@ai-matrx/print 0.8.7 → 0.8.8

package/dist/safe-html.cjs

@@ -0,0 +1,231 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/safe-html.ts
+var safe_html_exports = {};
+__export(safe_html_exports, {
+  FORBIDDEN_TAGS: () => FORBIDDEN_TAGS,
+  MATHML_SCHEMA: () => MATHML_SCHEMA,
+  PRINT_HTML_SCHEMA: () => PRINT_HTML_SCHEMA,
+  SAFE_HTML_SCHEMA: () => SAFE_HTML_SCHEMA,
+  sanitizeHtmlFragment: () => sanitizeHtmlFragment,
+  sanitizeMathml: () => sanitizeMathml,
+  sanitizePrintHtml: () => sanitizePrintHtml
+});
+module.exports = __toCommonJS(safe_html_exports);
+var import_hast_util_from_html = require("hast-util-from-html");
+var import_hast_util_sanitize = require("hast-util-sanitize");
+var import_hast_util_to_html = require("hast-util-to-html");
+var STRIP_WITH_CONTENT = [
+  "script",
+  "style",
+  "noscript",
+  "template",
+  "iframe",
+  "object",
+  "embed",
+  "textarea",
+  "select",
+  "head",
+  "title"
+];
+var FORBIDDEN_TAGS = [
+  ...STRIP_WITH_CONTENT,
+  "form",
+  "meta",
+  "base",
+  "link",
+  "frame",
+  "frameset",
+  "applet",
+  "button",
+  "svg",
+  "math"
+];
+var baseAttributes = import_hast_util_sanitize.defaultSchema.attributes ?? {};
+var SAFE_HTML_SCHEMA = {
+  ...import_hast_util_sanitize.defaultSchema,
+  tagNames: (import_hast_util_sanitize.defaultSchema.tagNames ?? []).filter((t) => !FORBIDDEN_TAGS.includes(t)),
+  strip: STRIP_WITH_CONTENT,
+  // Authored anchors keep their names; the GitHub `user-content-` rewrite
+  // would also break `<label for>` → `<input id>` pairs.
+  clobberPrefix: "",
+  clobber: []
+};
+var PRINT_CLASS = /^(?:(?:matrx|print|code|doc|language)-[\w-]*|inline-code|is-checked)$/;
+function withPrintClasses(defs = []) {
+  let found = false;
+  const out = defs.map((d) => {
+    if (Array.isArray(d) && d[0] === "className") {
+      found = true;
+      return [...d, PRINT_CLASS];
+    }
+    return d;
+  });
+  return found ? out : [...out, ["className", PRINT_CLASS]];
+}
+var printAttributes = Object.fromEntries(
+  Object.entries(baseAttributes).map(([tag, defs]) => [tag, withPrintClasses(defs)])
+);
+var cellAlign = ["style", /^text-align:\s*(?:left|center|right);?$/];
+var PRINT_HTML_SCHEMA = {
+  ...SAFE_HTML_SCHEMA,
+  tagNames: [
+    .../* @__PURE__ */ new Set([...SAFE_HTML_SCHEMA.tagNames ?? [], "section", "figure", "figcaption", "label"])
+  ],
+  attributes: {
+    ...printAttributes,
+    "*": [
+      ...baseAttributes["*"] ?? [],
+      ["className", PRINT_CLASS],
+      "role",
+      "ariaLabel",
+      "ariaHidden",
+      "dataLabel",
+      "dataLanguage",
+      "dataArtifactType"
+    ],
+    // Table-cell alignment is the one inline style the converter writes.
+    td: withPrintClasses([...baseAttributes["td"] ?? [], [...cellAlign]]),
+    th: withPrintClasses([...baseAttributes["th"] ?? [], [...cellAlign]]),
+    // The flashcard flip is a checkbox + label pair (GitHub forces `disabled`).
+    input: withPrintClasses([["type", "checkbox"], "checked"]),
+    label: withPrintClasses(["htmlFor"])
+  },
+  required: { input: { type: "checkbox" } },
+  protocols: {
+    ...import_hast_util_sanitize.defaultSchema.protocols,
+    href: [...import_hast_util_sanitize.defaultSchema.protocols?.href ?? [], "tel"],
+    // Embedded images (`data:image/png;base64,…`) — an <img> never runs script.
+    src: [...import_hast_util_sanitize.defaultSchema.protocols?.src ?? [], "data"]
+  }
+};
+function sanitizeHtmlFragment(html, schema = SAFE_HTML_SCHEMA) {
+  if (!html) return "";
+  const tree = (0, import_hast_util_sanitize.sanitize)((0, import_hast_util_from_html.fromHtml)(html, { fragment: true }), schema);
+  return (0, import_hast_util_to_html.toHtml)(tree, { characterReferences: { useNamedReferences: true } });
+}
+function sanitizePrintHtml(html) {
+  return sanitizeHtmlFragment(html, PRINT_HTML_SCHEMA);
+}
+var MATHML_TAGS = [
+  "math",
+  "maction",
+  "annotation",
+  "menclose",
+  "merror",
+  "mfrac",
+  "mglyph",
+  "mi",
+  "mlabeledtr",
+  "mmultiscripts",
+  "mn",
+  "mo",
+  "mover",
+  "mpadded",
+  "mphantom",
+  "mprescripts",
+  "none",
+  "mroot",
+  "mrow",
+  "ms",
+  "mspace",
+  "msqrt",
+  "mstyle",
+  "msub",
+  "msubsup",
+  "msup",
+  "mtable",
+  "mtd",
+  "mtext",
+  "mtr",
+  "munder",
+  "munderover",
+  "semantics"
+];
+var MATHML_ATTRIBUTES = [
+  "xmlns",
+  "display",
+  "displaystyle",
+  "mathvariant",
+  "mathsize",
+  "mathcolor",
+  "mathbackground",
+  "scriptlevel",
+  "dir",
+  "fence",
+  "form",
+  "largeop",
+  "lspace",
+  "rspace",
+  "movablelimits",
+  "separator",
+  "stretchy",
+  "symmetric",
+  "maxsize",
+  "minsize",
+  "accent",
+  "accentunder",
+  "align",
+  "columnalign",
+  "rowalign",
+  "columnspacing",
+  "rowspacing",
+  "columnlines",
+  "rowlines",
+  "frame",
+  "framespacing",
+  "equalrows",
+  "equalcolumns",
+  "linethickness",
+  "numalign",
+  "denomalign",
