@lionrapid/core 0.4.0 → 0.6.0

package/dist/browser/sanitizer.d.ts

@@ -0,0 +1,37 @@
+/**
+ * DOM-tree sanitizer — the live-tree companion to the pure-string
+ * `content/sanitizer/HTMLSanitizer`. Used where a whole fragment of
+ * untrusted HTML becomes live DOM: today the snapshot viewer, which mounts
+ * server-fetched snapshot HTML in the editor realm (PM session JWT).
+ *
+ * POLICY NOTE — this deliberately diverges from the inline `SAFE_TAGS`
+ * allowlist (see PHASES.md Phase 4): a snapshot is a full captured page, so
+ * structural elements (`div`/`p`/`h1`/`nav`/`table`/…) must survive for the
+ * page to render at all. What is enforced instead:
+ *   - executable/embedding elements are REMOVED outright
+ *   - every `on*` handler attribute (and `srcdoc`) is dropped
+ *   - URL-bearing attributes must pass `sanitizeUrl`
+ *   - inline `style` keeps any property (layout fidelity) but value-level
+ *     dangers are dropped via `sanitizeCssDeclarations`
+ *
+ * CONTINUOUS DEVELOPMENT: like SAFE_STYLE_PROPS, these sets grow (or
+ * tighten) deliberately as real snapshots surface gaps — extend REMOVE_TAGS
+ * rather than trusting a new embedding surface, add hostile cases to
+ * sanitize-element.test.ts, and keep the WP/edge ports in sync if they ever
+ * grow a snapshot feature.
+ */
+/**
+ * Sanitize a live element tree in place (root included).
+ */
+export declare function sanitizeElement(root: Element): void;
+/**
+ * Best-effort sanitization of a copied `<style>` sheet's text: strips
+ * `@import` (arbitrary stylesheet pull-in), neutralizes `url(...)`
+ * references that resolve cross-origin (exfil beacons in a tampered
+ * snapshot), and defuses legacy `expression(`. Same-origin, relative, and
+ * `data:` URLs are kept so the snapshot still renders its images/fonts.
+ * The primary defenses are element removal + attribute scrubbing in
+ * `sanitizeElement`; this closes the stylesheet side channel.
+ */
+export declare function sanitizeStyleSheetText(css: string, baseHref: string): string;
+//# sourceMappingURL=sanitizer.d.ts.map

package/dist/browser/sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.d.ts","sourceRoot":"","sources":["../../src/browser/sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAkBH;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CA4BnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgB5E"}

