ngwr 13.0.0 → 13.0.1

package/fesm2022/ngwr-icon.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ngwr-icon.mjs","sources":["../../../projects/lib/icon/tokens/icon.token.ts","../../../projects/lib/icon/icon-registry.ts","../../../projects/lib/icon/icon.ts","../../../projects/lib/icon/utils/validate-icon.ts","../../../projects/lib/icon/providers/provide-wr-icons.ts","../../../projects/lib/icon/svg-icon.ts","../../../projects/lib/icon/ngwr-icon.ts"],"sourcesContent":["/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport { InjectionToken } from '@angular/core';\n\nimport type { WrIconDef } from '../interfaces';\n\n/**\n * Multi-provider token for registering icons with the icon registry.\n *\n * Use {@link provideWrIcons} instead of providing this token directly.\n *\n * @internal\n */\nexport const WR_ICONS = new InjectionToken<readonly WrIconDef[][]>('WR_ICONS');\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport { Injectable, inject } from '@angular/core';\n\nimport type { WrIconDef } from './interfaces';\nimport { WR_ICONS } from './tokens';\n\n/**\n * One link in the icon-registry chain. {@link provideWrIcons} provides an\n * instance alongside its icons, so every injector level that registers icons\n * gets its own link whose parent is the next registering level above it.\n *\n * This exists because Angular does not merge `multi: true` providers across\n * injector levels — an element-level `provideWrIcons()` *replaces* the visible\n * `WR_ICONS` collection rather than adding to it. Reading only the closest\n * contribution silently hid every icon registered further up, which contradicts\n * the \"each call adds to the registry\" contract. Walking the chain restores it\n * for any number of levels.\n *\n * @internal\n */\n@Injectable()\nexport class WrIconRegistry {\n  /** The next registering level up, if any. */\n  private readonly parent = inject(WrIconRegistry, { skipSelf: true, optional: true });\n\n  /** Icons registered at *this* level only. */\n  private readonly own = inject(WR_ICONS, { self: true, optional: true }) ?? [];\n\n  /**\n   * Every icon visible from this level, nearest last so a local registration\n   * wins over an identically named one further up.\n   */\n  resolve(): Map<string, WrIconDef> {\n    const map = this.parent?.resolve() ?? new Map<string, WrIconDef>();\n    for (const set of this.own) {\n      for (const icon of set) map.set(icon.name, icon);\n    }\n    return map;\n  }\n}\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport { Component, ElementRef, ViewEncapsulation, computed, effect, inject, input, isDevMode } from '@angular/core';\n\nimport { WrIconRegistry } from './icon-registry';\nimport type { WrIconDef, WrIconName } from './interfaces';\n\n/**\n * Renders a registered SVG icon.\n *\n * Icons must be registered via {@link provideWrIcons} before use —\n * either at the application root or on any ancestor component.\n *\n * @example\n * ```html\n * <wr-icon name=\"home\" />\n * ```\n *\n * @see https://ngwr.dev/reference/components/icon\n */\n@Component({\n  selector: 'wr-icon',\n  template: '',\n  encapsulation: ViewEncapsulation.None,\n  host: {\n    class: 'wr-icon',\n    '[attr.data-icon]': 'name()',\n  },\n})\nexport class WrIcon {\n  readonly name = input.required<WrIconName>();\n\n  private readonly host = inject<ElementRef<HTMLElement>>(ElementRef);\n\n  /**\n   * Every icon visible from this position, walked up the whole chain of\n   * registering injector levels.\n   *\n   * Angular's `inject(WR_ICONS)` returns only the **closest** injector's\n   * contribution — `multi` providers are not merged across levels — so a\n   * component that registers its own icons used to shadow, not extend, what an\n   * ancestor registered. {@link WrIconRegistry} is provided once per\n   * registering level and links to its parent, so nesting any number of levels\n   * now adds up, with the nearest registration winning a name collision.\n   *\n   * Optional: with no `provideWrIcons()` anywhere the map is simply empty and\n   * every name reports as unregistered.\n   */\n  private readonly iconRegistry = inject(WrIconRegistry, { optional: true });\n\n  private readonly registry = computed<ReadonlyMap<WrIconName, WrIconDef>>(\n    () => (this.iconRegistry?.resolve() ?? new Map()) as ReadonlyMap<WrIconName, WrIconDef>\n  );\n\n  private readonly icon = computed(() => this.registry().get(this.name()));\n\n  constructor() {\n    effect(() => {\n      const icon = this.icon();\n      const name = this.name();\n\n      if (!icon) {\n        if (isDevMode()) {\n          // Reported, never thrown. An exception here escapes into\n          // `runEffectsInView`, which abandons the remaining effects of the\n          // whole view — one unknown name would blank every `<wr-icon>` after\n          // it while the console blamed only the first. Error level (not\n          // `badgeLog`) so it survives a console filtered to errors.\n          // eslint-disable-next-line no-console -- misconfiguration must be visible, but must not throw\n          console.error(\n            `[NGWR] No icon named \"${name}\" is registered. Did you forget to call provideWrIcons()? ` +\n              `If the name IS registered, check the injector level: a component-level provideWrIcons() ` +\n              `shadows icons registered on an ancestor component.`\n          );\n        }\n        this.host.nativeElement.innerHTML = '';\n        return;\n      }\n\n      this.host.nativeElement.innerHTML = icon.data;\n\n      // Every hand-written inline SVG in the library carries aria-hidden;\n      // registered icons went in without it, so a decorative glyph could be\n      // announced — usually as a bare \"graphic\" beside the label it decorates.\n      // Consumers that need a name put it on the interactive host instead.\n      this.host.nativeElement.querySelector('svg')?.setAttribute('aria-hidden', 'true');\n    });\n  }\n}\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport type { WrIconDef } from '../interfaces';\n\nconst VIEW_BOX_RE = /<svg\\b[^>]*\\bviewBox\\s*=/i;\nconst SVG_ROOT_RE = /<svg\\b/i;\n\n/**\n * Dev-mode sanity check for a registered icon.\n *\n * Warns about issues that prevent correct rendering — most importantly,\n * a missing `viewBox`, which causes the SVG not to scale to the icon\n * host's size.\n *\n * Production builds drop the call entirely via `isDevMode()` tree-shaking.\n *\n * @internal\n */\nexport function validateIcon(icon: WrIconDef): void {\n  if (!SVG_ROOT_RE.test(icon.data)) {\n    // eslint-disable-next-line no-console -- dev-mode validation\n    console.warn(\n      `[NGWR] Icon \"${icon.name}\" data does not contain an <svg> root element. ` +\n        `Custom icons must be valid SVG markup.`\n    );\n    return;\n  }\n\n  if (!VIEW_BOX_RE.test(icon.data)) {\n    // eslint-disable-next-line no-console -- dev-mode validation\n    console.warn(\n      `[NGWR] Icon \"${icon.name}\" has no viewBox attribute — it won't scale ` +\n        `to the host size. Add viewBox=\"0 0 W H\" to the <svg> root.