@ai-matrx/rich-content 0.2.27 → 0.2.29

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.2.29
+
+- The split Copy's popover sizes to the Alchemy palette it holds (it clipped "Download" at 240px).
+
+### Consumer action
+
+- None required.
+
+## 0.2.28
+
+- `BlockRenderer` and `ConfigurableMarkdownContent` suspend on the lazy host like the other entry points (plain text meanwhile); a test lists every gated entry point.
+- The "message" markdown preset drops `<script>` elements and inline `on*` handlers after `rehype-raw`, so an answer never hands React a script tag.
+
+**Consumer action:** none.
+
 ## 0.2.27
 
 - ONE copy truth (Arman, 2026-10-04: "one click to get either the markdown version or the no-markup version, everywhere"). `copyRichContent(md, "default")` now writes EXACTLY the person's flavor (`copy.default_flavor`, default markdown) — the same bytes as that flavor's menu row; it no longer adds an HTML flavor (formatted copies live in the Alchemy palette). Every flavor is clean: `<artifact …>` wrappers are unwrapped to their body (`cleanCopyMarkdown`, `richCopyPlainText`).

package/dist/copy/CopySplitButton.js

@@ -90,7 +90,7 @@ function CopySplitButton({
             PopoverContent,
             {
               align: "start",
-              className: "w-60 p-1",
+              className: "w-auto min-w-60 max-w-[min(24rem,calc(100vw-16px))] p-1",
               onOpenAutoFocus: preserveSelection ? (event) => event.preventDefault() : void 0,
               "data-copy-split-menu": "",
               children: [

package/dist/display/chat-markdown/ConfigurableMarkdownContent.js

@@ -1,6 +1,7 @@
 "use client";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import React from "react";
+import { RichContentHostGate } from "../../host/RichContentHostGate.js";
 import MarkdownCore from "../../markdown-core/MarkdownCore.js";
 import { cn } from "@ai-matrx/design-system";
 import { Checkbox } from "@ai-matrx/design-system";
@@ -123,6 +124,13 @@ function resolveConfig(partial) {
 }
 const getDirectionClasses = (direction) => direction === "rtl" ? "text-right rtl" : "text-left ltr";
 const ConfigurableMarkdownContent = (props) => /* @__PURE__ */ jsx(
+  RichContentHostGate,
+  {
+    fallback: /* @__PURE__ */ jsx("div", { "data-rich-content-host-loading": true, style: { whiteSpace: "pre-wrap" }, children: props.content }),
+    children: /* @__PURE__ */ jsx(ConfigurableMarkdownContentKindGated, { ...props })
+  }
+);
+const ConfigurableMarkdownContentKindGated = (props) => /* @__PURE__ */ jsx(
   KindTextGate,
   {
     component: "ConfigurableMarkdownContent",

package/dist/display/chat-markdown/block-registry/BlockRenderer.js

@@ -2,6 +2,7 @@
 import { jsx, jsxs } from "react/jsx-runtime";
 import { durableRecordId } from "@ai-matrx/kit/ids";
 import React, { useCallback } from "react";
+import { RichContentHostGate } from "../../../host/RichContentHostGate.js";
 import { BlockComponents, LoadingComponents } from "./BlockComponentRegistry.js";
 import { resolveArtifactDef } from "../../../host/app-bindings.js";
 import {
@@ -262,7 +263,14 @@ const PendingStructuredBlock = ({
     value: envelope.root.value ?? null
   });
 };
-const BlockRenderer = ({
+const BlockRenderer = (props) => /* @__PURE__ */ jsx(
+  RichContentHostGate,
+  {
+    fallback: typeof props.block.content === "string" ? /* @__PURE__ */ jsx("div", { "data-rich-content-host-loading": true, style: { whiteSpace: "pre-wrap" }, children: props.block.content }) : null,
+    children: /* @__PURE__ */ jsx(BlockRendererGated, { ...props })
+  }
+);
+const BlockRendererGated = ({
   requestId,
   block: inputBlock,
   index,

