@ulearning/ai-generative-frame 0.0.0-stage → 1.0.0-next.0

package/dist/bootstrap.js

@@ -0,0 +1,78 @@
+import { DEFAULT_LIGHT_TOKENS, themeVariables } from "./theme.js";
+import { buildCsp } from "./csp.js";
+import "./runtime/generated.js";
+// src/bootstrap.ts
+const escapeAttribute = (value) => value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;");
+const escapeScript = (value) => value.replace(/<\/(script)/gi, "<\\/$1");
+const escapeStyle = (value) => value.replace(/<\/(style)/gi, "<\\/$1");
+const SAFE_VARIABLE = /^--[\w-]+$/;
+const SAFE_VALUE = /^[^;{}<>]*$/;
+const rootDeclarations = (variables) => Object.entries(variables).filter(([name, value]) => SAFE_VARIABLE.test(name) && SAFE_VALUE.test(value)).map(([name, value]) => `${name}:${value};`).join("");
+/**
+* Base styles: transparent page, host typography, and themed form controls,
+* so plain markup already matches the host before any widget CSS loads.
+*/
+const BASE_CSS = `
+*,*::before,*::after{box-sizing:border-box}
+html,body{margin:0;padding:0;background:transparent}
+html{overflow-y:hidden}
+body{font-family:var(--font-sans);font-size:16px;line-height:1.5;color:var(--color-text);-webkit-font-smoothing:antialiased;overflow-wrap:anywhere}
+#gf-root{display:flow-root;width:100%}
+#gf-root[data-kind=svg]>svg{display:block;width:100%;height:auto}
+h1,h2,h3,h4{line-height:1.25;margin:0 0 .5em;font-weight:600}
+h1{font-size:22px}h2{font-size:18px}h3{font-size:16px}h4{font-size:14px}
+p{margin:0 0 .75em}
+a{color:var(--color-accent)}
+code,kbd,pre,samp{font-family:var(--font-mono);font-size:.9em}
+small{color:var(--color-text-muted)}
+table{border-collapse:collapse;width:100%;font-size:14px;font-variant-numeric:tabular-nums}
+th{font-weight:500;color:var(--color-text-muted);text-align:left}
+th,td{padding:6px 10px;border-bottom:1px solid var(--color-border)}
+button,input,select,textarea{font:inherit;color:inherit}
+button{cursor:pointer;padding:6px 14px;border-radius:var(--radius-md);border:1px solid var(--color-border-strong);background:var(--color-surface);transition:background-color .15s,border-color .15s}
+button:hover{background:var(--color-surface-muted)}
+button:active{transform:translateY(1px)}
+button:disabled{opacity:.5;cursor:not-allowed}
+input:not([type=checkbox]):not([type=radio]):not([type=range]),select,textarea{padding:6px 10px;border-radius:var(--radius-sm);border:1px solid var(--color-border-strong);background:var(--color-surface)}
+input[type=checkbox],input[type=radio],input[type=range],progress,meter{accent-color:var(--color-accent)}
+:focus-visible{outline:2px solid var(--color-accent);outline-offset:2px}
+.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}
+@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}
+`.trim();
+/**
+* The document every widget frame loads once. It carries the CSP, the theme,
+* and the runtime; widget code arrives later over the private port.
+*/
+function buildBootstrapHtml(options) {
+	const tokens = options.tokens ?? DEFAULT_LIGHT_TOKENS;
+	const csp = typeof options.csp === "string" ? options.csp : buildCsp(options.csp);
+	const config = JSON.stringify({
+		hostOrigin: options.hostOrigin,
+		animate: options.animate ?? true
+	}).replace(/</g, "\\u003c");
+	return [
+		"<!doctype html>",
+		`<html lang="en" data-theme="${tokens.colorScheme}" style="color-scheme:${tokens.colorScheme};background:transparent">`,
+		"<head>",
+		"<meta charset=\"utf-8\">",
+		`<meta http-equiv="Content-Security-Policy" content="${escapeAttribute(csp)}">`,
+		"<meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">",
+		`<style id="gf-base">:root{${rootDeclarations(themeVariables(tokens))}}\n${BASE_CSS}${options.css ? `\n${escapeStyle(options.css)}` : ""}</style>`,
+		"</head>",
+		"<body><div id=\"gf-root\"></div>",
+		`<script id="gf-config" type="application/json">${config}<\/script>`,
+		`<script>${escapeScript(options.runtime ?? "(function(){let e={write:`genframe/write`,end:`genframe/end`,replace:`genframe/replace`,screenshot:`genframe/screenshot`,inspect:`genframe/inspect`,clearStorage:`genframe/clear-storage`,hostContextChanged:`ui/notifications/host-context-changed`,toolInputPartial:`ui/notifications/tool-input-partial`,toolInput:`ui/notifications/tool-input`,toolResult:`ui/notifications/tool-result`,ready:`genframe/ready`,initialize:`ui/initialize`,initialized:`ui/notifications/initialized`,sizeChanged:`ui/notifications/size-changed`,openLink:`ui/open-link`,message:`ui/message`,callTool:`tools/call`,requestDisplayMode:`ui/request-display-mode`,updateModelContext:`ui/update-model-context`,copyText:`genframe/copy-text`,widgetState:`genframe/widget-state`,log:`genframe/log`,error:`genframe/error`},t=/^<svg[\\s>/]/i;function n(e){let n=e.trimStart();if(n.startsWith(`<?xml`)){let e=n.indexOf(`>`);if(e===-1)return`html`;n=n.slice(e+1).trimStart()}for(;n.startsWith(`<!--`);){let e=n.indexOf(`-->`,4);if(e===-1)return`html`;n=n.slice(e+3).trimStart()}return t.test(n)?`svg`:`html`}let r={parseError:-32700,invalidRequest:-32600,methodNotFound:-32601,invalidParams:-32602,internalError:-32603};var i=class extends Error{code;data;constructor(e,t,n){super(t),this.name=`RpcError`,this.code=e,this.data=n}};let a=e=>typeof e==`object`&&!!e;function o(e){return a(e)&&e.jsonrpc===`2.0`}let s=e=>e instanceof i?{code:e.code,message:e.message,...e.data===void 0?{}:{data:e.data}}:{code:r.internalError,message:e instanceof Error?e.message:String(e)};function c(e,t={}){let n=1,a=!1,c=/* @__PURE__ */ new Map,l=t=>{a||e.postMessage(t)},u=async(e,n)=>{try{if(!t.onRequest)throw new i(r.methodNotFound,`Unknown method: ${e.method}`);let a=await t.onRequest(e.method,e.params);n({jsonrpc:`2.0`,id:e.id,result:a??null})}catch(t){n({jsonrpc:`2.0`,id:e.id,error:s(t)})}},d=(e,n=l)=>{if(a||!o(e))return;let r=`id`in e&&(typeof e.id==`string`||typeof e.id==`number`);if(`method`in e&&typeof e.method==`string`){if(r)u(e,n);else try{t.onNotification?.(e.method,e.params)}catch{}return}if(!r)return;let s=e,d=c.get(s.id);d&&(c.delete(s.id),d.timer!==void 0&&clearTimeout(d.timer),s.error?d.reject(new i(s.error.code,s.error.message,s.error.data)):d.resolve(s.result))},f=e=>d(e.data);return e.addEventListener(`message`,f),e.start?.(),{request(e,t,r){if(a)return Promise.reject(/* @__PURE__ */ Error(`RPC peer is disposed`));let i=n++;return new Promise((n,a)=>{let o=r?.timeoutMs,s=o===void 0?void 0:setTimeout(()=>{c.delete(i),a(/* @__PURE__ */ Error(`${e} timed out after ${o}ms`))},o);c.set(i,{resolve:n,reject:a,timer:s}),l({jsonrpc:`2.0`,id:i,method:e,...t===void 0?{}:{params:t}})})},notify(e,t){l({jsonrpc:`2.0`,method:e,...t===void 0?{}:{params:t}})},receive:d,dispose(){if(!a){a=!0,e.removeEventListener(`message`,f);for(let e of c.values())e.timer!==void 0&&clearTimeout(e.timer),e.reject(/* @__PURE__ */ Error(`RPC peer is disposed`));c.clear()}}}}let l=`1.0.0-next.0`,u=1e3,d=[`log`,`info`,`warn`,`error`,`debug`],f=e=>e.length>u?`${e.slice(0,u)}…`:e,p=e=>{if(typeof e==`string`)return e;if(e instanceof Error)return e.stack??`${e.name}: ${e.message}`;if(typeof e==`object`&&e){if(typeof Node<`u`&&e instanceof Node)return`<${e.nodeName.toLowerCase()}>`;try{return JSON.stringify(e)}catch{return String(e)}}return String(e)};function m(e,t={}){let n=[],r=[],i=e=>{let r={...e,message:f(e.message)};n.length<50&&n.push(r),t.onError?.(r)},a=t=>{let n=t.target;if(n&&n!==e&&n instanceof e.Element){let e=n.getAttribute(`src`)??n.getAttribute(`href`)??void 0;i({kind:`resource`,message:`Failed to load <${n.localName}>${e?` ${e}`:``}`,...e?{source:e}:{}});return}let r=t,a=r.error instanceof Error?r.error.stack:void 0;i({kind:`error`,message:r.message||p(r.error),...r.filename?{source:r.filename}:{},...r.lineno?{line:r.lineno}:{},...r.colno?{column:r.colno}:{},...a?{stack:f(a)}:{}})},o=e=>{let t=e.reason,n=t instanceof Error?t.stack:void 0;i({kind:`unhandledrejection`,message:t instanceof Error?t.message:p(t),...n?{stack:f(n)}:{}})},s=e=>{i({kind:`csp`,message:`Blocked by Content Security Policy (${e.effectiveDirective}): ${e.blockedURI||`inline`}`,...e.blockedURI?{source:e.blockedURI}:{},...e.lineNumber?{line:e.lineNumber}:{}})};e.addEventListener(`error`,a,!0),e.addEventListener(`unhandledrejection`,o),e.document.addEventListener(`securitypolicyviolation`,s);let c=/* @__PURE__ */ new Map;for(let n of d){let i=e.console[n];c.set(n,i),e.console[n]=(...a)=>{let o={level:n,message:f(a.map(p).join(` `))};r.push(o),r.length>200&&r.shift(),t.onConsole?.(o),i.apply(e.console,a)}}return{errors:n,console:r,record:i,dispose(){e.removeEventListener(`error`,a,!0),e.removeEventListener(`unhandledrejection`,o),e.document.removeEventListener(`securitypolicyviolation`,s);for(let[t,n]of c)e.console[t]=n}}}function h(e){let t=e.getBoundingClientRect();if(t.height<2||t.width<2)return!0;if((e.textContent??``).trim().length>0)return!1;for(let t of Array.from(e.querySelectorAll(`svg, canvas, img, video, picture, iframe, input, button, select, textarea, progress, meter`))){let e=t.getBoundingClientRect();if(e.width>=2&&e.height>=2)return!1}for(let t of Array.from(e.querySelectorAll(`*`))){let n=e.ownerDocument.defaultView?.getComputedStyle(t);if(!n||!(n.backgroundColor!==`rgba(0, 0, 0, 0)`&&n.backgroundColor!==`transparent`||n.backgroundImage!==`none`||parseFloat(n.borderTopWidth)>0))continue;let r=t.getBoundingClientRect();if(r.width>=2&&r.height>=2)return!1}return!0}let g=/* @__PURE__ */ new Set([`style`,`script`,`meta`,`link`,`title`,`base`]);function _(e){let t=e.toLowerCase().lastIndexOf(`<style`);if(t===-1)return e;let n=e.charAt(t+6);return n!==``&&!/[\\s>/]/.test(n)||e.toLowerCase().includes(`</style`,t)?e:e.slice(0,t)}function v(e,t){let n=e.createElement(`template`);n.innerHTML=t;let r=n.content,i=[];for(let t of Array.from(r.querySelectorAll(`script`)))t.replaceWith(e.createComment(`gf-script`)),i.push(t);return{fragment:r,scripts:i}}let y=(e,t)=>{if(e.nodeType!==t.nodeType)return!1;if(e.nodeType!==Node.ELEMENT_NODE)return!0;let n=e,r=t;return n.localName===r.localName&&n.namespaceURI===r.namespaceURI&&n.getAttribute(`id`)===r.getAttribute(`id`)},b=(e,t)=>{for(let n of Array.from(t.attributes))if(e.getAttributeNS(n.namespaceURI,n.localName)!==n.value)try{n.namespaceURI?e.setAttributeNS(n.namespaceURI,n.name,n.value):e.setAttribute(n.name,n.value)}catch{}for(let n of Array.from(e.attributes))t.hasAttributeNS(n.namespaceURI,n.localName)||e.removeAttributeNS(n.namespaceURI,n.localName)},x=(e,t,n)=>{if(e.nodeType!==Node.ELEMENT_NODE){e.nodeValue!==t.nodeValue&&(e.nodeValue=t.nodeValue);return}let r=e,i=t;b(r,i),r instanceof HTMLTemplateElement&&i instanceof HTMLTemplateElement?r.innerHTML!==i.innerHTML&&r.content.replaceChildren(i.content):S(r,i,n)};function S(e,t,n){let r=Array.from(t.childNodes),i=e.firstChild;for(let t=0;t<r.length;t++){let a=r[t];if(!i){e.appendChild(a),n.onAdded(a);continue}if(y(i,a)){x(i,a,n),i=i.nextSibling;continue}let o=r[t+1];if(o&&y(i,o)){e.insertBefore(a,i),n.onAdded(a);continue}let s=i.nextSibling;s&&y(s,a)?(i.remove(),x(s,a,n),i=s.nextSibling):(e.replaceChild(a,i),n.onAdded(a),i=s)}for(;i;){let e=i.nextSibling;i.remove(),i=e}}let C=e=>{let t=!1,n=()=>{t||(t=!0,cancelAnimationFrame(r),clearTimeout(i),e())},r=requestAnimationFrame(n),i=setTimeout(n,50);return()=>{t=!0,cancelAnimationFrame(r),clearTimeout(i)}},w=(e=()=>{})=>(t,n)=>{let r=t.ownerDocument.createElementNS(n.namespaceURI??