`\n    );\n  }\n}\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport { type Provider, isDevMode } from '@angular/core';\n\nimport { WrIconRegistry } from '../icon-registry';\nimport type { WrIconDef } from '../interfaces';\nimport { WR_ICONS } from '../tokens';\nimport { validateIcon } from '../utils';\n\n/**\n * Registers a set of icons for use by `<wr-icon>`.\n *\n * Can be called multiple times — each call adds to the registry.\n * Works at both the application root and at the component level,\n * so a feature module or a single component can bring its own icons\n * without polluting the global config.\n *\n * In dev mode, each icon is validated for common issues (missing\n * `viewBox`, malformed root). Validation is dropped from production\n * builds via `isDevMode()` tree-shaking.\n *\n * @example\n * ```ts\n * // App-level registration\n * import { home, user, cog, provideWrIcons } from 'ngwr/icon';\n *\n * export const appConfig: ApplicationConfig = {\n *   providers: [\n *     provideWrIcons([home, user, cog]),\n *   ],\n * };\n * ```\n *\n * @example\n * ```ts\n * // Component-level registration\n * import { logoGithub, logoNpm, provideWrIcons, WrIconDef } from 'ngwr/icon';\n *\n * @Component({\n *   selector: 'ngwr-header',\n *   imports: [WrIcon],\n *   providers: [provideWrIcons([logoGithub, logoNpm])],\n *   template: `<wr-icon name=\"logo-github\" />`,\n * })\n * export class HeaderComponent {}\n * ```\n */\nexport function provideWrIcons(icons: WrIconDef[]): Provider[] {\n  if (isDevMode()) {\n    for (const icon of icons) validateIcon(icon);\n  }\n  return [\n    { provide: WR_ICONS, useValue: icons, multi: true },\n    // A registry link per registering level. Angular does not merge `multi`\n    // providers across injectors, so without this chain an element-level\n    // registration would shadow everything registered above it instead of\n    // adding to it.\n    WrIconRegistry,\n  ];\n}\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport type { WrIconDef } from './interfaces';\n\n/**\n * Wrap a raw SVG string in the {@link WrIconDef} envelope. Use this when\n * importing icons from sources that ship full `<svg>` files — Tabler,\n * Phosphor, Heroicons, Iconoir, Radix, Bootstrap Icons, your designer.\n *\n * Pair with a bundler's raw-SVG import (Vite's `?raw`, Webpack's\n * `raw-loader`, esbuild's `--loader:.svg=text`) so the SVG file becomes\n * a string at build time.\n *\n * For sets with a non-SVG shape (Lucide's IconNode tuples, Feather's\n * inner-only SVG), use the dedicated adapter under\n * `ngwr/icon/adapters/<set>` instead.\n *\n * @example\n * ```ts\n * import { svgIcon, provideWrIcons } from 'ngwr/icon';\n * // Vite: the `?raw` suffix returns the file as a string.\n * import plusSvg from '@tabler/icons/icons/plus.svg?raw';\n * import phosphorPlusSvg from '@phosphor-icons/core/assets/regular/plus.svg?raw';\n *\n * bootstrapApplication(AppComponent, {\n *   providers: [\n *     provideWrIcons([\n *       svgIcon('plus', plusSvg),\n *       svgIcon('plus-phosphor', phosphorPlusSvg),\n *     ]),\n *   ],\n * });\n * ```\n */\nexport function svgIcon(name: string, svg: string): WrIconDef {\n  return { name, data: svg };\n}\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;AAAA;;;;;AAKG;AAMH;;;;;;AAMG;AACI,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAyB,UAAU,CAAC;;AClB9E;;;;;AAKG;AAOH;;;;;;;;;;;;;AAaG;MAEU,cAAc,CAAA;;AAER,IAAA,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;AAGnE,IAAA,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE;AAE7E;;;AAGG;IACH,OAAO,GAAA;AACL,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,GAAG,EAAqB;AAClE,QAAA,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;YAC1B,KAAK,MAAM,IAAI,IAAI,GAAG;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QAClD;AACA,QAAA,OAAO,GAAG;IACZ;uGAjBW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;2GAAd,cAAc,EAAA,CAAA;;2FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B;;;AC1BD;;;;;AAKG;AAOH;;;;;;;;;;;;AAYG;MAUU,MAAM,CAAA;IACR,IAAI,GAAG,KAAK,CAAC,QAAQ;6EAAc;AAE3B,IAAA,IAAI,GAAG,MAAM,CAA0B,UAAU,CAAC;AAEnE;;;;;;;;;;;;;AAaG;IACc,YAAY,GAAG,MAAM,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAEzD,IAAA,QAAQ,GAAG,QAAQ,CAClC,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,IAAI,GAAG,EAAE,CAAuC;iFACxF;AAEgB,IAAA,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;6EAAC;AAExE,IAAA,WAAA,GAAA;QACE,MAAM,CAAC,MAAK;AACV,YAAA,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE;AACxB,YAAA,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE;YAExB,IAAI,CAAC,IAAI,EAAE;gBACT,IAAI,SAAS,EAAE,EAAE;;;;;;;AAOf,oBAAA,OAAO,CAAC,KAAK,CACX,CAAA,sBAAA,EAAyB,IAAI,CAAA,0DAAA,CAA4D;wBACvF,CAAA,wFAAA,CAA0F;AAC1F,wBAAA,CAAA,kDAAA,CAAoD,CACvD;gBACH;gBACA,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,GAAG,EAAE;gBACtC;YACF;YAEA,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI;;;;;AAM7C,YAAA,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC;AACnF,QAAA,CAAC,CAAC;IACJ;uGA1DW,MAAM,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAAN,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,MAAM,oRAPP,EAAE,EAAA,QAAA,EAAA,IAAA,EAAA,aAAA,EAAA,EAAA,CAAA,iBAAA,CAAA,IAAA,EAAA,CAAA;;2FAOD,MAAM,EAAA,UAAA,EAAA,CAAA;kBATlB,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,SAAS;AACnB,oBAAA,QAAQ,EAAE,EAAE;oBACZ,aAAa,EAAE,iBAAiB,CAAC,IAAI;AACrC,oBAAA,IAAI,EAAE;AACJ,wBAAA,KAAK,EAAE,SAAS;AAChB,wBAAA,kBAAkB,EAAE,QAAQ;AAC7B,qBAAA;AACF,iBAAA;;;ACjCD;;;;;AAKG;AAIH,MAAM,WAAW,GAAG,2BAA2B;AAC/C,MAAM,WAAW,GAAG,SAAS;AAE7B;;;;;;;;;;AAUG;AACG,SAAU,YAAY,CAAC,IAAe,EAAA;IAC1C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;;AAEhC,QAAA,OAAO,CAAC,IAAI,CACV,gBAAgB,IAAI,CAAC,IAAI,CAAA,+CAAA,CAAiD;AACxE,YAAA,CAAA,sCAAA,CAAwC,CAC3C;QACD;IACF;IAEA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;;AAEhC,QAAA,OAAO,CAAC,IAAI,CACV,gBAAgB,IAAI,CAAC,IAAI,CAAA,4CAAA,CAA8C;AACrE,YAAA,CAAA,0DAAA,CAA4D,CAC/D;IACH;AACF;;ACxCA;;;;;AAKG;AASH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqCG;AACG,SAAU,cAAc,CAAC,KAAkB,EAAA;IAC/C,IAAI,SAAS,EAAE,EAAE;QACf,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC;IAC9C;IACA,OAAO;QACL,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE;;;;;QAKnD,cAAc;KACf;AACH;;AChEA;;;;;AAKG;AAIH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BG;AACG,SAAU,OAAO,CAAC,IAAY,EAAE,GAAW,EAAA;AAC/C,IAAA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;AAC5B;;ACzCA;;AAEG;;;;"}
