@lumencast/runtime 0.3.0 → 0.5.0

package/dist/render/color-interp.js

@@ -0,0 +1,303 @@
+// sRGB colour interpolation (LSML 1.1 §6.5) — issue #33.
+//
+// Both endpoints of a colour animation are first CANONICALISED through
+// the strict shared parser (`parseCssColor`, css-color.ts — ADR 001
+// RC#11/RC#12, never a raw string), then converted to RGBA channels in
+// [0, 1] and interpolated component-wise :
+//
+//   out_c = a_c + t * (b_c - a_c)   for c ∈ {r, g, b, a}
+//
+// with `t` produced by the easing curve. The output is serialised back
+// to `rgba()` form — which itself round-trips through `parseCssColor`
+// at the consuming primitive (belt and braces).
+//
+// All conversions are constant-time per value (the parser already
+// bounds inputs to 64 chars) ; the named-colour table is a flat map
+// lookup.
+import { parseCssColor } from "./css-color";
+// CSS Color 4 §6.1 named colours → packed 0xRRGGBB. Kept numeric (not
+// hex strings) to minimise bundle weight ; the set of NAMES here is
+// exactly the set accepted by css-color.ts (`transparent` and
+// `currentcolor` are handled separately — `currentcolor` cannot be
+// interpolated without computed-style context and is rejected).
+const NAMED_RGB = {
+    aliceblue: 0xf0f8ff,
+    antiquewhite: 0xfaebd7,
+    aqua: 0x00ffff,
+    aquamarine: 0x7fffd4,
+    azure: 0xf0ffff,
+    beige: 0xf5f5dc,
+    bisque: 0xffe4c4,
+    black: 0x000000,
+    blanchedalmond: 0xffebcd,
+    blue: 0x0000ff,
+    blueviolet: 0x8a2be2,
+    brown: 0xa52a2a,
+    burlywood: 0xdeb887,
+    cadetblue: 0x5f9ea0,
+    chartreuse: 0x7fff00,
+    chocolate: 0xd2691e,
+    coral: 0xff7f50,
+    cornflowerblue: 0x6495ed,
+    cornsilk: 0xfff8dc,
+    crimson: 0xdc143c,
+    cyan: 0x00ffff,
+    darkblue: 0x00008b,
+    darkcyan: 0x008b8b,
+    darkgoldenrod: 0xb8860b,
+    darkgray: 0xa9a9a9,
+    darkgreen: 0x006400,
+    darkgrey: 0xa9a9a9,
+    darkkhaki: 0xbdb76b,
+    darkmagenta: 0x8b008b,
+    darkolivegreen: 0x556b2f,
+    darkorange: 0xff8c00,
+    darkorchid: 0x9932cc,
+    darkred: 0x8b0000,
+    darksalmon: 0xe9967a,
+    darkseagreen: 0x8fbc8f,
+    darkslateblue: 0x483d8b,
+    darkslategray: 0x2f4f4f,
+    darkslategrey: 0x2f4f4f,
+    darkturquoise: 0x00ced1,
+    darkviolet: 0x9400d3,
+    deeppink: 0xff1493,
+    deepskyblue: 0x00bfff,
+    dimgray: 0x696969,
+    dimgrey: 0x696969,
+    dodgerblue: 0x1e90ff,
+    firebrick: 0xb22222,
+    floralwhite: 0xfffaf0,
+    forestgreen: 0x228b22,
+    fuchsia: 0xff00ff,
+    gainsboro: 0xdcdcdc,
+    ghostwhite: 0xf8f8ff,
+    gold: 0xffd700,
+    goldenrod: 0xdaa520,
+    gray: 0x808080,
+    green: 0x008000,
+    greenyellow: 0xadff2f,
+    grey: 0x808080,
+    honeydew: 0xf0fff0,
+    hotpink: 0xff69b4,
+    indianred: 0xcd5c5c,
+    indigo: 0x4b0082,
+    ivory: 0xfffff0,
+    khaki: 0xf0e68c,
+    lavender: 0xe6e6fa,
+    lavenderblush: 0xfff0f5,
+    lawngreen: 0x7cfc00,
+    lemonchiffon: 0xfffacd,
+    lightblue: 0xadd8e6,
+    lightcoral: 0xf08080,
+    lightcyan: 0xe0ffff,
+    lightgoldenrodyellow: 0xfafad2,
+    lightgray: 0xd3d3d3,
+    lightgreen: 0x90ee90,
+    lightgrey: 0xd3d3d3,
+    lightpink: 0xffb6c1,
+    lightsalmon: 0xffa07a,
+    lightseagreen: 0x20b2aa,
+    lightskyblue: 0x87cefa,
+    lightslategray: 0x778899,
+    lightslategrey: 0x778899,
+    lightsteelblue: 0xb0c4de,
+    lightyellow: 0xffffe0,
+    lime: 0x00ff00,
+    limegreen: 0x32cd32,
+    linen: 0xfaf0e6,
+    magenta: 0xff00ff,
+    maroon: 0x800000,
+    mediumaquamarine: 0x66cdaa,
+    mediumblue: 0x0000cd,
+    mediumorchid: 0xba55d3,
+    mediumpurple: 0x9370db,
+    mediumseagreen: 0x3cb371,
+    mediumslateblue: 0x7b68ee,
+    mediumspringgreen: 0x00fa9a,
+    mediumturquoise: 0x48d1cc,
+    mediumvioletred: 0xc71585,
+    midnightblue: 0x191970,
+    mintcream: 0xf5fffa,
+    mistyrose: 0xffe4e1,
+    moccasin: 0xffe4b5,
+    navajowhite: 0xffdead,
+    navy: 0x000080,
+    oldlace: 0xfdf5e6,
+    olive: 0x808000,
+    olivedrab: 0x6b8e23,
+    orange: 0xffa500,
+    orangered: 0xff4500,
