@kumwe/studio-core 0.1.0-alpha.7 → 0.1.0-beta.2

package/dist/semver.js

@@ -1,128 +1 @@
-const VERSION_PATTERN = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:-((?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/u;
-export function parseSemanticVersion(value) {
-    const match = value.length <= 100 ? VERSION_PATTERN.exec(value) : null;
-    if (match === null) {
-        throw new TypeError(`${value} is not a canonical semantic version.`);
-    }
-    return {
-        major: Number(match[1]),
-        minor: Number(match[2]),
-        patch: Number(match[3]),
-        prerelease: match[4] === undefined
-            ? []
-            : match[4]
-                .split('.')
-                .map((part) => (/^(0|[1-9][0-9]*)$/u.test(part) ? Number(part) : part)),
-    };
-}
-/** SemVer 2.0 precedence; build metadata never participates. */
-export function compareSemanticVersions(left, right) {
-    const a = parseSemanticVersion(left);
-    const b = parseSemanticVersion(right);
-    for (const member of ['major', 'minor', 'patch']) {
-        if (a[member] !== b[member]) {
-            return a[member] < b[member] ? -1 : 1;
-        }
-    }
-    if (a.prerelease.length === 0 && b.prerelease.length === 0) {
-        return 0;
-    }
-    if (a.prerelease.length === 0) {
-        return 1;
-    }
-    if (b.prerelease.length === 0) {
-        return -1;
-    }
-    const length = Math.max(a.prerelease.length, b.prerelease.length);
-    for (let index = 0; index < length; index += 1) {
-        const first = a.prerelease[index];
-        const second = b.prerelease[index];
-        if (first === undefined) {
-            return -1;
-        }
-        if (second === undefined) {
-            return 1;
-        }
-        if (first === second) {
-            continue;
-        }
-        if (typeof first === 'number' && typeof second === 'number') {
-            return first < second ? -1 : 1;
-        }
-        if (typeof first === 'number') {
-            return -1;
-        }
-        if (typeof second === 'number') {
-            return 1;
-        }
-        return first < second ? -1 : 1;
-    }
-    return 0;
-}
-/**
- * Expand caret and tilde shorthands into their conventional comparator
- * conjunctions. The supported grammar is deliberately small and
- * deterministic: exact versions, `^`/`~` shorthands, and space-joined
- * comparators; disjunctions are unsupported until the compatibility
- * contract ratifies them.
- */
-export function normalizeVersionRange(range) {
-    const trimmed = range.trim();
-    if (trimmed.length === 0 || trimmed.length > 120 || trimmed.includes('||')) {
-        throw new TypeError(`${range} is not a supported version range.`);
-    }
-    return trimmed
-        .split(/\s+/u)
-        .map((part) => {
-        if (part.startsWith('^')) {
-            const source = part.slice(1);
-            const version = parseSemanticVersion(source);
-            const upper = version.major > 0
-                ? `${version.major + 1}.0.0-0`
-                : version.minor > 0
-                    ? `0.${version.minor + 1}.0-0`
-                    : `0.0.${version.patch + 1}-0`;
-            return `>=${source} <${upper}`;
-        }
-        if (part.startsWith('~')) {
-            const source = part.slice(1);
-            const version = parseSemanticVersion(source);
-            return `>=${source} <${version.major}.${version.minor + 1}.0-0`;
-        }
-        parseComparator(part);
-        return part;
-    })
-        .join(' ');
-}
-/** Whether a version satisfies every comparator of the supported range grammar. */
-export function satisfiesVersionRange(version, range) {
-    parseSemanticVersion(version);
-    const comparators = normalizeVersionRange(range).split(/\s+/u).map(parseComparator);
-    return comparators.every((comparator) => {
-        const comparison = compareSemanticVersions(version, comparator.version);
-        switch (comparator.operator) {
-            case '<':
-                return comparison < 0;
-            case '<=':
-                return comparison <= 0;
-            case '=':
-                return comparison === 0;
-            case '>':
-                return comparison > 0;
-            default:
-                return comparison >= 0;
-        }
-    });
-}
-function parseComparator(part) {
-    const match = /^(>=|<=|>|<|=)?([^<>=].*)$/u.exec(part);
-    if (match?.[2] === undefined) {
-        throw new TypeError(`${part} is not a supported version comparator.`);
-    }
-    parseSemanticVersion(match[2]);
-    return {
-        operator: (match[1] ?? '='),
-        version: match[2],
-    };
-}
-//# sourceMappingURL=semver.js.map
+const e=/^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:-((?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/u;export function parseSemanticVersion(t){let n=t.length<=100?e.exec(t):null;if(n===null)throw TypeError(`${t} is not a canonical semantic version.`);return{major:Number(n[1]),minor:Number(n[2]),patch:Number(n[3]),prerelease:n[4]===void 0?[]:n[4].split(`.`).map(e=>/^(0|[1-9][0-9]*)$/u.test(e)?Number(e):e)}}export function compareSemanticVersions(e,n){let r=parseSemanticVersion(e),i=parseSemanticVersion(n);for(let e of[`major`,`minor`,`patch`])if(r[e]!==i[e])return r[e]<i[e]?-1:1;if(r.prerelease.length===0&&i.prerelease.length===0)return 0;if(r.prerelease.length===0)return 1;if(i.prerelease.length===0)return-1;let a=Math.max(r.prerelease.length,i.prerelease.length);for(let e=0;e<a;e+=1){let t=r.prerelease[e],n=i.prerelease[e];if(t===void 0)return-1;if(n===void 0)return 1;if(t!==n)return typeof t==`number`&&typeof n==`number`?t<n?-1:1:typeof t==`number`?-1:typeof n==`number`?1:t<n?-1:1}return 0}export function normalizeVersionRange(e){let n=e.trim();if(n.length===0||n.length>120||n.includes(`||`))throw TypeError(`${e} is not a supported version range.`);return n.split(/\s+/u).map(e=>{if(e.startsWith(`^`)){let n=e.slice(1),r=parseSemanticVersion(n);return`>=${n} <${r.major>0?`${r.major+1}.0.0-0`:r.minor>0?`0.${r.minor+1}.0-0`:`0.0.${r.patch+1}-0`}`}if(e.startsWith(`~`)){let n=e.slice(1),r=parseSemanticVersion(n);return`>=${n} <${r.major}.${r.minor+1}.0-0`}return a(e),e}).join(` `)}export function satisfiesVersionRange(e,i){return parseSemanticVersion(e),normalizeVersionRange(i).split(/\s+/u).map(a).every(t=>{let r=compareSemanticVersions(e,t.version);switch(t.operator){case`<`:return r<0;case`<=`:return r<=0;case`=`:return r===0;case`>`:return r>0;default:return r>=0}})}function a(e){let n=/^(>=|<=|>|<|=)?([^<>=].*)$/u.exec(e);if(n?.[2]===void 0)throw TypeError(`${e} is not a supported version comparator.`);return parseSemanticVersion(n[2]),{operator:n[1]??`=`,version:n[2]}}

