@teleporthq/teleport-shared 0.43.67 → 0.43.69

package/dist/cjs/utils/rich-text-embeds-runtime-source.js

@@ -0,0 +1,409 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EMBED_RUNTIME_MODULE_SOURCE = void 0;
+// GENERATED from src/utils/rich-text-embeds.ts — do not edit by hand. Regenerate with
+// UPDATE_EMBED_RUNTIME=1 npx jest packages/teleport-shared/__tests__/utils/rich-text-embeds-runtime-module.ts
+// (see generateEmbedRuntimeModuleSource for why this is a string).
+/* tslint:disable:no-invalid-template-strings -- the lines are JavaScript source */
+exports.EMBED_RUNTIME_MODULE_SOURCE = [
+    '/**',
+    ' * Code embeds inside rich-text content — the shape the editor writes and the',
+    ' * page reads back. Generated from @teleporthq/teleport-shared; edit it there.',
+    ' *',
+    ' * An embed is stored inside the content HTML as a <figure class="tq-embed">.',
+    ' * Passive markup (a provider iframe) lives in the figure as real children, so',
+    ' * it renders server-side with no JavaScript. Markup that can execute — a',
+    ' * <script>, an on* handler, a javascript: URL — is base64-encoded onto the',
+    ' * element instead, and mounted at runtime inside a sandboxed iframe so it can',
+    ' * never reach this page.',
+    ' */',
+    '',
+    'export var EMBED_CLASS_NAME = "tq-embed"',
+    '',
+    'export var EMBED_FRAME_CLASS_NAME = "tq-embed-frame"',
+    '',
+    'export var EMBED_CAPTION_CLASS_NAME = "tq-embed-caption"',
+    '',
+    'export var EMBED_BLOT_NAME = "tq-embed"',
+    '',
+    'export var EMBED_ATTR = {',
+    '  "MARKER": "data-tq-embed",',
+    '  "PROVIDER": "data-tq-embed-provider",',
+    '  "URL": "data-tq-embed-url",',
+    '  "MODE": "data-tq-embed-mode",',
+    '  "CODE": "data-tq-embed-code",',
+    '  "RATIO": "data-tq-embed-ratio",',
+    '  "WIDTH": "data-tq-embed-width",',
+    '  "ALIGN": "data-tq-embed-align",',
+    '  "CAPTION": "data-tq-embed-caption",',
+    '  "SANDBOX": "data-tq-embed-sandbox",',
+    '  "ACTIVATED": "data-tq-embed-activated",',
+    '  "PREVIEW": "data-tq-embed-preview"',
+    '}',
+    '',
+    'export var EMBED_ALIGNMENTS = ["center","float-left","float-right"]',
+    '',
+    'export var CUSTOM_EMBED_PROVIDER_ID = "custom"',
+    '',
+    'export var GENERIC_EMBED_PROVIDER_ID = "iframe-url"',
+    '',
+    'export var DEFAULT_EMBED_WIDTH = 100',
+    '',
+    'export var DEFAULT_EMBED_ALIGN = "center"',
+    '',
+    'export var DEFAULT_EMBED_SANDBOX_LEVEL = "strict"',
+    '',
+    'export var WIDESCREEN_EMBED_RATIO = 56.25',
+    '',
+    'export var EMBED_CAPTION_STYLE = "margin-top:8px;font-size:0.875em;line-height:1.5;opacity:0.75;text-align:center"',
+    '',
+    'export var EMBED_PROVIDERS = [',
+    '  { id: "youtube", label: "YouTube", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.|m\\\\.)?youtube\\\\.com\\\\/watch\\\\?(?:[^#]*&)?v=([A-Za-z0-9_-]{6,})", "i"), new RegExp("^https?:\\\\/\\\\/youtu\\\\.be\\\\/([A-Za-z0-9_-]{6,})", "i"), new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?youtube\\\\.com\\\\/shorts\\\\/([A-Za-z0-9_-]{6,})", "i"), new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?youtube(?:-nocookie)?\\\\.com\\\\/embed\\\\/([A-Za-z0-9_-]{6,})", "i")], template: "<iframe src=\\"https://www.youtube.com/embed/$1\\" title=\\"YouTube video\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 },',
+    '  { id: "vimeo", label: "Vimeo", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?vimeo\\\\.com\\\\/(\\\\d+)", "i"), new RegExp("^https?:\\\\/\\\\/player\\\\.vimeo\\\\.com\\\\/video\\\\/(\\\\d+)", "i")], template: "<iframe src=\\"https://player.vimeo.com/video/$1\\" title=\\"Vimeo video\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 },',
+    '  { id: "loom", label: "Loom", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?loom\\\\.com\\\\/(?:share|embed)\\\\/([A-Za-z0-9]+)", "i")], template: "<iframe src=\\"https://www.loom.com/embed/$1\\" title=\\"Loom video\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 },',
+    '  { id: "dailymotion", label: "Dailymotion", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?dailymotion\\\\.com\\\\/video\\\\/([A-Za-z0-9]+)", "i"), new RegExp("^https?:\\\\/\\\\/dai\\\\.ly\\\\/([A-Za-z0-9]+)", "i")], template: "<iframe src=\\"https://www.dailymotion.com/embed/video/$1\\" title=\\"Dailymotion video\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 },',
+    '  { id: "spotify", label: "Spotify", patterns: [new RegExp("^https?:\\\\/\\\\/open\\\\.spotify\\\\.com\\\\/(?:embed\\\\/)?(track|album|playlist|episode|show|artist)\\\\/([A-Za-z0-9]+)", "i")], template: "<iframe src=\\"https://open.spotify.com/embed/$1/$2\\" title=\\"Spotify player\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:352px\\"></iframe>", ratio: null },',