+    orchid: 0xda70d6,
+    palegoldenrod: 0xeee8aa,
+    palegreen: 0x98fb98,
+    paleturquoise: 0xafeeee,
+    palevioletred: 0xdb7093,
+    papayawhip: 0xffefd5,
+    peachpuff: 0xffdab9,
+    peru: 0xcd853f,
+    pink: 0xffc0cb,
+    plum: 0xdda0dd,
+    powderblue: 0xb0e0e6,
+    purple: 0x800080,
+    rebeccapurple: 0x663399,
+    red: 0xff0000,
+    rosybrown: 0xbc8f8f,
+    royalblue: 0x4169e1,
+    saddlebrown: 0x8b4513,
+    salmon: 0xfa8072,
+    sandybrown: 0xf4a460,
+    seagreen: 0x2e8b57,
+    seashell: 0xfff5ee,
+    sienna: 0xa0522d,
+    silver: 0xc0c0c0,
+    skyblue: 0x87ceeb,
+    slateblue: 0x6a5acd,
+    slategray: 0x708090,
+    slategrey: 0x708090,
+    snow: 0xfffafa,
+    springgreen: 0x00ff7f,
+    steelblue: 0x4682b4,
+    tan: 0xd2b48c,
+    teal: 0x008080,
+    thistle: 0xd8bfd8,
+    tomato: 0xff6347,
+    turquoise: 0x40e0d0,
+    violet: 0xee82ee,
+    wheat: 0xf5deb3,
+    white: 0xffffff,
+    whitesmoke: 0xf5f5f5,
+    yellow: 0xffff00,
+    yellowgreen: 0x9acd32,
+};
+/**
+ * Canonicalise + convert an untrusted colour value to RGBA channels in
+ * [0, 1]. The value passes through `parseCssColor` FIRST — anything the
+ * strict parser rejects converts to `null` here (never interpolate a
+ * raw string, §6.5 step 1 / RC#11). `currentcolor` is also rejected :
+ * it has no concrete channels without computed-style context.
+ */
+export function cssColorToRgba(value) {
+    const v = parseCssColor(value);
+    if (v === null)
+        return null;
+    if (v.startsWith("#"))
+        return hexToRgba(v);
+    if (v.startsWith("rgb")) {
+        const body = v.slice(v.indexOf("(") + 1, -1);
+        const parts = body.split(",").map((p) => p.trim());
+        if (parts.length < 3)
+            return null;
+        const pct = parts[0].endsWith("%");
+        const scale = pct ? 100 : 255;
+        const r = channel(parts[0], scale);
+        const g = channel(parts[1], scale);
+        const b = channel(parts[2], scale);
+        const a = parts.length > 3 ? alphaChannel(parts[3]) : 1;
+        if (r === null || g === null || b === null || a === null)
+            return null;
+        return [r, g, b, a];
+    }
+    if (v.startsWith("hsl")) {
+        const body = v.slice(v.indexOf("(") + 1, -1);
+        const parts = body.split(",").map((p) => p.trim());
+        if (parts.length < 3)
+            return null;
+        const h = Number(parts[0].replace("deg", ""));
+        const s = Number(parts[1].replace("%", "")) / 100;
+        const l = Number(parts[2].replace("%", "")) / 100;
+        const a = parts.length > 3 ? alphaChannel(parts[3]) : 1;
+        if (![h, s, l].every(Number.isFinite) || a === null)
+            return null;
+        const [r, g, b] = hslToRgb(h, s, l);
+        return [r, g, b, a];
+    }
+    if (v === "transparent")
+        return [0, 0, 0, 0];
+    if (v === "currentcolor")
+        return null;
+    const packed = NAMED_RGB[v];
+    if (packed === undefined)
+        return null;
+    return [((packed >> 16) & 0xff) / 255, ((packed >> 8) & 0xff) / 255, (packed & 0xff) / 255, 1];
+}
+function hexToRgba(v) {
+    const h = v.slice(1);
+    if (h.length === 3 || h.length === 4) {
+        const r = parseInt(h[0] + h[0], 16);
+        const g = parseInt(h[1] + h[1], 16);
+        const b = parseInt(h[2] + h[2], 16);
+        const a = h.length === 4 ? parseInt(h[3] + h[3], 16) : 255;
+        return [r / 255, g / 255, b / 255, a / 255];
+    }
+    if (h.length === 6 || h.length === 8) {
+        const r = parseInt(h.slice(0, 2), 16);
+        const g = parseInt(h.slice(2, 4), 16);
+        const b = parseInt(h.slice(4, 6), 16);
+        const a = h.length === 8 ? parseInt(h.slice(6, 8), 16) : 255;
+        return [r / 255, g / 255, b / 255, a / 255];
+    }
+    return null;
+}
+function channel(token, scale) {
+    const n = Number(token.replace("%", ""));
+    if (!Number.isFinite(n))
+        return null;
+    return clamp01(n / scale);
+}
+function alphaChannel(token) {
+    const pct = token.endsWith("%");
+    const n = Number(token.replace("%", ""));
