@render-policy/mermaid 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 render-policy contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,45 @@
+# @render-policy/mermaid
+
+Strict Mermaid diagrams for [`@render-policy/core`](../core). Models emit ```mermaid blocks all
+the time; rendering them is the one place where "sanitize the Markdown" is not enough, because
+the diagram library itself produces markup from untrusted text.
+
+```ts
+import { createRenderer } from '@render-policy/core';
+import { createMermaidTransform } from '@render-policy/mermaid';
+import mermaid from 'mermaid';
+
+const renderer = createRenderer({
+  transforms: [createMermaidTransform({ mermaid, config: { theme: 'neutral' } })],
+});
+renderer.renderMarkdownInto(element, message.content);
+```
+
+What the transform guarantees, whatever the diagram source says:
+
+- mermaid runs with `securityLevel: 'strict'`, no HTML labels (so no `foreignObject`), no error
+  diagram injected into the page, nothing rendered on load; `config` cannot override these;
+- the SVG mermaid produced goes through an SVG-only sanitizer: no `<a>`, `<script>`,
+  `<foreignObject>`, `<image>`, `<use>` or animations, no `href`, no `data-*`, no stylesheet or
+  inline style that imports, fetches an external `url()` or targets `:host`; the root `<svg>`
+  gets a fixed style;
+- the result lives in a shadow root inside a `contain: paint` wrapper: the diagram's stylesheet
+  cannot reach the host page, the host page's CSS does not break the diagram, and nothing inside
+  can overlay the page;
+- the original code block stays as the wrapper's light DOM, so streaming keeps a finished
+  diagram in place, and a block whose fence is still open is left as code until it closes;
+- a diagram that fails to parse stays a code block, and the failure is journaled through
+  `onDecision`, with codes `diagram-render-failed`, `diagram-element-not-allowed`,
+  `diagram-attribute-not-allowed`, `diagram-style-escapes` and `diagram-root-not-svg`.
+
+Renders are cached by source (`cacheSize`, default 50). Diagram languages other than
+`mermaid` can be mapped with `languages`.
+
+Bring your own mermaid (peer dependency, 11 or later) and load it lazily if bundle size
+matters; the transform only needs `initialize` and `render`. The browser proof in
+`e2e/run.mjs` runs the real mermaid in Chromium against click handlers, label injection,
+`themeCSS` directives, positioning through `classDef`, invalid input and streaming.
+
+Works with mermaid 11 and 12. Mermaid 12 lays diagrams out with ELK by default and recolours
+them; pass `config: { layout: 'dagre', theme: 'default', look: 'classic' }` to keep the mermaid 11
+look. The strict settings win over `config` either way.

package/dist/index.d.ts

@@ -0,0 +1,54 @@
+import { type FragmentTransform, type RenderDecision, type RenderWindow } from '@render-policy/core';
+/** The part of the mermaid API this package uses. Pass the real `mermaid` default export. */
+export interface MermaidLike {
+    initialize(config: Record<string, unknown>): void;
+    render(id: string, text: string): Promise<{
+        readonly svg: string;
+    }>;
+}
+export interface MermaidTransformOptions {
+    /** The mermaid module (`import mermaid from 'mermaid'`). Loaded lazily by you, not by this package. */
+    readonly mermaid: MermaidLike;
+    /** The window to sanitize with. Defaults to the global window. */
+    readonly window?: RenderWindow;
+    /** Extra mermaid configuration (theme, fonts). The strict settings below always win. */
+    readonly config?: Record<string, unknown>;
+    /** Code block languages rendered as diagrams. Default ['mermaid']. */
+    readonly languages?: readonly string[];
+    /** Receives a decision for every diagram that failed to render or lost content to sanitization. */
+    readonly onDecision?: (decision: RenderDecision) => void;
+    /** Upper bound of the source -> SVG cache. Default 50. */
+    readonly cacheSize?: number;
+}
+/**
+ * Settings the diagram source cannot change: no HTML labels (so no foreignObject), no click
+ * handlers or links, no error diagram injected into the page, nothing rendered on load.