+{"version":3,"file":"ngwr-icon.mjs","sources":["../../../projects/lib/icon/tokens/icon.token.ts","../../../projects/lib/icon/icon-registry.ts","../../../projects/lib/icon/utils/sanitize-icon.ts","../../../projects/lib/icon/utils/validate-icon.ts","../../../projects/lib/icon/icon.ts","../../../projects/lib/icon/providers/provide-wr-icons.ts","../../../projects/lib/icon/svg-icon.ts","../../../projects/lib/icon/ngwr-icon.ts"],"sourcesContent":["/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport { InjectionToken } from '@angular/core';\n\nimport type { WrIconDef } from '../interfaces';\n\n/**\n * Multi-provider token for registering icons with the icon registry.\n *\n * Use {@link provideWrIcons} instead of providing this token directly.\n *\n * @internal\n */\nexport const WR_ICONS = new InjectionToken<readonly WrIconDef[][]>('WR_ICONS');\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport { Injectable, inject } from '@angular/core';\n\nimport type { WrIconDef } from './interfaces';\nimport { WR_ICONS } from './tokens';\n\n/**\n * One link in the icon-registry chain. {@link provideWrIcons} provides an\n * instance alongside its icons, so every injector level that registers icons\n * gets its own link whose parent is the next registering level above it.\n *\n * This exists because Angular does not merge `multi: true` providers across\n * injector levels — an element-level `provideWrIcons()` *replaces* the visible\n * `WR_ICONS` collection rather than adding to it. Reading only the closest\n * contribution silently hid every icon registered further up, which contradicts\n * the \"each call adds to the registry\" contract. Walking the chain restores it\n * for any number of levels.\n *\n * @internal\n */\n@Injectable()\nexport class WrIconRegistry {\n  /** The next registering level up, if any. */\n  private readonly parent = inject(WrIconRegistry, { skipSelf: true, optional: true });\n\n  /** Icons registered at *this* level only. */\n  private readonly own = inject(WR_ICONS, { self: true, optional: true }) ?? [];\n\n  /**\n   * Every icon visible from this level, nearest last so a local registration\n   * wins over an identically named one further up.\n   */\n  resolve(): Map<string, WrIconDef> {\n    const map = this.parent?.resolve() ?? new Map<string, WrIconDef>();\n    for (const set of this.own) {\n      for (const icon of set) map.set(icon.name, icon);\n    }\n    return map;\n  }\n}\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nconst SVG_NS = 'http://www.w3.org/2000/svg';\nconst XLINK_NS = 'http://www.w3.org/1999/xlink';\n\n/**\n * SVG elements an icon may be built from.\n *\n * Derived from the real sets rather than guessed: across the 12 459 SVG files\n * under `icon/_svg` (Lucide, Phosphor, Tabler, Heroicons), the whole of\n * `feather-icons`' `icons.json` and every `lucide` IconNode, only eight\n * elements ever appear — `svg`, `path`, `circle`, `line`, `rect`, `polyline`,\n * `polygon`, `ellipse`. The rest of this list is headroom for the icons a\n * consumer draws themselves: grouping, `<defs>` with gradients, a clip path, a\n * mask, a `<title>`, real `<text>`.\n *\n * What is deliberately absent is the entire scripting surface:\n *\n * - `<script>` — obvious, and the one vector `innerHTML` already refused;\n * - `<foreignObject>` — an XHTML escape hatch, so `<img onerror>` inside an\n *   otherwise well-formed icon;\n * - `<image>` — its `onerror` fires on any unreachable `href`, which is the\n *   cheapest handler to land, and no real icon set uses it;\n * - `<a>` — a `javascript:` href inside a glyph the user is invited to click;\n * - `<animate>` / `<set>` / `<animateTransform>` / `<animateMotion>` — SMIL can\n *   retarget another element's `href` at a `javascript:` URL;\n * - `<style>` — arbitrary CSS in the app's origin, including `url()` requests;\n * - `<filter>` and the `fe*` primitives — `<feImage href>` is another external\n *   fetch, and no icon set in the corpus filters.\n *\n * @internal\n */\nconst ELEMENTS: ReadonlySet<string> = new Set([\n  'svg',\n  'g',\n  'defs',\n  'symbol',\n  'use',\n  'title',\n  'desc',\n  'path',\n  'circle',\n  'ellipse',\n  'line',\n  'polyline',\n  'polygon',\n  'rect',\n  'text',\n  'tspan',\n  'textPath',\n  'linearGradient',\n  'radialGradient',\n  'stop',\n  'clipPath',\n  'mask',\n  'pattern',\n]);\n\n/**\n * Attributes an icon may carry, allowed on every element it is allowed on.\n *\n * An allowlist rather than a blocklist, so `onload`, `onerror`, `onclick` and\n * every other handler — including ones no browser has shipped yet — are gone by\n * construction rather than by enumeration.\n *\n * `style` is NOT here, and that is a decision rather than an oversight: not one\n * icon in the corpus uses it, and a `style` attribute is arbitrary CSS in the\n * app's origin. Anything a `style` would have done, a presentation attribute\n * does.\n *\n * @internal\n */\nconst ATTRIBUTES: ReadonlySet<string> = new Set([\n  // geometry\n  'viewBox',\n  'preserveAspectRatio',\n  'transform',\n  'transform-origin',\n  'd',\n  'pathLength',\n  'cx',\n  'cy',\n  'r',\n  'rx',\n  'ry',\n  'x',\n  'y',\n  'x1',\n  'y1',\n  'x2',\n  'y2',\n  'dx',\n  'dy',\n  'width',\n  'height',\n  'points',\n  // paint servers, clips and masks\n  'gradientUnits',\n  'gradientTransform',\n  'spreadMethod',\n  'offset',\n  'fx',\n  'fy',\n  'fr',\n  'patternUnits',\n  'patternContentUnits',\n  'patternTransform',\n  'maskUnits',\n  'maskContentUnits',\n  'clipPathUnits',\n  // presentation\n  'fill',\n  'fill-opacity',\n  'fill-rule',\n  'stroke',\n  'stroke-width',\n  'stroke-linecap',\n  'stroke-linejoin',\n  'stroke-miterlimit',\n  'stroke-dasharray',\n  'stroke-dashoffset',\n  'stroke-opacity',\n  'opacity',\n  'color',\n  'clip-path',\n  'clip-rule',\n  'mask',\n  'paint-order',\n  'vector-effect',\n  'shape-rendering',\n  'stop-color',\n  'stop-opacity',\n  'display',\n  'visibility',\n  'overflow',\n  'isolation',\n  'mix-blend-mode',\n  // text\n  'startOffset',\n  'textLength',\n  'lengthAdjust',\n  'text-anchor',\n  'dominant-baseline',\n  'alignment-baseline',\n  'baseline-shift',\n  'font-family',\n  'font-size',\n  'font-stretch',\n  'font-style',\n  'font-variant',\n  'font-weight',\n  'letter-spacing',\n  'word-spacing',\n  'writing-mode',\n  'direction',\n  // identity, accessibility and document plumbing\n  'id',\n  'class',\n  'role',\n  'aria-hidden',\n  'aria-label',\n  'aria-labelledby',\n  'aria-describedby',\n  'aria-roledescription',\n  'focusable',\n  'lang',\n  'version',\n  'baseProfile',\n  'xmlns',\n  'xmlns:xlink',\n  'xml:space',\n  'xml:lang',\n  // resolved against ONLY_FRAGMENT below, never free-form\n  'href',\n  'xlink:href',\n]);\n\n/**\n * `href` may point at a fragment in the same document and nowhere else — that\n * is the whole legitimate use inside an icon (`<use href=\"#glyph\">`), and it\n * excludes `javascript:`, `data:` and every remote fetch in one rule.\n */\nconst FRAGMENT_ONLY: ReadonlySet<string> = new Set(['href', 'xlink:href']);\n\n/** A same-document fragment reference: `#id`, and nothing that is not one. */\nconst FRAGMENT_RE = /^#[^\\s]+$/;\n\n/**\n * `url(` inside a presentation attribute is a reference to a paint server, a\n * clip path or a mask. Those are fragment references too; a remote one is at\n * best a request the page did not ask for.\n */\nconst URL_FN_RE = /url\\(/i;\nconst URL_FRAGMENT_RE = /^url\\(\\s*(['\"]?)#[^\\s'\")]+\\1\\s*\\)$/i;\n\n/**\n * Icons are shallow — the deepest in the corpus nests three levels. The cap is\n * there so a hostile registration cannot recurse this function into a stack\n * overflow; content below it is dropped, not truncated silently, because\n * {@link WrIconStripReport} names what went.\n */\nconst MAX_DEPTH = 16;\n\n/**\n * What {@link sanitizeIcon} refused, for the dev-mode warning. Collecting is\n * opt-in so the render path does no bookkeeping in production.