@lumencast/runtime 0.4.0 → 0.6.0

package/dist/render/primitives/shape.d.ts

@@ -1,12 +1,18 @@
 import type { PrimitiveProps } from "./index";
-/** Rectangle / circle / line. Renders as SVG so stroke + fill behave
- *  predictably across hosts. Opacity animatable.
+/** Rectangle / circle / line / path. Renders as SVG so stroke + fill
+ *  behave predictably across hosts. Opacity animatable.
  *
  *  LSML 1.1 §4.6 + §4.12 add `fills[]` / `strokes[]` arrays as the
  *  preferred way to declare multi-layer fills with linear/radial
  *  gradients. The legacy single `fill` / `stroke` props remain
  *  accepted for 1.0 bundles ; when both are present the array form
  *  wins (the spec forbids mixing, but we tolerate to ease migration).
+ *
+ *  Security (ADR 001 §6 RC#10 + RC#11, issue #30) : every colour that
+ *  reaches an SVG `fill`/`stroke`/`stop-color` attribute goes through
+ *  the strict `parseCssColor` gate, and every path `d` goes through
+ *  `validatePathData` — at EVERY render, because props are wire-
+ *  drivable live via LSDP deltas (`resolveProps`, tree.tsx).
  */
-export declare function Shape({ resolved, transitionFor, animateInitial }: PrimitiveProps): import("react/jsx-runtime").JSX.Element;
+export declare function Shape({ resolved, nodeId, transitionFor, animateInitial }: PrimitiveProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=shape.d.ts.map

package/dist/render/primitives/shape.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shape.d.ts","sourceRoot":"","sources":["../../../src/render/primitives/shape.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAS9C;;;;;;;;GAQG;AACH,wBAAgB,KAAK,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,cAAc,2CAyGhF"}
+{"version":3,"file":"shape.d.ts","sourceRoot":"","sources":["../../../src/render/primitives/shape.tsx"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAW9C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,cAAc,2CAsJxF"}

