@samva/markup 0.5.0 → 0.7.0

package/dist/{css-DoNc7CiC.d.ts → css-COcFOT1y.d.ts}

@@ -1,5 +1,5 @@
-import { r as EmailDiagnostic } from "./diagnostics-eFM9A_TU.js";
-import { m as EmailNode } from "./elements-ChJULZlh.js";
+import { r as EmailDiagnostic } from "./diagnostics-BMYtBCQk.js";
+import { m as EmailNode } from "./elements-BzjjnoCS.js";
 import "css-tree";
 //#region src/email/selectors.d.ts
 type EmailElementNode = Extract<EmailNode, {
@@ -80,4 +80,4 @@ declare const parseStylesheet: (source: string, options?: {
 }) => Stylesheet;
 //#endregion
 export { compileSelector as a, CompiledSelector as c, matchesSelector as d, Stylesheet as i, Compound as l, CssRule as n, parseStylesheet as o, Specificity as r, Ancestry as s, CssDeclaration as t, classListOf as u };
-//# sourceMappingURL=css-DoNc7CiC.d.ts.map
+//# sourceMappingURL=css-COcFOT1y.d.ts.map

package/dist/{diagnostics-eFM9A_TU.d.ts → diagnostics-BMYtBCQk.d.ts}

@@ -1,4 +1,4 @@
-import { i as JsxSourceLocation } from "./source-locations-D6Te6Gy1.js";
+import { i as JsxSourceLocation } from "./source-locations-DrCM82Ym.js";
 //#region src/email/diagnostics.d.ts
 type EmailDiagnosticSeverity = "error" | "warning" | "info";
 /** What the emitted document establishes beyond the client feature matrix. */
@@ -43,4 +43,4 @@ declare const formatEmailDiagnostic: (diagnostic: EmailDiagnostic) => string;
 declare const hasBlockingDiagnostic: (diagnostics: readonly EmailDiagnostic[]) => boolean;
 //#endregion
 export { formatEmailDiagnostic as a, EmailDiagnosticSeverity as i, EmailCompileError as n, hasBlockingDiagnostic as o, EmailDiagnostic as r, EmailCompatibilityAssessment as t };
-//# sourceMappingURL=diagnostics-eFM9A_TU.d.ts.map
+//# sourceMappingURL=diagnostics-BMYtBCQk.d.ts.map

package/dist/{diagnostics-CqepLcpI.d.ts → diagnostics-OcQKQYSY.d.ts}

@@ -40,8 +40,10 @@ declare const lineColumn: (lineMap: ReadonlyArray<number>, offset: number) => {
   readonly line: number;
   readonly column: number;
 };
+/** Build one formatter for a batch of diagnostics against the same source. */
+declare const createDiagnosticFormatter: (source: string) => ((diagnostic: Diagnostic) => string);
 /** "line 12:8 unknown class ..." — the shape agents iterate on. */
 declare const formatDiagnostic: (source: string, diagnostic: Diagnostic) => string;
 //#endregion
-export { Span as a, lineColumn as c, SmlParseError as i, DiagnosticRepair as n, buildLineMap as o, SmlCompileError as r, formatDiagnostic as s, Diagnostic as t };
-//# sourceMappingURL=diagnostics-CqepLcpI.d.ts.map
+export { Span as a, formatDiagnostic as c, SmlParseError as i, lineColumn as l, DiagnosticRepair as n, buildLineMap as o, SmlCompileError as r, createDiagnosticFormatter as s, Diagnostic as t };
+//# sourceMappingURL=diagnostics-OcQKQYSY.d.ts.map

package/dist/diagnostics.d.ts

@@ -1,2 +1,2 @@
-import { a as Span, c as lineColumn, i as SmlParseError, n as DiagnosticRepair, o as buildLineMap, r as SmlCompileError, s as formatDiagnostic, t as Diagnostic } from "./diagnostics-CqepLcpI.js";
-export { Diagnostic, DiagnosticRepair, SmlCompileError, SmlParseError, Span, buildLineMap, formatDiagnostic, lineColumn };
+import { a as Span, c as formatDiagnostic, i as SmlParseError, l as lineColumn, n as DiagnosticRepair, o as buildLineMap, r as SmlCompileError, s as createDiagnosticFormatter, t as Diagnostic } from "./diagnostics-OcQKQYSY.js";
+export { Diagnostic, DiagnosticRepair, SmlCompileError, SmlParseError, Span, buildLineMap, createDiagnosticFormatter, formatDiagnostic, lineColumn };

