@jini-ai/ui 0.4.4 → 0.4.6

package/dist/renderers/sandbox-scripts.js

@@ -0,0 +1,127 @@
+/**
+ * Script that shims `localStorage`/`sessionStorage` with an in-memory store
+ * when the real Storage API throws, and intercepts `<a href>` clicks so
+ * hash-only links scroll within the document (instead of attempting a
+ * sandboxed top-level navigation) and `target="_blank"` links open via
+ * `window.open` behind an `http:`/`https:`/`mailto:` scheme allow-list
+ * (instead of being silently blocked by the iframe sandbox).
+ */
+// Sandboxed iframes (`sandbox="allow-scripts"`, deliberately without
+// `allow-same-origin` — see `react/components/SrcDocSandbox.tsx`) raise a
+// SecurityError on first `localStorage`/`sessionStorage` access. Many
+// freeform-generated artifacts call `localStorage.getItem(...)` at the top
+// of an IIFE with no try/catch — when it throws, the whole script aborts
+// and the artifact renders blank. Installing a same-origin in-memory shim
+// before any user script runs lets those artifacts degrade gracefully
+// (position/state just doesn't persist across reloads) instead of crashing.
+// The same script also intercepts same-document anchor navigation and
+// `target="_blank"` links so they behave sanely inside a sandboxed iframe
+// (`allow-popups`/`allow-popups-to-escape-sandbox` still required on the
+// iframe itself for the latter to actually open).
+export function buildStorageScript({ format }, _optional = {}) {
+    const modern = format === 'srcdoc';
+    return `<script data-jini-sandbox-shim>(function(){
+  function makeStore(){
+    var data = {};
+    var api = {
+      getItem: function(k){ return Object.prototype.hasOwnProperty.call(data, k) ? data[k] : null; },
+      setItem: function(k, v){ data[k] = String(v); },
+      removeItem: function(k){ delete data[k]; },
+      clear: function(){ data = {}; },
+      key: function(i){ return Object.keys(data)[i] || null; }
+    };
+    Object.defineProperty(api, 'length', { get: function(){ return Object.keys(data).length; } });
+    return api;
+  }
+  function tryShim(name){
+    var works = false;
+    try { works = !!window[name] && typeof window[name].getItem === 'function'; void window[name].length; }
+    catch (_) { works = false; }
+    if (works) return;
+    try { Object.defineProperty(window, name, { configurable: true, value: makeStore() }); }
+    catch (_) { try { window[name] = makeStore(); } catch (__) {} }
+  }
+  tryShim('localStorage');
+  tryShim('sessionStorage');
+  document.addEventListener('click', ${modern ? '(e) => {' : 'function(e){'}
+    if (!e.target || !(e.target instanceof Element)) return;
+    var link = e.target.closest('a[href]');
+    if (!link) return;
+    var href = link.getAttribute('href');
+    if (href === null) return;
+    var isAnchor = ${modern ? "href.startsWith('#')" : "href.indexOf('#') === 0"} || href === '';
+    if (isAnchor) {
+      e.preventDefault();
+      if (href === '' || href === '#') {
+        window.scrollTo({ top: 0 });
+        history.replaceState(null, '', ' ');
+      } else {
+        var targetId = href.slice(1);
+        var target = targetId ? document.getElementById(targetId) : null;
+        if (target) {
+          target.scrollIntoView();
+          location.hash === href && history.replaceState(null, '', ' ');
+          location.hash = href;
+        }
+      }
+    } else if (link.getAttribute('target') === '_blank') {
+      e.preventDefault();
+      ${modern ? 'let' : 'var'} safe = false;
+      try {
+        var url = new URL(href, location.href);
+        ${modern ? `safe =
+          url.protocol === 'http:' ||
+          url.protocol === 'https:' ||
+          url.protocol === 'mailto:';` : "safe = url.protocol === 'http:' || url.protocol === 'https:' || url.protocol === 'mailto:';"}
+      } catch (_) {}
+      safe && window.open(href, '_blank', 'noopener,noreferrer');
+    }
+  });
+})();</script>`;
+}
+/**
+ * Script that suppresses `focus()` calls (on `window` or any element) that
+ * aren't the direct result of a real pointer/keyboard event within the
+ * last second, so embedded content can't steal keyboard focus away from
+ * the host page around it.
+ */
+export function buildFocusScript({ format }, _optional = {}) {
+    const preview = format === 'srcdoc';
+    return `<script ${preview ? 'data-jini-preview-focus-guard' : 'data-jini-focus-guard'}>(function(){
+  var lastTrustedInputAt = 0;
+  function userActivated(){
+    return Date.now() - lastTrustedInputAt < 1000;
+  }
+  function markTrustedInput(event){
+    if (event && event.isTrusted) lastTrustedInputAt = Date.now();
+  }
+${preview ? `  document.addEventListener('pointerdown', function(event){
+    markTrustedInput(event);
+  }, true);
+  document.addEventListener('keydown', function(event){
+    markTrustedInput(event);
+  }, true);` : `  document.addEventListener('pointerdown', markTrustedInput, true);
+  document.addEventListener('keydown', markTrustedInput, true);`}
+  try {
+    var nativeWindowFocus = window.focus && window.focus.bind(window);
+    Object.defineProperty(window, 'focus', {
+      configurable: true,
+      writable: true,
+      value: function(){
+        if (userActivated() && nativeWindowFocus) return nativeWindowFocus();
+      }
+    });
+  } catch (_) {}
+  try {
+    var nativeElementFocus = HTMLElement.prototype.focus;
+    Object.defineProperty(HTMLElement.prototype, 'focus', {
+      configurable: true,
+      writable: true,
+      value: function(options){
+        if (userActivated()) return nativeElementFocus.call(this, options);
+      }
+    });
+  } catch (_) {}
+})();</script>`;
+}
+//# sourceMappingURL=sandbox-scripts.js.map

