@aquera/nile-elements 2.0.15 → 2.0.17

package/dist/version.cjs.js

@@ -1,2 +1,2 @@
-System.register([],function(_export,_context){"use strict";var e;function n(){var _ref;return(_ref=function(){if("undefined"==typeof window||"function"!=typeof getComputedStyle)return null;try{return getComputedStyle(document.documentElement).getPropertyValue("--nile-version").trim().replace(/^["']|["']$/g,"")||null;}catch(_unused){return null;}}())!==null&&_ref!==void 0?_ref:"1.3.4";}return{setters:[],execute:function execute(){if("undefined"!=typeof window){window.nileElementsVersion="__NILE_ELEMENTS_VERSION__";e=null;Object.defineProperty(window,"nileVersion",{configurable:!0,get:function get(){return e!==null&&e!==void 0?e:n();},set:function set(n){e=n;}}),window.process=window.process||{env:{NODE_ENV:"production"}};}}};});
+System.register([],function(_export,_context){"use strict";var e;function n(){var _ref;return(_ref=function(){if("undefined"==typeof window||"function"!=typeof getComputedStyle)return null;try{return getComputedStyle(document.documentElement).getPropertyValue("--nile-version").trim().replace(/^["']|["']$/g,"")||null;}catch(_unused){return null;}}())!==null&&_ref!==void 0?_ref:"1.3.5";}return{setters:[],execute:function execute(){if("undefined"!=typeof window){window.nileElementsVersion="__NILE_ELEMENTS_VERSION__";e=null;Object.defineProperty(window,"nileVersion",{configurable:!0,get:function get(){return e!==null&&e!==void 0?e:n();},set:function set(n){e=n;}}),window.process=window.process||{env:{NODE_ENV:"production"}};}}};});
 //# sourceMappingURL=version.cjs.js.map