\n *\n * @internal\n */\ninterface WrIconStripReport {\n  readonly elements: Set<string>;\n  readonly attributes: Set<string>;\n}\n\n/**\n * Build a live `<svg>` element out of a registered icon's markup, keeping only\n * what an icon legitimately needs.\n *\n * `<wr-icon>` used to assign `icon.data` to `innerHTML`, which executes an\n * `onload` on the root, an `<image onerror>`, an `<img>` smuggled in after a\n * closed `</svg>`, and anything inside a `<foreignObject>` — with the app's own\n * origin, in a production build. The library already refuses exactly this next\n * door: `<wr-markdown>` escapes raw HTML because its input is untrusted by\n * construction and one `<img onerror>` is the whole cost of being wrong. Icon\n * data arrives from `provideWrIcons()`, which a multi-tenant app or a fetched\n * icon pack fills at runtime, so it is untrusted the same way.\n *\n * Three properties do the work, and none of them is a filter over known-bad\n * strings:\n *\n * 1. **Parsed inert, never inserted.** The markup is parsed into a document\n *    with no browsing context, so nothing loads and nothing runs even before it\n *    is inspected.\n * 2. **Only the first `<svg>` survives.** An icon IS an SVG element, so\n *    everything beside the root is dropped — which is what makes\n *    `</svg><img src=x onerror=…>` inert regardless of what the payload says,\n *    and it is the same shape as the `feather()` shell escape.\n * 3. **Rebuilt, not filtered.** Every element and attribute that lands in the\n *    document is one this file created from an allowlist. Nothing is\n *    transferred from the parsed tree, so there is no attribute an unfamiliar\n *    payload can smuggle past a matcher.\n *\n * A refused element takes its subtree with it rather than having its children\n * hoisted into its parent. Hoisting would preserve more of a hand-drawn icon\n * wrapped in something unsupported, and it is exactly the kind of cleverness\n * that makes \"what does the output contain\" depend on what the parser saw. The\n * blunt rule is the reviewable one, and the dev-mode warning names what went.\n *\n * `DomSanitizer.sanitize(SecurityContext.HTML, …)` is not an option here, which\n * is worth recording so it is not re-proposed: Angular's HTML allowlist\n * (`VOID_ELEMENTS`, `BLOCK_ELEMENTS`, `INLINE_ELEMENTS`) contains no SVG\n * element at all. Run against real Lucide, Feather and Heroicons icons it does\n * not merely drop presentation attributes — it returns the empty string.\n *\n * @returns the rebuilt element, or `null` when the data holds no `<svg>` root.\n * @internal\n */\nfunction sanitizeIcon(doc: Document, data: string, report?: WrIconStripReport): SVGElement | null {\n  const source = parseInert(doc, data);\n  return source ? copy(doc, source, report, 0) : null;\n}\n\n/**\n * Parse into a document that cannot run anything.\n *\n * `DOMParser` is the path every browser and the unit-test DOM take: it takes a\n * plain string, so it is not a Trusted Types sink, and its result has no\n * browsing context. It does not exist under SSR — `@angular/platform-server`\n * renders into domino — so the server falls back to a detached `<template>`,\n * whose content is a separate inert document for the same reason. That branch\n * is unreachable in a browser, which is what keeps the innerHTML write out of\n * the only place Trusted Types is enforced.\n *\n * Both parsers were checked to agree on the part that matters: the HTML\n * parser's foreign-content adjustment restores the camel case of `viewBox`,\n * `clipPath`, `linearGradient`, `gradientTransform`, `textPath` and puts\n * `xlink:href` in the xlink namespace.\n */\nfunction parseInert(doc: Document, data: string): Element | null {\n  const parser = doc.defaultView?.DOMParser;\n  if (parser) return firstSvg(new parser().parseFromString(data, 'text/html').body);\n\n  const template = doc.createElement('template');\n  template.innerHTML = data;\n  return firstSvg(template.content);\n}\n\n/**\n * The first `<svg>` in document order, found by walking rather than by\n * `querySelector`.\n *\n * Two reasons, and the second is the one that matters. A control that decides\n * what may execute should not route that decision through a selector engine —\n * `localName === 'svg'` is a comparison anyone can check, and CSS parsing is a\n * layer with its own history. The first reason is merely that it is faster:\n * jsdom's engine costs 4 ms on a document this size, which the unit suite pays\n * on every rendered icon.\n */\nfunction firstSvg(root: Node): Element | null {\n  const children = root.childNodes;\n  for (let i = 0, n = children.length; i < n; i++) {\n    const child = children[i];\n    if (child.nodeType !== 1) continue;\n    const element = child as Element;\n    if (element.localName === 'svg') return element;\n    const nested = firstSvg(element);\n    if (nested) return nested;\n  }\n  return null;\n}\n\n/** Recreate one element, then its allowed children, in the live document. */\nfunction copy(doc: Document, source: Element, report: WrIconStripReport | undefined, depth: number): SVGElement {\n  const el = doc.createElementNS(SVG_NS, source.localName);\n\n  const attributes = source.attributes;\n  for (let i = 0, n = attributes.length; i < n; i++) {\n    const { name, value } = attributes[i];\n    if (!isAllowedAttribute(name, value)) {\n      report?.attributes.add(name);\n      continue;\n    }\n    if (name === 'xlink:href') el.setAttributeNS(XLINK_NS, name, value);\n    else el.setAttribute(name, value);\n  }\n\n  if (depth >= MAX_DEPTH) {\n    // Named, not silent — the cap is the one rule here that can bite an icon\n    // nobody meant as an attack, and a truncated glyph should say so.\n    if (source.childNodes.length > 0) report?.elements.add(`… deeper than ${MAX_DEPTH} levels`);\n    return el;\n  }\n\n  const children = source.childNodes;\n  for (let i = 0, n = children.length; i < n; i++) {\n    const child = children[i];\n    // Text, so `<title>`, `<desc>` and `<text>` keep saying what they said.\n    // Comments, CDATA and processing instructions are dropped: an icon has no\n    // use for them and a comment is a place to hide a payload from a reader.\n    if (child.nodeType === 3) {\n      el.appendChild(doc.createTextNode(child.nodeValue ?? ''));\n      continue;\n    }\n    if (child.nodeType !== 1) continue;\n\n    const element = child as Element;\n    if (!ELEMENTS.has(element.localName)) {\n      report?.elements.add(element.localName);\n      continue;\n    }\n    el.appendChild(copy(doc, element, report, depth + 1));\n  }\n\n  return el;\n}\n\nfunction isAllowedAttribute(name: string, value: string): boolean {\n  // `data-*` is a styling and testing hook that can never be behavioural.\n  if (name.startsWith('data-')) return true;\n  if (!ATTRIBUTES.has(name)) return false;\n  if (FRAGMENT_ONLY.has(name)) return FRAGMENT_RE.test(value.trim());\n  if (URL_FN_RE.test(value)) return URL_FRAGMENT_RE.test(value.trim());\n  return true;\n}\n\nexport { sanitizeIcon, type WrIconStripReport };\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport type { WrIconDef } from '../interfaces';\n\nconst VIEW_BOX_RE = /<svg\\b[^>]*\\bviewBox\\s*=/i;\nconst SVG_ROOT_RE = /<svg\\b/i;\n\n/**\n * Dev-mode sanity check for a registered icon — a **rendering** check, and\n * explicitly not a security control.