package/dist/browser/sanitizer.js

@@ -0,0 +1,93 @@
+/**
+ * DOM-tree sanitizer — the live-tree companion to the pure-string
+ * `content/sanitizer/HTMLSanitizer`. Used where a whole fragment of
+ * untrusted HTML becomes live DOM: today the snapshot viewer, which mounts
+ * server-fetched snapshot HTML in the editor realm (PM session JWT).
+ *
+ * POLICY NOTE — this deliberately diverges from the inline `SAFE_TAGS`
+ * allowlist (see PHASES.md Phase 4): a snapshot is a full captured page, so
+ * structural elements (`div`/`p`/`h1`/`nav`/`table`/…) must survive for the
+ * page to render at all. What is enforced instead:
+ *   - executable/embedding elements are REMOVED outright
+ *   - every `on*` handler attribute (and `srcdoc`) is dropped
+ *   - URL-bearing attributes must pass `sanitizeUrl`
+ *   - inline `style` keeps any property (layout fidelity) but value-level
+ *     dangers are dropped via `sanitizeCssDeclarations`
+ *
+ * CONTINUOUS DEVELOPMENT: like SAFE_STYLE_PROPS, these sets grow (or
+ * tighten) deliberately as real snapshots surface gaps — extend REMOVE_TAGS
+ * rather than trusting a new embedding surface, add hostile cases to
+ * sanitize-element.test.ts, and keep the WP/edge ports in sync if they ever
+ * grow a snapshot feature.
+ */
+import { sanitizeUrl, sanitizeCssDeclarations, } from '../content/sanitizer/HTMLSanitizer.js';
+/** Elements that can execute, embed, or retarget — removed with their subtree. */
+const REMOVE_TAGS = new Set([
+    'script', 'iframe', 'frame', 'frameset', 'object', 'embed', 'applet',
+    'base', 'meta', 'link', 'template', 'portal',
+]);
+/** Attributes whose values navigate or fetch — must pass sanitizeUrl. */
+const URL_ATTRS = new Set([
+    'href', 'src', 'action', 'formaction', 'poster', 'data', 'xlink:href',
+]);
+/**
+ * Sanitize a live element tree in place (root included).
+ */
+export function sanitizeElement(root) {
+    // Snapshot the list first — removals during iteration are safe this way.
+    const all = [root, ...Array.from(root.querySelectorAll('*'))];
+    for (const el of all) {
+        const tag = el.tagName.toLowerCase();
+        if (REMOVE_TAGS.has(tag)) {
+            el.remove();
+            continue;
+        }
+        for (const name of el.getAttributeNames()) {
+            const lower = name.toLowerCase();
+            if (lower.startsWith('on') || lower === 'srcdoc') {
+                el.removeAttribute(name);
+                continue;
+            }
+            if (URL_ATTRS.has(lower)) {
+                if (sanitizeUrl(el.getAttribute(name) ?? '') === null) {
+                    el.removeAttribute(name);
+                }
+                continue;
+            }
+            if (lower === 'style') {
+                const clean = sanitizeCssDeclarations(el.getAttribute(name) ?? '');
+                if (clean === null)
+                    el.removeAttribute(name);
+                else
+                    el.setAttribute(name, clean);
+            }
+        }
+    }
+}
+/**
+ * Best-effort sanitization of a copied `<style>` sheet's text: strips
+ * `@import` (arbitrary stylesheet pull-in), neutralizes `url(...)`
+ * references that resolve cross-origin (exfil beacons in a tampered
+ * snapshot), and defuses legacy `expression(`. Same-origin, relative, and
+ * `data:` URLs are kept so the snapshot still renders its images/fonts.
+ * The primary defenses are element removal + attribute scrubbing in
+ * `sanitizeElement`; this closes the stylesheet side channel.
+ */
+export function sanitizeStyleSheetText(css, baseHref) {
+    let out = css.replace(/@import[^;]*(;|$)/gi, '');
+    out = out.replace(/url\(\s*(['"]?)([^'")]*)\1\s*\)/gi, (full, _quote, target) => {
+        try {
+            const resolved = new URL(target, baseHref);
+            if (resolved.protocol === 'data:')
+                return full;
+            if (resolved.origin === new URL(baseHref).origin)
+                return full;
+        }
+        catch {
+            /* unparseable target → neutralize */
+        }
+        return 'url("")';
+    });
+    return out.replace(/expression\s*\(/gi, 'blocked(');
+}
+//# sourceMappingURL=sanitizer.js.map

package/dist/browser/sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.js","sourceRoot":"","sources":["../../src/browser/sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,WAAW,EACX,uBAAuB,GACxB,MAAM,uCAAuC,CAAC;AAE/C,kFAAkF;AAClF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ;IACpE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ;CAC7C,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY;CACtE,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,yEAAyE;IACzE,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,EAAE,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACjD,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;oBACtD,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,uBAAuB,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnE,IAAI,KAAK,KAAK,IAAI;oBAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;;oBACxC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,QAAgB;IAClE,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;IACjD,GAAG,GAAG,GAAG,CAAC,OAAO,CACf,mCAAmC,EACnC,CAAC,IAAI,EAAE,MAAc,EAAE,MAAc,EAAE,EAAE;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3C,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CACF,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;AACtD,CAAC"}

package/dist/builder.d.ts

@@ -5,6 +5,15 @@ import type { LionRapidCoreConfig } from './config/lionrapid.config.js';
 import type { IEmbeddedPlugin, IPlugin } from './interfaces/plugin.interface.js';
 import { IAsyncRepository, ISyncRepository } from './interfaces/repository.interface.js';
 import { LionRapidCore } from './lionRapid.js';
+import { type StaticBundle } from './repositories/static-repository.js';
+/**
+ * True when a preload failure deserves a loud console diagnostic: network or
+ * server trouble the integrator should hear about. 404 (empty project) and
+ * 423 (content still being prepared) are routine states, not failures.
+ * The internal logger is compiled out of production bundles, so genuine
+ * failures must reach console.warn explicitly.
+ */
+export declare function isLoudPreloadFailure(error: unknown): boolean;
 export declare class LionRapidBuilder {
     private config;
     private plugins;
@@ -18,6 +27,13 @@ export declare class LionRapidBuilder {
     private useAsyncStorage;
     private useNetwork;
     use(instance: IPlugin | IEmbeddedPlugin | ISyncRepository | IAsyncRepository): LionRapidBuilder;
+    /**
+     * Offline resilience: seed a translation bundle (or the CLI's snapshot files)
+     * as a read-only sync layer that resolves synchronously even with the server
+     * down and nothing cached. Sits after the live memory layer (priority 0) at
+     * `priority` (default 0.5), so fresh network data always shadows it.
+     */
+    useStaticBundle(bundle: StaticBundle, priority?: number): LionRapidBuilder;
     build(): Promise<LionRapidCore>;
     private executePreloading;
 }

