@kumwe/studio-core 0.1.0-alpha.8 → 0.1.0-beta.2

package/dist/url-policy.js

@@ -1,248 +1 @@
-/**
- * Canonical policy for external resource URLs (remote media imports, embeds).
- * Studio never fetches author-supplied URLs itself; hosts that do MUST apply
- * this validator before any fetch. The policy is purely lexical and
- * deterministic — it classifies the WHATWG-parsed URL without network access,
- * DNS resolution, clocks, or locale sensitivity. DNS-rebinding defence,
- * redirect re-validation, and response verification therefore remain host
- * runtime obligations of the hardened fetcher.
- */
-export const STUDIO_DEFAULT_URL_POLICY = Object.freeze({
-    allowedSchemes: Object.freeze(['https:']),
-    allowPrivateHosts: false,
-    maxLength: 2_048,
-});
-/**
- * Validate one external resource URL against the policy. The candidate is
- * parsed with the WHATWG URL parser and classification operates on the parsed
- * `hostname`, so decimal, octal, hexadecimal, and dotted-partial IPv4
- * spellings (`2130706433`, `0x7f000001`, `017700000001`, `127.1`) are
- * normalized before range checks and cannot smuggle a private address past
- * the policy. Punycode and IDN hosts that name none of the disallowed ranges
- * are accepted lexically; whether such a name ultimately resolves to a
- * private address is a DNS-time question the host fetcher must re-check.
- */
-export function validateExternalUrl(candidate, policy = STUDIO_DEFAULT_URL_POLICY) {
-    if (candidate.length > policy.maxLength) {
-        return { ok: false, reason: 'url-too-long' };
-    }
-    let parsed;
-    try {
-        parsed = new URL(candidate);
-    }
-    catch {
-        return { ok: false, reason: 'malformed' };
-    }
-    if (!policy.allowedSchemes.includes(parsed.protocol)) {
-        return { ok: false, reason: 'scheme-not-allowed' };
-    }
-    if (parsed.username.length > 0 || parsed.password.length > 0) {
-        return { ok: false, reason: 'credentials-in-url' };
-    }
-    if (!isPermittedHost(parsed.hostname, policy.allowPrivateHosts)) {
-        return { ok: false, reason: 'host-not-allowed' };
-    }
-    return { ok: true, url: parsed.href };
-}
-function isPermittedHost(hostname, allowPrivateHosts) {
-    if (hostname.length === 0) {
-        return false;
-    }
-    if (allowPrivateHosts) {
-        return true;
-    }
-    const trimmed = hostname.endsWith('.') ? hostname.slice(0, -1) : hostname;
-    if (trimmed.length === 0) {
-        return false;
-    }
-    if (trimmed.startsWith('[') && trimmed.endsWith(']')) {
-        const groups = parseIpv6Groups(trimmed.slice(1, -1));
-        return groups !== undefined && !isDisallowedIpv6(groups);
-    }
-    const host = trimmed.toLowerCase();
-    if (host === 'localhost' || host.endsWith('.localhost')) {
-        return false;
-    }
-    if (host.endsWith('.local') || host.endsWith('.internal') || host.endsWith('.home.arpa')) {
-        return false;
-    }
-    const address = parseIpv4Host(host);
-    if (address !== undefined) {
-        return !isDisallowedIpv4(address);
-    }
-    return true;
-}
-function isDisallowedIpv4(address) {
-    const octet1 = Math.floor(address / 16_777_216) % 256;
-    const octet2 = Math.floor(address / 65_536) % 256;
-    return (address === 0 || // 0.0.0.0 unspecified
-        address === 4_294_967_295 || // 255.255.255.255 broadcast
-        octet1 === 127 || // 127.0.0.0/8 loopback
-        octet1 === 10 || // 10.0.0.0/8 private
-        (octet1 === 172 && octet2 >= 16 && octet2 <= 31) || // 172.16.0.0/12 private
-        (octet1 === 192 && octet2 === 168) || // 192.168.0.0/16 private
-        (octet1 === 169 && octet2 === 254) || // 169.254.0.0/16 link-local
-        (octet1 === 100 && octet2 >= 64 && octet2 <= 127) // 100.64.0.0/10 CGNAT
-    );
-}
-function isDisallowedIpv6(groups) {
-    const group = (index) => groups[index] ?? 0;
-    if (groups.every((piece) => piece === 0)) {
-        return true; // :: unspecified
-    }
-    if (groups.slice(0, 7).every((piece) => piece === 0) && group(7) === 1) {
-        return true; // ::1 loopback
-    }
-    if ((group(0) & 0xff_c0) === 0xfe_80) {
-        return true; // fe80::/10 link-local
-    }
-    if ((group(0) & 0xfe_00) === 0xfc_00) {
-        return true; // fc00::/7 unique-local
-    }
-    if (groups.slice(0, 5).every((piece) => piece === 0) &&
-        (group(5) === 0xff_ff || group(5) === 0)) {
-        // ::ffff:0:0/96 IPv4-mapped and the deprecated ::/96 IPv4-compatible
-        // block classify as their embedded IPv4 address.
-        return isDisallowedIpv4(group(6) * 65_536 + group(7));
-    }
-    return false;
-}
-/**
- * Interpret a hostname the way the WHATWG IPv4 host parser does: up to four
- * dot-separated numbers in decimal, octal (leading `0`), or hexadecimal
- * (leading `0x`), where the final number may span the remaining octets.