\n *\n * It warns about the two things that make an icon come out wrong: no `<svg>`\n * root, and no `viewBox`, which stops the glyph scaling to the host. It reads\n * the string with two regexes and cannot tell a shape from a script — every\n * payload in the icon corpus passes it, because each one does carry an `<svg>`\n * root with a `viewBox`. It also runs only under `isDevMode()`, so it is absent\n * from the build an attacker would meet.\n *\n * What actually keeps hostile markup out of the DOM is {@link sanitizeIcon},\n * which runs on every render in every build: `<wr-icon>` rebuilds the glyph\n * from an allowlist instead of assigning to `innerHTML`. Anything this function\n * would have to reject is already gone by then, and the component says so in\n * dev mode when it drops something.\n *\n * Production builds drop the call entirely via `isDevMode()` tree-shaking.\n *\n * @internal\n */\nexport function validateIcon(icon: WrIconDef): void {\n  if (!SVG_ROOT_RE.test(icon.data)) {\n    // eslint-disable-next-line no-console -- dev-mode validation\n    console.warn(\n      `[NGWR] Icon \"${icon.name}\" data does not contain an <svg> root element. ` +\n        `Custom icons must be valid SVG markup.`\n    );\n    return;\n  }\n\n  if (!VIEW_BOX_RE.test(icon.data)) {\n    // eslint-disable-next-line no-console -- dev-mode validation\n    console.warn(\n      `[NGWR] Icon \"${icon.name}\" has no viewBox attribute — it won't scale ` +\n        `to the host size. Add viewBox=\"0 0 W H\" to the <svg> root.`\n    );\n  }\n}\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport { DOCUMENT } from '@angular/common';\nimport { Component, ElementRef, ViewEncapsulation, computed, effect, inject, input, isDevMode } from '@angular/core';\n\nimport { WrIconRegistry } from './icon-registry';\nimport type { WrIconDef, WrIconName } from './interfaces';\nimport { type WrIconStripReport, sanitizeIcon } from './utils';\n\n/**\n * Renders a registered SVG icon.\n *\n * Icons must be registered via {@link provideWrIcons} before use —\n * either at the application root or on any ancestor component.\n *\n * @example\n * ```html\n * <wr-icon name=\"home\" />\n * ```\n *\n * @see https://ngwr.dev/reference/components/icon\n */\n@Component({\n  selector: 'wr-icon',\n  template: '',\n  encapsulation: ViewEncapsulation.None,\n  host: {\n    class: 'wr-icon',\n    '[attr.data-icon]': 'name()',\n  },\n})\nexport class WrIcon {\n  readonly name = input.required<WrIconName>();\n\n  private readonly host = inject<ElementRef<HTMLElement>>(ElementRef);\n  private readonly doc = inject(DOCUMENT);\n\n  /**\n   * Every icon visible from this position, walked up the whole chain of\n   * registering injector levels.\n   *\n   * Angular's `inject(WR_ICONS)` returns only the **closest** injector's\n   * contribution — `multi` providers are not merged across levels — so a\n   * component that registers its own icons used to shadow, not extend, what an\n   * ancestor registered. {@link WrIconRegistry} is provided once per\n   * registering level and links to its parent, so nesting any number of levels\n   * now adds up, with the nearest registration winning a name collision.\n   *\n   * Optional: with no `provideWrIcons()` anywhere the map is simply empty and\n   * every name reports as unregistered.\n   */\n  private readonly iconRegistry = inject(WrIconRegistry, { optional: true });\n\n  private readonly registry = computed<ReadonlyMap<WrIconName, WrIconDef>>(\n    () => (this.iconRegistry?.resolve() ?? new Map()) as ReadonlyMap<WrIconName, WrIconDef>\n  );\n\n  private readonly icon = computed(() => this.registry().get(this.name()));\n\n  constructor() {\n    effect(() => {\n      const icon = this.icon();\n      const name = this.name();\n\n      if (!icon) {\n        if (isDevMode()) {\n          // Reported, never thrown. An exception here escapes into\n          // `runEffectsInView`, which abandons the remaining effects of the\n          // whole view — one unknown name would blank every `<wr-icon>` after\n          // it while the console blamed only the first. Error level (not\n          // `badgeLog`) so it survives a console filtered to errors.\n          // eslint-disable-next-line no-console -- misconfiguration must be visible, but must not throw\n          console.error(\n            `[NGWR] No icon named \"${name}\" is registered. Did you forget to call provideWrIcons()? ` +\n              `If the name IS registered, check the injector level: a component-level provideWrIcons() ` +\n              `shadows icons registered on an ancestor component.`\n          );\n        }\n        this.clear();\n        return;\n      }\n\n      // Rebuilt from an allowlist rather than assigned to `innerHTML`, which\n      // ran an `onload` on the root, an `<image onerror>`, an `<img>` smuggled\n      // in after a closed `</svg>` and anything inside a `<foreignObject>` —\n      // in production builds, with the app's own origin. `provideWrIcons()`\n      // data is untrusted the same way `<wr-markdown>`'s input is: a tenant\n      // logo or a fetched icon pack is a normal way to fill it. Building nodes\n      // also keeps `<wr-icon>` clear of Trusted Types, which refuses the\n      // `innerHTML` write outright.\n      const report = isDevMode() ? { elements: new Set<string>(), attributes: new Set<string>() } : undefined;\n      const svg = sanitizeIcon(this.doc, icon.data, report);\n\n      if (!svg) {\n        if (isDevMode()) {\n          // eslint-disable-next-line no-console -- misconfiguration must be visible, but must not throw\n          console.error(\n            `[NGWR] Icon \"${name}\" has no <svg> root element and cannot be rendered. ` +\n              `Custom icons must be valid SVG markup.`\n          );\n        }\n        this.clear();\n        return;\n      }\n\n      // Every hand-written inline SVG in the library carries aria-hidden;\n      // registered icons went in without it, so a decorative glyph could be\n      // announced — usually as a bare \"graphic\" beside the label it decorates.\n      // Consumers that need a name put it on the interactive host instead.\n      svg.setAttribute('aria-hidden', 'true');\n\n      this.clear();\n      this.host.nativeElement.appendChild(svg);\n\n      if (report) this.reportStripped(name, icon, report);\n    });\n  }\n\n  /**\n   * `replaceChildren()` would say this in one call, but domino — the DOM\n   * `@angular/platform-server` renders into — does not implement it, and\n   * `innerHTML = ''` is the write Trusted Types refuses.\n   */\n  private clear(): void {\n    const el = this.host.nativeElement;\n    while (el.firstChild) el.removeChild(el.firstChild);\n  }\n\n  /**\n   * Say what the allowlist removed, once per registered icon.\n   *\n   * A silently stripped icon is the failure mode this rebuild could introduce:\n   * a consumer's own glyph renders blank or wrong and nothing anywhere says\n   * why. Keyed on the definition object, so a page with fifty instances of the\n   * same icon warns once and an icon nobody renders never warns at all.