact
+ * HTML: wraps a bare fragment in a minimal document shell, then optionally
+ * injects a `<base href>`, the storage/link-interception shim, and the
+ * focus guard. This is the generic core only — it carries no annotation,
+ * deck-navigation, or collaboration bridge; those layer their own
+ * `postMessage` protocol on top via `useSandboxBridge` in a consuming
+ * feature.
+ */
+export function buildSandboxedDocument(html, options = {}) {
+    const isFullDocument = isFullHtmlDocument(html);
+    const wrapped = wrapFragmentAsDocument(html);
+    const withBase = options.baseHref ? injectBaseHref(wrapped, options.baseHref) : wrapped;
+    const withStorageShim = options.storageShim === false ? withBase : injectAfterHeadOpen(withBase, buildStorageShimScript());
+    const withFocusGuard = options.focusGuard
+        ? injectBeforeHeadEnd(withStorageShim, buildFocusGuardScript())
+        : withStorageShim;
+    return { html: withFocusGuard, isFullDocument };
+}
+//# sourceMappingURL=sandboxed-document.js.map

package/dist/renderers/sandboxed-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxed-document.js","sourceRoot":"","sources":["../../src/renderers/sandboxed-document.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAGhG,qHAAqH;AACrH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,kBAAkB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO;;;;;;UAMC,IAAI;QACN,CAAC;AACT,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,QAAgB;IAC1D,MAAM,GAAG,GAAG,eAAe,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC7D,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;IACtF,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACnG,OAAO,GAAG,GAAG,GAAG,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAsDM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA8BM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,UAAoC,EAAE;IAEtC,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxF,MAAM,eAAe,GACnB,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACrG,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU;QACvC,CAAC,CAAC,mBAAmB,CAAC,eAAe,EAAE,qBAAqB,EAAE,CAAC;QAC/D,CAAC,CAAC,eAAe,CAAC;IACpB,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AAClD,CAAC"}

package/dist/renderers/shiki.d.ts

@@ -0,0 +1,2 @@
+export declare function highlightCode(code: string, lang: string): Promise<string>;
+//# sourceMappingURL=shiki.d.ts.map

package/dist/renderers/shiki.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shiki.d.ts","sourceRoot":"","sources":["../../src/renderers/shiki.ts"],"names":[],"mappings":"AAyCA,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB/E"}

package/dist/renderers/shiki.js

@@ -0,0 +1,55 @@
+let highlighterPromise = null;
+const cache = new Map();
+const CACHE_MAX = 128;
+// The origin project's list also requested 'rust', 'go', 'swift', 'ruby', 'diff',
+// 'toml', 'dockerfile' — this package's pinned `shiki` version's
+// `bundle/web` (a deliberately size-trimmed, browser-focused subset) does
+// not ship grammars for those, so they're dropped here rather than typed
+// around with a cast that would fail at runtime. See `source-map.md`.
+function getHighlighter() {
+    if (!highlighterPromise) {
+        highlighterPromise = import('shiki/bundle/web').then(({ createHighlighter }) => createHighlighter({
+            themes: ['github-light-default', 'github-dark-default'],
+            langs: [
+                'javascript', 'typescript', 'tsx', 'jsx', 'html', 'css', 'json',
+                'python', 'bash', 'shell', 'markdown', 'yaml', 'sql',
+                'java', 'c', 'cpp', 'php', 'xml', 'graphql',
+            ],
+        }));
+    }
+    return highlighterPromise;
+}
+function isDarkMode() {
+    if (typeof document === 'undefined')
+        return false;
+    const theme = document.documentElement.getAttribute('data-theme');
+    if (theme === 'dark')
+        return true;
+    if (theme === 'light')
+        return false;
+    return typeof window !== 'undefined' && window.matchMedia('(prefers-color-scheme: dark)').matches;
+}
+export async function highlightCode(code, lang) {
+    const dark = isDarkMode();
+    const cacheKey = `${dark ? 'd' : 'l'}:${lang}:${code}`;
+    const cached = cache.get(cacheKey);
+    if (cached)
+        return cached;
+    const highlighter = await getHighlighter();
+    const loadedLangs = highlighter.getLoadedLanguages();
+    if (!loadedLangs.includes(lang)) {
+        return '';
+    }
+    const html = highlighter.codeToHtml(code, {
+        lang: lang,
+        theme: dark ? 'github-dark-default' : 'github-light-default',
+    });
+    if (cache.size >= CACHE_MAX) {
+        const first = cache.keys().next().value;
+        if (first !== undefined)
+            cache.delete(first);
+    }
+    cache.set(cacheKey, html);
+    return html;
+}
+//# sourceMappingURL=shiki.js.map

