rapier-math 1.0.2 → 1.1.0

package/{rapier-math-1.0.2.js → rapier-math-1.1.0.js}

@@ -2311,7 +2311,7 @@ function mathLayout(n,c) {
     case 'smash': {const b=mathLayout(n.body,c);return {...b,h:n.mode==='b'?b.h:0,d:n.mode==='t'?b.d:0};}
     case 'raise': {const b=mathLayout(n.body,c),s=mathScale(c);return mathCompose([[b,0,-n.amount*s]],b.w,{class:b.class,...(n.height===undefined?{}:{h:n.height*s}),...(n.depth===undefined?{}:{d:n.depth*s})});}
     case 'rule': {const s=mathScale(c);return mathRule(n.width*s,(n.height+n.depth)*s,-n.height*s);}
-    case 'link': {const b=mathLayout(n.body,c);const url=new URL(n.href);if(!['http:','https:'].includes(url.protocol))throw Object.assign(new Error('Unsupported equation link'),{code:'unsafe-url'});b.svg='<a href="'+mathEscape(n.href)+'" target="_blank" rel="noopener noreferrer">'+b.svg+'</a>';return b;}
+    case 'link': {const b=mathLayout(n.body,c);const url=new URL(n.href);if(!['http:','https:'].includes(url.protocol))throw Object.assign(new Error('Unsupported equation link'),{code:'unsafe-url'});b.svg='<a href="'+mathEscape(n.href)+'" aria-label="'+mathEscape(n.href)+'" tabindex="0" target="_blank" rel="noopener noreferrer">'+b.svg+'</a>';return b;}
     default: throw Object.assign(new Error('Unsupported maths construct: '+n.type),{code:'unsupported-construct'});
   }
 }
@@ -2770,12 +2770,18 @@ function mathFitElement(svg, printing = false) {
   if(screenKey!==state.screen || (target===null)!==(state.width===null) || target!==null && Math.abs(target-state.width)>.005) {
     const rendered=renderMath(source,{displayMode:display,maxWidth:(screenKey!==state.screen?width:target) || undefined,screen});
     if(!rendered.errors.length) {
+      const active=doc.activeElement,links=active && svg.contains(active)?[...svg.querySelectorAll('a')]:[];
+      const focusIndex=links.indexOf(active),focusHref=focusIndex<0?null:active.getAttribute('href');
       const replacement=new view.DOMParser().parseFromString(rendered.svg,'image/svg+xml').documentElement;
-      for(const name of ['width','height','viewBox','data-math-natural-width','data-math-max-width','data-math-lines','data-math-screen']) {
+      for(const name of ['role','width','height','viewBox','data-math-natural-width','data-math-max-width','data-math-lines','data-math-screen']) {
         if(replacement.hasAttribute(name))svg.setAttribute(name,replacement.getAttribute(name));else svg.removeAttribute(name);
       }
       svg.style.verticalAlign=replacement.style.verticalAlign;
       svg.replaceChildren(...Array.from(replacement.childNodes,node=>doc.importNode(node,true)));
+      if(focusIndex>=0 && (!doc.activeElement || doc.activeElement===doc.body)) {
+        const link=svg.querySelectorAll('a')[focusIndex];
+        if(link?.getAttribute('href')===focusHref)link.focus({preventScroll:true});
+      }
       state.natural=Number(svg.getAttribute('data-math-natural-width'));state.screen=screenKey;
       state.width=state.natural>width?width:null;
       if(state.width===null)svg.removeAttribute('data-math-max-width');
@@ -2871,23 +2877,27 @@ function mathSvg(box,source,error,utf16,options={}) {
   const opacity=options.screen?.dark ? .94 : 1;
   if (![width,height,depth,left,...viewBox].every(Number.isFinite)) throw new Error('Mathematical dimensions are not finite');
   const escapedSource=mathEscape(source);
-  const svg='<svg xmlns="http://www.w3.org/2000/svg" role="img" aria-label="'+escapedSource+'"'+
+  // A group exposes authored links to accessibility APIs; an image would hide them.
+  const svg='<svg xmlns="http://www.w3.org/2000/svg" role="'+(box.svg.includes('<a ')?'group':'img')+'" aria-label="'+escapedSource+'"'+
     ' data-rapier-math="'+(options.displayMode?'display':'inline')+'" data-math-lines="'+(box.lines || 1)+'"'+
     ' data-math-natural-width="'+mathNumber(options.naturalWidth ?? width)+'"'+
     (options.screen?' data-math-screen="'+mathNumber(options.screen.fontSize)+'|'+mathNumber(options.screen.pixelRatio)+'|'+options.screen.dark+'"':'')+
     (options.maxWidth?' data-math-max-width="'+mathNumber(options.maxWidth)+'"':'')+
     (utf16?' data-tex-utf16="'+utf16+'"':'')+
+    (error?.sourceOmitted?' data-math-source-omitted="true"':'')+
     (error?' data-math-error="'+mathEscape(error.code)+'"':'')+' width="'+mathNumber(width)+'em" height="'+mathNumber(height+depth)+'em"'+
     ' viewBox="'+viewBox.map(mathNumber).join(' ')+'"'+
     ' style="font-size:'+mathNumber(mathFontRatio)+'em;max-width:100%;height:auto;vertical-align:-'+mathNumber(depth)+'em;'+
     'fill-opacity:'+opacity+';stroke-opacity:'+opacity+'" fill="currentColor">'+
     '<title>'+escapedSource+'</title>'+(error?'<desc>'+mathEscape(error.message)+'</desc>':'')+
     '<g transform="scale(1000)">'+box.svg+'</g></svg>';
+  if(svg.length>24*1024*1024)throw Object.assign(new Error('The complete formula markup exceeds its output budget.'),{code:'resource-limit'});
   return {svg,width,height,depth,lines:box.lines || 1,fitted:!!box.fitted,errors:error?[error]:[]};
 }
 
