@seed-ship/mcp-ui-solid 6.19.1 → 6.20.0

package/dist/services/validation.js

@@ -1,4 +1,5 @@
 import { GraphComponentParamsSchema, MapComponentParamsSchema, FormComponentParamsSchema, ArtifactComponentParamsSchema, CodeComponentParamsSchema, ActionGroupParamsSchema, ImageGalleryParamsSchema, CarouselComponentParamsSchema, VideoComponentParamsSchema, ActionParamsSchema, LinkComponentParamsSchema, ImageComponentParamsSchema, IframeComponentParamsSchema, TextComponentParamsSchema, MetricComponentParamsSchema, ComponentTypeSchema } from "@seed-ship/mcp-ui-spec";
+import { formatMCPUIString } from "../utils/format-string.js";
 const KNOWN_COMPONENT_TYPES = new Set(ComponentTypeSchema.options);
 const SPEC_VALIDATORS = {
   metric: { schema: MetricComponentParamsSchema, legacyCode: "INVALID_METRIC" },
@@ -601,13 +602,30 @@ function validateLayout(layout, options) {
     errors: errors.length > 0 ? errors : void 0
   };
 }
-function validateFieldValue(value, field) {
+const DEFAULT_VALIDATION_MESSAGES = {
+  required: "{field} is required",
+  mustBeChecked: "{field} must be checked",
+  minLength: "Minimum {min} characters required",
+  maxLength: "Maximum {max} characters allowed",
+  invalidPattern: "Invalid format",
+  invalidEmail: "Invalid email address",
+  invalidNumber: "Must be a valid number",
+  minValue: "Minimum value is {min}",
+  maxValue: "Maximum value is {max}",
+  minDate: "Date must be after {min}",
+  maxDate: "Date must be before {max}",
+  invalidOption: "Please select a valid option",
+  invalidFormat: "Invalid format (expected: {format})"
+};
+function validateFieldValue(value, field, messages) {
+  const m = { ...DEFAULT_VALIDATION_MESSAGES, ...messages };
+  const fieldName = field.label || field.name;
   if (field.required) {
     if (value === void 0 || value === null || value === "") {
-      return { valid: false, error: `${field.label || field.name} is required` };
+      return { valid: false, error: formatMCPUIString(m.required, { field: fieldName }) };
     }
     if (field.type === "checkbox" && value !== true) {
-      return { valid: false, error: `${field.label || field.name} must be checked` };
+      return { valid: false, error: formatMCPUIString(m.mustBeChecked, { field: fieldName }) };
     }
   }
   if (value === void 0 || value === null || value === "") {
@@ -618,39 +636,45 @@ function validateFieldValue(value, field) {
     case "textarea":
     case "password":
       if (field.minLength && String(value).length < field.minLength) {
-        return { valid: false, error: `Minimum ${field.minLength} characters required` };
+        return {
+          valid: false,
+          error: formatMCPUIString(m.minLength, { min: field.minLength })
+        };
       }
       if (field.maxLength && String(value).length > field.maxLength) {
-        return { valid: false, error: `Maximum ${field.maxLength} characters allowed` };
+        return {
+          valid: false,
+          error: formatMCPUIString(m.maxLength, { max: field.maxLength })
+        };
       }
       if (field.pattern && !new RegExp(field.pattern).test(String(value))) {
-        return { valid: false, error: "Invalid format" };
+        return { valid: false, error: m.invalidPattern };
       }
       break;
     case "email":
       if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(String(value))) {
-        return { valid: false, error: "Invalid email address" };
+        return { valid: false, error: m.invalidEmail };
       }
       break;
     case "number": {
       const numValue = Number(value);
       if (isNaN(numValue)) {
-        return { valid: false, error: "Must be a valid number" };
+        return { valid: false, error: m.invalidNumber };
       }
       if (field.min !== void 0 && numValue < field.min) {
-        return { valid: false, error: `Minimum value is ${field.min}` };
+        return { valid: false, error: formatMCPUIString(m.minValue, { min: field.min }) };
       }
       if (field.max !== void 0 && numValue > field.max) {
-        return { valid: false, error: `Maximum value is ${field.max}` };
+        return { valid: false, error: formatMCPUIString(m.maxValue, { max: field.max }) };
       }
       break;
     }
     case "date":
       if (field.minDate && value < field.minDate) {
-        return { valid: false, error: `Date must be after ${field.minDate}` };
+        return { valid: false, error: formatMCPUIString(m.minDate, { min: field.minDate }) };
       }
       if (field.maxDate && value > field.maxDate) {
-        return { valid: false, error: `Date must be before ${field.maxDate}` };
+        return { valid: false, error: formatMCPUIString(m.maxDate, { max: field.maxDate }) };
       }
       break;
     case "select":
@@ -658,7 +682,7 @@ function validateFieldValue(value, field) {
       if (field.options && field.options.length > 0) {
         const validValues = field.options.map((opt) => opt.value);
         if (!validValues.includes(String(value))) {
-          return { valid: false, error: "Please select a valid option" };
+          return { valid: false, error: m.invalidOption };
         }
       }
       break;
@@ -669,17 +693,17 @@ function validateFieldValue(value, field) {
       if (!new RegExp(field.valueFormat).test(v)) {
         return {
           valid: false,
-          error: field.valueFormatHint || `Invalid format (expected: ${field.valueFormat})`
+          error: field.valueFormatHint || formatMCPUIString(m.invalidFormat, { format: field.valueFormat })
         };
       }
     }
   }
   return { valid: true };
 }
-function validateFormData(data, fields) {
+function validateFormData(data, fields, messages) {
   const errors = {};
   for (const field of fields) {
-    const result = validateFieldValue(data[field.name], field);
+    const result = validateFieldValue(data[field.name], field, messages);
     if (!result.valid && result.error) {
       errors[field.name] = result.error;
     }
@@ -692,6 +716,7 @@ function validateFormData(data, fields) {
 export {
   DEFAULT_IFRAME_DOMAINS,
   DEFAULT_RESOURCE_LIMITS,
+  DEFAULT_VALIDATION_MESSAGES,
   TRUSTED_IFRAME_DOMAINS,
   getIframeSandbox,
   sanitizeString,

package/dist/services/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sources":["../../src/services/validation.ts"],"sourcesContent":["/**\n * Component Validation Service\n * Phase 0: Resource Limits & Schema Validation\n *\n * Validates LLM-generated components against:\n * - JSON schema\n * - Resource limits (data points, payload size, grid bounds)\n * - Security constraints (domain whitelist, XSS prevention)\n */\n\nimport type { ZodIssue, ZodSchema } from 'zod';\nimport {\n  MetricComponentParamsSchema,\n  TextComponentParamsSchema,\n  IframeComponentParamsSchema,\n  ImageComponentParamsSchema,\n  LinkComponentParamsSchema,\n  CarouselComponentParamsSchema,\n  ArtifactComponentParamsSchema,\n  ActionParamsSchema,\n  VideoComponentParamsSchema,\n  ImageGalleryParamsSchema,\n  ActionGroupParamsSchema,\n  CodeComponentParamsSchema,\n  // v5.6.0 — added after spec@5.0.2 relaxations (deposium audit §M)\n  MapComponentParamsSchema,\n  FormComponentParamsSchema,\n  // v6.0.0 — graph primitive (peer @antv/g6 ^5)\n  GraphComponentParamsSchema,\n  // Single source of truth for the component-type enum (kills spec↔solid drift).\n  ComponentTypeSchema,\n} from '@seed-ship/mcp-ui-spec';\nimport type {\n  UIComponent,\n  UILayout,\n  ValidationResult,\n  ResourceLimits,\n  ChartComponentParams,\n  TableComponentParams,\n  FormFieldParams,\n  IframePolicy,\n  ValidationOptions,\n  ComponentType,\n} from '../types';\n\n/**\n * All known ComponentType values — used to distinguish known-but-unvalidated\n * types (pass through) from truly unknown strings (reject).\n *\n * Derived directly from the spec's `ComponentTypeSchema` (the single source of\n * truth) rather than hand-maintained, so a new enum member in the spec can\n * never silently drift out of solid's known-types set again. This is what\n * restored `composite`: it is in the spec enum but had been dropped from the\n * former hand-written list, contradicting the pass-through docstrings below.\n */\nconst KNOWN_COMPONENT_TYPES: Set<string> = new Set<string>(ComponentTypeSchema.options);\n\n/**\n * Spec-driven validation dispatch table (B.1 — v5.5.0, expanded in v5.6.0).\n *\n * For each ComponentType where we delegate shape validation to a Zod schema\n * from `@seed-ship/mcp-ui-spec`, this table maps:\n *   - the schema to safeParse against\n *   - the legacy error code to emit when shape parsing fails (preserves the\n *     pre-v5.5.0 `errors[].code` API contract — see MCP-UI-AUDIT-2026-04-26.md\n *     §I.3.a + §J.1)\n *\n * **v5.6.0** : `map` and `form` joined the dispatch after spec@5.0.2 relaxed\n * their schemas (LatLngPoint union for map.center, regex relax for\n * field.name) per deposium audit §L answers. As of v6.x this table\n * spec-validates 15 of the 21 component types; the remainder use imperative\n * validators (`chart`/`table`) or are pass-through (`grid`/`footer`/`composite`/`modal`).\n *\n * Types deliberately omitted (kept on the imperative path):\n *   - `chart`, `table` — have rich imperative validators with their own\n *     codes (MISSING_DATA, DATA_LENGTH_MISMATCH, RESOURCE_LIMIT_EXCEEDED, …)\n *   - `modal`          — all params are optional; nothing to enforce.\n *   - `grid`, `footer`, `composite` — pass-through, validated elsewhere.\n */\nconst SPEC_VALIDATORS: Partial<Record<ComponentType, { schema: ZodSchema; legacyCode: string }>> = {\n  metric: { schema: MetricComponentParamsSchema, legacyCode: 'INVALID_METRIC' },\n  text: { schema: TextComponentParamsSchema, legacyCode: 'INVALID_TEXT' },\n  iframe: { schema: IframeComponentParamsSchema, legacyCode: 'INVALID_IFRAME' },\n  image: { schema: ImageComponentParamsSchema, legacyCode: 'INVALID_IMAGE' },\n  link: { schema: LinkComponentParamsSchema, legacyCode: 'INVALID_LINK' },\n  action: { schema: ActionParamsSchema, legacyCode: 'INVALID_ACTION' },\n  video: { schema: VideoComponentParamsSchema, legacyCode: 'INVALID_VIDEO' },\n  carousel: { schema: CarouselComponentParamsSchema, legacyCode: 'EMPTY_CAROUSEL' },\n  'image-gallery': { schema: ImageGalleryParamsSchema, legacyCode: 'EMPTY_GALLERY' },\n  'action-group': { schema: ActionGroupParamsSchema, legacyCode: 'EMPTY_ACTION_GROUP' },\n  code: { schema: CodeComponentParamsSchema, legacyCode: 'INVALID_CODE' },\n  artifact: { schema: ArtifactComponentParamsSchema, legacyCode: 'INVALID_ARTIFACT' },\n  // v5.6.0 additions\n  form: { schema: FormComponentParamsSchema, legacyCode: 'EMPTY_FORM' },\n  map: { schema: MapComponentParamsSchema, legacyCode: 'INVALID_MAP' },\n  // v6.0.0 — graph primitive (no chained post-check : Zod's\n  // `nodes.min(1)` covers the only structural invariant ; edge\n  // source/target ids reference nodes by convention, not enforced here\n  // because LLM payloads sometimes ship edges to nodes added later.\n  // Unresolved refs are gracefully ignored by G6 v5.)\n  graph: { schema: GraphComponentParamsSchema, legacyCode: 'INVALID_GRAPH' },\n};\n\n/**\n * Map a Zod issue list to the legacy `ValidationError[]` shape.\n *\n * Preserves the pre-v5.5.0 contract: `path` always begins with `params`,\n * `code` is the per-type legacy code (so consumers that filtered by\n * `errors[].code === 'EMPTY_CAROUSEL'` keep working), `message` is Zod's\n * native human-readable message.\n */\nfunction mapZodIssuesToErrors(\n  issues: readonly ZodIssue[],\n  legacyCode: string\n): NonNullable<ValidationResult['errors']> {\n  return issues.map((issue) => ({\n    path: issue.path.length > 0 ? `params.${issue.path.join('.')}` : 'params',\n    message: issue.message,\n    code: legacyCode,\n  }));\n}\n\n/**\n * Default resource limits (configurable via env)\n */\nexport const DEFAULT_RESOURCE_LIMITS: ResourceLimits = {\n  maxDataPoints: 1000,\n  maxTableRows: 100,\n  // v6.8.0 — raised 50KB → 512KB. The single payload-size guard is shared by\n  // every component type ; 50KB rejected otherwise-valid `map` components\n  // carrying a realistic `params.geojson` FeatureCollection (a dense\n  // multi-feature map — e.g. a département-wide choropleth — runs 300-500KB\n  // even after reasonable geometry simplification). 512KB leaves real\n  // headroom for that while still rejecting runaway payloads ; genuinely\n  // large datasets belong in vector tiles (PMTiles), not inline GeoJSON.\n  // The guard itself (`validatePayloadSize`) is unchanged — only the\n  // default ceiling moved.\n  maxPayloadSize: 512 * 1024, // 512KB\n  renderTimeout: 5000, // 5 seconds\n};\n\n/**\n * Default allowed iframe domains (whitelist)\n * Must match CSP frame-src directive\n * Updated Sprint 7: Added code, design, docs, and map providers\n *\n * This list is exported for transparency and can be extended via ValidationOptions\n */\nexport const DEFAULT_IFRAME_DOMAINS = [\n  // Charts\n  'quickchart.io',\n  'www.quickchart.io',\n\n  // Deposium\n  'deposium.com',\n  'deposium.vip',\n  'deposium.ai',\n\n  // Development\n  'localhost',\n\n  // Video providers (Sprint 5)\n  'youtube.com',\n  'www.youtube.com',\n  'youtube-nocookie.com',\n  'www.youtube-nocookie.com',\n  'youtu.be',\n  'vimeo.com',\n  'player.vimeo.com',\n\n  // Code playgrounds (Sprint 7)\n  'codepen.io',\n  'codesandbox.io',\n  'stackblitz.com',\n  'jsfiddle.net',\n\n  // Design tools (Sprint 7)\n  'figma.com',\n  'www.figma.com',\n  'miro.com',\n\n  // Google services (Sprint 7)\n  'docs.google.com',\n  'drive.google.com',\n  'sheets.google.com',\n  'slides.google.com',\n  'maps.google.com',\n  'www.google.com',\n  'datastudio.google.com',\n  'lookerstudio.google.com',\n\n  // Productivity (Sprint 7)\n  'airtable.com',\n  'notion.so',\n  'www.notion.so',\n\n  // Maps (Sprint 7)\n  'openstreetmap.org',\n  'www.openstreetmap.org',\n\n  // Analytics/Dashboards (Sprint 7)\n  'public.tableau.com',\n  'app.powerbi.com',\n  'observablehq.com',\n\n  // Diagrams & Whiteboards (v2.0.0)\n  'mermaid.live',\n  'excalidraw.com',\n  'lucidchart.com',\n  'lucid.app',\n\n  // Video - Business (v2.0.0)\n  'loom.com',\n  'www.loom.com',\n  'cloudflarestream.com',\n  'streamable.com',\n\n  // Code repositories (v2.0.0)\n  'github.com',\n  'gist.github.com',\n  'gitlab.com',\n  'replit.com',\n  'glitch.com',\n\n  // Business tools (v2.0.0)\n  'calendly.com',\n  'typeform.com',\n  'cal.com',\n\n  // Design (v2.0.0)\n  'canva.com',\n\n  // Deploy previews (v2.0.0)\n  'vercel.app',\n  'netlify.app',\n\n  // E-commerce (v2.0.0)\n  'amazon.com',\n  'amazon.fr',\n  'amazon.de',\n  'amazon.co.uk',\n  'amazon.es',\n  'amazon.it',\n  'amazon.ca',\n  'amazon.co.jp',\n  'images-amazon.com',\n  'media-amazon.com',\n  'ws-na.amazon-adsystem.com',\n\n  // MCP Connectors — embed-capable services (v2.2.7)\n  'gamma.app',\n  'www.gamma.app',\n  'app.hubspot.com',\n  'share.hubspot.com',\n  'www.data.gouv.fr',\n  'data.gouv.fr',\n  'clinicaltrials.gov',\n  'www.clinicaltrials.gov',\n  'linear.app',\n  'www.linear.app',\n\n  // Payment platforms (v2.2.12)\n  'polar.sh',\n  'www.polar.sh',\n  'checkout.stripe.com',\n  'js.stripe.com',\n  'billing.stripe.com',\n  'buy.stripe.com',\n  'connect.stripe.com',\n  'invoice.stripe.com',\n];\n\n/**\n * Trusted iframe domains that require allow-same-origin to function.\n * These domains need access to their own cookies/storage for auth.\n * All other whitelisted domains get a restrictive sandbox without allow-same-origin.