@teleporthq/teleport-shared 0.43.61 → 0.43.62

package/dist/cjs/utils/rich-text-embeds-codegen.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateEmbedRuntimeModuleSource = exports.serializeEmbedProvidersForRuntime = void 0;
+/**
+ * Code-generation helpers for the rich-text embed contract.
+ *
+ * Kept apart from `rich-text-embeds.ts` on purpose: that module is imported by
+ * the studio editor and the canvas renderer, which are BROWSER bundles, and the
+ * function registry below holds a live reference to every helper so that none
+ * of them can be tree-shaken. Only the project generator imports this file.
+ */
+var rich_text_embeds_1 = require("./rich-text-embeds");
+/**
+ * The provider registry as a JavaScript literal, so the component the Next
+ * generator writes is built from THIS array rather than a hand-copied one.
+ * Regexes are re-created from their source and flags because `JSON.stringify`
+ * flattens a `RegExp` to `{}`.
+ */
+function serializeEmbedProvidersForRuntime() {
+    var entries = rich_text_embeds_1.EMBED_PROVIDERS.map(function (provider) {
+        var patterns = provider.patterns
+            .map(function (pattern) {
+            return "new RegExp(".concat(JSON.stringify(pattern.source), ", ").concat(JSON.stringify(pattern.flags), ")");
+        })
+            .join(', ');
+        return ("{ id: ".concat(JSON.stringify(provider.id), ", label: ").concat(JSON.stringify(provider.label), ", ") +
+            "patterns: [".concat(patterns, "], template: ").concat(JSON.stringify(provider.template), ", ") +
+            "ratio: ".concat(provider.ratio === null ? 'null' : String(provider.ratio), " }"));
+    });
+    return "[\n  ".concat(entries.join(',\n  '), "\n]");
+}
+exports.serializeEmbedProvidersForRuntime = serializeEmbedProvidersForRuntime;
+/* ── The generated runtime module ───────────────────────────────────────────
+ *
+ * The exported project needs these same helpers at runtime: its rich-text
+ * editor builds embeds with them and its activator mounts them. Rather than
+ * hand-copying the logic into a code-generator template — where it would drift
+ * from this file the first time a provider is added — the module is EMITTED
+ * from the very functions above: the constants are serialized, the functions
+ * are printed with `Function.prototype.toString`, and the result is written to
+ * the generated project as `components/embed-runtime.js`.
+ *
+ * Two rules keep that safe, and `__tests__/utils/rich-text-embeds.ts` pins both:
+ *   - every emitted function may only reference other emitted functions and the
+ *     constants below, never a module-private helper or an import;
+ *   - the emitted module must parse and behave identically to this one.
+ */
+/**
+ * Every function the generated editor and activator reach — the ones they
+ * import, plus everything those call in turn. Deliberately not the whole of
+ * `rich-text-embeds`: the editor overlay helpers belong to the studio, and an
+ * export nothing calls is dead weight in every generated project.
+ */
+var RUNTIME_EXPORTS = [
+    rich_text_embeds_1.isSafeEmbedUrl,
+    rich_text_embeds_1.resolveEmbedProvider,
+    rich_text_embeds_1.applyEmbedTemplate,
+    rich_text_embeds_1.buildEmbedHtmlFromUrl,
+    rich_text_embeds_1.resolveEmbedMode,
+    rich_text_embeds_1.clampEmbedWidth,
+    rich_text_embeds_1.normalizeEmbedAlign,
+    rich_text_embeds_1.escapeEmbedAttribute,
+    rich_text_embeds_1.escapeEmbedText,
+    rich_text_embeds_1.encodeEmbedCode,
+    rich_text_embeds_1.decodeEmbedCode,
+    rich_text_embeds_1.createEmbedValue,
+    rich_text_embeds_1.embedBlockStyle,
+    rich_text_embeds_1.embedFrameStyle,
+    rich_text_embeds_1.buildEmbedElementHtml,
+    rich_text_embeds_1.buildEmbedFrameChildren,
+    rich_text_embeds_1.findEmbedFrame,
+    rich_text_embeds_1.readEmbedValueFromElement,
+    rich_text_embeds_1.readEncodedEmbedCode,
+    rich_text_embeds_1.normalizeEmbedsForStorage,
+    rich_text_embeds_1.resolveEmbedSandboxFlags,
+    rich_text_embeds_1.buildEmbedSandboxDocument,
+    rich_text_embeds_1.parseEmbedHeightMessage,
+    rich_text_embeds_1.createEmbedToken,
+];
+var runtimeConstant = function (name, literal) { return ({ name: name, literal: literal }); };
+/**
+ * TypeScript's CommonJS emit rewrites every reference to an exported CONSTANT
+ * as `exports.NAME` (exported functions keep their bare names, which is why
+ * they can call each other). The generator runs against that CommonJS build, so
+ * printed function bodies arrive carrying `exports.` prefixes that mean nothing
+ * in the emitted module — where each constant is re-declared as a plain
+ * top-level binding of the same name. Rewriting them back is therefore exact,
+ * not a heuristic: only names this module emits are rewritten, and
+ * `generateEmbedRuntimeModuleSource` asserts nothing module-scoped is left.