package/dist/session-policy.d.ts

@@ -0,0 +1,23 @@
+import type { BlueprintCommand, BlueprintDocument, ContentModelDocument, EntryDocument, QualifiedName, StudioLimits } from '@kumwe/studio-protocol';
+export type StudioCommandPolicyLimits = Pick<StudioLimits, 'maxChildrenPerSlot' | 'maxCommandBatch' | 'maxDepth' | 'maxExtensionBytes' | 'maxNodes' | 'maxPropertyBytes' | 'maxRichTextBytes' | 'maxRichTextDepth' | 'maxSlotsPerNode'>;
+export interface StudioSessionPolicyOptions {
+    limits?: Readonly<Partial<StudioCommandPolicyLimits>>;
+    permissions?: readonly QualifiedName[];
+}
+export interface ResolvedStudioSessionPolicy {
+    limits: Readonly<StudioCommandPolicyLimits>;
+    permissions: ReadonlySet<QualifiedName>;
+}
+/** Immutable protocol ceilings used when a low-level session has no host configuration. */
+export declare const STUDIO_PROTOCOL_MAXIMUM_COMMAND_POLICY_LIMITS: Readonly<StudioCommandPolicyLimits>;
+export declare function resolveStudioSessionPolicy(options?: Readonly<StudioSessionPolicyOptions>): ResolvedStudioSessionPolicy;
+/**
+ * Checks the complete projected Blueprint before history commits it. The
+ * reducer has already accepted the command, so this function may inspect both
+ * sides of a valid transition without changing either one.
+ */
+export declare function assertBlueprintCommandPolicy(before: BlueprintDocument, command: BlueprintCommand, after: BlueprintDocument, policy: Readonly<ResolvedStudioSessionPolicy>): void;
+export declare function assertBlueprintWithinSessionPolicy(document: BlueprintDocument, limits: Readonly<StudioCommandPolicyLimits>): void;
+export declare function assertEntryWithinSessionPolicy(entry: EntryDocument, limits: Readonly<StudioCommandPolicyLimits>): void;
+export declare function assertModelWithinSessionPolicy(model: ContentModelDocument, limits: Readonly<StudioCommandPolicyLimits>): void;
+//# sourceMappingURL=session-policy.d.ts.map

package/dist/session-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-policy.d.ts","sourceRoot":"","sources":["../src/session-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,gBAAgB,EAChB,iBAAiB,EAEjB,oBAAoB,EACpB,aAAa,EAGb,aAAa,EACb,YAAY,EACb,MAAM,wBAAwB,CAAC;AAIhC,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAC1C,YAAY,EACV,oBAAoB,GACpB,iBAAiB,GACjB,UAAU,GACV,mBAAmB,GACnB,UAAU,GACV,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,GAClB,iBAAiB,CACpB,CAAC;AAEF,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACtD,WAAW,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAC;IAC5C,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;CACzC;AAED,2FAA2F;AAC3F,eAAO,MAAM,6CAA6C,EAAE,QAAQ,CAAC,yBAAyB,CAW1F,CAAC;AA6BL,wBAAgB,0BAA0B,CACxC,OAAO,GAAE,QAAQ,CAAC,0BAA0B,CAAM,GACjD,2BAA2B,CAiB7B;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,iBAAiB,EACzB,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,QAAQ,CAAC,2BAA2B,CAAC,GAC5C,IAAI,CAaN;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE,QAAQ,CAAC,yBAAyB,CAAC,GAC1C,IAAI,CAuCN;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,QAAQ,CAAC,yBAAyB,CAAC,GAC1C,IAAI,CAMN;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,QAAQ,CAAC,yBAAyB,CAAC,GAC1C,IAAI,CAgBN"}