- * Returns the 32-bit address, or `undefined` when the host is not an IPv4
- * candidate and must be treated as a name.
- */
-function parseIpv4Host(host) {
-    if (!/^[0-9A-Fa-fXx.]+$/u.test(host)) {
-        return undefined;
-    }
-    const parts = host.split('.');
-    if (parts.length > 4) {
-        return undefined;
-    }
-    const numbers = [];
-    for (const part of parts) {
-        const value = parseIpv4Number(part);
-        if (value === undefined) {
-            return undefined;
-        }
-        numbers.push(value);
-    }
-    const last = numbers[numbers.length - 1];
-    if (last === undefined) {
-        return undefined;
-    }
-    const prefix = numbers.slice(0, -1);
-    if (prefix.some((octet) => octet > 255) || last > 256 ** (4 - prefix.length) - 1) {
-        return undefined;
-    }
-    let address = last;
-    for (let index = 0; index < prefix.length; index += 1) {
-        address += (prefix[index] ?? 0) * 256 ** (3 - index);
-    }
-    return address;
-}
-function parseIpv4Number(part) {
-    if (part.length === 0) {
-        return undefined;
-    }
-    let digits = part;
-    let radix = 10;
-    if (digits.length >= 2 && (digits.startsWith('0x') || digits.startsWith('0X'))) {
-        digits = digits.slice(2);
-        radix = 16;
-        if (digits.length === 0) {
-            return 0;
-        }
-    }
-    else if (digits.length >= 2 && digits.startsWith('0')) {
-        digits = digits.slice(1);
-        radix = 8;
-    }
-    const pattern = radix === 16 ? /^[0-9A-Fa-f]+$/u : radix === 8 ? /^[0-7]+$/u : /^[0-9]+$/u;
-    if (!pattern.test(digits)) {
-        return undefined;
-    }
-    const value = Number.parseInt(digits, radix);
-    return value > 4_294_967_295 ? undefined : value;
-}
-/**
- * Parse a bracket-stripped IPv6 literal into its eight 16-bit groups,
- * expanding one `::` compression and accepting a trailing dotted-quad
- * (IPv4-in-IPv6) suffix. Returns `undefined` for anything else so callers
- * fail closed on hosts this parser cannot classify.
- */
-function parseIpv6Groups(literal) {
-    if (literal.length === 0 || literal.includes('%')) {
-        return undefined;
-    }
-    const marker = literal.indexOf('::');
-    if (marker === -1) {
-        const pieces = parseIpv6Pieces(literal, true);
-        return pieces?.length === 8 ? pieces : undefined;
-    }
-    if (literal.includes('::', marker + 1)) {
-        return undefined;
-    }
-    const head = parseIpv6Pieces(literal.slice(0, marker), false);
-    const tail = parseIpv6Pieces(literal.slice(marker + 2), true);
-    if (head === undefined || tail === undefined) {
-        return undefined;
-    }
-    const missing = 8 - head.length - tail.length;
-    if (missing < 1) {
-        return undefined;
-    }
-    const zeros = [];
-    for (let index = 0; index < missing; index += 1) {
-        zeros.push(0);
-    }
-    return [...head, ...zeros, ...tail];
-}
-function parseIpv6Pieces(text, allowIpv4Suffix) {
-    if (text.length === 0) {
-        return [];
-    }
-    const parts = text.split(':');
-    const pieces = [];
-    for (let index = 0; index < parts.length; index += 1) {
-        const part = parts[index];
-        if (part === undefined || part.length === 0) {
-            return undefined;
-        }
-        if (allowIpv4Suffix && index === parts.length - 1 && part.includes('.')) {
-            const embedded = parseDottedQuad(part);
-            if (embedded === undefined) {
-                return undefined;
-            }
-            pieces.push(Math.floor(embedded / 65_536), embedded % 65_536);
-            continue;
-        }
-        if (!/^[0-9A-Fa-f]{1,4}$/u.test(part)) {
-            return undefined;
-        }
-        pieces.push(Number.parseInt(part, 16));
-    }
-    return pieces;
-}
-function parseDottedQuad(text) {
-    const parts = text.split('.');
-    if (parts.length !== 4) {
-        return undefined;
-    }
-    let address = 0;
-    for (const part of parts) {
-        if (!/^(?:0|[1-9][0-9]{0,2})$/u.test(part)) {
-            return undefined;
-        }