package/dist/render/primitives/shape.js

@@ -1,32 +1,51 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { motion } from "framer-motion";
 import { toFramer, mountPlay, resolveTransition } from "../../animate/transitions";
-import { parseFills, renderFill } from "../fill";
-/** Rectangle / circle / line. Renders as SVG so stroke + fill behave
- *  predictably across hosts. Opacity animatable.
+import { parseFills, renderFill, sanitizeFills } from "../fill";
+import { parseCssColor, warnRejectedColor } from "../css-color";
+import { parseShapePaths } from "../svg-path";
+/** Rectangle / circle / line / path. Renders as SVG so stroke + fill
+ *  behave predictably across hosts. Opacity animatable.
  *
  *  LSML 1.1 §4.6 + §4.12 add `fills[]` / `strokes[]` arrays as the
  *  preferred way to declare multi-layer fills with linear/radial
  *  gradients. The legacy single `fill` / `stroke` props remain
  *  accepted for 1.0 bundles ; when both are present the array form
  *  wins (the spec forbids mixing, but we tolerate to ease migration).
+ *
+ *  Security (ADR 001 §6 RC#10 + RC#11, issue #30) : every colour that
+ *  reaches an SVG `fill`/`stroke`/`stop-color` attribute goes through
+ *  the strict `parseCssColor` gate, and every path `d` goes through
+ *  `validatePathData` — at EVERY render, because props are wire-
+ *  drivable live via LSDP deltas (`resolveProps`, tree.tsx).
  */
-export function Shape({ resolved, transitionFor, animateInitial }) {
-    const kind = resolved.kind ?? "rect";
-    const legacyFill = resolved.fill ?? "transparent";
-    const legacyStroke = resolved.stroke ?? "transparent";
+export function Shape({ resolved, nodeId, transitionFor, animateInitial }) {
+    // Canonical prop name is `geometry` (LSML §4.6 — what the compiler
+    // emits) ; `kind` is kept as a fallback for hand-rolled Solar-lineage
+    // RenderNodes that predate the compiler.
+    const kind = resolved.geometry ?? resolved.kind ?? "rect";
+    const legacyFill = safeColor(resolved.fill, "shape.fill", nodeId) ?? "transparent";
+    const legacyStroke = safeColor(resolved.stroke, "shape.stroke", nodeId) ?? "transparent";
     const legacyStrokeWidth = numberOr(resolved.stroke_width, 0);
     const width = numberOr(resolved.width, 100);
     const height = numberOr(resolved.height, 100);
     const radius = numberOr(resolved.radius, 0);
     const opacity = numberOr(resolved.opacity, 1);
+    // LSML §4.6 `ariaLabel` was silently unrendered until issue #34's
+    // allowlist audit surfaced it — now forwarded as the SVG label.
+    const ariaLabel = typeof resolved.ariaLabel === "string" ? resolved.ariaLabel : undefined;
     const tx = resolveTransition(transitionFor, ["opacity"], animateInitial);
     const transition = toFramer(tx);
-    const play = mountPlay({ opacity }, animateInitial);
+    const play = mountPlay({ opacity }, animateInitial, nodeId);
     // LSML 1.1 §4.6 — `fills[]` is the preferred multi-fill form. Fall
-    // back to the singular `fill` for 1.0 bundles.
-    const fills = parseFills(resolved.fills);
+    // back to the singular `fill` for 1.0 bundles. Colours are strict-
+    // validated (a rejected colour drops its layer, with diagnostic).
+    const fills = sanitizeFills(parseFills(resolved.fills, "shape.fills", nodeId), "shape.fills", nodeId);
     const strokes = parseStrokes(resolved.strokes);
+    // LSML 1.1 §4.6 — `geometry:"path"` : validated subpaths, one
+    // `<path>` element per entry (ADR 001 §3.2.3). Re-validated at every
+    // render — see module header of svg-path.ts (RC#10).
+    const subpaths = kind === "path" ? parseShapePaths(resolved, nodeId) : [];
     // Each fill compiles to a (defs, ref) pair. We render the shape
     // outline once per fill, layered top-to-bottom (first entry → on
     // top, per §4.12). The defs are aggregated for a single <defs>.
@@ -37,14 +56,27 @@ export function Shape({ resolved, transitionFor, animateInitial }) {
     // strokes are out of scope for §4.6 1.1). Each stroke is rendered
     // as an additional pass over the same shape outline.
     const strokeLayers = strokes.length > 0
-        ? strokes.map((s) => ({ color: s.color ?? "transparent", width: s.width ?? 0 }))
+        ? strokes.map((s) => ({
+            color: safeColor(s.color, "shape.strokes.color", nodeId) ?? "transparent",
+            width: s.width ?? 0,
+        }))
         : [{ color: legacyStroke, width: legacyStrokeWidth }];
     // Stack order : fillRefs are emitted top-to-bottom per §4.12. SVG
     // paints later siblings on top, so we reverse here so the first
     // entry in fills[] ends up rendered last (visually on top).
     const stackedFills = [...fillRefs].reverse();
     const stackedStrokes = [...strokeLayers].reverse();
+    // For paths, a zero-width / transparent stroke pass would only emit
+    // invisible duplicate <path> elements — skip it.
+    const effectiveStrokes = kind === "path"
+        ? stackedStrokes.filter((s) => s.width > 0 && s.color !== "transparent")
+        : stackedStrokes;
     const renderShape = (fill, stroke, keyPrefix) => {
+        if (kind === "path") {
+            // §4.6 — fills and strokes apply to the union of all subpaths ;
+            // each subpath keeps its own winding rule (fill-rule).
+            return (_jsx("g", { children: subpaths.map((p, i) => (_jsx("path", { d: p.d, fillRule: p.fillRule, fill: fill, stroke: stroke.color, strokeWidth: stroke.width }, i))) }, keyPrefix));
+        }
         if (kind === "circle") {
             return (_jsx("circle", { cx: width / 2, cy: height / 2, r: Math.min(width, height) / 2 - stroke.width / 2, fill: fill, stroke: stroke.color, strokeWidth: stroke.width }, keyPrefix));
         }
@@ -54,7 +86,19 @@ export function Shape({ resolved, transitionFor, animateInitial }) {
         // rect default
         return (_jsx("rect", { x: stroke.width / 2, y: stroke.width / 2, width: Math.max(0, width - stroke.width), height: Math.max(0, height - stroke.width), rx: radius, ry: radius, fill: fill, stroke: stroke.color, strokeWidth: stroke.width }, keyPrefix));
     };
-    return (_jsxs(motion.svg, { width: width, height: height, viewBox: `0 0 ${width} ${height}`, initial: play.initial, animate: play.animate, transition: transition, style: { willChange: "opacity, transform" }, children: [allDefs.length > 0 && _jsx("defs", { children: allDefs }), stackedFills.map((ref, i) => renderShape(ref, { color: "transparent", width: 0 }, `fill-${i}`)), stackedStrokes.map((s, i) => renderShape("none", s, `stroke-${i}`))] }));
+    return (_jsxs(motion.svg, { width: width, height: height, viewBox: `0 0 ${width} ${height}`, ...(ariaLabel !== undefined ? { "aria-label": ariaLabel, role: "img" } : {}), initial: play.initial, animate: play.animate, transition: transition, style: { willChange: "opacity, transform" }, children: [allDefs.length > 0 && _jsx("defs", { children: allDefs }), stackedFills.map((ref, i) => renderShape(ref, { color: "transparent", width: 0 }, `fill-${i}`)), effectiveStrokes.map((s, i) => renderShape("none", s, `stroke-${i}`))] }));
+}
+/** Strict-validate a colour prop (RC#11 — SVG attributes are injection
+ * sites too once values are wire-drivable). Non-strings resolve to
+ * null silently (absent prop) ; a string that fails the strict grammar
+ * is rejected with a diagnostic (value withheld per R9). */
+function safeColor(value, field, nodeId) {
+    if (typeof value !== "string")
+        return null;
+    const color = parseCssColor(value);
+    if (color === null)
+        warnRejectedColor(field, nodeId);
+    return color;
 }
 function parseStrokes(value) {
     if (!Array.isArray(value))