\n */\nexport const TRUSTED_IFRAME_DOMAINS = [\n  // Deposium (own domains)\n  'deposium.com',\n  'deposium.vip',\n  'deposium.ai',\n  'localhost',\n\n  // Google services (need auth cookies)\n  'docs.google.com',\n  'drive.google.com',\n  'sheets.google.com',\n  'slides.google.com',\n  'maps.google.com',\n  'datastudio.google.com',\n  'lookerstudio.google.com',\n\n  // Productivity (need auth)\n  'notion.so',\n  'www.notion.so',\n  'airtable.com',\n  'figma.com',\n  'www.figma.com',\n  'miro.com',\n\n  // Payment (need auth + cookies for checkout)\n  'polar.sh',\n  'www.polar.sh',\n  'checkout.stripe.com',\n  'js.stripe.com',\n  'billing.stripe.com',\n  'buy.stripe.com',\n  'connect.stripe.com',\n  'invoice.stripe.com',\n\n  // Business tools (need auth)\n  'app.hubspot.com',\n  'share.hubspot.com',\n  'app.powerbi.com',\n  'linear.app',\n  'www.linear.app',\n  'calendly.com',\n  'typeform.com',\n  'cal.com',\n  'canva.com',\n];\n\n/**\n * Validate grid position bounds (1-12 columns)\n */\nexport function validateGridPosition(position: UIComponent['position']): ValidationResult {\n  const errors: ValidationResult['errors'] = [];\n\n  // ✅ PHASE 3 FIX: Defensive check for undefined position\n  if (!position) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'position',\n          message: 'Position is required',\n          code: 'MISSING_POSITION',\n        },\n      ],\n    };\n  }\n\n  if (position.colStart < 1 || position.colStart > 12) {\n    errors.push({\n      path: 'position.colStart',\n      message: 'Column start must be between 1 and 12',\n      code: 'INVALID_GRID_COL_START',\n    });\n  }\n\n  if (position.colSpan < 1 || position.colSpan > 12) {\n    errors.push({\n      path: 'position.colSpan',\n      message: 'Column span must be between 1 and 12',\n      code: 'INVALID_GRID_COL_SPAN',\n    });\n  }\n\n  if (position.colStart + position.colSpan - 1 > 12) {\n    errors.push({\n      path: 'position',\n      message: 'Column start + span exceeds grid width (12)',\n      code: 'GRID_OVERFLOW',\n    });\n  }\n\n  if (position.rowStart !== undefined && position.rowStart < 1) {\n    errors.push({\n      path: 'position.rowStart',\n      message: 'Row start must be >= 1',\n      code: 'INVALID_GRID_ROW_START',\n    });\n  }\n\n  if (position.rowSpan !== undefined && position.rowSpan < 1) {\n    errors.push({\n      path: 'position.rowSpan',\n      message: 'Row span must be >= 1',\n      code: 'INVALID_GRID_ROW_SPAN',\n    });\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * Validate chart component against resource limits\n */\nexport function validateChartComponent(\n  params: ChartComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = [];\n\n  // Guard: params.data must exist with labels + datasets\n  if (!params?.data) {\n    return {\n      valid: false,\n      errors: [{ path: 'params.data', message: 'Missing chart data object', code: 'MISSING_DATA' }],\n    };\n  }\n  if (!Array.isArray(params.data.datasets)) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'params.data.datasets',\n          message: 'Missing or invalid datasets array',\n          code: 'MISSING_DATASETS',\n        },\n      ],\n    };\n  }\n  // Detect point-based charts (scatter/bubble) or object data (time-series line)\n  const chartType = params.type || 'bar';\n  const usesPoints = (data: unknown[]) => data.some(value =>\n    typeof value === 'object' && value !== null && 'x' in value\n  );\n  const hasObjectData = params.data.datasets.some(dataset =>\n    Array.isArray(dataset.data) && usesPoints(dataset.data)\n  );\n  const isPointChart = chartType === 'scatter' || chartType === 'bubble' || hasObjectData;\n\n  // Labels required only for categorical charts (not scatter/bubble/time-series)\n  if (!isPointChart) {\n    if (!Array.isArray(params.data.labels)) {\n      return {\n        valid: false,\n        errors: [\n          {\n            path: 'params.data.labels',\n            message: 'Missing or invalid labels array',\n            code: 'MISSING_LABELS',\n          },\n        ],\n      };\n    }\n  }\n\n  // Validate data points count\n  const totalDataPoints = params.data.datasets.reduce(\n    (sum, dataset) => sum + (Array.isArray(dataset.data) ? dataset.data.length : 0),\n    0\n  );\n\n  if (totalDataPoints > limits.maxDataPoints) {\n    errors.push({\n      path: 'params.data',\n      message: `Chart exceeds max data points: ${totalDataPoints} > ${limits.maxDataPoints}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    });\n  }\n\n  // Length mismatch check — only for categorical charts, skip empty datasets\n  if (chartType !== 'scatter' && chartType !== 'bubble' && Array.isArray(params.data.labels)) {\n    const expectedLength = params.data.labels.length;\n    for (const [index, dataset] of params.data.datasets.entries()) {\n      if (\n        Array.isArray(dataset.data) &&\n        !usesPoints(dataset.data) &&\n        dataset.data.length > 0 &&\n        dataset.data.length !== expectedLength\n      ) {\n        errors.push({\n          path: `params.data.datasets[${index}]`,\n          message: `Dataset length mismatch: expected ${expectedLength}, got ${dataset.data.length}`,\n          code: 'DATA_LENGTH_MISMATCH',\n        });\n      }\n    }\n  }\n\n  // Data type validation — numbers for categorical, {x,y} objects for point charts\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    if (!Array.isArray(dataset.data)) continue;\n    const datasetIsPointChart = chartType === 'scatter' || chartType === 'bubble' || usesPoints(dataset.data);\n    for (const [dataIndex, value] of dataset.data.entries()) {\n      if (datasetIsPointChart) {\n        const vObj = value as any;\n        if (\n          typeof value !== 'object' ||\n          value === null ||\n          vObj.x == null ||\n          typeof vObj.y !== 'number' ||\n          (vObj.r !== undefined && (typeof vObj.r !== 'number' || !Number.isFinite(vObj.r) || vObj.r < 0))\n        ) {\n          errors.push({\n            path: `params.data.datasets[${index}].data[${dataIndex}]`,\n            message: `Invalid point data: expected {x, y} object`,\n            code: 'INVALID_POINT_DATA',\n          });\n        }\n      } else {\n        if (typeof value !== 'number' || !Number.isFinite(value)) {\n          errors.push({\n            path: `params.data.datasets[${index}].data[${dataIndex}]`,\n            message: `Invalid data value: ${value} (must be finite number)`,\n            code: 'INVALID_DATA_TYPE',\n          });\n        }\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * Validate table component against resource limits\n */\nexport function validateTableComponent(\n  params: TableComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = [];\n\n  for (const key of ['pageSize', 'chatPageSize', 'initialPage'] as const) {\n    const value = params[key];\n    if (value !== undefined && (typeof value !== 'number' || !Number.isInteger(value) || value < 0)) {\n      errors.push({\n        path: `params.${key}`,\n        message: `${key} must be a nonnegative integer`,\n        code: 'INVALID_PAGINATION',\n      });\n    }\n  }\n\n  // Validate row count\n  if (params.rows.length > limits.maxTableRows) {\n    errors.push({\n      path: 'params.rows',\n      message: `Table exceeds max rows: ${params.rows.length} > ${limits.maxTableRows}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    });\n  }\n\n  // Validate columns\n  if (params.columns.length === 0) {\n    errors.push({\n      path: 'params.columns',\n      message: 'Table must have at least one column',\n      code: 'EMPTY_COLUMNS',\n    });\n  }\n\n  // Validate column keys are unique\n  const columnKeys = new Set<string>();\n  for (const [index, column] of params.columns.entries()) {\n    if (columnKeys.has(column.key)) {\n      errors.push({\n        path: `params.columns[${index}]`,\n        message: `Duplicate column key: ${column.key}`,\n        code: 'DUPLICATE_COLUMN_KEY',\n      });\n    }\n    columnKeys.add(column.key);\n  }\n\n  // Validate rows have valid data for defined columns\n  for (const [rowIndex, row] of params.rows.entries()) {\n    for (const column of params.columns) {\n      if (!(column.key in row)) {\n        errors.push({\n          path: `params.rows[${rowIndex}]`,\n          message: `Missing column key: ${column.key}`,\n          code: 'MISSING_COLUMN_DATA',\n        });\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * Validate payload size\n */\nexport function validatePayloadSize(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const payloadSize = JSON.stringify(component).length;\n\n  if (payloadSize > limits.maxPayloadSize) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'component',\n          message: `Payload size exceeds limit: ${payloadSize} > ${limits.maxPayloadSize} bytes`,\n          code: 'PAYLOAD_TOO_LARGE',\n        },\n      ],\n    };\n  }\n\n  return { valid: true };\n}\n\n/**\n * Sanitize string to prevent XSS\n * Basic implementation - DOMPurify used at render time\n */\nexport function sanitizeString(input: string): string {\n  return input\n    .replace(/<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi, '')\n    .replace(/on\\w+=\"[^\"]*\"/gi, '')\n    .replace(/javascript:/gi, '');\n}\n\n/**\n * Validate iframe domain against whitelist\n *\n * @param url - The URL to validate\n * @param options - Optional validation options\n * @param options.policy - 'strict' (default), 'extend', or 'allow-all'\n * @param options.customDomains - Additional domains when policy is 'extend'\n */\nexport function validateIframeDomain(\n  url: string,\n  options?: { policy?: IframePolicy; customDomains?: string[] }\n): ValidationResult {\n  // If allow-all, skip validation\n  if (options?.policy === 'allow-all') {\n    return { valid: true };\n  }\n\n  try {\n    const parsedUrl = new URL(url);\n    const domain = parsedUrl.hostname;\n\n    // Build effective whitelist\n    let effectiveWhitelist = DEFAULT_IFRAME_DOMAINS;\n    if (options?.policy === 'extend' && options.customDomains) {\n      effectiveWhitelist = [...DEFAULT_IFRAME_DOMAINS, ...options.customDomains];\n    }\n\n    // SECURITY (v5.5.1) — pre-fix bug: predicate was `allowed === 'localhost'`\n    // which trivially returned true for every URL once the whitelist contained\n    // 'localhost' (an entry from DEFAULT_IFRAME_DOMAINS), making the entire\n    // domain whitelist inoperative. Fixed: only the URL's actual hostname\n    // being 'localhost' (or a 127.0.0.x loopback) bypasses the whitelist.\n    const isLoopback = domain === 'localhost' || /^127(\\.\\d{1,3}){3}$/.test(domain);\n    const isAllowed =\n      isLoopback ||\n      effectiveWhitelist.some(\n        (allowed) =>\n          allowed !== 'localhost' && (domain === allowed || domain.endsWith(`.${allowed}`))\n      );\n\n    if (!isAllowed) {\n      return {\n        valid: false,\n        errors: [\n          {\n            path: 'url',\n            message: `Domain not whitelisted: ${domain}`,\n            code: 'DOMAIN_NOT_WHITELISTED',\n          },\n        ],\n      };\n    }\n\n    return { valid: true };\n  } catch (error) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'url',\n          message: 'Invalid URL format',\n          code: 'INVALID_URL',\n        },\n      ],\n    };\n  }\n}\n\n/**\n * Get the appropriate sandbox attribute for an iframe URL.\n *\n * Trusted domains (Google, Deposium, payment, auth-requiring services) get\n * `allow-same-origin` so they can access their own cookies/storage.\n * All other whitelisted domains get a restrictive sandbox without it,\n * preventing access to the parent page's localStorage/cookies.\n *\n * @param url - The iframe URL\n * @param options - Optional custom trusted domains\n * @returns sandbox attribute string\n */\nexport function getIframeSandbox(\n  url: string,\n  options?: { customTrustedDomains?: string[] }\n): string {\n  const baseSandbox = 'allow-scripts allow-popups';\n\n  try {\n    const domain = new URL(url).hostname;\n    let trustedList = TRUSTED_IFRAME_DOMAINS;\n    if (options?.customTrustedDomains) {\n      trustedList = [...TRUSTED_IFRAME_DOMAINS, ...options.customTrustedDomains];\n    }\n\n    const isTrusted = trustedList.some(\n      (trusted) => domain === trusted || domain.endsWith(`.${trusted}`)\n    );\n\n    if (isTrusted) {\n      return `${baseSandbox} allow-same-origin allow-forms`;\n    }\n  } catch {\n    // Invalid URL — use restrictive sandbox\n  }\n\n  return baseSandbox;\n}\n\n/**\n * Validate entire component\n *\n * @param component - The component to validate\n * @param options - Optional validation options (limits, iframePolicy, customIframeDomains)\n */\nexport function validateComponent(\n  component: UIComponent,\n  options?: ValidationOptions\n): ValidationResult {\n  const limits = options?.limits ?? DEFAULT_RESOURCE_LIMITS;\n  const errors: ValidationResult['errors'] = [];\n\n  // Guard: params must exist\n  if (!component.params) {\n    return {\n      valid: false,\n      errors: [{ path: 'params', message: 'Missing component params', code: 'MISSING_PARAMS' }],\n    };\n  }\n\n  // Validate grid position\n  const gridResult = validateGridPosition(component.position);\n  if (!gridResult.valid) {\n    errors.push(...(gridResult.errors || []));\n  }\n\n  // Validate payload size\n  const sizeResult = validatePayloadSize(component, limits);\n  if (!sizeResult.valid) {\n    errors.push(...(sizeResult.errors || []));\n  }\n\n  // Type-specific validation (B.1 — v5.5.0, expanded v5.6.0).\n  //\n  // 14 types delegate shape validation to Zod schemas in `mcp-ui-spec` via\n  // SPEC_VALIDATORS. The 3 remaining types stay imperative because they\n  // need cross-field consistency, resource limits, or have nothing to validate\n  // (see SPEC_VALIDATORS docstring).\n  const specValidator = SPEC_VALIDATORS[component.type];\n  if (specValidator) {\n    const result = specValidator.schema.safeParse(component.params);\n    if (!result.success) {\n      errors.push(...mapZodIssuesToErrors(result.error.issues, specValidator.legacyCode));\n    }\n    // Post-spec chained checks. Skipped when the shape parse failed to avoid\n    // cascading errors on already-broken payloads.\n    if (result.success) {\n      // Iframe + video: domain whitelist\n      if (component.type === 'iframe' || component.type === 'video') {\n        const url = (component.params as { url?: string })?.url;\n        if (typeof url === 'string') {\n          const domainResult = validateIframeDomain(url, {\n            policy: options?.iframePolicy,\n            customDomains: options?.customIframeDomains,\n          });\n          if (!domainResult.valid) {\n            errors.push(...(domainResult.errors || []));\n          }\n        }\n      }\n      // Map (v5.6.0; widened v6.8.2): a map must carry at least one\n      // visualizable thing. Originally only center/markers counted, but since\n      // spec@5.2.0 a `type:'map'` may render purely from `geojson`, named\n      // `layers`, or a `pmtiles` source (e.g. a Cadastre choropleth with no\n      // markers and an auto-fit viewport). Rejecting those as INVALID_MAP\n      // blocked valid maps the renderer draws. Accept ANY of:\n      // center | markers | geojson | layers | pmtiles.