@seed-ship/mcp-ui-solid 6.9.0 → 6.11.0

package/CHANGELOG.md

@@ -5,6 +5,67 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [6.11.0] - 2026-05-31
+
+Map hardening (audit `docs/briefs/AUDIT-2026-05-30-visual-renderers-g6-ontology.md`).
+
+### Fixed — PMTiles no longer fails silently (P1.3)
+
+A failed PMTiles overlay (most often the optional `protomaps-leaflet` peer not
+being installed) previously only emitted a `console.warn`, leaving the user
+with an unexplained empty/incomplete layer. `<MapRenderer>` now:
+
+- keeps the base map usable, and
+- shows a visible **"PMTiles layer unavailable"** notice over it, and
+- reports a `render:error` telemetry event (`componentType: 'map'`).
+
+### Security — marker tooltip/popup escaping is now actually wired (P1.2 follow-up)
+
+v6.10.0 added the `bindMarkerContent` escaping helper but the marker render
+loops still bound `marker.tooltip` / `marker.popup` as **raw HTML**, so the
+"text-safe by default" guarantee only ever applied to the GeoJSON popup path.
+All three marker paths (clustered, cluster-fallback, plain) now route through
+`bindMarkerContent`, so marker tooltips/popups are HTML-escaped by default and
+only rendered as HTML when the host opts in via `allowHtmlPopups` (unchanged
+from v6.10.0). `bindMarkerContent` is now exported and unit-tested.
+
+## [6.10.0] - 2026-05-31
+
+### Security — map popups/tooltips are text-safe by default (XSS hardening)
+
+Leaflet renders bound tooltip/popup strings as **HTML**, so `marker.tooltip`,
+`marker.popup` and a GeoJSON `popup.template` were an **XSS vector** when the
+payload is untrusted — the default for an LLM/connector-driven public package
+(audit `docs/briefs/AUDIT-2026-05-30-visual-renderers-g6-ontology.md`, P1.2).
+
+`<MapRenderer>` now treats that content as **plain text by default**:
+
+- `marker.tooltip` / `marker.popup` are HTML-escaped before binding.
+- a GeoJSON `popup.template` (raw HTML) is **ignored** on the default path;
+  the safe auto-generated popup (`titleField` / `fields`, values already
+  escaped) is used instead.
+- substituted `{{prop}}` values in a template are escaped even on the
+  trusted path (they are data, not markup).
+
+A **host** that renders `<MapRenderer>` with trusted data can restore rich
+HTML popups via the new `allowHtmlPopups` prop. This is deliberately a
+host-level prop, **not** a payload field — a malicious payload could just set
+its own flag. The `<UIResourceRenderer>` path never sets it, so every
+payload-driven map is text-safe.
+
+**Behavior change:** if you previously relied on HTML inside
+`marker.tooltip` / `marker.popup` / `popup.template`, pass `allowHtmlPopups`
+to `<MapRenderer>` (or migrate that markup into the structured
+`titleField` / `fields` popup config). Maps that pass plain-text popups —
+the common case — are visually unchanged.
+
+### Tests
+
+- `MapRenderer.security.test.ts` — 14 cases via new exported pure helpers
+  `popupSafeText` and `buildPopupContent`: escapes by default, passes raw
+  HTML only when opted in, template gated on the untrusted path, auto-popup
+  always escapes values.
+
 ## [6.9.0] - 2026-05-31
 
 ### Added — renderer fallback ladder (no silent blanks)

package/dist/components/MapRenderer.cjs

@@ -6,7 +6,7 @@ const ExpandableWrapper = require("./ExpandableWrapper.cjs");
 const DegradedFallback = require("./DegradedFallback.cjs");
 const degradedProjections = require("../utils/degraded-projections.cjs");
 const MCPUITelemetryContext = require("../context/MCPUITelemetryContext.cjs");
-var _tmpl$ = /* @__PURE__ */ web.template(`<div class=p-3>`), _tmpl$2 = /* @__PURE__ */ web.template(`<div>`), _tmpl$3 = /* @__PURE__ */ web.template(`<div><!$><!/><!$><!/>`);
+var _tmpl$ = /* @__PURE__ */ web.template(`<div class=p-3>`), _tmpl$2 = /* @__PURE__ */ web.template(`<div role=alert class="m-2 rounded-md border border-amber-300 bg-amber-50 px-3 py-2 text-sm text-amber-800 dark:border-amber-700/50 dark:bg-amber-900/20 dark:text-amber-200"><!$><!/> The base map is still shown.`), _tmpl$3 = /* @__PURE__ */ web.template(`<div>`), _tmpl$4 = /* @__PURE__ */ web.template(`<div><!$><!/><!$><!/>`);
 let L = null;
 let clusterCssLoaded = false;
 function getChoroplethColor(value, scale, fallback) {
@@ -44,13 +44,13 @@ function buildStyleFn(style) {
     };
   };
 }
-function buildPopupContent(feature, popup) {
+function buildPopupContent(feature, popup, allowHtml = false) {
   if (!popup || !(feature == null ? void 0 : feature.properties)) return null;
   const props = feature.properties;
-  if (popup.template) {
+  if (allowHtml && popup.template) {
     return popup.template.replace(/\{\{(\w+)\}\}/g, (_, key) => {
       const val = props[key];
-      return val != null ? String(val) : "";
+      return val != null ? escapeHtml(String(val)) : "";
     });
   }
   const parts = [];
@@ -70,6 +70,16 @@ function buildPopupContent(feature, popup) {
 function escapeHtml(str) {
   return str.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
+function popupSafeText(value, allowHtml = false) {
+  if (value == null) return void 0;
+  return allowHtml ? value : escapeHtml(value);
+}
+function bindMarkerContent(m, marker, allowHtml) {
+  const tooltip = popupSafeText(marker.tooltip, allowHtml);
+  if (tooltip) m.bindTooltip(tooltip);
+  const popup = popupSafeText(marker.popup, allowHtml);
+  if (popup) m.bindPopup(popup);
+}
 function addGeoJSONLayer(mapInst, leaflet, geojson, style, popup) {
   const styleFn = buildStyleFn(style);
   const layer = leaflet.geoJSON(geojson, {
@@ -131,8 +141,10 @@ const MapRenderer = (props) => {
   let mapInstance = null;
   const [isLeafletLoaded, setIsLeafletLoaded] = solidJs.createSignal(false);
   const [error, setError] = solidJs.createSignal(null);
+  const [pmtilesError, setPmtilesError] = solidJs.createSignal(null);
   const isExpanded = ExpandableWrapper.useExpanded();
   const telemetry = MCPUITelemetryContext.useTelemetry();
+  const allowHtml = () => props.allowHtmlPopups === true;
   const params = () => {
     var _a;
     return props.params || ((_a = props.component) == null ? void 0 : _a.params);
@@ -146,7 +158,7 @@ const MapRenderer = (props) => {
     }, 100);
   });
   solidJs.createEffect(async () => {
-    var _a, _b, _c, _d, _e, _f;
+    var _a, _b, _c, _d, _e, _f, _g;
     if (web.isServer) return;
     if (!L) {
       try {
@@ -216,8 +228,7 @@ const MapRenderer = (props) => {
             });
             (_a = p == null ? void 0 : p.markers) == null ? void 0 : _a.forEach((marker) => {
               const m = L.marker(marker.position);
-              if (marker.tooltip) m.bindTooltip(marker.tooltip);
-              if (marker.popup) m.bindPopup(marker.popup);
+              bindMarkerContent(m, marker, allowHtml());
               clusterGroup.addLayer(m);
               markers.push(m);
             });
@@ -225,16 +236,14 @@ const MapRenderer = (props) => {
           } catch {
             (_b = p == null ? void 0 : p.markers) == null ? void 0 : _b.forEach((marker) => {
               const m = L.marker(marker.position).addTo(mapInstance);
-              if (marker.tooltip) m.bindTooltip(marker.tooltip);
-              if (marker.popup) m.bindPopup(marker.popup);
+              bindMarkerContent(m, marker, allowHtml());
               markers.push(m);
             });
           }
         } else {
           (_c = p == null ? void 0 : p.markers) == null ? void 0 : _c.forEach((marker) => {
             const m = L.marker(marker.position).addTo(mapInstance);
-            if (marker.tooltip) m.bindTooltip(marker.tooltip);
-            if (marker.popup) m.bindPopup(marker.popup);
+            bindMarkerContent(m, marker, allowHtml());
             markers.push(m);
           });
         }
@@ -261,6 +270,7 @@ const MapRenderer = (props) => {
             }).addTo(mapInstance);
           }
         }
+        setPmtilesError(null);
         if (p == null ? void 0 : p.pmtiles) {
           try {
             const protomaps = await Promise.resolve().then(() => require(
@@ -294,7 +304,17 @@ const MapRenderer = (props) => {
             });
             pmLayer.addTo(mapInstance);
           } catch (e) {
-            console.warn("[MCP-UI] Failed to load protomaps-leaflet for PMTiles:", e);
+            const detail = e instanceof Error ? e.message : String(e);
+            const message = 'PMTiles layer unavailable — the optional "protomaps-leaflet" peer dependency failed to load or render.';
+            console.warn("[MCP-UI] " + message, e);
+            setPmtilesError(message);
+            telemetry == null ? void 0 : telemetry.dispatch({
+              type: "render:error",
+              errorMessage: `${message} (${detail})`,
+              id: ((_f = props.component) == null ? void 0 : _f.id) ?? "",
+              componentType: "map",
+              ts: Date.now()
+            });
           }
         }
         if ((p == null ? void 0 : p.fitBounds) && allBoundsLayers.length > 0) {
@@ -312,7 +332,7 @@ const MapRenderer = (props) => {
         telemetry == null ? void 0 : telemetry.dispatch({
           type: "render:error",
           errorMessage: message,
-          id: ((_f = props.component) == null ? void 0 : _f.id) ?? "",
+          id: ((_g = props.component) == null ? void 0 : _g.id) ?? "",
           componentType: "map",
           ts: Date.now()
         });
@@ -335,7 +355,7 @@ const MapRenderer = (props) => {
       return props.toolbarVariant;
     },
     get children() {
-      var _el$ = web.getNextElement(_tmpl$3), _el$4 = _el$.firstChild, [_el$5, _co$] = web.getNextMarker(_el$4.nextSibling), _el$6 = _el$5.nextSibling, [_el$7, _co$2] = web.getNextMarker(_el$6.nextSibling);
+      var _el$ = web.getNextElement(_tmpl$4), _el$8 = _el$.firstChild, [_el$9, _co$2] = web.getNextMarker(_el$8.nextSibling), _el$0 = _el$9.nextSibling, [_el$1, _co$3] = web.getNextMarker(_el$0.nextSibling);
       web.insert(_el$, web.createComponent(solidJs.Show, {
         get when() {
           return error();
@@ -350,36 +370,48 @@ const MapRenderer = (props) => {
           }, () => degradedProjections.mapToDegradedTable(params() ?? {}))));
           return _el$2;
         }
-      }), _el$5, _co$);
+      }), _el$9, _co$2);
       web.insert(_el$, web.createComponent(solidJs.Show, {
         get when() {
           return !error();
         },
         get children() {
-          var _el$3 = web.getNextElement(_tmpl$2);
-          var _ref$ = mapContainer;
-          typeof _ref$ === "function" ? web.use(_ref$, _el$3) : mapContainer = _el$3;
-          web.effect((_p$) => {
-            var _a;
-            var _v$ = isExpanded() ? {
-              height: "100%",
