rapier-html 1.1.99 → 1.1.102

package/dist/wrap.mjs

@@ -10,6 +10,8 @@ const END = '</script>';
 // The page's search words (rapier.html's RAPIER_SEO regions: description, canonical address, previews, structured data and the plain guide
 // a crawler reads) are rapier.website's own. A page that carries someone's document never claims that address or that description.
 const SEARCH_WORDS = /<!-- RAPIER_SEO_BEGIN -->[\s\S]*?<!-- RAPIER_SEO_END -->\n?/g;
+const OFFLINE_POLICY = "default-src 'none'; script-src 'unsafe-inline' 'wasm-unsafe-eval' blob:; style-src 'unsafe-inline'; " +
+	"img-src data: blob:; media-src data: blob:; font-src data: blob:; connect-src 'none'; worker-src blob:; manifest-src 'none'; base-uri 'none'; form-action 'none'";
 
 // One encoding, exactly reversible: no `<` before `/` or `!`, no CR, no NUL. engine.js _rapierDecodeCarried is its
 // inverse.
@@ -19,6 +21,26 @@ function safeName(name, fallback) {
 	return [...String(name || fallback).replace(/[\\/\0"<>&]/g, '-')].slice(0, 256).join('').replace(/[\uD800-\uDBFF]$/, '') || fallback;
 }
 
