toolcraft 0.0.798 → 0.0.800

package/composition.json

@@ -138,7 +138,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.798",
+      "version": "0.0.800",
       "license": "MIT"
     },
     {
@@ -148,7 +148,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.798",
+      "version": "0.0.800",
       "license": "MIT"
     },
     {

package/dist/composition.json

@@ -138,7 +138,7 @@
     },
     {
       "name": "toolcraft",
-      "version": "0.0.798",
+      "version": "0.0.800",
       "license": "MIT"
     },
     {
@@ -148,7 +148,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.798",
+      "version": "0.0.800",
       "license": "MIT"
     },
     {

package/node_modules/@poe-code/safe-fs/dist/core.d.ts

@@ -9,7 +9,7 @@ export * from "./fs/webdav/index.js";
 export * from "./bridge/index.js";
 export * from "./python/index.js";
 export { parseXml, parseXmlSteps, parseXmlSourceSteps, normalizeXmlChunks, parseXmlStream, XmlLimitError } from "./xml.js";
-export type { XmlName, XmlAttribute, XmlContent, XmlElement, XmlLimits, XmlParserFrame, XmlFrameRequest, XmlNamespaceScope, XmlNamespaceRequest, XmlAttributeRequest, XmlAttributeRecord } from "./xml.js";
+export type { XmlName, XmlAttribute, XmlContent, XmlElement, XmlLimits, XmlParserFrame, XmlFrameRequest, XmlNamespaceScope, XmlNamespaceRequest, XmlSourceRead, XmlSourceSpan, XmlAttributeRequest, XmlAttributeRecord } from "./xml.js";
 export * from "./contracts/object.js";
 export { ObjectAuthority } from "./fs/object-authority.js";
 export * from "./fs/s3/index.js";

package/node_modules/@poe-code/xml-ast/README.md

@@ -64,24 +64,48 @@ size cost. The default string and stream APIs retain their existing ancestry beh
 
 Also set `storeNamespaces: true` to resolve namespace scopes through host-backed
 immutable storage. `namespaceOperation: "get"` supplies a scope and prefix; fill
-`value` when present and set `complete: true`. For `"set"`, bind the supplied prefix
+`value` when present and set `complete: true`. For `"has"`, fill `found` using
+membership without reading the URI value. For `"set"`, bind the supplied prefix
 and value in a new scope, then fill `result` with its storage `reference` and the
 number of distinct bindings (`size`). Frames carry this scope handle so shadowing
 never changes ancestor scopes. In this mode event elements have an empty
 `namespaces` map; their names and attributes still carry resolved namespace URIs.
-The codec remains filesystem-independent, and individual names, attribute values
-and namespace URIs still need a token storage strategy.
+The codec remains filesystem-independent. With `deferNamespaces: true`, resolved
+URI metadata uses optional `namespaceReference` handles instead of complete strings.
+Service `namespaceOperation: "reference"` by supplying the token `reference` when
+present and setting `complete: true`. These handles belong to the host scope store;
+retain or stream them before retiring that store. Built-in xml/xmlns names keep
+their short namespace strings. Individual names still retain their token cost;
+attribute values can use the fragment protocol below.
 
 Set `storeAttributes: true` to move current-tag attribute values, source order,
 and duplicate-name state behind `attributeOperation` requests (`has`, `append`,
 `read`, and `expanded`). Service the request's `found` or `result` field as described
-by `XmlAttributeRequest`, keeping records in caller-owned backing. With this flag,
+by `XmlAttributeRequest`, keeping records in caller-owned backing. When namespace
+storage is also enabled, `expanded` supplies the local name and a `namespace` scope
+and prefix. Check the pair of resolved URI and local name without joining them in
+memory; an empty prefix means no attribute namespace, regardless of the default
+element namespace. With this flag,
 element `attributes` arrays are empty. Supply `onAttribute(attribute, element)` to
 receive resolved attributes in source order, after the open event and before any
 content or close event. The parser yields between attributes so a host can await
 storage or a consumer. Namespace declarations may follow prefixed attributes;
 resolution and duplicate-expanded-name validation still happen after the complete
-start tag. Individual attribute names and values retain their token cost.
+start tag. With `fragmentAttributes: true`, ordinary values are validated through source spans; all attribute
+values are stored as spans on attribute records and replayed in at most 512 UTF-16
+units. Hosts must preserve the optional `source` field in append/read requests.
+The third `onAttribute` argument is `true` for continuations of the same logical
+attribute; await each fragment before requesting the next step. Empty attributes
+still emit once. Entity diagnostics are emitted during validation, not replay.
+This mode requires `storeAttributes: true`. Combining it with `storeNamespaces`
+also validates namespace declarations in bounded fragments. A namespace `set`
+request's `value` may then be a generator: strings are decoded value fragments,
+numbers are work checkpoints, and objects are source-read requests. Service each
+step before advancing, consume the complete value before filling `result`, and
+close the producer if storage fails. Reserved URI checks preserve their diagnostic
+order without joining fragments. Expanded-name events return complete URI strings
+unless deferred namespace metadata is enabled; individual names still retain
+their token cost.
 