package/dist/session-policy.js

@@ -0,0 +1 @@
+import{cloneContractValue as e}from"./clone.js";import{applyOperation as t,StudioCommandError as n}from"./commands.js";export const STUDIO_PROTOCOL_MAXIMUM_COMMAND_POLICY_LIMITS=Object.freeze({maxChildrenPerSlot:1e4,maxCommandBatch:1e4,maxDepth:128,maxExtensionBytes:10485760,maxNodes:1e5,maxPropertyBytes:10485760,maxRichTextBytes:10485760,maxRichTextDepth:128,maxSlotsPerNode:100});const i=Object.freeze({maxChildrenPerSlot:0,maxCommandBatch:1,maxDepth:1,maxExtensionBytes:0,maxNodes:1,maxPropertyBytes:0,maxRichTextBytes:1,maxRichTextDepth:1,maxSlotsPerNode:0});export function resolveStudioSessionPolicy(e={}){let t=e.limits??{},n={maxChildrenPerSlot:s(`maxChildrenPerSlot`,t.maxChildrenPerSlot),maxCommandBatch:s(`maxCommandBatch`,t.maxCommandBatch),maxDepth:s(`maxDepth`,t.maxDepth),maxExtensionBytes:s(`maxExtensionBytes`,t.maxExtensionBytes),maxNodes:s(`maxNodes`,t.maxNodes),maxPropertyBytes:s(`maxPropertyBytes`,t.maxPropertyBytes),maxRichTextBytes:s(`maxRichTextBytes`,t.maxRichTextBytes),maxRichTextDepth:s(`maxRichTextDepth`,t.maxRichTextDepth),maxSlotsPerNode:s(`maxSlotsPerNode`,t.maxSlotsPerNode)};return Object.freeze({limits:Object.freeze(n),permissions:new Set(e.permissions??[])})}export function assertBlueprintCommandPolicy(e,t,n,r){if(t.type===`studio.command/batch`&&t.payload.operations.length>r.limits.maxCommandBatch)throw C(`maxCommandBatch`,t.payload.operations.length,r.limits.maxCommandBatch);c(e,t,r.permissions),assertBlueprintWithinSessionPolicy(n,r.limits)}export function assertBlueprintWithinSessionPolicy(e,t){let n=v(e.extensions);if(n>t.maxExtensionBytes)throw C(`maxExtensionBytes`,n,t.maxExtensionBytes);let r=0,i=0,a=e.roots.map(e=>({depth:1,node:e}));for(;a.length>0;){let e=a.pop();if(e===void 0)break;if(r+=1,r>t.maxNodes)throw C(`maxNodes`,r,t.maxNodes);if(e.depth>t.maxDepth)throw C(`maxDepth`,e.depth,t.maxDepth);let o=Object.entries(e.node.slots);if(o.length>t.maxSlotsPerNode)throw C(`maxSlotsPerNode`,o.length,t.maxSlotsPerNode);if(i+=y(e.node.properties),i+=y(e.node.responsive),i>t.maxPropertyBytes)throw C(`maxPropertyBytes`,i,t.maxPropertyBytes);if(n+=v(e.node.extensions),n>t.maxExtensionBytes)throw C(`maxExtensionBytes`,n,t.maxExtensionBytes);for(let[,n]of o){if(n.length>t.maxChildrenPerSlot)throw C(`maxChildrenPerSlot`,n.length,t.maxChildrenPerSlot);for(let t of n)a.push({depth:e.depth+1,node:t})}}g(e,t)}export function assertEntryWithinSessionPolicy(e,t){let n=v(e.extensions);if(n>t.maxExtensionBytes)throw C(`maxExtensionBytes`,n,t.maxExtensionBytes);g(e,t)}export function assertModelWithinSessionPolicy(e,t){let n=v(e.extensions);for(let t of e.relationships)n+=v(t.extensions);let r=[...e.fields];for(;r.length>0;){let e=r.pop();if(e===void 0)break;n+=v(e.extensions),r.push(...e.fields??[])}if(n>t.maxExtensionBytes)throw C(`maxExtensionBytes`,n,t.maxExtensionBytes);g(e,t)}function s(e,t){let n=STUDIO_PROTOCOL_MAXIMUM_COMMAND_POLICY_LIMITS[e],a=t??n;if(!Number.isSafeInteger(a)||a<i[e]||a>n)throw RangeError(`${e} must be an integer between ${String(i[e])} and ${String(n)}.`);return a}function c(n,r,i){if(r.type===`studio.command/batch`){let a=e(n);for(let e of r.payload.operations)l(a,e,i),t(a,e);return}if(r.type===`studio.command/apply-pattern`){u(n,r.payload.destination.parentNodeId,i);for(let e of r.payload.nodes)f(e,i);return}if(r.type===`studio.command/reset-inherited-property`){d(n,r.payload.nodeId,i);return}l(n,r,i)}function l(e,t,n){switch(t.type){case`studio.command/insert-node`:case`studio.command/restore-node`:u(e,t.payload.destination.parentNodeId,n),f(t.payload.node,n);return;case`studio.command/remove-node`:{let r=m(e,t.payload.nodeId);p(r.parent,n),f(r.node,n);return}case`studio.command/move-node`:{let r=m(e,t.payload.nodeId);p(r.parent,n),f(r.node,n),u(e,t.payload.destination.parentNodeId,n);return}case`studio.command/duplicate-node`:{let r=m(e,t.payload.nodeId);p(r.parent,n),f(r.node,n),u(e,t.payload.destination?.parentNodeId,n);return}case`studio.command/reorder-children`:u(e,t.payload.parentNodeId,n);for(let r of t.payload.order)d(e,r,n);return;case`studio.command/remove-binding`:case`studio.command/set-binding`:case`studio.command/set-property`:case`studio.command/set-size-role`:case`studio.command/unset-property`:case`studio.command/unset-size-role`:d(e,t.payload.nodeId,n);return}}function u(e,t,n){t!==void 0&&d(e,t,n)}function d(e,t,n){p(m(e,t).node,n)}function f(e,t){let n=[e];for(;n.length>0;){let e=n.pop();if(e===void 0)break;p(e,t);for(let t of Object.values(e.slots))n.push(...t)}}function p(e,t){let r=e?.authoring.requiredPermission;if(r!==void 0&&!t.has(r))throw new n(`permission-forbidden`,`Node ${String(e?.id)} requires the ${r} permission for this command.`)}function m(e,t){let r=h(e.roots,t);if(r===void 0)throw new n(`node-not-found`,`Node ${t} does not exist.`);return r}function h(e,t,n){for(let r of e){if(r.id===t)return n===void 0?{node:r}:{node:r,parent:n};for(let e of Object.values(r.slots)){let n=h(e,t,r);if(n!==void 0)return n}}}function g(e,t){let n=[e];for(;n.length>0;){let e=n.pop();if(!(typeof e!=`object`||!e)){if(Array.isArray(e)){n.push(...e);continue}if(e.type===`doc`&&Array.isArray(e.content)){let n=b(e);if(n>t.maxRichTextBytes)throw C(`maxRichTextBytes`,n,t.maxRichTextBytes);let r=_(e);if(r>t.maxRichTextDepth)throw C(`maxRichTextDepth`,r,t.maxRichTextDepth);continue}for(let t of Object.values(e))n.push(t)}}}function _(e){let t=1,n=[{depth:1,node:e}];for(;n.length>0;){let e=n.pop();if(e===void 0)break;t=Math.max(t,e.depth);let r=e.node.content;if(Array.isArray(r))for(let t of r)S(t)&&n.push({depth:e.depth+1,node:t})}return t}function v(e){return y(e)}function y(e){return e===void 0||Object.keys(e).length===0?0:Math.max(0,b(e)-2)}function b(e){let t;try{let n=JSON.stringify(e);if(n===void 0)throw TypeError(`The value is not JSON serializable.`);t=n}catch{throw new n(`resource-limit`,`The command value cannot be measured within the finite JSON resource boundary.`)}return x(t)}function x(e){let t=0;for(let n=0;n<e.length;n+=1){let r=e.charCodeAt(n);if(r<=127)t+=1;else if(r<=2047)t+=2;else if(r>=55296&&r<=56319){let r=e.charCodeAt(n+1);r>=56320&&r<=57343?(t+=4,n+=1):t+=3}else t+=3}return t}function S(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function C(e,t,r){return new n(`resource-limit`,`${e} permits at most ${String(r)}, but the projected command requires ${String(t)}.`)}

