@pipelex/mthds-form 0.7.0 → 0.9.0

package/dist/core/native-content.d.ts

@@ -184,14 +184,50 @@ declare function isNativeCompositeNode(node: {
 declare function readDateContent(value: unknown): DateContentView | undefined;
 /** `{date}` / `{date, time}` as one line, which is how both are read aloud. */
 declare function formatDateContent(content: DateContentView): string;
+/** What a `data:` URL says about the bytes it carries. */
+interface DataUrlView {
+    /** Lowercased, without its parameters; `text/plain` when the URL declares none. */
+    mediaType: string;
+    /** The size of the DECODED payload, in bytes. */
+    bytes: number;
+}
+/**
+ * A `data:` URL's media type and decoded size, or `undefined` for any other URL.
+ *
+ * A host that encodes a picked file in the browser writes the file itself into
+ * the value's `url`, so a thirty-kilobyte PDF is a forty-thousand-character
+ * string, and printed where a reference would be it tells a person nothing. Its
+ * type and its size are what they can read.
+ *
+ * The size is COUNTED rather than decoded. A base64 payload's size follows from
+ * how many symbols it holds, and decoding a megabyte to measure it would be the
+ * frozen main thread {@link stripUrlWhitespace} is written to avoid. This is a
+ * reading for display, not a gate: whether the URL may be painted is still
+ * {@link viewableUrl}'s answer alone.
+ */
+declare function readDataUrl(candidate: string): DataUrlView | undefined;
 /**
- * Whether a browser can paint this URL as-is.
+ * The URL a browser can paint, normalised — or `undefined` when there is none.
  *
- * A `pipelex-storage://` reference cannot be resolved client-side — that is the
- * upload seam's job (see [../../docs/upload-seam.md]) — so a renderer with no
- * resolver must show the reference rather than a broken `<img>`. `file:` is
- * deliberately NOT viewable: a run on a developer's machine writes one, and a
- * browser refuses to load it from a page served over http.
+ * **The string this returns is the string a sink must use.** That is the whole
+ * point of returning one rather than answering yes or no: the gate judges a
+ * normalised URL, so handing the caller back the raw member would let the two
+ * diverge again on exactly the whitespace the parser strips.
+ *
+ * The gate parses rather than prefix-matches, and branches on the protocol the
+ * parser reports:
+ *
+ * - `http:` and `https:` are viewable.
+ * - `blob:` is viewable. A blob URL is bound to the origin that minted it, so a
+ *   payload cannot forge one that points anywhere else.
+ * - `data:` is viewable only for a media type in {@link VIEWABLE_DATA_MEDIA_TYPES}.
+ *   `data:text/html` is a document at the EMBEDDING page's own origin, which is
+ *   what made an unsandboxed frame over a payload URL a real hole.
+ * - Everything else is not: `javascript:`, `file:` (a run on a developer's
+ *   machine writes one, and a browser refuses to load it from an http page) and
+ *   `pipelex-storage://`, which cannot be resolved client-side at all — that is
+ *   the upload seam's job (see [../../docs/upload-seam.md]), and a renderer with
+ *   no resolver must show the reference rather than a broken `<img>`.
  *
  * **A root-relative path counts**, and leaving it out was a real bug rather
  * than an omission. A host's URL resolver naturally hands back a path on its
@@ -201,8 +237,19 @@ declare function formatDateContent(content: DateContentView): string;
  * away and the arms fell back to the payload's `public_url`: a presigned URL
  * that had already expired. The image stayed broken with the fix in place.
  *
- * `//host/path` is deliberately excluded. It is protocol-relative, so it points
- * at another origin while looking like a path.
+ * A path is rejected when it is protocol-relative — `//host/x`, and the two
+ * backslash spellings the parser reads the same way (`\\host\x`, `/\host/x`) —
+ * and then checked against the sentinel as well. An accepted path is returned
+ * relative, because making it absolute against a sentinel would point it at
+ * nowhere.
+ */
+declare function viewableUrl(candidate: string | undefined): string | undefined;
+/**
+ * Whether a browser can paint this URL as-is — {@link viewableUrl} as a guard.
+ *
+ * Prefer `viewableUrl` wherever the URL is then USED: this answers the question
+ * without handing back the normalised string, so a caller that acts on the raw
+ * candidate acts on a string the gate did not judge.
  */
 declare function isViewableUrl(url: string | undefined): url is string;
 /**
@@ -216,4 +263,4 @@ declare const TYPED_SCALAR_MARKERS: readonly ["__class__", "__module__"];
 /** Whether a record carries the typed-scalar markers. Informational. */
 declare function hasTypedScalarMarkers(value: unknown): boolean;
 