+ */
+var bindRuntimeConstantReferences = function (source, names) {
+    return names.reduce(function (acc, name) { return acc.replace(new RegExp("\\bexports\\.".concat(name, "\\b"), 'g'), name); }, source);
+};
+function generateEmbedRuntimeModuleSource() {
+    var constants = [
+        runtimeConstant('EMBED_CLASS_NAME', JSON.stringify(rich_text_embeds_1.EMBED_CLASS_NAME)),
+        runtimeConstant('EMBED_FRAME_CLASS_NAME', JSON.stringify(rich_text_embeds_1.EMBED_FRAME_CLASS_NAME)),
+        runtimeConstant('EMBED_CAPTION_CLASS_NAME', JSON.stringify(rich_text_embeds_1.EMBED_CAPTION_CLASS_NAME)),
+        runtimeConstant('EMBED_BLOT_NAME', JSON.stringify(rich_text_embeds_1.EMBED_BLOT_NAME)),
+        runtimeConstant('EMBED_ATTR', JSON.stringify(rich_text_embeds_1.EMBED_ATTR, null, 2)),
+        runtimeConstant('EMBED_ALIGNMENTS', JSON.stringify(rich_text_embeds_1.EMBED_ALIGNMENTS)),
+        runtimeConstant('CUSTOM_EMBED_PROVIDER_ID', JSON.stringify(rich_text_embeds_1.CUSTOM_EMBED_PROVIDER_ID)),
+        runtimeConstant('GENERIC_EMBED_PROVIDER_ID', JSON.stringify(rich_text_embeds_1.GENERIC_EMBED_PROVIDER_ID)),
+        runtimeConstant('DEFAULT_EMBED_WIDTH', String(rich_text_embeds_1.DEFAULT_EMBED_WIDTH)),
+        runtimeConstant('DEFAULT_EMBED_ALIGN', JSON.stringify(rich_text_embeds_1.DEFAULT_EMBED_ALIGN)),
+        runtimeConstant('DEFAULT_EMBED_SANDBOX_LEVEL', JSON.stringify(rich_text_embeds_1.DEFAULT_EMBED_SANDBOX_LEVEL)),
+        runtimeConstant('WIDESCREEN_EMBED_RATIO', String(rich_text_embeds_1.WIDESCREEN_EMBED_RATIO)),
+        runtimeConstant('EMBED_CAPTION_STYLE', JSON.stringify(rich_text_embeds_1.EMBED_CAPTION_STYLE)),
+        runtimeConstant('EMBED_PROVIDERS', serializeEmbedProvidersForRuntime()),
+        runtimeConstant('EMBED_SANDBOX_FLAGS_STRICT', JSON.stringify(rich_text_embeds_1.EMBED_SANDBOX_FLAGS_STRICT)),
+        runtimeConstant('EMBED_SANDBOX_FLAGS_TRUSTED', JSON.stringify(rich_text_embeds_1.EMBED_SANDBOX_FLAGS_TRUSTED)),
+        runtimeConstant('EMBED_HEIGHT_MESSAGE_TYPE', JSON.stringify(rich_text_embeds_1.EMBED_HEIGHT_MESSAGE_TYPE)),
+        runtimeConstant('EMBED_TOKEN_PLACEHOLDER', JSON.stringify(rich_text_embeds_1.EMBED_TOKEN_PLACEHOLDER)),
+        runtimeConstant('EMBED_MIN_HEIGHT', String(rich_text_embeds_1.EMBED_MIN_HEIGHT)),
+        runtimeConstant('EMBED_MAX_HEIGHT', String(rich_text_embeds_1.EMBED_MAX_HEIGHT)),
+        runtimeConstant('EMBED_INITIAL_HEIGHT', String(rich_text_embeds_1.EMBED_INITIAL_HEIGHT)),
+        runtimeConstant('EMBED_SANDBOX_DOC_HEAD', JSON.stringify(rich_text_embeds_1.EMBED_SANDBOX_DOC_HEAD)),
+        runtimeConstant('EMBED_SANDBOX_DOC_TAIL', JSON.stringify(rich_text_embeds_1.EMBED_SANDBOX_DOC_TAIL)),
+        // `createEmbedToken` closes over this counter.