+    if (!Number.isFinite(n))
+        return null;
+    return clamp01(pct ? n / 100 : n);
+}
+/** Standard HSL → RGB (CSS Color 4 §7.1). h in degrees, s/l in [0,1]. */
+function hslToRgb(h, s, l) {
+    const hue = ((h % 360) + 360) % 360;
+    const c = (1 - Math.abs(2 * l - 1)) * s;
+    const hp = hue / 60;
+    const x = c * (1 - Math.abs((hp % 2) - 1));
+    let r = 0;
+    let g = 0;
+    let b = 0;
+    if (hp < 1)
+        [r, g, b] = [c, x, 0];
+    else if (hp < 2)
+        [r, g, b] = [x, c, 0];
+    else if (hp < 3)
+        [r, g, b] = [0, c, x];
+    else if (hp < 4)
+        [r, g, b] = [0, x, c];
+    else if (hp < 5)
+        [r, g, b] = [x, 0, c];
+    else
+        [r, g, b] = [c, 0, x];
+    const m = l - c / 2;
+    return [clamp01(r + m), clamp01(g + m), clamp01(b + m)];
+}
+/** Component-wise sRGB lerp (§6.5 step 2). `t` may overshoot (springs) ;
+ *  channels clamp back into [0, 1] after mixing. */
+export function mixRgba(a, b, t) {
+    return [
+        clamp01(a[0] + t * (b[0] - a[0])),
+        clamp01(a[1] + t * (b[1] - a[1])),
+        clamp01(a[2] + t * (b[2] - a[2])),
+        clamp01(a[3] + t * (b[3] - a[3])),
+    ];
+}
+/** Serialise RGBA back to `rgba()` form (§6.5 step 3). The output is
+ *  always re-accepted by `parseCssColor` (integer channels, alpha with
+ *  at most 4 decimals). */
+export function serializeRgba(rgba) {
+    const r = Math.round(clamp01(rgba[0]) * 255);
+    const g = Math.round(clamp01(rgba[1]) * 255);
+    const b = Math.round(clamp01(rgba[2]) * 255);
+    // 4 decimals max so the alpha token matches the strict grammar.
+    const a = Math.round(clamp01(rgba[3]) * 10000) / 10000;
+    return `rgba(${r}, ${g}, ${b}, ${a})`;
+}
+function clamp01(n) {
+    return n < 0 ? 0 : n > 1 ? 1 : n;
+}
+//# sourceMappingURL=color-interp.js.map

package/dist/render/color-interp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"color-interp.js","sourceRoot":"","sources":["../../src/render/color-interp.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,uEAAuE;AACvE,oEAAoE;AACpE,uEAAuE;AACvE,2CAA2C;AAC3C,EAAE;AACF,yDAAyD;AACzD,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,gDAAgD;AAChD,EAAE;AACF,kEAAkE;AAClE,oEAAoE;AACpE,UAAU;AAEV,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAK5C,sEAAsE;AACtE,oEAAoE;AACpE,8DAA8D;AAC9D,mEAAmE;AACnE,gEAAgE;AAChE,MAAM,SAAS,GAA2B;IACxC,SAAS,EAAE,QAAQ;IACnB,YAAY,EAAE,QAAQ;IACtB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,QAAQ;IACpB,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,QAAQ;IACf,cAAc,EAAE,QAAQ;IACxB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,QAAQ;IACpB,KAAK,EAAE,QAAQ;IACf,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,QAAQ;IACnB,KAAK,EAAE,QAAQ;IACf,cAAc,EAAE,QAAQ;IACxB,QAAQ,EAAE,QAAQ;IAClB,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,QAAQ;IAClB,aAAa,EAAE,QAAQ;IACvB,QAAQ,EAAE,QAAQ;IAClB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,QAAQ;IAClB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,QAAQ;IACrB,cAAc,EAAE,QAAQ;IACxB,UAAU,EAAE,QAAQ;IACpB,UAAU,EAAE,QAAQ;IACpB,OAAO,EAAE,QAAQ;IACjB,UAAU,EAAE,QAAQ;IACpB,YAAY,EAAE,QAAQ;IACtB,aAAa,EAAE,QAAQ;IACvB,aAAa,EAAE,QAAQ;IACvB,aAAa,EAAE,QAAQ;IACvB,aAAa,EAAE,QAAQ;IACvB,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,QAAQ;IACjB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,QAAQ;IACrB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,QAAQ;IACpB,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,QAAQ;IACnB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,QAAQ;IACrB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,QAAQ;IAClB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,QAAQ;IAClB,aAAa,EAAE,QAAQ;IACvB,SAAS,EAAE,QAAQ;IACnB,YAAY,EAAE,QAAQ;IACtB,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,QAAQ;IACnB,oBAAoB,EAAE,QAAQ;IAC9B,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,QAAQ;IACvB,YAAY,EAAE,QAAQ;IACtB,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,QAAQ;IACxB,cAAc,EAAE,QAAQ;IACxB,WAAW,EAAE,QAAQ;IACrB,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