@markii/runtime 0.10.0 → 0.12.0

package/dist/doc.d.ts

@@ -0,0 +1,201 @@
+/**
+ * The note-scoped, read-only `doc` view a script sees (GitHub issue #33).
+ *
+ * A script block already knows its own source. It knows nothing about the
+ * note it lives in, so a note that wants to collect what its author wrote
+ * — every `:::prep_q` block, say, and turn them into one quiz — has no way
+ * to say so. This module is the whole of that capability, and it is
+ * deliberately small: a listing of the note's directives, and a read of a
+ * value some EARLIER script in the same note already produced.
+ *
+ * Two properties make this safe enough to be tier-free (available to an
+ * `'auto'`/`'scheduled'` run exactly as to a manual one):
+ *
+ * 1. It grants no authority. Everything reachable through it is content
+ *    the note already contains and values the same run already computed.
+ *    There is no host, no file, no clock and no store beyond this note.
+ * 2. It is deterministic. `runDocumentScripts` runs a note's scripts
+ *    sequentially in document order, so "the scripts above me have
+ *    finished and the ones below me have not" is a fact, not a race.
+ *
+ * Everything here is pure: no I/O, no engine, no knowledge of Lua. A
+ * concrete `ScriptExecutor` (`@markii/lua`) receives a `DocView` per
+ * script and decides how to present it in its own language.
+ */
+/** Which of the three directive forms (docs/format.md) a listed directive was written in. */
+export type DirectiveForm = 'leaf' | 'container' | 'inline';
+/**
+ * One directive as a script sees it. Every field is plain, already-capped
+ * data — a script can copy it, return it, or ignore it, and nothing here
+ * is a live handle back into the note.
+ *
+ * `text` is the directive's own inner text with markdown stripped: the
+ * text nodes of its subtree, blocks separated by a newline. A container
+ * that holds another directive therefore includes that inner directive's
+ * text too, because that text is genuinely inside it; the inner directive
+ * still gets its own entry in the listing.
+ */
+export interface DirectiveEntry {
+    readonly name: string;
+    readonly form: DirectiveForm;
+    /** The directive's attributes, values as written. A bare attribute reads as an empty string. */
+    readonly attributes: Readonly<Record<string, string>>;
+    readonly text: string;
+}
+/**
+ * A note's directives in document order, plus whether anything was left
+ * out to stay inside the caps. `truncated` covers every kind of shortfall
+ * — a dropped directive, a shortened text, dropped attributes — because a
+ * script that cares only ever wants the one answer: is this the whole
+ * note, or not?
+ */
+export interface DirectiveListing {
+    readonly directives: readonly DirectiveEntry[];
+    readonly truncated: boolean;
+}
+/**
+ * The size budget for one note's listing. These are not security
+ * boundaries in the sandbox's sense (the content is the user's own note,
+ * not a remote response); they exist so a pathological note cannot turn
+ * one `doc.directives()` call into a multi-megabyte string crossing the
+ * isolate boundary, and so the cost of the listing is knowable in advance.
+ */
+export interface DocListingLimits {
+    /** Total budget for the serialized listing. Directives past it are dropped. */
+    readonly maxTotalBytes: number;
+    /** Most directives listed, whatever their size. */
+    readonly maxDirectives: number;
+    /** Longest `text` per directive; a longer one is cut, never dropped. */
+    readonly maxTextBytes: number;
+    /** Most attributes kept per directive, in written order. */
+    readonly maxAttributes: number;
+    /** Longest attribute name kept. A longer one is dropped, since a cut name is a name nobody asked for. */
+    readonly maxAttributeNameBytes: number;
+    /** Longest attribute value kept; a longer one is cut. */
+    readonly maxAttributeValueBytes: number;
+    /** How deep the tree walk goes. Content nested deeper than this is not listed. */
+    readonly maxDepth: number;
+}
+/**
+ * The documented defaults. 512 KiB is the headline number: comfortably
+ * more than any hand-written note holds, and small enough that the worst
+ * case is a string, not a memory problem. The rest follow from it — a
+ * note with two thousand directives or an eight-kilobyte question is
+ * already past what the feature is for.
+ */
+export declare const DEFAULT_DOC_LISTING_LIMITS: DocListingLimits;
+/** An empty listing, for a run whose host built none. Frozen: it is shared by every such run. */
+export declare const EMPTY_DIRECTIVE_LISTING: DirectiveListing;
+/**
+ * The shape `buildDirectiveListing` walks. Deliberately structural rather
+ * than an mdast import: this package parses nothing, and an mdast `Root`
+ * satisfies this as-is. Every read below is guarded anyway, so a foreign
+ * or hand-built tree degrades to a shorter listing instead of throwing.
+ */
+export interface DocumentTreeNode {
+    readonly type: string;
+    readonly children?: readonly DocumentTreeNode[];