+        runtimeConstant('embedTokenCounter', '0'),
+    ];
+    var names = constants.map(function (entry) { return entry.name; });
+    var declarations = constants.map(function (entry) { return "export var ".concat(entry.name, " = ").concat(entry.literal); });
+    var functions = RUNTIME_EXPORTS.map(function (fn) { return "export ".concat(bindRuntimeConstantReferences(fn.toString(), names)); });
+    var source = "".concat(RUNTIME_MODULE_HEADER, "\n").concat(declarations.join('\n\n'), "\n\n").concat(functions.join('\n\n'), "\n");
+    // An `exports.` reference that survived means a function reached for a
+    // constant left off the list above. That crashes every generated project at
+    // runtime, so it fails here instead. (Import leakage is covered by the
+    // emitted module being evaluated in this package's tests — this module has
+    // no imports, and must not gain any.)
+    var leaked = source.match(/\bexports\.[A-Za-z_$][\w$]*/g);
+    if (leaked) {
+        throw new Error("Embed runtime module cannot be emitted: unresolved module references ".concat(leaked.join(', ')));
+    }
+    return source;
+}
+exports.generateEmbedRuntimeModuleSource = generateEmbedRuntimeModuleSource;
+var RUNTIME_MODULE_HEADER = "/**\n * Code embeds inside rich-text content \u2014 the shape the editor writes and the\n * page reads back. Generated from @teleporthq/teleport-shared; edit it there.\n *\n * An embed is stored inside the content HTML as a <figure class=\"tq-embed\">.\n * Passive markup (a provider iframe) lives in the figure as real children, so\n * it renders server-side with no JavaScript. Markup that can execute \u2014 a\n * <script>, an on* handler, a javascript: URL \u2014 is base64-encoded onto the\n * element instead, and mounted at runtime inside a sandboxed iframe so it can\n * never reach this page.\n */\n";
+//# sourceMappingURL=rich-text-embeds-codegen.js.map

package/dist/cjs/utils/rich-text-embeds-codegen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rich-text-embeds-codegen.js","sourceRoot":"","sources":["../../../src/utils/rich-text-embeds-codegen.ts"],"names":[],"mappings":";;;AAAA;;;;;;;GAOG;AACH,uDAgD2B;AAE3B;;;;;GAKG;AACH,SAAgB,iCAAiC;IAC/C,IAAM,OAAO,GAAG,kCAAe,CAAC,GAAG,CAAC,UAAC,QAAQ;QAC3C,IAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ;aAC/B,GAAG,CACF,UAAC,OAAO;YACN,OAAA,qBAAc,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,eAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,MAAG;QAAjF,CAAiF,CACpF;aACA,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,OAAO,CACL,gBAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,sBAAY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAI;YAClF,qBAAc,QAAQ,0BAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAI;YAC3E,iBAAU,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAI,CACxE,CAAA;IACH,CAAC,CAAC,CAAA;IACF,OAAO,eAAQ,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAK,CAAA;AAC3C,CAAC;AAfD,8EAeC;AAED;;;;;;;;;;;;;;GAcG;AAEH;;;;;GAKG;AACH,IAAM,eAAe,GAAyC;IAC5D,iCAAc;IACd,uCAAoB;IACpB,qCAAkB;IAClB,wCAAqB;IACrB,mCAAgB;IAChB,kCAAe;IACf,sCAAmB;IACnB,uCAAoB;IACpB,kCAAe;IACf,kCAAe;IACf,kCAAe;IACf,mCAAgB;IAChB,kCAAe;IACf,kCAAe;IACf,wCAAqB;IACrB,0CAAuB;IACvB,iCAAc;IACd,4CAAyB;IACzB,uCAAoB;IACpB,4CAAyB;IACzB,2CAAwB;IACxB,4CAAyB;IACzB,0CAAuB;IACvB,mCAAgB;CACjB,CAAA;AAOD,IAAM,eAAe,GAAG,UAAC,IAAY,EAAE,OAAe,IAAsB,OAAA,CAAC,EAAE,IAAI,MAAA,EAAE,OAAO,SAAA,EAAE,CAAC,EAAnB,CAAmB,CAAA;AAE/F;;;;;;;;;GASG;AACH,IAAM,6BAA6B,GAAG,UAAC,MAAc,EAAE,KAAe;IACpE,OAAA,KAAK,CAAC,MAAM,CAAC,UAAC,GAAG,EAAE,IAAI,IAAK,OAAA,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,uBAAgB,IAAI,QAAK,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,EAA7D,CAA6D,EAAE,MAAM,CAAC;AAAlG,CAAkG,CAAA;AAEpG,SAAgB,gCAAgC;IAC9C,IAAM,SAAS,GAAsB;QACnC,eAAe,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,mCAAgB,CAAC,CAAC;QACrE,eAAe,CAAC,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC,yCAAsB,CAAC,CAAC;QACjF,eAAe,CAAC,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,2CAAwB,CAAC,CAAC;QACrF,eAAe,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,kCAAe,CAAC,CAAC;QACnE,eAAe,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,6BAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClE,eAAe,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,mCAAgB,CAAC,CAAC;QACrE,eAAe,CAAC,0BAA0B,EAAE,IAAI,CAAC,SAAS,CAAC,2CAAwB,CAAC,CAAC;QACrF,eAAe,CAAC,2BAA2B,EAAE,IAAI,CAAC,SAAS,CAAC,4CAAyB,CAAC,CAAC;QACvF,eAAe,CAAC,qBAAqB,EAAE,MAAM,CAAC,sCAAmB,CAAC,CAAC;QACnE,eAAe,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,sCAAmB,CAAC,CAAC;QAC3E,eAAe,CAAC,6BAA6B,EAAE,IAAI,CAAC,SAAS,CAAC,8CAA2B,CAAC,CAAC;QAC3F,eAAe,CAAC,wBAAwB,EAAE,MAAM,CAAC,yCAAsB,CAAC,CAAC;QACzE,eAAe,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,sCAAmB,CAAC,CAAC;QAC3E,eAAe,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,CAAC;QACvE,eAAe,CAAC,4BAA4B,EAAE,IAAI,CAAC,SAAS,CAAC,6CAA0B,CAAC,CAAC;QACzF,eAAe,CAAC,6BAA6B,EAAE,IAAI,CAAC,SAAS,CAAC,8CAA2B,CAAC,CAAC;QAC3F,eAAe,CAAC,2BAA2B,EAAE,IAAI,CAAC,SAAS,CAAC,4CAAyB,CAAC,CAAC;QACvF,eAAe,CAAC,yBAAyB,EAAE,IAAI,CAAC,SAAS,CAAC,0CAAuB,CAAC,CAAC;QACnF,eAAe,CAAC,kBAAkB,EAAE,MAAM,CAAC,mCAAgB,CAAC,CAAC;QAC7D,eAAe,CAAC,kBAAkB,EAAE,MAAM,CAAC,mCAAgB,CAAC,CAAC;QAC7D,eAAe,CAAC,sBAAsB,EAAE,MAAM,CAAC,uCAAoB,CAAC,CAAC;QACrE,eAAe,CAAC,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC,yCAAsB,CAAC,CAAC;QACjF,eAAe,CAAC,wBAAwB,EAAE,IAAI,CAAC,SAAS,CAAC,yCAAsB,CAAC,CAAC;QACjF,+CAA+C;QAC/C,eAAe,CAAC,mBAAmB,EAAE,GAAG,CAAC;KAC1C,CAAA;IAED,IAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,UAAC,KAAK,IAAK,OAAA,KAAK,CAAC,IAAI,EAAV,CAAU,CAAC,CAAA;IAClD,IAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,UAAC,KAAK,IAAK,OAAA,qBAAc,KAAK,CAAC,IAAI,gBAAM,KAAK,CAAC,OAAO,CAAE,EAA7C,CAA6C,CAAC,CAAA;IAC5F,IAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CACnC,UAAC,EAAE,IAAK,OAAA,iBAAU,6BAA6B,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAE,EAA/D,CAA+D,CACxE,CAAA;IAED,IAAM,MAAM,GAAG,UAAG,qBAAqB,eAAK,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAO,SAAS,CAAC,IAAI,CACxF,MAAM,CACP,OAAI,CAAA;IAEL,uEAAuE;IACvE,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,sCAAsC;IACtC,IAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAC3D,IAAI,MAAM,EAAE;QACV,MAAM,IAAI,KAAK,CACb,+EAAwE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAE,CAC5F,CAAA;KACF;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AApDD,4EAoDC;AAED,IAAM,qBAAqB,GAAG,kmBAW7B,CAAA"}

package/dist/cjs/utils/rich-text-embeds.d.ts

@@ -0,0 +1,251 @@
+/**
+ * The "code embed" contract for rich-text CONTENT — the blog post body, and any
+ * other column authored through a rich-text editor.