package/dist/diagnostics.js

@@ -40,12 +40,17 @@ const lineColumn = (lineMap, offset) => {
 		column: offset - lineMap[low] + 1
 	};
 };
-/** "line 12:8 unknown class ..." — the shape agents iterate on. */
-const formatDiagnostic = (source, diagnostic) => {
-	const { line, column } = lineColumn(buildLineMap(source), diagnostic.span.start);
-	return `line ${line}:${column} ${diagnostic.message}`;
+/** Build one formatter for a batch of diagnostics against the same source. */
+const createDiagnosticFormatter = (source) => {
+	const lineMap = buildLineMap(source);
+	return (diagnostic) => {
+		const { line, column } = lineColumn(lineMap, diagnostic.span.start);
+		return `line ${line}:${column} ${diagnostic.message}`;
+	};
 };
+/** "line 12:8 unknown class ..." — the shape agents iterate on. */
+const formatDiagnostic = (source, diagnostic) => createDiagnosticFormatter(source)(diagnostic);
 //#endregion
-export { SmlCompileError, SmlParseError, buildLineMap, formatDiagnostic, lineColumn };
+export { SmlCompileError, SmlParseError, buildLineMap, createDiagnosticFormatter, formatDiagnostic, lineColumn };
 
 //# sourceMappingURL=diagnostics.js.map

package/dist/{elements-ChJULZlh.d.ts → elements-BzjjnoCS.d.ts}

@@ -1,5 +1,5 @@
-import { i as JsxSourceLocation } from "./source-locations-D6Te6Gy1.js";
-import { r as EmailDiagnostic } from "./diagnostics-eFM9A_TU.js";
+import { i as JsxSourceLocation } from "./source-locations-DrCM82Ym.js";
+import { r as EmailDiagnostic } from "./diagnostics-BMYtBCQk.js";
 //#region src/email/jsx-runtime.d.ts
 /** Derived authoring tree; source stays canonical. Origins run from inner element to component call sites. */
 type EmailNode = {
@@ -696,4 +696,4 @@ type ChildrenProp<Content extends EmailElementSpec["content"]> = Content extends
 type EmailIntrinsicElements = { readonly [Tag in EmailTag]: EmailGlobalProps & AttributeProps<typeof EMAIL_GLOBAL_ATTRIBUTES> & AttributeProps<(typeof EMAIL_ELEMENTS)[Tag]["attributes"]> & ChildrenProp<(typeof EMAIL_ELEMENTS)[Tag]["content"]>; };
 //#endregion
 export { reportEmailDiagnostic as C, rawMarkup as S, currentEmailOrigins as _, EmailGlobalProps as a, jsxs as b, EmailStyle as c, isUrlAttribute as d, EmailChild as f, JSX as g, Fragment as h, EmailElementSpec as i, EmailTag as l, EmailNode as m, EMAIL_GLOBAL_ATTRIBUTES as n, EmailIntrinsicElements as o, EmailComponent as p, EmailAttributeSpec as r, EmailLayout as s, EMAIL_ELEMENTS as t, emailElement as u, drainEmailDiagnostics as v, normalizeChildren as x, jsx as y };
-//# sourceMappingURL=elements-ChJULZlh.d.ts.map
+//# sourceMappingURL=elements-BzjjnoCS.d.ts.map

package/dist/email/components.d.ts

@@ -1,4 +1,4 @@
-import { c as EmailStyle, f as EmailChild, m as EmailNode } from "../elements-ChJULZlh.js";
+import { c as EmailStyle, f as EmailChild, m as EmailNode } from "../elements-BzjjnoCS.js";
 //#region src/email/components.d.ts
 /** Marks the hidden preview block so the renderer can read it back and the text lane can keep it. */
 declare const PREHEADER_ATTRIBUTE = "data-samva-preheader";