+    '  { id: "soundcloud", label: "SoundCloud", patterns: [new RegExp("^https?:\\\\/\\\\/soundcloud\\\\.com\\\\/[^?#]+", "i")], template: "<iframe src=\\"https://w.soundcloud.com/player/?url=$E&&color=%23ff5500&auto_play=false&show_teaser=false\\" title=\\"SoundCloud player\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:166px\\"></iframe>", ratio: null },',
+    '  { id: "apple-podcasts", label: "Apple Podcasts", patterns: [new RegExp("^https?:\\\\/\\\\/podcasts\\\\.apple\\\\.com\\\\/(.+)$", "i")], template: "<iframe src=\\"https://embed.podcasts.apple.com/$1\\" title=\\"Apple Podcasts player\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:175px\\"></iframe>", ratio: null },',
+    '  { id: "twitter", label: "X (Twitter)", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?(?:twitter|x)\\\\.com\\\\/[^/]+\\\\/status\\\\/(\\\\d+)", "i")], template: "<blockquote class=\\"twitter-tweet\\"><a href=\\"$&\\"></a></blockquote><script async src=\\"https://platform.twitter.com/widgets.js\\" charset=\\"utf-8\\"></script>", ratio: null },',
+    '  { id: "instagram", label: "Instagram", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?instagram\\\\.com\\\\/(?:p|reel|tv)\\\\/([A-Za-z0-9_-]+)", "i")], template: "<blockquote class=\\"instagram-media\\" data-instgrm-permalink=\\"https://www.instagram.com/p/$1/\\" data-instgrm-version=\\"14\\"></blockquote><script async src=\\"https://www.instagram.com/embed.js\\"></script>", ratio: null },',
+    '  { id: "tiktok", label: "TikTok", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?tiktok\\\\.com\\\\/@[^/]+\\\\/video\\\\/(\\\\d+)", "i")], template: "<blockquote class=\\"tiktok-embed\\" cite=\\"$&\\" data-video-id=\\"$1\\"><section></section></blockquote><script async src=\\"https://www.tiktok.com/embed.js\\"></script>", ratio: null },',
+    '  { id: "reddit", label: "Reddit", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?reddit\\\\.com\\\\/r\\\\/[^/]+\\\\/comments\\\\/.+", "i")], template: "<blockquote class=\\"reddit-embed-bq\\"><a href=\\"$&\\"></a></blockquote><script async src=\\"https://embed.reddit.com/widgets.js\\" charset=\\"UTF-8\\"></script>", ratio: null },',
+    '  { id: "pinterest", label: "Pinterest", patterns: [new RegExp("^https?:\\\\/\\\\/(?:[a-z]{2}\\\\.)?pinterest\\\\.[a-z.]+\\\\/pin\\\\/[0-9]+", "i")], template: "<a data-pin-do=\\"embedPin\\" href=\\"$&\\"></a><script async defer src=\\"https://assets.pinterest.com/js/pinit.js\\"></script>", ratio: null },',
+    '  { id: "facebook", label: "Facebook", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.|web\\\\.)?facebook\\\\.com\\\\/.+\\\\/(?:posts|videos)\\\\/.+", "i")], template: "<iframe src=\\"https://www.facebook.com/plugins/post.php?href=$E&&show_text=true\\" title=\\"Facebook post\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:500px\\"></iframe>", ratio: null },',
+    '  { id: "github-gist", label: "GitHub Gist", patterns: [new RegExp("^https?:\\\\/\\\\/gist\\\\.github\\\\.com\\\\/([^/]+\\\\/[a-f0-9]+)", "i")], template: "<script src=\\"https://gist.github.com/$1.js\\"></script>", ratio: null },',
+    '  { id: "codepen", label: "CodePen", patterns: [new RegExp("^https?:\\\\/\\\\/codepen\\\\.io\\\\/([^/]+)\\\\/(?:pen|embed|details|full)\\\\/([A-Za-z0-9]+)", "i")], template: "<iframe src=\\"https://codepen.io/$1/embed/$2?default-tab=result\\" title=\\"CodePen\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:400px\\"></iframe>", ratio: null },',
+    '  { id: "codesandbox", label: "CodeSandbox", patterns: [new RegExp("^https?:\\\\/\\\\/codesandbox\\\\.io\\\\/(?:s|embed)\\\\/([A-Za-z0-9_-]+)", "i"), new RegExp("^https?:\\\\/\\\\/codesandbox\\\\.io\\\\/p\\\\/(?:sandbox|devbox)\\\\/([A-Za-z0-9_-]+)", "i")], template: "<iframe src=\\"https://codesandbox.io/embed/$1\\" title=\\"CodeSandbox\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:500px\\"></iframe>", ratio: null },',
+    '  { id: "jsfiddle", label: "JSFiddle", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?jsfiddle\\\\.net\\\\/((?:[^/]+\\\\/)?[A-Za-z0-9]+)\\\\/?", "i")], template: "<iframe src=\\"https://jsfiddle.net/$1/embedded/\\" title=\\"JSFiddle\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:400px\\"></iframe>", ratio: null },',
+    '  { id: "figma", label: "Figma", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?figma\\\\.com\\\\/(?:file|design|proto|board|slides)\\\\/.+", "i")], template: "<iframe src=\\"https://www.figma.com/embed?embed_host=share&url=$E&\\" title=\\"Figma\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 },',
