@markii/host 0.17.0-next.3 → 0.17.0-next.5

package/dist/host/terminal-packs.d.ts

@@ -6,7 +6,7 @@
  * discovers the authorized packs and reads each one's `terminal.js` text
  * through this module; the host then hands the text to the engine's own
  * `loadTerminalPackScript`. Everything here is the one home of the wording
- * for the failures in between (docs/integration.md's "clean is not silent":
+ * for the failures in between (docs/hosts.md's "clean is not silent":
  * a failure reaches the diagnostics surface and the note shows the pack's
  * components as a failed pack).
  *

package/dist/html-engine.js

@@ -1,9 +1,9 @@
 /**
- * The `@markii/html`-backed `HtmlExportEngine`. Kept out of the main entry
- * (it is the one module that carries the static HTML renderer); a host that
+ * The `@markii/host/html-engine` entry: the `@markii/html`-backed
+ * `HtmlExportEngine`. Kept out of the main and `/node` entries (it is the
+ * one module that needs the optional `@markii/html` peer); a host that
  * exports HTML builds it here and hands it to `createMarkiiHost`'s
- * `htmlEngine` option or to `buildNoteExport`. Reached through
- * `@markii/host/node`.
+ * `htmlEngine` option or to `buildNoteExport`.
  */
 import { escapeHtml, exportHtmlDocument, renderMarkToHtml } from '@markii/html';
 import { defaultHtmlRegistry } from '@markii/html/components';

