@iyulab/chat-components 0.12.3 → 0.14.0

package/CHANGELOG.md

@@ -1,5 +1,91 @@
 # Changelog
 
+## [0.14.0] - 2026-09-30
+
+### Security
+
+- 🔴 **Breaking — `block-json` renders only registered blocks and assigns only their schema's
+  properties.** `u-element-block` used to create any element defined on the page and assign every
+  property except six names (`innerHTML`, `outerHTML`, …). `block-json` is model output, so a
+  prompt-injected document could create an element that renders a property as HTML (for example
+  `u-table-block`'s cell text) and run script. Now a tag must be registered as a block, and only the
+  names in that block's schema `properties` are assigned; other keys (including `style`) are dropped
+  and logged to the console.
+  - The four built-in extras register themselves when their module is imported, and
+    `ElementPromptBuilder.add()` registers the schema it is given — extras set up as documented keep
+    working.
+  - New `registerElementBlock(schema)` for blocks you describe in your own prompt, and
+    `getElementBlockProperties(tag)`.
+  - The `blacklist` property of `u-element-block` is removed.
+- **New `setAllowedImagePrefixes(prefixes)` — an origin policy for images in model output.** Markdown
+  images in `u-marked-block` (table cells included) and the items of `u-images-block` load the URL the
+  model wrote as soon as they render, so a prompt-injected response can send data to a third party in
+  an image URL's query string. With a list set, only images whose resolved absolute URL starts with one
+  of the prefixes are requested; any other image is drawn as its alt text (`Image blocked: …`,
+  localized) and no request is made. The default (`undefined`) keeps loading every image; `[]` blocks
+  all, `['*']` allows all. `getAllowedImagePrefixes()` and `resolveImageSource(src)` are exported too.
+  - `data:image/…` URLs make no request and are shown under any policy — markdown images with such a
+    URL used to be replaced by `#`.
+  - A markdown image with a blocked protocol (`javascript:` and the like) is drawn as its alt text
+    instead of `<img src="#">`, which requested the page itself as an image.
+  - `u-images-block` now applies the same protocol check to `src` as markdown images do.
+- New `docs/security.md` (and a skill reference) — what each input is trusted to contain, the requests
+  the components make, and what is left to the application.
+- New `sanitizeHref(url)` — the protocol check without HTML escaping, for property bindings.
+  - Migration: a custom element that `block-json` should render needs its schema registered with
+    `ElementPromptBuilder.add()` or `registerElementBlock()`, and every property the model may set
+    must be listed in that schema's `properties`.
+
+### Fixed
+
+- **`u-ref-card` checks the protocol of its `url`, like `u-ref-tag` already did.** A citation source URL
+  such as `javascript:…` became `#` in the inline citation but stayed as written in the card inside its
+  tooltip. Both now use the same check.
+- **`u-prompt` no longer sends on the Enter that finishes an IME composition.** Typing Korean (or
+  another composed language) and pressing Enter sent the message and then left the last syllable in
+  the box, so it was sent again. Requires `@iyulab/components` 1.51.0 or later.
+- **Icons of `u-prompt`, `u-table-block`, `u-code-block` and the other components that use the
+  bundled `internal-chat` set are drawn again.** The module that registers that set had no exports
+  and was not declared in `sideEffects`, so the package build dropped it and those icons rendered at
+  0×0 (0.11.1 – 0.13.0).
+- **A table whose cell carries a citation keeps its rows.** The citation markup was inserted into the
+  table's JSON payload after it had been serialized, which broke the JSON, and the table rendered
+  empty. Citations inside `block-json` payloads are removed for the same reason.
+- **`u-marked-block` keeps updating after it is detached and re-attached while a render or the
+  streaming indicator is pending.** It used to stop updating for good, showing an intermediate
+  frame, or leave a `block-json` block on its loading skeleton.
+- Blocks that read their data from a `<script type="application/json">` child no longer log a
+  "Missing script" error when they are moved in the DOM after loading.
+- `@iyulab/chat-components/extra` registers the built-in extras on `ElementPromptBuilder.instance`,
+  as documented. Adding your own extras there and calling `build()` again now returns the built-ins
+  too; it used to return only yours.
+
+## [0.13.0] - 2026-09-28
+
+### Fixed
+
+- **Escape in a file preview or an image lightbox opened inside a dialog closes only the viewer.**
+  Both listened for Escape on the document themselves, so one press closed the viewer and the
+  dialog under it. They now join `@iyulab/components`' layer stack, where one Escape closes the
+  most recently opened layer. Arrow keys still page the lightbox. Requires `@iyulab/components`
+  1.49.0 or later.
+
+### Changed
+
+- 🔴 **Breaking — `u-ref-card` no longer requests a favicon unless you choose where from.** A web
+  card used to load `https://www.google.com/s2/favicons?domain=<host>` for every card, with no way to
+  point it elsewhere or turn it off — each card sent the site's host name to a third party, and on a
+  closed network every card made a request that failed. Cards now show no favicon by default. Set
+  `URefCard.defaultFaviconUrl` (every card, including those inside `u-ref-block` and
+  `u-ref-card-group`) or a card's `faviconUrl` property to a `(url) => string | undefined` resolver.
+  A card without a `url` no longer falls back to the app's own `/favicon.ico`.
+  Migration, to keep the previous look: `URefCard.defaultFaviconUrl = googleFaviconUrl;` (both
+  exported from `@iyulab/chat-components`).
+
+- The file preview and the image lightbox read `--u-layer-overlay` (9999, as before) — the shared
+  stacking token from `@iyulab/components` — instead of their own number, so they stack in the
+  same order as dialogs and drawers.
+
 ## [0.12.3] - 2026-09-21
 
