@ai-matrx/design-system 0.18.3 → 0.18.5

package/dist/data-table/data-row-window.js

@@ -1567,6 +1567,7 @@ var actionDone = (message) => ({
   mimeTypes: [],
   message
 });
+var isSafeFilename = (filename) => filename === filename.trim() && filename.length > 0 && !/^\.+$/.test(filename) && !/[\\/\x00-\x1F\x7F]/.test(filename);
 var sourceFor = (id, label, build) => ({
   id,
   label,
@@ -1623,14 +1624,21 @@ function MatrxCopyMenuSession(props) {
     ))
       throw new Error("Sheet rows must be JSON objects.");
     const rows = value;
-    const keys = [...new Set(rows.flatMap((row) => Object.keys(row)))];
+    const suppliedColumns = props.export.sheetColumns?.();
+    const columns = suppliedColumns ?? [...new Set(rows.flatMap((row) => Object.keys(row)))].map((id) => ({ id, label: id }));
+    const ids = /* @__PURE__ */ new Set();
+    for (const column of columns) {
+      if (!column.id || !column.label || ids.has(column.id)) throw new Error("Sheet columns require unique nonempty ids and labels.");
+      ids.add(column.id);
+    }
+    for (const row of rows) for (const key of Object.keys(row)) if (!ids.has(key)) throw new Error(`Sheet row key "${key}" is not declared in sheetColumns.`);
     return {
       kind: "rows",
       rows,
-      columns: keys.map((key) => ({
-        id: key,
-        label: key,
-        path: `/${key.replace(/~/g, "~0").replace(/\//g, "~1")}`,
+      columns: columns.map((column) => ({
+        id: column.id,
+        label: column.label,
+        path: `/${column.id.replace(/~/g, "~0").replace(/\//g, "~1")}`,
         visible: true
       }))
     };
@@ -1715,7 +1723,8 @@ function MatrxCopyMenuSession(props) {
                 value: {
                   bytes: Array.from(bytes),
                   mime: file.mime,
-                  extension: file.extension
+                  extension: file.extension,
+                  ...file.filename !== void 0 ? { filename: file.filename } : {}
                 }
               };
             },
@@ -1732,12 +1741,16 @@ function MatrxCopyMenuSession(props) {
             (byte) => typeof byte !== "number" || !Number.isInteger(byte) || byte < 0 || byte > 255
           ))
             throw new Error(`${item.label} did not capture a valid file.`);
+          if (value.filename !== void 0 && (typeof value.filename !== "string" || !isSafeFilename(value.filename)))
+            throw new Error(
+              `${item.label} has an unsafe filename. Use a nonempty basename without leading or trailing whitespace, dots only, path separators, or control characters.`
+            );
           if (draft.omissions.some((omission) => omission.reason !== "duplicate"))
             throw new Error(
               "This custom file exceeds the configured export limits or contains excluded content. Use a standard format or revise the source options."
             );
           const bytes = new Uint8Array(value.bytes);
-          const filename = `${props.label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "export"}.${value.extension.replace(/[^a-zA-Z0-9.-]/g, "") || "bin"}`;
+          const filename = typeof value.filename === "string" ? value.filename : `${props.label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "export"}.${value.extension.replace(/[^a-zA-Z0-9.-]/g, "") || "bin"}`;
           return transport.download(
             sealTransferArtifact2({
               snapshotId: snapshot.id,
@@ -2251,7 +2264,7 @@ function MatrxUuidCell({
     }
     return /* @__PURE__ */ jsx15("span", { className: "min-w-0 truncate font-mono text-xs text-muted-foreground tabular-nums select-all", children: display });
   })();
-  return /* @__PURE__ */ jsxs9(
+  return /* @__PURE__ */ jsx15(TooltipProvider, { delayDuration: 200, children: /* @__PURE__ */ jsxs9(
     "span",
     {
       "data-matrx-cell-control": true,
@@ -2261,51 +2274,64 @@ function MatrxUuidCell({
       ),
       onClick: stop,
       children: [
-        /* @__PURE__ */ jsx15(TooltipProvider, { delayDuration: 200, children: /* @__PURE__ */ jsxs9(Tooltip, { children: [
+        /* @__PURE__ */ jsxs9(Tooltip, { children: [
           /* @__PURE__ */ jsx15(TooltipTrigger, { asChild: true, children: /* @__PURE__ */ jsx15("span", { className: "inline-flex min-w-0 max-w-full items-center", children: idNode }) }),
           /* @__PURE__ */ jsx15(TooltipContent, { side: "top", className: "max-w-sm break-all font-mono", children: forbidden ? `No access \xB7 ${tip}` : tip })
-        ] }) }),
-        /* @__PURE__ */ jsx15(
-          "button",
-          {
-            type: "button",
-            onClick: onCopy,
-            "aria-label": copied ? "Copied" : `Copy ${label ?? "id"}`,