\n   */\n  private reportStripped(name: string, icon: WrIconDef, report: WrIconStripReport): void {\n    if (WrIcon.reported.has(icon)) return;\n    if (report.elements.size === 0 && report.attributes.size === 0) return;\n    WrIcon.reported.add(icon);\n\n    const removed = [\n      report.elements.size ? `elements: ${[...report.elements].join(', ')}` : '',\n      report.attributes.size ? `attributes: ${[...report.attributes].join(', ')}` : '',\n    ].filter(Boolean);\n\n    // eslint-disable-next-line no-console -- a stripped icon must not be silent\n    console.warn(\n      `[NGWR] Icon \"${name}\" was rendered without part of its markup — ${removed.join('; ')}. ` +\n        `Registered icon data is treated as untrusted and rebuilt from an allowlist of SVG ` +\n        `shape, paint and text elements, so event handlers, <script>, <style>, <image>, ` +\n        `<foreignObject>, <a>, SMIL animation and non-fragment hrefs never reach the DOM.`\n    );\n  }\n\n  private static readonly reported = new WeakSet<WrIconDef>();\n}\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport { type Provider, isDevMode } from '@angular/core';\n\nimport { WrIconRegistry } from '../icon-registry';\nimport type { WrIconDef } from '../interfaces';\nimport { WR_ICONS } from '../tokens';\nimport { validateIcon } from '../utils';\n\n/**\n * Registers a set of icons for use by `<wr-icon>`.\n *\n * Can be called multiple times — each call adds to the registry.\n * Works at both the application root and at the component level,\n * so a feature module or a single component can bring its own icons\n * without polluting the global config.\n *\n * In dev mode, each icon is validated for common issues (missing\n * `viewBox`, malformed root). Validation is dropped from production\n * builds via `isDevMode()` tree-shaking, and it is a rendering check rather\n * than a security one — see {@link validateIcon}.\n *\n * Icon `data` is treated as **untrusted** at render: `<wr-icon>` rebuilds the\n * glyph from an allowlist instead of writing the string to `innerHTML`, so a\n * set fetched at runtime or supplied by a tenant cannot execute in the app's\n * origin. Dev mode names anything the allowlist removed.\n *\n * @example\n * ```ts\n * // App-level registration\n * import { home, user, cog, provideWrIcons } from 'ngwr/icon';\n *\n * export const appConfig: ApplicationConfig = {\n *   providers: [\n *     provideWrIcons([home, user, cog]),\n *   ],\n * };\n * ```\n *\n * @example\n * ```ts\n * // Component-level registration\n * import { logoGithub, logoNpm, provideWrIcons, WrIconDef } from 'ngwr/icon';\n *\n * @Component({\n *   selector: 'ngwr-header',\n *   imports: [WrIcon],\n *   providers: [provideWrIcons([logoGithub, logoNpm])],\n *   template: `<wr-icon name=\"logo-github\" />`,\n * })\n * export class HeaderComponent {}\n * ```\n */\nexport function provideWrIcons(icons: WrIconDef[]): Provider[] {\n  if (isDevMode()) {\n    for (const icon of icons) validateIcon(icon);\n  }\n  return [\n    { provide: WR_ICONS, useValue: icons, multi: true },\n    // A registry link per registering level. Angular does not merge `multi`\n    // providers across injectors, so without this chain an element-level\n    // registration would shadow everything registered above it instead of\n    // adding to it.\n    WrIconRegistry,\n  ];\n}\n","/**\n * @license\n *\n * Use of this source code is governed by an MIT-style license that can be\n * found in the LICENSE file at https://github.com/thekhegay/ngwr/blob/main/LICENSE\n */\n\nimport type { WrIconDef } from './interfaces';\n\n/**\n * Wrap a raw SVG string in the {@link WrIconDef} envelope. Use this when\n * importing icons from sources that ship full `<svg>` files — Tabler,\n * Phosphor, Heroicons, Iconoir, Radix, Bootstrap Icons, your designer.\n *\n * Pair with a bundler's raw-SVG import (Vite's `?raw`, Webpack's\n * `raw-loader`, esbuild's `--loader:.svg=text`) so the SVG file becomes\n * a string at build time.\n *\n * For sets with a non-SVG shape (Lucide's IconNode tuples, Feather's\n * inner-only SVG), use the dedicated adapter under\n * `ngwr/icon/adapters/<set>` instead.\n *\n * @example\n * ```ts\n * import { svgIcon, provideWrIcons } from 'ngwr/icon';\n * // Vite: the `?raw` suffix returns the file as a string.\n * import plusSvg from '@tabler/icons/icons/plus.svg?raw';\n * import phosphorPlusSvg from '@phosphor-icons/core/assets/regular/plus.svg?raw';\n *\n * bootstrapApplication(AppComponent, {\n *   providers: [\n *     provideWrIcons([\n *       svgIcon('plus', plusSvg),\n *       svgIcon('plus-phosphor', phosphorPlusSvg),\n *     ]),\n *   ],\n * });\n * ```\n *\n * **`svg` is treated as untrusted.** It is a string, so it is a natural place\n * for a tenant's uploaded logo or an icon pack fetched from an API to end up,\n * and `<wr-icon>` used to write it to `innerHTML`. It no longer does: the glyph\n * is rebuilt from an allowlist of SVG shape, paint and text elements, so\n * `<script>`, `<style>`, `<image>`, `<foreignObject>`, `<a>`, SMIL animation,\n * every `on*` handler, `style` attributes and non-fragment `href`s are dropped\n * before anything reaches the DOM. In dev mode the component names what it\n * removed, so a legitimate icon that loses something says so out loud.\n */\nexport function svgIcon(name: string, svg: string): WrIconDef {\n  return { name, data: svg };\n}\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;AAAA;;;;;AAKG;AAMH;;;;;;AAMG;AACI,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAyB,UAAU,CAAC;;AClB9E;;;;;AAKG;AAOH;;;;;;;;;;;;;AAaG;MAEU,cAAc,CAAA;;AAER,IAAA,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;AAGnE,IAAA,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE;AAE7E;;;AAGG;IACH,OAAO,GAAA;AACL,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,GAAG,EAAqB;AAClE,QAAA,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;YAC1B,KAAK,MAAM,IAAI,IAAI,GAAG;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QAClD;AACA,QAAA,OAAO,GAAG;IACZ;uGAjBW,cAAc,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;2GAAd,cAAc,EAAA,CAAA;;2FAAd,cAAc,EAAA,UAAA,EAAA,CAAA;kBAD1B;;;AC1BD;;;;;AAKG;AAEH,MAAM,MAAM,GAAG,4BAA4B;AAC3C,MAAM,QAAQ,GAAG,8BAA8B;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BG;AACH,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC;IAC5C,KAAK;IACL,GAAG;IACH,MAAM;IACN,QAAQ;IACR,KAAK;IACL,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,UAAU;IACV,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,UAAU;IACV,gBAAgB;IAChB,gBAAgB;IAChB,MAAM;IACN,UAAU;IACV,MAAM;IACN,SAAS;AACV,CAAA,CAAC;AAEF;;;;;;;;;;;;;AAaG;AACH,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC;;IAE9C,SAAS;IACT,qBAAqB;IACrB,WAAW;IACX,kBAAkB;IAClB,GAAG;IACH,YAAY;IACZ,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,GAAG;IACH,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,QAAQ;;IAER,eAAe;IACf,mBAAmB;IACnB,cAAc;IACd,QAAQ;IACR,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,cAAc;IACd,qBAAqB;IACrB,kBAAkB;IAClB,WAAW;IACX,kBAAkB;IAClB,eAAe;;IAEf,MAAM;IACN,cAAc;IACd,WAAW;IACX,QAAQ;IACR,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