+ *
+ * A code embed is a block a post author drops into the body to pull in content
+ * from another site (a video, a social post, a design frame, a form, or a raw
+ * snippet they pasted). It is stored INSIDE the content HTML, so the same shape
+ * has to be produced by the studio's Quill editor, produced by the generated
+ * admin panel's Quill editor, previewed by the studio canvas and rendered by
+ * the exported Next.js app. This module is that single shape.
+ *
+ * Two rendering modes, decided by one rule (`resolveEmbedMode`):
+ *
+ *  - `inline`  — the markup is provably passive (no `<script>`, no `on*`
+ *                handler, no `javascript:` URL). It is stored as the element's
+ *                own children, so it renders server-side, needs no JavaScript
+ *                and is crawlable. Most provider embeds are a bare `<iframe>`
+ *                and land here.
+ *  - `sandbox` — anything else. The markup is base64-encoded into
+ *                `data-tq-embed-code` and the runtime materializes it inside a
+ *                sandboxed `srcdoc` iframe, so author-supplied JavaScript can
+ *                never touch the hosting page. The children hold only a
+ *                `<noscript>` link fallback.
+ *
+ * The provider registry is deliberately DECLARATIVE — patterns plus a
+ * replacement template, never functions — so `rich-text-embeds-codegen` can
+ * serialize it verbatim into the module the generated project gets, and the
+ * editor and the published site can never drift.
+ */
+export type EmbedAlign = 'center' | 'float-left' | 'float-right';
+export type EmbedMode = 'inline' | 'sandbox';
+/**
+ * `strict` (the default) omits `allow-same-origin`, so the embed runs in an
+ * opaque origin and cannot reach the host page's storage or DOM. `trusted` adds
+ * it back for the widgets that refuse to render without storage access — an
+ * explicit, per-embed opt-in the author has to make.
+ */
+export type EmbedSandboxLevel = 'strict' | 'trusted';
+export interface EmbedValue {
+    /** Registry id, or `custom` when the author pasted the markup themselves. */
+    provider: string;
+    /** The source URL, when there was one. Lets the editor re-open the Link tab. */
+    url: string;
+    /** The embed markup itself. */
+    code: string;
+    mode: EmbedMode;
+    /** Responsive box height as a padding-top percentage; `null` = intrinsic. */
+    ratio: number | null;
+    /** Block width as a percentage of the content column, 10-100. */
+    width: number;
+    align: EmbedAlign;
+    caption: string;
+    sandboxLevel: EmbedSandboxLevel;
+}
+export declare const EMBED_CLASS_NAME = "tq-embed";
+export declare const EMBED_FRAME_CLASS_NAME = "tq-embed-frame";
+export declare const EMBED_CAPTION_CLASS_NAME = "tq-embed-caption";
+/** The Quill blot name, shared by the studio editor and the generated one. */
+export declare const EMBED_BLOT_NAME = "tq-embed";
+export declare const EMBED_ATTR: {
+    readonly MARKER: "data-tq-embed";
+    readonly PROVIDER: "data-tq-embed-provider";
+    readonly URL: "data-tq-embed-url";
+    readonly MODE: "data-tq-embed-mode";
+    readonly CODE: "data-tq-embed-code";
+    readonly RATIO: "data-tq-embed-ratio";
+    readonly WIDTH: "data-tq-embed-width";
+    readonly ALIGN: "data-tq-embed-align";
+    readonly CAPTION: "data-tq-embed-caption";
+    readonly SANDBOX: "data-tq-embed-sandbox";
+    /** Written by a runtime once a sandbox embed has been mounted. */
+    readonly ACTIVATED: "data-tq-embed-activated";
+    /**
+     * Marks an element an EDITOR added purely to preview the embed. Editors read
+     * their value back out of the live DOM, so a preview must be recognizable in
+     * order to be stripped again — see `normalizeEmbedsForStorage`.