+    '  { id: "canva", label: "Canva", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?canva\\\\.com\\\\/design\\\\/([A-Za-z0-9_-]+)\\\\/([A-Za-z0-9_-]+)\\\\/(?:view|watch)", "i")], template: "<iframe src=\\"https://www.canva.com/design/$1/$2/view?embed\\" title=\\"Canva design\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 },',
+    '  { id: "miro", label: "Miro", patterns: [new RegExp("^https?:\\\\/\\\\/miro\\\\.com\\\\/app\\\\/(?:board|live-embed)\\\\/([A-Za-z0-9_=-]+)", "i")], template: "<iframe src=\\"https://miro.com/app/live-embed/$1/\\" title=\\"Miro board\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 },',
+    '  { id: "google-maps", label: "Google Maps", patterns: [new RegExp("^https?:\\\\/\\\\/(?:www\\\\.)?google\\\\.[a-z.]+\\\\/maps\\\\/embed\\\\?(.+)$", "i")], template: "<iframe src=\\"https://www.google.com/maps/embed?$1\\" title=\\"Google Maps\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 },',
+    '  { id: "google-maps-place", label: "Google Maps", patterns: [new RegExp("^https?:\\\\/\\\\/(?:(?:www\\\\.)?google\\\\.[a-z.]+\\\\/maps|maps\\\\.app\\\\.goo\\\\.gl)\\\\/.+", "i")], template: "<iframe src=\\"https://maps.google.com/maps?q=$E&&output=embed\\" title=\\"Google Maps\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 },',
+    '  { id: "google-forms", label: "Google Forms", patterns: [new RegExp("^https?:\\\\/\\\\/docs\\\\.google\\\\.com\\\\/forms\\\\/d\\\\/(?:e\\\\/)?([A-Za-z0-9_-]+)", "i")], template: "<iframe src=\\"https://docs.google.com/forms/d/e/$1/viewform?embedded=true\\" title=\\"Google Form\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:700px\\"></iframe>", ratio: null },',
+    '  { id: "google-docs", label: "Google Docs", patterns: [new RegExp("^https?:\\\\/\\\\/docs\\\\.google\\\\.com\\\\/(document|spreadsheets|presentation)\\\\/d\\\\/([A-Za-z0-9_-]+)", "i")], template: "<iframe src=\\"https://docs.google.com/$1/d/$2/preview\\" title=\\"Google Docs\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:600px\\"></iframe>", ratio: null },',
+    '  { id: "airtable", label: "Airtable", patterns: [new RegExp("^https?:\\\\/\\\\/airtable\\\\.com\\\\/(?:embed\\\\/)?(app[A-Za-z0-9/?=&_-]+)", "i")], template: "<iframe src=\\"https://airtable.com/embed/$1\\" title=\\"Airtable\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:533px\\"></iframe>", ratio: null },',
+    '  { id: "typeform", label: "Typeform", patterns: [new RegExp("^https?:\\\\/\\\\/(?:[A-Za-z0-9-]+\\\\.)?typeform\\\\.com\\\\/to\\\\/([A-Za-z0-9]+)", "i")], template: "<iframe src=\\"https://form.typeform.com/to/$1\\" title=\\"Typeform\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:500px\\"></iframe>", ratio: null },',
+    '  { id: "calendly", label: "Calendly", patterns: [new RegExp("^https?:\\\\/\\\\/calendly\\\\.com\\\\/(.+)$", "i")], template: "<iframe src=\\"https://calendly.com/$1\\" title=\\"Calendly\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"display:block;width:100%;border:0;border-radius:inherit;height:700px\\"></iframe>", ratio: null },',
+    '  { id: "iframe-url", label: "Web page", patterns: [new RegExp("^https:\\\\/\\\\/[^\\\\s\\"\'<>]+$", "i")], template: "<iframe src=\\"$&\\" title=\\"Embedded page\\" loading=\\"lazy\\" frameborder=\\"0\\" referrerpolicy=\\"strict-origin-when-cross-origin\\" allow=\\"accelerometer; autoplay; clipboard-write; encrypted-media; fullscreen; gyroscope; picture-in-picture; web-share\\" allowfullscreen style=\\"position:absolute;top:0;left:0;width:100%;height:100%;border:0;border-radius:inherit\\"></iframe>", ratio: 56.25 }',
+    ']',
+    '',
+    'export var EMBED_SANDBOX_FLAGS_STRICT = "allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms allow-presentation"',
+    '',
+    'export var EMBED_SANDBOX_FLAGS_TRUSTED = "allow-scripts allow-popups allow-popups-to-escape-sandbox allow-forms allow-presentation allow-same-origin"',
+    '',
+    'export var EMBED_HEIGHT_MESSAGE_TYPE = "tq-embed-height"',
+    '',
+    'export var EMBED_TOKEN_PLACEHOLDER = "__TQ_EMBED_TOKEN__"',
+    '',
+    'export var EMBED_MIN_HEIGHT = 80',
+    '',
+    'export var EMBED_MAX_HEIGHT = 6000',
+    '',
+    'export var EMBED_INITIAL_HEIGHT = 320',
+    '',