-        const octet = Number(part);
-        if (octet > 255) {
-            return undefined;
-        }
-        address = address * 256 + octet;
-    }
-    return address;
-}
-//# sourceMappingURL=url-policy.js.map
+export const STUDIO_DEFAULT_URL_POLICY=Object.freeze({allowedSchemes:Object.freeze([`https:`]),allowPrivateHosts:!1,maxLength:2048});export function validateExternalUrl(t,r=STUDIO_DEFAULT_URL_POLICY){if(t.length>r.maxLength)return{ok:!1,reason:`url-too-long`};let i;try{i=new URL(t)}catch{return{ok:!1,reason:`malformed`}}return r.allowedSchemes.includes(i.protocol)?i.username.length>0||i.password.length>0?{ok:!1,reason:`credentials-in-url`}:n(i.hostname,r.allowPrivateHosts)?{ok:!0,url:i.href}:{ok:!1,reason:`host-not-allowed`}:{ok:!1,reason:`scheme-not-allowed`}}function n(e,t){if(e.length===0)return!1;if(t)return!0;let n=e.endsWith(`.`)?e.slice(0,-1):e;if(n.length===0)return!1;if(n.startsWith(`[`)&&n.endsWith(`]`)){let e=s(n.slice(1,-1));return e!==void 0&&!i(e)}let o=n.toLowerCase();if(o===`localhost`||o.endsWith(`.localhost`)||o.endsWith(`.local`)||o.endsWith(`.internal`)||o.endsWith(`.home.arpa`))return!1;let c=a(o);return c===void 0||!r(c)}function r(e){let t=Math.floor(e/16777216)%256,n=Math.floor(e/65536)%256;return e===0||e===4294967295||t===127||t===10||t===172&&n>=16&&n<=31||t===192&&n===168||t===169&&n===254||t===100&&n>=64&&n<=127}function i(e){let t=t=>e[t]??0;return e.every(e=>e===0)||e.slice(0,7).every(e=>e===0)&&t(7)===1||(t(0)&65472)==65152||(t(0)&65024)==64512?!0:e.slice(0,5).every(e=>e===0)&&(t(5)===65535||t(5)===0)?r(t(6)*65536+t(7)):!1}function a(e){if(!/^[0-9A-Fa-fXx.]+$/u.test(e))return;let t=e.split(`.`);if(t.length>4)return;let n=[];for(let e of t){let t=o(e);if(t===void 0)return;n.push(t)}let r=n[n.length-1];if(r===void 0)return;let i=n.slice(0,-1);if(i.some(e=>e>255)||r>256**(4-i.length)-1)return;let a=r;for(let e=0;e<i.length;e+=1)a+=(i[e]??0)*256**(3-e);return a}function o(e){if(e.length===0)return;let t=e,n=10;if(t.length>=2&&(t.startsWith(`0x`)||t.startsWith(`0X`))){if(t=t.slice(2),n=16,t.length===0)return 0}else t.length>=2&&t.startsWith(`0`)&&(t=t.slice(1),n=8);if(!(n===16?/^[0-9A-Fa-f]+$/u:n===8?/^[0-7]+$/u:/^[0-9]+$/u).test(t))return;let r=Number.parseInt(t,n);return r>4294967295?void 0:r}function s(e){if(e.length===0||e.includes(`%`))return;let t=e.indexOf(`::`);if(t===-1){let t=c(e,!0);return t?.length===8?t:void 0}if(e.includes(`::`,t+1))return;let n=c(e.slice(0,t),!1),r=c(e.slice(t+2),!0);if(n===void 0||r===void 0)return;let i=8-n.length-r.length;if(i<1)return;let a=[];for(let e=0;e<i;e+=1)a.push(0);return[...n,...a,...r]}function c(e,t){if(e.length===0)return[];let n=e.split(`:`),r=[];for(let e=0;e<n.length;e+=1){let i=n[e];if(i===void 0||i.length===0)return;if(t&&e===n.length-1&&i.includes(`.`)){let e=l(i);if(e===void 0)return;r.push(Math.floor(e/65536),e%65536);continue}if(!/^[0-9A-Fa-f]{1,4}$/u.test(i))return;r.push(Number.parseInt(i,16))}return r}function l(e){let t=e.split(`.`);if(t.length!==4)return;let n=0;for(let e of t){if(!/^(?:0|[1-9][0-9]{0,2})$/u.test(e))return;let t=Number(e);if(t>255)return;n=n*256+t}return n}

package/dist/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,0BAA0B;IACzC,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;CAChB;AA8BD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,aAAa,EACvB,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CA+G3B"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EASL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAMhC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,0BAA0B;IACzC,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;CAChB;AA8BD,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,aAAa,EACvB,OAAO,GAAE,0BAA+B,GACvC,yBAAyB,CA+G3B"}

package/dist/validation.js

@@ -1,398 +1 @@
-import { blueprintSchema, commonSchema, } from '@kumwe/studio-protocol';
-import { compileProfileSchema, } from './profile-validator.js';
-// The canonical Blueprint schema is interpreted, not code-generated, so
-// boot-path validation stays eval-free and runs under a CSP that forbids
-// string-to-code compilation (TH-013).
