@legionworks/facet 1.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE-APACHE +202 -0
- package/LICENSE-MIT +23 -0
- package/README.md +158 -0
- package/dist/gallery/chunk-4g8rem85.css +656 -0
- package/dist/gallery/chunk-c6s9k9ty.js +5970 -0
- package/dist/gallery/frame/artifact.css +8424 -0
- package/dist/gallery/frame/chunks/abnfDiagram-N423BO3Z-jj74szbm.js +155 -0
- package/dist/gallery/frame/chunks/architecture-TIHT7OUA-cvdjn7dt.js +10 -0
- package/dist/gallery/frame/chunks/architectureDiagram-T3A2C74G-n4z77eg6.js +8675 -0
- package/dist/gallery/frame/chunks/blockDiagram-VBNYF7ZC-7xsqzrd1.js +3529 -0
- package/dist/gallery/frame/chunks/c4Diagram-5PPSVZJV-z2zjs7wx.js +2413 -0
- package/dist/gallery/frame/chunks/classDiagram-JCYQIIEL-ve8rngqp.js +47 -0
- package/dist/gallery/frame/chunks/classDiagram-v2-OCEON4UE-8cfaxb8z.js +47 -0
- package/dist/gallery/frame/chunks/cose-bilkent-JH36ORCC-sn92qexx.js +4822 -0
- package/dist/gallery/frame/chunks/cynefin-VYW2F7L2-tqjv913d.js +10 -0
- package/dist/gallery/frame/chunks/cynefinDiagram-MW4NZA55-c1c0dj12.js +500 -0
- package/dist/gallery/frame/chunks/dagre-VZM6K2ZE-7tyg4yt2.js +476 -0
- package/dist/gallery/frame/chunks/diagram-7IWD3JNH-y4eng9sc.js +526 -0
- package/dist/gallery/frame/chunks/diagram-B4RE2ZJO-rn3p7j5h.js +673 -0
- package/dist/gallery/frame/chunks/diagram-LBJQPF4R-w4a2cm9q.js +255 -0
- package/dist/gallery/frame/chunks/diagram-Q27KOJAE-aqc2v7wy.js +575 -0
- package/dist/gallery/frame/chunks/diagram-UB23O5K3-xncy8nyd.js +355 -0
- package/dist/gallery/frame/chunks/ebnfDiagram-BXEA7PRR-acwgxz16.js +175 -0
- package/dist/gallery/frame/chunks/erDiagram-JOGREHBK-mzp5nswt.js +1332 -0
- package/dist/gallery/frame/chunks/eventmodeling-45OFAUF4-sg07qr0c.js +10 -0
- package/dist/gallery/frame/chunks/flowDiagram-UKHOOZJN-2e5ygs44.js +29 -0
- package/dist/gallery/frame/chunks/ganttDiagram-PKOTCBZU-p2hhh7hr.js +2620 -0
- package/dist/gallery/frame/chunks/gitGraph-TEB2WS4Q-j6kw0naa.js +10 -0
- package/dist/gallery/frame/chunks/gitGraphDiagram-DS77QQ5N-4z9z8wjm.js +1347 -0
- package/dist/gallery/frame/chunks/info-DKCQHKI2-mpt80jd3.js +10 -0
- package/dist/gallery/frame/chunks/infoDiagram-6WML65LV-5rqm3mgg.js +65 -0
- package/dist/gallery/frame/chunks/ishikawaDiagram-WSZJBQD7-b51z96jy.js +975 -0
- package/dist/gallery/frame/chunks/journeyDiagram-NVQOT4AX-9jbfp0pk.js +1272 -0
- package/dist/gallery/frame/chunks/kanban-definition-27J2QSJJ-4x0vx4se.js +1116 -0
- package/dist/gallery/frame/chunks/katex-xfgk95tv.js +14034 -0
- package/dist/gallery/frame/chunks/markdown-1s5vwkf2.js +9 -0
- package/dist/gallery/frame/chunks/markdown-2h6bwsms.js +3239 -0
- package/dist/gallery/frame/chunks/markdown-2x113yh8.js +107 -0
- package/dist/gallery/frame/chunks/markdown-30b7rwmp.js +1943 -0
- package/dist/gallery/frame/chunks/markdown-356bfj4g.js +2031 -0
- package/dist/gallery/frame/chunks/markdown-44n9ea69.js +2406 -0
- package/dist/gallery/frame/chunks/markdown-56enrf2r.js +39 -0
- package/dist/gallery/frame/chunks/markdown-5avymm8t.js +725 -0
- package/dist/gallery/frame/chunks/markdown-6r4svars.js +33 -0
- package/dist/gallery/frame/chunks/markdown-6zz8efx2.js +24 -0
- package/dist/gallery/frame/chunks/markdown-7jp6prnb.js +19 -0
- package/dist/gallery/frame/chunks/markdown-809k7q41.js +55 -0
- package/dist/gallery/frame/chunks/markdown-82xmzhzd.js +1076 -0
- package/dist/gallery/frame/chunks/markdown-92n37gd4.js +7627 -0
- package/dist/gallery/frame/chunks/markdown-ag2sssf8.js +36 -0
- package/dist/gallery/frame/chunks/markdown-b4s7ntq2.js +19 -0
- package/dist/gallery/frame/chunks/markdown-c9k0fvp1.js +100 -0
- package/dist/gallery/frame/chunks/markdown-ceefymn8.js +125 -0
- package/dist/gallery/frame/chunks/markdown-d1wfbs70.js +243 -0
- package/dist/gallery/frame/chunks/markdown-dy5sgjhc.js +11022 -0
- package/dist/gallery/frame/chunks/markdown-dz3z5w30.js +30868 -0
- package/dist/gallery/frame/chunks/markdown-eg6ngz7y.js +30340 -0
- package/dist/gallery/frame/chunks/markdown-ff5wvb43.js +1149 -0
- package/dist/gallery/frame/chunks/markdown-ffg06nfz.js +86 -0