+    /** `unknown` on purpose: mdast spells `value`, `name` and `attributes` differently across node types (an MDX element's `name` is `string | null`, its `attributes` an array), and this walk narrows every one of them at runtime anyway. */
+    readonly value?: unknown;
+    readonly name?: unknown;
+    readonly attributes?: unknown;
+}
+/** Bytes `text` occupies as UTF-8, without allocating an encoder or a buffer. */
+export declare function utf8ByteLength(text: string): number;
+/**
+ * Removes what must never reach a script's string: C0 control characters
+ * other than tab and newline, DEL, and unpaired surrogates.
+ *
+ * The NUL byte is the one with teeth. A Lua string is byte-clean, but the
+ * JS-to-Lua marshaling in the reference engine truncates a string at its
+ * first NUL (documented in `@markii/lua`'s `bytesToLuaString`), so a
+ * single NUL pasted into a note would silently cut the rest of the
+ * listing off. Dropping it here means one directive loses one invisible
+ * character instead.
+ *
+ * An unpaired surrogate becomes U+FFFD for the same class of reason: it
+ * cannot be encoded as UTF-8, so every layer below would have to invent
+ * its own repair.
+ */
+export declare function sanitizeText(text: string): string;
+/**
+ * Walks a parsed note and returns every directive in it, in document
+ * order, as plain capped data.
+ *
+ * Nesting is flattened deliberately: a directive written inside another
+ * appears in the list right after its parent, at the position it occupies
+ * in the note. A script filtering by name therefore finds every match
+ * regardless of what wraps it, which is what a note author means by "all
+ * my questions".
+ *
+ * Never throws. A tree that is not a tree, a directive with no name, an
+ * `attributes` that is an array — each degrades to less listing, never to
+ * an exception, because this runs inside a run whose failure surface
+ * belongs to the script, not to the walk.
+ */
+export declare function buildDirectiveListing(tree: DocumentTreeNode | null | undefined, overrides?: Partial<DocListingLimits>): DirectiveListing;
+/** A successful `doc.value` read. `value` is `undefined` for a name nothing produced. */
+export interface DocValueSuccess {
+    readonly ok: true;
+    readonly value: unknown;
+}
+/** A refused `doc.value` read: the name belongs to a script that has not run yet. */
+export interface DocValueRejection {
+    readonly ok: false;
+    readonly message: string;
+}
+export type DocValueRead = DocValueSuccess | DocValueRejection;
+/**
+ * What one script sees of its note. Handed to the executor per script;
+ * never shared between two of them.
+ */
+export interface DocView {
+    readonly directives: DirectiveListing;
+    /** Reads the value of the script named `name`. Never throws — a refusal is a returned rejection. */
+    value(name: string): DocValueRead;
+}
+/** The listing half of `runDocumentScripts`' `doc` option: what the host built from the parsed note. */
+export interface DocumentContext {
+    readonly directives: DirectiveListing;
+}
+/**
+ * The ONE wording for reading a value from a script that runs later in
+ * the note. It is a script-authoring mistake, not a permission problem
+ * and not a resource problem, so it classifies as an ordinary script
+ * error and the marker a host shows reads, in full: "script error: reads
+ * "quiz", which runs later in the note".
+ *
+ * Keeping the sentence here means the presentation layers keep their one
+ * job (naming the KIND of failure) and this package keeps its own (saying
+ * what happened), instead of a phrase being invented once per host.
+ */
+export declare function laterScriptReadMessage(name: string): string;
+/** Per-script `DocView`s for one run, plus the recorder that advances "what has finished". */
+export interface DocViewSource {
+    /** The view the script at `index` (document order) runs with. */
+    viewFor(index: number): DocView;
+    /** Records that the script at that index finished, with the value it stored (`undefined` when it failed). */
+    recordCompleted(name: string, value: unknown): void;
+}
+/**
+ * Builds the per-script views for one run.
+ *
+ * The rule `doc.value` enforces is "above me, already finished":
+ *
+ * - a name some earlier script in this run already produced reads back as
+ *   that value (a script that FAILED produced nothing, so its name reads
+ *   as nil — the failure is already reported against that script, and
+ *   repeating it here would blame the reader);
+ * - a name belonging to a script at or after the caller's own position is
+ *   refused, because the answer would otherwise depend on where the
+ *   reader happened to be written;
+ * - anything else is simply nil, the same as reading an undefined name.
+ *
+ * A name written twice in one note is decided by what has already run: if
+ * an earlier block of that name finished, its value is what the reader
+ * sees, even when a later block will overwrite it afterwards.
+ */
+export declare function createDocViewSource(options: {
+    directives: DirectiveListing;
+    scriptNames: readonly string[];
+}): DocViewSource;