package/dist/builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../src/builder.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAIxE,OAAO,KAAK,EACV,eAAe,EACf,OAAO,EACR,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gBAAgB,EAChB,eAAe,EAChB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAI/C,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,gBAAgB,CAAyB;IACjD,OAAO,CAAC,iBAAiB,CAA0B;IACnD,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,SAAS,CAAwC;gBAE7C,MAAM,EAAE,mBAAmB;IAQvC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAE,mBAAwB,GAAG,gBAAgB;IAI/D,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,UAAU;IAKlB,GAAG,CACD,QAAQ,EAAE,OAAO,GAAG,eAAe,GAAG,eAAe,GAAG,gBAAgB,GACvE,gBAAgB;IAkBb,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC;YAuGvB,iBAAiB;CA+ChC"}
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../src/builder.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAIxE,OAAO,KAAK,EACV,eAAe,EACf,OAAO,EACR,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gBAAgB,EAChB,eAAe,EAChB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAK/C,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,qCAAqC,CAAC;AAI7C;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAK5D;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,gBAAgB,CAAyB;IACjD,OAAO,CAAC,iBAAiB,CAA0B;IACnD,OAAO,CAAC,YAAY,CAA0B;IAC9C,OAAO,CAAC,SAAS,CAAwC;gBAE7C,MAAM,EAAE,mBAAmB;IAOvC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAE,mBAAwB,GAAG,gBAAgB;IAI/D,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,UAAU;IAKlB,GAAG,CACD,QAAQ,EAAE,OAAO,GAAG,eAAe,GAAG,eAAe,GAAG,gBAAgB,GACvE,gBAAgB;IAkBnB;;;;;OAKG;IACH,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,SAAM,GAAG,gBAAgB;IAIjE,KAAK,IAAI,OAAO,CAAC,aAAa,CAAC;YAsGvB,iBAAiB;CA8DhC"}

