@handled-ai/design-system 0.20.22 → 0.20.25

package/dist/internal/safe-html.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/internal/safe-html.ts"],"sourcesContent":["const DANGEROUS_BLOCK_TAGS = new Set([\n  \"script\",\n  \"style\",\n  \"iframe\",\n  \"object\",\n  \"embed\",\n  \"svg\",\n  \"math\",\n  \"template\",\n  \"noscript\",\n  \"textarea\",\n  \"select\",\n])\n\nconst ALLOWED_TAGS = new Set([\n  \"a\",\n  \"b\",\n  \"blockquote\",\n  \"br\",\n  \"code\",\n  \"del\",\n  \"div\",\n  \"em\",\n  \"hr\",\n  \"i\",\n  \"img\",\n  \"li\",\n  \"ol\",\n  \"p\",\n  \"pre\",\n  \"s\",\n  \"span\",\n  \"strong\",\n  \"sub\",\n  \"sup\",\n  \"table\",\n  \"tbody\",\n  \"td\",\n  \"th\",\n  \"thead\",\n  \"tr\",\n  \"u\",\n  \"ul\",\n])\n\nconst VOID_TAGS = new Set([\"br\", \"hr\", \"img\"])\nconst SAFE_GLOBAL_ATTRS = new Set([\"aria-label\", \"dir\", \"lang\", \"role\", \"title\"])\nconst SAFE_URL_PROTOCOLS = new Set([\"http:\", \"https:\", \"mailto:\", \"tel:\"])\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n}\n\nfunction escapeAttribute(value: string): string {\n  return escapeHtml(value).replace(/\"/g, \"&quot;\")\n}\n\nfunction safeCodePoint(value: number): string {\n  return Number.isInteger(value) && value >= 0 && value <= 0x10ffff ? String.fromCodePoint(value) : \"\"\n}\n\nfunction decodeHtmlEntities(value: string): string {\n  const namedEntities: Record<string, string> = {\n    amp: \"&\",\n    apos: \"'\",\n    colon: \":\",\n    gt: \">\",\n    lt: \"<\",\n    newline: \"\\n\",\n    quot: '\"',\n    tab: \"\\t\",\n  }\n\n  let decoded = value\n  for (let i = 0; i < 4; i += 1) {\n    const next = decoded\n      .replace(/&#x([0-9a-f]+);?/gi, (_match, hex: string) => {\n        const codePoint = Number.parseInt(hex, 16)\n        return safeCodePoint(codePoint)\n      })\n      .replace(/&#(\\d+);?/g, (_match, decimal: string) => {\n        const codePoint = Number.parseInt(decimal, 10)\n        return safeCodePoint(codePoint)\n      })\n      .replace(/&([a-z]+);/gi, (match, name: string) => namedEntities[name.toLowerCase()] ?? match)\n\n    if (next === decoded) return decoded\n    decoded = next\n  }\n\n  return decoded\n}\n\nfunction isSafeUrl(value: string): boolean {\n  const decoded = decodeHtmlEntities(value).replace(/[\\u0000-\\u001f\\u007f\\s]+/g, \"\").trim()\n  if (!decoded) return false\n  if (decoded.startsWith(\"//\")) return false\n  if (decoded.startsWith(\"#\") || decoded.startsWith(\"/\") || decoded.startsWith(\"./\") || decoded.startsWith(\"../\")) {\n    return true\n  }\n\n  try {\n    return SAFE_URL_PROTOCOLS.has(new URL(decoded, \"https://handled.local\").protocol)\n  } catch {\n    return false\n  }\n}\n\nfunction sanitizeClassName(value: string): string | null {\n  const safeTokens = value\n    .split(/\\s+/)\n    .map((token) => token.trim())\n    .filter((token) => /^[A-Za-z0-9_-]+$/.test(token))\n\n  return safeTokens.length ? safeTokens.join(\" \") : null\n}\n\nfunction sanitizeDimension(value: string): string | null {\n  const trimmed = value.trim()\n  if (/^\\d{1,4}$/.test(trimmed)) return trimmed\n  return null\n}\n\nfunction sanitizeLanguage(value: string): string | null {\n  const trimmed = value.trim()\n  if (/^[A-Za-z]{1,8}(?:-[A-Za-z0-9]{1,8})*$/.test(trimmed)) return trimmed\n  return null\n}\n\nfunction sanitizeDirection(value: string): string | null {\n  const trimmed = value.trim().toLowerCase()\n  return trimmed === \"ltr\" || trimmed === \"rtl\" || trimmed === \"auto\" ? trimmed : null\n}\n\nfunction sanitizeFontSize(value: string): string | null {\n  const trimmed = value.trim().toLowerCase()\n  const match = trimmed.match(/^(\\d+(?:\\.\\d+)?)(px|em|rem|%)$/)\n  if (!match) return null\n\n  const amount = Number.parseFloat(match[1])\n  const unit = match[2]\n  const maxByUnit: Record<string, number> = { px: 72, em: 4, rem: 4, \"%\": 400 }\n  if (!Number.isFinite(amount) || amount <= 0 || amount > maxByUnit[unit]) return null\n  return `${amount}${unit}`\n}\n\nfunction sanitizeStyle(value: string): string | null {\n  const declarations: string[] = []\n\n  for (const rawDeclaration of value.split(\";\")) {\n    const separatorIndex = rawDeclaration.indexOf(\":\")\n    if (separatorIndex === -1) continue\n\n    const property = rawDeclaration.slice(0, separatorIndex).trim().toLowerCase()\n    const rawValue = decodeHtmlEntities(rawDeclaration.slice(separatorIndex + 1)).trim().toLowerCase()\n    if (!property || !rawValue || /url\\s*\\(|expression\\s*\\(/i.test(rawValue)) continue\n\n    if (property === \"vertical-align\" && (rawValue === \"super\" || rawValue === \"sub\")) {\n      declarations.push(`vertical-align: ${rawValue}`)\n      continue\n    }\n\n    if (property === \"font-size\") {\n      const fontSize = sanitizeFontSize(rawValue)\n      if (fontSize) declarations.push(`font-size: ${fontSize}`)\n    }\n  }\n\n  return declarations.length ? declarations.join(\"; \") : null\n}\n\nfunction sanitizeAttribute(tagName: string, name: string, value: string): string | null {\n  const attr = name.toLowerCase()\n\n  if (\n    attr.startsWith(\"on\") ||\n    attr === \"srcdoc\" ||\n    attr === \"formaction\" ||\n    attr === \"xlink:href\" ||\n    attr === \"xmlns\"\n  ) {\n    return null\n  }\n\n  if (attr === \"style\") {\n    const safeStyle = sanitizeStyle(value)\n    return safeStyle ? `style=\"${escapeAttribute(safeStyle)}\"` : null\n  }\n\n  if (attr === \"class\") {\n    const safeClassName = sanitizeClassName(value)\n    return safeClassName ? `class=\"${escapeAttribute(safeClassName)}\"` : null\n  }\n\n  if (attr === \"dir\") {\n    const safeDirection = sanitizeDirection(value)\n    return safeDirection ? `dir=\"${escapeAttribute(safeDirection)}\"` : null\n  }\n\n  if (attr === \"lang\") {\n    const safeLanguage = sanitizeLanguage(value)\n    return safeLanguage ? `lang=\"${escapeAttribute(safeLanguage)}\"` : null\n  }\n\n  if (SAFE_GLOBAL_ATTRS.has(attr) || attr.startsWith(\"aria-\")) {\n    return `${attr}=\"${escapeAttribute(value)}\"`\n  }\n\n  if (tagName === \"a\" && attr === \"href\" && isSafeUrl(value)) {\n    return `href=\"${escapeAttribute(value)}\"`\n  }\n\n  if (tagName === \"img\" && attr === \"src\" && isSafeUrl(value)) {\n    return `src=\"${escapeAttribute(value)}\"`\n  }\n\n  if (tagName === \"img\" && attr === \"alt\") {\n    return `${attr}=\"${escapeAttribute(value)}\"`\n  }\n\n  if (tagName === \"img\" && (attr === \"width\" || attr === \"height\")) {\n    const safeDimension = sanitizeDimension(value)\n    return safeDimension ? `${attr}=\"${escapeAttribute(safeDimension)}\"` : null\n  }\n\n  if ((tagName === \"td\" || tagName === \"th\") && (attr === \"colspan\" || attr === \"rowspan\")) {\n    return `${attr}=\"${escapeAttribute(value)}\"`\n  }\n\n  return null\n}\n\nfunction sanitizeAttributes(tagName: string, rawAttributes = \"\"): string {\n  const attributes: string[] = []\n  const attrPattern = /([A-Za-z_:][-A-Za-z0-9_:.]*)(?:\\s*=\\s*(?:\"([^\"]*)\"|'([^']*)'|([^\\s\"'=<>`]+)))?/g\n  let match: RegExpExecArray | null\n\n  while ((match = attrPattern.exec(rawAttributes)) !