@markii/runtime 0.11.0 → 0.12.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/grant-key.d.ts +3 -3
- package/dist/grant-key.js +3 -3
- package/package.json +2 -2
package/dist/grant-key.d.ts
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* docs/security.md ("Security model"): "Grants are remembered per note, keyed
|
|
3
3
|
* by a hash of the note's full *executable closure* — its inline scripts,
|
|
4
|
-
* `src=` script files, required bundle-local modules,
|
|
5
|
-
*
|
|
4
|
+
* `src=` script files, required bundle-local modules, and the versions of
|
|
5
|
+
* any pack modules it requires. If any of that
|
|
6
6
|
* code changes, the grant is stale and the host re-prompts; otherwise
|
|
7
7
|
* edited shared code would silently inherit grants that were made to
|
|
8
8
|
* different code."
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
* This module is that hash. It is deliberately inert: nothing here parses
|
|
11
11
|
* markdown, reads a file, or touches the network — the host (the piece that
|
|
12
12
|
* already knows how to walk a note's scripts, resolve its `src=` files,
|
|
13
|
-
* follow its `require`s into the bundle and
|
|
13
|
+
* follow its `require`s into the bundle and its packs, and read the
|
|
14
14
|
* installed pack manifest) assembles a `GrantClosure` and hands it in.
|
|
15
15
|
* `@markii/core`'s `ScriptBlock` is NOT imported here on purpose — this
|
|
16
16
|
* package stays independent of the parser layer (see AGENTS.md's import
|
package/dist/grant-key.js
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* docs/security.md ("Security model"): "Grants are remembered per note, keyed
|
|
3
3
|
* by a hash of the note's full *executable closure* — its inline scripts,
|
|
4
|
-
* `src=` script files, required bundle-local modules,
|
|
5
|
-
*
|
|
4
|
+
* `src=` script files, required bundle-local modules, and the versions of
|
|
5
|
+
* any pack modules it requires. If any of that
|
|
6
6
|
* code changes, the grant is stale and the host re-prompts; otherwise
|
|
7
7
|
* edited shared code would silently inherit grants that were made to
|
|
8
8
|
* different code."
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
* This module is that hash. It is deliberately inert: nothing here parses
|
|
11
11
|
* markdown, reads a file, or touches the network — the host (the piece that
|
|
12
12
|
* already knows how to walk a note's scripts, resolve its `src=` files,
|
|
13
|
-
* follow its `require`s into the bundle and
|
|
13
|
+
* follow its `require`s into the bundle and its packs, and read the
|
|
14
14
|
* installed pack manifest) assembles a `GrantClosure` and hands it in.
|
|
15
15
|
* `@markii/core`'s `ScriptBlock` is NOT imported here on purpose — this
|
|
16
16
|
* package stays independent of the parser layer (see AGENTS.md's import
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@markii/runtime",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.12.1",
|
|
4
4
|
"description": "Host-side scripting glue for Mark (.mk.md): a null-proto value store and document-script execution with trigger-tier gating (auto/scheduled stay read-only). Framework-agnostic; the script executor is injected by the host (e.g. @markii/lua).",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"markdown",
|
|
@@ -42,6 +42,6 @@
|
|
|
42
42
|
"lint": "eslint ."
|
|
43
43
|
},
|
|
44
44
|
"dependencies": {
|
|
45
|
-
"@markii/core": "0.
|
|
45
|
+
"@markii/core": "^0.12.1"
|
|
46
46
|
}
|
|
47
47
|
}
|