+    'export var EMBED_SANDBOX_DOC_HEAD = "<!doctype html><html><head><meta charset=\\"utf-8\\"><meta name=\\"viewport\\" content=\\"width=device-width, initial-scale=1\\"><base target=\\"_blank\\"><style>html,body{margin:0;padding:0;background:transparent}img,iframe,video,blockquote{max-width:100%}</style><script>(function(){var token=\\"__TQ_EMBED_TOKEN__\\";var last=0;function report(){try{var doc=document.documentElement;var body=document.body;var height=Math.max(doc?doc.scrollHeight:0,doc?doc.offsetHeight:0,body?body.scrollHeight:0,body?body.offsetHeight:0);if(!height||height===last){return;}last=height;parent.postMessage({type:\\"tq-embed-height\\",token:token,height:height},\\"*\\");}catch(e){}}function watch(){report();if(typeof ResizeObserver===\\"function\\"&&document.documentElement){new ResizeObserver(report).observe(document.documentElement);}if(typeof MutationObserver===\\"function\\"&&document.body){new MutationObserver(report).observe(document.body,{childList:true,subtree:true,attributes:true});}var delays=[150,400,900,1800,3500];for(var i=0;i<delays.length;i++){setTimeout(report,delays[i]);}}if(document.readyState===\\"loading\\"){document.addEventListener(\\"DOMContentLoaded\\",watch);}else{watch();}window.addEventListener(\\"load\\",report);})();</script></head><body>"',
+    '',
+    'export var EMBED_SANDBOX_DOC_TAIL = "</body></html>"',
+    '',
+    'export var embedTokenCounter = 0',
+    '',
+    'export function isSafeEmbedUrl(url) {',
+    "    return /^https?:\\/\\/[^\\s\"'<>]+$/i.test((url || '').trim());",
+    '}',
+    '',
+    'export function resolveEmbedProvider(url) {',
+    "    const trimmed = (url || '').trim();",
+    '    if (!isSafeEmbedUrl(trimmed)) {',
+    '        return null;',
+    '    }',
+    '    for (const provider of EMBED_PROVIDERS) {',
+    '        for (const pattern of provider.patterns) {',
+    '            const match = trimmed.match(pattern);',
+    '            if (match) {',
+    '                return { provider, match };',
+    '            }',
+    '        }',
+    '    }',
+    '    return null;',
+    '}',
+    '',
+    'export function applyEmbedTemplate(template, match, url) {',
+    '    return template.replace(/\\$(\\$|E?(?:[1-9]|&))/g, (_token, spec) => {',
+    '        var _a;',
+    "        if (spec === '$') {",
+    "            return '$';",
+    '        }',
+    "        const encoded = spec.charAt(0) === 'E';",
+    '        const key = encoded ? spec.slice(1) : spec;',
+    "        const raw = key === '&' ? url : (_a = match[Number(key)]) !== null && _a !== void 0 ? _a : '';",
+    '        return encoded ? encodeURIComponent(raw) : raw;',
+    '    });',
+    '}',
+    '',
+    'export function buildEmbedHtmlFromUrl(url) {',
+    '    const resolved = resolveEmbedProvider(url);',
+    '    if (!resolved) {',
+    '        return null;',
+    '    }',
+    '    return {',
+    '        provider: resolved.provider,',
+    '        html: applyEmbedTemplate(resolved.provider.template, resolved.match, url.trim()),',
+    '    };',
+    '}',
+    '',
+    'export function resolveEmbedMode(html) {',
+    "    const markup = html || '';",
+    '    const executes = /<script[\\s/>]/i.test(markup) ||',
+    '        /\\son[a-z]+\\s*=/i.test(markup) ||',
+    '        /(?:href|src|action|formaction)\\s*=\\s*["\']?\\s*javascript:/i.test(markup);',
+    "    return executes ? 'sandbox' : 'inline';",
+    '}',
+    '',
+    'export function clampEmbedWidth(width) {',
+    '    if (!isFinite(width)) {',
+    '        return DEFAULT_EMBED_WIDTH;',
+    '    }',
+    '    return Math.max(10, Math.min(100, Math.round(width)));',
+    '}',
+    '',
+    'export function normalizeEmbedAlign(align) {',
+    '    return EMBED_ALIGNMENTS.indexOf(align) !== -1',
+    '        ? align',
+    '        : DEFAULT_EMBED_ALIGN;',
+    '}',
+    '',
+    'export function escapeEmbedAttribute(value) {',
+    "    return String(value !== null && value !== void 0 ? value : '')",
+    "        .replace(/&/g, '&amp;')",
+    "        .replace(/\"/g, '&quot;')",
+    "        .replace(/</g, '&lt;')",
+    "        .replace(/>/g, '&gt;');",
+    '}',
+    '',
+    'export function escapeEmbedText(value) {',
+    "    return String(value !== null && value !== void 0 ? value : '')",
+    "        .replace(/&/g, '&amp;')",
+    "        .replace(/</g, '&lt;')",
+    "        .replace(/>/g, '&gt;');",
+    '}',
+    '',
+    'export function encodeEmbedCode(code) {',
+    '    const binary = encodeURIComponent(code).replace(/%([0-9A-F]{2})/gi, (_m, hex) => String.fromCharCode(parseInt(hex, 16)));',
+    "    if (typeof btoa === 'function') {",
+    '        return btoa(binary);',
+    '    }',
+    "    if (typeof Buffer !== 'undefined') {",
+    "        return Buffer.from(binary, 'binary').toString('base64');",
+    '    }',
+    "    throw new Error('No base64 encoder available');",
+    '}',
+    '',
+    'export function decodeEmbedCode(encoded) {',
+    '    let binary;',
+    "    if (typeof atob === 'function') {",
+    '        binary = atob(encoded);',
+    '    }',
+    "    else if (typeof Buffer !== 'undefined') {",
+    "        binary = Buffer.from(encoded, 'base64').toString('binary');",