package/dist/builder.js

@@ -5,8 +5,21 @@ import { EventEmitter } from './base/event-emitter.js';
 import { HandlerChain } from './handlers/handler-chain.js';
 import { AsyncHandler, NetworkHandler, SyncHandler } from './handlers/index.js';
 import { LionRapidCore } from './lionRapid.js';
+import { TranslationLockedError, TranslationNotFoundError, } from './errors/translation-errors.js';
+import { StaticRepository, } from './repositories/static-repository.js';
 import { MissingTranslationQueue } from './sync/missing-translation-queue.js';
 import { logger } from './utils/logger.js';
+/**
+ * True when a preload failure deserves a loud console diagnostic: network or
+ * server trouble the integrator should hear about. 404 (empty project) and
+ * 423 (content still being prepared) are routine states, not failures.
+ * The internal logger is compiled out of production bundles, so genuine
+ * failures must reach console.warn explicitly.
+ */
+export function isLoudPreloadFailure(error) {
+    return !(error instanceof TranslationNotFoundError ||
+        error instanceof TranslationLockedError);
+}
 export class LionRapidBuilder {
     config;
     plugins = [];
@@ -17,7 +30,6 @@ export class LionRapidBuilder {
     constructor(config) {
         this.config = {
             defaultLocale: config.defaultLocale || 'en',
-            fallbackLocale: config.fallbackLocale || 'en',
             namespace: config.namespace || 'app',
         };
     }
@@ -53,6 +65,15 @@ export class LionRapidBuilder {
         }
         return this;
     }
+    /**
+     * Offline resilience: seed a translation bundle (or the CLI's snapshot files)
+     * as a read-only sync layer that resolves synchronously even with the server
+     * down and nothing cached. Sits after the live memory layer (priority 0) at
+     * `priority` (default 0.5), so fresh network data always shadows it.
+     */
+    useStaticBundle(bundle, priority = 0.5) {
+        return this.use(new StaticRepository(bundle, { priority }));
+    }
     async build() {
         const eventEmitter = new EventEmitter();
         const buildBus = eventEmitter.builder();
@@ -115,7 +136,7 @@ export class LionRapidBuilder {
         }
         logger.debug('Handler chain constructed');
         // Create facade
-        const facade = new LionRapidCore(eventEmitter, handlerChain, this.config.defaultLocale, this.config.fallbackLocale, this.config.namespace);
+        const facade = new LionRapidCore(eventEmitter, handlerChain, this.config.defaultLocale, this.config.namespace);
         // Initialize plugins and add their handlers
         for (const plugin of this.plugins) {
             buildBus.use('plugin');
@@ -145,21 +166,38 @@ export class LionRapidBuilder {
         logger.debug('Preload targets', {
             namespaces: eagerPreloads.map(c => `${c.locale}:${c.namespace}`),
         });
+        let warnedLoudly = false;
+        const warnLoudlyOnce = (namespaceKey, error) => {
+            if (!isLoudPreloadFailure(error) || warnedLoudly)
+                return;
+            warnedLoudly = true;
+            // eslint-disable-next-line no-console
+            console.warn(`[LionRapid] Could not load translations for ${namespaceKey} — the ` +
+                'page stays untranslated until the server is reachable.', error);
+        };
         const promises = eagerPreloads.map(async (preloadConfig) => {
+            const namespaceKey = `${preloadConfig.locale}:${preloadConfig.namespace}`;
             try {
                 const result = await networkHandler.loadNamespace(preloadConfig.locale, preloadConfig.namespace);
                 if (result && result.data && result.status === 200) {
                     const context = {
                         locale: preloadConfig.locale,
                         namespace: preloadConfig.namespace,
-                        fallbackLocale: this.config.fallbackLocale,
                     };
                     await handlerChain.saveNamespaceToHandlers(result.data, context);
-                    logger.debug(`Preloaded: ${preloadConfig.locale}:${preloadConfig.namespace}`);
+                    logger.debug(`Preloaded: ${namespaceKey}`);
+                    return;
+                }
+                // loadNamespace never throws — failures come back as a fallback
+                // result with the error attached (status 0 = network/transport).
+                if (result?.error) {
+                    warnLoudlyOnce(namespaceKey, result.error);
+                    logger.warn(`Preload failed: ${namespaceKey}`, result.error);
                 }
             }
             catch (error) {
-                logger.warn(`Preload failed: ${preloadConfig.locale}:${preloadConfig.namespace}`, error);
+                warnLoudlyOnce(namespaceKey, error);
+                logger.warn(`Preload failed: ${namespaceKey}`, error);
             }
         });
         await Promise.allSettled(promises);