package/dist/doc.js

@@ -0,0 +1,389 @@
+/**
+ * The note-scoped, read-only `doc` view a script sees (GitHub issue #33).
+ *
+ * A script block already knows its own source. It knows nothing about the
+ * note it lives in, so a note that wants to collect what its author wrote
+ * — every `:::prep_q` block, say, and turn them into one quiz — has no way
+ * to say so. This module is the whole of that capability, and it is
+ * deliberately small: a listing of the note's directives, and a read of a
+ * value some EARLIER script in the same note already produced.
+ *
+ * Two properties make this safe enough to be tier-free (available to an
+ * `'auto'`/`'scheduled'` run exactly as to a manual one):
+ *
+ * 1. It grants no authority. Everything reachable through it is content
+ *    the note already contains and values the same run already computed.
+ *    There is no host, no file, no clock and no store beyond this note.
+ * 2. It is deterministic. `runDocumentScripts` runs a note's scripts
+ *    sequentially in document order, so "the scripts above me have
+ *    finished and the ones below me have not" is a fact, not a race.
+ *
+ * Everything here is pure: no I/O, no engine, no knowledge of Lua. A
+ * concrete `ScriptExecutor` (`@markii/lua`) receives a `DocView` per
+ * script and decides how to present it in its own language.
+ */
+/**
+ * The documented defaults. 512 KiB is the headline number: comfortably
+ * more than any hand-written note holds, and small enough that the worst
+ * case is a string, not a memory problem. The rest follow from it — a
+ * note with two thousand directives or an eight-kilobyte question is
+ * already past what the feature is for.
+ */
+export const DEFAULT_DOC_LISTING_LIMITS = {
+    maxTotalBytes: 512 * 1024,
+    maxDirectives: 2_000,
+    maxTextBytes: 8 * 1024,
+    maxAttributes: 32,
+    maxAttributeNameBytes: 128,
+    maxAttributeValueBytes: 1024,
+    maxDepth: 200,
+};
+/** An empty listing, for a run whose host built none. Frozen: it is shared by every such run. */
+export const EMPTY_DIRECTIVE_LISTING = Object.freeze({
+    directives: Object.freeze([]),
+    truncated: false,
+});
+const FORM_BY_TYPE = new Map([
+    ['leafDirective', 'leaf'],
+    ['containerDirective', 'container'],
+    ['textDirective', 'inline'],
+]);
+/**
+ * Node types that start a new line in the extracted text. Everything else
+ * is phrasing content and runs on, so `**bold** words` reads back as
+ * `bold words` rather than as two lines.
+ */
+const BLOCK_TYPES = new Set([
+    'paragraph',
+    'heading',
+    'blockquote',
+    'list',
+    'listItem',
+    'code',
+    'table',
+    'tableRow',
+    'thematicBreak',
+    'definition',
+    'footnoteDefinition',
+    'html',
+    'yaml',
+    'toml',
+    'leafDirective',
+    'containerDirective',
+]);
+/** Node types whose `value` IS their text. A `code` fence contributes its body; an `html` node contributes nothing, since raw markup is not text the author wrote to be read. */
+const VALUE_TYPES = new Set([
+    'text',
+    'inlineCode',
+    'code',
+]);
+/** Bytes `text` occupies as UTF-8, without allocating an encoder or a buffer. */
+export function utf8ByteLength(text) {
+    let bytes = 0;
+    for (let i = 0; i < text.length; i++) {
+        const code = text.charCodeAt(i);
+        if (code < 0x80)
+            bytes += 1;
+        else if (code < 0x800)
+            bytes += 2;
+        else if (code >= 0xd800 && code <= 0xdbff) {
+            // A well-formed surrogate pair is one 4-byte character; a lone high
+            // surrogate is replaced (see `sanitizeText`) and so costs 3.
+            const next = text.charCodeAt(i + 1);
+            if (next >= 0xdc00 && next <= 0xdfff) {
+                bytes += 4;
+                i++;
+            }
+            else
+                bytes += 3;
+        }
+        else
+            bytes += 3;
+    }
+    return bytes;
+}
+/**
+ * Removes what must never reach a script's string: C0 control characters
+ * other than tab and newline, DEL, and unpaired surrogates.
+ *
+ * The NUL byte is the one with teeth. A Lua string is byte-clean, but the
+ * JS-to-Lua marshaling in the reference engine truncates a string at its
+ * first NUL (documented in `@markii/lua`'s `bytesToLuaString`), so a
+ * single NUL pasted into a note would silently cut the rest of the
+ * listing off. Dropping it here means one directive loses one invisible
+ * character instead.
+ *
+ * An unpaired surrogate becomes U+FFFD for the same class of reason: it
+ * cannot be encoded as UTF-8, so every layer below would have to invent
+ * its own repair.
+ */
+export function sanitizeText(text) {
+    let out = '';
+    for (let i = 0; i < text.length; i++) {
+        const code = text.charCodeAt(i);
+        if (code >= 0xd800 && code <= 0xdbff) {
+            const next = text.charCodeAt(i + 1);
+            if (next >= 0xdc00 && next <= 0xdfff) {
+                out += text[i] + text[i + 1];
+                i++;
+            }
+            else {
+                out += '\uFFFD';
+            }
+            continue;