+ */
+export declare const STRICT_MERMAID_CONFIG: Readonly<Record<string, unknown>>;
+/** Class names of the wrapper and the shadow host, for styling. */
+export declare const DIAGRAM_CLASS = "rp-diagram";
+export declare const DIAGRAM_HOST_CLASS = "rp-diagram-host";
+export interface DiagramSanitizeResult {
+    readonly fragment: DocumentFragment;
+    readonly decisions: readonly RenderDecision[];
+}
+/**
+ * Sanitize an SVG string produced by mermaid into a fragment that can only draw.
+ * Exported for tests and for hosts that render diagrams themselves.
+ */
+export declare function createDiagramSanitizer(win: RenderWindow): (svg: string) => DiagramSanitizeResult;
+/**
+ * A fragment transform for createRenderer({ transforms }) that turns
+ * ```mermaid code blocks into diagrams:
+ *
+ * - mermaid runs in `securityLevel: 'strict'` without HTML labels, whatever `config` says;
+ * - the SVG goes through an SVG-only sanitizer: no links, scripts, foreignObject, images,
+ *   external references or animations, no stylesheet that imports, fetches or escapes;
+ * - the result lives in a shadow root inside a `contain: paint` wrapper, so the diagram's
+ *   own styles cannot reach the host page and the host page's styles do not break the diagram;
+ * - the wrapper keeps the original code block as light DOM: streaming keeps a finished diagram
+ *   in place, and a block whose fence is still open is left as code until it closes;
+ * - a diagram that fails to parse stays a code block; nothing is injected into <body>.
+ */
+export declare function createMermaidTransform(options: MermaidTransformOptions): FragmentTransform;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEpH,6FAA6F;AAC7F,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAClD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,uBAAuB;IACtC,uGAAuG;IACvG,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,wFAAwF;IACxF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,sEAAsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,mGAAmG;IACnG,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,CAAC;IACzD,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASlE,CAAC;AAEH,mEAAmE;AACnE,eAAO,MAAM,aAAa,eAAe,CAAC;AAC1C,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AA2BpD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;CAC/C;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,qBAAqB,CAwChG;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,iBAAiB,CA2E1F"}

package/dist/index.js

@@ -0,0 +1,196 @@
+import createDOMPurify, {} from 'dompurify';
+import { resolveWindow } from '@render-policy/core';
+/**
+ * Settings the diagram source cannot change: no HTML labels (so no foreignObject), no click
+ * handlers or links, no error diagram injected into the page, nothing rendered on load.
+ */
+export const STRICT_MERMAID_CONFIG = Object.freeze({
+    startOnLoad: false,
+    securityLevel: 'strict',
+    htmlLabels: false,
+    flowchart: Object.freeze({ htmlLabels: false }),
+    class: Object.freeze({ htmlLabels: false }),
+    state: Object.freeze({ htmlLabels: false }),
+    er: Object.freeze({ htmlLabels: false }),
+    suppressErrorRendering: true,
+});
+/** Class names of the wrapper and the shadow host, for styling. */
+export const DIAGRAM_CLASS = 'rp-diagram';
+export const DIAGRAM_HOST_CLASS = 'rp-diagram-host';
+const SVG_CONFIG = {
+    USE_PROFILES: { svg: true, svgFilters: true },
+    ADD_TAGS: ['style'],
+    ADD_ATTR: ['role'], // accessibility: mermaid marks the root as a graphics document
+    // Links, embedded documents, external references and animations have no place in a diagram
+    // produced from untrusted text.