,QAAQ;IACnB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,QAAQ;IAChB,gBAAgB,EAAE,QAAQ;IAC1B,UAAU,EAAE,QAAQ;IACpB,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,QAAQ;IACtB,cAAc,EAAE,QAAQ;IACxB,eAAe,EAAE,QAAQ;IACzB,iBAAiB,EAAE,QAAQ;IAC3B,eAAe,EAAE,QAAQ;IACzB,eAAe,EAAE,QAAQ;IACzB,YAAY,EAAE,QAAQ;IACtB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,QAAQ;IACrB,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,QAAQ;IACf,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,QAAQ;IAChB,aAAa,EAAE,QAAQ;IACvB,SAAS,EAAE,QAAQ;IACnB,aAAa,EAAE,QAAQ;IACvB,aAAa,EAAE,QAAQ;IACvB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,QAAQ;IACnB,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,QAAQ;IACpB,MAAM,EAAE,QAAQ;IAChB,aAAa,EAAE,QAAQ;IACvB,GAAG,EAAE,QAAQ;IACb,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,QAAQ;IACrB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,QAAQ;IACrB,SAAS,EAAE,QAAQ;IACnB,GAAG,EAAE,QAAQ;IACb,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,QAAQ;IACjB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,QAAQ;IACf,UAAU,EAAE,QAAQ;IACpB,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAE3C,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACtE,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;QACnD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;QACnD,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,CAAC,KAAK,aAAa;QAAE,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7D,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7D,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,KAAa;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,yEAAyE;AACzE,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS,EAAE,CAAS;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,GAAG,GAAG,EAAE,CAAC;IACpB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,EAAE,GAAG,CAAC;QAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SAC7B,IAAI,EAAE,GAAG,CAAC;QAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SAClC,IAAI,EAAE,GAAG,CAAC;QAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SAClC,IAAI,EAAE,GAAG,CAAC;QAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;SAClC,IAAI,EAAE,GAAG,CAAC;QAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;;QAClC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;oDACoD;AACpD,MAAM,UAAU,OAAO,CAAC,CAAO,EAAE,CAAO,EAAE,CAAS;IACjD,OAAO;QACL,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;2BAE2B;AAC3B,MAAM,UAAU,aAAa,CAAC,IAAU;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAC7C,gEAAgE;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;IACvD,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/dist/render/css-color.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Validate an untrusted colour value against the strict grammar above.
+ *
+ * Returns the validated string (trimmed ; named colours lowercased) or
+ * `null` on rejection. A `null` MUST be handled as "omit the style /
+ * use the primitive's safe default" — never interpolate the raw input.
+ */
+export declare function parseCssColor(value: unknown): string | null;
+/**
+ * Diagnostic for a rejected value. Bastion R9 (ADR 001 §5.1) : the
+ * rejected VALUE is never logged nor forwarded — only `node.id` (RC#7,
+ * issue #34), the field name and a static reason. Routed through the
+ * structured diagnostics channel (events, no logs in `broadcast`).
+ */
+export declare function warnRejectedColor(field: string, nodeId?: string): void;
+//# sourceMappingURL=css-color.d.ts.map

package/dist/render/css-color.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"css-color.d.ts","sourceRoot":"","sources":["../../src/render/css-color.ts"],"names":[],"mappings":"AAwFA;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmC3D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAMtE"}

package/dist/render/css-color.js

@@ -0,0 +1,130 @@
+// Strict CSS colour parser — the ONLY gate through which untrusted
+// colour values (bundle props AND live LSDP deltas, see `resolveProps`
+// in tree.tsx) may reach an inline CSS style.