-            title: `Copy ${label ?? "id"}: ${value}`,
-            className: cn(
-              "inline-flex h-4 w-4 shrink-0 items-center justify-center rounded text-muted-foreground transition-colors hover:text-foreground focus:outline-none",
-              copied && "text-primary"
-            ),
-            children: copied ? /* @__PURE__ */ jsx15(Check, { className: "h-3 w-3" }) : /* @__PURE__ */ jsx15(Copy, { className: "h-3 w-3" })
-          }
-        ),
-        canPeek ? /* @__PURE__ */ jsx15(
-          "button",
-          {
-            type: "button",
-            onClick: (e) => {
-              stop(e);
-              setPeekOpen(true);
-            },
-            "aria-label": `Quick look at ${label ?? "record"}`,
-            title: `Quick look at ${label ?? "record"}`,
-            className: "inline-flex h-4 w-4 shrink-0 items-center justify-center rounded text-muted-foreground transition-colors hover:text-foreground focus:outline-none",
-            children: /* @__PURE__ */ jsx15(Lightbulb, { className: "h-3 w-3" })
-          }
-        ) : null,
-        onOpen && resolvedHref && !forbidden ? /* @__PURE__ */ jsx15(
-          "a",
-          {
-            href: resolvedHref,
-            target: "_blank",
-            rel: "noopener noreferrer",
-            onClick: stop,
-            "aria-label": `Open ${label ?? "record"} in a new tab`,
-            title: `Open ${label ?? "record"} in a new tab`,
-            className: "inline-flex h-4 w-4 shrink-0 items-center justify-center rounded text-muted-foreground transition-colors hover:text-foreground focus:outline-none",
-            children: /* @__PURE__ */ jsx15(ExternalLink, { className: "h-3 w-3" })
-          }
-        ) : null,
+        ] }),
+        /* @__PURE__ */ jsxs9(Tooltip, { children: [
+          /* @__PURE__ */ jsx15(TooltipTrigger, { asChild: true, children: /* @__PURE__ */ jsx15(
+            "button",
+            {
+              type: "button",
+              onClick: onCopy,
+              "aria-label": copied ? "Copied" : `Copy ${label ?? "id"}`,
+              className: cn(
+                "inline-flex h-4 w-4 shrink-0 items-center justify-center rounded text-muted-foreground transition-colors hover:text-foreground focus:outline-none",
+                copied && "text-primary"
+              ),
+              children: copied ? /* @__PURE__ */ jsx15(Check, { className: "h-3 w-3" }) : /* @__PURE__ */ jsx15(Copy, { className: "h-3 w-3" })
+            }
+          ) }),
+          /* @__PURE__ */ jsx15(TooltipContent, { side: "top", children: copied ? "Copied" : `Copy ${label ?? "id"}: ${value}` })
+        ] }),
+        canPeek ? /* @__PURE__ */ jsxs9(Tooltip, { children: [
+          /* @__PURE__ */ jsx15(TooltipTrigger, { asChild: true, children: /* @__PURE__ */ jsx15(
+            "button",
+            {
+              type: "button",
+              onClick: (e) => {
+                stop(e);
+                setPeekOpen(true);
+              },
+              "aria-label": `Quick look at ${label ?? "record"}`,
+              className: "inline-flex h-4 w-4 shrink-0 items-center justify-center rounded text-muted-foreground transition-colors hover:text-foreground focus:outline-none",
+              children: /* @__PURE__ */ jsx15(Lightbulb, { className: "h-3 w-3" })
+            }
+          ) }),
+          /* @__PURE__ */ jsxs9(TooltipContent, { side: "top", children: [
+            "Quick look at ",
+            label ?? "record"
+          ] })
+        ] }) : null,
+        onOpen && resolvedHref && !forbidden ? /* @__PURE__ */ jsxs9(Tooltip, { children: [
+          /* @__PURE__ */ jsx15(TooltipTrigger, { asChild: true, children: /* @__PURE__ */ jsx15(
+            "a",
+            {
+              href: resolvedHref,
+              target: "_blank",
+              rel: "noopener noreferrer",
+              onClick: stop,
+              "aria-label": `Open ${label ?? "record"} in a new tab`,
+              className: "inline-flex h-4 w-4 shrink-0 items-center justify-center rounded text-muted-foreground transition-colors hover:text-foreground focus:outline-none",
+              children: /* @__PURE__ */ jsx15(ExternalLink, { className: "h-3 w-3" })
+            }
+          ) }),
+          /* @__PURE__ */ jsxs9(TooltipContent, { side: "top", children: [
+            "Open ",
+            label ?? "record",
+            " in a new tab"
+          ] })
+        ] }) : null,
         trailing,
         notice,
         canPeek && peekOpen && ResourcePeek ? /* @__PURE__ */ jsx15(
@@ -2319,7 +2345,7 @@ function MatrxUuidCell({
         ) : null
       ]
     }
-  );
+  ) });
 }
 
 // src/data-table/entity.ts