package/dist/session.d.ts

@@ -1,6 +1,9 @@
-import type { AddModelFieldCommand, BlueprintCommand, BlueprintDocument, ContentModelDocument, EntryDocument, NodeId, Revision, SetFieldValueCommand, StudioSessionMode } from '@kumwe/studio-protocol';
+import type { AddModelFieldCommand, BlueprintCommand, BlueprintDocument, ContentModelDocument, EntryDocument, NodeId, QualifiedName, Revision, SetFieldValueCommand, StudioSessionMode } from '@kumwe/studio-protocol';
+import { type StudioCommandPolicyLimits } from './session-policy.js';
 export interface StudioSessionOptions {
     document: BlueprintDocument;
+    /** Command-time resource policy. Omitted members use immutable protocol maxima. */
+    limits?: Readonly<Partial<StudioCommandPolicyLimits>>;
     maximumHistoryEntries?: number;
     /**
      * The session mode fixed for the session's lifetime. When omitted it is
@@ -9,6 +12,8 @@ export interface StudioSessionOptions {
      * mode the session historically provided.
      */
     mode?: StudioSessionMode;
+    /** Exact resolved permission projection used by per-node authoring policy. */
+    permissions?: readonly QualifiedName[];
     sessionGeneration: Revision;
     /**
      * The legacy spelling of the read-only axis. Mode `read-only` is the
@@ -56,7 +61,14 @@ export declare class StudioSession {
      * Blueprint history, and the selection is untouched.
      */
     executeModelCommand(model: ContentModelDocument, command: AddModelFieldCommand): ContentModelDocument;
-    markSaved(revision: Revision): void;
+    /**
+     * Records the host revision that accepted a local snapshot and rebases every
+     * undo/redo snapshot onto it. Callers normally omit `stateVersion`, which
+     * marks the current document clean. A host save that settles after another
+     * local edit passes the captured snapshot version instead: the accepted base
+     * revision advances while the newer draft stays dirty.
+     */
+    markSaved(revision: Revision, stateVersion?: number): void;
     get savedRevision(): Revision;
     select(nodeIds: readonly NodeId[]): readonly NodeId[];
     clearSelection(): void;