`http://www.w3.org/1999/xhtml`,`script`);for(let e of Array.from(n.attributes))try{r.setAttribute(e.name,e.value)}catch{}r.textContent=n.textContent;let i=r.getAttribute(`src`)??r.getAttribute(`href`);return i?new Promise(n=>{let a=setTimeout(()=>{e(`Script timed out: ${i}`,i),n()},15e3);r.addEventListener(`load`,()=>{clearTimeout(a),n()}),r.addEventListener(`error`,()=>{clearTimeout(a),e(`Script failed to load: ${i}`,i),n()}),t.replaceWith(r)}):(t.replaceWith(r),Promise.resolve())},T=e=>{if(e.nodeType!==Node.ELEMENT_NODE)return;let t=e;g.has(t.localName)||typeof t.animate!=`function`||t.animate([{opacity:0},{opacity:1}],{duration:200,easing:`ease-out`})};function E(e){let{root:t}=e,r=t.ownerDocument,i=e.schedule??C,a=e.runScript??w(e.onScriptError),o=``,s=`html`,c=!1,l=!1,u,d,f=[],p={onAdded(t){e.animate?.()&&T(t)}},m=i=>{u?.(),u=void 0;let a=i?o:_(o);if(a===d)return;d=a,s=n(o),t.dataset.kind=s;let c=v(r,a);f=c.scripts,S(t,c.fragment,p),e.onRender?.(s)},h=async()=>{let e=r.createTreeWalker(t,NodeFilter.SHOW_COMMENT),n=[];for(let t=e.nextNode();t;t=e.nextNode())t.nodeValue===`gf-script`&&n.push(t);let i=f;for(let e=0;e<n.length&&e<i.length;e++)await a(n[e],i[e]);i.length>0&&!l&&(l=!0,r.dispatchEvent(new Event(`DOMContentLoaded`,{bubbles:!0})),r.defaultView?.dispatchEvent(new Event(`load`)))};return{get source(){return o},get kind(){return s},get ended(){return c},get scriptsRan(){return l},write(e){if(c)throw Error(`Cannot write after end; use replace`);e&&(o+=e,u??=i(()=>{u=void 0,m(!1)}))},async end(){c||(c=!0,m(!0),await h())},async replace(e){c=!0,o=e,m(!0),await h()},flush(){u&&m(c)}}}let D=`http://www.w3.org/1999/xhtml`,O=`http://www.w3.org/2000/svg`,k=4096,A=/* @__PURE__ */ new Set([`script`,`noscript`,`template`]),j=e=>{let t=/* @__PURE__ */ new Map,n,r,i,a=()=>{if(n)return;i=e.createElement(`div`),i.setAttribute(`aria-hidden`,`true`),i.style.cssText=`all:initial;position:absolute;left:-99999px;top:0;visibility:hidden;contain:strict;width:0;height:0;`;let t=i.attachShadow({mode:`closed`});n=e.createElement(`div`),r=e.createElementNS(O,`svg`),n.appendChild(r),t.appendChild(n),e.body.appendChild(i)};return{get(i){let o=`${i.namespaceURI}|${i.localName}`,s=t.get(o);if(s)return s;a();let c=e.createElementNS(i.namespaceURI??D,i.localName);(i.namespaceURI===O?r:n).appendChild(c);let l=e.defaultView.getComputedStyle(c);s=/* @__PURE__ */ new Map;for(let e=0;e<l.length;e++){let t=l.item(e);s.set(t,l.getPropertyValue(t))}return c.remove(),t.set(o,s),s},dispose(){i?.remove()}}},M=(e,t,n)=>{let r=document.createElement(`canvas`);return r.width=Math.max(1,t),r.height=Math.max(1,n),r.getContext(`2d`).drawImage(e,0,0,t,n),r.toDataURL(`image/png`)},N=(e,t,n)=>{if(e.nodeType===Node.TEXT_NODE)return e.cloneNode();if(e.nodeType!==Node.ELEMENT_NODE)return null;let r=e;if(A.has(r.localName))return null;let i=r.ownerDocument.defaultView,a=i.getComputedStyle(r),o;if(r instanceof i.HTMLCanvasElement){o=r.ownerDocument.createElement(`img`);try{o.setAttribute(`src`,r.toDataURL(`image/png`))}catch{}}else if(r instanceof i.HTMLImageElement&&r.complete&&r.naturalWidth>0&&!r.src.startsWith(`data:`)){o=r.cloneNode(!1);try{o.setAttribute(`src`,M(r,r.naturalWidth,r.naturalHeight))}catch{}}else o=r.cloneNode(!1);r instanceof i.HTMLInputElement?r.type===`checkbox`||r.type===`radio`?r.checked?o.setAttribute(`checked`,``):o.removeAttribute(`checked`):o.setAttribute(`value`,r.value):r instanceof i.HTMLTextAreaElement?o.textContent=r.value:r instanceof i.HTMLSelectElement&&o.setAttribute(`data-gf-value`,r.value);let s=t.get(r),c=[];for(let e=0;e<a.length;e++){let t=a.item(e);if(t.startsWith(`--`))continue;let r=a.getPropertyValue(t);(r!==s.get(t)||n&&r!==n.getPropertyValue(t))&&c.push(`${t}:${r}`)}if((a.animationName!==`none`||a.transitionProperty!==`none`)&&c.push(`animation:none`,`transition:none`),o.setAttribute(`style`,c.join(`;`)),!(r instanceof i.HTMLTextAreaElement))for(let e of Array.from(r.childNodes)){let n=N(e,t,a);n&&o.appendChild(n)}if(r instanceof i.HTMLSelectElement)for(let e of Array.from(o.querySelectorAll(`option`)))(e.getAttribute(`value`)===r.value||e.textContent===r.value)&&e.setAttribute(`selected`,``);return o},P=e=>{let t=[];for(let n of Array.from(e.styleSheets)){let e;try{e=n.cssRules}catch{continue}for(let n of Array.from(e))n.constructor.name===`CSSFontFaceRule`&&!/url\\((?!\\s*[\"']?data:)/i.test(n.cssText)&&t.push(n.cssText)}return t.join(`\n`)},F=e=>{let t=e.getBoundingClientRect(),n=Math.max(1,Math.ceil(t.width));return{layoutWidth:n,width:Math.max(n,Math.ceil(e.scrollWidth)),height:Math.max(1,Math.ceil(Math.max(t.height,e.scrollHeight)))}},I=e=>new Promise((t,n)=>{let r=new Image;r.onload=()=>t(r),r.onerror=()=>n(/* @__PURE__ */ Error(`The serialized widget failed to rasterize`)),r.src=e});async function L(e,t={}){let n=e.ownerDocument,r=n.defaultView;await n.fonts?.ready;let{layoutWidth:i,width:a,height:o}=F(e),s=j(n),c;try{c=N(e,s,r.getComputedStyle(n.body))}finally{s.dispose()}let l=n.createElementNS(D,`div`);l.setAttribute(`style`,`width:${a}px;height:${o}px;overflow:hidden;`),c&&l.appendChild(c),c instanceof Element&&c.setAttribute(`style`,`${c.getAttribute(`style`)??``};width:${i}px;margin:0;`);let u=P(n),d=new XMLSerializer().serializeToString(l),f=`<svg xmlns=\"${O}\" width=\"${a}\" height=\"${o}\" viewBox=\"0 0 ${a} ${o}\"><foreignObject x=\"0\" y=\"0\" width=\"100%\" height=\"100%\">`+(u?`<style xmlns=\"${D}\">${u.replace(/</g,`\\\\3c `)}</style>`:``)+d+`</foreignObject></svg>`,p=await I(`data:image/svg+xml;charset=utf-8,${encodeURIComponent(f)}`),m=t.scale??Math.min(r.devicePixelRatio||1,2),h=Math.max(.1,Math.min(m,k/a,k/o)),g=n.createElement(`canvas`);g.width=Math.round(a*h),g.height=Math.round(o*h);let _=g.getContext(`2d`);if(!_)throw Error(`Canvas 2D context is unavailable`);let v=t.background??r.getComputedStyle(n.documentElement).getPropertyValue(`--color-background`).trim();return v&&(_.fillStyle=v,_.fillRect(0,0,g.width,g.height)),_.scale(h,h),_.drawImage(p,0,0,a,o),{dataUrl:g.toDataURL(`image/png`),width:a,height:o}}function R(e){let t=e.getBoundingClientRect();return{width:Math.ceil(t.width),height:Math.ceil(t.height)}}function z(e){let t=R(e);return t.width>0?t:void 0}async function B(e){let t=[],n=async(e,n)=>{try{await n()!==!1&&t.push(e)}catch{}};return await n(`localStorage`,()=>e.localStorage.clear()),await n(`sessionStorage`,()=>e.sessionStorage.clear()),await n(`indexedDB`,async()=>{let t=e.indexedDB;if(typeof t?.databases!=`function`)return!1;let n=await t.databases();return await Promise.all(n.map(({name:e})=>e&&new Promise(n=>{let r=t.deleteDatabase(e);r.onsuccess=r.onerror=r.onblocked=()=>n()}))),!0}),await n(`cacheStorage`,async()=>{if(!e.caches)return!1;for(let t of await e.caches.keys())await e.caches.delete(t);return!0}),await n(`cookies`,()=>{for(let t of e.document.cookie.split(`;`)){let n=t.split(`=`)[0]?.trim();n&&(e.document.cookie=`${n}=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/`)}}),{cleared:t}}let V=/^--[\\w-]+$/;function H(t=window){let n=t.document,a=n.getElementById(`gf-config`),o=JSON.parse(a?.textContent??`{}`);a?.remove();let s=n.getElementById(`gf-root`)??n.body,u,d={},f=null,p=null,g=null,_={width:0,height:0},v=m(t,{onError:t=>u?.notify(e.error,t),onConsole:t=>{(t.level===`warn`||t.level===`error`)&&u?.notify(e.log,t)}}),y=t.matchMedia?.(`(prefers-reduced-motion: reduce)`),b=E({root:s,animate:()=>o.animate!==!1&&!y?.matches,onScriptError:(e,t)=>v.record({kind:`script`,message:e,...t?{source:t}:{}})}),x=()=>R(s),S,C=()=>{S=void 0;let t=z(s);if(!t)return;let r=d.containerDimensions?.maxHeight;n.documentElement.style.overflowY=typeof r==`number`&&t.height>r?`auto`:`hidden`,(t.width!==_.width||t.height!==_.height)&&(_=t,u?.notify(e.sizeChanged,t))},w=()=>{S??=t.requestAnimationFrame(C)};typeof t.ResizeObserver==`function`&&new t.ResizeObserver(w).observe(s);let T=e=>{let r=d.theme;d={...d,...e};let i=n.documentElement.style,a=!1;(e.theme===`light`||e.theme===`dark`)&&(i.colorScheme=e.theme,n.documentElement.dataset.theme=e.theme,a=e.theme!==r);let o=e.styles?.variables;if(o&&typeof o==`object`){for(let[e,t]of Object.entries(o))V.test(e)&&typeof t==`string`&&i.setProperty(e,t);a=!0}a&&t.dispatchEvent(new CustomEvent(`themechange`,{detail:{theme:d.theme,variables:d.styles?.variables}}))},D=()=>{if(!u)throw Error(`generative-frame is not connected to its host`);return u},O=t=>D().request(e.message,{role:`user`,content:[{type:`text`,text:String(t)}]}),k=t=>D().request(e.openLink,{url:String(t)}),A=(t,n)=>D().request(e.callTool,{name:t,...n===void 0?{}:{arguments:n}}),j=t=>D().request(e.requestDisplayMode,{mode:t}),M=t=>D().request(e.updateModelContext,t),N=async t=>{await D().request(e.copyText,{text:String(t)})},P={version:l,get theme(){return d.theme},get context(){return d},get toolInput(){return f},get toolOutput(){return p},get state(){return g},sendPrompt:O,openLink:k,callTool:A,requestDisplayMode:j,updateModelContext:M,copyText:N,setState:t=>{g=t,D().notify(e.widgetState,{state:t})},on(e,n){return t.addEventListener(e,n),()=>t.removeEventListener(e,n)}},F=t;F.genframe=P,F.sendPrompt=O,F.openLink=k,t.navigator.clipboard?Object.defineProperty(t.navigator.clipboard,\"writeText\",{configurable:!0,value:N}):Object.defineProperty(t.navigator,\"clipboard\",{configurable:!0,value:{writeText:N}}),t.open=(e=>(e!==void 0&&k(String(e)).catch(()=>{}),null)),n.addEventListener(`click`,e=>{if(e.defaultPrevented||!(e.target instanceof t.Element))return;let n=e.target.closest(`a[href]`);if(!n)return;let r=n.getAttribute(`href`)??``;if(r.startsWith(`#`))return;let i;try{i=new URL(r,o.hostOrigin)}catch{return}(i.protocol===`http:`||i.protocol===`https:`)&&(e.preventDefault(),k(i.href).catch(()=>{}))},!0);let I=()=>({size:x(),blank:h(s),errorCount:v.errors.length}),H=()=>({kind:b.kind,ended:b.ended,size:x(),blank:b.ended?h(s):!1,errors:[...v.errors],console:[...v.console]}),U=async(n,a)=>{let o=a??{};switch(n){case e.end:return await b.end(),w(),I();case e.replace:if(typeof o.code!=`string`)throw new i(r.invalidParams,`replace requires a string 'code'`);return await b.replace(o.code),w(),I();case e.screenshot:return b.flush(),L(s,o);case e.inspect:return b.flush(),H();case e.clearStorage:return B(t);default:throw new i(r.methodNotFound,`Unknown method: ${n}`)}},W=(n,r)=>{let i=r??{};switch(n){case e.write:typeof i.chunk==`string`&&b.write(i.chunk);return;case e.hostContextChanged:T(i);return;case e.toolInputPartial:case e.toolInput:{let r=i.arguments;f=r&&typeof r==`object`?r:{},t.dispatchEvent(new CustomEvent(`toolinput`,{detail:{arguments:f,partial:n===e.toolInputPartial}}));return}case e.toolResult:p=i.structuredContent===void 0?i:i.structuredContent,t.dispatchEvent(new CustomEvent(`toolresult`,{detail:i}));return;default:return}},G=(t,n)=>{u=c(t,{onRequest:U,onNotification:W}),g=n.state??null,T(n.context??{}),u.notify(e.ready,{version:l}),w();for(let t of v.errors)u.notify(e.error,t)},K=0,q=()=>{K++,K>100&&t.clearInterval(Y),t.parent.postMessage({type:`genframe:ready`},o.hostOrigin)},J=e=>{if(e.source!==t.parent||e.origin!==o.hostOrigin)return;let n=e.data;n?.type===`genframe:init`&&e.ports[0]&&(t.removeEventListener(`message`,J),t.clearInterval(Y),G(e.ports[0],n))};t.addEventListener(`message`,J);let Y=t.setInterval(q,100);q()}H()})();")}<\/script>`,
+		"</body>",
+		"</html>"
+	].join("\n");
+}
+/** Host context sent with init and on every theme change. */
+function themeContext(tokens) {
+	return {
+		theme: tokens.colorScheme,
+		styles: { variables: themeVariables(tokens) }
+	};
+}
+export { buildBootstrapHtml, themeContext };
+
+//# sourceMappingURL=bootstrap.js.map