+  "bevelled",
+  "notation",
+  "width",
+  "height",
+  "depth",
+  "voffset",
+  "lquote",
+  "rquote",
+  "columnspan",
+  "rowspan",
+  "encoding",
+  "open",
+  "close",
+  "separators",
+  "actiontype",
+  "selection",
+  "mslinebreak",
+  "linebreak",
+  "indentalign",
+  "data*"
+];
+var MATHML_SCHEMA = {
+  tagNames: MATHML_TAGS,
+  attributes: { "*": MATHML_ATTRIBUTES },
+  strip: ["script", "style"],
+  clobberPrefix: "",
+  clobber: [],
+  protocols: {}
+};
+function sanitizeMathml(mathml) {
+  return sanitizeHtmlFragment(mathml, MATHML_SCHEMA);
+}
+//# sourceMappingURL=safe-html.cjs.map

package/dist/safe-html.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/safe-html.ts"],"sourcesContent":["/**\n * @ai-matrx/print/safe-html — THE allow-list every Markdown→HTML string this\n * package hands out goes through.\n *\n * Why an allow-list: the regex converter (`markdownToHtml` /\n * `markdownToArticleHtml`) lets author raw HTML through so a document can feed\n * WordPress. Its old guard was a block-list (script, style, on… handlers,\n * javascript: URLs) and everything nobody listed — `<iframe>`, `<form>`,\n * `<meta http-equiv=refresh>`, `<object>`/`<embed>`, `<base>`, `<link>`,\n * inline `style` — reached the clipboard, the downloaded page and the preview.\n * Now a tag or attribute survives only when it is listed here.\n *\n * Sync and DOM-free (parse5 via hast), so it runs in Node, workers, the\n * extension service worker and Tauri alike.\n *\n * Two schemas:\n *   • `SAFE_HTML_SCHEMA` — GitHub's rendering rules (hast-util-sanitize's\n *     default schema) with no id clobber-prefixing and the \"drop the element\n *     AND its text\" list for elements whose text is not prose. For any host\n *     that renders plain semantic HTML (email bodies, CMS drafts).\n *   • `PRINT_HTML_SCHEMA` — the same, plus exactly the vocabulary print's own\n *     converters emit: `matrx-*` / `print-*` / `code-*` / `doc-*` classes,\n *     table-cell alignment, the flashcard checkbox + label, figures, and the\n *     page-break separator's data/aria attributes.\n */\n\nimport { fromHtml } from \"hast-util-from-html\";\nimport { defaultSchema, sanitize, type Schema } from \"hast-util-sanitize\";\nimport { toHtml } from \"hast-util-to-html\";\nimport type { Root } from \"hast\";\n\ntype Attributes = NonNullable<Schema[\"attributes\"]>;\ntype AttributeList = Attributes[string];\n\n/** Elements removed together with their content (their text is not prose). */\nconst STRIP_WITH_CONTENT = [\n  \"script\",\n  \"style\",\n  \"noscript\",\n  \"template\",\n  \"iframe\",\n  \"object\",\n  \"embed\",\n  \"textarea\",\n  \"select\",\n  \"head\",\n  \"title\",\n];\n\n/** Never allowed, whatever a schema extension adds. */\nexport const FORBIDDEN_TAGS: readonly string[] = [\n  ...STRIP_WITH_CONTENT,\n  \"form\",\n  \"meta\",\n  \"base\",\n  \"link\",\n  \"frame\",\n  \"frameset\",\n  \"applet\",\n  \"button\",\n  \"svg\",\n  \"math\",\n];\n\nconst baseAttributes = defaultSchema.attributes ?? {};\n\nexport const SAFE_HTML_SCHEMA: Schema = {\n  ...defaultSchema,\n  tagNames: (defaultSchema.tagNames ?? []).filter((t) => !FORBIDDEN_TAGS.includes(t)),\n  strip: STRIP_WITH_CONTENT,\n  // Authored anchors keep their names; the GitHub `user-content-` rewrite\n  // would also break `<label for>` → `<input id>` pairs.\n  clobberPrefix: \"\",\n  clobber: [],\n};\n\n/** Class tokens print's converters emit. Author classes outside these are dropped. */\nconst PRINT_CLASS = /^(?:(?:matrx|print|code|doc|language)-[\\w-]*|inline-code|is-checked)$/;\n\n/**\n * A tag's own `className` definition wins over `'*'` (and returns an empty\n * list rather than falling through), so the print class pattern is merged into\n * every definition that names `className`, and added where none does.\n */\nfunction withPrintClasses(defs: AttributeList = []): AttributeList {\n  let found = false;\n  const out = defs.map((d) => {\n    if (Array.isArray(d) && d[0] === \"className\") {\n      found = true;\n      return [...d, PRINT_CLASS] as unknown as typeof d;\n    }\n    return d;\n  });\n  return found ? out : [...out, [\"className\", PRINT_CLASS]];\n}\n\nconst printAttributes: Attributes = Object.fromEntries(\n  Object.entries(baseAttributes).map(([tag, defs]) => [tag, withPrintClasses(defs)]),\n);\n\nconst cellAlign = [\"style\", /^text-align:\\s*(?:left|center|right);?$/] as const;\n\nexport const PRINT_HTML_SCHEMA: Schema = {\n  ...SAFE_HTML_SCHEMA,\n  tagNames: [\n    ...new Set([...(SAFE_HTML_SCHEMA.tagNames ?? []), \"section\", \"figure\", \"figcaption\", \"label\"]),\n  ],\n  attributes: {\n    ...printAttributes,\n    \"*\": [\n      ...(baseAttributes[\"*\"] ?? []),\n      [\"className\", PRINT_CLASS],\n      \"role\",\n      \"ariaLabel\",\n      \"ariaHidden\",\n      \"dataLabel\",\n      \"dataLanguage\",\n      \"dataArtifactType\",\n    ],\n    // Table-cell alignment is the one inline style the converter writes.