\n      if (component.type === 'map') {\n        const mapParams = component.params as {\n          center?: unknown;\n          markers?: unknown[];\n          geojson?: unknown;\n          layers?: unknown[];\n          pmtiles?: unknown;\n        };\n        const hasContent =\n          mapParams.center != null ||\n          (Array.isArray(mapParams.markers) && mapParams.markers.length > 0) ||\n          mapParams.geojson != null ||\n          (Array.isArray(mapParams.layers) && mapParams.layers.length > 0) ||\n          mapParams.pmtiles != null;\n        if (!hasContent) {\n          errors.push({\n            path: 'params',\n            message: 'Map must have center, markers, geojson, layers, or pmtiles',\n            code: 'INVALID_MAP',\n          });\n        }\n      }\n    }\n  } else {\n    // Imperative path for chart/table/modal/grid/footer/composite.\n    switch (component.type) {\n      case 'chart': {\n        const chartResult = validateChartComponent(\n          component.params as ChartComponentParams,\n          limits\n        );\n        if (!chartResult.valid) {\n          errors.push(...(chartResult.errors || []));\n        }\n        break;\n      }\n\n      case 'table': {\n        const tableResult = validateTableComponent(\n          component.params as TableComponentParams,\n          limits\n        );\n        if (!tableResult.valid) {\n          errors.push(...(tableResult.errors || []));\n        }\n        break;\n      }\n\n      case 'modal':\n        // Modal is valid with minimal params (title optional, content can be children).\n        break;\n\n      default:\n        // Known types without specific validation pass through — renderer handles errors.\n        // Truly unknown types (e.g. typos in streamed JSON) are rejected.\n        if (!KNOWN_COMPONENT_TYPES.has(component.type)) {\n          errors.push({\n            path: 'type',\n            message: `Unknown component type: ${component.type}`,\n            code: 'UNKNOWN_COMPONENT_TYPE',\n          });\n        }\n        break;\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * Validate entire layout\n *\n * @param layout - The layout to validate\n * @param options - Optional validation options (limits, iframePolicy, customIframeDomains)\n */\nexport function validateLayout(layout: UILayout, options?: ValidationOptions): ValidationResult {\n  const errors: ValidationResult['errors'] = [];\n\n  // Validate component count\n  if (layout.components.length === 0) {\n    errors.push({\n      path: 'components',\n      message: 'Layout must have at least one component',\n      code: 'EMPTY_LAYOUT',\n    });\n  }\n\n  if (layout.components.length > 12) {\n    errors.push({\n      path: 'components',\n      message: `Layout exceeds max components: ${layout.components.length} > 12`,\n      code: 'TOO_MANY_COMPONENTS',\n    });\n  }\n\n  // Validate each component\n  for (const [index, component] of layout.components.entries()) {\n    const result = validateComponent(component, options);\n    if (!result.valid) {\n      errors.push(\n        ...(result.errors?.map((error) => ({\n          ...error,\n          path: `components[${index}].${error.path}`,\n        })) || [])\n      );\n    }\n  }\n\n  // Validate grid configuration\n  if (layout.grid.columns !== 12) {\n    errors.push({\n      path: 'grid.columns',\n      message: 'Grid must have 12 columns (Bootstrap-like)',\n      code: 'INVALID_GRID_COLUMNS',\n    });\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * Validate a single form field value against field rules\n */\nexport function validateFieldValue(\n  value: any,\n  field: FormFieldParams\n): { valid: boolean; error?: string } {\n  // Required check\n  if (field.required) {\n    if (value === undefined || value === null || value === '') {\n      return { valid: false, error: `${field.label || field.name} is required` };\n    }\n    if (field.type === 'checkbox' && value !== true) {\n      return { valid: false, error: `${field.label || field.name} must be checked` };\n    }\n  }\n\n  // Skip further validation if value is empty and not required\n  if (value === undefined || value === null || value === '') {\n    return { valid: true };\n  }\n\n  // Type-specific validation\n  switch (field.type) {\n    case 'text':\n    case 'textarea':\n    case 'password':\n      if (field.minLength && String(value).length < field.minLength) {\n        return { valid: false, error: `Minimum ${field.minLength} characters required` };\n      }\n      if (field.maxLength && String(value).length > field.maxLength) {\n        return { valid: false, error: `Maximum ${field.maxLength} characters allowed` };\n      }\n      if (field.pattern && !new RegExp(field.pattern).test(String(value))) {\n        return { valid: false, error: 'Invalid format' };\n      }\n      break;\n\n    case 'email':\n      if (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(String(value))) {\n        return { valid: false, error: 'Invalid email address' };\n      }\n      break;\n\n    case 'number': {\n      const numValue = Number(value);\n      if (isNaN(numValue)) {\n        return { valid: false, error: 'Must be a valid number' };\n      }\n      if (field.min !== undefined && numValue < field.min) {\n        return { valid: false, error: `Minimum value is ${field.min}` };\n      }\n      if (field.max !== undefined && numValue > field.max) {\n        return { valid: false, error: `Maximum value is ${field.max}` };\n      }\n      break;\n    }\n\n    case 'date':\n      if (field.minDate && value < field.minDate) {\n        return { valid: false, error: `Date must be after ${field.minDate}` };\n      }\n      if (field.maxDate && value > field.maxDate) {\n        return { valid: false, error: `Date must be before ${field.maxDate}` };\n      }\n      break;\n\n    case 'select':\n    case 'radio':\n      // Validate that value is one of the options\n      if (field.options && field.options.length > 0) {\n        const validValues = field.options.map((opt) => opt.value);\n        if (!validValues.includes(String(value))) {\n          return { valid: false, error: 'Please select a valid option' };\n        }\n      }\n      break;\n  }\n\n  // valueFormat validation (v4.3.0) — runs after type-specific checks\n  if (field.valueFormat && value !== undefined && value !== null && value !== '') {\n    const vals = Array.isArray(value) ? value : [String(value)];\n    for (const v of vals) {\n      if (!new RegExp(field.valueFormat).test(v)) {\n        return {\n          valid: false,\n          error: field.valueFormatHint || `Invalid format (expected: ${field.valueFormat})`,\n        };\n      }\n    }\n  }\n\n  return { valid: true };\n}\n\n/**\n * Validate entire form data against field definitions\n */\nexport function validateFormData(\n  data: Record<string, any>,\n  fields: FormFieldParams[]\n): { valid: boolean; errors: Record<string, string> } {\n  const errors: Record<string, string> = {};\n\n  for (const field of fields) {\n    const result = validateFieldValue(data[field.name], field);\n    if (!result.valid && result.error) {\n      errors[field.name] = result.error;\n    }\n  }\n\n  return {\n    valid: Object.keys(errors).length === 0,\n    errors,\n  };\n}\n"],"names":[],"mappings":";AAuDA,MAAM,wBAAqC,IAAI,IAAY,oBAAoB,OAAO;AAwBtF,MAAM,kBAA6F;AAAA,EACjG,QAAQ,EAAE,QAAQ,6BAA6B,YAAY,iBAAA;AAAA,EAC3D,MAAM,EAAE,QAAQ,2BAA2B,YAAY,eAAA;AAAA,EACvD,QAAQ,EAAE,QAAQ,6BAA6B,YAAY,iBAAA;AAAA,EAC3D,OAAO,EAAE,QAAQ,4BAA4B,YAAY,gBAAA;AAAA,EACzD,MAAM,EAAE,QAAQ,2BAA2B,YAAY,eAAA;AAAA,EACvD,QAAQ,EAAE,QAAQ,oBAAoB,YAAY,iBAAA;AAAA,EAClD,OAAO,EAAE,QAAQ,4BAA4B,YAAY,gBAAA;AAAA,EACzD,UAAU,EAAE,QAAQ,+BAA+B,YAAY,iBAAA;AAAA,EAC/D,iBAAiB,EAAE,QAAQ,0BAA0B,YAAY,gBAAA;AAAA,EACjE,gBAAgB,EAAE,QAAQ,yBAAyB,YAAY,qBAAA;AAAA,EAC/D,MAAM,EAAE,QAAQ,2BAA2B,YAAY,eAAA;AAAA,EACvD,UAAU,EAAE,QAAQ,+BAA+B,YAAY,mBAAA;AAAA;AAAA,EAE/D,MAAM,EAAE,QAAQ,2BAA2B,YAAY,aAAA;AAAA,EACvD,KAAK,EAAE,QAAQ,0BAA0B,YAAY,cAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrD,OAAO,EAAE,QAAQ,4BAA4B,YAAY,gBAAA;AAC3D;AAUA,SAAS,qBACP,QACA,YACyC;AACzC,SAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC5B,MAAM,MAAM,KAAK,SAAS,IAAI,UAAU,MAAM,KAAK,KAAK,GAAG,CAAC,KAAK;AAAA,IACjE,SAAS,MAAM;AAAA,IACf,MAAM;AAAA,EAAA,EACN;AACJ;AAKO,MAAM,0BAA0C;AAAA,EACrD,eAAe;AAAA,EACf,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUd,gBAAgB,MAAM;AAAA;AAAA,EACtB,eAAe;AAAA;AACjB;AASO,MAAM,yBAAyB;AAAA;AAAA,EAEpC;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,MAAM,yBAAyB;AAAA;AAAA,EAEpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKO,SAAS,qBAAqB,UAAqD;AACxF,QAAM,SAAqC,CAAA;AAG3C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,MAAI,SAAS,WAAW,KAAK,SAAS,WAAW,IAAI;AACnD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,UAAU,KAAK,SAAS,UAAU,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,SAAS,UAAU,IAAI,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,aAAa,UAAa,SAAS,WAAW,GAAG;AAC5D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,YAAY,UAAa,SAAS,UAAU,GAAG;AAC1D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,MAAI,EAAC,iCAAQ,OAAM;AACjB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,CAAC,EAAE,MAAM,eAAe,SAAS,6BAA6B,MAAM,eAAA,CAAgB;AAAA,IAAA;AAAA,EAEhG;AACA,MAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,GAAG;AACxC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,QAAM,YAAY,OAAO,QAAQ;AACjC,QAAM,aAAa,CAAC,SAAoB,KAAK;AAAA,IAAK,WAChD,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO;AAAA,EAAA;AAExD,QAAM,gBAAgB,OAAO,KAAK,SAAS;AAAA,IAAK,CAAA,YAC9C,MAAM,QAAQ,QAAQ,IAAI,KAAK,WAAW,QAAQ,IAAI;AAAA,EAAA;AAExD,QAAM,eAAe,cAAc,aAAa,cAAc,YAAY;AAG1E,MAAI,CAAC,cAAc;AACjB,QAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,MAAM,GAAG;AACtC,aAAO;AAAA,QACL,OAAO;AAAA,QACP,QAAQ;AAAA,UACN;AAAA,YACE,MAAM;AAAA,YACN,SAAS;AAAA,YACT,MAAM;AAAA,UAAA;AAAA,QACR;AAAA,MACF;AAAA,IAEJ;AAAA,EACF;AAGA,QAAM,kBAAkB,OAAO,KAAK,SAAS;AAAA,IAC3C,CAAC,KAAK,YAAY,OAAO,MAAM,QAAQ,QAAQ,IAAI,IAAI,QAAQ,KAAK,SAAS;AAAA,IAC7E;AAAA,EAAA;AAGF,MAAI,kBAAkB,OAAO,eAAe;AAC1C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,eAAe,MAAM,OAAO,aAAa;AAAA,MACpF,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,MAAI,cAAc,aAAa,cAAc,YAAY,MAAM,QAAQ,OAAO,KAAK,MAAM,GAAG;AAC1F,UAAM,iBAAiB,OAAO,KAAK,OAAO;AAC1C,eAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,UACE,MAAM,QAAQ,QAAQ,IAAI,KAC1B,CAAC,WAAW,QAAQ,IAAI,KACxB,QAAQ,KAAK,SAAS,KACtB,QAAQ,KAAK,WAAW,gBACxB;AACA,eAAO,KAAK;AAAA,UACV,MAAM,wBAAwB,KAAK;AAAA,UACnC,SAAS,qCAAqC,cAAc,SAAS,QAAQ,KAAK,MAAM;AAAA,UACxF,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAGA,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,QAAI,CAAC,MAAM,QAAQ,QAAQ,IAAI,EAAG;AAClC,UAAM,sBAAsB,cAAc,aAAa,cAAc,YAAY,WAAW,QAAQ,IAAI;AACxG,eAAW,CAAC,WAAW,KAAK,KAAK,QAAQ,KAAK,WAAW;AACvD,UAAI,qBAAqB;AACvB,cAAM,OAAO;AACb,YACE,OAAO,UAAU,YACjB,UAAU,QACV,KAAK,KAAK,QACV,OAAO,KAAK,MAAM,YACjB,KAAK,MAAM,WAAc,OAAO,KAAK,MAAM,YAAY,CAAC,OAAO,SAAS,KAAK,CAAC,KAAK,KAAK,IAAI,IAC7F;AACA,iBAAO,KAAK;AAAA,YACV,MAAM,wBAAwB,KAAK,UAAU,SAAS;AAAA,YACtD,SAAS;AAAA,YACT,MAAM;AAAA,UAAA,CACP;AAAA,QACH;AAAA,MACF,OAAO;AACL,YAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG;AACxD,iBAAO,KAAK;AAAA,YACV,MAAM,wBAAwB,KAAK,UAAU,SAAS;AAAA,YACtD,SAAS,uBAAuB,KAAK;AAAA,YACrC,MAAM;AAAA,UAAA,CACP;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAE3C,aAAW,OAAO,CAAC,YAAY,gBAAgB,aAAa,GAAY;AACtE,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,UAAU,WAAc,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,IAAI;AAC/F,aAAO,KAAK;AAAA,QACV,MAAM,UAAU,GAAG;AAAA,QACnB,SAAS,GAAG,GAAG;AAAA,QACf,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,SAAS,OAAO,cAAc;AAC5C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,2BAA2B,OAAO,KAAK,MAAM,MAAM,OAAO,YAAY;AAAA,MAC/E,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,MAAI,OAAO,QAAQ,WAAW,GAAG;AAC/B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iCAAiB,IAAA;AACvB,aAAW,CAAC,OAAO,MAAM,KAAK,OAAO,QAAQ,WAAW;AACtD,QAAI,WAAW,IAAI,OAAO,GAAG,GAAG;AAC9B,aAAO,KAAK;AAAA,QACV,MAAM,kBAAkB,KAAK;AAAA,QAC7B,SAAS,yBAAyB,OAAO,GAAG;AAAA,QAC5C,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AACA,eAAW,IAAI,OAAO,GAAG;AAAA,EAC3B;AAGA,aAAW,CAAC,UAAU,GAAG,KAAK,OAAO,KAAK,WAAW;AACnD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,EAAE,OAAO,OAAO,MAAM;AACxB,eAAO,KAAK;AAAA,UACV,MAAM,eAAe,QAAQ;AAAA,UAC7B,SAAS,uBAAuB,OAAO,GAAG;AAAA,UAC1C,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,oBACd,WACA,SAAyB,yBACP;AAClB,QAAM,cAAc,KAAK,UAAU,SAAS,EAAE;AAE9C,MAAI,cAAc,OAAO,gBAAgB;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS,+BAA+B,WAAW,MAAM,OAAO,cAAc;AAAA,UAC9E,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,SAAO,EAAE,OAAO,KAAA;AAClB;AAMO,SAAS,eAAe,OAAuB;AACpD,SAAO,MACJ,QAAQ,uDAAuD,EAAE,EACjE,QAAQ,mBAAmB,EAAE,EAC7B,QAAQ,iBAAiB,EAAE;AAChC;AAUO,SAAS,qBACd,KACA,SACkB;AAElB,OAAI,mCAAS,YAAW,aAAa;AACnC,WAAO,EAAE,OAAO,KAAA;AAAA,EAClB;AAEA,MAAI;AACF,UAAM,YAAY,IAAI,IAAI,GAAG;AAC7B,UAAM,SAAS,UAAU;AAGzB,QAAI,qBAAqB;AACzB,SAAI,mCAAS,YAAW,YAAY,QAAQ,eAAe;AACzD,2BAAqB,CAAC,GAAG,wBAAwB,GAAG,QAAQ,aAAa;AAAA,IAC3E;AAOA,UAAM,aAAa,WAAW,eAAe,sBAAsB,KAAK,MAAM;AAC9E,UAAM,YACJ,cACA,mBAAmB;AAAA,MACjB,CAAC,YACC,YAAY,gBAAgB,WAAW,WAAW,OAAO,SAAS,IAAI,OAAO,EAAE;AAAA,IAAA;AAGrF,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,QACL,OAAO;AAAA,QACP,QAAQ;AAAA,UACN;AAAA,YACE,MAAM;AAAA,YACN,SAAS,2BAA2B,MAAM;AAAA,YAC1C,MAAM;AAAA,UAAA;AAAA,QACR;AAAA,MACF;AAAA,IAEJ;AAEA,WAAO,EAAE,OAAO,KAAA;AAAA,EAClB,SAAS,OAAO;AACd,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AACF;AAcO,SAAS,iBACd,KACA,SACQ;AACR,QAAM,cAAc;AAEpB,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG,EAAE;AAC5B,QAAI,cAAc;AAClB,QAAI,mCAAS,sBAAsB;AACjC,oBAAc,CAAC,GAAG,wBAAwB,GAAG,QAAQ,oBAAoB;AAAA,IAC3E;AAEA,UAAM,YAAY,YAAY;AAAA,MAC5B,CAAC,YAAY,WAAW,WAAW,OAAO,SAAS,IAAI,OAAO,EAAE;AAAA,IAAA;AAGlE,QAAI,WAAW;AACb,aAAO,GAAG,WAAW;AAAA,IACvB;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO;AACT;AAQO,SAAS,kBACd,WACA,SACkB;;AAClB,QAAM,UAAS,mCAAS,WAAU;AAClC,QAAM,SAAqC,CAAA;AAG3C,MAAI,CAAC,UAAU,QAAQ;AACrB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,CAAC,EAAE,MAAM,UAAU,SAAS,4BAA4B,MAAM,iBAAA,CAAkB;AAAA,IAAA;AAAA,EAE5F;AAGA,QAAM,aAAa,qBAAqB,UAAU,QAAQ;AAC1D,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,QAAM,aAAa,oBAAoB,WAAW,MAAM;AACxD,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAQA,QAAM,gBAAgB,gBAAgB,UAAU,IAAI;AACpD,MAAI,eAAe;AACjB,UAAM,SAAS,cAAc,OAAO,UAAU,UAAU,MAAM;AAC9D,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,KAAK,GAAG,qBAAqB,OAAO,MAAM,QAAQ,cAAc,UAAU,CAAC;AAAA,IACpF;AAGA,QAAI,OAAO,SAAS;AAElB,UAAI,UAAU,SAAS,YAAY,UAAU,SAAS,SAAS;AAC7D,cAAM,OAAO,eAAU,WAAV,mBAAuC;AACpD,YAAI,OAAO,QAAQ,UAAU;AAC3B,gBAAM,eAAe,qBAAqB,KAAK;AAAA,YAC7C,QAAQ,mCAAS;AAAA,YACjB,eAAe,mCAAS;AAAA,UAAA,CACzB;AACD,cAAI,CAAC,aAAa,OAAO;AACvB,mBAAO,KAAK,GAAI,aAAa,UAAU,CAAA,CAAG;AAAA,UAC5C;AAAA,QACF;AAAA,MACF;AAQA,UAAI,UAAU,SAAS,OAAO;AAC5B,cAAM,YAAY,UAAU;AAO5B,cAAM,aACJ,UAAU,UAAU,QACnB,MAAM,QAAQ,UAAU,OAAO,KAAK,UAAU,QAAQ,SAAS,KAChE,UAAU,WAAW,QACpB,MAAM,QAAQ,UAAU,MAAM,KAAK,UAAU,OAAO,SAAS,KAC9D,UAAU,WAAW;AACvB,YAAI,CAAC,YAAY;AACf,iBAAO,KAAK;AAAA,YACV,MAAM;AAAA,YACN,SAAS;AAAA,YACT,MAAM;AAAA,UAAA,CACP;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF,OAAO;AAEL,YAAQ,UAAU,MAAA;AAAA,MAChB,KAAK,SAAS;AACZ,cAAM,cAAc;AAAA,UAClB,UAAU;AAAA,UACV;AAAA,QAAA;AAEF,YAAI,CAAC,YAAY,OAAO;AACtB,iBAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,QAC3C;AACA;AAAA,MACF;AAAA,MAEA,KAAK,SAAS;AACZ,cAAM,cAAc;AAAA,UAClB,UAAU;AAAA,UACV;AAAA,QAAA;AAEF,YAAI,CAAC,YAAY,OAAO;AACtB,iBAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,QAC3C;AACA;AAAA,MACF;AAAA,MAEA,KAAK;AAEH;AAAA,MAEF;AAGE,YAAI,CAAC,sBAAsB,IAAI,UAAU,IAAI,GAAG;AAC9C,iBAAO,KAAK;AAAA,YACV,MAAM;AAAA,YACN,SAAS,2BAA2B,UAAU,IAAI;AAAA,YAClD,MAAM;AAAA,UAAA,CACP;AAAA,QACH;AACA;AAAA,IAAA;AAAA,EAEN;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAQO,SAAS,eAAe,QAAkB,SAA+C;;AAC9F,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,WAAW,WAAW,GAAG;AAClC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,OAAO,WAAW,SAAS,IAAI;AACjC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,OAAO,WAAW,MAAM;AAAA,MACnE,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,aAAW,CAAC,OAAO,SAAS,KAAK,OAAO,WAAW,WAAW;AAC5D,UAAM,SAAS,kBAAkB,WAAW,OAAO;AACnD,QAAI,CAAC,OAAO,OAAO;AACjB,aAAO;AAAA,QACL,KAAI,YAAO,WAAP,mBAAe,IAAI,CAAC,WAAW;AAAA,UACjC,GAAG;AAAA,UACH,MAAM,cAAc,KAAK,KAAK,MAAM,IAAI;AAAA,QAAA,QACnC,CAAA;AAAA,MAAC;AAAA,IAEZ;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,YAAY,IAAI;AAC9B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,mBACd,OACA,OACoC;AAEpC,MAAI,MAAM,UAAU;AAClB,QAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AACzD,aAAO,EAAE,OAAO,OAAO,OAAO,GAAG,MAAM,SAAS,MAAM,IAAI,eAAA;AAAA,IAC5D;AACA,QAAI,MAAM,SAAS,cAAc,UAAU,MAAM;AAC/C,aAAO,EAAE,OAAO,OAAO,OAAO,GAAG,MAAM,SAAS,MAAM,IAAI,mBAAA;AAAA,IAC5D;AAAA,EACF;AAGA,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AACzD,WAAO,EAAE,OAAO,KAAA;AAAA,EAClB;AAGA,UAAQ,MAAM,MAAA;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,MAAM,aAAa,OAAO,KAAK,EAAE,SAAS,MAAM,WAAW;AAC7D,eAAO,EAAE,OAAO,OAAO,OAAO,WAAW,MAAM,SAAS,uBAAA;AAAA,MAC1D;AACA,UAAI,MAAM,aAAa,OAAO,KAAK,EAAE,SAAS,MAAM,WAAW;AAC7D,eAAO,EAAE,OAAO,OAAO,OAAO,WAAW,MAAM,SAAS,sBAAA;AAAA,MAC1D;AACA,UAAI,MAAM,WAAW,CAAC,IAAI,OAAO,MAAM,OAAO,EAAE,KAAK,OAAO,KAAK,CAAC,GAAG;AACnE,eAAO,EAAE,OAAO,OAAO,OAAO,iBAAA;AAAA,MAChC;AACA;AAAA,IAEF,KAAK;AACH,UAAI,CAAC,6BAA6B,KAAK,OAAO,KAAK,CAAC,GAAG;AACrD,eAAO,EAAE,OAAO,OAAO,OAAO,wBAAA;AAAA,MAChC;AACA;AAAA,IAEF,KAAK,UAAU;AACb,YAAM,WAAW,OAAO,KAAK;AAC7B,UAAI,MAAM,QAAQ,GAAG;AACnB,eAAO,EAAE,OAAO,OAAO,OAAO,yBAAA;AAAA,MAChC;AACA,UAAI,MAAM,QAAQ,UAAa,WAAW,MAAM,KAAK;AACnD,eAAO,EAAE,OAAO,OAAO,OAAO,oBAAoB,MAAM,GAAG,GAAA;AAAA,MAC7D;AACA,UAAI,MAAM,QAAQ,UAAa,WAAW,MAAM,KAAK;AACnD,eAAO,EAAE,OAAO,OAAO,OAAO,oBAAoB,MAAM,GAAG,GAAA;AAAA,MAC7D;AACA;AAAA,IACF;AAAA,IAEA,KAAK;AACH,UAAI,MAAM,WAAW,QAAQ,MAAM,SAAS;AAC1C,eAAO,EAAE,OAAO,OAAO,OAAO,sBAAsB,MAAM,OAAO,GAAA;AAAA,MACnE;AACA,UAAI,MAAM,WAAW,QAAQ,MAAM,SAAS;AAC1C,eAAO,EAAE,OAAO,OAAO,OAAO,uBAAuB,MAAM,OAAO,GAAA;AAAA,MACpE;AACA;AAAA,IAEF,KAAK;AAAA,IACL,KAAK;AAEH,UAAI,MAAM,WAAW,MAAM,QAAQ,SAAS,GAAG;AAC7C,cAAM,cAAc,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,KAAK;AACxD,YAAI,CAAC,YAAY,SAAS,OAAO,KAAK,CAAC,GAAG;AACxC,iBAAO,EAAE,OAAO,OAAO,OAAO,+BAAA;AAAA,QAChC;AAAA,MACF;AACA;AAAA,EAAA;AAIJ,MAAI,MAAM,eAAe,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AAC9E,UAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC;AAC1D,eAAW,KAAK,MAAM;AACpB,UAAI,CAAC,IAAI,OAAO,MAAM,WAAW,EAAE,KAAK,CAAC,GAAG;AAC1C,eAAO;AAAA,UACL,OAAO;AAAA,UACP,OAAO,MAAM,mBAAmB,6BAA6B,MAAM,WAAW;AAAA,QAAA;AAAA,MAElF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,OAAO,KAAA;AAClB;AAKO,SAAS,iBACd,MACA,QACoD;AACpD,QAAM,SAAiC,CAAA;AAEvC,aAAW,SAAS,QAAQ;AAC1B,UAAM,SAAS,mBAAmB,KAAK,MAAM,IAAI,GAAG,KAAK;AACzD,QAAI,CAAC,OAAO,SAAS,OAAO,OAAO;AACjC,aAAO,MAAM,IAAI,IAAI,OAAO;AAAA,IAC9B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,KAAK,MAAM,EAAE,WAAW;AAAA,IACtC;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"validation.js","sources":["../../src/services/validation.ts"],"sourcesContent":["/**\n * Component Validation Service\n * Phase 0: Resource Limits & Schema Validation\n *\n * Validates LLM-generated components against:\n * - JSON schema\n * - Resource limits (data points, payload size, grid bounds)\n * - Security constraints (domain whitelist, XSS prevention)\n */\n\nimport type { ZodIssue, ZodSchema } from 'zod';\nimport {\n  MetricComponentParamsSchema,\n  TextComponentParamsSchema,\n  IframeComponentParamsSchema,\n  ImageComponentParamsSchema,\n  LinkComponentParamsSchema,\n  CarouselComponentParamsSchema,\n  ArtifactComponentParamsSchema,\n  ActionParamsSchema,\n  VideoComponentParamsSchema,\n  ImageGalleryParamsSchema,\n  ActionGroupParamsSchema,\n  CodeComponentParamsSchema,\n  // v5.6.0 — added after spec@5.0.2 relaxations (deposium audit §M)\n  MapComponentParamsSchema,\n  FormComponentParamsSchema,\n  // v6.0.0 — graph primitive (peer @antv/g6 ^5)\n  GraphComponentParamsSchema,\n  // Single source of truth for the component-type enum (kills spec↔solid drift).\n  ComponentTypeSchema,\n} from '@seed-ship/mcp-ui-spec';\nimport type {\n  UIComponent,\n  UILayout,\n  ValidationResult,\n  ResourceLimits,\n  ChartComponentParams,\n  TableComponentParams,\n  FormFieldParams,\n  IframePolicy,\n  ValidationOptions,\n  ComponentType,\n} from '../types';\n// Runtime-free template helper: `src/validation.ts` (the SSR-safe subpath)\n// re-exports this module, so it must stay free of any solid-js import.\nimport { formatMCPUIString } from '../utils/format-string';\n\n/**\n * All known ComponentType values — used to distinguish known-but-unvalidated\n * types (pass through) from truly unknown strings (reject).\n *\n * Derived directly from the spec's `ComponentTypeSchema` (the single source of\n * truth) rather than hand-maintained, so a new enum member in the spec can\n * never silently drift out of solid's known-types set again. This is what\n * restored `composite`: it is in the spec enum but had been dropped from the\n * former hand-written list, contradicting the pass-through docstrings below.\n */\nconst KNOWN_COMPONENT_TYPES: Set<string> = new Set<string>(ComponentTypeSchema.options);\n\n/**\n * Spec-driven validation dispatch table (B.1 — v5.5.0, expanded in v5.6.0).\n *\n * For each ComponentType where we delegate shape validation to a Zod schema\n * from `@seed-ship/mcp-ui-spec`, this table maps:\n *   - the schema to safeParse against\n *   - the legacy error code to emit when shape parsing fails (preserves the\n *     pre-v5.5.0 `errors[].code` API contract — see MCP-UI-AUDIT-2026-04-26.md\n *     §I.3.a + §J.1)\n *\n * **v5.6.0** : `map` and `form` joined the dispatch after spec@5.0.2 relaxed\n * their schemas (LatLngPoint union for map.center, regex relax for\n * field.name) per deposium audit §L answers. As of v6.x this table\n * spec-validates 15 of the 21 component types; the remainder use imperative\n * validators (`chart`/`table`) or are pass-through (`grid`/`footer`/`composite`/`modal`).\n *\n * Types deliberately omitted (kept on the imperative path):\n *   - `chart`, `table` — have rich imperative validators with their own\n *     codes (MISSING_DATA, DATA_LENGTH_MISMATCH, RESOURCE_LIMIT_EXCEEDED, …)\n *   - `modal`          — all params are optional; nothing to enforce.\n *   - `grid`, `footer`, `composite` — pass-through, validated elsewhere.\n */\nconst SPEC_VALIDATORS: Partial<Record<ComponentType, { schema: ZodSchema; legacyCode: string }>> = {\n  metric: { schema: MetricComponentParamsSchema, legacyCode: 'INVALID_METRIC' },\n  text: { schema: TextComponentParamsSchema, legacyCode: 'INVALID_TEXT' },\n  iframe: { schema: IframeComponentParamsSchema, legacyCode: 'INVALID_IFRAME' },\n  image: { schema: ImageComponentParamsSchema, legacyCode: 'INVALID_IMAGE' },\n  link: { schema: LinkComponentParamsSchema, legacyCode: 'INVALID_LINK' },\n  action: { schema: ActionParamsSchema, legacyCode: 'INVALID_ACTION' },\n  video: { schema: VideoComponentParamsSchema, legacyCode: 'INVALID_VIDEO' },\n  carousel: { schema: CarouselComponentParamsSchema, legacyCode: 'EMPTY_CAROUSEL' },\n  'image-gallery': { schema: ImageGalleryParamsSchema, legacyCode: 'EMPTY_GALLERY' },\n  'action-group': { schema: ActionGroupParamsSchema, legacyCode: 'EMPTY_ACTION_GROUP' },\n  code: { schema: CodeComponentParamsSchema, legacyCode: 'INVALID_CODE' },\n  artifact: { schema: ArtifactComponentParamsSchema, legacyCode: 'INVALID_ARTIFACT' },\n  // v5.6.0 additions\n  form: { schema: FormComponentParamsSchema, legacyCode: 'EMPTY_FORM' },\n  map: { schema: MapComponentParamsSchema, legacyCode: 'INVALID_MAP' },\n  // v6.0.0 — graph primitive (no chained post-check : Zod's\n  // `nodes.min(1)` covers the only structural invariant ; edge\n  // source/target ids reference nodes by convention, not enforced here\n  // because LLM payloads sometimes ship edges to nodes added later.\n  // Unresolved refs are gracefully ignored by G6 v5.)\n  graph: { schema: GraphComponentParamsSchema, legacyCode: 'INVALID_GRAPH' },\n};\n\n/**\n * Map a Zod issue list to the legacy `ValidationError[]` shape.\n *\n * Preserves the pre-v5.5.0 contract: `path` always begins with `params`,\n * `code` is the per-type legacy code (so consumers that filtered by\n * `errors[].code === 'EMPTY_CAROUSEL'` keep working), `message` is Zod's\n * native human-readable message.\n */\nfunction mapZodIssuesToErrors(\n  issues: readonly ZodIssue[],\n  legacyCode: string\n): NonNullable<ValidationResult['errors']> {\n  return issues.map((issue) => ({\n    path: issue.path.length > 0 ? `params.${issue.path.join('.')}` : 'params',\n    message: issue.message,\n    code: legacyCode,\n  }));\n}\n\n/**\n * Default resource limits (configurable via env)\n */\nexport const DEFAULT_RESOURCE_LIMITS: ResourceLimits = {\n  maxDataPoints: 1000,\n  maxTableRows: 100,\n  // v6.8.0 — raised 50KB → 512KB. The single payload-size guard is shared by\n  // every component type ; 50KB rejected otherwise-valid `map` components\n  // carrying a realistic `params.geojson` FeatureCollection (a dense\n  // multi-feature map — e.g. a département-wide choropleth — runs 300-500KB\n  // even after reasonable geometry simplification). 512KB leaves real\n  // headroom for that while still rejecting runaway payloads ; genuinely\n  // large datasets belong in vector tiles (PMTiles), not inline GeoJSON.\n  // The guard itself (`validatePayloadSize`) is unchanged — only the\n  // default ceiling moved.\n  maxPayloadSize: 512 * 1024, // 512KB\n  renderTimeout: 5000, // 5 seconds\n};\n\n/**\n * Default allowed iframe domains (whitelist)\n * Must match CSP frame-src directive\n * Updated Sprint 7: Added code, design, docs, and map providers\n *\n * This list is exported for transparency and can be extended via ValidationOptions\n */\nexport const DEFAULT_IFRAME_DOMAINS = [\n  // Charts\n  'quickchart.io',\n  'www.quickchart.io',\n\n  // Deposium\n  'deposium.com',\n  'deposium.vip',\n  'deposium.ai',\n\n  // Development\n  'localhost',\n\n  // Video providers (Sprint 5)\n  'youtube.com',\n  'www.youtube.com',\n  'youtube-nocookie.com',\n  'www.youtube-nocookie.com',\n  'youtu.be',\n  'vimeo.com',\n  'player.vimeo.com',\n\n  // Code playgrounds (Sprint 7)\n  'codepen.io',\n  'codesandbox.io',\n  'stackblitz.com',\n  'jsfiddle.net',\n\n  // Design tools (Sprint 7)\n  'figma.com',\n  'www.figma.com',\n  'miro.com',\n\n  // Google services (Sprint 7)\n  'docs.google.com',\n  'drive.google.com',\n  'sheets.google.com',\n  'slides.google.com',\n  'maps.google.com',\n  'www.google.com',\n  'datastudio.google.com',\n  'lookerstudio.google.com',\n\n  // Productivity (Sprint 7)\n  'airtable.com',\n  'notion.so',\n  'www.notion.so',\n\n  // Maps (Sprint 7)\n  'openstreetmap.org',\n  'www.openstreetmap.org',\n\n  // Analytics/Dashboards (Sprint 7)\n  'public.tableau.com',\n  'app.powerbi.com',\n  'observablehq.com',\n\n  // Diagrams & Whiteboards (v2.0.0)\n  'mermaid.live',\n  'excalidraw.com',\n  'lucidchart.com',\n  'lucid.app',\n\n  // Video - Business (v2.0.0)\n  'loom.com',\n  'www.loom.com',\n  'cloudflarestream.com',\n  'streamable.com',\n\n  // Code repositories (v2.0.0)\n  'github.com',\n  'gist.github.com',\n  'gitlab.com',\n  'replit.com',\n  'glitch.com',\n\n  // Business tools (v2.0.0)\n  'calendly.com',\n  'typeform.com',\n  'cal.com',\n\n  // Design (v2.0.0)\n  'canva.com',\n\n  // Deploy previews (v2.0.0)\n  'vercel.app',\n  'netlify.app',\n\n  // E-commerce (v2.0.0)\n  'amazon.com',\n  'amazon.fr',\n  'amazon.de',\n  'amazon.co.uk',\n  'amazon.es',\n  'amazon.it',\n  'amazon.ca',\n  'amazon.co.jp',\n  'images-amazon.com',\n  'media-amazon.com',\n  'ws-na.amazon-adsystem.com',\n\n  // MCP Connectors — embed-capable services (v2.2.7)\n  'gamma.app',\n  'www.gamma.app',\n  'app.hubspot.com',\n  'share.hubspot.com',\n  'www.data.gouv.fr',\n  'data.gouv.fr',\n  'clinicaltrials.gov',\n  'www.clinicaltrials.gov',\n  'linear.app',\n  'www.linear.app',\n\n  // Payment platforms (v2.2.12)\n  'polar.sh',\n  'www.polar.sh',\n  'checkout.stripe.com',\n  'js.stripe.com',\n  'billing.stripe.com',\n  'buy.stripe.com',\n  'connect.stripe.com',\n  'invoice.stripe.com',\n];\n\n/**\n * Trusted iframe domains that require allow-same-origin to function.\n * These domains need access to their own cookies/storage for auth.\n * All other whitelisted domains get a restrictive sandbox without allow-same-origin.\n */\nexport const TRUSTED_IFRAME_DOMAINS = [\n  // Deposium (own domains)\n  'deposium.com',\n  'deposium.vip',\n  'deposium.ai',\n  'localhost',\n\n  // Google services (need auth cookies)\n  'docs.google.com',\n  'drive.google.com',\n  'sheets.google.com',\n  'slides.google.com',\n  'maps.google.com',\n  'datastudio.google.com',\n  'lookerstudio.google.com',\n\n  // Productivity (need auth)\n  'notion.so',\n  'www.notion.so',\n  'airtable.com',\n  'figma.com',\n  'www.figma.com',\n  'miro.com',\n\n  // Payment (need auth + cookies for checkout)\n  'polar.sh',\n  'www.polar.sh',\n  'checkout.stripe.com',\n  'js.stripe.com',\n  'billing.stripe.com',\n  'buy.stripe.com',\n  'connect.stripe.com',\n  'invoice.stripe.com',\n\n  // Business tools (need auth)\n  'app.hubspot.com',\n  'share.hubspot.com',\n  'app.powerbi.com',\n  'linear.app',\n  'www.linear.app',\n  'calendly.com',\n  'typeform.com',\n  'cal.com',\n  'canva.com',\n];\n\n/**\n * Validate grid position bounds (1-12 columns)\n */\nexport function validateGridPosition(position: UIComponent['position']): ValidationResult {\n  const errors: ValidationResult['errors'] = [];\n\n  // ✅ PHASE 3 FIX: Defensive check for undefined position\n  if (!position) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'position',\n          message: 'Position is required',\n          code: 'MISSING_POSITION',\n        },\n      ],\n    };\n  }\n\n  if (position.colStart < 1 || position.colStart > 12) {\n    errors.push({\n      path: 'position.colStart',\n      message: 'Column start must be between 1 and 12',\n      code: 'INVALID_GRID_COL_START',\n    });\n  }\n\n  if (position.colSpan < 1 || position.colSpan > 12) {\n    errors.push({\n      path: 'position.colSpan',\n      message: 'Column span must be between 1 and 12',\n      code: 'INVALID_GRID_COL_SPAN',\n    });\n  }\n\n  if (position.colStart + position.colSpan - 1 > 12) {\n    errors.push({\n      path: 'position',\n      message: 'Column start + span exceeds grid width (12)',\n      code: 'GRID_OVERFLOW',\n    });\n  }\n\n  if (position.rowStart !== undefined && position.rowStart < 1) {\n    errors.push({\n      path: 'position.rowStart',\n      message: 'Row start must be >= 1',\n      code: 'INVALID_GRID_ROW_START',\n    });\n  }\n\n  if (position.rowSpan !