@liustack/pptwise 0.22.0 → 0.24.0

package/dist/{chunk-VUOLBHD7.js → chunk-RQUKZYSH.js}

@@ -16,4 +16,4 @@ export {
   installPlatform,
   getPlatform
 };
-//# sourceMappingURL=chunk-VUOLBHD7.js.map
+//# sourceMappingURL=chunk-RQUKZYSH.js.map

package/dist/{chunk-VUOLBHD7.js.map → chunk-RQUKZYSH.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/platform/registry.ts"],"sourcesContent":["/**\n * A rasterized page — RGBA, 4 bytes per pixel, row-major, top-to-bottom,\n * straight (non-premultiplied) alpha. Deliberately *not* the DOM `ImageData`\n * type: that interface only exists as an ambient global where a canvas\n * implementation provides it, and this shape must be constructible in Node\n * (from sharp's raw buffer) without depending on any DOM global actually\n * existing at runtime — only the browser implementation happens to be able\n * to hand back a real `ImageData` object, which satisfies this shape\n * structurally without either side needing to import the other's type.\n */\nexport interface RasterizedImage {\n  width: number\n  height: number\n  data: Uint8ClampedArray\n}\n\n/**\n * Scan SVG markup for a remote (`http://`/`https://`) image reference on\n * `href`/`xlink:href`, before any `rasterizeSvg` implementation touches it.\n * Shared by every implementation (`node.ts`'s sharp path, `browser.ts`'s\n * canvas path) rather than each reimplementing its own copy, because the\n * guarantee it enforces is a platform-wide one, not a browser-only one:\n * spec §3.1/§7 promise the default audit chain never starts a network\n * request, and `resolveLocalAssets` already inlines every *local* file to a\n * `data:` URI before render — the only way an `http(s)://` href survives\n * into rendered markup at all is a deck that deliberately keeps a remote URL\n * as its own asset `src`. Left there, a Node rasterizer could silently\n * attempt to fetch it (a real network request `pptwise audit` must never\n * make) and a browser canvas would silently drop it and taint the canvas\n * (the audit-v2 controller ruling this guard implements) — either way the\n * rasterized page would show *not what the text actually sits on*, which is\n * exactly the \"checked nothing, reported clean\" failure mode this whole\n * wave exists to rule out. Returns the offending URL for the caller's error\n * message, or `null` when the markup is clean.\n */\nexport function findRemoteAssetRef(svgMarkup: string): string | null {\n  const m = /\\s(?:xlink:href|href)\\s*=\\s*[\"'](https?:\\/\\/[^\"']*)[\"']/i.exec(svgMarkup)\n  return m ? m[1]! : null\n}\n\n/** Environment seams. The SDK entry stays browser-safe: Node implementations\n *  live in ./node and are installed explicitly (CLI does it automatically). */\nexport interface PptwisePlatform {\n  /** DOMParser constructor used to parse rendered SVG markup. */\n  domParser?: typeof DOMParser\n  /** Re-encode an image data URL to PNG (Office rejects webp and friends). */\n  recodeImageToPng?: (dataUrl: string) => Promise<string>\n  /**\n   * Rasterize SVG markup to a fixed-size pixel buffer (audit-v2 phase B,\n   * spec §4.3/§11.7) — the one primitive the optional pixel-contrast audit\n   * needs and the *only* one Sharp/canvas-shaped work is allowed to hide\n   * behind (`src/svg/audit/pixel-audit.ts` never imports a rasterizer\n   * itself). `installNodePlatform()` wires this to Sharp; a real browser\n   * gets its own default (`./browser.ts`'s `rasterizeSvgInBrowser`) applied\n   * at the call site the same way `domParser`'s `?? globalThis.DOMParser`\n   * fallback already works — not through this seam, since nothing calls\n   * `installPlatform()` automatically in a browser. Every implementation\n   * must reject markup `findRemoteAssetRef` flags rather than touch the\n   * network or a tainted canvas.\n   */\n  rasterizeSvg?: (svgMarkup: string, width: number, height: number) => Promise<RasterizedImage>\n  /**\n   * Optional fetch used when inlining remote assets. The Node CLI installs a\n   * proxy-aware implementation. Absent, callers fall back to global fetch\n   * (tests that `vi.stubGlobal(\"fetch\")` without installing a platform).