package/dist/render/primitives/shape.js.map

@@ -1 +1 @@
-{"version":3,"file":"shape.js","sourceRoot":"","sources":["../../../src/render/primitives/shape.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAGvC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAOjD;;;;;;;;GAQG;AACH,MAAM,UAAU,KAAK,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAkB;IAC/E,MAAM,IAAI,GAAI,QAAQ,CAAC,IAA2B,IAAI,MAAM,CAAC;IAC7D,MAAM,UAAU,GAAI,QAAQ,CAAC,IAA2B,IAAI,aAAa,CAAC;IAC1E,MAAM,YAAY,GAAI,QAAQ,CAAC,MAA6B,IAAI,aAAa,CAAC;IAC9E,MAAM,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAE9C,MAAM,EAAE,GAAG,iBAAiB,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAEpD,mEAAmE;IACnE,+CAA+C;IAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE/C,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAEvF,oEAAoE;IACpE,kEAAkE;IAClE,qDAAqD;IACrD,MAAM,YAAY,GAChB,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAE1D,kEAAkE;IAClE,gEAAgE;IAChE,4DAA4D;IAC5D,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;IAEnD,MAAM,WAAW,GAAG,CAClB,IAAY,EACZ,MAAwC,EACxC,SAAiB,EACH,EAAE;QAChB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,CACL,iBAEE,EAAE,EAAE,KAAK,GAAG,CAAC,EACb,EAAE,EAAE,MAAM,GAAG,CAAC,EACd,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,EACjD,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,CAAC,KAAK,EACpB,WAAW,EAAE,MAAM,CAAC,KAAK,IANpB,SAAS,CAOd,CACH,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,CACL,eAEE,EAAE,EAAC,GAAG,EACN,EAAE,EAAE,MAAM,GAAG,CAAC,EACd,EAAE,EAAE,KAAK,EACT,EAAE,EAAE,MAAM,GAAG,CAAC,EACd,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,EAC5B,WAAW,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,IANzB,SAAS,CAOd,CACH,CAAC;QACJ,CAAC;QACD,eAAe;QACf,OAAO,CACL,eAEE,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,EACnB,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,EACnB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EACxC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAC1C,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,CAAC,KAAK,EACpB,WAAW,EAAE,MAAM,CAAC,KAAK,IATpB,SAAS,CAUd,CACH,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,MAAM,CAAC,GAAG,IACT,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,KAAK,IAAI,MAAM,EAAE,EACjC,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAE1C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,yBAAO,OAAO,GAAQ,EAC5C,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAC3B,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAClE,EACA,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,IACzD,CACd,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,CAAC,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB;IAC5C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC"}
+{"version":3,"file":"shape.js","sourceRoot":"","sources":["../../../src/render/primitives/shape.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAGvC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,eAAe,EAAgB,MAAM,aAAa,CAAC;AAO5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAkB;IACvF,mEAAmE;IACnE,sEAAsE;IACtE,yCAAyC;IACzC,MAAM,IAAI,GACP,QAAQ,CAAC,QAA+B,IAAK,QAAQ,CAAC,IAA2B,IAAI,MAAM,CAAC;IAC/F,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,aAAa,CAAC;IACnF,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,aAAa,CAAC;IACzF,MAAM,iBAAiB,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9C,kEAAkE;IAClE,gEAAgE;IAChE,MAAM,SAAS,GAAG,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAE1F,MAAM,EAAE,GAAG,iBAAiB,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;IACzE,MAAM,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAE5D,mEAAmE;IACnE,mEAAmE;IACnE,kEAAkE;IAClE,MAAM,KAAK,GAAG,aAAa,CACzB,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,EACjD,aAAa,EACb,MAAM,CACP,CAAC;IACF,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE/C,8DAA8D;IAC9D,qEAAqE;IACrE,qDAAqD;IACrD,MAAM,QAAQ,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1E,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAEvF,oEAAoE;IACpE,kEAAkE;IAClE,qDAAqD;IACrD,MAAM,YAAY,GAChB,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClB,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,CAAC,IAAI,aAAa;YACzE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAE1D,kEAAkE;IAClE,gEAAgE;IAChE,4DAA4D;IAC5D,MAAM,YAAY,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;IACnD,oEAAoE;IACpE,iDAAiD;IACjD,MAAM,gBAAgB,GACpB,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa,CAAC;QACxE,CAAC,CAAC,cAAc,CAAC;IAErB,MAAM,WAAW,GAAG,CAClB,IAAY,EACZ,MAAwC,EACxC,SAAiB,EACH,EAAE;QAChB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,gEAAgE;YAChE,uDAAuD;YACvD,OAAO,CACL,sBACG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE,CAAC,CACvC,eAEE,CAAC,EAAE,CAAC,CAAC,CAAC,EACN,QAAQ,EAAE,CAAC,CAAC,QAAQ,EACpB,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,CAAC,KAAK,EACpB,WAAW,EAAE,MAAM,CAAC,KAAK,IALpB,CAAC,CAMN,CACH,CAAC,IAVI,SAAS,CAWb,CACL,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,CACL,iBAEE,EAAE,EAAE,KAAK,GAAG,CAAC,EACb,EAAE,EAAE,MAAM,GAAG,CAAC,EACd,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,EACjD,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,CAAC,KAAK,EACpB,WAAW,EAAE,MAAM,CAAC,KAAK,IANpB,SAAS,CAOd,CACH,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,CACL,eAEE,EAAE,EAAC,GAAG,EACN,EAAE,EAAE,MAAM,GAAG,CAAC,EACd,EAAE,EAAE,KAAK,EACT,EAAE,EAAE,MAAM,GAAG,CAAC,EACd,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,EAC5B,WAAW,EAAE,MAAM,CAAC,KAAK,IAAI,CAAC,IANzB,SAAS,CAOd,CACH,CAAC;QACJ,CAAC;QACD,eAAe;QACf,OAAO,CACL,eAEE,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,EACnB,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,EACnB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EACxC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAC1C,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,MAAM,CAAC,KAAK,EACpB,WAAW,EAAE,MAAM,CAAC,KAAK,IATpB,SAAS,CAUd,CACH,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,MAAM,CAAC,GAAG,IACT,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,OAAO,KAAK,IAAI,MAAM,EAAE,KAC7B,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC7E,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,aAE1C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,yBAAO,OAAO,GAAQ,EAC5C,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAC3B,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAClE,EACA,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,IAC3D,CACd,CAAC;AACJ,CAAC;AAED;;;4DAG4D;AAC5D,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa,EAAE,MAAe;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,IAAI;QAAE,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,CAAC,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB;IAC5C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC"}