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EAEjB,oBAAoB,EACpB,aAAa,EACb,MAAM,EACN,QAAQ,EACR,oBAAoB,EACpB,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAOhC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,iBAAiB,EAAE,QAAQ,CAAC;IAC5B;;;;OAIG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC;CACzC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,aAAa;;gBAQL,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC;IAO1D,IAAW,OAAO,IAAI,OAAO,CAE5B;IAED,IAAW,OAAO,IAAI,OAAO,CAE5B;IAED,IAAW,KAAK,IAAI,OAAO,CAE1B;IAED,IAAW,QAAQ,IAAI,iBAAiB,CAEvC;IAED,0CAA0C;IAC1C,IAAW,IAAI,IAAI,iBAAiB,CAEnC;IAED,IAAW,SAAS,IAAI,SAAS,MAAM,EAAE,CAExC;IAED,2DAA2D;IAC3D,IAAW,YAAY,IAAI,UAAU,GAAG,WAAW,CAElD;IAED,IAAW,YAAY,IAAI,MAAM,CAEhC;IAEM,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB;IAqB5D;;;;;OAKG;IACI,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,GAAG,aAAa;IAa9F;;;;;OAKG;IACI,mBAAmB,CACxB,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE,oBAAoB,GAC5B,oBAAoB;IAahB,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAK1C,IAAW,aAAa,IAAI,QAAQ,CAEnC;IAEM,MAAM,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE;IAmBrD,cAAc,IAAI,IAAI;IAItB,IAAI,IAAI,iBAAiB;IAMzB,IAAI,IAAI,iBAAiB;CA6BjC"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EAEjB,oBAAoB,EACpB,aAAa,EACb,MAAM,EACN,aAAa,EACb,QAAQ,EACR,oBAAoB,EACpB,iBAAiB,EAClB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAKL,KAAK,yBAAyB,EAC/B,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,mFAAmF;IACnF,MAAM,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACtD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,IAAI,CAAC,EAAE,iBAAiB,CAAC;IACzB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IACvC,iBAAiB,EAAE,QAAQ,CAAC;IAC5B;;;;OAIG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC;CACzC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,aAAa;;gBASL,OAAO,EAAE,QAAQ,CAAC,oBAAoB,CAAC;IAe1D,IAAW,OAAO,IAAI,OAAO,CAE5B;IAED,IAAW,OAAO,IAAI,OAAO,CAE5B;IAED,IAAW,KAAK,IAAI,OAAO,CAE1B;IAED,IAAW,QAAQ,IAAI,iBAAiB,CAEvC;IAED,0CAA0C;IAC1C,IAAW,IAAI,IAAI,iBAAiB,CAEnC;IAED,IAAW,SAAS,IAAI,SAAS,MAAM,EAAE,CAExC;IAED,2DAA2D;IAC3D,IAAW,YAAY,IAAI,UAAU,GAAG,WAAW,CAElD;IAED,IAAW,YAAY,IAAI,MAAM,CAEhC;IAEM,OAAO,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB;IAqB5D;;;;;OAKG;IACI,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,GAAG,aAAa;IAe9F;;;;;OAKG;IACI,mBAAmB,CACxB,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE,oBAAoB,GAC5B,oBAAoB;IAevB;;;;;;OAMG;IACI,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,GAAE,MAAmC,GAAG,IAAI;IAa7F,IAAW,aAAa,IAAI,QAAQ,CAEnC;IAEM,MAAM,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE;IAmBrD,cAAc,IAAI,IAAI;IAItB,IAAI,IAAI,iBAAiB;IAMzB,IAAI,IAAI,iBAAiB;CA6BjC"}