== null) {\n    const [, name, doubleQuotedValue, singleQuotedValue, unquotedValue] = match\n    const value = doubleQuotedValue ?? singleQuotedValue ?? unquotedValue ?? \"\"\n    const safeAttribute = sanitizeAttribute(tagName, name, value)\n    if (safeAttribute) attributes.push(safeAttribute)\n  }\n\n  if (tagName === \"a\" && attributes.some((attr) => attr.startsWith(\"href=\"))) {\n    attributes.push('target=\"_blank\"', 'rel=\"noopener noreferrer\"')\n  }\n\n  return attributes.length ? ` ${attributes.join(\" \")}` : \"\"\n}\n\nfunction findTagEnd(html: string, startIndex: number): number {\n  let quote: '\"' | \"'\" | null = null\n\n  for (let i = startIndex + 1; i < html.length; i += 1) {\n    const char = html[i]\n    if (quote) {\n      if (char === quote) quote = null\n      continue\n    }\n\n    if (char === '\"' || char === \"'\") {\n      quote = char\n      continue\n    }\n\n    if (char === \">\") return i\n  }\n\n  return -1\n}\n\nfunction parseTag(rawTag: string): { closing: boolean; name: string; attributes: string } | null {\n  const match = rawTag.match(/^<\\s*(\\/)?\\s*([A-Za-z][A-Za-z0-9:-]*)\\b([\\s\\S]*?)\\/?>$/)\n  if (!match) return null\n\n  return {\n    closing: !!match[1],\n    name: match[2].toLowerCase(),\n    attributes: match[3] ?? \"\",\n  }\n}\n\nfunction findDangerousClose(html: string, tagName: string, fromIndex: number): number {\n  const closePattern = new RegExp(`</\\\\s*${tagName}\\\\s*>`, \"ig\")\n  closePattern.lastIndex = fromIndex\n  const match = closePattern.exec(html)\n  return match ? closePattern.lastIndex : -1\n}\n\n/**\n * Conservative, deterministic sanitizer for user/email supplied HTML rendered by\n * design-system components. It keeps common email formatting tags while removing\n * executable tags, event handlers, unsafe inline styles, and unsafe URLs. This stays\n * dependency-free for the shared package and intentionally favors stripping\n * ambiguous email content over preserving every possible HTML feature.\n */\nexport function sanitizeHtml(html: string): string {\n  let output = \"\"\n  let cursor = 0\n\n  while (cursor < html.length) {\n    const tagStart = html.indexOf(\"<\", cursor)\n    if (tagStart === -1) {\n      output += html.slice(cursor)\n      break\n    }\n\n    output += html.slice(cursor, tagStart)\n\n    if (html.startsWith(\"<!--\", tagStart)) {\n      const commentEnd = html.indexOf(\"-->\", tagStart + 4)\n      cursor = commentEnd === -1 ? html.length : commentEnd + 3\n      continue\n    }\n\n    const tagEnd = findTagEnd(html, tagStart)\n    if (tagEnd === -1) {\n      output += escapeHtml(html.slice(tagStart))\n      break\n    }\n\n    const rawTag = html.slice(tagStart, tagEnd + 1)\n    const parsed = parseTag(rawTag)\n    if (!parsed) {\n      cursor = tagEnd + 1\n      continue\n    }\n\n    if (DANGEROUS_BLOCK_TAGS.has(parsed.name)) {\n      const closeEnd = parsed.closing ? -1 : findDangerousClose(html, parsed.name, tagEnd + 1)\n      cursor = closeEnd === -1 ? tagEnd + 1 : closeEnd\n      continue\n    }\n\n    if (ALLOWED_TAGS.has(parsed.name)) {\n      if (parsed.closing) {\n        if (!VOID_TAGS.has(parsed.name)) output += `</${parsed.name}>`\n      } else {\n        output += `<${parsed.name}${sanitizeAttributes(parsed.name, parsed.attributes)}>`\n      }\n    }\n\n    cursor = tagEnd + 1\n  }\n\n  return output\n}\n\nexport function htmlToTextSnippet(html: string, maxLength = 140): string {\n  return sanitizeHtml(html)\n    .replace(/<[^>]+>/g, \" \")\n    .replace(/\\s+/g, \" \")\n    .trim()\n    .slice(0, maxLength)\n}\n"],"mappings":"AAAA,MAAM,uBAAuB,oBAAI,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,eAAe,oBAAI,IAAI;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,YAAY,oBAAI,IAAI,CAAC,MAAM,MAAM,KAAK,CAAC;AAC7C,MAAM,oBAAoB,oBAAI,IAAI,CAAC,cAAc,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAChF,MAAM,qBAAqB,oBAAI,IAAI,CAAC,SAAS,UAAU,WAAW,MAAM,CAAC;AAEzE,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM;AACzB;AAEA,SAAS,gBAAgB,OAAuB;AAC9C,SAAO,WAAW,KAAK,EAAE,QAAQ,MAAM,QAAQ;AACjD;AAEA,SAAS,cAAc,OAAuB;AAC5C,SAAO,OAAO,UAAU,KAAK,KAAK,SAAS,KAAK,SAAS,UAAW,OAAO,cAAc,KAAK,IAAI;AACpG;AAEA,SAAS,mBAAmB,OAAuB;AACjD,QAAM,gBAAwC;AAAA,IAC5C,KAAK;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,IAAI;AAAA,IACJ,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,MAAM;AAAA,IACN,KAAK;AAAA,EACP;AAEA,MAAI,UAAU;AACd,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG;AAC7B,UAAM,OAAO,QACV,QAAQ,sBAAsB,CAAC,QAAQ,QAAgB;AACtD,YAAM,YAAY,OAAO,SAAS,KAAK,EAAE;AACzC,aAAO,cAAc,SAAS;AAAA,IAChC,CAAC,EACA,QAAQ,cAAc,CAAC,QAAQ,YAAoB;AAClD,YAAM,YAAY,OAAO,SAAS,SAAS,EAAE;AAC7C,aAAO,cAAc,SAAS;AAAA,IAChC,CAAC,EACA,QAAQ,gBAAgB,CAAC,OAAO,SAAc;AAvFrD;AAuFwD,iCAAc,KAAK,YAAY,CAAC,MAAhC,YAAqC;AAAA,KAAK;AAE9F,QAAI,SAAS,QAAS,QAAO;AAC7B,cAAU;AAAA,EACZ;AAEA,SAAO;AACT;AAEA,SAAS,UAAU,OAAwB;AACzC,QAAM,UAAU,mBAAmB,KAAK,EAAE,QAAQ,6BAA6B,EAAE,EAAE,KAAK;AACxF,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,QAAQ,WAAW,IAAI,EAAG,QAAO;AACrC,MAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,IAAI,KAAK,QAAQ,WAAW,KAAK,GAAG;AAC/G,WAAO;AAAA,EACT;AAEA,MAAI;AACF,WAAO,mBAAmB,IAAI,IAAI,IAAI,SAAS,uBAAuB,EAAE,QAAQ;AAAA,EAClF,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,kBAAkB,OAA8B;AACvD,QAAM,aAAa,MAChB,MAAM,KAAK,EACX,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,mBAAmB,KAAK,KAAK,CAAC;AAEnD,SAAO,WAAW,SAAS,WAAW,KAAK,GAAG,IAAI;AACpD;AAEA,SAAS,kBAAkB,OAA8B;AACvD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,YAAY,KAAK,OAAO,EAAG,QAAO;AACtC,SAAO;AACT;AAEA,SAAS,iBAAiB,OAA8B;AACtD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,wCAAwC,KAAK,OAAO,EAAG,QAAO;AAClE,SAAO;AACT;AAEA,SAAS,kBAAkB,OAA8B;AACvD,QAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,SAAO,YAAY,SAAS,YAAY,SAAS,YAAY,SAAS,UAAU;AAClF;AAEA,SAAS,iBAAiB,OAA8B;AACtD,QAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,QAAM,QAAQ,QAAQ,MAAM,gCAAgC;AAC5D,MAAI,CAAC,MAAO,QAAO;AAEnB,QAAM,SAAS,OAAO,WAAW,MAAM,CAAC,CAAC;AACzC,QAAM,OAAO,MAAM,CAAC;AACpB,QAAM,YAAoC,EAAE,IAAI,IAAI,IAAI,GAAG,KAAK,GAAG,KAAK,IAAI;AAC5E,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,KAAK,SAAS,UAAU,IAAI,EAAG,QAAO;AAChF,SAAO,GAAG,MAAM,GAAG,IAAI;AACzB;AAEA,SAAS,cAAc,OAA8B;AACnD,QAAM,eAAyB,CAAC;AAEhC,aAAW,kBAAkB,MAAM,MAAM,GAAG,GAAG;AAC7C,UAAM,iBAAiB,eAAe,QAAQ,GAAG;AACjD,QAAI,mBAAmB,GAAI;AAE3B,UAAM,WAAW,eAAe,MAAM,GAAG,cAAc,EAAE,KAAK,EAAE,YAAY;AAC5E,UAAM,WAAW,mBAAmB,eAAe,MAAM,iBAAiB,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY;AACjG,QAAI,CAAC,YAAY,CAAC,YAAY,4BAA4B,KAAK,QAAQ,EAAG;AAE1E,QAAI,aAAa,qBAAqB,aAAa,WAAW,aAAa,QAAQ;AACjF,mBAAa,KAAK,mBAAmB,QAAQ,EAAE;AAC/C;AAAA,IACF;AAEA,QAAI,aAAa,aAAa;AAC5B,YAAM,WAAW,iBAAiB,QAAQ;AAC1C,UAAI,SAAU,cAAa,KAAK,cAAc,QAAQ,EAAE;AAAA,IAC1D;AAAA,EACF;AAEA,SAAO,aAAa,SAAS,aAAa,KAAK,IAAI,IAAI;AACzD;AAEA,SAAS,kBAAkB,SAAiB,MAAc,OAA8B;AACtF,QAAM,OAAO,KAAK,YAAY;AAE9B,MACE,KAAK,WAAW,IAAI,KACpB,SAAS,YACT,SAAS,gBACT,SAAS,gBACT,SAAS,SACT;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,SAAS;AACpB,UAAM,YAAY,cAAc,KAAK;AACrC,WAAO,YAAY,UAAU,gBAAgB,SAAS,CAAC,MAAM;AAAA,EAC/D;AAEA,MAAI,SAAS,SAAS;AACpB,UAAM,gBAAgB,kBAAkB,KAAK;AAC7C,WAAO,gBAAgB,UAAU,gBAAgB,aAAa,CAAC,MAAM;AAAA,EACvE;AAEA,MAAI,SAAS,OAAO;AAClB,UAAM,gBAAgB,kBAAkB,KAAK;AAC7C,WAAO,gBAAgB,QAAQ,gBAAgB,aAAa,CAAC,MAAM;AAAA,EACrE;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,eAAe,iBAAiB,KAAK;AAC3C,WAAO,eAAe,SAAS,gBAAgB,YAAY,CAAC,MAAM;AAAA,EACpE;AAEA,MAAI,kBAAkB,IAAI,IAAI,KAAK,KAAK,WAAW,OAAO,GAAG;AAC3D,WAAO,GAAG,IAAI,KAAK,gBAAgB,KAAK,CAAC;AAAA,EAC3C;AAEA,MAAI,YAAY,OAAO,SAAS,UAAU,UAAU,KAAK,GAAG;AAC1D,WAAO,SAAS,gBAAgB,KAAK,CAAC;AAAA,EACxC;AAEA,MAAI,YAAY,SAAS,SAAS,SAAS,UAAU,KAAK,GAAG;AAC3D,WAAO,QAAQ,gBAAgB,KAAK,CAAC;AAAA,EACvC;AAEA,MAAI,YAAY,SAAS,SAAS,OAAO;AACvC,WAAO,GAAG,IAAI,KAAK,gBAAgB,KAAK,CAAC;AAAA,EAC3C;AAEA,MAAI,YAAY,UAAU,SAAS,WAAW,SAAS,WAAW;AAChE,UAAM,gBAAgB,kBAAkB,KAAK;AAC7C,WAAO,gBAAgB,GAAG,IAAI,KAAK,gBAAgB,aAAa,CAAC,MAAM;AAAA,EACzE;AAEA,OAAK,YAAY,QAAQ,YAAY,UAAU,SAAS,aAAa,SAAS,YAAY;AACxF,WAAO,GAAG,IAAI,KAAK,gBAAgB,KAAK,CAAC;AAAA,EAC3C;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,SAAiB,gBAAgB,IAAY;AA3OzE;AA4OE,QAAM,aAAuB,CAAC;AAC9B,QAAM,cAAc;AACpB,MAAI;AAEJ,UAAQ,QAAQ,YAAY,KAAK,aAAa,OAAO,MAAM;AACzD,UAAM,CAAC,EAAE,MAAM,mBAAmB,mBAAmB,aAAa,IAAI;AACtE,UAAM,SAAQ,2DAAqB,sBAArB,YAA0C,kBAA1C,YAA2D;AACzE,UAAM,gBAAgB,kBAAkB,SAAS,MAAM,KAAK;AAC5D,QAAI,cAAe,YAAW,KAAK,aAAa;AAAA,EAClD;AAEA,MAAI,YAAY,OAAO,WAAW,KAAK,CAAC,SAAS,KAAK,WAAW,OAAO,CAAC,GAAG;AAC1E,eAAW,KAAK,mBAAmB,2BAA2B;AAAA,EAChE;AAEA,SAAO,WAAW,SAAS,IAAI,WAAW,KAAK,GAAG,CAAC,KAAK;AAC1D;AAEA,SAAS,WAAW,MAAc,YAA4B;AAC5D,MAAI,QAA0B;AAE9B,WAAS,IAAI,aAAa,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACpD,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,OAAO;AACT,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AAEA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR;AAAA,IACF;AAEA,QAAI,SAAS,IAAK,QAAO;AAAA,EAC3B;AAEA,SAAO;AACT;AAEA,SAAS,SAAS,QAA+E;AAnRjG;AAoRE,QAAM,QAAQ,OAAO,MAAM,wDAAwD;AACnF,MAAI,CAAC,MAAO,QAAO;AAEnB,SAAO;AAAA,IACL,SAAS,CAAC,CAAC,MAAM,CAAC;AAAA,IAClB,MAAM,MAAM,CAAC,EAAE,YAAY;AAAA,IAC3B,aAAY,WAAM,CAAC,MAAP,YAAY;AAAA,EAC1B;AACF;AAEA,SAAS,mBAAmB,MAAc,SAAiB,WAA2B;AACpF,QAAM,eAAe,IAAI,OAAO,SAAS,OAAO,SAAS,IAAI;AAC7D,eAAa,YAAY;AACzB,QAAM,QAAQ,aAAa,KAAK,IAAI;AACpC,SAAO,QAAQ,aAAa,YAAY;AAC1C;AASO,SAAS,aAAa,MAAsB;AACjD,MAAI,SAAS;AACb,MAAI,SAAS;AAEb,SAAO,SAAS,KAAK,QAAQ;AAC3B,UAAM,WAAW,KAAK,QAAQ,KAAK,MAAM;AACzC,QAAI,aAAa,IAAI;AACnB,gBAAU,KAAK,MAAM,MAAM;AAC3B;AAAA,IACF;AAEA,cAAU,KAAK,MAAM,QAAQ,QAAQ;AAErC,QAAI,KAAK,WAAW,QAAQ,QAAQ,GAAG;AACrC,YAAM,aAAa,KAAK,QAAQ,OAAO,WAAW,CAAC;AACnD,eAAS,eAAe,KAAK,KAAK,SAAS,aAAa;AACxD;AAAA,IACF;AAEA,UAAM,SAAS,WAAW,MAAM,QAAQ;AACxC,QAAI,WAAW,IAAI;AACjB,gBAAU,WAAW,KAAK,MAAM,QAAQ,CAAC;AACzC;AAAA,IACF;AAEA,UAAM,SAAS,KAAK,MAAM,UAAU,SAAS,CAAC;AAC9C,UAAM,SAAS,SAAS,MAAM;AAC9B,QAAI,CAAC,QAAQ;AACX,eAAS,SAAS;AAClB;AAAA,IACF;AAEA,QAAI,qBAAqB,IAAI,OAAO,IAAI,GAAG;AACzC,YAAM,WAAW,OAAO,UAAU,KAAK,mBAAmB,MAAM,OAAO,MAAM,SAAS,CAAC;AACvF,eAAS,aAAa,KAAK,SAAS,IAAI;AACxC;AAAA,IACF;AAEA,QAAI,aAAa,IAAI,OAAO,IAAI,GAAG;AACjC,UAAI,OAAO,SAAS;AAClB,YAAI,CAAC,UAAU,IAAI,OAAO,IAAI,EAAG,WAAU,KAAK,OAAO,IAAI;AAAA,MAC7D,OAAO;AACL,kBAAU,IAAI,OAAO,IAAI,GAAG,mBAAmB,OAAO,MAAM,OAAO,UAAU,CAAC;AAAA,MAChF;AAAA,IACF;AAEA,aAAS,SAAS;AAAA,EACpB;AAEA,SAAO;AACT;AAEO,SAAS,kBAAkB,MAAc,YAAY,KAAa;AACvE,SAAO,aAAa,IAAI,EACrB,QAAQ,YAAY,GAAG,EACvB,QAAQ,QAAQ,GAAG,EACnB,KAAK,EACL,MAAM,GAAG,SAAS;AACvB;","names":[]}
+{"version":3,"sources":["../../src/internal/safe-html.ts"],"sourcesContent":["const DANGEROUS_BLOCK_TAGS = new Set([\n  \"script\",\n  \"style\",\n  \"iframe\",\n  \"object\",\n  \"embed\",\n  \"svg\",\n  \"math\",\n  \"template\",\n  \"noscript\",\n  \"textarea\",\n  \"select\",\n])\n\nconst ALLOWED_TAGS = new Set([\n  \"a\",\n  \"b\",\n  \"blockquote\",\n  \"br\",\n  \"code\",\n  \"del\",\n  \"div\",\n  \"em\",\n  \"hr\",\n  \"i\",\n  \"img\",\n  \"li\",\n  \"ol\",\n  \"p\",\n  \"pre\",\n  \"s\",\n  \"span\",\n  \"strong\",\n  \"sub\",\n  \"sup\",\n  \"table\",\n  \"tbody\",\n  \"td\",\n  \"th\",\n  \"thead\",\n  \"tr\",\n  \"u\",\n  \"ul\",\n])\n\nconst VOID_TAGS = new Set([\"br\", \"hr\", \"img\"])\nconst SAFE_GLOBAL_ATTRS = new Set([\"aria-label\", \"dir\", \"lang\", \"role\", \"title\"])\nconst SAFE_URL_PROTOCOLS = new Set([\"http:\", \"https:\", \"mailto:\", \"tel:\"])\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n}\n\nfunction escapeAttribute(value: string): string {\n  return escapeHtml(value).replace(/\"/g, \"&quot;\")\n}\n\nfunction safeCodePoint(value: number): string {\n  return Number.isInteger(value) && value >= 0 && value <= 0x10ffff ? String.fromCodePoint(value) : \"\"\n}\n\nfunction decodeHtmlEntities(value: string): string {\n  const namedEntities: Record<string, string> = {\n    amp: \"&\",\n    apos: \"'\",\n    colon: \":\",\n    gt: \">\",\n    lt: \"<\",\n    newline: \"\\n\",\n    quot: '\"',\n    tab: \"\\t\",\n  }\n\n  let decoded = value\n  for (let i = 0; i < 4; i += 1) {\n    const next = decoded\n      .replace(/&#x([0-9a-f]+);?/gi, (_match, hex: string) => {\n        const codePoint = Number.parseInt(hex, 16)\n        return safeCodePoint(codePoint)\n      })\n      .replace(/&#(\\d+);?/g, (_match, decimal: string) => {\n        const codePoint = Number.parseInt(decimal, 10)\n        return safeCodePoint(codePoint)\n      })\n      .replace(/&([a-z]+);/gi, (match, name: string) => namedEntities[name.toLowerCase()] ?? match)\n\n    if (next === decoded) return decoded\n    decoded = next\n  }\n\n  return decoded\n}\n\nfunction isSafeUrl(value: string): boolean {\n  const decoded = decodeHtmlEntities(value).replace(/[\\u0000-\\u001f\\u007f\\s]+/g, \"\").trim()\n  if (!decoded) return false\n  if (decoded.startsWith(\"//\")) return false\n  if (decoded.startsWith(\"#\") || decoded.startsWith(\"/\") || decoded.startsWith(\"./\") || decoded.startsWith(\"../\")) {\n    return true\n  }\n\n  try {\n    return SAFE_URL_PROTOCOLS.has(new URL(decoded, \"https://handled.local\").protocol)\n  } catch {\n    return false\n  }\n}\n\nfunction sanitizeClassName(value: string): string | null {\n  const safeTokens = value\n    .split(/\\s+/)\n    .map((token) => token.trim())\n    .filter((token) => /^[A-Za-z0-9_-]+$/.test(token))\n\n  return safeTokens.length ? safeTokens.join(\" \") : null\n}\n\nfunction sanitizeDimension(value: string): string | null {\n  const trimmed = value.trim()\n  if (/^\\d{1,4}$/.test(trimmed)) return trimmed\n  return null\n}\n\nfunction sanitizeLanguage(value: string): string | null {\n  const trimmed = value.trim()\n  if (/^[A-Za-z]{1,8}(?:-[A-Za-z0-9]{1,8})*$/.test(trimmed)) return trimmed\n  return null\n}\n\nfunction sanitizeDirection(value: string): string | null {\n  const trimmed = value.trim().toLowerCase()\n  return trimmed === \"ltr\" || trimmed === \"rtl\" || trimmed === \"auto\" ? trimmed : null\n}\n\nfunction sanitizeFontSize(value: string): string | null {\n  const trimmed = value.trim().toLowerCase()\n  const match = trimmed.match(/^(\\d+(?:\\.\\d+)?)(px|em|rem|%)$/)\n  if (!match) return null\n\n  const amount = Number.parseFloat(match[1])\n  const unit = match[2]\n  const maxByUnit: Record<string, number> = { px: 72, em: 4, rem: 4, \"%\": 400 }\n  if (!Number.isFinite(amount) || amount <= 0 || amount > maxByUnit[unit]) return null\n  return `${amount}${unit}`\n}\n\n// Presentational properties preserved so email signatures keep their authored\n// Gmail look (serif/italic/gray etc.) when rendered in the conversation panel.\n// Values are validated per-property; anything containing url()/expression()\n// (or any property not listed) is still dropped — these are text-presentation\n// only, no layout escape or resource loading.\nconst COLOR_VALUE = /^(#[0-9a-f]{3,8}|rgba?\\([\\d\\s,./%]+\\)|[a-z]+)$/\nconst LENGTH_BOX_VALUE = /^(-?[\\d.]+(px|em|rem|%)?|auto|0)(\\s+(-?[\\d.]+(px|em|rem|%)?|auto|0)){0,3}$/\nconst SAFE_TEXT_STYLE_PROPS: Record<string, RegExp> = {\n  color: COLOR_VALUE,\n  \"background-color\": COLOR_VALUE,\n  \"font-family\": /^[a-z0-9\\s,'\"-]+$/,\n  \"font-style\": /^(italic|normal|oblique)$/,\n  \"font-weight\": /^(bold|bolder|lighter|normal|[1-9]00)$/,\n  \"font-variant\": /^[a-z\\s-]+$/,\n  \"text-decoration\": /^[a-z\\s-]+$/,\n  \"text-decoration-line\": /^[a-z\\s-]+$/,\n  \"text-transform\": /^(none|capitalize|uppercase|lowercase)$/,\n  \"text-align\": /^(left|right|center|justify)$/,\n  \"letter-spacing\": /^(normal|-?