- package/dist/gallery/frame/chunks/markdown-fvfncadf.js +472 -0
- package/dist/gallery/frame/chunks/markdown-gvyszqpv.js +19 -0
- package/dist/gallery/frame/chunks/markdown-gx1p0ew0.js +88 -0
- package/dist/gallery/frame/chunks/markdown-gxye5frz.js +65 -0
- package/dist/gallery/frame/chunks/markdown-h7pzv34e.js +105 -0
- package/dist/gallery/frame/chunks/markdown-hab789t9.js +47 -0
- package/dist/gallery/frame/chunks/markdown-hjp6sj8t.js +125 -0
- package/dist/gallery/frame/chunks/markdown-jka64qgp.js +1993 -0
- package/dist/gallery/frame/chunks/markdown-k8xkn8mw.js +56 -0
- package/dist/gallery/frame/chunks/markdown-m7frq8x8.js +112 -0
- package/dist/gallery/frame/chunks/markdown-p740v4qm.js +36 -0
- package/dist/gallery/frame/chunks/markdown-pxfeh231.js +57 -0
- package/dist/gallery/frame/chunks/markdown-pzgd8z3s.js +87 -0
- package/dist/gallery/frame/chunks/markdown-qx3cngz2.js +1673 -0
- package/dist/gallery/frame/chunks/markdown-rawhfvvc.js +85 -0
- package/dist/gallery/frame/chunks/markdown-rd8w0ng9.js +49 -0
- package/dist/gallery/frame/chunks/markdown-rm2yxfjj.js +2773 -0
- package/dist/gallery/frame/chunks/markdown-s1jatrnk.js +993 -0
- package/dist/gallery/frame/chunks/markdown-sgfg5vvq.js +59 -0
- package/dist/gallery/frame/chunks/markdown-t4ethv9d.js +409 -0
- package/dist/gallery/frame/chunks/markdown-tnmabqvz.js +36 -0
- package/dist/gallery/frame/chunks/markdown-tvdpppw8.js +5292 -0
- package/dist/gallery/frame/chunks/markdown-v0x27twr.js +22 -0
- package/dist/gallery/frame/chunks/markdown-v14td68x.js +36 -0
- package/dist/gallery/frame/chunks/markdown-w6sgd54z.js +36 -0
- package/dist/gallery/frame/chunks/markdown-xw8dsk8b.js +2125 -0
- package/dist/gallery/frame/chunks/markdown-y18mve73.js +85 -0
- package/dist/gallery/frame/chunks/markdown-yengsms5.js +427 -0
- package/dist/gallery/frame/chunks/markdown-z1wc0v0d.js +1826 -0
- package/dist/gallery/frame/chunks/markdown-zazx9h4n.js +329 -0
- package/dist/gallery/frame/chunks/mermaid-de7p4v0x.js +30 -0
- package/dist/gallery/frame/chunks/mindmap-definition-FAOFIHXS-ra44cbem.js +1216 -0
- package/dist/gallery/frame/chunks/packet-7NZHBO7P-xppm5913.js +10 -0
- package/dist/gallery/frame/chunks/pegDiagram-VL7TDLO6-a2a4wg03.js +163 -0
- package/dist/gallery/frame/chunks/pie-RZYD4A2V-hnbxk152.js +10 -0
- package/dist/gallery/frame/chunks/pieDiagram-7S7Q4E2Y-f1vxjtmx.js +311 -0
- package/dist/gallery/frame/chunks/quadrantDiagram-CIZ2JOQS-ywafa6kh.js +1390 -0
- package/dist/gallery/frame/chunks/radar-I7S5WNFK-ewqd27se.js +10 -0
- package/dist/gallery/frame/chunks/railroad-3IZDKUUU-5hy4bdx3.js +10 -0
- package/dist/gallery/frame/chunks/railroad-abnf-AHOZXSZD-bh5sxz0d.js +10 -0
- package/dist/gallery/frame/chunks/railroad-ebnf-EBAXGLYW-6b9c3zeh.js +10 -0
- package/dist/gallery/frame/chunks/railroad-peg-LSFZ7HO6-avc8v39s.js +10 -0
- package/dist/gallery/frame/chunks/railroadDiagram-AXF67PYL-qc61wax4.js +131 -0
- package/dist/gallery/frame/chunks/requirementDiagram-LRYGKXZP-9bs4786c.js +1295 -0
- package/dist/gallery/frame/chunks/sankeyDiagram-W5VNT64P-awt1em8b.js +1339 -0
- package/dist/gallery/frame/chunks/sequenceDiagram-SI44F4Z6-qaf9mz3t.js +4324 -0
- package/dist/gallery/frame/chunks/sizeCapture-X5ZJPWSS-9fq685xd.js +64 -0
- package/dist/gallery/frame/chunks/stateDiagram-OKZ733FA-vx7a7hh0.js +456 -0
- package/dist/gallery/frame/chunks/stateDiagram-v2-UEYNNEHI-x4m6ws5t.js +46 -0
- package/dist/gallery/frame/chunks/swimlanes-SLNWSIFB-e4mxm1gh.js +8287 -0
- package/dist/gallery/frame/chunks/swimlanesDiagram-ULZ7WXOC-0h93e2qq.js +42 -0
- package/dist/gallery/frame/chunks/timeline-definition-Z64GVDOM-wp0bhbzg.js +1549 -0
- package/dist/gallery/frame/chunks/treeView-QDETBFTQ-hcx7n0vt.js +10 -0
- package/dist/gallery/frame/chunks/treemap-6X3UGDF4-av02skdw.js +10 -0
- package/dist/gallery/frame/chunks/vennDiagram-T6HMQDX7-pmvk1p7n.js +2566 -0
- package/dist/gallery/frame/chunks/wardley-OPB4EBWU-njsp6e40.js +10 -0
- package/dist/gallery/frame/chunks/wardleyDiagram-T6FBY63Y-eggmnv4z.js +979 -0