== undefined && position.rowSpan < 1) {\n    errors.push({\n      path: 'position.rowSpan',\n      message: 'Row span must be >= 1',\n      code: 'INVALID_GRID_ROW_SPAN',\n    });\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * Validate chart component against resource limits\n */\nexport function validateChartComponent(\n  params: ChartComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = [];\n\n  // Guard: params.data must exist with labels + datasets\n  if (!params?.data) {\n    return {\n      valid: false,\n      errors: [{ path: 'params.data', message: 'Missing chart data object', code: 'MISSING_DATA' }],\n    };\n  }\n  if (!Array.isArray(params.data.datasets)) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'params.data.datasets',\n          message: 'Missing or invalid datasets array',\n          code: 'MISSING_DATASETS',\n        },\n      ],\n    };\n  }\n  // Detect point-based charts (scatter/bubble) or object data (time-series line)\n  const chartType = params.type || 'bar';\n  const usesPoints = (data: unknown[]) => data.some(value =>\n    typeof value === 'object' && value !== null && 'x' in value\n  );\n  const hasObjectData = params.data.datasets.some(dataset =>\n    Array.isArray(dataset.data) && usesPoints(dataset.data)\n  );\n  const isPointChart = chartType === 'scatter' || chartType === 'bubble' || hasObjectData;\n\n  // Labels required only for categorical charts (not scatter/bubble/time-series)\n  if (!isPointChart) {\n    if (!Array.isArray(params.data.labels)) {\n      return {\n        valid: false,\n        errors: [\n          {\n            path: 'params.data.labels',\n            message: 'Missing or invalid labels array',\n            code: 'MISSING_LABELS',\n          },\n        ],\n      };\n    }\n  }\n\n  // Validate data points count\n  const totalDataPoints = params.data.datasets.reduce(\n    (sum, dataset) => sum + (Array.isArray(dataset.data) ? dataset.data.length : 0),\n    0\n  );\n\n  if (totalDataPoints > limits.maxDataPoints) {\n    errors.push({\n      path: 'params.data',\n      message: `Chart exceeds max data points: ${totalDataPoints} > ${limits.maxDataPoints}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    });\n  }\n\n  // Length mismatch check — only for categorical charts, skip empty datasets\n  if (chartType !== 'scatter' && chartType !== 'bubble' && Array.isArray(params.data.labels)) {\n    const expectedLength = params.data.labels.length;\n    for (const [index, dataset] of params.data.datasets.entries()) {\n      if (\n        Array.isArray(dataset.data) &&\n        !usesPoints(dataset.data) &&\n        dataset.data.length > 0 &&\n        dataset.data.length !== expectedLength\n      ) {\n        errors.push({\n          path: `params.data.datasets[${index}]`,\n          message: `Dataset length mismatch: expected ${expectedLength}, got ${dataset.data.length}`,\n          code: 'DATA_LENGTH_MISMATCH',\n        });\n      }\n    }\n  }\n\n  // Data type validation — numbers for categorical, {x,y} objects for point charts\n  for (const [index, dataset] of params.data.datasets.entries()) {\n    if (!Array.isArray(dataset.data)) continue;\n    const datasetIsPointChart = chartType === 'scatter' || chartType === 'bubble' || usesPoints(dataset.data);\n    for (const [dataIndex, value] of dataset.data.entries()) {\n      if (datasetIsPointChart) {\n        const vObj = value as any;\n        if (\n          typeof value !== 'object' ||\n          value === null ||\n          vObj.x == null ||\n          typeof vObj.y !== 'number' ||\n          (vObj.r !== undefined && (typeof vObj.r !== 'number' || !Number.isFinite(vObj.r) || vObj.r < 0))\n        ) {\n          errors.push({\n            path: `params.data.datasets[${index}].data[${dataIndex}]`,\n            message: `Invalid point data: expected {x, y} object`,\n            code: 'INVALID_POINT_DATA',\n          });\n        }\n      } else {\n        if (typeof value !== 'number' || !Number.isFinite(value)) {\n          errors.push({\n            path: `params.data.datasets[${index}].data[${dataIndex}]`,\n            message: `Invalid data value: ${value} (must be finite number)`,\n            code: 'INVALID_DATA_TYPE',\n          });\n        }\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * Validate table component against resource limits\n */\nexport function validateTableComponent(\n  params: TableComponentParams,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const errors: ValidationResult['errors'] = [];\n\n  for (const key of ['pageSize', 'chatPageSize', 'initialPage'] as const) {\n    const value = params[key];\n    if (value !== undefined && (typeof value !== 'number' || !Number.isInteger(value) || value < 0)) {\n      errors.push({\n        path: `params.${key}`,\n        message: `${key} must be a nonnegative integer`,\n        code: 'INVALID_PAGINATION',\n      });\n    }\n  }\n\n  // Validate row count\n  if (params.rows.length > limits.maxTableRows) {\n    errors.push({\n      path: 'params.rows',\n      message: `Table exceeds max rows: ${params.rows.length} > ${limits.maxTableRows}`,\n      code: 'RESOURCE_LIMIT_EXCEEDED',\n    });\n  }\n\n  // Validate columns\n  if (params.columns.length === 0) {\n    errors.push({\n      path: 'params.columns',\n      message: 'Table must have at least one column',\n      code: 'EMPTY_COLUMNS',\n    });\n  }\n\n  // Validate column keys are unique\n  const columnKeys = new Set<string>();\n  for (const [index, column] of params.columns.entries()) {\n    if (columnKeys.has(column.key)) {\n      errors.push({\n        path: `params.columns[${index}]`,\n        message: `Duplicate column key: ${column.key}`,\n        code: 'DUPLICATE_COLUMN_KEY',\n      });\n    }\n    columnKeys.add(column.key);\n  }\n\n  // Validate rows have valid data for defined columns\n  for (const [rowIndex, row] of params.rows.entries()) {\n    for (const column of params.columns) {\n      if (!(column.key in row)) {\n        errors.push({\n          path: `params.rows[${rowIndex}]`,\n          message: `Missing column key: ${column.key}`,\n          code: 'MISSING_COLUMN_DATA',\n        });\n      }\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * Validate payload size\n */\nexport function validatePayloadSize(\n  component: UIComponent,\n  limits: ResourceLimits = DEFAULT_RESOURCE_LIMITS\n): ValidationResult {\n  const payloadSize = JSON.stringify(component).length;\n\n  if (payloadSize > limits.maxPayloadSize) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'component',\n          message: `Payload size exceeds limit: ${payloadSize} > ${limits.maxPayloadSize} bytes`,\n          code: 'PAYLOAD_TOO_LARGE',\n        },\n      ],\n    };\n  }\n\n  return { valid: true };\n}\n\n/**\n * Sanitize string to prevent XSS\n * Basic implementation - DOMPurify used at render time\n */\nexport function sanitizeString(input: string): string {\n  return input\n    .replace(/<script\\b[^<]*(?:(?!<\\/script>)<[^<]*)*<\\/script>/gi, '')\n    .replace(/on\\w+=\"[^\"]*\"/gi, '')\n    .replace(/javascript:/gi, '');\n}\n\n/**\n * Validate iframe domain against whitelist\n *\n * @param url - The URL to validate\n * @param options - Optional validation options\n * @param options.policy - 'strict' (default), 'extend', or 'allow-all'\n * @param options.customDomains - Additional domains when policy is 'extend'\n */\nexport function validateIframeDomain(\n  url: string,\n  options?: { policy?: IframePolicy; customDomains?: string[] }\n): ValidationResult {\n  // If allow-all, skip validation\n  if (options?.policy === 'allow-all') {\n    return { valid: true };\n  }\n\n  try {\n    const parsedUrl = new URL(url);\n    const domain = parsedUrl.hostname;\n\n    // Build effective whitelist\n    let effectiveWhitelist = DEFAULT_IFRAME_DOMAINS;\n    if (options?.policy === 'extend' && options.customDomains) {\n      effectiveWhitelist = [...DEFAULT_IFRAME_DOMAINS, ...options.customDomains];\n    }\n\n    // SECURITY (v5.5.1) — pre-fix bug: predicate was `allowed === 'localhost'`\n    // which trivially returned true for every URL once the whitelist contained\n    // 'localhost' (an entry from DEFAULT_IFRAME_DOMAINS), making the entire\n    // domain whitelist inoperative. Fixed: only the URL's actual hostname\n    // being 'localhost' (or a 127.0.0.x loopback) bypasses the whitelist.\n    const isLoopback = domain === 'localhost' || /^127(\\.\\d{1,3}){3}$/.test(domain);\n    const isAllowed =\n      isLoopback ||\n      effectiveWhitelist.some(\n        (allowed) =>\n          allowed !== 'localhost' && (domain === allowed || domain.endsWith(`.${allowed}`))\n      );\n\n    if (!isAllowed) {\n      return {\n        valid: false,\n        errors: [\n          {\n            path: 'url',\n            message: `Domain not whitelisted: ${domain}`,\n            code: 'DOMAIN_NOT_WHITELISTED',\n          },\n        ],\n      };\n    }\n\n    return { valid: true };\n  } catch (error) {\n    return {\n      valid: false,\n      errors: [\n        {\n          path: 'url',\n          message: 'Invalid URL format',\n          code: 'INVALID_URL',\n        },\n      ],\n    };\n  }\n}\n\n/**\n * Get the appropriate sandbox attribute for an iframe URL.\n *\n * Trusted domains (Google, Deposium, payment, auth-requiring services) get\n * `allow-same-origin` so they can access their own cookies/storage.\n * All other whitelisted domains get a restrictive sandbox without it,\n * preventing access to the parent page's localStorage/cookies.\n *\n * @param url - The iframe URL\n * @param options - Optional custom trusted domains\n * @returns sandbox attribute string\n */\nexport function getIframeSandbox(\n  url: string,\n  options?: { customTrustedDomains?: string[] }\n): string {\n  const baseSandbox = 'allow-scripts allow-popups';\n\n  try {\n    const domain = new URL(url).hostname;\n    let trustedList = TRUSTED_IFRAME_DOMAINS;\n    if (options?.customTrustedDomains) {\n      trustedList = [...TRUSTED_IFRAME_DOMAINS, ...options.customTrustedDomains];\n    }\n\n    const isTrusted = trustedList.some(\n      (trusted) => domain === trusted || domain.endsWith(`.${trusted}`)\n    );\n\n    if (isTrusted) {\n      return `${baseSandbox} allow-same-origin allow-forms`;\n    }\n  } catch {\n    // Invalid URL — use restrictive sandbox\n  }\n\n  return baseSandbox;\n}\n\n/**\n * Validate entire component\n *\n * @param component - The component to validate\n * @param options - Optional validation options (limits, iframePolicy, customIframeDomains)\n */\nexport function validateComponent(\n  component: UIComponent,\n  options?: ValidationOptions\n): ValidationResult {\n  const limits = options?.limits ?? DEFAULT_RESOURCE_LIMITS;\n  const errors: ValidationResult['errors'] = [];\n\n  // Guard: params must exist\n  if (!component.params) {\n    return {\n      valid: false,\n      errors: [{ path: 'params', message: 'Missing component params', code: 'MISSING_PARAMS' }],\n    };\n  }\n\n  // Validate grid position\n  const gridResult = validateGridPosition(component.position);\n  if (!gridResult.valid) {\n    errors.push(...(gridResult.errors || []));\n  }\n\n  // Validate payload size\n  const sizeResult = validatePayloadSize(component, limits);\n  if (!sizeResult.valid) {\n    errors.push(...(sizeResult.errors || []));\n  }\n\n  // Type-specific validation (B.1 — v5.5.0, expanded v5.6.0).\n  //\n  // 14 types delegate shape validation to Zod schemas in `mcp-ui-spec` via\n  // SPEC_VALIDATORS. The 3 remaining types stay imperative because they\n  // need cross-field consistency, resource limits, or have nothing to validate\n  // (see SPEC_VALIDATORS docstring).\n  const specValidator = SPEC_VALIDATORS[component.type];\n  if (specValidator) {\n    const result = specValidator.schema.safeParse(component.params);\n    if (!result.success) {\n      errors.push(...mapZodIssuesToErrors(result.error.issues, specValidator.legacyCode));\n    }\n    // Post-spec chained checks. Skipped when the shape parse failed to avoid\n    // cascading errors on already-broken payloads.\n    if (result.success) {\n      // Iframe + video: domain whitelist\n      if (component.type === 'iframe' || component.type === 'video') {\n        const url = (component.params as { url?: string })?.url;\n        if (typeof url === 'string') {\n          const domainResult = validateIframeDomain(url, {\n            policy: options?.iframePolicy,\n            customDomains: options?.customIframeDomains,\n          });\n          if (!domainResult.valid) {\n            errors.push(...(domainResult.errors || []));\n          }\n        }\n      }\n      // Map (v5.6.0; widened v6.8.2): a map must carry at least one\n      // visualizable thing. Originally only center/markers counted, but since\n      // spec@5.2.0 a `type:'map'` may render purely from `geojson`, named\n      // `layers`, or a `pmtiles` source (e.g. a Cadastre choropleth with no\n      // markers and an auto-fit viewport). Rejecting those as INVALID_MAP\n      // blocked valid maps the renderer draws. Accept ANY of:\n      // center | markers | geojson | layers | pmtiles.\n      if (component.type === 'map') {\n        const mapParams = component.params as {\n          center?: unknown;\n          markers?: unknown[];\n          geojson?: unknown;\n          layers?: unknown[];\n          pmtiles?: unknown;\n        };\n        const hasContent =\n          mapParams.center != null ||\n          (Array.isArray(mapParams.markers) && mapParams.markers.length > 0) ||\n          mapParams.geojson != null ||\n          (Array.isArray(mapParams.layers) && mapParams.layers.length > 0) ||\n          mapParams.pmtiles != null;\n        if (!hasContent) {\n          errors.push({\n            path: 'params',\n            message: 'Map must have center, markers, geojson, layers, or pmtiles',\n            code: 'INVALID_MAP',\n          });\n        }\n      }\n    }\n  } else {\n    // Imperative path for chart/table/modal/grid/footer/composite.\n    switch (component.type) {\n      case 'chart': {\n        const chartResult = validateChartComponent(\n          component.params as ChartComponentParams,\n          limits\n        );\n        if (!chartResult.valid) {\n          errors.push(...(chartResult.errors || []));\n        }\n        break;\n      }\n\n      case 'table': {\n        const tableResult = validateTableComponent(\n          component.params as TableComponentParams,\n          limits\n        );\n        if (!tableResult.valid) {\n          errors.push(...(tableResult.errors || []));\n        }\n        break;\n      }\n\n      case 'modal':\n        // Modal is valid with minimal params (title optional, content can be children).\n        break;\n\n      default:\n        // Known types without specific validation pass through — renderer handles errors.\n        // Truly unknown types (e.g. typos in streamed JSON) are rejected.\n        if (!KNOWN_COMPONENT_TYPES.has(component.type)) {\n          errors.push({\n            path: 'type',\n            message: `Unknown component type: ${component.type}`,\n            code: 'UNKNOWN_COMPONENT_TYPE',\n          });\n        }\n        break;\n    }\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * Validate entire layout\n *\n * @param layout - The layout to validate\n * @param options - Optional validation options (limits, iframePolicy, customIframeDomains)\n */\nexport function validateLayout(layout: UILayout, options?: ValidationOptions): ValidationResult {\n  const errors: ValidationResult['errors'] = [];\n\n  // Validate component count\n  if (layout.components.length === 0) {\n    errors.push({\n      path: 'components',\n      message: 'Layout must have at least one component',\n      code: 'EMPTY_LAYOUT',\n    });\n  }\n\n  if (layout.components.length > 12) {\n    errors.push({\n      path: 'components',\n      message: `Layout exceeds max components: ${layout.components.length} > 12`,\n      code: 'TOO_MANY_COMPONENTS',\n    });\n  }\n\n  // Validate each component\n  for (const [index, component] of layout.components.entries()) {\n    const result = validateComponent(component, options);\n    if (!result.valid) {\n      errors.push(\n        ...