package/dist/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","names":[],"sources":["../src/bootstrap.ts"],"sourcesContent":["import { buildCsp, type CspOptions } from \"./csp\";\nimport type { HostContext } from \"./protocol\";\nimport { runtimeSource } from \"./runtime/generated\";\nimport {\n  DEFAULT_LIGHT_TOKENS,\n  themeVariables,\n  type ThemeTokens,\n} from \"./theme\";\n\nconst escapeAttribute = (value: string) =>\n  value.replace(/&/g, \"&amp;\").replace(/\"/g, \"&quot;\").replace(/</g, \"&lt;\");\n\nconst escapeScript = (value: string) =>\n  value.replace(/<\\/(script)/gi, \"<\\\\/$1\");\n\nconst escapeStyle = (value: string) => value.replace(/<\\/(style)/gi, \"<\\\\/$1\");\n\nconst SAFE_VARIABLE = /^--[\\w-]+$/;\nconst SAFE_VALUE = /^[^;{}<>]*$/;\n\nconst rootDeclarations = (variables: Record<string, string>) =>\n  Object.entries(variables)\n    .filter(\n      ([name, value]) => SAFE_VARIABLE.test(name) && SAFE_VALUE.test(value),\n    )\n    .map(([name, value]) => `${name}:${value};`)\n    .join(\"\");\n\n/**\n * Base styles: transparent page, host typography, and themed form controls,\n * so plain markup already matches the host before any widget CSS loads.\n */\nconst BASE_CSS = `\n*,*::before,*::after{box-sizing:border-box}\nhtml,body{margin:0;padding:0;background:transparent}\nhtml{overflow-y:hidden}\nbody{font-family:var(--font-sans);font-size:16px;line-height:1.5;color:var(--color-text);-webkit-font-smoothing:antialiased;overflow-wrap:anywhere}\n#gf-root{display:flow-root;width:100%}\n#gf-root[data-kind=svg]>svg{display:block;width:100%;height:auto}\nh1,h2,h3,h4{line-height:1.25;margin:0 0 .5em;font-weight:600}\nh1{font-size:22px}h2{font-size:18px}h3{font-size:16px}h4{font-size:14px}\np{margin:0 0 .75em}\na{color:var(--color-accent)}\ncode,kbd,pre,samp{font-family:var(--font-mono);font-size:.9em}\nsmall{color:var(--color-text-muted)}\ntable{border-collapse:collapse;width:100%;font-size:14px;font-variant-numeric:tabular-nums}\nth{font-weight:500;color:var(--color-text-muted);text-align:left}\nth,td{padding:6px 10px;border-bottom:1px solid var(--color-border)}\nbutton,input,select,textarea{font:inherit;color:inherit}\nbutton{cursor:pointer;padding:6px 14px;border-radius:var(--radius-md);border:1px solid var(--color-border-strong);background:var(--color-surface);transition:background-color .15s,border-color .15s}\nbutton:hover{background:var(--color-surface-muted)}\nbutton:active{transform:translateY(1px)}\nbutton:disabled{opacity:.5;cursor:not-allowed}\ninput:not([type=checkbox]):not([type=radio]):not([type=range]),select,textarea{padding:6px 10px;border-radius:var(--radius-sm);border:1px solid var(--color-border-strong);background:var(--color-surface)}\ninput[type=checkbox],input[type=radio],input[type=range],progress,meter{accent-color:var(--color-accent)}\n:focus-visible{outline:2px solid var(--color-accent);outline-offset:2px}\n.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}\n@media (prefers-reduced-motion:reduce){*,*::before,*::after{animation-duration:.01ms!important;animation-iteration-count:1!important;transition-duration:.01ms!important;scroll-behavior:auto!important}}\n`.trim();\n\nexport type BootstrapOptions = {\n  /** The embedding page's origin; the frame only talks to this origin. */\n  hostOrigin: string;\n  csp?: CspOptions | string;\n  tokens?: ThemeTokens;\n  /** Fade in elements as they stream in. Always off under reduced motion. */\n  animate?: boolean;\n  /** Extra CSS appended after the base styles. */\n  css?: string;\n  /** Overrides the bundled runtime, mainly for tests. */\n  runtime?: string;\n};\n\n/**\n * The document every widget frame loads once. It carries the CSP, the theme,\n * and the runtime; widget code arrives later over the private port.\n */\nexport function buildBootstrapHtml(options: BootstrapOptions): string {\n  const tokens = options.tokens ?? DEFAULT_LIGHT_TOKENS;\n  const csp =\n    typeof options.csp === \"string\" ? options.csp : buildCsp(options.csp);\n  const config = JSON.stringify({\n    hostOrigin: options.hostOrigin,\n    animate: options.animate ?? true,\n  }).replace(/</g, \"\\\\u003c\");\n\n  return [\n    \"<!doctype html>\",\n    `<html lang=\"en\" data-theme=\"${tokens.colorScheme}\" style=\"color-scheme:${tokens.colorScheme};background:transparent\">`,\n    \"<head>\",\n    '<meta charset=\"utf-8\">',\n    `<meta http-equiv=\"Content-Security-Policy\" content=\"${escapeAttribute(csp)}\">`,\n    '<meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">',\n    `<style id=\"gf-base\">:root{${rootDeclarations(themeVariables(tokens))}}\\n${BASE_CSS}${\n      options.css ? `\\n${escapeStyle(options.css)}` : \"\"\n    }</style>`,\n    \"</head>\",\n    '<body><div id=\"gf-root\"></div>',\n    `<script id=\"gf-config\" type=\"application/json\">${config}</script>`,\n    `<script>${escapeScript(options.runtime ?? runtimeSource)}</script>`,\n    \"</body>\",\n    \"</html>\",\n  ].join(\"\\n\");\n}\n\n/** Host context sent with init and on every theme change. */\nexport function themeContext(tokens: ThemeTokens): HostContext {\n  return {\n    theme: tokens.colorScheme,\n    styles: { variables: themeVariables(tokens) },\n  };\n}\n"],"mappings":";;;;AASA,MAAM,mBAAmB,UACvB,MAAM,QAAQ,MAAM,OAAO,CAAC,CAAC,QAAQ,MAAM,QAAQ,CAAC,CAAC,QAAQ,MAAM,MAAM;AAE3E,MAAM,gBAAgB,UACpB,MAAM,QAAQ,iBAAiB,QAAQ;AAEzC,MAAM,eAAe,UAAkB,MAAM,QAAQ,gBAAgB,QAAQ;AAE7E,MAAM,gBAAgB;AACtB,MAAM,aAAa;AAEnB,MAAM,oBAAoB,cACxB,OAAO,QAAQ,SAAS,CAAC,CACtB,QACE,CAAC,MAAM,WAAW,cAAc,KAAK,IAAI,KAAK,WAAW,KAAK,KAAK,CACtE,CAAC,CACA,KAAK,CAAC,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC,CAC3C,KAAK,EAAE;;;;;AAMZ,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;EA0Bf,KAAK;;;;;AAmBP,SAAgB,mBAAmB,SAAmC;CACpE,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,MACJ,OAAO,QAAQ,QAAQ,WAAW,QAAQ,MAAM,SAAS,QAAQ,GAAG;CACtE,MAAM,SAAS,KAAK,UAAU;EAC5B,YAAY,QAAQ;EACpB,SAAS,QAAQ,WAAW;CAC9B,CAAC,CAAC,CAAC,QAAQ,MAAM,SAAS;CAE1B,OAAO;EACL;EACA,+BAA+B,OAAO,YAAY,wBAAwB,OAAO,YAAY;EAC7F;EACA;EACA,uDAAuD,gBAAgB,GAAG,EAAE;EAC5E;EACA,6BAA6B,iBAAiB,eAAe,MAAM,CAAC,EAAE,KAAK,WACzE,QAAQ,MAAM,KAAK,YAAY,QAAQ,GAAG,MAAM,GACjD;EACD;EACA;EACA,kDAAkD,OAAO;EACzD,WAAW,aAAa,QAAQ,WAAA,0zkBAAwB,EAAE;EAC1D;EACA;CACF,CAAC,CAAC,KAAK,IAAI;AACb;;AAGA,SAAgB,aAAa,QAAkC;CAC7D,OAAO;EACL,OAAO,OAAO;EACd,QAAQ,EAAE,WAAW,eAAe,MAAM,EAAE;CAC9C;AACF"}

