@miethe/ui 0.3.0 → 0.6.0

package/dist/components/content-viewer/plugins/rehypeExternalLinks.js

@@ -0,0 +1,79 @@
+/**
+ * rehypeExternalLinks — shared rehype plugin for external link hardening (PU3-04)
+ *
+ * Adds `target="_blank"` and `rel="noopener noreferrer"` to every `<a>` element
+ * whose `href` is an absolute URL with an http, https, or mailto scheme.
+ *
+ * This plugin is intentionally written as a pure unified/rehype tree visitor so
+ * it works on both the markdown pipeline (via ReactMarkdown's `rehypePlugins`)
+ * and the HTML pipeline (unified + rehypeParse + this plugin + rehype-sanitize
+ * + rehypeStringify). A single implementation avoids per-component duplication.
+ *
+ * Scheme detection uses a strict allowlist: `http:`, `https:`, `mailto:`.
+ * Protocol-relative URLs (`//example.com`) are also treated as external.
+ *
+ * Note: The markdown path also uses the `components.a` override in
+ * `buildComponentMap()` for link hardening because ReactMarkdown does not
+ * thread rehype node attributes through to rendered anchors. The `components.a`
+ * override is kept for the markdown path; this plugin is the canonical
+ * implementation used for the HTML path and can be tested in isolation.
+ */
+import { visit } from 'unist-util-visit';
+// ---------------------------------------------------------------------------
+// Helper
+// ---------------------------------------------------------------------------
+// Schemes treated as "external" — anything else (relative, #anchor, data:, etc.)
+// is left unmodified.
+const EXTERNAL_SCHEMES = new Set(['http:', 'https:', 'mailto:']);
+/**
+ * Returns true if `href` should be treated as an external link.
+ * Protocol-relative URLs (starting with `//`) are also considered external.
+ */
+export function isExternalHref(href) {
+    if (href.startsWith('//'))
+        return true;
+    try {
+        const url = new URL(href);
+        return EXTERNAL_SCHEMES.has(url.protocol);
+    }
+    catch {
+        // Not an absolute URL — treat as relative/internal
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// Plugin
+// ---------------------------------------------------------------------------
+/**
+ * Unified/rehype plugin that adds `target="_blank"` and
+ * `rel="noopener noreferrer"` to external `<a>` elements.
+ *
+ * Usage (HTML pipeline):
+ * ```ts
+ * unified()
+ *   .use(rehypeParse, { fragment: true })
+ *   .use(rehypeExternalLinks)
+ *   .use(rehypeSanitize)   // sanitize AFTER link attrs are set (allowlist includes rel/target)
+ *   .use(rehypeStringify)
+ *   .process(htmlString);
+ * ```
+ */
+export const rehypeExternalLinks = () => {
+    return (tree) => {
+        visit(tree, 'element', (node) => {
+            const el = node;
+            if (el.tagName !== 'a')
+                return;
+            const href = el.properties?.['href'];
+            if (typeof href !== 'string')
+                return;
+            if (isExternalHref(href)) {
+                el.properties = el.properties ?? {};
+                el.properties['target'] = '_blank';
+                el.properties['rel'] = 'noopener noreferrer';
+            }
+        });
+    };
+};
+export default rehypeExternalLinks;
+//# sourceMappingURL=rehypeExternalLinks.js.map

package/dist/components/content-viewer/plugins/rehypeExternalLinks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehypeExternalLinks.js","sourceRoot":"","sources":["../../../../src/components/content-viewer/plugins/rehypeExternalLinks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAwBzC,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,iFAAiF;AACjF,sBAAsB;AACtB,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,OAAO,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAyB,GAA0B,EAAE;IACnF,OAAO,CAAC,IAAc,EAAE,EAAE;QACxB,KAAK,CAAC,IAAmC,EAAE,SAAS,EAAE,CAAC,IAAc,EAAE,EAAE;YACvE,MAAM,EAAE,GAAG,IAAmB,CAAC;YAC/B,IAAI,EAAE,CAAC,OAAO,KAAK,GAAG;gBAAE,OAAO;YAE/B,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO;YAErC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC;gBACpC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;gBACnC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,qBAAqB,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/dist/components/content-viewer/plugins/rehypeHeadingIds.d.ts