\n    td: withPrintClasses([...(baseAttributes[\"td\"] ?? []), [...cellAlign]]),\n    th: withPrintClasses([...(baseAttributes[\"th\"] ?? []), [...cellAlign]]),\n    // The flashcard flip is a checkbox + label pair (GitHub forces `disabled`).\n    input: withPrintClasses([[\"type\", \"checkbox\"], \"checked\"]),\n    label: withPrintClasses([\"htmlFor\"]),\n  },\n  required: { input: { type: \"checkbox\" } },\n  protocols: {\n    ...defaultSchema.protocols,\n    href: [...(defaultSchema.protocols?.href ?? []), \"tel\"],\n    // Embedded images (`data:image/png;base64,…`) — an <img> never runs script.\n    src: [...(defaultSchema.protocols?.src ?? []), \"data\"],\n  },\n};\n\n/** Sanitize an HTML fragment against an allow-list (default: `SAFE_HTML_SCHEMA`). */\nexport function sanitizeHtmlFragment(html: string, schema: Schema = SAFE_HTML_SCHEMA): string {\n  if (!html) return \"\";\n  const tree = sanitize(fromHtml(html, { fragment: true }), schema) as Root;\n  return toHtml(tree, { characterReferences: { useNamedReferences: true } });\n}\n\n/** Sanitize the output of print's own converters (keeps the `.matrx-*` vocabulary). */\nexport function sanitizePrintHtml(html: string): string {\n  return sanitizeHtmlFragment(html, PRINT_HTML_SCHEMA);\n}\n\nexport type { Schema as SafeHtmlSchema };\n\n/**\n * MathML from the TeX typesetter. TeX is author input, and MathJax's `html`,\n * `bbox` and `\\mmlToken` commands turn it into attributes (`\\href{javascript:…}`\n * → `href`, `\\style{position:fixed…}` / `\\bbox[position:fixed]` → `style`).\n * Only presentation MathML elements and their layout attributes survive.\n */\nconst MATHML_TAGS = [\n  \"math\", \"maction\", \"annotation\", \"menclose\", \"merror\", \"mfrac\", \"mglyph\", \"mi\",\n  \"mlabeledtr\", \"mmultiscripts\", \"mn\", \"mo\", \"mover\", \"mpadded\", \"mphantom\", \"mprescripts\", \"none\",\n  \"mroot\", \"mrow\", \"ms\", \"mspace\", \"msqrt\", \"mstyle\", \"msub\", \"msubsup\", \"msup\", \"mtable\", \"mtd\",\n  \"mtext\", \"mtr\", \"munder\", \"munderover\", \"semantics\",\n];\n\nconst MATHML_ATTRIBUTES = [\n  \"xmlns\", \"display\", \"displaystyle\", \"mathvariant\", \"mathsize\", \"mathcolor\", \"mathbackground\",\n  \"scriptlevel\", \"dir\", \"fence\", \"form\", \"largeop\", \"lspace\", \"rspace\", \"movablelimits\",\n  \"separator\", \"stretchy\", \"symmetric\", \"maxsize\", \"minsize\", \"accent\", \"accentunder\", \"align\",\n  \"columnalign\", \"rowalign\", \"columnspacing\", \"rowspacing\", \"columnlines\", \"rowlines\", \"frame\",\n  \"framespacing\", \"equalrows\", \"equalcolumns\", \"linethickness\", \"numalign\", \"denomalign\",\n  \"bevelled\", \"notation\", \"width\", \"height\", \"depth\", \"voffset\", \"lquote\", \"rquote\", \"columnspan\",\n  \"rowspan\", \"encoding\", \"open\", \"close\", \"separators\", \"actiontype\", \"selection\", \"mslinebreak\",\n  \"linebreak\", \"indentalign\", \"data*\",\n];\n\nexport const MATHML_SCHEMA: Schema = {\n  tagNames: MATHML_TAGS,\n  attributes: { \"*\": MATHML_ATTRIBUTES },\n  strip: [\"script\", \"style\"],\n  clobberPrefix: \"\",\n  clobber: [],\n  protocols: {},\n};\n\n/** Sanitize a typeset MathML string (keeps layout, drops links and styles). */\nexport function sanitizeMathml(mathml: string): string {\n  return sanitizeHtmlFragment(mathml, MATHML_SCHEMA);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA0BA,iCAAyB;AACzB,gCAAqD;AACrD,+BAAuB;AAOvB,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,iBAAoC;AAAA,EAC/C,GAAG;AAAA,EACH;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,iBAAiB,wCAAc,cAAc,CAAC;AAE7C,IAAM,mBAA2B;AAAA,EACtC,GAAG;AAAA,EACH,WAAW,wCAAc,YAAY,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,SAAS,CAAC,CAAC;AAAA,EAClF,OAAO;AAAA;AAAA;AAAA,EAGP,eAAe;AAAA,EACf,SAAS,CAAC;AACZ;AAGA,IAAM,cAAc;AAOpB,SAAS,iBAAiB,OAAsB,CAAC,GAAkB;AACjE,MAAI,QAAQ;AACZ,QAAM,MAAM,KAAK,IAAI,CAAC,MAAM;AAC1B,QAAI,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,aAAa;AAC5C,cAAQ;AACR,aAAO,CAAC,GAAG,GAAG,WAAW;AAAA,IAC3B;AACA,WAAO;AAAA,EACT,CAAC;AACD,SAAO,QAAQ,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,WAAW,CAAC;AAC1D;AAEA,IAAM,kBAA8B,OAAO;AAAA,EACzC,OAAO,QAAQ,cAAc,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,iBAAiB,IAAI,CAAC,CAAC;AACnF;AAEA,IAAM,YAAY,CAAC,SAAS,yCAAyC;AAE9D,IAAM,oBAA4B;AAAA,EACvC,GAAG;AAAA,EACH,UAAU;AAAA,IACR,GAAG,oBAAI,IAAI,CAAC,GAAI,iBAAiB,YAAY,CAAC,GAAI,WAAW,UAAU,cAAc,OAAO,CAAC;AAAA,EAC/F;AAAA,EACA,YAAY;AAAA,IACV,GAAG;AAAA,IACH,KAAK;AAAA,MACH,GAAI,eAAe,GAAG,KAAK,CAAC;AAAA,MAC5B,CAAC,aAAa,WAAW;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA;AAAA,IAEA,IAAI,iBAAiB,CAAC,GAAI,eAAe,IAAI,KAAK,CAAC,GAAI,CAAC,GAAG,SAAS,CAAC,CAAC;AAAA,IACtE,IAAI,iBAAiB,CAAC,GAAI,eAAe,IAAI,KAAK,CAAC,GAAI,CAAC,GAAG,SAAS,CAAC,CAAC;AAAA;AAAA,IAEtE,OAAO,iBAAiB,CAAC,CAAC,QAAQ,UAAU,GAAG,SAAS,CAAC;AAAA,IACzD,OAAO,iBAAiB,CAAC,SAAS,CAAC;AAAA,EACrC;AAAA,EACA,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,EAAE;AAAA,EACxC,WAAW;AAAA,IACT,GAAG,wCAAc;AAAA,IACjB,MAAM,CAAC,GAAI,wCAAc,WAAW,QAAQ,CAAC,GAAI,KAAK;AAAA;AAAA,IAEtD,KAAK,CAAC,GAAI,wCAAc,WAAW,OAAO,CAAC,GAAI,MAAM;AAAA,EACvD;AACF;AAGO,SAAS,qBAAqB,MAAc,SAAiB,kBAA0B;AAC5F,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,WAAO,wCAAS,qCAAS,MAAM,EAAE,UAAU,KAAK,CAAC,GAAG,MAAM;AAChE,aAAO,iCAAO,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,KAAK,EAAE,CAAC;AAC3E;AAGO,SAAS,kBAAkB,MAAsB;AACtD,SAAO,qBAAqB,MAAM,iBAAiB;AACrD;AAUA,IAAM,cAAc;AAAA,EAClB;AAAA,EAAQ;AAAA,EAAW;AAAA,EAAc;AAAA,EAAY;AAAA,EAAU;AAAA,EAAS;AAAA,EAAU;AAAA,EAC1E;AAAA,EAAc;AAAA,EAAiB;AAAA,EAAM;AAAA,EAAM;AAAA,EAAS;AAAA,EAAW;AAAA,EAAY;AAAA,EAAe;AAAA,EAC1F;AAAA,EAAS;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAU;AAAA,EAAS;AAAA,EAAU;AAAA,EAAQ;AAAA,EAAW;AAAA,EAAQ;AAAA,EAAU;AAAA,EACzF;AAAA,EAAS;AAAA,EAAO;AAAA,EAAU;AAAA,EAAc;AAC1C;AAEA,IAAM,oBAAoB;AAAA,EACxB;AAAA,EAAS;AAAA,EAAW;AAAA,EAAgB;AAAA,EAAe;AAAA,EAAY;AAAA,EAAa;AAAA,EAC5E;AAAA,EAAe;AAAA,EAAO;AAAA,EAAS;AAAA,EAAQ;AAAA,EAAW;AAAA,EAAU;AAAA,EAAU;AAAA,EACtE;AAAA,EAAa;AAAA,EAAY;AAAA,EAAa;AAAA,EAAW;AAAA,EAAW;AAAA,EAAU;AAAA,EAAe;AAAA,EACrF;AAAA,EAAe;AAAA,EAAY;AAAA,EAAiB;AAAA,EAAc;AAAA,EAAe;AAAA,EAAY;AAAA,EACrF;AAAA,EAAgB;AAAA,EAAa;AAAA,EAAgB;AAAA,EAAiB;AAAA,EAAY;AAAA,EAC1E;AAAA,EAAY;AAAA,EAAY;AAAA,EAAS;AAAA,EAAU;AAAA,EAAS;AAAA,EAAW;AAAA,EAAU;AAAA,EAAU;AAAA,EACnF;AAAA,EAAW;AAAA,EAAY;AAAA,EAAQ;AAAA,EAAS;AAAA,EAAc;AAAA,EAAc;AAAA,EAAa;AAAA,EACjF;AAAA,EAAa;AAAA,EAAe;AAC9B;AAEO,IAAM,gBAAwB;AAAA,EACnC,UAAU;AAAA,EACV,YAAY,EAAE,KAAK,kBAAkB;AAAA,EACrC,OAAO,CAAC,UAAU,OAAO;AAAA,EACzB,eAAe;AAAA,EACf,SAAS,CAAC;AAAA,EACV,WAAW,CAAC;AACd;AAGO,SAAS,eAAe,QAAwB;AACrD,SAAO,qBAAqB,QAAQ,aAAa;AACnD;","names":[]}

package/dist/safe-html.d.cts

@@ -0,0 +1,43 @@
+import { Schema } from 'hast-util-sanitize';
+export { Schema as SafeHtmlSchema } from 'hast-util-sanitize';
+
+/**
+ * @ai-matrx/print/safe-html — THE allow-list every Markdown→HTML string this
+ * package hands out goes through.
+ *
+ * Why an allow-list: the regex converter (`markdownToHtml` /
+ * `markdownToArticleHtml`) lets author raw HTML through so a document can feed
+ * WordPress. Its old guard was a block-list (script, style, on… handlers,
+ * javascript: URLs) and everything nobody listed — `<iframe>`, `<form>`,
+ * `<meta http-equiv=refresh>`, `<object>`/`<embed>`, `<base>`, `<link>`,
+ * inline `style` — reached the clipboard, the downloaded page and the preview.
+ * Now a tag or attribute survives only when it is listed here.
+ *
+ * Sync and DOM-free (parse5 via hast), so it runs in Node, workers, the
+ * extension service worker and Tauri alike.
+ *
+ * Two schemas:
+ *   • `SAFE_HTML_SCHEMA` — GitHub's rendering rules (hast-util-sanitize's
+ *     default schema) with no id clobber-prefixing and the "drop the element
+ *     AND its text" list for elements whose text is not prose. For any host
+ *     that renders plain semantic HTML (email bodies, CMS drafts).
+ *   • `PRINT_HTML_SCHEMA` — the same, plus exactly the vocabulary print's own
+ *     converters emit: `matrx-*` / `print-*` / `code-*` / `doc-*` classes,
+ *     table-cell alignment, the flashcard checkbox + label, figures, and the
+ *     page-break separator's data/aria attributes.
+ */
+
+/** Never allowed, whatever a schema extension adds. */
+declare const FORBIDDEN_TAGS: readonly string[];
+declare const SAFE_HTML_SCHEMA: Schema;
+declare const PRINT_HTML_SCHEMA: Schema;
+/** Sanitize an HTML fragment against an allow-list (default: `SAFE_HTML_SCHEMA`). */
+declare function sanitizeHtmlFragment(html: string, schema?: Schema): string;
+/** Sanitize the output of print's own converters (keeps the `.matrx-*` vocabulary). */
+declare function sanitizePrintHtml(html: string): string;
+
+declare const MATHML_SCHEMA: Schema;
+/** Sanitize a typeset MathML string (keeps layout, drops links and styles). */
+declare function sanitizeMathml(mathml: string): string;
+
+export { FORBIDDEN_TAGS, MATHML_SCHEMA, PRINT_HTML_SCHEMA, SAFE_HTML_SCHEMA, sanitizeHtmlFragment, sanitizeMathml, sanitizePrintHtml };

package/dist/safe-html.d.ts

@@ -0,0 +1,43 @@
+import { Schema } from 'hast-util-sanitize';
+export { Schema as SafeHtmlSchema } from 'hast-util-sanitize';
+
+/**
+ * @ai-matrx/print/safe-html — THE allow-list every Markdown→HTML string this
+ * package hands out goes through.
+ *
+ * Why an allow-list: the regex converter (`markdownToHtml` /
+ * `markdownToArticleHtml`) lets author raw HTML through so a document can feed
+ * WordPress. Its old guard was a block-list (script, style, on… handlers,
+ * javascript: URLs) and everything nobody listed — `<iframe>`, `<form>`,
+ * `<meta http-equiv=refresh>`, `<object>`/`<embed>`, `<base>`, `<link>`,
+ * inline `style` — reached the clipboard, the downloaded page and the preview.