(result.errors?.map((error) => ({\n          ...error,\n          path: `components[${index}].${error.path}`,\n        })) || [])\n      );\n    }\n  }\n\n  // Validate grid configuration\n  if (layout.grid.columns !== 12) {\n    errors.push({\n      path: 'grid.columns',\n      message: 'Grid must have 12 columns (Bootstrap-like)',\n      code: 'INVALID_GRID_COLUMNS',\n    });\n  }\n\n  return {\n    valid: errors.length === 0,\n    errors: errors.length > 0 ? errors : undefined,\n  };\n}\n\n/**\n * The end-user form-validation wording.\n *\n * `validateFieldValue` / `validateFormData` are pure and SSR-safe (they are\n * re-exported from the `@seed-ship/mcp-ui-solid/validation` subpath), so\n * they cannot read `MCPUIStrings`. The wording is injected instead: both\n * take an optional trailing `messages` partial, and `FormRenderer` feeds it\n * from `useMCPUIStrings()` (keys `fieldRequired`, `fieldMinLength`, …).\n *\n * The STRUCTURAL validators (`validateComponent`, `validateLayout`, …) keep\n * their English `ValidationError.message`: those are payload diagnostics\n * addressed to whoever produced the payload, not end-user chrome.\n *\n * @since v6.20.0\n */\nexport interface FormValidationMessages {\n  /** Template \\u2014 `{field}`. */\n  required: string;\n  /** Template \\u2014 `{field}`. */\n  mustBeChecked: string;\n  /** Template \\u2014 `{min}`. */\n  minLength: string;\n  /** Template \\u2014 `{max}`. */\n  maxLength: string;\n  /** Value does not match `field.pattern`. */\n  invalidPattern: string;\n  /** Value is not a valid email address. */\n  invalidEmail: string;\n  /** Value is not a number. */\n  invalidNumber: string;\n  /** Template \\u2014 `{min}`. */\n  minValue: string;\n  /** Template \\u2014 `{max}`. */\n  maxValue: string;\n  /** Template \\u2014 `{min}`. */\n  minDate: string;\n  /** Template \\u2014 `{max}`. */\n  maxDate: string;\n  /** Value is not one of `field.options`. */\n  invalidOption: string;\n  /** Template \\u2014 `{format}`. `field.valueFormatHint` still wins. */\n  invalidFormat: string;\n}\n\n/** English defaults for {@link FormValidationMessages}. */\nexport const DEFAULT_VALIDATION_MESSAGES: FormValidationMessages = {\n  required: '{field} is required',\n  mustBeChecked: '{field} must be checked',\n  minLength: 'Minimum {min} characters required',\n  maxLength: 'Maximum {max} characters allowed',\n  invalidPattern: 'Invalid format',\n  invalidEmail: 'Invalid email address',\n  invalidNumber: 'Must be a valid number',\n  minValue: 'Minimum value is {min}',\n  maxValue: 'Maximum value is {max}',\n  minDate: 'Date must be after {min}',\n  maxDate: 'Date must be before {max}',\n  invalidOption: 'Please select a valid option',\n  invalidFormat: 'Invalid format (expected: {format})',\n};\n\n/**\n * Validate a single form field value against field rules\n */\nexport function validateFieldValue(\n  value: any,\n  field: FormFieldParams,\n  messages?: Partial<FormValidationMessages>\n): { valid: boolean; error?: string } {\n  const m: FormValidationMessages = { ...DEFAULT_VALIDATION_MESSAGES, ...messages };\n  const fieldName = field.label || field.name;\n\n  // Required check\n  if (field.required) {\n    if (value === undefined || value === null || value === '') {\n      return { valid: false, error: formatMCPUIString(m.required, { field: fieldName }) };\n    }\n    if (field.type === 'checkbox' && value !== true) {\n      return { valid: false, error: formatMCPUIString(m.mustBeChecked, { field: fieldName }) };\n    }\n  }\n\n  // Skip further validation if value is empty and not required\n  if (value === undefined || value === null || value === '') {\n    return { valid: true };\n  }\n\n  // Type-specific validation\n  switch (field.type) {\n    case 'text':\n    case 'textarea':\n    case 'password':\n      if (field.minLength && String(value).length < field.minLength) {\n        return {\n          valid: false,\n          error: formatMCPUIString(m.minLength, { min: field.minLength }),\n        };\n      }\n      if (field.maxLength && String(value).length > field.maxLength) {\n        return {\n          valid: false,\n          error: formatMCPUIString(m.maxLength, { max: field.maxLength }),\n        };\n      }\n      if (field.pattern && !new RegExp(field.pattern).test(String(value))) {\n        return { valid: false, error: m.invalidPattern };\n      }\n      break;\n\n    case 'email':\n      if (!/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(String(value))) {\n        return { valid: false, error: m.invalidEmail };\n      }\n      break;\n\n    case 'number': {\n      const numValue = Number(value);\n      if (isNaN(numValue)) {\n        return { valid: false, error: m.invalidNumber };\n      }\n      if (field.min !== undefined && numValue < field.min) {\n        return { valid: false, error: formatMCPUIString(m.minValue, { min: field.min }) };\n      }\n      if (field.max !== undefined && numValue > field.max) {\n        return { valid: false, error: formatMCPUIString(m.maxValue, { max: field.max }) };\n      }\n      break;\n    }\n\n    case 'date':\n      if (field.minDate && value < field.minDate) {\n        return { valid: false, error: formatMCPUIString(m.minDate, { min: field.minDate }) };\n      }\n      if (field.maxDate && value > field.maxDate) {\n        return { valid: false, error: formatMCPUIString(m.maxDate, { max: field.maxDate }) };\n      }\n      break;\n\n    case 'select':\n    case 'radio':\n      // Validate that value is one of the options\n      if (field.options && field.options.length > 0) {\n        const validValues = field.options.map((opt) => opt.value);\n        if (!validValues.includes(String(value))) {\n          return { valid: false, error: m.invalidOption };\n        }\n      }\n      break;\n  }\n\n  // valueFormat validation (v4.3.0) — runs after type-specific checks\n  if (field.valueFormat && value !== undefined && value !== null && value !== '') {\n    const vals = Array.isArray(value) ? value : [String(value)];\n    for (const v of vals) {\n      if (!new RegExp(field.valueFormat).test(v)) {\n        return {\n          valid: false,\n          error:\n            field.valueFormatHint ||\n            formatMCPUIString(m.invalidFormat, { format: field.valueFormat }),\n        };\n      }\n    }\n  }\n\n  return { valid: true };\n}\n\n/**\n * Validate entire form data against field definitions\n */\nexport function validateFormData(\n  data: Record<string, any>,\n  fields: FormFieldParams[],\n  messages?: Partial<FormValidationMessages>\n): { valid: boolean; errors: Record<string, string> } {\n  const errors: Record<string, string> = {};\n\n  for (const field of fields) {\n    const result = validateFieldValue(data[field.name], field, messages);\n    if (!result.valid && result.error) {\n      errors[field.name] = result.error;\n    }\n  }\n\n  return {\n    valid: Object.keys(errors).length === 0,\n    errors,\n  };\n}\n"],"names":[],"mappings":";;AA0DA,MAAM,wBAAqC,IAAI,IAAY,oBAAoB,OAAO;AAwBtF,MAAM,kBAA6F;AAAA,EACjG,QAAQ,EAAE,QAAQ,6BAA6B,YAAY,iBAAA;AAAA,EAC3D,MAAM,EAAE,QAAQ,2BAA2B,YAAY,eAAA;AAAA,EACvD,QAAQ,EAAE,QAAQ,6BAA6B,YAAY,iBAAA;AAAA,EAC3D,OAAO,EAAE,QAAQ,4BAA4B,YAAY,gBAAA;AAAA,EACzD,MAAM,EAAE,QAAQ,2BAA2B,YAAY,eAAA;AAAA,EACvD,QAAQ,EAAE,QAAQ,oBAAoB,YAAY,iBAAA;AAAA,EAClD,OAAO,EAAE,QAAQ,4BAA4B,YAAY,gBAAA;AAAA,EACzD,UAAU,EAAE,QAAQ,+BAA+B,YAAY,iBAAA;AAAA,EAC/D,iBAAiB,EAAE,QAAQ,0BAA0B,YAAY,gBAAA;AAAA,EACjE,gBAAgB,EAAE,QAAQ,yBAAyB,YAAY,qBAAA;AAAA,EAC/D,MAAM,EAAE,QAAQ,2BAA2B,YAAY,eAAA;AAAA,EACvD,UAAU,EAAE,QAAQ,+BAA+B,YAAY,mBAAA;AAAA;AAAA,EAE/D,MAAM,EAAE,QAAQ,2BAA2B,YAAY,aAAA;AAAA,EACvD,KAAK,EAAE,QAAQ,0BAA0B,YAAY,cAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrD,OAAO,EAAE,QAAQ,4BAA4B,YAAY,gBAAA;AAC3D;AAUA,SAAS,qBACP,QACA,YACyC;AACzC,SAAO,OAAO,IAAI,CAAC,WAAW;AAAA,IAC5B,MAAM,MAAM,KAAK,SAAS,IAAI,UAAU,MAAM,KAAK,KAAK,GAAG,CAAC,KAAK;AAAA,IACjE,SAAS,MAAM;AAAA,IACf,MAAM;AAAA,EAAA,EACN;AACJ;AAKO,MAAM,0BAA0C;AAAA,EACrD,eAAe;AAAA,EACf,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUd,gBAAgB,MAAM;AAAA;AAAA,EACtB,eAAe;AAAA;AACjB;AASO,MAAM,yBAAyB;AAAA;AAAA,EAEpC;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,MAAM,yBAAyB;AAAA;AAAA,EAEpC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKO,SAAS,qBAAqB,UAAqD;AACxF,QAAM,SAAqC,CAAA;AAG3C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,MAAI,SAAS,WAAW,KAAK,SAAS,WAAW,IAAI;AACnD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,UAAU,KAAK,SAAS,UAAU,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,WAAW,SAAS,UAAU,IAAI,IAAI;AACjD,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,aAAa,UAAa,SAAS,WAAW,GAAG;AAC5D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,SAAS,YAAY,UAAa,SAAS,UAAU,GAAG;AAC1D,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAG3C,MAAI,EAAC,iCAAQ,OAAM;AACjB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,CAAC,EAAE,MAAM,eAAe,SAAS,6BAA6B,MAAM,eAAA,CAAgB;AAAA,IAAA;AAAA,EAEhG;AACA,MAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,GAAG;AACxC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,QAAM,YAAY,OAAO,QAAQ;AACjC,QAAM,aAAa,CAAC,SAAoB,KAAK;AAAA,IAAK,WAChD,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAO;AAAA,EAAA;AAExD,QAAM,gBAAgB,OAAO,KAAK,SAAS;AAAA,IAAK,CAAA,YAC9C,MAAM,QAAQ,QAAQ,IAAI,KAAK,WAAW,QAAQ,IAAI;AAAA,EAAA;AAExD,QAAM,eAAe,cAAc,aAAa,cAAc,YAAY;AAG1E,MAAI,CAAC,cAAc;AACjB,QAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,MAAM,GAAG;AACtC,aAAO;AAAA,QACL,OAAO;AAAA,QACP,QAAQ;AAAA,UACN;AAAA,YACE,MAAM;AAAA,YACN,SAAS;AAAA,YACT,MAAM;AAAA,UAAA;AAAA,QACR;AAAA,MACF;AAAA,IAEJ;AAAA,EACF;AAGA,QAAM,kBAAkB,OAAO,KAAK,SAAS;AAAA,IAC3C,CAAC,KAAK,YAAY,OAAO,MAAM,QAAQ,QAAQ,IAAI,IAAI,QAAQ,KAAK,SAAS;AAAA,IAC7E;AAAA,EAAA;AAGF,MAAI,kBAAkB,OAAO,eAAe;AAC1C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,eAAe,MAAM,OAAO,aAAa;AAAA,MACpF,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,MAAI,cAAc,aAAa,cAAc,YAAY,MAAM,QAAQ,OAAO,KAAK,MAAM,GAAG;AAC1F,UAAM,iBAAiB,OAAO,KAAK,OAAO;AAC1C,eAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,UACE,MAAM,QAAQ,QAAQ,IAAI,KAC1B,CAAC,WAAW,QAAQ,IAAI,KACxB,QAAQ,KAAK,SAAS,KACtB,QAAQ,KAAK,WAAW,gBACxB;AACA,eAAO,KAAK;AAAA,UACV,MAAM,wBAAwB,KAAK;AAAA,UACnC,SAAS,qCAAqC,cAAc,SAAS,QAAQ,KAAK,MAAM;AAAA,UACxF,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAGA,aAAW,CAAC,OAAO,OAAO,KAAK,OAAO,KAAK,SAAS,WAAW;AAC7D,QAAI,CAAC,MAAM,QAAQ,QAAQ,IAAI,EAAG;AAClC,UAAM,sBAAsB,cAAc,aAAa,cAAc,YAAY,WAAW,QAAQ,IAAI;AACxG,eAAW,CAAC,WAAW,KAAK,KAAK,QAAQ,KAAK,WAAW;AACvD,UAAI,qBAAqB;AACvB,cAAM,OAAO;AACb,YACE,OAAO,UAAU,YACjB,UAAU,QACV,KAAK,KAAK,QACV,OAAO,KAAK,MAAM,YACjB,KAAK,MAAM,WAAc,OAAO,KAAK,MAAM,YAAY,CAAC,OAAO,SAAS,KAAK,CAAC,KAAK,KAAK,IAAI,IAC7F;AACA,iBAAO,KAAK;AAAA,YACV,MAAM,wBAAwB,KAAK,UAAU,SAAS;AAAA,YACtD,SAAS;AAAA,YACT,MAAM;AAAA,UAAA,CACP;AAAA,QACH;AAAA,MACF,OAAO;AACL,YAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG;AACxD,iBAAO,KAAK;AAAA,YACV,MAAM,wBAAwB,KAAK,UAAU,SAAS;AAAA,YACtD,SAAS,uBAAuB,KAAK;AAAA,YACrC,MAAM;AAAA,UAAA,CACP;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,uBACd,QACA,SAAyB,yBACP;AAClB,QAAM,SAAqC,CAAA;AAE3C,aAAW,OAAO,CAAC,YAAY,gBAAgB,aAAa,GAAY;AACtE,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,UAAU,WAAc,OAAO,UAAU,YAAY,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,IAAI;AAC/F,aAAO,KAAK;AAAA,QACV,MAAM,UAAU,GAAG;AAAA,QACnB,SAAS,GAAG,GAAG;AAAA,QACf,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,SAAS,OAAO,cAAc;AAC5C,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,2BAA2B,OAAO,KAAK,MAAM,MAAM,OAAO,YAAY;AAAA,MAC/E,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,MAAI,OAAO,QAAQ,WAAW,GAAG;AAC/B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,QAAM,iCAAiB,IAAA;AACvB,aAAW,CAAC,OAAO,MAAM,KAAK,OAAO,QAAQ,WAAW;AACtD,QAAI,WAAW,IAAI,OAAO,GAAG,GAAG;AAC9B,aAAO,KAAK;AAAA,QACV,MAAM,kBAAkB,KAAK;AAAA,QAC7B,SAAS,yBAAyB,OAAO,GAAG;AAAA,QAC5C,MAAM;AAAA,MAAA,CACP;AAAA,IACH;AACA,eAAW,IAAI,OAAO,GAAG;AAAA,EAC3B;AAGA,aAAW,CAAC,UAAU,GAAG,KAAK,OAAO,KAAK,WAAW;AACnD,eAAW,UAAU,OAAO,SAAS;AACnC,UAAI,EAAE,OAAO,OAAO,MAAM;AACxB,eAAO,KAAK;AAAA,UACV,MAAM,eAAe,QAAQ;AAAA,UAC7B,SAAS,uBAAuB,OAAO,GAAG;AAAA,UAC1C,MAAM;AAAA,QAAA,CACP;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAKO,SAAS,oBACd,WACA,SAAyB,yBACP;AAClB,QAAM,cAAc,KAAK,UAAU,SAAS,EAAE;AAE9C,MAAI,cAAc,OAAO,gBAAgB;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS,+BAA+B,WAAW,MAAM,OAAO,cAAc;AAAA,UAC9E,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AAEA,SAAO,EAAE,OAAO,KAAA;AAClB;AAMO,SAAS,eAAe,OAAuB;AACpD,SAAO,MACJ,QAAQ,uDAAuD,EAAE,EACjE,QAAQ,mBAAmB,EAAE,EAC7B,QAAQ,iBAAiB,EAAE;AAChC;AAUO,SAAS,qBACd,KACA,SACkB;AAElB,OAAI,mCAAS,YAAW,aAAa;AACnC,WAAO,EAAE,OAAO,KAAA;AAAA,EAClB;AAEA,MAAI;AACF,UAAM,YAAY,IAAI,IAAI,GAAG;AAC7B,UAAM,SAAS,UAAU;AAGzB,QAAI,qBAAqB;AACzB,SAAI,mCAAS,YAAW,YAAY,QAAQ,eAAe;AACzD,2BAAqB,CAAC,GAAG,wBAAwB,GAAG,QAAQ,aAAa;AAAA,IAC3E;AAOA,UAAM,aAAa,WAAW,eAAe,sBAAsB,KAAK,MAAM;AAC9E,UAAM,YACJ,cACA,mBAAmB;AAAA,MACjB,CAAC,YACC,YAAY,gBAAgB,WAAW,WAAW,OAAO,SAAS,IAAI,OAAO,EAAE;AAAA,IAAA;AAGrF,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,QACL,OAAO;AAAA,QACP,QAAQ;AAAA,UACN;AAAA,YACE,MAAM;AAAA,YACN,SAAS,2BAA2B,MAAM;AAAA,YAC1C,MAAM;AAAA,UAAA;AAAA,QACR;AAAA,MACF;AAAA,IAEJ;AAEA,WAAO,EAAE,OAAO,KAAA;AAAA,EAClB,SAAS,OAAO;AACd,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ;AAAA,QACN;AAAA,UACE,MAAM;AAAA,UACN,SAAS;AAAA,UACT,MAAM;AAAA,QAAA;AAAA,MACR;AAAA,IACF;AAAA,EAEJ;AACF;AAcO,SAAS,iBACd,KACA,SACQ;AACR,QAAM,cAAc;AAEpB,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG,EAAE;AAC5B,QAAI,cAAc;AAClB,QAAI,mCAAS,sBAAsB;AACjC,oBAAc,CAAC,GAAG,wBAAwB,GAAG,QAAQ,oBAAoB;AAAA,IAC3E;AAEA,UAAM,YAAY,YAAY;AAAA,MAC5B,CAAC,YAAY,WAAW,WAAW,OAAO,SAAS,IAAI,OAAO,EAAE;AAAA,IAAA;AAGlE,QAAI,WAAW;AACb,aAAO,GAAG,WAAW;AAAA,IACvB;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO;AACT;AAQO,SAAS,kBACd,WACA,SACkB;;AAClB,QAAM,UAAS,mCAAS,WAAU;AAClC,QAAM,SAAqC,CAAA;AAG3C,MAAI,CAAC,UAAU,QAAQ;AACrB,WAAO;AAAA,MACL,OAAO;AAAA,MACP,QAAQ,CAAC,EAAE,MAAM,UAAU,SAAS,4BAA4B,MAAM,iBAAA,CAAkB;AAAA,IAAA;AAAA,EAE5F;AAGA,QAAM,aAAa,qBAAqB,UAAU,QAAQ;AAC1D,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAGA,QAAM,aAAa,oBAAoB,WAAW,MAAM;AACxD,MAAI,CAAC,WAAW,OAAO;AACrB,WAAO,KAAK,GAAI,WAAW,UAAU,CAAA,CAAG;AAAA,EAC1C;AAQA,QAAM,gBAAgB,gBAAgB,UAAU,IAAI;AACpD,MAAI,eAAe;AACjB,UAAM,SAAS,cAAc,OAAO,UAAU,UAAU,MAAM;AAC9D,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,KAAK,GAAG,qBAAqB,OAAO,MAAM,QAAQ,cAAc,UAAU,CAAC;AAAA,IACpF;AAGA,QAAI,OAAO,SAAS;AAElB,UAAI,UAAU,SAAS,YAAY,UAAU,SAAS,SAAS;AAC7D,cAAM,OAAO,eAAU,WAAV,mBAAuC;AACpD,YAAI,OAAO,QAAQ,UAAU;AAC3B,gBAAM,eAAe,qBAAqB,KAAK;AAAA,YAC7C,QAAQ,mCAAS;AAAA,YACjB,eAAe,mCAAS;AAAA,UAAA,CACzB;AACD,cAAI,CAAC,aAAa,OAAO;AACvB,mBAAO,KAAK,GAAI,aAAa,UAAU,CAAA,CAAG;AAAA,UAC5C;AAAA,QACF;AAAA,MACF;AAQA,UAAI,UAAU,SAAS,OAAO;AAC5B,cAAM,YAAY,UAAU;AAO5B,cAAM,aACJ,UAAU,UAAU,QACnB,MAAM,QAAQ,UAAU,OAAO,KAAK,UAAU,QAAQ,SAAS,KAChE,UAAU,WAAW,QACpB,MAAM,QAAQ,UAAU,MAAM,KAAK,UAAU,OAAO,SAAS,KAC9D,UAAU,WAAW;AACvB,YAAI,CAAC,YAAY;AACf,iBAAO,KAAK;AAAA,YACV,MAAM;AAAA,YACN,SAAS;AAAA,YACT,MAAM;AAAA,UAAA,CACP;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF,OAAO;AAEL,YAAQ,UAAU,MAAA;AAAA,MAChB,KAAK,SAAS;AACZ,cAAM,cAAc;AAAA,UAClB,UAAU;AAAA,UACV;AAAA,QAAA;AAEF,YAAI,CAAC,YAAY,OAAO;AACtB,iBAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,QAC3C;AACA;AAAA,MACF;AAAA,MAEA,KAAK,SAAS;AACZ,cAAM,cAAc;AAAA,UAClB,UAAU;AAAA,UACV;AAAA,QAAA;AAEF,YAAI,CAAC,YAAY,OAAO;AACtB,iBAAO,KAAK,GAAI,YAAY,UAAU,CAAA,CAAG;AAAA,QAC3C;AACA;AAAA,MACF;AAAA,MAEA,KAAK;AAEH;AAAA,MAEF;AAGE,YAAI,CAAC,sBAAsB,IAAI,UAAU,IAAI,GAAG;AAC9C,iBAAO,KAAK;AAAA,YACV,MAAM;AAAA,YACN,SAAS,2BAA2B,UAAU,IAAI;AAAA,YAClD,MAAM;AAAA,UAAA,CACP;AAAA,QACH;AACA;AAAA,IAAA;AAAA,EAEN;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AAQO,SAAS,eAAe,QAAkB,SAA+C;;AAC9F,QAAM,SAAqC,CAAA;AAG3C,MAAI,OAAO,WAAW,WAAW,GAAG;AAClC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,MAAI,OAAO,WAAW,SAAS,IAAI;AACjC,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS,kCAAkC,OAAO,WAAW,MAAM;AAAA,MACnE,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAGA,aAAW,CAAC,OAAO,SAAS,KAAK,OAAO,WAAW,WAAW;AAC5D,UAAM,SAAS,kBAAkB,WAAW,OAAO;AACnD,QAAI,CAAC,OAAO,OAAO;AACjB,aAAO;AAAA,QACL,KAAI,YAAO,WAAP,mBAAe,IAAI,CAAC,WAAW;AAAA,UACjC,GAAG;AAAA,UACH,MAAM,cAAc,KAAK,KAAK,MAAM,IAAI;AAAA,QAAA,QACnC,CAAA;AAAA,MAAC;AAAA,IAEZ;AAAA,EACF;AAGA,MAAI,OAAO,KAAK,YAAY,IAAI;AAC9B,WAAO,KAAK;AAAA,MACV,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,IAAA,CACP;AAAA,EACH;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,WAAW;AAAA,IACzB,QAAQ,OAAO,SAAS,IAAI,SAAS;AAAA,EAAA;AAEzC;AA+CO,MAAM,8BAAsD;AAAA,EACjE,UAAU;AAAA,EACV,eAAe;AAAA,EACf,WAAW;AAAA,EACX,WAAW;AAAA,EACX,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,eAAe;AAAA,EACf,UAAU;AAAA,EACV,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AAAA,EACT,eAAe;AAAA,EACf,eAAe;AACjB;AAKO,SAAS,mBACd,OACA,OACA,UACoC;AACpC,QAAM,IAA4B,EAAE,GAAG,6BAA6B,GAAG,SAAA;AACvE,QAAM,YAAY,MAAM,SAAS,MAAM;AAGvC,MAAI,MAAM,UAAU;AAClB,QAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AACzD,aAAO,EAAE,OAAO,OAAO,OAAO,kBAAkB,EAAE,UAAU,EAAE,OAAO,UAAA,CAAW,EAAA;AAAA,IAClF;AACA,QAAI,MAAM,SAAS,cAAc,UAAU,MAAM;AAC/C,aAAO,EAAE,OAAO,OAAO,OAAO,kBAAkB,EAAE,eAAe,EAAE,OAAO,UAAA,CAAW,EAAA;AAAA,IACvF;AAAA,EACF;AAGA,MAAI,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AACzD,WAAO,EAAE,OAAO,KAAA;AAAA,EAClB;AAGA,UAAQ,MAAM,MAAA;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,UAAI,MAAM,aAAa,OAAO,KAAK,EAAE,SAAS,MAAM,WAAW;AAC7D,eAAO;AAAA,UACL,OAAO;AAAA,UACP,OAAO,kBAAkB,EAAE,WAAW,EAAE,KAAK,MAAM,WAAW;AAAA,QAAA;AAAA,MAElE;AACA,UAAI,MAAM,aAAa,OAAO,KAAK,EAAE,SAAS,MAAM,WAAW;AAC7D,eAAO;AAAA,UACL,OAAO;AAAA,UACP,OAAO,kBAAkB,EAAE,WAAW,EAAE,KAAK,MAAM,WAAW;AAAA,QAAA;AAAA,MAElE;AACA,UAAI,MAAM,WAAW,CAAC,IAAI,OAAO,MAAM,OAAO,EAAE,KAAK,OAAO,KAAK,CAAC,GAAG;AACnE,eAAO,EAAE,OAAO,OAAO,OAAO,EAAE,eAAA;AAAA,MAClC;AACA;AAAA,IAEF,KAAK;AACH,UAAI,CAAC,6BAA6B,KAAK,OAAO,KAAK,CAAC,GAAG;AACrD,eAAO,EAAE,OAAO,OAAO,OAAO,EAAE,aAAA;AAAA,MAClC;AACA;AAAA,IAEF,KAAK,UAAU;AACb,YAAM,WAAW,OAAO,KAAK;AAC7B,UAAI,MAAM,QAAQ,GAAG;AACnB,eAAO,EAAE,OAAO,OAAO,OAAO,EAAE,cAAA;AAAA,MAClC;AACA,UAAI,MAAM,QAAQ,UAAa,WAAW,MAAM,KAAK;AACnD,eAAO,EAAE,OAAO,OAAO,OAAO,kBAAkB,EAAE,UAAU,EAAE,KAAK,MAAM,IAAA,CAAK,EAAA;AAAA,MAChF;AACA,UAAI,MAAM,QAAQ,UAAa,WAAW,MAAM,KAAK;AACnD,eAAO,EAAE,OAAO,OAAO,OAAO,kBAAkB,EAAE,UAAU,EAAE,KAAK,MAAM,IAAA,CAAK,EAAA;AAAA,MAChF;AACA;AAAA,IACF;AAAA,IAEA,KAAK;AACH,UAAI,MAAM,WAAW,QAAQ,MAAM,SAAS;AAC1C,eAAO,EAAE,OAAO,OAAO,OAAO,kBAAkB,EAAE,SAAS,EAAE,KAAK,MAAM,QAAA,CAAS,EAAA;AAAA,MACnF;AACA,UAAI,MAAM,WAAW,QAAQ,MAAM,SAAS;AAC1C,eAAO,EAAE,OAAO,OAAO,OAAO,kBAAkB,EAAE,SAAS,EAAE,KAAK,MAAM,QAAA,CAAS,EAAA;AAAA,MACnF;AACA;AAAA,IAEF,KAAK;AAAA,IACL,KAAK;AAEH,UAAI,MAAM,WAAW,MAAM,QAAQ,SAAS,GAAG;AAC7C,cAAM,cAAc,MAAM,QAAQ,IAAI,CAAC,QAAQ,IAAI,KAAK;AACxD,YAAI,CAAC,YAAY,SAAS,OAAO,KAAK,CAAC,GAAG;AACxC,iBAAO,EAAE,OAAO,OAAO,OAAO,EAAE,cAAA;AAAA,QAClC;AAAA,MACF;AACA;AAAA,EAAA;AAIJ,MAAI,MAAM,eAAe,UAAU,UAAa,UAAU,QAAQ,UAAU,IAAI;AAC9E,UAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC;AAC1D,eAAW,KAAK,MAAM;AACpB,UAAI,CAAC,IAAI,OAAO,MAAM,WAAW,EAAE,KAAK,CAAC,GAAG;AAC1C,eAAO;AAAA,UACL,OAAO;AAAA,UACP,OACE,MAAM,mBACN,kBAAkB,EAAE,eAAe,EAAE,QAAQ,MAAM,YAAA,CAAa;AAAA,QAAA;AAAA,MAEtE;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,OAAO,KAAA;AAClB;AAKO,SAAS,iBACd,MACA,QACA,UACoD;AACpD,QAAM,SAAiC,CAAA;AAEvC,aAAW,SAAS,QAAQ;AAC1B,UAAM,SAAS,mBAAmB,KAAK,MAAM,IAAI,GAAG,OAAO,QAAQ;AACnE,QAAI,CAAC,OAAO,SAAS,OAAO,OAAO;AACjC,aAAO,MAAM,IAAI,IAAI,OAAO;AAAA,IAC9B;AAAA,EACF;AAEA,SAAO;AAAA,IACL,OAAO,OAAO,KAAK,MAAM,EAAE,WAAW;AAAA,IACtC;AAAA,EAAA;AAEJ;"}

package/dist/utils/degraded-projections.cjs

@@ -1,5 +1,23 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const formatString = require("./format-string.cjs");
+const DEGRADED_PROJECTION_LABELS = {
+  source: "Source",
+  target: "Target",
+  label: "Label",
+  node: "Node",
+  type: "Type",
+  lat: "Lat",
+  lng: "Lng",
+  info: "Info",
+  marker: "marker",
+  feature: "feature",
+  series: "Series {n}"
+};
+const withLabels = (labels) => ({
+  ...DEGRADED_PROJECTION_LABELS,
+  ...labels
+});
 const MAX_PROJECTED_ROWS = 200;
 function cell(value) {
   if (value == null) return "";
@@ -12,11 +30,12 @@ function cell(value) {
   }
   return String(value);
 }
-function graphToDegradedTable(params) {
+function graphToDegradedTable(params, labels) {
+  const l = withLabels(labels);
   const edges = params.edges ?? [];
   if (edges.length > 0) {
     return {
-      columns: ["Source", "Target", "Label"],
+      columns: [l.source, l.target, l.label],
       rows: edges.slice(0, MAX_PROJECTED_ROWS).map((e) => {
         const label = [e.weight != null ? String(e.weight) : "", e.label ?? ""].filter(Boolean).join(" · ");
         return [cell(e.source), cell(e.target), label];
@@ -25,7 +44,7 @@ function graphToDegradedTable(params) {
   }
   const nodes = params.nodes ?? [];
   return {
-    columns: ["Node", "Label"],
+    columns: [l.node, l.label],
     rows: nodes.slice(0, MAX_PROJECTED_ROWS).map((n) => [cell(n.id), cell(n.label ?? n.id)])
   };
 }
@@ -37,13 +56,14 @@ function firstLngLat(coords) {
   }
   return null;
 }
-function mapToDegradedTable(params) {
+function mapToDegradedTable(params, labels) {
   var _a, _b, _c, _d;
+  const l = withLabels(labels);
   const rows = [];
   for (const m of params.markers ?? []) {
     const lat = Array.isArray(m.position) ? m.position[0] : (_a = m.position) == null ? void 0 : _a.lat;
     const lng = Array.isArray(m.position) ? m.position[1] : (_b = m.position) == null ? void 0 : _b.lng;
-    rows.push(["marker", cell(lat), cell(lng), cell(m.tooltip ?? m.popup ?? "")]);
+    rows.push([l.marker, cell(lat), cell(lng), cell(m.tooltip ?? m.popup ?? "")]);
   }
   const fc = params.geojson;
   const features = Array.isArray(fc == null ? void 0 : fc.features) ? fc.features : [];
@@ -52,35 +72,40 @@ function mapToDegradedTable(params) {
     const props = f.properties ?? {};
     const propSummary = Object.keys(props).slice(0, 3).map((k) => `${k}=${cell(props[k])}`).join(", ");
     rows.push([
-      cell(((_d = f.geometry) == null ? void 0 : _d.type) ?? "feature"),
+      cell(((_d = f.geometry) == null ? void 0 : _d.type) ?? l.feature),
       ll ? cell(ll[1]) : "",
       ll ? cell(ll[0]) : "",
       propSummary
     ]);
   }
   return {
-    columns: ["Type", "Lat", "Lng", "Info"],
+    columns: [l.type, l.lat, l.lng, l.info],
     rows: rows.slice(0, MAX_PROJECTED_ROWS)
   };
 }
-function chartToDegradedTable(params) {
+function chartToDegradedTable(params, labels) {
   var _a, _b;
+  const l = withLabels(labels);
   const datasets = ((_a = params.data) == null ? void 0 : _a.datasets) ?? [];
-  const labels = ((_b = params.data) == null ? void 0 : _b.labels) ?? [];
-  const rowCount = Math.max(labels.length, ...datasets.map((d) => {
+  const dataLabels = ((_b = params.data) == null ? void 0 : _b.labels) ?? [];
+  const rowCount = Math.max(dataLabels.length, ...datasets.map((d) => {
     var _a2;
     return ((_a2 = d.data) == null ? void 0 : _a2.length) ?? 0;
   }), 0);
-  const columns = ["", ...datasets.map((d, i) => d.label ?? `Series ${i + 1}`)];
+  const columns = [
+    "",
+    ...datasets.map((d, i) => d.label ?? formatString.formatMCPUIString(l.series, { n: i + 1 }))
+  ];
   const rows = [];
   for (let r = 0; r < Math.min(rowCount, MAX_PROJECTED_ROWS); r++) {
-    rows.push([cell(labels[r] ?? r + 1), ...datasets.map((d) => {
+    rows.push([cell(dataLabels[r] ?? r + 1), ...datasets.map((d) => {
       var _a2;
       return cell((_a2 = d.data) == null ? void 0 : _a2[r]);
     })]);
   }
   return { columns, rows };
 }
+exports.DEGRADED_PROJECTION_LABELS = DEGRADED_PROJECTION_LABELS;
 exports.chartToDegradedTable = chartToDegradedTable;
 exports.graphToDegradedTable = graphToDegradedTable;
 exports.mapToDegradedTable = mapToDegradedTable;

package/dist/utils/degraded-projections.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"degraded-projections.cjs","sources":["../../src/utils/degraded-projections.ts"],"sourcesContent":["/**\n * Degraded-fallback projections (audit 2026-05-30, P2.5).\n *\n * Pure functions that turn a heavy renderer's params into a flat\n * `{ columns, rows }` table for `<DegradedFallback>` — the middle rung of\n * the fallback ladder shown when the native render (G6 / Leaflet / Chart.js)\n * is unavailable or throws. No peer deps, no side effects, fully testable.\n *\n * These are best-effort views: they surface the underlying data so the user\n * isn't left with a blank space, not faithful reproductions of the chart/\n * map/graph.\n */\n\nexport interface DegradedTable {\n  columns: string[];\n  rows: Array<Array<string | number>>;\n}\n\nconst MAX_PROJECTED_ROWS = 200;\n\n/** Compact a value to a single table cell string. */\nfunction cell(value: unknown): string {\n  if (value == null) return '';\n  if (typeof value === 'object') {\n    try {\n      return JSON.stringify(value);\n    } catch {\n      return String(value);\n    }\n  }\n  return String(value);\n}\n\n// ─── Graph ───────────────────────────────────────────────────────────────\n\n/**\n * Graph → edge table when edges exist (Source / Target / Label), else a\n * node list (Node / Label). The graph renderer can therefore degrade to a\n * readable relationship listing instead of a blank canvas.\n */\nexport function graphToDegradedTable(params: {\n  nodes?: Array<{ id: string; label?: string }>;\n  edges?: Array<{ source: string; target: string; label?: string; weight?: number }>;\n}): DegradedTable {\n  const edges = params.edges ?? [];\n  if (edges.length > 0) {\n    return {\n      columns: ['Source', 'Target', 'Label'],\n      rows: edges.slice(0, MAX_PROJECTED_ROWS).map((e) => {\n        const label = [e.weight != null ? String(e.weight) : '', e.label ?? '']\n          .filter(Boolean)\n          .join(' · ');\n        return [cell(e.source), cell(e.target), label];\n      }),\n    };\n  }\n  const nodes = params.nodes ?? [];\n  return {\n    columns: ['Node', 'Label'],\n    rows: nodes.slice(0, MAX_PROJECTED_ROWS).map((n) => [cell(n.id), cell(n.label ?? n.id)]),\n  };\n}\n\n// ─── Map ───────────────────────────────────────────────────────────────────\n\ninterface GeoJSONLikeFeature {\n  geometry?: { type?: string; coordinates?: unknown } | null;\n  properties?: Record<string, unknown> | null;\n}\n\n/** Pull a representative `[lng, lat]` pair out of a geometry's coordinates. */\nfunction firstLngLat(coords: unknown): [number, number] | null {\n  let c: unknown = coords;\n  // Descend nested arrays until we reach a [number, number, ...] position.\n  while (Array.isArray(c) && Array.isArray(c[0])) c = c[0];\n  if (Array.isArray(c) && typeof c[0] === 'number' && typeof c[1] === 'number') {\n    return [c[0], c[1]];\n  }\n  return null;\n}\n\n/**\n * Map → a coordinate table. Markers become Lat/Lng/Label rows; GeoJSON\n * features become Type / Lat / Lng (+ a compact properties summary). So a\n * map that can't paint still lists where its points are.\n */\nexport function mapToDegradedTable(params: {\n  markers?: Array<{\n    position: [number, number] | { lat: number; lng: number };\n    tooltip?: string;\n    popup?: string;\n  }>;\n  geojson?: unknown;\n}): DegradedTable {\n  const rows: Array<Array<string | number>> = [];\n\n  for (const m of params.markers ?? []) {\n    const lat = Array.isArray(m.position) ? m.position[0] : m.position?.lat;\n    const lng = Array.isArray(m.position) ? m.position[1] : m.position?.lng;\n    rows.push(['marker', cell(lat), cell(lng), cell(m.tooltip ?? m.popup ?? '')]);\n  }\n\n  const fc = params.geojson as { features?: GeoJSONLikeFeature[] } | undefined;\n  const features = Array.isArray(fc?.features) ? fc!.features : [];\n  for (const f of features) {\n    const ll = firstLngLat(f.geometry?.coordinates);\n    const props = f.properties ?? {};\n    const propSummary = Object.keys(props)\n      .slice(0, 3)\n      .map((k) => `${k}=${cell(props[k])}`)\n      .join(', ');\n    rows.push([\n      cell(f.geometry?.type ?? 'feature'),\n      ll ? cell(ll[1]) : '',\n      ll ? cell(ll[0]) : '',\n      propSummary,\n    ]);\n  }\n\n  return {\n    columns: ['Type', 'Lat', 'Lng', 'Info'],\n    rows: rows.slice(0, MAX_PROJECTED_ROWS),\n  };\n}\n\n// ─── Chart ───────────────────────────────────────────────────────────────\n\n/**\n * Chart → a series table: one row per label, one column per dataset. So a\n * chart that can't draw still shows its numbers. Point/object data (scatter,\n * bubble, time series) is stringified per cell.\n */\nexport function chartToDegradedTable(params: {\n  data?: {\n    labels?: Array<string | number>;\n    datasets?: Array<{ label?: string; data?: unknown[] }>;\n  };\n}): DegradedTable {\n  const datasets = params.data?.datasets ?? [];\n  const labels = params.data?.labels ?? [];\n  const rowCount = Math.max(labels.length, ...datasets.map((d) => d.data?.length ?? 0), 0);\n\n  const columns = ['', ...datasets.map((d, i) => d.label ?? `Series ${i + 1}`)];\n  const rows: Array<Array<string | number>> = [];\n  for (let r = 0; r < Math.min(rowCount, MAX_PROJECTED_ROWS); r++) {\n    rows.push([cell(labels[r] ?? r + 1), ...datasets.map((d) => cell(d.data?.[r]))]);\n  }\n  return { columns, rows };\n}\n"],"names":["_a"],"mappings":";;AAkBA,MAAM,qBAAqB;AAG3B,SAAS,KAAK,OAAwB;AACpC,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI;AACF,aAAO,KAAK,UAAU,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AACA,SAAO,OAAO,KAAK;AACrB;AASO,SAAS,qBAAqB,QAGnB;AAChB,QAAM,QAAQ,OAAO,SAAS,CAAA;AAC9B,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,MACL,SAAS,CAAC,UAAU,UAAU,OAAO;AAAA,MACrC,MAAM,MAAM,MAAM,GAAG,kBAAkB,EAAE,IAAI,CAAC,MAAM;AAClD,cAAM,QAAQ,CAAC,EAAE,UAAU,OAAO,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,SAAS,EAAE,EACnE,OAAO,OAAO,EACd,KAAK,KAAK;AACb,eAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK;AAAA,MAC/C,CAAC;AAAA,IAAA;AAAA,EAEL;AACA,QAAM,QAAQ,OAAO,SAAS,CAAA;AAC9B,SAAO;AAAA,IACL,SAAS,CAAC,QAAQ,OAAO;AAAA,IACzB,MAAM,MAAM,MAAM,GAAG,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAAA,EAAA;AAE3F;AAUA,SAAS,YAAY,QAA0C;AAC7D,MAAI,IAAa;AAEjB,SAAO,MAAM,QAAQ,CAAC,KAAK,MAAM,QAAQ,EAAE,CAAC,CAAC,EAAG,KAAI,EAAE,CAAC;AACvD,MAAI,MAAM,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC,MAAM,YAAY,OAAO,EAAE,CAAC,MAAM,UAAU;AAC5E,WAAO,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;AAAA,EACpB;AACA,SAAO;AACT;AAOO,SAAS,mBAAmB,QAOjB;;AAChB,QAAM,OAAsC,CAAA;AAE5C,aAAW,KAAK,OAAO,WAAW,CAAA,GAAI;AACpC,UAAM,MAAM,MAAM,QAAQ,EAAE,QAAQ,IAAI,EAAE,SAAS,CAAC,KAAI,OAAE,aAAF,mBAAY;AACpE,UAAM,MAAM,MAAM,QAAQ,EAAE,QAAQ,IAAI,EAAE,SAAS,CAAC,KAAI,OAAE,aAAF,mBAAY;AACpE,SAAK,KAAK,CAAC,UAAU,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;AAAA,EAC9E;AAEA,QAAM,KAAK,OAAO;AAClB,QAAM,WAAW,MAAM,QAAQ,yBAAI,QAAQ,IAAI,GAAI,WAAW,CAAA;AAC9D,aAAW,KAAK,UAAU;AACxB,UAAM,KAAK,aAAY,OAAE,aAAF,mBAAY,WAAW;AAC9C,UAAM,QAAQ,EAAE,cAAc,CAAA;AAC9B,UAAM,cAAc,OAAO,KAAK,KAAK,EAClC,MAAM,GAAG,CAAC,EACV,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,EACnC,KAAK,IAAI;AACZ,SAAK,KAAK;AAAA,MACR,OAAK,OAAE,aAAF,mBAAY,SAAQ,SAAS;AAAA,MAClC,KAAK,KAAK,GAAG,CAAC,CAAC,IAAI;AAAA,MACnB,KAAK,KAAK,GAAG,CAAC,CAAC,IAAI;AAAA,MACnB;AAAA,IAAA,CACD;AAAA,EACH;AAEA,SAAO;AAAA,IACL,SAAS,CAAC,QAAQ,OAAO,OAAO,MAAM;AAAA,IACtC,MAAM,KAAK,MAAM,GAAG,kBAAkB;AAAA,EAAA;AAE1C;AASO,SAAS,qBAAqB,QAKnB;;AAChB,QAAM,aAAW,YAAO,SAAP,mBAAa,aAAY,CAAA;AAC1C,QAAM,WAAS,YAAO,SAAP,mBAAa,WAAU,CAAA;AACtC,QAAM,WAAW,KAAK,IAAI,OAAO,QAAQ,GAAG,SAAS,IAAI,CAAC;;AAAM,aAAAA,MAAA,EAAE,SAAF,gBAAAA,IAAQ,WAAU;AAAA,GAAC,GAAG,CAAC;AAEvF,QAAM,UAAU,CAAC,IAAI,GAAG,SAAS,IAAI,CAAC,GAAG,MAAM,EAAE,SAAS,UAAU,IAAI,CAAC,EAAE,CAAC;AAC5E,QAAM,OAAsC,CAAA;AAC5C,WAAS,IAAI,GAAG,IAAI,KAAK,IAAI,UAAU,kBAAkB,GAAG,KAAK;AAC/D,SAAK,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,GAAG,SAAS,IAAI,CAAC;;AAAM,mBAAKA,MAAA,EAAE,SAAF,gBAAAA,IAAS,EAAE;AAAA,KAAC,CAAC,CAAC;AAAA,EACjF;AACA,SAAO,EAAE,SAAS,KAAA;AACpB;;;;"}