[\\d.]+(px|em|rem)?)$/,\n  \"line-height\": /^(normal|[\\d.]+(px|em|rem|%)?)$/,\n  \"white-space\": /^[a-z-]+$/,\n  margin: LENGTH_BOX_VALUE,\n  \"margin-top\": LENGTH_BOX_VALUE,\n  \"margin-right\": LENGTH_BOX_VALUE,\n  \"margin-bottom\": LENGTH_BOX_VALUE,\n  \"margin-left\": LENGTH_BOX_VALUE,\n  padding: LENGTH_BOX_VALUE,\n  \"padding-top\": LENGTH_BOX_VALUE,\n  \"padding-right\": LENGTH_BOX_VALUE,\n  \"padding-bottom\": LENGTH_BOX_VALUE,\n  \"padding-left\": LENGTH_BOX_VALUE,\n}\n\nfunction sanitizeStyle(value: string): string | null {\n  const declarations: string[] = []\n\n  for (const rawDeclaration of value.split(\";\")) {\n    const separatorIndex = rawDeclaration.indexOf(\":\")\n    if (separatorIndex === -1) continue\n\n    const property = rawDeclaration.slice(0, separatorIndex).trim().toLowerCase()\n    const rawValue = decodeHtmlEntities(rawDeclaration.slice(separatorIndex + 1)).trim().toLowerCase()\n    if (!property || !rawValue || /url\\s*\\(|expression\\s*\\(/i.test(rawValue)) continue\n\n    if (property === \"vertical-align\" && (rawValue === \"super\" || rawValue === \"sub\")) {\n      declarations.push(`vertical-align: ${rawValue}`)\n      continue\n    }\n\n    if (property === \"font-size\") {\n      const fontSize = sanitizeFontSize(rawValue)\n      if (fontSize) declarations.push(`font-size: ${fontSize}`)\n      continue\n    }\n\n    const allowedValue = SAFE_TEXT_STYLE_PROPS[property]\n    if (allowedValue?.test(rawValue)) {\n      declarations.push(`${property}: ${rawValue}`)\n    }\n  }\n\n  return declarations.length ? declarations.join(\"; \") : null\n}\n\nfunction sanitizeAttribute(tagName: string, name: string, value: string): string | null {\n  const attr = name.toLowerCase()\n\n  if (\n    attr.startsWith(\"on\") ||\n    attr === \"srcdoc\" ||\n    attr === \"formaction\" ||\n    attr === \"xlink:href\" ||\n    attr === \"xmlns\"\n  ) {\n    return null\n  }\n\n  if (attr === \"style\") {\n    const safeStyle = sanitizeStyle(value)\n    return safeStyle ? `style=\"${escapeAttribute(safeStyle)}\"` : null\n  }\n\n  if (attr === \"class\") {\n    const safeClassName = sanitizeClassName(value)\n    return safeClassName ? `class=\"${escapeAttribute(safeClassName)}\"` : null\n  }\n\n  if (attr === \"dir\") {\n    const safeDirection = sanitizeDirection(value)\n    return safeDirection ? `dir=\"${escapeAttribute(safeDirection)}\"` : null\n  }\n\n  if (attr === \"lang\") {\n    const safeLanguage = sanitizeLanguage(value)\n    return safeLanguage ? `lang=\"${escapeAttribute(safeLanguage)}\"` : null\n  }\n\n  if (SAFE_GLOBAL_ATTRS.has(attr) || attr.startsWith(\"aria-\")) {\n    return `${attr}=\"${escapeAttribute(value)}\"`\n  }\n\n  if (tagName === \"a\" && attr === \"href\" && isSafeUrl(value)) {\n    return `href=\"${escapeAttribute(value)}\"`\n  }\n\n  if (tagName === \"img\" && attr === \"src\" && isSafeUrl(value)) {\n    return `src=\"${escapeAttribute(value)}\"`\n  }\n\n  if (tagName === \"img\" && attr === \"alt\") {\n    return `${attr}=\"${escapeAttribute(value)}\"`\n  }\n\n  if (tagName === \"img\" && (attr === \"width\" || attr === \"height\")) {\n    const safeDimension = sanitizeDimension(value)\n    return safeDimension ? `${attr}=\"${escapeAttribute(safeDimension)}\"` : null\n  }\n\n  if ((tagName === \"td\" || tagName === \"th\") && (attr === \"colspan\" || attr === \"rowspan\")) {\n    return `${attr}=\"${escapeAttribute(value)}\"`\n  }\n\n  return null\n}\n\nfunction sanitizeAttributes(tagName: string, rawAttributes = \"\"): string {\n  const attributes: string[] = []\n  const attrPattern = /([A-Za-z_:][-A-Za-z0-9_:.]*)(?:\\s*=\\s*(?:\"([^\"]*)\"|'([^']*)'|([^\\s\"'=<>`]+)))?/g\n  let match: RegExpExecArray | null\n\n  while ((match = attrPattern.exec(rawAttributes)) !== null) {\n    const [, name, doubleQuotedValue, singleQuotedValue, unquotedValue] = match\n    const value = doubleQuotedValue ?? singleQuotedValue ?? unquotedValue ?? \"\"\n    const safeAttribute = sanitizeAttribute(tagName, name, value)\n    if (safeAttribute) attributes.push(safeAttribute)\n  }\n\n  if (tagName === \"a\" && attributes.some((attr) => attr.startsWith(\"href=\"))) {\n    attributes.push('target=\"_blank\"', 'rel=\"noopener noreferrer\"')\n  }\n\n  return attributes.length ? ` ${attributes.join(\" \")}` : \"\"\n}\n\nfunction findTagEnd(html: string, startIndex: number): number {\n  let quote: '\"' | \"'\" | null = null\n\n  for (let i = startIndex + 1; i < html.length; i += 1) {\n    const char = html[i]\n    if (quote) {\n      if (char === quote) quote = null\n      continue\n    }\n\n    if (char === '\"' || char === \"'\") {\n      quote = char\n      continue\n    }\n\n    if (char === \">\") return i\n  }\n\n  return -1\n}\n\nfunction parseTag(rawTag: string): { closing: boolean; name: string; attributes: string } | null {\n  const match = rawTag.match(/^<\\s*(\\/)?\\s*([A-Za-z][A-Za-z0-9:-]*)\\b([\\s\\S]*?)\\/?>$/)\n  if (!match) return null\n\n  return {\n    closing: !!match[1],\n    name: match[2].toLowerCase(),\n    attributes: match[3] ?? \"\",\n  }\n}\n\nfunction findDangerousClose(html: string, tagName: string, fromIndex: number): number {\n  const closePattern = new RegExp(`</\\\\s*${tagName}\\\\s*>`, \"ig\")\n  closePattern.lastIndex = fromIndex\n  const match = closePattern.exec(html)\n  return match ? closePattern.lastIndex : -1\n}\n\n/**\n * Conservative, deterministic sanitizer for user/email supplied HTML rendered by\n * design-system components. It keeps common email formatting tags while removing\n * executable tags, event handlers, unsafe inline styles, and unsafe URLs. This stays\n * dependency-free for the shared package and intentionally favors stripping\n * ambiguous email content over preserving every possible HTML feature.\n */\nexport function sanitizeHtml(html: string): string {\n  let output = \"\"\n  let cursor = 0\n\n  while (cursor < html.length) {\n    const tagStart = html.indexOf(\"<\", cursor)\n    if (tagStart === -1) {\n      output += html.slice(cursor)\n      break\n    }\n\n    output += html.slice(cursor, tagStart)\n\n    if (html.startsWith(\"<!--\", tagStart)) {\n      const commentEnd = html.indexOf(\"-->\", tagStart + 4)\n      cursor = commentEnd === -1 ? html.length : commentEnd + 3\n      continue\n    }\n\n    const tagEnd = findTagEnd(html, tagStart)\n    if (tagEnd === -1) {\n      output += escapeHtml(html.slice(tagStart))\n      break\n    }\n\n    const rawTag = html.slice(tagStart, tagEnd + 1)\n    const parsed = parseTag(rawTag)\n    if (!parsed) {\n      cursor = tagEnd + 1\n      continue\n    }\n\n    if (DANGEROUS_BLOCK_TAGS.has(parsed.name)) {\n      const closeEnd = parsed.closing ? -1 : findDangerousClose(html, parsed.name, tagEnd + 1)\n      cursor = closeEnd === -1 ? tagEnd + 1 : closeEnd\n      continue\n    }\n\n    if (ALLOWED_TAGS.has(parsed.name)) {\n      if (parsed.closing) {\n        if (!VOID_TAGS.has(parsed.name)) output += `</${parsed.name}>`\n      } else {\n        output += `<${parsed.name}${sanitizeAttributes(parsed.name, parsed.attributes)}>`\n      }\n    }\n\n    cursor = tagEnd + 1\n  }\n\n  return output\n}\n\nexport function htmlToTextSnippet(html: string, maxLength = 140): string {\n  return sanitizeHtml(html)\n    .replace(/<[^>]+>/g, \" \")\n    .replace(/\\s+/g, \" \")\n    .trim()\n    .slice(0, maxLength)\n}\n"],"mappings":"AAAA,MAAM,uBAAuB,oBAAI,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,eAAe,oBAAI,IAAI;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,YAAY,oBAAI,IAAI,CAAC,MAAM,MAAM,KAAK,CAAC;AAC7C,MAAM,oBAAoB,oBAAI,IAAI,CAAC,cAAc,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAChF,MAAM,qBAAqB,oBAAI,IAAI,CAAC,SAAS,UAAU,WAAW,MAAM,CAAC;AAEzE,SAAS,WAAW,OAAuB;AACzC,SAAO,MACJ,QAAQ,MAAM,OAAO,EACrB,QAAQ,MAAM,MAAM,EACpB,QAAQ,MAAM,MAAM;AACzB;AAEA,SAAS,gBAAgB,OAAuB;AAC9C,SAAO,WAAW,KAAK,EAAE,QAAQ,MAAM,QAAQ;AACjD;AAEA,SAAS,cAAc,OAAuB;AAC5C,SAAO,OAAO,UAAU,KAAK,KAAK,SAAS,KAAK,SAAS,UAAW,OAAO,cAAc,KAAK,IAAI;AACpG;AAEA,SAAS,mBAAmB,OAAuB;AACjD,QAAM,gBAAwC;AAAA,IAC5C,KAAK;AAAA,IACL,MAAM;AAAA,IACN,OAAO;AAAA,IACP,IAAI;AAAA,IACJ,IAAI;AAAA,IACJ,SAAS;AAAA,IACT,MAAM;AAAA,IACN,KAAK;AAAA,EACP;AAEA,MAAI,UAAU;AACd,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG;AAC7B,UAAM,OAAO,QACV,QAAQ,sBAAsB,CAAC,QAAQ,QAAgB;AACtD,YAAM,YAAY,OAAO,SAAS,KAAK,EAAE;AACzC,aAAO,cAAc,SAAS;AAAA,IAChC,CAAC,EACA,QAAQ,cAAc,CAAC,QAAQ,YAAoB;AAClD,YAAM,YAAY,OAAO,SAAS,SAAS,EAAE;AAC7C,aAAO,cAAc,SAAS;AAAA,IAChC,CAAC,EACA,QAAQ,gBAAgB,CAAC,OAAO,SAAc;AAvFrD;AAuFwD,iCAAc,KAAK,YAAY,CAAC,MAAhC,YAAqC;AAAA,KAAK;AAE9F,QAAI,SAAS,QAAS,QAAO;AAC7B,cAAU;AAAA,EACZ;AAEA,SAAO;AACT;AAEA,SAAS,UAAU,OAAwB;AACzC,QAAM,UAAU,mBAAmB,KAAK,EAAE,QAAQ,6BAA6B,EAAE,EAAE,KAAK;AACxF,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,QAAQ,WAAW,IAAI,EAAG,QAAO;AACrC,MAAI,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,GAAG,KAAK,QAAQ,WAAW,IAAI,KAAK,QAAQ,WAAW,KAAK,GAAG;AAC/G,WAAO;AAAA,EACT;AAEA,MAAI;AACF,WAAO,mBAAmB,IAAI,IAAI,IAAI,SAAS,uBAAuB,EAAE,QAAQ;AAAA,EAClF,SAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,kBAAkB,OAA8B;AACvD,QAAM,aAAa,MAChB,MAAM,KAAK,EACX,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,CAAC,UAAU,mBAAmB,KAAK,KAAK,CAAC;AAEnD,SAAO,WAAW,SAAS,WAAW,KAAK,GAAG,IAAI;AACpD;AAEA,SAAS,kBAAkB,OAA8B;AACvD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,YAAY,KAAK,OAAO,EAAG,QAAO;AACtC,SAAO;AACT;AAEA,SAAS,iBAAiB,OAA8B;AACtD,QAAM,UAAU,MAAM,KAAK;AAC3B,MAAI,wCAAwC,KAAK,OAAO,EAAG,QAAO;AAClE,SAAO;AACT;AAEA,SAAS,kBAAkB,OAA8B;AACvD,QAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,SAAO,YAAY,SAAS,YAAY,SAAS,YAAY,SAAS,UAAU;AAClF;AAEA,SAAS,iBAAiB,OAA8B;AACtD,QAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AACzC,QAAM,QAAQ,QAAQ,MAAM,gCAAgC;AAC5D,MAAI,CAAC,MAAO,QAAO;AAEnB,QAAM,SAAS,OAAO,WAAW,MAAM,CAAC,CAAC;AACzC,QAAM,OAAO,MAAM,CAAC;AACpB,QAAM,YAAoC,EAAE,IAAI,IAAI,IAAI,GAAG,KAAK,GAAG,KAAK,IAAI;AAC5E,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,KAAK,SAAS,UAAU,IAAI,EAAG,QAAO;AAChF,SAAO,GAAG,MAAM,GAAG,IAAI;AACzB;AAOA,MAAM,cAAc;AACpB,MAAM,mBAAmB;AACzB,MAAM,wBAAgD;AAAA,EACpD,OAAO;AAAA,EACP,oBAAoB;AAAA,EACpB,eAAe;AAAA,EACf,cAAc;AAAA,EACd,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,mBAAmB;AAAA,EACnB,wBAAwB;AAAA,EACxB,kBAAkB;AAAA,EAClB,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,eAAe;AAAA,EACf,eAAe;AAAA,EACf,QAAQ;AAAA,EACR,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,SAAS;AAAA,EACT,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,kBAAkB;AAAA,EAClB,gBAAgB;AAClB;AAEA,SAAS,cAAc,OAA8B;AACnD,QAAM,eAAyB,CAAC;AAEhC,aAAW,kBAAkB,MAAM,MAAM,GAAG,GAAG;AAC7C,UAAM,iBAAiB,eAAe,QAAQ,GAAG;AACjD,QAAI,mBAAmB,GAAI;AAE3B,UAAM,WAAW,eAAe,MAAM,GAAG,cAAc,EAAE,KAAK,EAAE,YAAY;AAC5E,UAAM,WAAW,mBAAmB,eAAe,MAAM,iBAAiB,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY;AACjG,QAAI,CAAC,YAAY,CAAC,YAAY,4BAA4B,KAAK,QAAQ,EAAG;AAE1E,QAAI,aAAa,qBAAqB,aAAa,WAAW,aAAa,QAAQ;AACjF,mBAAa,KAAK,mBAAmB,QAAQ,EAAE;AAC/C;AAAA,IACF;AAEA,QAAI,aAAa,aAAa;AAC5B,YAAM,WAAW,iBAAiB,QAAQ;AAC1C,UAAI,SAAU,cAAa,KAAK,cAAc,QAAQ,EAAE;AACxD;AAAA,IACF;AAEA,UAAM,eAAe,sBAAsB,QAAQ;AACnD,QAAI,6CAAc,KAAK,WAAW;AAChC,mBAAa,KAAK,GAAG,QAAQ,KAAK,QAAQ,EAAE;AAAA,IAC9C;AAAA,EACF;AAEA,SAAO,aAAa,SAAS,aAAa,KAAK,IAAI,IAAI;AACzD;AAEA,SAAS,kBAAkB,SAAiB,MAAc,OAA8B;AACtF,QAAM,OAAO,KAAK,YAAY;AAE9B,MACE,KAAK,WAAW,IAAI,KACpB,SAAS,YACT,SAAS,gBACT,SAAS,gBACT,SAAS,SACT;AACA,WAAO;AAAA,EACT;AAEA,MAAI,SAAS,SAAS;AACpB,UAAM,YAAY,cAAc,KAAK;AACrC,WAAO,YAAY,UAAU,gBAAgB,SAAS,CAAC,MAAM;AAAA,EAC/D;AAEA,MAAI,SAAS,SAAS;AACpB,UAAM,gBAAgB,kBAAkB,KAAK;AAC7C,WAAO,gBAAgB,UAAU,gBAAgB,aAAa,CAAC,MAAM;AAAA,EACvE;AAEA,MAAI,SAAS,OAAO;AAClB,UAAM,gBAAgB,kBAAkB,KAAK;AAC7C,WAAO,gBAAgB,QAAQ,gBAAgB,aAAa,CAAC,MAAM;AAAA,EACrE;AAEA,MAAI,SAAS,QAAQ;AACnB,UAAM,eAAe,iBAAiB,KAAK;AAC3C,WAAO,eAAe,SAAS,gBAAgB,YAAY,CAAC,MAAM;AAAA,EACpE;AAEA,MAAI,kBAAkB,IAAI,IAAI,KAAK,KAAK,WAAW,OAAO,GAAG;AAC3D,WAAO,GAAG,IAAI,KAAK,gBAAgB,KAAK,CAAC;AAAA,EAC3C;AAEA,MAAI,YAAY,OAAO,SAAS,UAAU,UAAU,KAAK,GAAG;AAC1D,WAAO,SAAS,gBAAgB,KAAK,CAAC;AAAA,EACxC;AAEA,MAAI,YAAY,SAAS,SAAS,SAAS,UAAU,KAAK,GAAG;AAC3D,WAAO,QAAQ,gBAAgB,KAAK,CAAC;AAAA,EACvC;AAEA,MAAI,YAAY,SAAS,SAAS,OAAO;AACvC,WAAO,GAAG,IAAI,KAAK,gBAAgB,KAAK,CAAC;AAAA,EAC3C;AAEA,MAAI,YAAY,UAAU,SAAS,WAAW,SAAS,WAAW;AAChE,UAAM,gBAAgB,kBAAkB,KAAK;AAC7C,WAAO,gBAAgB,GAAG,IAAI,KAAK,gBAAgB,aAAa,CAAC,MAAM;AAAA,EACzE;AAEA,OAAK,YAAY,QAAQ,YAAY,UAAU,SAAS,aAAa,SAAS,YAAY;AACxF,WAAO,GAAG,IAAI,KAAK,gBAAgB,KAAK,CAAC;AAAA,EAC3C;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,SAAiB,gBAAgB,IAAY;AAlRzE;AAmRE,QAAM,aAAuB,CAAC;AAC9B,QAAM,cAAc;AACpB,MAAI;AAEJ,UAAQ,QAAQ,YAAY,KAAK,aAAa,OAAO,MAAM;AACzD,UAAM,CAAC,EAAE,MAAM,mBAAmB,mBAAmB,aAAa,IAAI;AACtE,UAAM,SAAQ,2DAAqB,sBAArB,YAA0C,kBAA1C,YAA2D;AACzE,UAAM,gBAAgB,kBAAkB,SAAS,MAAM,KAAK;AAC5D,QAAI,cAAe,YAAW,KAAK,aAAa;AAAA,EAClD;AAEA,MAAI,YAAY,OAAO,WAAW,KAAK,CAAC,SAAS,KAAK,WAAW,OAAO,CAAC,GAAG;AAC1E,eAAW,KAAK,mBAAmB,2BAA2B;AAAA,EAChE;AAEA,SAAO,WAAW,SAAS,IAAI,WAAW,KAAK,GAAG,CAAC,KAAK;AAC1D;AAEA,SAAS,WAAW,MAAc,YAA4B;AAC5D,MAAI,QAA0B;AAE9B,WAAS,IAAI,aAAa,GAAG,IAAI,KAAK,QAAQ,KAAK,GAAG;AACpD,UAAM,OAAO,KAAK,CAAC;AACnB,QAAI,OAAO;AACT,UAAI,SAAS,MAAO,SAAQ;AAC5B;AAAA,IACF;AAEA,QAAI,SAAS,OAAO,SAAS,KAAK;AAChC,cAAQ;AACR;AAAA,IACF;AAEA,QAAI,SAAS,IAAK,QAAO;AAAA,EAC3B;AAEA,SAAO;AACT;AAEA,SAAS,SAAS,QAA+E;AA1TjG;AA2TE,QAAM,QAAQ,OAAO,MAAM,wDAAwD;AACnF,MAAI,CAAC,MAAO,QAAO;AAEnB,SAAO;AAAA,IACL,SAAS,CAAC,CAAC,MAAM,CAAC;AAAA,IAClB,MAAM,MAAM,CAAC,EAAE,YAAY;AAAA,IAC3B,aAAY,WAAM,CAAC,MAAP,YAAY;AAAA,EAC1B;AACF;AAEA,SAAS,mBAAmB,MAAc,SAAiB,WAA2B;AACpF,QAAM,eAAe,IAAI,OAAO,SAAS,OAAO,SAAS,IAAI;AAC7D,eAAa,YAAY;AACzB,QAAM,QAAQ,aAAa,KAAK,IAAI;AACpC,SAAO,QAAQ,aAAa,YAAY;AAC1C;AASO,SAAS,aAAa,MAAsB;AACjD,MAAI,SAAS;AACb,MAAI,SAAS;AAEb,SAAO,SAAS,KAAK,QAAQ;AAC3B,UAAM,WAAW,KAAK,QAAQ,KAAK,MAAM;AACzC,QAAI,aAAa,IAAI;AACnB,gBAAU,KAAK,MAAM,MAAM;AAC3B;AAAA,IACF;AAEA,cAAU,KAAK,MAAM,QAAQ,QAAQ;AAErC,QAAI,KAAK,WAAW,QAAQ,QAAQ,GAAG;AACrC,YAAM,aAAa,KAAK,QAAQ,OAAO,WAAW,CAAC;AACnD,eAAS,eAAe,KAAK,KAAK,SAAS,aAAa;AACxD;AAAA,IACF;AAEA,UAAM,SAAS,WAAW,MAAM,QAAQ;AACxC,QAAI,WAAW,IAAI;AACjB,gBAAU,WAAW,KAAK,MAAM,QAAQ,CAAC;AACzC;AAAA,IACF;AAEA,UAAM,SAAS,KAAK,MAAM,UAAU,SAAS,CAAC;AAC9C,UAAM,SAAS,SAAS,MAAM;AAC9B,QAAI,CAAC,QAAQ;AACX,eAAS,SAAS;AAClB;AAAA,IACF;AAEA,QAAI,qBAAqB,IAAI,OAAO,IAAI,GAAG;AACzC,YAAM,WAAW,OAAO,UAAU,KAAK,mBAAmB,MAAM,OAAO,MAAM,SAAS,CAAC;AACvF,eAAS,aAAa,KAAK,SAAS,IAAI;AACxC;AAAA,IACF;AAEA,QAAI,aAAa,IAAI,OAAO,IAAI,GAAG;AACjC,UAAI,OAAO,SAAS;AAClB,YAAI,CAAC,UAAU,IAAI,OAAO,IAAI,EAAG,WAAU,KAAK,OAAO,IAAI;AAAA,MAC7D,OAAO;AACL,kBAAU,IAAI,OAAO,IAAI,GAAG,mBAAmB,OAAO,MAAM,OAAO,UAAU,CAAC;AAAA,MAChF;AAAA,IACF;AAEA,aAAS,SAAS;AAAA,EACpB;AAEA,SAAO;AACT;AAEO,SAAS,kBAAkB,MAAc,YAAY,KAAa;AACvE,SAAO,aAAa,IAAI,EACrB,QAAQ,YAAY,GAAG,EACvB,QAAQ,QAAQ,GAAG,EACnB,KAAK,EACL,MAAM,GAAG,SAAS;AACvB;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@handled-ai/design-system",
-  "version": "0.20.22",
+  "version": "0.20.25",
   "description": "Handled UI component library (shadcn-style, New York)",
   "type": "module",
   "packageManager": "pnpm@9.12.0",