 ### Documentation

package/README.md

@@ -137,6 +137,7 @@ package's Accessibility section.
 | [docs/block-system.md](./docs/block-system.md) | Block components and `BlockItem` types in depth |
 | [docs/extras-system.md](./docs/extras-system.md) | Extras system setup and custom extras |
 | [docs/events.md](./docs/events.md) | Full event reference |
+| [docs/security.md](./docs/security.md) | What each input is trusted to contain, requests the components make, and your application's part |
 
 ---
 

package/dist/_virtual/{_@oxc-project_runtime@0.150.0 → _@oxc-project_runtime@0.151.0}/helpers/esm/decorate.js

@@ -1,4 +1,4 @@
-//#region \0@oxc-project+runtime@0.150.0/helpers/esm/decorate.js
+//#region \0@oxc-project+runtime@0.151.0/helpers/esm/decorate.js
 function __decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
 	if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);

package/dist/_virtual/{_@oxc-project_runtime@0.150.0 → _@oxc-project_runtime@0.151.0}/helpers/esm/decorateMetadata.js

@@ -1,4 +1,4 @@
-//#region \0@oxc-project+runtime@0.150.0/helpers/esm/decorateMetadata.js
+//#region \0@oxc-project+runtime@0.151.0/helpers/esm/decorateMetadata.js
 function __decorateMetadata(k, v) {
 	if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }

package/dist/_virtual/_glob-assets_raw/alert-triangle-fill.svg.4cfc4305.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/alert-triangle-fill.svg.4cfc4305
+var alert_triangle_fill_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"currentColor\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M12 1.67c.955 0 1.845 .467 2.39 1.247l.105 .16l8.114 13.548a2.914 2.914 0 0 1 -2.307 4.363l-.195 .008h-16.225a2.914 2.914 0 0 1 -2.582 -4.2l.099 -.185l8.11 -13.538a2.914 2.914 0 0 1 2.491 -1.403zm.01 13.33l-.127 .007a1 1 0 0 0 0 1.986l.117 .007l.127 -.007a1 1 0 0 0 0 -1.986l-.117 -.007zm-.01 -7a1 1 0 0 0 -.993 .883l-.007 .117v4l.007 .117a1 1 0 0 0 1.986 0l.007 -.117v-4l-.007 -.117a1 1 0 0 0 -.993 -.883z\" />\n</svg>\n";
+//#endregion
+export { alert_triangle_fill_svg_default as default };

package/dist/_virtual/_glob-assets_raw/arrows-sort.svg.dda43a85.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/arrows-sort.svg.dda43a85
+var arrows_sort_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M3 9l4 -4l4 4m-4 -4v14\" />\n  <path d=\"M21 15l-4 4l-4 -4m4 4v-14\" />\n</svg>\n";
+//#endregion
+export { arrows_sort_svg_default as default };

package/dist/_virtual/_glob-assets_raw/code.svg.c69bc144.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/code.svg.c69bc144
+var code_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M7 8l-4 4l4 4\" />\n  <path d=\"M17 8l4 4l-4 4\" />\n  <path d=\"M14 4l-4 16\" />\n</svg>\n";
+//#endregion
+export { code_svg_default as default };

package/dist/_virtual/_glob-assets_raw/download.svg.bce82177.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/download.svg.bce82177
+var download_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M4 17v2a2 2 0 0 0 2 2h12a2 2 0 0 0 2 -2v-2\" />\n  <path d=\"M7 11l5 5l5 -5\" />\n  <path d=\"M12 4l0 12\" />\n</svg>\n";
+//#endregion
+export { download_svg_default as default };

package/dist/_virtual/_glob-assets_raw/external-link.svg.a9f7f02d.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/external-link.svg.a9f7f02d
+var external_link_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M12 6h-6a2 2 0 0 0 -2 2v10a2 2 0 0 0 2 2h10a2 2 0 0 0 2 -2v-6\" />\n  <path d=\"M11 13l9 -9\" />\n  <path d=\"M15 4h5v5\" />\n</svg>\n";
+//#endregion
+export { external_link_svg_default as default };