+        }
+        if (code >= 0xdc00 && code <= 0xdfff) {
+            out += '\uFFFD';
+            continue;
+        }
+        if (code === 0x09 || code === 0x0a) {
+            out += text[i];
+            continue;
+        }
+        if (code < 0x20 || code === 0x7f)
+            continue;
+        out += text[i];
+    }
+    return out;
+}
+/** Cuts `text` to at most `maxBytes` UTF-8 bytes, never mid-character. */
+function truncateToBytes(text, maxBytes) {
+    if (utf8ByteLength(text) <= maxBytes)
+        return { text, truncated: false };
+    let bytes = 0;
+    let end = 0;
+    for (const char of text) {
+        const size = utf8ByteLength(char);
+        if (bytes + size > maxBytes)
+            break;
+        bytes += size;
+        end += char.length;
+    }
+    return { text: text.slice(0, end), truncated: true };
+}
+/** Whether `value` is a walkable node — a plain object carrying a string `type`. */
+function isNode(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        typeof value.type === 'string');
+}
+/** Children of `node` that are themselves nodes, or an empty array. */
+function childrenOf(node) {
+    const children = node.children;
+    return Array.isArray(children) ? children.filter(isNode) : [];
+}
+/**
+ * The plain text of `node`'s subtree: text and inline code as written,
+ * fenced code as its body, blocks separated by a newline. Emphasis,
+ * links and images contribute their text and nothing else, which is the
+ * point — a script asking for a question's answer wants the answer, not
+ * its markup.
+ */
+function collectText(node, depth, max) {
+    if (depth > max)
+        return '';
+    if (VALUE_TYPES.has(node.type) && typeof node.value === 'string') {
+        return node.value;
+    }
+    if (node.type === 'break')
+        return '\n';
+    let out = '';
+    for (const child of childrenOf(node)) {
+        const part = collectText(child, depth + 1, max);
+        if (part === '')
+            continue;
+        if (out !== '' && BLOCK_TYPES.has(child.type))
+            out += '\n';
+        out += part;
+    }
+    return out;
+}
+/**
+ * Reads a directive node's attributes into plain strings. A bare
+ * attribute (`{open}`) arrives as `null` from the parser and reads as an
+ * empty string, matching how the renderers already treat it.
+ *
+ * The result has a null prototype and is built with own-key assignment
+ * only, so an attribute literally named `__proto__` or `constructor` is
+ * an ordinary entry with no inherited meaning.
+ */
+function readAttributes(node, limits) {
+    const attributes = Object.create(null);
+    const raw = node.attributes;
+    // A plain object only: an mdast-flavored node whose `attributes` is an
+    // array (MDX) has no attributes in this format's sense, and reading one
+    // as a record would list `length` as if the author had written it.
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {
+        return { attributes, truncated: false };
+    }
+    const record = raw;
+    let truncated = false;
+    let kept = 0;
+    for (const key of Object.keys(record)) {
+        if (kept >= limits.maxAttributes) {
+            truncated = true;
+            break;
+        }
+        const name = sanitizeText(key);
+        if (name === '' || utf8ByteLength(name) > limits.maxAttributeNameBytes) {
+            truncated = true;
+            continue;
+        }
+        const rawValue = record[key];
+        const value = typeof rawValue === 'string' ? sanitizeText(rawValue) : '';
+        const capped = truncateToBytes(value, limits.maxAttributeValueBytes);
+        if (capped.truncated)
+            truncated = true;
+        // Plain own-key assignment onto a null-prototype object: there is no
+        // inherited `__proto__` setter to trip over, so a directive written
+        // `{__proto__=x}` lands as an ordinary key with no side effect.
+        attributes[name] = capped.text;
+        kept++;
+    }
+    return { attributes, truncated };
+}
+/**
+ * Walks a parsed note and returns every directive in it, in document
+ * order, as plain capped data.
+ *
+ * Nesting is flattened deliberately: a directive written inside another
+ * appears in the list right after its parent, at the position it occupies
+ * in the note. A script filtering by name therefore finds every match
+ * regardless of what wraps it, which is what a note author means by "all
+ * my questions".
+ *
+ * Never throws. A tree that is not a tree, a directive with no name, an
+ * `attributes` that is an array — each degrades to less listing, never to
+ * an exception, because this runs inside a run whose failure surface
+ * belongs to the script, not to the walk.
+ */
+export function buildDirectiveListing(tree, overrides = {}) {
+    const limits = {
+        ...DEFAULT_DOC_LISTING_LIMITS,
+        ...overrides,
+    };
+    const directives = [];
+    let truncated = false;
+    let bytes = 0;
+    if (!isNode(tree))
+        return { directives, truncated };
+    const walk = (node, depth) => {
+        if (depth > limits.maxDepth) {