;IACnB,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,SAAS;IACT,OAAO;IACP,WAAW;IACX,WAAW;IACX,MAAM;IACN,aAAa;IACb,eAAe;IACf,iBAAiB;IACjB,YAAY;IACZ,cAAc;IACd,SAAS;IACT,YAAY;IACZ,UAAU;IACV,WAAW;IACX,gBAAgB;;IAEhB,aAAa;IACb,YAAY;IACZ,cAAc;IACd,aAAa;IACb,mBAAmB;IACnB,oBAAoB;IACpB,gBAAgB;IAChB,aAAa;IACb,WAAW;IACX,cAAc;IACd,YAAY;IACZ,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,cAAc;IACd,cAAc;IACd,WAAW;;IAEX,IAAI;IACJ,OAAO;IACP,MAAM;IACN,aAAa;IACb,YAAY;IACZ,iBAAiB;IACjB,kBAAkB;IAClB,sBAAsB;IACtB,WAAW;IACX,MAAM;IACN,SAAS;IACT,aAAa;IACb,OAAO;IACP,aAAa;IACb,WAAW;IACX,UAAU;;IAEV,MAAM;IACN,YAAY;AACb,CAAA,CAAC;AAEF;;;;AAIG;AACH,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAE1E;AACA,MAAM,WAAW,GAAG,WAAW;AAE/B;;;;AAIG;AACH,MAAM,SAAS,GAAG,QAAQ;AAC1B,MAAM,eAAe,GAAG,qCAAqC;AAE7D;;;;;AAKG;AACH,MAAM,SAAS,GAAG,EAAE;AAapB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CG;AACH,SAAS,YAAY,CAAC,GAAa,EAAE,IAAY,EAAE,MAA0B,EAAA;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;AACpC,IAAA,OAAO,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI;AACrD;AAEA;;;;;;;;;;;;;;;AAeG;AACH,SAAS,UAAU,CAAC,GAAa,EAAE,IAAY,EAAA;AAC7C,IAAA,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,SAAS;AACzC,IAAA,IAAI,MAAM;AAAE,QAAA,OAAO,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC;IAEjF,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC;AAC9C,IAAA,QAAQ,CAAC,SAAS,GAAG,IAAI;AACzB,IAAA,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;AACnC;AAEA;;;;;;;;;;AAUG;AACH,SAAS,QAAQ,CAAC,IAAU,EAAA;AAC1B,IAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU;AAChC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC/C,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC;AACzB,QAAA,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE;QAC1B,MAAM,OAAO,GAAG,KAAgB;AAChC,QAAA,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;AAAE,YAAA,OAAO,OAAO;AAC/C,QAAA,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;AAChC,QAAA,IAAI,MAAM;AAAE,YAAA,OAAO,MAAM;IAC3B;AACA,IAAA,OAAO,IAAI;AACb;AAEA;AACA,SAAS,IAAI,CAAC,GAAa,EAAE,MAAe,EAAE,MAAqC,EAAE,KAAa,EAAA;AAChG,IAAA,MAAM,EAAE,GAAG,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;AAExD,IAAA,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU;AACpC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;AACpC,YAAA,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAC5B;QACF;QACA,IAAI,IAAI,KAAK,YAAY;YAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC;;AAC9D,YAAA,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC;IACnC;AAEA,IAAA,IAAI,KAAK,IAAI,SAAS,EAAE;;;AAGtB,QAAA,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA,cAAA,EAAiB,SAAS,CAAA,OAAA,CAAS,CAAC;AAC3F,QAAA,OAAO,EAAE;IACX;AAEA,IAAA,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU;AAClC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAC/C,QAAA,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC;;;;AAIzB,QAAA,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE;AACxB,YAAA,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACzD;QACF;AACA,QAAA,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE;QAE1B,MAAM,OAAO,GAAG,KAAgB;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;YACpC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;YACvC;QACF;AACA,QAAA,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACvD;AAEA,IAAA,OAAO,EAAE;AACX;AAEA,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa,EAAA;;AAErD,IAAA,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;AAAE,QAAA,OAAO,IAAI;AACzC,IAAA,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;AAAE,QAAA,OAAO,KAAK;AACvC,IAAA,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AAClE,IAAA,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AACpE,IAAA,OAAO,IAAI;AACb;;AChXA;;;;;AAKG;AAIH,MAAM,WAAW,GAAG,2BAA2B;AAC/C,MAAM,WAAW,GAAG,SAAS;AAE7B;;;;;;;;;;;;;;;;;;;;AAoBG;AACG,SAAU,YAAY,CAAC,IAAe,EAAA;IAC1C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;;AAEhC,QAAA,OAAO,CAAC,IAAI,CACV,gBAAgB,IAAI,CAAC,IAAI,CAAA,+CAAA,CAAiD;AACxE,YAAA,CAAA,sCAAA,CAAwC,CAC3C;QACD;IACF;IAEA,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;;AAEhC,QAAA,OAAO,CAAC,IAAI,CACV,gBAAgB,IAAI,CAAC,IAAI,CAAA,4CAAA,CAA8C;AACrE,YAAA,CAAA,0DAAA,CAA4D,CAC/D;IACH;AACF;;AClDA;;;;;AAKG;AASH;;;;;;;;;;;;AAYG;MAUU,MAAM,CAAA;IACR,IAAI,GAAG,KAAK,CAAC,QAAQ;6EAAc;AAE3B,IAAA,IAAI,GAAG,MAAM,CAA0B,UAAU,CAAC;AAClD,IAAA,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;AAEvC;;;;;;;;;;;;;AAaG;IACc,YAAY,GAAG,MAAM,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAEzD,IAAA,QAAQ,GAAG,QAAQ,CAClC,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,IAAI,GAAG,EAAE,CAAuC;iFACxF;AAEgB,IAAA,IAAI,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;6EAAC;AAExE,IAAA,WAAA,GAAA;QACE,MAAM,CAAC,MAAK;AACV,YAAA,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE;AACxB,YAAA,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE;YAExB,IAAI,CAAC,IAAI,EAAE;gBACT,IAAI,SAAS,EAAE,EAAE;;;;;;;AAOf,oBAAA,OAAO,CAAC,KAAK,CACX,CAAA,sBAAA,EAAyB,IAAI,CAAA,0DAAA,CAA4D;wBACvF,CAAA,wFAAA,CAA0F;AAC1F,wBAAA,CAAA,kDAAA,CAAoD,CACvD;gBACH;gBACA,IAAI,CAAC,KAAK,EAAE;gBACZ;YACF;;;;;;;;;YAUA,MAAM,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAU,EAAE,UAAU,EAAE,IAAI,GAAG,EAAU,EAAE,GAAG,SAAS;AACvG,YAAA,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;YAErD,IAAI,CAAC,GAAG,EAAE;gBACR,IAAI,SAAS,EAAE,EAAE;;AAEf,oBAAA,OAAO,CAAC,KAAK,CACX,CAAA,aAAA,EAAgB,IAAI,CAAA,oDAAA,CAAsD;AACxE,wBAAA,CAAA,sCAAA,CAAwC,CAC3C;gBACH;gBACA,IAAI,CAAC,KAAK,EAAE;gBACZ;YACF;;;;;AAMA,YAAA,GAAG,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC;YAEvC,IAAI,CAAC,KAAK,EAAE;YACZ,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC;AAExC,YAAA,IAAI,MAAM;gBAAE,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;AACrD,QAAA,CAAC,CAAC;IACJ;AAEA;;;;AAIG;IACK,KAAK,GAAA;AACX,QAAA,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa;QAClC,OAAO,EAAE,CAAC,UAAU;AAAE,YAAA,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,UAAU,CAAC;IACrD;AAEA;;;;;;;AAOG;AACK,IAAA,cAAc,CAAC,IAAY,EAAE,IAAe,EAAE,MAAyB,EAAA;AAC7E,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE;AAC/B,QAAA,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC;YAAE;AAChE,QAAA,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;AAEzB,QAAA,MAAM,OAAO,GAAG;YACd,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAA,UAAA,EAAa,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAE,GAAG,EAAE;YAC1E,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,CAAA,YAAA,EAAe,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,CAAE,GAAG,EAAE;AACjF,SAAA,CAAC,MAAM,CAAC,OAAO,CAAC;;AAGjB,QAAA,OAAO,CAAC,IAAI,CACV,CAAA,aAAA,EAAgB,IAAI,CAAA,4CAAA,EAA+C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA,EAAA,CAAI;YACvF,CAAA,kFAAA,CAAoF;YACpF,CAAA,+EAAA,CAAiF;AACjF,YAAA,CAAA,gFAAA,CAAkF,CACrF;IACH;AAEQ,IAAA,OAAgB,QAAQ,GAAG,IAAI,OAAO,EAAa;uGA5HhD,MAAM,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,SAAA,EAAA,CAAA;AAAN,IAAA,OAAA,IAAA,GAAA,EAAA,CAAA,oBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,IAAA,EAAA,MAAM,oRAPP,EAAE,EAAA,QAAA,EAAA,IAAA,EAAA,aAAA,EAAA,EAAA,CAAA,iBAAA,CAAA,IAAA,EAAA,CAAA;;2FAOD,MAAM,EAAA,UAAA,EAAA,CAAA;kBATlB,SAAS;AAAC,YAAA,IAAA,EAAA,CAAA;AACT,oBAAA,QAAQ,EAAE,SAAS;AACnB,oBAAA,QAAQ,EAAE,EAAE;oBACZ,aAAa,EAAE,iBAAiB,CAAC,IAAI;AACrC,oBAAA,IAAI,EAAE;AACJ,wBAAA,KAAK,EAAE,SAAS;AAChB,wBAAA,kBAAkB,EAAE,QAAQ;AAC7B,qBAAA;AACF,iBAAA;;;ACnCD;;;;;AAKG;AASH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2CG;AACG,SAAU,cAAc,CAAC,KAAkB,EAAA;IAC/C,IAAI,SAAS,EAAE,EAAE;QACf,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC;IAC9C;IACA,OAAO;QACL,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE;;;;;QAKnD,cAAc;KACf;AACH;;ACtEA;;;;;AAKG;AAIH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCG;AACG,SAAU,OAAO,CAAC,IAAY,EAAE,GAAW,EAAA;AAC/C,IAAA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;AAC5B;;AClDA;;AAEG;;;;"}