package/dist/email/components.js

@@ -107,24 +107,54 @@ const Column = ({ className, align, valign, width, style, children }) => jsx("td
 const DEFAULT_BUTTON_FONT = "Helvetica, Arial, sans-serif";
 /** Average advance of a bold sans-serif glyph, as a fraction of the font size. */
 const BOLD_GLYPH_ADVANCE = .6;
+const invalidButtonNumber = (name) => reportEmailDiagnostic({
+	code: "invalid-button-number",
+	severity: "error",
+	message: `<Button ${name}> must be a finite number.`
+});
+const buttonNumber = (name, value, fallback) => {
+	if (typeof value === "number" && Number.isFinite(value)) return value;
+	invalidButtonNumber(name);
+	return fallback;
+};
+const optionalButtonNumber = (name, value) => {
+	if (value === void 0) return void 0;
+	if (typeof value === "number" && Number.isFinite(value)) return value;
+	invalidButtonNumber(name);
+};
+const optionalPositiveButtonNumber = (name, value) => {
+	if (value === void 0) return void 0;
+	if (typeof value === "number" && Number.isFinite(value) && value > 0) return value;
+	reportEmailDiagnostic({
+		code: "invalid-button-number",
+		severity: "error",
+		message: `<Button ${name}> must be a positive finite number.`
+	});
+};
 /** A link styled as a button, with a VML fallback so classic Outlook draws the shape. */
 const Button = ({ className, href, width, height, paddingX = 16, backgroundColor = "#000000", color = "#ffffff", borderRadius = 0, borderColor, borderWidth = 0, fontSize = 16, fontFamily = DEFAULT_BUTTON_FONT, align = "left", style, children }) => {
+	const safeWidth = optionalButtonNumber("width", width);
+	const safeHeight = optionalPositiveButtonNumber("height", height);
+	const safePaddingX = buttonNumber("paddingX", paddingX, 16);
+	const safeBorderRadius = buttonNumber("borderRadius", borderRadius, 0);
+	const safeBorderWidth = buttonNumber("borderWidth", borderWidth, 0);
+	const safeFontSize = buttonNumber("fontSize", fontSize, 16);
 	const label = typeof children === "string" ? children : void 0;
-	const fallback = height !== void 0 && label !== void 0;
+	const fallback = safeHeight !== void 0 && label !== void 0;
 	if (!fallback) reportEmailDiagnostic({
 		code: "button-outlook-fallback",
 		severity: "warning",
 		message: "<Button> draws its classic Outlook shape from VML, which needs a height and a plain string label. Without both, classic Windows Outlook shows an unstyled link.",
 		clients: ["outlook-windows"]
 	});
-	const arcsize = height === void 0 ? 0 : Math.round(borderRadius / height * 100);
-	const fallbackWidth = width ?? Math.ceil((label?.length ?? 0) * fontSize * BOLD_GLYPH_ADVANCE) + 2 * paddingX;
+	const arcsize = safeHeight === void 0 ? 0 : Math.round(safeBorderRadius / safeHeight * 100);
+	const fallbackWidth = safeWidth ?? Math.ceil((label?.length ?? 0) * safeFontSize * BOLD_GLYPH_ADVANCE) + 2 * safePaddingX;
 	return presentation({
 		width: "100%",
 		style: { borderCollapse: "collapse" }
 	}, jsx("td", {
 		align,
-		children: [fallback ? rawMarkup(`<!--[if mso]><v:roundrect xmlns:v="urn:schemas-microsoft-com:vml" xmlns:w="urn:schemas-microsoft-com:office:word" href="${escapeAttribute(href)}" style="height:${height}px;v-text-anchor:middle;width:${fallbackWidth}px;" arcsize="${arcsize}%" ${borderColor === void 0 ? "stroke=\"false\"" : `strokecolor="${escapeAttribute(borderColor)}" strokeweight="${borderWidth}px"`} fillcolor="${escapeAttribute(backgroundColor)}"><w:anchorlock/><center style="color:${escapeAttribute(color)};font-family:${escapeAttribute(fontFamily)};font-size:${fontSize}px;font-weight:bold;">${escapeText(label)}</center></v:roundrect><![endif]-->`) : null, jsx("a", {
+		children: [fallback ? rawMarkup(`<!--[if mso]><v:roundrect xmlns:v="urn:schemas-microsoft-com:vml" xmlns:w="urn:schemas-microsoft-com:office:word" href="${escapeAttribute(href)}" style="height:${safeHeight}px;v-text-anchor:middle;width:${fallbackWidth}px;" arcsize="${arcsize}%" ${borderColor === void 0 ? "stroke=\"false\"" : `strokecolor="${escapeAttribute(borderColor)}" strokeweight="${safeBorderWidth}px"`} fillcolor="${escapeAttribute(backgroundColor)}"><w:anchorlock/><center style="color:${escapeAttribute(color)};font-family:${escapeAttribute(fontFamily)};font-size:${safeFontSize}px;font-weight:bold;">${escapeText(label)}</center></v:roundrect><![endif]-->`) : null, jsx("a", {
 			className,
 			href,
 			target: "_blank",
@@ -132,19 +162,19 @@ const Button = ({ className, href, width, height, paddingX = 16, backgroundColor
 			style: {
 				backgroundColor,
 				color,
-				borderRadius: `${borderRadius}px`,
+				borderRadius: `${safeBorderRadius}px`,
 				display: "inline-block",
 				fontFamily,
-				fontSize: `${fontSize}px`,
+				fontSize: `${safeFontSize}px`,
 				fontWeight: "bold",
-				lineHeight: height === void 0 ? "120%" : `${height - 2 * borderWidth}px`,
+				lineHeight: safeHeight === void 0 ? "120%" : `${safeHeight - 2 * safeBorderWidth}px`,
 				textAlign: "center",
 				textDecoration: "none",
-				...width === void 0 ? { padding: `0 ${paddingX}px` } : {
-					width: `${width}px`,
+				...safeWidth === void 0 ? { padding: `0 ${safePaddingX}px` } : {
+					width: `${safeWidth}px`,
 					maxWidth: "100%"
 				},
-				...borderColor === void 0 ? {} : { border: `${borderWidth}px solid ${borderColor}` },
+				...borderColor === void 0 ? {} : { border: `${safeBorderWidth}px solid ${borderColor}` },
 				...fallback ? { msoHide: "all" } : {},
 				...style
 			},