- package/dist/gallery/frame/chunks/xychartDiagram-ELKLHX3M-q40tnpe5.js +1954 -0
- package/dist/gallery/frame/frame.css +183 -0
- package/dist/gallery/frame/runtime/chart.js +42744 -0
- package/dist/gallery/frame/runtime/html.js +14 -0
- package/dist/gallery/frame/runtime/markdown.js +1403 -0
- package/dist/gallery/frame/runtime/mermaid.js +32 -0
- package/dist/gallery/frame/runtime/svg.js +14 -0
- package/dist/gallery/frame/runtime/tsx.js +52 -0
- package/dist/gallery/index.html +104 -0
- package/docs/reference/cli.md +163 -0
- package/docs/reference/export.md +106 -0
- package/docs/reference/html.md +215 -0
- package/docs/reference/http.md +85 -0
- package/docs/reference/mcp.md +78 -0
- package/docs/reference/security.md +119 -0
- package/docs/reference/storage.md +93 -0
- package/docs/reference/tsx.md +101 -0
- package/docs/reference/validation.md +212 -0
- package/package.json +89 -0
- package/scripts/build-gallery.ts +127 -0
- package/scripts/launch-netns.sh +67 -0
- package/skills/facet/SKILL.md +100 -0
- package/src/cli/client.ts +311 -0
- package/src/cli/commands/create.ts +49 -0
- package/src/cli/commands/doctor.ts +249 -0
- package/src/cli/commands/export.ts +179 -0
- package/src/cli/commands/instantiate.ts +35 -0
- package/src/cli/commands/list.ts +49 -0
- package/src/cli/commands/open.ts +75 -0
- package/src/cli/commands/pin.ts +39 -0
- package/src/cli/commands/promote.ts +49 -0
- package/src/cli/commands/publish.ts +122 -0
- package/src/cli/commands/read-back.ts +56 -0
- package/src/cli/commands/status.ts +114 -0
- package/src/cli/commands/watch.ts +146 -0
- package/src/cli/main.ts +522 -0
- package/src/cli/output.ts +106 -0
- package/src/cli/parser.ts +376 -0
- package/src/cli/presenter.ts +212 -0
- package/src/cli/service-metadata.ts +134 -0
- package/src/cli/spawn-service.ts +326 -0
- package/src/css.d.ts +4 -0
- package/src/gallery-web/app.ts +1581 -0
- package/src/gallery-web/export-menu.ts +121 -0
- package/src/gallery-web/export.ts +112 -0
- package/src/gallery-web/favicon.ts +54 -0
- package/src/gallery-web/frame/entries/chart.ts +6 -0
- package/src/gallery-web/frame/entries/html.ts +6 -0
- package/src/gallery-web/frame/entries/markdown.ts +6 -0
- package/src/gallery-web/frame/entries/mermaid.ts +6 -0
- package/src/gallery-web/frame/entries/svg.ts +6 -0
- package/src/gallery-web/frame/entries/tsx.ts +6 -0
- package/src/gallery-web/frame/frame-payload.ts +91 -0
- package/src/gallery-web/frame/renderer-validation.ts +13 -0
- package/src/gallery-web/frame/renderers/chart.ts +182 -0
- package/src/gallery-web/frame/renderers/dompurify-shim.ts +112 -0
- package/src/gallery-web/frame/renderers/html.ts +48 -0
- package/src/gallery-web/frame/renderers/markdown.ts +81 -0
- package/src/gallery-web/frame/renderers/mermaid.ts +120 -0
- package/src/gallery-web/frame/renderers/registry.ts +260 -0
- package/src/gallery-web/frame/renderers/svg.ts +393 -0
- package/src/gallery-web/frame/renderers/tsx.ts +61 -0
- package/src/gallery-web/frame/runtime.ts +501 -0
- package/src/gallery-web/frame/styles/artifact.css +8424 -0
- package/src/gallery-web/frame/styles/frame.css +183 -0
- package/src/gallery-web/frame/styles/html-source.css +23 -0
- package/src/gallery-web/frame/view-box.ts +33 -0
- package/src/gallery-web/frame-html.ts +72 -0
- package/src/gallery-web/index.html +104 -0
- package/src/gallery-web/session.ts +107 -0
- package/src/gallery-web/sse-client.ts +212 -0
- package/src/gallery-web/styles/app.css +420 -0
- package/src/gallery-web/styles/tokens.css +112 -0
- package/src/gallery-web/styles/verdict.css +186 -0
- package/src/gallery-web/swap.ts +64 -0
- package/src/gallery-web/theme.ts +40 -0
- package/src/gallery-web/view-state.ts +93 -0
- package/src/harness-adapters/claude-code/README.md +10 -0
- package/src/harness-adapters/claude-code/facet.sh +4 -0
- package/src/harness-adapters/codex/README.md +10 -0
- package/src/harness-adapters/codex/facet.sh +4 -0
- package/src/harness-adapters/mcp/README.md +13 -0
- package/src/harness-adapters/mcp/cli-bridge.ts +216 -0