package/fesm2022/ngwr-markdown.mjs

@@ -455,11 +455,44 @@ const ESCAPABLE = /[!-/:-@[-`{-~]/;
 const SCHEME_RE = /^([a-z][a-z0-9+.-]*):/i;
 const ALLOWED_SCHEMES = new Set(['http', 'https', 'mailto', 'tel', 'ftp']);
 const DATA_IMAGE_RE = /^data:image\/(?:png|jpe?g|gif|webp|avif);base64,[a-z0-9+/=]+$/i;
-const AUTOLINK_RE = /^<((?:https?|mailto|tel):[^>\s]+)>/i;
+// `[^<>\s]` and not `[^>\s]`: CommonMark defines autolink content as
+// `[^<>\x00-\x20]*`, so `<` ends it by spec — and admitting it is what made this
+// quadratic. On `<http://a<http://a<…` the scheme matches, the class swallows the
+// rest of the document looking for `>`, then backtracks a character at a time, once
+// per `<`. 160 KB took 1.7 s. `ANGLE_DEST_RE` and `EMAIL_AUTOLINK_RE` beside it
+// already exclude `<`; this one was the outlier. The only input that now parses
+// differently is `<http://a<b>`, which no other parser reads as a link either.
+const AUTOLINK_RE = /^<((?:https?|mailto|tel):[^<>\s]+)>/i;
 /** `<destination>` — markdown's way of putting a space in a URL. */
 const ANGLE_DEST_RE = /^<([^<>]*)>(?:\s+["'(](.*)["')])?$/;
 /** CommonMark's own cap on a link label, which is also what bounds the scan. */
 const MAX_LABEL_LENGTH = 999;
+/**
+ * How deep parentheses may nest inside `[a](…)` before the destination is refused
+ * outright — counted from the `(` that opens it, so 31 nested pairs inside.
+ *
+ * This is a bound on WORK, not on taste, and it is the only thing standing
+ * between a paragraph and a frozen tab. The destination scan walks forward for a
+ * balancing `)`, and an unclosed destination sends it to the end of the line; one
+ * `[a](x` costs nothing, but `'[a](x'.repeat(16384)` — 80 KB on a single line —
+ * makes every one of the 16384 openers walk the whole remainder, which measured
+ * 936 ms at 80 KB and 3.9 s at 160 KB, synchronously inside a `computed` during
+ * change detection. A `~4x` cost per doubling of the input: quadratic, on a
+ * component whose documented input is a comment or a model's output.
+ *
+ * The cap fixes it because a scan can only keep going by NOT finding its closer,
+ * and every later `[…](` it walks past contributes an unmatched `(` of its own —
+ * so after 32 of them the scan stops, no opener's walk can cover more than the
+ * next 32 openers, and the total is linear in the document. (A `)` that would
+ * bring the count back down is the closer, and ends the scan anyway.) The number
+ * is cmark's: `manual_scan_link_url` refuses at the same depth, for the same
+ * reason.
+ *
+ * What it costs: a destination with 32 or more nested `(` is no longer a link and
+ * renders as text. No URL looks like that — the deep end of the real world is a
+ * Wikipedia `..._(disambiguation)`, which is one pair.
+ */
+const MAX_DESTINATION_NESTING = 32;
 const BARE_URL_RE = /^https?:\/\/[^\s<>[\]()]*(?:\([^\s<>()]*\)[^\s<>[\]()]*)*/i;
 const EMAIL_AUTOLINK_RE = /^<([^\s@<>]+@[^\s@<>.]+\.[^\s@<>]+)>/;
 /**
@@ -538,13 +571,26 @@ function inlines(source, depth, outer) {
             }
         }
         if (char === '\n') {
-            // Two trailing spaces are markdown's hard break. `endsWith`, not
-            // `/[ ]{2,}$/.test(text)`: that regex has no start anchor, so it retries
-            // from every position of the accumulated paragraph, which made paragraph
-            // parsing quadratic. On a 161 KB document a CPU profile put 3306 ms of 3378
-            // ms of total self-time in that one test — and it is re-paid on every
-            // streamed chunk.
-            const hard = text.endsWith('  ');
+            // Two trailing spaces are markdown's hard break, and the question is asked
+            // of the SOURCE rather than of `text` — twice now, this one line has been
+            // where paragraph parsing went quadratic.
+            //
+            // `/[ ]{2,}$/.test(text)` was the first version: no start anchor, so it
+            // retries from every position of the accumulated paragraph. A CPU profile
+            // of a 161 KB document put 3306 ms of 3378 ms of total self-time in it.
+            // `text.endsWith('  ')` replaced it and is quadratic for a different
+            // reason: `text` is built by `+=`, so it is a rope, and every read of its
+            // tail flattens the whole thing — 160,000 short lines cost 1980 ms of
+            // copying against 7 ms for the same loop without the test. Ordinary prose
+            // reaches that shape; nothing has to be malformed.
+            //
+            // Reading `source` instead answers the same question in constant time, and
+            // it IS the same question: while `text` is non-empty its last character is
+            // always `source[i - 1]` (every branch that appends appends exactly the
+            // character it consumed), and when it is empty the preceding characters
+            // belong to a construct that just closed — none of which can end in a
+            // space, since a closing fence, `)`, `>` or emphasis marker is never one.
+            const hard = source[i - 1] === ' ' && source[i - 2] === ' ';
             if (hard) {
                 text = text.replace(/[ ]+$/, '');
                 flush();
@@ -675,12 +721,13 @@ function codeSpanValue(raw) {
 /**
  * `[label](href "title")` starting at `source[at] === '['`.
  *
- * Two bounds, both load-bearing. The label scan stops at
+ * Three bounds, all load-bearing. The label scan stops at
  * {@link MAX_LABEL_LENGTH}, which is CommonMark's own limit, and a scan that
  * reaches the end of the source without meeting a single `]` records the fact in
  * the context — from then on every later `[` answers in constant time. Without
  * that, `'['.repeat(100000)` spent 8 seconds on the main thread, inside a
- * `computed`.
+ * `computed`. The third is {@link MAX_DESTINATION_NESTING}, on the destination
+ * scan, and it is the one that makes the whole function linear.
  */
 function matchLink(source, at, ctx) {
     if (at >= ctx.noBracket.from)
@@ -738,8 +785,13 @@ function matchLink(source, at, ctx) {
             i++;
             continue;
         }
-        if (char === '(')
+        if (char === '(') {
             parens++;
+            // Giving up HERE is what makes the scan linear rather than quadratic — see
+            // {@link MAX_DESTINATION_NESTING}.
+            if (parens > MAX_DESTINATION_NESTING)
+                return null;
+        }
         if (char === ')') {
             parens--;
             if (parens === 0) {