package/dist/render/primitives/text.d.ts

@@ -1,7 +1,38 @@
 import type { PrimitiveProps } from "./index";
+/** Max `maxLines` accepted (Bastion suggested ≤ 1000 on PR #38). */
+export declare const MAX_MAX_LINES = 1000;
+/** Max unitless `lineHeight` multiplier (100× the font size is already
+ *  far beyond any broadcast layout). */
+export declare const MAX_LINE_HEIGHT = 100;
+/** Max |letterSpacing| in px, both directions (±1000 px covers any
+ *  legitimate broadcast typography). */
+export declare const MAX_LETTER_SPACING_PX = 1000;
+/** Validate an untrusted `fontFamily` value. Returns the string or
+ *  `null` on rejection (handled as "omit → inherit", with diagnostic). */
+export declare function parseFontFamily(value: unknown): string | null;
 /** Text leaf. Value renders as the displayed string ; style props
- *  cover size / weight / colour / alignment. Opacity is animated when
- *  a transition is declared on `opacity` or `value`. An `animate.from`
- *  makes it mount-play (initial → target) on mount. */
-export declare function Text({ resolved, transitionFor, animateInitial }: PrimitiveProps): import("react/jsx-runtime").JSX.Element;
+ *  cover the full LSML TextStyle (size / font / weight / colour /
+ *  alignment / lineHeight / letterSpacing / textTransform /
+ *  textDecoration / fontStyle) plus `maxLines` (§4.4 ellipsis
+ *  truncation). Opacity is animated when a transition is declared on
+ *  `opacity` or `value`. An `animate.from` makes it mount-play
+ *  (initial → target) on mount. */
+export declare function Text({ resolved, nodeId, transitionFor, animateInitial }: PrimitiveProps): import("react/jsx-runtime").JSX.Element;
+/**
+ * Resolve the LSML 1.1 TextStyle typography props (`lineHeight`,
+ * `letterSpacing`, `textTransform`, `textDecoration`, `fontStyle`) and
+ * `maxLines` (§4.4) into a validated React style fragment.
+ *
+ * Exported for boundary testing : happy-dom drops `-webkit-*`
+ * declarations from `CSSStyleDeclaration`, so the line-clamp pattern is
+ * asserted on the exact object handed to React's inline style (same
+ * approach as `backgroundsToCss` for `color-mix`).
+ *
+ * Defaults = omit the declaration (inherit / CSS initial). A
+ * non-conforming value → R9 diagnostic + omit ; the returned object
+ * only ever contains allowlisted constants or validated finite
+ * numbers — never the raw input. Numeric fields additionally enforce
+ * the defence-in-depth caps above (issue #34).
+ */
+export declare function resolveTypography(resolved: Record<string, unknown>, nodeId?: string): React.CSSProperties;
 //# sourceMappingURL=text.d.ts.map

package/dist/render/primitives/text.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../../src/render/primitives/text.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAG9C;;;uDAGuD;AACvD,wBAAgB,IAAI,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,cAAc,2CAgC/E"}
+{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../../src/render/primitives/text.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AA6B9C,oEAAoE;AACpE,eAAO,MAAM,aAAa,OAAO,CAAC;AAClC;wCACwC;AACxC,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC;wCACwC;AACxC,eAAO,MAAM,qBAAqB,OAAO,CAAC;AAiB1C;0EAC0E;AAC1E,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAK7D;AAED;;;;;;mCAMmC;AACnC,wBAAgB,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,cAAc,2CAsDvF;AAMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,CAAC,EAAE,MAAM,GACd,KAAK,CAAC,aAAa,CAsDrB"}

