@json-to-office/shared 3.0.0 → 3.2.0

package/dist/fonts/node.d.ts

@@ -1,4 +1,4 @@
-import { R as ResolvedFontSource, a as RasterizeFontFace, b as ResolvedFont } from '../types-kcQwhOlf.js';
+import { R as ResolvedFontSource, a as RasterizeFontFace, b as ResolvedFont } from '../types-DyQ0V9MU.js';
 import { GenerationWarning } from '../types/warnings.js';
 import '@sinclair/typebox';
 

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export { C as ComponentDefinition, a as ComponentSchemaConfig, c as convertToJsonSchema, b as createComponentSchema, d as createComponentSchemaObject, e as exportSchemaToFile, f as fixSchemaReferences } from './schema-utils-B2i75lAT.js';
 export { AddWarningFunction, GenerationWarning } from './types/warnings.js';
-import { F as FontRegistryEntry, c as FontRuntimeOpts, R as ResolvedFontSource, b as ResolvedFont, a as RasterizeFontFace } from './types-kcQwhOlf.js';
-export { D as DEFAULT_VISUAL_DPI, d as FontFamilyNameSchema, e as FontRegistryDefinition, f as FontRegistryEntrySchema, g as FontRegistrySchema, h as FontSource, i as FontSourceSchema, H as HighchartsHeaders, j as HighchartsHeadersResolver, k as HighchartsServiceConfig, M as MAX_RASTERIZE_BATCH_SLIDES, l as MAX_RASTERIZE_FONTS, m as MAX_RASTERIZE_FONT_BYTES, n as MAX_VISUAL_DPI, o as MIN_VISUAL_DPI, P as PptxBatchRasterizer, p as PptxRasterizeBatchRequest, q as PptxRasterizeBatchResult, r as PptxRasterizeBatchSlide, s as PptxRasterizeBatchSlideResult, t as PptxRasterizeFailureStage, u as PptxRasterizeRequest, v as PptxRasterizeResult, w as PptxRasterizer, x as PptxServiceConfig, y as PptxServiceHeaders, z as PptxServiceHeadersResolver, S as SAFE_FONTS, A as SafeFontName, B as ServicesConfig, C as clampVisualDpi, E as isSafeFont } from './types-kcQwhOlf.js';
+import { F as FontRegistryEntry, c as FontRuntimeOpts, R as ResolvedFontSource, b as ResolvedFont, a as RasterizeFontFace } from './types-DyQ0V9MU.js';
+export { D as DEFAULT_VISUAL_DPI, d as FontFamilyNameSchema, e as FontRegistryDefinition, f as FontRegistryEntrySchema, g as FontRegistrySchema, h as FontSource, i as FontSourceSchema, H as HighchartsHeaders, j as HighchartsHeadersResolver, k as HighchartsServiceConfig, M as MAX_RASTERIZE_BATCH_SLIDES, l as MAX_RASTERIZE_FONTS, m as MAX_RASTERIZE_FONT_BYTES, n as MAX_VISUAL_DPI, o as MIN_VISUAL_DPI, P as PptxBatchRasterizer, p as PptxRasterizeBatchRequest, q as PptxRasterizeBatchResult, r as PptxRasterizeBatchSlide, s as PptxRasterizeBatchSlideResult, t as PptxRasterizeFailureStage, u as PptxRasterizeRequest, v as PptxRasterizeResult, w as PptxRasterizer, x as PptxServiceConfig, y as PptxServiceHeaders, z as PptxServiceHeadersResolver, S as SAFE_FONTS, A as SafeFontName, B as ServicesConfig, C as clampVisualDpi, E as isSafeFont } from './types-DyQ0V9MU.js';
 import { O as OfficeFormat } from './capabilities-DtPF3aBj.js';
 export { F as FeatureRequirement, a as FeatureRequirementCollector, b as OfficeRenderer, R as RENDERER_DEPENDENCY_MISSING, c as RenderOptions, d as RendererDiagnostic, e as RendererDiagnosticSeverity, f as RendererRegistry, g as RendererStatus, h as UnsupportedRendererFeatureError, i as UnsupportedRendererFeatureErrorInit, j as assertNever, k as assertRendererSupports, l as diagnoseUnsupportedFeatures, p as partitionDiagnostics, r as rendererError, m as rendererWarning } from './capabilities-DtPF3aBj.js';