-              width: "100%",
-              "z-index": 0
-            } : {
-              height: ((_a = params()) == null ? void 0 : _a.height) || "400px",
-              width: "100%",
-              "z-index": 0
-            }, _v$2 = `relative z-0 ${isExpanded() ? "flex-1 min-h-0" : ""}`;
-            _p$.e = web.style(_el$3, _v$, _p$.e);
-            _v$2 !== _p$.t && web.className(_el$3, _p$.t = _v$2);
-            return _p$;
-          }, {
-            e: void 0,
-            t: void 0
-          });
-          return _el$3;
+          return [web.createComponent(solidJs.Show, {
+            get when() {
+              return pmtilesError();
+            },
+            get children() {
+              var _el$3 = web.getNextElement(_tmpl$2), _el$5 = _el$3.firstChild, [_el$6, _co$] = web.getNextMarker(_el$5.nextSibling);
+              _el$6.nextSibling;
+              web.insert(_el$3, pmtilesError, _el$6, _co$);
+              return _el$3;
+            }
+          }), (() => {
+            var _el$7 = web.getNextElement(_tmpl$3);
+            var _ref$ = mapContainer;
+            typeof _ref$ === "function" ? web.use(_ref$, _el$7) : mapContainer = _el$7;
+            web.effect((_p$) => {
+              var _a;
+              var _v$ = isExpanded() ? {
+                height: "100%",
+                width: "100%",
+                "z-index": 0
+              } : {
+                height: ((_a = params()) == null ? void 0 : _a.height) || "400px",
+                width: "100%",
+                "z-index": 0
+              }, _v$2 = `relative z-0 ${isExpanded() ? "flex-1 min-h-0" : ""}`;
+              _p$.e = web.style(_el$7, _v$, _p$.e);
+              _v$2 !== _p$.t && web.className(_el$7, _p$.t = _v$2);
+              return _p$;
+            }, {
+              e: void 0,
+              t: void 0
+            });
+            return _el$7;
+          })()];
         }
-      }), _el$7, _co$2);
+      }), _el$1, _co$3);
       web.effect(() => {
         var _a;
         return web.className(_el$, `w-full bg-white dark:bg-gray-800 rounded-lg shadow-sm border border-gray-200 dark:border-gray-700 overflow-hidden ${((_a = params()) == null ? void 0 : _a.className) || ""} ${isExpanded() ? "flex-1 min-h-0 flex flex-col" : ""}`);
@@ -389,4 +421,7 @@ const MapRenderer = (props) => {
   });
 };
 exports.MapRenderer = MapRenderer;
+exports.bindMarkerContent = bindMarkerContent;
+exports.buildPopupContent = buildPopupContent;
+exports.popupSafeText = popupSafeText;
 //# sourceMappingURL=MapRenderer.cjs.map

package/dist/components/MapRenderer.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"MapRenderer.cjs","sources":["../../src/components/MapRenderer.tsx"],"sourcesContent":["/**\n * MapRenderer - Interactive map Component\n * Sprint 6: Markers + clustering\n * v3.1.0: GeoJSON, choropleth, popups, multi-layer, PMTiles\n */\n\nimport { Component, createEffect, onCleanup, createSignal, Show } from 'solid-js';\nimport { isServer } from 'solid-js/web';\nimport type {\n  UIComponent,\n  MapComponentParams,\n  MapClusterOptions,\n  MapGeoJSONStyle,\n  MapPopupConfig,\n  MapLayer,\n  MapPMTilesConfig,\n} from '../types';\nimport { ExpandableWrapper, useExpanded } from './ExpandableWrapper';\nimport { DegradedFallback } from './DegradedFallback';\nimport { mapToDegradedTable } from '../utils/degraded-projections';\nimport { useTelemetry } from '../context/MCPUITelemetryContext';\n\n// Lazy load leaflet (it doesn't support SSR well)\nlet L: any = null;\n// Track if marker cluster CSS has been loaded\nlet clusterCssLoaded = false;\n\nexport interface MapRendererProps {\n  /**\n   * UIComponent containing map params\n   */\n  component?: UIComponent;\n\n  /**\n   * Direct map params\n   */\n  params?: MapComponentParams;\n\n  /**\n   * Forwarded to the underlying `<ExpandableWrapper>` (v6.3.1).\n   * @see ExpandableWrapperProps.toolbarVariant\n   */\n  toolbarVariant?: 'hover' | 'always-visible';\n}\n\n// ─── Helpers ────────────────────────────────────────────────\n\n/**\n * Resolve choropleth color for a feature based on property value and scale stops.\n */\nfunction getChoroplethColor(\n  value: unknown,\n  scale: Array<[number, string]>,\n  fallback: string\n): string {\n  if (value == null || typeof value !== 'number' || !isFinite(value)) return fallback;\n\n  // Scale is sorted ascending: [[0, '#eff3ff'], [100, '#084594']]\n  if (scale.length === 0) return fallback;\n  if (value <= scale[0][0]) return scale[0][1];\n  if (value >= scale[scale.length - 1][0]) return scale[scale.length - 1][1];\n\n  // Find surrounding stops and interpolate (use upper bracket color)\n  for (let i = 1; i < scale.length; i++) {\n    if (value <= scale[i][0]) return scale[i][1];\n  }\n  return scale[scale.length - 1][1];\n}\n\n/**\n * Build a Leaflet style function from MapGeoJSONStyle config.\n */\nfunction buildStyleFn(\n  style: MapGeoJSONStyle | undefined\n): (feature: any) => Record<string, unknown> {\n  if (!style) {\n    return () => ({\n      fillColor: '#3388ff',\n      fillOpacity: 0.6,\n      color: '#333',\n      weight: 1,\n      opacity: 1,\n    });\n  }\n\n  return (feature: any) => {\n    let fillColor = style.fillColor || '#3388ff';\n\n    // Choropleth: override fillColor based on feature property\n    if (style.choroplethField && style.choroplethScale && feature?.properties) {\n      const val = feature.properties[style.choroplethField];\n      fillColor = getChoroplethColor(\n        val,\n        style.choroplethScale,\n        style.choroplethFallback || '#ccc'\n      );\n    }\n\n    return {\n      fillColor,\n      fillOpacity: style.fillOpacity ?? 0.6,\n      color: style.strokeColor || '#333',\n      weight: style.strokeWeight ?? 1,\n      opacity: style.strokeOpacity ?? 1,\n    };\n  };\n}\n\n/**\n * Build popup HTML from a feature's properties using popup config.\n */\nfunction buildPopupContent(feature: any, popup: MapPopupConfig | undefined): string | null {\n  if (!popup || !feature?.properties) return null;\n  const props = feature.properties;\n\n  // Custom template\n  if (popup.template) {\n    return popup.template.replace(/\\{\\{(\\w+)\\}\\}/g, (_, key) => {\n      const val = props[key];\n      return val != null ? String(val) : '';\n    });\n  }\n\n  // Auto-generated popup\n  const parts: string[] = [];\n\n  if (popup.titleField && props[popup.titleField] != null) {\n    parts.push(`<strong>${escapeHtml(String(props[popup.titleField]))}</strong>`);\n  }\n\n  const fields = popup.fields || Object.keys(props).slice(0, 8);\n  for (const key of fields) {\n    if (key === popup.titleField) continue;\n    const val = props[key];\n    if (val == null) continue;\n    const formatted = typeof val === 'number' ? val.toLocaleString('fr-FR') : String(val);\n    parts.push(\n      `<span style=\"color:#666;font-size:11px\">${escapeHtml(key)}</span>: ${escapeHtml(formatted)}`\n    );\n  }\n\n  return parts.join('<br/>');\n}\n\nfunction escapeHtml(str: string): string {\n  return str\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n    .replace(/\"/g, '&quot;');\n}\n\n/**\n * Add a GeoJSON layer to the map with style and popup support.\n * Returns the layer for bounds calculation.\n */\nfunction addGeoJSONLayer(\n  mapInst: any,\n  leaflet: any,\n  geojson: unknown,\n  style?: MapGeoJSONStyle,\n  popup?: MapPopupConfig\n): any {\n  const styleFn = buildStyleFn(style);\n\n  const layer = leaflet.geoJSON(geojson, {\n    style: styleFn,\n    pointToLayer: (feature: any, latlng: any) => {\n      // Render points as circle markers for consistency\n      const s = styleFn(feature);\n      return leaflet.circleMarker(latlng, {\n        radius: 6,\n        fillColor: s.fillColor,\n        fillOpacity: s.fillOpacity,\n        color: s.color,\n        weight: s.weight,\n        opacity: s.opacity,\n      });\n    },\n    onEachFeature: (feature: any, featureLayer: any) => {\n      const html = buildPopupContent(feature, popup);\n      if (html) {\n        featureLayer.bindPopup(html, { maxWidth: 300 });\n      }\n    },\n  });\n\n  layer.addTo(mapInst);\n  return layer;\n}\n\n// ─── Component ──────────────────────────────────────────────\n\n/**\n * Build a GeoJSON FeatureCollection from the map's `markers` (and any\n * inlined GeoJSON layers, when present). Used by the \"Copy data\" button\n * shipped via `<ExpandableWrapper>` (v6.2.0). Best-effort — clusters,\n * tile layers, and choropleth-only data don't get round-tripped.\n */\nfunction mapToGeoJSON(p: MapComponentParams | undefined): string {\n  if (!p) return '{\"type\":\"FeatureCollection\",\"features\":[]}';\n  const features: any[] = [];\n  for (const marker of p.markers ?? []) {\n    const pos: any = marker.position as any;\n    // Accept both [lat, lng] tuple and {lat, lng} object shapes (v5.0.2 spec)\n    const lat = Array.isArray(pos) ? pos[0] : pos?.lat;\n    const lng = Array.isArray(pos) ? pos[1] : pos?.lng;\n    if (typeof lat !== 'number' || typeof lng !== 'number') continue;\n    features.push({\n      type: 'Feature',\n      geometry: { type: 'Point', coordinates: [lng, lat] },\n      properties: {\n        ...(marker.tooltip ? { tooltip: marker.tooltip } : {}),\n        ...(marker.popup ? { popup: marker.popup } : {}),\n      },\n    });\n  }\n  return JSON.stringify({ type: 'FeatureCollection', features }, null, 2);\n}\n\nexport const MapRenderer: Component<MapRendererProps> = (props) => {\n  let mapContainer: HTMLDivElement | undefined;\n  let mapInstance: any = null;\n  const [isLeafletLoaded, setIsLeafletLoaded] = createSignal(false);\n  const [error, setError] = createSignal<string | null>(null);\n  const isExpanded = useExpanded();\n  const telemetry = useTelemetry();\n\n  const params = () => props.params || (props.component?.params as MapComponentParams);\n\n  // v6.2.0 — Leaflet has to be told to re-measure when its container\n  // resizes (e.g. transitioning to fullscreen via ExpandableWrapper).\n  // We give the DOM a tick to settle the new dimensions, then ask\n  // Leaflet to reflow tiles.\n  createEffect(() => {\n    const expanded = isExpanded();\n    if (!mapInstance) return;\n    // Read the signal so the effect re-runs on toggle ; the value is\n    // observed for its side effects on layout.\n    void expanded;\n    setTimeout(() => mapInstance?.invalidateSize?.