package/dist/render/primitives/text.js

@@ -1,20 +1,103 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 import { motion } from "framer-motion";
 import { toFramer, mountPlay, resolveTransition } from "../../animate/transitions";
+import { parseCssColor, warnRejectedColor } from "../css-color";
+import { emitDiagnostic } from "../diagnostics";
+// ── Typography grammars (LSML 1.1 TextStyle, schema.json) ───────────
+// Every typo prop is wire-drivable (static bundle prop OR live LSDP
+// delta via `resolveProps`, tree.tsx) and lands in inline CSS, so each
+// value is validated against the field's spec'd grammar before it may
+// reach the style object. Enum fields go through a closed allowlist
+// (the emitted string is always one of these constants — never the
+// input), numeric fields through finite-number checks. There is NO
+// string passthrough on any of these sites (ADR 001 RC#11 by
+// construction : no untrusted string ever reaches the style object).
+const TEXT_TRANSFORMS = new Set(["none", "uppercase", "lowercase", "capitalize"]);
+const TEXT_DECORATIONS = new Set(["none", "underline", "line-through"]);
+const FONT_STYLES = new Set(["normal", "italic", "oblique"]);
+// ── Defence-in-depth upper bounds (issue #34, Bastion follow-up on
+// PR #38) ─────────────────────────────────────────────────────────────
+// The numeric typo fields were type-validated but unbounded ; an absurd
+// value pushed by a hostile bundle or live delta could degrade layout /
+// rendering (e.g. a 10⁹-line clamp or a kilometric letter spacing).
+// Policy : a value beyond its cap is REJECTED (diagnostic + omit → CSS
+// initial), consistent with the existing typo grammar gates — NOT
+// clamped, unlike the R8 filter caps where the spec explicitly blesses
+// clamping. Rationale : there is no "nearest sensible rendering" for an
+// absurd typographic value, the author's intent is unknowable ; safe
+// default beats silently-altered output.
+/** Max `maxLines` accepted (Bastion suggested ≤ 1000 on PR #38). */
+export const MAX_MAX_LINES = 1000;
+/** Max unitless `lineHeight` multiplier (100× the font size is already
+ *  far beyond any broadcast layout). */
+export const MAX_LINE_HEIGHT = 100;
+/** Max |letterSpacing| in px, both directions (±1000 px covers any
+ *  legitimate broadcast typography). */
+export const MAX_LETTER_SPACING_PX = 1000;
+// ── fontFamily policy (issue #34, Bastion follow-up on PR #38) ───────
+// Decision : SHAPE validation, not a font allowlist. `fontFamily` is
+// assigned through the React style object (per-property assignment via
+// CSSStyleDeclaration), which cannot break out of the declaration — so
+// the residual risk is malformed CSS, not injection. A font allowlist
+// would couple the runtime to a host-specific font inventory (a spec /
+// RFC matter — flagged for Atlas in the PR), whereas shape validation
+// keeps any legitimate family name working. The grammar accepts
+// comma-separated family lists with optional quotes ; the injection
+// metacharacters (`;` `}` `{` `:` `\` `<` `>` `(` `)`) and `url(` are
+// rejected by construction (none of their characters are allowed).
+// Anchored, single character class with a bounded quantifier — linear
+// time (RC#12).
+const FONT_FAMILY_RE = /^[a-zA-Z0-9 ,.'"_-]{1,256}$/;
+/** Validate an untrusted `fontFamily` value. Returns the string or
+ *  `null` on rejection (handled as "omit → inherit", with diagnostic). */
+export function parseFontFamily(value) {
+    if (typeof value !== "string")
+        return null;
+    const v = value.trim();
+    if (v.length === 0)
+        return null;
+    return FONT_FAMILY_RE.test(v) ? v : null;
+}
 /** Text leaf. Value renders as the displayed string ; style props
- *  cover size / weight / colour / alignment. Opacity is animated when
- *  a transition is declared on `opacity` or `value`. An `animate.from`
- *  makes it mount-play (initial → target) on mount. */
-export function Text({ resolved, transitionFor, animateInitial }) {
+ *  cover the full LSML TextStyle (size / font / weight / colour /
+ *  alignment / lineHeight / letterSpacing / textTransform /
+ *  textDecoration / fontStyle) plus `maxLines` (§4.4 ellipsis
+ *  truncation). Opacity is animated when a transition is declared on
+ *  `opacity` or `value`. An `animate.from` makes it mount-play
+ *  (initial → target) on mount. */
+export function Text({ resolved, nodeId, transitionFor, animateInitial }) {
     const value = resolved.value === undefined ? "" : String(resolved.value);
     const size = resolved.size ?? "1rem";
-    const font = resolved.font;
     const weight = resolved.weight ?? 400;
-    const colour = resolved.colour ?? "currentColor";
+    // Issue #34 — `font` is untrusted and lands in inline CSS : shape-
+    // validate (see fontFamily policy above) ; rejected → inherit.
+    let font;
+    if (resolved.font !== undefined) {
+        const parsed = parseFontFamily(resolved.font);
+        if (parsed === null) {
+            emitDiagnostic(nodeId, "text.font", "rejected fontFamily : outside the family-list grammar");
+        }
+        else {
+            font = parsed;
+        }
+    }
+    // RC#11 : `colour` is untrusted (static prop OR live LSDP delta) and
+    // lands in inline CSS — strict-parse ; rejected → safe default.
+    let colour = "currentColor";
+    if (resolved.colour !== undefined) {
+        const parsed = parseCssColor(resolved.colour);
+        if (parsed === null) {
+            warnRejectedColor("text.colour", nodeId);
+        }
+        else {
+            colour = parsed;
+        }
+    }
     const align = resolved.align ?? "start";
     const opacity = numberOr(resolved.opacity, 1);
+    const typography = resolveTypography(resolved, nodeId);
     const tx = resolveTransition(transitionFor, ["opacity", "value"], animateInitial);
-    const play = mountPlay({ opacity }, animateInitial);
+    const play = mountPlay({ opacity }, animateInitial, nodeId);
     return (_jsx(motion.span, { style: {
             display: "inline-block",
             fontSize: size,
@@ -24,10 +107,99 @@ export function Text({ resolved, transitionFor, animateInitial }) {
             fontWeight: weight,
             color: colour,
             textAlign: align,
+            ...typography,
             willChange: "opacity, transform",
         }, initial: play.initial, animate: play.animate, transition: toFramer(tx), children: value }));
 }
 function numberOr(v, fallback) {
     return typeof v === "number" && Number.isFinite(v) ? v : fallback;
 }
+/**
+ * Resolve the LSML 1.1 TextStyle typography props (`lineHeight`,
+ * `letterSpacing`, `textTransform`, `textDecoration`, `fontStyle`) and
+ * `maxLines` (§4.4) into a validated React style fragment.
+ *
+ * Exported for boundary testing : happy-dom drops `-webkit-*`
+ * declarations from `CSSStyleDeclaration`, so the line-clamp pattern is
+ * asserted on the exact object handed to React's inline style (same
+ * approach as `backgroundsToCss` for `color-mix`).
+ *
+ * Defaults = omit the declaration (inherit / CSS initial). A
+ * non-conforming value → R9 diagnostic + omit ; the returned object
+ * only ever contains allowlisted constants or validated finite
+ * numbers — never the raw input. Numeric fields additionally enforce
+ * the defence-in-depth caps above (issue #34).
+ */
+export function resolveTypography(resolved, nodeId) {
+    // schema.json : lineHeight is a unitless multiplier ≥ 0 ;
+    // letterSpacing is a number (px) ; the three enums are closed sets.
+    const lineHeight = boundedNumber(resolved.lineHeight, 0, MAX_LINE_HEIGHT, "text.lineHeight", nodeId);
+    const letterSpacing = boundedNumber(resolved.letterSpacing, -MAX_LETTER_SPACING_PX, MAX_LETTER_SPACING_PX, "text.letterSpacing", nodeId);
+    const textTransform = enumValue(resolved.textTransform, TEXT_TRANSFORMS, "text.textTransform", nodeId);
+    const textDecoration = enumValue(resolved.textDecoration, TEXT_DECORATIONS, "text.textDecoration", nodeId);
+    const fontStyle = enumValue(resolved.fontStyle, FONT_STYLES, "text.fontStyle", nodeId);
+    // §4.4 maxLines — truncation with ellipsis after N lines, via the
+    // standard line-clamp pattern (display:-webkit-box overrides the
+    // base inline-block ; this fragment is spread after it so it wins).
+    const maxLines = positiveInteger(resolved.maxLines, MAX_MAX_LINES, "text.maxLines", nodeId);
+    return {
+        ...(lineHeight !== undefined ? { lineHeight } : {}),
+        // Built from a validated finite number — no string passthrough.
+        ...(letterSpacing !== undefined ? { letterSpacing: `${letterSpacing}px` } : {}),
+        ...(textTransform !== undefined
+            ? { textTransform: textTransform }
+            : {}),
+        ...(textDecoration !== undefined ? { textDecoration } : {}),
+        ...(fontStyle !== undefined ? { fontStyle } : {}),
+        ...(maxLines !== undefined
+            ? {
+                display: "-webkit-box",
+                WebkitBoxOrient: "vertical",
+                WebkitLineClamp: maxLines,
+                overflow: "hidden",
+                textOverflow: "ellipsis",
+            }
+            : {}),
+    };
+}
+/** Closed-allowlist enum gate. Returns the canonical constant from the
+ *  allowlist (NEVER the raw input) or `undefined` (field omitted →
+ *  CSS initial). Non-conforming value → R9 diagnostic, no passthrough. */
+function enumValue(v, allow, field, nodeId) {
+    if (v === undefined)
+        return undefined;
+    if (typeof v === "string" && allow.has(v))
+        return v;
+    warnRejectedTypo(field, nodeId);
+    return undefined;
+}
+/** Finite number within [min, max] or omit (R9 diagnostic on a
+ *  non-conforming or out-of-cap input — rejected, never clamped). */
+function boundedNumber(v, min, max, field, nodeId) {
+    if (v === undefined)
+        return undefined;
+    if (typeof v === "number" && Number.isFinite(v) && v >= min && v <= max)
+        return v;
+    warnRejectedTypo(field, nodeId);
+    return undefined;
+}
+/** Integer in [1, max] or omit (schema : maxLines is a line count ;
+ *  capped per the issue #34 defence-in-depth bounds). */
+function positiveInteger(v, max, field, nodeId) {
+    if (v === undefined)
+        return undefined;
+    if (typeof v === "number" && Number.isInteger(v) && v >= 1 && v <= max)
+        return v;
+    warnRejectedTypo(field, nodeId);
+    return undefined;
+}
+/**
+ * Diagnostic for a typo value outside its spec'd grammar or caps.
+ * Bastion R9 (ADR 001 §5.1) : the rejected VALUE is never logged nor
+ * forwarded — only `node.id` (RC#7), the field name and a static
+ * reason. Routed through the structured diagnostics channel.
+ */
+function warnRejectedTypo(field, nodeId) {
+    emitDiagnostic(nodeId, field, "rejected typography value : outside the field's spec'd grammar or caps");
+}
 //# sourceMappingURL=text.js.map