+//
+// ADR 001 §6 RC#11 (CSS strict) + RC#12 (anti-ReDoS), threat model
+// Bastion 2026-06-10, issue #35. Sites #30/#31/#33 must reuse this
+// module — never re-implement colour validation locally.
+//
+// Accepted grammar (LSML 1.1 §6.5 colour forms, nothing more) :
+//   - hex      : #RGB | #RGBA | #RRGGBB | #RRGGBBAA
+//   - rgb()    : rgb(R, G, B) | rgba(R, G, B, A) — 0-255 or percentages
+//   - hsl()    : hsl(H, S%, L%) | hsla(H, S%, L%, A)
+//   - named    : canonical CSS named colours + `transparent` + `currentcolor`
+// Anything else — including `url(`, `;`, `}`, `expression(`, var(),
+// calc(), whitespace tricks — is REJECTED (null). Never passthrough.
+//
+// ── Linear-time justification (RC#12, written per Bastion) ──────────
+// 1. Inputs longer than MAX_LEN (64) are rejected before any regex
+//    runs, so every step below operates on a bounded string.
+// 2. The charset pre-scan is a single O(n) pass over one character
+//    class — it rejects `;`, `}`, `:`, `/`, quotes, backslashes and
+//    control characters outright, so no later step ever sees them.
+// 3. Every regex is anchored (`^…$`) and built exclusively from
+//    literals, character classes and BOUNDED quantifiers ({m,n}, ?).
+//    There are no nested unbounded quantifiers ((a+)+ style), no
+//    overlapping alternations under a quantifier — i.e. no input can
+//    trigger super-linear backtracking. Combined with the 64-char cap,
+//    total work is O(64) per value regardless of payload shape.
+// ─────────────────────────────────────────────────────────────────────
+import { emitDiagnostic } from "./diagnostics";
+const MAX_LEN = 64;
+// Single-pass charset allowlist. Only characters that can appear in
+// the accepted grammar. Notably ABSENT : `;` `}` `{` `:` `/` `"` `'`
+// `\` `<` `>` `-` and all control chars — the injection metacharacters.
+const CHARSET_RE = /^[#a-zA-Z0-9(),.% ]{1,64}$/;
+// hex — 3/4/6/8 hex digits. Alternation of fixed-width character-class
+// runs : strictly linear.
+const HEX_RE = /^#(?:[0-9a-fA-F]{3,4}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/;
+// Number tokens. All quantifiers bounded ; `(?:\.\d{1,4})?` is an
+// optional bounded group — one possible match per position, no
+// ambiguity, no backtracking blow-up.
+const NUM = String.raw `\d{1,3}(?:\.\d{1,4})?`; // 0 … 999.9999
+const ALPHA = String.raw `(?:0|1|0?\.\d{1,4}|${NUM}%)`; // 0-1 or %
+const SP = String.raw `[ ]{0,4}`; // bounded optional spaces
+// rgb(R, G, B[, A]) — channels all plain numbers or all percentages
+// are both accepted (range-checked numerically after the match).
+const RGB_RE = new RegExp(`^rgba?\\(${SP}(${NUM})(%?)${SP},${SP}(${NUM})(%?)${SP},${SP}(${NUM})(%?)${SP}` +
+    `(?:,${SP}${ALPHA}${SP})?\\)$`);
+// hsl(H[deg], S%, L%[, A])
+const HSL_RE = new RegExp(`^hsla?\\(${SP}(${NUM})(?:deg)?${SP},${SP}(${NUM})%${SP},${SP}(${NUM})%${SP}` +
+    `(?:,${SP}${ALPHA}${SP})?\\)$`);
+// Canonical CSS named colours (CSS Color 4 §6.1) + the two keywords
+// that behave like colours in every site we render.
+const NAMED = new Set(("aliceblue antiquewhite aqua aquamarine azure beige bisque black blanchedalmond blue " +
+    "blueviolet brown burlywood cadetblue chartreuse chocolate coral cornflowerblue cornsilk " +
+    "crimson cyan darkblue darkcyan darkgoldenrod darkgray darkgreen darkgrey darkkhaki " +
+    "darkmagenta darkolivegreen darkorange darkorchid darkred darksalmon darkseagreen " +
+    "darkslateblue darkslategray darkslategrey darkturquoise darkviolet deeppink deepskyblue " +
+    "dimgray dimgrey dodgerblue firebrick floralwhite forestgreen fuchsia gainsboro ghostwhite " +
+    "gold goldenrod gray green greenyellow grey honeydew hotpink indianred indigo ivory khaki " +
+    "lavender lavenderblush lawngreen lemonchiffon lightblue lightcoral lightcyan " +
+    "lightgoldenrodyellow lightgray lightgreen lightgrey lightpink lightsalmon lightseagreen " +
+    "lightskyblue lightslategray lightslategrey lightsteelblue lightyellow lime limegreen " +
+    "linen magenta maroon mediumaquamarine mediumblue mediumorchid mediumpurple " +
+    "mediumseagreen mediumslateblue mediumspringgreen mediumturquoise mediumvioletred " +
+    "midnightblue mintcream mistyrose moccasin navajowhite navy oldlace olive olivedrab " +
+    "orange orangered orchid palegoldenrod palegreen paleturquoise palevioletred papayawhip " +
+    "peachpuff peru pink plum powderblue purple rebeccapurple red rosybrown royalblue " +
+    "saddlebrown salmon sandybrown seagreen seashell sienna silver skyblue slateblue " +
+    "slategray slategrey snow springgreen steelblue tan teal thistle tomato turquoise violet " +
+    "wheat white whitesmoke yellow yellowgreen transparent currentcolor").split(" "));
+/**
+ * Validate an untrusted colour value against the strict grammar above.