+            truncated = true;
+            return;
+        }
+        const form = FORM_BY_TYPE.get(node.type);
+        if (form !== undefined) {
+            const name = typeof node.name === 'string' ? sanitizeText(node.name) : '';
+            if (name !== '') {
+                if (directives.length >= limits.maxDirectives) {
+                    truncated = true;
+                }
+                else {
+                    const attrs = readAttributes(node, limits);
+                    if (attrs.truncated)
+                        truncated = true;
+                    const rawText = sanitizeText(collectText(node, 0, limits.maxDepth));
+                    const text = truncateToBytes(rawText, limits.maxTextBytes);
+                    if (text.truncated)
+                        truncated = true;
+                    const entry = {
+                        name,
+                        form,
+                        attributes: attrs.attributes,
+                        text: text.text,
+                    };
+                    // Charged against the total budget by what the entry actually
+                    // costs on the wire, so one enormous directive cannot crowd out
+                    // the rest by accident and a note of small ones is not cut
+                    // early by a pessimistic estimate.
+                    const cost = entryCost(entry);
+                    if (bytes + cost > limits.maxTotalBytes) {
+                        truncated = true;
+                    }
+                    else {
+                        bytes += cost;
+                        directives.push(entry);
+                    }
+                }
+            }
+        }
+        for (const child of childrenOf(node))
+            walk(child, depth + 1);
+    };
+    walk(tree, 0);
+    return { directives, truncated };
+}
+/** What one entry costs against `maxTotalBytes`: its text, its attribute names and values, and its own name. */
+function entryCost(entry) {
+    let cost = utf8ByteLength(entry.name) + utf8ByteLength(entry.text) + 32;
+    for (const [key, value] of Object.entries(entry.attributes)) {
+        cost += utf8ByteLength(key) + utf8ByteLength(value) + 8;
+    }
+    return cost;
+}
+/**
+ * The ONE wording for reading a value from a script that runs later in
+ * the note. It is a script-authoring mistake, not a permission problem
+ * and not a resource problem, so it classifies as an ordinary script
+ * error and the marker a host shows reads, in full: "script error: reads
+ * "quiz", which runs later in the note".
+ *
+ * Keeping the sentence here means the presentation layers keep their one
+ * job (naming the KIND of failure) and this package keeps its own (saying
+ * what happened), instead of a phrase being invented once per host.
+ */
+export function laterScriptReadMessage(name) {
+    return `reads "${name}", which runs later in the note`;
+}
+/**
+ * Builds the per-script views for one run.
+ *
+ * The rule `doc.value` enforces is "above me, already finished":
+ *
+ * - a name some earlier script in this run already produced reads back as
+ *   that value (a script that FAILED produced nothing, so its name reads
+ *   as nil — the failure is already reported against that script, and
+ *   repeating it here would blame the reader);
+ * - a name belonging to a script at or after the caller's own position is
+ *   refused, because the answer would otherwise depend on where the
+ *   reader happened to be written;
+ * - anything else is simply nil, the same as reading an undefined name.
+ *
+ * A name written twice in one note is decided by what has already run: if
+ * an earlier block of that name finished, its value is what the reader
+ * sees, even when a later block will overwrite it afterwards.
+ */
+export function createDocViewSource(options) {
+    const { directives, scriptNames } = options;
+    // Maps, not objects: a script named `__proto__` or `constructor` is a
+    // legal name (`@markii/core`'s charset allows it) and must be an
+    // ordinary key here, never a reach into a prototype.
+    const completed = new Map();
+    const lastIndexByName = new Map();
+    scriptNames.forEach((name, index) => {
+        lastIndexByName.set(name, index);
+    });
+    return {
+        viewFor(index) {
+            return {
+                directives,
+                value(name) {
+                    if (typeof name !== 'string')
+                        return { ok: true, value: undefined };
+                    if (completed.has(name)) {
+                        return { ok: true, value: completed.get(name) };
+                    }
+                    const last = lastIndexByName.get(name);
+                    if (last !== undefined && last >= index) {
+                        return { ok: false, message: laterScriptReadMessage(name) };
+                    }
+                    return { ok: true, value: undefined };
+                },
+            };
+        },
+        recordCompleted(name, value) {
+            completed.set(name, value);
+        },
+    };
+}

