anentrypoint-design 0.0.353 → 0.0.355

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "anentrypoint-design",
-  "version": "0.0.353",
+  "version": "0.0.355",
   "description": "247420 design system SDK — webjsx + modified ripple-ui, single-file ESM bundle for reproducible use of the AnEntrypoint design.",
   "type": "module",
   "main": "./dist/247420.js",
@@ -30,6 +30,11 @@
       "default": "./src/lint.js"
     },
     "./package.json": "./package.json",
+    "./kits/flatspace-theme": {
+      "import": "./src/kits/flatspace-theme/index.js",
+      "default": "./src/kits/flatspace-theme/index.js"
+    },
+    "./kits/flatspace-theme/html-utils.js": "./src/kits/flatspace-theme/html-utils.js",
     "./kits/os": {
       "import": "./src/kits/os/index.js",
       "default": "./src/kits/os/index.js"

package/src/components/overlay-primitives.js

@@ -315,6 +315,40 @@ export function PermissionMenu({ trigger, categories = [], approved = [], onTogg
         : h('button', { type: 'button', class: 'ov-perm-trigger', ref: refFn }, child || 'Permissions');
 }
 
+// ApprovalPrompt — an inline, in-thread tool-permission card (as opposed to
+// PermissionMenu's settings-style dropdown): shows the tool name + an
+// optional args preview, an optional free-text note the user can attach to
+// their decision (auto-focused, since the note is usually the primary
+// reason to open this card at all), and up to four resolution actions
+// (once/session/all/deny). Mirrors docstudio's chat-approval-prompts.js
+// buildApprovalPrompt shape. The note textarea is entirely optional -
+// omitting `onDecision`'s use of the note arg keeps existing simpler
+// once/deny-only call sites unaffected.
+export function ApprovalPrompt({ toolName, categoryLabel, argsPreview, onDecision, autoFocusNote = true } = {}) {
+    let noteEl = null;
+    const noteRef = (el) => {
+        if (!el || noteEl === el) return;
+        noteEl = el;
+        if (autoFocusNote) queueMicrotask(() => noteEl && noteEl.focus());
+    };
+    const decide = (kind) => { if (onDecision) onDecision(kind, (noteEl && noteEl.value || '').trim()); };
+    return h('div', { class: 'ov-approval', role: 'group', 'aria-label': toolName ? `Permission requested: ${toolName}` : 'Permission requested' },
+        h('div', { class: 'ov-approval-head' },
+            h('span', { class: 'ov-approval-icon' }, Icon('lock', { size: 16 })),
+            h('strong', { class: 'ov-approval-tool' }, toolName || ''),
+            categoryLabel ? h('span', { class: 'ov-approval-cat' }, '- ' + categoryLabel) : null),
+        argsPreview ? h('pre', { class: 'ov-approval-args' }, argsPreview) : null,
+        h('textarea', {
+            class: 'ov-approval-note', ref: noteRef,
+            placeholder: 'Add instructions for the assistant (optional)...',
+        }),
+        h('div', { class: 'ov-approval-actions' },
+            h('button', { type: 'button', class: 'ov-approval-btn ov-approval-btn-primary', onclick: () => decide('once') }, 'Allow once'),
+            h('button', { type: 'button', class: 'ov-approval-btn ov-approval-btn-soft', onclick: () => decide('session') }, 'Allow for session'),
+            h('button', { type: 'button', class: 'ov-approval-btn', onclick: () => decide('all') }, 'Allow all'),
+            h('button', { type: 'button', class: 'ov-approval-btn ov-approval-btn-deny', onclick: () => decide('deny') }, 'Deny')));
+}
+
 // Clamp a fixed-position box to the viewport given desired top-left coords.
 function _clampToViewport(x, y, w, h, margin = CLAMP_MARGIN) {
     const vw = (typeof window !== 'undefined' ? window.innerWidth : 1024);

package/src/components/shell.js

@@ -143,6 +143,7 @@ export function Glyph({ children, color, size = 'base', label } = {}) {
 // Monochrome inline-SVG icons (stroke=currentColor) so chrome reads as one
 // coherent line-icon set instead of multicolor OS emoji. 16px box, 1.6 stroke.
 export const ICON_PATHS = {
+    lock: '<rect x="4" y="10" width="16" height="11" rx="2"/><path d="M8 10V7a4 4 0 0 1 8 0v3"/>',
     mic: '<path d="M12 3a3 3 0 0 0-3 3v5a3 3 0 0 0 6 0V6a3 3 0 0 0-3-3z"/><path d="M5 11a7 7 0 0 0 14 0M12 18v3"/>',
     'mic-off': '<path d="M9 9v2a3 3 0 0 0 4.5 2.6M15 11V6a3 3 0 0 0-5.9-.8"/><path d="M5 11a7 7 0 0 0 11.5 5.4M12 18v3"/><path d="m4 4 16 16"/>',
     speaker: '<path d="M11 5 6 9H3v6h3l5 4z"/><path d="M15.5 8.5a5 5 0 0 1 0 7M18.5 5.5a9 9 0 0 1 0 13"/>',