 export { DEFAULT_ERROR_CONFIG, ERROR_EMOJIS, ErrorFormatterConfig, calculatePosition, clearComponentNamesCache, createErrorConfig, createJsonParseError, extractStandardComponentNames, formatErrorMessage, formatErrorSummary, getLiteralValue, getObjectSchemaPropertyNames, getSchemaMetadata, groupErrorsByPath, isLiteralSchema, isObjectSchema, isUnionSchema, transformValueError, transformValueErrors } from './validation/unified/index.js';
@@ -1822,6 +1822,19 @@ declare class JsonBlockEvaluator {
     private nodes;
     constructor(definitions: Record<string, JsonBlockDefinition>, options: BlockEvaluatorOptions);
     private guard;
+    /**
+     * A directive operand and the authored pointer it came from: the slot the
+     * pointer form names, or the current item, slot or context a reference
+     * object names. Definitions are validated before this runs, so a malformed
+     * operand cannot reach it.
+     */
+    private operand;
+    /**
+     * What a reference reads and where the author wrote it. One resolution for
+     * the binding form and the operand form, so `{ "$context": ... }` is
+     * attributed the same way whichever directive carries it.
+     */
+    private reference;
     evaluate(value: unknown, env: BlockEnvironment, out: string, definitionPath: string, depth?: number): unknown;
     expand(value: unknown, path?: string, depth?: number): unknown;
 }
@@ -2030,4 +2043,25 @@ declare function blockReferencesFromDocument(document: unknown, source: {
  */
 declare function mergeWithDefaults<T>(userConfig: T, themeDefaults: Partial<T>): T;
 
-export { BLOCK_SLOT_PLACEMENT_PROPS, BLOCK_SLOT_ROLES, type BlockComposition, type BlockCompositionOptions, BlockDefinitionsSchema, type BlockEnvironment, BlockEvaluationError, type BlockEvaluatorOptions, type BlockInvocationExample, BlockInvocationPropsSchema, type BlockIssue, type BlockReference, type BlockSectionEffect, type BlockSlideEffect, type BlockSlot, type BlockSlotBudget, type BlockSlotRole, type BlockSlotRoleValue, BlockSlotSchema, type BlockSourceMap, CANVASES, type ChartTypography, ChromeSchema, DEFAULT_CHART_THEME_COLORS, type DesignCanvas, DesignSpacingSchema, type DesignSystem, DesignSystemProperties, DesignSystemSchema, type DocumentBlockTarget, type ExpandedBlocks, FONT_URL_ALLOWLIST, type FontIssueCode, FontRegistry, FontRegistryEntry, type FontRegistryInput, type FontResolutionIssue, FontRuntimeOpts, type FontSubstitution, type FontValidationInput, type FontValidationResult, type JsonBlockDefinition, JsonBlockDefinitionSchema, JsonBlockEvaluator, MotifSchema, OfficeFormat, POINTS_PER_PIXEL_96DPI, POPULAR_GOOGLE_FONTS, PaletteSchema, type PopularGoogleFont, ROLE_SCALE_STEPS, RasterizeFontFace, ResolvedFont, ResolvedFontSource, type SynthesizedFamily, TYPE_ROLES, TextCaseSchema, type TypeRole, type TypeRoleName, TypeRoleNameSchema, TypeRoleSchema, TypeRolesSchema, TypographySchema, UPSTREAM_OVERRIDES, type UpstreamOverride, type