+ * Now a tag or attribute survives only when it is listed here.
+ *
+ * Sync and DOM-free (parse5 via hast), so it runs in Node, workers, the
+ * extension service worker and Tauri alike.
+ *
+ * Two schemas:
+ *   • `SAFE_HTML_SCHEMA` — GitHub's rendering rules (hast-util-sanitize's
+ *     default schema) with no id clobber-prefixing and the "drop the element
+ *     AND its text" list for elements whose text is not prose. For any host
+ *     that renders plain semantic HTML (email bodies, CMS drafts).
+ *   • `PRINT_HTML_SCHEMA` — the same, plus exactly the vocabulary print's own
+ *     converters emit: `matrx-*` / `print-*` / `code-*` / `doc-*` classes,
+ *     table-cell alignment, the flashcard checkbox + label, figures, and the
+ *     page-break separator's data/aria attributes.
+ */
+
+/** Never allowed, whatever a schema extension adds. */
+declare const FORBIDDEN_TAGS: readonly string[];
+declare const SAFE_HTML_SCHEMA: Schema;
+declare const PRINT_HTML_SCHEMA: Schema;
+/** Sanitize an HTML fragment against an allow-list (default: `SAFE_HTML_SCHEMA`). */
+declare function sanitizeHtmlFragment(html: string, schema?: Schema): string;
+/** Sanitize the output of print's own converters (keeps the `.matrx-*` vocabulary). */
+declare function sanitizePrintHtml(html: string): string;
+
+declare const MATHML_SCHEMA: Schema;
+/** Sanitize a typeset MathML string (keeps layout, drops links and styles). */
+declare function sanitizeMathml(mathml: string): string;
+
+export { FORBIDDEN_TAGS, MATHML_SCHEMA, PRINT_HTML_SCHEMA, SAFE_HTML_SCHEMA, sanitizeHtmlFragment, sanitizeMathml, sanitizePrintHtml };

package/dist/safe-html.js

@@ -0,0 +1,210 @@
+// src/safe-html.ts
+import { fromHtml } from "hast-util-from-html";
+import { defaultSchema, sanitize } from "hast-util-sanitize";
+import { toHtml } from "hast-util-to-html";
+var STRIP_WITH_CONTENT = [
+  "script",
+  "style",
+  "noscript",
+  "template",
+  "iframe",
+  "object",
+  "embed",
+  "textarea",
+  "select",
+  "head",
+  "title"
+];
+var FORBIDDEN_TAGS = [
+  ...STRIP_WITH_CONTENT,
+  "form",
+  "meta",
+  "base",
+  "link",
+  "frame",
+  "frameset",
+  "applet",
+  "button",
+  "svg",
+  "math"
+];
+var baseAttributes = defaultSchema.attributes ?? {};
+var SAFE_HTML_SCHEMA = {
+  ...defaultSchema,
+  tagNames: (defaultSchema.tagNames ?? []).filter((t) => !FORBIDDEN_TAGS.includes(t)),
+  strip: STRIP_WITH_CONTENT,
+  // Authored anchors keep their names; the GitHub `user-content-` rewrite
+  // would also break `<label for>` → `<input id>` pairs.
+  clobberPrefix: "",
+  clobber: []
+};
+var PRINT_CLASS = /^(?:(?:matrx|print|code|doc|language)-[\w-]*|inline-code|is-checked)$/;
+function withPrintClasses(defs = []) {
+  let found = false;
+  const out = defs.map((d) => {
+    if (Array.isArray(d) && d[0] === "className") {
+      found = true;
+      return [...d, PRINT_CLASS];
+    }
+    return d;
+  });
+  return found ? out : [...out, ["className", PRINT_CLASS]];
+}
+var printAttributes = Object.fromEntries(
+  Object.entries(baseAttributes).map(([tag, defs]) => [tag, withPrintClasses(defs)])
+);
+var cellAlign = ["style", /^text-align:\s*(?:left|center|right);?$/];
+var PRINT_HTML_SCHEMA = {
+  ...SAFE_HTML_SCHEMA,
+  tagNames: [
+    .../* @__PURE__ */ new Set([...SAFE_HTML_SCHEMA.tagNames ?? [], "section", "figure", "figcaption", "label"])
+  ],
+  attributes: {
+    ...printAttributes,
+    "*": [
+      ...baseAttributes["*"] ?? [],
+      ["className", PRINT_CLASS],
+      "role",
+      "ariaLabel",
+      "ariaHidden",
+      "dataLabel",
+      "dataLanguage",
+      "dataArtifactType"
+    ],
+    // Table-cell alignment is the one inline style the converter writes.
+    td: withPrintClasses([...baseAttributes["td"] ?? [], [...cellAlign]]),
+    th: withPrintClasses([...baseAttributes["th"] ?? [], [...cellAlign]]),
+    // The flashcard flip is a checkbox + label pair (GitHub forces `disabled`).
+    input: withPrintClasses([["type", "checkbox"], "checked"]),
+    label: withPrintClasses(["htmlFor"])
+  },
+  required: { input: { type: "checkbox" } },
+  protocols: {
+    ...defaultSchema.protocols,
+    href: [...defaultSchema.protocols?.href ?? [], "tel"],
+    // Embedded images (`data:image/png;base64,…`) — an <img> never runs script.