 function mathSourceAlternative(source) {
-  let alternative='',first=-1,kept=0;
+  const alternatives=[],parts=[];
+  let first=-1,kept=0;
   for(let i=0;i<source.length;i++) {
     const code=source.charCodeAt(i);
     if(code>=0xd800 && code<=0xdbff && i+1<source.length) {
@@ -2896,19 +2906,32 @@ function mathSourceAlternative(source) {
     }
     if((code>=0x20 && code<=0xd7ff) || (code>=0xe000 && code<=0xfffd) || code===9 || code===10 || code===13)continue;
     if(first<0)first=i;
-    alternative+=source.slice(kept,i)+'\\u'+code.toString(16).toUpperCase().padStart(4,'0');kept=i+1;
+    if(i>kept)parts.push(source.slice(kept,i));
+    parts.push('\\u'+code.toString(16).toUpperCase().padStart(4,'0'));kept=i+1;
+    // Flatten small batches instead of retaining one rope node per bad code unit.
+    if(parts.length>=1024) {alternatives.push(parts.join(''));parts.length=0;}
   }
   if(first<0)return {alternative:source};
-  alternative+=source.slice(kept);
+  parts.push(source.slice(kept));alternatives.push(parts.join(''));
   // Only malformed XML text needs a separate carrier; each four hex digits keep one original code unit.
-  let utf16='';
-  for(let i=0;i<source.length;i++)utf16+=source.charCodeAt(i).toString(16).padStart(4,'0');
-  return {alternative,utf16,error:{code:'invalid-source-character',offset:first,
+  const encoded=[];parts.length=0;
+  for(let i=0;i<source.length;i++) {
+    parts.push(source.charCodeAt(i).toString(16).padStart(4,'0'));
+    if(parts.length===1024) {encoded.push(parts.join(''));parts.length=0;}
+  }
+  encoded.push(parts.join(''));
+  return {alternative:alternatives.join(''),utf16:encoded.join(''),error:{code:'invalid-source-character',offset:first,
     message:'A source character cannot be embedded in SVG. The text alternative shows Unicode escapes; data-tex-utf16 keeps the original source.'}};
 }
 
 function renderMath(source,options={}) {
-  const text=String(source ?? ''),safe=mathSourceAlternative(text),context={size:1,level:0,variant:'normal',cramped:false,display:!!options?.displayMode,cache:new WeakMap(),budget:{nodes:0,outlineBytes:0}};
+  const text=String(source ?? '');
+  // Reject before scanning, escaping or parsing. Keep the diagnostic-return
+  // contract, but explicitly omit refused source instead of expanding it.
+  const safe=text.length>1000000?{alternative:'Formula source omitted: source limit exceeded.',error:{
+    code:'resource-limit',offset:0,sourceOmitted:true,
+    message:'This formula is too long to render safely. Its source was not embedded; retain the original input.'
+  }}:mathSourceAlternative(text),context={size:1,level:0,variant:'normal',cramped:false,display:!!options?.displayMode,cache:new WeakMap(),budget:{nodes:0,outlineBytes:0}};
   try {
     if(safe.error)throw safe.error;
     if(options?.screen!==undefined) {
@@ -2925,11 +2948,16 @@ function renderMath(source,options={}) {
     return mathSvg(box,safe.alternative,undefined,undefined,{displayMode:context.display,maxWidth,naturalWidth:mathInkWidth(natural)+.05,screen:context.screen});
   }
   catch (cause) {
-    const error={code:cause.code || 'invalid-tex',message:String(cause.message || cause),offset:Number.isFinite(cause.offset)?cause.offset:0};
-    if(cause.command)error.command=cause.command;
+    const message=String(cause.message || cause);
+    const error={code:cause.code || 'invalid-tex',message:message.length>1024?message.slice(0,1024).replace(/[\ud800-\udbff]$/,'')+'…':message,offset:Number.isFinite(cause.offset)?cause.offset:0};
+    if(message.length>1024)error.messageTruncated=true;
+    if(cause.sourceOmitted)error.sourceOmitted=true;
+    if(cause.command) {
+      error.command=String(cause.command).slice(0,128);
+      if(cause.command.length>128)error.commandTruncated=true;
+    }
     // A diagnostic is visible, but remains distinct from a successfully typeset formula.
-    // A hostile command can have a very long name. Keep its full diagnostic in desc/errors,
-    // while the visible notice stays finite and can render after the formula exhausted its budget.
+    // Diagnostics have an explicit bound. Exact input stays in the source alternative.
     const label=error.message.length>240?'This formula could not be rendered. The complete diagnostic is in its text description.':error.message.replace(/[^\x20-\x7e]/g,'?');
     const diagnostic={...context,variant:'roman',size:0.8,budget:{nodes:0,outlineBytes:0}};
     try {
@@ -2942,7 +2970,7 @@ function renderMath(source,options={}) {
 }
 
 globalThis.RapierMath=Object.freeze({
-  version:'1.0.2',
+  version:'1.1.0',
   parse:parseMathTex,
   render:renderMath,
   fit:mathFit,