 Pass `undefined` as the source length to parse incrementally. Such read requests
 have `streaming: true` and request at most 512 UTF-16 units. Return any nonempty
@@ -100,5 +124,12 @@ decoding replay bounded source windows before publishing a logical node, retaini
 its diagnostic and limit ordering. Numeric entity references are decoded without
 materializing the token. Set `compactDeclaration: true` to retain normalized declaration fields without
 copying long whitespace spans; validation always reads bounded windows. The
-buffered API keeps the original declaration spelling. Names, attribute values
-and namespace scopes still require their own memory budget.
+buffered API keeps the original declaration spelling.
+
+Combine `fragmentContent` with `deferContentNames: true` to validate long
+processing-instruction targets through source windows. Their events have an empty
+`target` and a `targetSource` span; replay that span before retiring the source.
+All body continuations carry the same target span. Short targets remain strings.
+The stored document engine transfers these spans to its own token store and
+streams targets during output. Element and attribute names still require their
+own memory budget.

package/node_modules/@poe-code/xml-ast/dist/attributes.d.ts

@@ -1,9 +1,14 @@
+import type { XmlNamespaceScope } from "./frames.js";
 export interface XmlAttributeRecord {
     name: string;
     prefix: string;
     localName: string;
     value: string;
     next: number;
+    source?: {
+        start: number;
+        end: number;
+    };
 }
 export interface XmlAttributeState {
     reference: number;
@@ -16,6 +21,10 @@ export type XmlAttributeRequest = {
     state: XmlAttributeState;
     name: string;
     found?: boolean;
+    namespace?: {
+        scope: XmlNamespaceScope;
+        prefix: string;
+    };
 } | {
     attributeOperation: 'append';
     state: XmlAttributeState;
@@ -41,7 +50,13 @@ export declare class XmlAttributes {
     get size(): number;
     get first(): number;
     has(name: string): Generator<XmlAttributeRequest, boolean, void>;
-    append(name: string, prefix: string, localName: string, value: string): Generator<XmlAttributeRequest, void, void>;
+    append(name: string, prefix: string, localName: string, value: string, source?: {
+        start: number;
+        end: number;
+    }): Generator<XmlAttributeRequest, void, void>;
     read(reference: number, values: boolean): Generator<XmlAttributeRequest, XmlAttributeRecord, void>;
-    expanded(name: string): Generator<XmlAttributeRequest, boolean, void>;
+    expanded(name: string, namespace?: {
+        scope: XmlNamespaceScope;
+        prefix: string;
+    }): Generator<XmlAttributeRequest, boolean, void>;
 }