-const validateBlueprintSchema = compileProfileSchema(blueprintSchema, {
-    schemas: [commonSchema],
-});
-const propertyValidators = new WeakMap();
-const MAX_BLUEPRINT_JSON_BYTES = 16 * 1_024 * 1_024;
-const MAX_BLUEPRINT_JSON_DEPTH = 64;
-const MAX_BLUEPRINT_JSON_VALUES = 1_000_000;
-const MAX_JSON_CONTAINER_ENTRIES = 10_000;
-export function validateBlueprint(document, registry, options = {}) {
-    const diagnostics = [];
-    const maximumDepth = validationLimit(options.maximumDepth, 32, 'maximumDepth');
-    const maximumNodes = validationLimit(options.maximumNodes, 5_000, 'maximumNodes');
-    const nodePreflightDiagnostics = preflightBlueprintNodes(document, maximumDepth, maximumNodes);
-    if (nodePreflightDiagnostics.length > 0) {
-        return { diagnostics: nodePreflightDiagnostics, valid: false };
-    }
-    const valuePreflightDiagnostic = preflightBlueprintJson(document);
-    if (valuePreflightDiagnostic !== undefined) {
-        return { diagnostics: [valuePreflightDiagnostic], valid: false };
-    }
-    if (!validateBlueprintSchema.validate(document)) {
-        diagnostics.push(...schemaDiagnostics(validateBlueprintSchema.errors));
-        return { diagnostics, valid: false };
-    }
-    const blueprint = document;
-    const identifiers = new Set();
-    const blockLocks = indexBlockLocks(blueprint.dependencyLock.blocks, diagnostics);
-    let nodeCount = 0;
-    const stack = blueprint.roots.map((node) => ({ depth: 1, node })).reverse();
-    while (stack.length > 0) {
-        const frame = stack.pop();
-        if (frame === undefined) {
-            break;
-        }
-        const { depth, node } = frame;
-        nodeCount += 1;
-        if (nodeCount > maximumNodes) {
-            break;
-        }
-        if (depth > maximumDepth) {
-            diagnostics.push(diagnostic('maximum-depth', `Node depth exceeds the configured limit of ${maximumDepth}.`, node.id));
-            continue;
-        }
-        if (identifiers.has(node.id)) {
-            diagnostics.push(diagnostic('duplicate-node-id', `Node identifier ${node.id} is not unique.`, node.id));
-        }
-        identifiers.add(node.id);
-        const registration = registry.resolveRegistration(node.type, node.version);
-        if (registration === undefined) {
-            diagnostics.push(diagnostic('block-unavailable', `Block ${node.type}@${node.version} is not registered.`, node.id));
-        }
-        else {
-            validateBlockLock(node, registration.definition, registration.verifiedIntegrity, blockLocks.get(blockKey(node.type, node.version)), diagnostics);
-            validateNodeProperties(node, registration.definition, registry, diagnostics);
-            validateSlots(node, registration.definition, diagnostics);
-        }
-        validateBindings(node, options.fieldPaths, diagnostics);
-        const childCollections = Object.values(node.slots);
-        for (let collectionIndex = childCollections.length - 1; collectionIndex >= 0; collectionIndex -= 1) {
-            const children = childCollections[collectionIndex];
-            if (children === undefined) {
-                continue;
-            }
-            for (let childIndex = children.length - 1; childIndex >= 0; childIndex -= 1) {
-                const child = children[childIndex];
-                if (child !== undefined) {
-                    stack.push({ depth: depth + 1, node: child });
-                }
-            }
-        }
-    }
-    if (nodeCount > maximumNodes) {
-        diagnostics.push(diagnostic('maximum-nodes', `Blueprint contains more than the configured limit of ${maximumNodes} nodes.`));
-    }
-    return {
-        diagnostics,
-        valid: diagnostics.every((entry) => entry.severity !== 'blocking' && entry.severity !== 'error'),
-    };
-}
-function preflightBlueprintNodes(document, maximumDepth, maximumNodes) {
-    if (!isRecord(document) || !Array.isArray(document.roots)) {
-        return [];
-    }
-    const roots = document.roots;
-    if (roots.length > maximumNodes) {
-        return [
-            diagnostic('maximum-nodes', `Blueprint contains more than the configured limit of ${maximumNodes} nodes.`),
-        ];
-    }
-    const seen = new WeakSet();
-    let scheduled = roots.length;
-    const stack = roots.map((value) => ({ depth: 1, value })).reverse();
-    while (stack.length > 0) {
-        const frame = stack.pop();
-        if (frame === undefined || !isRecord(frame.value)) {
-            continue;
-        }
-        if (seen.has(frame.value)) {
-            return [diagnostic('cyclic-blueprint', 'Blueprint nodes must form an acyclic JSON tree.')];
-        }
-        seen.add(frame.value);
-        if (frame.depth > maximumDepth) {
-            return [
-                diagnostic('maximum-depth', `Node depth exceeds the configured limit of ${maximumDepth}.`, typeof frame.value.id === 'string' ? frame.value.id : undefined),
-            ];
-        }