package/dist/renderers/sandboxed-document.js

@@ -1,3 +1,4 @@
+import { buildFocusScript, buildStorageScript } from './sandbox-scripts.js';
 import { escapeHtmlAttribute, injectAfterHeadOpen, injectBeforeHeadEnd } from './html-utils.js';
 /** Whether `html` already looks like a full document (starts with `<!doctype>` or `<html>`), vs. a bare fragment. */
 export function isFullHtmlDocument(html) {
@@ -35,61 +36,7 @@ export function injectBaseHref(doc, baseHref) {
  * (instead of being silently blocked by the iframe sandbox).
  */
 export function buildStorageShimScript() {
-    return `<script data-jini-sandbox-shim>(function(){
-  function makeStore(){
-    var data = {};
-    var api = {
-      getItem: function(k){ return Object.prototype.hasOwnProperty.call(data, k) ? data[k] : null; },
-      setItem: function(k, v){ data[k] = String(v); },
-      removeItem: function(k){ delete data[k]; },
-      clear: function(){ data = {}; },
-      key: function(i){ return Object.keys(data)[i] || null; }
-    };
-    Object.defineProperty(api, 'length', { get: function(){ return Object.keys(data).length; } });
-    return api;
-  }
-  function tryShim(name){
-    var works = false;
-    try { works = !!window[name] && typeof window[name].getItem === 'function'; void window[name].length; }
-    catch (_) { works = false; }
-    if (works) return;
-    try { Object.defineProperty(window, name, { configurable: true, value: makeStore() }); }
-    catch (_) { try { window[name] = makeStore(); } catch (__) {} }
-  }
-  tryShim('localStorage');
-  tryShim('sessionStorage');
-  document.addEventListener('click', function(e){
-    if (!e.target || !(e.target instanceof Element)) return;
-    var link = e.target.closest('a[href]');
-    if (!link) return;
-    var href = link.getAttribute('href');
-    if (href === null) return;
-    var isAnchor = href.indexOf('#') === 0 || href === '';
-    if (isAnchor) {
-      e.preventDefault();
-      if (href === '' || href === '#') {
-        window.scrollTo({ top: 0 });
-        history.replaceState(null, '', ' ');
-      } else {
-        var targetId = href.slice(1);
-        var target = targetId ? document.getElementById(targetId) : null;
-        if (target) {
-          target.scrollIntoView();
-          location.hash === href && history.replaceState(null, '', ' ');
-          location.hash = href;
-        }
-      }
-    } else if (link.getAttribute('target') === '_blank') {
-      e.preventDefault();
-      var safe = false;
-      try {
-        var url = new URL(href, location.href);
-        safe = url.protocol === 'http:' || url.protocol === 'https:' || url.protocol === 'mailto:';
-      } catch (_) {}
-      safe && window.open(href, '_blank', 'noopener,noreferrer');
-    }
-  });
-})();</script>`;
+    return buildStorageScript({ format: 'sandbox' });
 }
 /**
  * Script that suppresses `focus()` calls (on `window` or any element) that
@@ -98,37 +45,7 @@ export function buildStorageShimScript() {
  * the host page around it.
  */
 export function buildFocusGuardScript() {
-    return `<script data-jini-focus-guard>(function(){
-  var lastTrustedInputAt = 0;
-  function userActivated(){
-    return Date.now() - lastTrustedInputAt < 1000;
-  }
-  function markTrustedInput(event){
-    if (event && event.isTrusted) lastTrustedInputAt = Date.now();
-  }
-  document.addEventListener('pointerdown', markTrustedInput, true);
-  document.addEventListener('keydown', markTrustedInput, true);
-  try {
-    var nativeWindowFocus = window.focus && window.focus.bind(window);
-    Object.defineProperty(window, 'focus', {
-      configurable: true,
-      writable: true,
-      value: function(){
-        if (userActivated() && nativeWindowFocus) return nativeWindowFocus();
-      }
-    });
-  } catch (_) {}
-  try {
-    var nativeElementFocus = HTMLElement.prototype.focus;
-    Object.defineProperty(HTMLElement.prototype, 'focus', {
-      configurable: true,
-      writable: true,
-      value: function(options){
-        if (userActivated()) return nativeElementFocus.call(this, options);
-      }
-    });
-  } catch (_) {}
-})();</script>`;
+    return buildFocusScript({ format: 'sandbox' });
 }
 /**
  * Build a sandboxed-iframe-ready HTML document from arbitrary artifact