package/dist/version.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.cjs.js","sources":["../../src/version.ts","../../nile/lib/version.js"],"sourcesContent":["// Version utility.\n//\n// NILE_ELEMENTS_VERSION is this package's own version and is still substituted\n// at build time by scripts/replace-version.cjs.\n//\n// The tokens version is read from the loaded Nile stylesheet's --nile-version\n// custom property (stamped by @aquera/nile's scripts/stamp-css-version.mjs),\n// falling back to the @aquera/nile installed alongside this package.\n//\n// Reading the stylesheet is what makes a tokens-only release visible. The\n// imported constant alone is not enough: rollup.config.js bundles\n// @aquera/nile/lib/version.js into dist/index.js, so on the CDN build it is\n// frozen at this package's build time. The stylesheet is the live source.\nimport { NILE_VERSION as BUILT_IN_NILE_VERSION } from '@aquera/nile/lib/version.js';\n\nexport const NILE_ELEMENTS_VERSION = '__NILE_ELEMENTS_VERSION__';\n\nfunction readStylesheetNileVersion(): string | null {\n  if (typeof window === 'undefined' || typeof getComputedStyle !== 'function') {\n    return null;\n  }\n\n  try {\n    const value = getComputedStyle(document.documentElement)\n      .getPropertyValue('--nile-version')\n      .trim()\n      .replace(/^[\"']|[\"']$/g, '');\n\n    return value || null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The version of @aquera/nile (tokens/stylesheets) whose CSS is loaded in the\n * page, falling back to the @aquera/nile bundled into this package when no\n * stamped stylesheet is present.\n *\n * This is the canonical runtime API. It resolves on every call rather than\n * caching, so it is correct even when the Nile stylesheet is added to the page\n * after this module evaluates - which is the common case, and why no\n * module-evaluation-time snapshot of it is exported.\n */\nexport function getNileVersion(): string {\n  return readStylesheetNileVersion() ?? BUILT_IN_NILE_VERSION;\n}\n\n// Set global versions for runtime access\nif (typeof window !== 'undefined') {\n  (window as any).nileElementsVersion = NILE_ELEMENTS_VERSION;\n\n  // A getter rather than a value, so window.nileVersion reflects whichever\n  // stylesheet is loaded at read time regardless of script/style ordering.\n  let override: string | null = null;\n  Object.defineProperty(window, 'nileVersion', {\n    configurable: true,\n    get: () => override ?? getNileVersion(),\n    set: (value: string) => {\n      override = value;\n    },\n  });\n\n  (window as any).process = (window as any).process || {\n    env: { NODE_ENV: 'production' },\n  };\n}\n","// Generated by scripts/build-version.mjs - do not edit by hand.\nexport const NILE_VERSION = '1.3.4';\n"],"names":["getNileVersion","n","_ref","window","getComputedStyle","document","documentElement","getPropertyValue","trim","replace","_unused","readStylesheetNileVersion","setters","execute","nileElementsVersion","override","Object","defineProperty","configurable","get","set","value","process","env","NODE_ENV"],"mappings":"yEA4CgBA,CAAAA,CACdC,CAAA,CAAA,KAAAC,IAAA,CAAA,OAAAA,IAAA,CA5BF,UACE,CAAA,GAAsB,WAAXC,EAAAA,MAAAA,CAAAA,MAAAA,EAAsD,UAArBC,EAAAA,MAAAA,CAAAA,gBAAAA,CAC1C,MAAO,KAAA,CAGT,GAME,CAAA,MALcA,CAAAA,iBAAiBC,QAASC,CAAAA,eAAAA,CAAAA,CACrCC,gBAAiB,CAAA,gBAAA,CAAA,CACjBC,IACAC,CAAAA,CAAAA,CAAAA,OAAAA,CAAQ,cAAgB,CAAA,EAAA,CAAA,EAEX,IACjB,EAAC,MAAAC,OAAA,CACA,CAAA,MAAO,KACR,EACH,CAaSC,CAAAA,CAAAA,UAAAA,IAAAA,UAAAA,IAAAA,CC5CmB,OD6C5B,EAGA,OAAAC,OAAA,IAAAC,OAAA,UAAAA,QAAA,KAAsB,WAAXV,EAAAA,MAAAA,CAAAA,MAAAA,CAAwB,CAChCA,MAAAA,CAAeW,mBAnCmB,CAAA,2BAAA,CAuC/BC,CAAAA,CAA0B,IAC9BC,CAAAA,MAAAA,CAAOC,cAAed,CAAAA,MAAAA,CAAQ,aAAe,CAAA,CAC3Ce,cAAc,CACdC,CAAAA,GAAAA,CAAK,QAALA,CAAAA,GAAAA,CAAAA,QAAWJ,CAAAA,CAAAA,SAAAA,CAAAA,UAAAA,CAAAA,CAAYf,CACvBoB,CAAAA,CAAAA,GAAAA,GAAAA,CAAMC,QAAND,CAAAA,GAAAA,CAAMC,CACJN,CAAAA,CAAAA,CAAAA,CAAWM,CAAK,EAInBlB,CAAAA,CAAAA,CAAAA,MAAAA,CAAemB,OAAWnB,CAAAA,MAAAA,CAAemB,OAAW,EAAA,CACnDC,GAAK,CAAA,CAAEC,SAAU,YAErB,CAAA,CAAA,EAAA"}