+    FORBID_TAGS: ['foreignObject', 'script', 'a', 'image', 'use', 'set', 'animate', 'animateMotion', 'animateTransform', 'feImage'],
+    FORBID_ATTR: ['href', 'xlink:href', 'ping', 'formaction'],
+    ALLOW_DATA_ATTR: false,
+    ALLOW_UNKNOWN_PROTOCOLS: false,
+    KEEP_CONTENT: false,
+    RETURN_DOM_FRAGMENT: true,
+};
+/** `url(#marker)` is a reference into the SVG itself; anything else in CSS is a fetch. */
+const EXTERNAL_URL_RE = /url\((?!\s*['"]?#)/i;
+/**
+ * CSS that could reach outside the diagram: imports and legacy script hooks, and `:host`,
+ * the one selector a shadow tree can aim at its host. Positioning is not on the list: SVG
+ * graphics ignore it, the root <svg> gets a fixed style below, and the wrapper's
+ * `contain: paint` confines whatever is left.
+ */
+const DANGEROUS_CSS_RE = /@import|expression\(|:host|behavior\s*:|-moz-binding/i;
+const ROOT_SVG_STYLE = 'display:block;max-width:100%;height:auto';
+/**
+ * Sanitize an SVG string produced by mermaid into a fragment that can only draw.
+ * Exported for tests and for hosts that render diagrams themselves.
+ */
+export function createDiagramSanitizer(win) {
+    const purify = createDOMPurify(win);
+    return (svg) => {
+        const decisions = [];
+        const fragment = purify.sanitize(svg, { ...SVG_CONFIG, RETURN_DOM_FRAGMENT: true });
+        // DOMPurify resets `removed` on every sanitize() call, so this is exactly this call's list.
+        for (const removed of purify.removed) {
+            if ('element' in removed && removed.element) {
+                const tag = (removed.element.nodeName ?? '').toLowerCase();
+                if (tag === 'body' || tag === 'html' || tag === 'head')
+                    continue; // parser scaffolding, not content
+                decisions.push({ kind: 'blocked', subject: 'element', code: 'diagram-element-not-allowed', reason: 'element is not allowed in a diagram', tag });
+            }
+            else if ('attribute' in removed && removed.attribute) {
+                decisions.push({ kind: 'blocked', subject: 'attribute', code: 'diagram-attribute-not-allowed', reason: 'attribute is not allowed in a diagram', tag: (removed.from?.nodeName ?? '').toLowerCase(), attribute: removed.attribute.name, value: removed.attribute.value });
+            }
+        }
+        for (const style of Array.from(fragment.querySelectorAll('style'))) {
+            const css = style.textContent ?? '';
+            if (EXTERNAL_URL_RE.test(css) || DANGEROUS_CSS_RE.test(css)) {
+                style.remove();
+                decisions.push({ kind: 'blocked', subject: 'element', code: 'diagram-style-escapes', reason: 'diagram stylesheet references external resources or escapes the diagram', tag: 'style' });
+            }
+        }
+        for (const element of Array.from(fragment.querySelectorAll('[style]'))) {
+            const css = element.getAttribute('style') ?? '';
+            if (EXTERNAL_URL_RE.test(css) || DANGEROUS_CSS_RE.test(css)) {
+                element.removeAttribute('style');
+                decisions.push({ kind: 'blocked', subject: 'attribute', code: 'diagram-style-escapes', reason: 'inline style references external resources or escapes the diagram', tag: element.nodeName.toLowerCase(), attribute: 'style', value: css });
+            }
+        }
+        for (const root of Array.from(fragment.children)) {
+            if (root.nodeName.toLowerCase() === 'svg') {
+                root.setAttribute('style', ROOT_SVG_STYLE);
+            }
+            else {
+                root.remove();
+                decisions.push({ kind: 'blocked', subject: 'element', code: 'diagram-root-not-svg', reason: 'only an <svg> root is allowed in a diagram', tag: root.nodeName.toLowerCase() });
+            }
+        }
+        return { fragment, decisions };
+    };
+}
+/**
+ * A fragment transform for createRenderer({ transforms }) that turns
+ * ```mermaid code blocks into diagrams:
+ *
+ * - mermaid runs in `securityLevel: 'strict'` without HTML labels, whatever `config` says;
+ * - the SVG goes through an SVG-only sanitizer: no links, scripts, foreignObject, images,
+ *   external references or animations, no stylesheet that imports, fetches or escapes;
+ * - the result lives in a shadow root inside a `contain: paint` wrapper, so the diagram's
+ *   own styles cannot reach the host page and the host page's styles do not break the diagram;
+ * - the wrapper keeps the original code block as light DOM: streaming keeps a finished diagram
+ *   in place, and a block whose fence is still open is left as code until it closes;
+ * - a diagram that fails to parse stays a code block; nothing is injected into <body>.