package/dist/index.d.ts

@@ -1,95 +1,33 @@
 export type { ValuesFailure } from './values-failure.js';
-export { mergeArrivingValue } from './values-merge.js';
-export type { RunJob, RunResult, RunFailure, RunProgress, SpawnRunOptions, SpawnRunRequest, } from './run/run-host.js';
-export { isRunProgress } from './run/run-progress.js';
-export { spawnRun } from './run/run-host.js';
+export type { RunJob, RunResult, RunFailure, SpawnRunOptions, SpawnRunRequest, } from './run/run-host.js';
 export type { IsolateSpawner, RunIsolate, SpawnIsolateOptions, } from './run/isolate.js';
-export { createBrowserIsolate } from './run/browser-isolate.js';
-export type { BrowserIsolateOptions, WorkerLike, } from './run/browser-isolate.js';
-export { isNetBridgeRequest, serveNetRequest } from './run/net-bridge.js';
-export type { NetBridgeReply, NetBridgeRequest } from './run/net-bridge.js';
-export type { CacheSnapshot, RunOnceOptions, RunOnceResult, } from './run/run-flow.js';
-export { MAX_CACHE_SNAPSHOT_BYTES, MAX_VALUES_SNAPSHOT_BYTES, cacheStorageKeyFor, isCacheSnapshotShape, mergePersistedValues, readPersistedValues, runOnce, serializeCacheSnapshotIfSmallEnough, valuesStorageKeyFor, } from './run/run-flow.js';
-export type { GrantFlowOptions, GrantFlowRequirements, GrantFlowResult, GrantMemento, PromptHost, PromptManyHosts, PromptUnknownHosts, Thenable, } from './run/grant-flow.js';
-export { ALLOW_LABEL, DONT_ALLOW_LABEL, MAX_HOST_PROMPTS, UNKNOWN_HOSTS_PROMPT_MESSAGE, clearGrantForDocument, hostPromptMessage, isSafeHostForPrompt, manyHostsPromptMessage, resolveStoredGrant, runGrantFlow, } from './run/grant-flow.js';
-export type { BuildBundleSnapshotOptions, BundleSnapshotResult, EncodedBundleCache, } from './run/bundle-run.js';
-export { DEFAULT_MAX_BUNDLE_SNAPSHOT_BYTES, DEFAULT_MAX_BUNDLE_SNAPSHOT_FILE_BYTES, MAX_PERSISTED_BUNDLE_CACHE_BYTES, buildBundleSnapshot, bundleModulesFromSnapshot, cacheFilesFrom, decodeBundleCacheFromStorage, encodeBundleCacheForStorage, manifestBundleFsGrants, manifestNetHosts, netDeclarationDiagnostics, withPersistedCache, } from './run/bundle-run.js';
-export { BUNDLE_EXTENSION, DEFAULT_BUNDLE_DOCUMENT_PATH, LEGACY_BUNDLE_EXTENSION, isBundleName, resolveBundleDocumentPath, } from './run/bundle-document.js';
+export type { RunOnceOptions, RunOnceResult } from './run/run-flow.js';
+export type { GrantMemento, PromptHost, PromptManyHosts, PromptUnknownHosts, Thenable, } from './run/grant-flow.js';
+export type { BuildBundleSnapshotOptions, BundleSnapshotResult, } from './run/bundle-run.js';
+export { buildBundleSnapshot } from './run/bundle-run.js';
 export type { RunTrace } from './run/run-trace.js';
-export { isRunTrace, lastRunStorageKeyFor, readLastRunTrace, writeLastRunTrace, } from './run/run-trace.js';
-export type { RunRequirements } from './run/script-requirements.js';
-export { extractRunRequirements } from './run/script-requirements.js';
-export type { SnapshotStorage } from './run/snapshot-storage.js';
-export { createSnapshotStorage } from './run/snapshot-storage.js';
-export { staleValuesForRehydration } from './run/stale-values.js';
-export type { HtmlExportEngine, CascadeIndexEntry, ComposeNoteHtmlExportOptions, ExportBodyRenderer, ExportBodyResult, ExportExtension, ExportPackStylesheet, ExportRenderInfo, NoteExportBuildRequest, NoteExportDocument, NoteHtmlExportOptions, StaticExportReason, } from './export/note-export.js';
-export { EXPORT_HIDE_SCRIPT_BLOCKS_CLASS, EXPORT_PAGE_CSS, FALLBACK_EXPORT_BASE_NAME, MARK_EXTENSION, buildCascadeIndexHtml, buildNoteExport, buildNoteHtmlExport, composeNoteHtmlExport, noteHasScripts, exportBaseName, exportDocumentTitle, exportedFileName, exportedSiblingPath, packStylesheetsCss, } from './export/note-export.js';
+export type { HtmlExportEngine, ExportBodyRenderer, ExportBodyResult, ExportPackStylesheet, ExportRenderInfo, StaticExportReason, } from './export/note-export.js';
 export type { EmbeddedImageReport, ExportImageReader, ExportImageResult, ImageSkipReason, SkippedImage, } from './export/image-embed.js';
-export { EMBEDDABLE_IMAGE_EXTENSIONS, EMPTY_IMAGE_REPORT, MAX_EMBEDDED_IMAGE_BYTES, embedImagesInHtml, encodeBase64, isEmbeddableImageSrc, mimeTypeForImageSrc, toImageDataUri, } from './export/image-embed.js';
-export type { NoteLink, NoteLinkTargetResolver } from './export/note-links.js';
-export { extractNoteLinks, isLocalNoteTarget, maskCodeRegions, rewriteNoteLinks, } from './export/note-links.js';
-export type { CascadeLinkResolver, CascadeNote, CascadeNoteReader, CascadeTruncation, CascadeWalkOptions, CascadeWalkResult, } from './export/cascade.js';
-export { CASCADE_INDEX_FILE_NAME, DEFAULT_CASCADE_MAX_DEPTH, DEFAULT_CASCADE_MAX_NOTES, assignCascadeFileNames, rewriteCascadeLinks, walkNoteCascade, } from './export/cascade.js';
-export type { CascadeArchiveRequest, CascadeArchiveResult, CascadeExportOutcome, CascadeExportedNote, UnreadableCascadeNote, } from './host/cascade-export-behavior.js';
-export { buildCascadeArchive, cascadeDiagnosticLines, cascadeReasonOf, cascadeResultMessage, countedNoun, } from './host/cascade-export-behavior.js';
-export type { ExportArchiveEntry } from './export/export-zip.js';
-export { zipExportArchive } from './export/export-zip.js';
-export type { HostLookup, PinnedAddress, PinPolicy, PinResult, ResolvedAddress, } from './run/net-pinning.js';
-export { pinHostAddress, pinnedLookup } from './run/net-pinning.js';
-export type { AddressScope } from './run/ip-address.js';
-export { classifyIpAddress, describeScope, isRestrictedScope, } from './run/ip-address.js';
+export type { PinPolicy } from './run/net-pinning.js';
 export type { PackModulesMap } from './run/lua-resolver.js';
-export { createPackModuleResolver } from './run/lua-resolver.js';
 export type { DiscoveredPack, DiscoverPacksResult, EngineUnsupportedPack, PackDirectoryLister, SkippedPackFolder, } from './packs/discover.js';
-export { componentsWithoutEngineView, declaredPackComponents, discoverPacks, installedNamespaces, } from './packs/discover.js';
-export type { PackScriptsReader } from './packs/pack-scripts.js';
-export { loadPackModules } from './packs/pack-scripts.js';
-export { relativePackEntries, resolvePackPaths } from './packs/pack-paths.js';
-export type { PackDiagnosticsContext, PackDiagnosticsPack, PackDiagnosticsSkippedFolder, } from './packs/pack-diagnostics.js';
-export { formatPackDiagnosticLines, skippedPackCount, } from './packs/pack-diagnostics.js';
-export type { PackPathExists, PrebuiltPackResolution, } from './packs/prebuilt.js';
-export { PREBUILT_SCRIPT_FILENAME, PREBUILT_STYLESHEET_FILENAME, PREBUILT_TERMINAL_SCRIPT_FILENAME, emptyWebviewScript, prebuiltScriptPathFor, prebuiltStylesheetPathFor, prebuiltTerminalScriptPathFor, resolvePrebuiltPack, } from './packs/prebuilt.js';