package/rehype.d.ts

@@ -0,0 +1,6 @@
+// SPDX-License-Identifier: MIT
+import type {Root} from 'hast';
+import type {VFile} from 'vfile';
+import type {IntegrationOptions} from './integration.js';
+/** Install after sanitization. Recognizes remark-rehype math code nodes. */
+export default function rehypeRapierMath(options?: IntegrationOptions): (tree: Root, file: VFile) => void;

package/rehype.mjs

@@ -0,0 +1,37 @@
+// SPDX-License-Identifier: MIT
+import {fromHtml} from 'hast-util-from-html';
+import {createFormulaRenderer} from './integration.mjs';
+
+// Run AFTER the host sanitizer. Only known math code nodes are replaced, using
+// fresh renderer output parsed into HAST. Authored raw nodes never become HTML here.
+export default function rehypeRapierMath(options = {}) {
+  return (tree, file) => {
+    const render = createFormulaRenderer(options);
+    function math(node) {
+      const names = node?.properties?.className;
+      if (node?.type !== 'element' || node.tagName !== 'code' || !Array.isArray(names) ||
+          !names.includes('language-math') || !names.some(name => name === 'math-inline' || name === 'math-display') ||
+          !Array.isArray(node.children) || !node.children.every(child => child.type === 'text' && typeof child.value === 'string')) return null;
+      return {source: node.children.map(child => child.value).join(''), display: names.includes('math-display')};
+    }
+    function visit(parent) {
+      for (let index = 0; index < (parent.children?.length || 0); index++) {
+        const node = parent.children[index];
+        const code = node.type === 'element' && node.tagName === 'pre' && node.children?.length === 1 ? node.children[0] : node;
+        const input = math(code);
+        if (!input) { visit(node); continue; }
+        const result = render(input.source, input.display);
+        if (result.errors.length) {
+          for (const error of result.errors) {
+            const message = file?.message(error.message, {place: code.position, source: 'rapier-math', ruleId: error.code});
+            if (message) { message.mathSource = input.source; message.mathOffset = error.offset; }
+          }
+          continue;
+        }
+        const svg = fromHtml(result.svg, {fragment: true}).children[0];
+        parent.children[index] = input.display ? {type: 'element', tagName: 'div', properties: {className: ['math-display']}, children: [svg]} : svg;
+      }
+    }
+    visit(tree);
+  };
+}