package/dist/email/diagnostics.d.ts

@@ -1,2 +1,2 @@
-import { a as formatEmailDiagnostic, i as EmailDiagnosticSeverity, n as EmailCompileError, o as hasBlockingDiagnostic, r as EmailDiagnostic, t as EmailCompatibilityAssessment } from "../diagnostics-eFM9A_TU.js";
+import { a as formatEmailDiagnostic, i as EmailDiagnosticSeverity, n as EmailCompileError, o as hasBlockingDiagnostic, r as EmailDiagnostic, t as EmailCompatibilityAssessment } from "../diagnostics-BMYtBCQk.js";
 export { EmailCompatibilityAssessment, EmailCompileError, EmailDiagnostic, EmailDiagnosticSeverity, formatEmailDiagnostic, hasBlockingDiagnostic };

package/dist/email/elements.d.ts

@@ -1,2 +1,2 @@
-import { a as EmailGlobalProps, c as EmailStyle, d as isUrlAttribute, i as EmailElementSpec, l as EmailTag, n as EMAIL_GLOBAL_ATTRIBUTES, o as EmailIntrinsicElements, r as EmailAttributeSpec, s as EmailLayout, t as EMAIL_ELEMENTS, u as emailElement } from "../elements-ChJULZlh.js";
+import { a as EmailGlobalProps, c as EmailStyle, d as isUrlAttribute, i as EmailElementSpec, l as EmailTag, n as EMAIL_GLOBAL_ATTRIBUTES, o as EmailIntrinsicElements, r as EmailAttributeSpec, s as EmailLayout, t as EMAIL_ELEMENTS, u as emailElement } from "../elements-BzjjnoCS.js";
 export { EMAIL_ELEMENTS, EMAIL_GLOBAL_ATTRIBUTES, EmailAttributeSpec, EmailElementSpec, EmailGlobalProps, EmailIntrinsicElements, EmailLayout, EmailStyle, EmailTag, emailElement, isUrlAttribute };

package/dist/email/html.d.ts

@@ -1,5 +1,5 @@
-import { r as EmailDiagnostic } from "../diagnostics-eFM9A_TU.js";
-import { m as EmailNode } from "../elements-ChJULZlh.js";
+import { r as EmailDiagnostic } from "../diagnostics-BMYtBCQk.js";
+import { m as EmailNode } from "../elements-BzjjnoCS.js";
 import { EmittedPosition } from "./selection.js";
 //#region src/email/html.d.ts
 /** Escape a value for element content. */

package/dist/email/html.js

@@ -153,7 +153,8 @@ const attributes = (sink, tag, spec, props, origins) => {
 			if (text !== void 0) emitted.push(` ${name}="${escapeAttribute(text)}"`);
 			continue;
 		}
-		const attribute = EMAIL_GLOBAL_ATTRIBUTES[name] ?? spec.attributes[name];
+		const globalAttributes = EMAIL_GLOBAL_ATTRIBUTES;
+		const attribute = Object.hasOwn(globalAttributes, name) ? globalAttributes[name] : Object.hasOwn(spec.attributes, name) ? spec.attributes[name] : void 0;
 		if (attribute === void 0) {
 			const supported = [
 				...Object.keys(EMAIL_GLOBAL_ATTRIBUTES),