+export { discoverPacks } from './packs/discover.js';
 export type { BuildRenderRegistryResult, DuplicateComposedName, PackRegistryEngine, QueuedPackRegistration, } from './packs/pack-render-registry.js';
 export { buildRenderRegistry } from './packs/pack-render-registry.js';
-export type { ComponentSkeleton, LineColumn } from '@markii/stdlib/editor';
-export { componentSkeleton, offsetToLineColumn } from '@markii/stdlib/editor';
-export { LAYOUT_WRAPPER_NAMES } from '@markii/stdlib/editor';
-export type { InsertableComponent } from '@markii/stdlib/editor';
-export type { PackComponentAttribute } from '@markii/pack';
 export { buildComponentCatalog } from './insert/component-catalog.js';
-export type { CompletionContext, CompletionContextKind, CompletionItem, CompletionItemKind, ComponentDocumentation, HoverInfo, } from '@markii/stdlib/editor';
-export { completionAt, componentDocumentation, formatComponentDocumentation, hoverAt, } from '@markii/stdlib/editor';
-export type { EnclosingContainerFence, FenceLineEdit, } from '@markii/stdlib/editor';
-export { closesOpenContainerFence, enclosingContainerFences, fenceExtensionEdits, insertedContainerColonCount, } from '@markii/stdlib/editor';
-export { createRenderDiagnosticCollector, createRenderDiagnosticReporter, renderDiagnosticLine, } from './diagnostics/render-diagnostics.js';
 export type { HostAdapter, HostDirEntry, HostEditor, HostExportCapabilities, HostExportFormat, HostIsolate, HostLabels, HostPackSource, HostPromptRequest, HostTextEdit, } from './host/adapter.js';
-export { BROWSER_ISOLATE_ENTRY } from './host/adapter.js';
-export { CLI_LABELS, OBSIDIAN_LABELS, VSCODE_LABELS, packsNotInstalledLabel, } from './host/labels.js';
-export { scheduledRefreshNotStartedLine, scriptsDisabledConfirmationText, scriptsDisabledDiagnosticLine, scriptsDisabledNotice, scriptsDisabledNoticeText, scriptsEnabledConfirmationText, } from './host/script-execution.js';
-export { MIN_REFRESH_INTERVAL_SECONDS, parseRefreshIntervalSeconds, refreshIntervalMsFromSeconds, refreshIntervalValidationMessage, } from './host/refresh-interval.js';
-export { promptsFromAdapter, runViaAdapter, spawnRunViaAdapter, RUN_TIMEOUT_MS as HOST_RUN_TIMEOUT_MS, } from './host/run-behavior.js';
 export type { RunViaAdapterRequest, RunViaAdapterResult, } from './host/run-behavior.js';
-export { formatRunFailureLines, runDiagnosticLines, } from './host/run-diagnostics.js';
-export type { ArchiveExtractFs } from './host/pack-archive.js';
-export { describeArchiveError, writeArchiveContents, } from './host/pack-archive.js';
-export type { InstallPackFromArchiveOptions, PackDirectoryExists, } from './host/pack-install.js';
-export { installConsentMessage, installPackDiagnosticLines, installPackFromArchive, installPackMessage, installReplaceConfirmMessage, } from './host/pack-install.js';
-export type { LoadPacksResult, PackDiscoveryIo } from './host/pack-load.js';
-export { discoverConfiguredPacks, loadPacksViaAdapter, packDiscoveryIoFromAdapter, } from './host/pack-load.js';
-export { prebuiltShadowLine } from './packs/pack-diagnostics.js';
-export type { ReadTerminalScriptsResult, TerminalPackScript, } from './host/terminal-packs.js';
-export { packHasTerminalViews, readTerminalPackScripts, terminalScriptMissingLine, terminalScriptNamespaceMismatchLine, terminalScriptRejectedLine, terminalScriptUnreadableLine, } from './host/terminal-packs.js';
+export { installPackMessage } from './host/pack-install.js';
+export type { PackDiscoveryIo } from './host/pack-load.js';
+export type { TerminalPackScript } from './host/terminal-packs.js';
 export type { RemovePackOutcome } from './host/pack-remove.js';
-export type { PackTrustEntry, PackTrustList } from './packs/pack-trust.js';
-export { DEFAULT_PACK_TRUST_LIST, MAX_TRUSTED_PACKS, PACK_TRUST_STORAGE_KEY, isPackTrusted, normalizePackTrustList, trustPack, untrustPack, } from './packs/pack-trust.js';
 export type { DisablePackOutcome, EnabledPack, EnablePackOutcome, InstalledPacksListing, } from './host/pack-trust-behavior.js';
-export { disablePackMessage, enablePackMessage, notEnabledPackDiagnosticLine, selectEnabledPacks, } from './host/pack-trust-behavior.js';
-export { removePackDiagnosticLine, removePackMessage, removePackViaAdapter, } from './host/pack-remove.js';
-export { mdPlainFromSource } from './host/export/md-plain.js';
-export type { ExportHtmlDocumentRequest, NoteFileExportOutcome, } from './host/export-behavior.js';
-export { buildExportDocument, exportDefaultFileName, exportDiagnosticLines, exportNoteFileViaAdapter, exportResultMessage, fileNameOf, formatByteSize, imageEmbedDiagnosticLines, renderEngineDiagnosticLine, } from './host/export-behavior.js';
-export type { CatalogCache, CompletionPlan, InsertComponentEdit, InsertComponentPlan, } from './host/editor-behavior.js';
-export { LAYOUT_ORIGIN_TAG, STANDARD_ORIGIN_TAG, completeAtViaEditor, completionOriginTag, completionPlanAt, createCatalogCache, hoverAtViaEditor, hoverDocumentationText, insertComponentPlan, isContainerCompletionItem, } from './host/editor-behavior.js';
+export { disablePackMessage, enablePackMessage, } from './host/pack-trust-behavior.js';
+export { removePackMessage } from './host/pack-remove.js';
+export { exportResultMessage } from './host/export-behavior.js';
+export { cascadeResultMessage } from './host/cascade-export-behavior.js';
+export type { CascadeLinkResolver, CascadeTruncation, } from './export/cascade.js';
+export type { CascadeExportedNote, UnreadableCascadeNote, } from './host/cascade-export-behavior.js';
 export { createMarkiiHost } from './host/create-host.js';
-export type { CompleteOutcome, EditorPositionRequest, ExportOutcome, ExportRequest, HoverOutcome, InsertComponentRequest, InstallPackOutcome, InstallPackRequest, LoadPacksOutcome, LoadTerminalPacksOutcome, MarkiiHost, MarkiiHostOptions, OpenOutcome, OpenRequest, RemovePackResult, DisablePackResult, EnablePackResult, InstalledPacksOutcome, RunOutcome, RunRequest, Unsupported, } from './host/create-host.js';
-export { joinPath, dirnamePath, isAbsolutePath } from './path-util.js';
+export type { CompleteOutcome, EditorPositionRequest, ExportLinkedSetOutcome, ExportLinkedSetRequest, ExportOutcome, ExportRequest, HoverOutcome, InsertComponentRequest, InstallPackOutcome, InstallPackRequest, LoadPacksOutcome, LoadTerminalPacksOutcome, MarkiiHost, MarkiiHostOptions, OpenOutcome, OpenRequest, RemovePackResult, DisablePackResult, EnablePackResult, InstalledPacksOutcome, RunOutcome, RunRequest, Unsupported, } from './host/create-host.js';
+export { netRefusal } from './run/net-refusal.js';