+    '    }',
+    '    else {',
+    "        throw new Error('No base64 decoder available');",
+    '    }',
+    "    let percent = '';",
+    '    for (let index = 0; index < binary.length; index += 1) {',
+    '        percent += `%${`00${binary.charCodeAt(index).toString(16)}`.slice(-2)}`;',
+    '    }',
+    '    return decodeURIComponent(percent);',
+    '}',
+    '',
+    'export function createEmbedValue(params) {',
+    '    var _a, _b, _c;',
+    "    const code = params.code || '';",
+    '    return {',
+    '        provider: params.provider || CUSTOM_EMBED_PROVIDER_ID,',
+    "        url: params.url || '',",
+    '        code,',
+    '        mode: resolveEmbedMode(code),',
+    '        ratio: (_a = params.ratio) !== null && _a !== void 0 ? _a : null,',
+    '        width: clampEmbedWidth((_b = params.width) !== null && _b !== void 0 ? _b : DEFAULT_EMBED_WIDTH),',
+    '        align: normalizeEmbedAlign((_c = params.align) !== null && _c !== void 0 ? _c : DEFAULT_EMBED_ALIGN),',
+    "        caption: params.caption || '',",
+    "        sandboxLevel: params.sandboxLevel === 'trusted' ? 'trusted' : DEFAULT_EMBED_SANDBOX_LEVEL,",
+    '    };',
+    '}',
+    '',
+    'export function embedBlockStyle(value) {',
+    '    const declarations = [',
+    "        'position:relative',",
+    '        `width:${clampEmbedWidth(value.width)}%`,',
+    "        'max-width:100%',",
+    "        'margin:16px 0',",
+    '    ];',
+    "    if (value.align === 'center') {",
+    "        declarations.push('margin-left:auto', 'margin-right:auto');",
+    '    }',
+    "    else if (value.align === 'float-left') {",
+    "        declarations.push('float:left', 'margin-right:16px', 'margin-bottom:8px');",
+    '    }',
+    "    else if (value.align === 'float-right') {",
+    "        declarations.push('float:right', 'margin-left:16px', 'margin-bottom:8px');",
+    '    }',
+    "    return declarations.join(';');",
+    '}',
+    '',
+    'export function embedFrameStyle(ratio) {',
+    '    if (ratio === null || !isFinite(ratio) || ratio <= 0) {',
+    "        return 'position:relative;width:100%';",
+    '    }',
+    '    return `position:relative;width:100%;padding-top:${ratio}%`;',
+    '}',
+    '',
+    'export function buildEmbedElementHtml(value) {',
+    '    const attrs = [',
+    '        `class="${EMBED_CLASS_NAME}"`,',
+    '        `${EMBED_ATTR.MARKER}="1"`,',
+    '        `${EMBED_ATTR.PROVIDER}="${escapeEmbedAttribute(value.provider)}"`,',
+    '        `${EMBED_ATTR.MODE}="${value.mode}"`,',
+    '        `${EMBED_ATTR.WIDTH}="${clampEmbedWidth(value.width)}"`,',
+    '        `${EMBED_ATTR.ALIGN}="${value.align}"`,',
+    '        `${EMBED_ATTR.SANDBOX}="${value.sandboxLevel}"`,',
+    '    ];',
+    '    if (value.url) {',
+    '        attrs.push(`${EMBED_ATTR.URL}="${escapeEmbedAttribute(value.url)}"`);',
+    '    }',
+    '    if (value.ratio !== null) {',
+    '        attrs.push(`${EMBED_ATTR.RATIO}="${value.ratio}"`);',
+    '    }',
+    '    if (value.caption) {',
+    '        attrs.push(`${EMBED_ATTR.CAPTION}="${escapeEmbedAttribute(value.caption)}"`);',
+    '    }',
+    "    if (value.mode === 'sandbox') {",
+    '        attrs.push(`${EMBED_ATTR.CODE}="${escapeEmbedAttribute(encodeEmbedCode(value.code))}"`);',
+    '    }',
+    '    attrs.push(\'contenteditable="false"\');',
+    '    attrs.push(`style="${embedBlockStyle(value)}"`);',
+    '    const caption = value.caption',
+    '        ? `<figcaption class="${EMBED_CAPTION_CLASS_NAME}" style="${EMBED_CAPTION_STYLE}">${escapeEmbedText(value.caption)}</figcaption>`',
+    "        : '';",
+    "    return (`<figure ${attrs.join(' ')}>` +",
+    '        `<div class="${EMBED_FRAME_CLASS_NAME}" style="${embedFrameStyle(value.ratio)}">` +',
+    '        `${buildEmbedFrameChildren(value)}</div>${caption}</figure>`);',
+    '}',
+    '',
+    'export function buildEmbedFrameChildren(value) {',
+    "    if (value.mode === 'inline') {",
+    '        return value.code;',
+    '    }',
+    '    if (!value.url) {',
+    "        return '';",
+    '    }',
+    '    return (`<noscript><a href="${escapeEmbedAttribute(value.url)}" rel="noopener noreferrer" ` +',
+    '        `target="_blank">${escapeEmbedText(value.url)}</a></noscript>`);',
+    '}',
+    '',
+    'export function findEmbedFrame(element) {',
+    '    return element.querySelector(`.${EMBED_FRAME_CLASS_NAME}`);',
+    '}',
+    '',
+    'export function readEmbedValueFromElement(element) {',
+    "    const mode = element.getAttribute(EMBED_ATTR.MODE) === 'sandbox' ? 'sandbox' : 'inline';",
+    '    const frame = findEmbedFrame(element);',