package/dist/builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"builder.js","sourceRoot":"","sources":["../src/builder.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAShF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAsB;IAC5B,OAAO,GAAc,EAAE,CAAC;IACxB,gBAAgB,GAAsB,EAAE,CAAC;IACzC,iBAAiB,GAAuB,EAAE,CAAC;IAC3C,YAAY,GAAuB,EAAE,CAAC;IACtC,SAAS,GAAmC,IAAI,CAAC;IAEzD,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,GAAG;YACZ,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;YAC3C,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;YAC7C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;SACrC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,SAA8B,EAAE;QAC1C,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAEO,cAAc,CAAC,MAAuB;QAC5C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,eAAe,CAAC,OAAyB;QAC/C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,UAAU,CAAC,OAAyB;QAC1C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CACD,QAAwE;QAExE,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,QAAQ;gBACX,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAC/B,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1B,MAAM;QACV,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC;QAExC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,aAAc,EAAE,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC,CAAC;QAExE,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;QACpD,wCAAwC;QACxC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO;gBAAE,SAAS;YAC5C,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC5D,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrB,YAAY,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QACD,0CAA0C;QAC1C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,OAAO;gBAAE,SAAS;YAC7C,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC/D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,YAAY,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAED,wCAAwC;QACxC,IAAI,YAAY,GAA0B,IAAI,CAAC;QAC/C,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,IACE,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,OAAO;gBAChC,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO;gBAEzC,SAAS;YACX,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,YAAY,GAAG,cAAc,CAAC;YAChC,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxB,YAAY,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAE7C,yDAAyD;YACzD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAA6B,CAAC;YAClE,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;gBACzC,IAAI,CAAC,SAAS,GAAG,IAAI,uBAAuB,CAAC,WAAW,EAAE;oBACxD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO;oBAC3C,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,IAAI,GAAG;oBACxD,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,IAAI,EAAE;iBACtD,EAAE,YAAY,CAAC,CAAC;gBAEjB,uDAAuD;gBACvD,yFAAyF;gBACzF,YAAY,CAAC,EAAE,CAAC,uBAAuB,EAAE,QAAQ,CAAC,EAAE;oBAClD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;wBACnB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;4BACjB,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG;4BACzB,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa;4BAC7C,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;4BAC/B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;4BAC/B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;yBACtC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBAChD,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAE1C,gBAAgB;QAChB,MAAM,MAAM,GAAG,IAAI,aAAa,CAC9B,YAAY,EACZ,YAAY,EACZ,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,IAAI,CAAC,MAAM,CAAC,cAAc,EAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CACtB,CAAC;QAEF,4CAA4C;QAC5C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC;QAE9C,kCAAkC;QAClC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,QAAQ,CAAC,SAAS,CAChB,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC9B,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4BAA4B;IACpB,KAAK,CAAC,iBAAiB,CAC7B,cAA8B,EAC9B,YAA0B;QAE1B,MAAM,aAAa,GAAG,cAAc;aACjC,UAAU,EAAE;aACZ,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAE5C,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,cAAc,aAAa,CAAC,MAAM,aAAa,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;YAC9B,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;SACjE,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,EAAC,aAAa,EAAC,EAAE;YACvD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,CAC/C,aAAa,CAAC,MAAM,EACpB,aAAa,CAAC,SAAS,CACxB,CAAC;gBAEF,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnD,MAAM,OAAO,GAAG;wBACd,MAAM,EAAE,aAAa,CAAC,MAAM;wBAC5B,SAAS,EAAE,aAAa,CAAC,SAAS;wBAClC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;qBAC3C,CAAC;oBAEF,MAAM,YAAY,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACjE,MAAM,CAAC,KAAK,CACV,cAAc,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,CAChE,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CACT,mBAAmB,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,EACpE,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../src/builder.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAShF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,gBAAgB,GAEjB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,CAAC,CACN,KAAK,YAAY,wBAAwB;QACzC,KAAK,YAAY,sBAAsB,CACxC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAsB;IAC5B,OAAO,GAAc,EAAE,CAAC;IACxB,gBAAgB,GAAsB,EAAE,CAAC;IACzC,iBAAiB,GAAuB,EAAE,CAAC;IAC3C,YAAY,GAAuB,EAAE,CAAC;IACtC,SAAS,GAAmC,IAAI,CAAC;IAEzD,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,GAAG;YACZ,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,IAAI;YAC3C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK;SACrC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,SAA8B,EAAE;QAC1C,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAEO,cAAc,CAAC,MAAuB;QAC5C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,eAAe,CAAC,OAAyB;QAC/C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,UAAU,CAAC,OAAyB;QAC1C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,GAAG,CACD,QAAwE;QAExE,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,QAAQ;gBACX,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAC/B,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1B,MAAM;QACV,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,MAAoB,EAAE,QAAQ,GAAG,GAAG;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC;QAExC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,aAAc,EAAE,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC,CAAC;QAExE,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;QACpD,wCAAwC;QACxC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO;gBAAE,SAAS;YAC5C,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAC5D,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrB,YAAY,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QACD,0CAA0C;QAC1C,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,OAAO;gBAAE,SAAS;YAC7C,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC/D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,YAAY,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAED,wCAAwC;QACxC,IAAI,YAAY,GAA0B,IAAI,CAAC;QAC/C,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC5C,IACE,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,OAAO;gBAChC,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO;gBAEzC,SAAS;YACX,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YACrE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,YAAY,GAAG,cAAc,CAAC;YAChC,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxB,YAAY,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAE7C,yDAAyD;YACzD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAA6B,CAAC;YAClE,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;gBACzC,IAAI,CAAC,SAAS,GAAG,IAAI,uBAAuB,CAAC,WAAW,EAAE;oBACxD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO;oBAC3C,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,IAAI,GAAG;oBACxD,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,IAAI,EAAE;iBACtD,EAAE,YAAY,CAAC,CAAC;gBAEjB,uDAAuD;gBACvD,yFAAyF;gBACzF,YAAY,CAAC,EAAE,CAAC,uBAAuB,EAAE,QAAQ,CAAC,EAAE;oBAClD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;wBACnB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;4BACjB,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG;4BACzB,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa;4BAC7C,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;4BAC/B,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;4BAC/B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;yBACtC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBAChD,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAE1C,gBAAgB;QAChB,MAAM,MAAM,GAAG,IAAI,aAAa,CAC9B,YAAY,EACZ,YAAY,EACZ,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CACtB,CAAC;QAEF,4CAA4C;QAC5C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC;QAE9C,kCAAkC;QAClC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjC,QAAQ,CAAC,SAAS,CAChB,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAC9B,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4BAA4B;IACpB,KAAK,CAAC,iBAAiB,CAC7B,cAA8B,EAC9B,YAA0B;QAE1B,MAAM,aAAa,GAAG,cAAc;aACjC,UAAU,EAAE;aACZ,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;QAE5C,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,cAAc,aAAa,CAAC,MAAM,aAAa,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE;YAC9B,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;SACjE,CAAC,CAAC;QAEH,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,cAAc,GAAG,CAAC,YAAoB,EAAE,KAAc,EAAE,EAAE;YAC9D,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,YAAY;gBAAE,OAAO;YACzD,YAAY,GAAG,IAAI,CAAC;YACpB,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,+CAA+C,YAAY,SAAS;gBAClE,wDAAwD,EAC1D,KAAK,CACN,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,EAAC,aAAa,EAAC,EAAE;YACvD,MAAM,YAAY,GAAG,GAAG,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,CAC/C,aAAa,CAAC,MAAM,EACpB,aAAa,CAAC,SAAS,CACxB,CAAC;gBAEF,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACnD,MAAM,OAAO,GAAG;wBACd,MAAM,EAAE,aAAa,CAAC,MAAM;wBAC5B,SAAS,EAAE,aAAa,CAAC,SAAS;qBACnC,CAAC;oBAEF,MAAM,YAAY,CAAC,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACjE,MAAM,CAAC,KAAK,CAAC,cAAc,YAAY,EAAE,CAAC,CAAC;oBAC3C,OAAO;gBACT,CAAC;gBAED,gEAAgE;gBAChE,iEAAiE;gBACjE,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;oBAClB,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC3C,MAAM,CAAC,IAAI,CAAC,mBAAmB,YAAY,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC,mBAAmB,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/config/lionrapid.config.d.ts