- package/src/harness-adapters/mcp/main.ts +15 -0
- package/src/harness-adapters/mcp/server.ts +164 -0
- package/src/harness-adapters/mcp/tool-schemas.ts +53 -0
- package/src/harness-adapters/opencode/README.md +10 -0
- package/src/harness-adapters/opencode/facet.sh +4 -0
- package/src/runtime/compiled-entrypoints.ts +69 -0
- package/src/service/dispatcher.ts +717 -0
- package/src/service/export.ts +218 -0
- package/src/service/http-utils.ts +55 -0
- package/src/service/lexical/expectations.ts +210 -0
- package/src/service/lifecycle/idle-controller.ts +125 -0
- package/src/service/lifecycle/orphan-cleanup.ts +128 -0
- package/src/service/lifecycle/process-lock.ts +235 -0
- package/src/service/main.ts +136 -0
- package/src/service/process.ts +240 -0
- package/src/service/router-guards.ts +239 -0
- package/src/service/router.ts +627 -0
- package/src/service/security/auth.ts +168 -0
- package/src/service/security/host-origin.ts +138 -0
- package/src/service/security/http-guards.ts +13 -0
- package/src/service/security/leases.ts +182 -0
- package/src/service/security/token-store.ts +138 -0
- package/src/service/server.ts +356 -0
- package/src/service/store/database.ts +61 -0
- package/src/service/store/evidence-retention.ts +234 -0
- package/src/service/store/migrations.ts +167 -0
- package/src/service/store/repository-lifecycle.ts +121 -0
- package/src/service/store/repository.ts +732 -0
- package/src/service/store/schema.ts +218 -0
- package/src/service/stored-verdict.ts +97 -0
- package/src/service/stream.ts +301 -0
- package/src/service/verdict-enrichment.ts +45 -0
- package/src/shared/build/frame-bundle-plugins.ts +61 -0
- package/src/shared/build-mode.ts +28 -0
- package/src/shared/config/evidence-read.ts +98 -0
- package/src/shared/config/limits.ts +56 -0
- package/src/shared/config/paths.ts +96 -0
- package/src/shared/contracts/artifact-types.ts +2 -0
- package/src/shared/contracts/artifact.ts +98 -0
- package/src/shared/contracts/commands/_shared.ts +59 -0
- package/src/shared/contracts/commands/guards.ts +86 -0
- package/src/shared/contracts/commands/index.ts +204 -0
- package/src/shared/contracts/commands/names.ts +35 -0
- package/src/shared/contracts/commands/requests.ts +149 -0
- package/src/shared/contracts/commands/results.ts +200 -0
- package/src/shared/contracts/envelope.ts +140 -0
- package/src/shared/contracts/events.ts +41 -0
- package/src/shared/contracts/observed-counts.ts +19 -0
- package/src/shared/contracts/renderers.ts +6 -0
- package/src/shared/contracts/validation.ts +296 -0
- package/src/shared/errors/facet-error.ts +127 -0
- package/src/shared/errors/store-error.ts +68 -0
- package/src/shared/evidence-image.ts +37 -0
- package/src/shared/export.ts +31 -0
- package/src/shared/html/policy.ts +108 -0
- package/src/shared/html/style-vocabulary.ts +352 -0
- package/src/shared/logging/logger.ts +108 -0
- package/src/shared/logging/redact.ts +49 -0
- package/src/shared/security/frozen-csp.ts +13 -0
- package/src/shared/storage-version.ts +2 -0
- package/src/shared/tsx/execution.ts +29 -0
- package/src/shared/tsx/import-policy.ts +94 -0
- package/src/shared/util/dir-permissions.ts +94 -0
- package/src/shared/util/mermaid-nodes.ts +230 -0
- package/src/shared/util/process.ts +67 -0
- package/src/shared/util/time.ts +21 -0
- package/src/shared/version.ts +3 -0
- package/src/validation/sandbox/limits.ts +41 -0
- package/src/validation/sandbox/netns.ts +177 -0
- package/src/validation/tier0/chart.ts +177 -0
- package/src/validation/tier0/dom-shim.ts +54 -0
- package/src/validation/tier0/html.ts +408 -0
- package/src/validation/tier0/markdown.ts +285 -0
- package/src/validation/tier0/mermaid.ts +98 -0
- package/src/validation/tier0/runner.ts +504 -0
- package/src/validation/tier0/svg.ts +321 -0
- package/src/validation/tier0/tsx/allowlist-resolver.ts +77 -0
- package/src/validation/tier0/tsx/ast-policy-capabilities.ts +238 -0
- package/src/validation/tier0/tsx/ast-policy-shared.ts +71 -0
- package/src/validation/tier0/tsx/ast-policy.ts +181 -0