+ *
+ * Returns the validated string (trimmed ; named colours lowercased) or
+ * `null` on rejection. A `null` MUST be handled as "omit the style /
+ * use the primitive's safe default" — never interpolate the raw input.
+ */
+export function parseCssColor(value) {
+    if (typeof value !== "string")
+        return null;
+    const v = value.trim();
+    if (v.length === 0 || v.length > MAX_LEN)
+        return null;
+    // Contractual explicit rejects (Bastion RC#11) — redundant with the
+    // charset scan below, kept as belt-and-braces so the contract holds
+    // even if the grammar is ever extended.
+    const lower = v.toLowerCase();
+    if (lower.includes("url(") || v.includes(";") || v.includes("}"))
+        return null;
+    // Single-pass charset allowlist (kills every CSS metacharacter).
+    if (!CHARSET_RE.test(v))
+        return null;
+    if (v.startsWith("#"))
+        return HEX_RE.test(v) ? v : null;
+    if (lower.startsWith("rgb")) {
+        const m = RGB_RE.exec(lower);
+        if (!m)
+            return null;
+        // Range check : percent channels ≤ 100, plain channels ≤ 255, no mixing.
+        const pct = [m[2], m[4], m[6]];
+        if (!(pct.every((p) => p === "%") || pct.every((p) => p === "")))
+            return null;
+        const max = pct[0] === "%" ? 100 : 255;
+        for (const ch of [m[1], m[3], m[5]]) {
+            if (Number(ch) > max)
+                return null;
+        }
+        return lower;
+    }
+    if (lower.startsWith("hsl")) {
+        const m = HSL_RE.exec(lower);
+        if (!m)
+            return null;
+        if (Number(m[1]) > 360 || Number(m[2]) > 100 || Number(m[3]) > 100)
+            return null;
+        return lower;
+    }
+    return NAMED.has(lower) ? lower : null;
+}
+/**
+ * Diagnostic for a rejected value. Bastion R9 (ADR 001 §5.1) : the
+ * rejected VALUE is never logged nor forwarded — only `node.id` (RC#7,
+ * issue #34), the field name and a static reason. Routed through the
+ * structured diagnostics channel (events, no logs in `broadcast`).
+ */
+export function warnRejectedColor(field, nodeId) {
+    emitDiagnostic(nodeId, field, "rejected unsafe colour : not a strict hex/rgb()/hsl()/named colour");
+}
+//# sourceMappingURL=css-color.js.map

package/dist/render/css-color.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"css-color.js","sourceRoot":"","sources":["../../src/render/css-color.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,uEAAuE;AACvE,8CAA8C;AAC9C,EAAE;AACF,mEAAmE;AACnE,mEAAmE;AACnE,yDAAyD;AACzD,EAAE;AACF,gEAAgE;AAChE,oDAAoD;AACpD,wEAAwE;AACxE,qDAAqD;AACrD,8EAA8E;AAC9E,oEAAoE;AACpE,qEAAqE;AACrE,EAAE;AACF,uEAAuE;AACvE,mEAAmE;AACnE,6DAA6D;AAC7D,mEAAmE;AACnE,oEAAoE;AACpE,mEAAmE;AACnE,gEAAgE;AAChE,qEAAqE;AACrE,iEAAiE;AACjE,qEAAqE;AACrE,uEAAuE;AACvE,gEAAgE;AAChE,wEAAwE;AAExE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,OAAO,GAAG,EAAE,CAAC;AAEnB,oEAAoE;AACpE,qEAAqE;AACrE,wEAAwE;AACxE,MAAM,UAAU,GAAG,4BAA4B,CAAC;AAEhD,uEAAuE;AACvE,0BAA0B;AAC1B,MAAM,MAAM,GAAG,uDAAuD,CAAC;AAEvE,kEAAkE;AAClE,+DAA+D;AAC/D,sCAAsC;AACtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA,uBAAuB,CAAC,CAAC,eAAe;AAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAA,sBAAsB,GAAG,IAAI,CAAC,CAAC,WAAW;AAClE,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAA,UAAU,CAAC,CAAC,0BAA0B;AAE3D,oEAAoE;AACpE,iEAAiE;AACjE,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,YAAY,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,QAAQ,EAAE,EAAE;IAC7E,OAAO,EAAE,GAAG,KAAK,GAAG,EAAE,QAAQ,CACjC,CAAC;AAEF,2BAA2B;AAC3B,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,YAAY,EAAE,IAAI,GAAG,YAAY,EAAE,IAAI,EAAE,IAAI,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;IAC3E,OAAO,EAAE,GAAG,KAAK,GAAG,EAAE,QAAQ,CACjC,CAAC;AAEF,oEAAoE;AACpE,oDAAoD;AACpD,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,CACE,sFAAsF;IACtF,0FAA0F;IAC1F,qFAAqF;IACrF,mFAAmF;IACnF,0FAA0F;IAC1F,4FAA4F;IAC5F,2FAA2F;IAC3F,+EAA+E;IAC/E,0FAA0F;IAC1F,uFAAuF;IACvF,6EAA6E;IAC7E,mFAAmF;IACnF,qFAAqF;IACrF,yFAAyF;IACzF,mFAAmF;IACnF,kFAAkF;IAClF,0FAA0F;IAC1F,oEAAoE,CACrE,CAAC,KAAK,CAAC,GAAG,CAAC,CACb,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,OAAO;QAAE,OAAO,IAAI,CAAC;IACtD,oEAAoE;IACpE,oEAAoE;IACpE,wCAAwC;IACxC,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,iEAAiE;IACjE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExD,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,yEAAyE;QACzE,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACvC,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG;gBAAE,OAAO,IAAI,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,MAAe;IAC9D,cAAc,CACZ,MAAM,EACN,KAAK,EACL,oEAAoE,CACrE,CAAC;AACJ,CAAC"}

package/dist/render/diagnostics.d.ts

@@ -0,0 +1,26 @@
+/** Placeholder id for nodes that don't declare an `id`. */
+export declare const ANON_NODE_ID = "<anon>";
+export interface RenderDiagnostic {
+    /** `RenderNode.id` of the node the field belongs to (RC#7), or
+     *  `ANON_NODE_ID` when the node has none. */
+    nodeId: string;
+    /** Name of the field/prop concerned (e.g. `text.colour`,
+     *  `shape.paths.data`, `bindAnimate.opacity`). Never its value (R9). */
+    field: string;
+    /** Static reason — why the field was rejected or not rendered. */
+    reason: string;
+}
+export type DiagnosticHandler = (diagnostic: RenderDiagnostic) => void;
+/**
+ * Register a diagnostics handler (one per `mount()`, plus tests).
+ * Returns the unregister function. Multiple concurrent mounts each
+ * receive every diagnostic — node ids are bundle-scoped, so a host
+ * running several mounts should disambiguate on its side.
+ */
+export declare function addDiagnosticsHandler(handler: DiagnosticHandler): () => void;
+/**
+ * Emit one anti-drop diagnostic. `field` and `reason` MUST be static
+ * strings / field names — never interpolate a prop or leaf value (R9).
+ */
+export declare function emitDiagnostic(nodeId: string | undefined, field: string, reason: string): void;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/render/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../src/render/diagnostics.ts"],"names":[],"mappings":"AAqBA,2DAA2D;AAC3D,eAAO,MAAM,YAAY,WAAW,CAAC;AAErC,MAAM,WAAW,gBAAgB;IAC/B;iDAC6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf;4EACwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,UAAU,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAIvE;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAK5E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAkB9F"}

package/dist/render/diagnostics.js

@@ -0,0 +1,58 @@
+// Anti-silent-drop diagnostics channel (ADR 001 §3.4 D4, issue #34).
+//
+// Every render-side diagnostic — rejected colour/filter/path/typography
+// value, unknown prop, unrendered spec'd field — flows through
+// `emitDiagnostic`. The diagnostic is an EVENT, not a console.log :
+// hosts subscribe via `MountOptions.onDiagnostic` (wired by `mount()`)
+// and receive a structured `{ nodeId, field, reason }`. When no handler
+// is registered, the runtime falls back to a DEV-only `console.warn`
+// so authors still see drops during development — and `broadcast`
+// builds stay silent on the console, per the CLAUDE.md "no logs in
+// broadcast" rule.
+//
+// ── Hygiene contract (Bastion R9, ADR 001 §5.1) ─────────────────────
+// A diagnostic NEVER carries the value of a leaf or a prop — only the
+// node id, the field name and a STATIC reason string. Leaf values can
+// hold sensitive on-air content ; they must not transit any diagnostic
+// channel. Callers pass field names and literal reasons exclusively.
+// The R9 sentinel test (r9-sentinel.test.tsx) enforces this end to end,
+// and statically checks that `console.warn` only exists in this module.
+// ─────────────────────────────────────────────────────────────────────
+/** Placeholder id for nodes that don't declare an `id`. */
+export const ANON_NODE_ID = "<anon>";
+const handlers = new Set();
+/**
+ * Register a diagnostics handler (one per `mount()`, plus tests).