+     */
+    readonly PREVIEW: "data-tq-embed-preview";
+};
+export declare const EMBED_ALIGNMENTS: EmbedAlign[];
+export declare const CUSTOM_EMBED_PROVIDER_ID = "custom";
+export declare const GENERIC_EMBED_PROVIDER_ID = "iframe-url";
+export declare const DEFAULT_EMBED_WIDTH = 100;
+export declare const DEFAULT_EMBED_ALIGN: EmbedAlign;
+export declare const DEFAULT_EMBED_SANDBOX_LEVEL: EmbedSandboxLevel;
+/** 16:9, as a padding-top percentage. */
+export declare const WIDESCREEN_EMBED_RATIO = 56.25;
+export interface EmbedProviderDefinition {
+    id: string;
+    label: string;
+    /**
+     * Alternative spellings of the same URL. Every pattern of one provider must
+     * expose the same capture groups, because `template` indexes them by number.
+     */
+    patterns: RegExp[];
+    /**
+     * The markup, with `$1`-`$9` replaced by the capture groups and `$&` by the
+     * whole URL. Prefix the token with `E` (`$E1`, `$E&`) to URL-encode it.
+     * A literal dollar is written `$$`.
+     */
+    template: string;
+    /**
+     * When set, the frame becomes a responsive padding-top box of this
+     * percentage and the template's iframe is expected to fill it absolutely.
+     * `null` means the template carries its own height.
+     */
+    ratio: number | null;
+}
+/**
+ * Ordered most-specific first: `resolveEmbedProvider` returns the first match,
+ * and the generic `iframe-url` fallback is deliberately last.
+ */
+export declare const EMBED_PROVIDERS: EmbedProviderDefinition[];
+export interface EmbedProviderMatch {
+    provider: EmbedProviderDefinition;
+    match: RegExpMatchArray;
+}
+/** `javascript:`, `data:` and protocol-relative URLs never become an embed. */
+export declare function isSafeEmbedUrl(url: string): boolean;
+/** How an embed names itself in the editor: the provider, or "Custom code". */
+export declare function embedProviderLabel(providerId: string): string;
+export declare function resolveEmbedProvider(url: string): EmbedProviderMatch | null;
+/**
+ * Substitutes `$1`-`$9` / `$E1`-`$E9` / `$&` / `$E&` in a provider template.
+ * Written by hand rather than through `String.replace` so the replacement
+ * patterns `String.replace` reserves (`$'`, "$`", `$<name>`) stay literal.
+ */
+export declare function applyEmbedTemplate(template: string, match: RegExpMatchArray, url: string): string;
+/** The embed markup for a pasted URL, or `null` when nothing recognizes it. */
+export declare function buildEmbedHtmlFromUrl(url: string): {
+    provider: EmbedProviderDefinition;
+    html: string;
+} | null;
+/**
+ * Markup that can execute anything — a `<script>`, an inline `on*` handler or a
+ * `javascript:` URL — is quarantined in a sandboxed iframe. Everything else is
+ * passive and can be rendered straight into the page.
+ */
+export declare function resolveEmbedMode(html: string): EmbedMode;
+export declare function clampEmbedWidth(width: number): number;
+export declare function normalizeEmbedAlign(align: string): EmbedAlign;
+export declare function escapeEmbedAttribute(value: string): string;
+export declare function escapeEmbedText(value: string): string;
+/**
+ * UTF-8 safe base64, working in both the browser (`btoa`) and Node (`Buffer`).
+ * The intermediate `%xx` round-trip is what makes non-ASCII captions and
+ * markup survive — `btoa` alone throws on anything above U+00FF.