package/dist/csp.d.ts

@@ -0,0 +1,25 @@
+/** Script, style, image, and font hosts widgets may load from by default. */
+export declare const DEFAULT_CDN_ORIGINS: readonly string[];
+/** Google Fonts stylesheet origins for an explicit `fontStyleOrigins` opt-in. */
+export declare const DEFAULT_FONT_STYLE_ORIGINS: readonly string[];
+/** Google Fonts file origins for an explicit `fontOrigins` opt-in. */
+export declare const DEFAULT_FONT_ORIGINS: readonly string[];
+export type CspOptions = {
+    /** Origins for scripts, styles, images, fonts, and media. Defaults to `DEFAULT_CDN_ORIGINS`. */
+    cdnOrigins?: readonly string[];
+    /** Extra origins for font stylesheets, allowed only in `style-src`. Empty by default. */
+    fontStyleOrigins?: readonly string[];
+    /** Extra origins for font files, allowed only in `font-src`. Empty by default. */
+    fontOrigins?: readonly string[];
+    /** Origins `fetch`, XHR, and WebSocket may reach. Empty by default, blocking those requests. */
+    connectOrigins?: readonly string[];
+    /** Extra image origins, such as an image proxy. */
+    imageOrigins?: readonly string[];
+    /** Origins that may be embedded in nested frames. Empty by default. */
+    frameOrigins?: readonly string[];
+    /** Allows `eval` and `new Function`, which some charting libraries need. Off by default. */
+    allowEval?: boolean;
+};
+/** Builds the Content-Security-Policy every widget frame enforces. */
+export declare function buildCsp(options?: CspOptions): string;
+//# sourceMappingURL=csp.d.ts.map

package/dist/csp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.d.ts","mappings":"AAAA;AACA,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAKhD;AAED;AACA,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAEvD;AAED;AACA,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAEjD;AAED,MAAM,MAAM,UAAU,GAAG;IACvB;IACA,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE;IAC9B;IACA,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE;IACpC;IACA,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE;IAC/B;IACA,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE;IAClC;IACA,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE;IAChC;IACA,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE;IAChC;IACA,SAAS,CAAC,EAAE,OAAO;CACpB;AAiCD;AACA,wBAAgB,QAAQ,CAAC,OAAO,GAAE,UAAe,GAAG,MAAM","names":[],"ignoreList":[],"sources":["../src/csp.ts"],"sourcesContent":[null]}

package/dist/csp.js

@@ -0,0 +1,78 @@
+// src/csp.ts
+/** Script, style, image, and font hosts widgets may load from by default. */
+const DEFAULT_CDN_ORIGINS = [
+	"https://cdnjs.cloudflare.com",
+	"https://cdn.jsdelivr.net",
+	"https://unpkg.com",
+	"https://esm.sh"
+];
+/** Google Fonts stylesheet origins for an explicit `fontStyleOrigins` opt-in. */
+const DEFAULT_FONT_STYLE_ORIGINS = ["https://fonts.googleapis.com"];
+/** Google Fonts file origins for an explicit `fontOrigins` opt-in. */
+const DEFAULT_FONT_ORIGINS = ["https://fonts.gstatic.com"];
+const KEYWORDS = /* @__PURE__ */ new Set([
+	"'self'",
+	"'none'",
+	"data:",
+	"blob:",
+	"https:"
+]);
+const isSafeSource = (value, allowWebSocket) => {
+	if (KEYWORDS.has(value)) return true;
+	if (!(allowWebSocket ? /^(?:https?|wss?):\/\//i : /^https?:\/\//i).test(value) || /[\s;'"`,]/.test(value)) return false;
+	try {
+		const url = new URL(value.replace("://*.", "://wildcard."));
+		return url.username === "" && url.password === "" && url.search === "" && url.hash === "";
+	} catch {
+		return false;
+	}
+};
+const sources = (values, allowWebSocket = false) => [...new Set((values ?? []).filter((value) => typeof value === "string" && isSafeSource(value, allowWebSocket)))];
+/** Builds the Content-Security-Policy every widget frame enforces. */
+function buildCsp(options = {}) {
+	const cdn = sources(options.cdnOrigins ?? DEFAULT_CDN_ORIGINS);
+	const connect = sources(options.connectOrigins, true);
+	const frames = sources(options.frameOrigins);
+	const images = sources(options.imageOrigins);
+	const fontStyles = sources(options.fontStyleOrigins);
+	const fonts = sources(options.fontOrigins);
+	const directive = (name, values) => `${name} ${values.length > 0 ? values.join(" ") : "'none'"}`;
+	return [
+		"default-src 'none'",
+		directive("script-src", [
+			"'unsafe-inline'",
+			...options.allowEval ? ["'unsafe-eval'"] : [],
+			...cdn
+		]),
+		directive("style-src", [
+			"'unsafe-inline'",
+			...cdn,
+			...fontStyles
+		]),
+		directive("img-src", [
+			"data:",
+			"blob:",
+			...cdn,
+			...images
+		]),
+		directive("font-src", [
+			"data:",
+			...cdn,
+			...fonts
+		]),
+		directive("media-src", [
+			"data:",
+			"blob:",
+			...cdn
+		]),
+		directive("connect-src", connect),
+		directive("frame-src", frames),
+		"worker-src blob:",
+		"object-src 'none'",
+		"base-uri 'none'",
+		"form-action 'none'"
+	].join("; ");
+}
+export { DEFAULT_CDN_ORIGINS, DEFAULT_FONT_ORIGINS, DEFAULT_FONT_STYLE_ORIGINS, buildCsp };
+
+//# sourceMappingURL=csp.js.map