package/dist/_virtual/_glob-assets_raw/file-code.svg.0e706f93.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/file-code.svg.0e706f93
+var file_code_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M14 3v4a1 1 0 0 0 1 1h4\" />\n  <path d=\"M17 21h-10a2 2 0 0 1 -2 -2v-14a2 2 0 0 1 2 -2h7l5 5v11a2 2 0 0 1 -2 2\" />\n  <path d=\"M10 13l-1 2l1 2\" />\n  <path d=\"M14 13l1 2l-1 2\" />\n</svg>\n";
+//#endregion
+export { file_code_svg_default as default };

package/dist/_virtual/_glob-assets_raw/file-music.svg.b9970203.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/file-music.svg.b9970203
+var file_music_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M14 3v4a1 1 0 0 0 1 1h4\" />\n  <path d=\"M17 21h-10a2 2 0 0 1 -2 -2v-14a2 2 0 0 1 2 -2h7l5 5v11a2 2 0 0 1 -2 2\" />\n  <path d=\"M10 16a1 1 0 1 0 2 0a1 1 0 1 0 -2 0\" />\n  <path d=\"M12 16l0 -5l2 1\" />\n</svg>\n";
+//#endregion
+export { file_music_svg_default as default };

package/dist/_virtual/_glob-assets_raw/file-spreadsheet.svg.8c03bdfa.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/file-spreadsheet.svg.8c03bdfa
+var file_spreadsheet_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M14 3v4a1 1 0 0 0 1 1h4\" />\n  <path d=\"M17 21h-10a2 2 0 0 1 -2 -2v-14a2 2 0 0 1 2 -2h7l5 5v11a2 2 0 0 1 -2 2\" />\n  <path d=\"M8 11h8v7h-8l0 -7\" />\n  <path d=\"M8 15h8\" />\n  <path d=\"M11 11v7\" />\n</svg>\n";
+//#endregion
+export { file_spreadsheet_svg_default as default };

package/dist/_virtual/_glob-assets_raw/file-text.svg.85bdd923.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/file-text.svg.85bdd923
+var file_text_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M14 3v4a1 1 0 0 0 1 1h4\" />\n  <path d=\"M17 21h-10a2 2 0 0 1 -2 -2v-14a2 2 0 0 1 2 -2h7l5 5v11a2 2 0 0 1 -2 2\" />\n  <path d=\"M9 9l1 0\" />\n  <path d=\"M9 13l6 0\" />\n  <path d=\"M9 17l6 0\" />\n</svg>\n";
+//#endregion
+export { file_text_svg_default as default };

package/dist/_virtual/_glob-assets_raw/file-type-pdf.svg.bc12db6d.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/file-type-pdf.svg.bc12db6d
+var file_type_pdf_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M14 3v4a1 1 0 0 0 1 1h4\" />\n  <path d=\"M5 12v-7a2 2 0 0 1 2 -2h7l5 5v4\" />\n  <path d=\"M5 18h1.5a1.5 1.5 0 0 0 0 -3h-1.5v6\" />\n  <path d=\"M17 18h2\" />\n  <path d=\"M20 15h-3v6\" />\n  <path d=\"M11 15v6h1a2 2 0 0 0 2 -2v-2a2 2 0 0 0 -2 -2h-1\" />\n</svg>\n";
+//#endregion
+export { file_type_pdf_svg_default as default };

package/dist/_virtual/_glob-assets_raw/file-zip.svg.76dde660.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/file-zip.svg.76dde660
+var file_zip_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M6 20.735a2 2 0 0 1 -1 -1.735v-14a2 2 0 0 1 2 -2h7l5 5v11a2 2 0 0 1 -2 2h-1\" />\n  <path d=\"M11 17a2 2 0 0 1 2 2v2a1 1 0 0 1 -1 1h-2a1 1 0 0 1 -1 -1v-2a2 2 0 0 1 2 -2\" />\n  <path d=\"M11 5l-1 0\" />\n  <path d=\"M13 7l-1 0\" />\n  <path d=\"M11 9l-1 0\" />\n  <path d=\"M13 11l-1 0\" />\n  <path d=\"M11 13l-1 0\" />\n  <path d=\"M13 15l-1 0\" />\n</svg>\n";
+//#endregion
+export { file_zip_svg_default as default };

package/dist/_virtual/_glob-assets_raw/file.svg.28f5d6f1.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/file.svg.28f5d6f1
+var file_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M14 3v4a1 1 0 0 0 1 1h4\" />\n  <path d=\"M17 21h-10a2 2 0 0 1 -2 -2v-14a2 2 0 0 1 2 -2h7l5 5v11a2 2 0 0 1 -2 2\" />\n</svg>\n";
+//#endregion
+export { file_svg_default as default };