package/dist/render/primitives/text.js.map

@@ -1 +1 @@
-{"version":3,"file":"text.js","sourceRoot":"","sources":["../../../src/render/primitives/text.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnF;;;uDAGuD;AACvD,MAAM,UAAU,IAAI,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAkB;IAC9E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,IAAI,GAAI,QAAQ,CAAC,IAAoC,IAAI,MAAM,CAAC;IACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA0B,CAAC;IACjD,MAAM,MAAM,GAAI,QAAQ,CAAC,MAA6B,IAAI,GAAG,CAAC;IAC9D,MAAM,MAAM,GAAI,QAAQ,CAAC,MAA6B,IAAI,cAAc,CAAC;IACzE,MAAM,KAAK,GAAI,QAAQ,CAAC,KAA4B,IAAI,OAAO,CAAC;IAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAE9C,MAAM,EAAE,GAAG,iBAAiB,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAEpD,OAAO,CACL,KAAC,MAAM,CAAC,IAAI,IACV,KAAK,EAAE;YACL,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE,IAAI;YACd,qEAAqE;YACrE,8CAA8C;YAC9C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,UAAU,EAAE,MAAM;YAClB,KAAK,EAAE,MAAM;YACb,SAAS,EAAE,KAAyC;YACpD,UAAU,EAAE,oBAAoB;SACjC,EACD,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,YAEvB,KAAK,GACM,CACf,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB;IAC5C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC"}
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../../src/render/primitives/text.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,uEAAuE;AACvE,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AACpE,mEAAmE;AACnE,mEAAmE;AACnE,6DAA6D;AAC7D,qEAAqE;AACrE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAClF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AACxE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAE7D,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,oEAAoE;AACpE,uEAAuE;AACvE,kEAAkE;AAClE,uEAAuE;AACvE,wEAAwE;AACxE,qEAAqE;AACrE,yCAAyC;AACzC,oEAAoE;AACpE,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAClC;wCACwC;AACxC,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AACnC;wCACwC;AACxC,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAE1C,wEAAwE;AACxE,qEAAqE;AACrE,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,gEAAgE;AAChE,oEAAoE;AACpE,sEAAsE;AACtE,mEAAmE;AACnE,sEAAsE;AACtE,gBAAgB;AAChB,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAErD;0EAC0E;AAC1E,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;;mCAMmC;AACnC,MAAM,UAAU,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAkB;IACtF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,IAAI,GAAI,QAAQ,CAAC,IAAoC,IAAI,MAAM,CAAC;IACtE,MAAM,MAAM,GAAI,QAAQ,CAAC,MAA6B,IAAI,GAAG,CAAC;IAC9D,mEAAmE;IACnE,+DAA+D;IAC/D,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,uDAAuD,CAAC,CAAC;QAC/F,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,gEAAgE;IAChE,IAAI,MAAM,GAAG,cAAc,CAAC;IAC5B,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,iBAAiB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAI,QAAQ,CAAC,KAA4B,IAAI,OAAO,CAAC;IAChE,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEvD,MAAM,EAAE,GAAG,iBAAiB,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAE5D,OAAO,CACL,KAAC,MAAM,CAAC,IAAI,IACV,KAAK,EAAE;YACL,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE,IAAI;YACd,qEAAqE;YACrE,8CAA8C;YAC9C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,UAAU,EAAE,MAAM;YAClB,KAAK,EAAE,MAAM;YACb,SAAS,EAAE,KAAyC;YACpD,GAAG,UAAU;YACb,UAAU,EAAE,oBAAoB;SACjC,EACD,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,OAAO,EAAE,IAAI,CAAC,OAAO,EACrB,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,YAEvB,KAAK,GACM,CACf,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB;IAC5C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAiC,EACjC,MAAe;IAEf,0DAA0D;IAC1D,oEAAoE;IACpE,MAAM,UAAU,GAAG,aAAa,CAC9B,QAAQ,CAAC,UAAU,EACnB,CAAC,EACD,eAAe,EACf,iBAAiB,EACjB,MAAM,CACP,CAAC;IACF,MAAM,aAAa,GAAG,aAAa,CACjC,QAAQ,CAAC,aAAa,EACtB,CAAC,qBAAqB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,MAAM,CACP,CAAC;IACF,MAAM,aAAa,GAAG,SAAS,CAC7B,QAAQ,CAAC,aAAa,EACtB,eAAe,EACf,oBAAoB,EACpB,MAAM,CACP,CAAC;IACF,MAAM,cAAc,GAAG,SAAS,CAC9B,QAAQ,CAAC,cAAc,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,MAAM,CACP,CAAC;IACF,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACvF,kEAAkE;IAClE,iEAAiE;IACjE,oEAAoE;IACpE,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IAE5F,OAAO;QACL,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,gEAAgE;QAChE,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,aAAa,KAAK,SAAS;YAC7B,CAAC,CAAC,EAAE,aAAa,EAAE,aAAqD,EAAE;YAC1E,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,QAAQ,KAAK,SAAS;YACxB,CAAC,CAAC;gBACE,OAAO,EAAE,aAAa;gBACtB,eAAe,EAAE,UAAmB;gBACpC,eAAe,EAAE,QAAQ;gBACzB,QAAQ,EAAE,QAAQ;gBAClB,YAAY,EAAE,UAAU;aACzB;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;0EAE0E;AAC1E,SAAS,SAAS,CAChB,CAAU,EACV,KAA0B,EAC1B,KAAa,EACb,MAAe;IAEf,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACpD,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;qEACqE;AACrE,SAAS,aAAa,CACpB,CAAU,EACV,GAAW,EACX,GAAW,EACX,KAAa,EACb,MAAe;IAEf,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IAClF,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;yDACyD;AACzD,SAAS,eAAe,CACtB,CAAU,EACV,GAAW,EACX,KAAa,EACb,MAAe;IAEf,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,CAAC;IACjF,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAAe;IACtD,cAAc,CACZ,MAAM,EACN,KAAK,EACL,wEAAwE,CACzE,CAAC;AACJ,CAAC"}