package/node_modules/@poe-code/xml-ast/dist/attributes.js

@@ -23,14 +23,14 @@ export class XmlAttributes {
             throw new TypeError('Incomplete XML attribute lookup');
         return request.found;
     }
-    *append(name, prefix, localName, value) {
+    *append(name, prefix, localName, value, source) {
         if (!this.external) {
             this.names.set(name, value);
             this.records.push({ name, prefix, localName });
             this.state = { reference: 0, first: 1, length: this.records.length, size: this.names.size };
             return;
         }
-        const request = { attributeOperation: 'append', state: this.state, attribute: { name, prefix, localName, value } };
+        const request = { attributeOperation: 'append', state: this.state, attribute: { name, prefix, localName, value, ...(source ? { source } : {}) } };
         yield request;
         if (!request.result)
             throw new TypeError('Incomplete XML attribute append');
@@ -47,13 +47,13 @@ export class XmlAttributes {
             throw new TypeError('Incomplete XML attribute read');
         return request.result;
     }
-    *expanded(name) {
+    *expanded(name, namespace) {
         if (!this.external) {
             const found = this.expandedNames.has(name);
             this.expandedNames.add(name);
             return found;
         }
-        const request = { attributeOperation: 'expanded', state: this.state, name };
+        const request = { attributeOperation: 'expanded', state: this.state, name, ...(namespace ? { namespace } : {}) };
         yield request;
         if (request.found === undefined)
             throw new TypeError('Incomplete XML expanded attribute lookup');

package/node_modules/@poe-code/xml-ast/dist/frames.d.ts

@@ -1,4 +1,5 @@
-import type { XmlContent, XmlElement } from './index.js';
+import type { XmlSourceStep } from './source.js';
+import type { XmlContent, XmlElement, XmlName } from './index.js';
 export interface XmlParserFrame {
     element: XmlElement;
     content: XmlContent[] | undefined;
@@ -33,6 +34,17 @@ export interface XmlNamespaceScope {
     readonly size: number;
 }
 export type XmlNamespaceRequest = {
+    readonly namespaceOperation: 'reference';
+    readonly scope: XmlNamespaceScope;
+    readonly prefix: string;
+    reference?: number;
+    complete?: true;
+} | {
+    readonly namespaceOperation: 'has';
+    readonly scope: XmlNamespaceScope;
+    readonly prefix: string;
+    found?: boolean;
+} | {
     readonly namespaceOperation: 'get';
     readonly scope: XmlNamespaceScope;
     readonly prefix: string;
@@ -42,8 +54,10 @@ export type XmlNamespaceRequest = {
     readonly namespaceOperation: 'set';
     readonly scope: XmlNamespaceScope;
     readonly prefix: string;
-    readonly value: string;
+    readonly value: string | Generator<XmlSourceStep | string, void, void>;
     result?: XmlNamespaceScope;
 };
 export declare function namespaceValue(scope: Map<string, string> | XmlNamespaceScope, prefix: string): Generator<XmlNamespaceRequest, string | undefined, void>;
-export declare function bindNamespace(scope: Map<string, string> | XmlNamespaceScope, prefix: string, value: string): Generator<XmlNamespaceRequest, Map<string, string> | XmlNamespaceScope, void>;
+export declare function namespaceMetadata(scope: Map<string, string> | XmlNamespaceScope, prefix: string, deferred?: boolean): Generator<XmlNamespaceRequest, Pick<XmlName, 'namespace' | 'namespaceReference'>, void>;
+export declare function hasNamespace(scope: Map<string, string> | XmlNamespaceScope, prefix: string): Generator<XmlNamespaceRequest, boolean, void>;
+export declare function bindNamespace(scope: Map<string, string> | XmlNamespaceScope, prefix: string, value: string | Generator<XmlSourceStep | string, void, void>): Generator<XmlNamespaceRequest, Map<string, string> | XmlNamespaceScope, void>;

package/node_modules/@poe-code/xml-ast/dist/frames.js

@@ -52,8 +52,30 @@ export function* namespaceValue(scope, prefix) {
         throw new TypeError('Incomplete XML namespace read');
     return request.value;
 }
+export function* namespaceMetadata(scope, prefix, deferred = false) {
+    if (!deferred || scope instanceof Map)
+        return { namespace: (yield* namespaceValue(scope, prefix)) ?? '' };
+    if (prefix === 'xml')
+        return { namespace: 'http://www.w3.org/XML/1998/namespace' };
+    const request = { namespaceOperation: 'reference', scope, prefix };
+    yield request;
+    if (!request.complete)
+        throw new TypeError('Incomplete XML namespace reference lookup');
+    return { namespace: '', ...(request.reference === undefined ? {} : { namespaceReference: request.reference }) };
+}
+export function* hasNamespace(scope, prefix) {
+    if (scope instanceof Map)
+        return scope.has(prefix);
+    const request = { namespaceOperation: 'has', scope, prefix };
+    yield request;
+    if (request.found === undefined)
+        throw new TypeError('Incomplete XML namespace membership lookup');
+    return request.found;
+}
 export function* bindNamespace(scope, prefix, value) {
     if (scope instanceof Map) {
+        if (typeof value !== 'string')
+            throw new TypeError('Streamed XML namespace values require external scopes');
         scope.set(prefix, value);
         return scope;
     }