package/dist/renderers/srcdoc/build.d.ts

@@ -1,16 +1,3 @@
-/**
- * Wrap artifact HTML for a sandboxed iframe (`srcDoc`).
- *
- * Origin: `apps/web/src/runtime/srcdoc.ts` in the origin project (2,689
- * lines). Ported the generic sandbox mechanics only — document wrapping,
- * title sanitization, the same-origin storage shim, the anti-focus-steal
- * guard, and the lazy-transport-shell perf optimization. NOT ported: every
- * postMessage bridge (deck navigation, comment/inspect element-selection,
- * CSS tweaks palette, manual-edit overlay, snapshot/export-capture) — those
- * are that product's own UI protocols. They become `SrcDocBridge` plugins a
- * host registers via `bridges` (see `bridge.ts`), not built-ins. See
- * `archived provenance ledger` for the full file-by-file breakdown.
- */
 import { type SrcDocBridge } from './bridge.js';
 export interface BuildSrcDocOptions {
     /** `<base href>` for the document, so relative asset/script URLs resolve as if served from this path. */
@@ -63,10 +50,16 @@ export declare function sanitizePreviewTitle(text: string): string;
 /**
  * Rewrite the `<title>` element in an HTML string so its text content is
  * filename-safe (see {@link sanitizePreviewTitle}). Only the real `<title>`
- * in the `<head>` region is changed — occurrences inside HTML comments,
- * `<script>`, or `<style>` blocks are left untouched. Pure string
- * operations — no `DOMParser` — so it behaves identically in Node test
- * environments and in the browser.
+ * in the parsed `<head>` is changed — comments, scripts, styles, templates,
+ * and body titles cannot supply it. parse5 owns HTML recovery and single-pass
+ * entity decoding, identically in Node and the browser. Source offsets let us
+ * splice only title content; serializing the document would change unrelated
+ * formatting. A title without an explicit closing tag is left untouched.
+ *
+ * @param html Original document source; never mutated or re-serialized.
+ * @returns Source with the first head title's decoded, filename-safe text.
+ * @complexity O(n) time and space in source length for parsing and splicing.
+ * @example sanitizeTitleInDoc('<title>Q3: Report</title>') // '<title>Q3- Report</title>'
  */
 export declare function sanitizeTitleInDoc(html: string): string;
 /** Splice `payload` right after the opening `<head …>` tag, prepending it when no `<head>` exists. */