package/dist/session.js

@@ -1,178 +1 @@
-import { StudioCommandError } from './commands.js';
-import { applyEntryCommand } from './entry-commands.js';
-import { StudioHistory } from './history.js';
-import { applyModelCommand } from './model-commands.js';
-import { assertHybridCommandInBounds, assertModePermitsCommandType } from './modes.js';
-/**
- * A deterministic editing session over one Blueprint document: bounded
- * history, an explicit selection model, and the session-level guards the
- * command contract requires before any reducer runs. Session generation,
- * mode permission, read-only state, and expected-revision checks fail
- * closed; a rejected command changes neither the document, the history, nor
- * the selection. The session mode is fixed at creation and decides the
- * permitted command set through one deterministic table
- * (`permittedCommandTypes`); hybrid mode additionally bounds structure
- * commands to slots governed by structural authoring regions.
- */
-export class StudioSession {
-    #history;
-    #mode;
-    #sessionGeneration;
-    #savedRevision;
-    #savedStateVersion = 0;
-    #selection = [];
-    constructor(options) {
-        this.#history = new StudioHistory(options.document, options.maximumHistoryEntries ?? 100);
-        this.#mode = resolveModeOption(options);
-        this.#sessionGeneration = options.sessionGeneration;
-        this.#savedRevision = options.document.revision;
-    }
-    get canRedo() {
-        return this.#history.canRedo;
-    }
-    get canUndo() {
-        return this.#history.canUndo;
-    }
-    get dirty() {
-        return this.#history.stateVersion !== this.#savedStateVersion;
-    }
-    get document() {
-        return this.#history.current;
-    }
-    /** The session mode fixed at creation. */
-    get mode() {
-        return this.#mode;
-    }
-    get selection() {
-        return [...this.#selection];
-    }
-    /** The legacy read-only projection of the session mode. */
-    get sessionState() {
-        return this.#mode === 'read-only' ? 'read-only' : 'editable';
-    }
-    get stateVersion() {
-        return this.#history.stateVersion;
-    }
-    execute(command) {
-        this.#assertWritable();
-        this.#assertLiveGeneration(command);
-        assertModePermitsCommandType(this.#mode, command.type);
-        if (this.#mode === 'hybrid') {
-            assertHybridCommandInBounds(this.#history.current, command);
-        }
-        if (command.expectedRevision !== undefined &&
-            command.expectedRevision !== this.#savedRevision) {
-            throw new StudioCommandError('stale-state', `Command expects revision ${command.expectedRevision}, but the session holds ${this.#savedRevision}.`);
-        }
-        const next = this.#history.execute(command);
-        this.#pruneSelection(next);
-        return next;
-    }
-    /**
-     * Applies one entry field command behind the same session guards as
-     * `execute`, so no UI dispatch path bypasses the mode boundary. Entry
-     * state stays host-owned: the result is returned, not recorded in the
-     * Blueprint history, and the selection is untouched.
-     */
-    executeEntryCommand(entry, command) {
-        this.#assertWritable();
-        this.#assertLiveGeneration(command);
-        assertModePermitsCommandType(this.#mode, command.type);
-        if (command.expectedRevision !== undefined && command.expectedRevision !== entry.revision) {
-            throw new StudioCommandError('stale-state', `Command expects revision ${command.expectedRevision}, but the entry holds ${entry.revision}.`);
-        }
-        return applyEntryCommand(entry, command);
-    }
-    /**
-     * Applies one content-model command behind the same session guards as
-     * `execute`, so no UI dispatch path bypasses the mode boundary. Model
-     * state stays host-owned: the result is returned, not recorded in the
-     * Blueprint history, and the selection is untouched.
-     */
-    executeModelCommand(model, command) {
-        this.#assertWritable();
-        this.#assertLiveGeneration(command);
-        assertModePermitsCommandType(this.#mode, command.type);
-        if (command.expectedRevision !== undefined && command.expectedRevision !== model.revision) {
-            throw new StudioCommandError('stale-state', `Command expects revision ${command.expectedRevision}, but the model holds ${model.revision}.`);
-        }
-        return applyModelCommand(model, command);
-    }
-    markSaved(revision) {
-        this.#savedRevision = revision;
-        this.#savedStateVersion = this.#history.stateVersion;
-    }
-    get savedRevision() {
-        return this.#savedRevision;
-    }
-    select(nodeIds) {
-        const document = this.#history.current;
-        const unique = [];
-        for (const nodeId of nodeIds) {
-            if (unique.includes(nodeId)) {
-                continue;
-            }
-            if (!containsNode(document.roots, nodeId)) {
-                throw new StudioCommandError('node-not-found', `Node ${nodeId} cannot be selected because it is not in the document.`);
-            }
-            unique.push(nodeId);
-        }
-        this.#selection = unique;
-        return this.selection;
-    }
-    clearSelection() {
-        this.#selection = [];
-    }
-    undo() {
-        const document = this.#history.undo();
-        this.#pruneSelection(document);
-        return document;
-    }
-    redo() {
-        const document = this.#history.redo();
-        this.#pruneSelection(document);
-        return document;
-    }
-    #assertWritable() {