-        if (!isRecord(frame.value.slots)) {
-            continue;
-        }
-        for (const children of Object.values(frame.value.slots)) {
-            if (!Array.isArray(children)) {
-                continue;
-            }
-            scheduled += children.length;
-            if (scheduled > maximumNodes) {
-                return [
-                    diagnostic('maximum-nodes', `Blueprint contains more than the configured limit of ${maximumNodes} nodes.`),
-                ];
-            }
-            for (let index = children.length - 1; index >= 0; index -= 1) {
-                stack.push({ depth: frame.depth + 1, value: children[index] });
-            }
-        }
-    }
-    return [];
-}
-function preflightBlueprintJson(document) {
-    const seen = new WeakSet();
-    const stack = [{ depth: 0, value: document }];
-    let approximateBytes = 0;
-    let valueCount = 0;
-    while (stack.length > 0) {
-        const frame = stack.pop();
-        if (frame === undefined) {
-            break;
-        }
-        valueCount += 1;
-        if (valueCount > MAX_BLUEPRINT_JSON_VALUES) {
-            return diagnostic('maximum-json-values', `Blueprint exceeds the fixed alpha limit of ${MAX_BLUEPRINT_JSON_VALUES} JSON values.`);
-        }
-        if (frame.depth > MAX_BLUEPRINT_JSON_DEPTH) {
-            return diagnostic('maximum-value-depth', `Blueprint JSON value depth exceeds the fixed alpha limit of ${MAX_BLUEPRINT_JSON_DEPTH}.`);
-        }
-        const { value } = frame;
-        if (value === null) {
-            approximateBytes += 4;
-        }
-        else if (typeof value === 'boolean') {
-            approximateBytes += value ? 4 : 5;
-        }
-        else if (typeof value === 'number' && Number.isFinite(value)) {
-            approximateBytes += String(value).length;
-        }
-        else if (typeof value === 'string') {
-            approximateBytes += jsonStringByteLength(value);
-        }
-        else if (Array.isArray(value)) {
-            if (!isDenseJsonArray(value)) {
-                return diagnostic('non-json-value', 'Blueprint arrays must be dense JSON arrays.');
-            }
-            if (value.length > MAX_JSON_CONTAINER_ENTRIES) {
-                return diagnostic('maximum-array-items', `Blueprint arrays cannot exceed ${MAX_JSON_CONTAINER_ENTRIES} items.`);
-            }
-            if (seen.has(value)) {
-                return diagnostic('cyclic-blueprint', 'Blueprint must be an acyclic JSON document.');
-            }
-            seen.add(value);
-            approximateBytes += value.length + 2;
-            for (let index = value.length - 1; index >= 0; index -= 1) {
-                stack.push({ depth: frame.depth + 1, value: value[index] });
-            }
-        }
-        else if (isJsonRecord(value)) {
-            if (seen.has(value)) {
-                return diagnostic('cyclic-blueprint', 'Blueprint must be an acyclic JSON document.');
-            }
-            seen.add(value);
-            const entries = Object.entries(value);
-            if (entries.length > MAX_JSON_CONTAINER_ENTRIES) {
-                return diagnostic('maximum-object-properties', `Blueprint objects cannot exceed ${MAX_JSON_CONTAINER_ENTRIES} properties.`);
-            }
-            approximateBytes += entries.length + 2;
-            for (let index = entries.length - 1; index >= 0; index -= 1) {
-                const entry = entries[index];
-                if (entry === undefined) {
-                    continue;
-                }
-                const [key, child] = entry;
-                if (!isSafeJsonMemberName(key)) {
-                    return diagnostic('unsafe-json-member', 'Blueprint contains an unsafe JSON object member name.');
-                }
-                approximateBytes += jsonStringByteLength(key) + 1;
-                stack.push({ depth: frame.depth + 1, value: child });
-            }
-        }
-        else {
-            return diagnostic('non-json-value', 'Blueprint must contain only JSON-compatible values.');
-        }
-        if (approximateBytes > MAX_BLUEPRINT_JSON_BYTES) {
-            return diagnostic('maximum-json-bytes', `Blueprint exceeds the fixed alpha limit of ${MAX_BLUEPRINT_JSON_BYTES} encoded bytes.`);
-        }
-    }
-    return undefined;
-}
-function isDenseJsonArray(value) {
-    if (Object.getPrototypeOf(value) !== Array.prototype ||
-        Object.getOwnPropertySymbols(value).length) {
-        return false;
-    }
-    const ownNames = Object.getOwnPropertyNames(value);
-    return (ownNames.length === value.length + 1 &&
-        ownNames[value.length] === 'length' &&
-        ownNames.slice(0, -1).every((name, index) => name === String(index)));
-}
-function isJsonRecord(value) {
-    if (!isRecord(value) || Object.getOwnPropertySymbols(value).length > 0) {
-        return false;
-    }
-    const prototype = Object.getPrototypeOf(value);