package/dist/renderers/srcdoc/build.js

@@ -11,6 +11,10 @@
  * host registers via `bridges` (see `bridge.ts`), not built-ins. See
  * `archived provenance ledger` for the full file-by-file breakdown.
  */
+import { defaultTreeAdapter, parse } from 'parse5';
+import { escapeHtmlAttribute } from '../html-utils.js';
+import { injectBaseHref, wrapFragmentAsDocument } from '../sandboxed-document.js';
+import { buildFocusScript, buildStorageScript } from '../sandbox-scripts.js';
 import { applySrcDocBridges } from './bridge.js';
 /**
  * Default Content-Security-Policy applied to every srcDoc document unless
@@ -24,7 +28,7 @@ import { applySrcDocBridges } from './bridge.js';
  */
 export const DEFAULT_SRC_DOC_CSP = "default-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' blob: data:; style-src 'unsafe-inline'; img-src * data: blob:; font-src * data:; media-src * data: blob:; connect-src *; frame-src *; child-src *; object-src 'none'; base-uri 'none'; form-action 'none';";
 function injectContentSecurityPolicy(doc, csp) {
-    const tag = `<meta http-equiv="Content-Security-Policy" content="${escapeAttr(csp)}">`;
+    const tag = `<meta http-equiv="Content-Security-Policy" content="${escapeHtmlAttribute(csp)}">`;
     return injectAfterHeadOpen(doc, tag);
 }
 /**
@@ -44,106 +48,35 @@ export function sanitizePreviewTitle(text) {
     result = result.replace(/[:#%&*{}\\<>?/+|"]+/g, '-');
     return result.trim();
 }
-const NAMED_ENTITY_MAP = {
-    agrave: 'à', aacute: 'á', acirc: 'â', atilde: 'ã', auml: 'ä', aring: 'å',
-    aelig: 'æ', ccedil: 'ç',
-    egrave: 'è', eacute: 'é', ecirc: 'ê', euml: 'ë',
-    igrave: 'ì', iacute: 'í', icirc: 'î', iuml: 'ï',
-    eth: 'ð', ntilde: 'ñ',
-    ograve: 'ò', oacute: 'ó', ocirc: 'ô', otilde: 'õ', ouml: 'ö', oslash: 'ø',
-    ugrave: 'ù', uacute: 'ú', ucirc: 'û', uuml: 'ü',
-    yacute: 'ý', thorn: 'þ', yuml: 'ÿ',
-    Agrave: 'À', Aacute: 'Á', Acirc: 'Â', Atilde: 'Ã', Auml: 'Ä', Aring: 'Å',
-    AElig: 'Æ', Ccedil: 'Ç',
-    Egrave: 'È', Eacute: 'É', Ecirc: 'Ê', Euml: 'Ë',
-    Igrave: 'Ì', Iacute: 'Í', Icirc: 'Î', Iuml: 'Ï',
-    ETH: 'Ð', Ntilde: 'Ñ',
-    Ograve: 'Ò', Oacute: 'Ó', Ocirc: 'Ô', Otilde: 'Õ', Ouml: 'Ö', Oslash: 'Ø',
-    Ugrave: 'Ù', Uacute: 'Ú', Ucirc: 'Û', Uuml: 'Ü',
-    Yacute: 'Ý', THORN: 'Þ',
-    ndash: '–', mdash: '—', lsquo: '‘', rsquo: '’',
-    ldquo: '“', rdquo: '”', hellip: '…', trade: '™', reg: '®',
-    copy: '©', deg: '°', euro: '€', pound: '£', yen: '¥',
-};
-function safeFromCodePoint(cp) {
-    if (cp < 0 || cp > 0x10ffff)
-        return '�';
-    return String.fromCodePoint(cp);
-}
-function decodeHtmlEntitiesForTitle(encoded) {
-    return encoded
-        .replace(/&([A-Za-z]+);/g, (match, name) => NAMED_ENTITY_MAP[name] ?? match)
-        .replace(/&amp;/gi, '&')
-        .replace(/&lt;/gi, '<')
-        .replace(/&gt;/gi, '>')
-        .replace(/&quot;/gi, '"')
-        .replace(/&apos;/gi, "'")
-        .replace(/&#(\d+);/g, (_, n) => safeFromCodePoint(Number(n)))
-        .replace(/&#x([0-9a-f]+);/gi, (_, h) => safeFromCodePoint(parseInt(h, 16)));
-}
-function findRealTitleOffset(html, searchLimit) {
-    let i = 0;
-    const limit = Math.min(html.length, searchLimit);
-    while (i < limit) {
-        if (html.charCodeAt(i) === 60 /* < */ && html.slice(i, i + 4) === '<!--') {
-            const end = html.indexOf('-->', i + 4);
-            if (end < 0)
-                return -1;
-            i = end + 3;
-            continue;
-        }
-        if (html.charCodeAt(i) === 60 /* < */) {
-            const tagMatch = /^<(script|style)\b/i.exec(html.slice(i, i + 20));
-            if (tagMatch) {