+{"version":3,"file":"version.cjs.js","sources":["../../src/version.ts","../../nile/lib/version.js"],"sourcesContent":["// Version utility.\n//\n// NILE_ELEMENTS_VERSION is this package's own version and is still substituted\n// at build time by scripts/replace-version.cjs.\n//\n// The tokens version is read from the loaded Nile stylesheet's --nile-version\n// custom property (stamped by @aquera/nile's scripts/stamp-css-version.mjs),\n// falling back to the @aquera/nile installed alongside this package.\n//\n// Reading the stylesheet is what makes a tokens-only release visible. The\n// imported constant alone is not enough: rollup.config.js bundles\n// @aquera/nile/lib/version.js into dist/index.js, so on the CDN build it is\n// frozen at this package's build time. The stylesheet is the live source.\nimport { NILE_VERSION as BUILT_IN_NILE_VERSION } from '@aquera/nile/lib/version.js';\n\nexport const NILE_ELEMENTS_VERSION = '__NILE_ELEMENTS_VERSION__';\n\nfunction readStylesheetNileVersion(): string | null {\n  if (typeof window === 'undefined' || typeof getComputedStyle !== 'function') {\n    return null;\n  }\n\n  try {\n    const value = getComputedStyle(document.documentElement)\n      .getPropertyValue('--nile-version')\n      .trim()\n      .replace(/^[\"']|[\"']$/g, '');\n\n    return value || null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * The version of @aquera/nile (tokens/stylesheets) whose CSS is loaded in the\n * page, falling back to the @aquera/nile bundled into this package when no\n * stamped stylesheet is present.\n *\n * This is the canonical runtime API. It resolves on every call rather than\n * caching, so it is correct even when the Nile stylesheet is added to the page\n * after this module evaluates - which is the common case, and why no\n * module-evaluation-time snapshot of it is exported.\n */\nexport function getNileVersion(): string {\n  return readStylesheetNileVersion() ?? BUILT_IN_NILE_VERSION;\n}\n\n// Set global versions for runtime access\nif (typeof window !== 'undefined') {\n  (window as any).nileElementsVersion = NILE_ELEMENTS_VERSION;\n\n  // A getter rather than a value, so window.nileVersion reflects whichever\n  // stylesheet is loaded at read time regardless of script/style ordering.\n  let override: string | null = null;\n  Object.defineProperty(window, 'nileVersion', {\n    configurable: true,\n    get: () => override ?? getNileVersion(),\n    set: (value: string) => {\n      override = value;\n    },\n  });\n\n  (window as any).process = (window as any).process || {\n    env: { NODE_ENV: 'production' },\n  };\n}\n","// Generated by scripts/build-version.mjs - do not edit by hand.\nexport const NILE_VERSION = '1.3.5';\n"],"names":["getNileVersion","n","_ref","window","getComputedStyle","document","documentElement","getPropertyValue","trim","replace","_unused","readStylesheetNileVersion","setters","execute","nileElementsVersion","override","Object","defineProperty","configurable","get","set","value","process","env","NODE_ENV"],"mappings":"yEA4CgBA,CAAAA,CACdC,CAAA,CAAA,KAAAC,IAAA,CAAA,OAAAA,IAAA,CA5BF,UACE,CAAA,GAAsB,WAAXC,EAAAA,MAAAA,CAAAA,MAAAA,EAAsD,UAArBC,EAAAA,MAAAA,CAAAA,gBAAAA,CAC1C,MAAO,KAAA,CAGT,GAME,CAAA,MALcA,CAAAA,iBAAiBC,QAASC,CAAAA,eAAAA,CAAAA,CACrCC,gBAAiB,CAAA,gBAAA,CAAA,CACjBC,IACAC,CAAAA,CAAAA,CAAAA,OAAAA,CAAQ,cAAgB,CAAA,EAAA,CAAA,EAEX,IACjB,EAAC,MAAAC,OAAA,CACA,CAAA,MAAO,KACR,EACH,CAaSC,CAAAA,CAAAA,UAAAA,IAAAA,UAAAA,IAAAA,CC5CmB,OD6C5B,EAGA,OAAAC,OAAA,IAAAC,OAAA,UAAAA,QAAA,KAAsB,WAAXV,EAAAA,MAAAA,CAAAA,MAAAA,CAAwB,CAChCA,MAAAA,CAAeW,mBAnCmB,CAAA,2BAAA,CAuC/BC,CAAAA,CAA0B,IAC9BC,CAAAA,MAAAA,CAAOC,cAAed,CAAAA,MAAAA,CAAQ,aAAe,CAAA,CAC3Ce,cAAc,CACdC,CAAAA,GAAAA,CAAK,QAALA,CAAAA,GAAAA,CAAAA,QAAWJ,CAAAA,CAAAA,SAAAA,CAAAA,UAAAA,CAAAA,CAAYf,CACvBoB,CAAAA,CAAAA,GAAAA,GAAAA,CAAMC,QAAND,CAAAA,GAAAA,CAAMC,CACJN,CAAAA,CAAAA,CAAAA,CAAWM,CAAK,EAInBlB,CAAAA,CAAAA,CAAAA,MAAAA,CAAemB,OAAWnB,CAAAA,MAAAA,CAAemB,OAAW,EAAA,CACnDC,GAAK,CAAA,CAAEC,SAAU,YAErB,CAAA,CAAA,EAAA"}