package/dist/_virtual/_glob-assets_raw/photo.svg.cc273cc1.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/photo.svg.cc273cc1
+var photo_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M15 8h.01\" />\n  <path d=\"M3 6a3 3 0 0 1 3 -3h12a3 3 0 0 1 3 3v12a3 3 0 0 1 -3 3h-12a3 3 0 0 1 -3 -3v-12\" />\n  <path d=\"M3 16l5 -5c.928 -.893 2.072 -.893 3 0l5 5\" />\n  <path d=\"M14 14l1 -1c.928 -.893 2.072 -.893 3 0l3 3\" />\n</svg>\n";
+//#endregion
+export { photo_svg_default as default };

package/dist/_virtual/_glob-assets_raw/player-stop-fill.svg.5378b752.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/player-stop-fill.svg.5378b752
+var player_stop_fill_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"currentColor\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M17 4h-10a3 3 0 0 0 -3 3v10a3 3 0 0 0 3 3h10a3 3 0 0 0 3 -3v-10a3 3 0 0 0 -3 -3z\" />\n</svg>\n";
+//#endregion
+export { player_stop_fill_svg_default as default };

package/dist/_virtual/_glob-assets_raw/send.svg.02326253.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/send.svg.02326253
+var send_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M10 14l11 -11\" />\n  <path d=\"M21 3l-6.5 18a.55 .55 0 0 1 -1 0l-3.5 -7l-7 -3.5a.55 .55 0 0 1 0 -1l18 -6.5\" />\n</svg>\n";
+//#endregion
+export { send_svg_default as default };

package/dist/_virtual/_glob-assets_raw/sort-ascending-letters.svg.14a3df67.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/sort-ascending-letters.svg.14a3df67
+var sort_ascending_letters_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M15 10v-5c0 -1.38 .62 -2 2 -2s2 .62 2 2v5m0 -3h-4\" />\n  <path d=\"M19 21h-4l4 -7h-4\" />\n  <path d=\"M4 15l3 3l3 -3\" />\n  <path d=\"M7 6v12\" />\n</svg>\n";
+//#endregion
+export { sort_ascending_letters_svg_default as default };

package/dist/_virtual/_glob-assets_raw/sort-descending-letters.svg.3e03647c.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/sort-descending-letters.svg.3e03647c
+var sort_descending_letters_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M15 21v-5c0 -1.38 .62 -2 2 -2s2 .62 2 2v5m0 -3h-4\" />\n  <path d=\"M19 10h-4l4 -7h-4\" />\n  <path d=\"M4 15l3 3l3 -3\" />\n  <path d=\"M7 6v12\" />\n</svg>\n";
+//#endregion
+export { sort_descending_letters_svg_default as default };

package/dist/_virtual/_glob-assets_raw/video.svg.c183f03c.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/video.svg.c183f03c
+var video_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M15 10l4.553 -2.276a1 1 0 0 1 1.447 .894v6.764a1 1 0 0 1 -1.447 .894l-4.553 -2.276v-4\" />\n  <path d=\"M3 8a2 2 0 0 1 2 -2h8a2 2 0 0 1 2 2v8a2 2 0 0 1 -2 2h-8a2 2 0 0 1 -2 -2l0 -8\" />\n</svg>\n";
+//#endregion
+export { video_svg_default as default };

package/dist/_virtual/_glob-assets_raw/world.svg.cd9903c8.js

@@ -0,0 +1,4 @@
+//#region \0glob-assets_raw/world.svg.cd9903c8
+var world_svg_default = "<svg\n  xmlns=\"http://www.w3.org/2000/svg\"\n  width=\"24\"\n  height=\"24\"\n  viewBox=\"0 0 24 24\"\n  fill=\"none\"\n  stroke=\"currentColor\"\n  stroke-width=\"2\"\n  stroke-linecap=\"round\"\n  stroke-linejoin=\"round\"\n>\n  <path stroke=\"none\" d=\"M0 0h24v24H0z\" fill=\"none\"/>\n  <path d=\"M3 12a9 9 0 1 0 18 0a9 9 0 0 0 -18 0\" />\n  <path d=\"M3.6 9h16.8\" />\n  <path d=\"M3.6 15h16.8\" />\n  <path d=\"M11.5 3a17 17 0 0 0 0 18\" />\n  <path d=\"M12.5 3a17 17 0 0 1 0 18\" />\n</svg>\n";
+//#endregion
+export { world_svg_default as default };

package/dist/components/UDataElement.d.ts

@@ -18,6 +18,8 @@ import { UElement } from '@iyulab/components/dist/components/UElement.js';
  */
 export declare class UDataElement extends UElement {
     static styles: import('lit').CSSResultGroup;
+    /** 데이터를 한 번이라도 읽었는가 — 재연결 때 «스크립트 없음» 을 오류로 보지 않기 위해. */
+    private loaded;
     connectedCallback(): void;
     /**
      * 지정한 태그와 데이터로 커스텀 엘리먼트 HTML 문자열을 생성합니다.