-export { type CompositeMember, type DateContentView, type DocumentContentView, type HtmlContentView, type ImageContentView, NATIVE_COMPOSITE_CONCEPT_REF, NATIVE_DATE_CONCEPT_REF, NATIVE_HTML_CONCEPT_REF, TYPED_SCALAR_MARKERS, formatDateContent, hasTypedScalarMarkers, isNativeCompositeNode, isNativeDateNode, isNativeHtmlNode, isViewableUrl, readCompositeContent, readDateContent, readDocumentContent, readHtmlContent, readImageContent };
+export { type CompositeMember, type DataUrlView, type DateContentView, type DocumentContentView, type HtmlContentView, type ImageContentView, NATIVE_COMPOSITE_CONCEPT_REF, NATIVE_DATE_CONCEPT_REF, NATIVE_HTML_CONCEPT_REF, TYPED_SCALAR_MARKERS, formatDateContent, hasTypedScalarMarkers, isNativeCompositeNode, isNativeDateNode, isNativeHtmlNode, isViewableUrl, readCompositeContent, readDataUrl, readDateContent, readDocumentContent, readHtmlContent, readImageContent, viewableUrl };

package/dist/core/native-content.js

@@ -1,4 +1,4 @@
-export { NATIVE_COMPOSITE_CONCEPT_REF, NATIVE_DATE_CONCEPT_REF, NATIVE_HTML_CONCEPT_REF, TYPED_SCALAR_MARKERS, formatDateContent, hasTypedScalarMarkers, isNativeCompositeNode, isNativeDateNode, isNativeHtmlNode, isViewableUrl, readCompositeContent, readDateContent, readDocumentContent, readHtmlContent, readImageContent } from '../chunk-45C2MKK6.js';
+export { NATIVE_COMPOSITE_CONCEPT_REF, NATIVE_DATE_CONCEPT_REF, NATIVE_HTML_CONCEPT_REF, TYPED_SCALAR_MARKERS, formatDateContent, hasTypedScalarMarkers, isNativeCompositeNode, isNativeDateNode, isNativeHtmlNode, isViewableUrl, readCompositeContent, readDataUrl, readDateContent, readDocumentContent, readHtmlContent, readImageContent, viewableUrl } from '../chunk-AZZAAGNX.js';
 import '../chunk-V3OV2XQT.js';
 //# sourceMappingURL=native-content.js.map
 //# sourceMappingURL=native-content.js.map

package/dist/core/output-form.js

@@ -1,5 +1,5 @@
-export { getPipeOutputForm } from '../chunk-IIU3YK4O.js';
-import '../chunk-XYQ7NXQZ.js';
+export { getPipeOutputForm } from '../chunk-DARLDVJM.js';
+import '../chunk-WYH56SOZ.js';
 import '../chunk-V3OV2XQT.js';
 //# sourceMappingURL=output-form.js.map
 //# sourceMappingURL=output-form.js.map

package/dist/core/stuff-files.js

@@ -1,5 +1,5 @@
-export { collectStuffFiles } from '../chunk-4BSBBG2T.js';
-import '../chunk-45C2MKK6.js';
+export { collectStuffFiles } from '../chunk-S4CB423P.js';
+import '../chunk-AZZAAGNX.js';
 import '../chunk-V3OV2XQT.js';
 //# sourceMappingURL=stuff-files.js.map
 //# sourceMappingURL=stuff-files.js.map

package/dist/core/values.js

@@ -1,11 +1,11 @@
-export { apiInputsFromRunValues, fieldsForContract, inputDataFromWorkingMemory, outputsFromPipeOutput, rjsfDataFromRunValues, runValuesFromStore, setValueAtPath, storeInputDataFromRunValues } from '../chunk-T4NSAGOS.js';
-import '../chunk-J4L32LD6.js';
+export { apiInputsFromRunValues, fieldsForContract, inputDataFromWorkingMemory, outputsFromPipeOutput, rjsfDataFromRunValues, runValuesFromStore, setValueAtPath, storeInputDataFromRunValues } from '../chunk-YABRYTQ4.js';
+import '../chunk-KIEOLP2L.js';
 import '../chunk-2JWRG53S.js';
 import '../chunk-GCXV76WU.js';
 import '../chunk-PM55AHRO.js';
 import '../chunk-GKV77RAS.js';
 import '../chunk-OD3VYXUY.js';
-import '../chunk-XYQ7NXQZ.js';
+import '../chunk-WYH56SOZ.js';
 import '../chunk-V3OV2XQT.js';
 //# sourceMappingURL=values.js.map
 //# sourceMappingURL=values.js.map

package/dist/field-renderer-BSU2hMf6.d.ts

@@ -0,0 +1,34 @@
+import * as react from 'react';
+import { RunField } from './core/descriptor.js';
+
+/**
+ * Ambient state that any field in the tree may need, threaded unchanged through
+ * the recursion so containers don't have to re-plumb it for every child.
+ */
+interface FieldEnv {
+    disabled?: boolean;
+    /** A file field asks its parent to upload; the parent sets the value later. */
+    onDropFile?: (id: string, file: File) => void;
+    /** Ids currently mid-upload. */
+    uploadingIds?: ReadonlySet<string>;
+    /** Resolve a `pipelex-storage://` URI to a browser-viewable URL (for previews
+     *  of already-stored files). */
+    resolveUrl?: (uri: string) => Promise<string | null>;
+}
+interface FieldRendererProps {
+    field: RunField;
+    value: unknown;
+    onChange: (value: unknown) => void;
+    /** Unique, stable id used for label linkage and upload tracking. */
+    id: string;
+    error?: string;
+    env?: FieldEnv;
+}
+/**
+ * The single dispatch point: a normalized `RunField` → the matching control.
+ * Object and list fields recurse back through here, so the whole form is one
+ * data-driven tree with no per-type branching anywhere else.
+ */
+declare function FieldRenderer({ field, value, onChange, id, error, env }: FieldRendererProps): react.JSX.Element;
+
+export { type FieldEnv as F, FieldRenderer as a, type FieldRendererProps as b };