@markii/runtime 0.2.0 → 0.3.0

package/dist/failure.d.ts

@@ -1,6 +1,6 @@
 /**
  * The closed, runtime-owned failure taxonomy for a script execution outcome
- * (DESIGN.md §8). This is the ONE vocabulary every concrete `ScriptExecutor`
+ * (docs/scripting.md). This is the ONE vocabulary every concrete `ScriptExecutor`
  * (e.g. `@markii/lua`'s `createLuaExecutor`) is expected to map its own
  * language-specific failure shape down to, and the one vocabulary
  * `@markii/react` (and any other renderer) is expected to branch its

package/dist/grant-key.d.ts

@@ -1,5 +1,5 @@
 /**
- * DESIGN.md §10 ("Security model"): "Grants are remembered per note, keyed
+ * docs/security.md ("Security model"): "Grants are remembered per note, keyed
  * by a hash of the note's full *executable closure* — its inline scripts,
  * `src=` script files, required bundle-local modules, vault-library
  * modules, and the versions of any pack modules it requires. If any of that
@@ -13,7 +13,7 @@
  * follow its `require`s into the bundle and the vault library, and read the
  * installed pack manifest) assembles a `GrantClosure` and hands it in.
  * `@markii/core`'s `ScriptBlock` is NOT imported here on purpose — this
- * package stays independent of the parser layer (see CLAUDE.md's import
+ * package stays independent of the parser layer (see AGENTS.md's import
  * rule); `GrantClosureScript` below is a local structural type that mirrors
  * the fields that matter to the closure.
  *
@@ -113,7 +113,7 @@ export interface GrantClosureScript {
 /**
  * One installed pack's identity, plus its module sources when the host has
  * them. A pack's `version` alone must move the key even if the host never
- * fetched its source — DESIGN.md §10 keys the grant to "the versions of any
+ * fetched its source — docs/security.md keys the grant to "the versions of any
  * pack modules it requires", not only to code the host happens to have
  * bytes for.
  */
@@ -131,7 +131,7 @@ export interface GrantClosurePack {
     modules?: Record<string, string>;
 }
 /**
- * The full executable closure a grant is keyed to (DESIGN.md §10). Every
+ * The full executable closure a grant is keyed to (docs/security.md). Every
  * field here must be populated by the host from whatever it has already
  * resolved; `computeGrantKey` does no resolution of its own.
  */
@@ -153,7 +153,7 @@ export interface GrantClosure {
     packs: GrantClosurePack[];
 }
 /**
- * Computes the grant key for a note's executable closure (DESIGN.md §10):
+ * Computes the grant key for a note's executable closure (docs/security.md):
  * the lowercase hex SHA-256 digest of the closure's canonical serialization
  * — see this module's top doc comment for the exact byte form. Pure and
  * side-effect free: this function does not parse, fetch, or read anything;

package/dist/grant-key.js

@@ -1,5 +1,5 @@
 /**
- * DESIGN.md §10 ("Security model"): "Grants are remembered per note, keyed
+ * docs/security.md ("Security model"): "Grants are remembered per note, keyed
  * by a hash of the note's full *executable closure* — its inline scripts,
  * `src=` script files, required bundle-local modules, vault-library
  * modules, and the versions of any pack modules it requires. If any of that
@@ -13,7 +13,7 @@
  * follow its `require`s into the bundle and the vault library, and read the
  * installed pack manifest) assembles a `GrantClosure` and hands it in.
  * `@markii/core`'s `ScriptBlock` is NOT imported here on purpose — this
- * package stays independent of the parser layer (see CLAUDE.md's import
+ * package stays independent of the parser layer (see AGENTS.md's import
  * rule); `GrantClosureScript` below is a local structural type that mirrors
  * the fields that matter to the closure.
  *
@@ -206,7 +206,7 @@ function toHex(buffer) {
     return hex;
 }
 /**
- * Computes the grant key for a note's executable closure (DESIGN.md §10):
+ * Computes the grant key for a note's executable closure (docs/security.md):
  * the lowercase hex SHA-256 digest of the closure's canonical serialization
  * — see this module's top doc comment for the exact byte form. Pure and
  * side-effect free: this function does not parse, fetch, or read anything;