package/dist/components/UDataElement.js

@@ -19,6 +19,10 @@ import { UElement } from "@iyulab/components/dist/components/UElement.js";
 * (예: `URefCard` — URefBlock의 property 구동과 UMarkedBlock의 script 주입을 모두 지원)
 */
 var UDataElement = class extends UElement {
+	constructor(..._args) {
+		super(..._args);
+		this.loaded = false;
+	}
 	static {
 		this.styles = super.styles;
 	}
@@ -55,12 +59,16 @@ var UDataElement = class extends UElement {
 		try {
 			if (!data) {
 				const script = this.querySelector("script[type=\"application/json\"]");
-				if (!script) throw new Error("Missing <script type=\"application/json\">");
+				if (!script) {
+					if (this.loaded) return;
+					throw new Error("Missing <script type=\"application/json\">");
+				}
 				data = JSON.parse(script.textContent ?? "{}");
 				script.remove();
 			}
 			if (typeof data !== "object" || data === null || Array.isArray(data)) throw new Error("Invalid JSON data: expected an object at the top level");
 			Object.assign(this, data);
+			this.loaded = true;
 		} catch (error) {
 			await this.error(error);
 		}

package/dist/components/blocks/UCodeBlock.js

@@ -1,6 +1,7 @@
+import "../../utilities/icons.js";
 import { styles } from "./UCodeBlock.styles.js";
-import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.150.0/helpers/esm/decorateMetadata.js";
-import __decorate from "../../_virtual/_@oxc-project_runtime@0.150.0/helpers/esm/decorate.js";
+import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.151.0/helpers/esm/decorateMetadata.js";
+import __decorate from "../../_virtual/_@oxc-project_runtime@0.151.0/helpers/esm/decorate.js";
 import { html } from "lit";
 import { customElement, property } from "lit/decorators.js";
 import { unsafeHTML } from "lit/directives/unsafe-html.js";

package/dist/components/blocks/UElementBlock.d.ts

@@ -1,19 +1,22 @@
 import { nothing, PropertyValues } from 'lit';
 import { UDataElement } from '../UDataElement.js';
 /**
- * `block-json` 코드펜스에서 지정한 커스텀 엘리먼트를 동적으로 렌더링하는 컴포넌트입니다.
+ * `block-json` 코드펜스에서 지정한 블록을 동적으로 렌더링하는 컴포넌트입니다.
+ *
+ * 만들 수 있는 것은 **블록으로 등록된 태그뿐**이고(`registerElementBlock` ·
+ * `ElementPromptBuilder.add`), 대입하는 것은 **그 스키마의 `properties` 에 적힌 이름뿐**입니다.
+ * `tag`·`properties` 는 LLM 출력에서 오므로 신뢰할 수 없는 입력으로 다룹니다 — 스키마 밖의
+ * 이름은 대입하지 않고 콘솔에 기록합니다.
  * 대상 태그가 등록되어 있지 않거나 데이터가 유효하지 않은 경우, 에러 카드 없이 콘솔에만 기록하고 아무것도 렌더링하지 않습니다.
  */
 export declare class UElementBlock extends UDataElement {
     static styles: import('lit').CSSResultGroup[];
     /** 로딩 상태입니다. `true`인 경우, 위젯이 로딩 중임을 나타냅니다. */
     loading: boolean;
-    /** `tag` 프로퍼티에 등록된 커스텀 엘리먼트를 렌더링하는 컴포넌트입니다. */
+    /** 렌더링할 블록의 태그입니다. 블록으로 등록된 태그만 렌더링됩니다. */
     tag?: string;
-    /** `properties` 객체의 키가 렌더링된 엘리먼트의 프로퍼티 이름과 일치하면 자동으로 할당됩니다. */
+    /** 블록에 대입할 값입니다. 블록 스키마의 `properties` 에 적힌 이름만 대입됩니다. */
     properties?: Record<string, unknown>;
-    /** `properties` 객체에서 위험한 프로퍼티 이름을 지정하여 차단할 수 있습니다. */
-    blacklist: string[];
     /** 실제 렌더링된 엘리먼트입니다. `tag` 프로퍼티가 변경될 때마다 업데이트됩니다. */
     private element;
     protected willUpdate(changedProperties: PropertyValues): void;
@@ -24,24 +27,17 @@ export declare class UElementBlock extends UDataElement {
      */
     protected error(error: unknown): Promise<void>;
     /**
-     * `tag` 프로퍼티에 등록된 커스텀 엘리먼트를 렌더링하는 컴포넌트입니다.
-     * `tag`가 변경될 때마다 등록된 커스텀 엘리먼트를 새로 생성하여 렌더링합니다.
-     * `tag`가 유효하지 않거나 등록된 커스텀 엘리먼트가 아닌 경우, 에러 처리합니다.
+     * `tag`가 변경될 때마다 블록 엘리먼트를 새로 생성합니다.
+     * 블록으로 등록되지 않은 태그나 아직 정의되지 않은 커스텀 엘리먼트는 만들지 않고 기록만 합니다.
      * JSON 자체는 이미 파싱에 성공한 상태이므로(스트리밍 중 파싱 실패와는 다른 케이스),
      * `loading` 여부와 무관하게 항상 기록합니다.
      */
     private updateElement;
     /**
-     * `properties` 객체의 키가 렌더링된 엘리먼트의 프로퍼티 이름과 일치하면 자동으로 할당됩니다.
-     * `properties` 객체에 위험한 프로퍼티가 포함되어 있는지 검증하여, 유효한 경우에만 할당합니다.
-     * 할당 중 오류가 발생한 경우, 에러 처리합니다.
+     * 블록 스키마에 적힌 이름만 대입합니다. 스키마 밖의 이름은 대입하지 않고 기록합니다 —
+     * 블록 하나를 통째로 버리지 않는 것은 LLM 이 무해한 여분 키를 붙이는 일이 흔하기 때문입니다.
      */
     private updateProperties;
-    /**
-     * `properties` 객체에 위험한 프로퍼티가 포함되어 있는지 검증합니다.
-     * DOM 조작이나 이벤트 핸들러로 악용될 수 있는 프로퍼티를 최소한으로 차단합니다.
-     */
-    private validateProperties;
     /**
      * 에러 카드 없이 콘솔에만 기록합니다. 채팅 UI에 갑작스러운 에러 카드가 뜨는 것을 피하기 위함입니다 —
      * addon 모듈을 import하지 않아 아직 등록되지 않은 태그일 수도 있으므로, 실제 에러라기보다