(), 100);\n  });\n\n  // Initialize Map\n  createEffect(async () => {\n    if (isServer) return; // Don't run on server\n\n    if (!L) {\n      try {\n        const module = await import('leaflet');\n        L = module.default || module;\n        await import('leaflet/dist/leaflet.css'); // Import CSS\n        setIsLeafletLoaded(true);\n      } catch (e) {\n        console.warn('Failed to load leaflet', e);\n        setError('Map library could not be loaded.');\n        return;\n      }\n    } else {\n      setIsLeafletLoaded(true);\n    }\n\n    if (isLeafletLoaded() && mapContainer && !mapInstance) {\n      const p = params();\n      const center = p?.center || [51.505, -0.09]; // Default to London\n      const zoom = p?.zoom || 13;\n\n      mapInstance = L.map(mapContainer, {\n        zoomControl: p?.zoomControl !== false,\n        scrollWheelZoom: p?.scrollWheelZoom !== false,\n        attributionControl: false,\n      }).setView(center, zoom);\n\n      // Add OpenStreetMap tile layer\n      const tileLayerUrl = p?.tileLayer || 'https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png';\n      L.tileLayer(tileLayerUrl, {\n        attribution:\n          p?.attribution ||\n          '&copy; <a href=\"https://www.openstreetmap.org/copyright\">OpenStreetMap</a> contributors',\n      }).addTo(mapInstance);\n\n      if (p?.attribution !== '') {\n        L.control.attribution({ prefix: false }).addTo(mapInstance);\n      }\n\n      // Fix marker icons (Leaflet issue with bundlers)\n      delete (L.Icon.Default.prototype as any)._getIconUrl;\n      L.Icon.Default.mergeOptions({\n        iconRetinaUrl: 'https://unpkg.com/leaflet@1.9.4/dist/images/marker-icon-2x.png',\n        iconUrl: 'https://unpkg.com/leaflet@1.9.4/dist/images/marker-icon.png',\n        shadowUrl: 'https://unpkg.com/leaflet@1.9.4/dist/images/marker-shadow.png',\n      });\n    }\n\n    // Update markers and view\n    if (mapInstance && L) {\n      try {\n        const p = params();\n        const allBoundsLayers: any[] = [];\n\n        // Clear existing layers (markers, cluster groups, GeoJSON)\n        mapInstance.eachLayer((layer: any) => {\n          if (\n            layer instanceof L.Marker ||\n            layer instanceof L.GeoJSON ||\n            layer instanceof L.CircleMarker ||\n            layer._group ||\n            layer._featureGroup\n          ) {\n            mapInstance.removeLayer(layer);\n          }\n        });\n\n        // ─── Markers (legacy) ────────────────────────\n        const markers: any[] = [];\n        const shouldCluster = p?.clustering && p?.markers && p.markers.length > 0;\n\n        if (shouldCluster) {\n          try {\n            await import('leaflet.markercluster');\n            if (!clusterCssLoaded) {\n              await import('leaflet.markercluster/dist/MarkerCluster.css');\n              await import('leaflet.markercluster/dist/MarkerCluster.Default.css');\n              clusterCssLoaded = true;\n            }\n            const clusterOpts: MapClusterOptions =\n              typeof p.clustering === 'object' ? p.clustering : {};\n            const clusterGroup = (L as any).markerClusterGroup({\n              maxClusterRadius: clusterOpts.maxClusterRadius ?? 80,\n              spiderfyOnMaxZoom: clusterOpts.spiderfyOnMaxZoom ?? true,\n              showCoverageOnHover: clusterOpts.showCoverageOnHover ?? true,\n              disableClusteringAtZoom: clusterOpts.disableClusteringAtZoom,\n              animate: clusterOpts.animateAddingMarkers ?? true,\n            });\n            p?.markers?.forEach((marker) => {\n              const m = L.marker(marker.position);\n              if (marker.tooltip) m.bindTooltip(marker.tooltip);\n              if (marker.popup) m.bindPopup(marker.popup);\n              clusterGroup.addLayer(m);\n              markers.push(m);\n            });\n            mapInstance.addLayer(clusterGroup);\n          } catch {\n            p?.markers?.forEach((marker) => {\n              const m = L.marker(marker.position).addTo(mapInstance);\n              if (marker.tooltip) m.bindTooltip(marker.tooltip);\n              if (marker.popup) m.bindPopup(marker.popup);\n              markers.push(m);\n            });\n          }\n        } else {\n          p?.markers?.forEach((marker) => {\n            const m = L.marker(marker.position).addTo(mapInstance);\n            if (marker.tooltip) m.bindTooltip(marker.tooltip);\n            if (marker.popup) m.bindPopup(marker.popup);\n            markers.push(m);\n          });\n        }\n\n        if (markers.length > 0) {\n          allBoundsLayers.push(...markers);\n        }\n\n        // ─── GeoJSON (v3.1.0) ───────────────────────\n        if (p?.geojson) {\n          const geoLayer = addGeoJSONLayer(mapInstance, L, p.geojson, p.geojsonStyle, p.popup);\n          allBoundsLayers.push(geoLayer);\n        }\n\n        // ─── Named layers (v3.1.0) ──────────────────\n        if (p?.layers && p.layers.length > 0) {\n          const overlays: Record<string, any> = {};\n\n          for (const layerDef of p.layers) {\n            const geoLayer = addGeoJSONLayer(\n              mapInstance,\n              L,\n              layerDef.geojson,\n              layerDef.style || p?.geojsonStyle,\n              layerDef.popup || p?.popup\n            );\n\n            overlays[layerDef.name] = geoLayer;\n            allBoundsLayers.push(geoLayer);\n\n            // Respect initial visibility\n            if (layerDef.visible === false) {\n              mapInstance.removeLayer(geoLayer);\n            }\n          }\n\n          // Add layer control if multiple layers\n          if (Object.keys(overlays).length > 1) {\n            L.control.layers(null, overlays, { collapsed: true }).addTo(mapInstance);\n          }\n        }\n\n        // ─── PMTiles (v3.1.0) ────────────────────────\n        if (p?.pmtiles) {\n          try {\n            // @ts-ignore — optional peer dependency, may not be installed\n            const protomaps = await import(/* @vite-ignore */ 'protomaps-leaflet');\n            const pmConfig = p.pmtiles;\n\n            const paintRules =\n              pmConfig.paintRules?.map((rule) => ({\n                dataLayer: rule.dataLayer,\n                symbolizer: new (protomaps as any)[\n                  rule.symbolizer === 'polygon'\n                    ? 'PolygonSymbolizer'\n                    : rule.symbolizer === 'line'\n                      ? 'LineSymbolizer'\n                      : 'CircleSymbolizer'\n                ]({\n                  fill: rule.color || '#3388ff',\n                  stroke: rule.color || '#333',\n                  width: rule.width ?? 1,\n                  opacity: rule.opacity ?? 0.6,\n                }),\n              })) || [];\n\n            const labelRules =\n              pmConfig.labelRules?.map((rule) => ({\n                dataLayer: rule.dataLayer,\n                symbolizer: new (protomaps as any).TextSymbolizer({\n                  label_props: [rule.textField],\n                  fontSize: rule.fontSize ?? 12,\n                }),\n              })) || [];\n\n            const pmLayer = (protomaps as any).leafletLayer({\n              url: pmConfig.url,\n              attribution: pmConfig.attribution,\n              paintRules,\n              labelRules,\n              maxZoom: pmConfig.maxZoom,\n              minZoom: pmConfig.minZoom,\n            });\n\n            pmLayer.addTo(mapInstance);\n          } catch (e) {\n            console.warn('[MCP-UI] Failed to load protomaps-leaflet for PMTiles:', e);\n          }\n        }\n\n        // ─── Fit bounds ─────────────────────────────\n        if (p?.fitBounds && allBoundsLayers.length > 0) {\n          const group = L.featureGroup(allBoundsLayers);\n          const bounds = group.getBounds();\n          if (bounds.isValid()) {\n            mapInstance.fitBounds(bounds.pad(0.1));\n          }\n        } else if (p?.center) {\n          mapInstance.setView(p.center, p.zoom || mapInstance.getZoom());\n        }\n      } catch (err) {\n        // Fallback ladder (P2.5): a Leaflet drawing failure degrades to\n        // the coordinate table below instead of a blank/partial map.\n        const message = err instanceof Error ? err.message : 'Failed to render map';\n        setError(message);\n        telemetry?.dispatch({\n          type: 'render:error',\n          errorMessage: message,\n          id: props.component?.id ?? '',\n          componentType: 'map',\n          ts: Date.now(),\n        });\n      }\n    }\n  });\n\n  // Cleanup\n  onCleanup(() => {\n    if (mapInstance) {\n      mapInstance.remove();\n      mapInstance = null;\n    }\n  });\n\n  return (\n    <ExpandableWrapper\n      title={'Map'}\n      copyData={mapToGeoJSON(params())}\n      copyLabel=\"Copy markers as GeoJSON\"\n      toolbarVariant={props.toolbarVariant}\n    >\n      <div\n        class={`w-full bg-white dark:bg-gray-800 rounded-lg shadow-sm border border-gray-200 dark:border-gray-700 overflow-hidden ${params()?.className || ''} ${\n          isExpanded() ? 'flex-1 min-h-0 flex flex-col' : ''\n        }`}\n      >\n        <Show when={error()}>\n          {/* Fallback ladder (P2.5): degrade to a coordinate table\n                        rather than a bare error string. */}\n          <div class=\"p-3\">\n            <DegradedFallback\n              message={`Map rendering failed: ${error()}`}\n              caption=\"Showing the map data as a coordinate table — the interactive map is unavailable.\"\n              {...mapToDegradedTable(params() ?? {})}\n            />\n          </div>\n        </Show>\n        <Show when={!error()}>\n          <div\n            ref={mapContainer}\n            style={\n              isExpanded()\n                ? { height: '100%', width: '100%', 'z-index': 0 }\n                : { height: params()?.height || '400px', width: '100%', 'z-index': 0 }\n            }\n            class={`relative z-0 ${isExpanded() ? 