hedron-core 0.1.0__tar.gz

hedron_core-0.1.0/.gitignore

@@ -0,0 +1,20 @@
+.DS_Store
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+.eggs/
+dist/
+build/
+.venv/
+venv/
+.env
+.coverage
+htmlcov/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.hypothesis/
+.tox/
+.nox/
+*.html.gz

hedron_core-0.1.0/CHANGELOG.md

@@ -0,0 +1,33 @@
+# Changelog
+
+All notable changes to `hedron-core` are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
+with the Hedron coordinated release train (`0.N.0` for phase `0.N`).
+
+## [0.1.0] - 2026-08-03
+
+Initial public release of the framework-neutral typed rendering core.
+
+### Added
+
+- `Model`, `Props`, `FormModel`, `EventPayload`, and `Field` with construction-time
+  validation and supported-annotation guardrails.
+- Trust boundary types: `Secret`, `TrustedHtml`, `SafeUrl`, and `UrlPurpose`.
+- Component protocol, children/slots/fragments, deterministic identity, and sealable
+  registry.
+- Private context-aware HTML serializer with XSS-hardening defaults (blocked active
+  tags/attrs, SafeUrl purpose checks, unknown-attribute rejection).
+- `render(...) -> RenderResult` with PAGE and FRAGMENT modes and frozen result maps.
+- Phase 0.1 built-ins for document, content, forms, layout, landmarks, surfaces,
+  and controls, including FormField accessibility contracts.
+- Typed package marker (`py.typed`) and offline reference-app static rendering proof.
+
+### Security
+
+- Contextual escaping for text and attributes.
+- Secret redaction in diagnostics and identity records.
+- Adversarial escaping corpus covering XSS smuggling paths exercised in CI.
+
+[0.1.0]: https://github.com/eddiethedean/hedron/releases/tag/v0.1.0

hedron_core-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Odos Matthews
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

hedron_core-0.1.0/PKG-INFO

@@ -0,0 +1,80 @@
+Metadata-Version: 2.4
+Name: hedron-core
+Version: 0.1.0
+Summary: Framework-neutral typed rendering core for Hedron
+Project-URL: Homepage, https://github.com/eddiethedean/hedron
+Project-URL: Repository, https://github.com/eddiethedean/hedron
+Project-URL: Issues, https://github.com/eddiethedean/hedron/issues
+Project-URL: Changelog, https://github.com/eddiethedean/hedron/blob/main/packages/hedron-core/CHANGELOG.md
+Project-URL: Documentation, https://github.com/eddiethedean/hedron/tree/main/docs
+Author-email: Odos Matthews <odosmatthews@gmail.com>
+Maintainer-email: Odos Matthews <odosmatthews@gmail.com>
+License-Expression: MIT
+License-File: LICENSE
+Keywords: components,html,htmx,pydantic,rendering,server-rendered,typed
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Internet :: WWW/HTTP :: Dynamic Content
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Typing :: Typed
+Requires-Python: <3.15,>=3.12
+Requires-Dist: pydantic<2.14,>=2.13.4
+Description-Content-Type: text/markdown
+
+# hedron-core
+
+Framework-neutral typed rendering core for Hedron (`0.1.0`).
+
+Defines models, security boundary types, components, the HTML serializer, and
+the public `render(...) -> RenderResult` API with **no** FastAPI, Flask, Django,
+ASGI, or WSGI dependency.
+
+## Install
+
+```bash
+pip install hedron-core
+# or
+uv add hedron-core
+```
+
+Requires Python 3.12, 3.13, or 3.14.
+
+## Quick start
+
+```python
+from hedron_core import Page, RenderContext, RenderMode, Text, render
+
+result = render(
+    Page(Text("Hello, Hedron"), title="Demo"),
+    context=RenderContext.standalone(locale="en"),
+    mode=RenderMode.PAGE,
+)
+print(result.html)
+```
+
+## What this package includes
+
+- `Model`, `Props`, `FormModel`, `EventPayload`, and `Field`
+- Trust boundary types: `Secret`, `TrustedHtml`, `SafeUrl`, `UrlPurpose`
+- Component protocol, registry, diagnostics, and deterministic identity
+- Context-aware HTML serializer and `render(...) -> RenderResult`
+- Phase 0.1 built-ins for pages, forms, layout, landmarks, and content
+
+## What it does not include
+
+- HTTP routing, FastAPI/Flask/Django adapters, HTMX request handling
+- HDN, scoped CSS, CLI, Component Explorer, charts, or data grids
+
+Those arrive in later Hedron phases. See the [project README](https://github.com/eddiethedean/hedron)
+and [roadmap](https://github.com/eddiethedean/hedron/blob/main/ROADMAP.md).
+
+## License
+
+MIT. See [LICENSE](LICENSE).