package/src/math/README.md

@@ -0,0 +1,210 @@
+# Rapier Math
+
+Self-contained TeX-to-SVG maths with embedded Latin Modern outlines. Rendering is synchronous and offline,
+with no core runtime dependencies, DOM, global installation or remote font request. Optional integrations
+keep the host's Markdown parser in charge.
+
+## Start with a formula
+
+```sh
+npm install rapier-math
+```
+
+```js
+import {render} from 'rapier-math';
+const source = String.raw`\frac{-b\pm\sqrt{b^2-4ac}}{2a}`;
+const result = render(source, {displayMode: true});
+if (result.errors.length) console.error(result.errors);
+else console.log(result.svg);
+```
+
+Keep `source` for editing and copying. A formula API accepts TeX without Markdown delimiters.
+`String.raw` helps with JavaScript literals; JSON and transport decoding are separate layers. Never unescape
+the TeX a second time. Native ESM works in Node 22+, current browsers and module workers; no CommonJS wrapper
+is provided. Server output needs no client renderer unless fitting or further rendering is wanted.
+
+## Markdown
+
+```sh
+npm install markdown-it
+```
+
+```js
+import MarkdownIt from 'markdown-it';
+import rapierMath from 'rapier-math/markdown-it';
+const md = new MarkdownIt({html: false}).use(rapierMath);
+const env = {};
+const html = md.render('Price $5. Code: `$$x$$`. Formula: \\(x^2\\).', env);
+console.log(env.rapierMathErrors || []);
+```
+
+Default delimiters are `\(...\)` (inline), `\[...\]` and `$$...$$` (display). Single `$...$` is opt-in:
+`.use(rapierMath, {singleDollar: true})`. It cannot distinguish all currency from mathematics.
+
+| Boundary rule | Contract |
+| --- | --- |
+| Escapes | An odd run of preceding backslashes escapes a delimiter; an even run does not. The body is never unescaped. |
+| Dollar runs | Only complete runs of one or two dollars are delimiters. Three or more are literal. `\$$` is an escaped pair. |
+| Single dollars | Nonempty body, no leading/trailing whitespace or CR/LF; a closer followed by an ASCII digit is rejected. |
+| Other pairs | Whitespace and newlines are allowed. The first unescaped matching closer wins. No delimiter nesting. |
+| Blocks | A display opener at the host's block start and a closer followed only by line whitespace makes a block. Otherwise it is inline content. |
+| Incomplete input | No math node is emitted until a matching closer exists. Surrounding text stays under host control. |
+| Protected source | Code spans, fences, indented code, link destinations, autolinks and HTML tags remain host syntax. Math in link labels is disabled. Math in image descriptions is retained as literal source in alt text. |
+
+Use `html: false` for untrusted Markdown. If your application enables raw HTML, retain its sanitizer and
+HTML policy. Inline HTML element contents follow the host grammar; the math adapter is not an HTML parser.
+The `rapier-math/delimiters` export offers `createMathMatcher(source, options)(start, limit?)` for authors of
+other host adapters. It indexes boundaries in a raw text region, returns exact UTF-16 offsets, and knows
+nothing about Markdown structure. Do not scan rendered HTML with it.
+
+The Rapier app explicitly keeps its established dollar-only dialect, including math in link labels.
+The shared owner corrects escaped display closers and retains outer formula whitespace. No public
+adapter or renderer imports the app's AGPL Markdown implementation.
+
+## unified / remark / rehype
+
+Use `remark-math`, `remark-rehype`, then `rehype-sanitize`, then `rapier-math/rehype`, then `rehype-stringify`.
+The complete [unified example](examples/unified.mjs) grants only the math classes on sanitized code nodes.
+The adapter replaces supported `language-math` + `math-inline`/`math-display` nodes with HAST parsed from
+fresh renderer SVG. It does not turn authored raw HTML into trusted markup or loosen the global SVG sanitizer.
+The optional `hast-util-from-html` peer is used only by this entrypoint.
+
+Choose `remarkMath({singleDollarTextMath: false})` to avoid single-dollar ambiguity. Remark owns delimiter,
+whitespace and code rules in this pipeline; its grammar is different from the markdown-it adapter and does
+not enable backslash delimiters. Unsupported formulas remain copyable code and produce VFile messages
+with `ruleId`, `mathOffset` and `mathSource`.
+
+Both rendering adapters accept `renderOptions`, `maxFormulas` (default 1024) and `maxOutputLength` (default
+16 Mi UTF-16 code units of successful SVG per document render). Rendering a cached markdown-it token tree
+again starts a fresh budget; inline children share their enclosing document's budget. Exhaustion leaves subsequent source literal with
+diagnostics. The host owns its own source, tree, prose and final HTML budgets. These are synchronous adapters.
+
+## Streaming
+
+```js
+import {createMarkdownStream} from 'rapier-math/stream';
+const stream = createMarkdownStream(source => md.render(source, {}));
+const preview = stream.write('The answer is \\(x'); // may return null
+stream.write('^2\\).');
+const completed = stream.finish(); // {source, html, revision, final: true}
+```
+
+Use one stream per message. `write` accepts decoded strings and returns either a whole preview or `null`;
+`finish` always runs the same batch renderer on the complete exact source. `abort` releases pending text.
+`reset` starts a replacement and advances the revision. Cancel the old producer before reset, or reject its
+chunks using your conversation generation. No callbacks, timers, DOM mutations or shared conversation state
+are installed. See the [stream example](examples/stream.mjs).
+
+Markdown references, setext headings and fences can change earlier interpretation, so previews are
+replaceable, not committed prefixes. An open formula remains literal. Defaults: at most 1,000,000 retained
+source code units; first preview at 256 units, then only after the source has at least doubled. Including
+one `finish`, the total source sent to the host is less than three times final length, even if previews fail.
+Explicit retries of `finish` are additional host calls. There is no full-prefix
+render on every token. Late previews are consequently less frequent; show incoming chunks as text for
+immediate progress. `previewEvery` sets the first threshold, not a fixed per-chunk interval.
+
+Retained state is O(message length), not a claimed constant-memory Markdown parser. Stream chunks can split
+delimiters, CRLF, escapes or surrogate pairs. Final interpretation is batch-equivalent; interim previews
+may show an incomplete code unit. A rejected oversized chunk is not accepted or silently truncated; the
+caller still owns it. A failed renderer leaves accumulated source available for retry or reset.
+
+## Formula API and browser lifetime
+
+| Export | Result |
+| --- | --- |
+| `render(tex, options?)` | `{svg, width, height, depth, lines, fitted, errors}`; dimensions in mathematical ems. |
+| `renderToString(tex, options?)` | SVG, including diagnostic SVG for admitted malformed or unsupported syntax. |
+| `parse(tex)` | Inspectable AST; throws structured errors. Internal node vocabulary can grow. |