UpstreamVariant, WEIGHT_LABELS, applyDocumentBlocksToSchema, applyExportMode, applyFontSubstitution, blockDependencies, blockInvocationExample, blockInvocationPropsSchema, blockPointerKey, blockReferencesFromDocument, blockSlotBudgets, blockSlotEditorSchema, blockSlotFacts, blockSlotJsonSchema, blockSlotMarkdown, blockSlotRoles, blockSlotsEditorSchema, blockSlotsJsonSchema, blockValueAt, blockWordCount, buildDefaultSubstitutionMap, capsFormatting, chartFamilyResolver, chartFontFaceCss, chartPointsPerPixel, collectFontNamesFromDocx, collectFontNamesFromPptx, composeBlocksWithPlugins, createBlockAuthoringSchema, cssFontFamily, defaultSubstituteFor, designCanvas, designColors, detectFontFormat, documentBlockMetadata, documentFontRegistry, fetchGoogleFontSources, getUpstreamOverride, isAllowedFontUrl, isBlockRecord, mergeFontRegistries, mergeWithDefaults, readBlockDefinitions, resolveBlockSlot, resolveDesignColor, resolveTypeRoles, restructureNameDiscriminatedUnions, rewriteFontFamilyName, synthesizeFamilyName, themeFontRegistry, toAuthoredBlockPointer, unionBranches, validateBlockDefinitions, validateBlockInvocations, validateDesignColors, validateFontReferences, withChartFontFaceCss, withChartTypography };
+/**
+ * Whether a service URL stays on this machine or a private network.
+ *
+ * The question the `highcharts` component has to answer before it posts a
+ * chart — every series, label and title — to an export server. Only what an
+ * address itself proves counts: loopback, RFC 1918, link-local and
+ * unique-local literals, `localhost`, and the special-use names reserved for
+ * private resolution (`.local`, `.internal`, `.home.arpa`). A hostname that
+ * DNS decides — a bare label, a `.corp` — is not guessed at: it needs
+ * `services.highcharts.allowRemote`, like any other.
+ */
+declare function isPrivateServiceUrl(url: string): boolean;
+/** Warning code for a chart posted outside the private network. */
+declare const REMOTE_EXPORT_WARNING = "W_HIGHCHARTS_REMOTE_EXPORT";
+/**
+ * A public export server is a decision, not a default: the request carries
+ * the whole chart, data included. Throws unless the caller opted in; when it
+ * did, returns the sentence each pipeline records as a warning.
+ */
+declare function remoteExportNotice(serverUrl: string, allowRemote: boolean | undefined): string | undefined;
+
+export { BLOCK_SLOT_PLACEMENT_PROPS, BLOCK_SLOT_ROLES, type BlockComposition, type BlockCompositionOptions, BlockDefinitionsSchema, type BlockEnvironment, BlockEvaluationError, type BlockEvaluatorOptions, type BlockInvocationExample, BlockInvocationPropsSchema, type BlockIssue, type BlockReference, type BlockSectionEffect, type BlockSlideEffect, type BlockSlot, type BlockSlotBudget, type BlockSlotRole, type BlockSlotRoleValue, BlockSlotSchema, type BlockSourceMap, CANVASES, type ChartTypography, ChromeSchema, DEFAULT_CHART_THEME_COLORS, type DesignCanvas, DesignSpacingSchema, type DesignSystem, DesignSystemProperties, DesignSystemSchema, type DocumentBlockTarget, type ExpandedBlocks, FONT_URL_ALLOWLIST, type FontIssueCode, FontRegistry, FontRegistryEntry, type FontRegistryInput, type FontResolutionIssue, FontRuntimeOpts, type FontSubstitution, type FontValidationInput, type FontValidationResult, type JsonBlockDefinition, JsonBlockDefinitionSchema, JsonBlockEvaluator, MotifSchema, OfficeFormat, POINTS_PER_PIXEL_96DPI, POPULAR_GOOGLE_FONTS, PaletteSchema, type PopularGoogleFont, REMOTE_EXPORT_WARNING, ROLE_SCALE_STEPS, RasterizeFontFace, ResolvedFont, ResolvedFontSource, type SynthesizedFamily, TYPE_ROLES, TextCaseSchema, type TypeRole, type