@syntrologie/runtime-sdk 2.8.0-canary.140 → 2.8.0-canary.141

package/CAPABILITIES.md

@@ -1208,7 +1208,7 @@ Renders a fullscreen Canvas 2D celebration effect. One action kind with a plugga
 
 | Widget ID | Purpose |
 |-----------|---------|
-| `adaptive-viz:chart` | Renders a chart given typed props (bar / line / table) or a free-form Vega-Lite spec (custom) |
+| `adaptive-viz:chart` | Renders a chart given typed props (bar / line / table) |
 
 ## Configuration Shape (per tile)
 
@@ -1217,7 +1217,7 @@ Renders a fullscreen Canvas 2D celebration effect. One action kind with a plugga
   "id": "tile-id",
   "widget": "adaptive-viz:chart",
   "props": {
-    "layout": "bar",     // or "line", "table", "custom"
+    "layout": "bar",  // or "line", "table"
     // ...layout-specific fields (see schema.ts)
   }
 }
@@ -1234,9 +1234,6 @@ Continuous line chart. Inputs: `data`, `xField`, `yField`, optional `seriesField
 ### `table`
 Tabular data display (rendered as Vega-Lite text marks in a grid). Inputs: `data`, `columns: { field, header }[]`.
 
-### `custom`
-Free-form Vega-Lite v5 spec. Inputs: `spec: VegaLiteSpec`. Constraint: data must be inline (`spec.data.values`); URL-based data sources are rejected at runtime.
-
 ## Actions
 
 None. This widget renders only; it does not emit DOM-mutation actions.
@@ -1245,10 +1242,6 @@ None. This widget renders only; it does not emit DOM-mutation actions.
 
 `--sc-color-primary`, `--sc-color-primary-hover`, `--sc-overlay-text-color`, `--sc-font-family`, `--sc-tile-background`. See `theme.ts` for the full mapping to Vega-Lite `config` properties.
 
-## Security Note
-
-The `custom` layout passes a user-supplied Vega-Lite spec through. Runtime validation in `validation.ts` rejects specs with non-inline data sources (e.g. `data.url`), but a more thorough security review of the Vega-Lite spec surface (transforms, projections, image marks) is **TODO(security)** — see `validation.ts`.
-
 
 ---