+ */
+export declare function encodeEmbedCode(code: string): string;
+export declare function decodeEmbedCode(encoded: string): string;
+export declare function createEmbedValue(params: {
+    code: string;
+    provider?: string;
+    url?: string;
+    ratio?: number | null;
+    width?: number;
+    align?: string;
+    caption?: string;
+    sandboxLevel?: EmbedSandboxLevel;
+}): EmbedValue;
+/**
+ * The outer block's own layout — width, float and the margins each align needs.
+ *
+ * `position:relative` is deliberate: an editor overlays a click catcher on the
+ * block (an embed's own iframe swallows the click that should select it), and
+ * that overlay needs the block as its positioning context.
+ */
+export declare function embedBlockStyle(value: Pick<EmbedValue, 'width' | 'align'>): string;
+/**
+ * The frame is what holds the embed itself. With a `ratio` it becomes the
+ * responsive padding-top box the provider templates fill absolutely; without
+ * one the template carries its own height.
+ */
+export declare function embedFrameStyle(ratio: number | null): string;
+export declare const EMBED_CAPTION_STYLE = "margin-top:8px;font-size:0.875em;line-height:1.5;opacity:0.75;text-align:center";
+/**
+ * The stored markup for one embed. This is the exact string both editors write
+ * into the content column and both runtimes read back.
+ */
+export declare function buildEmbedElementHtml(value: EmbedValue): string;
+/**
+ * `inline` keeps the markup as real children so it renders with no JavaScript.
+ * `sandbox` keeps only a `<noscript>` link — the markup itself lives, encoded,
+ * on `data-tq-embed-code` and the runtime mounts it in a sandboxed iframe.
+ */
+export declare function buildEmbedFrameChildren(value: EmbedValue): string;
+export declare function findEmbedFrame(element: Element): Element | null;
+export declare function readEmbedValueFromElement(element: Element): EmbedValue;
+/**
+ * A corrupted `data-tq-embed-code` (truncated by an export round-trip, mangled
+ * by a content rewrite) must degrade to "render nothing", never to a thrown
+ * exception inside a render pass.
+ */
+export declare function readEncodedEmbedCode(element: Element): string;
+export declare function applyEmbedElementLayout(element: Element, updates: {
+    width?: number;
+    align?: string;
+}): void;
+/**
+ * Adds, updates or removes the caption element in place. The caption lives both
+ * as an attribute (so it survives a sandbox re-render) and as visible text.
+ */
+export declare function applyEmbedElementCaption(element: Element, caption: string): void;
+/**
+ * `allow-same-origin` is deliberately absent: combined with `allow-scripts` it
+ * lets a frame reach into the host page and even remove its own sandbox, which
+ * is the whole thing this mode exists to prevent.
+ */
+export declare const EMBED_SANDBOX_FLAGS_STRICT = "allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms allow-presentation";
+/** The opt-in for widgets that refuse to render without storage access. */
+export declare const EMBED_SANDBOX_FLAGS_TRUSTED: string;
+export declare function resolveEmbedSandboxFlags(level: EmbedSandboxLevel): string;
+export declare const EMBED_HEIGHT_MESSAGE_TYPE = "tq-embed-height";
+export declare const EMBED_TOKEN_PLACEHOLDER = "__TQ_EMBED_TOKEN__";
+export declare const EMBED_MIN_HEIGHT = 80;
+export declare const EMBED_MAX_HEIGHT = 6000;
+/** Until the frame reports back, this is what it occupies. */
+export declare const EMBED_INITIAL_HEIGHT = 320;
+export declare const EMBED_SANDBOX_DOC_HEAD: string;
+export declare const EMBED_SANDBOX_DOC_TAIL = "</body></html>";
+/**
+ * The document a sandboxed embed is given. Assign it to `iframe.srcdoc` as a
+ * property — writing it into the attribute would need HTML escaping.
+ */
+export declare function buildEmbedSandboxDocument(code: string, token: string): string;
+/**
+ * A sandboxed frame has an opaque origin, so `event.origin` is `"null"` and
+ * cannot identify it. The per-frame token baked into its document is the guard
+ * instead: a message is only ever matched against tokens this page minted.
+ */
+export declare function parseEmbedHeightMessage(data: unknown): {
+    token: string;
+    height: number;
+} | null;
+export declare function createEmbedToken(): string;
+/**
+ * Restores every embed inside `root` to its canonical STORED form, in place.