+    src: [...defaultSchema.protocols?.src ?? [], "data"]
+  }
+};
+function sanitizeHtmlFragment(html, schema = SAFE_HTML_SCHEMA) {
+  if (!html) return "";
+  const tree = sanitize(fromHtml(html, { fragment: true }), schema);
+  return toHtml(tree, { characterReferences: { useNamedReferences: true } });
+}
+function sanitizePrintHtml(html) {
+  return sanitizeHtmlFragment(html, PRINT_HTML_SCHEMA);
+}
+var MATHML_TAGS = [
+  "math",
+  "maction",
+  "annotation",
+  "menclose",
+  "merror",
+  "mfrac",
+  "mglyph",
+  "mi",
+  "mlabeledtr",
+  "mmultiscripts",
+  "mn",
+  "mo",
+  "mover",
+  "mpadded",
+  "mphantom",
+  "mprescripts",
+  "none",
+  "mroot",
+  "mrow",
+  "ms",
+  "mspace",
+  "msqrt",
+  "mstyle",
+  "msub",
+  "msubsup",
+  "msup",
+  "mtable",
+  "mtd",
+  "mtext",
+  "mtr",
+  "munder",
+  "munderover",
+  "semantics"
+];
+var MATHML_ATTRIBUTES = [
+  "xmlns",
+  "display",
+  "displaystyle",
+  "mathvariant",
+  "mathsize",
+  "mathcolor",
+  "mathbackground",
+  "scriptlevel",
+  "dir",
+  "fence",
+  "form",
+  "largeop",
+  "lspace",
+  "rspace",
+  "movablelimits",
+  "separator",
+  "stretchy",
+  "symmetric",
+  "maxsize",
+  "minsize",
+  "accent",
+  "accentunder",
+  "align",
+  "columnalign",
+  "rowalign",
+  "columnspacing",
+  "rowspacing",
+  "columnlines",
+  "rowlines",
+  "frame",
+  "framespacing",
+  "equalrows",
+  "equalcolumns",
+  "linethickness",
+  "numalign",
+  "denomalign",
+  "bevelled",
+  "notation",
+  "width",
+  "height",
+  "depth",
+  "voffset",
+  "lquote",
+  "rquote",
+  "columnspan",
+  "rowspan",
+  "encoding",
+  "open",
+  "close",
+  "separators",
+  "actiontype",
+  "selection",
+  "mslinebreak",
+  "linebreak",
+  "indentalign",
+  "data*"
+];
+var MATHML_SCHEMA = {
+  tagNames: MATHML_TAGS,
+  attributes: { "*": MATHML_ATTRIBUTES },
+  strip: ["script", "style"],
+  clobberPrefix: "",
+  clobber: [],
+  protocols: {}
+};
+function sanitizeMathml(mathml) {
+  return sanitizeHtmlFragment(mathml, MATHML_SCHEMA);
+}
+export {
+  FORBIDDEN_TAGS,
+  MATHML_SCHEMA,
+  PRINT_HTML_SCHEMA,
+  SAFE_HTML_SCHEMA,
+  sanitizeHtmlFragment,
+  sanitizeMathml,
+  sanitizePrintHtml
+};
+//# sourceMappingURL=safe-html.js.map

package/dist/safe-html.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/safe-html.ts"],"sourcesContent":["/**\n * @ai-matrx/print/safe-html — THE allow-list every Markdown→HTML string this\n * package hands out goes through.\n *\n * Why an allow-list: the regex converter (`markdownToHtml` /\n * `markdownToArticleHtml`) lets author raw HTML through so a document can feed\n * WordPress. Its old guard was a block-list (script, style, on… handlers,\n * javascript: URLs) and everything nobody listed — `<iframe>`, `<form>`,\n * `<meta http-equiv=refresh>`, `<object>`/`<embed>`, `<base>`, `<link>`,\n * inline `style` — reached the clipboard, the downloaded page and the preview.\n * Now a tag or attribute survives only when it is listed here.\n *\n * Sync and DOM-free (parse5 via hast), so it runs in Node, workers, the\n * extension service worker and Tauri alike.\n *\n * Two schemas:\n *   • `SAFE_HTML_SCHEMA` — GitHub's rendering rules (hast-util-sanitize's\n *     default schema) with no id clobber-prefixing and the \"drop the element\n *     AND its text\" list for elements whose text is not prose. For any host\n *     that renders plain semantic HTML (email bodies, CMS drafts).\n *   • `PRINT_HTML_SCHEMA` — the same, plus exactly the vocabulary print's own\n *     converters emit: `matrx-*` / `print-*` / `code-*` / `doc-*` classes,\n *     table-cell alignment, the flashcard checkbox + label, figures, and the\n *     page-break separator's data/aria attributes.\n */\n\nimport { fromHtml } from \"hast-util-from-html\";\nimport { defaultSchema, sanitize, type Schema } from \"hast-util-sanitize\";\nimport { toHtml } from \"hast-util-to-html\";\nimport type { Root } from \"hast\";\n\ntype Attributes = NonNullable<Schema[\"attributes\"]>;\ntype AttributeList = Attributes[string];\n\n/** Elements removed together with their content (their text is not prose). */\nconst STRIP_WITH_CONTENT = [\n  \"script\",\n  \"style\",\n  \"noscript\",\n  \"template\",\n  \"iframe\",\n  \"object\",\n  \"embed\",\n  \"textarea\",\n  \"select\",\n  \"head\",\n  \"title\",\n];\n\n/** Never allowed, whatever a schema extension adds. */\nexport const FORBIDDEN_TAGS: readonly string[] = [\n  ...STRIP_WITH_CONTENT,\n  \"form\",\n  \"meta\",\n  \"base\",\n  \"link\",\n  \"frame\",\n  \"frameset\",\n  \"applet\",\n  \"button\",\n  \"svg\",\n  \"math\",\n];\n\nconst baseAttributes = defaultSchema.attributes ?? {};\n\nexport const SAFE_HTML_SCHEMA: Schema = {\n  ...defaultSchema,\n  tagNames: (defaultSchema.tagNames ?? []).filter((t) => !FORBIDDEN_TAGS.includes(t)),\n  strip: STRIP_WITH_CONTENT,\n  // Authored anchors keep their names; the GitHub `user-content-` rewrite\n  // would also break `<label for>` → `<input id>` pairs.