package/dist/render/prop-allowlist.d.ts

@@ -0,0 +1,10 @@
+import type { RenderKind, RenderNode } from "./bundle";
+/** Resolved-prop keys consumed per primitive (component + wrapper). */
+export declare const PRIMITIVE_PROP_ALLOWLIST: Readonly<Record<RenderKind, ReadonlySet<string>>>;
+/**
+ * Audit a node's static props + binding keys against its primitive's
+ * allowlist. Every unknown key emits ONE structured diagnostic naming
+ * `node.id` + the prop (never the value, R9). Idempotent per node.
+ */
+export declare function checkNodeProps(node: RenderNode): void;
+//# sourceMappingURL=prop-allowlist.d.ts.map

package/dist/render/prop-allowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prop-allowlist.d.ts","sourceRoot":"","sources":["../../src/render/prop-allowlist.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAWvD,uEAAuE;AACvE,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAiDtF,CAAC;AAgBF;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAgBrD"}

package/dist/render/prop-allowlist.js

@@ -0,0 +1,112 @@
+// Per-primitive prop allowlists (ADR 001 §3.4 D4, issue #34).
+//
+// Each primitive declares the exact set of resolved-prop keys it
+// consumes at render time. Any prop reaching the renderer outside the
+// allowlist — whether from a compiled bundle, a hand-rolled RenderNode
+// or a binding key — produces a structured diagnostic (never a silent
+// drop). Values are NEVER inspected nor reported (R9) : the check is
+// purely key-based.
+//
+// Key-based is sufficient for live deltas too : an LSDP delta can only
+// change the VALUE behind an already-declared binding key
+// (`resolveProps`, tree.tsx) — it can never introduce a new prop key.
+// The per-node key set is therefore static, and the check runs once per
+// RenderNode object (WeakSet dedup) instead of once per render.
+//
+// These sets mirror what each primitive's component ACTUALLY reads
+// today. Spec'd fields the renderer does not consume yet (e.g. `text`
+// `format`, `stack` `padding`) are deliberately NOT listed : per the
+// anti-silent-drop policy they must warn until they are implemented.
+import { emitDiagnostic } from "./diagnostics";
+/** Universal props consumed by the Tree renderer itself
+ *  (`UniversalWrapper`, LSML 1.1 §5.4) on every primitive. */
+const UNIVERSAL_PROPS = ["visible", "opacity", "universal_opacity", "rotation", "sizing"];
+function allow(keys) {
+    return new Set([...UNIVERSAL_PROPS, ...keys]);
+}
+/** Resolved-prop keys consumed per primitive (component + wrapper). */
+export const PRIMITIVE_PROP_ALLOWLIST = {
+    stack: allow(["direction", "gap", "wrap", "crossGap", "align", "justify"]),
+    grid: allow(["cols", "rows", "gap"]),
+    frame: allow([
+        "x",
+        "y",
+        "width",
+        "height",
+        "scale",
+        "rotate",
+        "background",
+        "backgrounds",
+        "clipsContent",
+    ]),
+    text: allow([
+        "value",
+        "size",
+        "font",
+        "weight",
+        "colour",
+        "align",
+        "lineHeight",
+        "letterSpacing",
+        "textTransform",
+        "textDecoration",
+        "fontStyle",
+        "maxLines",
+    ]),
+    image: allow(["src", "alt", "fit", "position", "width", "height"]),
+    shape: allow([
+        "geometry",
+        "kind",
+        "width",
+        "height",
+        "radius",
+        "fill",
+        "fills",
+        "stroke",
+        "stroke_width",
+        "strokes",
+        "pathData",
+        "paths",
+        "ariaLabel",
+    ]),
+    media: allow(["src", "loop", "mute", "autoplay", "fit"]),
+    instance: allow(["scene_id", "scene_version", "size", "position"]),
+    // `repeat` is dispatched specially by the tree ; its only consumed
+    // binding is `items`.
+    repeat: new Set(["items"]),
+};
+function isAllowed(kind, key) {
+    const allowed = PRIMITIVE_PROP_ALLOWLIST[kind];
+    if (allowed === undefined)
+        return true; // unknown kind warns separately (tree.tsx)
+    if (allowed.has(key))
+        return true;
+    // `instance` exposes bound sub-scene parameters under `params.*`
+    // (LSML §4.9) — the whole namespace is part of its contract.
+    if (kind === "instance" && (key === "params" || key.startsWith("params.")))
+        return true;
+    return false;
+}
+// One check per RenderNode object — bundles are immutable once fetched,
+// and a node's key set cannot change live (see module header).
+const checkedNodes = new WeakSet();
+/**
+ * Audit a node's static props + binding keys against its primitive's
+ * allowlist. Every unknown key emits ONE structured diagnostic naming
+ * `node.id` + the prop (never the value, R9). Idempotent per node.
+ */
+export function checkNodeProps(node) {
+    if (checkedNodes.has(node))
+        return;
+    checkedNodes.add(node);
+    const keys = new Set([
+        ...Object.keys(node.props ?? {}),
+        ...Object.keys(node.bindings ?? {}),
+    ]);
+    for (const key of keys) {
+        if (!isAllowed(node.kind, key)) {
+            emitDiagnostic(node.id, `${node.kind}.${key}`, "is not consumed by this primitive's renderer ; the prop is ignored (anti-silent-drop, ADR 001 §3.4)");
+        }
+    }
+}
+//# sourceMappingURL=prop-allowlist.js.map