+ *
+ * An editor reads its value back out of the live DOM (Quill hands back
+ * `root.innerHTML`), and by then the DOM carries things the content column must
+ * never keep: the preview an editor mounted next to a sandboxed embed, and the
+ * marker a runtime writes once it has handled a block. The editor normalizes a
+ * detached CLONE of its root through this before emitting a value, so what is
+ * stored is exactly what `buildEmbedElementHtml` would have produced — whatever
+ * the preview did to the live DOM.
+ *
+ * The frame restore is a self-heal for the other mounting strategy: the canvas
+ * and the published page mount INTO the frame, because they never read back.
+ */
+export declare function normalizeEmbedsForStorage(root: Element): void;
+//# sourceMappingURL=rich-text-embeds.d.ts.map

package/dist/cjs/utils/rich-text-embeds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rich-text-embeds.d.ts","sourceRoot":"","sources":["../../../src/utils/rich-text-embeds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,YAAY,GAAG,aAAa,CAAA;AAChE,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAA;AAC5C;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEpD,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAA;IACX,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,SAAS,CAAA;IACf,6EAA6E;IAC7E,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,UAAU,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,iBAAiB,CAAA;CAChC;AAED,eAAO,MAAM,gBAAgB,aAAa,CAAA;AAC1C,eAAO,MAAM,sBAAsB,mBAAmB,CAAA;AACtD,eAAO,MAAM,wBAAwB,qBAAqB,CAAA;AAE1D,8EAA8E;AAC9E,eAAO,MAAM,eAAe,aAAa,CAAA;AAEzC,eAAO,MAAM,UAAU;;;;;;;;;;;IAWrB,kEAAkE;;IAElE;;;;OAIG;;CAEK,CAAA;AAEV,eAAO,MAAM,gBAAgB,EAAE,UAAU,EAA4C,CAAA;AAErF,eAAO,MAAM,wBAAwB,WAAW,CAAA;AAChD,eAAO,MAAM,yBAAyB,eAAe,CAAA;AAErD,eAAO,MAAM,mBAAmB,MAAM,CAAA;AACtC,eAAO,MAAM,mBAAmB,EAAE,UAAqB,CAAA;AACvD,eAAO,MAAM,2BAA2B,EAAE,iBAA4B,CAAA;AACtE,yCAAyC;AACzC,eAAO,MAAM,sBAAsB,QAAQ,CAAA;AAE3C,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb;;;OAGG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAqBD;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,uBAAuB,EA6SpD,CAAA;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,uBAAuB,CAAA;IACjC,KAAK,EAAE,gBAAgB,CAAA;CACxB;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAG7D;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAe3E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAUjG;AAED,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAClD,QAAQ,EAAE,uBAAuB,CAAA;IACjC,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,IAAI,CASP;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAOxD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAI7D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM1D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKrD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWpD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAcvD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,iBAAiB,CAAA;CACjC,GAAG,UAAU,CAab;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,MAAM,CAelF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAK5D;AAED,eAAO,MAAM,mBAAmB,oFACmD,CAAA;AAEnF;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAoC/D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAWjE;AASD,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAE/D;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,UAAU,CA2BtE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAU7D;AAOD,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,IAAI,CAcN;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAoBhF;AAaD;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,6FACqD,CAAA;AAE5F,2EAA2E;AAC3E,eAAO,MAAM,2BAA2B,QAAoD,CAAA;AAE5F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAEzE;AAED,eAAO,MAAM,yBAAyB,oBAAoB,CAAA;AAC1D,eAAO,MAAM,uBAAuB,uBAAuB,CAAA;AAC3D,eAAO,MAAM,gBAAgB,KAAK,CAAA;AAClC,eAAO,MAAM,gBAAgB,OAAO,CAAA;AACpC,8DAA8D;AAC9D,eAAO,MAAM,oBAAoB,MAAM,CAAA;AAEvC,eAAO,MAAM,sBAAsB,QA+BJ,CAAA;AAE/B,eAAO,MAAM,sBAAsB,mBAAmB,CAAA;AAEtD;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAM7E;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAgB/F;AAID,wBAAgB,gBAAgB,IAAI,MAAM,CAKzC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAwB7D"}