\n  clobberPrefix: \"\",\n  clobber: [],\n};\n\n/** Class tokens print's converters emit. Author classes outside these are dropped. */\nconst PRINT_CLASS = /^(?:(?:matrx|print|code|doc|language)-[\\w-]*|inline-code|is-checked)$/;\n\n/**\n * A tag's own `className` definition wins over `'*'` (and returns an empty\n * list rather than falling through), so the print class pattern is merged into\n * every definition that names `className`, and added where none does.\n */\nfunction withPrintClasses(defs: AttributeList = []): AttributeList {\n  let found = false;\n  const out = defs.map((d) => {\n    if (Array.isArray(d) && d[0] === \"className\") {\n      found = true;\n      return [...d, PRINT_CLASS] as unknown as typeof d;\n    }\n    return d;\n  });\n  return found ? out : [...out, [\"className\", PRINT_CLASS]];\n}\n\nconst printAttributes: Attributes = Object.fromEntries(\n  Object.entries(baseAttributes).map(([tag, defs]) => [tag, withPrintClasses(defs)]),\n);\n\nconst cellAlign = [\"style\", /^text-align:\\s*(?:left|center|right);?$/] as const;\n\nexport const PRINT_HTML_SCHEMA: Schema = {\n  ...SAFE_HTML_SCHEMA,\n  tagNames: [\n    ...new Set([...(SAFE_HTML_SCHEMA.tagNames ?? []), \"section\", \"figure\", \"figcaption\", \"label\"]),\n  ],\n  attributes: {\n    ...printAttributes,\n    \"*\": [\n      ...(baseAttributes[\"*\"] ?? []),\n      [\"className\", PRINT_CLASS],\n      \"role\",\n      \"ariaLabel\",\n      \"ariaHidden\",\n      \"dataLabel\",\n      \"dataLanguage\",\n      \"dataArtifactType\",\n    ],\n    // Table-cell alignment is the one inline style the converter writes.\n    td: withPrintClasses([...(baseAttributes[\"td\"] ?? []), [...cellAlign]]),\n    th: withPrintClasses([...(baseAttributes[\"th\"] ?? []), [...cellAlign]]),\n    // The flashcard flip is a checkbox + label pair (GitHub forces `disabled`).\n    input: withPrintClasses([[\"type\", \"checkbox\"], \"checked\"]),\n    label: withPrintClasses([\"htmlFor\"]),\n  },\n  required: { input: { type: \"checkbox\" } },\n  protocols: {\n    ...defaultSchema.protocols,\n    href: [...(defaultSchema.protocols?.href ?? []), \"tel\"],\n    // Embedded images (`data:image/png;base64,…`) — an <img> never runs script.\n    src: [...(defaultSchema.protocols?.src ?? []), \"data\"],\n  },\n};\n\n/** Sanitize an HTML fragment against an allow-list (default: `SAFE_HTML_SCHEMA`). */\nexport function sanitizeHtmlFragment(html: string, schema: Schema = SAFE_HTML_SCHEMA): string {\n  if (!html) return \"\";\n  const tree = sanitize(fromHtml(html, { fragment: true }), schema) as Root;\n  return toHtml(tree, { characterReferences: { useNamedReferences: true } });\n}\n\n/** Sanitize the output of print's own converters (keeps the `.matrx-*` vocabulary). */\nexport function sanitizePrintHtml(html: string): string {\n  return sanitizeHtmlFragment(html, PRINT_HTML_SCHEMA);\n}\n\nexport type { Schema as SafeHtmlSchema };\n\n/**\n * MathML from the TeX typesetter. TeX is author input, and MathJax's `html`,\n * `bbox` and `\\mmlToken` commands turn it into attributes (`\\href{javascript:…}`\n * → `href`, `\\style{position:fixed…}` / `\\bbox[position:fixed]` → `style`).\n * Only presentation MathML elements and their layout attributes survive.\n */\nconst MATHML_TAGS = [\n  \"math\", \"maction\", \"annotation\", \"menclose\", \"merror\", \"mfrac\", \"mglyph\", \"mi\",\n  \"mlabeledtr\", \"mmultiscripts\", \"mn\", \"mo\", \"mover\", \"mpadded\", \"mphantom\", \"mprescripts\", \"none\",\n  \"mroot\", \"mrow\", \"ms\", \"mspace\", \"msqrt\", \"mstyle\", \"msub\", \"msubsup\", \"msup\", \"mtable\", \"mtd\",\n  \"mtext\", \"mtr\", \"munder\", \"munderover\", \"semantics\",\n];\n\nconst MATHML_ATTRIBUTES = [\n  \"xmlns\", \"display\", \"displaystyle\", \"mathvariant\", \"mathsize\", \"mathcolor\", \"mathbackground\",\n  \"scriptlevel\", \"dir\", \"fence\", \"form\", \"largeop\", \"lspace\", \"rspace\", \"movablelimits\",\n  \"separator\", \"stretchy\", \"symmetric\", \"maxsize\", \"minsize\", \"accent\", \"accentunder\", \"align\",\n  \"columnalign\", \"rowalign\", \"columnspacing\", \"rowspacing\", \"columnlines\", \"rowlines\", \"frame\",\n  \"framespacing\", \"equalrows\", \"equalcolumns\", \"linethickness\", \"numalign\", \"denomalign\",\n  \"bevelled\", \"notation\", \"width\", \"height\", \"depth\", \"voffset\", \"lquote\", \"rquote\", \"columnspan\",\n  \"rowspan\", \"encoding\", \"open\", \"close\", \"separators\", \"actiontype\", \"selection\", \"mslinebreak\",\n  \"linebreak\", \"indentalign\", \"data*\",\n];\n\nexport const MATHML_SCHEMA: Schema = {\n  tagNames: MATHML_TAGS,\n  attributes: { \"*\": MATHML_ATTRIBUTES },\n  strip: [\"script\", \"style\"],\n  clobberPrefix: \"\",\n  clobber: [],\n  protocols: {},\n};\n\n/** Sanitize a typeset MathML string (keeps layout, drops links and styles). */\nexport function sanitizeMathml(mathml: string): string {\n  return