package/dist/csp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.js","names":[],"sources":["../src/csp.ts"],"sourcesContent":["/** Script, style, image, and font hosts widgets may load from by default. */\nexport const DEFAULT_CDN_ORIGINS: readonly string[] = [\n  \"https://cdnjs.cloudflare.com\",\n  \"https://cdn.jsdelivr.net\",\n  \"https://unpkg.com\",\n  \"https://esm.sh\",\n];\n\n/** Google Fonts stylesheet origins for an explicit `fontStyleOrigins` opt-in. */\nexport const DEFAULT_FONT_STYLE_ORIGINS: readonly string[] = [\n  \"https://fonts.googleapis.com\",\n];\n\n/** Google Fonts file origins for an explicit `fontOrigins` opt-in. */\nexport const DEFAULT_FONT_ORIGINS: readonly string[] = [\n  \"https://fonts.gstatic.com\",\n];\n\nexport type CspOptions = {\n  /** Origins for scripts, styles, images, fonts, and media. Defaults to `DEFAULT_CDN_ORIGINS`. */\n  cdnOrigins?: readonly string[];\n  /** Extra origins for font stylesheets, allowed only in `style-src`. Empty by default. */\n  fontStyleOrigins?: readonly string[];\n  /** Extra origins for font files, allowed only in `font-src`. Empty by default. */\n  fontOrigins?: readonly string[];\n  /** Origins `fetch`, XHR, and WebSocket may reach. Empty by default, blocking those requests. */\n  connectOrigins?: readonly string[];\n  /** Extra image origins, such as an image proxy. */\n  imageOrigins?: readonly string[];\n  /** Origins that may be embedded in nested frames. Empty by default. */\n  frameOrigins?: readonly string[];\n  /** Allows `eval` and `new Function`, which some charting libraries need. Off by default. */\n  allowEval?: boolean;\n};\n\nconst KEYWORDS = new Set([\"'self'\", \"'none'\", \"data:\", \"blob:\", \"https:\"]);\n\nconst isSafeSource = (value: string, allowWebSocket: boolean): boolean => {\n  if (KEYWORDS.has(value)) return true;\n  const scheme = allowWebSocket ? /^(?:https?|wss?):\\/\\//i : /^https?:\\/\\//i;\n  if (!scheme.test(value) || /[\\s;'\"`,]/.test(value)) return false;\n  try {\n    const url = new URL(value.replace(\"://*.\", \"://wildcard.\"));\n    return (\n      url.username === \"\" &&\n      url.password === \"\" &&\n      url.search === \"\" &&\n      url.hash === \"\"\n    );\n  } catch {\n    return false;\n  }\n};\n\nconst sources = (\n  values: readonly string[] | undefined,\n  allowWebSocket = false,\n) => [\n  ...new Set(\n    (values ?? []).filter(\n      (value) =>\n        typeof value === \"string\" && isSafeSource(value, allowWebSocket),\n    ),\n  ),\n];\n\n/** Builds the Content-Security-Policy every widget frame enforces. */\nexport function buildCsp(options: CspOptions = {}): string {\n  const cdn = sources(options.cdnOrigins ?? DEFAULT_CDN_ORIGINS);\n  const connect = sources(options.connectOrigins, true);\n  const frames = sources(options.frameOrigins);\n  const images = sources(options.imageOrigins);\n  const fontStyles = sources(options.fontStyleOrigins);\n  const fonts = sources(options.fontOrigins);\n  const directive = (name: string, values: readonly string[]) =>\n    `${name} ${values.length > 0 ? values.join(\" \") : \"'none'\"}`;\n\n  return [\n    \"default-src 'none'\",\n    directive(\"script-src\", [\n      \"'unsafe-inline'\",\n      ...(options.allowEval ? [\"'unsafe-eval'\"] : []),\n      ...cdn,\n    ]),\n    directive(\"style-src\", [\"'unsafe-inline'\", ...cdn, ...fontStyles]),\n    directive(\"img-src\", [\"data:\", \"blob:\", ...cdn, ...images]),\n    directive(\"font-src\", [\"data:\", ...cdn, ...fonts]),\n    directive(\"media-src\", [\"data:\", \"blob:\", ...cdn]),\n    directive(\"connect-src\", connect),\n    directive(\"frame-src\", frames),\n    \"worker-src blob:\",\n    \"object-src 'none'\",\n    \"base-uri 'none'\",\n    \"form-action 'none'\",\n  ].join(\"; \");\n}\n"],"mappings":";;AACA,MAAa,sBAAyC;CACpD;CACA;CACA;CACA;AACF;;AAGA,MAAa,6BAAgD,CAC3D,8BACF;;AAGA,MAAa,uBAA0C,CACrD,2BACF;AAmBA,MAAM,2BAAW,IAAI,IAAI;CAAC;CAAU;CAAU;CAAS;CAAS;AAAQ,CAAC;AAEzE,MAAM,gBAAgB,OAAe,mBAAqC;CACxE,IAAI,SAAS,IAAI,KAAK,GAAG,OAAO;CAEhC,IAAI,EADW,iBAAiB,2BAA2B,gBAAA,CAC/C,KAAK,KAAK,KAAK,YAAY,KAAK,KAAK,GAAG,OAAO;CAC3D,IAAI;EACF,MAAM,MAAM,IAAI,IAAI,MAAM,QAAQ,SAAS,cAAc,CAAC;EAC1D,OACE,IAAI,aAAa,MACjB,IAAI,aAAa,MACjB,IAAI,WAAW,MACf,IAAI,SAAS;CAEjB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAM,WACJ,QACA,iBAAiB,UACd,CACH,GAAG,IAAI,KACJ,UAAU,CAAC,EAAA,CAAG,QACZ,UACC,OAAO,UAAU,YAAY,aAAa,OAAO,cAAc,CACnE,CACF,CACF;;AAGA,SAAgB,SAAS,UAAsB,CAAC,GAAW;CACzD,MAAM,MAAM,QAAQ,QAAQ,cAAc,mBAAmB;CAC7D,MAAM,UAAU,QAAQ,QAAQ,gBAAgB,IAAI;CACpD,MAAM,SAAS,QAAQ,QAAQ,YAAY;CAC3C,MAAM,SAAS,QAAQ,QAAQ,YAAY;CAC3C,MAAM,aAAa,QAAQ,QAAQ,gBAAgB;CACnD,MAAM,QAAQ,QAAQ,QAAQ,WAAW;CACzC,MAAM,aAAa,MAAc,WAC/B,GAAG,KAAK,GAAG,OAAO,SAAS,IAAI,OAAO,KAAK,GAAG,IAAI;CAEpD,OAAO;EACL;EACA,UAAU,cAAc;GACtB;GACA,GAAI,QAAQ,YAAY,CAAC,eAAe,IAAI,CAAC;GAC7C,GAAG;EACL,CAAC;EACD,UAAU,aAAa;GAAC;GAAmB,GAAG;GAAK,GAAG;EAAU,CAAC;EACjE,UAAU,WAAW;GAAC;GAAS;GAAS,GAAG;GAAK,GAAG;EAAM,CAAC;EAC1D,UAAU,YAAY;GAAC;GAAS,GAAG;GAAK,GAAG;EAAK,CAAC;EACjD,UAAU,aAAa;GAAC;GAAS;GAAS,GAAG;EAAG,CAAC;EACjD,UAAU,eAAe,OAAO;EAChC,UAAU,aAAa,MAAM;EAC7B;EACA;EACA;EACA;CACF,CAAC,CAAC,KAAK,IAAI;AACb"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { clearWidgetStorage, createWidget, widgetStorageSalt, type CreateWidgetOptions, type Screenshot, type ToolCallRequest, type UiMessageParams, type WidgetEventMap, type WidgetHandle, type WidgetHandlers, type WidgetInspection, } from "./widget.js";
+export { previewWidget, type PreviewOptions, type PreviewResult, } from "./preview.js";
+export { buildCsp, DEFAULT_CDN_ORIGINS, type CspOptions } from "./csp.js";
+export { readThemeTokens, defaultThemeTokens, DEFAULT_LIGHT_TOKENS, DEFAULT_DARK_TOKENS, type ThemeTokens, type ThemeTokenName, type ThemeTokenSources, } from "./theme.js";
+export type { ColorScheme, ClearStorageResult, ConsoleEntry, ConsoleLevel, DisplayMode, EndResult, FrameInspection, HostContext, McpAppInitializeParams, ScreenshotOptions, WidgetError, WidgetErrorKind, WidgetKind, WidgetSize, } from "./protocol.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,aAAU;AACjB,OAAO,EACL,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,cAAW;AAClB,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,MAAM,UAAO;AACtE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,YAAS;AAChB,YAAY,EACV,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,SAAS,EACT,eAAe,EACf,WAAW,EACX,sBAAsB,EACtB,iBAAiB,EACjB,WAAW,EACX,eAAe,EACf,UAAU,EACV,UAAU,GACX,MAAM,eAAY","names":[],"ignoreList":[],"sources":["../src/index.ts"],"sourcesContent":[null]}

package/dist/index.js

@@ -0,0 +1,5 @@
+import { DEFAULT_DARK_TOKENS, DEFAULT_LIGHT_TOKENS, defaultThemeTokens, readThemeTokens } from "./theme.js";
+import { DEFAULT_CDN_ORIGINS, buildCsp } from "./csp.js";
+import { clearWidgetStorage, createWidget, widgetStorageSalt } from "./widget.js";
+import { previewWidget } from "./preview.js";
+export { DEFAULT_CDN_ORIGINS, DEFAULT_DARK_TOKENS, DEFAULT_LIGHT_TOKENS, buildCsp, clearWidgetStorage, createWidget, defaultThemeTokens, previewWidget, readThemeTokens, widgetStorageSalt };

package/dist/json-schema.d.ts

@@ -0,0 +1,70 @@
+/** The JSON Schema subset this package writes and validates. */
+export type JsonSchema = {
+    type?: JsonSchemaType | readonly JsonSchemaType[];
+    description?: string;
+    properties?: Record<string, JsonSchema>;
+    required?: readonly string[];
+    items?: JsonSchema;
+    enum?: readonly unknown[];
+    const?: unknown;
+    anyOf?: readonly JsonSchema[];
+    oneOf?: readonly JsonSchema[];
+    minItems?: number;
+    maxItems?: number;
+    minLength?: number;
+    maxLength?: number;
+    minimum?: number;
+    maximum?: number;
+    additionalProperties?: boolean | JsonSchema;
+    default?: unknown;
+};
+export type JsonSchemaType = "string" | "number" | "integer" | "boolean" | "object" | "array" | "null";
+/** A validation failure at a JSON Pointer inside the validated value. */
+export type SchemaIssue = {
+    path: string;
+    message: string;
+};
+/** The parts of a Standard Schema this package uses. */
+export type StandardSchemaLike = {
+    readonly "~standard": {
+        readonly version: 1;
+        readonly vendor: string;
+        readonly validate: (value: unknown) => StandardResult | Promise<StandardResult>;
+        readonly jsonSchema?: {
+            readonly input: (options: {
+                target: string;
+            }) => Record<string, unknown>;
+        };
+    };
+};
+type StandardResult = {
+    readonly issues?: ReadonlyArray<{
+        readonly message: string;
+        readonly path?: ReadonlyArray<PropertyKey | {
+            readonly key: PropertyKey;
+        }> | undefined;
+    }> | undefined;
+};
+export declare const isStandardSchema: (value: unknown) => value is StandardSchemaLike;
+/** JSON Schema for a schema that is either JSON Schema or a Standard Schema exposing one. */
+export declare const toJsonSchema: (schema: JsonSchema | StandardSchemaLike | undefined) => JsonSchema | undefined;
+declare const deepEqual: (a: unknown, b: unknown) => boolean;
+export { deepEqual };
+export type ValidateOptions = {
+    /** Values for which this returns true are accepted without checking, e.g. expressions. */
+    skip?: (value: unknown) => boolean;
+};
+/**
+ * Validates a value against the JSON Schema subset above and returns every
+ * issue found. Keywords outside the subset are ignored.
+ */
+export declare function validateJsonSchema(schema: JsonSchema, value: unknown, options?: ValidateOptions, path?: string): SchemaIssue[];
+/**
+ * Validates against JSON Schema or a Standard Schema. A Standard Schema that
+ * validates asynchronously is not awaited and reports no issues, and neither
+ * does one whose value contains a skipped placeholder.
+ */
+export declare function validateSchema(schema: JsonSchema | StandardSchemaLike, value: unknown, options?: ValidateOptions): SchemaIssue[];
+/** A compact TypeScript-like rendering of a schema, for prompts. */
+export declare const describeSchema: (schema: JsonSchema | undefined) => string;
+//# sourceMappingURL=json-schema.d.ts.map

