@lyads/visual-editor 0.0.0-stage → 1.0.1

package/dist/security/content-inventory.d.ts

@@ -0,0 +1,78 @@
+import { CssDocumentCodec } from '../codecs/css';
+import type { DocumentKind, EditorDocumentData } from '../core/document';
+import { ActiveMarkupRules } from './markup-rules';
+import { SourceMarkup } from './source-markup';
+/** A resource the document points to. `origin` is absent for relative URLs and merge tags. */
+export interface ExternalReference {
+    readonly url: string;
+    readonly origin?: string;
+}
+/**
+ * What a document contains that a publisher may want to decide about. The package reports;
+ * the host applies its own rule. Counts include markup kept as source (conditional comments,
+ * `noscript`, `template`, inline SVG).
+ */
+export interface ContentInventory {
+    readonly kind: DocumentKind;
+    readonly scripts: {
+        /** Executable scripts written in the document. */
+        readonly inline: number;
+        /** Executable scripts loaded by `src`. */
+        readonly external: readonly ExternalReference[];
+        /** `<script>` data blocks such as JSON-LD, which browsers do not run. */
+        readonly data: number;
+    };
+    /** `iframe` and `frame` sources. */
+    readonly frames: readonly ExternalReference[];
+    /** `object`, `embed` and `applet` elements. */
+    readonly embeds: number;
+    /** `<link rel="stylesheet">` and `@import` targets. */
+    readonly stylesheets: readonly ExternalReference[];
+    /** Every other `<link>`: fonts preconnect, icons, preloads. */
+    readonly links: readonly (ExternalReference & {
+        readonly rel: string;
+    })[];
+    readonly forms: {
+        readonly count: number;
+        readonly actions: readonly ExternalReference[];
+    };
+    /** `on*` attributes. */
+    readonly inlineHandlers: number;
+    /** `javascript:`, `vbscript:` and `data:` document URLs in attributes. */
+    readonly scriptUrls: number;
+    readonly metaRefresh: number;
+    readonly baseUrls: readonly string[];
+    /** Encodings declared by `<meta>`, lower case, as written. */
+    readonly charsets: readonly string[];
+    readonly fontFaces: number;
+    /** `expression()`, `behavior`, `-moz-binding` and code URLs inside CSS. */
+    readonly activeCss: number;
+}
+export type InventoryTopic = 'script' | 'embed' | 'stylesheet' | 'form' | 'handler' | 'charset';
+export interface ContentSurvey {
+    readonly inventory: ContentInventory;
+    /** First document node of each topic, for a notice which can point at it. */
+    readonly anchors: Readonly<Partial<Record<InventoryTopic, string>>>;
+}
+/** Builds the typed inventory of a document. It never changes or refuses anything. */
+export declare class ContentInspector {
+    #private;
+    constructor(css: CssDocumentCodec, rules: ActiveMarkupRules, sources?: SourceMarkup);
+    inspect(input: EditorDocumentData): ContentInventory;
+    /** The caller hands in a snapshot which already passed `EditorDocument.from`. */
+    survey(document: EditorDocumentData): ContentSurvey;
+    /** A conditional comment hides markup which Outlook, or an old browser, does render. */
+    conditional(value: string): boolean;
+    private source;
+    private element;
+    /**
+     * Most inline styles are plain declarations. Only one which could hold what the survey
+     * counts (a URL, a legacy expression or binding, or an escape hiding either) is parsed.
+     */
+    private mayBeActive;
+    private stylesheet;
+    /** The encoding a `<meta>` declares, by either syntax; undefined when it declares none. */
+    declaredCharset(attrs: Readonly<Record<string, string>>): string | undefined;
+    private reference;
+    private text;
+}