'flex-1 min-h-0' : ''}`}\n          />\n        </Show>\n      </div>\n    </ExpandableWrapper>\n  );\n};\n"],"names":["L","clusterCssLoaded","getChoroplethColor","value","scale","fallback","isFinite","length","i","buildStyleFn","style","fillColor","fillOpacity","color","weight","opacity","feature","choroplethField","choroplethScale","properties","val","choroplethFallback","strokeColor","strokeWeight","strokeOpacity","buildPopupContent","popup","props","template","replace","_","key","String","parts","titleField","push","escapeHtml","fields","Object","keys","slice","formatted","toLocaleString","join","str","addGeoJSONLayer","mapInst","leaflet","geojson","styleFn","layer","geoJSON","pointToLayer","latlng","s","circleMarker","radius","onEachFeature","featureLayer","html","bindPopup","maxWidth","addTo","mapToGeoJSON","p","features","marker","markers","pos","position","lat","Array","isArray","lng","type","geometry","coordinates","tooltip","JSON","stringify","MapRenderer","mapContainer","mapInstance","isLeafletLoaded","setIsLeafletLoaded","createSignal","error","setError","isExpanded","useExpanded","telemetry","useTelemetry","params","component","createEffect","setTimeout","invalidateSize","isServer","module","default","e","console","warn","center","zoom","map","zoomControl","scrollWheelZoom","attributionControl","setView","tileLayerUrl","tileLayer","attribution","control","prefix","Icon","Default","prototype","_getIconUrl","mergeOptions","iconRetinaUrl","iconUrl","shadowUrl","allBoundsLayers","eachLayer","Marker","GeoJSON","CircleMarker","_group","_featureGroup","removeLayer","shouldCluster","clustering","clusterOpts","clusterGroup","markerClusterGroup","maxClusterRadius","spiderfyOnMaxZoom","showCoverageOnHover","disableClusteringAtZoom","animate","animateAddingMarkers","forEach","m","bindTooltip","addLayer","geoLayer","geojsonStyle","layers","overlays","layerDef","name","visible","collapsed","pmtiles","protomaps","pmConfig","paintRules","rule","dataLayer","symbolizer","fill","stroke","width","labelRules","TextSymbolizer","label_props","textField","fontSize","pmLayer","leafletLayer","url","maxZoom","minZoom","fitBounds","group","featureGroup","bounds","getBounds","isValid","pad","getZoom","err","message","Error","dispatch","errorMessage","id","componentType","ts","Date","now","onCleanup","remove","_$createComponent","ExpandableWrapper","title","copyData","copyLabel","toolbarVariant","children","_el$","_$getNextElement","_tmpl$3","_el$4","firstChild","_el$5","_co$","_$getNextMarker","nextSibling","_el$6","_el$7","_co$2","_$insert","Show","when","_el$2","_tmpl$","DegradedFallback","_$mergeProps","caption","mapToDegradedTable","_el$3","_tmpl$2","_ref$","_$use","_$effect","_p$","_v$","height","_v$2","_$style","t","_$className","undefined","className"],"mappings":";;;;;;;;;AAuBA,IAAIA,IAAS;AAEb,IAAIC,mBAAmB;AAyBvB,SAASC,mBACPC,OACAC,OACAC,UACQ;AACR,MAAIF,SAAS,QAAQ,OAAOA,UAAU,YAAY,CAACG,SAASH,KAAK,EAAG,QAAOE;AAG3E,MAAID,MAAMG,WAAW,EAAG,QAAOF;AAC/B,MAAIF,SAASC,MAAM,CAAC,EAAE,CAAC,EAAG,QAAOA,MAAM,CAAC,EAAE,CAAC;AAC3C,MAAID,SAASC,MAAMA,MAAMG,SAAS,CAAC,EAAE,CAAC,EAAG,QAAOH,MAAMA,MAAMG,SAAS,CAAC,EAAE,CAAC;AAGzE,WAASC,IAAI,GAAGA,IAAIJ,MAAMG,QAAQC,KAAK;AACrC,QAAIL,SAASC,MAAMI,CAAC,EAAE,CAAC,EAAG,QAAOJ,MAAMI,CAAC,EAAE,CAAC;AAAA,EAC7C;AACA,SAAOJ,MAAMA,MAAMG,SAAS,CAAC,EAAE,CAAC;AAClC;AAKA,SAASE,aACPC,OAC2C;AAC3C,MAAI,CAACA,OAAO;AACV,WAAO,OAAO;AAAA,MACZC,WAAW;AAAA,MACXC,aAAa;AAAA,MACbC,OAAO;AAAA,MACPC,QAAQ;AAAA,MACRC,SAAS;AAAA,IAAA;AAAA,EAEb;AAEA,SAAO,CAACC,YAAiB;AACvB,QAAIL,YAAYD,MAAMC,aAAa;AAGnC,QAAID,MAAMO,mBAAmBP,MAAMQ,oBAAmBF,mCAASG,aAAY;AACzE,YAAMC,MAAMJ,QAAQG,WAAWT,MAAMO,eAAe;AACpDN,kBAAYT,mBACVkB,KACAV,MAAMQ,iBACNR,MAAMW,sBAAsB,MAC9B;AAAA,IACF;AAEA,WAAO;AAAA,MACLV;AAAAA,MACAC,aAAaF,MAAME,eAAe;AAAA,MAClCC,OAAOH,MAAMY,eAAe;AAAA,MAC5BR,QAAQJ,MAAMa,gBAAgB;AAAA,MAC9BR,SAASL,MAAMc,iBAAiB;AAAA,IAAA;AAAA,EAEpC;AACF;AAKA,SAASC,kBAAkBT,SAAcU,OAAkD;AACzF,MAAI,CAACA,SAAS,EAACV,mCAASG,YAAY,QAAO;AAC3C,QAAMQ,QAAQX,QAAQG;AAGtB,MAAIO,MAAME,UAAU;AAClB,WAAOF,MAAME,SAASC,QAAQ,kBAAkB,CAACC,GAAGC,QAAQ;AAC1D,YAAMX,MAAMO,MAAMI,GAAG;AACrB,aAAOX,OAAO,OAAOY,OAAOZ,GAAG,IAAI;AAAA,IACrC,CAAC;AAAA,EACH;AAGA,QAAMa,QAAkB,CAAA;AAExB,MAAIP,MAAMQ,cAAcP,MAAMD,MAAMQ,UAAU,KAAK,MAAM;AACvDD,UAAME,KAAK,WAAWC,WAAWJ,OAAOL,MAAMD,MAAMQ,UAAU,CAAC,CAAC,CAAC,WAAW;AAAA,EAC9E;AAEA,QAAMG,SAASX,MAAMW,UAAUC,OAAOC,KAAKZ,KAAK,EAAEa,MAAM,GAAG,CAAC;AAC5D,aAAWT,OAAOM,QAAQ;AACxB,QAAIN,QAAQL,MAAMQ,WAAY;AAC9B,UAAMd,MAAMO,MAAMI,GAAG;AACrB,QAAIX,OAAO,KAAM;AACjB,UAAMqB,YAAY,OAAOrB,QAAQ,WAAWA,IAAIsB,eAAe,OAAO,IAAIV,OAAOZ,GAAG;AACpFa,UAAME,KACJ,2CAA2CC,WAAWL,GAAG,CAAC,YAAYK,WAAWK,SAAS,CAAC,EAC7F;AAAA,EACF;AAEA,SAAOR,MAAMU,KAAK,OAAO;AAC3B;AAEA,SAASP,WAAWQ,KAAqB;AACvC,SAAOA,IACJf,QAAQ,MAAM,OAAO,EACrBA,QAAQ,MAAM,MAAM,EACpBA,QAAQ,MAAM,MAAM,EACpBA,QAAQ,MAAM,QAAQ;AAC3B;AAMA,SAASgB,gBACPC,SACAC,SACAC,SACAtC,OACAgB,OACK;AACL,QAAMuB,UAAUxC,aAAaC,KAAK;AAElC,QAAMwC,QAAQH,QAAQI,QAAQH,SAAS;AAAA,IACrCtC,OAAOuC;AAAAA,IACPG,cAAcA,CAACpC,SAAcqC,WAAgB;AAE3C,YAAMC,IAAIL,QAAQjC,OAAO;AACzB,aAAO+B,QAAQQ,aAAaF,QAAQ;AAAA,QAClCG,QAAQ;AAAA,QACR7C,WAAW2C,EAAE3C;AAAAA,QACbC,aAAa0C,EAAE1C;AAAAA,QACfC,OAAOyC,EAAEzC;AAAAA,QACTC,QAAQwC,EAAExC;AAAAA,QACVC,SAASuC,EAAEvC;AAAAA,MAAAA,CACZ;AAAA,IACH;AAAA,IACA0C,eAAeA,CAACzC,SAAc0C,iBAAsB;AAClD,YAAMC,OAAOlC,kBAAkBT,SAASU,KAAK;AAC7C,UAAIiC,MAAM;AACRD,qBAAaE,UAAUD,MAAM;AAAA,UAAEE,UAAU;AAAA,QAAA,CAAK;AAAA,MAChD;AAAA,IACF;AAAA,EAAA,CACD;AAEDX,QAAMY,MAAMhB,OAAO;AACnB,SAAOI;AACT;AAUA,SAASa,aAAaC,GAA2C;AAC/D,MAAI,CAACA,EAAG,QAAO;AACf,QAAMC,WAAkB,CAAA;AACxB,aAAWC,UAAUF,EAAEG,WAAW,CAAA,GAAI;AACpC,UAAMC,MAAWF,OAAOG;AAExB,UAAMC,MAAMC,MAAMC,QAAQJ,GAAG,IAAIA,IAAI,CAAC,IAAIA,2BAAKE;AAC/C,UAAMG,MAAMF,MAAMC,QAAQJ,GAAG,IAAIA,IAAI,CAAC,IAAIA,2BAAKK;AAC/C,QAAI,OAAOH,QAAQ,YAAY,OAAOG,QAAQ,SAAU;AACxDR,aAAS9B,KAAK;AAAA,MACZuC,MAAM;AAAA,MACNC,UAAU;AAAA,QAAED,MAAM;AAAA,QAASE,aAAa,CAACH,KAAKH,GAAG;AAAA,MAAA;AAAA,MACjDnD,YAAY;AAAA,QACV,GAAI+C,OAAOW,UAAU;AAAA,UAAEA,SAASX,OAAOW;AAAAA,QAAAA,IAAY,CAAA;AAAA,QACnD,GAAIX,OAAOxC,QAAQ;AAAA,UAAEA,OAAOwC,OAAOxC;AAAAA,QAAAA,IAAU,CAAA;AAAA,MAAC;AAAA,IAChD,CACD;AAAA,EACH;AACA,SAAOoD,KAAKC,UAAU;AAAA,IAAEL,MAAM;AAAA,IAAqBT;AAAAA,EAAAA,GAAY,MAAM,CAAC;AACxE;AAEO,MAAMe,cAA4CrD,CAAAA,UAAU;AACjE,MAAIsD;AACJ,MAAIC,cAAmB;AACvB,QAAM,CAACC,iBAAiBC,kBAAkB,IAAIC,QAAAA,aAAa,KAAK;AAChE,QAAM,CAACC,OAAOC,QAAQ,IAAIF,QAAAA,aAA4B,IAAI;AAC1D,QAAMG,aAAaC,kBAAAA,YAAAA;AACnB,QAAMC,YAAYC,sBAAAA,aAAAA;AAElB,QAAMC,SAASA,MAAAA;;AAAMjE,iBAAMiE,YAAWjE,WAAMkE,cAANlE,mBAAiBiE;AAAAA;AAMvDE,UAAAA,aAAa,MAAM;AACAN,eAAAA;AACjB,QAAI,CAACN,YAAa;AAIlBa,eAAW,MAAA;;AAAMb,8DAAac,mBAAbd;AAAAA,OAAiC,GAAG;AAAA,EACvD,CAAC;AAGDY,UAAAA,aAAa,YAAY;;AACvB,QAAIG,aAAU;AAEd,QAAI,CAACjG,GAAG;AACN,UAAI;AACF,cAAMkG,UAAS,MAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,6BAAS,CAAA,EAAA,KAAA,OAAA,EAAA,UAAA;AACrClG,YAAIkG,QAAOC,WAAWD;AACtB,cAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,+EAA0B,CAAA;AACvCd,2BAAmB,IAAI;AAAA,MACzB,SAASgB,GAAG;AACVC,gBAAQC,KAAK,0BAA0BF,CAAC;AACxCb,iBAAS,kCAAkC;AAC3C;AAAA,MACF;AAAA,IACF,OAAO;AACLH,yBAAmB,IAAI;AAAA,IACzB;AAEA,QAAID,gBAAAA,KAAqBF,gBAAgB,CAACC,aAAa;AACrD,YAAMlB,IAAI4B,OAAAA;AACV,YAAMW,UAASvC,uBAAGuC,WAAU,CAAC,QAAQ,KAAK;AAC1C,YAAMC,QAAOxC,uBAAGwC,SAAQ;AAExBtB,oBAAclF,EAAEyG,IAAIxB,cAAc;AAAA,QAChCyB,cAAa1C,uBAAG0C,iBAAgB;AAAA,QAChCC,kBAAiB3C,uBAAG2C,qBAAoB;AAAA,QACxCC,oBAAoB;AAAA,MAAA,CACrB,EAAEC,QAAQN,QAAQC,IAAI;AAGvB,YAAMM,gBAAe9C,uBAAG+C,cAAa;AACrC/G,QAAE+G,UAAUD,cAAc;AAAA,QACxBE,cACEhD,uBAAGgD,gBACH;AAAA,MAAA,CACH,EAAElD,MAAMoB,WAAW;AAEpB,WAAIlB,uBAAGgD,iBAAgB,IAAI;AACzBhH,UAAEiH,QAAQD,YAAY;AAAA,UAAEE,QAAQ;AAAA,QAAA,CAAO,EAAEpD,MAAMoB,WAAW;AAAA,MAC5D;AAGA,aAAQlF,EAAEmH,KAAKC,QAAQC,UAAkBC;AACzCtH,QAAEmH,KAAKC,QAAQG,aAAa;AAAA,QAC1BC,eAAe;AAAA,QACfC,SAAS;AAAA,QACTC,WAAW;AAAA,MAAA,CACZ;AAAA,IACH;AAGA,QAAIxC,eAAelF,GAAG;AACpB,UAAI;AACF,cAAMgE,IAAI4B,OAAAA;AACV,cAAM+B,kBAAyB,CAAA;AAG/BzC,oBAAY0C,UAAU,CAAC1E,UAAe;AACpC,cACEA,iBAAiBlD,EAAE6H,UACnB3E,iBAAiBlD,EAAE8H,WACnB5E,iBAAiBlD,EAAE+H,gBACnB7E,MAAM8E,UACN9E,MAAM+E,eACN;AACA/C,wBAAYgD,YAAYhF,KAAK;AAAA,UAC/B;AAAA,QACF,CAAC;AAGD,cAAMiB,UAAiB,CAAA;AACvB,cAAMgE,iBAAgBnE,uBAAGoE,gBAAcpE,uBAAGG,YAAWH,EAAEG,QAAQ5D,SAAS;AAExE,YAAI4H,eAAe;AACjB,cAAI;AACF,kBAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,2CAAuB,CAAA,EAAA,KAAA,OAAA,EAAA,wBAAA;AACpC,gBAAI,CAAClI,kBAAkB;AACrB,oBAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,+HAA8C,CAAA;AAC3D,oBAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,uIAAsD,CAAA;AACnEA,iCAAmB;AAAA,YACrB;AACA,kBAAMoI,cACJ,OAAOrE,EAAEoE,eAAe,WAAWpE,EAAEoE,aAAa,CAAA;AACpD,kBAAME,eAAgBtI,EAAUuI,mBAAmB;AAAA,cACjDC,kBAAkBH,YAAYG,oBAAoB;AAAA,cAClDC,mBAAmBJ,YAAYI,qBAAqB;AAAA,cACpDC,qBAAqBL,YAAYK,uBAAuB;AAAA,cACxDC,yBAAyBN,YAAYM;AAAAA,cACrCC,SAASP,YAAYQ,wBAAwB;AAAA,YAAA,CAC9C;AACD7E,yCAAGG,YAAHH,mBAAY8E,QAAS5E,CAAAA,WAAW;AAC9B,oBAAM6E,IAAI/I,EAAEkE,OAAOA,OAAOG,QAAQ;AAClC,kBAAIH,OAAOW,QAASkE,GAAEC,YAAY9E,OAAOW,OAAO;AAChD,kBAAIX,OAAOxC,MAAOqH,GAAEnF,UAAUM,OAAOxC,KAAK;AAC1C4G,2BAAaW,SAASF,CAAC;AACvB5E,sBAAQhC,KAAK4G,CAAC;AAAA,YAChB;AACA7D,wBAAY+D,SAASX,YAAY;AAAA,UACnC,QAAQ;AACNtE,yCAAGG,YAAHH,mBAAY8E,QAAS5E,CAAAA,WAAW;AAC9B,oBAAM6E,IAAI/I,EAAEkE,OAAOA,OAAOG,QAAQ,EAAEP,MAAMoB,WAAW;AACrD,kBAAIhB,OAAOW,QAASkE,GAAEC,YAAY9E,OAAOW,OAAO;AAChD,kBAAIX,OAAOxC,MAAOqH,GAAEnF,UAAUM,OAAOxC,KAAK;AAC1CyC,sBAAQhC,KAAK4G,CAAC;AAAA,YAChB;AAAA,UACF;AAAA,QACF,OAAO;AACL/E,uCAAGG,YAAHH,mBAAY8E,QAAS5E,CAAAA,WAAW;AAC9B,kBAAM6E,IAAI/I,EAAEkE,OAAOA,OAAOG,QAAQ,EAAEP,MAAMoB,WAAW;AACrD,gBAAIhB,OAAOW,QAASkE,GAAEC,YAAY9E,OAAOW,OAAO;AAChD,gBAAIX,OAAOxC,MAAOqH,GAAEnF,UAAUM,OAAOxC,KAAK;AAC1CyC,oBAAQhC,KAAK4G,CAAC;AAAA,UAChB;AAAA,QACF;AAEA,YAAI5E,QAAQ5D,SAAS,GAAG;AACtBoH,0BAAgBxF,KAAK,GAAGgC,OAAO;AAAA,QACjC;AAGA,YAAIH,uBAAGhB,SAAS;AACd,gBAAMkG,WAAWrG,gBAAgBqC,aAAalF,GAAGgE,EAAEhB,SAASgB,EAAEmF,cAAcnF,EAAEtC,KAAK;AACnFiG,0BAAgBxF,KAAK+G,QAAQ;AAAA,QAC/B;AAGA,aAAIlF,uBAAGoF,WAAUpF,EAAEoF,OAAO7I,SAAS,GAAG;AACpC,gBAAM8I,WAAgC,CAAA;AAEtC,qBAAWC,YAAYtF,EAAEoF,QAAQ;AAC/B,kBAAMF,WAAWrG,gBACfqC,aACAlF,GACAsJ,SAAStG,SACTsG,SAAS5I,UAASsD,uBAAGmF,eACrBG,SAAS5H,UAASsC,uBAAGtC,MACvB;AAEA2H,qBAASC,SAASC,IAAI,IAAIL;AAC1BvB,4BAAgBxF,KAAK+G,QAAQ;AAG7B,gBAAII,SAASE,YAAY,OAAO;AAC9BtE,0BAAYgD,YAAYgB,QAAQ;AAAA,YAClC;AAAA,UACF;AAGA,cAAI5G,OAAOC,KAAK8G,QAAQ,EAAE9I,SAAS,GAAG;AACpCP,cAAEiH,QAAQmC,OAAO,MAAMC,UAAU;AAAA,cAAEI,WAAW;AAAA,YAAA,CAAM,EAAE3F,MAAMoB,WAAW;AAAA,UACzE;AAAA,QACF;AAGA,YAAIlB,uBAAG0F,SAAS;AACd,cAAI;AAEF,kBAAMC,YAAY,MAAM,QAAA,QAAA,EAAA,KAAA,MAAA;AAAA;AAAA,cAA0B;AAAA,YAAmB,CAAA;AACrE,kBAAMC,WAAW5F,EAAE0F;AAEnB,kBAAMG,eACJD,cAASC,eAATD,mBAAqBnD,IAAKqD,CAAAA,UAAU;AAAA,cAClCC,WAAWD,KAAKC;AAAAA,cAChBC,YAAY,IAAKL,UACfG,KAAKE,eAAe,YAChB,sBACAF,KAAKE,eAAe,SAClB,mBACA,kBAAkB,EACxB;AAAA,gBACAC,MAAMH,KAAKjJ,SAAS;AAAA,gBACpBqJ,QAAQJ,KAAKjJ,SAAS;AAAA,gBACtBsJ,OAAOL,KAAKK,SAAS;AAAA,gBACrBpJ,SAAS+I,KAAK/I,WAAW;AAAA,cAAA,CAC1B;AAAA,YAAA,QACI,CAAA;AAET,kBAAMqJ,eACJR,cAASQ,eAATR,mBAAqBnD,IAAKqD,CAAAA,UAAU;AAAA,cAClCC,WAAWD,KAAKC;AAAAA,cAChBC,YAAY,IAAKL,UAAkBU,eAAe;AAAA,gBAChDC,aAAa,CAACR,KAAKS,SAAS;AAAA,gBAC5BC,UAAUV,KAAKU,YAAY;AAAA,cAAA,CAC5B;AAAA,YAAA,QACI,CAAA;AAET,kBAAMC,UAAWd,UAAkBe,aAAa;AAAA,cAC9CC,KAAKf,SAASe;AAAAA,cACd3D,aAAa4C,SAAS5C;AAAAA,cACtB6C;AAAAA,cACAO;AAAAA,cACAQ,SAAShB,SAASgB;AAAAA,cAClBC,SAASjB,SAASiB;AAAAA,YAAAA,CACnB;AAEDJ,oBAAQ3G,MAAMoB,WAAW;AAAA,UAC3B,SAASkB,GAAG;AACVC,oBAAQC,KAAK,0DAA0DF,CAAC;AAAA,UAC1E;AAAA,QACF;AAGA,aAAIpC,uBAAG8G,cAAanD,gBAAgBpH,SAAS,GAAG;AAC9C,gBAAMwK,QAAQ/K,EAAEgL,aAAarD,eAAe;AAC5C,gBAAMsD,SAASF,MAAMG,UAAAA;AACrB,cAAID,OAAOE,WAAW;AACpBjG,wBAAY4F,UAAUG,OAAOG,IAAI,GAAG,CAAC;AAAA,UACvC;AAAA,QACF,WAAWpH,uBAAGuC,QAAQ;AACpBrB,sBAAY2B,QAAQ7C,EAAEuC,QAAQvC,EAAEwC,QAAQtB,YAAYmG,SAAS;AAAA,QAC/D;AAAA,MACF,SAASC,KAAK;AAGZ,cAAMC,UAAUD,eAAeE,QAAQF,IAAIC,UAAU;AACrDhG,iBAASgG,OAAO;AAChB7F,+CAAW+F,SAAS;AAAA,UAClB/G,MAAM;AAAA,UACNgH,cAAcH;AAAAA,UACdI,MAAIhK,WAAMkE,cAANlE,mBAAiBgK,OAAM;AAAA,UAC3BC,eAAe;AAAA,UACfC,IAAIC,KAAKC,IAAAA;AAAAA,QAAI;AAAA,MAEjB;AAAA,IACF;AAAA,EACF,CAAC;AAGDC,UAAAA,UAAU,MAAM;AACd,QAAI9G,aAAa;AACfA,kBAAY+G,OAAAA;AACZ/G,oBAAc;AAAA,IAChB;AAAA,EACF,CAAC;AAED,SAAAgH,IAAAA,gBACGC,kBAAAA,mBAAiB;AAAA,IAChBC,OAAO;AAAA,IAAK,IACZC,WAAQ;AAAA,aAAEtI,aAAa6B,QAAQ;AAAA,IAAC;AAAA,IAChC0G,WAAS;AAAA,IAAA,IACTC,iBAAc;AAAA,aAAE5K,MAAM4K;AAAAA,IAAc;AAAA,IAAA,IAAAC,WAAA;AAAA,UAAAC,OAAAC,IAAAA,eAAAC,OAAA,GAAAC,QAAAH,KAAAI,YAAA,CAAAC,OAAAC,IAAA,IAAAC,IAAAA,cAAAJ,MAAAK,WAAA,GAAAC,QAAAJ,MAAAG,aAAA,CAAAE,OAAAC,KAAA,IAAAJ,IAAAA,cAAAE,MAAAD,WAAA;AAAAI,iBAAAZ,MAAAP,IAAAA,gBAOjCoB,cAAI;AAAA,QAAA,IAACC,OAAI;AAAA,iBAAEjI,MAAAA;AAAAA,QAAO;AAAA,QAAA,IAAAkH,WAAA;AAAA,cAAAgB,QAAAd,IAAAA,eAAAe,MAAA;AAAAJ,cAAAA,OAAAG,OAAAtB,oBAIdwB,iBAAAA,kBAAgBC,IAAAA,WAAA;AAAA,YAAA,IACfpC,UAAO;AAAA,qBAAE,yBAAyBjG,OAAO;AAAA,YAAE;AAAA,YAC3CsI,SAAO;AAAA,UAAA,GAAA,MACHC,oBAAAA,mBAAmBjI,OAAAA,KAAY,CAAA,CAAE,CAAC,CAAA,CAAA;AAAA,iBAAA4H;AAAAA,QAAA;AAAA,MAAA,CAAA,GAAAV,OAAAC,IAAA;AAAAM,iBAAAZ,MAAAP,IAAAA,gBAI3CoB,cAAI;AAAA,QAAA,IAACC,OAAI;AAAA,iBAAE,CAACjI,MAAAA;AAAAA,QAAO;AAAA,QAAA,IAAAkH,WAAA;AAAA,cAAAsB,QAAApB,IAAAA,eAAAqB,OAAA;AAAA,cAAAC,QAEX/I;AAAY,iBAAA+I,UAAA,aAAAC,IAAAA,IAAAD,OAAAF,KAAA,IAAZ7I,eAAY6I;AAAAI,cAAAA,OAAAC,CAAAA,QAAA;;AAAA,gBAAAC,MAEf5I,eACI;AAAA,cAAE6I,QAAQ;AAAA,cAAQlE,OAAO;AAAA,cAAQ,WAAW;AAAA,YAAA,IAC5C;AAAA,cAAEkE,UAAQzI,kBAAAA,mBAAUyI,WAAU;AAAA,cAASlE,OAAO;AAAA,cAAQ,WAAW;AAAA,YAAA,GAAGmE,OAEnE,gBAAgB9I,WAAAA,IAAe,mBAAmB,EAAE;AAAE2I,gBAAA/H,IAAAmI,IAAAA,MAAAT,OAAAM,KAAAD,IAAA/H,CAAA;AAAAkI,qBAAAH,IAAAK,KAAAC,IAAAA,UAAAX,OAAAK,IAAAK,IAAAF,IAAA;AAAA,mBAAAH;AAAAA,UAAA,GAAA;AAAA,YAAA/H,GAAAsI;AAAAA,YAAAF,GAAAE;AAAAA,UAAAA,CAAA;AAAA,iBAAAZ;AAAAA,QAAA;AAAA,MAAA,CAAA,GAAAX,OAAAC,KAAA;AAAAc,UAAAA,OAAA,MAAA;;AAAAO,mBAAAA,UAAAhC,MAvB1D,uHAAqH7G,kBAAAA,mBAAU+I,cAAa,EAAE,IACnJnJ,WAAAA,IAAe,iCAAiC,EAAE,EAClD;AAAA,OAAA;AAAA,aAAAiH;AAAAA,IAAA;AAAA,EAAA,CAAA;AA2BV;;"}
+{"version":3,"file":"MapRenderer.cjs","sources":["../../src/components/MapRenderer.tsx"],"sourcesContent":["/**\n * MapRenderer - Interactive map Component\n * Sprint 6: Markers + clustering\n * v3.1.0: GeoJSON, choropleth, popups, multi-layer, PMTiles\n */\n\nimport { Component, createEffect, onCleanup, createSignal, Show } from 'solid-js';\nimport { isServer } from 'solid-js/web';\nimport type {\n  UIComponent,\n  MapComponentParams,\n  MapClusterOptions,\n  MapGeoJSONStyle,\n  MapPopupConfig,\n  MapLayer,\n  MapPMTilesConfig,\n} from '../types';\nimport { ExpandableWrapper, useExpanded } from './ExpandableWrapper';\nimport { DegradedFallback } from './DegradedFallback';\nimport { mapToDegradedTable } from '../utils/degraded-projections';\nimport { useTelemetry } from '../context/MCPUITelemetryContext';\n\n// Lazy load leaflet (it doesn't support SSR well)\nlet L: any = null;\n// Track if marker cluster CSS has been loaded\nlet clusterCssLoaded = false;\n\nexport interface MapRendererProps {\n  /**\n   * UIComponent containing map params\n   */\n  component?: UIComponent;\n\n  /**\n   * Direct map params\n   */\n  params?: MapComponentParams;\n\n  /**\n   * Forwarded to the underlying `<ExpandableWrapper>` (v6.3.1).\n   * @see ExpandableWrapperProps.toolbarVariant\n   */\n  toolbarVariant?: 'hover' | 'always-visible';\n\n  /**\n   * Trust marker / popup content as raw HTML (v6.10.0, audit P1.2).\n   *\n   * Leaflet renders bound tooltip/popup strings as HTML, so `marker.tooltip`,\n   * `marker.popup` and a GeoJSON `popup.template` are XSS vectors when the\n   * payload is untrusted (the default for an LLM/connector-driven public\n   * package). **Default `false`** → those are escaped as plain text, and\n   * `popup.template` is ignored in favour of the safe auto-generated popup.\n   *\n   * This is a **host-level** trust decision, deliberately NOT a payload field\n   * (a malicious payload could just set its own flag). The\n   * `<UIResourceRenderer>` path never sets it, so payload-driven maps are\n   * always text-safe. A host rendering `<MapRenderer>` directly with trusted\n   * data may set `allowHtmlPopups` to restore rich HTML popups. The\n   * auto-generated popup (`titleField` / `fields`) is safe-by-construction\n   * and unaffected either way.\n   */\n  allowHtmlPopups?: boolean;\n}\n\n// ─── Helpers ────────────────────────────────────────────────\n\n/**\n * Resolve choropleth color for a feature based on property value and scale stops.\n */\nfunction getChoroplethColor(\n  value: unknown,\n  scale: Array<[number, string]>,\n  fallback: string\n): string {\n  if (value == null || typeof value !== 'number' || !isFinite(value)) return fallback;\n\n  // Scale is sorted ascending: [[0, '#eff3ff'], [100, '#084594']]\n  if (scale.length === 0) return fallback;\n  if (value <= scale[0][0]) return scale[0][1];\n  if (value >= scale[scale.length - 1][0]) return scale[scale.length - 1][1];\n\n  // Find surrounding stops and interpolate (use upper bracket color)\n  for (let i = 1; i < scale.length; i++) {\n    if (value <= scale[i][0]) return scale[i][1];\n  }\n  return scale[scale.length - 1][1];\n}\n\n/**\n * Build a Leaflet style function from MapGeoJSONStyle config.\n */\nfunction buildStyleFn(\n  style: MapGeoJSONStyle | undefined\n): (feature: any) => Record<string, unknown> {\n  if (!style) {\n    return () => ({\n      fillColor: '#3388ff',\n      fillOpacity: 0.6,\n      color: '#333',\n      weight: 1,\n      opacity: 1,\n    });\n  }\n\n  return (feature: any) => {\n    let fillColor = style.fillColor || '#3388ff';\n\n    // Choropleth: override fillColor based on feature property\n    if (style.choroplethField && style.choroplethScale && feature?.properties) {\n      const val = feature.properties[style.choroplethField];\n      fillColor = getChoroplethColor(\n        val,\n        style.choroplethScale,\n        style.choroplethFallback || '#ccc'\n      );\n    }\n\n    return {\n      fillColor,\n      fillOpacity: style.fillOpacity ?? 0.6,\n      color: style.strokeColor || '#333',\n      weight: style.strokeWeight ?? 1,\n      opacity: style.strokeOpacity ?? 1,\n    };\n  };\n}\n\n/**\n * Build popup HTML from a feature's properties using popup config.\n *\n * `allowHtml` (audit P1.2) gates the raw-HTML `popup.template`: it is honored\n * only when the host trusts the payload. On the default (untrusted) path the\n * template is ignored and we fall through to the auto-generated popup, whose\n * structure is renderer-authored and whose values are always escaped — safe\n * by construction. Even in the trusted path, substituted `{{prop}}` values\n * are escaped (they are data, not markup).\n */\nexport function buildPopupContent(\n  feature: any,\n  popup: MapPopupConfig | undefined,\n  allowHtml = false\n): string | null {\n  if (!popup || !feature?.properties) return null;\n  const props = feature.properties;\n\n  // Custom template — raw HTML, so trusted-host only.\n  if (allowHtml && popup.template) {\n    return popup.template.replace(/\\{\\{(\\w+)\\}\\}/g, (_, key) => {\n      const val = props[key];\n      return val != null ? escapeHtml(String(val)) : '';\n    });\n  }\n\n  // Auto-generated popup\n  const parts: string[] = [];\n\n  if (popup.titleField && props[popup.titleField] != null) {\n    parts.push(`<strong>${escapeHtml(String(props[popup.titleField]))}</strong>`);\n  }\n\n  const fields = popup.fields || Object.keys(props).slice(0, 8);\n  for (const key of fields) {\n    if (key === popup.titleField) continue;\n    const val = props[key];\n    if (val == null) continue;\n    const formatted = typeof val === 'number' ? val.toLocaleString('fr-FR') : String(val);\n    parts.push(\n      `<span style=\"color:#666;font-size:11px\">${escapeHtml(key)}</span>: ${escapeHtml(formatted)}`\n    );\n  }\n\n  return parts.join('<br/>');\n}\n\nfunction escapeHtml(str: string): string {\n  return str\n    .replace(/&/g, '&amp;')\n    .replace(/</g, '&lt;')\n    .replace(/>/g, '&gt;')\n    .replace(/\"/g, '&quot;');\n}\n\n/**\n * Resolve a marker's tooltip/popup string for binding (audit P1.2). Leaflet\n * renders bound strings as HTML; `marker.tooltip` / `marker.popup` come from\n * the (untrusted) payload, so they are escaped to plain text unless the host\n * has opted into raw HTML via `allowHtmlPopups`. Pure + exported for tests.\n */\nexport function popupSafeText(value: string | undefined, allowHtml = false): string | undefined {\n  if (value == null) return undefined;\n  return allowHtml ? value : escapeHtml(value);\n}\n\n/** Bind a marker's tooltip + popup, escaping by default (see popupSafeText). */\nexport function bindMarkerContent(\n  m: any,\n  marker: { tooltip?: string; popup?: string },\n  allowHtml: boolean\n): void {\n  const tooltip = popupSafeText(marker.tooltip, allowHtml);\n  if (tooltip) m.bindTooltip(tooltip);\n  const popup = popupSafeText(marker.popup, allowHtml);\n  if (popup) m.bindPopup(popup);\n}\n\n/**\n * Add a GeoJSON layer to the map with style and popup support.\n * Returns the layer for bounds calculation.\n */\nfunction addGeoJSONLayer(\n  mapInst: any,\n  leaflet: any,\n  geojson: unknown,\n  style?: MapGeoJSONStyle,\n  popup?: MapPopupConfig\n): any {\n  const styleFn = buildStyleFn(style);\n\n  const layer = leaflet.geoJSON(geojson, {\n    style: styleFn,\n    pointToLayer: (feature: any, latlng: any) => {\n      // Render points as circle markers for consistency\n      const s = styleFn(feature);\n      return leaflet.circleMarker(latlng, {\n        radius: 6,\n        fillColor: s.fillColor,\n        fillOpacity: s.fillOpacity,\n        color: s.color,\n        weight: s.weight,\n        opacity: s.opacity,\n      });\n    },\n    onEachFeature: (feature: any, featureLayer: any) => {\n      const html = buildPopupContent(feature, popup);\n      if (html) {\n        featureLayer.bindPopup(html, { maxWidth: 300 });\n      }\n    },\n  });\n\n  layer.addTo(mapInst);\n  return layer;\n}\n\n// ─── Component ──────────────────────────────────────────────\n\n/**\n * Build a GeoJSON FeatureCollection from the map's `markers` (and any\n * inlined GeoJSON layers, when present). Used by the \"Copy data\" button\n * shipped via `<ExpandableWrapper>` (v6.2.0). Best-effort — clusters,\n * tile layers, and choropleth-only data don't get round-tripped.\n */\nfunction mapToGeoJSON(p: MapComponentParams | undefined): string {\n  if (!p) return '{\"type\":\"FeatureCollection\",\"features\":[]}';\n  const features: any[] = [];\n  for (const marker of p.markers ?? []) {\n    const pos: any = marker.position as any;\n    // Accept both [lat, lng] tuple and {lat, lng} object shapes (v5.0.2 spec)\n    const lat = Array.isArray(pos) ? pos[0] : pos?.lat;\n    const lng = Array.isArray(pos) ? pos[1] : pos?.lng;\n    if (typeof lat !== 'number' || typeof lng !