-        if (this.#mode === 'read-only') {
-            throw new StudioCommandError('read-only-session', 'A read-only session never applies a persistent command.');
-        }
-    }
-    #assertLiveGeneration(command) {
-        if (command.sessionGeneration !== this.#sessionGeneration) {
-            throw new StudioCommandError('stale-generation', `Command generation ${command.sessionGeneration} does not match the active session generation.`);
-        }
-    }
-    #pruneSelection(document) {
-        if (this.#selection.length > 0) {
-            this.#selection = this.#selection.filter((nodeId) => containsNode(document.roots, nodeId));
-        }
-    }
-}
-function resolveModeOption(options) {
-    const { mode, sessionState } = options;
-    if (mode === undefined) {
-        if (sessionState === undefined) {
-            throw new RangeError('A session requires an explicit mode or session state.');
-        }
-        return sessionState === 'read-only' ? 'read-only' : 'blueprint';
-    }
-    if (sessionState !== undefined && (sessionState === 'read-only') !== (mode === 'read-only')) {
-        throw new RangeError(`Session mode ${mode} contradicts session state ${sessionState}; mode read-only is the read-only state.`);
-    }
-    return mode;
-}
-function containsNode(nodes, nodeId) {
-    for (const node of nodes) {
-        if (node.id === nodeId) {
-            return true;
-        }
-        for (const children of Object.values(node.slots)) {
-            if (containsNode(children, nodeId)) {
-                return true;
-            }
-        }
-    }
-    return false;
-}
-//# sourceMappingURL=session.js.map
+import{StudioCommandError as e}from"./commands.js";import{applyEntryCommand as t}from"./entry-commands.js";import{StudioHistory as n}from"./history.js";import{applyModelCommand as r}from"./model-commands.js";import{assertHybridCommandInBounds as i,assertModePermitsCommandType as a}from"./modes.js";import{assertEntryWithinSessionPolicy as o,assertModelWithinSessionPolicy as s,resolveStudioSessionPolicy as c}from"./session-policy.js";export class StudioSession{#history;#mode;#policy;#sessionGeneration;#savedRevision;#savedStateVersion=0;#selection=[];constructor(e){this.#policy=c({...e.limits===void 0?{}:{limits:e.limits},...e.permissions===void 0?{}:{permissions:e.permissions}}),this.#history=new n(e.document,e.maximumHistoryEntries??100,this.#policy),this.#mode=l(e),this.#sessionGeneration=e.sessionGeneration,this.#savedRevision=e.document.revision}get canRedo(){return this.#history.canRedo}get canUndo(){return this.#history.canUndo}get dirty(){return this.#history.stateVersion!==this.#savedStateVersion}get document(){return this.#history.current}get mode(){return this.#mode}get selection(){return[...this.#selection]}get sessionState(){return this.#mode===`read-only`?`read-only`:`editable`}get stateVersion(){return this.#history.stateVersion}execute(t){if(this.#assertWritable(),this.#assertLiveGeneration(t),a(this.#mode,t.type),this.#mode===`hybrid`&&i(this.#history.current,t),t.expectedRevision!==void 0&&t.expectedRevision!==this.#savedRevision)throw new e(`stale-state`,`Command expects revision ${t.expectedRevision}, but the session holds ${this.#savedRevision}.`);let n=this.#history.execute(t);return this.#pruneSelection(n),n}executeEntryCommand(n,r){if(this.#assertWritable(),this.#assertLiveGeneration(r),a(this.#mode,r.type),r.expectedRevision!==void 0&&r.expectedRevision!==n.revision)throw new e(`stale-state`,`Command expects revision ${r.expectedRevision}, but the entry holds ${n.revision}.`);let i=t(n,r);return o(i,this.#policy.limits),i}executeModelCommand(t,n){if(this.#assertWritable(),this.#assertLiveGeneration(n),a(this.#mode,n.type),n.expectedRevision!==void 0&&n.expectedRevision!==t.revision)throw new e(`stale-state`,`Command expects revision ${n.expectedRevision}, but the model holds ${t.revision}.`);let i=r(t,n);return s(i,this.#policy.limits),i}markSaved(e,t=this.#history.stateVersion){if(!Number.isSafeInteger(t)||t<0||t>this.#history.stateVersion)throw RangeError(`A saved snapshot version must be a known non-negative state version.`);this.#history.rebaseRevision(e),this.#savedRevision=e,this.#savedStateVersion=t}get savedRevision(){return this.#savedRevision}select(t){let n=this.#history.current,r=[];for(let i of t)if(!r.includes(i)){if(!u(n.roots,i))throw new e(`node-not-found`,`Node ${i} cannot be selected because it is not in the document.`);r.push(i)}return this.#selection=r,this.selection}clearSelection(){this.#selection=[]}undo(){let e=this.#history.undo();return this.#pruneSelection(e),e}redo(){let e=this.#history.redo();return this.#pruneSelection(e),e}#assertWritable(){if(this.#mode===`read-only`)throw new e(`read-only-session`,`A read-only session never applies a persistent command.`)}#assertLiveGeneration(t){if(t.sessionGeneration!==this.#sessionGeneration)throw new e(`stale-generation`,`Command generation ${t.sessionGeneration} does not match the active session generation.`)}#pruneSelection(e){this.#selection.length>0&&(this.#selection=this.#selection.filter(t=>u(e.roots,t)))}}function l(e){let{mode:t,sessionState:n}=e;if(t===void 0){if(n===void 0)throw RangeError(`A session requires an explicit mode or session state.`);return n===`read-only`?`read-only`:`blueprint`}if(n!==void 0&&n===`read-only`!=(t===`read-only`))throw RangeError(`Session mode ${t} contradicts session state ${n}; mode read-only is the read-only state.`);return t}function u(e,t){for(let n of e){if(n.id===t)return!0;for(let e of Object.values(n.slots))if(u(e,t))return!0}return!1}