package/dist/email/jsx-dev-runtime.d.ts

@@ -1,5 +1,5 @@
-import { r as JsxSource } from "../source-locations-D6Te6Gy1.js";
-import { g as JSX, h as Fragment, m as EmailNode, p as EmailComponent } from "../elements-ChJULZlh.js";
+import { r as JsxSource } from "../source-locations-DrCM82Ym.js";
+import { g as JSX, h as Fragment, m as EmailNode, p as EmailComponent } from "../elements-BzjjnoCS.js";
 //#region src/email/jsx-dev-runtime.d.ts
 /** Development JSX retains compiler-provided origins directly on the semantic tree. */
 declare const jsxDEV: (type: string | EmailComponent<Record<string, unknown>> | typeof Fragment, props: Record<string, unknown> | null, _key?: unknown, _staticChildren?: boolean, source?: JsxSource) => EmailNode;

package/dist/email/jsx-runtime.d.ts

@@ -1,2 +1,2 @@
-import { C as reportEmailDiagnostic, S as rawMarkup, _ as currentEmailOrigins, b as jsxs, f as EmailChild, g as JSX, h as Fragment, m as EmailNode, p as EmailComponent, v as drainEmailDiagnostics, x as normalizeChildren, y as jsx } from "../elements-ChJULZlh.js";
+import { C as reportEmailDiagnostic, S as rawMarkup, _ as currentEmailOrigins, b as jsxs, f as EmailChild, g as JSX, h as Fragment, m as EmailNode, p as EmailComponent, v as drainEmailDiagnostics, x as normalizeChildren, y as jsx } from "../elements-BzjjnoCS.js";
 export { EmailChild, EmailComponent, EmailNode, Fragment, JSX, currentEmailOrigins, drainEmailDiagnostics, jsx, jsxs, normalizeChildren, rawMarkup, reportEmailDiagnostic };

package/dist/email/render.d.ts

@@ -1,9 +1,9 @@
-import { r as EmailDiagnostic } from "../diagnostics-eFM9A_TU.js";
-import { m as EmailNode } from "../elements-ChJULZlh.js";
+import { r as EmailDiagnostic } from "../diagnostics-BMYtBCQk.js";
+import { m as EmailNode } from "../elements-BzjjnoCS.js";
 import { EmittedPosition } from "./selection.js";
 import { SerializeEmailOptions } from "./html.js";
-import { r as TemplateDefinition } from "../template-G-QPcfmn.js";
-import { i as Stylesheet } from "../css-DoNc7CiC.js";
+import { r as TemplateDefinition } from "../template-DWftqh4x.js";
+import { i as Stylesheet } from "../css-COcFOT1y.js";
 //#region src/email/render.d.ts
 /** Classic Outlook lays a document out correctly only under a transitional doctype. */
 declare const EMAIL_DOCTYPE = "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">";

package/dist/email/render.js

@@ -1,4 +1,4 @@
-import { i as renderEmail, n as bindStylesheets, r as compileEmail, t as EMAIL_DOCTYPE } from "../render-T6IFPnP4.js";
+import { i as renderEmail, n as bindStylesheets, r as compileEmail, t as EMAIL_DOCTYPE } from "../render-aaJBnsXK.js";
 import "./html.js";
 import "./diagnostics.js";
 import "./stylesheets.js";

package/dist/email/selection.d.ts

@@ -1,4 +1,4 @@
-import { i as JsxSourceLocation } from "../source-locations-D6Te6Gy1.js";
+import { i as JsxSourceLocation } from "../source-locations-DrCM82Ym.js";
 //#region src/email/selection.d.ts
 /**
  * The attribute a preview stamps so a click in a rendered document resolves to

package/dist/email/source-edit.d.ts

@@ -1,4 +1,4 @@
-import { i as JsxSourceLocation } from "../source-locations-D6Te6Gy1.js";
+import { i as JsxSourceLocation } from "../source-locations-DrCM82Ym.js";
 //#region src/email/source-edit.d.ts
 /** One exact source replacement; before text guards against concurrent changes. */
 interface SourceReplacement {

package/dist/email/stylesheets.d.ts

@@ -1,4 +1,4 @@
-import { i as Stylesheet } from "../css-DoNc7CiC.js";
+import { i as Stylesheet } from "../css-COcFOT1y.js";
 //#region src/email/stylesheets.d.ts
 /** Called by a compiler-generated stylesheet module at import time. */
 declare const registerStylesheet: (sheet: Stylesheet) => void;