package/dist/index.js

@@ -1,69 +1,26 @@
-// @markii/host: the shared, host-neutral script-running layer for Markii
-// hosts (`apps/vscode`, and any future host such as an Obsidian plugin).
+// @markii/host: the main entry. It carries what a host author needs to
+// write a host against `createMarkiiHost`: the factory, the adapter and its
+// capability groups, the request and outcome types, the labels type, the
+// outcome wording helpers, bundle snapshots and pack discovery.
+//
 // Environment-neutral: nothing reachable from this entry imports `node:*`,
 // `esbuild-wasm`, `@markii/react` or `@markii/html` at runtime
-// (`apps/vscode/src/browser-entry.probe.test.ts` bundles it for a browser to
-// prove it). What needs Node lives in `./node.ts`, published as
-// `@markii/host/node`. See AGENTS.md's repo-layout entry for
-// `packages/markii-host` for the module-by-module breakdown.
+// (`src/neutral-entries.probe.test.ts` bundles it for a browser to prove it).
+// What needs Node lives in `./node.ts`; this repository's own apps reach the
+// lower-level helpers through `./internal.ts`, which carries no semver
+// promise. The editor seam is `@markii/stdlib/editor`, imported directly.
 //
 // This is the security-critical layer (tier gating, the grant model,
-// DNS/address pinning, the terminatable-isolate watchdog) — a second,
-// drifting copy of any of this is the one outcome to avoid, which is why
-// it lives here instead of inside `apps/vscode`.
-export { mergeArrivingValue } from './values-merge.js';
-export { isRunProgress } from './run/run-progress.js';
-export { spawnRun } from './run/run-host.js';
-export { createBrowserIsolate } from './run/browser-isolate.js';
-export { isNetBridgeRequest, serveNetRequest } from './run/net-bridge.js';
-export { MAX_CACHE_SNAPSHOT_BYTES, MAX_VALUES_SNAPSHOT_BYTES, cacheStorageKeyFor, isCacheSnapshotShape, mergePersistedValues, readPersistedValues, runOnce, serializeCacheSnapshotIfSmallEnough, valuesStorageKeyFor, } from './run/run-flow.js';
-export { ALLOW_LABEL, DONT_ALLOW_LABEL, MAX_HOST_PROMPTS, UNKNOWN_HOSTS_PROMPT_MESSAGE, clearGrantForDocument, hostPromptMessage, isSafeHostForPrompt, manyHostsPromptMessage, resolveStoredGrant, runGrantFlow, } from './run/grant-flow.js';
-export { DEFAULT_MAX_BUNDLE_SNAPSHOT_BYTES, DEFAULT_MAX_BUNDLE_SNAPSHOT_FILE_BYTES, MAX_PERSISTED_BUNDLE_CACHE_BYTES, buildBundleSnapshot, bundleModulesFromSnapshot, cacheFilesFrom, decodeBundleCacheFromStorage, encodeBundleCacheForStorage, manifestBundleFsGrants, manifestNetHosts, netDeclarationDiagnostics, withPersistedCache, } from './run/bundle-run.js';
-export { BUNDLE_EXTENSION, DEFAULT_BUNDLE_DOCUMENT_PATH, LEGACY_BUNDLE_EXTENSION, isBundleName, resolveBundleDocumentPath, } from './run/bundle-document.js';
-export { isRunTrace, lastRunStorageKeyFor, readLastRunTrace, writeLastRunTrace, } from './run/run-trace.js';
-export { extractRunRequirements } from './run/script-requirements.js';
-export { createSnapshotStorage } from './run/snapshot-storage.js';
-export { staleValuesForRehydration } from './run/stale-values.js';
-export { EXPORT_HIDE_SCRIPT_BLOCKS_CLASS, EXPORT_PAGE_CSS, FALLBACK_EXPORT_BASE_NAME, MARK_EXTENSION, buildCascadeIndexHtml, buildNoteExport, buildNoteHtmlExport, composeNoteHtmlExport, noteHasScripts, exportBaseName, exportDocumentTitle, exportedFileName, exportedSiblingPath, packStylesheetsCss, } from './export/note-export.js';
-export { EMBEDDABLE_IMAGE_EXTENSIONS, EMPTY_IMAGE_REPORT, MAX_EMBEDDED_IMAGE_BYTES, embedImagesInHtml, encodeBase64, isEmbeddableImageSrc, mimeTypeForImageSrc, toImageDataUri, } from './export/image-embed.js';
-export { extractNoteLinks, isLocalNoteTarget, maskCodeRegions, rewriteNoteLinks, } from './export/note-links.js';
-export { CASCADE_INDEX_FILE_NAME, DEFAULT_CASCADE_MAX_DEPTH, DEFAULT_CASCADE_MAX_NOTES, assignCascadeFileNames, rewriteCascadeLinks, walkNoteCascade, } from './export/cascade.js';
-export { buildCascadeArchive, cascadeDiagnosticLines, cascadeReasonOf, cascadeResultMessage, countedNoun, } from './host/cascade-export-behavior.js';
-export { zipExportArchive } from './export/export-zip.js';
-export { pinHostAddress, pinnedLookup } from './run/net-pinning.js';
-export { classifyIpAddress, describeScope, isRestrictedScope, } from './run/ip-address.js';
-export { createPackModuleResolver } from './run/lua-resolver.js';
-export { componentsWithoutEngineView, declaredPackComponents, discoverPacks, installedNamespaces, } from './packs/discover.js';
-export { loadPackModules } from './packs/pack-scripts.js';
-export { relativePackEntries, resolvePackPaths } from './packs/pack-paths.js';
-export { formatPackDiagnosticLines, skippedPackCount, } from './packs/pack-diagnostics.js';
-export { PREBUILT_SCRIPT_FILENAME, PREBUILT_STYLESHEET_FILENAME, PREBUILT_TERMINAL_SCRIPT_FILENAME, emptyWebviewScript, prebuiltScriptPathFor, prebuiltStylesheetPathFor, prebuiltTerminalScriptPathFor, resolvePrebuiltPack, } from './packs/prebuilt.js';
+// address pinning, the terminatable-isolate watchdog): one copy lives here
+// so no app grows a drifting second one.
+export { buildBundleSnapshot } from './run/bundle-run.js';
+export { discoverPacks } from './packs/discover.js';
 export { buildRenderRegistry } from './packs/pack-render-registry.js';
-export { componentSkeleton, offsetToLineColumn } from '@markii/stdlib/editor';
-export { LAYOUT_WRAPPER_NAMES } from '@markii/stdlib/editor';
 export { buildComponentCatalog } from './insert/component-catalog.js';
-export { completionAt, componentDocumentation, formatComponentDocumentation, hoverAt, } from '@markii/stdlib/editor';
-export { closesOpenContainerFence, enclosingContainerFences, fenceExtensionEdits, insertedContainerColonCount, } from '@markii/stdlib/editor';
-// Render-time diagnostics: one event from either renderer's `onDiagnostic`
-// option becomes the one line both hosts write to their diagnostics
-// surface.
-export { createRenderDiagnosticCollector, createRenderDiagnosticReporter, renderDiagnosticLine, } from './diagnostics/render-diagnostics.js';
-export { BROWSER_ISOLATE_ENTRY } from './host/adapter.js';
-export { CLI_LABELS, OBSIDIAN_LABELS, VSCODE_LABELS, packsNotInstalledLabel, } from './host/labels.js';
-export { scheduledRefreshNotStartedLine, scriptsDisabledConfirmationText, scriptsDisabledDiagnosticLine, scriptsDisabledNotice, scriptsDisabledNoticeText, scriptsEnabledConfirmationText, } from './host/script-execution.js';
-export { MIN_REFRESH_INTERVAL_SECONDS, parseRefreshIntervalSeconds, refreshIntervalMsFromSeconds, refreshIntervalValidationMessage, } from './host/refresh-interval.js';
-export { promptsFromAdapter, runViaAdapter, spawnRunViaAdapter, RUN_TIMEOUT_MS as HOST_RUN_TIMEOUT_MS, } from './host/run-behavior.js';
-export { formatRunFailureLines, runDiagnosticLines, } from './host/run-diagnostics.js';
-export { describeArchiveError, writeArchiveContents, } from './host/pack-archive.js';
-export { installConsentMessage, installPackDiagnosticLines, installPackFromArchive, installPackMessage, installReplaceConfirmMessage, } from './host/pack-install.js';
-export { discoverConfiguredPacks, loadPacksViaAdapter, packDiscoveryIoFromAdapter, } from './host/pack-load.js';
-export { prebuiltShadowLine } from './packs/pack-diagnostics.js';
-export { packHasTerminalViews, readTerminalPackScripts, terminalScriptMissingLine, terminalScriptNamespaceMismatchLine, terminalScriptRejectedLine, terminalScriptUnreadableLine, } from './host/terminal-packs.js';
-export { DEFAULT_PACK_TRUST_LIST, MAX_TRUSTED_PACKS, PACK_TRUST_STORAGE_KEY, isPackTrusted, normalizePackTrustList, trustPack, untrustPack, } from './packs/pack-trust.js';
-export { disablePackMessage, enablePackMessage, notEnabledPackDiagnosticLine, selectEnabledPacks, } from './host/pack-trust-behavior.js';
-export { removePackDiagnosticLine, removePackMessage, removePackViaAdapter, } from './host/pack-remove.js';
-export { mdPlainFromSource } from './host/export/md-plain.js';
-export { buildExportDocument, exportDefaultFileName, exportDiagnosticLines, exportNoteFileViaAdapter, exportResultMessage, fileNameOf, formatByteSize, imageEmbedDiagnosticLines, renderEngineDiagnosticLine, } from './host/export-behavior.js';
-export { LAYOUT_ORIGIN_TAG, STANDARD_ORIGIN_TAG, completeAtViaEditor, completionOriginTag, completionPlanAt, createCatalogCache, hoverAtViaEditor, hoverDocumentationText, insertComponentPlan, isContainerCompletionItem, } from './host/editor-behavior.js';
+export { installPackMessage } from './host/pack-install.js';
+export { disablePackMessage, enablePackMessage, } from './host/pack-trust-behavior.js';
+export { removePackMessage } from './host/pack-remove.js';
+export { exportResultMessage } from './host/export-behavior.js';
+export { cascadeResultMessage } from './host/cascade-export-behavior.js';
 export { createMarkiiHost } from './host/create-host.js';
-export { joinPath, dirnamePath, isAbsolutePath } from './path-util.js';
+export { netRefusal } from './run/net-refusal.js';