@@ -0,0 +1,37 @@
+/**
+ * rehypeHeadingIds — auto-generate `id` attributes on heading elements.
+ *
+ * Implements OQ-UCV-D / A-UCV-08 (generateHeadingIds prop, default true).
+ *
+ * Algorithm:
+ * 1. Walk the hast tree for h1–h6 elements.
+ * 2. Extract plain text content by recursively collecting Text node values.
+ * 3. Slugify the text using a GitHub-compatible slug algorithm:
+ *    - Lowercase
+ *    - Replace non-alphanumeric (non-space) chars with nothing
+ *    - Replace spaces with hyphens
+ *    - Strip leading/trailing hyphens
+ * 4. Deduplicate: if the slug already exists, append `-1`, `-2`, … until unique.
+ * 5. Set `id` on the element (skipping elements that already have an `id`).
+ *
+ * The deduplication counter is per-document (plugin instance). Each page render
+ * creates a fresh plugin instance via `createHeadingIdsPlugin()`.
+ *
+ * @module rehypeHeadingIds
+ */
+import type { Root } from 'hast';
+export { slugify } from './slugify';
+/**
+ * Create a rehype plugin that adds `id` attributes to h1–h6 elements.
+ *
+ * A fresh plugin instance (and thus a fresh deduplication map) must be created
+ * for each render to avoid cross-render contamination.
+ *
+ * @example
+ * ```ts
+ * const headingIdsPlugin = createHeadingIdsPlugin();
+ * // pass to ReactMarkdown rehypePlugins
+ * ```
+ */
+export declare function createHeadingIdsPlugin(): () => (tree: Root) => void;
+//# sourceMappingURL=rehypeHeadingIds.d.ts.map

package/dist/components/content-viewer/plugins/rehypeHeadingIds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehypeHeadingIds.d.ts","sourceRoot":"","sources":["../../../../src/components/content-viewer/plugins/rehypeHeadingIds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,IAAI,EAA8C,MAAM,MAAM,CAAC;AAI7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2BpC;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAwBnE"}

package/dist/components/content-viewer/plugins/rehypeHeadingIds.js

@@ -0,0 +1,82 @@
+/**
+ * rehypeHeadingIds — auto-generate `id` attributes on heading elements.
+ *
+ * Implements OQ-UCV-D / A-UCV-08 (generateHeadingIds prop, default true).
+ *
+ * Algorithm:
+ * 1. Walk the hast tree for h1–h6 elements.
+ * 2. Extract plain text content by recursively collecting Text node values.
+ * 3. Slugify the text using a GitHub-compatible slug algorithm:
+ *    - Lowercase
+ *    - Replace non-alphanumeric (non-space) chars with nothing
+ *    - Replace spaces with hyphens
+ *    - Strip leading/trailing hyphens
+ * 4. Deduplicate: if the slug already exists, append `-1`, `-2`, … until unique.
+ * 5. Set `id` on the element (skipping elements that already have an `id`).
+ *
+ * The deduplication counter is per-document (plugin instance). Each page render
+ * creates a fresh plugin instance via `createHeadingIdsPlugin()`.
+ *
+ * @module rehypeHeadingIds
+ */
+import { visit } from 'unist-util-visit';
+import { slugify } from './slugify';
+export { slugify } from './slugify';
+// ---------------------------------------------------------------------------
+// Slug helpers
+// ---------------------------------------------------------------------------
+const HEADING_TAGS = new Set(['h1', 'h2', 'h3', 'h4', 'h5', 'h6']);
+/**
+ * Extract plain text from a hast node by recursively collecting text nodes.
+ */
+function extractText(nodes) {
+    let text = '';
+    for (const node of nodes) {
+        if (node.type === 'text') {
+            text += node.value;
+        }
+        else if ('children' in node && Array.isArray(node.children)) {
+            text += extractText(node.children);
+        }
+    }
+    return text;
+}
+// ---------------------------------------------------------------------------
+// Plugin factory
+// ---------------------------------------------------------------------------
+/**
+ * Create a rehype plugin that adds `id` attributes to h1–h6 elements.
+ *
+ * A fresh plugin instance (and thus a fresh deduplication map) must be created
+ * for each render to avoid cross-render contamination.
+ *
+ * @example
+ * ```ts
+ * const headingIdsPlugin = createHeadingIdsPlugin();
+ * // pass to ReactMarkdown rehypePlugins
+ * ```
+ */
+export function createHeadingIdsPlugin() {
+    return function rehypeHeadingIdsPlugin() {
+        return function transformer(tree) {
+            const seen = new Map();
+            visit(tree, 'element', (node) => {
+                if (!HEADING_TAGS.has(node.tagName))
+                    return;
+                // Skip elements that already have an id
+                if (node.properties?.id)
+                    return;
+                const rawText = extractText(node.children);
+                const base = slugify(rawText);
+                if (!base)
+                    return;
+                // Deduplicate
+                const count = seen.get(base) ?? 0;
+                const id = count === 0 ? base : `${base}-${count}`;
+                seen.set(base, count + 1);
+                node.properties = { ...node.properties, id };
+            });
+        };
+    };
+}
+//# sourceMappingURL=rehypeHeadingIds.js.map