-                const closingTag = `</${tagMatch[1]}`;
-                const end = html.toLowerCase().indexOf(closingTag.toLowerCase(), i + tagMatch[0].length);
-                if (end < 0)
-                    return -1;
-                const closeEnd = html.indexOf('>', end);
-                i = closeEnd >= 0 ? closeEnd + 1 : end + closingTag.length;
-                continue;
-            }
-        }
-        if (html.charCodeAt(i) === 60 /* < */) {
-            if (/^<title[\s>]/i.test(html.slice(i, i + 8))) {
-                return i;
-            }
-        }
-        i++;
-    }
-    return -1;
+/** Finds a direct element child; template contents must not supply the document title. */
+function findElementChild({ parent, tagName }) {
+    return parent?.childNodes.find((node) => defaultTreeAdapter.isElementNode(node) && node.tagName === tagName);
 }
 /**
  * Rewrite the `<title>` element in an HTML string so its text content is
  * filename-safe (see {@link sanitizePreviewTitle}). Only the real `<title>`
- * in the `<head>` region is changed — occurrences inside HTML comments,
- * `<script>`, or `<style>` blocks are left untouched. Pure string
- * operations — no `DOMParser` — so it behaves identically in Node test
- * environments and in the browser.
+ * in the parsed `<head>` is changed — comments, scripts, styles, templates,
+ * and body titles cannot supply it. parse5 owns HTML recovery and single-pass
+ * entity decoding, identically in Node and the browser. Source offsets let us
+ * splice only title content; serializing the document would change unrelated
+ * formatting. A title without an explicit closing tag is left untouched.
+ *
+ * @param html Original document source; never mutated or re-serialized.
+ * @returns Source with the first head title's decoded, filename-safe text.
+ * @complexity O(n) time and space in source length for parsing and splicing.
+ * @example sanitizeTitleInDoc('<title>Q3: Report</title>') // '<title>Q3- Report</title>'
  */
 export function sanitizeTitleInDoc(html) {
-    const lower = html.toLowerCase();
-    const bodyStart = lower.indexOf('<body');
-    const headEnd = lower.lastIndexOf('</head>', bodyStart >= 0 ? bodyStart - 1 : lower.length - 1);
-    const searchLimit = headEnd >= 0 ? headEnd + 7 : bodyStart >= 0 ? bodyStart : html.length;
-    const titleStart = findRealTitleOffset(html, searchLimit);
-    if (titleStart < 0)
+    const document = parse(html, { sourceCodeLocationInfo: true });
+    const root = findElementChild({ parent: document, tagName: 'html' });
+    const head = findElementChild({ parent: root, tagName: 'head' });
+    const title = findElementChild({ parent: head, tagName: 'title' });
+    const location = title?.sourceCodeLocation;
+    if (!title || !location?.startTag || !location.endTag)
         return html;
-    const openTagEnd = html.indexOf('>', titleStart);
-    if (openTagEnd < 0)
-        return html;
-    const closingTagStart = html.toLowerCase().indexOf('</title>', openTagEnd + 1);
-    if (closingTagStart < 0)
-        return html;
-    const closingTagEnd = html.indexOf('>', closingTagStart);
-    if (closingTagEnd < 0)
-        return html;
-    const openTag = html.slice(titleStart, openTagEnd + 1);
-    const rawContent = html.slice(openTagEnd + 1, closingTagStart);
-    const closeTag = html.slice(closingTagStart, closingTagEnd + 1);
-    const decoded = decodeHtmlEntitiesForTitle(rawContent);
+    const decoded = title.childNodes.filter(defaultTreeAdapter.isTextNode).map((node) => node.value).join('');
     const safe = sanitizePreviewTitle(decoded);
-    return html.slice(0, titleStart) + openTag + safe + closeTag + html.slice(closingTagEnd + 1);