package/node_modules/@poe-code/xml-ast/dist/index.d.ts

@@ -3,13 +3,14 @@ export type { XmlAttributeRequest, XmlAttributeRecord, XmlAttributeState } from
 import { type XmlNamespaceRequest, type XmlFrameRequest } from "./frames.js";
 export type { XmlParserFrame, XmlFrameRequest, XmlNamespaceScope, XmlNamespaceRequest } from "./frames.js";
 export { normalizeXmlChunks } from "./characters.js";
-import { type XmlSourceStep } from "./source.js";
-export type { XmlSourceRead, XmlSourceStep } from "./source.js";
+import { type XmlSourceSpan, type XmlSourceStep } from "./source.js";
+export type { XmlSourceRead, XmlSourceSpan, XmlSourceStep } from "./source.js";
 import type { XmlStreamEvent } from "./stream.js";
 export { XmlLimitError } from "./errors.js";
 export interface XmlName {
     readonly name: string;
     readonly namespace: string;
+    readonly namespaceReference?: number;
     readonly localName: string;
 }
 export interface XmlAttribute extends XmlName {
@@ -21,6 +22,8 @@ export type XmlContent = XmlElement | {
 } | {
     readonly kind: "processing-instruction";
     readonly target: string;
+    readonly targetSource?: XmlSourceSpan;
+    readonly targetReference?: number;
     readonly text: string;
 };
 export interface XmlElement extends XmlName {
@@ -65,9 +68,14 @@ export interface XmlSourceLimits extends XmlStepLimits {
     readonly storeFrames?: boolean;
     /** Resolve namespace scopes through host-serviced requests. Requires retainTree: false. */
     readonly storeNamespaces?: boolean;
+    /** Carry host namespace token references in event metadata. Requires stored namespaces. */
+    readonly deferNamespaces?: boolean;
+    /** Emit long processing-instruction targets as source spans. Requires fragmentContent. */
+    readonly deferContentNames?: boolean;
     /** Store attribute collections through host requests and emit resolved attributes individually. */
     readonly storeAttributes?: boolean;
-    readonly onAttribute?: (attribute: XmlAttribute, element: XmlElement) => void;
+    readonly fragmentAttributes?: boolean;
+    readonly onAttribute?: (attribute: XmlAttribute, element: XmlElement, continuation?: boolean) => void;
 }
 export type XmlParseStep = XmlSourceStep | XmlFrameRequest | XmlNamespaceRequest | XmlAttributeRequest;
 /** Parse a validated, BOM-free, line-normalized UTF-16 source via bounded read requests. */