package/dist/run.d.ts

@@ -3,7 +3,7 @@ import { type FailureKind } from './failure.js';
 import type { ValueStore } from './store.js';
 import type { VaultWriter } from './vault.js';
 /**
- * Slice 2 of the scripting-usability layer (DESIGN.md §8): the run
+ * Slice 2 of the scripting-usability layer (docs/scripting.md): the run
  * orchestrator that executes a document's script blocks and writes their
  * results into the `ValueStore` Slice 1 built. This module never imports a
  * concrete language runtime (no `@markii/lua`, no wasmoon) — it only knows
@@ -13,14 +13,14 @@ import type { VaultWriter } from './vault.js';
  * `runDocumentScripts` without this package ever changing.
  */
 /**
- * How a batch of scripts was invoked — DESIGN.md §8's three triggers:
+ * How a batch of scripts was invoked — docs/scripting.md's three triggers:
  * - `'manual'`    — an explicit run/run-all click.
  * - `'auto'`      — opt-in run-on-open.
  * - `'scheduled'` — opt-in periodic run.
  */
 export type RunTrigger = 'manual' | 'auto' | 'scheduled';
 /**
- * DESIGN.md §8's two-tier capability gate a concrete script executor (e.g.
+ * docs/scripting.md's two-tier capability gate a concrete script executor (e.g.
  * `@markii/lua`'s `runScript`) enforces: `'manual'` unlocks every manifest
  * grant, including effectful ops; `'auto'` is read-only regardless of what
  * was granted.
@@ -81,7 +81,7 @@ export interface RunSummaryEntry {
      */
     failureKind?: FailureKind;
     /**
-     * Publish outcome (DESIGN.md §8's vault). Set ONLY for a script block
+     * Publish outcome (docs/scripting.md's vault). Set ONLY for a script block
      * whose fence carried the bare `publish` attribute (`ScriptBlock.publish
      * === true`) AND whose run succeeded (`status === 'fresh'`) — a
      * non-publish block never gets this field, and a publish-flagged block
@@ -102,7 +102,7 @@ export interface RunSummaryEntry {
  * The result of one `runDocumentScripts` call. `results` has one entry per
  * script block actually run, in document order — including every
  * duplicate-named attempt, not deduplicated. When `scripts` contained
- * repeated `name`s, `duplicateNames` lists which ones; per DESIGN.md §8
+ * repeated `name`s, `duplicateNames` lists which ones; per docs/scripting.md
  * ("`name`s land in one note-scoped value store regardless of position"),
  * the store ends up holding whatever the LAST run for that name produced
  * (document order) — `results` still records every individual attempt.
@@ -123,14 +123,14 @@ export interface RunDocumentScriptsOptions {
     trigger: RunTrigger;
     store: ValueStore;
     /**
-     * Resolves a `src=` long-script reference (DESIGN.md §8) to its Lua
+     * Resolves a `src=` long-script reference (docs/scripting.md) to its Lua
      * source text. Optional: a document with only inline script blocks never
      * needs it. If a block has `src` set and this is not provided, that one
      * block is recorded as an error (never a thrown exception).
      */
     loadSource?: (src: string) => Promise<string> | string;
     /**
-     * The publish grant (DESIGN.md §8: "Publishing requires a grant ...
+     * The publish grant (docs/scripting.md: "Publishing requires a grant ...
      * because it writes beyond the note"). ITS PRESENCE IS THE GRANT — there
      * is no separate flag to enable publishing, and no per-script grant
      * check; a host that hands in a `vault` is thereby authorizing every
@@ -156,7 +156,7 @@ export interface RunDocumentScriptsOptions {
 /**
  * Runs every script block in `scripts`, in document order, against
  * `executor`, and writes each outcome into `store`. This is the RUN PATH:
- * "Rendering is pure; running is an event" (DESIGN.md §8) — this function
+ * "Rendering is pure; running is an event" (docs/scripting.md) — this function
  * is the event. It never throws; a single script failing (bad `src`,
  * `loadSource` throwing, the executor rejecting/throwing, or an ordinary
  * `ok: false` result) is recorded as that one script's error status and the
@@ -165,7 +165,7 @@ export interface RunDocumentScriptsOptions {
  * `trigger` is mapped to an `ExecutionTier` via `tierForTrigger` exactly
  * once, up front, and that same tier is used for every script in the
  * batch — the security gate is applied per batch-invocation, not
- * per-script, matching DESIGN.md §8 (a run is manual, auto, or scheduled as
+ * per-script, matching docs/scripting.md (a run is manual, auto, or scheduled as
  * a whole; individual scripts don't choose their own tier).
  *
  * Publishing (§8's vault): after a `publish`-flagged block's run SUCCEEDS,