package/dist/internal.d.ts

@@ -0,0 +1,28 @@
+export { mergeArrivingValue } from './values-merge.js';
+export { isRunProgress } from './run/run-progress.js';
+export { isNetBridgeRequest, serveNetRequest } from './run/net-bridge.js';
+export type { NetBridgeReply } from './run/net-bridge.js';
+export { MAX_VALUES_SNAPSHOT_BYTES, readPersistedValues, runOnce, valuesStorageKeyFor, } from './run/run-flow.js';
+export { ALLOW_LABEL, DONT_ALLOW_LABEL, clearGrantForDocument, } from './run/grant-flow.js';
+export { decodeBundleCacheFromStorage, encodeBundleCacheForStorage, withPersistedCache, } from './run/bundle-run.js';
+export { isBundleName, resolveBundleDocumentPath, } from './run/bundle-document.js';
+export { readLastRunTrace } from './run/run-trace.js';
+export { staleValuesForRehydration } from './run/stale-values.js';
+export { MARK_EXTENSION, buildNoteHtmlExport, composeNoteHtmlExport, noteHasScripts, exportBaseName, exportedSiblingPath, } from './export/note-export.js';
+export { EMPTY_IMAGE_REPORT, MAX_EMBEDDED_IMAGE_BYTES, embedImagesInHtml, } from './export/image-embed.js';
+export { cascadeDiagnosticLines } from './host/cascade-export-behavior.js';
+export { componentsWithoutEngineView, declaredPackComponents, installedNamespaces, } from './packs/discover.js';
+export { loadPackModules } from './packs/pack-scripts.js';
+export { relativePackEntries, resolvePackPaths } from './packs/pack-paths.js';
+export { formatPackDiagnosticLines, skippedPackCount, prebuiltShadowLine, } from './packs/pack-diagnostics.js';
+export type { PackPathExists } from './packs/prebuilt.js';
+export { PREBUILT_SCRIPT_FILENAME, PREBUILT_STYLESHEET_FILENAME, PREBUILT_TERMINAL_SCRIPT_FILENAME, emptyWebviewScript, resolvePrebuiltPack, } from './packs/prebuilt.js';
+export { createRenderDiagnosticCollector, createRenderDiagnosticReporter, } from './diagnostics/render-diagnostics.js';
+export { packsNotInstalledLabel } from './host/labels.js';
+export { scheduledRefreshNotStartedLine, scriptsDisabledConfirmationText, scriptsDisabledDiagnosticLine, scriptsDisabledNotice, scriptsDisabledNoticeText, scriptsEnabledConfirmationText, } from './host/script-execution.js';
+export { MIN_REFRESH_INTERVAL_SECONDS, parseRefreshIntervalSeconds, refreshIntervalMsFromSeconds, refreshIntervalValidationMessage, } from './host/refresh-interval.js';
+export { discoverConfiguredPacks } from './host/pack-load.js';
+export { packHasTerminalViews, terminalScriptNamespaceMismatchLine, terminalScriptRejectedLine, } from './host/terminal-packs.js';
+export { mdPlainFromSource } from './host/export/md-plain.js';
+export { exportDefaultFileName, fileNameOf } from './host/export-behavior.js';
+export { completionOriginTag, isContainerCompletionItem, } from './host/editor-behavior.js';