package/dist/components/content-viewer/plugins/rehypeHeadingIds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rehypeHeadingIds.js","sourceRoot":"","sources":["../../../../src/components/content-viewer/plugins/rehypeHeadingIds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnE;;GAEG;AACH,SAAS,WAAW,CAAC,KAAkD;IACrE,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,IAAK,IAAa,CAAC,KAAK,CAAC;QAC/B,CAAC;aAAM,IAAI,UAAU,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,QAAyC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,SAAS,sBAAsB;QACpC,OAAO,SAAS,WAAW,CAAC,IAAU;YACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;YAEvC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE;gBACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,OAAO;gBAE5C,wCAAwC;gBACxC,IAAI,IAAI,CAAC,UAAU,EAAE,EAAE;oBAAE,OAAO;gBAEhC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAyC,CAAC,CAAC;gBAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9B,IAAI,CAAC,IAAI;oBAAE,OAAO;gBAElB,cAAc;gBACd,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;gBACnD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAE1B,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/components/content-viewer/plugins/remarkCallouts.d.ts

@@ -0,0 +1,39 @@
+/**
+ * remarkCallouts — custom remark plugin
+ *
+ * Transforms `:::type` container directives produced by `remark-directive`
+ * into custom HAST elements that ReactMarkdown's `components` map can render.
+ *
+ * Directive syntax:
+ * ```markdown
+ * ::: note
+ * Content here.
+ * :::
+ * ```
+ *
+ * The plugin visits `containerDirective` nodes whose `name` matches one of
+ * the recognised callout types (note, reference, warning, info).  It rewrites
+ * the node in-place so that the mdast → hast bridge produces a custom element
+ * name (e.g. `callout-note`) which ReactMarkdown maps to a JSX component.
+ *
+ * Implementation note: remark-directive (v2) produces mdast nodes of type
+ * `containerDirective`.  We traverse the tree manually to avoid importing
+ * `unist-util-visit` (not in the package's direct deps) while keeping the
+ * plugin zero-dependency beyond what remark-directive already provides.
+ */
+/** Recognised callout directive names */
+declare const CALLOUT_TYPES: Set<string>;
+/**
+ * Remark plugin: walk the tree, find container directives that match a known
+ * callout type, and annotate them with hast properties so ReactMarkdown maps
+ * them to the correct callout component.
+ *
+ * ReactMarkdown uses `node.data.hName` as the element tag name and
+ * `node.data.hProperties` as the element's props.  By setting `hName` to
+ * `"callout-{type}"` we can register a component for each type in the
+ * `components` map without name collisions with standard HTML elements.
+ */
+declare function remarkCallouts(): (tree: Record<string, unknown>) => void;
+export default remarkCallouts;
+export { CALLOUT_TYPES };
+//# sourceMappingURL=remarkCallouts.d.ts.map

package/dist/components/content-viewer/plugins/remarkCallouts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remarkCallouts.d.ts","sourceRoot":"","sources":["../../../../src/components/content-viewer/plugins/remarkCallouts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,yCAAyC;AACzC,QAAA,MAAM,aAAa,aAA4D,CAAC;AAyBhF;;;;;;;;;GASG;AACH,iBAAS,cAAc,KACb,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,IAAI,CAsB7C;AAED,eAAe,cAAc,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/components/content-viewer/plugins/remarkCallouts.js