package/dist/grant-key.d.ts

@@ -1,8 +1,8 @@
 /**
  * docs/security.md ("Security model"): "Grants are remembered per note, keyed
  * by a hash of the note's full *executable closure* — its inline scripts,
- * `src=` script files, required bundle-local modules, vault-library
- * modules, and the versions of any pack modules it requires. If any of that
+ * `src=` script files, required bundle-local modules, and the versions of
+ * any pack modules it requires. If any of that
  * code changes, the grant is stale and the host re-prompts; otherwise
  * edited shared code would silently inherit grants that were made to
  * different code."
@@ -10,7 +10,7 @@
  * This module is that hash. It is deliberately inert: nothing here parses
  * markdown, reads a file, or touches the network — the host (the piece that
  * already knows how to walk a note's scripts, resolve its `src=` files,
- * follow its `require`s into the bundle and the vault library, and read the
+ * follow its `require`s into the bundle and its packs, and read the
  * installed pack manifest) assembles a `GrantClosure` and hands it in.
  * `@markii/core`'s `ScriptBlock` is NOT imported here on purpose — this
  * package stays independent of the parser layer (see AGENTS.md's import

package/dist/grant-key.js

@@ -1,8 +1,8 @@
 /**
  * docs/security.md ("Security model"): "Grants are remembered per note, keyed
  * by a hash of the note's full *executable closure* — its inline scripts,
- * `src=` script files, required bundle-local modules, vault-library
- * modules, and the versions of any pack modules it requires. If any of that
+ * `src=` script files, required bundle-local modules, and the versions of
+ * any pack modules it requires. If any of that
  * code changes, the grant is stale and the host re-prompts; otherwise
  * edited shared code would silently inherit grants that were made to
  * different code."
@@ -10,7 +10,7 @@
  * This module is that hash. It is deliberately inert: nothing here parses
  * markdown, reads a file, or touches the network — the host (the piece that
  * already knows how to walk a note's scripts, resolve its `src=` files,
- * follow its `require`s into the bundle and the vault library, and read the
+ * follow its `require`s into the bundle and its packs, and read the
  * installed pack manifest) assembles a `GrantClosure` and hands it in.
  * `@markii/core`'s `ScriptBlock` is NOT imported here on purpose — this
  * package stays independent of the parser layer (see AGENTS.md's import

