@ai-matrx/alchemy 0.8.3 → 0.8.5

package/CHANGELOG.md

@@ -1,8 +1,25 @@
 # Changelog
 
+## 0.8.5
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/alchemy/v0.8.4..npm/alchemy/v0.8.5 -- apps/shared/alchemy`).
+No source changes intended and no consumer action required.
+
+## 0.8.4
+### Secure SheetJS release
+
+- Replaced the stale npm-registry SheetJS 0.18.5 dependency with the official SheetJS 0.20.3 release. This removes the prototype-pollution and ReDoS advisories from the lazy XLSX export engine.
+- SheetJS is compiled into the XLSX artifact so npm consumers never need to install its remote tarball dependency.
+
+### Consumer action
+
+None.
+
 ## 0.8.3
 ### engine subscribe loop
 
+- The phone sheet's verb strip is icon-only and scrolls (seven labelled verbs wrapped letter by letter at 390px).
 - Fix: an action store that notifies inside `subscribe` (a hydration read — read-aloud, thumbs) looped the engine (subscribe → notify → resolve → resubscribe; "Maximum update depth exceeded" on /chat right-click). Subscriptions are now keyed by the resolved ids and a synchronous notify during subscribe is ignored. Test red before the fix (timeout), green after.
 
 ### Consumer action
@@ -243,4 +260,3 @@ Initial `@ai-matrx/alchemy` distribution package. It exports the existing kit co
 
 Wait for the initial npm publish and the required sibling package releases. Then install `@ai-matrx/alchemy` and replace multiple Alchemy package imports with the matching distribution subpath.
 
-

package/dist/core.cjs

@@ -5,8 +5,13 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -1357,50 +1362,6 @@ var init_document = __esm({
   }
 });
 
-// src/operate/formats/xlsx.ts
-var xlsx_exports = {};
-__export(xlsx_exports, {
-  xlsxEngine: () => xlsxEngine
-});
-var cell, xlsxEngine;
-var init_xlsx = __esm({
-  "src/operate/formats/xlsx.ts"() {
-    "use strict";
-    init_core();
-    cell = (value) => value === void 0 || value === null ? null : typeof value === "string" || typeof value === "number" || typeof value === "boolean" ? value : JSON.stringify(value);
-    xlsxEngine = {
-      async build(draft, options, signal) {
-        if (signal.aborted) throw new DOMException("Cancelled", "AbortError");
-        const p = draft.payload;
-        if (p.kind !== "rows") throw new ContentTransferError("unsupported-format", "An Excel workbook needs table rows. Download it as CSV or JSON instead.");
-        const columns = p.columns.filter(
-          (c) => c.visible && c.exportable !== false && c.classification !== "secret" && c.classification !== "credential"
-        );
-        const XLSX = await import("xlsx");
-        if (signal.aborted) throw new DOMException("Cancelled", "AbortError");
-        const sheet = XLSX.utils.aoa_to_sheet([columns.map((c) => c.label), ...p.rows.map((row) => columns.map((c) => cell(readTransferCell(row, c))))]);
-        const book = XLSX.utils.book_new();
-        const filename = options.filename ?? "export.xlsx";
-        const sheetName = filename.replace(/\.xlsx$/i, "").replace(/[\\/?*[\]:]/g, " ").trim().slice(0, 31) || "Data";
-        XLSX.utils.book_append_sheet(book, sheet, sheetName);
-        const written = XLSX.write(book, { type: "array", bookType: "xlsx", compression: true });
-        return sealTransferArtifact({
-          snapshotId: draft.snapshotId,
-          draftRevision: draft.revision,
-          format: "xlsx",
-          plainText: serialize(draft, "tsv", { spreadsheetSafe: true }).plainText,
-          file: {
-            filename,
-            mime: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
-            bytes: written instanceof Uint8Array ? written : new Uint8Array(written)
-          },
-          omissions: draft.omissions.map((o) => ({ ...o }))
-        });
-      }
-    };
-  }
-});
-
 // src/core.ts
 var core_exports = {};
 __export(core_exports, {
@@ -1577,7 +1538,7 @@ var FORMAT_ADAPTERS = Object.freeze([
     modes: ["download"],
     runsOn: "client",
     supports: isRows,
-    load: lazy(async () => (await Promise.resolve().then(() => (init_xlsx(), xlsx_exports))).xlsxEngine)
+    load: lazy(async () => (await import("@ai-matrx/alchemy/operate/formats/xlsx")).xlsxEngine)
   },
   {
     id: "pdf",