package/node_modules/@poe-code/xml-ast/dist/index.js

@@ -1,5 +1,5 @@
 import { XmlAttributes } from "./attributes.js";
-import { XmlFrames, bindNamespace, namespaceValue } from "./frames.js";
+import { XmlFrames, bindNamespace, namespaceValue, namespaceMetadata, hasNamespace } from "./frames.js";
 import { validCharacter } from "./characters.js";
 export { normalizeXmlChunks } from "./characters.js";
 import { XmlSource } from "./source.js";
@@ -68,6 +68,40 @@ function qualifiedNameSync(name, cache) {
     }
     return parts;
 }
+/** Validate a name span without retaining its spelling. */
+function* validateNameSpan(source, start, end) {
+    let first = true, colon = false, work = 0;
+    for (let offset = start; offset < end;) {
+        let point = yield* source.charCodeAt(offset);
+        if (point >= 0xd800 && point <= 0xdbff && offset + 1 < end) {
+            const low = yield* source.charCodeAt(offset + 1);
+            if (low >= 0xdc00 && low <= 0xdfff)
+                point = 0x10000 + (point - 0xd800) * 1024 + low - 0xdc00;
+        }
+        if (point === 58) {
+            if (colon || first)
+                invalid("invalid qualified name");
+            colon = true;
+            first = true;
+        }
+        else {
+            if (!(first ? nameStart(point) : namePart(point)))
+                invalid("invalid qualified name");
+            first = false;
+        }
+        const size = point > 0xffff ? 2 : 1;
+        offset += size;
+        work += size;
+        if (work >= 512) {
+            yield 512;
+            work -= 512;
+        }
+    }
+    if (first)
+        invalid("invalid qualified name");
+    if (work)
+        yield work;
+}
 function* entity(source, start, end, recover) {
     // Inspect only a bounded prefix, even for arbitrarily long numeric references.
     const prefix = typeof source === "string" ? source.slice(start, Math.min(end, start + 4))
@@ -102,7 +136,7 @@ function* entity(source, start, end, recover) {
     return String.fromCodePoint(point);
 }
 /** Decoded text fragments; source read/work requests remain host-serviced. */
-function* textParts(source, start, end, decode, recover) {
+function* textParts(source, start, end, decode, recover, attribute = false) {
     let cursor = start;
     while (cursor < end) {
         let finish = Math.min(end, cursor + 512);
@@ -111,7 +145,13 @@ function* textParts(source, start, end, decode, recover) {
             if (last >= 0xd800 && last <= 0xdbff)
                 finish--;
         }
-        const raw = yield* source.slice(cursor, finish);
+        let raw = yield* source.slice(cursor, finish);
+        if (attribute) {
+            let normalized = "";
+            for (const character of raw)
+                normalized += "\t\n\r".includes(character) ? " " : character;
+            raw = normalized;
+        }
         const found = decode ? raw.indexOf("&") : -1;
         if (found < 0) {
             yield raw;
@@ -140,9 +180,9 @@ function* textParts(source, start, end, decode, recover) {
         cursor = semicolon + 1;
     }
 }
-function* textFragments(source, start, end, decode, recover) {
+function* textFragments(source, start, end, decode, recover, attribute = false) {
     let pending = "";
-    for (const part of textParts(source, start, end, decode, recover)) {
+    for (const part of textParts(source, start, end, decode, recover, attribute)) {
         if (typeof part !== "string") {
             yield part;
             continue;
@@ -254,10 +294,16 @@ function validateLimits(limits) {
 }
 export function* parseXmlSourceSteps(length, limits = {}) {
     validateLimits(limits);
+    if (limits.deferContentNames && !limits.fragmentContent)
+        throw new TypeError("Deferred XML content names require fragmentContent: true");
+    if (limits.fragmentAttributes && !limits.storeAttributes)
+        throw new TypeError("XML attribute fragments require storeAttributes: true");
     if (limits.storeFrames && limits.retainTree !== false)
         throw new TypeError("Stored XML frames require retainTree: false");
     if (limits.storeAttributes && limits.retainTree !== false)
         throw new TypeError("Stored XML attributes require retainTree: false");
+    if (limits.deferNamespaces && !limits.storeNamespaces)
+        throw new TypeError("Deferred XML namespaces require stored namespaces");
     if (limits.storeNamespaces && limits.retainTree !== false)
         throw new TypeError("Stored XML namespaces require retainTree: false");
     if (limits.fragmentContent && limits.retainTree !== false)
@@ -314,7 +360,7 @@ export function* parseXmlSourceSteps(length, limits = {}) {
         }
         return offset - start;
     };
-    const scanName = function* () {
+    const scanName = function* (defer = false) {