- package/src/validation/tier0/tsx/compiler.ts +156 -0
- package/src/validation/tier0/worker-dispatch.ts +211 -0
- package/src/validation/tier0/worker-entry.ts +96 -0
- package/src/validation/tier0/worker-input.ts +75 -0
- package/src/validation/tier1/browser-process.ts +147 -0
- package/src/validation/tier1/cdp-pipe.ts +281 -0
- package/src/validation/tier1/entries/chart.ts +5 -0
- package/src/validation/tier1/entries/html.ts +6 -0
- package/src/validation/tier1/entries/markdown.ts +5 -0
- package/src/validation/tier1/entries/mermaid.ts +5 -0
- package/src/validation/tier1/entries/svg.ts +5 -0
- package/src/validation/tier1/entries/tsx.ts +5 -0
- package/src/validation/tier1/frame-target.ts +162 -0
- package/src/validation/tier1/harness-entry.ts +261 -0
- package/src/validation/tier1/harness.ts +215 -0
- package/src/validation/tier1/isolated-probe.ts +94 -0
- package/src/validation/tier1/launcher.ts +177 -0
- package/src/validation/tier1/limits.ts +80 -0
- package/src/validation/tier1/nonce.ts +17 -0
- package/src/validation/tier1/protocol-probe.ts +519 -0
- package/src/validation/tier1/runner.ts +1122 -0
- package/src/validation/tier1/verdict.ts +246 -0
- package/src/validation/tier1/webp.ts +69 -0
- package/templates/README.md +88 -0
- package/templates/bar-compare.vl.json +63 -0
- package/templates/capacity-report.tsx +102 -0
- package/templates/decision-record.md +24 -0
- package/templates/deployment-state.mmd +40 -0
- package/templates/exemplar.md +91 -0
- package/templates/facet-story.tsx +799 -0
- package/templates/fleet-dashboard.html +141 -0
- package/templates/html-release-ledger.html +91 -0
- package/templates/html-status-report.html +114 -0
- package/templates/incident-console.tsx +147 -0
- package/templates/legion-boundaries.mmd +23 -0
- package/templates/legion-flow.mmd +15 -0
- package/templates/legion-sequence.mmd +14 -0
- package/templates/legion-state.mmd +7 -0
- package/templates/metric-card.svg +29 -0
- package/templates/observability-map.svg +101 -0
- package/templates/pipeline-audit.md +108 -0
- package/templates/release-metrics.vl.json +98 -0
- package/templates/service-topology.mmd +47 -0
- package/templates/status-report.md +32 -0
- package/templates/system-map.svg +53 -0
- package/templates/timeseries.vl.json +71 -0
- package/templates/tsx-interactive-counter.tsx +19 -0
- package/templates/tsx-status-report.tsx +31 -0
|
@@ -0,0 +1,329 @@
|
|
|
1
|
+
import {
|
|
2
|
+
FacetRenderError,
|
|
3
|
+
decodeArtifactBytes
|
|
4
|
+
} from "./markdown-d1wfbs70.js";
|
|
5
|
+
|
|
6
|
+
// src/gallery-web/frame/renderers/svg.ts
|
|
7
|
+
var STRIPPED_TAGS = new Set([
|
|
8
|
+
"script",
|
|
9
|
+
"foreignobject",
|
|
10
|
+
"use",
|
|
11
|
+
"image",
|
|
12
|
+
"animate",
|
|
13
|
+
"animatetransform",
|
|
14
|
+
"animatemotion",
|
|
15
|
+
"set",
|
|
16
|
+
"audio",
|
|
17
|
+
"video",
|
|
18
|
+
"iframe",
|
|
19
|
+
"object",
|
|
20
|
+
"embed"
|
|
21
|
+
]);
|
|
22
|
+
var STRICT_URL_ATTRS = new Set(["href", "xlink:href", "src"]);
|
|
23
|
+
var CSS_REF_ATTRS = new Set([
|
|
24
|
+
"fill",
|
|
25
|
+
"stroke",
|
|
26
|
+
"filter",
|
|
27
|
+
"mask",
|
|
28
|
+
"clip-path",
|
|
29
|
+
"marker",
|
|
30
|
+
"marker-start",
|
|
31
|
+
"marker-mid",
|
|
32
|
+
"marker-end",
|
|
33
|
+
"color-profile",
|
|
34
|
+
"cursor",
|
|
35
|
+
"background",
|
|
36
|
+
"background-image"
|
|
37
|
+
]);
|
|
38
|
+
var EVENT_HANDLER_RE = /^on[a-z]+$/i;
|
|
39
|
+
var RENDERER_ROOT_ATTRIBUTE = "data-facet-renderer-root";
|
|
40
|
+
var RENDERER_GRAPH_ATTRIBUTE = "data-facet-renderer-graph";
|
|
41
|
+
var RESERVED_RENDERER_ATTRIBUTES = new Set([RENDERER_ROOT_ATTRIBUTE, RENDERER_GRAPH_ATTRIBUTE]);
|
|
42
|
+
function stripCssComments(css) {
|
|
43
|
+
let clean = "";
|
|
44
|
+
let quote = "";
|
|
45
|
+
for (let index = 0;index < css.length; index += 1) {
|
|
46
|
+
const char = css[index];
|
|
47
|
+
if (quote) {
|
|
48
|
+
clean += char;
|
|
49
|
+
if (char === "\\" && index + 1 < css.length)
|
|
50
|
+
clean += css[index += 1];
|
|
51
|
+
else if (char === quote)
|
|
52
|
+