+    return html.slice(0, location.startTag.endOffset) + safe + html.slice(location.endTag.startOffset);
 }
 function serializeHtmlDocument(doc) {
     const doctype = doc.doctype ? '<!doctype html>\n' : '';
@@ -205,133 +138,8 @@ export function injectBeforeBodyEnd(doc, payload) {
     }
     return doc + payload;
 }
-function escapeAttr(value) {
-    return value.replace(/&/g, '&amp;').replace(/"/g, '&quot;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
-}
-function injectBaseHref(doc, baseHref) {
-    const safeHref = escapeAttr(baseHref);
-    const tag = `<base href="${safeHref}">`;
-    if (/<head[^>]*>/i.test(doc)) {
-        return doc.replace(/<head[^>]*>/i, (m) => `${m}${tag}`);
-    }
-    if (/<html[^>]*>/i.test(doc)) {
-        return doc.replace(/<html[^>]*>/i, (m) => `${m}<head>${tag}</head>`);
-    }
-    return tag + doc;
-}
-// Sandboxed iframes (`sandbox="allow-scripts"`, deliberately without
-// `allow-same-origin` — see `react/components/SrcDocSandbox.tsx`) raise a
-// SecurityError on first `localStorage`/`sessionStorage` access. Many
-// freeform-generated artifacts call `localStorage.getItem(...)` at the top
-// of an IIFE with no try/catch — when it throws, the whole script aborts
-// and the artifact renders blank. Installing a same-origin in-memory shim
-// before any user script runs lets those artifacts degrade gracefully
-// (position/state just doesn't persist across reloads) instead of crashing.
-// The same script also intercepts same-document anchor navigation and
-// `target="_blank"` links so they behave sanely inside a sandboxed iframe
-// (`allow-popups`/`allow-popups-to-escape-sandbox` still required on the
-// iframe itself for the latter to actually open).
-function injectSandboxShim(doc) {
-    const shim = `<script data-jini-sandbox-shim>(function(){
-  function makeStore(){
-    var data = {};
-    var api = {
-      getItem: function(k){ return Object.prototype.hasOwnProperty.call(data, k) ? data[k] : null; },
-      setItem: function(k, v){ data[k] = String(v); },
-      removeItem: function(k){ delete data[k]; },
-      clear: function(){ data = {}; },
-      key: function(i){ return Object.keys(data)[i] || null; }
-    };
-    Object.defineProperty(api, 'length', { get: function(){ return Object.keys(data).length; } });
-    return api;
-  }
-  function tryShim(name){
-    var works = false;
-    try { works = !!window[name] && typeof window[name].getItem === 'function'; void window[name].length; }
-    catch (_) { works = false; }
-    if (works) return;
-    try { Object.defineProperty(window, name, { configurable: true, value: makeStore() }); }
-    catch (_) { try { window[name] = makeStore(); } catch (__) {} }
-  }
-  tryShim('localStorage');
-  tryShim('sessionStorage');
-  document.addEventListener('click', (e) => {
-    if (!e.target || !(e.target instanceof Element)) return;
-    var link = e.target.closest('a[href]');
-    if (!link) return;
-    var href = link.getAttribute('href');
-    if (href === null) return;
-    var isAnchor = href.startsWith('#') || href === '';
-    if (isAnchor) {
-      e.preventDefault();
-      if (href === '' || href === '#') {
-        window.scrollTo({ top: 0 });
-        history.replaceState(null, '', ' ');
-      } else {
-        var targetId = href.slice(1);
-        var target = targetId ? document.getElementById(targetId) : null;
-        if (target) {
-          target.scrollIntoView();
-          location.hash === href && history.replaceState(null, '', ' ');
-          location.hash = href;
-        }
-      }
-    } else if (link.getAttribute('target') === '_blank') {