TypeRoleName, TypeRoleNameSchema, TypeRoleSchema, TypeRolesSchema, TypographySchema, UPSTREAM_OVERRIDES, type UpstreamOverride, type UpstreamVariant, WEIGHT_LABELS, applyDocumentBlocksToSchema, applyExportMode, applyFontSubstitution, blockDependencies, blockInvocationExample, blockInvocationPropsSchema, blockPointerKey, blockReferencesFromDocument, blockSlotBudgets, blockSlotEditorSchema, blockSlotFacts, blockSlotJsonSchema, blockSlotMarkdown, blockSlotRoles, blockSlotsEditorSchema, blockSlotsJsonSchema, blockValueAt, blockWordCount, buildDefaultSubstitutionMap, capsFormatting, chartFamilyResolver, chartFontFaceCss, chartPointsPerPixel, collectFontNamesFromDocx, collectFontNamesFromPptx, composeBlocksWithPlugins, createBlockAuthoringSchema, cssFontFamily, defaultSubstituteFor, designCanvas, designColors, detectFontFormat, documentBlockMetadata, documentFontRegistry, fetchGoogleFontSources, getUpstreamOverride, isAllowedFontUrl, isBlockRecord, isPrivateServiceUrl, mergeFontRegistries, mergeWithDefaults, readBlockDefinitions, remoteExportNotice, resolveBlockSlot, resolveDesignColor, resolveTypeRoles, restructureNameDiscriminatedUnions, rewriteFontFamilyName, synthesizeFamilyName, themeFontRegistry, toAuthoredBlockPointer, unionBranches, validateBlockDefinitions, validateBlockInvocations, validateDesignColors, validateFontReferences, withChartFontFaceCss, withChartTypography };

package/dist/index.js

@@ -1738,6 +1738,7 @@ var BLOCK_DIRECTIVES = {
   $join: { keys: ["$join", "separator", "keepEmpty"], result: "string" },
   $measure: { keys: ["$measure", "fraction", "unit"], result: "number" }
 };
+var BLOCK_OPERAND_ROOTS = ["$item", "$slot", "$context"];
 
 // src/blocks/evaluator.ts
 import { Value } from "@sinclair/typebox/value";
@@ -1920,6 +1921,21 @@ function slotDescriptorAt(slots, pointer2) {
   }
   return descriptor;
 }
+var OPERAND_DIRECTIVES = ["$if", "$each", "$count"];
+var isPointer = (value) => typeof value === "string" && (value === "" || value.startsWith("/"));
+function blockOperand(value, key) {
+  if (isPointer(value))
+    return {
+      root: OPERAND_DIRECTIVES.includes(key) ? "$slot" : key,
+      pointer: value
+    };
+  if (!OPERAND_DIRECTIVES.includes(key) || !isBlockRecord(value))
+    return void 0;
+  const keys = Object.keys(value);
+  const root = BLOCK_OPERAND_ROOTS.find((candidate) => candidate === keys[0]);
+  if (keys.length !== 1 || !root || !isPointer(value[root])) return void 0;
+  return { root, pointer: value[root] };
+}
 function checkTemplate(value, path, slots, issues, repeated = false, depth = 0) {
   if (depth > 64) {
     issues.push({
@@ -1957,20 +1973,20 @@ function checkTemplate(value, path, slots, issues, repeated = false, depth = 0)
       "$each",
       "$count"
     ].includes(key)) {
-      const pointer2 = value[key];
-      if (typeof pointer2 !== "string" || pointer2 !== "" && !pointer2.startsWith("/"))
+      const operand = blockOperand(value[key], key);
+      if (!operand)
         issues.push({
           path,
           code: "block_invalid_binding",
-          message: "Bindings use JSON Pointers, e.g. /title."
+          message: OPERAND_DIRECTIVES.includes(key) ? `${key} takes a slot pointer such as /items, or one reference: ${BLOCK_OPERAND_ROOTS.map((root) => `{ "${root}": ... }`).join(", ")}.` : "Bindings use JSON Pointers, e.g. /title."