package/dist/security/email-sanitizer.d.ts

@@ -0,0 +1,36 @@
+import type { DocumentNode } from '../core/document';
+import { ActiveMarkupRules } from './markup-rules';
+import type { ActiveMarkup } from './markup-rules';
+import { SourceMarkup } from './source-markup';
+import type { ActiveStyleRemover } from './source-markup';
+/** What was taken out of an e-mail, or rewritten in it. */
+export type EmailRemoval = ActiveMarkup | 'charset';
+export interface SanitizedEmail {
+    readonly nodes: readonly DocumentNode[];
+    /** One entry per occurrence; empty when the tree is returned untouched. */
+    readonly removed: readonly EmailRemoval[];
+}
+/**
+ * An e-mail never carries scripts, embedded documents, inline handlers, code URLs, CSS which
+ * would run code, a refresh or a `base`: no client runs them and several
+ * reject the whole message. They are removed,
+ * never refused. Elements leave with their content; an attribute leaves and its element stays;
+ * a declaration leaves and the rest of its style stays. Everything else, conditional comments
+ * and VML included, is kept as written.
+ */
+export declare class EmailSanitizer {
+    #private;
+    constructor(rules?: ActiveMarkupRules, styles?: ActiveStyleRemover, sources?: SourceMarkup);
+    /** The panel CSS of the document, under the same rule as its style elements. */
+    stylesheet(css: string): {
+        readonly css: string;
+        readonly removed: readonly EmailRemoval[];
+    };
+    sanitize(nodes: readonly DocumentNode[]): SanitizedEmail;
+    private nodes;
+    private node;
+    /** Undefined when the block could not be made clean and is dropped as a whole. */
+    private source;
+    /** The source reaches the editor as decoded text; whatever it declared, it is UTF-8 now. */
+    private charset;
+}

package/dist/security/identity.d.ts

@@ -0,0 +1,6 @@
+/** Cryptographic opaque identifiers, including nonces for the trusted preview bridge. */
+export declare class SecureIdentifier {
+    private readonly random;
+    constructor(random?: Pick<Crypto, 'getRandomValues'> | undefined);
+    next(): string;
+}

package/dist/security/markup-rules.d.ts

@@ -0,0 +1,31 @@
+import { UrlPolicy } from './url-policy';
+/** What an e-mail may not carry and a page is merely told it carries. */
+export type ActiveMarkup = 'script' | 'embed' | 'handler' | 'url' | 'style';
+/**
+ * One classification of markup which runs or loads code, shared by the inventory, the e-mail
+ * sanitizer and the scan of source kept as text. It decides nothing about publication.
+ */
+export declare class ActiveMarkupRules {
+    private readonly urls;
+    constructor(urls?: UrlPolicy);
+    element(tag: string): Extract<ActiveMarkup, 'script' | 'embed'> | undefined;
+    /**
+     * An element which is only active because of what its attributes say together: an HTML
+     * import, a refresh to a code address, an animation which writes a code address into a link.
+     */
+    elementWith(tag: string, attributes: Readonly<Record<string, string>>): Extract<ActiveMarkup, 'embed' | 'url'> | undefined;
+    /**
+     * What sends an e-mail somewhere else or changes where its addresses point: any refresh
+     * (with or without a target) and any `base`. Removed from e-mails and never written by the
+     * editor; a page keeps them, as its author wrote them.
+     */
+    navigation(tag: string, attributes: Readonly<Record<string, string>>): 'url' | undefined;
+    attribute(name: string, value: string): Extract<ActiveMarkup, 'handler' | 'url'> | undefined;
+    /**
+     * `on` followed by letters only, as every handler is and as any future one will be. The rule
+     * for what the editor itself writes, which never needs an attribute of that shape.
+     */
+    handlerLike(name: string): boolean;
+    /** URL attributes and what each loads, for the strict rule of what the editor writes. */
+    urlPurpose(name: string): 'link' | 'image' | undefined;
+}