-      e.preventDefault();
-      let safe = false;
-      try {
-        var url = new URL(href, location.href);
-        safe =
-          url.protocol === 'http:' ||
-          url.protocol === 'https:' ||
-          url.protocol === 'mailto:';
-      } catch (_) {}
-      safe && window.open(href, '_blank', 'noopener,noreferrer');
-    }
-  });
-})();</script>`;
-    if (/<head[^>]*>/i.test(doc))
-        return doc.replace(/<head[^>]*>/i, (m) => `${m}${shim}`);
-    if (/<body[^>]*>/i.test(doc))
-        return doc.replace(/<body[^>]*>/i, (m) => `${m}${shim}`);
-    return shim + doc;
-}
-function injectPreviewFocusGuard(doc) {
-    const script = `<script data-jini-preview-focus-guard>(function(){
-  var lastTrustedInputAt = 0;
-  function userActivated(){
-    return Date.now() - lastTrustedInputAt < 1000;
-  }
-  function markTrustedInput(event){
-    if (event && event.isTrusted) lastTrustedInputAt = Date.now();
-  }
-  document.addEventListener('pointerdown', function(event){
-    markTrustedInput(event);
-  }, true);
-  document.addEventListener('keydown', function(event){
-    markTrustedInput(event);
-  }, true);
-  try {
-    var nativeWindowFocus = window.focus && window.focus.bind(window);
-    Object.defineProperty(window, 'focus', {
-      configurable: true,
-      writable: true,
-      value: function(){
-        if (userActivated() && nativeWindowFocus) return nativeWindowFocus();
-      }
-    });
-  } catch (_) {}
-  try {
-    var nativeElementFocus = HTMLElement.prototype.focus;
-    Object.defineProperty(HTMLElement.prototype, 'focus', {
-      configurable: true,
-      writable: true,
-      value: function(options){
-        if (userActivated()) return nativeElementFocus.call(this, options);
-      }
-    });
-  } catch (_) {}
-})();</script>`;
+/** Srcdoc keeps its head/body/prepend fallback instead of the generic builder's string-only head insertion. */
+function injectSandboxScript(doc, script) {
     if (/<head[^>]*>/i.test(doc))
         return doc.replace(/<head[^>]*>/i, (m) => `${m}${script}`);
     if (/<body[^>]*>/i.test(doc))
@@ -421,24 +229,13 @@ export function canActivateSrcDocTransport(state) {
 export function buildSrcDoc(html, options = {}) {
     if (options.lazyTransport)
         return buildLazySrcDocTransport();
-    const head = html.trimStart().slice(0, 64).toLowerCase();
-    const isFullDoc = head.startsWith('<!doctype') || head.startsWith('<html');
-    const wrapped = isFullDoc
-        ? html
-        : `<!doctype html>
-<html>
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-  </head>
-  <body>${html}</body>
-</html>`;
+    const wrapped = wrapFragmentAsDocument(html);
     const withSafeTitle = sanitizeTitleInDoc(wrapped);
     const cspValue = options.csp === false ? null : options.csp === true || options.csp === undefined ? DEFAULT_SRC_DOC_CSP : options.csp;
     const withCsp = cspValue ? injectContentSecurityPolicy(withSafeTitle, cspValue) : withSafeTitle;
     const withBase = options.baseHref ? injectBaseHref(withCsp, options.baseHref) : withCsp;
-    const withShim = injectSandboxShim(withBase);
-    const withFocusGuard = options.previewFocusGuard ? injectPreviewFocusGuard(withShim) : withShim;
+    const withShim = injectSandboxScript(withBase, buildStorageScript({ format: 'srcdoc' }));
+    const withFocusGuard = options.previewFocusGuard ? injectSandboxScript(withShim, buildFocusScript({ format: 'srcdoc' })) : withShim;
     const ctx = { baseHref: options.baseHref, ...options.bridgeContext };
     const withBridges = options.bridges?.length
         ? applySrcDocBridges(withFocusGuard, options.bridges, ctx)