package/dist/render/prop-allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prop-allowlist.js","sourceRoot":"","sources":["../../src/render/prop-allowlist.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,iEAAiE;AACjE,sEAAsE;AACtE,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AACrE,oBAAoB;AACpB,EAAE;AACF,uEAAuE;AACvE,0DAA0D;AAC1D,sEAAsE;AACtE,wEAAwE;AACxE,gEAAgE;AAChE,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AAGrE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C;8DAC8D;AAC9D,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AAEnG,SAAS,KAAK,CAAC,IAAuB;IACpC,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAsD;IACzF,KAAK,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1E,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,KAAK,EAAE,KAAK,CAAC;QACX,GAAG;QACH,GAAG;QACH,OAAO;QACP,QAAQ;QACR,OAAO;QACP,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,cAAc;KACf,CAAC;IACF,IAAI,EAAE,KAAK,CAAC;QACV,OAAO;QACP,MAAM;QACN,MAAM;QACN,QAAQ;QACR,QAAQ;QACR,OAAO;QACP,YAAY;QACZ,eAAe;QACf,eAAe;QACf,gBAAgB;QAChB,WAAW;QACX,UAAU;KACX,CAAC;IACF,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClE,KAAK,EAAE,KAAK,CAAC;QACX,UAAU;QACV,MAAM;QACN,OAAO;QACP,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,OAAO;QACP,QAAQ;QACR,cAAc;QACd,SAAS;QACT,UAAU;QACV,OAAO;QACP,WAAW;KACZ,CAAC;IACF,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACxD,QAAQ,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAClE,mEAAmE;IACnE,sBAAsB;IACtB,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;CAC3B,CAAC;AAEF,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;IACnF,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,iEAAiE;IACjE,6DAA6D;IAC7D,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,+DAA+D;AAC/D,MAAM,YAAY,GAAG,IAAI,OAAO,EAAc,CAAC;AAE/C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB;IAC7C,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IACnC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS;QAC3B,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAChC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;KACpC,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/B,cAAc,CACZ,IAAI,CAAC,EAAE,EACP,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,EACrB,qGAAqG,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/render/svg-path.d.ts

@@ -0,0 +1,35 @@
+/** RC#10 — hard cap : 8 KiB per subpath `d` string. */
+export declare const MAX_SUBPATH_LEN = 8192;
+/**
+ * RC#10 — hard cap on commands per subpath. Aligned on the compiler's
+ * MAX_PATH_COMMANDS = 4000 (PR #39, deliberate authoring cap) so a live
+ * LSDP delta can never carry more commands than the authoring pipeline
+ * accepts. A shared constant module is tracked in issue #41 — do not
+ * diverge these two values in the meantime.
+ */
+export declare const MAX_SUBPATH_COMMANDS = 4000;
+/** RC#10 — hard cap on subpaths per shape. */
+export declare const MAX_SUBPATHS = 64;
+/**
+ * Validate an untrusted SVG path `d` string against the strict grammar
+ * above. Returns the validated (trimmed) string or `null` on rejection.
+ * A `null` MUST be handled as "omit the subpath + emit a diagnostic" —
+ * never interpolate the raw input into the DOM.
+ */
+export declare function validatePathData(value: unknown): string | null;
+export interface SubPath {
+    d: string;
+    fillRule: "nonzero" | "evenodd";
+}
+/**
+ * Resolve a shape's `pathData` / `paths[]` props (LSML 1.1 §4.6) into
+ * validated subpaths ready for rendering — one `<path>` element per
+ * entry (ADR 001 §3.2.3). `pathData` is equivalent to
+ * `paths: [{ data: pathData, windingRule: "NONZERO" }]`.
+ *
+ * Re-runs at every render (RC#10 — props are live via LSDP deltas).
+ * Every rejected or unrendered field emits a diagnostic (ADR 001 §3.4,
+ * anti-silent-drop) that NEVER contains the value (R9).
+ */
+export declare function parseShapePaths(resolved: Record<string, unknown>, nodeId?: string): SubPath[];
+//# sourceMappingURL=svg-path.d.ts.map

package/dist/render/svg-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"svg-path.d.ts","sourceRoot":"","sources":["../../src/render/svg-path.ts"],"names":[],"mappings":"AAgCA,uDAAuD;AACvD,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,OAAO,CAAC;AACzC,8CAA8C;AAC9C,eAAO,MAAM,YAAY,KAAK,CAAC;AAa/B;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAyE9D;AAED,MAAM,WAAW,OAAO;IACtB,CAAC,EAAE,MAAM,CAAC;IACV,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC;CACjC;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,CA6C7F"}