@@ -3,7 +3,6 @@
  */
 export interface LionRapidCoreConfig {
     defaultLocale?: string;
-    fallbackLocale?: string;
     namespace?: string;
     debugMode?: boolean;
     maxRetries?: number;

package/dist/config/lionrapid.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lionrapid.config.d.ts","sourceRoot":"","sources":["../../src/config/lionrapid.config.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,SAAS,CAAC,EAAE,OAAO,CAAC;IAGpB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC"}
+{"version":3,"file":"lionrapid.config.d.ts","sourceRoot":"","sources":["../../src/config/lionrapid.config.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,SAAS,CAAC,EAAE,OAAO,CAAC;IAGpB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC"}

package/dist/config/repository.config.d.ts

@@ -41,9 +41,9 @@ export interface SyncMissingConfig {
     /** Enable automatic syncing of missing translations */
     enabled: boolean;
     /** Debounce delay in milliseconds before syncing (default: 500) */
-    debounceMs: number;
+    debounceMs?: number;
     /** Maximum batch size before forcing immediate flush (default: 50) */
-    batchSize: number;
+    batchSize?: number;
 }
 /**
  * Network Repository endpoint configuration

package/dist/config/repository.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.config.d.ts","sourceRoot":"","sources":["../../src/config/repository.config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AASH;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QACR,8CAA8C;QAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,4CAA4C;QAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;QAEb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAGlB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAC;IACjB,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wFAAwF;IACxF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QAER,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;QAGhB,SAAS,CAAC,EAAE,gBAAgB,CAAC;QAG7B,iBAAiB,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAG7C,WAAW,CAAC,EAAE,iBAAiB,CAAC;QAGhC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH"}
+{"version":3,"file":"repository.config.d.ts","sourceRoot":"","sources":["../../src/config/repository.config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;GAEG;AASH;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QACR,8CAA8C;QAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,4CAA4C;QAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;QAEb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAGlB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAC;IACjB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wFAAwF;IACxF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QAER,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,MAAM,CAAC;QAGhB,SAAS,CAAC,EAAE,gBAAgB,CAAC;QAG7B,iBAAiB,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAG7C,WAAW,CAAC,EAAE,iBAAiB,CAAC;QAGhC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;CACH"}