+| `fit(container)` | One synchronous DOM fitting pass, returning selected formula count. |
+| `observe(container)` | Observe current formulas; returns idempotent cleanup. |
+| `version` | The package version. Default export provides the same API. |
+
+`displayMode`, `maxWidth` in mathematical ems, and optional `screen: {fontSize, pixelRatio, dark}` configure
+rendering. Screen numbers must be positive finite values; `dark` must be boolean. Omit screen options for
+SSR and the initial hydration render. Long rows break at available relations/operators; indivisible
+oversized groups scale to fit. Fit after hydration, stop observation before replacement, then observe the
+new formulas. Stop on unmount. [Browser](examples/browser.html), [worker](examples/worker.mjs) and
+[React/SSR](examples/react.tsx) examples demonstrate these boundaries. React is not a package dependency.
+
+## Errors, source and accessibility
+
+Check `errors` before treating a formula as successful. Errors include `code`, `message`, UTF-16 `offset`
+and sometimes `command`. Render-result messages are limited to 1024 code units plus an ellipsis and command
+names to 128, with explicit `messageTruncated`/`commandTruncated` flags. Exact admitted source is retained
+independently. `parse` throws the parser's details, bounded by its source admission limit. Do not use a
+diagnostic message as a source archive.
+
+Valid XML source is kept exactly in SVG `aria-label` and `title`, including BOM, tabs and CRLF (escaped as
+character references). Invalid XML characters have visible Unicode escapes and a `data-tex-utf16` carrier:
+each four hex digits represents one original UTF-16 code unit. This includes isolated surrogates. The
+Markdown host may normalize its syntax-node content; retain the original Markdown separately. Streams
+return the exact concatenated source, including malformed UTF-16, without normalization.
+
+Source longer than 1,000,000 code units returns a bounded `resource-limit` diagnostic before source
+scanning, escaping or parsing. Its error has `sourceOmitted: true` and its SVG has
+`data-math-source-omitted="true"`; neither embeds or truncates the refused source. `renderToString` returns
+the same diagnostic SVG. Keep the original input for editing or copying. Admitted source alternatives
+remain exact. Other limits include 100,000 tokens, 50,000 parser nodes, depth 192, 4096 macro expansions, 100,000 layout
+visits, 4 Mi outline characters and 8 Mi composed SVG characters. Complete returned SVG, including source
+alternatives and diagnostics, is capped at 24 Mi UTF-16 code units. These are output/work bounds, not peak
+heap or device-memory claims. A later good render has a fresh budget.
+
+SVG labels contain raw TeX, not semantic MathML or mathematical speech. Ordinary equations are images in
+the accessibility tree. Equations containing authored HTTP(S) links use a group so the links remain exposed;
+each link is keyboard-focusable and labelled with its destination. Keep the editable source or a separate
+copy-source affordance in your host. Full semantic navigation, speech and screen-reader parity are not
+provided. A future semantic serializer needs an explicit AST-to-MathML mapping and assistive-technology
+evaluation; adding a raw TeX label does not satisfy that requirement.
+
+## Security and deployment
+
+The renderer emits local SVG outlines, never executable HTML, remote font/image fetches or loaded TeX
+extensions. Authored links permit only HTTP(S) and use `noopener noreferrer`. Insert only the returned
+SVG, never concatenate TeX or arbitrary HTML into the sink. On failure, use a text node or the framework's
+escaped text rendering. Formula safety does not sanitize surrounding Markdown.
+
+The native ESM path needs no `eval` or `unsafe-eval`. Generated SVG does contain style attributes:
+`script-src 'self'; style-src-attr 'unsafe-inline'; style-src-elem 'none'` permits same-origin external
+modules and those attributes in browsers implementing CSP3. It does **not** work under a policy forbidding
+all inline styles. `examples/browser.html` carries that policy; older browsers need their own reviewed
+style policy. No network access is needed after local module loading; use `connect-src 'none'` if suitable.
+
+With `require-trusted-types-for 'script'`, string HTML sinks and the DOMParser used by `fit`/`observe`
+require TrustedHTML. The core does not create a policy, return TrustedHTML or claim fitting support under
+that policy. Prefer server-rendered output or the structured rehype path in such applications. If the host
+uses a policy for initial insertion, narrowly scope it to freshly generated renderer output; never use a
+blanket identity policy for arbitrary strings. The browser/React examples assume string sinks are permitted.
+
+## Syntax and limits
+
+Supported: fractions, roots, scripts, limits, matrices/arrays/alignment, delimiters, accents, operators,
+Greek and mathematical alphabets, text/color/size/spacing, local macros, and selected chemistry/physics.
+Existing supported package names select built-in syntax; there is no external package/file loader.
+This is not a complete TeX document engine. No automatic numbering or cross-formula reference guarantee.
+Unsupported commands give diagnostics. Lowercase script/bold-script requests use ordinary-letter fallbacks
+where Latin Modern lacks those alphabets. All embedded licensed outlines remain present.
+
+## Package and proof
+
+Declarations accompany every public entry. Formula imports do not pull in Markdown, unified or React.
+For TypeScript, markdown-it 15 provides its own types; markdown-it 14 projects also install
+`@types/markdown-it@14`. Use the declarations for your host version.
+For a classic script, use `rapier-math-VERSION.js` and `globalThis.RapierMath`.
+The payload includes the font: it is not a few-kilobyte renderer. Payload counts below describe this
+build, not npm tarball size or a comparison against another library.
+
+Run `node verify.mjs` and `node check.mjs` from an installed package. The carried source rebuilds the exact
+classic payload and ESM module; receipts also cover the adapters, declarations and examples. Follow
+`src/math/FONT-SOURCE.md` to regenerate font data. License and font provenance are carried with every build.
+
+Verified-claim scope: synchronous self-contained formula rendering; opt-in Markdown integrations; bounded
+replaceable previews with exact final source; structured diagnostics and explicit source fallback. This
+does not establish all-device behavior, full TeX compatibility, semantic accessibility or universal
+size/speed superiority. Test your host's sanitizer, CSP, browser lifetime and supported formula corpus.
+
+## Licenses
+
+The renderer and neutral adapters are MIT. Latin Modern Math 1.959 outlines/metrics retain the GUST Font
+License, an instance of LPPL. `LICENSE` contains both complete grants. `LICENSE-MIT`, `math-LICENSE.txt`,
+`math-font-LICENSE.txt` and the SPDX 2.3 `math-components.json` retain renderer and font notices. Both payloads
+retain complete licenses. App-specific AGPL source is not included in this package.