package/dist/components/blocks/UElementBlock.js

@@ -1,24 +1,16 @@
-import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.150.0/helpers/esm/decorateMetadata.js";
-import __decorate from "../../_virtual/_@oxc-project_runtime@0.150.0/helpers/esm/decorate.js";
+import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.151.0/helpers/esm/decorateMetadata.js";
+import __decorate from "../../_virtual/_@oxc-project_runtime@0.151.0/helpers/esm/decorate.js";
 import { UDataElement } from "../UDataElement.js";
+import { getElementBlockProperties } from "../../utilities/ElementRegistry.js";
 import { styles } from "./UElementBlock.styles.js";
 import { html, nothing } from "lit";
 import { customElement, property, state } from "lit/decorators.js";
 import "@iyulab/components/dist/components/skeleton/USkeleton.js";
 //#region src/components/blocks/UElementBlock.ts
-var DEFAULT_BLACKLIST = [
-	"innerHTML",
-	"outerHTML",
-	"textContent",
-	"innerText",
-	"outerText",
-	"srcdoc"
-];
 var UElementBlock = class UElementBlock extends UDataElement {
 	constructor(..._args) {
 		super(..._args);
 		this.loading = false;
-		this.blacklist = DEFAULT_BLACKLIST;
 		this.element = null;
 	}
 	static {
@@ -27,8 +19,7 @@ var UElementBlock = class UElementBlock extends UDataElement {
 	willUpdate(changedProperties) {
 		super.willUpdate(changedProperties);
 		if (changedProperties.has("tag")) this.updateElement(this.tag);
-		if (changedProperties.has("properties") && this.element) this.updateProperties(this.element, this.properties);
-		if (changedProperties.has("blacklist") && this.element && this.properties) this.updateProperties(this.element, this.properties);
+		if ((changedProperties.has("properties") || changedProperties.has("tag")) && this.element && this.properties) this.updateProperties(this.element, this.properties);
 	}
 	render() {
 		if (this.loading === true) return html`
@@ -54,9 +45,8 @@ var UElementBlock = class UElementBlock extends UDataElement {
 		this.reportError(error);
 	}
 	/**
-	* `tag` 프로퍼티에 등록된 커스텀 엘리먼트를 렌더링하는 컴포넌트입니다.
-	* `tag`가 변경될 때마다 등록된 커스텀 엘리먼트를 새로 생성하여 렌더링합니다.
-	* `tag`가 유효하지 않거나 등록된 커스텀 엘리먼트가 아닌 경우, 에러 처리합니다.
+	* `tag`가 변경될 때마다 블록 엘리먼트를 새로 생성합니다.
+	* 블록으로 등록되지 않은 태그나 아직 정의되지 않은 커스텀 엘리먼트는 만들지 않고 기록만 합니다.
 	* JSON 자체는 이미 파싱에 성공한 상태이므로(스트리밍 중 파싱 실패와는 다른 케이스),
 	* `loading` 여부와 무관하게 항상 기록합니다.
 	*/
@@ -67,6 +57,11 @@ var UElementBlock = class UElementBlock extends UDataElement {
 			this.reportError(/* @__PURE__ */ new Error("Tag is required"));
 			return;
 		}
+		if (!getElementBlockProperties(tag)) {
+			this.element = null;
+			this.reportError(/* @__PURE__ */ new Error(`"${tag}" is not a registered element block — register its schema with registerElementBlock() or ElementPromptBuilder.add()`));