\n   */\n  fetch?: typeof fetch\n}\n\nlet current: PptwisePlatform = {}\n\nexport function installPlatform(p: PptwisePlatform): void {\n  current = { ...current, ...p }\n}\n\nexport function getPlatform(): PptwisePlatform {\n  return current\n}\n"],"mappings":";AAmCO,SAAS,mBAAmB,WAAkC;AACnE,QAAM,IAAI,2DAA2D,KAAK,SAAS;AACnF,SAAO,IAAI,EAAE,CAAC,IAAK;AACrB;AA+BA,IAAI,UAA2B,CAAC;AAEzB,SAAS,gBAAgB,GAA0B;AACxD,YAAU,EAAE,GAAG,SAAS,GAAG,EAAE;AAC/B;AAEO,SAAS,cAA+B;AAC7C,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/platform/registry.ts"],"sourcesContent":["/**\n * A rasterized page — RGBA, 4 bytes per pixel, row-major, top-to-bottom,\n * straight (non-premultiplied) alpha. Deliberately *not* the DOM `ImageData`\n * type: that interface only exists as an ambient global where a canvas\n * implementation provides it, and this shape must be constructible in Node\n * (from sharp's raw buffer) without depending on any DOM global actually\n * existing at runtime — only the browser implementation happens to be able\n * to hand back a real `ImageData` object, which satisfies this shape\n * structurally without either side needing to import the other's type.\n */\nexport interface RasterizedImage {\n  width: number\n  height: number\n  data: Uint8ClampedArray\n}\n\n/**\n * Scan SVG markup for a remote (`http://`/`https://`) image reference on\n * `href`/`xlink:href`, before any `rasterizeSvg` implementation touches it.\n * Shared by every implementation (`node.ts`'s sharp path, `browser.ts`'s\n * canvas path) rather than each reimplementing its own copy, because the\n * guarantee it enforces is a platform-wide one, not a browser-only one:\n * spec §3.1/§7 promise the default audit chain never starts a network\n * request, and `resolveLocalAssets` already inlines every *local* file to a\n * `data:` URI before render — the only way an `http(s)://` href survives\n * into rendered markup at all is a deck that deliberately keeps a remote URL\n * as its own asset `src`. Left there, a Node rasterizer could silently\n * attempt to fetch it (a real network request `pptwise audit` must never\n * make) and a browser canvas would silently drop it and taint the canvas\n * (the audit-v2 controller ruling this guard implements) — either way the\n * rasterized page would show *not what the text actually sits on*, which is\n * exactly the \"checked nothing, reported clean\" failure mode this whole\n * wave exists to rule out. Returns the offending URL for the caller's error\n * message, or `null` when the markup is clean.\n */\nexport function findRemoteAssetRef(svgMarkup: string): string | null {\n  const m = /\\s(?:xlink:href|href)\\s*=\\s*[\"'](https?:\\/\\/[^\"']*)[\"']/i.exec(svgMarkup)\n  return m ? m[1]! : null\n}\n\n/** Environment seams. The SDK entry stays browser-safe: Node implementations\n *  live in ./node and are installed explicitly (CLI does it automatically). */\nexport interface PptwisePlatform {\n  /** DOMParser constructor used to parse rendered SVG markup. */\n  domParser?: typeof DOMParser\n  /** Re-encode an image data URL to PNG (Office rejects webp and friends). */\n  recodeImageToPng?: (dataUrl: string) => Promise<string>\n  /**\n   * Rasterize SVG markup to a fixed-size pixel buffer (audit-v2 phase B,\n   * spec §4.3/§11.7) — the one primitive the optional pixel-contrast audit\n   * needs and the *only* one Sharp/canvas-shaped work is allowed to hide\n   * behind (`src/audit/pixel-audit.ts` never imports a rasterizer\n   * itself). `installNodePlatform()` wires this to Sharp; a real browser\n   * gets its own default (`./browser.ts`'s `rasterizeSvgInBrowser`) applied\n   * at the call site the same way `domParser`'s `?? globalThis.DOMParser`\n   * fallback already works — not through this seam, since nothing calls\n   * `installPlatform()` automatically in a browser. Every implementation\n   * must reject markup `findRemoteAssetRef` flags rather than touch the\n   * network or a tainted canvas.\n   */\n  rasterizeSvg?: (svgMarkup: string, width: number, height: number) => Promise<RasterizedImage>\n  /**\n   * Optional fetch used when inlining remote assets. The Node CLI installs a\n   * proxy-aware implementation. Absent, callers fall back to global fetch\n   * (tests that `vi.stubGlobal(\"fetch\")` without installing a platform).\n   */\n  fetch?: typeof fetch\n}\n\nlet current: PptwisePlatform = {}\n\nexport function installPlatform(p: PptwisePlatform): void {\n  current = { ...current, ...p }\n}\n\nexport function getPlatform(): PptwisePlatform {\n  return current\n}\n"],"mappings":";AAmCO,SAAS,mBAAmB,WAAkC;AACnE,QAAM,IAAI,2DAA2D,KAAK,SAAS;AACnF,SAAO,IAAI,EAAE,CAAC,IAAK;AACrB;AA+BA,IAAI,UAA2B,CAAC;AAEzB,SAAS,gBAAgB,GAA0B;AACxD,YAAU,EAAE,GAAG,SAAS,GAAG,EAAE;AAC/B;AAEO,SAAS,cAA+B;AAC7C,SAAO;AACT;","names":[]}

package/dist/{chunk-3ZUKISTY.js → chunk-VEZGVYJS.js}

@@ -1,7 +1,7 @@
 import {
   findRemoteAssetRef,
   installPlatform
-} from "./chunk-VUOLBHD7.js";
+} from "./chunk-RQUKZYSH.js";
 
 // src/platform/node.ts
 import { DOMParser as LinkedomDOMParser } from "linkedom";
@@ -111,4 +111,4 @@ export {
   isMissingModuleError,
   installNodePlatform
 };
-//# sourceMappingURL=chunk-3ZUKISTY.js.map
+//# sourceMappingURL=chunk-VEZGVYJS.js.map