package/dist/strict-json.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Parse untrusted JSON while rejecting duplicate object member names.
+ * Native `JSON.parse` silently keeps the final duplicate; configuration must
+ * fail closed instead so routing/authentication cannot be visually shadowed.
+ */
+export declare function parseJsonRejectingDuplicateMembers(source: string, maximumDepth?: number): unknown;
+//# sourceMappingURL=strict-json.d.ts.map

package/dist/strict-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strict-json.d.ts","sourceRoot":"","sources":["../src/strict-json.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,SAAK,GAAG,OAAO,CAI7F"}

package/dist/strict-json.js

@@ -0,0 +1,2 @@
+export function parseJsonRejectingDuplicateMembers(e,n=16){return new t(e,n).assertValid(),JSON.parse(e)}class t{#cursor=0;#maximumDepth;#numberPattern=/-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/uy;#source;constructor(e,t){if(!Number.isSafeInteger(t)||t<1)throw RangeError(`Maximum JSON depth must be a positive safe integer.`);this.#source=e,this.#maximumDepth=t}assertValid(){this.#parseValue(``,1),this.#skipWhitespace(),this.#cursor!==this.#source.length&&this.#fail(`unexpected trailing content`)}#escapePointer(e){return e.replaceAll(`~`,`~0`).replaceAll(`/`,`~1`)}#expect(e){this.#source[this.#cursor]!==e&&this.#fail(`expected ${JSON.stringify(e)}`),this.#cursor+=1}#fail(e){throw SyntaxError(`Invalid JSON: ${e} at offset ${this.#cursor}.`)}#parseArray(e,t){if(this.#expect(`[`),this.#skipWhitespace(),this.#source[this.#cursor]===`]`){this.#cursor+=1;return}let n=0;for(;;){if(this.#parseValue(`${e}/${n}`,t+1),n+=1,this.#skipWhitespace(),this.#source[this.#cursor]===`]`){this.#cursor+=1;return}this.#expect(`,`),this.#skipWhitespace()}}#parseLiteral(e){this.#source.slice(this.#cursor,this.#cursor+e.length)!==e&&this.#fail(`invalid token`),this.#cursor+=e.length}#parseNumber(){this.#numberPattern.lastIndex=this.#cursor,this.#numberPattern.exec(this.#source)?.index!==this.#cursor&&this.#fail(`invalid number`),this.#cursor=this.#numberPattern.lastIndex}#parseObject(e,t){if(this.#expect(`{`),this.#skipWhitespace(),this.#source[this.#cursor]===`}`){this.#cursor+=1;return}let n=new Set;for(;;){this.#source[this.#cursor]!==`"`&&this.#fail(`object member name must be a string`);let r=this.#parseString();if(n.has(r))throw SyntaxError(`Invalid JSON: duplicate member ${JSON.stringify(r)} at ${e||`/`}.`);if(n.add(r),this.#skipWhitespace(),this.#expect(`:`),this.#parseValue(`${e}/${this.#escapePointer(r)}`,t+1),this.#skipWhitespace(),this.#source[this.#cursor]===`}`){this.#cursor+=1;return}this.#expect(`,`),this.#skipWhitespace()}}#parseString(){let e=this.#cursor;for(this.#expect(`"`);this.#cursor<this.#source.length;){let t=this.#source[this.#cursor];if(t===`"`)return this.#cursor+=1,JSON.parse(this.#source.slice(e,this.#cursor));if(t===`\\`){this.#cursor+=1;let e=this.#source[this.#cursor];if(e===`u`){/^[0-9A-Fa-f]{4}$/u.test(this.#source.slice(this.#cursor+1,this.#cursor+5))||this.#fail(`invalid Unicode escape`),this.#cursor+=5;continue}`"\\/bfnrt`.includes(e??``)||this.#fail(`invalid string escape`),this.#cursor+=1;continue}(t===void 0||t.charCodeAt(0)<32)&&this.#fail(`invalid string character`),this.#cursor+=1}this.#fail(`unterminated string`)}#parseValue(e,t){switch(this.#skipWhitespace(),this.#source[this.#cursor]){case`{`:this.#assertContainerDepth(t),this.#parseObject(e,t);return;case`[`:this.#assertContainerDepth(t),this.#parseArray(e,t);return;case`"`:this.#parseString();return;case`t`:this.#parseLiteral(`true`);return;case`f`:this.#parseLiteral(`false`);return;case`n`:this.#parseLiteral(`null`);return;default:this.#parseNumber()}}#assertContainerDepth(e){if(e>this.#maximumDepth)throw SyntaxError(`Invalid JSON: document exceeds maximum depth ${String(this.#maximumDepth)}.`)}#skipWhitespace(){for(;;){let e=this.#source[this.#cursor];if(e!==` `&&e!==`	`&&e!==`
+`&&e!==`\r`)return;this.#cursor+=1}}}