quote = "";
|
|
53
|
+
continue;
|
|
54
|
+
}
|
|
55
|
+
if (char === '"' || char === "'") {
|
|
56
|
+
quote = char;
|
|
57
|
+
clean += char;
|
|
58
|
+
continue;
|
|
59
|
+
}
|
|
60
|
+
if (char === "/" && css[index + 1] === "*") {
|
|
61
|
+
const end = css.indexOf("*/", index + 2);
|
|
62
|
+
index = end === -1 ? css.length : end + 1;
|
|
63
|
+
continue;
|
|
64
|
+
}
|
|
65
|
+
clean += char;
|
|
66
|
+
}
|
|
67
|
+
return clean;
|
|
68
|
+
}
|
|
69
|
+
function canonicalizeCss(css) {
|
|
70
|
+
const uncommented = stripCssComments(css);
|
|
71
|
+
let decoded = "";
|
|
72
|
+
for (let index = 0;index < uncommented.length; index += 1) {
|
|
73
|
+
const char = uncommented[index];
|
|
74
|
+
if (char !== "\\") {
|
|
75
|
+
decoded += char;
|
|
76
|
+
continue;
|
|
77
|
+
}
|
|
78
|
+
const next = uncommented[index + 1];
|
|
79
|
+
if (next === undefined)
|
|
80
|
+
break;
|
|
81
|
+
if (next === `
|
|
82
|
+
` || next === "\f") {
|
|
83
|
+
index += 1;
|
|
84
|
+
continue;
|
|
85
|
+
}
|
|
86
|
+
if (next === "\r") {
|
|
87
|
+
index += uncommented[index + 2] === `
|
|
88
|
+
` ? 2 : 1;
|
|
89
|
+
continue;
|
|
90
|
+
}
|
|
91
|
+
let hex = "";
|
|
92
|
+
while (hex.length < 6 && /[0-9a-f]/i.test(uncommented[index + 1] ?? "")) {
|
|
93
|
+
hex += uncommented[index += 1];
|
|
94
|
+
}
|
|
95
|
+
if (hex) {
|
|
96
|
+
const codePoint = Number.parseInt(hex, 16);
|
|
97
|
+
decoded += codePoint === 0 || codePoint > 1114111 || codePoint >= 55296 && codePoint <= 57343 ? "�" : String.fromCodePoint(codePoint);
|
|
98
|
+
if (/\s/.test(uncommented[index + 1] ?? ""))
|
|
99
|
+
index += 1;
|
|
100
|
+
continue;
|
|
101
|
+
}
|
|
102
|
+
decoded += next;
|
|
103
|
+
index += 1;
|
|
104
|
+
}
|
|
105
|
+
return decoded.toLowerCase().replace(/\s+/g, " ").trim();
|
|
106
|
+
}
|
|
107
|
+
function findClosingDelimiter(css, openIndex, open, close) {
|
|
108
|
+
let depth = 1;
|
|
109
|
+
let quote = "";
|
|
110
|
+
for (let index = openIndex + 1;index < css.length; index += 1) {
|
|
111
|
+
const char = css[index];
|
|
112
|
+
if (quote) {
|
|
113
|
+
if (char === "\\")
|
|
114
|
+
index += 1;
|
|
115
|
+
else if (char === quote)
|
|
116
|
+
quote = "";
|
|
117
|
+
continue;
|
|
118
|
+
}
|
|
119
|
+
if (char === '"' || char === "'")
|
|
120
|
+
quote = char;
|
|
121
|
+
else if (char === open)
|
|
122
|
+
depth += 1;
|
|
123
|
+
else if (char === close && --depth === 0)
|
|
124
|
+
return index;
|
|
125
|
+
}
|
|
126
|
+
return -1;
|
|
127
|
+
}
|
|
128
|
+
function containsUnsafeCssValue(value) {
|
|
129
|
+
const canonical = canonicalizeCss(value);
|
|
130
|
+
if (!canonical)
|
|
131
|
+
return false;
|
|
132
|
+
if (/@import\b/.test(canonical) || /(?:^|[^a-z0-9_-])expression\s*\(/.test(canonical) || /(?:^|[^a-z0-9_-])progid\s*:/.test(canonical) || /(?:^|[^a-z0-9_-])behavior\s*:/.test(canonical) || /^[a-z][a-z0-9+.-]*\s*:/.test(canonical)) {
|
|
133
|
+
return true;
|
|
134
|
+
}
|
|
135
|
+
for (let searchFrom = 0;searchFrom < canonical.length; ) {
|
|
136
|
+
const index = canonical.indexOf("url", searchFrom);
|
|
137
|
+
if (index === -1)
|
|
138
|
+
return false;
|
|
139
|
+
searchFrom = index + 3;
|
|
140
|
+
if (index > 0 && /[a-z0-9_-]/.test(canonical[index - 1]))
|
|
141
|
+
continue;
|
|
142
|
+
let openIndex = searchFrom;
|
|
143
|
+
while (canonical[openIndex] === " ")
|
|
144
|
+
openIndex += 1;
|
|
145
|
+
if (canonical[openIndex] !== "(")
|
|
146
|
+
continue;
|
|
147
|
+
const closeIndex = findClosingDelimiter(canonical, openIndex, "(", ")");
|
|
148
|
+
if (closeIndex === -1)
|
|
149
|
+
return true;
|
|
150
|
+
let argument = canonical.slice(openIndex + 1, closeIndex).trim();
|
|
151
|
+
const quote = argument[0];
|
|
152
|
+
if (quote === '"' || quote === "'") {
|
|
153
|
+
if (argument.at(-1) !== quote)
|
|
154
|
+
return true;
|
|
155
|
+
argument = argument.slice(1, -1).trim();
|
|
156
|
+
}
|
|
157
|
+
if (!argument.startsWith("#"))
|
|
158
|
+
return true;
|
|
159
|
+
searchFrom = closeIndex + 1;
|
|
160
|
+
}
|
|
161
|
+
return false;
|
|
162
|
+
}
|
|
