@ai-matrx/rich-content 0.2.2 → 0.2.4

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.2.4
+
+`display/blocks/csv/CsvBlock`: Copy goes through `@ai-matrx/kit/clipboard` `useClipboard` with toast notices (carries matrx-frontend ALC-19 `b980571731`, which landed on the app copy as the app switched to this package).
+
+## 0.2.3
+
+The packaged artifact now includes the MIT attribution notice for the vendored math plugins.
+
+### Consumer action
+
+None. Math rendering and public imports are unchanged.
+
 ## 0.2.2
 
 `remark-math`, `rehype-katex` and the syntax half of `micromark-extension-math` are vendored

package/dist/display/blocks/csv/CsvBlock.js

@@ -1,5 +1,6 @@
 "use client";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { useClipboard } from "@ai-matrx/kit/clipboard";
 import { useState, useEffect } from "react";
 import { cn } from "@ai-matrx/design-system";
 import {
@@ -66,6 +67,9 @@ const CsvBlock = ({
   className,
   onInnerContentChange
 }) => {
+  const { copyText } = useClipboard({
+    notify: (message, kind) => kind === "error" ? toast.error(message) : toast.success(message)
+  });
   const [copied, setCopied] = useState(false);
   const [sortCol, setSortCol] = useState(null);
   const [sortDir, setSortDir] = useState(null);
@@ -82,7 +86,7 @@ const CsvBlock = ({
   const headers = data[0] || [];
   const bodyRows = data.slice(1);
   const handleCopy = async () => {
-    await navigator.clipboard.writeText(content);
+    await copyText(content);
     setCopied(true);
     setTimeout(() => setCopied(false), 2e3);
   };

package/dist/math-vendor-LICENSE-NOTICE.md

@@ -0,0 +1,18 @@
+# Vendored math plugins
+
+`remark-math`, `rehype-katex` and the syntax half of `micromark-extension-math` are copied here
+verbatim (one import path changed each) under their MIT license:
+
+> (The MIT License) Copyright (c) Titus Wormer <tituswormer@gmail.com>. Permission is hereby
+> granted, free of charge, to any person obtaining a copy of this software and associated
+> documentation files (the 'Software'), to deal in the Software without restriction, including
+> without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense,
+> and/or sell copies of the Software, and to permit persons to whom the Software is furnished to
+> do so, subject to the following conditions: The above copyright notice and this permission
+> notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS
+> PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND.
+
+Why: the upstream packages pin `katex ^0.16.0`, which carries GHSA-238p-pmpm-9mq7 (fixed in
+0.18.2), so any npm consumer of this package installed a vulnerable KaTeX. Vendored, the only
+KaTeX in the graph is this package's own `katex` dependency (^0.18.9). Drop the vendor copy the
+day upstream depends on katex >= 0.18.2.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/rich-content",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "The AI Matrx formatted-text engine: the one markdown renderer, streaming markdown, the block splitter and renderer, the generic blocks, <RichContent> levels, the rich-document action registry and menus, copy, and the selection toolbar — as portable React.",
   "type": "module",
   "license": "MIT",
@@ -83,14 +83,14 @@
     "unist-util-visit": "^5.1.0",
     "unist-util-visit-parents": "^6.0.2",
     "yaml": "^2.9.1",
-    "@ai-matrx/agents": "latest",
     "@ai-matrx/content-ir": "latest",
     "@ai-matrx/content-ir-react": "latest",
+    "@ai-matrx/design-system": "latest",
     "@ai-matrx/kit": "latest",
     "@ai-matrx/media": "latest",
-    "@ai-matrx/design-system": "latest",
     "@ai-matrx/print": "latest",
-    "@ai-matrx/records": "latest"
+    "@ai-matrx/records": "latest",
+    "@ai-matrx/agents": "latest"
   },
   "peerDependencies": {
     "react": ">=19.0.0",