package/dist/json-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.d.ts","mappings":"AAAA;AACA,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,CAAC,EAAE,cAAc,GAAG,SAAS,cAAc,EAAE;IACjD,WAAW,CAAC,EAAE,MAAM;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE;IAC5B,KAAK,CAAC,EAAE,UAAU;IAClB,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE;IACzB,KAAK,CAAC,EAAE,OAAO;IACf,KAAK,CAAC,EAAE,SAAS,UAAU,EAAE;IAC7B,KAAK,CAAC,EAAE,SAAS,UAAU,EAAE;IAC7B,QAAQ,CAAC,EAAE,MAAM;IACjB,QAAQ,CAAC,EAAE,MAAM;IACjB,SAAS,CAAC,EAAE,MAAM;IAClB,SAAS,CAAC,EAAE,MAAM;IAClB,OAAO,CAAC,EAAE,MAAM;IAChB,OAAO,CAAC,EAAE,MAAM;IAChB,oBAAoB,CAAC,EAAE,OAAO,GAAG,UAAU;IAC3C,OAAO,CAAC,EAAE,OAAO;CAClB;AAED,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,QAAQ,GACR,OAAO,GACP,MAAM;AAEV;AACA,MAAM,MAAM,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM;IAAE,OAAO,EAAE,MAAM;CAAE;AAE3D;AACA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnB,QAAQ,CAAC,MAAM,EAAE,MAAM;QACvB,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,OAAO,KACX,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,QAAQ,CAAC,UAAU,CAAC,EAAE;YACpB,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;gBAAE,MAAM,EAAE,MAAM;aAAE,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;SACzE;KACF;CACF;AAED,KAAK,cAAc,GAAG;IACpB,QAAQ,CAAC,MAAM,CAAC,EACZ,aAAa,CAAC;QACZ,QAAQ,CAAC,OAAO,EAAE,MAAM;QACxB,QAAQ,CAAC,IAAI,CAAC,EACV,aAAa,CAAC,WAAW,GAAG;YAAE,QAAQ,CAAC,GAAG,EAAE,WAAW;SAAE,CAAC,GAC1D,SAAS;KACd,CAAC,GACF,SAAS;CACd;AAED,eAAO,MAAM,gBAAgB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,kBAIiB;AAE5E;AACA,eAAO,MAAM,YAAY,GACvB,QAAQ,UAAU,GAAG,kBAAkB,GAAG,SAAS,KAClD,UAAU,GAAG,SAUf;AAmBD,cAAM,SAAS,GAAI,GAAG,OAAO,EAAE,GAAG,OAAO,KAAG,OAe3C;AAED,OAAO,EAAE,SAAS,EAAE;AAEpB,MAAM,MAAM,eAAe,GAAG;IAC5B;IACA,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO;CACnC;AAED;;;;AAIA,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,eAAoB,EAC7B,IAAI,SAAK,GACR,WAAW,EAAE;AAyIhB;;;;;AAKA,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,GAAG,kBAAkB,EACvC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,eAAoB,GAC5B,WAAW,EAAE;AA2EhB;AACA,eAAO,MAAM,cAAc,GAAI,QAAQ,UAAU,GAAG,SAAS,KAAG,MACvC","names":[],"ignoreList":[],"sources":["../src/json-schema.ts"],"sourcesContent":[null]}

package/dist/json-schema.js

@@ -0,0 +1,163 @@
+// src/json-schema.ts
+const isStandardSchema = (value) => typeof value === "object" && value !== null && "~standard" in value && typeof value["~standard"]?.validate === "function";
+/** JSON Schema for a schema that is either JSON Schema or a Standard Schema exposing one. */
+const toJsonSchema = (schema) => {
+	if (!schema) return void 0;
+	if (!isStandardSchema(schema)) return schema;
+	try {
+		return schema["~standard"].jsonSchema?.input({ target: "draft-2020-12" });
+	} catch {
+		return;
+	}
+};
+const escapeToken = (token) => String(token).replace(/~/g, "~0").replace(/\//g, "~1");
+const typeOf = (value) => {
+	if (value === null) return "null";
+	if (Array.isArray(value)) return "array";
+	if (typeof value === "number") return Number.isInteger(value) ? "integer" : "number";
+	return typeof value;
+};
+const matchesType = (value, type) => {
+	const actual = typeOf(value);
+	if (type === "number") return actual === "number" || actual === "integer";
+	return actual === type;
+};
+const deepEqual = (a, b) => {
+	if (a === b) return true;
+	if (typeof a !== "object" || typeof b !== "object" || !a || !b) return false;
+	if (Array.isArray(a) !== Array.isArray(b)) return false;
+	const keysA = Object.keys(a);
+	const keysB = Object.keys(b);
+	return keysA.length === keysB.length && keysA.every((key) => deepEqual(a[key], b[key]));
+};
+/**
+* Validates a value against the JSON Schema subset above and returns every
+* issue found. Keywords outside the subset are ignored.
+*/
+function validateJsonSchema(schema, value, options = {}, path = "") {
+	if (options.skip?.(value)) return [];
+	const issues = [];
+	const at = path || "/";
+	if (schema.anyOf || schema.oneOf) {
+		if (!(schema.anyOf ?? schema.oneOf).some((branch) => validateJsonSchema(branch, value, options, path).length === 0)) {
+			issues.push({
+				path: at,
+				message: "does not match any allowed shape"
+			});
+			return issues;
+		}
+	}
+	if (schema.type !== void 0) {
+		const types = typeof schema.type === "string" ? [schema.type] : schema.type;
+		if (!types.some((type) => matchesType(value, type))) {
+			issues.push({
+				path: at,
+				message: `expected ${types.join(" or ")}, got ${typeOf(value)}`
+			});
+			return issues;
+		}
+	}
+	if (schema.const !== void 0 && !deepEqual(schema.const, value)) issues.push({
+		path: at,
+		message: `must be ${JSON.stringify(schema.const)}`
+	});
+	if (schema.enum && !schema.enum.some((option) => deepEqual(option, value))) issues.push({
+		path: at,
+		message: `must be one of ${schema.enum.map((o) => JSON.stringify(o)).join(", ")}`
+	});
+	if (typeof value === "string") {
+		if (schema.minLength !== void 0 && value.length < schema.minLength) issues.push({
+			path: at,
+			message: `must be at least ${schema.minLength} characters`
+		});
+		if (schema.maxLength !== void 0 && value.length > schema.maxLength) issues.push({
+			path: at,
+			message: `must be at most ${schema.maxLength} characters`
+		});
+	}
+	if (typeof value === "number") {
+		if (schema.minimum !== void 0 && value < schema.minimum) issues.push({
+			path: at,
+			message: `must be >= ${schema.minimum}`
+		});
+		if (schema.maximum !== void 0 && value > schema.maximum) issues.push({
+			path: at,
+			message: `must be <= ${schema.maximum}`
+		});
+	}
+	if (Array.isArray(value)) {
+		if (schema.minItems !== void 0 && value.length < schema.minItems) issues.push({
+			path: at,
+			message: `must have at least ${schema.minItems} items`
+		});
+		if (schema.maxItems !== void 0 && value.length > schema.maxItems) issues.push({
+			path: at,
+			message: `must have at most ${schema.maxItems} items`
+		});
+		if (schema.items) value.forEach((item, index) => issues.push(...validateJsonSchema(schema.items, item, options, `${path}/${index}`)));
+	}
+	if (typeOf(value) === "object") {
+		const record = value;
+		for (const key of schema.required ?? []) if (record[key] === void 0) issues.push({
+			path: `${path}/${escapeToken(key)}`,
+			message: "is required"
+		});
+		for (const [key, child] of Object.entries(record)) {
+			const childPath = `${path}/${escapeToken(key)}`;
+			const childSchema = schema.properties?.[key];
+			if (childSchema) {
+				if (child !== void 0) issues.push(...validateJsonSchema(childSchema, child, options, childPath));
+			} else if (schema.additionalProperties === false) issues.push({
+				path: childPath,
+				message: "is not an allowed property"
+			});
+			else if (typeof schema.additionalProperties === "object") issues.push(...validateJsonSchema(schema.additionalProperties, child, options, childPath));
+		}
+	}
+	return issues;
+}
+const containsSkipped = (value, skip) => skip(value) || typeof value === "object" && value !== null && Object.values(value).some((child) => containsSkipped(child, skip));
+/**
+* Validates against JSON Schema or a Standard Schema. A Standard Schema that
+* validates asynchronously is not awaited and reports no issues, and neither
+* does one whose value contains a skipped placeholder.
+*/
+function validateSchema(schema, value, options = {}) {
+	if (!isStandardSchema(schema)) return validateJsonSchema(schema, value, options);
+	if (options.skip && containsSkipped(value, options.skip)) return [];
+	const result = schema["~standard"].validate(value);
+	if (result instanceof Promise) return [];
+	return (result.issues ?? []).map((issue) => ({
+		path: (issue.path ?? []).map((segment) => `/${escapeToken(String(typeof segment === "object" && segment !== null ? segment.key : segment))}`).join("") || "/",
+		message: issue.message
+	}));
+}
+const describeType = (schema, depth) => {
+	if (!schema) return "unknown";
+	if (schema.const !== void 0) return JSON.stringify(schema.const);
+	if (schema.enum) return schema.enum.map((o) => JSON.stringify(o)).join(" | ");
+	const branches = schema.anyOf ?? schema.oneOf;
+	if (branches) return branches.map((b) => describeType(b, depth)).join(" | ");
+	const types = schema.type === void 0 ? [] : typeof schema.type === "string" ? [schema.type] : [...schema.type];
+	if (types.length > 1) return types.map((type) => describeType({
+		...schema,
+		type
+	}, depth)).join(" | ");
+	switch (types[0]) {
+		case "integer": return "integer";
+		case "array": return `${describeType(schema.items, depth)}[]`.replace(/^(.* \| .*)\[\]$/, "($1)[]");
+		case "object": return schema.properties && depth < 3 ? describeObject(schema, depth + 1) : "object";
+		case void 0: return schema.properties ? describeObject(schema, depth + 1) : "unknown";
+		default: return types[0];
+	}
+};
+const describeObject = (schema, depth) => {
+	const required = new Set(schema.required ?? []);
+	const fields = Object.entries(schema.properties ?? {}).map(([key, child]) => `${key}${required.has(key) ? "" : "?"}: ${describeType(child, depth)}`);
+	return fields.length ? `{ ${fields.join("; ")} }` : "{}";
+};
+/** A compact TypeScript-like rendering of a schema, for prompts. */
+const describeSchema = (schema) => describeType(schema, 0);
+export { deepEqual, describeSchema, isStandardSchema, toJsonSchema, validateJsonSchema, validateSchema };
+
+//# sourceMappingURL=json-schema.js.map