+			return;
+		}
 		if (!customElements.get(tag)) {
 			this.element = null;
 			this.reportError(/* @__PURE__ */ new Error(`Unknown tag: ${tag}`));
@@ -75,27 +70,25 @@ var UElementBlock = class UElementBlock extends UDataElement {
 		this.element = document.createElement(tag);
 	}
 	/**
-	* `properties` 객체의 키가 렌더링된 엘리먼트의 프로퍼티 이름과 일치하면 자동으로 할당됩니다.
-	* `properties` 객체에 위험한 프로퍼티가 포함되어 있는지 검증하여, 유효한 경우에만 할당합니다.
-	* 할당 중 오류가 발생한 경우, 에러 처리합니다.
+	* 블록 스키마에 적힌 이름만 대입합니다. 스키마 밖의 이름은 대입하지 않고 기록합니다 —
+	* 블록 하나를 통째로 버리지 않는 것은 LLM 이 무해한 여분 키를 붙이는 일이 흔하기 때문입니다.
 	*/
 	updateProperties(element, props) {
-		if (this.validateProperties(props)) try {
-			Object.assign(element, props);
+		if (typeof props !== "object" || props === null || Array.isArray(props)) {
+			this.reportError(/* @__PURE__ */ new Error(`Properties must be an object: ${JSON.stringify(props)}`));
+			return;
+		}
+		const allowed = getElementBlockProperties(element.localName) ?? /* @__PURE__ */ new Set();
+		const accepted = {};
+		const rejected = [];
+		for (const [key, value] of Object.entries(props)) if (allowed.has(key)) accepted[key] = value;
+		else rejected.push(key);
+		if (rejected.length > 0) this.reportError(/* @__PURE__ */ new Error(`Not in the "${element.localName}" schema, not assigned: ${rejected.join(", ")}`));
+		try {
+			Object.assign(element, accepted);
 		} catch (error) {
 			this.reportError(error);
 		}
-		else this.reportError(/* @__PURE__ */ new Error(`Not allowed properties: ${JSON.stringify(props)}`));
-	}
-	/**
-	* `properties` 객체에 위험한 프로퍼티가 포함되어 있는지 검증합니다.
-	* DOM 조작이나 이벤트 핸들러로 악용될 수 있는 프로퍼티를 최소한으로 차단합니다.
-	*/
-	validateProperties(props) {
-		if (typeof props !== "object" || props === null || Array.isArray(props)) return false;
-		const obj = props;
-		for (const key of Object.keys(obj)) if (this.blacklist.includes(key)) return false;
-		return true;
 	}
 	/**
 	* 에러 카드 없이 콘솔에만 기록합니다. 채팅 UI에 갑작스러운 에러 카드가 뜨는 것을 피하기 위함입니다 —
@@ -112,7 +105,6 @@ __decorate([property({
 }), __decorateMetadata("design:type", Object)], UElementBlock.prototype, "loading", void 0);
 __decorate([property({ type: String }), __decorateMetadata("design:type", String)], UElementBlock.prototype, "tag", void 0);
 __decorate([property({ type: Object }), __decorateMetadata("design:type", typeof Record === "undefined" ? Object : Record)], UElementBlock.prototype, "properties", void 0);
-__decorate([property({ type: Array }), __decorateMetadata("design:type", Array)], UElementBlock.prototype, "blacklist", void 0);
 __decorate([state(), __decorateMetadata("design:type", Object)], UElementBlock.prototype, "element", void 0);
 UElementBlock = __decorate([customElement("u-element-block")], UElementBlock);
 //#endregion