package/dist/styles/variables.css

@@ -36,7 +36,7 @@
    lightness band, chroma floor, CVD >= 8 (worst 10.1 deutan light, 10.9 dark), normal-vision >= 15,
    >= 3:1 contrast — all pass. Dark is stepped for the dark surface, not a flip of light: dark
    series 1 sits a step lighter, because the light orange's chroma reads grey as a large fill on a
-   near-black surface. This was Tovu admin's palette first (Tovu b183ca5a8). */
+   near-black surface. This was an adopting admin shell's palette first (host commit b183ca5a8). */
 :root, [data-color-scheme="light"], [data-theme="light"] {
   --jini-chart-default-1: oklch(55.29% 0.1129 43.4);
   --jini-chart-default-2: oklch(50% 0.11 240);
@@ -47,7 +47,7 @@
 }
 
 /* Both dark attributes: the base tokens above flip on `data-color-scheme`, while hosts that follow
-   this package's `data-theme` convention on <html> (sketch-editor, shiki, Tovu's admin) flip that. */
+   this package's `data-theme` convention on <html> (sketch-editor, shiki, host admin shells) flip that. */
 [data-color-scheme="dark"], [data-theme="dark"] {
   --jini-chart-default-1: oklch(62% 0.11 44);
   --jini-chart-default-2: oklch(64% 0.11 240);

package/dist/theme/apply.d.ts

@@ -1,4 +1,4 @@
-import type { AdminTheme, AdminThemeDocument, AdminThemeTarget } from './types.js';
+import type { AdminTheme, AdminThemeDocument, AdminThemeTarget } from '../core/theme/types.js';
 /** Install both palettes on the injected scope and load fonts. Cleanup restores the host. */
 export declare function applyAdminTheme({ theme }: {
     readonly theme: AdminTheme;

package/dist/theme/apply.js

@@ -1,5 +1,5 @@
-import { defaultAdminTheme } from './default.js';
-import { adminThemeColorKeys, validateAdminTheme } from './validation.js';
+import { defaultAdminTheme } from '../core/theme/default.js';
+import { adminThemeColorKeys, validateAdminTheme } from '../core/theme/validation.js';
 const fontLeases = new WeakMap();
 function acquireFont(document, href) {
     const leases = fontLeases.get(document) ?? new Map();

package/dist/theme/color-scheme.d.ts

@@ -1,4 +1,4 @@
-import type { ColorScheme, ColorSchemePreference, MatchMediaPort } from './types.js';
+import type { ColorScheme, ColorSchemePreference, MatchMediaPort } from '../core/theme/types.js';
 /** Explicit choices are deterministic; system resolution requires the host's media port. */
 export declare function resolveColorScheme({ preference }: {
     readonly preference: ColorSchemePreference;

package/dist/theme/default.d.ts

@@ -1,4 +1,2 @@
-import type { AdminTheme } from './types.js';
-/** Neutral chrome. Products supply their own brand theme instead of forking CSS. */
-export declare const defaultAdminTheme: AdminTheme;
+export * from '../core/theme/default.js';
 //# sourceMappingURL=default.d.ts.map

package/dist/theme/default.js

@@ -1,11 +1,3 @@
-/** Neutral chrome. Products supply their own brand theme instead of forking CSS. */
-export const defaultAdminTheme = Object.freeze({
-    name: 'neutral',
-    fonts: Object.freeze({ body: 'system-ui, sans-serif', heading: 'system-ui, sans-serif', mono: 'ui-monospace, monospace' }),
-    light: Object.freeze({ primary: '#363636', primaryInk: '#ffffff', bg: '#ffffff', surface: '#f5f5f5',
-        text: '#202020', muted: '#666666', border: '#d9d9d9', danger: '#b42318', success: '#18763b', warning: '#845800' }),
-    dark: Object.freeze({ primary: '#e0e0e0', primaryInk: '#202020', bg: '#171717', surface: '#242424',
-        text: '#f0f0f0', muted: '#b3b3b3', border: '#454545', danger: '#ff8b80', success: '#79d69b', warning: '#ebc36b' }),
-    radius: '8px', density: 1,
-});
+// Compatibility path; the shared implementation lives in core.
+export * from '../core/theme/default.js';
 //# sourceMappingURL=default.js.map