package/dist/renderers/shiki.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shiki.js","sourceRoot":"","sources":["../../src/renderers/shiki.ts"],"names":[],"mappings":"AAOA,IAAI,kBAAkB,GAAsE,IAAI,CAAC;AAEjG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AACxC,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,kFAAkF;AAClF,iEAAiE;AACjE,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,SAAS,cAAc;IACrB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAC7E,iBAAiB,CAAC;YAChB,MAAM,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;YACvD,KAAK,EAAE;gBACL,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;gBAC/D,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK;gBACpD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS;aAC5C;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IAClE,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,WAAW,CAAC,kBAAkB,EAAE,CAAC;IACrD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAuB,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE;QACxC,IAAI,EAAE,IAAuB;QAC7B,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,sBAAsB;KAC7D,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/renderers/srcdoc/bridge.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The srcDoc bridge plugin seam.
+ *
+ * The origin project's `runtime/srcdoc.ts` bakes in a fixed set of
+ * postMessage bridges directly into its srcDoc builder — deck navigation,
+ * comment/inspect element-selection, a CSS tweaks palette, and a manual-edit
+ * overlay. Every one of those is product-specific (their protocols
+ * reference that product's own comment/inspect/edit UI), so none of the
+ * *implementations* are ported here. What's generic and worth keeping is
+ * the *seam*: a srcDoc document is built once, and any number of
+ * independent scripts get a chance to inject themselves into it before it's
+ * handed to the iframe.
+ *
+ * A host (e.g. a product's own adapter) implements {@link SrcDocBridge}
+ * for each bridge it needs and passes them to `buildSrcDoc`'s `bridges`
+ * option; this package's own `MANDATORY_BRIDGES` (sandbox shim, focus
+ * guard) always run first via `srcdoc/build.ts`, not through this seam,
+ * since sandbox/focus safety must not be skippable by a plugin bug.
+ */
+/** Passed to every bridge's `inject` call; carries whatever per-build context the host wants a bridge to see. */
+export interface SrcDocBridgeContext {
+    baseHref?: string | undefined;
+    [key: string]: unknown;
+}
+export interface SrcDocBridge {
+    /** Stable id, referenced by `UrlLoadDecision.activeBridgeIds` (see `url-load-decision.ts`) to say "this bridge is active, force srcDoc mode". */
+    id: string;
+    /** Returns `doc` with this bridge's script/style spliced in. Must be a pure string transform — no I/O. */
+    inject: (doc: string, ctx: SrcDocBridgeContext) => string;
+}
+/**
+ * Runs every bridge's `inject` over `doc` in order. A bridge whose `inject`
+ * throws is skipped (with the original `doc` passed through unchanged) so
+ * one broken host-registered bridge can't blank the whole preview.
+ */
+export declare function applySrcDocBridges(doc: string, bridges: readonly SrcDocBridge[], ctx?: SrcDocBridgeContext): string;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/renderers/srcdoc/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/renderers/srcdoc/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,iHAAiH;AACjH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,iJAAiJ;IACjJ,EAAE,EAAE,MAAM,CAAC;IACX,0GAA0G;IAC1G,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,KAAK,MAAM,CAAC;CAC3D;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,GAAG,GAAE,mBAAwB,GAC5B,MAAM,CAQR"}