hedron_core-0.1.0/README.md

@@ -0,0 +1,50 @@
+# hedron-core
+
+Framework-neutral typed rendering core for Hedron (`0.1.0`).
+
+Defines models, security boundary types, components, the HTML serializer, and
+the public `render(...) -> RenderResult` API with **no** FastAPI, Flask, Django,
+ASGI, or WSGI dependency.
+
+## Install
+
+```bash
+pip install hedron-core
+# or
+uv add hedron-core
+```
+
+Requires Python 3.12, 3.13, or 3.14.
+
+## Quick start
+
+```python
+from hedron_core import Page, RenderContext, RenderMode, Text, render
+
+result = render(
+    Page(Text("Hello, Hedron"), title="Demo"),
+    context=RenderContext.standalone(locale="en"),
+    mode=RenderMode.PAGE,
+)
+print(result.html)
+```
+
+## What this package includes
+
+- `Model`, `Props`, `FormModel`, `EventPayload`, and `Field`
+- Trust boundary types: `Secret`, `TrustedHtml`, `SafeUrl`, `UrlPurpose`
+- Component protocol, registry, diagnostics, and deterministic identity
+- Context-aware HTML serializer and `render(...) -> RenderResult`
+- Phase 0.1 built-ins for pages, forms, layout, landmarks, and content
+
+## What it does not include
+
+- HTTP routing, FastAPI/Flask/Django adapters, HTMX request handling
+- HDN, scoped CSS, CLI, Component Explorer, charts, or data grids
+
+Those arrive in later Hedron phases. See the [project README](https://github.com/eddiethedean/hedron)
+and [roadmap](https://github.com/eddiethedean/hedron/blob/main/ROADMAP.md).
+
+## License
+
+MIT. See [LICENSE](LICENSE).

hedron_core-0.1.0/pyproject.toml

@@ -0,0 +1,63 @@
+[project]
+name = "hedron-core"
+version = "0.1.0"
+description = "Framework-neutral typed rendering core for Hedron"
+readme = "README.md"
+requires-python = ">=3.12,<3.15"
+license = "MIT"
+license-files = ["LICENSE"]
+authors = [
+    { name = "Odos Matthews", email = "odosmatthews@gmail.com" },
+]
+maintainers = [
+    { name = "Odos Matthews", email = "odosmatthews@gmail.com" },
+]
+keywords = [
+    "components",
+    "html",
+    "htmx",
+    "pydantic",
+    "rendering",
+    "server-rendered",
+    "typed",
+]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Intended Audience :: Developers",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Topic :: Internet :: WWW/HTTP :: Dynamic Content",
+    "Topic :: Software Development :: Libraries :: Python Modules",
+    "Typing :: Typed",
+]
+dependencies = [
+    "pydantic>=2.13.4,<2.14",
+]
+
+[project.urls]
+Homepage = "https://github.com/eddiethedean/hedron"
+Repository = "https://github.com/eddiethedean/hedron"
+Issues = "https://github.com/eddiethedean/hedron/issues"
+Changelog = "https://github.com/eddiethedean/hedron/blob/main/packages/hedron-core/CHANGELOG.md"
+Documentation = "https://github.com/eddiethedean/hedron/tree/main/docs"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/hedron_core"]
+
+[tool.hatch.build.targets.sdist]
+only-include = [
+    "src/hedron_core",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "pyproject.toml",
+]