package/src/components/__tests__/conversation-panel.test.tsx

@@ -366,11 +366,50 @@ describe("ConversationPanel", () => {
     fireEvent.click(screen.getByTitle("Show quoted text"));
     const quoted = container.querySelector("blockquote.gmail_quote")!;
     expect(quoted).not.toBeNull();
-    expect(quoted.outerHTML).not.toContain("style=");
+    // Presentational color survives sanitization (signature-fidelity
+    // allowlist); the unsafe data: URL is still gone.
+    expect(quoted.outerHTML).toContain('style="color: red"');
     expect(quoted.outerHTML).not.toContain("data:text/html");
   });
 
 
+  it("renders an explicit signatureHtml collapsed behind the details toggle, preserving authored styles", () => {
+    const sigThread = thread({
+      messages: [
+        {
+          id: "m1",
+          direction: "outbound",
+          from: me,
+          to: priya,
+          date: "Today",
+          receipt: { kind: "draft", label: "Draft" },
+          bodyHtml: "<p>Hi Priya,</p><p>Want to see if the math works?</p>",
+          signatureHtml:
+            '<div class="gmail_signature"><p style="font-style: italic; font-family: \'pt serif\', serif; color: rgb(102, 102, 102)">2261 Market Street, Suite 86807</p><p>Mercury is a fintech company, not an FDIC-insured bank.</p></div>',
+        },
+      ],
+    });
+
+    const { container } = render(<ConversationPanel threads={[sigThread]} me={me} />);
+    const message = container.querySelector('[data-slot="conv-message"]')!;
+
+    // Signature is collapsed by default — body visible, signature not.
+    expect(message.querySelector('[data-slot="conv-message-body"]')?.textContent).toContain("Want to see if the math works?");
+    expect(message.textContent).not.toContain("2261 Market Street");
+    expect(message.querySelector('[data-slot="email-body-details"]')).toBeNull();
+
+    fireEvent.click(screen.getByRole("button", { name: "•••" }));
+
+    const details = message.querySelector('[data-slot="email-body-details"]')!;
+    expect(details.textContent).toContain("2261 Market Street, Suite 86807");
+    expect(details.textContent).toContain("FDIC-insured");
+    // Authored Gmail-look styles survive into the rendered signature.
+    const styled = details.querySelector("p[style]")!;
+    expect(styled.getAttribute("style")).toContain("font-style: italic");
+    expect(styled.getAttribute("style")).toContain("font-family: 'pt serif', serif");
+    expect(styled.getAttribute("style")).toContain("color: rgb(102, 102, 102)");
+  });
+
   it("collapses trailing HTML signature and disclaimer behind a details toggle", () => {
     const htmlThread = thread({
       messages: [

package/src/components/__tests__/email-display-helpers.test.ts

@@ -48,11 +48,21 @@ describe("email display helpers", () => {
   })
 
   it("formats timestamps deterministically and omits invalid dates", () => {
-    expect(formatEmailTimestamp("2026-06-08T20:45:00.000Z")).toBe("Jun 8, 2026, 8:45 PM")
+    // Explicit timeZone keeps assertions deterministic across runner TZs.
+    expect(formatEmailTimestamp("2026-06-08T20:45:00.000Z", { timeZone: "UTC" })).toBe("Jun 8, 2026, 8:45 PM")
+    expect(formatEmailTimestamp("2026-06-08T20:45:00.000Z", { timeZone: "America/New_York" })).toBe("Jun 8, 2026, 4:45 PM")
     expect(formatEmailTimestamp("not-a-date")).toBeNull()
     expect(formatEmailTimestamp(null)).toBeNull()
   })
 
+  it("defaults to the runtime's local timezone (viewer-local in the browser)", () => {
+    const value = "2026-06-08T20:45:00.000Z"
+    const expected = new Intl.DateTimeFormat("en-US", {
+      month: "short", day: "numeric", year: "numeric", hour: "numeric", minute: "2-digit",
+    }).format(new Date(value))
+    expect(formatEmailTimestamp(value)).toBe(expected)
+  })
+
   it("splits HTML signatures, Gmail quotes, and disclaimers while preserving formatting", () => {
     const disclaimerSplit = splitEmailHtmlForDisplay("<p>Please review.</p><p>Confidentiality Notice: this message is private.</p>")
     expect(disclaimerSplit.bodyHtml).toContain("Please review")
@@ -69,6 +79,40 @@ describe("email display helpers", () => {
     expect(split.detailsHtml).toContain('class="gmail_quote"')
   })
 