package/src/math/adoption-verify.mjs

@@ -0,0 +1,149 @@
+// SPDX-License-Identifier: MIT
+// Optional host checks: run from the installed package with the example peers.
+// One source-custody table; no appearance or timing assertions.
+import assert from 'node:assert/strict';
+import MarkdownIt from 'markdown-it';
+import {render} from 'rapier-math';
+import rapierMath from 'rapier-math/markdown-it';
+import {createMathMatcher} from 'rapier-math/delimiters';
+import {createMarkdownStream} from 'rapier-math/stream';
+import {processor} from './examples/unified.mjs';
+
+const md = new MarkdownIt({html: false}).use(rapierMath);
+const dollar = new MarkdownIt({html: false}).use(rapierMath, {singleDollar: true});
+const mathNodes = (host, source) => host.parse(source, {}).flatMap(token => token.children || [token])
+  .filter(token => token.type === 'math_inline' || token.type === 'math_block');
+const rows = [
+  ['escaped pair incomplete', String.raw`$$x\$$`, 0],
+  ['escaped pair then closer', String.raw`$$x\$$y$$`, 1],
+  ['even escape run', String.raw`$$x\\$$`, 1],
+  ['brackets', String.raw`A \(x+1\) B \[y\]`, 2],
+  ['escaped bracket opener', String.raw`A \\(x\\)`, 0],
+  ['currency', 'It costs $5 and $10.', 0],
+  ['code and fence', '`$$x$$`\n\n```tex\n$$y$$\n```\n\n    $$z$$\n', 0],
+  ['links', String.raw`[\(x\)](https://example.com/$$x$$)`, 0],
+  ['literal backslashes', String.raw`Path C:\\temp. \(\text{a\ b}\)`, 1],
+  ['CRLF BOM Unicode', '\ufeffπ 🐈\r\n\r\n$$\r\nx+1\r\n$$\r\n', 1],
+  ['incomplete', 'Before \\(x+1 and after', 0],
+  ['malformed UTF-16', '\ud800 and \\(x\\) and \udfff', 1],
+];
+for (const [name, source, count] of rows) {
+  assert.equal(mathNodes(md, source).length, count, name);
+  const batch = md.render(source, {});
+  // Every two-piece boundary, including CRLF, escape runs and surrogate pairs.
+  for (let split = 0; split <= source.length; split++) {
+    const stream = createMarkdownStream(text => md.render(text, {}), {previewEvery: 8});
+    stream.write(source.slice(0, split)); stream.write(source.slice(split));
+    const final = stream.finish();
+    assert.equal(final.source, source, name + ': exact transport source');
+    assert.equal(final.html, batch, name + ': final batch agreement');
+  }
+}
+for (const [source, count] of [[String.raw`$x\$y$`, 1], ['$x$5', 0], ['$ x$', 0], ['$x $', 0], ['$$$x$$$', 0]])
+  assert.equal(mathNodes(dollar, source).length, count);
+// Image descriptions are text-only host output: unknown math token types must
+// not disappear from alt text or spend a formula-render budget.
+for (const [source, alt] of [
+  [String.raw`![before $$x$$ after](image.png)`, 'before $$x$$ after'],
+  [String.raw`![before \(x\) after](image.png)`, String.raw`before \(x\) after`],
+  [String.raw`![a ![b $$x$$](inner.png) c](outer.png)`, 'a b $$x$$ c'],
+  [String.raw`![a $$\text{<>&"}$$ b](image.png)`, 'a $$\\text{&lt;&gt;&amp;&quot;}$$ b'],
+]) {
+  const host = new MarkdownIt({html: false}).use(rapierMath, {maxFormulas: 1});
+  const tokens = host.parse(source + String.raw` \(y\)`, {});
+  for (let pass = 0; pass < 2; pass++) {
+    const env = {}, html = host.renderer.render(tokens, host.options, env);
+    assert(html.includes('alt="' + alt + '"'), 'image math remains literal source');
+    assert.equal((html.match(/<svg /g) || []).length, 1, 'alt text does not spend the formula budget');
+    assert.equal(env.rapierMathErrors, undefined);
+  }
+}
+const exact = '\ufeff$$\r\n α+\\text{a\\ b} 🐈\r\n$$';
+const span = createMathMatcher(exact)(1);
+assert.equal(exact.slice(span.bodyStart, span.bodyEnd), '\r\n α+\\text{a\\ b} 🐈\r\n');
+assert.equal(createMathMatcher(String.raw`$$x\$$`)(0), null);
+
+const first = createMarkdownStream(text => text, {maxSourceLength: 8, previewEvery: 2});
+const second = createMarkdownStream(text => text);
+first.write('ab'); second.write('other'); first.abort(); first.abort();
+assert.throws(() => first.write('c'));
+first.reset(); first.write('new');
+assert.throws(() => first.write('123456'), {code: 'resource-limit'});
+assert.equal(first.finish().source, 'new');
+assert.equal(second.finish().source, 'other');
+assert.throws(() => second.finish());
+let failingHost = true, supplied = 0;
+const failing = createMarkdownStream(text => {
+  supplied += text.length;
+  if (failingHost) throw new Error('host failed');
+  return text;
+}, {previewEvery: 2});
+const failedSource = 'x'.repeat(32);
+for (const chunk of failedSource) {
+  try { failing.write(chunk); } catch (error) { assert.equal(error.message, 'host failed'); }
+}
+failingHost = false;
+assert.equal(failing.finish().source, failedSource, 'failed previews retain every accepted chunk');
+assert(supplied < 3 * failedSource.length, 'failed previews keep the repeated-work bound');
+failing.abort(); failing.reset();
+
+const hostile = String.raw`Before \(\text{</title><script>alert(1)</script>}\). <img src=x onerror=alert(1)>`;
+assert(!/<script|<img/i.test(md.render(hostile, {})));
+// Cached syntax can serve multiple outputs. Budgets belong to each render, not
+// to parsing or to an env object; every paragraph still shares one document cap.
+const formulaSource = String.raw`\(x\)`, svgCount = html => (html.match(/<svg /g) || []).length;
+for (const budgets of [{maxFormulas: 1}, {maxOutputLength: render('x').svg.length}]) {
+  const host = new MarkdownIt({html: false}).use(rapierMath, budgets);
+  for (const inline of [false, true]) {
+    const source = formulaSource + (inline ? ' ' : '\n\n') + formulaSource;
+    const tree = host.parse(source, {});
+    const tokens = inline ? tree[1].children : tree;
+    const renderer = inline ? host.renderer.renderInline : host.renderer.render;
+    for (let pass = 0; pass < 2; pass++) {
+      const env = {}, out = renderer.call(host.renderer, tokens, host.options, env);
+      assert.equal(svgCount(out), 1);
+      assert.equal(env.rapierMathErrors.length, 1);
+      assert.equal(env.rapierMathErrors[0].errors[0].code, 'resource-limit');
+      assert(out.includes(formulaSource));
+    }
+  }
+}
+const nestedHost = new MarkdownIt({html: false}).use(rapierMath, {maxFormulas: 1});
+const nestedTree = nestedHost.parse(formulaSource + ' fail', {});
+const textRule = nestedHost.renderer.rules.text;
+nestedHost.renderer.rules.text = (tokens, index, opts, env, self) => {
+  if (tokens[index].content === ' fail') throw new Error('host render failed');
+  if (tokens[index].content.includes('nested')) {
+    for (const inline of [false, true]) {
+      const nestedEnv = {};
+      assert.throws(() => inline
+        ? self.renderInline(nestedTree[1].children, opts, nestedEnv)
+        : self.render(nestedTree, opts, nestedEnv), /host render failed/);
+      assert.equal(nestedEnv.rapierMathErrors, undefined, 'nested render has its own budget');
+    }
+  }
+  return textRule(tokens, index, opts, env, self);
+};
+const outerTree = nestedHost.parse(formulaSource + ' nested ' + formulaSource, {});
+// A custom host can run the same renderer twice; a failed nested render must
+// restore the outer cap and leave subsequent root renders fresh.
+for (let pass = 0; pass < 2; pass++) {
+  const env = {}, out = nestedHost.renderer.render(outerTree, nestedHost.options, env);
+  assert.equal(svgCount(out), 1);
+  assert.equal(env.rapierMathErrors.length, 1);
+  assert.equal(env.rapierMathErrors[0].errors[0].code, 'resource-limit');
+}
+const tiny = new MarkdownIt({html: false}).use(rapierMath, {maxOutputLength: 1});
+assert(!tiny.render(String.raw`\(x\)`).includes('<svg'));
+const bad = {}, fallback = md.render(String.raw`Good \(x\). Bad \(\unknown{x}\).`, bad);
+assert.equal(bad.rapierMathErrors[0].errors[0].code, 'unsupported-command');
+assert(fallback.includes('\\unknown{x}'));
+
+const unified = await processor.process('Code `$$x$$`. Math $$x+1$$.\n\n<script>alert(1)</script>\n\n$$\\unknown{x}$$');
+assert.equal((String(unified).match(/<svg /g) || []).length, 1);
+assert(!String(unified).includes('<script'));
+assert.equal(unified.messages[0].ruleId, 'unsupported-command');
+assert(String(unified).includes('\\unknown{x}'));
+console.log(JSON.stringify({sourceCustodyRows: rows.length, splitAgreement: 'all two-piece boundaries',
+  lifetimes: 'abort, reset, replacement, rejection, interleaved messages', adapters: 'markdown-it and sanitized unified',
+  security: 'hostile source stays inert; document math budgets fall back'}));