@@ -0,0 +1,77 @@
+/**
+ * remarkCallouts — custom remark plugin
+ *
+ * Transforms `:::type` container directives produced by `remark-directive`
+ * into custom HAST elements that ReactMarkdown's `components` map can render.
+ *
+ * Directive syntax:
+ * ```markdown
+ * ::: note
+ * Content here.
+ * :::
+ * ```
+ *
+ * The plugin visits `containerDirective` nodes whose `name` matches one of
+ * the recognised callout types (note, reference, warning, info).  It rewrites
+ * the node in-place so that the mdast → hast bridge produces a custom element
+ * name (e.g. `callout-note`) which ReactMarkdown maps to a JSX component.
+ *
+ * Implementation note: remark-directive (v2) produces mdast nodes of type
+ * `containerDirective`.  We traverse the tree manually to avoid importing
+ * `unist-util-visit` (not in the package's direct deps) while keeping the
+ * plugin zero-dependency beyond what remark-directive already provides.
+ */
+/** Recognised callout directive names */
+const CALLOUT_TYPES = new Set(['note', 'reference', 'warning', 'info']);
+/**
+ * Minimal recursive visitor — walks the mdast tree and invokes `visitor`
+ * for every node whose `type` matches `nodeType`.
+ */
+function visitAll(tree, nodeType, visitor) {
+    if (!tree || typeof tree !== 'object')
+        return;
+    if (tree['type'] === nodeType) {
+        visitor(tree);
+    }
+    const children = tree['children'];
+    if (Array.isArray(children)) {
+        for (const child of children) {
+            visitAll(child, nodeType, visitor);
+        }
+    }
+}
+/**
+ * Remark plugin: walk the tree, find container directives that match a known
+ * callout type, and annotate them with hast properties so ReactMarkdown maps
+ * them to the correct callout component.
+ *
+ * ReactMarkdown uses `node.data.hName` as the element tag name and
+ * `node.data.hProperties` as the element's props.  By setting `hName` to
+ * `"callout-{type}"` we can register a component for each type in the
+ * `components` map without name collisions with standard HTML elements.
+ */
+function remarkCallouts() {
+    return (tree) => {
+        visitAll(tree, 'containerDirective', (node) => {
+            const name = node['name']?.toLowerCase();
+            if (!name || !CALLOUT_TYPES.has(name))
+                return;
+            const calloutType = name;
+            // Ensure data bag exists
+            if (!node['data'] || typeof node['data'] !== 'object') {
+                node['data'] = {};
+            }
+            const data = node['data'];
+            // Map to a custom element name that ReactMarkdown's components prop can target.
+            // Using lowercase kebab-case avoids conflicts with standard HTML elements.
+            data['hName'] = `callout-${calloutType}`;
+            data['hProperties'] = {
+                ...(data['hProperties'] ?? {}),
+                'data-callout-type': calloutType,
+            };
+        });
+    };
+}
+export default remarkCallouts;
+export { CALLOUT_TYPES };
+//# sourceMappingURL=remarkCallouts.js.map

package/dist/components/content-viewer/plugins/remarkCallouts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remarkCallouts.js","sourceRoot":"","sources":["../../../../src/components/content-viewer/plugins/remarkCallouts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,yCAAyC;AACzC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhF;;;GAGG;AACH,SAAS,QAAQ,CACf,IAA6B,EAC7B,QAAgB,EAChB,OAAgD;IAEhD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO;IAE9C,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,QAAQ,CAAC,KAAgC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,cAAc;IACrB,OAAO,CAAC,IAA6B,EAAQ,EAAE;QAC7C,QAAQ,CAAC,IAAI,EAAE,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE;YAC5C,MAAM,IAAI,GAAI,IAAI,CAAC,MAAM,CAAwB,EAAE,WAAW,EAAE,CAAC;YACjE,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO;YAE9C,MAAM,WAAW,GAAG,IAAmB,CAAC;YAExC,yBAAyB;YACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACpB,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAA4B,CAAC;YAErD,gFAAgF;YAChF,2EAA2E;YAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,WAAW,WAAW,EAAE,CAAC;YACzC,IAAI,CAAC,aAAa,CAAC,GAAG;gBACpB,GAAG,CAAE,IAAI,CAAC,aAAa,CAA6B,IAAI,EAAE,CAAC;gBAC3D,mBAAmB,EAAE,WAAW;aACjC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,eAAe,cAAc,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/components/content-viewer/plugins/slugify.d.ts