package/dist/version.esm.js

@@ -1 +1 @@
-function n(){return function(){if("undefined"==typeof window||"function"!=typeof getComputedStyle)return null;try{return getComputedStyle(document.documentElement).getPropertyValue("--nile-version").trim().replace(/^["']|["']$/g,"")||null}catch{return null}}()??"1.3.4"}if("undefined"!=typeof window){window.nileElementsVersion="__NILE_ELEMENTS_VERSION__";let e=null;Object.defineProperty(window,"nileVersion",{configurable:!0,get:()=>e??n(),set:n=>{e=n}}),window.process=window.process||{env:{NODE_ENV:"production"}}}
+function n(){return function(){if("undefined"==typeof window||"function"!=typeof getComputedStyle)return null;try{return getComputedStyle(document.documentElement).getPropertyValue("--nile-version").trim().replace(/^["']|["']$/g,"")||null}catch{return null}}()??"1.3.5"}if("undefined"!=typeof window){window.nileElementsVersion="__NILE_ELEMENTS_VERSION__";let e=null;Object.defineProperty(window,"nileVersion",{configurable:!0,get:()=>e??n(),set:n=>{e=n}}),window.process=window.process||{env:{NODE_ENV:"production"}}}

package/package.json

@@ -3,7 +3,7 @@
   "description": "Webcomponent nile-elements following open-wc recommendations",
   "license": "MIT",
   "author": "nile-elements",
-  "version": "2.0.15",
+  "version": "2.0.17",
   "main": "dist/src/index.js",
   "type": "module",
   "module": "dist/src/index.js",

package/src/nile-lite-tooltip/nile-lite-tooltip.css.ts

@@ -19,7 +19,7 @@ export const styles = css`
   .tippy-box {
     position: relative;
     background-color: var(--nile-colors-dark-900, var(--ng-colors-bg-primary-solid));
-    color: var(--nile-colors-dark-200, var(--ng-colors-text-primary-on-brand));
+    color: var(--nile-colors-dark-200, var(--ng-colors-text-white));
     font-weight: var(--nile-font-weight-regular, var(--ng-font-weight-semibold));
     border-radius: var(--nile-radius-sm, var(--ng-radius-md));
     font-size: var(--nile-type-scale-3, var(--ng-font-size-text-xs));

package/src/nile-tooltip/nile-tooltip.css.ts

@@ -63,7 +63,7 @@ export const styles = css`
     font-weight: var(--nile-tooltip-font-weight-sm, var(--ng-font-weight-semibold));
     line-height: var(--nile-tooltip-line-height-sm, var(--ng-line-height-text-xs));
     padding: var(--nile-tooltip-padding-y, var(--ng-spacing-md)) var(--nile-tooltip-padding-x, var(--ng-spacing-md));
-    color: var(--nile-colors-white-base, var(--ng-colors-text-primary-on-brand));
+    color: var(--nile-colors-white-base, var(--ng-colors-text-white));
     pointer-events: none;
     word-break: break-word;
     font-family: var(--nile-font-family-inherit, var(--ng-font-family-body));

package/src/nile-wysiwyg-editor/engine/create-state.ts

@@ -18,6 +18,7 @@ import { embedPastePlugin } from './plugins/embeds';
 import { pastePlugin } from './plugins/paste';
 import { formatPainterPlugin } from './plugins/format-painter';
 import { defaultSchema } from './schema';
+import { NormalizedAllowedStyles } from './email-css';
 