== 'number') continue;\n    features.push({\n      type: 'Feature',\n      geometry: { type: 'Point', coordinates: [lng, lat] },\n      properties: {\n        ...(marker.tooltip ? { tooltip: marker.tooltip } : {}),\n        ...(marker.popup ? { popup: marker.popup } : {}),\n      },\n    });\n  }\n  return JSON.stringify({ type: 'FeatureCollection', features }, null, 2);\n}\n\nexport const MapRenderer: Component<MapRendererProps> = (props) => {\n  let mapContainer: HTMLDivElement | undefined;\n  let mapInstance: any = null;\n  const [isLeafletLoaded, setIsLeafletLoaded] = createSignal(false);\n  const [error, setError] = createSignal<string | null>(null);\n  // PMTiles is an optional overlay on top of the base map. When it fails we\n  // keep the base map but surface a visible notice (audit P1.3) instead of a\n  // silent console.warn that leaves the user with an unexplained empty layer.\n  const [pmtilesError, setPmtilesError] = createSignal<string | null>(null);\n  const isExpanded = useExpanded();\n  const telemetry = useTelemetry();\n  // Host-level trust for raw HTML in marker/popup content (audit P1.2).\n  // Default false → tooltip/popup escaped, GeoJSON `popup.template` ignored.\n  const allowHtml = () => props.allowHtmlPopups === true;\n\n  const params = () => props.params || (props.component?.params as MapComponentParams);\n\n  // v6.2.0 — Leaflet has to be told to re-measure when its container\n  // resizes (e.g. transitioning to fullscreen via ExpandableWrapper).\n  // We give the DOM a tick to settle the new dimensions, then ask\n  // Leaflet to reflow tiles.\n  createEffect(() => {\n    const expanded = isExpanded();\n    if (!mapInstance) return;\n    // Read the signal so the effect re-runs on toggle ; the value is\n    // observed for its side effects on layout.\n    void expanded;\n    setTimeout(() => mapInstance?.invalidateSize?.(), 100);\n  });\n\n  // Initialize Map\n  createEffect(async () => {\n    if (isServer) return; // Don't run on server\n\n    if (!L) {\n      try {\n        const module = await import('leaflet');\n        L = module.default || module;\n        await import('leaflet/dist/leaflet.css'); // Import CSS\n        setIsLeafletLoaded(true);\n      } catch (e) {\n        console.warn('Failed to load leaflet', e);\n        setError('Map library could not be loaded.');\n        return;\n      }\n    } else {\n      setIsLeafletLoaded(true);\n    }\n\n    if (isLeafletLoaded() && mapContainer && !mapInstance) {\n      const p = params();\n      const center = p?.center || [51.505, -0.09]; // Default to London\n      const zoom = p?.zoom || 13;\n\n      mapInstance = L.map(mapContainer, {\n        zoomControl: p?.zoomControl !== false,\n        scrollWheelZoom: p?.scrollWheelZoom !== false,\n        attributionControl: false,\n      }).setView(center, zoom);\n\n      // Add OpenStreetMap tile layer\n      const tileLayerUrl = p?.tileLayer || 'https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png';\n      L.tileLayer(tileLayerUrl, {\n        attribution:\n          p?.attribution ||\n          '&copy; <a href=\"https://www.openstreetmap.org/copyright\">OpenStreetMap</a> contributors',\n      }).addTo(mapInstance);\n\n      if (p?.attribution !== '') {\n        L.control.attribution({ prefix: false }).addTo(mapInstance);\n      }\n\n      // Fix marker icons (Leaflet issue with bundlers)\n      delete (L.Icon.Default.prototype as any)._getIconUrl;\n      L.Icon.Default.mergeOptions({\n        iconRetinaUrl: 'https://unpkg.com/leaflet@1.9.4/dist/images/marker-icon-2x.png',\n        iconUrl: 'https://unpkg.com/leaflet@1.9.4/dist/images/marker-icon.png',\n        shadowUrl: 'https://unpkg.com/leaflet@1.9.4/dist/images/marker-shadow.png',\n      });\n    }\n\n    // Update markers and view\n    if (mapInstance && L) {\n      try {\n        const p = params();\n        const allBoundsLayers: any[] = [];\n\n        // Clear existing layers (markers, cluster groups, GeoJSON)\n        mapInstance.eachLayer((layer: any) => {\n          if (\n            layer instanceof L.Marker ||\n            layer instanceof L.GeoJSON ||\n            layer instanceof L.CircleMarker ||\n            layer._group ||\n            layer._featureGroup\n          ) {\n            mapInstance.removeLayer(layer);\n          }\n        });\n\n        // ─── Markers (legacy) ────────────────────────\n        const markers: any[] = [];\n        const shouldCluster = p?.clustering && p?.markers && p.markers.length > 0;\n\n        if (shouldCluster) {\n          try {\n            await import('leaflet.markercluster');\n            if (!clusterCssLoaded) {\n              await import('leaflet.markercluster/dist/MarkerCluster.css');\n              await import('leaflet.markercluster/dist/MarkerCluster.Default.css');\n              clusterCssLoaded = true;\n            }\n            const clusterOpts: MapClusterOptions =\n              typeof p.clustering === 'object' ? p.clustering : {};\n            const clusterGroup = (L as any).markerClusterGroup({\n              maxClusterRadius: clusterOpts.maxClusterRadius ?? 80,\n              spiderfyOnMaxZoom: clusterOpts.spiderfyOnMaxZoom ?? true,\n              showCoverageOnHover: clusterOpts.showCoverageOnHover ?? true,\n              disableClusteringAtZoom: clusterOpts.disableClusteringAtZoom,\n              animate: clusterOpts.animateAddingMarkers ?? true,\n            });\n            p?.markers?.forEach((marker) => {\n              const m = L.marker(marker.position);\n              bindMarkerContent(m, marker, allowHtml());\n              clusterGroup.addLayer(m);\n              markers.push(m);\n            });\n            mapInstance.addLayer(clusterGroup);\n          } catch {\n            p?.markers?.forEach((marker) => {\n              const m = L.marker(marker.position).addTo(mapInstance);\n              bindMarkerContent(m, marker, allowHtml());\n              markers.push(m);\n            });\n          }\n        } else {\n          p?.markers?.forEach((marker) => {\n            const m = L.marker(marker.position).addTo(mapInstance);\n            bindMarkerContent(m, marker, allowHtml());\n            markers.push(m);\n          });\n        }\n\n        if (markers.length > 0) {\n          allBoundsLayers.push(...markers);\n        }\n\n        // ─── GeoJSON (v3.1.0) ───────────────────────\n        if (p?.geojson) {\n          const geoLayer = addGeoJSONLayer(mapInstance, L, p.geojson, p.geojsonStyle, p.popup);\n          allBoundsLayers.push(geoLayer);\n        }\n\n        // ─── Named layers (v3.1.0) ──────────────────\n        if (p?.layers && p.layers.length > 0) {\n          const overlays: Record<string, any> = {};\n\n          for (const layerDef of p.layers) {\n            const geoLayer = addGeoJSONLayer(\n              mapInstance,\n              L,\n              layerDef.geojson,\n              layerDef.style || p?.geojsonStyle,\n              layerDef.popup || p?.popup\n            );\n\n            overlays[layerDef.name] = geoLayer;\n            allBoundsLayers.push(geoLayer);\n\n            // Respect initial visibility\n            if (layerDef.visible === false) {\n              mapInstance.removeLayer(geoLayer);\n            }\n          }\n\n          // Add layer control if multiple layers\n          if (Object.keys(overlays).length > 1) {\n            L.control.layers(null, overlays, { collapsed: true }).addTo(mapInstance);\n          }\n        }\n\n        // ─── PMTiles (v3.1.0) ────────────────────────\n        setPmtilesError(null);\n        if (p?.pmtiles) {\n          try {\n            // @ts-ignore — optional peer dependency, may not be installed\n            const protomaps = await import(/* @vite-ignore */ 'protomaps-leaflet');\n            const pmConfig = p.pmtiles;\n\n            const paintRules =\n              pmConfig.paintRules?.map((rule) => ({\n                dataLayer: rule.dataLayer,\n                symbolizer: new (protomaps as any)[\n                  rule.symbolizer === 'polygon'\n                    ? 'PolygonSymbolizer'\n                    : rule.symbolizer === 'line'\n                      ? 'LineSymbolizer'\n                      : 'CircleSymbolizer'\n                ]({\n                  fill: rule.color || '#3388ff',\n                  stroke: rule.color || '#333',\n                  width: rule.width ?? 1,\n                  opacity: rule.opacity ?? 0.6,\n                }),\n              })) || [];\n\n            const labelRules =\n              pmConfig.labelRules?.map((rule) => ({\n                dataLayer: rule.dataLayer,\n                symbolizer: new (protomaps as any).TextSymbolizer({\n                  label_props: [rule.textField],\n                  fontSize: rule.fontSize ?? 12,\n                }),\n              })) || [];\n\n            const pmLayer = (protomaps as any).leafletLayer({\n              url: pmConfig.url,\n              attribution: pmConfig.attribution,\n              paintRules,\n              labelRules,\n              maxZoom: pmConfig.maxZoom,\n              minZoom: pmConfig.minZoom,\n            });\n\n            pmLayer.addTo(mapInstance);\n          } catch (e) {\n            // P1.3 — do NOT fail silently. Keep the base map, but surface a\n            // visible notice and report a renderer error via telemetry. The\n            // most common cause is the optional `protomaps-leaflet` peer not\n            // being installed.\n            const detail = e instanceof Error ? e.message : String(e);\n            const message =\n              'PMTiles layer unavailable — the optional \"protomaps-leaflet\" ' +\n              'peer dependency failed to load or render.';\n            console.warn('[MCP-UI] ' + message, e);\n            setPmtilesError(message);\n            telemetry?.dispatch({\n              type: 'render:error',\n              errorMessage: `${message} (${detail})`,\n              id: props.component?.id ?? '',\n              componentType: 'map',\n              ts: Date.now(),\n            });\n          }\n        }\n\n        // ─── Fit bounds ─────────────────────────────\n        if (p?.fitBounds && allBoundsLayers.length > 0) {\n          const group = L.featureGroup(allBoundsLayers);\n          const bounds = group.getBounds();\n          if (bounds.isValid()) {\n            mapInstance.fitBounds(bounds.pad(0.1));\n          }\n        } else if (p?.center) {\n          mapInstance.setView(p.center, p.zoom || mapInstance.getZoom());\n        }\n      } catch (err) {\n        // Fallback ladder (P2.5): a Leaflet drawing failure degrades to\n        // the coordinate table below instead of a blank/partial map.