@omg-dev/protocol 0.6.91 → 0.6.92

package/dist/artifact-document.d.ts

@@ -0,0 +1,5 @@
+export type ArtifactTheme = "light" | "dark";
+/** Preserve the server's artifact sandbox and bridge the host theme into srcDoc. */
+export declare function secureArtifactDocument(html: string, theme?: ArtifactTheme): string;
+export declare function artifactRequestPath(path: string, query?: Record<string, string | number | undefined>): string;
+//# sourceMappingURL=artifact-document.d.ts.map

package/dist/artifact-document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-document.d.ts","sourceRoot":"","sources":["../src/artifact-document.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,CAAC;AAkF7C,oFAAoF;AACpF,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,aAAuB,GAC7B,MAAM,CAoBR;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAM,GACtD,MAAM,CAQR"}

package/dist/artifact-document.js

@@ -0,0 +1,108 @@
+const ARTIFACT_CSP = "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src data:; base-uri 'none'; form-action 'none'";
+const CSP_META = `<meta http-equiv="Content-Security-Policy" content="${ARTIFACT_CSP}">`;
+const ARTIFACT_PALETTES = {
+    light: {
+        background: "#f2f2f7",
+        surface: "#ffffff",
+        foreground: "#000000",
+        muted: "#f9f9fb",
+        "muted-foreground": "rgba(60, 60, 67, 0.6)",
+        border: "rgba(60, 60, 67, 0.12)",
+        accent: "#007aff",
+        "accent-foreground": "#ffffff",
+        "code-background": "rgba(120, 120, 128, 0.08)",
+    },
+    dark: {
+        background: "#000000",
+        surface: "#1c1c1e",
+        foreground: "#ffffff",
+        muted: "#2c2c2e",
+        "muted-foreground": "rgba(235, 235, 245, 0.6)",
+        border: "rgba(84, 84, 88, 0.35)",
+        accent: "#0a84ff",
+        "accent-foreground": "#ffffff",
+        "code-background": "rgba(118, 118, 128, 0.16)",
+    },
+};
+/**
+ * Shorthands for the three tokens artifacts reach for most, published alongside
+ * the canonical names.
+ *
+ * An artifact that guesses `--omg-artifact-bg` gets nothing back and silently
+ * falls through to its own hardcoded fallback — which is how a card ends up
+ * with OMG's dark surfaces and the artifact's light text. Answering the common
+ * guess costs three declarations. `muted-fg` is here because the near miss is
+ * the expensive one: `--omg-artifact-muted` exists but is a *surface*, so text
+ * painted with it disappears into its own background.
+ */
+const ARTIFACT_ALIASES = {
+    bg: "background",
+    fg: "foreground",
+    "muted-fg": "muted-foreground",
+};
+// Token prefixes, new first. Artifacts published before the OMG rename hardcode
+// `--lfg-artifact-*` and are still served from disk by this same bridge, so both
+// prefixes are emitted with identical values — an old card must not lose its
+// theming because the brand changed. New artifacts are told about `--omg-*` only.
+const ARTIFACT_TOKEN_PREFIXES = ["--omg-artifact-", "--lfg-artifact-"];
+/**
+ * Theme bridge for scripted artifacts.
+ *
+ * Static artifacts inherit these values through their shadow host. A sandboxed
+ * frame has its own document, so it receives the same semantic palette as
+ * literal custom properties. This stylesheet is inserted before authored CSS:
+ * an artifact's intentional colors still win, while unstyled/theme-aware
+ * documents follow OMG automatically.
+ */
+function artifactThemeBridge(theme) {
+    const palette = ARTIFACT_PALETTES[theme];
+    const variables = ARTIFACT_TOKEN_PREFIXES.flatMap((prefix) => [
+        ...Object.entries(palette).map(([name, value]) => `${prefix}${name}:${value}`),
+        ...Object.entries(ARTIFACT_ALIASES).map(([alias, name]) => `${prefix}${alias}:${palette[name]}`),
+    ]).join(";");
+    return `<style id="omg-artifact-theme">:root{color-scheme:${theme};${variables}}html,body{background:var(--omg-artifact-surface);color:var(--omg-artifact-foreground)}a{color:var(--omg-artifact-accent)}</style>`;
+}
+/**
+ * Stamp the card's theme where CSS can select on it.
+ *
+ * A card is themed by LFG, not by the desktop, so `prefers-color-scheme` inside
+ * the frame answers the wrong question: a dark card on a light machine renders
+ * the artifact's light branch over dark surfaces. `data-theme` is the marker
+ * artifacts can key on instead, and it matches what the native renderer already
+ * rewrites `:root[data-theme=…]` into for the shadow path.
+ */
+function withThemeAttribute(tag, theme) {
+    if (/\sdata-theme\s*=/i.test(tag))
+        return tag;
+    return `${tag.replace(/\s*\/?>$/, "")} data-theme="${theme}">`;
+}
+/** Preserve the server's artifact sandbox and bridge the host theme into srcDoc. */
+export function secureArtifactDocument(html, theme = "light") {
+    const headContent = `${CSP_META}${artifactThemeBridge(theme)}`;
+    const root = html.match(/<html(?:\s[^>]*)?>/i);
+    const themed = root?.index !== undefined
+        ? `${html.slice(0, root.index)}${withThemeAttribute(root[0], theme)}${html.slice(root.index + root[0].length)}`
+        : html;
+    const head = themed.match(/<head(?:\s[^>]*)?>/i);
+    if (head?.index !== undefined) {
+        const insertAt = head.index + head[0].length;
+        return `${themed.slice(0, insertAt)}${headContent}${themed.slice(insertAt)}`;
+    }
+    const themedRoot = themed.match(/<html(?:\s[^>]*)?>/i);
+    if (themedRoot?.index !== undefined) {
+        const insertAt = themedRoot.index + themedRoot[0].length;
+        return `${themed.slice(0, insertAt)}<head>${headContent}</head>${themed.slice(insertAt)}`;
+    }
+    return `<!doctype html><html data-theme="${theme}"><head>${headContent}</head><body>${themed}</body></html>`;
+}
+export function artifactRequestPath(path, query = {}) {
+    const [base, rawQuery = ""] = path.split("?", 2);
+    const params = new URLSearchParams(rawQuery);
+    for (const [key, value] of Object.entries(query)) {
+        if (value !== undefined)
+            params.set(key, String(value));
+    }
+    const suffix = params.toString();
+    return suffix ? `${base}?${suffix}` : base;
+}
+//# sourceMappingURL=artifact-document.js.map