         const start = offset;
         while (yield* source.has(offset)) {
             const c = (yield* source.charCodeAt(offset));
@@ -327,6 +373,10 @@ export function* parseXmlSourceSteps(length, limits = {}) {
                 pendingWork -= 512;
             }
         }
+        if (defer && offset - start > 512) {
+            yield* validateNameSpan(source, start, offset);
+            return ["", "", "", { start, end: offset }];
+        }
         const name = (yield* source.slice(start, offset));
         pendingWork += offset - start;
         while (pendingWork >= 512) {
@@ -336,7 +386,7 @@ export function* parseXmlSourceSteps(length, limits = {}) {
         const [prefix, localName] = qualifiedNameSync(name, qualifiedNames);
         return [name, prefix, localName];
     };
-    const rawContent = function* (kind, start, end, parent, target = "") {
+    const rawContent = function* (kind, start, end, parent, target = "", targetSource) {
         if (end - start > maxTextLength - textLength)
             throw new XmlLimitError("maxTextLength", "XML text limit exceeded");
         textLength += end - start;
@@ -350,7 +400,7 @@ export function* parseXmlSourceSteps(length, limits = {}) {
                     finish--;
             }
             const text = yield* source.slice(cursor, finish);
-            const content = kind === "processing-instruction" ? { kind, target, text } : { kind, text };
+            const content = kind === "processing-instruction" ? { kind, target, text, ...(targetSource ? { targetSource } : {}) } : { kind, text };
             if (kind === "cdata" && retainTree)
                 parent.element.text += text;
             if (retain)
@@ -486,7 +536,7 @@ export function* parseXmlSourceSteps(length, limits = {}) {
         else if ((yield* source.startsWith("<?", offset))) {
             const start = offset;
             offset += 2;
-            const [target] = yield* scanName();
+            const [target, , , targetSource] = yield* scanName(limits.deferContentNames);
             while (pendingWork >= 512) {
                 yield 512;
                 pendingWork -= 512;
@@ -519,7 +569,7 @@ export function* parseXmlSourceSteps(length, limits = {}) {
                     yield 512;
                     pendingWork -= 512;
                 }
-                yield* rawContent("processing-instruction", body, end, yield* stack.peek(), target);
+                yield* rawContent("processing-instruction", body, end, yield* stack.peek(), target, targetSource);
             }
             offset = end + 2;
         }
@@ -600,28 +650,56 @@ export function* parseXmlSourceSteps(length, limits = {}) {
                 }
                 if (end < 0)
                     invalid("unterminated attribute");
-                const raw = (yield* source.slice(offset, end));
-                pendingWork += raw.length * 2;
-                while (pendingWork >= 512) {
-                    yield 512;
-                    pendingWork -= 512;
+                const fragmented = limits.fragmentAttributes && (limits.storeNamespaces || attribute !== "xmlns" && attrPrefix !== "xmlns");
+                const valueStart = offset;
+                let value = "", size = 0, matchesXml = true, matchesXmlns = true;
+                if (fragmented) {
+                    if ((yield* source.indexOf("<", offset, end)) >= 0)
+                        invalid("less-than in attribute");
+                    for (const part of textFragments(source, offset, end, true, limits.recover, true)) {
+                        if (typeof part !== "string")
+                            yield part;
+                        else {
+                            matchesXml = matchesXml && part === xmlNamespace.slice(size, size + part.length);
+                            matchesXmlns = matchesXmlns && part === xmlnsNamespace.slice(size, size + part.length);
+                            size += part.length;
+                        }
+                    }
+                    matchesXml = matchesXml && size === xmlNamespace.length;
+                    matchesXmlns = matchesXmlns && size === xmlnsNamespace.length;
+                    if (size > maxTextLength - textLength)
+                        throw new XmlLimitError("maxTextLength", "XML text limit exceeded");
+                    textLength += size;
                 }
-                if (raw.indexOf("<") >= 0)
-                    invalid("less-than in attribute");
-                const normalized = /[\t\n\r]/.test(raw) ? raw.replace(/[\t\n\r]/g, " ") : raw;
-                const value = normalized.indexOf("&") < 0 ? (pendingWork += normalized.length, normalized) : yield* entities(normalized, limits.recover);
-                while (pendingWork >= 512) {
-                    yield 512;