package/dist/security/policy.d.ts

@@ -0,0 +1,61 @@
+import { CssDocumentCodec } from '../codecs/css';
+import { EditorDocument } from '../core/document';
+import type { Diagnostic, DocumentNode, EditorDocumentData } from '../core/document';
+import type { ContentInventory } from './content-inventory';
+import { UrlPolicy } from './url-policy';
+export declare class ContentPolicyError extends Error {
+    readonly diagnostics: readonly Diagnostic[];
+    constructor(diagnostics: readonly Diagnostic[]);
+}
+export interface SanitizedDocument {
+    readonly document: EditorDocumentData;
+    /** Grouped warnings saying what was removed or rewritten; empty when nothing was. */
+    readonly diagnostics: readonly Diagnostic[];
+}
+/**
+ * The rules of a document by kind. The editor never refuses the author's work for what it
+ * contains:
+ *
+ * - a page keeps everything, scripts included, and `validate` only reports it (`info`);
+ * - an e-mail has scripts, embeds, inline handlers and code URLs removed by `sanitize` at
+ *   every entry (source or JSON), with a grouped `warning`; if they are still present,
+ *   `validate` reports an error, because only a caller which skipped `sanitize` gets there.
+ *
+ * `assertSafe` therefore means "structurally sound, within limits and following the rules
+ * of its kind". It does not mean "free of script": nothing of a document may run in the
+ * editor because of the sandboxed frame and its nonce CSP, not because of this class.
+ * Publication is the host's decision, taken over `inspect`.
+ */
+export declare class ContentPolicy {
+    #private;
+    constructor(urls?: UrlPolicy, css?: CssDocumentCodec);
+    /** An `EditorDocument` was validated when it was built and is not parsed again. */
+    validate(input: EditorDocumentData | EditorDocument): readonly Diagnostic[];
+    assertSafe(document: EditorDocumentData | EditorDocument): void;
+    /**
+     * Applies the removals of the kind. A page is returned as it came. Throws
+     * `DocumentValidationError` when the input is not a document within the limits.
+     */
+    sanitize(input: EditorDocumentData | EditorDocument): SanitizedDocument;
+    /**
+     * What the editor itself may write through its commands (an attribute, a link, a text
+     * coming back from the editing frame), in either kind. It is stricter than what an author
+     * may import: no script or embed, no handler, and URLs only under the strict `UrlPolicy`.
+     */
+    writable(nodes: readonly DocumentNode[]): boolean;
+    /** The typed inventory a host uses to decide whether and how to publish the document. */
+    inspect(input: EditorDocumentData): ContentInventory;
+    private notices;
+    private snapshot;
+    /** Integrity of the tree itself: what no parser could have produced or written back. */
+    private structure;
+    /** A letter, then anything the tokenizer keeps in a tag name. */
+    private tagName;
+    /** Framework and merge syntaxes (`@click`, `:class`, `mc:edit`) are ordinary names. */
+    private attributeName;
+    private nameCharacters;
+    /** One entry per code: the first node it refers to and how many times it happened. */
+    private group;
+    private notice;
+    private error;
+}