package/dist/email/text.d.ts

@@ -1,4 +1,4 @@
-import { m as EmailNode } from "../elements-ChJULZlh.js";
+import { m as EmailNode } from "../elements-BzjjnoCS.js";
 //#region src/email/text.d.ts
 /** Derive the plain-text alternative from the semantic tree in reading order. */
 declare const deriveEmailText: (node: EmailNode) => string;

package/dist/emit.d.ts

@@ -1,5 +1,5 @@
-import { t as Diagnostic } from "./diagnostics-CqepLcpI.js";
-import { s as UnboundTemplateSourceLocations } from "./source-locations-D6Te6Gy1.js";
+import { t as Diagnostic } from "./diagnostics-OcQKQYSY.js";
+import { s as UnboundTemplateSourceLocations } from "./source-locations-DrCM82Ym.js";
 import { TemplateVariable } from "./render-template.js";
 //#region src/emit.d.ts
 /**

package/dist/emit.js

@@ -5,8 +5,8 @@ import { renderTemplate } from "./render-template.js";
 import { Result } from "better-result";
 //#region src/emit.ts
 /**
-* emitModule — the module-level emit boundary for the TSX authoring layer
-* (design brief §7b). The vite plugin does the importing: TSX runs at the
+* emitModule — the module-level emit boundary for the TSX authoring layer.
+* The vite plugin does the importing: TSX runs at the
 * USER's build time and this receives the already-evaluated module object (a
 * record of its exports). emitModule stays bundler-agnostic — it never touches
 * the filesystem, esbuild, or vite. It reads only `moduleExports.default`,

package/dist/footer.d.ts

@@ -29,7 +29,7 @@ interface FooterContent {
   readonly customHtml?: string | undefined;
 }
 /** Which compliance-relevant footer fields the effective content is missing,
- *  surfaced on the design read path for M6's dashboard nudge. */
+ *  surfaced on the design read path for the dashboard's footer nudge. */
 interface FooterCompleteness {
   /** No physical mailing address is set anywhere in the cascade (CAN-SPAM). */
   readonly missingAddress: boolean;
@@ -42,8 +42,8 @@ interface RenderedFooter {
   readonly completeness: FooterCompleteness;
 }
 /**
- * Which compliance-relevant fields the footer content lacks — the signal M6's
- * dashboard nudge reads. Derivable from `design.footer` alone (no token table),
+ * Which compliance-relevant fields the footer content lacks — the signal the
+ * dashboard's footer nudge reads. Derivable from `design.footer` alone (no token table),
  * so the design read path can report it without composing the block. A
  * `customHtml` footer is treated as complete (the org owns its own content).
  */