package/dist/internal.js

@@ -0,0 +1,31 @@
+// @markii/host/internal: the lower-level helpers this repository's own apps
+// and `@markii/pack-build` build on. It carries NO semver promise: a name
+// here can change or disappear in any release. An outside host should use
+// the main entry. Environment-neutral like the main entry
+// (`src/neutral-entries.probe.test.ts` bundles it for a browser).
+export { mergeArrivingValue } from './values-merge.js';
+export { isRunProgress } from './run/run-progress.js';
+export { isNetBridgeRequest, serveNetRequest } from './run/net-bridge.js';
+export { MAX_VALUES_SNAPSHOT_BYTES, readPersistedValues, runOnce, valuesStorageKeyFor, } from './run/run-flow.js';
+export { ALLOW_LABEL, DONT_ALLOW_LABEL, clearGrantForDocument, } from './run/grant-flow.js';
+export { decodeBundleCacheFromStorage, encodeBundleCacheForStorage, withPersistedCache, } from './run/bundle-run.js';
+export { isBundleName, resolveBundleDocumentPath, } from './run/bundle-document.js';
+export { readLastRunTrace } from './run/run-trace.js';
+export { staleValuesForRehydration } from './run/stale-values.js';
+export { MARK_EXTENSION, buildNoteHtmlExport, composeNoteHtmlExport, noteHasScripts, exportBaseName, exportedSiblingPath, } from './export/note-export.js';
+export { EMPTY_IMAGE_REPORT, MAX_EMBEDDED_IMAGE_BYTES, embedImagesInHtml, } from './export/image-embed.js';
+export { cascadeDiagnosticLines } from './host/cascade-export-behavior.js';
+export { componentsWithoutEngineView, declaredPackComponents, installedNamespaces, } from './packs/discover.js';
+export { loadPackModules } from './packs/pack-scripts.js';
+export { relativePackEntries, resolvePackPaths } from './packs/pack-paths.js';
+export { formatPackDiagnosticLines, skippedPackCount, prebuiltShadowLine, } from './packs/pack-diagnostics.js';
+export { PREBUILT_SCRIPT_FILENAME, PREBUILT_STYLESHEET_FILENAME, PREBUILT_TERMINAL_SCRIPT_FILENAME, emptyWebviewScript, resolvePrebuiltPack, } from './packs/prebuilt.js';
+export { createRenderDiagnosticCollector, createRenderDiagnosticReporter, } from './diagnostics/render-diagnostics.js';
+export { packsNotInstalledLabel } from './host/labels.js';
+export { scheduledRefreshNotStartedLine, scriptsDisabledConfirmationText, scriptsDisabledDiagnosticLine, scriptsDisabledNotice, scriptsDisabledNoticeText, scriptsEnabledConfirmationText, } from './host/script-execution.js';
+export { MIN_REFRESH_INTERVAL_SECONDS, parseRefreshIntervalSeconds, refreshIntervalMsFromSeconds, refreshIntervalValidationMessage, } from './host/refresh-interval.js';
+export { discoverConfiguredPacks } from './host/pack-load.js';
+export { packHasTerminalViews, terminalScriptNamespaceMismatchLine, terminalScriptRejectedLine, } from './host/terminal-packs.js';
+export { mdPlainFromSource } from './host/export/md-plain.js';
+export { exportDefaultFileName, fileNameOf } from './host/export-behavior.js';
+export { completionOriginTag, isContainerCompletionItem, } from './host/editor-behavior.js';

package/dist/node-fs.d.ts

@@ -1,4 +1,3 @@
-import type { ArchiveExtractFs } from './host/pack-archive.js';
 import type { PackDiscoveryIo } from './host/pack-load.js';
 import type { PackDirectoryLister, PackFileReader } from './packs/discover.js';
 import type { PackScriptsReader } from './packs/pack-scripts.js';
@@ -8,7 +7,5 @@ export declare function createNodeDirectoryLister(): PackDirectoryLister;
 export declare function createNodeFileReader(): PackFileReader;
 /** The real, Node-backed `PackScriptsReader`. */
 export declare function createNodeReader(): PackScriptsReader;
-/** The real, Node-backed `ArchiveExtractFs`. */
-export declare function createNodeArchiveExtractFs(): ArchiveExtractFs;
 /** Pack discovery's reads over the real file system. */
 export declare function createNodePackDiscoveryIo(): PackDiscoveryIo;

package/dist/node-fs.js

@@ -5,7 +5,7 @@
  * extraction filesystem. Reached only through `@markii/host/node`; nothing
  * in the main entry imports this module.
  */
-import { mkdir, readFile, readdir, rm, writeFile } from 'node:fs/promises';
+import { readFile, readdir } from 'node:fs/promises';
 /** The real, Node-backed `PackDirectoryLister`. Never rejects: an unreadable, missing or non-directory path resolves `[]`. */
 export function createNodeDirectoryLister() {
     return async (absoluteDir) => {
@@ -41,26 +41,6 @@ export function createNodeReader() {
         readFile: (absolutePath) => readText(absolutePath),
     };
 }
-/** The real, Node-backed `ArchiveExtractFs`. */
-export function createNodeArchiveExtractFs() {
-    return {
-        removeDirectory: async (absolutePath) => {
-            try {
-                await rm(absolutePath, { recursive: true, force: true });
-            }
-            catch {
-                // Quiet: the write that follows fails loudly on its own if the
-                // path is genuinely unusable.
-            }
-        },
-        makeDirectory: async (absolutePath) => {
-            await mkdir(absolutePath, { recursive: true });
-        },
-        writeFile: async (absolutePath, bytes) => {
-            await writeFile(absolutePath, bytes);
-        },
-    };
-}
 /** Pack discovery's reads over the real file system. */
 export function createNodePackDiscoveryIo() {
     return {