package/dist/json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.js","names":[],"sources":["../src/json-schema.ts"],"sourcesContent":["/** The JSON Schema subset this package writes and validates. */\nexport type JsonSchema = {\n  type?: JsonSchemaType | readonly JsonSchemaType[];\n  description?: string;\n  properties?: Record<string, JsonSchema>;\n  required?: readonly string[];\n  items?: JsonSchema;\n  enum?: readonly unknown[];\n  const?: unknown;\n  anyOf?: readonly JsonSchema[];\n  oneOf?: readonly JsonSchema[];\n  minItems?: number;\n  maxItems?: number;\n  minLength?: number;\n  maxLength?: number;\n  minimum?: number;\n  maximum?: number;\n  additionalProperties?: boolean | JsonSchema;\n  default?: unknown;\n};\n\nexport type JsonSchemaType =\n  | \"string\"\n  | \"number\"\n  | \"integer\"\n  | \"boolean\"\n  | \"object\"\n  | \"array\"\n  | \"null\";\n\n/** A validation failure at a JSON Pointer inside the validated value. */\nexport type SchemaIssue = { path: string; message: string };\n\n/** The parts of a Standard Schema this package uses. */\nexport type StandardSchemaLike = {\n  readonly \"~standard\": {\n    readonly version: 1;\n    readonly vendor: string;\n    readonly validate: (\n      value: unknown,\n    ) => StandardResult | Promise<StandardResult>;\n    readonly jsonSchema?: {\n      readonly input: (options: { target: string }) => Record<string, unknown>;\n    };\n  };\n};\n\ntype StandardResult = {\n  readonly issues?:\n    | ReadonlyArray<{\n        readonly message: string;\n        readonly path?:\n          | ReadonlyArray<PropertyKey | { readonly key: PropertyKey }>\n          | undefined;\n      }>\n    | undefined;\n};\n\nexport const isStandardSchema = (value: unknown): value is StandardSchemaLike =>\n  typeof value === \"object\" &&\n  value !== null &&\n  \"~standard\" in value &&\n  typeof (value as StandardSchemaLike)[\"~standard\"]?.validate === \"function\";\n\n/** JSON Schema for a schema that is either JSON Schema or a Standard Schema exposing one. */\nexport const toJsonSchema = (\n  schema: JsonSchema | StandardSchemaLike | undefined,\n): JsonSchema | undefined => {\n  if (!schema) return undefined;\n  if (!isStandardSchema(schema)) return schema;\n  try {\n    return schema[\"~standard\"].jsonSchema?.input({\n      target: \"draft-2020-12\",\n    }) as JsonSchema | undefined;\n  } catch {\n    return undefined;\n  }\n};\n\nconst escapeToken = (token: string | number) =>\n  String(token).replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n\nconst typeOf = (value: unknown): JsonSchemaType => {\n  if (value === null) return \"null\";\n  if (Array.isArray(value)) return \"array\";\n  if (typeof value === \"number\")\n    return Number.isInteger(value) ? \"integer\" : \"number\";\n  return typeof value as JsonSchemaType;\n};\n\nconst matchesType = (value: unknown, type: JsonSchemaType) => {\n  const actual = typeOf(value);\n  if (type === \"number\") return actual === \"number\" || actual === \"integer\";\n  return actual === type;\n};\n\nconst deepEqual = (a: unknown, b: unknown): boolean => {\n  if (a === b) return true;\n  if (typeof a !== \"object\" || typeof b !== \"object\" || !a || !b) return false;\n  if (Array.isArray(a) !== Array.isArray(b)) return false;\n  const keysA = Object.keys(a);\n  const keysB = Object.keys(b);\n  return (\n    keysA.length === keysB.length &&\n    keysA.every((key) =>\n      deepEqual(\n        (a as Record<string, unknown>)[key],\n        (b as Record<string, unknown>)[key],\n      ),\n    )\n  );\n};\n\nexport { deepEqual };\n\nexport type ValidateOptions = {\n  /** Values for which this returns true are accepted without checking, e.g. expressions. */\n  skip?: (value: unknown) => boolean;\n};\n\n/**\n * Validates a value against the JSON Schema subset above and returns every\n * issue found. Keywords outside the subset are ignored.\n */\nexport function validateJsonSchema(\n  schema: JsonSchema,\n  value: unknown,\n  options: ValidateOptions = {},\n  path = \"\",\n): SchemaIssue[] {\n  if (options.skip?.(value)) return [];\n  const issues: SchemaIssue[] = [];\n  const at = path || \"/\";\n\n  if (schema.anyOf || schema.oneOf) {\n    const branches = (schema.anyOf ?? schema.oneOf)!;\n    const passes = branches.some(\n      (branch) => validateJsonSchema(branch, value, options, path).length === 0,\n    );\n    if (!passes) {\n      issues.push({ path: at, message: \"does not match any allowed shape\" });\n      return issues;\n    }\n  }\n\n  if (schema.type !== undefined) {\n    const types = typeof schema.type === \"string\" ? [schema.type] : schema.type;\n    if (!types.some((type) => matchesType(value, type))) {\n      issues.push({\n        path: at,\n        message: `expected ${types.join(\" or \")}, got ${typeOf(value)}`,\n      });\n      return issues;\n    }\n  }\n\n  if (schema.const !== undefined && !deepEqual(schema.const, value)) {\n    issues.push({\n      path: at,\n      message: `must be ${JSON.stringify(schema.const)}`,\n    });\n  }\n  if (schema.enum && !schema.enum.some((option) => deepEqual(option, value))) {\n    issues.push({\n      path: at,\n      message: `must be one of ${schema.enum.map((o) => JSON.stringify(o)).join(\", \")}`,\n    });\n  }\n\n  if (typeof value === \"string\") {\n    if (schema.minLength !== undefined && value.length < schema.minLength) {\n      issues.push({\n        path: at,\n        message: `must be at least ${schema.minLength} characters`,\n      });\n    }\n    if (schema.maxLength !== undefined && value.length > schema.maxLength) {\n      issues.push({\n        path: at,\n        message: `must be at most ${schema.maxLength} characters`,\n      });\n    }\n  }\n\n  if (typeof value === \"number\") {\n    if (schema.minimum !== undefined && value < schema.minimum) {\n      issues.push({ path: at, message: `must be >= ${schema.minimum}` });\n    }\n    if (schema.maximum !== undefined && value > schema.maximum) {\n      issues.push({ path: at, message: `must be <= ${schema.maximum}` });\n    }\n  }\n\n  if (Array.isArray(value)) {\n    if (schema.minItems !== undefined && value.length < schema.minItems) {\n      issues.push({\n        path: at,\n        message: `must have at least ${schema.minItems} items`,\n      });\n    }\n    if (schema.maxItems !== undefined && value.length > schema.maxItems) {\n      issues.push({\n        path: at,\n        message: `must have at most ${schema.maxItems} items`,\n      });\n    }\n    if (schema.items) {\n      value.forEach((item, index) =>\n        issues.push(\n          ...validateJsonSchema(\n            schema.items!,\n            item,\n            options,\n            `${path}/${index}`,\n          ),\n        ),\n      );\n    }\n  }\n\n  if (typeOf(value) === \"object\") {\n    const record = value as Record<string, unknown>;\n    for (const key of schema.required ?? []) {\n      if (record[key] === undefined) {\n        issues.push({\n          path: `${path}/${escapeToken(key)}`,\n          message: \"is required\",\n        });\n      }\n    }\n    for (const [key, child] of Object.entries(record)) {\n      const childPath = `${path}/${escapeToken(key)}`;\n      const childSchema = schema.properties?.[key];\n      if (childSchema) {\n        if (child !== undefined) {\n          issues.push(\n            ...validateJsonSchema(childSchema, child, options, childPath),\n          );\n        }\n      } else if (schema.additionalProperties === false) {\n        issues.push({ path: childPath, message: \"is not an allowed property\" });\n      } else if (typeof schema.additionalProperties === \"object\") {\n        issues.push(\n          ...validateJsonSchema(\n            schema.additionalProperties,\n            child,\n            options,\n            childPath,\n          ),\n        );\n      }\n    }\n  }\n\n  return issues;\n}\n\nconst containsSkipped = (\n  value: unknown,\n  skip: (value: unknown) => boolean,\n): boolean =>\n  skip(value) ||\n  (typeof value === \"object\" &&\n    value !== null &&\n    Object.values(value).some((child) => containsSkipped(child, skip)));\n\n/**\n * Validates against JSON Schema or a Standard Schema. A Standard Schema that\n * validates asynchronously is not awaited and reports no issues, and neither\n * does one whose value contains a skipped placeholder.\n */\nexport function validateSchema(\n  schema: JsonSchema | StandardSchemaLike,\n  value: unknown,\n  options: ValidateOptions = {},\n): SchemaIssue[] {\n  if (!isStandardSchema(schema)) {\n    return validateJsonSchema(schema, value, options);\n  }\n  // A Standard Schema cannot be told to accept placeholders, so values that\n  // contain one are left to the component.\n  if (options.skip && containsSkipped(value, options.skip)) return [];\n  const result = schema[\"~standard\"].validate(value);\n  if (result instanceof Promise) return [];\n  return (result.issues ?? []).map((issue) => ({\n    path:\n      (issue.path ?? [])\n        .map(\n          (segment) =>\n            `/${escapeToken(\n              String(\n                typeof segment === \"object\" && segment !== null\n                  ? segment.key\n                  : segment,\n              ),\n            )}`,\n        )\n        .join(\"\") || \"/\",\n    message: issue.message,\n  }));\n}\n\nconst describeType = (\n  schema: JsonSchema | undefined,\n  depth: number,\n): string => {\n  if (!schema) return \"unknown\";\n  if (schema.const !== undefined) return JSON.stringify(schema.const);\n  if (schema.enum) return schema.enum.map((o) => JSON.stringify(o)).join(\" | \");\n  const branches = schema.anyOf ?? schema.oneOf;\n  if (branches) return branches.map((b) => describeType(b, depth)).join(\" | \");\n  const types =\n    schema.type === undefined\n      ? []\n      : typeof schema.type === \"string\"\n        ? [schema.type]\n        : [...schema.type];\n  if (types.length > 1) {\n    return types\n      .map((type) => describeType({ ...schema, type }, depth))\n      .join(\" | \");\n  }\n  switch (types[0]) {\n    case \"integer\":\n      return \"integer\";\n    case \"array\":\n      return `${describeType(schema.items, depth)}[]`.replace(\n        /^(.* \\| .*)\\[\\]$/,\n        \"($1)[]\",\n      );\n    case \"object\":\n      return schema.properties && depth < 3\n        ? describeObject(schema, depth + 1)\n        : \"object\";\n    case undefined:\n      return schema.properties ? describeObject(schema, depth + 1) : \"unknown\";\n    default:\n      return types[0];\n  }\n};\n\nconst describeObject = (schema: JsonSchema, depth: number): string => {\n  const required = new Set(schema.required ?? []);\n  const fields = Object.entries(schema.properties ?? {}).map(\n    ([key, child]) =>\n      `${key}${required.has(key) ? \"\" : \"?\"}: ${describeType(child, depth)}`,\n  );\n  return fields.length ? `{ ${fields.join(\"; \")} }` : \"{}\";\n};\n\n/** A compact TypeScript-like rendering of a schema, for prompts. */\nexport const describeSchema = (schema: JsonSchema | undefined): string =>\n  describeType(schema, 0);\n"],"mappings":";AA0DA,MAAa,oBAAoB,UAC/B,OAAO,UAAU,YACjB,UAAU,QACV,eAAe,SACf,OAAQ,MAA6B,YAAY,EAAE,aAAa;;AAGlE,MAAa,gBACX,WAC2B;CAC3B,IAAI,CAAC,QAAQ,OAAO,KAAA;CACpB,IAAI,CAAC,iBAAiB,MAAM,GAAG,OAAO;CACtC,IAAI;EACF,OAAO,OAAO,YAAY,CAAC,YAAY,MAAM,EAC3C,QAAQ,gBACV,CAAC;CACH,QAAQ;EACN;CACF;AACF;AAEA,MAAM,eAAe,UACnB,OAAO,KAAK,CAAC,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAC,QAAQ,OAAO,IAAI;AAEvD,MAAM,UAAU,UAAmC;CACjD,IAAI,UAAU,MAAM,OAAO;CAC3B,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO;CACjC,IAAI,OAAO,UAAU,UACnB,OAAO,OAAO,UAAU,KAAK,IAAI,YAAY;CAC/C,OAAO,OAAO;AAChB;AAEA,MAAM,eAAe,OAAgB,SAAyB;CAC5D,MAAM,SAAS,OAAO,KAAK;CAC3B,IAAI,SAAS,UAAU,OAAO,WAAW,YAAY,WAAW;CAChE,OAAO,WAAW;AACpB;AAEA,MAAM,aAAa,GAAY,MAAwB;CACrD,IAAI,MAAM,GAAG,OAAO;CACpB,IAAI,OAAO,MAAM,YAAY,OAAO,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,OAAO;CACvE,IAAI,MAAM,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,GAAG,OAAO;CAClD,MAAM,QAAQ,OAAO,KAAK,CAAC;CAC3B,MAAM,QAAQ,OAAO,KAAK,CAAC;CAC3B,OACE,MAAM,WAAW,MAAM,UACvB,MAAM,OAAO,QACX,UACG,EAA8B,MAC9B,EAA8B,IACjC,CACF;AAEJ;;;;;AAaA,SAAgB,mBACd,QACA,OACA,UAA2B,CAAC,GAC5B,OAAO,IACQ;CACf,IAAI,QAAQ,OAAO,KAAK,GAAG,OAAO,CAAC;CACnC,MAAM,SAAwB,CAAC;CAC/B,MAAM,KAAK,QAAQ;CAEnB,IAAI,OAAO,SAAS,OAAO,OAKrB;MAAA,EAJc,OAAO,SAAS,OAAO,MAAA,CACjB,MACrB,WAAW,mBAAmB,QAAQ,OAAO,SAAS,IAAI,CAAC,CAAC,WAAW,CAEhE,GAAG;GACX,OAAO,KAAK;IAAE,MAAM;IAAI,SAAS;GAAmC,CAAC;GACrE,OAAO;EACT;;CAGF,IAAI,OAAO,SAAS,KAAA,GAAW;EAC7B,MAAM,QAAQ,OAAO,OAAO,SAAS,WAAW,CAAC,OAAO,IAAI,IAAI,OAAO;EACvE,IAAI,CAAC,MAAM,MAAM,SAAS,YAAY,OAAO,IAAI,CAAC,GAAG;GACnD,OAAO,KAAK;IACV,MAAM;IACN,SAAS,YAAY,MAAM,KAAK,MAAM,EAAE,QAAQ,OAAO,KAAK;GAC9D,CAAC;GACD,OAAO;EACT;CACF;CAEA,IAAI,OAAO,UAAU,KAAA,KAAa,CAAC,UAAU,OAAO,OAAO,KAAK,GAC9D,OAAO,KAAK;EACV,MAAM;EACN,SAAS,WAAW,KAAK,UAAU,OAAO,KAAK;CACjD,CAAC;CAEH,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,MAAM,WAAW,UAAU,QAAQ,KAAK,CAAC,GACvE,OAAO,KAAK;EACV,MAAM;EACN,SAAS,kBAAkB,OAAO,KAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;CAChF,CAAC;CAGH,IAAI,OAAO,UAAU,UAAU;EAC7B,IAAI,OAAO,cAAc,KAAA,KAAa,MAAM,SAAS,OAAO,WAC1D,OAAO,KAAK;GACV,MAAM;GACN,SAAS,oBAAoB,OAAO,UAAU;EAChD,CAAC;EAEH,IAAI,OAAO,cAAc,KAAA,KAAa,MAAM,SAAS,OAAO,WAC1D,OAAO,KAAK;GACV,MAAM;GACN,SAAS,mBAAmB,OAAO,UAAU;EAC/C,CAAC;CAEL;CAEA,IAAI,OAAO,UAAU,UAAU;EAC7B,IAAI,OAAO,YAAY,KAAA,KAAa,QAAQ,OAAO,SACjD,OAAO,KAAK;GAAE,MAAM;GAAI,SAAS,cAAc,OAAO;EAAU,CAAC;EAEnE,IAAI,OAAO,YAAY,KAAA,KAAa,QAAQ,OAAO,SACjD,OAAO,KAAK;GAAE,MAAM;GAAI,SAAS,cAAc,OAAO;EAAU,CAAC;CAErE;CAEA,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxB,IAAI,OAAO,aAAa,KAAA,KAAa,MAAM,SAAS,OAAO,UACzD,OAAO,KAAK;GACV,MAAM;GACN,SAAS,sBAAsB,OAAO,SAAS;EACjD,CAAC;EAEH,IAAI,OAAO,aAAa,KAAA,KAAa,MAAM,SAAS,OAAO,UACzD,OAAO,KAAK;GACV,MAAM;GACN,SAAS,qBAAqB,OAAO,SAAS;EAChD,CAAC;EAEH,IAAI,OAAO,OACT,MAAM,SAAS,MAAM,UACnB,OAAO,KACL,GAAG,mBACD,OAAO,OACP,MACA,SACA,GAAG,KAAK,GAAG,OACb,CACF,CACF;CAEJ;CAEA,IAAI,OAAO,KAAK,MAAM,UAAU;EAC9B,MAAM,SAAS;EACf,KAAK,MAAM,OAAO,OAAO,YAAY,CAAC,GACpC,IAAI,OAAO,SAAS,KAAA,GAClB,OAAO,KAAK;GACV,MAAM,GAAG,KAAK,GAAG,YAAY,GAAG;GAChC,SAAS;EACX,CAAC;EAGL,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG;GACjD,MAAM,YAAY,GAAG,KAAK,GAAG,YAAY,GAAG;GAC5C,MAAM,cAAc,OAAO,aAAa;GACxC,IAAI,aACE;QAAA,UAAU,KAAA,GACZ,OAAO,KACL,GAAG,mBAAmB,aAAa,OAAO,SAAS,SAAS,CAC9D;GAAA,OAEG,IAAI,OAAO,yBAAyB,OACzC,OAAO,KAAK;IAAE,MAAM;IAAW,SAAS;GAA6B,CAAC;QACjE,IAAI,OAAO,OAAO,yBAAyB,UAChD,OAAO,KACL,GAAG,mBACD,OAAO,sBACP,OACA,SACA,SACF,CACF;EAEJ;CACF;CAEA,OAAO;AACT;AAEA,MAAM,mBACJ,OACA,SAEA,KAAK,KAAK,KACT,OAAO,UAAU,YAChB,UAAU,QACV,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,UAAU,gBAAgB,OAAO,IAAI,CAAC;;;;;;AAOrE,SAAgB,eACd,QACA,OACA,UAA2B,CAAC,GACb;CACf,IAAI,CAAC,iBAAiB,MAAM,GAC1B,OAAO,mBAAmB,QAAQ,OAAO,OAAO;CAIlD,IAAI,QAAQ,QAAQ,gBAAgB,OAAO,QAAQ,IAAI,GAAG,OAAO,CAAC;CAClE,MAAM,SAAS,OAAO,YAAY,CAAC,SAAS,KAAK;CACjD,IAAI,kBAAkB,SAAS,OAAO,CAAC;CACvC,QAAQ,OAAO,UAAU,CAAC,EAAA,CAAG,KAAK,WAAW;EAC3C,OACG,MAAM,QAAQ,CAAC,EAAA,CACb,KACE,YACC,IAAI,YACF,OACE,OAAO,YAAY,YAAY,YAAY,OACvC,QAAQ,MACR,OACN,CACF,GACJ,CAAC,CACA,KAAK,EAAE,KAAK;EACjB,SAAS,MAAM;CACjB,EAAE;AACJ;AAEA,MAAM,gBACJ,QACA,UACW;CACX,IAAI,CAAC,QAAQ,OAAO;CACpB,IAAI,OAAO,UAAU,KAAA,GAAW,OAAO,KAAK,UAAU,OAAO,KAAK;CAClE,IAAI,OAAO,MAAM,OAAO,OAAO,KAAK,KAAK,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;CAC5E,MAAM,WAAW,OAAO,SAAS,OAAO;CACxC,IAAI,UAAU,OAAO,SAAS,KAAK,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;CAC3E,MAAM,QACJ,OAAO,SAAS,KAAA,IACZ,CAAC,IACD,OAAO,OAAO,SAAS,WACrB,CAAC,OAAO,IAAI,IACZ,CAAC,GAAG,OAAO,IAAI;CACvB,IAAI,MAAM,SAAS,GACjB,OAAO,MACJ,KAAK,SAAS,aAAa;EAAE,GAAG;EAAQ;CAAK,GAAG,KAAK,CAAC,CAAC,CACvD,KAAK,KAAK;CAEf,QAAQ,MAAM,IAAd;EACE,KAAK,WACH,OAAO;EACT,KAAK,SACH,OAAO,GAAG,aAAa,OAAO,OAAO,KAAK,EAAE,IAAI,QAC9C,oBACA,QACF;EACF,KAAK,UACH,OAAO,OAAO,cAAc,QAAQ,IAChC,eAAe,QAAQ,QAAQ,CAAC,IAChC;EACN,KAAK,KAAA,GACH,OAAO,OAAO,aAAa,eAAe,QAAQ,QAAQ,CAAC,IAAI;EACjE,SACE,OAAO,MAAM;CACjB;AACF;AAEA,MAAM,kBAAkB,QAAoB,UAA0B;CACpE,MAAM,WAAW,IAAI,IAAI,OAAO,YAAY,CAAC,CAAC;CAC9C,MAAM,SAAS,OAAO,QAAQ,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,KACpD,CAAC,KAAK,WACL,GAAG,MAAM,SAAS,IAAI,GAAG,IAAI,KAAK,IAAI,IAAI,aAAa,OAAO,KAAK,GACvE;CACA,OAAO,OAAO,SAAS,KAAK,OAAO,KAAK,IAAI,EAAE,MAAM;AACtD;;AAGA,MAAa,kBAAkB,WAC7B,aAAa,QAAQ,CAAC"}