         });
-      else if (["$slot", "$if", "$each", "$count"].includes(key)) {
-        const descriptor = slotDescriptorAt(slots, pointer2);
+      else if (operand.root === "$slot") {
+        const descriptor = slotDescriptorAt(slots, operand.pointer);
         if (!descriptor)
           issues.push({
             path,
             code: "block_unknown_binding",
-            message: `No slot field '${pointer2}' is declared.`
+            message: `No slot field '${operand.pointer}' is declared.`
           });
         else if (["$each", "$count"].includes(key) && descriptor.type !== "array")
           issues.push({
@@ -1979,7 +1995,7 @@ function checkTemplate(value, path, slots, issues, repeated = false, depth = 0)
             message: `${key} requires an array slot.`
           });
       }
-      if (key === "$item" && !repeated)
+      if (operand?.root === "$item" && !repeated)
         issues.push({
           path,
           code: "block_invalid_binding",
@@ -2164,6 +2180,55 @@ var JsonBlockEvaluator = class {
         "Block expansion exceeds the depth/node limit (64/50000)."
       );
   }
+  /**
+   * A directive operand and the authored pointer it came from: the slot the
+   * pointer form names, or the current item, slot or context a reference
+   * object names. Definitions are validated before this runs, so a malformed
+   * operand cannot reach it.
+   */
+  operand(raw, key, env) {
+    const { root, pointer: pointer2 } = blockOperand(raw, key);
+    const { value, source } = this.reference(root, pointer2, env);
+    return {
+      value,
+      source,
+      // Element i of the array is authored at pointer/i, looked up the same
+      // way: a slot the enclosing invocation built from its own repeat maps
+      // element by element, and pointer + "/i" is not the same as that.
+      element: (index) => this.reference(root, `${pointer2}/${index}`, env).source
+    };
+  }
+  /**
+   * What a reference reads and where the author wrote it. One resolution for
+   * the binding form and the operand form, so `{ "$context": ... }` is
+   * attributed the same way whichever directive carries it.
+   */
+  reference(root, pointer2, env) {
+    if (root === "$item")
+      return {
+        value: blockValueAt(env.item, pointer2),
+        source: `${env.itemSource ?? env.source}${pointer2}`
+      };
+    if (root === "$context") {
+      const authored = toAuthoredBlockPointer(
+        env.contextSources ?? {},
+        pointer2
+      );
+      return {
+        value: blockValueAt(env.context, pointer2),
+        source: authored === pointer2 ? env.source : authored
+      };
+    }
+    if (root === "$theme")
+      return {
+        value: blockValueAt(this.options.theme, pointer2),
+        source: env.source
+      };
+    return {
+      value: blockValueAt(env.slots, pointer2),
+      source: env.slotSources ? toAuthoredBlockPointer(env.slotSources, pointer2) : `${env.source}/props/slots${pointer2}`
+    };
+  }
   evaluate(value, env, out, definitionPath, depth = 0) {
     this.guard(env.source, depth);
     this.sourceMap[out] = env.source;
@@ -2201,14 +2266,12 @@ var JsonBlockEvaluator = class {
         (k) => k in value
       );
       const pointer2 = value[key];
-      const root = key === "$slot" ? env.slots : key === "$item" ? env.item : key === "$theme" ? this.options.theme : env.context;
-      const found = blockValueAt(root, pointer2);
-      if (key === "$slot")
-        this.sourceMap[out] = env.slotSources ? toAuthoredBlockPointer(env.slotSources, pointer2) : `${env.source}/props/slots${pointer2}`;
-      if (key === "$item")
-        this.sourceMap[out] = `${env.itemSource ?? env.source}${pointer2}`;
-      if (key === "$context")
-        this.sourceMap[out] = toAuthoredBlockPointer(env.contextSources ?? {}, pointer2) === pointer2 ? env.source : toAuthoredBlockPointer(env.contextSources ?? {}, pointer2);
+      const { value: found, source } = this.reference(
+        key,
+        pointer2,
+        env
+      );
+      this.sourceMap[out] = source;