+ */
+export function createMermaidTransform(options) {
+    const win = resolveWindow(options.window, '@render-policy/mermaid');
+    const sanitize = createDiagramSanitizer(win);
+    const languages = new Set(options.languages ?? ['mermaid']);
+    const cacheSize = options.cacheSize ?? 50;
+    const cache = new Map();
+    let initialized = false;
+    let counter = 0;
+    const emit = (decisions) => {
+        if (!options.onDecision)
+            return;
+        for (const decision of decisions)
+            options.onDecision(decision);
+    };
+    const ensureInitialized = () => {
+        if (initialized)
+            return;
+        options.mermaid.initialize({ ...(options.config ?? {}), ...STRICT_MERMAID_CONFIG });
+        initialized = true;
+    };
+    const renderSource = (source) => {
+        const cached = cache.get(source);
+        if (cached)
+            return cached;
+        counter += 1;
+        const promise = (async () => {
+            ensureInitialized();
+            let svg;
+            try {
+                svg = (await options.mermaid.render(`rp-mermaid-${counter}`, source)).svg;
+            }
+            catch (error) {
+                emit([{ kind: 'blocked', subject: 'markdown', code: 'diagram-render-failed', reason: `Mermaid could not render the diagram: ${error instanceof Error ? error.message.split('\n')[0] : String(error)}` }]);
+                return null;
+            }
+            const result = sanitize(svg);
+            emit(result.decisions);
+            return result;
+        })();
+        if (cache.size >= cacheSize) {
+            const oldest = cache.keys().next().value;
+            if (oldest !== undefined)
+                cache.delete(oldest);
+        }
+        cache.set(source, promise);
+        return promise;
+    };
+    return (fragment, context) => {
+        const blocks = Array.from(fragment.querySelectorAll('pre > code')).filter((code) => languages.has(languageOf(code)));
+        if (blocks.length === 0)
+            return;
+        const allPre = fragment.querySelectorAll('pre');
+        const lastPre = allPre[allPre.length - 1] ?? null;
+        const doc = context.document;
+        for (const code of blocks) {
+            const pre = code.parentElement;
+            if (!pre)
+                continue;
+            if (context.openFenceAtEnd && pre === lastPre)
+                continue; // still being typed
+            const source = code.textContent ?? '';
+            const wrapper = doc.createElement('div');
+            wrapper.className = DIAGRAM_CLASS;
+            wrapper.setAttribute('style', 'display:block;contain:paint');
+            const host = doc.createElement('div');
+            host.className = DIAGRAM_HOST_CLASS;
+            pre.replaceWith(wrapper);
+            wrapper.append(host);
+            host.append(pre); // light DOM: the source, hidden by the shadow root, compared by patchChildren
+            const shadow = host.attachShadow({ mode: 'open' });
+            shadow.append(fallback(doc, source));
+            void renderSource(source).then((result) => {
+                if (!result)
+                    return;
+                shadow.replaceChildren(result.fragment.cloneNode(true));
+            });
+        }
+    };
+}
+function languageOf(code) {
+    for (const token of (code.getAttribute('class') ?? '').split(/\s+/)) {
+        if (token.startsWith('language-'))
+            return token.slice('language-'.length);
+    }
+    return '';
+}
+function fallback(doc, source) {
+    const pre = doc.createElement('pre');
+    const code = doc.createElement('code');
+    code.textContent = source;
+    pre.append(code);