@@ -0,0 +1,24 @@
+/**
+ * GitHub-compatible heading slug utility.
+ *
+ * Exported separately from rehypeHeadingIds so consumers can:
+ * 1. Import slugify without pulling in the full hast/unist dependency graph.
+ * 2. Test the slug algorithm in Jest without ESM transformation issues.
+ *
+ * Algorithm:
+ * - Lowercase the text
+ * - Remove characters that are not word chars ([\w]), hyphens, or spaces
+ * - Replace whitespace runs with a single hyphen
+ * - Collapse multiple consecutive hyphens
+ * - Strip leading and trailing hyphens
+ */
+/**
+ * Produce a GitHub-compatible URL slug from a heading text string.
+ *
+ * @example
+ * slugify('Hello World')       // → 'hello-world'
+ * slugify('API Reference')     // → 'api-reference'
+ * slugify('What is @miethe?')  // → 'what-is-miethe'
+ */
+export declare function slugify(text: string): string;
+//# sourceMappingURL=slugify.d.ts.map

package/dist/components/content-viewer/plugins/slugify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slugify.d.ts","sourceRoot":"","sources":["../../../../src/components/content-viewer/plugins/slugify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO5C"}

package/dist/components/content-viewer/plugins/slugify.js

@@ -0,0 +1,31 @@
+/**
+ * GitHub-compatible heading slug utility.
+ *
+ * Exported separately from rehypeHeadingIds so consumers can:
+ * 1. Import slugify without pulling in the full hast/unist dependency graph.
+ * 2. Test the slug algorithm in Jest without ESM transformation issues.
+ *
+ * Algorithm:
+ * - Lowercase the text
+ * - Remove characters that are not word chars ([\w]), hyphens, or spaces
+ * - Replace whitespace runs with a single hyphen
+ * - Collapse multiple consecutive hyphens
+ * - Strip leading and trailing hyphens
+ */
+/**
+ * Produce a GitHub-compatible URL slug from a heading text string.
+ *
+ * @example
+ * slugify('Hello World')       // → 'hello-world'
+ * slugify('API Reference')     // → 'api-reference'
+ * slugify('What is @miethe?')  // → 'what-is-miethe'
+ */
+export function slugify(text) {
+    return text
+        .toLowerCase()
+        .replace(/[^\w\s-]/g, '') // remove non-word, non-space, non-hyphen chars
+        .replace(/[\s]+/g, '-') // spaces → hyphens
+        .replace(/-{2,}/g, '-') // collapse multiple consecutive hyphens
+        .replace(/^-+|-+$/g, ''); // strip leading/trailing hyphens
+}
+//# sourceMappingURL=slugify.js.map

package/dist/components/content-viewer/plugins/slugify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slugify.js","sourceRoot":"","sources":["../../../../src/components/content-viewer/plugins/slugify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAG,+CAA+C;SAC1E,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAM,mBAAmB;SAC/C,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAM,wCAAwC;SACpE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAI,iCAAiC;AAClE,CAAC"}