       let result2 = found !== void 0 ? structuredClone(found) : void 0;
       if (result2 === void 0 && own(value, "default"))
         result2 = this.evaluate(
@@ -2251,31 +2314,33 @@ var JsonBlockEvaluator = class {
       }
       return result2;
     }
-    if ("$if" in value)
-      return this.evaluate(
-        present(blockValueAt(env.slots, value.$if)) ? value.then : value.else,
-        env,
-        out,
-        definitionPath,
-        depth + 1
-      );
+    if ("$if" in value) {
+      const operand = this.operand(value.$if, "$if", env);
+      const branch = present(operand.value) ? value.then : value.else;
+      const result2 = this.evaluate(branch, env, out, definitionPath, depth + 1);
+      const literal = !isBlockRecord(branch) || !Object.keys(branch).some((k) => k.startsWith("$"));
+      if (literal && this.sourceMap[out] === env.source)
+        this.sourceMap[out] = operand.source;
+      return result2;
+    }
     if ("$count" in value) {
-      const list = blockValueAt(env.slots, value.$count);
-      if (!Array.isArray(list))
+      const operand = this.operand(value.$count, "$count", env);
+      if (!Array.isArray(operand.value))
         return fail(
-          `${env.source}/props/slots${value.$count}`,
+          operand.source,
           "block_slot_type",
-          "$count requires an array slot."
+          "$count requires an array."
         );
-      return list.length;
+      return operand.value.length;
     }
     if ("$each" in value) {
-      const list = blockValueAt(env.slots, value.$each);
+      const operand = this.operand(value.$each, "$each", env);
+      const list = operand.value;
       if (!Array.isArray(list))
         return fail(
-          `${env.source}/props/slots${value.$each}`,
+          operand.source,
           "block_slot_type",
-          "$each requires an array slot."
+          "$each requires an array."
         );
       const result2 = [];
       list.forEach((item, i) => {
@@ -2285,14 +2350,17 @@ var JsonBlockEvaluator = class {
           {
             ...env,
             item,
-            itemSource: env.slotSources ? toAuthoredBlockPointer(env.slotSources, `${value.$each}/${i}`) : `${env.source}/props/slots${value.$each}/${i}`
+            itemSource: operand.element(i)
           },
           pointer2,
           `${definitionPath}/template`,
           depth + 1
         );
-        if (evaluated !== void 0) result2.push(evaluated);
-        else
+        if (evaluated !== void 0) {
+          if (this.sourceMap[pointer2] === env.source)
+            this.sourceMap[pointer2] = operand.element(i);
+          result2.push(evaluated);
+        } else
           for (const key of Object.keys(this.sourceMap)) {
             if (key === pointer2 || key.startsWith(`${pointer2}/`))
               delete this.sourceMap[key];
@@ -2702,6 +2770,15 @@ function createBlockAuthoringSchema(definitions, componentDefinition, excludedCo
   const prefix = `BlockTemplate_${componentDefinition}`;
   const references = referenceDescriptions(format);
   const measure = measureDescriptions(format);
+  const operand = (description) => ({
+    description,
+    anyOf: [
+      pointer(description),
+      ...BLOCK_OPERAND_ROOTS.map(
+        (root) => object({ [root]: pointer(references[root]) }, [root])
+      )
+    ]
+  });
   const bodyName = `${prefix}_Body`;
   const ref = (name) => ({ $ref: `#/definitions/${name}` });
   if (definitions[bodyName]) return ref(bodyName);
@@ -2867,8 +2944,8 @@ function createBlockAuthoringSchema(definitions, componentDefinition, excludedCo
         case "$if":
           specs[directive] = object(
             {
-              $if: pointer(
-                "Test a slot by JSON Pointer, e.g. /subtitle. Missing, null, false, empty text and empty arrays select else; zero selects then."
+              $if: operand(
+                'Test a slot by JSON Pointer, e.g. /subtitle, or a reference such as { "$item": "/numeric" }. Missing, null, false, empty text and empty arrays select else; zero selects then.'