 export const mentionSuggestKey = new PluginKey('nileMentionSuggest');
 export const slashSuggestKey = new PluginKey('nileSlashSuggest');
@@ -44,6 +45,10 @@ export interface CreateStateOptions
   getForcePlainText?: () => boolean;
   /** Read live: when false, plain-text pastes are never parsed as Markdown. */
   getMarkdownPaste?: () => boolean;
+  /** Read live: when true, HTML source pasted as plain text is parsed as HTML. */
+  getEmailFidelity?: () => boolean;
+  /** Read live: the validated per-app email-fidelity style allowlist. */
+  getAllowedStyles?: () => NormalizedAllowedStyles;
   /** Read live: whether pasted/parsed HTML is sanitized. Defaults to on. */
   getSanitize?: () => boolean;
   /** Typography autocorrect (smart quotes, dashes, (c)…). Defaults to on. */
@@ -103,6 +108,8 @@ export function createEditorState(options: CreateStateOptions = {}): EditorState
       getForcePlainText: options.getForcePlainText,
       getMarkdownPaste: options.getMarkdownPaste,
       getSanitize: options.getSanitize,
+      getEmailFidelity: options.getEmailFidelity,
+      getAllowedStyles: options.getAllowedStyles,
     })
   );
   if (options.getMaxLength) plugins.push(maxLengthPlugin(options.getMaxLength));