package/dist/content/index.d.ts

@@ -14,4 +14,7 @@ export { HTMLSerializer } from './serializer/HTMLSerializer.js';
 export type { IValidator, ValidationResult, ValidationError, ValidationWarning, ValidationErrorCode, ValidationWarningCode, } from './validator/IValidator.js';
 export { ContentValidator } from './validator/ContentValidator.js';
 export { VOID_TAGS, serializeOpeningTag, extractTagName, readRawStyle, } from './canonical-tag.js';
+export { SAFE_TAGS, SAFE_ATTRS, SAFE_STYLE_PROPS, escapeHtml, sanitizeUrl, sanitizeStyle, sanitizeOpeningTag, sanitizeContentUnit, } from './sanitizer/HTMLSanitizer.js';
+export type { HtmlBlock, SplitBlocksResult } from './splitter/BlockSplitter.js';
+export { splitBlocks, replaceBlockInners } from './splitter/BlockSplitter.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/content/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/content/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,YAAY,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGhE,YAAY,EACV,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAInE,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/content/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,YAAY,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGxD,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGhE,YAAY,EACV,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAInE,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EACL,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AAItC,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/content/index.js

@@ -12,4 +12,9 @@ export { ContentValidator } from './validator/ContentValidator.js';
 // Canonical raw-tag helpers — used by all parsers/serializers (core, edge,
 // react, php) so they produce byte-identical output for the same source.
 export { VOID_TAGS, serializeOpeningTag, extractTagName, readRawStyle, } from './canonical-tag.js';
+// Shared allowlist HTML sanitizer — the single implementation every
+// innerHTML sink (core, react <Trans>, WP TS) must route through; the WP
+// PHP port mirrors SAFE_TAGS/SAFE_ATTRS.
+export { SAFE_TAGS, SAFE_ATTRS, SAFE_STYLE_PROPS, escapeHtml, sanitizeUrl, sanitizeStyle, sanitizeOpeningTag, sanitizeContentUnit, } from './sanitizer/HTMLSanitizer.js';
+export { splitBlocks, replaceBlockInners } from './splitter/BlockSplitter.js';
 //# sourceMappingURL=index.js.map