+  it("keeps blank-line markers when the footer split rebuilds the body (Gmail wire format)", () => {
+    // The Gmail wire format marks blank lines as <div><br></div>; the rebuilt
+    // body must keep them or paragraph spacing collapses in preview/history.
+    const wire =
+      '<div style="margin:0; line-height:1.4;">Hey Clint,</div>' +
+      '<div style="margin:0; line-height:1.4;"><br /></div>' +
+      '<div style="margin:0; line-height:1.4;">Admin access roles come with overhead.</div>' +
+      '<div style="margin:0; line-height:1.4;"><br /></div>' +
+      '<div style="margin:0; line-height:1.4;">Best,</div>' +
+      '<div style="margin:0; line-height:1.4;">Cory</div>'
+
+    const split = splitEmailHtmlForDisplay(wire)
+
+    // The signoff split fires ("Best," + name moves to details)…
+    expect(split.detailsHtml).toContain("Best,")
+    expect(split.bodyHtml).not.toContain("Best,")
+    // …and the body keeps both blank-line markers between paragraphs.
+    expect(split.bodyHtml.match(/<br\s*\/?>/g)?.length).toBe(2)
+    expect(split.bodyHtml).toContain("Hey Clint,")
+    expect(split.bodyHtml).toContain("Admin access roles come with overhead.")
+  })
+
+  it("keeps interior blank lines made of consecutive <br>s inside one block", () => {
+    const split = splitEmailHtmlForDisplay(
+      "<div>First paragraph.<br /><br />Second paragraph.</div>" +
+        "<div><br /></div><div>Thanks,</div><div>Jane</div>",
+    )
+
+    expect(split.detailsHtml).toContain("Thanks,")
+    // One blank from the double <br>, one from the standalone marker div that
+    // precedes the signoff boundary.
+    expect(split.bodyHtml.match(/<br\s*\/?>/g)?.length).toBe(2)
+  })
+
   it("splits plain text signatures while preserving line boundaries", () => {
     const split = splitEmailTextForDisplay("Hi Dana,\n\nLooks good.\n\n-- \nJane Doe\nVP Sales\njane@example.com")
 

package/src/components/__tests__/timeline-activity.test.tsx

@@ -404,7 +404,13 @@ describe("TimelineActivity", () => {
 
     fireEvent.click(screen.getByRole("button", { name: /Expand/i }))
 
-    expect(screen.getByText("Jun 8, 2026, 3:30 PM")).toBeTruthy()
+    // Post-hydration the card shows the viewer's LOCAL timezone (the UTC
+    // rendering only exists for the SSR/hydration paint). Mirror the local
+    // formatting so the assertion is deterministic across runner timezones.
+    const expectedLocalDate = new Intl.DateTimeFormat("en-US", {
+      month: "short", day: "numeric", year: "numeric", hour: "numeric", minute: "2-digit",
+    }).format(new Date("2026-06-08T15:30:00.000Z"))
+    expect(screen.getByText(expectedLocalDate)).toBeTruthy()
     expect(screen.getByText(/Jane & Team <jane@example.com>/)).toBeTruthy()
     expect(container.querySelector('[data-slot="email-body-details"]')).toBeNull()
     expect(screen.getByRole("button", { name: "•••" })).toBeTruthy()

package/src/components/conversation-panel.tsx

@@ -99,6 +99,15 @@ export interface ConvMessage {
   receipt?: { kind: "new" | "read" | "opened" | "sent" | "draft"; label: string }
   /** HTML body (preferred). Sanitized by the component before rendering. */
   bodyHtml?: string
+  /**
+   * Pre-split signature HTML for this message, sanitized server-side by the
+   * sender's signature pipeline (which preserves the authored Gmail look —
+   * fonts, colors, logos). When present it renders inside the collapsed
+   * details section ("•••" toggle) instead of relying on the heuristic footer
+   * split of `bodyHtml`, so long signatures never expand the thread by
+   * default.
+   */
+  signatureHtml?: string | null
   /** Plain-text fallback when `bodyHtml` is absent. */
   body?: string
   /** Quoted prior message, collapsed behind a toggle. Sanitized before rendering. */
@@ -470,6 +479,7 @@ function MessageView({
           <EmailBody
             html={message.bodyHtml}
             text={message.body}
+            detailsHtml={message.signatureHtml ?? undefined}
             variant="history"
             collapseDetails={true}
             className="text-sm"

package/src/components/email-display-helpers.ts

@@ -214,18 +214,25 @@ export function formatAddressList(input?: string | string[] | null): string {
     .join(", ")
 }
 
-export function formatEmailTimestamp(value?: string | Date | null): string | null {
+export function formatEmailTimestamp(
+  value?: string | Date | null,
+  opts?: { timeZone?: string },
+): string | null {
   if (!value) return null
   const date = value instanceof Date ? value : new Date(value)
   if (Number.isNaN(date.getTime())) return null
 
+  // Default = the runtime's local timezone (the viewer's, in the browser).
+  // Callers that render during SSR/hydration pass timeZone "UTC" for the
+  // first paint so server and client HTML match, then re-render local after
+  // mount (see useHydrated in timeline-activity).
   return new Intl.DateTimeFormat("en-US", {
     month: "short",
     day: "numeric",
     year: "numeric",
     hour: "numeric",
     minute: "2-digit",
-    timeZone: "UTC",
+    ...(opts?.timeZone ? { timeZone: opts.timeZone } : {}),
   }).format(date)
 }
 
@@ -302,6 +309,18 @@ function makeHtmlSegment(html: string): MessageSegment | null {
   return { html, visibleText }
 }
 
+// Blank-line segments carry no visible text, so they never participate in
+// footer-boundary detection — but their html must survive the rebuild, or a
+// split body loses every intentional blank line between paragraphs (the
+// Gmail wire format marks them as <div><br></div>).
+function makeBlankLineSegment(html: string): MessageSegment {
+  return { html, visibleText: "" }
+}
+
+function isBlankLineHtml(html: string): boolean {
+  return Boolean(html.trim()) && !htmlToVisibleText(html) && !/<(?:img|hr)\b/i.test(html)
+}
+
 function splitInlineNodes(nodes: readonly Node[], wrapper?: Element): MessageSegment[] {
   const containsBr = hasDirectBr(nodes)
   const chunks: string[][] = [[]]
@@ -315,14 +334,22 @@ function splitInlineNodes(nodes: readonly Node[], wrapper?: Element): MessageSeg
     chunks[chunks.length - 1]?.push(serializeNode(node))
   })
 
-  return chunks
-    .map((chunk) => chunk.join(""))
-    .map((innerHtml) => {
-      if (wrapper) return wrapHtmlLike(wrapper, innerHtml)
-      return containsBr ? `<div>${innerHtml}</div>` : innerHtml
-    })
-    .map(makeHtmlSegment)
-    .filter((segment): segment is MessageSegment => Boolean(segment))
+  const rendered = chunks.map((chunk) => chunk.join(""))
+  const segments: MessageSegment[] = []
+  rendered.forEach((innerHtml, index) => {
+    const html = wrapper ? wrapHtmlLike(wrapper, innerHtml) : containsBr ? `<div>${innerHtml}</div>` : innerHtml
+    const segment = makeHtmlSegment(html)
+    if (segment) {
+      segments.push(segment)
+      return
+    }
+    // An interior empty chunk sits between two <br>s: an intentional blank
+    // line. Leading/trailing empties stay dropped, as before.
+    if (containsBr && index > 0 && index < rendered.length - 1) {
+      segments.push(makeBlankLineSegment(wrapper ? wrapHtmlLike(wrapper, "<br>") : "<div><br></div>"))
+    }
+  })
+  return segments
 }
 
 function splitElementSegment(element: Element): MessageSegment[] {
@@ -333,6 +360,12 @@ function splitElementSegment(element: Element): MessageSegment[] {
     return segment ? [segment] : []
   }
 
+  // A block with no visible content (e.g. <div><br></div>, <p></p>) is a
+  // blank-line marker — keep it whole instead of splitting/dropping it.
+  if (isBlankLineHtml(element.outerHTML)) {
+    return [makeBlankLineSegment(element.outerHTML)]
+  }
+
   if (tagName === "div" && hasDirectBlockChild(element)) {
     const childSegments = splitHtmlNodes(Array.from(element.childNodes))
     return childSegments.length ? childSegments : ([makeHtmlSegment(element.outerHTML)].filter(Boolean) as MessageSegment[])
@@ -399,9 +432,15 @@ function splitHtmlSegmentsFallback(html: string): MessageSegment[] {
   const pushInline = (inlineHtml: string) => {
     const chunks = inlineHtml.split(BR_TAG_RE)
     const hadBr = chunks.length > 1
-    chunks.forEach((chunk) => {
+    chunks.forEach((chunk, index) => {
       const segment = makeHtmlSegment(hadBr ? `<div>${chunk}</div>` : chunk)
-      if (segment) segments.push(segment)
+      if (segment) {
+        segments.push(segment)
+        return
+      }
+      if (hadBr && index > 0 && index < chunks.length - 1) {
+        segments.push(makeBlankLineSegment("<div><br /></div>"))
+      }
     })
   }
 
@@ -422,13 +461,22 @@ function splitHtmlSegmentsFallback(html: string): MessageSegment[] {
     const segmentEnd = findMatchingCloseTag(html, tagName, openTagEnd)
     const blockHtml = html.slice(tagStart, segmentEnd)
 
-    if (SPLITTABLE_BLOCK_TAGS.has(tagName) && BR_TAG_RE.test(blockHtml)) {
+    if (isBlankLineHtml(blockHtml)) {
+      segments.push(makeBlankLineSegment(blockHtml))
+    } else if (SPLITTABLE_BLOCK_TAGS.has(tagName) && BR_TAG_RE.test(blockHtml)) {
       const openTag = rawOpen
       const closeTag = `</${tagName}>`
       const inner = blockHtml.replace(new RegExp(`^${rawOpen.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}`, "i"), "").replace(new RegExp(`${closeTag}$`, "i"), "")
-      inner.split(BR_TAG_RE).forEach((chunk) => {
+      const innerChunks = inner.split(BR_TAG_RE)
+      innerChunks.forEach((chunk, index) => {
         const segment = makeHtmlSegment(`${openTag}${chunk}${closeTag}`)
-        if (segment) segments.push(segment)
+        if (segment) {
+          segments.push(segment)
+          return
+        }
+        if (index > 0 && index < innerChunks.length - 1) {
+          segments.push(makeBlankLineSegment(`${openTag}<br />${closeTag}`))
+        }
       })
     } else {
       const segment = makeHtmlSegment(blockHtml)

package/src/components/timeline-activity.tsx

@@ -392,9 +392,29 @@ function cleanGongText(value?: string | null): string {
   return decodeEmailDisplayText(value).trim()
 }
 