+ * Returns the unregister function. Multiple concurrent mounts each
+ * receive every diagnostic — node ids are bundle-scoped, so a host
+ * running several mounts should disambiguate on its side.
+ */
+export function addDiagnosticsHandler(handler) {
+    handlers.add(handler);
+    return () => {
+        handlers.delete(handler);
+    };
+}
+/**
+ * Emit one anti-drop diagnostic. `field` and `reason` MUST be static
+ * strings / field names — never interpolate a prop or leaf value (R9).
+ */
+export function emitDiagnostic(nodeId, field, reason) {
+    const diagnostic = { nodeId: nodeId ?? ANON_NODE_ID, field, reason };
+    if (handlers.size > 0) {
+        for (const handler of handlers) {
+            try {
+                handler(diagnostic);
+            }
+            catch {
+                // A host handler that throws must never break the render path.
+            }
+        }
+        return;
+    }
+    // DEV-only console fallback — broadcast builds log nothing.
+    if (import.meta.env.DEV) {
+        console.warn(`[lumencast] node "${diagnostic.nodeId}": field "${field}" ${reason} (value withheld per R9)`);
+    }
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/render/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/render/diagnostics.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,wEAAwE;AACxE,+DAA+D;AAC/D,oEAAoE;AACpE,uEAAuE;AACvE,wEAAwE;AACxE,qEAAqE;AACrE,kEAAkE;AAClE,mEAAmE;AACnE,mBAAmB;AACnB,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AACrE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AAExE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AAerC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA0B;IAC9D,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,OAAO,GAAG,EAAE;QACV,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAA0B,EAAE,KAAa,EAAE,MAAc;IACtF,MAAM,UAAU,GAAqB,EAAE,MAAM,EAAE,MAAM,IAAI,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACvF,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IACD,4DAA4D;IAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CACV,qBAAqB,UAAU,CAAC,MAAM,aAAa,KAAK,KAAK,MAAM,0BAA0B,CAC9F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/render/fill.d.ts

@@ -35,7 +35,19 @@ export declare function renderFill(fill: Fill): FillRenderResult;
 /** Compile an array of Fill into a CSS `background-image` value usable
  * on a `<div>` (frame backgrounds — non-SVG context). Returns the CSS
  * string + opacity. Stops use percentages in CSS gradient syntax. */
-export declare function backgroundsToCss(fills: Fill[]): CSSProperties;
-/** Coerce loose JSON into a Fill array. Returns [] for non-arrays. */
-export declare function parseFills(value: unknown): Fill[];
+export declare function backgroundsToCss(fills: Fill[], nodeId?: string): CSSProperties;
+/** Validate every colour carried by a Fill array through the strict
+ * parser (RC#11 — issue #30 contractual comment : SVG `fill`/`stroke`
+ * attributes and `<stop stop-color>` are injection sites too, since
+ * fills arrive from untrusted bundles AND live LSDP deltas). A fill
+ * whose solid colour — or ANY gradient stop colour — is rejected drops
+ * the whole layer with a diagnostic : never passthrough, never a
+ * half-built gradient. Returned fills carry canonicalised colours. */
+export declare function sanitizeFills(fills: Fill[], field: string, nodeId?: string): Fill[];
+/** Coerce loose JSON into a Fill array. Returns [] for non-arrays.
+ * A structurally-valid fill entry whose `kind` is not renderable by
+ * this runtime (e.g. `angular-gradient` / `diamond-gradient`, promoted
+ * to core by the LSML 1.2 RFC) is dropped WITH a diagnostic — never
+ * silently (ADR 001 §3.4, issue #34). */
+export declare function parseFills(value: unknown, field?: string, nodeId?: string): Fill[];
 //# sourceMappingURL=fill.d.ts.map

package/dist/render/fill.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fill.d.ts","sourceRoot":"","sources":["../../src/render/fill.tsx"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAEzD,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,IAAI,GACZ;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAQN,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,6DAA6D;IAC7D,GAAG,EAAE,MAAM,CAAC;CACb;AAED;iEACiE;AACjE,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,gBAAgB,CAuDvD;AAED;;qEAEqE;AACrE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,aAAa,CAM7D;AAoCD,sEAAsE;AACtE,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,EAAE,CAGjD"}
+{"version":3,"file":"fill.d.ts","sourceRoot":"","sources":["../../src/render/fill.tsx"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAIzD,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,IAAI,GACZ;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAClD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACE,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAQN,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,6DAA6D;IAC7D,GAAG,EAAE,MAAM,CAAC;CACb;AAED;iEACiE;AACjE,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,gBAAgB,CAuDvD;AAED;;qEAEqE;AACrE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,CAM9E;AAsDD;;;;;;sEAMsE;AACtE,wBAAgB,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,CA2BnF;AAED;;;;yCAIyC;AACzC,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,CAclF"}