package/dist/node-worker.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The `@markii/host/node-worker` entry: the worker_threads isolate a Node
+ * host spawns by file path. Bundling this file produces the one
+ * self-contained worker (`dist/node-worker.js` for the package, a host's
+ * own `dist/run/worker.js` for an app that embeds it). It has no exports:
+ * loading it starts the worker's message loop.
+ */
+import './run/worker-entry.js';

package/dist/node-worker.js

@@ -6072,6 +6072,12 @@ import * as http from "node:http";
 import * as https from "node:https";
 import * as dns from "node:dns";
 
+// src/run/net-refusal.ts
+var NET_REFUSAL = /* @__PURE__ */ Symbol.for("markii.net.refusal");
+function netRefusal(error) {
+  return Object.assign(error, { [NET_REFUSAL]: true });
+}
+
 // src/run/ip-address.ts
 function isIPv4(value2) {
   const parts = value2.split(".");
@@ -6257,29 +6263,43 @@ async function pinHostAddress(hostname, policy, lookup) {
   try {
     addresses = await lookup(hostname);
   } catch {
-    return { ok: false, reason: `host "${hostname}" could not be resolved` };
+    return {
+      ok: false,
+      kind: "unresolved",
+      reason: `host "${hostname}" could not be resolved`
+    };
   }
   if (addresses.length === 0) {
-    return { ok: false, reason: `host "${hostname}" resolved to no address` };
+    return {
+      ok: false,
+      kind: "unresolved",
+      reason: `host "${hostname}" resolved to no address`
+    };
   }
   for (const candidate of addresses) {
     const scope2 = classifyIpAddress(candidate.address);
     if (scope2 === void 0) {
       return {
         ok: false,
+        kind: "refused",
         reason: `host "${hostname}" resolved to an unusable address`
       };
     }
     if (isRestrictedScope(scope2) && !policy.allowRestrictedAddresses) {
       return {
         ok: false,
+        kind: "refused",
         reason: `host "${hostname}" resolves to ${describeScope(scope2)}`
       };
     }
   }
   const chosen = addresses[0];
   if (chosen === void 0) {
-    return { ok: false, reason: `host "${hostname}" resolved to no address` };
+    return {
+      ok: false,
+      kind: "unresolved",
+      reason: `host "${hostname}" resolved to no address`
+    };
   }
   const scope = classifyIpAddress(chosen.address) ?? "reserved";
   return {
@@ -6396,12 +6416,12 @@ function issueRequest(url, method, body, pinned, maxFetchBytes, denial, signal)
       }
     );
     req.on("error", (err) => {
-      settleReject(denial(`request failed: ${describeThrown2(err)}`));
+      settleReject(new Error(`request failed: ${describeThrown2(err)}`));
     });
     if (signal !== void 0) {
       const onAbort = () => {
         req.destroy();
-        settleReject(denial("the run has ended"));
+        settleReject(new Error("the run has ended"));
       };
       if (signal.aborted) onAbort();
       else signal.addEventListener("abort", onAbort, { once: true });
@@ -6412,6 +6432,7 @@ function issueRequest(url, method, body, pinned, maxFetchBytes, denial, signal)
 }
 function createNetProvider(allowlist, maxFetchBytes, policy, denial, lookup = defaultHostLookup, signal) {
   const allowed = new Set(allowlist.map((host) => host.toLowerCase()));
+  const refuse = (message) => netRefusal(denial(message));
   async function fetchAllowed(startUrl, method, body) {
     let currentUrl = startUrl;
     for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
@@ -6419,24 +6440,24 @@ function createNetProvider(allowlist, maxFetchBytes, policy, denial, lookup = de
       try {
         parsed = new URL(currentUrl);
       } catch {
-        throw denial(`"${currentUrl}" is not a valid URL`);
+        throw refuse(`"${currentUrl}" is not a valid URL`);
       }
       if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-        throw denial(`scheme "${parsed.protocol}" is not allowed`);
+        throw refuse(`scheme "${parsed.protocol}" is not allowed`);
       }
       if (parsed.username !== "" || parsed.password !== "") {
-        throw denial(
+        throw refuse(
           `URL "${currentUrl}" embeds credentials, which is not allowed`
         );
       }
-      if (signal?.aborted) throw denial("the run has ended");
+      if (signal?.aborted) throw new Error("the run has ended");
       const host = parsed.hostname.toLowerCase();
       if (!allowed.has(host)) {
-        throw denial(`host "${host}" is not on the run's allowlist`);
+        throw refuse(`host "${host}" is not on the run's allowlist`);
       }
       const pinResult = await pinHostAddress(host, policy, lookup);
       if (!pinResult.ok) {
-        throw denial(pinResult.reason);
+        throw pinResult.kind === "unresolved" ? new Error(pinResult.reason) : refuse(pinResult.reason);
       }
       const response = await issueRequest(
         parsed,
@@ -6444,17 +6465,17 @@ function createNetProvider(allowlist, maxFetchBytes, policy, denial, lookup = de
         body,
         pinResult.pinned,
         maxFetchBytes,
-        denial,
+        refuse,
         signal
       );
       if (response.status >= 300 && response.status < 400) {
         if (!response.location) {
-          throw denial("redirect response carried no Location header");
+          throw refuse("redirect response carried no Location header");
         }
         try {
           currentUrl = new URL(response.location, currentUrl).toString();
         } catch {
-          throw denial(
+          throw refuse(
             "redirect response carried an unparseable Location header"
           );
         }
@@ -6462,7 +6483,7 @@ function createNetProvider(allowlist, maxFetchBytes, policy, denial, lookup = de
       }
       return { status: response.status, body: response.body };
     }
-    throw denial(`exceeded ${MAX_REDIRECTS} redirects`);
+    throw refuse(`exceeded ${MAX_REDIRECTS} redirects`);
   }
   return {
     get: (url) => fetchAllowed(url, "GET", void 0),