sanitizeHtmlFragment(mathml, MATHML_SCHEMA);\n}\n"],"mappings":";AA0BA,SAAS,gBAAgB;AACzB,SAAS,eAAe,gBAA6B;AACrD,SAAS,cAAc;AAOvB,IAAM,qBAAqB;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,iBAAoC;AAAA,EAC/C,GAAG;AAAA,EACH;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,iBAAiB,cAAc,cAAc,CAAC;AAE7C,IAAM,mBAA2B;AAAA,EACtC,GAAG;AAAA,EACH,WAAW,cAAc,YAAY,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,eAAe,SAAS,CAAC,CAAC;AAAA,EAClF,OAAO;AAAA;AAAA;AAAA,EAGP,eAAe;AAAA,EACf,SAAS,CAAC;AACZ;AAGA,IAAM,cAAc;AAOpB,SAAS,iBAAiB,OAAsB,CAAC,GAAkB;AACjE,MAAI,QAAQ;AACZ,QAAM,MAAM,KAAK,IAAI,CAAC,MAAM;AAC1B,QAAI,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,aAAa;AAC5C,cAAQ;AACR,aAAO,CAAC,GAAG,GAAG,WAAW;AAAA,IAC3B;AACA,WAAO;AAAA,EACT,CAAC;AACD,SAAO,QAAQ,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,WAAW,CAAC;AAC1D;AAEA,IAAM,kBAA8B,OAAO;AAAA,EACzC,OAAO,QAAQ,cAAc,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,iBAAiB,IAAI,CAAC,CAAC;AACnF;AAEA,IAAM,YAAY,CAAC,SAAS,yCAAyC;AAE9D,IAAM,oBAA4B;AAAA,EACvC,GAAG;AAAA,EACH,UAAU;AAAA,IACR,GAAG,oBAAI,IAAI,CAAC,GAAI,iBAAiB,YAAY,CAAC,GAAI,WAAW,UAAU,cAAc,OAAO,CAAC;AAAA,EAC/F;AAAA,EACA,YAAY;AAAA,IACV,GAAG;AAAA,IACH,KAAK;AAAA,MACH,GAAI,eAAe,GAAG,KAAK,CAAC;AAAA,MAC5B,CAAC,aAAa,WAAW;AAAA,MACzB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA;AAAA,IAEA,IAAI,iBAAiB,CAAC,GAAI,eAAe,IAAI,KAAK,CAAC,GAAI,CAAC,GAAG,SAAS,CAAC,CAAC;AAAA,IACtE,IAAI,iBAAiB,CAAC,GAAI,eAAe,IAAI,KAAK,CAAC,GAAI,CAAC,GAAG,SAAS,CAAC,CAAC;AAAA;AAAA,IAEtE,OAAO,iBAAiB,CAAC,CAAC,QAAQ,UAAU,GAAG,SAAS,CAAC;AAAA,IACzD,OAAO,iBAAiB,CAAC,SAAS,CAAC;AAAA,EACrC;AAAA,EACA,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,EAAE;AAAA,EACxC,WAAW;AAAA,IACT,GAAG,cAAc;AAAA,IACjB,MAAM,CAAC,GAAI,cAAc,WAAW,QAAQ,CAAC,GAAI,KAAK;AAAA;AAAA,IAEtD,KAAK,CAAC,GAAI,cAAc,WAAW,OAAO,CAAC,GAAI,MAAM;AAAA,EACvD;AACF;AAGO,SAAS,qBAAqB,MAAc,SAAiB,kBAA0B;AAC5F,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,OAAO,SAAS,SAAS,MAAM,EAAE,UAAU,KAAK,CAAC,GAAG,MAAM;AAChE,SAAO,OAAO,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,KAAK,EAAE,CAAC;AAC3E;AAGO,SAAS,kBAAkB,MAAsB;AACtD,SAAO,qBAAqB,MAAM,iBAAiB;AACrD;AAUA,IAAM,cAAc;AAAA,EAClB;AAAA,EAAQ;AAAA,EAAW;AAAA,EAAc;AAAA,EAAY;AAAA,EAAU;AAAA,EAAS;AAAA,EAAU;AAAA,EAC1E;AAAA,EAAc;AAAA,EAAiB;AAAA,EAAM;AAAA,EAAM;AAAA,EAAS;AAAA,EAAW;AAAA,EAAY;AAAA,EAAe;AAAA,EAC1F;AAAA,EAAS;AAAA,EAAQ;AAAA,EAAM;AAAA,EAAU;AAAA,EAAS;AAAA,EAAU;AAAA,EAAQ;AAAA,EAAW;AAAA,EAAQ;AAAA,EAAU;AAAA,EACzF;AAAA,EAAS;AAAA,EAAO;AAAA,EAAU;AAAA,EAAc;AAC1C;AAEA,IAAM,oBAAoB;AAAA,EACxB;AAAA,EAAS;AAAA,EAAW;AAAA,EAAgB;AAAA,EAAe;AAAA,EAAY;AAAA,EAAa;AAAA,EAC5E;AAAA,EAAe;AAAA,EAAO;AAAA,EAAS;AAAA,EAAQ;AAAA,EAAW;AAAA,EAAU;AAAA,EAAU;AAAA,EACtE;AAAA,EAAa;AAAA,EAAY;AAAA,EAAa;AAAA,EAAW;AAAA,EAAW;AAAA,EAAU;AAAA,EAAe;AAAA,EACrF;AAAA,EAAe;AAAA,EAAY;AAAA,EAAiB;AAAA,EAAc;AAAA,EAAe;AAAA,EAAY;AAAA,EACrF;AAAA,EAAgB;AAAA,EAAa;AAAA,EAAgB;AAAA,EAAiB;AAAA,EAAY;AAAA,EAC1E;AAAA,EAAY;AAAA,EAAY;AAAA,EAAS;AAAA,EAAU;AAAA,EAAS;AAAA,EAAW;AAAA,EAAU;AAAA,EAAU;AAAA,EACnF;AAAA,EAAW;AAAA,EAAY;AAAA,EAAQ;AAAA,EAAS;AAAA,EAAc;AAAA,EAAc;AAAA,EAAa;AAAA,EACjF;AAAA,EAAa;AAAA,EAAe;AAC9B;AAEO,IAAM,gBAAwB;AAAA,EACnC,UAAU;AAAA,EACV,YAAY,EAAE,KAAK,kBAAkB;AAAA,EACrC,OAAO,CAAC,UAAU,OAAO;AAAA,EACzB,eAAe;AAAA,EACf,SAAS,CAAC;AAAA,EACV,WAAW,CAAC;AACd;AAGO,SAAS,eAAe,QAAwB;AACrD,SAAO,qBAAqB,QAAQ,aAAa;AACnD;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/print",
-  "version": "0.8.7",
+  "version": "0.8.8",
   "description": "The AI Matrx print system: the BlockPrinter contract and print-window composition, the flashcards deck printer (duplex-mirrored cut sheets, Avery 5388, study sheets), QR generation with spec quiet zones and e-commerce payload builders, label-sheet printing on Avery and roll stock with custom label formats, and a complete markdown pipeline: a shipped markdown converter, two default print stylesheets, print windows, and markdown/DOM to PDF, and print-grade documents (cover, TOC, captions, cross-references, citations, sections) exported to PDF, DOCX, EPUB and HTML from one parsed tree.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -215,6 +215,16 @@
         "types": "./dist/document.d.cts",
         "default": "./dist/document.cjs"
       }
+    },
+    "./safe-html": {
+      "import": {
+        "types": "./dist/safe-html.d.ts",
+        "default": "./dist/safe-html.js"
+      },
+      "require": {
+        "types": "./dist/safe-html.d.cts",
+        "default": "./dist/safe-html.cjs"
+      }
     }
   },
   "dependencies": {
@@ -224,6 +234,9 @@
     "citeproc": "^2.4.63",
     "docx": "^9.7.2",
     "fontkit": "^2.0.4",
+    "hast-util-from-html": "^2.0.3",
+    "hast-util-sanitize": "^5.0.2",
+    "hast-util-to-html": "^9.0.5",
     "html2canvas": "^1.4.1",
     "hyphen": "^1.14.1",
     "jspdf": "^4.2.1",
@@ -238,8 +251,8 @@
     "tailwind-merge": "^3.7.0",
     "vaul": "^1.1.2",
     "yaml": "^2.9.1",
-    "@ai-matrx/kit": "latest",
-    "@ai-matrx/content-ir": "latest"
+    "@ai-matrx/content-ir": "latest",
+    "@ai-matrx/kit": "latest"
   },
   "peerDependencies": {
     "react": ">=18.0.0",
@@ -259,6 +272,7 @@
     "@fontsource/noto-sans-math": "^5.3.0",
     "@testing-library/react": "^16.3.3",
     "@types/fontkit": "^2.0.9",
+    "@types/hast": "^3.0.5",
     "@types/hyphen": "^1.14.0",
     "@types/mdast": "^4.0.4",
     "@types/node": "^26.6.2",