package/dist/security/preview-message.d.ts

@@ -0,0 +1,317 @@
+import * as v from 'valibot';
+import type { SelectionPreview } from '../renderers/selection-preview';
+declare const boundsSchema: v.StrictObjectSchema<{
+    readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    readonly width: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    readonly height: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+}, undefined>;
+declare const viewportSchema: v.StrictObjectSchema<{
+    readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1000000, undefined>]>;
+    readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1000000, undefined>]>;
+}, undefined>;
+/** One block of text is far smaller than a document; refused before any costly validation. */
+export declare const TEXT_PROJECTION_BYTES = 262144;
+declare const textStateSchema: v.StrictObjectSchema<{
+    readonly marks: v.SchemaWithPipe<readonly [v.ArraySchema<v.PicklistSchema<readonly ["bold", "italic", "underline", "strike", "superscript", "subscript", "bulletList", "orderedList"], undefined>, undefined>, v.MaxLengthAction<("bold" | "italic" | "underline" | "strike" | "superscript" | "subscript" | "bulletList" | "orderedList")[], 8, undefined>]>;
+    readonly styles: v.StrictObjectSchema<{
+        readonly color: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+        readonly backgroundColor: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+        readonly fontFamily: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+        readonly fontSize: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+        readonly lineHeight: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+    }, undefined>;
+    readonly link: v.BooleanSchema<undefined>;
+    readonly href: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2048, undefined>]>;
+    readonly empty: v.BooleanSchema<undefined>;
+    readonly canUndo: v.BooleanSchema<undefined>;
+    readonly canRedo: v.BooleanSchema<undefined>;
+    readonly rect: v.StrictObjectSchema<{
+        readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly width: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly height: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    }, undefined>;
+}, undefined>;
+declare const canvasSchema: v.VariantSchema<"type", [v.StrictObjectSchema<{
+    readonly challenge: v.ExactOptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, undefined>]>, undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"ready", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly viewport: v.StrictObjectSchema<{
+        readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1000000, undefined>]>;
+        readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1000000, undefined>]>;
+    }, undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"viewport", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly viewport: v.StrictObjectSchema<{
+        readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1000000, undefined>]>;
+        readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1000000, undefined>]>;
+    }, undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"viewport-restored", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly bounds: v.StrictObjectSchema<{
+        readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly width: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly height: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    }, undefined>;
+    readonly viewport: v.StrictObjectSchema<{
+        readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1000000, undefined>]>;
+        readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1000000, undefined>]>;
+    }, undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"geometry", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"morph-failed", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly style: v.StrictObjectSchema<{
+        readonly size: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 160, undefined>]>;
+        readonly lineHeight: v.UnionSchema<[v.LiteralSchema<"normal", undefined>, v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 500, undefined>]>], undefined>;
+        readonly weight: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 100, undefined>, v.MaxValueAction<number, 900, undefined>]>;
+        readonly color: v.TupleSchema<[v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 255, undefined>]>, v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 255, undefined>]>, v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 255, undefined>]>, v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 1, undefined>]>], undefined>;
+        readonly family: v.PicklistSchema<["sans-serif", "serif", "monospace"], undefined>;
+        readonly font: v.ExactOptionalSchema<v.PicklistSchema<readonly ["Arial", "Georgia", "Verdana", "Tahoma", "Trebuchet MS", "Times New Roman", "Courier New", "system-ui", "sans-serif", "serif", "monospace"], undefined>, undefined>;
+        readonly align: v.PicklistSchema<["left", "right", "center", "justify"], undefined>;
+        readonly direction: v.PicklistSchema<["ltr", "rtl"], undefined>;
+    }, undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"appearance", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"text-unsupported", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"text-toolbar", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"text-begin", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly html: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 262144, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"text-draft", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly html: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 262144, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"text-commit", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"text-cancel", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly marks: v.SchemaWithPipe<readonly [v.ArraySchema<v.PicklistSchema<readonly ["bold", "italic", "underline", "strike", "superscript", "subscript", "bulletList", "orderedList"], undefined>, undefined>, v.MaxLengthAction<("bold" | "italic" | "underline" | "strike" | "superscript" | "subscript" | "bulletList" | "orderedList")[], 8, undefined>]>;
+    readonly styles: v.StrictObjectSchema<{
+        readonly color: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+        readonly backgroundColor: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+        readonly fontFamily: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+        readonly fontSize: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+        readonly lineHeight: v.StrictObjectSchema<{