163
|
+
function findDeclarationColon(css) {
|
|
164
|
+
let depth = 0;
|
|
165
|
+
let quote = "";
|
|
166
|
+
for (let index = 0;index < css.length; index += 1) {
|
|
167
|
+
const char = css[index];
|
|
168
|
+
if (quote) {
|
|
169
|
+
if (char === "\\")
|
|
170
|
+
index += 1;
|
|
171
|
+
else if (char === quote)
|
|
172
|
+
quote = "";
|
|
173
|
+
continue;
|
|
174
|
+
}
|
|
175
|
+
if (char === '"' || char === "'")
|
|
176
|
+
quote = char;
|
|
177
|
+
else if (char === "(")
|
|
178
|
+
depth += 1;
|
|
179
|
+
else if (char === ")")
|
|
180
|
+
depth = Math.max(0, depth - 1);
|
|
181
|
+
else if (char === ":" && depth === 0)
|
|
182
|
+
return index;
|
|
183
|
+
}
|
|
184
|
+
return -1;
|
|
185
|
+
}
|
|
186
|
+
function sanitizeCssStatement(statement) {
|
|
187
|
+
const trimmed = statement.trim();
|
|
188
|
+
if (!trimmed)
|
|
189
|
+
return "";
|
|
190
|
+
const colon = findDeclarationColon(trimmed);
|
|
191
|
+
const checkedValue = colon === -1 ? trimmed : trimmed.slice(colon + 1);
|
|
192
|
+
return containsUnsafeCssValue(checkedValue) || /@import\b/.test(canonicalizeCss(trimmed)) ? "" : trimmed;
|
|
193
|
+
}
|
|
194
|
+
function sanitizeCssBlock(css) {
|
|
195
|
+
let sanitized = "";
|
|
196
|
+
let start = 0;
|
|
197
|
+
let depth = 0;
|
|
198
|
+
let quote = "";
|
|
199
|
+
for (let index = 0;index < css.length; index += 1) {
|
|
200
|
+
const char = css[index];
|
|
201
|
+
if (quote) {
|
|
202
|
+
if (char === "\\")
|
|
203
|
+
index += 1;
|
|
204
|
+
else if (char === quote)
|
|
205
|
+
quote = "";
|
|
206
|
+
continue;
|
|
207
|
+
}
|
|
208
|
+
if (char === '"' || char === "'")
|
|
209
|
+
quote = char;
|
|
210
|
+
else if (char === "(")
|
|
211
|
+
depth += 1;
|
|
212
|
+
else if (char === ")")
|
|
213
|
+
depth = Math.max(0, depth - 1);
|
|
214
|
+
else if (char === ";" && depth === 0) {
|
|
215
|
+
const statement = sanitizeCssStatement(css.slice(start, index));
|
|
216
|
+
if (statement)
|
|
217
|
+
sanitized += `${statement};`;
|
|
218
|
+
start = index + 1;
|
|
219
|
+
} else if (char === "{" && depth === 0) {
|
|
220
|
+
const closeIndex = findClosingDelimiter(css, index, "{", "}");
|
|
221
|
+
const prelude = css.slice(start, index).trim();
|
|
222
|
+
if (closeIndex === -1)
|
|
223
|
+
return sanitized;
|
|
224
|
+
if (!containsUnsafeCssValue(prelude) && !/@import\b/.test(canonicalizeCss(prelude))) {
|
|
225
|
+
sanitized += `${prelude}{${sanitizeCssBlock(css.slice(index + 1, closeIndex))}}`;
|
|
226
|
+
}
|
|
227
|
+
index = closeIndex;
|
|
228
|
+
start = closeIndex + 1;
|
|
229
|
+
}
|
|
230
|
+
}
|
|
231
|
+
const trailing = sanitizeCssStatement(css.slice(start));
|
|
232
|
+
return trailing ? sanitized + trailing : sanitized;
|
|
233
|
+
}
|
|
234
|
+
function sanitizeCssText(css) {
|
|
235
|
+
return sanitizeCssBlock(stripCssComments(css));
|
|
236
|
+
}
|
|
237
|
+
function sanitizeSvgDocument(doc) {
|
|
238
|
+
const all = Array.from(doc.querySelectorAll("*"));
|
|
239
|
+
for (const el of all) {
|
|
240
|
+
if (STRIPPED_TAGS.has(el.localName.toLowerCase())) {
|
|
241
|
+
el.parentNode?.removeChild(el);
|
|
242
|
+
continue;
|
|
243
|
+
}
|
|
244
|
+
for (const attr of Array.from(el.attributes ?? [])) {
|
|
245
|
+
const name = attr.name.toLowerCase();
|
|
246
|
+
const localName = (attr.localName || attr.name).split(":").pop()?.toLowerCase() ?? "";
|
|
247
|
+
if (RESERVED_RENDERER_ATTRIBUTES.has(localName)) {
|
|
248
|
+
el.removeAttribute(attr.name);
|
|
249
|
+
continue;
|
|
250
|
+
}
|
|
251
|
+
if (EVENT_HANDLER_RE.test(name)) {
|
|
252
|
+
el.removeAttribute(attr.name);
|
|
253
|
+
continue;
|
|
254
|
+
}
|
|
255
|
+
if (STRICT_URL_ATTRS.has(name) && !attr.value.trim().startsWith("#")) {
|
|
256
|
+
el.removeAttribute(attr.name);
|
|
257
|
+
continue;
|
|
258
|
+
}
|
|
259
|
+
if (CSS_REF_ATTRS.has(name) && containsUnsafeCssValue(attr.value)) {
|
|
260
|
+
el.removeAttribute(attr.name);
|
|
261
|
+
continue;
|
|
262
|
+
}
|
|
263
|
+
if (name === "style") {
|
|
264
|
+
const sanitized = sanitizeCssText(attr.value);
|
|
265
|
+