+    '    const rawRatio = element.getAttribute(EMBED_ATTR.RATIO);',
+    '    const parsedRatio = rawRatio === null ? NaN : parseFloat(rawRatio);',
+    "    let code = '';",
+    "    if (mode === 'sandbox') {",
+    '        code = readEncodedEmbedCode(element);',
+    '    }',
+    '    else if (frame) {',
+    '        code = frame.innerHTML;',
+    '    }',
+    '    return {',
+    '        provider: element.getAttribute(EMBED_ATTR.PROVIDER) || CUSTOM_EMBED_PROVIDER_ID,',
+    "        url: element.getAttribute(EMBED_ATTR.URL) || '',",
+    '        code,',
+    '        mode,',
+    '        ratio: isFinite(parsedRatio) ? parsedRatio : null,',
+    "        width: clampEmbedWidth(parseFloat(element.getAttribute(EMBED_ATTR.WIDTH) || '')),",
+    "        align: normalizeEmbedAlign(element.getAttribute(EMBED_ATTR.ALIGN) || ''),",
+    "        caption: element.getAttribute(EMBED_ATTR.CAPTION) || '',",
+    "        sandboxLevel: element.getAttribute(EMBED_ATTR.SANDBOX) === 'trusted'",
+    "            ? 'trusted'",
+    '            : DEFAULT_EMBED_SANDBOX_LEVEL,',
+    '    };',
+    '}',
+    '',
+    'export function readEncodedEmbedCode(element) {',
+    '    const encoded = element.getAttribute(EMBED_ATTR.CODE);',
+    '    if (!encoded) {',
+    "        return '';",
+    '    }',
+    '    try {',
+    '        return decodeEmbedCode(encoded);',
+    '    }',
+    '    catch (_a) {',
+    "        return '';",
+    '    }',
+    '}',
+    '',
+    'export function normalizeEmbedsForStorage(root) {',
+    '    const previews = root.querySelectorAll(`[${EMBED_ATTR.PREVIEW}]`);',
+    '    for (let index = previews.length - 1; index >= 0; index -= 1) {',
+    '        const preview = previews[index];',
+    '        if (preview.parentNode) {',
+    '            preview.parentNode.removeChild(preview);',
+    '        }',
+    '    }',
+    '    const blocks = root.querySelectorAll(`[${EMBED_ATTR.MARKER}]`);',
+    '    for (let index = 0; index < blocks.length; index += 1) {',
+    '        const block = blocks[index];',
+    '        block.removeAttribute(EMBED_ATTR.ACTIVATED);',
+    '        const frame = findEmbedFrame(block);',
+    '        if (!frame) {',
+    '            continue;',
+    '        }',
+    '        const value = readEmbedValueFromElement(block);',
+    "        if (value.mode !== 'sandbox') {",
+    '            continue;',
+    '        }',
+    '        frame.innerHTML = buildEmbedFrameChildren(value);',
+    '    }',
+    '}',
+    '',
+    'export function resolveEmbedSandboxFlags(level) {',
+    "    return level === 'trusted' ? EMBED_SANDBOX_FLAGS_TRUSTED : EMBED_SANDBOX_FLAGS_STRICT;",
+    '}',
+    '',
+    'export function buildEmbedSandboxDocument(code, token) {',
+    '    return (EMBED_SANDBOX_DOC_HEAD.replace(EMBED_TOKEN_PLACEHOLDER, token) +',
+    "        (code || '') +",
+    '        EMBED_SANDBOX_DOC_TAIL);',
+    '}',
+    '',
+    'export function parseEmbedHeightMessage(data) {',
+    "    if (!data || typeof data !== 'object') {",
+    '        return null;',
+    '    }',
+    '    const message = data;',
+    "    if (message.type !== EMBED_HEIGHT_MESSAGE_TYPE || typeof message.token !== 'string') {",
+    '        return null;',
+    '    }',
+    '    const height = Number(message.height);',
+    '    if (!isFinite(height) || height <= 0) {',
+    '        return null;',
+    '    }',
+    '    return {',
+    '        token: message.token,',
+    '        height: Math.min(Math.max(Math.round(height), EMBED_MIN_HEIGHT), EMBED_MAX_HEIGHT),',
+    '    };',
+    '}',
+    '',
+    'export function createEmbedToken() {',
+    '    embedTokenCounter += 1;',
+    '    return `tqe-${Date.now().toString(36)}-${embedTokenCounter.toString(36)}-${Math.random()',
+    '        .toString(36)',
+    '        .slice(2, 8)}`;',
+    '}',
+    '',
+].join('\n');
+//# sourceMappingURL=rich-text-embeds-runtime-source.js.map

package/dist/cjs/utils/rich-text-embeds-runtime-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rich-text-embeds-runtime-source.js","sourceRoot":"","sources":["../../../src/utils/rich-text-embeds-runtime-source.ts"],"names":[],"mappings":";;;AAAA,sFAAsF;AACtF,8GAA8G;AAC9G,mEAAmE;AACnE,mFAAmF;AACtE,QAAA,2BAA2B,GAAG;IACzC,KAAK;IACL,+EAA+E;IAC/E,gFAAgF;IAChF,IAAI;IACJ,+EAA+E;IAC/E,gFAAgF;IAChF,2EAA2E;IAC3E,6EAA6E;IAC7E,gFAAgF;IAChF,2BAA2B;IAC3B,KAAK;IACL,EAAE;IACF,0CAA0C;IAC1C,EAAE;IACF,sDAAsD;IACtD,EAAE;IACF,0DAA0D;IAC1D,EAAE;IACF,yCAAyC;IACzC,EAAE;IACF,2BAA2B;IAC3B,8BAA8B;IAC9B,yCAAyC;IACzC,+BAA+B;IAC/B,iCAAiC;IACjC,iCAAiC;IACjC,mCAAmC;IACnC,mCAAmC;IACnC,mCAAmC;IACnC,uCAAuC;IACvC,uCAAuC;IACvC,2CAA2C;IAC3C,sCAAsC;IACtC,GAAG;IACH,EAAE;IACF,qEAAqE;IACrE,EAAE;IACF,gDAAgD;IAChD,EAAE;IACF,qDAAqD;IACrD,EAAE;IACF,sCAAsC;IACtC,EAAE;IACF,2CAA2C;IAC3C,EAAE;IACF,mDAAmD;IACnD,EAAE;IACF,2CAA2C;IAC3C,EAAE;IACF,oHAAoH;IACpH,EAAE;IACF,gCAAgC;IAChC,44BAA44B;IAC54B,8oBAA8oB;IAC9oB,0kBAA0kB;IAC1kB,6qBAA6qB;IAC7qB,mnBAAmnB;IACnnB,smBAAsmB;IACtmB,kkBAAkkB;IAClkB,mWAAmW;IACnW,mZAAmZ;IACnZ,4VAA4V;IAC5V,sVAAsV;IACtV,oTAAoT;IACpT,inBAAinB;IACjnB,wOAAwO;IACxO,4lBAA4lB;IAC5lB,4qBAA4qB;IAC5qB,wkBAAwkB;IACxkB,smBAAsmB;IACtmB,goBAAgoB;IAChoB,mlBAAmlB;IACnlB,4lBAA4lB;IAC5lB,goBAAgoB;IAChoB,+mBAA+mB;IAC/mB,6mBAA6mB;IAC7mB,0jBAA0jB;IAC1jB,kkBAAkkB;IAClkB,mhBAAmhB;IACnhB,2gBAA2gB;IAC3gB,GAAG;IACH,EAAE;IACF,oIAAoI;IACpI,EAAE;IACF,uJAAuJ;IACvJ,EAAE;IACF,0DAA0D;IAC1D,EAAE;IACF,2DAA2D;IAC3D,EAAE;IACF,kCAAkC;IAClC,EAAE;IACF,oCAAoC;IACpC,EAAE;IACF,uCAAuC;IACvC,EAAE;IACF,wxCAAwxC;IACxxC,EAAE;IACF,sDAAsD;IACtD,EAAE;IACF,kCAAkC;IAClC,EAAE;IACF,uCAAuC;IACvC,qEAAqE;IACrE,GAAG;IACH,EAAE;IACF,6CAA6C;IAC7C,yCAAyC;IACzC,qCAAqC;IACrC,sBAAsB;IACtB,OAAO;IACP,+CAA+C;IAC/C,oDAAoD;IACpD,mDAAmD;IACnD,0BAA0B;IAC1B,6CAA6C;IAC7C,eAAe;IACf,WAAW;IACX,OAAO;IACP,kBAAkB;IAClB,GAAG;IACH,EAAE;IACF,4DAA4D;IAC5D,4EAA4E;IAC5E,iBAAiB;IACjB,6BAA6B;IAC7B,yBAAyB;IACzB,WAAW;IACX,iDAAiD;IACjD,qDAAqD;IACrD,wGAAwG;IACxG,yDAAyD;IACzD,SAAS;IACT,GAAG;IACH,EAAE;IACF,8CAA8C;IAC9C,iDAAiD;IACjD,sBAAsB;IACtB,sBAAsB;IACtB,OAAO;IACP,cAAc;IACd,sCAAsC;IACtC,2FAA2F;IAC3F,QAAQ;IACR,GAAG;IACH,EAAE;IACF,0CAA0C;IAC1C,gCAAgC;IAChC,wDAAwD;IACxD,6CAA6C;IAC7C,uFAAuF;IACvF,6CAA6C;IAC7C,GAAG;IACH,EAAE;IACF,0CAA0C;IAC1C,6BAA6B;IAC7B,qCAAqC;IACrC,OAAO;IACP,4DAA4D;IAC5D,GAAG;IACH,EAAE;IACF,8CAA8C;IAC9C,mDAAmD;IACnD,iBAAiB;IACjB,gCAAgC;IAChC,GAAG;IACH,EAAE;IACF,+CAA+C;IAC/C,oEAAoE;IACpE,iCAAiC;IACjC,mCAAmC;IACnC,gCAAgC;IAChC,iCAAiC;IACjC,GAAG;IACH,EAAE;IACF,0CAA0C;IAC1C,oEAAoE;IACpE,iCAAiC;IACjC,gCAAgC;IAChC,iCAAiC;IACjC,GAAG;IACH,EAAE;IACF,yCAAyC;IACzC,+HAA+H;IAC/H,uCAAuC;IACvC,8BAA8B;IAC9B,OAAO;IACP,0CAA0C;IAC1C,kEAAkE;IAClE,OAAO;IACP,qDAAqD;IACrD,GAAG;IACH,EAAE;IACF,4CAA4C;IAC5C,iBAAiB;IACjB,uCAAuC;IACvC,iCAAiC;IACjC,OAAO;IACP,+CAA+C;IAC/C,qEAAqE;IACrE,OAAO;IACP,YAAY;IACZ,yDAAyD;IACzD,OAAO;IACP,uBAAuB;IACvB,8DAA8D;IAC9D,kFAAkF;IAClF,OAAO;IACP,yCAAyC;IACzC,GAAG;IACH,EAAE;IACF,4CAA4C;IAC5C,qBAAqB;IACrB,qCAAqC;IACrC,cAAc;IACd,gEAAgE;IAChE,gCAAgC;IAChC,eAAe;IACf,uCAAuC;IACvC,2EAA2E;IAC3E,2GAA2G;IAC3G,+GAA+G;IAC/G,wCAAwC;IACxC,oGAAoG;IACpG,QAAQ;IACR,GAAG;IACH,EAAE;IACF,0CAA0C;IAC1C,4BAA4B;IAC5B,8BAA8B;IAC9B,mDAAmD;IACnD,2BAA2B;IAC3B,0BAA0B;IAC1B,QAAQ;IACR,qCAAqC;IACrC,qEAAqE;IACrE,OAAO;IACP,8CAA8C;IAC9C,oFAAoF;IACpF,OAAO;IACP,+CAA+C;IAC/C,oFAAoF;IACpF,OAAO;IACP,oCAAoC;IACpC,GAAG;IACH,EAAE;IACF,0CAA0C;IAC1C,6DAA6D;IAC7D,gDAAgD;IAChD,OAAO;IACP,kEAAkE;IAClE,GAAG;IACH,EAAE;IACF,gDAAgD;IAChD,qBAAqB;IACrB,wCAAwC;IACxC,qCAAqC;IACrC,6EAA6E;IAC7E,+CAA+C;IAC/C,kEAAkE;IAClE,iDAAiD;IACjD,0DAA0D;IAC1D,QAAQ;IACR,sBAAsB;IACtB,+EAA+E;IAC/E,OAAO;IACP,iCAAiC;IACjC,6DAA6D;IAC7D,OAAO;IACP,0BAA0B;IAC1B,uFAAuF;IACvF,OAAO;IACP,qCAAqC;IACrC,kGAAkG;IAClG,OAAO;IACP,8CAA8C;IAC9C,sDAAsD;IACtD,mCAAmC;IACnC,2IAA2I;IAC3I,eAAe;IACf,6CAA6C;IAC7C,6FAA6F;IAC7F,wEAAwE;IACxE,GAAG;IACH,EAAE;IACF,kDAAkD;IAClD,oCAAoC;IACpC,4BAA4B;IAC5B,OAAO;IACP,uBAAuB;IACvB,oBAAoB;IACpB,OAAO;IACP,mGAAmG;IACnG,0EAA0E;IAC1E,GAAG;IACH,EAAE;IACF,2CAA2C;IAC3C,iEAAiE;IACjE,GAAG;IACH,EAAE;IACF,sDAAsD;IACtD,8FAA8F;IAC9F,4CAA4C;IAC5C,8DAA8D;IAC9D,yEAAyE;IACzE,oBAAoB;IACpB,+BAA+B;IAC/B,+CAA+C;IAC/C,OAAO;IACP,uBAAuB;IACvB,iCAAiC;IACjC,OAAO;IACP,cAAc;IACd,0FAA0F;IAC1F,0DAA0D;IAC1D,eAAe;IACf,eAAe;IACf,4DAA4D;IAC5D,2FAA2F;IAC3F,mFAAmF;IACnF,kEAAkE;IAClE,8EAA8E;IAC9E,yBAAyB;IACzB,4CAA4C;IAC5C,QAAQ;IACR,GAAG;IACH,EAAE;IACF,iDAAiD;IACjD,4DAA4D;IAC5D,qBAAqB;IACrB,oBAAoB;IACpB,OAAO;IACP,WAAW;IACX,0CAA0C;IAC1C,OAAO;IACP,kBAAkB;IAClB,oBAAoB;IACpB,OAAO;IACP,GAAG;IACH,EAAE;IACF,mDAAmD;IACnD,wEAAwE;IACxE,qEAAqE;IACrE,0CAA0C;IAC1C,mCAAmC;IACnC,sDAAsD;IACtD,WAAW;IACX,OAAO;IACP,qEAAqE;IACrE,8DAA8D;IAC9D,sCAAsC;IACtC,sDAAsD;IACtD,8CAA8C;IAC9C,uBAAuB;IACvB,uBAAuB;IACvB,WAAW;IACX,yDAAyD;IACzD,yCAAyC;IACzC,uBAAuB;IACvB,WAAW;IACX,2DAA2D;IAC3D,OAAO;IACP,GAAG;IACH,EAAE;IACF,mDAAmD;IACnD,4FAA4F;IAC5F,GAAG;IACH,EAAE;IACF,0DAA0D;IAC1D,8EAA8E;IAC9E,wBAAwB;IACxB,kCAAkC;IAClC,GAAG;IACH,EAAE;IACF,iDAAiD;IACjD,8CAA8C;IAC9C,sBAAsB;IACtB,OAAO;IACP,2BAA2B;IAC3B,4FAA4F;IAC5F,sBAAsB;IACtB,OAAO;IACP,4CAA4C;IAC5C,6CAA6C;IAC7C,sBAAsB;IACtB,OAAO;IACP,cAAc;IACd,+BAA+B;IAC/B,6FAA6F;IAC7F,QAAQ;IACR,GAAG;IACH,EAAE;IACF,sCAAsC;IACtC,6BAA6B;IAC7B,8FAA8F;IAC9F,uBAAuB;IACvB,yBAAyB;IACzB,GAAG;IACH,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA"}

package/dist/cjs/utils/session-cookie-resolver.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Resolving the NextAuth session token in a generated route, WITHOUT asking
+ * `process.env.NEXTAUTH_URL` what the session cookie is called.