-    if (prototype !== Object.prototype && prototype !== null) {
-        return false;
-    }
-    return Object.getOwnPropertyNames(value).length === Object.keys(value).length;
-}
-function isSafeJsonMemberName(value) {
-    if (value.length === 0 ||
-        value.length > 200 ||
-        value === '__proto__' ||
-        value === 'prototype' ||
-        value === 'constructor') {
-        return false;
-    }
-    for (let index = 0; index < value.length; index += 1) {
-        const code = value.charCodeAt(index);
-        if (code <= 0x1f || code === 0x7f) {
-            return false;
-        }
-    }
-    return true;
-}
-function jsonStringByteLength(value) {
-    let bytes = 2;
-    for (let index = 0; index < value.length; index += 1) {
-        const code = value.charCodeAt(index);
-        if (code <= 0x1f) {
-            bytes += 6;
-        }
-        else if (code === 0x22 || code === 0x5c) {
-            bytes += 2;
-        }
-        else if (code <= 0x7f) {
-            bytes += 1;
-        }
-        else if (code <= 0x7ff) {
-            bytes += 2;
-        }
-        else if (code >= 0xd800 && code <= 0xdbff) {
-            const next = value.charCodeAt(index + 1);
-            if (next >= 0xdc00 && next <= 0xdfff) {
-                bytes += 4;
-                index += 1;
-            }
-            else {
-                bytes += 3;
-            }
-        }
-        else {
-            bytes += 3;
-        }
-    }
-    return bytes;
-}
-function validationLimit(value, fallback, name) {
-    const result = value ?? fallback;
-    if (!Number.isInteger(result) || result < 1) {
-        throw new RangeError(`${name} must be a positive integer.`);
-    }
-    return result;
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function schemaDiagnostics(errors) {
-    return (errors ?? []).map((error) => diagnostic(`schema-${error.keyword}`, error.message, undefined, error.instancePath));
-}
-function validateNodeProperties(node, definition, registry, diagnostics) {
-    const key = `${definition.type}@${definition.version}`;
-    let cache = propertyValidators.get(registry);
-    if (cache === undefined) {
-        cache = new Map();
-        propertyValidators.set(registry, cache);
-    }
-    let validator = cache.get(key);
-    if (validator === undefined) {
-        const compiled = compileProfileSchema(definition.propertySchema);
-        cache.set(key, compiled);
-        validator = compiled;
-    }
-    if (!validator.validate(node.properties)) {
-        diagnostics.push(...schemaDiagnostics(validator.errors).map((entry) => ({
-            ...entry,
-            code: `studio.validation/block-properties-${entry.code.split('/').at(-1) ?? 'invalid'}`,
-            location: { ...entry.location, nodeId: node.id },
-        })));
-    }
-}
-function indexBlockLocks(locks, diagnostics) {
-    const indexed = new Map();
-    for (const lock of locks) {
-        const key = blockKey(lock.type, lock.version);
-        if (indexed.has(key)) {
-            diagnostics.push(diagnostic('block-lock-duplicate', `Blueprint dependency lock repeats block ${lock.type}@${lock.version}.`));
-        }
-        else {
-            indexed.set(key, lock);
-        }
-    }
-    return indexed;
-}
-function validateBlockLock(node, definition, verifiedIntegrity, lock, diagnostics) {
-    if (lock === undefined) {
-        diagnostics.push(diagnostic('block-lock-missing', `Block ${node.type}@${node.version} is absent from the Blueprint dependency lock.`, node.id));
-        return;
-    }
-    if (lock.revision !== definition.revision) {
-        diagnostics.push(diagnostic('block-lock-revision-mismatch', `Block ${node.type}@${node.version} resolves to revision ${definition.revision}, not locked revision ${lock.revision}.`, node.id));
-    }
-    if (lock.integrity !== undefined && verifiedIntegrity === undefined) {
-        diagnostics.push(diagnostic('block-lock-integrity-unverified', `Block ${node.type}@${node.version} has a locked integrity value that the registry cannot verify.`, node.id));
-    }
-    else if (lock.integrity !== undefined && lock.integrity !== verifiedIntegrity) {
-        diagnostics.push(diagnostic('block-lock-integrity-mismatch', `Block ${node.type}@${node.version} does not match its locked integrity value.`, node.id));
-    }
-}
-function blockKey(type, version) {
-    return `${type}@${version}`;
-}
-function validateSlots(node, definition, diagnostics) {
-    const slots = new Map(definition.slots.map((slot) => [slot.id, slot]));
-    for (const [slotName, children] of Object.entries(node.slots)) {
-        const slot = slots.get(slotName);
-        if (slot === undefined) {
-            diagnostics.push(diagnostic('slot-unknown', `Slot ${slotName} is not declared by ${node.type}.`, node.id));
-            continue;
-        }
-        if (children.length > slot.maximum) {
-            diagnostics.push(diagnostic('slot-maximum', `Slot ${slotName} accepts at most ${slot.maximum} children.`, node.id));