\n        const message = err instanceof Error ? err.message : 'Failed to render map';\n        setError(message);\n        telemetry?.dispatch({\n          type: 'render:error',\n          errorMessage: message,\n          id: props.component?.id ?? '',\n          componentType: 'map',\n          ts: Date.now(),\n        });\n      }\n    }\n  });\n\n  // Cleanup\n  onCleanup(() => {\n    if (mapInstance) {\n      mapInstance.remove();\n      mapInstance = null;\n    }\n  });\n\n  return (\n    <ExpandableWrapper\n      title={'Map'}\n      copyData={mapToGeoJSON(params())}\n      copyLabel=\"Copy markers as GeoJSON\"\n      toolbarVariant={props.toolbarVariant}\n    >\n      <div\n        class={`w-full bg-white dark:bg-gray-800 rounded-lg shadow-sm border border-gray-200 dark:border-gray-700 overflow-hidden ${params()?.className || ''} ${\n          isExpanded() ? 'flex-1 min-h-0 flex flex-col' : ''\n        }`}\n      >\n        <Show when={error()}>\n          {/* Fallback ladder (P2.5): degrade to a coordinate table\n                        rather than a bare error string. */}\n          <div class=\"p-3\">\n            <DegradedFallback\n              message={`Map rendering failed: ${error()}`}\n              caption=\"Showing the map data as a coordinate table — the interactive map is unavailable.\"\n              {...mapToDegradedTable(params() ?? {})}\n            />\n          </div>\n        </Show>\n        <Show when={!error()}>\n          {/* P1.3 — visible notice when the PMTiles overlay fails but the\n                        base map is still usable. */}\n          <Show when={pmtilesError()}>\n            <div\n              role=\"alert\"\n              class=\"m-2 rounded-md border border-amber-300 bg-amber-50 px-3 py-2 text-sm text-amber-800 dark:border-amber-700/50 dark:bg-amber-900/20 dark:text-amber-200\"\n            >\n              {pmtilesError()} The base map is still shown.\n            </div>\n          </Show>\n          <div\n            ref={mapContainer}\n            style={\n              isExpanded()\n                ? { height: '100%', width: '100%', 'z-index': 0 }\n                : { height: params()?.height || '400px', width: '100%', 'z-index': 0 }\n            }\n            class={`relative z-0 ${isExpanded() ? 'flex-1 min-h-0' : ''}`}\n          />\n        </Show>\n      </div>\n    </ExpandableWrapper>\n  );\n};\n"],"names":["L","clusterCssLoaded","getChoroplethColor","value","scale","fallback","isFinite","length","i","buildStyleFn","style","fillColor","fillOpacity","color","weight","opacity","feature","choroplethField","choroplethScale","properties","val","choroplethFallback","strokeColor","strokeWeight","strokeOpacity","buildPopupContent","popup","allowHtml","props","template","replace","_","key","escapeHtml","String","parts","titleField","push","fields","Object","keys","slice","formatted","toLocaleString","join","str","popupSafeText","undefined","bindMarkerContent","m","marker","tooltip","bindTooltip","bindPopup","addGeoJSONLayer","mapInst","leaflet","geojson","styleFn","layer","geoJSON","pointToLayer","latlng","s","circleMarker","radius","onEachFeature","featureLayer","html","maxWidth","addTo","mapToGeoJSON","p","features","markers","pos","position","lat","Array","isArray","lng","type","geometry","coordinates","JSON","stringify","MapRenderer","mapContainer","mapInstance","isLeafletLoaded","setIsLeafletLoaded","createSignal","error","setError","pmtilesError","setPmtilesError","isExpanded","useExpanded","telemetry","useTelemetry","allowHtmlPopups","params","component","createEffect","setTimeout","invalidateSize","isServer","module","default","e","console","warn","center","zoom","map","zoomControl","scrollWheelZoom","attributionControl","setView","tileLayerUrl","tileLayer","attribution","control","prefix","Icon","Default","prototype","_getIconUrl","mergeOptions","iconRetinaUrl","iconUrl","shadowUrl","allBoundsLayers","eachLayer","Marker","GeoJSON","CircleMarker","_group","_featureGroup","removeLayer","shouldCluster","clustering","clusterOpts","clusterGroup","markerClusterGroup","maxClusterRadius","spiderfyOnMaxZoom","showCoverageOnHover","disableClusteringAtZoom","animate","animateAddingMarkers","forEach","addLayer","geoLayer","geojsonStyle","layers","overlays","layerDef","name","visible","collapsed","pmtiles","protomaps","pmConfig","paintRules","rule","dataLayer","symbolizer","fill","stroke","width","labelRules","TextSymbolizer","label_props","textField","fontSize","pmLayer","leafletLayer","url","maxZoom","minZoom","detail","Error","message","dispatch","errorMessage","id","componentType","ts","Date","now","fitBounds","group","featureGroup","bounds","getBounds","isValid","pad","getZoom","err","onCleanup","remove","_$createComponent","ExpandableWrapper","title","copyData","copyLabel","toolbarVariant","children","_el$","_$getNextElement","_tmpl$4","_el$8","firstChild","_el$9","_co$2","_$getNextMarker","nextSibling","_el$0","_el$1","_co$3","_$insert","Show","when","_el$2","_tmpl$","DegradedFallback","_$mergeProps","caption","mapToDegradedTable","_el$3","_tmpl$2","_el$5","_el$6","_co$","_el$7","_tmpl$3","_ref$","_$use","_$effect","_p$","_v$","height","_v$2","_$style","t","_$className","className"],"mappings":";;;;;;;;;AAuBA,IAAIA,IAAS;AAEb,IAAIC,mBAAmB;AA4CvB,SAASC,mBACPC,OACAC,OACAC,UACQ;AACR,MAAIF,SAAS,QAAQ,OAAOA,UAAU,YAAY,CAACG,SAASH,KAAK,EAAG,QAAOE;AAG3E,MAAID,MAAMG,WAAW,EAAG,QAAOF;AAC/B,MAAIF,SAASC,MAAM,CAAC,EAAE,CAAC,EAAG,QAAOA,MAAM,CAAC,EAAE,CAAC;AAC3C,MAAID,SAASC,MAAMA,MAAMG,SAAS,CAAC,EAAE,CAAC,EAAG,QAAOH,MAAMA,MAAMG,SAAS,CAAC,EAAE,CAAC;AAGzE,WAASC,IAAI,GAAGA,IAAIJ,MAAMG,QAAQC,KAAK;AACrC,QAAIL,SAASC,MAAMI,CAAC,EAAE,CAAC,EAAG,QAAOJ,MAAMI,CAAC,EAAE,CAAC;AAAA,EAC7C;AACA,SAAOJ,MAAMA,MAAMG,SAAS,CAAC,EAAE,CAAC;AAClC;AAKA,SAASE,aACPC,OAC2C;AAC3C,MAAI,CAACA,OAAO;AACV,WAAO,OAAO;AAAA,MACZC,WAAW;AAAA,MACXC,aAAa;AAAA,MACbC,OAAO;AAAA,MACPC,QAAQ;AAAA,MACRC,SAAS;AAAA,IAAA;AAAA,EAEb;AAEA,SAAO,CAACC,YAAiB;AACvB,QAAIL,YAAYD,MAAMC,aAAa;AAGnC,QAAID,MAAMO,mBAAmBP,MAAMQ,oBAAmBF,mCAASG,aAAY;AACzE,YAAMC,MAAMJ,QAAQG,WAAWT,MAAMO,eAAe;AACpDN,kBAAYT,mBACVkB,KACAV,MAAMQ,iBACNR,MAAMW,sBAAsB,MAC9B;AAAA,IACF;AAEA,WAAO;AAAA,MACLV;AAAAA,MACAC,aAAaF,MAAME,eAAe;AAAA,MAClCC,OAAOH,MAAMY,eAAe;AAAA,MAC5BR,QAAQJ,MAAMa,gBAAgB;AAAA,MAC9BR,SAASL,MAAMc,iBAAiB;AAAA,IAAA;AAAA,EAEpC;AACF;AAYO,SAASC,kBACdT,SACAU,OACAC,YAAY,OACG;AACf,MAAI,CAACD,SAAS,EAACV,mCAASG,YAAY,QAAO;AAC3C,QAAMS,QAAQZ,QAAQG;AAGtB,MAAIQ,aAAaD,MAAMG,UAAU;AAC/B,WAAOH,MAAMG,SAASC,QAAQ,kBAAkB,CAACC,GAAGC,QAAQ;AAC1D,YAAMZ,MAAMQ,MAAMI,GAAG;AACrB,aAAOZ,OAAO,OAAOa,WAAWC,OAAOd,GAAG,CAAC,IAAI;AAAA,IACjD,CAAC;AAAA,EACH;AAGA,QAAMe,QAAkB,CAAA;AAExB,MAAIT,MAAMU,cAAcR,MAAMF,MAAMU,UAAU,KAAK,MAAM;AACvDD,UAAME,KAAK,WAAWJ,WAAWC,OAAON,MAAMF,MAAMU,UAAU,CAAC,CAAC,CAAC,WAAW;AAAA,EAC9E;AAEA,QAAME,SAASZ,MAAMY,UAAUC,OAAOC,KAAKZ,KAAK,EAAEa,MAAM,GAAG,CAAC;AAC5D,aAAWT,OAAOM,QAAQ;AACxB,QAAIN,QAAQN,MAAMU,WAAY;AAC9B,UAAMhB,MAAMQ,MAAMI,GAAG;AACrB,QAAIZ,OAAO,KAAM;AACjB,UAAMsB,YAAY,OAAOtB,QAAQ,WAAWA,IAAIuB,eAAe,OAAO,IAAIT,OAAOd,GAAG;AACpFe,UAAME,KACJ,2CAA2CJ,WAAWD,GAAG,CAAC,YAAYC,WAAWS,SAAS,CAAC,EAC7F;AAAA,EACF;AAEA,SAAOP,MAAMS,KAAK,OAAO;AAC3B;AAEA,SAASX,WAAWY,KAAqB;AACvC,SAAOA,IACJf,QAAQ,MAAM,OAAO,EACrBA,QAAQ,MAAM,MAAM,EACpBA,QAAQ,MAAM,MAAM,EACpBA,QAAQ,MAAM,QAAQ;AAC3B;AAQO,SAASgB,cAAc3C,OAA2BwB,YAAY,OAA2B;AAC9F,MAAIxB,SAAS,KAAM,QAAO4C;AAC1B,SAAOpB,YAAYxB,QAAQ8B,WAAW9B,KAAK;AAC7C;AAGO,SAAS6C,kBACdC,GACAC,QACAvB,WACM;AACN,QAAMwB,UAAUL,cAAcI,OAAOC,SAASxB,SAAS;AACvD,MAAIwB,QAASF,GAAEG,YAAYD,OAAO;AAClC,QAAMzB,QAAQoB,cAAcI,OAAOxB,OAAOC,SAAS;AACnD,MAAID,MAAOuB,GAAEI,UAAU3B,KAAK;AAC9B;AAMA,SAAS4B,gBACPC,SACAC,SACAC,SACA/C,OACAgB,OACK;AACL,QAAMgC,UAAUjD,aAAaC,KAAK;AAElC,QAAMiD,QAAQH,QAAQI,QAAQH,SAAS;AAAA,IACrC/C,OAAOgD;AAAAA,IACPG,cAAcA,CAAC7C,SAAc8C,WAAgB;AAE3C,YAAMC,IAAIL,QAAQ1C,OAAO;AACzB,aAAOwC,QAAQQ,aAAaF,QAAQ;AAAA,QAClCG,QAAQ;AAAA,QACRtD,WAAWoD,EAAEpD;AAAAA,QACbC,aAAamD,EAAEnD;AAAAA,QACfC,OAAOkD,EAAElD;AAAAA,QACTC,QAAQiD,EAAEjD;AAAAA,QACVC,SAASgD,EAAEhD;AAAAA,MAAAA,CACZ;AAAA,IACH;AAAA,IACAmD,eAAeA,CAAClD,SAAcmD,iBAAsB;AAClD,YAAMC,OAAO3C,kBAAkBT,SAASU,KAAK;AAC7C,UAAI0C,MAAM;AACRD,qBAAad,UAAUe,MAAM;AAAA,UAAEC,UAAU;AAAA,QAAA,CAAK;AAAA,MAChD;AAAA,IACF;AAAA,EAAA,CACD;AAEDV,QAAMW,MAAMf,OAAO;AACnB,SAAOI;AACT;AAUA,SAASY,aAAaC,GAA2C;AAC/D,MAAI,CAACA,EAAG,QAAO;AACf,QAAMC,WAAkB,CAAA;AACxB,aAAWvB,UAAUsB,EAAEE,WAAW,CAAA,GAAI;AACpC,UAAMC,MAAWzB,OAAO0B;AAExB,UAAMC,MAAMC,MAAMC,QAAQJ,GAAG,IAAIA,IAAI,CAAC,IAAIA,2BAAKE;AAC/C,UAAMG,MAAMF,MAAMC,QAAQJ,GAAG,IAAIA,IAAI,CAAC,IAAIA,2BAAKK;AAC/C,QAAI,OAAOH,QAAQ,YAAY,OAAOG,QAAQ,SAAU;AACxDP,aAASpC,KAAK;AAAA,MACZ4C,MAAM;AAAA,MACNC,UAAU;AAAA,QAAED,MAAM;AAAA,QAASE,aAAa,CAACH,KAAKH,GAAG;AAAA,MAAA;AAAA,MACjD1D,YAAY;AAAA,QACV,GAAI+B,OAAOC,UAAU;AAAA,UAAEA,SAASD,OAAOC;AAAAA,QAAAA,IAAY,CAAA;AAAA,QACnD,GAAID,OAAOxB,QAAQ;AAAA,UAAEA,OAAOwB,OAAOxB;AAAAA,QAAAA,IAAU,CAAA;AAAA,MAAC;AAAA,IAChD,CACD;AAAA,EACH;AACA,SAAO0D,KAAKC,UAAU;AAAA,IAAEJ,MAAM;AAAA,IAAqBR;AAAAA,EAAAA,GAAY,MAAM,CAAC;AACxE;AAEO,MAAMa,cAA4C1D,CAAAA,UAAU;AACjE,MAAI2D;AACJ,MAAIC,cAAmB;AACvB,QAAM,CAACC,iBAAiBC,kBAAkB,IAAIC,QAAAA,aAAa,KAAK;AAChE,QAAM,CAACC,OAAOC,QAAQ,IAAIF,QAAAA,aAA4B,IAAI;AAI1D,QAAM,CAACG,cAAcC,eAAe,IAAIJ,QAAAA,aAA4B,IAAI;AACxE,QAAMK,aAAaC,kBAAAA,YAAAA;AACnB,QAAMC,YAAYC,sBAAAA,aAAAA;AAGlB,QAAMxE,YAAYA,MAAMC,MAAMwE,oBAAoB;AAElD,QAAMC,SAASA,MAAAA;;AAAMzE,iBAAMyE,YAAWzE,WAAM0E,cAAN1E,mBAAiByE;AAAAA;AAMvDE,UAAAA,aAAa,MAAM;AACAP,eAAAA;AACjB,QAAI,CAACR,YAAa;AAIlBgB,eAAW,MAAA;;AAAMhB,8DAAaiB,mBAAbjB;AAAAA,OAAiC,GAAG;AAAA,EACvD,CAAC;AAGDe,UAAAA,aAAa,YAAY;;AACvB,QAAIG,aAAU;AAEd,QAAI,CAAC1G,GAAG;AACN,UAAI;AACF,cAAM2G,UAAS,MAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,6BAAS,CAAA,EAAA,KAAA,OAAA,EAAA,UAAA;AACrC3G,YAAI2G,QAAOC,WAAWD;AACtB,cAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,+EAA0B,CAAA;AACvCjB,2BAAmB,IAAI;AAAA,MACzB,SAASmB,GAAG;AACVC,gBAAQC,KAAK,0BAA0BF,CAAC;AACxChB,iBAAS,kCAAkC;AAC3C;AAAA,MACF;AAAA,IACF,OAAO;AACLH,yBAAmB,IAAI;AAAA,IACzB;AAEA,QAAID,gBAAAA,KAAqBF,gBAAgB,CAACC,aAAa;AACrD,YAAMhB,IAAI6B,OAAAA;AACV,YAAMW,UAASxC,uBAAGwC,WAAU,CAAC,QAAQ,KAAK;AAC1C,YAAMC,QAAOzC,uBAAGyC,SAAQ;AAExBzB,oBAAcxF,EAAEkH,IAAI3B,cAAc;AAAA,QAChC4B,cAAa3C,uBAAG2C,iBAAgB;AAAA,QAChCC,kBAAiB5C,uBAAG4C,qBAAoB;AAAA,QACxCC,oBAAoB;AAAA,MAAA,CACrB,EAAEC,QAAQN,QAAQC,IAAI;AAGvB,YAAMM,gBAAe/C,uBAAGgD,cAAa;AACrCxH,QAAEwH,UAAUD,cAAc;AAAA,QACxBE,cACEjD,uBAAGiD,gBACH;AAAA,MAAA,CACH,EAAEnD,MAAMkB,WAAW;AAEpB,WAAIhB,uBAAGiD,iBAAgB,IAAI;AACzBzH,UAAE0H,QAAQD,YAAY;AAAA,UAAEE,QAAQ;AAAA,QAAA,CAAO,EAAErD,MAAMkB,WAAW;AAAA,MAC5D;AAGA,aAAQxF,EAAE4H,KAAKC,QAAQC,UAAkBC;AACzC/H,QAAE4H,KAAKC,QAAQG,aAAa;AAAA,QAC1BC,eAAe;AAAA,QACfC,SAAS;AAAA,QACTC,WAAW;AAAA,MAAA,CACZ;AAAA,IACH;AAGA,QAAI3C,eAAexF,GAAG;AACpB,UAAI;AACF,cAAMwE,IAAI6B,OAAAA;AACV,cAAM+B,kBAAyB,CAAA;AAG/B5C,oBAAY6C,UAAU,CAAC1E,UAAe;AACpC,cACEA,iBAAiB3D,EAAEsI,UACnB3E,iBAAiB3D,EAAEuI,WACnB5E,iBAAiB3D,EAAEwI,gBACnB7E,