-function getTimelineGongCallDisplay(gongCall: TimelineGongCall) {
+/**
+ * True once the component has mounted on the client. Timestamps render in
+ * UTC for SSR + the hydration pass (server and client HTML must match — the
+ * server has no idea what timezone the viewer is in), then flip to the
+ * viewer's local timezone immediately after mount.
+ */
+function useHydrated(): boolean {
+  const [hydrated, setHydrated] = React.useState(false)
+  React.useEffect(() => {
+    setHydrated(true)
+  }, [])
+  return hydrated
+}
+
+type TimestampDisplayOptions = { utcTimestamps?: boolean }
+
+function timestampTimeZone(opts?: TimestampDisplayOptions): { timeZone?: string } {
+  return opts?.utcTimestamps ? { timeZone: "UTC" } : {}
+}
+
+function getTimelineGongCallDisplay(gongCall: TimelineGongCall, opts?: TimestampDisplayOptions) {
   const title = cleanGongText(gongCall.title)
-  const startTime = formatEmailTimestamp(gongCall.startTime) ?? ""
+  const startTime = formatEmailTimestamp(gongCall.startTime, timestampTimeZone(opts)) ?? ""
   const duration = formatCallDuration(gongCall.durationSeconds)
   const direction = cleanGongText(gongCall.direction)
   const outcome = cleanGongText(gongCall.outcome)
@@ -407,12 +427,12 @@ function getTimelineGongCallDisplay(gongCall: TimelineGongCall) {
   return { title, startTime, duration, direction, outcome, brief, keyPoints, nextSteps, url, snippet }
 }
 
-function getTimelineEmailDisplay(email: TimelineEmail) {
+function getTimelineEmailDisplay(email: TimelineEmail, opts?: TimestampDisplayOptions) {
   const sender = normalizeEmailSender({ name: email.from, email: email.fromEmail })
   const to = formatAddressList(email.to) || decodeEmailDisplayText(email.to ?? "")
   const cc = formatAddressList(email.cc) || decodeEmailDisplayText(email.cc ?? "")
   const bcc = formatAddressList(email.bcc) || decodeEmailDisplayText(email.bcc ?? "")
-  const date = formatEmailTimestamp(email.date) ?? decodeEmailDisplayText(email.date ?? "")
+  const date = formatEmailTimestamp(email.date, timestampTimeZone(opts)) ?? decodeEmailDisplayText(email.date ?? "")
   const subject = email.subject ? decodeEmailDisplayText(email.subject) : ""
   const bodyText = reactNodeToDisplayText(email.body)
   const snippet = emailBodySnippet({ bodyHtml: email.bodyHtml, body: bodyText }, 140)
@@ -430,7 +450,8 @@ function EmailMetadata({
   showAllRecipients: boolean
   setShowAllRecipients: React.Dispatch<React.SetStateAction<boolean>>
 }) {
-  const display = getTimelineEmailDisplay(email)
+  const hydrated = useHydrated()
+  const display = getTimelineEmailDisplay(email, { utcTimestamps: !hydrated })
   const hasExpandableRecipients = Boolean(display.cc || display.bcc)
 
   return (
@@ -847,7 +868,8 @@ function GongCallCard({
   classes: TimelineVariantClasses
 }) {
   const gongCall = event.gongCall as TimelineGongCall
-  const display = getTimelineGongCallDisplay(gongCall)
+  const hydrated = useHydrated()
+  const display = getTimelineGongCallDisplay(gongCall, { utcTimestamps: !hydrated })
 
   if (variant === "default") {
     return (

package/src/internal/__tests__/safe-html.test.ts

@@ -2,12 +2,14 @@ import { describe, expect, it } from "vitest"
 import { htmlToTextSnippet, sanitizeHtml } from "../safe-html"
 
 describe("sanitizeHtml", () => {
-  it("removes executable tags, event handlers, styles, and unsafe urls", () => {
+  it("removes executable tags, event handlers, unsafe styles, and unsafe urls", () => {
     const html = sanitizeHtml(
-      '<p style="color:red" onclick="alert(1)">Hi<script>alert(1)</script><iframe src="https://evil.test"></iframe><a href="java&#x3a;script:alert(1)">bad</a><img src="data:text/html,boom" onerror="alert(1)"></p>',
+      '<p style="color:red; background-image: url(https://evil.test/x)" onclick="alert(1)">Hi<script>alert(1)</script><iframe src="https://evil.test"></iframe><a href="java&#x3a;script:alert(1)">bad</a><img src="data:text/html,boom" onerror="alert(1)"></p>',
     )
 
-    expect(html).toBe('<p>Hi<a>bad</a><img></p>')
+    // Presentational color survives (signature fidelity); the url()-bearing
+    // declaration and everything executable is gone.
+    expect(html).toBe('<p style="color: red">Hi<a>bad</a><img></p>')
   })
 
   it("removes svg, math, and other active embedded content", () => {
@@ -60,12 +62,29 @@ describe("sanitizeHtml", () => {
     expect(html).toContain('class="gmail_signature"')
     expect(html).toContain('<table><tbody><tr><td><img src="https://example.com/logo.png" width="120" height="48" alt="Acme &amp; Co"></td>')
     expect(html).toContain('<sup>TM</sup><sub>LLC</sub>')
-    expect(html).toContain('style="vertical-align: super; font-size: 10px"')
+    // Authored presentational styles now survive (signature Gmail-look
+    // fidelity); url()-bearing declarations are still dropped.
+    expect(html).toContain('style="vertical-align: super; font-size: 10px; color: red"')
     expect(html).not.toContain("onerror")
-    expect(html).not.toContain("color: red")
     expect(html).not.toContain("background-image")
   })
 
+  it("preserves authored signature typography and spacing styles, dropping unknown properties", () => {
+    const html = sanitizeHtml(
+      '<p style="font-family: \'pt serif\', serif; font-style: italic; font-size: 12px; color: rgb(102, 102, 102); line-height: 1.38; margin: 0 0 8px 0; position: fixed; z-index: 9999">2261 Market Street</p>',
+    )
+
+    expect(html).toContain("font-family: 'pt serif', serif")
+    expect(html).toContain("font-style: italic")
+    expect(html).toContain("font-size: 12px")
+    expect(html).toContain("color: rgb(102, 102, 102)")
+    expect(html).toContain("line-height: 1.38")
+    expect(html).toContain("margin: 0 0 8px 0")
+    // Layout-escape properties are not allowlisted.
+    expect(html).not.toContain("position")
+    expect(html).not.toContain("z-index")
+  })
+
   it("bounds image dimensions and inline font-size while preserving subscript alignment", () => {
     const html = sanitizeHtml(
       '<span style="vertical-align: sub; font-size: 500px">H2O</span><img src="https://example.com/x.png" width="99999" height="64" alt="x">',

package/src/internal/safe-html.ts

@@ -147,6 +147,39 @@ function sanitizeFontSize(value: string): string | null {
   return `${amount}${unit}`
 }
 
+// Presentational properties preserved so email signatures keep their authored
+// Gmail look (serif/italic/gray etc.) when rendered in the conversation panel.
+// Values are validated per-property; anything containing url()/expression()
+// (or any property not listed) is still dropped — these are text-presentation
+// only, no layout escape or resource loading.
+const COLOR_VALUE = /^(#[0-9a-f]{3,8}|rgba?\([\d\s,./%]+\)|[a-z]+)$/
+const LENGTH_BOX_VALUE = /^(-?[\d.]+(px|em|rem|%)?|auto|0)(\s+(-?[\d.]+(px|em|rem|%)?|auto|0)){0,3}$/
+const SAFE_TEXT_STYLE_PROPS: Record<string, RegExp> = {
+  color: COLOR_VALUE,
+  "background-color": COLOR_VALUE,
+  "font-family": /^[a-z0-9\s,'"-]+$/,
+  "font-style": /^(italic|normal|oblique)$/,
+  "font-weight": /^(bold|bolder|lighter|normal|[1-9]00)$/,
+  "font-variant": /^[a-z\s-]+$/,
+  "text-decoration": /^[a-z\s-]+$/,
+  "text-decoration-line": /^[a-z\s-]+$/,
+  "text-transform": /^(none|capitalize|uppercase|lowercase)$/,
+  "text-align": /^(left|right|center|justify)$/,
+  "letter-spacing": /^(normal|-?[\d.]+(px|em|rem)?)$/,
+  "line-height": /^(normal|[\d.]+(px|em|rem|%)?)$/,
+  "white-space": /^[a-z-]+$/,
+  margin: LENGTH_BOX_VALUE,
+  "margin-top": LENGTH_BOX_VALUE,
+  "margin-right": LENGTH_BOX_VALUE,
+  "margin-bottom": LENGTH_BOX_VALUE,
+  "margin-left": LENGTH_BOX_VALUE,
+  padding: LENGTH_BOX_VALUE,
+  "padding-top": LENGTH_BOX_VALUE,
+  "padding-right": LENGTH_BOX_VALUE,
+  "padding-bottom": LENGTH_BOX_VALUE,
+  "padding-left": LENGTH_BOX_VALUE,
+}
+
 function sanitizeStyle(value: string): string | null {
   const declarations: string[] = []
 
@@ -166,6 +199,12 @@ function sanitizeStyle(value: string): string | null {
     if (property === "font-size") {
       const fontSize = sanitizeFontSize(rawValue)
       if (fontSize) declarations.push(`font-size: ${fontSize}`)
+      continue
+    }
+
+    const allowedValue = SAFE_TEXT_STYLE_PROPS[property]
+    if (allowedValue?.test(rawValue)) {
+      declarations.push(`${property}: ${rawValue}`)
     }
   }