+            readonly value: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+            readonly own: v.BooleanSchema<undefined>;
+            readonly mixed: v.BooleanSchema<undefined>;
+        }, undefined>;
+    }, undefined>;
+    readonly link: v.BooleanSchema<undefined>;
+    readonly href: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2048, undefined>]>;
+    readonly empty: v.BooleanSchema<undefined>;
+    readonly canUndo: v.BooleanSchema<undefined>;
+    readonly canRedo: v.BooleanSchema<undefined>;
+    readonly rect: v.StrictObjectSchema<{
+        readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly width: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly height: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    }, undefined>;
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"text-state", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly direction: v.PicklistSchema<["undo", "redo"], undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"history", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly changed: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"text-fidelity", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly sourceId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly targetId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly placement: v.PicklistSchema<["before", "after", "inside"], undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"move", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly action: v.PicklistSchema<readonly ["duplicate", "remove", "up", "down", "html", "image"], undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"action", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly targetId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly placement: v.PicklistSchema<["before", "after", "inside"], undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"insertion", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"insertion-end", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly bounds: v.StrictObjectSchema<{
+        readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, -100000, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly width: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+        readonly height: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    }, undefined>;
+    readonly keyboard: v.ExactOptionalSchema<v.LiteralSchema<true, undefined>, undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"insert-request", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly x: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    readonly y: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.FiniteAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, 100000, undefined>]>;
+    readonly keyboard: v.ExactOptionalSchema<v.LiteralSchema<true, undefined>, undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"context-menu", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"file-drag", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"image-drop", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly command: v.PicklistSchema<["save"], undefined>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"shortcut", undefined>;
+}, undefined>, v.StrictObjectSchema<{
+    readonly nodeId: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 200, undefined>]>;
+    readonly width: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 4000, undefined>]>;
+    readonly height: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, 4000, undefined>]>;
+    readonly sequence: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 1, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly nonce: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 100, undefined>]>;
+    readonly revision: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>]>;
+    readonly type: v.LiteralSchema<"image-resize", undefined>;
+}, undefined>], undefined>;
+export type CanvasBounds = v.InferOutput<typeof boundsSchema>;
+export type CanvasViewport = v.InferOutput<typeof viewportSchema>;
+export type CanvasEvent = v.InferOutput<typeof canvasSchema>;
+export type CanvasTextState = v.InferOutput<typeof textStateSchema>;
+type MessageClass = 'telemetry' | 'control' | 'intent' | 'mutation' | 'draft' | 'shortcut';
+/** What the host knows and the frame cannot be trusted to say. */
+export interface PreviewHostState {
+    /** The block selected in the host; a block is only changed from the piece while selected. */
+    readonly selectedNodeId?: string | undefined;
+    /** The block selected before it, for a second at most after the selection moved. */
+    readonly recentNodeId?: string | undefined;
+}
+/**
+ * Messages accepted per second, by class. Measurements repeat every frame and may be dropped;
+ * they never spend the allowance of handshakes or of what the person asked for. Mutations are
+ * intents too and keep their own lower ceiling.
+ */
+export declare const PREVIEW_MESSAGE_BUDGETS: Readonly<Record<MessageClass, number>>;
+/** Authenticates the bridge and accepts only bounded intents against the current capabilities. */
+export declare class PreviewMessagePolicy {
+    #private;
+    private readonly clock;
+    private readonly budget;
+    constructor(clock?: () => number);
+    private static unspent;
+    private withinBudget;
+    private classify;
+    selection(data: unknown, source: unknown, expectedSource: unknown, preview: SelectionPreview): string | undefined;
+    canvas(data: unknown, source: unknown, expectedSource: unknown, preview: SelectionPreview, host?: PreviewHostState): CanvasEvent | undefined;
+}
+export {};

package/dist/security/rich-text-projection.d.ts

@@ -0,0 +1,19 @@
+import { UrlPolicy } from './url-policy';
+export interface RichTextProjectionResult {
+    readonly html: string;
+    readonly adjusted: boolean;
+}
+/** An inert parse5 projection is the only markup accepted by the authenticated rich-text DOM. */
+export declare class RichTextProjection {
+    private readonly urls;
+    private readonly budget;
+    private readonly formats;
+    private readonly inline;
+    private readonly blocks;
+    private readonly discarded;
+    /** A text nests far less than a document; the parse ends as soon as it goes beyond that. */
+    private readonly parser;
+    private readonly styles;
+    constructor(urls?: UrlPolicy);
+    project(source: string, allowBlocks?: boolean): RichTextProjectionResult;
+}

package/dist/security/sha256.d.ts

@@ -0,0 +1,6 @@
+/**
+ * SHA-256 of the UTF-8 form of a text, in base64: the value of a CSP `'sha256-…'` source. The
+ * preview is built synchronously and Web Crypto only digests asynchronously, so the few lines of
+ * the algorithm live here. It authorizes a script by its exact text; it protects no secret.
+ */
+export declare function sha256Base64(text: string): string;