-                    pendingWork -= 512;
+                else {
+                    const raw = (yield* source.slice(offset, end));
+                    pendingWork += raw.length * 2;
+                    while (pendingWork >= 512) {
+                        yield 512;
+                        pendingWork -= 512;
+                    }
+                    if (raw.indexOf("<") >= 0)
+                        invalid("less-than in attribute");
+                    let normalized = raw;
+                    if (raw.includes("\t") || raw.includes("\n") || raw.includes("\r")) {
+                        normalized = "";
+                        for (const character of raw)
+                            normalized += "\t\n\r".includes(character) ? " " : character;
+                    }
+                    value = normalized.indexOf("&") < 0 ? (pendingWork += normalized.length, normalized) : yield* entities(normalized, limits.recover);
+                    while (pendingWork >= 512) {
+                        yield 512;
+                        pendingWork -= 512;
+                    }
+                    admitText(value);
                 }
-                admitText(value);
-                yield* attributes.append(attribute, attrPrefix, attrLocal, value);
+                yield* attributes.append(attribute, attrPrefix, attrLocal, value, limits.fragmentAttributes ? { start: offset, end } : undefined);
                 offset = end + 1;
                 if (attribute === "xmlns" || attribute.startsWith("xmlns:")) {
                     const nsPrefix = attribute === "xmlns" ? "" : attribute.slice(6);
-                    if (nsPrefix === "xmlns" || value === xmlnsNamespace
-                        || (nsPrefix === "xml") !== (value === xmlNamespace)
-                        || (nsPrefix !== "" && value === ""))
+                    if (nsPrefix === "xmlns" || (fragmented ? matchesXmlns : value === xmlnsNamespace)
+                        || (nsPrefix === "xml") !== (fragmented ? matchesXml : value === xmlNamespace)
+                        || (nsPrefix !== "" && (fragmented ? size === 0 : value === "")))
                         invalid("invalid namespace binding");
                     if (!ownsNamespaces && namespaces instanceof Map) {
                         const copy = new Map();
@@ -632,7 +710,8 @@ export function* parseXmlSourceSteps(length, limits = {}) {
                         namespaces = copy;
                         ownsNamespaces = true;
                     }
-                    namespaces = yield* bindNamespace(namespaces, nsPrefix, value);
+                    namespaces = yield* bindNamespace(namespaces, nsPrefix, fragmented
+                        ? textFragments(source, valueStart, end, true, limits.recover ? () => { } : undefined, true) : value);
                     if (namespaces.size > maxNamespaces)
                         throw new XmlLimitError("maxNamespaces", "XML namespace scope limit exceeded");
                 }
@@ -645,11 +724,12 @@ export function* parseXmlSourceSteps(length, limits = {}) {
                     if (attribute === "xmlns" || attribute.startsWith("xmlns:"))
                         continue;
                     pendingWork += attribute.length;
-                    if (attrPrefix && (yield* namespaceValue(namespaces, attrPrefix)) === undefined)
+                    if (attrPrefix && !(yield* hasNamespace(namespaces, attrPrefix)))
                         invalid("unbound attribute prefix");
                     if (attributes.length > 1) {
-                        const key = `${attrPrefix ? (yield* namespaceValue(namespaces, attrPrefix)) : ""}\0${attrLocal}`;
-                        if (yield* attributes.expanded(key))
+                        const backed = limits.storeAttributes && !(namespaces instanceof Map) ? namespaces : undefined;
+                        const key = backed ? attrLocal : `${attrPrefix ? (yield* namespaceValue(namespaces, attrPrefix)) : ""}\0${attrLocal}`;
+                        if (yield* attributes.expanded(key, backed ? { scope: backed, prefix: attrPrefix } : undefined))
                             invalid("duplicate expanded attribute");
                     }
                 }
@@ -659,14 +739,14 @@ export function* parseXmlSourceSteps(length, limits = {}) {
                 yield 512;
                 pendingWork -= 512;
             }
-            if (prefix === "xmlns" || (prefix && (yield* namespaceValue(namespaces, prefix)) === undefined))
+            if (prefix === "xmlns" || (prefix && !(yield* hasNamespace(namespaces, prefix))))
                 invalid("unbound element prefix");
             if (++nodes > maxNodes)
                 throw new XmlLimitError("maxNodes", "XML resource limit exceeded");
             if (stack.length + 1 > maxDepth)