if (!sanitized)
|
|
266
|
+
el.removeAttribute(attr.name);
|
|
267
|
+
else if (sanitized !== attr.value)
|
|
268
|
+
el.setAttribute(attr.name, sanitized);
|
|
269
|
+
}
|
|
270
|
+
}
|
|
271
|
+
if (el.localName.toLowerCase() === "style") {
|
|
272
|
+
const text = el.textContent;
|
|
273
|
+
if (text) {
|
|
274
|
+
const sanitized = sanitizeCssText(text);
|
|
275
|
+
if (sanitized !== text)
|
|
276
|
+
el.textContent = sanitized;
|
|
277
|
+
}
|
|
278
|
+
}
|
|
279
|
+
}
|
|
280
|
+
}
|
|
281
|
+
function parseSvgData(svgText) {
|
|
282
|
+
const doc = new DOMParser().parseFromString(svgText, "image/svg+xml");
|
|
283
|
+
if (doc.getElementsByTagName("parsererror").length > 0) {
|
|
284
|
+
throw new FacetRenderError("SVG source is not well-formed XML", "svg_malformed");
|
|
285
|
+
}
|
|
286
|
+
const root = doc.documentElement;
|
|
287
|
+
if (root === null || root.localName.toLowerCase() !== "svg") {
|
|
288
|
+
throw new FacetRenderError("SVG source root element is not <svg>", "svg_bad_root");
|
|
289
|
+
}
|
|
290
|
+
if (root.tagName.includes("<") || root.tagName.includes(">")) {
|
|
291
|
+
throw new FacetRenderError("SVG source is not well-formed XML", "svg_malformed");
|
|
292
|
+
}
|
|
293
|
+
return doc;
|
|
294
|
+
}
|
|
295
|
+
async function importSanitizedSvgText(container, svgText, options = {}) {
|
|
296
|
+
const settleMs = options.settleMs ?? 40;
|
|
297
|
+
const maxWaitMs = options.maxWaitMs ?? 1500;
|
|
298
|
+
const doc = parseSvgData(svgText);
|
|
299
|
+
sanitizeSvgDocument(doc);
|
|
300
|
+
const imported = document.importNode(doc.documentElement, true);
|
|
301
|
+
imported.setAttribute(RENDERER_ROOT_ATTRIBUTE, "true");
|
|
302
|
+
if (options.marker === "graph")
|
|
303
|
+
imported.setAttribute(RENDERER_GRAPH_ATTRIBUTE, "true");
|
|
304
|
+
container.appendChild(imported);
|
|
305
|
+
await new Promise((resolve) => {
|
|
306
|
+
let quietTimer = null;
|
|
307
|
+
const cap = setTimeout(() => finish(), maxWaitMs);
|
|
308
|
+
const observer = new MutationObserver(() => {
|
|
309
|
+
if (quietTimer !== null)
|
|
310
|
+
clearTimeout(quietTimer);
|
|
311
|
+
quietTimer = setTimeout(() => finish(), settleMs);
|
|
312
|
+
});
|
|
313
|
+
const finish = () => {
|
|
314
|
+
observer.disconnect();
|
|
315
|
+
if (quietTimer !== null)
|
|
316
|
+
clearTimeout(quietTimer);
|
|
317
|
+
clearTimeout(cap);
|
|
318
|
+
resolve();
|
|
319
|
+
};
|
|
320
|
+
observer.observe(imported, { childList: true, subtree: true, attributes: true });
|
|
321
|
+
quietTimer = setTimeout(() => finish(), settleMs);
|
|
322
|
+
});
|
|
323
|
+
}
|
|
324
|
+
async function renderSvgDocument(ctx, bytes) {
|
|
325
|
+
const text = decodeArtifactBytes(bytes);
|
|
326
|
+
await importSanitizedSvgText(ctx.container, text);
|
|
327
|
+
}
|
|
328
|
+
|
|
329
|
+
export { importSanitizedSvgText, renderSvgDocument };
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import {
|
|
2
|
+
mermaidInitializeConfig,
|
|
3
|
+
renderMermaidDocument,
|
|
4
|
+
renderMermaidInto
|
|
5
|
+
} from "./markdown-z1wc0v0d.js";
|
|
6
|
+
import"./markdown-6zz8efx2.js";
|
|
7
|
+
import"./markdown-rm2yxfjj.js";
|
|
8
|
+
import"./markdown-h7pzv34e.js";
|
|
9
|
+
import"./markdown-zazx9h4n.js";
|
|
10
|
+
import"./markdown-d1wfbs70.js";
|
|
11
|
+
import"./markdown-s1jatrnk.js";
|
|
12
|
+
import"./markdown-m7frq8x8.js";
|
|
13
|
+
import"./markdown-tvdpppw8.js";
|
|
14
|
+
import"./markdown-sgfg5vvq.js";
|
|
15
|
+
import"./markdown-82xmzhzd.js";
|
|
16
|
+
import"./markdown-c9k0fvp1.js";
|
|
17
|
+
import"./markdown-qx3cngz2.js";
|
|
18
|
+
import"./markdown-yengsms5.js";
|
|
19
|
+
import"./markdown-ff5wvb43.js";
|
|
20
|
+
import"./markdown-pzgd8z3s.js";
|
|
21
|
+
import"./markdown-92n37gd4.js";
|
|
22
|
+
import"./markdown-xw8dsk8b.js";
|
|
23
|
+
import"./markdown-1s5vwkf2.js";
|
|
24
|
+
import"./markdown-dy5sgjhc.js";
|
|
25
|
+
import"./markdown-809k7q41.js";
|
|
26
|
+
export {
|
|
27
|
+
mermaidInitializeConfig,
|
|
28
|
+
renderMermaidDocument,
|
|
29
|
+
renderMermaidInto
|
|
30
|
+
};
|