@ai-matrx/design-system 0.18.3 → 0.18.5

package/dist/content-transfer.d.cts

@@ -95,6 +95,8 @@ interface AlchemyExportItem {
         content: BlobPart;
         extension: string;
         mime: string;
+        /** Optional exact safe basename captured with bytes; omission derives a default, invalid values error. */
+        filename?: string;
     };
     onSelect?: () => void | Promise<void>;
 }
@@ -120,6 +122,10 @@ interface MatrxCopyMenuProps {
     export?: {
         items: AlchemyExportItem[];
         sheetRows?: () => Array<Record<string, unknown>>;
+        sheetColumns?: () => Array<{
+            id: string;
+            label: string;
+        }>;
     };
     /** Host-owned authenticated destination, not a second export serializer. */
     sendToSheet?: (rows: Array<Record<string, unknown>>, label: string) => Promise<TransferOutcome>;

package/dist/content-transfer.d.ts

@@ -95,6 +95,8 @@ interface AlchemyExportItem {
         content: BlobPart;
         extension: string;
         mime: string;
+        /** Optional exact safe basename captured with bytes; omission derives a default, invalid values error. */
+        filename?: string;
     };
     onSelect?: () => void | Promise<void>;
 }
@@ -120,6 +122,10 @@ interface MatrxCopyMenuProps {
     export?: {
         items: AlchemyExportItem[];
         sheetRows?: () => Array<Record<string, unknown>>;
+        sheetColumns?: () => Array<{
+            id: string;
+            label: string;
+        }>;
     };
     /** Host-owned authenticated destination, not a second export serializer. */
     sendToSheet?: (rows: Array<Record<string, unknown>>, label: string) => Promise<TransferOutcome>;

package/dist/content-transfer.js

@@ -630,6 +630,7 @@ var actionDone = (message) => ({
   mimeTypes: [],
   message
 });
+var isSafeFilename = (filename) => filename === filename.trim() && filename.length > 0 && !/^\.+$/.test(filename) && !/[\\/\x00-\x1F\x7F]/.test(filename);
 var sourceFor = (id, label, build) => ({
   id,
   label,
@@ -686,14 +687,21 @@ function MatrxCopyMenuSession(props) {
     ))
       throw new Error("Sheet rows must be JSON objects.");
     const rows = value;
-    const keys = [...new Set(rows.flatMap((row) => Object.keys(row)))];
+    const suppliedColumns = props.export.sheetColumns?.();
+    const columns = suppliedColumns ?? [...new Set(rows.flatMap((row) => Object.keys(row)))].map((id) => ({ id, label: id }));
+    const ids = /* @__PURE__ */ new Set();
+    for (const column of columns) {
+      if (!column.id || !column.label || ids.has(column.id)) throw new Error("Sheet columns require unique nonempty ids and labels.");
+      ids.add(column.id);
+    }
+    for (const row of rows) for (const key of Object.keys(row)) if (!ids.has(key)) throw new Error(`Sheet row key "${key}" is not declared in sheetColumns.`);
     return {
       kind: "rows",
       rows,
-      columns: keys.map((key) => ({
-        id: key,
-        label: key,
-        path: `/${key.replace(/~/g, "~0").replace(/\//g, "~1")}`,
+      columns: columns.map((column) => ({
+        id: column.id,
+        label: column.label,
+        path: `/${column.id.replace(/~/g, "~0").replace(/\//g, "~1")}`,
         visible: true
       }))
     };
@@ -778,7 +786,8 @@ function MatrxCopyMenuSession(props) {
                 value: {
                   bytes: Array.from(bytes),
                   mime: file.mime,
-                  extension: file.extension
+                  extension: file.extension,
+                  ...file.filename !== void 0 ? { filename: file.filename } : {}
                 }
               };
             },
@@ -795,12 +804,16 @@ function MatrxCopyMenuSession(props) {
             (byte) => typeof byte !== "number" || !Number.isInteger(byte) || byte < 0 || byte > 255
           ))
             throw new Error(`${item.label} did not capture a valid file.`);
+          if (value.filename !== void 0 && (typeof value.filename !== "string" || !isSafeFilename(value.filename)))
+            throw new Error(
+              `${item.label} has an unsafe filename. Use a nonempty basename without leading or trailing whitespace, dots only, path separators, or control characters.`
+            );
           if (draft.omissions.some((omission) => omission.reason !== "duplicate"))
             throw new Error(
               "This custom file exceeds the configured export limits or contains excluded content. Use a standard format or revise the source options."
             );
           const bytes = new Uint8Array(value.bytes);
-          const filename = `${props.label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "export"}.${value.extension.replace(/[^a-zA-Z0-9.-]/g, "") || "bin"}`;
+          const filename = typeof value.filename === "string" ? value.filename : `${props.label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "export"}.${value.extension.replace(/[^a-zA-Z0-9.-]/g, "") || "bin"}`;
           return transport.download(
             sealTransferArtifact({
               snapshotId: snapshot.id,