package/dist/node.d.ts

@@ -2,5 +2,4 @@ export type { SpawnRunOptions } from './run/run-host.js';
 export type { NodeHostIsolateOptions } from './run/node-isolate.js';
 export { createNodeHostIsolate, workerThreadIsolate, } from './run/node-isolate.js';
 export { createNetProvider } from './run/net-provider.js';
-export { createNodeArchiveExtractFs, createNodeDirectoryLister, createNodeFileReader, createNodePackDiscoveryIo, createNodeReader as createNodePackScriptsReader, } from './node-fs.js';
-export { createHtmlExportEngine } from './html-engine.js';
+export { createNodeDirectoryLister, createNodeFileReader, createNodePackDiscoveryIo, createNodeReader as createNodePackScriptsReader, } from './node-fs.js';

package/dist/node.js

@@ -4,10 +4,11 @@
 // The main entry (`./index.ts`) is environment-neutral. This entry adds:
 // - the worker_threads isolate and the pinned network provider (`node:*`);
 // - the Node-backed file-system seams the neutral code takes by injection;
-// - the `@markii/html`-backed static export engine;
+//
+// The `@markii/html`-backed static export engine is its own entry,
+// `@markii/host/html-engine`, so importing this one needs no optional peer.
 //
 // A Node host imports from both entries. No browser bundle imports this one.
 export { createNodeHostIsolate, workerThreadIsolate, } from './run/node-isolate.js';
 export { createNetProvider } from './run/net-provider.js';
-export { createNodeArchiveExtractFs, createNodeDirectoryLister, createNodeFileReader, createNodePackDiscoveryIo, createNodeReader as createNodePackScriptsReader, } from './node-fs.js';
-export { createHtmlExportEngine } from './html-engine.js';
+export { createNodeDirectoryLister, createNodeFileReader, createNodePackDiscoveryIo, createNodeReader as createNodePackScriptsReader, } from './node-fs.js';

package/dist/packs/discover.d.ts

@@ -30,6 +30,8 @@ export interface DiscoveredPack {
     /** The configured folder this pack was discovered in (absolute path, as given). */
     readonly folder: string;
     readonly manifest: PackManifest;
+    /** The exact text of the pack's `pack.json`, as read. A compiled script registers this text unchanged. Discovery always sets it; it is absent only on a pack a host assembled by hand. */
+    readonly manifestText?: string;
     /** Local component name -> absolute path to its declared source file (`manifest.components[name]`, resolved against `folder`). Informational: what a host consumes them for (bundling, `import()`, or locating the pack's prebuilt registration script) is that host's own concern. */
     readonly componentPaths: Readonly<Record<string, string>>;
     /** Engine id -> (local component name -> absolute source path), for every engine any component declares a source for. `componentPaths` is the `react` slice of this. A terminal build (`ansi`) reads its slice here. */

package/dist/packs/discover.js

@@ -102,6 +102,7 @@ async function tryLoadPackAt(folder, readFile) {
         pack: {
             folder,
             manifest: result.manifest,
+            manifestText: text,
             componentPaths,
             componentPathsByEngine,
             scriptsDir: joinPath(folder, 'scripts'),

package/dist/run/bundle-run.d.ts

@@ -141,7 +141,7 @@ export declare function manifestNetHosts(manifest: BundleManifest): string[];
  *
  * A mismatch between the two is not silently absorbed: this pure function
  * returns one diagnostics line per mismatched host, in both directions, for
- * the host's diagnostics surface (docs/integration.md) — never the rendered
+ * the host's diagnostics surface (docs/hosts.md) — never the rendered
  * page. Wording lives here, the one place both apps' adapters read it from,
  * so it can never drift between VS Code's output channel and Obsidian's
  * console/notice surface.

package/dist/run/bundle-run.js

@@ -142,7 +142,7 @@ export function manifestNetHosts(manifest) {
  *
  * A mismatch between the two is not silently absorbed: this pure function
  * returns one diagnostics line per mismatched host, in both directions, for
- * the host's diagnostics surface (docs/integration.md) — never the rendered
+ * the host's diagnostics surface (docs/hosts.md) — never the rendered
  * page. Wording lives here, the one place both apps' adapters read it from,
  * so it can never drift between VS Code's output channel and Obsidian's
  * console/notice surface.

package/dist/run/net-bridge.js

@@ -1,3 +1,4 @@
+import { isNetRefusal } from './net-refusal.js';
 export function isNetBridgeRequest(value) {
     if (typeof value !== 'object' || value === null)
         return false;
@@ -49,11 +50,12 @@ export async function serveNetRequest(request, provider, post) {
             id: request.id,
             ok: false,
             error: error instanceof Error ? error.message : String(error),
-            // Everything the host's provider refuses IS a policy denial: the
-            // provider's own failures are allowlist, redirect, size, and pinning
-            // refusals. Marking them so keeps the worker's classification
-            // identical to the in-worker case.
-            denied: true,
+            // A policy refusal (allowlist, redirect, size, address range) is
+            // marked by the provider and crosses as a denial, so the worker
+            // classifies it exactly as it would in-worker. A transport failure
+            // (DNS, connection, timeout, abort) is unmarked and crosses as an
+            // ordinary failure with its reason. Both reach the script as errors.
+            denied: isNetRefusal(error),
         });
     }
 }

package/dist/run/net-pinning.d.ts

@@ -40,6 +40,8 @@ export type PinResult = {
 } | {
     ok: false;
     reason: string;
+    /** `unresolved`: the name did not resolve (a transport failure). `refused`: the address policy refused it. */
+    kind: 'unresolved' | 'refused';
 };
 export interface PinPolicy {
     /**