package/dist/components/content-viewer/sanitize.d.ts

@@ -0,0 +1,75 @@
+/**
+ * HTML sanitization for ArticleViewer — PU3-02 / PU3-03
+ *
+ * Two sanitization paths, selected via the `useDOMPurify` prop:
+ *
+ * 1. **Default (rehype-sanitize)** — unified pipeline:
+ *    `rehypeParse → rehypeExternalLinks → rehypeSanitize(schema) → rehypeStringify`
+ *    Uses GitHub's default allowlist (`defaultSchema`) with minor additions for
+ *    callout div wrappers (class attr) and standard data attributes.
+ *
+ * 2. **Optional (DOMPurify)** — dynamically imports `isomorphic-dompurify`.
+ *    `isomorphic-dompurify` is NOT a hard dependency; it must be installed by the
+ *    consumer. If unavailable, falls back to path 1 with a console warning.
+ *
+ * Both paths:
+ * - Strip `<script>`, event handler attributes (`on*`), `javascript:` and unsafe
+ *   `data:` URLs, `<iframe>`, `<object>`, `<embed>`, `<form>`, `<base>`.
+ * - Preserve safe HTML: headings, paragraphs, lists, blockquotes, tables,
+ *   `<code>`, `<pre>`, `<a>` (http/https/mailto href), `<img>` (http/https src),
+ *   `<div>`, `<span>` (with class), `<strong>`, `<em>`, `<del>`, `<details>`,
+ *   `<summary>`, `<figure>`, `<figcaption>`, `<hr>`, `<br>`.
+ * - Apply external link hardening (`target="_blank" rel="noopener noreferrer"`).
+ *
+ * ## Custom schema rationale
+ *
+ * `rehype-sanitize`'s `defaultSchema` (mirroring GitHub's allowlist) is strict
+ * enough for most use cases. We extend it to allow:
+ * - `class` on `div` and `span` — callout wrappers use `data-callout-type` and
+ *   Tailwind utility classes.
+ * - `data-callout-type` on `div` — semantic attribute written by the remark
+ *   callout plugin.
+ * - `id` on headings — anchor links in compiled wiki documents.
+ * - `rel` and `target` on `a` — preserved after the external-link plugin sets
+ *   them (rehype-sanitize would otherwise strip `target`).
+ *
+ * ## Allowlist vs blocklist
+ *
+ * We use an **allowlist** (default-deny) approach — only explicitly listed tags
+ * and attributes pass through. This is safer than blocklist-based sanitization
+ * which requires enumerating every possible XSS vector.
+ */
+import type { Options as SanitizeSchema } from 'rehype-sanitize';
+export declare const ARTICLE_VIEWER_SCHEMA: SanitizeSchema;
+/**
+ * Sanitize an HTML string using `rehype-sanitize@6`.
+ *
+ * Pipeline: rehypeParse → rehypeExternalLinks → rehypeSanitize → rehypeStringify
+ */
+export declare function sanitizeWithRehype(html: string): string;
+/**
+ * Sanitize an HTML string, preferring DOMPurify if available (async).
+ *
+ * On first call it may do a dynamic import; subsequent calls use the cache.
+ * If DOMPurify is unavailable, falls back to `sanitizeWithRehype`.
+ */
+export declare function sanitizeWithDOMPurify(html: string): Promise<string>;
+/**
+ * Synchronously sanitize `html`.
+ *
+ * When `useDOMPurify=true` and DOMPurify has already been loaded (warm cache),
+ * uses DOMPurify. If the cache is cold (first render), falls back to
+ * rehype-sanitize synchronously and triggers the async load in the background
+ * so subsequent renders can use DOMPurify.
+ */
+export declare function sanitizeHtml(html: string, opts: {
+    useDOMPurify: boolean;
+}): string;
+/**
+ * Warm the DOMPurify cache. Call this once at app startup if you plan to use
+ * `useDOMPurify={true}` to avoid the rehype fallback on the first render.
+ */
+export declare function warmDOMPurifyCache(): Promise<void>;
+/** Exposed for testing — resets the module-level load state */
+export declare function _resetDOMPurifyCache(): void;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/components/content-viewer/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/components/content-viewer/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAMH,OAAO,KAAK,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAoCjE,eAAO,MAAM,qBAAqB,EAAE,cAiBnC,CAAC;AAmEF;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGvD;AAqCD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBzE;AAMD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE;IAAE,YAAY,EAAE,OAAO,CAAA;CAAE,GAC9B,MAAM,CAuBR;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAExD;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,IAAI,IAAI,CAG3C"}