package/dist/components/blocks/UFileBlock.d.ts

@@ -1,3 +1,4 @@
+import { PropertyValues } from 'lit';
 import { UElement } from '@iyulab/components/dist/components/UElement.js';
 /**
  * 단일 파일을 표시하는 블록 컴포넌트입니다.
@@ -18,8 +19,9 @@ export declare class UFileBlock extends UElement {
     url?: string;
     /** 미리보기 오버레이가 열려있는지 여부 */
     private previewOpen;
-    connectedCallback(): void;
     disconnectedCallback(): void;
+    /** 열린 미리보기는 층이다 — Escape 는 components 의 층 스택이 «가장 나중에 연 층 하나» 에만 준다. */
+    protected updated(changed: PropertyValues): void;
     private get isImage();
     private get isVideo();
     /** 클릭 시 오버레이로 미리볼 수 있는 타입인지 여부 */
@@ -29,7 +31,6 @@ export declare class UFileBlock extends UElement {
     private renderCardMain;
     private handleCardClick;
     private closePreview;
-    private handleKeyDown;
     private handleRemoveClick;
     /** MIME 타입 → Tabler Icon 이름 */
     private resolveIcon;

package/dist/components/blocks/UFileBlock.js

@@ -1,5 +1,6 @@
-import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.150.0/helpers/esm/decorateMetadata.js";
-import __decorate from "../../_virtual/_@oxc-project_runtime@0.150.0/helpers/esm/decorate.js";
+import "../../utilities/icons.js";
+import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.151.0/helpers/esm/decorateMetadata.js";
+import __decorate from "../../_virtual/_@oxc-project_runtime@0.151.0/helpers/esm/decorate.js";
 import { messages } from "../../utilities/messages.js";
 import { styles } from "./UFileBlock.styles.js";
 import { html, nothing } from "lit";
@@ -7,6 +8,7 @@ import { customElement, property, state } from "lit/decorators.js";
 import "@iyulab/components/dist/components/icon/UIcon.js";
 import { UElement } from "@iyulab/components/dist/components/UElement.js";
 import "@iyulab/components/dist/components/button/UButton.js";
+import { OverlayManager } from "@iyulab/components/dist/utilities/OverlayManager.js";
 //#region src/components/blocks/UFileBlock.ts
 var UFileBlock = class UFileBlock extends UElement {
 	constructor(..._args) {
@@ -21,9 +23,6 @@ var UFileBlock = class UFileBlock extends UElement {
 			e?.stopPropagation();
 			this.previewOpen = false;
 		};
-		this.handleKeyDown = (e) => {
-			if (this.previewOpen && e.key === "Escape") this.closePreview();
-		};
 		this.handleRemoveClick = (e) => {
 			e.stopPropagation();
 			if (this.fire("remove")) this.remove();
@@ -32,14 +31,17 @@ var UFileBlock = class UFileBlock extends UElement {
 	static {
 		this.styles = [super.styles, styles];
 	}
-	connectedCallback() {
-		super.connectedCallback();
-		document.addEventListener("keydown", this.handleKeyDown);
-	}
 	disconnectedCallback() {
-		document.removeEventListener("keydown", this.handleKeyDown);
+		OverlayManager.closeLayer(this);
 		super.disconnectedCallback();
 	}
+	/** 열린 미리보기는 층이다 — Escape 는 components 의 층 스택이 «가장 나중에 연 층 하나» 에만 준다. */
+	updated(changed) {
+		super.updated(changed);
+		if (!changed.has("previewOpen")) return;
+		if (this.previewOpen) OverlayManager.openLayer(this, () => this.closePreview());
+		else OverlayManager.closeLayer(this);
+	}
 	get isImage() {
 		return !!this.url && !!this.type?.startsWith("image/");
 	}

package/dist/components/blocks/UFileBlock.styles.js

@@ -138,7 +138,7 @@ var styles = css`
   .preview-overlay {
     position: fixed;
     inset: 0;
-    z-index: 9999;
+    z-index: var(--u-layer-overlay, 9999);
     display: flex;
     flex-direction: column;
     background: rgba(0, 0, 0, 0.92);

package/dist/components/blocks/UMarkedBlock.d.ts

@@ -13,6 +13,8 @@ import { ReferenceCitation } from '../../types/References.js';
  * - 마크다운 링크/이미지(`[..](href)`, `![..](src)`, autolink)의 href/src는
  *   `escapeHtmlHref`로 protocol을 검사합니다(javascript:/data:/vbscript: 차단) —
  *   marked 자신은 URL을 encodeURI할 뿐 protocol을 걸러내지 않습니다.
+ * - 이미지 src는 그 위에 출처 정책(`setAllowedImagePrefixes`)을 거칩니다 — 막힌 이미지는
+ *   요청하지 않고 대체 텍스트로 그립니다(이미지 URL은 데이터 반출 경로다).
  * - 테이블 셀 인라인 콘텐츠(renderTable)도 위 두 규칙과 같은 렌더러 설정을 공유합니다
  *   — `Parser.parseInline`을 옵션 없이 호출하면 기본(비-sanitize) 렌더러로 되돌아가므로
  *   반드시 `this.parser.defaults`를 함께 넘겨야 합니다.
@@ -30,6 +32,7 @@ export declare class UMarkedBlock extends UElement {
     private queuedTimer?;
     private streaming;
     private streamingTimer?;
+    connectedCallback(): void;
     disconnectedCallback(): void;
     protected shouldUpdate(_changedProperties: PropertyValues): boolean;
     protected willUpdate(changedProperties: PropertyValues): void;
@@ -60,7 +63,11 @@ export declare class UMarkedBlock extends UElement {
      * URL을 encodeURI할 뿐 protocol을 걸러내지 않는다.
      */
     private renderLink;
-    /** 마크다운 이미지의 src도 `renderLink`와 동일하게 protocol을 검사합니다. */
+    /**
+     * 마크다운 이미지의 src도 `renderLink`와 동일하게 protocol을 검사하고, 이미지 출처 정책
+     * (`setAllowedImagePrefixes`)에 대어 봅니다. 막힌 이미지는 `<img>` 를 만들지 않는다 —
+     * 요청 자체가 반출 경로이므로 대체 텍스트만 그린다.
+     */
     private renderImage;
     /**
      * 인용/출처 참조객체가 있을때 ref 태그 HTML을 this.placeholder에 보관하고