package/src/nile-wysiwyg-editor/engine/email-css.ts

@@ -0,0 +1,136 @@
+/** Container tags an app may widen with `allowedStyles`. */
+const EXTENSION_TAGS = new Set(['td', 'th', 'table', 'p', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6']);
+
+/** Properties an app can never allow, whatever its config. */
+export const EXTENSION_DENYLIST = new Set([
+  'position', 'top', 'right', 'bottom', 'left', 'inset', 'inset-block',
+  'inset-block-start', 'inset-block-end', 'inset-inline', 'inset-inline-start',
+  'inset-inline-end', 'z-index', 'content', 'behavior', '-moz-binding',
+  'transform', 'transform-origin', 'transform-box', 'filter', 'backdrop-filter',
+  'perspective', 'perspective-origin', 'display', 'visibility', 'opacity',
+  'pointer-events', 'clip', 'clip-path', 'mask', 'mask-image', 'mask-repeat',
+  'mask-position', 'mask-size', 'animation', 'animation-name', 'transition',
+  'transition-property', 'will-change', 'cursor', 'float', 'clear', 'overflow',
+  'overflow-x', 'overflow-y', 'background', 'background-image',
+  'list-style-image', 'border-image', 'border-image-source',
+]);
+
+/** Properties a built-in fidelity path already handles; kept in sync with `sanitize.ts`. */
+const BUILTIN_HANDLED = new Set([
+  // ALLOWED_STYLES
+  'color', 'background-color', 'font-family', 'font-size', 'font-style',
+  'font-weight', 'text-align', 'text-decoration', 'text-decoration-line',
+  'vertical-align', 'margin-left', 'margin-inline-start', 'list-style-type',
+  'line-height',
+  // CONTAINER_DROP
+  'text-decoration-style', 'text-decoration-color',
+  // CELL_LAYOUT
+  'padding', 'padding-top', 'padding-right', 'padding-bottom', 'padding-left',
+  'width', 'border', 'border-top', 'border-right', 'border-bottom',
+  'border-left', 'border-radius',
+  // TABLE_LAYOUT
+  'max-width', 'margin-right',
+  // BLOCK_LAYOUT
+  'margin', 'margin-top', 'margin-bottom',
+]);
+
+/** Lowercase name (optionally `mso-`), not denylisted and not built in. */
+export function isExtensionPropValid(name: string): boolean {
+  if (!/^(?:mso-)?[a-z]+(?:-[a-z]+)*$/.test(name)) return false;
+  if (EXTENSION_DENYLIST.has(name)) return false;
+  if (BUILTIN_HANDLED.has(name)) return false;
+  return true;
+}
+
+/** Strict value grammar: no functions except numeric colours, no escape characters. */
+export function isExtensionValueValid(value: string): boolean {
+  const v = value.trim();
+  if (!v || v.length > 128) return false;
+  // eslint-disable-next-line no-control-regex
+  if (/[^\x00-\x7f]/.test(v)) return false;
+  if (/\b(?:url|expression|var|calc|attr|env|image-set)\b/i.test(v)) return false;
+  if (/[\\<>{};@]/.test(v)) return false;
+  if (/\/\*/.test(v)) return false;
+  if (/\//.test(v)) return false;
+  if (/!important/i.test(v)) return false;
+  if (/[()]/.test(v)) {
+    if ((v.match(/\(/g) ?? []).length !== 1) return false;
+    const fn = /(?:rgba?|hsla?)\(\s*[\d.]+%?(?:\s*,\s*[\d.]+%?){2,3}\s*\)/i.exec(v);
+    if (!fn || /[()]/.test(v.replace(fn[0], ''))) return false;
+  }
+  return true;
+}
+
+/** tag → set of accepted extension property names. */
+export type NormalizedAllowedStyles = Map<string, Set<string>>;
+
+/** Validated tag → props map; warns once per dropped entry. */
+export function normalizeEmailAllowedStyles(
+  config: Record<string, string[]>
+): NormalizedAllowedStyles {
+  const out: NormalizedAllowedStyles = new Map();
+  if (!config || typeof config !== 'object') return out;
+  for (const [rawTag, rawProps] of Object.entries(config)) {
+    const tag = String(rawTag).toLowerCase();
+    if (!EXTENSION_TAGS.has(tag)) {
+      // eslint-disable-next-line no-console
+      console.warn(
+        `[nile-wysiwyg-editor] allowedStyles: ignoring tag "${rawTag}" (unsupported tag)`
+      );
+      continue;
+    }
+    if (!Array.isArray(rawProps)) continue;
+    const props = out.get(tag) ?? new Set<string>();
+    for (const rawProp of rawProps) {
+      const prop = String(rawProp);
+      if (!isExtensionPropValid(prop)) {
+        const reason = EXTENSION_DENYLIST.has(prop)
+          ? 'denylisted'
+          : BUILTIN_HANDLED.has(prop)
+            ? 'already handled by a built-in'
+            : 'invalid property name';
+        // eslint-disable-next-line no-console
+        console.warn(
+          `[nile-wysiwyg-editor] allowedStyles: ignoring "${tag}: ${rawProp}" (${reason})`
+        );
+        continue;
+      }
+      props.add(prop);
+    }
+    if (props.size) out.set(tag, props);
+  }
+  return out;
+}
+
+/** `"td: letter-spacing; p: text-indent"` → `{ td: ['letter-spacing'], p: ['text-indent'] }`. */
+export function parseAllowedStylesAttr(raw: string): Record<string, string[]> {
+  const out: Record<string, string[]> = {};
+  for (const group of raw.split(';')) {
+    const idx = group.indexOf(':');
+    if (idx === -1) continue;
+    const tag = group.slice(0, idx).trim();
+    if (!tag) continue;
+    const props = group
+      .slice(idx + 1)
+      .split(',')
+      .map(p => p.trim())
+      .filter(Boolean);
+    if (props.length) out[tag] = props;
+  }
+  return out;
+}
+
+/** Re-validates a stored `extraStyle` on write-back, where the per-app allowlist isn't visible. */
+export function sanitizeExtraStyleForWrite(s: string): string {
+  const kept: string[] = [];
+  for (const decl of String(s ?? '').split(';')) {
+    const idx = decl.indexOf(':');
+    if (idx === -1) continue;
+    const name = decl.slice(0, idx).trim().toLowerCase();
+    const value = decl.slice(idx + 1).trim();
+    if (isExtensionPropValid(name) && isExtensionValueValid(value)) {
+      kept.push(`${name}: ${value}`);
+    }
+  }
+  return kept.join('; ');
+}