package/dist/markdown-core/markdown-core-presets.js

@@ -5,6 +5,7 @@ import remarkBreaks from "remark-breaks";
 import remarkMath from "./math/vendor/remark-math.js";
 import rehypeKatex from "./math/vendor/rehype-katex.js";
 import rehypeRaw from "rehype-raw";
+import rehypeDropScripts from "./rehype-drop-scripts.js";
 import remarkMatrxVariable from "../display/chat-markdown/matrx-variables/remarkMatrxVariable.js";
 import remarkMatrxCite from "../display/chat-markdown/citations/remarkMatrxCite.js";
 import rehypeSafeRawHtml from "../display/chat-markdown/rehypeSafeRawHtml.js";
@@ -88,7 +89,7 @@ const MARKDOWN_PRESETS = {
   },
   message: {
     remark: [GFM, MATH, remarkBreaks, ...SYNTAX_PARSE, PAGE_BREAK, ...SYNTAX_TRANSFORM],
-    rehype: [rehypeRaw, ...SYNTAX_REHYPE, KATEX],
+    rehype: [rehypeRaw, rehypeDropScripts, ...SYNTAX_REHYPE, KATEX],
     math: true
   }
 };

package/dist/markdown-core/rehype-drop-scripts.d.ts

@@ -0,0 +1,7 @@
+import type { Root } from "hast";
+/**
+ * After `rehype-raw` the "message" preset holds whatever HTML the text carried — `<script>` too. React
+ * refuses to render a script element ("Encountered a script tag while rendering React component") and
+ * an answer must never carry one, so scripts (and inline event handlers) are removed from the tree.
+ */
+export default function rehypeDropScripts(): (tree: Root) => void;

package/dist/markdown-core/rehype-drop-scripts.js

@@ -0,0 +1,18 @@
+function rehypeDropScripts() {
+  return (tree) => {
+    const walk = (node) => {
+      node.children = node.children.filter((child) => !(child.type === "element" && child.tagName === "script"));
+      for (const child of node.children) {
+        if (child.type !== "element") continue;
+        for (const key of Object.keys(child.properties ?? {})) {
+          if (/^on[A-Za-z]/.test(key)) delete child.properties[key];
+        }
+        walk(child);
+      }
+    };
+    walk(tree);
+  };
+}
+export {
+  rehypeDropScripts as default
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/rich-content",
-  "version": "0.2.27",
+  "version": "0.2.29",
   "description": "The AI Matrx formatted-text engine: the one markdown renderer, streaming markdown, the block splitter and renderer, the generic blocks, <RichContent> levels, the rich-document action registry and menus, copy, and the selection toolbar — as portable React.",
   "type": "module",
   "license": "MIT",
@@ -131,20 +131,20 @@
     "unist-util-visit-parents": "^6.0.2",
     "yaml": "^2.9.1",
     "@ai-matrx/agents": "latest",
-    "@ai-matrx/canvas": "latest",
-    "@ai-matrx/content-ir": "latest",
     "@ai-matrx/alchemy": "latest",
+    "@ai-matrx/content-ir": "latest",
     "@ai-matrx/data": "latest",
-    "@ai-matrx/content-ir-react": "latest",
+    "@ai-matrx/design-system": "latest",
+    "@ai-matrx/canvas": "latest",
     "@ai-matrx/diff": "latest",
-    "@ai-matrx/kit": "latest",
+    "@ai-matrx/content-ir-react": "latest",
     "@ai-matrx/icons": "latest",
-    "@ai-matrx/media": "latest",
-    "@ai-matrx/print": "latest",
+    "@ai-matrx/kit": "latest",
     "@ai-matrx/records": "latest",
+    "@ai-matrx/media": "latest",
     "@ai-matrx/records-ui": "latest",
     "@ai-matrx/tap-target": "latest",
-    "@ai-matrx/design-system": "latest"
+    "@ai-matrx/print": "latest"
   },
   "peerDependencies": {
     "react": ">=19.0.0",