-        }
-        for (const child of children) {
-            if (slot.accepts.types !== undefined && !slot.accepts.types.includes(child.type)) {
-                diagnostics.push(diagnostic('slot-rejects-type', `Slot ${slotName} does not accept ${child.type}.`, child.id));
-            }
-        }
-    }
-    for (const slot of slots.values()) {
-        const count = Object.hasOwn(node.slots, slot.id) ? (node.slots[slot.id]?.length ?? 0) : 0;
-        if (count < slot.minimum) {
-            diagnostics.push(diagnostic('slot-minimum', `Slot ${slot.id} requires at least ${slot.minimum} children.`, node.id));
-        }
-    }
-}
-function validateBindings(node, fieldPaths, diagnostics) {
-    if (fieldPaths === undefined) {
-        return;
-    }
-    for (const binding of Object.values(node.bindings)) {
-        if (binding.source.kind !== 'entry-field') {
-            continue;
-        }
-        const path = binding.source.fieldPath.join('.');
-        if (!fieldPaths.has(path)) {
-            diagnostics.push(diagnostic('field-unavailable', `Field ${path} is not available to this Studio configuration.`, node.id));
-        }
-    }
-}
-function diagnostic(name, message, nodeId, jsonPointer) {
-    const result = {
-        code: `studio.validation/${name}`,
-        message: { defaultMessage: message, key: `studio.validation/${name}` },
-        severity: 'error',
-    };
-    if (nodeId !== undefined || jsonPointer !== undefined) {
-        result.location = {};
-        if (nodeId !== undefined) {
-            result.location.nodeId = nodeId;
-        }
-        if (jsonPointer !== undefined) {
-            result.location.jsonPointer = jsonPointer;
-        }
-    }
-    return result;
-}
-//# sourceMappingURL=validation.js.map
+import{blueprintSchema as e,commonSchema as t}from"@kumwe/studio-protocol";import{compileProfileSchema as n}from"./profile-validator.js";const r=n(e,{schemas:[t]}),i=new WeakMap,a=16777216,o=1e6,s=1e4;export function validateBlueprint(e,t,n={}){let i=[],a=h(n.maximumDepth,32,`maximumDepth`),o=h(n.maximumNodes,5e3,`maximumNodes`),s=l(e,a,o);if(s.length>0)return{diagnostics:s,valid:!1};let c=u(e);if(c!==void 0)return{diagnostics:[c],valid:!1};if(!r.validate(e))return i.push(..._(r.errors)),{diagnostics:i,valid:!1};let d=e,f=new Set,p=S(d.dependencyLock.blocks,i),m=0,g=d.roots.map(e=>({depth:1,node:e})).reverse();for(;g.length>0;){let e=g.pop();if(e===void 0)break;let{depth:r,node:s}=e;if(m+=1,m>o)break;if(r>a){i.push(D(`maximum-depth`,`Node depth exceeds the configured limit of ${a}.`,s.id));continue}f.has(s.id)&&i.push(D(`duplicate-node-id`,`Node identifier ${s.id} is not unique.`,s.id)),f.add(s.id);let c=t.resolveRegistration(s.type,s.version);c===void 0?i.push(D(`block-unavailable`,`Block ${s.type}@${s.version} is not registered.`,s.id)):(C(s,c.definition,c.verifiedIntegrity,p.get(w(s.type,s.version)),i),v(s,c.definition,t,i),T(s,c.definition,i)),E(s,n.fieldPaths,i);let l=Object.values(s.slots);for(let e=l.length-1;e>=0;--e){let t=l[e];if(t!==void 0)for(let e=t.length-1;e>=0;--e){let n=t[e];n!==void 0&&g.push({depth:r+1,node:n})}}}return m>o&&i.push(D(`maximum-nodes`,`Blueprint contains more than the configured limit of ${o} nodes.`)),{diagnostics:i,valid:i.every(e=>e.severity!==`blocking`&&e.severity!==`error`)}}function l(e,t,n){if(!g(e)||!Array.isArray(e.roots))return[];let r=e.roots;if(r.length>n)return[D(`maximum-nodes`,`Blueprint contains more than the configured limit of ${n} nodes.`)];let i=new WeakSet,a=r.length,o=r.map(e=>({depth:1,value:e})).reverse();for(;o.length>0;){let e=o.pop();if(!(e===void 0||!g(e.value))){if(i.has(e.value))return[D(`cyclic-blueprint`,`Blueprint nodes must form an acyclic JSON tree.`)];if(i.add(e.value),e.depth>t)return[D(`maximum-depth`,`Node depth exceeds the configured limit of ${t}.`,typeof e.value.id==`string`?e.value.id:void 0)];if(g(e.value.slots)){for(let t of Object.values(e.value.slots))if(Array.isArray(t)){if(a+=t.length,a>n)return[D(`maximum-nodes`,`Blueprint contains more than the configured limit of ${n} nodes.`)];for(let n=t.length-1;n>=0;--n)o.push({depth:e.depth+1,value:t[n]})}}}}return[]}function u(e){let t=new WeakSet,n=[{depth:0,value:e}],r=0,i=0;for(;n.length>0;){let e=n.pop();if(e===void 0)break;if(i+=1,i>o)return D(`maximum-json-values`,`Blueprint exceeds the fixed alpha limit of ${o} JSON values.`);if(e.depth>64)return D(`maximum-value-depth`,`Blueprint JSON value depth exceeds the fixed alpha limit of 64.`);let{value:c}=e;if(c===null)r+=4;else if(typeof c==`boolean`)r+=c?4:5;else if(typeof c==`number`&&Number.isFinite(c))r+=String(c).length;else if(typeof c==`string`)r+=m(c);else if(Array.isArray(c)){if(!d(c))return D(`non-json-value`,`Blueprint arrays must be dense JSON arrays.`);if(c.length>s)return D(`maximum-array-items`,`Blueprint arrays cannot exceed ${s} items.`);if(t.has(c))return D(`cyclic-blueprint`,`Blueprint must be an acyclic JSON document.