hedron_core-0.1.0/src/hedron_core/__init__.py

@@ -0,0 +1,186 @@
+"""hedron-core: framework-neutral typed rendering core."""
+
+from __future__ import annotations
+
+from hedron_core.builtins import (
+    Alert,
+    Aside,
+    Badge,
+    Button,
+    Card,
+    Checkbox,
+    CodeBlock,
+    Container,
+    DescriptionList,
+    Divider,
+    Footer,
+    Form,
+    FormErrors,
+    FormField,
+    Fragment,
+    Grid,
+    Head,
+    Header,
+    Heading,
+    IconButton,
+    Image,
+    Inline,
+    Label,
+    Link,
+    LinkButton,
+    List,
+    Main,
+    Nav,
+    Page,
+    RadioGroup,
+    Section,
+    Select,
+    Skeleton,
+    Stack,
+    SubmitButton,
+    Table,
+    Text,
+    TextArea,
+    TextInput,
+    Title,
+)
+from hedron_core.component import Component, ComponentNode, NodeLike
+from hedron_core.diagnostics import Diagnostic, DiagnosticSeverity, HedronError
+from hedron_core.field import Field
+from hedron_core.html import html
+from hedron_core.models import EventPayload, FormModel, Model, Props
+from hedron_core.registry import get_registry, register_component, seal_registry
+from hedron_core.rendering import AssetRef, RenderContext, RenderMode, RenderResult, render
+from hedron_core.security import SafeUrl, Secret, TrustedHtml, UrlPurpose
+
+__version__ = "0.1.0"
+
+__all__ = [
+    "Alert",
+    "Aside",
+    "AssetRef",
+    "Badge",
+    "Button",
+    "Card",
+    "Checkbox",
+    "CodeBlock",
+    "Component",
+    "ComponentNode",
+    "Container",
+    "DescriptionList",
+    "Diagnostic",
+    "DiagnosticSeverity",
+    "Divider",
+    "EventPayload",
+    "Field",
+    "Footer",
+    "Form",
+    "FormErrors",
+    "FormField",
+    "FormModel",
+    "Fragment",
+    "Grid",
+    "Head",
+    "Header",
+    "Heading",
+    "HedronError",
+    "IconButton",
+    "Image",
+    "Inline",
+    "Label",
+    "Link",
+    "LinkButton",
+    "List",
+    "Main",
+    "Model",
+    "Nav",
+    "NodeLike",
+    "Page",
+    "Props",
+    "RadioGroup",
+    "RenderContext",
+    "RenderMode",
+    "RenderResult",
+    "SafeUrl",
+    "Secret",
+    "Section",
+    "Select",
+    "Skeleton",
+    "Stack",
+    "SubmitButton",
+    "Table",
+    "Text",
+    "TextArea",
+    "TextInput",
+    "Title",
+    "TrustedHtml",
+    "UrlPurpose",
+    "__version__",
+    "get_registry",
+    "html",
+    "register_component",
+    "render",
+    "seal_registry",
+]
+
+
+def _register_builtins() -> None:
+    for cls in (
+        Page,
+        Fragment,
+        Head,
+        Title,
+        Header,
+        Main,
+        Nav,
+        Aside,
+        Footer,
+        Section,
+        Container,
+        Stack,
+        Inline,
+        Grid,
+        Divider,
+        Heading,
+        Text,
+        Link,
+        Image,
+        CodeBlock,
+        List,
+        DescriptionList,
+        Table,
+        Card,
+        Badge,
+        Alert,
+        Skeleton,
+        Button,
+        LinkButton,
+        IconButton,
+        Form,
+        FormField,
+        Label,
+        TextInput,
+        TextArea,
+        Select,
+        Checkbox,
+        RadioGroup,
+        SubmitButton,
+        FormErrors,
+    ):
+        logical = (
+            f"{getattr(cls, 'distribution', 'hedron-core')}:"
+            f"{cls.__module__}.{getattr(cls, 'logical_name', cls.__name__)}"
+        )
+        register_component(
+            logical_id=logical,
+            name=getattr(cls, "logical_name", cls.__name__) or cls.__name__,
+            module=cls.__module__,
+            distribution=getattr(cls, "distribution", "hedron-core"),
+            props_model=getattr(cls, "props_type", type(None)).__name__,
+            slots=getattr(cls, "slots", {}),
+            accessibility_notes="Uses native semantic HTML without JavaScript.",
+        )
+    # Do not seal on import — applications seal at lifespan; tests may register more.
+
+
+_register_builtins()