package/src/math/api.js

@@ -7,23 +7,27 @@ function mathSvg(box,source,error,utf16,options={}) {
   const opacity=options.screen?.dark ? .94 : 1;
   if (![width,height,depth,left,...viewBox].every(Number.isFinite)) throw new Error('Mathematical dimensions are not finite');
   const escapedSource=mathEscape(source);
-  const svg='<svg xmlns="http://www.w3.org/2000/svg" role="img" aria-label="'+escapedSource+'"'+
+  // A group exposes authored links to accessibility APIs; an image would hide them.
+  const svg='<svg xmlns="http://www.w3.org/2000/svg" role="'+(box.svg.includes('<a ')?'group':'img')+'" aria-label="'+escapedSource+'"'+
     ' data-rapier-math="'+(options.displayMode?'display':'inline')+'" data-math-lines="'+(box.lines || 1)+'"'+
     ' data-math-natural-width="'+mathNumber(options.naturalWidth ?? width)+'"'+
     (options.screen?' data-math-screen="'+mathNumber(options.screen.fontSize)+'|'+mathNumber(options.screen.pixelRatio)+'|'+options.screen.dark+'"':'')+
     (options.maxWidth?' data-math-max-width="'+mathNumber(options.maxWidth)+'"':'')+
     (utf16?' data-tex-utf16="'+utf16+'"':'')+
+    (error?.sourceOmitted?' data-math-source-omitted="true"':'')+
     (error?' data-math-error="'+mathEscape(error.code)+'"':'')+' width="'+mathNumber(width)+'em" height="'+mathNumber(height+depth)+'em"'+
     ' viewBox="'+viewBox.map(mathNumber).join(' ')+'"'+
     ' style="font-size:'+mathNumber(mathFontRatio)+'em;max-width:100%;height:auto;vertical-align:-'+mathNumber(depth)+'em;'+
     'fill-opacity:'+opacity+';stroke-opacity:'+opacity+'" fill="currentColor">'+
     '<title>'+escapedSource+'</title>'+(error?'<desc>'+mathEscape(error.message)+'</desc>':'')+
     '<g transform="scale(1000)">'+box.svg+'</g></svg>';
+  if(svg.length>24*1024*1024)throw Object.assign(new Error('The complete formula markup exceeds its output budget.'),{code:'resource-limit'});
   return {svg,width,height,depth,lines:box.lines || 1,fitted:!!box.fitted,errors:error?[error]:[]};
 }
 