package/dist/footer.js

@@ -7,7 +7,7 @@
 * the placeholder. */
 const FOOTER_UNSUBSCRIBE_PLACEHOLDER = "%samva:unsubscribe-url%";
 const escapeText = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
-const escapeAttribute = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll("\"", "&quot;");
+const escapeAttribute = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;").replaceAll("'", "&#39;");
 const isSafeUrl = (url) => /^(https?:|mailto:)/i.test(url.trim());
 const addressLines = (address) => {
 	const region = [
@@ -23,8 +23,8 @@ const addressLines = (address) => {
 	].filter((line) => typeof line === "string" && line.trim().length > 0);
 };
 /**
-* Which compliance-relevant fields the footer content lacks — the signal M6's
-* dashboard nudge reads. Derivable from `design.footer` alone (no token table),
+* Which compliance-relevant fields the footer content lacks — the signal the
+* dashboard's footer nudge reads. Derivable from `design.footer` alone (no token table),
 * so the design read path can report it without composing the block. A
 * `customHtml` footer is treated as complete (the org owns its own content).
 */
@@ -45,6 +45,9 @@ const renderFooterBlock = (input) => {
 	const containerPx = tokens.containerPx["xl"] ?? 600;
 	const fontSizePx = tokens.text["xs"]?.sizePx ?? 12;
 	const lineHeightPx = tokens.text["xs"]?.lineHeightPx ?? 18;
+	const fontFamilyAttribute = escapeAttribute(fontFamily);
+	const mutedColorAttribute = escapeAttribute(mutedColor);
+	const linkColorAttribute = escapeAttribute(linkColor);
 	const rows = [];
 	const textLines = [];
 	if (typeof footer.customHtml === "string" && footer.customHtml.trim().length > 0) rows.push(`<tr><td style="padding:0 0 12px 0;">${footer.customHtml}</td></tr>`);
@@ -61,20 +64,20 @@ const renderFooterBlock = (input) => {
 			}
 		}
 		if (footer.socialLinks !== void 0 && footer.socialLinks.length > 0) {
-			const links = footer.socialLinks.map((link) => isSafeUrl(link.url) ? `<a href="${escapeAttribute(link.url.trim())}" style="color:${linkColor};text-decoration:underline;" ses:no-track>${escapeText(link.label)}</a>` : escapeText(link.label));
+			const links = footer.socialLinks.map((link) => isSafeUrl(link.url) ? `<a href="${escapeAttribute(link.url.trim())}" style="color:${linkColorAttribute};text-decoration:underline;" ses:no-track>${escapeText(link.label)}</a>` : escapeText(link.label));
 			rows.push(`<tr><td style="padding:0 0 8px 0;">${links.join("<span style=\"padding:0 6px;\">·</span>")}</td></tr>`);
 			textLines.push(footer.socialLinks.map((link) => `${link.label}: ${link.url}`).join("  "));
 		}
 	}
 	if (unsubscribeUrl !== null) {
-		rows.push(`<tr><td style="padding:0;"><a href="${escapeAttribute(unsubscribeUrl)}" style="color:${mutedColor};text-decoration:underline;" ses:no-track>${escapeText(unsubscribeLabel)}</a></td></tr>`);
+		rows.push(`<tr><td style="padding:0;"><a href="${escapeAttribute(unsubscribeUrl)}" style="color:${mutedColorAttribute};text-decoration:underline;" ses:no-track>${escapeText(unsubscribeLabel)}</a></td></tr>`);
 		textLines.push(`${unsubscribeLabel}: ${unsubscribeUrl}`);
 	}
 	return {
 		html: rows.length === 0 ? "" : [
 			`<table role="presentation" cellpadding="0" cellspacing="0" border="0" width="100%" style="width:100%;border-collapse:collapse;">`,
 			`<tr><td align="center" style="padding:32px 16px;">`,
-			`<table role="presentation" cellpadding="0" cellspacing="0" border="0" width="${containerPx}" style="width:100%;max-width:${containerPx}px;border-collapse:collapse;font-family:${fontFamily};font-size:${fontSizePx}px;line-height:${lineHeightPx}px;color:${mutedColor};text-align:center;">`,
+			`<table role="presentation" cellpadding="0" cellspacing="0" border="0" width="${containerPx}" style="width:100%;max-width:${containerPx}px;border-collapse:collapse;font-family:${fontFamilyAttribute};font-size:${fontSizePx}px;line-height:${lineHeightPx}px;color:${mutedColorAttribute};text-align:center;">`,
 			...rows,
 			`</table>`,
 			`</td></tr>`,

package/dist/jsx-dev-runtime.d.ts

@@ -1,5 +1,5 @@
-import { r as JsxSource } from "./source-locations-D6Te6Gy1.js";
-import { a as JsxResult, i as JSX, n as Fragment, t as Component } from "./jsx-runtime-BI4gI19E.js";
+import { r as JsxSource } from "./source-locations-DrCM82Ym.js";
+import { a as JsxResult, i as JSX, n as Fragment, t as Component } from "./jsx-runtime-I-1nCtl2.js";
 //#region src/jsx-dev-runtime.d.ts
 interface JsxDevProps {
   readonly children?: unknown;

package/dist/{jsx-runtime-BI4gI19E.d.ts → jsx-runtime-I-1nCtl2.d.ts}

@@ -1,5 +1,5 @@
-import { f as ElementNode, n as Attribute, x as SmlNode } from "./ast-BLybiDxp.js";
-import { s as VariableRef } from "./variables-BnKs1iqb.js";
+import { f as ElementNode, n as Attribute, x as SmlNode } from "./ast-BrDtApwS.js";
+import { s as VariableRef } from "./variables-J_L3qxRa.js";
 //#region src/jsx-runtime.d.ts
 /** A component is a plain function of its props that returns a draft node. */
 type Component<P> = (props: P) => SmlNode;
@@ -54,4 +54,4 @@ declare namespace JSX {
 }
 //#endregion
 export { JsxResult as a, elementDraft as c, normalizeChildren as d, JSX as i, jsx as l, Fragment as n, SmlChild as o, FragmentDraft as r, SmlChildren as s, Component as t, jsxs as u };
-//# sourceMappingURL=jsx-runtime-BI4gI19E.d.ts.map
+//# sourceMappingURL=jsx-runtime-I-1nCtl2.d.ts.map