               ),
               then: describe(
                 branch(),
@@ -2885,8 +2962,8 @@ function createBlockAuthoringSchema(definitions, componentDefinition, excludedCo
         case "$each":
           specs[directive] = object(
             {
-              $each: pointer(
-                "Repeat template for each entry in an array slot, e.g. /items. Read the current entry with $item."
+              $each: operand(
+                'Repeat template for each entry in an array slot, e.g. /items, or in an array of the current entry, { "$item": "/cells" }. Read the current entry with $item.'
               ),
               template: describe(
                 item(),
@@ -2899,8 +2976,8 @@ function createBlockAuthoringSchema(definitions, componentDefinition, excludedCo
         case "$count":
           specs[directive] = object(
             {
-              $count: pointer(
-                "Return the number of entries in an array slot, e.g. /items."
+              $count: operand(
+                'Return the number of entries in an array slot, e.g. /items, or in an array of the current entry, { "$item": "/cells" }.'
               )
             },
             ["$count"]
@@ -3351,6 +3428,38 @@ function deepMerge(target, source) {
 function mergeWithDefaults(userConfig, themeDefaults) {
   return deepMerge(themeDefaults, userConfig);
 }
+
+// src/utils/serviceUrl.ts
+function isPrivateServiceUrl(url) {
+  let hostname;
+  try {
+    hostname = new URL(
+      /^https?:\/\//i.test(url.trim()) ? url.trim() : `http://${url.trim()}`
+    ).hostname.toLowerCase();
+  } catch {
+    return false;
+  }
+  const host = hostname.replace(/^\[|\]$/g, "").replace(/\.$/, "");
+  if (host === "localhost" || host.endsWith(".localhost")) return true;
+  if (host === "::1" || /^f[cd][0-9a-f]{2}:/.test(host)) return true;
+  if (/^fe[89ab][0-9a-f]:/.test(host)) return true;
+  const v4 = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+  if (v4) {
+    const [a, b] = [Number(v4[1]), Number(v4[2])];
+    return a === 127 || a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 169 && b === 254;
+  }
+  return /\.(local|internal|home\.arpa)$/.test(host);
+}
+var REMOTE_EXPORT_WARNING = "W_HIGHCHARTS_REMOTE_EXPORT";
+function remoteExportNotice(serverUrl, allowRemote) {
+  if (isPrivateServiceUrl(serverUrl)) return void 0;
+  if (!allowRemote) {
+    throw new Error(
+      `Highcharts export server ${serverUrl} is outside this machine and its private networks, and a chart is posted whole \u2014 every series, label and title. Run the export server locally (pnpm dlx highcharts-export-server --enableServer true), or set services.highcharts.allowRemote (HIGHCHARTS_ALLOW_REMOTE=1) to send chart data there deliberately.`
+    );
+  }
+  return `Chart data \u2014 every series, label and title \u2014 was sent to ${serverUrl}, outside this machine and its private networks (services.highcharts.allowRemote).`;
+}
 export {
   BLOCK_SLOT_PLACEMENT_PROPS,
   BLOCK_SLOT_ROLES,
@@ -3387,6 +3496,7 @@ export {
   POINTS_PER_PIXEL_96DPI,
   POPULAR_GOOGLE_FONTS,
   PaletteSchema,
+  REMOTE_EXPORT_WARNING,
   RENDERER_DEPENDENCY_MISSING,
   ROLE_SCALE_STEPS,
   RendererRegistry,
@@ -3465,6 +3575,7 @@ export {
   isBlockRecord,
   isLiteralSchema,
   isObjectSchema,
+  isPrivateServiceUrl,
   isSafeFont,
   isUnionSchema,
   isValidSemver,
@@ -3475,6 +3586,7 @@ export {
   parseSemver,
   partitionDiagnostics,
   readBlockDefinitions,
+  remoteExportNotice,
   rendererError,
   rendererWarning,
   resolveBlockSlot,