`);t.add(c),r+=c.length+2;for(let t=c.length-1;t>=0;--t)n.push({depth:e.depth+1,value:c[t]})}else if(f(c)){if(t.has(c))return D(`cyclic-blueprint`,`Blueprint must be an acyclic JSON document.`);t.add(c);let i=Object.entries(c);if(i.length>s)return D(`maximum-object-properties`,`Blueprint objects cannot exceed ${s} properties.`);r+=i.length+2;for(let t=i.length-1;t>=0;--t){let a=i[t];if(a===void 0)continue;let[o,s]=a;if(!p(o))return D(`unsafe-json-member`,`Blueprint contains an unsafe JSON object member name.`);r+=m(o)+1,n.push({depth:e.depth+1,value:s})}}else return D(`non-json-value`,`Blueprint must contain only JSON-compatible values.`);if(r>a)return D(`maximum-json-bytes`,`Blueprint exceeds the fixed alpha limit of ${a} encoded bytes.`)}}function d(e){if(Object.getPrototypeOf(e)!==Array.prototype||Object.getOwnPropertySymbols(e).length)return!1;let t=Object.getOwnPropertyNames(e);return t.length===e.length+1&&t[e.length]===`length`&&t.slice(0,-1).every((e,t)=>e===String(t))}function f(e){if(!g(e)||Object.getOwnPropertySymbols(e).length>0)return!1;let t=Object.getPrototypeOf(e);return t!==Object.prototype&&t!==null?!1:Object.getOwnPropertyNames(e).length===Object.keys(e).length}function p(e){if(e.length===0||e.length>200||e===`__proto__`||e===`prototype`||e===`constructor`)return!1;for(let t=0;t<e.length;t+=1){let n=e.charCodeAt(t);if(n<=31||n===127)return!1}return!0}function m(e){let t=2;for(let n=0;n<e.length;n+=1){let r=e.charCodeAt(n);if(r<=31)t+=6;else if(r===34||r===92)t+=2;else if(r<=127)t+=1;else if(r<=2047)t+=2;else if(r>=55296&&r<=56319){let r=e.charCodeAt(n+1);r>=56320&&r<=57343?(t+=4,n+=1):t+=3}else t+=3}return t}function h(e,t,n){let r=e??t;if(!Number.isInteger(r)||r<1)throw RangeError(`${n} must be a positive integer.`);return r}function g(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function _(e){return(e??[]).map(e=>D(`schema-${e.keyword}`,e.message,void 0,e.instancePath))}function v(e,t,r,a){let o=`${t.type}@${t.version}`,s=i.get(r);s===void 0&&(s=new Map,i.set(r,s));let c=s.get(o);if(c===void 0){let e=n(t.propertySchema);s.set(o,e),c=e}y(e,c,e.properties,void 0,a);let l=new Map;for(let t of Object.keys(e.responsive??{}).sort(O)){let n=e.responsive?.[t];if(n!==void 0)for(let r of Object.keys(n).sort(O)){let i=n[r];if(i===void 0)continue;let a=l.get(r)??{...e.properties};a[t]=i,l.set(r,a)}}for(let t of[...l.keys()].sort(O)){let n=l.get(t);n!==void 0&&y(e,c,n,t,a)}}function y(e,t,n,r,i){t.validate(n)||i.push(..._(t.errors).map(t=>({...t,code:`studio.validation/block-properties-${t.code.split(`/`).at(-1)??`invalid`}`,location:{...t.location,nodeId:e.id,...r===void 0?{}:{jsonPointer:b(t.location?.jsonPointer,r)}}})))}function b(e,t){let n=e?.split(`/`).slice(1)??[],r=n.shift();return r===void 0?`/responsive/${x(t)}`:[``,`responsive`,r,x(t),...n].join(`/`)}function x(e){return e.replaceAll(`~`,`~0`).replaceAll(`/`,`~1`)}function S(e,t){let n=new Map;for(let r of e){let e=w(r.type,r.version);n.has(e)?t.push(D(`block-lock-duplicate`,`Blueprint dependency lock repeats block ${r.type}@${r.version}.`)):n.set(e,r)}return n}function C(e,t,n,r,i){if(r===void 0){i.push(D(`block-lock-missing`,`Block ${e.type}@${e.version} is absent from the Blueprint dependency lock.`,e.id));return}r.revision!==t.revision&&i.push(D(`block-lock-revision-mismatch`,`Block ${e.type}@${e.version} resolves to revision ${t.revision}, not locked revision ${r.revision}.`,e.id)),r.integrity!==void 0&&n===void 0?i.push(D(`block-lock-integrity-unverified`,`Block ${e.type}@${e.version} has a locked integrity value that the registry cannot verify.`,e.id)):r.integrity!==void 0&&r.integrity!==n&&i.push(D(`block-lock-integrity-mismatch`,`Block ${e.type}@${e.version} does not match its locked integrity value.`,e.id))}function w(e,t){return`${e}@${t}`}function T(e,t,n){let r=new Map(t.slots.map(e=>[e.id,e]));for(let[t,i]of Object.entries(e.slots)){let a=r.get(t);if(a===void 0){n.push(D(`slot-unknown`,`Slot ${t} is not declared by ${e.type}.`,e.id));continue}i.length>a.maximum&&n.push(D(`slot-maximum`,`Slot ${t} accepts at most ${a.maximum} children.`,e.id));for(let e of i)a.accepts.types!==void 0&&!a.accepts.types.includes(e.type)&&n.push(D(`slot-rejects-type`,`Slot ${t} does not accept ${e.type}.`,e.id))}for(let t of r.values())(Object.hasOwn(e.slots,t.id)?e.slots[t.id]?.length??0:0)<t.minimum&&n.push(D(`slot-minimum`,`Slot ${t.id} requires at least ${t.minimum} children.`,e.id))}function E(e,t,n){if(t!==void 0)for(let r of Object.values(e.bindings)){if(r.source.kind!==`entry-field`)continue;let i=r.source.fieldPath.join(`.`);t.has(i)||n.push(D(`field-unavailable`,`Field ${i} is not available to this Studio configuration.`,e.id))}}function D(e,t,n,r){let i={code:`studio.validation/${e}`,message:{defaultMessage:t,key:`studio.validation/${e}`},severity:`error`};return(n!==void 0||r!==void 0)&&(i.location={},n!==void 0&&(i.location.nodeId=n),r!==void 0&&(i.location.jsonPointer=r)),i}function O(e,t){return e<t?-1:+(e>t)}