package/dist/artifact-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-document.js","sourceRoot":"","sources":["../src/artifact-document.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY,GAChB,+HAA+H,CAAC;AAElI,MAAM,QAAQ,GAAG,uDAAuD,YAAY,IAAI,CAAC;AAIzF,MAAM,iBAAiB,GAAkD;IACvE,KAAK,EAAE;QACL,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,SAAS;QAClB,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,SAAS;QAChB,kBAAkB,EAAE,uBAAuB;QAC3C,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE,SAAS;QACjB,mBAAmB,EAAE,SAAS;QAC9B,iBAAiB,EAAE,2BAA2B;KAC/C;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,SAAS;QAClB,UAAU,EAAE,SAAS;QACrB,KAAK,EAAE,SAAS;QAChB,kBAAkB,EAAE,0BAA0B;QAC9C,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE,SAAS;QACjB,mBAAmB,EAAE,SAAS;QAC9B,iBAAiB,EAAE,2BAA2B;KAC/C;CACF,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,gBAAgB,GAA2B;IAC/C,EAAE,EAAE,YAAY;IAChB,EAAE,EAAE,YAAY;IAChB,UAAU,EAAE,kBAAkB;CAC/B,CAAC;AAEF,gFAAgF;AAChF,iFAAiF;AACjF,6EAA6E;AAC7E,kFAAkF;AAClF,MAAM,uBAAuB,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,CAAU,CAAC;AAEhF;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5D,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;QAC9E,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;KACjG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,qDAAqD,KAAK,IAAI,SAAS,oIAAoI,CAAC;AACrN,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,GAAW,EAAE,KAAoB;IAC3D,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC9C,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,gBAAgB,KAAK,IAAI,CAAC;AACjE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,KAAK,GAAkB,OAAO;IAE9B,MAAM,WAAW,GAAG,GAAG,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK,KAAK,SAAS;QACtC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;QAC/G,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACjD,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7C,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACvD,IAAI,UAAU,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACzD,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,WAAW,UAAU,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5F,CAAC;IAED,OAAO,oCAAoC,KAAK,WAAW,WAAW,gBAAgB,MAAM,gBAAgB,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,KAAK,GAAgD,EAAE;IAEvD,MAAM,CAAC,IAAI,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IACjC,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omg-dev/protocol",
-  "version": "0.6.91",
+  "version": "0.6.92",
   "description": "Typed public protocol for OMG sessions and live streams.",
   "license": "MIT",
   "homepage": "https://omg.dev",