+// Only the trusted shell head changes. Carried source and inert application bytes stay exact.
+export function offlineTemplate(pageHtml, address = null) {
+	const end = pageHtml.indexOf('</head>');
+	if (end < 0) throw new Error('not a Rapier page: no </head>');
+	const attribute = (tag, name) => {
+		const match = new RegExp('\\b' + name + '\\s*=\\s*(?:"([^"]*)"|\'([^\']*)\'|([^\\s>]+))', 'i').exec(tag);
+		return match ? match[1] ?? match[2] ?? match[3] : '';
+	};
+	const head = pageHtml.slice(0, end).replace(/<meta\b[^>]*>/gi, tag =>
+		attribute(tag, 'http-equiv').toLowerCase() === 'content-security-policy' ? '' : tag).replace(/<link\b[^>]*>/gi, tag =>
+		attribute(tag, 'rel').toLowerCase().split(/\s+/).some(rel => ['icon', 'apple-touch-icon', 'manifest', 'preconnect', 'dns-prefetch'].includes(rel)) ? '' : tag);
+	const anchor = /<meta charset[^>]*>\n?/i.exec(head) || /<head[^>]*>\n?/.exec(head);
+	if (!anchor) throw new Error('not a Rapier page: no <head>');
+	const at = anchor.index + anchor[0].length;
+	// A minted return is an explicit Send back destination; boot and rendering stay local.
+	const policy = address == null ? OFFLINE_POLICY : OFFLINE_POLICY.replace("connect-src 'none'", 'connect-src ' + new URL(returnAddress(address)).origin);
+	return head.slice(0, at) + '<meta http-equiv="Content-Security-Policy" content="' + policy + '">\n' +
+		head.slice(at) + pageHtml.slice(end);
+}
+
 export function wrap(pageHtml, text, name, options) {
 	if (typeof pageHtml !== 'string' || !pageHtml.includes('</body>')) throw new Error('not a Rapier page: no </body>');
 	if (typeof text !== 'string') throw new Error('the document must be text');
@@ -27,12 +49,13 @@ export function wrap(pageHtml, text, name, options) {
 	const previous = unwrap(pageHtml);
 	const opts = {...saved, ...(options || {})};
 	const docName = safeName(name, 'document.md');
+	if (opts.kind != null && !['markdown', 'text', 'code'].includes(opts.kind)) throw new Error('invalid document kind');
 	// `view`: the view the page opens on with the document behind it, `draw` or `notes`.
 	if (opts.view != null && !['draw', 'notes'].includes(opts.view)) throw new Error('the view is draw or notes');
 	const address = opts.return == null ? null : returnAddress(opts.return);
 	const expiry = opts.return_expires_at == null ? null : returnExpiresAt(opts.return_expires_at);
 	if (!!address !== !!expiry) throw new Error('a return needs its URL and return_expires_at from document.create_return');
-	const block = START + ' data-name="' + docName + '"' + (opts.view ? ' data-view="' + opts.view + '"' : '') +
+	const block = START + ' data-name="' + docName + '"' + (opts.kind ? ' data-kind="' + opts.kind + '"' : '') + (opts.view ? ' data-view="' + opts.view + '"' : '') +
 		(address ? ' data-return="' + address + '" data-return-expires-at="' + expiry + '"' : '') + '>' + encodeCarried(text) + END;
 	let carriedBlocks = '\n' + writeParts(text, opts);
 	if (opts.drawing != null) {
@@ -60,7 +83,7 @@ export function wrap(pageHtml, text, name, options) {
 	if (baseline) baseline = readBase({...baseline, ...(opts.by != null ? {by: String(opts.by).trim()} : {}), ...(opts.at != null ? {at: String(opts.at)} : {})});
 	carriedBlocks += '\n' + writeBase(text, baseline);
 	// The agent seed goes after the charset (or <head>), once: a page that already carries it, wrapped again, loses its old one.
-	const unseeded = previous.html.replace(SEARCH_WORDS, '').split(PAGE_SEED + '\n').join('');
+	const unseeded = offlineTemplate(previous.html.replace(SEARCH_WORDS, '').split(PAGE_SEED + '\n').join(''), address);
 	const headTag = /<meta charset[^>]*>\n?/i.exec(unseeded) || /<head[^>]*>\n?/.exec(unseeded);
 	if (!headTag) throw new Error('not a Rapier page: no <head>');
 	const seededAt = headTag.index + headTag[0].length;
@@ -75,12 +98,13 @@ export function wrap(pageHtml, text, name, options) {
 	return titled.slice(0, at + shift) + '\n' + block + carriedBlocks + titled.slice(at + shift);
 }
 export function unwrap(pageHtml) {
-	let html = pageHtml, text = null, name = null, view = null, address = null, expiry = null;
+	let html = pageHtml, text = null, name = null, kind = null, view = null, address = null, expiry = null;
 	const a = pageHtml.indexOf(START);
 	if (a >= 0) {
 		const open = pageHtml.indexOf('>', a), b = pageHtml.indexOf(END, open);
 		if (open < 0 || b < 0) throw new Error('a carried document without its end');
 		name = /data-name="([^"]*)"/.exec(pageHtml.slice(a, open))?.[1] ?? null;
+		kind = /data-kind="(markdown|text|code)"/.exec(pageHtml.slice(a, open))?.[1] ?? null;
 		view = /data-view="(draw|notes)"/.exec(pageHtml.slice(a, open))?.[1] ?? null;
 		const carriedReturn = /data-return="([^"]*)"/.exec(pageHtml.slice(a, open));
 		if (carriedReturn) address = returnAddress(carriedReturn[1]);
@@ -104,5 +128,5 @@ export function unwrap(pageHtml) {
 	const carriedBase = takeBase(html); html = carriedBase.html;
 	const comparisonBase = carriedBase.base;
 	const parts = takeParts(html, text);
-	return {...parts, text, name, view, drawing, drawingName, comparisonBase, base: comparisonBase?.text ?? null, baseName: comparisonBase?.name ?? null, baseSha256: comparisonBase?.sha256 ?? null, baseRevision: comparisonBase?.revision ?? null, by: comparisonBase?.by ?? null, at: comparisonBase?.at ?? null, return: address, return_expires_at: expiry};
+	return {...parts, text, name, kind, view, drawing, drawingName, comparisonBase, base: comparisonBase?.text ?? null, baseName: comparisonBase?.name ?? null, baseSha256: comparisonBase?.sha256 ?? null, baseRevision: comparisonBase?.revision ?? null, by: comparisonBase?.by ?? null, at: comparisonBase?.at ?? null, return: address, return_expires_at: expiry};
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rapier-html",
-  "version": "1.1.99",
+  "version": "1.1.102",
   "description": "One command turns a Markdown file into one offline HTML file: the whole Rapier editor with the document inside. Opens in any browser, phone or desktop, with no install or account. Write, draw and paint watercolor, then Send back the edits to your AI agent.",
   "keywords": [
     "markdown",