package/dist/index.d.ts

@@ -2,4 +2,5 @@ export { createValueStore, type StoredValue, type ValueStatus, type ValueStore,
 export { FAILURE_KINDS, normalizeFailureKind, type FailureKind, } from './failure.js';
 export { computeGrantKey, type GrantClosure, type GrantClosurePack, type GrantClosureScript, } from './grant-key.js';
 export { createVaultStore, type CreateVaultStoreOptions, type VaultPublishFailure, type VaultPublishResult, type VaultPublishSuccess, type VaultStore, type VaultStoreHandle, type VaultWriter, } from './vault.js';
+export { DEFAULT_DOC_LISTING_LIMITS, EMPTY_DIRECTIVE_LISTING, buildDirectiveListing, createDocViewSource, laterScriptReadMessage, sanitizeText, utf8ByteLength, type DirectiveEntry, type DirectiveForm, type DirectiveListing, type DocListingLimits, type DocValueRead, type DocValueRejection, type DocValueSuccess, type DocView, type DocViewSource, type DocumentContext, type DocumentTreeNode, } from './doc.js';
 export { runDocumentScripts, tierForTrigger, type ExecuteFailure, type ExecuteResult, type ExecuteSuccess, type ExecutionTier, type RunDocumentScriptsOptions, type RunSummary, type RunSummaryEntry, type RunTrigger, type ScriptExecutor, } from './run.js';

package/dist/index.js

@@ -2,4 +2,5 @@ export { createValueStore, } from './store.js';
 export { FAILURE_KINDS, normalizeFailureKind, } from './failure.js';
 export { computeGrantKey, } from './grant-key.js';
 export { createVaultStore, } from './vault.js';
+export { DEFAULT_DOC_LISTING_LIMITS, EMPTY_DIRECTIVE_LISTING, buildDirectiveListing, createDocViewSource, laterScriptReadMessage, sanitizeText, utf8ByteLength, } from './doc.js';
 export { runDocumentScripts, tierForTrigger, } from './run.js';

package/dist/run.d.ts

@@ -1,6 +1,7 @@
 import type { ScriptBlock } from '@markii/core';
+import { type DocumentContext, type DocView } from './doc.js';
 import { type FailureKind } from './failure.js';
-import type { ValueStore } from './store.js';
+import type { StoredValue, ValueStore } from './store.js';
 import type { VaultWriter } from './vault.js';
 /**
  * Slice 2 of the scripting-usability layer (docs/scripting.md): the run
@@ -67,6 +68,19 @@ export type ExecuteResult = ExecuteSuccess | ExecuteFailure;
 export type ScriptExecutor = (input: {
     code: string;
     tier: ExecutionTier;
+    /**
+     * This script's read-only view of the note it lives in (`./doc.ts`,
+     * GitHub issue #33): the note's directives as plain data, and a read of
+     * what the scripts ABOVE this one already produced. Optional so an
+     * executor written before this existed still satisfies the type; every
+     * executor that does expose it must expose it as read-only data and must
+     * turn a rejected `value()` read into an ordinary failed execution.
+     *
+     * It carries no authority and is therefore NOT tier-gated: the same view
+     * is handed to a script under `'auto'` as under `'manual'`, because
+     * everything in it is the note's own content and this run's own values.
+     */
+    doc?: DocView;
 }) => Promise<ExecuteResult>;
 /** One script's outcome from a `runDocumentScripts` batch, in document order. */
 export interface RunSummaryEntry {
@@ -152,6 +166,39 @@ export interface RunDocumentScriptsOptions {
      * (successfully) produced.
      */
     vault?: VaultWriter;
+    /**
+     * Called once per script, immediately after its `StoredValue` was written
+     * to `store` and in the same document order the scripts ran in (GitHub
+     * issue #35). This is the hook a host uses to show a value the moment it
+     * lands rather than at the end of the batch: `runDocumentScripts` runs
+     * scripts sequentially, so by the time the batch resolves, the first
+     * script's number has often been known for seconds.
+     *
+     * Purely observational. It cannot change what is stored, what is
+     * reported, or whether the batch continues: `entry` is a SHALLOW COPY of
+     * the summary entry (so a callback cannot mutate the run's own
+     * bookkeeping, and so it never later grows the publish fields, which are
+     * decided after this point), and anything this callback throws is
+     * swallowed — `runDocumentScripts` never throws, and a host's progress
+     * reporting failing must not cost the user the rest of the run.
+     *
+     * Called for a FAILED script too, with the error `StoredValue` that was
+     * stored for it: a failure is as much a result as a number, and a host
+     * that only heard about successes would leave that script's component
+     * looking like it was still running.
+     */
+    onValue?: (name: string, value: StoredValue, entry: RunSummaryEntry) => void;
+    /**
+     * The note itself, for the `doc` view a script sees (`./doc.ts`). The
+     * caller builds this once from the tree it already parsed to find
+     * `scripts`; this package parses nothing.
+     *
+     * Absent, scripts still get a `doc` view, with an empty listing — the
+     * ORDERING rules `doc.value` enforces do not depend on it, so a host
+     * that never builds a listing still cannot let one script read another
+     * that has not run.
+     */
+    doc?: DocumentContext;
 }
 /**
  * Runs every script block in `scripts`, in document order, against