MAAM8E,UACN9E,MAAM+E,eACN;AACAlD,wBAAYmD,YAAYhF,KAAK;AAAA,UAC/B;AAAA,QACF,CAAC;AAGD,cAAMe,UAAiB,CAAA;AACvB,cAAMkE,iBAAgBpE,uBAAGqE,gBAAcrE,uBAAGE,YAAWF,EAAEE,QAAQnE,SAAS;AAExE,YAAIqI,eAAe;AACjB,cAAI;AACF,kBAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,2CAAuB,CAAA,EAAA,KAAA,OAAA,EAAA,wBAAA;AACpC,gBAAI,CAAC3I,kBAAkB;AACrB,oBAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,+HAA8C,CAAA;AAC3D,oBAAM,QAAA,QAAA,EAAA,KAAA,MAAA,QAAO,uIAAsD,CAAA;AACnEA,iCAAmB;AAAA,YACrB;AACA,kBAAM6I,cACJ,OAAOtE,EAAEqE,eAAe,WAAWrE,EAAEqE,aAAa,CAAA;AACpD,kBAAME,eAAgB/I,EAAUgJ,mBAAmB;AAAA,cACjDC,kBAAkBH,YAAYG,oBAAoB;AAAA,cAClDC,mBAAmBJ,YAAYI,qBAAqB;AAAA,cACpDC,qBAAqBL,YAAYK,uBAAuB;AAAA,cACxDC,yBAAyBN,YAAYM;AAAAA,cACrCC,SAASP,YAAYQ,wBAAwB;AAAA,YAAA,CAC9C;AACD9E,yCAAGE,YAAHF,mBAAY+E,QAASrG,CAAAA,WAAW;AAC9B,oBAAMD,IAAIjD,EAAEkD,OAAOA,OAAO0B,QAAQ;AAClC5B,gCAAkBC,GAAGC,QAAQvB,WAAW;AACxCoH,2BAAaS,SAASvG,CAAC;AACvByB,sBAAQrC,KAAKY,CAAC;AAAA,YAChB;AACAuC,wBAAYgE,SAAST,YAAY;AAAA,UACnC,QAAQ;AACNvE,yCAAGE,YAAHF,mBAAY+E,QAASrG,CAAAA,WAAW;AAC9B,oBAAMD,IAAIjD,EAAEkD,OAAOA,OAAO0B,QAAQ,EAAEN,MAAMkB,WAAW;AACrDxC,gCAAkBC,GAAGC,QAAQvB,WAAW;AACxC+C,sBAAQrC,KAAKY,CAAC;AAAA,YAChB;AAAA,UACF;AAAA,QACF,OAAO;AACLuB,uCAAGE,YAAHF,mBAAY+E,QAASrG,CAAAA,WAAW;AAC9B,kBAAMD,IAAIjD,EAAEkD,OAAOA,OAAO0B,QAAQ,EAAEN,MAAMkB,WAAW;AACrDxC,8BAAkBC,GAAGC,QAAQvB,WAAW;AACxC+C,oBAAQrC,KAAKY,CAAC;AAAA,UAChB;AAAA,QACF;AAEA,YAAIyB,QAAQnE,SAAS,GAAG;AACtB6H,0BAAgB/F,KAAK,GAAGqC,OAAO;AAAA,QACjC;AAGA,YAAIF,uBAAGf,SAAS;AACd,gBAAMgG,WAAWnG,gBAAgBkC,aAAaxF,GAAGwE,EAAEf,SAASe,EAAEkF,cAAclF,EAAE9C,KAAK;AACnF0G,0BAAgB/F,KAAKoH,QAAQ;AAAA,QAC/B;AAGA,aAAIjF,uBAAGmF,WAAUnF,EAAEmF,OAAOpJ,SAAS,GAAG;AACpC,gBAAMqJ,WAAgC,CAAA;AAEtC,qBAAWC,YAAYrF,EAAEmF,QAAQ;AAC/B,kBAAMF,WAAWnG,gBACfkC,aACAxF,GACA6J,SAASpG,SACToG,SAASnJ,UAAS8D,uBAAGkF,eACrBG,SAASnI,UAAS8C,uBAAG9C,MACvB;AAEAkI,qBAASC,SAASC,IAAI,IAAIL;AAC1BrB,4BAAgB/F,KAAKoH,QAAQ;AAG7B,gBAAII,SAASE,YAAY,OAAO;AAC9BvE,0BAAYmD,YAAYc,QAAQ;AAAA,YAClC;AAAA,UACF;AAGA,cAAIlH,OAAOC,KAAKoH,QAAQ,EAAErJ,SAAS,GAAG;AACpCP,cAAE0H,QAAQiC,OAAO,MAAMC,UAAU;AAAA,cAAEI,WAAW;AAAA,YAAA,CAAM,EAAE1F,MAAMkB,WAAW;AAAA,UACzE;AAAA,QACF;AAGAO,wBAAgB,IAAI;AACpB,YAAIvB,uBAAGyF,SAAS;AACd,cAAI;AAEF,kBAAMC,YAAY,MAAM,QAAA,QAAA,EAAA,KAAA,MAAA;AAAA;AAAA,cAA0B;AAAA,YAAmB,CAAA;AACrE,kBAAMC,WAAW3F,EAAEyF;AAEnB,kBAAMG,eACJD,cAASC,eAATD,mBAAqBjD,IAAKmD,CAAAA,UAAU;AAAA,cAClCC,WAAWD,KAAKC;AAAAA,cAChBC,YAAY,IAAKL,UACfG,KAAKE,eAAe,YAChB,sBACAF,KAAKE,eAAe,SAClB,mBACA,kBAAkB,EACxB;AAAA,gBACAC,MAAMH,KAAKxJ,SAAS;AAAA,gBACpB4J,QAAQJ,KAAKxJ,SAAS;AAAA,gBACtB6J,OAAOL,KAAKK,SAAS;AAAA,gBACrB3J,SAASsJ,KAAKtJ,WAAW;AAAA,cAAA,CAC1B;AAAA,YAAA,QACI,CAAA;AAET,kBAAM4J,eACJR,cAASQ,eAATR,mBAAqBjD,IAAKmD,CAAAA,UAAU;AAAA,cAClCC,WAAWD,KAAKC;AAAAA,cAChBC,YAAY,IAAKL,UAAkBU,eAAe;AAAA,gBAChDC,aAAa,CAACR,KAAKS,SAAS;AAAA,gBAC5BC,UAAUV,KAAKU,YAAY;AAAA,cAAA,CAC5B;AAAA,YAAA,QACI,CAAA;AAET,kBAAMC,UAAWd,UAAkBe,aAAa;AAAA,cAC9CC,KAAKf,SAASe;AAAAA,cACdzD,aAAa0C,SAAS1C;AAAAA,cACtB2C;AAAAA,cACAO;AAAAA,cACAQ,SAAShB,SAASgB;AAAAA,cAClBC,SAASjB,SAASiB;AAAAA,YAAAA,CACnB;AAEDJ,oBAAQ1G,MAAMkB,WAAW;AAAA,UAC3B,SAASqB,GAAG;AAKV,kBAAMwE,SAASxE,aAAayE,QAAQzE,EAAE0E,UAAUrJ,OAAO2E,CAAC;AACxD,kBAAM0E,UACJ;AAEFzE,oBAAQC,KAAK,cAAcwE,SAAS1E,CAAC;AACrCd,4BAAgBwF,OAAO;AACvBrF,mDAAWsF,SAAS;AAAA,cAClBvG,MAAM;AAAA,cACNwG,cAAc,GAAGF,OAAO,KAAKF,MAAM;AAAA,cACnCK,MAAI9J,WAAM0E,cAAN1E,mBAAiB8J,OAAM;AAAA,cAC3BC,eAAe;AAAA,cACfC,IAAIC,KAAKC,IAAAA;AAAAA,YAAI;AAAA,UAEjB;AAAA,QACF;AAGA,aAAItH,uBAAGuH,cAAa3D,gBAAgB7H,SAAS,GAAG;AAC9C,gBAAMyL,QAAQhM,EAAEiM,aAAa7D,eAAe;AAC5C,gBAAM8D,SAASF,MAAMG,UAAAA;AACrB,cAAID,OAAOE,WAAW;AACpB5G,wBAAYuG,UAAUG,OAAOG,IAAI,GAAG,CAAC;AAAA,UACvC;AAAA,QACF,WAAW7H,uBAAGwC,QAAQ;AACpBxB,sBAAY8B,QAAQ9C,EAAEwC,QAAQxC,EAAEyC,QAAQzB,YAAY8G,SAAS;AAAA,QAC/D;AAAA,MACF,SAASC,KAAK;AAGZ,cAAMhB,UAAUgB,eAAejB,QAAQiB,IAAIhB,UAAU;AACrD1F,iBAAS0F,OAAO;AAChBrF,+CAAWsF,SAAS;AAAA,UAClBvG,MAAM;AAAA,UACNwG,cAAcF;AAAAA,UACdG,MAAI9J,WAAM0E,cAAN1E,mBAAiB8J,OAAM;AAAA,UAC3BC,eAAe;AAAA,UACfC,IAAIC,KAAKC,IAAAA;AAAAA,QAAI;AAAA,MAEjB;AAAA,IACF;AAAA,EACF,CAAC;AAGDU,UAAAA,UAAU,MAAM;AACd,QAAIhH,aAAa;AACfA,kBAAYiH,OAAAA;AACZjH,oBAAc;AAAA,IAChB;AAAA,EACF,CAAC;AAED,SAAAkH,IAAAA,gBACGC,kBAAAA,mBAAiB;AAAA,IAChBC,OAAO;AAAA,IAAK,IACZC,WAAQ;AAAA,aAAEtI,aAAa8B,QAAQ;AAAA,IAAC;AAAA,IAChCyG,WAAS;AAAA,IAAA,IACTC,iBAAc;AAAA,aAAEnL,MAAMmL;AAAAA,IAAc;AAAA,IAAA,IAAAC,WAAA;AAAA,UAAAC,OAAAC,IAAAA,eAAAC,OAAA,GAAAC,QAAAH,KAAAI,YAAA,CAAAC,OAAAC,KAAA,IAAAC,IAAAA,cAAAJ,MAAAK,WAAA,GAAAC,QAAAJ,MAAAG,aAAA,CAAAE,OAAAC,KAAA,IAAAJ,IAAAA,cAAAE,MAAAD,WAAA;AAAAI,iBAAAZ,MAAAP,IAAAA,gBAOjCoB,cAAI;AAAA,QAAA,IAACC,OAAI;AAAA,iBAAEnI,MAAAA;AAAAA,QAAO;AAAA,QAAA,IAAAoH,WAAA;AAAA,cAAAgB,QAAAd,IAAAA,eAAAe,MAAA;AAAAJ,cAAAA,OAAAG,OAAAtB,oBAIdwB,iBAAAA,kBAAgBC,IAAAA,WAAA;AAAA,YAAA,IACf5C,UAAO;AAAA,qBAAE,yBAAyB3F,OAAO;AAAA,YAAE;AAAA,YAC3CwI,SAAO;AAAA,UAAA,GAAA,MACHC,oBAAAA,mBAAmBhI,OAAAA,KAAY,CAAA,CAAE,CAAC,CAAA,CAAA;AAAA,iBAAA2H;AAAAA,QAAA;AAAA,MAAA,CAAA,GAAAV,OAAAC,KAAA;AAAAM,iBAAAZ,MAAAP,IAAAA,gBAI3CoB,cAAI;AAAA,QAAA,IAACC,OAAI;AAAA,iBAAE,CAACnI,MAAAA;AAAAA,QAAO;AAAA,QAAA,IAAAoH,WAAA;AAAA,iBAAA,CAAAN,IAAAA,gBAGjBoB,cAAI;AAAA,YAAA,IAACC,OAAI;AAAA,qBAAEjI,aAAAA;AAAAA,YAAc;AAAA,YAAA,IAAAkH,WAAA;AAAA,kBAAAsB,QAAApB,IAAAA,eAAAqB,OAAA,GAAAC,QAAAF,MAAAjB,YAAA,CAAAoB,OAAAC,IAAA,IAAAlB,IAAAA,cAAAgB,MAAAf,WAAA;AAAAgB,oBAAAhB;AAAAI,kBAAAA,OAAAS,OAKrBxI,cAAY2I,OAAAC,IAAA;AAAA,qBAAAJ;AAAAA,YAAA;AAAA,UAAA,CAAA,IAAA,MAAA;AAAA,gBAAAK,QAAAzB,IAAAA,eAAA0B,OAAA;AAAA,gBAAAC,QAIVtJ;AAAY,mBAAAsJ,UAAA,aAAAC,IAAAA,IAAAD,OAAAF,KAAA,IAAZpJ,eAAYoJ;AAAAI,gBAAAA,OAAAC,CAAAA,QAAA;;AAAA,kBAAAC,MAEfjJ,eACI;AAAA,gBAAEkJ,QAAQ;AAAA,gBAAQxE,OAAO;AAAA,gBAAQ,WAAW;AAAA,cAAA,IAC5C;AAAA,gBAAEwE,UAAQ7I,kBAAAA,mBAAU6I,WAAU;AAAA,gBAASxE,OAAO;AAAA,gBAAQ,WAAW;AAAA,cAAA,GAAGyE,OAEnE,gBAAgBnJ,WAAAA,IAAe,mBAAmB,EAAE;AAAEgJ,kBAAAnI,IAAAuI,IAAAA,MAAAT,OAAAM,KAAAD,IAAAnI,CAAA;AAAAsI,uBAAAH,IAAAK,KAAAC,IAAAA,UAAAX,OAAAK,IAAAK,IAAAF,IAAA;AAAA,qBAAAH;AAAAA,YAAA,GAAA;AAAA,cAAAnI,GAAA9D;AAAAA,cAAAsM,GAAAtM;AAAAA,YAAAA,CAAA;AAAA,mBAAA4L;AAAAA,UAAA,IAAA;AAAA,QAAA;AAAA,MAAA,CAAA,GAAAhB,OAAAC,KAAA;AAAAmB,UAAAA,OAAA,MAAA;;AAAAO,mBAAAA,UAAArC,MAjC1D,uHAAqH5G,kBAAAA,mBAAUkJ,cAAa,EAAE,IACnJvJ,WAAAA,IAAe,iCAAiC,EAAE,EAClD;AAAA,OAAA;AAAA,aAAAiH;AAAAA,IAAA;AAAA,EAAA,CAAA;AAqCV;;;;;"}

package/dist/components/MapRenderer.d.ts

@@ -4,7 +4,7 @@
  * v3.1.0: GeoJSON, choropleth, popups, multi-layer, PMTiles
  */
 import { Component } from 'solid-js';
-import type { UIComponent, MapComponentParams } from '../types';
+import type { UIComponent, MapComponentParams, MapPopupConfig } from '../types';
 export interface MapRendererProps {
     /**
      * UIComponent containing map params
@@ -19,6 +19,47 @@ export interface MapRendererProps {
      * @see ExpandableWrapperProps.toolbarVariant
      */
     toolbarVariant?: 'hover' | 'always-visible';
+    /**
+     * Trust marker / popup content as raw HTML (v6.10.0, audit P1.2).
+     *
+     * Leaflet renders bound tooltip/popup strings as HTML, so `marker.tooltip`,
+     * `marker.popup` and a GeoJSON `popup.template` are XSS vectors when the
+     * payload is untrusted (the default for an LLM/connector-driven public
+     * package). **Default `false`** → those are escaped as plain text, and
+     * `popup.template` is ignored in favour of the safe auto-generated popup.
+     *
+     * This is a **host-level** trust decision, deliberately NOT a payload field
+     * (a malicious payload could just set its own flag). The
+     * `<UIResourceRenderer>` path never sets it, so payload-driven maps are
+     * always text-safe. A host rendering `<MapRenderer>` directly with trusted
+     * data may set `allowHtmlPopups` to restore rich HTML popups. The
+     * auto-generated popup (`titleField` / `fields`) is safe-by-construction
+     * and unaffected either way.
+     */
+    allowHtmlPopups?: boolean;
 }
+/**
+ * Build popup HTML from a feature's properties using popup config.
+ *
+ * `allowHtml` (audit P1.2) gates the raw-HTML `popup.template`: it is honored
+ * only when the host trusts the payload. On the default (untrusted) path the
+ * template is ignored and we fall through to the auto-generated popup, whose
+ * structure is renderer-authored and whose values are always escaped — safe
+ * by construction. Even in the trusted path, substituted `{{prop}}` values
+ * are escaped (they are data, not markup).
+ */
+export declare function buildPopupContent(feature: any, popup: MapPopupConfig | undefined, allowHtml?: boolean): string | null;
+/**
+ * Resolve a marker's tooltip/popup string for binding (audit P1.2). Leaflet
+ * renders bound strings as HTML; `marker.tooltip` / `marker.popup` come from
+ * the (untrusted) payload, so they are escaped to plain text unless the host
+ * has opted into raw HTML via `allowHtmlPopups`. Pure + exported for tests.
+ */
+export declare function popupSafeText(value: string | undefined, allowHtml?: boolean): string | undefined;
+/** Bind a marker's tooltip + popup, escaping by default (see popupSafeText). */
+export declare function bindMarkerContent(m: any, marker: {
+    tooltip?: string;
+    popup?: string;
+}, allowHtml: boolean): void;
 export declare const MapRenderer: Component<MapRendererProps>;
 //# sourceMappingURL=MapRenderer.d.ts.map

package/dist/components/MapRenderer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MapRenderer.d.ts","sourceRoot":"","sources":["../../src/components/MapRenderer.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAA+C,MAAM,UAAU,CAAC;AAElF,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAMnB,MAAM,UAAU,CAAC;AAWlB,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,SAAS,CAAC,EAAE,WAAW,CAAC;IAExB;;OAEG;IACH,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAE5B;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;CAC7C;AAiLD,eAAO,MAAM,WAAW,EAAE,SAAS,CAAC,gBAAgB,CAwSnD,CAAC"}
+{"version":3,"file":"MapRenderer.d.ts","sourceRoot":"","sources":["../../src/components/MapRenderer.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAA+C,MAAM,UAAU,CAAC;AAElF,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAGlB,cAAc,EAGf,MAAM,UAAU,CAAC;AAWlB,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,SAAS,CAAC,EAAE,WAAW,CAAC;IAExB;;OAEG;IACH,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAE5B;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAAC;IAE5C;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAiED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,GAAG,EACZ,KAAK,EAAE,cAAc,GAAG,SAAS,EACjC,SAAS,UAAQ,GAChB,MAAM,GAAG,IAAI,CA+Bf;AAUD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,UAAQ,GAAG,MAAM,GAAG,SAAS,CAG9F;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAC/B,CAAC,EAAE,GAAG,EACN,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5C,SAAS,EAAE,OAAO,GACjB,IAAI,CAKN;AAsED,eAAO,MAAM,WAAW,EAAE,SAAS,CAAC,gBAAgB,CAuUnD,CAAC"}