package/dist/run.js

@@ -1,6 +1,6 @@
 import { normalizeFailureKind } from './failure.js';
 /**
- * DESIGN.md §8's trigger x capability table, expressed as a pure lookup —
+ * docs/scripting.md's trigger x capability table, expressed as a pure lookup —
  * THIS IS THE SECURITY GATE for the whole run path. `'manual'` is the only
  * trigger that can ever produce the full-grants `'manual'` tier; `'auto'`
  * and `'scheduled'` both map to the read-only `'auto'` tier, unconditionally.
@@ -134,7 +134,7 @@ async function runOne(script, executor, tier, loadSource) {
 /**
  * Runs every script block in `scripts`, in document order, against
  * `executor`, and writes each outcome into `store`. This is the RUN PATH:
- * "Rendering is pure; running is an event" (DESIGN.md §8) — this function
+ * "Rendering is pure; running is an event" (docs/scripting.md) — this function
  * is the event. It never throws; a single script failing (bad `src`,
  * `loadSource` throwing, the executor rejecting/throwing, or an ordinary
  * `ok: false` result) is recorded as that one script's error status and the
@@ -143,7 +143,7 @@ async function runOne(script, executor, tier, loadSource) {
  * `trigger` is mapped to an `ExecutionTier` via `tierForTrigger` exactly
  * once, up front, and that same tier is used for every script in the
  * batch — the security gate is applied per batch-invocation, not
- * per-script, matching DESIGN.md §8 (a run is manual, auto, or scheduled as
+ * per-script, matching docs/scripting.md (a run is manual, auto, or scheduled as
  * a whole; individual scripts don't choose their own tier).
  *
  * Publishing (§8's vault): after a `publish`-flagged block's run SUCCEEDS,
@@ -173,7 +173,7 @@ export async function runDocumentScripts(options) {
         seenNames.add(script.name);
         const outcome = await runOne(script, executor, tier, loadSource);
         store.set(script.name, outcome.storedValue);
-        // Publishing (DESIGN.md §8): only for a block that both asked to
+        // Publishing (docs/scripting.md): only for a block that both asked to
         // publish (bare `publish` on its fence — see `ScriptBlock.publish`) and
         // actually succeeded. A failed run has nothing to publish; `runOne`
         // already recorded its failure in `outcome.entry.status`/`.error`, and

package/dist/store.d.ts

@@ -1,5 +1,5 @@
 /**
- * Slice 1's pure read path (DESIGN.md §8): the note-scoped value store that
+ * Slice 1's pure read path (docs/scripting.md): the note-scoped value store that
  * rendering reads from. Nothing here executes a script, fetches anything,
  * or knows Lua exists — this module only holds whatever a future runner
  * (Slice 2) or a bundle-cache hydration step has already written, keyed by
@@ -36,7 +36,7 @@ export interface StoredValue {
 /**
  * Read/write access to the note-scoped value store. Script blocks "may
  * appear anywhere markdown may... but `name`s land in one note-scoped value
- * store regardless of position" (DESIGN.md §8) — this interface is that
+ * store regardless of position" (docs/scripting.md) — this interface is that
  * store. Rendering only ever calls `get`/`has`/`snapshot`; `set` exists for
  * whatever publishes values into the store (a script runner, a bundle
  * cache-loader) — entirely out of scope for Slice 1.

package/dist/store.js

@@ -1,5 +1,5 @@
 /**
- * Slice 1's pure read path (DESIGN.md §8): the note-scoped value store that
+ * Slice 1's pure read path (docs/scripting.md): the note-scoped value store that
  * rendering reads from. Nothing here executes a script, fetches anything,
  * or knows Lua exists — this module only holds whatever a future runner
  * (Slice 2) or a bundle-cache hydration step has already written, keyed by

package/dist/vault.d.ts

@@ -1,6 +1,6 @@
 import type { StoredValue } from './store.js';
 /**
- * Slice 3 of the scripting-usability layer (DESIGN.md §8, "Vault-published
+ * Slice 3 of the scripting-usability layer (docs/scripting.md, "Vault-published
  * values (the bulletin board)"): the APP-SCOPED store that a `publish`-
  * flagged script block's result lands in, as distinct from `store.ts`'s
  * NOTE-scoped `ValueStore`. "The store is app-side (§9): publishing adds no

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@markii/runtime",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Host-side scripting glue for Mark (.mk.md): a null-proto value store and document-script execution with trigger-tier gating (auto/scheduled stay read-only). Framework-agnostic; the script executor is injected by the host (e.g. @markii/lua).",
   "keywords": [
     "markdown",
@@ -42,6 +42,6 @@
     "lint": "eslint ."
   },
   "dependencies": {
-    "@markii/core": "0.2.0"
+    "@markii/core": "0.3.0"
   }
 }