 function mathSourceAlternative(source) {
-  let alternative='',first=-1,kept=0;
+  const alternatives=[],parts=[];
+  let first=-1,kept=0;
   for(let i=0;i<source.length;i++) {
     const code=source.charCodeAt(i);
     if(code>=0xd800 && code<=0xdbff && i+1<source.length) {
@@ -32,19 +36,32 @@ function mathSourceAlternative(source) {
     }
     if((code>=0x20 && code<=0xd7ff) || (code>=0xe000 && code<=0xfffd) || code===9 || code===10 || code===13)continue;
     if(first<0)first=i;
-    alternative+=source.slice(kept,i)+'\\u'+code.toString(16).toUpperCase().padStart(4,'0');kept=i+1;
+    if(i>kept)parts.push(source.slice(kept,i));
+    parts.push('\\u'+code.toString(16).toUpperCase().padStart(4,'0'));kept=i+1;
+    // Flatten small batches instead of retaining one rope node per bad code unit.
+    if(parts.length>=1024) {alternatives.push(parts.join(''));parts.length=0;}
   }
   if(first<0)return {alternative:source};
-  alternative+=source.slice(kept);
+  parts.push(source.slice(kept));alternatives.push(parts.join(''));
   // Only malformed XML text needs a separate carrier; each four hex digits keep one original code unit.
-  let utf16='';
-  for(let i=0;i<source.length;i++)utf16+=source.charCodeAt(i).toString(16).padStart(4,'0');
-  return {alternative,utf16,error:{code:'invalid-source-character',offset:first,
+  const encoded=[];parts.length=0;
+  for(let i=0;i<source.length;i++) {
+    parts.push(source.charCodeAt(i).toString(16).padStart(4,'0'));
+    if(parts.length===1024) {encoded.push(parts.join(''));parts.length=0;}
+  }
+  encoded.push(parts.join(''));
+  return {alternative:alternatives.join(''),utf16:encoded.join(''),error:{code:'invalid-source-character',offset:first,
     message:'A source character cannot be embedded in SVG. The text alternative shows Unicode escapes; data-tex-utf16 keeps the original source.'}};
 }
 
 function renderMath(source,options={}) {
-  const text=String(source ?? ''),safe=mathSourceAlternative(text),context={size:1,level:0,variant:'normal',cramped:false,display:!!options?.displayMode,cache:new WeakMap(),budget:{nodes:0,outlineBytes:0}};
+  const text=String(source ?? '');
+  // Reject before scanning, escaping or parsing. Keep the diagnostic-return
+  // contract, but explicitly omit refused source instead of expanding it.
+  const safe=text.length>1000000?{alternative:'Formula source omitted: source limit exceeded.',error:{
+    code:'resource-limit',offset:0,sourceOmitted:true,
+    message:'This formula is too long to render safely. Its source was not embedded; retain the original input.'
+  }}:mathSourceAlternative(text),context={size:1,level:0,variant:'normal',cramped:false,display:!!options?.displayMode,cache:new WeakMap(),budget:{nodes:0,outlineBytes:0}};
   try {
     if(safe.error)throw safe.error;
     if(options?.screen!==undefined) {
@@ -61,11 +78,16 @@ function renderMath(source,options={}) {
     return mathSvg(box,safe.alternative,undefined,undefined,{displayMode:context.display,maxWidth,naturalWidth:mathInkWidth(natural)+.05,screen:context.screen});
   }
   catch (cause) {
-    const error={code:cause.code || 'invalid-tex',message:String(cause.message || cause),offset:Number.isFinite(cause.offset)?cause.offset:0};
-    if(cause.command)error.command=cause.command;
+    const message=String(cause.message || cause);
+    const error={code:cause.code || 'invalid-tex',message:message.length>1024?message.slice(0,1024).replace(/[\ud800-\udbff]$/,'')+'…':message,offset:Number.isFinite(cause.offset)?cause.offset:0};
+    if(message.length>1024)error.messageTruncated=true;
+    if(cause.sourceOmitted)error.sourceOmitted=true;
+    if(cause.command) {
+      error.command=String(cause.command).slice(0,128);
+      if(cause.command.length>128)error.commandTruncated=true;
+    }
     // A diagnostic is visible, but remains distinct from a successfully typeset formula.
-    // A hostile command can have a very long name. Keep its full diagnostic in desc/errors,
-    // while the visible notice stays finite and can render after the formula exhausted its budget.
+    // Diagnostics have an explicit bound. Exact input stays in the source alternative.
     const label=error.message.length>240?'This formula could not be rendered. The complete diagnostic is in its text description.':error.message.replace(/[^\x20-\x7e]/g,'?');
     const diagnostic={...context,variant:'roman',size:0.8,budget:{nodes:0,outlineBytes:0}};
     try {
@@ -78,7 +100,7 @@ function renderMath(source,options={}) {
 }
 
 globalThis.RapierMath=Object.freeze({
-  version:'1.0.2',
+  version:'1.1.0',
   parse:parseMathTex,
   render:renderMath,
   fit:mathFit,