package/dist/jsx-runtime.d.ts

@@ -1,2 +1,2 @@
-import { a as JsxResult, c as elementDraft, d as normalizeChildren, i as JSX, l as jsx, n as Fragment, o as SmlChild, r as FragmentDraft, s as SmlChildren, t as Component, u as jsxs } from "./jsx-runtime-BI4gI19E.js";
+import { a as JsxResult, c as elementDraft, d as normalizeChildren, i as JSX, l as jsx, n as Fragment, o as SmlChild, r as FragmentDraft, s as SmlChildren, t as Component, u as jsxs } from "./jsx-runtime-I-1nCtl2.js";
 export { Component, Fragment, FragmentDraft, JSX, JsxResult, SmlChild, SmlChildren, elementDraft, jsx, jsxs, normalizeChildren };

package/dist/lexer.js

@@ -21,6 +21,7 @@ const CHAR_UNDERSCORE = 95;
 const CHAR_0 = 48;
 const CHAR_9 = 57;
 const CHAR_UPPER_A = 65;
+const CHAR_UPPER_X = 88;
 const CHAR_UPPER_Z = 90;
 const CHAR_LOWER_A = 97;
 const CHAR_LOWER_X = 120;
@@ -60,6 +61,10 @@ const NAMED_ENTITIES = {
 	apos: "'",
 	nbsp: "\xA0"
 };
+const numericEntityCodePoint = (digits, radix) => {
+	const codePoint = Number.parseInt(digits, radix);
+	return Number.isFinite(codePoint) && codePoint <= 1114111 ? codePoint : void 0;
+};
 /**
 * Validates the entity starting at `offset` (which points at `&`).
 * Returns the end offset (past `;`) or -1 when malformed.
@@ -68,7 +73,8 @@ const scanEntity = (source, offset) => {
 	let index = offset + 1;
 	if (source.charCodeAt(index) === CHAR_HASH) {
 		index++;
-		const hex = source.charCodeAt(index) === CHAR_LOWER_X;
+		const marker = source.charCodeAt(index);
+		const hex = marker === CHAR_LOWER_X || marker === CHAR_UPPER_X;
 		if (hex) index++;
 		const digitsStart = index;
 		while (index < source.length) {
@@ -77,11 +83,13 @@ const scanEntity = (source, offset) => {
 			index++;
 		}
 		if (index === digitsStart) return -1;
+		if (numericEntityCodePoint(source.slice(digitsStart, index), hex ? 16 : 10) === void 0) return -1;
 		return source.charCodeAt(index) === CHAR_SEMICOLON ? index + 1 : -1;
 	}
 	const nameStart = index;
 	while (index < source.length && isLetter(source.charCodeAt(index))) index++;
-	if (!(source.slice(nameStart, index) in NAMED_ENTITIES)) return -1;
+	const name = source.slice(nameStart, index);
+	if (!Object.hasOwn(NAMED_ENTITIES, name)) return -1;
 	return source.charCodeAt(index) === CHAR_SEMICOLON ? index + 1 : -1;
 };
 /** Decodes entities in text that already passed `scanEntity` validation. */
@@ -102,9 +110,13 @@ const decodeEntities = (raw) => {
 			break;
 		}
 		const body = raw.slice(ampersand + 1, semicolon);
-		if (body.startsWith("#x") || body.startsWith("#X")) result += String.fromCodePoint(Number.parseInt(body.slice(2), 16));
-		else if (body.startsWith("#")) result += String.fromCodePoint(Number.parseInt(body.slice(1), 10));
-		else result += NAMED_ENTITIES[body];
+		if (body.startsWith("#x") || body.startsWith("#X")) {
+			const codePoint = numericEntityCodePoint(body.slice(2), 16);
+			result += codePoint === void 0 ? raw.slice(ampersand, semicolon + 1) : String.fromCodePoint(codePoint);
+		} else if (body.startsWith("#")) {
+			const codePoint = numericEntityCodePoint(body.slice(1), 10);
+			result += codePoint === void 0 ? raw.slice(ampersand, semicolon + 1) : String.fromCodePoint(codePoint);
+		} else result += Object.hasOwn(NAMED_ENTITIES, body) ? NAMED_ENTITIES[body] : raw.slice(ampersand, semicolon + 1);
 		index = semicolon + 1;
 	}
 	return result;

package/dist/model.d.ts

@@ -1,4 +1,4 @@
-import { S as SmlTag, b as SmlDocument } from "./ast-BLybiDxp.js";
+import { S as SmlTag, b as SmlDocument } from "./ast-BrDtApwS.js";
 import { Result } from "better-result";
 //#region src/model.d.ts
 /** The subset of an element's attributes the navigator and agent tools read. */