+    return pre;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,EAAE,EAAe,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,aAAa,EAAkE,MAAM,qBAAqB,CAAC;AAuBpH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAsC,MAAM,CAAC,MAAM,CAAC;IACpF,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,QAAQ;IACvB,UAAU,EAAE,KAAK;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC3C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC3C,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACxC,sBAAsB,EAAE,IAAI;CAC7B,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEpD,MAAM,UAAU,GAAW;IACzB,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;IAC7C,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,+DAA+D;IACnF,2FAA2F;IAC3F,gCAAgC;IAChC,WAAW,EAAE,CAAC,eAAe,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,SAAS,CAAC;IAC/H,WAAW,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC;IACzD,eAAe,EAAE,KAAK;IACtB,uBAAuB,EAAE,KAAK;IAC9B,YAAY,EAAE,KAAK;IACnB,mBAAmB,EAAE,IAAI;CAC1B,CAAC;AAEF,0FAA0F;AAC1F,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAC9C;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,uDAAuD,CAAC;AACjF,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAOlE;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAiB;IACtD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,4FAA4F;QAC5F,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,SAAS,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC5C,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC3D,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM;oBAAE,SAAS,CAAC,kCAAkC;gBACpG,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,qCAAqC,EAAE,GAAG,EAAE,CAAC,CAAC;YACnJ,CAAC;iBAAM,IAAI,WAAW,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvD,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,+BAA+B,EAAE,MAAM,EAAE,uCAAuC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1Q,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACnE,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC;YACpC,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,KAAK,CAAC,MAAM,EAAE,CAAC;gBACf,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,yEAAyE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1L,CAAC;QACH,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBACjC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,mEAAmE,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7O,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;gBAC1C,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,4CAA4C,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAChL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiD,CAAC;IACvE,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,MAAM,IAAI,GAAG,CAAC,SAAoC,EAAQ,EAAE;QAC1D,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,OAAO;QAChC,KAAK,MAAM,QAAQ,IAAI,SAAS;YAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,GAAS,EAAE;QACnC,IAAI,WAAW;YAAE,OAAO;QACxB,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,qBAAqB,EAAE,CAAC,CAAC;QACpF,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,MAAc,EAAyC,EAAE;QAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,OAAO,IAAI,CAAC,CAAC;QACb,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,iBAAiB,EAAE,CAAC;YACpB,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,yCAAyC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC1M,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,IAAI,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACzC,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC;YAC/B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,OAAO,CAAC,cAAc,IAAI,GAAG,KAAK,OAAO;gBAAE,SAAS,CAAC,oBAAoB;YAE7E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC;YAClC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,SAAS,GAAG,kBAAkB,CAAC;YACpC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,8EAA8E;YAChG,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;YAErC,KAAK,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACxC,IAAI,CAAC,MAAM;oBAAE,OAAO;gBACpB,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAa,EAAE,MAAc;IAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC;IAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@render-policy/mermaid",
+  "version": "0.1.0",
+  "description": "Strict Mermaid diagrams for @render-policy/core: rendered in securityLevel strict without HTML labels, sanitized as SVG, isolated in a shadow root.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  },
+  "peerDependencies": {
+    "@render-policy/core": "^0.1.0",
+    "mermaid": ">=11.0.0"
+  },
+  "devDependencies": {
+    "@render-policy/core": "^0.1.0",
+    "mermaid": "^12.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "mermaid",
+    "diagram",
+    "sanitize",
+    "xss",
+    "markdown",
+    "llm",
+    "agent",
+    "security"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/shteynu/render-policy.git",
+    "directory": "packages/mermaid"
+  }
+}