package/dist/content/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/content/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAIxD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAWhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE,2EAA2E;AAC3E,yEAAyE;AACzE,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/content/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAIxD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAWhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAEnE,2EAA2E;AAC3E,yEAAyE;AACzE,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B,oEAAoE;AACpE,yEAAyE;AACzE,yCAAyC;AACzC,OAAO,EACL,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AAKtC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/content/sanitizer/HTMLSanitizer.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Shared allowlist HTML sanitizer — pure string functions, Node-safe (no DOM).
+ *
+ * One implementation for every sink that turns translation data into HTML:
+ * core's HTMLSerializer/auto-translator, the editor text sinks, the snapshot
+ * viewer, react `<Trans>`, and WordPress TS. The WordPress PHP port must
+ * mirror `SAFE_TAGS`/`SAFE_ATTRS` exactly (see improvement-plan §4 item 2).
+ *
+ * Threat model: translation values (and their `raw:` styles) come from the
+ * server/KV and may be attacker-controlled — they are NOT guaranteed to be in
+ * canonical form. Everything here is allowlist-based: unknown tags are
+ * rejected, unknown attributes dropped, URL schemes checked after entity
+ * decoding.
+ *
+ * @module content/sanitizer/HTMLSanitizer
+ */
+import type { ContentUnit } from '../types.js';
+/**
+ * Inline formatting elements allowed inside translated content. Block
+ * structure lives outside ContentUnit (block-level pipeline), so anything
+ * that isn't inline text formatting is rejected outright.
+ */
+export declare const SAFE_TAGS: Set<string>;
+/**
+ * Flat attribute allowlist (plus `data-*`/`aria-*` prefixes, handled in
+ * `sanitizeOpeningTag`). Kept flat — not per-tag — so the PHP mirror stays
+ * trivial; an allowed attribute on the wrong tag is inert.
+ */
+export declare const SAFE_ATTRS: Set<string>;
+/**
+ * CSS properties allowed through an inline `style` attribute.
+ *
+ * RISK NOTE — why `style` never passes through verbatim: with zero
+ * JavaScript, an attacker who controls a style value can render a
+ * full-viewport overlay (`position:fixed;inset:0` → pixel-perfect fake
+ * login UI on the customer's real domain), fire tracking/exfiltration
+ * beacons via `url(...)`, or hide and deface content. Translation data is
+ * attacker-writable in our threat model, so `sanitizeStyle` re-parses the
+ * declarations and keeps only the properties below: cosmetic text/font
+ * properties whose value grammar cannot fetch a URL and cannot reposition
+ * or restack the element (no `position`/`inset`/`display`/`z-index`/
+ * `opacity`/`transform`, no `background` shorthand). A smuggled `url(...)`
+ * inside an allowed property is doubly inert: the value is rejected here,
+ * and these properties ignore URL values anyway.
+ *
+ * CONTINUOUS DEVELOPMENT: this allowlist is intentionally minimal and is
+ * expected to grow deliberately as real sites surface legitimate inline
+ * styling the strict set drops (tracked as a WATCH item in
+ * IMPLEMENTATION.md). When extending it: (1) never add a property that
+ * accepts `url()`/`image()`/`element()` values or that affects layout,
+ * positioning, or stacking; (2) add both hostile and benign cases to
+ * html-sanitizer.test.ts; (3) mirror the change in the WordPress PHP port.
+ */
+export declare const SAFE_STYLE_PROPS: Set<string>;
+/** HTML-escape text for safe use in element content or attribute values. */
+export declare function escapeHtml(text: string): string;
+/**
+ * Validate a URL attribute value. Returns the value unchanged when safe,
+ * or `null` when it must be dropped.
+ *
+ * Entity-decodes first, then strips the control/whitespace characters
+ * browsers ignore inside a scheme (`jav\tascript:`), then requires any
+ * explicit scheme to be on the allowlist. Scheme-less (relative) URLs pass.
+ */
+export declare function sanitizeUrl(value: string): string | null;
+/**
+ * Sanitize an inline `style` attribute value by re-parsing its declarations
+ * and keeping only `SAFE_STYLE_PROPS` with clean values (see the risk note
+ * on `SAFE_STYLE_PROPS`). Returns the rebuilt declaration list in canonical
+ * `prop: value; prop: value` form, or `null` when nothing survives — the
+ * caller then drops the attribute entirely.
+ */
+export declare function sanitizeStyle(value: string): string | null;
+/**
+ * Relaxed CSS profile for the snapshot viewer: keeps ANY standard property
+ * (a snapshot is a full captured page — `position:fixed` navbars and layout
+ * styles are legitimate and must render) but still rejects value-level
+ * dangers: `url(...)` beacons, `expression()`, CSS escape smuggling. The
+ * residual risk (page-authored overlay styles) is accepted for snapshots:
+ * the PM is deliberately viewing arbitrary captured pages, and the editor
+ * UI itself lives in a Shadow DOM host stacked above the snapshot root.
+ */
+export declare function sanitizeCssDeclarations(value: string): string | null;
+/**
+ * Sanitize a raw opening tag (`raw:` style payload). Returns the canonical
+ * rebuilt tag with only allowlisted attributes, or `null` when the element
+ * itself is not allowed — callers must then drop the tag entirely (emit the
+ * indexed marker verbatim / skip the element).
+ */
+export declare function sanitizeOpeningTag(rawOpen: string): string | null;
+/**
+ * Sanitize a ContentUnit at an ingest boundary: run every `raw:` style
+ * through {@link sanitizeOpeningTag} so no dangerous element/attribute/scheme
+ * enters the translation store. Render-time sinks (HTMLSerializer etc.)
+ * sanitize again — this is the store-side half, protecting every other
+ * consumer of stored units (server, MT/TM, exports, the WP PHP port).
+ *
+ * `text` is never modified, so `generateAutoKey(unit.text)` is unaffected —
+ * key parity across surfaces holds even for hostile input. A rejected
+ * element's `raw:` style is dropped entirely; the indexed tag left in the
+ * text is emitted by serializers as an inert marker. Returns the SAME object
+ * when nothing changed, so benign units round-trip identically.
+ */
+export declare function sanitizeContentUnit(unit: ContentUnit): ContentUnit;
+//# sourceMappingURL=HTMLSanitizer.d.ts.map

package/dist/content/sanitizer/HTMLSanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HTMLSanitizer.d.ts","sourceRoot":"","sources":["../../../src/content/sanitizer/HTMLSanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,SAAS,aAIpB,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,UAAU,aAGrB,CAAC;AAKH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,gBAAgB,aAK3B,CAAC;AAqCH,4EAA4E;AAC5E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO/C;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOxD;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEpE;AA4BD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuCjE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAyBlE"}