package/dist/run.js

@@ -1,3 +1,4 @@
+import { createDocViewSource, EMPTY_DIRECTIVE_LISTING, } from './doc.js';
 import { normalizeFailureKind } from './failure.js';
 /**
  * docs/scripting.md's trigger x capability table, expressed as a pure lookup —
@@ -56,7 +57,7 @@ function describeThrown(err) {
  * all, so rewriting every capability-kind auto-tier failure that way was
  * simply wrong).
  */
-async function runOne(script, executor, tier, loadSource) {
+async function runOne(script, executor, tier, loadSource, doc) {
     let code;
     try {
         if (script.src !== undefined) {
@@ -90,7 +91,7 @@ async function runOne(script, executor, tier, loadSource) {
     }
     let result;
     try {
-        result = await executor({ code, tier });
+        result = await executor({ code, tier, doc });
     }
     catch (err) {
         const message = describeThrown(err);
@@ -161,18 +162,43 @@ async function runOne(script, executor, tier, loadSource) {
  * `RunSummary.duplicateNames`.
  */
 export async function runDocumentScripts(options) {
-    const { scripts, executor, trigger, store, loadSource, vault } = options;
+    const { scripts, executor, trigger, store, loadSource, vault, onValue } = options;
     const tier = tierForTrigger(trigger);
+    // GitHub issue #33: one source of `doc` views for the whole batch. Built
+    // unconditionally, even with no `options.doc`, because it also owns the
+    // "a script may only read what ran above it" rule, which is a property
+    // of this loop's ordering rather than of the listing.
+    const docViews = createDocViewSource({
+        directives: options.doc?.directives ?? EMPTY_DIRECTIVE_LISTING,
+        scriptNames: scripts.map((script) => script.name),
+    });
     const results = [];
     const seenNames = new Set();
     const duplicateNames = new Set();
-    for (const script of scripts) {
+    for (const [index, script] of scripts.entries()) {
         if (seenNames.has(script.name)) {
             duplicateNames.add(script.name);
         }
         seenNames.add(script.name);
-        const outcome = await runOne(script, executor, tier, loadSource);
+        const outcome = await runOne(script, executor, tier, loadSource, docViews.viewFor(index));
         store.set(script.name, outcome.storedValue);
+        // GitHub issue #35: the value is announced the instant it is stored,
+        // before publishing and before the batch moves on to the next script,
+        // so a host can render it while the rest of the run is still going.
+        // Guarded because this function's never-throws contract covers
+        // everything a caller supplies, this callback included.
+        if (onValue) {
+            try {
+                onValue(script.name, outcome.storedValue, { ...outcome.entry });
+            }
+            catch {
+                // Deliberately ignored: see `onValue`'s doc comment.
+            }
+        }
+        // Recorded AFTER the run, so a script can never see its own name, and
+        // recorded for a failed run too (as `undefined`), so a later reader
+        // gets nil rather than a refusal blaming it for someone else's error.
+        docViews.recordCompleted(script.name, outcome.storedValue.value);
         // Publishing (docs/scripting.md): only for a block that both asked to
         // publish (bare `publish` on its fence — see `ScriptBlock.publish`) and
         // actually succeeded. A failed run has nothing to publish; `runOne`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@markii/runtime",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "Host-side scripting glue for Mark (.mk.md): a null-proto value store and document-script execution with trigger-tier gating (auto/scheduled stay read-only). Framework-agnostic; the script executor is injected by the host (e.g. @markii/lua).",
   "keywords": [
     "markdown",
@@ -42,6 +42,6 @@
     "lint": "eslint ."
   },
   "dependencies": {
-    "@markii/core": "0.10.0"
+    "@markii/core": "0.12.0"
   }
 }