+ *
+ * ## ⛔ THE REPORTED DEFECT
+ *
+ * A published project showed "Failed to load dashboard data. Please refresh."
+ * on the home page, "Failed to load meeting data." on the list page and "could
+ * not fetch the templates" on a third — for a user who was signed in, on a page
+ * whose own `/api/auth/session` returned that user. The failing call was the
+ * page-load workflow's server segment, answering **401 `Unauthenticated`** from
+ * `guardWorkflowRequest`. Reloading sometimes fixed it; fanning 50 concurrent
+ * requests at the same route returned **33 × 401 and 17 × 200**, while 40
+ * concurrent `/api/auth/session` calls resolved the user 40/40.
+ *
+ * ## The mechanism
+ *
+ * next-auth v4's `getToken()` derives the cookie it reads from an env var:
+ *
+ * ```js
+ * secureCookie = process.env.NEXTAUTH_URL?.startsWith('https://') ?? !!process.env.VERCEL,
+ * cookieName   = secureCookie ? '__Secure-next-auth.session-token' : 'next-auth.session-token',
+ * ```
+ *
+ * A generated project ships `NEXTAUTH_URL=http://localhost:3000` — the build
+ * cannot know the domain it will be published to, so `pages/api/auth/[...nextauth].js`
+ * repairs `process.env.NEXTAUTH_URL` **from the incoming request** instead. That
+ * repair is process-local: it fixes the value for whichever serverless instance
+ * happened to serve an auth request, and for no other. Every other instance
+ * still holds `http://localhost:3000`, so `startsWith('https://')` is `false`
+ * (NOT `undefined` — the `??` fallback to `!!process.env.VERCEL` never runs),
+ * `getToken` looks for `next-auth.session-token`, the browser is holding
+ * `__Secure-next-auth.session-token`, nothing is found, and a signed-in user is
+ * reported as anonymous.
+ *
+ * Hence the coin-flip: it depends on whether the instance that served your
+ * request had previously served an auth request. Nothing about the session, the
+ * secret or the cookie is wrong.
+ *
+ * The same defect is why the generated middleware carries a `hasSessionCookie`
+ * fallback and a round trip to `/api/auth/session`, attributed there to an
+ * "Edge runtime quirk" — the Edge process holds that same localhost value.
+ *
+ * ## The rule
+ *
+ * ⭐ **A request must be authenticated from the REQUEST, never from an ambient
+ * env var that describes the deployment.** So this resolver reads which session
+ * cookie the caller actually sent, and tells `getToken` exactly that — falling
+ * back to the request's own protocol when the cookie header is unavailable.
+ *
+ * Emitted as plain ES5 text and inlined into each generated route: a route that
+ * carries its own copy cannot be broken by a missing sibling module or an
+ * untraced dependency, and every call site gets the identical implementation
+ * from this one definition. It lives in teleport-shared because both the
+ * workflow routes and the per-table data routes decode the session.
+ */
+/** The `__tq`-prefixed globals the emitted snippet declares. */
+export declare const SESSION_TOKEN_RESOLVER_FN = "__tqResolveSessionToken";
+/**
+ * ES5 source for the shared session-token resolver, safe to inline into any
+ * generated CommonJS route or ESM middleware.
+ *
+ * Declares:
+ *  - `__tqCookieNamesPresent(req)` — the set of cookie names on the request,
+ *    parsed properly (a substring test would see `next-auth.session-token`
+ *    inside `__Secure-next-auth.session-token` and pick the wrong one).
+ *  - `__tqRequestIsSecure(req)` — https as the REQUEST reports it.
+ *  - `__tqSessionTokenCandidates(req)` — `{cookieName, secureCookie}` pairs to try.
+ *  - `__tqResolveSessionToken(getToken, req, secret)` — the token, or null.
+ *
+ * `getToken` is passed IN rather than required here, so the same body serves a
+ * CommonJS route (lazy `require('next-auth/jwt')`) and the Edge middleware
+ * (static `import`). Pure, total, never throws, no env reads.
+ */
+export declare const generateSessionTokenResolverCode: () => string;
+/**
+ * The resolver plus a lazy `require('next-auth/jwt')`, for a CommonJS route.
+ *
+ * The require is lazy and guarded because a project generated WITHOUT
+ * authentication does not ship `next-auth`; such a project also has no session
+ * to read, so resolving to `null` there is the correct answer rather than a
+ * module-load crash.
+ */
+export declare const generateCommonJsSessionTokenResolverCode: () => string;
+//# sourceMappingURL=session-cookie-resolver.d.ts.map

package/dist/cjs/utils/session-cookie-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cookie-resolver.d.ts","sourceRoot":"","sources":["../../../src/utils/session-cookie-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,4BAA4B,CAAA;AAiBlE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,gCAAgC,QAAO,MAqLnD,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wCAAwC,QAAO,MAsB3D,CAAA"}