                 throw new XmlLimitError("maxDepth", "XML resource limit exceeded");
-            const namespace = (yield* namespaceValue(namespaces, prefix)) ?? "";
-            limits.onElement?.({ name, namespace, localName }, (yield* stack.peek())?.element, stack.length + 1);
+            const namespace = yield* namespaceMetadata(namespaces, prefix, limits.deferNamespaces);
+            limits.onElement?.({ name, ...namespace, localName }, (yield* stack.peek())?.element, stack.length + 1);
             admitContent();
             const retainedAttributes = [];
             if (retainContent) {
@@ -686,7 +766,7 @@ export function* parseXmlSourceSteps(length, limits = {}) {
                 pendingWork -= 512;
             }
             const content = retain ? [] : undefined;
-            const element = { kind: "element", name, namespace, localName, children: [], text: "", content: content ?? emptyContent, attributes: retainContent ? retainedAttributes : emptyAttributes, namespaces: retainContent && namespaces instanceof Map ? namespaces : emptyNamespaces, ...(root === undefined && retainContent ? { prolog, epilog, ...(declaration === undefined ? {} : { declaration }) } : {}) };
+            const element = { kind: "element", name, ...namespace, localName, children: [], text: "", content: content ?? emptyContent, attributes: retainContent ? retainedAttributes : emptyAttributes, namespaces: retainContent && namespaces instanceof Map ? namespaces : emptyNamespaces, ...(root === undefined && retainContent ? { prolog, epilog, ...(declaration === undefined ? {} : { declaration }) } : {}) };
             const parent = (yield* stack.peek());
             if (parent) {
                 if (retainTree) {
@@ -716,10 +796,24 @@ export function* parseXmlSourceSteps(length, limits = {}) {
                 for (let cursor = attributes.first; cursor;) {
                     const attribute = yield* attributes.read(cursor, true);
                     cursor = attribute.next;
-                    const namespace = attribute.name === "xmlns" || attribute.prefix === "xmlns" ? xmlnsNamespace
-                        : attribute.prefix ? (yield* namespaceValue(namespaces, attribute.prefix)) : "";
-                    limits.onAttribute({ name: attribute.name, localName: attribute.localName, namespace, value: attribute.value }, element);
-                    yield 1;
+                    const namespace = attribute.name === "xmlns" || attribute.prefix === "xmlns" ? { namespace: xmlnsNamespace }
+                        : attribute.prefix ? yield* namespaceMetadata(namespaces, attribute.prefix, limits.deferNamespaces) : { namespace: "" };
+                    let continuation = false;
+                    if (attribute.source) {
+                        for (const part of textFragments(source, attribute.source.start, attribute.source.end, true, limits.recover ? () => { } : undefined, true)) {
+                            if (typeof part !== "string") {
+                                yield part;
+                                continue;
+                            }
+                            limits.onAttribute({ name: attribute.name, localName: attribute.localName, ...namespace, value: part }, element, continuation);
+                            continuation = true;
+                            yield 1;
+                        }
+                    }
+                    if (!continuation) {
+                        limits.onAttribute({ name: attribute.name, localName: attribute.localName, ...namespace, value: attribute.value }, element);
+                        yield 1;
+                    }
                 }
             }
             if (!empty)

package/node_modules/@poe-code/xml-ast/dist/source.d.ts

@@ -1,3 +1,7 @@
+export interface XmlSourceSpan {
+    readonly start: number;
+    readonly end: number;
+}
 /** Fill value before advancing. Streaming reads may be short; mark complete at EOF. */
 export interface XmlSourceRead {
     readonly offset: number;

package/node_modules/tiny-stdio-mcp-server/dist/composition.json

@@ -8,7 +8,7 @@
     },
     {
       "name": "toolcraft-schema",
-      "version": "0.0.798",
+      "version": "0.0.800",
       "license": "MIT"
     }
   ]

package/node_modules/toolcraft-schema/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft-schema",
-  "version": "0.0.798",
+  "version": "0.0.800",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolcraft",
-  "version": "0.0.798",
+  "version": "0.0.800",
   "license": "MIT",
   "type": "module",
   "main": "dist/index.js",
@@ -177,7 +177,7 @@
     "saxes"
   ],
   "optionalDependencies": {
-    "toolcraft-schema": "0.0.798",
+    "toolcraft-schema": "0.0.800",
     "toolcraft-design": "*",
     "@poe-code/frontmatter": "*",
     "@poe-code/agent-mcp-config": "*",