package/dist/preview.d.ts

@@ -0,0 +1,30 @@
+import type { ColorScheme, ConsoleEntry, WidgetError, WidgetKind } from "./protocol.js";
+import { type CreateWidgetOptions } from "./widget.js";
+export type PreviewOptions = Pick<CreateWidgetOptions, "product" | "frame" | "id" | "unsafeShimDomain" | "opaqueOrigin" | "csp" | "css" | "readyTimeoutMs"> & {
+    /** Layout width in CSS pixels. Defaults to 680. */
+    width?: number;
+    appearance?: ColorScheme;
+    tokens?: CreateWidgetOptions["tokens"];
+    /** Capture a PNG. Defaults to true. */
+    screenshot?: boolean;
+    /** Time to let scripts, fonts, and animations settle after `end`. Defaults to 600ms. */
+    settleMs?: number;
+};
+export type PreviewResult = {
+    ok: boolean;
+    kind: WidgetKind;
+    width: number;
+    height: number;
+    blank: boolean;
+    errors: WidgetError[];
+    console: ConsoleEntry[];
+    screenshot?: string;
+    /** Why the screenshot is missing, when capture was requested and failed. */
+    screenshotError?: string;
+};
+/**
+ * Renders complete widget code in an offscreen frame and reports what
+ * happened: errors, console output, size, blank detection, and a screenshot.
+ */
+export declare function previewWidget(code: string, options?: PreviewOptions): Promise<PreviewResult>;
+//# sourceMappingURL=preview.d.ts.map

package/dist/preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview.d.ts","mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,YAAY,EACZ,WAAW,EACX,UAAU,EACX,MAAM,eAAY;AAEnB,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,aAAU;AAEjB,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,mBAAmB,EACjB,SAAS,GACT,OAAO,GACP,IAAI,GACJ,kBAAkB,GAClB,cAAc,GACd,KAAK,GACL,KAAK,GACL,gBAAgB,CACnB,GAAG;IACF;IACA,KAAK,CAAC,EAAE,MAAM;IACd,UAAU,CAAC,EAAE,WAAW;IACxB,MAAM,CAAC,EAAE,mBAAmB,CAAC,QAAQ,CAAC;IACtC;IACA,UAAU,CAAC,EAAE,OAAO;IACpB;IACA,QAAQ,CAAC,EAAE,MAAM;CAClB;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,MAAM;IACb,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,WAAW,EAAE;IACrB,OAAO,EAAE,YAAY,EAAE;IACvB,UAAU,CAAC,EAAE,MAAM;IACnB;IACA,eAAe,CAAC,EAAE,MAAM;CACzB;AAED;;;;AAIA,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,aAAa,CAAC","names":[],"ignoreList":[],"sources":["../src/preview.ts"],"sourcesContent":[null]}