package/src/components.js

@@ -90,7 +90,7 @@ export {
 export {
     Tooltip, Popover, Dropdown, useLongPress, useFloating,
     CommandPalette, EmojiPicker, BootOverlay, SettingsPopover,
-    AuthModal, VideoLightbox, PermissionMenu
+    AuthModal, VideoLightbox, PermissionMenu, ApprovalPrompt
 } from './components/overlay-primitives.js';
 
 export {

package/src/kits/flatspace-theme/html-utils.js

@@ -0,0 +1,62 @@
+// Shared HTML/JSON escaping + raw-HTML article extraction utilities for
+// flatspace `theme.mjs` renderers (rs-codeinsight, rs-plugkit, gm, and any
+// future flatspace site consuming the AnEntrypoint design system).
+//
+// escapeHtml/escapeJson are used by every known theme.mjs verbatim (byte-
+// identical across rs-codeinsight and rs-plugkit prior to this extraction).
+// extractArticle/rewriteLegacyLinks are OPT-IN: only sites with
+// layout:'article' pages sourced from raw pre-existing HTML docs (gm's
+// docs/*.html papers) need them. A single-page or YAML-only site never calls
+// them, so importing this module carries no cost for sites that don't.
+
+export const escapeHtml = (s) => String(s ?? '')
+  .replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
+  .replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+
+export const escapeJson = (obj) => JSON.stringify(obj)
+  .replace(/</g, '\\u003c').replace(/>/g, '\\u003e').replace(/&/g, '\\u0026')
+  .replace(new RegExp('\\u2028', 'g'), '\\u2028').replace(new RegExp('\\u2029', 'g'), '\\u2029');
+
+// Strips <header>/<footer> chrome and the <html>/<head>/<body> wrapper from a
+// raw standalone HTML document, returning just the body's inner content for
+// re-hosting inside a flatspace-rendered article shell. Opt-in: only called
+// by sites with layout:'article' pages whose `source` field points at a raw
+// pre-existing .html file (gm's docs/paper.html etc).
+export function extractArticle(html) {
+  const bodyOpen = html.search(/<body[^>]*>/i);
+  if (bodyOpen < 0) return html;
+  const bodyStart = html.indexOf('>', bodyOpen) + 1;
+  const bodyEnd = html.lastIndexOf('</body>');
+  let body = html.slice(bodyStart, bodyEnd >= 0 ? bodyEnd : html.length);
+  body = body.replace(/<header[^>]*>[\s\S]*?<\/header>/gi, '');
+  body = body.replace(/<footer\b[^>]*>[\s\S]*?<\/footer>/gi, '');
+  return body.trim();
+}
+
+// Rewrites legacy same-site relative .html links (paper.html, distribution.html,
+// etc) found inside extracted article HTML into flatspace's route paths
+// (/paper/, /distribution/, ...), given the caller's own slug->path map.
+// Opt-in, same scope as extractArticle: only needed when article HTML
+// predates the flatspace multi-page routing and still uses .html-relative
+// hrefs. `slugToPath` defaults to gm's known page set but callers with a
+// different page inventory pass their own map.
+const DEFAULT_SLUGS = ['index', 'paper', 'distribution', 'made-with', 'stats', 'crates', 'skills'];
+const DEFAULT_SLUG_TO_PATH = {
+  index: '/', paper: '/paper/', distribution: '/distribution/',
+  'made-with': '/made-with/', stats: '/stats/', crates: '/crates/', skills: '/skills/',
+};
+
+export function rewriteLegacyLinks(html, basePath, opts = {}) {
+  const slugs = opts.slugs || DEFAULT_SLUGS;
+  const slugToPath = opts.slugToPath || DEFAULT_SLUG_TO_PATH;
+  return html.replace(/href="([^"]+)"/g, (full, hrefRaw) => {
+    const href = hrefRaw.trim();
+    if (/^(https?:)?\/\//i.test(href) || href.startsWith('#') || href.startsWith('mailto:') || href.startsWith('/')) return full;
+    let path = href, hash = '';
+    const hi = path.indexOf('#');
+    if (hi >= 0) { hash = path.slice(hi); path = path.slice(0, hi); }
+    path = path.replace(/^\.\//, '').replace(/\.html$/, '').replace(/\/$/, '');
+    if (slugs.includes(path)) return `href="${basePath}${slugToPath[path]}${hash}"`;
+    return full;
+  });
+}

package/src/kits/flatspace-theme/index.js

@@ -0,0 +1,14 @@
+// Public entry point for the flatspace-theme kit. Re-exports the shared
+// escaping + opt-in article-extraction utilities every known flatspace
+// theme.mjs (rs-codeinsight, rs-plugkit, gm) needs. Each site's own
+// page-composition logic (component layout, data contract) stays local to
+// its own site/theme.mjs -- that part legitimately differs per site (single-
+// page Hero/Features/Quickstart vs gm's multi-page article/landing split)
+// and is not force-unified here.
+export { escapeHtml, escapeJson, extractArticle, rewriteLegacyLinks } from './html-utils.js';
+
+// Canonical unpkg URLs every theme.mjs's importmap/<link> points at, kept in
+// one place so a future SDK CDN path change is a single-file edit instead of
+// a 3-repo grep-and-replace.
+export const SDK_CSS_URL = 'https://unpkg.com/anentrypoint-design@latest/dist/247420.css';
+export const SDK_JS_URL = 'https://unpkg.com/anentrypoint-design@latest/dist/247420.js';