+{"version":3,"file":"degraded-projections.cjs","sources":["../../src/utils/degraded-projections.ts"],"sourcesContent":["/**\n * Degraded-fallback projections (audit 2026-05-30, P2.5).\n *\n * Pure functions that turn a heavy renderer's params into a flat\n * `{ columns, rows }` table for `<DegradedFallback>` — the middle rung of\n * the fallback ladder shown when the native render (G6 / Leaflet / Chart.js)\n * is unavailable or throws. No peer deps, no side effects, fully testable.\n *\n * These are best-effort views: they surface the underlying data so the user\n * isn't left with a blank space, not faithful reproductions of the chart/\n * map/graph.\n */\n\nimport { formatMCPUIString } from './format-string';\n\n/**\n * Column headers and series names of the degraded tables.\n *\n * The projections are pure helpers with no access to `MCPUIStrings`, so the\n * wording is injected: each function takes an optional trailing `labels`\n * partial, and the renderers feed it from `useMCPUIStrings()`. Left out, the\n * English defaults below apply — the pre-v6.20.0 behaviour.\n *\n * @since v6.20.0\n */\nexport interface DegradedProjectionLabels {\n  /** Graph edge table — source column. */\n  source: string;\n  /** Graph edge table — target column. */\n  target: string;\n  /** Graph edge / node table — label column. */\n  label: string;\n  /** Graph node table — node id column. */\n  node: string;\n  /** Map table — feature type column. */\n  type: string;\n  /** Map table — latitude column. */\n  lat: string;\n  /** Map table — longitude column. */\n  lng: string;\n  /** Map table — property summary column. */\n  info: string;\n  /** Map table — `Type` cell of a marker row (v6.20.0, 6th pass). */\n  marker: string;\n  /** Map table — `Type` cell of a GeoJSON feature without a geometry type (v6.20.0). */\n  feature: string;\n  /** Chart table — fallback dataset name. Template — `{n}`. */\n  series: string;\n}\n\n/** English defaults for {@link DegradedProjectionLabels}. */\nexport const DEGRADED_PROJECTION_LABELS: DegradedProjectionLabels = {\n  source: 'Source',\n  target: 'Target',\n  label: 'Label',\n  node: 'Node',\n  type: 'Type',\n  lat: 'Lat',\n  lng: 'Lng',\n  info: 'Info',\n  marker: 'marker',\n  feature: 'feature',\n  series: 'Series {n}',\n};\n\nconst withLabels = (labels?: Partial<DegradedProjectionLabels>): DegradedProjectionLabels => ({\n  ...DEGRADED_PROJECTION_LABELS,\n  ...labels,\n});\n\nexport interface DegradedTable {\n  columns: string[];\n  rows: Array<Array<string | number>>;\n}\n\nconst MAX_PROJECTED_ROWS = 200;\n\n/** Compact a value to a single table cell string. */\nfunction cell(value: unknown): string {\n  if (value == null) return '';\n  if (typeof value === 'object') {\n    try {\n      return JSON.stringify(value);\n    } catch {\n      return String(value);\n    }\n  }\n  return String(value);\n}\n\n// ─── Graph ───────────────────────────────────────────────────────────────\n\n/**\n * Graph → edge table when edges exist (Source / Target / Label), else a\n * node list (Node / Label). The graph renderer can therefore degrade to a\n * readable relationship listing instead of a blank canvas.\n */\nexport function graphToDegradedTable(params: {\n  nodes?: Array<{ id: string; label?: string }>;\n  edges?: Array<{ source: string; target: string; label?: string; weight?: number }>;\n}, labels?: Partial<DegradedProjectionLabels>): DegradedTable {\n  const l = withLabels(labels);\n  const edges = params.edges ?? [];\n  if (edges.length > 0) {\n    return {\n      columns: [l.source, l.target, l.label],\n      rows: edges.slice(0, MAX_PROJECTED_ROWS).map((e) => {\n        const label = [e.weight != null ? String(e.weight) : '', e.label ?? '']\n          .filter(Boolean)\n          .join(' · ');\n        return [cell(e.source), cell(e.target), label];\n      }),\n    };\n  }\n  const nodes = params.nodes ?? [];\n  return {\n    columns: [l.node, l.label],\n    rows: nodes.slice(0, MAX_PROJECTED_ROWS).map((n) => [cell(n.id), cell(n.label ?? n.id)]),\n  };\n}\n\n// ─── Map ───────────────────────────────────────────────────────────────────\n\ninterface GeoJSONLikeFeature {\n  geometry?: { type?: string; coordinates?: unknown } | null;\n  properties?: Record<string, unknown> | null;\n}\n\n/** Pull a representative `[lng, lat]` pair out of a geometry's coordinates. */\nfunction firstLngLat(coords: unknown): [number, number] | null {\n  let c: unknown = coords;\n  // Descend nested arrays until we reach a [number, number, ...] position.\n  while (Array.isArray(c) && Array.isArray(c[0])) c = c[0];\n  if (Array.isArray(c) && typeof c[0] === 'number' && typeof c[1] === 'number') {\n    return [c[0], c[1]];\n  }\n  return null;\n}\n\n/**\n * Map → a coordinate table. Markers become Lat/Lng/Label rows; GeoJSON\n * features become Type / Lat / Lng (+ a compact properties summary). So a\n * map that can't paint still lists where its points are.\n */\nexport function mapToDegradedTable(params: {\n  markers?: Array<{\n    position: [number, number] | { lat: number; lng: number };\n    tooltip?: string;\n    popup?: string;\n  }>;\n  geojson?: unknown;\n}, labels?: Partial<DegradedProjectionLabels>): DegradedTable {\n  const l = withLabels(labels);\n  const rows: Array<Array<string | number>> = [];\n\n  for (const m of params.markers ?? []) {\n    const lat = Array.isArray(m.position) ? m.position[0] : m.position?.lat;\n    const lng = Array.isArray(m.position) ? m.position[1] : m.position?.lng;\n    rows.push([l.marker, cell(lat), cell(lng), cell(m.tooltip ?? m.popup ?? '')]);\n  }\n\n  const fc = params.geojson as { features?: GeoJSONLikeFeature[] } | undefined;\n  const features = Array.isArray(fc?.features) ? fc!.features : [];\n  for (const f of features) {\n    const ll = firstLngLat(f.geometry?.coordinates);\n    const props = f.properties ?? {};\n    const propSummary = Object.keys(props)\n      .slice(0, 3)\n      .map((k) => `${k}=${cell(props[k])}`)\n      .join(', ');\n    rows.push([\n      cell(f.geometry?.type ?? l.feature),\n      ll ? cell(ll[1]) : '',\n      ll ? cell(ll[0]) : '',\n      propSummary,\n    ]);\n  }\n\n  return {\n    columns: [l.type, l.lat, l.lng, l.info],\n    rows: rows.slice(0, MAX_PROJECTED_ROWS),\n  };\n}\n\n// ─── Chart ───────────────────────────────────────────────────────────────\n\n/**\n * Chart → a series table: one row per label, one column per dataset. So a\n * chart that can't draw still shows its numbers. Point/object data (scatter,\n * bubble, time series) is stringified per cell.\n */\nexport function chartToDegradedTable(params: {\n  data?: {\n    labels?: Array<string | number>;\n    datasets?: Array<{ label?: string; data?: unknown[] }>;\n  };\n}, labels?: Partial<DegradedProjectionLabels>): DegradedTable {\n  const l = withLabels(labels);\n  const datasets = params.data?.datasets ?? [];\n  const dataLabels = params.data?.labels ?? [];\n  const rowCount = Math.max(dataLabels.length, ...datasets.map((d) => d.data?.length ?? 0), 0);\n\n  const columns = [\n    '',\n    ...datasets.map((d, i) => d.label ?? formatMCPUIString(l.series, { n: i + 1 })),\n  ];\n  const rows: Array<Array<string | number>> = [];\n  for (let r = 0; r < Math.min(rowCount, MAX_PROJECTED_ROWS); r++) {\n    rows.push([cell(dataLabels[r] ?? r + 1), ...datasets.map((d) => cell(d.data?.[r]))]);\n  }\n  return { columns, rows };\n}\n"],"names":["_a","formatMCPUIString"],"mappings":";;;AAmDO,MAAM,6BAAuD;AAAA,EAClE,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AACV;AAEA,MAAM,aAAa,CAAC,YAA0E;AAAA,EAC5F,GAAG;AAAA,EACH,GAAG;AACL;AAOA,MAAM,qBAAqB;AAG3B,SAAS,KAAK,OAAwB;AACpC,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI;AACF,aAAO,KAAK,UAAU,KAAK;AAAA,IAC7B,QAAQ;AACN,aAAO,OAAO,KAAK;AAAA,IACrB;AAAA,EACF;AACA,SAAO,OAAO,KAAK;AACrB;AASO,SAAS,qBAAqB,QAGlC,QAA2D;AAC5D,QAAM,IAAI,WAAW,MAAM;AAC3B,QAAM,QAAQ,OAAO,SAAS,CAAA;AAC9B,MAAI,MAAM,SAAS,GAAG;AACpB,WAAO;AAAA,MACL,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK;AAAA,MACrC,MAAM,MAAM,MAAM,GAAG,kBAAkB,EAAE,IAAI,CAAC,MAAM;AAClD,cAAM,QAAQ,CAAC,EAAE,UAAU,OAAO,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,SAAS,EAAE,EACnE,OAAO,OAAO,EACd,KAAK,KAAK;AACb,eAAO,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK;AAAA,MAC/C,CAAC;AAAA,IAAA;AAAA,EAEL;AACA,QAAM,QAAQ,OAAO,SAAS,CAAA;AAC9B,SAAO;AAAA,IACL,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK;AAAA,IACzB,MAAM,MAAM,MAAM,GAAG,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;AAAA,EAAA;AAE3F;AAUA,SAAS,YAAY,QAA0C;AAC7D,MAAI,IAAa;AAEjB,SAAO,MAAM,QAAQ,CAAC,KAAK,MAAM,QAAQ,EAAE,CAAC,CAAC,EAAG,KAAI,EAAE,CAAC;AACvD,MAAI,MAAM,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC,MAAM,YAAY,OAAO,EAAE,CAAC,MAAM,UAAU;AAC5E,WAAO,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;AAAA,EACpB;AACA,SAAO;AACT;AAOO,SAAS,mBAAmB,QAOhC,QAA2D;;AAC5D,QAAM,IAAI,WAAW,MAAM;AAC3B,QAAM,OAAsC,CAAA;AAE5C,aAAW,KAAK,OAAO,WAAW,CAAA,GAAI;AACpC,UAAM,MAAM,MAAM,QAAQ,EAAE,QAAQ,IAAI,EAAE,SAAS,CAAC,KAAI,OAAE,aAAF,mBAAY;AACpE,UAAM,MAAM,MAAM,QAAQ,EAAE,QAAQ,IAAI,EAAE,SAAS,CAAC,KAAI,OAAE,aAAF,mBAAY;AACpE,SAAK,KAAK,CAAC,EAAE,QAAQ,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;AAAA,EAC9E;AAEA,QAAM,KAAK,OAAO;AAClB,QAAM,WAAW,MAAM,QAAQ,yBAAI,QAAQ,IAAI,GAAI,WAAW,CAAA;AAC9D,aAAW,KAAK,UAAU;AACxB,UAAM,KAAK,aAAY,OAAE,aAAF,mBAAY,WAAW;AAC9C,UAAM,QAAQ,EAAE,cAAc,CAAA;AAC9B,UAAM,cAAc,OAAO,KAAK,KAAK,EAClC,MAAM,GAAG,CAAC,EACV,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,EACnC,KAAK,IAAI;AACZ,SAAK,KAAK;AAAA,MACR,OAAK,OAAE,aAAF,mBAAY,SAAQ,EAAE,OAAO;AAAA,MAClC,KAAK,KAAK,GAAG,CAAC,CAAC,IAAI;AAAA,MACnB,KAAK,KAAK,GAAG,CAAC,CAAC,IAAI;AAAA,MACnB;AAAA,IAAA,CACD;AAAA,EACH;AAEA,SAAO;AAAA,IACL,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI;AAAA,IACtC,MAAM,KAAK,MAAM,GAAG,kBAAkB;AAAA,EAAA;AAE1C;AASO,SAAS,qBAAqB,QAKlC,QAA2D;;AAC5D,QAAM,IAAI,WAAW,MAAM;AAC3B,QAAM,aAAW,YAAO,SAAP,mBAAa,aAAY,CAAA;AAC1C,QAAM,eAAa,YAAO,SAAP,mBAAa,WAAU,CAAA;AAC1C,QAAM,WAAW,KAAK,IAAI,WAAW,QAAQ,GAAG,SAAS,IAAI,CAAC;;AAAM,aAAAA,MAAA,EAAE,SAAF,gBAAAA,IAAQ,WAAU;AAAA,GAAC,GAAG,CAAC;AAE3F,QAAM,UAAU;AAAA,IACd;AAAA,IACA,GAAG,SAAS,IAAI,CAAC,GAAG,MAAM,EAAE,SAASC,aAAAA,kBAAkB,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAA,CAAG,CAAC;AAAA,EAAA;AAEhF,QAAM,OAAsC,CAAA;AAC5C,WAAS,IAAI,GAAG,IAAI,KAAK,IAAI,UAAU,kBAAkB,GAAG,KAAK;AAC/D,SAAK,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,IAAI,CAAC,GAAG,GAAG,SAAS,IAAI,CAAC;;AAAM,mBAAKD,MAAA,EAAE,SAAF,gBAAAA,IAAS,EAAE;AAAA,KAAC,CAAC,CAAC;AAAA,EACrF;AACA,SAAO,EAAE,SAAS,KAAA;AACpB;;;;;"}

package/dist/utils/degraded-projections.d.ts

@@ -10,6 +10,42 @@
  * isn't left with a blank space, not faithful reproductions of the chart/
  * map/graph.
  */
+/**
+ * Column headers and series names of the degraded tables.
+ *
+ * The projections are pure helpers with no access to `MCPUIStrings`, so the
+ * wording is injected: each function takes an optional trailing `labels`
+ * partial, and the renderers feed it from `useMCPUIStrings()`. Left out, the
+ * English defaults below apply — the pre-v6.20.0 behaviour.
+ *
+ * @since v6.20.0
+ */
+export interface DegradedProjectionLabels {
+    /** Graph edge table — source column. */
+    source: string;
+    /** Graph edge table — target column. */
+    target: string;
+    /** Graph edge / node table — label column. */
+    label: string;
+    /** Graph node table — node id column. */
+    node: string;
+    /** Map table — feature type column. */
+    type: string;
+    /** Map table — latitude column. */
+    lat: string;
+    /** Map table — longitude column. */
+    lng: string;
+    /** Map table — property summary column. */
+    info: string;
+    /** Map table — `Type` cell of a marker row (v6.20.0, 6th pass). */
+    marker: string;
+    /** Map table — `Type` cell of a GeoJSON feature without a geometry type (v6.20.0). */
+    feature: string;
+    /** Chart table — fallback dataset name. Template — `{n}`. */
+    series: string;
+}
+/** English defaults for {@link DegradedProjectionLabels}. */
+export declare const DEGRADED_PROJECTION_LABELS: DegradedProjectionLabels;
 export interface DegradedTable {
     columns: string[];
     rows: Array<Array<string | number>>;
@@ -30,7 +66,7 @@ export declare function graphToDegradedTable(params: {
         label?: string;
         weight?: number;
     }>;
-}): DegradedTable;
+}, labels?: Partial<DegradedProjectionLabels>): DegradedTable;
 /**
  * Map → a coordinate table. Markers become Lat/Lng/Label rows; GeoJSON
  * features become Type / Lat / Lng (+ a compact properties summary). So a
@@ -46,7 +82,7 @@ export declare function mapToDegradedTable(params: {
         popup?: string;
     }>;
     geojson?: unknown;
-}): DegradedTable;
+}, labels?: Partial<DegradedProjectionLabels>): DegradedTable;
 /**
  * Chart → a series table: one row per label, one column per dataset. So a
  * chart that can't draw still shows its numbers. Point/object data (scatter,
@@ -60,5 +96,5 @@ export declare function chartToDegradedTable(params: {
             data?: unknown[];
         }>;
     };
-}): DegradedTable;
+}, labels?: Partial<DegradedProjectionLabels>): DegradedTable;
 //# sourceMappingURL=degraded-projections.d.ts.map

package/dist/utils/degraded-projections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"degraded-projections.d.ts","sourceRoot":"","sources":["../../src/utils/degraded-projections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;CACrC;AAmBD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpF,GAAG,aAAa,CAkBhB;AAoBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,aAAa,CA8BhB;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;QAChC,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAA;SAAE,CAAC,CAAC;KACxD,CAAC;CACH,GAAG,aAAa,CAWhB"}
+{"version":3,"file":"degraded-projections.d.ts","sourceRoot":"","sources":["../../src/utils/degraded-projections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACvC,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,sFAAsF;IACtF,OAAO,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,6DAA6D;AAC7D,eAAO,MAAM,0BAA0B,EAAE,wBAYxC,CAAC;AAOF,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;CACrC;AAmBD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpF,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG,aAAa,CAmB5D;AAoBD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG,aAAa,CA+B5D;AAID;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,IAAI,CAAC,EAAE;QACL,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;QAChC,QAAQ,CAAC,EAAE,KAAK,CAAC;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAA;SAAE,CAAC,CAAC;KACxD,CAAC;CACH,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG,aAAa,CAe5D"}